dsh-grok-subscription 1.1.0 → 1.1.1

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 1.1.1 — 2026-09-28
+
+- Fix **Update plugin** failing in the desktop app. The update built its command from `process.argv[1]`, which is the entry script of whichever process loaded the plugin — the `dsh` CLI only when the host *is* the CLI. The desktop app loads plugins inside `@deepseek-ai/dsh-desktop-host`, so that argument was the desktop host entry and the update relaunched the application with `plugin …` as script arguments instead of installing anything. The version check kept working, so the update button appeared to run and then reported failure.
+- Install updates into the owning profile with pnpm directly, because `dsh plugin --profile desktop` is refused outright: `profile "desktop" is managed exclusively by the Electron application`. The bundled pnpm entry is located by file name in the host's own launch arguments, with the runtime directory carrying the `@deepseek-ai/dsh` package as the fallback, so `PATH` never decides which package manager runs.
+- Pin the install (`--save-exact`) and disable pnpm's release-age gate (`--config.minimumReleaseAge=0`), which would otherwise quietly keep the installed version for a release younger than 24 hours — exactly the release this button exists to fetch.
+- Read the installed manifest back and compare it with the requested version before reporting success, so an update that installs nothing is reported as a failure rather than a success.
+- No model-routing, authentication, proxy, or quota behavior changes. Restart DSH fully after updating so the new version loads.
+
 ## 1.1.0 — 2026-09-28
 
 - Add the original Comet Navigator mascot and align the Chinese/English homepages around features, installation, daily use, screenshots, and maintenance.

package/README.en.md

@@ -130,6 +130,8 @@ dsh plugin --profile web add dsh-grok-subscription@latest
 
 For a GitHub-source install, use `dsh plugin --profile web update dsh-grok-subscription`. For a local `link:` install, pull and rebuild the checkout instead of replacing its development link.
 
+The desktop app owns its `desktop` profile exclusively, so `dsh plugin --profile desktop …` is refused there. The desktop **Update plugin** button therefore installs the exact version inside that profile directory with DSH's own bundled pnpm; before `1.1.1` that button always failed in the desktop app. Manual steps: [Updates and sign-out](docs/guide.en.md#updates-and-sign-out).
+
 **Uninstall:**
 
 ```sh

package/README.md

@@ -130,6 +130,8 @@ dsh plugin --profile web add dsh-grok-subscription@latest
 
 GitHub 来源安装可使用 `dsh plugin --profile web update dsh-grok-subscription`；本地 `link:` 安装应拉取对应仓库并重新构建，不要替换开发链接。
 
+桌面版由 Electron 应用独占 `desktop` profile，`dsh plugin --profile desktop …` 会被拒绝，因此桌面版的「更新插件」由插件自己在该 profile 目录中用 DSH 自带的 pnpm 安装精确版本；`1.1.1` 之前该按钮在桌面版必然失败，手动步骤见[更新与登出](docs/guide.zh-CN.md#更新与登出)。
+
 **卸载：**
 
 ```sh

package/docs/guide.en.md

@@ -18,7 +18,7 @@ dsh plugin --profile web list dsh-grok-subscription --depth 0
 For reproducibility, pin a published version, for example:
 
 ```sh
-dsh plugin --profile web add dsh-grok-subscription@1.1.0
+dsh plugin --profile web add dsh-grok-subscription@1.1.1
 ```
 
 **Install from GitHub:**
@@ -128,6 +128,15 @@ That task makes a real model request and uses the selected service's quota; it i
 
 For npm installs, update in Settings or run `dsh plugin --profile web add dsh-grok-subscription@latest`. For GitHub-source installs, run `dsh plugin --profile web update dsh-grok-subscription`. For local links, pull, test, and rebuild the checkout. Restart DSH afterwards.
 
