dsh-deepseek-web-login 0.2.0

package/package.json

@@ -0,0 +1,79 @@
+{
+  "name": "dsh-deepseek-web-login",
+  "version": "0.2.0",
+  "description": "Unofficial DSH plugin: use chat.deepseek.com web models as a DSH LLM provider (browser login capture + PoW solving + SSE streaming + prompting-based tool calls), provider route deepseek-web",
+  "type": "module",
+  "main": "./lib/index.js",
+  "exports": {
+    ".": {
+      "default": "./lib/index.js"
+    },
+    "./client": {
+      "default": "./lib/client.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "cordis.patch.yml",
+    "scripts/build.sh",
+    "scripts/build.mjs",
+    "scripts/prepare.mjs",
+    "scripts/make-dev-copy.mjs",
+    "README.md",
+    "README.en.md",
+    "docs/assets",
+    "LICENSE",
+    "NOTICE",
+    "CHANGELOG.md",
+    "tools"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/cv-superding/dsh-deepseek-web-login.git"
+  },
+  "homepage": "https://github.com/cv-superding/dsh-deepseek-web-login#readme",
+  "bugs": {
+    "url": "https://github.com/cv-superding/dsh-deepseek-web-login/issues"
+  },
+  "license": "Apache-2.0",
+  "author": "cv-superding (Ding Li)",
+  "keywords": [
+    "dsh",
+    "deepseek-harness",
+    "cordis-plugin",
+    "deepseek",
+    "llm",
+    "provider"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-ui-slots"
+      ],
+      "platform": "web"
+    }
+  },
+  "scripts": {
+    "build": "node scripts/build.mjs",
+    "test": "node scripts/test-offline.mjs",
+    "prepare": "node scripts/prepare.mjs"
+  },
+  "engines": {
+    "node": "^22.18.0 || >=24.11.0"
+  },
+  "devDependencies": {
+    "@types/node": "24.13.3",
+    "@types/react": "19.3.0",
+    "tsdown": "0.22.14",
+    "typescript": "5.9.3"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  }
+}

package/scripts/build.mjs

@@ -0,0 +1,59 @@
+#!/usr/bin/env node
+/**
+ * 跨平台构建入口（审计 F20）。
+ *
+ * 为什么不用原来的 `bash scripts/build.sh`：Windows 上只装了 Node/npm、没有 Bash 时
+ * `npm run build` 会直接失败（构建脚本本身没毛病，问题是它要求一个 Unix shell）。
+ * 这里用 Node 直接起本地 tsdown 的 CLI，全程不经过 shell。
+ *
+ * 为什么不再用「npx 兜底」取工具：
+ *   - 缺依赖时会**联网下载** → 断网就构建不了；
+ *   - 版本写的是范围，同一份源码在不同时间可能解析到不同的依赖树（不可复现）。
+ * 现在只认本地已安装的 tsdown（`npm ci` 装的），缺了就明确报错并给出命令。
+ */
+import { createRequire } from 'node:module'
+import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+import { spawnSync } from 'node:child_process'
+import { fileURLToPath } from 'node:url'
+
+const ROOT = dirname(dirname(fileURLToPath(import.meta.url)))
+
+/** 从已安装的 tsdown 包里找出 CLI 入口（不依赖 .bin 软链，Windows 上更稳）。 */
+function findTsdownBin() {
+  const require = createRequire(import.meta.url)
+  const manifest = require.resolve('tsdown/package.json')
+  const pkg = JSON.parse(readFileSync(manifest, 'utf8'))
+  const bin = typeof pkg.bin === 'string' ? pkg.bin : pkg.bin?.tsdown
+  if (!bin) throw new Error('tsdown 的 package.json 里找不到 CLI 入口（bin.tsdown）')
+  return { version: pkg.version, path: resolve(dirname(manifest), bin) }
+}
+
+const libDir = join(ROOT, 'lib')
+try {
+  const tsdown = findTsdownBin()
+  const result = spawnSync(process.execPath, [tsdown.path, '--config', 'tsdown.config.ts'], {
+    cwd: ROOT,
+    stdio: 'inherit',
+    // shell: false —— 不经过 cmd.exe / bash，路径里有空格也不会被拆开
+    shell: false,
+  })
+  if (result.error) throw result.error
+  if (result.status !== 0) {
+    process.exitCode = result.status ?? 1
+  } else {
+    console.log(`[build] tsdown ${tsdown.version} 构建完成，产物：`)
+    if (existsSync(libDir)) {
+      for (const name of readdirSync(libDir).sort()) {
+        if (!name.endsWith('.js')) continue
+        const size = statSync(join(libDir, name)).size
+        console.log(`  ${name.padEnd(12)} ${(size / 1024).toFixed(1)} KB`)
+      }
+    }
+  }
+} catch (error) {
+  console.error('[build] 构建失败：找不到可用的本地 tsdown。')
+  console.error('[build] 请先在包目录执行 npm ci 安装开发依赖（本脚本不会联网下载工具）。')
+  console.error(`[build] 原因：${error?.message ?? error}`)
+  process.exitCode = 1
+}

