@fg-lab/amadeus-qq 0.0.0-stage → 1.2.1

package/lib/client.js

@@ -0,0 +1,380 @@
+window.__ModuleLoader__.load({
+  id: '@fg-lab/amadeus-qq',
+  factory: (require) => {
+    const React = require('react');
+    const h = React.createElement;
+// Pure client-side helpers, inlined into the browser bundle by build-client.
+// No ESM imports here: the bundle is a lazy-CJS factory with only React injected.
+
+const API_ROOT = '/api/amadeus-qq'
+const MODE_IDS = Object.freeze([
+  'observe', 'safe-chat', 'enhanced', 'autonomous-social', 'owner-agent',
+])
+const OVERRIDE_VALUES = new Set(['inherit', 'allow', 'deny'])
+
+function revisionOf(entry) {
+  return entry?.revision ?? 0
+}
+
+function draftFromEntry(entry) {
+  const overrides = {}
+  for (const capability of entry?.capabilities ?? []) {
+    if (capability.override === 'allow' || capability.override === 'deny') {
+      overrides[capability.id] = capability.override
+    }
+  }
+  return {
+    sceneKey: entry?.key ?? '',
+    mode: entry?.permissions?.mode ?? entry?.effectiveMode ?? 'safe-chat',
+    overrides,
+    expectedRevision: revisionOf(entry),
+  }
+}
+
+function isDraftDirty(entry, draft) {
+  if (!entry || !draft) return false
+  const base = draftFromEntry(entry)
+  if (base.mode !== draft.mode) return true
+  const keys = new Set([...Object.keys(base.overrides), ...Object.keys(draft.overrides ?? {})])
+  for (const key of keys) {
+    if ((base.overrides[key] ?? 'inherit') !== (draft.overrides?.[key] ?? 'inherit')) return true
+  }
+  return false
+}
+
+/**
+ * Decide which draft the editor should show after a Scene row is selected.
+ * A dirty draft is never replaced: the operator must save or cancel first, so
+ * an unsaved permission change can never be lost by an accidental click.
+ */
+function nextDraftForSelection(currentEntry, currentDraft, targetEntry) {
+  if (currentDraft && isDraftDirty(currentEntry, currentDraft)) {
+    return { blocked: true, draft: currentDraft }
+  }
+  if (!targetEntry) return { blocked: false, draft: null }
+  const fresh = { ...draftFromEntry(targetEntry), sceneKey: targetEntry.key }
+  return { blocked: false, draft: fresh }
+}
+
+function validateDraft(entry, draft) {
+  if (!entry || !draft) return '未选择场景'
+  if (!MODE_IDS.includes(draft.mode)) return '模式无效'
+  if (draft.mode === 'owner-agent' && entry.ownerEligible !== true) return 'Owner Agent 仅可用于已配置的可信 Owner 私聊'
+  const known = new Set((entry.capabilities ?? []).map(capability => capability.id))
+  for (const [id, value] of Object.entries(draft.overrides ?? {})) {
+    if (!known.has(id)) return '包含未知能力：' + id
+    if (!OVERRIDE_VALUES.has(value)) return '覆盖值无效：' + id
+  }
+  return null
+}
+
+const CAPABILITY_REASON_HINTS = Object.freeze({
+  'owner-directory-required': '需在可信 Owner 私聊使用 Owner Agent 模式，并对该能力显式 allow。',
+  'global-deny': '宿主全局策略拒绝该能力，Scene 设置无法解除。',
+  'account-publish-required': '该 QQ 账号未获授权使用 QQ 空间发布。',
+  'scene-deny': '该 Scene 显式拒绝（deny）此能力。',
+  'owner-private-required': '仅可信 Owner 私聊的 Owner Agent 模式可用。',
+  'owner-tool-required': '宿主未为该 Owner 场景配置此工具。',
+  'group-only': '仅群聊 Scene 可用；私聊不适用，与 Owner 权限无关。',
+  'qzone-read-explicit': '需在自主社交或可信 Owner Agent 模式显式 allow 才能读取 QZone。',
+  'qzone-use-explicit': '需在自主社交或可信 Owner Agent 模式显式 allow 才能使用 QZone。',
+  'profile-write-explicit': '账号资料写入仅限可信 Owner 私聊的 Owner Agent 模式并显式 allow。',
+  'owner-workspace-required': 'Owner 工作区需可信 Owner 私聊、Owner Agent 模式并显式 allow。',
+  mode: '当前模式未包含此能力。',
+  'scene-allow': '该 Scene 显式允许，但保存后按最新模式重算。',
+})
+
+/**
+ * Fixed Chinese guidance for an implemented-but-denied capability. Uses only
+ * known denial reasons; an unknown reason falls back to a generic sentence and
+ * never echoes the server value. `Object.hasOwn` keeps names such as
+ * `constructor` or `toString` from resolving to inherited Object members.
+ */
+function capabilityStateHint(capability) {
+  if (!capability || capability.implemented !== true || capability.effective === true) return null
+  const reason = capability.reason
+  return typeof reason === 'string' && Object.hasOwn(CAPABILITY_REASON_HINTS, reason)
+    ? CAPABILITY_REASON_HINTS[reason]
+    : '当前策略拒绝该能力。'
+}
+
+/** Configuration hints; never a path, token or credential. */
+function capabilityConfigHint(capability, runtime = {}) {
+  if (!capability || capability.implemented !== true) return null
+  if (capability.id === 'qq.owner.workspace' && runtime.ownerWorkspace?.configured !== true) {
+    return '需要核心用实际 QQ 配置注册专用目录并授权后才可用。'
+  }
+  if ((capability.id === 'qq.qzone.use' || capability.id === 'qq.qzone.read' || capability.id === 'qq.qzone.publish')
+    && runtime.providers?.qzone?.installed !== true) {
+    return '需要配置 QZone loopback Provider 后才可用；当前未观测到接线。'
+  }
+  return null
+}
+
+function buildSaveRequest(entry, draft) {
+  const overrides = {}
+  for (const [id, value] of Object.entries(draft.overrides ?? {})) {
+    if (value === 'allow' || value === 'deny') overrides[id] = value
+  }
+  return {
+    scene: {
+      botId: entry.scene.botId,
+      kind: entry.scene.kind,
+      peerId: entry.scene.peerId,
+    },
+    access: { mode: draft.mode, overrides },
+    expectedRevision: draft.expectedRevision,
+  }
+}
+
+async function readPayload(response) {
+  let payload
+  try {
+    payload = await response.json()
+  } catch {
+    const error = new Error('管理接口返回了无法解析的响应（HTTP ' + response.status + '）')
+    error.status = response.status
+    throw error
+  }
+  if (!response.ok || !payload || payload.ok !== true) {
+    const error = new Error(payload && payload.error ? payload.error : 'HTTP ' + response.status)
+    error.status = response.status
+    if (typeof payload?.code === 'string') error.code = payload.code
+    if (response.status === 409) error.conflict = true
+    throw error
+  }
+  return payload.data
+}
+
+/**
+ * True only when the management surface is genuinely unusable for this page:
+ * authentication/owner admission failed, or the Host lacks the management
+ * service. Only the explicitly listed policy rejections and session-cancel
+ * failures stay editable; any unknown code falls back to its HTTP status so an
+ * unrecognized 401/403/503 keeps the editor locked (fail closed).
