@thewaifu/dsh-bot 1.1.1

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,304 @@
+# @thewaifu/dsh-bot
+
+DS Bot turns DeepSeek Harness (DSH) Web and Desktop into a persistent team of AI Bots. Each Bot has its own model, role, instructions, memory, chat history, and working session. Bots can work independently, message one another, and collaborate in group chats without mixing their private conversations.
+
+This guide is for people installing and using the plugin. Contributor instructions are in the repository's [CONTRIBUTING.md](https://github.com/Fei2411/DeepSeek-Bot/blob/main/CONTRIBUTING.md).
+
+## What you get
+
+- A Main Bot named Chief on first launch.
+- Multiple long-lived Bots with separate models, roles, instructions, and appearances.
+- Group chats with an administrator, configurable reply behavior, `@Name`, and `@all` mentions.
+- Bot-to-Bot messages, shared references, memory, scheduled tasks, usage reports, and secret handling.
+- Model selection from every provider installed in the same DSH profile.
+- Optional browser tools in DSH Desktop.
+- Optional voice input and a Waifu TTS connection status, authorization, and test control.
+
+## Requirements
+
+- Node.js `^22.19.0` or `>=24.0.0`.
+- DeepSeek Harness `>=0.1.5-rc.1`.
+- A working DSH `web` or `desktop` profile.
+- At least one configured model provider before a Bot can answer with an AI model.
+
+Run these checks if you are not sure what is installed:
+
+```sh
+node --version
+dsh --version
+```
+
+## Install in DSH Web
+
+Install version `1.1.1` from the public npm registry:
+
+```sh
+dsh plugin --profile web add @thewaifu/dsh-bot@1.1.1 --registry=https://registry.npmjs.org/
+```
+
+Start or restart the Web profile with the DS Bot launcher:
+
+```sh
+dsh plugin --profile web exec dsh-bot-web
+```
+
+The launcher tries `127.0.0.1:3082` first. If that port is occupied, it tries `3083`, `3084`, and so on until it finds a free port, then starts the official `dsh web` command with that port. Open the address printed by DSH; DS Bot appears in the left sidebar.
+
+Use `dsh web --port <port>` instead when you want one exact port with no automatic fallback.
+
+## Install in DSH Desktop
+
+Install the plugin into the Desktop profile:
+
+```sh
+dsh plugin --profile desktop add @thewaifu/dsh-bot@1.1.1 --registry=https://registry.npmjs.org/
+```
+
+Quit DSH Desktop completely and open it again. Installing into `web` does not install the plugin into `desktop`; profiles are separate.
+
+## Install with OH-MY-DSH
+
+Install OH-MY-DSH first, then add DS Bot to the same `web` profile:
+
+```sh
+curl -fsSL https://thewaifu.ai/waifu-install.sh | sh
+dsh plugin --profile web add @thewaifu/dsh-bot@1.1.1 --registry=https://registry.npmjs.org/
+dsh plugin --profile web exec dsh-bot-web
+```
+
+## Upgrade from an older package name
+
+Earlier builds may be installed as `ds-bot` or `dsh-bot`. Do not keep both the old package and `@thewaifu/dsh-bot` in one profile because they register the same `bot` plugin ID.
+
+First list the profile dependencies:
+
+```sh
+dsh plugin --profile web list --depth=0
+```
+
+Remove only the old name that appears in that list, then install the scoped package:
+
+```sh
+dsh plugin --profile web remove ds-bot
+dsh plugin --profile web add @thewaifu/dsh-bot@1.1.1 --registry=https://registry.npmjs.org/
+```
+
+Use `dsh-bot` instead of `ds-bot` in the remove command when that is the installed legacy name. Restart DSH afterward. The runtime plugin ID and data layout have not changed, so the existing team, chats, preferences, and secrets remain available.
+
+## First-run setup
+
+1. Open **DS Bot** in the left sidebar.
+2. Open Chief. A new Chief has no model until you choose one.
+3. Select a provider and model on the model card in the chat.
+4. Send a short test message and confirm the answer is generated by the selected model.
