dsh-contextos-devops 0.0.0-stage → 1.48.31

package/lib/core/terminal2.js

@@ -0,0 +1,141 @@
+// 核心业务：内嵌终端（WebSocket + Python pty.fork 真 PTY）。
+import crypto from 'node:crypto';
+import os from 'node:os';
+import fsp from 'node:fs';
+import { spawn } from 'node:child_process';
+import { ptySupported } from '../base/platform.js';
+
+  // ---- embedded terminal (WebSocket + PTY via /usr/bin/script) ----
+function wsAccept(key) {
+    return crypto.createHash('sha1').update(key + '258EAFA5-E914-47DA-95CA-C5AB0DC85B11').digest('base64');
+  }
+function wsFrame(data) {
+    const payload = Buffer.isBuffer(data) ? data : Buffer.from(String(data), 'utf8');
+    const len = payload.length;
+    let header;
+    if (len < 126) header = Buffer.from([0x81, len]);
+    else if (len < 65536) header = Buffer.from([0x81, 126, (len >> 8) & 0xff, len & 0xff]);
+    else {
+      header = Buffer.alloc(10);
+      header[0] = 0x81; header[1] = 127;
+      header.writeBigUInt64BE(BigInt(len), 2);
+    }
+    return Buffer.concat([header, payload]);
+  }
+const PTY_HELPER = `
+import os, sys, pty, select, fcntl, termios, struct, signal
+def main():
+    cwd = sys.argv[1]
+    shell = sys.argv[2] if len(sys.argv) > 2 else (os.environ.get('SHELL') or '/bin/zsh')
+    os.chdir(cwd)
+    pid, fd = pty.fork()
+    if pid == 0:
+        os.environ['TERM'] = 'xterm-256color'
+        os.execvp(shell, [shell])
+    def nonblock(f):
+        fcntl.fcntl(f, fcntl.F_SETFL, fcntl.fcntl(f, fcntl.F_GETFL) | os.O_NONBLOCK)
+    nonblock(fd); nonblock(0)
+    while True:
+        r, _, _ = select.select([fd, 0], [], [])
+        if fd in r:
+            try:
+                data = os.read(fd, 65536)
+                if not data: break
+                os.write(1, data)
+            except OSError:
+                pass
+        if 0 in r:
+            try:
+                data = os.read(0, 65536)
+                if not data: break
+                if data.startswith(b'\\x00CTX_RESIZE '):
+                    try:
+                        cols, rows = data.decode().strip().split(' ')[1:3]
+                        fcntl.ioctl(fd, termios.TIOCSWINSZ, struct.pack('HHHH', int(rows), int(cols), 0, 0))
+                        os.kill(pid, signal.SIGWINCH)
+                    except Exception:
+                        pass
+                else:
+                    os.write(fd, data)
+            except OSError:
+                pass
+main()
+`;
+
+export function terminalUpgrade(req, socket, head) {
+    const key = req.headers['sec-websocket-key'];
+    if (!key) { socket.destroy(); return; }
+    if (!ptySupported) {
+      // Windows 无 pty.fork：明确拒绝，客户端会回落为「用 DSH 自带终端」。
+      socket.write('HTTP/1.1 501 Not Implemented\r\nConnection: close\r\n\r\n');
+      socket.end();
+      return;
+    }
+    socket.write(
+      'HTTP/1.1 101 Switching Protocols\r\n' +
+      'Upgrade: websocket\r\n' +
+      'Connection: Upgrade\r\n' +
+      `Sec-WebSocket-Accept: ${wsAccept(key)}\r\n\r\n`,
+    );
+    let cwd = os.homedir();
+    try {
+      const p = new URL(req.url || '/', 'http://x').searchParams.get('cwd');
+      if (p) cwd = decodeURIComponent(p);
+    } catch { /* keep home */ }
+    if (!fsp.existsSync(cwd)) cwd = os.homedir();
+
+    let shell = process.env.SHELL || '/bin/zsh';
+    try {
+      const q = new URL(req.url || '/', 'http://x').searchParams.get('shell');
+      if (q && /^[a-zA-Z0-9_\/.-]+$/.test(q)) shell = q.startsWith('/') ? q : `/bin/${q}`;
+    } catch {}
+    const python = process.env.PYTHON || 'python3';
+    const child = spawn(python, ['-c', PTY_HELPER, cwd, shell], {
+      env: { ...process.env, PROMPT_EOL_MARK: '', TERM: 'xterm-256color' }, stdio: ['pipe', 'pipe', 'pipe'],
+    });
+
+    let buf = Buffer.alloc(0);
+    const feed = (chunk) => {
+      buf = Buffer.concat([buf, chunk]);
+      while (buf.length >= 2) {
+        const b0 = buf[0], b1 = buf[1];
+        const opcode = b0 & 0x0f;
+        const masked = (b1 & 0x80) !== 0;
+        let len = b1 & 0x7f, off = 2;
+        if (len === 126) { if (buf.length < 4) return; len = buf.readUInt16BE(2); off = 4; }
+        else if (len === 127) { if (buf.length < 10) return; len = Number(buf.readBigUInt64BE(2)); off = 10; }
+        let mask;
+        if (masked) { if (buf.length < off + 4) return; mask = buf.subarray(off, off + 4); off += 4; }
+        if (buf.length < off + len) return;
+        const payload = Buffer.from(buf.subarray(off, off + len));
+        buf = buf.subarray(off + len);
+        if (masked) for (let i = 0; i < payload.length; i++) payload[i] ^= mask[i & 3];
+        if (opcode === 0x8) { try { child.kill(); } catch {} return; }
+        if (opcode === 0x9) { socket.write(wsFrame(Buffer.concat([Buffer.from([0x8a, 0]), payload]))); continue; }
+        if (opcode === 0x2 || opcode === 0x1) { try { child.stdin.write(payload); } catch {} }
+      }
+    };
+    let rxN = 0, ptyAcc = Buffer.alloc(0), ptyTimer = 0;
+    const flushPty = () => {
+      ptyTimer = 0;
+      const raw = ptyAcc.toString('utf8');
+      ptyAcc = Buffer.alloc(0);
+      // zsh PROMPT_SP：清行标记，某些终端渲染会把它显示成乱码，直接丢弃
+      const clean = raw.replace(/\x1b\[1m\x1b\[7m%\x1b\[27m\x1b\[1m\x1b\[0m *\r \r/g, '');
+      if (!clean) return;
+      if (rxN < 3) {
+        rxN++;
+        try { fsp.appendFileSync('/tmp/cx-term-rx.log', `--- chunk ${rxN} len=${clean.length} text=${JSON.stringify(clean.slice(0, 120))}\n`); } catch {}
+      }
+      try { socket.write(wsFrame(Buffer.from(clean, 'utf8'))); } catch {}
+    };
+    child.stdout.on('data', (d) => { ptyAcc = Buffer.concat([ptyAcc, d]); if (!ptyTimer) ptyTimer = setTimeout(flushPty, 30); });
+    child.stderr.on('data', (d) => { try { socket.write(wsFrame(d)); } catch {} });
+    child.on('exit', () => { try { socket.end(); } catch {} });
+    socket.on('data', feed);
+    socket.on('error', () => { try { child.kill(); } catch {} });
+    socket.on('close', () => { try { child.kill(); } catch {} });
+    if (head && head.length) feed(head);
+  }
+
+

