@morehao/dsh-github-trending 0.2.0 → 0.3.1

package/lib/{chunk-HIJIQJCZ.js → chunk-NMINPPWO.js}

@@ -338,14 +338,21 @@ var HISTORY_FILE = "history.json";
 // src/state.ts
 var state_exports = {};
 __export(state_exports, {
+  CONTENT_HASH_ALGO_V2: () => CONTENT_HASH_ALGO_V2,
   HISTORY_LIMIT: () => HISTORY_LIMIT,
+  PREVIEW_LIMIT: () => PREVIEW_LIMIT,
+  PREVIEW_MAX_BYTES: () => PREVIEW_MAX_BYTES,
   Store: () => Store,
   newRunId: () => newRunId,
   writeJsonAtomic: () => writeJsonAtomic
 });
-import { mkdirSync, readFileSync, renameSync, writeFileSync, appendFileSync, existsSync } from "fs";
+import { mkdirSync, readFileSync, readdirSync, renameSync, statSync, unlinkSync, writeFileSync, appendFileSync, existsSync } from "fs";
 import path3 from "path";
 var HISTORY_LIMIT = 30;
+var PREVIEW_LIMIT = 30;
+var PREVIEW_MAX_BYTES = 512 * 1024;
+var CONTENT_HASH_ALGO_V2 = "jcs-sha256-v1";
+var V2_CORE_MIN = [0, 3, 0];
 function readJson(file, fallback) {
   try {
     const text = readFileSync(file, "utf8");
@@ -359,6 +366,32 @@ function readJson(file, fallback) {
 function ensureDir(dir) {
   mkdirSync(dir, { recursive: true, mode: 448 });
 }
+function coreVersionIsV2(coreVersion) {
+  if (typeof coreVersion !== "string") return false;
+  const match = /^(\d+)\.(\d+)\.(\d+)/.exec(coreVersion.trim());
+  if (match === null) return false;
+  const major = Number(match[1]);
+  const minor = Number(match[2]);
+  const patch = Number(match[3]);
+  const [minMajor, minMinor, minPatch] = V2_CORE_MIN;
+  if (major !== minMajor) return major > minMajor;
+  if (minor !== minMinor) return minor > minMinor;
+  return patch >= minPatch;
+}
+function digestIsV2(digest) {
+  return digest !== void 0 && digest.contentHashAlgo === CONTENT_HASH_ALGO_V2 && coreVersionIsV2(digest.coreVersion);
+}
+function normalizeState(state) {
+  const next = { ...state };
+  if (next.lastDigest !== void 0 && !digestIsV2(next.lastDigest)) {
+    delete next.lastDigest;
+    delete next.pendingPr;
+  }
+  if (next.lastResult !== void 0 && next.lastResult.legacy !== true && !coreVersionIsV2(next.lastResult.coreVersion)) {
+    next.lastResult = { ...next.lastResult, legacy: true };
+  }
+  return next;
+}
 function writeJsonAtomic(file, value) {
   ensureDir(path3.dirname(file));
   const temp = `${file}.${process.pid}.${Date.now()}.tmp`;
@@ -385,6 +418,9 @@ var Store = class {
   get logsPath() {
     return path3.join(this.dir, "runs");
   }
+  get previewsPath() {
+    return path3.join(this.dir, "previews");
+  }
   readSettings() {
     return normalizeSettings(readJson(this.settingsPath, {}));
   }
@@ -392,18 +428,49 @@ var Store = class {
     writeJsonAtomic(this.settingsPath, settings);
   }
   readState() {
-    return readJson(this.statePath, {});
+    return normalizeState(readJson(this.statePath, {}));
   }
   writeState(state) {
     writeJsonAtomic(this.statePath, state);
   }
+  /**
+   * 把 v1 时代遗留的 state / history 一次性清洗落盘：清掉不可信的 lastDigest 与
+   * 与之绑定的 pendingPr，并给旧历史记录打 legacy 标。插件启动时调用一次。
+   */
+  migrateLegacyState() {
+    const rawState = readJson(this.statePath, {});
+    const nextState = normalizeState(rawState);
+    const stateChanged = JSON.stringify(nextState) !== JSON.stringify(rawState);
+    if (stateChanged) this.writeState(nextState);
+    const rawHistory = readJson(this.historyPath, { records: [] });
+    const records = Array.isArray(rawHistory.records) ? rawHistory.records : [];
+    let historyMarked = 0;
+    const nextRecords = records.map((record) => {
+      if (record.legacy === true || coreVersionIsV2(record.coreVersion)) return record;
+      historyMarked += 1;
+      return { ...record, legacy: true };
+    });
+    if (historyMarked > 0) writeJsonAtomic(this.historyPath, { records: nextRecords });
+    return {
+      stateChanged,
+      clearedDigest: rawState.lastDigest !== void 0 && nextState.lastDigest === void 0,
+      clearedPendingPr: rawState.pendingPr !== void 0 && nextState.pendingPr === void 0,
+      historyMarked
+    };
+  }
   readHistory() {
+    return this.readHistoryRaw().map(
+      (record) => record.legacy === true || coreVersionIsV2(record.coreVersion) ? record : { ...record, legacy: true }
+    );
+  }
+  /** 原始历史（不做 legacy 标注）：写入路径用它，避免把「读时标注」持久化。 */
+  readHistoryRaw() {
     const file = readJson(this.historyPath, { records: [] });
     return Array.isArray(file.records) ? file.records : [];
   }
   /** 记录一次运行：历史裁剪到 30 条，state 同步更新。 */
   recordRun(record, next = {}) {
-    const records = [record, ...this.readHistory()].slice(0, HISTORY_LIMIT);
+    const records = [record, ...this.readHistoryRaw()].slice(0, HISTORY_LIMIT);
     writeJsonAtomic(this.historyPath, { records });
     const state = this.readState();
     this.writeState({ ...state, ...next, lastResult: record });
@@ -428,6 +495,61 @@ var Store = class {
       return "";
     }
   }
+  /** 预览副本路径；写入前才建目录，读接口不会凭空创建目录。 */
+  previewPath(id) {
+    return path3.join(this.previewsPath, `${id}.md`);
+  }
