dsh-plugin-marketplace 0.3.4 → 0.3.5

package/README.md

@@ -22,13 +22,12 @@ from the settings page — no terminal needed.
 - Zero client dependencies (React only), no build step — hand-written
   ModuleLoader bundle
 
-## Compatibility (v0.3.4)
+## Compatibility (v0.3.5)
 
-Verified in a DSH `0.1.5-rc.3` (`next`) disposable Web profile; DSH
-`0.1.5-rc.2` remains `latest`. The rc.3 host currently references an
-unpublished `dsh-client-ui-sidebar-documentpreview@0.1.5-rc.3`, so the smoke
-profile temporarily used that unrelated UI package at rc.2. A clean rc.3
-installation is blocked upstream. Alpha releases remain `unknown`.
+Targets DSH `0.1.7-rc.1` (`next`); npm `latest` is `0.1.5-rc.3`.
+The host now stores live plugin settings in the Profile patch and the browser
+uses `configForms`. This version was checked in a disposable Web profile.
+Older hosts require an older plugin release; alpha releases remain `unknown`.
 
 ## Install
 
@@ -58,15 +57,8 @@ Manual mount in `$DSH_HOME/profiles/web/cordis.patch.yml`:
 Then restart `dsh web` (new client plugins require a process restart to be
 scanned into the browser roster) and open **Settings → Plugin Marketplace**.
 
-DSH `0.1.0-rc.7` and newer expose every registered settings namespace, so the
-marketplace works without patching official files. Version 0.2.8 and newer
-therefore require DSH `0.1.0-rc.7` or newer. DSH `0.1.0-rc.6` users must pin
-`dsh-plugin-marketplace@0.2.6`, the last release carrying the legacy
-settings-allowlist compatibility patch.
-
-DSH `0.1.2-rc.1` removed the client-side `connection.api` (the legacy settings
-RPC face); version 0.3.1 therefore writes through the bound `settingsScope`'s
-own `mutate` (hosts older than `0.1.2-rc.1` still use the legacy channel).
+Version 0.3.5 uses DSH's `configForms` client service and Profile patch
+settings. Use an older plugin release with older DSH hosts.
 Note: when dsh web is opened from a non-loopback origin (a LAN IP, say), DSH
 keeps settings writes process-local, so install / AI-explain requests never
 reach the host.

package/README.zh.md

@@ -16,12 +16,11 @@
 - 基于 GitHub 公开搜索 API（浏览器 CORS 直连，无需密钥；未认证限流 60 次/小时）
 - 零客户端依赖（只用 React），无构建步骤 —— 手写 ModuleLoader bundle
 
-## 兼容性（v0.3.4）
+## 兼容性（v0.3.5）
 
-已在 DSH `0.1.5-rc.3`（`next`）的一次性 Web Profile 中验证；`0.1.5-rc.2`
-仍是 `latest`。rc.3 宿主目前引用尚未发布的
-`dsh-client-ui-sidebar-documentpreview@0.1.5-rc.3`，烟测仅将这一无关的 UI
-包临时回退为 rc.2；rc.3 原样安装仍受上游阻塞。alpha 版本继续标记 `unknown`。
+适配 DSH `0.1.7-rc.1`（npm `next`）；npm `latest` 是 `0.1.5-rc.3`。
+新版使用 Profile patch 配置与客户端 `configForms`，已在一次性 Web Profile 验证。
+旧宿主请使用插件旧版；alpha 版本继续标记 `unknown`。
 
 ## 安装
 

package/client.js

@@ -52,7 +52,7 @@ window.__ModuleLoader__.load({
 
     // ── locale ────────────────────────────────────────────────────────────
     var NS = "marketplace";
-    var inject = ["slots", "locale", "settingsScope", "connection"];
+    var inject = ["slots", "locale", "configForms", "connection"];
     var zh = {
       nav: "插件市场",
       search: "搜索插件（关键词或留空浏览全部）…",
@@ -441,7 +441,7 @@ window.__ModuleLoader__.load({
     function apply(ctx) {
       var t = ctx.locale.bind(NS);
       ctx.effect(function () { return ctx.locale.register(NS, { zh: zh, en: en }); }, "dsh-plugin-marketplace: dictionaries");
-      var scope = ctx.settingsScope.bind({ namespace: "plugin-marketplace" });
+      var scope = ctx.configForms.get("plugin-marketplace");
       // dsh 0.1.2-rc.1 dropped connection.api; only older hosts still carry
       // the raw settings face there. writeField picks whichever exists.
       var api = (ctx.connection && ctx.connection.api) ? ctx.connection.api : null;

