@dsh-plugins/dsh-museav-assets 0.1.1

package/CHANGELOG.md

@@ -0,0 +1,48 @@
+# Changelog
+
+## Unreleased
+
+- **接入发版门禁** —— 与另外三个 dsh 插件同一套：`scripts/prepublish-gate.mjs` +
+  `scripts/readme-gate.mjs` + `scripts/gate-lib.mjs`（gate-lib 是 prepublish-gate 的
+  import 依赖，必须一起拷，否则 `ERR_MODULE_NOT_FOUND`），接在 `prepublishOnly` 末尾。
+  真源在 `CortexOS/scripts/release-gate/`，改逻辑改真源，再用
+  `check-release-gate-sync.mjs --fix` 同步 —— **别在本仓就地改**。
+  为什么补：本仓此前是五个插件里唯一没接门禁的（`prepublishOnly` 只跑 `check && test`），
+  四条产物契约和 README 首屏契约都不过。
+- **README 首屏对齐 `open_source_project_baseline`** —— 居中品牌标题 + 4 个
+  for-the-badge 徽章 + Why This 对比表 + 中英切换。此前是裸 `# 标题`，readme-gate 判不合规。
+
+> 发版状态核实（2026-10-02）：scoped 名 `@dsh-plugins/dsh-museav-assets` 在 npm 上
+> **仍不存在（404）**；无 scope 的 `dsh-museav-assets@0.1.0` 存在，且**尚未标 deprecated**。
+> 即上面 0.1.1 写的「已 deprecated 指向本名」目前只是意图 —— 补发成功前，桌面端按
+> scoped 名装不上。
+
+## 0.1.1
+
+- **包名迁到 `@dsh-plugins/dsh-museav-assets`**（与另外三个插件同一 scope）。
+  无 scope 的 `dsh-museav-assets` 是 0.1.0 的历史名，已 deprecated 指向本名。
+  四处身份同步改：`package.json` / `export const name` / client 的 `ModuleLoader.id` /
+  `cordis.patch.yml`；路由前缀 `/api/dsh-museav-assets` 保持不变（它与包名无关）。
+
+- 发布到 npm（0.1.0 是首个版本，本次只补文档与版本号）
+- README 中英：删掉「还没发 npm，所以桌面端装不上」的过渡说明，改成已发布状态 +
+  桌面端在应用内插件管理里装（CLI 装不进 app 独占托管的 `desktop` profile）
+- 加 `.github/workflows/publish.yml`：push `v*` tag → GitHub OIDC Trusted Publishing
+  直发 npm（不需要 npm token/OTP）；加 `ci.yml`：语法检查 + 43 个测试 + 打包自检
+
+## 0.1.0
+
+首个版本。
+
+- `conversation.view` 注册第 6 个 tab「资产」（order 40）：项目切换 + 素材网格 + 最近出图
+- 4 条路由：health / projects(GET、POST) / assets / jobs
+- 适配层锁死 museav-cli 的 stdout 契约（projects→id 换行、assets→`id\turl`、jobs→JSON 数组），
+  stderr 表格只补展示字段，解析失败降级不白屏
+- 新建项目带上限保护：已达 5 个（服务端上限）时按钮禁用并提示
+- 28 个测试：12 解析契约（真机输出夹具）+ 8 路由（stub CLI，不联网）+ 8 UI
+
+### 没做的
+
+- 不出图、不传文件（走 `mcp__museav__*`）
+- 不轮询、不缓存
+- 不注册 agent 工具（项目相关的工具在 v0.2 考虑）

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 webkubor
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.en.md

