@perrylink/dsh-github 0.6.3 → 0.6.4

package/README.es.md

@@ -43,7 +43,7 @@
 
 | Superficie | Estado |
 |---|---|
-| Harness | DeepSeek Harness `0.1.0-rc.8` (compatibilidad declarada para `0.1.0-rc.8`) |
+| Harness | DeepSeek Harness `0.1.1-rc.2` (compatibilidad declarada para `0.1.1-rc.2`) |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Plataformas | Todas (plugin host; red saliente a GitHub) |
 | Modelo | Cualquiera (la revisión estática es determinista; `reviewMode: "model"` es opcional) |

package/README.hi.md

@@ -43,7 +43,7 @@
 
 | सतह | स्थिति |
 |---|---|
-| Harness | DeepSeek Harness `0.1.0-rc.8` (`0.1.0-rc.8` के लिए compat घोषित) |
+| Harness | DeepSeek Harness `0.1.1-rc.2` (`0.1.1-rc.2` के लिए compat घोषित) |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Platforms | सभी (host plugin; GitHub की ओर outbound network) |
 | Model | कोई भी (static review deterministic है; `reviewMode: "model"` वैकल्पिक है) |

package/README.md

@@ -1,6 +1,7 @@
 <div align="center">
 
 # dsh-github
+[![Gitee](https://img.shields.io/badge/Gitee-mirror-c71d23?logo=gitee)](https://gitee.com/perrylink/dsh-github)
 
 **GitHub PRs, reviews, issues, and CI for DeepSeek Harness — every write gated by human approval, token never logged.**
 
@@ -43,7 +44,7 @@
 
 | Surface | Status |
 |---|---|
-| Harness | DeepSeek Harness `0.1.0-rc.8` (compat declared for `0.1.0-rc.8`) |
+| Harness | DeepSeek Harness `0.1.1-rc.2` (compat declared for `0.1.1-rc.2`) |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Platforms | All (host plugin; outbound network to GitHub) |
 | Model | Any (static review is deterministic; `reviewMode: "model"` is optional) |

package/README.pt.md

@@ -43,7 +43,7 @@
 
 | Superfície | Status |
 |---|---|
-| Harness | DeepSeek Harness `0.1.0-rc.8` (compatibilidade declarada para `0.1.0-rc.8`) |
+| Harness | DeepSeek Harness `0.1.1-rc.2` (compatibilidade declarada para `0.1.1-rc.2`) |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Plataformas | Todas (plugin host; rede de saída para o GitHub) |
 | Modelo | Qualquer (a revisão estática é determinística; `reviewMode: "model"` é opcional) |

package/README.zh.md

@@ -43,7 +43,7 @@
 
 | 界面 | 状态 |
 |---|---|
-| Harness | DeepSeek Harness `0.1.0-rc.8`（兼容声明覆盖 `0.1.0-rc.8`） |
+| Harness | DeepSeek Harness `0.1.1-rc.2`（兼容声明覆盖 `0.1.1-rc.2`） |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Platforms | 全部（host 插件；出站网络访问 GitHub） |
 | Model | 任意（静态审查是确定性的；`reviewMode: "model"` 为可选） |