+  /** 写预览副本：同目录临时文件 + rename、0600；写完裁到 30 份。 */
+  writePreview(id, text) {
+    ensureDir(this.previewsPath);
+    const file = this.previewPath(id);
+    const temp = `${file}.${process.pid}.${Date.now()}.tmp`;
+    writeFileSync(temp, text, { mode: 384 });
+    renameSync(temp, file);
+    this.prunePreviews();
+  }
+  /** 读预览副本；不存在/不可读返回 undefined，超过上限时截断。 */
+  readPreview(id, maxBytes = PREVIEW_MAX_BYTES) {
+    const file = this.previewPath(id);
+    try {
+      const stat2 = statSync(file);
+      if (!stat2.isFile()) return void 0;
+      const truncated = stat2.size > maxBytes;
+      const buffer = readFileSync(file);
+      return {
+        text: (truncated ? buffer.subarray(0, maxBytes) : buffer).toString("utf8"),
+        truncated
+      };
+    } catch {
+      return void 0;
+    }
+  }
+  /** 只保留最近 `keep` 份预览副本；按 mtime 倒序，任何错误都忽略。 */
+  prunePreviews(keep = PREVIEW_LIMIT) {
+    let names;
+    try {
+      names = readdirSync(this.previewsPath);
+    } catch {
+      return;
+    }
+    const entries = [];
+    for (const name of names) {
+      if (!name.endsWith(".md")) continue;
+      const file = path3.join(this.previewsPath, name);
+      try {
+        const stat2 = statSync(file);
+        if (stat2.isFile()) entries.push({ file, mtimeMs: stat2.mtimeMs });
+      } catch {
+      }
+    }
+    entries.sort((a, b) => b.mtimeMs - a.mtimeMs);
+    for (const entry of entries.slice(keep)) {
+      try {
+        unlinkSync(entry.file);
+      } catch {
+      }
+    }
+  }
 };
 function newRunId(now = /* @__PURE__ */ new Date()) {
   const stamp = now.toISOString().replace(/[-:]/g, "").replace(/\..+$/, "").replace("T", "-");
@@ -443,6 +565,7 @@ __export(errors_exports, {
   classifyStderr: () => classifyStderr,
   hintOf: () => hintOf,
   isRetriable: () => isRetriable,
+  reasonOf: () => reasonOf,
   redact: () => redact
 });
 var PLUGIN_CODES = [
@@ -505,9 +628,37 @@ function areaOf(code) {
   if (code === "GITHUB_AUTH") return "auth";
   return "run";
 }
-function hintOf(code, message) {
-  if (code === "GIT_OPERATION_FAILED" && typeof message === "string" && /non-fast-forward|\[rejected\]|failed to push|fetch first/i.test(message)) {
-    return "\u63A8\u9001\u88AB\u62D2\uFF08non-fast-forward\uFF09\uFF1A\u8FDC\u7AEF\u5DF2\u6709\u540C\u540D\u5206\u652F\u4E14\u5386\u53F2\u5206\u53C9\u3002\u5148\u5408\u5E76/\u5173\u95ED\u5E76\u5220\u9664\u8BE5\u8FDC\u7AEF\u5206\u652F\uFF0C\u6216\u8BA9\u6838\u5FC3\u4EE5 --force-with-lease \u63A8\u9001\u540E\u91CD\u8BD5\u3002";
+function reasonOf(code, message, details) {
+  const structured = typeof details?.reason === "string" && details.reason !== "" ? details.reason : void 0;
+  if (structured !== void 0) return structured;
+  if (code !== "GIT_OPERATION_FAILED" || typeof message !== "string") return void 0;
+  if (/stale info/i.test(message)) return "stale-lease";
+  if (/non-fast-forward|fetch first/i.test(message)) return "non-fast-forward";
+  if (/permission denied|authentication failed|could not read Username|invalid username or password/i.test(message)) return "auth";
+  if (/protected branch|GH006/i.test(message)) return "protected";
+  if (/hook declined|pre-receive hook/i.test(message)) return "hook";
+  if (/pathspec/i.test(message)) return "pathspec";
+  return "unknown";
+}
+function hintOf(code, message, reason) {
+  const gitReason = reason ?? reasonOf(code, message);
+  if (code === "GIT_OPERATION_FAILED" && gitReason !== void 0) {
+    switch (gitReason) {
+      case "stale-lease":
+        return "\u63A8\u9001\u88AB\u62D2\uFF08stale info\uFF09\uFF1A\u672C\u5730\u5BF9\u8FDC\u7AEF\u5206\u652F\u7684\u8BB0\u5F55\u8FC7\u671F\uFF08\u5206\u652F\u88AB\u5220\u6216\u88AB\u6539\uFF09\uFF0C\u4E0D\u662F\u6709\u4EBA\u62A2\u5148\u63A8\u9001\u3002\u5728\u4ED3\u5E93\u91CC\u6267\u884C git fetch --prune origin \u540E\u91CD\u8BD5\uFF1B\u5347\u7EA7\u6838\u5FC3\u540E\u4E0D\u4F1A\u518D\u51FA\u73B0\u3002";
+      case "non-fast-forward":
+        return "\u63A8\u9001\u88AB\u62D2\uFF08non-fast-forward\uFF09\uFF1A\u8FDC\u7AEF\u5206\u652F\u5DF2\u524D\u8FDB\u3002\u5148 git fetch \u5E76 rebase \u5230\u8FDC\u7AEF\u5206\u652F\uFF0C\u6216\u5220\u9664\u8BE5\u8FDC\u7AEF\u5206\u652F\u540E\u91CD\u8BD5\u3002";
+      case "auth":
+        return "\u63A8\u9001\u8BA4\u8BC1\u5931\u8D25\uFF1A\u66F4\u65B0 GitHub token / gh \u767B\u5F55\u540E\u91CD\u8BD5\uFF1B\u672C\u5730 commit \u5DF2\u4FDD\u7559\u3002";
+      case "protected":
+        return "\u76EE\u6807\u5206\u652F\u53D7\u4FDD\u62A4\uFF1A\u6539\u4E3A\u901A\u8FC7 PR \u63D0\u4EA4\uFF0C\u6216\u8C03\u6574\u5206\u652F\u4FDD\u62A4\u89C4\u5219\u3002";
+      case "hook":
+        return "\u4ED3\u5E93 hook \u62D2\u7EDD\u4E86\u64CD\u4F5C\uFF1A\u6309 hook \u8F93\u51FA\u4FEE\u6B63\u540E\u91CD\u8BD5\uFF1B\u672C\u5730 commit \u5DF2\u4FDD\u7559\u3002";
+      case "pathspec":
+        return "\u6682\u5B58\u8DEF\u5F84\u4E0D\u5B58\u5728\uFF1A\u68C0\u67E5\u8BBE\u7F6E\u91CC\u7684\u8F93\u51FA\u76EE\u5F55\uFF08output.dir\uFF09\u662F\u5426\u4E0E\u4ED3\u5E93\u5B9E\u9645\u76EE\u5F55\u4E00\u81F4\u3002";
