dsh-eda-mcp 1.0.2 → 1.1.0

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # Changelog
 
+## 1.1.0 — 2026-10-21
+
+### `/eda/` 下载限流（服务器侧，5 次/分钟/IP）
+
+服务器新增 nginx 令牌桶限流：`limit_req_zone $eda_rate_key zone=eda_download:10m rate=5r/m`，`burst=5 nodelay`，超限返回 **429** 并带可读响应体；`127.0.0.1`/`::1` 用 `geo` 置空 key 白名单放行，服务器自查与上传校验不会被限流。区域配置在 `/etc/nginx/conf.d/eda-ratelimit.conf`，限流指令在 `/eda/` location 内。
+
+- 实测：连续请求 → 前 6 次 `200`，第 7 次起 `429`；被限流期间 `/dreamspeedrun/` 仍 `200`、`/files/` 仍 `403`（未受影响）。
+- `eda_extension_package` 遇 `429` 时返回 `verified: unverified` + `httpStatus: 429` 并明确说明"是限流，不是校验不一致"（真机触发验证过）；`verified` 绝不会把限流误报成 `mismatch`。
+- 记录一个事实：nginx **不支持 `rate=20r/h`**（单位只有 `r/s`、`r/m`，实测 `invalid rate`），所以按你的决定改为 `5r/m`。
+
+
+
+### 扩展 zip 的下载与校验（线协议不变 0.4.9）
+
+之前只有"本地那份"和"服务器那份"，**没有任何东西能证明二者一致**，也没有从服务器下载的能力：
+
+- 新增工具 `eda_extension_package`：报告插件自带 zip 的路径/字节数/sha256；`download:true` 时从下载服务器取回同一文件并**逐字节比较**，给出 `verified: match | mismatch`；一致才写入 `outDir`（默认临时目录），不一致**不落盘**并提示重新上传；`base` 可用 `DSH_EDA_EXTENSION_BASE` 覆盖。
+- 新增纯函数模块 `src/bridge/extension-package.ts`（sha256、URL 拼接、"缺摘要算 unverified 而不是通过"）+ `test/extension-package.test.ts`（进入 `pnpm test`，共 10 套）。
+- **修掉一个真 bug**：`build.mjs` 的 `Compress-Archive` 把文件 mtime 打进 zip，同一份源码两次构建得到**不同字节**（实测同为 9827 字节、sha256 不同），校验因此永远假阴性。现在打包前把暂存目录（含子目录）mtime 固定为 2020-01-01，**构建可复现**：连续两次 build 同为 `827e9ad9…`。
+- 真机验证：上传可复现 zip → 服务器 `sha256sum` 与本地一致 → `eda_extension_package({download:true})` 返回 `verified: match` 并落盘。
+
 ## 1.0.2 — 2026-10-20
 
 ### 覆铜调查结案（扩展 0.4.7 / 0.4.8 真机）

package/CONTRIBUTING.md

@@ -106,6 +106,39 @@ git push origin main --follow-tags
 extension have their own version pair (they are the wire contract between the
 bridge process and JLCEDA, and `eda_status` reports a mismatch).
 
+### Uploading the extension zip to the download server
+
+Every wire-version bump produces a new `dsh-eda-bridge-extension-<version>.zip` (it is
+gitignored, so the file lives only in the npm tarball and on the download server). The
+maintainer asked for the server copy to be refreshed on every update — do it in the same
+session that bumps the extension, not later:
+
+1. upload the new zip to `/var/www/eda-download/` on `tencent` (`root@159.75.130.207`)
+   **without deleting older versions** — the version is in the filename, so old links keep
+   working;
+2. verify the transfer: the remote `sha256sum` must equal `Get-FileHash` locally, and
+   `curl -sI http://159.75.130.207/eda/<zip>` must answer `200` + `Content-Type:
+   application/zip` + the exact byte count;
+3. only then hand the link out:
+   `http://159.75.130.207/eda/dsh-eda-bridge-extension-<version>.zip`
+   (the listing at `http://159.75.130.207/eda/` shows every published zip).
+
+The directory is served by one additive `location /eda/` block in
+`/etc/nginx/conf.d/voice.conf`; adding or replacing files needs no nginx change and no
+reload. Keep every other part of that server untouched.
+
+### Rate limit
+
+`/eda/` is throttled to **5 requests/minute per IP with burst 5** (nginx `limit_req`,
+`rate=5r/m`): six requests pass immediately, the seventh answers `429` with a readable body.
+`127.0.0.1` and `::1` are exempt (geo key is empty), so server-side checks never throttle.
+The zone lives in `/etc/nginx/conf.d/eda-ratelimit.conf`, the limit itself inside the `/eda/`
+location; changing the rate needs `nginx -t` plus a reload.
+
+Verifying an upload from an office IP can therefore hit the limit: `eda_extension_package`
+reports that as `verified: 'unverified'` with `httpStatus: 429` — wait about a minute and
+retry instead of suspecting the artifact. A `429` is never a checksum mismatch.
+
 Publishing to npm is documented step by step in [`docs/release.md`](docs/release.md):
 first release is manual (2FA / staged publishing), afterwards the `publish`
 workflow releases on every `v*` tag through npm trusted publishing (OIDC, no

