@devflow-core/dsh-devflow 0.1.0

package/lib/dsh-home.js

@@ -0,0 +1,33 @@
+// @devflow-core/dsh-devflow — DSH home resolution.
+// Adapted from @linxin666/dsh-liangshen/src/dsh-home.ts (Apache-2.0):
+// the environment override wins, the platform home fallback follows.
+
+import { homedir } from 'node:os'
+import { isAbsolute, join } from 'node:path'
+
+/** Expand a leading ~ (or ~user) in a path, platform-style. */
+export function expandHome(path, home = homedir()) {
+  if (path === '~') return home
+  if (path.startsWith('~/') || path.startsWith('~\\')) return join(home, path.slice(2))
+  return path
+}
+
+/**
+ * Resolve the DSH home directory.
+ * @param env - process environment to read DSH_HOME from.
+ * @param home - platform home directory fallback (test seam).
+ * @returns the absolute DSH home path.
+ */
+export function resolveDshHome(env = process.env, home = homedir()) {
+  const raw = env.DSH_HOME
+  if (raw !== undefined && raw.trim() !== '') {
+    const expanded = expandHome(raw.trim(), home)
+    return isAbsolute(expanded) ? expanded : join(process.cwd(), expanded)
+  }
+  return join(home, '.dsh')
+}
+
+/** Resolve the DSH home directory from the live environment. */
+export function dshHome() {
+  return resolveDshHome()
+}

package/lib/index.js

@@ -0,0 +1,79 @@
+// @devflow-core/dsh-devflow — DevFlow asset preset plugin for the dsh web GUI.
+//
+// Host half only: on startup it syncs the bundled DevFlow assets (agent
+// preset devflow-2, skills, commands, verification scripts) into the
+// harness-home runtime roots (~/.dsh/.agent-presets, skills, commands,
+// scripts), making the DevFlow preset selectable for new sessions and the
+// DevFlow skills/commands/checkers available without copying files by hand,
+// and announces the capability through a system-prompt section. No browser
+// half, no routes, no agent tools — the preset itself provides the tools.
+//
+// Adapted from @linxin666/dsh-liangshen (Apache-2.0): two-phase anchored
+// preset distribution + startup sync + system-prompt announcement.
+
+import { fileURLToPath } from 'node:url'
+import { dshHome } from './dsh-home.js'
+import { mountOnce } from './mount-once.js'
+import { syncAllAssets } from './sync.js'
+
+/** Stable cordis plugin name. */
+export const name = 'devflow'
+
+/** Order of the announcement section within the tool-guidance band. */
+const SECTION_ORDER = 150
+
+/** Absolute path of the bundled assets tree inside this package. */
+export function bundledAssetsRoot() {
+  return fileURLToPath(new URL('../assets/', import.meta.url))
+}
+
+/** Model-facing announcement: plugin presence, preset, and conflict policy. */
+export const DEVFLOW_GUIDANCE =
+  '本机已安装 @devflow-core/dsh-devflow 插件（DevFlow agent preset 分发）：新建会话的预设选择器中可选「DevFlow 2.0 (Anchored)」（两阶段锚定 + Code Mode）。插件启动时把 devflow-2 预设、devflow-* skills、devflow*.toml 命令与 devflow-*.js 验证脚本同步到 ~/.dsh/（.agent-presets/skills/commands/scripts）；冲突策略为 devflow-* 权威覆盖（字节相同跳过），非 devflow 资产永不触碰；升级插件后重启即自动更新。用户提到「DevFlow / devflow-2 / 锚定模式」时即指本插件，请据此协作。'
+
+/**
+ * Mount the plugin: sync bundled DevFlow assets into the harness-home
+ * runtime roots, then announce through a system-prompt section.
+ * @param ctx - host plugin context (cordis).
+ */
+export const apply = mountOnce('@devflow-core/dsh-devflow', (ctx) => {
+  const sync = () => {
+    const home = dshHome()
+    try {
+      const result = syncAllAssets(bundledAssetsRoot(), home)
+      for (const { id, error } of result.failed) {
+        ctx?.logger?.warn?.(`dsh-devflow: ${id} sync failed: ${error}`)
+      }
+      if (result.synced.length > 0) {
+        ctx?.logger?.info?.(`dsh-devflow: assets synced into ${home}: ${result.synced.join(', ')}`)
+      }
+      if (result.pruned.length > 0) {
+        ctx?.logger?.info?.(`dsh-devflow: pruned stale assets from ${home}: ${result.pruned.join(', ')}`)
+      }
+    } catch (error) {
+      ctx?.logger?.warn?.(`dsh-devflow: asset sync failed: ${error instanceof Error ? error.message : String(error)}`)
+    }
+  }
+
+  sync()
+
+  // Optional announcement: register only when the systemPrompt service is
+  // available; a missing service must not block the sync (no hard inject).
+  let disposeSection
+  try {
+    const systemPrompt = ctx?.get?.('systemPrompt')
+    if (systemPrompt && typeof systemPrompt.section === 'function') {
+      disposeSection = systemPrompt.section({
+        name: 'plugin:dsh-devflow',
+        order: SECTION_ORDER,
+        text: DEVFLOW_GUIDANCE,
+      })
+    }
+  } catch {
+    disposeSection = undefined
+  }
+
+  ctx?.effect?.(() => () => {
+    if (typeof disposeSection === 'function') disposeSection()
+  }, 'dsh-devflow: announcement')
+})

