dsh-ego-webqa 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Roy
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,160 @@
-# Temporary Holding Version
+# dsh-ego-webqa
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+DSH bundle for [ego-webqa](https://github.com/ROY32172310/qa). It exposes the
+existing deterministic web-delivery audit as a native DSH MCP tool without
+duplicating any browser checks in TypeScript.
+
+After installation, the model sees:
+
+```text
+mcp__ego_webqa__audit_web_page
+```
+
+The tool checks a page across the mobile matrix, returns the existing
+`agent_summary.json` contract, and retains screenshots plus `report.json` as
+evidence.
+
+## Why a bundle instead of another tool implementation
+
+DSH already ships `@deepseek-ai/dsh-mcp-client`. This package contributes one
+declarative Cordis patch row that starts:
+
+```text
+uvx ego-webqa@0.4.2 mcp
+```
+
+DSH supervises that process, discovers `audit_web_page`, applies normal tool
+approval and cancellation, and reconnects it if the process exits. The Python
+package remains the single source of truth for detectors, thresholds, report
+schemas, and release compatibility.
+
+## Requirements
+
+- DSH `>=0.1.5-rc.1 <0.3.0`
+- `uv` / `uvx` available on `PATH`
+- A Playwright Chromium browser available to the `uvx` environment
+
+Install Chromium once for the pinned ego-webqa version:
+
+```bash
+uvx --from ego-webqa@0.4.2 playwright install chromium
+```
+
+On Linux CI hosts without a desktop browser, use:
+
+```bash
+uvx --from ego-webqa@0.4.2 playwright install --with-deps chromium
+```
+
+## Install
+
+```bash
+dsh plugin --profile default add dsh-ego-webqa
+```
+
+DSH 0.2.1+ can also discover it from the published format-1 market index:
+
+```text
+https://roy32172310.github.io/dsh-ego-webqa/index.json
+```
+
+The index is validated with `@deepseek-ai/dsh-plugin-market-index` in CI.
+
+Inspect the resulting layer without starting DSH:
+
+```bash
+dsh --profile default --dump-config
+```
+
+Start DSH normally or explicitly select the profile:
+
+```bash
+dsh --profile default
+```
+
+The first MCP launch may take longer while `uvx` creates its isolated Python
+environment. Later launches reuse that cache.
+
+## Use
+
+Ask DSH to audit the deployed URL before delivery, for example:
+
+```text
+Audit https://preview.example before you call the page complete.
+```
+
+The MCP tool accepts the URL and the existing bounded audit options. Its
+structured result includes:
+
+- delivery status (`pass`, `warn`, or `fail`);
+- aggregated blocking and warning findings;
+- suggested fixes and reproduction commands;
+- paths to `agent_summary.json`, `report.json`, and screenshots.
+
+A blocking page defect is a successful tool execution with a `fail` report.
+An execution error means the browser, CLI, or MCP process could not complete,
+and must not be presented as a page-quality failure.
+
+## Operational boundaries
+
+- One tool call represents one bounded audit invocation.
+- The MCP server exposes one tool. There is no second set of DSH-only checks.
+- `safe` smoke mode remains the default in ego-webqa; side effects require the
+  existing explicit live-mode configuration in the Python tool.
+- The MCP client scrubs credential-shaped environment variables before starting
+  the child process.
+- This bundle does not install Python, `uvx`, or Chromium implicitly. Missing
+  prerequisites fail visibly instead of silently disabling QA.
+
+## Versioning
+
+The bundle pins the tested ego-webqa version in `cordis.patch.yml`. A DSH
+adapter release is required only when its compatibility window or MCP launch
+contract changes, not for every detector release in the Python package.
+
+To use a locally installed CLI instead of `uvx`, override the generated row in
+the profile's `cordis.patch.yml`:
+
+```yaml
+- id: ego-webqa
+  name: '@deepseek-ai/dsh-mcp-client'
+  config:
+    serverName: ego_webqa
+    transport: stdio
+    command: ego-webqa
+    args: [mcp]
+    cwd: !!js process.cwd()
+    toolCallTimeoutMs: 90000
+    failOnStartupError: true
+    reconnect:
+      enabled: true
+      initialDelayMs: 500
+      maxDelayMs: 30000
+      maxAttempts: 10
+```
+
+## Troubleshooting
+
+If the tool is absent, inspect the DSH log for the `ego-webqa` MCP row. Common
+causes are:
+
+- `uvx` is not on the DSH process `PATH`;
+- the pinned ego-webqa package version cannot be downloaded;
+- Chromium was installed for a different `uv` cache or user account;
+- the configured DSH version is outside `engines.dsh`.
+
+Run the underlying server directly to isolate DSH from the Python package:
+
+```bash
+uvx ego-webqa@0.4.2 mcp
+```
+
+For a normal CLI audit and complete evidence, run:
+
+```bash
+uvx ego-webqa@0.4.2 https://preview.example --out .qa/dsh
+```
+
+## License
+
+MIT

package/cordis.patch.yml

@@ -0,0 +1,23 @@
+# DSH bundle patch for ego-webqa.
+#
+# DSH already owns a native MCP client. This bundle intentionally adds only the
+# MCP connection row; the Python ego-webqa package remains the sole
+# implementation of browser checks and report generation.
+- insert:
+    - id: ego-webqa
+      name: '@deepseek-ai/dsh-mcp-client'
+      config:
+        serverName: ego_webqa
+        transport: stdio
+        command: uvx
+        args:
+          - ego-webqa@0.4.2
+          - mcp
+        cwd: !!js process.cwd()
+        toolCallTimeoutMs: 90000
+        failOnStartupError: true
+        reconnect:
+          enabled: true
+          initialDelayMs: 500
+          maxDelayMs: 30000
+          maxAttempts: 10

package/icon.svg

@@ -0,0 +1,7 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 128 128" role="img" aria-label="ego-webqa">
+  <rect width="128" height="128" rx="28" fill="#0f172a"/>
+  <rect x="26" y="22" width="76" height="84" rx="12" fill="none" stroke="#7dd3fc" stroke-width="8"/>
+  <path d="M48 52l12 12-12 12M67 77h15" fill="none" stroke="#f8fafc" stroke-width="8" stroke-linecap="round" stroke-linejoin="round"/>
+  <circle cx="95" cy="94" r="18" fill="#22c55e"/>
+  <path d="M86 94l6 6 12-14" fill="none" stroke="#052e16" stroke-width="5" stroke-linecap="round" stroke-linejoin="round"/>
+</svg>

package/package.json

@@ -1,6 +1,54 @@
 {
   "name": "dsh-ego-webqa",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "description": "Install ego-webqa's deterministic web-delivery audit as a DSH MCP tool.",
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "mcp",
+    "playwright",
+    "web-qa",
+    "ai-generated"
+  ],
+  "homepage": "https://github.com/ROY32172310/dsh-ego-webqa",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ROY32172310/dsh-ego-webqa.git"
+  },
+  "bugs": {
+    "url": "https://github.com/ROY32172310/dsh-ego-webqa/issues"
+  },
+  "author": "Roy",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "files": [
+    "cordis.patch.yml",
+    "icon.svg",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "dsh": ">=0.1.5-rc.1 <0.3.0"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/dsh-mcp-client": ">=0.1.5-rc.1 <0.3.0"
+  },
+  "scripts": {
+    "check": "node scripts/check-package.mjs",
+    "market:build": "node scripts/build-market-index.mjs",
+    "test": "node --test"
+  },
+  "devDependencies": {
+    "@deepseek-ai/dsh-plugin-market-index": "0.2.1-alpha.4"
+  }
+}