dsh-thinking-guard 0.0.0-stage → 0.1.17

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Dawei Fu
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,170 @@
-# Temporary Holding Version
+# dsh-thinking-guard
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+一个 DSH 插件：把**能力目录与按需调用**（Capability Menu 思路）和 **Agent 效率守卫**（重复/循环调用提醒）整合在一起。当前版本 **0.1.15**。
+
+## 它做什么
+
+- `meta_search` 按需查找能力，`meta_invoke` 调用能力；工具与技能按 Resident / On-demand / Disabled 三档分层，Disabled 会在执行入口拒绝调用，不只是隐藏 Schema。
+- Guard 按 Agent / Turn 隔离，用工具签名与 Step 的结果/错误指纹做重复与 A-B 循环检测；只在证据满足门槛时对匹配调用局部拒绝一次，**不停止整个 Turn**。
+- 设置页提供四个页面：总览、防循环、调用统计、能力目录。
+
+## 它不做什么
+
+- 不做工具结果压缩与原文恢复——那是 [dsh-plugin-save-token](https://github.com/YAN3RA/dsh-plugin-save-token) 的职责。
+- 不做模型 / Provider / 完整会话管理——那是 DSH 宿主的职责。
+- 不读取、保存或输出隐藏思维链。
+
+## 安装
+
+一条命令：
+
+```bash
+dsh plugin --profile desktop add dsh-thinking-guard
+```
+
+装完**重启 DSH**。
+
+### 为什么这一条就够
+
+- 包发布在 npm registry，普通版本号即可解析，不需要贴 URL、不需要带哈希。
+- 包内已含构建产物 `lib/`，pnpm 不会跑任何构建脚本，**不需要**在 profile 的 `pnpm-workspace.yaml` 里配 `allowBuilds`。
+- `dsh plugin add` 会在 pnpm 之后多做一次 bundle 协调，把包自动登记进 `dsh.profile.bundles`。**手工改 `package.json` 再 `pnpm install` 不会**，那样装了也不挂载。
+
+### 指定版本 / 升级
+
+```bash
+dsh plugin --profile desktop add dsh-thinking-guard@0.1.16   # 锁定版本
+dsh plugin --profile desktop add dsh-thinking-guard           # 升到最新
+```
+
+### 备用渠道：GitHub Release 附件
+
+npm 不可达时，可用 Release 附件的带哈希 URL：
+
+```bash
+curl -s https://api.github.com/repos/YAN3RA/dsh-thinking-guard/releases/latest \
+  | grep -o 'https://[^"]*\.tgz'
+dsh plugin --profile desktop add '<上一步输出的 URL>'
+```
+
+**为什么附件名必须带哈希**：profile 从附件 URL 安装时，pnpm 按「URL + integrity」缓存。用同名覆盖附件后 pnpm 不会重新下载——`--force`、`store prune`、删 `node_modules` 都无效。附件名带 tarball 自身 SHA-256 前 8 位，内容变了 URL 就变，缓存不可能命中旧内容。
+
+### 不支持的安装来源
+
+| 来源 | 结果 | 原因 |
+|---|---|---|
+| `git+https://…` / `github:owner/repo` | ❌ | 仓库不含 `lib/`，pnpm 需现场跑 `prepare` 构建，而 pnpm 默认拦截 git 依赖的构建脚本 |
+| `link:<本地目录>` | ⚠️ 能装不推荐 | 软链到源码目录，peer 依赖不从目标 `node_modules` 解析 |
+
+
+## 升级
+
+重跑方式一 / 方式二即可。脚本会比对当前 pin 与最新附件：
+
+- 一致 → 只重装同样的字节，`bundles` 不动
+- 不一致 → 打印 `from:` / `to:`，走 `dsh plugin add` 换版本
+
+手动升级就是把方式三第 2 条的 URL 换成新版本的哈希附件再跑一次。
+
+## 卸载
+
+```bash
+dsh plugin --profile desktop remove dsh-thinking-guard
+```
+
+一条命令同时清掉 `dependencies` 与 `dsh.profile.bundles`（已实测）。然后重启 DSH。
+
+插件留下的状态文件（`~/.dsh/capability-menu-policy.json`）不会自动删除。如需彻底清理，确认备份后再手动删除。
+
+## 排错
+
+### 装完看不到插件
+
+先查这一条，它解释了绝大多数情况：
+
+```bash
+node -e "const m=require(process.env.HOME+'/.dsh/profiles/desktop/package.json'); console.log('bundled:', m.dsh.profile.bundles.includes('dsh-thinking-guard'))"
+```
+
+`false` → 当初是手改 JSON + `pnpm install` 装的，包在但没挂载。补跑一次 `dsh plugin add <附件URL>`，或手工把包名加进 `dsh.profile.bundles`，然后重启。
+
+`true` 却仍看不到 → 确认**已重启** DSH；再看 设置 → 插件 是否有加载报错。
+
+### 装进去的还是旧版本
+
+几乎一定是缓存问题。比对安装目录与 Release 附件里的 `lib/client.js` 大小：
+
+```bash
+ls -la ~/.dsh/profiles/desktop/node_modules/dsh-thinking-guard/lib/client.js
+tar -tzvf <下载的 tgz> | grep 'lib/client.js'
+```
+
+不一致说明命中了旧缓存——确认你 pin 的是**带哈希**的附件名。
+
+### `dsh plugin add` 超时 / `fetch failed`
+
+GitHub 附件下载在部分网络下会 `ETIMEDOUT`。先确认代理可用，再重跑：
+
+```powershell
