dsh-plugin 1.1.1 → 1.1.2

package/lib/http/routes.js

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Local HTTP routes exposing real installs to the in-app Plugin Hub UI.
  * The client fetches the same-origin `/dsh-plugin-hub/*` endpoints; the
  * install handler validates the target, then spawns the official dsh CLI
@@ -8,7 +12,7 @@ import { readFileSync } from 'node:fs';
 import { homedir, release } from 'node:os';
 import { dirname, join, resolve } from 'node:path';
 import { spawn } from 'node:child_process';
-import { activeTask, cancelTask, dumpLoaderEntries, getTask, githubTarget, hasQueuedTarget, listPendingRestarts, readProfileArg, startPluginMutation, validPackageName } from '../services/install.js';
+import { activeTask, cancelTask, dumpLoaderEntries, getTask, githubRepoOf, githubTarget, hasQueuedTarget, listPendingRestarts, readProfileArg, startPluginMutation, validPackageName } from '../services/install.js';
 import { recordInstalledVersion, recordResolvedNpmPackage, readInstalledVersions, removeInstalledVersion } from '../services/installed-versions.js';
 import { resolveNpmPackage } from '../services/npm-resolve.js';
 import { preflightTarget } from '../services/preflight.js';
@@ -64,11 +68,14 @@ function hostEnv(profile) {
         dshHome: process.env.DSH_HOME ?? join(homedir(), '.dsh'),
     };
 }
-/** Match an install target (`github:<owner>/<repo>`) against the installed table; returns the package name when already installed. */
+/** Match a GitHub install target against the installed table; returns the package name when already installed. */
 function installedByRepo(installed, target) {
-    const needle = target.toLowerCase();
+    const repo = githubRepoOf(target);
+    if (repo === null)
+        return null;
+    const needle = repo.toLowerCase();
     for (const [name, spec] of Object.entries(installed)) {
-        if (spec.toLowerCase().includes(needle))
+        if (githubRepoOf(spec)?.toLowerCase() === needle)
             return name;
     }
     return null;
@@ -164,7 +171,7 @@ export function mountPluginHubRoutes(webServer, profile, loader) {
                     const displayRepo = typeof body === 'object' && body !== null && typeof body.display === 'string'
                         ? body.display.trim()
                         : rawRepo;
-                    // 目标语法两态：owner/repo → github 源（走装前预检）；npm 包名（@scope/name 或 name）→ 信任 registry 直接安装
+                    // 目标语法两态：owner/repo → 显式 HTTPS Git 源（走装前预检）；npm 包名（@scope/name 或 name）→ 信任 registry 直接安装
                     const repoTarget = githubTarget(rawRepo);
                     let target = repoTarget ?? (repoTarget === null && validPackageName(rawRepo) ? rawRepo : null);
                     if (target === null) {
@@ -195,7 +202,7 @@ export function mountPluginHubRoutes(webServer, profile, loader) {
                     // 重复安装防护：非更新请求命中已安装目标时直接拒绝，不重复跑 CLI
                     // （否则 CLI 会因「已存在」失败，且用户看到的是莫名其妙的报错）；
                     // 更新请求（mode: 'update'）放行，CLI 的 add 对已存在依赖是 pnpm 原位覆盖重装。
-                    // 命中判定双通道：npm 包名按 dependencies 键直接命中，github: 目标按 spec 值匹配。
+                    // 命中判定双通道：npm 包名按 dependencies 键直接命中，GitHub 目标按仓库身份匹配。
                     const installed = readInstalled(profile);
                     const already = installedByRepo(installed, target) ?? (installed[target] !== undefined ? target : null);
                     if (already !== null && mode !== 'update') {
@@ -236,7 +243,7 @@ export function mountPluginHubRoutes(webServer, profile, loader) {
                         profile,
                         target,
                         // npm 安装时 target 是包名：displayTarget 固定展示仓库名，待重启行/前端恢复不受通道变化影响
-                        displayTarget: githubTarget(displayRepo) ?? undefined,
+                        displayTarget: githubRepoOf(displayRepo) ?? undefined,
                         // 已尝试的安装方式（npm 反查）：实际执行命令由 spawn 时追加，失败 issue 一并展示
                         attempts,
                         timeoutMs: COMMAND_TIMEOUT_MS,
@@ -283,7 +290,7 @@ export function mountPluginHubRoutes(webServer, profile, loader) {
                         profile,
                         target: name,
                         // 卸载的 mutation 目标是 npm 包名；待重启行要显示 owner/repo（与安装行一致），非法/缺失时回退包名
-                        displayTarget: githubTarget(repo) ?? undefined,
+                        displayTarget: githubRepoOf(repo) ?? undefined,
                         // 运行中 loader：卸载成功后主动移除条目，立即生效、无需重启
                         uninstallLoader: loader,
                         timeoutMs: COMMAND_TIMEOUT_MS,

