@tokensapi/dsh-plugin-check 0.3.1 → 0.3.2

package/lib/smoke-check.mjs

@@ -1,174 +1,211 @@
-/* ============================================================
- * 阶段②:隔离启动冒烟(联网,分钟级)
- * ============================================================
- * 在临时工作区里按插件自己声明的 peer 范围装出一套真实运行时,
- * 然后在子进程里逐行做真实网关会做的事:import 补丁行入口、
- * new Context()、ctx.plugin() 应用。这里能过,插件就不会以
- * "装上即崩"的方式杀死用户的 Cowork:
- *  - 装不上(依赖解析失败)在 install 步暴露;
- *  - import 期崩溃(顶层异常/缺模块/ESM 形状)在 import 步暴露;
- *  - 应用期崩溃(apply 抛出/插件形状不合法)在 plugin 步暴露;
- *  - 声明了 inject 而服务未注入属正常停车,不算失败。
- * 全程 --ignore-scripts,被测代码没有机会在检查器进程里执行
- * 安装钩子;插件代码只在一次性子进程里运行,超时即杀。
- * ============================================================ */
-import { spawnSync } from 'node:child_process'
-import { mkdtempSync, readFileSync, rmSync, writeFileSync, existsSync, readdirSync } from 'node:fs'
-import { tmpdir } from 'node:os'
-import { join, resolve } from 'node:path'
-import { runNpm } from './npm.mjs'
-
-const RUNNER_TIMEOUT_MS = 90_000
-const INSTALL_TIMEOUT_MS = 300_000
-
-/** 子进程执行的行级冒烟脚本;结果写文件,避开插件对 stdout 的污染。 */
-const RUNNER_SOURCE = `
-import { pathToFileURL } from 'node:url'
-import { writeFileSync } from 'node:fs'
-const [workspace, resultPath, rowsJson] = process.argv.slice(2)
-const rows = JSON.parse(rowsJson)
-const results = []
-let current = null
-process.on('uncaughtException', (cause) => finish(cause))
-process.on('unhandledRejection', (cause) => finish(cause))
-function finish(cause) {
-  if (current !== null) {
-    results.push({ ...current, status: 'failed', stage: current.stage,
-      error: cause instanceof Error ? cause.message : String(cause) })
-    current = null
-  }
-  writeFileSync(resultPath, JSON.stringify(results))
-  process.exit(0)
-}
-const { createRequire } = await import('node:module')
-const workspaceRequire = createRequire(pathToFileURL(workspace + '/x.js'))
-let Context
-try {
-  const cordis = await import(pathToFileURL(workspaceRequire.resolve('@deepseek-ai/cordis')))
-  Context = cordis.Context
-} catch (cause) {
-  writeFileSync(resultPath, JSON.stringify([{ name: '@deepseek-ai/cordis', stage: 'import',
-    status: 'failed', error: '无法载入 cordis 运行时: ' + (cause instanceof Error ? cause.message : String(cause)) }]))
-  process.exit(0)
-}
-for (const row of rows) {
-  current = { name: row.name, stage: 'resolve' }
-  try {
-    const entryPath = workspaceRequire.resolve(row.name)
-    current.stage = 'import'
-    const mod = await import(pathToFileURL(entryPath))
-    const plugin = mod.default ?? mod
-    current.stage = 'apply'
-    const ctx = new Context()
-    if (row.dynamicConfig) ctx.plugin(plugin)
-    else if (row.config === undefined) ctx.plugin(plugin)
-    else ctx.plugin(plugin, row.config)
-    await new Promise((r) => setTimeout(r, 750))
-    results.push({ name: row.name, status: 'ok',
-      note: row.dynamicConfig ? '配置含动态表达式,以空配置应用' : undefined })
-    current = null
-  } catch (cause) {
-    results.push({ name: row.name, status: 'failed', stage: current.stage,
-      error: cause instanceof Error ? cause.message : String(cause) })
-    current = null
-  }
-}
-writeFileSync(resultPath, JSON.stringify(results))
-process.exit(0)
-`
-
-
-/**
- * 对插件目录执行隔离冒烟。
- * @param {string} pluginDir - 插件根目录。
- * @param {object} manifest - 已解析的 package.json。
