dsh-plugin-ops-bundle 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 dsh-plugin-ops contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,30 @@
+# dsh-plugin-ops-bundle
+
+Embedded [dsh-plugin-ops](https://github.com/f-infinite-z/dsh-plugin-ops)
+bundle for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness):
+installs a **dsh-ops** health-check section into the harness Web settings page
+(scan, findings, plugin-row enable/disable, fault timeline, diagnosis chat).
+
+## Install
+
+```sh
+dsh plugin --profile web add dsh-plugin-ops-bundle
+```
+
+Then restart the dsh web process. The section appears in Settings.
+
+## How it works
+
+- **Host half** (`lib/index.js`): a cordis plugin that waits for the optional
+  `webServer` service and serves the panel API under the `/dsh-ops` prefix,
+  reusing the shared engine (`dsh-plugin-ops-core`). The diagnosis chat prefers
+  the harness `ctx.llm` seam with the configured default model and falls back
+  to a direct OpenAI-compatible channel when the tree exposes no llm service.
+- **Browser half** (`lib/client.js`): registers a `settings.section` through
+  `dsh.client` and fetches the same-origin `/dsh-ops/api/*` routes.
+- Profiles without a Web server are unaffected: the host half activates but
+  registers nothing.
+
+## License
+
+MIT

package/cordis.patch.yml

@@ -0,0 +1,6 @@
+# dsh-plugin-ops bundle patch: mounts the dsh-ops host half as a Loader row.
+# The browser half ships through package.json `dsh.client` and registers a
+# settings-page section that fetches the same `/dsh-ops` API.
+- insert:
+    - id: dsh-ops-bundle
+      name: 'dsh-plugin-ops-bundle'

