dsh-code-review-graph 0.0.0-stage → 0.1.1

package/dist/refactor.js

@@ -0,0 +1,68 @@
+// src/safety.ts
+import { realpath, stat, lstat, readdir } from "node:fs/promises";
+import { isAbsolute, relative, resolve, sep, dirname, basename, join } from "node:path";
+import { createHash } from "node:crypto";
+var sha256 = (bytes) => createHash("sha256").update(bytes).digest("hex");
+function contained(root, path) {
+  const part = relative(root, path);
+  return part === "" || !isAbsolute(part) && part !== ".." && !part.startsWith(`..${sep}`);
+}
+async function checkedPath(root, value, allowMissing = false) {
+  const candidate = resolve(root, value);
+  if (!contained(root, candidate)) throw new Error("Path is outside the authorized repository");
+  let current = candidate;
+  const suffix = [];
+  while (allowMissing && !await lstat(current).then(() => true, () => false)) {
+    suffix.unshift(basename(current));
+    current = dirname(current);
+  }
+  const canonical = join(await realpath(current), ...suffix);
+  if (!contained(root, canonical)) throw new Error("Symlink escapes the authorized repository");
+  return canonical;
+}
+
+// src/refactor.ts
+async function commitPlan(ctx, exec, root, plan) {
+  if (!exec.agent) throw new Error("Refactor requires a session-owned agent");
+  const policy = ctx.sandboxPolicy.resolve({ session: exec.agent.session });
+  if (policy.mode === "read-only") throw new Error("Refactor is denied by read-only policy");
+  if (!Array.isArray(plan.files)) throw new Error("Invalid edit plan");
+  const prepared = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const file of plan.files) {
+    if (typeof file.path !== "string" || !/^[a-f0-9]{64}$/.test(file.before_sha256) || typeof file.after_content !== "string" || !Number.isInteger(file.edit_count) || file.edit_count < 0) throw new Error("Invalid edit plan file");
+    exec.signal.throwIfAborted();
+    const path = await checkedPath(root, file.path);
+    if (seen.has(path)) throw new Error("Duplicate edit target");
+    seen.add(path);
+    const target = await ctx.fs.resolve(path, { cwd: root, signal: exec.signal });
+    const before = await ctx.fs.stat(target, exec.signal);
+    if (!before || before.type !== "file") throw new Error("Edit target is not a regular file");
+    const bytes = await ctx.fs.readBytes(target, exec.signal, 32 * 1024 * 1024);
+    if (sha256(bytes) !== file.before_sha256) throw new Error(`Stale edit plan: ${path}`);
+    const after = await ctx.fs.stat(target, exec.signal);
+    if (after?.version !== before.version) throw new Error(`File changed during preflight: ${path}`);
+    const intent = await ctx.waterfall("fs/write-intent", target, exec, () => void 0);
+    if (intent && (intent.kind !== "replaceIfVersion" || intent.version !== before.version)) throw new Error(`File intent disagrees with edit plan: ${path}`);
+    prepared.push({ file, path, target, original: Buffer.from(bytes).toString("utf8"), intent: intent ?? { kind: "replaceIfVersion", version: before.version } });
+  }
+  const applied = [];
+  const recovery = [];
+  try {
+    for (const item of prepared) {
+      exec.signal.throwIfAborted();
+      await checkedPath(root, item.path);
+      const outcome = await ctx.fs.writeText(item.target, item.file.after_content, item.intent, exec.signal, policy);
+      ctx.emit("fs/observed", item.target, { kind: "present", version: outcome.version }, exec);
+      applied.push(item.path);
+      recovery.push({ path: item.path, before_sha256: sha256(item.file.after_content), after_content: item.original, edit_count: item.file.edit_count });
+    }
+  } catch (error) {
+    return { status: "partial_failure", error: String(error), files_modified: applied, recovery_patch: { files: recovery } };
+  }
+  return { status: "ok", files_modified: applied, edits_applied: plan.files.reduce((n, f) => n + f.edit_count, 0) };
+}
+export {
+  commitPlan
+};
+//# sourceMappingURL=refactor.js.map

