@duke-dsh-plugins/dsh-model-prompt-injector 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 duke
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,69 @@
+# dsh-model-prompt-injector
+
+为 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)（DSH）中**本地已配置的模型**追加系统提示词的插件：按 `provider/model` 精确匹配（或 `provider/*` 服务商级通配）把规则文本注入到**系统提示词末尾**，在设置面板中逐模型管理，规则**持久化保存、重启不丢**。
+
+## 功能
+
+- **按模型注入**：每次向模型发起请求时，命中规则的提示词追加到系统提示词末尾（内置段落排序之后，order 9950），对主会话、子代理（subagent / workflow）同样生效。
+- **两级规则**：`provider/*` 服务商级规则对该服务商所有模型生效；`provider/model` 模型级规则只对该模型生效；两者同时存在时按「服务商级 → 模型级」顺序叠加。
+- **设置页管理**：设置 → 「模型提示词」页自动列出本地已配置的服务商与模型（与「模型」设置页同一数据源），逐行添加/编辑/清除，已注入的条目带徽标与内容预览。
+- **持久化**：规则保存在 `<DSH_HOME>/model-prompt-injector/config.json`（默认 `~/.dsh/model-prompt-injector/config.json`），重启 DSH 后自动恢复。
+- **即时生效**：保存规则后，下一次模型请求即携带新提示词，无需重启。
+
+## 安装（标准 DSH bundle）
+
+```bash
+dsh plugin --profile web add @duke-dsh-plugins/dsh-model-prompt-injector --registry=https://registry.npmjs.org
+```
+
+> 显式指定 npmjs registry，避免被本地/镜像 registry 配置带偏。安装后**重启 DSH**（Host 加载、typert 注册、client bundle 注入都在启动时发生），设置面板出现「模型提示词」页。
+
+卸载：
+
+```bash
+dsh plugin --profile web remove @duke-dsh-plugins/dsh-model-prompt-injector
+```
+
+## 使用
+
+1. 打开 **设置 → 模型提示词**（在「模型」页之后）。
+2. 页面列出本地已配置的服务商卡片；每张卡片第一行是「所有模型（服务商级）」，其下是该服务商配置中的每个模型。
+3. 点击目标行的「添加提示词 / 编辑」，在文本框中编写要追加的系统提示词，**保存**即时生效；「清除规则」删除该条。
+4. 规则匹配是**路由级精确匹配**（`provider/model`，大小写敏感，如 `minimax-cn/MiniMax-M3`）；模型 id 以「模型」设置页中配置的值为准。
+
+## 规则示例
+
+| 规则 key | 作用范围 |
+| --- | --- |
+| `deepseek-official/*` | DeepSeek 官方路由的所有模型 |
+| `minimax-cn/MiniMax-M3` | 仅 MiniMax-M3 |
+| `zai-coding-cn/glm-5.3` | 仅 GLM-5.3 |
+
+典型用法：给弱一些的模型追加一段严谨的工作协议（先验证再声称、最小改动、契约对齐……）以提升输出质量；给特定模型追加项目约定或输出格式要求。
+
+## 实现要点
+
+- 注入基于 `systemPrompt` 服务的**动态段落**：段落文本是每次模型 step 组装时求值的函数，运行时组装上下文携带 `agent`，从 `agent.options.provider/model` 取到本次请求的目标路由做规则匹配；未命中返回空串，渲染器自动丢弃空段落（零开销）。
+- 规则读写走插件自有的 Typert Remote 服务（`modelPromptInjector.getState / setRule`），Client 经 `ctx.remote.$mount` 自挂载命名空间后调用。
+
+## 开发
+
+```bash
+npm run check   # node --check index.js client.js typert.host.js
+```
+
+本地调试安装（link:，插件目录需已有 node_modules，见 AGENTS.md）：
+
+```bash
+npm install --no-save --registry=https://registry.npmjs.org @deepseek-ai/cordis@4.0.2 @deepseek-ai/dsh-typert-protocol@0.1.2-rc.1 zod@4.5.4
+dsh plugin --profile web add /path/to/dsh-model-prompt-injector
+# 重启 DSH 生效
+```
+
+## 发布
+
+打 `v*` 标签推送 GitHub，`.github/workflows/release.yml` 自动构建 tgz、发布 GitHub Release，并经 npm OIDC Trusted Publishing 发布到 npmjs（需在 npmjs.com 包设置中先配置 trusted publisher：本仓库 + `.github/workflows/release.yml`）。
+
+## License
+
+MIT © duke

package/client.js

@@ -0,0 +1,414 @@
+/**
+ * dsh-model-prompt-injector — Client half (web bundle).
