dshmarket 1.12.1 → 1.12.2

package/client/client.js

@@ -967,155 +967,155 @@ window.__ModuleLoader__.load({ id: "dshmarket", factory: (require) => {
 			document.head.appendChild(tag);
 		}
 		var Market_module_css_default = {
+			"dragHandle": "eGUBIq_dragHandle",
+			"row1": "eGUBIq_row1",
+			"src": "eGUBIq_src",
+			"sub": "eGUBIq_sub",
+			"actWhy": "eGUBIq_actWhy",
+			"grid": "eGUBIq_grid",
+			"dot": "eGUBIq_dot",
+			"depLine": "eGUBIq_depLine",
+			"backupGrid": "eGUBIq_backupGrid",
+			"specTagFile": "eGUBIq_specTagFile",
+			"assignRow": "eGUBIq_assignRow",
+			"card": "eGUBIq_card",
+			"staleAction": "eGUBIq_staleAction",
+			"setTitle": "eGUBIq_setTitle",
+			"viewOn": "eGUBIq_viewOn",
 			"tabs": "eGUBIq_tabs",
-			"groupHead": "eGUBIq_groupHead",
-			"setCard": "eGUBIq_setCard",
-			"orphBadge": "eGUBIq_orphBadge",
-			"switchMixed": "eGUBIq_switchMixed",
-			"groupName": "eGUBIq_groupName",
-			"backupCheck": "eGUBIq_backupCheck",
-			"groupAddPanel": "eGUBIq_groupAddPanel",
-			"sectionOverview": "eGUBIq_sectionOverview",
-			"viewBar": "eGUBIq_viewBar",
-			"diagIndex": "eGUBIq_diagIndex",
-			"head": "eGUBIq_head",
-			"setLabel": "eGUBIq_setLabel",
-			"diagCount": "eGUBIq_diagCount",
-			"barFill": "eGUBIq_barFill",
-			"actWarn": "eGUBIq_actWarn",
-			"diagSummary": "eGUBIq_diagSummary",
-			"orphRow": "eGUBIq_orphRow",
-			"dshmSlide": "eGUBIq_dshmSlide",
+			"err": "eGUBIq_err",
+			"backupInput": "eGUBIq_backupInput",
+			"bannerHint": "eGUBIq_bannerHint",
+			"grow": "eGUBIq_grow",
+			"diagBadgeOfficial": "eGUBIq_diagBadgeOfficial",
+			"diagBadgeShadow": "eGUBIq_diagBadgeShadow",
+			"cmd": "eGUBIq_cmd",
+			"bar": "eGUBIq_bar",
+			"catsToggle": "eGUBIq_catsToggle",
+			"deprecate": "eGUBIq_deprecate",
+			"irow": "eGUBIq_irow",
+			"diagRow": "eGUBIq_diagRow",
+			"inlineInput": "eGUBIq_inlineInput",
+			"panelNote": "eGUBIq_panelNote",
+			"pagerPages": "eGUBIq_pagerPages",
+			"swatches": "eGUBIq_swatches",
+			"setDesc": "eGUBIq_setDesc",
+			"sectAction": "eGUBIq_sectAction",
+			"setRow": "eGUBIq_setRow",
+			"backupWarn": "eGUBIq_backupWarn",
+			"dragging": "eGUBIq_dragging",
+			"tag": "eGUBIq_tag",
 			"diagKey": "eGUBIq_diagKey",
-			"dragOver": "eGUBIq_dragOver",
+			"diagSummary": "eGUBIq_diagSummary",
+			"diagBadgeCommunity": "eGUBIq_diagBadgeCommunity",
+			"setCard": "eGUBIq_setCard",
+			"modalNote": "eGUBIq_modalNote",
+			"act": "eGUBIq_act",
+			"specTag": "eGUBIq_specTag",
+			"top": "eGUBIq_top",
+			"srcBtn": "eGUBIq_srcBtn",
+			"irowMissing": "eGUBIq_irowMissing",
+			"diagMeta": "eGUBIq_diagMeta",
+			"actBroken": "eGUBIq_actBroken",
+			"star": "eGUBIq_star",
+			"tab": "eGUBIq_tab",
