@goodandready/dsh-github-ops 0.1.0

package/lib/approval.js

@@ -0,0 +1,168 @@
+// Who approves a GitHub write, and why.
+//
+// Every state-changing tool maps to a named action. The action must be in `allowedActions`
+// (otherwise it is denied outright), a destructive action is always asked even in an
+// unattended run, and anything else asks the human with a sentence that says what is about
+// to happen — not just "perform a GitHub write".
+//
+// `decide()` is pure: the policy is a function of the call and the settings, so it is fully
+// testable and the listener stays trivial.
+
+/** Tool → action name. A tool absent from this map is not a write. */
+export const ACTION_BY_TOOL = {
+  gh_release_create: 'release-create',
+  gh_release_edit: 'release-edit',
+  gh_release_delete: 'release-delete',
+  gh_tag_create: 'tag-create',
+  gh_tag_delete: 'tag-delete',
+  gh_repo_create: 'repo-create',
+  gh_repo_edit: 'repo-edit',
+  issue_open: 'issue-open',
+  issue_comment: 'issue-comment',
+  issue_close: 'issue-close',
+  pr_create: 'pr-create',
+  pr_update: 'pr-update',
+  pr_merge: 'pr-merge',
+  review_post: 'review-post',
+  gh_variable_set: 'variable-set',
+  gh_variable_delete: 'variable-delete',
+  gh_secret_set: 'secret-set',
+  gh_secret_delete: 'secret-delete',
+  gh_ruleset_apply: 'ruleset-apply',
+  gh_ruleset_delete: 'ruleset-delete',
+  gh_branch_protection_set: 'branch-protection-set',
+  gh_branch_protection_delete: 'branch-protection-delete',
+  gh_run_rerun: 'run-rerun',
+  gh_run_cancel: 'run-cancel',
+  gh_mirror_publish: 'mirror-publish',
+}
+
+/** Actions a single confirmation cannot make safe: always asked, never auto-approved. */
+export const DESTRUCTIVE_ACTIONS = new Set([
+  'release-delete', 'tag-delete', 'variable-delete', 'secret-delete',
+  'ruleset-delete', 'branch-protection-delete', 'run-cancel',
+])
+
+export const ALL_ACTIONS = Object.freeze([...new Set(Object.values(ACTION_BY_TOOL))])
+
+const MUTATING_METHODS = new Set(['POST', 'PATCH', 'PUT', 'DELETE'])
+
+/** Which action a call is, or null when it changes nothing. */
+export function actionFor(exec) {
+  const name = exec && exec.name
+  if (!name) return null
+  if (name === 'gh_api') {
+    const args = (exec && exec.arguments) || {}
+    if (args.graphql) return null // a query may still mutate; the GraphQL text cannot be judged here
+    const method = String(args.method || 'GET').toUpperCase()
+    return MUTATING_METHODS.has(method) ? 'api-call' : null
+  }
+  return ACTION_BY_TOOL[name] || null
+}
+
+/** A sentence a human can decide on. */
+export function askReason(exec) {
+  const args = (exec && exec.arguments) || {}
+  const repo = args.repository || 'the default repository'
+  const name = exec && exec.name
+  switch (name) {
+    case 'gh_release_create':
+      return `create GitHub release ${args.tag}${args.draft ? ' (draft)' : ''} in ${repo}`
+    case 'gh_release_edit':
+      return `edit GitHub release ${args.tag || args.releaseId} in ${repo}${args.makeLatest ? ' and mark it latest' : ''}`
+    case 'gh_release_delete':
+      return `delete GitHub release ${args.tag || args.releaseId} in ${repo} (the git tag stays)`
+    case 'gh_tag_create':
+      return `create tag ${args.tag} in ${repo}`
+    case 'gh_tag_delete':
+      return `delete tag ${args.tag} in ${repo}`
+    case 'gh_repo_create':
+      return `create repository ${args.name}${args.org ? ` in ${args.org}` : ''}${args.private === false ? ' as PUBLIC' : ' (private)'}`
+    case 'gh_repo_edit':
+      return `change settings of ${repo}${args.private !== undefined ? ` (visibility: ${args.private ? 'private' : 'PUBLIC'})` : ''}`
+    case 'issue_open':
+      return `open issue "${args.title}" in ${repo}`
+    case 'issue_comment':
+      return `comment on #${args.number} in ${repo}`
+    case 'issue_close':
+      return `close #${args.number} in ${repo}`
+    case 'pr_create':
+      return `open pull request "${args.title}" (${args.head} → ${args.base || 'main'}) in ${repo}`
