@dfy-plugins/dsh-visualize 0.1.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 xiaoxiao44443
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,27 @@
+# @dfy-plugins/dsh-visualize
+
+为 DeepSeek Harness 提供 `dfy-visualize` Skill 和 `dfy_visualize_render` Tool，把工作区中的 HTML 发布成对话内可交互的可视化。
+
+## 存储
+
+每个产物都归当前会话所有：
+
+```text
+session-<uuid>/
+  session.jsonl.zstd
+  artifacts/
+    visualizations/
+      <artifact-uuid>/
+        index.html
+        manifest.json
+        assets/
+```
+
+归档会保留它；归档管理中永久删除对话时，整个 `session-*` 目录被删除，可视化和素材也会随之清理。
+
+## 安全边界
+
+- iframe 仅开放 `allow-scripts`，不开放同源、表单、弹窗和顶层导航。
+- CSP 禁止网络请求、外部对象和嵌套页面。
+- Host 只会从会话后端返回的绝对持久化位置中读取 artifact，路由参数不会直接拼成任意文件路径。
+

package/cordis.patch.yml

@@ -0,0 +1,5 @@
+# @dfy-plugins/dsh-visualize bundle patch — session-owned HTML Tool, Skill and sandboxed Client renderer.
+- insert:
+    - id: visualize
+      name: '@dfy-plugins/dsh-visualize'
+

package/lib/client.js

@@ -0,0 +1,309 @@
+window.__ModuleLoader__.load({
+  id: "@dfy-plugins/dsh-visualize",
+  factory: (require) => {
+    var module = { exports: {} };
+    var exports = module.exports;
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name2 in all)
+    __defProp(target, name2, { get: all[name2], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/client.tsx
+var client_exports = {};
+__export(client_exports, {
+  apply: () => apply,
+  inject: () => inject,
+  name: () => name
+});
+module.exports = __toCommonJS(client_exports);
+var import_react = __toESM(require("react"), 1);
+var import_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
+
+// src/logic.ts
+var MAX_HTML_BYTES = 2 * 1024 * 1024;
+var MAX_ASSET_BYTES = 8 * 1024 * 1024;
+var MAX_TOTAL_ASSET_BYTES = 24 * 1024 * 1024;
+var MAX_ASSETS = 24;
+function visualizationUrl(meta) {
+  return `/api/dsh-visualize/artifacts/${encodeURIComponent(meta.sessionId)}/${encodeURIComponent(meta.artifactId)}/index.html`;
+}
+function parseVisualizationMeta(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+  const meta = value;
+  if (meta.kind !== "dsh-visualization" || meta.version !== 1) return void 0;
+  if (typeof meta.sessionId !== "string" || meta.sessionId.length === 0 || meta.sessionId.length > 200) return void 0;
+  if (typeof meta.artifactId !== "string" || !/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(meta.artifactId)) {
+    return void 0;
+  }
+  if (typeof meta.title !== "string" || meta.title.length === 0 || meta.title.length > 120) return void 0;
+  if (!Number.isSafeInteger(meta.assetCount) || (meta.assetCount ?? -1) < 0 || (meta.assetCount ?? 0) > MAX_ASSETS) {
+    return void 0;
+  }
+  return meta;
+}
+
+// src/client.tsx
+var name = "visualize";
+var inject = ["slots"];
+var TOOL_NAME = "dfy_visualize_render";
+var STYLE_ID = "@dfy-plugins/dsh-visualize";
+var MESSAGE_SOURCE = "dsh-visualize";
+var MIN_FRAME_HEIGHT = 180;
+var MAX_FRAME_HEIGHT = 4096;
+var STYLES = `
+.dsh-visualize-tool { display: flex; min-width: 0; width: 100%; flex-direction: column; }
+.dsh-visualize-row { position: relative; display: flex; min-width: 0; min-height: 1lh; align-items: center; overflow: hidden; }
+.dsh-visualize-tool[data-state='running'] .dsh-visualize-row::after { position: absolute; inset: 0 auto 0 0; width: 300px; animation: dsh-visualize-sweep 2.6s ease-out infinite; background: linear-gradient(90deg, transparent 0%, color-mix(in srgb, var(--dsw-alias-bg-base) 60%, transparent) 55%, transparent 100%); content: ''; pointer-events: none; }
+.dsh-visualize-leading { display: inline-flex; width: 16px; height: 16px; flex: none; align-items: center; justify-content: center; margin-right: 6px; color: var(--dsw-alias-label-tertiary); }
+.dsh-visualize-title { flex: none; color: var(--dsw-alias-label-secondary); font-size: 14px; line-height: 24px; }
+.dsh-visualize-separator { width: 2px; height: 2px; flex: none; margin: 0 8px; border-radius: 1px; background: var(--dsw-alias-label-caption); }
+.dsh-visualize-toggle { display: flex; min-width: 0; max-width: 100%; min-height: 1lh; flex: 0 1 auto; appearance: none; align-items: center; padding: 0; border: 0; background: transparent; color: inherit; cursor: pointer; font: inherit; text-align: left; }
+.dsh-visualize-toggle:focus-visible, .dsh-visualize-inspect:focus-visible { border-radius: 4px; outline: 2px solid var(--dsw-alias-brand-primary, #298df8); outline-offset: -1px; }
+.dsh-visualize-inspect { display: inline-flex; min-width: 0; min-height: 1lh; flex: none; appearance: none; align-items: center; padding: 0; border: 0; background: transparent; color: inherit; font: inherit; }
+button.dsh-visualize-inspect { cursor: pointer; }
+.dsh-visualize-summary { min-width: 0; overflow: hidden; color: var(--dsw-alias-label-tertiary); font-size: 14px; line-height: 24px; text-overflow: ellipsis; white-space: nowrap; }
+.dsh-visualize-summary[data-error] { color: var(--dsw-alias-state-error-primary, #e5484d); }
+.dsh-visualize-toggle:hover .dsh-visualize-summary { color: var(--dsw-alias-label-primary); }
+.dsh-visualize-chevron { flex: none; margin-left: 4px; color: var(--dsw-alias-label-tertiary); opacity: 0; transform: rotate(-90deg); transition: opacity .12s ease, transform .16s ease; }
+.dsh-visualize-toggle:hover .dsh-visualize-chevron { opacity: 1; }
