@morehao/dsh-github-trending 0.8.23 → 0.9.0

package/lib/{chunk-DGEO5BHK.js → chunk-JMIWABMY.js}

@@ -1052,8 +1052,9 @@ __export(ipc_exports, {
   parseSubscribeResult: () => parseSubscribeResult,
   parseVersionInfo: () => parseVersionInfo
 });
+import { createHash } from "crypto";
 import { validators } from "@morehao/trendradar-contract";
-var IPC_SCHEMA_VERSION = 2;
+var IPC_SCHEMA_VERSION = 3;
 var SUPPORTED_DIGEST_SCHEMA = 2;
 var SUPPORTED_CONTRACT_MAJOR = 0;
 var SUBSCRIPTION_STATUSES = ["baseline", "ok", "no_change", "rate_limited", "failed"];
@@ -1112,20 +1113,50 @@ function normalizeError(value) {
     ...isRecord(value.details) ? { details: value.details } : {}
   };
 }
+function parseDigest(value, files) {
+  if (value === void 0 || value === null) return void 0;
+  if (!isRecord(value)) throw new IpcError("IPC_INVALID", "\u6838\u5FC3 run --json \u7684 digest \u4E0D\u662F\u5BF9\u8C61");
+  const file = value.path;
+  const bytes = value.bytes;
+  const sha256 = value.sha256;
+  const text = value.text;
+  if (typeof file !== "string" || file === "" || typeof text !== "string" || typeof bytes !== "number" || typeof sha256 !== "string") {
+    throw new IpcError("IPC_INVALID", "\u6838\u5FC3 run --json \u7684 digest \u7F3A path/bytes/sha256/text");
+  }
+  const buffer = Buffer.from(text, "utf8");
+  if (buffer.length !== bytes) {
+    throw new IpcError("IPC_INVALID", `digest.bytes=${bytes} \u4E0E text \u5B9E\u9645 ${buffer.length} \u5B57\u8282\u4E0D\u4E00\u81F4`);
+  }
+  const actual = `sha256:${createHash("sha256").update(buffer).digest("hex")}`;
+  if (actual !== sha256) {
+    throw new IpcError("IPC_INVALID", `digest.sha256 \u4E0E text \u4E0D\u4E00\u81F4\uFF1A\u58F0\u660E ${sha256}\uFF0C\u5B9E\u9645 ${actual}`);
+  }
+  const listed = files.find((item) => item.path === file);
+  if (listed === void 0) {
+    throw new IpcError("IPC_INVALID", `digest.path=${file} \u4E0D\u5728 files \u91CC`);
+  }
+  if (listed.sha256 !== sha256 || listed.bytes !== bytes) {
+    throw new IpcError("IPC_INVALID", `digest \u4E0E files \u91CC ${file} \u7684 bytes/sha256 \u4E0D\u4E00\u81F4`);
+  }
+  return { path: file, bytes, sha256, text };
+}
 function parseRunResult(text, options) {
   const value = parseJsonObject(text);
   if (value.files === null || value.files === void 0) value.files = [];
   if (value.command !== "run" || value.ipcSchema !== IPC_SCHEMA_VERSION || !validators.runResult(value)) {
-    throw new IpcError("IPC_INVALID", "\u6838\u5FC3 run --json \u4E0D\u662F\u5951\u7EA6 RunResult\uFF08ipcSchema=2 / command=run\uFF09");
+    throw new IpcError("IPC_INVALID", "\u6838\u5FC3 run --json \u4E0D\u662F\u5951\u7EA6 RunResult\uFF08ipcSchema=3 / command=run\uFF09");
   }
   const result = value;
   const error = normalizeError(result.error);
   const skipReason = value.skipReason;
+  const files = Array.isArray(result.files) ? result.files : [];
+  const digest = parseDigest(value.digest, files);
   return {
     ok: result.ok,
     skipped: result.skipped === true,
     dryRun: options.dryRun,
-    files: Array.isArray(result.files) ? result.files : [],
+    files,
+    ...digest === void 0 ? {} : { digest },
     contentHash: typeof result.contentHash === "string" ? result.contentHash : void 0,
     branch: typeof result.branch === "string" ? result.branch : void 0,
     commit: typeof result.commit === "string" ? result.commit : void 0,
@@ -1246,7 +1277,7 @@ __export(release_exports, {
   readCoreRelease: () => readCoreRelease,
   verifyCached: () => verifyCached
 });
-import { createHash } from "crypto";
+import { createHash as createHash2 } from "crypto";
 import { chmodSync, createWriteStream, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync as renameSync2, rmSync, statSync as statSync2, unlinkSync as unlinkSync2 } from "fs";
 import { createRequire } from "module";
 import { pipeline } from "stream/promises";
@@ -1306,7 +1337,7 @@ function describeRelease(release, options = {}) {
   };
 }
 function sha256File(file) {
-  return createHash("sha256").update(readFileSync2(file)).digest("hex");
+  return createHash2("sha256").update(readFileSync2(file)).digest("hex");
 }
 function markerPath(binaryPath) {
   return `${binaryPath}.sha256`;
@@ -1378,7 +1409,7 @@ async function download(descriptor, options) {
   }
   mkdirSync2(descriptor.cacheDir, { recursive: true, mode: 448 });
   const temp = `${descriptor.binaryPath}.${process.pid}.${Date.now()}.part`;
-  const hash = createHash("sha256");
+  const hash = createHash2("sha256");
   const total = Number(response.headers.get("content-length") ?? "0") || void 0;
   let bytes = 0;
   try {
@@ -2816,44 +2847,15 @@ async function runSubscribe(input, deps) {
   }
 }
 