package/dist/refactor.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/safety.ts", "../src/refactor.ts"],
+  "sourcesContent": ["import { realpath, stat, lstat, readdir } from 'node:fs/promises';\nimport { isAbsolute, relative, resolve, sep, dirname, basename, join } from 'node:path';\nimport { createHash } from 'node:crypto';\n\nexport const sha256 = (bytes: Uint8Array | string): string => createHash('sha256').update(bytes).digest('hex');\n\nexport function contained(root: string, path: string): boolean {\n  const part = relative(root, path);\n  return part === '' || (!isAbsolute(part) && part !== '..' && !part.startsWith(`..${sep}`));\n}\n\nexport async function checkedPath(root: string, value: string, allowMissing = false): Promise<string> {\n  const candidate = resolve(root, value);\n  if (!contained(root, candidate)) throw new Error('Path is outside the authorized repository');\n  let current = candidate;\n  const suffix: string[] = [];\n  while (allowMissing && !await lstat(current).then(() => true, () => false)) {\n    suffix.unshift(basename(current)); current = dirname(current);\n  }\n  const canonical = join(await realpath(current), ...suffix);\n  if (!contained(root, canonical)) throw new Error('Symlink escapes the authorized repository');\n  return canonical;\n}\n\nexport async function repository(cwd: string | undefined): Promise<string> {\n  if (!cwd || !isAbsolute(cwd)) throw new Error('This session has no local absolute workspace');\n  const root = await realpath(cwd);\n  if (!(await stat(root)).isDirectory()) throw new Error('Workspace is not a directory');\n  for (const marker of ['.git', '.svn']) {\n    if (await stat(resolve(root, marker)).then(() => true, () => false)) return root;\n  }\n  throw new Error('Select a Git or SVN repository before using the graph');\n}\n\nexport function scrubEnv(env: NodeJS.ProcessEnv): Record<string, string> {\n  return { ...Object.fromEntries(Object.entries(env).filter(([key, value]) => value !== undefined && !/KEY|PASSWORD|SECRET|TOKEN|^(DSH|CRG|OPENAI|GOOGLE|GEMINI|MINIMAX|VOYAGE|HF)_/i.test(key))), HF_HUB_OFFLINE: '1', TRANSFORMERS_OFFLINE: '1', HF_HUB_DISABLE_TELEMETRY: '1' } as Record<string, string>;\n}\n\nexport async function checkedData(root: string): Promise<void> {\n  const dir = resolve(root, '.code-review-graph');\n  if (!await lstat(dir).then(() => true, () => false)) return;\n  await checkedPath(root, dir);\n  const entries = await readdir(dir, { withFileTypes: true, recursive: true });\n  for (const entry of entries) {\n    if (entry.isSymbolicLink()) await checkedPath(root, join(entry.parentPath, entry.name));\n  }\n}\n", "import type { Context } from '@deepseek-ai/cordis';\nimport type { ToolRunContext } from '@deepseek-ai/dsh-tools';\nimport type {} from '@deepseek-ai/dsh-fs';\nimport type {} from '@deepseek-ai/dsh-sandbox-policy';\nimport { checkedPath, sha256 } from './safety.ts';\n\nexport interface EditPlan { files: { path: string; before_sha256: string; after_content: string; edit_count: number }[] }\nexport async function commitPlan(ctx: Context, exec: ToolRunContext, root: string, plan: EditPlan) {\n  if (!exec.agent) throw new Error('Refactor requires a session-owned agent');\n  const policy = ctx.sandboxPolicy.resolve({ session: exec.agent.session });\n  if (policy.mode === 'read-only') throw new Error('Refactor is denied by read-only policy');\n  if (!Array.isArray(plan.files)) throw new Error('Invalid edit plan');\n  const prepared = [];\n  const seen = new Set<string>();\n  for (const file of plan.files) {\n    if (typeof file.path !== 'string' || !/^[a-f0-9]{64}$/.test(file.before_sha256) || typeof file.after_content !== 'string' || !Number.isInteger(file.edit_count) || file.edit_count < 0) throw new Error('Invalid edit plan file');\n    exec.signal.throwIfAborted();\n    const path = await checkedPath(root, file.path);\n    if (seen.has(path)) throw new Error('Duplicate edit target');\n    seen.add(path);\n    const target = await ctx.fs.resolve(path, { cwd: root, signal: exec.signal });\n    const before = await ctx.fs.stat(target, exec.signal);\n    if (!before || before.type !== 'file') throw new Error('Edit target is not a regular file');\n    const bytes = await ctx.fs.readBytes(target, exec.signal, 32 * 1024 * 1024);\n    if (sha256(bytes) !== file.before_sha256) throw new Error(`Stale edit plan: ${path}`);\n    const after = await ctx.fs.stat(target, exec.signal);\n    if (after?.version !== before.version) throw new Error(`File changed during preflight: ${path}`);\n    const intent = await ctx.waterfall('fs/write-intent', target, exec, () => undefined);\n    if (intent && (intent.kind !== 'replaceIfVersion' || intent.version !== before.version)) throw new Error(`File intent disagrees with edit plan: ${path}`);\n    prepared.push({ file, path, target, original: Buffer.from(bytes).toString('utf8'), intent: intent ?? { kind: 'replaceIfVersion' as const, version: before.version } });\n  }\n  const applied: string[] = [];\n  const recovery: EditPlan['files'] = [];\n  try {\n    for (const item of prepared) {\n      exec.signal.throwIfAborted();\n      await checkedPath(root, item.path);\n      const outcome = await ctx.fs.writeText(item.target, item.file.after_content, item.intent, exec.signal, policy);\n      ctx.emit('fs/observed', item.target, { kind: 'present', version: outcome.version }, exec);\n      applied.push(item.path);\n      recovery.push({ path: item.path, before_sha256: sha256(item.file.after_content), after_content: item.original, edit_count: item.file.edit_count });\n    }\n  } catch (error) {\n    // Return the complete recovery patch through the tool output; never silently roll back a later edit.\n    return { status: 'partial_failure', error: String(error), files_modified: applied, recovery_patch: { files: recovery } };\n  }\n  return { status: 'ok', files_modified: applied, edits_applied: plan.files.reduce((n, f) => n + f.edit_count, 0) };\n}\n"],
+  "mappings": ";AAAA,SAAS,UAAU,MAAM,OAAO,eAAe;AAC/C,SAAS,YAAY,UAAU,SAAS,KAAK,SAAS,UAAU,YAAY;AAC5E,SAAS,kBAAkB;AAEpB,IAAM,SAAS,CAAC,UAAuC,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AAEtG,SAAS,UAAU,MAAc,MAAuB;AAC7D,QAAM,OAAO,SAAS,MAAM,IAAI;AAChC,SAAO,SAAS,MAAO,CAAC,WAAW,IAAI,KAAK,SAAS,QAAQ,CAAC,KAAK,WAAW,KAAK,GAAG,EAAE;AAC1F;AAEA,eAAsB,YAAY,MAAc,OAAe,eAAe,OAAwB;AACpG,QAAM,YAAY,QAAQ,MAAM,KAAK;AACrC,MAAI,CAAC,UAAU,MAAM,SAAS,EAAG,OAAM,IAAI,MAAM,2CAA2C;AAC5F,MAAI,UAAU;AACd,QAAM,SAAmB,CAAC;AAC1B,SAAO,gBAAgB,CAAC,MAAM,MAAM,OAAO,EAAE,KAAK,MAAM,MAAM,MAAM,KAAK,GAAG;AAC1E,WAAO,QAAQ,SAAS,OAAO,CAAC;AAAG,cAAU,QAAQ,OAAO;AAAA,EAC9D;AACA,QAAM,YAAY,KAAK,MAAM,SAAS,OAAO,GAAG,GAAG,MAAM;AACzD,MAAI,CAAC,UAAU,MAAM,SAAS,EAAG,OAAM,IAAI,MAAM,2CAA2C;AAC5F,SAAO;AACT;;;ACfA,eAAsB,WAAW,KAAc,MAAsB,MAAc,MAAgB;AACjG,MAAI,CAAC,KAAK,MAAO,OAAM,IAAI,MAAM,yCAAyC;AAC1E,QAAM,SAAS,IAAI,cAAc,QAAQ,EAAE,SAAS,KAAK,MAAM,QAAQ,CAAC;AACxE,MAAI,OAAO,SAAS,YAAa,OAAM,IAAI,MAAM,wCAAwC;AACzF,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,EAAG,OAAM,IAAI,MAAM,mBAAmB;AACnE,QAAM,WAAW,CAAC;AAClB,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,QAAQ,KAAK,OAAO;AAC7B,QAAI,OAAO,KAAK,SAAS,YAAY,CAAC,iBAAiB,KAAK,KAAK,aAAa,KAAK,OAAO,KAAK,kBAAkB,YAAY,CAAC,OAAO,UAAU,KAAK,UAAU,KAAK,KAAK,aAAa,EAAG,OAAM,IAAI,MAAM,wBAAwB;AAChO,SAAK,OAAO,eAAe;AAC3B,UAAM,OAAO,MAAM,YAAY,MAAM,KAAK,IAAI;AAC9C,QAAI,KAAK,IAAI,IAAI,EAAG,OAAM,IAAI,MAAM,uBAAuB;AAC3D,SAAK,IAAI,IAAI;AACb,UAAM,SAAS,MAAM,IAAI,GAAG,QAAQ,MAAM,EAAE,KAAK,MAAM,QAAQ,KAAK,OAAO,CAAC;AAC5E,UAAM,SAAS,MAAM,IAAI,GAAG,KAAK,QAAQ,KAAK,MAAM;AACpD,QAAI,CAAC,UAAU,OAAO,SAAS,OAAQ,OAAM,IAAI,MAAM,mCAAmC;AAC1F,UAAM,QAAQ,MAAM,IAAI,GAAG,UAAU,QAAQ,KAAK,QAAQ,KAAK,OAAO,IAAI;AAC1E,QAAI,OAAO,KAAK,MAAM,KAAK,cAAe,OAAM,IAAI,MAAM,oBAAoB,IAAI,EAAE;AACpF,UAAM,QAAQ,MAAM,IAAI,GAAG,KAAK,QAAQ,KAAK,MAAM;AACnD,QAAI,OAAO,YAAY,OAAO,QAAS,OAAM,IAAI,MAAM,kCAAkC,IAAI,EAAE;AAC/F,UAAM,SAAS,MAAM,IAAI,UAAU,mBAAmB,QAAQ,MAAM,MAAM,MAAS;AACnF,QAAI,WAAW,OAAO,SAAS,sBAAsB,OAAO,YAAY,OAAO,SAAU,OAAM,IAAI,MAAM,yCAAyC,IAAI,EAAE;AACxJ,aAAS,KAAK,EAAE,MAAM,MAAM,QAAQ,UAAU,OAAO,KAAK,KAAK,EAAE,SAAS,MAAM,GAAG,QAAQ,UAAU,EAAE,MAAM,oBAA6B,SAAS,OAAO,QAAQ,EAAE,CAAC;AAAA,EACvK;AACA,QAAM,UAAoB,CAAC;AAC3B,QAAM,WAA8B,CAAC;AACrC,MAAI;AACF,eAAW,QAAQ,UAAU;AAC3B,WAAK,OAAO,eAAe;AAC3B,YAAM,YAAY,MAAM,KAAK,IAAI;AACjC,YAAM,UAAU,MAAM,IAAI,GAAG,UAAU,KAAK,QAAQ,KAAK,KAAK,eAAe,KAAK,QAAQ,KAAK,QAAQ,MAAM;AAC7G,UAAI,KAAK,eAAe,KAAK,QAAQ,EAAE,MAAM,WAAW,SAAS,QAAQ,QAAQ,GAAG,IAAI;AACxF,cAAQ,KAAK,KAAK,IAAI;AACtB,eAAS,KAAK,EAAE,MAAM,KAAK,MAAM,eAAe,OAAO,KAAK,KAAK,aAAa,GAAG,eAAe,KAAK,UAAU,YAAY,KAAK,KAAK,WAAW,CAAC;AAAA,IACnJ;AAAA,EACF,SAAS,OAAO;AAEd,WAAO,EAAE,QAAQ,mBAAmB,OAAO,OAAO,KAAK,GAAG,gBAAgB,SAAS,gBAAgB,EAAE,OAAO,SAAS,EAAE;AAAA,EACzH;AACA,SAAO,EAAE,QAAQ,MAAM,gBAAgB,SAAS,eAAe,KAAK,MAAM,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,YAAY,CAAC,EAAE;AAClH;",
+  "names": []
+}

