dsh-update-center 0.8.0

package/LICENSE

@@ -0,0 +1,29 @@
+BSD 3-Clause License
+
+Copyright (c) 2026, Britneycode
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its
+   contributors may be used to endorse or promote products derived from
+   this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

package/README.md

@@ -0,0 +1,93 @@
+# dsh-update-center
+
+DeepSeek Harness 的本地更新中心：内置插件市场（浏览/搜索/一键安装/卸载/禁用），统一管理已装插件与 dsh 本体、profile 中的 npm/link 插件以及 agent preset 的更新。
+
+## 安装
+
+插件声明了 `dsh.bundle`（bundle patch 位于 `cordis.patch.yml`），构建产物随仓库分发，用官方 CLI 安装即可挂载为 profile 层：
+
+```bash
+dsh plugin --profile web add github:Britneycode/dsh-update-center
+```
+
+本地开发时也可以 link 安装：
+
+```bash
+dsh plugin --profile web add link:<本插件目录>
+```
+
+安装后重启 dsh web，设置页会出现「更新中心」面板。不需要第三方注入器。
+
+## 插件市场
+
+- 注册表：本仓库根目录 [`plugins.json`](./plugins.json)（raw 直链拉取，可独立于插件发版更新），初始内容为 GitHub `topic:dsh-plugin` 星标前 500 + 本插件，共 501 条。
+- 增量扫描：后台每 12 小时扫描 GitHub `topic:dsh-plugin`（星标前 500，排除 fork），与注册表按 owner/name 去重合并——重复条目仅刷新星标，新条目追加；掉出扫描窗口的老条目在 plugins.json 中保留（累计语义，上限 2000 防膨胀）。
+- npm 包名映射：同一轮扫描会查询 npm 关键词搜索（`keywords:dsh-plugin`，约 800+ 包），按 repository 地址与市场条目匹配——仓库一致才映射（天然防抢注）；命中的条目显示 npm 标记并走 npm 秒级安装，未命中的走 `github:` 安装。
+- 更新注册表：`npm run refresh:snapshot` 会以现有 plugins.json 为基底累计合并最新扫描结果并连同离线快照一起重写，提交推送后生效。
+- 离线兜底：磁盘缓存 → 随包快照（`data/registry-snapshot.json`）；常驻条目（`data/extra-plugins.json`）无条件并入，保证 0 星新插件始终可见。
+- 清单自动刷新：缓存超过 24 小时会在打开面板时自动拉取最新；「刷新清单」按钮随时强制更新。
+- 出网请求仅允许 https 且 host 白名单（raw.githubusercontent.com 额外限定为清单仓库路径，防 SSRF）；安装目标只接受清单内条目，不接受任意包名。
+- 安装优先走 npm 包（秒级），并做防抢注校验：npm 包的 repository 与清单 GitHub owner/repo 不一致时自动回退 `github:owner/repo`。
+- 安装后校验包可解析且存在可运行入口（dsh 清单或 main 文件）；校验失败自动回滚卸载，不会留下坏包。
+- pnpm ≥10 拒绝或跳过构建脚本时，错误信息会带 pnpm-workspace.yaml 放行指引。
+- 卸载 = `pnpm remove` + 移出 `dsh.profile.bundles`，仅对 npm 安装的插件开放；link/preset 插件请直接编辑 profile。
+- 禁用/启用 = 在 profile 的 `cordis.patch.yml` 写入/移除受管的 `disabled: true` 条目（按插件自身 insert id 定位，带标记区块与备份），不删文件、可随时恢复，重启后生效。
+- 市场条目与已安装列表互通元数据：已安装插件显示市场描述与 GitHub 链接，市场里已装的插件显示「可更新」徽标。
+- 市场支持排序：星标最多（默认）/ 默认策展顺序 / 最近添加，可叠加搜索与分类筛选。
+
+## 一键全部更新
+
+- 检查更新后，工具栏出现「全部更新」：把所有可更新插件（npm 版本落后 + link/preset 落后且无未提交改动）排成一个后台批量任务串行执行。
+- 单个子任务失败不中断其余；结束后汇总「N 成功 / M 失败」，全部失败才标记任务失败。
+- dsh 本体更新有独立的构建语义（完整更新/仅拉取），不并入批量。
+
+## 当前能力
+
+- 手动检查远端状态，不在打开设置页时自动发起网络请求。
+- 检查与状态查询全部异步执行（子进程不再阻塞 dsh web 的事件循环），插件检查并行、`/status` 带 5 秒快照缓存。
+- dsh 完整更新会依次执行快进拉取、`pnpm install` 和 `pnpm run build`。
+- 更新由 `$DSH_HOME/update-center` 下的独立 worker 执行，停止或重启 dsh 不会中断任务。
+- npm 插件按包名精准更新，不会因为点击单个插件而更新整个 profile。
+- npm 更新完成后核对 `node_modules` 中的实际版本；版本没有变化时返回失败。
+- npm 更新/安装/卸载后按官方 `dsh plugin` 的规则对账 `dsh.profile.bundles`；模板 bundle 不受影响。
+- link 与 preset 只能通过已安装清单中的包名更新，API 不接受任意目录。
+- Git 插件只更新了 `src` 而没有更新 `lib/dist` 时，自动执行包的 `build` 脚本。
+- 插件来源（upstream）优先读取 git remote 的真实地址，内置映射仅作兜底。
+- dsh 或本地插件存在未提交改动时停止更新，避免覆盖本地工作。
+- 任一步骤失败都会返回失败阶段；不会把依赖安装或构建失败显示成成功。
+- 更新写入磁盘后明确提示重启 dsh web。
+- POST 动作仅接受同源请求（Origin 与 Host 一致）。
+- `Start-DSH.ps1` 会等待后台更新完成再启动，`Stop-DSH.ps1` 不会结束更新 worker。
+
+## 构建
+
+构建脚本支持 Windows、macOS 和 Linux。它会从 `DSH_CHECKOUT`、相邻目录及常见用户目录中寻找 DeepSeek Harness checkout，并复用 checkout 的 TypeScript 与 tsdown。
+
+```bash
+npm run typecheck
+npm test
+npm run build
+```
+
+无法自动找到 checkout 时，先设置 `DSH_CHECKOUT`：
+
+```powershell
+$env:DSH_CHECKOUT = 'D:\App\dsh\deepseek-harness'
+npm run build
+```
+
+## 配置
+
+| 字段 | 说明 | 默认值 |
+|---|---|---|
+| `repoDir` | dsh 源码仓库 | 自动探测 |
+| `profileDir` | web profile | `$DSH_HOME/profiles/web` |
+| `presetDir` | agent preset 目录 | `$DSH_HOME/.agent-presets` |
+| `proxy` | npm/pnpm 代理 | dsh 仓库的 `http.proxy` |
+| `remote` | Git 远端名 | `origin` |
+| `branch` | dsh 更新分支 | `master` |
+| `upstreams` | 插件名到 GitHub 仓库的来源映射 | 内置常用插件 |
+
+## 更新边界
+
+更新中心只修改已明确识别的 dsh 仓库、profile npm 依赖和已安装的 Git 插件。它不会自动 stash、强制切换普通分支、执行非快进合并，也不会自动结束正在运行的 dsh 进程。

