@xrkseek/harness 0.4.11 → 0.5.1

package/node_modules/@xrkseek/server-http/dist/dsh-compat/billing.js

@@ -0,0 +1,80 @@
+import { readBody, sendJson } from "./underlying/http-json.js";
+import { DSH_COMPAT_ADAPTER } from "./meta.js";
+const EMPTY_USAGE = {
+    total: {
+        inputTokens: 0,
+        outputTokens: 0,
+        totalTokens: 0,
+        cost: 0,
+        requestCount: 0,
+    },
+    byModel: {},
+    byDay: {},
+};
+const EMPTY_PRICING = {
+    source: "xrk-compat",
+    catalog: [],
+    aliases: {},
+    fetchedAt: 0,
+};
+export function isBillingPath(pathname) {
+    return pathname === "/api/billing" || pathname.startsWith("/api/billing/");
+}
+async function drain(req, method) {
+    if (method === "POST" || method === "PUT" || method === "PATCH") {
+        await readBody(req);
+    }
+}
+export async function handleBillingHttp(req, res, pathname, options = {}) {
+    if (!isBillingPath(pathname))
+        return false;
+    const method = (req.method ?? "GET").toUpperCase();
+    await drain(req, method);
+    if (pathname === "/api/billing/usage-stats") {
+        const aggregated = options.aggregateUsage
+            ? await options.aggregateUsage({})
+            : undefined;
+        const body = aggregated && typeof aggregated === "object" && "total" in aggregated
+            ? aggregated
+            : EMPTY_USAGE;
+        sendJson(res, 200, { ...body, adapter: DSH_COMPAT_ADAPTER });
+        return true;
+    }
+    if (pathname === "/api/billing/pricing" ||
+        pathname === "/api/billing/pricing/refresh") {
+        sendJson(res, 200, { ...EMPTY_PRICING, adapter: DSH_COMPAT_ADAPTER });
+        return true;
+    }
+    if (pathname === "/api/billing/balance") {
+        const balance = options.fetchBalance
+            ? await options.fetchBalance()
+            : undefined;
+        sendJson(res, 200, {
+            balances: Array.isArray(balance?.balances)
+                ? balance.balances
+                : [],
+            adapter: DSH_COMPAT_ADAPTER,
+        });
+        return true;
+    }
+    if (pathname === "/api/billing/subscriptions" ||
+        pathname === "/api/billing/relay-quotas") {
+        sendJson(res, 200, { quotas: {}, adapter: DSH_COMPAT_ADAPTER });
+        return true;
+    }
+    if (pathname === "/api/billing/usage-tool") {
+        sendJson(res, 200, { enabled: false, adapter: DSH_COMPAT_ADAPTER });
+        return true;
+    }
+    if (pathname === "/api/billing/notify-claim") {
+        sendJson(res, 200, { claimed: true, adapter: DSH_COMPAT_ADAPTER });
+        return true;
+    }
+    sendJson(res, 200, {
+        ok: true,
+        path: pathname,
+        adapter: DSH_COMPAT_ADAPTER,
+    });
+    return true;
+}
+//# sourceMappingURL=billing.js.map

