@morehao/dsh-github-trending 0.7.7 → 0.7.9

package/CHANGELOG.md

@@ -1,5 +1,35 @@
 # Changelog
 
+## [v0.7.9] - 2026-11-01
+
+> 内部重构：把重复的通用实现收敛到共享底座 `@morehao/dsh-plugin-kit@^0.3.1`。对外接口与业务语义保持不变。
+
+### 改进 — 迁移到 dsh-plugin-kit 0.3.1
+
+- **子进程执行**：`src/core/exec.ts` 收敛到 kit `./exec` 的 `spawnCollect` / `sanitizedEnv`，删除本地实现；握手阶段改为判 `result.error` 抛 `CORE_SPAWN_FAILED`（kit 的 `spawnCollect` 永不 reject）。
+- **插件身份**：`plugin-info.ts` 的仓库地址规范化与读包改用 kit `./github` + `./meta`（`createPluginMeta`），保留 `readPluginInfo` / `normalizeRepositoryUrl` 导出面与返回形状。
+- **HTTP 路由**：`routes.ts` 的 `sendJson` / `readBody` / 头校验改用 kit `./http` 的 `createRouteHandler`；业务 `dispatch`、`IpcError` 错误码与 `PluginUpdateError→409` 映射保持不变，错误码翻译仍留在插件侧。
+- 对外路由响应形状、读包字段、错误码/映射均无变化（行为等价）。
+
+## [v0.7.8] - 2026-11-01
+
+> 统一「订阅」口径：这个功能不再叫「发版」，运行记录、概览、设置、订阅页与提示文案一致；顺带修好运行记录里的类型胶囊样式。
+
+### 改进 — 全站口径统一为「订阅」
+
+- **运行记录**：类型胶囊与筛选由「发版」改为「订阅」；空态改为「还没有订阅运行记录」，展开说明改为「订阅运行只做订阅检查与变更文档渲染」。
+- **概览 / 设置 / 订阅页**：「发版订阅」统一为「订阅」（速览卡、设置分区、用量卡、分区跳转）；速览 KPI「新发版」改为「新版本」，与运行记录里的「新版本」计数一致。
+- **订阅抽屉**：「发版记录」改为「变更记录」，加载与空态文案同步。
+- **英文**：`Releases` 口径统一为 `Subscriptions`；运行记录胶囊用 `Subs`（列宽 56px，完整单词会挤压右侧列）。
+- **Host 提示**：`SUBSCRIBE_FAILED` 的「发版文档」改为「变更文档」；`trending_run` 输出「发版 N 个新版本」改为「订阅 N 个新版本」；配置校验「发版日」改为「订阅检查日」。
+- `README.md` / `docs/dsh-plugin-summary.md` 同步口径；「发布插件到 npm」语义的「发版」保持不变。
+
+### 修复 — 运行记录类型胶囊样式
+
+- 订阅行此前只带 `.dshgt-pchip` 基础类，渲染成灰描边小盒子，和日报的「日榜」胶囊不是一套。现补上 `release` 变体，与日/周/月同高、同圆角、同字重，只差色相（暖橙 `#b45309`）。
+- 四个变体的颜色改为从 `--tone` 派生到宿主 token（文字 82% / 描边 30% / 填充 12%），深色主题下不再出现「亮色贴纸」。
+- 胶囊统一由 `kindChip()` 渲染，避免以后新增类型再漏类名。
+
 ## [v0.7.7] - 2026-11-01
 
 > 升级核心 `dsh.core.version` 0.8.2 → 0.8.3：修复「英文占比高的仓库被误判为摘要无效、降级为原文」；订阅抽屉遮罩背景色对齐 dsh-skills-console。

package/README.md

@@ -47,20 +47,20 @@ dsh plugin --profile <profile> add @morehao/dsh-github-trending
 ## 用量（token）
 
 - **每次运行的 token 总量**与**历史累计总量**都会记录。**只展示总用量，不拆** prompt / completion / cached 等维度。
-- 「本次任务总量」= 榜单摘要阶段（`usage.totalTokens`）+ 发版订阅阶段（`releases.usage.totalTokens`），**订阅消耗计入总量**。
+- 「本次任务总量」= 榜单摘要阶段（`usage.totalTokens`）+ 订阅阶段（`releases.usage.totalTokens`），**订阅消耗计入总量**。
 - 累计 = 历史里全部运行 `tokens` 之和，**读时求和、不落盘**（`history.json` 只存每次的 `tokens`）。
 - 插件**不做费用估算、不内置定价表**（价格随 provider / 区域变动，易过期）：只展示核心回报的 token 真值。
-- 展示位置：概览速览块（本次 / 累计 / 新发版 / 订阅仓库数）、运行记录（每行本次 tokens、展开明细、页脚累计）、历史。数据来自契约 `Usage`。旧核心无 `usage` / `releases` 时对应速览块整体隐藏（不铺「—」、不伪造 0）。
+- 展示位置：概览速览块（本次 / 累计 / 新版本 / 订阅仓库数）、运行记录（每行本次 tokens、展开明细、页脚累计）、历史。数据来自契约 `Usage`。旧核心无 `usage` / `releases` 时对应速览块整体隐藏（不铺「—」、不伪造 0）。
 
-## 发版订阅
+## 订阅（`releases` 阶段）
 
-- 订阅一组仓库，之后**每周一次**把每个仓库这一周「**新增的 Release**（无 Release 时回退 Tag）」合成一段中文总结，写到 `<output.dir>/releases/<owner>/<repo>-01.md`（每册都带两位序号，超出行数预算后下一次写入开 `-02.md`，最新一周在最上面），与榜单**同分支、同 PR** 一起提交。发版阶段**常开**；没有订阅时不产出，既有榜单产物逐字节不变。跨仓的周汇总（`releases/_weekly/<年>/<ISO周>.{md,json}`）继续生成，供外部 Web 服务的 `GET /api/v2/releases*` 消费。
+- 订阅一组仓库，之后**每周一次**把每个仓库这一周「**新增的 Release**（无 Release 时回退 Tag）」合成一段中文总结，写到 `<output.dir>/releases/<owner>/<repo>-01.md`（每册都带两位序号，超出行数预算后下一次写入开 `-02.md`，最新一周在最上面），与榜单**同分支、同 PR** 一起提交。订阅阶段**常开**；没有订阅时不产出，既有榜单产物逐字节不变。跨仓的周汇总（`releases/_weekly/<年>/<ISO周>.{md,json}`）继续生成，供外部 Web 服务的 `GET /api/v2/releases*` 消费。
 - **订阅列表随数据仓版本化**：文件在 `<repo>/<OutputRoot(output.dir)>/subscriptions.yaml`，随产物同一次 commit / PR，可审计、可复现。
 - **插件不直接写仓**：列表经核心 `subscribe` IPC 命令读改——`add` / `remove` 只写 `.git/trendradar-subscriptions.pending`，下一次 `run` 切分支后落盘并随 artifact 提交。插件侧的子进程只做一次 stdin 交互：`RunRequest{command:"subscribe", action, repo?, volume?, configPath}`；核心把 payload 放进结果信封（`subscriptions` / `subscriptionDoc`），旧核心把 `list` 结果逐行打到信封前，插件两种都认。`configPath` 由插件生成（与 `run` 同源的临时配置），保证 `subscribe` 与 `run` 解析到同一个订阅文件；代理模式下 `model.baseURL` 为空，临时配置补一个回环占位端点以通过核心 `config.Load`（订阅命令不调用模型）。
-- 界面：「订阅」页管理列表（增删 + 逐仓库状态），可展开某仓库的发版文档（`GET /subscriptions/releases?repo=&volume=`）；「设置 → 发版订阅」分区放行为参数与每周触发节奏。
+- 界面：「订阅」页管理列表（增删 + 逐仓库状态），可展开某仓库的变更文档（`GET /subscriptions/releases?repo=&volume=`）；「设置 → 订阅」分区放行为参数与每周触发节奏。
 - 周期：0.7.0 起只支持**每周**（`releases.period=weekly`）——每个 ISO 周、每仓库一条中文摘要，文档按周累积并按行数预算自动分卷；填 `daily`/`monthly` 会被校验拦下并说明原因。
-- 每周发版行程与榜单调度**互相独立**：`releases.schedule`（`enabled` / `weekday`（ISO 1=周一…7=周日）/ `time` / `timezone`）驱动 `run --stages releases`——只跑发版阶段，不抓榜单、不渲染 digest、不合并订阅 pending；成功后按 ISO 周（如 `2026-W44`）去重。
-- 历史里每条运行记录带 `releases` 摘要（仓库数 / 新发版 / 已摘要 / 降级 / 失败 / 跳过）与本次 `tokens`；旧核心没有 `releases` 块时缺省。
+- 每周订阅行程与榜单调度**互相独立**：`releases.schedule`（`enabled` / `weekday`（ISO 1=周一…7=周日）/ `time` / `timezone`）驱动 `run --stages releases`——只跑订阅阶段，不抓榜单、不渲染 digest、不合并订阅 pending；成功后按 ISO 周（如 `2026-W44`）去重。
+- 历史里每条运行记录带 `releases` 摘要（仓库数 / 新版本 / 已摘要 / 降级 / 失败 / 跳过）与本次 `tokens`；旧核心没有 `releases` 块时缺省。
 
