@kirkchinese/dsh-re-kit 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 kirkchinese
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,18 @@
-# Temporary Holding Version
+# @kirkchinese/dsh-re-kit
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+一次安装 [能力目录](../capability-catalog) 和 [REA 适配](../rea)：
+
+```sh
+npm install -g rea-agents
+dsh plugin --profile web add @kirkchinese/dsh-re-kit
+```
+
+整合包自带两行配置：`capability-catalog`（默认配置，接管 skill 目录）和 `capability-catalog-rea`。不要再单独安装 `@kirkchinese/dsh-capability-catalog` 或 `@kirkchinese/dsh-rea`，否则同名行会冲突。
+
+在 profile 的 `cordis.patch.yml` 中覆盖这两行即可调整，例如关闭 skill 接管：
+
+```yaml
+- id: capability-catalog
+  config:
+    skills: { takeOverCatalog: false }
+```

package/catalog.patch.yml

@@ -0,0 +1,7 @@
+# Generated by scripts/sync-patches.mjs from packages/rea/families.yml; edit that file instead.
+# Capability catalog: one compact index plus search/describe/call tools.
+# Add MCP servers under config.mcp in your own cordis.patch.yml (an override replaces the whole config).
+- insert:
+    - id: capability-catalog
+      name: '@kirkchinese/dsh-capability-catalog'
+      config: {}

package/locale/en.json

@@ -0,0 +1 @@
+{ "meta": { "title": "RE Kit", "description": "Capability catalog plus REA in one install." } }

package/locale/zh.json

@@ -0,0 +1 @@
+{ "meta": { "title": "逆向工具整合包", "description": "一次安装能力目录与 REA。" } }

package/package.json

@@ -1,6 +1,47 @@
 {
   "name": "@kirkchinese/dsh-re-kit",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "description": "One-step kit for DeepSeek Harness: the lazy capability catalog (MCP tools and skills behind one compact index) plus REA reverse engineering",
+  "keywords": [
+    "deepseek-harness",
+    "dsh",
+    "dsh-plugin",
+    "rea",
+    "mcp",
+    "skills",
+    "kit"
+  ],
+  "license": "MIT",
+  "author": "kirkchinese",
+  "type": "module",
+  "exports": {
+    "./catalog.patch.yml": "./catalog.patch.yml",
+    "./rea.patch.yml": "./rea.patch.yml",
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json"
+  },
+  "files": [
+    "catalog.patch.yml",
+    "rea.patch.yml",
+    "locale/*.json",
+    "README.md",
+    "LICENSE"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": [
+        "./catalog.patch.yml",
+        "./rea.patch.yml"
+      ]
+    }
+  },
+  "dependencies": {
+    "@kirkchinese/dsh-capability-catalog": "^0.1.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kirkchinese/dsh-capability-catalog.git",
+    "directory": "packages/re-kit"
+  },
+  "homepage": "https://github.com/kirkchinese/dsh-capability-catalog#readme"
 }

package/rea.patch.yml

@@ -0,0 +1,59 @@
+# Generated by scripts/sync-patches.mjs from packages/rea/families.yml; edit that file instead.
+# REA through the capability catalog. Deprecated once REA ships tool groups upstream or the
+# Harness DeepSeek adapter supports deferred tools; see packages/rea/README.md.
+- insert:
+    - id: capability-catalog-rea
+      name: '@kirkchinese/dsh-capability-catalog/server'
+      config:
+        name: rea
+        title: REA reverse engineering
+        description: >-
+          Reverse engineering of native binaries, JavaScript/Electron and web apps, Android, .NET,
+          Apple bundles, firmware and runtime behavior, with evidence for every finding. For workflow
+          guidance load the skill reverse-engineer-anything when it is available; tool names in it map
+          to ids mcp:rea/<name>.
+        command: rea
+        args: [mcp]
+        families:
+          - name: session
+            description: 'open/close a target, provider binding, readiness and navigation context'
+            match: [open_binary, close_binary, binary_session, binary_overview, get_navigation_context, list_documents, current_document, list_architectures]
+          - name: native-code
+            description: 'functions, pseudocode, assembly, call graph and references in native binaries (Hopper/Ghidra/IDA)'
+            match: [procedure_*, list_procedures, search_procedures, current_procedure, resolve_containing_procedure, analyze_function, batch_decompile, read_function_instructions, get_call_graph, build_call_path, trace_call_path, xrefs, find_xrefs_to_name, resolve_native_call_targets, trace_native_values, compare_functions, inspect_native_*, inspect_address_context]
+          - name: native-navigation
+            description: 'addresses, bytes, strings, names, segments, comments and bookmarks'
+            match: ['*address*', goto_address, next_address, prev_address, read_bytes, search_bytes, list_strings, search_strings, list_names, list_segments, '*comment*', '*bookmark*', annotate_native_function]
+          - name: native-formats
+            description: 'Mach-O, PE, ELF layout, signatures, Go/Rust/Swift/ObjC metadata, objdump and rizin'
+            match: [inspect_macho, inspect_pe_resources, inspect_binary_layout, inspect_signature, inspect_go_binary, inspect_rust_binary, '*swift*', get_objc_*, inspect_native_dispatch_metadata, inspect_with_objdump, execute_rizin_command, cutter_command, list_cutter_sessions, trace_dylib_resolution, inspect_dart_aot, identify_flutter_build, inspect_wasm_artifact, compare_wasm_interfaces, inspect_evm_interface]
+          - name: javascript-electron
+            description: 'JavaScript/Electron apps, bundles, source maps, IPC and runtime tracing'
+            match: ['*javascript*', analyze_web_bundle, recover_javascript_sources, compare_source_to_bundle, compare_bundles, '*electron*', trace_application_feature, trace_feature, compare_application_versions]
+          - name: web-browser
+            description: 'live pages through a Chrome-family browser, network captures, screenshots and WebMCP'
+            match: ['*web*', capture_browser_scenario, list_browser_targets]
+          - name: android
+            description: 'APKs, classes, methods, resources (JADX, Apktool, JEB) and app graphs'
+            match: ['*android*', inspect_apktool_client, '*jeb*']
+          - name: adb-device
+            description: 'attached Android devices over adb: packages, files, logs, screens and app control'
+            match: ['*adb*']
+          - name: managed-dotnet
+            description: '.NET assemblies, members, native boundaries and reconstruction'
+            match: ['*managed*']
+          - name: apple-bundles
+            description: 'plists, keyed archives, asset catalogs, Interface Builder and Apple/Harmony app graphs'
+            match: [inspect_plist, inspect_keyed_archive, inspect_asset_catalog, decode_interface_builder, project_apple_application_graph, project_harmony_application_graph]
+          - name: artifacts
+            description: 'archives, packages, firmware, SQLite and file-level comparisons'
+            match: [inspect_artifact, extract_artifact, compare_artifacts, inspect_firmware_regions, extract_firmware, inspect_sqlite_database, inspect_analysis_view]
+          - name: runtime-debug
+            description: 'Frida, GDB and rizin debugging, process and native UI capture, recorded crashes'
+            match: ['*frida*', '*gdb*', '*rizin_debug*', capture_process_scenario, compare_process_captures, observe_native_*, capture_native_ui_scenario, trace_native_ui_action, inspect_recorded_crash, correlate_static_and_runtime, find_changed_behavior]
+          - name: captures-signals
+            description: 'pcap/pcapng packets and recorded logic signals'
+            match: ['*pcap*', '*packet*', '*signal*']
+          - name: evidence
+            description: 'evidence bundles, residual unknowns and reconstruction verification'
+            match: ['*evidence*', '*unknown*', '*reconstruction*']