This is the signed public catalog used by Penglai. A reviewed DSH plugin can be published here without forcing people to reinstall the desktop app.

The active catalog is plugin-catalog-v1.000006. It intentionally lists no downloadable plugins.

The earlier @penglai/office-reader 0.1.3 was a small read-only extension used to prove the remote install path. Penglai 0.5.5 now ships the much more capable Penglai Office plugin in the app, so keeping a second office card would confuse people. Catalog 000006 retires the Reader and tells 0.5.5 clients to disable an installed copy. Its old package remains in the immutable 000005 Release for the historical record; retirement is not a claim that the package contained a security vulnerability.

Penglai does not trust this branch as a download channel. The client reads immutable GitHub Releases and verifies the catalog signature, sequence, expiry and signed last-good copy. A future plugin must also pass exact identity, package signature, SHA-256, permissions, DSH compatibility, target selection, install-disabled and rollback checks before it can appear here.

Trust rules

• Catalog tags use plugin-catalog-v1.NNNNNN; the six-digit sequence only moves forward.
• Catalog 000006 contains plugin-catalog-v1.json, its detached Ed25519 signature and SHA256SUMS. A release needs package archives only when it actually lists plugins.
• Remote plugins start disabled and cannot contain native code in the current protocol.
• Clients choose their exact target first and portable any second. They never take the first array entry by accident.
• A bad signature, stale sequence, expired catalog, wrong digest, mutable Release, unsafe redirect or permission mismatch stops the operation.
• Revocations can retire a package already installed from an older signed catalog. The package is disabled locally; its historical Release is not rewritten.

Signing keys live outside this repository. API keys, tokens, user data and private signing material do not belong here.

蓬莱插件目录

这是蓬莱使用的公开签名插件目录。经过审核的 DSH 插件可以在这里独立发布，不必让用户重新安装桌面客户端。

当前目录是 plugin-catalog-v1.000006，目前没有可下载插件，这是有意为之。

此前的 @penglai/office-reader 0.1.3 是用来跑通远程安装链路的轻量只读扩展。蓬莱 0.5.5 已经在安装包里内置能力完整得多的“蓬莱办公”，继续显示第二张办公卡只会让用户困惑。因此 000006 将 Reader 退役，并要求 0.5.5 客户端停用已经安装的副本。旧包仍保留在不可变的 000005 Release 中作为历史记录；退役不代表它存在安全漏洞。

蓬莱不会把这个分支直接当作下载源。客户端只读取不可变的 GitHub Release，并验证目录签名、序号、有效期和本地签名 last-good。未来的新插件还必须通过身份、包签名、SHA-256、权限、DSH 兼容性、平台选择、默认停用安装和回滚检查，才会出现在这里。

信任规则

• 目录标签使用 plugin-catalog-v1.NNNNNN，六位序号只能递增。
• 000006 Release 只需要目录 JSON、Ed25519 分离签名和 SHA256SUMS；只有真正列出插件时才上传插件包。
• 当前协议下，远程插件默认停用，也不能包含原生代码。
• 客户端先选择当前平台的精确产物，再考虑便携的 any，不会误拿数组第一项。
• 签名错误、序号回退、目录过期、摘要不符、Release 可变、重定向不安全或权限不匹配，操作都会停止。
• 撤销项可以停用从旧签名目录安装的包，但不会改写它所属的历史 Release。

签名私钥放在仓库之外。API Key、Token、用户数据和私钥都不能提交到这里。