package/lib/client.js

@@ -0,0 +1,342 @@
+/**
+ * dsh-github browser half — one card in the "Plugins" settings section.
+ *
+ * The card edits the `dsh-github` settings namespace and lets the user fill
+ * the GitHub token directly from the settings page. The token literal never
+ * rides the settings document: it is written through the credentials domain,
+ * addressed by the reference the namespace names (`tokenRef`, default
+ * `GITHUB_TOKEN`), which is exactly where the host half resolves it — per
+ * operation, no restart needed.
+ *
+ * The card is collapsible and mirrors the host's `PluginCard` chrome one for
+ * one (same design tokens, same layout), the way the market card does: the
+ * plugins tab only lays out a flex column and dispatches
+ * `settings.plugin.item`, so the container is ours to draw, but drawing it
+ * with the same tokens is what keeps it from looking like it wandered in from
+ * another product. Buttons and the chevron come from the shared primitives.
+ *
+ * This file is a self-contained bundle executed by the browser module loader.
+ */
+window.__ModuleLoader__.load({
+	id: "@perrylink/dsh-github",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		let react = require("react");
+		let _deepseek_ai_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
+		let _deepseek_ai_dsh_client_runtime_client = require("@deepseek-ai/dsh-client-runtime/client");
+
+		// ── styles (mirrors the host PluginCard / market card tokens) ────────────
+
+		const css = [
+			"/* @perrylink/dsh-github: token configuration card */",
+			".ghc-card{border:1px solid var(--dsw-alias-border-l2,#e5e7eb);background:var(--dsw-alias-bg-layer-3,#fff);border-radius:12px;list-style:none;transition:border-color .16s,background .16s}",
+			".ghc-card:hover{border-color:var(--dsw-alias-label-dimmed,#c8ccd4)}",
+			".ghc-cardOpen{background:var(--dsw-alias-bg-layer-2,#f7f8fa);border-color:var(--dsw-alias-label-dimmed,#c8ccd4)}",
+			".ghc-header{-webkit-appearance:none;appearance:none;width:100%;font:inherit;color:inherit;text-align:left;cursor:pointer;background:0 0;border:0;border-radius:12px;align-items:center;gap:12px;padding:14px 16px;display:flex}",
+			".ghc-header:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#4f6ef7);outline-offset:-2px}",
+			".ghc-headText{flex-direction:column;flex:1;gap:4px;min-width:0;display:flex}",
+			".ghc-name{color:var(--dsw-alias-label-primary,#1f2328);font-size:15px;font-weight:600;line-height:1.4}",
+			".ghc-description{color:var(--dsw-alias-label-tertiary,#8b93a1);font-size:13px;line-height:1.5}",
+			".ghc-chevron{color:var(--dsw-alias-label-tertiary,#8b93a1);flex:none;transition:transform .16s;display:inline-flex}",
+			".ghc-chevronOpen{transform:rotate(180deg)}",
+			".ghc-pending{white-space:nowrap;background:var(--dsw-alias-bg-module-platform,#eef0f4);color:var(--dsw-alias-label-secondary,#6b7280);border-radius:999px;flex:none;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}",
+			".ghc-body{border-top:1px solid var(--dsw-alias-border-l2,#e5e7eb);margin:0 16px;padding-bottom:8px}",
+			".ghc-readOnly{color:var(--dsw-alias-label-tertiary,#8b93a1);margin:12px 0 0;font-size:12px;line-height:1.5}",
+			".ghc-field{flex-direction:column;gap:6px;padding:12px 0;display:flex}",
+			".ghc-head{align-items:center;gap:8px;display:flex}",
+			".ghc-label{min-width:0;color:var(--dsw-alias-label-primary,#1f2328);flex:1;font-size:13px;font-weight:500;line-height:1.5}",
+			".ghc-badges{align-items:center;gap:8px;display:inline-flex}",
+			".ghc-badge{white-space:nowrap;background:var(--dsw-alias-bg-module-platform,#eef0f4);color:var(--dsw-alias-label-secondary,#6b7280);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}",
+			".ghc-badgeMuted{white-space:nowrap;color:var(--dsw-alias-label-tertiary,#8b93a1);border-radius:999px;padding:1px 8px;font-size:11px;line-height:17px}",
+			".ghc-input{border:1px solid var(--dsw-alias-border-l2,#e5e7eb);background:var(--dsw-alias-bg-layer-3,#fff);height:34px;font:inherit;color:var(--dsw-alias-label-primary,#1f2328);border-radius:8px;padding:0 12px;font-size:13px;line-height:1.5}",
+			".ghc-input:focus-visible{border-color:var(--dsw-alias-brand-primary,#4f6ef7);outline:none}",
+			".ghc-input:disabled{color:var(--dsw-alias-label-tertiary,#8b93a1);cursor:default}",
+			".ghc-hint{color:var(--dsw-alias-label-tertiary,#8b93a1);margin:0;font-size:12px;line-height:1.5}",
+			".ghc-actions{border-top:1px solid var(--dsw-alias-border-l2,#e5e7eb);justify-content:flex-end;align-items:center;gap:8px;padding:12px 0 4px;display:flex}",
+			".ghc-failed{min-width:0;color:var(--dsw-alias-label-error,#dc2626);flex:1;margin:0;font-size:12px;line-height:1.5}",
+			".ghc-spin{display:inline-flex;animation:ghc-spin .8s linear infinite}",
+			"@keyframes ghc-spin{to{transform:rotate(360deg)}}",
+		].join("");
+		const tagId = "@perrylink/dsh-github/github-card.css";
+		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {
+			const tag = document.createElement("style");
+			tag.dataset.plugin = "@perrylink/dsh-github";
+			tag.dataset.pluginCss = tagId;
+			tag.textContent = css;
+			document.head.appendChild(tag);
+		}
+
