@morehao/dsh-plugin-kit 0.2.1 → 0.3.1

package/dist/http.js

@@ -43,8 +43,48 @@ async function readJsonBody(request, options = {}) {
   }
   return value;
 }
+function createRouteHandler(options) {
+  const maxBodyBytes = options.maxBodyBytes ?? 512 * 1024;
+  const logger = options.logger ?? (() => {
+  });
+  const prefix = options.prefix;
+  return async (rawRequest, rawResponse) => {
+    const request = rawRequest;
+    const response = rawResponse;
+    if (!hasHeader(request, options.header)) {
+      sendJson(response, 403, { ok: false, code: "FORBIDDEN", message: `\u7F3A\u5C11 ${options.header}: 1 \u5934` });
+      return;
+    }
+    const url = new URL(request.url ?? "/", "http://127.0.0.1");
+    const pathname = url.pathname.startsWith(prefix) ? url.pathname.slice(prefix.length) || "/" : url.pathname;
+    const method = (request.method ?? "GET").toUpperCase();
+    try {
+      const body = method === "GET" || method === "HEAD" ? {} : await readJsonBody(request, { maxBytes: maxBodyBytes });
+      const result = await options.dispatch({ request, url, method, pathname, body });
+      if (response.writableEnded !== true) {
+        sendJson(response, 200, result === void 0 ? { ok: true } : { ok: true, ...result });
+      }
+    } catch (error) {
+      if (response.writableEnded === true) return;
+      const mapped = options.onError?.(error);
+      if (mapped !== void 0) {
+        sendJson(response, mapped.status, {
+          ok: false,
+          ...mapped.code === void 0 ? {} : { code: mapped.code },
+          message: mapped.message,
+          ...mapped.extra === void 0 ? {} : mapped.extra
+        });
+        return;
+      }
+      const message = error instanceof Error ? error.message : String(error);
+      logger("route.error", { method, pathname, message });
+      sendJson(response, 500, { ok: false, code: "INTERNAL", message });
+    }
+  };
+}
 export {
   HttpError,
+  createRouteHandler,
   hasHeader,
   readJsonBody,
   sendJson

package/dist/meta.d.ts

@@ -0,0 +1,28 @@
+interface PluginMetaInfo {
+    name: string;
+    version: string;
+    /** 规范化后的 `https://github.com/owner/repo`；解析不了则缺省。 */
+    repository?: string;
+    /** `owner/repo` 短名；解析不了为 null。 */
+    repo: string | null;
+}
+interface ReadFileSyncLike {
+    (path: string | URL): string;
+}
+interface CreatePluginMetaOptions {
+    /** `new URL('../package.json', import.meta.url)` 这类导入地址。 */
+    pkgUrl: URL | string;
+    defaultName?: string;
+    /** 注入读文件（测试/奇特环境）；默认 `node:fs` readFileSync。 */
+    readFileSync?: ReadFileSyncLike;
+}
+/** 读一次 package.json，产出插件身份；读失败用 defaultName + `0.0.0` 兜底。 */
+declare function createPluginMeta(options: CreatePluginMetaOptions): PluginMetaInfo;
+interface ReadInstalledVersionOptions {
+    pkgUrl: URL | string;
+    readFileSync?: ReadFileSyncLike;
+}
+/** 每次重读 package.json 的 version（更新插件后同进程能读到新值）；失败 → ''。 */
+declare function readInstalledVersion(options: ReadInstalledVersionOptions): string;
+
+export { type CreatePluginMetaOptions, type PluginMetaInfo, type ReadFileSyncLike, type ReadInstalledVersionOptions, createPluginMeta, readInstalledVersion };

