@awiki/dsh-plugin 0.2.0-rc.4

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 DeepSeek
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,138 @@
+# @awiki/dsh-plugin
+
+AWiki identity and messaging for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness).
+The package installs one Host service, its production Rust SDK provider,
+the model tools, and a Web client with a draggable AWiki Me launcher.
+
+[中文说明](./README.zh.md)
+
+Registration failures preserve the form and local pending identity material. Closed registration,
+unavailable verification state, and commit conflicts each give a safe next action without exposing
+remote response details.
+
+The Rust SDK exclusively owns the identity, SecretVault, database, cache, and metadata below the
+configured `stateRoot`. This release performs a clean cutover and does not import the former
+TypeScript SDK `identity.json`; create a new Rust-backed identity after upgrading.
+
+## Features
+
+- Register one deployment-level AWiki identity from the Web UI.
+- Open the top-left AWiki account menu to sign out locally without deleting the encrypted identity or message database; **Resume** restores the same DID and Handle, including across DSH restarts.
+- Reuse that identity across the root Agent and its subagents.
+- Direct-message and existing-group conversation lists, unread counts, latest-message previews, and persisted display names.
+- Text messages plus one attachment per message, with image previews and SHA verification.
+- A draggable circular launcher, adaptive popup placement, dark mode, and remembered active conversation.
+- User-triggered AI summaries for up to 50 recent or unread messages, kept only in runtime memory with explicit stale, retry, copy, and source-navigation states.
+- An AWiki page in DSH Settings for a durable, validated default Handle domain.
+- A typed second confirmation in the Settings danger zone before permanently clearing local AWiki identity, key, token, registration-draft, and message-index state.
+- Five approval-aware Agent tools: identity status, conversations, history, text send, and attachment send.
+
+The first release does not implement end-to-end encryption, multiple identities,
+group administration, realtime push, or multiple attachments in one message.
+
+## Install
+
+Install the official public npm package:
+
+```bash
+pnpm add @awiki/dsh-plugin@next
+```
+
+`@awiki/dsh-plugin` is the canonical package identity starting with
+`0.2.0-rc.4`. The former `@awiki/dsh` registry entry was unpublished and is
+not an installation source for this release line.
+
+Apply the package after the normal DSH base and Web app bundles. Its
+`cordis.patch.yml` adds the Host service and provider; DSH discovers and injects
+the browser client through the package metadata.
+
+## Configuration
+
+The plugin works against the public `awiki.ai` tenant without environment configuration. Set these variables only when a deployment needs an override:
+
+| Variable | Purpose | Default |
+| --- | --- | --- |
+| `DSH_AWIKI_USER_SERVICE_URL` | Absolute AWiki user-service URL | `https://awiki.ai` |
+| `DSH_AWIKI_USER_SERVICE_DOMAIN` | Composition default for the Handle provider domain | `awiki.ai` |
+| `DSH_AWIKI_MESSAGE_SERVICE_URL` | Message-service URL called by the Host | `https://awiki.ai` |
+| `DSH_AWIKI_MESSAGE_SERVICE_DID` | Authoritative message-service DID | `did:wba:awiki.ai` |
+| `DSH_AWIKI_MESSAGE_SERVICE_PUBLIC_URL` | Public endpoint written to protocol records | `https://awiki.ai` |
+| `DSH_AWIKI_ALLOWED_ATTACHMENT_ORIGINS` | JSON array of extra exact HTTPS origins | `[]` |
+| `DSH_AWIKI_STATE_ROOT` | Private Rust IM Core state directory | `$DSH_HOME/awiki/im-core` or `~/.dsh/awiki/im-core` |
+| `DSH_AWIKI_POLL_INTERVAL_MS` | Open-dialog polling interval | `5000` |
+| `DSH_AWIKI_ATTACHMENT_MAX_BYTES` | Decoded attachment limit | `10485760` |
+| `DSH_AWIKI_SUMMARY_MAX_INPUT_BYTES` | UTF-8 cap after Host-side summary minimization | `32768` |
+| `DSH_AWIKI_SUMMARY_TIMEOUT_MS` | One-shot model deadline | `30000` |
+| `DSH_AWIKI_SUMMARY_MAX_OUTPUT_TOKENS` | Structured summary output cap | `768` |
+
+The default Handle provider domain is `awiki.ai`. A local user can override it
+from Settings → AWiki; DSH persists that choice in its settings document and
+applies it after the next Harness restart. The setting affects future identity
+registration and completion of short Handles. It does not rewrite an already
+registered DID or Handle.
+
+The settings page talks to a plugin-owned Connection channel that the Host
+accepts only from loopback. This keeps an independently installed `@awiki/dsh-plugin`
+compatible with stock DSH releases without adding AWiki to a core settings
+allowlist; non-local browser origins cannot read or mutate the Host setting.
