dsh-wechat-remote 1.7.9 → 1.7.12-rc.10

package/README.md

@@ -1,6 +1,6 @@
 # Agent远程管理助手 · DSH 插件安装器
 
-当前版本为 `1.7.9`，内嵌同版本正式插件。
+命令行入口用于 DSH Web；安装包内置配套插件。1.7.12-rc.10 为 Desktop 适配预览测试版，不建议用于日常节点；正式推荐版本仍为 1.7.10，以下 `latest` 命令不会安装本预览版。
 
 首次安装和升级旧插件使用同一个命令：
 
@@ -16,13 +16,17 @@ DSH 的新版本、预览版本或未登记的主机架构不会仅因缺少验
 
 本版沿用此前已验证的跨平台安装方案，具体发行包与宿主组合以验收记录为准。普通 Node 启动、独立的 macOS launchd 和 Linux 用户级 systemd 服务有对应的自动恢复方式；无法确认启动方式时不自动停止主机。
 
-安装过程中请等待完成，勿重复执行命令。
-
-本版安装器内置完整插件，安装当前版本不依赖 GitHub 附件下载。安装后，WebUI 一键更新在 GitHub 网络下载失败时可以从已核验的 npm 安装包中取回同一插件。该能力不回写旧插件；旧插件遇到 GitHub 下载失败时，先使用上面的 npm 命令升级即可。
+安装过程中请等待完成，勿重复执行命令。
+
+本版安装器内置完整插件，安装当前版本不依赖 GitHub 附件下载。安装后，WebUI 一键更新在 GitHub 网络下载失败时可以从已核验的 npm 安装包中取回同一插件。该能力不回写旧插件；旧插件遇到 GitHub 下载失败时，先使用上面的 npm 命令升级即可。
 
 旧插件的一键更新如被版本或架构判断拦截，可用上述安装命令升级一次。从插件 1.7.6 起，未登记的 CPU 架构或 DSH 版本不再影响更新入口；执行前仍会检查实际安装与重启条件，无需因此降低 DSH 版本或删除节点。
 
-默认使用 `web` 配置和原来的 DSH 数据目录。自定义数据目录时，在新终端设置相同的 `DSH_HOME`，或附加 `--home "数据目录"`；使用其他配置时附加 `--profile 配置名称`。WSL、容器和其他系统用户内的 DSH，需要在对应环境中执行安装，不能跨环境替换。
+默认使用 `web` 配置和原来的 DSH 数据目录。自定义数据目录时，在新终端设置相同的 `DSH_HOME`，或附加 `--home "数据目录"`；使用其他配置时附加 `--profile 配置名称`。WSL、容器和其他系统用户内的 DSH，需要在对应环境中执行安装，不能跨环境替换。
+
+Desktop 由桌面应用的原生插件管理器负责安装和更新，不支持用 `--profile desktop` 绕过它。本预览版正在验证两端联动更新：发现另一端可更新时先提示，确认后等待空闲再处理，也可选择稍后。仅处理同一系统用户、同一数据目录下已经安装并启用的插件；需要另一端原生更新能力配合，可能需要重启。未完成联动时保留另一端原状并提示，不代表两端已更新。当前 npm `latest` 不因本预览版而获得 Desktop 支持。
+
+同一个 Web 节点请勿重复添加两种微信连接插件包。若原先通过原生插件管理页安装了 `dsh-wechat-remote`，仍回到该页面更新；一行安装器会提示安装来源不匹配，不会再添加另一份。
 