package/lib/core/users.js

@@ -0,0 +1,51 @@
+// 核心业务：DSH 用户（每个节点一个 dsh_copilot_<port>，uid 持久化）。
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { stateDir } from '../base/env.js';
+import { http, encode, USER_CACHE } from '../base/http.js';
+
+let USERS_LOADED = false;
+const PENDING = new Map();
+
+export function usersFile() {
+  return path.join(stateDir(), 'users.json');
+}
+
+export async function loadUsers() {
+  if (USERS_LOADED) return;
+  USERS_LOADED = true;
+  try {
+    const raw = JSON.parse(await fs.readFile(usersFile(), 'utf8'));
+    for (const [port, value] of Object.entries(raw || {})) {
+      if (value && value.uid) USER_CACHE.set(Number(port), value);
+    }
+  } catch { /* first run */ }
+}
+
+export async function saveUsers() {
+  await fs.mkdir(stateDir(), { recursive: true });
+  const out = {};
+  for (const [port, value] of USER_CACHE.entries()) out[String(port)] = value;
+  await fs.writeFile(usersFile(), JSON.stringify(out, null, 2));
+}
+
+export async function ensureUser(node) {
+  const port = Number(node);
+  if (!port) throw new Error('node is required');
+  await loadUsers();
+  const found = USER_CACHE.get(port);
+  if (found?.uid) return found.uid;
+  if (PENDING.has(port)) return PENDING.get(port);
+  const job = (async () => {
+    const username = `dsh_copilot_${port}`;
+    const r = await http(port, `/c/aaa.user/action/create/userrole/tech/username/${encode(username)}/usernick/${encode('DSH Copilot')}`, { method: 'PUT', timeout: 15000 });
+    if (r.status !== 200) throw new Error(`create user failed: HTTP ${r.status}`);
+    const uid = r.text.trim();
+    if (!/^[0-9a-f]{32}$/i.test(uid)) throw new Error(`create user returned no uid: ${r.text.slice(0, 120)}`);
+    USER_CACHE.set(port, { uid, username, created: new Date().toISOString() });
+    await saveUsers();
+    return uid;
+  })().finally(() => PENDING.delete(port));
+  PENDING.set(port, job);
+  return job;
+}

