@openvulcan/dsh-vulcancode 0.0.0-stage → 0.4.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 OpenVulcan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,87 @@
-# Temporary Holding Version
+<div align="center">
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+<picture>
+  <source media="(prefers-color-scheme: dark)" srcset="docs/assets/openvulcan-logo-dark.svg">
+  <img src="docs/assets/openvulcan-logo-light.svg" alt="OpenVulcan" width="360">
+</picture>
+
+# dsh-vulcancode
+
+**把 VulcanCode 的体验带进 DeepSeek Harness（dsh）**
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)
+
+**简体中文** | [English](README.en.md)
+
+</div>
+
+---
+
+## 关于项目
+
+dsh-vulcancode 是 DeepSeek Harness（dsh）的一组社区插件，安装一个包即可得到 VulcanCode 的几项核心能力。
+适配 dsh `0.2.1-rc.2` 及以上、`0.3.0` 以下：
+
+```sh
+dsh plugin add @openvulcan/dsh-vulcancode
+```
+
+本项目与 DeepSeek 无关联，dsh 是 DeepSeek 的产品。
+
+| 组成 | 作用 |
+| --- | --- |
+| OpenVulcan 账号 | 登录一次，套件内各插件共用；凭据保存在 dsh 的凭据存储中。设置位于「设置 › OpenVulcan 账号」 |
+| 自动审批（Vulcan Decision） | 每次工具调用前由专用判定模型判断放行、需确认或拦下；未放行的可交复核 LLM，再询问你或拒绝 |
+| 交互式回答 | 模型可以用 VulcanCode 的 `ui-*` 组件作答，在对话中渲染；启用后默认开启，可按会话关闭 |
+| LuaSkills | 技能以工具形式提供给 AI，默认技能 codekit（代码导航）；运行库约 190 MB，在「设置 › LuaSkills」中按需安装，装好即自动接入。侧栏的 LuaSkills 页面管理已装技能并连接 LuaSkills Hub |
+| Vulcan 界面风格 | VulcanCode 的主题、直角与配色 |
+| 长期记忆 | VulcanCode 的 Markdown 长期记忆：AI 用 `memory_outline`、`memory_search`、`memory_write` 维护用户画像、空间记忆与项目记忆，每次会话开始时注入一份快照。侧栏的「长期记忆」页面可编辑、调整注入预算，并导入导出 |
+
+> **我们承诺：云端命令判定模型永久免费提供。**（2026 年 10 月 27 日）
+
+## 使用
+
+1. 安装后重启 dsh，打开「设置 › OpenVulcan 账号」，选择国际站或中国站登录。
+2. 打开「设置 › 自动审批」，在权限选择器中选择“自动审查”，或把接入方式改为“独立开关”。不登录也可以改用本机
+   模型判定。
+3. 需要 LuaSkills 时，打开「设置 › LuaSkills」点击安装运行库，进度显示在页面上，完成后技能工具自动出现。
+4. 交互式回答、界面风格和长期记忆安装即生效，可在各自的设置或侧栏页面中调整。
+
+## 自动审批的边界
+
+- 它防的是 AI 执行命令时的**失误**，不防 AI **刻意绕过**（例如先写一个脚本再运行它）。
+- 任何错误都不会被当作放行；无人值守的会话从不询问你，复核未放行即拒绝。
+- 自动审批只降低事故概率，不保证拒绝一切风险；请同时使用沙箱、Git 与备份。
+
+## 包结构
+
+| 包 | 说明 |
+| --- | --- |
+| `@openvulcan/dsh-vulcancode` | 套件本体，dsh 安装的唯一入口，其余包都打包在内 |
+| `@openvulcan/dsh-vulcan-account` | OpenVulcan 账号插件，向其他插件提供 `openvulcanAccount` 服务 |
+| `@openvulcan/dsh-decision-guard` | 自动审批插件 |
+| `@openvulcan/dsh-vulcan-answers` | 交互式回答插件 |
+| `@openvulcan/dsh-vulcan-luaskills` | LuaSkills 插件：运行库安装、技能工具、VM 设置与 Hub |
+| `@openvulcan/dsh-vulcan-style` | 界面风格插件 |
+| `@openvulcan/dsh-vulcan-memory` | 长期记忆插件：记忆工具、会话快照注入、memory-curator 技能与记忆页面 |
+| `@openvulcan/vulcan-decision` | 判定引擎与命令行 `vulcan-decision` |
+| `@openvulcan/openvulcan-account` | OpenVulcan 账号库：登录、刷新与凭据存储接口 |
+
+## 开发
+
+```sh
+pnpm install
+pnpm run build
+pnpm run test
+pnpm run pack:dsh   # 生成 dist/openvulcan-dsh-vulcancode-<版本>.tgz
+```
+
+本地安装打包结果：`dsh plugin add ./dist/openvulcan-dsh-vulcancode-<版本>.tgz`。
+
+## 致谢
+
+感谢 [LINUX DO](https://linux.do/) 社区的支持与交流。
+
+## 许可
+
+[MIT](LICENSE)

