dsh-wechat-remote 1.7.13 → 1.7.14-rc.69

package/README.md

@@ -1,37 +1,27 @@
-# Agent远程管理助手 · DSH 插件安装器
-
-命令行入口用于 DSH Web；同一个安装包也可在 Desktop 原生插件管理器中安装。当前正式版为 1.7.12。
-
-首次安装和升级旧插件使用同一个命令：
-
-```sh
-npx -y dsh-wechat-remote@latest
-```
-
-在与 DSH 相同的系统用户下运行即可。无需改成全局安装 DSH；使用 `npx @deepseek-ai/dsh web` 的用户也使用同一条安装命令。需要 Node.js 22.13 或更高版本，无需另装 pnpm 或 Git。Windows CMD / PowerShell 推荐使用 `npx.cmd -y dsh-wechat-remote@latest`，不必修改脚本执行策略。
-
-安装器保留原配置、配对和会话，不会升级 DSH 本体。请先结束运行中的任务；安装完成后自动重启原 DSH 并尝试打开 WebUI。DSH 已关闭时会尝试启动；若启动失败，按提示查看启动日志，不要删除原有数据。
-
-DSH 的新版本、预览版本或未登记的主机架构不会仅因缺少验证记录而被拒绝安装。安装器仍检查必要运行能力、安装包完整性和已知不兼容问题，并保留失败恢复所需的备份；无法确认恢复结果时会提示保留数据。这不代表所有宿主组合均已通过功能验证。
-
-本版沿用此前已验证的跨平台安装方案，具体发行包与宿主组合以验收记录为准。普通 Node 启动、独立的 macOS launchd 和 Linux 用户级 systemd 服务有对应的自动恢复方式；无法确认启动方式时不自动停止主机。
-
-安装过程中请等待完成，勿重复执行命令。
-
-本版安装器内置完整插件，安装当前版本不依赖 GitHub 附件下载。安装后，WebUI 一键更新在 GitHub 网络下载失败时可以从已核验的 npm 安装包中取回同一插件。该能力不回写旧插件；旧插件遇到 GitHub 下载失败时，先使用上面的 npm 命令升级即可。
-
-旧插件的一键更新如被版本或架构判断拦截，可用上述安装命令升级一次。从插件 1.7.6 起，未登记的 CPU 架构或 DSH 版本不再影响更新入口；执行前仍会检查实际安装与重启条件，无需因此降低 DSH 版本或删除节点。
-
-默认使用 `web` 配置和原来的 DSH 数据目录。自定义数据目录时，在新终端设置相同的 `DSH_HOME`，或附加 `--home "数据目录"`；使用其他配置时附加 `--profile 配置名称`。WSL、容器和其他系统用户内的 DSH，需要在对应环境中执行安装，不能跨环境替换。
-
-Desktop 在原生插件管理器中添加 `dsh-wechat-remote`，不支持用 `--profile desktop` 绕过它。启用后可在本插件详情或“设置 → 微信连接”中检查更新；Desktop 的一键更新使用宿主原生安装流程。若更新后提示待生效，请在任务结束时完全退出并重新打开 Desktop，无需重新配对。
-
-发现另一端可更新时先提示，确认后等待空闲再处理，也可选择稍后。仅处理同一系统用户、同一数据目录下已经安装并启用的插件；需要另一端原生更新能力配合，可能需要重启。未完成联动时保留另一端原状并提示，不代表两端已更新。
-
-现有小程序的模型菜单可能未及时反映电脑上的切换；发送前请重新选择所需模型，并确认电脑已同步该选择，避免选择后立即发送。同一会话仍受 DSH 原生占用规则约束，不能由 Web 和 Desktop 同时操作。
-
-同一个 Web 节点请勿重复添加两种微信连接插件包。若原先通过原生插件管理页安装了 `dsh-wechat-remote`，仍回到该页面更新；一行安装器会提示安装来源不匹配，不会再添加另一份。
-
-DSH 正在运行时，优先连接它自己的安装接口；未运行时，优先使用当前终端默认的 DSH，再检查全局、当前项目和 NPX 缓存。只有存在多份缓存且没有默认选择时才询问。也可用 `--dsh-cli "DSH的lib/bin.js路径"` 明确指定。
-
-已运行的同版本插件卡在更新验证、尚未就绪时，重新执行命令会尝试修复。DSH 已退出或怀疑插件文件损坏时，附加 `--repair` 主动重装，不会自动降级。宿主本体或其他插件的故障仍可能需要另行处理；安装日志会保留，不必先删除会话或重新配对。
+# Agent远程管理助手 · DSH 插件安装器
+
+通常在 DSH 的 **插件 → 添加插件** 输入 `dsh-wechat-remote@latest` 即可。已有安装使用插件内的检查更新，不要卸载或叠加安装。Web、Desktop 的安装包名相同。
+
+本候选版提供 Web 保底替换升级，包括通过原生插件管理器安装、旧更新按钮不能升级的 `1.7.13`。不需要先卸载旧插件，见 [安装与更新说明](../docs/NATIVE-INSTALL.md)。本版尚未公开发布，当前公共 `@latest` 仍是 `1.7.13`。
+
+Web 新装或保底升级使用同一行命令：
+
+```sh
+npx -y dsh-wechat-remote@latest
+```
+
+运行前请结束任务并通过原启动方式正常停止 Web；后台服务需先暂停自动重启。安装器不会强停会话或修改用户补丁。原生管理器安装与早期命令行安装都替换原有包，不添加第二份插件；新装使用标准原生包。
+
+在与 DSH 相同的系统用户下运行，需要 Node.js 22.13 或更高版本，无需另装 pnpm 或 Git。Windows CMD / PowerShell 推荐使用 `npx.cmd -y dsh-wechat-remote@latest`，不必修改脚本执行策略。使用 NPX 启动的 DSH 无需改成全局安装。