package/dist/safety.js

@@ -0,0 +1,52 @@
+// src/safety.ts
+import { realpath, stat, lstat, readdir } from "node:fs/promises";
+import { isAbsolute, relative, resolve, sep, dirname, basename, join } from "node:path";
+import { createHash } from "node:crypto";
+var sha256 = (bytes) => createHash("sha256").update(bytes).digest("hex");
+function contained(root, path) {
+  const part = relative(root, path);
+  return part === "" || !isAbsolute(part) && part !== ".." && !part.startsWith(`..${sep}`);
+}
+async function checkedPath(root, value, allowMissing = false) {
+  const candidate = resolve(root, value);
+  if (!contained(root, candidate)) throw new Error("Path is outside the authorized repository");
+  let current = candidate;
+  const suffix = [];
+  while (allowMissing && !await lstat(current).then(() => true, () => false)) {
+    suffix.unshift(basename(current));
+    current = dirname(current);
+  }
+  const canonical = join(await realpath(current), ...suffix);
+  if (!contained(root, canonical)) throw new Error("Symlink escapes the authorized repository");
+  return canonical;
+}
+async function repository(cwd) {
+  if (!cwd || !isAbsolute(cwd)) throw new Error("This session has no local absolute workspace");
+  const root = await realpath(cwd);
+  if (!(await stat(root)).isDirectory()) throw new Error("Workspace is not a directory");
+  for (const marker of [".git", ".svn"]) {
+    if (await stat(resolve(root, marker)).then(() => true, () => false)) return root;
+  }
+  throw new Error("Select a Git or SVN repository before using the graph");
+}
+function scrubEnv(env) {
+  return { ...Object.fromEntries(Object.entries(env).filter(([key, value]) => value !== void 0 && !/KEY|PASSWORD|SECRET|TOKEN|^(DSH|CRG|OPENAI|GOOGLE|GEMINI|MINIMAX|VOYAGE|HF)_/i.test(key))), HF_HUB_OFFLINE: "1", TRANSFORMERS_OFFLINE: "1", HF_HUB_DISABLE_TELEMETRY: "1" };
+}
+async function checkedData(root) {
+  const dir = resolve(root, ".code-review-graph");
+  if (!await lstat(dir).then(() => true, () => false)) return;
+  await checkedPath(root, dir);
+  const entries = await readdir(dir, { withFileTypes: true, recursive: true });
+  for (const entry of entries) {
+    if (entry.isSymbolicLink()) await checkedPath(root, join(entry.parentPath, entry.name));
+  }
+}
+export {
+  checkedData,
+  checkedPath,
+  contained,
+  repository,
+  scrubEnv,
+  sha256
+};
+//# sourceMappingURL=safety.js.map

package/dist/safety.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/safety.ts"],
+  "sourcesContent": ["import { realpath, stat, lstat, readdir } from 'node:fs/promises';\nimport { isAbsolute, relative, resolve, sep, dirname, basename, join } from 'node:path';\nimport { createHash } from 'node:crypto';\n\nexport const sha256 = (bytes: Uint8Array | string): string => createHash('sha256').update(bytes).digest('hex');\n\nexport function contained(root: string, path: string): boolean {\n  const part = relative(root, path);\n  return part === '' || (!isAbsolute(part) && part !== '..' && !part.startsWith(`..${sep}`));\n}\n\nexport async function checkedPath(root: string, value: string, allowMissing = false): Promise<string> {\n  const candidate = resolve(root, value);\n  if (!contained(root, candidate)) throw new Error('Path is outside the authorized repository');\n  let current = candidate;\n  const suffix: string[] = [];\n  while (allowMissing && !await lstat(current).then(() => true, () => false)) {\n    suffix.unshift(basename(current)); current = dirname(current);\n  }\n  const canonical = join(await realpath(current), ...suffix);\n  if (!contained(root, canonical)) throw new Error('Symlink escapes the authorized repository');\n  return canonical;\n}\n\nexport async function repository(cwd: string | undefined): Promise<string> {\n  if (!cwd || !isAbsolute(cwd)) throw new Error('This session has no local absolute workspace');\n  const root = await realpath(cwd);\n  if (!(await stat(root)).isDirectory()) throw new Error('Workspace is not a directory');\n  for (const marker of ['.git', '.svn']) {\n    if (await stat(resolve(root, marker)).then(() => true, () => false)) return root;\n  }\n  throw new Error('Select a Git or SVN repository before using the graph');\n}\n\nexport function scrubEnv(env: NodeJS.ProcessEnv): Record<string, string> {\n  return { ...Object.fromEntries(Object.entries(env).filter(([key, value]) => value !== undefined && !/KEY|PASSWORD|SECRET|TOKEN|^(DSH|CRG|OPENAI|GOOGLE|GEMINI|MINIMAX|VOYAGE|HF)_/i.test(key))), HF_HUB_OFFLINE: '1', TRANSFORMERS_OFFLINE: '1', HF_HUB_DISABLE_TELEMETRY: '1' } as Record<string, string>;\n}\n\nexport async function checkedData(root: string): Promise<void> {\n  const dir = resolve(root, '.code-review-graph');\n  if (!await lstat(dir).then(() => true, () => false)) return;\n  await checkedPath(root, dir);\n  const entries = await readdir(dir, { withFileTypes: true, recursive: true });\n  for (const entry of entries) {\n    if (entry.isSymbolicLink()) await checkedPath(root, join(entry.parentPath, entry.name));\n  }\n}\n"],
+  "mappings": ";AAAA,SAAS,UAAU,MAAM,OAAO,eAAe;AAC/C,SAAS,YAAY,UAAU,SAAS,KAAK,SAAS,UAAU,YAAY;AAC5E,SAAS,kBAAkB;AAEpB,IAAM,SAAS,CAAC,UAAuC,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AAEtG,SAAS,UAAU,MAAc,MAAuB;AAC7D,QAAM,OAAO,SAAS,MAAM,IAAI;AAChC,SAAO,SAAS,MAAO,CAAC,WAAW,IAAI,KAAK,SAAS,QAAQ,CAAC,KAAK,WAAW,KAAK,GAAG,EAAE;AAC1F;AAEA,eAAsB,YAAY,MAAc,OAAe,eAAe,OAAwB;AACpG,QAAM,YAAY,QAAQ,MAAM,KAAK;AACrC,MAAI,CAAC,UAAU,MAAM,SAAS,EAAG,OAAM,IAAI,MAAM,2CAA2C;AAC5F,MAAI,UAAU;AACd,QAAM,SAAmB,CAAC;AAC1B,SAAO,gBAAgB,CAAC,MAAM,MAAM,OAAO,EAAE,KAAK,MAAM,MAAM,MAAM,KAAK,GAAG;AAC1E,WAAO,QAAQ,SAAS,OAAO,CAAC;AAAG,cAAU,QAAQ,OAAO;AAAA,EAC9D;AACA,QAAM,YAAY,KAAK,MAAM,SAAS,OAAO,GAAG,GAAG,MAAM;AACzD,MAAI,CAAC,UAAU,MAAM,SAAS,EAAG,OAAM,IAAI,MAAM,2CAA2C;AAC5F,SAAO;AACT;AAEA,eAAsB,WAAW,KAA0C;AACzE,MAAI,CAAC,OAAO,CAAC,WAAW,GAAG,EAAG,OAAM,IAAI,MAAM,8CAA8C;AAC5F,QAAM,OAAO,MAAM,SAAS,GAAG;AAC/B,MAAI,EAAE,MAAM,KAAK,IAAI,GAAG,YAAY,EAAG,OAAM,IAAI,MAAM,8BAA8B;AACrF,aAAW,UAAU,CAAC,QAAQ,MAAM,GAAG;AACrC,QAAI,MAAM,KAAK,QAAQ,MAAM,MAAM,CAAC,EAAE,KAAK,MAAM,MAAM,MAAM,KAAK,EAAG,QAAO;AAAA,EAC9E;AACA,QAAM,IAAI,MAAM,uDAAuD;AACzE;AAEO,SAAS,SAAS,KAAgD;AACvE,SAAO,EAAE,GAAG,OAAO,YAAY,OAAO,QAAQ,GAAG,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,MAAM,UAAU,UAAa,CAAC,gFAAgF,KAAK,GAAG,CAAC,CAAC,GAAG,gBAAgB,KAAK,sBAAsB,KAAK,0BAA0B,IAAI;AACjR;AAEA,eAAsB,YAAY,MAA6B;AAC7D,QAAM,MAAM,QAAQ,MAAM,oBAAoB;AAC9C,MAAI,CAAC,MAAM,MAAM,GAAG,EAAE,KAAK,MAAM,MAAM,MAAM,KAAK,EAAG;AACrD,QAAM,YAAY,MAAM,GAAG;AAC3B,QAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,MAAM,WAAW,KAAK,CAAC;AAC3E,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,eAAe,EAAG,OAAM,YAAY,MAAM,KAAK,MAAM,YAAY,MAAM,IAAI,CAAC;AAAA,EACxF;AACF;",
+  "names": []
+}

