@lytharalab/dsh-cons-auto-review 1.1.0

package/examples/defaults.json

@@ -0,0 +1,121 @@
+{
+  "enabled": true,
+  "inheritSubagents": true,
+  "rules": {
+    "enabled": true,
+    "allowOutsideReads": true,
+    "includeTempRoots": true,
+    "additionalWritableRoots": [],
+    "protectedPaths": [
+      "**/.git/**",
+      "**/.dsh/**",
+      "**/.dcar/**",
+      "**/.ssh/**",
+      "**/.aws/**",
+      "**/.gnupg/**",
+      "**/.env",
+      "**/.env.*",
+      "**/.npmrc",
+      "**/credentials.json"
+    ],
+    "safeEnvironmentFiles": [
+      ".env.example",
+      ".env.sample",
+      ".env.template"
+    ],
+    "readTools": [
+      "read",
+      "read_image"
+    ],
+    "searchTools": [
+      "glob",
+      "grep",
+      "ls"
+    ],
+    "writeTools": [
+      "write",
+      "edit"
+    ],
+    "harmlessTools": [
+      "todo_write"
+    ],
+    "alwaysReviewTools": [],
+    "trustedTools": [],
+    "customTools": [],
+    "maxArgumentBytes": 2097152
+  },
+  "shell": {
+    "enabled": true,
+    "tools": [
+      "bash",
+      "pwsh"
+    ],
+    "readCommands": [
+      "pwd",
+      "ls",
+      "cat",
+      "head",
+      "tail",
+      "wc",
+      "rg",
+      "grep",
+      "echo",
+      "Get-Location",
+      "Get-ChildItem",
+      "Get-Content",
+      "Write-Output"
+    ],
+    "workspaceMutationCommands": [
+      "mkdir",
+      "touch"
+    ],
+    "trustedCommands": [],
+    "maxCommandChars": 8192
+  },
+  "review": {
+    "provider": "",
+    "model": "",
+    "reasoningEffort": "",
+    "preferLowReasoning": true,
+    "timeoutMs": 120000,
+    "maxTokens": 8192,
+    "maxTokensLimit": 32768,
+    "tokenLimitRetries": 2,
+    "tokenGrowthFactor": 2,
+    "chineseReasonRetries": 1,
+    "maxReasonChars": 600,
+    "showAction": true,
+    "maxActionChars": 3000,
+    "temperature": 0,
+    "retries": 0,
+    "retryDelayMs": 300,
+    "concurrency": 2,
+    "maxQueued": 128,
+    "onError": "ask",
+    "onDeny": "ask",
+    "policyAppend": "",
+    "maxInputChars": 180000,
+    "allowAsk": true
+  },
+  "cache": {
+    "enabled": false,
+    "ttlMs": 30000,
+    "maxEntries": 128
+  },
+  "audit": {
+    "enabled": true,
+    "file": "",
+    "maxBytes": 5242880,
+    "historyLimit": 200,
+    "includeArguments": false,
+    "includeReasons": true
+  },
+  "commands": {
+    "enabled": true,
+    "name": "dcar",
+    "allowSessionConfig": true
+  },
+  "lifecycle": {
+    "fallbackPreset": "workspace-write"
+  }
+}

package/examples/desktop-config.patch.yml

@@ -0,0 +1,30 @@
+# Add this overlay after the installed DCAR package layer in your profile.
+- id: dcar
+  name: '@lytharalab/dsh-cons-auto-review'
+  config:
+    rules:
+      includeTempRoots: true
+      allowOutsideReads: true
+      additionalWritableRoots: []
+      alwaysReviewTools: []
+    shell:
+      trustedCommands: []
+    review:
+      timeoutMs: 120000
+      maxTokens: 8192
+      maxTokensLimit: 32768
+      tokenLimitRetries: 2
+      preferLowReasoning: true
+      concurrency: 2
+      retries: 0
+      onDeny: ask
+      onError: ask
+    cache:
+      enabled: false
+    audit:
+      file: .dcar/audit.jsonl
+      includeArguments: false
+      historyLimit: 200
+    commands:
+      enabled: true
+      allowSessionConfig: true

package/examples/separate-review-model.patch.yml

@@ -0,0 +1,12 @@
+# Provider/model values must refer to a configured DSH route; replace these placeholders.
+- id: dcar
+  name: '@lytharalab/dsh-cons-auto-review'
+  config:
+    review:
+      provider: your-review-provider
+      model: your-review-model
+      maxTokens: 8192
+      maxTokensLimit: 32768
+      tokenLimitRetries: 2
+      preferLowReasoning: true
+      timeoutMs: 120000

package/examples/strict.patch.yml

@@ -0,0 +1,13 @@
+- id: dcar
+  name: '@lytharalab/dsh-cons-auto-review'
+  config:
+    rules:
+      allowOutsideReads: false
+      includeTempRoots: false
+    review:
+      onError: deny
+      onDeny: deny
+      allowAsk: false
+      timeoutMs: 30000
+    cache:
+      enabled: false

