npm - @chance722/dsh-inbox - Versions diffs - 0.2.7 → 0.2.8 - Mend

@chance722/dsh-inbox 0.2.7 → 0.2.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (7) hide show

package/LICENSE +21 -21
package/README.md +170 -170
package/README.zh.md +168 -168
package/cordis.patch.yml +32 -32
package/lib/index.js +13 -1
package/lib/types/shared/panel-wire.d.ts +12 -0
package/package.json +104 -104

package/LICENSE CHANGED Viewed

@@ -1,21 +1,21 @@
-MIT License
-Copyright (c) 2026 Chance722
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+Copyright (c) 2026 Chance722
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md CHANGED Viewed

@@ -1,170 +1,170 @@
-# dsh-inbox
-![dsh-inbox](https://raw.githubusercontent.com/Chance722/dsh-inbox/main/docs/assets/cover.png)
-A **local inbox plugin for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)** (`dsh`): file whatever you copy into one vault, get it back when you need it — including **by asking your assistant in conversation**.
-English | [中文](README.zh.md)
-## What it is
-The things you copy in a day — a link to read later, a screenshot, a config snippet, an account and password — end up scattered across clipboard history, bookmarks and temp files. dsh-inbox keeps them in one local vault: paste to file, automatic classification, browse and search from the sidebar — and instead of digging through it yourself, ask your assistant "what was that article about caching I saved last month?".
-Everything lands on your machine, and the model only sees a record when you ask it to look.
-## Features
-| Feature | What it does |
-|---|---|
-| **Two ways in** | `/inbox <text or link>` in the composer (attach images to carry them along), or paste / drop / pick a file in the panel |
-| **Automatic classification** | Links by platform and media type (60-odd sites: Bilibili, YouTube, WeChat, 掘金, Zhihu…), text by credential shape, images get a 疑似证件 tag at card proportions; the rest goes to the model, with a daily cap |
-| **Panel** | Filter by watch-later / category / tag, search title, text, link and note, two list densities; the detail pane edits name, category, note and tags, flags watch-later, deletes and restores — and it follows dsh's theme **and language** |
-| **Every record has a name** | A link takes the page's own headline (no model tokens), a photo or file its file name, and the name you type always wins. A page that will not be read — an anti-bot page, a dead link — leaves the address as the name rather than a guess |
-| **Who judged the category** | A coloured badge: 规则判定 (local rules) / 模型判定 (the capped model pass) / 手动判定 (yours — nothing overwrites it later) |
-| **Ask in conversation** | Ask for 收件箱 / 仓库 / inbox and the assistant searches by words, category, tag, watch-later flag or kind (ten at a time plus a count, thumbnails inline) and opens one by id (text up to 1000 characters, link, note, tags, attachments). 「打开 ↗」 under an answer jumps to that record in the 仓库 tab |
-| **Looking at a picture** | Image bytes stay out of the conversation; ask the assistant to look at one and that single image is sent — explicitly, per call |
-| **Credentials are safe** | The body is encrypted at rest, with a key derived from your master password — neither is ever written down. The list shows only the name you gave it, and plain text never reaches a conversation or a model |
-| **Two-way sync** | Point it at a WebDAV folder or an S3 bucket: changes push a few seconds later, 刷新 runs a full push-then-pull merged per record by `id` + timestamp, and emptying the recycle bin deletes the cloud copies too. Two machines see each other when they share one 「目录」 |
-| **Conversation cards** | Tool results render as dsh-inbox cards — links clickable, image markers drawn as thumbnails on your machine |
-| **Gateway quirks** | Some object-storage gateways bind each AccessKey to an "application" and identify clients by a header — so the plugin keeps **one client identity per protocol** |
-## Screenshots
-![The panel: filters on the left, list in the middle, detail on the right](https://raw.githubusercontent.com/Chance722/dsh-inbox/main/docs/assets/panel.png?v=1)
-## Two ways to use it
-**① File something from the conversation**
-`/inbox` in the composer, followed by text or a link, with images attached right there — **this never reaches the model**, it only goes into the vault. That is the way to file credentials and throwaway links.
-**② Ask for it later**
-No command, just talk:
-> which of my saved images is the mini-program code?
->
-> show me that article about caching I saved last week
->
-> list the links in my inbox I haven't read yet
-Two questions in the same conversation, on a real machine:
-![Searching by topic — the two credentials show only their names](https://raw.githubusercontent.com/Chance722/dsh-inbox/main/docs/assets/chat1.png)
-![Asking for what is flagged watch-later](https://raw.githubusercontent.com/Chance722/dsh-inbox/main/docs/assets/chat2.png)
-## Install
-Needs Node ≥ 22 and a working `dsh`; the installer brings pnpm along when your machine does not have it. **Windows only so far** — macOS and Linux are unverified.
-```powershell
-# install (`dsh web` is `dsh --profile web`, so this is the profile you already start)
-npx @chance722/dsh-inbox init --profile web --install-pnpm
-# never run dsh on this machine? create the profile in the same command
-npx @chance722/dsh-inbox init --profile web --create-profile --install-pnpm
-# update (init only installs and wires things up — re-running it never upgrades;
-# minutes after a release, write the exact version instead: @0.2.7)
-dsh plugin --profile web add @chance722/dsh-inbox@latest
-```
-**Restart dsh** afterwards, then start it as usual. **Inbox** is in the left rail, and a new session's assistant can look things up ("what links in my inbox haven't I read yet?").
-`init` also copies dsh's shipped `standard` preset to `~/.dsh/.agent-presets/inbox/` with this plugin added, and points your default preset at it — that is what lets the assistant see the inbox tools. It becomes a snapshot that will not follow later dsh upgrades; both it and the profile are reversible (see Uninstall).
-To keep your daily dsh untouched, give the plugin its own profile and port: `npx @chance722/dsh-inbox init --create-profile`, then `dsh --profile inbox --no-open --port 3102`.
-Other flags: `--profile <name>`, `--install-pnpm`, `--no-default`, `--help`.
-### From a local checkout
-```powershell
-git clone <this repo> dsh-inbox ; cd dsh-inbox
-pnpm install ; pnpm build
-node lib/cli.js init --package <absolute path to this repo>
-```
-### Uninstall
-```powershell
-# 1. remove the package from the profile you installed it into
-#    (also drops it from dsh.profile.bundles)
-dsh plugin --profile <that profile> remove @chance722/dsh-inbox
-# 2. delete what init created
-rm -r ~/.dsh/.agent-presets/inbox      # the preset copy
-# default preset: delete agent-presets.default in ~/.dsh/settings.yaml (falls back to the
-# deployment default) or set it to standard; every init left a settings.yaml.bak-* backup
-# 3. and the profile itself, if you made one just for this
-rm -r ~/.dsh/profiles/<that profile>
-```
-**Uninstalling does not delete your vault.** To remove the records too: `rm -r ~/.dsh/storages/dsh_inbox`.
-## Where things live
-Everything under `%DSH_HOME%` (`C:\Users\<you>\.dsh` on Windows):
-| What | Where |
-|---|---|
-| Records: text, links, category, note, tags, watch-later… | `storages\dsh_inbox\items\*.json`, one file each |
-| Attachment index (mime / size / original name) | `storages\dsh_inbox\attachments\*.json` |
-| The **bytes** of images, videos and files | `attachments\` — dsh's own content-addressed store, never auto-deleted |