+.dsh-visualize-toggle[aria-expanded='true'] .dsh-visualize-chevron { opacity: 1; transform: rotate(0); }
+.dsh-visualize-details { display: flex; flex-direction: column; }
+.dsh-visualize-details[hidden], .dsh-visualize-panel[hidden] { display: none !important; }
+.dsh-visualize-io-card { display: flex; flex-direction: column; margin: 4px 0 4px 4px; overflow: hidden; border: 1px solid var(--dsw-alias-border-l1); border-radius: 12px; background: var(--dsw-alias-markdown-code-block); font: var(--dsw-font-markdown-code-block-small); }
+.dsh-visualize-io-section { display: grid; max-height: 150px; grid-template-columns: max-content minmax(0, 1fr); align-items: baseline; column-gap: 14px; padding: 12px 16px; overflow: auto; }
+.dsh-visualize-io-label { position: sticky; top: 0; align-self: start; color: var(--dsw-alias-label-caption); }
+.dsh-visualize-io-text { min-width: 0; margin: 0; color: var(--dsw-alias-label-secondary); white-space: pre-wrap; overflow-wrap: anywhere; font: inherit; }
+.dsh-visualize-io-text[data-error] { color: var(--dsw-alias-state-error-primary); }
+.dsh-visualize-io-divider { height: 1px; flex: none; background: var(--dsw-alias-border-l2); }
+.dsh-visualize-inspect-action { display: inline-flex; align-self: flex-start; align-items: center; gap: 4px; margin: 4px 0 2px 4px; padding: 2px 8px; border: 1px solid var(--dsw-alias-border-l2); border-radius: 999px; background: var(--dsw-alias-bg-base); color: var(--dsw-alias-label-secondary); cursor: pointer; font-size: 11px; line-height: 16px; }
+.dsh-visualize-inspect-action:hover { background: var(--dsw-alias-interactive-bg-hover-solid); color: var(--dsw-alias-label-primary); }
+.dsh-visualize-panel { display: block; min-width: 0; max-width: calc(100% - 22px); margin: 8px 0 8px 22px; }
+.dsh-visualize-frame { display: block; width: 100%; flex: none; border: 0; background: transparent; }
+@keyframes dsh-visualize-sweep { 0% { left: -300px; } 90%, 100% { left: 100%; } }
+@media (max-width: 680px) { .dsh-visualize-panel { max-width: 100%; margin-left: 0; } }
+@media (prefers-reduced-motion: reduce) { .dsh-visualize-tool[data-state='running'] .dsh-visualize-row::after { display: none; animation: none; } .dsh-visualize-chevron { transition: none; } }
+`;
+function installStyles() {
+  const existing = document.querySelector(`style[data-plugin=${JSON.stringify(STYLE_ID)}]`);
+  const tag = document.createElement("style");
+  tag.dataset.plugin = STYLE_ID;
+  tag.textContent = STYLES;
+  if (existing === null) document.head.appendChild(tag);
+  else existing.replaceWith(tag);
+  return () => tag.remove();
+}
+function firstLine(value) {
+  return value.split("\n", 1)[0] ?? value;
+}
+function resultText(block) {
+  if (!("kind" in block)) return null;
+  const parts = block.content.flatMap((item) => {
+    if (typeof item === "object" && item !== null && item.type === "text") {
+      const text = item.text;
+      return typeof text === "string" ? [text] : [];
+    }
+    return [];
+  });
+  if (parts.length === 0 && block.error !== void 0) return `${block.error.name}: ${block.error.code}`;
+  return parts.join("\n") || null;
+}
+function requestedTitle(block) {
+  const raw = ("kind" in block ? block.call?.argsRaw : block.argsRaw) ?? "";
+  try {
+    const value = JSON.parse(raw);
+    if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+    const title = value.title;
+    return typeof title === "string" && title.trim().length > 0 ? title.trim().slice(0, 120) : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function requestedFilePath(block) {
+  const raw = ("kind" in block ? block.call?.argsRaw : block.argsRaw) ?? "";
+  try {
+    const value = JSON.parse(raw);
+    if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+    const filePath = value.file_path;
+    return typeof filePath === "string" && filePath.trim().length > 0 ? filePath.trim().slice(0, 1e3) : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function toolInput(block) {
+  const raw = (("kind" in block ? block.call?.argsRaw : block.argsRaw) ?? "").trim();
+  if (raw.length === 0) return null;
+  try {
+    return JSON.stringify(JSON.parse(raw), null, 2);
+  } catch {
+    return raw;
+  }
+}
+function currentTheme() {
+  const root = document.documentElement;
+  const declared = root.dataset.theme ?? root.getAttribute("data-color-scheme");
+  if (declared === "dark" || root.classList.contains("dark")) return "dark";
+  if (declared === "light" || root.classList.contains("light")) return "light";
+  return window.matchMedia("(prefers-color-scheme: dark)").matches ? "dark" : "light";
+}
+function VisualizationFrame({
+  meta,
+  sourceFile,
+  visible
+}) {
+  const iframeRef = import_react.default.useRef(null);
+  const [height, setHeight] = import_react.default.useState(MIN_FRAME_HEIGHT);
+  const [measured, setMeasured] = import_react.default.useState(false);
+  const [scrollable, setScrollable] = import_react.default.useState(false);
+  const src = visualizationUrl(meta);
+  const sendTheme = import_react.default.useCallback(() => {
+    iframeRef.current?.contentWindow?.postMessage({ source: MESSAGE_SOURCE, type: "theme", theme: currentTheme() }, "*");
+  }, []);
+  import_react.default.useEffect(() => {
+    const receive = (event) => {
+      const frame = iframeRef.current;
