dsh-m 0.0.3 → 0.1.1

package/lib/core/versions.js

@@ -0,0 +1,75 @@
+/**
+ * 最新版本解析（DESIGN.md §3：版本不写死，运行时实查）。
+ * npm：registry /latest（pnpm 安装本身会按 lock integrity 校验 tarball）。
+ * GitHub：优先最新 release/tag（更新提示只跟稳定版走，不跟 main HEAD——中间提交可能不稳定）；
+ * 未认证限额 60 次/小时，自用足够。
+ */
+import { fetchJsonLimited } from './httpx.js';
+export async function npmLatest(pkg, timeoutMs = 20_000) {
+    // 允许 scoped 包名：@scope/name（isSafePkgName 同款字符集）
+    if (!/^@?[A-Za-z0-9-._~]+(\/[A-Za-z0-9-._~]+)?$/.test(pkg))
+        throw new Error(`无效 npm 包名: ${pkg}`);
+    const data = await fetchJsonLimited(`https://registry.npmjs.org/${encodeURIComponent(pkg)}/latest`, { timeoutMs });
+    const version = typeof data.version === 'string' ? data.version : '';
+    if (!version)
+        throw new Error(`npm 未返回版本: ${pkg}`);
+    return {
+        version,
+        integrity: typeof data.dist?.integrity === 'string' ? data.dist.integrity : undefined,
+        tarball: typeof data.dist?.tarball === 'string' ? data.dist.tarball : undefined,
+    };
+}
+export async function githubTagSha(repo, tag, timeoutMs = 20_000) {
+    // commits/{ref} 会自动解引用 annotated tag，返回的才是可用于 #sha 锁定的 commit
+    const data = await fetchJsonLimited(`https://api.github.com/repos/${repo}/commits/${encodeURIComponent(tag)}`, {
+        timeoutMs,
+        headers: { accept: 'application/vnd.github+json' },
+    });
+    const sha = typeof data.sha === 'string' ? data.sha : '';
+    if (!/^[0-9a-f]{40}$/.test(sha))
+        throw new Error(`GitHub 未返回有效 SHA: ${repo}@${tag}`);
+    return sha;
+}
+/** GitHub 来源的“最新稳定点”：优先最新 release（排除 draft/prerelease），无则回退 tags 列表首项。 */
+export async function githubLatestTag(repo, timeoutMs = 20_000) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9-]*\/[A-Za-z0-9._-]+$/.test(repo))
+        throw new Error(`无效 GitHub 仓库: ${repo}`);
+    const headers = { accept: 'application/vnd.github+json' };
+    // 1) 最新 release（404 = 仓库从未发过 release → 回退 tags）
+    try {
+        const rel = await fetchJsonLimited(`https://api.github.com/repos/${repo}/releases/latest`, { timeoutMs, headers });
+        const tag = typeof rel.tag_name === 'string' ? rel.tag_name.trim() : '';
+        if (tag)
+            return { tag, sha: await githubTagSha(repo, tag, timeoutMs) };
+    }
+    catch (err) {
+        const status = err.status;
+        if (status !== 404)
+            throw err;
+    }
+    // 2) 回退：tags 列表（GitHub 按创建时间倒序，首项即最新）
+    const tags = await fetchJsonLimited(`https://api.github.com/repos/${repo}/tags`, { timeoutMs, headers });
+    if (!Array.isArray(tags) || !tags.length)
+        throw new Error(`仓库没有任何 tag: ${repo}`);
+    const first = tags[0];
+    const name = typeof first.name === 'string' ? first.name : '';
+    const sha = first.commit && typeof first.commit.sha === 'string' ? first.commit.sha : '';
+    if (!name || !/^[0-9a-f]{40}$/.test(sha))
+        throw new Error(`tag 信息无效: ${repo}`);
+    return { tag: name, sha };
+}
+export function isNewerVersion(candidate, current) {
+    const parse = (v) => String(v || '')
+        .replace(/^v/i, '')
+        .split(/[-+.]/)
+        .map((part) => (/^\d+$/.test(part) ? Number(part) : part))
+        .map((n) => (typeof n === 'number' ? n : 0));
+    const a = parse(candidate);
+    const b = parse(current);
+    for (let i = 0; i < Math.max(a.length, b.length); i++) {
+        const diff = (a[i] ?? 0) - (b[i] ?? 0);
+        if (diff !== 0)
+            return diff > 0;
+    }
+    return false;
+}

package/lib/host.js

@@ -0,0 +1,199 @@
+import { createRequire } from 'node:module';
+import Schema from '@deepseek-ai/schemastery';
+import { installFromRegistry, listInstalledWithMeta, listMarket, uninstallPlugin, upgradePlugin, withMutationLock, } from './core/market.js';
+import { bindLoaderHost } from './core/live-plugin.js';
+import { scheduleRestart, servingPort, trustedRestartRequest } from './core/restart.js';
+import { registerTools } from './tools.js';
+const require = createRequire(import.meta.url);
+const pkg = require('../package.json');
+export const name = 'dshm';
+// dshm_* 七个工具（src/tools.ts）
+export const inject = ['tools'];