- * @param {Array<{name: string, config?: unknown, disabled?: boolean, dynamicConfig: boolean}>} rows - 补丁行。
- * @param {{ keepWorkspace?: boolean }} [options]
- * @returns {{ findings: Array<{level: 'error'|'warning', rule: string, message: string}>, workspace?: string }}
- */
-export function checkSmoke(pluginDir, manifest, rows, options = {}) {
-  const findings = []
-  const error = (rule, message) => findings.push({ level: 'error', rule, message })
-  const warning = (rule, message) => findings.push({ level: 'warning', rule, message })
-
-  const workspace = mkdtempSync(join(tmpdir(), 'dsh-plugin-check-'))
-  const cleanup = () => {
-    if (options.keepWorkspace) return
-    try { rmSync(workspace, { recursive: true, force: true }) } catch { /* 临时目录残留不影响判定 */ }
-  }
-
-  try {
-    // S1 打包:--ignore-scripts 跳过 prepack 等脚本,只验证发布内容本身。
-    const pack = runNpm(['pack', resolve(pluginDir), '--ignore-scripts', '--pack-destination', workspace], workspace, INSTALL_TIMEOUT_MS)
-    if (pack.status !== 0) {
-      error('S1-pack', `npm pack 失败: ${(pack.stderr || pack.stdout || '').trim().split('\n').slice(-3).join(' ')}`)
-      return { findings, workspace: options.keepWorkspace ? workspace : undefined }
-    }
-    const tarball = readdirSync(workspace).find(name => name.endsWith('.tgz'))
-    if (tarball === undefined) {
-      error('S1-pack', 'npm pack 未产出 tgz')
-      return { findings, workspace: options.keepWorkspace ? workspace : undefined }
-    }
-
-    // S2 安装:插件走 tgz(等价用户侧的受控安装),运行时按插件自己
-    // 声明的 peer 范围解析;cordis 是冒烟宿主的最低要求,未声明则补上。
-    const dependencies = { [manifest.name]: `file:./${tarball}` }
-    const peers = manifest.peerDependencies ?? {}
-    for (const [name, range] of Object.entries(peers)) dependencies[name] = range
-    if (dependencies['@deepseek-ai/cordis'] === undefined) {
-      dependencies['@deepseek-ai/cordis'] = '*'
-      warning('S2-install', 'peerDependencies 未声明 @deepseek-ai/cordis,冒烟以最新版补齐;建议显式声明')
-    }
-    writeFileSync(join(workspace, 'package.json'), JSON.stringify({
-      name: 'dsh-plugin-check-workspace',
-      private: true,
-      dependencies,
-    }, undefined, 2))
-    const install = runNpm(
-      ['install', '--ignore-scripts', '--no-audit', '--no-fund', '--loglevel=error'],
-      workspace,
-      INSTALL_TIMEOUT_MS,
-    )
-    if (install.status !== 0) {
-      error('S2-install', `依赖装不出来(用户侧受控安装会同样失败): ${(install.stderr || '').trim().split('\n').slice(-4).join(' ')}`)
-      return { findings, workspace: options.keepWorkspace ? workspace : undefined }
-    }
-
-    // S3+S4 行级冒烟:解析/import/apply 三段判定在子进程完成。
-    const activeRows = rows.filter(row => !row.disabled)
-    if (activeRows.length === 0) {
-      warning('S3-rows', '补丁没有启用状态的行,冒烟无事可做')
-      return { findings, workspace: options.keepWorkspace ? workspace : undefined }
-    }
-    const runnerPath = join(workspace, '__runner.mjs')
-    const resultPath = join(workspace, '__result.json')
-    writeFileSync(runnerPath, RUNNER_SOURCE)
-    const run = spawnSync(process.execPath, [
-      runnerPath,
-      workspace,
-      resultPath,
-      JSON.stringify(activeRows.map(row => ({ name: row.name, config: row.config, dynamicConfig: row.dynamicConfig }))),
-    ], { cwd: workspace, encoding: 'utf8', timeout: RUNNER_TIMEOUT_MS })
-    if (!existsSync(resultPath)) {