+      if (frame === null || event.source !== frame.contentWindow) return;
+      const value = event.data;
+      if (value?.source !== MESSAGE_SOURCE || value.type !== "resize" || value.artifactId !== meta.artifactId) return;
+      if (typeof value.height !== "number" || !Number.isFinite(value.height)) return;
+      const measuredHeight = Math.ceil(value.height);
+      const nextHeight = Math.min(MAX_FRAME_HEIGHT, Math.max(MIN_FRAME_HEIGHT, measuredHeight));
+      const nextScrollable = measuredHeight > MAX_FRAME_HEIGHT;
+      setHeight(nextHeight);
+      setScrollable(nextScrollable);
+      setMeasured(true);
+    };
+    window.addEventListener("message", receive);
+    return () => window.removeEventListener("message", receive);
+  }, [meta.artifactId]);
+  import_react.default.useEffect(() => {
+    const root = document.documentElement;
+    const observer = new MutationObserver(sendTheme);
+    observer.observe(root, { attributes: true, attributeFilter: ["class", "data-theme", "data-color-scheme"] });
+    const media = window.matchMedia("(prefers-color-scheme: dark)");
+    media.addEventListener("change", sendTheme);
+    return () => {
+      observer.disconnect();
+      media.removeEventListener("change", sendTheme);
+    };
+  }, [sendTheme]);
+  return /* @__PURE__ */ import_react.default.createElement(
+    "div",
+    {
+      className: "dsh-visualize-panel",
+      "data-dsh-artifact-content": "visualization",
+      "data-dsh-artifact-url": src,
+      "data-dsh-source-file": sourceFile,
+      hidden: !visible
+    },
+    /* @__PURE__ */ import_react.default.createElement(
+      "iframe",
+      {
+        ref: iframeRef,
+        className: "dsh-visualize-frame",
+        src,
+        title: meta.title,
+        sandbox: "allow-scripts",
+        referrerPolicy: "no-referrer",
+        scrolling: scrollable ? "auto" : "no",
+        style: {
+          height: `${String(height)}px`,
+          opacity: measured ? 1 : 0,
+          pointerEvents: measured ? "auto" : "none"
+        },
+        onLoad: () => {
+          sendTheme();
+        }
+      }
+    )
+  );
+}
+function VisualizationToolRow({ block, inspect }) {
+  const settled = "kind" in block;
+  const stopped = settled && block.error?.code === "interrupted";
+  const state = !settled ? "running" : stopped ? "stopped" : block.isError ? "error" : "ok";
+  const meta = settled && !block.isError ? parseVisualizationMeta(block.meta) : void 0;
+  const pendingTitle = requestedTitle(block);
+  const sourceFile = requestedFilePath(block);
+  const input = toolInput(block);
+  const output = resultText(block);
+  const summary = state === "running" ? pendingTitle === void 0 ? "\u6B63\u5728\u521B\u5EFA\u53EF\u89C6\u5316" : `\u6B63\u5728\u521B\u5EFA\uFF1A${pendingTitle}` : state === "error" ? firstLine(output ?? "\u53EF\u89C6\u5316\u521B\u5EFA\u5931\u8D25") : state === "stopped" ? "\u5DF2\u505C\u6B62\u521B\u5EFA\u53EF\u89C6\u5316" : meta === void 0 ? "\u5DF2\u521B\u5EFA\u53EF\u89C6\u5316" : `\u5DF2\u521B\u5EFA\uFF1A${meta.title}`;
+  const artifactKey = meta === void 0 ? void 0 : `${meta.sessionId}:${meta.artifactId}`;
+  const [open, setOpen] = import_react.default.useState(meta !== void 0);
+  const [detailsOpen, setDetailsOpen] = import_react.default.useState(false);
+  const detailsExpandable = input !== null || output !== null;
+  const currentArtifact = import_react.default.useRef(artifactKey);
+  import_react.default.useEffect(() => {
+    if (artifactKey === void 0 || artifactKey === currentArtifact.current) return;
+    currentArtifact.current = artifactKey;
+    setOpen(true);
+  }, [artifactKey]);
+  const heading = /* @__PURE__ */ import_react.default.createElement(import_react.default.Fragment, null, /* @__PURE__ */ import_react.default.createElement("span", { className: "dsh-visualize-leading" }, state === "error" ? /* @__PURE__ */ import_react.default.createElement(import_dsh_client_ui_primitives.StateDot, { state: "error" }) : state === "stopped" ? /* @__PURE__ */ import_react.default.createElement(import_dsh_client_ui_primitives.StateDot, { state: "warning" }) : /* @__PURE__ */ import_react.default.createElement(import_dsh_client_ui_primitives.IconSparkle16, { size: 14 })), /* @__PURE__ */ import_react.default.createElement("span", { className: "dsh-visualize-title" }, "DFY VISUALIZE"));
+  return /* @__PURE__ */ import_react.default.createElement(
+    "div",
+    {
+      className: "dsh-visualize-tool",
+      "data-state": state,
+      "data-tool": TOOL_NAME,
+      "data-dsh-visualization-output": meta === void 0 ? void 0 : ""
+    },
+    /* @__PURE__ */ import_react.default.createElement("div", { className: "dsh-visualize-row" }, !detailsExpandable ? /* @__PURE__ */ import_react.default.createElement("span", { className: "dsh-visualize-inspect" }, heading) : /* @__PURE__ */ import_react.default.createElement(
+      "button",
+      {
+        type: "button",
+        className: "dsh-visualize-inspect",
+        "aria-label": `DFY VISUALIZE\uFF0C${detailsOpen ? "\u6536\u8D77\u53C2\u6570" : "\u5C55\u5F00\u53C2\u6570"}`,
+        "aria-expanded": detailsOpen,
+        onClick: () => setDetailsOpen((value) => !value)
+      },
+      heading