package/lib/index.js

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * dsh-plugin host entry: mounts the Plugin Hub HTTP routes once the host
  * web server service is available. The browser bundle (src/client) talks to
  * these same-origin routes to perform real installs from inside the app.

package/lib/services/install-types.js

@@ -1,5 +1,11 @@
-/** 安装/卸载运行时的公共类型与常量（无依赖，供各服务模块复用）。 */
-/** Grammar of an accepted `github:<owner>/<repo>` install target. */
+/**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
+ * 安装/卸载运行时的公共类型与常量（无依赖，供各服务模块复用）。
+ */
+/** Grammar of a catalog GitHub repository identity (`owner/repo`). */
 export const REPO_RE = /^[A-Za-z0-9._-]+\/[A-Za-z0-9._-]+$/;
 /** Grammar of an npm package name (used for uninstall targets). */
 export const PACKAGE_RE = /^(?:@[a-z0-9._-]+\/)?[A-Za-z0-9._-]+$/;

package/lib/services/install.js

@@ -1,4 +1,4 @@
 export { addPendingRestart, clearPendingRestart, listPendingRestarts } from './pending-restart.js';
 export { dumpLoaderEntries, removeLoadedEntry } from './loader.js';
-export { addAllowBuildsKey, githubTarget, parseAllowBuildsKey, readProfileArg, validPackageName } from './profile.js';
+export { addAllowBuildsKey, githubRepoOf, githubTarget, parseAllowBuildsKey, readProfileArg, validPackageName } from './profile.js';
 export { activeTask, cancelTask, getTask, hasQueuedTarget, hasRunningTask, runPluginMutation, startPluginMutation } from './task-queue.js';

package/lib/services/installed-versions.js

@@ -1,8 +1,12 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Installed-plugin version tracking.
  *
  * The installed table (`readInstalled` in routes.ts) only knows the manifest
- * spec of each dependency (`github:<owner>/<repo>`), which carries no version.
+ * spec of each Git dependency, which carries no version.
  * To let the Plugin Hub tell "an update is available", we record the catalog
  * signal present at install time into a small per-profile JSON file, then
  * compare it against the catalog's current signal later.

package/lib/services/loader.js

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * 运行中 loader 的读取与停用：卸载成功后对匹配条目做 live-disable，
  * 使卸载立即生效（刷新页面不再加载已卸载的 client bundle，也无需重启）。
  */

package/lib/services/npm-resolve.js

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * npm 包反查：git 分发不完整（缺构建产物/子模块）导致安装失败时，用 npm
  * registry 的搜索接口按 repository 地址反查该仓库对应的官方 npm 包。
  *

package/lib/services/pending-restart.js

@@ -2,7 +2,7 @@ const pendingRestarts = [];
 /**
  * 登记一条待重启记录（同一目标去重）。
  * - 卸载：目标刚装完未重启（已有待重启记录）→ 宿主从未加载过它，卸完磁盘已干净、
- *   loader 无残留，无需再提醒重启，直接移除该条；否则（此前已被宿主加载过）登记「卸载后待重启清理」。
+ *   loader 无残留，无需再提醒重启，直接移除该条；否则（已被宿主加载过）登记「卸载后待重启清理」。
  * - 安装：已有记录则刷新为安装语义（如卸载后未重启又重装），否则新登记。
  */
 export function addPendingRestart(target, kind) {