+
+安装器保留原配置、配对和会话，不升级 DSH 本体。停止状态下通过 DSH 原生插件命令安装；成功后尝试启动 WebUI。后台服务可加 `--no-start`，确认安装完成后由原服务启动，避免重复启动。若启动失败，查看安装日志；启动失败不会自动回退已安装插件，也不要删除数据。
+
+安装器内置完整插件，安装内置版本不依赖 GitHub 附件下载。仍检查安装归属、包完整性和已知不兼容问题；未登记的 CPU 或 DSH 版本不等于已验证，也不会单独因为缺少记录拒绝安装。
+
+默认使用 `web` 配置和原来的数据目录。自定义目录时保留相同的 `DSH_HOME`，或附加 `--home "数据目录"`；其他配置使用 `--profile 配置名称`。优先使用当前终端默认的 DSH；存在多份且无法确定时，请用 `--dsh-cli "DSH的lib/bin.js路径"` 明确选择。WSL、容器和其他系统用户需在对应环境执行，不能跨环境替换。
+
+停止 Web 后可用 `--repair` 主动重装，不会自动降级。旧的更新记录、备份和锁不会被自动删除或用来恢复宿主；结果不明时先核对记录，勿重复安装。
+
+Desktop 新装请在原生插件管理器中添加 `dsh-wechat-remote@latest`，已有安装使用插件内检查更新。本命令不安装、更新或停止 Desktop，也不支持 `--profile desktop`。提示待生效时，任务结束后完全退出并重新打开，无需重新配对。
+
+Web 和 Desktop 分别管理各自的插件更新。若安装后提示需要重启，请先等待任务结束：Desktop 完整退出后重新打开；Web 重启实际服务，仅刷新网页不会生效。无需重新配对。

package/assets/release.json

@@ -1,37 +1,22 @@
 {
-  "version": "1.7.13",
+  "version": "1.7.14-rc.69",
   "catalog": {
     "schemaVersion": 1,
-    "revision": "installer-1.7.13",
-    "issuedAt": 1790629914471,
-    "expiresAt": 1793049114471,
+    "revision": "installer-1.7.14-rc.69",
+    "issuedAt": 1792005013774,
+    "expiresAt": 1794424213774,
     "releases": [
       {
-        "version": "1.7.13",
-        "channel": "stable",
-        "dsh": [
-          "0.1.5-rc.2"
-        ],
-        "platforms": [
-          "windows"
-        ],
-        "architectures": [
-          "x64"
-        ],
+        "version": "1.7.14-rc.69",
+        "channel": "preview",
+        "dsh": [],
+        "platforms": [],
+        "architectures": [],
         "asset": {
-          "url": "https://github.com/martinbear1/dsh-wechat-remote/releases/download/v1.7.13/harness-remote-dsh-wechat-remote-1.7.13.tgz",
-          "sha256": "91ded20e6805b7cf27034bc5dbda443937ad8f7d905d087366080ace080b1893",
-          "bytes": 10422958
-        },
-        "targets": [
-          {
-            "platform": "windows",
-            "arch": "x64",
-            "dsh": [
-              "0.1.5-rc.2"
-            ]
-          }
-        ]
+          "url": "https://github.com/martinbear1/dsh-wechat-remote/releases/download/v1.7.14-rc.69/harness-remote-dsh-wechat-remote-1.7.14-rc.69.tgz",
+          "sha256": "b05d61ea8454efff0a7f2a5d749d7006f2e556324c5c10d2e05f6fdea117f0bd",
+          "bytes": 7266790
+        }
       }
     ],
     "blocked": [],

package/bin/companion-worker.mjs

@@ -1,42 +1,6 @@
-// Spawned only by an explicitly installed native bundle for an existing Web
-// owner. No shell, no Desktop profile and no recursive companion invocation.
