@daweifu/capability-menu 0.1.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Dawei Fu
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,206 @@
+<h1 align="center">dsh-capability-menu</h1>
+
+<p align="center">
+  <strong>为 DeepSeek Harness 提供统一的能力发现与按需执行。</strong><br>
+  海量tools/skills也不会塞满一次请求, 节省token和上下文<br>
+  所有能力分为exposed/progressive/blocked三级管理暴露程度和执行方式
+</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/@daweifu/capability-menu"><img src="https://img.shields.io/npm/v/@daweifu/capability-menu.svg?style=flat-square&color=cb3837&labelColor=161b22&logo=npm&logoColor=white" alt="npm version"/></a>
+  <a href="./LICENSE"><img src="https://img.shields.io/badge/license-Apache%202.0-2EA44F?style=flat-square&labelColor=161b22" alt="license"/></a>
+  <a href="https://github.com/PKUfudawei/dsh-capability-menu"><img src="https://img.shields.io/github/stars/PKUfudawei/dsh-capability-menu.svg?style=flat-square&color=dbab09&labelColor=161b22&logo=github&logoColor=white" alt="GitHub stars"/></a>
+  <a href="https://github.com/koishijs/cordis"><img src="https://img.shields.io/badge/stack-Cordis%20bundle-58a6ff.svg?style=flat-square&labelColor=161b22&logo=cardano&logoColor=white" alt="Cordis bundle"/></a>
+  <a href="https://github.com/deepseek-ai/deepseek-harness"><img src="https://img.shields.io/badge/engine-DeepSeek%20Harness-7c8cff.svg?style=flat-square&labelColor=161b22&logo=deepseek&logoColor=white" alt="DeepSeek Harness"/></a>
+  <a href="https://github.com/PKUfudawei/dsh-capability-menu/actions"><img src="https://img.shields.io/github/actions/workflow/status/PKUfudawei/dsh-capability-menu/ci.yml?branch=master&label=CI&style=flat-square&labelColor=161b22&logo=github&logoColor=white" alt="CI"/></a>
+</p>
+
+<br/>
+
+dsh-capability-menu 是一个可独立安装的 Cordis 插件（`@daweifu/capability-menu`），为 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 提供统一的能力目录（`ctx.meta`）、两个元工具（`meta_search` / `meta_invoke`）、以及 Exposed / Progressive / Blocked 三档能力策略（含 server 侧能力管理面）。它不修改上游源码，完全通过 Cordis 插件机制与 Harness 组合进同一个运行时。
+
+## 快速安装
+
+先构建并打包（源码仓库，`lib/` 需先产出）：
+
+```bash
+cd dsh-capability-menu
+npm run build        # tsc 产出 lib/（registry/search/invoke/policy/invariant/index）
+pnpm pack            # 生成 daweifu-capability-menu-0.1.0.tgz
+```
+
+把 `.tgz` 交给对方安装：
+
+```bash
+dsh plugin --profile web add ./daweifu-capability-menu-0.1.0.tgz
+```
+
+> `dsh plugin add` 一个**目录**会以 `link:` 方式安装，`lib/` 需要已构建，本地自测请用 `.tgz`。
+
+验证（应看到本包自己的 patch 层）：
+
+```bash
+dsh --profile web --dump-config | grep -E 'capability-menu'
+```
+
+```
+# == @daweifu/capability-menu
+- id: capability-menu-registry
+  name: '@daweifu/capability-menu/registry'
+- id: capability-menu-search
+  name: '@daweifu/capability-menu/search'
+- id: capability-menu-invoke
+  name: '@daweifu/capability-menu/invoke'
+- id: capability-menu-policy
+  name: '@daweifu/capability-menu/policy'
+```
+
+卸载：
+
+```bash
+dsh plugin --profile web remove @daweifu/capability-menu
+```
+
+## 能力模型
+
+Capability 是上位概念，Tool / Skill 是不同类型的 capability，不是「两种工具」：
+
+| kind | 对 Agent 提供 | action | 备注 |