+export const Config = Schema.object({
+    registryUrl: Schema.string().description('registry 源覆盖（默认 jsDelivr @main）'),
+    timeoutMs: Schema.number().default(20000).description('上游请求超时（毫秒）'),
+    cacheTtlMin: Schema.number().default(60).description('registry 缓存时长（分钟）'),
+});
+export function apply(ctx, config) {
+    const cfg = { ...config };
+    // 卸载前的 live-disable 依赖 loader（skillhub 同款）
+    bindLoaderHost(ctx);
+    // dshm_* 七个 agent 工具 + systemPrompt 注入
+    registerTools(ctx, cfg);
+    // 本地 API：单路由 + method 分发（skillhub 同款）
+    ctx.inject(['webServer'], (c) => {
+        const server = c.webServer;
+        server.register({
+            kind: 'exact',
+            path: '/dshm',
+            handler: (req, res) => {
+                void handleApi(req, res, cfg);
+            },
+        });
+    });
+    // 设置页（GUI 设置卡片的宿主命名空间）
+    ctx.inject(['settings'], (c) => {
+        const settings = c.settings;
+        settings.register('dshm', Config, { base: config });
+    });
+}
+async function handleApi(req, res, cfg) {
+    try {
+        const url = new URL(req.url || '/', 'http://127.0.0.1');
+        const body = req.method === 'POST' ? await readBody(req) : {};
+        const method = String(body.method || url.searchParams.get('method') || 'ping');
+        switch (method) {
+            case 'ping':
+                return sendJson(res, 200, {
+                    ok: true,
+                    plugin: pkg.name,
+                    version: pkg.version,
+                    node: process.version,
+                    boot: `${process.pid}`,
+                });
+            case 'self-check': {
+                try {
+                    const { npmLatest } = await import('./core/versions.js');
+                    const latest = await npmLatest(pkg.name, cfg.timeoutMs ?? 20_000);
+                    const { isNewerVersion } = await import('./core/versions.js');
+                    return sendJson(res, 200, {
+                        ok: true,
+                        current: pkg.version,
+                        latest: latest.version,
+                        outdated: isNewerVersion(latest.version, pkg.version),
+                    });
+                }
+                catch (err) {
+                    return sendJson(res, 200, {
+                        ok: true,
+                        current: pkg.version,
+                        latest: null,
+                        outdated: false,
+                        error: err instanceof Error ? err.message : String(err),
+                    });
+                }
+            }
+            case 'self-upgrade': {
+                const { npmLatest } = await import('./core/versions.js');
+                const latest = await npmLatest(pkg.name, cfg.timeoutMs ?? 20_000);
+                const result = await withMutationLock(async () => {
+                    const { addDshPlugin } = await import('./core/dsh-cli.js');
+                    return addDshPlugin(`${pkg.name}@${latest.version}`);
+                });
+                return sendJson(res, 200, {
+                    ok: true,
+                    pkg: pkg.name,
+                    version: latest.version,
+                    usedAllowAllBuilds: result.usedAllowAllBuilds,
+                    needsRestart: true,
+                });
+            }
+            case 'registry': {
+                const loaded = await loadRegistrySafe(cfg, boolArg(body.force));
+                return sendJson(res, 200, {
+                    ok: true,
+                    plugins: loaded.registry.plugins,
+                    source: loaded.source,
+                    fetchedAt: loaded.fetchedAt,
+                    errors: loaded.errors,
+                });
+            }
+            case 'market': {
+                const result = await listMarket(cfg, { force: boolArg(body.force) });
+                return sendJson(res, 200, { ok: true, ...result });
+            }
+            case 'installed': {
+                const result = await listInstalledWithMeta(cfg);
+                return sendJson(res, 200, { ok: true, ...result });
+            }
+            case 'readme': {