-      const reason = run.signal === 'SIGTERM'
-        ? `超时(${RUNNER_TIMEOUT_MS / 1000}s):入口疑似在顶层做阻塞等待`
-        : (run.stderr || '子进程未产出结果').trim().split('\n').slice(-3).join(' ')
-      error('S4-apply', `冒烟子进程异常: ${reason}`)
-      return { findings, workspace: options.keepWorkspace ? workspace : undefined }
-    }
-    const results = JSON.parse(readFileSync(resultPath, 'utf8'))
-    const passed = results.filter(result => result.status === 'ok').length
-    findings.push({ level: 'info', rule: 'S4-apply', message: `隔离冒烟: ${passed}/${results.length} 行通过(解析→import→应用)` })
-    for (const result of results) {
-      if (result.status === 'ok') {
-        if (result.note !== undefined) warning('S4-apply', `${result.name}: ${result.note}`)
-        continue
-      }
-      const stageLabel = { resolve: '入口解析', import: 'import 载入', apply: '插件应用' }[result.stage] ?? result.stage
-      error('S4-apply', `${result.name} 在 ${stageLabel} 阶段失败: ${result.error}(装入用户 Cowork 会在启动链同点崩溃)`)
-    }
-    return { findings, workspace: options.keepWorkspace ? workspace : undefined }
-  } finally {
-    cleanup()
-  }
-}
+/* ============================================================
+ * 阶段②:隔离启动冒烟(联网,分钟级)
+ * ============================================================
+ * 在临时工作区里按插件自己声明的 peer 范围装出一套真实运行时,
+ * 然后在子进程里逐行做真实网关会做的事:import 补丁行入口、
+ * new Context()、ctx.plugin() 应用。这里能过,插件就不会以
+ * "装上即崩"的方式杀死用户的 Cowork:
+ *  - 装不上(依赖解析失败)在 install 步暴露;
+ *  - import 期崩溃(顶层异常/缺模块/ESM 形状)在 import 步暴露;
+ *  - 应用期崩溃(apply 抛出/插件形状不合法)在 plugin 步暴露;
+ *  - 声明了 inject 而服务未注入属正常停车,不算失败。
+ * 全程 --ignore-scripts,被测代码没有机会在检查器进程里执行
+ * 安装钩子;插件代码只在一次性子进程里运行,超时即杀。
+ * ============================================================ */
+import { spawnSync } from 'node:child_process'
+import { mkdtempSync, readFileSync, rmSync, writeFileSync, existsSync, readdirSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join, resolve } from 'node:path'
+import { runNpm } from './npm.mjs'
+
+const RUNNER_TIMEOUT_MS = 90_000
+const INSTALL_TIMEOUT_MS = 300_000
+const PROBE_TIMEOUT_MS = 60_000
+
+/** 子进程执行的行级冒烟脚本;结果写文件,避开插件对 stdout 的污染。 */
+const RUNNER_SOURCE = `
+import { pathToFileURL } from 'node:url'
+import { writeFileSync } from 'node:fs'
+const [workspace, resultPath, rowsJson] = process.argv.slice(2)
+const rows = JSON.parse(rowsJson)
+const results = []
+let current = null
+process.on('uncaughtException', (cause) => finish(cause))
+process.on('unhandledRejection', (cause) => finish(cause))
+function finish(cause) {
+  if (current !== null) {
+    results.push({ ...current, status: 'failed', stage: current.stage,
+      error: cause instanceof Error ? cause.message : String(cause) })
+    current = null
+  }
+  writeFileSync(resultPath, JSON.stringify(results))
+  process.exit(0)
+}
+const { createRequire } = await import('node:module')
+const workspaceRequire = createRequire(pathToFileURL(workspace + '/x.js'))
+let Context
+try {
+  const cordis = await import(pathToFileURL(workspaceRequire.resolve('@deepseek-ai/cordis')))
+  Context = cordis.Context
+} catch (cause) {
+  writeFileSync(resultPath, JSON.stringify([{ name: '@deepseek-ai/cordis', stage: 'import',
+    status: 'failed', error: '无法载入 cordis 运行时: ' + (cause instanceof Error ? cause.message : String(cause)) }]))
+  process.exit(0)
+}
+for (const row of rows) {
