dsh-mini 0.0.0-stage → 0.1.1

package/lib/index.js

@@ -0,0 +1,521 @@
+/**
+ * dsh-mini — host half.
+ *
+ * Pops the current conversation out into its own always-on-top window, the way
+ * Tencent Yuanbao's mini window works. The window is a browser `--app` window
+ * (chromeless, no address bar) loading the very same authenticated GUI URL the
+ * main window is on, plus a `dshHud=1` flag that the browser half reads to
+ * switch into HUD mode (title, compact chrome, screenshot key).
+ *
+ * Why a browser --app window instead of an Electron BrowserWindow: this plugin
+ * runs in the Cordis host process (a child of the Electron main process), so it
+ * has no access to Electron's window APIs. Spawning the installed browser with
+ * --app gives a real native second window with zero Electron coupling.
+ *
+ * The window is then pinned with SetWindowPos (scripts/win-hud.ps1), because an
+ * --app window has no always-on-top switch of its own.
+ */
+
+import { spawn } from 'node:child_process'
+import { existsSync, mkdirSync, readFileSync, writeFileSync, appendFileSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { tmpdir } from 'node:os'
+
+export const name = 'dsh-mini'
+export const inject = ['webServer']
+
+const HERE = dirname(fileURLToPath(import.meta.url))
+const SCRIPTS = join(HERE, '..', 'scripts')
+const WORK_DIR = join(process.env.LOCALAPPDATA ?? tmpdir(), 'dsh-hud')
+const SHOT_DIR = join(WORK_DIR, 'shots')
+const PROFILE_DIR = join(WORK_DIR, 'profile')
+
+/**
+ * The native shell built from `app/HudWindow.cs` (WebView2 + WinForms). It is
+ * the preferred backend: a real chromeless window we own, so the title bar,
+ * screenshot key and always-on-top state are ours instead of the browser's.
+ */
+const NATIVE_EXE = join(HERE, '..', 'app', 'bin', 'DSH小窗.exe')
+
+/** Exact-route prefix; the browser half uses the same constant. */
+const PREFIX = '/dsh-mini'
+
+/** Query flag that switches the page into HUD mode. */
+const HUD_FLAG = 'dshHud'
+
+/**
+ * Re-target an already running native shell. The exe polls `pending.txt` every
+ * 700 ms and navigates to whatever URL it finds, so writing it is how `open`
+ * moves an existing small window onto another conversation.
+ */
+function writePendingUrl(url) {
+  try {
+    mkdirSync(WORK_DIR, { recursive: true })
+    writeFileSync(join(WORK_DIR, 'pending.txt'), url, 'utf8')
+  } catch {
+    // A failed hand-off is not fatal: the window is already open.
+  }
+}
+
+function sendJson(res, status, value) {
+  const body = JSON.stringify(value)
+  res.writeHead(status, {
+    'content-type': 'application/json; charset=utf-8',
+    'cache-control': 'no-store',
+    'content-length': Buffer.byteLength(body),
+  })
+  res.end(body)
+}
+
+function readJson(req) {
+  return new Promise((resolve, reject) => {
+    let raw = ''
+    req.setEncoding('utf8')
+    req.on('data', (chunk) => {
+      raw += chunk
+      if (raw.length > 1_000_000) reject(new Error('body too large'))
+    })
+    req.on('end', () => {
+      if (raw.trim() === '') { resolve({}); return }
+      try { resolve(JSON.parse(raw)) } catch (error) { reject(new Error(`invalid JSON body: ${error.message}`)) }
+    })
+    req.on('error', reject)
+  })
+}
+
+/** First PowerShell that actually exists, preferring PowerShell 7. */
+function powershell() {
+  const windir = process.env.SystemRoot ?? 'C:\\Windows'
+  const candidates = [
+    join(process.env.ProgramFiles ?? 'C:\\Program Files', 'PowerShell', '7', 'pwsh.exe'),
+    join(windir, 'System32\\WindowsPowerShell\\v1.0\\powershell.exe'),
+  ]
+  for (const candidate of candidates) {
+    if (existsSync(candidate)) return candidate
+  }
+  throw new Error('no PowerShell found (looked for pwsh 7 and Windows PowerShell 5.1)')
+}
+
+/**
+ * Run one helper script and parse its single-line JSON reply.