+                const target = String(body.pkg || '').trim();
+                if (!target)
+                    return sendJson(res, 400, { ok: false, error: '缺少 pkg' });
+                const { readInstalledPluginReadme } = await import('./core/installed.js');
+                const result = await readInstalledPluginReadme(target);
+                return sendJson(res, 200, { ok: true, ...result });
+            }
+            case 'status': {
+                const { publicInstallStatus } = await import('./core/dsh-cli.js');
+                return sendJson(res, 200, { ok: true, ...publicInstallStatus() });
+            }
+            case 'install': {
+                const id = String(body.id || '').trim();
+                if (!id)
+                    return sendJson(res, 400, { ok: false, error: '缺少 id' });
+                const version = typeof body.version === 'string' ? body.version : undefined;
+                const result = await withMutationLock(() => installFromRegistry(id, cfg, { version }));
+                return sendJson(res, 200, { ok: true, ...result });
+            }
+            case 'uninstall': {
+                const target = String(body.pkg || '').trim();
+                if (!target)
+                    return sendJson(res, 400, { ok: false, error: '缺少 pkg' });
+                const result = await withMutationLock(() => uninstallPlugin(target, cfg));
+                return sendJson(res, 200, { ok: true, ...result });
+            }
+            case 'upgrade': {
+                const target = String(body.pkg || '').trim();
+                if (!target)
+                    return sendJson(res, 400, { ok: false, error: '缺少 pkg' });
+                const result = await withMutationLock(() => upgradePlugin(target, cfg));
+                return sendJson(res, 200, { ok: true, ...result });
+            }
+            case 'restart': {
+                if (!trustedRestartRequest(req)) {
+                    return sendJson(res, 403, { ok: false, error: '拒绝跨源重启请求' });
+                }
+                const result = scheduleRestart(servingPort(req));
+                return sendJson(res, 200, { ok: true, ...result });
+            }
+            default:
+                return sendJson(res, 404, { ok: false, error: `未知 method: ${method}` });
+        }
+    }
+    catch (err) {
+        return sendJson(res, 500, { ok: false, error: err instanceof Error ? err.message : String(err) });
+    }
+}
+async function loadRegistrySafe(cfg, force) {
+    const { loadRegistry } = await import('./core/registry.js');
+    return loadRegistry(cfg, { force });
+}
+function boolArg(v) {
+    return v === true || v === 'true' || v === 1 || v === '1';
+}
+function readBody(req, maxBytes = 1 << 20) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let size = 0;
+        req.on('data', (c) => {
+            size += c.length;
+            if (size > maxBytes) {
+                reject(new Error('请求体过大'));
+                req.destroy();
+                return;
+            }
+            chunks.push(c);
+        });
+        req.on('end', () => {
+            if (!chunks.length)
+                return resolve({});
+            try {
+                resolve(JSON.parse(Buffer.concat(chunks).toString('utf8')));
+            }
+            catch {
+                resolve({});
+            }
+        });
+        req.on('error', reject);
+    });
+}
+function sendJson(res, status, value) {
+    const body = JSON.stringify(value);
+    res.writeHead(status, {
+        'content-type': 'application/json; charset=utf-8',
+        'content-length': Buffer.byteLength(body),
+        'cache-control': 'no-store',
+    });
+    res.end(body);
+}

package/lib/tools.js

@@ -0,0 +1,341 @@
+import { defineTool } from '@deepseek-ai/dsh-tools';
+import { installTimeoutMs } from './core/env.js';
+import { installFromRegistry, listInstalledWithMeta, uninstallPlugin, upgradePlugin, withMutationLock } from './core/market.js';
+import { scheduleRestart } from './core/restart.js';
+export const CATEGORY_LABELS = {
+    market: '市场',
+    tools: '工具',
+    ui: '界面',
+    search: '搜索',
