@lievclouds/dsh-cortex 0.3.3 → 0.3.6

package/index.js

@@ -41,14 +41,16 @@ export function apply(ctx, config) {
           name: 'dsh-cortex.tools',
           order: 500,
           text: [
-            '## Cortex (dsh-cortex plugin, no MCP needed)',
-            'The local Cortex database (schema v5) is available through native tools. The old `mcp__cortex__*` servers/skills are not required; prefer the `cortex_*` tools whenever the user mentions Cortex, 漏洞库/漏洞, 资产, 快照, 内网作战 or 记忆星云.',
-            '- Cortex findings: `cortex_list_vulns` / `cortex_get_vuln`; save with `cortex_save_vuln` (dedupe by host first).',
+            '## Cortex (dsh-cortex plugin, always active)',
+            'This plugin is installed and injects this guide automatically: the cortex_* tools below are available in every conversation without a skill or an MCP server.',
+            'When the user asks for ANY authorized penetration-testing work (渗透测试 / SRC / 漏洞挖掘 / 安全评估 / 资产与接口侦察 / 内网横向 / 漏洞复测), use the Cortex tools proactively instead of relying on memory:',
+            '- Reuse memory first: `cortex_list_snapshots` + `cortex_get_snapshot` for task progress, `cortex_list_vulns` + `cortex_get_asset` for existing findings/assets; `cortex_list_assets` before repeating recon.',
+            '- Persist confirmed findings: dedupe with `cortex_list_vulns`, then `cortex_save_vuln` (reproduction_steps in Markdown).',
+            '- Persist recon context: `cortex_sync_asset_info` (mode=merge) for fingerprints, interfaces (raw HTTP), leaks and test parameters.',
             '- Status / retest: `cortex_update_vuln_status`, `cortex_append_retest` (append-only, never overwrite original evidence).',
-            '- Assets: `cortex_list_assets`, `cortex_get_asset`, `cortex_sync_asset_info` (fingerprints, interfaces, leaks, test parameters).',
-            '- Snapshots / internal / nebula: `cortex_list_snapshots`, `cortex_get_snapshot`, `cortex_internal_overview`, `cortex_graph_summary`.',
-            'Examples that should call the tools: “列出 Cortex 里的高危漏洞”, “把刚才确认的漏洞写入 Cortex”, “把 127.0.0.1:8080 的接口同步到资产库”, “把 VULN-… 标记为已确认并追加复测结论”.',
-            'If a tools call fails, report the failure; never claim a record was stored without a successful result.',
+            '- Summaries: `cortex_internal_overview`, `cortex_graph_summary`.',
+            'Do not skip these calls merely because no skill was loaded. If a tool call fails, report the failure; never claim a record was saved without a successful result.',
+            'Examples: “列出 Cortex 里的高危漏洞”, “把刚才确认的漏洞写入 Cortex”, “把 127.0.0.1:8080 的接口同步到资产库”, “把 VULN-… 标记为已确认并追加复测结论”.',
           ].join('\n'),
         }),
       'dsh-cortex: usage prompt',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lievclouds/dsh-cortex",
-  "version": "0.3.3",
+  "version": "0.3.6",
   "description": "Cortex workbench for DeepSeek Harness: the original Cortex UI (vulnerabilities, assets, internal operations, Memory Nebula, snapshots, retest) as a native DSH panel, plus 12 native agent tools so DSH conversations use the local Cortex SQLite without MCP.",
   "type": "module",
   "main": "index.js",

package/src/cortex-ui/dsh/css-overrides.css

@@ -99,6 +99,14 @@
   border: 3px solid transparent;
 }
 
+/* DSH draws its native window buttons above the page in the top-right corner.
+   Right-hand inspector sheets start at the very top edge, so their header
+   actions (export / close) ended up underneath those buttons. Move every sheet
+   below that band; the overlay still dims the area behind it. */
+.dshc-cortex-root .sheet-content {
+  top: calc(0.875rem + 2.25rem);
+}
+
 /* ------------------------------------------------------------------------- */
 /* DSH shell adaptations                                                     */
 /* ------------------------------------------------------------------------- */