-import fs from 'node:fs'
-import path from 'node:path'
-import { fileURLToPath } from 'node:url'
-import { install } from './setup.mjs'
-import { companionTarget, validateCompanionOffer, assertCompanionApproved } from '../lib/companion-updates.js'
-import { compareVersions } from '../lib/update-policy.js'
-const root = fileURLToPath(new URL('../', import.meta.url))
-const [home, version, previous, offerId] = process.argv.slice(2)
-// A UI/process closing after admission must not abort an installation or its
-// rollback merely because the optional progress receiver has disappeared.
-function notifyParent(value) {
-  if (!process.connected || !process.send) return
-  try { process.send(value, () => {}) } catch { /* transaction remains owned here */ }
-}
-try {
-  if (!home || !path.isAbsolute(home) || fs.realpathSync(home) !== path.normalize(home)) throw Error('DSH 数据目录不明确')
-  const manifest = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'))
-  const offer = JSON.parse(fs.readFileSync(path.join(home, 'harness-remote/installation-offers/web.json'), 'utf8'))
-  if (!offerId || offer.id !== offerId || offer.version !== version || offer.previous !== previous
-    || fs.realpathSync(offer.source) !== fs.realpathSync(root)) throw Error('联动更新请求或来源已变化，未执行旧请求')
-  const assertTarget = () => {
-    assertCompanionApproved(home, offer)
-    const current = validateCompanionOffer(home, 'web', offer)
-    if (current?.owner !== 'cli' || ![previous, version].includes(current.version)) throw Error('Web 安装归属或版本已变化，未覆盖')
-  }
-  const target = companionTarget(home, 'web')
-  assertTarget()
-  if (manifest.name !== 'dsh-wechat-remote' || manifest.version !== version || target?.owner !== 'cli'
-      || ![previous, version].includes(target.version)) throw Error('Web 安装归属或版本已变化，未覆盖')
-  if (compareVersions(version, target.version) > 0) {
-    const result = await install({ home, profileName: 'web', open: false, startAfterInstall: false, companion: false, bundledOnly: true,
-      deferBusy: true, assertTarget, onBusy: () => notifyParent({ type: 'companion-busy' }),
-      onProgress: value => notifyParent({ type: 'companion-progress', phase: value.phase }) })
-    if (result.version !== version) throw Error('Web 安装版本需要单独核对')
-  }
-} catch (error) {
-  console.error(error.message)
-  process.exitCode = error.code === 'DSH_COMPANION_BUSY' ? 75 : 1
-}
-finally { if (process.connected) process.disconnect() }
+/** Historical CLI Web cross-host worker. Native PluginManager updates remain
+ * in the owning application; this entry must never launch a CLI transaction. */
+import { legacyUpdateError } from '../lib/install-control.js'
+console.error(legacyUpdateError().message)
+process.exitCode = 1
+if (process.connected) process.disconnect()

package/bin/dsh-discovery.mjs

@@ -1,175 +1,189 @@
-/** Read-only discovery. A candidate is NOT the installation target until the
- * native, token-bound host handshake confirms its home/profile/CLI/PID.
