@rezti/dsh-rez-suite 0.1.65 → 0.1.67

package/CHANGELOG.md

@@ -5,13 +5,19 @@
 升级：
 
 ```bash
-dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.65
+dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.67
 ```
 
 不要用裸 `plugin update`，不要写 `latest`（新 profile 有 24 小时发布冷却，当天可能装不上）。不要装 **0.1.46**（GitHub 子依赖会被 DSH 拦住）。不要装 **0.1.51**（误用 `npm publish` 把 `workspace:` 打进包了）。
 
 
-## 0.1.65 · 2026-09-13
+## 0.1.67 · 2026-09-13
+
+**修 dsh 0.1.5 网页/微信 401。** 官方改成进程级 `?token=` + HttpOnly cookie，裸开 `:3080` 会提示 authentication required；个人微信 bridge 原先 RPC 不带 cookie → `session.create` 401。本版 suite 启动时写 `~/.dsh/dsh-web.url`（完整带 token 地址）；wechat `@0.1.19` 用该文件换 cookie 再调 `/api`。装 **`@0.1.67`** 后重启 `dsh web`，浏览器请打开终端打印的完整 URL（或等价地打开一次该文件里的地址）。
+
+**附：旧 sso 钉死。** 若 profile 仍嵌着旧子包，清 `profiles/web/node_modules` 再装本版。
+
+## 0.1.64 · 2026-09-13
 
 **跟官方 dsh 0.1.5。** `@deepseek-ai/*` 钉到 `0.1.5-rc.2`。设置改用 `ctx.settings.installSection`（不再依赖已删除的 `installSettingsSection` 导出）。凭证读写按 `version: 1` + `refs:`；安装包 `DSH_VERSION=0.1.5-rc.2`。依赖：`sso@0.1.18`、`intent@0.1.6`、`token-manager@0.1.5`、`vision@0.1.4`。员工机请用新 Setup / 重装钉版 dsh 后再 `plugin add` 本版。
 

package/README.md

@@ -2,7 +2,7 @@
 
 雷泽插件的**唯一安装入口**。Odoo / 企微 / HA / TAPD / GSC / 企查查（仅法务助理房间） / 天眼查（仅老板） / 工作区（老板三室 + 全员助理）都由这一包拉齐，不要再逐个 `plugin add`，**不要**再装 `@rezti/dsh-rez-boss-desk`。
 
-发版顺序（必做）：先发 `@rezti/dsh-rez-sso@0.1.17` → `@rezti/dsh-rez-suite@0.1.65`。**发 suite 必须用 `pnpm publish`**（会把 `workspace:` 写成真实版本），不要用 `npm publish`。`@deepseek-ai/*` 钉死 `0.1.5-rc.2`，不要写成 `^`。员工机启动脚本跟 npm 满 24h 的 latest，不必改安装包里的钉死号。看图旁路在设置里二选一：Kimi 开放平台或 Kimi Code（两套 key 不能混用）。
+发版顺序（必做）：先发 `@rezti/dsh-rez-sso@0.1.17` → `@rezti/dsh-rez-suite@0.1.64`。**发 suite 必须用 `pnpm publish`**（会把 `workspace:` 写成真实版本），不要用 `npm publish`。`@deepseek-ai/*` 钉死 `0.1.5-rc.2`，不要写成 `^`。员工机启动脚本跟 npm 满 24h 的 latest，不必改安装包里的钉死号。看图旁路在设置里二选一：Kimi 开放平台或 Kimi Code（两套 key 不能混用）。
 
 设置里选身份后，左侧自己出现对应房间（全员三助理；工程师另加实验室；运营另加设计、发布、电商；老板另加搞钱/产品/运营），不必手动添加工作区。实验室：大模型写 YAML、调 MCP、给下载链接。
 
@@ -12,7 +12,7 @@
 
 ```bash
 # 第一次 / 升级（钉死版本，避开 24h 发布冷却）
-dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.65
+dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.64
 ```
 
