dsh-enterprise-knowledge-steward 1.0.0 → 1.0.2

package/README.md

@@ -2,33 +2,42 @@
 
 制度与知识问答、清分数据、人员任职与信访台账。
 
-包名：`dsh-enterprise-knowledge-steward`
+包名：`dsh-enterprise-knowledge-steward`（当前 **1.0.2**）
 
-## 安装（npm 包名拉取）
+> 1.0.2 起已内置 `sm-crypto`，安装时不再向 npm 拉取依赖，可避免桌面版解析依赖 403。
 
-桌面版：设置 → 插件 → 安装框填入包名：
+## 安装（推荐指定版本）
+
+桌面版：设置 → 插件 → 安装框填入：
 
 ```
-dsh-enterprise-knowledge-steward
+dsh-enterprise-knowledge-steward@1.0.2
 ```
 
-CLI：
+若包名不被接受，粘贴 tarball：
 
-```bash
-# 桌面版 profile
-dsh plugin --profile desktop add dsh-enterprise-knowledge-steward
+```
+https://registry.npmjs.org/dsh-enterprise-knowledge-steward/-/dsh-enterprise-knowledge-steward-1.0.2.tgz
+```
+
+国内镜像：
 
-# Web profile
-dsh plugin --profile web add dsh-enterprise-knowledge-steward
+```
+https://registry.npmmirror.com/dsh-enterprise-knowledge-steward/-/dsh-enterprise-knowledge-steward-1.0.2.tgz
+```
+
+CLI：
 
-# 终端 TUI（按本机实际 profile 名）
-dsh plugin --profile dsh-tui add dsh-enterprise-knowledge-steward
+```bash
+dsh plugin --profile desktop add dsh-enterprise-knowledge-steward@1.0.2
+dsh plugin --profile web add dsh-enterprise-knowledge-steward@1.0.2
+dsh plugin --profile dsh-tui add dsh-enterprise-knowledge-steward@1.0.2
 ```
 
-无全局 `dsh` 时可用：
+无全局 `dsh` 时：
 
 ```bash
-npx @deepseek-ai/dsh plugin --profile desktop add dsh-enterprise-knowledge-steward
+npx @deepseek-ai/dsh plugin --profile desktop add dsh-enterprise-knowledge-steward@1.0.2
 ```
 
 安装后**完全退出再打开** DSH。
@@ -53,5 +62,5 @@ KMS_PASSWORD=你的密码
 
 ```bash
 dsh plugin --profile desktop add ./企业知识管家-dsh-plugin
-dsh plugin --profile desktop add ./dsh-enterprise-knowledge-steward-1.0.0.tgz
-```
+dsh plugin --profile desktop add ./dsh-enterprise-knowledge-steward-1.0.2.tgz
+```

package/lib/auth.js

@@ -22,15 +22,12 @@ const __dirname = path.dirname(fileURLToPath(import.meta.url))
 
 function loadSm2() {
   try {
-    return require('sm-crypto').sm2
-  } catch {
-    try {
-      return require(path.join(PLUGIN_ROOT, 'node_modules', 'sm-crypto')).sm2
-    } catch {
-      const err = new Error('缺少 sm-crypto：请在插件目录执行 npm install')
-      err.code = 'NO_SM_CRYPTO'
-      throw err
-    }
+    return require(path.join(PLUGIN_ROOT, 'vendor', 'sm-crypto')).sm2
+  } catch (e) {
+    const err = new Error('缺少内置 sm-crypto（vendor/sm-crypto），请重新安装插件包')
+    err.code = 'NO_SM_CRYPTO'
+    err.cause = e
+    throw err
   }
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-enterprise-knowledge-steward",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "企业知识管家：制度问答、清分数据、人员任职与信访台账",
   "type": "module",
   "main": "index.js",
@@ -9,6 +9,7 @@
     "index.js",
     "cordis.patch.yml",
     "lib",
+    "vendor",
     ".env.example",
     "README.md"
   ],
@@ -20,9 +21,7 @@
   "engines": {
     "dsh": ">=0.1.0-rc.0"
   },
-  "dependencies": {
-    "sm-crypto": "^0.3.13"
-  },
+  "dependencies": {},
   "peerDependencies": {
     "@deepseek-ai/dsh-tools": ">=0.1.0-rc.0",
     "@deepseek-ai/cordis": "*"

package/vendor/sm-crypto/LICENCE_MIT

@@ -0,0 +1,7 @@
+Copyright © 2018 june01
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/vendor/sm-crypto/node_modules/jsbn/CHANGELOG.md