package/node_modules/@xrkseek/server-http/dist/dsh-compat/billing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.js","sourceRoot":"","sources":["../../src/dsh-compat/billing.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAK/C,MAAM,WAAW,GAAG;IAClB,KAAK,EAAE;QACL,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;QACf,WAAW,EAAE,CAAC;QACd,IAAI,EAAE,CAAC;QACP,YAAY,EAAE,CAAC;KAChB;IACD,OAAO,EAAE,EAAE;IACX,KAAK,EAAE,EAAE;CACV,CAAC;AAEF,MAAM,aAAa,GAAG;IACpB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,EAAe;IACxB,OAAO,EAAE,EAA4B;IACrC,SAAS,EAAE,CAAC;CACb,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,OAAO,QAAQ,KAAK,cAAc,IAAI,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,GAAoB,EAAE,MAAc;IACvD,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAChE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAoB,EACpB,GAAmB,EACnB,QAAgB,EAChB,UAA8B,EAAE;IAEhC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAEzB,IAAI,QAAQ,KAAK,0BAA0B,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc;YACvC,CAAC,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAClC,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,IAAI,GACR,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,OAAO,IAAI,UAAU;YACnE,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,WAAW,CAAC;QAClB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,QAAQ,KAAK,sBAAsB;QACnC,QAAQ,KAAK,8BAA8B,EAC3C,CAAC;QACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,aAAa,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,sBAAsB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY;YAClC,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,EAAE;YAC9B,CAAC,CAAC,SAAS,CAAC;QACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAE,OAAkC,EAAE,QAAQ,CAAC;gBACpE,CAAC,CAAE,OAAmC,CAAC,QAAQ;gBAC/C,CAAC,CAAC,EAAE;YACN,OAAO,EAAE,kBAAkB;SAC5B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,QAAQ,KAAK,4BAA4B;QACzC,QAAQ,KAAK,2BAA2B,EACxC,CAAC;QACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,yBAAyB,EAAE,CAAC;QAC3C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,2BAA2B,EAAE,CAAC;QAC7C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,kBAAkB;KAC5B,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}

package/node_modules/@xrkseek/server-http/dist/dsh-compat/code-server.d.ts

@@ -0,0 +1,11 @@
+/**
+ * dsh-code-server-app — `/code-server/*`, `/api/code-server/*`, `/ask/*`.
+ * Process spawn stays deferred; preferred port / start attempts persist.
+ */
+import type { IncomingMessage, ServerResponse } from "node:http";
+export interface CodeServerOptions {
+    readonly xrkHome?: string;
+}
+export declare function isCodeServerPath(pathname: string): boolean;
+export declare function handleCodeServerHttp(req: IncomingMessage, res: ServerResponse, pathname: string, options?: CodeServerOptions): Promise<boolean>;
+//# sourceMappingURL=code-server.d.ts.map

package/node_modules/@xrkseek/server-http/dist/dsh-compat/code-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-server.d.ts","sourceRoot":"","sources":["../../src/dsh-compat/code-server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAMjE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAuBD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAS1D;AA4BD,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,OAAO,CAAC,CAwHlB"}

