@dsh-plus/agent-preset-rea 0.1.1 → 0.1.2

package/lib/index.js

@@ -1,11 +1,11 @@
 import { pluginDataPath, unwrapVolatile } from "@dsh-plus/shared";
 import z from "@deepseek-ai/schemastery";
-import { fileURLToPath } from "node:url";
-import { spawn } from "node:child_process";
 import { existsSync, readFileSync, readdirSync } from "node:fs";
+import { mkdir, rename, rm, writeFile } from "node:fs/promises";
 import { join } from "node:path";
+import { spawn } from "node:child_process";
+import { fileURLToPath } from "node:url";
 import { createHash } from "node:crypto";
-import { mkdir, rename, rm, writeFile } from "node:fs/promises";
 //#region src/mcp.ts
 /** 钉版基线：`rea-agents@6.5.0`（升级时同步测试断言、tests 清单与包文档）。 */
 const REA_PINNED_VERSION = "6.5.0";
@@ -67,10 +67,11 @@ function reaMcpEnv(config) {
 * 与 settings 用户层（GUI 配置卡片写入 profile 行级覆盖层，loader 原位提交活动
 * 引用，消费端 `unwrapVolatile` 现取即热）。
 *
-* **活动字段只有两个**：`personaPrefix` 与 `proxyPort`——两者都在配置卡片里有编辑器
-* （见 src/client/card.tsx），保存即热更（预设换代 / 安装作业即时生效）。其余字段是
-* **部署方平面**（安装位置、超时、附加 skill 根等运维旋钮），由 `cordis.patch.yml`
-* 整体覆盖，GUI 不提供入口。
+* **活动字段（`.volatile()`）共五个**，全部在配置卡片里有编辑器（见 src/client/card.tsx）：
+* `personaPrefix`（提示词）、`proxyPort`（安装代理）、`mcpEnabled` / `skillEnabled` /
+* `reverseSkillEnabled`（三个能力开关）——保存即热更（预设换代，新建会话生效）。
+* 其余字段是**部署方平面**（受管目录、版本钉、skill 组、超时等运维旋钮），由
+* `cordis.patch.yml` 整体覆盖，GUI 不提供入口。
 *
 * **persona 默认为空串**：`dsh-persona` 的空模板照样遮蔽部署级 persona 段，
 * 渲染为空后在提示词里消失；官方装配（harness 身份、工具指引、项目指令、
@@ -88,7 +89,12 @@ const Config = z.object({
 	description: z.string().description("预设说明（设置 → Agent 预设卡片描述）").default("逆向工程预设：官方 standard 全量行 + 仅本预设可见的 REA MCP 客户端（mcp__rea__*）与随包 REA 官方 skill；persona 默认为空，工具指引沿用官方装配。"),
 	order: z.number().description("预设名册排序位").default(6),
 	personaPrefix: z.string().description("persona 前缀（system-prompt 的 deployment:persona-prefix 段）；留空 = 空 persona（该段渲染为空后消失），工具指引与运行时上下文保留").default("").volatile(),
-	mcpEnabled: z.boolean().description("是否挂 REA MCP 客户端行（false = 只保留预设其余能力）").default(true),
+	mcpEnabled: z.boolean().description("是否挂 REA MCP 客户端行（false = 只保留预设其余能力）").default(true).volatile(),
+	skillEnabled: z.boolean().description("是否把 REA 官方 skill 根挂进本预设（false = 模型只看到其余 skill 根）").default(true).volatile(),
+	reverseSkillEnabled: z.boolean().description("是否挂 zhaoxuya520/reverse-skill 技能包（false = 从本预设的 skill 根里摘掉，安装副本仍在）").default(true).volatile(),
+	reverseSkillRepo: z.string().pattern(/^[\w.-]+\/[\w.-]+$/).description("reverse-skill 仓库（<owner>/<repo>；安装/手动更新都从这里拉）").default("zhaoxuya520/reverse-skill"),
+	reverseSkillRef: z.string().description("reverse-skill 的 ref（分支/标签/提交；留空 = 仓库默认分支的最新提交）").default(""),
+	reverseSkillGroups: z.array(z.string()).description("reverse-skill 里挂进本预设的技能组（相对安装树根；默认只挂主包根 skills——含路由技能与全部模块技能，CTF 侧车等组按需追加）").default(["skills"]),
 	mcpServerName: z.string().pattern(/^[A-Za-z0-9_-]{1,32}$/).description("MCP 服务命名空间：模型面工具名为 mcp__<serverName>__<tool>，取值 [A-Za-z0-9_-]{1,32}").default("rea"),
 	reaVersion: z.string().description("钉版的 rea-agents 版本（npx 拉取）").default(REA_PINNED_VERSION),
 	installRoot: z.string().description("REA 受管安装树位置（空 = <DSH_HOME>/dsh-plus/dsh-plus-agent-preset-rea/rea-agent）").default(""),
@@ -128,6 +134,392 @@ Make the plan decision-complete: state the goal and success criteria; group impl
 When ready, call exit_plan_mode with the complete plan markdown, starting with a # title. Make exit_plan_mode the only and final tool call in that assistant response: it presents the plan for approval, and implementation begins only in a later step after approval. Do not paste the final plan as a plain reply or ask "should I proceed?" through prose or ask_user_question. If review rejects it, incorporate the feedback and present again. If the review channel is unavailable or aborted, stay in plan mode and ask the user to switch modes manually; do not proceed with implementation.
