dsh-plugin-showcase 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 antonioxue
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,192 @@
-# Temporary Holding Version
+# dsh-plugin-showcase
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+A reference plugin for **DeepSeek Harness (DSH)**. It does one job — say one useful
+sentence about the DSH host it runs in — through all eight plugin surfaces at once,
+so the whole surface area can be read in one small package.
+
+| Surface | File and anchor |
+| --- | --- |
+| Tool `showcase_inspect` | `lib/index.js:290` (definition), `:309` (registration) |
+| Hook `tools/pre-execute` | `lib/index.js:311` (gate), `:14`–`:31` (patterns) |
+| Slash command `/showcase` | `lib/index.js:322` |
+| Settings card | `lib/client.js:296` (`settings.section`, id `showcase`) |
+| Right-sidebar panel | body at `lib/client.js:314`, tab type via `sidebarRightTabs` |
+| i18n | `lib/client.js:12` (8 runtime keys), `locale/en.json`, `locale/zh.json` |
+| Marketplace metadata | `locale/*.json` meta, `icon.svg`, the `dsh` block in `package.json` |
+| Tests | `tests/host.test.mjs`, `tests/client.test.mjs` |
+
+Nothing here is compiled: only native ESM JavaScript, no third-party runtime
+dependency, no `@deepseek-ai` import.
+
+## Install and uninstall
+
+Profile used on this machine: `C:\Users\baba\.dsh\profiles\web`.
+
+### A. The documented way
+
+```sh
+dsh plugin --profile web add <path-to-this-directory>
+```
+
+`dsh plugin` forwards its arguments to pnpm inside the profile, links the checkout,
+and — because the package declares `dsh.bundle` — appends it to
+`dsh.profile.bundles`.
+
+This host has no global `dsh` on `PATH`, so the same command through the checkout:
+
+```sh
+node "C:\Users\baba\Desktop\deepseek-harness\apps\cli\lib\bin.js" plugin --profile web add "C:\Users\baba\Desktop\DSH工作区\plugins\dsh-plugin-showcase"
+```
+
+Removal: `... plugin --profile web remove dsh-plugin-showcase` (drops the dependency
+and the bundle layer).
+
+### B. What this machine actually uses — the manual equivalent
+
+Three edits, no install run:
+
+1. `C:\Users\baba\.dsh\profiles\web\package.json` → `dependencies`:
+   `"dsh-plugin-showcase": "link:C:/Users/baba/Desktop/DSH工作区/plugins/dsh-plugin-showcase"`
+2. The same file → `dsh.profile.bundles`: append `"dsh-plugin-showcase"`
+   (it is currently the last entry).
+3. A directory junction so Node can resolve the name:
+   `C:\Users\baba\.dsh\profiles\web\node_modules\dsh-plugin-showcase`
+   → `C:\Users\baba\Desktop\DSH工作区\plugins\dsh-plugin-showcase`
+   (verified as a `<JUNCTION>` reparse point; recreate it with
+   `cmd /c mklink /J <link> <target>`).
+
+**Why not the documented way here.** `dsh plugin ... add` runs an install inside the
+profile, and that install re-resolves the *whole* tree. This profile already carries
+eleven third-party plugins (`dsh-cost-meter`, `dsh-better-sidebar`, `dsh-chat-import`,
+`dsh-context`, `dsh-memgas`, `dsh-wallpaper-bg`, `@linxin666/*`, `@liustack/*`,
+`@tt-a1i/archify-dsh`). The three edits above are exactly the state a link install
+produces, without a resolver run that could rewrite one of those eleven.
+
+Check the layer without starting the host (verified output):
+
+```sh
+node "C:\Users\baba\Desktop\deepseek-harness\apps\cli\lib\bin.js" --profile web --dump-config
+# ...
+# == dsh-plugin-showcase
+# - id: showcase
+#   name: dsh-plugin-showcase
+```
+
+DSH's HMR watches the profile `package.json` (the `bundles` array) and the profile
+patch files, so adding the entry recomposes the running host without a restart; the
+browser half needs one page refresh. Undo by removing the three edits.
+
+## Verifying each surface
+
+**1. Tool.** `showcase_inspect` takes no arguments and returns the snapshot. Ask the
+agent to run it; the rendered text starts with `DSH 巡检报告 <generatedAt>` and then
+`## 工作区`, `## 会话`, `## 插件`. It is also where the `null`/`""` degradation is
+visible: an unknown session shows `未知`.
+
+**2. Hook.** The gate is on by default. A tool call is denied when its `command`,
+`cmd`, `script` or `code` argument (case-insensitive) contains one of:
+
+- `rm -rf /`, `rm -rf ~`
+- fork bombs: `:(){:|:&;}`, `:(){ :|:& };:`, `.(){ :|:& };:`, `bomb(){ bomb|bomb& };bomb`
+- `del /f /s /q c:\`, `format c:`
+- the `shutdown` / `shutdown.exe` word in command position, optionally behind
+  `sudo`, `doas` or `pkexec`, e.g. `shutdown /s /t 0` or `sudo shutdown -h now`
+
+Whitespace-collapsed spellings such as `rm   -rf   /tmp`, or the same commands written with tabs
+instead of spaces, are caught too.
+The deny reason is `showcase: 拒绝执行破坏性命令`; everything else calls `next()` and
+is allowed. Argument text outside those four keys is ignored.
+
+**3. Command.** `/showcase` prints the same report text; `/showcase on` and
+`/showcase off` switch the gate (`showcase 拦截门: 已开启` / `已关闭`); any other input
+answers `/showcase [on|off]`. State is per plugin instance, so a fresh apply starts
+with the gate on.
+
+**4. Settings card.** Open Settings: a nav row labelled **功能展示 / Showcase**
+(registration id `showcase`, order 90) holds the card — a refresh button, an
+"open the panel" button, and then either the snapshot facts or the degraded copy.
+
+**5. Right-sidebar panel.** Tab type id `showcase-panel`, kind `showcase`, title
+**巡检面板 / Showcase panel**, body seated under the same key. Two doors open it: the ◎
+button in the left sidebar footer (beside Settings), and the settings card's
+"open the panel" button — both end in `sidebarRight.openTab('showcase')`. The type
+declares no `guide` entry, so it does not appear on the right sidebar's guide page.
+
+**6. i18n.** Eight runtime keys — `title`, `subtitle`, `panelTitle`, `panelEmpty`,
+`gateOn`, `gateOff`, `openPanel`, `refresh` — each present in `en` and `zh`.
+Language resolution is `ctx.locale` → `navigator.language` → `en`; a host without a
+locale service still renders real copy. Marketplace metadata comes from
+`locale/en.json` (the anchor) and `locale/zh.json`.
+
+**7. Marketplace metadata.** The Plugins page shows `icon.svg` plus the localized
+title and description from the `locale/*.json` `meta` blocks.
+
+**8. Tests.** `npm test` — see below.