+| --- | --- | --- | --- |
+| `tool` | 执行一个动作（MCP 工具） | `execute` | 由 `ctx.tools` 索引 |
+| `skill` | 某类任务的方法/流程/知识 | `load` | 由 `ctx.skills` 索引 |
+
+> `execute` / `load` 是 capability 对外声明的**规范 action**（`CapabilityAction = 'execute' | 'load'`）。tool 的 `execute` 在底层由 `ctx.tools.execute` 走完整工具管线执行；skill 的 `load` 加载方法/流程正文。当前版本（`0.1.0`）只有这两种 kind 与两种 action。
+
+模型获得两个元工具：
+
+| 工具 | 作用 | 对应 entry |
+| --- | --- | --- |
+| `meta_search` | 检索能力目录（Tool / Skill），list/detail 双模式 | `@daweifu/capability-menu/search` |
+| `meta_invoke` | 统一执行面：Tool 真执行（走完整 `ctx.tools` 管线）+ Skill 加载 | `@daweifu/capability-menu/invoke` |
+
+> 边界：Command / Prompt / Memory 不是可发现可调用的能力，不进 registry。需要查知识/文档时直接用底层检索类 MCP 工具（如 `mcp__km__search`），它们和其他 MCP 工具一样被 `meta_search` 编目、被 `meta_invoke` 转发。
+>
+> 边界：非 `mcp__` 前缀的原生工具（`bash` / `read` / `write` / `edit` / `read_image` / `glob` / `grep` 等）**不进 registry**——不被 `meta_search` 编目、不被 `meta_invoke` 派发、也不在能力管理（`classifyAll`）枚举中。它们只受投影链（`system-prompt/assemble` 对 `assembly.tools` 的裁剪）影响可见性；且因不可 `meta_invoke`，一旦被投影掉就真的不可调用，所以请保留在 `tools.exposed` 保活（见下方配置示例；默认即 Exposed，但若被 `progressive`/`blocked` 通配规则覆盖则不可调用）。
+
+## 核心：Exposed / Progressive / Blocked 三档能力策略
+
+所有能力（Tool 与 Skill）按 **暴露程度**（模型在上下文中看到什么）与 **执行方式** 分为三档：
+
+### Tools / Skills 三档暴露与执行对照
+
+| 档位 | 能力 | 暴露方式（模型视野） | 发现 | 执行方式 |
+| --- | --- | --- | --- | --- |
+| **Exposed** | tool | 完整 schema 进 `assembly.tools` → 模型请求 `tools` payload，每步可见 | 无需发现（已常驻） | 模型直接调用，运行时走完整 `ctx.tools` 管线 |
+| | skill | 名字+描述进 `<available_skills>` 目录（正文不在目录） | 无需发现（已常驻） | `skill` 工具按需加载正文（渐进加载） |
+| **Progressive** | tool | 不进 payload（零上下文成本） | `meta_search` list 返回 name+summary | `meta_invoke` 执行（走 `ctx.tools.execute`，管线完整）；或 detail 拿 schema 后直接调 |
+| | skill | 不进 `<available_skills>` 目录 | `meta_search` 检索（`progressiveSkillCatalog` 条目） | `meta_invoke` 按 `path` 加载 SKILL.md 正文 |
+| **Blocked** | tool | 不进 payload | `meta_search` 不返回 | `meta_invoke` 拒绝，直接调用被投影排除 |
+| | skill | 不进目录 | `meta_search` 不返回 | `meta_invoke` 拒绝 |
+
+> **Exposed / Progressive 就是「高频 vs 低频」的具象化。** Exposed = 常驻、随叫随到的高频能力（拿 payload/目录体积换单跳可靠）；Progressive = 归档进目录、用到才翻出来的低频能力（省 token、按需取用）；Blocked = 明确禁止使用。它是**由你配置的驻留策略**（`tools.exposed`/`tools.progressive`/`tools.blocked` 规则），而不是按使用次数自动统计的标签。
+>
+> 上表的 tool 档位均指 `mcp__` 编目工具；原生工具不参与三档管理，只能以 `tools.exposed` 保活可见性（见"能力模型"边界说明）。
+
+## 配置（在 `@daweifu/capability-menu/policy` 上）
+
+```yaml
+- insert:
+    - id: capability-menu-policy
+      name: '@daweifu/capability-menu/policy'
+      config:
+        tools:
+          exposed:
+            - execute_cmd
+            - get_session_context
+            - search_kb
+            - 'mcp__gongfeng__*'   # 通配：该 server 下全部 Exposed
+          progressive:
+            - 'mcp__*'             # 该规则覆盖所有未显式列出的 MCP 工具
+            - 'server:km:*'        # 按 server 前缀批量 Progressive
+          blocked:
+            - 'mcp__secret__*'     # 明确禁用（优先级最高，压过 Exposed）
+        skills:
+          exposed:
+            - debugging
+            - coding
+          progressive:
+            - legacy_skill         # 显式 Progressive（未列出即默认 Exposed）
+          blocked:
