@dsh-enhanced/personal-assistant 0.1.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 dsh-enhanced contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,37 @@
+# @dsh-enhanced/personal-assistant
+
+个人助理四核心的纯 meta-bundle，一次安装以下独立包：
+
+- `@dsh-enhanced/assistant-policy`
+- `@dsh-enhanced/personal-memory`
+- `@dsh-enhanced/personal-wiki`
+- `@dsh-enhanced/assistant-automations`
+
+它不包含消息、飞书、凭据、heartbeat、事件触发或浏览器，也不新增第五个业务 service 或数据库。自己的唯一 Cordis 行只负责按生命周期顺序挂载四个核心 service。
+
+## 安装
+
+```sh
+dsh plugin --profile web add @dsh-enhanced/personal-assistant
+dsh --profile web --dump-config
+```
+
+patch 会完整覆盖上游 `permission` 行，并挂载唯一的 `dsh-enhanced-personal-assistant` 业务行；后者再通过 Cordis 子插件生命周期依次启动 Policy、Memory、Wiki 和 Automations。不要在同一 profile 同时启用本 meta-bundle 与四个独立子 bundle，否则会重复提供同名 service。
+
+## 默认安全状态
+
+- 原生 Permission selector 固定显示 `workspace-write`（请求批准）、`auto`（帮我批准）和 `danger-full-access`（完全访问）三项；前两项共享 `workspace-write + ask` 执行 bundle，但保留不同选择意图。没有用户层设置的新安装默认 `danger-full-access`。已有 `settings.yaml` 的 `permission.defaultPreset` 仍由 DSH Settings 用户层优先，不会被 bundle 强制覆盖。
+- policy 默认写入一条 `dsh-enhanced-foreground-capability-*`：本机 Web/direct 的 foreground Agent 可访问 profile 已挂载的全部技能、工具与插件动作，后续动态挂载也无需逐项补 allow；它不会安装尚未安装的插件，也不授权 background 或飞书 external 身份。显式 deny、紧急停止、身份/预算检查仍优先。`budgets` 默认留空。
+- automations scheduler 默认关闭；创建并审批 automation 后仍需由部署者显式启用 scheduler。
+- Memory、Wiki、Policy、Automations 使用各自的 DSH home 私有路径和独立真源。
+- meta 入口先等待 Policy 完成激活，再依次挂载 Memory、Wiki 与 Automations；真实 rc.8 启动不依赖同步构造或 YAML 行序碰巧成功。
+
+需要收紧时可添加显式 deny，或使用安装器的 `--agent-tools disable` 移除托管的 foreground grant；先在测试 profile 使用 `--dump-config` 检查最终 patch。
+
+## 权限与数据
+
+meta-bundle 不引入一套独立于上游 Host 的 OS capability、网络 API、凭据、浏览器或安装脚本权限；四个子包的实际权限和数据边界分别见其 README。需要特别注意：为了符合本地默认完全控制的安装目标，没有用户层设置的新 session 会选择 `danger-full-access + never`，因此 Host sandbox 可不受限制地访问文件与网络，且工具调用不再逐次询问。这是有意启用的高风险默认值，而不是“安装能力不等于授权”的延伸含义；不需要完全控制时，请在原生 selector 中改回 `workspace-write` 或 `auto`。已有兼容的用户设置始终优先，安装器不会强制覆盖。
+
+## 兼容性
+
+子包均以 DeepSeek Harness `0.1.0-rc.8`（提交 `141eb6fef83422698aef7a981029e843e8161534`）为验证基线。参见[兼容性文档](../../docs/compatibility.md)。

