dshmarket 1.2.1 → 1.2.3

package/src/pnpm-compat.ts

@@ -0,0 +1,83 @@
+/**
+ * pnpm compatibility layer — everything the market needs to know about how
+ * different pnpm majors behave inside a dsh profile directory, kept pure and
+ * separately testable (test/unit + test/integration exercise this module
+ * against real pnpm 9/10/11).
+ *
+ * Verified behavior matrix (2026-08, pnpm 9.15.9 / 10.28.2 / 11.21.0):
+ * - workspace root, `add` without -w:  pnpm 9 fails ERR_PNPM_ADDING_TO_ROOT;
+ *   pnpm 10/11 succeed.
+ * - `add -w` where NO pnpm-workspace.yaml exists: ALL majors fail with
+ *   "--workspace-root may only be used inside a workspace".
+ * - modules dir built by pnpm 9, then pnpm 10/11 mutate it:
+ *   ERR_PNPM_PUBLIC_HOIST_PATTERN_DIFF (defaults drifted between majors).
+ */
+
+import { existsSync } from 'node:fs'
+import { join } from 'node:path'
+
+
+/**
+ * Decide the argv for a `dsh plugin <add|remove> …` call in the given profile.
+ *
+ * pnpm 9 refuses to add at a workspace root without -w (#17, #20); every
+ * pnpm major refuses -w when the directory is NOT a workspace. So the flag
+ * is injected exactly when the profile has a pnpm-workspace.yaml.
+ * @param profileDir - resolved profile directory (owns pnpm-workspace.yaml, or not).
+ * @param pluginArgs - the raw args, e.g. ['add', 'dshmarket@latest'].
+ * @returns args with -w injected when — and only when — the profile is a workspace root.
+ */
+export function pluginArgsFor(profileDir: string, pluginArgs: string[]): string[] {
+  if (pluginArgs[0] !== 'add' && pluginArgs[0] !== 'remove') return pluginArgs
+  if (!existsSync(join(profileDir, 'pnpm-workspace.yaml'))) return pluginArgs
+  return [pluginArgs[0], '-w', ...pluginArgs.slice(1)]
+}
+
+/** One recognized pnpm failure, with a bilingual explanation for the UI. */
+export interface PnpmFailure {
+  code: 'adding-to-root' | 'not-a-workspace' | 'hoist-pattern-diff' | 'pnpm-missing'
+  /** Bilingual, actionable message shown to the user instead of the raw wall of text. */
+  message: string
+  /** True when re-running `pnpm install` in the profile is the documented recovery. */
+  recoverable: boolean
+}
+
+/**
+ * Map a failed pnpm run's combined output to a known failure mode.
+ *
+ * dsh's own wrapper line ("dsh: pnpm failed in profile directory …") names no
+ * cause, so the market must recognize pnpm's real diagnostics itself (#20).
+ * @param output - stdout+stderr of the failed run.
+ * @returns the classified failure, or null when unrecognized (raw output is then shown as-is).
+ */
+export function classifyPnpmFailure(output: string): PnpmFailure | null {
+  if (output.includes('ERR_PNPM_PUBLIC_HOIST_PATTERN_DIFF')) {
+    return {
+      code: 'hoist-pattern-diff',
+      recoverable: true,
+      message: 'profile 的 node_modules 是旧版 pnpm 创建的，与当前 pnpm 的默认配置不兼容，需要重建后重试 / this profile\'s node_modules was created by a different pnpm major; it must be rebuilt (pnpm install) before changes can be applied',
+    }
+  }
+  if (output.includes('ERR_PNPM_ADDING_TO_ROOT')) {
+    return {
+      code: 'adding-to-root',
+      recoverable: false,
+      message: 'pnpm 拒绝在 workspace 根目录安装（缺少 -w）。这是市场的 bug，请升级 dshmarket 到最新版 / pnpm refused to add at a workspace root (missing -w); this is a market bug — please update dshmarket',
+    }
+  }
+  if (/--workspace-root may only be used inside a workspace/i.test(output)) {
+    return {
+      code: 'not-a-workspace',
+      recoverable: false,
+      message: 'profile 目录不是 pnpm workspace，却传入了 -w。这是市场的 bug，请升级 dshmarket 到最新版 / -w was passed but the profile is not a pnpm workspace; this is a market bug — please update dshmarket',
+    }
+  }
+  if (output.includes('pnpm not found on PATH')) {
+    return {
+      code: 'pnpm-missing',
+      recoverable: false,
+      message: '找不到 pnpm，请先在市场页顶部一键安装组件 / pnpm is not on PATH — use the one-click setup at the top of the market page',
+    }
+  }
+  return null
+}

