{"schemaVersion":2,"dataVersion":"20260822T105549Z-0a0b366f","generatedAt":"2026-08-22T10:55:49.138Z","source":{"id":"a179-sanae-dsh-auto-collapse","slug":"a179-sanae-dsh-auto-collapse","rank":112,"url":"https://github.com/a179-sanae/dsh-auto-collapse","name":"a179-sanae/dsh-auto-collapse","category":"ui","description":{"zh":"Codex 风格工作流自动折叠：回合完成收成一行「已处理 X秒」只留最终正文，工具/思考块折叠成实时摘要 chip（运行中跟随流式滚动），逐级点击展开；卸载完整还原。","en":"Codex-style workflow auto-collapse: finished turns fold into a single \"processed in Xs\" row leaving only the final answer; tool calls and think blocks collapse into live-summary chips that follow streaming; expand level by level, fully reversible on uninstall."},"stars":41,"starsCheckedAt":"2026-08-21","repository":{"owner":"a179-sanae","repo":"dsh-auto-collapse","requestedRef":null,"subpath":""},"npm":null,"downloads":null,"installMode":"github-source","upstreamInstall":"dsh plugin --profile web add github:a179-sanae/dsh-auto-collapse","tarball":null,"added":"2026-08-15","page":"https://awesome-dsh-plugin.com/p/a179-sanae/dsh-auto-collapse/","screenshots":["https://raw.githubusercontent.com/a179-sanae/dsh-auto-collapse/main/assets/screenshot.png"],"discovery":{"provider":"awesome-dsh-plugin","channel":"plugins.json","indexUrl":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","selection":"all curated entries"}},"report":{"sourceId":"a179-sanae-dsh-auto-collapse","slug":"a179-sanae-dsh-auto-collapse","policyVersion":"HT-DSH-0.2.2","scannedAt":"2026-08-22T08:20:57.339Z","scanStatus":"static-complete","verdict":"pass","score":99,"commit":"1cd71d23a7440ea0e58faeb8a20775c0edc64c1f","commitDate":"2026-08-22T13:37:46+08:00","artifactDigest":"sha256:40de44e434093e042c0ea6e56a838ab2ef9c244bce53765618502cd0f02fa424","downloadUrl":"https://github.com/a179-sanae/dsh-auto-collapse/archive/1cd71d23a7440ea0e58faeb8a20775c0edc64c1f.tar.gz","installMode":"github-source","installCommand":"dsh plugin --profile web add github:a179-sanae/dsh-auto-collapse","manifest":{"found":true,"path":"package.json","parseError":null,"packageName":"dsh-auto-collapse","packageVersion":"0.1.3","bundle":{"patch":"./cordis.patch.yml"},"client":{"inject":["@deepseek-ai/dsh-client-runtime","@deepseek-ai/dsh-client-ui-settings"],"platform":"web"},"lifecycleScripts":{},"peerDependencies":["@deepseek-ai/dsh-settings","@deepseek-ai/schemastery"]},"identity":{"status":"found","installMode":"github-source","upstreamNpm":null,"manifestName":"dsh-auto-collapse","nameMatch":null,"npm":{"name":"dsh-auto-collapse","latestVersion":"0.1.3","publishedAt":"2026-08-20T16:53:27.858Z","createdAt":"2026-08-20T16:53:27.397Z","versionCount":1,"maintainers":1,"repository":null,"hasInstallScripts":false,"deprecated":false},"repositoryMatch":"missing","provenance":"none","tarballHost":null,"versionMatch":"match"},"permissions":{"bundlePatch":"cordis.patch.yml","inserts":[{"id":"dsh-auto-collapse","name":"dsh-auto-collapse","path":"cordis.patch.yml","disabled":false}],"overrides":[],"jsExpressions":0,"clientPlatform":"web","parseErrors":[]},"capabilities":["browser-ui","environment","filesystem","host-bundle","network","subprocess"],"outboundHosts":[],"findings":[{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"deploy.mjs","pathClass":"source","line":5,"evidence":"spawnSync","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"85b449d8e0cfb10d310069ea"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"deploy.mjs","pathClass":"source","line":5,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"c0c2b10a10033519ff8d8fac"},{"id":"HT-RUNTIME-001","title":"动态代码执行","severity":"high","confidence":"low","layer":"static","path":"test/_flash.mjs","pathClass":"test-example-docs","line":9,"evidence":"eval(","remediation":"使用静态模块和受约束的配置解析器，避免在宿主权限下执行动态字符串。","note":"位于测试、示例或文档目录","hash":"9f8b6a73e1a810154627dc35"},{"id":"HT-RUNTIME-001","title":"动态代码执行","severity":"high","confidence":"low","layer":"static","path":