+            - forbidden_skill
+        metaTools:
+          - meta_search            # 恒 Exposed，不可被 Blocked
+          - meta_invoke
+        progressiveSkillCatalog: ~/.dsh/progressive-skills.yaml  # Progressive skill 的 name+description+path 目录
+```
+
+**规则优先级**（命中即停）：`blocked` 精确 > `blocked` 通配 > `exposed` 精确 > `exposed` 通配 > `progressive` 精确 > `progressive` 通配 > 默认 Exposed。**blocked 压过 exposed**（控制语义）。meta 工具（`meta_search`/`meta_invoke`）恒为 Exposed，出现在 `blocked` 里会 fail loud。
+
+> `tools.exposed` 里列原生工具名（`execute_cmd` 等）是**保活**语义：原生工具不进能力管理编目（`classifyAll` 列表里看不到它们），但投影链会裁剪其可见性，列在这里保持模型直接可见可调。不要因为"它不在能力管理里"就把它从 exposed 移除——一旦被 `progressive`/`blocked` 规则覆盖，模型既看不到也调不到。
+
+### 默认（不配置 policy）
+
+- 不挂 `capability-menu-policy` → 全部工具/技能照旧可见（不投影）。
+- 挂了 policy 但没有任何规则 → 全部能力默认 Exposed（`classify` 兜底），不投影、不隐藏。需要把低频能力归档进目录时，显式配置 `progressive`（或 `blocked`）规则把它们从模型视野中移出。
+
+### Progressive skill
+
+Progressive skill 的 name + description + path 汇总进独立 YAML（`progressiveSkillCatalog`），由 registry 索引、`meta_search` 检索；完整 SKILL.md 由 `meta_invoke` 按需加载（`ctx.skills` 未注册时按 YAML 的 `path` 读取）。Progressive skill 不进固定上下文。
+
+> 关于 `<available_skills>`：Exposed skill 走渐进加载（名字表 → load）；Progressive/Blocked skill 不进入 `dsh-tool-skill` 注入的目录。目录级裁剪需要上游 `dsh-tool-skill` 提供 filter 钩子（超出本 bundle 范围）；当前 Exposed skill = 会话 registry 中所有 model-invocable skill，Progressive skill = `progressiveSkillCatalog` 条目。
+
+## 机制设计
+
+**核心第一性原则**：模型可见性（投影）与能力注册（registry 索引 + 执行能力）**必须解耦**。`ctx.tools.restrict` 会把工具从 `view.visible` 移除、连 `execute` 一起挡住（`UNKNOWN_TOOL`），因此本策略**不用 restrict 隐藏 Progressive**，而是在投影链 `system-prompt/assemble` 裁剪 `assembly.tools`，让 Progressive 工具保持全局注册、可检索、可执行。
+
+Progressive 的**发现层（catalog）与执行层（`ctx.tools` 管线）分离**：catalog 只存元数据（name + description），完整 schema 从 `ctx.tools` 实时解析；无论哪一档，工具执行都落在 `ctx.tools` 管线上——审批/guard/沙箱/会话日志/取消齐全，不绕过。skill 无"执行"，只有正文加载。Blocked 能力保留在 catalog 中（供管理面展示），但 `meta_search` 不返回、`meta_invoke` 拒绝。
+
+## 能力管理（server 侧 `ctx.capabilityPolicy`）
+
+> 后端能力管理面，前端「能力菜单」tab 正是消费它。前端 React 包 `@daweifu/capability-menu-web`（本仓库 `web/`）的浏览器 bundle 与 host Typert 网关由 `web/` 的构建产出（见 `web/README.md`）；`capabilityPolicy/*` remote 由网关托管，浏览器端 `ctx.remote.capabilityPolicy` 消费。
+
+`@daweifu/capability-menu/policy` 注册 `ctx.capabilityPolicy` 服务，同时支撑运行期投影与前端管理：
+
+| 方法 | 用途 |
+| --- | --- |
+| `getConfig()` / `updateConfig(partial)` | 读取/热更新策略配置（`tools`/`skills`/`metaTools` 等），改动立即重编译规则、无需重启。 |
+| `classifyAll()` | 枚举 `ctx.meta` 目录中每个能力及其当前分类，返回 `{ id, kind, name, server?, class: 'exposed'\|'progressive'\|'blocked', classLabel, mandatory }`；`classLabel` 为「Exposed · 常驻（直接调用）/ Progressive · 按需（目录渐进加载）/ Blocked · 禁用」，供前端只读分类列表展示。 |
+| `classifyTool`/`classifySkill`/`classifyCapability` | 单个能力的分类判定。 |
+| `isExposedTool`/`isExposedSkill`/`isBlockedCapability`/`metaTools`/`toolRules`/`skillRules` | 投影链与执行面消费的判定与规则视图。 |
+
+这些方法全部是纯 server 方法（可单测），前端通过 harness 的 remote/RPC 层调用。
+
+## 仓库结构
+
+```
+dsh-capability-menu/           # 单包 = @daweifu/capability-menu
+├── package.json               # exports 子路径 + dsh.bundle → ./cordis.patch.yml
