source-code-mgmt 1.11.0 → 1.13.0

package/lib/index.js

@@ -25,10 +25,62 @@ import { join, dirname } from 'node:path'
 import { homedir } from 'node:os'
 
 import { AsyncLocalStorage } from 'node:async_hooks'
+import { fileURLToPath } from 'node:url'
 
 // ---------- i18n: host messages follow the client’s language (?lang= query param, per request) ----------
 const HOST_EN = {"尚未配置 Gitee 私人令牌（请打开 ③ 代码管理输入令牌）":"No Gitee personal token configured (enter one in ③ Code Management)","Gitee API 请求失败（需要 curl）":"Gitee API request failed (curl required)","not a git repository（尚未 git init，可用「新建仓库并推送」初始化为 git 仓库并上传）":"not a git repository (run \"Create repo & push\" to init one and upload)","超过 GitHub 100MB 单文件限制（${}），已被 .gitignore 的 \"${}\" 排除":"Exceeds GitHub's 100MB file limit (${}) — already excluded by .gitignore entry \"${}\"","超过 GitHub 100MB 单文件限制（${}），${} 所在的一级目录「${}」整体忽略（该文件夹为一整体）":"Exceeds GitHub's 100MB file limit (${}) — the whole first-level folder \"${}\" of ${} is ignored (the folder is one unit)","超过 GitHub 100MB 单文件限制（${}），已忽略单个文件「${}」":"Exceeds GitHub's 100MB file limit (${}) — the file \"${}\" was ignored individually","尚未配置远程仓库 origin，请使用「新建仓库」创建远程仓库。":"No origin remote configured — use \"Create repo\" to create a remote repo.","not a git repository（尚未 git init，无法拉取）":"not a git repository (no git init yet — cannot pull)","尚未配置远程仓库 origin，无法拉取。":"No origin remote configured — cannot pull.","拉取存在冲突：本地有未合并改动或与远程冲突，请手动 git pull 处理合并。":"Pull conflicts: you have unmerged local changes or conflicts with the remote — resolve them manually with git pull.","git pull 失败":"git pull failed","not a git repository（尚未 git init）":"not a git repository (run git init first)","拉取并推送失败：合并存在冲突，请手动解决后重试。":"Pull-and-push failed: merge conflicts — resolve them manually and retry.","pull --rebase 失败":"pull --rebase failed","push 失败":"push failed","push --force 失败":"push --force failed","强制拉取存在冲突，请手动处理。":"Force-pull conflicts — handle them manually.","git pull --force 失败":"git pull --force failed","缺少仓库名称":"Repo name required","仓库名称包含非法字符（仅允许字母、数字、点、下划线、横线）":"Repo name contains invalid characters (only letters, digits, dots, underscores, dashes)","git add 失败：${}":"git add failed: ${}","需要先配置 Gitee 私人令牌":"Configure the Gitee personal token first","Gitee 创建仓库失败":"Failed to create the Gitee repo","缺少文件路径":"File path required","无法识别当前分支":"Cannot determine the current branch","尚未配置远程仓库 origin，无法对齐。":"No origin remote configured — cannot align.","git fetch 失败":"git fetch failed","git reset --hard 失败":"git reset --hard failed","git init 失败":"git init failed","git add 失败":"git add failed","git reset 失败":"git reset failed","提交信息不能为空":"Commit message cannot be empty","没有已暂存（staged）的改动可提交":"Nothing staged to commit","git commit 失败":"git commit failed","缺少分支名":"Branch name required","切换分支失败":"Failed to switch branch","git log 失败":"git log failed","缺少 commit hash":"Commit hash required","revert 失败（可能有冲突，请手动处理）":"revert failed (possible conflicts — handle manually)","cherry-pick 失败（可能有冲突，请手动处理）":"cherry-pick failed (possible conflicts — handle manually)","读取提交 diff 失败":"Failed to read the commit diff","未知工具：":"Unknown tool: ","未找到可用的包管理器（":"No usable package manager found (","）。请手动安装。":"). Please install manually.","安装成功":"Installed successfully","安装失败":"Installation failed","$dlg.Description = '选择本地目录';":"$dlg.Description = 'Choose a local folder';","Gitee 修改可见性失败":"Failed to change Gitee visibility","需要先登录 GitHub CLI（gh）":"Log in to the GitHub CLI (gh) first","修改可见性失败：${}":"Failed to change visibility: ${}","gh repo edit 失败":"gh repo edit failed","缺少目录路径":"Folder path required","未选择目录":"No folder selected","目录不存在或不是文件夹：":"Folder does not exist or is not a directory: ","令牌不能为空":"Token cannot be empty","Gitee 令牌无效，请检查（需有 projects 权限）":"Invalid Gitee token — check it (needs projects permission)"};
 const requestLangStore = new AsyncLocalStorage();
+// 新增板块（④克隆 / ⑤PR / ⑥npm）的 host 英文消息，追加进 HOST_EN。
+Object.assign(HOST_EN, {
+  "LLM 服务不可用（未加载 llm 服务）": "LLM service unavailable (llm service not loaded)",
+  "未找到默认模型配置（agent-default-model）": "No default model config found (agent-default-model)",
+  "目标目录不存在：": "Target directory does not exist: ",
+  "已存在同名目录：": "A directory with that name already exists: ",
+  "git clone 失败": "git clone failed",
+  "无法识别仓库地址：": "Cannot parse repo URL: ",
+  "没有可用的 PR 步骤（请先让 AI 分析规则）": "No PR steps available (run AI rule analysis first)",
+  "确保 fork": "Ensure fork",
+  "已 fork 或 fork 已存在": "Forked already, or fork exists",
+  "克隆 fork": "Clone fork",
+  "已存在本地副本：": "Local copy already exists: ",
+  "已克隆到 ": "Cloned to ",
+  "克隆 fork 失败": "Failed to clone fork",
+  "添加上游": "Add upstream",
+  "拉取上游": "Fetch upstream",
+  "拉取失败": "Fetch failed",
+  "新建分支": "Create branch",
+  "创建分支失败": "Failed to create branch",
+  "写入条目": "Write entry",
+  "缺少条目文件路径": "Missing entry file path",
+  "重生成 README": "Regenerate README",
+  "无命令，跳过": "No command, skipped",
+  "执行失败": "Command failed",
+  "提交": "Commit",
+  "推送": "Push",
+  "创建 PR": "Create PR",
+  "创建 PR 失败": "Failed to create PR",
+  "未知步骤": "Unknown step",
+  "未知步骤类型": "Unknown step type",
+  "缺少仓库地址": "Repo URL required",
+  "未登录 npm": "Not logged in to npm",
+  "npm publish 已执行": "npm publish executed",
+  "npm publish 失败": "npm publish failed",
+  "已提交": "Committed",
+  "已创建 PR": "PR created",
+  "推送上游失败": "Failed to push",
+  "AI 未输出有效规则": "AI produced no valid rules",
+  "AI 输出无法解析": "AI output could not be parsed",
+  "推送失败": "Push failed",
+  "条目文件路径不安全（已拦截）": "Entry file path unsafe (blocked)",
+  "重生成命令不安全（已拦截）": "Regenerate command unsafe (blocked)",
+  "创建分支失败（上游分支可能不存在，请检查规则 baseBranch）": "Failed to create branch (upstream base may not exist — check the rule's baseBranch)",
+  "已打开终端窗口，请完成 npm login 后回到面板点「重新检查」": "A terminal window has been opened — complete npm login, then click \"Re-check\" in the panel",
+  "未找到可用终端，请手动在目标目录运行：": "No usable terminal found — run this manually in the target directory: ",
+  "规则文件获取失败：": "Failed to fetch rules file: ",
+  "规则文件读取失败：": "Failed to read rules file: ",
+  "找不到规则文件：": "Rules file not found: ",
+  "未获取到规则内容（文件为空或无法读取）": "Could not read any rule content (file empty or unreadable)",
+})
 function langOf(req) { try { const l = new URL(req.url ?? "", "http://localhost").searchParams.get("lang"); return l === "en" ? "en" : "zh" } catch { return "zh" } }
 function lang() { return requestLangStore.getStore() ?? "zh" }
 function tr(key, params) {
@@ -83,6 +135,8 @@ const SSH = resolveBin('ssh', 'DSH_SCM_SSH')
 const SSH_KEYGEN = resolveBin('ssh-keygen', 'DSH_SCM_SSH_KEYGEN')
 /** Resolved path to curl (used to call the Gitee OpenAPI). */
 const CURL = resolveBin('curl', 'DSH_SCM_CURL')
+/** Resolved path to npm (used by the ⑥ publish-npm section). */
+const NPM = resolveBin('npm', 'DSH_SCM_NPM')
 
 /**
  * Preferred ssh for git remote operations (injected via GIT_SSH).