-| Remote password / S3 AccessKey Secret | dsh's credential store, `.credentials.yaml` |
-| Remote settings (URL, bucket, client identity…) | dsh's own settings |
-### What the remote looks like
-With a remote configured and `/inbox` as the directory:
-| Remote path | What it is |
-|---|---|
-| `inbox/<whatever you drop>` | The **drop folder**: any device drops files here and this one ingests them |
-| `inbox/sync/items/<record id>.json` | One record, **machine-readable** — the source of truth for sync |
-| `inbox/sync/items/<record id>.txt` | The same record, **readable** (text, note, which attachments it points at) |
-| `inbox/sync/attachments/<attachment id>.<ext>` | Attachment **bytes** (images, video, PDFs open as themselves) |
-| `inbox/sync/attachments/<attachment id>.meta.json` | The attachment's metadata (original name, dimensions, size, digest) |
-| A 0-byte key ending in `/` | A folder marker the cloud drive made itself, not us |
-### How syncing works
-- **Automatic**: a push seconds after a capture or edit (debounced — several quick saves are one push); 「刷新」 is a full sync: push → pull → re-read the list.
-- **Merging**: per `id` + timestamp, the newer write wins, no conflict copies; needed attachment bytes come down with the record.
-- **Two machines**: one shared 「目录」 (blank, `/` and `inbox` are the same). Records a machine left under an older directory come back if you tick **Merge other sync directories too** in the settings.
-- **Deleting**: 「删除」 only moves a record to the bin and the other devices are told it is gone; emptying the bin deletes the cloud copy as well, and it stays deleted — a copy sitting in another sync directory cannot file it back in.
-## Privacy and security
-- **Credential bodies are encrypted at rest** (AES-256-GCM, key derived from your master password). Neither the password nor the key is written down: the vault locks on every restart and you unlock it under 设置 → 账密加密, and a forgotten password means unrecoverable ciphertext. With no master password set, a credential is **refused rather than stored in the clear**.
-- **That covers the body only**: notes, categories, tags, timestamps and attachment **bytes** are not encrypted — a key inside a pasted file is still a key inside a file.
-- **Masked where it matters**: a credential is listed by the name you gave it, and its plain text never reaches a conversation or a model.
-- **Pictures**: classification does send an image to the model, and the conversation gets an `[attachment:id]` marker — that one image is sent only when you explicitly ask the assistant to look at it.
-- **The model cannot see your vault** unless you ask it to look, and classification requests are redacted first.
-- **Your remote needs access control**: only credential bodies are ciphertext up there — text, links, notes and attachment bytes are in the clear, and the master password and key never sync.
-- **One thing the install changes outside the panel**: reading a pasted link's headline is the plugin's only outbound request (one GET, only for links captured on this machine, never for links that came through sync). It goes out with a **browser-shaped** identity, an override of `web-fetch-http.userAgent` shipped in this package's `cordis.patch.yml`. That identity is the whole profile's, the model's own web tools included; **your own `cordis.patch.yml` overrides it**. Details: [docs/help/link-title-fetch.md](docs/help/link-title-fetch.md).
-## Development
-```powershell
-pnpm install
-pnpm build        # lib/index.js (host) + lib/client.js (panel) + lib/cli.js (init) + lib/types
-pnpm typecheck
-pnpm test         # vitest
-```
-Client-side changes need `pnpm build` (dsh's client-hmr reloads the page); host-side changes need a restart. Details in [docs/help/dev-setup.md](docs/help/dev-setup.md), milestones in the [development bus](docs/feature/dev-bus.md).
-To switch the profile you actually run between the **published package** and **this checkout** (default profile `web`; set `DSH_PROFILE` for another):
-```powershell
-pnpm dev:status    # which one is in use right now
-pnpm dev:npm       # point it at the published version
-pnpm dev:local     # point it back here (builds first, then links)
-```
-## License
-MIT
+# dsh-inbox
+![dsh-inbox](https://raw.githubusercontent.com/Chance722/dsh-inbox/main/docs/assets/banner.png)
+A **local inbox plugin for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)** (`dsh`): file whatever you copy into one vault, get it back when you need it — including **by asking your assistant in conversation**.
+English | [中文](README.zh.md)
+## What it is
+The things you copy in a day — a link to read later, a screenshot, a config snippet, an account and password — end up scattered across clipboard history, bookmarks and temp files. dsh-inbox keeps them in one local vault: paste to file, automatic classification, browse and search from the sidebar — and instead of digging through it yourself, ask your assistant "what was that article about caching I saved last month?".
+Everything lands on your machine, and the model only sees a record when you ask it to look.
+## Features
+| Feature | What it does |
+|---|---|
+| **Two ways in** | `/inbox <text or link>` in the composer (attach images to carry them along), or paste / drop / pick a file in the panel |
+| **Automatic classification** | Links by platform and media type (60-odd sites: Bilibili, YouTube, WeChat, 掘金, Zhihu…), text by credential shape, images get a 疑似证件 tag at card proportions; the rest goes to the model, with a daily cap |
+| **Panel** | Filter by watch-later / category / tag, search title, text, link and note, two list densities; the detail pane edits name, category, note and tags, flags watch-later, deletes and restores — and it follows dsh's theme **and language** |
+| **Every record has a name** | A link takes the page's own headline (no model tokens), a photo or file its file name, and the name you type always wins. A page that will not be read — an anti-bot page, a dead link — leaves the address as the name rather than a guess |
+| **Who judged the category** | A coloured badge: 规则判定 (local rules) / 模型判定 (the capped model pass) / 手动判定 (yours — nothing overwrites it later) |
+| **Ask in conversation** | Ask for 收件箱 / 仓库 / inbox and the assistant searches by words, category, tag, watch-later flag or kind (ten at a time plus a count, thumbnails inline) and opens one by id (text up to 1000 characters, link, note, tags, attachments). 「打开 ↗」 under an answer jumps to that record in the 仓库 tab |
+| **Looking at a picture** | Image bytes stay out of the conversation; ask the assistant to look at one and that single image is sent — explicitly, per call |
+| **Credentials are safe** | The body is encrypted at rest, with a key derived from your master password — neither is ever written down. The list shows only the name you gave it, and plain text never reaches a conversation or a model |
+| **Two-way sync** | Point it at a WebDAV folder or an S3 bucket: changes push a few seconds later, 刷新 runs a full push-then-pull merged per record by `id` + timestamp, and emptying the recycle bin deletes the cloud copies too. Two machines see each other when they share one 「目录」 |
+| **Conversation cards** | Tool results render as dsh-inbox cards — links clickable, image markers drawn as thumbnails on your machine |
+| **Gateway quirks** | Some object-storage gateways bind each AccessKey to an "application" and identify clients by a header — so the plugin keeps **one client identity per protocol** |
+## Screenshots
+![The panel: filters on the left, list in the middle, detail on the right](https://raw.githubusercontent.com/Chance722/dsh-inbox/main/docs/assets/panel.png?v=1)
+## Two ways to use it
+**① File something from the conversation**