package/src/cortex-ui/dsh/wrapper.template.js

@@ -1,152 +1,141 @@
-/**
- * dsh-cortex client bundle — Cortex original UI port for DeepSeek Harness.
- *
- * GENERATED FILE: built by scripts/build-cortex-ui.mjs from
- * src/cortex-ui/**. Do not edit; run `node scripts/build-cortex-ui.mjs`.
- *
- * The Cortex renderer (React + Tailwind) is mounted into a Shadow DOM so its
- * stylesheet cannot leak into the DSH shell. DSH provides React 18.3.1 through
- * the platform module table; the bundled UI shares that instance.
- */
-window.__ModuleLoader__.load({
-  id: __CORTEX_PACKAGE_NAME__,
-  factory: (require) => {
-    'use strict'
-    const React = require('react')
-    globalThis.__DSH_CORTEX_REACT__ = React
-
-    const UI_CSS = __CORTEX_UI_STYLES__
-    const FONT_FACES_CSS = __CORTEX_FONT_FACES__
-    const LOGO_DATA_URL = __CORTEX_LOGO_DATA_URL__
-    const PROBE_ENABLED = __CORTEX_UI_PROBE_FLAG__
-    globalThis.__DSH_CORTEX_CSS__ = UI_CSS
-
-    /*__CORTEX_UI_PROBE__*/
-
-    /*
-     * Chromium ignores @font-face rules that live inside a Shadow DOM
-     * stylesheet, so the inlined Inter / JetBrains Mono faces are injected into
-     * document.head once (fonts are document-level and then also apply inside
-     * the shadow tree). The element is removed when the plugin unloads.
-     */
-    let fontStyleElement = null
-    function installFontFaces() {
-      if (fontStyleElement || !FONT_FACES_CSS) return
-      const style = document.createElement('style')
-      style.setAttribute('data-dsh-cortex-fonts', '')
-      style.textContent = FONT_FACES_CSS
-      document.head.appendChild(style)
-      fontStyleElement = style
-    }
-    function uninstallFontFaces() {
-      if (!fontStyleElement) return
-      try {
-        fontStyleElement.remove()
-      } catch (error) {
-        /* ignore */
-      }
-      fontStyleElement = null
-    }
-
-    /* ---- vendored Cortex renderer (esbuild IIFE, exposes __DSH_CORTEX_UI__) ---- */
-    __CORTEX_UI_BUNDLE__
-    /* -------------------------------------------------------------------------- */
-
-    const ui = globalThis.__DSH_CORTEX_UI__
-    if (!ui || typeof ui.mount !== 'function') {
-      throw new Error('[dsh-cortex] Cortex UI bundle did not initialize')
-    }
-
-    /** Original Cortex product mark (white glyph on the dark rounded square). */
-    function PanelIcon(props) {
-      const size = props && typeof props.size === 'number' ? props.size : 16
-      const inner = Math.max(8, Math.round(size * 0.56))
-      return React.createElement(
-        'span',
-        {
-          'aria-hidden': true,
-          style: {
-            display: 'flex',
-            alignItems: 'center',
-            justifyContent: 'center',
-            width: size,
-            height: size,
-            borderRadius: Math.round(size * 0.26),
-            background: 'hsl(224 18% 10%)',
-            flex: 'none',
-          },
-        },
-        React.createElement('img', {
-          src: LOGO_DATA_URL,
-          width: inner,
-          height: inner,
-          alt: '',
-          draggable: false,
-          style: { display: 'block', objectFit: 'contain' },
-        }),
-      )
-    }
-
-    /** Mounts the unmodified Cortex App inside this DSH panel. */
-    function CortexPanel() {
-      const hostRef = React.useRef(null)
-      React.useEffect(() => {
-        const host = hostRef.current
-        if (!host || typeof host.attachShadow !== 'function') return undefined
-        let handle = null
-        try {
-          handle = ui.mount(host, UI_CSS)
-        } catch (error) {
-          console.error('[dsh-cortex] Cortex UI mount failed', error)
-        }
-        return () => {
-          if (!handle) return
-          try {
-            handle.destroy()
-          } catch (error) {
-            console.error('[dsh-cortex] Cortex UI unmount failed', error)
-          }
-        }
-      }, [])
-      return React.createElement('div', {
-        ref: hostRef,
-        style: { height: '100%', width: '100%', minHeight: 0, overflow: 'hidden' },
-      })
-    }
-
-    function apply(ctx) {
-      try {
-        ctx.effect(() => {
-          installFontFaces()
-          return () => uninstallFontFaces()
-        }, 'dsh-cortex: document font faces')
-      } catch (error) {
-        console.error('[dsh-cortex] font-face install failed', error)
-      }
-      try {
-        ctx.slots.inject('sidebar.panellist', () =>
-          ctx.slots.register(
-            { name: 'sidebar.panellist', id: 'cortex', order: 5, label: () => 'Cortex' },
-            PanelIcon,
-          ),
-        )
-      } catch (error) {
-        console.error('[dsh-cortex] sidebar.panellist registration failed', error)
-      }
-      try {
-        ctx.slots.inject('main', () => ctx.slots.register({ name: 'main', key: 'cortex' }, CortexPanel))
-      } catch (error) {
-        console.error('[dsh-cortex] main panel registration failed', error)
-      }
-      if (PROBE_ENABLED) {
-        try {
-          window.setTimeout(runAcceptanceProbe, 1500)