 			"backupCard": "eGUBIq_backupCard",
-			"groupHint": "eGUBIq_groupHint",
-			"shots": "eGUBIq_shots",
-			"av": "eGUBIq_av",
-			"pageEllipsis": "eGUBIq_pageEllipsis",
+			"cats": "eGUBIq_cats",
+			"body": "eGUBIq_body",
+			"dshmSlide": "eGUBIq_dshmSlide",
+			"orphBadge": "eGUBIq_orphBadge",
+			"themesGrid": "eGUBIq_themesGrid",
+			"on": "eGUBIq_on",
 			"catsWrap": "eGUBIq_catsWrap",
-			"pager": "eGUBIq_pager",
 			"catsCollapsed": "eGUBIq_catsCollapsed",
-			"collapseTitle": "eGUBIq_collapseTitle",
-			"src": "eGUBIq_src",
-			"body": "eGUBIq_body",
-			"depBadge": "eGUBIq_depBadge",
+			"ovArrow": "eGUBIq_ovArrow",
+			"groupName": "eGUBIq_groupName",
+			"ovFrom": "eGUBIq_ovFrom",
+			"fixFallbackText": "eGUBIq_fixFallbackText",
+			"nm": "eGUBIq_nm",
+			"actLive": "eGUBIq_actLive",
 			"backupMessage": "eGUBIq_backupMessage",
-			"setRevert": "eGUBIq_setRevert",
+			"setHint": "eGUBIq_setHint",
+			"hiddenFile": "eGUBIq_hiddenFile",
+			"collapseIcon": "eGUBIq_collapseIcon",
+			"orphRow": "eGUBIq_orphRow",
 			"foot": "eGUBIq_foot",
-			"diagRow": "eGUBIq_diagRow",
-			"diagArrow": "eGUBIq_diagArrow",
-			"setDesc": "eGUBIq_setDesc",
-			"pct": "eGUBIq_pct",
-			"catsRow": "eGUBIq_catsRow",
-			"themesGrid": "eGUBIq_themesGrid",
-			"tag": "eGUBIq_tag",
-			"panelNote": "eGUBIq_panelNote",
-			"diagSummaryMeta": "eGUBIq_diagSummaryMeta",
-			"ovRow": "eGUBIq_ovRow",
-			"sp": "eGUBIq_sp",
-			"spec": "eGUBIq_spec",
-			"title": "eGUBIq_title",
+			"viewBar": "eGUBIq_viewBar",
+			"groupHead": "eGUBIq_groupHead",
+			"tabSearch": "eGUBIq_tabSearch",
+			"av": "eGUBIq_av",
 			"root": "eGUBIq_root",
-			"diagEmpty": "eGUBIq_diagEmpty",
+			"diagVal": "eGUBIq_diagVal",
+			"titleRow": "eGUBIq_titleRow",
+			"switch": "eGUBIq_switch",
 			"diagBundle": "eGUBIq_diagBundle",
 			"warnLine": "eGUBIq_warnLine",
-			"groupCreate": "eGUBIq_groupCreate",
-			"grid": "eGUBIq_grid",
-			"bar": "eGUBIq_bar",
-			"tabSearch": "eGUBIq_tabSearch",
-			"assignRow": "eGUBIq_assignRow",
-			"switchKnob": "eGUBIq_switchKnob",
-			"fixFallback": "eGUBIq_fixFallback",
-			"bannerIcon": "eGUBIq_bannerIcon",
-			"grow": "eGUBIq_grow",
-			"fixFallbackText": "eGUBIq_fixFallbackText",
-			"staleAction": "eGUBIq_staleAction",
-			"diagSummaryItem": "eGUBIq_diagSummaryItem",
-			"hiddenFile": "eGUBIq_hiddenFile",
-			"empty": "eGUBIq_empty",
-			"switchOn": "eGUBIq_switchOn",
-			"specTagFile": "eGUBIq_specTagFile",
-			"srcBtn": "eGUBIq_srcBtn",
-			"diagAlert": "eGUBIq_diagAlert",
-			"desc": "eGUBIq_desc",
-			"star": "eGUBIq_star",
-			"groupMembers": "eGUBIq_groupMembers",
-			"cats": "eGUBIq_cats",
-			"diagMeta": "eGUBIq_diagMeta",
-			"switch": "eGUBIq_switch",