@@ -0,0 +1,16 @@
+# v1.1.0
+
+- Allow for es6 "default import", e.g. `import BigInteger from 'jsbn'`.
+- Updated license file to read MIT
+
+
+# v1.0.0
+
+- breaking change: `require('jsbn')` no longer returns `BigInteger`. Use `require('jsbn').BigInteger` instead.
+
+
+
+# v0.1.1
+
+- fixed backwards-incompatible change in v0.1.0 where `require('jsbn') != BigInteger`. This patch version allows for `var BigInteger = require('jsbn')` or `var BigInteger = require('jsbn').BigInteger`.
+

package/vendor/sm-crypto/node_modules/jsbn/LICENSE

@@ -0,0 +1,40 @@
+Licensing
+---------
+
+This software is covered under the following copyright:
+
+/*
+ * Copyright (c) 2003-2005  Tom Wu
+ * All Rights Reserved.
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining
+ * a copy of this software and associated documentation files (the
+ * "Software"), to deal in the Software without restriction, including
+ * without limitation the rights to use, copy, modify, merge, publish,
+ * distribute, sublicense, and/or sell copies of the Software, and to
+ * permit persons to whom the Software is furnished to do so, subject to
+ * the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be
+ * included in all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND, 
+ * EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY 
+ * WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.  
+ *
+ * IN NO EVENT SHALL TOM WU BE LIABLE FOR ANY SPECIAL, INCIDENTAL,
+ * INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY KIND, OR ANY DAMAGES WHATSOEVER
+ * RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER OR NOT ADVISED OF
+ * THE POSSIBILITY OF DAMAGE, AND ON ANY THEORY OF LIABILITY, ARISING OUT
+ * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ *
+ * In addition, the following condition applies:
+ *
+ * All redistributions must retain an intact copy of this copyright notice
+ * and disclaimer.
+ */
+
+Address all questions regarding this license to:
+
+  Tom Wu
+  tjw@cs.Stanford.EDU

package/vendor/sm-crypto/node_modules/jsbn/README.md

@@ -0,0 +1,173 @@
+# jsbn: javascript big number
+
+[Tom Wu's Original Website](http://www-cs-students.stanford.edu/~tjw/jsbn/)
+
+I felt compelled to put this on github and publish to npm. I haven't tested every other big integer library out there, but the few that I have tested in comparison to this one have not even come close in performance. I am aware of the `bi` module on npm, however it has been modified and I wanted to publish the original without modifications. This is jsbn and jsbn2 from Tom Wu's original website above, with the module pattern applied to prevent global leaks and to allow for use with node.js on the server side.
+
+## usage
+
+    var BigInteger = require('jsbn').BigInteger;
+
+    var bi = new BigInteger('91823918239182398123');
+    console.log(bi.bitLength()); // 67
+
+
+## API
+
+### bi.toString()
+
+returns the base-10 number as a string
+
+### bi.negate()
+
+returns a new BigInteger equal to the negation of `bi`
+
+### bi.abs
+
+returns new BI of absolute value
+
+### bi.compareTo
+
+
+
+### bi.bitLength
+
+
+
+### bi.mod
+
+
+
+### bi.modPowInt
+
+
+
+### bi.clone
+
+
+
+### bi.intValue
+
+
+
+### bi.byteValue
+
+
+
+### bi.shortValue
+
+
+
+### bi.signum
+
+
+
+### bi.toByteArray
+
+
+
+### bi.equals
+
+
+
+### bi.min
+
+
+
+### bi.max
+
+
+
+### bi.and
+
+
+
+### bi.or
+
+
+
+### bi.xor
+
+
+
+### bi.andNot
+
+
+
+### bi.not
+
+
+
+### bi.shiftLeft
+
+
+
+### bi.shiftRight
+
+
+
+### bi.getLowestSetBit
+
+
+
+### bi.bitCount
+
+
+
+### bi.testBit
+
+
+
+### bi.setBit
+
+
+
+### bi.clearBit
+
+
+
+### bi.flipBit
+
+
+
+### bi.add
+
+
+
+### bi.subtract
+
+
+
+### bi.multiply
+
+
+
+### bi.divide
+
+
+
+### bi.remainder
+
+
+
+### bi.divideAndRemainder
+
+
+
+### bi.modPow
+
+
+
+### bi.modInverse
+
+
+
+### bi.pow
+
+
+
+### bi.gcd
+
+
+
+### bi.isProbablePrime