package/index.js

@@ -32,10 +32,11 @@ const Config = z.object({
     /** client-set timestamp; host dedups on it. */
     ts: z.number().default(0),
   }),
-  installState: z.object({
-    status: z.string().default("idle"), // idle | running | ok | error
-    message: z.string().default(""),
-    ts: z.number().default(0),
+  installState: z.object({
+    status: z.string().default("idle"), // idle | running | ok | error
+    message: z.string().default(""),
+    pkg: z.string().default(""),
+    ts: z.number().default(0),
   }),
   /** AI-explain request (client writes repo/desc/readme, host answers). */
   aiExplain: z.object({
@@ -51,13 +52,13 @@ const Config = z.object({
     repo: z.string().default(""),
     ts: z.number().default(0),
   }),
-});
+}).volatile();
 
 /** npm package-name shape (scope/name, no spaces, no path chars). */
 const PKG_NAME = /^@?[a-z0-9][a-z0-9-._]*(?:\/[a-z0-9][a-z0-9-._]*)?$/;
 
-function apply(ctx, config) {
-  let sourceGetter = null;
+function apply(ctx, config) {
+  const sourceGetter = () => typeof config.get === "function" ? config.get() : config;
   let lastTs = 0;
   let lastExplainTs = 0;
 
@@ -69,27 +70,23 @@ function apply(ctx, config) {
   // `installSettingsSection` export (the provider now lives at ctx.settings).
   // Inline the same logic via ctx.inject(["settings"]) — works on both
   // 0.1.1 (module export wrapper) and 0.1.2 (ctx.settings) hosts.
-  ctx.inject(["settings"], (sctx) => {
-    const scope = sctx.settings.register(NS, Config, { base: config });
-    sourceGetter = () => scope.get();
-    sctx.effect(() => () => {
-      sourceGetter = null;
-    });
-    // Mirror the old installSettingsSection contract: fire once at attach so a
-    // request persisted across restarts is consumed, then on every write.
-    void maybeRunInstall();
-    void maybeRunExplain();
-    scope.watch(() => {
-      void maybeRunInstall();
-      void maybeRunExplain();
-    });
-  });
+  // DSH 0.1.7 stores live plugin fields in the profile patch. Config is a
+  // volatile proxy, and the settings service emits after a committed edit.
+  ctx.on("settings/document-updated", (id) => {
+    if (id !== NS) return;
+    void maybeRunInstall();
+    void maybeRunExplain();
+  });
+  queueMicrotask(() => {
+    void maybeRunInstall();
+    void maybeRunExplain();
+  });
 
   // DSH 0.1.0-rc.7+ exposes registered settings namespaces natively, allowing
   // the browser client to write install requests without modifying host files.
   /** Resolved current config (settings layer over the entry). */
   function current() {
-    return sourceGetter ? sourceGetter() : config;
+    return sourceGetter();
   }
 
