@tokensapi/dsh-plugin-check 0.2.0 → 0.3.1

package/lib/manifest-check.mjs

@@ -1,144 +1,144 @@
-/* ============================================================
- * 阶段①:清单体检(纯静态,秒级,离线)
- * ============================================================
- * 每一条规则都对应一种已经真实发生过的"把宿主搞崩/搞坏"路径,
- * 规则说明写在 README;error 挡上架,warning 提示即将收紧或
- * 潜在错配。判定为纯函数,便于单测与市场门禁复用。
- * ============================================================ */
-import { existsSync, readFileSync, statSync } from 'node:fs'
-import { join, resolve } from 'node:path'
-import semver from 'semver'
-import { extractPatchRows } from './patch-rows.mjs'
-
-/** 安装即执行任意代码的脚本;市场受控安装的既有红线。 */
-const FORBIDDEN_LIFECYCLE = ['preinstall', 'install', 'postinstall', 'prepare']
-
-/**
- * 携带身份语义的核心包:cordis 上下文与 dsh 服务在宿主/插件各持一份时
- * Symbol 不等,注册对不上。schemastery、cosmokit 等纯工具库不在此列,
- * 插件可以正常依赖。
- */
-const CORE_SCOPE = '@deepseek-ai/'
-const isIdentityCore = (name) => name === '@deepseek-ai/cordis'
-  || name.startsWith('@deepseek-ai/cordis-')
-  || name.startsWith('@deepseek-ai/dsh')
-
-const SUSPICIOUS_FILE = /(\.env(\.|$)|id_rsa|\.pem$|\.p12$|\.key$)/u
-
-/**
- * 对一个插件目录执行全部清单规则。
- * @param {string} pluginDir - 插件根目录(含 package.json)。
- * @param {{ runtime?: string }} [options] - runtime 为目标 DSH 运行时
- *   版本(如 0.1.3-alpha.1);给出时才执行 engine/peer 与其的交集判定。
- * @returns {{ findings: Array<{level: 'error'|'warning', rule: string, message: string}>, manifest?: object, rows?: object[] }}
- */
-export function checkManifest(pluginDir, options = {}) {
-  const findings = []
-  const error = (rule, message) => findings.push({ level: 'error', rule, message })
-  const warning = (rule, message) => findings.push({ level: 'warning', rule, message })
-
-  const manifestPath = resolve(pluginDir, 'package.json')
-  if (!existsSync(manifestPath)) {
-    error('M1-manifest', 'package.json 不存在')
-    return { findings }
-  }
-  let manifest
-  try {
-    manifest = JSON.parse(readFileSync(manifestPath, 'utf8'))
-  } catch (cause) {
-    error('M1-manifest', `package.json 不是合法 JSON: ${cause instanceof Error ? cause.message : String(cause)}`)
-    return { findings }
-  }
-
-  if (typeof manifest.name !== 'string' || manifest.name === '') {
-    error('M1-manifest', 'name 缺失')
-  }
-  if (typeof manifest.version !== 'string' || semver.valid(manifest.version) === null) {
-    error('M1-manifest', 'version 不是合法 SemVer')
-  } else if (semver.prerelease(manifest.version) !== null) {
-    warning('M1-manifest', `version ${manifest.version} 是预发布版;市场上架要求精确稳定版`)
-  }
-
-  const scripts = manifest.scripts ?? {}
-  for (const script of FORBIDDEN_LIFECYCLE) {
-    if (typeof scripts[script] === 'string') {
-      error('M2-lifecycle', `禁止 ${script} 生命周期脚本(安装即执行任意代码,市场受控安装会拒绝);构建请改用 prepack`)
-    }
-  }
-
-  const dependencies = manifest.dependencies ?? {}
-  for (const name of Object.keys(dependencies)) {
-    if (isIdentityCore(name)) {
-      error('M3-core-peer', `${name} 出现在 dependencies;核心运行时必须声明为 peerDependencies,否则宿主与插件各持一份实例,服务注册无法对上,典型症状是整个 Cowork 启动失败`)
-    }
-  }
-
-  const dsh = manifest.dsh ?? {}
-  const bundle = dsh.bundle ?? {}
-  let rows
-  if (typeof bundle.patch !== 'string' || bundle.patch === '') {
-    error('M4-bundle', 'dsh.bundle.patch 缺失;宿主靠它把插件挂进加载树')