package/dist/meta.js

@@ -0,0 +1,82 @@
+// src/meta.ts
+import { readFileSync as fsReadFileSync } from "fs";
+
+// src/semver.ts
+import semver from "semver";
+
+// src/github.ts
+var GITHUB_HOST = "github.com";
+var DEFAULT_TTL_MS = 10 * 60 * 1e3;
+function normalizeRepositoryUrl(value) {
+  if (typeof value !== "string") return void 0;
+  let url = value.trim();
+  if (url === "") return void 0;
+  url = url.replace(/^git\+/i, "");
+  const ssh = /^git@github\.com:([^/]+)\/(.+?)(?:\.git)?$/i.exec(url);
+  if (ssh !== null) url = `https://github.com/${ssh[1]}/${ssh[2]}`;
+  url = url.replace(/\.git$/i, "");
+  try {
+    const parsed = new URL(url);
+    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return void 0;
+    if (parsed.hostname.toLowerCase() !== GITHUB_HOST) return void 0;
+    const pathname = parsed.pathname.replace(/\/+$/, "");
+    if (pathname === "") return void 0;
+    return `https://github.com${pathname}`;
+  } catch {
+    return void 0;
+  }
+}
+function repoSlug(value) {
+  if (typeof value !== "string") return null;
+  const text = value.trim();
+  if (text === "") return null;
+  if (/^[\w.-]+\/[\w.-]+$/.test(text)) return text;
+  const normalized = normalizeRepositoryUrl(text);
+  if (normalized === void 0) return null;
+  const pathname = normalized.slice(`https://github.com/`.length);
+  return pathname === "" ? null : pathname;
+}
+
+// src/meta.ts
+function defaultReadFileSync(path) {
+  return fsReadFileSync(path, "utf8");
+}
+function createPluginMeta(options) {
+  const readFileSync = options.readFileSync ?? defaultReadFileSync;
+  const fallbackName = options.defaultName ?? "";
+  try {
+    const parsed = JSON.parse(readFileSync(options.pkgUrl));
+    if (parsed === null || typeof parsed !== "object") {
+      return { name: fallbackName, version: "0.0.0", repo: null };
+    }
+    const pkg = parsed;
+    const rawRepo = typeof pkg.repository === "string" ? pkg.repository : pkg.repository !== null && typeof pkg.repository === "object" ? pkg.repository.url : void 0;
+    const repository = normalizeRepositoryUrl(rawRepo);
+    const repo = repoSlug(repository);
+    return {
+      name: typeof pkg.name === "string" && pkg.name !== "" ? pkg.name : fallbackName,
+      version: typeof pkg.version === "string" && pkg.version !== "" ? pkg.version : "0.0.0",
+      ...repository === void 0 ? {} : { repository },
+      repo
+    };
+  } catch {
+    return { name: fallbackName, version: "0.0.0", repo: null };
+  }
+}
+function readInstalledVersion(options) {
+  const readFileSync = options.readFileSync ?? defaultReadFileSync;
+  try {
+    const parsed = JSON.parse(readFileSync(options.pkgUrl));
+    if (parsed !== null && typeof parsed === "object") {
+      const version = parsed.version;
+      if (typeof version === "string") return version.trim();
+    }
+    return "";
+  } catch {
+    return "";
+  }
+}
+export {
+  createPluginMeta,
+  readInstalledVersion
+};