+
+## Honest limitations
+
+1. **The client cannot read live host data, and under the zero-build rule it cannot.**
+   The documented remote-API path needs typert decorators, a code-generation step and
+   a third-party dependency — three hard conflicts with "native ESM, no build, no
+   deps". `lib/client.js` still probes the plausible shapes (`remote.showcase`,
+   `ctx.showcase`) and degrades to `null`. Consequence: the panel and the settings
+   card show a **static capability list plus the degraded copy**, not host data.
+2. **`sidebar.footer.action` does not project `label`.** The sidebar shell renders
+   that seat with only `{ wide }`, so the visible text is whatever the component
+   draws (`◎`, with the label carried as `aria-label`). The `label` thunk is a legal
+   `SlotLabel` and is correct, but no shell reads it for this seat.
+3. **The gate is a literal-substring heuristic, not a sandbox.** It normalizes case and
+   whitespace and understands command position, but an obfuscated spelling (base64,
+   variable expansion, another tool's argument key) passes through. It is here to
+   demonstrate the extension point and to stop obvious mistakes, nothing more.
+4. **At 390px the settings page is limited by the host layout.** The host's settings
+   dialog does not collapse its left navigation at that width, so the content column is
+   very narrow. This card stacks its key/value pairs when the container is under 320px,
+   lets long values wrap anywhere and hides horizontal overflow, but the page margins
+   belong to the host.
+5. **The visual regression covers facts, not pixels.** A real browser (Edge driven by
+   `playwright-core`, no browser download) captured light, dark and 390px states,
+   asserting that elements render, that nothing overflows horizontally, and the measured
+   theme colours. Screenshots and the script live in `_visual/`; there is no per-pixel
+   baseline diff.
+
+## Extending it
+
+- **New tool.** Copy the raw JSON-Schema `ToolDefinition` shape of `inspectTool`
+  (`lib/index.js:290`) and register it with
+  `ctx.effect(() => ctx.tools.register(<tool>), 'showcase: <name>')` (`:309`). `output`
+  must carry `{ schema, render }`. Add its deny patterns to `DESTRUCTIVE_PATTERNS`
+  (`:14`), then cover it in `tests/host.test.mjs`.
+- **New slot.** In `apply()` (`lib/client.js:290`) copy the
+  `slots.inject(<slot>, () => slots.register({ name, ... }, Component))` shape:
+  `settings.section` at `:296`, `sidebar.right.pane.tab` at `:314`,
+  `sidebar.footer.action` at `:322`. A right-sidebar tab needs both halves — the body
+  key must equal the id of the type registered through `sidebarRightTabs.register`.
+- **New runtime string.** Add the key to both `dict.en` and `dict.zh`
+  (`lib/client.js:12`) and extend `DICT_KEYS` in
+  `tests/helpers/client-harness.mjs` so the bilingual test keeps guarding it.
+
+## Tests
+
+```sh
+npm install   # once, needs registry access (devDependency: vitest)
+npm test      # offline from then on, one command, whole suite
+```
+
+72 tests in 2 files, no machine path baked in — every path derives from
+`import.meta.url`, and the workspace fixture is a temp directory created per run.
+
+- `tests/host.test.mjs` (47): module shape, `ctx.effect` lifecycle, tool registration,
+  `output` contract with the returned value validated against its own schema, snapshot
+  shape, "no `undefined`", `""`/`null` degradation, git-branch discovery, all eight
+  destructive patterns (plus collapsed spellings, array arguments, key scoping), the
+  word-boundary deny and allow cases for power commands, hook-throw still allowing,
+  gate on/off, the command's three inputs, the provided service.
+- `tests/client.test.mjs` (25): lazy-CJS registration, factory exports, exactly three
+  seats, tab-type/body-key agreement, the footer's open path, the eight bilingual dict
+  keys, language resolution including a host with no locale service, `fetchSnapshot`
+  degradation (no service / `ok` / bare snapshot / `ok:false` / throwing / malformed),
+  rendering with and without data, refresh clicks.
+
+Runner: **vitest 3** (the declared devDependency). The fallback would have been Node's
+built-in `node:test`; it was not needed because the registry was reachable.

package/README.zh.md

@@ -0,0 +1,174 @@
+# dsh-plugin-showcase
+
+一个 **DeepSeek Harness（DSH）** 参考插件。它只做一件事——用一句话说明它所在的这台
+DSH 主机是什么状况——但把八个插件能力面一次性用满，因此整块接口面可以在一个小包里
+读完。
+
+| 能力面 | 文件与位置 |
+| --- | --- |
+| 工具 `showcase_inspect` | `lib/index.js:290`（定义）、`:309`（注册） |
+| 钩子 `tools/pre-execute` | `lib/index.js:311`（拦截门）、`:14`–`:31`（模式表） |
+| 斜杠命令 `/showcase` | `lib/index.js:322` |
+| 设置卡片 | `lib/client.js:296`（`settings.section`，id `showcase`） |
+| 右侧栏面板 | 面板体在 `lib/client.js:314`，tab 类型走 `sidebarRightTabs` |
+| 国际化 | `lib/client.js:12`（8 个运行期键）、`locale/en.json`、`locale/zh.json` |
+| 市场元数据 | `locale/*.json` 的 meta、`icon.svg`、`package.json` 的 `dsh` 块 |
+| 测试 | `tests/host.test.mjs`、`tests/client.test.mjs` |
+
+全程零构建：只有原生 ESM JavaScript，没有第三方运行时依赖，也没有任何
+`@deepseek-ai` import。
+
+## 安装与卸载
+
+本机使用的 profile：`C:\Users\baba\.dsh\profiles\web`。
+
+### 方式一：官方命令
+
+```sh
+dsh plugin --profile web add <本目录路径>
+```
+
+`dsh plugin` 把参数转发给 profile 目录里的 pnpm，链接该 checkout，并且因为这个包
+声明了 `dsh.bundle`，会把它追加进 `dsh.profile.bundles`。
+
+本机 `PATH` 上没有全局 `dsh`，所以同一个命令改从检出调用：
+
+```sh
+node "C:\Users\baba\Desktop\deepseek-harness\apps\cli\lib\bin.js" plugin --profile web add "C:\Users\baba\Desktop\DSH工作区\plugins\dsh-plugin-showcase"
+```
+
+卸载：`... plugin --profile web remove dsh-plugin-showcase`（依赖与 bundle 层一起撤掉）。
+
+### 方式二：本机实际使用的手动等价物
+
+三处改动，不跑安装：
+
+1. `C:\Users\baba\.dsh\profiles\web\package.json` 的 `dependencies` 加一行
+   `"dsh-plugin-showcase": "link:C:/Users/baba/Desktop/DSH工作区/plugins/dsh-plugin-showcase"`；
+2. 同一个文件的 `dsh.profile.bundles` 末尾追加 `"dsh-plugin-showcase"`
+   （目前它就是最后一项）；
+3. 建一个目录 junction，让 Node 能解析这个包名：
+   `C:\Users\baba\.dsh\profiles\web\node_modules\dsh-plugin-showcase`
+   → `C:\Users\baba\Desktop\DSH工作区\plugins\dsh-plugin-showcase`
+   （本机实测为 `<JUNCTION>` 重解析点；重建命令是
+   `cmd /c mklink /J <链接> <目标>`）。
+
+**为什么本机不用方式一。** `dsh plugin ... add` 会在 profile 内跑一次安装，而这次
+安装会重新解析整棵树。这个 profile 里已经装着十一个第三方插件（`dsh-cost-meter`、
+`dsh-better-sidebar`、`dsh-chat-import`、`dsh-context`、`dsh-memgas`、
+`dsh-wallpaper-bg`、`@linxin666/*`、`@liustack/*`、`@tt-a1i/archify-dsh`）。
+上面三处改动正是链接安装后的最终状态，但没有那次可能改写这十一个插件版本的解析过程。
+
+不启动、只验证层（以下为实测输出）：
+
+```sh
+node "C:\Users\baba\Desktop\deepseek-harness\apps\cli\lib\bin.js" --profile web --dump-config
+# ...