+
+Settings → AWiki → Danger zone clears only this installation's local AWiki
+state; it does not delete the server-side account or Handle. The dialog requires
+the displayed confirmation phrase. After success, the local DID keys, access
+token, registration draft, conversations, and attachment index cannot be
+recovered by the app, and this installation may lose access to the old identity.
+
+Ordinary sign-out is separate from that destructive action. It writes only a private
+Host-owned session marker, gates both Web and Agent operations, and retains the SDK-owned
+SecretVault identity, keys, tokens, conversations, and attachment index. Resuming removes
+the marker and reloads the same local identity without registration.
+
+The provider domain and message-service DID are protocol identifiers. Do not
+infer them from an API hostname. Production service URLs must use HTTPS. The IM Core state directory contains access material;
+keep it outside the repository, restrict filesystem access, and protect the
+underlying disk and backups.
+
+For the default 10 MiB decoded attachment cap, configure a reverse-proxy request
+limit of at least 14 MiB to account for base64 and JSON overhead.
+
+AI summary generation runs only after the user selects **AI Summary**. If a
+conversation had unread messages when it was opened, the Host summarizes that
+unread tail; otherwise it summarizes the newest 50 messages. The Host enforces
+the 50-message and UTF-8 limits, sends attachment metadata rather than file
+bytes, and treats serialized conversation content as untrusted data. Summaries
+are cached per conversation only for the current browser runtime and become
+stale, without another model call, when newer messages arrive. The replaceable
+`@awiki/dsh-plugin/summary-provider` uses the current Harness default provider and model
+for one direct `ctx.llm.stream` request; it does not create an Agent or write an
+Agent session.
+
+## Development
+
+Requirements: Node.js 22.19+ (or 24+) and pnpm 11.7.
+
+```bash
+pnpm install --frozen-lockfile
+pnpm run verify
+pnpm pack --dry-run
+```
+
+The production Host loads the exact `@awiki/im-core-node@0.1.2` runtime package;
+the platform-specific native addon is selected through its optional dependencies
+and remains external to the JavaScript bundle. Consumers do not need Rust or an
+`awiki-cli-rs2` checkout. See `THIRD_PARTY_NOTICES.md` for provenance and
+licensing.
+
+The checked-in Typert Host/Remote artifacts were generated from the same Host
+contract. `pnpm check:generated` pins their complete seventeen-method surface until
+the standalone Typert generator supports root-level packages.
+
+## Security
+
+Do not commit OTPs, access tokens, private keys, identity state, `.env` files, or
+remote-test reports. `pnpm check:public` enforces the public-tree guard before
+verification and packaging.
+
+## License
+
+The plugin is MIT licensed. Its Rust IM Core runtime dependency is distributed
+under AGPL-3.0-only and remains subject to its own retained notices and license.

package/README.zh.md

@@ -0,0 +1,114 @@
+# @awiki/dsh-plugin
+
+为 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 提供 AWiki