+    media: '多媒体',
+    other: '其他',
+};
+function cloneJson(value) {
+    return JSON.parse(JSON.stringify(value));
+}
+function matchInstalledByEntry(entry, installed) {
+    return installed.find((it) => {
+        if (entry.npm && (it.pkg === entry.npm || it.name === entry.npm))
+            return true;
+        if (entry.github && it.source === 'github') {
+            const m = /^github:([^#]+)/.exec(it.spec);
+            if (m && m[1] === entry.github)
+                return true;
+        }
+        return false;
+    });
+}
+export function registerTools(ctx, cfg) {
+    const timeoutMs = cfg.timeoutMs ?? 20_000;
+    ctx.tools.register(defineTool({
+        name: 'dshm_search',
+        description: 'Search your personal DSH plugin marketplace (dsh-m) and show clickable plugin cards. ALWAYS call this instead of web_search or bash when the user wants to find/recommend/browse their curated DSH plugins (插件). Call EXACTLY ONCE per user message; extract a real keyword (主题, 搜索) rather than pasting the whole sentence. Omit query to browse all listings. After cards appear, reply with AT MOST one short sentence. Do not print install commands.',
+        parameters: {
+            query: { type: 'string', description: 'Main keyword, e.g. 主题 or 搜索. Optional.' },
+            category: {
+                type: 'string',
+                description: `Optional first-level category: ${Object.keys(CATEGORY_LABELS).join(', ')}`,
+            },
+            limit: { type: 'number', description: 'Cards in this batch. Default all (registry is curated & small).' },
+        },
+        output: {
+            schema: { type: 'object', additionalProperties: true },
+            render: (_args, value) => [{ type: 'text', text: renderSearch(value) }],
+            presentationMeta: (_args, value) => ({ kind: 'dshm-search', ...value }),
+        },
+        presentCall: (args) => ({
+            card: 'generic',
+            title: `DSH 市场 · ${String(args.query || args.category || '浏览')}`,
+            kind: 'search',
+            content: [],
+        }),
+        presentResult: (_args, { isError, meta }) => ({
+            card: 'generic',
+            title: isError ? '市场搜索失败' : `DSH 市场 · ${meta?.items?.length ?? 0} 条`,
+            content: [],
+        }),
+        timeoutMs: timeoutMs + 5000,
+        async execute(args) {
+            const registry = await import('./core/registry.js');
+            const installed = await import('./core/installed.js');
+            const loaded = await registry.loadRegistry(cfg);
+            const inst = await installed.listInstalledPlugins();
+            const query = String(args.query || '').trim().toLowerCase();
+            const category = typeof args.category === 'string' && args.category ? args.category : null;
+            let items = loaded.registry.plugins.filter((e) => {
+                if (category && e.category !== category)
+                    return false;
+                if (!query)
+                    return true;
+                const hay = `${e.id} ${e.name} ${e.description} ${e.tags.join(' ')}`.toLowerCase();
+                return hay.includes(query);
+            });
+            const total = items.length;
+            const limit = Number.isFinite(Number(args.limit)) && Number(args.limit) > 0 ? clamp(Number(args.limit), 1, 80) : total;
+            items = items.slice(0, limit);
+            return cloneJson({
+                query: String(args.query || ''),
+                category,
+                total,
+                items: items.map((e) => {
+                    const i = matchInstalledByEntry(e, inst.items);
+                    return {
+                        id: e.id,
+                        name: e.name,
+                        description: e.description,
+                        category: e.category,
+                        tags: e.tags,
+                        source: e.source,
+                        npm: e.npm,
+                        github: e.github,
+                        homepage: e.homepage,
+                        installed: Boolean(i),
+                        installedPkg: i?.pkg,
