@stolyarovmn/dsh-ui-registry-aggregator 0.5.0 → 0.5.1

package/README.md

@@ -2,7 +2,7 @@
 
 This branch is the clean DSH `0.2.0` implementation line. It does **not** carry compatibility code or UI workarounds from DSH `0.1.x`.
 
-Current stable version: `0.5.0`  
+Current stable version: `0.5.1`  
 Current validation baseline: DSH `v0.2.0-rc.2`. Compatibility checks use the actual running DSH version from the active installation manifest rather than a hardcoded RC.
 
 ## Install from npm
@@ -12,7 +12,7 @@ $DSH_VERSION = "0.2.0-rc.2"
 $PROFILE = "dsh-020-test"
 $env:DSH_HOME = "$env:USERPROFILE\.dsh-020-test"
 
-pnpm dlx "@deepseek-ai/dsh@$DSH_VERSION" plugin --profile $PROFILE add "@stolyarovmn/dsh-ui-registry-aggregator@0.5.0"
+pnpm dlx "@deepseek-ai/dsh@$DSH_VERSION" plugin --profile $PROFILE add "@stolyarovmn/dsh-ui-registry-aggregator@0.5.1"
 pnpm dlx "@deepseek-ai/dsh@$DSH_VERSION" --profile $PROFILE
 ```
 
@@ -40,7 +40,7 @@ Implemented in this milestone:
 - combinable multi-sort criteria for relevance, stars, downloads, freshness, and name with per-criterion direction; when several are active they contribute equally through percentile-normalized composite ranking, so every selected criterion can affect the order;
 - npm 30-day download enrichment plus lazy paired `30d | total` stats for visible npm rows; lifetime totals are summed from the package creation date (or npm's 2015-01-10 data floor) in bounded windows, and the UI never presents a partial lifetime sum as a real total;
 - package freshness distinguishes npm release time from GitHub repository push time, so GitHub metadata churn does not make every item look newly released;
-- best-effort package artwork discovery from the DSH top-level manifest `icon` field, returned to the Client as bounded data URLs with the same SVG/PNG/JPEG/WebP and 256 KiB policy as native DSH metadata;
+- best-effort package artwork discovery prefers the official DSH top-level manifest `icon`; when it is absent, Browse can recover the GitHub repository from npm manifest metadata and lazily use a safe repository-local README logo/icon image. Installed Updates reuse the native Plugin Manager `BundleInfo.meta.icon`. All fetched artwork remains limited to SVG/PNG/JPEG/WebP and 256 KiB;
 - popular/default Browse results when the query is empty;
 - real npm/GitHub source marks and a package icon exposed through the DSH 0.2 manifest contract;
 - horizontal layout containment for narrow Plugin Manager detail panes;
@@ -48,11 +48,11 @@ Implemented in this milestone:
 - icon-only Browse install states using the same local DSH-style glyph language as the rest of the page;
 - explicit `v<version>` package versions plus lazy manifest evidence for GitHub/npm rows;
 - compatibility evidence against the actual running DSH version, following DSH peer semantics for `@deepseek-ai/dsh` and `@deepseek-ai/dsh-*`; Browse shows `Compatible`, `Incompatible`, or neutral `Not verified` as plain colored text, and can filter by compatibility;
-- live Updates discovery from native installed bundles plus latest npm manifests, with per-package update through `remote.pluginManager.installBundle`;
+- live Updates discovery from native installed bundles plus latest npm manifests, with per-package update through `remote.pluginManager.installBundle`; package update actions use a distinct two-arrow Update glyph while content/list refresh keeps the single-arrow Refresh glyph;
 - no runtime import of Harness Client implementation packages;
 - Harness-provided React and DSH theme tokens.
 
-Known limitations in `0.5.0`:
+Known limitations in `0.5.1`:
 
 - build-script approval UI remains in the native **Add plugin** dialog;
 - bulk **Update all** / cancel orchestration is not part of the DSH 0.2 line yet;
@@ -81,7 +81,7 @@ Sources UI
                  ├─ custom-json
                  └─ corporate
 
-Browse Install / Updates
+Browse Install
   └─ native DSH remote.pluginManager
        ├─ inspect(spec)
        ├─ installBundle(spec)
@@ -105,7 +105,7 @@ pnpm dlx "@deepseek-ai/dsh@$DSH_VERSION" plugin --profile $PROFILE add "github:S
 pnpm dlx "@deepseek-ai/dsh@$DSH_VERSION" --profile $PROFILE
 ```
 
-Then open **Plugins → Installed → Registry Aggregator** and verify **Sources**, **Browse**, installation, compatibility filtering, download statistics, and **Updates** in the real Harness UI.
+Then open **Plugins → Installed → Registry Aggregator → Sources** and verify source state in the real Harness UI.
 