package/lib/client.js

@@ -0,0 +1,469 @@
+window.__ModuleLoader__.load({ id: "dsh-plugin-ops-bundle", factory: (require) => {
+var module = { exports: {} }; var exports = module.exports;
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/client/index.ts
+var client_exports = {};
+__export(client_exports, {
+  apply: () => apply,
+  inject: () => inject
+});
+module.exports = __toCommonJS(client_exports);
+
+// src/client/HealthSection.tsx
+var import_react = require("react");
+
+// src/client/i18n.ts
+var DICTS = {
+  zh: {
+    title: "健康检查",
+    subtitle: "dsh-ops 内嵌面板：扫描当前 profile 的插件健康状态",
+    refresh: "刷新",
+    scan: "扫描",
+    scanning: "扫描中…",
+    fix: "修复",
+    fixing: "修复中…",
+    clean: "未发现问题",
+    fatal: "致命",
+    warn: "警告",
+    info: "信息",
+    findings: "扫描结果",
+    rows: "插件行管理",
+    filterAll: "全部",
+    filterFatal: "致命",
+    filterWarn: "警告",
+    filterOk: "正常",
+    disable: "禁用",
+    enable: "启用",
+    protectedTag: "官方保护",
+    disabledTag: "已禁用",
+    prev: "上一页",
+    next: "下一页",
+    pageOf: "第 {cur} / {total} 页",
+    timeline: "故障时间线",
+    emptyTimeline: "暂无记录",
+    chat: "诊断对话",
+    chatHint: "基于当前 profile 的实时扫描结果；建议的修复请用上方白名单按钮执行",
+    chatWelcome: "我是诊断助手。已载入当前 profile 的扫描结果，想问什么？",
+    chatPlaceholder: "问：这些警告是什么意思？该怎么处理？",
+    chatSend: "发送",
+    chatThinking: "思考中…",
+    chatNoChannel: "未找到可用模型通道（dsh 未提供 llm 服务且未配置 API key）",
+    loadFail: "加载失败：",
+    profile: "Profile",
+    home: "DSH_HOME"
+  },
+  en: {
+    title: "Health Check",
+    subtitle: "Embedded dsh-ops panel: plugin health of the current profile",
+    refresh: "Refresh",
+    scan: "Scan",
+    scanning: "Scanning…",
+    fix: "Fix",
+    fixing: "Fixing…",
+    clean: "No findings",
+    fatal: "Fatal",
+    warn: "Warn",
+    info: "Info",
+    findings: "Scan results",
+    rows: "Plugin rows",
+    filterAll: "All",
+    filterFatal: "Fatal",
+    filterWarn: "Warn",
+    filterOk: "OK",
+    disable: "Disable",
+    enable: "Enable",
+    protectedTag: "official",
+    disabledTag: "disabled",
+    prev: "Prev",
+    next: "Next",
+    pageOf: "Page {cur} / {total}",
+    timeline: "Fault timeline",
+    emptyTimeline: "No records",
+    chat: "Diagnosis chat",
+    chatHint: "Based on a live scan of the current profile; use the whitelisted buttons above to apply suggested fixes",
+    chatWelcome: "Diagnosis assistant here. The current profile scan is loaded — what would you like to know?",
+    chatPlaceholder: "Ask: what do these warnings mean? How do I fix them?",
+    chatSend: "Send",
+    chatThinking: "Thinking…",
+    chatNoChannel: "No model channel available (dsh exposes no llm service and no API key is configured)",
+    loadFail: "Load failed: ",
+    profile: "Profile",
+    home: "DSH_HOME"
+  }
+};
+function detectLang() {
+  const nav = typeof navigator === "undefined" ? "" : navigator.language;
+  return nav.toLowerCase().startsWith("zh") ? "zh" : "en";
+}
+function format(template, values) {
+  return template.replace(/\{(\w+)\}/g, (_, key) => String(values[key] ?? `{${key}}`));
+}
+
+// src/client/HealthSection.tsx
+var import_jsx_runtime = require("react/jsx-runtime");
+var API = "/dsh-ops";
+var PAGE_SIZE = 10;
+async function api(path, init) {
+  const res = await fetch(`${API}${path}`, {
+    method: init?.method ?? "GET",
+    ...init?.body === void 0 ? {} : { body: init.body },
+    headers: { "Content-Type": "application/json" }
+  });
+  const data = await res.json();
+  if (!res.ok) throw new Error(data.error ?? `HTTP ${res.status}`);
+  return data;
+}
+var STYLE_ID = "dsh-ops-health-style";
+var CSS = `
+.dshops-root{display:flex;flex-direction:column;gap:14px;font-size:13px;line-height:1.5}
+.dshops-head{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
+.dshops-title{font-size:15px;font-weight:600;margin-right:auto}
+.dshops-sub{opacity:.65;font-size:12px}
+.dshops-btn{border:1px solid rgba(128,128,128,.4);background:transparent;color:inherit;border-radius:6px;padding:3px 10px;cursor:pointer;font-size:12px}
+.dshops-btn:disabled{opacity:.5;cursor:default}
+.dshops-btn-primary{background:#4d6bfe;border-color:#4d6bfe;color:#fff}
+.dshops-select{border:1px solid rgba(128,128,128,.4);background:transparent;color:inherit;border-radius:6px;padding:3px 6px;font-size:12px}
+.dshops-card{border:1px solid rgba(128,128,128,.25);border-radius:8px;padding:10px 12px}
+.dshops-card h3{margin:0 0 8px;font-size:13px;font-weight:600}
+.dshops-counts{display:flex;gap:8px;align-items:center;flex-wrap:wrap}
+.dshops-pill{border-radius:10px;padding:1px 8px;font-size:11px}
+.dshops-pill-fatal{background:rgba(229,57,53,.15);color:#e53935}
+.dshops-pill-warn{background:rgba(251,140,0,.18);color:#fb8c00}
+.dshops-pill-info{background:rgba(30,136,229,.15);color:#1e88e5}
+.dshops-pill-ok{background:rgba(67,160,71,.15);color:#43a047}
+.dshops-list{display:flex;flex-direction:column;gap:6px}
+.dshops-item{border-left:3px solid rgba(128,128,128,.35);padding:4px 8px;background:rgba(128,128,128,.06);border-radius:4px}
+.dshops-item-fatal{border-left-color:#e53935;background:rgba(229,57,53,.07)}
