@tianyulinfeng1/dsh-plugin-deepseek-chat 1.1.5 → 1.1.6

package/CHANGELOG.md

@@ -2,6 +2,26 @@
 
 All notable changes to this project are documented here.
 
+## 1.1.6 — 2026-11-11
+
+### OIDC 可信发布（Trusted Publishing）链路测试
+
+- **`.github/workflows/publish.yml` 改为 OIDC 模式**：新增
+  `permissions.id-token: write`（OIDC 必需）、`node-version: 22`（≥ 22.14.0）、
+  `npm install -g npm@latest`（npm CLI ≥ 11.5.1）、
+  `npm publish --provenance --access public`；删除 `NODE_AUTH_TOKEN` 环境变量、
+  `environment: npm-更新` 声明与 `NPM_TOKEN` 校验步骤；保留
+  `registry-url: https://registry.npmjs.org`、`runs-on: ubuntu-latest`、
+  `repository.url` 与 GitHub 仓库精确匹配。
+- **Environment 留空**：GitHub 仓库未创建任何 Environment（`environments` 接口
+  `total_count: 0`），与 npm 端 Trusted Publisher 的 Environment name 可选留空
+  一致，因此 workflow 不声明 `environment:`。
+- **纯发布链路测试**：功能与 1.1.5 完全相同，仅把版本号升到 `1.1.6` 并推送
+  GitHub `main`（不打 tag，避免重复触发 CI），用一次真实的 Actions 运行验证
+  npm 端 Trusted Publisher 是否已正确配置并允许 `npm publish`。
+- **Verification**：`node --check lib/client.js` 通过；`npm test` 全部通过
+  （元信息版本一致性等断言随 `package.json` 同步到 `1.1.6`）。
+
 ## 1.1.5 — 2026-11-11
 
 ### 设置页新增「关于本插件」与「检查更新」

package/README.en.md

@@ -2,7 +2,7 @@
 
 English | [中文](README.md)
 
-> **Current version: v1.1.5** | Targets DSH **0.2.2-rc.1**
+> **Current version: v1.1.6** | Targets DSH **0.2.2-rc.1**
 
 Adds **DeepSeek Chat** to the **DeepSeek Harness (DSH) desktop**: a sidebar icon entry and a conversation-header tab (default name **DeepSeek Chat**, configurable). Clicking either opens `chat.deepseek.com` filling the conversation area and remembers the last conversation. A **settings page** (with plugin metadata and a "Check for updates" button) lets you show/hide the header tab and rename it. The panel is **pure web chat** — no account status strip.
 
@@ -150,6 +150,7 @@ The current implementation guards every guest call behind an `isConnected` check
 
 | Version | Changes |
 |---|---|
+| **1.1.6** | **OIDC trusted-publishing pipeline test**: `.github/workflows/publish.yml` now enables `permissions.id-token: write`, Node 22, `npm@latest`, `npm publish --provenance`, and removes `NODE_AUTH_TOKEN` and the `environment` declaration. Version bumped to `1.1.6` and pushed to GitHub to test whether GitHub Actions can publish via npm Trusted Publisher. No functional change from 1.1.5. |
 | **1.1.5** | **Adds About info + Check for updates to Settings**: plugin version / author / description / license / npm & GitHub links, plus a "Check for updates" button (npm `dist-tags` first, GitHub `raw` fallback, numeric segment-by-segment version comparison, text status + jump links, 8-second timeout and failure fallbacks). Metadata constants are asserted equal to `package.json`; offline self-check passes fully (`RESULT: PASS`). |
 | **1.1.4** | **Adds a settings page + makes the header tab configurable + fills the conversation area**: a `settings.section` page (show/hide header tab, custom tab name default "DeepSeek Chat", localStorage persistence, immediate re-registration for the tab row); the header entry uses an opaque absolute overlay to fill the conversation body and cover the composer. The red-boxed in-page title chip is left untouched per user confirmation. Four slot registrations, offline self-check passes fully (`RESULT: PASS`). |
 | **1.1.3** | **Removes the account status display + adds a conversation-header tab**: deletes the account status strip, probe, 5-second polling and account-sync store; adds a `conversation.view` "Web Chat" header tab sharing the component and fixed partition with the sidebar/full-area entries; three slot registrations now use independent try/catch blocks. Offline self-check passes fully (`RESULT: PASS`). |

package/README.md

@@ -2,7 +2,7 @@
 
 [English](README.en.md) | 中文
 
-> **当前版本：v1.1.5** ｜适配 DSH **0.2.2-rc.1**
+> **当前版本：v1.1.6** ｜适配 DSH **0.2.2-rc.1**
 