- * Never run an unvalidated shell shim, fetch a different DSH, or scan a disk. */
-import fs from 'node:fs'
-import path from 'node:path'
-import os from 'node:os'
-import { execFile } from 'node:child_process'
-import { promisify } from 'node:util'
-import { createInterface } from 'node:readline/promises'
-
-const execute = promisify(execFile)
-const PACKAGE = '@deepseek-ai/dsh'
-const clean = value => String(value).replace(/[\x00-\x1f\x7f-\x9f]/g, '')
-const environmentPath = env => env[Object.keys(env).find(key => key.toLowerCase() === 'path')] || ''
-
-export function validateDshCli(filename) {
-  const cli = fs.realpathSync(path.resolve(filename))
-  const root = path.resolve(cli, '../..')
-  const manifest = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'))
-  const bin = typeof manifest.bin === 'string' ? manifest.bin : manifest.bin?.dsh
-  if (manifest.name !== PACKAGE || path.basename(cli) !== 'bin.js' || !fs.statSync(cli).isFile()
-      || typeof bin !== 'string' || fs.realpathSync(path.resolve(root, bin)) !== cli) {
-    throw new Error('指定路径不是有效的 DSH 启动程序，未修改安装。')
-  }
-  return { cli, version: String(manifest.version || '') }
-}
-
-export function resolveHome(value, fallback = os.homedir()) {
-  const raw = String(value || '')
-  const configured = raw.trim() ? raw : ''
-  return path.resolve(configured === '~' ? fallback : /^~[/\\]/.test(configured)
-    ? path.join(fallback, configured.slice(2)) : configured || path.join(fallback, '.dsh'))
-}
-
-/** npm's own config resolves .npmrc, custom cache/prefix and Node managers.
- * Query individual public values; never read or log registry credentials. */
-async function npmLocation(key, env, cwd) {
-  let npm = env.npm_execpath
-  if (!npm || !fs.existsSync(npm)) {
-    const roots = [path.dirname(process.execPath), ...environmentPath(env).split(path.delimiter)]
-    npm = roots.flatMap(dir => [path.join(dir, 'node_modules/npm/bin/npm-cli.js'),
-      path.join(dir, '../lib/node_modules/npm/bin/npm-cli.js')]).find(file => fs.existsSync(file))
-  }
-  if (!npm) return ''
-  try {
-    const { stdout } = await execute(process.execPath, [npm, 'config', 'get', key], {
-      cwd, env, windowsHide: true, timeout: 10000, maxBuffer: 16384,
-    })
-    const value = stdout.trim()
-    return value && !/[\r\n\0]/.test(value) && path.isAbsolute(value) ? value : ''
-  } catch { return '' }
-}
-
-export async function discoverDsh({ env = process.env, cwd = process.cwd(), cache, prefix } = {}) {
-  const found = new Map()
-  const add = (filename, source) => {
-    try {
-      const item = validateDshCli(filename)
-      if (!found.has(item.cli)) found.set(item.cli, { ...item, source })
-    } catch { /* A missing/broken cache entry is not a usable DSH. */ }
-  }
-  for (const dir of environmentPath(env).split(path.delimiter).filter(Boolean)) {
-    add(path.join(dir, 'dsh'), 'PATH') // POSIX symlink, never execute a Windows shim.
-    add(path.join(dir, 'node_modules/@deepseek-ai/dsh/lib/bin.js'), 'PATH')
-    add(path.join(dir, '../lib/node_modules/@deepseek-ai/dsh/lib/bin.js'), 'PATH')
-    add(path.join(dir, '../@deepseek-ai/dsh/lib/bin.js'), 'PATH') // npm .bin, including Windows.
-  }
-  for (let dir = path.resolve(cwd);;) {
-    add(path.join(dir, 'node_modules/@deepseek-ai/dsh/lib/bin.js'), 'project')
-    add(path.join(dir, 'apps/cli/lib/bin.js'), 'source')
-    const parent = path.dirname(dir)
-    if (parent === dir) break
-    dir = parent
-  }
-  const locations = await Promise.all([
-    cache !== undefined ? cache : env.npm_config_cache || npmLocation('cache', env, cwd),
-    prefix !== undefined ? prefix : npmLocation('prefix', env, cwd),
-  ])
-  if (locations[1]) {
-    add(path.join(locations[1], 'node_modules/@deepseek-ai/dsh/lib/bin.js'), 'npm-global')
-    add(path.join(locations[1], 'lib/node_modules/@deepseek-ai/dsh/lib/bin.js'), 'npm-global')
-  }
-  const cacheRoot = locations[0]
-  // Cached NPX versions cannot supersede a normal default executable. Avoid
-  // probing a large/unreadable cache when the terminal already has that default.