-// src/host/version.ts
-var version_exports = {};
-__export(version_exports, {
-  versionAtLeast: () => versionAtLeast
-});
-function parseTriplet(value) {
-  const match = /^v?(\d+)\.(\d+)\.(\d+)/.exec(value.trim());
-  if (match === null) return void 0;
-  return [Number(match[1]), Number(match[2]), Number(match[3])];
-}
-function versionAtLeast(a, b) {
-  const left = parseTriplet(a);
-  const right = parseTriplet(b);
-  if (left === void 0 || right === void 0) return false;
-  for (let i = 0; i < 3; i += 1) {
-    const l = left[i];
-    const r = right[i];
-    if (l > r) return true;
-    if (l < r) return false;
-  }
-  return true;
-}
-
 // src/host/runner.ts
 var runner_exports = {};
 __export(runner_exports, {
-  FORCE_MIN_CORE_VERSION: () => FORCE_MIN_CORE_VERSION,
-  REPO_MIN_CORE_VERSION: () => REPO_MIN_CORE_VERSION,
   Runner: () => Runner,
-  isoWeekName: () => isoWeekName,
-  periodFileBase: () => periodFileBase,
   projectUsage: () => projectUsage
 });
-import { createHash as createHash2 } from "crypto";
-import { existsSync as existsSync4, readFileSync as readFileSync3, realpathSync, statSync as statSync5 } from "fs";
+import { createHash as createHash3 } from "crypto";
+import { existsSync as existsSync4, statSync as statSync5 } from "fs";
 import path9 from "path";
-var FORCE_MIN_CORE_VERSION = "0.7.1";
-var REPO_MIN_CORE_VERSION = "0.8.0";
 function repoProblem(repoPath) {
   if (repoPath.trim() === "") return { code: "CONFIG_INVALID", message: "\u8FD8\u6CA1\u6709\u9009\u62E9\u5F52\u6863\u4ED3\u5E93" };
   if (!existsSync4(repoPath)) return { code: "REPO_NOT_GIT", message: `\u76EE\u5F55\u4E0D\u5B58\u5728\uFF1A${repoPath}` };
@@ -2874,30 +2876,9 @@ function runDate(settings, now = /* @__PURE__ */ new Date()) {
     return now.toISOString().slice(0, 10);
   }
 }
-function isInside(root, target) {
-  const rel = path9.relative(root, target);
-  return rel !== "" && !rel.startsWith("..") && !path9.isAbsolute(rel);
-}
-function normalizeSha256(value) {
-  if (typeof value !== "string") return void 0;
-  const hex = value.trim().replace(/^sha256:/i, "").toLowerCase();
-  return /^[0-9a-f]{64}$/.test(hex) ? hex : void 0;
-}
 function counterOf(value) {
   return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
-function isoWeekName(date) {
-  const match = /^(\d{4})-(\d{2})-(\d{2})$/.exec(date);
-  if (match === null) return date;
-  const d = new Date(Date.UTC(Number(match[1]), Number(match[2]) - 1, Number(match[3])));
-  if (Number.isNaN(d.getTime())) return date;
-  return isoWeekKey(d, "UTC");
-}
-function periodFileBase(period, date) {
-  if (period === "monthly") return date.slice(0, 7);
-  if (period === "weekly") return isoWeekName(date);
-  return date;
-}
 function projectUsage(outcome) {
   const usageTokens = outcome.usage?.totalTokens;
   const releasesTokens = outcome.releases?.usage?.totalTokens;
@@ -2972,15 +2953,7 @@ var Runner = class {
           `\u6838\u5FC3\u4E0D\u652F\u6301 provider\u300C${settings.model.provider}\u300D\uFF1B\u53EF\u7528\uFF1A${handshakeResult.supportedProviders.join(" / ")}`
         );
       }
-      const forceRequested = options.force === true;
-      const forceSupported = versionAtLeast(handshakeResult.version.version, FORCE_MIN_CORE_VERSION);
-      const effectiveForce = forceRequested && forceSupported;
-      if (forceRequested && !forceSupported) {
-        store.appendLog(
-          logFile,