+# == dsh-plugin-showcase
+# - id: showcase
+#   name: dsh-plugin-showcase
+```
+
+DSH 的 HMR 监视 profile 的 `package.json`（只看 `bundles` 数组）与 profile 的 patch
+文件，因此追加条目会在不重启宿主进程的情况下重新组合；浏览器那一半需要刷新一次页面。
+撤销同样只是把这三处改回去。
+
+## 每个能力面怎么验证
+
+**1. 工具。** `showcase_inspect` 无参数，返回 snapshot。让 Agent 跑一次；渲染文本首行
+是 `DSH 巡检报告 <generatedAt>`，随后是 `## 工作区`、`## 会话`、`## 插件`。降级也在这里
+看得见：未知会话显示 `未知`。
+
+**2. 钩子。** 拦截门默认开启。当一次工具调用的 `command`、`cmd`、`script` 或 `code`
+参数（不区分大小写）命中下列任一模式时拒绝执行：
+
+- `rm -rf /`、`rm -rf ~`
+- fork 炸弹：`:(){:|:&;}`、`:(){ :|:& };:`、`.(){ :|:& };:`、`bomb(){ bomb|bomb& };bomb`
+- `del /f /s /q c:\`、`format c:`
+- 处在命令位置上的 `shutdown` / `shutdown.exe` 词（前面可以带 `sudo`、`doas` 或
+  `pkexec`），例如 `shutdown /s /t 0`、`sudo shutdown -h now`
+
+把空格抹掉、或用制表符代替空格的写法（例如 `rm   -rf   /tmp`）同样拦得住。拒绝理由固定为
+`showcase: 拒绝执行破坏性命令`；其余一律调用 `next()` 放行。这四个键之外的参数文本
+不参与匹配。
+
+**3. 命令。** `/showcase` 输出与工具同形的报告文本；`/showcase on` 与
+`/showcase off` 切换拦截门（`showcase 拦截门: 已开启` / `已关闭`）；其它输入回
+`/showcase [on|off]`。状态属于插件实例，重新 apply 会回到开启。
+
+**4. 设置卡片。** 打开设置，导航里有一行 **功能展示 / Showcase**（注册 id `showcase`，
+order 90），里面是这张卡：刷新按钮、"打开巡检面板"按钮，然后是快照事实或降级文案。
+
+**5. 右侧栏面板。** tab 类型 id `showcase-panel`、kind `showcase`、标题
+**巡检面板 / Showcase panel**，面板体挂在同一个 key 上。打开它有两个入口：左侧栏底部
+Settings 旁边的 ◎ 按钮，以及设置卡上的"打开巡检面板"按钮，两者最终都调用
+`sidebarRight.openTab('showcase')`。这个 tab 类型没有声明 `guide` 条目，所以它不会
+出现在右侧栏的引导页里。
+
+**6. 国际化。** 八个运行期键——`title`、`subtitle`、`panelTitle`、`panelEmpty`、
+`gateOn`、`gateOff`、`openPanel`、`refresh`——`en` 与 `zh` 各一份。语言解析顺序是
+`ctx.locale` → `navigator.language` → `en`；没有 locale 服务的宿主照样渲染真实文案。
+市场元数据来自 `locale/en.json`（锚点）与 `locale/zh.json`。
+
+**7. 市场元数据。** 插件页显示 `icon.svg`，以及 `locale/*.json` 里 meta 的本地化标题
+与描述。
+
+**8. 测试。** `npm test`，见下文。
+
+## 诚实的限制清单
+
+1. **client 侧拿不到宿主实时数据，而且在零构建约束下拿不到。** 官方 remote API 路线需要
+   typert 装饰器、代码生成步骤和第三方依赖——这三条与"原生 ESM、不构建、不加依赖"逐条
+   冲突。`lib/client.js` 仍然会去探测几种可能的形状（`remote.showcase`、
+   `ctx.showcase`），失败即降级为 `null`。结果就是：面板与设置卡片显示的是**静态能力
+   清单加降级文案**，不是主机数据。
+2. **`sidebar.footer.action` 座位不投影 `label`。** 侧栏外壳只以 `{ wide }` 渲染这个
+   座位，可见文本由组件自己画（`◎`，标签通过 `aria-label` 承载）。那个 `label` thunk
+   是合法的 `SlotLabel` 也没写错，只是这个座位没有壳去读它。
+3. **拦截门是按字面串匹配的启发式，不是沙箱。** 它统一大小写与空白、认得命令位置，但
+   混淆写法（base64、变量展开、换到别的参数键）能绕过去。它的用途是演示扩展点并拦住明显
+   的误操作，仅此而已。
+4. **390px 窄屏下设置页整体受宿主布局限制。** 宿主设置弹窗在这个宽度不收左侧导航，
+   内容列因此很窄。本插件的卡片会在容器 <320px 时把键值对纵向堆叠、长值任意换行，并
+   隐藏横向溢出，但页面整体留白由宿主决定。
+5. **视觉回归覆盖事实，不覆盖像素。** 已用真浏览器（Edge + `playwright-core`，不下载
+   浏览器）抓过浅色、深色、390px 三种状态，断言的是元素是否渲染、有无横向溢出、主题实测
+   色值；截图与脚本在 `_visual/`，没有做逐像素基线比对。
+
+## 二次开发指引
+
+- **加一个工具。** 照抄 `inspectTool`（`lib/index.js:290`）那种原始 JSON-Schema
+  `ToolDefinition` 形状，用
+  `ctx.effect(() => ctx.tools.register(<tool>), 'showcase: <name>')` 注册（`:309`）。
+  `output` 必须带 `{ schema, render }`。要拦截的新模式加进 `DESTRUCTIVE_PATTERNS`
+  （`:14`），然后在 `tests/host.test.mjs` 里补用例。
+- **加一个新 slot。** 在 `apply()`（`lib/client.js:290`）里照抄
+  `slots.inject(<slot>, () => slots.register({ name, ... }, 组件))` 这个形状：
+  `settings.section` 在 `:296`、`sidebar.right.pane.tab` 在 `:314`、
+  `sidebar.footer.action` 在 `:322`。右侧栏 tab 必须两半都注册——面板体的 key 要等于
+  通过 `sidebarRightTabs.register` 注册的类型 id。
+- **加一条运行期文案。** 同时加进 `dict.en` 与 `dict.zh`（`lib/client.js:12`），并把
+  `tests/helpers/client-harness.mjs` 里的 `DICT_KEYS` 一起扩展，双语用例才会继续守住它。
+
+## 测试
+
+```sh
+npm install   # 只做一次，需要访问 registry（devDependency: vitest）
+npm test      # 之后完全离线，一条命令跑完整个套件
+```
+
+两个文件共 72 个用例，不写死任何机器路径——所有路径都由 `import.meta.url` 推导，
+工作区夹具是每次运行现建的临时目录。
+
+- `tests/host.test.mjs`（47 个）：模块形状、`ctx.effect` 生命周期、工具注册、
+  `output` 契约（返回值用声明的 schema 反向校验）、snapshot 形状、"不出现
+  `undefined`"、`""`/`null` 降级、git 分支发现、八条破坏性模式（外加抹空格的写法、
+  数组参数、参数键范围）、关机类命令的词边界拒绝与放行、钩子内部抛错仍放行、拦截门开关、
+  命令的三种输入、对外提供的服务。
+- `tests/client.test.mjs`（25 个）：lazy-CJS 登记、factory 导出、恰好三个座位、
+  tab 类型与面板体 key 一致、侧栏按钮的打开路径、八键双语词典、语言解析（含没有 locale
+  服务的宿主）、`fetchSnapshot` 的各级降级（无服务 / `ok` / 裸快照 / `ok:false` / 抛错 /
+  形状不对）、有数据与无数据两种渲染、刷新点击。
+
+运行器选用 **vitest 3**（已声明的 devDependency）。备选是 Node 内置的 `node:test`，
+因为 registry 可达，所以没有用到。

package/cordis.patch.yml

@@ -0,0 +1,5 @@
+# dsh-plugin-showcase 的 bundle 层：一行 host + client 同包的插入。
+# name 必须是裸包名 —— modules 的宿主半侧只把 client 半挂在裸包名行上。
+- insert:
+    - id: showcase
+      name: 'dsh-plugin-showcase'

package/icon.svg

@@ -0,0 +1,5 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" width="64" height="64">
+  <rect x="4" y="4" width="56" height="56" rx="14" fill="#2f6fed"/>
+  <circle cx="32" cy="32" r="15" fill="none" stroke="#fff" stroke-width="3" stroke-dasharray="7 5"/>
+  <text x="32" y="41" font-family="sans-serif" font-size="22" font-weight="700" fill="#fff" text-anchor="middle">S</text>
