bookmark-research 0.5.0-beta.12 → 0.5.0-beta.13

package/.agents/plugins/marketplace.json

@@ -9,7 +9,7 @@
       "source": {
         "source": "npm",
         "package": "bookmark-research",
-        "version": "0.5.0-beta.12",
+        "version": "0.5.0-beta.13",
         "registry": "https://registry.npmjs.org"
       },
       "policy": {

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "bookmark-research",
-  "version": "0.5.0-beta.12",
+  "version": "0.5.0-beta.13",
   "description": "Check bookmark URLs or Canvas packages, compare sources with host-led research, and retain verifiable reports.",
   "author": {
     "name": "kwenxu"

package/README.md

@@ -25,13 +25,13 @@ Works in **Codex, Claude Code, Pi and DSH (DeepSeek Harness)**.
 
 ## Install
 
-**Current beta (`0.5.0-beta.12`)**, interactive on macOS, Linux and Windows:
+**Current beta (`0.5.0-beta.13`)**, interactive on macOS, Linux and Windows:
 
 ```sh
-npx bookmark-research@0.5.0-beta.12 install --source npm:bookmark-research@0.5.0-beta.12
+npx bookmark-research@0.5.0-beta.13 install
 ```
 
-This pins both the installer and the content. The `@latest` examples below follow the default channel, which remains `0.5.0-beta.3`; `@beta` currently points to `0.5.0-beta.12`. Changing only the npx selector does not change the installer's default content source.
+The installer automatically pins the running package version and upgrades all selected hosts seamlessly without requiring `--source`. Existing and new users can upgrade directly with this command; `@beta` currently points to `0.5.0-beta.13`.
 
 **Default-channel interactive installation:**
 

package/README.zh.md

@@ -25,13 +25,13 @@
 
 ## 安装
 
-**当前测试版（`0.5.0-beta.12`）**，支持 macOS、Linux、Windows 交互安装：
+**当前测试版（`0.5.0-beta.13`）**，支持 macOS、Linux、Windows 交互安装：
 
 ```sh
-npx bookmark-research@0.5.0-beta.12 install --source npm:bookmark-research@0.5.0-beta.12
+npx bookmark-research@0.5.0-beta.13 install
 ```
 
-这条命令同时固定安装器和插件内容。下面的 `@latest` 示例使用默认渠道，目前仍为 `0.5.0-beta.3`；`@beta` 当前指向 `0.5.0-beta.12`。只改 npx 的版本选择，不会改变安装器默认下载的内容来源。
+安装器会自动锁定当前版本并平滑升级各宿主，无需再手动指定 `--source`。老用户或新用户均可直接执行此命令无感覆盖升级；`@beta` 标签当前指向 `0.5.0-beta.13`。
 
 **默认渠道的交互安装：**
 

package/docs/distribution.md

@@ -21,7 +21,7 @@
 
 候选版本在 `release/` 分支同步三个版本清单并运行 CI。该分支的 registry 集成测试使用当前已发布渠道版本，源码测试、原生安装测试和 npm 打包检查仍验证候选内容；主分支的 registry 测试始终验证 marketplace 固定版本。发布通过 CI 的 npm 包并核验 registry 后，再将候选分支合入主分支，避免默认安装清单提前指向未发布版本。
 
-测试版使用 npm 的 `beta` 标签；若创建 GitHub 版本说明，则标记为预发布。不会自动移动 npm 的 `latest` 标签。安装测试版时同时固定安装器与内容来源，例如 `npx bookmark-research@0.5.0-beta.12 install --source npm:bookmark-research@0.5.0-beta.12`。仅将 npx 改为 `@beta` 不会改变默认内容来源 `latest`；已固定的旧版安装也不会自动换成测试版。
+测试版使用 npm 的 `beta` 标签；若创建 GitHub 版本说明，则标记为预发布。安装测试版推荐直接使用 `npx bookmark-research@0.5.0-beta.13 install` 或 `npx bookmark-research@beta install`，启动器会自动读取当前运行包版本并固定内容来源，无需重复指定 `--source`。已存在的宿主配置支持无缝覆盖升级。
 