-  if (cacheRoot && found.size === 0) {
-    try {
-      const entries = fs.readdirSync(path.join(cacheRoot, '_npx'), { withFileTypes: true })
-      if (entries.length > 512) throw new Error('npx 缓存较多，请先启动要使用的 DSH，再运行安装命令。')
-      for (const entry of entries) if (/^[a-f0-9]+$/i.test(entry.name) && entry.isDirectory()) {
-        add(path.join(cacheRoot, '_npx', entry.name, 'node_modules/@deepseek-ai/dsh/lib/bin.js'), 'npx')
-      }
-    } catch (error) { if (error.code !== 'ENOENT' && error.code !== 'ENOTDIR') throw error }
-  }
-  return [...found.values()]
-}
-
-export async function chooseDsh(options = {}) {
-  if (options.cli) return validateDshCli(options.cli).cli
-  const candidates = await discoverDsh(options)
-  if (!candidates.length) throw new Error('未找到 DSH。请先按原来的方式启动 DSH WebUI，再运行本命令。')
-  // A stopped host has no handshake yet. Follow the terminal's ordinary DSH
-  // resolution before consulting old NPX cache entries; no version sorting or
-  // downloading. This fallback never overrides an already running host.
-  const normal = candidates.find(item => item.source === 'PATH')
-    || candidates.find(item => item.source === 'npm-global')
-    || candidates.find(item => item.source === 'project' || item.source === 'source')
-  if (normal) return normal.cli
-  if (candidates.length === 1) return candidates[0].cli
-  // Multiple cache-only versions are not evidence of the user's choice.
-  // A live host normally bypasses this fallback via its native handshake.
-  const prompt = options.prompt || (process.stdin.isTTY && process.stdout.isTTY ? async message => {
-    const rl = createInterface({ input: process.stdin, output: process.stdout })
-    try { return await rl.question(message) } finally { rl.close() }
-  } : undefined)
-  if (!prompt) throw new Error('找到多份 DSH。请先启动要使用的 DSH，或用 --dsh-cli 指定其 lib/bin.js；未修改插件。')
-  const list = candidates.map((item, index) => `${index + 1}. DSH ${clean(item.version)} — ${clean(item.cli)}`).join('\n')
-  const answer = String(await prompt(`找到多份 DSH，请选择要使用的一份（直接回车取消）：\n${list}\n编号：`)).trim()
-  const index = Number(answer) - 1
-  if (!/^\d+$/.test(answer) || !Number.isInteger(index) || !candidates[index]) throw new Error('已取消安装，未修改插件。')
-  return candidates[index].cli
-}
-
-// POSIX npm/npx normally starts through a bin symlink, not lib/bin.js.
-// This is a conservative stop signal only; target authority is the handshake.
-export function looksLikeDshProcess(command) {
-  return /(?:[/\\](?:dsh|apps[/\\]cli)[/\\]lib[/\\]bin\.js|[/\\](?:\.bin|bin)[/\\]dsh)(?:["'\s]|$)/i.test(command || '')
-}
-
-/** Conservatively prevent a second host while a live profile reloads on a
- * non-default port. We use process listings only as a stop signal, never as
- * authority to install, stop a PID, or select another user's data directory. */
-export async function mayHaveRunningDsh() {
-  try {
-    if (process.platform === 'win32') {
-      const command = "Get-CimInstance Win32_Process -Filter \"Name='node.exe' OR Name='node'\" | Select-Object -ExpandProperty CommandLine | ConvertTo-Json -Compress"
-      const { stdout } = await execute('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', command], {
-        windowsHide: true, timeout: 10000, maxBuffer: 1024 * 1024,
-      })
-      const data = stdout.trim() ? JSON.parse(stdout) : []
-      return [data].flat().some(looksLikeDshProcess)
-    }
-    if (process.platform === 'linux') {
-      for (const pid of fs.readdirSync('/proc').filter(name => /^\d+$/.test(name))) {
-        try {
-          const args = fs.readFileSync(`/proc/${pid}/cmdline`, 'utf8').split('\0')
-          if (args.some(looksLikeDshProcess)) return true
-        } catch { /* Exited or inaccessible process. */ }
-      }
-      return false
-    }
-    const { stdout } = await execute('/bin/ps', ['-axo', 'command='], { timeout: 10000, maxBuffer: 2 * 1024 * 1024 })
-    return looksLikeDshProcess(stdout)
-  } catch { return true } // Unknown process ownership must never authorize an extra host.