 DSH 正在运行时，优先连接它自己的安装接口；未运行时，优先使用当前终端默认的 DSH，再检查全局、当前项目和 NPX 缓存。只有存在多份缓存且没有默认选择时才询问。也可用 `--dsh-cli "DSH的lib/bin.js路径"` 明确指定。
 

package/assets/release.json

@@ -1,28 +1,21 @@
 {
-  "version": "1.7.9",
+  "version": "1.7.12-rc.10",
   "catalog": {
     "schemaVersion": 1,
-    "revision": "installer-1.7.9",
-    "issuedAt": 1790053952064,
-    "expiresAt": 1792473152064,
+    "revision": "installer-1.7.12-rc.10",
+    "issuedAt": 1790607866139,
+    "expiresAt": 1793027066139,
     "releases": [
       {
-        "version": "1.7.9",
-        "channel": "stable",
-        "dsh": [
-          "0.1.5-rc.1"
-        ],
-        "platforms": [
-          "windows",
-          "macos"
-        ],
-        "architectures": [
-          "x64"
-        ],
+        "version": "1.7.12-rc.10",
+        "channel": "preview",
+        "dsh": [],
+        "platforms": [],
+        "architectures": [],
         "asset": {
-          "url": "https://github.com/martinbear1/dsh-wechat-remote/releases/download/v1.7.9/harness-remote-dsh-wechat-remote-1.7.9.tgz",
-          "sha256": "c0b592f90d67e63af3b4f03592bf1365828c7d404f0b5d3a812ca4a1a8439cda",
-          "bytes": 10361441
+          "url": "https://github.com/martinbear1/dsh-wechat-remote/releases/download/v1.7.12-rc.10/harness-remote-dsh-wechat-remote-1.7.12-rc.10.tgz",
+          "sha256": "1be8f1ae9aea52d5bd6ca7916e7126486918165292ee6d515235b9ad2a824906",
+          "bytes": 10420694
         }
       }
     ],

package/bin/companion-worker.mjs

@@ -0,0 +1,42 @@
+// Spawned only by an explicitly installed native bundle for an existing Web
+// owner. No shell, no Desktop profile and no recursive companion invocation.
+import fs from 'node:fs'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { install } from './setup.mjs'
+import { companionTarget, validateCompanionOffer, assertCompanionApproved } from '../lib/companion-updates.js'
+import { compareVersions } from '../lib/update-policy.js'
+const root = fileURLToPath(new URL('../', import.meta.url))
+const [home, version, previous, offerId] = process.argv.slice(2)
+// A UI/process closing after admission must not abort an installation or its
+// rollback merely because the optional progress receiver has disappeared.
+function notifyParent(value) {
+  if (!process.connected || !process.send) return
+  try { process.send(value, () => {}) } catch { /* transaction remains owned here */ }
+}
+try {
+  if (!home || !path.isAbsolute(home) || fs.realpathSync(home) !== path.normalize(home)) throw Error('DSH 数据目录不明确')
+  const manifest = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'))
+  const offer = JSON.parse(fs.readFileSync(path.join(home, 'harness-remote/installation-offers/web.json'), 'utf8'))
+  if (!offerId || offer.id !== offerId || offer.version !== version || offer.previous !== previous
+    || fs.realpathSync(offer.source) !== fs.realpathSync(root)) throw Error('联动更新请求或来源已变化，未执行旧请求')
+  const assertTarget = () => {
+    assertCompanionApproved(home, offer)
+    const current = validateCompanionOffer(home, 'web', offer)
+    if (current?.owner !== 'cli' || ![previous, version].includes(current.version)) throw Error('Web 安装归属或版本已变化，未覆盖')
+  }
+  const target = companionTarget(home, 'web')
+  assertTarget()
+  if (manifest.name !== 'dsh-wechat-remote' || manifest.version !== version || target?.owner !== 'cli'
+      || ![previous, version].includes(target.version)) throw Error('Web 安装归属或版本已变化，未覆盖')
+  if (compareVersions(version, target.version) > 0) {
+    const result = await install({ home, profileName: 'web', open: false, startAfterInstall: false, companion: false, bundledOnly: true,
+      deferBusy: true, assertTarget, onBusy: () => notifyParent({ type: 'companion-busy' }),
+      onProgress: value => notifyParent({ type: 'companion-progress', phase: value.phase }) })
+    if (result.version !== version) throw Error('Web 安装版本需要单独核对')
+  }
+} catch (error) {
+  console.error(error.message)
+  process.exitCode = error.code === 'DSH_COMPANION_BUSY' ? 75 : 1
+}
+finally { if (process.connected) process.disconnect() }