-          `[force] \u6838\u5FC3 ${handshakeResult.version.version} \u4F4E\u4E8E ${FORCE_MIN_CORE_VERSION}\uFF0C\u4E0D\u652F\u6301 --force\uFF0C\u5DF2\u964D\u7EA7\u4E3A\u666E\u901A\u91CD\u8DD1`
-        );
-      }
+      const effectiveForce = options.force === true;
       const model = await this.openModelChannel({ settings, credentials, env, logFile });
       const apiKey = model.apiKey;
       proxy = model.proxy;
@@ -3018,15 +2991,7 @@ var Runner = class {
         ...core.tag === void 0 ? {} : { coreTag: core.tag },
         ...effectiveForce ? { forced: true } : {}
       });
-      const preview = this.capturePreview({
-        id,
-        date,
-        period,
-        settings,
-        outcome,
-        secrets: [apiKey, github.token],
-        ...effectiveForce ? { force: true } : {}
-      });
+      const preview = this.capturePreview({ id, outcome, secrets: [apiKey, github.token] });
       if (preview !== void 0) summary.preview = preview;
       this.record(summary, settings);
       return summary;
@@ -3117,14 +3082,7 @@ var Runner = class {
           `\u6838\u5FC3\u4E0D\u652F\u6301 provider\u300C${settings.model.provider}\u300D\uFF1B\u53EF\u7528\uFF1A${handshakeResult.supportedProviders.join(" / ")}`
         );
       }
-      let effectiveRepo = requestedRepo;
-      if (requestedRepo !== void 0 && !versionAtLeast(handshakeResult.version.version, REPO_MIN_CORE_VERSION)) {
-        store.appendLog(
-          logFile,
-          `[release] \u6838\u5FC3 ${handshakeResult.version.version} \u4F4E\u4E8E ${REPO_MIN_CORE_VERSION}\uFF0C\u5355\u4ED3\u5206\u6790\u964D\u7EA7\u4E3A\u5168\u91CF`
-        );
-        effectiveRepo = void 0;
-      }
+      const effectiveRepo = requestedRepo;
       const model = await this.openModelChannel({ settings, credentials, env, logFile });
       proxy = model.proxy;
       const github = await resolveGithubToken(credentials, settings.github.authMode, settings.github.tokenRef, { env });
@@ -3365,70 +3323,38 @@ var Runner = class {
     };
   }
   /**
-   * 从本次核心返回的 artifact 清单里选当天的 `.md`，只读复制到 previews/。
+   * 把本次运行渲染的 digest 原文写进 previews/（ipc v3 起由核心随 RunResult 回传）。
    *
-   * 这是插件**唯一**读取用户仓库的场景，而且只读核心自己刚写出的那一份：
-   * - 路径必须在 `repo.path` 内（词法 + realpath 各判一次，挡 `..`/绝对路径/符号链接）；
-   * - 上限 512 KB、拒绝 NUL、sha256 必须与契约声明一致；
+   * 这里**不再读用户仓库**：分支可能在运行结束前就被合并、切回 base 并删除，
+   * 任何「事后去工作树里找文件」的做法都会读到旧版或空。文本、字节数与 sha256
+   * 的跨字段一致性已在 `parseRunResult` 里校验过；这里只做展示侧的防御：
+   * - 上限 512 KB（与预览读取上限一致）、拒绝 NUL；
+   * - 落盘前统一 `redact()`，避免把密钥写进预览文件；
    * - 任何一步失败都只记日志，返回 undefined；运行结果不受影响。
    */
   capturePreview(input) {
-    const { outcome, settings, date, period, id } = input;
-    if (!outcome.ok || outcome.dryRun || date === void 0) return void 0;
-    if (outcome.skipped && input.force !== true) return void 0;
+    const { outcome, id } = input;
+    if (!outcome.ok || outcome.dryRun) return void 0;
     const skip = (reason, extra = {}) => {
       this.deps.logger?.("preview.skip", { id, reason, ...extra });
       return void 0;
     };
-    const markdown = outcome.files.filter((file) => {
-      const ext = path9.extname(file.path).toLowerCase();
-      const base = path9.basename(file.path).toLowerCase();
-      const normalized = file.path.replace(/\\/g, "/");
-      const inReleases = normalized === "releases" || normalized.startsWith("releases/");
-      return ext === ".md" && base !== "readme.md" && base !== "index.md" && !inReleases;
-    });
-    if (markdown.length === 0) return skip("no-markdown");
