dsh-plugin-rea 0.0.0-stage → 1.0.3

package/CHANGELOG.md

@@ -0,0 +1,46 @@
+# Changelog
+
+本插件遵循语义化版本。版本号变化说明「配置组合」这层的变化，与 REA 自身的版本无关。
+
+## 1.0.3 — 2026-10-12
+
+仓库展示与发布范围调整，无行为变更。
+
+- 新增 `assets/screenshot-1.png`、`assets/screenshot-2.png` 与 `screenshots.json`（市场详情页展示用，
+  由 `assets/make-screenshots.ps1` 可复现生成）。
+- 维护记录改为**仅本机保留**（不再随仓库或 tarball 发布）。
+
+## 1.0.2 — 2026-10-12
+
+文档补强，无行为变更。
+
+- 新增「能做什么、不能做什么」：明确**无法完整还原源代码**——上游原生分析返回的是伪代码与汇编、
+  APK 返回反编译的方法、JEB 返回伪代码，均非原始源码，且不保证文本等价或可直接编译；
+  变量名/类型/注释/宏、优化与去符号、混淆加壳等因素都会降低可读性。
+- 更新章节措辞按实际安装来源区分：从插件市场安装的在**市场里更新**，本地 `file:` 目录方式则覆盖后重装。
+
+## 1.0.1 — 2026-10-12
+
+文档与措辞修正，无行为变更。
+
+- 「作用」改为依据上游 REA 自己的说明撰写（含上游列出的可分析目标），明确逆向能力由上游提供、
+  本插件只做配置组合与引擎环境变量隔离。
+- 新增「更新」章节，区分两件独立且都需手动完成的事：**本插件不会自动更新**（有新版时在插件
+  管理器重装），上游 REA 用 `npm i -g rea-agents@latest` 更新。
+
+## 1.0.0 — 2026-10-12
+
+首个版本。
+
+- 新增纯配置型 Cordis bundle：插入一条 `@deepseek-ai/dsh-mcp-client` 记录，注册 `rea mcp`（stdio）。
+- 工具命名沿用官方约定 `mcp__rea__<tool>`；`failOnStartupError: false`，REA 缺失时不阻塞 harness 启动。
+- 新增 `check-updates.ps1`：检查 REA(npm) / Node engines / Ghidra 版本与 doctor 子项 / 插件登记状态。
+- 实测矩阵：REA 6.4.0、DSH 桌面运行时 0.2.0-rc.2、Ghidra 12.1.4、Node 24.21.0、Windows 11 x64。
+
+<!--
+维护提示（发布新版本时）：
+1. 改 package.json 的 version，并在此文件顶部加一节；
+2. 若改动涉及路径/字段，同步更新 README 的「配置」与「上游更新怎么办」；
+3. 若发 Release tarball，资产名保持不带版本号（dsh-plugin-rea.tgz），
+   否则市场里 latest/download 形式的链接会在下次发版后 404。
+-->

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 czcdr
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,207 @@
-# Temporary Holding Version
+# dsh-plugin-rea
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+[![awesome · DSH plugin](https://awesome-dsh-plugin.com/badge.svg)](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin)
+
+把 **[REA — Reverse Engineer Anything](https://github.com/morluto/rea)** 接入 **DeepSeek Harness (dsh)**：
+一个**纯配置型 Cordis bundle**，复用官方 MCP 客户端插件 `@deepseek-ai/dsh-mcp-client`，
+把本机已安装的 `rea mcp`（stdio）注册成原生工具。装载后模型直接拥有 `mcp__rea__*` 工具。
+
+> **与上游的关系（重要）**
+> 本仓库是**第三方适配封装，不是 REA 项目的组成部分**，也不包含 REA 的任何源码，
+> 更不由 REA 作者维护。它只做一件事：向 dsh 的配置组合里插入一条指向你本机 `rea` 安装的 MCP 服务器记录。
+> - 上游项目：**REA — Reverse Engineer Anything** — <https://github.com/morluto/rea>（MIT）
+> - 上游文档：<https://github.com/morluto/rea#what-you-can-analyze> · [中文](https://github.com/morluto/rea/blob/main/README_zh.md#可以分析什么) · 站点 <https://rea.tools/>
+> - 上游 npm 包：`rea-agents`
+> - 本插件仓库：**<https://github.com/czcdr/dsh-plugin-rea>**
+> - 问题反馈：REA 本身的问题请提到上游；本插件的问题提到 [本仓库 Issues](https://github.com/czcdr/dsh-plugin-rea/issues)。
+
+---
+
+![dsh-plugin-rea：会话经官方 MCP 客户端行调用本机 rea mcp，再把 Evidence 带回会话](assets/screenshot-1.png)
+
+## English
+
+**What it does.** This plugin performs **no reverse engineering itself**. It connects the upstream REA
+MCP server to DeepSeek Harness, so the tools REA ships become callable in a session as
+`mcp__rea__*`.