+      default:
+        return "\u63A8\u9001\u5931\u8D25\uFF1A\u672C\u5730 commit \u5DF2\u4FDD\u7559\uFF0C\u67E5\u770B\u8FD0\u884C\u65E5\u5FD7\u91CC\u7684 git \u8F93\u51FA\u540E\u91CD\u8BD5\u3002";
+    }
   }
   switch (code) {
     case "CORE_UNAVAILABLE":
@@ -636,18 +787,17 @@ var ipc_exports = {};
 __export(ipc_exports, {
   IPC_SCHEMA_VERSION: () => IPC_SCHEMA_VERSION,
   IpcError: () => IpcError,
+  SUPPORTED_CONTRACT_MAJOR: () => SUPPORTED_CONTRACT_MAJOR,
   SUPPORTED_DIGEST_SCHEMA: () => SUPPORTED_DIGEST_SCHEMA,
   isVersionInfo: () => isVersionInfo,
   parseJsonObject: () => parseJsonObject,
   parseRunResult: () => parseRunResult,
   parseVersionInfo: () => parseVersionInfo
 });
-
-// src/ipc.gen.ts
-var IPC_SCHEMA_VERSION = 1;
-
-// src/ipc.ts
-var SUPPORTED_DIGEST_SCHEMA = 1;
+import { validators } from "@morehao/trendradar-contract";
+var IPC_SCHEMA_VERSION = 2;
+var SUPPORTED_DIGEST_SCHEMA = 2;
+var SUPPORTED_CONTRACT_MAJOR = 0;
 var IpcError = class extends Error {
   code;
   constructor(code, message) {
@@ -683,19 +833,6 @@ function parseVersionInfo(text) {
   }
   return value;
 }
-function normalizeFiles(value) {
-  if (!Array.isArray(value)) return [];
-  const files = [];
-  for (const item of value) {
-    if (!isRecord(item) || typeof item.path !== "string") continue;
-    files.push({
-      path: item.path,
-      bytes: typeof item.bytes === "number" ? item.bytes : 0,
-      sha256: typeof item.sha256 === "string" ? item.sha256 : ""
-    });
-  }
-  return files;
-}
 function normalizeError(value) {
   if (!isRecord(value)) return void 0;
   if (typeof value.code !== "string" || typeof value.message !== "string") return void 0;
@@ -708,37 +845,24 @@ function normalizeError(value) {
 }
 function parseRunResult(text, options) {
   const value = parseJsonObject(text);
-  const contractShaped = value.ipcSchema === IPC_SCHEMA_VERSION && typeof value.ok === "boolean" && value.command === "run";
-  if (contractShaped) {
-    const result = value;
-    return {
-      ok: result.ok,
-      skipped: result.skipped === true,
-      dryRun: options.dryRun,
-      files: normalizeFiles(result.files),
-      contentHash: typeof value.contentHash === "string" ? value.contentHash : void 0,
-      branch: typeof value.branch === "string" ? value.branch : void 0,
-      commit: typeof value.commit === "string" ? value.commit : void 0,
-      prUrl: typeof value.prUrl === "string" ? value.prUrl : void 0,
-      error: normalizeError(result.error),
-      warnings: Array.isArray(result.warnings) ? result.warnings.filter((item) => typeof item === "string") : [],
-      ...timing(options),
-      coreVersion: options.coreVersion
-    };
-  }
-  if (!Array.isArray(value.files)) {
-    throw new IpcError("IPC_INVALID", "\u6838\u5FC3 run --json \u65E2\u4E0D\u662F\u5951\u7EA6 RunResult\uFF0C\u4E5F\u4E0D\u542B files \u6570\u7EC4");
+  if (value.command !== "run" || value.ipcSchema !== IPC_SCHEMA_VERSION || !validators.runResult(value)) {
+    throw new IpcError("IPC_INVALID", "\u6838\u5FC3 run --json \u4E0D\u662F\u5951\u7EA6 RunResult\uFF08ipcSchema=2 / command=run\uFF09");
   }
-  const digest = isRecord(value.digest) ? value.digest : void 0;
+  const result = value;
+  const error = normalizeError(result.error);
+  const skipReason = value.skipReason;
   return {
-    ok: true,
-    skipped: value.skipped === true,
+    ok: result.ok,
+    skipped: result.skipped === true,
     dryRun: options.dryRun,
-    files: normalizeFiles(value.files),
-    contentHash: typeof digest?.contentHash === "string" ? digest.contentHash : void 0,
-    branch: typeof value.branch === "string" ? value.branch : void 0,
-    prUrl: typeof value.prUrl === "string" ? value.prUrl : void 0,
-    warnings: [],
+    files: Array.isArray(result.files) ? result.files : [],
+    contentHash: typeof result.contentHash === "string" ? result.contentHash : void 0,
+    branch: typeof result.branch === "string" ? result.branch : void 0,
+    commit: typeof result.commit === "string" ? result.commit : void 0,
+    prUrl: typeof result.prUrl === "string" ? result.prUrl : void 0,
+    skipReason: typeof skipReason === "string" && skipReason !== "" ? skipReason : void 0,
+    error,
+    warnings: Array.isArray(result.warnings) ? result.warnings.filter((item) => typeof item === "string") : [],
     ...timing(options),
     coreVersion: options.coreVersion
   };
@@ -782,10 +906,11 @@ async function handshake(core, options = {}) {
     const detail = error instanceof Error ? error.message : String(error);
     throw new IpcError("CORE_INCOMPATIBLE", `\u6838\u5FC3 version --json \u8F93\u51FA\u65E0\u6CD5\u8BC6\u522B\uFF1A${detail}`);
   }
-  if (version.ipcSchema !== IPC_SCHEMA_VERSION || version.digestSchema !== SUPPORTED_DIGEST_SCHEMA) {
+  const contractMajor = typeof version.contractVersion === "string" ? Number(version.contractVersion.split(".")[0]) : void 0;
