@morehao/dsh-github-trending 0.8.0 → 0.8.1

package/README.md

@@ -55,6 +55,16 @@ GitHub 趋势榜的 **DeepSeek Harness 插件**：按日 / 周 / 月周期定时
 
 ![设置](docs/images/settings.png)
 
+### GitHub 认证
+
+认证分区支持三种方式（可随时切换）：
+
+- **浏览器登录（默认推荐）**：点「用 GitHub 登录」在浏览器完成授权，无需手工粘贴 token。走 OAuth PKCE + 本机回环回调（或设备码），token 由 DSH 凭据记录安全保存，不落 `settings.json`。插件内置了公开的 OAuth App client_id（client_id 属公开标识、非机密；纯 PKCE 不使用 client_secret），开箱即用。
+- **本机 gh**：复用你终端里 `gh auth login` 的登录态。
+- **PAT**：手工填 Personal Access Token（存到凭据引用 / 环境变量）。
+
+> 浏览器登录需要核心提供 `authorization` 服务；若当前核心版本不含该能力，「浏览器登录」会提示不可用并引导改用 gh / PAT。
+
 ### 订阅
 
 （可选）订阅一组仓库，每周把每个仓库当周新增的 Release 合成一段中文摘要，与榜单同分支、同 PR 一起提交；订阅列表随数据仓版本化，可审计、可复现。

package/lib/{chunk-6PVBPJXO.js → chunk-LLTW4YHJ.js}

@@ -3530,6 +3530,7 @@ async function probeGithubAuth(options) {
 var github_auth_exports = {};
 __export(github_auth_exports, {
   CALLBACK_PATH: () => CALLBACK_PATH,
+  DEFAULT_GITHUB_CLIENT_ID: () => DEFAULT_GITHUB_CLIENT_ID,
   DEFAULT_SCOPE: () => DEFAULT_SCOPE,
   GITHUB_RECORD_KEY: () => GITHUB_RECORD_KEY2,
   attemptView: () => attemptView,
@@ -3539,11 +3540,17 @@ __export(github_auth_exports, {
   createPkce: () => createPkce,
   registerGithubFlow: () => registerGithubFlow,
   resetAttemptForTest: () => resetAttemptForTest,
+  resolveClientId: () => resolveClientId,
   verifyState: () => verifyState
 });
 import { createHash as createHash3, randomBytes as randomBytes2, timingSafeEqual as timingSafeEqual2 } from "crypto";
 var GITHUB_RECORD_KEY2 = "github/default";
 var CALLBACK_PATH = "/api/morehao/github-trending/oauth/github/callback";
+var DEFAULT_GITHUB_CLIENT_ID = "Ov23li7rhp0EKoqbkJKY";
+function resolveClientId(deps) {
+  const fromConfig = deps.clientId;
+  return fromConfig !== void 0 && fromConfig !== "" ? fromConfig : DEFAULT_GITHUB_CLIENT_ID;
+}
 var AUTHORIZE_URL = "https://github.com/login/oauth/authorize";
 var ACCESS_TOKEN_URL = "https://github.com/login/oauth/access_token";
 var DEVICE_CODE_URL = "https://github.com/login/device/code";
@@ -3620,7 +3627,7 @@ async function runBrowser(deps, session) {
   if (webServer === void 0 || typeof webServer.register !== "function") {
     throw new Error("webServer \u670D\u52A1\u4E0D\u53EF\u7528\uFF1A\u6D4F\u89C8\u5668\u767B\u5F55\u9700\u8981\u5B83\u627F\u8F7D OAuth \u56DE\u8C03");
   }
-  const clientId = deps.clientId;
+  const clientId = resolveClientId(deps);
   if (clientId === void 0 || clientId === "") throw new Error("\u7F3A\u5C11 GitHub OAuth client_id");
   const fetchImpl = deps.fetchImpl ?? fetch;
   const endpoints = normalizeEndpoints(deps.endpoints);
@@ -3688,7 +3695,7 @@ async function runBrowser(deps, session) {
   }
 }
 async function runDevice(deps, session) {
-  const clientId = deps.clientId;
+  const clientId = resolveClientId(deps);
   if (clientId === void 0 || clientId === "") throw new Error("\u7F3A\u5C11 GitHub OAuth client_id");
   const fetchImpl = deps.fetchImpl ?? fetch;
   const endpoints = normalizeEndpoints(deps.endpoints);
@@ -4381,6 +4388,10 @@ import { PluginUpdateError } from "@morehao/dsh-plugin-kit/update";
 var ROUTE_PREFIX = "/api/morehao/github-trending";
 var HEADER = "x-dsh-github-trending";
 var MAX_BODY2 = 512 * 1024;
+function isAuthorizationAvailable(get) {
+  const authorization = get("authorization");
+  return authorization !== void 0 && typeof authorization.begin === "function";
+}
 function githubAuthDeps(deps) {
   return {
     get: deps.get,
@@ -4722,8 +4733,8 @@ async function statePayload(deps, settings) {
       source: github.source,
       /** 浏览器登录 attempt 视图（idle / waiting-browser / waiting-device / exchanging / done / error）。 */
       attempt: attemptView(),
-      /** 是否配置了 browser 模式的 client_id（未配置时前端禁用「用 GitHub 登录」并给提示）。 */
-      browserAvailable: deps.githubClientId !== void 0 && deps.githubClientId !== ""
+      /** 浏览器登录是否可用：核心提供了 authorization 服务即可（client_id 有内置默认）。 */
+      browserAvailable: isAuthorizationAvailable(deps.get)
     }
   };
 }