+.dshops-item-warn{border-left-color:#fb8c00;background:rgba(251,140,0,.07)}
+.dshops-row{display:flex;align-items:center;gap:8px;padding:4px 6px;border-bottom:1px solid rgba(128,128,128,.12)}
+.dshops-row:last-child{border-bottom:none}
+.dshops-mono{font-family:ui-monospace,Consolas,monospace;font-size:12px}
+.dshops-dim{opacity:.6}
+.dshops-chat{display:flex;flex-direction:column;gap:8px;max-height:280px;overflow:auto}
+.dshops-msg{max-width:85%;padding:6px 10px;border-radius:8px;white-space:pre-wrap}
+.dshops-msg-user{align-self:flex-end;background:rgba(77,107,254,.18)}
+.dshops-msg-assistant{align-self:flex-start;background:rgba(128,128,128,.12)}
+.dshops-chatbar{display:flex;gap:6px;margin-top:8px}
+.dshops-input{flex:1;border:1px solid rgba(128,128,128,.35);border-radius:6px;padding:5px 8px;background:transparent;color:inherit;font-size:12px}
+.dshops-err{color:#e53935;font-size:12px}
+.dshops-footer{display:flex;align-items:center;gap:8px;margin-top:8px}
+`;
+function useStyles() {
+  (0, import_react.useEffect)(() => {
+    if (document.getElementById(STYLE_ID) !== null) return;
+    const el = document.createElement("style");
+    el.id = STYLE_ID;
+    el.textContent = CSS;
+    document.head.appendChild(el);
+  }, []);
+}
+function severityOf(row, scan) {
+  if (scan === null) return "ok";
+  let worst = "ok";
+  for (const finding of scan.findings) {
+    if (finding.packageName === void 0) continue;
+    if (finding.packageName !== row.packageName && finding.packageName !== row.rowId) continue;
+    if (finding.severity === "fatal") return "fatal";
+    if (finding.severity === "warn") worst = "warn";
+  }
+  return worst;
+}
+function HealthSection() {
+  useStyles();
+  const [lang, setLang] = (0, import_react.useState)(detectLang);
+  const t = DICTS[lang];
+  const [info, setInfo] = (0, import_react.useState)(null);
+  const [profile, setProfile] = (0, import_react.useState)("");
+  const [scan, setScan] = (0, import_react.useState)(null);
+  const [rows, setRows] = (0, import_react.useState)([]);
+  const [events, setEvents] = (0, import_react.useState)([]);
+  const [filter, setFilter] = (0, import_react.useState)("all");
+  const [page, setPage] = (0, import_react.useState)(0);
+  const [chat, setChat] = (0, import_react.useState)([]);
+  const [chatInput, setChatInput] = (0, import_react.useState)("");
+  const [chatState, setChatState] = (0, import_react.useState)("");
+  const [busy, setBusy] = (0, import_react.useState)("");
+  const [error, setError] = (0, import_react.useState)("");
+  const load = (0, import_react.useCallback)(async (name, scanOnly = false) => {
+    setError("");
+    setBusy(scanOnly ? "scan" : "load");
+    try {
+      const encoded = encodeURIComponent(name);
+      const scanRes = await api(`/api/scan?profile=${encoded}`);
+      setScan(scanRes);
+      if (!scanOnly) {
+        const [rowsRes, memRes] = await Promise.all([
+          api(`/api/plugins?profile=${encoded}`),
+          api(`/api/memory?profile=${encoded}`)
+        ]);
+        setRows(rowsRes.rows);
+        setEvents(memRes.events);
+      }
+    } catch (e) {
+      setError(e instanceof Error ? e.message : String(e));
+    } finally {
+      setBusy("");
+    }
+  }, []);
+  (0, import_react.useEffect)(() => {
+    let cancelled = false;
+    void (async () => {
+      try {
+        const infoRes = await api("/api/info");
+        if (cancelled) return;
+        setInfo(infoRes);
+        const initial = infoRes.defaultProfile ?? infoRes.profiles[0]?.name ?? "web";
+        setProfile(initial);
+        await load(initial);
+      } catch (e) {
+        if (!cancelled) setError(e instanceof Error ? e.message : String(e));
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, [load]);
+  const changeProfile = (name) => {
+    setProfile(name);
+    setPage(0);
+    setScan(null);
+    setRows([]);
+    setEvents([]);
+    setChat([]);
+    void load(name);
+  };
+  const alignFindings = scan?.findings.filter((f) => f.severity === "fatal" && f.fix.kind === "align-lockfile") ?? [];
+  const runFix = async () => {
+    if (profile === "") return;
+    setBusy("fix");
+    setError("");
+    try {
+      await api(`/api/fix/execute?profile=${encodeURIComponent(profile)}`, { method: "POST", body: "{}" });
+      await load(profile);
+    } catch (e) {
+      setError(e instanceof Error ? e.message : String(e));
+    } finally {
+      setBusy("");
+    }
+  };
+  const toggleRow = async (row) => {
+    setError("");
+    try {
+      const action = row.disabled ? "enable" : "disable";
+      await api(`/api/plugins/${action}?profile=${encodeURIComponent(profile)}`, {
+        method: "POST",
+        body: JSON.stringify({ rowId: row.rowId })
+      });
+      await load(profile, true);
+      const rowsRes = await api(`/api/plugins?profile=${encodeURIComponent(profile)}`);
+      setRows(rowsRes.rows);
+    } catch (e) {
+      setError(e instanceof Error ? e.message : String(e));
+    }
+  };
+  const sendChat = async () => {
+    const text = chatInput.trim();
+    if (text === "" || busy === "chat") return;