+`/inbox` in the composer, followed by text or a link, with images attached right there — **this never reaches the model**, it only goes into the vault. That is the way to file credentials and throwaway links.
+**② Ask for it later**
+No command, just talk:
+> which of my saved images is the mini-program code?
+>
+> show me that article about caching I saved last week
+>
+> list the links in my inbox I haven't read yet
+Two questions in the same conversation, on a real machine:
+![Searching by topic — the two credentials show only their names](https://raw.githubusercontent.com/Chance722/dsh-inbox/main/docs/assets/chat1.png)
+![Asking for what is flagged watch-later](https://raw.githubusercontent.com/Chance722/dsh-inbox/main/docs/assets/chat2.png)
+## Install
+Needs Node ≥ 22 and a working `dsh`; the installer brings pnpm along when your machine does not have it. **Windows only so far** — macOS and Linux are unverified.
+```powershell
+# install (`dsh web` is `dsh --profile web`, so this is the profile you already start)
+npx @chance722/dsh-inbox init --profile web --install-pnpm
+# never run dsh on this machine? create the profile in the same command
+npx @chance722/dsh-inbox init --profile web --create-profile --install-pnpm
+# update (init only installs and wires things up — re-running it never upgrades;
+# minutes after a release, write the exact version instead: @0.2.8)
+dsh plugin --profile web add @chance722/dsh-inbox@latest
+```
+**Restart dsh** afterwards, then start it as usual. **Inbox** is in the left rail, and a new session's assistant can look things up ("what links in my inbox haven't I read yet?").
+`init` also copies dsh's shipped `standard` preset to `~/.dsh/.agent-presets/inbox/` with this plugin added, and points your default preset at it — that is what lets the assistant see the inbox tools. It becomes a snapshot that will not follow later dsh upgrades; both it and the profile are reversible (see Uninstall).
+To keep your daily dsh untouched, give the plugin its own profile and port: `npx @chance722/dsh-inbox init --create-profile`, then `dsh --profile inbox --no-open --port 3102`.
+Other flags: `--profile <name>`, `--install-pnpm`, `--no-default`, `--help`.
+### From a local checkout
+```powershell
+git clone <this repo> dsh-inbox ; cd dsh-inbox
+pnpm install ; pnpm build
+node lib/cli.js init --package <absolute path to this repo>
+```
+### Uninstall
+```powershell
+# 1. remove the package from the profile you installed it into
+#    (also drops it from dsh.profile.bundles)
+dsh plugin --profile <that profile> remove @chance722/dsh-inbox
+# 2. delete what init created
+rm -r ~/.dsh/.agent-presets/inbox      # the preset copy
+# default preset: delete agent-presets.default in ~/.dsh/settings.yaml (falls back to the
+# deployment default) or set it to standard; every init left a settings.yaml.bak-* backup
+# 3. and the profile itself, if you made one just for this
+rm -r ~/.dsh/profiles/<that profile>
+```
+**Uninstalling does not delete your vault.** To remove the records too: `rm -r ~/.dsh/storages/dsh_inbox`.
+## Where things live
+Everything under `%DSH_HOME%` (`C:\Users\<you>\.dsh` on Windows):
+| What | Where |
+|---|---|
+| Records: text, links, category, note, tags, watch-later… | `storages\dsh_inbox\items\*.json`, one file each |
+| Attachment index (mime / size / original name) | `storages\dsh_inbox\attachments\*.json` |
+| The **bytes** of images, videos and files | `attachments\` — dsh's own content-addressed store, never auto-deleted |
+| Remote password / S3 AccessKey Secret | dsh's credential store, `.credentials.yaml` |
+| Remote settings (URL, bucket, client identity…) | dsh's own settings |
+### What the remote looks like
+With a remote configured and `/inbox` as the directory:
+| Remote path | What it is |
+|---|---|
+| `inbox/<whatever you drop>` | The **drop folder**: any device drops files here and this one ingests them |
+| `inbox/sync/items/<record id>.json` | One record, **machine-readable** — the source of truth for sync |
+| `inbox/sync/items/<record id>.txt` | The same record, **readable** (text, note, which attachments it points at) |
+| `inbox/sync/attachments/<attachment id>.<ext>` | Attachment **bytes** (images, video, PDFs open as themselves) |
+| `inbox/sync/attachments/<attachment id>.meta.json` | The attachment's metadata (original name, dimensions, size, digest) |
+| A 0-byte key ending in `/` | A folder marker the cloud drive made itself, not us |
+### How syncing works
+- **Automatic**: a push seconds after a capture or edit (debounced — several quick saves are one push); 「刷新」 is a full sync: push → pull → re-read the list.
+- **Merging**: per `id` + timestamp, the newer write wins, no conflict copies; needed attachment bytes come down with the record.
+- **Two machines**: one shared 「目录」 (blank, `/` and `inbox` are the same). Records a machine left under an older directory come back if you tick **Merge other sync directories too** in the settings.
+- **Deleting**: 「删除」 only moves a record to the bin and the other devices are told it is gone; emptying the bin deletes the cloud copy as well, and it stays deleted — a copy sitting in another sync directory cannot file it back in.
+## Privacy and security
+- **Credential bodies are encrypted at rest** (AES-256-GCM, key derived from your master password). Neither the password nor the key is written down: the vault locks on every restart and you unlock it under 设置 → 账密加密, and a forgotten password means unrecoverable ciphertext. With no master password set, a credential is **refused rather than stored in the clear**.
+- **That covers the body only**: notes, categories, tags, timestamps and attachment **bytes** are not encrypted — a key inside a pasted file is still a key inside a file.
+- **Masked where it matters**: a credential is listed by the name you gave it, and its plain text never reaches a conversation or a model.
+- **Pictures**: classification does send an image to the model, and the conversation gets an `[attachment:id]` marker — that one image is sent only when you explicitly ask the assistant to look at it.
+- **The model cannot see your vault** unless you ask it to look, and classification requests are redacted first.
+- **Your remote needs access control**: only credential bodies are ciphertext up there — text, links, notes and attachment bytes are in the clear, and the master password and key never sync.
+- **One thing the install changes outside the panel**: reading a pasted link's headline is the plugin's only outbound request (one GET, only for links captured on this machine, never for links that came through sync). It goes out with a **browser-shaped** identity, an override of `web-fetch-http.userAgent` shipped in this package's `cordis.patch.yml`. That identity is the whole profile's, the model's own web tools included; **your own `cordis.patch.yml` overrides it**. Details: [docs/help/link-title-fetch.md](docs/help/link-title-fetch.md).
+## Development
+```powershell
+pnpm install
+pnpm build        # lib/index.js (host) + lib/client.js (panel) + lib/cli.js (init) + lib/types
+pnpm typecheck
+pnpm test         # vitest
+```
+Client-side changes need `pnpm build` (dsh's client-hmr reloads the page); host-side changes need a restart. Details in [docs/help/dev-setup.md](docs/help/dev-setup.md), milestones in the [development bus](docs/feature/dev-bus.md).
+To switch the profile you actually run between the **published package** and **this checkout** (default profile `web`; set `DSH_PROFILE` for another):
+```powershell
+pnpm dev:status    # which one is in use right now
+pnpm dev:npm       # point it at the published version
+pnpm dev:local     # point it back here (builds first, then links)
+```
+## License
+MIT