+pwsh -NoProfile -File scripts/install.ps1 -Proxy http://127.0.0.1:7890
+```
+
+或手动设环境变量后重跑方式三：
+
+```bash
+export HTTPS_PROXY=http://127.0.0.1:7890
+export HTTP_PROXY=http://127.0.0.1:7890
+```
+
+注意：**API 与附件下载的可达性可能不一致**。本机实测 `api.github.com` 与 `releases/download/...` 直连可通，但 `github.com/.../releases/latest` 这个 HTML 页会超时——所以脚本只用 API，不抓网页。
+
+### `ERR_PNPM_FETCH_404` / `is not in the npm registry`
+
+用了裸包名。本包不在 npm registry，必须给完整附件 URL。
+
+### `ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED`
+
+用了 git 来源。换 Release 附件，不要去改 `allowBuilds`。
+
+### 提示 DSH 版本不兼容
+
+`dsh plugin add` 会在安装前读包的 manifest，比对它对 DSH 的版本要求（`engines` 与 `peerDependencies`），不匹配就拒绝安装并回滚 manifest 与 lockfile。它会在输出里打印一条
+`dsh plugin --profile desktop allow-version <包@版本> --dsh-version <版本> --accept-risk`。
+**那条命令会跳过兼容检查**，只在确认风险后执行。
+
+### 找不到 DSH runtime / profile
+
+`~/.dsh/profiles/desktop` 与 `~/.dsh/dsh-runtimes/` 都是 DSH 首次启动才生成的。先正常启动一次 DSH。
+
+### 想看 pnpm 到底报了什么
+
+`dsh plugin` 把完整 pnpm 输出写到 profile 下的日志目录：
+
+```bash
+ls -t ~/.dsh/profiles/desktop/.plugin-manager/logs | head
+```
+
+## 配置
+
+默认 Guard 模式为 `normal`。当前 Step、Tool 次数、Duration 阈值只保留配置校验和计数，不触发软提醒或硬停止。`stepLimitMode: hard-stop` 会归一为 `warn-only`，`duplicateHardBlock: true` 会归一为 `false`，启动时分别记录弃用提示。开启 `duplicateDetection` 时，连续重复的第 3/5/8 次与有证据的 A-B 循环会提醒；只有相同操作及结果/错误指纹满足策略门槛后，才会通过 `tools.guard` 对匹配调用局部拒绝一次，不停止整个 Turn。配置位于插件 root entry 的 `config.guard`，状态按 Agent / Turn 隔离。
+
+## 文档入口
+
+本文件就是代码仓的 README（工作区里位于 `01_Source_Code/README.md`）。其余文档在**工作区根**，不随仓库发布：
+
+| 想做的事 | 去哪 |
+|---|---|
+| 找任意文档 | 根目录 `PROJECT_INDEX.md` |
+| 看现在做到哪 / 接手 | 根目录 `HANDOFF.md` |
+| 长期规则与开发规范 | 根目录 `AGENTS.md` |
+| 查架构与模块方案 | 见项目层 `02_Design/` 下的方案文档（不在本仓库内） |
+| 查历史与归档 | 根目录 `04_Docs/02_history/README.md` |
+
+## 目录约定
+
+- 本目录是**唯一代码仓**（独立 git，远端 `YAN3RA/dsh-thinking-guard`）。
+- 仓库只发布**源码 + 测试 + 本 README**。`AGENTS.md` / `PROJECT_INDEX.md` / `HANDOFF.md` 与 `docs/` 均为本地保留，不提交。
+
+## 来源与许可
+
+本项目基于 Capability Menu 实现，并按 Apache License 2.0 发布。详见 [LICENSE](LICENSE)。

package/cordis.patch.yml

@@ -0,0 +1,110 @@
+# dsh-capability-menu aggregate bundle patch: mounts the meta plugins in one
+# layer, from a single installable package.
+#
+# One package, five plugin entries — four mount a subpath of
+# `dsh-thinking-guard` (the loader resolves package subpath exports; see
+# `@deepseek-ai/dsh-web-app/startup` for the same pattern in the harness), and
+# the root entry loads the package main to mount the browser-facing gateway
+# (and thereby registers the package itself as a `dsh.client` loader entry):
+#
+#   - id: capability-menu-registry
+#     name: 'dsh-thinking-guard/registry'
+#   - id: capability-menu-search
+#     name: 'dsh-thinking-guard/search'
+#   - id: capability-menu-invoke
+#     name: 'dsh-thinking-guard/invoke'
+#   - id: capability-menu-policy
+#     name: 'dsh-thinking-guard/policy'
+#       config:
+#         # Rule syntax — tier keys `resident` / `on-demand` / `disabled`
+#         # (exact names, `*` globs, or `server:<name>:*`), plus `metaTools` —
+#         # and the priority order are documented in the README「配置」
+#         # section; the shipped defaults live in the insert block below.
