dsh-calibguard 0.2.1 → 0.2.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.en.md CHANGED
@@ -4,7 +4,8 @@ English | [中文](README.md)
4
4
 
5
5
  ![license](https://img.shields.io/badge/license-MIT-green)
6
6
  ![node](https://img.shields.io/badge/node-%E2%89%A520-blue)
7
- ![tests](https://img.shields.io/badge/tests-87%20passed-brightgreen)
7
+ ![tests](https://img.shields.io/badge/tests-95%20passed-brightgreen)
8
+ [![npm](https://img.shields.io/npm/v/dsh-calibguard.svg)](https://www.npmjs.com/package/dsh-calibguard)
8
9
 
9
10
  Plugs the [CalibGuard](https://github.com/P-436/CG) file-security auditing engine into
10
11
  **DeepSeek Harness (DSH)**: the agent screens untrusted code *locally* before running or installing it,
@@ -91,19 +92,18 @@ DSH desktop → Settings → **Add plugin**, paste any one of the following (res
91
92
  | Paste | Example | Notes |
92
93
  |---|---|---|
93
94
  | **GitHub repository URL** (recommended) | `https://github.com/maomitgd2006/DSH_CG` | Fetches the source and registers the bundle in the current profile |
94
- | **Local directory path** | `J:\CG\DSH_CG` | For a local clone / extracted copy |
95
- | Package name | `dsh-calibguard` | Requires an npm release; **not published to npm yet** (see below) |
95
+ | **Local directory path** | `<path to this package>` (e.g. `/opt/dsh-calibguard`) | For a local clone / extracted copy |
96
+ | Package name | `dsh-calibguard` | ✅ **Published on npm** (latest v0.2.1); just enter the package name |
96
97
 
97
98
  > Equivalent CLI (verified: after install DSH automatically appends the package to the profile's
98
99
  > `dsh.profile.bundles`):
99
100
  >
100
101
  > ```powershell
101
102
  > dsh plugin --profile <profile> add https://github.com/maomitgd2006/DSH_CG
102
- > dsh plugin --profile <profile> add file:J:\CG\DSH_CG
103
+ > dsh plugin --profile <profile> add file:<absolute path to this package>
103
104
  > ```
104
105
  >
105
- > Package-name installs require an npm release: the maintainer runs `npm login` then `npm publish`
106
- > (`package.json` already has `files`/`publishConfig`; the name `dsh-calibguard` is currently free on npm).
106
+ > Published on npm: <https://www.npmjs.com/package/dsh-calibguard> (`npm i dsh-calibguard` also works).
107
107
 
108
108
  **Whichever way you install it**, the first run prepares the engine automatically (next section) — no manual setup needed.
109
109
 
package/README.md CHANGED
@@ -4,12 +4,13 @@
4
4
 
5
5
  ![license](https://img.shields.io/badge/license-MIT-green)
6
6
  ![node](https://img.shields.io/badge/node-%E2%89%A520-blue)
7
- ![tests](https://img.shields.io/badge/tests-87%20passed-brightgreen)
7
+ ![tests](https://img.shields.io/badge/tests-95%20passed-brightgreen)
8
+ [![npm](https://img.shields.io/npm/v/dsh-calibguard.svg)](https://www.npmjs.com/package/dsh-calibguard)
8
9
 
9
10
  把 [CalibGuard](https://github.com/P-436/CG) 的文件安全审计引擎接进 **DeepSeek Harness(DSH)**:
10
11
  让 AI 在执行 / 安装来路不明的代码之前先过一道**本地**门控,你也可以在侧边栏面板里直接拖文件审计。
11
12
 
12
- - 🔒 **默认离线**:本地 CodeBERT + Platt 校准给出可解释的「恶意概率」,文件内容不出本机;
13
+ - 🔒 **默认离线**:本地 CodeBERT + Platt 校准给出可解释的「恶意概率」,文件内容不会上传;
13
14
  - ☁️ **灰区才上云**:只有本地拿不准的文件才发一次云端复核(可关闭);
14
15
  - 🧭 **四档结论**:放行 / 可疑 / 拦截 / 转人工,附证据与 Markdown 报告;
15
16
  - 🧰 **两种用法**:AI 工具调用(`calibguard_audit` / `calibguard_status`)+ 浏览器面板;
@@ -83,18 +84,17 @@ DSH 桌面版 → 设置 → **添加插件**,输入框里填以下任意一
83
84
  | 填什么 | 示例 | 说明 |
84
85
  |---|---|---|
85
86
  | **GitHub 仓库地址**(推荐) | `https://github.com/maomitgd2006/DSH_CG` | 自动拉取源码并登记到当前 profile 的 bundle |
86
- | **本地目录路径** | `J:\CG\DSH_CG` | 已 clone / 解压到本机时用 |
87
- | 包名 | `dsh-calibguard` | 需要 npm 上已发布;**当前尚未发布到 npm**(见下) |
87
+ | **本地目录路径** | `<你的插件目录>`(例:`D:\code\dsh-calibguard`) | 已 clone / 解压到本地时用 |
88
+ | 包名 | `dsh-calibguard` | ✅ **已发布到 npm**(最新 v0.2.1);直接输包名即可 |
88
89
 
89
90
  > 等价命令行(已实测:安装后 DSH 会自动把包加进 profile 的 `dsh.profile.bundles`):
90
91
  >
91
92
  > ```powershell
92
93
  > dsh plugin --profile <profile> add https://github.com/maomitgd2006/DSH_CG
93
- > dsh plugin --profile <profile> add file:J:\CG\DSH_CG
94
+ > dsh plugin --profile <profile> add file:<本包绝对路径>
94
95
  > ```
95
96
  >
96
- > 包名安装的前提是发布到 npm:维护者执行 `npm login` 后 `npm publish`(`package.json` 已配好
97
- > `files` 与 `publishConfig`,包名 `dsh-calibguard` 当前在 npm 上未被占用)。
97
+ > 包名已发布:<https://www.npmjs.com/package/dsh-calibguard>(`npm i dsh-calibguard` 亦可)。
98
98
 
99
99
  **无论用哪种方式**,装好后首次运行都不需要手动装引擎——插件会自动准备(见下一节)。
100
100
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "dsh-calibguard",
3
- "version": "0.2.1",
3
+ "version": "0.2.3",
4
4
  "publishConfig": {
5
5
  "access": "public"
6
6
  },