dsh-packycode-api 1.0.1 → 1.0.4

package/lib/index.js

@@ -8,6 +8,8 @@ import { homedir, tmpdir } from "node:os";
 import { spawn } from "node:child_process";
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { credentialKey } from "@deepseek-ai/dsh-credentials";
+import { readFile, readdir, realpath } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
 import { createProvider } from "@earendil-works/pi-ai";
 import { anthropicMessagesApi } from "@earendil-works/pi-ai/api/anthropic-messages.lazy";
 import { openAICompletionsApi } from "@earendil-works/pi-ai/api/openai-completions.lazy";
@@ -67,7 +69,7 @@ const DEFAULT_REASONING_LEVEL = "high";
 * @module dsh-packycode-api/balance
 */
 const record = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-const clone = (value) => structuredClone(value);
+const clone$1 = (value) => structuredClone(value);
 function number(value) {
 	if (typeof value === "number" && Number.isFinite(value)) return value;
 	if (typeof value === "string" && value.trim() !== "") {
@@ -274,7 +276,7 @@ function createBalanceReader({ listKeys, getHosts, fetchImpl = fetch, now = Date
 	return Object.freeze({
 		async read({ force = false, signal } = {}) {
 			signal?.throwIfAborted();
-			if (!force && cached !== void 0 && now() - cached.fetchedAt < ttlMs) return clone(cached);
+			if (!force && cached !== void 0 && now() - cached.fetchedAt < ttlMs) return clone$1(cached);
 			const createPending = (requestSignal) => {
 				const observedGeneration = generation;
 				return load(requestSignal).then((value) => {
@@ -282,7 +284,7 @@ function createBalanceReader({ listKeys, getHosts, fetchImpl = fetch, now = Date
 					return value;
 				});
 			};
-			if (force) return clone(await createPending(signal));
+			if (force) return clone$1(await createPending(signal));
 			const pending = inFlight ?? createPending();
 			if (inFlight === void 0) {
 				inFlight = pending;
@@ -291,7 +293,7 @@ function createBalanceReader({ listKeys, getHosts, fetchImpl = fetch, now = Date
 				};
 				pending.then(clear, clear);
 			}
-			return clone(await pending);
+			return clone$1(await pending);
 		},
 		invalidate() {
 			generation += 1;
@@ -1819,6 +1821,20 @@ var PackyCodeKeyRing = class {
 			};
 		}));
 	}
+	async rename(id, label) {
+		const name = text(label).trim().slice(0, 60);
+		if (name === "") throw new Error("That PackyCode key name cannot be empty");
+		return projection(await this.#write((state) => {
+			if (!state.keys.some((candidate) => candidate.id === id)) throw new Error("Unknown PackyCode key");
+			return {
+				activeId: state.activeId,
+				keys: state.keys.map((candidate) => candidate.id === id ? {
+					...candidate,
+					label: name
+				} : candidate)
+			};
+		}));
+	}
 	async remove(id) {
 		return projection(await this.#write((state) => {
 			const remaining = state.keys.filter((candidate) => candidate.id !== id);
@@ -1946,6 +1962,383 @@ function capClaudeMode(requested, ceiling) {
 	return RANK[requested] > RANK[ceiling] ? ceiling : requested;
 }
 //#endregion
+//#region src/plugin-version.js
+/**
+* Version self-knowledge for the settings panel.
+*
+* The running version comes from this package. The latest version comes from
+* the npm registry. An in-place update is only offered for a registry install,
+* and it installs that exact version with the host's own pnpm — never through
+* `dsh plugin --profile desktop`, which the desktop app refuses. Registry
+* bodies and package-manager output stay host-side.
+*
+* @module dsh-packycode-api/plugin-version
+*/
+const PACKAGE_NAME = "dsh-packycode-api";
+const NPM_REGISTRY_LATEST_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
+const DEFAULT_VERSION_TTL_MS = 5 * 6e4;
+const DEFAULT_VERSION_TIMEOUT_MS = 1e4;
+const DEFAULT_UPDATE_TIMEOUT_MS = 18e4;
+const clone = (value) => structuredClone(value);
+/**
+* Resolve fetch at call time. A sibling plugin may wrap `globalThis.fetch`
+* and later dismantle that wrapper; a binding captured during `apply()` would
+* keep the dead wrapper for the process lifetime.