package/dist/state.d.ts

@@ -0,0 +1,32 @@
+/** `$DSH_HOME`（去空白、`path.resolve`）→ 缺省 `homedir()/.dsh`。与 dsh-core 及三仓既有实现一致。 */
+declare function resolveDshHome(env?: NodeJS.ProcessEnv): string;
+interface JsonStoreOptions<T> {
+    /** 状态目录（绝对路径）。调用方用 `resolveDshHome` + 插件目录名拼。 */
+    dir: string;
+    /** 文件名，如 `'state.json'`。 */
+    file: string;
+    /** 读失败 / 缺失 / 非对象时返回的默认值（工厂函数，避免共享可变引用）。 */
+    fallback: () => T;
+    /** 写回时的文件权限位；默认 0o600（状态文件默认私有）。 */
+    mode?: number;
+    /** mkdir 的目录权限；默认 0o700。 */
+    dirMode?: number;
+    /** 测试注入：默认读真实文件。 */
+    readFile?: (path: string) => Promise<string>;
+    readFileSync?: (path: string) => string;
+}
+interface JsonStore<T> {
+    /** 状态文件的绝对路径。 */
+    readonly path: string;
+    /** 同步读：坏文件 / 缺失 / 非对象 → `fallback()`。永不抛。 */
+    read(): T;
+    /** 同步原子写（`writeFileAtomicSync`）。失败抛错。 */
+    write(value: T): void;
+    /** 异步读。 */
+    readAsync(): Promise<T>;
+    /** 异步原子写（`writeFileAtomic`）。失败抛错。 */
+    writeAsync(value: T): Promise<void>;
+}
+declare function createJsonStore<T>(options: JsonStoreOptions<T>): JsonStore<T>;
+
+export { type JsonStore, type JsonStoreOptions, createJsonStore, resolveDshHome };

package/dist/state.js

@@ -0,0 +1,186 @@
+// src/state.ts
+import { mkdirSync, promises as fsp2, readFileSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+
+// src/fs.ts
+import fs from "fs";
+import fsp from "fs/promises";
+import path from "path";
+import { randomBytes } from "crypto";
+var WINDOWS_TRANSIENT_RENAME = /* @__PURE__ */ new Set(["EACCES", "EBUSY", "EPERM"]);
+var RENAME_RETRY_DELAYS_MS = [20, 40, 80, 160, 200, 200, 200, 200];
+function resolveMode(file, options) {
+  if (typeof options.mode === "number") return options.mode;
+  try {
+    return fs.statSync(file).mode & 511;
+  } catch {
+    return options.defaultMode ?? 420;
+  }
+}
+function tempPath(dir, base) {
+  return path.join(dir, `.${base}.${process.pid}.${Date.now()}.${randomBytes(4).toString("hex")}.tmp`);
+}
+function sleepSync(ms) {
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+function renameWithRetrySync(from, to) {
+  if (process.platform !== "win32") {
+    fs.renameSync(from, to);
+    return;
+  }
+  for (let attempt = 0; ; attempt += 1) {
+    try {
+      fs.renameSync(from, to);
+      return;
+    } catch (error) {
+      const code = error?.code;
+      if (code === void 0 || !WINDOWS_TRANSIENT_RENAME.has(code) || attempt >= RENAME_RETRY_DELAYS_MS.length) throw error;
+      sleepSync(RENAME_RETRY_DELAYS_MS[attempt]);
+    }
+  }
+}
+function fsyncDirSync(dir) {
+  if (process.platform === "win32") return;
+  try {
+    const dirFd = fs.openSync(dir, "r");
+    try {
+      fs.fsyncSync(dirFd);
+    } finally {
+      fs.closeSync(dirFd);
+    }
+  } catch {
+  }
+}
+function writeFileAtomicSync(file, content, options = {}) {
+  const dir = path.dirname(file);
+  fs.mkdirSync(dir, { recursive: true });
+  const mode = resolveMode(file, options);
+  const tmp = tempPath(dir, path.basename(file));
+  let fd = null;
+  try {
+    fd = fs.openSync(tmp, "wx", mode);
+    fs.writeFileSync(fd, content, "utf8");
+    fs.fsyncSync(fd);
+    fs.closeSync(fd);
+    fd = null;
+    renameWithRetrySync(tmp, file);
+    fsyncDirSync(dir);
+  } catch (error) {
+    if (fd !== null) {
+      try {
+        fs.closeSync(fd);
+      } catch {
+      }
+    }
+    try {
+      fs.rmSync(tmp, { force: true });
+    } catch {
+    }
+    throw error;
+  }
+}
+async function writeFileAtomic(file, content, options = {}) {
+  const dir = path.dirname(file);
+  await fsp.mkdir(dir, { recursive: true });
+  const mode = resolveMode(file, options);
+  const tmp = tempPath(dir, path.basename(file));
+  let handle = null;
+  try {
+    handle = await fsp.open(tmp, "wx", mode);
+    await handle.writeFile(content, "utf8");
+    await handle.sync();
+    await handle.close();
+    handle = null;
+    await fsp.rename(tmp, file);
+    if (process.platform !== "win32") {
+      try {
+        const dirFd = await fsp.open(dir, "r");
+        try {
+          await dirFd.sync();
+        } finally {
+          await dirFd.close();
+        }
+      } catch {
+      }
+    }
+  } catch (error) {
+    if (handle !== null) {
+      try {
+        await handle.close();
+      } catch {
+      }
+    }
+    try {
+      await fsp.rm(tmp, { force: true });
+    } catch {
+    }
+    throw error;
+  }
+}
+
+// src/state.ts
+function resolveDshHome(env = process.env) {
+  const raw = env.DSH_HOME?.trim();
+  return raw !== void 0 && raw !== "" ? raw : join(homedir(), ".dsh");
+}
+function serialize(value) {
+  return `${JSON.stringify(value, null, 2)}
+`;
+}
+function coerce(text, fallback) {
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    return fallback();
+  }
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return fallback();
+  return parsed;
+}
+var defaultReadFileSync = (target) => readFileSync(target, "utf8");
+var defaultReadFile = (target) => fsp2.readFile(target, "utf8");
+function createJsonStore(options) {
+  const file = join(options.dir, options.file);
+  const mode = options.mode ?? 384;
+  const dirMode = options.dirMode ?? 448;
+  const readFileSyncImpl = options.readFileSync ?? defaultReadFileSync;
+  const readFileImpl = options.readFile ?? defaultReadFile;
+  function read() {
+    let text;
+    try {
+      text = readFileSyncImpl(file);
+    } catch {
+      return options.fallback();
+    }
+    return coerce(text, options.fallback);
+  }
+  async function readAsync() {
+    let text;
+    try {
+      text = await readFileImpl(file);
+    } catch {
+      return options.fallback();
+    }
+    return coerce(text, options.fallback);
+  }
+  function write(value) {
+    try {
+      mkdirSync(options.dir, { recursive: true, mode: dirMode });
+    } catch {
+    }
+    writeFileAtomicSync(file, serialize(value), { mode });
+  }
+  async function writeAsync(value) {
+    try {
+      await fsp2.mkdir(options.dir, { recursive: true, mode: dirMode });
+    } catch {
+    }
+    await writeFileAtomic(file, serialize(value), { mode });
+  }
+  return { path: file, read, write, readAsync, writeAsync };
+}
+export {
+  createJsonStore,
+  resolveDshHome
+};