+                        installedVersion: i?.version,
+                    };
+                }),
+            });
+        },
+    }));
+    ctx.tools.register(defineTool({
+        name: 'dshm_list',
+        description: 'List plugins installed in the DSH web profile, annotated with 市场安装/非市场安装, sources, and outdated flags. Use when the user asks what plugins are installed or wants to manage local plugins.',
+        parameters: {},
+        output: {
+            schema: { type: 'object', additionalProperties: true },
+            render: (_args, value) => [{ type: 'text', text: renderList(value) }],
+            presentationMeta: (_args, value) => ({ kind: 'dshm-list', ...value }),
+        },
+        presentCall: () => ({ card: 'generic', title: '已装插件', kind: 'search', content: [] }),
+        presentResult: (_args, { isError, meta }) => ({
+            card: 'generic',
+            title: isError ? '列出失败' : `已装 · ${meta?.items?.length ?? 0} 个`,
+            content: [],
+        }),
+        timeoutMs: timeoutMs + 5000,
+        async execute() {
+            const result = await listInstalledWithMeta(cfg);
+            return cloneJson({
+                profileDir: result.profileDir,
+                others: result.others,
+                items: result.items.map((it) => ({
+                    pkg: it.pkg,
+                    name: it.name,
+                    version: it.version,
+                    source: it.source,
+                    registryId: it.registryId ?? null,
+                    latestVersion: it.latestVersion ?? null,
+                    outdated: it.outdated,
+                })),
+            });
+        },
+    }));
+    ctx.tools.register(defineTool({
+        name: 'dshm_install',
+        description: 'Install a plugin from the dsh-m registry into the current web profile after the user names one (装 dsh-skins / 安装 web-search). Pass the id from dshm_search results. npm 源锁定最新精确版本，github 源锁定 commit SHA。Do not print CLI commands. After success, tell the user it needs a restart of dsh web, and offer dshm_restart.',
+        parameters: {
+            id: { type: 'string', required: true, description: '收录 id from dshm_search, e.g. dsh-skins' },
+            version: { type: 'string', description: 'Optional exact semver (npm 源). Default latest.' },
+        },
+        output: {
+            schema: { type: 'object', additionalProperties: true },
+            render: (_args, value) => [{ type: 'text', text: renderInstall(value) }],
+            presentationMeta: (_args, value) => ({ kind: 'dshm-install', ...value }),
+        },
+        presentCall: (args) => ({ card: 'generic', title: `安装 · ${String(args.id || '')}`, kind: 'search', content: [] }),
+        presentResult: (_args, { isError, meta }) => ({
+            card: 'generic',
+            title: isError ? '安装失败' : `已安装 · ${meta?.pkg || ''}`,
+            content: [],
+        }),
+        timeoutMs: installTimeoutMs() + 60_000,
+        async execute(args) {
+            const id = String(args.id || '').trim();
+            if (!id)
+                throw new Error('缺少收录 id');
+            const version = typeof args.version === 'string' && args.version.trim() ? args.version.trim() : undefined;
+            return cloneJson(await withMutationLock(() => installFromRegistry(id, cfg, { version })));
+        },
+    }));
+    ctx.tools.register(defineTool({
+        name: 'dshm_uninstall',
+        description: 'Uninstall a DSH plugin from the web profile by package name (pkg from dshm_list). Confirm with the user BEFORE calling. Does not delete plugin data; reports leftover paths instead.',
+        parameters: {
+            pkg: { type: 'string', required: true, description: '包名 from dshm_list, e.g. dsh-web-search' },
+        },
+        output: {
+            schema: { type: 'object', additionalProperties: true },
+            render: (_args, value) => [{ type: 'text', text: renderUninstall(value) }],
+            presentationMeta: (_args, value) => ({ kind: 'dshm-uninstall', ...value }),
+        },
+        presentCall: (args) => ({ card: 'generic', title: `卸载 · ${String(args.pkg || '')}`, content: [] }),