-}
-
-export function assertInstallTarget(host, { home, profile, cli, pid }) {
-  if (host.home !== home || host.profile !== profile || !Number.isInteger(host.pid) || host.pid < 1
-      || host.pid !== pid || (cli && host.cli !== validateDshCli(cli).cli)
-      || host.cli !== validateDshCli(host.cli).cli) {
-    throw new Error('当前 DSH 身份与安装目标不一致，未修改安装。')
-  }
-}
-
-/** Preserve arguments but use the validated real entry point for restart.
- * On macOS/Linux argv[0] can be npm's .bin/dsh symlink while host.cli is its
- * canonical target. The worker requires a canonical CLI, as the WebUI updater
- * already does. Never accept a different executable hidden in argv. */
-export function installHostArgv(host) {
-  if (!Array.isArray(host.argv) || !host.argv.length || !host.argv.every(arg => typeof arg === 'string')
-      || validateDshCli(host.argv[0]).cli !== host.cli) {
-    throw new Error('DSH 启动参数与安装目标不一致，未修改安装。')
-  }
-  return [host.cli, ...host.argv.slice(1)]
-}
+/** Read-only discovery for explicitly stopped-host CLI installation.
+ * Canonical CLI validation never grants authority to stop a running host.
+ * Never run an unvalidated shell shim, fetch a different DSH, or scan a disk. */
+import fs from 'node:fs'
+import path from 'node:path'
+import os from 'node:os'
+import { execFile } from 'node:child_process'
+import { promisify } from 'node:util'
+import { createInterface } from 'node:readline/promises'
+
+const execute = promisify(execFile)
+const PACKAGE = '@deepseek-ai/dsh'
+const clean = value => String(value).replace(/[\x00-\x1f\x7f-\x9f]/g, '')
+const environmentPath = env => env[Object.keys(env).find(key => key.toLowerCase() === 'path')] || ''
+
+export function validateDshCli(filename) {
+  const cli = fs.realpathSync(path.resolve(filename))
+  const root = path.resolve(cli, '../..')
+  const manifest = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'))
+  const bin = typeof manifest.bin === 'string' ? manifest.bin : manifest.bin?.dsh
+  if (manifest.name !== PACKAGE || path.basename(cli) !== 'bin.js' || !fs.statSync(cli).isFile()
+      || typeof bin !== 'string' || fs.realpathSync(path.resolve(root, bin)) !== cli) {
+    throw new Error('指定路径不是有效的 DSH 启动程序，未修改安装。')
+  }
+  return { cli, version: String(manifest.version || '') }
+}
+
+export function resolveHome(value, fallback = os.homedir()) {
+  const raw = String(value || '')
+  const configured = raw.trim() ? raw : ''
+  return path.resolve(configured === '~' ? fallback : /^~[/\\]/.test(configured)
+    ? path.join(fallback, configured.slice(2)) : configured || path.join(fallback, '.dsh'))
+}
+
+/** npm's own config resolves .npmrc, custom cache/prefix and Node managers.
+ * Query individual public values; never read or log registry credentials. */
+async function npmLocation(key, env, cwd) {
+  let npm = env.npm_execpath
+  if (!npm || !fs.existsSync(npm)) {
+    const roots = [path.dirname(process.execPath), ...environmentPath(env).split(path.delimiter)]
+    npm = roots.flatMap(dir => [path.join(dir, 'node_modules/npm/bin/npm-cli.js'),
+      path.join(dir, '../lib/node_modules/npm/bin/npm-cli.js')]).find(file => fs.existsSync(file))
+  }
+  if (!npm) return ''
+  try {
+    const { stdout } = await execute(process.execPath, [npm, 'config', 'get', key], {
+      cwd, env, windowsHide: true, timeout: 10000, maxBuffer: 16384,
+    })
+    const value = stdout.trim()
+    return value && !/[\r\n\0]/.test(value) && path.isAbsolute(value) ? value : ''
+  } catch { return '' }
+}
+
+export async function discoverDsh({ env = process.env, cwd = process.cwd(), cache, prefix } = {}) {
+  const found = new Map()
+  const add = (filename, source) => {
+    try {
+      const item = validateDshCli(filename)
+      if (!found.has(item.cli)) found.set(item.cli, { ...item, source })
+    } catch { /* A missing/broken cache entry is not a usable DSH. */ }
+  }
+  for (const dir of environmentPath(env).split(path.delimiter).filter(Boolean)) {
+    add(path.join(dir, 'dsh'), 'PATH') // POSIX symlink, never execute a Windows shim.