package/lib/index.js

@@ -9,7 +9,7 @@ import {
   createUpdateService,
   readPluginInfo,
   registerGithubFlow
-} from "./chunk-6PVBPJXO.js";
+} from "./chunk-LLTW4YHJ.js";
 
 // src/index.ts
 var name = "dsh-github-trending";

package/lib/internal.d.ts

@@ -1161,6 +1161,17 @@ declare namespace github {
 declare const GITHUB_RECORD_KEY = "github/default";
 /** 本地回调路径（带集成前缀，避免多 provider 撞 webServer 的 `(kind,path)` 唯一约束）。 */
 declare const CALLBACK_PATH = "/api/morehao/github-trending/oauth/github/callback";
+/**
+ * 内置的 GitHub OAuth App 公开 client_id（**非机密**：OAuth 的 client_id 设计上就是公开的，
+ * 会出现在授权 URL 里，与 `gh`/VS Code 内置自己的 client_id 同理）。
+ * 纯 PKCE public client，无需 client_secret。用户/部署可在 `apply(config.githubClientId)` 覆盖。
+ *
+ * OAuth App 侧登记的回调：`http://127.0.0.1/api/morehao/github-trending/oauth/github/callback`
+ * （loopback 按 RFC 8252 忽略端口，运行时随机端口可正常回跳）。
+ */
+declare const DEFAULT_GITHUB_CLIENT_ID = "Ov23li7rhp0EKoqbkJKY";
+/** 解析生效的 client_id：显式 config 优先，否则用内置默认。 */
+declare function resolveClientId(deps: GithubAuthDeps): string | undefined;
 /** 本插件运行需要 push / 建 PR，`read:user` 不够；一次授权到 `repo`。 */
 declare const DEFAULT_SCOPE = "repo";
 interface AuthorizationFlow {
@@ -1272,6 +1283,7 @@ type githubAuth_AuthorizationFlow = AuthorizationFlow;
 type githubAuth_AuthorizationLike = AuthorizationLike;
 type githubAuth_AuthorizationSessionLike = AuthorizationSessionLike;
 declare const githubAuth_CALLBACK_PATH: typeof CALLBACK_PATH;
+declare const githubAuth_DEFAULT_GITHUB_CLIENT_ID: typeof DEFAULT_GITHUB_CLIENT_ID;
 declare const githubAuth_DEFAULT_SCOPE: typeof DEFAULT_SCOPE;
 declare const githubAuth_GITHUB_RECORD_KEY: typeof GITHUB_RECORD_KEY;
 type githubAuth_GithubAttemptPhase = GithubAttemptPhase;
@@ -1286,9 +1298,10 @@ declare const githubAuth_cancelGithubSignIn: typeof cancelGithubSignIn;
 declare const githubAuth_createPkce: typeof createPkce;
 declare const githubAuth_registerGithubFlow: typeof registerGithubFlow;
 declare const githubAuth_resetAttemptForTest: typeof resetAttemptForTest;
+declare const githubAuth_resolveClientId: typeof resolveClientId;
 declare const githubAuth_verifyState: typeof verifyState;
 declare namespace githubAuth {
