dsh-packycode-api 1.1.6 → 1.1.7

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 1.1.7
+
+- Fixed HTTP 405 from the settings RPC after a first hot install. The shipped Connection getter retains its own row's context, which need not inject `webServer`; the browser channel now registers with this plugin's `connection` / `webServer` injection scope as its explicit owner. Native Connection admission, authentication and RPC envelopes remain in use. The explicit-owner entry is internal to the shipped service, so other Connection implementations retain the public `rpc.handle` contract.
+- Removed the bundle override of the protected `connection` row. First installation now mounts the plugin's own channel without rebuilding that row or restarting DSH; unloading or losing the optional webserver scope removes the channel. Installation instructions now describe the restart-free first install.
+- Added real Connection / Cordis HTTP regressions for the 0.1.5 and 0.2.0-rc.2 hosts, covering first install, authenticated settings access, uninstall/reinstall and optional webserver availability. The 0.2 test host uses a separate development fixture with matching host dependencies.
+- Validation: 284 tests passed, both bundles rebuilt and the tarball generated. The six HTTP lifecycle/authentication checks also passed against the built host bundle, without restarting the fixture's existing server or Connection service.
+
 ## 1.1.6
 
 - Fixed the missing `image` input capability on `deepseek-flash`, following [DeepSeek's official vision guide](https://api-docs.deepseek.com/guides/vision/). DSH can now send image attachments through the existing Chat Completions route. Audited the two GPT models, Grok 4.7 and three Claude models against their vendor documentation; all six already declare image input.

package/README.en.md

@@ -45,9 +45,9 @@ Open the desktop application's **Plugins** page, click **Add plugin**, and enter
 dsh-packycode-api
 ```
 
-Choose the **official** install source, then click **Install**. To pin a version, enter `dsh-packycode-api@1.1.6`.
+Choose the **official** install source, then click **Install**. To pin a version, enter `dsh-packycode-api@1.1.7`.
 
-Then **manually restart the desktop application**. Refreshing the page does not reload the plugin inside the Host process.
+A **first install requires no DSH restart**: open **Settings → PackyCode** and add a key immediately. When updating an already loaded older version, follow the restart guidance in the **Plugin version** card.
 
 ### 2. Add a key
 
@@ -64,7 +64,7 @@ Choose a model from the `PackyCode` group. `deepseek-flash`, `gpt-6.1-sol`, `gpt
 
 The **Plugins** page shows the installed state and version, and is also where you enable, disable, or uninstall.
 
-**For non-desktop profiles only:** `dsh plugin --profile <name> add dsh-packycode-api@1.1.6`. Do not use it for `desktop` — the CLI refuses it (`profile "desktop" is managed exclusively by the Electron application`).
+**For non-desktop profiles only:** `dsh plugin --profile <name> add dsh-packycode-api@1.1.7`. Do not use it for `desktop` — the CLI refuses it (`profile "desktop" is managed exclusively by the Electron application`).
 
 A local checkout can be linked with `dsh plugin --profile <name> add link:/path/to/dsh-packycode-api`.
 

package/README.md

@@ -49,9 +49,9 @@
 dsh-packycode-api
 ```
 
-在**安装源**中选择**官方源**，然后点击**安装**。需要固定版本时填入 `dsh-packycode-api@1.1.6`。
+在**安装源**中选择**官方源**，然后点击**安装**。需要固定版本时填入 `dsh-packycode-api@1.1.7`。
 
-完成后**手动重启桌面应用**。仅刷新页面不会重新加载 Host 里的插件。
+首次安装后**无需重启 DSH**，可直接打开**设置 → PackyCode** 添加 Key。更新已加载的旧版时，按「插件版本」卡片的重启提示操作。
 
 ### 2. 添加 Key
 
@@ -68,7 +68,7 @@ dsh-packycode-api
 
 桌面应用的**插件**页可以看到已安装状态与版本，也可以在那里启用、停用或卸载。
 
-**仅用于非 desktop profile：** `dsh plugin --profile <name> add dsh-packycode-api@1.1.6`。不要对 `desktop` 使用它 —— CLI 会直接拒绝（`profile "desktop" is managed exclusively by the Electron application`）。
+**仅用于非 desktop profile：** `dsh plugin --profile <name> add dsh-packycode-api@1.1.7`。不要对 `desktop` 使用它 —— CLI 会直接拒绝（`profile "desktop" is managed exclusively by the Electron application`）。
 