package/assets/openvulcan-icon.svg

@@ -0,0 +1,33 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1024 1024" shape-rendering="geometricPrecision">
+  <rect x="0" y="0" width="1024" height="1024" rx="220" fill="#0B0D10"/>
+  <rect x="2" y="2" width="1020" height="1020" rx="218" fill="none" stroke="#FFFFFF" stroke-opacity="0.0784" stroke-width="2"/>
+  <rect x="6" y="6" width="1012" height="1012" rx="214" fill="none" stroke="#000000" stroke-opacity="0.0706" stroke-width="1"/>
+  <svg x="200.135" y="172.032" width="623.731" height="696.320" viewBox="32 29 232 259" preserveAspectRatio="xMidYMid meet">
+    <defs>
+    <linearGradient id="k2" x1="0%" y1="100%" x2="100%" y2="0%">
+      <stop offset="0%" stop-color="#FF6527"/>
+      <stop offset="100%" stop-color="#F44E1C"/>
+    </linearGradient>
+  </defs>
+  <g id="vulcan-symbol">
+    <path d="M 2 0
+L 84 0
+C 88 0 91 1 95 5
+L 153 76
+C 159 83 159 95 153 102
+L 95 173
+C 91 177 88 178 84 178
+L 2 178
+L 78 89
+Z" fill="#FFFFFF" transform="translate(30 110)"/>
+    <path d="M 73 0
+C 64 14 51 28 38 40
+C 21 55 7 68 2 87
+C -2 107 8 129 25 150
+C 39 134 53 119 67 107
+C 82 95 91 79 93 60
+C 95 40 86 18 73 0
+Z" fill="url(#k2)" transform="translate(169 29)"/>
+  </g>
+  </svg>
+</svg>

package/cordis.patch.yml

@@ -0,0 +1,17 @@
+- insert:
+    - id: dsh-vulcancode
+      name: cordis:group
+      group: true
+      config:
+        - id: openvulcan-account
+          name: '@openvulcan/dsh-vulcan-account'
+        - id: vulcan-decision-guard
+          name: '@openvulcan/dsh-decision-guard'
+        - id: vulcan-style
+          name: '@openvulcan/dsh-vulcan-style'
+        - id: vulcan-answers
+          name: '@openvulcan/dsh-vulcan-answers'
+        - id: vulcan-luaskills
+          name: '@openvulcan/dsh-vulcan-luaskills'
+        - id: vulcan-memory
+          name: '@openvulcan/dsh-vulcan-memory'

package/node_modules/@openvulcan/dsh-decision-guard/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 OpenVulcan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/node_modules/@openvulcan/dsh-decision-guard/README.md