package/README.zh.md CHANGED Viewed

@@ -1,168 +1,168 @@
-# dsh-inbox
-![dsh-inbox](https://raw.githubusercontent.com/Chance722/dsh-inbox/main/docs/assets/cover.png)
-给 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)（`dsh`）的**本地收件箱插件**：把随手复制的东西收进一个仓库，需要的时候找得回来——包括**在对话里让助手替你取**。
-[English](README.md) | 中文
-## 它是什么
-一天里复制过的东西——一条待读的链接、一张截图、一段配置、一个账号密码——散落在剪贴板历史、收藏夹和临时文件里。dsh-inbox 把它们收进一个本地仓库：粘贴即存、自动分类、侧栏里能翻能搜；要找回什么，直接问助手「我上个月存的那篇讲缓存的文章呢」。
-数据全部落在本机；只有你让助手查的时候，模型才看得到内容。
-## 主要功能
-| 功能 | 说明 |
-|---|---|
-| **两个入口** | 输入框里 `/inbox <文字或链接>`（图片附在输入框上一起收），或面板里粘贴 / 拖拽 / 选择文件 |
-| **自动分类** | 链接按平台与类型分（60 多个站点：B 站、YouTube、公众号、掘金、知乎…）、文本按密钥形状分、图片按比例加「疑似证件」标签；规则判不出的交给模型兜底，有每日上限 |
-| **面板** | 待看 / 类目 / 标签筛选 + 跨标题正文链接备注的搜索；两种列表密度；详情里能改名称、类目、备注、标签，能标待看、删除与恢复；**跟着 dsh 的主题和语言走** |
-| **每条都有名字** | 链接抓页面自己的标题（不花模型 token）、图片文件用原文件名，你自己起的名字永远优先。读不到的页面——反爬页、死链——名字位留链接本身，不猜一个 |
-| **类目是谁判的** | 类目旁的颜色标签：规则判定 / 模型判定 / 手动判定（你改过的，后续不会覆盖） |
-| **对话里取回** | 问「我的收件箱 / 仓库 / inbox 里有哪些还没看的链接」即可，助手按关键词/类目/标签/待看/类型查（最多 10 条 + 还剩几条，带图的直接显示缩略图），按 id 打开一条（正文最多 1000 字、链接、备注、标签、附件信息）；回答上方的「打开 ↗」会跳到右侧「仓库」里那一条 |
-| **看图** | 默认图片字节不进对话；你说「帮我看这张图是什么」时，才会把那一张发给自己看（一次性、显式要） |
-| **密钥安全** | 账密正文**加密落盘**（主密码派生密钥，两者都不落盘）；列表只显示你起的名字；明文永不进对话、永不发给模型 |
-| **双向同步** | 配 WebDAV 目录或 S3 桶：改动后几秒自动推送，「刷新」= 先推后拉完整同步、按 `id` + 时间合并；清空回收站连云端一起删；两台机器用同一个「目录」就互通 |
-| **对话卡片** | 工具结果渲染成卡片：链接可点，图片标记在本机渲染成缩略图 |
-| **网关兼容** | 有些对象存储网关把 AccessKey 绑在「应用」上、按客户端标识认人——插件**按协议各存一份客户端标识** |
-## 界面
-![面板：左侧筛选、中间列表、右侧详情](https://raw.githubusercontent.com/Chance722/dsh-inbox/main/docs/assets/panel.png?v=1)
-## 两种用法
-**① 存：在对话里转存**
-输入框里写 `/inbox` 再跟文字或链接，图片直接附在输入框上——**这条命令不会发给模型**，只进仓库。适合存账号密码、临时链接这类东西。
-**② 取：在对话里问**
-不用记命令，正常说话就行：
-> 我收件库里那个小程序码是哪张？
->
-> 上周存的讲缓存的文章给我看看
->
-> 帮我把还没看过的链接列一下
-同一段对话里的两次提问（真机截图）：
-![按主题查仓库——密钥那两行只显示你起的名字](https://raw.githubusercontent.com/Chance722/dsh-inbox/main/docs/assets/chat1.png)
-![问「有没有待看的」：按「待看」标记把那一条取回来，带链接与存入时间](https://raw.githubusercontent.com/Chance722/dsh-inbox/main/docs/assets/chat2.png)
-## 安装
-前置：Node ≥ 22 和一个能用的 `dsh`；没装 pnpm 时安装命令会顺手装好。**目前只在 Windows 上验收过**，macOS / Linux 未验证。
-```powershell
-# 安装（`dsh web` 就是 `dsh --profile web`，所以装进你日常启动的那个 profile）
-npx @chance722/dsh-inbox init --profile web --install-pnpm
-# 全新机器（还没跑过 dsh、没有这个 profile）多带一个 --create-profile
-npx @chance722/dsh-inbox init --profile web --create-profile --install-pnpm
-# 更新（init 只管装和接线，重复跑不会升级；刚发布的几分钟内请写确切版本：@0.2.7）
-dsh plugin --profile web add @chance722/dsh-inbox@latest
-```
-装完**重启 dsh**，然后照旧启动。左栏出现 **Inbox**；新会话里问「我的收件箱里有哪些还没看的链接」，助手就会去查。
-`init` 还会把 dsh 自带的 `standard` preset 复制到 `~/.dsh/.agent-presets/inbox/` 并加上本插件、把默认 preset 指向它——助手能看见收件箱工具就是靠这一步。那份快照不会跟着 dsh 以后升级 `standard` 一起变；它和 profile 都能退掉（见「卸载」）。
-想让日常 dsh 保持干净：`npx @chance722/dsh-inbox init --create-profile`，然后 `dsh --profile inbox --no-open --port 3102`。
-其它选项：`--profile <名字>`、`--install-pnpm`、`--no-default`、`--help`。
-### 从本地仓库装
-```powershell
-git clone <本仓库> dsh-inbox ; cd dsh-inbox
-pnpm install ; pnpm build
-node lib/cli.js init --package <本仓库的绝对路径>
-```
-### 卸载
-```powershell
-# 1. 从你装进去的那个 profile 里摘掉（同时会从 dsh.profile.bundles 移除）
-dsh plugin --profile <你装的 profile> remove @chance722/dsh-inbox
-# 2. 删掉 init 建的东西
-rm -r ~/.dsh/.agent-presets/inbox      # 那个 preset 副本
-# 默认 preset：把 ~/.dsh/settings.yaml 里 agent-presets.default 删掉（继承部署默认），
-# 或改成 standard；init 每次都留了 settings.yaml.bak-* 备份，也可以直接还原
-# 3. 想连这个 profile 一起删（只为这个插件建过才需要）
-rm -r ~/.dsh/profiles/<你装的 profile>
-```
-**卸载不会删掉你的仓库。** 连记录一起删：`rm -r ~/.dsh/storages/dsh_inbox`。
-## 东西存在哪
-全部在 `%DSH_HOME%` 下（Windows 上就是 `C:\Users\<你>\.dsh`）：
-| 什么 | 在哪 |
-|---|---|
-| 记录：文本、链接、类目、备注、标签、待看… | `storages\dsh_inbox\items\*.json`（一条一个文件） |
-| 附件索引（mime / 尺寸 / 原文件名） | `storages\dsh_inbox\attachments\*.json` |
-| 图片 / 视频 / 文件的**字节** | `attachments\`（dsh 自己的附件仓库，按内容寻址，永不自动删） |
-| 远端密码 / S3 AccessKey Secret | dsh 的凭证库 `.credentials.yaml` |
-| 远端设置（地址、桶、客户端标识…） | dsh 的 settings |
-### 云端长什么样