+
+In upstream's own words, REA is *"one MCP for reverse engineering across binaries, applications, and
+runtime behavior"* — *"see a feature you like. Understand how it works, down to the binary level."* It
+*connects your agent to tools for inspecting native binaries, JavaScript and Electron apps, .NET
+assemblies, and websites*; analysis runs locally, and results include the evidence and limitations
+behind each conclusion. Native analysis can use an existing Hopper, Ghidra, or IDA installation, and
+static JavaScript analysis needs no native engine.
+
+Upstream's own coverage list (`README.md#what-you-can-analyze`): native binaries — pseudocode,
+assembly, strings, symbols, calls and references; JavaScript/Electron apps — modules, imports, source
+maps, routes, IPC; websites — page structure, scripts, network observations, screenshots; .NET
+assemblies; Android APKs; Android devices over adb; JEB projects; Android resources; firmware;
+packages and assets; process behavior; plus offline ELF layout, EVM bytecode, recorded Linux crashes
+and saved network captures.
+
+**What this plugin adds.** Exactly two things: it registers that MCP server into DSH's tool layer
+under the `mcp__rea__*` names, and it scopes the engine environment variables (`GHIDRA_INSTALL_DIR`,
+`JAVA_HOME`) to that MCP child process instead of the whole harness.
+
+**What it can and cannot do.** The analysis is upstream's; this section only restates upstream's own
+contract so expectations are right.
+
+- **It cannot recover complete source code.** For native binaries upstream returns *pseudocode and
+  assembly*, for Android APKs *decompiled methods*, for JEB units *pseudocode*, and for
+  JavaScript/Electron *modules and their relations*. Upstream's tool contract states the pseudocode
+  "is decompiler output, not original source and not text-equivalent" to another provider's output.
+- Not recoverable in practice: original identifier names, types, comments, macros and template
+  expansion, build scripts and assets. Optimisation (inlining, reordering), symbol stripping,
+  obfuscation, packing and VM protection only make the output worse.
+- Every result carries **confidence and limitations** (`observed` / `derived` / `inferred`, plus an
+  explicit limitations list). Read them as evidence, never as recovered source.
+- Good for: understanding behaviour, locating an implementation, interoperability and compatible
+  re-implementation, security review, migration reference. To obtain actual source code, use the
+  legitimate route — the upstream repository, vendor authorisation, or the vendor's own SDK.
+
+**Verified against** (author's machine, 2026-10-12):
+
+| Component | Version |
+|---|---|
+| REA (`rea-agents`) | **6.4.0** |
+| DeepSeek Harness (dsh desktop runtime) | **0.2.0-rc.2** |
+| `@deepseek-ai/dsh-mcp-client` (row provider) | bundled by the harness; npm latest `0.0.1-rc.1` |
+| Ghidra | 12.1.4 (REA currently accepts 12.1.x) |
+| Node.js | 24.21.0 (REA engines: `^22.19.0 \|\| ^24.11.0 \|\| >=26.0.0`) |
+| Host | Windows 11 x64 |
+
+**Prerequisites.** Node.js (a version REA accepts), the REA CLI installed globally
+(`npm i -g rea-agents`), and for native analysis a Ghidra 12.1.x extraction directory (Hopper / IDA
+are alternatives, under their own licences). Static JavaScript/Electron and .NET analysis need no
+native engine.
+
+**Install.** Add this repository as a bundle (the repo declares `dsh.bundle.patch`, so it is
+installable directly):
+
+```
+dsh plugin --profile <profile> add github:czcdr/dsh-plugin-rea
+```
+
+A prebuilt tarball is attached to [Releases](https://github.com/czcdr/dsh-plugin-rea/releases)
+(version-free asset name, so the link keeps resolving). Or install a local checkout with
+`file:<path-to-this-repo>`.