+  if (version.ipcSchema !== IPC_SCHEMA_VERSION || version.digestSchema !== SUPPORTED_DIGEST_SCHEMA || contractMajor !== SUPPORTED_CONTRACT_MAJOR) {
     throw new IpcError(
       "CORE_INCOMPATIBLE",
-      `\u6838\u5FC3\u534F\u8BAE\u4E0D\u5339\u914D\uFF1A\u6838\u5FC3 ipcSchema=${version.ipcSchema} digestSchema=${version.digestSchema}\uFF0C\u63D2\u4EF6\u652F\u6301 ipcSchema=${IPC_SCHEMA_VERSION} digestSchema=${SUPPORTED_DIGEST_SCHEMA}\u3002\u8BF7\u628A\u63D2\u4EF6\u4E0E\u6838\u5FC3\u5347\u7EA7\u5230\u540C\u4E00\u7248\u672C\uFF08\u63D2\u4EF6\u5E26\u5E73\u53F0\u5305\uFF0C\u5347\u7EA7\u63D2\u4EF6\u5373\u53EF\uFF09\u3002`
+      `\u6838\u5FC3\u534F\u8BAE\u4E0D\u5339\u914D\uFF1A\u6838\u5FC3 ipcSchema=${version.ipcSchema} digestSchema=${version.digestSchema} contractVersion=${version.contractVersion ?? "(\u7F3A\u5931)"}\uFF0C\u63D2\u4EF6\u652F\u6301 ipcSchema=${IPC_SCHEMA_VERSION} digestSchema=${SUPPORTED_DIGEST_SCHEMA} contractVersion \u4E3B\u7248\u672C=${SUPPORTED_CONTRACT_MAJOR}\u3002\u8BF7\u628A\u63D2\u4EF6\u4E0E\u6838\u5FC3\u5347\u7EA7\u5230\u540C\u4E00\u7248\u672C\uFF08\u63D2\u4EF6\u5E26\u5E73\u53F0\u5305\uFF0C\u5347\u7EA7\u63D2\u4EF6\u5373\u53EF\uFF09\u3002`
     );
   }
   const supportedProviders = Array.isArray(version.supportedProviders) && version.supportedProviders.length > 0 ? version.supportedProviders : [...DEFAULT_PROVIDERS];
@@ -803,7 +928,7 @@ __export(release_exports, {
   verifyCached: () => verifyCached
 });
 import { createHash } from "crypto";
-import { chmodSync, createWriteStream, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync as renameSync2, rmSync, statSync, unlinkSync } from "fs";
+import { chmodSync, createWriteStream, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync as renameSync2, rmSync, statSync as statSync2, unlinkSync as unlinkSync2 } from "fs";
 import { createRequire } from "module";
 import { pipeline } from "stream/promises";
 import { Readable } from "stream";
@@ -870,7 +995,7 @@ function markerPath(binaryPath) {
 function verifyCached(binaryPath) {
   let info;
   try {
-    info = statSync(binaryPath);
+    info = statSync2(binaryPath);
   } catch {
     return { ok: false, reason: "missing" };
   }
@@ -984,7 +1109,7 @@ async function ensureCore(options = {}) {
       );
     }
     try {
-      unlinkSync(descriptor.binaryPath);
+      unlinkSync2(descriptor.binaryPath);
     } catch {
     }
   }
@@ -1005,11 +1130,11 @@ __export(locate_exports, {
   locateCore: () => locateCore,
   overridePath: () => overridePath
 });
-import { accessSync, constants, existsSync as existsSync3, statSync as statSync2 } from "fs";
+import { accessSync, constants, existsSync as existsSync3, statSync as statSync3 } from "fs";
 import path5 from "path";
 function executable(file) {
   try {
-    if (!statSync2(file).isFile()) return false;
+    if (!statSync3(file).isFile()) return false;
     accessSync(file, constants.X_OK);
     return true;
   } catch {
@@ -1225,7 +1350,12 @@ async function runCore(options) {
 `;
   const secrets = [options.apiKey, options.token, ...options.secrets ?? []];
   const child = spawn2(options.core.path, buildCoreArgs(channel.path, { dryRun: options.dryRun, date: options.date }), {
-    env: sanitizedEnv(process.env, { GITHUB_TOKEN: options.token, GH_TOKEN: options.token }),
+    env: sanitizedEnv(process.env, {
+      GITHUB_TOKEN: options.token,
+      GH_TOKEN: options.token,
+      // 环境变量通道：旧核心会忽略它，不会因为多一个未知参数而失败。
+      TRENDRADAR_TRIGGER: options.trigger ?? "manual"
+    }),
     stdio: ["ignore", "pipe", "pipe"],
     windowsHide: true
   });
@@ -1356,12 +1486,12 @@ __export(core_exports, {
   findOnPath: () => findOnPath,
   inspectCore: () => inspectCore
 });
-import { accessSync as accessSync2, constants as constants3, statSync as statSync3 } from "fs";
+import { accessSync as accessSync2, constants as constants3, statSync as statSync4 } from "fs";
 import path7 from "path";
 var CACHE_TTL_MS = 3e4;
 function executable2(file) {
   try {
-    if (!statSync3(file).isFile()) return false;
+    if (!statSync4(file).isFile()) return false;
     accessSync2(file, constants3.X_OK);
     return true;
   } catch {
@@ -1457,7 +1587,7 @@ async function detectCoexistence(ownPath, options = {}) {
       };
     } else {
       const info = JSON.parse(result.stdout);
-      const compatible = info.ipcSchema === 1 && info.digestSchema === 1;
+      const compatible = info.ipcSchema === IPC_SCHEMA_VERSION && info.digestSchema === SUPPORTED_DIGEST_SCHEMA;
       status = {
         found: true,
         path: found,
@@ -1863,6 +1993,8 @@ __export(schedule_exports, {
 });
 var MINUTE = 6e4;
 var CATCH_UP_MINUTES = 6 * 60;
+var MAX_ATTEMPTS_PER_DAY = 2;
+var RETRY_GAP_MS = 5 * MINUTE;
 function partsOf(date, timezone) {
   const formatter = new Intl.DateTimeFormat("en-US", {
     timeZone: timezone,
@@ -1938,7 +2070,8 @@ var Scheduler = class {
   deps;
   timerHandle;
   stopped = false;
-  lastFiredFor;
+  /** 当天已尝试次数与时间；只在内存里，进程重启后重新计数。 */
+  attempts = /* @__PURE__ */ new Map();
   constructor(deps) {
