@rezti/dsh-rez-suite 0.1.66 → 0.1.68

package/CHANGELOG.md

@@ -5,15 +5,17 @@
 升级：
 
 ```bash
-dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.66
+dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.68
 ```
 
 不要用裸 `plugin update`，不要写 `latest`（新 profile 有 24 小时发布冷却，当天可能装不上）。不要装 **0.1.46**（GitHub 子依赖会被 DSH 拦住）。不要装 **0.1.51**（误用 `npm publish` 把 `workspace:` 打进包了）。
 
 
-## 0.1.66 · 2026-09-13
+## 0.1.68 · 2026-09-13
 
-**修 Linux/旧 profile 起不来。** 子包曾钉死旧 `sso@0.1.9/0.1.14/0.1.15`（仍 `import installSettingsSection`），在官方 dsh 0.1.5 必炸。本版子包改依赖 `sso@^0.1.18`；`cordis.patch.yml` 用包名解析 sso（不再用嵌套相对路径）。装 **`@0.1.66`**，并清 `profiles/web/node_modules`。
+**修 dsh 0.1.5 网页/微信 401。** 官方改成进程级 `?token=` + HttpOnly cookie，裸开 `:3080` 会提示 authentication required；个人微信 bridge 原先 RPC 不带 cookie → `session.create` 401。本版 suite 启动时写 `~/.dsh/dsh-web.url`（完整带 token 地址）；wechat `@0.1.19` 用该文件换 cookie 再调 `/api`。装 **`@0.1.68`** 后重启 `dsh web`，浏览器请打开终端打印的完整 URL（或等价地打开一次该文件里的地址）。
+
+**附：旧 sso 钉死。** 若 profile 仍嵌着旧子包，清 `profiles/web/node_modules` 再装本版。
 
 ## 0.1.64 · 2026-09-13
 

package/cordis.patch.yml

@@ -1,5 +1,5 @@
 # 用户只装这一包：`dsh plugin --profile web add @rezti/dsh-rez-suite`
-# 升级只记这一条：`dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.66`
+# 升级只记这一条：`dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.68`
 # 不要再单独 add 子包，会重复注册。
 #
 # MCP rows are started by the domain plugins after rezSso resolves secrets.

package/lib/client.js

@@ -1011,16 +1011,16 @@ function ChannelTable({ kind, lang }) {
 //#region src/changelog.ts
 const SUITE_CHANGELOG = [
 	{
-		version: "0.1.66",
+		version: "0.1.68",
 		date: "2026-09-13",
 		sections: [{
 			title: {
-				zh: "修旧 sso 钉死导致 0.1.5 起不来",
-				en: "Fix old pinned sso crashing on dsh 0.1.5"
+				zh: "修 dsh 0.1.5 网页/微信 401",
+				en: "Fix dsh 0.1.5 web/WeChat 401"
 			},
 			items: [{
-				zh: "子包改依赖 sso@^0.1.18；cordis.patch 用包名加载 sso。请装 @0.1.66 并删 profiles/web/node_modules。",
-				en: "Subpackages depend on sso@^0.1.18; cordis.patch loads sso by package name. Install @0.1.66 and delete profiles/web/node_modules."
+				zh: "suite 写入 ~/.dsh/dsh-web.url；wechat@0.1.19 用 ?token= 换 cookie 再 RPC。请装 @0.1.68，重启 dsh web，用终端打印的完整 URL 打开网页。",
+				en: "Suite writes ~/.dsh/dsh-web.url; wechat@0.1.19 exchanges ?token= for a cookie before RPC. Install @0.1.68, restart dsh web, open the full printed URL."
 			}]
 		}]
 	},

