@sparkelf/dsh-plugin-dataops 0.1.0-rc.11 → 0.1.0-rc.13

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/plus/dataops/README.md
-README.md: c843fd3c7aac7ea489b5311e4c3c50e8498cab94
-README.zh.md: 10fa42ed24dc8f8295dbe785a234ded025fcb1a4
+README.md: 1dc47738195d66e1ca08ac35c18107e0780bf430
+README.zh.md: a4cec8bbfb2b2a687afb892d3d07273a99534d28

package/README.md

@@ -23,7 +23,7 @@ This complete Host and Client plugin owns one DataOps target identity, browser A
 <a id="use-this-package"></a>
 ## Use this package
 
-Set `DSH_DATAOPS_BASE_URL` to the DataOps Web origin that serves both `/auth/dsh/authorize` and proxied `/api`; `DSH_DATAOPS_CALLBACK_ORIGIN` optionally names a non-loopback DSH browser origin. The package stores the delegated access token and stable target identity under `dataops_access_token` and `dataops_target_ref`; DataOps ties the token lifetime to its authenticated browser session. When the current grant expires or its browser session is revoked, the DataOps Client contribution raises a DSH shell modal with **Later** and **Sign in again**; the latter opens the real OAuth popup from the user gesture. Settings also distinguishes the rejected stored grant from a never-connected state and keeps the same recovery action available. An authentication-rejected MCP call remains an error result inside the agent turn; it does not terminate the task, and Plus does not automatically replay an unconfirmed tool operation. Disconnect revokes account tokens but retains target identity. OAuth callback failures expose only a fixed, actionable stage in Settings; authorization codes, state, tokens, upstream bodies, and arbitrary error text remain outside the browser message.
+Set `DSH_DATAOPS_BASE_URL` to the DataOps Web origin that serves both `/auth/dsh/authorize` and proxied `/api`; `DSH_DATAOPS_CALLBACK_ORIGIN` optionally names a non-loopback DSH browser origin. The browser contribution registers only when Host plugin inventory reports the matching `plus-dataops` entry effectively enabled, so an installed package whose environment condition disables the Host stays inert instead of requesting absent routes. The package stores the delegated access token and stable target identity under `dataops_access_token` and `dataops_target_ref`; DataOps ties the token lifetime to its authenticated browser session. When the current grant expires or its browser session is revoked, the DataOps Client contribution raises a DSH shell modal with **Later** and **Sign in again**; the latter opens the real OAuth popup from the user gesture. Settings also distinguishes the rejected stored grant from a never-connected state and keeps the same recovery action available. An authentication-rejected MCP call remains an error result inside the agent turn; it does not terminate the task, and Plus does not automatically replay an unconfirmed tool operation. Disconnect revokes account tokens but retains target identity. OAuth callback failures expose only a fixed, actionable stage in Settings; authorization codes, state, tokens, upstream bodies, and arbitrary error text remain outside the browser message.
 
 -----
 

package/README.zh.md

@@ -23,7 +23,7 @@ kind: "package-reference"
 <a id="use-this-package"></a>
 ## 使用此软件包
 
-把`DSH_DATAOPS_BASE_URL`设为同时提供`/auth/dsh/authorize`及proxied `/api`的DataOps Web origin；`DSH_DATAOPS_CALLBACK_ORIGIN`可选指定non-loopback DSH browser origin。该package把delegated access token及stable target identity存入`dataops_access_token`与`dataops_target_ref`；DataOps把token lifetime绑定到authenticated browser session。Current grant过期或其browser session被revoke时，DataOps Client contribution会弹出带**稍后**与**重新登录**的DSH shell modal；后者从用户手势打开real OAuth popup。Settings也会把rejected stored grant与never-connected state区分，并保留同一个恢复动作。Authentication-rejected MCP call仍是agent turn内的error result，不会终止task；Plus不会自动重放结果未知的tool operation。Disconnect会revoke account tokens但保留target identity。OAuth callback failure只在Settings暴露固定、可操作的failure stage；authorization code、state、token、upstream body及任意error text不会进入browser message。
+把`DSH_DATAOPS_BASE_URL`设为同时提供`/auth/dsh/authorize`及proxied `/api`的DataOps Web origin；`DSH_DATAOPS_CALLBACK_ORIGIN`可选指定non-loopback DSH browser origin。Browser contribution仅在Host plugin inventory报告对应`plus-dataops` entry有效启用时注册；若环境条件禁用Host，已安装package保持inert，不请求不存在的route。该package把delegated access token及stable target identity存入`dataops_access_token`与`dataops_target_ref`；DataOps把token lifetime绑定到authenticated browser session。Current grant过期或其browser session被revoke时，DataOps Client contribution会弹出带**稍后**与**重新登录**的DSH shell modal；后者从用户手势打开real OAuth popup。Settings也会把rejected stored grant与never-connected state区分，并保留同一个恢复动作。Authentication-rejected MCP call仍是agent turn内的error result，不会终止task；Plus不会自动重放结果未知的tool operation。Disconnect会revoke account tokens但保留target identity。OAuth callback failure只在Settings暴露固定、可操作的failure stage；authorization code、state、token、upstream body及任意error text不会进入browser message。
 