-  export { type githubAuth_AuthorizationFlow as AuthorizationFlow, type githubAuth_AuthorizationLike as AuthorizationLike, type githubAuth_AuthorizationSessionLike as AuthorizationSessionLike, githubAuth_CALLBACK_PATH as CALLBACK_PATH, githubAuth_DEFAULT_SCOPE as DEFAULT_SCOPE, githubAuth_GITHUB_RECORD_KEY as GITHUB_RECORD_KEY, type githubAuth_GithubAttemptPhase as GithubAttemptPhase, type githubAuth_GithubAttemptView as GithubAttemptView, type githubAuth_GithubAuthDeps as GithubAuthDeps, type githubAuth_GithubGrantPayload as GithubGrantPayload, type githubAuth_WebServerLike as WebServerLike, githubAuth_attemptView as attemptView, githubAuth_beginGithubSignIn as beginGithubSignIn, githubAuth_buildAuthorizeUrl as buildAuthorizeUrl, githubAuth_cancelGithubSignIn as cancelGithubSignIn, githubAuth_createPkce as createPkce, githubAuth_registerGithubFlow as registerGithubFlow, githubAuth_resetAttemptForTest as resetAttemptForTest, githubAuth_verifyState as verifyState };
+  export { type githubAuth_AuthorizationFlow as AuthorizationFlow, type githubAuth_AuthorizationLike as AuthorizationLike, type githubAuth_AuthorizationSessionLike as AuthorizationSessionLike, githubAuth_CALLBACK_PATH as CALLBACK_PATH, githubAuth_DEFAULT_GITHUB_CLIENT_ID as DEFAULT_GITHUB_CLIENT_ID, githubAuth_DEFAULT_SCOPE as DEFAULT_SCOPE, githubAuth_GITHUB_RECORD_KEY as GITHUB_RECORD_KEY, type githubAuth_GithubAttemptPhase as GithubAttemptPhase, type githubAuth_GithubAttemptView as GithubAttemptView, type githubAuth_GithubAuthDeps as GithubAuthDeps, type githubAuth_GithubGrantPayload as GithubGrantPayload, type githubAuth_WebServerLike as WebServerLike, githubAuth_attemptView as attemptView, githubAuth_beginGithubSignIn as beginGithubSignIn, githubAuth_buildAuthorizeUrl as buildAuthorizeUrl, githubAuth_cancelGithubSignIn as cancelGithubSignIn, githubAuth_createPkce as createPkce, githubAuth_registerGithubFlow as registerGithubFlow, githubAuth_resetAttemptForTest as resetAttemptForTest, githubAuth_resolveClientId as resolveClientId, githubAuth_verifyState as verifyState };
 }
 
 interface DefaultBranchResult {

package/lib/internal.js

@@ -27,7 +27,7 @@ import {
   tools_exports,
   update_exports,
   version_exports
-} from "./chunk-6PVBPJXO.js";
+} from "./chunk-LLTW4YHJ.js";
 
 // src/internal.ts
 import * as exec from "@morehao/dsh-plugin-kit/exec";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@morehao/dsh-github-trending",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "GitHub 趋势日报的 DeepSeek Harness 插件：按日 / 周 / 月周期定时 spawn 本地 trendradar 核心，抓取 Trending、生成中文简介与周期总结，并可选把订阅仓库的新 Release 合成中文摘要，一起提交到你的仓库、自动开 PR 合并；内置概览 / 榜单 / 运行记录 / 订阅 / 设置工作台。",
   "type": "module",
   "main": "lib/index.js",