+ * @param {string} script file name inside scripts/
+ * @param {string[]} args
+ */
+function runScript(script, args = []) {
+  return new Promise((resolve, reject) => {
+    const file = join(SCRIPTS, script)
+    if (!existsSync(file)) { reject(new Error(`hud: helper not found: ${file}`)); return }
+    let shell
+    try { shell = powershell() } catch (error) { reject(error); return }
+    const child = spawn(
+      shell,
+      ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-File', file, ...args],
+      { windowsHide: true, stdio: ['ignore', 'pipe', 'pipe'] },
+    )
+    let out = ''
+    let err = ''
+    child.stdout.setEncoding('utf8')
+    child.stderr.setEncoding('utf8')
+    child.stdout.on('data', (chunk) => { out += chunk })
+    child.stderr.on('data', (chunk) => { err += chunk })
+    child.on('error', (error) => { reject(error) })
+    child.on('close', (code) => {
+      const line = out.trim().split(/\r?\n/).filter((l) => l.trim().startsWith('{')).pop()
+      if (line === undefined) {
+        reject(new Error(`hud: ${script} produced no JSON (exit ${String(code)})${err ? `: ${err.trim().slice(0, 300)}` : ''}`))
+        return
+      }
+      let parsed
+      try { parsed = JSON.parse(line) } catch (error) { reject(new Error(`hud: ${script} returned unparsable JSON: ${error.message}`)); return }
+      if (parsed.status !== 'ok') { reject(new Error(`hud: ${script} failed: ${String(parsed.error ?? 'unknown')}`)); return }
+      resolve(parsed.data ?? {})
+    })
+  })
+}
+
+/** Locate an installed Chromium browser that supports `--app`. */
+function findBrowser(configured) {
+  if (configured && existsSync(configured)) return configured
+  const pf = process.env.ProgramFiles ?? 'C:\\Program Files'
+  const pf86 = process.env['ProgramFiles(x86)'] ?? 'C:\\Program Files (x86)'
+  const candidates = [
+    join(pf86, 'Microsoft\\Edge\\Application\\msedge.exe'),
+    join(pf, 'Microsoft\\Edge\\Application\\msedge.exe'),
+    join(pf, 'Google\\Chrome\\Application\\chrome.exe'),
+    join(pf86, 'Google\\Chrome\\Application\\chrome.exe'),
+    join(process.env.LOCALAPPDATA ?? pf, 'Google\\Chrome\\Application\\chrome.exe'),
+  ]
+  for (const candidate of candidates) if (existsSync(candidate)) return candidate
+  throw new Error('no Edge or Chrome found; set `browserPath` in the plugin config')
+}
+
+/**
+ * Add the HUD flag to a URL without disturbing an existing query string or hash.
+ * The GUI may route with `#/...`, so the flag must land before the hash.
+ */
+function withQuery(href, key, value) {
+  const hashIndex = href.indexOf('#')
+  const beforeHash = hashIndex >= 0 ? href.slice(0, hashIndex) : href
+  const hash = hashIndex >= 0 ? href.slice(hashIndex) : ''
+  const sep = beforeHash.includes('?') ? '&' : '?'
+  return `${beforeHash}${sep}${encodeURIComponent(key)}=${encodeURIComponent(value)}${hash}`
+}
+
+function withHudFlag(href) {
+  return withQuery(href, HUD_FLAG, '1')
+}
+
+function assertLocalHref(href) {
+  let url
+  try { url = new URL(href) } catch { throw new Error('href is not a URL') }
+  if (url.protocol !== 'http:' && url.protocol !== 'https:') throw new Error('href must be http(s)')
+  const host = url.hostname
+  if (host !== '127.0.0.1' && host !== 'localhost' && host !== '::1') {
+    throw new Error(`refusing to pop out a non-local URL (host: ${host})`)
+  }
+  return url
+}
+
+/**
+ * The address the Web carrier is reachable at. The desktop window cannot supply it
+ * (its own `location.href` is a custom scheme), so the host resolves it here.
+ */
+function advertise(ctx) {
+  try {
+    const webApp = typeof ctx.get === 'function' ? ctx.get('webApp') : undefined
+    if (webApp !== undefined && webApp !== null && typeof webApp.getAdvertisedUrl === 'function') {
+      const url = String(webApp.getAdvertisedUrl() ?? '')
+      if (url !== '') return url
+    }
+  } catch {
+    // Fall through to the carrier origin.