 在 **DeepSeek Harness（DSH）桌面版**加入 **DeepSeek 聊天**：左侧栏图标入口、会话顶栏标签页（默认名「DeepSeek 聊天」，可在设置页开关 / 自定义），点开后 `chat.deepseek.com` 铺满会话区，记住上次所在的会话；提供**设置页面**（含插件基础信息与「检查更新」按钮），面板为**纯网页聊天**，不显示账号状态。
 
@@ -158,6 +158,7 @@ DSH 目前给内嵌浏览器分配的是**内存分区**（`dsh-sidebar-browser-
 
 | 版本 | 内容 |
 |---|---|
+| **1.1.6** | **OIDC 可信发布链路测试**：`.github/workflows/publish.yml` 启用 `permissions.id-token: write`、Node 22、`npm@latest`、`npm publish --provenance`，移除 `NODE_AUTH_TOKEN` 与 `environment` 声明；版本号升到 `1.1.6` 推送 GitHub，实测 GitHub Actions 能否经 npm Trusted Publisher 自动发布。功能与 1.1.5 相同，仅发布链路变更。 |
 | **1.1.5** | **设置页新增关于信息 + 检查更新**：新增插件版本号 / 作者 / 功能简介 / 许可证 / npm·GitHub 链接，以及「检查更新」按钮（npm `dist-tags` 优先、GitHub `raw` 兜底、数字逐段版本比较、文字状态 + 跳转链接、8 秒超时与失败兜底）；元信息常量与 `package.json` 一致性断言、离线自检全部通过（`RESULT: PASS`）。 |
 | **1.1.4** | **新增设置页 + 顶栏标签可配置 + 网页铺满会话区**：新增 `settings.section` 设置页（开关顶部标签栏、自定义标签名默认「DeepSeek 聊天」，localStorage 持久化、即时重注入刷新标签行）；顶栏标签用不透明绝对定位浮层铺满会话 body、盖住 composer 输入框；图2 网页内标题胶囊按用户确认不处理。四处槽位注册、离线自检全部通过（`RESULT: PASS`）。 |
 | **1.1.3** | **移除账号状态显示 + 新增会话顶栏标签页**：彻底删除账号状态条、账号探测、5 秒轮询、账号同步 store；新增 `conversation.view` 顶栏「网页聊天」标签（与左侧栏/全屏面板共用组件与固定分区）；三处槽位注册改为各自独立 try/catch。离线自检全部通过（`RESULT: PASS`）。 |

package/lib/client.js

@@ -1,5 +1,5 @@
 /**
- * Browser half of dsh-plugin-deepseek-chat (v1.1.5).
+ * Browser half of dsh-plugin-deepseek-chat (v1.1.6).
  *
  * Three contributions, all showing chat.deepseek.com in an Electron <webview>:
  *   - the global left-sidebar panel (a `sidebar.panellist` icon row + the root
@@ -56,7 +56,7 @@
  * both hosts answer with permissive CORS. No Host-side route is added, so the
  * empty host half stays untouched. compareVersion() does a numeric semver
  * comparison rather than string equality, because a local unreleased build
- * (e.g. 1.1.5) can already be ahead of the published "latest" (1.1.2).
+ * (e.g. 1.1.6) can already be ahead of the published "latest" (1.1.2).
  *
  * No account awareness (v1.1.3)
  * -----------------------------
@@ -104,7 +104,7 @@ window.__ModuleLoader__.load({
 		 * the offline self-test — the same pattern the factory id uses.
 		 */
 		const PLUGIN_NAME = "@tianyulinfeng1/dsh-plugin-deepseek-chat";
-		const PLUGIN_VERSION = "1.1.5";
+		const PLUGIN_VERSION = "1.1.6";
 		const PLUGIN_AUTHOR = "sweet560";
 		const PLUGIN_LICENSE = "MIT";
 		const NPM_PAGE_URL = "https://www.npmjs.com/package/@tianyulinfeng1/dsh-plugin-deepseek-chat";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tianyulinfeng1/dsh-plugin-deepseek-chat",
-  "version": "1.1.5",
+  "version": "1.1.6",
   "description": "DeepSeek Chat (chat.deepseek.com) as a DSH sidebar panel and a configurable conversation-header tab: full main-area chat that fills the conversation area, last-conversation memory, a stable login session, crash containment, a settings page (show/hide tab + custom tab name, about info, and a check-for-updates button against npm/GitHub), and pure web chat with no account status strip.",
   "type": "module",
   "main": "lib/index.js",