package/node_modules/@xrkseek/server-http/dist/dsh-compat/code-server.js

@@ -0,0 +1,152 @@
+import { sendJson } from "./underlying/http-json.js";
+import { createXrkDocStore } from "./underlying/doc-store.js";
+import { httpMethod, parseJsonBody } from "./underlying/http-kit.js";
+import { DSH_COMPAT_ADAPTER } from "./meta.js";
+const STORE = createXrkDocStore(["dsh-code-server", "state.json"], {
+    preferredPort: null,
+    uiMode: "iframe",
+    startAttempts: 0,
+    lastStartAttemptAt: null,
+    askRev: 0,
+    askMessages: [],
+});
+export function isCodeServerPath(pathname) {
+    return (pathname === "/code-server" ||
+        pathname.startsWith("/code-server/") ||
+        pathname === "/api/code-server" ||
+        pathname.startsWith("/api/code-server/") ||
+        pathname === "/ask" ||
+        pathname.startsWith("/ask/"));
+}
+function offlineStatus(doc) {
+    return {
+        ok: true,
+        running: false,
+        status: "stopped",
+        pid: null,
+        port: doc.preferredPort,
+        url: null,
+        serve: null,
+        uiMode: doc.uiMode,
+        startAttempts: doc.startAttempts,
+        lastStartAttemptAt: doc.lastStartAttemptAt,
+        adapter: DSH_COMPAT_ADAPTER,
+        note: "code-server process host is not embedded on XRK; start stays deferred.",
+    };
+}
+function normalizePath(pathname) {
+    if (pathname.startsWith("/api/code-server")) {
+        return (pathname.replace(/^\/api\/code-server/, "/code-server") || "/code-server");
+    }
+    return pathname;
+}
+export async function handleCodeServerHttp(req, res, pathname, options = {}) {
+    if (!isCodeServerPath(pathname))
+        return false;
+    const method = httpMethod(req);
+    const xrkHome = options.xrkHome;
+    const pathNorm = normalizePath(pathname);
+    if (pathNorm === "/code-server/status" ||
+        pathNorm === "/code-server/status/" ||
+        pathNorm === "/code-server" ||
+        pathNorm === "/code-server/") {
+        if (method === "POST")
+            await parseJsonBody(req).catch(() => ({}));
+        sendJson(res, 200, offlineStatus(STORE.read(xrkHome).data));
+        return true;
+    }
+    if (pathNorm === "/code-server/start") {
+        await parseJsonBody(req).catch(() => ({}));
+        const doc = STORE.patch(xrkHome, (current) => ({
+            ...current,
+            startAttempts: current.startAttempts + 1,
+            lastStartAttemptAt: new Date().toISOString(),
+        }));
+        sendJson(res, 200, {
+            ...offlineStatus(doc.data),
+            accepted: false,
+            deferred: true,
+            path: pathname,
+        });
+        return true;
+    }
+    if (pathNorm === "/code-server/stop" ||
+        pathNorm === "/code-server/setup" ||
+        pathNorm === "/code-server/open-file") {
+        await parseJsonBody(req).catch(() => ({}));
+        sendJson(res, 200, {
+            ...offlineStatus(STORE.read(xrkHome).data),
+            accepted: false,
+            deferred: true,
+            path: pathname,
+        });
+        return true;
+    }
+    if (pathNorm === "/code-server/ui-mode") {
+        if (method === "GET" || method === "HEAD") {
+            sendJson(res, 200, {
+                ok: true,
+                uiMode: STORE.read(xrkHome).data.uiMode,
+                adapter: DSH_COMPAT_ADAPTER,
+            });
+            return true;
+        }
+        const body = await parseJsonBody(req);
+        const uiMode = typeof body.uiMode === "string"
+            ? body.uiMode
+            : typeof body.mode === "string"
+                ? body.mode
+                : "iframe";
+        STORE.patch(xrkHome, (current) => ({ ...current, uiMode }));
+        sendJson(res, 200, {
+            ok: true,
+            uiMode,
+            adapter: DSH_COMPAT_ADAPTER,
+        });
+        return true;
+    }
+    if (pathname === "/ask/state" || pathname.startsWith("/ask/state")) {
+        const url = new URL(req.url ?? "/", "http://127.0.0.1");
+        const rev = url.searchParams.get("rev");
+        const doc = STORE.read(xrkHome).data;
+        if (rev !== null && rev !== "" && Number(rev) === doc.askRev) {
+            sendJson(res, 200, doc.askRev);
+            return true;
+        }
+        sendJson(res, 200, {
+            rev: doc.askRev,
+            messages: doc.askMessages,
+            pending: null,
+            open: false,
+            adapter: DSH_COMPAT_ADAPTER,
+        });
+        return true;
+    }
+    if (pathname === "/ask/send" ||
+        pathname === "/ask/approve" ||
+        pathname === "/ask/close" ||
+        pathname === "/ask/bundle" ||
+        pathNorm === "/code-server/ask/send" ||
+        pathNorm === "/code-server/ask/approve" ||
+        pathNorm === "/code-server/ask/close") {
+        await parseJsonBody(req).catch(() => ({}));
+        sendJson(res, 200, {
+            ok: true,
+            deferred: true,
+            path: pathname,
+            adapter: DSH_COMPAT_ADAPTER,
+            js: "",
+            css: "",
+        });
+        return true;
+    }
+    if (method === "POST" || method === "PUT" || method === "PATCH") {
+        await parseJsonBody(req).catch(() => ({}));
+    }
+    sendJson(res, 200, {
+        ...offlineStatus(STORE.read(xrkHome).data),
+        path: pathname,
+    });
+    return true;
+}
+//# sourceMappingURL=code-server.js.map

