dsh-plugin 1.1.1 → 1.1.2

package/src/client/hooks/useTaskQueue.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Background install/remove task queue for the Plugin Hub.
  *
  * Mirrors the server-side FIFO active queue by polling /active, settles
@@ -7,7 +11,7 @@
  */
 import { useEffect, useRef, useState } from 'react'
 import type { HubPlugin, Translate } from '../types.ts'
-import { installCommandOf, installTargetOf } from '../lib/catalog.ts'
+import { installCommandOf, installTargetOf, repoFromInstallTarget } from '../lib/catalog.ts'
 
 /** 客户端任务队列项：镜像服务端 active 任务（running 在前、pending 在后）。 */
 export interface QueueTask {
@@ -41,7 +45,7 @@ export interface QueueTask {
 
 /** 客户端待重启项：镜像服务端内存列表 + 本地补齐的展示信息（简介/版本）。 */
 export interface PendingRestart {
-  /** owner/repo（展示用，已去 github: 前缀） */
+  /** owner/repo（展示用，已从安装目标归一化） */
   target: string
   /** 待重启语义：install 装完等挂载 / uninstall 卸完等清理 */
   kind: 'install' | 'uninstall'
@@ -120,7 +124,7 @@ export function useTaskQueue(opts: TaskQueueOptions) {
     setQueue(next)
   }
 
-  /** 解析服务端待重启列表（`github:` 前缀已去掉，与安装任务的 target 对齐）。 */
+  /** 解析服务端待重启列表（安装目标归一化为 owner/repo，与安装任务对齐）。 */
   const parsePendingRestarts = (value: unknown): PendingRestart[] => {
     if (!Array.isArray(value)) return []
     const out: PendingRestart[] = []
@@ -130,7 +134,7 @@ export function useTaskQueue(opts: TaskQueueOptions) {
       if (typeof target !== 'string' || target === '') continue
       const at = (x as { at?: unknown }).at
       out.push({
-        target: target.replace(/^github:/, ''),
+        target: repoFromInstallTarget(target),
         kind: (x as { kind?: unknown }).kind === 'uninstall' ? 'uninstall' : 'install',
         at: typeof at === 'number' ? at : 0,
       })
@@ -280,9 +284,9 @@ export function useTaskQueue(opts: TaskQueueOptions) {
               next.push({
                 id,
                 kind: isRemove ? 'uninstall' : 'install',
-                target: typeof a.target === 'string' ? a.target.replace(/^github:/, '') : (prevTask?.target ?? ''),
+                target: typeof a.target === 'string' ? repoFromInstallTarget(a.target) : (prevTask?.target ?? ''),
                 desc: prevTask?.desc,
-                repo: prevTask?.repo ?? (isRemove ? null : (typeof a.target === 'string' ? a.target.replace(/^github:/, '') : null)),
+                repo: prevTask?.repo ?? (isRemove ? null : (typeof a.target === 'string' ? repoFromInstallTarget(a.target) : null)),
                 // 安装时快照的目录信号：轮询合并时保留，任务成功后记录到本地
                 version: prevTask?.version,
                 updatedAt: prevTask?.updatedAt,
@@ -341,11 +345,11 @@ export function useTaskQueue(opts: TaskQueueOptions) {
           .filter((a) => typeof a.id === 'number')
           .map((a) => {
             const isRemove = a.action === 'remove'
-            // 服务端任务的 target：github:repo（git 安装）/ npm 包名（npm 安装/卸载）。
+            // 服务端任务的 target：显式 HTTPS Git URL（安装）/ npm 包名（npm 安装/卸载）。
             // 恢复展示统一用 displayTarget（owner/repo，服务端固定传）：npm 安装时 target 是包名，
             // 直接展示会让用户看到「安装方式」的内部细节，违背无感知原则；卸载保持包名（匹配已装表）。
-            const display = typeof (a as { displayTarget?: unknown }).displayTarget === 'string' ? (a as { displayTarget: string }).displayTarget.replace(/^github:/, '') : ''
-            const fallback = typeof a.target === 'string' ? a.target.replace(/^github:/, '') : ''
+            const display = typeof (a as { displayTarget?: unknown }).displayTarget === 'string' ? repoFromInstallTarget((a as { displayTarget: string }).displayTarget) : ''
+            const fallback = typeof a.target === 'string' ? repoFromInstallTarget(a.target) : ''
             return {
               id: a.id as number,
               kind: (isRemove ? 'uninstall' : 'install') as 'install' | 'uninstall',

package/src/client/index.tsx

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * dsh-plugin client entry: wires the Plugin Hub into the host settings via
  * the module-loader bundle (see tsdown.config.ts). All UI logic lives in
  * PluginHubSection; this file only performs the cordis apply wiring.