+
+**Configure — two machine-specific values.** Edit `cordis.patch.yml` before or after installing:
+
+1. `args[0]` — full path of the REA CLI entry: run `npm root -g`, then append
+   `\rea-agents\scripts\rea.mjs` (`/rea-agents/scripts/rea.mjs` on POSIX).
+2. `env.GHIDRA_INSTALL_DIR` — your Ghidra extraction directory. Omit it only if you do not use Ghidra.
+
+`command: node` resolves through `PATH`; replace it with a full path if `node` is not on the PATH the
+harness sees. `env.JAVA_HOME` is optional (only needed when `java` is not on `PATH`).
+
+**Verify.** Ask for a `mcp__rea__*` call — `binary_session` reports the engine checks
+(`configuration` / `installation` / `headless` / `native_decompiler` / `java`), all of which should be
+`ok: true`. Then `open_binary` a PE, `binary_overview`, and `procedure_pseudo_code`.
+
+**Scope and caveats.** REA exposes 170+ tools at 6.4.0, so every session's tool list grows; the row
+sets `failOnStartupError: false` so a missing REA never blocks harness startup. Some REA tools launch
+processes, write files and access the network — DSH's permission policy applies. Analyse only
+artifacts you are authorized to inspect.
+
+**Updating — two independent things, both manual.**
+
+- **This plugin** never updates itself. Installed from a plugin market? Update it **in that market**.
+  Installed from a local `file:` checkout (as in the author's setup)? Overwrite the directory and
+  install it again through the plugin manager. Updating REA below does **not** update this plugin, and
+  updating this plugin does not touch REA.
+- **Upstream REA**: update it with `npm i -g rea-agents@latest`. Its `bin` entry
+  (`scripts/rea.mjs`) is stable across releases, so this needs no change here.
+- **Ghidra** is version-gated by REA (12.1.x today): update REA first, then check that it accepts a
+  newer Ghidra.
+- **DeepSeek Harness**: a harness upgrade may change the MCP client's config schema — inspect the row
+  with `Config.listConfigs name=@deepseek-ai/dsh-mcp-client` and adjust the field names.
+
+`check-updates.ps1` (Windows PowerShell) reports the state of all four at once.
+
+**License.** MIT (this adapter). REA is MIT and owned by its authors; Ghidra is Apache-2.0 and owned
+by the NSA. No upstream code is redistributed here.
+
+---
+
+## 中文
+
+**作用。** 本插件**自身不做任何逆向分析**。它把上游 REA 的 MCP 服务接入 DeepSeek Harness，
+让 REA 提供的那套工具在会话里变成可直接调用的 `mcp__rea__*`。
+
+按上游自述，REA 是「**通过一个 MCP 服务，逆向分析二进制文件、应用程序和运行时行为**」——
+「看到喜欢的功能，弄清它的工作原理，深入到二进制层面」。它「将智能体连接到分析工具，用于检查
+原生二进制文件、JavaScript 和 Electron 应用、.NET 程序集以及网站」；分析在本机运行，结果包含
+支撑各项结论的证据和相关限制。原生分析可以使用已有的 Hopper、Ghidra 或 IDA，静态 JavaScript 分析
+不需要原生引擎。
+
+上游列出的可分析目标（原文见 [README_zh.md#可以分析什么](https://github.com/morluto/rea/blob/main/README_zh.md#可以分析什么)）：
+原生二进制文件——伪代码、汇编、字符串、符号、调用和引用；JavaScript / Electron——模块、导入、
+source map、路由与 IPC；网站——页面结构、脚本、网络观察结果与截图；.NET 程序集；Android APK；
+Android 设备（adb）；JEB 项目；Android 资源；固件；软件包与资源；进程行为；以及离线 ELF 布局、
+EVM 字节码、已记录的 Linux 崩溃与已保存的网络捕获。
+
+**本插件在此之上只增加两件事**：把该 MCP 服务注册进 DSH 的工具层（工具名 `mcp__rea__*`），
