u1s1-cli 1.19.0 → 1.20.0

package/dist/agents/node-runtime.d.ts

@@ -0,0 +1,91 @@
+import type { SiteId } from "../site.js";
+export declare const DSH_MIN_NODE = "24.9.0";
+/** 钉死的 Node 24 LTS(2026-11-10 发布的安全更新)。 */
+export declare const NODE24_VERSION = "24.22.3";
+/** node-v24.22.3 官方 SHASUMS256.txt(https://nodejs.org/dist/v24.22.3/SHASUMS256.txt)里对应的条目。 */
+export declare const NODE24_SHA256: Readonly<Record<string, string>>;
+export declare const NODE_BIN_ENV = "U1S1_DSH_NODE";
+export interface NodeArchive {
+    /** nodejs.org 的平台名(darwin-arm64、win-x64…) */
+    target: string;
+    /** 压缩包文件名 */
+    file: string;
+    /** 解压后的顶层目录 */
+    dir: string;
+    /** node 可执行文件在顶层目录下的位置(posix 写法) */
+    binInDir: string;
+    format: "tar.gz" | "zip";
+    sha256: string;
+}
+export declare function nodeArchive(platform?: NodeJS.Platform, arch?: string, version?: string): NodeArchive | undefined;
+/** 国际站走官方 nodejs.org;中国站走 npmmirror 的 Node 镜像(同一份文件,按官方 SHA-256 校验)。U1S1_NODE_MIRROR 可覆盖。 */
+export declare function nodeDistBase(site: SiteId, env?: NodeJS.ProcessEnv): string;
+export declare function nodeDownloadUrl(site: SiteId, archive: NodeArchive, version?: string, env?: NodeJS.ProcessEnv): string;
+/** ~/.u1s1/agents/node/<版本>/ 下的 node(解压后只留可执行文件和 LICENSE)。 */
+export declare function managedNodeBin(agentsRoot: string, version?: string, platform?: NodeJS.Platform): string;
+/** `<node> --version` → 版本号;跑不起来返回 undefined。 */
+export declare function probeNodeVersion(bin: string): string | undefined;
+export declare function nodeVersionOk(version: string | undefined, min?: string): boolean;
+export type NodeSource = "env" | "self" | "path" | "managed" | "download";
+export interface FoundNode {
+    bin: string;
+    version: string;
+    source: NodeSource;
+}
+export declare class NodeRuntimeError extends Error {
+    readonly code: "env_unusable" | "declined" | "unsupported_platform" | "download_failed" | "verify_failed";
+    constructor(code: "env_unusable" | "declined" | "unsupported_platform" | "download_failed" | "verify_failed", message: string);
+}
+export interface FindNodeDeps {
+    env?: NodeJS.ProcessEnv;
+    execPath?: string;
+    selfVersion?: string;
+    platform?: NodeJS.Platform;
+    probe?: (bin: string) => string | undefined;
+    exists?: (p: string) => boolean;
+}
+/** 不下载:按 1-4 的顺序找够新的 node。U1S1_DSH_NODE 指定了但不能用时抛 env_unusable。 */
+export declare function findNode(agentsRoot: string, deps?: FindNodeDeps): FoundNode | undefined;
+export interface NodeDownloadInfo {
+    version: string;
+    url: string;
+    host: string;
+    downloadBytes?: number;
+}
+export interface EnsureNodeOptions {
+    agentsRoot: string;
+    site: SiteId;
+    /** 下载前征得同意;返回 false = 拒绝 */
+    consent: (info: NodeDownloadInfo) => Promise<boolean>;
+    log: (line: string) => void;
+    text: {
+        declined: () => string;
+        unsupported: () => string;
+        downloadFailed: (detail: string) => string;
+        verifyFailed: (detail: string) => string;
+        downloading: (version: string) => string;
+        installed: (version: string) => string;
+    };
+    env?: NodeJS.ProcessEnv;
+    fetchImpl?: typeof fetch;
+    /** 测试注入 */
+    find?: () => FoundNode | undefined;
+}
+/** 找到够新的 node;没有就征得同意后下载钉死的 Node 24 LTS。 */
+export declare function ensureNode(opts: EnsureNodeOptions): Promise<FoundNode>;