package/dist/setup.js

@@ -0,0 +1,78 @@
+#!/usr/bin/env node
+
+// src/setup.ts
+import { spawn } from "node:child_process";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+var environment = join(process.env.DSH_HOME ?? join(homedir(), ".dsh"), "code-review-graph", "engine");
+var pythonIn = (dir) => join(dir, process.platform === "win32" ? "Scripts/python.exe" : "bin/python");
+async function command(exe, args, quiet = false) {
+  await new Promise((resolve2, reject) => {
+    const child = spawn(exe, args, { stdio: quiet ? "ignore" : "inherit", windowsHide: true });
+    child.on("error", reject);
+    child.on("exit", (code) => code === 0 ? resolve2() : reject(new Error(`${exe} exited ${code}`)));
+  });
+}
+async function prepare(source, python) {
+  const engine = JSON.parse(await readFile(new URL("../engine.json", import.meta.url), "utf8"));
+  const pinned = source ?? engine.source;
+  const stamp = join(environment, "dsh-crg-source.json");
+  if (await readFile(stamp, "utf8").then((value) => JSON.parse(value).source === pinned, () => false)) {
+    try {
+      await command(pythonIn(environment), ["-c", "from code_review_graph.refactor import get_refactor_edit_plan"], true);
+      console.log("CRG engine is already prepared.");
+      return;
+    } catch {
+    }
+  }
+  await mkdir(environment, { recursive: true });
+  let uv = false;
+  try {
+    await command("uv", ["--version"], true);
+    uv = true;
+  } catch {
+  }
+  if (uv && !python) {
+    await command("uv", ["venv", "--allow-existing", "--python", ">=3.10", environment]);
+    await command("uv", ["pip", "install", "--python", pythonIn(environment), pinned]);
+  } else {
+    let selected;
+    for (const candidate of python ? [{ exe: python, args: [] }] : [{ exe: "python3", args: [] }, { exe: "python", args: [] }, { exe: "py", args: ["-3"] }]) {
+      try {
+        await command(candidate.exe, [...candidate.args, "-c", "import sys; assert sys.version_info >= (3,10)"], true);
+        selected = candidate;
+        break;
+      } catch {
+      }
+    }
+    if (!selected) throw new Error("Install uv or real Python 3.10+; Windows Store aliases are not a Python runtime.");
+    await command(selected.exe, [...selected.args, "-m", "venv", environment]);
+    await command(pythonIn(environment), ["-m", "pip", "install", pinned]);
+  }
+  await command(pythonIn(environment), ["-c", "from code_review_graph.refactor import get_refactor_edit_plan"], true);
+  await writeFile(stamp, JSON.stringify({ source: pinned }), "utf8");
+}
+if (process.argv[1] && resolve(fileURLToPath(import.meta.url)) === resolve(process.argv[1])) {
+  if (process.argv[2] !== "prepare") {
+    console.error("Usage: dsh-crg prepare [engine-source] [--python executable]");
+    process.exitCode = 2;
+  } else {
+    const args = process.argv.slice(3);
+    const flag = args.indexOf("--python");
+    const python = flag >= 0 ? args.splice(flag, 2)[1] : void 0;
+    try {
+      await prepare(args[0], python);
+    } catch (error) {
+      console.error(String(error));
+      process.exitCode = 1;
+    }
+  }
+}
+export {
+  environment,
+  prepare,
+  pythonIn
+};
+//# sourceMappingURL=setup.js.map