-  } else {
-    const patchPath = resolve(pluginDir, bundle.patch)
-    if (!existsSync(patchPath)) {
-      error('M4-bundle', `dsh.bundle.patch 指向的文件不存在: ${bundle.patch}`)
-    } else {
-      const extracted = extractPatchRows(readFileSync(patchPath, 'utf8'))
-      for (const problem of extracted.problems) error('M4-bundle', `补丁行不合法: ${problem}`)
-      rows = extracted.rows
-      if (rows.length === 0 && extracted.problems.length === 0) {
-        error('M4-bundle', '补丁未声明任何插件行')
-      }
-      const packageName = typeof manifest.name === 'string' ? manifest.name : ''
-      for (const row of rows ?? []) {
-        if (packageName !== '' && row.name !== packageName && !row.name.startsWith(`${packageName}/`)) {
-          error('M5-row-scope', `补丁行 "${row.id ?? row.name}" 指向 ${row.name},超出本包命名空间(${packageName});插件只能挂载自己的入口`)
-        }
-      }
-    }
-  }
-
-  const engine = typeof dsh.engine === 'string' ? dsh.engine : undefined
-  if (engine === undefined) {
-    warning('M6-engine', 'dsh.engine 未声明(目标 DSH 运行时 SemVer 范围,如 ">=0.1.3-alpha.1 <0.2");该字段将成为上架必填')
-  } else if (semver.validRange(engine, { includePrerelease: true }) === null) {
-    error('M6-engine', `dsh.engine 不是合法 SemVer 范围: ${engine}`)
-  } else if (options.runtime !== undefined
-    && !semver.satisfies(options.runtime, engine, { includePrerelease: true })) {
-    error('M6-engine', `dsh.engine "${engine}" 不覆盖目标运行时 ${options.runtime}`)
-  }
-
-  const peers = manifest.peerDependencies ?? {}
-  if (options.runtime !== undefined) {
-    for (const [name, range] of Object.entries(peers)) {
-      if (!name.startsWith(`${CORE_SCOPE}dsh`)) continue
-      if (semver.validRange(range, { includePrerelease: true }) === null) {
-        error('M7-peer-range', `peer ${name} 的范围不合法: ${range}`)
-      } else if (!semver.satisfies(options.runtime, range, { includePrerelease: true })) {
-        warning('M7-peer-range', `peer ${name}@"${range}" 不含目标运行时 ${options.runtime};宿主升级后此插件可能在运行时断裂(接口错配类故障)`)
-      }
-    }
-  }
-
-  if (manifest.engines?.node === undefined) {
-    warning('M8-node-engines', 'engines.node 未声明;宿主运行在 Node 22+')
-  }
-  if (manifest.license === undefined) {
-    warning('M9-license', 'license 未声明')
-  }
-
-  const filesList = Array.isArray(manifest.files) ? manifest.files : []
-  for (const entry of filesList) {
-    if (typeof entry === 'string' && SUSPICIOUS_FILE.test(entry)) {
-      error('M10-secrets', `files 白名单包含疑似凭据文件: ${entry}`)
-    }
-  }
-  for (const candidate of ['.env', 'id_rsa']) {
-    const candidatePath = join(pluginDir, candidate)
-    if (existsSync(candidatePath) && statSync(candidatePath).isFile() && filesList.length === 0) {
-      warning('M10-secrets', `目录含 ${candidate} 且未用 files 白名单限定发布内容,npm pack 可能把它带上`)
-    }
-  }
-
-  return { findings, manifest, rows }
-}
+/* ============================================================
+ * 阶段①:清单体检(纯静态,秒级,离线)
+ * ============================================================
+ * 每一条规则都对应一种已经真实发生过的"把宿主搞崩/搞坏"路径,
+ * 规则说明写在 README;error 挡上架,warning 提示即将收紧或
+ * 潜在错配。判定为纯函数,便于单测与市场门禁复用。
+ * ============================================================ */
+import { existsSync, readFileSync, statSync } from 'node:fs'
+import { join, resolve } from 'node:path'