-			"titleRow": "eGUBIq_titleRow",
-			"viewOn": "eGUBIq_viewOn",
-			"viewBtn": "eGUBIq_viewBtn",
-			"nm": "eGUBIq_nm",
+			"actWarn": "eGUBIq_actWarn",
 			"specTagGit": "eGUBIq_specTagGit",
-			"diagBadgeCommunity": "eGUBIq_diagBadgeCommunity",
-			"spin": "eGUBIq_spin",
+			"progress": "eGUBIq_progress",
+			"viewBtn": "eGUBIq_viewBtn",
+			"diagEmpty": "eGUBIq_diagEmpty",
 			"backupActions": "eGUBIq_backupActions",
-			"shot": "eGUBIq_shot",
+			"setHead": "eGUBIq_setHead",
+			"loading": "eGUBIq_loading",
+			"dragOver": "eGUBIq_dragOver",
+			"backupCheckList": "eGUBIq_backupCheckList",
+			"groupHint": "eGUBIq_groupHint",
+			"fixFallback": "eGUBIq_fixFallback",
+			"setRevert": "eGUBIq_setRevert",
 			"assignSelect": "eGUBIq_assignSelect",
-			"okState": "eGUBIq_okState",
-			"row1": "eGUBIq_row1",
-			"backupGrid": "eGUBIq_backupGrid",
-			"progress": "eGUBIq_progress",
-			"ovByTag": "eGUBIq_ovByTag",
+			"diagSection": "eGUBIq_diagSection",
+			"pager": "eGUBIq_pager",
+			"pageInfo": "eGUBIq_pageInfo",
+			"spin": "eGUBIq_spin",
+			"groupCreate": "eGUBIq_groupCreate",
+			"pct": "eGUBIq_pct",
+			"pageEllipsis": "eGUBIq_pageEllipsis",
+			"diagPage": "eGUBIq_diagPage",
+			"version": "eGUBIq_version",
+			"title": "eGUBIq_title",
 			"tabSearchRow": "eGUBIq_tabSearchRow",
-			"setHead": "eGUBIq_setHead",
+			"shot": "eGUBIq_shot",
+			"descTight": "eGUBIq_descTight",
+			"head": "eGUBIq_head",
+			"switchOn": "eGUBIq_switchOn",
+			"switchKnob": "eGUBIq_switchKnob",
+			"collapseHead": "eGUBIq_collapseHead",
+			"groupMember": "eGUBIq_groupMember",
+			"setLabel": "eGUBIq_setLabel",
+			"ovRow": "eGUBIq_ovRow",
+			"diagAlert": "eGUBIq_diagAlert",
 			"banner": "eGUBIq_banner",
+			"diagCount": "eGUBIq_diagCount",
+			"okState": "eGUBIq_okState",
+			"barFill": "eGUBIq_barFill",
+			"collapseTitle": "eGUBIq_collapseTitle",
 			"owner": "eGUBIq_owner",
-			"pagerPages": "eGUBIq_pagerPages",
-			"inlineInput": "eGUBIq_inlineInput",
-			"dragHandle": "eGUBIq_dragHandle",
-			"groupMember": "eGUBIq_groupMember",
-			"specTag": "eGUBIq_specTag",
-			"setTitle": "eGUBIq_setTitle",
-			"act": "eGUBIq_act",
-			"on": "eGUBIq_on",
-			"version": "eGUBIq_version",
-			"irowMissing": "eGUBIq_irowMissing",
-			"diagBadgeOfficial": "eGUBIq_diagBadgeOfficial",
-			"sub": "eGUBIq_sub",
-			"collapseIcon": "eGUBIq_collapseIcon",
-			"diagList": "eGUBIq_diagList",
-			"dot": "eGUBIq_dot",
-			"topBtn": "eGUBIq_topBtn",
+			"diagIndex": "eGUBIq_diagIndex",
+			"collapseBody": "eGUBIq_collapseBody",
+			"catsRow": "eGUBIq_catsRow",
+			"shots": "eGUBIq_shots",
+			"empty": "eGUBIq_empty",
+			"groupAddPanel": "eGUBIq_groupAddPanel",
+			"backupCheck": "eGUBIq_backupCheck",
