deepseek-coordination 0.1.2 → 0.1.6

package/client.js

@@ -0,0 +1,338 @@
+/**
+ * dsh-os settings panel: the client half of the takeover switch.
+ *
+ * HOW THIS FILE IS LOADED, AND WHY IT LOOKS LIKE THIS
+ *
+ * The browser half of a DSH plugin is not an ordinary ES module. It is a self-registering lazy factory
+ * keyed by the package name, handed to the page's module table:
+ *
+ *     window.__ModuleLoader__.load({ id: '<package name>', factory(require) { ... } })
+ *
+ * React is NOT imported and NOT bundled: it is taken from the module table with `require('react')`, and
+ * shipping a second copy would give the page two Reacts and break hooks. `<package.json>` therefore
+ * declares `dsh.client` and exposes this file as the `./client` subpath, which is what the loader reads.
+ *
+ * The file is plain ES5-flavoured JavaScript — no JSX, no TypeScript — deliberately. JSX would require a
+ * build step whose output format has to match the table's contract exactly, and a hand-written file in
+ * the documented format is verifiable by reading it. `../src/client/` remains the untouched Vite
+ * scaffold it always was; this is the artifact that ships.
+ *
+ * WHAT THE PANEL DOES
+ *
+ * It edits three things and shows one:
+ *
+ *   * the master switch, which is the only control that turns interception on;
+ *   * a per-tool switch for each of read / write / edit / pwsh;
+ *   * the write convention (preserve the target's BOM and line endings, or reproduce the built-in
+ *     UTF-8-without-BOM, LF behaviour);
+ *   * an activity feed of what was actually taken over, which is the only view that can distinguish
+ *     "configured" from "working".
+ *
+ * State lives on the host (see `settings.js`), reached over the same-origin endpoints
+ * `/api/dsh-os/settings` and `/api/dsh-os/set`. The panel is a pure view over that state, so a page
+ * reload costs nothing and two open windows cannot disagree.
+ */
+
+window.__ModuleLoader__.load({
+  id: 'deepseek-coordination',
+  factory(require) {
+    const React = require('react')
+    const h = React.createElement
+
+    /** Endpoints registered by the host half. Relative, so no port or origin is baked in. */
+    const STATE_URL = '/api/dsh-os/settings'
+    const SET_URL = '/api/dsh-os/set'
+
+    /**
+     * Theme tokens only.
+     *
+     * Literal colours would be wrong in one of the two themes, and reaching into another plugin's
+     * stylesheet is forbidden by the UI rules. A renamed token degrades the appearance; it never
+     * breaks rendering, which is the property being bought here.
+     */
+    const T = {
+      label: 'var(--dsw-alias-label-primary)',
+      labelSecondary: 'var(--dsw-alias-label-secondary)',
+      labelTertiary: 'var(--dsw-alias-label-tertiary)',
+      border: '1px solid var(--dsw-alias-border-l)',
+      brand: 'var(--dsw-alias-brand-primary)',
+      error: 'var(--dsw-alias-state-error-primary)',
+      warn: 'var(--dsw-alias-state-warn-primary)',
+      hover: 'var(--dsw-alias-interactive-bg-hover)',
+      module: 'var(--dsw-alias-bg-module-platform)',
+    }
+
+    /** One labelled row with a switch on the right, matching the host's settings row rhythm. */
+    function Switch(props) {
+      const { checked, disabled, onChange, label, hint } = props
+      return h('div', {
+        style: {
+          display: 'flex',
+          alignItems: 'flex-start',
+          gap: '12px',
+          padding: '10px 0',
+          borderBottom: T.border,
+        },
+      }, [
+        h('div', { key: 'text', style: { flex: '1 1 auto', minWidth: 0 } }, [
+          h('div', { key: 'label', style: { color: T.label, fontSize: '13px', lineHeight: '20px' } }, label),
+          hint === undefined ? null : h('div', {
+            key: 'hint',
+            style: { color: T.labelTertiary, fontSize: '12px', lineHeight: '18px', marginTop: '2px' },
+          }, hint),
+        ]),
+        h('button', {
+          key: 'switch',
+          type: 'button',
+          role: 'switch',
+          'aria-checked': checked === true,
+          'aria-label': label,
+          disabled: disabled === true,
+          onClick: () => { if (disabled !== true) onChange(!checked) },
+          style: {
+            flex: '0 0 auto',
+            width: '38px',
+            height: '22px',