     this.deps = deps;
   }
@@ -1972,11 +2105,18 @@ var Scheduler = class {
     if (!isDue(now, schedule)) return "skipped";
     const today = zonedDateString(now, schedule.timezone);
     const state = this.deps.store.readState();
-    const lastDate = state.lastRunAt === void 0 ? void 0 : zonedDateString(new Date(state.lastRunAt), schedule.timezone);
-    if (lastDate === today) return "skipped";
-    if (this.lastFiredFor === today) return "skipped";
+    const lastSuccess = state.lastSuccessAt === void 0 ? void 0 : zonedDateString(new Date(state.lastSuccessAt), schedule.timezone);
+    if (lastSuccess === today) return "skipped";
+    const attempt = this.attempts.get(today);
+    if (attempt !== void 0) {
+      if (attempt.count >= MAX_ATTEMPTS_PER_DAY) return "skipped";
+      if (now.getTime() - attempt.lastAt < RETRY_GAP_MS) return "skipped";
+    }
     if (this.deps.isRunning()) return "busy";
-    this.lastFiredFor = today;
+    for (const key of this.attempts.keys()) {
+      if (key !== today) this.attempts.delete(key);
+    }
+    this.attempts.set(today, { count: (attempt?.count ?? 0) + 1, lastAt: now.getTime() });
     try {
       await this.deps.run("schedule");
       return "ran";
@@ -2023,13 +2163,14 @@ var runner_exports = {};
 __export(runner_exports, {
   Runner: () => Runner
 });
-import { existsSync as existsSync4, statSync as statSync4 } from "fs";
+import { createHash as createHash2 } from "crypto";
+import { existsSync as existsSync4, readFileSync as readFileSync3, realpathSync, statSync as statSync5 } from "fs";
 import path8 from "path";
 function repoProblem(repoPath) {
   if (repoPath.trim() === "") return { code: "CONFIG_INVALID", message: "\u8FD8\u6CA1\u6709\u9009\u62E9\u5F52\u6863\u4ED3\u5E93" };
   if (!existsSync4(repoPath)) return { code: "REPO_NOT_GIT", message: `\u76EE\u5F55\u4E0D\u5B58\u5728\uFF1A${repoPath}` };
   try {
-    if (!statSync4(repoPath).isDirectory()) return { code: "REPO_NOT_GIT", message: `\u4E0D\u662F\u76EE\u5F55\uFF1A${repoPath}` };
+    if (!statSync5(repoPath).isDirectory()) return { code: "REPO_NOT_GIT", message: `\u4E0D\u662F\u76EE\u5F55\uFF1A${repoPath}` };
   } catch {
     return { code: "REPO_NOT_GIT", message: `\u65E0\u6CD5\u8BBF\u95EE\uFF1A${repoPath}` };
   }
@@ -2045,6 +2186,15 @@ function runDate(settings, now = /* @__PURE__ */ new Date()) {
     return now.toISOString().slice(0, 10);
   }
 }
+function isInside(root, target) {
+  const rel = path8.relative(root, target);
+  return rel !== "" && !rel.startsWith("..") && !path8.isAbsolute(rel);
+}
+function normalizeSha256(value) {
+  if (typeof value !== "string") return void 0;
+  const hex = value.trim().replace(/^sha256:/i, "").toLowerCase();
+  return /^[0-9a-f]{64}$/.test(hex) ? hex : void 0;
+}
 var Runner = class {
   active;
   deps;
@@ -2133,6 +2283,7 @@ var Runner = class {
         ...github.token === void 0 ? {} : { token: github.token },
         date,
         dryRun,
+        trigger: options.trigger === "schedule" ? "schedule" : "manual",
         ...baseURLOverride === void 0 ? {} : { baseURLOverride },
         signal: controller.signal,
         secrets: [apiKey, github.token],
@@ -2150,6 +2301,14 @@ var Runner = class {
         coreSource: core.source,
         ...core.tag === void 0 ? {} : { coreTag: core.tag }
       });
+      const preview = this.capturePreview({
+        id,
+        date,
+        settings,
+        outcome,
+        secrets: [apiKey, github.token]
+      });
+      if (preview !== void 0) summary.preview = preview;
       this.record(summary, settings);
       return summary;
     } catch (error) {
@@ -2177,10 +2336,12 @@ var Runner = class {
     const { outcome } = input;
     const error = outcome.error === void 0 ? void 0 : (() => {
       const message = redact(outcome.error.message);
+      const reason = reasonOf(outcome.error.code, message, outcome.error.details);
       return {
         code: outcome.error.code,
         message,
-        hint: hintOf(outcome.error.code, message),
+        ...reason === void 0 ? {} : { reason },
+        hint: hintOf(outcome.error.code, message, reason),
         area: areaOf(outcome.error.code),
         retriable: outcome.error.retriable,
         inferred: outcome.error.details?.inferred === true
@@ -2197,7 +2358,9 @@ var Runner = class {
       files: outcome.files.length,
       ...outcome.contentHash === void 0 ? {} : { contentHash: outcome.contentHash },
       ...outcome.branch === void 0 ? {} : { branch: outcome.branch },
+      ...outcome.commit === void 0 ? {} : { commit: outcome.commit },
       ...outcome.prUrl === void 0 ? {} : { prUrl: outcome.prUrl },
+      ...outcome.skipReason === void 0 ? {} : { skipReason: outcome.skipReason },
       ...error === void 0 ? {} : { error },
       warnings: outcome.warnings,
       logFile: input.logFile,
@@ -2224,6 +2387,68 @@ var Runner = class {
       logFile: input.logFile
     };
   }
+  /**
+   * 从本次核心返回的 artifact 清单里选当天的 `.md`，只读复制到 previews/。
+   *