package/src/client/lib/catalog.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Catalog constants and normalizers: site URLs, category metadata, sort keys
  * and the mapping from the online API's short-key payloads to HubPlugin.
  */
@@ -59,7 +63,7 @@ export function langPathOf(lang: LocaleId): string {
 
 /**
  * 官网详情页两级路径：/plugins/{ownerSlug}/{slug}；
- * 旧数据缺 ownerSlug 时从 repo 推导（卡片详情按钮与弹窗来源行共用）。
+ * 缺 ownerSlug 时从 repo 推导（卡片详情按钮与弹窗来源行共用）。
  */
 export function pluginDetailUrl(plugin: HubPlugin, langPath: string): string {
   const repo = plugin.source?.repo ?? ''
@@ -107,7 +111,7 @@ export function pluginIssueUrl(repo: string, message: string, env?: EnvInfo | nu
       // 来源说明：标题（链官网）+ 一句来源（链仓库）+ 实际执行的安装命令（含 --profile）与执行结果，链接由常量动态拼接
       `## [DSH-Plugin 插件中心](${SITE_URL}) · 安装 Plugin 失败错误信息`,
       `本错误信息由 [dsh-plugin-hub](${GITHUB_URL}) 插件中心的安装程序自动生成，随本次安装失败一并提交。`,
-      `- 实际执行的安装命令：\`${command ?? `dsh plugin${env?.profile ? ` --profile ${env.profile}` : ''} add github:${repo}`}\``,
+      `- 实际执行的安装命令：\`${command ?? `dsh plugin${env?.profile ? ` --profile ${env.profile}` : ''} add git+https://github.com/${repo}.git`}\``,
       `- 执行结果：安装失败，未能安装该插件。`,
       // 尝试过的安装方式（npm 反查 + 实际执行命令，按先后顺序）：作者据此反推正确的
       // npm 包名 —— 组织 scope 与 GitHub 用户名不一致时仅凭仓库名猜不到，作者看到我们
@@ -120,7 +124,7 @@ export function pluginIssueUrl(repo: string, message: string, env?: EnvInfo | nu
         ? [
           '',
           '## 安装方式说明',
-          'DSH 插件支持两种官方安装通道：`dsh plugin add <npm-package>`（npm 分发，需发布完整构建产物）与 `dsh plugin add github:owner/repo`（git 直装，仓库需提交构建产物或在 package.json 提供 `prepare` 脚本）。当前插件的分发物缺少 package.json 声明的入口文件，请按所用通道补齐后重新发布。',
+          'DSH 插件支持两种官方安装通道：`dsh plugin add <npm-package>`（npm 分发，需发布完整构建产物）与 `dsh plugin add git+https://github.com/owner/repo.git`（Git 直装，仓库需提交构建产物或在 package.json 提供 `prepare` 脚本）。当前插件的分发物缺少 package.json 声明的入口文件，请按所用通道补齐后重新发布。',
         ]
         : []),
       '',
@@ -194,7 +198,7 @@ export function normalize(raw: Record<string, unknown>): HubPlugin {
       topics: Array.isArray(raw.t) ? (raw.t as string[]) : undefined,
       features: Array.isArray(raw.f) ? (raw.f as string[]) : undefined,
       description: typeof raw.d === 'string' ? raw.d : undefined,
-      // 投影输出两种形态：老数据 source 是 repo 字符串；新数据是 { repo, npmPackage }
+      // source 双形态：字符串 repo，或 { repo, npmPackage } 对象
       source: typeof raw.r === 'string'
         ? { repo: raw.r }
         : raw.r !== null && typeof raw.r === 'object'
@@ -231,12 +235,29 @@ export function installTargetOf(p: HubPlugin): { target: string; via: 'npm' | 'g
   return { target: repo, via: 'github' }
 }
 