+身份与消息能力。一个包同时包含 Host Service、Rust SDK Provider、Agent 工具，
+以及带可拖动 AWiki Me 悬浮入口的 Web 客户端。
+
+Rust SDK 独占管理配置的 `stateRoot` 下的身份、SecretVault、数据库、缓存和元数据。
+本版本采用干净切换，不导入旧 TypeScript SDK 的 `identity.json`；升级后需创建新的
+Rust 身份。
+
+## 功能
+
+- 在 Web UI 中注册一个部署级 AWiki 身份，根 Agent 与子 Agent 共用。
+- 点击 AWiki 面板左上角图标可打开账户菜单；普通退出只锁定本机会话，不删除加密身份或消息数据库，重新进入及重启 DSH 后仍恢复同一个 DID 和 Handle。
+- 注册失败时保留手机号、Handle、验证码和本机待注册密钥；注册未开放、验证码状态失效和提交冲突会给出对应的安全处理提示。
+- 私聊和已有群聊列表、未读角标、最新消息预览、时间更新与昵称持久化。
+- 文本和单附件消息，支持图片预览、附件说明与 SHA 校验。
+- 圆形可拖动入口、自适应四角弹窗、深色模式和当前会话记忆。
+- 用户点击后才生成的 AI 对话总结：最多处理 50 条最近或未读消息，按会话保留本次运行期缓存，并支持过期提示、重试、复制与跳转原消息。
+- 在 DSH 设置中提供 AWiki 页面，可持久化修改并校验默认 Handle 域名。
+- 在设置页危险区域中，经输入确认词的二次确认后，永久清空本机 AWiki 身份、密钥、令牌、注册草稿和消息索引。
+- 五个受 Harness 审批约束的 Agent 工具：身份、会话、历史、文本发送、附件发送。
+
+首版不包含端到端加密、多身份、群管理、实时推送和单消息多附件。
+
+## 安装
+
+安装公开发布的官方 npm 包：
+
+```bash
+pnpm add @awiki/dsh-plugin@next
+```
+
+从 `0.2.0-rc.4` 起，`@awiki/dsh-plugin` 是唯一规范包名。原
+`@awiki/dsh` registry 条目已被 unpublish，不再作为本发布线的安装来源。
+
+请在常规 DSH base 和 Web app bundle 之后应用本包。`cordis.patch.yml` 会加入
+Host Service 和 Provider；浏览器客户端由 DSH 根据包元数据自动发现并注入。
+
+## 配置
+
+插件无需环境变量即可连接公开的 `awiki.ai` 租户；仅在部署需要覆盖默认值时设置以下变量：
+
+| 环境变量 | 用途 | 默认值 |
+| --- | --- | --- |
+| `DSH_AWIKI_USER_SERVICE_URL` | AWiki user service 绝对 URL | `https://awiki.ai` |
+| `DSH_AWIKI_USER_SERVICE_DOMAIN` | Handle 提供方域名的部署默认值 | `awiki.ai` |
+| `DSH_AWIKI_MESSAGE_SERVICE_URL` | Host 调用的 message service URL | `https://awiki.ai` |
+| `DSH_AWIKI_MESSAGE_SERVICE_DID` | 权威消息服务 DID | `did:wba:awiki.ai` |
+| `DSH_AWIKI_MESSAGE_SERVICE_PUBLIC_URL` | 写入协议记录的公开 endpoint | `https://awiki.ai` |
+| `DSH_AWIKI_ALLOWED_ATTACHMENT_ORIGINS` | 额外附件 HTTPS origin 的 JSON 数组 | `[]` |
+| `DSH_AWIKI_STATE_ROOT` | 私有 Rust IM Core 状态目录 | `$DSH_HOME/awiki/im-core` 或 `~/.dsh/awiki/im-core` |
+| `DSH_AWIKI_POLL_INTERVAL_MS` | 弹窗打开时的轮询间隔 | `5000` |
+| `DSH_AWIKI_ATTACHMENT_MAX_BYTES` | 解码后的附件上限 | `10485760` |
+| `DSH_AWIKI_SUMMARY_MAX_INPUT_BYTES` | Host 最小化后的 UTF-8 输入上限 | `32768` |
+| `DSH_AWIKI_SUMMARY_TIMEOUT_MS` | 单次模型调用超时 | `30000` |
+| `DSH_AWIKI_SUMMARY_MAX_OUTPUT_TOKENS` | 结构化摘要输出上限 | `768` |
+
+Handle 提供方的默认域名为 `awiki.ai`。本机用户可以在“设置 → AWiki”中覆盖该值；
+DSH 会把选择写入自己的设置文件，并在下次重启 Harness 后生效。该设置影响后续
+身份注册和短 Handle 的域名补全，不会改写已经注册的 DID 或 Handle。
+
+设置页通过插件自有的 Connection 通道访问 Host，Host 只接受 loopback 来源。
+因此独立安装的 `@awiki/dsh-plugin` 无需修改 DSH 核心设置白名单；非本机浏览器来源不能
+读取或修改这项 Host 设置。
+
+“设置 → AWiki → 危险区域”中的清空操作只删除此安装的本地 AWiki 状态，不删除
+服务端账号或 Handle。执行前必须在确认弹窗中输入指定确认词；成功后本机 DID 私钥、
+访问令牌、注册草稿、会话记录和附件索引无法通过应用恢复，原身份也可能无法再由本机使用。
+
+普通“退出登录”与危险区域的永久清空相互独立。退出只写入一个 Host 私有会话标记，
+同时阻止 Web UI 和 Agent 使用该身份；SecretVault 中的身份、密钥、令牌、会话和附件索引
+全部保留。“重新进入”会移除标记并恢复同一个本机身份，不需要重新注册。
+
+Provider 域名和消息服务 DID 都是协议标识，不能根据 API host 猜测。生产环境 URL
+必须使用 HTTPS。IM Core 状态目录含访问材料，应置于仓库外，限制文件权限，并为磁盘
+和备份提供保护。
+
+默认附件上限为解码后 10 MiB；反向代理请求体上限至少应为 14 MiB，以容纳
+base64 与 JSON 封装开销。
+
+AI 总结只在用户点击“AI 总结”后生成。打开会话时若存在未读消息，Host 总结该未读
+尾部；否则总结最近 50 条。Host 最终强制 50 条与 UTF-8 字节上限，附件只发送文件名、
+MIME、大小和说明，不发送文件二进制；序列化后的对话内容始终按不可信数据处理。
+总结只按会话缓存在本次浏览器运行期；新消息只会把已有结果标记为过期，不会自动再次
+调用模型。可替换的 `@awiki/dsh-plugin/summary-provider` 使用 Harness 当前默认 provider/model
+执行一次直接的 `ctx.llm.stream`，不会创建 Agent，也不会写入 Agent session。
+
+## 开发与验证
+