+    case 'pr_update':
+      return `update pull request #${args.number} in ${repo}`
+    case 'pr_merge':
+      return `MERGE pull request #${args.number} in ${repo} (${args.method || 'merge'})`
+    case 'review_post':
+      return `post a review on #${args.number} in ${repo}`
+    case 'gh_variable_set':
+      return `set variable ${args.name} in ${repo}`
+    case 'gh_variable_delete':
+      return `delete variable ${args.name} in ${repo}`
+    case 'gh_secret_set':
+      return `set secret ${args.name} in ${repo}`
+    case 'gh_secret_delete':
+      return `delete secret ${args.name} in ${repo}`
+    case 'gh_ruleset_apply':
+      return `apply ruleset ${args.name || args.rulesetId} to ${repo}`
+    case 'gh_ruleset_delete':
+      return `delete ruleset ${args.rulesetId} from ${repo}`
+    case 'gh_branch_protection_set':
+      return `replace branch protection on ${args.branch} in ${repo}`
+    case 'gh_branch_protection_delete':
+      return `remove branch protection from ${args.branch} in ${repo}`
+    case 'gh_run_rerun':
+      return `re-run workflow run ${args.runId} in ${repo}`
+    case 'gh_run_cancel':
+      return `cancel workflow run ${args.runId} in ${repo}`
+    case 'gh_mirror_publish':
+      return `publish a sanitized tree to the mirror of ${args.cwd || 'the checkout'} (${args.mirror || 'github'}/${args.branch || 'main'})`
+    case 'gh_api':
+      return `call the GitHub API: ${String(args.method || 'GET').toUpperCase()} ${args.path}`
+    default:
+      return `perform a GitHub write action (${name})`
+  }
+}
+
+/** Whether an unattended run may proceed without a human. */
+export function isUnattended(env = process.env) {
+  return String((env && env.DSH_GITHUB_OPS_UNATTENDED) || '') === '1'
+}
+
+/**
+ * The policy, as a pure function.
+ *
+ * @returns {{kind: 'allow'|'ask'|'deny'|'continue', reason?: string, action?: string|null}}
+ */
+export function decide({ exec, allowedActions, autoApprove, unattended = false } = {}) {
+  const action = actionFor(exec)
+  if (!action) return { kind: 'continue', action: null }
+
+  const allowed = Array.isArray(allowedActions) && allowedActions.length ? allowedActions : ALL_ACTIONS
+  if (!allowed.includes(action)) {
+    return { kind: 'deny', action, reason: `dsh-github-ops: action "${action}" is not in allowedActions` }
+  }
+  if (unattended && !DESTRUCTIVE_ACTIONS.has(action) && Array.isArray(autoApprove) && autoApprove.includes(action)) {
+    return { kind: 'allow', action }
+  }
+  const destructive = DESTRUCTIVE_ACTIONS.has(action) ? ' This cannot be undone here.' : ''
+  return { kind: 'ask', action, reason: `dsh-github-ops: ${askReason(exec)}.${destructive}` }
+}
+
+/**
+ * Register the gate. Registration is an effect: disposing the plugin removes the listener.
+ */
+export function registerApprovalGate(ctx, getConfig) {
+  return ctx.on('tools/pre-execute', async (exec, next) => {
+    const cfg = (typeof getConfig === 'function' ? getConfig() : getConfig) || {}
+    const decision = decide({
+      exec,
+      allowedActions: cfg.allowedActions,
+      autoApprove: cfg.autoApprove,
+      unattended: cfg.unattended !== undefined ? cfg.unattended : isUnattended(),
+    })
+    if (decision.kind === 'continue') return next()
+    if (decision.kind === 'allow') return { kind: 'allow' }
+    if (decision.kind === 'deny') return { kind: 'deny', reason: decision.reason }
+    return { kind: 'ask', reason: decision.reason }
+  })
+}

package/lib/auth.js

@@ -0,0 +1,59 @@
+// Access resolution across the sources a GitHub user actually has.
+//
+// Order (tokenSource: "auto"): the DSH credentials service, then the environment
+// variable of the same name, then the `gh` CLI session. The credential service stays
+// the recommended source — it is the only one DSH manages and rotates — but a machine
+// with `gh auth login` already done should not need a second copy of the same secret.