+</svg>

package/lib/client.js

@@ -0,0 +1,456 @@
+// dsh-plugin-showcase · client half (lazy-CJS factory, no build step).
+// Loading this file only registers a factory; the body runs when the module is materialized.
+window.__ModuleLoader__.load({
+  id: 'dsh-plugin-showcase',
+  factory: (require) => {
+    const React = require('react')
+    const h = React.createElement
+
+    const TAB_ID = 'showcase-panel'
+    const TAB_KIND = 'showcase'
+
+    const dict = {
+      en: {
+        title: 'Showcase',
+        subtitle: 'A DeepSeek Harness reference plugin: one tool, one hook, one command, a settings card and a right-sidebar panel.',
+        panelTitle: 'Showcase panel',
+        panelEmpty: 'No snapshot available — the Showcase host service is not reachable right now.',
+        gateOn: 'Guard gate: on',
+        gateOff: 'Guard gate: off',
+        openPanel: 'Open showcase panel',
+        refresh: 'Refresh',
+      },
+      zh: {
+        title: '功能展示',
+        subtitle: 'DeepSeek Harness 参考插件：一个工具、一个钩子、一条命令、一张设置卡片与一个右侧栏面板。',
+        panelTitle: '巡检面板',
+        panelEmpty: '暂时取不到巡检数据：Showcase 宿主服务当前不可达。',
+        gateOn: '拦截门：已开启',
+        gateOff: '拦截门：已关闭',
+        openPanel: '打开巡检面板',
+        refresh: '刷新',
+      },
+    }
+
+    // The three seats are mounted by different owners; the Client Context of this
+    // plugin is the one dependency they share, so it is kept here once apply ran.
+    let currentCtx = null
+
+    function pickLang(value) {
+      const tag = typeof value === 'string' ? value.toLowerCase().split(/[-_]/)[0] : ''
+      return tag === 'zh' || tag === 'en' ? tag : null
+    }
+
+    function browserLang() {
+      const nav = typeof navigator === 'undefined' ? '' : navigator.language
+      return typeof nav === 'string' && nav.toLowerCase().startsWith('zh') ? 'zh' : 'en'
+    }
+
+    function lang(ctx) {
+      const target = ctx === undefined || ctx === null ? currentCtx : ctx
+      try {
+        const state = target === null || target === undefined ? null : target.get?.('locale')?.getSnapshot?.()
+        return pickLang(state?.active) || pickLang(state?.locale) || browserLang()
+      } catch (error) {
+        return browserLang()
+      }
+    }
+
+    function text(ctx) {
+      return dict[lang(ctx)]
+    }
+
+    function getOf(ctx, key) {
+      if (ctx === null || ctx === undefined) return undefined
+      try {
+        const value = ctx[key]
+        if (value !== undefined && value !== null) return value
+        return typeof ctx.get === 'function' ? ctx.get(key) : undefined
+      } catch (error) {
+        return undefined
+      }
+    }
+
+    // ---- data ----------------------------------------------------------------
+
+    // B owns the wire name (§7); every shape it may legitimately take is tried in
+    // one place, and any failure degrades to null instead of throwing.
+    function remoteCandidate(ctx) {
+      const target = ctx === undefined || ctx === null ? currentCtx : ctx
+      const reads = [
+        () => getOf(target, 'remote.showcase'),
+        () => getOf(getOf(target, 'remote'), 'showcase'),
+        () => getOf(target, 'showcase'),
+      ]
+      for (const read of reads) {
+        try {
+          const service = read()
+          if (service !== undefined && service !== null && typeof service.snapshot === 'function') return service
+        } catch (error) {
+          // try the next shape
+        }
+      }
+      return null
+    }
+
+    function asSnapshot(value) {
+      if (value === null || typeof value !== 'object') return null
+      if (Array.isArray(value.sections) || typeof value.generatedAt === 'string') return value
+      return null
+    }
+
+    // A RemoteResult carries { ok, value } | { ok:false, error }; a plain service
+    // answers the Snapshot itself.
+    function unwrap(result) {
+      if (result === null || typeof result !== 'object') return null
+      if (typeof result.ok === 'boolean') return result.ok ? asSnapshot(result.value) : null
+      return asSnapshot(result)
+    }
+
+    async function fetchSnapshot(ctx) {
+      try {
+        const service = remoteCandidate(ctx)
+        if (service === null) return null
+        return unwrap(await service.snapshot())
+      } catch (error) {
+        return null
+      }
+    }
+
+    // ---- shared UI -----------------------------------------------------------
+
+    const MONO = 'ui-monospace, SFMono-Regular, Consolas, monospace'
+
+    // Every box is min-width:0 + overflowX:hidden so a squeezed container can only
+    // shorten lines, never force the host into a horizontal scrollbar.