@@ -0,0 +1,14 @@
+# @openvulcan/dsh-decision-guard
+
+Vulcan Decision 自动审批插件，属于 [dsh-vulcancode](https://github.com/OpenVulcan/dsh-vulcancode) 套件，随套件
+安装，不单独安装：
+
+```sh
+dsh plugin add @openvulcan/dsh-vulcancode
+```
+
+The Vulcan Decision auto approval plugin, part of the
+[dsh-vulcancode](https://github.com/OpenVulcan/dsh-vulcancode) suite. It is installed with the suite, not on
+its own.
+
+License: MIT

package/node_modules/@openvulcan/dsh-decision-guard/lib/calls.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Translate dsh tool calls into what the decision model reads.
+ *
+ * The model was trained on a fixed set of tool shapes (`shell_command`, `write_file`, `edit_file`,
+ * `create_file`, `read_file`, ...). dsh's own tools are translated into those shapes using only
+ * facts the call carries; nothing is guessed. Other tools, including MCP tools, are passed with
+ * their own name and arguments.
+ */
+/** What to do with one call before the model sees it. */
+export type Translation = 
+/** Judge the call with the model, rendered as this tool and arguments. */
+{
+    readonly kind: 'judge';
+    readonly tool: string;
+    readonly arguments: Readonly<Record<string, unknown>>;
+}
+/** Run it without asking the model; see {@link AllowReason}. */
+ | {
+    readonly kind: 'allow';
+    readonly reason: AllowReason;
+};
+/**
+ * - `internal`: a dsh tool whose only effect stays inside the harness (todos, goals, questions,
+ *   agent messages, job and terminal reads).
+ * - `project-edit`: a file edit inside the project, which the model's release notes let hosts
+ *   allow directly.
+ * - `project-read`: a read or search inside the project.
+ */
+export type AllowReason = 'internal' | 'project-edit' | 'project-read';
+/**
+ * @param name - tool name as dsh reports it.
+ * @param args - tool arguments as dsh reports them.
+ * @param project - the session's working directory, when known.
+ */
+export declare function translateCall(name: string, args: unknown, project: string | undefined): Translation;
+/**
+ * Whether `target` lies inside the project. A project at a filesystem root or the home directory
+ * covers too much to count, and repository metadata (`.git`, where hooks live) never counts.
+ */
+export declare function insideProject(project: string | undefined, target: string): boolean;