 			"setLabelBox": "eGUBIq_setLabelBox",
-			"setHint": "eGUBIq_setHint",
-			"descTight": "eGUBIq_descTight",
-			"tab": "eGUBIq_tab",
-			"diagBadgeShadow": "eGUBIq_diagBadgeShadow",
-			"sectAction": "eGUBIq_sectAction",
-			"collapseHead": "eGUBIq_collapseHead",
-			"irow": "eGUBIq_irow",
-			"err": "eGUBIq_err",
-			"backupCheckList": "eGUBIq_backupCheckList",
-			"setRow": "eGUBIq_setRow",
-			"modalNote": "eGUBIq_modalNote",
-			"ovArrow": "eGUBIq_ovArrow",
-			"actLive": "eGUBIq_actLive",
-			"backupWarn": "eGUBIq_backupWarn",
-			"diagVal": "eGUBIq_diagVal",
-			"loading": "eGUBIq_loading",
-			"barWave": "eGUBIq_barWave",
-			"catsToggle": "eGUBIq_catsToggle",
-			"actBroken": "eGUBIq_actBroken",
-			"actWhy": "eGUBIq_actWhy",
-			"bannerHint": "eGUBIq_bannerHint",
+			"switchMixed": "eGUBIq_switchMixed",
 			"groupActions": "eGUBIq_groupActions",
-			"card": "eGUBIq_card",
-			"depLine": "eGUBIq_depLine",
-			"backupInput": "eGUBIq_backupInput",
-			"pageInfo": "eGUBIq_pageInfo",
-			"diagPage": "eGUBIq_diagPage",
-			"swatches": "eGUBIq_swatches",
-			"collapseBody": "eGUBIq_collapseBody",
-			"diagSection": "eGUBIq_diagSection",
-			"ovFrom": "eGUBIq_ovFrom",
-			"top": "eGUBIq_top",
-			"cmd": "eGUBIq_cmd",
-			"dragging": "eGUBIq_dragging",
+			"diagSummaryItem": "eGUBIq_diagSummaryItem",
+			"diagArrow": "eGUBIq_diagArrow",
+			"depBadge": "eGUBIq_depBadge",
+			"bannerIcon": "eGUBIq_bannerIcon",
+			"desc": "eGUBIq_desc",
+			"spec": "eGUBIq_spec",
+			"diagSummaryMeta": "eGUBIq_diagSummaryMeta",
+			"diagList": "eGUBIq_diagList",
+			"barWave": "eGUBIq_barWave",
+			"sectionOverview": "eGUBIq_sectionOverview",
+			"topBtn": "eGUBIq_topBtn",
+			"sp": "eGUBIq_sp",
 			"groupRow": "eGUBIq_groupRow",
-			"deprecate": "eGUBIq_deprecate"
+			"groupMembers": "eGUBIq_groupMembers",
+			"ovByTag": "eGUBIq_ovByTag"
 		};
 		//#endregion
 		//#region src/client/Diagnostics.tsx

package/lib/dsh-cli.js

@@ -7,6 +7,7 @@
  * the agent's sandboxed executor and denies writes to the profile directory.
  */
 import { spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { dirname, isAbsolute, join, resolve } from 'node:path';
 import { logEvent } from './log.js';
@@ -28,14 +29,27 @@ import { profileDir } from './profile.js';
  * for the pnpm it just installed to become visible.
  */
 const extraPathDirs = [];
+/**
+ * The directory holding the Node binary running this process. `npm`,
+ * `npm.cmd` and `corepack` are installed alongside it by every official Node
+ * distribution, so it is the one place the toolchain can be looked for
+ * without guessing — and unlike a PATH entry it cannot be absent, because
+ * this process is executing out of it.
