@dsh-cove/dsh-web-all 0.0.0-stage → 0.4.4

package/lib/types/host/services/worktree/workspace-model.js

@@ -0,0 +1,113 @@
+/**
+ * Host workspace-model manager: owns the workspace-granularity model preset
+ * document. Presets are stored in a plugin-own settings namespace
+ * (`workspace-model`) as a `{ [canonicalPath]: { provider, model, effort? } }`
+ * map, so a single user-editable document is the source of truth across
+ * machines and reloads.
+ *
+ * The settings service is optional: when no settings provider is mounted the
+ * manager degrades to an in-memory-only store (model presets still apply for
+ * the process lifetime, just not durable) rather than failing to mount.
+ * @module dsh-client-ui-worktree/host/workspace-model
+ */
+import { realpathSync } from 'node:fs';
+import { familyNamespace, registerFamilyNamespace, updateFamilyNamespace } from "../family-config.js";
+import z from 'schemastery';
+/** Settings namespace unique to this plugin. */
+export const WORKSPACE_MODEL_NS = 'workspace-model';
+/** Schemastery schema for the preset document (a path -> preset map). */
+export const WorkspacePresetSchema = z.dict(z.object({
+    provider: z.string().required(),
+    model: z.string().required(),
+    reasoningEffort: z.string(),
+})).default({});
+/** Canonicalize a workspace path for use as a document key. Follows symlinks
+ *  via realpath and strips a trailing separator, matching how the workspace
+ *  registry records paths and how sessions record `cwd`. The root path `/`
+ *  is preserved (and is the only case where stripping the trailing separator
+ *  is a no-op, because paths must be non-empty when used as a key). */
+export function canonicalWorkspacePath(path) {
+    if (typeof path !== 'string' || path.length === 0)
+        return path;
+    let canonical;
+    try {
+        canonical = realpathSync(path);
+    }
+    catch {
+        canonical = path.replace(/\\/g, '/');
+    }
+    // Strip trailing separator(s) but preserve the root.
+    const stripped = canonical.replace(/[\\/]+$/, '');
+    return stripped === '' ? canonical : stripped;
+}
+registerFamilyNamespace(WORKSPACE_MODEL_NS, WorkspacePresetSchema);
+/** Public surface used by `routes.ts` and the agent wiring. */
+export class WorkspaceModelManager {
+    ctx;
+    settings = null;
+    memory = new Map();
+    settingsFiber;
+    dispose() {
+        this.settings = null;
+        void this.settingsFiber?.dispose();
+        this.settingsFiber = undefined;
+    }
+    /** Optional settings service; safe to call with an unmounted provider. */
+    constructor(ctx) {
+        this.ctx = ctx;
+        this.installSettings();
+    }
+    /** Wire the workspace-model namespace to the 0.2 settings document. */
+    installSettings() {
+        this.settingsFiber = this.ctx.inject(['settings'], (sctx) => {
+            const ns = WORKSPACE_MODEL_NS;
+            this.settings = {
+                get: () => (familyNamespace(ns) ?? {}),
+                replace: async (section) => {
+                    await updateFamilyNamespace(sctx, ns, section);
+                },
+            };
+            this.seedMemory(this.settings.get());
+        });
+    }
+    /** Replace the in-memory mirror from a resolved document. */
+    seedMemory(map) {
+        this.memory = new Map(Object.entries(map ?? {}));
+    }
+    /** All stored presets keyed by canonical path (read snapshot). */
+    list() {
+        return Object.fromEntries(this.memory);
+    }
+    /** The preset for one workspace path, or undefined when none. */
+    get(path) {
+        return this.memory.get(canonicalWorkspacePath(path));
+    }
+    /** Store a preset for one workspace path. Returns the stored preset. */
+    async set(path, preset) {
+        const key = canonicalWorkspacePath(path);
+        if (this.settings !== null) {
+            const next = { ...this.settings.get(), [key]: { ...preset } };
+            await this.settings.replace(next);
+            this.seedMemory(next);
+        }
+        else {
+            this.memory.set(key, { ...preset });
+        }
+        return { ...preset };
+    }
+    /** Remove a workspace's preset if present. Returns true when removed. */
+    async clear(path) {
+        const key = canonicalWorkspacePath(path);
+        const existed = this.memory.has(key);
+        if (this.settings !== null) {
+            const next = { ...this.settings.get() };
+            delete next[key];
+            await this.settings.replace(next);
+            this.seedMemory(next);
+        }
+        else {
+            this.memory.delete(key);
+        }
+        return existed;
+    }
+}

package/lib/types/index.d.ts

@@ -0,0 +1,47 @@
+/**
+ * dsh-web-all — host half.
+ *
+ * dsh-cove 的唯一运行时实体。host 半区按服务域组织（src/host/services/*），
+ * 每个服务域导出一个 register(ctx) 注册函数，由本文件统一装配；
+ * cordis.patch.yml 只有一行 `web-all`。
+ *
+ * 服务域不按能力对外暴露插件边界：路由前缀（/api/dsh-ssh 等）、agent 工具名
+ * （ssh_exec 等）、settings namespace（dsh-ssh 等）保持不变，仅注册入口收敛。
+ */
+import type { Context } from '@deepseek-ai/cordis';
+/** Stable cordis plugin name (matches cordis.patch.yml insert id). */
+export declare const name = "web-all";
+/**
+ * Services the host half needs before any service domain can mount.
+ * 每个服务域会声明自己的额外依赖；装配器把 ctx 完整交给它们。
+ */
+export declare const inject: readonly ["webServer", "tools", "systemPrompt", "settings", "sessions", "sessionController", "workspaceController", "workspaceRegistry", "connection", "subprocess", "fs", "agentPresets", "commands", "agents"];
+/**
+ * 插件 config 类型面（运行时的权威 schema 是下面导出的 `Config`）。
+ * 命名空间键（doctor / remote-web-ui / dsh-ssh / …）即各能力域的设置命名空间。
+ */
+export interface Config extends Record<string, unknown> {
+    /** 用户 dsh 配置根（默认 $DSH_HOME 或 ~/.dsh）。 */
+    dshHome?: string;
+    /** 用户 agents 配置根（默认 $DSH_AGENTS_HOME 或 ~/.agents）。 */
+    agentsHome?: string;
+    /** Worktree PR credential reference. */
+    worktree?: import('./host/services/worktree/index.ts').WorktreeServiceConfig;
+    /** Playwright sessions service options (profile overridable; `liveView` enables the agent-browser live view). */
+    playwright?: import('./core/playwright-sessions/contracts.ts').PlaywrightSessionsConfig;
+    /** 跳过 BrowserAuth token/cookie 检查；仅可信反向代理或局域网显式启用。 */
+    noBrowserAuth?: boolean;
+}
+/**
+ * 运行时 Config（0.2 原生设置模型的入口）：聚合条目 = 装配参数 + 每个能力域的
+ * 设置命名空间（volatile）。导出后该条目才会出现在原生设置文档里，家族设置
+ * 才能被读写而不必重挂插件。构建时机必须在装配器 import 求值之后——见
+ * `createFamilyConfig` 的注释。
+ */
+export declare const Config: import("./host/services/family-config.ts").FamilyConfigSchema;
+/**
+ * Application entry：装配全部 host 服务域。
+ * @param ctx - host plugin context。
+ */
+export declare function apply(ctx: Context, config?: Config): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAIlD,sEAAsE;AACtE,eAAO,MAAM,IAAI,YAAY,CAAA;AAE7B;;;GAGG;AACH,eAAO,MAAM,MAAM,kNAeT,CAAA;AAEV;;;GAGG;AACH,MAAM,WAAW,MAAO,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACrD,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,OAAO,mCAAmC,EAAE,qBAAqB,CAAA;IAC5E,iHAAiH;IACjH,UAAU,CAAC,EAAE,OAAO,yCAAyC,EAAE,wBAAwB,CAAA;IACvF,sDAAsD;IACtD,aAAa,CAAC,EAAE,OAAO,CAAA;CACxB;AAED;;;;;GAKG;AACH,eAAO,MAAM,MAAM,+DAAuB,CAAA;AAE1C;;;GAGG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAgBzD"}