package/dist/update-client.d.ts

@@ -1,4 +1,5 @@
 import { UpdateView, ApplyResult } from './update.js';
+import './exec.js';
 import './profile-RKpxKDlK.js';
 
 /**

package/dist/update.d.ts

@@ -1,3 +1,4 @@
+import { ExecOptions, ExecResult } from './exec.js';
 import { I as InstallKind, H as HostRegistryPlan } from './profile-RKpxKDlK.js';
 export { P as ProfileLike } from './profile-RKpxKDlK.js';
 
@@ -43,7 +44,9 @@ interface PluginMeta {
  * - **装不上要能回退**：宿主 `installBundle` 对已装包会返回 `already-installed`，按官方
  *   更新路径先 remove 再 install；remove 之后 install 失败则尝试装回原版本。
  * - **不重写宿主进程策略**：需要 `pnpm view` 时由调用方注入 `runPnpmView`（进程/环境
- *   白名单是各插件自己的事），本包只做 registry 兜底。
+ *   白名单是各插件自己的事），本包只做 registry 兜底。为免三个插件各抄一遍「读 profile → 拼
+ *   `pnpm view` → 解析 → 校验」，本模块导出 `createPnpmViewRunner` 供直接复用（内部走 `./exec`，
+ *   环境清洗仍由调用方把握；也可注入 `exec` 替换进程策略）。
  * - 更新会把运行中的插件自己卸载，界面会一起消失：全过程落固定事件名，便于事后对账。
  */
 