+    ), /* @__PURE__ */ import_react.default.createElement("span", { className: "dsh-visualize-separator", "aria-hidden": true }), meta === void 0 ? /* @__PURE__ */ import_react.default.createElement("span", { className: "dsh-visualize-summary", "data-error": state === "error" || void 0 }, summary) : /* @__PURE__ */ import_react.default.createElement(
+      "button",
+      {
+        type: "button",
+        className: "dsh-visualize-toggle",
+        "aria-label": `${summary}\uFF0C${open ? "\u6536\u8D77" : "\u5C55\u5F00"}`,
+        "aria-expanded": open,
+        onClick: () => setOpen((value) => !value)
+      },
+      /* @__PURE__ */ import_react.default.createElement("span", { className: "dsh-visualize-summary" }, summary),
+      /* @__PURE__ */ import_react.default.createElement(import_dsh_client_ui_primitives.IconChevronDownOutline14, { className: "dsh-visualize-chevron", size: 14 })
+    )),
+    /* @__PURE__ */ import_react.default.createElement("div", { className: "dsh-visualize-details", hidden: !detailsOpen }, /* @__PURE__ */ import_react.default.createElement("div", { className: "dsh-visualize-io-card" }, input === null ? null : /* @__PURE__ */ import_react.default.createElement("div", { className: "dsh-visualize-io-section" }, /* @__PURE__ */ import_react.default.createElement("span", { className: "dsh-visualize-io-label" }, "IN"), /* @__PURE__ */ import_react.default.createElement("pre", { className: "dsh-visualize-io-text" }, input)), input === null || output === null ? null : /* @__PURE__ */ import_react.default.createElement("span", { className: "dsh-visualize-io-divider", "aria-hidden": true }), output === null ? null : /* @__PURE__ */ import_react.default.createElement("div", { className: "dsh-visualize-io-section" }, /* @__PURE__ */ import_react.default.createElement("span", { className: "dsh-visualize-io-label" }, "OUT"), /* @__PURE__ */ import_react.default.createElement("pre", { className: "dsh-visualize-io-text", "data-error": state === "error" || void 0 }, output))), inspect === void 0 ? null : /* @__PURE__ */ import_react.default.createElement("button", { type: "button", className: "dsh-visualize-inspect-action", onClick: inspect }, /* @__PURE__ */ import_react.default.createElement(import_dsh_client_ui_primitives.IconInspectOutline12, null), " Inspect")),
+    meta !== void 0 ? /* @__PURE__ */ import_react.default.createElement(VisualizationFrame, { key: artifactKey, meta, sourceFile, visible: open }) : null
+  );
+}
+function apply(ctx) {
+  ctx.effect(installStyles, "dsh-visualize: client styles");
+  ctx.slots.inject("tool.call.toolview", () => ctx.slots.register({
+    name: "tool.call.toolview",
+    key: TOOL_NAME
+  }, VisualizationToolRow));
+}
+
+    return module.exports;
+  }
+});

package/lib/index.d.ts

@@ -0,0 +1,5 @@
+import type { Context } from '@deepseek-ai/cordis';
+export declare const name = "visualize";
+export declare const inject: string[];
+export declare const VISUALIZATION_API_PATH = "/api/dsh-visualize/artifacts";
+export declare function apply(ctx: Context): void;

package/lib/index.js

@@ -0,0 +1,373 @@
+/** Session-owned, sandboxed HTML visualizations for DeepSeek Harness. */
+import { persistedSessionArtifactDirectory, sessionArtifactDirectory } from '@dfy-plugins/resource-core/session-storage';
+import { defineTool } from '@deepseek-ai/dsh-tools';
+import { randomUUID } from 'node:crypto';
+import { mkdir, readFile, realpath, rename, rm, writeFile } from 'node:fs/promises';
+import { basename, extname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { injectVisualizationBridge, MAX_ASSET_BYTES, MAX_ASSETS, MAX_HTML_BYTES, MAX_TOTAL_ASSET_BYTES, normalizeTitle, validateAssetName, visualizationUrl, } from './logic.js';
+export const name = 'visualize';
+export const inject = ['tools', 'fs', 'skills', 'sessionPersistence'];
+export const VISUALIZATION_API_PATH = '/api/dsh-visualize/artifacts';
+const TOOL_NAME = 'dfy_visualize_render';
+const SKILL_NAME = 'dfy-visualize';
+const ARTIFACT_SUBDIR = join('artifacts', 'visualizations');
+const SKILL_CONTENT = `# DFY Visualize
+
+Use this Skill when an explanation benefits from an interactive chart, diagram, comparison, simulator, or UI mockup rendered directly in the conversation.
+
+## Host surface contract
+
+The artifact is embedded directly beneath an assistant response; it is not a standalone web page. Unless the user explicitly requests a card, poster, dashboard shell, or full-canvas background:
+
+- Keep \`html\` and \`body\` marginless and transparent. Do not use \`min-height: 100vh\` or page-level flex/grid centering merely to imitate a standalone page.
+- Keep the Host canvas itself transparent; do not paint a page-sized background behind the artifact.
+- Keep the top-level visualization surface transparent and unframed, and use the available conversation width. Organize structural groups and repeated content with layout, spacing, dividers, or visual marks instead of container chrome.
+- Use a card-like surface only for a necessary bounded interactive field or concise summary. Keep charts, maps, diagrams, tables, control groups, and the whole visualization unframed, and never nest cards.
+- Do not render a heading that repeats the Tool \`title\`, and do not add a viewer titlebar, status, reload, fullscreen, or theme toolbar. Start with the actual visualization or controls.
