dsh-cloudq 0.1.2 → 0.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +47 -45
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -1,67 +1,69 @@
|
|
|
1
1
|
# dsh-cloudq
|
|
2
2
|
|
|
3
|
-
|
|
3
|
+
English | [简体中文](README-zh.md)
|
|
4
4
|
|
|
5
|
-
|
|
5
|
+
CloudQ integration for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness). It adds a CloudQ mode to the Web profile, bundles the `cloudq` skill, and provides CloudQ usage and architecture views, local credential setup, and plugin management.
|
|
6
6
|
|
|
7
|
-
|
|
7
|
+
## Screenshots
|
|
8
8
|
|
|
9
|
-
|
|
10
10
|
|
|
11
|
-
|
|
11
|
+
|
|
12
|
+
|
|
13
|
+
## Requirements
|
|
12
14
|
|
|
13
15
|
- Node.js `>=22.19.0`
|
|
14
|
-
- DeepSeek Harness `0.1.1-rc.2`
|
|
15
|
-
- `dsh plugin`
|
|
16
|
-
-
|
|
17
|
-
- macOS
|
|
16
|
+
- DeepSeek Harness `0.1.1-rc.2` or a compatible newer `0.1.x` release
|
|
17
|
+
- `pnpm` available to the `dsh plugin` command
|
|
18
|
+
- Python 3 available as `python3`
|
|
19
|
+
- macOS or Linux
|
|
18
20
|
|
|
19
|
-
##
|
|
21
|
+
## Install
|
|
20
22
|
|
|
21
23
|
```sh
|
|
22
24
|
dsh plugin --profile web add dsh-cloudq
|
|
23
25
|
```
|
|
24
26
|
|
|
25
|
-
|
|
27
|
+
Restart the Web profile after installation:
|
|
26
28
|
|
|
27
29
|
```sh
|
|
28
30
|
dsh --profile web
|
|
29
31
|
```
|
|
30
32
|
|
|
31
|
-
|
|
33
|
+
Open the URL printed by DSH. The conversation input area and sidebar will expose the CloudQ entry. You can also invoke the bundled skill explicitly with `/cloudq`.
|
|
32
34
|
|
|
33
|
-
##
|
|
35
|
+
## Upgrade and remove
|
|
34
36
|
|
|
35
37
|
```sh
|
|
36
38
|
dsh plugin --profile web update dsh-cloudq
|
|
37
39
|
dsh plugin --profile web remove dsh-cloudq
|
|
38
40
|
```
|
|
39
41
|
|
|
40
|
-
|
|
42
|
+
Restart the Web profile after changing the installed package set.
|
|
41
43
|
|
|
42
|
-
##
|
|
44
|
+
## Credentials
|
|
43
45
|
|
|
44
|
-
|
|
46
|
+
The settings card accepts a Tencent Cloud `SecretId`/`SecretKey` pair.
|
|
45
47
|
|
|
46
|
-
-
|
|
47
|
-
-
|
|
48
|
-
-
|
|
49
|
-
-
|
|
48
|
+
- Credentials are stored locally at `~/.tencent-cloudq/credential.json` with owner-only permissions.
|
|
49
|
+
- Secret values are sent to Python helpers through standard input, never command-line arguments.
|
|
50
|
+
- Browser APIs return only credential state and masked identifiers; local credential paths and secret values are not returned.
|
|
51
|
+
- Use the logout action to remove the stored credential.
|
|
50
52
|
|
|
51
|
-
|
|
53
|
+
Follow least-privilege: grant only the permissions required for the CloudQ operations you intend to run. The bundled skill can invoke read and write cloud-management operations; review each action before approving it.
|
|
52
54
|
|
|
53
|
-
##
|
|
55
|
+
## Security model
|
|
54
56
|
|
|
55
|
-
- Host
|
|
56
|
-
- JSON
|
|
57
|
-
- Python
|
|
58
|
-
-
|
|
59
|
-
-
|
|
60
|
-
- npm
|
|
57
|
+
- Host APIs accept only loopback, same-origin requests.
|
|
58
|
+
- JSON request bodies are limited to 64 KiB.
|
|
59
|
+
- Python helper output is bounded, and unexpected internal errors are not returned to the browser.
|
|
60
|
+
- Remote values are inserted with DOM text nodes rather than HTML injection.
|
|
61
|
+
- Download links require HTTPS.
|
|
62
|
+
- No credentials, tokens, or local environment files are included in the npm package.
|
|
61
63
|
|
|
62
|
-
|
|
64
|
+
Report security issues through [GitHub Issues](https://github.com/TencentCloud/cloudq-for-dsh/issues) without including live credentials.
|
|
63
65
|
|
|
64
|
-
##
|
|
66
|
+
## Development
|
|
65
67
|
|
|
66
68
|
```sh
|
|
67
69
|
pnpm install
|
|
@@ -73,28 +75,28 @@ pnpm run check:client
|
|
|
73
75
|
npm pack --dry-run --registry=https://registry.npmjs.org/
|
|
74
76
|
```
|
|
75
77
|
|
|
76
|
-
npm
|
|
78
|
+
The npm package ships prebuilt Host and Web client artifacts, the bundle patch, the runtime logo, and the bundled skill. Registry installation runs no build scripts.
|
|
77
79
|
|
|
78
|
-
##
|
|
80
|
+
## Repository layout
|
|
79
81
|
|
|
80
82
|
```text
|
|
81
|
-
src/ Host
|
|
82
|
-
skills/cloudq/
|
|
83
|
-
assets/cloudq.png Host
|
|
84
|
-
scripts/
|
|
85
|
-
tests/
|
|
86
|
-
cordis.patch.yml DSH
|
|
83
|
+
src/ Host and Web client source
|
|
84
|
+
skills/cloudq/ Bundled CloudQ skill and Python helpers
|
|
85
|
+
assets/cloudq.png Runtime logo served by the Host
|
|
86
|
+
scripts/ Build and release checks
|
|
87
|
+
tests/ Unit, integration, and package-contract tests
|
|
88
|
+
cordis.patch.yml DSH bundle layer
|
|
87
89
|
```
|
|
88
90
|
|
|
89
|
-
##
|
|
91
|
+
## Release
|
|
90
92
|
|
|
91
|
-
|
|
93
|
+
Source is reviewed and versioned in [TencentCloud/cloudq-for-dsh](https://github.com/TencentCloud/cloudq-for-dsh). An npm version is published to the official registry only after the repository checks and the package-install smoke test pass.
|
|
92
94
|
|
|
93
|
-
##
|
|
95
|
+
## More documentation
|
|
94
96
|
|
|
95
|
-
-
|
|
96
|
-
-
|
|
97
|
+
- Changelog: [`CHANGELOG.md`](CHANGELOG.md)
|
|
98
|
+
- Development & maintenance guide: [`DEVELOPMENT.md`](DEVELOPMENT.md)
|
|
97
99
|
|
|
98
|
-
##
|
|
100
|
+
## License
|
|
99
101
|
|
|
100
|
-
|
|
102
|
+
MIT. See [`LICENSE`](LICENSE).
|