package/lib/core/vocab.js

@@ -0,0 +1,158 @@
+// 框架通用词表：字段名与操作名只用这些，不自定义。
+// 来源：usr/icebergs/base/mdb/mdb.go、usr/icebergs/base/aaa/aaa.go、平台 model。
+export const FIELDS = {
+  uid: '记录主键', id: '自增编号', time: '时间', name: '名称', title: '标题', text: '文本',
+  content: '内容', type: '类型', status: '状态', order: '排序', score: '分数', group: '分组',
+  valid: '有效', enable: '启用', member: '成员', expire: '过期', icon: '图标', help: '说明',
+  user_uid: '用户', place_uid: '实例', project_uid: '项目', target_uid: '目标', plan_uid: '计划',
+  task_uid: '任务', report_uid: '报告', feedback_uid: '反馈', image: '图片', link: '链接',
+  begin_time: '开始时间', end_time: '结束时间', process_time: '处理时间', finished_time: '完成时间',
+};
+
+export const ACTIONS = {
+  create: '创建', insert: '插入', modify: '修改', update: '更新', remove: '删除', delete: '删除',
+  select: '查询', list: '列表', detail: '详情', export: '导出', import: '导入', enable: '启用',
+  disable: '停用', prunes: '清理',
+};
+
+// 中文 → 框架字段名
+export const FIELD_ALIAS = {
+  名称: 'name', 名字: 'name', 标题: 'title', 内容: 'content', 说明: 'text', 备注: 'text', 描述: 'text',
+  类型: 'type', 状态: 'status', 顺序: 'order', 排序: 'order', 分数: 'score', 分组: 'group',
+  用户: 'user_uid', 成员: 'member', 时间: 'time', 图片: 'image', 链接: 'link',
+};
+
+// 中文动作 → 框架动作名
+export const ACTION_ALIAS = {
+  创建: 'create', 新建: 'create', 新增: 'create', 添加: 'create',
+  修改: 'modify', 编辑: 'modify', 更新: 'update',
+  删除: 'remove', 移除: 'remove',
+  查询: 'select', 查看: 'select', 列表: 'list', 详情: 'detail',
+  导出: 'export', 导入: 'import', 启用: 'enable', 停用: 'disable',
+};
+
+export const ROLES = {
+  root: '系统角色', tech: '技术人员', void: '普通', creator: '创建人', leader: '负责人',
+  worker: '执行人', member: '成员', visitor: '访客', server: '服务',
+};
+
+export const STYLES = ['guiding', 'notice', 'danger', 'primary', 'success', 'warning'];
+
+export function fieldOf(zh) {
+  const k = String(zh || '').trim();
+  return FIELD_ALIAS[k] || (FIELDS[k] ? k : '');
+}
+
+export function actionOf(zh) {
+  const k = String(zh || '').trim();
+  return ACTION_ALIAS[k] || (ACTIONS[k] ? k : '');
+}
+
+export function checkField(name) {
+  const n = String(name || '').trim();
+  if (FIELDS[n]) return { ok: true, name: n, help: FIELDS[n] };
+  const alt = fieldOf(n);
+  if (alt) return { ok: true, name: alt, help: FIELDS[alt], renamed: alt !== n };
+  return { ok: false, name: n, suggest: Object.keys(FIELDS).join(', ') };
+}
+
+export function checkAction(name) {
+  const n = String(name || '').trim().toLowerCase();
+  if (ACTIONS[n]) return { ok: true, name: n, label: ACTIONS[n] };
+  const alt = actionOf(n);
+  if (alt) return { ok: true, name: alt, label: ACTIONS[alt], renamed: alt !== n };
+  return { ok: false, name: n, suggest: Object.keys(ACTIONS).join(', ') };
+}
+
+// 生成声明标签：name / help / icon / role / style
+export function declAttrs({ name = '', params = '', help = '', icon = '', role = '', style = '' } = {}) {
+  const out = [];
+  out.push(`name:"${[name, params].filter(Boolean).join(' ')}"`);
+  if (help) out.push(`help:"${help}"`);
+  if (icon) out.push(`icon:"${icon}"`);
+  if (role) out.push(`role:"${role}"`);
+  if (style) out.push(`style:"${style}"`);
+  return out.join(' ');
+}
+
+// 参数声明文法（usr/icebergs/info.go SplitCmd）：
+//   name*(:text|textarea|select|button|password)=value@action
+//   - name 后跟 * 表示必填（need:must）
+//   - :type 指定类型；select 的候选值用逗号分隔写进 =value
+//   - @action 绑定按钮动作（create/modify/remove/img/date…）
+//   - 后缀自动推导：_info/_content → textarea；_uid/_type/_status、type/status → select；
+//     _image → text+img；_time → select+date