+5. Open **DS Bot settings > Bots** to change Chief's name, role, instructions, model, character, and color.
+6. Create additional Bots for distinct jobs such as coding, review, writing, or research.
+7. Open **DS Bot settings > Group chats** to create a group with at least two Bots.
+
+Main Bots can create, change, and remove other Bots. A group administrator can change its own group and invite members to answer. Ordinary members can work in the group but cannot manage the whole team.
+
+## Providers and models
+
+DS Bot does not create model credentials or duplicate DSH's provider configuration. It reads the live model catalog from the current DSH profile.
+
+To choose or change a model:
+
+1. Open the Bot's chat and use the model selector in its header, or open **DS Bot settings > Bots** and select the Bot.
+2. Choose a provider.
+3. Choose one of that provider's available models.
+4. Send a new message to verify the route.
+
+Each Bot may use a different model. Existing messages keep the output that was originally generated; changing a model does not rewrite chat history.
+
+### Token Factory models
+
+When `@thewaifu/dsh-token-factory` is installed and connected in the same profile, its available routes appear in DS Bot's model selector. Available routes may include:
+
+- `tw-helixtoken/deepseek-v4-flash`
+- `tw-helixtoken/helix-cheap`
+- `tw-helixtoken/helix-auto`
+
+If these routes are missing:
+
+1. Open the Token Factory page and confirm the account status and quota.
+2. Confirm Token Factory is installed in the same `web` profile as DS Bot.
+3. Restart `dsh web` after installing or updating provider plugins.
+4. Reopen the Bot and refresh its model selector.
+
+The model name must be selected on the Bot itself. Merely installing Token Factory does not automatically replace a Bot's current model.
+
+## Create and use Bots
+
+Open **DS Bot settings > Bots** and choose **Create Bot**. Set a clear role and concise instructions. A useful team gives each Bot a distinct responsibility instead of giving every Bot the same prompt.
+
+In a direct Bot chat:
+
+- Send a normal message to that Bot.
+- Type `@` to reference another Bot when collaboration is needed.
+- Use the reference control beside the composer to attach a relevant Bot chat.
+- Open the Bot details to inspect its role, model, memory, and available browser panel.
+
+Bot-to-Bot work is shown in the exchange transcript. It does not replace the visible conversation you opened.
+
+## Group chats
+
+Create a group from **DS Bot settings > Group chats**. Choose an administrator first, add at least one more member, then optionally set a name and a shared notice.
+
+There are two reply modes:
+
+| Mode | Behavior |
+|---|---|
+| **Admin leads** | A plain message goes to the administrator. The administrator can call other members with `@Name`. |
+| **Everyone** | Every member answers in order, with the administrator first. |
+
+Mentions override the default mode:
+
+- `@Writer` asks Writer to answer.
+- `@all`, `@everyone`, `所有人`, or `全体` asks every member to answer.
+- Type `@` in the composer to choose a valid member instead of relying on spelling.
+
+Each group member speaks through a hidden DSH Session dedicated to that group. This separation is intentional: group context must not leak into the Bot's private chat. While members answer, the visible selection should stay on the group. If the UI jumps into a member's private chat, update to this release, restart DSH, and hard-refresh the browser so an old client bundle is not cached.
+
+## Voice input and Waifu TTS
+
+DS Bot exposes two different voice paths:
+
+1. **DS Bot voice chat** records your microphone, transcribes your speech, sends it as a normal message, and reads the answer with the browser's speech synthesis. It is available in direct Bot chats, not group chats. When DSH's Voice Input bundle is installed, DS Bot uses its local recognizer; otherwise it uses browser speech recognition when available.
+2. **Waifu TTS** belongs to `@thewaifu/dsh-waifu`. DS Bot shows its connection state and can ask Waifu to play a real test line through the selected character voice. It does not replace the browser voice used by DS Bot voice chat.
+
+To connect Waifu TTS:
+
+1. Confirm `@thewaifu/dsh-waifu` is installed in the same DSH profile and the Waifu companion is running.