package/lib/index.js

@@ -1,8 +1,8 @@
 import { createRequire } from "node:module";
 import { homedir } from "node:os";
 import { dirname, join, relative } from "node:path";
-import { REZ_CREDENTIAL_REFS, REZ_DEFAULT_CONNECTIONS, REZ_SYSTEMS, lastMcpStartError, loadRezConnections, mergeConnections, readManagedCredential, secretConfigured, startMcpWhenSecret, writeManagedCredential } from "@rezti/dsh-rez-sso";
 import { chmodSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, statSync, writeFileSync } from "node:fs";
+import { REZ_CREDENTIAL_REFS, REZ_DEFAULT_CONNECTIONS, REZ_SYSTEMS, lastMcpStartError, loadRezConnections, mergeConnections, readManagedCredential, secretConfigured, startMcpWhenSecret, writeManagedCredential } from "@rezti/dsh-rez-sso";
 import { spawn, spawnSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { DatabaseSync } from "node:sqlite";
@@ -10185,6 +10185,24 @@ function apply(ctx, config) {
 			}
 		});
 	});
+	ctx.registry.inject(["connection"], (inner) => {
+		const writeAuthUrl = () => {
+			try {
+				const port = ctx.webServer.port;
+				const base = `http://127.0.0.1:${String(port)}`;
+				const url = inner.connection.authenticatedUrl(base);
+				const home = process.env.DSH_HOME ?? join(homedir(), ".dsh");
+				mkdirSync(home, { recursive: true });
+				writeFileSync(join(home, "dsh-web.url"), url + "\n", { mode: 384 });
+			} catch (error) {
+				console.warn("[dsh-rez-suite] could not write dsh-web.url:", error);
+			}
+		};
+		writeAuthUrl();
+		const timer = setInterval(writeAuthUrl, 6e4);
+		timer.unref?.();
+		return () => clearInterval(timer);
+	});
 	sync();
 }
 function joinTokenDb() {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rezti/dsh-rez-suite",
-  "description": "ReZ-TI one-package install for DeepSeek Harness. Update with: dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.66",
-  "version": "0.1.66",
+  "description": "ReZ-TI one-package install for DeepSeek Harness. Update with: dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.68",
+  "version": "0.1.68",
   "type": "module",
   "engines": {
     "node": "^22.19.0 || >=24.0.0"
@@ -48,7 +48,7 @@
     "@rezti/dsh-rez-tapd": "^0.1.2",
     "@rezti/dsh-rez-token-manager": "^0.1.5",
     "@rezti/dsh-rez-vision": "^0.1.4",
-    "@rezti/dsh-rez-wechat": "^0.1.18",
+    "@rezti/dsh-rez-wechat": "^0.1.19",
     "@rezti/dsh-web-file-uploader": "0.2.3",
     "@wecom/cli": "1.1.0",
     "zod": "^4.4.3"

package/src/changelog.ts

@@ -21,15 +21,15 @@ export interface ChangelogRelease {
 
 export const SUITE_CHANGELOG: readonly ChangelogRelease[] = [
   {
-    version: '0.1.66',
+    version: '0.1.68',
     date: '2026-09-13',
     sections: [
       {
-        title: { zh: '修旧 sso 钉死导致 0.1.5 起不来', en: 'Fix old pinned sso crashing on dsh 0.1.5' },
+        title: { zh: '修 dsh 0.1.5 网页/微信 401', en: 'Fix dsh 0.1.5 web/WeChat 401' },
         items: [
           {
-            zh: '子包改依赖 sso@^0.1.18；cordis.patch 用包名加载 sso。请装 @0.1.66 并删 profiles/web/node_modules。',
-            en: 'Subpackages depend on sso@^0.1.18; cordis.patch loads sso by package name. Install @0.1.66 and delete profiles/web/node_modules.',
+            zh: 'suite 写入 ~/.dsh/dsh-web.url；wechat@0.1.19 用 ?token= 换 cookie 再 RPC。请装 @0.1.68，重启 dsh web，用终端打印的完整 URL 打开网页。',
+            en: 'Suite writes ~/.dsh/dsh-web.url; wechat@0.1.19 exchanges ?token= for a cookie before RPC. Install @0.1.68, restart dsh web, open the full printed URL.',
           },
         ],
       },

package/src/index.ts

@@ -10,7 +10,9 @@
 import type { Context } from '@deepseek-ai/cordis'
 import { homedir } from 'node:os'
 import { join } from 'node:path'
+import { mkdirSync, writeFileSync } from 'node:fs'
 import type {} from '@deepseek-ai/dsh-settings'
+import type {} from '@deepseek-ai/dsh-client-connection'
 import z from '@deepseek-ai/schemastery'
 import type {} from '@deepseek-ai/dsh-host-webserver'
 import type {} from '@deepseek-ai/dsh-system-prompt'
@@ -258,6 +260,26 @@ export function apply(ctx: Context, config?: RezConfig): void {
     })
   })
 
+  // dsh 0.1.5+ requires a per-process ?token= URL; write it for the WeChat bridge.
+  ctx.registry.inject(['connection'], (inner) => {
+    const writeAuthUrl = (): void => {
+      try {
+        const port = ctx.webServer.port
+        const base = `http://127.0.0.1:${String(port)}`
+        const url = inner.connection.authenticatedUrl(base)
+        const home = process.env.DSH_HOME ?? join(homedir(), '.dsh')
+        mkdirSync(home, { recursive: true })
+        writeFileSync(join(home, 'dsh-web.url'), url + '\n', { mode: 0o600 })
+      } catch (error) {
+        console.warn('[dsh-rez-suite] could not write dsh-web.url:', error)
+      }
+    }
+    writeAuthUrl()
+    const timer = setInterval(writeAuthUrl, 60_000)
+    timer.unref?.()
+    return () => clearInterval(timer)
+  })
+
   sync()
 }