package/README.md

@@ -41,6 +41,24 @@ toolchain is needed. The extension still has to be imported into JLCEDA Pro by h
 sits at `node_modules/dsh-eda-mcp/dsh-eda-bridge-extension-<version>.zip` (or download it from the
 settings card).
 
+Direct links (no package install needed):
+
+- `http://159.75.130.207/eda/dsh-eda-bridge-extension-0.4.9.zip` (current wire version)
+- `http://159.75.130.207/eda/` - directory listing of every uploaded extension zip
+
+The filename always carries the wire version; check `eda_status` after importing and restart JLCEDA
+Pro when the version differs from the bridge.
+
+Verification: `eda_extension_package` reports the zip this plugin ships (path, bytes, sha256) and,
+with `download: true`, fetches the served copy and compares the two byte for byte (`verified: match |
+mismatch`). On a match it saves the file to `outDir` (default: the temp directory); on a mismatch it
+writes nothing and tells you to re-upload. The zip build is reproducible, so equal sources always
+produce the same sha256.
+
+The download server throttles `/eda/` to 5 requests/minute per IP (burst 5, loopback exempt), so
+a `429` shows up as `verified: 'unverified'` with `httpStatus: 429` — that is throttling, not a
+checksum mismatch; wait a minute and retry.
+
 ### 1. Install into the DSH web profile
 
 ```sh

package/README.zh.md

@@ -50,6 +50,17 @@ pnpm add dsh-eda-mcp            # 或用 Web GUI 的插件管理器安装
 发布包里已包含 `lib/` 与 `dsh-eda-bridge-extension-<线协议版本>.zip`，**不需要构建工具链**。扩展仍需手动导入
 嘉立创EDA：zip 位于 `node_modules/dsh-eda-mcp/dsh-eda-bridge-extension-<线协议版本>.zip`（也可从设置卡片下载，下载到的文件名自带版本号）。
 
+直链（不用装包也能下）：
+
+- `http://159.75.130.207/eda/dsh-eda-bridge-extension-0.4.9.zip`（当前线协议版本）
+- `http://159.75.130.207/eda/` —— 所有已上传扩展 zip 的目录列表
+
+文件名自带线协议版本：导入后用 `eda_status` 核对，版本与桥接不一致就重启嘉立创EDA专业版。
+
+校验：`eda_extension_package` 报告插件自带的 zip（路径、字节数、sha256）；传 `download: true` 时会把服务器那份取回来逐字节比对（`verified: match | mismatch`），一致才存到 `outDir`（默认临时目录），不一致则不落盘并提示重新上传。zip 构建已改为可复现，同样的源码永远得到同一个 sha256。
+
+下载服务器对 `/eda/` 限流 **5 次/分钟/IP**（burst 5，回环地址豁免）：被限流时工具返回 `verified: unverified` 且 `httpStatus: 429` —— 这是限流，不是校验不一致，等一分钟重试即可。
+
 ### 1. 安装到 DSH Web profile
 
 ```sh

package/docs/schematic-workflow.md

@@ -292,5 +292,6 @@ C. 只做 PCB：
 - **插件代码改动对当前会话完全不生效**：宿主在启动时把 `lib/index.js` 载入内存，之后改文件、重新 build 都不会热更新。
 - 版本纪律：扩展线协议**只递增最小位**（`0.4.1 → 0.4.2`），每次改动必须同时改 `jlc-extension/extension.json` 的 `version` 与桥接的 `VERSION`；不一致时 `eda_status.versionMismatch` 为 true。
 - 新会话开工顺序：`eda_status`（连没连、版本对不对）→ 本技能（怎么干）→ 再动手；不要先假设环境就绪。
+| 需要扩展 zip（换机器/给别人） | 不清楚该给哪一份 | `eda_extension_package` 报路径+sha256；`download:true` 从服务器取回并逐字节比对（`verified`），一致才落盘 |
 - 扩展 zip 位置：`node_modules/dsh-eda-mcp/dsh-eda-bridge-extension-<版本>.zip`，或设置卡片下载（文件名自带版本号）。
 - 排查顺序：`eda_status` → `/api/dsh-eda-mcp/diagnostics`（`clientStartupError` / `skills` / `bridgeHealth`）→ `eda_list_api_methods`（白名单）→ 应用侧 DRC 面板。

package/docs/tools.md

@@ -176,3 +176,9 @@ Design limits enforced by these tools (track widths, via sizes, net naming) are
 |---|---|---|
 | `eda_api_call` | Call an allow-listed JLCEDA Pro extension API method directly. | `method: string, args: array` |
 