-/** 展示用安装命令（复制/弹窗）：npm 通道显示包名，git 通道显示 github: 源。 */
+/** 展示用安装命令（复制/弹窗）：npm 通道显示包名，git 通道显示显式 HTTPS URL。 */
 export function installCommandOf(p: HubPlugin, withProfile = false): string {
   const { target, via } = installTargetOf(p)
   return via === 'npm'
     ? `dsh plugin${withProfile ? ' --profile web' : ''} add ${target}`
-    : `dsh plugin${withProfile ? ' --profile web' : ''} add github:${target}`
+    : `dsh plugin${withProfile ? ' --profile web' : ''} add git+https://github.com/${target}.git`
+}
+
+/** Normalize a task/install target to its owner/repo display identity. */
+export function repoFromInstallTarget(value: string): string {
+  const input = value.trim()
+  if (/^[A-Za-z0-9._-]+\/[A-Za-z0-9._-]+$/.test(input)) return input
+  const patterns = [
+    /^github:([^/]+)\/([^/]+)$/i,
+    /^(?:git\+)?https:\/\/github\.com\/([^/]+)\/([^/]+?)(?:\.git)?(?:[?#].*)?$/i,
+    /^(?:git\+)?ssh:\/\/(?:git@)?github\.com\/([^/]+)\/([^/]+?)(?:\.git)?(?:[?#].*)?$/i,
+    /^git@github\.com:([^/]+)\/([^/]+?)(?:\.git)?(?:[?#].*)?$/i,
+  ]
+  for (const pattern of patterns) {
+    const match = pattern.exec(input)
+    if (match !== null) return `${match[1]}/${match[2]}`
+  }
+  return value
 }
 
 export const CATEGORY_LABELS: Record<string, { zh: string; en: string }> = {

package/src/client/lib/env.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * One-shot host environment snapshot for bug reports. Fetched lazily and
  * cached at module level: issue URLs embed this info, and the environment
  * does not change during a session. A failed fetch degrades to null so the

package/src/client/lib/failures.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Persistent install/remove notifications.
  *
  * Every settled task — success or failure — is appended to localStorage the
@@ -114,7 +118,7 @@ export function loadNotifications(): NotificationRecord[] {
     return list
       .filter((r): r is NotificationRecord =>
         !!r && typeof r === 'object' && typeof (r as { message?: unknown }).message === 'string')
-      // 历史失败记录没有 ok 字段：缺省按失败渲染，保证旧数据照常可查
+      // ok 字段缺省时按失败渲染
       .map((r) => ({ ...r, ok: r.ok === true }))
   } catch {
     return []

package/src/client/lib/format.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Presentation formatters shared across the catalog list and the cards.
  */
 import type { Translate } from '../types.ts'

package/src/client/lib/renderMarkdown.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * 轻量 Markdown 渲染器：仅用于 Hub 自我更新的变更记录（Worker 下发的 notes）。
  *
  * 内容由插件作者自己编写、属可信内容，但渲染端仍先整体 HTML 转义，再按

package/src/client/locales.ts

@@ -1,4 +1,10 @@
-/** zh/en dictionaries for the DSH-Plugin Hub settings section. */
+/**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
+ * zh/en dictionaries for the DSH-Plugin Hub settings section.
+ */
 export const zh = {
   nav: '插件中心',
   title: 'DSH-Plugin Hub',

package/src/client/styles/Dropdown.module.css

@@ -1,4 +1,8 @@
-/* 自绘下拉（替换原生 <select>）。颜色跟随宿主主题：经 --hub-* 设计令牌解析，
+/* DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
+ * 自绘下拉（替换原生 <select>）。颜色跟随宿主主题：经 --hub-* 设计令牌解析，
  * 与 Header 的控件（排序/分段）保持一致的无边框 + 圆角语言。 */
 .dropdown {
   position: relative;

package/src/client/styles/Header.module.css

@@ -1,4 +1,8 @@
-/* Plugin Hub section header: brand row, tagline, ad banner, search input,
+/* DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
+ * Plugin Hub section header: brand row, tagline, ad banner, search input,
  * filter toolbar (installed / not installed, failures entry) and category
  * tabs. Colors resolve through the --hub-* design tokens. */
 