package/node_modules/@openvulcan/dsh-decision-guard/lib/calls.js

@@ -0,0 +1,150 @@
+/**
+ * Translate dsh tool calls into what the decision model reads.
+ *
+ * The model was trained on a fixed set of tool shapes (`shell_command`, `write_file`, `edit_file`,
+ * `create_file`, `read_file`, ...). dsh's own tools are translated into those shapes using only
+ * facts the call carries; nothing is guessed. Other tools, including MCP tools, are passed with
+ * their own name and arguments.
+ */
+import os from 'node:os';
+import path from 'node:path';
+import { INTENT_TOOL } from './decide.js';
+/** dsh tools whose effects stay inside the harness; every other tool is judged. */
+const INTERNAL_TOOLS = new Set([
+    'ask_user_question',
+    'cordis_inspect_list',
+    'cordis_inspect_query',
+    'create_goal',
+    // Vulcan Decision's own intent tool only records a statement for the reviewer.
+    INTENT_TOOL,
+    'get_goal',
+    'update_goal',
+    'job_list',
+    'job_output',
+    'list_agents',
+    'list_subagent_models',
+    'present',
+    'send_message',
+    'session_event_read',
+    'session_event_search',
+    'session_event_trace',
+    'session_search',
+    'session_trace',
+    'skill',
+    'team_task_create',
+    'team_task_get',
+    'team_task_list',
+    'team_task_update',
+    'terminal_list',
+    'terminal_read',
+    'todo_write',
+    'wait_agent',
+    'web_search',
+    'working_directory',
+]);
+/**
+ * @param name - tool name as dsh reports it.
+ * @param args - tool arguments as dsh reports them.
+ * @param project - the session's working directory, when known.
+ */
+export function translateCall(name, args, project) {
+    if (INTERNAL_TOOLS.has(name))
+        return { kind: 'allow', reason: 'internal' };
+    const record = isRecord(args) ? args : undefined;
+    if (record === undefined)
+        return { kind: 'judge', tool: name, arguments: { arguments: args } };
+    const text = (key) => typeof record[key] === 'string' ? record[key] : undefined;
+    switch (name) {
+        case 'bash':
+        case 'pwsh':
+            return shell(text('command'), text('workdir'), name === 'bash' ? 'bash' : 'powershell', project, name, record);
+        case 'terminal_send': {
+            // Text typed into a terminal session runs like a command in that terminal's shell.
+            const command = text('text');
+            return command === undefined ? passThrough(name, record) : judge('shell_command', { command });
+        }
+        case 'write':
+            return fileChange('write_file', text('file_path'), project, name, record);
+        case 'edit':
+            return fileChange('edit_file', text('file_path'), project, name, record);
+        case 'str_replace_editor': {
+            const command = text('command');
+            if (command === 'view')
+                return fileRead(text('path'), project, name, record);
+            if (command === 'create')
+                return fileChange('create_file', text('path'), project, name, record);
+            if (command === 'str_replace' || command === 'insert')
+                return fileChange('edit_file', text('path'), project, name, record);
+            return passThrough(name, record);
+        }
+        case 'read':
+        case 'read_image':
+            return fileRead(text('file_path'), project, name, record);
+        case 'glob':
+        case 'grep':
+        case 'lsp':
+            // Searches default to the session workspace.
+            return fileRead(text('path') ?? '.', project, name, record);
+        default:
+            return passThrough(name, record);
+    }
+}
+function shell(command, workdir, shellName, project, name, record) {
+    if (command === undefined)
+        return passThrough(name, record);
+    // A working directory is stated only when the call names one; a persistent shell's current
+    // directory is shell state the call does not carry.
+    const cwd = workdir === undefined ? undefined : resolveIn(project, workdir);
+    return judge('shell_command', { command, ...cwd === undefined ? {} : { cwd }, shell: shellName });
+}
+function fileChange(tool, file, project, name, record) {
+    if (file === undefined)
+        return passThrough(name, record);
+    if (insideProject(project, file))
+        return { kind: 'allow', reason: 'project-edit' };
+    // Only the target path is judged; file bodies are never sent to the model.
+    return judge(tool, { path: file });
+}
+function fileRead(file, project, name, record) {
+    if (file === undefined)
+        return passThrough(name, record);
+    if (insideProject(project, file))
+        return { kind: 'allow', reason: 'project-read' };
+    return judge('read_file', { path: file });
+}
+function judge(tool, args) {
+    return { kind: 'judge', tool, arguments: args };
+}
+function passThrough(name, record) {
+    return judge(name, record);
+}
+/** Absolute form of a path the tool resolves against the session workspace. */
+function resolveIn(project, target) {
+    if (path.isAbsolute(target))
+        return target;
+    return project === undefined ? undefined : path.resolve(project, target);
+}
+/**
+ * Whether `target` lies inside the project. A project at a filesystem root or the home directory
+ * covers too much to count, and repository metadata (`.git`, where hooks live) never counts.
+ */
+export function insideProject(project, target) {
+    if (project === undefined || project === '')
+        return false;
+    const root = path.resolve(project);
+    if (path.parse(root).root === root || sameDir(root, os.homedir()))
+        return false;
+    const relative = path.relative(root, path.resolve(root, target));
+    if (relative === '')
+        return true;
+    const segments = relative.split(/[\\/]/);
+    if (segments[0] === '..' || path.isAbsolute(relative))
+        return false;
+    return !segments.some(segment => segment.toLowerCase() === '.git');
+}
+function sameDir(a, b) {
+    return path.relative(path.resolve(a), path.resolve(b)) === '';
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}