@crowdedkingdoms/crowdy-dsh 0.2.0-dev.1

package/package.json

@@ -0,0 +1,101 @@
+{
+  "name": "@crowdedkingdoms/crowdy-dsh",
+  "version": "0.2.0-dev.1",
+  "private": false,
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/CrowdedKingdoms/crowdy-dsh.git"
+  },
+  "homepage": "https://github.com/CrowdedKingdoms/crowdy-dsh#readme",
+  "bugs": {
+    "url": "https://github.com/CrowdedKingdoms/crowdy-dsh/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "description": "DeepSeek Harness plugins whose filesystem is a Crowdy Studio project (GitHub-bound when possible), plus the packed in-browser harness image Crowdy Studio embeds.",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./fs": {
+      "types": "./lib/types/fs/crowdy-file-system.d.ts",
+      "default": "./lib/fs/crowdy-file-system.js"
+    },
+    "./search": {
+      "types": "./lib/types/search/search-tools.d.ts",
+      "default": "./lib/search/search-tools.js"
+    },
+    "./sdk-index": {
+      "types": "./lib/types/sdk-index/index.d.ts",
+      "default": "./lib/sdk-index/index.js"
+    },
+    "./tools": {
+      "types": "./lib/types/tools/index.d.ts",
+      "default": "./lib/tools/index.js"
+    },
+    "./attachments": {
+      "types": "./lib/types/attachments/crowdy-attachment-store.d.ts",
+      "default": "./lib/attachments/crowdy-attachment-store.js"
+    },
+    "./persist": {
+      "types": "./lib/types/persist/index.d.ts",
+      "default": "./lib/persist/index.js"
+    },
+    "./bridge": {
+      "types": "./lib/types/bridge/index.d.ts",
+      "default": "./lib/bridge/index.js"
+    },
+    "./bridge-protocol": {
+      "types": "./lib/types/bridge/protocol.d.ts",
+      "default": "./lib/bridge/protocol.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "main": "./lib/index.js",
+  "files": [
+    "lib",
+    "presets",
+    "profile",
+    "dist/dsh-web",
+    "upstream.json",
+    "THIRD_PARTY_NOTICES.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json && node scripts/bundle-sdk.mjs",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "node --test \"lib/**/*.test.js\"",
+    "cockpit": "dsh --profile web --patch ./profile/crowdy-node.patch.yml",
+    "image": "bash ./scripts/build-image.sh",
+    "check:content-policy": "node scripts/check-content-policy.mjs",
+    "check:release-tier-gate": "bash scripts/ci/resolve-release-tier.test.sh"
+  },
+  "dependencies": {
+    "@deepseek-ai/cordis": "workspace:*",
+    "@deepseek-ai/dsh-attachment": "workspace:*",
+    "@deepseek-ai/dsh-fs": "workspace:*",
+    "@deepseek-ai/dsh-llm": "workspace:*",
+    "@deepseek-ai/dsh-tools": "workspace:*",
+    "@deepseek-ai/dsh-user-approval": "workspace:*",
+    "@deepseek-ai/schemastery": "workspace:*"
+  },
+  "devDependencies": {
+    "@crowdedkingdoms/crowdyjs": "16.0.0-dev.1",
+    "@deepseek-ai/dsh-agent": "workspace:*",
+    "@deepseek-ai/dsh-api-session-controller": "workspace:*",
+    "@deepseek-ai/dsh-system-prompt": "workspace:*",
+    "@types/node": "^22.0.0",
+    "esbuild": "^0.25.0",
+    "typescript": "^5.6.0"
+  },
+  "engines": {
+    "node": ">=22.19"
+  },
+  "crowdyDsh": {
+    "sdkSourceBranch": "feat/dsh-pane"
+  }
+}

