@sparkelf/dsh-plus 0.2.0-rc.13 → 0.2.0-rc.15

package/cordis.patch.yml

@@ -6,12 +6,19 @@
     trustedHosts: !!js ctx.webRuntime.trustedHosts
     browserAuthentication: disabled
 
+# The derived index behind session history search. `first-search` builds it when a
+# search first asks for it rather than delaying every start.
 - id: session-query-sqlite
   config:
     path: !!js dshHomePath('storages/session-query.sqlite')
     openAt: first-search
 
+# The model-facing tools over that index: search, trace, and event read. The
+# backend above answers only once something mounts the tools that call it, so a
+# deployment carrying the backend alone has an index nothing asks for.
 - insert:
+    - id: plus-session-query-tool
+      name: '@deepseek-ai/dsh-tool-session-query'
     # The sidebar skill center. It reads the loaded skills through `ctx.skills`
     # and registers its row and page into the shell's own slots, so the panel
     # matches the official panels beside it.
@@ -57,3 +64,10 @@
         provider: fork
         enabled: false
         maxDepth: 0
+
+# The first content search builds the whole index in one transaction, so it needs far
+# more than a steady-state query. This row follows the insert above because a patch
+# only reaches rows an earlier patch created.
+- id: plus-session-query-tool
+  config:
+    searchTimeoutMs: 900000

package/lib/bin.js

@@ -75,6 +75,296 @@ function newerVersion(name, installed, registry = "https://registry.npmjs.org")
 	return publishedVersions(name, registry).filter((entry) => semver.gt(entry.version, installed)).at(-1);
 }
 //#endregion
+//#region lib/types/standalone-capabilities.js
+/** Capabilities offered at install time, in interview order. */
+const CAPABILITIES = [
+	{
+		id: "exa",
+		title: "Web search (Exa)",
+		detail: "Search the web through Exa instead of the built-in provider; needs an API key",
+		needsEndpoint: false
+	},
+	{
+		id: "mineru",
+		title: "PDF parsing (MinerU)",
+		detail: "Parse uploaded PDFs locally; the service is installed and started here",
+		needsEndpoint: true
+	},
+	{
+		id: "officecli",
+		title: "Office documents (OfficeCLI)",
+		detail: "Create and open DOCX, XLSX, and PPTX deliverables",
+		needsEndpoint: false
+	},
+	{
+		id: "computer-use",
+		title: "Windows desktop control (computer-use)",
+		detail: "Drive the Windows desktop from WSL through the cua driver",
+		needsEndpoint: false
+	}
+];
+/** Where this command starts MinerU when the capability is enabled. */
+const DEFAULT_MINERU_ENDPOINT = "http://127.0.0.1:8000/file_parse";
+/** File under the deployment home recording which capabilities were enabled. */
+const CAPABILITY_RECORD = "capabilities.json";
+/** Deployment env file the launcher reads as its `user-env` layer. */
+const CAPABILITY_ENV_FILE = ".env";
+/** One prompt on the terminal, resolving the trimmed line the user typed. */
+function ask(question) {
+	return new Promise((resolveAnswer) => {
+		process.stdout.write(question);
+		process.stdin.once("data", (chunk) => {
+			resolveAnswer(String(chunk).trim());
+		});
+	});
+}
+/** Ask one yes/no question, defaulting to yes. */
+async function confirmDefaultYes(question) {
+	const answer = (await ask(question + " [Y/n] ")).toLowerCase();
+	return answer === "" || answer === "y" || answer === "yes";
+}
+/**
+* Interview the user about the optional capabilities.
+*
+* Each is offered on its own line and defaults to enabled, so pressing Enter
+* through the interview produces a deployment whose features work. The answers are
+* returned rather than applied, so a caller can report what it will do before it
+* touches the profile.
+*
+* @param interactive - when false, every capability is enabled without asking.
+* @returns the ids to enable and the values the enabled ones need.
+*/
+async function interviewCapabilities(interactive) {
+	if (!interactive) return { enabled: CAPABILITIES.map((capability) => capability.id) };
+	console.log("");
+	console.log("Optional capabilities. Press Enter to accept the default (all enabled),");
+	console.log("or answer n for any you do not want.");
+	console.log("");
+	const enabled = [];
+	for (const capability of CAPABILITIES) if (await confirmDefaultYes("  Enable " + capability.title + "? (" + capability.detail + ")")) enabled.push(capability.id);
+	let exaApiKey;
+	if (enabled.includes("exa")) {
+		console.log("");
+		console.log("  Exa needs an API key. Create one at https://dashboard.exa.ai/api-keys");
+		const typed = await ask("  Exa API key (leave empty to add it later): ");
+		if (typed !== "") exaApiKey = typed;
+	}
+	let mineruEndpoint;
+	if (enabled.includes("mineru")) {
+		const typed = await ask("  MinerU endpoint [http://127.0.0.1:8000/file_parse]: ");
+		mineruEndpoint = typed === "" ? DEFAULT_MINERU_ENDPOINT : typed;
+	}
+	return {
+		enabled,
+		...exaApiKey === void 0 ? {} : { exaApiKey },
+		...mineruEndpoint === void 0 ? {} : { mineruEndpoint }
+	};
+}
+/** Names this module owns in the deployment env file. */
+const CAPABILITY_ENV_NAMES = ["DSH_MINERU_ENDPOINT", "EXA_API_KEY"];
+/**
+* The deployment env file, with one assignment per enabled capability that reaches
+* its service through the launch environment.
+*
+* MinerU is switched on by the presence of its endpoint and Exa reads its key from
+* the launch environment, so a capability the user selected is enabled here as well
+* as in the profile layer. Only the names this interview owns are rewritten: a
+* deployment that keeps its own assignments in the same file keeps them, and
+* deselecting a capability removes the assignment that turned it on.
