agent-bypass 2.14.1 → 2.15.0

package/dsh/preset.template.yml

@@ -0,0 +1,132 @@
+# Ck 万能执行员 — DeepSeek Harness Agent 预设声明（agent-bypass · dsh/）
+# 由 dsh/build-template.js 从本机 DSH 官方 standard 预设派生：插件/工具列表与 standard 逐行一致，
+# 仅替换 persona 与预设元数据。安装时 npx agent-bypass --dsh 把 __PERSONA__ 替换为 dsh/persona.md 的正文。
+# DSH 升级后请在本机重跑：node dsh/build-template.js
+- insert:
+    - id: preset-ck
+      name: '@deepseek-ai/dsh-agent-preset'
+      config:
+        id: ck
+        name: 'Ck 万能执行员'
+        description: '万能执行员：渗透 / 逆向 / Pwn / 协议 / 密码 / 移动 / 取证 / 内存 / 漏洞研究 / 红队 / 自动化 / 开发 / 数据 / 调研，点啥干啥。'
+        order: 0
+        plugins:
+          - id: persona
+            name: '@deepseek-ai/dsh-persona'
+            config:
+              prefix: |
+                __PERSONA__
+          - id: agent-instructions
+            name: '@deepseek-ai/dsh-agent-instructions'
+            config:
+              maxBytes: 65536
+          - id: time-context
+            name: '@deepseek-ai/dsh-time-context'
+          - id: tool-bash
+            name: '@deepseek-ai/dsh-tool-bash'
+            disabled: !!js process.platform === 'win32'
+          - id: tool-pwsh
+            name: '@deepseek-ai/dsh-tool-pwsh'
+            disabled: !!js process.platform !== 'win32'
+          - id: tool-fs
+            name: '@deepseek-ai/dsh-tool-fs'
+          - id: tool-fs-search
+            name: '@deepseek-ai/dsh-tool-fs-search'
+            config:
+              sampleOverCapGlobResults: false
+          - id: tool-jobs
+            name: '@deepseek-ai/dsh-tool-jobs'
+          - id: tool-schedule
+            name: '@deepseek-ai/dsh-tool-schedule'
+          - id: skill-filesystem
+            name: '@deepseek-ai/dsh-skill-filesystem'
+          - id: tool-skill
+            name: '@deepseek-ai/dsh-tool-skill'
+          - id: command-goal
+            name: '@deepseek-ai/dsh-command-goal'
+          - id: tool-goal
+            name: '@deepseek-ai/dsh-tool-goal'
+          - id: planning
+            name: cordis:group
+            group: true
+            isolate:
+              planMode: true
+            config:
+              - id: plan-mode
+                name: '@deepseek-ai/dsh-plan-mode'
+                config:
+                  section: |
+                    You are in plan mode. Stay in plan mode until the user approves your plan through exit_plan_mode or switches the session mode. Imperative language to implement changes means plan the implementation, not execute it. A user's conversational agreement — including an answer confirming something you asked — approves nothing and does not end plan mode; fold the confirmed decision into the plan and submit it through exit_plan_mode.
+
+                    Explore first. Use non-mutating reads, searches, static analysis, and checks to ground the plan in the actual repository. Do not edit or write files, change configuration, run formatters or code generation that rewrites tracked files, commit, or otherwise carry out the plan. Prefer existing functions and patterns over new machinery.
+
+                    The tool catalog stays the same across modes for request-cache stability. These plan-mode rules override any later tool description or guidance that suggests using mutation tools; those tools remain listed to keep the tool catalog unchanged. Do not use todo_write to track this planning phase: it tracks implementation after an approved plan, while the plan itself belongs in exit_plan_mode.
+
+                    Resolve discoverable facts by inspection. Use ask_user_question only for user-owned choices or material ambiguity that inspection cannot answer. Do not ask the user where code lives or how current behavior works when you can find out.
+
+                    Make the plan decision-complete: state the goal and success criteria; group implementation changes by subsystem; identify public API, schema, and data-flow changes; cover edge cases, failure modes, tests, acceptance criteria, and explicit assumptions. Keep it concise enough to review but detailed enough that another engineer can implement it without making design decisions.
+
+                    When ready, call exit_plan_mode with the complete plan markdown, starting with a # title. Make exit_plan_mode the only and final tool call in that assistant response: it presents the plan for approval, and implementation begins only in a later step after approval. Do not paste the final plan as a plain reply or ask "should I proceed?" through prose or ask_user_question. If review rejects it, incorporate the feedback and present again. If the review channel is unavailable or aborted, stay in plan mode and ask the user to switch modes manually; do not proceed with implementation.
+          - id: compaction
+            name: cordis:group
+            group: true
+            isolate:
+              compaction: true
+              toolResultPruner: true
+            config:
+              - id: compaction-basic
+                name: '@deepseek-ai/dsh-compaction-basic'
+              - id: command-compact
+                name: '@deepseek-ai/dsh-command-compact'
+              - id: tool-result-pruner
+                name: '@deepseek-ai/dsh-compaction-tool-result-pruner'
+                config:
+                  thresholdChars: 8192
+                  headChars: 4096
+                  tailChars: 1024
+          - id: delegation
+            name: cordis:group
+            group: true
+            isolate:
+              workflowEngine: true
+            config:
+              - id: tool-subagent-control
+                name: '@deepseek-ai/dsh-tool-subagent-control'
+              - id: tool-subagent-list-agents
+                name: '@deepseek-ai/dsh-tool-subagent-control/list-agents'
+              - id: tool-subagent
+                name: '@deepseek-ai/dsh-tool-subagent'
+                config:
+                  provider: spawn
+                  toolName: subagent
+                  modelSelectionSettings: true
+              - id: tool-subagent-fork
+                name: '@deepseek-ai/dsh-tool-subagent'
+                config:
+                  provider: fork
+                  toolName: subagent_fork
+              - id: workflow-ptc
+                name: '@deepseek-ai/dsh-workflow-ptc'
+                config:
+                  provider: spawn
+              - id: tool-workflow
+                name: '@deepseek-ai/dsh-tool-workflow'
+          - id: tool-ask-user
+            name: '@deepseek-ai/dsh-tool-ask-user'
+          - id: tool-todo
+            name: '@deepseek-ai/dsh-tool-todo'
+            config:
+              allowParallelInProgress: true
+          - id: tool-web
+            name: '@deepseek-ai/dsh-tool-web'
+            config:
+              fetch: true
+              searchTimeoutMs: 60000
+          - id: present
+            name: '@deepseek-ai/dsh-tool-present'
+          - id: tool-plugin-manager
+            name: '@deepseek-ai/dsh-plugin-manager/tools'
+            disabled: true
+          - id: tool-plugin-market
+            name: '@deepseek-ai/dsh-plugin-market/tools'
+            disabled: true