+   * 这是插件**唯一**读取用户仓库的场景，而且只读核心自己刚写出的那一份：
+   * - 路径必须在 `repo.path` 内（词法 + realpath 各判一次，挡 `..`/绝对路径/符号链接）；
+   * - 上限 512 KB、拒绝 NUL、sha256 必须与契约声明一致；
+   * - 任何一步失败都只记日志，返回 undefined；运行结果不受影响。
+   */
+  capturePreview(input) {
+    const { outcome, settings, date, id } = input;
+    if (!outcome.ok || outcome.dryRun || outcome.skipped || date === void 0) return void 0;
+    const skip = (reason, extra = {}) => {
+      this.deps.logger?.("preview.skip", { id, reason, ...extra });
+      return void 0;
+    };
+    const markdown = outcome.files.filter((file) => {
+      const ext = path8.extname(file.path).toLowerCase();
+      return ext === ".md" && path8.basename(file.path).toLowerCase() !== "readme.md";
+    });
+    if (markdown.length === 0) return skip("no-markdown");
+    const dated = markdown.filter((file) => path8.basename(file.path) === `${date}.md`);
+    const chosen = dated.length > 0 ? dated[0] : markdown.length === 1 ? markdown[0] : void 0;
+    if (chosen === void 0) return skip("ambiguous", { candidates: markdown.length });
+    const repoPath = settings.repo.path;
+    const resolved = path8.resolve(repoPath, chosen.path);
+    if (!isInside(repoPath, resolved)) return skip("outside-repo", { path: chosen.path });
+    let fileReal;
+    try {
+      const repoReal = realpathSync(repoPath);
+      fileReal = realpathSync(resolved);
+      if (!isInside(repoReal, fileReal)) return skip("symlink-outside-repo", { path: chosen.path });
+    } catch {
+      return skip("missing-file", { path: chosen.path });
+    }
+    let buffer;
+    try {
+      const stat2 = statSync5(fileReal);
+      if (!stat2.isFile()) return skip("not-a-file", { path: chosen.path });
+      if (stat2.size > PREVIEW_MAX_BYTES) return skip("too-large", { bytes: stat2.size });
+      buffer = readFileSync3(fileReal);
+    } catch {
+      return skip("read-failed", { path: chosen.path });
+    }
+    if (buffer.includes(0)) return skip("contains-nul", { path: chosen.path });
+    const declared = normalizeSha256(chosen.sha256);
+    const actual = createHash2("sha256").update(buffer).digest("hex");
+    if (declared === void 0 || declared !== actual) {
+      return skip("sha-mismatch", { path: chosen.path, declared: declared ?? null, actual });
+    }
+    const text = redact(buffer.toString("utf8"), input.secrets);
+    const stored = Buffer.from(text, "utf8");
+    try {
+      this.deps.store.writePreview(id, text);
+    } catch {
+      return skip("write-failed", { path: chosen.path });
+    }
+    return {
+      file: path8.relative(repoPath, resolved).split(path8.sep).join("/"),
+      bytes: stored.length,
+      sha256: createHash2("sha256").update(stored).digest("hex")
+    };
+  }
   /** 写历史与状态；同一天的 skipped 运行不覆盖 lastDigest。 */
   record(summary, settings) {
     const store = this.deps.store;
@@ -2233,12 +2458,20 @@ var Runner = class {
       kind: summary.dryRun ? "dry-run" : "run",
       ok: summary.ok,
       skipped: summary.skipped,
-      ...summary.error === void 0 ? {} : { errorCode: summary.error.code, errorMessage: summary.error.message },
+      ...summary.error === void 0 ? {} : {
+        errorCode: summary.error.code,
+        errorMessage: summary.error.message,
+        ...summary.error.reason === void 0 ? {} : { errorReason: summary.error.reason }
+      },
+      ...summary.skipReason === void 0 ? {} : { skipReason: summary.skipReason },
       durationMs: summary.durationMs,
       files: summary.files,
+      ...summary.date === void 0 ? {} : { date: summary.date },
       ...summary.contentHash === void 0 ? {} : { contentHash: summary.contentHash },
       ...summary.branch === void 0 ? {} : { branch: summary.branch },
+      ...summary.commit === void 0 ? {} : { commit: summary.commit },
       ...summary.prUrl === void 0 ? {} : { prUrl: summary.prUrl },
+      ...summary.preview === void 0 ? {} : { preview: summary.preview },
       coreVersion: summary.coreVersion,
       model: { provider: settings.model.provider, model: settings.model.model },
       languages: settings.trending.languages,
@@ -2248,11 +2481,13 @@ var Runner = class {
     const state = store.readState();
     const next = {
       lastRunAt: record.at,
+      ...summary.ok ? { lastSuccessAt: record.at } : {},
       ...summary.ok && summary.prUrl !== void 0 ? { pendingPr: { url: summary.prUrl, createdAt: record.at, ...summary.date === void 0 ? {} : { date: summary.date } } } : {},
       ...summary.ok && !summary.skipped && summary.contentHash !== void 0 ? {
         lastDigest: {
           date: summary.date ?? (/* @__PURE__ */ new Date()).toISOString().slice(0, 10),
           contentHash: summary.contentHash,
+          contentHashAlgo: CONTENT_HASH_ALGO_V2,
           coreVersion: summary.coreVersion
         },
         ...state.pendingPr !== void 0 && summary.prUrl === void 0 ? { pendingPr: state.pendingPr } : {}
@@ -2268,6 +2503,48 @@ var Runner = class {
   }
 };
 
+// src/host/plugin-info.ts
+var plugin_info_exports = {};