+import semver from 'semver'
+import { extractPatchRows } from './patch-rows.mjs'
+
+/** 安装即执行任意代码的脚本;市场受控安装的既有红线。 */
+const FORBIDDEN_LIFECYCLE = ['preinstall', 'install', 'postinstall', 'prepare']
+
+/**
+ * 携带身份语义的核心包:cordis 上下文与 dsh 服务在宿主/插件各持一份时
+ * Symbol 不等,注册对不上。schemastery、cosmokit 等纯工具库不在此列,
+ * 插件可以正常依赖。
+ */
+const CORE_SCOPE = '@deepseek-ai/'
+const isIdentityCore = (name) => name === '@deepseek-ai/cordis'
+  || name.startsWith('@deepseek-ai/cordis-')
+  || name.startsWith('@deepseek-ai/dsh')
+
+const SUSPICIOUS_FILE = /(\.env(\.|$)|id_rsa|\.pem$|\.p12$|\.key$)/u
+
+/**
+ * 对一个插件目录执行全部清单规则。
+ * @param {string} pluginDir - 插件根目录(含 package.json)。
+ * @param {{ runtime?: string }} [options] - runtime 为目标 DSH 运行时
+ *   版本(如 0.1.3-alpha.1);给出时才执行 engine/peer 与其的交集判定。
+ * @returns {{ findings: Array<{level: 'error'|'warning', rule: string, message: string}>, manifest?: object, rows?: object[] }}
+ */
+export function checkManifest(pluginDir, options = {}) {
+  const findings = []
+  const error = (rule, message) => findings.push({ level: 'error', rule, message })
+  const warning = (rule, message) => findings.push({ level: 'warning', rule, message })
+
+  const manifestPath = resolve(pluginDir, 'package.json')
+  if (!existsSync(manifestPath)) {
+    error('M1-manifest', 'package.json 不存在')
+    return { findings }
+  }
+  let manifest
+  try {
+    manifest = JSON.parse(readFileSync(manifestPath, 'utf8'))
+  } catch (cause) {
+    error('M1-manifest', `package.json 不是合法 JSON: ${cause instanceof Error ? cause.message : String(cause)}`)
+    return { findings }
+  }
+
+  if (typeof manifest.name !== 'string' || manifest.name === '') {
+    error('M1-manifest', 'name 缺失')
+  }
+  if (typeof manifest.version !== 'string' || semver.valid(manifest.version) === null) {
+    error('M1-manifest', 'version 不是合法 SemVer')
+  } else if (semver.prerelease(manifest.version) !== null) {
+    warning('M1-manifest', `version ${manifest.version} 是预发布版;市场上架要求精确稳定版`)
+  }
+
+  const scripts = manifest.scripts ?? {}
+  for (const script of FORBIDDEN_LIFECYCLE) {
+    if (typeof scripts[script] === 'string') {
+      error('M2-lifecycle', `禁止 ${script} 生命周期脚本(安装即执行任意代码,市场受控安装会拒绝);构建请改用 prepack`)
+    }
+  }
+
+  const dependencies = manifest.dependencies ?? {}
+  for (const name of Object.keys(dependencies)) {
+    if (isIdentityCore(name)) {
+      error('M3-core-peer', `${name} 出现在 dependencies;核心运行时必须声明为 peerDependencies,否则宿主与插件各持一份实例,服务注册无法对上,典型症状是整个 Cowork 启动失败`)
+    }
+  }
+
+  const dsh = manifest.dsh ?? {}
+  const bundle = dsh.bundle ?? {}
+  let rows
+  if (typeof bundle.patch !== 'string' || bundle.patch === '') {
+    error('M4-bundle', 'dsh.bundle.patch 缺失;宿主靠它把插件挂进加载树')
+  } else {
+    const patchPath = resolve(pluginDir, bundle.patch)
+    if (!existsSync(patchPath)) {
+      error('M4-bundle', `dsh.bundle.patch 指向的文件不存在: ${bundle.patch}`)
+    } else {
+      const extracted = extractPatchRows(readFileSync(patchPath, 'utf8'))
+      for (const problem of extracted.problems) error('M4-bundle', `补丁行不合法: ${problem}`)
+      rows = extracted.rows
+      if (rows.length === 0 && extracted.problems.length === 0) {
+        error('M4-bundle', '补丁未声明任何插件行')
+      }