+ */
+const EDITABLE_FAILURE_CODES = new Set([
+  'QQ_OWNER_AGENT_FORBIDDEN',
+  'QQ_SCENE_UNAUTHORIZED',
+  'QQ_SESSION_CANCEL_FAILED',
+  'QQ_SESSION_CANCEL_UNAVAILABLE',
+  'QQ_PERMISSION_CONFLICT',
+])
+
+function requiresReadOnly(error) {
+  const code = typeof error?.code === 'string' ? error.code : ''
+  if (code === 'QQ_AUTH_REQUIRED' || code === 'QQ_MANAGEMENT_UNAVAILABLE') return true
+  if (EDITABLE_FAILURE_CODES.has(code)) return false
+  const status = Number(error?.status)
+  return status === 401 || status === 403 || status === 503
+}
+
+/** Fixed Chinese guidance per management failure code; never echoes server internals. */
+function managementErrorMessage(error) {
+  const code = typeof error?.code === 'string' ? error.code : ''
+  if (code === 'QQ_PERMISSION_CONFLICT') {
+    return '权限已被其他窗口修改（409）；请重新加载后再编辑。'
+  }
+  if (code === 'QQ_AUTH_REQUIRED') {
+    return '当前请求没有通过 DSH 认证或 Owner 授权；请从已认证的 DSH 页面访问。'
+  }
+  if (code === 'QQ_MANAGEMENT_UNAVAILABLE') {
+    return '管理接口不可用；QQ 插件可能未启用或缺少 Host 服务。'
+  }
+  if (code === 'QQ_OWNER_AGENT_FORBIDDEN') {
+    return 'Owner Agent 仅可用于已配置的可信 Owner 私聊；当前场景或配置不允许保存该模式。'
+  }
+  if (code === 'QQ_SCENE_UNAUTHORIZED') {
+    return '该场景已不在 QQ 允许列表内；请更新配置并刷新后再操作。'
+  }
+  if (code === 'QQ_SESSION_CANCEL_FAILED' || code === 'QQ_SESSION_CANCEL_UNAVAILABLE') {
+    return '权限可能已写入，但旧 QQ Session 未能安全取消；请刷新确认最新 revision 后再编辑。'
+  }
+  if (code === 'QQ_DELIVERY_IN_FLIGHT') {
+    return '该投递仍在进行中，现在不能标记为失败；请稍后刷新重试。'
+  }
+  if (code === 'QQ_DELIVERY_NOT_UNKNOWN') {
+    return '该投递已不是 unknown 状态；请刷新确认后再操作。'
+  }
+  if (code === 'QQ_DELIVERY_NOT_FOUND') {
+    return '未找到该 actionId 的未知投递；请刷新后确认。'
+  }
+  if (code === 'QQ_REQUEST_INVALID') {
+    return '管理请求无效；请刷新后重试。'
+  }
+  const status = Number(error?.status)
+  if (status === 401 || status === 403) {
+    return '当前请求没有通过 DSH 认证或 Owner 授权（HTTP ' + status + '）；请从已认证的 DSH 页面访问。'
+  }
+  if (status === 503) {
+    return '管理接口不可用（503）；QQ 插件可能未启用或缺少 Host 服务。'
+  }
+  return 'QQ 管理请求失败' + (Number.isInteger(status) ? '（HTTP ' + status + '）' : '')
+}
+
+async function fetchScenes(fetchImpl = fetch) {
+  const response = await fetchImpl(API_ROOT + '/scenes', {
+    credentials: 'same-origin',
+    headers: { 'x-amadeus-qq': '1' },
+  })
+  return readPayload(response)
+}
+
+async function savePermissions(entry, draft, fetchImpl = fetch) {
+  const response = await fetchImpl(API_ROOT + '/scenes/permissions', {
+    method: 'POST',
+    credentials: 'same-origin',
+    headers: { 'content-type': 'application/json', 'x-amadeus-qq': '1' },
+    body: JSON.stringify(buildSaveRequest(entry, draft)),
+  })
+  return readPayload(response)
+}
+
+/**
+ * Storage key for one operator confirmation input. It is scoped to the Scene
+ * and prefixed, so two Scenes with the same actionId never share a draft, and
+ * prototype names such as `__proto__` or `constructor` can never be the key.
+ * The API still receives the untouched actionId.
+ */
+function deliveryInputKey(entry, actionId) {
+  return 'delivery-confirm:' + String(entry?.key ?? '') + '|' + String(actionId)
+}
+
+/**
+ * Fixed Settings copy for the Owner workspace. It never includes a directory
+ * path, token or provider URL; an unwired core keeps the feature "pending".
+ */
+function ownerWorkspaceSummary(status) {
+  const configured = status?.configured === true
+  const writes = status?.writes === true
+  const maxBytes = Number.isSafeInteger(status?.maxBytes) && status.maxBytes > 0 ? status.maxBytes : 0
+  return {
+    state: configured ? '已接线' : 'pending（待核心接线）',
+    writes: writes ? '可写（逐次审批）' : '只读',
+    maxBytes,
+    note: configured
+      ? '目录与写入授权由插件配置决定；本页不显示路径，也不保存配置。实机写入仍需人工审批，尚未完成真实验证。'
+      : 'Owner preset 已随包；核心尚未用实际 QQ 配置注册 Owner 工作区（未接线），当前不可读、不可写。',
+  }
+}
+
+/** Provider labels only; never a root path, loopback URL or token value. */
+function providerSummary(providers) {
+  const stateOf = provider => {
+    if (provider?.installed !== true) return '未观测到接线'
+    if (provider?.configured !== true) return '已安装，未配置'
+    return provider?.enabled === true ? '已配置' : '已安装，未启用'
+  }
+  return {
+    mediaSend: stateOf(providers?.mediaSend),
+    qzone: stateOf(providers?.qzone),
+  }
+}
+
+/**
+ * Manual reconciliation for one unknown delivery. Only the owner management
+ * surface can do this, and the body never carries message content: just the
+ * Scene identity, the operator-confirmed actionId and the fixed outcome.
+ */
+async function resolveUnknownDelivery(entry, actionId, fetchImpl = fetch) {
+  const response = await fetchImpl(API_ROOT + '/deliveries/resolve', {
+    method: 'POST',
+    credentials: 'same-origin',
+    headers: { 'content-type': 'application/json', 'x-amadeus-qq': '1' },
+    body: JSON.stringify({
+      scene: {
+        botId: entry.scene.botId,
+        kind: entry.scene.kind,
+        peerId: entry.scene.peerId,
+      },
+      actionId,
+      outcome: 'failed',
+    }),
+  })
+  return readPayload(response)
+}
+
+
+const PANEL_CSS = `
+[data-amadeus-qq]{box-sizing:border-box;color:var(--dsw-alias-label-primary,#203333);font:13px/1.6 system-ui,sans-serif;max-width:760px}
+[data-amadeus-qq] *{box-sizing:border-box}
+[data-amadeus-qq] h2{font-size:21px;margin:0 0 5px}
+[data-amadeus-qq] p{margin:0 0 14px;opacity:.75}
+[data-amadeus-qq] .summary{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:9px;margin:14px 0}
+[data-amadeus-qq] .metric{border:1px solid var(--dsw-alias-border-secondary,#8c8c8c55);border-radius:12px;padding:12px;background:var(--dsw-alias-bg-layer-2,#8c8c8c10)}
+[data-amadeus-qq] .metric small{display:block;opacity:.68;font-size:11px}
+[data-amadeus-qq] .metric strong{display:block;font-size:14px;margin-top:3px;word-break:break-word}
+[data-amadeus-qq] button{border:1px solid #178a69;background:#178a69;color:white;border-radius:9px;padding:8px 14px;font:inherit;cursor:pointer}
+[data-amadeus-qq] button:focus-visible{outline:2px solid #178a69;outline-offset:2px}
+[data-amadeus-qq] .error{color:#ab3535;margin:12px 0}
+@media(max-width:560px){[data-amadeus-qq] .summary{grid-template-columns:1fr}}
+`
+
+function Panel() {
+  const [setup, setSetup] = React.useState(null)
+  const [runtime, setRuntime] = React.useState(null)
+  const [error, setError] = React.useState('')
+  React.useEffect(() => {
+    let active = true
+    const load = async () => {
+      try {
+        const [a, b] = await Promise.all([
+          fetch('/api/amadeus-qq/setup', { credentials: 'same-origin' }),
+          fetch('/api/amadeus-qq/scenes', { credentials: 'same-origin' }),
+        ])
+        const [left, right] = await Promise.all([a.json(), b.json()])
+        if (!a.ok || !b.ok || !left.ok || !right.ok) throw new Error('请在 DSH Owner 会话中打开管理控制台')
+        if (active) { setSetup(left.data); setRuntime(right.data); setError('') }
+      } catch (failure) {
+        if (active) setError(failure instanceof Error ? failure.message : '状态读取失败')
+      }
+    }
+    void load()
+    return () => { active = false }
+  }, [])
+  const workspace = setup?.workspaces?.find(item => item.id === setup.workspaceId)
+  const rows = (setup?.groups?.length ?? 0) + (setup?.privatePeers?.length ?? 0)
+  const transportText = { connected: '已连接', connecting: '连接中', disconnected: '未连接', disabled: '已暂停' }[runtime?.health?.transport] ?? '未连接'
+  const metric = (label, value) => React.createElement('div', { className: 'metric' },
+    React.createElement('small', null, label), React.createElement('strong', null, value))
+  return React.createElement('div', { 'data-amadeus-qq': 'true' },
+    React.createElement('style', null, PANEL_CSS),
+    React.createElement('h2', null, 'Amadeus QQ'),
+    React.createElement('p', null, '首次设置和详细权限在受 DSH Owner 保护的本地 Web Console 中完成。'),
+    error ? React.createElement('div', { className: 'error', role: 'status' }, error) : null,
+    React.createElement('div', { className: 'summary' },
+      metric('插件', setup?.enabled ? '已启用' : '待配置'),
+      metric('NapCat', transportText),
+      metric('Bot / Owner', `${setup?.botId || '—'} / ${setup?.ownerId || '—'}`),
+      metric('Workspace / 会话', `${workspace?.title || '未选择'} · ${rows} 个`)),
+    React.createElement('button', { type: 'button', onClick: () => window.open('/api/amadeus-qq/console', '_blank', 'noopener,noreferrer') },
+      setup?.enabled ? '打开 Web Console' : '开始首次设置'))
+}
+
+return {
+  inject: ['slots'],
+  apply(ctx) {
+    let active
+    const activate = () => {
+      if (active) return active.dispose
+      let dispose = () => {}
+      try {
+        dispose = ctx.slots.inject('settings.section', () => ctx.slots.register({
+          name: 'settings.section', id: 'amadeus-qq', order: 30, label: () => 'Amadeus QQ',
+        }, Panel)) || (() => {})
+      } catch (error) { console.error('[amadeus-qq] settings.section unavailable', error) }
+      const disposal = () => {
+        if (!active || active.dispose !== disposal) return
+        active = undefined
+        try { dispose() } catch {}
+      }
+      active = { dispose: disposal }
+      return disposal
+    }
+    if (typeof ctx.effect === 'function') ctx.effect(() => activate(), 'amadeus-qq: settings page')
+    else activate()
+  },
+}
+
+  }
+});

package/package.json

@@ -1,6 +1,91 @@
-{
-  "name": "@fg-lab/amadeus-qq",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+{
+  "name": "@fg-lab/amadeus-qq",
+  "version": "1.2.1",
+  "license": "MIT",
+  "description": "Amadeus QQ continuous interaction plugin for DeepSeek Harness",
+  "type": "module",
+  "main": "src/index.js",
+  "exports": {
+    ".": "./src/index.js",
+    "./preset-guard": "./src/preset-guard.mjs",
+    "./client": "./lib/client.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "src/*.js",
+    "src/*.mjs",
+    "src/console",
+    "src/client",
+    "lib",
+    "scripts",
+    "cordis.patch.yml",
+    "preset.patch.yml",
+    "README.md",
+    "LICENSE",
+    "docs/RELEASE_NOTES.md",
+    "docs/COMPATIBILITY.md",
+    "docs/V1_SCOPE.md",
+    "docs/v1.1",
+    "docs/screenshots",
+    "docs/verification/V1_REAL_NAPCAT_2026-10-27.md",
+    "docs/UPGRADE_POLICY.md",
+    "docs/DATA_MIGRATION.md",
+    "docs/RELEASE_CHECKLIST.md",
+    "docs/INSTALL_V1_2.md",
+    "scripts/release-audit.mjs",
+    "screenshots.json",
+    "assets/market-icon.png",
+    "README.zh-CN.md",
+    "REFERENCE.md",
+    "docs/PUBLISHING.md"
+  ],
+  "dsh": {
+    "manifestVersion": 1,
+    "bundle": {
+      "patch": [
+        "./cordis.patch.yml",
+        "./preset.patch.yml"
+      ]
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-settings"
+      ]
+    }
+  },
+  "dependencies": {
+    "ws": "^8.18.3"
+  },
+  "scripts": {
+    "build": "node scripts/build-client.mjs",
+    "test": "node --test tests/*.test.mjs",
+    "verify:release": "node scripts/release-audit.mjs"
+  },
+  "engines": {
+    "node": ">=22.13.0",
+    "dsh": ">=0.2.1-rc.3 <0.3.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/jeskoky-pixel/amadeus-qq.git"
+  },
+  "homepage": "https://github.com/jeskoky-pixel/amadeus-qq#readme",
+  "bugs": {
+    "url": "https://github.com/jeskoky-pixel/amadeus-qq/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "dsh-plugin",
+    "amadeus",
+    "qq"
+  ],
+  "peerDependencies": {
+    "@deepseek-ai/schemastery": "^3.18.1"
+  },
+  "devDependencies": {
+    "@deepseek-ai/schemastery": "^3.18.1"
+  }
+}

package/preset.patch.yml

@@ -0,0 +1,103 @@
+# Dedicated DSH Agent preset shipped by the same @fg-lab/amadeus-qq package.