-配了远端（WebDAV 目录或 S3 桶）、目录填 `/inbox` 时：
-| 远端路径 | 是什么 |
-|---|---|
-| `inbox/<你扔的文件>` | **投放区**：任何设备往这儿扔文件，本机拉取时读它们并入库 |
-| `inbox/sync/items/<记录 id>.json` | 一条记录的**机器可读版**（同步的真相来源） |
-| `inbox/sync/items/<记录 id>.txt` | 同一条记录的**可读版**（云盘里直接能看：正文、备注、附件指向） |
-| `inbox/sync/attachments/<附件 id>.<扩展名>` | 附件**字节**（图片 / 视频 / PDF 直接能打开） |
-| `inbox/sync/attachments/<附件 id>.meta.json` | 附件元数据（原文件名、宽高、字节数、摘要） |
-| 0 字节、以 `/` 结尾的 key | 云盘自己建的目录占位，不是插件写的 |
-### 同步怎么走
-- **自动**：入库或改动后几秒推一次（防抖）；「刷新」= 先推 → 再拉 → 重读列表。
-- **合并**：按 `id` + 更新时间逐条判——谁新谁赢，不留冲突副本；需要的附件字节一起下来。
-- **两台机器**：用同一个「目录」就互通（留空 / `/` / `inbox` 同义）。换过目录的机器留在别处的记录，可以在设置里打开「**同时合并别的同步目录**」一起拉回来。
-- **删除**：「删除」只进回收站，别的设备会知道它被删了；「清空回收站」才连云端那份一起删，而且**清掉就是清掉**——另一套同步目录里那份副本不会再把它塞回来。
-## 隐私与安全
-- **账密加密落盘**：账密正文以密文保存（AES-256-GCM，密钥由主密码派生）。主密码和密钥都不落盘——每次重启都要在「设置 → 账密加密」解锁一次；密码忘了就解不开，没有找回。没设主密码时，账密**不会被存进去**。
-- **加密的边界**：只加密账密的**正文**。备注、类目、标签、时间与附件的**字节**不在内——附件里装着密钥，它就是明文。
-- **列表与对话脱敏**：密钥类记录在列表里只显示你起的名字；明文永不进对话、永不发给模型。
-- **图片**：分类时会把图片发给模型判断；对话里默认只回 `[attachment:id]` 标记。只有你明确让助手「看这张图」时，它才会把那一张发给自己看。
-- **模型看不到你的仓库**，除非你让它查（它调工具时才读得到），且分类请求先过脱敏。
-- **云端要有访问控制**：同步上去的内容里只有账密正文是密文，其余（文本、链接、备注、附件字节）是明文；主密码与密钥从不同步。
-- **装它会改到面板之外的一处**：抓链接标题是本插件唯一的对外请求（一次 GET，只在本机捕获的链接上发，同步拉进来的不抓）。它用的是**浏览器形状**的身份，由本包的 `cordis.patch.yml` 覆盖 `web-fetch-http.userAgent` 写成。这层身份是整个 profile 的，模型的 web 工具也一起用；**你自己的 `cordis.patch.yml` 覆盖得掉**。细节见 [docs/help/link-title-fetch.md](docs/help/link-title-fetch.md)。
-## 开发
-```powershell
-pnpm install
-pnpm build        # lib/index.js（宿主）+ lib/client.js（面板）+ lib/cli.js（init）+ lib/types
-pnpm typecheck
-pnpm test         # vitest
-```
-改客户端代码：`pnpm build` 后页面会自己重载（dsh 的 client-hmr）；改宿主代码要重启服务。细节见 [docs/help/dev-setup.md](docs/help/dev-setup.md)，阶段记录在[开发总线](docs/feature/dev-bus.md)。
-日常想在**线上发布版**和**本地改动**之间切换（默认 profile 是 `web`，换 profile 加 `DSH_PROFILE`）：
-```powershell
-pnpm dev:status    # 现在用的是哪一个：本仓库 / 线上包
-pnpm dev:npm       # 切到 npm 上发布的版本（体验发布版）
-pnpm dev:local     # 切回当前仓库（会先 pnpm build 再链接）
-```
-## 许可
-MIT
+# dsh-inbox
+![dsh-inbox](https://raw.githubusercontent.com/Chance722/dsh-inbox/main/docs/assets/banner.png)
+给 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)（`dsh`）的**本地收件箱插件**：把随手复制的东西收进一个仓库，需要的时候找得回来——包括**在对话里让助手替你取**。
+[English](README.md) | 中文
+## 它是什么
+一天里复制过的东西——一条待读的链接、一张截图、一段配置、一个账号密码——散落在剪贴板历史、收藏夹和临时文件里。dsh-inbox 把它们收进一个本地仓库：粘贴即存、自动分类、侧栏里能翻能搜；要找回什么，直接问助手「我上个月存的那篇讲缓存的文章呢」。
+数据全部落在本机；只有你让助手查的时候，模型才看得到内容。
+## 主要功能
+| 功能 | 说明 |
+|---|---|
+| **两个入口** | 输入框里 `/inbox <文字或链接>`（图片附在输入框上一起收），或面板里粘贴 / 拖拽 / 选择文件 |
+| **自动分类** | 链接按平台与类型分（60 多个站点：B 站、YouTube、公众号、掘金、知乎…）、文本按密钥形状分、图片按比例加「疑似证件」标签；规则判不出的交给模型兜底，有每日上限 |
+| **面板** | 待看 / 类目 / 标签筛选 + 跨标题正文链接备注的搜索；两种列表密度；详情里能改名称、类目、备注、标签，能标待看、删除与恢复；**跟着 dsh 的主题和语言走** |
+| **每条都有名字** | 链接抓页面自己的标题（不花模型 token）、图片文件用原文件名，你自己起的名字永远优先。读不到的页面——反爬页、死链——名字位留链接本身，不猜一个 |
+| **类目是谁判的** | 类目旁的颜色标签：规则判定 / 模型判定 / 手动判定（你改过的，后续不会覆盖） |
+| **对话里取回** | 问「我的收件箱 / 仓库 / inbox 里有哪些还没看的链接」即可，助手按关键词/类目/标签/待看/类型查（最多 10 条 + 还剩几条，带图的直接显示缩略图），按 id 打开一条（正文最多 1000 字、链接、备注、标签、附件信息）；回答上方的「打开 ↗」会跳到右侧「仓库」里那一条 |
+| **看图** | 默认图片字节不进对话；你说「帮我看这张图是什么」时，才会把那一张发给自己看（一次性、显式要） |
+| **密钥安全** | 账密正文**加密落盘**（主密码派生密钥，两者都不落盘）；列表只显示你起的名字；明文永不进对话、永不发给模型 |
+| **双向同步** | 配 WebDAV 目录或 S3 桶：改动后几秒自动推送，「刷新」= 先推后拉完整同步、按 `id` + 时间合并；清空回收站连云端一起删；两台机器用同一个「目录」就互通 |
+| **对话卡片** | 工具结果渲染成卡片：链接可点，图片标记在本机渲染成缩略图 |
+| **网关兼容** | 有些对象存储网关把 AccessKey 绑在「应用」上、按客户端标识认人——插件**按协议各存一份客户端标识** |
+## 界面
+![面板：左侧筛选、中间列表、右侧详情](https://raw.githubusercontent.com/Chance722/dsh-inbox/main/docs/assets/panel.png?v=1)
+## 两种用法
+**① 存：在对话里转存**
+输入框里写 `/inbox` 再跟文字或链接，图片直接附在输入框上——**这条命令不会发给模型**，只进仓库。适合存账号密码、临时链接这类东西。
+**② 取：在对话里问**
+不用记命令，正常说话就行：
+> 我收件库里那个小程序码是哪张？
+>
+> 上周存的讲缓存的文章给我看看
+>
+> 帮我把还没看过的链接列一下
+同一段对话里的两次提问（真机截图）：
+![按主题查仓库——密钥那两行只显示你起的名字](https://raw.githubusercontent.com/Chance722/dsh-inbox/main/docs/assets/chat1.png)
+![问「有没有待看的」：按「待看」标记把那一条取回来，带链接与存入时间](https://raw.githubusercontent.com/Chance722/dsh-inbox/main/docs/assets/chat2.png)