+## Other
+
+| Tool | Description | Parameters |
+|---|---|---|
+| `eda_extension_package` | Report the extension zip this plugin ships (absolute path, bytes, sha256) and, with download:true, fetch the copy served at the download base URL and compare the two byte for byte. On a match the served file is saved to outDir (default: the temp directory) so it can be imported into JLCEDA Pro; on a mismatch nothing is written and the tool says to re-upload. base defaults to DSH_EDA_EXTENSION_BASE or the project download server. | `download?: boolean, outDir?: string, base?: string` |
+

package/lib/bridge.mjs

@@ -1,11 +1,12 @@
 // src/bridge/index.ts
-import { createHash } from "node:crypto";
+import { createHash as createHash2 } from "node:crypto";
 import { execFileSync, spawn } from "node:child_process";
-import { statSync } from "node:fs";
+import { existsSync, statSync } from "node:fs";
 import { readFile } from "node:fs/promises";
 import { mkdir, unlink, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { basename, join } from "node:path";
+import { fileURLToPath } from "node:url";
 import { createServer } from "node:http";
 import { createInterface } from "node:readline";
 
@@ -624,6 +625,26 @@ function runNetlistErc(rawNetlist) {
   return { ok: counts.fail === 0, counts, componentCount: components.length, netCount: nets.size, checks };
 }
 