+ *
+ * Rendered by the DSH web shell via `window.__ModuleLoader__.load`. Adds a
+ * "模型提示词" page to the Settings panel (`settings.section`, right after
+ * 模型): every locally configured provider card lists its models, each row
+ * edits that route's appended system-prompt rule, and a provider-wide
+ * `provider/*` row covers the whole provider.
+ *
+ * Host communication goes through the `modelPromptInjector` Remote namespace
+ * (`ctx.remote.modelPromptInjector.*`), published by the Host half in
+ * `index.js` and mounted below via `ctx.remote.$mount`.
+ *
+ * Style notes: no `?.` / `??` (conservative bundle syntax, same as
+ * dsh-agent-approval / dsh-token-stats); buttons are the official Button atom
+ * (`@deepseek-ai/dsh-client-ui-primitives`, backed by the
+ * `--dsw-alias-button-*` token family) so light/dark themes are automatic.
+ */
+window.__ModuleLoader__.load({
+  id: "@duke-dsh-plugins/dsh-model-prompt-injector",
+  factory: (require) => {
+    var module = { exports: {} };
+    var exports = module.exports;
+    Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+    const React = require("react");
+    const ui = require("@deepseek-ai/dsh-client-ui-primitives");
+
+    // ---- CSS (package-owned, DSH design tokens) ------------------------------
+    const CSS = `
+.mpi-page{display:flex;flex-direction:column;gap:16px;color:var(--dsw-alias-label-primary);font-size:13px;max-width:860px}
+.mpi-intro{margin:0;color:var(--dsw-alias-label-secondary);line-height:1.7}
+.mpi-provider{border:1px solid var(--dsw-alias-border-l1);border-radius:10px;padding:12px 14px;background:var(--dsw-alias-bg-layer-1);display:flex;flex-direction:column;gap:6px}
+.mpi-provider-head{display:flex;align-items:baseline;gap:8px;padding-bottom:4px}
+.mpi-provider-name{font-weight:600;font-size:14px}
+.mpi-id{color:var(--dsw-alias-label-secondary);font-family:monospace;font-size:12px}
+.mpi-state{margin-left:auto;font-size:11px}
+.mpi-state-on{color:var(--dsw-alias-state-success-primary)}
+.mpi-state-off{color:var(--dsw-alias-label-secondary)}
+.mpi-empty{margin:4px 0 0;color:var(--dsw-alias-label-secondary);font-size:12px}
+.mpi-error{margin:4px 0 0;color:var(--dsw-alias-state-error-primary);font-size:12px}
+.mpi-headrow{display:flex;align-items:center;justify-content:space-between;gap:8px}
+.mpi-row{border-top:1px solid var(--dsw-alias-border-l1);padding-top:8px;padding-bottom:2px}
+.mpi-row-head{display:flex;align-items:center;justify-content:space-between;gap:8px}
+.mpi-row-title{display:flex;align-items:baseline;gap:8px;min-width:0;flex-wrap:wrap}
+.mpi-badge{font-size:11px;padding:1px 8px;border-radius:999px;background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2)}
+.mpi-preview{margin:6px 0 0;font-size:12px;color:var(--dsw-alias-label-secondary);white-space:pre-wrap;word-break:break-word;display:-webkit-box;-webkit-line-clamp:3;-webkit-box-orient:vertical;overflow:hidden}
+.mpi-editor{margin-top:8px;display:flex;flex-direction:column;gap:8px}
+.mpi-textarea{font:inherit;font-size:13px;line-height:1.6;color:var(--dsw-alias-label-primary);background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:8px 10px;resize:vertical;min-height:96px}
+.mpi-textarea:focus{outline:none;border-color:var(--dsw-alias-border-l3)}
+.mpi-actions{display:flex;gap:8px;align-items:center}
+
+/* Settings nav icon: DSH 0.1.x settings.section only projects id/order/
+   label, and the settings shell paints a generic gear for every external
+   section (client-ui-settings-general's navIcon()). registerSettingsNavIcon
+   marks our own nav row; hide the shell's gear and draw the
+   message-square-plus Lucide glyph as a currentColor mask so it follows the
+   native nav hover/active colors without changing the shell's icon rhythm. */
+[data-dsh-model-prompt-injector-settings-nav]>svg:first-child{display:none}