 -----
 

package/lib/client.js

@@ -489,10 +489,18 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region lib/types/client/index.js
 		const NS = "settings.dataops";
-		/** Client services required for the Settings and frame-overlay contributions. */
-		const inject = ["slots", "locale"];
-		/** Register the shared DataOps lifecycle, Settings section, and expiry modal. */
-		function apply(ctx) {
+		/** Client services required for Host activation discovery, Settings, and frame overlays. */
+		const inject = [
+			"slots",
+			"locale",
+			"remote",
+			"remote.pluginInventory"
+		];
+		/** 仅在Host inventory确认对应plugin有效启用时注册browser contributions。 */
+		async function apply(ctx) {
+			const result = await ctx.remote.pluginInventory.list();
+			if (!result.ok) throw new Error(`pluginInventory.list failed: ${result.error.code}: ${result.error.message}`);
+			if (!result.value.entries.some((entry) => entry.entryId === "plus-dataops" && entry.enabled)) return;
 			ctx.effect(() => ctx.locale.register(NS, {
 				zh,
 				en

package/lib/index.js

@@ -2,7 +2,7 @@ import { createHash, randomBytes } from "node:crypto";
 import { MAX_TIMER_DELAY_MS } from "@deepseek-ai/dsh-timeout";
 import z from "@deepseek-ai/schemastery";
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
-import * as McpClient from "@sparkelf/dsh-plugin-mcp-credentials";
+import { Config as Config$1, apply as apply$1, inject as inject$1, name as name$1 } from "@sparkelf/dsh-plugin-mcp-credentials";
 //#region lib/types/index.js
 /**
 * Standalone DataOps MCP integration. It owns one persistent DSH target
@@ -10,6 +10,12 @@ import * as McpClient from "@sparkelf/dsh-plugin-mcp-credentials";
 * authenticated MCP client for the target's immutable principal.
 * @module @sparkelf/dsh-plugin-dataops
 */
+const McpClient = {
+	name: name$1,
+	inject: inject$1,
+	Config: Config$1,
+	apply: apply$1
+};
 /** Cordis plugin name for the standalone DataOps integration. */
 const name = "mcp-dataops";
 /** Services required by the standalone authorization and MCP composition. */

package/lib/types/client/index.d.ts

@@ -5,8 +5,8 @@ declare module '@deepseek-ai/dsh-client-ui-slots' {
         'settings.dataops': DataOpsKey;
     }
 }
-/** Client services required for the Settings and frame-overlay contributions. */
+/** Client services required for Host activation discovery, Settings, and frame overlays. */
 export declare const inject: string[];
-/** Register the shared DataOps lifecycle, Settings section, and expiry modal. */
-export declare function apply(ctx: Context): void;
+/** 仅在Host inventory确认对应plugin有效启用时注册browser contributions。 */
+export declare function apply(ctx: Context): Promise<void>;
 //# sourceMappingURL=index.d.ts.map

package/package.json

@@ -4,28 +4,30 @@
   },
   "description": "Standalone DataOps MCP integration with delegated browser authorization and Settings UI",
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-brand": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-connection": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-locale": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-store": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-layout": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-credentials": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-invariants": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-timeout": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-tools": "^0.1.2-alpha.1",
-    "@sparkelf/dsh-plugin-mcp-credentials": "^0.1.0-rc.11",
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-api-remotes": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-brand": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-connection": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-locale": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-store": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-layout": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-credentials": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-invariants": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-timeout": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-tools": "^0.1.2-alpha.2",
+    "@sparkelf/dsh-plugin-mcp-credentials": "^0.1.0-rc.13",
     "@types/react": "~18.3.1",
     "react": "^18.2.0"
   },
   "dsh": {
     "client": {
       "inject": [
+        "@deepseek-ai/dsh-api-remotes",
         "@deepseek-ai/dsh-client-connection",
         "@deepseek-ai/dsh-client-locale",
         "@deepseek-ai/dsh-client-ui-layout",
@@ -61,18 +63,19 @@
   "name": "@sparkelf/dsh-plugin-dataops",
   "peerDependencies": {
     "@deepseek-ai/cordis": ">=4.0.1",
-    "@deepseek-ai/dsh-brand": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-connection": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-locale": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-layout": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-credentials": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-host-webserver": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-invariants": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-timeout": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-tools": ">=0.1.2-alpha.1",
-    "@sparkelf/dsh-plugin-mcp-credentials": ">=0.1.0-rc.11"
+    "@deepseek-ai/dsh-api-remotes": ">=0.1.2-alpha.2",
+    "@deepseek-ai/dsh-brand": ">=0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-connection": ">=0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-locale": ">=0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-layout": ">=0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.2-alpha.2",
+    "@deepseek-ai/dsh-credentials": ">=0.1.2-alpha.2",
+    "@deepseek-ai/dsh-host-webserver": ">=0.1.2-alpha.2",
+    "@deepseek-ai/dsh-invariants": ">=0.1.2-alpha.2",
+    "@deepseek-ai/dsh-timeout": ">=0.1.2-alpha.2",
+    "@deepseek-ai/dsh-tools": ">=0.1.2-alpha.2",
+    "@sparkelf/dsh-plugin-mcp-credentials": ">=0.1.0-rc.12"
   },
   "publishConfig": {
     "access": "public"
@@ -88,5 +91,5 @@
   },
   "type": "module",
   "types": "lib/types/index.d.ts",
-  "version": "0.1.0-rc.11"
+  "version": "0.1.0-rc.13"
 }