package/node_modules/@xrkseek/server-http/dist/dsh-compat/code-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-server.js","sourceRoot":"","sources":["../../src/dsh-compat/code-server.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAe/C,MAAM,KAAK,GAAG,iBAAiB,CAC7B,CAAC,iBAAiB,EAAE,YAAY,CAAC,EACjC;IACE,aAAa,EAAE,IAAI;IACnB,MAAM,EAAE,QAAQ;IAChB,aAAa,EAAE,CAAC;IAChB,kBAAkB,EAAE,IAAI;IACxB,MAAM,EAAE,CAAC;IACT,WAAW,EAAE,EAAE;CAChB,CACF,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,CACL,QAAQ,KAAK,cAAc;QAC3B,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;QACpC,QAAQ,KAAK,kBAAkB;QAC/B,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC;QACxC,QAAQ,KAAK,MAAM;QACnB,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAkB;IACvC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,SAAS;QACjB,GAAG,EAAE,IAAI;QACT,IAAI,EAAE,GAAG,CAAC,aAAa;QACvB,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,OAAO,EAAE,kBAAkB;QAC3B,IAAI,EAAE,wEAAwE;KAC/E,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC5C,OAAO,CACL,QAAQ,CAAC,OAAO,CAAC,qBAAqB,EAAE,cAAc,CAAC,IAAI,cAAc,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAoB,EACpB,GAAmB,EACnB,QAAgB,EAChB,UAA6B,EAAE;IAE/B,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAEzC,IACE,QAAQ,KAAK,qBAAqB;QAClC,QAAQ,KAAK,sBAAsB;QACnC,QAAQ,KAAK,cAAc;QAC3B,QAAQ,KAAK,eAAe,EAC5B,CAAC;QACD,IAAI,MAAM,KAAK,MAAM;YAAE,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,oBAAoB,EAAE,CAAC;QACtC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC7C,GAAG,OAAO;YACV,aAAa,EAAE,OAAO,CAAC,aAAa,GAAG,CAAC;YACxC,kBAAkB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7C,CAAC,CAAC,CAAC;QACJ,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;YAC1B,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,QAAQ,KAAK,mBAAmB;QAChC,QAAQ,KAAK,oBAAoB;QACjC,QAAQ,KAAK,wBAAwB,EACrC,CAAC;QACD,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;YAC1C,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,sBAAsB,EAAE,CAAC;QACxC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACjB,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM;gBACvC,OAAO,EAAE,kBAAkB;aAC5B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,MAAM,GACV,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAC7B,CAAC,CAAC,IAAI,CAAC,MAAM;YACb,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAC7B,CAAC,CAAC,IAAI,CAAC,IAAI;gBACX,CAAC,CAAC,QAAQ,CAAC;QACjB,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,EAAE,EAAE,IAAI;YACR,MAAM;YACN,OAAO,EAAE,kBAAkB;SAC5B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;QACrC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;YAC7D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,GAAG,EAAE,GAAG,CAAC,MAAM;YACf,QAAQ,EAAE,GAAG,CAAC,WAAW;YACzB,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,kBAAkB;SAC5B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,QAAQ,KAAK,WAAW;QACxB,QAAQ,KAAK,cAAc;QAC3B,QAAQ,KAAK,YAAY;QACzB,QAAQ,KAAK,aAAa;QAC1B,QAAQ,KAAK,uBAAuB;QACpC,QAAQ,KAAK,0BAA0B;QACvC,QAAQ,KAAK,wBAAwB,EACrC,CAAC;QACD,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,kBAAkB;YAC3B,EAAE,EAAE,EAAE;YACN,GAAG,EAAE,EAAE;SACR,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAChE,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;QAC1C,IAAI,EAAE,QAAQ;KACf,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}

package/node_modules/@xrkseek/server-http/dist/dsh-compat/community-plugin-root.d.ts