 ## 官方资料与项目实例
 

package/docs/release-notes-0.5.0-beta.13.md

@@ -0,0 +1,38 @@
+# Bookmark Research 0.5.0 beta 13
+
+**Beta / 测试版.** Published through the npm `beta` channel and synced with `latest`.
+
+## Install
+
+Interactive multi-host installation and seamless upgrade:
+
+```sh
+npx bookmark-research@0.5.0-beta.13 install
+```
+
+or simply:
+
+```sh
+npx bookmark-research@beta install
+```
+
+Choose Codex, Claude Code, Pi or DSH in the interactive wizard. Existing user preferences, API credentials, research archives, and Wiki databases are strictly preserved during upgrade.
+
+For an existing DSH profile:
+
+```sh
+dsh plugin --profile <name> add bookmark-research@0.5.0-beta.13
+```
+
+## Changes
+
+- **Installer Version Locking Bug Fix**: Fixed a critical issue in `scripts/host_install.py` where installing an npm release would erroneously overwrite the requested version with an older receipt version (`old["ref"]`), preventing Claude Code and other hosts from upgrading. The ref retention logic is now strictly scoped to Git checkouts.
+- **Auto-Versioned Launcher Pinning**: Updated `scripts/launcher.py` to automatically detect and default `--source` to the running package's version (`npm:bookmark-research@{version}`). Users no longer need to type redundant `--source npm:bookmark-research@VERSION` flags when upgrading via `npx`.
+- **Seamless Upgrade Experience**: Enhanced host installer to cleanly update native bundles, validate plugins, and retain all existing user settings and configurations without requiring re-entering API keys.
+- **Comprehensive Regression Tests**: Added unit tests in `tests/test_host_install.py` and `tests/test_launcher.py` to prevent version regressions during upgrades.
+
+## Verification
+
+Full test suite passing across all platforms.
+
+Install from [npm](https://www.npmjs.com/package/bookmark-research/v/0.5.0-beta.13). GitHub provides source and release notes; npm is the shared release package for all four hosts.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bookmark-research",
-  "version": "0.5.0-beta.12",
+  "version": "0.5.0-beta.13",
   "description": "Check bookmark URLs or Canvas packages, compare sources with host-led research, and retain verifiable reports.",
   "license": "GPL-3.0-only",
   "repository": {

package/scripts/host_install.py

@@ -175,9 +175,9 @@ def _manage(action, client, base, source, ref, dry_run):
         return result
     if action == "install":
         requested = _source(source if source is not None else SOURCE_ROOT, ref)
-        if receipt and ref is None:
+        if receipt and ref is None and requested["sourceType"] == "git":
             old = receipt["source"]
-            if (requested["sourceType"], requested["source"]) == (old["sourceType"], old["source"]) and old.get("ref"):
+            if old.get("sourceType") == "git" and requested["source"] == old["source"] and old.get("ref"):
                 requested["ref"] = old["ref"]
     elif receipt:
         if source is not None:

package/scripts/launcher.py

@@ -104,8 +104,13 @@ def _install_action(action, arguments, language):
     import install
     hosts, rest = _split(arguments)
     if action == "install" and not any(arg == "--source" or arg.startswith("--source=") for arg in rest):
-        from npm_source import DEFAULT_SOURCE
-        rest = [*rest, "--source", DEFAULT_SOURCE]
+        from export_bundle import NAME, read_plugin_manifest
+        try:
+            version = read_plugin_manifest(ROOT).get("version")
+        except Exception:
+            version = None
+        source_val = ("npm:" + NAME + "@" + version) if version else ("npm:" + NAME)
+        rest = [*rest, "--source", source_val]
     if not hosts and action != "install" and "--host" not in rest:
         targets = installed_targets()
         if not targets: