dsh-x-core 0.1.22 → 0.1.23

package/desktop.js

@@ -0,0 +1,200 @@
+/**
+ * 插件桌面 API（/api/desktop/*）的请求校验。
+ *
+ * 插件跑在 dsh 子进程里，拿不到 Electron；能力走本机 HTTP：插件 → 管理服务 → 外壳的
+ * host.desktop（见 shell/main.mjs）。这个文件只决定「什么请求能过去、长度上限多少」，
+ * 真正执行 Notification / dialog / clipboard 的代码在外壳里。
+ *
+ * 不许 import Electron，也不许 import shell/：核心和外壳是分开更新的两层，核心目录
+ * （resources/core 或用户目录 core/current）里没有 shell/，外壳目录里也没有核心模块。
+ * 外壳侧另有 shell/desktop.mjs 做它自己的门控（通知开关、节流、Electron 对话框选项）。
+ */
+import { isAbsolute } from 'node:path'
+
+/** 协议版本：插件可以按 GET /api/desktop 的 api 字段决定用哪套接口。 */
+export const DESKTOP_API_VERSION = 1
+
+/** 外壳能做的事。没有 Electron 外壳时 GET 会返回空数组。 */
+export const DESKTOP_CAPABILITIES = Object.freeze(['notify', 'open', 'reveal', 'clipboard', 'dialog'])
+
+/**
+ * 请求上限。通知是给人看的，不是日志通道；剪贴板也不该被拿来做文件传输。
+ * 数字写在这里而不是外壳里：校验发生在核心，外壳按拿到的干净数据执行。
+ */
+export const DESKTOP_LIMITS = Object.freeze({
+  title: 120,
+  body: 800,
+  url: 2048,
+  text: 100_000,
+  path: 4096,
+  filters: 8,
+  extensions: 10,
+  filterName: 60,
+  buttons: 4,
+  button: 40,
+  message: 500,
+  detail: 2000,
+})
+
+/** 单行文本：控制字符变空格，连续空白压成一个，别让标题把通知撑成两行。 */
+function oneLine(value, max) {
+  return String(value ?? '')
+    .replace(/[\u0000-\u001f\u007f]+/g, ' ')
+    .replace(/\s+/g, ' ')
+    .trim()
+    .slice(0, max)
+}
+
+/** 多行文本：保留换行与制表，掉其余控制字符（通知正文可以有多段）。 */
+function multiLine(value, max) {
+  return String(value ?? '')
+    .replace(/\r\n?/g, '\n')
+    .replace(/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/g, '')
+    .trim()
+    .slice(0, max)
+}
+
+/** 路径文本：只去控制字符和首尾空白，不压空格——路径里的空格是内容，不是格式。 */
+function pathText(value, max = DESKTOP_LIMITS.path) {
+  return String(value ?? '')
+    .replace(/[\u0000-\u001f\u007f]/g, '')
+    .trim()
+    .slice(0, max)
+}
+
+/** 只认 http(s)：`file:` / `javascript:` / `data:` 都不能进系统浏览器或标签页。 */
+function httpUrl(value) {
+  const text = String(value ?? '').trim()
+  if (!text || text.length > DESKTOP_LIMITS.url) return ''
+  try {
+    const url = new URL(text)
+    return url.protocol === 'http:' || url.protocol === 'https:' ? url.href : ''
+  } catch {
+    return ''
+  }
+}
+
+/** Electron 对话框的筛选器：扩展名不带点、只留字母数字和 `*`（全部文件）。 */
+function fileFilters(value) {
+  if (!Array.isArray(value)) return []
+  const filters = []
+  for (const item of value.slice(0, DESKTOP_LIMITS.filters)) {
+    if (!item || typeof item !== 'object') continue
+    const extensions = (Array.isArray(item.extensions) ? item.extensions : [])
+      .slice(0, DESKTOP_LIMITS.extensions)
+      .map((ext) => String(ext ?? '').trim().replace(/^\./, '').toLowerCase())
+      .filter((ext) => /^[a-z0-9*]+$/.test(ext))
+    if (!extensions.length) continue
+    filters.push({ name: oneLine(item.name, DESKTOP_LIMITS.filterName) || extensions.join('、'), extensions })
+  }
+  return filters
+}
+
+/** 按钮/默认项的下标：越界或非整数就退回给定的默认值。 */
+function boundedIndex(value, length, fallback) {
+  const index = Number(value)
+  return Number.isInteger(index) && index >= 0 && index < length ? index : fallback
+}
+
+function parseNotify(input) {
+  const title = oneLine(input.title, DESKTOP_LIMITS.title)
+  const body = multiLine(input.body, DESKTOP_LIMITS.body)
+  if (!title && !body) throw new Error('通知要有标题或内容')
+  const rawUrl = String(input.url ?? '').trim()
