fix: resolve current releases without GitHub API rate limits

Author: LIghtJUNction

dsh.ps1

@@ -3,10 +3,11 @@ $ErrorActionPreference = 'Stop'
 if ($args.Count) { throw 'Usage: .\dsh.ps1 [-Profile name]' }
 npm.cmd install -g @deepseek-ai/dsh@latest pnpm@latest
 if ($LASTEXITCODE) { exit $LASTEXITCODE }
-$release = Invoke-RestMethod -Uri 'https://api.github.com/repos/TokenNotIncluded/dsh-lmm-provider/releases/latest'
-$asset = @($release.assets | Where-Object { $_.name -eq 'dsh-lmm-provider.tgz' })
-if ($release.draft -or $release.prerelease -or $asset.Count -ne 1) { throw 'No published DSH LMM plugin release found' }
-$url = [Uri]$asset[0].browser_download_url
-if ($url.Scheme -ne 'https' -or $url.Host -ne 'github.com' -or -not $url.IsDefaultPort -or $url.UserInfo -or $url.Query -or $url.Fragment -or $url.AbsolutePath -notmatch '^/TokenNotIncluded/dsh-lmm-provider/releases/download/[^/]+/dsh-lmm-provider\.tgz$') { throw 'Unexpected plugin release URL' }
-dsh.cmd plugin --profile $Profile add $url.AbsoluteUri --ignore-scripts
+$response = Invoke-WebRequest -UseBasicParsing -Method Head -Uri 'https://github.com/TokenNotIncluded/dsh-lmm-provider/releases/latest'
+$finalUri = $response.BaseResponse.ResponseUri
+if (-not $finalUri) { $finalUri = $response.BaseResponse.RequestMessage.RequestUri }
+$url = [Uri]$finalUri
+if (-not $url -or $url.Scheme -ne 'https' -or $url.Host -ne 'github.com' -or -not $url.IsDefaultPort -or $url.UserInfo -or $url.Query -or $url.Fragment -or $url.AbsolutePath -notmatch '^/TokenNotIncluded/dsh-lmm-provider/releases/tag/([a-zA-Z0-9][a-zA-Z0-9._-]*)$') { throw 'Unexpected plugin release URL' }
+$pluginUrl = 'https://github.com/TokenNotIncluded/dsh-lmm-provider/releases/download/' + $Matches[1] + '/dsh-lmm-provider.tgz'
+dsh.cmd plugin --profile $Profile add $pluginUrl --ignore-scripts
 exit $LASTEXITCODE

dsh.sh

@@ -4,12 +4,11 @@ set -euo pipefail
 npm install -g @deepseek-ai/dsh@latest pnpm@latest
 # Resolve the current built release rather than installing an unbuilt Git checkout
 # or a cached npm preview package. A versioned asset URL also refreshes pnpm's source.
-plugin_url=$(curl -fsSL https://api.github.com/repos/TokenNotIncluded/dsh-lmm-provider/releases/latest | node --input-type=module -e '
-let input=""; for await (const chunk of process.stdin) input+=chunk;
-const release=JSON.parse(input), asset=release.assets?.find(a=>a.name==="dsh-lmm-provider.tgz");
-if(release.draft || release.prerelease || !asset) throw Error("No published DSH LMM plugin release found");
-const url=new URL(asset.browser_download_url);
-if(url.origin!=="https://github.com" || url.username || url.password || url.search || url.hash || !/^\/TokenNotIncluded\/dsh-lmm-provider\/releases\/download\/[^/]+\/dsh-lmm-provider\.tgz$/.test(url.pathname)) throw Error("Unexpected plugin release URL");
-console.log(url.href);
-')
+release_url=$(curl -fsSLI -o /dev/null -w '%{url_effective}' https://github.com/TokenNotIncluded/dsh-lmm-provider/releases/latest)
+plugin_url=$(node --input-type=module -e '
+const url=new URL(process.argv[1]);
+const prefix="/TokenNotIncluded/dsh-lmm-provider/releases/tag/", tag=url.pathname.slice(prefix.length);
+if(url.origin!=="https://github.com" || url.username || url.password || url.search || url.hash || !url.pathname.startsWith(prefix) || !/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(tag)) throw Error("Unexpected plugin release URL");
+console.log("https://github.com/TokenNotIncluded/dsh-lmm-provider/releases/download/"+tag+"/dsh-lmm-provider.tgz");
+' "$release_url")
 dsh plugin --profile "${1:-web}" add "$plugin_url" --ignore-scripts