+		// ── locale ───────────────────────────────────────────────────────────────
+
+		/** English copy for the card. */
+		const en = {
+			githubTitle: "GitHub",
+			githubDescription: "GitHub pull requests, issues, and CI through the agent.",
+			tokenLabel: "GitHub token",
+			tokenHint: "Stored in the credentials file, not here. Applied immediately; leave blank to keep the current token.",
+			tokenSet: "A token is configured.",
+			tokenUnset: "No token is configured; GitHub tools are unavailable until one is.",
+			unsaved: "Unsaved",
+			readOnly: "This deployment stores settings read-only.",
+			save: "Save",
+			saving: "Saving…",
+			discard: "Discard",
+			saveFailed: "The deployment did not accept this value; it was left for you to correct.",
+		};
+		/** Simplified Chinese copy. */
+		const zh = {
+			githubTitle: "GitHub",
+			githubDescription: "通过 agent 操作 GitHub 的 PR、issue 与 CI。",
+			tokenLabel: "GitHub Token",
+			tokenHint: "写入凭证文件而非设置文件；保存后立即生效。留空表示保持现有令牌。",
+			tokenSet: "已配置令牌。",
+			tokenUnset: "未配置令牌；配置之前 GitHub 工具不可用。",
+			unsaved: "未保存",
+			readOnly: "本部署的设置为只读。",
+			save: "保存",
+			saving: "保存中…",
+			discard: "放弃修改",
+			saveFailed: "本部署没有接受该值，已保留供你修改。",
+		};
+
+		// ── controller ───────────────────────────────────────────────────────────
+
+		/**
+		 * Namespace of the GitHub capability. Spelled here rather than imported:
+		 * a client package must not depend on a Host package.
+		 */
+		const GITHUB_NS = "dsh-github";
+		/** Credential reference the provider resolves when the section names none. */
+		const DEFAULT_TOKEN_REF = "GITHUB_TOKEN";
+
+		/**
+		 * Bridges the `dsh-github` scope and the credentials domain onto the
+		 * card. The token is the one control that does not live in the section:
+		 * its literal never rides a response, so the card learns only whether
+		 * one is configured and writes it through the credentials domain,
+		 * addressed by the reference the section names.
+		 */
+		var GithubCardController = class {
+			scope;
+			api;
+			store;
+			saving = false;
+			failed = false;
+			credential = { ref: "", configured: false, writable: true };
+			constructor(scope, api) {
+				this.scope = scope;
+				this.api = api;
+				this.store = (0, _deepseek_ai_dsh_client_runtime_client.createSnapshotStore)(this.projection());
+				scope.subscribe(() => {
+					this.readCredential();
+					this.publish();
+				});
+				this.readCredential();
+			}
+			/** Project the card's full state for its snapshot store. */
+			projection() {
+				const snapshot = this.scope.getSnapshot();
+				return {
+					available: snapshot.status === "ready",
+					writable: snapshot.writable,
+					configured: this.credential.configured,
+					credentialWritable: this.credential.writable,
+					saving: this.saving,
+					failed: this.failed,
+					ref: this.credential.ref,
+				};
+			}
+			/** The credential reference the section names, or the provider default. */
+			refOf() {
+				const snapshot = this.scope.getSnapshot();
+				const declared = snapshot.value?.tokenRef;
+				return declared !== void 0 && declared.length > 0 ? declared : DEFAULT_TOKEN_REF;
+			}
+			/**
+			 * Ask the credentials domain about the reference the section names.
+			 * A response is published only while it still answers for the
+			 * reference in force, so two reads settling out of order cannot
+			 * clobber each other.
+			 */
+			async readCredential() {
+				const ref = this.refOf();
+				if (ref !== this.credential.ref) {
+					this.credential = { ref, configured: false, writable: true };
+					this.publish();
+				}
+				let response;
+				try {
+					response = await this.api.credentials.describe({ refs: [ref] });
+				} catch (_credentialReadFailure) {
+					return;
+				}
+				if (!response.result.ok || ref !== this.refOf()) return;
+				const view = response.result.value.credentials[ref];
+				const next = { ref, configured: view?.configured ?? false, writable: view?.writable ?? true };
+				if (next.configured === this.credential.configured && next.writable === this.credential.writable) return;
+				this.credential = next;
+				this.publish();
+			}
+			/**
+			 * Re-read after the Host reports a change to the reference this card
+			 * watches — a token can be written from elsewhere, and the section
+			 * does not change when it is.
+			 * @param ref - the reference the Host reports as changed.
+			 */
+			refreshCredential(ref) {
+				if (ref !== this.credential.ref) return;
+				this.readCredential();
+			}
+			/**
+			 * Write the staged token, then re-read whether the Host now holds
+			 * one. A blank value writes nothing, which keeps the stored key.
+			 * @param value - the staged credential literal.
+			 * @returns whether the Host reports a configured credential afterwards.
+			 */
+			async save(value) {
+				const text = (value ?? "").trim();
+				if (text === "" || this.saving) return false;
+				this.saving = true;
+				this.failed = false;
+				this.publish();
+				try {
+					await this.api.credentials.set({ ref: this.refOf(), value: text });
+				} catch (_credentialWriteFailure) {
+				}
+				await this.readCredential();
+				const landed = this.credential.configured;
+				this.saving = false;
