dsh-xray 0.10.1 → 0.10.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/{README.zh.md → docs/README.zh.md} +15 -15
- package/package.json +2 -3
package/README.md
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
<p align="center">
|
|
2
|
-
<img src="
|
|
2
|
+
<img src="../assets/hero.svg" width="100%" alt="dsh-xray — 给你的 DeepSeek Harness 拍 X 光">
|
|
3
3
|
</p>
|
|
4
4
|
|
|
5
5
|
<p align="center">
|
|
@@ -17,14 +17,14 @@
|
|
|
17
17
|
</p>
|
|
18
18
|
|
|
19
19
|
<p align="center">
|
|
20
|
-
<a href="
|
|
20
|
+
<a href="../README.md">English</a>
|
|
21
21
|
</p>
|
|
22
22
|
|
|
23
23
|
---
|
|
24
24
|
|
|
25
25
|
你挂载的每个插件都在悄悄向每次 LLM 请求收费:prompt sections、工具 schema、token。dsh-xray 以 **与 Chat / Trajectory 并列的 X 光标签页** 长在你运行中的 harness 里,把这份账单逐项摊开——按插件、按条目,直到具体到每一个字:
|
|
26
26
|
|
|
27
|
-
|
|
28
28
|
|
|
29
29
|
展开插件看它注册了什么;点击任何条目,读它注入每次请求的原文:
|
|
30
30
|
|
|
@@ -32,12 +32,12 @@
|
|
|
32
32
|
<tr>
|
|
33
33
|
<td width="50%">
|
|
34
34
|
|
|
35
|
-
|
|
36
36
|
|
|
37
37
|
</td>
|
|
38
38
|
<td width="50%">
|
|
39
39
|
|
|
40
|
-
|
|
41
41
|
|
|
42
42
|
</td>
|
|
43
43
|
</tr>
|
|
@@ -56,7 +56,7 @@
|
|
|
56
56
|
---
|
|
57
57
|
|
|
58
58
|
<p align="center">
|
|
59
|
-
<img src="
|
|
59
|
+
<img src="../assets/section-context-tax.svg" width="100%" alt="上下文税">
|
|
60
60
|
</p>
|
|
61
61
|
|
|
62
62
|
cost 视图回答一个别的工具都不问的问题:**这段上下文是谁放进来的、花掉我多少?**
|
|
@@ -73,7 +73,7 @@ cost 视图回答一个别的工具都不问的问题:**这段上下文是谁放
|
|
|
73
73
|
---
|
|
74
74
|
|
|
75
75
|
<p align="center">
|
|
76
|
-
<img src="
|
|
76
|
+
<img src="../assets/section-cli.svg" width="100%" alt="CLI 命令">
|
|
77
77
|
</p>
|
|
78
78
|
|
|
79
79
|
```sh
|
|
@@ -88,14 +88,14 @@ npx dsh-xray shadow # 被多个插件同时提供的服务
|
|
|
88
88
|
npx dsh-xray audit # 对 out-of-tree 插件做敏感触点静态扫描
|
|
89
89
|
```
|
|
90
90
|
|
|
91
|
-
|
|
92
92
|
|
|
93
93
|
`attribute`、`conflicts`、`snapshot` 是纯静态的——dsh 起不来时照样能跑。所有命令支持 `--profile <name>`(默认 `web`)和 `--json`;`diff` 与 `health` 在漂移/不健康时退出码 `1`,可直接进 CI。
|
|
94
94
|
|
|
95
95
|
---
|
|
96
96
|
|
|
97
97
|
<p align="center">
|
|
98
|
-
<img src="
|
|
98
|
+
<img src="../assets/section-features.svg" width="100%" alt="能力">
|
|
99
99
|
</p>
|
|
100
100
|
|
|
101
101
|
<table>
|
|
@@ -136,7 +136,7 @@ npx dsh-xray audit # 对 out-of-tree 插件做敏感触点静态扫描
|
|
|
136
136
|
---
|
|
137
137
|
|
|
138
138
|
<p align="center">
|
|
139
|
-
<img src="
|
|
139
|
+
<img src="../assets/section-agent.svg" width="100%" alt="Agent 工具">
|
|
140
140
|
</p>
|
|
141
141
|
|
|
142
142
|
挂载进树后,dsh-xray 注册 `xray_composition` 工具(`view: summary | deps | health | cost | shadow`),agent 可以自答:
|
|
@@ -148,7 +148,7 @@ npx dsh-xray audit # 对 out-of-tree 插件做敏感触点静态扫描
|
|
|
148
148
|
---
|
|
149
149
|
|
|
150
150
|
<p align="center">
|
|
151
|
-
<img src="
|
|
151
|
+
<img src="../assets/section-safety.svg" width="100%" alt="安全立场">
|
|
152
152
|
</p>
|
|
153
153
|
|
|
154
154
|
**dsh-xray 只读,不执行。**
|
|
@@ -157,12 +157,12 @@ npx dsh-xray audit # 对 out-of-tree 插件做敏感触点静态扫描
|
|
|
157
157
|
- CLI **从不执行**插件代码(`audit` 是对源码文本的模式扫描)
|
|
158
158
|
- 挂载的插件只写 `$DSH_HOME/xray/` 目录——条目原文实时返回,**绝不落盘**
|
|
159
159
|
- entry 端点只返回组合层文本,**绝不返回会话消息**
|
|
160
|
-
- 详见 [SECURITY.md](
|
|
160
|
+
- 详见 [SECURITY.md](../SECURITY.md)
|
|
161
161
|
|
|
162
162
|
---
|
|
163
163
|
|
|
164
164
|
<p align="center">
|
|
165
|
-
<img src="
|
|
165
|
+
<img src="../assets/section-install.svg" width="100%" alt="安装">
|
|
166
166
|
</p>
|
|
167
167
|
|
|
168
168
|
两种用法,彼此独立:
|
|
@@ -201,7 +201,7 @@ npx dsh-xray health # 读取运行时快照
|
|
|
201
201
|
---
|
|
202
202
|
|
|
203
203
|
<p align="center">
|
|
204
|
-
<img src="
|
|
204
|
+
<img src="../assets/section-capabilities.svg" width="100%" alt="能力总表">
|
|
205
205
|
</p>
|
|
206
206
|
|
|
207
207
|
对运行中组合树的诊断成像——与 [dsh-doctor](https://www.npmjs.com/package/dsh-doctor)(救援与恢复)互补。
|
|
@@ -225,4 +225,4 @@ npx dsh-xray health # 读取运行时快照
|
|
|
225
225
|
|
|
226
226
|
## 许可
|
|
227
227
|
|
|
228
|
-
[MIT](
|
|
228
|
+
[MIT](../LICENSE)
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "dsh-xray",
|
|
3
|
-
"version": "0.10.
|
|
4
|
-
"description": "X-ray for your DeepSeek Harness —
|
|
3
|
+
"version": "0.10.2",
|
|
4
|
+
"description": "X-ray for your DeepSeek Harness — diagnostics for what's actually loaded, why, and what it costs: per-plugin context-tax attribution, per-request token ledger, skill catalog pricing, dependency cascades.",
|
|
5
5
|
"repository": {
|
|
6
6
|
"type": "git",
|
|
7
7
|
"url": "git+https://github.com/alloevil/dsh-xray.git"
|
|
@@ -24,7 +24,6 @@
|
|
|
24
24
|
"bin",
|
|
25
25
|
"cordis.patch.yml",
|
|
26
26
|
"README.md",
|
|
27
|
-
"README.zh.md",
|
|
28
27
|
"docs",
|
|
29
28
|
"assets"
|
|
30
29
|
],
|