package/bin/native-control.mjs

@@ -59,7 +59,7 @@ export async function waitForJson(filename, accept, timeout = 20000) {
 /** One bounded native handshake, including a possible offline host start.
  * A listening WebUI is not proof that the asynchronous profile reload finished.
  * Keep the same control entry/token while waiting; never restart a live host. */
-export async function waitForInstallControl(filename, {
+export async function waitForInstallControl(filename, {
   accept, ensureRunning, onWaiting = () => {}, timeoutMs = 180000, initialWaitMs = 5000,
 }) {
   const deadline = Date.now() + timeoutMs
@@ -69,4 +69,24 @@ export async function waitForInstallControl(filename, {
     if (Date.now() < deadline) await ensureRunning()
     return await waitForJson(filename, accept, Math.max(0, deadline - Date.now()))
   }
-}
+}
+
+/** A single bounded, authenticated waiting operation. Never stop or install
+ * while busy; every actual update still rechecks and flushes inside the host. */
+export async function waitForWebIdle(read, {
+  onBusy = () => {}, timeoutMs = 30 * 60 * 1000, intervalMs = 5000,
+  now = Date.now, wait = ms => new Promise(resolve => setTimeout(resolve, ms)),
+} = {}) {
+  const deadline = now() + timeoutMs
+  let reported = false
+  for (;;) {
+    const value = await read()
+    if (!Array.isArray(value?.items) || value.items.some(row => typeof row.running !== 'boolean')) {
+      throw Error('无法确认 Web 会话状态，未更新插件。')
+    }
+    if (!value.items.some(row => row.running)) return
+    if (!reported) { onBusy(); reported = true }
+    if (now() >= deadline) throw Object.assign(Error('Web 任务尚未结束，原插件未替换。'), { code: 'DSH_COMPANION_BUSY' })
+    await wait(Math.min(intervalMs, deadline - now()))
+  }
+}

package/bin/native-recovery.mjs

@@ -1,5 +1,5 @@
-/** Verify a restored, plugin-free DSH through the same native control adapter.
- * Only the first-install rollback uses this; ordinary updates probe the plugin.
+/** Verify a restored DSH through the same independent native control adapter.
+ * Also supports restoring an already-broken plugin, without claiming it is fixed.
  * Bundled outside the profile so neither a failed add nor rollback removes it. */
 import fs from 'node:fs'
 import path from 'node:path'
@@ -29,7 +29,7 @@ export async function verifyNativeRestore(job, start, sessionIds, readableIds) {
       && /^http:\/\/127\.0\.0\.1:[1-9]\d{0,4}$/.test(value.origin), 180000)
     const host = await request('describe')
     if (host.pid !== ref.pid || host.home !== job.home || host.profile !== job.profile
-      || host.cli !== job.cli || host.dshVersion !== job.dshVersion || host.pluginVersion !== '0.0.0') {
+      || host.cli !== job.cli || host.dshVersion !== job.dshVersion || host.pluginVersion !== job.previousVersion) {
       throw new Error('恢复后的 DSH 身份不匹配。')
     }
     const items = (await request('read', { method: 'session.list' })).items

package/bin/setup.mjs

@@ -5,13 +5,14 @@ import net from 'node:net'
 import { spawn } from 'node:child_process'
 import { randomBytes, createHash } from 'node:crypto'
 import { fileURLToPath } from 'node:url'
-import { attachControl, waitForJson, waitForInstallControl } from './native-control.mjs'
+import { attachControl, waitForJson, waitForInstallControl, waitForWebIdle } from './native-control.mjs'
 import { resolveInstallRuntime, verifyInstallRuntime } from '../lib/install-runtime.js'
-import { installProfile, backupProfile, NativeInstallError } from '../lib/install-profile.js'
+import { installProfile, backupProfile, NativeInstallError, assertCliInstallOwner } from '../lib/install-profile.js'
 import { compareVersions } from '../lib/update-policy.js'
 import { selectInstallTarget } from './release-selection.mjs'
 import { boundedFetch, downloadRelease, auditArchive, DownloadUnavailableError } from '../lib/update-download.js'
-import { writePrivateJsonAtomic } from '../lib/secure-file.js'
+import { writePrivateJsonAtomic } from '../lib/secure-file.js'
+import { offerCompanionUpdate } from '../lib/companion-updates.js'
 import { control, validateJob, releaseOwnedUpdateLock } from '../lib/update-worker.js'
 import { chooseDsh, validateDshCli, resolveHome, mayHaveRunningDsh, assertInstallTarget, installHostArgv } from './dsh-discovery.mjs'
 