+  current = { name: row.name, stage: 'resolve' }
+  try {
+    const entryPath = workspaceRequire.resolve(row.name)
+    current.stage = 'import'
+    const mod = await import(pathToFileURL(entryPath))
+    const plugin = mod.default ?? mod
+    current.stage = 'apply'
+    const ctx = new Context()
+    if (row.dynamicConfig) ctx.plugin(plugin)
+    else if (row.config === undefined) ctx.plugin(plugin)
+    else ctx.plugin(plugin, row.config)
+    await new Promise((r) => setTimeout(r, 750))
+    results.push({ name: row.name, status: 'ok',
+      note: row.dynamicConfig ? '配置含动态表达式,以空配置应用' : undefined })
+    current = null
+  } catch (cause) {
+    results.push({ name: row.name, status: 'failed', stage: current.stage,
+      error: cause instanceof Error ? cause.message : String(cause) })
+    current = null
+  }
+}
+writeFileSync(resultPath, JSON.stringify(results))
+process.exit(0)
+`
+
+
+/** 宿主内核作用域:这些包由宿主提供,私有版本本就不在公开源上。 */
+const CORE_SCOPE = '@deepseek-ai/'
+
+/**
+ * 找出「公开源上取不到、但不该算插件问题」的依赖。
+ * 宿主内核包(@deepseek-ai/*)的内部版本只发在私有源,检查器在
+ * 公网环境里必然解析不到 —— 据此判插件不合格是冤枉它。其它包
+ * 解析不到就是插件自己声明错了范围,仍按 error 处理。
+ * @param {Record<string, string>} dependencies - 工作区依赖表。
+ * @param {string} workspace - 探测执行目录。
+ * @returns {string[]} 取不到的内核包(带版本范围)。
+ */
+function findUnreachableCoreDependencies(dependencies, workspace) {
+  const missing = []
+  for (const [name, range] of Object.entries(dependencies)) {
+    if (!name.startsWith(CORE_SCOPE)) continue
+    if (typeof range !== 'string' || range.startsWith('file:')) continue
+    const view = runNpm(['view', `${name}@${range}`, 'version', '--json'], workspace, PROBE_TIMEOUT_MS)
+    const output = `${view.stderr}${view.stdout}`
+    // 版本存在时 npm view 会打印版本号;解析不到才算取不到。
+    if (view.status !== 0 || output.trim() === '' || output.trim() === '[]') {
+      missing.push(`${name}@${range}`)
+    }
+  }
+  return missing
+}
+
+/**
+ * 对插件目录执行隔离冒烟。
+ * @param {string} pluginDir - 插件根目录。
+ * @param {object} manifest - 已解析的 package.json。
+ * @param {Array<{name: string, config?: unknown, disabled?: boolean, dynamicConfig: boolean}>} rows - 补丁行。
+ * @param {{ keepWorkspace?: boolean }} [options]
+ * @returns {{ findings: Array<{level: 'error'|'warning', rule: string, message: string}>, workspace?: string }}
+ */
+export function checkSmoke(pluginDir, manifest, rows, options = {}) {
+  const findings = []
+  const error = (rule, message) => findings.push({ level: 'error', rule, message })
+  const warning = (rule, message) => findings.push({ level: 'warning', rule, message })
+
+  const workspace = mkdtempSync(join(tmpdir(), 'dsh-plugin-check-'))
+  const cleanup = () => {
+    if (options.keepWorkspace) return
+    try { rmSync(workspace, { recursive: true, force: true }) } catch { /* 临时目录残留不影响判定 */ }
+  }
+
+  try {
+    // S1 打包:--ignore-scripts 跳过 prepack 等脚本,只验证发布内容本身。
+    const pack = runNpm(['pack', resolve(pluginDir), '--ignore-scripts', '--pack-destination', workspace], workspace, INSTALL_TIMEOUT_MS)
+    if (pack.status !== 0) {
+      error('S1-pack', `npm pack 失败: ${(pack.stderr || pack.stdout || '').trim().split('\n').slice(-3).join(' ')}`)
+      return { findings, workspace: options.keepWorkspace ? workspace : undefined }
+    }
+    const tarball = readdirSync(workspace).find(name => name.endsWith('.tgz'))