+/** 各平台压缩包约 30-55 MB;提示用。 */
+export declare const NODE24_APPROX_BYTES: number;
+/**
+ * 下载 → 按钉死的 SHA-256 校验 → 只解出 node 和 LICENSE → 确认能跑且版本对 → 改名成正式目录。
+ * 中途失败只留暂存目录的残渣(下次启动前清掉),不影响已有的东西。
+ */
+export declare function downloadNode(input: {
+    agentsRoot: string;
+    archive: NodeArchive;
+    url: string;
+    fetchImpl: typeof fetch;
+    text: EnsureNodeOptions["text"];
+    version?: string;
+}): Promise<string>;
+/** 暂存目录残渣(下载中途被打断)。 */
+export declare function cleanNodeStaging(agentsRoot: string): void;

package/dist/agents/node-runtime.js

@@ -0,0 +1,223 @@
+/**
+ * dsh(DeepSeek Harness)要的 Node(engines.node >=24.9.0)。便携包只带 Node 22,所以:
+ *
+ *   1. U1S1_DSH_NODE 指定的 node(排查/测试用;版本不够直接报错,不悄悄换别的)
+ *   2. 运行本 CLI 的 Node 就够新(用户自己 npm 装的 u1s1 跑在 Node 24+ 上)
+ *   3. PATH 里的 node 够新
+ *   4. 已下载到 ~/.u1s1/agents/node/<版本>/ 的官方 Node 24 LTS
+ *   5. 都没有:征得同意后从 nodejs.org(中国站走 npmmirror 的 Node 镜像)下载钉死的
+ *      Node 24 LTS 压缩包,按代码里的 SHA-256(抄自该版本官方 SHASUMS256.txt)校验后解出
+ *      node 可执行文件和 LICENSE。
+ *
+ * 只给 dsh 用:不改 PATH、不碰便携包自带的 Node,也不装 npm(npm 仍用 CLI 自带的那份,
+ * 只是改由这个 Node 运行,见 runtime.ts installRuntime)。
+ */
+import { spawn, spawnSync } from "node:child_process";
+import { createHash, randomBytes } from "node:crypto";
+import { createReadStream, createWriteStream, existsSync, mkdirSync, readdirSync, renameSync, rmSync } from "node:fs";
+import { posix, win32 } from "node:path";
+import { pipeline } from "node:stream/promises";
+import { Readable } from "node:stream";
+import { stripSecretEnv } from "../secret-env.js";
+import { compareVersions, findOnPath, normalizeVersion, versionFromOutput } from "./runtime.js";
+export const DSH_MIN_NODE = "24.9.0";
+/** 钉死的 Node 24 LTS(2026-11-10 发布的安全更新)。 */
+export const NODE24_VERSION = "24.22.3";
+/** node-v24.22.3 官方 SHASUMS256.txt(https://nodejs.org/dist/v24.22.3/SHASUMS256.txt)里对应的条目。 */
+export const NODE24_SHA256 = {
+    "darwin-arm64": "ff6e17d4874b76d272212b908cc020d6e815fba5a6c7eaaa06add725840307fd",
+    "darwin-x64": "977614af0504c81045e7fd85596dbca0e5f951b96681516dadafedcca8c447f7",
+    "linux-arm64": "261af2af250dfd7e9f25cf151d1b2713a0adf8f10a9ad116c4947f68627affe8",
+    "linux-x64": "061ec3e3062115705b56b51fa9cc330ab50d34b6969387d4e4b1a50c6809acc2",
+    "win-arm64": "b3cc74a295b39d4f273271e96f58c06dd2b35757ca12abec64c7d0598b434f14",
+    "win-x64": "e612af99f626ab415ea225af6bce5c971feb448cb5cae250bb1c3fa50c5f7d9f",
+};
+export const NODE_BIN_ENV = "U1S1_DSH_NODE";
+export function nodeArchive(platform = process.platform, arch = process.arch, version = NODE24_VERSION) {
+    const os = platform === "win32" ? "win" : platform === "darwin" ? "darwin" : platform === "linux" ? "linux" : undefined;
+    if (!os || (arch !== "x64" && arch !== "arm64"))
+        return undefined;
+    const target = `${os}-${arch}`;
+    const sha256 = version === NODE24_VERSION ? NODE24_SHA256[target] : undefined;
+    if (!sha256)
+        return undefined;
+    const dir = `node-v${version}-${target}`;
+    const format = os === "win" ? "zip" : "tar.gz";
+    return { target, file: `${dir}.${format}`, dir, binInDir: os === "win" ? "node.exe" : "bin/node", format, sha256 };
+}
+/** 国际站走官方 nodejs.org;中国站走 npmmirror 的 Node 镜像(同一份文件,按官方 SHA-256 校验)。U1S1_NODE_MIRROR 可覆盖。 */
+export function nodeDistBase(site, env = process.env) {
+    const override = env["U1S1_NODE_MIRROR"]?.trim();
