@xuanling-rs/xuanling-dsh-tools 0.2.9 → 0.3.0

package/README-ZH.md

@@ -6,15 +6,19 @@
 原生工具，并以 `mcp__xuanling__` 前缀增加 XuanLing 工具。
 
 ```sh
-dsh plugin --profile web add @xuanling-rs/xuanling-dsh-tools@0.2.9
+dsh plugin --profile web add @xuanling-rs/xuanling-dsh-tools@0.3.0
 ```
 
 该命令会扩展 DSH 内置的 Web profile。内置 Headless profile 应使用 `--profile headless`。
 未知 profile 名称只包含 base bundle，本身不会提供可运行的 Web 或 Headless 应用。
 
-精确版本的 `@xuanling-rs/xuanling-mcp@0.2.9` runtime 会安装在 profile 内，并通过带校验的 JS launcher
-启动；不需要也不会使用全局 npm package。只有文件系统 capability root 与 DSH 工作目录不同时，
-才需要设置 `XUANLING_WORKSPACE_ROOT`。
+精确版本的 `@xuanling-rs/xuanling-mcp@0.3.0` runtime 会安装在 profile 内，并通过带校验的 JS launcher
+启动；不需要也不会使用全局 npm package。启动 DSH 前必须把 `XUANLING_WORKSPACE_ROOT` 设置为
+已确认的绝对 workspace；缺失时 bundle 会启动失败，DSH 进程工作目录不会被当成用户授权。
+
+Bridge 会缓存 MCP 分页中的全部定义，但起初只暴露 `mcp_catalog__xuanling`。应按名称或描述检索并
+激活精确 raw name；选中的定义会在下一次模型请求中作为 `mcp__xuanling__*` 工具出现。不要预先
+激活完整目录。
 
 该 bundle 的 result adapter 会保留完整 Native 文本投影，只删除与 `structuredContent` 完全重复的
 意外文本块。

package/README.md

@@ -7,17 +7,23 @@ keeps all Harness-native tools enabled and adds XuanLing tools under the
 `mcp__xuanling__` prefix.
 
 ```sh
-dsh plugin --profile web add @xuanling-rs/xuanling-dsh-tools@0.2.9
+dsh plugin --profile web add @xuanling-rs/xuanling-dsh-tools@0.3.0
 ```
 
 This command augments DSH's shipped Web profile. Use `--profile headless` for
 the shipped Headless profile. Unknown profile names start with the base bundle
 only and do not provide a runnable Web or Headless application by themselves.
 
-The exact `@xuanling-rs/xuanling-mcp@0.2.9` runtime is installed in the profile and started
+The exact `@xuanling-rs/xuanling-mcp@0.3.0` runtime is installed in the profile and started
 through its verified JS launcher. A global npm package is neither required nor
-used. Set `XUANLING_WORKSPACE_ROOT` only when the filesystem capability root
-must differ from the DSH working directory.
+used. Set `XUANLING_WORKSPACE_ROOT` to the confirmed absolute workspace before
+starting DSH; the bundle fails startup when it is absent and never treats the
+DSH process working directory as user authorization.
+
+The bridge caches every paginated MCP definition but initially exposes only
+`mcp_catalog__xuanling`. Search by name or description and activate exact raw
+names; the selected definitions appear as `mcp__xuanling__*` tools on the next
+model request. Do not activate the complete catalog speculatively.
 
 The bundle's result adapter preserves the complete Native text projection and
 removes only accidental duplicate text blocks that exactly repeat

package/cordis.patch.yml

@@ -1,17 +1,18 @@
 # XuanLing tools for DeepSeek Harness — additive variant.
 #
 # Mounts the xuanling-mcp binary through the local result adapter and the
-# official @deepseek-ai/dsh-mcp-client bridge. Every XuanLing tool becomes a native
-# harness tool named mcp__xuanling__<raw> (for example mcp__xuanling__fs_read_text);
-# the bridge owns reconnect, re-sync, and generation rollback. Built-in tools
+# official @deepseek-ai/dsh-mcp-client bridge. The bridge caches every XuanLing
+# definition and exposes mcp_catalog__xuanling first; exact activations become
+# native mcp__xuanling__<raw> tools. It owns reconnect, re-sync, and generation rollback. Built-in tools
 # (read/write/edit/glob/grep/bash/…) stay registered — this variant only ADDS.
 #
 # The bundle resolves its exact result adapter and xuanling-mcp dependency from
 # the DSH profile. The JS launcher then selects and verifies the matching native
 # package; the adapter preserves one complete text projection and structured value.
 #
-# The filesystem capability root defaults to the directory dsh was started
-# from; override with XUANLING_WORKSPACE_ROOT. Memory uses the shared default
+# The filesystem capability root is explicit. XUANLING_WORKSPACE_ROOT must
+# name the confirmed absolute workspace; missing configuration fails startup.
+# Memory uses the shared default
 # database (~/.xuanling/memory.db) exactly like the ZCode plugin deployment.
 # The ZCode-only object-parameter compat shim stays OFF everywhere in this
 # integration: DeepSeek forwards model arguments as verbatim JSON.
@@ -21,6 +22,7 @@
       name: '@deepseek-ai/dsh-mcp-client'
       config:
         serverName: xuanling
+        toolExposure: lazy
         transport: stdio
         command: !!js process.execPath
         args:
@@ -30,5 +32,5 @@
           - '--'
           - !!js process.getBuiltinModule('node:module').createRequire(baseUrl).resolve('@xuanling-rs/xuanling-mcp/bin/xuanling-mcp.js')
           - '--workspace-root'
-          - !!js process.env.XUANLING_WORKSPACE_ROOT ?? process.cwd()
+          - !!js (() => { const root = process.env.XUANLING_WORKSPACE_ROOT; if (!root) throw new Error('XUANLING_WORKSPACE_ROOT is required for the XuanLing full-tools bundle'); return root })()
         toolCallTimeoutMs: 120000

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@xuanling-rs/xuanling-dsh-tools",
-  "version": "0.2.9",
+  "version": "0.3.0",
   "description": "DeepSeek Harness bundle: mount the XuanLing MCP server (xuanling-mcp binary) as native mcp__xuanling__* tools through the official @deepseek-ai/dsh-mcp-client bridge. Additive variant: built-in tools stay enabled.",
   "license": "MIT",
   "private": false,
   "dependencies": {
     "@deepseek-ai/dsh-mcp-client": "^0.1.0-rc.5",
-    "@xuanling-rs/xuanling-mcp": "0.2.9"
+    "@xuanling-rs/xuanling-mcp": "0.3.0"
   },
   "files": [
     "LICENSE",
@@ -38,6 +38,6 @@
     "registry": "https://registry.npmjs.org"
   },
   "xuanlingRelease": {
-    "sourceCommit": "2e95812f4b9bcb2e77f3297a9d59333013dfbcee"
+    "sourceCommit": "1b45521e279eebc78230d2a93774bc83fe0159a4"
   }
 }