+*
+* @param answers - the interview's answers.
+* @param existing - the file's current text, when it already exists.
+* @returns the environment file's text.
+*/
+function capabilityEnvironment(answers, existing = "") {
+	const enabled = new Set(answers.enabled);
+	const owned = new Set(CAPABILITY_ENV_NAMES);
+	const kept = existing.split("\n").filter((line) => {
+		const name = /^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=/.exec(line)?.[1];
+		return line.trim() !== "" && !line.trimStart().startsWith("#") && (name === void 0 || !owned.has(name));
+	});
+	const written = ["# Written by dsh-plus start from the capability interview. Enabling or", "# disabling a capability rewrites the lines below; other lines are kept."];
+	if (enabled.has("mineru")) written.push("DSH_MINERU_ENDPOINT=" + (answers.mineruEndpoint ?? "http://127.0.0.1:8000/file_parse"));
+	if (enabled.has("exa") && answers.exaApiKey !== void 0) written.push("EXA_API_KEY=" + answers.exaApiKey);
+	return [...written, ...kept].join("\n") + "\n";
+}
+/**
+* The profile patch layer that turns the selected capabilities on.
+*
+* The file is data the profile's loader merges, so enabling a capability writes a
+* row rather than editing the deployment. An empty selection still writes the file,
+* because a layer that exists and mounts nothing is how a previously enabled
+* capability is turned back off.
+*
+* The profile's own layer is a separate file with its own name: a deployment that
+* configured something by hand keeps it, and the capability rows are rewritten
+* whole on every start.
+*
+* @param answers - the interview's answers.
+* @returns the patch layer's YAML text.
+*/
+function capabilityPatchLayer(answers) {
+	const enabled = new Set(answers.enabled);
+	const rows = [];
+	if (enabled.has("exa")) rows.push("    - id: web-search-exa", "      name: '@deepseek-ai/dsh-web-search-exa'", "      config:", "        searchType: auto", "        numResults: 8");
+	if (enabled.has("computer-use")) rows.push("    - id: computer-use", "      name: '@deepseek-ai/dsh-computer-use'", "    - id: computer-use-cua-driver-mcp", "      name: '@deepseek-ai/dsh-experimental-computer-use-cua-driver-mcp'");
+	const lines = ["# Written by dsh-plus start from the capability interview. Enabling or disabling a capability", "# rewrites this file; edits here are replaced."];
+	if (rows.length > 0) lines.push("- insert:", ...rows);
+	if (enabled.has("exa")) lines.push("", "# Route web_search through Exa rather than the built-in provider.", "- id: web", "  config:", "    searchProvider: exa");
+	return lines.join("\n") + "\n";
+}
+/** Run one command, reporting a failure rather than throwing. */
+function runStep(command, args) {
+	return spawnSync(command, [...args], { stdio: "inherit" }).status === 0;
+}
+/**
+* Install and start the backing services the selected capabilities need.
+*
+* Enabling a capability means the deployment expects its service to answer, so the
+* command that offers the choice is also the command that provides it. Each step
+* reports what it is doing and, on failure, the command a user can run by hand —
+* a missing runtime is a fact about the host, not a reason to abandon the install.
+*
+* @param answers - the interview's answers.
+* @param home - the deployment home, where generated service units are recorded.
+* @returns the ids whose service is ready.
+*/
+async function installCapabilityServices(answers, home) {
+	const enabled = new Set(answers.enabled);
+	const ready = [];
+	mkdirSync(home, { recursive: true });
+	writeFileSync(join(home, CAPABILITY_RECORD), JSON.stringify({
+		enabled: [...answers.enabled],
+		...answers.mineruEndpoint === void 0 ? {} : { mineruEndpoint: answers.mineruEndpoint }
+	}, null, 2) + "\n");
+	if (enabled.has("mineru")) {
+		console.log("");
+		console.log("  MinerU: installing the parser and starting its service...");
+		if (installMineru(home) && startMineru(home)) {
+			ready.push("mineru");
+			console.log("  MinerU: ready at " + (answers.mineruEndpoint ?? "http://127.0.0.1:8000/file_parse"));
+		} else {
+			console.log("  MinerU: not installed. Install it later with:");
+			console.log("    pip install -U \"mineru[core]\"");
+			console.log("    mineru-api --host 127.0.0.1 --port 8000");
+		}
+	}
+	if (enabled.has("officecli")) ready.push("officecli");
+	if (enabled.has("computer-use")) if (desktopDriverAvailable()) ready.push("computer-use");
+	else {
+		console.log("");
+		console.log("  computer-use: the cua driver was not found on PATH. The plugin is");
+		console.log("  still mounted, so it starts once the driver is installed:");
+		console.log("    install the cua-driver release for this architecture, then restart");
+	}
+	return ready;
+}
+/**
+* Install MinerU when it is absent and start its API service.
+*
+* MinerU is a Python package whose API server answers on a local port; the profile
+* points at that port. The parser is installed into a virtual environment under the
+* deployment home and an existing one is upgraded rather than skipped, so enabling
+* the capability keeps the parser current without touching the system interpreter.
+*
+* @param home - the deployment home that owns the venv.
+* @returns whether the package is installed; not whether it answered.
+*/
+function installMineru(home) {
+	const python = pythonInterpreter();
+	if (python === void 0) {
+		console.log("  MinerU: no Python interpreter found on PATH.");
+		return false;
+	}
+	const venv = join(home, ".mineru-venv");
+	if (!runStep(python, [
+		"-m",
+		"venv",
+		venv
+	])) return false;
+	return runStep(join(venv, "bin", "python"), [
+		"-m",
+		"pip",
+		"install",
+		"-U",
+		"mineru[all]"
+	]);
+}
+/**
+* Start the MinerU API server as a background service when none answers yet.