package/lib/services/preflight.js

@@ -1,5 +1,9 @@
 /**
- * 安装前预检：对 `github:` 源的插件，检查其分发（codeload tarball）里是否
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
+ * 安装前预检：对 GitHub 源的插件，检查其分发（codeload tarball）里是否
  * 真的包含 package.json 声明的入口文件（main / exports["."].default）。
  * git 分发常不提交构建产物（lib/ 等），这类残缺包装完会让宿主重启加载插件树时
  * ERR_MODULE_NOT_FOUND 直接崩溃 —— 预检在动手安装前就把它们拦下，避免白装一次。
@@ -13,12 +17,13 @@ import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { pipeline } from 'node:stream/promises';
 import { promisify } from 'node:util';
+import { githubRepoOf } from './profile.js';
 const execFileAsync = promisify(execFile);
 export async function preflightTarget(target) {
-    const m = /^github:([^/]+)\/([^/]+)$/.exec(target);
-    if (m === null)
+    const source = githubRepoOf(target);
+    if (source === null)
         return { ok: true, missing: null };
-    const [, owner, repo] = m;
+    const [owner, repo] = source.split('/');
     let commit = '';
     try {
         const { stdout } = await execFileAsync('git', ['ls-remote', `https://github.com/${owner}/${repo}.git`, 'HEAD']);

package/lib/services/profile.js

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * 宿主 profile 与目标校验工具：解析当前 profile、目录定位、安装目标语法校验，
  * 以及 pnpm allowBuilds 白名单的写入（失败恢复路径）。
  */
@@ -16,11 +20,34 @@ export function readProfileArg(fallback = 'web') {
 export function profileDirectory(profile) {
     return join(process.env.DSH_HOME ?? join(homedir(), '.dsh'), 'profiles', profile);
 }
-/** Build a safe `github:<owner>/<repo>` target, or null when the repo is unsafe. */
+/** Build a safe explicit HTTPS Git target, or null when the repo is unsafe. */
 export function githubTarget(repo) {
     if (typeof repo !== 'string' || !REPO_RE.test(repo))
         return null;
-    return `github:${repo}`;
+    return `git+https://github.com/${repo}.git`;
+}
+/** Extract an owner/repo identity from a catalog value or an installed Git spec. */
+export function githubRepoOf(value) {
+    if (typeof value !== 'string')
+        return null;
+    const input = value.trim();
+    if (REPO_RE.test(input))
+        return input;
+    const patterns = [
+        /^github:([^/]+)\/([^/]+)$/i,
+        /^(?:git\+)?https:\/\/github\.com\/([^/]+)\/([^/]+?)(?:\.git)?(?:[?#].*)?$/i,
+        /^(?:git\+)?ssh:\/\/(?:git@)?github\.com\/([^/]+)\/([^/]+?)(?:\.git)?(?:[?#].*)?$/i,
+        /^git@github\.com:([^/]+)\/([^/]+?)(?:\.git)?(?:[?#].*)?$/i,
+    ];
+    for (const pattern of patterns) {
+        const match = pattern.exec(input);
+        if (match === null)
+            continue;
+        const repo = `${match[1]}/${match[2]}`;
+        if (REPO_RE.test(repo))
+            return repo;
+    }
+    return null;
 }
 /** Validate an npm package name (uninstall target grammar). */
 export function validPackageName(name) {
@@ -28,7 +55,7 @@ export function validPackageName(name) {
 }
 /**
  * The exact `allowBuilds` key pnpm printed in its
- * `ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED` hint. For `github:` installs pnpm
+ * `ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED` hint. For Git installs pnpm
  * matches against `name@<resolved fetch URL>` — the URL it actually fetches,
  * e.g. `https://codeload.github.com/<owner>/<repo>/tar.gz/<commit>` — not the
  * `git+ssh://`/branch spec. A bare name or a `git+` spec does not match, so

package/lib/services/progress.js

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Pure progress-estimation helpers shared by the install runner.
  *
  * The dsh CLI wraps pnpm, which refreshes its `Progress: …` line in place