+- Backgrounds, borders, radii, and shadows remain appropriate for meaningful internal elements such as plot areas, nodes, swatches, inputs, and data cells.
+- Support the Host theme through \`:root[data-theme='dark']\` as well as the initial color scheme when theme-specific colors are needed.
+
+## Required workflow
+
+1. Create a complete responsive HTML document in the current workspace. Keep CSS and JavaScript inline whenever practical.
+2. Do not use CDNs, remote scripts, remote fonts, network requests, forms, popups, or top-window navigation. The viewer intentionally blocks them.
+3. Make the page usable at narrow and wide widths. Avoid a fixed canvas width and avoid document-level scrolling when the content can size naturally.
+4. Keep primary content that expands or collapses through interaction in normal document flow so the Host can measure its changing height. Do not give the document a fixed height, position primary layout content absolutely or fixed, or clip it with \`overflow: hidden\`; out-of-flow positioning remains appropriate for genuine overlays such as menus, tooltips, and dialogs.
+5. If the HTML needs local images, fonts, CSS, or JavaScript, reference each as \`assets/<basename>\` and pass every source file in \`asset_paths\`. Asset basenames must be unique.
+6. Before publishing, inspect the HTML against the Host surface contract. Remove page-sized decoration, unnecessary wrapper surfaces, nested cards, and repeated titles added by habit.
+7. Call \`${TOOL_NAME}\` exactly once with the HTML \`file_path\`, a short \`title\`, and any \`asset_paths\`.
+8. After success, give only a concise explanation or usage hint. The Harness UI displays the visualization after the final response; do not repeat it, embed it, call the render tool again, or paste the HTML into the conversation.
+
+The published artifact is immutable and belongs to the current session. Archiving keeps it; permanently deleting the session removes it together with the transcript.`;
+function inside(parent, child) {
+    const rel = relative(resolve(parent), resolve(child));
+    return rel === '' || (!isAbsolute(rel) && rel !== '..' && !rel.startsWith(`..${sep}`));
+}
+async function readWorkspaceFile(ctx, exec, requestedPath, limit) {
+    const cwd = exec.agent?.session.header.cwd;
+    const target = await ctx.fs.resolve(requestedPath, {
+        ...(cwd === undefined ? {} : { cwd }),
+        signal: exec.signal,
+    });
+    const info = await ctx.fs.stat(target, exec.signal);
+    if (info === undefined) {
+        ctx.emit('fs/observed', target, { kind: 'absent' }, exec);
+        throw new Error(`visualization source not found: ${target.displayPath}`);
+    }
+    if (info.type !== 'file')
+        throw new Error(`visualization source is not a regular file: ${target.displayPath}`);
+    if (info.size !== undefined && info.size > limit) {
+        throw new Error(`visualization source exceeds the ${String(limit)} byte limit: ${target.displayPath}`);
+    }
+    const data = await ctx.fs.readBytes(target, exec.signal, limit);
+    ctx.emit('fs/observed', target, { kind: 'present', version: info.version }, exec);
+    return { data, displayPath: target.displayPath, version: info.version };
+}
+function decodeHtml(file) {
+    try {
+        return new TextDecoder('utf-8', { fatal: true }).decode(file.data);
+    }
+    catch {
+        throw new Error(`visualization HTML is not valid UTF-8: ${file.displayPath}`);
+    }
+}
+function sessionDirectory(ctx, exec) {
+    const agent = exec.agent;
+    if (agent === undefined)
+        throw new Error('visualization rendering requires an active DSH session');
+    const directory = sessionArtifactDirectory(ctx.sessionPersistence, agent.session.header);
+    if (directory === undefined) {
+        throw new Error('the configured session persistence backend does not expose a session-owned artifact directory');
+    }
+    return { sessionId: String(agent.id), directory };
+}
+async function publishVisualization(ctx, exec, requestedHtmlPath, requestedTitle, requestedAssets, rememberedSessionDirs) {
+    exec.signal.throwIfAborted();
+    if (!/\.html?$/i.test(requestedHtmlPath))
+        throw new Error('visualization file_path must end in .html or .htm');
+    if (requestedAssets.length > MAX_ASSETS)
+        throw new Error(`a visualization may contain at most ${String(MAX_ASSETS)} assets`);
+    const htmlFile = await readWorkspaceFile(ctx, exec, requestedHtmlPath, MAX_HTML_BYTES);
+    const html = decodeHtml(htmlFile);
+    const fallbackTitle = basename(htmlFile.displayPath, extname(htmlFile.displayPath));
+    const title = normalizeTitle(requestedTitle, fallbackTitle);
+    const assets = [];
+    const names = new Set();
+    let totalAssetBytes = 0;
+    for (const requestedPath of requestedAssets) {
+        exec.signal.throwIfAborted();
+        const file = await readWorkspaceFile(ctx, exec, requestedPath, MAX_ASSET_BYTES);
+        const assetName = validateAssetName(basename(file.displayPath));
+        const comparisonKey = process.platform === 'win32' ? assetName.toLocaleLowerCase('en-US') : assetName;
+        if (names.has(comparisonKey))
+            throw new Error(`visualization asset basenames must be unique: ${assetName}`);
+        names.add(comparisonKey);
+        totalAssetBytes += file.data.byteLength;
+        if (totalAssetBytes > MAX_TOTAL_ASSET_BYTES) {
+            throw new Error(`visualization assets exceed the ${String(MAX_TOTAL_ASSET_BYTES)} byte total limit`);
+        }
+        assets.push({ name: assetName, bytes: file.data.byteLength, data: file.data });
+    }
+    const session = sessionDirectory(ctx, exec);
+    const artifactId = randomUUID();
+    const artifactsRoot = resolve(session.directory, ARTIFACT_SUBDIR);
+    if (!inside(session.directory, artifactsRoot))
+        throw new Error('invalid session artifact root');
+    const finalDirectory = resolve(artifactsRoot, artifactId);