-        } catch (error) {
-          /* probe optional */
-        }
-      }
-    }
-
-    return { name: 'dsh-cortex', inject: ['slots'], apply }
-  },
-})
+/**
+ * dsh-cortex client bundle — Cortex original UI port for DeepSeek Harness.
+ *
+ * GENERATED FILE: built by scripts/build-cortex-ui.mjs from
+ * src/cortex-ui/**. Do not edit; run `node scripts/build-cortex-ui.mjs`.
+ *
+ * The Cortex renderer (React + Tailwind) is mounted into a Shadow DOM so its
+ * stylesheet cannot leak into the DSH shell. DSH provides React 18.3.1 through
+ * the platform module table; the bundled UI shares that instance.
+ */
+window.__ModuleLoader__.load({
+  id: __CORTEX_PACKAGE_NAME__,
+  factory: (require) => {
+    'use strict'
+    const React = require('react')
+    globalThis.__DSH_CORTEX_REACT__ = React
+
+    const UI_CSS = __CORTEX_UI_STYLES__
+    const FONT_FACES_CSS = __CORTEX_FONT_FACES__
+    const LOGO_DATA_URL = __CORTEX_LOGO_DATA_URL__
+
+    /*
+     * Chromium ignores @font-face rules that live inside a Shadow DOM
+     * stylesheet, so the inlined Inter / JetBrains Mono faces are injected into
+     * document.head once (fonts are document-level and then also apply inside
+     * the shadow tree). The element is removed when the plugin unloads.
+     */
+    let fontStyleElement = null
+    function installFontFaces() {
+      if (fontStyleElement || !FONT_FACES_CSS) return
+      const style = document.createElement('style')
+      style.setAttribute('data-dsh-cortex-fonts', '')
+      style.textContent = FONT_FACES_CSS
+      document.head.appendChild(style)
+      fontStyleElement = style
+    }
+    function uninstallFontFaces() {
+      if (!fontStyleElement) return
+      try {
+        fontStyleElement.remove()
+      } catch (error) {
+        /* ignore */
+      }
+      fontStyleElement = null
+    }
+
+    /* ---- vendored Cortex renderer (esbuild IIFE, exposes __DSH_CORTEX_UI__) ---- */
+    __CORTEX_UI_BUNDLE__
+    /* -------------------------------------------------------------------------- */
+
+    const ui = globalThis.__DSH_CORTEX_UI__
+    if (!ui || typeof ui.mount !== 'function') {
+      throw new Error('[dsh-cortex] Cortex UI bundle did not initialize')
+    }
+
+    /** Original Cortex product mark (white glyph on the dark rounded square). */
+    function PanelIcon(props) {
+      const size = props && typeof props.size === 'number' ? props.size : 16
+      const inner = Math.max(8, Math.round(size * 0.56))
+      return React.createElement(
+        'span',
+        {
+          'aria-hidden': true,
+          style: {
+            display: 'flex',
+            alignItems: 'center',
+            justifyContent: 'center',
+            width: size,
+            height: size,
+            borderRadius: Math.round(size * 0.26),
+            background: 'hsl(224 18% 10%)',
+            flex: 'none',
+          },
+        },
+        React.createElement('img', {
+          src: LOGO_DATA_URL,
+          width: inner,
+          height: inner,
+          alt: '',
+          draggable: false,
+          style: { display: 'block', objectFit: 'contain' },
+        }),
+      )
+    }
+
+    /** Mounts the unmodified Cortex App inside this DSH panel. */
+    function CortexPanel() {
+      const hostRef = React.useRef(null)
+      React.useEffect(() => {
+        const host = hostRef.current
+        if (!host || typeof host.attachShadow !== 'function') return undefined
+        let handle = null
+        try {
+          handle = ui.mount(host, UI_CSS)
+        } catch (error) {
+          console.error('[dsh-cortex] Cortex UI mount failed', error)
+        }
+        return () => {
+          if (!handle) return
+          try {
+            handle.destroy()
+          } catch (error) {
+            console.error('[dsh-cortex] Cortex UI unmount failed', error)
+          }
+        }
+      }, [])
+      return React.createElement('div', {
+        ref: hostRef,
+        style: { height: '100%', width: '100%', minHeight: 0, overflow: 'hidden' },
+      })
+    }
+
+    function apply(ctx) {
+      try {
+        ctx.effect(() => {
+          installFontFaces()
+          return () => uninstallFontFaces()
+        }, 'dsh-cortex: document font faces')
+      } catch (error) {
+        console.error('[dsh-cortex] font-face install failed', error)
+      }
+      try {
+        ctx.slots.inject('sidebar.panellist', () =>
+          ctx.slots.register(
+            { name: 'sidebar.panellist', id: 'cortex', order: 5, label: () => 'Cortex' },
+            PanelIcon,
+          ),
+        )
+      } catch (error) {
+        console.error('[dsh-cortex] sidebar.panellist registration failed', error)
+      }
+      try {
+        ctx.slots.inject('main', () => ctx.slots.register({ name: 'main', key: 'cortex' }, CortexPanel))
+      } catch (error) {
+        console.error('[dsh-cortex] main panel registration failed', error)
+      }
+    }
+
+    return { name: 'dsh-cortex', inject: ['slots'], apply }
+  },
+})