+# It declares only the QQ platform operation contract (tool boundary) and no
+# persona or character card. The guard lives with the preset, so a persisted QQ
+# Session keeps its tool boundary even when the connector is disabled or absent.
+- insert:
+    - id: preset-amadeus-qq
+      name: '@deepseek-ai/dsh-agent-preset'
+      config:
+        id: amadeus-qq
+        name: Amadeus QQ
+        description: Restricted continuous QQ conversation Session
+        order: 20
+        plugins:
+          - id: qq-tool-boundary
+            # Mount the package root here. DSH's preset registry resolves the
+            # package root reliably; a package subpath export imports under
+            # plain Node but leaves this row "never started" in the registry.
+            name: '@fg-lab/amadeus-qq'
+            config:
+              presetGuard: true
+    - id: preset-amadeus-qq-search
+      name: '@deepseek-ai/dsh-agent-preset'
+      config:
+        id: amadeus-qq-search
+        name: Amadeus QQ Search
+        description: Restricted QQ conversation with the Host web search boundary
+        order: 21
+        plugins:
+          - id: qq-web-search
+            name: '@deepseek-ai/dsh-tool-web'
+            config:
+              search: true
+              fetch: false
+              searchTimeoutMs: 60000
+          - id: qq-search-boundary
+            name: '@fg-lab/amadeus-qq'
+            config:
+              presetGuard: true
+              allowSearch: true
+    - id: preset-amadeus-qq-media
+      name: '@deepseek-ai/dsh-agent-preset'
+      config:
+        id: amadeus-qq-media
+        name: Amadeus QQ Media
+        description: Restricted QQ conversation with an enhanced media read boundary
+        order: 22
+        plugins:
+          - id: qq-media-boundary
+            name: '@fg-lab/amadeus-qq'
+            config:
+              presetGuard: true
+              level: 2
+    - id: preset-amadeus-qq-media-search
+      name: '@deepseek-ai/dsh-agent-preset'
+      config:
+        id: amadeus-qq-media-search
+        name: Amadeus QQ Media Search
+        description: Restricted QQ conversation with enhanced media read and Host web search
+        order: 23
+        plugins:
+          - id: qq-media-web-search
+            name: '@deepseek-ai/dsh-tool-web'
+            config:
+              search: true
+              fetch: false
+              searchTimeoutMs: 60000
+          - id: qq-media-search-boundary
+            name: '@fg-lab/amadeus-qq'
+            config:
+              presetGuard: true
+              level: 2
+              allowSearch: true
+    - id: preset-amadeus-qq-owner
+      name: '@deepseek-ai/dsh-agent-preset'
+      config:
+        id: amadeus-qq-owner
+        name: Amadeus QQ Owner
+        description: Restricted Owner workspace; selected only for a trusted Owner Agent Scene
+        order: 24
+        plugins:
+          - id: qq-owner-boundary
+            # Level 4 guards the QQ tool surface. The Owner workspace tool is
+            # mounted only after an operator supplies ownerWorkspaceRoot; until
+            # then Settings shows it as pending and no file tool exists.