+    if (override && /^https?:\/\//.test(override))
+        return override.replace(/\/+$/, "");
+    return site === "cn" ? "https://cdn.npmmirror.com/binaries/node" : "https://nodejs.org/dist";
+}
+export function nodeDownloadUrl(site, archive, version = NODE24_VERSION, env = process.env) {
+    return `${nodeDistBase(site, env)}/v${version}/${archive.file}`;
+}
+function join(...parts) {
+    return (process.platform === "win32" ? win32 : posix).join(...parts);
+}
+/** ~/.u1s1/agents/node/<版本>/ 下的 node(解压后只留可执行文件和 LICENSE)。 */
+export function managedNodeBin(agentsRoot, version = NODE24_VERSION, platform = process.platform) {
+    return join(agentsRoot, "node", version, platform === "win32" ? "node.exe" : "node");
+}
+/** `<node> --version` → 版本号;跑不起来返回 undefined。 */
+export function probeNodeVersion(bin) {
+    try {
+        const r = spawnSync(bin, ["--version"], { env: stripSecretEnv(process.env), encoding: "utf8", timeout: 15_000, windowsHide: true });
+        return r.status === 0 ? versionFromOutput(r.stdout ?? "") : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function nodeVersionOk(version, min = DSH_MIN_NODE) {
+    const v = normalizeVersion(version);
+    return !!v && compareVersions(v, min) >= 0;
+}
+export class NodeRuntimeError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "NodeRuntimeError";
+    }
+}
+/** 不下载:按 1-4 的顺序找够新的 node。U1S1_DSH_NODE 指定了但不能用时抛 env_unusable。 */
+export function findNode(agentsRoot, deps = {}) {
+    const env = deps.env ?? process.env;
+    const probe = deps.probe ?? probeNodeVersion;
+    const exists = deps.exists ?? existsSync;
+    const pinned = env[NODE_BIN_ENV]?.trim();
+    if (pinned) {
+        const v = probe(pinned);
+        if (!v || !nodeVersionOk(v)) {
+            throw new NodeRuntimeError("env_unusable", `${NODE_BIN_ENV}=${pinned}: ${v ? `Node ${v} < ${DSH_MIN_NODE}` : "not runnable"}`);
+        }
+        return { bin: pinned, version: v, source: "env" };
+    }
+    const selfVersion = deps.selfVersion ?? process.versions.node;
+    if (nodeVersionOk(selfVersion))
+        return { bin: deps.execPath ?? process.execPath, version: normalizeVersion(selfVersion), source: "self" };
+    const onPath = findOnPath("node", { env, platform: deps.platform ?? process.platform, exists });
+    if (onPath) {
+        const v = probe(onPath);
+        if (v && nodeVersionOk(v))
+            return { bin: onPath, version: v, source: "path" };
+    }
+    const managed = managedNodeBin(agentsRoot, NODE24_VERSION, deps.platform ?? process.platform);
+    if (exists(managed)) {
+        const v = probe(managed);
+        if (v && nodeVersionOk(v))
+            return { bin: managed, version: v, source: "managed" };
+    }
+    return undefined;
+}
+/** 找到够新的 node;没有就征得同意后下载钉死的 Node 24 LTS。 */
+export async function ensureNode(opts) {
+    const found = (opts.find ?? (() => findNode(opts.agentsRoot, { env: opts.env })))();
+    if (found)
+        return found;
+    const archive = nodeArchive();
+    if (!archive)
+        throw new NodeRuntimeError("unsupported_platform", opts.text.unsupported());
+    const url = nodeDownloadUrl(opts.site, archive, NODE24_VERSION, opts.env);
+    const fetchImpl = opts.fetchImpl ?? fetch;
+    const ok = await opts.consent({ version: NODE24_VERSION, url, host: new URL(url).host, downloadBytes: NODE24_APPROX_BYTES });