+export const PARAM_TYPES = ['text', 'textarea', 'select', 'button', 'password', 'img', 'video', 'date'];
+
+export function autoType(name) {
+  const n = String(name || '');
+  if (/_info$|_content$|^content$|^text$/.test(n)) return 'textarea';
+  if (/_uid$|_type$|_status$|^type$|^status$/.test(n)) return 'select';
+  if (/_image$|^image$/.test(n)) return 'img';
+  if (/_time$/.test(n)) return 'date';
+  return 'text';
+}
+
+export function paramOf({ name, type = '', required = false, value = '', action = '' } = {}) {
+  const n = String(name || '').trim();
+  if (!n) return '';
+  const t = type || autoType(n);
+  let s = n + (required ? '*' : '');
+  if (t && t !== 'text') s += `:${t}`;
+  if (value) s += `=${value}`;
+  if (action) s += `@${action}`;
+  return s;
+}
+
+export function paramSpec(list = []) {
+  return list.map((x) => (typeof x === 'string' ? paramOf({ name: x, required: /^[a-z_]+$/.test(x) && x !== 'content' }) : paramOf(x))).join(' ');
+}
+
+// 模块常用函数（框架约定，顺序固定）
+export const MODULE_FUNCS = [
+  { name: 'Init', sig: 'func (s %s) Init(m *ice.Message, arg ...string) { s.Hash.Init(m, arg...) }', rank: 0, help: '启动时加载（注册数据、初始化缓存）' },
+  { name: 'Exit', sig: 'func (s %s) Exit(m *ice.Message, arg ...string) { s.Hash.Exit(m, arg...) }', rank: 1, help: '停止时卸载（关闭句柄、落盘）' },
+  { name: 'Inputs', sig: 'func (s %s) Inputs(m *ice.Message, arg ...string) { s.Hash.Inputs(m, arg...) }', rank: 2, help: '参数补全（前端联动取值）' },
+  { name: 'Create', sig: 'func (s %s) Create(m *ice.Message, arg ...string) { s.ValueCreate(m, arg...) }', rank: 3, help: '新增' },
+  { name: 'Modify', sig: 'func (s %s) Modify(m *ice.Message, arg ...string) { s.ValueModify(m, arg...) }', rank: 4, help: '修改' },
+  { name: 'Remove', sig: 'func (s %s) Remove(m *ice.Message, arg ...string) { s.ValueRemove(m, arg...) }', rank: 5, help: '删除' },
+  { name: 'List', sig: 'func (s %s) List(m *ice.Message, arg ...string) *ice.Message { s.Select(m, arg...); return m }', rank: 7, help: '列表' },
+];
+
+// 自定义动作落在 Remove 之后、List 之前
+export function funcRank(name) {
+  const hit = MODULE_FUNCS.find((f) => f.name === String(name));
+  return hit ? hit.rank : 6;
+}
+
+export function moduleSkeleton(mod = 'note', cls = 'system') {
+  const base = cls === 'platform' ? 'Table' : 'Hash';
+  const body = MODULE_FUNCS.map((f) => f.sig.replace('%s', mod).replace(/s\.Hash\./g, `s.${base}.`)).join('\n');
+  return `${body}\n`;
+}
+
+// 权限检查：接口声明 role 之外，函数内还可自查
+// 系统角色：m.IsTech()（tech/root，等价 aaa.IsTechOrRoot(m)）
+// 成员角色：s.IsCreator / s.IsLeader / s.IsWorker（model.USER_ROLE 0..3）
+export const ROLE_LEVEL = { visitor: 0, creator: 1, leader: 2, worker: 3 };
+
+export function guardOf(role) {
+  const r = String(role || '').trim();
+  if (!r) return '';
+  if (r === 'root' || r === 'tech') return 'if m.WarnNotRight(!m.IsTech()) { return }';
+  if (r === 'creator') return 'if m.WarnNotRight(!s.IsCreator(m)) { return }';
+  if (r === 'leader') return 'if m.WarnNotRight(!s.IsLeader(m)) { return }';
+  if (r === 'worker') return 'if m.WarnNotRight(!s.IsWorker(m)) { return }';
+  if (r === 'member' || r === 'visitor') return 'if m.WarnNotRight(!s.IsWorker(m)) { return }';
+  return '';
+}
+
+// 从中文里识别角色
+export function roleOf(text = '') {
+  const t = String(text);
+  if (/(系统管理员|管理员|运维|技术)/.test(t)) return 'tech';
+  if (/(负责人|主管|经理|领导)/.test(t)) return 'leader';
+  if (/(创建人|发起人)/.test(t)) return 'creator';
+  if (/(执行人|员工|经办人|操作员)/.test(t)) return 'worker';
+  return '';
+}