 本版改了什么：见 [CHANGELOG.md](./CHANGELOG.md)。

package/cordis.patch.yml

@@ -1,13 +1,15 @@
 # 用户只装这一包：`dsh plugin --profile web add @rezti/dsh-rez-suite`
-# 升级只记这一条：`dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.59`
+# 升级只记这一条：`dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.67`
 # 不要再单独 add 子包，会重复注册。
 #
 # MCP rows are started by the domain plugins after rezSso resolves secrets.
 # Do not list @deepseek-ai/dsh-mcp-client here: empty process.env would spawn
 # nextcloud-mcp-server in a reconnect loop.
+# Resolve packages by name (not nested relative paths) so hoisted / nested
+# profile layouts both work on Linux and Windows.
 - insert:
     - id: rez-sso
-      name: './node_modules/@rezti/dsh-rez-suite/node_modules/@rezti/dsh-rez-sso/lib/index.js'
+      name: '@rezti/dsh-rez-sso'
     - id: rez-token-manager
       name: '@rezti/dsh-rez-token-manager'
     - id: rez-intent

package/lib/client.js

@@ -1011,7 +1011,21 @@ function ChannelTable({ kind, lang }) {
 //#region src/changelog.ts
 const SUITE_CHANGELOG = [
 	{
-		version: "0.1.65",
+		version: "0.1.67",
+		date: "2026-09-13",
+		sections: [{
+			title: {
+				zh: "修 dsh 0.1.5 网页/微信 401",
+				en: "Fix dsh 0.1.5 web/WeChat 401"
+			},
+			items: [{
+				zh: "suite 写入 ~/.dsh/dsh-web.url；wechat@0.1.19 用 ?token= 换 cookie 再 RPC。请装 @0.1.67，重启 dsh web，用终端打印的完整 URL 打开网页。",
+				en: "Suite writes ~/.dsh/dsh-web.url; wechat@0.1.19 exchanges ?token= for a cookie before RPC. Install @0.1.67, restart dsh web, open the full printed URL."
+			}]
+		}]
+	},
+	{
+		version: "0.1.64",
 		date: "2026-09-13",
 		sections: [{
 			title: {

package/lib/index.js

@@ -1,8 +1,8 @@
 import { createRequire } from "node:module";
 import { homedir } from "node:os";
 import { dirname, join, relative } from "node:path";
-import { REZ_CREDENTIAL_REFS, REZ_DEFAULT_CONNECTIONS, REZ_SYSTEMS, lastMcpStartError, loadRezConnections, mergeConnections, readManagedCredential, secretConfigured, startMcpWhenSecret, writeManagedCredential } from "@rezti/dsh-rez-sso";
 import { chmodSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, statSync, writeFileSync } from "node:fs";
+import { REZ_CREDENTIAL_REFS, REZ_DEFAULT_CONNECTIONS, REZ_SYSTEMS, lastMcpStartError, loadRezConnections, mergeConnections, readManagedCredential, secretConfigured, startMcpWhenSecret, writeManagedCredential } from "@rezti/dsh-rez-sso";
 import { spawn, spawnSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { DatabaseSync } from "node:sqlite";
@@ -10185,6 +10185,24 @@ function apply(ctx, config) {
 			}
 		});
 	});
+	ctx.registry.inject(["connection"], (inner) => {
+		const writeAuthUrl = () => {
+			try {
+				const port = ctx.webServer.port;
+				const base = `http://127.0.0.1:${String(port)}`;
+				const url = inner.connection.authenticatedUrl(base);
+				const home = process.env.DSH_HOME ?? join(homedir(), ".dsh");
+				mkdirSync(home, { recursive: true });
+				writeFileSync(join(home, "dsh-web.url"), url + "\n", { mode: 384 });
+			} catch (error) {
+				console.warn("[dsh-rez-suite] could not write dsh-web.url:", error);
+			}
+		};
+		writeAuthUrl();
+		const timer = setInterval(writeAuthUrl, 6e4);
+		timer.unref?.();
+		return () => clearInterval(timer);
+	});
 	sync();
 }
 function joinTokenDb() {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rezti/dsh-rez-suite",
-  "description": "ReZ-TI one-package install for DeepSeek Harness. Update with: dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.65",
-  "version": "0.1.65",
+  "description": "ReZ-TI one-package install for DeepSeek Harness. Update with: dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.67",
+  "version": "0.1.67",
   "type": "module",
   "engines": {
     "node": "^22.19.0 || >=24.0.0"
@@ -38,17 +38,17 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
     "@rezti/dsh-rez-comms": "^0.1.0",
-    "@rezti/dsh-rez-gsc": "^0.1.1",
-    "@rezti/dsh-rez-ha-bridge": "^0.1.9",
+    "@rezti/dsh-rez-gsc": "^0.1.2",
+    "@rezti/dsh-rez-ha-bridge": "^0.1.10",
     "@rezti/dsh-rez-intent": "^0.1.6",
-    "@rezti/dsh-rez-nextcloud": "^0.1.13",
-    "@rezti/dsh-rez-odoo": "^0.1.9",
+    "@rezti/dsh-rez-nextcloud": "^0.1.14",
+    "@rezti/dsh-rez-odoo": "^0.1.10",
     "@rezti/dsh-rez-publish": "^0.1.0",
     "@rezti/dsh-rez-sso": "^0.1.18",
-    "@rezti/dsh-rez-tapd": "^0.1.1",
+    "@rezti/dsh-rez-tapd": "^0.1.2",
     "@rezti/dsh-rez-token-manager": "^0.1.5",
     "@rezti/dsh-rez-vision": "^0.1.4",
-    "@rezti/dsh-rez-wechat": "^0.1.17",
+    "@rezti/dsh-rez-wechat": "^0.1.19",
     "@rezti/dsh-web-file-uploader": "0.2.3",
     "@wecom/cli": "1.1.0",
     "zod": "^4.4.3"