+            name: '@fg-lab/amadeus-qq'
+            config:
+              presetGuard: true
+              level: 4
+          - id: owner-tool-pwsh
+            name: '@deepseek-ai/dsh-tool-pwsh'
+          - id: owner-tool-fs
+            name: '@deepseek-ai/dsh-tool-fs'
+          - id: owner-tool-fs-search
+            name: '@deepseek-ai/dsh-tool-fs-search'
+            config:
+              sampleOverCapGlobResults: false
+          - id: owner-tool-jobs
+            name: '@deepseek-ai/dsh-tool-jobs'
+          - id: owner-tool-web
+            name: '@deepseek-ai/dsh-tool-web'
+            config:
+              search: true
+              fetch: true

package/screenshots.json

@@ -0,0 +1,6 @@
+[
+  "docs/screenshots/v1.2-overview.png",
+  "docs/screenshots/global-desktop.png",
+  "docs/screenshots/account-browser.png",
+  "docs/screenshots/account-dark-browser.png"
+]

package/scripts/build-client.mjs

@@ -0,0 +1,52 @@
+/**
+ * Build the browser half as a DSH lazy-CJS module.
+ * The template is plain JavaScript (no ESM import/export); this script wraps it
+ * in the official ModuleLoader format and verifies the result parses.
+ */
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import vm from 'node:vm'
+
+const root = dirname(dirname(fileURLToPath(import.meta.url)))
+const templatePath = join(root, 'src', 'client', 'factory.template.js')
+const logicPath = join(root, 'src', 'client', 'logic.js')
+const outputPath = join(root, 'lib', 'client.js')
+
+const template = readFileSync(templatePath, 'utf8')
+const logic = readFileSync(logicPath, 'utf8').replace(/^export\s+/gm, '')
+for (const source of [template, logic]) {
+  if (/^\s*(import|export)\s/m.test(source)) {
+    throw new Error('client factory must not contain ESM import/export statements')
+  }
+}
+
+const body = template.replace('__CLIENT_LOGIC__', logic)
+if (body.includes('__CLIENT_LOGIC__')) throw new Error('client logic placeholder was not replaced')
+
+const bundle = `window.__ModuleLoader__.load({
+  id: '@fg-lab/amadeus-qq',
+  factory: (require) => {
+    const React = require('react');
+    const h = React.createElement;
+${body}
+  }
+});
+`
+
+new vm.Script(bundle, { filename: 'lib/client.js' })
+
+for (const marker of [
+  'settings.section',
+  "id: 'amadeus-qq'",
+  "/api/amadeus-qq",
+  "credentials: 'same-origin'",
+  '打开 Web Console',
+  '开始首次设置',
+]) {
+  if (!bundle.includes(marker)) throw new Error(`client bundle is missing required marker: ${marker}`)
+}
+
+mkdirSync(dirname(outputPath), { recursive: true })
+writeFileSync(outputPath, bundle, 'utf8')
+process.stdout.write(`built lib/client.js (${Buffer.byteLength(bundle)} bytes)\n`)

package/scripts/registry-guard.mjs

@@ -0,0 +1,12 @@
+import fs from 'node:fs';
+import assert from 'node:assert/strict';
+
+const pkg=JSON.parse(fs.readFileSync(new URL('../package.json',import.meta.url),'utf8'));
+assert.match(pkg.name,/^@fg-lab\/amadeus-(qq|memory|life|state|persona)$/);
+assert.match(pkg.version,/^\d+\.\d+\.\d+$/);
+assert.notEqual(pkg.private,true,'Private packages cannot be published');
+assert.equal(pkg.publishConfig?.access,'public');
+const response=await fetch('https://registry.npmjs.org/'+encodeURIComponent(pkg.name)+'/'+encodeURIComponent(pkg.version),{signal:AbortSignal.timeout(20000)});
+if(response.status===200)throw new Error('This npm version already exists; never overwrite or reuse it.');
+if(response.status!==404)throw new Error('Registry availability could not be verified (HTTP '+response.status+'); stop publishing.');
+console.log('Registry preflight: target version does not exist. Scope authorization still requires npm authentication.');