@wjm200509/dsh-plugin-version-watch 0.0.0-stage → 0.1.3

package/lib/lockfile.js

@@ -0,0 +1,100 @@
+/**
+ * The small part of a pnpm lockfile the version watch needs: the resolved
+ * dependency strings of the profile's root importer. Each Git-installed
+ * dependency's string carries the exact commit pnpm unpacked, which is the
+ * only local record of what actually runs.
+ */
+
+/**
+ * Parse the root importer's dependency map from pnpm-lock.yaml text.
+ *
+ * Only `importers:` and the `.` importer are read, so registry hashes or
+ * package metadata elsewhere in the file cannot be mistaken for a version.
+ * @param {string} text - lockfile contents.
+ * @returns {Map<string, { specifier: string | null, version: string | null }>}
+ */
+export function parseImporterDependencies(text) {
+	const lines = String(text ?? "").split(/\r?\n/);
+	const start = lines.findIndex((line) => /^importers:\s*$/.test(line));
+	if (start < 0) return new Map();
+	let end = lines.length;
+	for (let index = start + 1; index < lines.length; index += 1) {
+		const line = lines[index];
+		if (line.trim() === "" || line.trim().startsWith("#")) continue;
+		if (!/^\s/.test(line)) {
+			end = index;
+			break;
+		}
+	}
+
+	const dependencies = new Map();
+	let root = false;
+	let section = false;
+	let pendingKey = null;
+
+	const unquote = (value) => value.trim().replace(/^['"]|['"]$/g, "");
+	const header = (line) => {
+		const match = line.match(/^(\s*)(.+?):\s*$/);
+		return match === null ? null : { indent: match[1].length, key: unquote(match[2]) };
+	};
+	const value = (line) => {
+		const match = line.match(/^(\s*)(.+?):\s+(.*)$/);
+		return match === null ? null : { indent: match[1].length, key: unquote(match[2]), value: unquote(match[3]) };
+	};
+
+	for (let index = start + 1; index < end; index += 1) {
+		const line = lines[index];
+		if (line.trim() === "" || line.trim().startsWith("#")) continue;
+		const pair = value(line);
+		const head = pair === null ? header(line) : null;
+		const indent = pair === null ? head?.indent : pair.indent;
+		if (indent === undefined) continue;
+
+		if (indent === 2) {
+			root = false;
+			section = false;
+			pendingKey = null;
+			root = (pair?.key ?? head?.key) === ".";
+			continue;
+		}
+		if (!root) continue;
+
+		if (!section && indent === 4 && /^(?:dev|optional)?dependencies$/.test(pair?.key ?? head?.key ?? "")) {
+			section = true;
+			continue;
+		}
+		if (!section) continue;
+
+		if (indent === 6) {
+			// A dependency row may carry an inline value (`name: version`) or a nested map.
+			if (pair !== null) {
+				dependencies.set(pair.key, { specifier: pair.value, version: null });
+				} else {
+				pendingKey = head.key;
+					dependencies.set(pendingKey, { specifier: null, version: null });
+			}
+			continue;
+		}
+
+		if (indent === 8) {
+			const key = pair?.key ?? head?.key;
+			const entry = pendingKey === null ? null : dependencies.get(pendingKey);
+			if (entry === null || entry === undefined) continue;
+			if (key === "specifier" && pair !== null) entry.specifier = pair.value;
+			if (key === "version" && pair !== null) entry.version = pair.value;
+		}
+	}
+	return dependencies;
+}
+
+/**
+ * Extract the exact Git commit a resolved dependency string names, if any.
+ * @param {string | null | undefined} resolution - the importer's `version:` value.
+ * @returns {string | null}
+ */
+export function commitFromResolution(resolution) {
+	if (typeof resolution !== "string") return null;
+	const match = resolution.match(/(?:^|[/#&])([0-9a-f]{40})(?:[&#]|$)/i);
+	return match === null ? null : match[1].toLowerCase();
+}
+