+				this.failed = !landed;
+				this.publish();
+				return landed;
+			}
+			/** Build the face the card's slot registration injects. */
+			inject() {
+				return {
+					hooks: { githubCard: this.store },
+					submit: (value) => this.save(value),
+				};
+			}
+			publish() {
+				this.store.set(this.projection());
+			}
+		};
+
+		// ── card component ───────────────────────────────────────────────────────
+
+		/**
+		 * Render the GitHub card: a collapsible header naming the plugin, and —
+		 * once expanded — the token control and the save/discard row.
+		 * Renders nothing while the namespace is unavailable.
+		 */
+		function GithubCard(props) {
+			const { t } = props;
+			const state = props.useGithubCard((snapshot) => snapshot);
+			const [open, setOpen] = react.useState(false);
+			const [draft, setDraft] = react.useState("");
+			if (!state.available) return null;
+			const title = t("githubTitle");
+			const dirty = draft.trim() !== "";
+			const saveLabel = state.saving ? t("saving") : t("save");
+			return react.createElement("li", {
+				className: "ghc-card" + (open ? " ghc-cardOpen" : ""),
+			},
+				react.createElement("button", {
+					type: "button",
+					className: "ghc-header",
+					"aria-expanded": open,
+					"aria-label": (open ? "Collapse" : "Expand") + ": " + title,
+					onClick: () => setOpen(!open),
+				},
+					react.createElement("span", { className: "ghc-headText" },
+						react.createElement("span", { className: "ghc-name" }, title),
+						react.createElement("span", { className: "ghc-description" }, t("githubDescription")),
+					),
+					dirty ? react.createElement("span", { className: "ghc-pending" }, t("unsaved")) : null,
+					react.createElement("span", { className: "ghc-chevron" + (open ? " ghc-chevronOpen" : "") },
+						react.createElement(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutline14, { size: 14 }),
+					),
+				),
+				open ? react.createElement("div", { className: "ghc-body" },
+					!state.writable ? react.createElement("p", { className: "ghc-readOnly", role: "status" }, t("readOnly")) : null,
+					react.createElement("div", { className: "ghc-field" },
+						react.createElement("div", { className: "ghc-head" },
+							react.createElement("label", { className: "ghc-label", htmlFor: "plugin-config-github-token" }, t("tokenLabel")),
+							react.createElement("span", { className: "ghc-badges" },
+								react.createElement("span", { className: state.configured ? "ghc-badge" : "ghc-badgeMuted" },
+									state.configured ? t("tokenSet") : t("tokenUnset"),
+								),
+							),
+						),
+						react.createElement("input", {
+							id: "plugin-config-github-token",
+							className: "ghc-input",
+							type: "password",
+							autoComplete: "off",
+							value: draft,
+							disabled: !state.credentialWritable,
+							onChange: (event) => setDraft(event.target.value),
+						}),
+						react.createElement("p", { className: "ghc-hint" }, t("tokenHint")),
+					),
+					react.createElement("div", { className: "ghc-actions" },
+						state.failed ? react.createElement("p", { className: "ghc-failed", role: "status" }, t("saveFailed")) : null,
+						react.createElement(_deepseek_ai_dsh_client_ui_primitives.Button, {
+							variant: "ghost",
+							size: "sm",
+							disabled: !dirty || state.saving,
+							onClick: () => setDraft(""),
+						}, t("discard")),
+						react.createElement(_deepseek_ai_dsh_client_ui_primitives.Button, {
+							variant: "primary",
+							size: "sm",
+							disabled: !state.writable || !dirty || state.saving,
+							icon: state.saving ? react.createElement("span", { className: "ghc-spin" },
+								react.createElement(_deepseek_ai_dsh_client_ui_primitives.IconLoadingOutline16, { size: 16 }),
+							) : void 0,
+							onClick: async () => {
+								const landed = await props.submit(draft);
+								if (landed) setDraft("");
+							},
+						}, saveLabel),
+					),
+				) : null,
+			);
+		}
+
+		// ── entry ────────────────────────────────────────────────────────────────
+
+		/** Dictionary namespace owned by this plugin. */
+		const NS = "dsh-github";
+		/** Required services (cordis fiber inject). */
+		const inject = ["slots", "locale", "connection", "remote", "settingsScope"];
+
+		/**
+		 * Mount the GitHub configuration card into the plugins settings section.
+		 * @param ctx - the browser plugin context.
+		 */
+		function apply(ctx) {
+			const { api } = ctx.get("connection");
+			const t = ctx.locale.bind(NS);
+			ctx.effect(() => ctx.locale.register(NS, { zh, en }), "dsh-github: card dictionaries");
+			const github = new GithubCardController(ctx.settingsScope.bind({ namespace: NS }), api);
+			ctx.effect(() => ctx.remote.$on("credentials/reference-updated", (ref) => {
+				github.refreshCredential(ref);
+			}), "dsh-github: credential invalidations");
+			ctx.slots.inject("settings.plugin.item", function* () {
+				yield ctx.slots.register({
+					name: "settings.plugin.item",
+					key: NS,
+					locale: NS,
+					inject: () => github.inject(),
+				}, GithubCard);
+			});
+		}
+
+		exports.apply = apply;
+		exports.inject = inject;
+		return module.exports;
+	}
+});