@@ -25,8 +26,8 @@ function portBusy(port) {
     socket.setTimeout(500, () => end(false)); socket.once('connect', () => end(true)); socket.once('error', () => end(false))
   })
 }
-export async function selectRelease(host, assetsRoot = path.join(root, 'assets'), repair = false,
-  fetchCatalog = () => boundedFetch('https://relay.xyxfood.xyz/v1/update-policy', 256 * 1024), fetchPackage = fetch) {
+export async function selectRelease(host, assetsRoot = path.join(root, 'assets'), repair = false,
+  fetchCatalog = () => boundedFetch('https://relay.xyxfood.xyz/v1/update-policy', 256 * 1024), fetchPackage = fetch, bundledOnly = false) {
   const current = { agentKind: 'dsh', agentVersion: host.dshVersion, pluginVersion: host.pluginVersion,
     platform: { win32: 'windows', darwin: 'macos', linux: 'linux' }[host.platform], arch: host.arch }
   const pinned = JSON.parse(fs.readFileSync(path.join(assetsRoot, 'release.json'), 'utf8'))
@@ -35,7 +36,7 @@ export async function selectRelease(host, assetsRoot = path.join(root, 'assets')
     remote = JSON.parse((await fetchCatalog()).toString('utf8'))
   } catch { /* Authenticated npm package retains its bundled release. */ }
   const selectionTime = Date.now()
-  let release = selectInstallTarget(pinned, remote, current, selectionTime)
+  let release = selectInstallTarget(pinned, remote, current, selectionTime, bundledOnly)
   if (host.pluginVersion !== '0.0.0' && (compareVersions(host.pluginVersion, release.version) > 0
     || (compareVersions(host.pluginVersion, release.version) === 0 && !repair))) return { release, archive: null }
   let archive
@@ -62,11 +63,14 @@ export async function selectRelease(host, assetsRoot = path.join(root, 'assets')
 