+  const url = rawUrl ? httpUrl(rawUrl) : ''
+  if (rawUrl && !url) throw new Error('通知的点击地址必须是 http(s) 链接')
+  return {
+    action: 'notify',
+    title: title || 'DSH-X',
+    body,
+    // 插件只能把通知关小声，不能打开用户关掉的提示音；最终静音与否由外壳按设置决定。
+    silent: input.silent === true,
+    url,
+  }
+}
+
+function parseOpen(input) {
+  const url = httpUrl(input.url)
+  if (!url) throw new Error('只能打开 http(s) 链接')
+  return { action: 'open', url }
+}
+
+function parseReveal(input) {
+  const path = pathText(input.path)
+  if (!path) throw new Error('要给一个路径')
+  if (!isAbsolute(path)) throw new Error('路径必须是绝对路径')
+  return { action: 'reveal', path }
+}
+
+function parseClipboard(input) {
+  if (typeof input.text !== 'string') throw new Error('text 必须是字符串')
+  if (input.text.length > DESKTOP_LIMITS.text) throw new Error(`剪贴板内容超过 ${DESKTOP_LIMITS.text} 个字符`)
+  return { action: 'clipboard', text: input.text }
+}
+
+const MESSAGE_TYPES = new Set(['none', 'info', 'warning', 'error', 'question'])
+
+/**
+ * 文件/消息对话框。三种 kind 共用一条路由：插件的用法只有「选 / 存 / 问」三种，
+ * 拆成三条只会让客户端多写两个分支。
+ */
+function parseDialog(input) {
+  const kind = String(input.kind ?? '')
+  if (kind !== 'open' && kind !== 'save' && kind !== 'message') throw new Error('kind 只能是 open / save / message')
+  if (kind === 'message') {
+    const message = multiLine(input.message, DESKTOP_LIMITS.message)
+    if (!message) throw new Error('对话框要有 message')
+    const buttons = (Array.isArray(input.buttons) ? input.buttons : [])
+      .slice(0, DESKTOP_LIMITS.buttons)
+      .map((label) => oneLine(label, DESKTOP_LIMITS.button))
+      .filter(Boolean)
+    const options = {
+      type: MESSAGE_TYPES.has(input.type) ? input.type : 'info',
+      message,
+      detail: multiLine(input.detail, DESKTOP_LIMITS.detail),
+      buttons,
+    }
+    if (buttons.length) {
+      options.defaultId = boundedIndex(input.defaultId, buttons.length, 0)
+      options.cancelId = boundedIndex(input.cancelId, buttons.length, buttons.length - 1)
+    }
+    return { action: 'dialog', kind: 'message', options }
+  }
+
+  const options = {}
+  const title = oneLine(input.title, DESKTOP_LIMITS.title)
+  if (title) options.title = title
+  // 保存对话框的 defaultPath 可以只是个文件名，所以这里不要求绝对路径。
+  const defaultPath = pathText(input.defaultPath)
+  if (defaultPath) options.defaultPath = defaultPath
+
+  if (kind === 'open') {
+    const directory = input.directory === true
+    const properties = [directory ? 'openDirectory' : 'openFile']
+    if (input.multiple === true) properties.push('multiSelections')
+    options.properties = properties
+  }
+  // 目录选择不吃筛选器；Electron 传了也会忽略，干脆不传。
+  const filters = fileFilters(input.filters)
+  if (filters.length && !(kind === 'open' && input.directory === true)) options.filters = filters
+  return { action: 'dialog', kind, options }
+}
+
+const PARSERS = {
+  notify: parseNotify,
+  open: parseOpen,
+  reveal: parseReveal,
+  clipboard: parseClipboard,
+  dialog: parseDialog,
+}
+
+/**
+ * 路由里的 action + JSON 正文 → 给外壳的干净请求；不认识的 action 返回 null。
+ * 校验失败直接抛（路由转 400），错误文案是给插件作者看的。
+ */
+export function parseDesktopRequest(action, input) {
+  const parser = PARSERS[String(action ?? '')]
+  if (!parser) return null
+  const body = input && typeof input === 'object' && !Array.isArray(input) ? input : {}
+  return parser(body)
+}