+    add(path.join(dir, 'node_modules/@deepseek-ai/dsh/lib/bin.js'), 'PATH')
+    add(path.join(dir, '../lib/node_modules/@deepseek-ai/dsh/lib/bin.js'), 'PATH')
+    add(path.join(dir, '../@deepseek-ai/dsh/lib/bin.js'), 'PATH') // npm .bin, including Windows.
+  }
+  for (let dir = path.resolve(cwd);;) {
+    add(path.join(dir, 'node_modules/@deepseek-ai/dsh/lib/bin.js'), 'project')
+    add(path.join(dir, 'apps/cli/lib/bin.js'), 'source')
+    const parent = path.dirname(dir)
+    if (parent === dir) break
+    dir = parent
+  }
+  const locations = await Promise.all([
+    cache !== undefined ? cache : env.npm_config_cache || npmLocation('cache', env, cwd),
+    prefix !== undefined ? prefix : npmLocation('prefix', env, cwd),
+  ])
+  if (locations[1]) {
+    add(path.join(locations[1], 'node_modules/@deepseek-ai/dsh/lib/bin.js'), 'npm-global')
+    add(path.join(locations[1], 'lib/node_modules/@deepseek-ai/dsh/lib/bin.js'), 'npm-global')
+  }
+  const cacheRoot = locations[0]
+  // Cached NPX versions cannot supersede a normal default executable. Avoid
+  // probing a large/unreadable cache when the terminal already has that default.
+  if (cacheRoot && found.size === 0) {
+    try {
+      const entries = fs.readdirSync(path.join(cacheRoot, '_npx'), { withFileTypes: true })
+      if (entries.length > 512) throw new Error('npx 缓存较多，请先启动要使用的 DSH，再运行安装命令。')
+      for (const entry of entries) if (/^[a-f0-9]+$/i.test(entry.name) && entry.isDirectory()) {
+        add(path.join(cacheRoot, '_npx', entry.name, 'node_modules/@deepseek-ai/dsh/lib/bin.js'), 'npx')
+      }
+    } catch (error) { if (error.code !== 'ENOENT' && error.code !== 'ENOTDIR') throw error }
+  }
+  return [...found.values()]
+}
+
+export async function chooseDsh(options = {}) {
+  if (options.cli) return validateDshCli(options.cli).cli
+  const candidates = await discoverDsh(options)
+  if (!candidates.length) throw new Error('未找到 DSH 命令行安装。请用 --dsh-cli 指定原 DSH 的 lib/bin.js；桌面应用请使用原生插件管理页。')
+  // For a stopped host, follow the terminal's ordinary DSH
+  // resolution before consulting old NPX cache entries; no version sorting or
+  // downloading. This fallback never overrides an already running host.
+  const normal = candidates.find(item => item.source === 'PATH')
+    || candidates.find(item => item.source === 'npm-global')
+    || candidates.find(item => item.source === 'project' || item.source === 'source')
+  if (normal) return normal.cli
+  if (candidates.length === 1) return candidates[0].cli
+  // Multiple cache-only versions are not evidence of the user's choice.
+  // A running host is refused by the caller; never launch it for discovery.
+  const prompt = options.prompt || (process.stdin.isTTY && process.stdout.isTTY ? async message => {
+    const rl = createInterface({ input: process.stdin, output: process.stdout })
+    try { return await rl.question(message) } finally { rl.close() }
+  } : undefined)
+  if (!prompt) throw new Error('找到多份 DSH。请用 --dsh-cli 指定要使用的 lib/bin.js；未修改插件。')
+  const list = candidates.map((item, index) => `${index + 1}. DSH ${clean(item.version)} — ${clean(item.cli)}`).join('\n')
+  const answer = String(await prompt(`找到多份 DSH，请选择要使用的一份（直接回车取消）：\n${list}\n编号：`)).trim()
+  const index = Number(answer) - 1
+  if (!/^\d+$/.test(answer) || !Number.isInteger(index) || !candidates[index]) throw new Error('已取消安装，未修改插件。')
+  return candidates[index].cli
+}
+
+// Read Node's executable and script position, never arbitrary later arguments.
