@wowyuarm/dsh-agent-team 0.1.0 → 0.1.2

package/README.md

@@ -2,9 +2,13 @@
 
 [English](README.md) | [简体中文](README.zh.md)
 
-An Agent Team plugin for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness): persistent Workspaces, Channels, Threads, Tasks, and managed Agent members in one DSH home.
+[![npm](https://img.shields.io/npm/v/@wowyuarm/dsh-agent-team?style=flat-square)](https://www.npmjs.com/package/@wowyuarm/dsh-agent-team)
+[![License](https://img.shields.io/badge/license-MIT-blue?style=flat-square)](LICENSE)
+[![Release](https://img.shields.io/github/v/release/wowyuarm/dsh-agent-team?include_prereleases&style=flat-square)](https://github.com/wowyuarm/dsh-agent-team/releases)
 
-Opt-in by design: install it only where Team mode is needed; ordinary DSH sessions keep their normal preset roster.
+**dsh-agent-team** helps a human manage tasks in an orderly way and use agents as true collaborators: agents are persistent identities for their sessions; Workspaces organize agents and sessions per project; Channels carry responsibilities; Task Threads chain session agents into one line of progress.
+
+An opt-in plugin for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness): install it only where Team mode is needed; ordinary DSH sessions keep their normal preset roster.
 
 ## Preview
 
@@ -53,6 +57,14 @@ Team mode
 
 Create an Agent only in a trusted Workspace. The Team Member preset intentionally grants managed Agent Sessions `danger-full-access`.
 
+## Uninstall
+
+Remove the bundle from the profile; this also removes its composed layers:
+
+```sh
+dsh plugin --profile web remove @wowyuarm/dsh-agent-team
+```
+
 ## What it adds
 
 - A durable single-host Team with Channels, Messages, Tasks, Threads, Claims, and Agent membership.

package/README.zh.md

@@ -2,9 +2,9 @@
 
 [English](README.md) | 简体中文
 
-这是一个为 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 提供的 Agent Team 插件：在一个 DSH home 中组织持久化的 Workspace、Channel、Thread、Task 和由 Team 管理的 Agent 成员。
+**dsh-agent-team** 帮助 human 有序管理任务、把 agents 用成真正的协作者：Agent 是 session 的持久身份；Workspace 按项目组织 agents 与 sessions；Channel 承载职责分派；Task Thread 把多个 session agent 串成一条推进线。
 
-按需启用：只在需要 Team mode 的 profile 中安装；普通 DSH Session 保持原有 preset roster。
+一个为 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 提供的按需启用插件：只在需要 Team mode 的 profile 安装，普通 DSH Session 保持原有 preset roster。
 
 ## 预览
 
@@ -53,6 +53,14 @@ Team mode
 
 只在可信 Workspace 中创建 Agent。Team Member preset 会给被管理的 Agent Session 授予 `danger-full-access`。
 
+## 卸载
+
+从 profile 移除 bundle，同时会移除它组合进来的层：
+
+```sh
+dsh plugin --profile web remove @wowyuarm/dsh-agent-team
+```
+
 ## 提供的能力
 