package/native-notify.js

@@ -0,0 +1,74 @@
+/**
+ * 原生通知总开关：设置里的「任务通知」同时管 `dsh-x-desktop-notify` 的 loader 行。
+ *
+ * 外壳本来就按这个开关拦截 `/api/desktop/notify`；这里再把插件行一并停掉，让「关」
+ * 变成插件不再监听会话事件，而不只是通知被外壳丢掉。开 = 删掉禁用块，关 = 写禁用块。
+ * 不卸载包、不动依赖和别的插件开关。
+ *
+ * 只管装了下面两个包之一的环境：单体插件（dsh-x-desktop-notify）或桌面组
+ * （dsh-x-desktop-bundle）。没装的环境不会被写上过期覆盖，以后装组也不会一上来就是停用。
+ */
+import { existsSync, readdirSync, readFileSync } from 'node:fs'
+import { join } from 'node:path'
+import { disableRowId, enableRowId } from './plugins.js'
+
+/** 原生通知的 loader 行 id：插件自己的 patch 与桌面组 patch 用的是同一个 id。 */
+export const NATIVE_NOTIFY_ROW_ID = 'x-desktop-notify'
+
+/** 装了其中任意一个包的环境才归这个开关管。 */
+export const NATIVE_NOTIFY_PACKAGES = Object.freeze(['dsh-x-desktop-notify', 'dsh-x-desktop-bundle'])
+
+/**
+ * 这个 profile 装没装原生通知（单体或组）。
+ * @param {object} manifest - profile 的 package.json 内容。
+ * @returns {boolean} 装了为 true。
+ */
+export function profileHasNativeNotify(manifest) {
+  const dependencies = manifest?.dependencies && typeof manifest.dependencies === 'object' ? manifest.dependencies : {}
+  return NATIVE_NOTIFY_PACKAGES.some((name) => Object.hasOwn(dependencies, name))
+}
+
+/**
+ * 把原生通知开关落到一个 DSH_HOME 下的所有 profile。
+ *
+ * 单个环境读不动或补丁层写不进去（不是合法条目数组）只记失败，不影响其它环境——
+ * 开关是全局动作，不能因为一个坏环境就一个都关不掉。
+ *
+ * @param {string} home - DSH_HOME。
+ * @param {boolean} enabled - true 恢复插件行；false 停用。
+ * @returns {{ home: string, changed: number, profiles: string[], failed: { profile: string, error: string }[] }} 改动结果。
+ */
+export function applyNativeNotify(home, enabled) {
+  const result = { home, changed: 0, profiles: [], failed: [] }
+  const dir = join(home, 'profiles')
+  let names = []
+  try {
+    names = readdirSync(dir, { withFileTypes: true })
+      .filter((entry) => entry.isDirectory() && !entry.name.startsWith('.') && entry.name !== 'node_modules')
+      .map((entry) => entry.name)
+  } catch {
+    return result
+  }
+  for (const name of names) {
+    const profileDir = join(dir, name)
+    const file = join(profileDir, 'package.json')
+    if (!existsSync(file)) continue
+    let manifest
+    try {
+      manifest = JSON.parse(readFileSync(file, 'utf8'))
+    } catch {
+      continue
+    }
+    if (!profileHasNativeNotify(manifest)) continue
+    try {
+      const outcome = enabled ? enableRowId(profileDir, NATIVE_NOTIFY_ROW_ID) : disableRowId(profileDir, NATIVE_NOTIFY_ROW_ID)
+      if (outcome.changed) {
+        result.changed += 1
+        result.profiles.push(name)
+      }
+    } catch (error) {
+      result.failed.push({ profile: name, error: error instanceof Error ? error.message : String(error) })
+    }
+  }
+  return result
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-x-core",
   "productName": "DSH",
-  "version": "0.1.22",
+  "version": "0.1.23",
   "private": false,
   "type": "module",
   "main": "server.js",