 `;
 //#endregion
+//#region src/exec.ts
+/**
+* 外部命令执行面与作业原语：受管安装/更新作业要跑 `npm` / `tar`，这些调用全部经
+* {@link CommandRunner} 注入，单测用假 runner 跑完整状态机（零网络、零 npm）。
+*
+* 作业阶段由 {@link JobTaskContext} 上报，日志行由 {@link JobOperation} 的调用方
+* 收集；本模块只负责「怎么跑命令」与「怎么把输出变成日志行」。
+* @module @dsh-plus/agent-preset-rea/exec
+*/
+/** 版本字符串形状：进 shell 前把用户可配项收窄成纯版本号。 */
+const VERSION_PATTERN = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
+/** npm 命令名（Windows 经 shell 执行，见 {@link spawnRunner} 注释）。 */
+const NPM = "npm";
+/** 作业取消（AbortSignal 触发后由 runner 抛出）。 */
+var JobCancelled = class extends Error {
+	constructor() {
+		super("作业已取消");
+		this.name = "JobCancelled";
+	}
+};
+/** 实际 runner：spawn 子进程、逐行回调、AbortSignal 触发即杀。 */
+const spawnRunner = { run: (command, args, options) => new Promise((resolve, reject) => {
+	const child = spawn(command, args, {
+		env: options.env,
+		shell: process.platform === "win32",
+		stdio: [
+			"ignore",
+			"pipe",
+			"pipe"
+		]
+	});
+	let pending = "";
+	const emit = (chunk) => {
+		pending += chunk;
+		const lines = pending.split("\n");
+		pending = lines.pop() ?? "";
+		for (const line of lines) options.onLine(line.trimEnd());
+	};
+	child.stdout.setEncoding("utf8");
+	child.stderr.setEncoding("utf8");
+	child.stdout.on("data", emit);
+	child.stderr.on("data", emit);
+	const abort = () => {
+		child.kill("SIGTERM");
+	};
+	options.signal.addEventListener("abort", abort, { once: true });
+	child.on("error", reject);
+	child.on("close", (code) => {
+		options.signal.removeEventListener("abort", abort);
+		if (pending !== "") options.onLine(pending.trimEnd());
+		if (options.signal.aborted) reject(new JobCancelled());
+		else resolve({ code: code ?? 1 });
+	});
+}) };
+/** 本机代理 URL（未配置代理时为 null）。 */
+function proxyUrl(config) {
+	return config.proxyPort > 0 ? `http://127.0.0.1:${config.proxyPort}` : null;
+}
+/**
+* 子进程环境：继承宿主环境，附带代理端口（port > 0 时给 `https_proxy` 系列，
+* prebuild-install 与 curl 都认这些变量——原生依赖 prebuild 下载卡死的正解）。
+* @param config - 插件配置。
+* @param npm - 是否附带 npm 专属开关（npm 子进程用；curl 等非 npm 命令不需要）。
+*/
+function commandEnv(config, npm = false) {
+	const env = {};
+	for (const [key, value] of Object.entries(process.env)) if (value !== void 0) env[key] = value;
+	if (npm) {
+		env["npm_config_audit"] = "false";
+		env["npm_config_fund"] = "false";
+		env["npm_config_update_notifier"] = "false";
+		env["npm_config_loglevel"] = "http";
+	}
+	const proxy = proxyUrl(config);
+	if (proxy !== null) {
+		env["HTTP_PROXY"] = proxy;
+		env["HTTPS_PROXY"] = proxy;
+		env["http_proxy"] = proxy;
+		env["https_proxy"] = proxy;
+		if (npm) {
+			env["npm_config_proxy"] = proxy;
+			env["npm_config_https_proxy"] = proxy;
+		}
+	}
+	return env;
+}
+/** npm 子进程环境（{@link commandEnv} 的 npm 形态）。 */
+function npmEnv(config) {
+	return commandEnv(config, true);
+}
+/** 版本收窄：进命令前把配置里的钉版校验成纯版本号。 */
+function safeVersion(version) {
+	const trimmed = version.trim();
+	if (!VERSION_PATTERN.test(trimmed)) throw new Error(`配置里的 reaVersion 不是合法版本号：${JSON.stringify(version)}`);
+	return trimmed;
+}
+/** 逐行转发子进程输出到作业日志（截断超长行）。 */
+function lineSink(ctx) {
+	return (line) => {
+		if (line !== "") ctx.log(line.slice(0, 500));
+	};
+}
+/** 递归列出目录下全部文件（相对 POSIX 路径，排序稳定）。 */
+function listFiles(dir, base = "") {
+	const out = [];
+	for (const entry of readdirSync(dir, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+		const rel = base === "" ? entry.name : `${base}/${entry.name}`;
+		if (entry.isDirectory()) out.push(...listFiles(join(dir, entry.name), rel));
+		else out.push(rel);
+	}
+	return out;
+}
+/** 目录下文件数（目录缺席或不可读按 0；状态展示用，不抛）。 */
+function countFiles(dir) {
+	try {
+		return listFiles(dir).length;