package/lib/types/index.js

@@ -0,0 +1,52 @@
+import { assembleServices } from "./host/services/index.js";
+import { bindFamilyConfig, createFamilyConfig, notifyFamilyConfigChange } from "./host/services/family-config.js";
+/** Stable cordis plugin name (matches cordis.patch.yml insert id). */
+export const name = 'web-all';
+/**
+ * Services the host half needs before any service domain can mount.
+ * 每个服务域会声明自己的额外依赖；装配器把 ctx 完整交给它们。
+ */
+export const inject = [
+    'webServer',
+    'tools',
+    'systemPrompt',
+    'settings',
+    'sessions',
+    'sessionController',
+    'workspaceController',
+    'workspaceRegistry',
+    'connection',
+    'subprocess',
+    'fs',
+    'agentPresets',
+    'commands',
+    'agents',
+];
+/**
+ * 运行时 Config（0.2 原生设置模型的入口）：聚合条目 = 装配参数 + 每个能力域的
+ * 设置命名空间（volatile）。导出后该条目才会出现在原生设置文档里，家族设置
+ * 才能被读写而不必重挂插件。构建时机必须在装配器 import 求值之后——见
+ * `createFamilyConfig` 的注释。
+ */
+export const Config = createFamilyConfig();
+/**
+ * Application entry：装配全部 host 服务域。
+ * @param ctx - host plugin context。
+ */
+export function apply(ctx, config) {
+    // 绑定 loader 解析后的聚合 config：volatile 节点是引用，设置变更会原地热更新。
+    bindFamilyConfig(config);
+    // 设置变更扇出：注册时读一次的服务域据此重新 sync（无需重挂插件）。
+    ctx.effect(() => {
+        const off = ctx.on?.('loader/volatile-update', () => { notifyFamilyConfigChange(); });
+        const offSettings = ctx.on?.('settings/document-updated', () => { notifyFamilyConfigChange(); });
+        return () => { off?.(); offSettings?.(); };
+    }, 'web-all: settings change fan-out');
+    ctx.effect(async () => assembleServices(ctx, {
+        dshHome: config?.dshHome,
+        agentsHome: config?.agentsHome,
+        noBrowserAuth: config?.noBrowserAuth,
+        worktree: config?.worktree,
+        playwright: config?.playwright,
+    }), 'web-all: host services');
+}

package/lib/types/invariant.d.ts

@@ -0,0 +1,4 @@
+/** Invariant companion plugin (no assertions — nothing to check at runtime). */
+/** Provides no assertions: web-all owns no cross-package runtime invariants. */
+export declare function apply(): void;
+//# sourceMappingURL=invariant.d.ts.map

package/lib/types/invariant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariant.d.ts","sourceRoot":"","sources":["../../src/invariant.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,gFAAgF;AAChF,wBAAgB,KAAK,IAAI,IAAI,CAAG"}

package/lib/types/invariant.js

@@ -0,0 +1,3 @@
+/** Invariant companion plugin (no assertions — nothing to check at runtime). */
+/** Provides no assertions: web-all owns no cross-package runtime invariants. */
+export function apply() { }

