@morehao/dsh-github-trending 0.8.22 → 0.9.0

package/client.js

@@ -457,6 +457,14 @@ var DICT = {
     "summarize.readmeChars": "README 摘录长度",
     "summarize.readmeChars.help": "enrich 为 readme 时，每个仓库 README 摘录的最大字符数（超出截断）。",
     "summarize.enrichNote": "外部增强需要只读 token：enrich=repo/readme 建议配置 GITHUB_READ_TOKEN（独立只读）；readme 模式在网络慢时可能因预算耗尽跳过部分仓库（自动降级，不影响运行）。",
+    "card.observe.title": "本地观测库",
+    "observe.enabled": "启用观测库",
+    "observe.enabled.help": "每日记录候选仓库的 star 快照，用本地差分算出「今日新增」，不再依赖趋势页那行数字；关闭即回到「增量只来自趋势页」的旧行为。数据存在本机 $DSH_HOME，不进归档仓库。",
+    "observe.backfillDays": "回填天数",
+    "observe.backfillDays.help": "首次见到的仓库从 GitHub 历史接口回填多少天（0=不回填，从今天开始攒；上限 365）。",
+    "observe.maxCandidates": "候选上限",
+    "observe.maxCandidates.help": "单次运行最多记多少个候选仓库（越多覆盖越广、请求越多；建议 300，约 3 个批量请求/天）。",
+    "observe.disabledNote": "观测库已关闭：本次运行的「今日新增」仍来自趋势页/搜索，可能为 0。",
     "card.releases.title": "订阅",
     "card.releases.hint": "对应核心 releases.*（core 0.5.0+）",
     "releases.includePrerelease": "含预发布",
@@ -1013,6 +1021,14 @@ var DICT = {
     "summarize.readmeChars": "README excerpt chars",
     "summarize.readmeChars.help": "Max README characters excerpted per repo when enrich=readme (longer text is truncated).",
     "summarize.enrichNote": "Enrich needs a read-only token: enrich=repo/readme is best paired with GITHUB_READ_TOKEN (separate, read-only). In readme mode slow networks may skip some repos when the budget runs out (auto-degrades; the run is unaffected).",
+    "card.observe.title": "Local observation store",
+    "observe.enabled": "Enable observation store",
+    "observe.enabled.help": 'Records a daily star snapshot of candidate repos and derives "stars today" from local diffs instead of the trending-page number; turn it off to fall back to the old "increment only from the trending page" behaviour. Data lives in $DSH_HOME, never in the archive repo.',
+    "observe.backfillDays": "Backfill days",
+    "observe.backfillDays.help": "How many days to backfill a first-seen repo from GitHub history (0 = no backfill, accumulate from today; max 365).",
+    "observe.maxCandidates": "Candidate cap",
+    "observe.maxCandidates.help": "Max candidate repos recorded per run (more = broader coverage and more requests; 300 ≈ 3 batch requests/day is recommended).",
+    "observe.disabledNote": `Observation store is off: this run's "stars today" still comes from the trending page/search and may be 0.`,
     "card.releases.title": "Subscriptions",
     "card.releases.hint": "Maps to core releases.* (core 0.5.0+)",
     "releases.includePrerelease": "Include pre-releases",
@@ -2242,7 +2258,7 @@ function sectionSlice(settings, section) {
     case "auth":
       return { github: settings.github };
     case "scope":
-      return { trending: settings.trending, schedule: settings.schedule, summarize: settings.summarize };
+      return { trending: settings.trending, schedule: settings.schedule, summarize: settings.summarize, observe: settings.observe };
     case "releases":
       return { releases: settings.releases };
   }
@@ -2730,6 +2746,8 @@ function SettingsView(props) {
       )
     )
   );
+  const observeOf = (s) => s.observe ?? { enabled: true, backfillDays: 30, maxCandidates: 300 };
+  const observe = observeOf(draft);
   const scopeCard = h(
     Card,
     {
@@ -2822,7 +2840,35 @@ function SettingsView(props) {
         next.summarize.readmeChars = Math.round(Number(value) || 0);
       }) })
     ),
-    draft.summarize.enrich === "none" ? null : h(Alert, { kind: "warn" }, h("div", null, t("summarize.enrichNote")))
+    draft.summarize.enrich === "none" ? null : h(Alert, { kind: "warn" }, h("div", null, t("summarize.enrichNote"))),
+    // 本地 star 观测库（核心 observe.*）：旧设置里可能还没有该字段，先取默认再编辑。
+    // 观测库让「今日新增」来自本地每日快照的差分；关闭即回到「增量只来自趋势页」的旧行为。
+    h("h4", { className: "dshgt-subhead" }, t("card.observe.title")),
+    h(
+      Row,
+      { label: t("observe.enabled"), help: t("observe.enabled.help") },
+      h(Toggle, {
+        checked: observe.enabled,
+        onChange: (value) => update((next) => {
+          next.observe = { ...observeOf(next), enabled: value };
+        })
+      })
+    ),
+    h(
+      Row,
+      { label: t("observe.backfillDays"), help: t("observe.backfillDays.help") },
+      h(Input, { mono: true, width: 90, value: String(observe.backfillDays), onInput: (value) => update((next) => {
+        next.observe = { ...observeOf(next), backfillDays: Math.round(Number(value) || 0) };
+      }) })
+    ),
+    h(
+      Row,
+      { label: t("observe.maxCandidates"), help: t("observe.maxCandidates.help") },
+      h(Input, { mono: true, width: 90, value: String(observe.maxCandidates), onInput: (value) => update((next) => {
+        next.observe = { ...observeOf(next), maxCandidates: Math.round(Number(value) || 0) };
+      }) })
+    ),
+    observe.enabled ? null : h(Alert, { kind: "info" }, h("div", null, t("observe.disabledNote")))
   );
   const releaseSchedule = draft.releases.schedule ?? { enabled: false, weekday: 1, time: "08:00:00", timezone: "Asia/Shanghai" };
   const releaseConcurrency = draft.releases.concurrency ?? "auto";