+[data-dsh-model-prompt-injector-settings-nav]::before{content:'';flex:none;width:16px;height:16px;background:currentColor;-webkit-mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='24' height='24' viewBox='0 0 24 24' fill='none' stroke='black' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M21 15a2 2 0 0 1-2 2H7l-4 4V5a2 2 0 0 1 2-2h14a2 2 0 0 1 2 2z'/%3E%3Cpath d='M12 7v6'/%3E%3Cpath d='M9 10h6'/%3E%3C/svg%3E") center/contain no-repeat;mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='24' height='24' viewBox='0 0 24 24' fill='none' stroke='black' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M21 15a2 2 0 0 1-2 2H7l-4 4V5a2 2 0 0 1 2-2h14a2 2 0 0 1 2 2z'/%3E%3Cpath d='M12 7v6'/%3E%3Cpath d='M9 10h6'/%3E%3C/svg%3E") center/contain no-repeat}
+`;
+
+    // ---- Settings nav icon ----------------------------------------------------
+    // DSH 0.1.x does not yet carry an icon through the settings.section
+    // registration contract: its shell projects only id/order/label and paints
+    // a generic gear for every external section. Mark only this plugin's
+    // localized nav row so the CSS above can replace the fallback gear; the
+    // disposer clears the marker for HMR / plugin disable.
+    const SETTINGS_LABEL = "模型提示词";
+    const SETTINGS_NAV_MARKER = "data-dsh-model-prompt-injector-settings-nav";
+
+    function registerSettingsNavIcon(label) {
+      let disposed = false;
+      const sync = function () {
+        if (disposed) return;
+        const currentLabel = String(label).trim();
+        const buttons = document.querySelectorAll('[role="dialog"] nav button');
+        for (let i = 0; i < buttons.length; i++) {
+          const button = buttons[i];
+          const text = button.textContent ? button.textContent.trim() : "";
+          if (currentLabel.length > 0 && text === currentLabel) {
+            button.setAttribute(SETTINGS_NAV_MARKER, "");
+          } else {
+            button.removeAttribute(SETTINGS_NAV_MARKER);
+          }
+        }
+      };
+      sync();
+      const observer = new MutationObserver(sync);
+      observer.observe(document.body, { childList: true, subtree: true, characterData: true });
+      return function () {
+        disposed = true;
+        observer.disconnect();
+        const marked = document.querySelectorAll("[" + SETTINGS_NAV_MARKER + "]");
+        for (let i = 0; i < marked.length; i++) marked[i].removeAttribute(SETTINGS_NAV_MARKER);
+      };
+    }
+
+    // ---- Client Remote contribution -------------------------------------------
+    // The browser-side `remote.modelPromptInjector` service only exists after
+    // this module mounts its namespace via ctx.remote.$mount(): dsh-api-remotes'
+    // client assembly mounts only the official namespaces, so a plugin must
+    // mount its own. Mirrors the invocations in typert.host.js. zod is not
+    // requirable in the browser module loader, so codecs use passthrough
+    // schemas — the runtime contract only requires typeSymbol + schema.parse().
+    const passthrough = () => ({ parse: (v) => v });
+    const result = (typeSymbol) => ({ mode: "strict", typeSymbol, schema: passthrough() });
+    const CLIENT_REMOTE = {
+      package: "dsh-model-prompt-injector",
+      descriptors: [
+        {
+          id: "dsh-model-prompt-injector#modelPromptInjector/getState",
+          service: "modelPromptInjector",
+          namespace: "modelPromptInjector",
+          method: "getState",
+          invocation: { kind: "direct" },
+          parameters: [],
+          result: result("dsh-model-prompt-injector#ModelPromptInjectorStateResult"),
+        },
+        {
+          id: "dsh-model-prompt-injector#modelPromptInjector/setRule",
+          service: "modelPromptInjector",
+          namespace: "modelPromptInjector",
+          method: "setRule",
+          invocation: { kind: "direct" },
+          parameters: [
+            {
+              name: "request",
+              wire: "request",
+              source: "json",
+              codec: {
+                mode: "strict",
+                typeSymbol: "dsh-model-prompt-injector#ModelPromptInjectorSetRuleRequest",
+                schema: passthrough(),
+              },
+            },
+          ],
+          result: result("dsh-model-prompt-injector#ModelPromptInjectorSetRuleResult"),
+        },
+      ],
+    };
+
+    async function apply(ctx) {
+      // Mount the modelPromptInjector namespace before anything touches it;
+      // the mount's lifetime is bound to this plugin's context by $mount.