@@ -305,8 +359,13 @@ function run(cmd, args, opts = {}) {
   // `-c core.quotepath=false` 让 git 直接输出原始 UTF-8 路径，Node 以 utf8
   // 解码后即得到正确的中文文件名（git diff / git show 头部路径也一并修复）。
   const finalArgs = cmd === GIT ? ['-c', 'core.quotepath=false', ...args] : args
+  // Windows + shell 模式：execFileSync 把 cmd 与参数拼成一条命令行交给 cmd.exe。
+  // 若可执行文件路径含空格（如 "C:\Program Files\nodejs\npm.cmd"），不引号包裹会
+  // 被截断成 "'C:\Program' 不是内部命令"。这里只包裹可执行文件本身（参数保持数组，
+  // 由 execFileSync 逐个安全拼接），不触碰用户输入，无注入面。
+  const execCmd = (opts.shell && IS_WIN && /\s/.test(cmd)) ? '"' + cmd + '"' : cmd
   try {
-    const out = execFileSync(cmd, finalArgs, {
+    const out = execFileSync(execCmd, finalArgs, {
       encoding: 'utf8',
       stdio: ['ignore', 'pipe', 'pipe'],
       timeout: opts.timeout ?? 30_000,
@@ -1799,6 +1858,944 @@ function installToolFlow(tool) {
   }
 }
 
+// ---------------------------------------------------------------------------
+// ④ 克隆远程仓库 / ⑤ 提交 PR / ⑥ 发布 npm 包 —— host 逻辑
+// ---------------------------------------------------------------------------
+
+// ---------- LLM 辅助：用 DSH 的 llm 服务 + 默认模型（当前对话/默认模型） ----------
+
+/**
+ * 读取 DSH 默认模型配置（agent-default-model）。优先走 settings 服务（ctx.settings
+ * 在 host 侧同进程可用），拿不到时兜底解析 ~/.dsh/settings.yaml 的该段。
+ * @returns {{provider: string, model: string}|undefined}
+ */
+function resolveDefaultModel(ctx) {
+  try {
+    if (ctx && typeof ctx.get === 'function') {
+      const settings = ctx.get('settings')
+      if (settings && typeof settings.get === 'function') {
+        const v = settings.get('agent-default-model')
+        if (v && typeof v === 'object' && typeof v.provider === 'string' && v.provider && typeof v.model === 'string' && v.model) {
+          return { provider: v.provider, model: v.model }
+        }
+      }
+    }
+  } catch { /* fall through */ }
+  try {
+    const file = join(homedir(), '.dsh', 'settings.yaml')
+    if (existsSync(file)) {
+      const raw = readFileSync(file, 'utf8')
+      // 捕获 `agent-default-model:` 后所有缩进（开头空白）的连续行，直到下一个顶格键。
+      const m = /^\s*agent-default-model\s*:\s*\n((?:[ \t]+[^\n]*(?:\n|$))*)/m.exec(raw)
+      if (m) {
+        const block = m[1]
+        const prov = /^\s*provider\s*:\s*"?([^\s"#]+)"?/m.exec(block)
+        const mod = /^\s*model\s*:\s*"?([^\s"#]+)"?/m.exec(block)
+        if (prov && mod) return { provider: prov[1], model: mod[1] }
+      }
+    }
+  } catch { /* ignore */ }
+  return undefined
+}
+
+/**
+ * 调用 DSH 的 LLM（默认模型），收集完整文本。messages 传 { role: 'user'|'assistant', text } 简写。
+ * @param {*} ctx - cordis context（apply 注入）。
+ * @param {{system?: string, messages: Array<{role:string,text:string}>, maxTokens?: number, temperature?: number}} opts
+ * @returns {Promise<{ok:boolean, text?:string, provider?:string, model?:string, error?:string}>}
+ */
+async function llmComplete(ctx, opts) {
+  let llm = null
+  try {
+    if (ctx && typeof ctx.get === 'function') llm = ctx.get('llm')
+    if (!llm && ctx && ctx.llm) llm = ctx.llm
+  } catch { llm = null }
+  if (!llm || typeof llm.stream !== 'function') {
+    return { ok: false, error: tr('LLM 服务不可用（未加载 llm 服务）') }
+  }
+  const cfg = resolveDefaultModel(ctx)
+  if (!cfg) return { ok: false, error: tr('未找到默认模型配置（agent-default-model）') }
+  const blocks = (Array.isArray(opts.messages) ? opts.messages : []).map((m) => ({
+    role: m.role === 'assistant' ? 'assistant' : 'user',
+    content: [{ type: 'text', text: String(m.text ?? '') }],
+  }))
+  if (blocks.length === 0) blocks.push({ role: 'user', content: [{ type: 'text', text: '' }] })
+  const chunks = []
+  try {
+    const stream = llm.stream({
+      provider: cfg.provider,
+      model: cfg.model,
+      system: opts.system ? String(opts.system) : undefined,
+      messages: blocks,
+      maxTokens: opts.maxTokens ?? 2048,
+      temperature: opts.temperature ?? 0.6,
+    })
+    for await (const chunk of stream) {
+      if (chunk && chunk.type === 'text-delta') chunks.push(chunk.text)
+    }
+  } catch (e) {
+    return { ok: false, error: String((e && e.message) || e) }
+  }
+  return { ok: true, text: chunks.join(''), provider: cfg.provider, model: cfg.model }
+}
+
+// ---------- ④ 克隆远程仓库（Clone） ----------
+
+/** 用户 home 目录（④ 克隆默认位置：Windows=C:\Users\xxx，Linux/macOS=/home/xxx）。 */
+function cloneHomeDir() {
+  return homedir()
+}
+
+/** 默认克隆位置（⑤⑥ 等板块的工作目录兜底）：DSH 默认工作区。 */
+function cloneDefaultDir() {
+  return resolveDefaultDir(process.cwd())
+}
+
+/**
+ * 从仓库 URL / SSH 地址 / owner/repo 解析平台、owner、repo。
+ * @param {string} raw - https://github.com/owner/repo | git@github.com:owner/repo.git | owner/repo
+ * @returns {{provider:'github'|'gitee', owner:string, repo:string}|{}}
+ */
+function parseRepoUrl(raw) {
+  const url = String(raw || '').trim()
+  if (!url) return {}
+  const gh = /github\.com[/:]([^/\s?#]+)\/([^/\s?#]+)/i.exec(url)
+  if (gh) return { provider: 'github', owner: gh[1], repo: gh[2].replace(/\.git$/i, '') }
+  const gt = /gitee\.com[/:]([^/\s?#]+)\/([^/\s?#]+)/i.exec(url)
+  if (gt) return { provider: 'gitee', owner: gt[1], repo: gt[2].replace(/\.git$/i, '') }
+  const bare = /^([\w.-]+)\/([\w.-]+)$/.exec(url)
+  if (bare) return { provider: 'github', owner: bare[1], repo: bare[2].replace(/\.git$/i, '') }
+  return {}
+}
+
+/** 某仓库名在 baseDir 下是否已有同名 git 仓库（含 baseDir 本身就是同名仓库的情形，
+ *  如工作区 C:\Users\xxx\workspace 即对应仓库 workspace）。 */
+function localRepoExists(baseDir, name) {
+  try {
+    if (!baseDir || !name) return false
+    // baseDir/<name>/.git 存在
+    if (existsSync(join(baseDir, name)) && existsSync(join(baseDir, name, '.git'))) return true
+    // baseDir 本身就是同名仓库
+    if (baseName(baseDir) === name && existsSync(join(baseDir, '.git'))) return true
+    return false
+  } catch { return false }
+}
+
+/**
+ * 判断仓库在「当前选中的克隆目录」或「任何已登记的工作区/自定义目录」下是否已存在。
+ * 用于 ④ 克隆仓库的「本地已有」标记：不遍历全盘，只查 ③代码管理登记过的目录——
+ * 用户若把克隆目录选到其他（已登记）位置，那里的同名仓库同样算「本地已有」。
+ * @param {string} name - 仓库名
+ * @param {string} [chosenDir] - 当前下拉选中的克隆目标目录（可为空）
+ */
+function localRepoExistsAnywhere(name, chosenDir) {
+  try {
+    if (!name) return false
+    if (localRepoExists(String(chosenDir || '').trim(), name)) return true
+    for (const dir of listWorkspaces()) {
+      if (localRepoExists(dir, name)) return true
+    }
+    return false
+  } catch { return false }
+}
+
+/**
+ * 列出已登录账号（GitHub / Gitee）的所有远程仓库，并标记本地是否已存在。
+ * @param {string} [provider] - 'github' (default) | 'gitee'
+ * @param {string} [baseDir] - 用于「本地是否已有」判定的目录（默认克隆位置）。
+ */
+async function listRemoteRepos(provider, baseDir) {
+  const p = provider === 'gitee' ? 'gitee' : 'github'