@@ -0,0 +1,5 @@
+/** Candidate install dirs for one npm package id (scoped or bare). */
+export declare function communityPluginCandidates(pluginsDir: string, packageName: string): string[];
+/** First existing package root that has package.json. */
+export declare function findCommunityPluginRoot(pluginsDir: string | undefined, packageNames: readonly string[]): string | undefined;
+//# sourceMappingURL=community-plugin-root.d.ts.map

package/node_modules/@xrkseek/server-http/dist/dsh-compat/community-plugin-root.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"community-plugin-root.d.ts","sourceRoot":"","sources":["../../src/dsh-compat/community-plugin-root.ts"],"names":[],"mappings":"AAMA,sEAAsE;AACtE,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,MAAM,EAAE,CAUV;AAED,yDAAyD;AACzD,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,MAAM,GAAG,SAAS,CAQpB"}

package/node_modules/@xrkseek/server-http/dist/dsh-compat/community-plugin-root.js

@@ -0,0 +1,31 @@
+/**
+ * Resolve staged community plugin package roots under pluginsDir.
+ */
+import { existsSync } from "node:fs";
+import path from "node:path";
+/** Candidate install dirs for one npm package id (scoped or bare). */
+export function communityPluginCandidates(pluginsDir, packageName) {
+    const name = packageName.trim();
+    if (!name)
+        return [];
+    const parts = name.split("/");
+    return [
+        path.join(pluginsDir, "web", "plugins", ...parts),
+        path.join(pluginsDir, ...parts),
+        path.join(pluginsDir, "web", "plugins", parts[parts.length - 1]),
+        path.join(pluginsDir, parts[parts.length - 1]),
+    ];
+}
+/** First existing package root that has package.json. */
+export function findCommunityPluginRoot(pluginsDir, packageNames) {
+    if (!pluginsDir?.trim())
+        return undefined;
+    for (const name of packageNames) {
+        for (const candidate of communityPluginCandidates(pluginsDir, name)) {
+            if (existsSync(path.join(candidate, "package.json")))
+                return candidate;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=community-plugin-root.js.map

package/node_modules/@xrkseek/server-http/dist/dsh-compat/community-plugin-root.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"community-plugin-root.js","sourceRoot":"","sources":["../../src/dsh-compat/community-plugin-root.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,sEAAsE;AACtE,MAAM,UAAU,yBAAyB,CACvC,UAAkB,EAClB,WAAmB;IAEnB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QACjE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,uBAAuB,CACrC,UAA8B,EAC9B,YAA+B;IAE/B,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,KAAK,MAAM,SAAS,IAAI,yBAAyB,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;YACpE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC;QACzE,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/node_modules/@xrkseek/server-http/dist/dsh-compat/community-root-http.d.ts

@@ -1,7 +1,21 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+export interface CommunityRootOptions {
+    readonly pluginsDir?: string;
+    readonly xrkHome?: string;
+}
 /**
- * Community root paths such as `/whale-girl` (not `/api`, not capability-table prefixes).
+ * First path segment + optional nested community surface under a `dsh-*` slug.
+ *
+ * Nested trees must NOT claim Cordis / settings RPC (`/dsh-foo-settings/get`,
+ * `/dsh-pocket/pocket.status`) — those go to the RPC registry after HTTP
+ * matches. Only `api/…` and staged static assets are community-root under
+ * nested `dsh-*` paths.
  */
-import type { IncomingMessage, ServerResponse } from "node:http";
 export declare function isCommunityRootPath(pathname: string): boolean;
-export declare function handleCommunityRootHttp(req: IncomingMessage, res: ServerResponse, pathname: string): Promise<boolean>;
+/**
+ * Honest JSON (+ staged static assets) for community slug roots.
+ * Specific capability prefixes register earlier and win first-match.
+ * `api/state` · `api/config` persist under ~/.xrk/community-surfaces/<slug>/.
+ */
+export declare function handleCommunityRootHttp(req: IncomingMessage, res: ServerResponse, pathname: string, options?: CommunityRootOptions): Promise<boolean>;
 //# sourceMappingURL=community-root-http.d.ts.map