package/package.json

@@ -1,6 +1,156 @@
 {
   "name": "@dsh-cove/dsh-web-all",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "description": "DSH Web GUI 全家桶插件（实体版）：按 dsh 注入位置组织的单一插件——侧栏（sidebar）/ 设置（settings）/ 会话区（conversation）/ 浮层（flyout）四个位置模块统一编排，host 半区按服务域承载各能力。安装一个插件即全家桶全部能力。",
+  "version": "0.4.4",
+  "type": "module",
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./invariant": {
+      "types": "./lib/types/invariant.d.ts",
+      "default": "./lib/invariant.js"
+    },
+    "./client": {
+      "types": "./lib/types/client/index.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./src/*": "./src/*",
+    "./package.json": "./package.json"
+  },
+  "dsh": {
+    "engines": {
+      "dsh": ">=0.2.0-rc.2"
+    },
+    "bundle": {
+      "patch": [
+        "./cordis.patch.yml",
+        "./presets/hiopen.patch.yml",
+        "./presets/code-vibe.patch.yml"
+      ]
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-sidebar",
+        "@deepseek-ai/dsh-client-ui-conversation",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-theme"
+      ],
+      "platform": "web"
+    }
+  },
+  "dependencies": {
+    "@deepseek-ai/dsh-atomic-write": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-http-proxy": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-subprocess": "^0.1.5-rc.2",
+    "@larksuiteoapi/node-sdk": "^1.66.1",
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "@playwright/mcp": "^0.0.79",
+    "@xterm/addon-fit": "^0.11.0",
+    "@xterm/xterm": "^6.0.0",
+    "playwright-core": "1.63.0-alpha-2026-08-05",
+    "ssh2": "^1.17.0",
+    "ws": "^8.18.0",
+    "yaml": "^2.8.2",
+    "clsx": "^2.1.1",
+    "jose": "^6.2.10"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/dsh-agent": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-settings": "^0.2.0-rc.2",
+    "react": "^18.2.0",
+    "react-dom": "^18.2.0"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-agent": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-presets": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-api-session-controller": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-connection": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-locale": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-store": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-session": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-sidebar": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-theme": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-commands": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-invariants": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-sandbox": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-scope": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-session": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-settings": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-subprocess": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-timeout": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-tools": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-util-workspace-path": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-workspace": "^0.2.0-rc.2",
+    "@testing-library/dom": "^10.4.1",
+    "@testing-library/react": "^16.1.0",
+    "@types/node": "^22.20.0",
+    "@types/react": "~18.3.1",
+    "@types/react-dom": "^18.3.5",
+    "@types/ssh2": "^1.15.5",
+    "jsdom": "29.1.1",
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1",
+    "schemastery": "^3.18.0",
+    "tsdown": "0.22.2",
+    "typescript": "~5.7.2",
+    "vitest": "^4.1.8",
+    "@types/ws": "^8.5.13",
+    "@shikijs/langs": "^4.4.3",
+    "anser": "^2.3.5",
+    "shiki": "^4.4.3",
+    "katex": "^0.16.47",
+    "mdast-util-from-markdown": "^2.0.3",
+    "mdast-util-gfm": "^3.1.0",
+    "mdast-util-math": "^3.0.0",
+    "micromark-core-commonmark": "^2.0.4",
+    "micromark-extension-gfm": "^3.0.0",
+    "micromark-extension-math": "^3.1.0",
+    "micromark-factory-space": "^2.1.0",
+    "micromark-util-character": "^2.1.1",
+    "micromark-util-classify-character": "^2.0.1",
+    "micromark-util-sanitize-uri": "^2.0.1",
+    "micromark-util-symbol": "^2.0.1"
+  },
+  "files": [
+    "lib/**/*.js",
+    "lib/**/*.js.map",
+    "lib/**/*.d.ts",
+    "lib/**/*.d.ts.map",
+    "src",
+    "cordis.patch.yml",
+    "presets"
+  ],
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/chengxiang-zhang/dsh-cove.git"
+  },
+  "scripts": {
+    "build": "tsc -b && tsdown",
+    "bundle": "tsdown",
+    "watch": "tsdown --watch",
+    "typecheck": "tsc -b --pretty false",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  }
 }