 
 
@@ -118,13 +118,13 @@ dsh plugin --profile <profile> add @morehao/dsh-github-trending
 | `summarize.batchSize` / `maxRetries` | `10` / `1` | 摘要批量与失败重试（映射核心 `summarize.*`） |
 | `summarize.enrich` | `none` | `none` / `repo` / `readme`：是否抓取 GitHub topics / README 作为增强上下文；`repo`/`readme` 建议配只读 `GITHUB_READ_TOKEN` |
 | `summarize.readmeChars` | `800` | README 摘录长度（enrich=readme 时） |
-| `releases.includePrerelease` / `includeDrafts` | `false` / `false` | 是否含预发布 / 草稿（发版阶段常开，不提供 `enabled` 开关） |
+| `releases.includePrerelease` / `includeDrafts` | `false` / `false` | 是否含预发布 / 草稿（订阅阶段常开，不提供 `enabled` 开关） |
 | `releases.fallbackToTags` / `baselineOnFirstRun` | `true` / `true` | 无 Release 时回退 Tag / 首次只记基线 |
 | `releases.perRepoLimit` / `maxNotesChars` | `10` / `4000` | 文档列出的版本条数（1–20）/ notes 截断（500–20000） |
 | `releases.summaryMaxChars` / `docMaxLines` | `1200` / `600` | 每仓每周摘要字数（500–2000）/ 文档行数预算（100–2000，超了开新卷） |
 | `releases.concurrency` / `budgetSeconds` | `auto` / `auto` | 订阅并发（`auto` 或 1–8）/ 模型预算秒（`auto` 或 1–300）；`auto` 由插件按订阅数解析 |
 | `releases.period` | `weekly` | 只支持 `weekly`（每个 ISO 周一条摘要） |
-| `releases.schedule.enabled` / `weekday` / `time` / `timezone` | `true` / `1` / `08:00:00` / `Asia/Shanghai` | 每周发版行程（插件自己的 tick；`weekday` 为 ISO 1=周一…7=周日）；**不写进核心 YAML** |
+| `releases.schedule.enabled` / `weekday` / `time` / `timezone` | `true` / `1` / `08:00:00` / `Asia/Shanghai` | 每周订阅行程（插件自己的 tick；`weekday` 为 ISO 1=周一…7=周日）；**不写进核心 YAML** |
 | `output.dir` | `trending` | 仓库内相对目录 |
 | `schedule.enabled` / `time` / `timezone` | `true` / `08:30:00` / `Asia/Shanghai` | 插件自己的 60 s tick 驱动 |
 | `schedule.periods` | `daily,weekly,monthly` | 定时自动产出的周期：默认三周期全产出（无需勾选），日=每天、周=周日、月=月末触发；旧配置自动升级为三周期 |