+*
+* The service has to outlive the install command, so it is registered with the
+* host's service manager when one is available and otherwise started detached.
+*
+* @returns whether the server is running after this call.
+*/
+function startMineru(home) {
+	const api = mineruApiBinary(home);
+	if (api === void 0) return false;
+	if (mineruAnswers()) return true;
+	if (spawnSync("systemctl", ["--version"], { stdio: "ignore" }).status === 0) {
+		writeFileSync("/etc/systemd/system/mineru-api.service", [
+			"[Unit]",
+			"Description=MinerU document parsing API for DeepSeek Harness Plus",
+			"After=network-online.target",
+			"Wants=network-online.target",
+			"",
+			"[Service]",
+			"Type=simple",
+			"User=root",
+			"ExecStart=" + api + " --host 127.0.0.1 --port 8000",
+			"Restart=on-failure",
+			"RestartSec=2",
+			"TimeoutStopSec=15",
+			"",
+			"[Install]",
+			"WantedBy=multi-user.target",
+			""
+		].join("\n"));
+		spawnSync("systemctl", ["daemon-reload"], { stdio: "ignore" });
+		return spawnSync("systemctl", [
+			"enable",
+			"--now",
+			"mineru-api.service"
+		], { stdio: "ignore" }).status === 0;
+	}
+	console.log("  MinerU: start the API server with:");
+	console.log("    " + api + " --host 127.0.0.1 --port 8000");
+	return false;
+}
+/** The Python interpreter to install MinerU with, preferring python3. */
+function pythonInterpreter() {
+	return ["python3", "python"].find((candidate) => spawnSync(candidate, ["--version"], { stdio: "ignore" }).status === 0);
+}
+/**
+* The MinerU API entry point, wherever the install placed it.
+*
+* The venv this command creates comes first: it is the interpreter the parser was
+* installed into, so its `mineru-api` is the one that can import MinerU. A binary on
+* PATH is a fallback for a deployment that installed MinerU some other way.
+*
+* @param home - the deployment home that owns the venv.
+* @returns the command to run, or `undefined` when none answers.
+*/
+function mineruApiBinary(home) {
+	return [join(home, ".mineru-venv", "bin", "mineru-api"), "mineru-api"].find((candidate) => spawnSync(candidate, ["--help"], { stdio: "ignore" }).status === 0);
+}
+/** Whether a MinerU API server already answers on the default port. */
+function mineruAnswers() {
+	return spawnSync("curl", [
+		"-sf",
+		"-o",
+		"/dev/null",
+		"--max-time",
+		"3",
+		"http://127.0.0.1:8000/docs"
+	], { stdio: "ignore" }).status === 0;
+}
+/** Whether the Windows-side desktop driver answers from this shell. */
+function desktopDriverAvailable() {
+	return spawnSync("cua-driver", ["--version"], { stdio: "ignore" }).status === 0;
+}
+//#endregion
 //#region lib/types/standalone-server.js
 /**
 * Process lifecycle for one standalone Plus server.
@@ -681,6 +971,8 @@ function resolveInstalledPackage(from, packageName) {
 */
 /** Milliseconds a start waits for the server to answer before reporting failure. */
 const READY_TIMEOUT_MILLISECONDS = 9e4;
+/** Profile patch file the capability interview rewrites (the profile's user layer). */
+const CAPABILITY_PATCH_FILE = "cordis.patch.yml";
 function parseStartOptions(argv) {
 	let port = DEFAULT_PORT;
 	let host = "127.0.0.1";
@@ -801,6 +1093,15 @@ async function start(argv) {
 	const created = ensureProfile(paths, installationRoot());
 	console.log(created ? "Created the plus profile at " + paths.profileDirectory : "Using the existing plus profile");
 	for (const label of applyProfileNpmPatches(paths.distributionDirectory, paths.profileDirectory)) console.log("Applied the reviewed patch " + label);
+	const answers = created || !existsSync(join(paths.home, "capabilities.json")) ? await interviewCapabilities(true) : void 0;
+	if (answers !== void 0) {
+		const ready = await installCapabilityServices(answers, paths.home);
+		writeCapabilityPatch(paths.profileDirectory, answers);
+		writeCapabilityEnvironment(paths.home, answers);
+		console.log("  Enabled: " + (answers.enabled.length === 0 ? "(none)" : answers.enabled.join(", ")));
+		if (answers.enabled.length > 0) console.log("  Services ready: " + (ready.length === 0 ? "(none)" : ready.join(", ")));
+		if (answers.enabled.includes("exa") && answers.exaApiKey === void 0) console.log("  Exa: add EXA_API_KEY to " + join(paths.home, CAPABILITY_ENV_FILE) + " when you have a key.");
+	}
 	const entry = launcherEntry(anchor);
 	if (options.foreground) return runForeground(entry, options.port, options.host, options.open);
 	const existing = readState(paths.home);
@@ -942,6 +1243,40 @@ async function update(argv) {
 	if (readState(paths.home) !== void 0) console.log("The running server still serves " + installed + "; run dsh-plus restart to load the new release.");
 	return 0;
 }
+/**
+* Write the profile's capability patch layer.
+*
+* The profile's loader merges this file, so enabling a capability is a data change
+* rather than an edit to the deployment. Writing it on every configured run also
+* turns a capability back off when the interview no longer selects it.
+*
+* @param profileDirectory - the profile whose layer is replaced.
+* @param answers - the interview's answers.
+*/
+function writeCapabilityPatch(profileDirectory, answers) {
+	const path = join(profileDirectory, CAPABILITY_PATCH_FILE);
+	const existing = existsSync(path) ? readFileSync(path, "utf8") : void 0;
+	if (existing !== void 0 && !existing.includes("Written by dsh-plus start from the capability interview.")) {
+		writeFileSync(path + ".before-capabilities", existing);
+		console.log("  Kept the existing profile layer at cordis.patch.yml.before-capabilities");
+	}
+	writeFileSync(path, capabilityPatchLayer(answers));
+}
+/**
+* Write the deployment's capability environment file.
+*
+* MinerU is switched on by the presence of its endpoint and Exa reads its key from
+* the launch environment, so the answers reach those two through `$DSH_HOME/.env`
+* rather than through the profile layer. The file is replaced whole on every
+* configured start, which is also how a capability the user dropped stops applying.
+*
+* @param home - the deployment home whose env file the launcher reads.
+* @param answers - the interview's answers.
+*/
+function writeCapabilityEnvironment(home, answers) {
+	const path = join(home, CAPABILITY_ENV_FILE);
+	writeFileSync(path, capabilityEnvironment(answers, existsSync(path) ? readFileSync(path, "utf8") : ""));
+}
 /** Ask one yes/no question on the terminal. */
 function confirm(question) {
 	return new Promise((resolveAnswer) => {

package/lib/types/standalone-capabilities.d.ts

@@ -0,0 +1,109 @@
+/**
+ * The optional capabilities a Plus installation can enable, and the interview that
+ * decides which ones to set up.
+ *
+ * A standalone installation works without any of them: the agent runs, the shell
+ * runs, and files are read and written. Each entry here adds a capability whose
+ * backing service lives outside npm — a search provider that needs a key, a PDF
+ * parser that needs a local server, an Office toolchain that needs a runtime — so
+ * the choice is offered once, at install time, rather than left to a user who has
+ * no way to know what the deployment is missing.
+ *
+ * Every capability is selected by default. A user who wants the plain harness
+ * deselects them; a user who accepts the defaults ends up with a deployment whose
+ * features work, which is the state the interactive question exists to reach.
+ *
+ * Enabling a capability has to mean the feature works, so each entry carries both
+ * halves of that: the profile row that mounts it and the service it needs. A
+ * capability that only asked a question and then dropped the answer would report
+ * success while the deployment stayed exactly as it was.
+ *
+ * @module @sparkelf/dsh-plus/standalone-capabilities
+ */
+/** One optional capability a deployment can enable. */
+export interface Capability {
+    /** Stable key used on the command line and in the profile. */
+    readonly id: string;
+    /** One-line name shown in the interview. */
+    readonly title: string;
+    /** What the deployment gains, shown beside the name. */
+    readonly detail: string;
+    /** Whether the backing service needs an address the user must supply. */
+    readonly needsEndpoint: boolean;
+}
+/** Capabilities offered at install time, in interview order. */
+export declare const CAPABILITIES: readonly Capability[];
+/** The answers one interview produced. */
+export interface CapabilityAnswers {
+    /** Capability ids the user kept selected. */
+    readonly enabled: readonly string[];
+    /** Exa API key when web search was enabled and the user supplied one. */
+    readonly exaApiKey?: string;
+    /** MinerU endpoint to write; defaults to the local service this command starts. */
+    readonly mineruEndpoint?: string;
+}
+/** Where this command starts MinerU when the capability is enabled. */
+export declare const DEFAULT_MINERU_ENDPOINT = "http://127.0.0.1:8000/file_parse";
+/** File under the deployment home recording which capabilities were enabled. */
+export declare const CAPABILITY_RECORD = "capabilities.json";
+/** Deployment env file the launcher reads as its `user-env` layer. */
+export declare const CAPABILITY_ENV_FILE = ".env";
+/** Comment that identifies a profile layer this interview wrote. */
+export declare const CAPABILITY_MARKER = "Written by dsh-plus start from the capability interview.";
+/**
+ * Interview the user about the optional capabilities.
+ *
+ * Each is offered on its own line and defaults to enabled, so pressing Enter
+ * through the interview produces a deployment whose features work. The answers are
+ * returned rather than applied, so a caller can report what it will do before it
+ * touches the profile.
+ *
+ * @param interactive - when false, every capability is enabled without asking.
+ * @returns the ids to enable and the values the enabled ones need.
+ */
+export declare function interviewCapabilities(interactive: boolean): Promise<CapabilityAnswers>;
+/**
+ * The deployment env file, with one assignment per enabled capability that reaches
+ * its service through the launch environment.
+ *
+ * MinerU is switched on by the presence of its endpoint and Exa reads its key from
+ * the launch environment, so a capability the user selected is enabled here as well
+ * as in the profile layer. Only the names this interview owns are rewritten: a
+ * deployment that keeps its own assignments in the same file keeps them, and
+ * deselecting a capability removes the assignment that turned it on.
+ *
+ * @param answers - the interview's answers.
+ * @param existing - the file's current text, when it already exists.
+ * @returns the environment file's text.
+ */
+export declare function capabilityEnvironment(answers: CapabilityAnswers, existing?: string): string;
+/**
+ * The profile patch layer that turns the selected capabilities on.
+ *
+ * The file is data the profile's loader merges, so enabling a capability writes a
+ * row rather than editing the deployment. An empty selection still writes the file,
+ * because a layer that exists and mounts nothing is how a previously enabled
+ * capability is turned back off.
+ *
+ * The profile's own layer is a separate file with its own name: a deployment that
+ * configured something by hand keeps it, and the capability rows are rewritten
+ * whole on every start.
+ *
+ * @param answers - the interview's answers.
+ * @returns the patch layer's YAML text.
+ */
+export declare function capabilityPatchLayer(answers: CapabilityAnswers): string;
+/**
+ * Install and start the backing services the selected capabilities need.
+ *
+ * Enabling a capability means the deployment expects its service to answer, so the
+ * command that offers the choice is also the command that provides it. Each step
+ * reports what it is doing and, on failure, the command a user can run by hand —
+ * a missing runtime is a fact about the host, not a reason to abandon the install.
+ *
+ * @param answers - the interview's answers.
+ * @param home - the deployment home, where generated service units are recorded.
+ * @returns the ids whose service is ready.
+ */
+export declare function installCapabilityServices(answers: CapabilityAnswers, home: string): Promise<readonly string[]>;
+//# sourceMappingURL=standalone-capabilities.d.ts.map

package/lib/types/standalone-capabilities.js

@@ -0,0 +1,324 @@
+import { spawnSync } from 'node:child_process';
+import { mkdirSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+/** Capabilities offered at install time, in interview order. */
+export const CAPABILITIES = [
+    {
+        id: 'exa',
+        title: 'Web search (Exa)',
+        detail: 'Search the web through Exa instead of the built-in provider; needs an API key',
+        needsEndpoint: false,
+    },
+    {
+        id: 'mineru',
+        title: 'PDF parsing (MinerU)',
+        detail: 'Parse uploaded PDFs locally; the service is installed and started here',
+        needsEndpoint: true,
+    },
+    {
+        id: 'officecli',
+        title: 'Office documents (OfficeCLI)',
+        detail: 'Create and open DOCX, XLSX, and PPTX deliverables',
+        needsEndpoint: false,
+    },
+    {
+        id: 'computer-use',
+        title: 'Windows desktop control (computer-use)',
+        detail: 'Drive the Windows desktop from WSL through the cua driver',
+        needsEndpoint: false,
+    },
+];
+/** Where this command starts MinerU when the capability is enabled. */
+export const DEFAULT_MINERU_ENDPOINT = 'http://127.0.0.1:8000/file_parse';
+/** File under the deployment home recording which capabilities were enabled. */
+export const CAPABILITY_RECORD = 'capabilities.json';
+/** Deployment env file the launcher reads as its `user-env` layer. */
+export const CAPABILITY_ENV_FILE = '.env';
+/** Comment that identifies a profile layer this interview wrote. */
+export const CAPABILITY_MARKER = 'Written by dsh-plus start from the capability interview.';
+/** One prompt on the terminal, resolving the trimmed line the user typed. */
+function ask(question) {
+    return new Promise((resolveAnswer) => {
+        process.stdout.write(question);
+        process.stdin.once('data', (chunk) => {
+            resolveAnswer(String(chunk).trim());
+        });
+    });
+}
+/** Ask one yes/no question, defaulting to yes. */
+async function confirmDefaultYes(question) {
+    const answer = (await ask(question + ' [Y/n] ')).toLowerCase();
+    return answer === '' || answer === 'y' || answer === 'yes';
+}
+/**
+ * Interview the user about the optional capabilities.
+ *
+ * Each is offered on its own line and defaults to enabled, so pressing Enter
+ * through the interview produces a deployment whose features work. The answers are
+ * returned rather than applied, so a caller can report what it will do before it
+ * touches the profile.
+ *
+ * @param interactive - when false, every capability is enabled without asking.
+ * @returns the ids to enable and the values the enabled ones need.
+ */
+export async function interviewCapabilities(interactive) {
+    if (!interactive)
+        return { enabled: CAPABILITIES.map(capability => capability.id) };
+    console.log('');
+    console.log('Optional capabilities. Press Enter to accept the default (all enabled),');
+    console.log('or answer n for any you do not want.');
+    console.log('');
+    const enabled = [];
+    for (const capability of CAPABILITIES) {
+        if (await confirmDefaultYes('  Enable ' + capability.title + '? (' + capability.detail + ')')) {
+            enabled.push(capability.id);
+        }
+    }
+    let exaApiKey;
+    if (enabled.includes('exa')) {
+        console.log('');
+        console.log('  Exa needs an API key. Create one at https://dashboard.exa.ai/api-keys');
+        const typed = await ask('  Exa API key (leave empty to add it later): ');
+        if (typed !== '')
+            exaApiKey = typed;
+    }
+    let mineruEndpoint;
+    if (enabled.includes('mineru')) {
+        // The service is installed and started by this command on the local port, so the
+        // default is the address it will answer on; a user running MinerU elsewhere
+        // overrides it here rather than editing the profile afterwards.
+        const typed = await ask('  MinerU endpoint [' + DEFAULT_MINERU_ENDPOINT + ']: ');
+        mineruEndpoint = typed === '' ? DEFAULT_MINERU_ENDPOINT : typed;
+    }
+    return {
+        enabled,
+        ...exaApiKey === undefined ? {} : { exaApiKey },
+        ...mineruEndpoint === undefined ? {} : { mineruEndpoint },
+    };
+}
+/** Names this module owns in the deployment env file. */
+const CAPABILITY_ENV_NAMES = ['DSH_MINERU_ENDPOINT', 'EXA_API_KEY'];
+/**
+ * The deployment env file, with one assignment per enabled capability that reaches
+ * its service through the launch environment.
+ *
+ * MinerU is switched on by the presence of its endpoint and Exa reads its key from
+ * the launch environment, so a capability the user selected is enabled here as well
+ * as in the profile layer. Only the names this interview owns are rewritten: a
+ * deployment that keeps its own assignments in the same file keeps them, and
+ * deselecting a capability removes the assignment that turned it on.
+ *
+ * @param answers - the interview's answers.
+ * @param existing - the file's current text, when it already exists.
+ * @returns the environment file's text.