package/lib/{chunk-SLY2RKCZ.js → chunk-JMIWABMY.js}

@@ -69,6 +69,7 @@ var DEFAULT_SETTINGS = {
     enrichTimeoutSeconds: 5,
     enrichBudgetSeconds: 8
   },
+  observe: { enabled: true, backfillDays: 30, maxCandidates: 300 },
   releases: {
     includePrerelease: false,
     includeDrafts: false,
@@ -102,6 +103,7 @@ function sectionOfField(field) {
   if (field.startsWith("github.")) return "auth";
   if (field.startsWith("trending.")) return "scope";
   if (field.startsWith("summarize.")) return "summarize";
+  if (field.startsWith("observe.")) return "scope";
   if (field.startsWith("releases.")) return "releases";
   if (field.startsWith("schedule.")) return "schedule";
   if (field === "corePath" || field === "coreAutoDownload" || field === "network.proxy") return "source";
@@ -128,6 +130,7 @@ function mergeSettingsSection(stored, incoming, section) {
       break;
     case "scope":
       next.trending = incoming.trending;
+      next.observe = incoming.observe;
       break;
     case "summarize":
       next.summarize = incoming.summarize;
@@ -171,6 +174,7 @@ function normalizeSettings(input) {
   const github = raw.github ?? {};
   const trending = raw.trending ?? {};
   const summarize = raw.summarize ?? {};
+  const observe = raw.observe ?? {};
   const releases = raw.releases ?? {};
   const releasesSchedule = releases.schedule ?? {};
   const output = raw.output ?? {};
@@ -225,6 +229,11 @@ function normalizeSettings(input) {
       enrichTimeoutSeconds: Math.round(num(summarize.enrichTimeoutSeconds, DEFAULT_SETTINGS.summarize.enrichTimeoutSeconds)),
       enrichBudgetSeconds: Math.round(num(summarize.enrichBudgetSeconds, DEFAULT_SETTINGS.summarize.enrichBudgetSeconds))
     },
+    observe: {
+      enabled: bool(observe.enabled, DEFAULT_SETTINGS.observe.enabled),
+      backfillDays: Math.round(num(observe.backfillDays, DEFAULT_SETTINGS.observe.backfillDays)),
+      maxCandidates: Math.round(num(observe.maxCandidates, DEFAULT_SETTINGS.observe.maxCandidates))
+    },
     releases: {
       includePrerelease: bool(releases.includePrerelease, DEFAULT_SETTINGS.releases.includePrerelease),
       includeDrafts: bool(releases.includeDrafts, DEFAULT_SETTINGS.releases.includeDrafts),
@@ -332,6 +341,13 @@ function validateSettings(settings, providers = CORE_PROVIDERS) {
   if (!Number.isInteger(summarize.readmeChars) || summarize.readmeChars <= 0) {
     problems.push({ field: "summarize.readmeChars", code: "CONFIG_INVALID", message: "readmeChars \u5FC5\u987B\u662F\u6B63\u6574\u6570" });
   }
+  const { observe } = settings;
+  if (!Number.isInteger(observe.backfillDays) || observe.backfillDays < 0 || observe.backfillDays > 365) {
+    problems.push({ field: "observe.backfillDays", code: "CONFIG_INVALID", message: "backfillDays \u5FC5\u987B\u662F 0\u2013365 \u7684\u6574\u6570" });
+  }
+  if (!Number.isInteger(observe.maxCandidates) || observe.maxCandidates < 1 || observe.maxCandidates > 1e3) {
+    problems.push({ field: "observe.maxCandidates", code: "CONFIG_INVALID", message: "maxCandidates \u5FC5\u987B\u662F 1\u20131000 \u7684\u6574\u6570" });
+  }
   if (releases.period !== "weekly") {
     problems.push({
       field: "releases.period",
@@ -422,6 +438,11 @@ function toCoreConfig(settings, apiKey, baseURLOverride, period, repoCount = 0)
       enrichTimeoutSeconds: settings.summarize.enrichTimeoutSeconds,
       enrichBudgetSeconds: settings.summarize.enrichBudgetSeconds
     },
+    observe: {
+      enabled: settings.observe.enabled,
+      backfillDays: settings.observe.backfillDays,
+      maxCandidates: settings.observe.maxCandidates
+    },
     releases: {
       // 发版订阅常开：插件侧不再提供开关，是否产出由订阅列表决定。
       enabled: true,
@@ -1031,8 +1052,9 @@ __export(ipc_exports, {
   parseSubscribeResult: () => parseSubscribeResult,
   parseVersionInfo: () => parseVersionInfo
 });
+import { createHash } from "crypto";
 import { validators } from "@morehao/trendradar-contract";
-var IPC_SCHEMA_VERSION = 2;
+var IPC_SCHEMA_VERSION = 3;
 var SUPPORTED_DIGEST_SCHEMA = 2;
 var SUPPORTED_CONTRACT_MAJOR = 0;
 var SUBSCRIPTION_STATUSES = ["baseline", "ok", "no_change", "rate_limited", "failed"];
@@ -1091,20 +1113,50 @@ function normalizeError(value) {
     ...isRecord(value.details) ? { details: value.details } : {}
   };
 }
+function parseDigest(value, files) {
+  if (value === void 0 || value === null) return void 0;
+  if (!isRecord(value)) throw new IpcError("IPC_INVALID", "\u6838\u5FC3 run --json \u7684 digest \u4E0D\u662F\u5BF9\u8C61");
+  const file = value.path;
+  const bytes = value.bytes;
+  const sha256 = value.sha256;
+  const text = value.text;
+  if (typeof file !== "string" || file === "" || typeof text !== "string" || typeof bytes !== "number" || typeof sha256 !== "string") {
+    throw new IpcError("IPC_INVALID", "\u6838\u5FC3 run --json \u7684 digest \u7F3A path/bytes/sha256/text");
+  }
+  const buffer = Buffer.from(text, "utf8");
+  if (buffer.length !== bytes) {
+    throw new IpcError("IPC_INVALID", `digest.bytes=${bytes} \u4E0E text \u5B9E\u9645 ${buffer.length} \u5B57\u8282\u4E0D\u4E00\u81F4`);
+  }
+  const actual = `sha256:${createHash("sha256").update(buffer).digest("hex")}`;
+  if (actual !== sha256) {
+    throw new IpcError("IPC_INVALID", `digest.sha256 \u4E0E text \u4E0D\u4E00\u81F4\uFF1A\u58F0\u660E ${sha256}\uFF0C\u5B9E\u9645 ${actual}`);
+  }
+  const listed = files.find((item) => item.path === file);
+  if (listed === void 0) {
+    throw new IpcError("IPC_INVALID", `digest.path=${file} \u4E0D\u5728 files \u91CC`);
+  }
+  if (listed.sha256 !== sha256 || listed.bytes !== bytes) {
+    throw new IpcError("IPC_INVALID", `digest \u4E0E files \u91CC ${file} \u7684 bytes/sha256 \u4E0D\u4E00\u81F4`);
+  }
+  return { path: file, bytes, sha256, text };
+}
 function parseRunResult(text, options) {
   const value = parseJsonObject(text);
   if (value.files === null || value.files === void 0) value.files = [];
   if (value.command !== "run" || value.ipcSchema !== IPC_SCHEMA_VERSION || !validators.runResult(value)) {
-    throw new IpcError("IPC_INVALID", "\u6838\u5FC3 run --json \u4E0D\u662F\u5951\u7EA6 RunResult\uFF08ipcSchema=2 / command=run\uFF09");
+    throw new IpcError("IPC_INVALID", "\u6838\u5FC3 run --json \u4E0D\u662F\u5951\u7EA6 RunResult\uFF08ipcSchema=3 / command=run\uFF09");
   }
   const result = value;
   const error = normalizeError(result.error);
   const skipReason = value.skipReason;
+  const files = Array.isArray(result.files) ? result.files : [];
+  const digest = parseDigest(value.digest, files);
   return {
     ok: result.ok,
     skipped: result.skipped === true,
     dryRun: options.dryRun,
-    files: Array.isArray(result.files) ? result.files : [],
+    files,
+    ...digest === void 0 ? {} : { digest },
     contentHash: typeof result.contentHash === "string" ? result.contentHash : void 0,
     branch: typeof result.branch === "string" ? result.branch : void 0,
     commit: typeof result.commit === "string" ? result.commit : void 0,
@@ -1225,7 +1277,7 @@ __export(release_exports, {
   readCoreRelease: () => readCoreRelease,
   verifyCached: () => verifyCached
 });
-import { createHash } from "crypto";
+import { createHash as createHash2 } from "crypto";
 import { chmodSync, createWriteStream, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync as renameSync2, rmSync, statSync as statSync2, unlinkSync as unlinkSync2 } from "fs";
 import { createRequire } from "module";
 import { pipeline } from "stream/promises";
@@ -1285,7 +1337,7 @@ function describeRelease(release, options = {}) {
   };
 }
 function sha256File(file) {
-  return createHash("sha256").update(readFileSync2(file)).digest("hex");
+  return createHash2("sha256").update(readFileSync2(file)).digest("hex");
 }
 function markerPath(binaryPath) {
   return `${binaryPath}.sha256`;
@@ -1357,7 +1409,7 @@ async function download(descriptor, options) {
   }
   mkdirSync2(descriptor.cacheDir, { recursive: true, mode: 448 });
   const temp = `${descriptor.binaryPath}.${process.pid}.${Date.now()}.part`;
-  const hash = createHash("sha256");
+  const hash = createHash2("sha256");
   const total = Number(response.headers.get("content-length") ?? "0") || void 0;
   let bytes = 0;
   try {
@@ -2795,44 +2847,15 @@ async function runSubscribe(input, deps) {
   }
 }
 