+    if (tarball === undefined) {
+      error('S1-pack', 'npm pack 未产出 tgz')
+      return { findings, workspace: options.keepWorkspace ? workspace : undefined }
+    }
+
+    // S2 安装:插件走 tgz(等价用户侧的受控安装),运行时按插件自己
+    // 声明的 peer 范围解析;cordis 是冒烟宿主的最低要求,未声明则补上。
+    const dependencies = { [manifest.name]: `file:./${tarball}` }
+    const peers = manifest.peerDependencies ?? {}
+    for (const [name, range] of Object.entries(peers)) dependencies[name] = range
+    if (dependencies['@deepseek-ai/cordis'] === undefined) {
+      dependencies['@deepseek-ai/cordis'] = '*'
+      warning('S2-install', 'peerDependencies 未声明 @deepseek-ai/cordis,冒烟以最新版补齐;建议显式声明')
+    }
+    writeFileSync(join(workspace, 'package.json'), JSON.stringify({
+      name: 'dsh-plugin-check-workspace',
+      private: true,
+      dependencies,
+    }, undefined, 2))
+    const install = runNpm(
+      ['install', '--ignore-scripts', '--no-audit', '--no-fund', '--loglevel=error'],
+      workspace,
+      INSTALL_TIMEOUT_MS,
+    )
+    if (install.status !== 0) {
+      const detail = (install.stderr || '').trim().split('\n').slice(-4).join(' ')
+      // 区分「真装不出来」和「内核内部版本在公开源取不到」:后者是
+      // 检查环境的限制,判成不合格会冤枉插件,只如实标注冒烟未执行。
+      const unreachable = findUnreachableCoreDependencies(dependencies, workspace)
+      if (unreachable.length > 0) {
+        warning('S2-install', `宿主内核依赖 ${unreachable.join('、')} 在公开 npm 上取不到(内部版本),隔离冒烟无法执行,已跳过;`
+          + `清单规则仍已判定。如需完整冒烟,请在能访问这些包的环境里重跑。原始错误: ${detail}`)
+      } else {
+        error('S2-install', `依赖装不出来(用户侧受控安装会同样失败): ${detail}`)
+      }
+      return { findings, workspace: options.keepWorkspace ? workspace : undefined }
+    }
+
+    // S3+S4 行级冒烟:解析/import/apply 三段判定在子进程完成。
+    const activeRows = rows.filter(row => !row.disabled)
+    if (activeRows.length === 0) {
+      warning('S3-rows', '补丁没有启用状态的行,冒烟无事可做')
+      return { findings, workspace: options.keepWorkspace ? workspace : undefined }
+    }
+    const runnerPath = join(workspace, '__runner.mjs')
+    const resultPath = join(workspace, '__result.json')
+    writeFileSync(runnerPath, RUNNER_SOURCE)
+    const run = spawnSync(process.execPath, [
+      runnerPath,
+      workspace,
+      resultPath,
+      JSON.stringify(activeRows.map(row => ({ name: row.name, config: row.config, dynamicConfig: row.dynamicConfig }))),
+    ], { cwd: workspace, encoding: 'utf8', timeout: RUNNER_TIMEOUT_MS })
+    if (!existsSync(resultPath)) {
+      const reason = run.signal === 'SIGTERM'
+        ? `超时(${RUNNER_TIMEOUT_MS / 1000}s):入口疑似在顶层做阻塞等待`
+        : (run.stderr || '子进程未产出结果').trim().split('\n').slice(-3).join(' ')
+      error('S4-apply', `冒烟子进程异常: ${reason}`)
+      return { findings, workspace: options.keepWorkspace ? workspace : undefined }
+    }
+    const results = JSON.parse(readFileSync(resultPath, 'utf8'))
+    const passed = results.filter(result => result.status === 'ok').length
+    findings.push({ level: 'info', rule: 'S4-apply', message: `隔离冒烟: ${passed}/${results.length} 行通过(解析→import→应用)` })
+    for (const result of results) {
+      if (result.status === 'ok') {
+        if (result.note !== undefined) warning('S4-apply', `${result.name}: ${result.note}`)
+        continue
+      }
+      const stageLabel = { resolve: '入口解析', import: 'import 载入', apply: '插件应用' }[result.stage] ?? result.stage