+	} catch {
+		return 0;
+	}
+}
+//#endregion
+//#region src/reverse.ts
+/**
+* 第二个受管技能源：GitHub 仓库 `zhaoxuya520/reverse-skill`（路由包：根技能
+* `reverse-skill-router` + 各模块技能目录）。
+*
+* 与 REA 包分开成两个源的理由：来源不同（npm registry vs GitHub 仓库）、版本语义
+* 不同（semver 钉版 vs 提交 sha）、挂载形状不同（单技能根 vs 多技能组），混在一个
+* 作业里会让失败语义含混（npm 成功、GitHub 挂掉时到底算不算成功）。
+*
+* 落点：`<DSH_HOME>/dsh-plus/dsh-plus-agent-preset-rea/reverse-skill/`
+* - `repo/`：仓库树（`tar --strip-components=1` 解开，不改内容）；
+* - `manifest.json`：来源溯源（repo / ref / sha / VERSION / 技能组 / 更新时间）。
+*
+* 技能组发现规则：树里**直接子目录带 `SKILL.md`** 的目录即一个可挂载根（DSH 的
+* skill 扫描正是「根的直接子项 = 技能」）。树根自身不算——它的散装 `.md`
+* （README/AGENTS/RULES 等）会被当成技能文件解析；`plugins/**` 是各客户端的
+* 打包产物（重复一遍路由技能），也不暴露。
+*
+* 作业先落 staging 再换目录：中断只留 staging，运行中的会话继续读旧树。
+* @module @dsh-plus/agent-preset-rea/reverse
+*/
+/** 插件数据目录标识（与 manager.ts 同源：`<DSH_HOME>/dsh-plus/<id>`）。 */
+const PLUGIN_ID$1 = "dsh-plus-agent-preset-rea";
+/** 本技能源在插件数据目录下的子目录名。 */
+const REVERSE_DIR = "reverse-skill";
+/** 仓库树目录名（换目录作业的替换单元是它的父目录）。 */
+const REVERSE_TREE_DIR = "repo";
+/** 默认仓库。 */
+const REVERSE_DEFAULT_REPO = "zhaoxuya520/reverse-skill";
+/** 手动更新作业阶段名。 */
+const REVERSE_PHASES = [
+	"解析仓库信息",
+	"下载源码包",
+	"解包源码",
+	"校验并写入清单"
+];
+/** 不参与技能组发现的目录名（客户端打包产物；会重复一遍路由技能）。 */
+const SKIP_DIRS = /* @__PURE__ */ new Set([
+	".git",
+	"plugins",
+	"node_modules"
+]);
+/** 未安装时的现状（导出给 emptyRuntime 等默认场景用）。 */
+function emptyReverseState(repo = REVERSE_DEFAULT_REPO) {
+	return missingState(repo);
+}
+/** 未安装时的现状。 */
+function missingState(repo) {
+	return {
+		installed: false,
+		repo,
+		ref: null,
+		sha: null,
+		version: null,
+		files: 0,
+		groups: [],
+		updatedAt: null
+	};
+}
+/** 受管路径（固定落插件数据目录，无部署方可调项）。 */
+function reversePaths() {
+	const root = pluginDataPath(PLUGIN_ID$1, REVERSE_DIR);
+	return {
+		root,
+		tree: join(root, REVERSE_TREE_DIR)
+	};
+}
+/** 读 JSON（不存在或坏内容返回 null）。 */
+function readJson$1(file) {
+	try {
+		return JSON.parse(readFileSync(file, "utf8"));
+	} catch {
+		return null;
+	}
+}
+/** 记录型守卫。 */
+function asRecord$1(value) {
+	return typeof value === "object" && value !== null ? value : null;
+}
+/** 直接子目录名（跳过不参与发现的目录；目录读不到按无子目录）。 */
+function subdirs(dir) {
+	let entries;
+	try {
+		entries = readdirSync(dir, { withFileTypes: true });
+	} catch {
+		return [];
+	}
+	return entries.filter((entry) => entry.isDirectory() && !SKIP_DIRS.has(entry.name)).map((entry) => entry.name).sort();
+}
+/** 发现树内的技能组：直接子目录带 SKILL.md 的目录（排除树根与 SKIP_DIRS）。 */
+function discoverSkillGroups(tree) {
+	const groups = [];
+	const walk = (rel) => {
+		const abs = rel === "" ? tree : join(tree, rel);
+		const names = subdirs(abs);
+		if (names.some((name) => existsSync(join(abs, name, "SKILL.md")))) groups.push(rel);
+		for (const name of names) {
+			if (SKIP_DIRS.has(name)) continue;
+			walk(rel === "" ? name : `${rel}/${name}`);
+		}
+	};
+	if (existsSync(tree)) walk("");
+	return groups.filter((rel) => rel !== "");
+}
+/** 现探技能源（清单可读 + 树在 + 至少一个技能组才算可用）。 */
+function probeReverse(config, repo = config.reverseSkillRepo) {
+	const { root, tree } = reversePaths();
+	const manifest = asRecord$1(readJson$1(join(root, "manifest.json")));
+	if (manifest === null || !existsSync(tree)) return missingState(repo);
+	const sha = typeof manifest["sha"] === "string" ? manifest["sha"] : null;
+	if (sha === null) return missingState(repo);
+	const groups = discoverSkillGroups(tree);
+	if (groups.length === 0) return missingState(repo);
+	return {
+		installed: true,
+		repo: typeof manifest["repo"] === "string" ? manifest["repo"] : repo,
+		ref: typeof manifest["ref"] === "string" ? manifest["ref"] : "",
+		sha,