+    if (!ok)
+        throw new NodeRuntimeError("declined", opts.text.declined());
+    opts.log(opts.text.downloading(NODE24_VERSION));
+    const bin = await downloadNode({ agentsRoot: opts.agentsRoot, archive, url, fetchImpl, text: opts.text });
+    opts.log(opts.text.installed(NODE24_VERSION));
+    return { bin, version: NODE24_VERSION, source: "download" };
+}
+/** 各平台压缩包约 30-55 MB;提示用。 */
+export const NODE24_APPROX_BYTES = 55 * 1024 * 1024;
+async function sha256File(file) {
+    const hash = createHash("sha256");
+    await pipeline(createReadStream(file), hash);
+    return hash.digest("hex");
+}
+function runTar(args, cwd) {
+    return new Promise((resolve) => {
+        const child = spawn("tar", args, { cwd, stdio: ["ignore", "pipe", "pipe"], windowsHide: true });
+        let output = "";
+        child.stdout?.on("data", (c) => { output += c.toString("utf8"); });
+        child.stderr?.on("data", (c) => { output += c.toString("utf8"); });
+        child.on("error", (e) => resolve({ code: 1, output: output + String(e) }));
+        child.on("exit", (code) => resolve({ code: code ?? 1, output }));
+    });
+}
+/**
+ * 下载 → 按钉死的 SHA-256 校验 → 只解出 node 和 LICENSE → 确认能跑且版本对 → 改名成正式目录。
+ * 中途失败只留暂存目录的残渣(下次启动前清掉),不影响已有的东西。
+ */
+export async function downloadNode(input) {
+    const version = input.version ?? NODE24_VERSION;
+    const root = join(input.agentsRoot, "node");
+    mkdirSync(root, { recursive: true, mode: 0o700 });
+    const staging = join(root, `.staging-${version}-${randomBytes(4).toString("hex")}`);
+    mkdirSync(staging, { recursive: true });
+    try {
+        const archivePath = join(staging, input.archive.file);
+        let res;
+        try {
+            res = await input.fetchImpl(input.url, { signal: AbortSignal.timeout(10 * 60_000) });
+        }
+        catch (e) {
+            throw new NodeRuntimeError("download_failed", input.text.downloadFailed(e instanceof Error ? e.message : String(e)));
+        }
+        if (!res.ok || !res.body)
+            throw new NodeRuntimeError("download_failed", input.text.downloadFailed(`HTTP ${res.status}`));
+        await pipeline(Readable.fromWeb(res.body), createWriteStream(archivePath));
+        const got = await sha256File(archivePath);
+        if (got !== input.archive.sha256) {
+            throw new NodeRuntimeError("verify_failed", input.text.verifyFailed(`sha256 ${got} != ${input.archive.sha256}`));
+        }
+        const members = [`${input.archive.dir}/${input.archive.binInDir}`, `${input.archive.dir}/LICENSE`];
+        const extract = await runTar(["-xf", archivePath, ...members], staging);
+        if (extract.code !== 0)
+            throw new NodeRuntimeError("verify_failed", input.text.verifyFailed(`tar: ${extract.output.trim().slice(-300)}`));
+        const extracted = join(staging, input.archive.dir, ...input.archive.binInDir.split("/"));
+        const v = probeNodeVersion(extracted);
+        if (v !== version)
+            throw new NodeRuntimeError("verify_failed", input.text.verifyFailed(`node reports ${v ?? "nothing"}, expected ${version}`));
+        const target = join(root, version);
+        const finalDir = join(staging, "final");
+        mkdirSync(finalDir);
+        const binName = process.platform === "win32" ? "node.exe" : "node";
+        renameSync(extracted, join(finalDir, binName));