package/lib/mount-once.js

@@ -0,0 +1,34 @@
+// @devflow-core/dsh-devflow — host single-instance guard.
+// Adapted from @linxin666/dsh-liangshen/src/mount-once.ts (Apache-2.0).
+// The registry rides a global symbol so two module instances of the same
+// package (npm copy vs repository link) still share one verdict. This plugin
+// uses its own symbol namespace (`dsh-devflow.mounted`) so it never collides
+// with the dsh-web-ui family registry.
+
+const MOUNTED = Symbol.for('dsh-devflow.mounted')
+
+function mountedSet() {
+  const registry = globalThis
+  return (registry[MOUNTED] ??= new Set())
+}
+
+/**
+ * Wrap a cordis plugin apply so the package runs at most once per process.
+ * The first mount registers normally and unmarks when its fiber disposes;
+ * any later mount of the same package name is a no-op.
+ * @param packageName - npm package identity shared by every install source.
+ * @param fn - the original plugin apply.
+ * @returns an apply of the same shape.
+ */
+export function mountOnce(packageName, fn) {
+  return (...args) => {
+    const mounted = mountedSet()
+    if (mounted.has(packageName)) return
+    mounted.add(packageName)
+    const ctx = args[0]
+    ctx?.effect?.(() => () => {
+      mounted.delete(packageName)
+    })
+    return fn(...args)
+  }
+}