+//
+// The value never leaves this module except as the returned string: it is never written
+// to logs, error messages, model-visible text or session events.
+
+export const NO_ACCESS_GUIDANCE = 'Configure one of: 1) a DSH credential with this name '
+  + '($DSH_HOME/.credentials.yaml) — recommended, 2) the same-named environment variable, '
+  + '3) `gh auth login` for the gh CLI. Set tokenSource in the plugin settings to pin one source.'
+
+export const ACCESS_SOURCES = ['credentials', 'env', 'gh']
+
+/**
+ * Resolve access for one operation. Nothing is cached: a rotated credential reaches the
+ * very next call.
+ *
+ * @param credentials - the credentials service (needs `resolve`)
+ * @param tokenEnv - credential / environment-variable name, e.g. GITHUB_TOKEN
+ * @param tokenSource - 'auto' | 'credentials' | 'env' | 'gh'
+ * @param env - environment map (defaults to process.env)
+ * @param runGh - async () => string; returns the gh CLI access value, '' when unavailable
+ * @returns {Promise<{ value: string, source: string, guidance: string }>}
+ */
+export async function resolveAccess({ credentials, tokenEnv, tokenSource = 'auto', env = process.env, runGh } = {}) {
+  const order = tokenSource === 'auto' ? ACCESS_SOURCES : [tokenSource]
+  for (const source of order) {
+    if (source === 'credentials') {
+      try {
+        const resolved = credentials && typeof credentials.resolve === 'function'
+          ? await credentials.resolve(tokenEnv)
+          : null
+        const value = resolved && resolved.value ? String(resolved.value) : ''
+        if (value) return { value, source, guidance: '' }
+      } catch {
+        // an unset or unknown credential is a normal miss, not an error
+      }
+      continue
+    }
+    if (source === 'env') {
+      const value = env && tokenEnv ? String(env[tokenEnv] || '') : ''
+      if (value) return { value, source, guidance: '' }
+      continue
+    }
+    if (source === 'gh') {
+      let value = ''
+      try {
+        value = runGh ? String((await runGh()) || '').trim() : ''
+      } catch {
+        value = ''
+      }
+      if (value) return { value, source, guidance: '' }
+    }
+  }
+  return { value: '', source: '', guidance: NO_ACCESS_GUIDANCE }
+}

package/lib/client.js

@@ -0,0 +1,304 @@
+// dsh-github-ops — browser half: the plugin settings card.
+//
+// The card lives on the plugin's own page (the plugin-list seat `plugins.item`), the
+// seat the current core renders, with the legacy `settings.plugin.item` card kept for
+// older cores. The page view renders bare: the host draws the title, the icon, the
+// crumb and the padding, so the form must not add a second frame.
+//
+// Source language is English; Simplified Chinese ships as the second locale. Russian is
+// provided by dsh-russian-lang at runtime and is never hardcoded here.
+
+window.__ModuleLoader__.load({
+  id: '@goodandready/dsh-github-ops',
+  factory: (require) => {
+    var module = { exports: {} }
+    var exports = module.exports
+    const React = require('react')
+
+    const NS = 'dsh-github-ops'
+    const ROW_ID = 'dsh-github-ops'
+    const PKG = '@goodandready/dsh-github-ops'
+    const ROW_CONFIG_KEY = PKG + '#' + ROW_ID
+
+    const en = {
+      title: 'GitHub ops',
+      sub: 'Releases, tags, a guarded API pass-through, mirror publication and repository settings.',
+      cardHint: 'Token from DSH credentials; settings keep only its name.',
+      tokenEnv: 'Access name',
+      tokenSource: 'Access source',
+      tokenSourceHint: '"auto" tries the DSH credential, then the environment variable, then the gh CLI session. Pin it to use one source only.',
+      tokenEnvHint: 'Name looked up in the DSH credentials, then the environment, then the gh CLI. The value is never stored here.',
+      defaultRepository: 'Default repository',
+      defaultRepositoryHint: 'owner/repo used when a tool call omits the repository. Leave empty to always pass it explicitly.',
+      baseUrl: 'API base URL',
+      baseUrlHint: 'Change it for GitHub Enterprise; the default is the public API.',
+      timeoutMs: 'Request timeout, ms',
+      maxRetries: 'Retries for a failed read',