+__export(plugin_info_exports, {
+  normalizeRepositoryUrl: () => normalizeRepositoryUrl,
+  readPluginInfo: () => readPluginInfo
+});
+import { createRequire as createRequire2 } from "module";
+var DEFAULT_NAME = "@morehao/dsh-github-trending";
+function normalizeRepositoryUrl(value) {
+  if (typeof value !== "string") return void 0;
+  let url = value.trim();
+  if (url === "") return void 0;
+  url = url.replace(/^git\+/i, "");
+  const ssh = /^git@github\.com:([^/]+)\/(.+?)(?:\.git)?$/i.exec(url);
+  if (ssh !== null) url = `https://github.com/${ssh[1]}/${ssh[2]}`;
+  url = url.replace(/\.git$/i, "");
+  try {
+    const parsed = new URL(url);
+    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return void 0;
+    if (parsed.hostname.toLowerCase() !== "github.com") return void 0;
+    const pathname = parsed.pathname.replace(/\/+$/, "");
+    if (pathname === "") return void 0;
+    return `https://github.com${pathname}`;
+  } catch {
+    return void 0;
+  }
+}
+function readPluginInfo() {
+  try {
+    const require2 = createRequire2(import.meta.url);
+    const pkg = require2("../package.json");
+    const repository = typeof pkg.repository === "string" ? normalizeRepositoryUrl(pkg.repository) : typeof pkg.repository === "object" && pkg.repository !== null ? normalizeRepositoryUrl(pkg.repository.url) : void 0;
+    return {
+      name: typeof pkg.name === "string" && pkg.name !== "" ? pkg.name : DEFAULT_NAME,
+      version: typeof pkg.version === "string" ? pkg.version : "0.0.0",
+      ...repository === void 0 ? {} : { repository }
+    };
+  } catch {
+    return { name: DEFAULT_NAME, version: "0.0.0" };
+  }
+}
+
 // src/host/github.ts
 var github_exports = {};
 __export(github_exports, {
@@ -2335,7 +2612,7 @@ __export(import_cli_exports, {
   importFromCli: () => importFromCli,
   parseSimpleYaml: () => parseSimpleYaml
 });
-import { readFileSync as readFileSync3 } from "fs";
+import { readFileSync as readFileSync4 } from "fs";
 import os3 from "os";
 import path9 from "path";
 function cliConfigCandidates(env = process.env, home = os3.homedir()) {
@@ -2427,7 +2704,7 @@ function isSecretKey(key) {
 function importFromCli(filePath, base = DEFAULT_SETTINGS) {
   let text;
   try {
-    text = readFileSync3(filePath, "utf8");
+    text = readFileSync4(filePath, "utf8");
   } catch (error) {
     return {
       ok: false,
@@ -2777,11 +3054,11 @@ var repo_exports = {};
 __export(repo_exports, {
   readDefaultBranch: () => readDefaultBranch
 });
-import { statSync as statSync5 } from "fs";
+import { statSync as statSync6 } from "fs";
 import path10 from "path";
 function isDirectory(dir) {
   try {
-    return statSync5(dir).isDirectory();
+    return statSync6(dir).isDirectory();
   } catch {
     return false;
   }
@@ -2819,6 +3096,7 @@ __export(routes_exports, {
   ROUTE_PREFIX: () => ROUTE_PREFIX,
   createRoutes: () => createRoutes
 });
+import { PluginUpdateError } from "@morehao/dsh-plugin-kit/update";
 var ROUTE_PREFIX = "/api/morehao/github-trending";
 var HEADER = "x-dsh-github-trending";
 var MAX_BODY2 = 512 * 1024;
@@ -2866,10 +3144,21 @@ function createRoutes(deps) {
       if (!response.writableEnded) sendJson2(response, 200, { ok: true, ...result });
     } catch (error) {
       if (response.writableEnded) return;
+      if (error instanceof PluginUpdateError) {
+        deps.logger?.("update.failed", { code: error.code, message: error.message });
+        sendJson2(response, 409, {
+          ok: false,
+          code: "UPDATE_FAILED",
+          updateCode: error.code,
+          message: redact(error.message),
+          update: deps.update?.view() ?? null
+        });
+        return;
+      }
       const code = error instanceof IpcError ? error.code : "INTERNAL";
       const message = redact(error instanceof Error ? error.message : String(error));
       deps.logger?.("route.error", { pathname, method, code, message });
-      const status = code === "CONFIG_INVALID" ? 400 : 500;
+      const status = code === "CONFIG_INVALID" ? 400 : code === "NOT_FOUND" ? 404 : 500;
       sendJson2(response, status, { ok: false, code, message });
     }
   };
@@ -2878,6 +3167,18 @@ async function dispatch(method, pathname, url, request, deps) {
   const env = deps.env ?? process.env;
   const settings = deps.store.readSettings();
   if (method === "GET" && pathname === "/state") return statePayload(deps, settings);
+  if (method === "GET" && pathname === "/update") {
+    if (deps.update === void 0) throw new IpcError("NOT_FOUND", "\u81EA\u66F4\u65B0\u670D\u52A1\u4E0D\u53EF\u7528");
+    const update = await deps.update.check({ fresh: url.searchParams.get("fresh") === "1" });
+    return { update };
+  }
+  if (method === "POST" && pathname === "/update") {
+    if (deps.update === void 0) throw new IpcError("NOT_FOUND", "\u81EA\u66F4\u65B0\u670D\u52A1\u4E0D\u53EF\u7528");
+    const body = await readBody2(request);
+    const version = typeof body.version === "string" && body.version.trim() !== "" ? body.version.trim() : void 0;