-// src/host/version.ts
-var version_exports = {};
-__export(version_exports, {
-  versionAtLeast: () => versionAtLeast
-});
-function parseTriplet(value) {
-  const match = /^v?(\d+)\.(\d+)\.(\d+)/.exec(value.trim());
-  if (match === null) return void 0;
-  return [Number(match[1]), Number(match[2]), Number(match[3])];
-}
-function versionAtLeast(a, b) {
-  const left = parseTriplet(a);
-  const right = parseTriplet(b);
-  if (left === void 0 || right === void 0) return false;
-  for (let i = 0; i < 3; i += 1) {
-    const l = left[i];
-    const r = right[i];
-    if (l > r) return true;
-    if (l < r) return false;
-  }
-  return true;
-}
-
 // src/host/runner.ts
 var runner_exports = {};
 __export(runner_exports, {
-  FORCE_MIN_CORE_VERSION: () => FORCE_MIN_CORE_VERSION,
-  REPO_MIN_CORE_VERSION: () => REPO_MIN_CORE_VERSION,
   Runner: () => Runner,
-  isoWeekName: () => isoWeekName,
-  periodFileBase: () => periodFileBase,
   projectUsage: () => projectUsage
 });
-import { createHash as createHash2 } from "crypto";
-import { existsSync as existsSync4, readFileSync as readFileSync3, realpathSync, statSync as statSync5 } from "fs";
+import { createHash as createHash3 } from "crypto";
+import { existsSync as existsSync4, statSync as statSync5 } from "fs";
 import path9 from "path";
-var FORCE_MIN_CORE_VERSION = "0.7.1";
-var REPO_MIN_CORE_VERSION = "0.8.0";
 function repoProblem(repoPath) {
   if (repoPath.trim() === "") return { code: "CONFIG_INVALID", message: "\u8FD8\u6CA1\u6709\u9009\u62E9\u5F52\u6863\u4ED3\u5E93" };
   if (!existsSync4(repoPath)) return { code: "REPO_NOT_GIT", message: `\u76EE\u5F55\u4E0D\u5B58\u5728\uFF1A${repoPath}` };
@@ -2853,30 +2876,9 @@ function runDate(settings, now = /* @__PURE__ */ new Date()) {
     return now.toISOString().slice(0, 10);
   }
 }
-function isInside(root, target) {
-  const rel = path9.relative(root, target);
-  return rel !== "" && !rel.startsWith("..") && !path9.isAbsolute(rel);
-}
-function normalizeSha256(value) {
-  if (typeof value !== "string") return void 0;
-  const hex = value.trim().replace(/^sha256:/i, "").toLowerCase();
-  return /^[0-9a-f]{64}$/.test(hex) ? hex : void 0;
-}
 function counterOf(value) {
   return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
-function isoWeekName(date) {
-  const match = /^(\d{4})-(\d{2})-(\d{2})$/.exec(date);
-  if (match === null) return date;
-  const d = new Date(Date.UTC(Number(match[1]), Number(match[2]) - 1, Number(match[3])));
-  if (Number.isNaN(d.getTime())) return date;
-  return isoWeekKey(d, "UTC");
-}
-function periodFileBase(period, date) {
-  if (period === "monthly") return date.slice(0, 7);
-  if (period === "weekly") return isoWeekName(date);
-  return date;
-}
 function projectUsage(outcome) {
   const usageTokens = outcome.usage?.totalTokens;
   const releasesTokens = outcome.releases?.usage?.totalTokens;
@@ -2951,15 +2953,7 @@ var Runner = class {
           `\u6838\u5FC3\u4E0D\u652F\u6301 provider\u300C${settings.model.provider}\u300D\uFF1B\u53EF\u7528\uFF1A${handshakeResult.supportedProviders.join(" / ")}`
         );
       }
-      const forceRequested = options.force === true;
-      const forceSupported = versionAtLeast(handshakeResult.version.version, FORCE_MIN_CORE_VERSION);
-      const effectiveForce = forceRequested && forceSupported;
-      if (forceRequested && !forceSupported) {
-        store.appendLog(
-          logFile,
-          `[force] \u6838\u5FC3 ${handshakeResult.version.version} \u4F4E\u4E8E ${FORCE_MIN_CORE_VERSION}\uFF0C\u4E0D\u652F\u6301 --force\uFF0C\u5DF2\u964D\u7EA7\u4E3A\u666E\u901A\u91CD\u8DD1`
-        );
-      }
+      const effectiveForce = options.force === true;
       const model = await this.openModelChannel({ settings, credentials, env, logFile });
       const apiKey = model.apiKey;
       proxy = model.proxy;
@@ -2997,15 +2991,7 @@ var Runner = class {
         ...core.tag === void 0 ? {} : { coreTag: core.tag },
         ...effectiveForce ? { forced: true } : {}
       });
-      const preview = this.capturePreview({
-        id,
-        date,
-        period,
-        settings,
-        outcome,
-        secrets: [apiKey, github.token],
-        ...effectiveForce ? { force: true } : {}
-      });
+      const preview = this.capturePreview({ id, outcome, secrets: [apiKey, github.token] });
       if (preview !== void 0) summary.preview = preview;
       this.record(summary, settings);
       return summary;
@@ -3096,14 +3082,7 @@ var Runner = class {
           `\u6838\u5FC3\u4E0D\u652F\u6301 provider\u300C${settings.model.provider}\u300D\uFF1B\u53EF\u7528\uFF1A${handshakeResult.supportedProviders.join(" / ")}`
         );
       }
-      let effectiveRepo = requestedRepo;
-      if (requestedRepo !== void 0 && !versionAtLeast(handshakeResult.version.version, REPO_MIN_CORE_VERSION)) {
-        store.appendLog(
-          logFile,
-          `[release] \u6838\u5FC3 ${handshakeResult.version.version} \u4F4E\u4E8E ${REPO_MIN_CORE_VERSION}\uFF0C\u5355\u4ED3\u5206\u6790\u964D\u7EA7\u4E3A\u5168\u91CF`
-        );
-        effectiveRepo = void 0;
-      }
+      const effectiveRepo = requestedRepo;
       const model = await this.openModelChannel({ settings, credentials, env, logFile });