package/lib/services/task-queue.js

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * 后台安装/卸载任务队列：内存任务注册表 + FIFO 串行 worker + 子进程生命周期管理。
  * 每个任务一次 `dsh plugin --profile <profile> <action> <target>` 子进程，
  * 输出流式收集到任务上；卸载成功时尝试从运行中 loader 即时停用（见 loader.ts）。
@@ -10,7 +14,7 @@ import { CAPTURE_LIMIT_BYTES, MAX_TASKS, MAX_TASK_LINES } from './install-types.
 import { cleanLine, estimateProgress } from './progress.js';
 import { removeLoadedEntry } from './loader.js';
 import { addPendingRestart, clearPendingRestart } from './pending-restart.js';
-import { addAllowBuildsKey, parseAllowBuildsKey, profileDirectory } from './profile.js';
+import { addAllowBuildsKey, githubRepoOf, parseAllowBuildsKey, profileDirectory } from './profile.js';
 /** In-memory task registry, keyed by task id. */
 const tasks = new Map();
 let nextTaskId = 1;
@@ -185,7 +189,7 @@ function spawnMutation(options) {
     const { action, profile, target, timeoutMs = 5 * 60 * 1000, env, task, displayTarget, uninstallLoader } = options;
     const invocation = cliInvocation();
     const args = [...invocation.prefixArgs, 'plugin', '--profile', profile, action, target];
-    // 记录实际执行的命令（npm 通道显示包名，git 通道显示 github: 源）：失败提 Issue 时
+    // 记录实际执行的命令（npm 通道显示包名，git 通道显示 HTTPS 源）：失败提 Issue 时
     // 「已尝试的安装方式」如实展示完整命令链，作者一眼看清我们跑过什么
     const executed = `dsh plugin --profile ${profile} ${action} ${target}`;
     if (task && !task.attempts.includes(executed)) {
@@ -275,8 +279,7 @@ function spawnMutation(options) {
         child.stderr?.on('data', (chunk) => collect('stderr', chunk));
         child.once('exit', () => {
             // dsh 内部会 fork pnpm：pnpm 退出后仍攥着 stdout/stderr 管道时，
-            // close 事件永不到来（历史队列卡死根因——取消路径曾因此卡死，用整组 SIGKILL 解决；
-            // 自然失败路径没有兜底）。exit 后给 close 一段宽限，未按时触发则整组清理强制结束，
+            // close 事件不会到来。exit 后给 close 一段宽限，未按时触发则整组清理强制结束，
             // 保证任务必然进入终态、后续排队任务自动启动。
             exitWatch = setTimeout(() => {
                 if (settled)
@@ -360,8 +363,11 @@ export function verifyInstalledEntry(profile, target) {
         return { name: null, missing: null };
     }
     const deps = (profilePkg?.dependencies ?? {});
-    // target 自身是依赖名（npm 包），或通过 github: specifier 反查依赖名
-    const name = deps[target] !== undefined ? target : Object.keys(deps).find((k) => deps[k] === target);
+    // target 自身是依赖名（npm 包），或通过 Git specifier 反查依赖名
+    const targetRepo = githubRepoOf(target)?.toLowerCase();
+    const name = targetRepo !== undefined
+        ? Object.keys(deps).find((k) => githubRepoOf(deps[k])?.toLowerCase() === targetRepo)
+        : deps[target] !== undefined ? target : Object.keys(deps).find((k) => deps[k] === target);
     if (!name)
         return { name: null, missing: null };
     const pkgDir = join(profileDirectory(profile), 'node_modules', name);
@@ -428,7 +434,7 @@ export async function runPluginMutation(options) {
         // 输出解析不到时回退用目标名（插件自身构建脚本被拦的 npm 场景）。
         if (output.includes('ERR_PNPM_IGNORED_BUILDS')) {
             const keys = ignoredBuildKeys(output);
-            if (keys.length === 0 && !options.target.startsWith('github:'))
+            if (keys.length === 0 && githubRepoOf(options.target) === null)
                 keys.push(options.target);
             if (keys.length > 0) {
                 if (options.task) {

package/lib/types/index.d.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * dsh-plugin host entry: mounts the Plugin Hub HTTP routes once the host
  * web server service is available. The browser bundle (src/client) talks to
  * these same-origin routes to perform real installs from inside the app.