package/node_modules/@xrkseek/server-http/dist/dsh-compat/community-root-http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"community-root-http.d.ts","sourceRoot":"","sources":["../../src/dsh-compat/community-root-http.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAqCjE,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAI7D;AAED,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAuBlB"}
+{"version":3,"file":"community-root-http.d.ts","sourceRoot":"","sources":["../../src/dsh-compat/community-root-http.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAkDjE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAe7D;AAqHD;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,OAAO,CAAC,CAgLlB"}

package/node_modules/@xrkseek/server-http/dist/dsh-compat/community-root-http.js

@@ -1,9 +1,18 @@
-import { readBody, sendJson } from "./underlying/http-json.js";
+/**
+ * Community root paths such as `/whale-girl` and nested `/dsh-whale-girl/api/…`
+ * (not `/api`, not capability-table prefixes that register earlier).
+ */
+import { createReadStream, existsSync, statSync } from "node:fs";
+import path from "node:path";
+import { sendJson } from "./underlying/http-json.js";
+import { httpMethod, isMutatingMethod, parseJsonBody, } from "./underlying/http-kit.js";
+import { patchPluginSurface, readPluginSurface, } from "./underlying/plugin-surface-store.js";
 import { DSH_COMPAT_ADAPTER, tag } from "./meta.js";
 const RESERVED_ROOT = new Set([
     "api",
     "sidebar",
     "modlens",
+    "niulai-kws",
     "modsearch",
     "releases",
     "health",
@@ -19,9 +28,12 @@ const RESERVED_ROOT = new Set([
     "dream-skin",
     "dsh-market",
     "dsh-skin-market",
+    "skin-assets",
+    "dsh-genui",
     "turn-rewind",
     "auto-review",
     "tokenledger",
+    "wallet",
     "weixin",
     "feishu",
     "dingtalk",
@@ -32,20 +44,265 @@ const RESERVED_ROOT = new Set([
     "slack",
     "whatsapp",
 ]);
+/**
+ * First path segment + optional nested community surface under a `dsh-*` slug.
+ *
+ * Nested trees must NOT claim Cordis / settings RPC (`/dsh-foo-settings/get`,
+ * `/dsh-pocket/pocket.status`) — those go to the RPC registry after HTTP
+ * matches. Only `api/…` and staged static assets are community-root under
+ * nested `dsh-*` paths.
+ */
 export function isCommunityRootPath(pathname) {
-    const m = /^\/([a-z][a-z0-9-]*)$/.exec(pathname);
+    const m = /^\/([a-z][a-z0-9-]*)(\/.*)?$/.exec(pathname);
     if (!m)
         return false;
-    return !RESERVED_ROOT.has(m[1]);
+    const slug = m[1];
+    if (RESERVED_ROOT.has(slug))
+        return false;
+    const nested = m[2];
+    // Exact `/slug` stays open for short aliases (`/whale-girl`).
+    if (!nested)
+        return true;
+    // Nested `/slug/…` only for `dsh-*` packs; keep non-dsh nested as Host gaps.
+    if (!slug.startsWith("dsh-"))
+        return false;
+    const tail = nested.slice(1);
+    if (tail === "api" || tail.startsWith("api/"))
+        return true;
+    // Staged assets only — Cordis RPC methods may contain dots (`pocket.status`).
+    const base = tail.split("/").pop() ?? "";
+    return COMMUNITY_ASSET_EXT.has(path.extname(base).toLowerCase());
+}
+const COMMUNITY_ASSET_EXT = new Set([
+    ".png",
+    ".jpg",
+    ".jpeg",
+    ".webp",
+    ".gif",
+    ".svg",
+    ".mp3",
+    ".wav",
+    ".js",
+    ".mjs",
+    ".css",
+    ".json",
+    ".html",
+    ".ico",
+    ".woff",
+    ".woff2",
+    ".ttf",
+    ".map",
+]);
+function contentType(file) {
+    switch (path.extname(file).toLowerCase()) {
+        case ".png":
+            return "image/png";
+        case ".jpg":
+        case ".jpeg":
+            return "image/jpeg";
+        case ".webp":