package/cordis.patch.yml

@@ -0,0 +1,81 @@
+- id: permission
+  name: '@deepseek-ai/dsh-permission-presets'
+  config:
+    presets:
+      workspace-write:
+        sandbox: workspace-write
+        approval: ask
+        name: 请求批准
+      auto:
+        sandbox: workspace-write
+        approval: ask
+        name: 帮我批准
+      danger-full-access:
+        sandbox: danger-full-access
+        approval: never
+        name: 完全访问权限
+    defaultPreset: danger-full-access
+
+- insert:
+    - id: dsh-enhanced-personal-assistant
+      name: '@dsh-enhanced/personal-assistant'
+      config:
+        assistantPolicy:
+          databasePath: !!js dshHomePath('assistant-policy/policy.sqlite')
+          rules:
+            - id: dsh-enhanced-foreground-capability-*
+              effect: allow
+              subject:
+                kind: agent
+                id: '*'
+                workspace: '*'
+              actions:
+                - '*'
+              resource:
+                kind: '*'
+                id: '*'
+              context:
+                initiators:
+                  - foreground
+          budgets: []
+        personalMemory:
+          databasePath: !!js dshHomePath('personal-memory/memory.sqlite')
+          approvalMode: delivery-required
+          maxContentBytes: 4096
+          maxRecordsPerIdentity: 1000
+          searchLimit: 20
+          snapshotLimit: 20
+          snapshotMaxBytes: 8192
+          snapshotMaxTokens: 2048
+          defaultProposalTtlMs: 900000
+          maxImportRecords: 100
+          reconcileIntervalMs: 15000
+          reconcileLimit: 50
+        personalWiki:
+          vaultRoot: !!js dshHomePath('personal-wiki/vault')
+          databasePath: !!js dshHomePath('personal-wiki/state.sqlite')
+          maxPageBytes: 1048576
+          searchLimit: 20
+          maxSnippetBytes: 2048
+          readMaxBytes: 8192
+          readMaxParagraphs: 40
+          lintLimit: 200
+          defaultProposalTtlMs: 900000
+          reconcileIntervalMs: 15000
+          reconcileLimit: 50
+        assistantAutomations:
+          databasePath: !!js dshHomePath('assistant-automations/state.sqlite')
+          runsPath: !!js dshHomePath('assistant-automations/runs')
+          schedulerEnabled: false
+          tickIntervalMs: 5000
+          dutyLeaseMs: 15000
+          taskLeaseMs: 30000
+          misfireGraceMs: 60000
+          maxCatchUp: 100
+          maxConcurrency: 1
+          maxArtifactBytes: 1048576
+          defaultProposalTtlMs: 900000
+          reconcileIntervalMs: 15000
+          reconcileLimit: 50
+          toolCapableProviders:
+            - deepseek-official

package/lib/index.d.ts

@@ -0,0 +1,18 @@
+import type { Context } from '@deepseek-ai/cordis';
+import Schema from '@deepseek-ai/schemastery';
+import { type Config as AutomationsConfig } from '@dsh-enhanced/assistant-automations';
+import { type Config as PolicyConfig } from '@dsh-enhanced/assistant-policy';
+import { type Config as MemoryConfig } from '@dsh-enhanced/personal-memory';
+import { type Config as WikiConfig } from '@dsh-enhanced/personal-wiki';
+import { version } from './version.js';
+export interface Config {
+    assistantPolicy: PolicyConfig;
+    personalMemory: MemoryConfig;
+    personalWiki: WikiConfig;
+    assistantAutomations: AutomationsConfig;
+}
+export declare const Config: Schema<Config>;
+export declare const name = "dsh-enhanced-personal-assistant";
+export { version };
+export declare function apply(ctx: Context, input: Config): Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAC7C,OAAO,EAA+B,KAAK,MAAM,IAAI,iBAAiB,EAAE,MAAM,qCAAqC,CAAA;AACnH,OAAO,EAA0B,KAAK,MAAM,IAAI,YAAY,EAAE,MAAM,gCAAgC,CAAA;AACpG,OAAO,EAAyB,KAAK,MAAM,IAAI,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAClG,OAAO,EAAuB,KAAK,MAAM,IAAI,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAC5F,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,MAAM,WAAW,MAAM;IACrB,eAAe,EAAE,YAAY,CAAA;IAC7B,cAAc,EAAE,YAAY,CAAA;IAC5B,YAAY,EAAE,UAAU,CAAA;IACxB,oBAAoB,EAAE,iBAAiB,CAAA;CACxC;AAED,eAAO,MAAM,MAAM,EAKb,MAAM,CAAC,MAAM,CAAC,CAAA;AAEpB,eAAO,MAAM,IAAI,oCAAoC,CAAA;AACrD,OAAO,EAAE,OAAO,EAAE,CAAA;AAElB,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMtE"}