-    const expected = period === void 0 ? `${date}.md` : `${periodFileBase(period, date)}.md`;
-    const named = markdown.filter((file) => path9.basename(file.path) === expected);
-    const chosen = named.length > 0 ? named[0] : markdown.length === 1 ? markdown[0] : void 0;
-    if (chosen === void 0) return skip("ambiguous", { candidates: markdown.length, expected, period: period ?? null });
-    const repoPath = settings.repo.path;
-    const resolved = path9.resolve(repoPath, chosen.path);
-    if (!isInside(repoPath, resolved)) return skip("outside-repo", { path: chosen.path });
-    let fileReal;
-    try {
-      const repoReal = realpathSync(repoPath);
-      fileReal = realpathSync(resolved);
-      if (!isInside(repoReal, fileReal)) return skip("symlink-outside-repo", { path: chosen.path });
-    } catch {
-      return skip("missing-file", { path: chosen.path });
-    }
-    let buffer;
-    try {
-      const stat2 = statSync5(fileReal);
-      if (!stat2.isFile()) return skip("not-a-file", { path: chosen.path });
-      if (stat2.size > PREVIEW_MAX_BYTES) return skip("too-large", { bytes: stat2.size });
-      buffer = readFileSync3(fileReal);
-    } catch {
-      return skip("read-failed", { path: chosen.path });
-    }
-    if (buffer.includes(0)) return skip("contains-nul", { path: chosen.path });
-    const declared = normalizeSha256(chosen.sha256);
-    const actual = createHash2("sha256").update(buffer).digest("hex");
-    if (declared === void 0 || declared !== actual) {
-      return skip("sha-mismatch", { path: chosen.path, declared: declared ?? null, actual });
-    }
-    const text = redact(buffer.toString("utf8"), input.secrets);
+    const digest = outcome.digest;
+    if (digest === void 0) return skip("no-digest");
+    const buffer = Buffer.from(digest.text, "utf8");
+    if (buffer.length > PREVIEW_MAX_BYTES) return skip("too-large", { path: digest.path, bytes: buffer.length });
+    if (buffer.includes(0)) return skip("contains-nul", { path: digest.path });
+    const text = redact(digest.text, input.secrets);
     const stored = Buffer.from(text, "utf8");
     try {
       this.deps.store.writePreview(id, text);
     } catch {
-      return skip("write-failed", { path: chosen.path });
+      return skip("write-failed", { path: digest.path });
     }
     return {
-      file: path9.relative(repoPath, resolved).split(path9.sep).join("/"),
+      file: digest.path,
       bytes: stored.length,
-      sha256: createHash2("sha256").update(stored).digest("hex")
+      sha256: createHash3("sha256").update(stored).digest("hex")
     };
   }
   /** 写历史与状态；同一天的 skipped 运行不覆盖 lastDigest。 */
@@ -3839,7 +3765,7 @@ __export(import_cli_exports, {
   importFromCli: () => importFromCli,
   parseSimpleYaml: () => parseSimpleYaml
 });
-import { readFileSync as readFileSync4 } from "fs";
+import { readFileSync as readFileSync3 } from "fs";
 import os4 from "os";
 import path10 from "path";
 function cliConfigCandidates(env = process.env, home = os4.homedir()) {
@@ -3931,7 +3857,7 @@ function isSecretKey(key) {
 function importFromCli(filePath, base = DEFAULT_SETTINGS) {
   let text;
   try {
-    text = readFileSync4(filePath, "utf8");
+    text = readFileSync3(filePath, "utf8");
   } catch (error) {
     return {
       ok: false,
@@ -4950,7 +4876,6 @@ export {
   Scheduler,
   schedule_exports,
   subscribe_exports,
-  version_exports,
   Runner,
   runner_exports,
   readPluginInfo,