@@ -109,5 +112,27 @@ interface Updater {
     isApplying(): boolean;
 }
 declare function createPluginUpdater(deps: UpdaterDeps): Updater;
+interface PnpmViewRunnerDeps {
+    /** 取宿主 `profileContext`（提供 `dir` / `packageManager`）；可抛，内部会兜。 */
+    getProfile: () => unknown;
+    /**
+     * 可注入的子进程执行器（默认 `./exec` 的 `spawnCollect`）。
+     * 各插件若要沿用自己更细的进程策略（环境白名单 / 输出上限 / 作业面板旁路），注入即可。
+     */
+    exec?: (command: string, args: string[], options?: ExecOptions) => Promise<ExecResult>;
+    /** 环境来源；默认 `process.env`，内部过 `sanitizedEnv` 清洗。 */
+    env?: NodeJS.ProcessEnv;
+    /** 单个查询超时毫秒；默认 8_000。 */
+    timeoutMs?: number;
+}
+/**
+ * 造一个 `runPnpmView`：用 profile 的包管理器在 profile 目录执行
+ * `pnpm view <spec> version --json`，继承 `.npmrc` 的镜像 / 私源 / token。
+ *
+ * 返回 `(spec) => Promise<string | null>`，与 `UpdaterDeps.runPnpmView` 兼容：
+ * 拿不到 profile.dir / 命令失败 / 输出非法 / 版本不是合法 semver → `null`（交由 registry 兜底）。
+ * 三个插件此前各自手写这段，本工厂与它们的历史行为一致。
+ */
+declare function createPnpmViewRunner(deps: PnpmViewRunnerDeps): (spec: string) => Promise<string | null>;
 
-export { type ApplyResult, HostRegistryPlan, InstallKind, type Logger, type PluginManagerLike, type PluginMeta, PluginUpdateError, type UpdateErrorCode, type UpdateView, type Updater, type UpdaterDeps, createPluginUpdater };
+export { type ApplyResult, HostRegistryPlan, InstallKind, type Logger, type PluginManagerLike, type PluginMeta, PluginUpdateError, type PnpmViewRunnerDeps, type UpdateErrorCode, type UpdateView, type Updater, type UpdaterDeps, createPluginUpdater, createPnpmViewRunner };