package/packs/dsh-x-workbench/README.md

@@ -0,0 +1,61 @@
+# DSH-X 桌面工作台
+
+DSH-X 的第二套整合包：**把 [dsh-tauri 桌面版](https://github.com/dsh-tauri/deepseek-harness-desktop) 最常用的几项能力，在纯 dsh 生态里凑齐；再把 [ZCode](https://github.com/zai-org/ZCode) 的两份通用技能带过来。** 装它 = 得到一个独立 profile（默认名 `workbench`），和现有环境互不打扰。
+
+> 为什么不是直接装 dsh-tauri 的插件：dsh-tauri 的 12 个内置插件都声明了 `external: ["dsh-tauri/client"]`，依赖 Tauri 宿主桥，在纯 dsh（包括 DSH-X 的 Electron 壳）里加载不到模块。所以这里选的是生态里同能力的独立插件，不是移植。
+
+## 里面有什么
+
+### 插件（装进 `workbench`，可在插件页单独开关）
+
+| 插件 | 干什么 | 对应 dsh-tauri 的 |
+|---|---|---|
+| [`dsh-better-sidebar`](https://github.com/omdsh-dev/DSH-better-sidebar) | 右侧栏完整工作台：懒加载文件树（Git 状态着色、目录监听、全局搜索、拖拽上传）、CodeMirror 编辑器、终端、Source Control（暂存/提交/提交图）、本会话 AI 改动透镜、子代理 | 可选预设 DSH Better Sidebar |
+| [`@cerbur/clutch-dsh-worktree`](https://github.com/Cerbur/clutch-dsh) | 按 Workspace → Worktree → Session 分组的 Git 工作树视图；工作树关系存 Host 自有文件，不改 dsh 的会话元数据 | `dsh-tauri-worktree` |
+| [`dsh-plugin-cron-scheduler`](https://github.com/LittleBlackTong/dsh-plugin-cron) | 定时任务：cron 表达式或侧栏表单建任务，到点向新建/固定会话注入一条 user 消息触发完整 agent 轮次；有执行历史、手动运行、并发与错过不补跑保护 | `dsh-tauri-scheduler` |
+| [`dsh-archived-conversations`](https://github.com/AKS1st/dsh-archived-conversations) | 设置页里的「已归档对话」列表与只读预览（最近 6 条消息）。dsh 目前没有取消归档 API，所以只读、不恢复 | `dsh-tauri-archive` |
+| [`dsh-plugin-notify-sounds`](https://github.com/BillCx330/dsh-plugin-notify-sounds) | 需要你决策或任务完成时的提示音 + 系统通知（点通知跳回窗口），任务栏标题标记「等待你 / 已完成」，看过就安静 | `dsh-tauri-notification` |
+
+### 技能（写到 `~/.dsh/skills`，所有 profile 共用）
+
+| 技能 | 干什么 | 来源 |
+|---|---|---|
+| `agent-browser` | 浏览器自动化 CLI：导航、填表、点击、截图、抓数据、测 Web 应用；模型按 `agent-browser` 命令驱动 | ZCode 收录自 vercel-labs/agent-browser（Apache-2.0） |
+| `electron` | 通过 Chrome DevTools Protocol 驱动 Electron 应用（VS Code、Slack 等）；对 DSH-X 自己的 Electron 壳同样适用 | 同上（ZCode 的 `electron` 技能） |
+
+`agent-browser` / `electron` 需要本机有 CLI：`npm i -g agent-browser`、`brew install agent-browser` 或 `cargo install agent-browser`，也可以直接 `npx agent-browser`。技能目录里附了完整参考文档和脚本模板，模型按需读，不会一次性灌进上下文。