 ## Historical lines
 

package/client.js

@@ -615,6 +615,15 @@ window.__ModuleLoader__.load({
       ] })
     }
 
+    function IconUpdate({ size = 16 }) {
+      return h(SvgIcon, { size, children: [
+        h('path', { d: 'M13.5 5.5C12.6 3.2 10.5 1.75 8 1.75C5.9 1.75 4.05 2.75 2.9 4.3L1.75 5.75', stroke: 'currentColor' }),
+        h('path', { d: 'M1.75 2.75V5.75H4.75', stroke: 'currentColor' }),
+        h('path', { d: 'M2.5 10.5C3.4 12.8 5.5 14.25 8 14.25C10.1 14.25 11.95 13.25 13.1 11.7L14.25 10.25', stroke: 'currentColor' }),
+        h('path', { d: 'M14.25 13.25V10.25H11.25', stroke: 'currentColor' }),
+      ] })
+    }
+
     function IconPlus({ size = 16 }) {
       return h(SvgIcon, { size, children: [
         h('path', { d: 'M8 2V14', stroke: 'currentColor' }),
@@ -1775,7 +1784,7 @@ window.__ModuleLoader__.load({
                     ? t('updateRetry')
                     : format(t, 'updateAction', { version: item.availableVersion })
                   return h('li', { key, className: 'ra-update-row' },
-                    h('span', { className: 'ra-plugin-icon', 'aria-hidden': true }, h(IconPlugin, { size: 16 })),
+                    h('span', { className: 'ra-plugin-icon', 'aria-hidden': true }, h(PluginArtwork, { src: item.bundle?.meta?.icon })),
                     h('div', { className: 'ra-update-main' },
                       h('div', { className: 'ra-update-title' },
                         h('span', null, key),
@@ -1796,7 +1805,7 @@ window.__ModuleLoader__.load({
                         ? h(IconCheck, { size: 16 })
                         : busy
                           ? h(IconRefresh, { size: 16, className: 'ra-spin' })
-                          : h(IconRefresh, { size: 16 }),
+                          : h(IconUpdate, { size: 16 }),
                     }),
                   )
                 }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stolyarovmn/dsh-ui-registry-aggregator",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Federated plugin discovery and update UI for DeepSeek Harness 0.2.x, integrated with the native Plugin Manager.",
   "author": {
     "name": "Stolyarovmn",

package/source-core.js

@@ -505,6 +505,13 @@ function cleanUrl(value) {
   }
 }
 
+function manifestRepositoryUrl(manifest) {
+  const repository = manifest?.repository
+  if (typeof repository === 'string') return cleanUrl(repository)
+  if (repository && typeof repository === 'object' && !Array.isArray(repository)) return cleanUrl(repository.url)
+  return undefined
+}
+
 function npmPlugin(entry, source) {
   const pkg = entry?.package
   const name = text(pkg?.name)
@@ -722,6 +729,41 @@ function safeIconPath(value) {
   return { path: clean, mediaType }
 }
 
+function readmeIconPath(markdown) {
+  const source = String(markdown ?? '')
+  const candidates = []
+  const add = (raw, label = '') => {
+    const candidate = text(raw)?.replace(/^<|>$/g, '').split(/[?#]/u)[0]
+    const icon = safeIconPath(candidate)
+    if (!icon) return
+    const signal = (String(label) + ' ' + icon.path).toLowerCase()
+    if (!/(^|[\/_.\s-])(icon|logo|avatar|brand|mark)([\/_.\s-]|$)/u.test(signal)) return
+    const lowerPath = icon.path.toLowerCase()
+    const basename = lowerPath.split('/').pop() ?? ''
+    const score = /^(icon|logo)([._-]|$)/u.test(basename)
+      ? 3
+      : /(^|\/)(assets?|images?|img|media)\//u.test(lowerPath)
+        ? 2
+        : 1
+    candidates.push({ ...icon, score })
+  }
+
+  const htmlImage = /<img\b([^>]*?)>/giu
+  let match
+  while ((match = htmlImage.exec(source))) {
+    const attrs = match[1]
+    const src = /\bsrc\s*=\s*["']([^"']+)["']/iu.exec(attrs)?.[1]
+    const alt = /\balt\s*=\s*["']([^"']*)["']/iu.exec(attrs)?.[1] ?? ''
+    add(src, alt)
+  }
+
+  const markdownImage = /!\[([^\]]*)\]\(([^)\s]+)(?:\s+["'][^"']*["'])?\)/gu
+  while ((match = markdownImage.exec(source))) add(match[2], match[1])
+
+  candidates.sort((left, right) => right.score - left.score)
+  return candidates[0]
+}
+
 function encodedPath(path) {
   return path.split('/').map(part => encodeURIComponent(part)).join('/')
 }
@@ -900,8 +942,10 @@ export async function resolvePluginMetadata(items, options = {}) {
     }
 
