@civilization/deepseek-harness-skill-mcp 0.1.7 → 0.1.8

package/README.md

@@ -153,9 +153,9 @@ pnpm run web
 
 ## 验证
 
-自动测试覆盖配置持久化、Skill 多路径、编辑和删除、单技能内容编辑与删除、用户分组、并发 revision、Skill 创建与调用权限、MCP 工具发现和卸载、轮询状态以及中英文词典一致性。测试不需要模型 API key。
+自动测试覆盖配置持久化、Skill 多路径、编辑和删除、单技能内容编辑与删除、用户分组、并发 revision、Skill 创建与调用权限、MCP 工具发现和卸载、轮询状态、中英文词典一致性，以及 DSH `webServer` 前缀路由、OPTIONS 预检和 RPC 信封协议桥接。测试不需要模型 API key。
 
-浏览器端 `/` 候选缓存失效兼容逻辑会使用公开的 `connection/reset` 客户端事件；自动测试验证 Host/RPC 和浏览器 bundle 构建，但没有在本仓库内启动完整 Harness Web 做端到端菜单点击验证。外部文件改动仍依赖 filesystem provider 先完成 watcher 失效，必要时可在变更后点击管理页“刷新”。
+浏览器端 `/` 候选缓存失效兼容逻辑会使用公开的 `connection/reset` 客户端事件；服务端通过注入 `webServer` 与 `connection` 双重挂载 `/extensions` 路由并由 Cordis effect 托管生命周期，防止动态请求掉入前端静态资源的 405 fallback。自动测试验证 Host/RPC、HTTP 桥接和浏览器 bundle 构建，但没有在本仓库内启动完整 Harness Web 做端到端菜单点击验证。外部文件改动仍依赖 filesystem provider 先完成 watcher 失效，必要时可在变更后点击管理页“刷新”。
 
 ## 发布
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@civilization/deepseek-harness-skill-mcp",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "Skill path and MCP server management for DeepSeek Harness Web",
   "license": "Apache-2.0",
   "repository": {

package/src/index.js

@@ -4,7 +4,7 @@ import { homedir } from 'node:os'
 import { join } from 'node:path'
 import { defineTool } from '@deepseek-ai/dsh-tools'
 import { ExtensionStore } from './store.js'
-import { createWebHandler } from './web.js'
+import { createWebHandler, createWebHttpHandler } from './web.js'
 
 export const name = 'extension-manager'
 export const inject = ['tools', 'skills']
@@ -21,8 +21,19 @@ export async function apply(ctx, config) {
   const home = process.env.DSH_HOME || join(homedir(), '.dsh')
   const store = new ExtensionStore(config.patchPath || join(home, 'profiles', 'web', 'cordis.patch.yml'))
   await store.ensureNonFatalMcpStartup()
+
+  const webHandler = createWebHandler(store, ctx)
+  const httpHandler = createWebHttpHandler(store, ctx)
+
   ctx.inject(['connection'], web => {
-    web.connection.rpc.handle('/extensions', createWebHandler(store, ctx))
+    web.connection.rpc.handle('/extensions', webHandler)
+  })
+  ctx.inject(['webServer'], hostCtx => {
+    hostCtx.effect(() => hostCtx.webServer.register({
+      kind: 'prefix',
+      path: '/extensions',
+      handler: httpHandler,
+    }), 'extension-manager: /extensions route')
   })
   const register = (name, description, parameters, execute) => ctx.tools.register(defineTool({ name, description, parameters, output, execute }))
 

package/src/web.js

@@ -61,7 +61,7 @@ export function createWebHandler(store, ctx) {
     try {
       if (!Object.hasOwn(schemas, endpoint)) throw new Error('Unknown operation.')
       const args = schemas[endpoint](payload)
-      signal.throwIfAborted()
+      signal?.throwIfAborted()
       if (endpoint === 'add-skill') await store.addSkillPath(args.directory, signal, args.revision)
       if (endpoint === 'add-mcp') {
         const input = JSON.parse(args.configuration)
@@ -97,3 +97,68 @@ export function createWebHandler(store, ctx) {
     }
   }
 }
+
+/** HTTP server route handler that satisfies DSH WebServer and RPC envelope protocols. */
+export function createWebHttpHandler(store, ctx) {
+  const handler = createWebHandler(store, ctx)
+  return async (req, res) => {
+    if (req.method === 'OPTIONS') {
+      res.writeHead(204, {
+        'access-control-allow-origin': '*',
+        'access-control-allow-methods': 'POST, OPTIONS',
+        'access-control-allow-headers': 'content-type, *',
+      })
+      res.end()
+      return
+    }
+    if (req.method !== 'POST') {
+      res.writeHead(405, { 'content-type': 'application/json; charset=utf-8' })
+      res.end(JSON.stringify({ ok: false, error: { message: 'Method Not Allowed' } }))
+      return
+    }
+    const pathname = new URL(req.url ?? '/', 'http://dsh.internal').pathname
+    const endpoint = pathname.startsWith('/extensions/') ? pathname.slice('/extensions/'.length)
+      : pathname === '/extensions' ? 'list' : undefined
+    if (!endpoint) {
+      res.writeHead(404, { 'content-type': 'application/json; charset=utf-8' })
+      res.end(JSON.stringify({ ok: false, error: { message: 'Not Found' } }))
+      return
+    }
+
+    let raw = ''
+    try {
+      for await (const chunk of req) raw += chunk.toString('utf8')
+    } catch {
+      res.writeHead(400, { 'content-type': 'application/json; charset=utf-8' })
+      res.end(JSON.stringify({ ok: false, error: { message: 'Failed to read request body.' } }))
+      return
+    }
+
+    let body = {}
+    if (raw.trim()) {
+      try { body = JSON.parse(raw) }
+      catch {
+        res.writeHead(400, { 'content-type': 'application/json; charset=utf-8' })
+        res.end(JSON.stringify({ ok: false, error: { message: 'Invalid JSON body.' } }))
+        return
+      }
+    }
+
+    const isRpcEnvelope = body && body.type === 'client-request' && typeof body.rpcId === 'string'
+    const actualEndpoint = isRpcEnvelope ? (body.method || endpoint) : endpoint
+    const payload = isRpcEnvelope ? (body.payload ?? {}) : body
+
+    const result = await handler(actualEndpoint, payload, req.signal)
+
+    const responseBody = isRpcEnvelope
+      ? { type: 'server-response', rpcId: body.rpcId, result }
+      : result
+
+    const data = JSON.stringify(responseBody)
+    res.writeHead(200, {
+      'content-type': 'application/json; charset=utf-8',
+      'content-length': Buffer.byteLength(data),
+    })
+    res.end(data)
+  }
+}