 - 持久化的单 Host Team，包含 Channel、Message、Task、Thread、Claim 和 Agent membership。

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@wowyuarm/dsh-agent-team",
-  "version": "0.1.0",
-  "description": "Agent Team plugin for DeepSeek Harness",
+  "version": "0.1.2",
+  "description": "Help humans organize tasks and let agents collaborate - a Team plugin for DeepSeek Harness",
   "repository": {
     "type": "git",
     "url": "https://github.com/wowyuarm/dsh-agent-team.git"
@@ -111,20 +111,22 @@
     "./package.json": "./package.json"
   },
   "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/dsh-agent": ">=0.1.1-rc.2 <0.2.0",
     "@deepseek-ai/dsh-agent-default-model": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-agent-tool-presentation": ">=0.1.1-rc.2 <0.2.0",
     "@deepseek-ai/dsh-agent-presets": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-tool-bash": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-tool-pwsh": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-tool-fs": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-tool-fs-search": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-tool-jobs": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-skill-filesystem": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-tool-skill": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-tool-todo": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-tool-web": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-agent-tool-presentation": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-api-remotes": ">=0.1.1-rc.2 <0.2.0",
     "@deepseek-ai/dsh-brand": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-locale": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-runtime": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-layout": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-primitives": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-settings-general": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-sidebar": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-workspace": ">=0.1.1-rc.2 <0.2.0",
     "@deepseek-ai/dsh-home-paths": ">=0.1.1-rc.2 <0.2.0",
     "@deepseek-ai/dsh-invariants": ">=0.1.1-rc.2 <0.2.0",
     "@deepseek-ai/dsh-llm": ">=0.1.1-rc.2 <0.2.0",
@@ -132,21 +134,27 @@
     "@deepseek-ai/dsh-scope": ">=0.1.1-rc.2 <0.2.0",
     "@deepseek-ai/dsh-session": ">=0.1.1-rc.2 <0.2.0",
     "@deepseek-ai/dsh-session-persistence": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-skill-filesystem": ">=0.1.1-rc.2 <0.2.0",
     "@deepseek-ai/dsh-storage-domain": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-tool-bash": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-tool-fs": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-tool-fs-search": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-tool-jobs": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-tool-pwsh": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-tool-skill": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-tool-todo": ">=0.1.1-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-tool-web": ">=0.1.1-rc.2 <0.2.0",
     "@deepseek-ai/dsh-tools": ">=0.1.1-rc.2 <0.2.0",
     "@deepseek-ai/dsh-typert-protocol": ">=0.1.1-rc.2 <0.2.0",
     "@deepseek-ai/dsh-workspace": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-api-remotes": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-locale": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-runtime": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-workspace": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-layout": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-primitives": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-settings-general": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-sidebar": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.1-rc.2 <0.2.0",
     "react": "^18.2.0"
-  }
+  },
+  "keywords": [
+    "deepseek-harness",
+    "dsh",
+    "dsh-plugin",
+    "agent-team",
+    "multi-agent",
+    "ai-agents"
+  ]
 }

