@agent-stash/dsh-skill-scout 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,125 @@
-# Temporary Holding Version
+# @agent-stash/dsh-skill-scout
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+[![npm](https://img.shields.io/npm/v/@agent-stash/dsh-skill-scout)](https://www.npmjs.com/package/@agent-stash/dsh-skill-scout) [![DSH Plugin](https://img.shields.io/badge/DeepSeek%20Harness-Plugin-4d6bfe)](https://github.com/deepseek-ai/deepseek-harness)
+
+DeepSeek Harness（DSH）插件：在本机读取已经结束的会话，找出在多个会话里重复成功的流程和经过验证的修复，整理成 Skill 建议。你看过证据、预览过草稿之后，它才把 Skill 写进 `.agents/skills`；写入之后随时可以撤销。
+
+支持 DSH Desktop 0.2.1-rc.3 与 DSH 0.2.2-alpha.2 的 Web 界面。
+
+## 安装
+
+DSH 桌面版：在「插件」页点「添加插件」，填入 `@agent-stash/dsh-skill-scout` 后安装。
+
+命令行：
+
+```bash
+dsh plugin --profile web add @agent-stash/dsh-skill-scout
+```
+
+安装后插件立即开始在本机分析会话。要让模型复核候选，在「插件 → 经验提炼 → 配置」里打开「后台复核」并选择复核模型；不选时跟随 Agent 的默认模型。
+
+## 使用
+
+会话标题栏右侧有一个 Skill 图标。出现新的可保存建议时，图标上显示数量；打开收件箱后数量清零。没有建议时只有图标，不弹通知。
+
+收件箱分三组：
+
+- **可以保存**：模型复核过、给出了草稿的建议。
+- **本地发现**：规则找到、还没复核的候选，以及复核失败的候选。
+- **历史**：已保存、已忽略和复核后判定不值得保存的建议，默认收起。
+
+点开一张卡片进入详情，有三页：
+
+- **证据**：每个来源任务的请求、执行过的命令、退出码、失败时的一行错误，以及判定成功所依据的检查命令。复核引用过的步骤有标记，「打开会话」跳回原会话。
+- **Skill**：复核生成的草稿。名称、描述、触发条件和正文都可以直接改。
+- **改动**：目标路径和文件 diff。新 Skill 默认写进项目的 `.agents/skills/<name>/SKILL.md`，也可以选用户级的 `~/.agents/skills`。
+
+详情底部的操作：
+
+- **保存 Skill**：写入文件，然后确认 DSH 的 Skill 列表里出现了它。保存后可以撤销；文件在保存之后被改过时，撤销会拒绝并说明原因。
+- **改进已有 Skill**：复核认为已有 Skill 覆盖了这个任务、但证据补充了缺失的步骤或注意事项时，建议只在原文件末尾追加一节，原有内容不变。
+- **忽略**：这一条移到历史，可以恢复。
+- **忽略类似建议**：相近的流程以后也不再提示。
+- **用模型复核**：后台复核关闭时，对一条本地发现手动发起复核。按钮旁写明证据会发给哪个模型。
+
+## 发现规则
+
+- **什么算成功**：只看工具结果。最后一次修改之后，每条命令的最后一次运行都成功；其中跑过测试、检查或构建的，记为「检查通过」。Agent 在回复里说「完成了」不算；用户下一条消息表示结果不对时，这次任务不再算成功。
+- **重复流程**：至少 2 个独立会话（可调）里，请求相近、命令序列相近，并且都成功。从别的会话 fork 出来的会话只计入新增的部分；同一会话里的反复重试不算重复。
+- **失败恢复**：命令失败，接着安装依赖、改配置或换参数，然后同一个命令成功，并有后续检查。只改业务代码的修复，要在多个会话里遇到同一个错误才提示。
+- **复杂流程**：一次跨多类命令、经过验证的长任务，只作为复核候选，复核默认判为一次性工作。
+- **已有 Skill**：复核时附上最相关的已有 Skill，模型可以判为重复，或者给出改进。已保存的建议和「忽略类似」覆盖的流程不再提示；复核判定不值得保存后，证据增加到两倍才重新复核。
+
+## 模型复核
+
+后台复核默认关闭。打开后，复核按每日次数和最小间隔排队，一次只跑一个，超时后放弃。失败后分别在 10 分钟、1 小时、6 小时后自动重试，之后只能手动重试。关闭后台复核或关闭会话分析后，插件不再发出后台模型请求。
+
+发给模型的是一份脱敏后的证据包：用户请求、命令行、退出码、每次失败的一行错误，以及最相关的已有 Skill 的内容。完整的工具输出、文件内容和 Agent 的思考过程不会发送。复核请求不带任何工具，也不在任何会话里运行。
+
+模型的回答要通过这些检查才会成为建议：
+
+- 结构符合约定的 JSON。
+- 引用的证据编号都存在。
+- 带命令的步骤，命令链的每一段都出现在它引用的成功运行里；含命令替换时，替换部分与记录原样一致。
+- 草稿里没有凭据形态的文本、提示注入的痕迹，也没有下载后直接交给 shell 执行的命令。
+- 强制推送、递归删除、`sudo` 这类命令作为提醒显示在详情里。
+
+## 设置
+
+| 分组     | 设置                                           | 默认                |
+| -------- | ---------------------------------------------- | ------------------- |
+| 发现     | 分析已结束的会话                               | 开                  |