+  }
+  try {
+    const origin = ctx.webServer.getOrigin()
+    if (typeof origin === 'string' && origin !== '') return origin
+  } catch {
+    // Nothing advertised at all.
+  }
+  return ''
+}
+
+const CONFIG_PATH = join(WORK_DIR, 'config.ini')
+
+const CONFIG_DEFAULTS = { copyShot: true, ask: true, hotkeyFull: 'Ctrl+Shift+1', hotkeyRegion: 'Ctrl+Shift+2' }
+
+/**
+ * Settings live in a flat `key=value` file because the window shell (C# 5) and this
+ * plugin both read them and neither should need a JSON parser to do it.
+ */
+function readConfig() {
+  const config = { ...CONFIG_DEFAULTS }
+  try {
+    const text = readFileSync(CONFIG_PATH, 'utf8')
+    for (const raw of text.split(/\r?\n/)) {
+      const line = raw.trim()
+      if (line === '' || line.startsWith('#')) continue
+      const eq = line.indexOf('=')
+      if (eq <= 0) continue
+      const key = line.slice(0, eq).trim()
+      const value = line.slice(eq + 1).trim()
+      if (key === 'copyShot' || key === 'ask') config[key] = value !== '0'
+      else if (key === 'hotkeyFull' || key === 'hotkeyRegion') config[key] = value
+    }
+  } catch {
+    // Missing file means defaults.
+  }
+  return config
+}
+
+function writeConfig(config) {
+  mkdirSync(WORK_DIR, { recursive: true })
+  const lines = [
+    '# DSH 小窗设置 / settings. The C# shell reads this file too.',
+    `copyShot=${config.copyShot ? '1' : '0'}`,
+    `ask=${config.ask ? '1' : '0'}`,
+    `hotkeyFull=${config.hotkeyFull}`,
+    `hotkeyRegion=${config.hotkeyRegion}`,
+  ]
+  writeFileSync(CONFIG_PATH, lines.join('\n') + '\n', 'utf8')
+}
+
+/** Tokenized address the shell and the background service can both open. */
+function tokenizedAddress(ctx) {
+  const base = advertise(ctx)
+  if (base === '') return ''
+  try {
+    const target = new URL(base)
+    const clean = `${target.origin}${target.pathname}`
+    const connection = typeof ctx.get === 'function' ? ctx.get('connection') : undefined
+    if (connection !== undefined && connection !== null && typeof connection.authenticatedUrl === 'function') {
+      return connection.authenticatedUrl(clean)
+    }
+    return clean
+  } catch {
+    return base
+  }
+}
+
+/**
+ * Start the always-on helper. It owns the "问大肥鱼" pill and the global screenshot
+ * hotkeys, so both keep working while the small window is closed. The exe enforces
+ * single instance itself, which makes a blind spawn safe.
+ */
+function ensureService(ctx) {
+  if (!existsSync(NATIVE_EXE)) return null
+  const url = tokenizedAddress(ctx)
+  try {
+    const child = spawn(NATIVE_EXE, ['--service', '--url', url], {
+      detached: true,
+      stdio: 'ignore',
+      windowsHide: true,
+    })
+    child.unref()
+    return child.pid ?? null
+  } catch {
+    return null
+  }
+}
+
+export function apply(ctx, config = {}) {
+  const titlePrefix = String(config.titlePrefix ?? 'DSH 小窗')
+  const titleB64 = Buffer.from(titlePrefix, 'utf8').toString('base64')
+  const width = Number(config.width ?? 460)
+  const height = Number(config.height ?? 920)
+  const margin = Number(config.margin ?? 8)
+  const disposers = []
+  let spawned = null
+
+  // The pill and the global hotkeys must not depend on the small window being open,
+  // so the helper starts with the plugin. The carrier may not be up yet, hence the delay.