package/src/client/styles/List.module.css

@@ -1,4 +1,8 @@
-/* Plugin Hub catalog list: the scrollable body, plugin cards (name, badges,
+/* DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
+ * Plugin Hub catalog list: the scrollable body, plugin cards (name, badges,
  * description, topics, stats, actions), loading / empty states and the
  * browse-all footer. Colors resolve through the --hub-* design tokens. */
 

package/src/client/styles/Modal.module.css

@@ -1,4 +1,8 @@
-/* Plugin Hub dialogs and overlays: install / uninstall modals, error dialog,
+/* DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
+ * Plugin Hub dialogs and overlays: install / uninstall modals, error dialog,
  * failure-record dialog, task-queue dialog, progress strip, inline progress
  * and the global toast. Colors resolve through the --hub-* design tokens. */
 

package/src/client/styles/tokens.module.css

@@ -1,4 +1,8 @@
-/* Plugin Hub design tokens.
+/* DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
+ * Plugin Hub design tokens.
  *
  * Semantic aliases over the host's --dsw-alias-* theme tokens, each with the
  * original light-mode literal as fallback for hosts that do not define the

package/src/client/types.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Shared types for the dsh-plugin browser client. Kept dependency-free so
  * any client module can import them without pulling in components or styles.
  */
@@ -36,7 +40,7 @@ export interface SectionProps {
 
 /** Slim projection of the site's DirectoryPlugin entries. */
 export interface HubPlugin {
-  /** 作者小写 key，与 slug 共同构成唯一身份（两级路径 /plugins/{ownerSlug}/{slug}）；旧数据可能缺省 */
+  /** 作者小写 key，与 slug 共同构成唯一身份（两级路径 /plugins/{ownerSlug}/{slug}）；可能缺省 */
   ownerSlug?: string
   slug: string
   displayName?: string

package/src/server/http/routes.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Local HTTP routes exposing real installs to the in-app Plugin Hub UI.
  * The client fetches the same-origin `/dsh-plugin-hub/*` endpoints; the
  * install handler validates the target, then spawns the official dsh CLI
@@ -9,7 +13,7 @@ import type { IncomingMessage, ServerResponse } from 'node:http'
 import { homedir, release } from 'node:os'
 import { dirname, join, resolve } from 'node:path'
 import { spawn } from 'node:child_process'
-import { activeTask, cancelTask, dumpLoaderEntries, getTask, githubTarget, hasQueuedTarget, listPendingRestarts, readProfileArg, startPluginMutation, validPackageName, type LoaderHandle } from '../services/install.ts'
+import { activeTask, cancelTask, dumpLoaderEntries, getTask, githubRepoOf, githubTarget, hasQueuedTarget, listPendingRestarts, readProfileArg, startPluginMutation, validPackageName, type LoaderHandle } from '../services/install.ts'
 import { recordInstalledVersion, recordResolvedNpmPackage, readInstalledVersions, removeInstalledVersion } from '../services/installed-versions.ts'
 import { resolveNpmPackage } from '../services/npm-resolve.ts'
 import { preflightTarget } from '../services/preflight.ts'
@@ -82,11 +86,13 @@ function hostEnv(profile: string): Record<string, string | null> {
   }
 }
 