+    const result = await deps.update.apply(version === void 0 ? {} : { version });
+    return { result, update: deps.update.view() };
+  }
   if (method === "GET" && pathname === "/core") {
     const core = await inspectCore(settings, { env, fresh: url.searchParams.get("fresh") === "1" });
     const coexistence = await detectCoexistence(core.path, { env });
@@ -2986,6 +3287,19 @@ async function dispatch(method, pathname, url, request, deps) {
     if (result.ok && result.settings !== void 0) deps.store.writeSettings(result.settings);
     return { import: { ...result, settings: result.settings === void 0 ? void 0 : result.settings } };
   }
+  if (method === "GET" && pathname === "/preview") {
+    const id = url.searchParams.get("id") ?? "";
+    if (!/^[A-Za-z0-9-]+$/.test(id)) throw new IpcError("CONFIG_INVALID", "\u975E\u6CD5\u7684\u8FD0\u884C id");
+    const state = deps.store.readState();
+    const history = deps.store.readHistory();
+    const record = history.find((item) => item.id === id) ?? (state.lastResult?.id === id ? state.lastResult : void 0);
+    if (record === void 0 || record.preview === void 0) {
+      throw new IpcError("NOT_FOUND", "\u6CA1\u6709\u8FD9\u6B21\u8FD0\u884C\u7684\u9884\u89C8\u526F\u672C");
+    }
+    const preview = deps.store.readPreview(id);
+    if (preview === void 0) throw new IpcError("NOT_FOUND", "\u9884\u89C8\u526F\u672C\u4E0D\u5B58\u5728\u6216\u5DF2\u88AB\u6E05\u7406");
+    return { id, preview };
+  }
   if (method === "GET" && pathname === "/log") {
     const id = url.searchParams.get("id") ?? "";
     if (!/^[A-Za-z0-9-]+$/.test(id)) throw new IpcError("CONFIG_INVALID", "\u975E\u6CD5\u7684\u8FD0\u884C id");
@@ -2999,7 +3313,7 @@ async function statePayload(deps, settings) {
   const env = deps.env ?? process.env;
   const credentials = credentialServices(deps.get);
   const state = deps.store.readState();
-  const history = deps.store.readHistory().slice(0, 10);
+  const history = deps.store.readHistory();
   const core = await inspectCore(settings, { env });
   const coexistence = await detectCoexistence(core.path, { env });
   const modelCredential = await describeRef(credentials, settings.model.apiKeyRef, env);
@@ -3021,7 +3335,11 @@ async function statePayload(deps, settings) {
     }
   }
   return {
-    plugin: { name: "@morehao/dsh-github-trending", version: deps.version },
+    plugin: {
+      name: deps.pluginName ?? "@morehao/dsh-github-trending",
+      version: deps.version,
+      ...deps.repository === void 0 ? {} : { repository: deps.repository }
+    },
     settings,
     core,
     coexistence,
@@ -3053,6 +3371,57 @@ async function statePayload(deps, settings) {
   };
 }
 
+// src/host/update.ts
+var update_exports = {};
+__export(update_exports, {
+  createUpdateService: () => createUpdateService
+});
+import { normalizeProfile } from "@morehao/dsh-plugin-kit";
+import { createPluginUpdater } from "@morehao/dsh-plugin-kit/update";
+function pnpmViewRunner(get, env, exec) {
+  return async (spec) => {
+    const profile = normalizeProfile(get("profileContext"));
+    if (profile === null || profile.dir === void 0) return null;
+    const command = profile.packageManager?.command ?? "pnpm";
+    const prefix = profile.packageManager?.args ?? [];
+    let result;
+    try {
+      result = await exec(command, [...prefix, "view", spec, "version", "--json"], {
+        cwd: profile.dir,
+        env: sanitizedEnv(env),
+        timeoutMs: 8e3,
+        maxStdout: 64 * 1024,
+        maxStderr: 16 * 1024
+      });
+    } catch {
+      return null;
+    }
+    if (result.code !== 0) return null;
+    const text = result.stdout.trim();
+    if (text === "") return null;
+    let parsed;
+    try {
+      parsed = JSON.parse(text);
+    } catch {
+      return null;
+    }
+    const value = Array.isArray(parsed) ? parsed[parsed.length - 1] : parsed;
+    return typeof value === "string" && value.trim() !== "" ? value.trim() : null;
+  };
+}
+function createUpdateService(deps) {
+  const exec = deps.exec ?? execCapture;
+  return createPluginUpdater({
+    meta: deps.meta,
+    getPluginManager: () => deps.get("pluginManager"),
+    getProfile: () => deps.get("profileContext"),
+    runPnpmView: pnpmViewRunner(deps.get, deps.env, exec),
+    ...deps.fetchImpl === void 0 ? {} : { fetchImpl: deps.fetchImpl },
+    ...deps.readFile === void 0 ? {} : { readFile: deps.readFile },
+    ...deps.logger === void 0 ? {} : { logger: deps.logger }
+  });
+}
+
 // src/tools.ts
 var tools_exports = {};
 __export(tools_exports, {
@@ -3236,6 +3605,8 @@ export {
   schedule_exports,
   Runner,
   runner_exports,
+  readPluginInfo,
+  plugin_info_exports,
   github_exports,
   import_cli_exports,
   pending_pr_exports,
@@ -3244,6 +3615,8 @@ export {
   ROUTE_PREFIX,
   createRoutes,
   routes_exports,
+  createUpdateService,
+  update_exports,
   createTrendingRunTool,
   createTrendingHistoryTool,
   tools_exports