+      await ctx.remote.$mount(CLIENT_REMOTE);
+
+      const styleTag = document.createElement("style");
+      styleTag.textContent = CSS;
+      document.head.appendChild(styleTag);
+      ctx.effect(() => () => styleTag.remove());
+
+      // Mark our settings-nav row so the CSS above replaces the shell's
+      // fallback gear (no icon field exists in settings.section yet).
+      ctx.effect(() => registerSettingsNavIcon(SETTINGS_LABEL));
+
+      // ctx.get() reads the service without the property-accessor inject guard.
+      const remote = ctx.get("remote.modelPromptInjector");
+
+      // ---- helpers ------------------------------------------------------------
+
+      /**
+       * The Remote gateway returns `res.value` = the Host method's full
+       * `{ ok, value }` envelope; unwrap it (tolerate both shapes) and surface
+       * either error layer.
+       */
+      function pick(res) {
+        if (res && res.ok === false) {
+          const err = res.error || {};
+          throw new Error(err.message || err.code || "request failed");
+        }
+        const v = res && res.value;
+        if (v && typeof v === "object" && v.ok === false) {
+          const err = v.error || {};
+          throw new Error(err.message || err.code || "request failed");
+        }
+        if (v && typeof v === "object" && v.ok === true) return v.value;
+        return v;
+      }
+
+      const h = React.createElement;
+
+      /** Map rule key -> rule for O(1) row lookups. */
+      function rulesByKey(rules) {
+        const map = {};
+        for (let i = 0; i < rules.length; i++) {
+          const rule = rules[i];
+          if (rule && typeof rule.key === "string") map[rule.key] = rule;
+        }
+        return map;
+      }
+
+      // ---- rule editor (one row's textarea + actions) -------------------------
+
+      function RuleEditor(props) {
+        const [draft, setDraft] = React.useState(props.initial);
+        const [busy, setBusy] = React.useState(false);
+        const [error, setError] = React.useState("");
+        const save = function (prompt) {
+          setBusy(true);
+          setError("");
+          remote
+            .setRule({ provider: props.provider, model: props.model, prompt })
+            .then((res) => {
+              setBusy(false);
+              const value = pick(res) || {};
+              props.onSaved(Array.isArray(value.rules) ? value.rules : []);
+            })
+            .catch((e) => {
+              setBusy(false);
+              setError(e && e.message ? e.message : String(e));
+            });
+        };
+        return h(
+          "div",
+          { className: "mpi-editor" },
+          h("textarea", {
+            className: "mpi-textarea",
+            value: draft,
+            placeholder: "输入要追加到系统提示词末尾的内容…",
+            onChange: (event) => setDraft(event.target.value),
+          }),
+          error ? h("p", { className: "mpi-error" }, error) : null,
+          h(
+            "div",
+            { className: "mpi-actions" },
+            h(ui.Button, { variant: "primary", size: "sm", disabled: busy, onClick: () => save(draft) }, "保存"),
+            props.initial.length > 0
+              ? h(ui.Button, { variant: "outline", size: "sm", disabled: busy, onClick: () => save("") }, "清除规则")
+              : null,
+            h(ui.Button, { variant: "ghost", size: "sm", disabled: busy, onClick: props.onCancel }, "取消"),
+          ),
+        );
+      }
+
+      // ---- one rule row (provider-wide or one model) --------------------------
+
+      function RuleRow(props) {
+        const rule = props.rule;
+        const has = !!(rule && typeof rule.prompt === "string" && rule.prompt.length > 0);
+        return h(
+          "div",
+          { className: "mpi-row" },
+          h(
+            "div",
+            { className: "mpi-row-head" },
+            h(
+              "div",
+              { className: "mpi-row-title" },
+              h("span", null, props.title),
+              h("span", { className: "mpi-id" }, props.subtitle),
+              has ? h("span", { className: "mpi-badge" }, "已注入") : null,
+            ),
+            h(
+              ui.Button,
+              { variant: "ghost", size: "sm", onClick: () => props.onToggle(props.rowKey) },
+              props.open ? "收起" : has ? "编辑" : "添加提示词",