+ */
+export function capabilityEnvironment(answers, existing = '') {
+    const enabled = new Set(answers.enabled);
+    const owned = new Set(CAPABILITY_ENV_NAMES);
+    const kept = existing.split('\n').filter((line) => {
+        const name = /^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=/.exec(line)?.[1];
+        return line.trim() !== '' && !line.trimStart().startsWith('#') && (name === undefined || !owned.has(name));
+    });
+    const written = [
+        '# Written by dsh-plus start from the capability interview. Enabling or',
+        '# disabling a capability rewrites the lines below; other lines are kept.',
+    ];
+    if (enabled.has('mineru')) {
+        written.push('DSH_MINERU_ENDPOINT=' + (answers.mineruEndpoint ?? DEFAULT_MINERU_ENDPOINT));
+    }
+    if (enabled.has('exa') && answers.exaApiKey !== undefined) {
+        written.push('EXA_API_KEY=' + answers.exaApiKey);
+    }
+    return [...written, ...kept].join('\n') + '\n';
+}
+/**
+ * The profile patch layer that turns the selected capabilities on.
+ *
+ * The file is data the profile's loader merges, so enabling a capability writes a
+ * row rather than editing the deployment. An empty selection still writes the file,
+ * because a layer that exists and mounts nothing is how a previously enabled
+ * capability is turned back off.
+ *
+ * The profile's own layer is a separate file with its own name: a deployment that
+ * configured something by hand keeps it, and the capability rows are rewritten
+ * whole on every start.
+ *
+ * @param answers - the interview's answers.
+ * @returns the patch layer's YAML text.
+ */
+export function capabilityPatchLayer(answers) {
+    const enabled = new Set(answers.enabled);
+    const rows = [];
+    if (enabled.has('exa')) {
+        rows.push('    - id: web-search-exa', "      name: '@deepseek-ai/dsh-web-search-exa'", '      config:', '        searchType: auto', '        numResults: 8');
+    }
+    if (enabled.has('computer-use')) {
+        rows.push('    - id: computer-use', "      name: '@deepseek-ai/dsh-computer-use'", '    - id: computer-use-cua-driver-mcp', "      name: '@deepseek-ai/dsh-experimental-computer-use-cua-driver-mcp'");
+    }
+    const lines = [
+        '# ' + CAPABILITY_MARKER + ' Enabling or disabling a capability',
+        '# rewrites this file; edits here are replaced.',
+    ];
+    if (rows.length > 0)
+        lines.push('- insert:', ...rows);
+    if (enabled.has('exa')) {
+        lines.push('', '# Route web_search through Exa rather than the built-in provider.', '- id: web', '  config:', '    searchProvider: exa');
+    }
+    return lines.join('\n') + '\n';
+}
+/** Run one command, reporting a failure rather than throwing. */
+function runStep(command, args) {
+    const result = spawnSync(command, [...args], { stdio: 'inherit' });
+    return result.status === 0;
+}
+/**
+ * Install and start the backing services the selected capabilities need.
+ *
+ * Enabling a capability means the deployment expects its service to answer, so the
+ * command that offers the choice is also the command that provides it. Each step
+ * reports what it is doing and, on failure, the command a user can run by hand —
+ * a missing runtime is a fact about the host, not a reason to abandon the install.
+ *
+ * @param answers - the interview's answers.
+ * @param home - the deployment home, where generated service units are recorded.
+ * @returns the ids whose service is ready.
+ */
+export async function installCapabilityServices(answers, home) {
+    const enabled = new Set(answers.enabled);
+    const ready = [];
+    // The record lets a later run name the capabilities this deployment enabled
+    // instead of interviewing again, and gives doctor something to check against.
+    mkdirSync(home, { recursive: true });
+    writeFileSync(join(home, CAPABILITY_RECORD), JSON.stringify({
+        enabled: [...answers.enabled],
+        ...answers.mineruEndpoint === undefined ? {} : { mineruEndpoint: answers.mineruEndpoint },
+    }, null, 2) + '\n');
+    if (enabled.has('mineru')) {
+        console.log('');
+        console.log('  MinerU: installing the parser and starting its service...');
+        const installed = installMineru(home);
+        if (installed && startMineru(home)) {
+            ready.push('mineru');
+            console.log('  MinerU: ready at ' + (answers.mineruEndpoint ?? DEFAULT_MINERU_ENDPOINT));
+        }
+        else {
+            console.log('  MinerU: not installed. Install it later with:');
+            console.log('    pip install -U "mineru[core]"');
+            console.log('    mineru-api --host 127.0.0.1 --port 8000');
+        }
+    }
+    if (enabled.has('officecli')) {
+        // OfficeCLI ships inside the mounted bundle and carries its own binary, so the
+        // capability needs no host step; the profile row is what turns it on.
+        ready.push('officecli');
+    }
+    if (enabled.has('computer-use')) {
+        if (desktopDriverAvailable()) {
+            ready.push('computer-use');
+        }
+        else {
+            console.log('');
+            console.log('  computer-use: the cua driver was not found on PATH. The plugin is');
+            console.log('  still mounted, so it starts once the driver is installed:');
+            console.log('    install the cua-driver release for this architecture, then restart');
+        }
+    }
+    return ready;
+}
+/**
+ * Install MinerU when it is absent and start its API service.
+ *
+ * MinerU is a Python package whose API server answers on a local port; the profile
+ * points at that port. The parser is installed into a virtual environment under the
+ * deployment home and an existing one is upgraded rather than skipped, so enabling
+ * the capability keeps the parser current without touching the system interpreter.
+ *
+ * @param home - the deployment home that owns the venv.
+ * @returns whether the package is installed; not whether it answered.