+        presentResult: (_args, { isError, meta }) => ({
+            card: 'generic',
+            title: isError ? '卸载失败' : `已卸载 · ${meta?.pkg || ''}`,
+            content: [],
+        }),
+        timeoutMs: installTimeoutMs(),
+        async execute(args) {
+            const target = String(args.pkg || '').trim();
+            if (!target)
+                throw new Error('缺少 pkg');
+            return cloneJson(await withMutationLock(() => uninstallPlugin(target, cfg)));
+        },
+    }));
+    ctx.tools.register(defineTool({
+        name: 'dshm_outdated',
+        description: 'Check installed DSH plugins for newer versions (npm latest / GitHub HEAD). Use when the user asks about updates or 升级. Read-only.',
+        parameters: {},
+        output: {
+            schema: { type: 'object', additionalProperties: true },
+            render: (_args, value) => [{ type: 'text', text: renderOutdated(value) }],
+            presentationMeta: (_args, value) => ({ kind: 'dshm-outdated', ...value }),
+        },
+        presentCall: () => ({ card: 'generic', title: '检查更新', kind: 'search', content: [] }),
+        presentResult: (_args, { isError, meta }) => {
+            const out = meta;
+            const n = out?.items?.filter((it) => it.outdated).length ?? 0;
+            return { card: 'generic', title: isError ? '检查失败' : n ? `${n} 个可升级` : '全部最新', content: [] };
+        },
+        timeoutMs: timeoutMs + 10_000,
+        async execute() {
+            const result = await listInstalledWithMeta(cfg);
+            const items = result.items.map((it) => ({
+                pkg: it.pkg,
+                name: it.name,
+                version: it.version,
+                source: it.source,
+                latestVersion: it.latestVersion ?? null,
+                latestTag: it.latestTag ?? null,
+                outdated: it.outdated,
+            }));
+            return cloneJson({ items, outdatedCount: items.filter((it) => it.outdated).length });
+        },
+    }));
+    ctx.tools.register(defineTool({
+        name: 'dshm_upgrade',
+        description: 'Upgrade an installed DSH plugin to the latest version (npm 拉最新精确版 / github 重新锁 HEAD)。pkg 来自 dshm_list 或 dshm_outdated。用户确认升级哪一个之后再调用。After success, tell the user it needs a restart, and offer dshm_restart.',
+        parameters: {
+            pkg: { type: 'string', required: true, description: '包名 from dshm_list / dshm_outdated' },
+        },
+        output: {
+            schema: { type: 'object', additionalProperties: true },
+            render: (_args, value) => [{ type: 'text', text: renderUpgrade(value) }],
+            presentationMeta: (_args, value) => ({ kind: 'dshm-upgrade', ...value }),
+        },
+        presentCall: (args) => ({ card: 'generic', title: `升级 · ${String(args.pkg || '')}`, content: [] }),
+        presentResult: (_args, { isError, meta }) => ({
+            card: 'generic',
+            title: isError ? '升级失败' : `已升级 · ${meta?.pkg || ''}`,
+            content: [],
+        }),
+        timeoutMs: installTimeoutMs() + 60_000,
+        async execute(args) {
+            const target = String(args.pkg || '').trim();
+            if (!target)
+                throw new Error('缺少 pkg');
+            return cloneJson(await withMutationLock(() => upgradePlugin(target, cfg)));
+        },
+    }));
+    ctx.tools.register(defineTool({
+        name: 'dshm_restart',
+        description: 'Restart DSH web so newly installed/uninstalled/upgraded plugins take effect. ONLY call after the user agrees (用户同意重启后). The page reloads automatically after the service comes back.',
+        parameters: {},
+        output: {
+            schema: { type: 'object', additionalProperties: true },
+            render: (_args, value) => [{
+                    type: 'text',
+                    text: `已请求重启 DSH web（via ${value.via}）。服务几秒内恢复，之后让用户刷新页面即可。对用户最多一句短话。`,
+                }],
+            presentationMeta: (_args, value) => ({ kind: 'dshm-restart', ...value }),
+        },
+        presentCall: () => ({ card: 'generic', title: '重启 DSH Web', content: [] }),
+        presentResult: (_args, { isError }) => ({