+            borderRadius: '11px',
+            border: 'none',
+            padding: '0',
+            cursor: disabled === true ? 'not-allowed' : 'pointer',
+            opacity: disabled === true ? 0.5 : 1,
+            background: checked === true ? T.brand : T.hover,
+            position: 'relative',
+            transition: 'background 120ms linear',
+          },
+        }, h('span', {
+          style: {
+            position: 'absolute',
+            top: '2px',
+            left: checked === true ? '18px' : '2px',
+            width: '18px',
+            height: '18px',
+            borderRadius: '50%',
+            background: '#fff',
+            transition: 'left 120ms ease',
+          },
+        })),
+      ])
+    }
+
+    /** A small segmented control, used for the write convention. */
+    function Segmented(props) {
+      const { value, options, disabled, onChange } = props
+      return h('div', {
+        style: { display: 'inline-flex', border: T.border, borderRadius: '6px', overflow: 'hidden' },
+      }, options.map((option, index) => h('button', {
+        key: option.value,
+        type: 'button',
+        disabled: disabled === true,
+        'aria-pressed': value === option.value,
+        onClick: () => { if (disabled !== true) onChange(option.value) },
+        style: {
+          padding: '4px 10px',
+          fontSize: '12px',
+          lineHeight: '18px',
+          border: 'none',
+          borderLeft: index === 0 ? 'none' : T.border,
+          cursor: disabled === true ? 'not-allowed' : 'pointer',
+          background: value === option.value ? T.brand : 'transparent',
+          color: value === option.value ? '#fff' : T.labelSecondary,
+        },
+      }, option.label)))
+    }
+
+    /** Render one activity entry: what was taken over, or why a call fell back. */
+    function ActivityRow(props) {
+      const entry = props.entry
+      const took = entry.outcome === 'taken-over'
+      return h('li', {
+        style: {
+          display: 'flex',
+          gap: '8px',
+          alignItems: 'baseline',
+          padding: '4px 0',
+          fontSize: '12px',
+          lineHeight: '18px',
+        },
+      }, [
+        h('span', {
+          key: 'tool',
+          style: {
+            flex: '0 0 auto',
+            color: took ? T.brand : T.warn,
+            fontVariantNumeric: 'tabular-nums',
+          },
+        }, entry.tool),
+        h('span', {
+          key: 'subject',
+          title: entry.subject,
+          style: {
+            flex: '1 1 auto',
+            minWidth: 0,
+            overflow: 'hidden',
+            textOverflow: 'ellipsis',
+            whiteSpace: 'nowrap',
+            color: T.labelSecondary,
+            direction: 'rtl',
+            textAlign: 'left',
+          },
+        }, entry.subject === '' ? '—' : entry.subject),
+        h('span', {
+          key: 'outcome',
+          style: { flex: '0 0 auto', color: took ? T.labelTertiary : T.error },
+        }, took ? '接管' : '回退'),
+      ])
+    }
+
+    /**
+     * The panel.
+     *
+     * It owns exactly one piece of state (the last document fetched) plus a pending flag. Every control
+     * posts and then adopts the response, so the host is always the source of truth and an optimistic
+     * local edit cannot drift from what the interception actually reads.
+     */
+    function SettingsSection() {
+      const [state, setState] = React.useState(null)
+      const [error, setError] = React.useState(null)
+      const [busy, setBusy] = React.useState(false)
+
+      const load = React.useCallback(() => {
+        fetch(STATE_URL, { headers: { accept: 'application/json' } })
+          .then((response) => response.json())
+          .then((body) => {
+            if (body && body.ok) { setState(body); setError(null) } else { setError((body && body.error) || '读取失败') }
+          })
+          .catch((cause) => setError(String(cause && cause.message ? cause.message : cause)))
+      }, [])
+
+      React.useEffect(() => {
+        load()
+        // The feed is the point of the panel, so it refreshes on a slow interval while it is open. Ten
+        // seconds is chosen to be far below the cost of noticing: a five-minute poll would leave a user
+        // convinced that nothing is happening.
+        const timer = setInterval(load, 10000)
+        return () => clearInterval(timer)
+      }, [load])
+
+      const save = React.useCallback((patch) => {
+        setBusy(true)
+        fetch(SET_URL, {
+          method: 'POST',
+          headers: { 'content-type': 'application/json' },
+          body: JSON.stringify(patch),
+        })
+          .then((response) => response.json())
+          .then((body) => {
+            if (body && body.ok) { setState(body); setError(null) } else { setError((body && body.error) || '保存失败') }
+          })
+          .catch((cause) => setError(String(cause && cause.message ? cause.message : cause)))
+          .then(() => setBusy(false))
+      }, [])
+
+      if (state === null) {
+        return h('div', { style: { padding: '12px 0', color: error === null ? T.labelTertiary : T.error } },
+          error === null ? '正在读取 dsh-os 设置…' : `无法读取 dsh-os 设置：${error}`)
+      }
+
+      const settings = state.settings
+      const tools = settings.tools || {}
+      const activity = settings.activity || []
+      const master = settings.enabled === true
+      const names = {
+        read: '读取文件（read）',
+        write: '写入文件（write）',
+        edit: '编辑文件（edit）',
+        pwsh: '执行命令（pwsh）',
+      }
+      const hints = {
+        read: '经 dsh-os 读取：显式探测编码，剥掉 BOM 后再按行返回。',
+        write: '经 dsh-os 写入：保留目标文件原有的 BOM 与换行；新建文件仍按内置约定（UTF-8 无 BOM、LF）。',
+        edit: '经 dsh-os 编辑：字面替换语义与内置一致，写回时沿用目标文件的编码约定。',
+        pwsh: '经 dsh-os 执行：argv 数组直接传参，不拼 shell 字符串。后台任务与沙箱升级仍走内置实现。',
+      }
+
+      return h('div', { style: { padding: '4px 0' } }, [
+        h('div', { key: 'head', style: { color: T.labelSecondary, fontSize: '12px', lineHeight: '18px', marginBottom: '4px' } },
+          '让 dsh-os 接管内置的文件与命令操作，从而获得字节级编码、BOM 与换行保证。关闭时全部走内置实现。'),
+
+        h(Switch, {
+          key: 'master',
+          checked: master,
+          disabled: busy,
+          label: '接管内置操作',
+          hint: '总开关。关闭后下面的逐项设置保留，但不再生效。',
+          onChange: (next) => save({ enabled: next }),
+        }),
+
+        h('div', { key: 'tools', style: { opacity: master ? 1 : 0.55 } },
+          ['read', 'write', 'edit', 'pwsh'].map((tool) => h(Switch, {
+            key: tool,
+            checked: tools[tool] === true,
+            disabled: busy || !master,
+            label: names[tool],
+            hint: hints[tool],
+            onChange: (next) => save({ tools: { [tool]: next } }),
+          }))),
+
+        h('div', { key: 'format', style: { display: 'flex', alignItems: 'center', gap: '12px', padding: '12px 0', borderBottom: T.border, opacity: master ? 1 : 0.55 } }, [
+          h('div', { key: 'label', style: { flex: '1 1 auto' } }, [
+            h('div', { key: 't', style: { color: T.label, fontSize: '13px', lineHeight: '20px' } }, '写入编码约定'),
+            h('div', { key: 'h', style: { color: T.labelTertiary, fontSize: '12px', lineHeight: '18px', marginTop: '2px' } },
+              '新建文件一律 UTF-8 无 BOM、LF；此项决定改写已有文件时是否沿用其原有约定。'),
+          ]),
+          h(Segmented, {
+            key: 'control',
+            value: settings.writeFormat === 'builtin' ? 'builtin' : 'target',
+            disabled: busy || !master,
+            options: [
+              { value: 'target', label: '沿用原文件' },
+              { value: 'builtin', label: '同内置' },
+            ],
+            onChange: (next) => save({ writeFormat: next }),
+          }),
+        ]),
+
+        h('div', { key: 'activity', style: { paddingTop: '12px' } }, [
+          h('div', { key: 'title', style: { display: 'flex', justifyContent: 'space-between', alignItems: 'baseline' } }, [
+            h('span', { key: 't', style: { color: T.label, fontSize: '13px' } }, '最近活动'),
+            h('span', { key: 'c', style: { color: T.labelTertiary, fontSize: '12px' } },
+              `${activity.length} 条 · ${master ? '接管中' : '未启用'}`),
+          ]),
+          activity.length === 0
+            ? h('div', { key: 'empty', style: { color: T.labelTertiary, fontSize: '12px', padding: '8px 0' } },
+              master ? '尚未拦截到调用。' : '启用后这里会显示实际被接管的调用。')
+            : h('ul', {
+              key: 'list',
+              style: { listStyle: 'none', margin: '4px 0 0', padding: '0', maxHeight: '220px', overflowY: 'auto' },
+            }, activity.slice().reverse().map((entry, index) => h(ActivityRow, { key: `${entry.at}-${index}`, entry }))),
+        ]),
+
+        error === null ? null : h('div', {
+          key: 'error',
+          style: { marginTop: '10px', color: T.error, fontSize: '12px', lineHeight: '18px' },
+        }, error),
+
+        h('div', {
+          key: 'path',
+          style: { marginTop: '10px', color: T.labelTertiary, fontSize: '11px', lineHeight: '16px', wordBreak: 'break-all' },
+        }, `设置文件：${settings.path}`),
+      ])
+    }
+
+    return {
+      // `slots` is the only service the panel needs: it renders into the settings page and talks to the
+      // host over plain HTTP, so it does not need the session, the store, or the connection.
+      inject: ['slots'],
+      apply(ctx) {
+        // `inject` waits for the slot to exist; a settings page that is disabled in this profile leaves
+        // the panel simply unregistered rather than throwing during activation.
+        ctx.slots.inject('settings.section', () => ctx.slots.register({
+          name: 'settings.section',
+          id: 'dsh-os',
+          order: 140,
+          label: () => 'DSH OS',
+        }, SettingsSection))
+      },
+    }
+  },
+})

package/cordis.patch.yml

@@ -22,6 +22,30 @@
         scriptDir: src/host/bin
         # Default timeout for a single verb invocation, in milliseconds.
         timeoutMs: 120000
+    # The settings service the panel edits and the takeover reads. It is its own row because BOTH of the
+    # other two need it without owning it: the takeover calls `enabled()` on every intercepted tool call,
+    # and the routes the browser panel talks to mutate the same object.
+    #
+    # It comes BEFORE the takeover row on purpose. The takeover declares `inject: ['dsh-os-settings']`,
+    # which is a hard dependency: a row that loads first would simply stay inactive until the service
+    # appears, and an inactive interception looks exactly like a broken one.
+    - id: dsh-os-settings
+      name: deepseek-coordination/settings
+      config:
+        # Defaults to $DSH_HOME/dsh-os/settings.json, or <package root>/.dsh-os-settings.json when
+        # DSH_HOME is unset. That order matters: the installed package directory is replaced on upgrade,
+        # so a setting stored there would not survive one.
+        # settingsPath: /absolute/path/to/settings.json
+    # The interception itself. It answers the built-in `read`/`write`/`edit`/`pwsh` calls through
+    # dsh-os while the user has the switch on, and calls through to the built-in implementation for
+    # everything else — including on any failure, so takeover can never make a call unanswerable.
+    - id: dsh-os-takeover
+      name: deepseek-coordination/takeover
+      config:
+        timeoutMs: 120000
+        # Must match the `tool-fs` row's `readLimit`: the interception must not apply a different read
+        # window than the built-in tool it replaces.
+        readLimit: 2000
     # The permission consent delegate: the ONLY writer of permission.json. It is a separate row because
     # the scripts must never write the file - there is no write verb in the verb table - so the row
     # that can write it is deliberately a distinct component with its own tools.
@@ -32,3 +56,19 @@
         # durable decisions outside the installed package.
         # permissionPath: /absolute/path/to/permission.json
         auditLimit: 200
+    # The intent-first workflow: start -> clarify -> design -> options -> choose -> execute -> finish.