+        const license = join(staging, input.archive.dir, "LICENSE");
+        if (existsSync(license))
+            renameSync(license, join(finalDir, "LICENSE"));
+        rmSync(target, { recursive: true, force: true });
+        try {
+            renameSync(finalDir, target);
+        }
+        catch (e) {
+            // 另一个 u1s1 进程刚装好同一版本:用它的
+            if (!existsSync(join(target, binName)))
+                throw e;
+        }
+        return join(target, binName);
+    }
+    finally {
+        rmSync(staging, { recursive: true, force: true });
+    }
+}
+/** 暂存目录残渣(下载中途被打断)。 */
+export function cleanNodeStaging(agentsRoot) {
+    const root = join(agentsRoot, "node");
+    let names;
+    try {
+        names = readdirSync(root);
+    }
+    catch {
+        return;
+    }
+    for (const name of names) {
+        if (name.startsWith(".staging-"))
+            rmSync(join(root, name), { recursive: true, force: true });
+    }
+}

package/dist/agents/runtime.d.ts

@@ -32,7 +32,7 @@ export declare const allowedByBrake: (v: string, brake: RuntimeBrake) => boolean
  * latest 超过 max_tested 时自然退到 max_tested(它是测过的版本,必然已发布)。
  */
 export declare function bestInstallTarget(candidates: Array<string | undefined>, brake: RuntimeBrake): string | undefined;
-export type ManagedAgent = "claude" | "codex";
+export type ManagedAgent = "claude" | "codex" | "dsh";
 export declare const MANAGED_AGENTS: readonly ManagedAgent[];
 export declare function isManagedAgent(value: unknown): value is ManagedAgent;
 /** 平台二进制所在的 npm 包:装进 node_modules 的目录名,以及它在 npm 源上的名字和版本。 */
@@ -60,6 +60,16 @@ export interface AgentRuntimeSpec {
     platformPackage: (version: string, platform: NodeJS.Platform, arch: string, musl: boolean) => PlatformPackageRef | undefined;
     /** 可执行文件在 node_modules 下的相对路径(posix 写法);不支持的系统/架构返回 undefined */
     binInNodeModules: (platform: NodeJS.Platform, arch: string, musl: boolean) => string | undefined;
+    /**
+     * 入口是 JS 文件、要用不低于这个版本的 Node 运行(dsh:engines.node >=24.9.0)。探测版本、npm 的
+     * postinstall 和启动都用调用方给的那个 node(EnsureRuntimeOptions.node);没给就当跑不起来。
+     */
+    minNode?: string;
+    /** 没有单独的平台包、npm 元数据量不出整棵依赖树时,首次下载前提示的大致大小(字节) */
+    sizeHint?: {
+        downloadBytes: number;
+        unpackedBytes: number;
+    };
 }
 /**
  * 官方包的 bin 就是 `bin/claude.exe`(各平台同名):postinstall 把对应平台的原生二进制
@@ -74,6 +84,15 @@ export declare const CLAUDE_RUNTIME: AgentRuntimeSpec;
  * 让它提示用 npm 升级;更新由启动器管,不需要)。原生二进制按自己所在目录找 rg 等附带文件。
  */
 export declare const CODEX_RUNTIME: AgentRuntimeSpec;
+/** dsh 实测过的版本;网关刹车没给 max_tested_version(老网关、老缓存)时也不越过它(dsh.ts)。 */
+export declare const DSH_TESTED_VERSION = "0.2.2-rc.1";
+/**
+ * DeepSeek Harness:`@deepseek-ai/dsh`(MIT)是纯 JS 包,bin 是 `lib/bin.js`,依赖树里的原生模块
+ * (node-pty 等)带各平台预编译文件,由 npm 的 postinstall 处理。没有单独的平台包,校验时
+ * 主包同时充当「平台包」。engines.node >=24.9.0:便携包自带的 Node 22 跑不了,由 node-runtime.ts
+ * 找/下载 Node 24。0.2.2-rc.1 实测:下载约 290 MB,装好约 920 MB。
+ */
+export declare const DSH_RUNTIME: AgentRuntimeSpec;
 export declare function runtimeSpec(agent: ManagedAgent): AgentRuntimeSpec;
 export interface RuntimePaths {
     /** ~/.u1s1/agents/<agent> */
@@ -121,7 +140,7 @@ export declare function findOnPath(command: string, opts: {
  * 跑 `<bin> --version` 取版本。环境里去掉密钥、关掉自动更新;配置目录(CLAUDE_CONFIG_DIR /
  * CODEX_HOME)指到启动器自己的目录,免得探测用户自己装的客户端时碰到用户的 ~/.claude、~/.codex。
  */