package/lib/sync.js

@@ -0,0 +1,168 @@
+// @devflow-core/dsh-devflow — asset sync engine.
+// Adapted from @linxin666/dsh-liangshen/src/sync.ts (Apache-2.0), narrowed to
+// the four DevFlow asset groups and the "devflow-* authoritative override"
+// conflict policy the user chose: byte-identical files are skipped, differing
+// files are overwritten, and only target files whose name matches the group's
+// own prefix (devflow-*) and no longer exist in the source are pruned. Files
+// outside the group prefix are never touched.
+
+import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync, utimesSync } from 'node:fs'
+import { dirname, join, relative } from 'node:path'
+
+/**
+ * Clock/coarse-grain tolerance for the mtime fast path. When a source and a
+ * target file share a size and a near-identical mtime we still fall through to
+ * a byte comparison; a mtime gap beyond this simply proves the pair cannot be
+ * byte-identical, so we skip the read.
+ */
+const MTIME_TOLERANCE_MS = 1000
+
+/** One sync run's outcome, grouped for diagnostics. */
+export function newSyncResult() {
+  return { synced: [], current: [], failed: [], pruned: [] }
+}
+
+function filesUnder(root) {
+  const out = []
+  const walk = (dir) => {
+    for (const entry of readdirSync(dir)) {
+      const path = join(dir, entry)
+      if (statSync(path).isDirectory()) walk(path)
+      else out.push(path)
+    }
+  }
+  walk(root)
+  return out
+}
+
+/**
+ * File identity is bytes. Size and mtime are only a fast negative check: a
+ * size mismatch or a mtime gap beyond the tolerance proves the pair cannot be
+ * byte-identical without reading both, but an equal size and close mtime still
+ * fall through to a byte comparison so content differences are never missed.
+ */
+function sameFile(a, b) {
+  const sourceStat = statSync(a)
+  const targetStat = statSync(b)
+  if (sourceStat.size !== targetStat.size) return false
+  if (Math.abs(sourceStat.mtimeMs - targetStat.mtimeMs) > MTIME_TOLERANCE_MS) return false
+  return readFileSync(a).equals(readFileSync(b))
+}
+
+/**
+ * Copy the whole tree under `sourceDir` into `targetDir`, creating the target
+ * directory as needed. Intentionally not `fs.cpSync` (recursive): on Node 22
+ * for Windows, `fs.cpSync` with `recursive: true` crashes the process with a
+ * fatal error (STATUS_STACK_BUFFER_OVERRUN / 0xC0000409, no JS exception is
+ * thrown) whenever the source path contains non-ASCII characters such as a
+ * CJK home directory (nodejs/node#54476). Source mtimes are preserved.
+ */
+function copyTreeSync(sourceDir, targetDir) {
+  mkdirSync(targetDir, { recursive: true })
+  for (const entry of readdirSync(sourceDir)) {
+    const source = join(sourceDir, entry)
+    const target = join(targetDir, entry)
+    const stat = statSync(source)
+    if (stat.isDirectory()) {
+      copyTreeSync(source, target)
+    } else {
+      copyFileSync(source, target)
+      utimesSync(target, stat.atime, stat.mtime)
+    }
+  }
+}
+
+/** Remove one target entry (file or dir) if it exists. */
+function removeEntry(target) {
+  if (!existsSync(target)) return
+  rmSync(target, { recursive: true, force: true })
+}
+
+/**
+ * Sync one source group into its target directory.
+ *
+ * @param sourceDir - bundled group root inside the package (e.g. assets/skills).
+ * @param targetDir - user runtime group root (e.g. <home>/skills).
+ * @param options - { prefix } the group's owned name prefix (e.g. 'devflow-').
+ *   Only entries matching the prefix are copied from source or pruned from
+ *   target; everything else in either directory is left untouched.
+ * @param report - SyncResult accumulator; pushes the group id when changed.
+ * @param groupId - diagnostic id for the accumulator.
+ */
+export function syncGroup(sourceDir, targetDir, { prefix }, report, groupId) {
+  if (!existsSync(sourceDir)) {
+    report.failed.push({ id: groupId, error: `bundled source missing: ${sourceDir}` })
+    return
+  }
+  mkdirSync(targetDir, { recursive: true })
+
+  const sourceEntries = readdirSync(sourceDir).filter((name) => name.startsWith(prefix))
+  let dirty = false
+
+  // Copy or refresh every owned source entry, then prune owned target entries
+  // the source no longer ships. Byte-identical files stay untouched so the
+  // user's mtimes and any local tooling watching them are preserved.
+  for (const name of sourceEntries) {
+    const source = join(sourceDir, name)
+    const target = join(targetDir, name)
+    const stat = statSync(source)
+    if (stat.isDirectory()) {
+      const existing = existsSync(target) && statSync(target).isDirectory()
+      if (existing && sameTree(source, target)) continue
+      removeEntry(target)
+      copyTreeSync(source, target)
+      dirty = true
+    } else {
+      if (existsSync(target) && !statSync(target).isDirectory() && sameFile(source, target)) continue
+      removeEntry(target)
+      mkdirSync(dirname(target), { recursive: true })
+      copyFileSync(source, target)
+      utimesSync(target, stat.atime, stat.mtime)
+      dirty = true
+    }
+  }
+
+  for (const entry of readdirSync(targetDir)) {
+    if (!entry.startsWith(prefix)) continue
+    if (sourceEntries.includes(entry)) continue
+    removeEntry(join(targetDir, entry))
+    report.pruned.push(`${groupId}/${entry}`)
+    dirty = true
+  }
+
+  if (dirty) report.synced.push(groupId)
+  else report.current.push(groupId)
+}
+
+/** Byte-compare two directory trees without touching either. */
+function sameTree(a, b) {
+  const aFiles = filesUnder(a)
+  const bFiles = filesUnder(b)
+  const aSet = new Set(aFiles.map((file) => relative(a, file)))
+  if (aFiles.length !== bFiles.length) return false
+  for (const file of aFiles) {
+    const rel = relative(a, file)
+    const peer = join(b, rel)
+    if (!existsSync(peer) || statSync(peer).isDirectory()) return false
+    if (!sameFile(file, peer)) return false
+  }
+  for (const file of bFiles) {
+    if (!aSet.has(relative(b, file))) return false
+  }
+  return true
+}
+
+/**
+ * Sync every bundled DevFlow asset group into the DSH home.
+ * @param assetsRoot - package assets root (e.g. <pkg>/assets).
+ * @param home - resolved DSH home directory.
+ * @returns a SyncResult with per-group outcomes.
+ */
+export function syncAllAssets(assetsRoot, home) {
+  const report = newSyncResult()
+  syncGroup(join(assetsRoot, 'presets/devflow-2'), join(home, '.agent-presets/devflow-2'), { prefix: '' }, report, 'presets/devflow-2')
+  syncGroup(join(assetsRoot, 'skills'), join(home, 'skills'), { prefix: 'devflow-' }, report, 'skills')
+  syncGroup(join(assetsRoot, 'commands'), join(home, 'commands'), { prefix: 'devflow' }, report, 'commands')
+  syncGroup(join(assetsRoot, 'scripts'), join(home, 'scripts'), { prefix: 'devflow-' }, report, 'scripts')
+  return report
+}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@devflow-core/dsh-devflow",
+  "version": "0.1.0",
+  "description": "DevFlow for DeepSeek Harness: devflow-2 agent preset + skills + commands + verification scripts, synced into ~/.dsh on host startup.",
+  "type": "module",
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "main": "./lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./package.json": "./package.json",
+    "./assets/*": "./assets/*"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  },
+  "files": [
+    "lib",
+    "assets",
+    "cordis.patch.yml",
+    "README.md",
+    "NOTICE"
+  ],
+  "license": "Apache-2.0",
+  "scripts": {
+    "sync-assets": "node scripts/sync-assets.js",
+    "test": "node test/sync.test.js"
+  }
+}