       proxy = model.proxy;
       const github = await resolveGithubToken(credentials, settings.github.authMode, settings.github.tokenRef, { env });
@@ -3344,70 +3323,38 @@ var Runner = class {
     };
   }
   /**
-   * 从本次核心返回的 artifact 清单里选当天的 `.md`，只读复制到 previews/。
+   * 把本次运行渲染的 digest 原文写进 previews/（ipc v3 起由核心随 RunResult 回传）。
    *
-   * 这是插件**唯一**读取用户仓库的场景，而且只读核心自己刚写出的那一份：
-   * - 路径必须在 `repo.path` 内（词法 + realpath 各判一次，挡 `..`/绝对路径/符号链接）；
-   * - 上限 512 KB、拒绝 NUL、sha256 必须与契约声明一致；
+   * 这里**不再读用户仓库**：分支可能在运行结束前就被合并、切回 base 并删除，
+   * 任何「事后去工作树里找文件」的做法都会读到旧版或空。文本、字节数与 sha256
+   * 的跨字段一致性已在 `parseRunResult` 里校验过；这里只做展示侧的防御：
+   * - 上限 512 KB（与预览读取上限一致）、拒绝 NUL；
+   * - 落盘前统一 `redact()`，避免把密钥写进预览文件；
    * - 任何一步失败都只记日志，返回 undefined；运行结果不受影响。
    */
   capturePreview(input) {
-    const { outcome, settings, date, period, id } = input;
-    if (!outcome.ok || outcome.dryRun || date === void 0) return void 0;
-    if (outcome.skipped && input.force !== true) return void 0;
+    const { outcome, id } = input;
+    if (!outcome.ok || outcome.dryRun) return void 0;
     const skip = (reason, extra = {}) => {
       this.deps.logger?.("preview.skip", { id, reason, ...extra });
       return void 0;
     };
-    const markdown = outcome.files.filter((file) => {
-      const ext = path9.extname(file.path).toLowerCase();
-      const base = path9.basename(file.path).toLowerCase();
-      const normalized = file.path.replace(/\\/g, "/");
-      const inReleases = normalized === "releases" || normalized.startsWith("releases/");
-      return ext === ".md" && base !== "readme.md" && base !== "index.md" && !inReleases;
-    });
-    if (markdown.length === 0) return skip("no-markdown");
-    const expected = period === void 0 ? `${date}.md` : `${periodFileBase(period, date)}.md`;
-    const named = markdown.filter((file) => path9.basename(file.path) === expected);
-    const chosen = named.length > 0 ? named[0] : markdown.length === 1 ? markdown[0] : void 0;
-    if (chosen === void 0) return skip("ambiguous", { candidates: markdown.length, expected, period: period ?? null });
-    const repoPath = settings.repo.path;
-    const resolved = path9.resolve(repoPath, chosen.path);
-    if (!isInside(repoPath, resolved)) return skip("outside-repo", { path: chosen.path });
-    let fileReal;
-    try {
-      const repoReal = realpathSync(repoPath);
-      fileReal = realpathSync(resolved);
-      if (!isInside(repoReal, fileReal)) return skip("symlink-outside-repo", { path: chosen.path });
-    } catch {
-      return skip("missing-file", { path: chosen.path });
-    }
-    let buffer;
-    try {
-      const stat2 = statSync5(fileReal);
-      if (!stat2.isFile()) return skip("not-a-file", { path: chosen.path });
-      if (stat2.size > PREVIEW_MAX_BYTES) return skip("too-large", { bytes: stat2.size });
-      buffer = readFileSync3(fileReal);
-    } catch {
-      return skip("read-failed", { path: chosen.path });
-    }
-    if (buffer.includes(0)) return skip("contains-nul", { path: chosen.path });
-    const declared = normalizeSha256(chosen.sha256);
-    const actual = createHash2("sha256").update(buffer).digest("hex");
-    if (declared === void 0 || declared !== actual) {
-      return skip("sha-mismatch", { path: chosen.path, declared: declared ?? null, actual });
-    }
-    const text = redact(buffer.toString("utf8"), input.secrets);
+    const digest = outcome.digest;
+    if (digest === void 0) return skip("no-digest");
+    const buffer = Buffer.from(digest.text, "utf8");
+    if (buffer.length > PREVIEW_MAX_BYTES) return skip("too-large", { path: digest.path, bytes: buffer.length });
+    if (buffer.includes(0)) return skip("contains-nul", { path: digest.path });
+    const text = redact(digest.text, input.secrets);
     const stored = Buffer.from(text, "utf8");
     try {
       this.deps.store.writePreview(id, text);
     } catch {
-      return skip("write-failed", { path: chosen.path });
+      return skip("write-failed", { path: digest.path });
     }
     return {
-      file: path9.relative(repoPath, resolved).split(path9.sep).join("/"),
+      file: digest.path,
       bytes: stored.length,
-      sha256: createHash2("sha256").update(stored).digest("hex")
+      sha256: createHash3("sha256").update(stored).digest("hex")
     };
   }
   /** 写历史与状态；同一天的 skipped 运行不覆盖 lastDigest。 */
@@ -3818,7 +3765,7 @@ __export(import_cli_exports, {
   importFromCli: () => importFromCli,
   parseSimpleYaml: () => parseSimpleYaml
 });
-import { readFileSync as readFileSync4 } from "fs";
+import { readFileSync as readFileSync3 } from "fs";
 import os4 from "os";
 import path10 from "path";
 function cliConfigCandidates(env = process.env, home = os4.homedir()) {
@@ -3910,7 +3857,7 @@ function isSecretKey(key) {
 function importFromCli(filePath, base = DEFAULT_SETTINGS) {
   let text;
   try {
-    text = readFileSync4(filePath, "utf8");
+    text = readFileSync3(filePath, "utf8");
   } catch (error) {
     return {
       ok: false,
@@ -4929,7 +4876,6 @@ export {
   Scheduler,
   schedule_exports,
   subscribe_exports,
-  version_exports,
   Runner,
   runner_exports,
   readPluginInfo,