+
+## 和「DSH-X 推荐整合包」的区别
+
+- 推荐包管的是**环境**：配置备份/迁移、记忆、同步、装饰。
+- 这个包管的是**干活**：编辑与 Git、工作树、定时任务、归档、通知，外加浏览器/Electron 自动化技能。
+- 两者装到不同 profile 可以并存；技能同名时后装的覆盖先装的（安装前会备份）。
+
+## 怎么装
+
+三种方式，任选：
+
+1. **本地文件**：把 `.dspack` 拖进插件页的「整合包」区（或点安装选文件）。
+2. **直链**：填这个包的下载地址。
+3. **GitHub 仓库**：填 `owner/repo`（取最新 Release 里的 `.dspack`）。
+
+装之前会把「要装什么、要改哪些文件、什么不会装」列给你看，确认了才动手；装失败自动回滚。装完在插件页切到 `workbench`、重启 dsh 生效；技能在「技能」页能看到，改完不用重启。
+
+## 需要什么
+
+- dsh `>= 0.2.1-rc.1 < 0.3.0`（`dsh-better-sidebar` 从这个版本起支持）。
+- Windows / macOS / Linux；`better-sidebar` 的终端用 dsh 自带的能力，不需要额外 shell 配置。
+- 浏览器/Electron 自动化要另装 `agent-browser` CLI，Electron 应用启动时要带 `--remote-debugging-port`。
+- 定时任务按 dsh 进程存活计时：进程关着的时间段不补跑。
+
+## 许可与出处
+
+- 整合包本身 MIT。
+- `agent-browser`、`electron` 技能：Copyright 2025 Vercel Inc.，Apache-2.0；本副本取自 zai-org/ZCode（Apache-2.0，commit `3c5b227649371507ddc4eb46ac5133afe6db1cab`）。DSH-X 原样收录未修改，每个技能目录里附了 `NOTICE.md` 与许可全文。
+- 五个插件各自许可见对应 npm 包。
+
+## 自己打包
+
+```sh
+node scripts/make-pack.mjs packs/dsh-x-workbench     # 产出 release/packs/dsh-x-workbench-1.0.0.dspack
+```

package/packs/dsh-x-workbench/dspack.json

@@ -0,0 +1,4 @@
+{
+  "format": "dspack",
+  "version": 3
+}

package/packs/dsh-x-workbench/home/skills/agent-browser/LICENSE-APACHE-2.0.txt

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Z.AI Co., Ltd
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/packs/dsh-x-workbench/home/skills/agent-browser/NOTICE.md

@@ -0,0 +1,6 @@
+# 出处与许可
+
+- 上游：vercel-labs/agent-browser（`skills/agent-browser/SKILL.md`），Copyright 2025 Vercel Inc.，Apache-2.0。
+- 本副本取自 zai-org/ZCode 的 `.agents/skills/agent-browser`（commit `3c5b227649371507ddc4eb46ac5133afe6db1cab`，Apache-2.0）；ZCode 侧对内容做过本地集成、格式与适配调整。
+- DSH-X 原样收录，未再修改；许可全文见同目录 `LICENSE-APACHE-2.0.txt`。
+- 使用时需要本机有 `agent-browser` CLI（`npm i -g agent-browser`、`brew install agent-browser` 或 `cargo install agent-browser`），或用 `npx agent-browser`。