+      const packageName = typeof manifest.name === 'string' ? manifest.name : ''
+      for (const row of rows ?? []) {
+        if (packageName !== '' && row.name !== packageName && !row.name.startsWith(`${packageName}/`)) {
+          error('M5-row-scope', `补丁行 "${row.id ?? row.name}" 指向 ${row.name},超出本包命名空间(${packageName});插件只能挂载自己的入口`)
+        }
+      }
+    }
+  }
+
+  const engine = typeof dsh.engine === 'string' ? dsh.engine : undefined
+  if (engine === undefined) {
+    warning('M6-engine', 'dsh.engine 未声明(目标 DSH 运行时 SemVer 范围,如 ">=0.1.3-alpha.1 <0.2");该字段将成为上架必填')
+  } else if (semver.validRange(engine, { includePrerelease: true }) === null) {
+    error('M6-engine', `dsh.engine 不是合法 SemVer 范围: ${engine}`)
+  } else if (options.runtime !== undefined
+    && !semver.satisfies(options.runtime, engine, { includePrerelease: true })) {
+    error('M6-engine', `dsh.engine "${engine}" 不覆盖目标运行时 ${options.runtime}`)
+  }
+
+  const peers = manifest.peerDependencies ?? {}
+  if (options.runtime !== undefined) {
+    for (const [name, range] of Object.entries(peers)) {
+      if (!name.startsWith(`${CORE_SCOPE}dsh`)) continue
+      if (semver.validRange(range, { includePrerelease: true }) === null) {
+        error('M7-peer-range', `peer ${name} 的范围不合法: ${range}`)
+      } else if (!semver.satisfies(options.runtime, range, { includePrerelease: true })) {
+        warning('M7-peer-range', `peer ${name}@"${range}" 不含目标运行时 ${options.runtime};宿主升级后此插件可能在运行时断裂(接口错配类故障)`)
+      }
+    }
+  }
+
+  if (manifest.engines?.node === undefined) {
+    warning('M8-node-engines', 'engines.node 未声明;宿主运行在 Node 22+')
+  }
+  if (manifest.license === undefined) {
+    warning('M9-license', 'license 未声明')
+  }
+
+  const filesList = Array.isArray(manifest.files) ? manifest.files : []
+  for (const entry of filesList) {
+    if (typeof entry === 'string' && SUSPICIOUS_FILE.test(entry)) {
+      error('M10-secrets', `files 白名单包含疑似凭据文件: ${entry}`)
+    }
+  }
+  for (const candidate of ['.env', 'id_rsa']) {
+    const candidatePath = join(pluginDir, candidate)
+    if (existsSync(candidatePath) && statSync(candidatePath).isFile() && filesList.length === 0) {
+      warning('M10-secrets', `目录含 ${candidate} 且未用 files 白名单限定发布内容,npm pack 可能把它带上`)
+    }
+  }
+
+  return { findings, manifest, rows }
+}

package/lib/npm.mjs

@@ -1,13 +1,13 @@
-/* npm 子进程调用:统一 --ignore-scripts,被检代码没有机会在检查器
- * 进程里执行安装钩子。 */
-import { spawnSync } from 'node:child_process'
-
-export function runNpm(args, cwd, timeout) {
-  return spawnSync(process.platform === 'win32' ? 'npm.cmd' : 'npm', args, {
-    cwd,
-    encoding: 'utf8',
-    timeout,
-    shell: process.platform === 'win32',
-    env: { ...process.env, npm_config_ignore_scripts: 'true' },
-  })
-}
+/* npm 子进程调用:统一 --ignore-scripts,被检代码没有机会在检查器
+ * 进程里执行安装钩子。 */
+import { spawnSync } from 'node:child_process'
+
+export function runNpm(args, cwd, timeout) {
+  return spawnSync(process.platform === 'win32' ? 'npm.cmd' : 'npm', args, {
+    cwd,
+    encoding: 'utf8',
+    timeout,
+    shell: process.platform === 'win32',
+    env: { ...process.env, npm_config_ignore_scripts: 'true' },
+  })
+}

package/lib/patch-rows.mjs

@@ -1,86 +1,86 @@
-/* ============================================================