package/scripts/build.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# 兼容入口：真正的实现在 scripts/build.mjs（跨平台、不联网下载工具）。
+# 保留这个文件名是为了老的调用习惯（文档/脚本里出现过 `bash scripts/build.sh`）。
+set -euo pipefail
+cd "$(dirname "$0")/.."
+exec node scripts/build.mjs

package/scripts/make-dev-copy.mjs

@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+/**
+ * 生成「开发副本」包：把当前 lib/ 复制成 ../<name>-dev<N>，并改写 package.json 的 name。
+ *
+ * 为什么需要：当前 DSH 版本（0.1.2-rc.1）移除了 loader 热重载所需的 API，
+ * 且 Node ESM 模块缓存以「解析后的文件路径」为键 —— 同一路径重新注入仍会命中
+ * 旧模块实例（实测：改了 lib/index.js 再注入，运行时仍是旧对象）。
+ * 因此迭代时改用新包名/新路径注入，卸载即净；正式交付仍用本目录原名。
+ *
+ * 用法：node scripts/make-dev-copy.mjs [suffix]    → 输出副本目录绝对路径
+ */
+import { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync, rmSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+const base = JSON.parse(readFileSync(join(ROOT, 'package.json'), 'utf8'))
+const suffix = process.argv[2] || `dev${Date.now().toString(36).slice(-4)}`
+const name = `${base.name}-${suffix}`
+const target = resolve(ROOT, '..', name)
+
+// R9（0.2.0）：先**校验全部源产物**再动旧目录 —— 旧写法"先删后校"，
+// 产物缺失时旧副本已经被删了才报错，留下"想回退也没得回退"的窗口。
+for (const file of ['lib/index.js', 'lib/client.js']) {
+  if (!existsSync(join(ROOT, file))) {
+    console.error(`[dev-copy] 缺少构建产物 ${file} —— 先跑构建（旧副本未动）`)
+    process.exit(1)
+  }
+}
+
+if (existsSync(target)) rmSync(target, { recursive: true, force: true })
+mkdirSync(join(target, 'lib'), { recursive: true })
+
+for (const file of ['lib/index.js', 'lib/client.js']) {
+  copyFileSync(join(ROOT, file), join(target, file))
+}
+copyFileSync(join(ROOT, 'cordis.patch.yml'), join(target, 'cordis.patch.yml'))
+
+const pkg = { ...base, name }
+delete pkg.scripts
+delete pkg.devDependencies
+pkg.description = `${base.description}（开发副本 ${suffix}）`
+writeFileSync(join(target, 'package.json'), JSON.stringify(pkg, null, 2))
+writeFileSync(
+  join(target, 'README.md'),
+  `开发副本（${name}）—— 由 scripts/make-dev-copy.mjs 生成，用于绕过当前 DSH 版本的模块缓存热迭代。\n正式交付目录：${ROOT}\n`,
+)
+
+console.log(target)

package/scripts/prepare.mjs

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+// git/path 安装时的 prepare 兜底：lib/ 缺失则构建一次。
+//
+// 审计 F20：这里原来在缺依赖时走 npx 兜底（联网下载 + 版本范围），
+// 改成调用同一个跨平台构建脚本 —— 只有一份实现，也只有在装好开发依赖时才会成功。
+// 注意：真正的 npm 安装路径上 `prepare` 会被 npm 以 --ignore-scripts 跳过（CI 里就是），
+// 这里主要服务"从 git/path 直接装"的场景。
+import { existsSync } from 'node:fs'
+import { spawnSync } from 'node:child_process'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const ROOT = dirname(dirname(fileURLToPath(import.meta.url)))
+
+if (existsSync(join(ROOT, 'lib', 'index.js')) && existsSync(join(ROOT, 'lib', 'client.js'))) {
+  console.log('[prepare] lib/ already built — skipping')
+  process.exit(0)
+}
+
+const result = spawnSync(process.execPath, [join(ROOT, 'scripts', 'build.mjs')], {
+  cwd: ROOT,
+  stdio: 'inherit',
+  shell: false,
+})
+process.exit(result.status ?? 1)

package/tools/changelog-section.mjs

@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+/**
+ * 从 CHANGELOG.md 里取出指定版本的段落（发布说明复用 CHANGELOG，避免两处维护）。
+ *
+ *   node tools/changelog-section.mjs 0.1.3
+ *
+ * 找不到该版本时输出一行兜底说明并正常退出（不让发布流程挂掉）。
+ */
+import { readFileSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const version = (process.argv[2] ?? '').replace(/^v/, '').trim()
+const root = join(dirname(fileURLToPath(import.meta.url)), '..')
+
+if (!version) {
+  console.error('用法: node tools/changelog-section.mjs <版本号，如 0.1.3>')
+  process.exit(1)
+}
+
+let changelog = ''
+try {
+  changelog = readFileSync(join(root, 'CHANGELOG.md'), 'utf8')
+} catch (error) {
+  console.log(`CHANGELOG.md 读取失败：${error.message}`)
+  process.exit(0)
+}
+
+const lines = changelog.split('\n')
+const start = lines.findIndex((line) => new RegExp(`^##\\s+${version.replace(/\./g, '\\.')}(\\s|$)`).test(line))
+if (start === -1) {
+  console.log(`详见 CHANGELOG.md。安装：\`dsh plugin add ./dsh-deepseek-web-login-${version}.tgz\``)
+  process.exit(0)
+}
+let end = lines.length
+for (let i = start + 1; i < lines.length; i++) {
+  if (/^##\s/.test(lines[i])) {
+    end = i
+    break
+  }
+}
+console.log(lines.slice(start + 1, end).join('\n').trim())

package/tools/inspect-session.mjs

@@ -0,0 +1,223 @@
+#!/usr/bin/env node
+/**
+ * DSH 会话日志诊断工具。
+ *
+ * 用途：当出现「回复异常」时（被截断、只剩碎片、工具调用泄漏成正文、莫名重试），
+ * 直接从 DSH 的会话日志里读出**每一轮的原始事实**：用了哪个模型、模型消息里有哪些
+ * 内容块（长度/首尾）、结束原因、以及流式分块的类型与字节数。
+ *
+ * 用法：
+ *   node tools/inspect-session.mjs                      # 列出所有会话（时间/大小/消息数）
+ *   node tools/inspect-session.mjs <会话ID前缀>          # 诊断该会话的每一轮
+ *   node tools/inspect-session.mjs --search "关键词"     # 按关键词找会话（可多个关键词，逗号分隔）
+ *   node tools/inspect-session.mjs <ID前缀> --blocks    # 额外打印内容块的真实事件（原始 JSON 片段）
+ *
+ * 会话目录：`${DSH_HOME:-~/.dsh}/sessions/<workspace>/session-<id>/session.jsonl.zstd`
+ *
+ * ⚠️ 实现要点（踩坑）：该日志是**逐条追加的独立 zstd 帧**拼接而成（一个几 MB 的文件里可能有上万个帧头），
+ * `zlib.zstdDecompressSync` 与流式解压都只返回第一帧（约 200 字节的会话头）。
+ * 因此必须按帧头 magic (0x28 0xB5 0x2F 0xFD) 切分、逐帧解压后拼接 —— 见 inflate()。
+ *
+ * 隐私：本脚本只读本机会话日志，不联网、不上传任何内容。
+ */
+import { readFileSync, readdirSync, statSync, existsSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { join } from 'node:path'
+import zlib from 'node:zlib'
+
+const SESSION_ROOT = join(process.env.DSH_HOME || join(homedir(), '.dsh'), 'sessions')
+const ZSTD_MAGIC = Buffer.from([0x28, 0xb5, 0x2f, 0xfd])
+
+/** 解压「多帧拼接」的 zstd 日志。 */
+function inflate(buffer) {
+  const offsets = []
+  let index = -1
+  while ((index = buffer.indexOf(ZSTD_MAGIC, index + 1)) !== -1) offsets.push(index)
+  if (offsets.length === 0) return zlib.zstdDecompressSync(buffer).toString('utf8')
+  const chunks = []
+  for (let i = 0; i < offsets.length; i++) {
+    const end = offsets[i + 1] ?? buffer.length
+    try {
+      chunks.push(zlib.zstdDecompressSync(buffer.subarray(offsets[i], end)))
+    } catch {
+      // magic 可能出现在压缩数据内部：与下一帧合并重试
+      const nextEnd = offsets[i + 2] ?? buffer.length
+      try {
+        chunks.push(zlib.zstdDecompressSync(buffer.subarray(offsets[i], nextEnd)))
+        i += 1
+      } catch {
+        /* 跳过该帧 */
+      }
+    }
+  }
+  return Buffer.concat(chunks).toString('utf8')
+}
+
+function* sessionLogs(dir = SESSION_ROOT) {
+  let entries
+  try {
+    entries = readdirSync(dir, { withFileTypes: true })
+  } catch {
+    return
+  }
+  for (const entry of entries) {
+    const full = join(dir, entry.name)
+    if (entry.isDirectory()) yield* sessionLogs(full)
+    else if (entry.name === 'session.jsonl.zstd' || entry.name === 'session.jsonl') yield full
+  }
+}
+
+function readEvents(file) {
+  const raw = readFileSync(file)
+  const text = file.endsWith('.zstd') ? inflate(raw) : raw.toString('utf8')
+  const events = []
+  for (const line of text.split('\n')) {
+    if (!line.trim()) continue
+    try {
+      events.push(JSON.parse(line))
+    } catch {}
+  }
+  return events
+}
+
+const idOf = (file) => /session-([0-9a-f-]+)/.exec(file)?.[1] ?? file
+const shortId = (file) => idOf(file).slice(0, 8)
+const clock = (time) => new Date(time ?? 0).toISOString().slice(11, 19)
+
+function blocksSummary(content, preview = 60) {
+  return content
+    .map((block) => {
+      if (!block || typeof block !== 'object') return String(block)
+      if (typeof block.text === 'string') {
+        return `${block.type}(len=${block.text.length}) head=${JSON.stringify(block.text.slice(0, preview))} tail=${JSON.stringify(block.text.slice(-preview))}`
+      }
+      if (block.type === 'tool-call') return `tool-call(${block.name}) args=${String(block.arguments).slice(0, 80)}`
+      if (block.type === 'tool-result') return `tool-result(${(block.content ?? []).length} blocks)`
+      return String(block.type)
+    })
+    .join('\n        ')
+}
+
+function diagnose(file, showBlocks) {
+  const events = readEvents(file)
+  const stat = statSync(file)
+  console.log(`=== ${shortId(file)}  ${stat.mtime.toISOString()}  ${(stat.size / 1024).toFixed(1)}KB(zstd)  事件 ${events.length} ===\n`)
+
+  const chunkStats = new Map()
+  for (const event of events) {
+    const { type, data, time } = event
+    if (!data) continue
+    const at = clock(time)
+    if (type === 'turn/start') console.log(`\n━━━ turn ${data.turn} ━━━`)
+    else if (type === 'request/context') console.log(`[${at}] 模型: ${data.provider}/${data.model}  ctx=${data.contextWindow}`)
+    else if (type === 'request/header') {
+      const config = data.header?.config ?? {}
+      console.log(`[${at}] 请求配置: ${JSON.stringify(config)}  adapterDefaults=${JSON.stringify(data.header?.adapterDefaults ?? {})}`)
+    } else if (type === 'user/message') {
+      const text = (data.content ?? []).map((b) => b.text ?? `<${b.type}>`).join('')