+    const S = {
+      card: { display: 'flex', flexDirection: 'column', gap: 10, padding: '16px 18px', minWidth: 0, maxWidth: '100%', boxSizing: 'border-box', overflowX: 'hidden', fontSize: 13, color: 'inherit' },
+      cardNarrow: { gap: 8, padding: '10px 8px' },
+      pane: { display: 'flex', flexDirection: 'column', gap: 10, padding: '12px 14px', minWidth: 0, maxWidth: '100%', boxSizing: 'border-box', overflowX: 'hidden', fontSize: 13, color: 'inherit' },
+      paneNarrow: { gap: 8, padding: '8px' },
+      head: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: 8 },
+      title: { margin: 0, fontSize: 14, fontWeight: 600 },
+      subtitle: { margin: 0, fontSize: 12, lineHeight: 1.55, opacity: 0.72 },
+      toolbar: { display: 'flex', flexWrap: 'wrap', gap: 8 },
+      button: { font: 'inherit', fontSize: 12, padding: '3px 10px', borderRadius: 6, border: '1px solid rgba(128,128,128,.45)', background: 'transparent', color: 'inherit', cursor: 'pointer' },
+      footerAction: { display: 'inline-flex', alignItems: 'center', justifyContent: 'center', width: 26, height: 26, borderRadius: 6, border: 0, background: 'transparent', color: 'inherit', cursor: 'pointer', fontSize: 14 },
+      note: { margin: 0, fontSize: 12, lineHeight: 1.55, opacity: 0.7 },
+      group: { display: 'flex', flexDirection: 'column', gap: 3 },
+      groupTitle: { margin: '4px 0 0', fontSize: 12, fontWeight: 600, opacity: 0.85 },
+      row: { display: 'flex', gap: 8, alignItems: 'baseline', minWidth: 0 },
+      rowNarrow: { display: 'flex', flexDirection: 'column', gap: 1, minWidth: 0 },
+      rowLabel: { flex: '0 0 auto', minWidth: 82, fontSize: 12, opacity: 0.6 },
+      rowLabelNarrow: { fontSize: 11, opacity: 0.6 },
+      rowValue: { flex: '1 1 auto', minWidth: 0, fontSize: 12, fontFamily: MONO, overflowWrap: 'anywhere', wordBreak: 'break-word' },
+      rowValueNarrow: { fontSize: 12, fontFamily: MONO, overflowWrap: 'anywhere', wordBreak: 'break-word' },
+    }
+
+    // Below this the label column alone eats the line, so pairs stack instead of
+    // squeezing one character per line.
+    const NARROW_MAX = 320
+
+    function row(key, label, value, narrow) {
+      const shown = value === null || value === undefined || value === '' ? '—' : String(value)
+      return h('div', { key, style: narrow === true ? S.rowNarrow : S.row },
+        h('span', { style: narrow === true ? S.rowLabelNarrow : S.rowLabel }, label),
+        h('span', { style: narrow === true ? S.rowValueNarrow : S.rowValue }, shown))
+    }
+
+    function factRows(snapshot, t) {
+      const workspace = snapshot.workspace || {}
+      const session = snapshot.session || {}
+      const plugin = snapshot.plugin || {}
+      return [
+        ['generatedAt', snapshot.generatedAt],
+        ['cwd', workspace.cwd],
+        ['gitBranch', workspace.gitBranch],
+        ['model', session.model],
+        ['version', plugin.version],
+        ['gate', plugin.gateEnabled === true ? t.gateOn : t.gateOff],
+      ]
+    }
+
+    function snapshotBody(snapshot, t, narrow) {
+      const sections = Array.isArray(snapshot.sections) ? snapshot.sections : []
+      const facts = factRows(snapshot, t)
+      return h('div', { style: S.group },
+        h('h4', { style: S.groupTitle }, 'snapshot'),
+        facts.map(([label, value], index) => row('fact-' + index, label, value, narrow)),
+        sections.map((section, index) => h('div', { key: 'section-' + index, style: S.group },
+          h('h4', { style: S.groupTitle }, String((section && section.title) || '')),
+          (Array.isArray(section && section.items) ? section.items : []).map((item, itemIndex) =>
+            row('item-' + index + '-' + itemIndex, String((item && item.label) || ''), item && item.value, narrow)))))
+    }
+
+    // Contract §7 fallback: when the host exposes no client-reachable remote the
+    // seats still say what this plugin offers instead of rendering nothing.
+    const CAPABILITIES = [
+      ['tool', 'showcase_inspect'],
+      ['command', '/showcase'],
+      ['plugin', 'dsh-plugin-showcase'],
+    ]
+
+    function fallbackView(t, withNote, narrow) {
+      return h('div', { style: S.group },
+        withNote ? h('p', { style: S.note }, t.panelEmpty) : null,
+        CAPABILITIES.map(([label, value], index) => row('cap-' + index, label, value, narrow)))
+    }
+
+    // Re-renders on a language switch so the visible copy follows the label thunks.
+    function useLangTick(ctx) {
+      if (typeof React.useState !== 'function' || typeof React.useEffect !== 'function') return
+      const [, setGen] = React.useState(0)
+      React.useEffect(() => {
+        const locale = getOf(ctx, 'locale')
+        let dispose = null
+        try {
+          dispose = typeof locale?.subscribe === 'function' ? locale.subscribe(() => setGen((value) => value + 1)) : null
+        } catch (error) {
+          dispose = null
+        }
+        return () => {
+          try {
+            if (typeof dispose === 'function') dispose()
+          } catch (error) {
+            // a locale subscription that cannot be released must not break unmount
+          }
+        }
+      }, [])
+    }
+
+    function useSnapshot(ctx) {
+      const [state, setState] = React.useState({ loading: true, data: null })
+      const refresh = () => {
+        setState((previous) => ({ loading: true, data: previous.data }))
+        fetchSnapshot(ctx).then(
+          (data) => setState({ loading: false, data }),
+          () => setState({ loading: false, data: null }))
+      }
+      React.useEffect(() => { refresh() }, [])
+      return [state, refresh]
+    }
+
+    // The host forces a very narrow content column on small screens; stacking is
+    // driven by the measured box, not the viewport, because only the box knows.
+    function useNarrow(ref) {
+      const [narrow, setNarrow] = React.useState(false)
+      React.useEffect(() => {
+        const element = ref === null || ref === undefined ? null : ref.current
+        const box = element !== null && element !== undefined && typeof element.getBoundingClientRect === 'function'
+          ? element
+          : null
+        const viewport = () => (typeof window !== 'undefined' && typeof window.innerWidth === 'number' ? window.innerWidth : NARROW_MAX + 1)
+        const measure = () => {
+          const width = box === null ? viewport() : box.getBoundingClientRect().width
+          setNarrow(width > 0 && width < NARROW_MAX)
+        }
+        measure()
+        if (box !== null && typeof ResizeObserver === 'function') {
+          const observer = new ResizeObserver(measure)
+          observer.observe(box)
+          return () => observer.disconnect()
+        }
+        if (typeof window !== 'undefined' && typeof window.addEventListener === 'function') {
+          window.addEventListener('resize', measure)
+          return () => window.removeEventListener('resize', measure)
+        }
+        return undefined
+      }, [])
+      return narrow === true
+    }
+
+    function useRefOf() {
+      return typeof React.useRef === 'function' ? React.useRef(null) : { current: null }
+    }
+
+    // Cached by the service watch below: the controller may arrive after apply.