+  const base = baseDir || cloneDefaultDir()
+  if (p === 'gitee') {
+    const owner = giteeOwner()
+    if (!owner) return { ok: true, provider: 'gitee', owner: undefined, repos: [], error: tr('需要先配置 Gitee 私人令牌') }
+    // 分页拉取账号下所有仓库（每页 100，避免 20/页的默认截断遗漏）。
+    const allRepos = []
+    let page = 1
+    while (page <= 10) {
+      const api = giteeApi('GET', 'user/repos?per_page=100&page=' + page)
+      if (!api.ok) {
+        if (allRepos.length === 0) {
+          return { ok: true, provider: 'gitee', owner, repos: [], error: api.error || tr('Gitee API 请求失败（需要 curl）') }
+        }
+        break
+      }
+      if (!Array.isArray(api.data)) break
+      allRepos.push(...api.data)
+      if (api.data.length < 100) break
+      page++
+    }
+    const repos = allRepos.map((r) => ({
+      name: String(r.name || ''),
+      fullName: String(r.full_name || ''),
+      owner,
+      visibility: r.private === true ? 'private' : (r.private === false ? 'public' : undefined),
+      description: typeof r.description === 'string' ? r.description : undefined,
+      sshUrl: typeof r.ssh_url === 'string' ? r.ssh_url : undefined,
+      htmlUrl: typeof r.html_url === 'string' ? r.html_url : undefined,
+      local: localRepoExistsAnywhere(String(r.name || ''), base),
+    }))
+    return { ok: true, provider: 'gitee', owner, repos }
+  }
+  const owner = ghOwner()
+  if (!owner) return { ok: true, provider: 'github', owner: undefined, repos: [], error: tr('需要先登录 GitHub CLI（gh）') }
+  const r = run(GH, ['repo', 'list', owner, '--limit', '1000', '--json', 'name,owner,visibility,description,updatedAt,sshUrl'], { timeout: 60_000 })
+  let parsed = []
+  if (r.ok) {
+    try {
+      const arr = JSON.parse(r.stdout)
+      if (Array.isArray(arr)) {
+        parsed = arr.map((x) => ({
+          name: String(x.name || ''),
+          fullName: String((x.owner && x.owner.login ? x.owner.login + '/' : '') + (x.name || '')),
+          owner: x.owner && x.owner.login,
+          visibility: String(x.visibility || 'private').toLowerCase(),
+          description: typeof x.description === 'string' ? x.description : undefined,
+          sshUrl: typeof x.sshUrl === 'string' ? x.sshUrl : `git@github.com:${owner}/${x.name}.git`,
+          htmlUrl: `https://github.com/${owner}/${x.name}`,
+          updatedAt: typeof x.updatedAt === 'string' ? x.updatedAt : undefined,
+        }))
+      }
+    } catch { /* ignore */ }
+  }
+  return { ok: true, provider: 'github', owner, repos: parsed.map((x) => ({ ...x, local: localRepoExistsAnywhere(x.name, base) })) }
+}
+
+/**
+ * 执行 git clone：克隆到 dest（默认=默认工作区）下的 <name> 目录。成功后加入自定义目录列表。
+ * @param {string} url - 远程仓库 URL（SSH 或 HTTPS）。
+ * @param {string} [dest] - 目标父目录，空=默认克隆位置。
+ * @param {string} [name] - 本地目录名，空=从 URL 推导。
+ */
+function cloneFlow(url, dest, name) {
+  const target = String(dest || '').trim() || cloneDefaultDir()
+  const repoName = String(name || '').trim()
+  const full = repoName ? join(target, repoName) : ''
+  if (!repoName) return { ok: false, error: tr('缺少仓库名称') }
+  if (!existsSync(target) || !statSync(target).isDirectory()) {
+    return { ok: false, error: tr('目标目录不存在：') + target }
+  }
+  if (existsSync(full)) {
+    return { ok: false, error: tr('已存在同名目录：') + full }
+  }
+  const r = run(GIT, ['clone', String(url || '').trim(), full], { timeout: 600_000, env: { GIT_SSH: WORKING_SSH } })
+  if (!r.ok) {
+    return { ok: false, error: (r.stderr || r.stdout || '').trim() || tr('git clone 失败') }
+  }
+  saveCustomDir(full)
+  return { ok: true, dir: full, name: repoName }
+}
+
+// ---------- ⑤ 提交 PR（Pull Request） ----------
+
+/** 用户填写的 PR 目标仓库列表（记录到 ~/.dsh/storages，不写入插件目录）。 */
+function prTargetsFile() {
+  return join(homedir(), '.dsh', 'storages', 'source-code-mgmt-pr-targets.json')
+}
+function readPrTargets() {
+  try {
+    const f = prTargetsFile()
+    if (!existsSync(f)) return []
+    const data = JSON.parse(readFileSync(f, 'utf8'))
+    return Array.isArray(data) ? data : []
+  } catch { return [] }
+}
+function savePrTarget(url) {
+  const { provider, owner, repo } = parseRepoUrl(url)
+  if (!owner || !repo) return readPrTargets()
+  const list = readPrTargets()
+  const clean = list.filter((t) => String(t.url || '').trim().toLowerCase() !== String(url).trim().toLowerCase())
+  clean.unshift({ url: String(url).trim(), provider, owner, repo, addedAt: new Date().toISOString() })
+  try {
+    const f = prTargetsFile()
+    mkdirSync(dirname(f), { recursive: true })
+    writeFileSync(f, JSON.stringify(clean.slice(0, 50), null, 2), 'utf8')
+  } catch { /* ignore */ }
+  return clean
+}
+function removePrTarget(url) {
+  const list = readPrTargets().filter((t) => String(t.url || '').trim().toLowerCase() !== String(url || '').trim().toLowerCase())
+  try {
+    const f = prTargetsFile()
+    mkdirSync(dirname(f), { recursive: true })
+    writeFileSync(f, JSON.stringify(list, null, 2), 'utf8')
+  } catch { /* ignore */ }
+  return list
+}
+
+/** 插件根目录（用于存放 AI 思考出的 PR 规则缓存）。 */
+function pluginRoot() {
+  return dirname(dirname(fileURLToPath(import.meta.url)))
+}
+function prRulesDir() {
+  return join(pluginRoot(), 'rules')
+}
+function prRulePath(owner, repo) {
+  return join(prRulesDir(), owner + '__' + repo + '.json')
+}
+function readPrRule(owner, repo) {
+  try {
+    const p = prRulePath(owner, repo)
+    if (!existsSync(p)) return undefined
+    const data = JSON.parse(readFileSync(p, 'utf8'))
+    return data && typeof data === 'object' ? data : undefined
+  } catch { return undefined }
+}
+function writePrRule(owner, repo, rule) {
+  try {
+    mkdirSync(prRulesDir(), { recursive: true })
+    writeFileSync(prRulePath(owner, repo), JSON.stringify(rule, null, 2), 'utf8')
+    return true
+  } catch { return false }
+}
+
+/** 从 { 到 } 尽量提取 JSON（AI 可能包裹 markdown 代码块）。 */
+function parseJsonLoose(text) {
+  const s = String(text || '').trim()
+  try { return JSON.parse(s) } catch { /* continue */ }
+  const start = s.indexOf('{')
+  const end = s.lastIndexOf('}')
+  if (start === -1 || end <= start) return null
+  try { return JSON.parse(s.slice(start, end + 1)) } catch { return null }
+}
+
+/** 读取 GitHub 仓库内某文件的文本内容（gh api），失败返回 undefined。 */
+function ghFileText(owner, repo, path) {
+  const r = run(GH, ['api', 'repos/' + owner + '/' + repo + '/contents/' + path, '--jq', '.content'], { timeout: 30_000 })
+  if (!r.ok) return undefined
+  try {
+    const b64 = r.stdout.trim()
+    if (!b64) return undefined
+    return Buffer.from(b64, 'base64').toString('utf8')