package/lib/index.js

@@ -9,7 +9,7 @@ import {
   createUpdateService,
   ensureGithubFlow,
   readPluginInfo
-} from "./chunk-DGEO5BHK.js";
+} from "./chunk-JMIWABMY.js";
 
 // src/index.ts
 var name = "dsh-github-trending";

package/lib/internal.d.ts

@@ -1,4 +1,4 @@
-import { ErrorCode, FileArtifact, Usage, ReleasesReport, SubscriptionItem, SubscriptionDoc, SubscriptionStatus, ErrorInfo, RunRequest, RunResult, State, StateRun, SubscriptionList, SubscriptionVolume } from '@morehao/trendradar-contract';
+import { ErrorCode, FileArtifact, DigestArtifact, Usage, ReleasesReport, SubscriptionItem, SubscriptionDoc, SubscriptionStatus, ErrorInfo, RunRequest, RunResult, State, StateRun, SubscriptionList, SubscriptionVolume } from '@morehao/trendradar-contract';
 import { ExecOptions, ExecResult } from '@morehao/dsh-plugin-kit/exec';
 import * as exec from '@morehao/dsh-plugin-kit/exec';
 export { exec };
@@ -71,8 +71,8 @@ declare namespace errors {
   export { type errors_AnyCode as AnyCode, type errors_ClassifiedError as ClassifiedError, type errors_ErrorArea as ErrorArea, type errors_GitReason as GitReason, errors_PLUGIN_CODES as PLUGIN_CODES, type errors_PluginCode as PluginCode, errors_areaOf as areaOf, errors_classifyStderr as classifyStderr, errors_hintOf as hintOf, errors_isRetriable as isRetriable, errors_reasonOf as reasonOf, errors_redact as redact };
 }
 
-/** 插件实现所对应的 IPC 契约版本（契约包 `ipc.v2.json` 的 wire 整数）。 */
-declare const IPC_SCHEMA_VERSION: 2;
+/** 插件实现所对应的 IPC 契约版本（契约包 `ipc.v3.json` 的 wire 整数）。 */
+declare const IPC_SCHEMA_VERSION: 3;
 /** 插件能接受的 digest 契约版本（与核心 `version --json` 的 digestSchema 比对）。 */
 declare const SUPPORTED_DIGEST_SCHEMA: 2;
 /** 契约包 `contractVersion` 的主版本；0.x 期间同主版本即视为同一契约线。 */
@@ -99,6 +99,8 @@ interface RunOutcome {
     skipped: boolean;
     dryRun: boolean;
     files: FileArtifact[];
+    /** 本次渲染的 digest 原文（ipc v3）；没有渲染（dry-run / 纯发版 / 渲染前失败）时缺省。 */
+    digest?: DigestArtifact;
     contentHash?: string;
     branch?: string;
     commit?: string;
@@ -173,6 +175,7 @@ type SubscribeAction = 'list' | 'add' | 'remove' | 'releases';
  */
 declare function parseSubscribeResult(text: string): SubscribeOutcome;
 