package/client.js

@@ -56,7 +56,7 @@ var DICT = {
     "st.auth": "认证",
     "st.scope": "榜单",
     "st.summarize": "摘要与用量",
-    "st.releases": "发版订阅",
+    "st.releases": "订阅",
     "st.schedule": "调度",
     "card.source.title": "内容来源",
     "card.source.hint": "唯一来源是本地二进制",
@@ -243,7 +243,7 @@ var DICT = {
     "shell.digest.dek": "按周期回看日榜 / 周榜 / 月榜；只有保留过预览副本的期数能读。",
     "shell.runs.dek": "最近 30 次运行；展开看交付物、错误与日志。",
     "shell.settings.dek": "沿用现有设置页；每个分区独立保存。",
-    "shell.subscriptions.dek": "仓库发版订阅列表，随数据仓版本化；经核心 subscribe 命令增删。",
+    "shell.subscriptions.dek": "仓库订阅列表，随数据仓版本化；经核心 subscribe 命令增删。",
     "shell.nextRun": "下次运行",
     "shell.scheduleOff": "定时未开启",
     "shell.ready": "就绪 {ready} / {total}",
@@ -312,8 +312,8 @@ var DICT = {
     "runs.filter.dry": "试跑",
     "runs.type.all": "全部",
     "runs.type.digest": "日报",
-    "runs.type.release": "发版",
-    "runs.release.empty": "还没有发版运行记录",
+    "runs.type.release": "订阅",
+    "runs.release.empty": "还没有订阅运行记录",
     "runs.release.status.ok": "成功",
     "runs.release.status.failed": "失败",
     "runs.release.status.skipped": "跳过",
@@ -329,7 +329,7 @@ var DICT = {
     "runs.release.startedAt": "开始",
     "runs.release.finishedAt": "结束",
     "runs.release.error": "错误",
-    "runs.release.note": "发版运行只做订阅检查与文档渲染，不产出日报、也不合并待提交的订阅改动。",
+    "runs.release.note": "订阅运行只做订阅检查与变更文档渲染，不产出日报、也不合并待提交的订阅改动。",
     "runs.pendingPr": "待合并",
     "runs.prUnknown": "状态未知",
     "runs.prCreated": "PR 已创建",
@@ -392,15 +392,15 @@ var DICT = {
     "log.close": "关闭",
     "run.usage.tokens": "本次任务 tokens",
     "run.usage.tokensTotal": "累计全部用量",
-    "run.usage.tokensNote": "只展示总用量，不拆 prompt/completion 等维度；本次任务总量 = 榜单摘要 + 发版订阅阶段（含订阅）。旧核心无数据时显示「—」。",
-    "run.usage.breakdown": "榜单摘要 {summary} · 发版订阅 {releases} · 合计 {total}",
+    "run.usage.tokensNote": "只展示总用量，不拆 prompt/completion 等维度；本次任务总量 = 榜单摘要 + 订阅阶段（含订阅检查的模型调用）。旧核心无数据时显示「—」。",
+    "run.usage.breakdown": "榜单摘要 {summary} · 订阅 {releases} · 合计 {total}",
     "run.usage.breakdownSimple": "榜单摘要 {summary} · 合计 {total}",
-    "run.usage.releasesOnly": "发版订阅 {releases} · 合计 {total}",
-    "releases.card.title": "发版订阅（releases 阶段）",
+    "run.usage.releasesOnly": "订阅 {releases} · 合计 {total}",
+    "releases.card.title": "订阅（releases 阶段）",
     "releases.card.on": "已开启",
     "releases.card.off": "未开启",
     "releases.stat.repos": "仓库",
-    "releases.stat.new": "新发版",
+    "releases.stat.new": "新版本",
     "releases.stat.summarized": "已摘要",
     "releases.stat.degraded": "降级",
     "releases.stat.failed": "失败",
@@ -410,9 +410,9 @@ var DICT = {
     "releases.badge.summarized": "已摘要",
     "releases.badge.degraded": "降级为原文",
     "releases.badge.off": "未启用",
-    "releases.empty": "本次未启用发版订阅",
+    "releases.empty": "本次未启用订阅",
     "runs.detail.tokens": "本次任务 tokens",
-    "runs.detail.releases": "发版订阅",
+    "runs.detail.releases": "订阅",
     "runs.detail.tokensNone": "—",
     "runs.footer.total": "历史累计 tokens：{total}",
     "card.summarize.title": "摘要与用量",
@@ -429,10 +429,10 @@ var DICT = {
     "summarize.readmeChars": "README 摘录长度",
     "summarize.readmeChars.help": "enrich 为 readme 时，每个仓库 README 摘录的最大字符数（超出截断）。",
     "summarize.enrichNote": "外部增强需要只读 token：enrich=repo/readme 建议配置 GITHUB_READ_TOKEN（独立只读）；readme 模式在网络慢时可能因预算耗尽跳过部分仓库（自动降级，不影响运行）。",
-    "card.releases.title": "发版订阅",
+    "card.releases.title": "订阅",
     "card.releases.hint": "对应核心 releases.*（core 0.5.0+）",
     "releases.includePrerelease": "含预发布",
-    "releases.includePrerelease.help": "GitHub 上标记为 pre-release 的版本也计入新发版。",
+    "releases.includePrerelease.help": "GitHub 上标记为 pre-release 的版本也计入新版本。",
     "releases.includeDrafts": "含草稿",
     "releases.includeDrafts.help": "草稿（draft）Release 也计入；草稿只有写权限的 token 才看得到。",
     "releases.notesChars": "notes 截断",
@@ -450,11 +450,11 @@ var DICT = {
     "releases.concurrency.auto": "自动",
     "releases.concurrency.fixed": "指定",
     "releases.budget": "模型预算（秒）",
-    "releases.budget.help": "发版阶段调模型的预算总时长；「自动」按订阅数解析（min(300, 30 + 3×N)）。",
+    "releases.budget.help": "订阅阶段调模型的预算总时长；「自动」按订阅数解析（min(300, 30 + 3×N)）。",
     "releases.budget.auto": "自动",
     "releases.budget.fixed": "指定",
     "subs.title": "订阅",
-    "subs.desc": "管理发版订阅仓库，查看每周变更记录。",
+    "subs.desc": "管理订阅仓库，查看每周变更记录。",
     "subs.select": "选择",
     "subs.select.done": "完成",
     "subs.cmd.placeholder": "搜索 owner/repo，或输入完整仓库名直接添加",
@@ -470,7 +470,7 @@ var DICT = {
     "subs.meta.match": "匹配 {matched} / {total}",
     "subs.meta.lastWeek": "上周 {from} ~ {to} · {changed} 个仓库有变化",
     "subs.meta.thisWeek": "本周 {from} ~ {to} · {changed} 个仓库有变化",
-    "subs.meta.lastCheck": "上次发版检查 {time}",
+    "subs.meta.lastCheck": "上次订阅检查 {time}",
     "subs.add": "添加",
     "subs.add.title": "添加订阅仓库",
     "subs.add.exists": "{repo} 已在订阅列表中",
@@ -534,14 +534,14 @@ var DICT = {
     "subs.empty.clear": "清除搜索",
     "subs.loading": "加载订阅列表…",
     "subs.input.invalid": "请输入 owner/repo 形态，例如 vercel/next.js",
-    "subs.drawer.title": "发版记录 · {repo}",
+    "subs.drawer.title": "变更记录 · {repo}",
     "subs.drawer.close": "关闭",
     "subs.drawer.updated": "最近更新 {date}",
     "subs.drawer.volume": "第 {index} 册 / 共 {total} 册",
     "subs.drawer.prevVolume": "上一册",
     "subs.drawer.nextVolume": "下一册",
-    "subs.drawer.loading": "读取发版记录…",
-    "subs.drawer.empty": "这个仓库还没有发版记录，第一周检查后会出现在这里",
+    "subs.drawer.loading": "读取变更记录…",
+    "subs.drawer.empty": "这个仓库还没有变更记录，第一周检查后会出现在这里",
     "subs.drawer.retry": "重试",
     "subs.drawer.warn.rate_limited": "本周未更新（限流），下次运行会重试",
     "subs.drawer.warn.failed": "本周未更新（失败），下次运行会重试",
@@ -553,13 +553,13 @@ var DICT = {
     "weekday.5": "周五",
     "weekday.6": "周六",
     "weekday.7": "周日",
-    "subs.param.hint": "阶段行为参数（每仓上限、回退 Tag、周期等）在设置页「发版订阅」分区调整。",
-    "subs.param.link": "前往设置 → 发版订阅",
+    "subs.param.hint": "阶段行为参数（每仓上限、回退 Tag、周期等）在设置页「订阅」分区调整。",
+    "subs.param.link": "前往设置 → 订阅",
     "overview.tokens.title": "Token 用量",
     "overview.tokens.thisRun": "本次任务",
     "overview.tokens.total": "累计全部",
-    "overview.releases.title": "发版订阅",
-    "overview.releases.new": "新发版",
+    "overview.releases.title": "订阅",
+    "overview.releases.new": "新版本",
     "overview.releases.repos": "仓库",
     "overview.tokens.note": "概览一屏带出「这次任务共花了多少 token / 历史上累计多少 / 订阅仓库有几个新版本」；只给总用量，不拆维度；本次任务总量已含订阅阶段消耗。旧核心无数据时对应小块整体隐藏，不留 0。",
     "about.title": "关于",
@@ -585,7 +585,7 @@ var DICT = {
     "st.auth": "Auth",
     "st.scope": "Scope",
     "st.summarize": "Summary & usage",
-    "st.releases": "Releases",
+    "st.releases": "Subscriptions",
     "st.schedule": "Schedule",
     "card.source.title": "Content source",
     "card.source.hint": "one source: the local binary",
@@ -772,7 +772,7 @@ var DICT = {
     "shell.digest.dek": "Look back per period — daily / weekly / monthly; only issues with a saved preview copy can be read.",
     "shell.runs.dek": "The last 30 runs; expand one for artifacts, errors and logs.",
     "shell.settings.dek": "The existing settings page; each section saves on its own.",
-    "shell.subscriptions.dek": "Repo release subscription list, versioned in the data repo; add or remove via the core subscribe command.",
+    "shell.subscriptions.dek": "Repo subscription list, versioned in the data repo; add or remove via the core subscribe command.",
     "shell.nextRun": "Next run",
     "shell.scheduleOff": "Schedule off",
     "shell.ready": "Ready {ready} / {total}",
@@ -841,8 +841,8 @@ var DICT = {
     "runs.filter.dry": "Dry run",
     "runs.type.all": "All",
     "runs.type.digest": "Digest",
-    "runs.type.release": "Release",
-    "runs.release.empty": "No release runs yet",
+    "runs.type.release": "Subs",
+    "runs.release.empty": "No subscription runs yet",
     "runs.release.status.ok": "OK",
     "runs.release.status.failed": "Failed",
     "runs.release.status.skipped": "Skipped",
@@ -858,7 +858,7 @@ var DICT = {
     "runs.release.startedAt": "Started",
     "runs.release.finishedAt": "Finished",
     "runs.release.error": "Error",
-    "runs.release.note": "A release run only checks subscriptions and renders documents; it produces no digest and does not merge pending subscription changes.",
+    "runs.release.note": "A subscription run only checks subscriptions and renders change documents; it produces no digest and does not merge pending subscription changes.",
     "runs.pendingPr": "Pending merge",
     "runs.prUnknown": "State unknown",
     "runs.prCreated": "PR created",
@@ -921,11 +921,11 @@ var DICT = {
     "log.close": "Close",
     "run.usage.tokens": "This run tokens",
     "run.usage.tokensTotal": "All-time total",
-    "run.usage.tokensNote": 'Only total usage is shown, not split into prompt/completion; this run total = board summary + releases stage (subscriptions included). Old core with no data shows "—".',
-    "run.usage.breakdown": "Board {summary} · Releases {releases} · Total {total}",
+    "run.usage.tokensNote": 'Only total usage is shown, not split into prompt/completion; this run total = board summary + subscriptions stage (including the model calls of the subscription check). Old core with no data shows "—".',
+    "run.usage.breakdown": "Board {summary} · Subscriptions {releases} · Total {total}",
     "run.usage.breakdownSimple": "Board {summary} · Total {total}",
-    "run.usage.releasesOnly": "Releases {releases} · Total {total}",
-    "releases.card.title": "Releases stage",
+    "run.usage.releasesOnly": "Subscriptions {releases} · Total {total}",
+    "releases.card.title": "Subscriptions stage",
     "releases.card.on": "On",
     "releases.card.off": "Off",
     "releases.stat.repos": "Repos",
@@ -939,9 +939,9 @@ var DICT = {
     "releases.badge.summarized": "Summarized",
     "releases.badge.degraded": "Degraded to original",
     "releases.badge.off": "Disabled",
-    "releases.empty": "Releases were not enabled for this run",
+    "releases.empty": "Subscriptions were not enabled for this run",
     "runs.detail.tokens": "This run tokens",
-    "runs.detail.releases": "Releases",
+    "runs.detail.releases": "Subscriptions",
     "runs.detail.tokensNone": "—",
     "runs.footer.total": "All-time tokens: {total}",
     "card.summarize.title": "Summary & usage",
@@ -958,7 +958,7 @@ var DICT = {
     "summarize.readmeChars": "README excerpt chars",
     "summarize.readmeChars.help": "Max README characters excerpted per repo when enrich=readme (longer text is truncated).",
     "summarize.enrichNote": "Enrich needs a read-only token: enrich=repo/readme is best paired with GITHUB_READ_TOKEN (separate, read-only). In readme mode slow networks may skip some repos when the budget runs out (auto-degrades; the run is unaffected).",
-    "card.releases.title": "Releases",
+    "card.releases.title": "Subscriptions",
     "card.releases.hint": "Maps to core releases.* (core 0.5.0+)",
     "releases.includePrerelease": "Include pre-releases",
     "releases.includePrerelease.help": "Releases marked as pre-release on GitHub also count as new releases.",
@@ -979,11 +979,11 @@ var DICT = {
     "releases.concurrency.auto": "Auto",
     "releases.concurrency.fixed": "Fixed",
     "releases.budget": "Model budget (s)",
-    "releases.budget.help": "Overall budget for model calls in the releases stage; “Auto” resolves by subscription count (min(300, 30 + 3×N)).",
+    "releases.budget.help": "Overall budget for model calls in the subscriptions stage; “Auto” resolves by subscription count (min(300, 30 + 3×N)).",
     "releases.budget.auto": "Auto",
     "releases.budget.fixed": "Fixed",
     "subs.title": "Subscriptions",
-    "subs.desc": "Manage release-subscription repos and review weekly change records.",
+    "subs.desc": "Manage subscribed repos and review weekly change records.",
     "subs.select": "Select",
     "subs.select.done": "Done",
     "subs.cmd.placeholder": "Search owner/repo, or type a full repo name to add it",
@@ -999,7 +999,7 @@ var DICT = {
     "subs.meta.match": "Match {matched} / {total}",
     "subs.meta.lastWeek": "Last week {from} ~ {to} · {changed} repos changed",
     "subs.meta.thisWeek": "This week {from} ~ {to} · {changed} repos changed",
-    "subs.meta.lastCheck": "Last release check {time}",
+    "subs.meta.lastCheck": "Last subscription check {time}",
     "subs.add": "Add",
     "subs.add.title": "Add a repository",
     "subs.add.exists": "{repo} is already subscribed",
@@ -1063,14 +1063,14 @@ var DICT = {
     "subs.empty.clear": "Clear search",
     "subs.loading": "Loading subscriptions…",
     "subs.input.invalid": "Enter owner/repo form, e.g. vercel/next.js",
-    "subs.drawer.title": "Release record · {repo}",
+    "subs.drawer.title": "Change log · {repo}",
     "subs.drawer.close": "Close",
     "subs.drawer.updated": "Updated {date}",
     "subs.drawer.volume": "Volume {index} of {total}",
     "subs.drawer.prevVolume": "Previous volume",
     "subs.drawer.nextVolume": "Next volume",
-    "subs.drawer.loading": "Reading the release record…",
-    "subs.drawer.empty": "This repo has no release record yet; it appears here after the first weekly check.",
+    "subs.drawer.loading": "Reading the change log…",
+    "subs.drawer.empty": "This repo has no change log yet; it appears here after the first weekly check.",
     "subs.drawer.retry": "Retry",
     "subs.drawer.warn.rate_limited": "Not updated this week (rate limited); the next run retries.",
     "subs.drawer.warn.failed": "Not updated this week (failed); the next run retries.",
@@ -1082,12 +1082,12 @@ var DICT = {
     "weekday.5": "Fri",
     "weekday.6": "Sat",
     "weekday.7": "Sun",
-    "subs.param.hint": "Stage behaviour parameters (per-repo limit, tag fallback, period, etc.) are adjusted in the settings page Releases section.",
-    "subs.param.link": "Go to Settings → Releases",
+    "subs.param.hint": "Stage behaviour parameters (per-repo limit, tag fallback, period, etc.) are adjusted in the settings page Subscriptions section.",
+    "subs.param.link": "Go to Settings → Subscriptions",
     "overview.tokens.title": "Token usage",
     "overview.tokens.thisRun": "This run",
     "overview.tokens.total": "All-time",
-    "overview.releases.title": "Releases",
+    "overview.releases.title": "Subscriptions",
     "overview.releases.new": "New",
     "overview.releases.repos": "Repos",
     "overview.tokens.note": 'The overview surfaces "how many tokens this run spent / all-time accumulated / how many new versions across subscribed repos"; total only, not split by dimension; this run total already includes the subscriptions stage. With an old core that has no data, the corresponding tile is hidden entirely, never shown as 0.',
@@ -1382,9 +1382,13 @@ var CSS = `
 