+以及把引擎环境变量（`GHIDRA_INSTALL_DIR`、`JAVA_HOME`）限制在这个 MCP 子进程内，而不是整个 harness。
+
+**能做什么、不能做什么（重要）。** 分析能力由上游提供；这里只复述上游自己的契约，避免预期错位。
+
+- **无法完整还原源代码。** 上游对原生二进制返回的是**伪代码与汇编**，对 Android APK 返回
+  **反编译的方法**，对 JEB 单元返回**伪代码**，对 JavaScript/Electron 返回**模块及其关系**。
+  上游的工具契约明确写着：伪代码是反编译器输出，**不是原始源码**，且与其他提供方的输出
+  **不保证文本等价**。
+- 实践中不可恢复的内容：原始标识符命名、类型、注释、宏与模板展开、构建脚本与资源；
+  优化（内联、指令重排）、去符号（strip）、混淆、加壳与 VM 保护只会让可读性更差。
+- 每条结论都自带**置信度与限制**（`observed` / `derived` / `inferred`，另有 limitations 列表）：
+  请把它们当作证据使用，而不要当作"已还原的源码"。
+- 适合做：理解行为、定位实现、互操作与兼容实现、安全审计、迁移参考。
+  **要拿到真正的源码，请走正规渠道**——上游代码仓库、厂商授权，或厂商自己的 SDK。
+
+**已验证版本**（作者机器，2026-10-12）：REA `6.4.0`、DeepSeek Harness 桌面运行时 `0.2.0-rc.2`、
+Ghidra `12.1.4`、Node `24.21.0`、Windows 11 x64。行提供方 `@deepseek-ai/dsh-mcp-client` 由
+harness 自带（npm 最新 `0.0.1-rc.1`）。
+
+**前置条件。** 满足 REA 要求的 Node；全局安装 REA（`npm i -g rea-agents`）；原生分析需要
+Ghidra 12.1.x 的解压目录（Hopper / IDA 为替代方案，各自需授权）。静态 JavaScript/Electron 与
+.NET 分析不需要原生引擎。
+
+**安装。**
+
+```
+dsh plugin --profile <profile> add github:czcdr/dsh-plugin-rea
+```
+
+[Releases](https://github.com/czcdr/dsh-plugin-rea/releases) 附带预构建 tarball（资产名不带版本号，
+链接不会失效）。也可用本地目录安装：`file:<本仓库路径>`。
+
+**配置（两个随机器不同的值）**：改 `cordis.patch.yml`
+
+1. `args[0]` —— REA 入口文件的绝对路径：先跑 `npm root -g`，再拼上
+   `\rea-agents\scripts\rea.mjs`（POSIX 用 `/`）。
+2. `env.GHIDRA_INSTALL_DIR` —— 你的 Ghidra 解压目录；不用 Ghidra 时可删掉这一行。
+
+`command: node` 走 PATH；若 harness 的 PATH 里没有 `node`，改成绝对路径。`env.JAVA_HOME`
+可选，仅当 `java` 不在 PATH 上时需要。
+
+**验证。** 调用任一 `mcp__rea__*` 工具：`binary_session` 会给出引擎检查项
+（configuration / installation / headless / native_decompiler / java），应全部 `ok: true`；
+随后 `open_binary` 打开一个 PE → `binary_overview` → `procedure_pseudo_code`。
+
+**范围与注意。** REA 在 6.4.0 暴露 170+ 个工具，注入后每个会话的工具列表都会变大；行内设置
+`failOnStartupError: false`，因此 REA 缺失也不会阻塞 harness 启动。部分 REA 工具会启动进程、
+写文件、访问网络，按 DSH 的权限策略执行。请仅分析你已获得授权的目标。
+
+**更新：两件事，且都要手动。**
+
+- **本插件**不会自动更新。**从插件市场安装的，就在市场里更新**；本地 `file:` 目录方式安装的，
+  覆盖目录后在插件管理器里重装。下面更新 REA **不会**更新本插件，反过来也一样。
+- **上游 REA**：用 `npm i -g rea-agents@latest` 更新。它的 `bin` 入口（`scripts/rea.mjs`）
+  跨版本稳定，所以本插件无需改动。
+- **Ghidra**：受 REA 版本门槛限制（当前 12.1.x），先升 REA，再确认它接受新版 Ghidra。
+- **DeepSeek Harness**：升级可能改变 MCP 客户端配置结构，用
+  `Config.listConfigs name=@deepseek-ai/dsh-mcp-client` 看该行 schema 并调整字段名。
+
+`check-updates.ps1`（Windows PowerShell）会把上述四项一次跑完。
+
+**许可。** 本适配器为 MIT；REA 为 MIT，版权归其作者；Ghidra 为 Apache-2.0，版权归 NSA。
+本仓库不再分发上游代码。

package/check-updates.ps1

@@ -0,0 +1,139 @@
+<#
+.SYNOPSIS
+  检查 dsh-plugin-rea 的整条链路是否需要跟进上游更新。
+
+.DESCRIPTION
+  覆盖 4 类上游：REA(npm) / Node 运行时 / Ghidra 引擎 / DSH 插件登记。
+  只读：不安装、不修改任何配置，只报告现状与建议动作。
+
+.EXAMPLE
+  powershell -NoProfile -File .\check-updates.ps1
+.EXAMPLE
+  powershell -NoProfile -File .\check-updates.ps1 -Registry https://registry.npmjs.org
+.NOTES
+  Windows PowerShell 5.1 按 ANSI 读取 .ps1，本文件必须保存为 UTF-8 with BOM。
+#>
+[CmdletBinding()]
+param(
+  [string]$Registry = 'https://registry.npmmirror.com',
+  [string]$ReaPackageDir,
+  [string]$ProfileDir
+)
+
+# 默认值：自动定位 REA 全局包与 dsh profile（均可用参数覆盖）
+if (-not $ReaPackageDir) {
+  $npmRoot = $null