+      maxRetriesHint: 'A read (GET/HEAD) is retried on a network failure, a timeout or a 5xx. Writes are never retried automatically.',
+      reviewRules: 'Review rule overrides (JSON)',
+      reviewRulesHint: 'Optional. sensitivePaths, sensitiveSeverity, attentionPaths, migrationPaths, testsRequired, sourcePatterns, testPatterns, largeDiffLines. Example: {"largeDiffLines": 400, "sensitivePaths": [".env", "private/**"]}',
+      timeoutMsHint: 'How long one GitHub request may take before it is aborted.',
+      statusLoading: 'Reading settings…',
+      statusUnavailable: 'Settings service is not available in this build: values cannot be edited here.',
+      statusReadOnly: 'Settings are read-only for this session.',
+      save: 'Save',
+      saving: 'Saving…',
+      saved: 'Saved',
+      savedPartial: 'Saved, except: ',
+      noChanges: 'Nothing to change.',
+      invalidNumber: 'Enter a positive number.',
+    }
+
+    const zh = {
+      title: 'GitHub 操作',
+      sub: '发布、标签、受保护的 API 直通、镜像发布与仓库设置。',
+      cardHint: '令牌来自 DSH 凭据服务；设置里只保存凭据名称。',
+      tokenEnv: '访问名称',
+      tokenSource: '访问来源',
+      tokenSourceHint: '"auto" 依次尝试 DSH 凭据、环境变量与 gh CLI 会话；固定为某一项则只使用该来源。',
+      tokenEnvHint: '依次在 DSH 凭据、环境变量与 gh CLI 中查找该名称；取值本身不会保存在这里。',
+      defaultRepository: '默认仓库',
+      defaultRepositoryHint: '调用未指定仓库时使用的 owner/repo；留空表示每次都必须显式传入。',
+      baseUrl: 'API 地址',
+      baseUrlHint: 'GitHub Enterprise 时修改；默认使用公共 API。',
+      timeoutMs: '请求超时（毫秒）',
+      maxRetries: '读取失败重试次数',
+      maxRetriesHint: '读取（GET/HEAD）在网络故障、超时或 5xx 时重试；写入不会自动重试。',
+      reviewRules: '评审规则覆盖（JSON）',
+      reviewRulesHint: '可选。sensitivePaths、sensitiveSeverity、attentionPaths、migrationPaths、testsRequired、sourcePatterns、testPatterns、largeDiffLines。',
+      timeoutMsHint: '单个 GitHub 请求在被中断前允许的时长。',
+      statusLoading: '正在读取设置…',
+      statusUnavailable: '当前构建没有设置服务：这里无法编辑取值。',
+      statusReadOnly: '本次会话中设置为只读。',
+      save: '保存',
+      saving: '保存中…',
+      saved: '已保存',
+      savedPartial: '已保存，除了：',
+      noChanges: '没有需要修改的内容。',
+      invalidNumber: '请输入正数。',
+    }
+
+    let ChevronIcon = null
+    try {
+      const primitives = require('@deepseek-ai/dsh-client-ui-primitives')
+      ChevronIcon = primitives && (primitives.IconChevronDownOutline14 || primitives.IconChevronDownOutline)
+    } catch {
+      ChevronIcon = null
+    }
+
+    const FALLBACK_CHEVRON = React.createElement(
+      'svg',
+      { width: 14, height: 14, viewBox: '0 0 14 14', fill: 'none', stroke: 'currentColor', strokeWidth: 1.5, 'aria-hidden': 'true' },
+      React.createElement('path', { d: 'M3.5 5.25L7 8.75L10.5 5.25' }),
+    )
+
+    let cssInstalled = false
+    function ensureCss() {
+      if (cssInstalled || typeof document === 'undefined') return
+      cssInstalled = true
+      if (document.querySelector('style[data-dsh-plugin="dsh-github-ops"]')) return
+      const style = document.createElement('style')
+      style.dataset.dshPlugin = 'dsh-github-ops'
+      style.textContent = [
+        '.gho-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;list-style:none}',
+        '.gho-head{appearance:none;width:100%;font:inherit;color:inherit;text-align:left;cursor:pointer;background:0 0;border:0;border-radius:12px;display:flex;align-items:center;gap:12px;padding:14px 16px}',
+        '.gho-title{color:var(--dsw-alias-label-primary);font-size:15px;font-weight:600;line-height:1.4}',
+        '.gho-sub{color:var(--dsw-alias-label-secondary);font-size:13px}',
+        '.gho-body{border-top:1px solid var(--dsw-alias-border-l2);margin:0 16px;padding-bottom:8px}',
+        '.gho-field{display:flex;flex-direction:column;gap:6px;padding:12px 0}',
+        '.gho-label{font-size:13px;font-weight:600;color:var(--dsw-alias-label-primary)}',
+        '.gho-hint{font-size:12px;color:var(--dsw-alias-label-secondary)}',
+        '.gho-input-area{height:auto;min-height:64px;padding:8px 12px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;resize:vertical}',
+        '.gho-input{height:34px;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 12px;font-size:13px}',