package/presets/code-vibe/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,55 @@
+# Third-party notices for the code-vibe preset
+
+The bundled skills include adapted material from the projects below. These notices apply to those adapted portions; `@dsh-cove/dsh-web-all` otherwise remains licensed under its package license.
+
+## deepseek-ai/deepseek-harness
+
+Source: https://github.com/deepseek-ai/deepseek-harness
+
+MIT License
+
+Copyright (c) 2026 DeepSeek
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+## chengxiang-zhang/sdd-vibe-coding
+
+Source: https://github.com/chengxiang-zhang/sdd-vibe-coding
+
+MIT License
+
+Copyright (c) 2026 Vibe Coding contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/presets/code-vibe/skills/UPSTREAM.md

@@ -0,0 +1,104 @@
+# UPSTREAM — 搬运来源记录（vendor 台账）
+
+本目录中 `agent-experience`、`dsh-ci-test-reliability`、`dsh-find-simplifications`、`dsh-merging-stacked-prs`、`dsh-prose-standard`、`dsh-speed-up-perf`、`dsh-trim-cot-leakage`、`record-browser-gif` 八个 skill 搬运自 [deepseek-ai/deepseek-harness](https://github.com/deepseek-ai/deepseek-harness) 的 `.agents/skills/`。
+
+## 许可
+
+- 上游：**MIT License**，Copyright (c) 2026 DeepSeek。
+- 完整版权声明、许可文本与免责声明随包置于 [`../THIRD_PARTY_NOTICES.md`](../THIRD_PARTY_NOTICES.md)。
+
+## 搬运基线
+
+- 上游 commit：`00102833dfaee1da9f48a3a8eae9d34005a75218`（2026-09-22，release-dsh-0.1.7-alpha.2）
+- 搬运日期：本仓库会话（code-vibe 预设提升，方案 v2 的 E 组）
+- 维护模式：**单向 vendor**——上游更新时手动对比 diff、选择性同步（见本文件的搬运基线与改动总则）；本地改造不回推上游。
+
+## 改动总则（每个被搬 skill 统一执行）
+
+1. 整目录拷贝（含 references/、scripts/ 子目录），目录名保留 `dsh-` 前缀；
+2. **引用修复**：指向上游仓库的文档/决策记录链接（`../../../docs/*`、`../../../AGENTS.md`、`../../notes/*`、`packages/`、`benchmarks/`、`snapshots/`）改写为自包含一句话，并标注「源自 DeepSeek Harness」；skill 互引（`../dsh-*/SKILL.md`）保留（整体搬入后相对路径仍有效）；references/ 子目录里的历史出处链接转为纯文本「（上游决策档案）」；
+3. **provenance 头注**：每篇 SKILL.md 在 frontmatter 内（`---` 闭合前、description 等字段之后）插入 HTML 注释（上游路径 + commit SHA + MIT 声明）——yaml 解析实测兼容（eemeli `yaml` 包对裸注释行容忍，`name`/`description` 字段读取正常）；2026-09-25 确认：8 篇均为 frontmatter 内注释，非「frontmatter 后」。
+4. **description 双语化**：保留英文原描述为主体，前缀中文触发关键词（样例见下表）。
+
+## 各 skill 的 description 中文触发词
+
+| skill | 中文触发词前缀 |
+|---|---|
+| agent-experience | agent 工具/上下文设计元技能 |
+| dsh-ci-test-reliability | 测试可靠性/防 flake/确定性测试 |
+| dsh-find-simplifications | 简化/减法/防复杂度累积 |