+  setTimeout(() => { try { ensureService(ctx) } catch { } }, 2500)
+
+  /** The browser pid we launched, so later requests find the window without the title. */
+  const ownerPid = () => (spawned !== null && Number.isFinite(spawned.pid) ? String(spawned.pid) : '0')
+
+  const route = (path, handler) => {
+    disposers.push(ctx.webServer.register({ kind: 'exact', path: `${PREFIX}${path}`, handler }))
+  }
+
+  /**
+   * Diagnostic breadcrumb channel. The client cannot log anywhere we can read, so
+   * `/trace?step=...` (hit through a one-pixel image request) appends to a file.
+   */
+  route('/trace', (req, res) => {
+    try {
+      const url = new URL(req.url ?? '/', 'http://127.0.0.1')
+      const line = `${new Date().toISOString()} ${url.searchParams.get('step') ?? '?'} ${url.searchParams.get('detail') ?? ''}\n`
+      mkdirSync(WORK_DIR, { recursive: true })
+      appendFileSync(join(WORK_DIR, 'trace.log'), line, 'utf8')
+    } catch {
+      // Diagnostics must never break the request.
+    }
+    res.writeHead(204, { 'cache-control': 'no-store' })
+    res.end()
+  })
+
+  let shotSeq = 0
+
+  route('/config', async (req, res) => {
+    if (req.method === 'GET') {
+      sendJson(res, 200, { ok: true, config: readConfig() })
+      return
+    }
+    if (req.method !== 'POST') { sendJson(res, 405, { error: 'GET or POST' }); return }
+    let body
+    try { body = await readJson(req) } catch (error) { sendJson(res, 400, { error: error.message }); return }
+    const next = readConfig()
+    for (const key of ['copyShot', 'ask', 'hotkeyFull', 'hotkeyRegion']) {
+      if (Object.prototype.hasOwnProperty.call(body, key)) next[key] = body[key]
+    }
+    // Normalize before writing: the shell matches these strings exactly when it
+    // registers the global hotkeys.
+    next.copyShot = Boolean(next.copyShot)
+    next.ask = Boolean(next.ask)
+    next.hotkeyFull = String(next.hotkeyFull ?? '').trim() || CONFIG_DEFAULTS.hotkeyFull
+    next.hotkeyRegion = String(next.hotkeyRegion ?? '').trim() || CONFIG_DEFAULTS.hotkeyRegion
+    writeConfig(next)
+    sendJson(res, 200, { ok: true, config: next })
+  })
+
+  route('/open', async (req, res) => {
+    if (req.method !== 'POST') { sendJson(res, 405, { error: 'POST only' }); return }
+    let body
+    try { body = await readJson(req) } catch (error) { sendJson(res, 400, { error: error.message }); return }
+    try {
+      // The desktop renderer is not served over http(s): there `window.location.href`
+      // is a file:// or app:// address, so a client-supplied href is unusable. Only
+      // accept it when it really is an http(s) URL, and otherwise ask the Web
+      // carrier for the address it advertises.
+      const offered = String(body.href ?? '')
+      const advertised = /^https?:/i.test(offered) ? offered : advertise(ctx)
+      if (advertised === '') {
+        sendJson(res, 400, { error: 'no web address available; pass an http(s) href' })
+        return
+      }
+      const href = advertised
+      assertLocalHref(href)
+
+      // Already open? Raise the existing window instead of stacking duplicates.
+      const status = await runScript('win-hud.ps1', ['-Action', 'status', '-TitleB64', titleB64, '-OwnerPid', ownerPid(), '-WaitMs', '0']).catch(() => ({ found: false }))
+      if (status.found === true || status['found'] === true) {
+        const focused = await runScript('win-hud.ps1', ['-Action', 'focus', '-TitleB64', titleB64, '-OwnerPid', ownerPid(), '-WaitMs', '0']).catch(() => null)
+        const pinned = await runScript('win-hud.ps1', ['-Action', 'pin', '-TitleB64', titleB64, '-OwnerPid', ownerPid(), '-WaitMs', '2000', '-Width', String(width), '-Height', String(height), '-Margin', String(margin)]).catch(() => null)
+        sendJson(res, 200, { ok: true, reused: true, focused: focused !== null, window: pinned ?? status })
+        return
+      }
+
+      // The HUD gets a *fresh* browser profile, so it holds none of the main
+      // window's cookies. Without the process token the server answers "dsh web
+      // authentication required", so ask Connection for a tokenized URL.