+    const next = [...chat, { role: "user", content: text }];
+    setChat(next);
+    setChatInput("");
+    setBusy("chat");
+    setChatState(t.chatThinking);
+    try {
+      const res = await api("/api/chat", {
+        method: "POST",
+        body: JSON.stringify({ profile, lang, messages: next })
+      });
+      if (res.ok) {
+        setChat([...next, { role: "assistant", content: res.reply }]);
+      } else {
+        setChatState(res.error ?? t.chatNoChannel);
+      }
+    } catch (e) {
+      setChatState(`${t.loadFail}${e instanceof Error ? e.message : String(e)}`);
+    } finally {
+      setBusy("");
+      setChatState((state) => state === t.chatThinking ? "" : state);
+    }
+  };
+  const visibleRows = rows.filter((row) => filter === "all" || severityOf(row, scan) === filter);
+  const totalPages = Math.max(1, Math.ceil(visibleRows.length / PAGE_SIZE));
+  const pageRows = visibleRows.slice(page * PAGE_SIZE, (page + 1) * PAGE_SIZE);
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dshops-root", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dshops-head", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dshops-title", children: t.title }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dshops-sub", children: t.subtitle }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { className: "dshops-btn", onClick: () => setLang(lang === "zh" ? "en" : "zh"), children: lang === "zh" ? "EN" : "中文" }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { className: "dshops-btn", disabled: profile === "" || busy !== "", onClick: () => void load(profile), children: busy === "scan" ? t.scanning : t.refresh }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { className: "dshops-btn dshops-btn-primary", disabled: profile === "" || busy !== "", onClick: () => void load(profile, true), children: t.scan })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dshops-head", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { className: "dshops-dim", children: [
+        t.profile,
+        ":"
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("select", { className: "dshops-select", value: profile, onChange: (e) => changeProfile(e.target.value), children: (info?.profiles ?? []).map((p) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("option", { value: p.name, children: [
+        p.name,
+        " (",
+        p.bundles,
+        ")"
+      ] }, p.name)) }),
+      info !== null && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dshops-dim dshops-mono", children: info.home })
+    ] }),
+    error !== "" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "dshops-err", children: error }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dshops-card", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h3", { children: t.findings }),
+      scan === null ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dshops-dim", children: busy === "load" ? t.scanning : "" }) : /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dshops-counts", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { className: "dshops-pill dshops-pill-fatal", children: [
+            t.fatal,
+            " ",
+            scan.counts.fatal
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { className: "dshops-pill dshops-pill-warn", children: [
+            t.warn,
+            " ",
+            scan.counts.warn
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { className: "dshops-pill dshops-pill-info", children: [
+            t.info,
+            " ",
+            scan.counts.info
+          ] }),
+          scan.ok && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dshops-pill dshops-pill-ok", children: t.clean }),
+          alignFindings.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { className: "dshops-btn", disabled: busy !== "", onClick: () => void runFix(), children: busy === "fix" ? t.fixing : t.fix })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "dshops-list", style: { marginTop: 8 }, children: scan.findings.map((finding, index) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: `dshops-item dshops-item-${finding.severity}`, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: `dshops-pill dshops-pill-${finding.severity}`, children: finding.severity }),
+          " ",
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { className: "dshops-mono", children: [
+            "[",
+            finding.ruleId,
+            "]"
+          ] }),
+          " ",
+          finding.packageName !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dshops-mono", children: finding.packageName }),
+          " ",
+          finding.message,
+          finding.detail !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "dshops-dim", children: finding.detail })
+        ] }, `${finding.ruleId}-${index}`)) })
+      ] })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dshops-card", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("h3", { children: [
+        t.rows,
+        " ",
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("select", { className: "dshops-select", value: filter, onChange: (e) => {