+├── cordis.patch.yml           # insert registry/search/invoke/policy 四个子路径 entry
+├── tsconfig.json / vitest.config.ts
+├── src/
+│   ├── registry.ts            # （P0）能力目录 + ctx.meta 服务（不注册工具）
+│   ├── search.ts              # （P1）注册 meta_search
+│   ├── invoke.ts              # （P2）注册 meta_invoke
+│   ├── policy.ts              # （P3）Exposed/Progressive/Blocked 投影策略 + ctx.capabilityPolicy 能力管理
+│   ├── invariant.ts
+│   └── index.ts               # re-export 全部
+├── tests/                     # registry / search / invoke / policy 四套用例
+└── web/                       # 前端「能力菜单」tab（client bundle + host Typert 网关，见 web/README.md）
+```
+
+## 开发
+
+- `src/` 为 TypeScript 源码，`lib/` 为预构建产物（`npm run build` 产出，本仓库直接分发 `lib/`）。`package.json` 的 `exports` 声明 `/registry` `/search` `/invoke` `/policy` `/invariant` 五个子路径，`cordis.patch.yml` 挂载前四个为 entry。
+- `@deepseek-ai/*` 依赖为 peer 依赖（运行时从 dsh 安装闭包解析）；`@deepseek-ai/schemastery` 与 `js-yaml` 为运行时依赖（后者解析 `progressiveSkillCatalog`）。
+- 安装时自动构建：本包 `prepare` 脚本会在支持 lifecycle 的安装路径（git / 打包安装）下自动执行 `npm run build` 产出 `lib/`；前端包 `web/` 的 `prepare` 同样自动执行 `npm run bundle` 产出客户端 bundle（需 dsh-client 环境）。
+- 测试：`pnpm install && npx vitest run`（33 个用例，覆盖 registry / search / invoke / policy，含能力管理面用例）。
+
+## 环境前置
+
+- 已安装 dsh CLI 和 pnpm（`dsh plugin` 内部会转发给 pnpm）。
+
+## License
+
+本项目遵循 [Apache License 2.0](LICENSE)。
+
+> 一个可独立安装的 Cordis 插件，为 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 提供能力发现、按需执行与 Exposed/Progressive/Blocked 投影策略。核心的智能体、模型、工具、会话、Web UI 与插件生态都来自上游项目。

package/cordis.patch.yml

@@ -0,0 +1,87 @@
+# dsh-capability-menu aggregate bundle patch: mounts the meta plugins in one
+# layer, from a single installable package.
+#
+# One package, four plugin entries — each mounts a subpath of
+# `@daweifu/capability-menu` (the loader resolves package subpath exports; see
+# `@deepseek-ai/dsh-web-app/startup` for the same pattern in the harness):
+#
+#   - id: capability-menu-registry
+#     name: '@daweifu/capability-menu/registry'
+#   - id: capability-menu-search
+#     name: '@daweifu/capability-menu/search'
+#   - id: capability-menu-invoke
+#     name: '@daweifu/capability-menu/invoke'
+#   - id: capability-menu-policy
+#     name: '@daweifu/capability-menu/policy'
+#       config:
+#         tools:
+#           exposed:
+#             - execute_cmd
+#             - get_session_context
+#             - search_kb
+#             - 'mcp__gongfeng__*'
+#           progressive:
+#             - 'mcp__*'
+#             - 'server:km:*'
+#           blocked: []
+#         skills:
+#           exposed:
+#             - debugging
+#             - coding
+#         metaTools:
+#           - meta_search
+#           - meta_invoke
+#         progressiveSkillCatalog: ~/.dsh/progressive-skills.yaml
+#
+# - `capability-menu-registry` (P0): builds/indexes the capability catalog and
+#   exposes the `ctx.meta` service (search/get/getDetail/refresh). It registers
+#   no model-facing tool itself. Indexes the GLOBAL registry (no visibility
+#   filter) and additionally indexes Progressive skills from
+#   `progressiveSkillCatalog` (§7.2).