-export declare function probeVersion(bin: string, configDir?: string, spec?: AgentRuntimeSpec): string | undefined;
+export declare function probeVersion(bin: string, configDir?: string, spec?: AgentRuntimeSpec, node?: string): string | undefined;
 /** 版本高于 max_tested、这次没用上的那份客户端(给用户解释为什么换版本 / 另装一份)。 */
 export interface SkippedRuntime extends FoundRuntime {
     maxTestedVersion: string;
@@ -274,6 +293,8 @@ export interface InstallOptions {
     retryDelayMs?: number;
     /** 校验时跑 --version 用的隔离配置目录(CLAUDE_CONFIG_DIR / CODEX_HOME) */
     probeConfigDir?: string;
+    /** spec.minNode 时运行入口、npm 及其 postinstall 用的 Node */
+    node?: string;
 }
 /**
  * 装一个确切版本:npm install 到暂存目录 → 校验(锁文件里的 integrity 与 registry 元数据一致、
@@ -329,6 +350,8 @@ export interface EnsureRuntimeOptions {
     install?: (opts: InstallOptions) => Promise<FoundRuntime>;
     /** 见 PlanInput.autoUpdate;缺省开 */
     autoUpdate?: boolean;
+    /** spec.minNode 的客户端(dsh)用来探测、安装的 Node(node-runtime.ts 找好的) */
+    node?: string;
 }
 export interface EnsuredRuntime extends FoundRuntime {
     /** pin 的版本被刹车挡住、已忽略 */
@@ -347,7 +370,7 @@ export declare class RuntimePlanError extends Error {
     }>);
 }
 /**
- * 找到(必要时下载或更新)可用的客户端运行时。CLI(`u1s1 claude` / `u1s1 codex`)与桌面端共用。
+ * 找到(必要时下载或更新)可用的客户端运行时。CLI(`u1s1 claude` / `u1s1 codex` / `u1s1 dsh`)与桌面端共用。
  * 失败抛 RuntimePlanError(刹车/版本问题)或 RuntimeInstallError(下载问题)。
  */
 export declare function ensureAgentRuntime(agent: ManagedAgent, opts: EnsureRuntimeOptions): Promise<EnsuredRuntime>;

package/dist/agents/runtime.js

@@ -5,7 +5,8 @@
  * 用户确认后才下载;不打进我们的包、不改二进制、不动它自带的登录方式。
  * 安装交给 npm(`npm install --prefix`),上游调整包结构(平台二进制、postinstall)由 npm 处理。
  *
- * 目录布局(以 claude 为例;codex 同理,可执行文件在平台包里,见 CODEX_RUNTIME):
+ * 目录布局(以 claude 为例;codex 同理,可执行文件在平台包里,见 CODEX_RUNTIME;dsh 的入口是 JS 文件,
+ * 由 Node ≥24.9 运行,见 DSH_RUNTIME 与 node-runtime.ts):
  *   ~/.u1s1/agents/claude/runtime/<版本>/node_modules/@anthropic-ai/claude-code/bin/claude.exe
  *   ~/.u1s1/agents/claude/state.json     当前版本、pin、每日检查时间、待更新版本
  *   ~/.u1s1/agents/claude/config/        CLAUDE_CONFIG_DIR(见 claude.ts;codex 是 home/,见 codex.ts)
@@ -128,9 +129,9 @@ export function bestInstallTarget(candidates, brake) {
     }
     return best;
 }
-export const MANAGED_AGENTS = ["claude", "codex"];
+export const MANAGED_AGENTS = ["claude", "codex", "dsh"];
 export function isManagedAgent(value) {
-    return value === "claude" || value === "codex";
+    return value === "claude" || value === "codex" || value === "dsh";
 }
 function npmOs(platform) {
     return platform === "win32" ? "win32" : platform === "darwin" ? "darwin" : platform === "linux" ? "linux" : undefined;
@@ -192,11 +193,37 @@ export const CODEX_RUNTIME = {
         return `@openai/codex-${os}-${arch}/vendor/${triple}/bin/${os === "win32" ? "codex.exe" : "codex"}`;
     },
 };
+/** dsh 实测过的版本;网关刹车没给 max_tested_version(老网关、老缓存)时也不越过它(dsh.ts)。 */
+export const DSH_TESTED_VERSION = "0.2.2-rc.1";
+/**
+ * DeepSeek Harness:`@deepseek-ai/dsh`(MIT)是纯 JS 包,bin 是 `lib/bin.js`,依赖树里的原生模块
+ * (node-pty 等)带各平台预编译文件,由 npm 的 postinstall 处理。没有单独的平台包,校验时
+ * 主包同时充当「平台包」。engines.node >=24.9.0:便携包自带的 Node 22 跑不了,由 node-runtime.ts
+ * 找/下载 Node 24。0.2.2-rc.1 实测:下载约 290 MB,装好约 920 MB。
+ */
+export const DSH_RUNTIME = {
+    agent: "dsh",
+    npmPackage: "@deepseek-ai/dsh",
+    command: "dsh",
+    binEnv: "U1S1_DSH_BIN",