+  } catch { return undefined }
+}
+
+/** 抓取目标仓库的关键文档（README / CONTRIBUTING / PR 模板 / package.json scripts），供 AI 分析 PR 规则。 */
+async function gatherRepoDocs(provider, owner, repo) {
+  const docs = {}
+  const candidates = [
+    'README.md', 'CONTRIBUTING.md', '.github/CONTRIBUTING.md',
+    '.github/PULL_REQUEST_TEMPLATE.md', '.github/pull_request_template.md', 'package.json',
+  ]
+  for (const c of candidates) {
+    if (provider === 'gitee') {
+      const api = giteeApi('GET', 'repos/' + owner + '/' + repo + '/contents/' + c)
+      if (api.ok && api.data && typeof api.data.content === 'string') {
+        try { docs[c] = Buffer.from(api.data.content, 'base64').toString('utf8') } catch {}
+      }
+    } else {
+      const txt = ghFileText(owner, repo, c)
+      if (txt !== undefined) docs[c] = txt
+    }
+  }
+  return docs
+}
+
+/** AI 思考 PR 规则的 system 提示词：要求输出结构化 JSON（步骤数组）。 */
+const PR_RULE_SYSTEM = [
+  '你是一个开源仓库 PR 流程分析器。用户要往一个 GitHub/Gitee 仓库提交 Pull Request（提交内容通常是「把某个 DSH 插件收录进该仓库的插件列表 / 或按该仓库规则提交一份变更」）。',
+  '请先分析该仓库的 PR 规则（基于 README / CONTRIBUTING / PR 模板 / package.json scripts），然后输出一个 JSON（不要任何多余文字、不要 markdown 代码块，直接输出 JSON 对象）：',
+  '{',
+  '  "baseBranch": "上游默认分支，如 main 或 master",',
+  '  "entryFilePath": "新增条目文件的相对路径（若适用；如 data/plugins/owner__repo.yml），否则 null",',
+  '  "entryTemplate": "条目文件的内容模板（含占位符，如 {NAME} {DESCRIPTION}），若适用；否则 null",',
+  '  "regenerateCommands": ["重生成 README 的命令数组（如 [\\"node\\", \\"scripts/generate-readme.mjs\\"]），没有则为 []"],',
+  '  "prTitle": "PR 标题建议，如 Add owner/repo",',
+  '  "prBodyHint": "PR 描述应包含的要点（中文一句话概括）",',
+  '  "steps": [',
+  '    { "type": "ensure-fork" },',
+  '    { "type": "clone-fork" },',
+  '    { "type": "add-upstream" },',
+  '    { "type": "fetch-upstream" },',
+  '    { "type": "branch", "name": "add-<插件名>" },',
+  '    { "type": "write-entry" },',
+  '    { "type": "regenerate-readme" },',
+  '    { "type": "commit", "message": "Add owner/repo" },',
+  '    { "type": "push" },',
+  '    { "type": "create-pr" }',
+  '  ]',
+  '}',
+  '要求：steps 按真实执行顺序排列，只包含上面列出的 type；不确定的字段给 null 或空数组，不要编造。',
+].join('\n')
+
+/**
+ * 用户已提供规则（手动文本或规则文件）时的 system 提示词：忠实整理为结构化 JSON，
+ * 不额外抓取仓库文档、不编造——精简提示词以节省 token。
+ */
+const PR_RULE_SYSTEM_USER = [
+  '你是一个开源仓库 PR 流程规则整理器。用户已直接提供该仓库的 PR 规则（手写文本或规则文件，如 README / CONTRIBUTING）。',
+  '请把用户提供的规则忠实整理成下面的 JSON（不要任何多余文字、不要 markdown 代码块，直接输出 JSON 对象）：',
+  '{',
+  '  "baseBranch": "上游默认分支，如 main 或 master",',
+  '  "entryFilePath": "新增条目文件的相对路径（若适用；如 data/plugins/owner__repo.yml），否则 null",',
+  '  "entryTemplate": "条目文件的内容模板（含占位符，如 {NAME} {DESCRIPTION}），若适用；否则 null",',
+  '  "regenerateCommands": ["重生成 README 的命令数组（如 [\\"node\\", \\"scripts/generate-readme.mjs\\"]），没有则为 []"],',
+  '  "prTitle": "PR 标题建议，如 Add owner/repo",',
+  '  "prBodyHint": "PR 描述应包含的要点（中文一句话概括）",',
+  '  "steps": [',
+  '    { "type": "ensure-fork" },',
+  '    { "type": "clone-fork" },',
+  '    { "type": "add-upstream" },',
+  '    { "type": "fetch-upstream" },',
+  '    { "type": "branch", "name": "add-<插件名>" },',
+  '    { "type": "write-entry" },',
+  '    { "type": "regenerate-readme" },',
+  '    { "type": "commit", "message": "Add owner/repo" },',
+  '    { "type": "push" },',
+  '    { "type": "create-pr" }',
+  '  ]',
+  '}',
+  '要求：steps 按真实执行顺序排列，只包含上面列出的 type；只依据用户提供的规则整理，不要额外假设、不要编造用户没提到的字段。',
+].join('\n')
+
+/**
+ * 解析用户提供的规则来源：ruleText（手写文本）或 ruleFile（本地路径 / http(s) URL）。
+ * @param {string} [ruleText] - 用户手动填写的 PR 规则文本。
+ * @param {string} [ruleFile] - 规则文件路径或 URL（如某仓库 README）。
+ * @returns {Promise<{text?:string, error?:string}>} 读取到的文本或错误。
+ */
+async function resolveRuleInput(ruleText, ruleFile) {
+  const text = String(ruleText || '').trim()
+  if (text) return { text }
+  const file = String(ruleFile || '').trim()
+  if (!file) return {}
+  if (/^https?:\/\//i.test(file)) {
+    // 远程 URL：优先 Node 全局 fetch，失败回退 curl。
+    try {
+      if (typeof fetch === 'function') {
+        const ctrl = new AbortController()
+        const timer = setTimeout(() => ctrl.abort(), 20000)
+        try {
+          const resp = await fetch(file, { redirect: 'follow', signal: ctrl.signal })
+          if (resp.ok) {
+            const body = await resp.text()
+            if (body) return { text: body }
+          }
+        } finally { clearTimeout(timer) }
+      }
+    } catch { /* 继续尝试 curl */ }
+    const r = run('curl', ['-sL', '--max-time', '20', file], { timeout: 30000 })
+    if (r.ok && r.stdout) return { text: r.stdout }
+    return { error: tr('规则文件获取失败：') + file }
+  }
+  if (existsSync(file)) {
+    try { return { text: readFileSync(file, 'utf8') } }
+    catch (e) { return { error: tr('规则文件读取失败：') + String((e && e.message) || e) } }
+  }
+  return { error: tr('找不到规则文件：') + file }
+}
+
+/**
+ * 分析某仓库的 PR 规则：命中插件目录 rules/ 缓存则直接返回；否则抓取仓库文档（或用户提供的
+ * 规则文本/文件）→ LLM 思考 → 保存缓存。
+ * @param {*} ctx - cordis context。
+ * @param {{url: string, force?: boolean, ruleText?: string, ruleFile?: string}} input -
+ *   目标仓库 URL；force=true 忽略缓存重新分析；ruleText/ruleFile 为用户提供的规则来源（可选）。
+ */
+async function prAnalyzeFlow(ctx, { url, force, ruleText, ruleFile }) {
+  const { provider, owner, repo } = parseRepoUrl(url)
+  if (!owner || !repo) return { ok: false, error: tr('无法识别仓库地址：') + String(url || '') }
+  // 用户提供了规则（文本或文件）→ 视为新的分析输入，忽略缓存直接分析。
+  const hasUserInput = !!String(ruleText || '').trim() || !!String(ruleFile || '').trim()
+  if (!force && !hasUserInput) {
+    const cached = readPrRule(owner, repo)
+    if (cached) return { ok: true, cached: true, provider, owner, repo, rule: cached }
+  }
+  let userRule = ''
+  if (hasUserInput) {
+    const r = await resolveRuleInput(ruleText, ruleFile)
+    if (r.error) return { ok: false, error: r.error }
+    userRule = String(r.text || '').trim()
+    if (!userRule) return { ok: false, error: tr('未获取到规则内容（文件为空或无法读取）') }
+  }
+  let system, messages, docSources
+  if (userRule) {
+    system = PR_RULE_SYSTEM_USER
+    messages = [{
+      role: 'user',
+      text: '目标仓库：' + provider + ' ' + owner + '/' + repo + '\n\n用户提供的该仓库 PR 规则（请忠实整理，不要编造）：\n' + userRule.slice(0, 20000),
+    }]
+    docSources = []
+  } else {
+    const docs = await gatherRepoDocs(provider, owner, repo)
+    system = PR_RULE_SYSTEM
+    messages = [{
+      role: 'user',
+      text: '目标仓库：' + provider + ' ' + owner + '/' + repo + '\n\n仓库关键文档（尽力抓取，可能不全）：\n'
+        + (Object.keys(docs).length ? JSON.stringify(docs, null, 2).slice(0, 12000) : '(无可用文档)'),
+    }]
+    docSources = Object.keys(docs)
+  }
+  const res = await llmComplete(ctx, { system, messages, maxTokens: 3000, temperature: 0.3 })