package/lib/misc/async.js

@@ -0,0 +1,15 @@
+// 外部辅助：通用异步等待。
+export async function waitFor(fn, { timeout = 40000, interval = 700, label = 'condition' } = {}) {
+  const started = Date.now();
+  let last;
+  while (Date.now() - started < timeout) {
+    try {
+      last = await fn();
+      if (last) return last;
+    } catch (error) {
+      last = error;
+    }
+    await new Promise((r) => setTimeout(r, interval));
+  }
+  throw new Error(`timeout waiting for ${label}`);
+}

package/lib/misc/shell.js

@@ -0,0 +1,27 @@
+// 外部辅助工具（叶子层）：进程执行与平台 shell 参数。misc 不 import base/core。
+import { spawn } from 'node:child_process';
+
+export const isWin = process.platform === 'win32';
+
+/** shell 执行参数：Unix 用 /bin/sh -c，Windows 用 cmd /c。 */
+export function shellArgs(script) {
+  return isWin ? ['cmd.exe', ['/d', '/s', '/c', script]] : ['/bin/sh', ['-c', script]];
+}
+
+export function runShell(script, cwd, { timeoutMs = 900000 } = {}) {
+  const [cmd, args] = shellArgs(script);
+  return new Promise((resolve, reject) => {
+    const child = spawn(cmd, args, { cwd, env: { ...process.env }, stdio: ['ignore', 'pipe', 'pipe'] });
+    let out = '';
+    let err = '';
+    child.stdout.on('data', (d) => { out += d; if (out.length > 65536) out = out.slice(-32768); });
+    child.stderr.on('data', (d) => { err += d; if (err.length > 65536) err = err.slice(-32768); });
+    const t = setTimeout(() => { try { child.kill('SIGKILL'); } catch {} reject(new Error('shell timeout')); }, timeoutMs);
+    child.on('error', (e) => { clearTimeout(t); reject(e); });
+    child.on('close', (code) => { clearTimeout(t); resolve({ code, out, err }); });
+  });
+}
+
+export function spawnDetached(cmd, args) {
+  try { spawn(cmd, args, { detached: true, stdio: 'ignore' }).unref(); } catch { /* 打不开就静默 */ }
+}