package/presets/crowdy/agent.cordis.yml

@@ -0,0 +1,140 @@
+# The `crowdy` agent preset: a coding agent whose filesystem is a Crowdy Studio
+# project rather than this machine's disk, and whose only way to run code is
+# the Studio draft/deploy loop.
+#
+# Derived from the shipped `standard` preset. What matters here is mostly what
+# is ABSENT: the host composition mounts `@crowdedkingdoms/crowdy-dsh/fs` as
+# `ctx.fs`, and any tool that reaches the real disk by another route would show
+# the agent a world its edits cannot touch.
+#
+#   tool-bash / tool-pwsh  — there is no shell; a Crowdy project is compiled by
+#                            the platform, never on the machine running this.
+#   tool-fs-search         — glob/grep spawn ripgrep through `ctx.subprocess`,
+#                            deliberately NOT through `ctx.fs`. The Crowdy
+#                            search plugin registers the same names in memory.
+#   tool-jobs, skill-*     — background jobs and skill discovery walk local roots.
+#   tool-web               — the platform's model endpoint forbids provider web
+#                            plugins; the harness gets no browser either.
+#   delegation             — subagents are a later cut (each one costs the
+#                            player's wallet).
+
+# ── identity ────────────────────────────────────────────────────────────────
+
+- id: persona
+  name: '@deepseek-ai/dsh-persona'
+  config:
+    suffix: The project is mounted at {{cwd}}; `server/` and `client/` are its two targets.
+    prefix: >-
+      You are the Crowdy Studio agent, powered by the {{model}} model. You help a
+      player write, test and deploy a mod for a Crowded Kingdoms game by editing
+      their Crowdy Studio project.
+
+      The filesystem your tools see is that project only, mounted at `{{cwd}}`:
+      `server/` is the SERVER target (Rust compiled to WebAssembly, run on the
+      player's grid by the platform) and `client/` is the CLIENT target (Rust to
+      WebAssembly, run in the player's browser). Each target holds `Cargo.toml`
+      and `.rs` files under `src/`; nothing else can be stored, so create no other
+      paths. `captures/` holds screenshots of the game and `context/` holds game
+      observations, client logs and the latest build diagnostics; both are
+      read-only and refreshed by Crowdy Studio.
+
+      When the project is bound to a GitHub repository, GitHub is the source of
+      truth: every write commits to the bound branch and Studio mirrors it. Say
+      so when it matters (for example, the player can review commits on GitHub).
+
+      You have no shell. To compile and run what you wrote, call `draft_test`;
+      read the diagnostics it returns, fix them, and run it again. Use
+      `screenshot` (or the capture `draft_test` takes) to see the game, and
+      `game_observe` for exact coordinates. `deploy_live` publishes to other
+      players and always asks the player to approve; never call it unless the
+      player asked for a live deploy and the draft passed.
+
+      Use `sdk_lookup` before calling any `crowdy::` host function you are not
+      certain exists; never invent one. Read a file before you change it. Keep
+      edits small and explain what you changed in one or two sentences.
+
+- id: agent-instructions
+  name: '@deepseek-ai/dsh-agent-instructions'
+  config:
+    maxBytes: 65536
+
+# ── filesystem and project tools ────────────────────────────────────────────
+
+# Registers read/write/edit/read_image into the host `tools` registry against
+# whatever backend the host mounted on `ctx.fs` — here, the Crowdy project.
+- id: tool-fs
+  name: '@deepseek-ai/dsh-tool-fs'
+
+# In-memory glob/grep over the same project snapshot the fs backend serves.
+- id: tool-fs-search-crowdy
+  name: '@crowdedkingdoms/crowdy-dsh/search'
+  config:
+    globMaxResults: 100
+    grepMaxMatches: 250
+    grepMaxLineBytes: 2000
+
+# Closed-world crowdy-compute-sdk index + `sdk_lookup`.
+- id: sdk-index-crowdy
+  name: '@crowdedkingdoms/crowdy-dsh/sdk-index'
+
+# draft_test / deploy_live / screenshot / runtime_status / client_logs /
+# game_observe / project_* — everything the Studio page executes for the model.
+- id: crowdy-tools
+  name: '@crowdedkingdoms/crowdy-dsh/tools'
+  config:
+    buildTimeoutMs: 180000
+    screenshotTimeoutMs: 15000
+    autoScreenshot: true
+
+# ── plan mode ───────────────────────────────────────────────────────────────
+
+- id: planning
+  name: cordis:group
+  group: true
+  isolate:
+    planMode: true
+  config:
+    - id: plan-mode
+      name: '@deepseek-ai/dsh-plan-mode'
+      config:
+        section: |
+          You are in plan mode. Stay in plan mode until exit_plan_mode succeeds or the player switches the session mode. Imperative language to implement changes means plan the implementation, not execute it.
+
+          Explore first: read the project files and `context/` to ground the plan in the actual source and the latest diagnostics. Do not write or edit files, and do not run draft_test or deploy_live while planning.
+
+          When ready, call exit_plan_mode with the complete plan markdown, starting with a # title, as the only and final tool call in that response.
+
+# ── compaction ──────────────────────────────────────────────────────────────
+
+- id: compaction
+  name: cordis:group
+  group: true
+  isolate:
+    compaction: true
+    toolResultPruner: true
+  config:
+    - id: compaction-basic
+      name: '@deepseek-ai/dsh-compaction-basic'
+
+    - id: command-compact
+      name: '@deepseek-ai/dsh-command-compact'
+
+    - id: tool-result-pruner
+      name: '@deepseek-ai/dsh-compaction-tool-result-pruner'
+      config:
+        thresholdChars: 8192
+        headChars: 4096
+        tailChars: 1024
+
+# ── remaining model-facing rows ─────────────────────────────────────────────
+
+- id: tool-ask-user
+  name: '@deepseek-ai/dsh-tool-ask-user'
+
+- id: tool-todo
+  name: '@deepseek-ai/dsh-tool-todo'
+  config:
+    allowParallelInProgress: true
+
+- id: present
+  name: '@deepseek-ai/dsh-tool-present'