+## 安装
+前置：Node ≥ 22 和一个能用的 `dsh`；没装 pnpm 时安装命令会顺手装好。**目前只在 Windows 上验收过**，macOS / Linux 未验证。
+```powershell
+# 安装（`dsh web` 就是 `dsh --profile web`，所以装进你日常启动的那个 profile）
+npx @chance722/dsh-inbox init --profile web --install-pnpm
+# 全新机器（还没跑过 dsh、没有这个 profile）多带一个 --create-profile
+npx @chance722/dsh-inbox init --profile web --create-profile --install-pnpm
+# 更新（init 只管装和接线，重复跑不会升级；刚发布的几分钟内请写确切版本：@0.2.8）
+dsh plugin --profile web add @chance722/dsh-inbox@latest
+```
+装完**重启 dsh**，然后照旧启动。左栏出现 **Inbox**；新会话里问「我的收件箱里有哪些还没看的链接」，助手就会去查。
+`init` 还会把 dsh 自带的 `standard` preset 复制到 `~/.dsh/.agent-presets/inbox/` 并加上本插件、把默认 preset 指向它——助手能看见收件箱工具就是靠这一步。那份快照不会跟着 dsh 以后升级 `standard` 一起变；它和 profile 都能退掉（见「卸载」）。
+想让日常 dsh 保持干净：`npx @chance722/dsh-inbox init --create-profile`，然后 `dsh --profile inbox --no-open --port 3102`。
+其它选项：`--profile <名字>`、`--install-pnpm`、`--no-default`、`--help`。
+### 从本地仓库装
+```powershell
+git clone <本仓库> dsh-inbox ; cd dsh-inbox
+pnpm install ; pnpm build
+node lib/cli.js init --package <本仓库的绝对路径>
+```
+### 卸载
+```powershell
+# 1. 从你装进去的那个 profile 里摘掉（同时会从 dsh.profile.bundles 移除）
+dsh plugin --profile <你装的 profile> remove @chance722/dsh-inbox
+# 2. 删掉 init 建的东西
+rm -r ~/.dsh/.agent-presets/inbox      # 那个 preset 副本
+# 默认 preset：把 ~/.dsh/settings.yaml 里 agent-presets.default 删掉（继承部署默认），
+# 或改成 standard；init 每次都留了 settings.yaml.bak-* 备份，也可以直接还原
+# 3. 想连这个 profile 一起删（只为这个插件建过才需要）
+rm -r ~/.dsh/profiles/<你装的 profile>
+```
+**卸载不会删掉你的仓库。** 连记录一起删：`rm -r ~/.dsh/storages/dsh_inbox`。
+## 东西存在哪
+全部在 `%DSH_HOME%` 下（Windows 上就是 `C:\Users\<你>\.dsh`）：
+| 什么 | 在哪 |
+|---|---|
+| 记录：文本、链接、类目、备注、标签、待看… | `storages\dsh_inbox\items\*.json`（一条一个文件） |
+| 附件索引（mime / 尺寸 / 原文件名） | `storages\dsh_inbox\attachments\*.json` |
+| 图片 / 视频 / 文件的**字节** | `attachments\`（dsh 自己的附件仓库，按内容寻址，永不自动删） |
+| 远端密码 / S3 AccessKey Secret | dsh 的凭证库 `.credentials.yaml` |
+| 远端设置（地址、桶、客户端标识…） | dsh 的 settings |
+### 云端长什么样
+配了远端（WebDAV 目录或 S3 桶）、目录填 `/inbox` 时：
+| 远端路径 | 是什么 |
+|---|---|
+| `inbox/<你扔的文件>` | **投放区**：任何设备往这儿扔文件，本机拉取时读它们并入库 |
+| `inbox/sync/items/<记录 id>.json` | 一条记录的**机器可读版**（同步的真相来源） |
+| `inbox/sync/items/<记录 id>.txt` | 同一条记录的**可读版**（云盘里直接能看：正文、备注、附件指向） |
+| `inbox/sync/attachments/<附件 id>.<扩展名>` | 附件**字节**（图片 / 视频 / PDF 直接能打开） |
+| `inbox/sync/attachments/<附件 id>.meta.json` | 附件元数据（原文件名、宽高、字节数、摘要） |
+| 0 字节、以 `/` 结尾的 key | 云盘自己建的目录占位，不是插件写的 |
+### 同步怎么走
+- **自动**：入库或改动后几秒推一次（防抖）；「刷新」= 先推 → 再拉 → 重读列表。
+- **合并**：按 `id` + 更新时间逐条判——谁新谁赢，不留冲突副本；需要的附件字节一起下来。
+- **两台机器**：用同一个「目录」就互通（留空 / `/` / `inbox` 同义）。换过目录的机器留在别处的记录，可以在设置里打开「**同时合并别的同步目录**」一起拉回来。
+- **删除**：「删除」只进回收站，别的设备会知道它被删了；「清空回收站」才连云端那份一起删，而且**清掉就是清掉**——另一套同步目录里那份副本不会再把它塞回来。
+## 隐私与安全
+- **账密加密落盘**：账密正文以密文保存（AES-256-GCM，密钥由主密码派生）。主密码和密钥都不落盘——每次重启都要在「设置 → 账密加密」解锁一次；密码忘了就解不开，没有找回。没设主密码时，账密**不会被存进去**。
+- **加密的边界**：只加密账密的**正文**。备注、类目、标签、时间与附件的**字节**不在内——附件里装着密钥，它就是明文。
+- **列表与对话脱敏**：密钥类记录在列表里只显示你起的名字；明文永不进对话、永不发给模型。
+- **图片**：分类时会把图片发给模型判断；对话里默认只回 `[attachment:id]` 标记。只有你明确让助手「看这张图」时，它才会把那一张发给自己看。
+- **模型看不到你的仓库**，除非你让它查（它调工具时才读得到），且分类请求先过脱敏。
+- **云端要有访问控制**：同步上去的内容里只有账密正文是密文，其余（文本、链接、备注、附件字节）是明文；主密码与密钥从不同步。
+- **装它会改到面板之外的一处**：抓链接标题是本插件唯一的对外请求（一次 GET，只在本机捕获的链接上发，同步拉进来的不抓）。它用的是**浏览器形状**的身份，由本包的 `cordis.patch.yml` 覆盖 `web-fetch-http.userAgent` 写成。这层身份是整个 profile 的，模型的 web 工具也一起用；**你自己的 `cordis.patch.yml` 覆盖得掉**。细节见 [docs/help/link-title-fetch.md](docs/help/link-title-fetch.md)。
+## 开发
+```powershell
+pnpm install
+pnpm build        # lib/index.js（宿主）+ lib/client.js（面板）+ lib/cli.js（init）+ lib/types
+pnpm typecheck
+pnpm test         # vitest
+```
+改客户端代码：`pnpm build` 后页面会自己重载（dsh 的 client-hmr）；改宿主代码要重启服务。细节见 [docs/help/dev-setup.md](docs/help/dev-setup.md)，阶段记录在[开发总线](docs/feature/dev-bus.md)。
+日常想在**线上发布版**和**本地改动**之间切换（默认 profile 是 `web`，换 profile 加 `DSH_PROFILE`）：
+```powershell
+pnpm dev:status    # 现在用的是哪一个：本仓库 / 线上包
+pnpm dev:npm       # 切到 npm 上发布的版本（体验发布版）
+pnpm dev:local     # 切回当前仓库（会先 pnpm build 再链接）
+```
+## 许可
+MIT

