@sleep2agi/dsh-anet 0.0.0-stage → 0.1.0-preview.26

package/README.md

@@ -1,3 +1,61 @@
-# Temporary Holding Version
+# @sleep2agi/dsh-anet (preview)
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+English | [中文](README.zh.md)
+
+A [DSH (DeepSeek Harness)](https://www.npmjs.com/package/@deepseek-ai/dsh) plugin that turns one or more DSH sessions into [Agent Network](https://anet.sh) (CommHub) nodes.
+
+- **Multi-node**: each node has its own name (alias), hub, token, project directory and dedicated DSH session.
+- **Sidebar UI**: click **ANet** in the sidebar (or Settings → Plugins → ANet).
+- **Human login**: log in once with a hub account; node tokens are minted automatically. The login is remembered in `~/.anet/dsh/account.json` (0600).
+- **Session per node**: tasks run in that node's session, so context is kept; switch sessions at any time.
+- SSE doorbell (`/events/<alias>`) with a 60 s fallback poll, exactly-once replies via a local ledger, `report_status` heartbeat (`agent: "dsh"`).
+
+## Install
+
+```bash
+dsh plugin --profile web add /path/to/agent-network/integrations/dsh-commhub
+# restart DSH
+```
+
+DSH `0.1.0-rc.6` / `0.2.0-rc.2` are supported. On the desktop app, the same package goes in
+`$DSH_HOME/profiles/node_modules` plus a `cordis.patch.yml` insert (see `cordis.patch.yml`).
+
+## Use
+
+1. Click **ANet** in the sidebar (or Settings → Plugins → Plugin configuration → ANet).
+2. Log in with the hub URL + a human account (username/password). The login is stored locally
+   in `~/.anet/dsh/account.json` (0600) and restored after restart; **Log out** clears it.
+3. Create a node: name (alias), project directory, and session (new or existing). The node token
+   is minted through the logged-in account and the node connects immediately.
+4. Others dispatch tasks to that alias from the hub/dashboard. Each task runs in the node's DSH
+   session and the answer is sent back to the hub.
+5. Multiple nodes can run together. Use the session dropdown on a node card to switch sessions,
+   or **Delete** to stop it.
+
+Config lives in `~/.anet/dsh/` (`nodes.json`, `account.json`, both 0600).
+
+## Optional: scripted bootstrap
+
+With a hub user token (`utok_`), the helper mints a node token and writes a legacy base config
+that the plugin migrates into a node on first start:
+
+```bash
+ANET_USER_TOKEN=utok_... node scripts/connect.mjs \
+  --hub https://your-hub.example --alias my-dsh-node --network net_xxxx
+```
+
+The user token is never printed or persisted; `--no-verify` skips the round-trip.
+
+## Behaviour notes
+
+- A task whose turn fails replies `failed` with the DSH error text (for example a missing model credential), so the sender sees the cause.
+- If the hub rejects a reply, the answer is kept in the ledger and resent on the next drain; the turn is not re-run.
+- If the plugin process dies mid-turn, the task is answered `failed` with "please resend" on the next start rather than being re-run silently.
+- Replies over the hub's 10 000-character limit are truncated with a visible note.
+- Informational (non-task) inbox messages are acknowledged but not shown to the agent in this version.
+
+## Tests
+
+```bash
+cd integrations/dsh-commhub && npm test   # node --test, in-process fake hub, no DSH needed
+```