 /** With no running host, native plugin add needs neither HMR nor healthy third-
  * party plugins. Reuse the same installation core; only live hosts need disposal. */
-async function installStopped({ cli, home, profile, profileName, directory, id, runtime, assetsRoot, repair, open }) {
+async function installStopped({ cli, home, profile, profileName, directory, id, runtime, assetsRoot, repair, open, bundledOnly, startAfterInstall, assertTarget, onProgress }) {
   const dsh = validateDshCli(cli)
   let version = '0.0.0'
   try { version = JSON.parse(fs.readFileSync(path.join(profile, 'node_modules', packageName, 'package.json'), 'utf8')).version } catch {}
-  const selected = await selectRelease({ dshVersion: dsh.version, pluginVersion: version, platform: process.platform, arch: process.arch }, assetsRoot, repair)
+  // A stopped host cannot prove its installed copy is loadable. Re-executing
+  // the normal installation command also repairs that copy (never downgrades),
+  // using the same backed-up native add rather than a second repair workflow.
+  const selected = await selectRelease({ dshVersion: dsh.version, pluginVersion: version, platform: process.platform, arch: process.arch }, assetsRoot, repair || version !== '0.0.0', undefined, undefined, bundledOnly)
   fs.mkdirSync(profile, { recursive: true, mode: 0o700 })
   if (fs.realpathSync(profile) !== profile) throw new Error('无法确认 DSH 配置目录的实际位置。')
   const lock = path.join(profile, '.harness-remote-update.lock')
@@ -75,22 +79,28 @@ async function installStopped({ cli, home, profile, profileName, directory, id,
   try {
     // Recheck immediately before writing: a host may have started during npm
     // discovery/download. Never mutate its dependencies underneath that process.
-    if (await mayHaveRunningDsh()) throw new Error('DSH 已开始运行，请重新执行安装命令以连接该实例。')
+    if (await mayHaveRunningDsh()) throw new Error('DSH 已开始运行，请重新执行安装命令以连接该实例。')
+    assertTarget()
     if (selected.archive) {
       fs.writeFileSync(path.join(directory, 'release.tgz'), selected.archive, { mode: 0o600, flag: 'wx' })
       backupProfile(profile, path.join(directory, 'profile-before'))
-      console.log(`正在通过 DSH 原生方式安装插件 ${selected.release.version}…`)
+      console.log(`正在通过 DSH 原生方式安装插件 ${selected.release.version}…`)
+      onProgress({ phase: 'installing' })
       modified = true
       await installProfile({ profile, directory, cli: dsh.cli, targetVersion: selected.release.version, runtime })
     }
   } catch (error) {
     keepLock = error instanceof NativeInstallError && error.mayStillBeRunning
-    if (modified && !keepLock) {
+    if (modified && !keepLock) {
+      onProgress({ phase: 'rolling-back' })
       fs.renameSync(profile, path.join(directory, 'profile-failed'))
       fs.renameSync(path.join(directory, 'profile-before'), profile)
     }
     throw error
-  } finally { if (!keepLock) releaseOwnedUpdateLock(lock, id) }
+  } finally { if (!keepLock) releaseOwnedUpdateLock(lock, id) }
+  if (startAfterInstall === false) {
+    return { version: selected.archive ? selected.release.version : version, changed: Boolean(selected.archive), starting: false }
+  }
   // Use DSH's own browser opening behavior. Startup failure does not undo an
   // otherwise successful native add; an unrelated plugin can fail to boot.
   const logFile = path.join(directory, 'startup.log'), log = fs.openSync(logFile, 'a', 0o600)
@@ -107,23 +117,30 @@ async function installStopped({ cli, home, profile, profileName, directory, id,
   console.log(`插件 ${installedVersion} 已安装。${starting ? '已启动 DSH，请等待 WebUI 就绪。' : `DSH 未能启动，请查看：${logFile}`}`)
   return { version: installedVersion, changed: Boolean(selected.archive), starting: Boolean(starting) }
 }
-export async function install({ profileName = 'web', cli, home: configuredHome, assetsRoot, open = true, repair = false } = {}) {
-  if (!/^[A-Za-z0-9_-]{1,80}$/.test(profileName)) throw new Error('无效的 profile 名称。')
-  if (cli) cli = validateDshCli(cli).cli
-  const runtime = resolveInstallRuntime(root); await verifyInstallRuntime(runtime)
-  const home = resolveHome(configuredHome || process.env.DSH_HOME)