package/dist/setup.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/setup.ts"],
+  "sourcesContent": ["#!/usr/bin/env node\nimport { spawn } from 'node:child_process';\nimport { mkdir, readFile, writeFile } from 'node:fs/promises';\nimport { homedir } from 'node:os';\nimport { join, resolve } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nexport const environment = join(process.env.DSH_HOME ?? join(homedir(), '.dsh'), 'code-review-graph', 'engine');\nexport const pythonIn = (dir: string) => join(dir, process.platform === 'win32' ? 'Scripts/python.exe' : 'bin/python');\nasync function command(exe: string, args: string[], quiet = false): Promise<void> {\n  await new Promise<void>((resolve, reject) => {\n    const child = spawn(exe, args, { stdio: quiet ? 'ignore' : 'inherit', windowsHide: true });\n    child.on('error', reject); child.on('exit', code => code === 0 ? resolve() : reject(new Error(`${exe} exited ${code}`)));\n  });\n}\nexport async function prepare(source?: string, python?: string): Promise<void> {\n  const engine = JSON.parse(await readFile(new URL('../engine.json', import.meta.url), 'utf8'));\n  const pinned = source ?? engine.source;\n  const stamp = join(environment, 'dsh-crg-source.json');\n  if (await readFile(stamp, 'utf8').then(value => JSON.parse(value).source === pinned, () => false)) {\n    try { await command(pythonIn(environment), ['-c', 'from code_review_graph.refactor import get_refactor_edit_plan'], true); console.log('CRG engine is already prepared.'); return; } catch {}\n  }\n  await mkdir(environment, { recursive: true });\n  let uv = false;\n  try { await command('uv', ['--version'], true); uv = true; } catch {}\n  if (uv && !python) {\n    await command('uv', ['venv', '--allow-existing', '--python', '>=3.10', environment]);\n    await command('uv', ['pip', 'install', '--python', pythonIn(environment), pinned]);\n  } else {\n    let selected: { exe: string; args: string[] } | undefined;\n    for (const candidate of python ? [{ exe: python, args: [] }] : [{ exe: 'python3', args: [] }, { exe: 'python', args: [] }, { exe: 'py', args: ['-3'] }]) {\n      try { await command(candidate.exe, [...candidate.args, '-c', 'import sys; assert sys.version_info >= (3,10)'], true); selected = candidate; break; } catch {}\n    }\n    if (!selected) throw new Error('Install uv or real Python 3.10+; Windows Store aliases are not a Python runtime.');\n    await command(selected.exe, [...selected.args, '-m', 'venv', environment]);\n    await command(pythonIn(environment), ['-m', 'pip', 'install', pinned]);\n  }\n  await command(pythonIn(environment), ['-c', 'from code_review_graph.refactor import get_refactor_edit_plan'], true);\n  await writeFile(stamp, JSON.stringify({ source: pinned }), 'utf8');\n}\nif (process.argv[1] && resolve(fileURLToPath(import.meta.url)) === resolve(process.argv[1])) {\n  if (process.argv[2] !== 'prepare') { console.error('Usage: dsh-crg prepare [engine-source] [--python executable]'); process.exitCode = 2; }\n  else {\n    const args = process.argv.slice(3);\n    const flag = args.indexOf('--python');\n    const python = flag >= 0 ? args.splice(flag, 2)[1] : undefined;\n    try { await prepare(args[0], python); } catch (error) { console.error(String(error)); process.exitCode = 1; }\n  }\n}\n"],
+  "mappings": ";;;AACA,SAAS,aAAa;AACtB,SAAS,OAAO,UAAU,iBAAiB;AAC3C,SAAS,eAAe;AACxB,SAAS,MAAM,eAAe;AAC9B,SAAS,qBAAqB;AAEvB,IAAM,cAAc,KAAK,QAAQ,IAAI,YAAY,KAAK,QAAQ,GAAG,MAAM,GAAG,qBAAqB,QAAQ;AACvG,IAAM,WAAW,CAAC,QAAgB,KAAK,KAAK,QAAQ,aAAa,UAAU,uBAAuB,YAAY;AACrH,eAAe,QAAQ,KAAa,MAAgB,QAAQ,OAAsB;AAChF,QAAM,IAAI,QAAc,CAACA,UAAS,WAAW;AAC3C,UAAM,QAAQ,MAAM,KAAK,MAAM,EAAE,OAAO,QAAQ,WAAW,WAAW,aAAa,KAAK,CAAC;AACzF,UAAM,GAAG,SAAS,MAAM;AAAG,UAAM,GAAG,QAAQ,UAAQ,SAAS,IAAIA,SAAQ,IAAI,OAAO,IAAI,MAAM,GAAG,GAAG,WAAW,IAAI,EAAE,CAAC,CAAC;AAAA,EACzH,CAAC;AACH;AACA,eAAsB,QAAQ,QAAiB,QAAgC;AAC7E,QAAM,SAAS,KAAK,MAAM,MAAM,SAAS,IAAI,IAAI,kBAAkB,YAAY,GAAG,GAAG,MAAM,CAAC;AAC5F,QAAM,SAAS,UAAU,OAAO;AAChC,QAAM,QAAQ,KAAK,aAAa,qBAAqB;AACrD,MAAI,MAAM,SAAS,OAAO,MAAM,EAAE,KAAK,WAAS,KAAK,MAAM,KAAK,EAAE,WAAW,QAAQ,MAAM,KAAK,GAAG;AACjG,QAAI;AAAE,YAAM,QAAQ,SAAS,WAAW,GAAG,CAAC,MAAM,+DAA+D,GAAG,IAAI;AAAG,cAAQ,IAAI,iCAAiC;AAAG;AAAA,IAAQ,QAAQ;AAAA,IAAC;AAAA,EAC9L;AACA,QAAM,MAAM,aAAa,EAAE,WAAW,KAAK,CAAC;AAC5C,MAAI,KAAK;AACT,MAAI;AAAE,UAAM,QAAQ,MAAM,CAAC,WAAW,GAAG,IAAI;AAAG,SAAK;AAAA,EAAM,QAAQ;AAAA,EAAC;AACpE,MAAI,MAAM,CAAC,QAAQ;AACjB,UAAM,QAAQ,MAAM,CAAC,QAAQ,oBAAoB,YAAY,UAAU,WAAW,CAAC;AACnF,UAAM,QAAQ,MAAM,CAAC,OAAO,WAAW,YAAY,SAAS,WAAW,GAAG,MAAM,CAAC;AAAA,EACnF,OAAO;AACL,QAAI;AACJ,eAAW,aAAa,SAAS,CAAC,EAAE,KAAK,QAAQ,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,WAAW,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,UAAU,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG;AACvJ,UAAI;AAAE,cAAM,QAAQ,UAAU,KAAK,CAAC,GAAG,UAAU,MAAM,MAAM,+CAA+C,GAAG,IAAI;AAAG,mBAAW;AAAW;AAAA,MAAO,QAAQ;AAAA,MAAC;AAAA,IAC9J;AACA,QAAI,CAAC,SAAU,OAAM,IAAI,MAAM,kFAAkF;AACjH,UAAM,QAAQ,SAAS,KAAK,CAAC,GAAG,SAAS,MAAM,MAAM,QAAQ,WAAW,CAAC;AACzE,UAAM,QAAQ,SAAS,WAAW,GAAG,CAAC,MAAM,OAAO,WAAW,MAAM,CAAC;AAAA,EACvE;AACA,QAAM,QAAQ,SAAS,WAAW,GAAG,CAAC,MAAM,+DAA+D,GAAG,IAAI;AAClH,QAAM,UAAU,OAAO,KAAK,UAAU,EAAE,QAAQ,OAAO,CAAC,GAAG,MAAM;AACnE;AACA,IAAI,QAAQ,KAAK,CAAC,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,MAAM,QAAQ,QAAQ,KAAK,CAAC,CAAC,GAAG;AAC3F,MAAI,QAAQ,KAAK,CAAC,MAAM,WAAW;AAAE,YAAQ,MAAM,8DAA8D;AAAG,YAAQ,WAAW;AAAA,EAAG,OACrI;AACH,UAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AACjC,UAAM,OAAO,KAAK,QAAQ,UAAU;AACpC,UAAM,SAAS,QAAQ,IAAI,KAAK,OAAO,MAAM,CAAC,EAAE,CAAC,IAAI;AACrD,QAAI;AAAE,YAAM,QAAQ,KAAK,CAAC,GAAG,MAAM;AAAA,IAAG,SAAS,OAAO;AAAE,cAAQ,MAAM,OAAO,KAAK,CAAC;AAAG,cAAQ,WAAW;AAAA,IAAG;AAAA,EAC9G;AACF;",
+  "names": ["resolve"]
+}

package/dist/workflows.js

@@ -0,0 +1,30 @@
+// src/workflows.ts
+var groups = ["context", "review", "refactor", "export", "advanced", "all"];
+var context = ["build_or_update_graph_tool", "get_minimal_context_tool", "query_graph_tool", "semantic_search_nodes_tool", "list_graph_stats_tool", "get_docs_section_tool"];
+var members = {
+  context,
+  review: [...context, "detect_changes_tool", "get_review_context_tool", "get_impact_radius_tool", "get_affected_flows_tool", "list_flows_tool", "get_flow_tool", "list_communities_tool"],
+  refactor: [...context, "refactor_tool", "apply_refactor_tool", "find_large_functions_tool", "get_impact_radius_tool", "get_affected_flows_tool", "detect_changes_tool"],
+  export: [...context, "generate_wiki_tool", "get_wiki_page_tool"],
+  advanced: [...context, "embed_graph_tool", "run_postprocess_tool", "list_repos_tool", "cross_repo_search_tool", "list_communities_tool", "get_community_tool", "get_architecture_overview_tool", "get_hub_nodes_tool", "get_bridge_nodes_tool", "get_knowledge_gaps_tool", "get_surprising_connections_tool", "get_suggested_questions_tool", "traverse_graph_tool", "detect_changes_tool", "list_flows_tool", "get_flow_tool", "find_large_functions_tool"]
+};
+var skillWorkflow = {
+  "build-graph": "advanced",
+  "debug-issue": "review",
+  "explore-codebase": "advanced",
+  "refactor-safely": "refactor",
+  "review-changes": "review",
+  "review-delta": "review",
+  "review-pr": "review"
+};
+var publicName = (raw) => `mcp__code_review_graph__${raw}`;
+function exposed(workflow, names) {
+  return workflow === "all" ? names : names.filter((name) => members[workflow].includes(name));
+}
+export {
+  exposed,
+  groups,
+  publicName,
+  skillWorkflow
+};
+//# sourceMappingURL=workflows.js.map