package/presets/crowdy/preset.yml

@@ -0,0 +1,3 @@
+name: Crowdy Studio
+description: Edits the open Crowdy Studio project (GitHub-bound when possible), runs draft tests, reads screenshots and game context. No shell and no disk access, because the project is not on this machine.
+order: 0

package/profile/crowdy-node.patch.yml

@@ -0,0 +1,34 @@
+# Developer cockpit overlay: run the same plugins under a Node 22 `dsh web`
+# from a checkout of deepseek-harness that has this package in its workspace:
+#
+#   dsh --profile web --patch profile/crowdy-node.patch.yml
+#
+# Connection settings come from CROWDY_* environment variables (see
+# .env.example) or `$DSH_HOME/crowdy.json`. The mount must be a real (empty)
+# directory so the workspace picker accepts it: `CROWDY_MOUNT`, default
+# `$HOME/crowdy-mount`.
+#
+# Page-executed tools (draft_test, screenshot, ...) are registered but answer
+# "not connected": there is no Studio page in the cockpit.
+
+- id: fs-sandbox
+  disabled: true
+
+- id: file-reference-local
+  disabled: true
+
+- id: agent-presets
+  config:
+    default: crowdy
+    roots:
+      - path: !!js require('node:path').resolve(__dirname, '../presets')
+        trust: user
+
+- insert:
+    - id: crowdy-fs
+      name: '@crowdedkingdoms/crowdy-dsh/fs'
+      config:
+        root: !!js process.env.CROWDY_MOUNT ?? require('node:os').homedir() + '/crowdy-mount'
+
+    - id: crowdy-bridge
+      name: '@crowdedkingdoms/crowdy-dsh/bridge'