package/lib/spec.js

@@ -0,0 +1,175 @@
+/**
+ * Dependency-spec interpretation for the plugin version watch.
+ *
+ * The profile's `package.json` records what `pnpm add` saved: a registry
+ * name/range, a GitHub shortcut (`github:owner/repo#path:subdir`), a Git URL,
+ * a tarball URL, or a local path. The version watch needs three things from
+ * that spec: which check applies, which repository (if any) to ask for the
+ * latest commit, and the package subdirectory whose `package.json` carries
+ * the published version.
+ */
+
+/** A 40-character Git object name. */
+const COMMIT = /^[0-9a-f]{40}$/i;
+
+/** Hosts whose `https://host/owner/repo` form names a Git repository. */
+const GIT_HOSTS = /(?:^|\.)(?:github|gitlab|bitbucket|gitee|codeberg)\.(?:com|org)$/i;
+
+/**
+ * Split the first `#` fragment off a spec.
+ * @param {string} spec - raw saved spec.
+ * @returns {{ base: string, fragment: string }}
+ */
+function takeFragment(spec) {
+	const hash = spec.indexOf("#");
+	return hash < 0 ? { base: spec, fragment: "" } : { base: spec.slice(0, hash), fragment: spec.slice(hash + 1) };
+}
+
+/**
+ * Read the fragment parts pnpm understands.
+ * @param {string} fragment - text after the first `#`, possibly `ref&path:x` or `ref#path:x`.
+ * @returns {{ ref: string | null, subdir: string | null, semver: string | null, pinned: string | null }}
+ */
+function parseFragment(fragment) {
+	let ref = null;
+	let subdir = null;
+	let semver = null;
+	let pinned = null;
+	for (const part of String(fragment).split(/[&#]/).filter(Boolean)) {
+		const lower = part.toLowerCase();
+		if (lower.startsWith("path:")) {
+			subdir = part.slice(5).replace(/^\/+/, "").replace(/^\.\//, "").replace(/\/+$/, "");
+			if (subdir === "") subdir = null;
+		} else if (lower.startsWith("semver:")) {
+			semver = part.slice(7);
+		} else if (COMMIT.test(part)) {
+			pinned = part.toLowerCase();
+		} else if (ref === null) {
+			ref = part;
+		}
+	}
+	return { ref, subdir, semver, pinned };
+}
+
+/**
+ * Classify one recorded dependency spec.
+ * @param {string} raw - spec saved in the profile manifest.
+ * @returns {{
+ *   kind: "git" | "registry" | "local" | "tarball" | "unknown",
+ *   repoUrl?: string | null,
+ *   ref?: string | null,
+ *   subdir?: string | null,
+ *   semver?: string | null,
+ *   pinned?: string | null,
+ * }}
+ */
+export function parseDependencySpec(raw) {
+	const spec = String(raw ?? "").trim();
+	if (spec === "") return { kind: "unknown" };
+	if (/^(?:file|link):/i.test(spec)) return { kind: "local" };
+	if (/^(?:~|\.{1,2}\/|\/)/.test(spec) || /^[a-zA-Z]:[\\/]/.test(spec)) return { kind: "local" };
+
+	if (/^github:/i.test(spec)) {
+		const { base, fragment } = takeFragment(spec.slice(7));
+		return gitShortcut(base, fragment);
+	}
+	if (!spec.startsWith("@") && /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+(?:#|$)/.test(spec)) {
+		const { base, fragment } = takeFragment(spec);
+		return gitShortcut(base, fragment);
+	}
+
+	if (/^(?:git\+)?(?:ssh|https?|git):/i.test(spec) || /^git@/.test(spec)) {
+		const { base, fragment } = takeFragment(spec);
+		const url = base.replace(/^git\+/i, "");
+		const known = /^git@/.test(url) || /^(?:ssh|git):/i.test(url) || /\.git$/i.test(url) || gitHostUrl(url);
+		if (known) {
+			return { kind: "git", repoUrl: url, ...parseFragment(fragment) };
+		}
+		return { kind: "tarball" };
+	}
+
+	return { kind: "registry" };
+}
+
+/**
+ * `owner/repo` GitHub shorthand.
+ * @param {string} base - repository part without the `github:` prefix or fragment.
+ * @param {string} fragment - fragment text.
+ * @returns {{ kind: "git", repoUrl: string | null, ref: string | null, subdir: string | null, semver: string | null, pinned: string | null }}
+ */
+function gitShortcut(base, fragment) {
+	const match = base.match(/^([^/]+)\/([^/]+?)(?:\.git)?$/);
+	return {
+		kind: "git",
+		repoUrl: match === null ? null : `https://github.com/${match[1]}/${match[2]}.git`,
+		...parseFragment(fragment),
+	};
+}
+
+/**
+ * Whether an https URL points at a repository rather than a tarball.
+ * @param {string} url - candidate URL.
+ * @returns {boolean}
+ */
+function gitHostUrl(url) {
+	try {
+		const parsed = new URL(url);
+		if (!/^https?:/.test(parsed.protocol)) return false;
+		if (!GIT_HOSTS.test(parsed.hostname)) return false;
+		const segments = parsed.pathname.replace(/^\/+/, "").split("/").filter(Boolean);
+		return segments.length === 2;
+	} catch {
+		return false;
+	}
+}
+
+/**
+ * Hide credentials a saved spec may carry in an http(s) URL.
+ * @param {string} spec - recorded spec.
+ * @returns {string}
+ */
+export function redactSource(spec) {
+	return String(spec ?? "").replace(/^(\w+:\/\/)([^/@]+)@/, "$1");
+}
+
+/**
+ * Shorten a 40-character commit for display.
+ * @param {string | null | undefined} commit - object name.
+ * @returns {string | null}
+ */
+export function shortCommit(commit) {
+	return typeof commit === "string" && COMMIT.test(commit) ? commit.slice(0, 7) : (commit ?? null);
+}
+
+/**
+ * The raw URL of a package's `package.json` at one commit, on GitHub.
+ * @param {string | null} repoUrl - repository URL.
+ * @param {string} commit - 40-character commit.
+ * @param {string | null} subdir - package directory inside the repository.
+ * @returns {string | null}
+ */
+export function githubRawManifestUrl(repoUrl, commit, subdir) {
+	if (typeof repoUrl !== "string" || typeof commit !== "string" || !COMMIT.test(commit)) return null;
+	let host;
+	let pathname;
+	const ssh = repoUrl.match(/^git@([^:]+):(.+)$/);
+	if (ssh !== null) {
+		host = ssh[1].toLowerCase();
+		pathname = ssh[2];
+	} else {
+		try {
+			const parsed = new URL(repoUrl);
+			host = parsed.hostname.toLowerCase();
+			pathname = parsed.pathname;
+		} catch {
+			return null;
+		}
+	}
+	if (host !== "github.com") return null;
+	const repoPath = pathname.replace(/^\/+/, "").replace(/\.git$/i, "");
+	const [owner, name] = repoPath.split("/");
+	if (owner === undefined || name === undefined || owner === "" || name === "") return null;
+	const encode = (part) => part.split("/").filter(Boolean).map(encodeURIComponent).join("/");
+	const directory = subdir ? `${encode(subdir)}/` : "";
+	return `https://raw.githubusercontent.com/${encodeURIComponent(owner)}/${encodeURIComponent(name)}/${encodeURIComponent(commit)}/${directory}package.json`;
+}