package/cordis.patch.yml

@@ -0,0 +1,4 @@
+# dsh-update-center bundle patch: mounts the host plugin into a profile.
+- insert:
+    - id: update-center
+      name: 'dsh-update-center'

package/data/extra-plugins.json

@@ -0,0 +1,112 @@
+[
+ {
+  "id": 1335736564,
+  "node_id": "R_kgDOT5249A",
+  "name": "dsh-update-center",
+  "full_name": "Britneycode/dsh-update-center",
+  "private": false,
+  "owner": {
+   "login": "Britneycode",
+   "id": 267921491,
+   "node_id": "U_kgDOD_goUw",
+   "avatar_url": "https://avatars.githubusercontent.com/u/267921491?v=4",
+   "gravatar_id": "",
+   "url": "https://api.github.com/users/Britneycode",
+   "html_url": "https://github.com/Britneycode",
+   "followers_url": "https://api.github.com/users/Britneycode/followers",
+   "following_url": "https://api.github.com/users/Britneycode/following{/other_user}",
+   "gists_url": "https://api.github.com/users/Britneycode/gists{/gist_id}",
+   "starred_url": "https://api.github.com/users/Britneycode/starred{/owner}{/repo}",
+   "subscriptions_url": "https://api.github.com/users/Britneycode/subscriptions",
+   "organizations_url": "https://api.github.com/users/Britneycode/orgs",
+   "repos_url": "https://api.github.com/users/Britneycode/repos",
+   "events_url": "https://api.github.com/users/Britneycode/events{/privacy}",
+   "received_events_url": "https://api.github.com/users/Britneycode/received_events",
+   "type": "User",
+   "user_view_type": "public",
+   "site_admin": false
+  },
+  "html_url": "https://github.com/Britneycode/dsh-update-center",
+  "description": null,
+  "fork": false,
+  "url": "https://api.github.com/repos/Britneycode/dsh-update-center",
+  "forks_url": "https://api.github.com/repos/Britneycode/dsh-update-center/forks",
+  "keys_url": "https://api.github.com/repos/Britneycode/dsh-update-center/keys{/key_id}",
+  "collaborators_url": "https://api.github.com/repos/Britneycode/dsh-update-center/collaborators{/collaborator}",
+  "teams_url": "https://api.github.com/repos/Britneycode/dsh-update-center/teams",
+  "hooks_url": "https://api.github.com/repos/Britneycode/dsh-update-center/hooks",
+  "issue_events_url": "https://api.github.com/repos/Britneycode/dsh-update-center/issues/events{/number}",
+  "events_url": "https://api.github.com/repos/Britneycode/dsh-update-center/events",
+  "assignees_url": "https://api.github.com/repos/Britneycode/dsh-update-center/assignees{/user}",
+  "branches_url": "https://api.github.com/repos/Britneycode/dsh-update-center/branches{/branch}",
+  "tags_url": "https://api.github.com/repos/Britneycode/dsh-update-center/tags",
+  "blobs_url": "https://api.github.com/repos/Britneycode/dsh-update-center/git/blobs{/sha}",
+  "git_tags_url": "https://api.github.com/repos/Britneycode/dsh-update-center/git/tags{/sha}",
+  "git_refs_url": "https://api.github.com/repos/Britneycode/dsh-update-center/git/refs{/sha}",
+  "trees_url": "https://api.github.com/repos/Britneycode/dsh-update-center/git/trees{/sha}",
+  "statuses_url": "https://api.github.com/repos/Britneycode/dsh-update-center/statuses/{sha}",
+  "languages_url": "https://api.github.com/repos/Britneycode/dsh-update-center/languages",