+            card: 'generic',
+            title: isError ? '重启失败' : '已请求重启',
+            content: [],
+        }),
+        timeoutMs: 15_000,
+        async execute() {
+            return cloneJson(scheduleRestart(null));
+        },
+    }));
+    ctx.inject(['systemPrompt'], (c) => {
+        const prompt = c.systemPrompt;
+        prompt.section({
+            name: 'tool:dshm',
+            order: 211,
+            text: [
+                'Finding / recommending / browsing DSH plugins (插件) in the personal marketplace: you MUST call dshm_search, never web_search or bash. One call per user message; extract a real keyword. After cards appear, reply with AT MOST one short sentence. Do not print install commands.',
+                `Plugin categories: ${Object.entries(CATEGORY_LABELS).map(([k, v]) => `${k}=${v}`).join(', ')}.`,
+                'Install only after the user names a card: dshm_install with its id. Then one short sentence mentioning the restart requirement; offer dshm_restart.',
+                'For installed plugins, call dshm_list / dshm_outdated. Upgrade only after the user confirms which one: dshm_upgrade. Uninstall only after confirmation: dshm_uninstall.',
+                'dshm_restart only after the user agrees to restart; afterwards tell them to refresh once the page recovers.',
+            ].join(' '),
+        });
+    });
+}
+function renderSearch(out) {
+    if (!out.items?.length)
+        return '收录清单中没有匹配的插件。对用户只说一句：没找到，可以换个词再搜。不要写长文。';
+    const lines = out.items.map((it, i) => {
+        const inst = it.installed ? `（已安装 v${it.installedVersion || '?'}）` : '';
+        return `${i + 1}. ${it.name} · ${it.id}${inst} · ${CATEGORY_LABELS[it.category] || it.category}`;
+    });
+    return [
+        `插件卡片已展示 ${out.items.length}${out.total && out.total > out.items.length ? `/${out.total}` : ''} 条（内部序号，禁止复述给用户）：`,
+        lines.join('\n'),
+        '对用户最多回一句短话。禁止清单和长文。用户点名安装时才调 dshm_install（id）。',
+    ].join('\n');
+}
+function renderList(out) {
+    if (!out.items?.length)
+        return 'web profile 还没有安装任何 dsh 插件。对用户一句短话即可。';
+    const lines = out.items.map((it, i) => {
+        const marks = [
+            it.registryId ? '市场' : '非市场',
+            it.outdated && it.latestVersion ? `可升级 → v${it.latestVersion}` : null,
+        ].filter(Boolean).join('，');
+        return `${i + 1}. ${it.name} (${it.pkg}) v${it.version || '?'} · ${it.source}${marks ? ` · ${marks}` : ''}`;
+    });
+    return [
+        `已安装 ${out.items.length} 个插件（内部序号，禁止复述给用户）：`,
+        lines.join('\n'),
+        '对用户最多回一句短话。管理动作：dshm_upgrade / dshm_uninstall（先与用户确认）。',
+    ].join('\n');
+}
+function renderInstall(out) {
+    const extra = out.usedAllowAllBuilds ? '注意：该插件执行了构建脚本（已按策略放行）。' : '';
+    return `✅ ${out.pkg} 已安装（${out.spec}）。${extra}需要重启 DSH Web 生效——告知用户并询问是否 dshm_restart。不要打印安装命令。`;
+}
+function renderUninstall(out) {
+    const parts = [`✅ ${out.pkg} 已卸载。`];
+    if (out.liveDisabled)
+        parts.push('运行中的界面已先下线。');
+    if (out.leftovers?.length)
+        parts.push(`疑似残留数据（未删除，仅供知晓）：${out.leftovers.join('、')}`);
+    parts.push('需要重启生效——询问是否 dshm_restart。');
+    return parts.join(' ');
+}
+function renderOutdated(out) {
+    const outdated = (out.items || []).filter((it) => it.outdated);
+    if (!out.items?.length)
+        return 'web profile 没有已装插件。';
+    if (!outdated.length)
+        return `全部 ${out.items.length} 个插件均已是最新版本。对用户一句短话。`;
+    const lines = outdated.map((it) => `${it.name} (${it.pkg})：v${it.version} → ${it.latestTag || (it.latestVersion ? `v${it.latestVersion}` : '最新')}`);
+    return [
+        `${outdated.length}/${out.items.length} 个插件可升级：`,
+        lines.join('\n'),
+        '询问用户要升级哪个，确认后调 dshm_upgrade（pkg）。',
+    ].join('\n');
+}
+function renderUpgrade(out) {
+    const from = out.fromVersion ? `v${out.fromVersion} → ` : '';
+    const to = out.version ? `v${out.version}` : out.sha ? out.sha.slice(0, 7) : '最新';
+    const extra = out.usedAllowAllBuilds ? '注意：该插件执行了构建脚本。' : '';
+    return `✅ ${out.pkg} 已升级（${from}${to}）。${extra}需要重启生效——询问是否 dshm_restart。`;
+}
+function clamp(n, min, max) {
+    return Math.min(max, Math.max(min, n));
+}