+# - `capability-menu-search` (P1): registers the `meta_search` tool (list + detail).
+# - `capability-menu-invoke` (P2): registers the `meta_invoke` tool (unified
+#   execution of MCP tools and skill loading). Executes on the GLOBAL view
+#   (no agent) so Progressive tools stay runnable; dedups already-loaded skills.
+#   Rejects Blocked capabilities.
+# - `capability-menu-policy` (P3): Exposed/Progressive/Blocked projection
+#   strategy + 能力管理 surface. Reads explicit exposed/progressive/blocked
+#   rules (exact name + glob + server:<name>:*) and filters `assembly.tools` at
+#   `system-prompt/assemble` to Exposed + meta tools only. The execution chain
+#   (`ctx.tools.execute`) is untouched, so Progressive tools remain executable
+#   via `meta_invoke`. Exposes `ctx.capabilityPolicy` with
+#   `classifyAll`/`getConfig`/`updateConfig` for the frontend 能力菜单 tab
+#   (Exposed/Progressive/Blocked rules + click-to-cycle classification +
+#   read-only list), plus skill file browsing (`getDetail`/`listSkillDir`/
+#   `readSkillFile`) via the Typert gateway.
+#
+# Default (policy present but no config): every capability is Exposed — the
+# `classify` fallback, nothing is hidden. Add explicit `progressive`/`blocked`
+# rules to pull capabilities out of the model surface. This bundle ships the
+# harness-native coding tools under `tools.exposed` so the model keeps direct
+# bash/file access.
+- insert:
+    - id: capability-menu-registry
+      name: '@daweifu/capability-menu/registry'
+    - id: capability-menu-search
+      name: '@daweifu/capability-menu/search'
+    - id: capability-menu-invoke
+      name: '@daweifu/capability-menu/invoke'
+    - id: capability-menu-policy
+      name: '@daweifu/capability-menu/policy'
+      config:
+        # Harness-native coding tools stay context-resident (Exposed) so the
+        # model can call them directly. meta_invoke only dispatches MCP `mcp__*`
+        # tools, so native tools (bash/read/write/edit/glob/grep) MUST stay
+        # Exposed — listing them Progressive/Blocked would make them neither
+        # visible nor invocable. The default (unlisted) class is Exposed; add
+        # explicit `progressive`/`blocked` rules to pull MCP servers and skills
+        # out of the model surface.
+        tools:
+          exposed:
+            - bash
+            - read
+            - write
+            - edit
+            - read_image
+            - glob
+            - grep

package/lib/index.js

@@ -0,0 +1,20 @@
+/**
+ * @daweifu/capability-menu — consolidated plugin package.
+ *
+ * One installable source package exposing four cordis plugin factories that the
+ * bundle mounts as separate entries via subpath exports (`/registry`, `/search`,
+ * `/invoke`, `/policy`):
+ *
+ * - `registry` (P0): capability catalog + `ctx.meta` service (no model tool).
+ * - `search`   (P1): registers `meta_search`.
+ * - `invoke`   (P2): registers `meta_invoke`.
+ * - `policy`   (P3): Exposed/Progressive/Blocked projection policy + `ctx.capabilityPolicy`.
+ *
+ * @module @daweifu/capability-menu
+ */
+export * from "./registry.js";
+export * as registry from "./registry.js";
+export * as search from "./search.js";
+export * as invoke from "./invoke.js";
+export * as policy from "./policy.js";
+//# sourceMappingURL=index.js.map

package/lib/invariant.js

@@ -0,0 +1,22 @@
+/**
+ * Package-owned invariant companion for `@daweifu/capability-menu`.
+ * @module @daweifu/capability-menu/invariant
+ */
+const PACKAGE_NAME = '@daweifu/capability-menu';
+/** Cordis companion plugin name. */
+export const name = 'capability-menu-invariant';
+/** Service required before the companion can reserve package ownership. */
+export const inject = ['invariants'];
+/**
+ * No runtime invariant: the capability catalog has no independent lifecycle
+ * stream; its index mirrors the tools/skills registries it observes.
+ */
+const install = () => { };
+/**
+ * Register this package's invariant companion.
+ * @param ctx - Cordis context carrying the invariant service.
+ * @returns the installed registration's disposer after setup succeeds.
+ */
+export const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));
+/* jscpd:ignore-end */
+//# sourceMappingURL=invariant.js.map