package/lib/types/services/install-types.d.ts

@@ -1,4 +1,10 @@
-/** 安装/卸载运行时的公共类型与常量（无依赖，供各服务模块复用）。 */
+/**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
+ * 安装/卸载运行时的公共类型与常量（无依赖，供各服务模块复用）。
+ */
 /** 一个 pnpm 安装子进程的结果快照。 */
 export interface InstallResult {
     exitCode: number | null;
@@ -9,7 +15,7 @@ export interface InstallResult {
 }
 export interface InstallTask {
     id: number;
-    /** 操作目标：`github:<owner>/<repo>`（安装）或 npm 包名（卸载），冲突/恢复时需要展示给用户 */
+    /** 操作目标：显式 HTTPS Git URL（安装）或 npm 包名（卸载），冲突/恢复时需要展示给用户 */
     target: string;
     /** 展示用目标（owner/repo）：npm 安装时 target 是包名，前端恢复用此字段显示仓库名，保持用户无感知 */
     displayTarget?: string;
@@ -52,14 +58,14 @@ export interface QueueItem {
  * 它自然清空，正好等于「重启后提醒消失」的语义，无需任何重启探测。
  */
 export interface PendingRestart {
-    /** `github:<owner>/<repo>` 安装目标（与任务一致；卸载时为展示用的 owner/repo） */
+    /** Git 安装目标（与任务一致；卸载时为展示用的 owner/repo） */
     target: string;
     /** 待重启语义：install 装完等挂载生效 / uninstall 卸完等清理 loader 残留 */
     kind: 'install' | 'uninstall';
     /** 任务完成时刻（epoch ms） */
     at: number;
 }
-/** Grammar of an accepted `github:<owner>/<repo>` install target. */
+/** Grammar of a catalog GitHub repository identity (`owner/repo`). */
 export declare const REPO_RE: RegExp;
 /** Grammar of an npm package name (used for uninstall targets). */
 export declare const PACKAGE_RE: RegExp;

package/lib/types/services/install.d.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Install runner 的统一出口：执行真实插件变更（spawn 官方 dsh CLI 子进程）。
  * 实现按职责拆分在同目录子模块，本文件只做公共 API 的 re-export，保持外部
  * import 面稳定（routes.ts / index.ts 仍从 `services/install.ts` 引入）。
@@ -14,5 +18,5 @@ export type { InstallResult, InstallTask, Invocation, PendingRestart, QueueItem
 export type { LoaderHandle } from './loader.ts';
 export { addPendingRestart, clearPendingRestart, listPendingRestarts } from './pending-restart.ts';
 export { dumpLoaderEntries, removeLoadedEntry } from './loader.ts';
-export { addAllowBuildsKey, githubTarget, parseAllowBuildsKey, readProfileArg, validPackageName } from './profile.ts';
+export { addAllowBuildsKey, githubRepoOf, githubTarget, parseAllowBuildsKey, readProfileArg, validPackageName } from './profile.ts';
 export { activeTask, cancelTask, getTask, hasQueuedTarget, hasRunningTask, runPluginMutation, startPluginMutation } from './task-queue.ts';

package/lib/types/services/loader.d.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * 运行中 loader 的读取与停用：卸载成功后对匹配条目做 live-disable，
  * 使卸载立即生效（刷新页面不再加载已卸载的 client bundle，也无需重启）。
  */

package/lib/types/services/pending-restart.d.ts

@@ -1,9 +1,15 @@
-/** 待重启列表的内存态管理（宿主进程一重启自然清空）。 */
+/**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
+ * 待重启列表的内存态管理（宿主进程一重启自然清空）。
+ */
 import type { PendingRestart } from './install-types.ts';
 /**
  * 登记一条待重启记录（同一目标去重）。
  * - 卸载：目标刚装完未重启（已有待重启记录）→ 宿主从未加载过它，卸完磁盘已干净、
- *   loader 无残留，无需再提醒重启，直接移除该条；否则（此前已被宿主加载过）登记「卸载后待重启清理」。
+ *   loader 无残留，无需再提醒重启，直接移除该条；否则（已被宿主加载过）登记「卸载后待重启清理」。
  * - 安装：已有记录则刷新为安装语义（如卸载后未重启又重装），否则新登记。
  */
 export declare function addPendingRestart(target: string, kind: 'install' | 'uninstall'): void;