-/** Match an install target (`github:<owner>/<repo>`) against the installed table; returns the package name when already installed. */
+/** Match a GitHub install target against the installed table; returns the package name when already installed. */
 function installedByRepo(installed: Record<string, string>, target: string): string | null {
-  const needle = target.toLowerCase()
+  const repo = githubRepoOf(target)
+  if (repo === null) return null
+  const needle = repo.toLowerCase()
   for (const [name, spec] of Object.entries(installed)) {
-    if (spec.toLowerCase().includes(needle)) return name
+    if (githubRepoOf(spec)?.toLowerCase() === needle) return name
   }
   return null
 }
@@ -178,7 +184,7 @@ export function mountPluginHubRoutes(webServer: WebServerService, profile: strin
           const displayRepo = typeof body === 'object' && body !== null && typeof (body as { display?: unknown }).display === 'string'
             ? (body as { display: string }).display.trim()
             : rawRepo
-          // 目标语法两态：owner/repo → github 源（走装前预检）；npm 包名（@scope/name 或 name）→ 信任 registry 直接安装
+          // 目标语法两态：owner/repo → 显式 HTTPS Git 源（走装前预检）；npm 包名（@scope/name 或 name）→ 信任 registry 直接安装
           const repoTarget = githubTarget(rawRepo)
           let target: string | null = repoTarget ?? (repoTarget === null && validPackageName(rawRepo) ? rawRepo : null)
           if (target === null) {
@@ -208,7 +214,7 @@ export function mountPluginHubRoutes(webServer: WebServerService, profile: strin
           // 重复安装防护：非更新请求命中已安装目标时直接拒绝，不重复跑 CLI
           // （否则 CLI 会因「已存在」失败，且用户看到的是莫名其妙的报错）；
           // 更新请求（mode: 'update'）放行，CLI 的 add 对已存在依赖是 pnpm 原位覆盖重装。
-          // 命中判定双通道：npm 包名按 dependencies 键直接命中，github: 目标按 spec 值匹配。
+          // 命中判定双通道：npm 包名按 dependencies 键直接命中，GitHub 目标按仓库身份匹配。
           const installed = readInstalled(profile)
           const already = installedByRepo(installed, target) ?? (installed[target] !== undefined ? target : null)
           if (already !== null && mode !== 'update') {
@@ -249,7 +255,7 @@ export function mountPluginHubRoutes(webServer: WebServerService, profile: strin
             profile,
             target,
             // npm 安装时 target 是包名：displayTarget 固定展示仓库名，待重启行/前端恢复不受通道变化影响
-            displayTarget: githubTarget(displayRepo) ?? undefined,
+            displayTarget: githubRepoOf(displayRepo) ?? undefined,
             // 已尝试的安装方式（npm 反查）：实际执行命令由 spawn 时追加，失败 issue 一并展示
             attempts,
             timeoutMs: COMMAND_TIMEOUT_MS,
@@ -294,7 +300,7 @@ export function mountPluginHubRoutes(webServer: WebServerService, profile: strin
             profile,
             target: name,
             // 卸载的 mutation 目标是 npm 包名；待重启行要显示 owner/repo（与安装行一致），非法/缺失时回退包名
-            displayTarget: githubTarget(repo) ?? undefined,
+            displayTarget: githubRepoOf(repo) ?? undefined,
             // 运行中 loader：卸载成功后主动移除条目，立即生效、无需重启
             uninstallLoader: loader,
             timeoutMs: COMMAND_TIMEOUT_MS,

package/src/server/index.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * dsh-plugin host entry: mounts the Plugin Hub HTTP routes once the host
  * web server service is available. The browser bundle (src/client) talks to
  * these same-origin routes to perform real installs from inside the app.

package/src/server/services/install-types.ts

@@ -1,4 +1,10 @@
-/** 安装/卸载运行时的公共类型与常量（无依赖，供各服务模块复用）。 */
+/**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
+ * 安装/卸载运行时的公共类型与常量（无依赖，供各服务模块复用）。
+ */
 
 /** 一个 pnpm 安装子进程的结果快照。 */
 export interface InstallResult {
@@ -11,7 +17,7 @@ export interface InstallResult {
 
 export interface InstallTask {
   id: number
-  /** 操作目标：`github:<owner>/<repo>`（安装）或 npm 包名（卸载），冲突/恢复时需要展示给用户 */
+  /** 操作目标：显式 HTTPS Git URL（安装）或 npm 包名（卸载），冲突/恢复时需要展示给用户 */
   target: string
   /** 展示用目标（owner/repo）：npm 安装时 target 是包名，前端恢复用此字段显示仓库名，保持用户无感知 */
   displayTarget?: string
@@ -51,7 +57,7 @@ export interface QueueItem {
  * 它自然清空，正好等于「重启后提醒消失」的语义，无需任何重启探测。
  */
 export interface PendingRestart {
-  /** `github:<owner>/<repo>` 安装目标（与任务一致；卸载时为展示用的 owner/repo） */
+  /** Git 安装目标（与任务一致；卸载时为展示用的 owner/repo） */
   target: string
   /** 待重启语义：install 装完等挂载生效 / uninstall 卸完等清理 loader 残留 */
   kind: 'install' | 'uninstall'
@@ -59,7 +65,7 @@ export interface PendingRestart {
   at: number
 }
 