+      const target = new URL(href)
+      const base = `${target.origin}${target.pathname}`
+      let authenticated = base
+      let authSource = 'href'
+      try {
+        const connection = typeof ctx.get === 'function' ? ctx.get('connection') : undefined
+        if (connection !== undefined && connection !== null && typeof connection.authenticatedUrl === 'function') {
+          authenticated = connection.authenticatedUrl(base)
+          authSource = 'token'
+        }
+      } catch {
+        // No token available: fall back to the caller's URL, which may already carry one.
+      }
+      const url0 = authSource === 'token' ? `${withHudFlag(authenticated)}${target.hash}` : withHudFlag(href)
+      // The small window is a separate document with no shared client state, so it
+      // learns which conversation to show from the URL.
+      const sessionId = typeof body.sessionId === 'string' ? body.sessionId.trim() : ''
+      const url = sessionId === '' ? url0 : withQuery(url0, 'session', sessionId)
+
+      // Preferred backend: the WebView2 shell we build ourselves. It is a real
+      // native window (no browser chrome), it pins itself, and it carries its own
+      // title bar with the screenshot key. The browser --app path stays as a
+      // fallback for machines where the exe has not been built yet.
+      ensureService(ctx)
+
+      const nativeAvailable = existsSync(NATIVE_EXE)
+      let backend = 'browser'
+      let browser = null
+      if (nativeAvailable) {
+        backend = 'native'
+        // A running shell owns the window: hand it the new URL instead of starting
+        // a second process (the exe's own single-instance path does the same, but
+        // this way the response reports the real pid and `reused`).
+        const existing = await runScript('native-status.ps1', []).catch(() => ({ found: false }))
+        if (existing.found === true) {
+          // Only re-navigate when the caller asked for a specific conversation; a
+          // plain "pop out" on the window that is already open should just raise it.
+          if (sessionId === '') {
+            await runScript('native-status.ps1', ['-Action', 'focus']).catch(() => null)
+          } else {
+            writePendingUrl(url)
+          }
+          sendJson(res, 200, { ok: true, reused: true, backend, pid: existing.pid, sessionId, url })
+          return
+        }
+        spawned = spawn(NATIVE_EXE, ['--url', url, '--title', titlePrefix, '--width', String(width), '--height', String(height)], {
+          detached: true,
+          stdio: 'ignore',
+          windowsHide: false,
+        })
+        spawned.unref()
+      } else {
+        browser = findBrowser(config.browserPath)
+        mkdirSync(PROFILE_DIR, { recursive: true })
+        const args = [
+          `--app=${url}`,
+          `--window-size=${width},${height}`,
+          `--window-position=${Math.max(0, margin)},${margin}`,
+          `--user-data-dir=${PROFILE_DIR}`,
+          '--no-first-run',
+          '--no-default-browser-check',
+          '--disable-features=Translate,MediaRouter',
+        ]
+        spawned = spawn(browser, args, { detached: true, stdio: 'ignore', windowsHide: true })
+        spawned.unref()
+      }
+
+      // An --app launch may re-exec itself, so the pid we spawned can be gone by
+      // now; the helper also matches the window by its title, which the HUD page
+      // sets as soon as it boots. A failed pin is reported, not thrown: the window
+      // is already open at that point and the user can still use it.