package/dist/workflows.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/workflows.ts"],
+  "sourcesContent": ["export const groups = ['context', 'review', 'refactor', 'export', 'advanced', 'all'] as const;\nexport type Workflow = typeof groups[number];\nconst context = ['build_or_update_graph_tool', 'get_minimal_context_tool', 'query_graph_tool', 'semantic_search_nodes_tool', 'list_graph_stats_tool', 'get_docs_section_tool'];\nconst members: Record<Exclude<Workflow, 'all'>, string[]> = {\n  context,\n  review: [...context, 'detect_changes_tool', 'get_review_context_tool', 'get_impact_radius_tool', 'get_affected_flows_tool', 'list_flows_tool', 'get_flow_tool', 'list_communities_tool'],\n  refactor: [...context, 'refactor_tool', 'apply_refactor_tool', 'find_large_functions_tool', 'get_impact_radius_tool', 'get_affected_flows_tool', 'detect_changes_tool'],\n  export: [...context, 'generate_wiki_tool', 'get_wiki_page_tool'],\n  advanced: [...context, 'embed_graph_tool', 'run_postprocess_tool', 'list_repos_tool', 'cross_repo_search_tool', 'list_communities_tool', 'get_community_tool', 'get_architecture_overview_tool', 'get_hub_nodes_tool', 'get_bridge_nodes_tool', 'get_knowledge_gaps_tool', 'get_surprising_connections_tool', 'get_suggested_questions_tool', 'traverse_graph_tool', 'detect_changes_tool', 'list_flows_tool', 'get_flow_tool', 'find_large_functions_tool'],\n};\nexport const skillWorkflow: Record<string, Workflow> = {\n  'build-graph': 'advanced', 'debug-issue': 'review', 'explore-codebase': 'advanced',\n  'refactor-safely': 'refactor', 'review-changes': 'review', 'review-delta': 'review', 'review-pr': 'review',\n};\nexport const publicName = (raw: string): string => `mcp__code_review_graph__${raw}`;\nexport function exposed(workflow: Workflow, names: string[]): string[] {\n  return workflow === 'all' ? names : names.filter(name => members[workflow].includes(name));\n}\n"],
+  "mappings": ";AAAO,IAAM,SAAS,CAAC,WAAW,UAAU,YAAY,UAAU,YAAY,KAAK;AAEnF,IAAM,UAAU,CAAC,8BAA8B,4BAA4B,oBAAoB,8BAA8B,yBAAyB,uBAAuB;AAC7K,IAAM,UAAsD;AAAA,EAC1D;AAAA,EACA,QAAQ,CAAC,GAAG,SAAS,uBAAuB,2BAA2B,0BAA0B,2BAA2B,mBAAmB,iBAAiB,uBAAuB;AAAA,EACvL,UAAU,CAAC,GAAG,SAAS,iBAAiB,uBAAuB,6BAA6B,0BAA0B,2BAA2B,qBAAqB;AAAA,EACtK,QAAQ,CAAC,GAAG,SAAS,sBAAsB,oBAAoB;AAAA,EAC/D,UAAU,CAAC,GAAG,SAAS,oBAAoB,wBAAwB,mBAAmB,0BAA0B,yBAAyB,sBAAsB,kCAAkC,sBAAsB,yBAAyB,2BAA2B,mCAAmC,gCAAgC,uBAAuB,uBAAuB,mBAAmB,iBAAiB,2BAA2B;AAC7b;AACO,IAAM,gBAA0C;AAAA,EACrD,eAAe;AAAA,EAAY,eAAe;AAAA,EAAU,oBAAoB;AAAA,EACxE,mBAAmB;AAAA,EAAY,kBAAkB;AAAA,EAAU,gBAAgB;AAAA,EAAU,aAAa;AACpG;AACO,IAAM,aAAa,CAAC,QAAwB,2BAA2B,GAAG;AAC1E,SAAS,QAAQ,UAAoB,OAA2B;AACrE,SAAO,aAAa,QAAQ,QAAQ,MAAM,OAAO,UAAQ,QAAQ,QAAQ,EAAE,SAAS,IAAI,CAAC;AAC3F;",
+  "names": []
+}

package/docs/capabilities.md

@@ -0,0 +1,103 @@
+# Capability map / 能力对应表
+
+Baseline: CRG **2.3.9**, with the contribution fork's additional read-only edit
+plan API. `capabilities.json` is captured from the real engine, rather than
+maintained as a second handwritten schema.
+
+功能基线为 CRG **2.3.9**。工具参数来自真实引擎；DSH 仅移除模型可指定的
+`repo_root`，通过当前会话绑定仓库，并在执行器检查权限与路径。
+
+All original tools are native DSH ToolDefinitions named
+`mcp__code_review_graph__<original_name>`. The prefix preserves upstream workflow
+references; it does not require configuring an external DSH MCP server.
+
+`crg_workflow` offers `context`, `review`, `refactor`, `export`, `advanced`, and
+`all`. The five task groups each include the six context tools. `all` exposes all
+30 tools. Restrictions are scoped to one Agent and only this plugin's tools.
+`crg_workflow`, `crg_prompt`, and `crg_visualize` remain available initially.
+
+按需展开仅影响调用 Agent；其他 Agent 和其他插件不受影响。所有工作流均可使用
+六个上下文基础工具，`all` 展开完整的 30 个工具。
+
+| Original tool / 原工具 | Task group / 分组 | Behavior / 功能 |
+| --- | --- | --- |
+| `build_or_update_graph_tool` | context | Build and incremental update / 建图与增量更新 |
+| `get_minimal_context_tool` | context | Task-focused code context / 精准任务上下文 |
+| `query_graph_tool` | context | Node and relationship queries / 节点与关系查询 |
+| `semantic_search_nodes_tool` | context | Semantic search with offline keyword fallback / 语义搜索及离线关键词回退 |
+| `list_graph_stats_tool` | context | Graph statistics / 图谱统计 |
+| `get_docs_section_tool` | context | Engine documentation / 引擎文档 |
+| `detect_changes_tool` | review, refactor, advanced | Git change detection / 变更检测 |
+| `get_review_context_tool` | review | Review context and source snippets / 审查上下文与源码片段 |
+| `get_impact_radius_tool` | review, refactor | Change impact and call sites / 影响范围与调用位置 |
+| `get_affected_flows_tool` | review, refactor | Affected execution flows / 受影响执行路径 |
+| `list_flows_tool` | review, advanced | Flow inventory / 执行路径列表 |
+| `get_flow_tool` | review, advanced | Flow details and bounded source / 执行路径详情 |
+| `refactor_tool` | refactor | Rename preview, dead code, suggestions / 重命名预览、死代码与建议 |
+| `apply_refactor_tool` | refactor | Preview or DSH-controlled file writes / 预览或受控文件修改 |
+| `find_large_functions_tool` | refactor, advanced | Oversized function analysis / 大函数分析 |
+| `generate_wiki_tool` | export | Repository wiki / 仓库知识库生成 |
+| `get_wiki_page_tool` | export | Wiki page retrieval / 知识库页面查询 |
+| `run_postprocess_tool` | advanced | Community, flow and embedding postprocessing / 社区、执行路径及嵌入后处理 |
+| `embed_graph_tool` | advanced | Explicit authorized embedding / 主动授权的向量生成 |
+| `list_repos_tool` | advanced | Only current and explicitly authorized roots / 当前及明确授权仓库 |
+| `cross_repo_search_tool` | advanced | Search authorized repositories / 授权范围内跨仓库搜索 |
+| `list_communities_tool` | review, advanced | Community inventory / 社区列表 |
+| `get_community_tool` | advanced | Community details / 社区详情 |
+| `get_architecture_overview_tool` | advanced | Architecture and coupling / 架构与耦合分析 |
+| `get_hub_nodes_tool` | advanced | Central entities / 核心节点 |
+| `get_bridge_nodes_tool` | advanced | Cross-community bridges / 跨社区桥接节点 |
+| `get_knowledge_gaps_tool` | advanced | Coverage gaps / 知识缺口 |
+| `get_surprising_connections_tool` | advanced | Unexpected relationships / 潜在关联 |
+| `get_suggested_questions_tool` | advanced | Exploration questions / 探索问题建议 |
+| `traverse_graph_tool` | advanced | Relationship traversal / 关系遍历 |
+
+The internal `get_refactor_edit_plan_tool` is **not model-visible**. The Host
+requests its full `files[{path,before_sha256,after_content,edit_count}]`, then
+preflights every file and writes through native DSH file intents, policy and
+`ctx.fs`. Presentation limits on rename previews never truncate the edit plan.
+Failed writes return committed paths and a complete hash-guarded recovery patch.
+
+内部编辑计划接口不向模型展开；提交前校验全部文件的原始字节哈希。每个文件原子
+写入，保留 UTF-8、BOM 与换行。发生失败后停止后续写入，返回已提交文件和完整恢复补丁。
+
+## Five prompts / 五个工作流提示
+
+Call `crg_prompt` with `name` and optional `base`/`description`. Text comes from
+the engine, with original tool names rewritten to their native DSH names.
+
+| Prompt | Selected group / 自动展开 |
+| --- | --- |
+| `review_changes` | review |
+| `architecture_map` | advanced |
+| `debug_issue` | review |
+| `onboard_developer` | advanced |
+| `pre_merge_check` | all |
+
+## Seven skills / 七个技能
+
+Bundled upstream content is registered through DSH's native skill service. Each
+skill begins by selecting the relevant workflow; runtime tool references are
+rewritten consistently.
+
+| Upstream skill | Native skill | Selected group |
+| --- | --- | --- |
+| build-graph | `crg-build-graph` | advanced |
+| debug-issue | `crg-debug-issue` | review |
+| explore-codebase | `crg-explore-codebase` | advanced |
+| refactor-safely | `crg-refactor-safely` | refactor |
+| review-changes | `crg-review-changes` | review |
+| review-delta | `crg-review-delta` | review |
+| review-pr | `crg-review-pr` | review |
+
+## Graph and export / 图谱与导出
+
+`crg_visualize` reuses the upstream renderer and CLI: full, file and community
+views; file/symbol/changed-code/flow seeds; shortest paths; depth and size limits;
+HTML, JSON, GraphML, Cypher, Obsidian, and optional SVG exports. SVG requires the
+engine's optional visualization dependencies. The Web/Desktop client uses the
+two released workspace readers and displays an offline sandboxed iframe.
+Headless tools return the generated local path.
+
+图谱侧栏保留搜索、过滤、缩放、拖动、聚合、路径视图和 HTML 下载。全部资源通过
+工作区文件通道读取并内联；iframe 禁止同源访问和联网，不启动固定端口服务。