package/lib/types/services/profile.d.ts

@@ -2,13 +2,15 @@
 export declare function readProfileArg(fallback?: string): string;
 /** Resolve a profile directory (`DSH_HOME` or `~/.dsh`). */
 export declare function profileDirectory(profile: string): string;
-/** Build a safe `github:<owner>/<repo>` target, or null when the repo is unsafe. */
+/** Build a safe explicit HTTPS Git target, or null when the repo is unsafe. */
 export declare function githubTarget(repo: string): string | null;
+/** Extract an owner/repo identity from a catalog value or an installed Git spec. */
+export declare function githubRepoOf(value: string): string | null;
 /** Validate an npm package name (uninstall target grammar). */
 export declare function validPackageName(name: string): boolean;
 /**
  * The exact `allowBuilds` key pnpm printed in its
- * `ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED` hint. For `github:` installs pnpm
+ * `ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED` hint. For Git installs pnpm
  * matches against `name@<resolved fetch URL>` — the URL it actually fetches,
  * e.g. `https://codeload.github.com/<owner>/<repo>/tar.gz/<commit>` — not the
  * `git+ssh://`/branch spec. A bare name or a `git+` spec does not match, so

package/lib/types/services/progress.d.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Pure progress-estimation helpers shared by the install runner.
  *
  * The dsh CLI wraps pnpm, which refreshes its `Progress: …` line in place

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-plugin",
-  "version": "1.1.1",
+  "version": "1.1.2",
   "description": "A community plugin marketplace for DeepSeek Harness, built to the official plugin spec — browse, search and install 4000+ human-curated community plugins without leaving the app. · DeepSeek Harness 社区插件市场（遵循官方开发规范）：4000+ 人工精选社区插件，每日更新。",
   "type": "module",
   "main": "lib/index.js",

package/src/client/components/AboutModal.tsx

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * 头部「关注我们」弹窗：介绍 DSH-Plugin Hub 是干什么的 + 用户反馈群二维码。
  * 内容以 Markdown 形式由 dsh-update Worker 的 /about 接口下发（key = hub:about），
  * 作者想怎么写就怎么写、随写随推，客户端只负责渲染 —— 非写死。

package/src/client/components/CatalogControls.tsx

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Toolbar above the list: search input + sort dropdown + installed / not
  * installed filter buttons + the notifications entry. All buttons share the
  * same size (24px high, like the notification entry button).

package/src/client/components/CatalogHeader.tsx

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Section header: brand title row (H1 + open-site button) + tagline, followed
  * by the purple ad banner that promotes the catalog stats.
  */

package/src/client/components/CatalogList.tsx

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Catalog list: the scrollable container with the loading / failed / empty
  * states, the plugin cards, and the count footer. Resets scroll position when
  * the category or install-status filter changes so the replaced content is

package/src/client/components/CategoryTabs.tsx

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Category tabs: an "all" chip followed by one chip per catalog category.
  * The "all" chip carries the total plugin count; the per-category chips
  * carry no counts so their widths stay uniform.

package/src/client/components/Dropdown.tsx

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Custom dropdown (native <select> replacement).
  *
  * macOS/浏览器原生下拉无法跟随宿主主题，这里自绘：触发器按钮 + 绝对定位面板，

package/src/client/components/HubUpdateModal.tsx

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Hub 版本信息 / 自我更新说明弹窗：
  *  - 有更新（hasUpdate=true）：标题「有新版本」，展示新版本号、发布时间与 Worker 下发的
  *    Markdown 变更记录（renderMarkdown 渲染，双语言按界面语言取 {zh,en} 对象），

package/src/client/components/NotificationsModal.tsx

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Notification-center dialog: a persistent log of every settled install /
  * remove task — successes and failures alike.
  *

package/src/client/components/PluginCard.tsx

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * One plugin card in the catalog list: name/category/verified badge,
  * description + topics, star/fork/date stats, and the detail/install/
  * uninstall actions.
@@ -65,7 +69,7 @@ export function PluginCard({ plugin: p, copied, installedName, installedVersion,
           // 查看详情：未安装/已安装都始终显示，跳转官网详情页
           h('a', {
             className: styles.detailBtn,
-            // 两级路径：/plugins/{ownerSlug}/{slug}；旧数据缺 ownerSlug 时从 repo 推导
+            // 两级路径：/plugins/{ownerSlug}/{slug}；缺 ownerSlug 时从 repo 推导
             href: pluginDetailUrl(p, langPath),
             target: '_blank',
             rel: 'noopener noreferrer',