package/cordis.patch.yml CHANGED Viewed

@@ -1,32 +1,32 @@
-# The dsh-inbox bundle patch. Loaded when this package is named in the profile's
-# `dsh.profile.bundles`; it inserts one host row, and the browser half arrives
-# through the same package's `dsh.client` declaration (the client-modules node
-# half scans enabled rows for packages that declare one).
-#
-# Row ids are addressed by later layers (the profile's cordis.patch.yml, --patch
-# overlays), so `dsh-inbox` is the id other people should target to reconfigure us.
-- insert:
-    - id: dsh-inbox
-      name: '@chance722/dsh-inbox'
-# The identity this profile fetches pages with, restated here because our own
-# link-title fetch needs a browser-shaped one: sites gate on the *shape* of this
-# string, and bilibili answers the `Mozilla/5.0 (compatible; ...)` form with an
-# anti-bot page that carries a real-looking `<title>` (measured 2026-09-21:
-# 20/29 refused for the compatible form, 0/15 for the one below). Details,
-# measurements and the refusal heuristics live in docs/help/link-title-fetch.md.
-#
-# It still says who is asking — `dsh-inbox` sits where a browser puts
-# `Chrome/140.0.0.0` — with no version token, because one that goes stale on every
-# release is worse than none. A parenthetical `(+url)` or a suffix after a browser
-# token lands in the refused bucket exactly like `(compatible; ...)` does, so
-# there is none of either.
-#
-# Scope: this is the profile's fetch identity, so the model's own web tools use it
-# too. The user's own cordis.patch.yml is applied after this layer and wins,
-# which is how anyone picks a different identity without touching the package.
-- id: web-fetch-http
-  name: '@deepseek-ai/dsh-web-fetch-http'
-  config:
-    userAgent: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) dsh-inbox Safari/537.36'
+# The dsh-inbox bundle patch. Loaded when this package is named in the profile's
+# `dsh.profile.bundles`; it inserts one host row, and the browser half arrives
+# through the same package's `dsh.client` declaration (the client-modules node
+# half scans enabled rows for packages that declare one).
+#
+# Row ids are addressed by later layers (the profile's cordis.patch.yml, --patch
+# overlays), so `dsh-inbox` is the id other people should target to reconfigure us.
+- insert:
+    - id: dsh-inbox
+      name: '@chance722/dsh-inbox'
+# The identity this profile fetches pages with, restated here because our own
+# link-title fetch needs a browser-shaped one: sites gate on the *shape* of this
+# string, and bilibili answers the `Mozilla/5.0 (compatible; ...)` form with an
+# anti-bot page that carries a real-looking `<title>` (measured 2026-09-21:
+# 20/29 refused for the compatible form, 0/15 for the one below). Details,
+# measurements and the refusal heuristics live in docs/help/link-title-fetch.md.
+#
+# It still says who is asking — `dsh-inbox` sits where a browser puts
+# `Chrome/140.0.0.0` — with no version token, because one that goes stale on every
+# release is worse than none. A parenthetical `(+url)` or a suffix after a browser
+# token lands in the refused bucket exactly like `(compatible; ...)` does, so
+# there is none of either.
+#
+# Scope: this is the profile's fetch identity, so the model's own web tools use it
+# too. The user's own cordis.patch.yml is applied after this layer and wins,
+# which is how anyone picks a different identity without touching the package.
+- id: web-fetch-http
+  name: '@deepseek-ai/dsh-web-fetch-http'
+  config:
+    userAgent: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) dsh-inbox Safari/537.36'