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "agent-bypass",
-  "version": "2.14.1",
-  "description": "Cknb 全能技术操作员 — Agent Skills 技能包（默认安装 Pi / OpenCode；Claude Code / Grok / OpenMinis 显式指定）",
+  "version": "2.15.0",
+  "description": "Cknb 全能技术操作员 — Agent Skills 技能包（默认安装 Pi / OpenCode / DeepSeek Harness；Claude Code / Grok / OpenMinis 显式指定）",
   "bin": {
     "agent-bypass": "bin/install.js"
   },
@@ -15,6 +15,7 @@
     "opencode/",
     "claude/",
     "grok/",
+    "dsh/",
     "references/",
     "scripts/*.py",
     "scripts/*.sh",
@@ -32,7 +33,9 @@
     "grok",
     "openminis",
     "security",
-    "pentest"
+    "pentest",
+    "deepseek-harness",
+    "dsh"
   ],
   "scripts": {
     "prepack": "node -e \"const fs=require('fs');for(const d of ['scripts/__pycache__','tests/__pycache__']){try{fs.rmSync(d,{recursive:true,force:true})}catch(e){}}\""

package/tests/test_regressions.py

@@ -153,5 +153,83 @@ class JsripSameSiteTests(unittest.TestCase):
         self.assertFalse(self.js.same_site("https://example.com", "https://wwwexample.com/a.js"))
 