+ *
+ * #167: a Windows desktop host spawned dsh without the Node install
+ * directory on PATH. Node itself was running (v24.18.1 in the log) while
+ * both `corepack` and `npm` came back "not recognized as an internal or
+ * external command", so the one-click setup had no way to succeed.
+ */
+export const nodeBinDir = dirname(process.execPath);
 function spawnEnv() {
     // pnpm v10+ blocks forever on a silent interactive prompt without a TTY;
     // CI mode forces it to act or fail instead of asking.
     const separator = process.platform === 'win32' ? ';' : ':';
     const parts = (process.env.PATH ?? '').split(separator).filter(part => part !== '');
     const candidates = process.platform === 'win32'
-        ? extraPathDirs
-        : ['/opt/homebrew/bin', '/usr/local/bin', join(homedir(), '.local', 'bin'), ...extraPathDirs];
+        ? [nodeBinDir, ...extraPathDirs]
+        : ['/opt/homebrew/bin', '/usr/local/bin', join(homedir(), '.local', 'bin'), nodeBinDir, ...extraPathDirs];
     for (const bin of candidates) {
         if (!parts.includes(bin))
             parts.push(bin);
@@ -242,7 +256,38 @@ export async function provisionPnpm() {
             extraPathDirs.pop();
         }
     }
-    return { ok: false, hint: provisionHint(corepack.output, npm.output) };
+    const npmFound = toolOnPath('npm');
+    if (!npmFound)
+        logEvent('warn', 'setup-pnpm', `npm is not on any searched path (node lives in ${nodeBinDir})`);
+    return { ok: false, hint: provisionHint(corepack.output, npm.output, npmFound) };
+}
+/** Executable suffixes a bare command name can carry on this platform. */
+const EXECUTABLE_SUFFIXES = process.platform === 'win32'
+    ? (process.env.PATHEXT ?? '.COM;.EXE;.BAT;.CMD').split(';').filter(part => part !== '')
+    : [''];
+/**
+ * Whether a bare command name resolves to a file on the PATH the market
+ * hands its children.
+ *
+ * The market cannot read the reason a spawn failed out of the child's
+ * message: cmd.exe reports a missing command in the console's ANSI codepage
+ * ("'npm' 不是内部或外部命令" on a Chinese Windows), which is neither the
+ * string `ENOENT` nor even valid UTF-8 — so the #32 hint, written against
+ * Node's own ENOENT wording, could never fire on Windows and the user was
+ * left with no guidance at all (#167). Looking on disk answers the same
+ * question in every locale.
+ */
+export function toolOnPath(name) {
+    const separator = process.platform === 'win32' ? ';' : ':';
+    for (const dir of (spawnEnv().PATH ?? '').split(separator)) {
+        if (dir === '')
+            continue;
+        for (const suffix of EXECUTABLE_SUFFIXES) {
+            if (existsSync(join(dir, name + suffix)))
+                return true;
+        }
+    }
+    return false;
 }
 /**
  * Why the one-click pnpm setup failed, in terms the user can act on.
@@ -254,11 +299,13 @@ export async function provisionPnpm() {
  * a GUI launch with no Node on PATH at all).
  * @returns a bilingual, actionable hint, or undefined when unrecognized.
  */
-export function provisionHint(corepackOutput, npmOutput) {
+export function provisionHint(corepackOutput, npmOutput, npmFound = true) {
     // Node itself unreachable: pointing the user back at this same button
-    // would be a dead end (#32).
-    if (/ENOENT/.test(corepackOutput) && /ENOENT/.test(npmOutput)) {
-        return '这台机器的 dsh 进程找不到 Node（从图形界面启动不继承终端 PATH）。请改从终端启动 dsh，或安装 Homebrew 版 pnpm：brew install pnpm / This dsh process cannot find Node (GUI launches skip your shell PATH). Start dsh from a terminal, or install pnpm via Homebrew: brew install pnpm';
+    // would be a dead end (#32). `npmFound` answers this from disk, so it
+    // holds on a Windows console that reports the same thing in a codepage we
+    // cannot read (#167); the ENOENT match stays for callers without it.