package/src/cortex-ui/renderer/pages/NebulaPage.tsx

@@ -627,16 +627,8 @@ export function NebulaPage({ dataVersion, onOpenDetail }: NebulaPageProps) {
     }
   }, [setFullscreenModeSafe])
 
-  // Escape leaves either mode (native also exits itself; calling exit is safe).
-  useEffect(() => {
-    if (fullscreenMode === 'off') return undefined
-    const onKeyDown = (event: KeyboardEvent): void => {
-      if (event.key === 'Escape') leaveFullscreen()
-    }
-    window.addEventListener('keydown', onKeyDown)
-    return () => window.removeEventListener('keydown', onKeyDown)
-  }, [fullscreenMode, leaveFullscreen])
-
+  // Declared before the Escape effect below: referencing it in that effect's
+  // dependency array from a later `const` is a temporal-dead-zone ReferenceError.
   const leaveFullscreen = useCallback((): void => {
     const doc = document as any
     // Always attempt the native exit even when fullscreenElement is not exposed:
@@ -650,6 +642,16 @@ export function NebulaPage({ dataVersion, onOpenDetail }: NebulaPageProps) {
     setFullscreenModeSafe('off')
   }, [setFullscreenModeSafe])
 
+  // Escape leaves either mode (native also exits itself; calling exit is safe).
+  useEffect(() => {
+    if (fullscreenMode === 'off') return undefined
+    const onKeyDown = (event: KeyboardEvent): void => {
+      if (event.key === 'Escape') leaveFullscreen()
+    }
+    window.addEventListener('keydown', onKeyDown)
+    return () => window.removeEventListener('keydown', onKeyDown)
+  }, [fullscreenMode, leaveFullscreen])
+
   const handleToggleFullscreen = useCallback(() => {
     const element = sectionRef.current
     if (element === null) return