- * cordis.patch.yml 行提取
- * ============================================================
- * 补丁文件由 cordis-plugin-loader 的方言消费,可能携带 !!js 等
- * 自定义标签。体检工具只做只读判定,解析必须永不因未知标签而死:
- * 未知标签统一收敛为占位对象,携带它的行照常提取,配置标记为
- * 不可静态求值(冒烟时跳过该行的 config)。
- * ============================================================ */
-import yaml from 'js-yaml'
-
-const JS_EXPR_PLACEHOLDER = Symbol('dsh-plugin-check:js-expr')
-
-const tolerantSchema = yaml.DEFAULT_SCHEMA.extend(
-  ['scalar', 'sequence', 'mapping'].map(kind => new yaml.Type('!', {
-    kind,
-    multi: true,
-    construct: () => ({ [JS_EXPR_PLACEHOLDER]: true }),
-  })),
-)
-
-/** 配置里是否携带无法静态求值的表达式(!!js 等自定义标签)。 */
-export function hasDynamicConfig(value) {
-  if (value === null || typeof value !== 'object') return false
-  if (value[JS_EXPR_PLACEHOLDER] === true) return true
-  const children = Array.isArray(value) ? value : Object.values(value)
-  return children.some(child => hasDynamicConfig(child))
-}
-
-/**
- * 从补丁内容提取全部插件行。
- * 支持顶层两种形状:直接的行数组,或 { insert: [...] } 之类的
- * 操作映射(取所有数组值展平)。行内的 group 嵌套按 config 递归。
- * @param {string} content - cordis.patch.yml 的完整文本。
- * @returns {{ rows: Array<{id?: string, name: string, config?: unknown, disabled?: boolean, dynamicConfig: boolean}>, problems: string[] }}
- */
-export function extractPatchRows(content) {
-  const problems = []
-  let document
-  try {
-    document = yaml.load(content, { schema: tolerantSchema })
-  } catch (cause) {
-    return { rows: [], problems: [`补丁不是合法 YAML: ${cause instanceof Error ? cause.message.split('\n')[0] : String(cause)}`] }
-  }
-  const topLevel = []
-  if (Array.isArray(document)) {
-    topLevel.push(...document)
-  } else if (document !== null && typeof document === 'object') {
-    for (const value of Object.values(document)) {
-      if (Array.isArray(value)) topLevel.push(...value)
-    }
-  }
-  const candidates = []
-  for (const operation of topLevel) {
-    if (Array.isArray(operation)) candidates.push(...operation)
-    else if (operation !== null && typeof operation === 'object' && !('name' in operation)) {
-      for (const value of Object.values(operation)) {
-        if (Array.isArray(value)) candidates.push(...value)
-      }
-    } else candidates.push(operation)
-  }
-  const rows = []
-  const visit = (entry, at) => {
-    if (entry === null || typeof entry !== 'object') {
-      problems.push(`${at} 不是行对象`)
-      return
-    }
-    if (entry.group === true) {
-      const children = Array.isArray(entry.config) ? entry.config : []
-      children.forEach((child, index) => visit(child, `${at} group 第 ${index + 1} 行`))
-      return
-    }
-    if (typeof entry.name !== 'string' || entry.name === '') {
-      problems.push(`${at} 缺少 name`)
-      return
-    }
-    rows.push({
-      id: typeof entry.id === 'string' ? entry.id : undefined,
-      name: entry.name,
-      config: entry.config,
-      disabled: entry.disabled === true,
-      dynamicConfig: hasDynamicConfig(entry.config),
-    })
-  }
-  candidates.forEach((entry, index) => visit(entry, `第 ${index + 1} 行`))
-  return { rows, problems }
-}
+/* ============================================================
+ * cordis.patch.yml 行提取
