@gavinc-cn/touchstone-dsh 0.1.0 → 0.2.0

package/README.md

@@ -5,6 +5,7 @@
 **An AI-agent-driven automated testing platform.** Point it at a repository; it explores the code, writes and runs test cases, files what breaks, fixes it, and re-verifies the fix.
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
+[![npm](https://img.shields.io/npm/v/@gavinc-cn/touchstone-dsh?logo=npm&color=cb3837)](https://www.npmjs.com/package/@gavinc-cn/touchstone-dsh)
 [![Python 3.12+](https://img.shields.io/badge/Python-3.12%2B-3776AB.svg)](https://www.python.org/)
 [![Node 22.19+ | 24+](https://img.shields.io/badge/Node-22.19%2B%20%7C%2024%2B-339933.svg)](https://nodejs.org/)
 [![DeepSeek Harness plugin](https://img.shields.io/badge/DeepSeek%20Harness-plugin-4D6BFE.svg)](https://github.com/deepseek-ai/deepseek-harness)
@@ -164,6 +165,14 @@ grep '一次性初始口令' .run/server.log     # or: ./touchstone.sh status
 You will be asked to change it on first login. Set `TS_ADMIN_PASSWORD=<your-password>` before the first
 start to skip the one-time password (and the forced change).
 
+> **Plugin mode (`dsh`) is password-free by default** (2026-10-08): the shell passes
+> `TS_ADMIN_PASSWORDLESS=1`, so the seeded `admin` has an **empty password** and no forced change — the
+> panel is auto-logged-in as `admin` anyway. Set a password in **Settings → Change password** whenever you
+> want one (it then becomes the password used for direct/standalone logins). The plugin also writes the
+> backend's stdout/stderr line by line to `<db dir>/plugin-backend.log` (next to
+> `~/.touchstone/touchstone.db`) — that is where the plugin-mode startup banner and the
+> `[board]`/`[waitq]`/`[runner]` diagnostics can be read.
+
 > Standalone mode gives you the full site — projects, case library, bug reports, board, queue, monitoring —
 > but **agent execution needs plugin mode** (below), because the agent runs inside the `dsh` host process.
 
@@ -187,6 +196,17 @@ The platform's own Python dependencies are installed with pip, not npm:
 
 ```bash
 pip install -r ~/.dsh/profiles/web/node_modules/@gavinc-cn/touchstone-dsh/requirements.txt
+# Windows: python -m pip install ...   (the official installer ships python.exe, not python3)
+```
+
+The plugin resolves the interpreter itself when you do not configure one: it probes `python` first, then
+`python3` (the same order as `touchstone.cmd`), and uses the first one that actually runs. If that is not the
+interpreter where you installed the dependencies, the missing-dependency page prints the exact command for the
+interpreter it picked; to pin another one, set `pythonPath` in the profile patch:
+
+```yaml
+- id: touchstone-dsh
+  config: { pythonPath: /path/to/python }
 ```
 
 No `repoDir` is needed: the package carries `server.py` and `webui/dist-plugin`, so the plugin falls back to
@@ -203,7 +223,7 @@ The installer prints the optional profile patch for pointing the plugin at your
 specific interpreter); skip it to use the package's own directory:
 
 ```yaml
-- id: touchstone
+- id: touchstone-dsh
   config: { repoDir: /path/to/touchstone-dsh, pythonPath: /path/to/python3 }
 ```
 
@@ -235,6 +255,7 @@ python touchstone.py start | stop | restart | status | build | test
 | `TS_PYTHON` | `python3` | Interpreter used by the launcher (must have the runtime dependencies) |
 | `TOUCHSTONE_DB` | `~/.touchstone/touchstone.db` | SQLite database. Must live on a local disk — file locking does not work on CIFS/network shares |
 | `TS_ADMIN_PASSWORD` | *(random, printed once)* | Initial `admin` password; setting it skips the forced change |
+| `TS_ADMIN_PASSWORDLESS` | `1` in plugin mode | Seed `admin` with an empty password and no forced change (the plugin shell sets this); ignored when `TS_ADMIN_PASSWORD` is set |
 | `TS_WEB_DIR` | `webui/dist` | Static front-end directory the server serves |
 | `TOUCHSTONE_RUN_DIR` | `.run/` in the repository | PID / log / port files |
 | `TS_EXT_DIR` | `extensions` | Root of the built-in asset manifests |

package/README.zh.md

@@ -6,6 +6,7 @@
 把失败沉淀成 bug 报告，修完再复测一遍。
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
+[![npm](https://img.shields.io/npm/v/@gavinc-cn/touchstone-dsh?logo=npm&color=cb3837)](https://www.npmjs.com/package/@gavinc-cn/touchstone-dsh)
 [![Python 3.12+](https://img.shields.io/badge/Python-3.12%2B-3776AB.svg)](https://www.python.org/)
 [![Node 22.19+ | 24+](https://img.shields.io/badge/Node-22.19%2B%20%7C%2024%2B-339933.svg)](https://nodejs.org/)
 [![DeepSeek Harness plugin](https://img.shields.io/badge/DeepSeek%20Harness-plugin-4D6BFE.svg)](https://github.com/deepseek-ai/deepseek-harness)
@@ -177,6 +178,16 @@ node ~/.dsh/profiles/web/node_modules/@gavinc-cn/touchstone-dsh/dsh-plugin/scrip
 
 ```bash
 pip install -r ~/.dsh/profiles/web/node_modules/@gavinc-cn/touchstone-dsh/requirements.txt
+# Windows 用 python -m pip install ...（官方安装器只装 python.exe，没有 python3）
+```
+
+解释器不用配也行：插件自己探——先试 `python`、再试 `python3`（与 `touchstone.cmd` 同序），
+用第一个真能跑起来的那个。如果探到的不是你装依赖的那支，缺依赖提示页里给的就是**它探到的那支**
+的解释器命令；想指定别支，在 profile patch 里写 `pythonPath`：
+
+```yaml
+- id: touchstone-dsh
+  config: { pythonPath: /path/to/python }
 ```
 
 **不需要配 `repoDir`**：包里带着 `server.py` 与 `webui/dist-plugin`，插件缺省就用包自身目录。
@@ -191,7 +202,7 @@ cd touchstone-dsh
 安装脚本会打印**可选**的 profile 覆盖（指向本机工作副本、或指定解释器）；不写就用包自身目录：
 
 ```yaml
-- id: touchstone
+- id: touchstone-dsh
   config: { repoDir: /path/to/touchstone-dsh, pythonPath: /path/to/python3 }
 ```