+  if (!res.ok) return res
+  const rule = parseJsonLoose(res.text)
+  if (!rule || typeof rule !== 'object') return { ok: false, error: tr('AI 未输出有效规则') }
+  if (!Array.isArray(rule.steps)) rule.steps = []
+  rule.owner = owner; rule.repo = repo; rule.provider = provider
+  rule.generatedAt = new Date().toISOString()
+  rule.model = res.model
+  rule.docSources = docSources
+  if (userRule) rule.userProvided = true
+  writePrRule(owner, repo, rule)
+  return { ok: true, cached: false, provider, owner, repo, rule, model: res.model }
+}
+
+/**
+ * 用 AI 生成 PR 内容（标题 + 描述 + 条目文件内容）。生成后由用户在 UI 里修改，不直接提交。
+ * 当规则自带 entryTemplate 且插件信息齐全时，直接按模板本地填充（零 AI 消耗、可编辑）；
+ * 否则调用 LLM 生成。
+ * @param {*} ctx - cordis context。
+ * @param {{url: string, rule?: object, pluginInfo?: object}} input
+ */
+async function prGenerateFlow(ctx, { url, rule, pluginInfo }) {
+  const { owner, repo } = parseRepoUrl(url)
+  if (!owner || !repo) return { ok: false, error: tr('无法识别仓库地址：') + String(url || '') }
+  const info = (pluginInfo && typeof pluginInfo === 'object') ? pluginInfo : {}
+  const vars = { owner, repo, info }
+
+  // 模板直填路径：规则带 entryTemplate 时按 {VAR} 占位符本地生成（零 AI，仍可编辑）。
+  if (rule && typeof rule.entryTemplate === 'string' && rule.entryTemplate !== '') {
+    const entry = fillPrTemplate(rule.entryTemplate, vars)
+    const title = fillPrTemplate(String(rule.prTitle || 'Add {NAME}'), vars) || ('Add ' + owner + '/' + repo)
+    const body = fillPrTemplate(String(rule.prBodyHint || ''), vars)
+    return {
+      ok: true,
+      title,
+      body,
+      entry,
+      fromTemplate: true,
+      provider: rule.provider || undefined,
+      model: rule.model || 'template',
+    }
+  }
+
+  const system = [
+    '你是 PR 内容生成助手。下面给出目标仓库的 PR 规则与用户要提交的插件信息，请生成三样内容并输出 JSON：',
+    '{ "title": "PR 标题", "body": "PR 描述（markdown，说明改动内容、已满足的前置条件）", "entry": "条目文件内容（若规则有 entryFilePath/entryTemplate 则按模板生成；否则 null）" }',
+    '直接输出 JSON，不要 markdown 代码块，不要多余文字。',
+  ].join('\n')
+  const messages = [{
+    role: 'user',
+    text: '目标仓库规则：\n' + JSON.stringify(rule || {}, null, 2) + '\n\n用户要提交的插件信息：\n' + JSON.stringify(info, null, 2),
+  }]
+  const res = await llmComplete(ctx, { system, messages, maxTokens: 3000, temperature: 0.5 })
+  if (!res.ok) return res
+  const parsed = parseJsonLoose(res.text)
+  if (!parsed || typeof parsed !== 'object') return { ok: false, error: tr('AI 输出无法解析') }
+  return {
+    ok: true,
+    title: String(parsed.title || ''),
+    body: String(parsed.body || ''),
+    entry: parsed.entry == null ? null : String(parsed.entry),
+    provider: res.provider,
+    model: res.model,
+  }
+}
+
+/** 当前分支名（git rev-parse --abbrev-ref HEAD），失败回退 'main'。 */
+function currentBranch(dir) {
+  const r = run(GIT, ['-C', dir, 'rev-parse', '--abbrev-ref', 'HEAD'])
+  return r.ok && r.stdout.trim() && r.stdout.trim() !== 'HEAD' ? r.stdout.trim() : 'main'
+}
+
+/**
+ * 校验 PR 规则里的条目文件路径：必须是仓库内相对路径，且解析后不得逃出 cloneDir
+ * （防路径穿越 —— 规则来自 AI/缓存，可能被恶意仓库文档诱导出 "../.." 路径）。
+ * @param {string} cloneDir - fork 克隆目录。
+ * @param {string} p - 规则给出的 entryFilePath。
+ * @returns {boolean} 安全则 true。
+ */
+function safeEntryPath(cloneDir, p) {
+  if (typeof p !== 'string' || p === '') return false
+  // 绝对路径（Windows 盘符 / POSIX 根 / 反斜杠）一律拒绝。
+  if (/^([a-zA-Z]:[\\/]|\/|\\)/.test(p)) return false
+  // 任何 .. 段（含 \..\、/../、..\ 前缀、../ 前缀）一律拒绝。
+  if (/(^|[\\/])\.\.([\\/]|$)/.test(p)) return false
+  const root = join(cloneDir, p)
+  const base = cloneDir.replace(/[\\/]+$/, '')
+  return root === base || root.startsWith(base + '\\') || root.startsWith(base + '/')
+}
+
+/**
+ * 校验 PR 规则里的重生成命令：只允许常见构建/脚本命令 + 纯参数，拒绝绝对路径、
+ * 环境变量展开、shell 元字符、重定向与明显危险的命令名。命令本身仍是数组传递
+ * （execFileSync 不经过 shell），此校验是纵深防御，防止 AI 规则注入恶意命令。
+ * @param {string[]} cmds - [bin, ...args]
+ * @returns {boolean}
+ */
+const SAFE_REGENERATE_BINS = new Set([
+  'node', 'npm', 'npx', 'pnpm', 'yarn', 'bun',
+  'python', 'python3', 'py',
+  'make', 'cmake',
+  'sh', 'bash', 'zsh',
+  'ruby', 'perl', 'php',
+  'dotnet', 'go', 'cargo', 'rustc',
+  'git', 'awk', 'sed', 'grep', 'cat',
+])
+// 参数不允许 shell 元字符 / 重定向 / 命令替换。命令名已由白名单约束（不经 shell，
+// 数组传递），此处只拦会被 shell 语义扩展、可能被后续误用的字符。
+const SHELL_META_PATTERN = /[|&;<>`$]/
+function safeRegenerateCommand(cmds) {
+  // 兼容两种形态：单条 [bin, ...args] 或多条 [[bin,...],[bin,...]]（顺序执行）。
+  const list = (Array.isArray(cmds) && cmds.length > 0 && Array.isArray(cmds[0])) ? cmds : [cmds]
+  for (const c of list) {
+    if (!Array.isArray(c) || c.length === 0) return false
+    const bin = String(c[0] || '').trim()
+    if (bin === '') return false
+    // 命令名必须是裸名称（不含路径分隔符），且在白名单内。
+    if (/[\\/]/.test(bin)) return false
+    if (!SAFE_REGENERATE_BINS.has(bin)) return false
+    // 参数不允许 shell 元字符 / 重定向。
+    for (let i = 1; i < c.length; i++) {
+      const a = String(c[i] ?? '')
+      if (SHELL_META_PATTERN.test(a)) return false
+    }
+  }
+  return true
+}
+
+/**
+ * 用 {VAR} 占位符填充规则模板（OWNER/REPO/NAME/CATEGORY/DESC_EN/DESC_ZH）。
+ * @param {string} tpl
+ * @param {{owner:string,repo:string,info:object}} vars
+ */
+function fillPrTemplate(tpl, vars) {
+  const map = {
+    OWNER: vars.owner,
+    REPO: vars.repo,
+    NAME: String(vars.info && vars.info.name ? vars.info.name : vars.owner + '/' + vars.repo),
+    CATEGORY: String(vars.info && vars.info.category ? vars.info.category : ''),
+    DESC_EN: String(vars.info && vars.info.descriptionEn ? vars.info.descriptionEn : ''),
+    DESC_ZH: String(vars.info && vars.info.descriptionZh ? vars.info.descriptionZh : ''),
+  }
+  return String(tpl ?? '').replace(/\{(OWNER|REPO|NAME|CATEGORY|DESC_EN|DESC_ZH)\}/g, (_, k) => map[k] ?? '')
+}
+
+/**
+ * 预置规则：awesome-dsh-plugin 插件收录 PR（依据 提示词.md §2 流程）。
+ * 写入插件目录 rules/awesome-dsh-plugin__awesome-dsh-plugin.json；已存在则不覆盖
+ * （用户/AI 更新过的规则优先）。
+ */
+const PRESET_PR_RULES = [{
+  owner: 'awesome-dsh-plugin',
+  repo: 'awesome-dsh-plugin',
+  rule: {
+    provider: 'github',
+    owner: 'awesome-dsh-plugin',
+    repo: 'awesome-dsh-plugin',
+    baseBranch: 'main',
+    entryFilePath: 'data/plugins/{OWNER}__{REPO}.yml',
+    entryTemplate: [
+      'url: https://github.com/{OWNER}/{REPO}',
+      'name: {NAME}',
+      'category: {CATEGORY}',
+      'description:',
+      "  en: '{DESC_EN}'",
+      "  zh: '{DESC_ZH}'",
+      '',
+    ].join('\n'),
+    regenerateCommands: [['npm', 'ci'], ['node', 'scripts/generate-readme.mjs']],
+    prTitle: 'Add {NAME}',
+    prBodyHint: '新增条目文件 data/plugins/{OWNER}__{REPO}.yml；已运行重生成命令更新 README；仓库已满足 dsh.bundle 声明、满 1 天、提交数 ≥10、dsh-plugin topic；描述已对照源码核实。',