@@ -0,0 +1,114 @@
+# dsh-museav-assets
+
+An **Assets** tab for DeepSeek Harness: browse MUSE AV assets by project (workspace)
+and see recent generations. Click an asset to copy its direct URL, ready to use as a
+ref image (`museav gen --ref <url>`).
+
+Built on the local **museav CLI**. It deliberately does not re-implement generation
+or upload — those stay with the `mcp__museav__*` tools already bridged into DSH. This
+plugin only adds the missing view: *which projects do I have, and what is in each one*.
+
+## Where the tab goes
+
+The sixth tab in the main area, registered on `conversation.view` with **order 40**,
+after Chat (0) / Trajectory (10) / Memory (20) / Context / Computer Environment (30).
+
+```js
+ctx.slots.register({
+  name: 'conversation.view',
+  id: 'museav-assets',
+  order: 40,
+  label: () => t('title'),   // "Assets"
+}, AssetsView)
+```
+
+Main area rather than the right panel: assets are a one-screen job (project chips +
+thumbnail grid + generation feed); the right panel is a narrow pane meant for a single
+selected object, and its tab semantics are "the thing you currently have open" — assets
+are global and belong to no session. There is precedent for a global view living in the
+session shell: `dsh-user-mirror`'s Memory tab does the same.
+
+## Install
+
+> **Package name: `@dsh-plugins/dsh-museav-assets`** (same scope as the three sibling plugins).
+> The unscoped `dsh-museav-assets` was the original 0.1.0 name; it is deprecated and points here.
+
+On the desktop app, install it from the app's **plugin manager** (it pulls from npm) — the CLI
+cannot write to the `desktop` profile
+(`profile "desktop" is managed exclusively by the Electron application`).
+
+Self-managed profile (one the CLI can write to, e.g. `desktop-local` for local dev):
+
+```sh
+npm run deploy   # rsync into ~/.dsh/profiles/desktop-local/node_modules/@dsh-plugins/dsh-museav-assets/
+```
+
+Then add the package to that profile (`~/.dsh/profiles/desktop-local/package.json`):
+
+```jsonc
+"dependencies": { "dsh-museav-assets": "^0.1.0" },
+"dsh": { "profile": { "bundles": [ /* … */, "dsh-museav-assets" ] } }
+```
+
+Changing profile config is a topology change: **quit and reopen the desktop app** (`~/.dsh/restart.sh` is retired — it now detects the missing 3080 service and exits 1).
+(never `launchctl kickstart` directly).
+
+Only prerequisite: the local `museav` CLI is logged in (`museav login`).
+The plugin never reads or forwards the token in `~/.museav.json`.
+
+## Endpoints
+
+| Route | What it does |
+|---|---|
+| `GET /api/dsh-museav-assets/health` | CLI presence + version + workspace cap |
+| `GET /api/dsh-museav-assets/projects` | Workspaces with gen/asset counts + `used/limit/full` |
+| `POST /api/dsh-museav-assets/projects` | `{name}` create a workspace (≤20 chars) |
+| `GET /api/dsh-museav-assets/assets?project=<id\|name>` | Assets in that workspace |
+| `GET /api/dsh-museav-assets/jobs?limit=<n>` | Recent generation records |
+
+Failure semantics: any upstream/CLI error returns **200 + `{ok:false,error}`** so the tab
+can render the reason inline; only invalid parameters return 400. One flaky request
+should not blank the tab.
+
+## The CLI contract
+
+`lib/museav.js` is the only file that knows what the CLI output looks like. museav-cli's
+stdout/stderr split *is* its scripting contract:
+
+| Command | stdout (source of truth) | stderr (human-facing extras) |
+|---|---|---|
+| `museav projects` | one id per line | name / gen x/y / assets n / brand |
+| `museav projects assets --project X` | `id<TAB>url` | name / media_type / tags |
+| `museav jobs` | **a full JSON array** | a pretty summary |
+| `museav projects create --name N` | the new id | success message |
+
+So: truth comes from stdout, stderr only fills in display fields. If stderr stops
+parsing, the view degrades (name falls back to the first 8 chars of the id, asset name to
+"(unnamed)") rather than going blank. `test/museav-parse.test.mjs` pins this against
+output captured from the real CLI.
+
+> Known fragility: `museav projects` and `projects assets` have **no `--json`**, so the
+> display fields can only be parsed out of the stderr table. Adding `--json` to those two
+> commands in museav-cli removes the fragility for good — the source of truth there is
+> `~/dev/muse/museav-cli/src/commands/projects.ts`, a different repo.
+
+## Non-goals
+
+- No generation, no uploads — that is the CLI/MCP's job; a second implementation only
+  creates two places to drift
+- No caching — the data is cheap and the state moves; add a cache if it is ever needed
+- No polling — one fetch on mount, then only when the user hits Refresh
+
+## Tests
+
+```sh
+npm run check && npm test   # 28: 12 parsing contract + 8 routes + 8 UI
+```
+
+Route tests substitute a stub executable for the CLI (via the `MUSEAW_BIN` environment
+variable) — no network, no real account.
+
+Why an env var rather than plugin config: functional plugins in this Cordis cannot read
+`ctx.config` (declaring it leaves the plugin `pending (waiting for service: config)`).
+`MUSEAW_BIN` also matches the convention already used by the MCP bridge in the profile.
+It is read per request, so changing it needs no plugin reload.