package/lib/index.js

@@ -9,7 +9,7 @@ import {
   createUpdateService,
   ensureGithubFlow,
   readPluginInfo
-} from "./chunk-SLY2RKCZ.js";
+} from "./chunk-JMIWABMY.js";
 
 // src/index.ts
 var name = "dsh-github-trending";

package/lib/internal.d.ts

@@ -1,4 +1,4 @@
-import { ErrorCode, FileArtifact, Usage, ReleasesReport, SubscriptionItem, SubscriptionDoc, SubscriptionStatus, ErrorInfo, RunRequest, RunResult, State, StateRun, SubscriptionList, SubscriptionVolume } from '@morehao/trendradar-contract';
+import { ErrorCode, FileArtifact, DigestArtifact, Usage, ReleasesReport, SubscriptionItem, SubscriptionDoc, SubscriptionStatus, ErrorInfo, RunRequest, RunResult, State, StateRun, SubscriptionList, SubscriptionVolume } from '@morehao/trendradar-contract';
 import { ExecOptions, ExecResult } from '@morehao/dsh-plugin-kit/exec';
 import * as exec from '@morehao/dsh-plugin-kit/exec';
 export { exec };
@@ -71,8 +71,8 @@ declare namespace errors {
   export { type errors_AnyCode as AnyCode, type errors_ClassifiedError as ClassifiedError, type errors_ErrorArea as ErrorArea, type errors_GitReason as GitReason, errors_PLUGIN_CODES as PLUGIN_CODES, type errors_PluginCode as PluginCode, errors_areaOf as areaOf, errors_classifyStderr as classifyStderr, errors_hintOf as hintOf, errors_isRetriable as isRetriable, errors_reasonOf as reasonOf, errors_redact as redact };
 }
 
-/** 插件实现所对应的 IPC 契约版本（契约包 `ipc.v2.json` 的 wire 整数）。 */
-declare const IPC_SCHEMA_VERSION: 2;
+/** 插件实现所对应的 IPC 契约版本（契约包 `ipc.v3.json` 的 wire 整数）。 */
+declare const IPC_SCHEMA_VERSION: 3;
 /** 插件能接受的 digest 契约版本（与核心 `version --json` 的 digestSchema 比对）。 */
 declare const SUPPORTED_DIGEST_SCHEMA: 2;
 /** 契约包 `contractVersion` 的主版本；0.x 期间同主版本即视为同一契约线。 */
@@ -99,6 +99,8 @@ interface RunOutcome {
     skipped: boolean;
     dryRun: boolean;
     files: FileArtifact[];
+    /** 本次渲染的 digest 原文（ipc v3）；没有渲染（dry-run / 纯发版 / 渲染前失败）时缺省。 */
+    digest?: DigestArtifact;
     contentHash?: string;
     branch?: string;
     commit?: string;
@@ -173,6 +175,7 @@ type SubscribeAction = 'list' | 'add' | 'remove' | 'releases';
  */
 declare function parseSubscribeResult(text: string): SubscribeOutcome;
 