+    configDirEnv: "DSH_HOME",
+    probeEnv: { DSH_TELEMETRY_DISABLED: "1" },
+    platformPackage: (version, platform, arch) => {
+        if (!npmOs(platform) || (arch !== "x64" && arch !== "arm64"))
+            return undefined;
+        return { dir: "@deepseek-ai/dsh", name: "@deepseek-ai/dsh", version };
+    },
+    binInNodeModules: (platform, arch) => npmOs(platform) && (arch === "x64" || arch === "arm64") ? "@deepseek-ai/dsh/lib/bin.js" : undefined,
+    minNode: "24.9.0",
+    sizeHint: { downloadBytes: 290 * 1024 * 1024, unpackedBytes: 920 * 1024 * 1024 },
+};
 export function runtimeSpec(agent) {
     if (agent === "claude")
         return CLAUDE_RUNTIME;
     if (agent === "codex")
         return CODEX_RUNTIME;
+    if (agent === "dsh")
+        return DSH_RUNTIME;
     throw new Error(`unknown agent runtime: ${String(agent)}`);
 }
 export function runtimePaths(agentsRoot, agent) {
@@ -296,7 +323,7 @@ function isFile(p) {
  * 跑 `<bin> --version` 取版本。环境里去掉密钥、关掉自动更新;配置目录(CLAUDE_CONFIG_DIR /
  * CODEX_HOME)指到启动器自己的目录,免得探测用户自己装的客户端时碰到用户的 ~/.claude、~/.codex。
  */
-export function probeVersion(bin, configDir, spec = CLAUDE_RUNTIME) {
+export function probeVersion(bin, configDir, spec = CLAUDE_RUNTIME, node) {
     const env = stripSecretEnv(process.env);
     for (const [key, value] of Object.entries(spec.probeEnv))
         env[key] = value;
@@ -304,8 +331,12 @@ export function probeVersion(bin, configDir, spec = CLAUDE_RUNTIME) {
         env[spec.configDirEnv] = configDir;
     else
         delete env[spec.configDirEnv];
+    // JS 入口(dsh):用调用方给的 Node 跑;没给就不试(系统 node 可能太旧,报出来的错不是版本号)
+    if (spec.minNode && !node)
+        return undefined;
+    const [command, args] = spec.minNode ? [node, [bin, "--version"]] : [bin, ["--version"]];
     try {
-        const r = spawnSync(bin, ["--version"], { env, encoding: "utf8", timeout: 20_000, windowsHide: true });
+        const r = spawnSync(command, args, { env, encoding: "utf8", timeout: 20_000, windowsHide: true });
         if (r.status !== 0)
             return undefined;
         return versionFromOutput(`${r.stdout ?? ""}`);
@@ -548,7 +579,7 @@ export async function installRuntime(opts) {
         fetchPackageMeta(registry, spec.npmPackage, version),
         fetchPackageMeta(registry, plat.name, plat.version),
     ]);
-    const downloadBytes = await downloadSize(platMeta?.tarball);
+    const downloadBytes = spec.sizeHint?.downloadBytes ?? await downloadSize(platMeta?.tarball);
     if (opts.needsConsent) {
         const ok = hooks.consent
             ? await hooks.consent({
@@ -557,17 +588,20 @@ export async function installRuntime(opts) {
                 version,
                 registry,
                 downloadBytes,
-                unpackedBytes: platMeta?.unpackedSize !== undefined
+                unpackedBytes: spec.sizeHint?.unpackedBytes ?? (platMeta?.unpackedSize !== undefined
                     ? platMeta.unpackedSize + (mainMeta?.unpackedSize ?? 0)
-                    : undefined,
+                    : undefined),
             })
             : false;
         if (!ok)
             throw new RuntimeInstallError("declined", hooks.text.declined());
     }
-    const npm = opts.npm ?? findNpm({ execPath: process.execPath, platform: process.platform, env: process.env });
-    if (!npm)