package/lib/index.d.ts

@@ -26,6 +26,7 @@
  * @module dsh-github
  */
 import type { Context } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
 import { type GitRunner } from './git.js';
 import { type GhRunner } from './credential.js';
 import { Config, type Config as PluginConfig } from './config.js';
@@ -34,6 +35,25 @@ export declare const name = "dsh-github";
 export declare const inject: string[];
 export { Config };
 export type { Config as PluginConfig };
+/**
+ * User-settings namespace owned by this plugin. The card in the "Plugins"
+ * settings section edits this namespace; the GitHub token itself travels
+ * through the credentials seam (never a settings field), addressed by
+ * {@link GithubSettingsSchema.tokenRef}.
+ */
+export declare const GITHUB_SETTINGS_NAMESPACE: import("@deepseek-ai/dsh-settings").SettingsNamespace;
+/**
+ * Settings surface for the browser configuration card. Only the fields that
+ * make sense to edit from the settings page are exposed here; every other
+ * tunable stays a cordis.yml entry config field.
+ */
+export declare const GithubSettingsSchema: z<Schemastery.ObjectS<{
+    tokenRef: z<string, string>;
+    tokenSource: z<"auto" | "credentials" | "env" | "gh", "auto" | "credentials" | "env" | "gh">;
+}>, Schemastery.ObjectT<{
+    tokenRef: z<string, string>;
+    tokenSource: z<"auto" | "credentials" | "env" | "gh", "auto" | "credentials" | "env" | "gh">;
+}>>;
 /** Environment-dependent runners, injectable for tests. */
 export interface PluginDeps {
     runGit?: GitRunner;
@@ -53,7 +73,8 @@ export interface PluginDeps {
  */
 export declare function applyWithDeps(ctx: Context, config: PluginConfig, deps?: PluginDeps): void;
 /**
- * Apply the plugin: register tools, commands, and the write-approval gate.
+ * Apply the plugin: register tools, commands, the write-approval gate, and the
+ * user-settings namespace backing the browser configuration card.
  * @param ctx - plugin context; the injected services are ready at this point.
  * @param config - validated Schemastery configuration (defaults applied).
  */