+declare const ipc_DigestArtifact: typeof DigestArtifact;
 declare const ipc_ErrorCode: typeof ErrorCode;
 declare const ipc_ErrorInfo: typeof ErrorInfo;
 declare const ipc_FileArtifact: typeof FileArtifact;
@@ -206,7 +209,7 @@ declare const ipc_parseRunResult: typeof parseRunResult;
 declare const ipc_parseSubscribeResult: typeof parseSubscribeResult;
 declare const ipc_parseVersionInfo: typeof parseVersionInfo;
 declare namespace ipc {
-  export { ipc_ErrorCode as ErrorCode, ipc_ErrorInfo as ErrorInfo, ipc_FileArtifact as FileArtifact, ipc_IPC_SCHEMA_VERSION as IPC_SCHEMA_VERSION, ipc_IpcError as IpcError, type ipc_ParseRunOptions as ParseRunOptions, ipc_ReleasesReport as ReleasesReport, type ipc_RunError as RunError, type ipc_RunOutcome as RunOutcome, ipc_RunRequest as RunRequest, ipc_RunResult as RunResult, ipc_SUPPORTED_CONTRACT_MAJOR as SUPPORTED_CONTRACT_MAJOR, ipc_SUPPORTED_DIGEST_SCHEMA as SUPPORTED_DIGEST_SCHEMA, ipc_State as State, ipc_StateRun as StateRun, type ipc_SubscribeAction as SubscribeAction, type ipc_SubscribeOutcome as SubscribeOutcome, ipc_SubscriptionDoc as SubscriptionDoc, ipc_SubscriptionItem as SubscriptionItem, ipc_SubscriptionList as SubscriptionList, ipc_SubscriptionStatus as SubscriptionStatus, ipc_SubscriptionVolume as SubscriptionVolume, ipc_Usage as Usage, type ipc_VersionInfo as VersionInfo, ipc_isSubscriptionDoc as isSubscriptionDoc, ipc_isSubscriptionStatus as isSubscriptionStatus, ipc_isVersionInfo as isVersionInfo, ipc_parseJsonObject as parseJsonObject, ipc_parseRunResult as parseRunResult, ipc_parseSubscribeResult as parseSubscribeResult, ipc_parseVersionInfo as parseVersionInfo };
+  export { ipc_DigestArtifact as DigestArtifact, ipc_ErrorCode as ErrorCode, ipc_ErrorInfo as ErrorInfo, ipc_FileArtifact as FileArtifact, ipc_IPC_SCHEMA_VERSION as IPC_SCHEMA_VERSION, ipc_IpcError as IpcError, type ipc_ParseRunOptions as ParseRunOptions, ipc_ReleasesReport as ReleasesReport, type ipc_RunError as RunError, type ipc_RunOutcome as RunOutcome, ipc_RunRequest as RunRequest, ipc_RunResult as RunResult, ipc_SUPPORTED_CONTRACT_MAJOR as SUPPORTED_CONTRACT_MAJOR, ipc_SUPPORTED_DIGEST_SCHEMA as SUPPORTED_DIGEST_SCHEMA, ipc_State as State, ipc_StateRun as StateRun, type ipc_SubscribeAction as SubscribeAction, type ipc_SubscribeOutcome as SubscribeOutcome, ipc_SubscriptionDoc as SubscriptionDoc, ipc_SubscriptionItem as SubscriptionItem, ipc_SubscriptionList as SubscriptionList, ipc_SubscriptionStatus as SubscriptionStatus, ipc_SubscriptionVolume as SubscriptionVolume, ipc_Usage as Usage, type ipc_VersionInfo as VersionInfo, ipc_isSubscriptionDoc as isSubscriptionDoc, ipc_isSubscriptionStatus as isSubscriptionStatus, ipc_isVersionInfo as isVersionInfo, ipc_parseJsonObject as parseJsonObject, ipc_parseRunResult as parseRunResult, ipc_parseSubscribeResult as parseSubscribeResult, ipc_parseVersionInfo as parseVersionInfo };
 }
 