+        '.gho-foot{border-top:1px solid var(--dsw-alias-border-l2);display:flex;justify-content:flex-end;align-items:center;gap:8px;padding:12px 0 4px}',
+        '.gho-save{appearance:none;font:inherit;cursor:pointer;border:1px solid transparent;border-radius:8px;padding:5px 14px;font-size:13px;background:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3)}',
+        '.gho-save[disabled]{opacity:.6;cursor:default}',
+        '.gho-note{font-size:12px;color:var(--dsw-alias-label-secondary);margin-right:auto}',
+        '.gho-chev{margin-left:auto;flex:none;color:var(--dsw-alias-label-tertiary);transition:transform .16s}',
+        '.gho-chev-open{transform:rotate(180deg)}',
+      ].join('\n')
+      document.head.appendChild(style)
+    }
+
+    function makeTranslator(locale) {
+      const dict = String(locale || '').startsWith('zh') ? zh : en
+      const fallback = en
+      return (key) => dict[key] || fallback[key] || key
+    }
+
+    /**
+     * Settings form. It checks the snapshot STATUS, not the value: while the host has
+     * not answered, or does not know the namespace, the fields must not look editable.
+     */
+    function GitHubOpsCard(props) {
+      ensureCss()
+      const ctx = props.ctx
+      const page = !!(props && props.view === 'page')
+      const t = props.t || makeTranslator(props.locale)
+      const [open, setOpen] = React.useState(!!page)
+      const [snapshot, setSnapshot] = React.useState({ status: 'loading', value: {} })
+      const [draft, setDraft] = React.useState(null)
+      const [saving, setSaving] = React.useState(false)
+      const [message, setMessage] = React.useState('')
+
+      let scope = null
+      try {
+        scope = ctx && ctx.settingsScope && ctx.settingsScope.bind({ namespace: NS })
+      } catch {
+        scope = null
+      }
+
+      React.useEffect(() => {
+        if (!scope || typeof scope.subscribe !== 'function') {
+          setSnapshot({ status: 'unavailable', value: {} })
+          return undefined
+        }
+        const read = () => {
+          const next = scope.getSnapshot()
+          setSnapshot(next || { status: 'unavailable', value: {} })
+          setDraft((current) => current || { ...(next && next.value ? next.value : {}) })
+        }
+        read()
+        return scope.subscribe(read)
+      }, [scope])
+
+      if (props && props.view === 'summary') {
+        return React.createElement('div', { className: 'gho-sub' }, t('sub'))
+      }
+
+      const status = snapshot.status
+      const value = snapshot.value || {}
+      const ready = status === 'ready'
+      const writable = ready && snapshot.writable !== false
+      const current = draft || { ...value }
+
+      const change = (key, next) => {
+        setMessage('')
+        setDraft({ ...current, [key]: next })
+      }
+
+      const save = async () => {
+        if (!scope || typeof scope.set !== 'function') return
+        setSaving(true)
+        const failed = []
+        const keys = ['tokenEnv', 'tokenSource', 'defaultRepository', 'baseUrl', 'timeoutMs', 'maxRetries', 'reviewRulesJson']
+        for (const key of keys) {
+          if (current[key] === value[key]) continue
+          let next = current[key]
+          if (key === 'timeoutMs' || key === 'maxRetries') {
+            const numeric = Number(next)
+            if (!Number.isFinite(numeric) || numeric <= 0) {
+              failed.push(`${t(key)}: ${t('invalidNumber')}`)
+              continue
+            }
+            next = numeric
+          }
+          try {
+            await scope.set(key, next)
+          } catch (err) {
+            failed.push(`${key}: ${(err && err.message) || err}`)
+          }
+        }
+        setSaving(false)
+        setMessage(failed.length ? t('savedPartial') + failed.join('; ') : t('saved'))
+        setDraft({ ...current })
+      }
+
+      const field = (key, labelKey, hintKey, kind) => React.createElement('div', { className: 'gho-field' },
+        React.createElement('label', { className: 'gho-label', htmlFor: `${NS}-${key}` }, t(labelKey)),
+        React.createElement('div', { className: 'gho-hint' }, t(hintKey)),
+        kind === 'json'