+| 发现     | 历史范围（天）                                 | 30                  |
+| 发现     | 启动时扫描的会话数                             | 200                 |
+| 发现     | 静默期（会话空闲多少分钟后分析）               | 2                   |
+| 发现     | 重复次数（独立会话数）                         | 2                   |
+| 模型复核 | 后台复核                                       | 关                  |
+| 模型复核 | 复核模型与推理强度                             | 跟随 Agent 默认模型 |
+| 模型复核 | 超时（秒）                                     | 90                  |
+| 模型复核 | 复核要求（替换内置判断标准，回复格式始终保留） | 空                  |
+| 限额     | 每日复核次数                                   | 6                   |
+| 限额     | 复核间隔（分钟）                               | 10                  |
+| 限额     | 证据上限（字符）                               | 24000               |
+| 隐私     | 包含错误行                                     | 开                  |
+| 隐私     | 追加脱敏规则（每行一个正则）                   | 空                  |
+| 收件箱   | 标题栏角标：显示数量或只显示图标               | 显示数量            |
+| 收件箱   | 新 Skill 保存到：项目或用户                    | 项目                |
+
+## 数据与安全
+
+- 分析在 DSH Host 进程里进行，只读取 DSH 已经保存的会话日志。
+- 会话文本在存储、发送和显示之前先在本机脱敏：常见的 API Key、token、私钥、`Authorization` 与 `Cookie` 头、`password=` 一类赋值、`--password` 一类参数、`user:pass` 形式的账号密码、URL 里的账号密码和邮箱地址都替换为占位符，用户主目录换成 `~`。命令签名也从脱敏后的命令解析。设置里可以追加自己的规则。
+- 插件只存 Episode 摘要和建议，放在 DSH storage domain `skill_scout` 里，不另起数据库或后台进程。超出历史范围的会话摘要会被删除，仍待处理的建议引用的除外。
+- 多个 DSH 实例同时运行时，只有拿到 `$DSH_HOME/skill-scout/worker.lock` 的那个分析与复核，其他实例只显示收件箱。
+- 写入只发生在你点保存之后，目标只能是项目或用户的 `.agents/skills`、`.dsh/skills` 下的 `<name>/SKILL.md`。已有同名文件时拒绝写入；改进已有 Skill 时，预览之后文件被改过也会拒绝。
+- 复核请求不创建会话，不会被再次分析；子代理会话也不分析。
+
+## 性能
+
+- Agent 运行时插件不做分析：一个会话的回合结束后，等它空闲一段时间（默认 2 分钟）才读取这个会话。
+- 读取与提取在 Host 进程里逐个会话进行，会话之间让出事件循环。开发机上用测试夹具测得：200 个会话、3650 个事件的提取约 30 ms，跨会话检测约 5 ms；一个 2000 个事件的长会话提取约 20 ms。读取会话日志的耗时由 DSH 的 Session Query 决定，不在这些数字里。
+- 存储里只有 Episode 摘要，测试夹具的 200 个会话约 240 KB。
+- 每次复核发送的证据不超过设置里的字符上限，默认 24000。
+
+## 已知限制
+
+- 收件箱和设置页只在 DSH Web 与桌面版里提供。
+- 请求相似度按词重合计算，用不同语言描述的同一任务可能不会归为一组。
+- 失败恢复要求修复后重新运行同一个命令；换了一种命令完成的修复不会被识别。
+- 改进已有 Skill 只追加一节，不改写原有段落。
+- 退出码从 bash 与 PowerShell 的结果里读取，包括 `run_code` 里发起的命令；其他工具只看它是否报错。
+- 脱敏按已知的写法匹配，格式不常见的凭据可能漏掉；可以在设置里追加正则。
+
+## 开发
+
+```bash
+pnpm install
+pnpm --filter @agent-stash/dsh-skill-scout run bundle   # 构建 dist/index.js（Host）与 dist/client.js（浏览器）
+pnpm exec vitest run packages/dsh-skill-scout
+```
+
+`dist/` 随仓库提交。设计取舍与数据流见 [architecture.md](architecture.md)。
+
+## 许可证
+
+Apache-2.0，见 [LICENSE](LICENSE)。

package/cordis.patch.yml

@@ -0,0 +1,4 @@
+- insert:
+    - id: agent-stash-skill-scout
+      name: "@agent-stash/dsh-skill-scout"
+      config: {}