+*/
+function ambientFetch(input, init) {
+	const headers = new Headers(init?.headers ?? (input instanceof Request ? input.headers : void 0));
+	if (!headers.has("accept-encoding")) headers.set("accept-encoding", "identity");
+	return globalThis.fetch(input, {
+		...init,
+		headers
+	});
+}
+/** One caller's cancellation must not abort the shared registry read. */
+function waitForSharedRequest(promise, signal) {
+	if (signal === void 0) return promise;
+	signal.throwIfAborted();
+	return new Promise((resolve, reject) => {
+		const onAbort = () => reject(signal.reason);
+		signal.addEventListener("abort", onAbort, { once: true });
+		promise.then((value) => {
+			signal.removeEventListener("abort", onAbort);
+			resolve(value);
+		}, (error) => {
+			signal.removeEventListener("abort", onAbort);
+			reject(error);
+		});
+	});
+}
+/** Parse a strict `x.y.z[-pre][+build]` version; anything else is undefined. */
+function parseSemver(value) {
+	if (typeof value !== "string") return void 0;
+	const match = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/u.exec(value.trim());
+	if (match === null) return void 0;
+	return {
+		major: Number(match[1]),
+		minor: Number(match[2]),
+		patch: Number(match[3]),
+		pre: match[4]
+	};
+}
+/** Compare two versions: -1/0/1, or undefined when either side is not semver. */
+function compareSemver(a, b) {
+	const left = parseSemver(a);
+	const right = parseSemver(b);
+	if (left === void 0 || right === void 0) return void 0;
+	for (const key of [
+		"major",
+		"minor",
+		"patch"
+	]) if (left[key] !== right[key]) return left[key] < right[key] ? -1 : 1;
+	if (left.pre === right.pre) return 0;
+	if (left.pre === void 0) return 1;
+	if (right.pre === void 0) return -1;
+	return left.pre < right.pre ? -1 : 1;
+}
+/**
+* Classify how the running package reached the profile. Only registry specs
+* may be updated in place; local checkouts belong to the owner's iteration.
+*/
+function classifySpec(spec) {
+	if (typeof spec !== "string" || spec === "") return "unknown";
+	if (/^(?:link|file):/u.test(spec)) return "link";
+	if (/^(?:\d|[~^*])/u.test(spec)) return "npm";
+	return "unknown";
+}
+const readManifest = async (path) => {
+	try {
+		const parsed = JSON.parse(await readFile(path, "utf8"));
+		return parsed !== null && typeof parsed === "object" ? parsed : void 0;
+	} catch {
+		return;
+	}
+};
+/**
+* A zero exit only proves the command ran. pnpm can skip a too-new version
+* and still exit zero, so the landed manifest is what makes the answer true.
+*/
+async function confirmInstalled({ profileDir, expected, settleDelayMs, attempts = 3 }) {
+	for (let attempt = 1; attempt <= attempts; attempt += 1) {
+		if ((await readManifest(join(profileDir, "node_modules", "dsh-packycode-api", "package.json")))?.version === expected) return;
+		if (attempt < attempts) await new Promise((resolve) => {
+			setTimeout(resolve, settleDelayMs);
+		});
+	}
+	throw new Error("PackyCode plugin update did not install the requested version");
+}
+/**
+* Find the profile that owns this running installation. pnpm symlinks resolve
+* to the same realpath on both sides. When no realpath matches, fall back to
+* the only profile that declares the dependency at all.