package/packages/agent-team/lib/attachments.js

@@ -0,0 +1,157 @@
+import { mkdir, readFile, readdir, rm, stat, writeFile } from 'node:fs/promises';
+import { basename, extname, isAbsolute, join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { dshHomePath } from '@deepseek-ai/dsh-home-paths';
+/**
+ * Composer attachments are a cache, not an archive: bytes live only so Member
+ * agents can read them within the consumption window, while the ledger keeps
+ * the metadata forever. Everything here derives from the on-disk layout
+ * `$DSH_HOME/agent-team/attachments/v1/<attachmentId>/` holding the payload
+ * file (original sanitized name) plus a `meta.json` sidecar.
+ */
+export const ATTACHMENT_MAX_BYTES = 10 * 1024 * 1024;
+/** Referenced uploads survive this long after upload for member consumption. */
+export const ATTACHMENT_REFERENCED_TTL_MS = 72 * 60 * 60 * 1000;
+/** Unreferenced uploads (uploaded but never sent) are cleaned much sooner. */
+export const ATTACHMENT_ORPHAN_TTL_MS = 24 * 60 * 60 * 1000;
+export function attachmentsRoot() {
+    return dshHomePath('agent-team', 'attachments', 'v1');
+}
+export function newAttachmentId() {
+    return randomUUID();
+}
+/** Strip path separators, control characters, and leading dots from one client-supplied name. */
+export function sanitizeFileName(raw) {
+    const cleaned = raw.replaceAll(/[\\/\u0000-\u001f\u007f]/g, '').replaceAll(/^\.+/g, '').trim();
+    return cleaned === '' ? 'attachment' : cleaned.slice(0, 180);
+}
+/** Extension-derived media types for agent-supplied files; unknown types stay generic. */
+const PATH_MEDIA_TYPES = {
+    '.png': 'image/png',
+    '.jpg': 'image/jpeg',
+    '.jpeg': 'image/jpeg',
+    '.gif': 'image/gif',
+    '.webp': 'image/webp',
+    '.bmp': 'image/bmp',
+    '.svg': 'image/svg+xml',
+    '.pdf': 'application/pdf',
+    '.txt': 'text/plain',
+    '.md': 'text/markdown',
+    '.json': 'application/json',
+};
+/** Best-effort media type from one path's extension, so images render as thumbnails. */
+export function mediaTypeForPath(raw) {
+    return PATH_MEDIA_TYPES[extname(raw).toLowerCase()] ?? 'application/octet-stream';
+}
+/**
+ * Validate one agent-supplied attachment path before any cache write happens,
+ * so a rejection anywhere leaves the upload cache untouched.
+ */
+export async function validatePathAttachment(raw) {
+    if (!isAbsolute(raw))
+        throw new Error(`attachment path '${raw}' must be absolute`);
+    const info = await stat(raw).catch(() => undefined);
+    if (info === undefined)
+        throw new Error(`attachment path '${raw}' does not exist`);
+    if (!info.isFile())
+        throw new Error(`attachment path '${raw}' is not a regular file`);
+    if (info.size === 0)
+        throw new Error(`attachment '${basename(raw)}' must not be empty`);
+    if (info.size > ATTACHMENT_MAX_BYTES)
+        throw new Error(`attachment '${basename(raw)}' exceeds the ${ATTACHMENT_MAX_BYTES} byte limit`);
+}
+/** Copy one validated file into the cache as a fresh immutable entry. */
+export async function copyPathAttachment(root, raw) {
+    const bytes = await readFile(raw);
+    const stored = await writeAttachment(root, newAttachmentId(), basename(raw), mediaTypeForPath(raw), bytes);
+    return { attachmentId: stored.attachmentId, name: stored.name, byteSize: stored.byteSize, mediaType: stored.mediaType };
+}
+function attachmentDir(root, attachmentId) {
+    return join(root, attachmentId);
+}
+/** Write one upload as an immutable payload plus its metadata sidecar. */
+export async function writeAttachment(root, attachmentId, rawName, mediaType, bytes) {
+    const name = sanitizeFileName(rawName);
+    const dir = attachmentDir(root, attachmentId);
+    await mkdir(dir, { recursive: true });
+    await writeFile(join(dir, name), bytes);
+    const meta = { name, mediaType, uploadedAt: new Date().toISOString() };
+    await writeFile(join(dir, 'meta.json'), JSON.stringify(meta), 'utf8');
+    return { attachmentId, path: join(dir, name), name, byteSize: bytes.byteLength, mediaType };
+}
+/** Read one attachment back; `undefined` when the cache entry is gone (GC'd). */
+export async function readAttachment(root, attachmentId) {
+    const dir = attachmentDir(root, attachmentId);
+    let metaRaw;
+    try {
+        metaRaw = await readFile(join(dir, 'meta.json'));
+    }
+    catch {
+        return undefined;
+    }
+    const meta = JSON.parse(metaRaw.toString('utf8'));
+    const entries = await readdir(dir);
+    const payload = entries.filter(entry => entry !== 'meta.json')[0];
+    if (payload === undefined)
+        return undefined;
+    const bytes = await readFile(join(dir, payload));
+    return { name: meta.name, mediaType: meta.mediaType, byteSize: bytes.byteLength, uploadedAt: meta.uploadedAt, bytes };
+}
+/** Whether an upload with this id still has bytes on disk. */
+export async function attachmentExists(root, attachmentId) {
+    try {
+        await stat(attachmentDir(root, attachmentId));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** List every cache entry with its upload instant for the GC sweep. */
+export async function scanAttachmentCache(root) {
+    let ids;
+    try {
+        ids = await readdir(root);
+    }
+    catch {
+        return [];
+    }
+    const entries = [];
+    for (const id of ids) {
+        try {
+            const metaRaw = await readFile(join(root, id, 'meta.json'));
+            const meta = JSON.parse(metaRaw.toString('utf8'));
+            entries.push({ attachmentId: id, uploadedAt: Date.parse(meta.uploadedAt) });
+        }
+        catch {
+            // A half-written or foreign directory is not ours to judge; skip it.
+        }
+    }
+    return entries;
+}
+/** Remove one cache entry's bytes; missing entries already satisfy the sweep. */
+export async function removeAttachment(root, attachmentId) {
+    await rm(attachmentDir(root, attachmentId), { recursive: true, force: true });
+}
+/**
+ * One GC pass: drop uploads older than the orphan TTL, and referenced ones
+ * older than the consumption-window TTL. Returns the ids removed so the
+ * service can log them.
+ */
+export async function sweepAttachmentCache(root, referenced, now) {
+    const removed = [];
+    for (const entry of await scanAttachmentCache(root)) {
+        const age = now - entry.uploadedAt;
+        const ttl = referenced.has(entry.attachmentId) ? ATTACHMENT_REFERENCED_TTL_MS : ATTACHMENT_ORPHAN_TTL_MS;
+        if (age > ttl) {
+            await removeAttachment(root, entry.attachmentId);
+            removed.push(entry.attachmentId);
+        }
+    }
+    return removed;
+}
+/** Accept only well-formed `type/subtype` media types; anything else falls back to the generic binary type. */
+export function sanitizeMediaType(raw) {
+    const candidate = (raw ?? '').trim().toLowerCase();
+    return /^[a-z0-9][-.\w]*\/[-.\w]+$/.test(candidate) ? candidate : 'application/octet-stream';
+}