+| dsh-merging-stacked-prs | GitHub 栈式 PR 合并 |
+| dsh-prose-standard | 写作/措辞/注释与文档文案标准 |
+| dsh-speed-up-perf | 性能测量/基准纪律 |
+| dsh-trim-cot-leakage | 思维链泄漏清理/CoT 残留 |
+| record-browser-gif | 浏览器演示录制/GIF 证据 |
+
+## 改写对照表（被改写引用的原文摘录 → 改写后语义）
+
+> 原则：改写只做「自包含化」，不改变规则语义。需要与上游原文对账时按本表检索。
+
+| 文件 | 原文引用（简写）| 改写后语义 |
+|---|---|---|
+| dsh-ci-test-reliability | docs/testing.md | 测试证据分层（单元/覆盖/期望输出/快照/浏览器/真 API）选择依据 |
+| dsh-ci-test-reliability | docs/defensive-patterns.md | 生命周期/子进程/取消/拆除缺陷类 |
+| dsh-ci-test-reliability | snapshots/AGENTS.md | 录制会话场景的 keyless 重放规则 |
+| dsh-ci-test-reliability | dsh-pre-push-checks（未搬）| pre-push 最小证据集纪律（改名引用） |
+| dsh-find-simplifications | AGENTS.md/architecture/defensive-patterns/testing | 仓库宪法四文档 → 自包含一句 |
+| dsh-find-simplifications | 上游 notes/README.md（两次）| 已改写为本仓 Issue / pull request 决策记录规则 |
+| dsh-find-simplifications | docs/development.md urgency rules | TODO/FIXME/XXX 按紧迫度分级 |
+| dsh-find-simplifications | 2026-07-26-dependencies-over-hand-rolling | 依赖政策：优先维护依赖/Node builtins；替换须净删除 |
+| dsh-find-simplifications | 上游决策笔记归档 skill（未搬）| 已改写为本仓 Issue 去重与 Git 历史规则 |
+| dsh-merging-stacked-prs | AGENTS.md | 仓库宪法允许的 merge-forward/rebase 历史 |
+| dsh-merging-stacked-prs | docs/cookbook/responding-to-pr-review-on-a-stack.md | 栈评审修复传播纪律 |
+| dsh-prose-standard | docs/AGENTS.md（两次：writing rules / documentation standard）| 文档分层/写作规则/预算；双语最小更新路径 |
+| dsh-prose-standard | docs/cookbook/adding-a-package.md#4 | package README 必备契约面 |
+| dsh-prose-standard | dsh-doc（未搬）| dsh-doc 文档工作流（放置/预算/双语对）自包含一句 |
+| dsh-speed-up-perf | AGENTS.md/architecture/testing/defensive-patterns | 仓库宪法四文档 → 自包含一句 |
+| dsh-speed-up-perf | 2026-09-06-evidence-driven-performance-skill（notes）| 性能工作流决策（上游档案，历史线索非权威） |
+| dsh-speed-up-perf | benchmarks/AGENTS.md + 2026-09-04-session-open-performance-gate | 基准纪律：扩展现有必需通道而非另建设施 |
+| dsh-speed-up-perf | notes/README.md | 决策记录规则 |
+| dsh-speed-up-perf | dsh-pre-push-checks（未搬）| pre-push 最小证据集纪律 |
+| dsh-trim-cot-leakage | 2026-08-09-committed-artifact-citations（notes）| 引用必须指向已提交工件 |
+| dsh-trim-cot-leakage | docs/AGENTS.md（两次）| 文档分层标准；双语最小更新路径 |
+| dsh-trim-cot-leakage | dsh-doc（未搬）| 双语文档纪律 |
+| record-browser-gif | 2026-08-08-browser-gif-evidence-chain（notes）| evidence-chain 决策：一个 storyboard 一个隔离 run |