+    const temporaryDirectory = resolve(artifactsRoot, `.tmp-${artifactId}`);
+    if (!inside(artifactsRoot, finalDirectory) || !inside(artifactsRoot, temporaryDirectory)) {
+        throw new Error('invalid visualization artifact path');
+    }
+    const meta = {
+        kind: 'dsh-visualization',
+        version: 1,
+        sessionId: session.sessionId,
+        artifactId,
+        title,
+        assetCount: assets.length,
+    };
+    const renderedHtml = injectVisualizationBridge(html, artifactId);
+    try {
+        await mkdir(join(temporaryDirectory, 'assets'), { recursive: true });
+        exec.signal.throwIfAborted();
+        await writeFile(join(temporaryDirectory, 'index.html'), renderedHtml, { encoding: 'utf8', flag: 'wx' });
+        for (const asset of assets) {
+            exec.signal.throwIfAborted();
+            await writeFile(join(temporaryDirectory, 'assets', asset.name), asset.data, { flag: 'wx' });
+        }
+        await writeFile(join(temporaryDirectory, 'manifest.json'), `${JSON.stringify({
+            ...meta,
+            createdAt: Date.now(),
+            htmlBytes: htmlFile.data.byteLength,
+            assets: assets.map(({ name, bytes }) => ({ name, bytes })),
+        }, null, 2)}\n`, { encoding: 'utf8', flag: 'wx' });
+        exec.signal.throwIfAborted();
+        await rename(temporaryDirectory, finalDirectory);
+    }
+    catch (error) {
+        await rm(temporaryDirectory, { recursive: true, force: true }).catch(() => { });
+        throw error;
+    }
+    rememberedSessionDirs.set(session.sessionId, session.directory);
+    return {
+        ...meta,
+        url: visualizationUrl(meta),
+        htmlBytes: htmlFile.data.byteLength,
+        assets: assets.map(({ name, bytes }) => ({ name, bytes })),
+    };
+}
+function renderResult(value) {
+    const assetLabel = value.assetCount === 0 ? '' : `，包含 ${String(value.assetCount)} 个素材`;
+    return `已创建可视化“${value.title}”${assetLabel}。可视化已显示在对话中。`;
+}
+function createVisualizationTool(ctx, rememberedSessionDirs) {
+    return defineTool({
+        name: TOOL_NAME,
+        description: `Publish a workspace HTML document as a sandboxed interactive visualization in the current conversation. Read the ${SKILL_NAME} Skill before every call. Keep the top-level surface transparent and unframed, omit repeated title/header or viewer chrome, and reserve card surfaces for necessary bounded content.`,
+        parameters: {
+            file_path: {
+                type: 'string',
+                required: true,
+                description: 'Workspace path to a complete UTF-8 .html or .htm document.',
+            },
+            title: {
+                type: 'string',
+                description: 'Short user-facing title for the visualization.',
+            },
+            asset_paths: {
+                type: 'array',
+                items: { type: 'string' },
+                description: 'Optional workspace files copied beside the HTML. Reference them from HTML as assets/<basename>.',
+            },
+        },
+        output: {
+            schema: {
+                type: 'object',
+                additionalProperties: false,
+                properties: {
+                    kind: { type: 'string', required: true },
+                    version: { type: 'integer', required: true },
+                    sessionId: { type: 'string', required: true },
+                    artifactId: { type: 'string', required: true },
+                    title: { type: 'string', required: true },
+                    assetCount: { type: 'integer', required: true },
+                    url: { type: 'string', required: true },
+                    htmlBytes: { type: 'integer', required: true },
+                    assets: {
+                        type: 'array',
+                        required: true,
+                        items: {
+                            type: 'object',
+                            additionalProperties: false,
+                            properties: {
+                                name: { type: 'string', required: true },
+                                bytes: { type: 'integer', required: true },
+                            },
+                        },
+                    },
+                },
+            },
+            render: (_args, value) => [{ type: 'text', text: renderResult(value) }],
+            presentationMeta: (_args, value) => {
+                const artifact = value;
+                return {
+                    kind: artifact.kind,
+                    version: artifact.version,
+                    sessionId: artifact.sessionId,
+                    artifactId: artifact.artifactId,
+                    title: artifact.title,
+                    assetCount: artifact.assetCount,
+                };
+            },
+        },
+        isConcurrencySafe: () => false,
+        execute: async (args, exec) => publishVisualization(ctx, exec, args.file_path, args.title, args.asset_paths ?? [], rememberedSessionDirs),
+        presentCall(args) {
+            return {
+                card: 'generic',
+                title: 'DFY VISUALIZE',
+                kind: 'read',
+                locations: [{ path: args.file_path }],
+            };
+        },
+    });
+}
+function sendJson(res, status, body) {
+    const payload = JSON.stringify(body);
+    res.writeHead(status, {
+        'content-type': 'application/json; charset=utf-8',
+        'content-length': Buffer.byteLength(payload),
+        'cache-control': 'no-store',
+    });
+    res.end(payload);
+}
+function contentType(path) {
+    switch (extname(path).toLowerCase()) {
+        case '.html':
+        case '.htm': return 'text/html; charset=utf-8';
+        case '.css': return 'text/css; charset=utf-8';
+        case '.js':
+        case '.mjs': return 'text/javascript; charset=utf-8';
+        case '.json': return 'application/json; charset=utf-8';
