dsh-plugin-marketplace 0.5.1 → 0.5.2

package/README.md

@@ -1,9 +1,9 @@
 # dsh-plugin-marketplace
 
-Browse GitHub's dsh-plugin topic and manage plugins in the active DSH Web or Desktop profile. Version 0.5.1 requires DSH 0.2.0-rc.2 or later 0.2.x.
+Browse GitHub's dsh-plugin topic and manage plugins in the active DSH Web or Desktop profile. Version 0.5.2 requires DSH 0.2.0-rc.2 or later 0.2.x.
 
 ```sh
-dsh plugin --profile desktop add dsh-plugin-marketplace@0.5.1
+dsh plugin --profile desktop add dsh-plugin-marketplace@0.5.2
 ```
 
 Use the Desktop-provided dsh command (Application → Manage dsh Command); use --profile web for Web. Restart DSH, then open **Plugins → Installed → dsh-plugin-marketplace**.

package/README.zh.md

@@ -1,9 +1,9 @@
 # dsh-plugin-marketplace
 
-浏览 GitHub 的 dsh-plugin 插件，同时管理当前 DSH Web / Desktop Profile 的插件。0.5.1 需要 DSH 0.2.0-rc.2 或后续 0.2.x。
+浏览 GitHub 的 dsh-plugin 插件，同时管理当前 DSH Web / Desktop Profile 的插件。0.5.2 需要 DSH 0.2.0-rc.2 或后续 0.2.x。
 
 ```sh
-dsh plugin --profile desktop add dsh-plugin-marketplace@0.5.1
+dsh plugin --profile desktop add dsh-plugin-marketplace@0.5.2
 ```
 
 使用 Desktop 提供的 dsh 命令（应用 → 管理 dsh 命令）；Web 改用 --profile web。重启后打开 **插件 → 已安装 → dsh-plugin-marketplace** 配置页。

package/VERIFICATION.md

@@ -1,9 +1,11 @@
-# v0.5.1 validation — 2026-10-12
+# v0.5.2 validation — 2026-10-12
 
-- Full npm test passed (25 tests), including pinned-version update arguments, structural YAML cleanup, failed operations, built-in protection, HMR and profile serialization.
+- Full npm test passed (26 tests), including pinned-version update arguments, structural YAML cleanup, failed operations, built-in protection, HMR and profile serialization.
 - npm pack contents include management.js, runtime.js, client.js, locale metadata and bundle patch.
 - Installed tarballs through the real Desktop bundled CLI in an isolated profile and started them using the installed Desktop 0.2.0-rc.2 runtime.
 - Settings-channel refresh, invalid-package rejection, installation, update and uninstall of dsh-motion-ui all reached the expected real installed state.
 - Browser showed the active Desktop inventory, explicit npm-name input, update/uninstall controls and protected built-in bundles.
 
 - Automated Desktop package management closes stdin and sets CI mode. A previously hanging Soul installation completed successfully in 5 seconds with the corrected subprocess options.
+
+- Subprocess capture uses null stdin and a bounded output drain after the official CLI exits. The six-plugin suite installation completed through the real Host request channel with the corrected packaged backend.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-plugin-marketplace",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "Discover, install, update and uninstall plugins in the active DSH Desktop or Web profile.",
   "type": "module",
   "main": "index.js",
@@ -40,7 +40,7 @@
     }
   },
   "scripts": {
-    "test": "node --test tests/settings-write-verify.test.mjs tests/runtime.test.mjs && node --test tests/plugin-page.test.mjs && node --test tests/locale.test.mjs && node --test tests/management.test.mjs"
+    "test": "node --test tests/settings-write-verify.test.mjs tests/runtime.test.mjs && node --test tests/plugin-page.test.mjs && node --test tests/locale.test.mjs && node --test tests/management.test.mjs && node --test tests/process-drain.test.mjs"
   },
   "files": [
     "locale",

package/runtime.js

@@ -1,4 +1,4 @@
-import { execFile } from "node:child_process";
+import { spawn } from "node:child_process";
 import { existsSync } from "node:fs";
 import { createRequire } from "node:module";
 import { basename, dirname, join } from "node:path";
@@ -45,12 +45,12 @@ function cliEntry(runtime = process, exists = existsSync) {
   return candidates.find((candidate) => exists(candidate));
 }
 
-function runInstall(pkg, profile, runtime = process, execute = execFile, exists = existsSync) {
+function runInstall(pkg, profile, runtime = process, execute = executeCaptured, exists = existsSync) {
   return runPlugin(["add", pkg], profile, runtime, execute, exists);
 }
 
 /** Execute package-manager arguments through the active host's official CLI. */
-function runPlugin(command, profile, runtime = process, execute = execFile, exists = existsSync) {
+function runPlugin(command, profile, runtime = process, execute = executeCaptured, exists = existsSync) {
   const bin = cliEntry(runtime, exists);
   if (!bin) return Promise.resolve({ code: 1, stdout: "", stderr: "cannot locate the dsh CLI entry" });
   const args = [...(runtime.versions?.electron ? ["--expose-internals"] : []),
@@ -72,6 +72,34 @@ function runPlugin(command, profile, runtime = process, execute = execFile, exis
   });
 }
 
+/** Capture diagnostics while giving pnpm an actual null input descriptor. */
+function executeCaptured(executable, args, options, callback) {
+  const child = spawn(executable, args, { env: options.env, windowsHide: true, stdio: ["ignore", "pipe", "pipe"] });
+  let stdout = "", stderr = "", failure, completed = false, drainTimer;
+  const timer = setTimeout(() => { failure = new Error("package operation timed out"); child.kill(); }, options.timeout);
+  function finish(error) {
+    if (completed) return;
+    completed = true; clearTimeout(timer); clearTimeout(drainTimer); callback(error, stdout, stderr);
+  }
+  const collect = (kind, data) => {
+    if (kind === "stdout") stdout += data; else stderr += data;
+    if (Buffer.byteLength(stdout) + Buffer.byteLength(stderr) > options.maxBuffer) {
+      failure = new Error("package operation output exceeded the capture limit"); child.kill();
+    }
+  };
+  child.stdout.on("data", data => collect("stdout", data));
+  child.stderr.on("data", data => collect("stderr", data));
+  child.on("error", finish);
+  const outcome = (code, signal) => failure || (code === 0 ? null : Object.assign(new Error(`package process exited (${signal || code})`), { code: code || 1 }));
+  // Descendants can retain inherited output handles after the official CLI
+  // exits. Bound the drain using its exit status; callers verify installed files.
+  child.on("exit", (code, signal) => { drainTimer = setTimeout(() => {
+    child.stdout.destroy(); child.stderr.destroy(); finish(outcome(code, signal));
+  }, 2000); });
+  child.on("close", (code, signal) => finish(outcome(code, signal)));
+  return child;
+}
+
 /** Let the current HMR transaction finish, and retry transient write refusals. */
 async function writeState(settings, ns, patch, wait = (ms) => new Promise((resolve) => setTimeout(resolve, ms))) {
   if (!settings) throw new Error("settings service unavailable");