package/profile/crowdy-web.patch.yml

@@ -0,0 +1,97 @@
+# Crowdy Studio overlay for the browser-worker image, applied over the shipped
+# `web` profile at pack time:
+#
+#   dsh --profile web --patch profile/crowdy-web.patch.yml --dump-config
+#
+# The composed tree is what `scripts/pack-image.ts` hands to the packer.
+#
+# Three changes to the stock web composition:
+#   1. the disk-backed filesystem is replaced by the Crowdy Studio backend, so
+#      the unmodified read/write/edit/read_image tools operate on the project;
+#   2. the sharp-backed attachment store is replaced by an in-memory one that
+#      works without native modules, so screenshots reach the model;
+#   3. the page bridge joins, and the `crowdy` preset becomes the default.
+#
+# Connection settings arrive at boot as `$DSH_HOME/crowdy.json` (an overlay the
+# Studio page writes), never from this file.
+
+- id: fs-sandbox
+  disabled: true
+
+- id: attachment-local
+  disabled: true
+
+# The `@file` reference source walks the host disk; our files are not there.
+- id: file-reference-local
+  disabled: true
+
+# Native directory picking has no meaning in a worker; the project is the
+# only workspace and the page registers it.
+- id: directory-picker
+  disabled: true
+
+# "Open in app" probes the host machine for editors; there is none.
+- id: open-in-app
+  disabled: true
+- id: ui-open-in-app
+  disabled: true
+
+# Host web tools stay disabled (the base already does so); nothing here should
+# fetch arbitrary URLs from the player's browser.
+- id: web
+  disabled: true
+
+# No telemetry leaves the player's browser. The base composition ships the
+# OTLP exporter pointed at DeepSeek's collector in FEEDBACK_ONLY mode; the
+# host CSP would block the request, but a disabled plugin does not try, and
+# finish-artifact.mjs refuses an image that so much as names the endpoint.
+- id: session-telemetry-otel
+  disabled: true
+  config:
+    mode: DISABLED
+    exporter:
+      url: ''
+
+- id: web-search-deepseek
+  disabled: true
+- id: web-fetch-http
+  disabled: true
+
+# Sandbox policy: the whole mount is the workspace, and the Crowdy backend does
+# not confine, so `workspace-write` reads as "the project".
+- id: sandbox-policy
+  config:
+    mode: workspace-write
+    workspaceRoot: /dsh/workspace
+
+- id: agent-presets
+  config:
+    default: crowdy
+
+- insert:
+    - id: crowdy-fs
+      name: '@crowdedkingdoms/crowdy-dsh/fs'
+      config:
+        # The image root is /dsh; the stock workspace directory becomes the
+        # project mount so a session's cwd IS the project.
+        root: /dsh/workspace
+        githubFirst: true
+
+    - id: attachment-crowdy
+      name: '@crowdedkingdoms/crowdy-dsh/attachments'
+      config:
+        maxImageBytes: 4194304
+        maxImageDimension: 8192
+
+    - id: crowdy-bridge
+      name: '@crowdedkingdoms/crowdy-dsh/bridge'
+      config:
+        timeoutMs: 15000
+
+    # Mirror sessions, projection caches and settings into the origin-private
+    # file system; the page restores them as an overlay on the next boot.
+    - id: crowdy-persist
+      name: '@crowdedkingdoms/crowdy-dsh/persist'
+      config:
+        intervalMs: 3000
+        maxBytes: 50331648

package/upstream.json

@@ -0,0 +1,7 @@
+{
+  "$comment": "The DeepSeek Harness this package builds against. Not a submodule (this wrapper carries none, see AGENTS.md): scripts/checkout-upstream.sh clones this tag into UPSTREAM_DIR, and scripts/build-image.sh refuses a checkout at any other commit. Bump deliberately; the plugin APIs are experimental.",
+  "repository": "https://github.com/deepseek-ai/deepseek-harness.git",
+  "tag": "dsh-v0.1.5-rc.2",
+  "commit": "fb2c4b9e698e30edb738bca4cf0618587db7d203",
+  "license": "MIT"
+}