package/dist/update.js

@@ -1,3 +1,170 @@
+// src/exec.ts
+import { spawn } from "child_process";
+var ENV_KEYS = [
+  "PATH",
+  "HOME",
+  "USER",
+  "LOGNAME",
+  "SHELL",
+  "TMPDIR",
+  "TMP",
+  "TEMP",
+  "LANG",
+  "LC_ALL",
+  "LC_CTYPE",
+  "SSL_CERT_FILE",
+  "SSL_CERT_DIR",
+  "GIT_AUTHOR_NAME",
+  "GIT_AUTHOR_EMAIL",
+  "GIT_COMMITTER_NAME",
+  "GIT_COMMITTER_EMAIL",
+  "GIT_CONFIG_GLOBAL",
+  "GIT_SSH_COMMAND"
+];
+var PROXY_KEYS = [
+  "HTTP_PROXY",
+  "HTTPS_PROXY",
+  "NO_PROXY",
+  "ALL_PROXY",
+  "http_proxy",
+  "https_proxy",
+  "no_proxy",
+  "all_proxy"
+];
+function sanitizedEnv(source = process.env, extra = {}) {
+  const env = {};
+  for (const key of [...ENV_KEYS, ...PROXY_KEYS]) {
+    const value = source[key];
+    if (typeof value === "string" && value !== "") env[key] = value;
+  }
+  for (const [key, value] of Object.entries(extra)) {
+    if (typeof value === "string" && value !== "") env[key] = value;
+  }
+  return env;
+}
+function keepTail(text, limit) {
+  if (!Number.isFinite(limit) || limit <= 0 || text.length <= limit) return text;
+  return text.slice(text.length - limit);
+}
+async function spawnCollect(command, args = [], options = {}) {
+  const started = Date.now();
+  const timeoutMs = options.timeoutMs ?? 1e4;
+  const abortGraceMs = options.abortGraceMs ?? 2e3;
+  const maxStdout = options.maxStdout ?? 1024 * 1024;
+  const maxStderr = options.maxStderr ?? 1024 * 1024;
+  const maxOutput = options.maxOutput ?? maxStdout + maxStderr;
+  let stdout = "";
+  let stderr = "";
+  let output = "";
+  let timedOut = false;
+  return new Promise((resolve) => {
+    let child;
+    try {
+      child = spawn(command, args, {
+        cwd: options.cwd,
+        env: options.env ?? process.env,
+        stdio: [options.input === void 0 ? "ignore" : "pipe", "pipe", "pipe"],
+        windowsHide: true
+      });
+    } catch (error) {
+      resolve(failureResult(error, started, options.signal?.aborted === true));
+      return;
+    }
+    if (options.input !== void 0) {
+      child.stdin?.on("error", () => void 0);
+      child.stdin?.end(options.input);
+    }
+    let settled = false;
+    let timer;
+    let hardKill;
+    const killTree = (signal) => {
+      try {
+        child.kill(signal);
+      } catch {
+      }
+    };
+    const softKill = () => {
+      killTree("SIGTERM");
+      hardKill = setTimeout(() => killTree("SIGKILL"), abortGraceMs);
+      hardKill.unref?.();
+    };
+    const onAbort = () => softKill();
+    const finish = (code, signal, error) => {
+      if (settled) return;
+      settled = true;
+      if (timer !== void 0) clearTimeout(timer);
+      if (hardKill !== void 0) clearTimeout(hardKill);
+      options.signal?.removeEventListener("abort", onAbort);
+      resolve({
+        code,
+        signal,
+        stdout,
+        stderr,
+        output,
+        timedOut,
+        aborted: options.signal?.aborted === true,
+        durationMs: Date.now() - started,
+        ...error === void 0 ? {} : { error }
+      });
+    };
+    child.stdout?.setEncoding("utf8");
+    child.stdout?.on("data", (chunk) => {
+      stdout = keepTail(stdout + chunk, maxStdout);
+      output = keepTail(output + chunk, maxOutput);
+      try {
+        options.onData?.(chunk, "stdout");
+      } catch {
+      }
+    });
+    child.stderr?.setEncoding("utf8");
+    child.stderr?.on("data", (chunk) => {
+      stderr = keepTail(stderr + chunk, maxStderr);
+      output = keepTail(output + chunk, maxOutput);
+      try {
+        options.onData?.(chunk, "stderr");
+      } catch {
+      }
+    });
+    if (options.signal?.aborted === true) onAbort();
+    else options.signal?.addEventListener("abort", onAbort, { once: true });
+    if (Number.isFinite(timeoutMs) && timeoutMs > 0) {
+      timer = setTimeout(() => {