+// src/bridge/extension-package.ts
+import { createHash } from "node:crypto";
+function sha256Of(bytes) {
+  return createHash("sha256").update(bytes).digest("hex");
+}
+function extensionZipName(version) {
+  return "dsh-eda-bridge-extension-" + version + ".zip";
+}
+function extensionDownloadUrl(base, version) {
+  const normalised = base.endsWith("/") ? base : base + "/";
+  return new URL(extensionZipName(version), normalised).toString();
+}
+function compareDigest(expected, actual) {
+  if (typeof expected !== "string" || typeof actual !== "string") return "unverified";
+  const left = expected.trim().toLowerCase();
+  const right = actual.trim().toLowerCase();
+  if (left === "" || right === "") return "unverified";
+  return left === right ? "match" : "mismatch";
+}
+
 // src/bridge/design-rules.ts
 var MIL_PER_MM = 39.37007874015748;
 function milToMm(mil) {
@@ -1100,6 +1121,7 @@ var TOOLS = [
   { name: "eda_pcb_canvas_origin", description: "Read (or align) the PCB canvas origin and convert points between the two coordinate spaces. JLCEDA displays CANVAS coordinates in its UI but every API takes DATA coordinates; the two differ by this offset, so a coordinate read off the screen will land somewhere else unless you convert or align. align:true calls setCanvasOrigin(0,0) so the display matches the API.", inputSchema: objectSchema({ align: { type: "boolean" }, offsetX: { type: "number" }, offsetY: { type: "number" }, point: { type: "object", additionalProperties: true } }) },
   { name: "eda_capture", description: "Render the active document to a PNG (dmt_EditorControl.getCurrentRenderedAreaImage) and write it to outPath or return a data URL. Use it to LOOK at the sheet/board instead of trusting coordinate math. The PNG is a scratch file: read it, then call eda_capture({cleanup:true}) to delete every capture path this session wrote.", inputSchema: objectSchema({ outPath: { type: "string" }, inline: { type: "boolean" }, cleanup: { type: "boolean" } }) },
   { name: "eda_workflow_guide", description: "Return the schematic working standard: grid-aligned manual placement, signal flow, when net labels/ports are required (a wire net name is overridden by connectivity), net-label fallback behaviour, batch placement and the verification order. Read it before laying out a sheet.", inputSchema: objectSchema({}) },
+  { name: "eda_extension_package", description: "Report the extension zip this plugin ships (absolute path, bytes, sha256) and, with download:true, fetch the copy served at the download base URL and compare the two byte for byte. On a match the served file is saved to outDir (default: the temp directory) so it can be imported into JLCEDA Pro; on a mismatch nothing is written and the tool says to re-upload. base defaults to DSH_EDA_EXTENSION_BASE or the project download server.", inputSchema: objectSchema({ download: { type: "boolean" }, outDir: { type: "string" }, base: { type: "string" } }, []) },
   { name: "eda_list_api_methods", description: "Ask the CONNECTED EXTENSION for the API methods it accepts right now (dsh.internal.listApiMethods) and report source/version/counts. Falls back to the bridge copy with stale:true only when the extension is an older zip. Use refresh:true to re-query.", inputSchema: objectSchema({ refresh: { type: "boolean" } }) },
   { name: "eda_delete_primitive", description: 'Delete a schematic primitive by kind and primitive id. Net ports, net flags and net labels are attribute primitives and need kind "netport"/"netflag"/"netlabel"; the text fallback labels are kind "text".', inputSchema: objectSchema({ kind: { type: "string", enum: ["component", "wire", "rectangle", "circle", "arc", "polygon", "text", "netport", "netflag", "netlabel"] }, primitiveId: { type: "string" } }, ["kind", "primitiveId"]) },
   { name: "eda_create_board", description: "Create a board linking a schematic and a PCB (dmt_Board.createBoard).", inputSchema: objectSchema({ schematicUuid: { type: "string" }, pcbUuid: { type: "string" } }) },
@@ -1544,6 +1566,9 @@ function buildPolygonSource(points) {
   for (let i = 2; i < points.length; i += 2) source.push(points[i], points[i + 1]);
   return source;
 }
+function packageRoot() {
+  return fileURLToPath(new URL("../", import.meta.url));
+}
 function requireFlatPoints(value, tool) {
   const points = flattenPoints(value);
   if (points.length < 6 || points.length % 2 !== 0 || !points.every(Number.isFinite)) {
@@ -2993,6 +3018,71 @@ async function executeTool(name, rawArgs, timeoutMs) {
         rotation: args.rotation === void 0 ? void 0 : Number(args.rotation),
         mirror: args.mirror === void 0 ? void 0 : Boolean(args.mirror)
       }], timeoutMs);
+    case "eda_extension_package": {
+      const manifestCandidates = [
+        join(packageRoot(), "jlc-extension", "extension.json"),
+        join(packageRoot(), "dsh-eda-bridge-extension.zip")
+      ];
+      let version = VERSION;
+      try {
+        const manifest = JSON.parse(await readFile(manifestCandidates[0], "utf8"));
+        if (typeof manifest.version === "string" && manifest.version !== "") version = manifest.version;
+      } catch {
+      }
+      const localCandidates = [
+        join(packageRoot(), extensionZipName(version)),
+        join(packageRoot(), "dsh-eda-bridge-extension.zip")
+      ];
+      let localPath = "";
+      for (const candidate of localCandidates) {
+        if (existsSync(candidate)) {
+          localPath = candidate;
+          break;
+        }
+      }
+      if (localPath === "") {
+        throw new Error("eda_extension_package: no extension zip next to the plugin (looked for " + localCandidates.join(", ") + ")");
+      }
+      const localBytes = await readFile(localPath);
+      const localSha256 = sha256Of(localBytes);
+      const base = typeof args.base === "string" && args.base !== "" ? args.base : process.env.DSH_EDA_EXTENSION_BASE ?? "http://159.75.130.207/eda/";
+      const url = extensionDownloadUrl(base, version);
+      const report = {
+        version,
+        local: { path: localPath, bytes: localBytes.byteLength, sha256: localSha256 },
+        url
+      };
+      if (args.download !== true) return report;
+      const response = await fetch(url, { signal: AbortSignal.timeout(3e4) });
+      if (!response.ok) {
+        const throttled = response.status === 429;
+        return {
+          ...report,
+          verified: "unverified",
+          httpStatus: response.status,
+          error: throttled ? "the download server throttled this IP (HTTP 429, 5 downloads/min per IP \u2014 burst 5). Wait about a minute and retry; nothing is wrong with the zip or the upload." : "download failed: HTTP " + response.status + " from " + url
+        };
+      }
+      const remoteBytes = new Uint8Array(await response.arrayBuffer());
+      const remoteSha256 = sha256Of(remoteBytes);
+      const verdict = compareDigest(localSha256, remoteSha256);
+      const result2 = {
+        ...report,
+        remote: { url, bytes: remoteBytes.byteLength, sha256: remoteSha256 },
+        verified: verdict
+      };
+      if (verdict === "match") {
+        const outDir = typeof args.outDir === "string" && args.outDir !== "" ? args.outDir : tmpdir();
+        await mkdir(outDir, { recursive: true });
+        const savedPath = join(outDir, extensionZipName(version));
+        await writeFile(savedPath, remoteBytes);
+        result2.savedPath = savedPath;
+        result2.next = "In JLCEDA Pro: \u6269\u5C55 \u2192 \u5BFC\u5165\u6269\u5C55 \u2192 select this zip \u2192 restart the application (not a reload).";
+      } else {
+        result2.next = "The served copy differs from the one this plugin ships. Do not import it: re-upload " + extensionZipName(version) + " from the plugin directory to the download server.";
+      }
+      return result2;
+    }
     case "eda_list_api_methods": {
       const live = await extensionApiMethods(timeoutMs, args.refresh === true);
       if (live !== void 0) {
@@ -4051,7 +4141,7 @@ server.on("upgrade", (req, socket) => {
     socket.destroy();
     return;
   }
-  const accept = createHash("sha1").update(key + WS_GUID).digest("base64");
+  const accept = createHash2("sha1").update(key + WS_GUID).digest("base64");
   socket.write("HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: " + accept + "\r\n\r\n");
   const client = new WsConnection(socket);
   clients.add(client);