package/icon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64"><rect width="64" height="64" rx="16" fill="#14253d"/><path d="M32 10 49 17v15c0 12-10 20-17 23-7-3-17-11-17-23V17z" fill="#48d1b6"/><path d="m23 32 6 6 13-14" fill="none" stroke="#14253d" stroke-width="5" stroke-linecap="round" stroke-linejoin="round"/></svg>

package/locale/en.json

@@ -0,0 +1 @@
+{"meta":{"title":"Con's Auto Review","description":"CAutoR: deterministic workspace checks first; LLM review only for escalations."}}

package/locale/zh.json

@@ -0,0 +1 @@
+{"meta":{"title":"Con's 自动审查","description":"CAutoR：确定性程序规则先审查，仅将无法自动批准的操作升级至 LLM Auto Review。"}}

package/package.json

@@ -0,0 +1,108 @@
+{
+  "name": "@lytharalab/dsh-cons-auto-review",
+  "version": "1.1.0",
+  "description": "Con's 自动审查（DCAR）：确定性规则优先、LLM 按需升级的 DeepSeek Harness 工具审查插件，提供 CAutoR 权限模式。Deterministic-first auto review for DeepSeek Harness.",
+  "type": "module",
+  "main": "./src/index.js",
+  "types": "./src/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./src/index.d.ts",
+      "default": "./src/index.js"
+    },
+    "./core": "./src/engine.js",
+    "./config": "./src/config.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./locale/*.json": "./locale/*.json",
+    "./package.json": "./package.json",
+    "./permission-presets": "./src/permission-presets.js"
+  },
+  "files": [
+    "src",
+    "locale",
+    "cordis.patch.yml",
+    "icon.svg",
+    "docs",
+    "examples",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE",
+    "THIRD_PARTY_NOTICES.md",
+    "THIRD_PARTY_LICENSE.txt"
+  ],
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "license": "MIT",
+  "author": "Con89524 / LytharaLab",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/LytharaLab/DSH-Cons-Auto-Review.git"
+  },
+  "homepage": "https://github.com/LytharaLab/DSH-Cons-Auto-Review#readme",
+  "bugs": {
+    "url": "https://github.com/LytharaLab/DSH-Cons-Auto-Review/issues"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "keywords": [
+    "dsh-plugin",
+    "deepseek-harness",
+    "deepseek",
+    "cordis",
+    "auto-review",
+    "approval",
+    "permission-preset",
+    "sandbox",
+    "CAutoR",
+    "DCAR"
+  ],
+  "scripts": {
+    "test": "node --test tests/*.test.js",
+    "check": "node scripts/check.mjs",
+    "verify": "npm run check && npm test",
+    "prepublishOnly": "npm run verify",
+    "pack:release": "npm pack --ignore-scripts"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.0",
+    "@deepseek-ai/dsh-llm": ">=0.0.1-rc.1",
+    "@deepseek-ai/dsh-permission-presets": "0.1.7-rc.2 || 0.2.0-rc.2",
+    "@deepseek-ai/dsh-sandbox": ">=0.0.1-rc.1",
+    "@deepseek-ai/dsh-util-values": ">=0.0.1-rc.1",
+    "@deepseek-ai/schemastery": "*",
+    "@deepseek-ai/dsh-user-approval": "0.1.7-rc.2 || 0.2.0-rc.2"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "4.0.4",
+    "@deepseek-ai/cordis-plugin-loader": "1.0.5",
+    "@deepseek-ai/dsh-attachment": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-commands": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-fs": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-fs-local": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-permission-presets": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-sandbox": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-scope": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-projection": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-settings": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-shell": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-tool-fs": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-tools": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-user-approval": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-util-values": "0.2.0-rc.2",
+    "@deepseek-ai/schemastery": "3.18.4",
+    "yaml": "2.8.3"
+  },
+  "icon": "./icon.svg",
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  }
+}

package/src/async.js

@@ -0,0 +1,66 @@
+/** Abort-aware queue and timers. */
+export function abortError(signal) {
+  return signal.reason instanceof Error
+    ? signal.reason
+    : new Error(String(signal.reason ?? "Aborted"));
+}
+export function abortable(promise, signal) {
+  if (signal.aborted) return Promise.reject(abortError(signal));
+  return new Promise((resolve, reject) => {
+    const onAbort = () => reject(abortError(signal));
+    signal.addEventListener("abort", onAbort, { once: true });
+    Promise.resolve(promise)
+      .then(resolve, reject)
+      .finally(() => signal.removeEventListener("abort", onAbort));
+  });
+}
+export function delay(ms, signal) {
+  return new Promise((resolve, reject) => {
+    if (signal.aborted) {
+      reject(abortError(signal));
+      return;
+    }
+    const timer = setTimeout(() => {
+      signal.removeEventListener("abort", onAbort);
+      resolve();
+    }, ms);
+    function onAbort() {
+      clearTimeout(timer);
+      reject(abortError(signal));
+    }
+    signal.addEventListener("abort", onAbort, { once: true });
+  });
+}
+export class ReviewQueue {
+  active = 0;
+  waiting = [];
+  async acquire(limit, maxQueued, signal) {
+    signal.throwIfAborted();
+    if (this.active < limit) {
+      this.active++;
+      return () => this.release();
+    }
+    if (this.waiting.length >= maxQueued)
+      throw new Error("DCAR review queue is full");
+    return new Promise((resolve, reject) => {
+      const entry = {
+        resolve,
+        reject,
+        signal,
+        onAbort: () => {
+          this.waiting = this.waiting.filter((x) => x !== entry);
+          reject(abortError(signal));
+        },
+      };
+      signal.addEventListener("abort", entry.onAbort, { once: true });
+      this.waiting.push(entry);
+    });
+  }
+  release() {
+    const entry = this.waiting.shift();
+    if (entry) {
+      entry.signal.removeEventListener("abort", entry.onAbort);
+      entry.resolve(() => this.release());
+    } else this.active--;
+  }
+}

package/src/audit.js

@@ -0,0 +1,125 @@
+/** Session-scoped counters, bounded history, and optional redacted JSONL audit. */
+import { createHash } from "node:crypto";
+import { appendFile, mkdir, rename, stat } from "node:fs/promises";
+import { dirname, isAbsolute, resolve } from "node:path";
+export const hash = (value) =>
+  createHash("sha256").update(JSON.stringify(value)).digest("hex");
+export class Audit {
+  sessions = new Map();
+  tail = Promise.resolve();
+  state(id) {
+    let state = this.sessions.get(id);
+    if (!state) {
+      state = {
+        total: 0,
+        deterministic: 0,
+        escalated: 0,
+        llmRequests: 0,
+        tokenLimitRetries: 0,
+        translationRequests: 0,
+        cacheHits: 0,
+        allowed: 0,
+        asked: 0,
+        denied: 0,
+        errors: 0,
+        cancelled: 0,
+        history: [],
+      };
+      this.sessions.set(id, state);
+    }
+    return state;
+  }
+  request(id) {
+    this.state(id).llmRequests++;
+  }
+  record(exec, event, c) {
+    const id = String(exec.agent.session.id),
+      s = this.state(id);
+    s.total++;
+    s[event.layer === "program" ? "deterministic" : "escalated"]++;
+    if (event.cacheHit) s.cacheHits++;
+    if (event.error) s.errors++;
+    s.tokenLimitRetries += event.tokenRetries ?? 0;
+    s.translationRequests += event.translationAttempts ?? 0;
+    s[
+      { allow: "allowed", ask: "asked", deny: "denied", cancel: "cancelled" }[
+        event.decision
+      ]
+    ]++;
+    if (!c.audit.enabled) return;
+    const row = {
+      time: new Date().toISOString(),
+      sessionId: id,
+      callId: String(exec.callId),
+      tool: exec.name,
+      argumentHash: hash(exec.arguments),
+      layer: event.layer,
+      decision: event.decision,
+      rule: event.code,
+      durationMs: event.durationMs,
+      cacheHit: !!event.cacheHit,
+      reviewAttempts: event.reviewAttempts ?? 0,
+      tokenLimitRetries: event.tokenRetries ?? 0,
+      translationAttempts: event.translationAttempts ?? 0,
+      lastMaxTokens: event.lastMaxTokens ?? 0,
+    };
+    if (event.errorCode) row.errorCode = event.errorCode;
+    if (c.audit.includeReasons) {
+      row.reason = String(event.reason ?? "").slice(0, 2000);
+      if (event.displayReason)
+        row.displayReason = String(event.displayReason).slice(0, 2000);
+    }
+    if (c.audit.includeArguments) row.arguments = exec.arguments;
+    s.history.push(row);
+    if (s.history.length > c.audit.historyLimit)
+      s.history.splice(0, s.history.length - c.audit.historyLimit);
+    if (c.audit.file) {
+      const cwd = exec.agent.session.header.cwd;
+      const file = isAbsolute(c.audit.file)
+        ? c.audit.file
+        : resolve(cwd, c.audit.file);
+      this.tail = this.tail
+        .then(async () => {
+          await mkdir(dirname(file), { recursive: true });
+          try {
+            if (
+              (await stat(file)).size +
+                Buffer.byteLength(JSON.stringify(row)) +
+                1 >
+              c.audit.maxBytes
+            )
+              await rename(file, `${file}.1`);
+          } catch (error) {
+            if (error.code !== "ENOENT") throw error;
+          }
+          await appendFile(file, `${JSON.stringify(row)}\n`, {
+            encoding: "utf8",
+            mode: 0o600,
+          });
+        })
+        .catch((error) => {
+          this.lastError = String(error.message ?? error);
+        });
+    }
+  }
+  stats(id) {
+    const { history, ...s } = this.state(String(id));
+    return {
+      ...s,
+      savedReviewRequests: s.deterministic,
+      deterministicRate: s.total
+        ? `${((s.deterministic / s.total) * 100).toFixed(1)}%`
+        : "0%",
+      auditError: this.lastError ?? null,
+    };
+  }
+  history(id, n = 20) {
+    return this.state(String(id)).history.slice(-n);
+  }
+  reset(id) {
+    this.sessions.delete(String(id));
+  }
+  async flush() {
+    await this.tail;
+  }
+}