+        timedOut = true;
+        softKill();
+      }, timeoutMs);
+    }
+    child.on("error", (error) => finish(null, null, error));
+    child.on("close", (code, signalName) => finish(code, signalName));
+  });
+}
+function failureResult(error, started, aborted) {
+  const err = error instanceof Error ? error : new Error(String(error));
+  return {
+    code: null,
+    signal: null,
+    stdout: "",
+    stderr: "",
+    output: err.message,
+    timedOut: false,
+    aborted,
+    durationMs: Date.now() - started,
+    error: err
+  };
+}
+function collectVersionView(result) {
+  if (result.code !== 0) return null;
+  const text = result.stdout.trim();
+  if (text === "") return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    return null;
+  }
+  const value = Array.isArray(parsed) ? parsed[parsed.length - 1] : parsed;
+  return typeof value === "string" && value.trim() !== "" ? value.trim() : null;
+}
+
 // src/registry.ts
 var OFFICIAL_REGISTRY = "https://registry.npmjs.org/";
 var DEFAULT_TIMEOUT_MS = 8e3;
@@ -459,7 +626,38 @@ function createPluginUpdater(deps) {
     isApplying: () => applying
   };
 }
+function createPnpmViewRunner(deps) {
+  const timeoutMs = deps.timeoutMs ?? 8e3;
+  const run = deps.exec ?? spawnCollect;
+  const env = sanitizedEnv(deps.env ?? process.env);
+  return async (spec) => {
+    let profile;
+    try {
+      profile = normalizeProfile(deps.getProfile());
+    } catch {
+      return null;
+    }
+    if (profile === null || typeof profile.dir !== "string" || profile.dir === "") return null;
+    const command = profile.packageManager?.command ?? "pnpm";
+    const prefix = profile.packageManager?.args ?? [];
+    let result;
+    try {
+      result = await run(command, [...prefix, "view", spec, "version", "--json"], {
+        cwd: profile.dir,
+        env,
+        timeoutMs,
+        maxStdout: 64 * 1024,
+        maxStderr: 16 * 1024
+      });
+    } catch {
+      return null;
+    }
+    const version = collectVersionView(result);
+    return version !== null && parseSemver(version) !== void 0 ? version : null;
+  };
+}
 export {
   PluginUpdateError,
-  createPluginUpdater
+  createPluginUpdater,
+  createPnpmViewRunner
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@morehao/dsh-plugin-kit",
-  "version": "0.2.1",
-  "description": "DeepSeek Harness 插件共用工具包：插件自更新引擎（查 npm 最新版 + 经宿主 pluginManager 重装）、headless 客户端控制器与 HTTP 小工具。零 @deepseek-ai 运行时依赖，宿主能力全部注入。",
+  "version": "0.3.1",
+  "description": "DeepSeek Harness 插件共用工具包：插件自更新引擎、headless 客户端控制器、HTTP 小工具与路由 dispatcher、子进程执行、原子写、JSON 状态持久化，以及 GitHub Release 读取与插件身份元数据等通用底座。零 @deepseek-ai 运行时依赖，宿主能力全部注入。",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -22,6 +22,26 @@
       "types": "./dist/http.d.ts",
       "default": "./dist/http.js"
     },
+    "./exec": {
+      "types": "./dist/exec.d.ts",
+      "default": "./dist/exec.js"
+    },
+    "./fs": {
+      "types": "./dist/fs.d.ts",
+      "default": "./dist/fs.js"
+    },
+    "./state": {
+      "types": "./dist/state.d.ts",
+      "default": "./dist/state.js"
+    },
+    "./github": {
+      "types": "./dist/github.d.ts",
+      "default": "./dist/github.js"
+    },
+    "./meta": {
+      "types": "./dist/meta.d.ts",
+      "default": "./dist/meta.js"
+    },
     "./package.json": "./package.json"
   },
   "files": [
@@ -45,7 +65,9 @@
     "typecheck": "tsc --noEmit",
     "test": "node --test \"test/*.test.mjs\"",
     "pretest": "npm run build",
-    "check": "npm run typecheck && npm run build && npm test --ignore-scripts"
+    "check": "npm run typecheck && npm run build && npm test --ignore-scripts",
+    "check:release-notes": "node scripts/smoke-release-notes.mjs",
+    "prepack": "npm run build"
   },
   "devDependencies": {
     "@types/node": "22.20.5",