 /* ——— 周期标签 / 分段 ——— */
 .dshgt-pchip{display:inline-flex;align-items:center;justify-content:center;height:20px;padding:0 8px;border-radius:999px;font-size:11px;font-weight:600;line-height:18px;white-space:nowrap;border:1px solid var(--gt-border);color:var(--gt-muted);background:var(--gt-bg);}
-.dshgt-pchip.daily{color:#2563eb;border-color:#dbeafe;background:#eff6ff;}
-.dshgt-pchip.weekly{color:#7c3aed;border-color:#ddd6fe;background:#f5f3ff;}
-.dshgt-pchip.monthly{color:#0f766e;border-color:#99f6e4;background:#f0fdfa;}
+/* 周期 / 订阅同族：同一套尺寸与「填充 + 同色描边 + 同色文字」，只差色相。
+   色值从 --tone 派生到宿主 token，深色主题下不会变成刺眼的浅色贴纸。 */
+.dshgt-pchip.daily{--tone:#2563eb;}
+.dshgt-pchip.weekly{--tone:#7c3aed;}
+.dshgt-pchip.monthly{--tone:#0f766e;}
+.dshgt-pchip.release{--tone:#b45309;}
+.dshgt-pchip.daily,.dshgt-pchip.weekly,.dshgt-pchip.monthly,.dshgt-pchip.release{color:color-mix(in srgb,var(--tone) 82%,var(--gt-fg));border-color:color-mix(in srgb,var(--tone) 30%,var(--gt-bg));background:color-mix(in srgb,var(--tone) 12%,var(--gt-bg));}
 .dshgt-period-seg{display:inline-flex;border:1px solid var(--gt-border);border-radius:9px;padding:3px;background:var(--gt-card);gap:3px;}
 .dshgt-period-seg button{display:inline-flex;align-items:center;gap:7px;border:0;background:none;height:30px;padding:0 12px;border-radius:7px;font:inherit;font-size:13px;color:var(--gt-muted);cursor:pointer;}
 .dshgt-period-seg button:hover{color:var(--gt-fg);}
@@ -3464,6 +3468,9 @@ function prStatus(t, state, record) {
   }
   return { label: t("runs.prCreated"), kind: "ok" };
 }
+function kindChip(text, tone) {
+  return h("span", { className: `dshgt-pchip ${tone}` }, text);
+}
 function LogDrawer(props) {
   const { t, runId } = props;
   const [loading, setLoading] = import_react.default.useState(true);
@@ -3577,7 +3584,7 @@ function RunsView(props) {
         },
         h("span", { className: `dshgt-lamp ${record.ok ? record.skipped || record.kind === "dry-run" ? "warn" : "ok" : "err"}` }),
         h("span", { className: "dshgt-run-date" }, shortTime(record.at)),
-        h("span", { className: `dshgt-pchip ${record.period ?? "daily"}` }, t(`period.${record.period ?? "daily"}`)),
+        kindChip(t(`period.${record.period ?? "daily"}`), record.period ?? "daily"),
         h(
           "span",
           { className: "dshgt-run-what" },
@@ -3608,7 +3615,7 @@ function RunsView(props) {
           detailItem(t, "run.usage.branch", record.branch === void 0 ? "—" : h("span", { className: "dshgt-mono" }, record.branch)),
           detailItem(t, "runs.detail.coreModel", `${record.coreVersion || "—"} · ${record.model?.model ?? "—"}`),
           detailItem(t, "runs.detail.date", record.date ?? "—"),
-          detailItem(t, "runs.detail.period", h("span", { className: `dshgt-pchip ${record.period ?? "daily"}` }, t(`period.${record.period ?? "daily"}`))),
+          detailItem(t, "runs.detail.period", kindChip(t(`period.${record.period ?? "daily"}`), record.period ?? "daily")),
           detailItem(
             t,
             "run.usage.pr",
@@ -3736,7 +3743,7 @@ function ReleaseRunItem(props) {
       },
       h("span", { className: `dshgt-lamp ${lamp}` }),
       h("span", { className: "dshgt-run-date" }, shortTime(run.startedAt)),
-      h("span", { className: "dshgt-pchip" }, t("runs.type.release")),
+      kindChip(t("runs.type.release"), "release"),
       h(
         "span",
         { className: "dshgt-run-what" },

package/lib/{chunk-RB6W2PK7.js → chunk-YJ5GF3MW.js}

@@ -1,8 +1,8 @@
-import {
-  __export,
-  execCapture,
-  sanitizedEnv
-} from "./chunk-R7BK7SJK.js";
+var __defProp = Object.defineProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
 