+    let rightController = null
+
+    function resolveSidebarRight(ctx) {
+      const target = ctx === undefined || ctx === null ? currentCtx : ctx
+      const reads = [
+        () => (target === null || target === undefined ? undefined : target.get?.('sidebarRight')),
+        () => (target === null || target === undefined ? undefined : target.sidebarRight),
+        () => rightController,
+      ]
+      for (const read of reads) {
+        try {
+          const candidate = read()
+          if (candidate !== undefined && candidate !== null && typeof candidate.openTab === 'function') return candidate
+        } catch (error) {
+          // keep looking
+        }
+      }
+      return null
+    }
+
+    function openPanel(ctx) {
+      const right = resolveSidebarRight(ctx)
+      if (right === null) {
+        console.warn('[dsh-plugin-showcase] sidebarRight is not available; the showcase panel cannot be opened')
+        return false
+      }
+      try {
+        right.openTab(TAB_KIND)
+        return true
+      } catch (error) {
+        console.warn('[dsh-plugin-showcase] sidebarRight.openTab("' + TAB_KIND + '") failed:', error)
+        return false
+      }
+    }
+
+    // ---- seats ---------------------------------------------------------------
+
+    function SettingsCard() {
+      const ctx = currentCtx
+      const t = text(ctx)
+      useLangTick(ctx)
+      const [state, refresh] = useSnapshot(ctx)
+      const ref = useRefOf()
+      const narrow = useNarrow(ref)
+      return h('section', { ref, style: narrow ? { ...S.card, ...S.cardNarrow } : S.card },
+        h('h3', { style: S.title }, t.title),
+        h('p', { style: S.subtitle }, t.subtitle),
+        h('div', { style: S.toolbar },
+          h('button', { type: 'button', style: S.button, onClick: refresh }, t.refresh),
+          h('button', { type: 'button', style: S.button, onClick: () => openPanel(ctx) }, t.openPanel)),
+        state.data === null ? fallbackView(t, !state.loading, narrow) : snapshotBody(state.data, t, narrow))
+    }
+
+    function ShowcasePanel() {
+      const ctx = currentCtx
+      const t = text(ctx)
+      useLangTick(ctx)
+      const [state, refresh] = useSnapshot(ctx)
+      const ref = useRefOf()
+      const narrow = useNarrow(ref)
+      return h('div', { ref, style: narrow ? { ...S.pane, ...S.paneNarrow } : S.pane },
+        h('div', { style: S.head },
+          h('h3', { style: S.title }, t.panelTitle),
+          h('button', { type: 'button', style: S.button, onClick: refresh }, t.refresh)),
+        state.data === null ? fallbackView(t, !state.loading, narrow) : snapshotBody(state.data, t, narrow))
+    }
+
+    function FooterAction(props) {
+      const ctx = currentCtx
+      const t = text(ctx)
+      useLangTick(ctx)
+      const open = props !== null && props !== undefined && typeof props.open === 'function'
+        ? props.open
+        : () => openPanel(ctx)
+      return h('button', {
+        type: 'button',
+        title: t.openPanel,
+        'aria-label': t.openPanel,
+        onClick: open,
+        style: S.footerAction,
+      }, '◎')
+    }
+
+    // ---- apply ---------------------------------------------------------------
+
+    function effectOf(ctx) {
+      if (typeof ctx.effect === 'function') return (fn, label) => ctx.effect(fn, label)
+      return (fn) => {
+        const dispose = fn()
+        return () => {
+          if (typeof dispose === 'function') dispose()
+        }
+      }
+    }
+
+    // ui-sidebar-right provides these services in its own apply, which may run
+    // after ours: an immediate ctx.get() read loses the race and the tab type is
+    // never registered, so the service is awaited instead of sampled.
+    function watchService(ctx, name, receive) {
+      const settle = (service, scope) => {
+        if (service === undefined || service === null) return
+        try {
+          receive(service, scope)
+        } catch (error) {
+          console.warn('[dsh-plugin-showcase] handler for ' + name + ' failed:', error)
+        }
+      }
+      if (typeof ctx.inject === 'function') {
+        try {
+          ctx.inject([name], (scope) => settle(scope === null || scope === undefined ? undefined : scope[name], scope))
+          return
+        } catch (error) {
+          console.warn('[dsh-plugin-showcase] ctx.inject(' + name + ') is unusable, falling back to a service watch:', error)
+        }
+      }
+      const present = getOf(ctx, name)
+      if (present !== undefined && present !== null) {
+        settle(present, ctx)
+        return
+      }
+      if (typeof setTimeout !== 'function') return
+      effectOf(ctx)(() => {
+        let done = false
+        let tries = 0
+        let timer = null
+        const tick = () => {
+          if (done) return
+          const service = getOf(ctx, name)
+          if (service !== undefined && service !== null) {
+            done = true
+            settle(service, ctx)
+            return
+          }
+          tries += 1
+          if (tries < 20) timer = setTimeout(tick, 150)
+        }
+        timer = setTimeout(tick, 0)
+        return () => {
+          done = true
+          if (timer !== null) clearTimeout(timer)
+        }
+      }, 'showcase: await ' + name)
+    }
+
+    function apply(ctx) {
+      currentCtx = ctx
+      const slots = getOf(ctx, 'slots')
+      if (slots === undefined || slots === null) return
+      const effect = effectOf(ctx)
+
+      effect(() => slots.inject('settings.section', () => slots.register({
+        name: 'settings.section',
+        id: 'showcase',
+        order: 90,
+        label: () => dict[lang(ctx)].title,
+      }, SettingsCard)), 'showcase: settings section')
+
+      // The tab type owns the id; that same id is the key its body seats under.
+      watchService(ctx, 'sidebarRightTabs', (tabs) => {
+        if (typeof tabs.register !== 'function') return
+        effect(() => tabs.register({
+          id: TAB_ID,
+          kind: TAB_KIND,
+          canOpen: () => true,
+          title: () => dict[lang(ctx)].panelTitle,
+        }), 'showcase: right pane tab type')
+      })
+
+      watchService(ctx, 'sidebarRight', (controller) => { rightController = controller })
+
+      effect(() => slots.inject('sidebar.right.pane.tab', () => slots.register({
+        name: 'sidebar.right.pane.tab',
+        key: TAB_ID,
+      }, ShowcasePanel)), 'showcase: right pane body')
+
+      // 'label' is legal list metadata (string | (() => string), resolved by
+      // resolveSlotLabel), but this seat is projected with only { wide }, so the
+      // button's own glyph and aria-label carry the visible text.