+// Tests, npm and package inspectors legitimately pass DSH paths as data.
+// This only supplies a refusal signal, never authority to stop a process.
+const dshEntry = /(?:[/\\](?:dsh|apps[/\\]cli)[/\\]lib[/\\]bin\.js|[/\\](?:\.bin|bin)[/\\]dsh)$/i
+const nodeExecutable = /(?:^|[/\\])node(?:js|\.exe)?$/i
+const nodeValueFlags = new Set(['-r', '--require', '--import', '--loader', '--experimental-loader', '-C', '--conditions', '--icu-data-dir', '--openssl-config', '--redirect-warnings', '--diagnostic-dir'])
+const nonServerFlags = /^(?:-e|-p|-c|--eval|--print|--check|--test)(?:=|$)/
+function nodeScriptIndex(args) {
+  if (!nodeExecutable.test(args[0] || '')) return -1
+  for (let i = 1; i < args.length; i++) {
+    const value = args[i]
+    if (value === '--') return i + 1
+    if (nonServerFlags.test(value)) return -1
+    if (!value.startsWith('-')) return i
+    if (nodeValueFlags.has(value)) i++
+  }
+  return -1
+}
+export function looksLikeDshProcess(command) {
+  // /proc retains exact argument boundaries, including spaces in the script.
+  if (Array.isArray(command)) {
+    const index = nodeScriptIndex(command)
+    return index >= 0 && dshEntry.test(command[index] || '')
+  }
+  return String(command || '').split(/\r?\n/).some(line => {
+    const tokens = [...line.matchAll(/"[^"]*"|'[^']*'|\S+/g)]
+    const args = tokens.map(token => token[0].replace(/^(["'])(.*)\1$/s, '$2'))
+    const index = nodeScriptIndex(args)
+    if (index < 0 || !tokens[index]) return false
+    if (dshEntry.test(args[index])) return true
+    if (/^["']/.test(tokens[index][0]) || !/^(?:[/\\]|[A-Za-z]:[/\\])/.test(args[index])
+        || /\.(?:[cm]?js|ts)$/i.test(args[index])) return false
+    // macOS ps loses argv quoting. Reassemble only this first absolute script
+    // path with spaces; never advance past an earlier script or another path.
+    const rest = line.slice(tokens[index].index)
+    const entry = rest.match(/^(.*?(?:[/\\](?:dsh|apps[/\\]cli)[/\\]lib[/\\]bin\.js|[/\\](?:\.bin|bin)[/\\]dsh))(?=\s|$)/i)?.[1]
+    return Boolean(entry && !/\s(?:-|[/\\]|[A-Za-z]:[/\\])|\.(?:[cm]?js|ts)\s/i.test(entry))
+  })
+}
+
+/** Conservatively refuse stopped-host installation while Web is running on a
+ * non-default port. We use process listings only as a stop signal, never as
+ * authority to install, stop a PID, or select another user's data directory. */
+export async function mayHaveRunningDsh() {
+  try {
+    if (process.platform === 'win32') {
+      const command = "Get-CimInstance Win32_Process -Filter \"Name='node.exe' OR Name='node'\" | Select-Object -ExpandProperty CommandLine | ConvertTo-Json -Compress"
+      const { stdout } = await execute('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', command], {
+        windowsHide: true, timeout: 10000, maxBuffer: 1024 * 1024,
+      })
+      const data = stdout.trim() ? JSON.parse(stdout) : []
+      return [data].flat().some(looksLikeDshProcess)
+    }
+    if (process.platform === 'linux') {
+      for (const pid of fs.readdirSync('/proc').filter(name => /^\d+$/.test(name))) {
+        try {
+          const args = fs.readFileSync(`/proc/${pid}/cmdline`, 'utf8').split('\0')
+          if (looksLikeDshProcess(args)) return true
+        } catch { /* Exited or inaccessible process. */ }
+      }
+      return false
+    }
+    const { stdout } = await execute('/bin/ps', ['-axo', 'command='], { timeout: 10000, maxBuffer: 2 * 1024 * 1024 })
+    return looksLikeDshProcess(stdout)
+  } catch { return true } // Unknown process ownership must never authorize an extra host.
+}