package/lib/index.js CHANGED Viewed

@@ -3,7 +3,7 @@ import { defineTool as defineTool2 } from "@deepseek-ai/dsh-tools";
 // src/shared/constants.ts
 var PACKAGE_NAME = "@chance722/dsh-inbox";
-var VERSION = true ? "0.2.7" : "0.0.0-dev";
+var VERSION = true ? "0.2.8" : "0.0.0-dev";
 var DEFAULT_USER_AGENT = "dsh-inbox";
 // src/shared/vocabulary.ts
@@ -1251,8 +1251,13 @@ function isNewer(entry, lastPullAt) {
   if (Number.isNaN(seen) || Number.isNaN(remote)) return true;
   return remote > seen;
 }
+function isFolder(path, dropFolder) {
+  if (path.endsWith("/")) return true;
+  return dropFolder.length > 0 && path.replace(/\/+$/, "") === dropFolder;
+}
 async function ingestFrom(vault, source, attachments, syncRoot3 = syncRootFor(void 0), elsewhere = { roots: [] }) {
   const lastPullAt = vault.global.sync.lastPullAt;
+  const dropFolder = syncRoot3.endsWith("/sync") ? syncRoot3.slice(0, -"/sync".length) : "";
   let entries;
   try {
     entries = await source.list();
@@ -1267,6 +1272,7 @@ async function ingestFrom(vault, source, attachments, syncRoot3 = syncRootFor(vo
   let skippedSync = 0;
   let skippedOlder = 0;
   let skippedForeign = 0;
+  let skippedFolders = 0;
   let remoteRecords = 0;
   let remoteAttachments = 0;
   const foreignSyncRoots = new Set(elsewhere.roots);
@@ -1295,6 +1301,11 @@ async function ingestFrom(vault, source, attachments, syncRoot3 = syncRootFor(vo
       else if (folder === "attachments" && !name3.endsWith(".meta.json")) remoteAttachments += 1;
       continue;
     }
+    if (isFolder(entry.path, dropFolder)) {
+      skipped += 1;
+      skippedFolders += 1;
+      continue;
+    }
     if (!isNewer(entry, lastPullAt)) {
       skipped += 1;
       skippedOlder += 1;
@@ -1358,6 +1369,7 @@ async function ingestFrom(vault, source, attachments, syncRoot3 = syncRootFor(vo
     skippedSync,
     skippedOlder,
     skippedForeign,
+    skippedFolders,
     remoteRecords,
     remoteAttachments,
     syncRoot: syncRoot3,

package/lib/types/shared/panel-wire.d.ts CHANGED Viewed

@@ -211,6 +211,18 @@ export interface PullResult {
     skippedSync?: number;
     /** How many of {@link skipped} were older than the last pull's cursor. */
     skippedOlder?: number;
+    /**
+     * How many of {@link skipped} were **folders**, not files.
+     *
+     * S3 has no folders, so a folder the user made in the cloud console is a
+     * placeholder object whose key ends with `/` — and the listing hands the drop
+     * folder's own placeholder back like any other object. Reading one is not a
+     * file read: 数据胶囊 answers `HTTP 500 {"msg":"未知运行时异常"}`, which the
+     * panel showed as `失败 1：inbox：取对象失败：HTTP 500 …` on every refresh,
+     * because a failed entry pins the pull cursor (measured 2026-09-21). They are
+     * skipped by shape now; the count is here for whoever is debugging a listing.
+     */
+    skippedFolders?: number;
     /**
      * How many of {@link skipped} sat under a `…/sync/` prefix that is **not**
      * ours — another machine syncing under a different directory.

package/package.json CHANGED Viewed

@@ -1,104 +1,104 @@
-{
-  "name": "@chance722/dsh-inbox",
-  "version": "0.2.7",
-  "private": false,
-  "description": "Personal paste inbox for DeepSeek Harness (dsh): capture, classify, browse and retrieve.",
-  "keywords": [
-    "dsh",
-    "dsh-plugin",
-    "deepseek-harness",
-    "inbox",
-    "clipboard",
-    "vault"
-  ],
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/Chance722/dsh-inbox.git"
-  },
-  "homepage": "https://github.com/Chance722/dsh-inbox#readme",
-  "bugs": {
-    "url": "https://github.com/Chance722/dsh-inbox/issues"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "type": "module",
-  "license": "MIT",
-  "main": "lib/index.js",
-  "types": "lib/types/host/index.d.ts",
-  "exports": {
-    ".": {
-      "types": "./lib/types/host/index.d.ts",
-      "default": "./lib/index.js"
-    },
-    "./client": {
-      "types": "./lib/types/client/index.d.ts",
-      "default": "./lib/client.js"
-    },
-    "./package.json": "./package.json"
-  },
-  "files": [
-    "lib/index.js",
-    "lib/client.js",
-    "lib/cli.js",
-    "cordis.patch.yml",
-    "lib/types/**/*.d.ts"
-  ],
-  "bin": {
-    "dsh-inbox": "./lib/cli.js"
-  },
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "platform": "web",
-      "inject": [
-        "@deepseek-ai/dsh-client-connection",
-        "@deepseek-ai/dsh-client-ui-layout",
-        "@deepseek-ai/dsh-client-ui-sidebar"
-      ]
-    }
-  },
-  "scripts": {
-    "build": "node scripts/build.mjs && tsc -p tsconfig.build.json",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "prepublishOnly": "npm run build",
-    "dev:status": "node scripts/dev.mjs status",
-    "dev:local": "node scripts/dev.mjs local",
-    "dev:npm": "node scripts/dev.mjs npm"
-  },
-  "dependencies": {
-    "lucide-react": "^1.47.0",
-    "zod": "^4.4.3"
-  },
-  "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-attachment": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-connection": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-commands": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-storage-domain": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-tools": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-web": "^0.1.5-rc.2"
-  },
-  "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-attachment": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-connection": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-commands": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-storage": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-storage-domain": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-storage-json": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-tools": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-web": "0.1.5-rc.2",
-    "@deepseek-ai/schemastery": "3.18.2",
-    "@types/node": "^22.10.0",
-    "@types/react": "~18.3.1",
-    "esbuild": "^0.25.0",
-    "react": "^18.2.0",
-    "typescript": "^5.7.0",
-    "vitest": "^3.0.0",
-    "zod": "^4.4.3"
-  }
-}
+{
+  "name": "@chance722/dsh-inbox",
+  "version": "0.2.8",
+  "private": false,
+  "description": "Personal paste inbox for DeepSeek Harness (dsh): capture, classify, browse and retrieve.",
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek-harness",
+    "inbox",
+    "clipboard",
+    "vault"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Chance722/dsh-inbox.git"
+  },
+  "homepage": "https://github.com/Chance722/dsh-inbox#readme",
+  "bugs": {
+    "url": "https://github.com/Chance722/dsh-inbox/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "license": "MIT",
+  "main": "lib/index.js",
+  "types": "lib/types/host/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/host/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./client": {
+      "types": "./lib/types/client/index.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/index.js",
+    "lib/client.js",
+    "lib/cli.js",
+    "cordis.patch.yml",
+    "lib/types/**/*.d.ts"
+  ],
+  "bin": {
+    "dsh-inbox": "./lib/cli.js"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-ui-layout",
+        "@deepseek-ai/dsh-client-ui-sidebar"
+      ]
+    }
+  },
+  "scripts": {
+    "build": "node scripts/build.mjs && tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "prepublishOnly": "npm run build",
+    "dev:status": "node scripts/dev.mjs status",
+    "dev:local": "node scripts/dev.mjs local",
+    "dev:npm": "node scripts/dev.mjs npm"
+  },
+  "dependencies": {
+    "lucide-react": "^1.47.0",
+    "zod": "^4.4.3"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-attachment": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-connection": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-commands": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-storage-domain": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-tools": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-web": "^0.1.5-rc.2"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-attachment": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-connection": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-commands": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-storage": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-storage-domain": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-storage-json": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-tools": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-web": "0.1.5-rc.2",
+    "@deepseek-ai/schemastery": "3.18.2",
+    "@types/node": "^22.10.0",
+    "@types/react": "~18.3.1",
+    "esbuild": "^0.25.0",
+    "react": "^18.2.0",
+    "typescript": "^5.7.0",
+    "vitest": "^3.0.0",
+    "zod": "^4.4.3"
+  }
+}