package/lib/misc/static.js

@@ -0,0 +1,33 @@
+// 外部辅助：静态资源前缀路由（monaco/xterm/three/leaflet）。
+import fsp from 'node:fs';
+import path from 'node:path';
+
+export const STATIC_MIME = {
+  '.js': 'application/javascript; charset=utf-8',
+  '.css': 'text/css; charset=utf-8',
+  '.json': 'application/json; charset=utf-8',
+  '.ttf': 'font/ttf',
+  '.woff': 'font/woff',
+  '.woff2': 'font/woff2',
+  '.svg': 'image/svg+xml',
+  '.map': 'application/json',
+  '.html': 'text/html; charset=utf-8',
+  '.png': 'image/png',
+};
+
+export const makeStatic = (prefix, root) => (req, res) => {
+    try {
+      const pathname = decodeURIComponent(new URL(req.url || '/', 'http://x').pathname);
+      const rel = pathname.slice(prefix.length).replace(/^\/+/, '');
+      const file = path.normalize(path.join(root, rel));
+      if (file !== root && !file.startsWith(root + path.sep)) { res.writeHead(403); res.end(); return; }
+      const data = fsp.readFileSync(file);
+      const ext = path.extname(file).toLowerCase();
+      res.writeHead(200, { 'content-type': STATIC_MIME[ext] || 'application/octet-stream', 'cache-control': 'public, max-age=3600' });
+      res.end(data);
+    } catch {
+      res.writeHead(404);
+      res.end();
+    }
+  };
+

package/locale/en.json

@@ -0,0 +1,10 @@
+{
+  "meta": {
+    "title": "ContextOS DevOps",
+    "description": "Deploy ContextOS nodes, create project spaces and apps, and read/write app records from one panel."
+  },
+  "contextosDevops": {
+    "title": "ContextOS DevOps",
+    "subtitle": "Nodes · Spaces · Apps · Data"
+  }
+}

package/locale/zh.json

@@ -0,0 +1,10 @@
+{
+  "meta": {
+    "title": "ContextOS DevOps",
+    "description": "部署 ContextOS 服务节点、创建项目空间与应用、写入并回读应用数据的一站式 DevOps 面板。"
+  },
+  "contextosDevops": {
+    "title": "ContextOS DevOps",
+    "subtitle": "节点 · 空间 · 应用 · 数据"
+  }
+}