+*/
+async function findInstall({ dshHome, ownPackageJsonUrl }) {
+	let ownReal;
+	try {
+		ownReal = await realpath(fileURLToPath(ownPackageJsonUrl));
+	} catch {
+		ownReal = void 0;
+	}
+	let entries = [];
+	try {
+		entries = await readdir(join(dshHome, "profiles"), { withFileTypes: true });
+	} catch {
+		entries = [];
+	}
+	const declared = [];
+	for (const entry of entries) {
+		if (!entry.isDirectory()) continue;
+		const profileDir = join(dshHome, "profiles", entry.name);
+		const spec = (await readManifest(join(profileDir, "package.json")))?.dependencies?.[PACKAGE_NAME];
+		if (typeof spec !== "string") continue;
+		declared.push({
+			profile: entry.name,
+			spec
+		});
+		if (ownReal === void 0) continue;
+		try {
+			if (await realpath(join(profileDir, "node_modules", "dsh-packycode-api", "package.json")) === ownReal) return {
+				kind: classifySpec(spec),
+				profile: entry.name
+			};
+		} catch {}
+	}
+	if (declared.length === 1) return {
+		kind: classifySpec(declared[0].spec),
+		profile: declared[0].profile
+	};
+	return { kind: "unknown" };
+}
+const isExistingPath = (value) => typeof value === "string" && value !== "" && existsSync(value);
+/** Anchored to the file name so a directory that merely contains the word cannot match. */
+const PNPM_SCRIPT = /[\\/]pnpm\.(?:mjs|cjs|js)$/u;
+const dshRuntimeRoot = (value) => isExistingPath(value) && existsSync(join(value, "node_modules", "@deepseek-ai", "dsh", "package.json")) ? value : void 0;
+/**
+* Locate the package manager that owns this profile.
+*
+* `dsh plugin --profile desktop` is refused by the desktop app, so the update
+* installs with pnpm directly. The desktop host puts the bundled pnpm in its
+* own arguments; nothing is guessed from the entry script.
+*/
+function resolvePnpm({ argv } = {}) {
+	const entries = Array.isArray(argv) ? argv : [];
+	for (const entry of entries) if (isExistingPath(entry) && PNPM_SCRIPT.test(entry)) return entry;
+	for (const entry of entries) {
+		const root = dshRuntimeRoot(entry);
+		if (root === void 0) continue;
+		const script = join(root, "..", "pnpm", "bin", "pnpm.mjs");
+		if (existsSync(script)) return script;
+	}
+}
+function resolveLauncher({ argv, execPath }) {
+	const pnpm = resolvePnpm({ argv });
+	if (pnpm === void 0) return {
+		command: "pnpm",
+		prefix: []
+	};
+	return {
+		command: execPath,
+		prefix: [pnpm]
+	};
+}
+/** Run pnpm host-side. Its output is never returned to the browser. */
+function spawnRunCommand({ command, args, cwd }, { signal, timeoutMs }) {
+	return new Promise((resolve, reject) => {
+		if (signal?.aborted) {
+			reject(signal.reason instanceof Error ? signal.reason : /* @__PURE__ */ new Error("PackyCode plugin update aborted"));
+			return;
+		}
+		const controller = new AbortController();
+		const onAbort = () => controller.abort(signal.reason);
+		signal?.addEventListener("abort", onAbort, { once: true });
+		const timer = setTimeout(() => controller.abort(/* @__PURE__ */ new Error("PackyCode plugin update timed out")), timeoutMs);
+		let settled = false;
+		const settle = (callback, value) => {
+			if (settled) return;
+			settled = true;
+			clearTimeout(timer);
+			signal?.removeEventListener("abort", onAbort);
+			callback(value);
+		};
+		let child;
+		try {
+			child = spawn(command, args, {
+				stdio: [
+					"ignore",
+					"pipe",
+					"pipe"
+				],
+				signal: controller.signal,
+				...cwd === void 0 ? {} : { cwd }
+			});
+		} catch (error) {
+			settle(reject, error);
+			return;
+		}
+		let stdout = "";
+		let stderr = "";
+		child.stdout?.on("data", (chunk) => {
+			stdout = (stdout + chunk).slice(-8192);
+		});
+		child.stderr?.on("data", (chunk) => {
+			stderr = (stderr + chunk).slice(-8192);
+		});
+		child.on("error", (error) => settle(reject, error));
+		child.on("close", (code) => {
+			if (controller.signal.aborted) {
+				const reason = controller.signal.reason;
+				settle(reject, reason instanceof Error ? reason : /* @__PURE__ */ new Error("PackyCode plugin update aborted"));
+				return;
+			}
+			settle(resolve, {
+				code: code ?? 1,
+				stdout,
+				stderr
+			});
+		});
+	});
+}
+/**
+* The running version, the latest registry version, which profile installed
+* this copy, and registry-spec updates against that profile.