package/README.md

@@ -0,0 +1,127 @@
+<h1 align="center">🖼️ dsh-museav-assets</h1>
+
+<p align="center">
+  <strong>在 DSH 里看得见你的素材库。</strong><br>
+  主区多一个「资产」tab：按项目（工作区）看 MUSE AV 的素材库与最近出图，<br>
+  点素材即复制直链，直接当垫图用（<code>museav gen --ref &lt;url&gt;</code>）。
+</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/@dsh-plugins/dsh-museav-assets"><img src="https://img.shields.io/npm/v/%40dsh-plugins%2Fdsh-museav-assets?style=for-the-badge&color=4d6bfe&logo=npm&label=npm" alt="npm" /></a>
+  <img src="https://img.shields.io/badge/runtime_deps-0-5A9E6F?style=for-the-badge" alt="runtime deps" />
+  <img src="https://img.shields.io/badge/license-MIT-777?style=for-the-badge" alt="MIT" />
+  <a href="https://github.com/deepseek-ai/deepseek-harness"><img src="https://img.shields.io/badge/DeepSeek_Harness-Plugin-4d6bfe?style=for-the-badge" alt="DSH Plugin" /></a>
+</p>
+
+<p align="center">
+  <a href="README.en.md">English</a> | 中文
+</p>
+
+## Why This
+
+| | 本插件 | `mcp__museav__*` 工具 | 直接敲 CLI |
+|---|---|---|---|
+| 看清「有哪些项目、各有多少素材」 | ✅ 一屏网格 + 计数 | ❌ 单次调用，看不见全貌 | ⚠️ 逐条命令，靠脑记 |
+| 素材拿直链当垫图 | ✅ 点一下复制 | ⚠️ 得先知道素材 id | ⚠️ 手抄 URL |
+| 出图 / 上传能力 | ➖ 不重复实现，转交 MCP | ✅ 完整 | ✅ 完整 |
+| 密钥 | ✅ 不读不转发 `~/.museav.json` | ✅ | ⚠️ token 落在本机明文文件 |
+
+基于本机的 **museav CLI**，不重复造出图能力 —— 出图/上传继续走已经接进 DSH 的
+`mcp__museav__*` 工具（见 profile 的 cordis.patch.yml）。这个插件只补一件事：
+**在 DSH 里看得见「我有哪些项目、每个项目里有什么素材」**。
+
+## 放在哪个 tab
+
+主区顶栏，`conversation.view` 的第 6 个 tab，**order 40**，排在
+对话(0) / 轨迹(10) / 记忆(20) / 上下文 / 电脑环境(30) 之后。
+
+```js
+ctx.slots.register({
+  name: 'conversation.view',
+  id: 'museav-assets',
+  order: 40,
+  label: () => t('title'),   // 「资产」
+}, AssetsView)
+```
+
+为什么是主区而不是右侧面板：资产是「一屏看完的事」（项目列表 + 缩略图网格 + 出图流水），
+右侧面板是给单份文档/单个预览的窄栏，塞不下网格；而且右侧面板的 tab 语义是
+「当前选中对象」，资产是全局的，不属于任何一个会话。主区 tab 已有先例
+（dsh-user-mirror 的「记忆」同样是全局内容挂在会话壳里）。
+
+## 装
+
+> **包名 `@dsh-plugins/dsh-museav-assets`**（与另外三个插件同一 scope）。
+> `dsh-museav-assets`（无 scope）是最早 0.1.0 的历史名，已 deprecated，指向本名。
+
+桌面端在**应用内的插件管理**里装 —— 它从 npm 拉。命令行装不进 `desktop` profile
+（`profile "desktop" is managed exclusively by the Electron application`）。
+
+自建 profile（CLI 能管的，例如本地开发用的 `desktop-local`）：
+
+```sh
+npm run deploy   # rsync 进 ~/.dsh/profiles/desktop-local/node_modules/@dsh-plugins/dsh-museav-assets/
+```
+
+再把包名加进该 profile（`~/.dsh/profiles/desktop-local/package.json`）：
+
+```jsonc
+"dependencies": { "@dsh-plugins/dsh-museav-assets": "^0.1.1" },
