Legacy fork v2 dsh plugin

.env.example

@@ -12,6 +12,11 @@ ANTHROPIC_API_KEY=
 OPEN_ROUTER_API_KEY=
 XAI_API_KEY=
 
+# Custom endpoints: every node in config/artemis.jsonc (default/nodes/presets)
+# accepts "api_base", "api_key" and "api_key_env". Priority:
+#   config api_base > OPENAI_BASE_URL below > provider official endpoint
+# OPENAI_BASE_URL=http://127.0.0.1:1234/v1
+
 # Google Cloud Vision OCR (Optional - for advanced OCR processing)
 OCR_API_KEY=
 

.gitattributes

@@ -0,0 +1,18 @@
+# Line endings are a repository fact, not a per-machine default. Without this file the
+# working tree depends on each clone's core.autocrlf, so byte-based checks disagree
+# across machines (changelogs #45 measured it, #47 closes it).
+* text=auto eol=lf
+
+# cmd.exe has a known failure surface with LF batch files (labels / goto).
+*.bat text eol=crlf
+*.cmd text eol=crlf
+
+# No EOL conversion, no diff.
+*.png binary
+*.jpg binary
+*.ico binary
+*.gif binary
+*.mp4 binary
+*.mp3 binary
+*.apk binary
+*.keystore binary

.github/workflows/ci.yml

@@ -30,10 +30,10 @@
 
     steps:
       - name: Check out repository
         uses: actions/checkout@v4
 
       - name: Set up Python 3.12
         uses: actions/setup-python@v5
         with:
           python-version: "3.12"
 
@@ -41,7 +41,7 @@
         run: python scripts/check_dependency_sources.py
 
       - name: Set up uv
         uses: astral-sh/setup-uv@v6
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
@@ -55,12 +55,66 @@
       - name: Lint Python
         run: uv run ruff check .
 
+      # Kept un-gated on purpose: these are the mechanical keepers of the "one derived
+      # fact, one authority" rule (changelogs #31, #45) and must run on every event that
+      # produces a run. They finally did: run 38296414103 (event: push, 2026-10-12) executed
+      # this step on both OSes and it passed - which is what closed the "never observed in a
+      # run" blank left by #46 (changelogs #67).
+      - name: Check documentation gates
+        run: |
+          uv run python -X utf8 scripts/check_doc_registry.py
+          uv run python -X utf8 scripts/check_doc_tables.py
+          uv run python -X utf8 scripts/check_doc_tables.py --selftest
+
+# Both of these are pure-python and cheap, so they sit BEFORE the Node/pnpm block: a step that
+# fails there aborts the job, and that is exactly how the ratchet stayed invisible for six weeks
+# (changelogs #69) - the first CI run that ever reached this job died two steps later.
       - name: Enforce quality ratchets
         run: uv run python scripts/quality_ratchet.py
 
       - name: Type-check protected core modules
         run: uv run pyright --project pyright-core.json
 
+      # Node is needed only by the fixture generator below; the runner image is not the authority
+      # for which version it gets. Set up pnpm first so setup-node can wire the pnpm store cache
+      # (same order as the plugin-contracts job).
+      - name: Set up pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "22.22.3"
+          cache: pnpm
+          cache-dependency-path: plugins/dsh-autogamer/pnpm-lock.yaml
+
+      # The drift check imports the plugin's OWN MCP client, and that client only exists in
+      # `dist/` - a build product, not repository content. Without these two steps the step below
+      # dies with ERR_MODULE_NOT_FOUND, which is exactly how it first failed on the runner
+      # (run 38296414103) while passing on any dev machine that happens to have a stale dist
+      # lying around (changelogs #68).
+      - name: Build the plugin for the fixture check
+        working-directory: plugins/dsh-autogamer
+        run: |
+          pnpm install --frozen-lockfile
+          pnpm run build
+
+      # G62 (changelogs #52) made the py action surface runnable with no adb and no device, so the
+      # plugin's generated fixture can be re-derived here instead of being hand-carried -- until now
+      # no CI job ran scripts/spike-mcp.mjs at all (changelogs #53). Its default mode is the drift
+      # check: any difference between the live listing and the checked-in fixture exits non-zero.
+      # Reproduce both halves locally before changing this step - the runner's view is the one
+      # without a build product:
+      #   rm -rf plugins/dsh-autogamer/dist
+      #   SPIKE_COMMAND="uv run artemis mcp --type mock" node plugins/dsh-autogamer/scripts/spike-mcp.mjs   # exit 1, ERR_MODULE_NOT_FOUND
+      #   npm --prefix plugins/dsh-autogamer run build                                                     # then the same command exits 0
+      - name: Check the py action surface against the plugin fixture
+        env:
+          SPIKE_COMMAND: uv run artemis mcp --type mock
+        run: node plugins/dsh-autogamer/scripts/spike-mcp.mjs
+
       # Device, cloud, manual, and end-to-end suites require dedicated
       # infrastructure and intentionally do not run on GitHub-hosted runners.
       - name: Run deterministic Python tests
@@ -77,104 +131,44 @@
           --cov=third_party
           --cov-fail-under=60
 