+            ),
+          ),
+          has && !props.open ? h("div", { className: "mpi-preview" }, rule.prompt) : null,
+          props.open
+            ? h(RuleEditor, {
+                provider: props.provider,
+                model: props.model,
+                initial: has ? rule.prompt : "",
+                onSaved: (rules) => {
+                  props.onSaved(rules);
+                  props.onToggle(props.rowKey);
+                },
+                onCancel: () => props.onToggle(props.rowKey),
+              })
+            : null,
+        );
+      }
+
+      // ---- one provider card ---------------------------------------------------
+
+      function ProviderCard(props) {
+        const info = props.info;
+        const rows = [];
+        const wildKey = info.provider + "/*";
+        rows.push(
+          h(RuleRow, {
+            key: wildKey,
+            rowKey: wildKey,
+            provider: info.provider,
+            model: "*",
+            title: "所有模型（服务商级）",
+            subtitle: wildKey,
+            rule: props.ruleMap[wildKey],
+            open: props.openKey === wildKey,
+            onToggle: props.onToggle,
+            onSaved: props.onSaved,
+          }),
+        );
+        const models = Array.isArray(info.models) ? info.models : [];
+        for (let i = 0; i < models.length; i++) {
+          const m = models[i];
+          const key = info.provider + "/" + m.id;
+          rows.push(
+            h(RuleRow, {
+              key,
+              rowKey: key,
+              provider: info.provider,
+              model: m.id,
+              title: m.name && m.name.length > 0 ? m.name : m.id,
+              subtitle: m.id,
+              rule: props.ruleMap[key],
+              open: props.openKey === key,
+              onToggle: props.onToggle,
+              onSaved: props.onSaved,
+            }),
+          );
+        }
+        return h(
+          "section",
+          { className: "mpi-provider" },
+          h(
+            "header",
+            { className: "mpi-provider-head" },
+            h("span", { className: "mpi-provider-name" }, info.displayName && info.displayName.length > 0 ? info.displayName : info.provider),
+            h("span", { className: "mpi-id" }, info.provider),
+            h("span", { className: "mpi-state " + (info.active ? "mpi-state-on" : "mpi-state-off") }, info.active ? "运行中" : "未激活"),
+          ),
+          rows,
+          models.length === 0
+            ? h("p", { className: "mpi-empty" }, "该服务商的设置中未找到 models 列表，可使用上方的服务商级规则。")
+            : null,
+        );
+      }
+
+      // ---- settings page (settings.section) -----------------------------------
+
+      function Section() {
+        const [state, setState] = React.useState({ loading: true, rules: [], providers: [], error: "" });
+        const [openKey, setOpenKey] = React.useState("");
+
+        const load = function () {
+          remote
+            .getState()
+            .then((res) => {
+              const value = pick(res) || {};
+              setState({
+                loading: false,
+                rules: Array.isArray(value.rules) ? value.rules : [],
+                providers: Array.isArray(value.providers) ? value.providers : [],
+                error: "",
+              });
+            })
+            .catch((e) => {
+              setState({ loading: false, rules: [], providers: [], error: "读取配置失败：" + (e && e.message ? e.message : String(e)) });
+            });
+        };
+
+        React.useEffect(load, []);
+
+        const applyRules = function (rules) {
+          setState((current) => ({ loading: false, rules, providers: current.providers, error: "" }));
+        };
+        const toggle = function (key) {
+          setOpenKey((current) => (current === key ? "" : key));
+        };
+
+        let body;
+        if (state.loading) {
+          body = h("p", { className: "mpi-empty" }, "正在读取本地模型配置…");
+        } else if (state.error) {
+          body = h("p", { className: "mpi-error" }, state.error);
+        } else if (state.providers.length === 0) {
+          body = h("p", { className: "mpi-empty" }, "未找到本地已配置的服务商，请先在「模型」设置中添加服务商与模型。");
+        } else {
+          const ruleMap = rulesByKey(state.rules);
+          body = state.providers.map((info) =>