+2. Open **DS Bot settings > Connectors > Waifu TTS**.
+3. Select **Connect**. Complete the authorization page that opens in the browser.
+4. Return to DS Bot and wait for the status to become connected.
+5. Select **Test voice**. The companion should say, "DS Bot voice test is ready."
+
+If an authorization page says that the link is invalid, expired, or already used, return to **Waifu TTS** and select **New link** or **Reconnect**. Always use the newest page. If no page opens, allow pop-ups or external links for the local DSH page, then try again.
+
+The connector deliberately does not return authorization URLs, device codes, credentials, or tokens to the DS Bot browser UI.
+
+## Memory, schedules, usage, and secrets
+
+### Memory
+
+Each Bot has private long-term memory and the team has shared memory. Open a Bot's details and select **Memory** to review, search, update, or remove entries. Memory rejects values that look like credentials or identity numbers.
+
+### Scheduled tasks
+
+Open **DS Bot settings > Scheduled tasks** to create recurring work for a Bot or group. Review the selected target and model before enabling a schedule.
+
+### Usage
+
+Open **DS Bot settings > Usage** to inspect token counts by time, Bot, group, and model. Usage is a token report, not a currency or invoice report.
+
+### Secrets
+
+When a Bot needs a credential, it can show a secret request card in its direct chat. The value is stored outside the conversation and is masked before tool results or prompts are saved. Secret cards are not shown in group chats.
+
+Treat backups of `<DSH_HOME>/bot/secrets.json` like passwords. Do not put real credentials in a group message, Bot instructions, the repository, or a troubleshooting screenshot.
+
+## Optional configuration
+
+DS Bot works without a custom configuration. To override an option, add or update the `bot` entry in the profile's `cordis.patch.yml`:
+
+```yaml
+- id: bot
+  name: '@thewaifu/dsh-bot'
+  config:
+    workspace: /path/to/bot-workspace
+    home: /path/to/bot-data
+    checkRatio: 0.8
+    browser: true
+    memory: true
+    memoryReview: true
+    updateCheck: true
+    github: false
+```
+
+`workspace` controls where Bots work. `home` controls where DS Bot stores its team data. Set paths that the DSH process can read and write. Restart DSH after changing the profile patch.
+
+The package also installs `@thewaifu/dsh-bot/web-search` and selects its `auto` search provider. A profile-level `searchProvider` override still takes precedence.
+
+## Data and backups
+
+By default, DS Bot stores team data under `$DSH_HOME/bot`. If `DSH_HOME` is not set, the usual locations are:
+
+| System | Default folder |
+|---|---|
+| Linux and macOS | `~/.dsh/bot/` |
+| Windows | `C:\Users\<user>\.dsh\bot\` |
+
+Bot and group conversations are DSH Sessions, so they are stored with the rest of the DSH session data rather than only in the `bot` folder.
+
+To make a complete backup:
+
+1. Stop DSH Web or quit DSH Desktop.
+2. Back up the whole DSH home directory, including `bot`, `sessions`, `storages`, and `profiles`.
+3. Keep the backup private because it can contain secrets and provider configuration.
+
+Do not run the same Bot data directory from two writable DSH processes at once. DS Bot uses a lock and makes the second process read-only to protect the team state.
+
+## Update
+
+Update to the latest published version in the profile:
+
+```sh
+dsh plugin --profile web update @thewaifu/dsh-bot --registry=https://registry.npmjs.org/
+```
+
+For Desktop, replace `web` with `desktop`. Restart DSH after the update. You can also use **DS Bot settings > About DS Bot > Check for updates** when the installed DSH plugin manager supports it.
+
+Version `1.1.1` fixes the Web client registration failure in `1.1.0`. After updating from `1.1.0`, restart DSH and hard-refresh the browser so it does not reuse the old client bundle.
+
+## Uninstall
+
+Remove the package from a Web profile:
+
+```sh
+dsh plugin --profile web remove @thewaifu/dsh-bot
+```
+
+For Desktop, replace `web` with `desktop`. Restart DSH after removal.