+async function installSingle({ profileName = 'web', cli, home: configuredHome, assetsRoot, open = true, repair = false, bundledOnly = false,
+  startAfterInstall = true, deferBusy = false, onBusy = () => {}, onProgress = () => {}, assertTarget = () => {} } = {}) {
+  if (!/^[A-Za-z0-9_-]{1,80}$/.test(profileName)) throw new Error('无效的 profile 名称。')
+  if (profileName.toLowerCase() === 'desktop') throw new Error('Desktop 由桌面应用管理。请在其插件管理页安装插件包；未修改 Desktop 或 Web 配置。')
+  if (cli) cli = validateDshCli(cli).cli
+  const home = resolveHome(configuredHome || process.env.DSH_HOME)
+  const profile = path.join(home, 'profiles', profileName)
+  // Refuse a different package owner before downloads, locks, HMR or helpers.
+  assertCliInstallOwner(profile)
+  const runtime = resolveInstallRuntime(root); await verifyInstallRuntime(runtime)
   fs.mkdirSync(home, { recursive: true, mode: 0o700 })
   if (fs.realpathSync(home) !== home) throw new Error('DSH 数据目录是链接，暂不自动替换安装。')
-  const profile = path.join(home, 'profiles', profileName), id = randomBytes(16).toString('hex')
+  const id = randomBytes(16).toString('hex')
   const directory = path.join(home, 'harness-remote-updates', id), token = randomBytes(24).toString('hex')
   fs.mkdirSync(directory, { recursive: true, mode: 0o700 })
   let remove, ref, job, locked = false, authorized = false, launched
   const lockFile = path.join(profile, '.harness-remote-update.lock')
-  console.log('正在检查 DSH 与插件…')
+  console.log(`正在检查 DSH ${profileName === 'web' ? 'Web' : profileName} 与插件；不直接修改 Desktop 安装…`)
+  onProgress({ phase: 'preparing' })
   try {
     if (!await mayHaveRunningDsh()) {
       cli ||= await chooseDsh()
-      return await installStopped({ cli, home, profile, profileName, directory, id, runtime, assetsRoot, repair, open })
+      assertTarget()
+      return await installStopped({ cli, home, profile, profileName, directory, id, runtime, assetsRoot, repair, open, bundledOnly, startAfterInstall, assertTarget, onProgress })
     }
     // A live host must identify the same home/profile; never synthesize a second
     // profile just because this terminal inherited different environment values.
@@ -168,31 +185,41 @@ export async function install({ profileName = 'web', cli, home: configuredHome,
     // The authenticated live host is authoritative. A global install or cached
     // version found on PATH must not override the actual npx/local/source host.
     // Explicit choices and installer-started hosts still require an exact match.
-    assertInstallTarget(host, { home, profile, cli, pid: launched?.pid || ref.pid })
-    remove(); remove = undefined
-    await sleep(600)
-    let selected = await selectRelease(host, assetsRoot, repair)
+    assertInstallTarget(host, { home, profile, cli, pid: launched?.pid || ref.pid })
+    remove(); remove = undefined
+    await sleep(600)
+    if (deferBusy) await waitForWebIdle(() => {
+      assertTarget()
+      return control(job, 'read', { method: 'session.list' })
+    }, { onBusy })
+    assertTarget()
+    let selected = await selectRelease(host, assetsRoot, repair, undefined, undefined, bundledOnly)
     if (!selected.archive && host.pluginVersion === selected.release.version) {
       // A version string on disk is not proof that a prior restart completed.
       // Re-running the normal command must also repair a stuck installed copy.
       let ready = false
       try {
         const response = await fetch(`http://127.0.0.1:${host.localPort}/gate/status`, { signal: AbortSignal.timeout(5000), redirect: 'error' })
-        await response.arrayBuffer(); ready = response.ok
+        await response.arrayBuffer()
+        const business = response.ok ? await control(job, 'health') : undefined
+        ready = business?.ready === true
       } catch {}
       if (!ready) {
         console.log('检测到已安装插件尚未就绪，正在重新安装修复…')
-        selected = await selectRelease(host, assetsRoot, true)
+        selected = await selectRelease(host, assetsRoot, true, undefined, undefined, bundledOnly)
       }
     }
     if (!selected.archive) { console.log(`插件 ${host.pluginVersion} 无需更新。`); return { version: host.pluginVersion, changed: false } }