+  "stargazers_url": "https://api.github.com/repos/Britneycode/dsh-update-center/stargazers",
+  "contributors_url": "https://api.github.com/repos/Britneycode/dsh-update-center/contributors",
+  "subscribers_url": "https://api.github.com/repos/Britneycode/dsh-update-center/subscribers",
+  "subscription_url": "https://api.github.com/repos/Britneycode/dsh-update-center/subscription",
+  "commits_url": "https://api.github.com/repos/Britneycode/dsh-update-center/commits{/sha}",
+  "git_commits_url": "https://api.github.com/repos/Britneycode/dsh-update-center/git/commits{/sha}",
+  "comments_url": "https://api.github.com/repos/Britneycode/dsh-update-center/comments{/number}",
+  "issue_comment_url": "https://api.github.com/repos/Britneycode/dsh-update-center/issues/comments{/number}",
+  "contents_url": "https://api.github.com/repos/Britneycode/dsh-update-center/contents/{+path}",
+  "compare_url": "https://api.github.com/repos/Britneycode/dsh-update-center/compare/{base}...{head}",
+  "merges_url": "https://api.github.com/repos/Britneycode/dsh-update-center/merges",
+  "archive_url": "https://api.github.com/repos/Britneycode/dsh-update-center/{archive_format}{/ref}",
+  "downloads_url": "https://api.github.com/repos/Britneycode/dsh-update-center/downloads",
+  "issues_url": "https://api.github.com/repos/Britneycode/dsh-update-center/issues{/number}",
+  "pulls_url": "https://api.github.com/repos/Britneycode/dsh-update-center/pulls{/number}",
+  "milestones_url": "https://api.github.com/repos/Britneycode/dsh-update-center/milestones{/number}",
+  "notifications_url": "https://api.github.com/repos/Britneycode/dsh-update-center/notifications{?since,all,participating}",
+  "labels_url": "https://api.github.com/repos/Britneycode/dsh-update-center/labels{/name}",
+  "releases_url": "https://api.github.com/repos/Britneycode/dsh-update-center/releases{/id}",
+  "deployments_url": "https://api.github.com/repos/Britneycode/dsh-update-center/deployments",
+  "created_at": "2026-08-16T08:11:15Z",
+  "updated_at": "2026-08-16T09:09:18Z",
+  "pushed_at": "2026-08-16T09:08:55Z",
+  "git_url": "git://github.com/Britneycode/dsh-update-center.git",
+  "ssh_url": "git@github.com:Britneycode/dsh-update-center.git",
+  "clone_url": "https://github.com/Britneycode/dsh-update-center.git",
+  "svn_url": "https://github.com/Britneycode/dsh-update-center",
+  "homepage": null,
+  "size": 0,
+  "stargazers_count": 0,
+  "watchers_count": 0,
+  "language": "TypeScript",
+  "has_issues": true,
+  "has_projects": true,
+  "has_downloads": false,
+  "has_wiki": true,
+  "has_pages": false,
+  "has_discussions": false,
+  "forks_count": 0,
+  "mirror_url": null,
+  "archived": false,
+  "disabled": false,
+  "open_issues_count": 0,
+  "license": null,
+  "allow_forking": true,
+  "is_template": false,
+  "web_commit_signoff_required": false,
+  "has_pull_requests": true,
+  "pull_request_creation_policy": "all",
+  "topics": [
+   "deepseek-harness",
+   "dsh",
+   "dsh-plugin"
+  ],
+  "visibility": "public",
+  "forks": 0,
+  "open_issues": 0,
+  "watchers": 0,
+  "default_branch": "main",
+  "temp_clone_token": null,
+  "network_count": 0,
+  "subscribers_count": 0
+ }
+]