   /** Write the install-state report (and clear the consumed request). */

package/package.json

@@ -1,71 +1,75 @@
-{
-    "name": "dsh-plugin-marketplace",
-    "version": "0.3.4",
-    "description": "DeepSeek Harness Web UI 内置插件市场：在设置页直接浏览 github.com/topics/dsh-plugin，支持搜索、按 Star 排序、查看安装方式。",
-    "type": "module",
-    "main": "index.js",
-    "exports": {
-        ".": "./index.js",
-        "./client": "./client.js",
-        "./package.json": "./package.json"
-    },
-    "dsh": {
-        "bundle": {
-            "patch": "./cordis.patch.yml"
-        },
+{
+    "name": "dsh-plugin-marketplace",
+    "version": "0.3.5",
+    "description": "DeepSeek Harness Web UI 内置插件市场：在设置页直接浏览 github.com/topics/dsh-plugin，支持搜索、按 Star 排序、查看安装方式。",
+    "type": "module",
+    "main": "index.js",
+    "exports": {
+        ".": "./index.js",
+        "./client": "./client.js",
+        "./package.json": "./package.json"
+    },
+    "dsh": {
+        "bundle": {
+            "patch": "./cordis.patch.yml"
+        },
         "client": {
             "platform": "web"
         },
         "compatibility": {
-            "dsh": ">=0.1.0-rc.7 <0.2.0",
+            "dsh": ">=0.1.7-rc.1 <0.2.0",
             "dshReleases": {
-                "0.1.5-rc.2": "compatible",
-                "0.1.5-rc.3": "compatible",
+                "0.1.5-rc.2": "incompatible",
+                "0.1.5-rc.3": "incompatible",
                 "0.1.6-alpha.1": "unknown",
                 "0.1.6-alpha.2": "unknown",
-                "0.1.7-alpha.1": "unknown"
+                "0.1.7-alpha.1": "unknown",
+                "0.1.7-alpha.2": "unknown",
+                "0.1.7-rc.1": "compatible"
             },
             "node": ">=20.18",
-            "profiles": ["web"]
+            "profiles": [
+                "web"
+            ]
         }
-    },
-    "scripts": {
-        "test": "node --test tests/settings-write-verify.test.mjs"
-    },
-    "files": [
-        "index.js",
-        "client.js",
-        "cordis.patch.yml",
-        "README.md",
-        "README.zh.md",
-        "LICENSE",
-        "vendor"
-    ],
-    "homepage": "https://github.com/Scorp1o117/dsh-plugin-marketplace",
-    "keywords": [
-        "dsh",
-        "dsh-plugin",
-        "deepseek-harness",
-        "marketplace",
-        "web-ui"
-    ],
-    "license": "MIT",
-    "engines": {
-        "node": ">=20.18"
-    },
-    "repository": {
-        "type": "git",
-        "url": "git+https://github.com/Scorp1o117/dsh-plugin-marketplace.git"
-    },
-    "bugs": {
-        "url": "https://github.com/Scorp1o117/dsh-plugin-marketplace/issues"
-    },
-    "peerDependencies": {
-        "react": "^18.2.0",
-        "@deepseek-ai/dsh-settings": "^0.1.0-rc.7 || ^0.1.1-rc.1 || ^0.1.2-rc.1 || ^0.1.5-rc.1",
-        "@deepseek-ai/dsh-llm": "^0.1.0-rc.7 || ^0.1.1-rc.1 || ^0.1.2-rc.1 || ^0.1.5-rc.1"
-    },
-    "dependencies": {
-        "@deepseek-ai/schemastery": "^3.18.1"
-    }
-}
+    },
+    "scripts": {
+        "test": "node --test tests/settings-write-verify.test.mjs"
+    },
+    "files": [
+        "index.js",
+        "client.js",
+        "cordis.patch.yml",
+        "README.md",
+        "README.zh.md",
+        "LICENSE",
+        "vendor"
+    ],
+    "homepage": "https://github.com/Scorp1o117/dsh-plugin-marketplace",
+    "keywords": [
+        "dsh",
+        "dsh-plugin",
+        "deepseek-harness",
+        "marketplace",
+        "web-ui"
+    ],
+    "license": "MIT",
+    "engines": {
+        "node": ">=20.18"
+    },
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/Scorp1o117/dsh-plugin-marketplace.git"
+    },
+    "bugs": {
+        "url": "https://github.com/Scorp1o117/dsh-plugin-marketplace/issues"
+    },
+    "peerDependencies": {
+        "react": "^18.2.0",
+        "@deepseek-ai/dsh-settings": "^0.1.7-rc.1",
+        "@deepseek-ai/dsh-llm": "^0.1.7-rc.1"
+    },
+    "dependencies": {
+        "@deepseek-ai/schemastery": "^3.18.4"
+    }
+}