test.ps1

@@ -55,11 +55,11 @@ Check 'dsh.ps1' $npmFailure 9 'npm failed'
 $npmSuccess = @'
 function npm.cmd { Write-Output ($args -join '|'); $global:LASTEXITCODE=0 }
 function dsh.cmd { Write-Output ($args -join '|'); $global:LASTEXITCODE=0 }
-function Invoke-RestMethod { param($Uri) if ($Uri -notmatch '/TokenNotIncluded/dsh-lmm-provider/releases/latest$') { throw 'wrong release URL' }; return [pscustomobject]@{assets=@([pscustomobject]@{name='dsh-lmm-provider.tgz';browser_download_url='https://github.com/TokenNotIncluded/dsh-lmm-provider/releases/download/v0.1.0-alpha.5/dsh-lmm-provider.tgz'})} }
+function Invoke-WebRequest { param($Uri,$Method,[switch]$UseBasicParsing) if ($Uri -ne 'https://github.com/TokenNotIncluded/dsh-lmm-provider/releases/latest' -or $Method -ne 'Head') { throw 'wrong release URL' }; return [pscustomobject]@{BaseResponse=[pscustomobject]@{ResponseUri=[Uri]'https://github.com/TokenNotIncluded/dsh-lmm-provider/releases/tag/v0.1.0-alpha.5'}} }
 '@
 Check 'dsh.ps1' $npmSuccess 0 'plugin\|--profile\|headless.*releases/download/v0.1.0-alpha.5/dsh-lmm-provider.tgz' '-Profile headless'
-Check 'dsh.ps1' ($npmSuccess+"`nfunction Invoke-RestMethod { [pscustomobject]@{assets=@()} }") 1 'No published DSH LMM plugin release found'
-Check 'dsh.ps1' ($npmSuccess+"`nfunction Invoke-RestMethod { [pscustomobject]@{assets=@([pscustomobject]@{name='dsh-lmm-provider.tgz';browser_download_url='https://evil.invalid/plugin.tgz'})} }") 1 'Unexpected plugin release URL'
+Check 'dsh.ps1' ($npmSuccess+"`nfunction Invoke-WebRequest { throw 'missing-release' }") 1 'missing-release'
+Check 'dsh.ps1' ($npmSuccess+"`nfunction Invoke-WebRequest { [pscustomobject]@{BaseResponse=[pscustomobject]@{ResponseUri=[Uri]'https://evil.invalid/plugin.tgz'}} }") 1 'Unexpected plugin release URL'
 $upstream = @'
 function Invoke-RestMethod { return 'param([string]$Version) Write-Output "upstream:$Version"' }
 '@

test.py

@@ -39,9 +39,9 @@
         print('printf "%s\\n" "$@" > "$HOME/received-args"')
     elif url.endswith('/desktop.sh'):
         print(Path(os.environ['PROJECT'], 'desktop.sh').read_text())
-    elif url == 'https://api.github.com/repos/TokenNotIncluded/dsh-lmm-provider/releases/latest':
-        asset_url=os.environ.get('DSH_ASSET_URL','https://github.com/TokenNotIncluded/dsh-lmm-provider/releases/download/v0.1.0-alpha.5/dsh-lmm-provider.tgz')
-        print(json.dumps({'assets': [] if os.environ.get('NO_ASSET') else [{'name':'dsh-lmm-provider.tgz','browser_download_url':asset_url}]}))
+    elif url == 'https://github.com/TokenNotIncluded/dsh-lmm-provider/releases/latest':
+        if os.environ.get('NO_ASSET'): sys.exit(22)
+        print(os.environ.get('DSH_ASSET_URL','https://github.com/TokenNotIncluded/dsh-lmm-provider/releases/tag/v0.1.0-alpha.5'))
     elif '/releases/latest' in url:
         print(json.dumps({'assets': [] if os.environ.get('NO_ASSET') else [
             {'name': 'Tool-amd64.deb', 'browser_download_url': 'https://github.com/official/tool.deb'},