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAWzD,OAAO,EAAE,MAAM,EAAE,KAAK,MAAM,IAAI,YAAY,EAAE,MAAM,aAAa,CAAA;AAEjE,eAAO,MAAM,IAAI,eAAe,CAAA;AAEhC,iFAAiF;AACjF,eAAO,MAAM,MAAM,UAA2D,CAAA;AAE9E,OAAO,EAAE,MAAM,EAAE,CAAA;AACjB,YAAY,EAAE,MAAM,IAAI,YAAY,EAAE,CAAA;AAEtC,2DAA2D;AAC3D,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,SAAS,CAAA;IAClB,KAAK,CAAC,EAAE,QAAQ,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,GAAE,UAAe,QAwBtF;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,QAEvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAExC,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAWzD,OAAO,EAAE,MAAM,EAAE,KAAK,MAAM,IAAI,YAAY,EAAE,MAAM,aAAa,CAAA;AAEjE,eAAO,MAAM,IAAI,eAAe,CAAA;AAEhC,iFAAiF;AACjF,eAAO,MAAM,MAAM,UAA2D,CAAA;AAE9E,OAAO,EAAE,MAAM,EAAE,CAAA;AACjB,YAAY,EAAE,MAAM,IAAI,YAAY,EAAE,CAAA;AAEtC;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,uDAAkC,CAAA;AAExE;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;GAK/B,CAAA;AAEF,2DAA2D;AAC3D,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,SAAS,CAAA;IAClB,KAAK,CAAC,EAAE,QAAQ,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,GAAE,UAAe,QAwBtF;AAED;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,QASvD"}