+In the desktop app the `desktop` profile is owned exclusively by the Electron application, and `dsh plugin --profile desktop …` is refused outright (`profile "desktop" is managed exclusively by the Electron application`), so the desktop app can only be updated by the plugin itself. From 1.1.1 the **Update plugin** button installs the exact version inside that profile directory with DSH's own bundled pnpm. If you are still on an older version and the button reports an error, run the equivalent by hand (pnpm ≥ 11):
+
+```sh
+cd "$HOME/.dsh/profiles/desktop"    # Windows: cd "$env:USERPROFILE\.dsh\profiles\desktop"
+pnpm add --save-exact dsh-grok-subscription@1.1.1
+```
+
+Then quit and restart the desktop app completely. After a successful update the profile's `package.json` dependency should show the target version while its `dsh.profile.bundles` entry is unchanged. Refreshing the browser is not enough: without a Host restart the old version keeps loading.
+
 Uninstall with `dsh plugin --profile web remove dsh-grok-subscription`. This leaves the profile, other plugins, and the CLI's `auth.json` intact.
 
 The Settings logout action clears plugin-side session state; it does not revoke the official CLI session. If the CLI file remains, a later pull or startup may sync it again. To end the official session, use the official CLI / account's sign-out and authorization-management flow. Do not delete an entire DSH profile to handle one account.

package/docs/guide.zh-CN.md

@@ -18,7 +18,7 @@ dsh plugin --profile web list dsh-grok-subscription --depth 0
 需要可重复安装时，固定已发布版本，例如：
 
 ```sh
-dsh plugin --profile web add dsh-grok-subscription@1.1.0
+dsh plugin --profile web add dsh-grok-subscription@1.1.1
 ```
 
 **GitHub 来源安装：**
@@ -128,6 +128,15 @@ dsh --profile headless "只回复：ok"
 
 npm 安装可在设置页更新，或运行 `dsh plugin --profile web add dsh-grok-subscription@latest`。GitHub 来源安装可运行 `dsh plugin --profile web update dsh-grok-subscription`。本地链接安装则拉取对应 checkout、测试并构建。更新后手动重启 DSH。
 
+桌面版的 `desktop` profile 由 Electron 应用独占，`dsh plugin --profile desktop …` 会被直接拒绝（`profile "desktop" is managed exclusively by the Electron application`），所以桌面版只能由插件自己更新。1.1.1 起「更新插件」会在该 profile 目录中用 DSH 自带的 pnpm 安装精确版本；若你仍停留在旧版本且按钮报错，可在终端手动执行（pnpm 需 ≥ 11）：
+
+```sh
+cd "$HOME/.dsh/profiles/desktop"    # Windows: cd "$env:USERPROFILE\.dsh\profiles\desktop"
+pnpm add --save-exact dsh-grok-subscription@1.1.1
+```
+
+然后完全退出并重启桌面版。更新成功后该 profile 的 `package.json` 里依赖应变为目标版本，`dsh.profile.bundles` 条目保持不变。仅刷新网页不够：Host 未重启时仍会加载旧版本。
+
 卸载使用 `dsh plugin --profile web remove dsh-grok-subscription`。这不删除整个 profile、其他插件或 Grok CLI 的 `auth.json`。
 
 设置页「登出」清理的是插件侧会话状态，不等于撤销官方 CLI 会话。CLI 文件仍然存在时，之后重新拉取或启动可能再次同步登录；彻底结束官方会话应使用官方 CLI / 账号提供的登出与授权管理流程。不要靠删除整个 DSH profile 来处理一个账号。