package/README.zh.md

@@ -0,0 +1,59 @@
+# @sleep2agi/dsh-anet（预览）
+
+[English](README.md) | 中文
+
+一个 [DSH（DeepSeek Harness）](https://www.npmjs.com/package/@deepseek-ai/dsh) 插件，把一个或多个 DSH session 变成 [Agent Network](https://anet.sh)（CommHub）节点。
+
+- **多节点**：每个节点有自己的名称（alias）、hub、token、项目目录和专属 DSH session。
+- **侧边栏入口**：点侧边栏的 **ANet**（或 Settings → Plugins → ANet）。
+- **人类账号登录**：登录一次即可，节点 token 自动签发；登录状态保存在 `~/.anet/dsh/account.json`（0600）。
+- **节点绑定 session**：任务在该节点的 session 里执行，上下文连续；随时可切换 session。
+- SSE 门铃（`/events/<alias>`）+ 60 秒兜底轮询；本地账本保证回件恰好一次；`report_status` 心跳（`agent: "dsh"`）。
+
+## 安装
+
+```bash
+dsh plugin --profile web add /path/to/agent-network/integrations/dsh-commhub
+# 重启 DSH
+```
+
+支持 DSH `0.1.0-rc.6` / `0.2.0-rc.2`。桌面版把同一个包装进
+`$DSH_HOME/profiles/node_modules`，并在 `cordis.patch.yml` 加一条 insert（见 `cordis.patch.yml`）。
+
+## 使用
+
+1. 点侧边栏 **ANet**（或 Settings → Plugins → Plugin configuration → ANet）。
+2. 用 Hub 地址 + 人类账号（用户名/密码）登录。登录状态存本机
+   `~/.anet/dsh/account.json`（0600），重启后自动恢复；点 **退出登录** 清除。
+3. 创建节点：节点名称（alias）、项目目录、Session（新建或选已有）。token 由当前登录账号
+   自动签发，节点立即上线。
+4. 其他人在 hub/看板给该 alias 派任务；任务在节点的 DSH session 里执行，结果自动回 hub。
+5. 可同时运行多个节点；节点卡片里的 Session 下拉可随时切换，**删除** 即下线。
+
+配置在 `~/.anet/dsh/`（`nodes.json`、`account.json`，均 0600）。
+
+## 可选：脚本引导
+
+已有 hub 用户 token（`utok_`）时，辅助脚本会创建节点 token 并写一份基础配置，插件首次启动
+自动迁移成节点：
+
+```bash
+ANET_USER_TOKEN=utok_... node scripts/connect.mjs \
+  --hub https://your-hub.example --alias my-dsh-node --network net_xxxx
+```
+
+脚本不会打印或保存用户 token；加 `--no-verify` 可跳过连通性验证。
+
+## 行为说明
+
+- 一轮失败会回 `failed` 并带上 DSH 的错误原文（例如缺模型凭据），发件方能看到原因。
+- hub 拒收回件时，答案留在账本里，下一次拉取时重发，不会重跑这一轮。
+- 插件进程在一轮中途死掉，下次启动时对该任务回 `failed` 并提示「请重发」，而不是悄悄重跑。
+- 超过 hub 1 万字上限的回件会截断并附说明。
+- 本版对「消息」类（非任务）收件只确认，不交给 agent。
+
+## 测试
+
+```bash
+cd integrations/dsh-commhub && npm test   # node --test，进程内假 hub，不需要装 DSH
+```

package/cordis.patch.yml

@@ -0,0 +1,8 @@
+# dsh-anet bundle patch: mounts the Agent Network node plugin on any DSH profile.
+# Configure with ANET_HUB / ANET_ALIAS / ANET_NETWORK_ID and ANET_NODE_TOKEN
+# (or ANET_NODE_TOKEN_FILE), or with a 0600 ~/.anet/dsh/config.json
+# ({ hub, alias, networkId, token }). Never put the node token in this file.
+- insert:
+    - id: anet
+      name: '@sleep2agi/dsh-anet'
+      inject: [agents, agentDefaultModel, sessions, tools]

package/package.json

@@ -1,6 +1,70 @@
 {
   "name": "@sleep2agi/dsh-anet",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0-preview.26",
+  "description": "DSH (DeepSeek Harness) plugin: expose one or more DSH sessions as Agent Network (anet.sh / CommHub) nodes.",
+  "type": "module",
+  "main": "./src/plugin.mjs",
+  "exports": {
+    ".": "./src/plugin.mjs",
+    "./core": "./src/node-loop.mjs",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json",
+    "./turn": "./src/turn.mjs",
+    "./client": "./src/client.js"
+  },
+  "files": [
+    "src",
+    "scripts",
+    "cordis.patch.yml",
+    "README.md",
+    "README.zh.md"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-sidebar"
+      ],
+      "platform": "web"
+    }
+  },
+  "scripts": {
+    "test": "node --test test/*.test.mjs"
+  },
+  "engines": {
+    "node": ">=22.14.0"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/dsh-agent": "^0.1.0-rc.6 || ^0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6 || ^0.2.0-rc.2",
+    "@deepseek-ai/dsh-session": "^0.1.0-rc.6 || ^0.2.0-rc.2",
+    "@deepseek-ai/dsh-tools": "^0.1.0-rc.6 || ^0.2.0-rc.2"
+  },
+  "license": "Apache-2.0",
+  "keywords": [
+    "dsh",
+    "deepseek",
+    "harness",
+    "anet",
+    "agent-network",
+    "commhub",
+    "plugin"
+  ],
+  "homepage": "https://github.com/sleep2agi/agent-network/tree/main/integrations/dsh-commhub",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/sleep2agi/agent-network.git",
+    "directory": "integrations/dsh-commhub"
+  },
+  "bugs": {
+    "url": "https://github.com/sleep2agi/agent-network/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "author": "sleep2agi"
+}