+  try { $npmRoot = (& npm root -g 2>$null | Select-Object -First 1).Trim() } catch { }
+  $ReaPackageDir = if ($npmRoot) { Join-Path $npmRoot 'rea-agents' } else { Join-Path $env:APPDATA 'npm\node_modules\rea-agents' }
+}
+if (-not $ProfileDir) {
+  if ($env:DSH_PROFILE_DIR) { $ProfileDir = $env:DSH_PROFILE_DIR }
+  else {
+    $profiles = @(Get-ChildItem "$env:USERPROFILE\.dsh\profiles" -Directory -ErrorAction SilentlyContinue)
+    $ProfileDir = if ($profiles.Count -gt 0) { $profiles[0].FullName } else { "$env:USERPROFILE\.dsh\profiles\desktop" }
+  }
+}
+
+$ErrorActionPreference = 'Continue'
+function Head($t) { Write-Host "`n=== $t ===" -ForegroundColor Cyan }
+function Ok($t)   { Write-Host "  [OK]   $t" -ForegroundColor Green }
+function Warn($t) { Write-Host "  [注意] $t" -ForegroundColor Yellow }
+function Bad($t)  { Write-Host "  [动作] $t" -ForegroundColor Red }
+function Info($t) { Write-Host "  $t" -ForegroundColor Gray }
+
+$actions = [System.Collections.Generic.List[string]]::new()
+
+# ---------------------------------------------------------------- REA (npm)
+Head 'REA 本体（npm 包 rea-agents）'
+$installed = $null; $engines = $null; $binPath = $null
+$pkgFile = Join-Path $ReaPackageDir 'package.json'
+if (Test-Path $pkgFile) {
+  $pkg = Get-Content $pkgFile -Raw | ConvertFrom-Json
+  $installed = $pkg.version; $engines = $pkg.engines.node
+  $binPath = ($pkg.bin.PSObject.Properties | Select-Object -First 1).Value
+  Ok "本地已安装: $installed"
+  Info "入口(bin): $binPath   ← 插件引用的就是它，跨版本稳定"
+  Info "Node 要求: $engines"
+} else { Bad "找不到 $pkgFile —— REA 全局包丢了？重装: npm i -g rea-agents" }
+
+$latest = $null
+foreach ($r in @($Registry, 'https://registry.npmjs.org')) {
+  try { $latest = (Invoke-RestMethod "$r/rea-agents/latest" -TimeoutSec 20).version; Info "最新版本($r): $latest"; break }
+  catch { Warn "查询失败 $r : $($_.Exception.Message)" }
+}
+if ($installed -and $latest) {
+  if ([version]$latest -gt [version]$installed) {
+    Warn "有新版本：$installed → $latest"
+    $actions.Add("升级上游 REA:  npm i -g rea-agents@$latest    （只更新 REA 本身；本插件不会自动更新，有新版需在插件管理器里重装）")
+  } else { Ok '已是最新版本' }
+}
+
+# ------------------------------------------------------------- Node 运行时
+Head 'Node 运行时'
+$nodeV = (& node -v) -replace '^v', ''
+Info "当前 node: $nodeV"
+if ($engines) {
+  if ($engines -match '\^24\.(\d+)\.' -and [version]$nodeV -ge [version]('24.' + $Matches[1] + '.0')) { Ok '满足当前 engines 要求' }
+  elseif ($engines -match '\^22\.(\d+)\.' -and [version]$nodeV -ge [version]('22.' + $Matches[1] + '.0')) { Ok '满足当前 engines 要求' }
+  else { Warn "请对照 engines 范围自行确认: $engines" }
+  Info "上游若抬高 Node 下限，插件里的 command('node') 需换成满足要求的 node 可执行文件"
+}
+
+# ------------------------------------------------------------ Ghidra 引擎
+Head 'Ghidra 引擎'
+$gd = [Environment]::GetEnvironmentVariable('GHIDRA_INSTALL_DIR', 'User')
+if (-not $gd) { $gd = $env:GHIDRA_INSTALL_DIR }
+if ($gd -and (Test-Path $gd)) {
+  Ok "GHIDRA_INSTALL_DIR = $gd"
+  $props = Join-Path $gd 'Ghidra\application.properties'
+  if (Test-Path $props) {