+		version: typeof manifest["version"] === "string" ? manifest["version"] : null,
+		files: typeof manifest["files"] === "number" ? manifest["files"] : countFiles(tree),
+		groups,
+		updatedAt: typeof manifest["updatedAt"] === "string" ? manifest["updatedAt"] : null
+	};
+}
+/**
+* 挂进本预设的技能组目录：配置选中 ∩ 树内发现。
+*
+* 组是否真实存在由现探的 {@link discoverSkillGroups} 负责（发现即存在），这里不再
+* 二次查盘——否则「未安装/组缺席」两种语义会在两处各判一遍。
+* @param config - 插件配置。
+* @param state - 现探现状。
+*/
+function reverseSkillDirs(config, state) {
+	if (!state.installed) return [];
+	const { tree } = reversePaths();
+	return config.reverseSkillGroups.map((group) => group.trim()).filter((group) => group !== "" && state.groups.includes(group)).map((group) => join(tree, group));
+}
+/** curl 通用参数：失败即非零退出、跟随跳转、静默进度。 */
+function curlArgs(config) {
+	const proxy = proxyUrl(config);
+	return ["-fsSL", ...proxy === null ? [] : ["-x", proxy]];
+}
+/** 跑一次 curl 并落文件（失败抛错）。 */
+async function curl(deps, ctx, args, target) {
+	const result = await deps.runner.run("curl", [
+		...curlArgs(deps.config),
+		"-o",
+		target,
+		...args
+	], {
+		env: commandEnv(deps.config),
+		signal: ctx.signal,
+		onLine: lineSink(ctx)
+	});
+	if (result.code !== 0) throw new Error(`curl 失败（退出码 ${result.code}）：${args.join(" ")}`);
+}
+/** GitHub API 取仓库信息（默认分支）与提交 sha。 */
+async function resolveRepo(deps, ctx, staging) {
+	ctx.phase(0);
+	const repo = deps.config.reverseSkillRepo;
+	const api = "https://api.github.com";
+	const metaFile = join(staging, "meta.json");
+	await curl(deps, ctx, [`${api}/repos/${repo}`], metaFile);
+	const meta = asRecord$1(readJson$1(metaFile));
+	const defaultBranch = typeof meta?.["default_branch"] === "string" ? meta["default_branch"] : null;
+	if (defaultBranch === null) throw new Error(`仓库信息不完整（${repo}）`);
+	const ref = deps.config.reverseSkillRef.trim() === "" ? defaultBranch : deps.config.reverseSkillRef.trim();
+	const commitFile = join(staging, "commit.json");
+	await curl(deps, ctx, [`${api}/repos/${repo}/commits/${ref}`], commitFile);
+	const commit = asRecord$1(readJson$1(commitFile));
+	const sha = typeof commit?.["sha"] === "string" ? commit["sha"] : null;
+	if (sha === null) throw new Error(`解析提交失败（${repo}@${ref}）`);
+	ctx.log(`仓库 ${repo}：默认分支 ${defaultBranch}，ref ${ref}，提交 ${sha.slice(0, 12)}`);
+	return {
+		sha,
+		ref
+	};
+}
+/** 下载源码包并解包到 `staging/tree`。 */
+async function fetchTree(deps, ctx, staging) {
+	const { sha } = await resolveRepo(deps, ctx, staging);
+	const tree = join(staging, REVERSE_TREE_DIR);
+	const tarball = join(staging, "repo.tgz");
+	ctx.phase(1);
+	await curl(deps, ctx, [`https://codeload.github.com/${deps.config.reverseSkillRepo}/tar.gz/${sha}`], tarball);
+	ctx.phase(2);
+	await mkdir(tree, { recursive: true });
+	const untar = await deps.runner.run("tar", [
+		"-xzf",
+		tarball,
+		"-C",
+		tree,
+		"--strip-components=1"
+	], {
+		env: commandEnv(deps.config),
+		signal: ctx.signal,
+		onLine: lineSink(ctx)
+	});
+	if (untar.code !== 0) throw new Error(`tar 解包失败（退出码 ${untar.code}）`);
+	return tree;
+}
+/** 读仓库 VERSION（无则 null）。 */
+function readVersion(tree) {
+	try {
+		const text = readFileSync(join(tree, "VERSION"), "utf8").trim();
+		return text === "" ? null : text.split("\n")[0] ?? null;
+	} catch {
+		return null;
+	}
+}
+/** 手动更新作业：拉默认分支/指定 ref 的最新提交，解包后换目录并写清单。 */
+async function runReverseSkillJob(deps, ctx) {
+	const { root } = reversePaths();
+	const staging = `${root}.staging`;
+	await rm(staging, {
+		recursive: true,
+		force: true
+	});
+	await mkdir(staging, { recursive: true });
+	try {
+		const tree = await fetchTree(deps, ctx, staging);
+		ctx.phase(3);
+		const groups = discoverSkillGroups(tree);