     console.log(`正在安装插件 ${selected.release.version}，保留原配对与会话…`)
     job = { ...host, argv: installHostArgv(host), id, directory, parentPid: host.pid, pnpm: runtime.cli, targetVersion: selected.release.version,
       previousVersion: host.pluginVersion, statusToken: token, controlOrigin: ref.origin }
-    validateJob(job)
+    validateJob(job)
+    assertTarget()
     fs.writeFileSync(path.join(directory, 'release.tgz'), selected.archive, { mode: 0o600, flag: 'wx' })
     fs.copyFileSync(path.join(root, 'lib/update-worker.js'), path.join(directory, 'update-worker.js'))
-    if (host.pluginVersion === '0.0.0') fs.copyFileSync(path.join(root, 'lib/native-recovery.js'), path.join(directory, 'native-recovery.js'))
+    // Recovery belongs to the independent installer, including when the old
+    // plugin already failed before this operation and cannot serve health RPC.
+    fs.copyFileSync(path.join(root, 'lib/native-recovery.js'), path.join(directory, 'native-recovery.js'))
     writePrivateJsonAtomic(path.join(directory, 'job.json'), job)
     await control(job, 'launch')
     const ready = await waitForJson(path.join(directory, 'worker-ready.json'), v => v.id === id)
@@ -205,7 +232,10 @@ export async function install({ profileName = 'web', cli, home: configuredHome,
     const until = Date.now() + 1200000
     while (Date.now() < until) {
       try { result = JSON.parse(fs.readFileSync(path.join(directory, 'result.json'), 'utf8')) } catch {}
-      if (result?.phase !== previous && result?.phase) { console.log(`${result.progress}% ${result.message}`); previous = result.phase }
+      if (result?.phase !== previous && result?.phase) {
+        console.log(`${result.progress}% ${result.message}`); previous = result.phase
+        onProgress({ phase: result.phase })
+      }
       if (result?.terminal) break
       await sleep(500)
     }
@@ -228,8 +258,19 @@ export async function install({ profileName = 'web', cli, home: configuredHome,
       if (locked && !authorized) releaseOwnedUpdateLock(lockFile, id)
     }
   }
-}
-export function parseArguments(args) {
+}
+export async function install(options = {}) {
+  const result = await installSingle(options)
+  if ((options.profileName || 'web') === 'web' && options.companion !== false) {
+    try {
+      const home = resolveHome(options.home || process.env.DSH_HOME)
+      const offer = offerCompanionUpdate(home, 'web', root, result.version)
+      if (offer) console.log('已发现 Desktop 插件可更新，尚未开始。请在 Desktop 的插件页或“设置 → 微信连接”确认；旧版不支持确认时，请使用其原生插件管理器更新。')
+    } catch { console.log('Web 已完成安装；另一端未自动更新，仍可使用它自己的原生插件管理入口。') }
+  }
+  return result
+}
+export function parseArguments(args) {
   const options = {}, seen = new Set()
   const names = { '--profile': 'profileName', '--dsh-cli': 'cli', '--home': 'home' }
   for (let i = 0; i < args.length; i++) {
@@ -244,6 +285,6 @@ export function parseArguments(args) {
 }
 if (process.argv[1] && fs.realpathSync(process.argv[1]) === fileURLToPath(import.meta.url)) {
   const args = process.argv.slice(2)
-  if (args.includes('--help') || args.includes('-h')) console.log('安装或升级 DSH 微信连接插件：npx -y dsh-wechat-remote@latest\n支持全局安装与 npx 使用的 DSH，已启动或关闭均可；请在相同系统账号下执行。Windows 可使用 npx.cmd。\n可选：--profile <名称>（默认 web）；--home <DSH 数据目录>；--dsh-cli <DSH 的 lib/bin.js>；--repair（重新安装，不降级）')
+  if (args.includes('--help') || args.includes('-h')) console.log('安装或升级 DSH Web 微信连接插件：npx -y dsh-wechat-remote@latest\n支持全局安装与 npx 使用的 DSH Web，已启动或关闭均可；请在相同系统账号下执行。Windows 可使用 npx.cmd。\nDesktop 首次安装请使用桌面应用的插件管理页；已安装的 Desktop 可接收同版本更新通知，由桌面应用处理。此命令不直接修改 Desktop，也不支持 --profile desktop。\n可选：--profile <名称>（默认 web）；--home <DSH 数据目录>；--dsh-cli <DSH 的 lib/bin.js>；--repair（重新安装，不降级）')
   else Promise.resolve().then(() => install(parseArguments(args))).catch(error => { console.error(error.message); process.exitCode = 1 })
 }

package/cordis.patch.yml

@@ -0,0 +1,6 @@
+# Native DSH installation loads the same audited core shipped for CLI recovery.
+# A relative entry is anchored by the official bundle loader to this package,
+# not resolved against another profile's potentially different plugin version.
+- insert:
+    - id: gate
+      name: './native/lib/index.js'