+      effect(() => slots.inject('sidebar.footer.action', () => slots.register({
+        name: 'sidebar.footer.action',
+        id: 'showcase-open',
+        order: 90,
+        label: () => dict[lang(ctx)].openPanel,
+        inject: () => ({ open: () => openPanel(ctx) }),
+      }, FooterAction)), 'showcase: sidebar footer action')
+    }
+
+    return { apply, inject: ['slots'], fetchSnapshot, lang, dict, TAB_ID, TAB_KIND }
+  },
+})

package/lib/index.js

@@ -0,0 +1,334 @@
+import { readFile } from 'node:fs/promises'
+import { join } from 'node:path'
+
+export const name = 'showcase'
+export const inject = ['tools', 'commands']
+
+const VERSION = '0.1.0'
+const TOOL_NAME = 'showcase_inspect'
+const COMMAND_NAME = 'showcase'
+const DENY_REASON = 'showcase: 拒绝执行破坏性命令'
+const USAGE = '/showcase [on|off]'
+const UNKNOWN = '未知'
+
+const DESTRUCTIVE_PATTERNS = Object.freeze([
+  'rm -rf /',
+  'rm -rf ~',
+  ':(){:|:&;}',
+  ':(){ :|:& };:',
+  '.(){ :|:& };:',
+  'bomb(){ bomb|bomb& };bomb',
+  'del /f /s /q c:\\',
+  'format c:',
+])
+
+// Whitespace-removed twins: "rm  -rf  /", "FORMAT\tC:", and the collapsed fork-bomb spellings.
+const COMPACT_DESTRUCTIVE_PATTERNS = Object.freeze(
+  DESTRUCTIVE_PATTERNS.map(pattern => pattern.replace(/\s+/gu, '')),
+)
+
+const ELEVATION_PREFIXES = Object.freeze(['sudo', 'doas', 'pkexec'])
+const SHUTDOWN_WORD = /^shutdown(\.exe)?(\/(?:s|r|f)\w*)?$/u
+
+const COMMAND_ARG_KEYS = Object.freeze(['command', 'cmd', 'script', 'code'])
+
+function nullableString() {
+  return { oneOf: [{ type: 'string' }, { type: 'null' }] }
+}
+
+function buildSnapshotSchema() {
+  return {
+    type: 'object',
+    additionalProperties: false,
+    required: ['generatedAt', 'workspace', 'session', 'plugin', 'sections'],
+    properties: {
+      generatedAt: { type: 'string', description: 'ISO 8601 timestamp of this snapshot.' },
+      workspace: {
+        type: 'object',
+        additionalProperties: false,
+        required: ['cwd', 'gitBranch'],
+        properties: {
+          cwd: { type: 'string', description: 'Effective working directory, empty when unknown.' },
+          gitBranch: { ...nullableString(), description: 'Checked-out git branch, null when not a repository.' },
+        },
+      },
+      session: {
+        type: 'object',
+        additionalProperties: false,
+        required: ['id', 'model'],
+        properties: {
+          id: { ...nullableString(), description: 'Session identity of the last observed agent.' },
+          model: { ...nullableString(), description: 'Provider-qualified model id, null when unknown.' },
+        },
+      },
+      plugin: {
+        type: 'object',
+        additionalProperties: false,
+        required: ['version', 'gateEnabled', 'toolName', 'command'],
+        properties: {
+          version: { type: 'string' },
+          gateEnabled: { type: 'boolean' },
+          toolName: { type: 'string' },
+          command: { type: 'string' },
+        },
+      },
+      sections: {
+        type: 'array',
+        items: {
+          type: 'object',
+          additionalProperties: false,
+          required: ['title', 'items'],
+          properties: {
+            title: { type: 'string' },
+            items: {
+              type: 'array',
+              items: {
+                type: 'object',
+                additionalProperties: false,
+                required: ['label', 'value'],
+                properties: {
+                  label: { type: 'string' },
+                  value: { type: 'string' },
+                },
+              },
+            },
+          },
+        },
+      },
+    },
+  }
+}
+
+function readService(ctx, key) {
+  try {
+    const service = ctx.get(key)
+    return service === null || typeof service !== 'object' ? null : service
+  } catch {
+    return null
+  }
+}
+
+function readAgentId(agent) {
+  try {
+    return agent !== null && typeof agent === 'object' && typeof agent.id === 'string' && agent.id !== ''
+      ? agent.id
+      : null
+  } catch {
+    return null
+  }
+}
+
+function readModel(ctx) {
+  const selection = readService(ctx, 'agentDefaultModel')
+  if (selection === null) return null
+  try {
+    const current = typeof selection.currentSelection === 'function' ? selection.currentSelection() : null
+    if (current === null || typeof current !== 'object') return null
+    const model = typeof current.model === 'string' ? current.model : ''
+    if (model === '') return null
+    const provider = typeof current.provider === 'string' ? current.provider : ''
+    return provider === '' ? model : provider + '/' + model
+  } catch {
+    return null
+  }
+}
+
+async function readCwd(ctx, agent) {
+  const directory = readService(ctx, 'workingDirectory')
+  if (directory === null) return ''
+  if (agent !== null) {
+    try {
+      const ensured = await directory.ensure(agent)
+      if (typeof ensured === 'string' && ensured !== '') return ensured
+    } catch {
+      /* fall through to the deployment fallback */
+    }
+  }
+  return typeof directory.defaultDirectory === 'string' ? directory.defaultDirectory : ''
+}
+
+async function readGitBranch(cwd) {
+  if (cwd === '') return null
+  try {
+    const head = (await readFile(join(cwd, '.git', 'HEAD'), 'utf8')).trim()
+    const match = /^ref:\s*refs\/heads\/(.+)$/u.exec(head)
+    if (match !== null && typeof match[1] === 'string' && match[1] !== '') return match[1]
+    return /^[0-9a-f]{7,40}$/u.test(head) ? head : null
+  } catch {
+    return null
+  }
+}
+
+function display(value) {
+  return value === null || value === '' ? UNKNOWN : value
+}
+
+function renderSnapshot(value) {
+  const snapshot = value !== null && typeof value === 'object' ? value : {}
+  const generatedAt = typeof snapshot.generatedAt === 'string' ? snapshot.generatedAt : ''
+  const lines = ['DSH 巡检报告 ' + generatedAt]
+  const sections = Array.isArray(snapshot.sections) ? snapshot.sections : []
+  for (const section of sections) {
+    if (section === null || typeof section !== 'object') continue
+    lines.push('## ' + (typeof section.title === 'string' ? section.title : UNKNOWN))
+    const items = Array.isArray(section.items) ? section.items : []
+    for (const item of items) {
+      if (item === null || typeof item !== 'object') continue
+      const label = typeof item.label === 'string' ? item.label : ''
+      const itemValue = typeof item.value === 'string' ? item.value : ''
+      lines.push('- ' + label + ': ' + itemValue)
+    }
+  }
+  return lines.join('\n')
+}
+
+async function buildSnapshot(ctx, state, agent) {
+  const id = readAgentId(agent)
+  const model = readModel(ctx)
+  if (id !== null) state.session.id = id
+  if (model !== null) state.session.model = model
+
+  const cwd = await readCwd(ctx, agent)
+  const gitBranch = await readGitBranch(cwd)
+  const sessionId = state.session.id
+  const sessionModel = state.session.model
+  const gate = state.gateEnabled
+
+  return {
+    generatedAt: new Date().toISOString(),
+    workspace: { cwd, gitBranch },
+    session: { id: sessionId, model: sessionModel },
+    plugin: { version: VERSION, gateEnabled: gate, toolName: TOOL_NAME, command: '/' + COMMAND_NAME },
+    sections: [
+      {
+        title: '工作区',
+        items: [
+          { label: '目录', value: display(cwd) },
+          { label: 'Git 分支', value: display(gitBranch) },
+        ],
+      },
+      {
+        title: '会话',
+        items: [
+          { label: '会话 ID', value: display(sessionId) },
+          { label: '模型', value: display(sessionModel) },
+        ],
+      },
+      {
+        title: '插件',
+        items: [
+          { label: '版本', value: VERSION },
+          { label: '拦截门', value: gate ? '开启' : '关闭' },
+          { label: '工具', value: TOOL_NAME },
+          { label: '命令', value: '/' + COMMAND_NAME },
+        ],
+      },
+    ],
+  }
+}
+
+function collectCommandText(exec) {
+  const args = exec !== null && typeof exec === 'object' ? exec.arguments : null
+  if (args === null || typeof args !== 'object') return ''
+  const parts = []
+  for (const key of COMMAND_ARG_KEYS) {
+    if (!Object.hasOwn(args, key)) continue
+    const value = args[key]
+    if (typeof value === 'string') parts.push(value)
+    else if (Array.isArray(value)) {
+      for (const entry of value) {
+        if (typeof entry === 'string') parts.push(entry)
+      }
+    }
+  }
+  return parts.join('\n').toLowerCase()
+}
+
+// A shutdown only counts in command position: "echo shutdown" and
+// "npm run shutdown-check" are arguments, not a power action.