+		if (groups.length === 0) throw new Error("仓库结构不含技能组（找不到带 SKILL.md 的子目录）");
+		const meta = asRecord$1(readJson$1(join(staging, "commit.json")));
+		const sha = typeof meta?.["sha"] === "string" ? meta["sha"] : "";
+		for (const scratch of [
+			"repo.tgz",
+			"meta.json",
+			"commit.json"
+		]) await rm(join(staging, scratch), { force: true });
+		const manifest = {
+			source: `github:${deps.config.reverseSkillRepo}@${sha}`,
+			repo: deps.config.reverseSkillRepo,
+			ref: deps.config.reverseSkillRef.trim(),
+			sha,
+			version: readVersion(tree),
+			files: countFiles(tree),
+			groups,
+			updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+		};
+		await writeFile(join(staging, "manifest.json"), `${JSON.stringify(manifest, null, 2)}\n`);
+		const backup = `${root}.old`;
+		await rm(backup, {
+			recursive: true,
+			force: true
+		});
+		if (existsSync(root)) await rename(root, backup);
+		await rename(staging, root);
+		await rm(backup, {
+			recursive: true,
+			force: true
+		});
+		deps.refresh();
+		ctx.log(`已更新 ${deps.config.reverseSkillRepo}@${sha.slice(0, 12)}：${manifest.files} 文件、技能组 ${groups.join(", ")}`);
+		return manifest.version ?? sha.slice(0, 12);
+	} catch (error) {
+		await rm(staging, {
+			recursive: true,
+			force: true
+		});
+		throw error;
+	}
+}
+//#endregion
 //#region src/skill.ts
 /**
 * 预设作用域内的 skill 根解析：随包 REA 官方 skill（或手动更新副本）+ 配置追加目录。
@@ -147,12 +539,28 @@ When ready, call exit_plan_mode with the complete plan markdown, starting with a
 */
 const BUNDLED_SKILL_ROOT = fileURLToPath(new URL("../skills", import.meta.url));
 /**
-* skill-filesystem 的追加根清单。
+* REA skill 根（随包副本，或手动更新副本——后者存在即替代前者）。
+* @param updatedRoot - 手动更新副本根（来自 manager 现探）。
+*/
+function reaSkillDirs(updatedRoot = null) {
+	return updatedRoot === null ? [BUNDLED_SKILL_ROOT] : [updatedRoot];
+}
+/**
+* 本预设 `skill-filesystem` 行的完整追加根清单，按三个开关裁剪：
+* - `skillEnabled=false` → 不挂 REA 官方 skill（安装副本仍留在磁盘）；
+* - `reverseSkillEnabled=false` → 不挂 reverse-skill 的技能组；
+* - `extraSkillDirs` 是部署方追加项，不受开关影响（关掉的是本插件自带的两个源）。
 * @param config - 插件配置。
-* @param updatedRoot - 手动更新副本根（存在即替代随包根；来自 manager 现探）。
+* @param runtime - 现探运行期事实。
 */
-function reaSkillDirs(config, updatedRoot = null) {
-	return [...updatedRoot === null ? [BUNDLED_SKILL_ROOT] : [updatedRoot], ...config.extraSkillDirs];
+function presetSkillDirs(config, runtime) {
+	const rea = config.skillEnabled === false ? [] : reaSkillDirs(runtime.skill.source === "updated" ? runtime.skill.root : null);
+	const reverse = config.reverseSkillEnabled === false ? [] : reverseSkillDirs(config, runtime.reverse);
+	return [
+		...rea,
+		...reverse,
+		...config.extraSkillDirs
+	];
 }
 //#endregion
 //#region src/definition.ts
@@ -183,7 +591,8 @@ function emptyRuntime() {
 			root: BUNDLED_SKILL_ROOT,
 			files: 0,
 			updatedAt: null
-		}
+		},
+		reverse: emptyReverseState()
 	};
 }
 /**
@@ -236,7 +645,7 @@ function baseRows(config, runtime) {
 		{
 			id: "skill-filesystem",
 			name: "@deepseek-ai/dsh-skill-filesystem",
-			config: { customSkillDirs: reaSkillDirs(config, runtime.skill.source === "updated" ? runtime.skill.root : null) }
+			config: { customSkillDirs: presetSkillDirs(config, runtime) }
 		},
 		{
 			id: "tool-skill",
@@ -405,114 +814,6 @@ function reaPresetDefinition(config, runtime = emptyRuntime()) {
 	};
 }
 //#endregion
-//#region src/exec.ts
-/**
-* 外部命令执行面与作业原语：受管安装/更新作业要跑 `npm` / `tar`，这些调用全部经
-* {@link CommandRunner} 注入，单测用假 runner 跑完整状态机（零网络、零 npm）。
-*
-* 作业阶段由 {@link JobTaskContext} 上报，日志行由 {@link JobOperation} 的调用方
-* 收集；本模块只负责「怎么跑命令」与「怎么把输出变成日志行」。
-* @module @dsh-plus/agent-preset-rea/exec
-*/
-/** 版本字符串形状：进 shell 前把用户可配项收窄成纯版本号。 */