+      error('S4-apply', `${result.name} 在 ${stageLabel} 阶段失败: ${result.error}(装入用户 Cowork 会在启动链同点崩溃)`)
+    }
+    return { findings, workspace: options.keepWorkspace ? workspace : undefined }
+  } finally {
+    cleanup()
+  }
+}

package/lib/tarball.mjs

@@ -0,0 +1,98 @@
+/* ============================================================
+ * npm tarball 单文件读取(零依赖)
+ * ============================================================
+ * registry 的版本清单里没有包内文件内容,而 M4/M5 这类规则必须
+ * 读到 cordis.patch.yml 本身 —— 曾有插件把补丁行的 name 写成
+ * cordis 插件名而非包名,清单看不出任何异常,装上却让整棵插件树
+ * 加载失败。会话内体检没有 npm 子进程可用,因此这里直接取
+ * dist.tarball,用 node:zlib 解 gzip 后自行走 tar 头,只取需要的
+ * 那一个文件。
+ * ============================================================ */
+import { gunzipSync } from 'node:zlib'
+
+const BLOCK = 512
+const DEFAULT_MAX_BYTES = 25 * 1024 * 1024
+const DEFAULT_TIMEOUT_MS = 20_000
+
+const readString = (buffer, offset, length) => {
+  const slice = buffer.subarray(offset, offset + length)
+  const end = slice.indexOf(0)
+  return slice.subarray(0, end === -1 ? slice.length : end).toString('utf8')
+}
+
+/** tar 头里的数值字段是补零的八进制字符串;空字段按 0 处理。 */
+const readOctal = (buffer, offset, length) => {
+  const raw = readString(buffer, offset, length).trim()
+  if (raw === '') return 0
+  const value = Number.parseInt(raw, 8)
+  return Number.isFinite(value) ? value : 0
+}
+
+/**
+ * 遍历 tar,返回首个匹配的条目内容。
+ * 处理 ustar 的 prefix 拼接与 pax(typeflag 'x')的路径覆盖,
+ * 因此长路径与非 ASCII 路径同样可取。
+ * @param {Buffer} tar - 解压后的 tar 字节。
+ * @param {(path: string) => boolean} match - 路径判定(已剥掉顶层 package/)。
+ * @returns {string | undefined}
+ */
+export function readTarEntry(tar, match) {
+  let offset = 0
+  let paxPath
+  while (offset + BLOCK <= tar.length) {
+    const header = tar.subarray(offset, offset + BLOCK)
+    if (header.every(byte => byte === 0)) break
+    const name = readString(header, 0, 100)
+    const size = readOctal(header, 124, 12)
+    const typeflag = readString(header, 156, 1)
+    const prefix = readString(header, 345, 155)
+    const dataOffset = offset + BLOCK
+    const padded = Math.ceil(size / BLOCK) * BLOCK
+    if (typeflag === 'x' || typeflag === 'X') {
+      // pax 扩展头:形如 "<len> path=<value>\n",覆盖紧随其后的条目路径。
+      const record = tar.subarray(dataOffset, dataOffset + size).toString('utf8')
+      const found = /(?:^|\n)\d+ path=([^\n]*)\n/u.exec(record)
+      paxPath = found === null ? undefined : found[1]
+      offset = dataOffset + padded
+      continue
+    }
+    const full = paxPath ?? (prefix === '' ? name : `${prefix}/${name}`)
+    paxPath = undefined
+    if (typeflag === '' || typeflag === '0') {
+      // npm 打包约定顶层统一为 package/。
+      const relative = full.replace(/^[^/]+\//u, '')
+      if (match(relative)) return tar.subarray(dataOffset, dataOffset + size).toString('utf8')
+    }
+    offset = dataOffset + padded
+  }
+  return undefined
+}
+
+/**
+ * 下载并解出 tarball 中的一个文件。
+ * 任何取不到的情形都以 { error } 返回,由调用方降级成提示而不是判定
+ * 插件不合格 —— 网络问题不是插件的过错。
+ * @param {string} url - registry 的 dist.tarball。
+ * @param {(path: string) => boolean} match
+ * @param {{ maxBytes?: number, timeoutMs?: number }} [options]
+ * @returns {Promise<{ content?: string } | { error: string }>}
+ */
+export async function fetchTarEntry(url, match, options = {}) {