+        case '.svg': return 'image/svg+xml';
+        case '.png': return 'image/png';
+        case '.jpg':
+        case '.jpeg': return 'image/jpeg';
+        case '.webp': return 'image/webp';
+        case '.gif': return 'image/gif';
+        case '.avif': return 'image/avif';
+        case '.woff': return 'font/woff';
+        case '.woff2': return 'font/woff2';
+        case '.mp3': return 'audio/mpeg';
+        case '.mp4': return 'video/mp4';
+        case '.webm': return 'video/webm';
+        default: return 'application/octet-stream';
+    }
+}
+async function persistedSessionDirectory(ctx, sessionId, rememberedSessionDirs, signal) {
+    const remembered = rememberedSessionDirs.get(sessionId);
+    if (remembered !== undefined)
+        return remembered;
+    const directory = await persistedSessionArtifactDirectory(ctx.sessionPersistence, sessionId, signal);
+    if (directory === undefined)
+        return undefined;
+    rememberedSessionDirs.set(sessionId, directory);
+    return directory;
+}
+async function resolveArtifactFile(ctx, rememberedSessionDirs, sessionId, artifactId, relativeFile, signal) {
+    if (sessionId.length === 0 || sessionId.length > 200)
+        return undefined;
+    if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(artifactId))
+        return undefined;
+    const sessionDir = await persistedSessionDirectory(ctx, sessionId, rememberedSessionDirs, signal);
+    if (sessionDir === undefined)
+        return undefined;
+    const artifactRoot = resolve(sessionDir, ARTIFACT_SUBDIR, artifactId);
+    const candidate = resolve(artifactRoot, relativeFile);
+    if (!inside(artifactRoot, candidate))
+        return undefined;
+    try {
+        const [realRoot, realCandidate] = await Promise.all([realpath(artifactRoot), realpath(candidate)]);
+        if (!inside(realRoot, realCandidate))
+            return undefined;
+        return realCandidate;
+    }
+    catch {
+        return undefined;
+    }
+}
+function decodeRoute(req) {
+    const pathname = new URL(req.url ?? VISUALIZATION_API_PATH, 'http://localhost').pathname;
+    const suffix = pathname.slice(VISUALIZATION_API_PATH.length).replace(/^\//, '');
+    let parts;
+    try {
+        parts = suffix.split('/').map((part) => decodeURIComponent(part));
+    }
+    catch {
+        return undefined;
+    }
+    const [sessionId, artifactId, first, second, ...rest] = parts;
+    if (sessionId === undefined || artifactId === undefined || first === undefined || rest.length > 0)
+        return undefined;
+    if (first === 'index.html' && second === undefined)
+        return { sessionId, artifactId, relativeFile: first };
+    if (first === 'assets' && second !== undefined) {
+        try {
+            return { sessionId, artifactId, relativeFile: join('assets', validateAssetName(second)) };
+        }
+        catch {
+            return undefined;
+        }
+    }
+    return undefined;
+}
+export function apply(ctx) {
+    const rememberedSessionDirs = new Map();
+    const disposeTool = ctx.tools.register(createVisualizationTool(ctx, rememberedSessionDirs));
+    const disposeSkill = ctx.skills.register({
+        name: SKILL_NAME,
+        description: '创建可在对话中直接交互的 HTML 图表、图示、模拟器和界面原型。',
+        source: 'runtime',
+        content: SKILL_CONTENT,
+        invocation: { modelInvocable: true, userInvocable: true },
+    });
+    ctx.inject(['webServer'], (webCtx) => {
+        const route = {
+            kind: 'prefix',
+            path: VISUALIZATION_API_PATH,
+            async handler(req, res) {
+                if (req.method !== 'GET')
+                    return sendJson(res, 405, { error: 'method not allowed' });
+                const request = decodeRoute(req);
+                if (request === undefined)
+                    return sendJson(res, 404, { error: 'visualization artifact not found' });
+                const file = await resolveArtifactFile(ctx, rememberedSessionDirs, request.sessionId, request.artifactId, request.relativeFile, AbortSignal.timeout(10_000));
+                if (file === undefined)
+                    return sendJson(res, 404, { error: 'visualization artifact not found' });
+                try {
+                    const data = await readFile(file);
+                    const isHtml = request.relativeFile === 'index.html';
+                    res.writeHead(200, {
+                        'content-type': contentType(file),
+                        'content-length': data.byteLength,
+                        'cache-control': 'private, max-age=31536000, immutable',
+                        'x-content-type-options': 'nosniff',
+                        ...(isHtml ? {
+                            'content-security-policy': "default-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; media-src 'self' data: blob:; connect-src 'none'; frame-src 'none'; object-src 'none'; base-uri 'none'; form-action 'none'",
+                        } : {}),
+                    });
+                    res.end(data);
+                }
+                catch {
+                    sendJson(res, 404, { error: 'visualization artifact not found' });
+                }
+            },
+        };
+        webCtx.webServer.register(route);
+    });
+    ctx.effect(() => () => {
+        rememberedSessionDirs.clear();
+        disposeSkill();
+        disposeTool();
+    });
+}

package/lib/logic.d.ts

@@ -0,0 +1,17 @@
+export declare const MAX_HTML_BYTES: number;
+export declare const MAX_ASSET_BYTES: number;
+export declare const MAX_TOTAL_ASSET_BYTES: number;
+export declare const MAX_ASSETS = 24;
+export interface VisualizationMeta {
+    kind: 'dsh-visualization';
+    version: 1;
+    sessionId: string;
+    artifactId: string;
+    title: string;
+    assetCount: number;
+}
+export declare function normalizeTitle(value: string | undefined, fallback: string): string;
+export declare function validateAssetName(value: string): string;