-const VERSION_PATTERN = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
-/** npm 命令名（Windows 经 shell 执行，见 {@link spawnRunner} 注释）。 */
-const NPM = "npm";
-/** 作业取消（AbortSignal 触发后由 runner 抛出）。 */
-var JobCancelled = class extends Error {
-	constructor() {
-		super("作业已取消");
-		this.name = "JobCancelled";
-	}
-};
-/** 实际 runner：spawn 子进程、逐行回调、AbortSignal 触发即杀。 */
-const spawnRunner = { run: (command, args, options) => new Promise((resolve, reject) => {
-	const child = spawn(command, args, {
-		env: options.env,
-		shell: process.platform === "win32",
-		stdio: [
-			"ignore",
-			"pipe",
-			"pipe"
-		]
-	});
-	let pending = "";
-	const emit = (chunk) => {
-		pending += chunk;
-		const lines = pending.split("\n");
-		pending = lines.pop() ?? "";
-		for (const line of lines) options.onLine(line.trimEnd());
-	};
-	child.stdout.setEncoding("utf8");
-	child.stderr.setEncoding("utf8");
-	child.stdout.on("data", emit);
-	child.stderr.on("data", emit);
-	const abort = () => {
-		child.kill("SIGTERM");
-	};
-	options.signal.addEventListener("abort", abort, { once: true });
-	child.on("error", reject);
-	child.on("close", (code) => {
-		options.signal.removeEventListener("abort", abort);
-		if (pending !== "") options.onLine(pending.trimEnd());
-		if (options.signal.aborted) reject(new JobCancelled());
-		else resolve({ code: code ?? 1 });
-	});
-}) };
-/**
-* npm 子进程环境：继承宿主环境，附带代理端口（port > 0 时同时给 npm 与
-* prebuild-install 注入代理——后者只认 `https_proxy` 系列环境变量，
-* 这是原生依赖 prebuild 下载卡死的正解）。
-*/
-function npmEnv(config) {
-	const env = {};
-	for (const [key, value] of Object.entries(process.env)) if (value !== void 0) env[key] = value;
-	env["npm_config_audit"] = "false";
-	env["npm_config_fund"] = "false";
-	env["npm_config_update_notifier"] = "false";
-	env["npm_config_loglevel"] = "http";
-	if (config.proxyPort > 0) {
-		const proxy = `http://127.0.0.1:${config.proxyPort}`;
-		env["HTTP_PROXY"] = proxy;
-		env["HTTPS_PROXY"] = proxy;
-		env["http_proxy"] = proxy;
-		env["https_proxy"] = proxy;
-		env["npm_config_proxy"] = proxy;
-		env["npm_config_https_proxy"] = proxy;
-	}
-	return env;
-}
-/** 版本收窄：进命令前把配置里的钉版校验成纯版本号。 */
-function safeVersion(version) {
-	const trimmed = version.trim();
-	if (!VERSION_PATTERN.test(trimmed)) throw new Error(`配置里的 reaVersion 不是合法版本号：${JSON.stringify(version)}`);
-	return trimmed;
-}
-/** 逐行转发子进程输出到作业日志（截断超长行）。 */
-function lineSink(ctx) {
-	return (line) => {
-		if (line !== "") ctx.log(line.slice(0, 500));
-	};
-}
-/** 递归列出目录下全部文件（相对 POSIX 路径，排序稳定）。 */
-function listFiles(dir, base = "") {
-	const out = [];
-	for (const entry of readdirSync(dir, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
-		const rel = base === "" ? entry.name : `${base}/${entry.name}`;
-		if (entry.isDirectory()) out.push(...listFiles(join(dir, entry.name), rel));
-		else out.push(rel);
-	}
-	return out;
-}
-/** 目录下文件数（目录缺席或不可读按 0；状态展示用，不抛）。 */
-function countFiles(dir) {
-	try {
-		return listFiles(dir).length;
-	} catch {
-		return 0;
-	}
-}
-//#endregion
 //#region src/jobs.ts
 /** 阶段序号 → 进度（进入该阶段即报该阶段起点百分比）。 */
 function progressOf(operation, step) {
@@ -740,7 +1041,8 @@ function probeRuntime(config, bundledRoot, bundledVersion) {
 	const paths = managerPaths(config);
 	return {
 		install: probeInstall(paths),
-		skill: probeSkill(paths, bundledRoot, bundledVersion)
+		skill: probeSkill(paths, bundledRoot, bundledVersion),
+		reverse: probeReverse(config)
 	};
 }
 /**
@@ -950,6 +1252,10 @@ function createManager(options) {
 				skill: {
 					phases: SKILL_PHASES,
 					run: (ctx) => runSkillJob(deps, ctx)
+				},
+				reverse: {
+					phases: REVERSE_PHASES,