+          setFilter(e.target.value);
+          setPage(0);
+        }, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("option", { value: "all", children: t.filterAll }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("option", { value: "fatal", children: t.filterFatal }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("option", { value: "warn", children: t.filterWarn }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("option", { value: "ok", children: t.filterOk })
+        ] })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { children: [
+        pageRows.map((row) => {
+          const severity = severityOf(row, scan);
+          return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dshops-row", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: `dshops-pill dshops-pill-${severity === "ok" ? "ok" : severity}`, children: severity }),
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dshops-mono", children: row.rowId }),
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dshops-dim dshops-mono", children: row.packageName ?? "" }),
+            /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { style: { marginLeft: "auto" }, className: "dshops-dim", children: [
+              row.protected && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dshops-pill", children: t.protectedTag }),
+              row.disabled && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dshops-pill dshops-pill-warn", children: t.disabledTag })
+            ] }),
+            !row.protected && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { className: "dshops-btn", disabled: busy !== "", onClick: () => void toggleRow(row), children: row.disabled ? t.enable : t.disable })
+          ] }, `${row.rowId}-${row.source}`);
+        }),
+        visibleRows.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "dshops-dim", children: t.clean })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dshops-footer", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { className: "dshops-btn", disabled: page <= 0, onClick: () => setPage((p) => Math.max(0, p - 1)), children: t.prev }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dshops-dim", children: format(t.pageOf, { cur: page + 1, total: totalPages }) }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { className: "dshops-btn", disabled: page + 1 >= totalPages, onClick: () => setPage((p) => p + 1), children: t.next })
+      ] })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dshops-card", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h3", { children: t.timeline }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dshops-list", children: [
+        events.map((event, index) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dshops-item", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dshops-mono", children: event.ts }),
+          " ",
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { className: "dshops-mono", children: [
+            "[",
+            event.type,
+            "]"
+          ] }),
+          " ",
+          event.detail
+        ] }, `${event.ts}-${index}`)),
+        events.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "dshops-dim", children: t.emptyTimeline })
+      ] })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dshops-card", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("h3", { children: [
+        t.chat,
+        " ",
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dshops-dim", children: t.chatHint })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dshops-chat", children: [
+        chat.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "dshops-msg dshops-msg-assistant dshops-dim", children: t.chatWelcome }),
+        chat.map((message, index) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: `dshops-msg dshops-msg-${message.role}`, children: message.content }, index))
+      ] }),
+      chatState !== "" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "dshops-err", style: { marginTop: 6 }, children: chatState }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dshops-chatbar", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+          "input",
+          {
+            className: "dshops-input",
+            value: chatInput,
+            placeholder: t.chatPlaceholder,
+            onChange: (e) => setChatInput(e.target.value),
+            onKeyDown: (e) => {
+              if (e.key === "Enter") void sendChat();
+            }
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { className: "dshops-btn dshops-btn-primary", disabled: busy === "chat", onClick: () => void sendChat(), children: busy === "chat" ? t.chatThinking : t.chatSend })
+      ] })
+    ] })
+  ] });
+}
+
+// src/client/index.ts
+var inject = ["slots"];
+function apply(ctx) {
+  ctx.slots.inject(
+    "settings.section",
+    () => ctx.slots.register(
+      {
+        name: "settings.section",
+        id: "dsh-ops",
+        order: 50,
+        label: () => "dsh-ops"
+      },
+      HealthSection
+    )
+  );
+}
+return module.exports; } });