+      let window = null
+      let warning = null
+      if (backend === 'browser') {
+        try {
+          window = await runScript('win-hud.ps1', [
+            '-Action', 'pin', '-TitleB64', titleB64, '-OwnerPid', ownerPid(), '-WaitMs', '20000',
+            '-Width', String(width), '-Height', String(height), '-Margin', String(margin),
+          ])
+        } catch (error) {
+          warning = String(error?.message ?? error)
+        }
+      }
+      sendJson(res, 200, { ok: true, reused: false, backend, browser, url, authSource, pid: spawned.pid ?? null, window, warning })
+    } catch (error) {
+      sendJson(res, 500, { error: String(error?.message ?? error) })
+    }
+  })
+
+  route('/close', async (req, res) => {
+    if (req.method !== 'POST') { sendJson(res, 405, { error: 'POST only' }); return }
+    try {
+      const data = await runScript('win-hud.ps1', ['-Action', 'close', '-TitleB64', titleB64, '-OwnerPid', ownerPid(), '-WaitMs', '0'])
+      sendJson(res, 200, { ok: true, ...data })
+    } catch (error) {
+      sendJson(res, 500, { error: String(error?.message ?? error) })
+    }
+  })
+
+  route('/focus', async (req, res) => {
+    if (req.method !== 'POST') { sendJson(res, 405, { error: 'POST only' }); return }
+    try {
+      const data = await runScript('win-hud.ps1', ['-Action', 'focus', '-TitleB64', titleB64, '-OwnerPid', ownerPid(), '-WaitMs', '0'])
+      sendJson(res, 200, { ok: true, ...data })
+    } catch (error) {
+      sendJson(res, 500, { error: String(error?.message ?? error) })
+    }
+  })
+
+  route('/state', async (req, res) => {
+    if (req.method !== 'GET') { sendJson(res, 405, { error: 'GET only' }); return }
+    try {
+      const data = await runScript('win-hud.ps1', ['-Action', 'status', '-TitleB64', titleB64, '-OwnerPid', ownerPid(), '-WaitMs', '0'])
+      sendJson(res, 200, { ok: true, ...data, titlePrefix, width, height })
+    } catch (error) {
+      sendJson(res, 500, { error: String(error?.message ?? error) })
+    }
+  })
+
+  route('/shot', async (req, res) => {
+    if (req.method !== 'POST') { sendJson(res, 405, { error: 'POST only' }); return }
+    let body
+    try { body = await readJson(req) } catch (error) { sendJson(res, 400, { error: error.message }); return }
+    try {
+      mkdirSync(SHOT_DIR, { recursive: true })
+      shotSeq += 1
+      const out = join(SHOT_DIR, `hud-shot-${Date.now()}-${String(shotSeq)}.png`)
+      const args = ['-TitleB64', titleB64, '-OwnerPid', ownerPid(), '-OutFile', out]
+      if (body.keepHud === true) args.push('-KeepHud')
+      const data = await runScript('hud-shot.ps1', args)
+      const bytes = readFileSync(out)
+      sendJson(res, 200, {
+        ok: true,
+        file: data.file ?? out,
+        png: `data:image/png;base64,${bytes.toString('base64')}`,
+        width: data.width, height: data.height,
+        bytes: bytes.length,
+        hidHud: (data.hidden ?? 0) > 0,
+      })
+    } catch (error) {
+      sendJson(res, 500, { error: String(error?.message ?? error) })
+    }
+  })
+
+  ctx.effect(() => () => {
+    for (const dispose of disposers) {
+      try { if (typeof dispose === 'function') dispose() } catch { /* ignore */ }
+    }
+  })
+}

package/package.json

@@ -1,6 +1,71 @@
 {
   "name": "dsh-mini",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.1",
+  "description": "DSH 常驻小窗插件：把当前会话一键弹出为独立置顶小窗（WebView2 原生窗口），含整屏/框选截图、划词「问大肥鱼」、全局快捷键与截图自动复制",
+  "type": "module",
+  "main": "lib/index.js",
+  "license": "MIT",
+  "keywords": [
+    "dsh",
+    "deepseek-harness",
+    "dsh-plugin",
+    "always-on-top",
+    "screenshot",
+    "webview2"
+  ],
+  "homepage": "https://www.npmjs.com/package/dsh-mini",
+  "os": [
+    "win32"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "exports": {
+    ".": {
+      "default": "./lib/index.js"
+    },
+    "./client": {
+      "default": "./lib/client.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "scripts",
+    "app/bin",
+    "app/*.cs",
+    "app/hud-page.js",
+    "app/app.manifest",
+    "app/build-app.ps1",
+    "app/dev.ps1",
+    "app/probe",
+    "app/vendor/*.dll",
+    "cordis.patch.yml",
+    "README.md",
+    "开发方案-WebView2原生小窗.md"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-slots",
+        "@deepseek-ai/dsh-client-ui-conversation"
+      ]
+    },
+    "compatibility": {
+      "node": ">=20",
+      "dsh": ">=0.2.0-rc.1"
+    }
+  },
+  "dependencies": {},
+  "scripts": {
+    "build": "powershell -NoProfile -ExecutionPolicy Bypass -File app/build-app.ps1",
+    "pack": "npm pack"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/dsh-client-ui-slots": ">=0.2.0-rc.1"
+  }
+}