+
+Uninstalling the npm package does not automatically erase `$DSH_HOME/bot` or the related DSH Sessions. This protects your data from accidental removal. Delete saved data only after making a backup and confirming that no other profile uses it.
+
+## Troubleshooting
+
+### DS Bot does not appear
+
+Run:
+
+```sh
+dsh plugin --profile web list --depth=0
+```
+
+The list must contain `@thewaifu/dsh-bot`. If it does not, install it again from the npm registry. If it does, restart DSH and hard-refresh the browser.
+
+### The model selector is empty
+
+The current profile has not exposed an available model. Open the DSH provider or Models settings, connect a provider, verify its account and quota, then restart DSH. If you use Token Factory, verify that it is connected in the same `web` profile.
+
+### Replies look like `Received: ...`
+
+That wording is produced by the development mock model, not by DS Bot itself. Old mock answers remain visible in history. Select a real provider route on the Bot and send a new message. If a new message still echoes the input, the profile is still configured to use a mock provider or mock endpoint; correct the DSH model route before testing again.
+
+### A group message opens another conversation
+
+Confirm that `@thewaifu/dsh-bot@1.1.1` is the only package registering the `bot` plugin, restart DSH, and hard-refresh the page. Do not install `ds-bot`, `dsh-bot`, and `@thewaifu/dsh-bot` together. A member's hidden group Session is an implementation detail and should not replace the visible group selection.
+
+### Only the administrator replies in a group
+
+Open the group's settings and inspect **Who answers**. **Admin leads** sends plain messages only to the administrator. Select **Everyone**, mention specific Bots with `@Name`, or use `@all` when every member should answer.
+
+### Waifu TTS does not show or no authorization page opens
+
+Confirm Waifu is installed in the same profile, restart DSH, then open **DS Bot settings > Connectors**. If the card says browser authorization is disabled, update or reconfigure the Waifu plugin. If an old link fails, select **New link** or **Reconnect** and use the newly opened page.
+
+### Waifu is connected but there is no sound
+
+Open the Waifu companion, confirm a character and voice are selected, check the operating system output device and volume, then select **Test voice** again. A successful authorization does not override muted audio or the wrong system output device.
+
+## License
+
+[Apache-2.0](LICENSE)

package/bin/dsh-bot-web.js

@@ -0,0 +1,33 @@
+#!/usr/bin/env node
+import { spawn } from 'node:child_process'
+import { DEFAULT_WEB_PORT, findAvailablePort } from '../src/shared/web-port.js'
+
+const args = process.argv.slice(2)
+
+if (args.some(arg => arg === '--port' || arg.startsWith('--port='))) {
+  console.error('dsh-bot-web chooses the first available port starting at 3082; remove --port or run dsh web directly.')
+  process.exitCode = 2
+} else {
+  const hostIndex = args.indexOf('--host')
+  const inlineHost = args.find(arg => arg.startsWith('--host='))?.slice('--host='.length)
+  const host = inlineHost || (hostIndex >= 0 ? args[hostIndex + 1] : undefined) || '127.0.0.1'
+
+  try {
+    const port = await findAvailablePort(DEFAULT_WEB_PORT, host)
+    const detail = port === DEFAULT_WEB_PORT ? '' : ` because ${DEFAULT_WEB_PORT}-${port - 1} ${port - 1 === DEFAULT_WEB_PORT ? 'is' : 'are'} unavailable`
+    console.error(`dsh-bot-web: starting DSH Web on ${host}:${port}${detail}`)
+
+    const command = process.platform === 'win32' ? 'dsh.cmd' : 'dsh'
+    const child = spawn(command, ['web', '--port', String(port), ...args], { stdio: 'inherit' })
+    child.once('error', (error) => {
+      console.error(`dsh-bot-web: could not start dsh: ${error.message}`)
+      process.exitCode = 1
+    })
+    child.once('exit', code => {
+      process.exitCode = code ?? 1
+    })
+  } catch (error) {
+    console.error(`dsh-bot-web: ${error instanceof Error ? error.message : String(error)}`)
+    process.exitCode = 1
+  }
+}