"test/adversarial-race.mjs","pathClass":"test-example-docs","line":74,"evidence":"eval(","remediation":"使用静态模块和受约束的配置解析器，避免在宿主权限下执行动态字符串。","note":"位于测试、示例或文档目录","hash":"f97f0fc6c405b069ca57606b"},{"id":"HT-RUNTIME-001","title":"动态代码执行","severity":"high","confidence":"low","layer":"static","path":"test/adversarial-session.mjs","pathClass":"test-example-docs","line":71,"evidence":"eval(","remediation":"使用静态模块和受约束的配置解析器，避免在宿主权限下执行动态字符串。","note":"位于测试、示例或文档目录","hash":"6d202582098e6ccf032f90a2"},{"id":"HT-RUNTIME-001","title":"动态代码执行","severity":"high","confidence":"low","layer":"static","path":"test/fold-animation.test.mjs","pathClass":"test-example-docs","line":37,"evidence":"eval(","remediation":"使用静态模块和受约束的配置解析器，避免在宿主权限下执行动态字符串。","note":"位于测试、示例或文档目录","hash":"da74fd1bd1fdc19017ef7f3f"},{"id":"HT-RUNTIME-001","title":"动态代码执行","severity":"high","confidence":"low","layer":"static","path":"test/fold-behavior.test.mjs","pathClass":"test-example-docs","line":29,"evidence":"eval(","remediation":"使用静态模块和受约束的配置解析器，避免在宿主权限下执行动态字符串。","note":"位于测试、示例或文档目录","hash":"bde1c5572dda4c286cc51451"},{"id":"HT-RUNTIME-001","title":"动态代码执行","severity":"high","confidence":"low","layer":"static","path":"test/fold-reconcile.test.mjs","pathClass":"test-example-docs","line":29,"evidence":"eval(","remediation":"使用静态模块和受约束的配置解析器，避免在宿主权限下执行动态字符串。","note":"位于测试、示例或文档目录","hash":"c3e936763f2d3e7e39025dca"},{"id":"HT-RUNTIME-001","title":"动态代码执行","severity":"high","confidence":"low","layer":"static","path":"test/fold-regression.test.mjs","pathClass":"test-example-docs","line":47,"evidence":"eval(","remediation":"使用静态模块和受约束的配置解析器，避免在宿主权限下执行动态字符串。","note":"位于测试、示例或文档目录","hash":"f1bacee4c52e0f231b21fbaa"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"test/run-all.mjs","pathClass":"test-example-docs","line":1,"evidence":"spawnSync","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"cac5b1c50359f6a86f61ae2f"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"test/run-all.mjs","pathClass":"test-example-docs","line":1,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"8be94817f1c6988a8df9abac"}],"counts":{"critical":0,"high":0,"medium":0,"low":2},"rawCounts":{"critical":0,"high":7,"medium":0,"low":4},"vulnerabilities":[],"coverage":{"source":"complete","manifest":"complete","bundleConfig":"complete","dependencies":"lockfile-present","vulnerabilities":"complete","identity":"complete","artifact":"not-compared","llmReview":"not-needed","dynamicRuntime":"not-run","humanReview":"not-run"},"inventory":{"filesScanned":29,"bytesScanned":432202,"truncated":false,"lockfiles":["package-lock.json"],"pathClasses":{"test-example-docs":11,"markdown":3,"source":11,"cordis":1,"data":2,"manifest":1}},"limitations":["此结果为源码静态检测，不等同于无漏洞证明。","尚未比对 npm 发布包与源码的一致性，也未执行隔离运行和人工复核。","危险能力可能是插件功能所需，需结合用途与证据人工判断。"],"limitationKeys":["static-analysis-only","no-artifact-runtime-human-review","capability-needs-context"]},"timeline":[{"scannedAt":"2026-08-22T08:20:57.339Z","commit":"1cd71d23a7440ea0e58faeb8a20775c0edc64c1f","policyVersion":"HT-DSH-0.2.2","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T11:20:00.519Z","commit":"1aeeb2641c1f452ceba1944d3f9b2f110447fe53","policyVersion":"HT-DSH-0.2.1","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T10:47:53.188Z","commit":"1aeeb2641c1f452ceba1944d3f9b2f110447fe53","policyVersion":"HT-DSH-0.2.0","verdict":"pass","status":"static-complete"}],"events":[{"kind":"policy-change","from":"HT-DSH-0.2.1","to":"HT-DSH-0.2.2","commit":"1cd71d23a7440ea0e58faeb8a20775c0edc64c1f","policyVersion":"HT-DSH-0.2.2","at":"2026-08-22T08:20:57.339Z"},{"kind":"policy-change","from":"HT-DSH-0.2.0","to":"HT-DSH-0.2.1","commit":"1aeeb2641c1f452ceba1944d3f9b2f110447fe53","policyVersion":"HT-DSH-0.2.1","at":"2026-08-21T11:20:00.519Z"},{"kind":"first-scan","from":null,"to":"pass","commit":"1aeeb2641c1f452ceba1944d3f9b2f110447fe53","policyVersion":"HT-DSH-0.2.0","at":"2026-08-21T10:47:53.188Z"}]}