     const compatibility = dshCompatibility(manifest, options.runtimeVersion)
+    const repository = manifestRepositoryUrl(manifest) ?? cleanUrl(item?.repository)
     const value = {
       ...(text(manifest?.version) ? { version: text(manifest.version) } : {}),
+      ...(repository ? { repository } : {}),
       compatibility: compatibility.status,
       ...(compatibility.peers.length ? { dshPeers: compatibility.peers } : {}),
       runtimeVersion: text(options.runtimeVersion),
@@ -917,22 +961,54 @@ async function resolveNpmIcon(item, options) {
   if (!packageName || !version) return undefined
   const manifest = await npmManifest(item, options)
   const icon = safeIconPath(manifest?.icon)
-  if (!icon) return undefined
-  const packagePath = packageName.startsWith('@')
-    ? packageName.split('/').map(part => encodeURIComponent(part)).join('/')
-    : encodeURIComponent(packageName)
-  const iconUrl = 'https://unpkg.com/' + packagePath + '@' + encodeURIComponent(version) + '/' + encodedPath(icon.path)
-  return iconDataFromUrl(iconUrl, icon.mediaType, options)
+  if (icon) {
+    const packagePath = packageName.startsWith('@')
+      ? packageName.split('/').map(part => encodeURIComponent(part)).join('/')
+      : encodeURIComponent(packageName)
+    const iconUrl = 'https://unpkg.com/' + packagePath + '@' + encodeURIComponent(version) + '/' + encodedPath(icon.path)
+    return iconDataFromUrl(iconUrl, icon.mediaType, options)
+  }
+  const parts = githubRepositoryParts(manifestRepositoryUrl(manifest))
+  return parts ? githubReadmeIcon(parts, options) : undefined
+}
+
+async function githubReadmeIcon(parts, options) {
+  const source = { id: 'plugin-readme-icon', name: 'plugin README icon', type: 'github', enabled: true }
+  for (const filename of ['README.md', 'readme.md']) {
+    try {
+      const readmeUrl = 'https://raw.githubusercontent.com/' + encodeURIComponent(parts.owner) + '/' + encodeURIComponent(parts.repo) + '/HEAD/' + filename
+      const bytes = await fetchBinary(readmeUrl, source, {
+        ...options,
+        authToken: undefined,
+        allowPrivateNetwork: false,
+        maxBytes: Math.min(options.maxResponseBytes ?? DEFAULT_MAX_RESPONSE_BYTES, 512 * 1024),
+      })
+      const icon = readmeIconPath(new TextDecoder().decode(bytes))
+      if (!icon) continue
+      const iconUrl = 'https://raw.githubusercontent.com/' + encodeURIComponent(parts.owner) + '/' + encodeURIComponent(parts.repo) + '/HEAD/' + encodedPath(icon.path)
+      return await iconDataFromUrl(iconUrl, icon.mediaType, options)
+    } catch {
+      // README artwork is optional evidence; try the next conventional filename.
+    }
+  }
+  return undefined
 }
 
 async function resolveGithubIcon(item, options) {
   const parts = githubRepositoryParts(item?.repository)
   if (!parts) return undefined
-  const manifest = await githubManifest(item, options)
+  let manifest
+  try {
+    manifest = await githubManifest(item, options)
+  } catch {
+    manifest = undefined
+  }
   const icon = safeIconPath(manifest?.icon)
-  if (!icon) return undefined
-  const iconUrl = 'https://raw.githubusercontent.com/' + encodeURIComponent(parts.owner) + '/' + encodeURIComponent(parts.repo) + '/HEAD/' + encodedPath(icon.path)
-  return iconDataFromUrl(iconUrl, icon.mediaType, options)
+  if (icon) {
+    const iconUrl = 'https://raw.githubusercontent.com/' + encodeURIComponent(parts.owner) + '/' + encodeURIComponent(parts.repo) + '/HEAD/' + encodedPath(icon.path)
+    return iconDataFromUrl(iconUrl, icon.mediaType, options)
+  }
+  return githubReadmeIcon(parts, options)
 }
 
 export async function resolvePluginIcons(items, options = {}) {