package/scripts/connect.mjs

@@ -0,0 +1,84 @@
+#!/usr/bin/env node
+// Mint a node token for this DSH node and write the DSH-commhub config file.
+//
+//   ANET_USER_TOKEN=utok_... node scripts/connect.mjs \
+//     --hub https://your-hub.example --alias my-dsh-node --network net_xxxx
+//
+// The user token is used once to call POST /api/auth/node-token and is never
+// written to disk. The minted ntok_ and the connection settings go into
+// ~/.anet/dsh/config.json (mode 0600), which the plugin reads at boot.
+import { chmodSync, mkdirSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { createHubClient } from "../src/hub-client.mjs";
+
+const USAGE = `usage: connect.mjs --hub <url> --alias <name> [--network <network_id>]
+                    [--user-token-file <path>] [--config <path>] [--no-verify]
+
+The user token comes from ANET_USER_TOKEN or --user-token-file (0600).`;
+
+function parseArgs(argv) {
+  const out = { config: join(homedir(), ".anet", "dsh", "config.json"), verify: true };
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i];
+    if (arg === "--help" || arg === "-h") out.help = true;
+    else if (arg === "--no-verify") out.verify = false;
+    else if (arg.startsWith("--")) {
+      const key = arg.slice(2).replace(/-([a-z])/g, (_, c) => c.toUpperCase());
+      const value = argv[++i];
+      if (value === undefined) throw new Error(`${arg} needs a value`);
+      out[key] = value;
+    } else throw new Error(`unexpected argument "${arg}"`);
+  }
+  return out;
+}
+
+async function readUserToken(args) {
+  if (process.env.ANET_USER_TOKEN) return process.env.ANET_USER_TOKEN.trim();
+  if (!args.userTokenFile) return "";
+  const { readFileSync, statSync } = await import("node:fs");
+  const st = statSync(args.userTokenFile);
+  if ((st.mode & 0o077) !== 0) throw new Error(`user token file ${args.userTokenFile} is readable by group/others; chmod 600 it`);
+  return readFileSync(args.userTokenFile, "utf8").trim();
+}
+
+async function main() {
+  const args = parseArgs(process.argv.slice(2));
+  if (args.help) { console.log(USAGE); return; }
+  const hub = String(args.hub ?? "").replace(/\/+$/, "");
+  const alias = String(args.alias ?? "");
+  const networkId = args.network ? String(args.network) : undefined;
+  if (!/^https?:\/\//.test(hub)) throw new Error("--hub must be an http(s) URL");
+  if (!alias) throw new Error("--alias is required");
+  const userToken = await readUserToken(args);
+  if (!userToken) throw new Error("user token is required (ANET_USER_TOKEN or --user-token-file)");
+  if (!/^(utok_|atok_)/.test(userToken)) throw new Error("user token must be a utok_/atok_ token");
+
+  const res = await fetch(`${hub}/api/auth/node-token`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json", Authorization: `Bearer ${userToken}` },
+    body: JSON.stringify({ node_name: alias, ...(networkId ? { network_id: networkId } : {}) }),
+    signal: AbortSignal.timeout(30_000),
+  });
+  const body = await res.json().catch(() => ({}));
+  if (!res.ok || body.ok === false || !body.token) {
+    throw new Error(`mint failed (HTTP ${res.status}): ${body.error ?? "no token returned"}`);
+  }
+  if (!String(body.token).startsWith("ntok_")) throw new Error("hub returned a non-ntok token");
+
+  const config = { hub, alias, ...(networkId ? { networkId } : {}), token: String(body.token) };
+  if (args.verify) {
+    const client = createHubClient({ hub, token: config.token, networkId });
+    const status = await client.call("report_status", { resume_id: `dsh-connect-${Date.now()}`, alias, status: "idle", agent: "dsh", version: "dsh-commhub-connect" });
+    if (status?.ok === false) throw new Error(`hub rejected the minted token: ${status.error ?? status.text ?? "unknown"}`);
+  }
+
+  const path = args.config.startsWith("~/") ? join(homedir(), args.config.slice(2)) : args.config;
+  mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+  writeFileSync(path, `${JSON.stringify(config, null, 2)}\n`, { mode: 0o600 });
+  chmodSync(path, 0o600);
+  console.log(`node "${alias}" configured for ${hub}`);
+  console.log(`wrote ${path} (0600)${args.verify ? "; hub accepted the token" : ""}`);
+}
+
+main().catch((error) => { console.error(`connect: ${error.message}`); process.exit(1); });