+    if (!npmFound || (/ENOENT/.test(corepackOutput) && /ENOENT/.test(npmOutput))) {
+        return `这台机器的 dsh 进程找不到 npm/corepack（图形界面或桌面端启动时不继承终端 PATH）。已在 Node 自己的目录里找过（${nodeBinDir}）也没有——多半是宿主内置的 Node 运行时不带 npm。请改从终端启动 dsh，或单独装一个 pnpm：Windows 用 iwr https://get.pnpm.io/install.ps1 -useb | iex，macOS/Linux 用 brew install pnpm / This dsh process cannot find npm/corepack (GUI and desktop launches skip your shell PATH). The directory Node itself runs from (${nodeBinDir}) was searched too — a bundled Node runtime without npm is the usual cause. Start dsh from a terminal, or install pnpm on its own: \`iwr https://get.pnpm.io/install.ps1 -useb | iex\` (Windows) or \`brew install pnpm\` (macOS/Linux)`;
     }
     if (/EEXIST|already exists|--force to overwrite/i.test(npmOutput)) {
         return 'pnpm 的可执行文件已存在（通常是 corepack 先放好了同名 shim），npm 拒绝覆盖。在终端里执行其一即可：corepack prepare pnpm@latest --activate（推荐，直接激活已有 shim）或 npm i -g pnpm --force / A pnpm executable already exists (usually a corepack shim), so npm refused to overwrite it. Run one of these in a terminal: `corepack prepare pnpm@latest --activate` (preferred — activates the shim already there) or `npm i -g pnpm --force`';

package/lib/types/dsh-cli.d.ts

@@ -8,6 +8,19 @@
  */
 import type { ChildProcess } from 'node:child_process';
 import { type ProgressPhase } from './ndjson.ts';
+/**
+ * The directory holding the Node binary running this process. `npm`,
+ * `npm.cmd` and `corepack` are installed alongside it by every official Node
+ * distribution, so it is the one place the toolchain can be looked for
+ * without guessing — and unlike a PATH entry it cannot be absent, because
+ * this process is executing out of it.
+ *
+ * #167: a Windows desktop host spawned dsh without the Node install
+ * directory on PATH. Node itself was running (v24.18.1 in the log) while
+ * both `corepack` and `npm` came back "not recognized as an internal or
+ * external command", so the one-click setup had no way to succeed.
+ */
+export declare const nodeBinDir: string;
 /**
  * Windows npm/corepack/pnpm are `.cmd` shims. Node's `spawn` without a shell
  * cannot start them (ENOENT / EINVAL). Same pattern as dsh's `plugin` forwarder.
@@ -99,6 +112,19 @@ export declare function provisionPnpm(): Promise<{
     ok: boolean;
     hint?: string;
 }>;
+/**
+ * Whether a bare command name resolves to a file on the PATH the market
+ * hands its children.
+ *
+ * The market cannot read the reason a spawn failed out of the child's
+ * message: cmd.exe reports a missing command in the console's ANSI codepage
+ * ("'npm' 不是内部或外部命令" on a Chinese Windows), which is neither the
+ * string `ENOENT` nor even valid UTF-8 — so the #32 hint, written against
+ * Node's own ENOENT wording, could never fire on Windows and the user was
+ * left with no guidance at all (#167). Looking on disk answers the same
+ * question in every locale.
+ */
+export declare function toolOnPath(name: string): boolean;
 /**
  * Why the one-click pnpm setup failed, in terms the user can act on.
  *
@@ -109,7 +135,7 @@ export declare function provisionPnpm(): Promise<{
  * a GUI launch with no Node on PATH at all).
  * @returns a bilingual, actionable hint, or undefined when unrecognized.