-/** Grammar of an accepted `github:<owner>/<repo>` install target. */
+/** Grammar of a catalog GitHub repository identity (`owner/repo`). */
 export const REPO_RE = /^[A-Za-z0-9._-]+\/[A-Za-z0-9._-]+$/
 /** Grammar of an npm package name (used for uninstall targets). */
 export const PACKAGE_RE = /^(?:@[a-z0-9._-]+\/)?[A-Za-z0-9._-]+$/

package/src/server/services/install.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Install runner 的统一出口：执行真实插件变更（spawn 官方 dsh CLI 子进程）。
  * 实现按职责拆分在同目录子模块，本文件只做公共 API 的 re-export，保持外部
  * import 面稳定（routes.ts / index.ts 仍从 `services/install.ts` 引入）。
@@ -14,5 +18,5 @@ export type { InstallResult, InstallTask, Invocation, PendingRestart, QueueItem
 export type { LoaderHandle } from './loader.ts'
 export { addPendingRestart, clearPendingRestart, listPendingRestarts } from './pending-restart.ts'
 export { dumpLoaderEntries, removeLoadedEntry } from './loader.ts'
-export { addAllowBuildsKey, githubTarget, parseAllowBuildsKey, readProfileArg, validPackageName } from './profile.ts'
+export { addAllowBuildsKey, githubRepoOf, githubTarget, parseAllowBuildsKey, readProfileArg, validPackageName } from './profile.ts'
 export { activeTask, cancelTask, getTask, hasQueuedTarget, hasRunningTask, runPluginMutation, startPluginMutation } from './task-queue.ts'

package/src/server/services/installed-versions.ts

@@ -1,8 +1,12 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Installed-plugin version tracking.
  *
  * The installed table (`readInstalled` in routes.ts) only knows the manifest
- * spec of each dependency (`github:<owner>/<repo>`), which carries no version.
+ * spec of each Git dependency, which carries no version.
  * To let the Plugin Hub tell "an update is available", we record the catalog
  * signal present at install time into a small per-profile JSON file, then
  * compare it against the catalog's current signal later.

package/src/server/services/loader.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * 运行中 loader 的读取与停用：卸载成功后对匹配条目做 live-disable，
  * 使卸载立即生效（刷新页面不再加载已卸载的 client bundle，也无需重启）。
  */

package/src/server/services/npm-resolve.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * npm 包反查：git 分发不完整（缺构建产物/子模块）导致安装失败时，用 npm
  * registry 的搜索接口按 repository 地址反查该仓库对应的官方 npm 包。
  *

package/src/server/services/pending-restart.ts

@@ -1,4 +1,10 @@
-/** 待重启列表的内存态管理（宿主进程一重启自然清空）。 */
+/**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
+ * 待重启列表的内存态管理（宿主进程一重启自然清空）。
+ */
 import type { PendingRestart } from './install-types.ts'
 
 const pendingRestarts: PendingRestart[] = []
@@ -6,7 +12,7 @@ const pendingRestarts: PendingRestart[] = []
 /**
  * 登记一条待重启记录（同一目标去重）。
  * - 卸载：目标刚装完未重启（已有待重启记录）→ 宿主从未加载过它，卸完磁盘已干净、
- *   loader 无残留，无需再提醒重启，直接移除该条；否则（此前已被宿主加载过）登记「卸载后待重启清理」。
+ *   loader 无残留，无需再提醒重启，直接移除该条；否则（已被宿主加载过）登记「卸载后待重启清理」。
  * - 安装：已有记录则刷新为安装语义（如卸载后未重启又重装），否则新登记。
  */
 export function addPendingRestart(target: string, kind: 'install' | 'uninstall'): void {