+#
+# - `capability-menu-registry` (P0): builds/indexes the capability catalog and
+#   exposes the `ctx.capability` service (search/get/getDetail/refresh). It registers
+#   no model-facing tool itself. Indexes every visible tool — MCP tools by their
+#   server and harness-native tools (bash/read/write/…) under the reserved
+#   `built-in` pseudo-server — plus skills from the global layer and every
+#   mountable preset's standing scope. `meta_search` searches this live index.
+# - `capability-menu-search` (P1): registers the `meta_search` tool (list + detail).
+# - `capability-menu-invoke` (P2): registers the `meta_invoke` tool (unified
+#   execution of tools — MCP or native — and skill loading). Executes in the
+#   caller's agent view so On-demand tools stay runnable without bypassing scope
+#   restrictions; dedups already-loaded skills. Rejects Disabled capabilities.
+# - `capability-menu-policy` (P3): Resident/On-demand/Disabled projection
+#   strategy + 能力菜单 surface. Reads explicit resident/on-demand/disabled
+#   rules (exact name + glob + server:<name>:*) and filters `assembly.tools` and
+#   web guidance sections at `system-prompt/assemble`. The execution chain
+#   (`ctx.tools.execute`) is untouched, so On-demand capabilities remain executable
+#   via `meta_invoke`. Exposes `ctx.capabilityPolicy` to the 能力菜单 tab through
+#   the Typert gateway: the tier surface (`classifyAll`/`getConfig`/
+#   `updateConfig`), the registered-location surface (`listLocations`/`addLocation`/
+#   `updateLocation`/`removeLocation` and `listSkillLocations`/`addSkillLocation`/
+#   `updateSkillLocation`/`removeSkillLocation`/`adoptSkillLocation`), the
+#   read-only rules and search summaries (`getCatalogDocs`), a rebuild trigger (`refresh`), and
+#   skill browsing (`getDetail`/`listSkillDir`/`readSkillFile`). Tier clicks land
+#   in the plugin's state file after `persistDebounceMs`; search settings share
+#   that file. Registered MCP servers land in `patchFile`, and skill directories
+#   live under `skillsDir`.
+#
+# Default (policy present but no config): every capability is Resident — the
+# `classify` fallback, nothing is hidden. Add explicit `on-demand`/`disabled`
+# rules to pull capabilities out of the model surface.
+# The web surface disables the host skill filesystem provider by default, but
+# this plugin's global Skill registration writes to its standard ~/.dsh/skills
+# root. Re-enable the native provider so registered skills are indexed and
+# available through ctx.skills; no upstream source or skill implementation is
+# replaced.
+- id: skill-filesystem
+  disabled: false
+- insert:
+    - id: capability-menu-registry
+      name: 'dsh-thinking-guard/registry'
+    - id: capability-menu-search
+      name: 'dsh-thinking-guard/search'
+    - id: capability-menu-invoke
+      name: 'dsh-thinking-guard/invoke'
+    - id: capability-menu-policy
+      name: 'dsh-thinking-guard/policy'
+      config:
+        # Native coding tools are cataloged under the reserved `built-in`
+        # pseudo-server and are fully manageable like MCP tools. Unlisted
+        # capabilities default to Resident; list them under `on-demand`/
+        # `disabled` to pull MCP servers, native tools, or skills out of the
+        # model surface. On-demand native tools stay invocable through
+        # `meta_search` → `meta_invoke`. The `meta_search`/`meta_invoke`
+        # control-plane tools and the reserved `run_code` transport never enter
+        # the catalog. Do not name a real MCP server `built-in`.
+        tools:
+          resident:
+            - bash
+            - read
+            - write
+            - edit
+            - read_image
+            - glob
+            - grep
+    # Root entry: loads the package main, which mounts the Typert gateway that
+    # exposes ctx.capabilityPolicy to the browser. Makes this package a loader
+    # entry itself so @deepseek-ai/dsh-client-modules discovers its `dsh.client`
+    # declaration and serves the 能力菜单 browser bundle (`./client`).
+    - id: thinking-guard
+      name: 'dsh-thinking-guard'
+      config:
+        guard:
+          enabled: true
+          profile: normal
+          stepLimitMode: warn-only
+          duplicateDetection: true
+          duplicateWarnAfter: 2
+          duplicateHardBlock: false
+          hostIntegration:
+            enabled: true
+            provider: pi-desktop
+            preferHostTokenSaver: true
+            preferHostPromptCache: true
+            # Deprecated: compatibility-only fields; no convergence steer or next-step rejection.
+            maxConvergenceSteersPerTurn: 1
+            maxNoProgressCycles: 2
+            loopBreakMode: stop-next-step