+      if (text.trim()) console.log(`[${at}] 用户: ${JSON.stringify(text.slice(0, 90))}`)
+    } else if (type === 'assistant/chunk') {
+      const chunk = data.chunk ?? {}
+      const key = `${data.turn}/${data.step}`
+      const entry = chunkStats.get(key) ?? { kinds: new Map(), textChars: 0 }
+      const kind = entry.kinds.get(chunk.type) ?? { count: 0, chars: 0 }
+      kind.count += 1
+      if (typeof chunk.text === 'string') kind.chars += chunk.text.length
+      if (typeof chunk.argumentsDelta === 'string') kind.chars += chunk.argumentsDelta.length
+      entry.kinds.set(chunk.type, kind)
+      entry.textChars += typeof chunk.text === 'string' ? chunk.text.length : 0
+      chunkStats.set(key, entry)
+    } else if (type === 'text-chunks') {
+      // DSH 会把这些增量合并记录：texts 是分块原文，dt 是与前一块的间隔(ms)
+      console.log(`[${at}] 分块原文(文本): ${JSON.stringify(data.texts ?? []).slice(0, 300)}`)
+    } else if (type === 'assistant/message') {
+      const content = data.message?.content ?? data.content ?? []
+      console.log(`[${at}] 助手消息（${content.length} 块）:\n        ${blocksSummary(content)}`)
+      if (showBlocks) console.log(`        原始: ${JSON.stringify(data).slice(0, 600)}`)
+    } else if (type === 'step/end') {
+      console.log(`[${at}] step 结束: ${JSON.stringify(data).slice(0, 200)}`)
+    } else if (type === 'turn/end') {
+      console.log(`[${at}] turn 结束: ${JSON.stringify(data).slice(0, 200)}`)
+    } else if (type === 'tool/call') {
+      console.log(`[${at}] 工具调用: ${data.name ?? data.call?.name} args=${String(JSON.stringify(data.arguments ?? data.call?.arguments ?? '')).slice(0, 90)}`)
+    } else if (type === 'tool/result') {
+      console.log(`[${at}] 工具结果: ${String(JSON.stringify(data)).slice(0, 120)}`)
+    } else if (type === 'error' || type === 'session/error') {
+      console.log(`[${at}] ❌ 错误: ${JSON.stringify(data).slice(0, 300)}`)
+    }
+  }
+
+  if (chunkStats.size > 0) {
+    console.log('\n=== 流式分块统计（每 turn/step）===')
+    for (const [key, entry] of chunkStats) {
+      const kinds = [...entry.kinds.entries()].map(([k, v]) => `${k}×${v.count}(text ${v.chars}B)`).join('  ')
+      const warn = entry.kinds.has('usage') && entry.kinds.get('usage').count > 1 ? '   ⚠ usage 出现多次 → 大概率发生了重试' : ''
+      console.log(`  ${key}: ${kinds}${warn}`)
+    }
+    console.log('\n提示：若「助手消息」的文本长度远小于分块字节数，或文本里出现 {"tool_calls":…} / <tool_calls>，')
+    console.log('      说明问题出在适配器的流式解析层；若 usage/finish 出现多次，说明触发了重试。')
+  }
+}
+
+function search(keywords) {
+  for (const file of sessionLogs()) {
+    let events
+    try {
+      events = readEvents(file)
+    } catch (error) {
+      console.error(`  ! 读取失败 ${file}: ${error.message}`)
+      continue
+    }
+    const text = JSON.stringify(events)
+    const hits = keywords.filter((keyword) => text.includes(keyword))
+    if (hits.length === 0) continue
+    const stat = statSync(file)
+    console.log(`${shortId(file)}  ${stat.mtime.toISOString()}  ${(stat.size / 1024).toFixed(1)}KB  命中: ${hits.join(', ')}`)
+  }
+}
+
+function list() {
+  const rows = []
+  for (const file of sessionLogs()) {
+    let events = []
+    try {
+      events = readEvents(file)
+    } catch {}
+    const titles = events.filter((e) => e.type === 'session/title').map((e) => e.data?.title).filter(Boolean)
+    rows.push({ id: shortId(file), mtime: statSync(file).mtime, size: statSync(file).size, count: events.length, title: titles.at(-1) ?? '' })
+  }
+  rows.sort((a, b) => b.mtime - a.mtime)
+  for (const row of rows.slice(0, 30)) {
+    console.log(`${row.id}  ${row.mtime.toISOString()}  ${(row.size / 1024).toFixed(1).padStart(8)}KB  事件 ${String(row.count).padStart(6)}  ${row.title}`)
+  }
+}
+
+// ── CLI ──
+const args = process.argv.slice(2)
+if (!existsSync(SESSION_ROOT)) {
+  console.error(`找不到会话目录：${SESSION_ROOT}（可通过 DSH_HOME 指定 DSH 主目录）`)
+  process.exit(1)
+}
+const searchArg = args.indexOf('--search')
+if (searchArg !== -1) {
+  const keywords = (args[searchArg + 1] ?? '').split(',').map((k) => k.trim()).filter(Boolean)
+  if (keywords.length === 0) {
+    console.error('用法: node tools/inspect-session.mjs --search "关键词1,关键词2"')
+    process.exit(1)
+  }
+  search(keywords)
+} else if (args[0] && !args[0].startsWith('--')) {
+  const prefix = args[0]
+  let found = false
+  for (const file of sessionLogs()) {
+    if (!file.includes(prefix)) continue
+    found = true
+    diagnose(file, args.includes('--blocks'))
+  }
+  if (!found) {
+    console.error(`没有匹配 "${prefix}" 的会话。先不带参数运行以列出会话 ID。`)
+    process.exit(1)
+  }
+} else {
+  list()
+}