+ * ============================================================
+ * 补丁文件由 cordis-plugin-loader 的方言消费,可能携带 !!js 等
+ * 自定义标签。体检工具只做只读判定,解析必须永不因未知标签而死:
+ * 未知标签统一收敛为占位对象,携带它的行照常提取,配置标记为
+ * 不可静态求值(冒烟时跳过该行的 config)。
+ * ============================================================ */
+import yaml from 'js-yaml'
+
+const JS_EXPR_PLACEHOLDER = Symbol('dsh-plugin-check:js-expr')
+
+const tolerantSchema = yaml.DEFAULT_SCHEMA.extend(
+  ['scalar', 'sequence', 'mapping'].map(kind => new yaml.Type('!', {
+    kind,
+    multi: true,
+    construct: () => ({ [JS_EXPR_PLACEHOLDER]: true }),
+  })),
+)
+
+/** 配置里是否携带无法静态求值的表达式(!!js 等自定义标签)。 */
+export function hasDynamicConfig(value) {
+  if (value === null || typeof value !== 'object') return false
+  if (value[JS_EXPR_PLACEHOLDER] === true) return true
+  const children = Array.isArray(value) ? value : Object.values(value)
+  return children.some(child => hasDynamicConfig(child))
+}
+
+/**
+ * 从补丁内容提取全部插件行。
+ * 支持顶层两种形状:直接的行数组,或 { insert: [...] } 之类的
+ * 操作映射(取所有数组值展平)。行内的 group 嵌套按 config 递归。
+ * @param {string} content - cordis.patch.yml 的完整文本。
+ * @returns {{ rows: Array<{id?: string, name: string, config?: unknown, disabled?: boolean, dynamicConfig: boolean}>, problems: string[] }}
+ */
+export function extractPatchRows(content) {
+  const problems = []
+  let document
+  try {
+    document = yaml.load(content, { schema: tolerantSchema })
+  } catch (cause) {
+    return { rows: [], problems: [`补丁不是合法 YAML: ${cause instanceof Error ? cause.message.split('\n')[0] : String(cause)}`] }
+  }
+  const topLevel = []
+  if (Array.isArray(document)) {
+    topLevel.push(...document)
+  } else if (document !== null && typeof document === 'object') {
+    for (const value of Object.values(document)) {
+      if (Array.isArray(value)) topLevel.push(...value)
+    }
+  }
+  const candidates = []
+  for (const operation of topLevel) {
+    if (Array.isArray(operation)) candidates.push(...operation)
+    else if (operation !== null && typeof operation === 'object' && !('name' in operation)) {
+      for (const value of Object.values(operation)) {
+        if (Array.isArray(value)) candidates.push(...value)
+      }
+    } else candidates.push(operation)
+  }
+  const rows = []
+  const visit = (entry, at) => {
+    if (entry === null || typeof entry !== 'object') {
+      problems.push(`${at} 不是行对象`)
+      return
+    }
+    if (entry.group === true) {
+      const children = Array.isArray(entry.config) ? entry.config : []
+      children.forEach((child, index) => visit(child, `${at} group 第 ${index + 1} 行`))
+      return
+    }
+    if (typeof entry.name !== 'string' || entry.name === '') {
+      problems.push(`${at} 缺少 name`)
+      return
+    }
+    rows.push({
+      id: typeof entry.id === 'string' ? entry.id : undefined,
+      name: entry.name,
+      config: entry.config,
+      disabled: entry.disabled === true,
+      dynamicConfig: hasDynamicConfig(entry.config),
+    })
+  }
+  candidates.forEach((entry, index) => visit(entry, `第 ${index + 1} 行`))
+  return { rows, problems }
+}

package/lib/registry-check.mjs

@@ -0,0 +1,158 @@
+/* ============================================================
+ * 已发布包体检(注册表版,零依赖纯函数)
+ * ============================================================