  */
-export declare function provisionHint(corepackOutput: string, npmOutput: string): string | undefined;
+export declare function provisionHint(corepackOutput: string, npmOutput: string, npmFound?: boolean): string | undefined;
 /** Live progress of the running plugin command, for the status route. */
 export interface InstallProgress {
     active: boolean;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dshmarket",
   "description": "Visual plugin market inside DeepSeek Harness — browse, search, and one-click install community plugins. · DSH 可视化插件市场：逛一逛，点一下，装好。",
-  "version": "1.12.1",
+  "version": "1.12.2",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",
@@ -30,8 +30,9 @@
     "prepack": "npm run build && node scripts/preflight.mjs",
     "prepare": "npm run build",
     "validate:registry": "node scripts/validate-registry.mjs",
-    "snapshot": "curl -sf https://awesome-dsh-plugin.com/plugins.json -o data/registry-snapshot.json",
-    "test:web": "vitest run --config vitest.web.config.ts"
+    "snapshot": "curl -sf https://awesome-dsh-plugin.com/plugins.json -o data/registry-snapshot.json && curl -sf https://awesome-dsh-plugin.com/readmes.json -o data/readmes-snapshot.json",
+    "test:web": "vitest run --config vitest.web.config.ts",
+    "build:site": "node scripts/build-site.mjs"
   },
   "dependencies": {
     "js-yaml": "^4.1.0"
@@ -85,6 +86,7 @@
     "@types/react": "~18.3.1",
     "jsdom": "^29.1.1",
     "lightningcss": "^1.33.0",
+    "marked": "^18.0.10",
     "playwright": "^1.62.1",
     "react": "^18.3.1",
     "react-dom": "~18.3.1",

package/src/dsh-cli.ts

@@ -9,6 +9,7 @@
 
 import { spawn } from 'node:child_process'
 import type { ChildProcess, SpawnOptions } from 'node:child_process'
+import { existsSync } from 'node:fs'
 import { homedir } from 'node:os'
 import { dirname, isAbsolute, join, resolve } from 'node:path'
 import { logEvent } from './log.ts'
@@ -32,14 +33,28 @@ import { profileDir } from './profile.ts'
  */
 const extraPathDirs: string[] = []
 
+/**
+ * The directory holding the Node binary running this process. `npm`,
+ * `npm.cmd` and `corepack` are installed alongside it by every official Node
+ * distribution, so it is the one place the toolchain can be looked for
+ * without guessing — and unlike a PATH entry it cannot be absent, because
+ * this process is executing out of it.
+ *
+ * #167: a Windows desktop host spawned dsh without the Node install
+ * directory on PATH. Node itself was running (v24.18.1 in the log) while
+ * both `corepack` and `npm` came back "not recognized as an internal or
+ * external command", so the one-click setup had no way to succeed.
+ */
+export const nodeBinDir = dirname(process.execPath)
+
 function spawnEnv(): NodeJS.ProcessEnv {
   // pnpm v10+ blocks forever on a silent interactive prompt without a TTY;
   // CI mode forces it to act or fail instead of asking.
   const separator = process.platform === 'win32' ? ';' : ':'
   const parts = (process.env.PATH ?? '').split(separator).filter(part => part !== '')
   const candidates = process.platform === 'win32'
-    ? extraPathDirs
-    : ['/opt/homebrew/bin', '/usr/local/bin', join(homedir(), '.local', 'bin'), ...extraPathDirs]
+    ? [nodeBinDir, ...extraPathDirs]
+    : ['/opt/homebrew/bin', '/usr/local/bin', join(homedir(), '.local', 'bin'), nodeBinDir, ...extraPathDirs]
   for (const bin of candidates) {
     if (!parts.includes(bin)) parts.push(bin)
   }
@@ -304,7 +319,37 @@ export async function provisionPnpm(): Promise<{ ok: boolean; hint?: string }> {
       extraPathDirs.pop()
     }
   }
-  return { ok: false, hint: provisionHint(corepack.output, npm.output) }
+  const npmFound = toolOnPath('npm')
+  if (!npmFound) logEvent('warn', 'setup-pnpm', `npm is not on any searched path (node lives in ${nodeBinDir})`)
+  return { ok: false, hint: provisionHint(corepack.output, npm.output, npmFound) }
+}
+
+/** Executable suffixes a bare command name can carry on this platform. */
+const EXECUTABLE_SUFFIXES = process.platform === 'win32'
+  ? (process.env.PATHEXT ?? '.COM;.EXE;.BAT;.CMD').split(';').filter(part => part !== '')
+  : ['']
+
+/**
+ * Whether a bare command name resolves to a file on the PATH the market
+ * hands its children.