package/lib/index.js

@@ -325,6 +325,7 @@ var SKILL_PLAYBOOK_LINES = [
   "- **\u63D2\u4EF6\u4EE3\u7801\u6539\u52A8\u5BF9\u5F53\u524D\u4F1A\u8BDD\u5B8C\u5168\u4E0D\u751F\u6548**\uFF1A\u5BBF\u4E3B\u5728\u542F\u52A8\u65F6\u628A `lib/index.js` \u8F7D\u5165\u5185\u5B58\uFF0C\u4E4B\u540E\u6539\u6587\u4EF6\u3001\u91CD\u65B0 build \u90FD\u4E0D\u4F1A\u70ED\u66F4\u65B0\u3002",
   "- \u7248\u672C\u7EAA\u5F8B\uFF1A\u6269\u5C55\u7EBF\u534F\u8BAE**\u53EA\u9012\u589E\u6700\u5C0F\u4F4D**\uFF08`0.4.1 \u2192 0.4.2`\uFF09\uFF0C\u6BCF\u6B21\u6539\u52A8\u5FC5\u987B\u540C\u65F6\u6539 `jlc-extension/extension.json` \u7684 `version` \u4E0E\u6865\u63A5\u7684 `VERSION`\uFF1B\u4E0D\u4E00\u81F4\u65F6 `eda_status.versionMismatch` \u4E3A true\u3002",
   "- \u65B0\u4F1A\u8BDD\u5F00\u5DE5\u987A\u5E8F\uFF1A`eda_status`\uFF08\u8FDE\u6CA1\u8FDE\u3001\u7248\u672C\u5BF9\u4E0D\u5BF9\uFF09\u2192 \u672C\u6280\u80FD\uFF08\u600E\u4E48\u5E72\uFF09\u2192 \u518D\u52A8\u624B\uFF1B\u4E0D\u8981\u5148\u5047\u8BBE\u73AF\u5883\u5C31\u7EEA\u3002",
+  "| \u9700\u8981\u6269\u5C55 zip\uFF08\u6362\u673A\u5668/\u7ED9\u522B\u4EBA\uFF09 | \u4E0D\u6E05\u695A\u8BE5\u7ED9\u54EA\u4E00\u4EFD | `eda_extension_package` \u62A5\u8DEF\u5F84+sha256\uFF1B`download:true` \u4ECE\u670D\u52A1\u5668\u53D6\u56DE\u5E76\u9010\u5B57\u8282\u6BD4\u5BF9\uFF08`verified`\uFF09\uFF0C\u4E00\u81F4\u624D\u843D\u76D8 |",
   "- \u6269\u5C55 zip \u4F4D\u7F6E\uFF1A`node_modules/dsh-eda-mcp/dsh-eda-bridge-extension-<\u7248\u672C>.zip`\uFF0C\u6216\u8BBE\u7F6E\u5361\u7247\u4E0B\u8F7D\uFF08\u6587\u4EF6\u540D\u81EA\u5E26\u7248\u672C\u53F7\uFF09\u3002",
   "- \u6392\u67E5\u987A\u5E8F\uFF1A`eda_status` \u2192 `/api/dsh-eda-mcp/diagnostics`\uFF08`clientStartupError` / `skills` / `bridgeHealth`\uFF09\u2192 `eda_list_api_methods`\uFF08\u767D\u540D\u5355\uFF09\u2192 \u5E94\u7528\u4FA7 DRC \u9762\u677F\u3002"
 ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-eda-mcp",
-  "version": "1.0.2",
+  "version": "1.1.0",
   "description": "DeepSeek Harness (DSH) plugin — connects DSH to JLCEDA Pro (EasyEDA Pro) via a local MCP bridge and draws schematics through the JLCEDA extension API.",
   "license": "Apache-2.0",
   "author": {
@@ -72,7 +72,7 @@
   "scripts": {
     "build": "node build.mjs",
     "typecheck": "tsc --noEmit",
-    "test": "node --experimental-strip-types test/node-runtime.test.ts && node --experimental-strip-types test/config-values.test.ts && node --experimental-strip-types test/design-rules.test.ts && node --experimental-strip-types test/seams.test.ts && node --experimental-strip-types test/eda-launch.test.ts && node --experimental-strip-types test/schematic-audit.test.ts && node --experimental-strip-types test/design-intake.test.ts && node --experimental-strip-types test/netlist-erc.test.ts && node --experimental-strip-types test/skills.test.ts",
+    "test": "node --experimental-strip-types test/node-runtime.test.ts && node --experimental-strip-types test/config-values.test.ts && node --experimental-strip-types test/design-rules.test.ts && node --experimental-strip-types test/seams.test.ts && node --experimental-strip-types test/eda-launch.test.ts && node --experimental-strip-types test/schematic-audit.test.ts && node --experimental-strip-types test/design-intake.test.ts && node --experimental-strip-types test/extension-package.test.ts && node --experimental-strip-types test/netlist-erc.test.ts && node --experimental-strip-types test/skills.test.ts",
     "seam-check": "node scripts/seam-check.mjs",
     "contract-check": "node scripts/contract-check.mjs",
     "guard:bundle": "node scripts/guard-bundle-paths.mjs",