+需要 Node.js 22.19+（或 24+）以及 pnpm 11.7：
+
+```bash
+pnpm install --frozen-lockfile
+pnpm run verify
+pnpm pack --dry-run
+```
+
+生产 Host 加载固定版本 `@awiki/im-core-node@0.1.2`；平台原生 addon 由它的
+optional dependencies 选择，并保持在 JavaScript bundle 外。使用者无需安装 Rust，
+也无需检出 `awiki-cli-rs2`。来源与许可证见 `THIRD_PARTY_NOTICES.md`。
+
+Typert Host/Remote 产物与当前 Host 契约一同提交；在独立 Typert 生成器支持根级
+包之前，`pnpm check:generated` 会固定检查完整的 17 个 Remote 方法。
+
+## 安全
+
+不要提交 OTP、访问令牌、私钥、身份状态、`.env` 或远程测试报告。
+`pnpm check:public` 是验证和打包前的公开仓库安全门禁。
+
+## 许可证
+
+插件使用 MIT 许可证；Rust IM Core 运行时依赖使用 AGPL-3.0-only，并继续适用其
+自带的许可证与声明。

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,21 @@
+# Third-party notices
+
+## AWiki Rust IM Core Node SDK
+
+`@awiki/im-core-node@0.1.2` and its target-specific optional package provide the
+Rust IM Core runtime used by the Host provider. These packages are distributed
+under AGPL-3.0-only. Each package carries its own `LICENSE`, `NOTICE.md`,
+`SOURCE.md`, CycloneDX SBOM, checksums, and build provenance. The corresponding
+source is the `AgentConnect/awiki-cli-rs2` repository at the commit recorded in
+the installed package's `provenance.json`.
+
+The native runtime includes the pinned Agent Network Protocol Rust SDK revision
+recorded in that same provenance and SBOM. The native package remains external
+to the `dsh-awiki` JavaScript bundle and is installed through the package
+manager as a normal exact-version runtime dependency.
+
+## AWiki Me icon
+
+The embedded launcher artwork in `src/client/assets.ts` comes from the AWiki Me
+application maintained by the same project team. Its use here is limited to
+identifying the AWiki integration.

package/cordis.patch.yml

@@ -0,0 +1,26 @@
+# Optional AWiki messaging for a DeepSeek Harness Web profile. Apply after
+# @deepseek-ai/dsh-base and @deepseek-ai/dsh-web-app.
+
+- insert:
+    - id: awiki
+      name: '@awiki/dsh-plugin'
+      config:
+        userServiceUrl: !!js process.env.DSH_AWIKI_USER_SERVICE_URL ?? 'https://awiki.ai'
+        userServiceDomain: !!js process.env.DSH_AWIKI_USER_SERVICE_DOMAIN ?? 'awiki.ai'
+        messageServiceUrl: !!js process.env.DSH_AWIKI_MESSAGE_SERVICE_URL ?? 'https://awiki.ai'
+        messageServiceDid: !!js process.env.DSH_AWIKI_MESSAGE_SERVICE_DID ?? 'did:wba:awiki.ai'
+        messageServicePublicUrl: !!js process.env.DSH_AWIKI_MESSAGE_SERVICE_PUBLIC_URL ?? 'https://awiki.ai'
+        allowedAttachmentOrigins: !!js JSON.parse(process.env.DSH_AWIKI_ALLOWED_ATTACHMENT_ORIGINS ?? '[]')
+        stateRoot: !!js process.env.DSH_AWIKI_STATE_ROOT
+        pollIntervalMs: !!js Number(process.env.DSH_AWIKI_POLL_INTERVAL_MS ?? '5000')
+        attachmentMaxBytes: !!js Number(process.env.DSH_AWIKI_ATTACHMENT_MAX_BYTES ?? '10485760')
+        summaryMaxInputBytes: !!js Number(process.env.DSH_AWIKI_SUMMARY_MAX_INPUT_BYTES ?? '32768')
+
+    - id: awiki-provider
+      name: '@awiki/dsh-plugin/provider'
+
+    - id: awiki-summary-provider
+      name: '@awiki/dsh-plugin/summary-provider'
+      config:
+        timeoutMs: !!js Number(process.env.DSH_AWIKI_SUMMARY_TIMEOUT_MS ?? '30000')
+        maxOutputTokens: !!js Number(process.env.DSH_AWIKI_SUMMARY_MAX_OUTPUT_TOKENS ?? '768')