+*/
+function createPackyCodePluginManager({ fetchImpl = ambientFetch, runCommand = spawnRunCommand, execPath = process.execPath, argv = process.argv, env = process.env, ownPackageJsonUrl = new URL("../package.json", import.meta.url), registryUrl = NPM_REGISTRY_LATEST_URL, now = Date.now, ttlMs = DEFAULT_VERSION_TTL_MS, timeoutMs = DEFAULT_VERSION_TIMEOUT_MS, updateTimeoutMs = DEFAULT_UPDATE_TIMEOUT_MS, settleDelayMs = 250 } = {}) {
+	if (typeof fetchImpl !== "function") throw new Error("PackyCode plugin manager requires fetch");
+	if (typeof runCommand !== "function") throw new Error("PackyCode plugin manager requires runCommand");
+	const dshHome = typeof env.DSH_HOME === "string" && env.DSH_HOME !== "" ? env.DSH_HOME : join(homedir(), ".dsh");
+	const launcher = resolveLauncher({
+		argv,
+		execPath
+	});
+	let cached;
+	let inFlight;
+	let generation = 0;
+	let updating = false;
+	const fetchLatest = async (signal) => {
+		const timeoutSignal = AbortSignal.timeout(timeoutMs);
+		const requestSignal = signal === void 0 ? timeoutSignal : AbortSignal.any([signal, timeoutSignal]);
+		let response;
+		try {
+			response = await fetchImpl(registryUrl, {
+				headers: { Accept: "application/json" },
+				redirect: "error",
+				signal: requestSignal
+			});
+		} catch (error) {
+			if (signal?.aborted) throw error;
+			throw new Error("PackyCode plugin version check failed");
+		}
+		if (!response.ok) throw new Error("PackyCode plugin version check failed");
+		let version;
+		try {
+			version = (await response.json())?.version;
+		} catch {
+			version = void 0;
+		}
+		if (parseSemver(version) === void 0) throw new Error("PackyCode plugin version check failed");
+		return version;
+	};
+	const readOwnVersion = async () => {
+		const version = (await readManifest(fileURLToPath(ownPackageJsonUrl)))?.version;
+		if (parseSemver(version) === void 0) throw new Error("PackyCode plugin version is unavailable");
+		return version;
+	};
+	const load = async (signal) => {
+		signal?.throwIfAborted();
+		const [current, install, latest] = await Promise.all([
+			readOwnVersion(),
+			findInstall({
+				dshHome,
+				ownPackageJsonUrl
+			}),
+			fetchLatest(signal)
+		]);
+		return {
+			current,
+			latest,
+			updateAvailable: compareSemver(latest, current) === 1,
+			install,
+			fetchedAt: now()
+		};
+	};
+	return Object.freeze({
+		async read({ force = false, signal } = {}) {
+			signal?.throwIfAborted();
+			if (!force && cached !== void 0 && now() - cached.fetchedAt < ttlMs) return clone(cached);
+			const createPending = (requestSignal) => {
+				const observedGeneration = generation;
+				return load(requestSignal).then((value) => {
+					if (generation === observedGeneration) cached = value;
+					return value;
+				});
+			};
+			if (force) return clone(await createPending(signal));
+			const pending = inFlight ?? createPending();
+			if (inFlight === void 0) {
+				inFlight = pending;
+				const clear = () => {
+					if (inFlight === pending) inFlight = void 0;
+				};
+				pending.then(clear, clear);
+			}
+			return clone(await waitForSharedRequest(pending, signal));
+		},
+		async update({ signal } = {}) {
+			signal?.throwIfAborted();
+			if (updating) throw new Error("PackyCode plugin update is already running");
+			updating = true;
+			try {
+				const install = await findInstall({
+					dshHome,
+					ownPackageJsonUrl
+				});
+				if (install.kind === "link") throw new Error("PackyCode plugin is installed from a local checkout");
+				if (install.kind !== "npm" || install.profile === void 0) throw new Error("PackyCode plugin update could not find the owning profile");
+				const latest = await fetchLatest(signal);
+				const profileDir = join(dshHome, "profiles", install.profile);
+				let result;
+				try {
+					result = await runCommand({
+						command: launcher.command,
+						args: [
+							...launcher.prefix,
+							"add",
+							"--save-exact",
+							`--config.minimumReleaseAge=0`,
+							`${PACKAGE_NAME}@${latest}`
+						],
+						cwd: profileDir
+					}, {
+						signal,
+						timeoutMs: updateTimeoutMs
+					});
+				} catch (error) {
+					if (signal?.aborted) throw error;
+					throw new Error("PackyCode plugin update failed");
+				}
+				if (result.code !== 0) throw new Error("PackyCode plugin update failed");
+				await confirmInstalled({
+					profileDir,
+					expected: latest,
+					settleDelayMs
+				});
+				generation += 1;
+				cached = void 0;
+				return {
+					version: latest,
+					profile: install.profile
+				};
+			} finally {
+				updating = false;
+			}
+		},
+		invalidate() {
+			generation += 1;
+			cached = void 0;
+		}
+	});
+}
+//#endregion
 //#region src/catalog.js
 /**
 * The built-in PackyCode model catalog.