+    steps: [
+      { type: 'ensure-fork' },
+      { type: 'clone-fork' },
+      { type: 'add-upstream' },
+      { type: 'fetch-upstream' },
+      { type: 'branch', name: 'add-{REPO}' },
+      { type: 'write-entry' },
+      { type: 'regenerate-readme' },
+      { type: 'commit', message: 'Add {NAME}' },
+      { type: 'push' },
+      { type: 'create-pr' },
+    ],
+    preset: true,
+    generatedAt: '2026-09 (preset)',
+    model: 'preset',
+  },
+}]
+
+/** 启动时把预置规则写入插件目录 rules/（仅当对应文件不存在）。 */
+function seedPresetPrRules() {
+  for (const p of PRESET_PR_RULES) {
+    if (readPrRule(p.owner, p.repo)) continue
+    writePrRule(p.owner, p.repo, p.rule)
+  }
+}
+
+/**
+ * 按规则执行 PR：fork → 克隆 fork → 加 upstream → 拉取 → 建分支 → 写条目 → 重生成 README →
+ * 提交 → 推送 → 开 PR（GitHub 走 gh，Gitee 走 OpenAPI）。
+ * @param {*} ctx - cordis context。
+ * @param {{url: string, workdir?: string, rule?: object, entryContent?: string, title?: string, body?: string, base?: string}} input
+ */
+async function prExecuteFlow(ctx, { url, workdir, rule, entryContent, title, body, base }) {
+  const { provider, owner, repo } = parseRepoUrl(url)
+  if (!owner || !repo) return { ok: false, error: tr('无法识别仓库地址：') + String(url || '') }
+  const steps = rule && Array.isArray(rule.steps) ? rule.steps : []
+  if (steps.length === 0) return { ok: false, error: tr('没有可用的 PR 步骤（请先让 AI 分析规则）') }
+  const work = String(workdir || '').trim() || cloneDefaultDir()
+  const cloneDir = join(work, repo)
+  const upstreamUrl = provider === 'gitee'
+    ? 'https://gitee.com/' + owner + '/' + repo + '.git'
+    : 'https://github.com/' + owner + '/' + repo + '.git'
+  const baseBranch = base || (rule && rule.baseBranch) || 'main'
+  const logs = []
+  const stepRun = (label, cmd, args, opts = {}) => {
+    const r = run(cmd, args, { ...opts, timeout: opts.timeout ?? 300_000, cwd: opts.cwd || cloneDir, env: { ...process.env, GIT_SSH: WORKING_SSH, ...(opts.env || {}) } })
+    logs.push({ label, ok: r.ok, output: ((r.stdout || '') + (r.stderr || '')).trim() })
+    return r
+  }
+  for (const s of steps) {
+    const type = s && typeof s === 'object' ? String(s.type || '') : String(s || '')
+    switch (type) {
+      case 'ensure-fork': {
+        if (provider === 'gitee') {
+          const o = giteeOwner()
+          if (!o) return { ok: false, logs, error: tr('需要先配置 Gitee 私人令牌') }
+          const api = giteeApi('POST', 'repos/' + owner + '/' + repo + '/forks')
+          logs.push({ label: tr('确保 fork'), ok: api.ok || giteeApiFailed(api.data) === false, output: (api.error || tr('已 fork 或 fork 已存在')) })
+        } else {
+          const fr = run(GH, ['repo', 'fork', owner + '/' + repo, '--remote=false'], { timeout: 120_000, env: { GIT_SSH: WORKING_SSH } })
+          const blob = ((fr.stdout || '') + (fr.stderr || '')).trim()
+          // gh repo fork 在 fork 已存在时以非零退出并提示 "already exists"，视为成功；
+          // 其他失败（网络/权限）才记为失败。
+          const already = /already exists/i.test(blob)
+          logs.push({ label: tr('确保 fork'), ok: fr.ok || already, output: blob || tr('已 fork 或 fork 已存在') })
+        }
+        break
+      }
+      case 'clone-fork': {
+        if (existsSync(cloneDir) && existsSync(join(cloneDir, '.git'))) {
+          logs.push({ label: tr('克隆 fork'), ok: true, output: tr('已存在本地副本：') + cloneDir })
+        } else {
+          const me = provider === 'gitee' ? (giteeOwner() || owner) : (ghOwner() || owner)
+          const forkUrl = provider === 'gitee'
+            ? ('git@gitee.com:' + me + '/' + repo + '.git')
+            : ('git@github.com:' + me + '/' + repo + '.git')
+          const r = run(GIT, ['clone', forkUrl, cloneDir], { timeout: 600_000, env: { GIT_SSH: WORKING_SSH } })
+          logs.push({ label: tr('克隆 fork'), ok: r.ok, output: ((r.stdout || '') + (r.stderr || '')).trim() || tr('已克隆到 ') + cloneDir })
+          if (!r.ok) return { ok: false, logs, error: tr('克隆 fork 失败') }
+        }
+        break
+      }
+      case 'add-upstream': {
+        let r = stepRun(tr('添加上游'), GIT, ['remote', 'add', 'upstream', upstreamUrl])
+        if (!r.ok) r = stepRun(tr('添加上游'), GIT, ['remote', 'set-url', 'upstream', upstreamUrl])
+        logs[logs.length - 1].output = ((r.stdout || '') + (r.stderr || '')).trim() || upstreamUrl
+        break
+      }
+      case 'fetch-upstream': {
+        const r = stepRun(tr('拉取上游'), GIT, ['fetch', 'upstream'], { timeout: 120_000 })
+        if (!r.ok) logs[logs.length - 1].output = ((r.stdout || '') + (r.stderr || '')).trim() || tr('拉取失败')
+        break
+      }
+      case 'branch': {
+        const raw = (s && s.name) || ('add-' + repo)
+        const b = fillPrTemplate(String(raw), { owner, repo, info: {} })
+        const r = stepRun(tr('新建分支'), GIT, ['checkout', '-B', b, 'upstream/' + baseBranch])
+        if (!r.ok) {
+          logs[logs.length - 1].output = ((r.stdout || '') + (r.stderr || '')).trim() || tr('创建分支失败')
+          // 分支创建失败必须中止：后续 write-entry/commit/push 会在错误的当前分支上
+          // 继续（例如推送到 fork 默认分支），可能造成非预期提交。
+          return { ok: false, logs, error: tr('创建分支失败（上游分支可能不存在，请检查规则 baseBranch）') }
+        }
+        break
+      }
+      case 'write-entry': {
+        const p = fillPrTemplate(String((s && s.path) || (rule && rule.entryFilePath) || '').trim(), { owner, repo, info: {} })
+        if (!p) { logs.push({ label: tr('写入条目'), ok: false, output: tr('缺少条目文件路径') }); break }
+        // 防路径穿越：条目路径必须安全落在 cloneDir 内（规则来自 AI/缓存，可能被诱导）。
+        if (!safeEntryPath(cloneDir, p)) {
+          logs.push({ label: tr('写入条目'), ok: false, output: tr('条目文件路径不安全（已拦截）') + ': ' + p })
+          return { ok: false, logs, error: tr('条目文件路径不安全（已拦截）') }
+        }
+        try {
+          mkdirSync(dirname(join(cloneDir, p)), { recursive: true })
+          writeFileSync(join(cloneDir, p), entryContent || '', 'utf8')
+          logs.push({ label: tr('写入条目'), ok: true, output: p })
+        } catch (e) { logs.push({ label: tr('写入条目'), ok: false, output: String(e) }) }
+        break
+      }
+      case 'regenerate-readme': {
+        const raw = (Array.isArray(s && s.commands) ? s.commands : (rule && rule.regenerateCommands)) || []
+        // 兼容两种形态：单条 [bin, ...args] 或多条 [[bin,...],[bin,...]]（顺序执行）。
+        const cmds = (Array.isArray(raw) && raw.length > 0 && Array.isArray(raw[0])) ? raw : [raw]
+        if (cmds.length > 0) {
+          // 防恶意规则：只允许白名单构建命令 + 安全参数（AI 规则可能注入任意命令）。
+          if (!safeRegenerateCommand(cmds)) {
+            logs.push({ label: tr('重生成 README'), ok: false, output: tr('重生成命令不安全（已拦截）') + ': ' + String(cmds[0] && cmds[0][0] || '') })