+| dsh-find-simplifications/references/historical-patterns.md | 21 处 notes/archived/implemented/rejected 链接 | 转纯文本「（上游决策档案）」，保留笔记名 |
+| dsh-trim-cot-leakage/references/*.md | 2 处 notes 链接 | 同上 |
+
+### 未搬运清单（明确不带）
+
+| skill | 原因 |
+|---|---|
+| dsh-doc | 深度绑定上游 docs/AGENTS.md tier 体系与双向文档门禁 |
+| dsh-translate-docs | 绑定上游 i18n 双语体系（本环境无此需求） |
+| 上游决策笔记归档 skill | 绑定上游 notes 生命周期与归档门禁；本仓使用 Issue、pull request 与 Git 历史 |
+| dsh-pre-push-checks | 绑定上游 pnpm change-scope 与测试命令；其「最小证据集」思想已由本环境的 journey --assert 与 B 组机制承接 |
+
+> 注：`dsh-code-review` 原列于未搬运清单（"若需要可后续提炼通用版"），2026-09-25 已提炼为 `code-review`（见下方补充来源），从本表移除。
+
+## 上游引用完整性校验
+
+`scripts/verify_preset_budgets.py`（或既有 verify.sh）校验：persona 与全部 SKILL.md 中点名的 skill 名称、相对互引必须存在于本目录（缺失 → exit 1）。本表是人工对照底稿，脚本是持续防线。
+---
+
+# 补充来源：sdd-vibe-coding（frontend-design / quality-review / code-review）
+
+- 来源仓库：[chengxiang-zhang/sdd-vibe-coding](https://github.com/chengxiang-zhang/sdd-vibe-coding)（**MIT License**），搬运路径 `skills/design`（design-standards 全套 + design 专项 references）、`skills/testing`（Verify 专项全套）、`skills/vibe-coding/references/`（verification-loop、evidence-contract）。
+- 搬运日期：方案 v2 收尾轮（「剩余内容全面完成」）。
+- 引用改造：`../../vibe-coding/references/*` → 本地 `./` 或跨 skill `../frontend-design/references/…`；未复制文件（rails/states/workflow-contract/release-lifecycle）改为自包含一句话（对应 wish-programming 五阶段 + journey 状态机 + release 人闸）。
+- `frontend-design/SKILL.md`、`quality-review/SKILL.md`、`code-review/SKILL.md` 为本环境新写路由（SDD rail 体系 → wish-programming 五阶段映射），references 目录为素材原样（含 LOAD-MAP 唯一真源册）。
+- code-review 提炼自 deepseek-harness 的 dsh-code-review（MIT，同前台账），去除仓库绑定。
+- 维护：同前——单向 vendor；sdd-vibe-coding 上游更新时手动对比同步。
+
+## v3 修复轮（2026-09-25）——搬运自包含化补漏
+
+深度审计（code-vibe-deep-audit-v3.md）发现 4 处上游专属命令/技能名残留，本次改写为本地语义（不改规则意图）：
+
+| 文件 | 原文 | 改写后 |
+|---|---|---|
+| dsh-prose-standard | `use dsh-doc …`、run `verify-client-ui-i18n` | 本环境文档工作流承接表述 + 人工对照 |
+| dsh-trim-cot-leakage | `verify-type-equiv` / `verify-translation-pairing` / `doc-sync` | 本环境门禁等价动作（git diff --check / quote 模板检查 / 人工对照，未校验项如实报 pending） |
+| dsh-find-simplifications | `pnpm run doc-sync`、`pnpm run lint`、draft PR | 项目自身构建/lint + `git diff --check` + gap-register 登记 |
+| record-browser-gif | `pnpm run build && pnpm run build:web` | 被测项目自身构建命令 |
+
+原则（写入校验）：搬运技能不可指示模型运行**本环境不存在的门禁命令**或加载**未搬运技能**；改写为本地可执行动作或显式「以人工对照确认」。