 type Provider = string;
@@ -282,6 +285,21 @@ interface SummarizeSettings {
     enrichTimeoutSeconds: number;
     enrichBudgetSeconds: number;
 }
+/**
+ * 本地 star 观测库（核心 `observe.*`，core ≥ 0.8.8）。
+ * 观测库让「今日新增」来自本地每日快照的差分，而不是趋势页上的一行字；
+ * 默认开启，`enabled=false` 是回滚开关（回到「增量只来自趋势页」的旧行为）。
+ * 存储位置由核心自己解析到 `$DSH_HOME`（计划 D4），**不**在这里暴露，避免用户
+ * 把观测库指进归档仓库。
+ */
+interface ObserveSettings {
+    /** 是否启用观测库；关闭即回到旧行为（`starsInPeriod` 只来自趋势页/搜索）。 */
+    enabled: boolean;
+    /** 首次见到的仓库从历史接口回填多少天（0=不回填，从今天开始攒）。 */
+    backfillDays: number;
+    /** 单次运行最多记多少个候选仓库（上限 300，约 3 个 GraphQL 批量/天）。 */
+    maxCandidates: number;
+}
 /**
  * 每周发版运行的插件侧节奏（核心没有这个字段，**绝不**写进核心 YAML）。
  * 与榜单调度（`schedule.*`）完全独立：两者各有自己的开关与时间点。
@@ -345,6 +363,7 @@ interface Settings {
     github: GithubSettings;
     trending: TrendingSettings;
     summarize: SummarizeSettings;
+    observe: ObserveSettings;
     releases: ReleasesSettings;
     output: OutputSettings;
     schedule: ScheduleSettings;
@@ -432,6 +451,11 @@ interface CoreConfig {
         enrichTimeoutSeconds: number;
         enrichBudgetSeconds: number;
     };
+    observe: {
+        enabled: boolean;
+        backfillDays: number;
+        maxCandidates: number;
+    };
     releases: {
         enabled: boolean;
         includePrerelease: boolean;
@@ -480,6 +504,7 @@ type config_Enrich = Enrich;
 type config_GithubSettings = GithubSettings;
 type config_ModelSettings = ModelSettings;
 type config_NetworkSettings = NetworkSettings;
+type config_ObserveSettings = ObserveSettings;
 type config_OutputSettings = OutputSettings;
 declare const config_PERIODS: typeof PERIODS;
 declare const config_PROVIDER_BASE_URLS: typeof PROVIDER_BASE_URLS;
@@ -508,7 +533,7 @@ declare const config_toCoreConfig: typeof toCoreConfig;
 declare const config_toYaml: typeof toYaml;
 declare const config_validateSettings: typeof validateSettings;
 declare namespace config {
-  export { type config_AuthMode as AuthMode, config_CORE_PROVIDERS as CORE_PROVIDERS, type config_CommitMode as CommitMode, type config_CoreConfig as CoreConfig, config_DEFAULT_SETTINGS as DEFAULT_SETTINGS, type config_Enrich as Enrich, type config_GithubSettings as GithubSettings, type config_ModelSettings as ModelSettings, type config_NetworkSettings as NetworkSettings, type config_OutputSettings as OutputSettings, config_PERIODS as PERIODS, config_PROVIDER_BASE_URLS as PROVIDER_BASE_URLS, type config_PRSettings as PRSettings, type config_Period as Period, type config_Problem as Problem, type config_Provider as Provider, type config_ReleaseScheduleSettings as ReleaseScheduleSettings, type config_ReleasesSettings as ReleasesSettings, type config_RepoSettings as RepoSettings, config_SETTINGS_SECTIONS as SETTINGS_SECTIONS, type config_ScheduleSettings as ScheduleSettings, type config_Settings as Settings, type config_SettingsSection as SettingsSection, type config_Since as Since, type config_SummarizeSettings as SummarizeSettings, type config_TrendingSettings as TrendingSettings, config_effectiveBaseURL as effectiveBaseURL, config_isEnrich as isEnrich, config_isPeriod as isPeriod, config_isValidTimezone as isValidTimezone, config_mergeSettingsSection as mergeSettingsSection, config_normalizeSettings as normalizeSettings, config_sectionOfField as sectionOfField, config_toCoreConfig as toCoreConfig, config_toYaml as toYaml, config_validateSettings as validateSettings };
+  export { type config_AuthMode as AuthMode, config_CORE_PROVIDERS as CORE_PROVIDERS, type config_CommitMode as CommitMode, type config_CoreConfig as CoreConfig, config_DEFAULT_SETTINGS as DEFAULT_SETTINGS, type config_Enrich as Enrich, type config_GithubSettings as GithubSettings, type config_ModelSettings as ModelSettings, type config_NetworkSettings as NetworkSettings, type config_ObserveSettings as ObserveSettings, type config_OutputSettings as OutputSettings, config_PERIODS as PERIODS, config_PROVIDER_BASE_URLS as PROVIDER_BASE_URLS, type config_PRSettings as PRSettings, type config_Period as Period, type config_Problem as Problem, type config_Provider as Provider, type config_ReleaseScheduleSettings as ReleaseScheduleSettings, type config_ReleasesSettings as ReleasesSettings, type config_RepoSettings as RepoSettings, config_SETTINGS_SECTIONS as SETTINGS_SECTIONS, type config_ScheduleSettings as ScheduleSettings, type config_Settings as Settings, type config_SettingsSection as SettingsSection, type config_Since as Since, type config_SummarizeSettings as SummarizeSettings, type config_TrendingSettings as TrendingSettings, config_effectiveBaseURL as effectiveBaseURL, config_isEnrich as isEnrich, config_isPeriod as isPeriod, config_isValidTimezone as isValidTimezone, config_mergeSettingsSection as mergeSettingsSection, config_normalizeSettings as normalizeSettings, config_sectionOfField as sectionOfField, config_toCoreConfig as toCoreConfig, config_toYaml as toYaml, config_validateSettings as validateSettings };
 }
 
 declare const PLUGIN_DIR_NAME = "github-trending";
@@ -1595,16 +1620,6 @@ declare namespace pendingPr {
   export { type pendingPr_CheckPendingPrOptions as CheckPendingPrOptions, type pendingPr_ParsedPullUrl as ParsedPullUrl, type pendingPr_PendingPrStatus as PendingPrStatus, type pendingPr_PullState as PullState, pendingPr_checkPendingPr as checkPendingPr, pendingPr_clearPendingPrCache as clearPendingPrCache, pendingPr_parsePullUrl as parsePullUrl };
 }
 
-/**
- * 支持 `run --force`（忽略摘要缓存重新生成）的最低核心版本。
- * 与 core patch 发版 `0.7.1` 对齐；`dsh.core.version` 应 >= 它，dev override 指向更旧核心时靠闸门降级。
- */
-declare const FORCE_MIN_CORE_VERSION = "0.7.1";
-/**
- * 支持 `run --stages releases --repo`（单仓发版分析）的最低核心版本。
- * 与 core v0.8.0 对齐；核心更旧时单仓触发降级为全量（不传 --repo）。
- */
-declare const REPO_MIN_CORE_VERSION = "0.8.0";
 interface RunSummary {
     id: string;
     ok: boolean;
@@ -1665,13 +1680,6 @@ interface RunnerDeps {
     /** 预览副本这类「可失败但不阻断运行」的事件走这里，不写进 warnings。 */
     logger?: (event: string, data?: Record<string, unknown>) => void;
 }
-/**
- * 与 core `render.NameOf` 对齐的产物基名（不含扩展名）：
- *   daily → YYYY-MM-DD；weekly → YYYY-Wnn（ISO 周年/周）；monthly → YYYY-MM。
- * 用于在 outcome.files 里按周期精确挑出本期 digest 的 `.md`（而不是猜）。
- */
-declare function isoWeekName(date: string): string;
-declare function periodFileBase(period: Period, date: string): string;
 /**
  * 从契约 `RunOutcome` 投影出「token 总量」与「发版摘要」：
  * - `tokens` = usage.totalTokens + releases.usage.totalTokens（含订阅阶段）；
@@ -1739,11 +1747,13 @@ declare class Runner {
     private summarize;
     private failureSummary;
     /**
-     * 从本次核心返回的 artifact 清单里选当天的 `.md`，只读复制到 previews/。
+     * 把本次运行渲染的 digest 原文写进 previews/（ipc v3 起由核心随 RunResult 回传）。
      *
-     * 这是插件**唯一**读取用户仓库的场景，而且只读核心自己刚写出的那一份：
-     * - 路径必须在 `repo.path` 内（词法 + realpath 各判一次，挡 `..`/绝对路径/符号链接）；
-     * - 上限 512 KB、拒绝 NUL、sha256 必须与契约声明一致；
+     * 这里**不再读用户仓库**：分支可能在运行结束前就被合并、切回 base 并删除，
+     * 任何「事后去工作树里找文件」的做法都会读到旧版或空。文本、字节数与 sha256
+     * 的跨字段一致性已在 `parseRunResult` 里校验过；这里只做展示侧的防御：
+     * - 上限 512 KB（与预览读取上限一致）、拒绝 NUL；
+     * - 落盘前统一 `redact()`，避免把密钥写进预览文件；
      * - 任何一步失败都只记日志，返回 undefined；运行结果不受影响。
      */
     private capturePreview;
@@ -1753,18 +1763,14 @@ declare class Runner {
     coreStatus(fresh?: boolean): Promise<CoreStatus>;
 }
 
