dsh-plugin-shop 0.6.0-beta.1 → 0.6.0-beta.2

package/lib/client.js

@@ -4840,6 +4840,29 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		* package page.
 		*/
 		/**
+		* Whether this entry has a GitHub home the reader could go and inspect.
+		*
+		* True for a github-source entry — a repository IS its identity — and for an
+		* npm entry whose `repository` points at github.com, which is 4892 of the
+		* live catalog's 4915 entries. The mark is therefore ordinary and its
+		* ABSENCE is the signal: a listed package with no public source to read.
+		*
+		* `repository` is untrusted catalog input, so the host is PARSED rather than
+		* pattern-matched — `evil-github.com` and `github.com.evil.test` both end in
+		* the string and neither is GitHub. An unparseable or empty value (two live
+		* entries carry one) is simply not a GitHub home.
+		*/
+		function hasGithubHome(entry) {
+			if (entry.source === "github") return true;
+			if (entry.repository === null) return false;
+			try {
+				const host = new URL(entry.repository).hostname.toLowerCase();
+				return host === "github.com" || host === "www.github.com";
+			} catch {
+				return false;
+			}
+		}
+		/**
 		* Who put this entry where it is — the fact a reader wants when two listings
 		* carry the same text from different hands.
 		*
@@ -4966,7 +4989,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			needsAcknowledgementCode: "需要确认",
 			gitMissingCode: "缺少 git",
 			tarballIntegrityCode: "压缩包完整性校验失败",
-			githubSource: "来自 GitHub 仓库安装",
+			npmSource: "npm 包",
+			githubSource: "源码在 GitHub",
 			installedSection: "已安装",
 			installedVersion: "已安装 v{version}",
 			latestVersion: "最新 v{version}",
@@ -5054,7 +5078,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			needsAcknowledgementCode: "Acknowledgement required",
 			gitMissingCode: "git missing",
 			tarballIntegrityCode: "tarball integrity check failed",
-			githubSource: "installed from a GitHub repository",
+			npmSource: "npm package",
+			githubSource: "source on GitHub",
 			installedSection: "Installed",
 			installedVersion: "installed v{version}",
 			latestVersion: "latest v{version}",
@@ -5395,8 +5420,26 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 									className: _dsh_plugin_shop_css_e3675a89_default.categoryBadge,
 									children: t(categoryKey(entry))
 								}),
-								entry.source === "github" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								entry.source === "npm" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 									className: _dsh_plugin_shop_css_e3675a89_default.sourceBadge,
+									"data-shop-source-npm": true,
+									role: "img",
+									"aria-label": t("npmSource"),
+									children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("svg", {
+										viewBox: "0 0 16 16",
+										width: "12",
+										height: "12",
+										"aria-hidden": "true",
+										fill: "currentColor",
+										children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("path", {
+											fillRule: "evenodd",
+											d: "M0 0v16h16V0H0zm13 13h-2V6H8v7H3V3h10v10z"
+										})
+									})
+								}),
+								hasGithubHome(entry) && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: _dsh_plugin_shop_css_e3675a89_default.sourceBadge,
+									"data-shop-source-github": true,
 									role: "img",
 									"aria-label": t("githubSource"),
 									children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("svg", {
@@ -5413,7 +5456,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 									"data-card-version": true,
 									children: ["v", displayVersion(entry)]
 								}),
-								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								entry.tier !== "community" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 									className: _dsh_plugin_shop_css_e3675a89_default.tierBadge,
 									"data-tier": entry.tier,
 									children: t(tierKey(entry.tier))

package/lib/types/client/locales.d.ts

@@ -58,6 +58,7 @@ export declare const zh: {
     needsAcknowledgementCode: string;
     gitMissingCode: string;
     tarballIntegrityCode: string;
+    npmSource: string;
     githubSource: string;
     installedSection: string;
     installedVersion: string;
@@ -148,6 +149,7 @@ export declare const en: {
     needsAcknowledgementCode: string;
     gitMissingCode: string;
     tarballIntegrityCode: string;
+    npmSource: string;
     githubSource: string;
     installedSection: string;
     installedVersion: string;

package/lib/types/client/present.d.ts

@@ -149,6 +149,20 @@ export declare function categoryLocaleKey(category: Category): ShopLocaleKey;
  * A github entry answers null: it is installed from a repo and has no npm
  * package page.
  */
+/**
+ * Whether this entry has a GitHub home the reader could go and inspect.
+ *
+ * True for a github-source entry — a repository IS its identity — and for an
+ * npm entry whose `repository` points at github.com, which is 4892 of the
+ * live catalog's 4915 entries. The mark is therefore ordinary and its
+ * ABSENCE is the signal: a listed package with no public source to read.
+ *
+ * `repository` is untrusted catalog input, so the host is PARSED rather than
+ * pattern-matched — `evil-github.com` and `github.com.evil.test` both end in
+ * the string and neither is GitHub. An unparseable or empty value (two live
+ * entries carry one) is simply not a GitHub home.
+ */
+export declare function hasGithubHome(entry: CatalogEntry): boolean;
 /**
  * Who put this entry where it is — the fact a reader wants when two listings
  * carry the same text from different hands.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-plugin-shop",
-  "version": "0.6.0-beta.1",
+  "version": "0.6.0-beta.2",
   "description": "The DeepSeek Harness plugin shop: browse, install, enable, and update dsh plugins from a git-auditable catalog.",
   "repository": {
     "type": "git",