+ */
+function installMineru(home) {
+    const python = pythonInterpreter();
+    if (python === undefined) {
+        console.log('  MinerU: no Python interpreter found on PATH.');
+        return false;
+    }
+    // The venv keeps MinerU's torch and model dependencies away from the system
+    // interpreter, which is also what PEP 668 requires: a system pip refuses the install
+    // outright, and `--break-system-packages` would put a multi-gigabyte torch tree into
+    // the OS packages. `all` is the extra both the 3.x and 4.x lines publish; `core`
+    // existed only through 3.x and installing it on 4.x silently drops the extras.
+    const venv = join(home, '.mineru-venv');
+    if (!runStep(python, ['-m', 'venv', venv]))
+        return false;
+    const venvPython = join(venv, 'bin', 'python');
+    return runStep(venvPython, ['-m', 'pip', 'install', '-U', 'mineru[all]']);
+}
+/**
+ * Start the MinerU API server as a background service when none answers yet.
+ *
+ * The service has to outlive the install command, so it is registered with the
+ * host's service manager when one is available and otherwise started detached.
+ *
+ * @returns whether the server is running after this call.
+ */
+function startMineru(home) {
+    const api = mineruApiBinary(home);
+    if (api === undefined)
+        return false;
+    if (mineruAnswers())
+        return true;
+    if (spawnSync('systemctl', ['--version'], { stdio: 'ignore' }).status === 0) {
+        writeFileSync('/etc/systemd/system/mineru-api.service', [
+            '[Unit]',
+            'Description=MinerU document parsing API for DeepSeek Harness Plus',
+            'After=network-online.target',
+            'Wants=network-online.target',
+            '',
+            '[Service]',
+            'Type=simple',
+            'User=root',
+            'ExecStart=' + api + ' --host 127.0.0.1 --port 8000',
+            'Restart=on-failure',
+            'RestartSec=2',
+            'TimeoutStopSec=15',
+            '',
+            '[Install]',
+            'WantedBy=multi-user.target',
+            '',
+        ].join('\n'));
+        spawnSync('systemctl', ['daemon-reload'], { stdio: 'ignore' });
+        return spawnSync('systemctl', ['enable', '--now', 'mineru-api.service'], { stdio: 'ignore' }).status === 0;
+    }
+    console.log('  MinerU: start the API server with:');
+    console.log('    ' + api + ' --host 127.0.0.1 --port 8000');
+    return false;
+}
+/** The Python interpreter to install MinerU with, preferring python3. */
+function pythonInterpreter() {
+    return ['python3', 'python'].find(candidate => spawnSync(candidate, ['--version'], { stdio: 'ignore' }).status === 0);
+}
+/**
+ * The MinerU API entry point, wherever the install placed it.
+ *
+ * The venv this command creates comes first: it is the interpreter the parser was
+ * installed into, so its `mineru-api` is the one that can import MinerU. A binary on
+ * PATH is a fallback for a deployment that installed MinerU some other way.
+ *
+ * @param home - the deployment home that owns the venv.
+ * @returns the command to run, or `undefined` when none answers.
+ */
+function mineruApiBinary(home) {
+    const candidates = [join(home, '.mineru-venv', 'bin', 'mineru-api'), 'mineru-api'];
+    return candidates.find(candidate => spawnSync(candidate, ['--help'], { stdio: 'ignore' }).status === 0);
+}
+/** Whether a MinerU API server already answers on the default port. */
+function mineruAnswers() {
+    const probe = spawnSync('curl', ['-sf', '-o', '/dev/null', '--max-time', '3', 'http://127.0.0.1:8000/docs'], { stdio: 'ignore' });
+    return probe.status === 0;
+}
+/** Whether the Windows-side desktop driver answers from this shell. */
+function desktopDriverAvailable() {
+    const probe = spawnSync('cua-driver', ['--version'], { stdio: 'ignore' });
+    return probe.status === 0;
+}
+//# sourceMappingURL=standalone-capabilities.js.map

package/lib/types/standalone-cli.js

@@ -13,10 +13,13 @@ import { createRequire } from 'node:module';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { newerVersion } from "./registry-versions.js";
+import { CAPABILITY_ENV_FILE, CAPABILITY_MARKER, CAPABILITY_RECORD, capabilityEnvironment, capabilityPatchLayer, installCapabilityServices, interviewCapabilities, } from "./standalone-capabilities.js";
 import { DEFAULT_PORT, STOP_GRACE_MILLISECONDS, choosePort, clearState, isRunning, portAvailable, readState, spawnServer, stateDirectory, waitForAuthenticatedUrl, waitForServer, writeState, } from "./standalone-server.js";
 import { STANDALONE_PROFILE, applyProfileNpmPatches, ensureProfile, pnpmAvailable, pnpmInstallCommand, pnpmInstallCommands, registryOrder, readDistributionProfile, resolvePaths, } from "./standalone-profile.js";
 /** Milliseconds a start waits for the server to answer before reporting failure. */
 const READY_TIMEOUT_MILLISECONDS = 90_000;
+/** Profile patch file the capability interview rewrites (the profile's user layer). */
+const CAPABILITY_PATCH_FILE = 'cordis.patch.yml';
 function parseStartOptions(argv) {
     let port = DEFAULT_PORT;
     let host = '127.0.0.1';
@@ -149,6 +152,24 @@ async function start(argv) {
     for (const label of applyProfileNpmPatches(paths.distributionDirectory, paths.profileDirectory)) {
         console.log('Applied the reviewed patch ' + label);
     }
+    // The capability interview runs once, when the profile is created: a deployment
+    // that already answered keeps its answers, and a re-run only reports them. Asking
+    // on every start would make a restart look like a first install.