package/lib/index.js

@@ -1,3 +1,5 @@
+import { settingsNamespace } from '@deepseek-ai/dsh-settings';
+import z from '@deepseek-ai/schemastery';
 import { createState } from "./state.js";
 import { runGitCli } from "./git.js";
 import { runGhCli } from "./credential.js";
@@ -11,6 +13,24 @@ export const name = 'dsh-github';
 /** Services this plugin requires; all exist in any profile built on dsh-base. */
 export const inject = ['tools', 'commands', 'jobs', 'approval', 'credentials'];
 export { Config };
+/**
+ * User-settings namespace owned by this plugin. The card in the "Plugins"
+ * settings section edits this namespace; the GitHub token itself travels
+ * through the credentials seam (never a settings field), addressed by
+ * {@link GithubSettingsSchema.tokenRef}.
+ */
+export const GITHUB_SETTINGS_NAMESPACE = settingsNamespace('dsh-github');
+/**
+ * Settings surface for the browser configuration card. Only the fields that
+ * make sense to edit from the settings page are exposed here; every other
+ * tunable stays a cordis.yml entry config field.
+ */
+export const GithubSettingsSchema = z.object({
+    tokenRef: z.string().pattern(/^[A-Za-z_][A-Za-z0-9_]*$/).default('GITHUB_TOKEN')
+        .description('Credential reference / environment variable name holding the token.'),
+    tokenSource: z.union(['auto', 'credentials', 'env', 'gh']).default('auto')
+        .description('Token lookup source: auto tries credentials → env → gh in order.'),
+});
 /**
  * Apply the plugin with explicit environment runners.
  *
@@ -46,11 +66,19 @@ export function applyWithDeps(ctx, config, deps = {}) {
     }
 }
 /**
- * Apply the plugin: register tools, commands, and the write-approval gate.
+ * Apply the plugin: register tools, commands, the write-approval gate, and the
+ * user-settings namespace backing the browser configuration card.
  * @param ctx - plugin context; the injected services are ready at this point.
  * @param config - validated Schemastery configuration (defaults applied).
  */
 export function apply(ctx, config) {
     applyWithDeps(ctx, config);
+    // Optional settings service (present in any profile built on dsh-base):
+    // register the namespace the "Plugins" settings card edits. The token
+    // literal itself never rides this namespace — it goes through the
+    // credentials seam, resolved per operation.
+    ctx.inject(['settings'], (settingsCtx) => {
+        settingsCtx.settings.register(GITHUB_SETTINGS_NAMESPACE, GithubSettingsSchema);
+    });
 }
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA4BA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,EAAE,SAAS,EAAkB,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,QAAQ,EAAiB,MAAM,iBAAiB,CAAA;AAEzD,OAAO,EACL,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EACrE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,cAAc,EAAE,YAAY,EAC1E,UAAU,EAAE,UAAU,GACvB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,MAAM,EAA+B,MAAM,aAAa,CAAA;AAEjE,MAAM,CAAC,MAAM,IAAI,GAAG,YAAY,CAAA;AAEhC,iFAAiF;AACjF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;AAE9E,OAAO,EAAE,MAAM,EAAE,CAAA;AAUjB;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY,EAAE,MAAoB,EAAE,OAAmB,EAAE;IACrF,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAiC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IAEtM,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;IACvC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;IACtC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;IACvC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;IACvC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;IACzC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;IACtC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAA;IACxC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAA;IAC3C,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;IACzC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;IACvC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAA;IACrC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAA;IACrC,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;IACtC,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;IAClD,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IACjE,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;IAC3D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,MAAoB;IACtD,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AAC5B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA4BA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,EAAE,SAAS,EAAkB,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,QAAQ,EAAiB,MAAM,iBAAiB,CAAA;AAEzD,OAAO,EACL,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EACrE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,cAAc,EAAE,YAAY,EAC1E,UAAU,EAAE,UAAU,GACvB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,MAAM,EAA+B,MAAM,aAAa,CAAA;AAEjE,MAAM,CAAC,MAAM,IAAI,GAAG,YAAY,CAAA;AAEhC,iFAAiF;AACjF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;AAE9E,OAAO,EAAE,MAAM,EAAE,CAAA;AAGjB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAA;AAExE;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;SAC7E,WAAW,CAAC,qEAAqE,CAAC;IACrF,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;SACvE,WAAW,CAAC,kEAAkE,CAAC;CACnF,CAAC,CAAA;AASF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY,EAAE,MAAoB,EAAE,OAAmB,EAAE;IACrF,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAiC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IAEtM,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;IACvC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;IACtC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;IACvC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;IACvC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;IACzC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;IACtC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAA;IACxC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAA;IAC3C,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;IACzC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;IACvC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAA;IACrC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAA;IACrC,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;IACtC,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;IAClD,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IACjE,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;IAC3D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,MAAoB;IACtD,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAC1B,wEAAwE;IACxE,sEAAsE;IACtE,kEAAkE;IAClE,4CAA4C;IAC5C,GAAG,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE;QACvC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,yBAAyB,EAAE,oBAAoB,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/lib/types/client.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Browser half of `@perrylink/dsh-github` — the GitHub token configuration
+ * card contributed to the "Plugins" settings section.
+ * @module @perrylink/dsh-github/client
+ */
+import type { ClientContext } from '@deepseek-ai/dsh-client-runtime/client';
+/** Required services (cordis fiber inject). */
+export declare const inject: string[];
+/**
+ * Mount the GitHub configuration card into the plugins settings section.
+ * @param ctx - the browser plugin context.
+ */
+export declare function apply(ctx: ClientContext): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@perrylink/dsh-github",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "description": "Official-grade GitHub CI for DeepSeek Harness: composite action (review PRs / fix CI / report), polling PR review bot with idempotent inline comments, a status-check gate, and approval-gated PR/issue/repo/file tools",
   "type": "module",
   "main": "lib/index.js",
@@ -9,7 +9,12 @@
     ".": {
       "types": "./lib/index.d.ts",
       "import": "./lib/index.js"
-    }
+    },
+    "./client": {
+      "types": "./lib/types/client.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./package.json": "./package.json"
   },
   "files": [
     "lib",
@@ -60,6 +65,15 @@
   "dsh": {
     "bundle": {
       "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-ui-slots"
+      ],
+      "platform": "web"
     }
   },
   "dshWorkshop": {
@@ -85,7 +99,7 @@
     ],
     "compatibility": {
       "dshVersions": [
-        "0.1.0-rc.8"
+        "0.1.1-rc.2"
       ]
     },
     "capability": {
@@ -109,15 +123,17 @@
     "@deepseek-ai/dsh-credentials": ">=0.1.0-rc.8 <0.2.0",
     "@deepseek-ai/dsh-llm": ">=0.1.0-rc.8 <0.2.0",
     "@deepseek-ai/dsh-session": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-settings": ">=0.1.0-rc.8 <0.2.0",
     "@deepseek-ai/dsh-tools": ">=0.1.0-rc.8 <0.2.0"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.1",
     "@deepseek-ai/cordis-plugin-loader": "1.0.2",
-    "@deepseek-ai/dsh-credentials": "0.1.0-rc.8",
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.8",
-    "@deepseek-ai/dsh-session": "0.1.0-rc.8",
-    "@deepseek-ai/dsh-tools": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.1-rc.2",
     "@deepseek-ai/schemastery": "3.18.1",
     "@types/node": "^22.0.0",
     "@vitest/coverage-v8": "3.2.0",