package/docs/release-0.1.1.md

@@ -0,0 +1,30 @@
+# 0.1.1
+
+修复 DSH Web／桌面客户端的原生加载和图谱侧栏显示：
+
+- Client 发行文件改用 DSH 官方 closure-factory 格式，解决 `Cannot use import statement outside a module`。
+- 侧栏正文按插件 provider ID 注册，解决打开图谱后显示“这类内容还没有可用的查看方式”。
+- 浏览器回归直接执行发行文件；补充真实 Windows Desktop 0.2.0-rc.2 的隔离安装、启用、图谱读取、搜索、HTML 导出和卸载／重装验证。
+
+桌面安装 `dsh-code-review-graph@0.1.1`，完成后点击“立即启用”。已有旧版先通过
+原生插件管理器卸载；安装状态尚未确认时先核对状态。
+
+用户报告的 pnpm 十分钟无输出超时未能复现。相同旧包及原有依赖组合均可正常安装；
+本次修复不代表该安装器超时已解决。其他桌面平台／版本未整机实测，详细范围见
+[验证记录](validation.md)。没有运行模型推理，也未修改用户的 DSH 配置。
+
+## English
+
+- Emit the Client in DSH's native closure-factory format, fixing `Cannot use import statement outside a module` in the actual loader.
+- Register the sidebar body under the plugin provider ID, fixing the unavailable-view fallback when opening a graph.
+- Execute the published Client in browser regressions; add isolated installation, enablement, native graph reading/search/HTML export, removal and reinstallation checks using the actual Windows Desktop 0.2.0-rc.2 application.
+
+Install `dsh-code-review-graph@0.1.1` in the native Desktop plugin manager, then
+choose **Enable now**. Remove an existing old version through that manager first;
+reconcile an unconfirmed installation before proceeding.
+
+The reported ten-minute pnpm no-output timeout did not reproduce with the same
+old package and dependency combination. This release does not claim to resolve
+that installer timeout. Other Desktop platforms/releases have not been tested as
+complete applications. See [validation](validation.md) for scope. No model
+inference or changes to the user's DSH configuration were involved.