+ * 对 npm registry 的版本文档跑清单规则,与目录体检(manifest-check)
+ * 同一套语义,但不需要文件系统 —— 供 Cowork 插件进程内使用。
+ * 冒烟阶段无法在宿主进程执行,完整体检走 CLI 或 Plugin Check
+ * workflow。
+ * ============================================================ */
+
+const FORBIDDEN_LIFECYCLE = ['preinstall', 'install', 'postinstall', 'prepare']
+const isIdentityCore = (name) =>
+  name === '@deepseek-ai/cordis' || name.startsWith('@deepseek-ai/cordis-') || name.startsWith('@deepseek-ai/dsh')
+
+/* ------------------------- 迷你 SemVer ------------------------- */
+// 只实现体检需要的子集:比较 + 范围判定(空格=且、||=或、^、~、
+// >=、>、<=、<、=、裸版本),预发布参与比较;识别不了的范围返回
+// null 由调用方按"范围不合法"处理。
+
+function parseVersion(input) {
+  const match = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/u.exec(String(input).trim())
+  if (!match) return null
+  return {
+    parts: [Number(match[1]), Number(match[2]), Number(match[3])],
+    prerelease: match[4] === undefined ? [] : match[4].split('.'),
+  }
+}
+
+function compareVersions(a, b) {
+  for (let index = 0; index < 3; index += 1) {
+    if (a.parts[index] !== b.parts[index]) return a.parts[index] < b.parts[index] ? -1 : 1
+  }
+  if (a.prerelease.length === 0 && b.prerelease.length === 0) return 0
+  if (a.prerelease.length === 0) return 1
+  if (b.prerelease.length === 0) return -1
+  const length = Math.max(a.prerelease.length, b.prerelease.length)
+  for (let index = 0; index < length; index += 1) {
+    const left = a.prerelease[index]
+    const right = b.prerelease[index]
+    if (left === undefined) return -1
+    if (right === undefined) return 1
+    const leftNumeric = /^\d+$/u.test(left)
+    const rightNumeric = /^\d+$/u.test(right)
+    if (leftNumeric && rightNumeric) {
+      if (Number(left) !== Number(right)) return Number(left) < Number(right) ? -1 : 1
+    } else if (leftNumeric !== rightNumeric) {
+      return leftNumeric ? -1 : 1
+    } else if (left !== right) {
+      return left < right ? -1 : 1
+    }
+  }
+  return 0
+}
+
+function comparatorHolds(version, operator, boundary) {
+  const cmp = compareVersions(version, boundary)
+  if (operator === '>') return cmp > 0
+  if (operator === '>=') return cmp >= 0
+  if (operator === '<') return cmp < 0
+  if (operator === '<=') return cmp <= 0
+  return cmp === 0
+}
+
+export function versionSatisfies(versionInput, rangeInput) {
+  const version = parseVersion(versionInput)
+  if (version === null) return null
+  const alternatives = String(rangeInput).split('||')
+  let recognized = false
+  for (const alternative of alternatives) {
+    const comparators = alternative.trim().split(/\s+/u).filter(Boolean)
+    if (comparators.length === 0) continue
+    let holds = true
+    let valid = true
+    for (const comparator of comparators) {
+      if (comparator === '*' || comparator === 'x') continue
+      const match = /^(>=|<=|>|<|=|\^|~)?(.+)$/u.exec(comparator)
+      const boundary = parseVersion(match[2])
+      if (boundary === null) { valid = false; break }
+      const operator = match[1] ?? '='
+      if (operator === '^') {
+        const upper = boundary.parts[0] > 0
+          ? { parts: [boundary.parts[0] + 1, 0, 0], prerelease: ['0'] }
+          : boundary.parts[1] > 0