package/presets/code-vibe/skills/agent-experience/SKILL.md

@@ -0,0 +1,15 @@
+---
+name: agent-experience
+description: agent 工具/上下文设计元技能； Use when designing agent tools, skills, context loading, or multi-step workflows to make information discoverable and use context efficiently.
+metadata:
+  date: "2026-09-11"
+
+<!-- provenance: ported from deepseek-ai/deepseek-harness/.agents/skills/agent-experience @ 00102833dfaee1da9f48a3a8eae9d34005a75218 (MIT License, Copyright (c) 2026 DeepSeek). Content adapted for self-contained operation outside the upstream repo. -->
+---
+
+- **Start with minimal context:** expose purpose, available actions, and constraints first; load detailed instructions when needed.
+- **Make discovery explicit:** every deferred resource needs a clear description and a reliable way to retrieve it.
+- **Keep critical constraints visible:** permissions, destructive effects, and required validation should appear before the relevant action.
+- **Prefer bounded outputs:** return concise results with identifiers or paths for retrieving details; avoid dumping entire logs or documents.
+- **Use locality:** include a bounded amount of likely needed adjacent context with an operation’s result. For example, deliver a thread reply with a few preceding messages. Mark omissions and truncation explicitly, and provide a way to retrieve more.
+- **Evaluate total work:** saving context is useful only if it does not cause more searches, repeated reads, or mistakes.

package/presets/code-vibe/skills/agent-operation/SKILL.md

@@ -0,0 +1,43 @@
+---
+name: agent-operation
+description: 代理使用纪律：模型路由（继承优先/同族换档）、委托判据（反割裂）、最小验证集与报告纪律；需要决定子代理档位、是否委托、或本地验证范围时加载。
+---
+
+# Agent Operation（代理使用纪律）
+
+> 从 wish-programming v2 抽离的通用方法论块（原「模型路由」「拆分原则-委托判据」）。wish-programming 只保留许愿流程专属内容，此处为唯一住所。
+
+## 模型路由
+
+**继承优先，同族换档**——原则指导，不是死表。
+
+- 默认：子代理 **不传** `model`/`provider`（继承本会话）。拿不准就继承。
+- 需要换能力时：留在**当前 provider**，选与你**同族的兄弟档**（如 DeepSeek 的 pro↔flash，Codex 的 sol↔luna/terra），按任务轻重判断，不必机械套表。
+- 不要因为目录里还有 Claude/GLM/Kimi 就随便跳族；换族仅当用户点名，或任务明显依赖该族专长。
+- 跨 provider 必须同时传 `provider` + `model`；外站 ID 单独塞进当前 provider → `UNKNOWN_MODEL`。
+
+| 任务倾向 | 建议 |
+|---|---|
+| 需求/设计/裁决/语义敏感/高风险 | 强档同族，或直接继承 |
+| 机械切片 / 证据收集 / 回填（窄 I/O） | 可同族快档；不确定则继承 |
+| 开放式设计判断 | 不要丢给快档 |
+
+## 委托判据（反割裂）
+
+- subagent/workflow 只用于「不需要你的上下文就能执行的活」——照锁定规范机械实现、独立验收（fresh 上下文是优点）、并行可分的调研收集。
+- **绝不委托**需求理解、设计决策、产品判断、方案收敛——它们靠主上下文活着，委托即割裂。
+- 委托按认知边界拆，不按页面/文件拆；并行只在实现层。
+- 保持委托树浅（depth-1 通常足够）；不在子代理内再委托，委派的 agent 完成任务后回报而非再委托。
+- 直接执行是常态；单文件、无跨模块影响的平凡切片不需要子代理。
+
+## 最小验证集
+
+- 验证范围匹配改动范围：切片只跑本片门禁（lint / type-check / journey --assert）；重复跑已通过的检查是浪费。
+- 全量重跑仅在全仓级变更、诊断 CI 或用户明确要求时。
+- 本地钩子/检查刻意小而快；穷尽矩阵归 CI 或用户要求的全链演练。
+
+## 报告纪律
+
+- 只报告**实际运行**的命令与观察输出；重试/跳过/未运行不得描述为通过；pending 报 pending。
+- 失败先修再交付，「不要指望换一个环境会不同」；环境差异必须用证据证明。
+- 更多细节见 wish-programming「报告协议」与 `dsh-ci-test-reliability`（测试可靠性与防自欺报告条款）。