package/docs/validation.md

@@ -0,0 +1,161 @@
+# Validation / 验证记录
+
+Local checkpoint: **2026-10-08**, Windows, Node **24.14.1**, Python **3.11.16**.
+CRG base **2.3.9**; exact contribution engine commit is in `engine.json`.
+DSH packages are the real published releases **0.1.5-rc.2** and **0.2.0-rc.2**.
+
+0.1.1 修复了真实原生加载器才会暴露的两个问题：Client 发行文件必须使用
+`window.__ModuleLoader__.load({ id, factory })`，侧栏正文必须按 provider ID 注册。
+0.1.0 的浏览器测试重新打包了源文件，并错误地接受了按 kind 注册正文，未发现这两个问题。
+回归测试现在直接执行发行 Client 文件，并检查 provider ID。
+
+Windows 本地增加实际安装的 DSH Desktop **0.2.0-rc.2** 验证；三平台、两版 DSH
+的 CI 覆盖原生运行时、CLI 和浏览器组件。Desktop 0.1.5-rc.2、Linux/macOS
+桌面应用尚未整机实测。未运行真实模型推理。
+
+## Results
+
+| Check | Local result | Scope |
+| --- | --- | --- |
+| TypeScript and Host/Client build | Passed | ESM Host/CLI; native closure-factory browser Client |
+| Plugin safety and native Client contracts | 5 passed | Root/linked-directory fences, all 30 tools, both readers, offline iframe, full refactor recovery; actual published Client executes as a classic script |
+| Real engine worker lifecycle | 3 passed | Shared root worker, last owner cleanup, resumed owner, cancellation, timeout, missing engine |
+| DSH 0.1.5-rc.2 session | Passed | 52 recorded deterministic tool calls, including 9 expected refusals |
+| DSH 0.2.0-rc.2 session | Passed | Same native session and real engine checks |
+| Browser graph on both readers | Passed | Full/file/community views, search results, filters, zoom, drag, community drill/back, HTML download; zero external requests and page errors |
+| Native CLI lifecycle on both releases | Passed | Isolated web/headless profiles, add/readd/remove, bundle patch composition, retained user data, desktop profile ownership rejection |
+| Explicit dependency preparation | Passed | Isolated real engine, read-only plan API probe, repeat preparation without package installation |
+| Core Python regression set | 805 passed, 4 skipped | All changed platform/refactor/renderer/source-fence areas and their related regressions |
+| Ruff for changed Python sources/tests | Passed | All modified Python files |
+| Windows/Linux/macOS × both DSH releases | 6 CI jobs passed | Real pinned engine, isolated native installation, session calls, browser graph and explicit setup |
+| Core Windows/Linux/macOS regression matrix | 3 CI jobs passed | 808 passed, 1 platform-specific skip on each OS |
+| Windows Desktop 0.2.0-rc.2 | Passed | Actual packaged Electron application, native install/enable/remove/reinstall, graph reading/search/HTML download, unrelated configuration retained; no model |
+| Other Desktop releases/platforms | Not run | Browser/CLI checks do not establish complete Electron coverage |
+| Real model inference | Not run | Deterministic automation only, no paid inference jobs |
+
+The four local core skips comprise three existing symlink checks requiring
+Windows privileges (one uninstall case and two watcher cases) and a POSIX
+executable-bit check. The plugin's directory-junction escape checks **did run
+and pass** without those privileges. CI runners have symlink privileges: their
+one skip is the POSIX executable-bit check on Windows, or the native Windows
+path-semantics check on Linux/macOS.
+SVG export passed with the explicitly prepared `[eval]` dependency set. Actual
+embedding model inference is not included; optional dependencies/models must be
+prepared explicitly.
+
+## Session evidence
+
+- [DSH 0.1.5-rc.2 transcript](https://github.com/sumingwang233/dsh-code-review-graph/blob/main/docs/evidence/session-0.1.5-rc.2-win32.json)
+- [DSH 0.2.0-rc.2 transcript](https://github.com/sumingwang233/dsh-code-review-graph/blob/main/docs/evidence/session-0.2.0-rc.2-win32.json)
+
+The test uses actual released Cordis, Session, AgentRegistry, ToolRuntime,
+filesystem and session-policy packages; its Agents are created deterministically
+without a model loop. Tools invoke the real Python CRG backend. It checks:
+
+- Agent-local tool selection and independent repositories; first graph build;
+  real watcher indexing after source changes; surviving owners after one exits.
+- All five original prompts; context, review, impact, affected flows,
+  architecture, cross-repository search and postprocessing results.
+- Unauthorized repository/provider/root/path inputs and linked documentation;
+  stale rename plans;
+  native session read-only policy rejection; exact real BOM/CRLF preservation.
+- HTML and JSON/GraphML/Cypher/Obsidian/SVG generation and a shortest-path view;
+  all seven native skills are registered and their tool references are adapted.
+
+Only test-directory paths are replaced by `<TEST_TMP>` for public evidence.
+Where ToolRuntime returns both a structured value and identical rendered text,
+the transcript retains the structured value and omits duplicate rendering;
+error content is kept. Upstream reviewers decide whether deterministic evidence
+satisfies their contribution requirement.
+
+The Playwright browser harness executes **`dist/client.js` as published**, through
+the native classic-script factory contract, and mounts its graph in Chromium.
+Only the host services and each release's workspace reader are fixtures. It
+checks provider ID/slot registration. This remains a component test, separate
+from the real Desktop test.
+
+## Desktop regression and reported timeout
+
+- [Clean Desktop profile evidence](evidence/desktop-0.2.0-rc.2-win32-clean.json)
+- [Existing dependency combination evidence](evidence/desktop-0.2.0-rc.2-win32-dependency-combination.json)
+
+`tests/desktop.mjs` launches the actual installed Electron executable with a
+temporary DSH_HOME, userData, HOME/USERPROFILE and APPDATA. It uses the native
+plugin manager to install the packed tarball, enable it, uninstall it, reinstall
+it and uninstall it again. It checks that existing dependencies, bundles and an
+unrelated user setting survive. The real engine CLI builds a small Python graph;
+the Desktop sidebar reads it through the actual workspace-file service, searches
+it and exports the HTML through Electron's download pipeline. Session creation
+is deterministic, without model inference. This complements the real DSH tool
+session transcripts; it does not claim that the model drove the Desktop UI.
+
+The official Desktop Host hardcodes port 19387. A test-only preload changes that
+test process's listener to an OS-assigned port so the user's running Desktop is
+untouched. Test windows stay hidden; the native welcome flow uses “Set up later”
+without signing in, copying credentials or configuring a model key. No test
+settings are written to the user's profile.
+
+The reported pnpm log said `Done in 4.1s`, followed by the Host's 600000 ms
+no-output timeout. The same 0.1.0 package completed successfully with bundled
+Electron/pnpm, a clean native Desktop profile, and a native Desktop profile
+containing the three existing plugins and package-manager policy files. The
+latter reproduced the same `+98 -27` dependency change. The original hang has
+**not been reproduced**. 0.1.1 fixes the two independently confirmed Client
+defects and the missing regression coverage; it does not claim to fix that
+unresolved package-manager timeout.
+
+## Reproduction
+
+```sh
+npm ci
+npm run typecheck
+npm run build
+npm test
+npm run prepare:tests
+npm run test:backend
+npm run test:integration
+npx playwright install chromium
+npm run test:browser
+npm pack
+npm run test:install
+npm run test:setup
+```
+
+Provide `DSH_VERSION` and `CRG_COMMAND` in the **test child process environment**.
+`CRG_COMMAND` points to a prepared real engine. Setup tests and normal
+installation use the publicly available exact source in `engine.json`.
+Test profiles use temporary
+`DSH_HOME` values and never modify the user's DSH profiles or credentials.
+
+For the separate real Desktop check, first run `npm pack`, set
+`DSH_DESKTOP_EXECUTABLE` to a supported installed Desktop application and
+`CRG_COMMAND` to a prepared real engine, then run `npm run test:desktop`.
+`DSH_VERSION` must match the actual application version (default 0.2.0-rc.2).
+Missing application/engine inputs fail explicitly. To reproduce a dependency
+combination, additionally set `DSH_DESKTOP_PROFILE_FIXTURE` to a profile directory
+and `DSH_DESKTOP_PNPM` to the application's bundled pnpm entry. Only
+`package.json`, `pnpm-lock.yaml` and `pnpm-workspace.yaml` are copied to the
+temporary profile. Evidence is written to `test-results/desktop-*.json` with the
+tested package SHA-256 and native operation results.
+
+Core regression command:
+
+```sh
+python -X utf8 -m pytest tests/test_cli_install.py tests/test_dsh.py tests/test_uninstall.py tests/test_refactor_edit_plan.py tests/test_refactor.py tests/test_skills.py tests/test_main.py tests/test_prompts.py tests/test_dsh_renderer.py tests/test_visualization.py tests/test_dsh_source_fence.py tests/test_incremental.py tests/test_flows.py tests/test_tools.py tests/test_review_utf8_content.py -q
+```
+
+The adapter's `.github/workflows/ci.yml` runs both exact releases on Windows,
+Linux and macOS using a real pinned engine, isolated profile lifecycle, browser
+checks and dependency preparation. The core's `dsh-platform.yml` runs the Python
+contract/regression set on the same three OS families.
+
+- [Historical 0.1.0 adapter CI: six combinations passed](https://github.com/sumingwang233/dsh-code-review-graph/actions/runs/37716247823), source `9c478191b743ecc443cc0eede5d67927a367d7ed`; the old browser harness missed the Client packaging/slot defects described above.
+- [Core CI: all three OS jobs passed](https://github.com/sumingwang233/code-review-graph/actions/runs/37717599685), source `8ac789138463cd3b8282688bb94d682e90ca1df3`.
+
+Each adapter CI artifact contains its native session transcript, browser report,
+profile lifecycle report and tested package. Windows records 52 calls per
+release; Linux/macOS record 53. Each transcript contains nine expected refusals.
+Browser reports have zero external requests and page errors. The pinned engine
+commit `9eba19ffaa60fda02a459a844067e5c190c9013d` has identical Python production
+code and dependency metadata to the tested core head; later commits only adjust
+CI and resolve the existing Bash regression test's executable path on Windows.

package/engine.json

@@ -0,0 +1,8 @@
+{
+  "baseline": "2.3.9",
+  "repository": "https://github.com/sumingwang233/code-review-graph",
+  "commit": "9eba19ffaa60fda02a459a844067e5c190c9013d",
+  "source": "code-review-graph @ https://github.com/sumingwang233/code-review-graph/archive/9eba19ffaa60fda02a459a844067e5c190c9013d.zip",
+  "upstreamBase": "6b12d11625cbec3b6773e076cb3d136464fa90e5",
+  "reason": "Read-only get_refactor_edit_plan_tool is not yet available in an official CRG release."
+}