package/src/bridge/extension-package.ts

@@ -0,0 +1,35 @@
+/**
+ * Extension zip packaging helpers: the plugin ships
+ * `dsh-eda-bridge-extension-<wire version>.zip`, the download server publishes the same
+ * file, and a user who installs the plugin from npm must be able to tell whether the copy
+ * they got is byte-identical to the one the bridge expects.
+ */
+import { createHash } from 'node:crypto'
+
+export function sha256Of(bytes: Uint8Array): string {
+  return createHash('sha256').update(bytes).digest('hex')
+}
+
+export function extensionZipName(version: string): string {
+  return 'dsh-eda-bridge-extension-' + version + '.zip'
+}
+
+/** Normalises a base URL ('…/eda' or '…/eda/') and appends the zip name. */
+export function extensionDownloadUrl(base: string, version: string): string {
+  const normalised = base.endsWith('/') ? base : base + '/'
+  return new URL(extensionZipName(version), normalised).toString()
+}
+
+export type DigestVerdict = 'match' | 'mismatch' | 'unverified'
+
+/**
+ * A missing expected digest is reported as 'unverified', never as a pass: an absent
+ * comparison is not evidence of equality.
+ */
+export function compareDigest(expected: string | null | undefined, actual: string | null | undefined): DigestVerdict {
+  if (typeof expected !== 'string' || typeof actual !== 'string') return 'unverified'
+  const left = expected.trim().toLowerCase()
+  const right = actual.trim().toLowerCase()
+  if (left === '' || right === '') return 'unverified'
+  return left === right ? 'match' : 'mismatch'
+}

package/src/bridge/index.ts

@@ -6,6 +6,7 @@ import { readFile } from 'node:fs/promises'
 import { mkdir, unlink, writeFile } from 'node:fs/promises'
 import { tmpdir } from 'node:os'
 import { basename, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
 import { createServer, type IncomingMessage, type ServerResponse } from 'node:http'
 import type { Socket } from 'node:net'
 import { createInterface } from 'node:readline'
@@ -13,6 +14,7 @@ import { buildLaunchArgs, buildLaunchScript, decodeRegistryOutput, resolveExecut
 import { buildIntake } from './design-intake.ts'
 import { auditSchematicGeometry } from './schematic-audit.ts'
 import { runNetlistErc } from './netlist-erc.ts'
+import { compareDigest, extensionDownloadUrl, extensionZipName, sha256Of } from './extension-package.ts'
 import {
   ANNULUS_MIN_MM, BOARD_OUTLINE_WIDTH_MIL, MIN_TRACK_WIDTH_MIL, POUR_CLEARANCE_MIN_MIL,
   POUR_CLEARANCE_RECOMMENDED_MIL, SILKSCREEN_HEIGHT_MIN_MM, SILKSCREEN_WIDTH_MIN_MM,
@@ -324,6 +326,7 @@ const TOOLS = [
   { name: 'eda_pcb_canvas_origin', description: 'Read (or align) the PCB canvas origin and convert points between the two coordinate spaces. JLCEDA displays CANVAS coordinates in its UI but every API takes DATA coordinates; the two differ by this offset, so a coordinate read off the screen will land somewhere else unless you convert or align. align:true calls setCanvasOrigin(0,0) so the display matches the API.', inputSchema: objectSchema({ align: { type: 'boolean' }, offsetX: { type: 'number' }, offsetY: { type: 'number' }, point: { type: 'object', additionalProperties: true } }) },
   { name: 'eda_capture', description: 'Render the active document to a PNG (dmt_EditorControl.getCurrentRenderedAreaImage) and write it to outPath or return a data URL. Use it to LOOK at the sheet/board instead of trusting coordinate math. The PNG is a scratch file: read it, then call eda_capture({cleanup:true}) to delete every capture path this session wrote.', inputSchema: objectSchema({ outPath: { type: 'string' }, inline: { type: 'boolean' }, cleanup: { type: 'boolean' } }) },
   { name: 'eda_workflow_guide', description: 'Return the schematic working standard: grid-aligned manual placement, signal flow, when net labels/ports are required (a wire net name is overridden by connectivity), net-label fallback behaviour, batch placement and the verification order. Read it before laying out a sheet.', inputSchema: objectSchema({}) },
+  { name: 'eda_extension_package', description: 'Report the extension zip this plugin ships (absolute path, bytes, sha256) and, with download:true, fetch the copy served at the download base URL and compare the two byte for byte. On a match the served file is saved to outDir (default: the temp directory) so it can be imported into JLCEDA Pro; on a mismatch nothing is written and the tool says to re-upload. base defaults to DSH_EDA_EXTENSION_BASE or the project download server.', inputSchema: objectSchema({ download: { type: 'boolean' }, outDir: { type: 'string' }, base: { type: 'string' } }, []) },
   { name: 'eda_list_api_methods', description: 'Ask the CONNECTED EXTENSION for the API methods it accepts right now (dsh.internal.listApiMethods) and report source/version/counts. Falls back to the bridge copy with stale:true only when the extension is an older zip. Use refresh:true to re-query.', inputSchema: objectSchema({ refresh: { type: 'boolean' } }) },
   { name: 'eda_delete_primitive', description: 'Delete a schematic primitive by kind and primitive id. Net ports, net flags and net labels are attribute primitives and need kind "netport"/"netflag"/"netlabel"; the text fallback labels are kind "text".', inputSchema: objectSchema({ kind: { type: 'string', enum: ['component', 'wire', 'rectangle', 'circle', 'arc', 'polygon', 'text', 'netport', 'netflag', 'netlabel'] }, primitiveId: { type: 'string' } }, ['kind', 'primitiveId']) },
   { name: 'eda_create_board', description: 'Create a board linking a schematic and a PCB (dmt_Board.createBoard).', inputSchema: objectSchema({ schematicUuid: { type: 'string' }, pcbUuid: { type: 'string' } }) },
@@ -790,6 +793,15 @@ function buildPolygonSource(points) {
   return source
 }
 