package/lib/index.js

@@ -0,0 +1,22 @@
+import Schema from '@deepseek-ai/schemastery';
+import { AssistantAutomationsService } from '@dsh-enhanced/assistant-automations';
+import { AssistantPolicyService } from '@dsh-enhanced/assistant-policy';
+import { PersonalMemoryService } from '@dsh-enhanced/personal-memory';
+import { PersonalWikiService } from '@dsh-enhanced/personal-wiki';
+import { version } from './version.js';
+export const Config = Schema.object({
+    assistantPolicy: AssistantPolicyService.Config.required(),
+    personalMemory: PersonalMemoryService.Config.required(),
+    personalWiki: PersonalWikiService.Config.required(),
+    assistantAutomations: AssistantAutomationsService.Config.required(),
+});
+export const name = 'dsh-enhanced-personal-assistant';
+export { version };
+export async function apply(ctx, input) {
+    const config = Config(input);
+    await ctx.plugin(AssistantPolicyService, config.assistantPolicy);
+    await ctx.plugin(PersonalMemoryService, config.personalMemory);
+    await ctx.plugin(PersonalWikiService, config.personalWiki);
+    await ctx.plugin(AssistantAutomationsService, config.assistantAutomations);
+}
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAC7C,OAAO,EAAE,2BAA2B,EAAoC,MAAM,qCAAqC,CAAA;AACnH,OAAO,EAAE,sBAAsB,EAA+B,MAAM,gCAAgC,CAAA;AACpG,OAAO,EAAE,qBAAqB,EAA+B,MAAM,+BAA+B,CAAA;AAClG,OAAO,EAAE,mBAAmB,EAA6B,MAAM,6BAA6B,CAAA;AAC5F,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAStC,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAClC,eAAe,EAAE,sBAAsB,CAAC,MAAM,CAAC,QAAQ,EAAE;IACzD,cAAc,EAAE,qBAAqB,CAAC,MAAM,CAAC,QAAQ,EAAE;IACvD,YAAY,EAAE,mBAAmB,CAAC,MAAM,CAAC,QAAQ,EAAE;IACnD,oBAAoB,EAAE,2BAA2B,CAAC,MAAM,CAAC,QAAQ,EAAE;CACpE,CAAmB,CAAA;AAEpB,MAAM,CAAC,MAAM,IAAI,GAAG,iCAAiC,CAAA;AACrD,OAAO,EAAE,OAAO,EAAE,CAAA;AAElB,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,GAAY,EAAE,KAAa;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC5B,MAAM,GAAG,CAAC,MAAM,CAAC,sBAAsB,EAAE,MAAM,CAAC,eAAe,CAAC,CAAA;IAChE,MAAM,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,cAAc,CAAC,CAAA;IAC9D,MAAM,GAAG,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;IAC1D,MAAM,GAAG,CAAC,MAAM,CAAC,2BAA2B,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAA;AAC5E,CAAC"}

package/lib/version.d.ts

@@ -0,0 +1,2 @@
+export declare const version = "0.1.3";
+//# sourceMappingURL=version.d.ts.map

package/lib/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,UAAU,CAAA"}

package/lib/version.js

@@ -0,0 +1,2 @@
+export const version = '0.1.3';
+//# sourceMappingURL=version.js.map

package/lib/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAA"}

package/package.json

@@ -0,0 +1,70 @@
+{
+  "name": "@dsh-enhanced/personal-assistant",
+  "version": "0.1.3",
+  "description": "A core-only meta-bundle for the DSH personal assistant policy, memory, Wiki, and automations plugins.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./lib/index.js",
+  "types": "./lib/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "cordis.patch.yml",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/22-ai-00/dsh-enhanced.git",
+    "directory": "plugins/personal-assistant"
+  },
+  "keywords": [
+    "deepseek",
+    "deepseek-harness",
+    "dsh-plugin"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  },
+  "dependencies": {
+    "@deepseek-ai/schemastery": "3.18.1",
+    "@dsh-enhanced/assistant-automations": "0.1.3",
+    "@dsh-enhanced/assistant-policy": "0.1.3",
+    "@dsh-enhanced/personal-memory": "0.1.3",
+    "@dsh-enhanced/personal-wiki": "0.1.3"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/cordis": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "4.0.1",
+    "@types/node": "22.20.0",
+    "typescript": "6.0.3",
+    "vitest": "4.1.8"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  }
+}