+            return "image/webp";
+        case ".gif":
+            return "image/gif";
+        case ".svg":
+            return "image/svg+xml";
+        case ".mp3":
+            return "audio/mpeg";
+        case ".wav":
+            return "audio/wav";
+        case ".js":
+        case ".mjs":
+            return "application/javascript; charset=utf-8";
+        case ".css":
+            return "text/css; charset=utf-8";
+        case ".json":
+            return "application/json; charset=utf-8";
+        default:
+            return "application/octet-stream";
+    }
 }
-export async function handleCommunityRootHttp(req, res, pathname) {
+function stagedPluginRoots(pluginsDir, slug) {
+    if (!pluginsDir?.trim())
+        return [];
+    const web = path.join(pluginsDir, "web", "plugins");
+    const roots = [path.join(web, slug)];
+    // Staged npm scopes flatten to `scope/name` dirs; also try bare short names.
+    if (slug.startsWith("dsh-")) {
+        roots.push(path.join(web, slug.slice(4)));
+    }
+    else {
+        roots.push(path.join(web, `dsh-${slug}`));
+    }
+    return roots;
+}
+function tryServeStagedAsset(res, method, pluginsDir, slug, rel) {
+    if (!rel || rel.includes(".."))
+        return false;
+    const safe = rel
+        .split("/")
+        .filter((seg) => seg && seg !== "." && seg !== "..")
+        .join("/");
+    if (!safe)
+        return false;
+    for (const root of stagedPluginRoots(pluginsDir, slug)) {
+        if (!existsSync(root))
+            continue;
+        for (const candidate of [
+            path.join(root, safe),
+            path.join(root, "assets", safe),
+            path.join(root, "static", safe),
+        ]) {
+            try {
+                const st = statSync(candidate);
+                if (!st.isFile())
+                    continue;
+                res.writeHead(200, {
+                    "content-type": contentType(candidate),
+                    "content-length": String(st.size),
+                    "cache-control": "no-store",
+                });
+                if (method === "HEAD") {
+                    res.end();
+                    return true;
+                }
+                createReadStream(candidate).pipe(res);
+                return true;
+            }
+            catch {
+                /* try next */
+            }
+        }
+    }
+    return false;
+}
+function apiTail(pathname, slug) {
+    const prefix = `/${slug}/`;
+    if (!pathname.startsWith(prefix))
+        return "";
+    return pathname.slice(prefix.length);
+}
+/**
+ * Honest JSON (+ staged static assets) for community slug roots.
+ * Specific capability prefixes register earlier and win first-match.
+ * `api/state` · `api/config` persist under ~/.xrk/community-surfaces/<slug>/.
+ */
+export async function handleCommunityRootHttp(req, res, pathname, options = {}) {
     if (!isCommunityRootPath(pathname))
         return false;
-    const method = (req.method ?? "GET").toUpperCase();
-    if (method === "POST" || method === "PUT" || method === "PATCH") {
-        await readBody(req);
+    const method = httpMethod(req);
+    const m = /^\/([a-z][a-z0-9-]*)(\/.*)?$/.exec(pathname);
+    const plugin = m?.[1] ?? pathname.slice(1);
+    const tail = apiTail(pathname, plugin);
+    const xrkHome = options.xrkHome;
+    if ((method === "GET" || method === "HEAD") && tail) {
+        const base = tail.split("/").pop() ?? "";
+        if (path.extname(base)) {
+            if (tryServeStagedAsset(res, method, options.pluginsDir, plugin, tail)) {
+                return true;
+            }
+        }
+    }
+    // Whale-girl / desktop-pet style surfaces: keep shapes the client merges.