+declare const ipc_DigestArtifact: typeof DigestArtifact;
 declare const ipc_ErrorCode: typeof ErrorCode;
 declare const ipc_ErrorInfo: typeof ErrorInfo;
 declare const ipc_FileArtifact: typeof FileArtifact;
@@ -206,7 +209,7 @@ declare const ipc_parseRunResult: typeof parseRunResult;
 declare const ipc_parseSubscribeResult: typeof parseSubscribeResult;
 declare const ipc_parseVersionInfo: typeof parseVersionInfo;
 declare namespace ipc {
-  export { ipc_ErrorCode as ErrorCode, ipc_ErrorInfo as ErrorInfo, ipc_FileArtifact as FileArtifact, ipc_IPC_SCHEMA_VERSION as IPC_SCHEMA_VERSION, ipc_IpcError as IpcError, type ipc_ParseRunOptions as ParseRunOptions, ipc_ReleasesReport as ReleasesReport, type ipc_RunError as RunError, type ipc_RunOutcome as RunOutcome, ipc_RunRequest as RunRequest, ipc_RunResult as RunResult, ipc_SUPPORTED_CONTRACT_MAJOR as SUPPORTED_CONTRACT_MAJOR, ipc_SUPPORTED_DIGEST_SCHEMA as SUPPORTED_DIGEST_SCHEMA, ipc_State as State, ipc_StateRun as StateRun, type ipc_SubscribeAction as SubscribeAction, type ipc_SubscribeOutcome as SubscribeOutcome, ipc_SubscriptionDoc as SubscriptionDoc, ipc_SubscriptionItem as SubscriptionItem, ipc_SubscriptionList as SubscriptionList, ipc_SubscriptionStatus as SubscriptionStatus, ipc_SubscriptionVolume as SubscriptionVolume, ipc_Usage as Usage, type ipc_VersionInfo as VersionInfo, ipc_isSubscriptionDoc as isSubscriptionDoc, ipc_isSubscriptionStatus as isSubscriptionStatus, ipc_isVersionInfo as isVersionInfo, ipc_parseJsonObject as parseJsonObject, ipc_parseRunResult as parseRunResult, ipc_parseSubscribeResult as parseSubscribeResult, ipc_parseVersionInfo as parseVersionInfo };
+  export { ipc_DigestArtifact as DigestArtifact, ipc_ErrorCode as ErrorCode, ipc_ErrorInfo as ErrorInfo, ipc_FileArtifact as FileArtifact, ipc_IPC_SCHEMA_VERSION as IPC_SCHEMA_VERSION, ipc_IpcError as IpcError, type ipc_ParseRunOptions as ParseRunOptions, ipc_ReleasesReport as ReleasesReport, type ipc_RunError as RunError, type ipc_RunOutcome as RunOutcome, ipc_RunRequest as RunRequest, ipc_RunResult as RunResult, ipc_SUPPORTED_CONTRACT_MAJOR as SUPPORTED_CONTRACT_MAJOR, ipc_SUPPORTED_DIGEST_SCHEMA as SUPPORTED_DIGEST_SCHEMA, ipc_State as State, ipc_StateRun as StateRun, type ipc_SubscribeAction as SubscribeAction, type ipc_SubscribeOutcome as SubscribeOutcome, ipc_SubscriptionDoc as SubscriptionDoc, ipc_SubscriptionItem as SubscriptionItem, ipc_SubscriptionList as SubscriptionList, ipc_SubscriptionStatus as SubscriptionStatus, ipc_SubscriptionVolume as SubscriptionVolume, ipc_Usage as Usage, type ipc_VersionInfo as VersionInfo, ipc_isSubscriptionDoc as isSubscriptionDoc, ipc_isSubscriptionStatus as isSubscriptionStatus, ipc_isVersionInfo as isVersionInfo, ipc_parseJsonObject as parseJsonObject, ipc_parseRunResult as parseRunResult, ipc_parseSubscribeResult as parseSubscribeResult, ipc_parseVersionInfo as parseVersionInfo };
 }
 
 type Provider = string;
@@ -1617,16 +1620,6 @@ declare namespace pendingPr {
   export { type pendingPr_CheckPendingPrOptions as CheckPendingPrOptions, type pendingPr_ParsedPullUrl as ParsedPullUrl, type pendingPr_PendingPrStatus as PendingPrStatus, type pendingPr_PullState as PullState, pendingPr_checkPendingPr as checkPendingPr, pendingPr_clearPendingPrCache as clearPendingPrCache, pendingPr_parsePullUrl as parsePullUrl };
 }
 