+					run: (ctx) => runReverseSkillJob(deps, ctx)
 				}
 			};
 		}
@@ -1039,11 +1345,18 @@ function statusPayload(options) {
 	const paths = options.manager.paths();
 	const launch = reaMcpLaunch(config, runtime.install);
 	const mode = config.mcpCommand.trim() !== "" ? "custom" : launch === null ? "missing" : "installed";
+	const reverse = reversePaths();
+	const activeDirs = reverseSkillDirs(config, runtime.reverse);
 	return {
 		config: {
 			reaVersion: config.reaVersion,
 			proxyPort: config.proxyPort,
 			mcpEnabled: config.mcpEnabled,
+			skillEnabled: config.skillEnabled,
+			reverseSkillEnabled: config.reverseSkillEnabled,
+			reverseSkillRepo: config.reverseSkillRepo,
+			reverseSkillRef: config.reverseSkillRef,
+			reverseSkillGroups: [...config.reverseSkillGroups],
 			installRoot: config.installRoot
 		},
 		install: {
@@ -1053,39 +1366,71 @@ function statusPayload(options) {
 			entry: runtime.install?.entry ?? null
 		},
 		skill: { ...runtime.skill },
+		reverse: {
+			installed: runtime.reverse.installed,
+			repo: runtime.reverse.repo,
+			ref: runtime.reverse.ref,
+			sha: runtime.reverse.sha,
+			version: runtime.reverse.version,
+			root: reverse.root,
+			tree: reverse.tree,
+			files: runtime.reverse.files,
+			groups: [...runtime.reverse.groups],
+			activeGroups: activeDirs.map((dir) => dir.startsWith(`${reverse.tree}/`) ? dir.slice(reverse.tree.length + 1) : dir),
+			updatedAt: runtime.reverse.updatedAt
+		},
 		mcp: {
 			mode,
 			enabled: config.mcpEnabled && launch !== null,
 			command: launch?.command ?? null,
 			args: launch?.args ?? []
 		},
-		paths,
+		paths: {
+			...paths,
+			reverseRoot: reverse.root
+		},
 		job: options.board.snapshot()
 	};
 }
-/** 注册全部路由。 */
-function registerReaRoutes(ctx, options) {
-	const logger = ctx.logger("agent-preset-rea");
-	const send = (res, status, body) => {
+/** 发送 JSON 响应。 */
+function makeSend() {
+	return (res, status, body) => {
 		res.writeHead(status, { "content-type": "application/json; charset=utf-8" });
 		res.end(JSON.stringify(body));
 	};
-	const guard = (handler) => {
-		return async (req, res) => {
-			try {
-				await handler(req, res);
-			} catch (error) {
-				const message = error instanceof Error ? error.message : String(error);
-				logger.warn(`${req.method ?? "?"} ${req.url ?? "?"} 失败：${message}`);
-				if (!res.headersSent) send(res, 400, {
-					job: null,
-					error: message
-				});
-				else res.end();
-			}
-		};
+}
+/** 异常兜底：日志 + 400（响应头已发则只收尾）。 */
+function makeGuard(logger, send) {
+	return (handler) => async (req, res) => {
+		try {
+			await handler(req, res);
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			logger.warn(`${req.method ?? "?"} ${req.url ?? "?"} 失败：${message}`);
+			if (!res.headersSent) send(res, 400, {
+				job: null,
+				error: message
+			});
+			else res.end();
+		}
+	};
+}
+/** 方法门：不匹配即 405。 */
+function withMethod(method, send, handler) {
+	return async (req, res) => {
+		if (req.method !== method) {
+			send(res, 405, {
+				job: null,
+				error: "method not allowed"
+			});
+			return;
+		}
+		await handler(req, res);
 	};
-	const startJob = async (req, res, kind) => {
+}
+/** 起作业的处理器工厂（409 = 已有作业在跑）。 */
+function startJobHandler(kind, options, logger, send) {
+	return async (req, res) => {
 		const overrides = proxyPortOf(await readBody(req));
 		const operations = options.manager.operations(overrides === void 0 ? void 0 : { proxyPort: overrides });
 		const job = options.board.start(kind, operations[kind]);
@@ -1099,65 +1444,34 @@ function registerReaRoutes(ctx, options) {
 		logger.info(`已启动 ${kind} 作业`);
 		send(res, 200, { job });
 	};
-	ctx.webServer.register({