package/lib/host.d.ts

@@ -0,0 +1,24 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { type ModelChannel, type OpsConfig } from 'dsh-plugin-ops-core';
+/** HTTP prefix the bundle owns on the harness Web server. */
+export declare const ROUTE_PREFIX = "/dsh-ops";
+export interface HostHandlerOptions {
+    home: string;
+    profile: string;
+    config: OpsConfig;
+    /** Chat channel for this host; null when no provider is available. */
+    channel: () => ModelChannel | null;
+}
+/**
+ * Derive the profile name from the Loader's base URL, which is the profile
+ * directory (`file:///.../profiles/<name>/`). Returns null when the URL does
+ * not sit under a `profiles` directory (nested include or unexpected boot).
+ */
+export declare function profileFromBaseUrl(baseUrl: string | undefined): string | null;
+/**
+ * Build the HTTP handler served under {@link ROUTE_PREFIX}. Panel API routes
+ * are delegated to the shared engine; the chat route is answered here because
+ * it needs the host's model channel. Errors are contained and answered as
+ * JSON — a failing panel must never reach the plugin tree.
+ */
+export declare function createHostHandler(options: HostHandlerOptions): (req: IncomingMessage, res: ServerResponse) => Promise<void>;

package/lib/host.js

@@ -0,0 +1,127 @@
+import { basename, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { PanelApiError, ScanError, buildChatContext, buildSystemPrompt, handlePanelApi, resolveDshPaths, } from 'dsh-plugin-ops-core';
+/** HTTP prefix the bundle owns on the harness Web server. */
+export const ROUTE_PREFIX = '/dsh-ops';
+/**
+ * Derive the profile name from the Loader's base URL, which is the profile
+ * directory (`file:///.../profiles/<name>/`). Returns null when the URL does
+ * not sit under a `profiles` directory (nested include or unexpected boot).
+ */
+export function profileFromBaseUrl(baseUrl) {
+    if (baseUrl === undefined || baseUrl === '')
+        return null;
+    try {
+        const dir = fileURLToPath(baseUrl);
+        if (basename(dirname(dir)) !== 'profiles')
+            return null;
+        const name = basename(dir);
+        return /^[\w.-]+$/.test(name) ? name : null;
+    }
+    catch {
+        return null;
+    }
+}
+function json(res, status, body) {
+    res.writeHead(status, { 'Content-Type': 'application/json; charset=utf-8' });
+    res.end(JSON.stringify(body));
+}
+async function collectBody(req) {
+    const chunks = [];
+    for await (const chunk of req) {
+        chunks.push(chunk);
+        if (chunks.reduce((n, c) => n + c.length, 0) > 64 * 1024) {
+            throw new PanelApiError('request body too large', 413);
+        }
+    }
+    return Buffer.concat(chunks).toString('utf8');
+}
+/** Browsers on the same machine must not drive writes cross-site; bare CLI/curl requests are allowed. */
+function sameOrigin(req) {
+    const origin = req.headers.origin;
+    if (origin === undefined)
+        return true;
+    try {
+        return new URL(origin).host === req.headers.host;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Build the HTTP handler served under {@link ROUTE_PREFIX}. Panel API routes
+ * are delegated to the shared engine; the chat route is answered here because
+ * it needs the host's model channel. Errors are contained and answered as
+ * JSON — a failing panel must never reach the plugin tree.
+ */
+export function createHostHandler(options) {
+    const paths = resolveDshPaths(options.profile, options.home);
+    const apiOptions = { paths, config: options.config, defaultProfile: options.profile };
+    return async (req, res) => {
+        try {
+            if (!sameOrigin(req)) {
+                json(res, 403, { error: 'cross-origin request rejected' });
+                return;
+            }
+            const url = new URL(req.url ?? '/', `http://${req.headers.host ?? '127.0.0.1'}`);
+            if (url.pathname !== ROUTE_PREFIX && !url.pathname.startsWith(`${ROUTE_PREFIX}/`)) {
+                json(res, 404, { error: `no route for ${req.method} ${url.pathname}` });
+                return;
+            }
+            const apiPath = url.pathname.slice(ROUTE_PREFIX.length);
+            const body = req.method === 'POST' ? await collectBody(req) : undefined;
+            if (req.method === 'POST' && apiPath === '/api/chat') {
+                await handleChat(res, options, paths, url, body);
+                return;
+            }
+            const apiUrl = new URL(url);
+            apiUrl.pathname = apiPath;
+            const result = await handlePanelApi(req.method ?? 'GET', apiUrl, apiOptions, body);
+            json(res, result.status, result.body);
+        }
+        catch (error) {
+            if (error instanceof PanelApiError)
+                json(res, error.status, { error: error.message });
+            else if (error instanceof ScanError)
+                json(res, 400, { error: error.message });
+            else
+                json(res, 500, { error: error instanceof Error ? error.message : String(error) });
+        }
+    };
+}
+async function handleChat(res, options, paths, url, body) {
+    const parsed = JSON.parse(body ?? '{}');
+    const profile = typeof parsed.profile === 'string' && parsed.profile !== '' ? parsed.profile : options.profile;
+    const lang = typeof parsed.lang === 'string' ? parsed.lang : 'zh';
+    const messages = Array.isArray(parsed.messages)
+        ? parsed.messages
+            .filter((m) => typeof m === 'object' && m !== null
+            && (m.role === 'user' || m.role === 'assistant')
+            && typeof m.content === 'string')
+            .slice(-10)
+        : [];
+    if (messages.length === 0) {
+        json(res, 400, { error: 'no user messages' });
+        return;
+    }
+    const channel = options.channel();
+    if (channel === null) {
+        json(res, 200, {
+            ok: false,
+            reply: '',
+            error: 'no model channel available (no harness llm service and no provider key found); set DSH_OPS_LLM_API_KEY to override',
+        });
+        return;
+    }
+    const context = await buildChatContext(paths, profile, options.config);
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), 60000);
+    try {
+        const result = await channel.complete(buildSystemPrompt(context, lang), messages, controller.signal);
+        json(res, result.ok ? 200 : 502, { ok: result.ok, reply: result.reply, error: result.error });
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=host.js.map