 // src/config.ts
 var config_exports = {};
@@ -327,7 +327,7 @@ function validateSettings(settings, providers = CORE_PROVIDERS) {
     problems.push({
       field: "releases.period",
       code: "CONFIG_INVALID",
-      message: "\u672C\u7248\u672C\u53EA\u652F\u6301\u6BCF\u5468\uFF08weekly\uFF09\u53D1\u7248\u6458\u8981\uFF0C\u8BF7\u628A releases.period \u6539\u4E3A weekly"
+      message: "\u672C\u7248\u672C\u53EA\u652F\u6301\u6BCF\u5468\uFF08weekly\uFF09\u8BA2\u9605\u6458\u8981\uFF0C\u8BF7\u628A releases.period \u6539\u4E3A weekly"
     });
   }
   if (!Number.isInteger(releases.perRepoLimit) || releases.perRepoLimit < 1 || releases.perRepoLimit > 20) {
@@ -349,7 +349,7 @@ function validateSettings(settings, providers = CORE_PROVIDERS) {
     problems.push({ field: "releases.budgetSeconds", code: "CONFIG_INVALID", message: "budgetSeconds \u5FC5\u987B\u662F auto \u6216 1\u2013300 \u7684\u6574\u6570" });
   }
   if (!Number.isInteger(releases.schedule.weekday) || releases.schedule.weekday < 1 || releases.schedule.weekday > 7) {
-    problems.push({ field: "releases.schedule.weekday", code: "CONFIG_INVALID", message: "\u53D1\u7248\u65E5\u5FC5\u987B\u662F ISO \u661F\u671F 1\u20137\uFF081=\u5468\u4E00\uFF09" });
+    problems.push({ field: "releases.schedule.weekday", code: "CONFIG_INVALID", message: "\u8BA2\u9605\u68C0\u67E5\u65E5\u5FC5\u987B\u662F ISO \u661F\u671F 1\u20137\uFF081=\u5468\u4E00\uFF09" });
   }
   if (!TIME_RE.test(releases.schedule.time)) {
     problems.push({ field: "releases.schedule.time", code: "CONFIG_INVALID", message: "\u65F6\u95F4\u683C\u5F0F\u5FC5\u987B\u662F HH:MM \u6216 HH:MM:SS" });
@@ -1148,16 +1148,15 @@ __export(handshake_exports, {
   DEFAULT_PROVIDERS: () => DEFAULT_PROVIDERS,
   handshake: () => handshake
 });
+import { spawnCollect as execCapture } from "@morehao/dsh-plugin-kit/exec";
 var DEFAULT_PROVIDERS = ["deepseek", "openai-compatible"];
 async function handshake(core, options = {}) {
-  let result;
-  try {
-    result = await execCapture(core.path, ["version", "--json"], {
-      timeoutMs: options.timeoutMs ?? 5e3,
-      signal: options.signal
-    });
-  } catch (error) {
-    const detail = error instanceof Error ? error.message : String(error);
+  const result = await execCapture(core.path, ["version", "--json"], {
+    timeoutMs: options.timeoutMs ?? 5e3,
+    signal: options.signal
+  });
+  if (result.error !== void 0) {
+    const detail = result.error.message;
     throw new IpcError("CORE_SPAWN_FAILED", `\u65E0\u6CD5\u6267\u884C\u6838\u5FC3 ${core.path}\uFF1A${detail}`);
   }
   if (result.aborted || options.signal?.aborted === true) {
@@ -1590,6 +1589,7 @@ __export(run_exports, {
   runCore: () => runCore
 });
 import { spawn as spawn2 } from "child_process";
+import { sanitizedEnv } from "@morehao/dsh-plugin-kit/exec";
 var DEFAULT_RUN_TIMEOUT_MS = 12e4;
 var MAX_STDOUT = 16 * 1024 * 1024;
 var MAX_STDERR = 2 * 1024 * 1024;
@@ -1772,6 +1772,7 @@ __export(core_exports, {
 });
 import { accessSync as accessSync2, constants as constants3, statSync as statSync4 } from "fs";
 import path7 from "path";
+import { spawnCollect as execCapture2 } from "@morehao/dsh-plugin-kit/exec";
 function coreRepoFromSource(repo) {
   let ownerRepo = repo;
   if (ownerRepo === void 0) {
@@ -1876,7 +1877,7 @@ async function detectCoexistence(ownPath, options = {}) {
   }
   let status;
   try {
-    const result = await execCapture(found, ["version", "--json"], { timeoutMs: 3e3 });
+    const result = await execCapture2(found, ["version", "--json"], { timeoutMs: 3e3 });
     if (result.code !== 0) {
       status = {
         found: true,
@@ -1970,8 +1971,8 @@ async function defaultGhToken(fresh = false) {
   if (!fresh && ghTokenCache !== void 0 && Date.now() - ghTokenCache.at < GH_TOKEN_TTL_MS) {
     return ghTokenCache.value;
   }
-  const { execCapture: execCapture2 } = await import("./exec-VMDINNX5.js");
-  const result = await execCapture2("gh", ["auth", "token"], { timeoutMs: 2e3 });
+  const { spawnCollect: execCapture6 } = await import("@morehao/dsh-plugin-kit/exec");
+  const result = await execCapture6("gh", ["auth", "token"], { timeoutMs: 2e3 });
   const token = result.code === 0 ? result.stdout.trim() : "";
   const value = token === "" ? void 0 : token;
   ghTokenCache = { value, at: Date.now() };
@@ -2407,7 +2408,7 @@ function nextReleaseOccurrence(now, cfg) {
     const candidate = zonedTimeToUtc(year, month, day, hour, minute, second, cfg.timezone);
     if (candidate.getTime() > now.getTime()) return candidate;
   }
-  throw new Error(`\u65E0\u6CD5\u8BA1\u7B97\u4E0B\u4E00\u6B21\u53D1\u7248\u8FD0\u884C\u65F6\u523B\uFF08weekday=${String(cfg.weekday)}\uFF09`);
+  throw new Error(`\u65E0\u6CD5\u8BA1\u7B97\u4E0B\u4E00\u6B21\u8BA2\u9605\u8FD0\u884C\u65F6\u523B\uFF08weekday=${String(cfg.weekday)}\uFF09`);
 }
 function isReleaseDue(now, cfg) {
   if (isoWeekdayOf(now, cfg.timezone) !== cfg.weekday) return false;
@@ -2660,6 +2661,7 @@ __export(subscribe_exports, {
 import { mkdtempSync as mkdtempSync2, writeFileSync as writeFileSync2, rmSync as rmSync2 } from "fs";
 import os3 from "os";
 import path8 from "path";
+import { spawnCollect as execCapture3, sanitizedEnv as sanitizedEnv2 } from "@morehao/dsh-plugin-kit/exec";
 var SUBSCRIBE_TIMEOUT_MS = 8e3;
 var RELEASES_TIMEOUT_MS = 3e4;
 var REPO_PATTERN2 = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/;
@@ -2709,8 +2711,8 @@ async function runSubscribe(input, deps) {
       configPath: file
     };
     const timeoutMs = input.action === "releases" ? RELEASES_TIMEOUT_MS : SUBSCRIBE_TIMEOUT_MS;
-    const result = await execCapture(corePath, ["subscribe", "--json"], {
-      env: sanitizedEnv(env),
+    const result = await execCapture3(corePath, ["subscribe", "--json"], {
+      env: sanitizedEnv2(env),
       input: JSON.stringify(request),
       timeoutMs
     });
@@ -3411,40 +3413,17 @@ __export(plugin_info_exports, {
   normalizeRepositoryUrl: () => normalizeRepositoryUrl,
   readPluginInfo: () => readPluginInfo
 });
-import { createRequire as createRequire2 } from "module";
+import { normalizeRepositoryUrl } from "@morehao/dsh-plugin-kit/github";
+import { createPluginMeta } from "@morehao/dsh-plugin-kit/meta";
 var DEFAULT_NAME = "@morehao/dsh-github-trending";
-function normalizeRepositoryUrl(value) {
-  if (typeof value !== "string") return void 0;
-  let url = value.trim();
-  if (url === "") return void 0;
-  url = url.replace(/^git\+/i, "");
-  const ssh = /^git@github\.com:([^/]+)\/(.+?)(?:\.git)?$/i.exec(url);
-  if (ssh !== null) url = `https://github.com/${ssh[1]}/${ssh[2]}`;
-  url = url.replace(/\.git$/i, "");
-  try {
-    const parsed = new URL(url);
-    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return void 0;
-    if (parsed.hostname.toLowerCase() !== "github.com") return void 0;
-    const pathname = parsed.pathname.replace(/\/+$/, "");
-    if (pathname === "") return void 0;
-    return `https://github.com${pathname}`;
-  } catch {
-    return void 0;
-  }
-}
+var PKG_URL = new URL("../package.json", import.meta.url);
 function readPluginInfo() {
-  try {
-    const require2 = createRequire2(import.meta.url);
-    const pkg = require2("../package.json");
-    const repository = typeof pkg.repository === "string" ? normalizeRepositoryUrl(pkg.repository) : typeof pkg.repository === "object" && pkg.repository !== null ? normalizeRepositoryUrl(pkg.repository.url) : void 0;
-    return {
-      name: typeof pkg.name === "string" && pkg.name !== "" ? pkg.name : DEFAULT_NAME,
-      version: typeof pkg.version === "string" ? pkg.version : "0.0.0",
-      ...repository === void 0 ? {} : { repository }
-    };
-  } catch {
-    return { name: DEFAULT_NAME, version: "0.0.0" };
-  }
+  const meta = createPluginMeta({ pkgUrl: PKG_URL, defaultName: DEFAULT_NAME });
+  return {
+    name: meta.name,
+    version: meta.version,
+    ...meta.repository === void 0 ? {} : { repository: meta.repository }
+  };
 }
 