-		kind: "exact",
-		path: `${ROUTE_BASE}/status`,
-		handler: guard(async (req, res) => {
-			if (req.method !== "GET") {
-				send(res, 405, {
-					job: null,
-					error: "method not allowed"
-				});
-				return;
-			}
+}
+/** 全部路由（path 末段 → 处理器）。 */
+function buildRoutes(options, logger, send) {
+	return {
+		status: withMethod("GET", send, async (_req, res) => {
 			send(res, 200, statusPayload(options));
-		})
-	});
-	ctx.webServer.register({
-		kind: "exact",
-		path: `${ROUTE_BASE}/install`,
-		handler: guard(async (req, res) => {
-			if (req.method !== "POST") {
-				send(res, 405, {
-					job: null,
-					error: "method not allowed"
-				});
-				return;
-			}
-			await startJob(req, res, "install");
-		})
-	});
-	ctx.webServer.register({
-		kind: "exact",
-		path: `${ROUTE_BASE}/skill`,
-		handler: guard(async (req, res) => {
-			if (req.method !== "POST") {
-				send(res, 405, {
-					job: null,
-					error: "method not allowed"
-				});
-				return;
-			}
-			await startJob(req, res, "skill");
-		})
-	});
-	ctx.webServer.register({
-		kind: "exact",
-		path: `${ROUTE_BASE}/cancel`,
-		handler: guard(async (req, res) => {
-			if (req.method !== "POST") {
-				send(res, 405, {
-					job: null,
-					error: "method not allowed"
-				});
-				return;
-			}
+		}),
+		install: withMethod("POST", send, startJobHandler("install", options, logger, send)),
+		skill: withMethod("POST", send, startJobHandler("skill", options, logger, send)),
+		reverse: withMethod("POST", send, startJobHandler("reverse", options, logger, send)),
+		cancel: withMethod("POST", send, async (_req, res) => {
 			const cancelled = options.board.cancel();
 			send(res, 200, {
 				job: options.board.snapshot(),
 				...cancelled ? {} : { error: "没有正在运行的作业" }
 			});
 		})
+	};
+}
+/** 注册全部路由。 */
+function registerReaRoutes(ctx, options) {
+	const logger = ctx.logger("agent-preset-rea");
+	const send = makeSend();
+	const guard = makeGuard(logger, send);
+	for (const [name, handler] of Object.entries(buildRoutes(options, logger, send))) ctx.webServer.register({
+		kind: "exact",
+		path: `${ROUTE_BASE}/${name}`,
+		handler: guard(handler)
 	});
 }
 //#endregion
@@ -1221,4 +1535,4 @@ function apply(ctx, config) {
 	});
 }
 //#endregion
-export { ADDED_ROWS, BUNDLED_SKILL_ROOT, CONFIG_DELTAS, Config, DEFAULT_MCP_COMMAND, INPUT_SCHEMA_PROFILES, INSTALL_PHASES, JobCancelled, NPM, OUTPUT_SCHEMA_PROFILES, PLAN_MODE_SECTION, REA_INSTALL_DIR, REA_PACKAGE, REA_PINNED_VERSION, REA_PRESET_ID, REA_SKILL_DIR, REA_SKILL_NAME, ROUTE_BASE, SETTINGS_NS, SKILL_PHASES, apply, configWith, createJobBoard, createManager, createPresetRegistrar, emptyRuntime, inject, managerPaths, name, npmEnv, probeInstall, probeRuntime, probeSkill, reaMcpArgs, reaMcpEnv, reaMcpLaunch, reaPresetDefinition, reaSkillDirs, registerReaRoutes, safeVersion, spawnRunner, statusPayload };
+export { ADDED_ROWS, BUNDLED_SKILL_ROOT, CONFIG_DELTAS, Config, DEFAULT_MCP_COMMAND, INPUT_SCHEMA_PROFILES, INSTALL_PHASES, JobCancelled, NPM, OUTPUT_SCHEMA_PROFILES, PLAN_MODE_SECTION, REA_INSTALL_DIR, REA_PACKAGE, REA_PINNED_VERSION, REA_PRESET_ID, REA_SKILL_DIR, REA_SKILL_NAME, REVERSE_DEFAULT_REPO, REVERSE_DIR, REVERSE_PHASES, REVERSE_TREE_DIR, ROUTE_BASE, SETTINGS_NS, SKILL_PHASES, apply, configWith, createJobBoard, createManager, createPresetRegistrar, discoverSkillGroups, emptyRuntime, inject, managerPaths, name, npmEnv, presetSkillDirs, probeInstall, probeReverse, probeRuntime, probeSkill, reaMcpArgs, reaMcpEnv, reaMcpLaunch, reaPresetDefinition, reaSkillDirs, registerReaRoutes, reversePaths, reverseSkillDirs, runReverseSkillJob, safeVersion, spawnRunner, statusPayload };