+            return { ok: false, logs, error: tr('重生成命令不安全（已拦截）') }
+          }
+          let failed = false
+          for (const c of cmds) {
+            const r = stepRun(tr('重生成 README'), c[0], c.slice(1), { timeout: 180_000 })
+            if (!r.ok) { logs[logs.length - 1].output = ((r.stdout || '') + (r.stderr || '')).trim() || tr('执行失败'); failed = true; break }
+          }
+          if (failed) return { ok: false, logs, error: tr('执行失败') }
+        } else {
+          logs.push({ label: tr('重生成 README'), ok: true, output: tr('无命令，跳过') })
+        }
+        break
+      }
+      case 'commit': {
+        run(GIT, ['-C', cloneDir, 'add', '-A'])
+        const ident = run(GIT, ['-C', cloneDir, 'config', 'user.email'])
+        if (!ident.ok) {
+          run(GIT, ['-C', cloneDir, 'config', 'user.name', 'DSH User'])
+          run(GIT, ['-C', cloneDir, 'config', 'user.email', 'dsh@localhost'])
+        }
+        const msg = fillPrTemplate(String((s && s.message) || '').trim(), { owner, repo, info: {} }) || ('Add ' + owner + '/' + repo)
+        const r = run(GIT, ['-C', cloneDir, 'commit', '-m', msg], { timeout: 60_000 })
+        logs.push({ label: tr('提交'), ok: r.ok || /nothing to commit|no changes added/i.test(((r.stdout || '') + (r.stderr || ''))), output: ((r.stdout || '') + (r.stderr || '')).trim() || tr('已提交') })
+        break
+      }
+      case 'push': {
+        const r = stepRun(tr('推送'), GIT, ['push', '-u', 'origin', currentBranch(cloneDir)], { timeout: 180_000 })
+        if (!r.ok) {
+          logs[logs.length - 1].output = ((r.stdout || '') + (r.stderr || '')).trim() || tr('推送失败')
+          return { ok: false, logs, error: tr('推送失败') }
+        }
+        break
+      }
+      case 'create-pr': {
+        const titleTxt = String(title || '').trim()
+          || fillPrTemplate(String((s && s.title) || (rule && rule.prTitle) || ''), { owner, repo, info: {} })
+          || ('Add ' + owner + '/' + repo)
+        const bodyTxt = String(body || '').trim()
+        const branchName = currentBranch(cloneDir)
+        if (provider === 'gitee') {
+          const tok = readGiteeToken()
+          const o = giteeOwner()
+          if (!o || !tok) return { ok: false, logs, error: tr('需要先配置 Gitee 私人令牌') }
+          const api = giteeApi('POST', 'repos/' + owner + '/' + repo + '/pulls', { title: titleTxt, head: o + ':' + branchName, base: baseBranch, body: bodyTxt || undefined }, tok)
+          const urlM = api.ok && api.data && typeof api.data.html_url === 'string' ? api.data.html_url : undefined
+          logs.push({ label: tr('创建 PR'), ok: api.ok, output: urlM || (api.error || (api.data && api.data.message) || tr('创建 PR 失败')) })
+          return { ok: api.ok, logs, prUrl: urlM, error: api.ok ? undefined : (api.error || (api.data && api.data.message) || tr('创建 PR 失败')) }
+        }
+        const me = ghOwner() || owner
+        const args = ['pr', 'create', '--repo', owner + '/' + repo, '--head', me + ':' + branchName, '--base', baseBranch, '--title', titleTxt]
+        if (bodyTxt) args.push('--body', bodyTxt)
+        const r = run(GH, args, { timeout: 180_000, cwd: cloneDir, env: { GIT_SSH: WORKING_SSH } })
+        const blob = ((r.stdout || '') + (r.stderr || '')).trim()
+        const urlM = /https:\/\/github\.com\/[^\s"]+/.exec(blob)
+        logs.push({ label: tr('创建 PR'), ok: r.ok, output: blob || tr('已创建 PR') })
+        return { ok: r.ok, logs, prUrl: urlM ? urlM[0] : undefined, error: r.ok ? undefined : (blob || tr('创建 PR 失败')) }
+      }
+      default:
+        logs.push({ label: type || tr('未知步骤'), ok: false, output: tr('未知步骤类型') })
+    }
+  }
+  return { ok: true, logs }
+}
+
+// ---------- ⑥ 发布 npm 包（npm publish） ----------
+
+/** npm 状态：是否安装、registry、whoami、目标目录是否存在 package.json。 */
+function npmStatus(dir) {
+  const npm = NPM
+  const cwd = String(dir || '').trim() || cloneDefaultDir()
+  const installed = npm !== 'npm' && npm !== 'npm.cmd'
+  const registry = run(npm, ['config', 'get', 'registry'], { shell: IS_WIN })
+  const whoami = run(npm, ['whoami'], { shell: IS_WIN })
+  return {
+    ok: true,
+    installed,
+    npmPath: npm,
+    dir: cwd,
+    dirExists: existsSync(cwd),
+    hasPackageJson: existsSync(join(cwd, 'package.json')),
+    registry: registry.ok ? registry.stdout.trim() : undefined,
+    whoami: whoami.ok ? whoami.stdout.trim() : undefined,
+    whoamiError: whoami.ok ? undefined : ((whoami.stderr || whoami.stdout || '').trim() || tr('未登录 npm')),
+  }
+}
+
+/**
+ * 打开一个终端窗口，在目标目录运行 `npm login`（交互式登录无法非交互执行，
+ * 需要用户在弹出的终端里完成）。Windows 用 `start cmd /k`；macOS/Linux 探测常见终端。
+ * @param {string} [dir] - 目标目录。
+ * @returns {{ok:boolean, opened:boolean, command:string, detail:string}}
+ */
+function npmLoginTerminal(dir) {
+  const cwd = String(dir || '').trim() || cloneDefaultDir()
+  const command = 'npm login'
+  const cdCmd = IS_WIN
+    ? `cd /d "${cwd}" && ${command}`
+    : `cd "${cwd}" && ${command}`
+  try {
+    if (IS_WIN) {
+      // start cmd /k 打开独立窗口（第一引号段是窗口标题）；detached 不阻塞宿主。
+      const child = spawn('cmd', ['/c', 'start', '"npm-login"', 'cmd', '/k', cdCmd], { detached: true, stdio: 'ignore', windowsHide: false })
+      child.unref()
+      return { ok: true, opened: true, command, detail: tr('已打开终端窗口，请完成 npm login 后回到面板点「重新检查」') }
+    }
+    const terms = [
+      ['x-terminal-emulator', ['-e', 'sh', '-c', cdCmd]],
+      ['gnome-terminal', ['--', 'sh', '-c', cdCmd]],
+      ['konsole', ['-e', 'sh', '-c', cdCmd]],
+      ['xterm', ['-e', 'sh', '-c', cdCmd]],
+    ]
+    for (const [bin, args] of terms) {
+      try {
+        const child = spawn(bin, args, { detached: true, stdio: 'ignore' })
+        child.unref()
+        return { ok: true, opened: true, command, detail: tr('已打开终端窗口，请完成 npm login 后回到面板点「重新检查」') }
+      } catch { /* try next terminal */ }
+    }
+    return { ok: false, opened: false, command, detail: tr('未找到可用终端，请手动在目标目录运行：') + command }
+  } catch (e) {
+    return { ok: false, opened: false, command, detail: String((e && e.message) || e) }
+  }
+}
+
+/** 脱敏 npm config list 输出：隐藏 token / auth 等敏感值。 */
+function redactNpmList(output) {
+  return String(output || '').split(/\r?\n/).map((line) => {
+    if (/(token|_auth|authtoken|password|\bauth\b)/i.test(line)) {
+      return line.replace(/=.*$/, '=[REDACTED]')
+    }
+    return line
+  }).join('\n')
+}
+
+/**
+ * 执行 npm 流程的一步（registry / list / whoami / pack / publish）。
+ * @param {string} [dir] - 目标目录（package.json 所在处）。