+export declare function visualizationUrl(meta: Pick<VisualizationMeta, 'sessionId' | 'artifactId'>): string;
+export declare function injectVisualizationBridge(html: string, artifactId: string): string;
+export declare function parseVisualizationMeta(value: unknown): VisualizationMeta | undefined;

package/lib/logic.js

@@ -0,0 +1,53 @@
+const BRIDGE_SOURCE = 'dsh-visualize';
+export const MAX_HTML_BYTES = 2 * 1024 * 1024;
+export const MAX_ASSET_BYTES = 8 * 1024 * 1024;
+export const MAX_TOTAL_ASSET_BYTES = 24 * 1024 * 1024;
+export const MAX_ASSETS = 24;
+export function normalizeTitle(value, fallback) {
+    const title = value?.trim() || fallback.trim() || '交互式可视化';
+    return title.replace(/[\u0000-\u001f\u007f]/g, ' ').replace(/\s+/g, ' ').slice(0, 120);
+}
+export function validateAssetName(value) {
+    const name = value.normalize('NFC');
+    if (name.length === 0 || name.length > 160 || name === '.' || name === '..') {
+        throw new Error(`invalid visualization asset name: ${JSON.stringify(value)}`);
+    }
+    if (/[\\/\u0000-\u001f\u007f]/.test(name)) {
+        throw new Error(`visualization asset name contains an unsafe character: ${JSON.stringify(value)}`);
+    }
+    return name;
+}
+export function visualizationUrl(meta) {
+    return `/api/dsh-visualize/artifacts/${encodeURIComponent(meta.sessionId)}/${encodeURIComponent(meta.artifactId)}/index.html`;
+}
+export function injectVisualizationBridge(html, artifactId) {
+    const script = `<script data-dsh-visualize-bridge>(()=>{\n`
+        + `const source=${JSON.stringify(BRIDGE_SOURCE)};const artifactId=${JSON.stringify(artifactId)};\n`
+        + `let frame=0;const measure=()=>{frame=0;const d=document.documentElement,b=document.body;const height=Math.max(d?.offsetHeight||0,b?.scrollHeight||0,b?.offsetHeight||0,Math.ceil(b?.getBoundingClientRect().height||0));parent.postMessage({source,type:'resize',artifactId,height},'*')};\n`
+        + `const schedule=()=>{if(frame===0)frame=requestAnimationFrame(measure)};\n`
+        + `addEventListener('load',schedule);addEventListener('resize',schedule);\n`
+        + `addEventListener('message',(event)=>{if(event.source!==parent||event.data?.source!==source||event.data?.type!=='theme')return;const theme=event.data.theme==='dark'?'dark':'light';document.documentElement.dataset.theme=theme;document.documentElement.style.colorScheme=theme;schedule()});\n`
+        + `new ResizeObserver(schedule).observe(document.documentElement);if(document.body)new ResizeObserver(schedule).observe(document.body);schedule();\n`
+        + `})()</script>`;
+    const closingBody = /<\/body\s*>/i;
+    return closingBody.test(html) ? html.replace(closingBody, `${script}</body>`) : `${html}${script}`;
+}
+export function parseVisualizationMeta(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return undefined;
+    const meta = value;
+    if (meta.kind !== 'dsh-visualization' || meta.version !== 1)
+        return undefined;
+    if (typeof meta.sessionId !== 'string' || meta.sessionId.length === 0 || meta.sessionId.length > 200)
+        return undefined;
+    if (typeof meta.artifactId !== 'string'
+        || !/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(meta.artifactId)) {
+        return undefined;
+    }
+    if (typeof meta.title !== 'string' || meta.title.length === 0 || meta.title.length > 120)
+        return undefined;
+    if (!Number.isSafeInteger(meta.assetCount) || (meta.assetCount ?? -1) < 0 || (meta.assetCount ?? 0) > MAX_ASSETS) {
+        return undefined;
+    }
+    return meta;
+}

package/package.json

@@ -0,0 +1,86 @@
+{
+  "name": "@dfy-plugins/dsh-visualize",
+  "version": "0.1.2",
+  "description": "在 DeepSeek Harness 对话中以会话级 artifact 安全展示交互式 HTML 可视化。",
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./client": {
+      "default": "./lib/client.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "cordis.patch.yml"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "license": "MIT",
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.1-rc.2 || ^0.1.2-alpha.1 || ^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-client-ui-tool": "^0.1.1-rc.2 || ^0.1.2-alpha.1 || ^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-fs": "^0.1.1-rc.2 || ^0.1.2-alpha.1 || ^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.1-rc.2 || ^0.1.2-alpha.1 || ^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-session-persistence": "^0.1.1-rc.2 || ^0.1.2-alpha.1 || ^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-skill": "^0.1.1-rc.2 || ^0.1.2-alpha.1 || ^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-tools": "^0.1.1-rc.2 || ^0.1.2-alpha.1 || ^0.1.5-alpha.1",
+    "react": "^18.2.0"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-tool": "^0.1.1-rc.2",
+    "@deepseek-ai/dsh-fs": "^0.1.1-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.1-rc.2",
+    "@deepseek-ai/dsh-session-persistence": "^0.1.1-rc.2",
+    "@deepseek-ai/dsh-skill": "^0.1.1-rc.2",
+    "@deepseek-ai/dsh-tools": "^0.1.1-rc.2",
+    "@types/node": "^24.0.0",
+    "@types/react": "~18.3.1",
+    "esbuild": "^0.24.0",
+    "react": "^18.2.0",
+    "typescript": "^5.5.0"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-primitives",
+        "@deepseek-ai/dsh-client-ui-tool"
+      ]
+    }
+  },
+  "dependencies": {
+    "@dfy-plugins/resource-core": "^0.1.1"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/xiaoxiao44443/dfy-dsh-plugins.git",
+    "directory": "plugins/visualize"
+  },
+  "homepage": "https://github.com/xiaoxiao44443/dfy-dsh-plugins#readme",
+  "bugs": {
+    "url": "https://github.com/xiaoxiao44443/dfy-dsh-plugins/issues"
+  },
+  "keywords": [
+    "deepseek-harness",
+    "dsh-plugin"
+  ],
+  "scripts": {
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.client.json --noEmit",
+    "build": "tsc -p tsconfig.json && node scripts/build-client.mjs",
+    "test": "tsc -p tsconfig.json && node --test"
+  }
+}