package/src/changelog.ts

@@ -21,7 +21,22 @@ export interface ChangelogRelease {
 
 export const SUITE_CHANGELOG: readonly ChangelogRelease[] = [
   {
-    version: '0.1.65',
+    version: '0.1.67',
+    date: '2026-09-13',
+    sections: [
+      {
+        title: { zh: '修 dsh 0.1.5 网页/微信 401', en: 'Fix dsh 0.1.5 web/WeChat 401' },
+        items: [
+          {
+            zh: 'suite 写入 ~/.dsh/dsh-web.url；wechat@0.1.19 用 ?token= 换 cookie 再 RPC。请装 @0.1.67，重启 dsh web，用终端打印的完整 URL 打开网页。',
+            en: 'Suite writes ~/.dsh/dsh-web.url; wechat@0.1.19 exchanges ?token= for a cookie before RPC. Install @0.1.67, restart dsh web, open the full printed URL.',
+          },
+        ],
+      },
+    ],
+  },
+  {
+    version: '0.1.64',
     date: '2026-09-13',
     sections: [
       {

package/src/index.ts

@@ -10,7 +10,9 @@
 import type { Context } from '@deepseek-ai/cordis'
 import { homedir } from 'node:os'
 import { join } from 'node:path'
+import { mkdirSync, writeFileSync } from 'node:fs'
 import type {} from '@deepseek-ai/dsh-settings'
+import type {} from '@deepseek-ai/dsh-client-connection'
 import z from '@deepseek-ai/schemastery'
 import type {} from '@deepseek-ai/dsh-host-webserver'
 import type {} from '@deepseek-ai/dsh-system-prompt'
@@ -258,6 +260,26 @@ export function apply(ctx: Context, config?: RezConfig): void {
     })
   })
 
+  // dsh 0.1.5+ requires a per-process ?token= URL; write it for the WeChat bridge.
+  ctx.registry.inject(['connection'], (inner) => {
+    const writeAuthUrl = (): void => {
+      try {
+        const port = ctx.webServer.port
+        const base = `http://127.0.0.1:${String(port)}`
+        const url = inner.connection.authenticatedUrl(base)
+        const home = process.env.DSH_HOME ?? join(homedir(), '.dsh')
+        mkdirSync(home, { recursive: true })
+        writeFileSync(join(home, 'dsh-web.url'), url + '\n', { mode: 0o600 })
+      } catch (error) {
+        console.warn('[dsh-rez-suite] could not write dsh-web.url:', error)
+      }
+    }
+    writeAuthUrl()
+    const timer = setInterval(writeAuthUrl, 60_000)
+    timer.unref?.()
+    return () => clearInterval(timer)
+  })
+
   sync()
 }