+            ? { parts: [0, boundary.parts[1] + 1, 0], prerelease: ['0'] }
+            : { parts: [0, 0, boundary.parts[2] + 1], prerelease: ['0'] }
+        holds = holds && comparatorHolds(version, '>=', boundary) && comparatorHolds(version, '<', upper)
+      } else if (operator === '~') {
+        const upper = { parts: [boundary.parts[0], boundary.parts[1] + 1, 0], prerelease: ['0'] }
+        holds = holds && comparatorHolds(version, '>=', boundary) && comparatorHolds(version, '<', upper)
+      } else {
+        holds = holds && comparatorHolds(version, operator, boundary)
+      }
+      if (!holds) break
+    }
+    if (!valid) continue
+    recognized = true
+    if (holds) return true
+  }
+  return recognized ? false : null
+}
+
+/* --------------------------- 规则 --------------------------- */
+
+/**
+ * 对一份 npm 版本清单跑体检规则。
+ * @param {object} manifest - registry 版本文档(scripts/dependencies/
+ *   peerDependencies/dsh/engines/license/version)。
+ * @param {string} runtime - 目标 DSH 运行时版本。
+ * @returns {Array<{level: 'error'|'warning', rule: string, message: string}>}
+ */
+export function checkPublishedManifest(manifest, runtime) {
+  const findings = []
+  const error = (rule, message) => findings.push({ level: 'error', rule, message })
+  const warning = (rule, message) => findings.push({ level: 'warning', rule, message })
+
+  const scripts = manifest.scripts ?? {}
+  for (const script of FORBIDDEN_LIFECYCLE) {
+    if (typeof scripts[script] === 'string') {
+      error('M2-lifecycle', `禁止 ${script} 生命周期脚本(安装即执行任意代码);构建请改用 prepack`)
+    }
+  }
+
+  for (const name of Object.keys(manifest.dependencies ?? {})) {
+    if (isIdentityCore(name)) {
+      error('M3-core-peer', `${name} 出现在 dependencies;核心运行时必须是 peerDependencies,否则双内核实例会让 Cowork 启动失败`)
+    }
+  }
+
+  const bundle = manifest.dsh?.bundle ?? {}
+  if (typeof bundle.patch !== 'string' || bundle.patch === '') {
+    error('M4-bundle', 'dsh.bundle.patch 缺失;宿主靠它把插件挂进加载树')
+  }
+
+  const engine = typeof manifest.dsh?.engine === 'string' ? manifest.dsh.engine : undefined
+  if (engine === undefined) {
+    warning('M6-engine', 'dsh.engine 未声明(目标运行时 SemVer 范围);该字段将成为上架必填')
+  } else {
+    const satisfied = versionSatisfies(runtime, engine)
+    if (satisfied === null) error('M6-engine', `dsh.engine 不是可识别的 SemVer 范围: ${engine}`)
+    else if (!satisfied) error('M6-engine', `dsh.engine "${engine}" 不覆盖当前运行时 ${runtime}`)
+  }
+
+  for (const [name, range] of Object.entries(manifest.peerDependencies ?? {})) {
+    if (!name.startsWith('@deepseek-ai/dsh')) continue
+    const satisfied = versionSatisfies(runtime, String(range))
+    if (satisfied === null) error('M7-peer-range', `peer ${name} 的范围不可识别: ${range}`)
+    else if (!satisfied) warning('M7-peer-range', `peer ${name}@"${range}" 不含当前运行时 ${runtime};宿主升级后可能运行时断裂`)
+  }
+
+  if (manifest.engines?.node === undefined) warning('M8-node-engines', 'engines.node 未声明;宿主运行在 Node 22+')
+  if (manifest.license === undefined) warning('M9-license', 'license 未声明')
+
+  const parsed = parseVersion(typeof manifest.version === 'string' ? manifest.version : '')
+  if (parsed !== null && parsed.prerelease.length > 0) {
+    warning('M1-manifest', `version ${manifest.version} 是预发布版;市场上架要求精确稳定版`)
+  }
+
+  return findings
+}