-declare const runner_FORCE_MIN_CORE_VERSION: typeof FORCE_MIN_CORE_VERSION;
-declare const runner_REPO_MIN_CORE_VERSION: typeof REPO_MIN_CORE_VERSION;
 type runner_RunRequestOptions = RunRequestOptions;
 type runner_RunSummary = RunSummary;
 type runner_Runner = Runner;
 declare const runner_Runner: typeof Runner;
 type runner_RunnerDeps = RunnerDeps;
-declare const runner_isoWeekName: typeof isoWeekName;
-declare const runner_periodFileBase: typeof periodFileBase;
 declare const runner_projectUsage: typeof projectUsage;
 declare namespace runner {
-  export { runner_FORCE_MIN_CORE_VERSION as FORCE_MIN_CORE_VERSION, runner_REPO_MIN_CORE_VERSION as REPO_MIN_CORE_VERSION, type runner_RunRequestOptions as RunRequestOptions, type runner_RunSummary as RunSummary, runner_Runner as Runner, type runner_RunnerDeps as RunnerDeps, runner_isoWeekName as isoWeekName, runner_periodFileBase as periodFileBase, runner_projectUsage as projectUsage };
+  export { type runner_RunRequestOptions as RunRequestOptions, type runner_RunSummary as RunSummary, runner_Runner as Runner, type runner_RunnerDeps as RunnerDeps, runner_projectUsage as projectUsage };
 }
 
 /** 订阅命令超时：核心只做一次 GitHub 请求/本地文件读写，8 s 足够。 */
@@ -1958,23 +1964,6 @@ declare namespace schedule {
   export { schedule_RELEASE_CATCH_UP_MINUTES as RELEASE_CATCH_UP_MINUTES, type schedule_ReleaseScheduleConfig as ReleaseScheduleConfig, type schedule_ScheduleConfig as ScheduleConfig, schedule_Scheduler as Scheduler, type schedule_SchedulerDeps as SchedulerDeps, schedule_daysInMonth as daysInMonth, schedule_isDue as isDue, schedule_isPeriodTriggerDay as isPeriodTriggerDay, schedule_isReleaseDue as isReleaseDue, schedule_isoWeekKey as isoWeekKey, schedule_nextOccurrence as nextOccurrence, schedule_nextOccurrenceFor as nextOccurrenceFor, schedule_nextReleaseOccurrence as nextReleaseOccurrence, schedule_parseClock as parseClock, schedule_zonedDateString as zonedDateString, schedule_zonedTimeToUtc as zonedTimeToUtc };
 }
 
-/**
- * 版本比较：只用于「核心是否足够新到支持某个 CLI flag」这类能力闸门。
- *
- * 核心的 `version --json` 只给 `x.y.z`（偶带预发布后缀），这里按三段数字比较，
- * 后缀忽略。不做完整 semver 区间——项目只需要「>= 阈值」这一种判断，够用且不易错。
- */
-/**
- * `a >= b` 时返回 true。任一方不可解析时返回 false（保守：当作「不满足」，
- * 让调用方降级为不带新 flag 的行为，避免向旧核心传未知参数）。
- */
-declare function versionAtLeast(a: string, b: string): boolean;
-
-declare const version_versionAtLeast: typeof versionAtLeast;
-declare namespace version {
-  export { version_versionAtLeast as versionAtLeast };
-}
-
 /**
  * Host HTTP 面：`/api/morehao/github-trending/*`。
  *
@@ -2324,4 +2313,4 @@ declare namespace tools {
   export { tools_createTrendingHistoryTool as createTrendingHistoryTool, tools_createTrendingRunTool as createTrendingRunTool };
 }
 
-export { channel, config, core, credentials, errors, github, githubAuth, handshake$1 as handshake, importCli, ipc, locate, paths, pendingPr, pluginInfo, preflight, proxy, quickfill, release, repo, routes, run, runner, schedule, state, subscribe, tools, update as updateService, version };
+export { channel, config, core, credentials, errors, github, githubAuth, handshake$1 as handshake, importCli, ipc, locate, paths, pendingPr, pluginInfo, preflight, proxy, quickfill, release, repo, routes, run, runner, schedule, state, subscribe, tools, update as updateService };

package/lib/internal.js

@@ -25,9 +25,8 @@ import {
   state_exports,
   subscribe_exports,
   tools_exports,
-  update_exports,
-  version_exports
-} from "./chunk-SLY2RKCZ.js";
+  update_exports
+} from "./chunk-JMIWABMY.js";
 
 // src/internal.ts
 import * as exec from "@morehao/dsh-plugin-kit/exec";
@@ -59,6 +58,5 @@ export {
   state_exports as state,
   subscribe_exports as subscribe,
   tools_exports as tools,
-  update_exports as updateService,
-  version_exports as version
+  update_exports as updateService
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@morehao/dsh-github-trending",
-  "version": "0.8.22",
+  "version": "0.9.0",
   "description": "GitHub 趋势日报的 DeepSeek Harness 插件：按日 / 周 / 月周期定时 spawn 本地 trendradar 核心，抓取 Trending、生成中文简介与周期总结，并可选把订阅仓库的新 Release 合成中文摘要，一起提交到你的仓库、自动开 PR 合并；内置概览 / 榜单 / 运行记录 / 订阅 / 设置工作台。",
   "type": "module",
   "main": "lib/index.js",
@@ -52,7 +52,7 @@
   },
   "dependencies": {
     "@morehao/dsh-plugin-kit": "^0.4.1",
-    "@morehao/trendradar-contract": "0.5.0"
+    "@morehao/trendradar-contract": "0.6.0"
   },
   "dsh": {
     "bundle": {
@@ -60,7 +60,7 @@
     },
     "core": {
       "repo": "morehao/trendradar",
-      "version": "0.8.7"
+      "version": "0.9.0"
     },
     "client": {
       "platform": "web",