+          ? React.createElement('textarea', {
+            id: `${NS}-${key}`,
+            className: 'gho-input gho-input-area',
+            rows: 3,
+            spellCheck: false,
+            value: current[key] === undefined || current[key] === null ? '' : String(current[key]),
+            disabled: !writable,
+            onChange: (event) => change(key, event.target.value),
+          })
+          : React.createElement('input', {
+            id: `${NS}-${key}`,
+            className: 'gho-input',
+            type: kind === 'number' ? 'number' : 'text',
+            value: current[key] === undefined || current[key] === null ? '' : String(current[key]),
+            disabled: !writable,
+            onChange: (event) => change(key, event.target.value),
+          }),
+      )
+
+      const body = React.createElement('div', { className: 'gho-body' },
+        status === 'loading' ? React.createElement('div', { className: 'gho-hint' }, t('statusLoading')) : null,
+        status === 'unavailable' ? React.createElement('div', { className: 'gho-hint' }, t('statusUnavailable')) : null,
+        ready && snapshot.writable === false ? React.createElement('div', { className: 'gho-hint' }, t('statusReadOnly')) : null,
+        field('tokenEnv', 'tokenEnv', 'tokenEnvHint'),
+        field('tokenSource', 'tokenSource', 'tokenSourceHint'),
+        field('defaultRepository', 'defaultRepository', 'defaultRepositoryHint'),
+        field('baseUrl', 'baseUrl', 'baseUrlHint'),
+        field('timeoutMs', 'timeoutMs', 'timeoutMsHint', 'number'),
+        field('maxRetries', 'maxRetries', 'maxRetriesHint', 'number'),
+        field('reviewRulesJson', 'reviewRules', 'reviewRulesHint', 'json'),
+        React.createElement('div', { className: 'gho-foot' },
+          React.createElement('span', { className: 'gho-note' }, message),
+          React.createElement('button', {
+            type: 'button',
+            className: 'gho-save',
+            disabled: !writable || saving,
+            onClick: save,
+          }, saving ? t('saving') : t('save')),
+        ),
+      )
+
+      return React.createElement(page ? 'div' : 'li', { className: page ? 'gho-page' : 'gho-card' },
+        React.createElement('button', {
+          type: 'button',
+          className: 'gho-head',
+          style: page ? { display: 'none' } : undefined,
+          'aria-expanded': page ? true : open,
+          onClick: () => setOpen((v) => !v),
+        },
+          React.createElement('span', { className: 'gho-head-text' },
+            React.createElement('span', { className: 'gho-title' }, t('title')),
+            React.createElement('span', { className: 'gho-sub' }, t('cardHint')),
+          ),
+          React.createElement('span', { className: 'gho-chev' + (open ? ' gho-chev-open' : '') }, ChevronIcon ? React.createElement(ChevronIcon) : FALLBACK_CHEVRON),
+        ),
+        (page || open) ? body : null,
+      )
+    }
+
+    function apply(ctx) {
+      try {
+        if (ctx.locale && typeof ctx.locale.register === 'function') {
+          ctx.locale.register(NS, { en, zh })
+        }
+      } catch {
+        /* dictionary already registered */
+      }
+      const seats = [
+        { name: 'plugins.item', key: null, id: ROW_ID, order: 60, label: () => 'GitHub ops' },
+        { name: 'plugins.row.config', key: ROW_CONFIG_KEY },
+        { name: 'settings.plugin.item', key: NS },
+      ]
+      for (const seat of seats) {
+        try {
+          ctx.slots.inject(seat.name, () => {
+            const entry = { name: seat.name, locale: NS, inject: () => ({ ctx }) }
+            if (seat.key) entry.key = seat.key
+            if (seat.id) entry.id = seat.id
+            if (seat.order) entry.order = seat.order
+            if (seat.label) entry.label = seat.label
+            return ctx.slots.register(entry, GitHubOpsCard)
+          })
+        } catch {
+          /* a core without this seat: the remaining seats still carry the card */
+        }
+      }
+    }
+
+    exports.inject = ['slots', 'locale', 'settingsScope']
+    exports.apply = apply
+    exports.GitHubOpsCard = GitHubOpsCard
+    return module.exports
+  },
+})