 // src/host/github.ts
@@ -3958,6 +3937,7 @@ __export(repo_exports, {
 });
 import { statSync as statSync6 } from "fs";
 import path11 from "path";
+import { spawnCollect as execCapture4 } from "@morehao/dsh-plugin-kit/exec";
 function isDirectory(dir) {
   try {
     return statSync6(dir).isDirectory();
@@ -3967,7 +3947,7 @@ function isDirectory(dir) {
 }
 async function git(dir, args, env) {
   try {
-    const result = await execCapture("git", ["-C", dir, ...args], { env, timeoutMs: 5e3 });
+    const result = await execCapture4("git", ["-C", dir, ...args], { env, timeoutMs: 5e3 });
     return result.code === 0 ? result.stdout.trim() : void 0;
   } catch {
     return void 0;
@@ -3998,77 +3978,53 @@ __export(routes_exports, {
   ROUTE_PREFIX: () => ROUTE_PREFIX,
   createRoutes: () => createRoutes
 });
+import { createRouteHandler, HttpError } from "@morehao/dsh-plugin-kit/http";
 import { PluginUpdateError } from "@morehao/dsh-plugin-kit/update";
 var ROUTE_PREFIX = "/api/morehao/github-trending";
 var HEADER = "x-dsh-github-trending";
 var MAX_BODY2 = 512 * 1024;
-function sendJson2(response, status, payload) {
-  const body = JSON.stringify(payload);
-  response.writeHead(status, {
-    "content-type": "application/json; charset=utf-8",
-    "cache-control": "no-store",
-    "content-length": Buffer.byteLength(body)
-  });
-  response.end(body);
-}
-async function readBody2(request) {
-  const chunks = [];
-  let size = 0;
-  for await (const chunk of request) {
-    size += chunk.length;
-    if (size > MAX_BODY2) throw new IpcError("PAYLOAD_TOO_LARGE", "\u8BF7\u6C42\u4F53\u8FC7\u5927");
-    chunks.push(chunk);
-  }
-  if (chunks.length === 0) return {};
-  const text = Buffer.concat(chunks).toString("utf8").trim();
-  if (text === "") return {};
-  try {
-    const value = JSON.parse(text);
-    if (typeof value !== "object" || value === null || Array.isArray(value)) {
-      throw new Error("body must be a JSON object");
-    }
-    return value;
-  } catch (error) {
-    throw new IpcError("CONFIG_INVALID", `\u8BF7\u6C42\u4F53\u4E0D\u662F JSON \u5BF9\u8C61\uFF1A${error instanceof Error ? error.message : String(error)}`);
-  }
-}
 function createRoutes(deps) {
-  return async function handler(request, response) {
-    if (request.headers[HEADER] !== "1") {
-      sendJson2(response, 403, { ok: false, code: "FORBIDDEN", message: `\u7F3A\u5C11 ${HEADER}: 1 \u5934` });
-      return;
-    }
-    const url = new URL(request.url ?? "/", "http://127.0.0.1");
-    const pathname = url.pathname.startsWith(ROUTE_PREFIX) ? url.pathname.slice(ROUTE_PREFIX.length) || "/" : url.pathname;
-    const method = (request.method ?? "GET").toUpperCase();
-    try {
-      const result = await dispatch(method, pathname, url, request, deps);
-      if (!response.writableEnded) sendJson2(response, 200, { ok: true, ...result });
-    } catch (error) {
-      if (response.writableEnded) return;
+  const logger = deps.logger;
+  let current = { method: "GET", pathname: "/" };
+  const handler = createRouteHandler({
+    prefix: ROUTE_PREFIX,
+    header: HEADER,
+    maxBodyBytes: MAX_BODY2,
+    dispatch: async ({ method, pathname, url, body }) => {
+      current = { method, pathname };
+      return dispatch(method, pathname, url, body, deps);
+    },
+    // 错误码翻译留在插件侧（dispatcher 不做映射）：保持与原实现的响应形状逐字一致。
+    onError: (error) => {
       if (error instanceof PluginUpdateError) {
-        deps.logger?.("update.failed", { code: error.code, message: error.message });
-        sendJson2(response, 409, {
-          ok: false,
+        logger?.("update.failed", { code: error.code, message: error.message });
+        return {
+          status: 409,
           code: "UPDATE_FAILED",
-          updateCode: error.code,
           message: redact(error.message),
-          update: deps.update?.view() ?? null
-        });
-        return;
+          extra: { updateCode: error.code, update: deps.update?.view() ?? null }
+        };
+      }
+      if (error instanceof HttpError) {
+        const code2 = error.code === "PAYLOAD_TOO_LARGE" ? "PAYLOAD_TOO_LARGE" : "CONFIG_INVALID";
+        return { status: 400, code: code2, message: redact(error.message) };
       }
       const code = error instanceof IpcError ? error.code : "INTERNAL";
       const message = redact(error instanceof Error ? error.message : String(error));
-      deps.logger?.("route.error", { pathname, method, code, message });
+      logger?.("route.error", { pathname: current.pathname, method: current.method, code, message });
       const status = code === "CONFIG_INVALID" ? (
         // 「已有一次运行在进行中」是并发冲突而非参数错误：用 409，前端据此禁用按钮并提示。
         message.includes("\u8FD0\u884C\u5728\u8FDB\u884C\u4E2D") ? 409 : 400
       ) : code === "NOT_FOUND" ? 404 : 500;
-      sendJson2(response, status, { ok: false, code, message });
-    }
+      return { status, code, message };
+    },
+    logger
+  });
+  return async function routeHandler(request, response) {
+    await handler(request, response);
   };
 }
-async function dispatch(method, pathname, url, request, deps) {
+async function dispatch(method, pathname, url, body, deps) {
   const env = deps.env ?? process.env;
   const settings = deps.store.readSettings();
   if (method === "GET" && pathname === "/state") return statePayload(deps, settings);
@@ -4079,7 +4035,6 @@ async function dispatch(method, pathname, url, request, deps) {
   }
   if (method === "POST" && pathname === "/update") {
     if (deps.update === void 0) throw new IpcError("NOT_FOUND", "\u81EA\u66F4\u65B0\u670D\u52A1\u4E0D\u53EF\u7528");
-    const body = await readBody2(request);
     const version = typeof body.version === "string" && body.version.trim() !== "" ? body.version.trim() : void 0;
     const result = await deps.update.apply(version === void 0 ? {} : { version });
     return { result, update: deps.update.view() };
@@ -4095,7 +4050,6 @@ async function dispatch(method, pathname, url, request, deps) {
     return { downloaded: true, path: core.path, tag: core.tag ?? null, core: status };
   }
   if (method === "POST" && pathname === "/config") {
-    const body = await readBody2(request);
     const incoming = normalizeSettings(body.settings ?? body);
     const section = typeof body.section === "string" && SETTINGS_SECTIONS.includes(body.section) ? body.section : void 0;
     let next = section === void 0 ? incoming : mergeSettingsSection(settings, incoming, section);
@@ -4114,7 +4068,6 @@ async function dispatch(method, pathname, url, request, deps) {
     return { saved: true, settings: next, problems: [] };
   }
   if (method === "POST" && pathname === "/preflight") {
-    const body = await readBody2(request);
     const candidate = body.settings === void 0 ? settings : normalizeSettings(body.settings);
     const result = await preflightModel({
       settings: candidate,
@@ -4125,7 +4078,6 @@ async function dispatch(method, pathname, url, request, deps) {
     return { preflight: result };
   }
   if (method === "POST" && pathname === "/run") {
-    const body = await readBody2(request);
     const base = {
       dryRun: body.dryRun === true,
       ...typeof body.date === "string" && body.date !== "" ? { date: body.date } : {},
@@ -4143,7 +4095,6 @@ async function dispatch(method, pathname, url, request, deps) {
     return { cancelled: deps.runner.cancel() };
   }
   if (method === "POST" && pathname === "/releases/run") {
-    const body = await readBody2(request);
     let repo;
     if (body.repo !== void 0) {
       if (typeof body.repo !== "string" || !isValidRepo(body.repo.trim())) {
@@ -4183,15 +4134,14 @@ async function dispatch(method, pathname, url, request, deps) {
       { store: deps.store, env }
     );
     if (!result.ok) {
-      throw new IpcError("SUBSCRIBE_FAILED", result.error?.message ?? `\u8BFB\u53D6 ${repo} \u7684\u53D1\u7248\u6587\u6863\u5931\u8D25`);
+      throw new IpcError("SUBSCRIBE_FAILED", result.error?.message ?? `\u8BFB\u53D6 ${repo} \u7684\u53D8\u66F4\u6587\u6863\u5931\u8D25`);
     }
     if (result.doc === void 0) {
-      throw new IpcError("SUBSCRIBE_FAILED", `\u6838\u5FC3\u6CA1\u6709\u8FD4\u56DE ${repo} \u7684\u53D1\u7248\u6587\u6863`);
+      throw new IpcError("SUBSCRIBE_FAILED", `\u6838\u5FC3\u6CA1\u6709\u8FD4\u56DE ${repo} \u7684\u53D8\u66F4\u6587\u6863`);
     }
     return { ...result.doc };
   }
   if (method === "POST" && pathname === "/subscriptions") {
-    const body = await readBody2(request);
     const action = body.action === "add" || body.action === "remove" ? body.action : void 0;
     if (action === void 0) throw new IpcError("CONFIG_INVALID", "action \u5FC5\u987B\u662F add \u6216 remove");
     const repos = Array.isArray(body.repos) ? body.repos.filter((item) => typeof item === "string" && item.trim() !== "").map((item) => item.trim()) : typeof body.repo === "string" && body.repo.trim() !== "" ? [body.repo.trim()] : [];
@@ -4206,7 +4156,6 @@ async function dispatch(method, pathname, url, request, deps) {
     return { repos: latest.ok ? latest.repos : [], items: latest.ok ? latest.items ?? [] : [] };
   }
   if (method === "POST" && pathname === "/github/test") {
-    const body = await readBody2(request);
     const candidate = body.settings === void 0 ? settings : normalizeSettings(body.settings);
     const probe = await probeGithubAuth({
       credentials: credentialServices(deps.get),
@@ -4225,7 +4174,6 @@ async function dispatch(method, pathname, url, request, deps) {
     return { providers: candidates, defaultSelection: readDefaultSelection(deps.get) ?? null };
   }
   if (method === "POST" && pathname === "/quickfill") {
-    const body = await readBody2(request);
     const candidates = await listProviderCandidates({
       llm: llmServices(deps.get),
       credentials: credentialServices(deps.get),
@@ -4357,6 +4305,7 @@ __export(update_exports, {
 });
 import { normalizeProfile } from "@morehao/dsh-plugin-kit";
 import { createPluginUpdater } from "@morehao/dsh-plugin-kit/update";
+import { spawnCollect as execCapture5, sanitizedEnv as sanitizedEnv3 } from "@morehao/dsh-plugin-kit/exec";
 function pnpmViewRunner(get, env, exec) {
   return async (spec) => {
     const profile = normalizeProfile(get("profileContext"));
@@ -4367,7 +4316,7 @@ function pnpmViewRunner(get, env, exec) {
     try {
       result = await exec(command, [...prefix, "view", spec, "version", "--json"], {
         cwd: profile.dir,
-        env: sanitizedEnv(env),
+        env: sanitizedEnv3(env),
         timeoutMs: 8e3,
         maxStdout: 64 * 1024,
         maxStderr: 16 * 1024
@@ -4389,7 +4338,7 @@ function pnpmViewRunner(get, env, exec) {
   };
 }
 function createUpdateService(deps) {
-  const exec = deps.exec ?? execCapture;
+  const exec = deps.exec ?? execCapture5;
   return createPluginUpdater({
     meta: deps.meta,
     getPluginManager: () => deps.get("pluginManager"),
@@ -4505,7 +4454,7 @@ function createTrendingRunTool(runner) {
         if (summary.tokens !== void 0) {
           const parts = [`\u672C\u6B21 tokens ${summary.tokens.toLocaleString("en-US")}`];
           if (summary.releases !== void 0 && summary.releases.enabled) {
-            parts.push(`\u53D1\u7248 ${summary.releases.newReleases} \u4E2A\u65B0\u7248\u672C / ${summary.releases.repos} \u4E2A\u4ED3\u5E93`);
+            parts.push(`\u8BA2\u9605 ${summary.releases.newReleases} \u4E2A\u65B0\u7248\u672C / ${summary.releases.repos} \u4E2A\u4ED3\u5E93`);
           }
           lines.push(`\xB7 ${parts.join(" \xB7 ")}`);
         }