package/lib/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * dsh-plugin-ops host half: mounts the panel API under the `/dsh-ops` HTTP
+ * prefix of the running harness Web server. The browser half ships through
+ * `exports["./client"]` (a settings-page section). This half is deliberately
+ * thin and defensive: it imports no official runtime code, waits for the
+ * optional `webServer` service through `ctx.inject` (so profiles without a
+ * Web server still boot), and contains every error so a broken panel can
+ * never fail the plugin tree (the harness aborts the whole tree when one
+ * plugin fails).
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+export declare const name = "dsh-ops-bundle";
+/** Minimal view of the cordis context the host half relies on. */
+export interface HostContext {
+    baseUrl?: string;
+    webServer: {
+        register(route: {
+            kind: 'prefix';
+            path: string;
+            handler: (req: IncomingMessage, res: ServerResponse) => void | Promise<void>;
+        }): () => void;
+    };
+    get(name: string): unknown;
+    inject(deps: string[], callback: (ctx: HostContext) => void): unknown;
+    effect(callback: () => (() => void) | void, label?: string): unknown;
+}
+export declare function apply(ctx: HostContext): void;

package/lib/index.js

@@ -0,0 +1,54 @@
+import { OpenAiCompatibleChannel, readOpsConfig, resolveDshPaths, resolveModelConfig, } from 'dsh-plugin-ops-core';
+import { ROUTE_PREFIX, createHostHandler, profileFromBaseUrl } from './host.js';
+import { LlmChannel } from './llm-channel.js';
+export const name = 'dsh-ops-bundle';
+export function apply(ctx) {
+    try {
+        ctx.inject(['webServer'], (webCtx) => {
+            try {
+                registerPanel(webCtx);
+            }
+            catch (error) {
+                console.error('[dsh-ops] host half disabled:', error);
+            }
+        });
+    }
+    catch (error) {
+        console.error('[dsh-ops] host half disabled:', error);
+    }
+}
+function registerPanel(ctx) {
+    const profile = profileFromBaseUrl(ctx.baseUrl) ?? 'web';
+    const paths = resolveDshPaths(profile);
+    const read = readOpsConfig(paths.configFile);
+    if (!read.ok) {
+        console.error(`[dsh-ops] ignoring unreadable config: ${read.problem ?? 'unknown problem'}`);
+    }
+    const handler = createHostHandler({
+        home: paths.home,
+        profile,
+        config: read.ok ? read.config : {},
+        channel: () => resolveChannel(ctx, paths.home),
+    });
+    ctx.effect(() => ctx.webServer.register({ kind: 'prefix', path: ROUTE_PREFIX, handler }), 'dsh-ops-bundle: /dsh-ops prefix');
+}
+/**
+ * Prefer the harness llm seam with the configured default model; fall back to
+ * the direct OpenAI-compatible channel when the tree exposes no llm service or
+ * no default selection.
+ */
+function resolveChannel(ctx, home) {
+    const llm = ctx.get('llm');
+    const defaultModel = ctx.get('agentDefaultModel');
+    if (llm !== undefined && defaultModel !== undefined) {
+        try {
+            return new LlmChannel(llm, defaultModel.currentSelection());
+        }
+        catch (error) {
+            console.error('[dsh-ops] llm channel unavailable, falling back to direct:', error);
+        }
+    }
+    const config = resolveModelConfig(home);
+    return config === null ? null : new OpenAiCompatibleChannel(config);
+}
+//# sourceMappingURL=index.js.map