+ *
+ * The market cannot read the reason a spawn failed out of the child's
+ * message: cmd.exe reports a missing command in the console's ANSI codepage
+ * ("'npm' 不是内部或外部命令" on a Chinese Windows), which is neither the
+ * string `ENOENT` nor even valid UTF-8 — so the #32 hint, written against
+ * Node's own ENOENT wording, could never fire on Windows and the user was
+ * left with no guidance at all (#167). Looking on disk answers the same
+ * question in every locale.
+ */
+export function toolOnPath(name: string): boolean {
+  const separator = process.platform === 'win32' ? ';' : ':'
+  for (const dir of (spawnEnv().PATH ?? '').split(separator)) {
+    if (dir === '') continue
+    for (const suffix of EXECUTABLE_SUFFIXES) {
+      if (existsSync(join(dir, name + suffix))) return true
+    }
+  }
+  return false
 }
 
 /**
@@ -317,11 +362,13 @@ export async function provisionPnpm(): Promise<{ ok: boolean; hint?: string }> {
  * a GUI launch with no Node on PATH at all).
  * @returns a bilingual, actionable hint, or undefined when unrecognized.
  */
-export function provisionHint(corepackOutput: string, npmOutput: string): string | undefined {
+export function provisionHint(corepackOutput: string, npmOutput: string, npmFound = true): string | undefined {
   // Node itself unreachable: pointing the user back at this same button
-  // would be a dead end (#32).
-  if (/ENOENT/.test(corepackOutput) && /ENOENT/.test(npmOutput)) {
-    return '这台机器的 dsh 进程找不到 Node（从图形界面启动不继承终端 PATH）。请改从终端启动 dsh，或安装 Homebrew 版 pnpm：brew install pnpm / This dsh process cannot find Node (GUI launches skip your shell PATH). Start dsh from a terminal, or install pnpm via Homebrew: brew install pnpm'
+  // would be a dead end (#32). `npmFound` answers this from disk, so it
+  // holds on a Windows console that reports the same thing in a codepage we
+  // cannot read (#167); the ENOENT match stays for callers without it.
+  if (!npmFound || (/ENOENT/.test(corepackOutput) && /ENOENT/.test(npmOutput))) {
+    return `这台机器的 dsh 进程找不到 npm/corepack（图形界面或桌面端启动时不继承终端 PATH）。已在 Node 自己的目录里找过（${nodeBinDir}）也没有——多半是宿主内置的 Node 运行时不带 npm。请改从终端启动 dsh，或单独装一个 pnpm：Windows 用 iwr https://get.pnpm.io/install.ps1 -useb | iex，macOS/Linux 用 brew install pnpm / This dsh process cannot find npm/corepack (GUI and desktop launches skip your shell PATH). The directory Node itself runs from (${nodeBinDir}) was searched too — a bundled Node runtime without npm is the usual cause. Start dsh from a terminal, or install pnpm on its own: \`iwr https://get.pnpm.io/install.ps1 -useb | iex\` (Windows) or \`brew install pnpm\` (macOS/Linux)`
   }
   if (/EEXIST|already exists|--force to overwrite/i.test(npmOutput)) {
     return 'pnpm 的可执行文件已存在（通常是 corepack 先放好了同名 shim），npm 拒绝覆盖。在终端里执行其一即可：corepack prepare pnpm@latest --activate（推荐，直接激活已有 shim）或 npm i -g pnpm --force / A pnpm executable already exists (usually a corepack shim), so npm refused to overwrite it. Run one of these in a terminal: `corepack prepare pnpm@latest --activate` (preferred — activates the shim already there) or `npm i -g pnpm --force`'