+"dsh": { "profile": { "bundles": [ /* … */, "@dsh-plugins/dsh-museav-assets" ] } }
+```
+
+拓扑级变更要重启：桌面端是**退出并重开 app**（`~/.dsh/restart.sh` 已作废，现在探测不到 3080 服务会直接以 1 退出）。
+
+前置条件只有一条：本机 `museav` CLI 已登录（`museav login`）。
+插件自己**不读也不转发** `~/.museav.json` 里的 token。
+
+## 接口
+
+| 路由 | 做什么 |
+|---|---|
+| `GET /api/dsh-museav-assets/health` | CLI 在不在、什么版本、工作区上限 |
+| `GET /api/dsh-museav-assets/projects` | 工作区列表 + 出图/素材计数 + `used/limit/full` |
+| `POST /api/dsh-museav-assets/projects` | `{name}` 新建工作区（≤20 字） |
+| `GET /api/dsh-museav-assets/assets?project=<id\|名>` | 该工作区的素材库 |
+| `GET /api/dsh-museav-assets/jobs?limit=<n>` | 最近出图记录 |
+
+失败语义：**上游/CLI 出错一律 200 + `{ok:false,error}`**，tab 内联显示原因；
+只有参数不合法才 400。一次网络抖动不该让 tab 变白屏。
+
+## CLI 契约（插件唯一依赖的东西）
+
+`lib/museav.js` 是**唯一**知道 CLI 输出长什么样的文件。museav-cli 的
+stdout/stderr 分工就是它的脚本契约：
+
+| 命令 | stdout（真值） | stderr（人看的补充） |
+|---|---|---|
+| `museav projects` | id 换行 | 名称 / 出图 x/y / 素材 n / brand |
+| `museav projects assets --project X` | `id<TAB>url` | 名称 / media_type / tags |
+| `museav jobs` | **完整 JSON 数组** | 表格式摘要 |
+| `museav projects create --name N` | 新建 id | 成功提示 |
+
+所以：**真值一律取 stdout，stderr 只用来补展示字段**。stderr 解析不出来就降级
+（项目名退回 id 前 8 位，素材名退回「未命名」），绝不因为上游改一句中文就让整页空白。
+`test/museav-parse.test.mjs` 用真机抓的输出当夹具守着这条线。
+
+> 已知脆点：`museav projects` / `projects assets` **没有 `--json`**，展示字段只能从
+> stderr 表格里解析。给 museav-cli 这两个命令加 `--json` 就能把这条脆点彻底消掉 ——
+> 真源在 `~/dev/muse/museav-cli/src/commands/projects.ts`，改的是上游仓，不是本插件。
+
+## 不做什么
+
+- 不出图、不传文件 —— 那是 CLI / MCP 的活，重复实现只会两处漂移
+- 不缓存 —— 数据便宜，状态随时在变；想要缓存再加
+- 不轮询 —— 挂载时拉一次，用户点「刷新」才重跑
+
+## 测试
+
+```sh
+npm run check && npm test   # 28 个：解析契约 12 + 路由 8 + UI 8
+```
+
+路由测试用 stub 可执行文件顶替 CLI（走 `MUSEAW_BIN` 环境变量），**全程不联网、不碰真账号**。
+
+CLI 路径为什么是环境变量而不是插件配置：这套 Cordis 的函数式插件读不到 `ctx.config`
+（声明了会永远 `pending (waiting for service: config)`）。`MUSEAW_BIN` 也正好和 profile
+里 MCP 桥的约定一致。改它不用重载插件 —— 每次请求现取。

package/cordis.patch.yml

@@ -0,0 +1,10 @@
+# dsh-museav-assets bundle patch：把资产台插入 web profile。
+#
+# 作为 dsh.bundle.patch 被 dsh 加载器消费。insert 引用本包，加载器从 profile 的
+# node_modules 解析它并挂成 Cordis 插件。
+# 不写 config = 用插件 Config 默认值（见 lib/index.js export const Config）。
+- insert:
+    # 插件只暴露 4 条只读/轻写路由，全部 fail-open：CLI 没装、没登录、出错都回
+    # {ok:false,error}，不影响 boot graph。
+    - id: @dsh-plugins/dsh-museav-assets
+      name: '@dsh-plugins/dsh-museav-assets'