+
+/**
+ * Directory that holds the packaged artifacts: the bridge runs from <package>/lib/bridge.mjs,
+ * so its grandparent is the package root both for a published install and for the repo.
+ */
+function packageRoot(): string {
+  return fileURLToPath(new URL('../', import.meta.url))
+}
+
 function requireFlatPoints(value, tool) {
   const points = flattenPoints(value)
   if (points.length < 6 || points.length % 2 !== 0 || !points.every(Number.isFinite)) {
@@ -2363,6 +2375,79 @@ async function executeTool(name, rawArgs, timeoutMs) {
         mirror: args.mirror === undefined ? undefined : Boolean(args.mirror),
       }], timeoutMs)
 
+    case 'eda_extension_package': {
+      // Two copies of the same artifact exist: the zip inside this npm package and the one
+      // on the download server. Nobody could tell whether they match, so this tool reports
+      // the local digest and, with download:true, fetches the served copy and compares the
+      // two byte for byte. A mismatch is never written to disk.
+      const manifestCandidates = [
+        join(packageRoot(), 'jlc-extension', 'extension.json'),
+        join(packageRoot(), 'dsh-eda-bridge-extension.zip'),
+      ]
+      let version = VERSION
+      try {
+        const manifest = JSON.parse(await readFile(manifestCandidates[0], 'utf8')) as { version?: string }
+        if (typeof manifest.version === 'string' && manifest.version !== '') version = manifest.version
+      } catch { /* keep the bridge VERSION */ }
+      const localCandidates = [
+        join(packageRoot(), extensionZipName(version)),
+        join(packageRoot(), 'dsh-eda-bridge-extension.zip'),
+      ]
+      let localPath = ''
+      for (const candidate of localCandidates) {
+        if (existsSync(candidate)) { localPath = candidate; break }
+      }
+      if (localPath === '') {
+        throw new Error('eda_extension_package: no extension zip next to the plugin (looked for ' + localCandidates.join(', ') + ')')
+      }
+      const localBytes = await readFile(localPath)
+      const localSha256 = sha256Of(localBytes)
+      const base = typeof args.base === 'string' && args.base !== ''
+        ? args.base
+        : (process.env.DSH_EDA_EXTENSION_BASE ?? 'http://159.75.130.207/eda/')
+      const url = extensionDownloadUrl(base, version)
+      const report = {
+        version,
+        local: { path: localPath, bytes: localBytes.byteLength, sha256: localSha256 },
+        url,
+      }
+      if (args.download !== true) return report
+      const response = await fetch(url, { signal: AbortSignal.timeout(30000) })
+      if (!response.ok) {
+        // 429 is the download server's rate limit (5 req/min per IP), not a broken artifact:
+        // say so, otherwise the caller retries in a loop and never succeeds.
+        const throttled = response.status === 429
+        return {
+          ...report,
+          verified: 'unverified',
+          httpStatus: response.status,
+          error: throttled
+            ? 'the download server throttled this IP (HTTP 429, 5 downloads/min per IP — burst 5). Wait about a minute and retry; nothing is wrong with the zip or the upload.'
+            : 'download failed: HTTP ' + response.status + ' from ' + url,
+        }
+      }
+      const remoteBytes = new Uint8Array(await response.arrayBuffer())
+      const remoteSha256 = sha256Of(remoteBytes)
+      const verdict = compareDigest(localSha256, remoteSha256)
+      const result: Record<string, unknown> = {
+        ...report,
+        remote: { url, bytes: remoteBytes.byteLength, sha256: remoteSha256 },
+        verified: verdict,
+      }
+      if (verdict === 'match') {
+        const outDir = typeof args.outDir === 'string' && args.outDir !== '' ? args.outDir : tmpdir()
+        await mkdir(outDir, { recursive: true })
+        const savedPath = join(outDir, extensionZipName(version))
+        await writeFile(savedPath, remoteBytes)
+        result.savedPath = savedPath
+        result.next = 'In JLCEDA Pro: 扩展 → 导入扩展 → select this zip → restart the application (not a reload).'
+      } else {
+        result.next = 'The served copy differs from the one this plugin ships. Do not import it: re-upload ' +
+          extensionZipName(version) + ' from the plugin directory to the download server.'
+      }
+      return result
+    }
+
     case 'eda_list_api_methods': {
       // Ask the running extension first: its answer is the real capability boundary.
       const live = await extensionApiMethods(timeoutMs, args.refresh === true)