@@ -2354,11 +2747,15 @@ function normalizeHost(value, fallback) {
 *   Claude Code CLI manager (optional: without it the CLI endpoints refuse).
 * @returns a handler for `connection.rpc.handle(CHANNEL, handler)`.
 */
-function createPackyCodeRpc({ ring, balance, hosts, preference, claudeCli }) {
+function createPackyCodeRpc({ ring, balance, hosts, preference, claudeCli, pluginManager }) {
 	const requireCli = () => {
 		if (claudeCli === void 0) throw new Error("PackyCode Claude Code CLI support is unavailable in this runtime");
 		return claudeCli;
 	};
+	const requireManager = () => {
+		if (pluginManager === void 0) throw new Error("PackyCode plugin version is unavailable");
+		return pluginManager;
+	};
 	const status = async () => ({
 		...await ring.list(),
 		hosts: hosts(),
@@ -2368,7 +2765,7 @@ function createPackyCodeRpc({ ring, balance, hosts, preference, claudeCli }) {
 			statusHost: DEFAULT_STATUS_HOST
 		}
 	});
-	return async (endpoint, payload) => {
+	return async (endpoint, payload, signal) => {
 		try {
 			switch (endpoint) {
 				case "status": return ok(await status());
@@ -2376,6 +2773,10 @@ function createPackyCodeRpc({ ring, balance, hosts, preference, claudeCli }) {
 					await ring.add(payload?.key, payload?.label);
 					balance.invalidate();
 					return ok(await status());
+				case "keys/rename":
+					await ring.rename(String(payload?.id ?? ""), payload?.label);
+					balance.invalidate();
+					return ok(await status());
 				case "keys/remove":
 					await ring.remove(String(payload?.id ?? ""));
 					balance.invalidate();
@@ -2413,6 +2814,11 @@ function createPackyCodeRpc({ ring, balance, hosts, preference, claudeCli }) {
 					cli.install();
 					return ok(await cli.status());
 				}
+				case "plugin/version": return ok(await requireManager().read({
+					force: payload?.force === true,
+					signal
+				}));
+				case "plugin/update": return ok(await requireManager().update({ signal }));
 				default: return failed("Unknown PackyCode endpoint");
 			}
 		} catch (error) {
@@ -2703,7 +3109,8 @@ function apply(ctx, config) {
 		balance,
 		hosts,
 		preference,
-		claudeCli
+		claudeCli,
+		pluginManager: createPackyCodePluginManager()
 	});
 	/**
 	* Connection registers a channel through `owner.webServer`, read on its own

package/package.json

@@ -1,10 +1,11 @@
 {
   "name": "dsh-packycode-api",
-  "version": "1.0.1",
+  "version": "1.0.4",
   "packageManager": "pnpm@10.32.1",
   "description": "Use a PackyCode (PackyAPI) API key in DeepSeek Harness through a built-in multi-protocol model route with key rotation and balance display",
   "type": "module",
   "main": "./lib/index.js",
+  "icon": "./icon-subscription.webp",
   "exports": {
     ".": "./lib/index.js",
     "./client": "./lib/client.js",
@@ -12,9 +13,12 @@
     "./package.json": "./package.json"
   },
   "files": [
+    "icon-subscription.webp",
     "lib/*.js",
     "cordis.patch.yml",
     "README.md",
+    "README.en.md",
+    "docs/assets/dsh-packycode-mascot.png",
     "AGENTS.md",
     "CHANGELOG.md",
     "SECURITY.md",