-/**
- * 支持 `run --force`（忽略摘要缓存重新生成）的最低核心版本。
- * 与 core patch 发版 `0.7.1` 对齐；`dsh.core.version` 应 >= 它，dev override 指向更旧核心时靠闸门降级。
- */
-declare const FORCE_MIN_CORE_VERSION = "0.7.1";
-/**
- * 支持 `run --stages releases --repo`（单仓发版分析）的最低核心版本。
- * 与 core v0.8.0 对齐；核心更旧时单仓触发降级为全量（不传 --repo）。
- */
-declare const REPO_MIN_CORE_VERSION = "0.8.0";
 interface RunSummary {
     id: string;
     ok: boolean;
@@ -1687,13 +1680,6 @@ interface RunnerDeps {
     /** 预览副本这类「可失败但不阻断运行」的事件走这里，不写进 warnings。 */
     logger?: (event: string, data?: Record<string, unknown>) => void;
 }
-/**
- * 与 core `render.NameOf` 对齐的产物基名（不含扩展名）：
- *   daily → YYYY-MM-DD；weekly → YYYY-Wnn（ISO 周年/周）；monthly → YYYY-MM。
- * 用于在 outcome.files 里按周期精确挑出本期 digest 的 `.md`（而不是猜）。
- */
-declare function isoWeekName(date: string): string;
-declare function periodFileBase(period: Period, date: string): string;
 /**
  * 从契约 `RunOutcome` 投影出「token 总量」与「发版摘要」：
  * - `tokens` = usage.totalTokens + releases.usage.totalTokens（含订阅阶段）；
@@ -1761,11 +1747,13 @@ declare class Runner {
     private summarize;
     private failureSummary;
     /**
-     * 从本次核心返回的 artifact 清单里选当天的 `.md`，只读复制到 previews/。
+     * 把本次运行渲染的 digest 原文写进 previews/（ipc v3 起由核心随 RunResult 回传）。
      *
-     * 这是插件**唯一**读取用户仓库的场景，而且只读核心自己刚写出的那一份：
-     * - 路径必须在 `repo.path` 内（词法 + realpath 各判一次，挡 `..`/绝对路径/符号链接）；
-     * - 上限 512 KB、拒绝 NUL、sha256 必须与契约声明一致；
+     * 这里**不再读用户仓库**：分支可能在运行结束前就被合并、切回 base 并删除，
+     * 任何「事后去工作树里找文件」的做法都会读到旧版或空。文本、字节数与 sha256
+     * 的跨字段一致性已在 `parseRunResult` 里校验过；这里只做展示侧的防御：
+     * - 上限 512 KB（与预览读取上限一致）、拒绝 NUL；
+     * - 落盘前统一 `redact()`，避免把密钥写进预览文件；
      * - 任何一步失败都只记日志，返回 undefined；运行结果不受影响。
      */
     private capturePreview;
@@ -1775,18 +1763,14 @@ declare class Runner {
     coreStatus(fresh?: boolean): Promise<CoreStatus>;
 }
 
-declare const runner_FORCE_MIN_CORE_VERSION: typeof FORCE_MIN_CORE_VERSION;
-declare const runner_REPO_MIN_CORE_VERSION: typeof REPO_MIN_CORE_VERSION;
 type runner_RunRequestOptions = RunRequestOptions;
 type runner_RunSummary = RunSummary;
 type runner_Runner = Runner;
 declare const runner_Runner: typeof Runner;
 type runner_RunnerDeps = RunnerDeps;
-declare const runner_isoWeekName: typeof isoWeekName;
-declare const runner_periodFileBase: typeof periodFileBase;
 declare const runner_projectUsage: typeof projectUsage;
 declare namespace runner {
-  export { runner_FORCE_MIN_CORE_VERSION as FORCE_MIN_CORE_VERSION, runner_REPO_MIN_CORE_VERSION as REPO_MIN_CORE_VERSION, type runner_RunRequestOptions as RunRequestOptions, type runner_RunSummary as RunSummary, runner_Runner as Runner, type runner_RunnerDeps as RunnerDeps, runner_isoWeekName as isoWeekName, runner_periodFileBase as periodFileBase, runner_projectUsage as projectUsage };
+  export { type runner_RunRequestOptions as RunRequestOptions, type runner_RunSummary as RunSummary, runner_Runner as Runner, type runner_RunnerDeps as RunnerDeps, runner_projectUsage as projectUsage };
 }
 