package/src/skills-content.ts

@@ -299,6 +299,7 @@ export const SKILL_PLAYBOOK_LINES: readonly string[] = [
   "- **插件代码改动对当前会话完全不生效**：宿主在启动时把 `lib/index.js` 载入内存，之后改文件、重新 build 都不会热更新。",
   "- 版本纪律：扩展线协议**只递增最小位**（`0.4.1 → 0.4.2`），每次改动必须同时改 `jlc-extension/extension.json` 的 `version` 与桥接的 `VERSION`；不一致时 `eda_status.versionMismatch` 为 true。",
   "- 新会话开工顺序：`eda_status`（连没连、版本对不对）→ 本技能（怎么干）→ 再动手；不要先假设环境就绪。",
+  "| 需要扩展 zip（换机器/给别人） | 不清楚该给哪一份 | `eda_extension_package` 报路径+sha256；`download:true` 从服务器取回并逐字节比对（`verified`），一致才落盘 |",
   "- 扩展 zip 位置：`node_modules/dsh-eda-mcp/dsh-eda-bridge-extension-<版本>.zip`，或设置卡片下载（文件名自带版本号）。",
   "- 排查顺序：`eda_status` → `/api/dsh-eda-mcp/diagnostics`（`clientStartupError` / `skills` / `bridgeHealth`）→ `eda_list_api_methods`（白名单）→ 应用侧 DRC 面板。",
 ]

package/test/extension-package.test.ts

@@ -0,0 +1,27 @@
+import { strict as assert } from 'node:assert'
+import { compareDigest, extensionDownloadUrl, extensionZipName, sha256Of } from '../src/bridge/extension-package.ts'
+
+const bytes = new TextEncoder().encode('PK\x03\x04fake-zip-body')
+assert.equal(sha256Of(bytes), sha256Of(bytes), 'hash is stable')
+assert.equal(sha256Of(bytes).length, 64, 'sha256 hex length')
+assert.notEqual(sha256Of(bytes), sha256Of(new TextEncoder().encode('other')), 'different bytes differ')
+
+assert.equal(extensionZipName('0.4.9'), 'dsh-eda-bridge-extension-0.4.9.zip')
+assert.equal(
+  extensionDownloadUrl('http://159.75.130.207/eda', '0.4.9'),
+  'http://159.75.130.207/eda/dsh-eda-bridge-extension-0.4.9.zip',
+  'base without a trailing slash gets one',
+)
+assert.equal(
+  extensionDownloadUrl('https://example.test/dl/', '1.2.3'),
+  'https://example.test/dl/dsh-eda-bridge-extension-1.2.3.zip',
+  'trailing slash is not doubled',
+)
+
+assert.equal(compareDigest('ABC', 'abc'), 'match', 'case-insensitive')
+assert.equal(compareDigest('aa', 'bb'), 'mismatch')
+assert.equal(compareDigest(null, 'bb'), 'unverified', 'missing expected is not a pass')
+assert.equal(compareDigest('aa', undefined), 'unverified')
+assert.equal(compareDigest('', ''), 'unverified')
+
+console.log('ALL PASS extension-package')