 本地开发可以用绝对路径：`dsh plugin --profile <name> add link:/path/to/dsh-packycode-api`。
 

package/cordis.patch.yml

@@ -5,19 +5,3 @@
 - insert:
     - id: packycode-api
       name: 'dsh-packycode-api'
-
-# Connection registers a plugin's RPC channel through `owner.webServer`, where
-# the owner is the Connection row's own fiber — not the caller's. The shipped
-# dsh-web-app row injects `webRuntime` alone, so that read is refused with
-# `cannot get property "webServer" without inject`, the channel never reaches
-# the web server, and the browser's calls answer HTTP 405 while the boot log
-# stays clean.
-#
-# An entry patch replaces the whole inject list, so name every service that
-# fiber actually touches: `credentials` is the module's own inject, `webRuntime`
-# carries the row's `trustedHosts: !!js ctx.webRuntime.trustedHosts`, and
-# `webServer` is what channel registration reads. The name guard leaves a
-# replacement Connection implementation untouched.
-- id: connection
-  name: '@deepseek-ai/dsh-client-connection'
-  inject: [credentials, webRuntime, webServer]

package/lib/index.js

@@ -6915,15 +6915,16 @@ function apply(ctx, config) {
 		modelSelection
 	});
 	/**
-	* Connection registers a channel through `owner.webServer`, read on its own
-	* row's fiber — which is why this plugin ships the `connection` inject patch
-	* in `cordis.patch.yml`. Without that service the read is refused, the
-	* channel never reaches the web server, and the browser answers HTTP 405
-	* while the boot log stays clean. A profile with neither service (a headless
-	* run) simply never runs this callback.
+	* The shipped Connection getter retains its own service context, whose row
+	* need not inject webServer. Register with our injected context explicitly:
+	* a first hot install then mounts the channel without rebuilding Connection.
+	* The native registry still owns admission and the wire protocol. Its
+	* explicit-owner entry is internal, so retain the public RPC contract for
+	* other Connection implementations. A headless profile can omit this scope.
 	*/
 	ctx.inject(["connection", "webServer"], (connectionCtx) => {
-		ctx.effect(() => connectionCtx.connection.rpc.handle(CHANNEL, handler), "packycode-api: loopback account RPC");
+		const service = connectionCtx.connection;
+		connectionCtx.effect(() => typeof service.register === "function" ? service.register(connectionCtx, CHANNEL, handler) : service.rpc.handle(CHANNEL, handler), "packycode-api: loopback account RPC");
 	});
 	ctx.inject(["tools"], (toolsCtx) => {
 		ctx.effect(() => toolsCtx.tools.register(createClaudeCodeTool({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-packycode-api",
-  "version": "1.1.6",
+  "version": "1.1.7",
   "description": "Use a PackyCode (PackyAPI) API key in DeepSeek Harness through a built-in multi-protocol model route with key rotation and balance display",
   "type": "module",
   "main": "./lib/index.js",
@@ -82,13 +82,18 @@
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/dsh-brand": "0.1.5-rc.3",
+    "@deepseek-ai/dsh-client-connection": "0.1.5-rc.3",
     "@deepseek-ai/dsh-credentials": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-invariants": "0.1.5-rc.3",
     "@deepseek-ai/dsh-llm": "0.1.5-rc.2",
     "@deepseek-ai/dsh-llm-pi-ai": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-scope": "0.1.5-rc.3",
     "@deepseek-ai/dsh-settings": "0.1.5-rc.2",
     "@deepseek-ai/dsh-tools": "0.1.5-rc.2",
     "@deepseek-ai/schemastery": "3.18.4",
     "@earendil-works/pi-ai": "0.85.1",
+    "packycode-host-v020-fixture": "file:tests/fixtures/host-v020",
     "react": "18.3.1",
     "tsdown": "0.22.2",
     "yaml": "2.9.1"