package/package.json

@@ -1,6 +1,93 @@
 {
   "name": "dsh-contextos-devops",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.48.31",
+  "type": "module",
+  "description": "ContextOS DevOps for DeepSeek Harness: one dashboard for cluster nodes, project spaces, apps, avatars, PM boards and IoT devices, with an in-app Copilot that can deploy and scaffold.",
+  "exports": {
+    ".": "./index.js",
+    "./client": "./client.js",
+    "./locale/*.json": "./locale/*.json",
+    "./icon": "./icon.svg"
+  },
+  "files": [
+    "index.js",
+    "client.js",
+    "lib/",
+    "cordis.patch.yml",
+    "locale/*.json",
+    "icon.svg",
+    "README.md",
+    "vendor/xterm/*",
+    "vendor/three/*",
+    "vendor/leaflet/*",
+    "src/client/**",
+    "build/**",
+    "assets/**",
+    "LICENSE",
+    "assets/icon-180.png"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "immediately": true,
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-layout",
+        "@deepseek-ai/dsh-client-ui-sidebar"
+      ]
+    }
+  },
+  "scripts": {
+    "build:client": "node build/client.mjs && node scripts/gate.mjs && node scripts/load-check.mjs && node scripts/hook-order-check.mjs && node scripts/op-check.mjs && node scripts/store-check.mjs && node scripts/ui-check.mjs && node scripts/ui-probe.mjs --soft && node scripts/i18n-check.mjs && node scripts/context-check.mjs && node scripts/docs-check.mjs && node scripts/docs-budget.mjs --check && node scripts/publish-check.mjs",
+    "watch:client": "node build/client.mjs --watch",
+    "check:ui": "node scripts/ui-check.mjs",
+    "check:probe": "node scripts/ui-probe.mjs",
+    "check:context": "node scripts/context-check.mjs",
+    "verify:factory": "node scripts/accept-factory.mjs",
+    "check:i18n": "node scripts/i18n-check.mjs",
+    "gate": "node scripts/gate.mjs",
+    "verify:ui": "node scripts/ui-verify.mjs",
+    "release": "npm run build:client && node scripts/ui-verify.mjs",
+    "check:hooks": "node scripts/hook-order-check.mjs",
+    "check:ops": "node scripts/op-check.mjs",
+    "check:store": "node scripts/store-check.mjs",
+    "check:docs": "node scripts/docs-check.mjs",
+    "check:load": "node scripts/load-check.mjs",
+    "stats:ledger": "node scripts/ledger-stats.mjs",
+    "check:budget": "node scripts/docs-budget.mjs --check",
+    "push:all": "node scripts/push-all.mjs",
+    "check:publish": "node scripts/publish-check.mjs",
+    "publish:npm": "node scripts/publish-npm.mjs"
+  },
+  "license": "MIT",
+  "author": {
+    "name": "shy",
+    "url": "https://shylinux.com"
+  },
+  "homepage": "https://github.com/contextos-devops/dsh-contextos-devops#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/contextos-devops/dsh-contextos-devops.git"
+  },
+  "bugs": {
+    "url": "https://github.com/contextos-devops/dsh-contextos-devops/issues"
+  },
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek",
+    "deepseek-harness",
+    "contextos",
+    "devops",
+    "deploy",
+    "copilot",
+    "cluster",
+    "project-management"
+  ],
+  "engines": {
+    "node": ">=20",
+    "dsh": ">=0.2.2-rc.1 <1.0.0"
+  }
+}

package/src/client/README.md

@@ -0,0 +1,37 @@
+# Frontend source layout
+
+`client.js` is generated by `build/client.mjs`.
+
+Source fragments intentionally share the lexical scope of the DSH
+`window.__ModuleLoader__.load({ factory(require) { ... } })` factory. They are
+not standalone ES modules yet.
+
+## Fragments (build order)
+
+```text
+parts/00-prelude.js       ModuleLoader shell, constants, icons, translations
+parts/05-bootstrap.js     api(), events, timeouts
+parts/10-ui.js            Panel/Btn/Field/Tabs/EmptyState
+parts/20-devworkspace.js  Monaco, xterm, file tree, Git, preview
+parts/30-modals.js        DropSelect/MenuButton/Modal/Scene/AvatarEdit
+parts/32-cards.js         NodeCard/SpaceCard/ItemIcon/AppRow/StoreRow
+parts/34-forms.js         Deploy/Space/App/Code/Instance/StoreInstance
+parts/36-data.js          Avatar/Device/Data modals
+parts/40-project.js       InitOverlay, PmCalendar, MultiFilter
+parts/45-map.js           Leaflet task map
+parts/46-pm.js            PM form, RichText
+parts/47-three.js         ThreeAvatar, ThreeCity, TechBackdrop
+parts/50-chat.js          ChatPanel and action execution
+parts/60-page.js          Page, Boundary, plugin registration
+```
+
+## Rules
+
+- Edit files in `src/client/parts/` and `src/client/styles/`.
+- Do not edit `client.js` directly.
+- Keep fragments in build order; later fragments can use earlier declarations.
+- CSS order is `main.css` then `kit.css`.
+- Build: `npm run build:client`.
+- Validate: `node --check client.js`.
+- The default avatar is served from `assets/avatar.jpg`, not embedded in JS.
+- Styles are built into `assets/client.css` and loaded via a cached `<link>`; only critical shell CSS stays inline.