+    const found = opts.npm ?? findNpm({ execPath: process.execPath, platform: process.platform, env: process.env });
+    if (!found)
         throw new RuntimeInstallError("no_npm", hooks.text.noNpm());
+    // JS 入口的客户端:npm 本身和 postinstall 都用那个够新的 Node 跑(npm 按运行它的 Node 核对 engines)
+    const scriptNode = spec.minNode ? opts.node : undefined;
+    const npm = scriptNode && found.command === process.execPath ? { ...found, command: scriptNode } : found;
     mkdirSync(paths.runtimeDir, { recursive: true, mode: 0o700 });
     const maxAttempts = opts.maxAttempts ?? 3;
     const retryDelayMs = opts.retryDelayMs ?? 3_000;
@@ -584,6 +618,7 @@ export async function installRuntime(opts) {
                 registry,
                 progress: hooks.progress,
                 totalBytes: downloadBytes,
+                node: scriptNode,
             });
             lastOutput = result.output;
             if (result.code !== 0) {
@@ -604,7 +639,7 @@ export async function installRuntime(opts) {
                 platVersion: plat.version,
                 mainMeta,
                 platMeta,
-                probe: (bin) => probeVersion(bin, opts.probeConfigDir, spec),
+                probe: (bin) => probeVersion(bin, opts.probeConfigDir, spec, opts.node),
             });
             if (problem) {
                 rmSync(staging, { recursive: true, force: true });
@@ -724,7 +759,7 @@ export function npmEnv(base, execPath, platform = process.platform) {
 function runNpmInstall(npm, o) {
     return new Promise((resolve) => {
         const child = spawn(npm.command, [...npm.prefixArgs, ...npmInstallArgs(o)], {
-            env: npmEnv(process.env, process.execPath),
+            env: npmEnv(process.env, o.node ?? process.execPath),
             stdio: ["ignore", "pipe", "pipe"],
             windowsHide: true,
         });
@@ -813,7 +848,7 @@ export class RuntimePlanError extends Error {
     }
 }
 /**
- * 找到(必要时下载或更新)可用的客户端运行时。CLI(`u1s1 claude` / `u1s1 codex`)与桌面端共用。
+ * 找到(必要时下载或更新)可用的客户端运行时。CLI(`u1s1 claude` / `u1s1 codex` / `u1s1 dsh`)与桌面端共用。
  * 失败抛 RuntimePlanError(刹车/版本问题)或 RuntimeInstallError(下载问题)。
  */
 export async function ensureAgentRuntime(agent, opts) {
@@ -821,7 +856,7 @@ export async function ensureAgentRuntime(agent, opts) {
     const paths = runtimePaths(opts.agentsRoot, agent);
     const env = opts.env ?? process.env;
     const registry = npmRegistryFor(opts.site, env);
-    const probe = (bin) => probeVersion(bin, opts.probeConfigDir, spec);
+    const probe = (bin) => probeVersion(bin, opts.probeConfigDir, spec, opts.node);
     const state = readRuntimeState(paths);
     let latestMemo;
     const plan = await planRuntime({
@@ -867,6 +902,7 @@ export async function ensureAgentRuntime(agent, opts) {
             needsConsent: plan.needsConsent,
             hooks: opts.hooks,
             probeConfigDir: opts.probeConfigDir,
+            node: opts.node,
         });
         return { ...installed, ...extra };
     }

package/dist/agents/status.d.ts

@@ -10,6 +10,10 @@ export interface InstallCommandDeps {
     fetchPublicRuntime?: (url: URL) => Promise<Response>;
     ensure?: typeof ensureAgentRuntime;
     checkLatest?: typeof dailyUpdateCheck;
+    /** dsh 的 Node;测试注入 */
+    ensureNode?: () => Promise<{
+        bin: string;
+    } | undefined>;
 }
 /**
  * `u1s1 agents install claude|codex`:找到或下载原版,不启动。与 `u1s1 claude` / `u1s1 codex` 走同一套