package/src/profile.ts

@@ -0,0 +1,120 @@
+/**
+ * Profile filesystem reads — everything the market learns from a dsh
+ * profile directory (manifest, lockfile, installed package trees). Pure
+ * functions of the directory contents; no processes, no network.
+ */
+
+import { existsSync, readdirSync, readFileSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { join } from 'node:path'
+
+/** Resolve a profile name to its directory under DSH_HOME (default ~/.dsh). */
+export function profileDir(profile: string): string {
+  const home = process.env.DSH_HOME ?? join(homedir(), '.dsh')
+  return join(home, 'profiles', profile)
+}
+
+/** Community dependencies of the profile (official in-box scope filtered out). */
+export function readInstalled(profile: string): Record<string, string> {
+  try {
+    const manifest = JSON.parse(readFileSync(join(profileDir(profile), 'package.json'), 'utf8')) as {
+      dependencies?: Record<string, string>
+    }
+    const installed: Record<string, string> = {}
+    for (const [name, spec] of Object.entries(manifest.dependencies ?? {})) {
+      if (!name.startsWith('@deepseek-ai/')) installed[name] = spec
+    }
+    return installed
+  } catch {
+    return {}
+  }
+}
+
+/** The version actually present in the profile's node_modules, or null. */
+export function readInstalledVersion(profile: string, name: string): string | null {
+  try {
+    const manifest = JSON.parse(
+      readFileSync(join(profileDir(profile), 'node_modules', name, 'package.json'), 'utf8'),
+    ) as { version?: string }
+    return manifest.version ?? null
+  } catch {
+    return null
+  }
+}
+
+/** Pinned commit per `owner/repo` from the profile lockfile's codeload tarball URLs. */
+export function readLockCommits(profile: string): Map<string, string> {
+  const commits = new Map<string, string>()
+  try {
+    const lock = readFileSync(join(profileDir(profile), 'pnpm-lock.yaml'), 'utf8')
+    for (const m of lock.matchAll(/codeload\.github\.com\/([^/\s]+\/[^/\s]+)\/tar\.gz\/([0-9a-f]{40})/g)) {
+      commits.set(m[1].toLowerCase(), m[2])
+    }
+  } catch { /* no lockfile — no git installs to report */ }
+  return commits
+}
+
+/** True when the installed package's manifest declares a dsh plugin surface. */
+export function hasDshManifest(dir: string): boolean {
+  try {
+    const manifest = JSON.parse(readFileSync(join(dir, 'package.json'), 'utf8')) as { dsh?: unknown }
+    return manifest.dsh !== undefined
+  } catch {
+    return false
+  }
+}
+
+/**
+ * True when the package's declared entry artifact actually exists — github
+ * source checkouts of build-required plugins ship no lib/, and promoting one
+ * into the bundle layer bricks the next boot (ERR_MODULE_NOT_FOUND kills the
+ * whole profile, #18).
+ */
+export function entryArtifactExists(dir: string): boolean {
+  try {
+    const manifest = JSON.parse(readFileSync(join(dir, 'package.json'), 'utf8')) as {
+      main?: string
+      exports?: Record<string, unknown> | string
+    }
+    const candidates: string[] = []
+    if (typeof manifest.main === 'string') candidates.push(manifest.main)
+    const rootExport = typeof manifest.exports === 'string'
+      ? manifest.exports
+      : (manifest.exports as Record<string, unknown> | undefined)?.['.']
+    if (typeof rootExport === 'string') candidates.push(rootExport)
+    else if (rootExport !== null && typeof rootExport === 'object') {
+      for (const value of Object.values(rootExport)) if (typeof value === 'string') candidates.push(value)
+    }
+    if (candidates.length === 0) candidates.push('index.js')
+    return candidates.some(rel => existsSync(join(dir, rel)))
+  } catch {
+    return false
+  }
+}
+
+/** Plugin subdirectories (depth 2) of a collection checkout, as relative paths. */
+export function pluginSubdirs(root: string): string[] {
+  const found: string[] = []
+  let level1: string[] = []
+  try {
+    level1 = readdirSync(root, { withFileTypes: true })
+      .filter(dirent => dirent.isDirectory() && /^[A-Za-z0-9_.-]+$/.test(dirent.name) && dirent.name !== 'node_modules')
+      .map(dirent => dirent.name)
+  } catch {
+    return found
+  }
+  for (const sub of level1) {
+    if (hasDshManifest(join(root, sub))) {
+      found.push(sub)
+      continue
+    }
+    try {
+      for (const inner of readdirSync(join(root, sub), { withFileTypes: true })) {
+        if (!inner.isDirectory() || !/^[A-Za-z0-9_.-]+$/.test(inner.name) || inner.name === 'node_modules') continue
+        if (hasDshManifest(join(root, sub, inner.name))) found.push(`${sub}/${inner.name}`)
+      }
+    } catch { /* unreadable level — skip */ }
+    if (found.length >= 8) break
+  }
+  return found.slice(0, 8)
+}