+    # Its own row because it is its own concern: the rows above make an OS call correct, and this one
+    # makes a request decided before it is executed. It registers the `workflow_plan` tool and a system-prompt
+    # section that is empty until a workflow is started, so a profile that never uses it pays nothing.
+    - id: dsh-os-workflow
+      name: deepseek-coordination/workflow
+      config:
+        # Defaults to $DSH_HOME/dsh-os/workflows, or <package root>/.dsh-os-workflows when DSH_HOME is
+        # unset. The state and every artifact are per session, under their own subdirectory.
+        # workflowRoot: /absolute/path/to/workflows
+        # Records each phase boundary in state.json, so a compaction that follows has a record of what it
+        # may drop. The structural half - detail to disk, one line back - is not optional and not
+        # configurable: it is the reason the feature saves anything.
+        autoCompact: true
+        # Checkpoint entries kept per session.
+        maxCheckpoints: 20

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepseek-coordination",
-  "version": "0.1.2",
+  "version": "0.1.6",
   "private": false,
   "type": "module",
   "description": "Cross-platform atomic OS-interaction surface for the DeepSeek Harness: one argument-stable verb set implemented natively on each OS, with byte-exact charset, BOM and line-ending handling.",
@@ -37,6 +37,10 @@
   "main": "src/plugin/index.js",
   "exports": {
     ".": "./src/plugin/index.js",
+    "./takeover": "./src/plugin/takeover.js",
+    "./settings": "./src/plugin/settings.js",
+    "./workflow": "./src/plugin/workflow.js",
+    "./client": "./client.js",
     "./permission": "./src/permission/index.js",
     "./package.json": "./package.json"
   },
@@ -50,6 +54,12 @@
   "dsh": {
     "bundle": {
       "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-settings"
+      ]
     }
   },
   "files": [
@@ -64,10 +74,14 @@
     "src/host/docs/permission-model.md",
     "src/host/docs/command-original.txt",
     "cordis.patch.yml",
+    "client.js",
     "src/plugin/index.js",
     "src/plugin/invoke.js",
+    "src/plugin/settings.js",
     "src/plugin/takeover.js",
+    "src/plugin/workflow.js",
     "src/permission/index.js",
+    "tools/measure-cache.mjs",
     "README.md"
   ],
   "scripts": {
@@ -79,12 +93,16 @@
     "test:encoding": "powershell -NoLogo -NoProfile -ExecutionPolicy Bypass -File tests/encoding.ps1",
     "test:conformance": "powershell -NoLogo -NoProfile -ExecutionPolicy Bypass -File tests/conformance.ps1",
     "test:plugin": "node tests/plugin.test.mjs",
+    "test:takeover": "node tests/takeover.test.mjs",
     "test:permission": "node tests/permission.test.mjs",
+    "test:workflow": "node tests/workflow.test.mjs",
     "test:bundle": "node tools/verify-bundle.mjs",
     "test:package": "node tools/verify-package.mjs",
     "test:desktop": "bash tests/smoke-desktop-sh.sh",
     "test:load": "node tools/verify-plugin-load.mjs && node tools/verify-editions.mjs",
-    "test:all": "npm run test:conformance && npm run test:encoding && npm run test && npm run test:plugin && npm run test:permission && npm run test:bundle && npm run test:package && npm run test:load && npm run test:desktop",
+    "test:pipeline": "node tools/probe-pipeline.mjs",
+    "measure:cache": "node tools/measure-cache.mjs",
+    "test:all": "npm run test:conformance && npm run test:encoding && npm run test && npm run test:plugin && npm run test:takeover && npm run test:permission && npm run test:workflow && npm run test:bundle && npm run test:package && npm run test:load && npm run test:desktop",
     "selfcheck": "powershell -NoLogo -NoProfile -ExecutionPolicy Bypass -File src/host/bin/dsh-os.ps1 selfcheck"
   },
   "devDependencies": {