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Plugin version watch",
+    "description": "Lists installed plugin versions, checks Git commits and npm registries for updates, and updates plugins live from Settings without restarting."
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "插件版本监控",
+    "description": "在设置页列出已安装插件的版本，检查 Git 最新提交与 npm 新版本，并可一键热更新，无需重启。"
+  }
+}

package/package.json

@@ -1,6 +1,54 @@
 {
   "name": "@wjm200509/dsh-plugin-version-watch",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.3",
+  "description": "Version watch for installed DSH plugins: list installed versions, check Git and npm sources for updates, and update them live from Settings without restarting.",
+  "type": "module",
+  "author": "JiaMingWang-CN",
+  "license": "MIT",
+  "homepage": "https://github.com/JiaMingWang-CN/dsh-bundles#readme",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/JiaMingWang-CN/dsh-bundles",
+    "directory": "dsh-plugin-version-watch"
+  },
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek-harness",
+    "plugin-updates",
+    "version-watch"
+  ],
+  "scripts": {
+    "test": "node --test"
+  },
+  "exports": {
+    ".": "./lib/index.js",
+    "./client": "./lib/client.js",
+    "./locale/*.json": "./locale/*.json",
+    "./icon": "./icon.svg"
+  },
+  "files": [
+    "lib/index.js",
+    "lib/client.js",
+    "lib/lockfile.js",
+    "lib/spec.js",
+    "patch.yml",
+    "locale/*.json",
+    "icon.svg",
+    "README.md"
+  ],
+  "engines": {
+    "dsh": "^0.1.7-rc.2 || ^0.2.0-rc.2 || ^0.2.1-alpha.2 || ^0.2.2-rc.1"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dsh": {
+    "client": {
+      "platform": "web"
+    },
+    "bundle": {
+      "patch": "./patch.yml"
+    }
+  }
+}

package/patch.yml

@@ -0,0 +1,6 @@
+# Plugin version watch: a Settings page that monitors installed plugin versions
+# and updates them in place (Git sources are removed and reinstalled at the
+# latest commit, registry sources use the plugin manager's update path).
+- insert:
+    - id: version-watch
+      name: "@wjm200509/dsh-plugin-version-watch"