+function hasShutdownCommand(haystack) {
+  for (const segment of haystack.split(/[\n;&|]+/u)) {
+    const tokens = segment.split(/\s+/u).filter(token => token !== '')
+    let index = 0
+    while (index < tokens.length && ELEVATION_PREFIXES.includes(tokens[index])) index += 1
+    const word = tokens[index]
+    if (word !== undefined && SHUTDOWN_WORD.test(word)) return true
+  }
+  return false
+}
+
+function isDestructive(exec) {
+  const haystack = collectCommandText(exec)
+  if (haystack === '') return false
+  if (hasShutdownCommand(haystack)) return true
+  if (DESTRUCTIVE_PATTERNS.some(pattern => haystack.includes(pattern))) return true
+  const compact = haystack.replace(/\s+/gu, '')
+  return COMPACT_DESTRUCTIVE_PATTERNS.some(pattern => compact.includes(pattern))
+}
+
+async function runCommand(ctx, state, invocation) {
+  const raw = invocation !== null && typeof invocation === 'object' && typeof invocation.rawInput === 'string'
+    ? invocation.rawInput.trim().toLowerCase()
+    : ''
+  if (raw === 'on') {
+    state.gateEnabled = true
+    return { kind: 'success', text: 'showcase 拦截门: 已开启' }
+  }
+  if (raw === 'off') {
+    state.gateEnabled = false
+    return { kind: 'success', text: 'showcase 拦截门: 已关闭' }
+  }
+  if (raw !== '') return { kind: 'success', text: USAGE }
+  const agent = invocation !== null && typeof invocation === 'object' ? invocation.agent ?? null : null
+  return { kind: 'success', text: renderSnapshot(await buildSnapshot(ctx, state, agent)) }
+}
+
+/** @param {import('@deepseek-ai/cordis').Context} ctx */
+export function apply(ctx) {
+  const state = { gateEnabled: true, session: { id: null, model: null } }
+
+  const inspectTool = {
+    name: TOOL_NAME,
+    description: 'Inspect this DSH host and return one snapshot: working directory, git branch, session identity, and the showcase plugin state.',
+    parameters: {
+      type: 'object',
+      additionalProperties: false,
+      properties: {},
+      required: [],
+    },
+    output: {
+      schema: buildSnapshotSchema(),
+      render: (_args, value) => [{ type: 'text', text: renderSnapshot(value) }],
+    },
+    async execute(_args, exec) {
+      const agent = exec !== null && typeof exec === 'object' ? exec.agent ?? null : null
+      return await buildSnapshot(ctx, state, agent)
+    },
+  }
+
+  ctx.effect(() => ctx.tools.register(inspectTool), 'showcase: inspect tool')
+
+  ctx.effect(() => ctx.on('tools/pre-execute', async (exec, next) => {
+    let decision = null
+    try {
+      if (state.gateEnabled && isDestructive(exec)) decision = { kind: 'deny', reason: DENY_REASON }
+    } catch {
+      /* a plugin fault must never block tool calls */
+      decision = null
+    }
+    return decision === null ? next() : decision
+  }), 'showcase: pre-execute gate')
+
+  ctx.effect(() => ctx.commands.register({
+    name: COMMAND_NAME,
+    description: 'Inspect this DSH host. Usage: /showcase [on|off]',
+    input: { hint: '[on|off]' },
+    handler: invocation => runCommand(ctx, state, invocation),
+  }), 'showcase: /showcase command')
+
+  ctx.provide('showcase', {
+    snapshot: () => buildSnapshot(ctx, state, null),
+    gateEnabled: () => state.gateEnabled,
+    setGateEnabled: enabled => { state.gateEnabled = enabled === true },
+  })
+}

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Showcase",
+    "description": "DeepSeek Harness reference plugin: tools, hooks, commands, a settings card and a sidebar panel."
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "功能展示",
+    "description": "DeepSeek Harness 参考插件：工具、钩子、命令、设置卡片与侧栏面板。"
+  }
+}

package/package.json

@@ -1,6 +1,54 @@
 {
   "name": "dsh-plugin-showcase",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "type": "module",
+  "scripts": {
+    "test": "vitest run"
+  },
+  "description": "DeepSeek Harness reference plugin: one tool, one slash command, a settings card and a right-sidebar panel.",
+  "icon": "./icon.svg",
+  "main": "./lib/index.js",
+  "exports": {
+    ".": {
+      "default": "./lib/index.js"
+    },
+    "./client": {
+      "default": "./lib/client.js"
+    },
+    "./locale/*.json": "./locale/*.json",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "locale",
+    "cordis.patch.yml",
+    "icon.svg",
+    "README.md",
+    "README.zh.md",
+    "LICENSE"
+  ],
+  "dsh": {
+    "manifestVersion": 1,
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web"
+    }
+  },
+  "engines": {
+    "node": ">=20",
+    "dsh": ">=0.2.1-rc.2"
+  },
+  "keywords": [
+    "deepseek-harness",
+    "dsh-plugin",
+    "showcase",
+    "example"
+  ],
+  "author": "antonioxue",
+  "license": "MIT",
+  "devDependencies": {
+    "vitest": "^3.2.7"
+  }
+}