package/lib/client.js

@@ -39,7 +39,7 @@ var import_react2 = require("react");
 var zh = {
   nav: "Grok \u8BA2\u9605",
   title: "Grok \u8BA2\u9605",
-  subtitle: "\u7528 SuperGrok / X Premium\uFF08Grok Build\uFF09\u4F1A\u8BDD\uFF0C\u800C\u4E0D\u662F XAI_API_KEY\u3002\xB7 1.1.0",
+  subtitle: "\u7528 SuperGrok / X Premium\uFF08Grok Build\uFF09\u4F1A\u8BDD\uFF0C\u800C\u4E0D\u662F XAI_API_KEY\u3002\xB7 1.1.1",
   signedIn: "\u5DF2\u767B\u5F55",
   signedOut: "\u672A\u767B\u5F55",
   account: "\u8D26\u6237",
@@ -119,7 +119,7 @@ var zh = {
 var en = {
   nav: "Grok Subscription",
   title: "Grok Subscription",
-  subtitle: "Use a SuperGrok / X Premium (Grok Build) session, not XAI_API_KEY. \xB7 1.1.0",
+  subtitle: "Use a SuperGrok / X Premium (Grok Build) session, not XAI_API_KEY. \xB7 1.1.1",
   signedIn: "Signed in",
   signedOut: "Signed out",
   account: "Account",