+  const maxBytes = options.maxBytes ?? DEFAULT_MAX_BYTES
+  const controller = new AbortController()
+  const timer = setTimeout(() => controller.abort(), options.timeoutMs ?? DEFAULT_TIMEOUT_MS)
+  try {
+    const response = await fetch(url, { signal: controller.signal })
+    if (!response.ok) return { error: `下载 tarball 失败(HTTP ${response.status})` }
+    const declared = Number(response.headers.get('content-length') ?? '0')
+    if (declared > maxBytes) return { error: `tarball 超过 ${Math.round(maxBytes / 1024 / 1024)}MB,跳过包内检查` }
+    const raw = Buffer.from(await response.arrayBuffer())
+    if (raw.length > maxBytes) return { error: `tarball 超过 ${Math.round(maxBytes / 1024 / 1024)}MB,跳过包内检查` }
+    return { content: readTarEntry(gunzipSync(raw), match) }
+  } catch (cause) {
+    const reason = cause instanceof Error ? cause.message : String(cause)
+    return { error: cause?.name === 'AbortError' ? '下载 tarball 超时' : `读取 tarball 失败: ${reason}` }
+  } finally {
+    clearTimeout(timer)
+  }
+}

package/package.json

@@ -1,44 +1,44 @@
-{
-  "name": "@tokensapi/dsh-plugin-check",
-  "version": "0.3.1",
-  "description": "TokensCowork/DSH \u63d2\u4ef6\u5408\u683c\u6027\u4f53\u68c0:CLI \u4e00\u6761\u547d\u4ee4\u5224\u5b9a\u63d2\u4ef6\u80fd\u5426\u5b89\u5168\u88c5\u5165\u5bbf\u4e3b;\u88c5\u5165 Cowork \u540e\u63d0\u4f9b\u4f1a\u8bdd\u5185 plugin_check \u5de5\u5177\u3002",
-  "type": "module",
-  "bin": {
-    "dsh-plugin-check": "bin/dsh-plugin-check.mjs"
-  },
-  "files": [
-    "bin",
-    "lib",
-    "cordis.patch.yml",
-    "README.md"
-  ],
-  "scripts": {
-    "test": "node --test \"tests/*.test.mjs\""
-  },
-  "engines": {
-    "node": ">=22.0.0"
-  },
-  "dependencies": {
-    "js-yaml": "^4.1.0",
-    "semver": "^7.6.0"
-  },
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/TokensAPI/tokens_DshPluginCheck_code.git"
-  },
-  "main": "lib/cowork-plugin.mjs",
-  "exports": {
-    ".": "./lib/cowork-plugin.mjs"
-  },
-  "peerDependencies": {
-    "@deepseek-ai/cordis": "4.0.1 || 4.0.2",
-    "@deepseek-ai/dsh-tools": "0.1.0-rc.8 || 0.1.3-alpha.1"
-  },
-  "dsh": {
-    "engine": ">=0.1.0-rc.8 <0.2.0",
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    }
-  }
-}
+{
+  "name": "@tokensapi/dsh-plugin-check",
+  "version": "0.3.2",
+  "description": "TokensCowork/DSH \u63d2\u4ef6\u5408\u683c\u6027\u4f53\u68c0:CLI \u4e00\u6761\u547d\u4ee4\u5224\u5b9a\u63d2\u4ef6\u80fd\u5426\u5b89\u5168\u88c5\u5165\u5bbf\u4e3b;\u88c5\u5165 Cowork \u540e\u63d0\u4f9b\u4f1a\u8bdd\u5185 plugin_check \u5de5\u5177\u3002",
+  "type": "module",
+  "bin": {
+    "dsh-plugin-check": "bin/dsh-plugin-check.mjs"
+  },
+  "files": [
+    "bin",
+    "lib",
+    "cordis.patch.yml",
+    "README.md"
+  ],
+  "scripts": {
+    "test": "node --test \"tests/*.test.mjs\""
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "dependencies": {
+    "js-yaml": "^4.1.0",
+    "semver": "^7.6.0"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/TokensAPI/tokens_DshPluginCheck_code.git"
+  },
+  "main": "lib/cowork-plugin.mjs",
+  "exports": {
+    ".": "./lib/cowork-plugin.mjs"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "4.0.1 || 4.0.2",
+    "@deepseek-ai/dsh-tools": "0.1.0-rc.8 || 0.1.3-alpha.1"
+  },
+  "dsh": {
+    "engine": ">=0.1.0-rc.8 <0.2.0",
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  }
+}