+    $v = (Select-String -Path $props -Pattern '^application\.version=' | Select-Object -First 1).Line -replace '^application\.version=', ''
+    Ok "已安装版本: $v"
+    if ($v -notmatch '^12\.1\.') { Bad "REA 当前要求 Ghidra 12.1.x，而你装的是 $v —— 升级 REA 后才有望支持更高版本" }
+  } else { Bad "缺少 Ghidra\application.properties —— 目录不完整" }
+} else { Bad "GHIDRA_INSTALL_DIR 未设置或目录不存在（当前值: $gd）" }
+
+try {
+  $rel = Invoke-RestMethod 'https://api.github.com/repos/NationalSecurityAgency/ghidra/releases/latest' -TimeoutSec 25 -Headers @{ 'User-Agent' = 'rea-check' }
+  Info "Ghidra 官方最新: $($rel.tag_name)  ($($rel.published_at))"
+  if ($rel.tag_name -notmatch 'Ghidra_12\.1') { Warn '官方已有更新；请先确认 REA 是否放开版本门槛，再升级 Ghidra' }
+} catch { Warn "GitHub API 查询失败（可跳过）: $($_.Exception.Message)" }
+
+# --------------------------------------------------------- REA 引擎自检
+Head 'REA 引擎自检（rea doctor）'
+$env:GHIDRA_INSTALL_DIR = $gd
+try {
+  $raw = & rea doctor --format json 2>$null
+  $doc = ($raw -join "`n") | ConvertFrom-Json
+  $g = $doc.providerInspections | Where-Object { $_.id -eq 'ghidra' }
+  if ($g) {
+    if ($g.available) { Ok "ghidra provider 可用，版本 $($g.providerVersion)" } else { Bad 'ghidra provider 不可用 —— 运行 rea doctor 看 remediation' }
+    $fails = @($g.checks | Where-Object { -not $_.ok })
+    if ($fails.Count -eq 0) { Ok '全部子项通过（configuration/installation/headless/native_decompiler/java）' }
+    else { $fails | ForEach-Object { Bad "$($_.name): $($_.detail)" } }
+  }
+  if ($doc.identity.cli_package_version) { Info "doctor 识别到的 CLI 版本: $($doc.identity.cli_package_version)，MCP 工具数: $($doc.identity.catalog.counts.mcp_tools)" }
+} catch { Warn "rea doctor 解析失败，请手动运行: rea doctor" }
+
+# ---------------------------------------------------- DSH 插件登记状态
+Head 'DSH 插件登记'
+$profPkg = Join-Path $ProfileDir 'package.json'
+if (Test-Path $profPkg) {
+  $p = Get-Content $profPkg -Raw | ConvertFrom-Json
+  $dep = $p.dependencies.'dsh-plugin-rea'
+  $bundled = @($p.dsh.profile.bundles) -contains 'dsh-plugin-rea'
+  if ($dep) { Ok "依赖已登记: dsh-plugin-rea = $dep" } else { Bad '依赖未登记 —— 用 plugin_manager 重新安装本插件' }
+  if ($bundled) { Ok '已列入 dsh.profile.bundles（装载层已生效）' } else { Bad '未列入 bundles —— 插件不会加载' }
+  Info '本插件不会自动更新：从插件市场安装的在市场里更新；本地 file: 目录方式则覆盖目录后在插件管理器里重装'
+  if ($dep -like 'file:*') {
+    $p2 = $dep -replace '^file:', ''
+    if (Test-Path $p2) { Ok "插件目录存在: $p2" } else { Bad "插件目录不存在: $p2 —— 移走了目录就会加载失败" }
+  }
+} else { Warn "找不到 profile: $profPkg" }
+
+# ------------------------------------------------------------------ 汇总
+Head '结论'
+if ($actions.Count -eq 0) { Ok '无需动作：整条链路与上游保持一致' }
+else { $actions | ForEach-Object { Bad $_ } }
+Write-Host ''
+Write-Host '提示：DSH 侧更新（应用升级可能改变 MCP 客户端配置结构）后，请重跑本脚本并调用一次 mcp__rea__binary_session 验证。' -ForegroundColor Gray

package/cordis.patch.yml

@@ -0,0 +1,38 @@
+# dsh-plugin-rea — REA (Reverse Engineer Anything) as native DSH tools
+#
+# Configuration-only bundle: no Host/Client entry files. It inserts one row of
+# the official MCP client plugin and points it at the installed `rea mcp`
+# stdio server; the model then sees mcp__rea__<tool>.