package/src/server/services/preflight.ts

@@ -1,5 +1,9 @@
 /**
- * 安装前预检：对 `github:` 源的插件，检查其分发（codeload tarball）里是否
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
+ * 安装前预检：对 GitHub 源的插件，检查其分发（codeload tarball）里是否
  * 真的包含 package.json 声明的入口文件（main / exports["."].default）。
  * git 分发常不提交构建产物（lib/ 等），这类残缺包装完会让宿主重启加载插件树时
  * ERR_MODULE_NOT_FOUND 直接崩溃 —— 预检在动手安装前就把它们拦下，避免白装一次。
@@ -13,6 +17,7 @@ import { tmpdir } from 'node:os'
 import { join } from 'node:path'
 import { pipeline } from 'node:stream/promises'
 import { promisify } from 'node:util'
+import { githubRepoOf } from './profile.ts'
 
 const execFileAsync = promisify(execFile)
 
@@ -23,9 +28,9 @@ export interface PreflightResult {
 }
 
 export async function preflightTarget(target: string): Promise<PreflightResult> {
-  const m = /^github:([^/]+)\/([^/]+)$/.exec(target)
-  if (m === null) return { ok: true, missing: null }
-  const [, owner, repo] = m
+  const source = githubRepoOf(target)
+  if (source === null) return { ok: true, missing: null }
+  const [owner, repo] = source.split('/')
   let commit = ''
   try {
     const { stdout } = await execFileAsync('git', ['ls-remote', `https://github.com/${owner}/${repo}.git`, 'HEAD'])

package/src/server/services/profile.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * 宿主 profile 与目标校验工具：解析当前 profile、目录定位、安装目标语法校验，
  * 以及 pnpm allowBuilds 白名单的写入（失败恢复路径）。
  */
@@ -19,10 +23,30 @@ export function profileDirectory(profile: string): string {
   return join(process.env.DSH_HOME ?? join(homedir(), '.dsh'), 'profiles', profile)
 }
 
-/** Build a safe `github:<owner>/<repo>` target, or null when the repo is unsafe. */
+/** Build a safe explicit HTTPS Git target, or null when the repo is unsafe. */
 export function githubTarget(repo: string): string | null {
   if (typeof repo !== 'string' || !REPO_RE.test(repo)) return null
-  return `github:${repo}`
+  return `git+https://github.com/${repo}.git`
+}
+
+/** Extract an owner/repo identity from a catalog value or an installed Git spec. */
+export function githubRepoOf(value: string): string | null {
+  if (typeof value !== 'string') return null
+  const input = value.trim()
+  if (REPO_RE.test(input)) return input
+  const patterns = [
+    /^github:([^/]+)\/([^/]+)$/i,
+    /^(?:git\+)?https:\/\/github\.com\/([^/]+)\/([^/]+?)(?:\.git)?(?:[?#].*)?$/i,
+    /^(?:git\+)?ssh:\/\/(?:git@)?github\.com\/([^/]+)\/([^/]+?)(?:\.git)?(?:[?#].*)?$/i,
+    /^git@github\.com:([^/]+)\/([^/]+?)(?:\.git)?(?:[?#].*)?$/i,
+  ]
+  for (const pattern of patterns) {
+    const match = pattern.exec(input)
+    if (match === null) continue
+    const repo = `${match[1]}/${match[2]}`
+    if (REPO_RE.test(repo)) return repo
+  }
+  return null
 }
 
 /** Validate an npm package name (uninstall target grammar). */
@@ -32,7 +56,7 @@ export function validPackageName(name: string): boolean {
 
 /**
  * The exact `allowBuilds` key pnpm printed in its
- * `ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED` hint. For `github:` installs pnpm
+ * `ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED` hint. For Git installs pnpm
  * matches against `name@<resolved fetch URL>` — the URL it actually fetches,
  * e.g. `https://codeload.github.com/<owner>/<repo>/tar.gz/<commit>` — not the
  * `git+ssh://`/branch spec. A bare name or a `git+` spec does not match, so

package/src/server/services/progress.ts

@@ -1,4 +1,8 @@
 /**
+ * DSH-Plugin Hub — the community plugin marketplace for DeepSeek Harness.
+ * Website: https://dsh-plugin.org
+ * GitHub: https://github.com/dshplugin/dsh-plugin-hub
+ *
  * Pure progress-estimation helpers shared by the install runner.
  *
  * The dsh CLI wraps pnpm, which refreshes its `Progress: …` line in place