package/src/client/components/PluginHubSection.tsx

@@ -1,8 +1,12 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Plugin Hub section: wires the catalog data pipeline, the background task
  * queue and the feedback state together. Data/queue logic lives in hooks/,
  * rendering is delegated to the small presentational components in this
- * folder; only the dialogs/toast and the section-level copy actions remain.
+ * folder; it hosts the dialogs/toast and the section-level copy actions.
  */
 import { createElement as h, useEffect, useState } from 'react'
 import styles from '../styles/Header.module.css'

package/src/client/components/ProgressView.tsx

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Inline progress block shared by the install and uninstall dialogs:
  * a real percentage bar (server-estimated, client-polled). No live terminal
  * window — pnpm emits nothing during git clone/build, so a log pane would be

package/src/client/components/icons.tsx

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Inline SVG icons used across the client. Icons inherit currentColor so
  * they adapt to themes and disabled states automatically.
  */

package/src/client/components/modals.tsx

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Dialog layer for the Plugin Hub: the install-confirm dialog, the uninstall
  * dialog and the global toast. Both dialogs lock themselves while a mutation
  * or restart is running, then switch to a result view offering an immediate

package/src/client/hooks/useCatalog.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Catalog data + view state for the Plugin Hub section.
  *
  * Owns the online-data pipeline (live fetch from dsh-plugin.org), the local
@@ -7,7 +11,7 @@
  */
 import { useEffect, useMemo, useState } from 'react'
 import type { HubPlugin, LocaleId } from '../types.ts'
-import { HUB_ABOUT_URL, HUB_REPO, HUB_UPDATE_URL, normalize, PLUGIN_VERSION } from '../lib/catalog.ts'
+import { HUB_ABOUT_URL, HUB_REPO, HUB_UPDATE_URL, normalize, PLUGIN_VERSION, repoFromInstallTarget } from '../lib/catalog.ts'
 import type { HubAboutInfo, HubUpdateInfo } from '../lib/catalog.ts'
 import type { SortKey } from '../lib/catalog.ts'
 
@@ -59,7 +63,7 @@ export function useCatalog(lang: LocaleId) {
         const list = (Array.isArray(data) ? data : []).map((item) => normalize(item as Record<string, unknown>))
         // 插件市场不显示自己：DSH-Plugin Hub 从目录里排除自身条目，
         // 防止「自己出现在自己的插件列表里、还能自己安装自己」；统计计数同步减 1 保持与列表一致。
-        // 主站数据构建侧已同步防止（registry/API 不再含自身），此处为已发布旧数据/CDN 缓存期的兜底。
+        // 主站数据已同步排除自身，此处为 CDN 缓存期的兜底。
         const hadSelf = list.some((p) => p.source?.repo === SELF_REPO)
         setPlugins(list.filter((p) => p.compatibility?.status === 'verified' && p.source?.repo !== SELF_REPO))
         const stats = s as { total?: number; verified?: number }
@@ -129,13 +133,13 @@ export function useCatalog(lang: LocaleId) {
     return () => { cancelled = true }
   }, [reloadKey])
 
-  /** 插件是否已安装：匹配 installed spec 中的 `github:<owner>/<repo>`，或 npm 通道安装的依赖包名；命中返回 npm 包名。 */
+  /** 插件是否已安装：匹配 Git spec 中的 owner/repo，或 npm 通道安装的依赖包名；命中返回 npm 包名。 */
   const installedName = (p: HubPlugin): string | null => {
     const repo = p.source?.repo
     if (!repo) return null
-    const needle = `github:${repo.toLowerCase()}`
+    const needle = repo.toLowerCase()
     for (const [name, spec] of Object.entries(installed)) {
-      if (spec.toLowerCase().includes(needle)) return name
+      if (repoFromInstallTarget(spec).toLowerCase() === needle) return name
     }
     // npm 通道安装：profile 依赖 key 直接是 npm 包名。包名来源两处——目录数据（npmPackage），
     // 或服务端 npm 优先反查持久化的映射（versions[repo].npmPackage，覆盖组织 scope 与 GitHub