package/lib/index.js

@@ -2121,6 +2121,7 @@ function createSessionService({
 
 // src/plugin-version.js
 import { spawn as spawn2 } from "node:child_process";
+import { existsSync as existsSync4 } from "node:fs";
 import { readdir, readFile, realpath } from "node:fs/promises";
 import { homedir as homedir3 } from "node:os";
 import { join as join4 } from "node:path";
@@ -2130,6 +2131,8 @@ var NPM_REGISTRY_LATEST_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest
 var DEFAULT_VERSION_TTL_MS = 5 * 6e4;
 var DEFAULT_VERSION_TIMEOUT_MS = 1e4;
 var DEFAULT_UPDATE_TIMEOUT_MS = 18e4;
+var DEFAULT_SETTLE_DELAY_MS = 250;
+var UPDATE_RELEASE_AGE_MINUTES = 0;
 var clone = (value) => structuredClone(value);
 function parseSemver(value) {
   if (typeof value !== "string") return void 0;
@@ -2163,6 +2166,16 @@ var readManifest = async (path) => {
     return void 0;
   }
 };
+async function confirmInstalled({ profileDir, expected, settleDelayMs, attempts = 3 }) {
+  for (let attempt = 1; attempt <= attempts; attempt += 1) {
+    const installed = (await readManifest(join4(profileDir, "node_modules", PACKAGE_NAME, "package.json")))?.version;
+    if (installed === expected) return;
+    if (attempt < attempts) await new Promise((resolve) => {
+      setTimeout(resolve, settleDelayMs);
+    });
+  }
+  throw new Error("Grok plugin update did not install the requested version");
+}
 async function findInstall({ dshHome, ownPackageJsonUrl }) {
   let ownReal;
   try {
@@ -2193,7 +2206,28 @@ async function findInstall({ dshHome, ownPackageJsonUrl }) {
   if (declared.length === 1) return { kind: classifySpec(declared[0].spec), profile: declared[0].profile };
   return { kind: "unknown" };
 }
-function spawnRunCommand(argv, { signal, timeoutMs }) {
+var isExistingPath = (value) => typeof value === "string" && value !== "" && existsSync4(value);
+var PNPM_SCRIPT = /[\\/]pnpm\.(?:mjs|cjs|js)$/u;
+var dshRuntimeRoot = (value) => isExistingPath(value) && existsSync4(join4(value, "node_modules", "@deepseek-ai", "dsh", "package.json")) ? value : void 0;
+function resolvePnpm({ argv } = {}) {
+  const entries = Array.isArray(argv) ? argv : [];
+  for (const entry of entries) {
+    if (isExistingPath(entry) && PNPM_SCRIPT.test(entry)) return entry;
+  }
+  for (const entry of entries) {
+    const root = dshRuntimeRoot(entry);
+    if (root === void 0) continue;
+    const script = join4(root, "..", "pnpm", "bin", "pnpm.mjs");
+    if (existsSync4(script)) return script;
+  }
+  return void 0;
+}
+function resolveLauncher({ argv, execPath }) {
+  const pnpm = resolvePnpm({ argv });
+  if (pnpm === void 0) return { command: "pnpm", prefix: [] };
+  return { command: execPath, prefix: [pnpm] };
+}
+function spawnRunCommand({ command, args, cwd }, { signal, timeoutMs }) {
   return new Promise((resolve, reject) => {
     if (signal?.aborted) {
       reject(signal.reason instanceof Error ? signal.reason : new Error("Grok plugin update aborted"));
@@ -2213,7 +2247,11 @@ function spawnRunCommand(argv, { signal, timeoutMs }) {
     };
     let child;
     try {
-      child = spawn2(argv[0], argv.slice(1), { stdio: ["ignore", "pipe", "pipe"], signal: controller.signal });
+      child = spawn2(command, args, {
+        stdio: ["ignore", "pipe", "pipe"],
+        signal: controller.signal,
+        ...cwd === void 0 ? {} : { cwd }
+      });
     } catch (error) {
       settle(reject, error);
       return;
@@ -2241,18 +2279,20 @@ function createGrokPluginManager({
   fetchImpl = globalThis.fetch,
   runCommand = spawnRunCommand,
   execPath = process.execPath,
-  binPath = process.argv[1],
+  argv = process.argv,
   env = process.env,
   ownPackageJsonUrl = new URL("../package.json", import.meta.url),
   registryUrl = NPM_REGISTRY_LATEST_URL,
   now = Date.now,
   ttlMs = DEFAULT_VERSION_TTL_MS,
   timeoutMs = DEFAULT_VERSION_TIMEOUT_MS,
-  updateTimeoutMs = DEFAULT_UPDATE_TIMEOUT_MS
+  updateTimeoutMs = DEFAULT_UPDATE_TIMEOUT_MS,
+  settleDelayMs = DEFAULT_SETTLE_DELAY_MS
 } = {}) {
   if (typeof fetchImpl !== "function") throw new Error("Grok plugin manager requires fetch");
   if (typeof runCommand !== "function") throw new Error("Grok plugin manager requires runCommand");
   const dshHome = typeof env.DSH_HOME === "string" && env.DSH_HOME !== "" ? env.DSH_HOME : join4(homedir3(), ".dsh");
+  const launcher = resolveLauncher({ argv, execPath });
   let cached;
   let inFlight;
   let generation = 0;
@@ -2341,15 +2381,30 @@ function createGrokPluginManager({
           throw new Error("Grok plugin update could not find the owning profile");
         }
         const latest = await fetchLatest(signal);
-        const argv = binPath === void 0 ? ["dsh", "plugin", "--profile", install.profile, "add", `${PACKAGE_NAME}@${latest}`] : [execPath, binPath, "plugin", "--profile", install.profile, "add", `${PACKAGE_NAME}@${latest}`];
+        const profileDir = join4(dshHome, "profiles", install.profile);
         let result;
         try {
-          result = await runCommand(argv, { signal, timeoutMs: updateTimeoutMs });
+          result = await runCommand({
+            command: launcher.command,
+            // `pnpm add <exact version>` is what `dsh plugin add` performs for a
+            // registry spec. `--save-exact` keeps the profile dependency pinned,
+            // and the release-age override stops a just-published version from
+            // being skipped as too new (pnpm ≥ 10.16; unknown keys are ignored).
+            args: [
+              ...launcher.prefix,
+              "add",
+              "--save-exact",
+              `--config.minimumReleaseAge=${UPDATE_RELEASE_AGE_MINUTES}`,
+              `${PACKAGE_NAME}@${latest}`
+            ],
+            cwd: profileDir
+          }, { signal, timeoutMs: updateTimeoutMs });
         } catch (error) {
           if (signal?.aborted) throw error;
           throw new Error("Grok plugin update failed");
         }
         if (result.code !== 0) throw new Error("Grok plugin update failed");
+        await confirmInstalled({ profileDir, expected: latest, settleDelayMs });
         generation += 1;
         cached = void 0;
         return { version: latest, profile: install.profile };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-grok-subscription",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "Use a SuperGrok or X Premium Grok Build subscription in DeepSeek Harness",
   "type": "module",
   "main": "./lib/index.js",