package/lib/llm-channel.d.ts

@@ -0,0 +1,36 @@
+import type { ChatMessage, ChatReply, ModelChannel } from 'dsh-plugin-ops-core';
+/**
+ * Minimal duck-typed view of the harness llm service. The bundle never
+ * imports official runtime code (self-reliance): only the stable public
+ * method surface the panel uses.
+ */
+export interface LlmRuntimeLike {
+    stream(options: {
+        provider: string;
+        model: string;
+        messages: unknown[];
+        system?: string;
+        maxTokens?: number;
+        signal?: AbortSignal;
+    }): AsyncIterable<{
+        type: string;
+        text?: string;
+    }>;
+}
+export interface ModelSelectionLike {
+    provider: string;
+    model: string;
+}
+/**
+ * Model channel over the official `ctx.llm` seam. Messages are plain objects
+ * matching the harness Message contract (`id`/`role`/`content`/`source`); the
+ * adapter reads `role` and `content`. Text deltas are concatenated into one
+ * reply; any failure is reported through {@link ChatReply} instead of throwing
+ * into the plugin tree.
+ */
+export declare class LlmChannel implements ModelChannel {
+    private readonly llm;
+    private readonly selection;
+    constructor(llm: LlmRuntimeLike, selection: ModelSelectionLike);
+    complete(system: string, messages: ChatMessage[], signal?: AbortSignal): Promise<ChatReply>;
+}

package/lib/llm-channel.js

@@ -0,0 +1,45 @@
+import { randomUUID } from 'node:crypto';
+/**
+ * Model channel over the official `ctx.llm` seam. Messages are plain objects
+ * matching the harness Message contract (`id`/`role`/`content`/`source`); the
+ * adapter reads `role` and `content`. Text deltas are concatenated into one
+ * reply; any failure is reported through {@link ChatReply} instead of throwing
+ * into the plugin tree.
+ */
+export class LlmChannel {
+    llm;
+    selection;
+    constructor(llm, selection) {
+        this.llm = llm;
+        this.selection = selection;
+    }
+    async complete(system, messages, signal) {
+        try {
+            const options = {
+                provider: this.selection.provider,
+                model: this.selection.model,
+                system,
+                maxTokens: 800,
+                messages: messages.map((message) => ({
+                    id: randomUUID(),
+                    role: message.role,
+                    content: [{ type: 'text', text: message.content }],
+                    source: { kind: 'plugin', plugin: 'dsh-plugin-ops-bundle' },
+                })),
+                ...(signal === undefined ? {} : { signal }),
+            };
+            let reply = '';
+            for await (const chunk of this.llm.stream(options)) {
+                if (chunk.type === 'text-delta' && typeof chunk.text === 'string')
+                    reply += chunk.text;
+            }
+            return reply === ''
+                ? { reply: '', ok: false, error: 'model returned no text' }
+                : { reply, ok: true };
+        }
+        catch (error) {
+            return { reply: '', ok: false, error: error instanceof Error ? error.message : String(error) };
+        }
+    }
+}
+//# sourceMappingURL=llm-channel.js.map

package/package.json

@@ -0,0 +1,77 @@
+{
+  "name": "dsh-plugin-ops-bundle",
+  "version": "0.1.0",
+  "type": "module",
+  "description": "Embedded dsh bundle for dsh-plugin-ops: a settings-page health panel (scan, plugin rows, diagnosis chat) over the shared engine",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/f-infinite-z/dsh-plugin-ops.git",
+    "directory": "packages/bundle"
+  },
+  "homepage": "https://github.com/f-infinite-z/dsh-plugin-ops#readme",
+  "keywords": [
+    "deepseek",
+    "harness",
+    "dsh",
+    "dsh-plugin",
+    "cordis",
+    "plugin",
+    "health-check",
+    "diagnostics"
+  ],
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./client": {
+      "default": "./lib/client.js"
+    },
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/index.js",
+    "lib/host.js",
+    "lib/llm-channel.js",
+    "lib/*.d.ts",
+    "lib/client.js",
+    "cordis.patch.yml"
+  ],
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": []
+    }
+  },
+  "dependencies": {
+    "dsh-plugin-ops-core": "0.1.0"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.0"
+  },
+  "devDependencies": {
+    "@types/react": "~18.3.1",
+    "react": "^18.2.0",
+    "tsup": "^8.5.1",
+    "typescript": "^7.0.2"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json && tsup --config tsup.client.config.ts",
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.client.json --noEmit",
+    "test": "vitest run",
+    "clean": "node -e \"require('fs').rmSync('lib',{recursive:true,force:true})\""
+  }
+}