+ * @param {string} step - 'registry'|'list'|'whoami'|'pack'|'publish'。
+ */
+function npmRunStep(dir, step) {
+  const npm = NPM
+  const cwd = String(dir || '').trim() || cloneDefaultDir()
+  const runNpm = (args, timeout) => run(npm, args, { shell: IS_WIN, cwd, timeout: timeout ?? 60_000 })
+  switch (step) {
+    case 'registry': {
+      const r = runNpm(['config', 'get', 'registry'])
+      return { ok: true, step, output: r.ok ? r.stdout.trim() : ((r.stderr || '') + (r.stdout || '')).trim() }
+    }
+    case 'list': {
+      const r = runNpm(['config', 'list'])
+      return { ok: true, step, output: redactNpmList((r.stdout || '') + (r.stderr || '')) }
+    }
+    case 'whoami': {
+      const r = runNpm(['whoami'])
+      return { ok: true, step, output: r.ok ? r.stdout.trim() : ((r.stderr || r.stdout || '').trim() || tr('未登录 npm')), loggedIn: r.ok }
+    }
+    case 'pack': {
+      const r = runNpm(['pack', '--dry-run'], 120_000)
+      return { ok: true, step, output: (r.stdout || '') + (r.stderr || '') }
+    }
+    case 'publish': {
+      const r = runNpm(['publish'], 180_000)
+      const blob = ((r.stdout || '') + (r.stderr || '')).trim()
+      return { ok: r.ok, step, output: blob || tr('npm publish 已执行'), error: r.ok ? undefined : (blob || tr('npm publish 失败')) }
+    }
+    default:
+      return { ok: false, step, output: tr('未知步骤') }
+  }
+}
+
 // ---------- route handlers ----------
 
 function json(res, status, payload) {
@@ -2111,6 +3108,8 @@ function baseName(p) {
 }
 
 export function apply(ctx) {
+  // 启动时把预置 PR 规则（awesome-dsh-plugin 等）写入插件目录 rules/（不存在才写）。
+  seedPresetPrRules()
   const fallbackDir = resolveDefaultDir(process.cwd())
   // 每个请求按 ?lang= 参数跑在独立语言上下文里（AsyncLocalStorage），
   // 所有 flow 函数内的 tr() 都能读到当前请求的语言，并发请求互不干扰。
@@ -2379,6 +3378,114 @@ export function apply(ctx) {
         return methodNotAllowed(res, req.method)
       }
     },
+
+    // ---- ④ 克隆远程仓库 ----
+    // 默认工作区（⑤⑥ 等板块兜底）。
+    '/clone/default-dir': (req, res) => handle(req, res, async () => {
+      const dir = cloneDefaultDir()
+      return { ok: true, dir, name: baseName(dir) }
+    }),
+    // home 目录（④ 克隆默认：Windows C:\Users\xxx，Linux/macOS /home/xxx）。
+    '/clone/home': (req, res) => handle(req, res, async () => {
+      const dir = cloneHomeDir()
+      return { ok: true, dir, name: baseName(dir) }
+    }),
+    '/clone/repos': async (req, res) => {
+      if (req.method !== 'GET') return methodNotAllowed(res, req.method)
+      await handle(req, res, async (req) => {
+        const q = new URL(req.url ?? '', 'http://localhost')
+        const provider = q.searchParams.get('provider') || 'github'
+        const baseDir = q.searchParams.get('dir') || cloneHomeDir()
+        return listRemoteRepos(provider, baseDir)
+      })
+    },
+    '/clone/run': async (req, res) => {
+      if (req.method !== 'POST') return methodNotAllowed(res, req.method)
+      await handle(req, res, async (req) => {
+        const body = JSON.parse((await readBody(req)) || '{}')
+        return cloneFlow(body.url, body.dest, body.name)
+      })
+    },
+
+    // ---- ⑤ 提交 PR ----
+    '/pr/targets': async (req, res) => {
+      if (req.method === 'GET') {
+        await handle(req, res, async () => ({ ok: true, targets: readPrTargets() }))
+      } else if (req.method === 'POST') {
+        await handle(req, res, async (req) => {
+          const body = JSON.parse((await readBody(req)) || '{}')
+          const url = String(body.url || '').trim()
+          if (!url) return { ok: false, error: tr('缺少仓库地址') }
+          if (body.remove) return { ok: true, targets: removePrTarget(url) }
+          return { ok: true, targets: savePrTarget(url) }
+        })
+      } else {
+        return methodNotAllowed(res, req.method)
+      }
+    },
+    // 只读查询某仓库是否有缓存规则（命中插件目录 rules/，不触发 AI，不生成）。
+    '/pr/rule': async (req, res) => {
+      if (req.method !== 'GET') return methodNotAllowed(res, req.method)
+      await handle(req, res, async (req) => {
+        const q = new URL(req.url ?? '', 'http://localhost')
+        const url = q.searchParams.get('url') || ''
+        const { provider, owner, repo } = parseRepoUrl(url)
+        if (!owner || !repo) return { ok: true, hasRule: false, url: String(url) }
+        const cached = readPrRule(owner, repo)
+        return {
+          ok: true, hasRule: !!cached, url: String(url),
+          provider, owner, repo,
+          rule: cached || null,
+        }
+      })
+    },
+    '/pr/analyze': async (req, res) => {
+      if (req.method !== 'POST') return methodNotAllowed(res, req.method)
+      await handle(req, res, async (req) => {
+        const body = JSON.parse((await readBody(req)) || '{}')
+        return prAnalyzeFlow(ctx, { url: body.url, force: !!body.force, ruleText: body.ruleText, ruleFile: body.ruleFile })
+      })
+    },
+    '/pr/generate': async (req, res) => {
+      if (req.method !== 'POST') return methodNotAllowed(res, req.method)
+      await handle(req, res, async (req) => {
+        const body = JSON.parse((await readBody(req)) || '{}')
+        return prGenerateFlow(ctx, { url: body.url, rule: body.rule, pluginInfo: body.pluginInfo })
+      })
+    },
+    '/pr/execute': async (req, res) => {
+      if (req.method !== 'POST') return methodNotAllowed(res, req.method)
+      await handle(req, res, async (req) => {
+        const body = JSON.parse((await readBody(req)) || '{}')
+        return prExecuteFlow(ctx, {
+          url: body.url, workdir: body.workdir, rule: body.rule,
+          entryContent: body.entryContent, title: body.title, body: body.body, base: body.base,
+        })
+      })
+    },
+
+    // ---- ⑥ 发布 npm 包 ----
+    '/npm/status': async (req, res) => {
+      if (req.method !== 'GET') return methodNotAllowed(res, req.method)
+      await handle(req, res, async (req) => {
+        const q = new URL(req.url ?? '', 'http://localhost')
+        return npmStatus(q.searchParams.get('dir') || '')
+      })
+    },
+    '/npm/login': async (req, res) => {
+      if (req.method !== 'POST') return methodNotAllowed(res, req.method)
+      await handle(req, res, async (req) => {
+        const body = JSON.parse((await readBody(req)) || '{}')
+        return npmLoginTerminal(body.dir)
+      })
+    },
+    '/npm/step': async (req, res) => {
+      if (req.method !== 'POST') return methodNotAllowed(res, req.method)
+      await handle(req, res, async (req) => {
+        const body = JSON.parse((await readBody(req)) || '{}')
+        return npmRunStep(body.dir, body.step)
+      })
+    },
   }
 
   ctx.effect(() => {