 /** 订阅命令超时：核心只做一次 GitHub 请求/本地文件读写，8 s 足够。 */
@@ -1980,23 +1964,6 @@ declare namespace schedule {
   export { schedule_RELEASE_CATCH_UP_MINUTES as RELEASE_CATCH_UP_MINUTES, type schedule_ReleaseScheduleConfig as ReleaseScheduleConfig, type schedule_ScheduleConfig as ScheduleConfig, schedule_Scheduler as Scheduler, type schedule_SchedulerDeps as SchedulerDeps, schedule_daysInMonth as daysInMonth, schedule_isDue as isDue, schedule_isPeriodTriggerDay as isPeriodTriggerDay, schedule_isReleaseDue as isReleaseDue, schedule_isoWeekKey as isoWeekKey, schedule_nextOccurrence as nextOccurrence, schedule_nextOccurrenceFor as nextOccurrenceFor, schedule_nextReleaseOccurrence as nextReleaseOccurrence, schedule_parseClock as parseClock, schedule_zonedDateString as zonedDateString, schedule_zonedTimeToUtc as zonedTimeToUtc };
 }
 
-/**
- * 版本比较：只用于「核心是否足够新到支持某个 CLI flag」这类能力闸门。
- *
- * 核心的 `version --json` 只给 `x.y.z`（偶带预发布后缀），这里按三段数字比较，
- * 后缀忽略。不做完整 semver 区间——项目只需要「>= 阈值」这一种判断，够用且不易错。
- */
-/**
- * `a >= b` 时返回 true。任一方不可解析时返回 false（保守：当作「不满足」，
- * 让调用方降级为不带新 flag 的行为，避免向旧核心传未知参数）。
- */
-declare function versionAtLeast(a: string, b: string): boolean;
-
-declare const version_versionAtLeast: typeof versionAtLeast;
-declare namespace version {
-  export { version_versionAtLeast as versionAtLeast };
-}
-
 /**
  * Host HTTP 面：`/api/morehao/github-trending/*`。
  *
@@ -2346,4 +2313,4 @@ declare namespace tools {
   export { tools_createTrendingHistoryTool as createTrendingHistoryTool, tools_createTrendingRunTool as createTrendingRunTool };
 }
 
-export { channel, config, core, credentials, errors, github, githubAuth, handshake$1 as handshake, importCli, ipc, locate, paths, pendingPr, pluginInfo, preflight, proxy, quickfill, release, repo, routes, run, runner, schedule, state, subscribe, tools, update as updateService, version };
+export { channel, config, core, credentials, errors, github, githubAuth, handshake$1 as handshake, importCli, ipc, locate, paths, pendingPr, pluginInfo, preflight, proxy, quickfill, release, repo, routes, run, runner, schedule, state, subscribe, tools, update as updateService };

package/lib/internal.js

@@ -25,9 +25,8 @@ import {
   state_exports,
   subscribe_exports,
   tools_exports,
-  update_exports,
-  version_exports
-} from "./chunk-DGEO5BHK.js";
+  update_exports
+} from "./chunk-JMIWABMY.js";
 
 // src/internal.ts
 import * as exec from "@morehao/dsh-plugin-kit/exec";
@@ -59,6 +58,5 @@ export {
   state_exports as state,
   subscribe_exports as subscribe,
   tools_exports as tools,
-  update_exports as updateService,
-  version_exports as version
+  update_exports as updateService
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@morehao/dsh-github-trending",
-  "version": "0.8.23",
+  "version": "0.9.0",
   "description": "GitHub 趋势日报的 DeepSeek Harness 插件：按日 / 周 / 月周期定时 spawn 本地 trendradar 核心，抓取 Trending、生成中文简介与周期总结，并可选把订阅仓库的新 Release 合成中文摘要，一起提交到你的仓库、自动开 PR 合并；内置概览 / 榜单 / 运行记录 / 订阅 / 设置工作台。",
   "type": "module",
   "main": "lib/index.js",
@@ -52,7 +52,7 @@
   },
   "dependencies": {
     "@morehao/dsh-plugin-kit": "^0.4.1",
-    "@morehao/trendradar-contract": "0.5.0"
+    "@morehao/trendradar-contract": "0.6.0"
   },
   "dsh": {
     "bundle": {
@@ -60,7 +60,7 @@
     },
     "core": {
       "repo": "morehao/trendradar",
-      "version": "0.8.8"
+      "version": "0.9.0"
     },
     "client": {
       "platform": "web",