+    const needsInterview = created || !existsSync(join(paths.home, CAPABILITY_RECORD));
+    const answers = needsInterview
+        ? await interviewCapabilities(true)
+        : undefined;
+    if (answers !== undefined) {
+        const ready = await installCapabilityServices(answers, paths.home);
+        writeCapabilityPatch(paths.profileDirectory, answers);
+        writeCapabilityEnvironment(paths.home, answers);
+        console.log('  Enabled: ' + (answers.enabled.length === 0 ? '(none)' : answers.enabled.join(', ')));
+        if (answers.enabled.length > 0)
+            console.log('  Services ready: ' + (ready.length === 0 ? '(none)' : ready.join(', ')));
+        if (answers.enabled.includes('exa') && answers.exaApiKey === undefined) {
+            console.log('  Exa: add EXA_API_KEY to ' + join(paths.home, CAPABILITY_ENV_FILE) + ' when you have a key.');
+        }
+    }
     const entry = launcherEntry(anchor);
     if (options.foreground)
         return runForeground(entry, options.port, options.host, options.open);
@@ -282,6 +303,44 @@ async function update(argv) {
     }
     return 0;
 }
+/**
+ * Write the profile's capability patch layer.
+ *
+ * The profile's loader merges this file, so enabling a capability is a data change
+ * rather than an edit to the deployment. Writing it on every configured run also
+ * turns a capability back off when the interview no longer selects it.
+ *
+ * @param profileDirectory - the profile whose layer is replaced.
+ * @param answers - the interview's answers.
+ */
+function writeCapabilityPatch(profileDirectory, answers) {
+    const path = join(profileDirectory, CAPABILITY_PATCH_FILE);
+    // The profile has exactly one user layer, so the capability rows live in it. A file
+    // this command did not write belongs to the deployment, and replacing it would drop
+    // whatever the operator put there; keep it beside the new layer instead.
+    const existing = existsSync(path) ? readFileSync(path, 'utf8') : undefined;
+    if (existing !== undefined && !existing.includes(CAPABILITY_MARKER)) {
+        writeFileSync(path + '.before-capabilities', existing);
+        console.log('  Kept the existing profile layer at ' + CAPABILITY_PATCH_FILE + '.before-capabilities');
+    }
+    writeFileSync(path, capabilityPatchLayer(answers));
+}
+/**
+ * Write the deployment's capability environment file.
+ *
+ * MinerU is switched on by the presence of its endpoint and Exa reads its key from
+ * the launch environment, so the answers reach those two through `$DSH_HOME/.env`
+ * rather than through the profile layer. The file is replaced whole on every
+ * configured start, which is also how a capability the user dropped stops applying.
+ *
+ * @param home - the deployment home whose env file the launcher reads.
+ * @param answers - the interview's answers.
+ */
+function writeCapabilityEnvironment(home, answers) {
+    const path = join(home, CAPABILITY_ENV_FILE);
+    const existing = existsSync(path) ? readFileSync(path, 'utf8') : '';
+    writeFileSync(path, capabilityEnvironment(answers, existing));
+}
 /** Ask one yes/no question on the terminal. */
 function confirm(question) {
     return new Promise((resolveAnswer) => {

package/package.json

@@ -3,27 +3,31 @@
     "dsh-plus": "lib/bin.js"
   },
   "dependencies": {
+    "@deepseek-ai/dsh-computer-use": ">=0.1.6-alpha.1",
+    "@deepseek-ai/dsh-experimental-computer-use-cua-driver-mcp": ">=0.1.6-alpha.1",
+    "@deepseek-ai/dsh-tool-session-query": ">=0.1.6-alpha.1",
+    "@deepseek-ai/dsh-web-search-exa": ">=0.1.6-alpha.1",
     "@sparkelf/dsh-client-ui-skill-center": ">=0.2.0-rc.9",
     "@sparkelf/dsh-mobile-bridge": ">=0.2.11",
-    "@sparkelf/dsh-patch-better-sidebar-browser-url-seed": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-better-sidebar-html-preview-path": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-better-sidebar-main-view-session": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-better-sidebar-media-path": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-browser-auth-mode": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-composer-popover-boundaries": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-legacy-code-preset": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-mobile-journal-generation": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-officecli-deliverables": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-ptc-mcp-schema-types": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-responses-reasoning-status": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-session-export-chinese": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-session-format-legacy-restart": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-session-log-trajectory-toolbar": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-session-query-unindexable-session": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-subagent-settings-presets": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-web-base-path": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-workspace-storage-restore": ">=0.2.0-rc.13",
-    "@sparkelf/dsh-patch-wsl-native-open": ">=0.2.0-rc.13",
+    "@sparkelf/dsh-patch-better-sidebar-browser-url-seed": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-better-sidebar-html-preview-path": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-better-sidebar-main-view-session": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-better-sidebar-media-path": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-browser-auth-mode": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-composer-popover-boundaries": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-legacy-code-preset": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-mobile-journal-generation": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-officecli-deliverables": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-ptc-mcp-schema-types": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-responses-reasoning-status": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-session-export-chinese": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-session-format-legacy-restart": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-session-log-trajectory-toolbar": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-session-query-unindexable-session": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-subagent-settings-presets": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-web-base-path": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-workspace-storage-restore": ">=0.2.0-rc.15",
+    "@sparkelf/dsh-patch-wsl-native-open": ">=0.2.0-rc.15",
     "@sparkelf/dsh-plugin-backup": ">=0.2.0-rc.8",
     "@sparkelf/dsh-plugin-dataops": ">=0.2.0-rc.8",
     "@sparkelf/dsh-plugin-mcp-credentials": ">=0.2.0-rc.8",
@@ -185,5 +189,5 @@
   },
   "type": "module",
   "types": "lib/types/index.d.ts",
-  "version": "0.2.0-rc.13"
+  "version": "0.2.0-rc.15"
 }