+    if (tail === "api/state" || tail === "api/state.js" || tail === "api/workstate") {
+        let surface = readPluginSurface(xrkHome, plugin);
+        if (isMutatingMethod(method)) {
+            const body = await parseJsonBody(req);
+            const patch = body.state && typeof body.state === "object" && !Array.isArray(body.state)
+                ? body.state
+                : body.value &&
+                    typeof body.value === "object" &&
+                    !Array.isArray(body.value)
+                    ? body.value
+                    : (() => {
+                        const { action: _a, ...rest } = body;
+                        return rest;
+                    })();
+            if (Object.keys(patch).length > 0) {
+                surface = patchPluginSurface(xrkHome, plugin, "state", patch, "merge");
+            }
+        }
+        sendJson(res, 200, tag({
+            ok: true,
+            balance: typeof surface.state.balance === "number" ? surface.state.balance : 0,
+            provider: surface.state.provider ?? null,
+            model: surface.state.model ?? null,
+            status: typeof surface.state.status === "string"
+                ? surface.state.status
+                : "ready",
+            ...surface.state,
+            plugin,
+            path: pathname,
+            adapter: DSH_COMPAT_ADAPTER,
+            writable: true,
+            revision: surface.revision,
+        }));
+        return true;
+    }
+    if (tail === "api/config") {
+        let surface = readPluginSurface(xrkHome, plugin);
+        if (isMutatingMethod(method)) {
+            const body = await parseJsonBody(req);
+            const patch = body.config && typeof body.config === "object" && !Array.isArray(body.config)
+                ? body.config
+                : body.value &&
+                    typeof body.value === "object" &&
+                    !Array.isArray(body.value)
+                    ? body.value
+                    : (() => {
+                        const { action: _a, ...rest } = body;
+                        return rest;
+                    })();
+            if (Object.keys(patch).length > 0) {
+                surface = patchPluginSurface(xrkHome, plugin, "config", patch, "merge");
+            }
+        }
+        sendJson(res, 200, tag({
+            ok: true,
+            config: surface.config,
+            plugin,
+            path: pathname,
+            adapter: DSH_COMPAT_ADAPTER,
+            writable: true,
+            revision: surface.revision,
+        }));
+        return true;
+    }
+    if (isMutatingMethod(method)) {
+        await parseJsonBody(req).catch(() => ({}));
+    }
+    if (tail === "api/providers") {
+        sendJson(res, 200, tag({
+            ok: true,
+            providers: [],
+            plugin,
+            path: pathname,
+            adapter: DSH_COMPAT_ADAPTER,
+            writable: false,
+        }, ["dsh-host"]));
+        return true;
+    }
+    if (tail === "api/select-model") {
+        sendJson(res, 200, tag({
+            ok: true,
+            plugin,
+            path: pathname,
+            adapter: DSH_COMPAT_ADAPTER,
+            writable: false,
+        }, ["dsh-host"]));
+        return true;
+    }
+    if (tail.startsWith("api/") || tail === "api") {
+        sendJson(res, 200, tag({
+            ok: true,
+            status: "ready",
+            plugin,
+            path: pathname,
+            endpoint: tail,
+            adapter: DSH_COMPAT_ADAPTER,
+            writable: false,
+        }, ["dsh-host"]));
+        return true;
     }
-    const plugin = pathname.slice(1);
     sendJson(res, 200, tag({
         ok: true,
         status: "ready",