package/lib/index.js

@@ -8,8 +8,7 @@ import {
   createTrendingRunTool,
   createUpdateService,
   readPluginInfo
-} from "./chunk-RB6W2PK7.js";
-import "./chunk-R7BK7SJK.js";
+} from "./chunk-YJ5GF3MW.js";
 
 // src/index.ts
 var name = "dsh-github-trending";

package/lib/internal.d.ts

@@ -1,4 +1,8 @@
 import { ErrorCode, FileArtifact, Usage, ReleasesReport, SubscriptionItem, SubscriptionDoc, SubscriptionStatus, ErrorInfo, RunRequest, RunResult, State, StateRun, SubscriptionList, SubscriptionVolume } from '@morehao/trendradar-contract';
+import { ExecOptions, ExecResult } from '@morehao/dsh-plugin-kit/exec';
+import * as exec from '@morehao/dsh-plugin-kit/exec';
+export { exec };
+import { normalizeRepositoryUrl } from '@morehao/dsh-plugin-kit/github';
 import http from 'node:http';
 import { Updater, PluginMeta, Logger } from '@morehao/dsh-plugin-kit/update';
 
@@ -930,40 +934,6 @@ declare namespace channel {
   export { type channel_ChannelKind as ChannelKind, type channel_ConfigChannel as ConfigChannel, channel_WRITE_TIMEOUT_MS as WRITE_TIMEOUT_MS, channel_openConfigChannel as openConfigChannel, channel_removeChannelDir as removeChannelDir };
 }
 