 
+class DshInstallerTests(unittest.TestCase):
+    """DeepSeek Harness：技能安装 + Ck 模式预设注入（临时 HOME，离线）。"""
+
+    DSH_ENV = ("DSH_HOME", "DSH_PROFILE", "DSH_AGENTS_HOME", "DSH_APP_PATH", "DSH_ASAR_PATH")
+
+    def _node(self, *args, home):
+        env = dict(os.environ)
+        env["HOME"] = home
+        for k in self.DSH_ENV:
+            env.pop(k, None)
+        return _tmp_run(["node", str(ROOT / "bin" / "install.js"), *args], env=env)
+
+    def _seed(self, home, patch_text="[]\n"):
+        prof = Path(home) / ".dsh" / "profiles" / "desktop"
+        prof.mkdir(parents=True, exist_ok=True)
+        f = prof / "cordis.patch.yml"
+        f.write_text(patch_text, encoding="utf-8")
+        return f
+
+    def test_install_idempotent_and_persona_dollar_preserved(self):
+        with tempfile.TemporaryDirectory() as home:
+            patch = self._seed(home)
+            r1 = self._node("--dsh", home=home)
+            self.assertEqual(r1.returncode, 0, r1.stdout + r1.stderr)
+            skill = Path(home) / ".agents" / "skills" / "agent-bypass" / "SKILL.md"
+            self.assertTrue(skill.exists(), "DSH 技能应安装到 ~/.agents/skills")
+            text = patch.read_text(encoding="utf-8")
+            self.assertEqual(text.count("agent-bypass:dsh-preset-begin"), 1)
+            self.assertEqual(text.count("id: preset-ck"), 1)
+            self.assertIn("Ck 万能执行员", text)
+            # $$ 不能被 String.replace 的替换串语义吃掉（PHP 变量变量）
+            self.assertIn("parse_str / $$", text)
+            # 幂等：重复安装不重复追加
+            r2 = self._node("--dsh", home=home)
+            self.assertEqual(r2.returncode, 0, r2.stdout + r2.stderr)
+            text2 = patch.read_text(encoding="utf-8")
+            self.assertEqual(text2.count("agent-bypass:dsh-preset-begin"), 1)
+            self.assertEqual(text2.count("id: preset-ck"), 1)
+
+    def test_crlf_preserved_and_uninstall_restores(self):
+        with tempfile.TemporaryDirectory() as home:
+            patch = self._seed(home, '# note\r\n- id: web\r\n  name: "@deepseek-ai/dsh-web"\r\n')
+            self.assertEqual(self._node("--dsh", home=home).returncode, 0)
+            data = patch.read_bytes()
+            self.assertIn(b"agent-bypass:dsh-preset-begin", data)
+            self.assertGreater(data.count(b"\r\n"), 100, "CRLF 文件应保持 CRLF")
+            r = self._node("--dsh", "--uninstall", home=home)
+            self.assertEqual(r.returncode, 0, r.stdout + r.stderr)
+            data2 = patch.read_bytes()
+            self.assertNotIn(b"agent-bypass:dsh-preset-begin", data2)
+            self.assertIn(b"# note", data2)
+            self.assertIn(b"id: web", data2)
+            self.assertFalse((Path(home) / ".agents" / "skills" / "agent-bypass").exists())
+
+    def test_comment_only_patch_stays_valid_yaml(self):
+        with tempfile.TemporaryDirectory() as home:
+            patch = self._seed(home, "# user comment\n[]\n")
+            self.assertEqual(self._node("--dsh", home=home).returncode, 0)
+            self.assertEqual(self._node("--dsh", "--uninstall", home=home).returncode, 0)
+            text = patch.read_text(encoding="utf-8")
+            self.assertIn("# user comment", text)
+            self.assertIn("[]", text, "只留注释时应补回空数组，保证 loader 可解析")
+
+    def test_default_targets_include_pi_opencode_dsh(self):
+        with tempfile.TemporaryDirectory() as home:
+            (Path(home) / ".pi").mkdir()
+            (Path(home) / ".config" / "opencode").mkdir(parents=True)
+            self._seed(home)
+            r = self._node(home=home)
+            self.assertEqual(r.returncode, 0, r.stdout + r.stderr)
+            self.assertTrue((Path(home) / ".pi" / "agent" / "skills" / "agent-bypass" / "SKILL.md").exists())
+            self.assertTrue((Path(home) / ".config" / "opencode" / "skills" / "agent-bypass" / "SKILL.md").exists())
+            self.assertTrue((Path(home) / ".agents" / "skills" / "agent-bypass" / "SKILL.md").exists())
+            patch_text = (Path(home) / ".dsh" / "profiles" / "desktop" / "cordis.patch.yml").read_text(encoding="utf-8")
+            self.assertIn("id: preset-ck", patch_text)
+            self.assertIn("dsh", r.stdout + r.stderr)
+
+
 if __name__ == "__main__":
     unittest.main()