+#
+# ---------------------------------------------------------------------------
+# TWO VALUES ARE MACHINE-SPECIFIC — edit them for your machine:
+#
+#   1. args[0]              full path to the rea CLI entry file.
+#                           Run:  npm root -g
+#                           then append:  \rea-agents\scripts\rea.mjs
+#                           (POSIX: <npm root -g>/rea-agents/scripts/rea.mjs)
+#
+#   2. env.GHIDRA_INSTALL_DIR
+#                           the directory where Ghidra was extracted,
+#                           e.g. D:\ghidra\ghidra_12.1.4_PUBLIC
+#                           Leave it out only if you do not use Ghidra.
+#
+# `command: node` is resolved through PATH; point it at a full path (for
+# example D:\nodejs\node.exe) if node is not on the PATH the harness sees.
+# env.JAVA_HOME is optional — keep it when `java` is not on PATH.
+# ---------------------------------------------------------------------------
+
+- insert:
+    - id: mcp-rea
+      name: '@deepseek-ai/dsh-mcp-client'
+      config:
+        serverName: rea
+        transport: stdio
+        command: 'node'
+        args:
+          - 'D:\dev\npm-global\node_modules\rea-agents\scripts\rea.mjs'
+          - mcp
+        env:
+          GHIDRA_INSTALL_DIR: 'D:\ghidra\ghidra_12.1.4_PUBLIC'
+          JAVA_HOME: 'F:\game\xbox'
+        failOnStartupError: false

package/package.json

@@ -1,6 +1,45 @@
 {
   "name": "dsh-plugin-rea",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.3",
+  "description": "Third-party adapter that registers the upstream REA (Reverse Engineer Anything) MCP server into DeepSeek Harness as mcp__rea__* tools. REA itself is 'one MCP for reverse engineering across binaries, applications, and runtime behavior' (github.com/morluto/rea, MIT) — native binaries, JavaScript/Electron apps, .NET assemblies, websites, Android APKs, firmware and more; this plugin only composes the configuration row and scopes its engine env vars. · 第三方适配插件：把上游 REA（逆向一切）的 MCP 服务注册进 DeepSeek Harness，得到 mcp__rea__* 工具。逆向能力由上游提供（github.com/morluto/rea，MIT）；本插件只做配置组合与引擎环境变量隔离。",
+  "type": "module",
+  "license": "MIT",
+  "author": "czcdr",
+  "homepage": "https://github.com/czcdr/dsh-plugin-rea",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/czcdr/dsh-plugin-rea.git"
+  },
+  "bugs": {
+    "url": "https://github.com/czcdr/dsh-plugin-rea/issues"
+  },
+  "keywords": [
+    "deepseek",
+    "deepseek-harness",
+    "dsh",
+    "dsh-plugin",
+    "cordis",
+    "cordis-plugin",
+    "bundle",
+    "mcp",
+    "rea",
+    "reverse-engineering",
+    "ghidra",
+    "binary-analysis"
+  ],
+  "files": [
+    "cordis.patch.yml",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md",
+    "check-updates.ps1"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  },
+  "scripts": {
+    "check-updates": "powershell -NoProfile -File ./check-updates.ps1"
+  }
+}