-  frontend:
-    name: Frontend tests and production build
-    runs-on: ubuntu-latest
+  plugin-contracts:
+    name: DSH plugin contracts / ${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
     timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        os:
+          - ubuntu-latest
+          - windows-latest
     defaults:
       run:
-        working-directory: apps/showcase_ui
-
-    steps:
-      - name: Check out repository
-        uses: actions/checkout@v4
-
-      - name: Set up Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: "22.22.3"
-          cache: npm
-          cache-dependency-path: apps/showcase_ui/package-lock.json
-
-      - name: Install locked frontend dependencies
-        run: npm ci
-
-      - name: Run frontend tests
-        run: npm test -- --watch=false --browsers=ChromeHeadless
-
-      - name: Build frontend for production
-        run: npm run build
-
-  package:
-    name: Build and smoke-test Python packages
-    runs-on: ubuntu-latest
-    timeout-minutes: 30
+        working-directory: plugins/dsh-autogamer
 
     steps:
       - name: Check out repository
         uses: actions/checkout@v4
 
-      - name: Set up Python 3.12
-        uses: actions/setup-python@v5
+      # Before setup-node, so setup-node can wire the pnpm store cache.
+      - name: Set up pnpm
+        uses: pnpm/action-setup@v4
         with:
-          python-version: "3.12"
-
-      - name: Set up uv
-        uses: astral-sh/setup-uv@v6
-        with:
-          enable-cache: true
-          cache-dependency-glob: uv.lock
+          version: 10
 
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
           node-version: "22.22.3"
-          cache: npm
-          cache-dependency-path: apps/showcase_ui/package-lock.json
+          cache: pnpm
+          cache-dependency-path: plugins/dsh-autogamer/pnpm-lock.yaml
 
-      - name: Build frontend assets for the wheel
-        run: |
-          npm ci --prefix apps/showcase_ui
-          npm run build --prefix apps/showcase_ui
+      # The @deepseek-ai/* devDependencies are the real DSH runtime the
+      # conformance suite boots; no desktop install, no model, no device.
+      - name: Install locked plugin dependencies
+        run: pnpm install --frozen-lockfile
 
-      - name: Build client and Artemis distributions
-        run: |
-          uv build --package artemis-client --wheel --out-dir dist
-          uv build --package artemis --wheel --sdist --out-dir dist
-
-      - name: Install wheels in a clean environment
-        run: |
-          uv venv .smoke-venv --python 3.12
-          uv pip install --python .smoke-venv/bin/python dist/artemis_client-*.whl dist/artemis-*.whl
+      - name: Build the plugin
+        run: pnpm run build
 
-      - name: Smoke-test installed package and CLI
-        shell: bash
-        run: |
-          smoke_dir="$RUNNER_TEMP/artemis-wheel-smoke"
-          mkdir -p "$smoke_dir"
-          cd "$smoke_dir"
-          source "$GITHUB_WORKSPACE/.smoke-venv/bin/activate"
-          python - <<'PY'
-          from importlib.metadata import files, version
-
-          import artemis
-          from artemis.resources import get_bundled_config_path, get_bundled_showcase_dist
-
-          bundled_config = get_bundled_config_path("artemis.jsonc")
-          bundled_ui = get_bundled_showcase_dist()
-          assert artemis.__version__ == version("artemis")
-          assert bundled_config is not None and bundled_config.is_file()
-          assert bundled_ui is not None and (bundled_ui / "index.html").is_file()
-          assert not any("node_modules" in str(path) for path in (files("artemis") or ()))
-          print(f"Installed Artemis {artemis.__version__} with bundled runtime resources")
-          PY
-          artemis --version
-          artemis --help
-
-      - name: Upload distributions
-        uses: actions/upload-artifact@v4
-        with:
-          name: python-distributions
-          path: dist/*
-          if-no-files-found: error
-          retention-days: 7
+      - name: Run plugin contract tests
+        run: pnpm test

.gitignore

@@ -22,13 +22,14 @@ share/python-wheels/
 *.egg
 MANIFEST
 
-# Virtual Environments
+# Virtual Environments (all anchored: unanchored names also match subdirectories
+# case-insensitively on Windows, which once hid src/env/preflight.ts from git)
 .venv/
-env/
-venv/
-ENV/
-env.bak/
-venv.bak/
+/venv/
+/ENV/
+/venv.bak/
+/env/
+/env.bak/
 
 # Testing & Coverage
 .pytest_cache/
@@ -76,9 +77,7 @@ dmypy.json
 .settings/
 
 # Node & Frontend (Showcase UI)
-apps/showcase_ui/node_modules/
-apps/showcase_ui/.angular/
-apps/showcase_ui/.angular/cache/
+apps/showcase_ui_v2/node_modules/
 .npm/
 npm-debug.log*
 yarn-debug.log*
@@ -105,6 +104,8 @@ live_screenshot*.png
 .env
 .env.*
 !.env.example
+credential_bindings.json
+endpoint_library.json
 *.pem
 *.key
 

.quality-baseline.json

@@ -1,5 +1,5 @@
 {
-  "broad_exception_handlers": 754,
+  "broad_exception_handlers": 763,
   "silent_broad_exception_handlers": 0,
-  "type_ignore_comments": 18
+  "type_ignore_comments": 16
 }