-interface ExecResult {
-    code: number | null;
-    signal: NodeJS.Signals | null;
-    stdout: string;
-    stderr: string;
-    timedOut: boolean;
-    aborted: boolean;
-    durationMs: number;
-}
-declare function sanitizedEnv(source?: NodeJS.ProcessEnv, extra?: Record<string, string | undefined>): Record<string, string>;
-interface ExecOptions {
-    env?: NodeJS.ProcessEnv;
-    cwd?: string;
-    timeoutMs?: number;
-    signal?: AbortSignal;
-    maxStdout?: number;
-    maxStderr?: number;
-    /** 写入子进程 stdin 的内容（写完即关闭）；省略则 stdin 为 ignore。 */
-    input?: string;
-}
-/**
- * 执行一次短命令并收集输出（握手、共存探测都走这里）。
- * 超时与取消都先 SIGTERM、3 s 后 SIGKILL——核心是单进程，不需要 process group。
- */
-declare function execCapture(file: string, args: string[], options?: ExecOptions): Promise<ExecResult>;
-
-type exec_ExecOptions = ExecOptions;
-type exec_ExecResult = ExecResult;
-declare const exec_execCapture: typeof execCapture;
-declare const exec_sanitizedEnv: typeof sanitizedEnv;
-declare namespace exec {
-  export { type exec_ExecOptions as ExecOptions, type exec_ExecResult as ExecResult, exec_execCapture as execCapture, exec_sanitizedEnv as sanitizedEnv };
-}
-
 declare const DEFAULT_RUN_TIMEOUT_MS = 120000;
 interface RunCoreOptions {
     core: CoreLocation;
@@ -1654,13 +1624,24 @@ declare namespace subscribe {
   export { subscribe_RELEASES_TIMEOUT_MS as RELEASES_TIMEOUT_MS, subscribe_SUBSCRIBE_TIMEOUT_MS as SUBSCRIBE_TIMEOUT_MS, type subscribe_SubscribeDeps as SubscribeDeps, subscribe_isValidRepo as isValidRepo, subscribe_runSubscribe as runSubscribe };
 }
 
+/**
+ * 插件自身元数据：包名、版本、仓库地址。
+ *
+ * `/state.plugin` 是界面上「关于」的唯一来源：版本不能硬编码在客户端，仓库地址
+ * 也不能从客户端猜。`package.json.repository.url` 常见形态是
+ * `git+https://github.com/o/r.git` 或 `git@github.com:o/r.git`，统一规范化成
+ * `https://github.com/o/r`；解析不了就返回 undefined，界面隐藏外链而不是猜。
+ *
+ * 读包与规范化仓库地址都交给 `@morehao/dsh-plugin-kit` 的 `./meta` + `./github`；
+ * 这里保留 `readPluginInfo()` / `normalizeRepositoryUrl()` 两个对内部（测试与 index）
+ * 的既有导出面，形状不变。
+ */
+
 interface PluginInfo {
     name: string;
     version: string;
     repository?: string;
 }
-/** 只放行 GitHub 的 http(s) 地址；ssh / git+ 前缀先归一化。 */
-declare function normalizeRepositoryUrl(value: unknown): string | undefined;
 declare function readPluginInfo(): PluginInfo;
 
 type pluginInfo_PluginInfo = PluginInfo;
@@ -2164,4 +2145,4 @@ declare namespace tools {
   export { tools_createTrendingHistoryTool as createTrendingHistoryTool, tools_createTrendingRunTool as createTrendingRunTool };
 }
 
-export { channel, config, core, credentials, errors, exec, github, handshake$1 as handshake, importCli, ipc, locate, paths, pendingPr, pluginInfo, preflight, proxy, quickfill, release, repo, routes, run, runner, schedule, state, subscribe, tools, update as updateService, version };
+export { channel, config, core, credentials, errors, github, handshake$1 as handshake, importCli, ipc, locate, paths, pendingPr, pluginInfo, preflight, proxy, quickfill, release, repo, routes, run, runner, schedule, state, subscribe, tools, update as updateService, version };

package/lib/internal.js

@@ -26,17 +26,17 @@ import {
   tools_exports,
   update_exports,
   version_exports
-} from "./chunk-RB6W2PK7.js";
-import {
-  exec_exports
-} from "./chunk-R7BK7SJK.js";
+} from "./chunk-YJ5GF3MW.js";
+
+// src/internal.ts
+import * as exec from "@morehao/dsh-plugin-kit/exec";
 export {
   channel_exports as channel,
   config_exports as config,
   core_exports as core,
   credentials_exports as credentials,
   errors_exports as errors,
-  exec_exports as exec,
+  exec,
   github_exports as github,
   handshake_exports as handshake,
   import_cli_exports as importCli,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@morehao/dsh-github-trending",
-  "version": "0.7.7",
+  "version": "0.7.9",
   "description": "GitHub 趋势日报插件：每天定时 spawn 本地 trendradar 核心，抓取 Trending、生成中文简介与总结，提交到你的仓库并自动合并 PR。",
   "type": "module",
   "main": "lib/index.js",
@@ -50,7 +50,7 @@
     }
   },
   "dependencies": {
-    "@morehao/dsh-plugin-kit": "0.2.1",
+    "@morehao/dsh-plugin-kit": "^0.3.1",
     "@morehao/trendradar-contract": "0.5.0"
   },
   "dsh": {

package/lib/chunk-R7BK7SJK.js

@@ -1,121 +0,0 @@
-var __defProp = Object.defineProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-
-// src/core/exec.ts
-var exec_exports = {};
-__export(exec_exports, {
-  execCapture: () => execCapture,
-  sanitizedEnv: () => sanitizedEnv
-});
-import { spawn } from "child_process";
-var ENV_KEYS = [
-  "PATH",
-  "HOME",
-  "USER",
-  "LOGNAME",
-  "SHELL",
-  "TMPDIR",
-  "TMP",
-  "TEMP",
-  "LANG",
-  "LC_ALL",
-  "LC_CTYPE",
-  "SSL_CERT_FILE",
-  "SSL_CERT_DIR",
-  "GIT_AUTHOR_NAME",
-  "GIT_AUTHOR_EMAIL",
-  "GIT_COMMITTER_NAME",
-  "GIT_COMMITTER_EMAIL",
-  "GIT_CONFIG_GLOBAL",
-  "GIT_SSH_COMMAND"
-];
-var PROXY_KEYS = [
-  "HTTP_PROXY",
-  "HTTPS_PROXY",
-  "NO_PROXY",
-  "ALL_PROXY",
-  "http_proxy",
-  "https_proxy",
-  "no_proxy",
-  "all_proxy"
-];
-function sanitizedEnv(source = process.env, extra = {}) {
-  const env = {};
-  for (const key of [...ENV_KEYS, ...PROXY_KEYS]) {
-    const value = source[key];
-    if (typeof value === "string" && value !== "") env[key] = value;
-  }
-  for (const [key, value] of Object.entries(extra)) {
-    if (typeof value === "string" && value !== "") env[key] = value;
-  }
-  return env;
-}
-function killTree(child, signal) {
-  try {
-    child.kill(signal);
-  } catch {
-  }
-}
-async function execCapture(file, args, options = {}) {
-  const started = Date.now();
-  const timeoutMs = options.timeoutMs ?? 1e4;
-  const maxStdout = options.maxStdout ?? 1024 * 1024;
-  const maxStderr = options.maxStderr ?? 1024 * 1024;
-  const child = spawn(file, args, {
-    cwd: options.cwd,
-    env: options.env ?? process.env,
-    stdio: [options.input === void 0 ? "ignore" : "pipe", "pipe", "pipe"],
-    windowsHide: true
-  });
-  if (options.input !== void 0) {
-    child.stdin?.on("error", () => void 0);
-    child.stdin?.end(options.input);
-  }
-  let stdout = "";
-  let stderr = "";
-  let timedOut = false;
-  let aborted = false;
-  const hardKill = setTimeout(() => killTree(child, "SIGKILL"), timeoutMs + 3e3);
-  const timer = setTimeout(() => {
-    timedOut = true;
-    killTree(child, "SIGTERM");
-  }, timeoutMs);
-  const onAbort = () => {
-    aborted = true;
-    killTree(child, "SIGTERM");
-  };
-  options.signal?.addEventListener("abort", onAbort, { once: true });
-  child.stdout?.setEncoding("utf8");
-  child.stdout?.on("data", (chunk) => {
-    if (stdout.length < maxStdout) stdout += chunk;
-  });
-  child.stderr?.setEncoding("utf8");
-  child.stderr?.on("data", (chunk) => {
-    if (stderr.length < maxStderr) stderr += chunk;
-  });
-  const result = await new Promise((resolve, reject) => {
-    child.on("error", (error) => reject(error));
-    child.on("close", (code, signal) => resolve({ code, signal }));
-  });
-  clearTimeout(timer);
-  clearTimeout(hardKill);
-  options.signal?.removeEventListener("abort", onAbort);
-  return {
-    ...result,
-    stdout,
-    stderr,
-    timedOut,
-    aborted,
-    durationMs: Date.now() - started
-  };
-}
-
-export {
-  __export,
-  sanitizedEnv,
-  execCapture,
-  exec_exports
-};

package/lib/exec-VMDINNX5.js

@@ -1,8 +0,0 @@
-import {
-  execCapture,
-  sanitizedEnv
-} from "./chunk-R7BK7SJK.js";
-export {
-  execCapture,
-  sanitizedEnv
-};