+            h(ProviderCard, {
+              key: info.provider,
+              info,
+              ruleMap,
+              openKey,
+              onToggle: toggle,
+              onSaved: applyRules,
+            }),
+          );
+        }
+
+        return h(
+          "div",
+          { className: "mpi-page" },
+          h(
+            "p",
+            { className: "mpi-intro" },
+            "为本地已配置的模型追加系统提示词：每次向该模型发起请求时，规则内容会注入到系统提示词的末尾。服务商级规则对该服务商的所有模型生效，并与模型级规则按顺序叠加。规则持久化保存，DSH 重启后仍然有效。",
+          ),
+          h(
+            "div",
+            { className: "mpi-headrow" },
+            h("span", { className: "mpi-empty" }, state.loading ? "" : state.rules.length + " 条规则"),
+            h(ui.Button, { variant: "ghost", size: "sm", onClick: load }, "刷新"),
+          ),
+          body,
+        );
+      }
+
+      ctx.slots.inject("settings.section", () =>
+        ctx.slots.register(
+          { name: "settings.section", id: "model-prompt-injector", order: 12, label: () => SETTINGS_LABEL },
+          () => h(Section),
+        ),
+      );
+    }
+
+    exports.apply = apply;
+    exports.inject = ["slots", "remote"];
+    return exports;
+  },
+});

package/cordis.patch.yml

@@ -0,0 +1,5 @@
+# dsh bundle patch: inserts this plugin into a profile's layer stack.
+# Only an insert row — this plugin owns no config overrides.
+- insert:
+  - id: model-prompt-injector
+    name: '@duke-dsh-plugins/dsh-model-prompt-injector'

package/index.js

@@ -0,0 +1,358 @@
+/**
+ * dsh-model-prompt-injector — Host half.
+ *
+ * A Cordis "class plugin": this module exports `ModelPromptInjectorService`
+ * extending `TypertRemoteService`. The DSH loader instantiates the class and
+ * registers it as the `modelPromptInjector` service; the Typert Gateway
+ * exposes its Remote-marked methods to the browser Client half under the
+ * `modelPromptInjector` Remote namespace.
+ *
+ * What it does:
+ *
+ *   1. INJECT — registers ONE dynamic system-prompt section
+ *      (`model-prompt-injector:extra`, order 9950 — after every shipped
+ *      section, so rule text lands at the END of the system prompt). The
+ *      section text is a function evaluated before EVERY model step; the
+ *      runtime assembly context carries the agent (`assembleContextFor`
+ *      returns `{ agent, scope, signal }`), so `context.agent.options`
+ *      tells the exact provider/model the upcoming request targets. Rules
+ *      matching that route are joined and returned; unmatched routes return
+ *      "" and the prompt renderer drops empty sections entirely.
+ *
+ *   2. PERSIST — rules live in `<DSH_HOME>/model-prompt-injector/config.json`
+ *      (outside any profile's node_modules, so reinstalls and upgrades never
+ *      touch it) and are hydrated at init: rule edits survive DSH restarts.
+ *
+ *   3. SERVE  — two Remote methods for the Settings page: `getState`
+ *      (rule table + the directory of LOCALLY CONFIGURED providers/models,
+ *      enumerated exactly like the Models settings page: the configurable
+ *      provider directory + each namespace's `[...settingsPath, "models"]`)
+ *      and `setRule` (upsert; a blank prompt deletes).
+ *
+ * Rule matching:
+ *   - key shape `provider/model` targets one exact model (ids are
+ *     case-sensitive route ids, e.g. `minimax-cn/MiniMax-M3`);
+ *   - key shape `provider/*` is a provider-wide rule applying to every model
+ *     of that provider. Both kinds stack, provider-wide first (the `*` key
+ *     sorts before any model id in the table's ascending key order).
+ *
+ * Mount on the HOST plane (the package's cordis.patch.yml insert row): the
+ * section registration must live in the root scope so EVERY agent's assembly
+ * (main sessions, subagents, workflow children) sees it.
+ */
+
+import { Remote, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
+import { Service } from "@deepseek-ai/cordis";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join } from "node:path";
+
+// ---- constants --------------------------------------------------------------
+
+/** The registered prompt section name (unique; nobody else shadows it). */
+const SECTION_NAME = "model-prompt-injector:extra";
+/**
+ * Section placement: the shipped SECTION_ORDERS max out at
+ * STRUCTURED_OUTPUT = 9900 (see @deepseek-ai/dsh-system-prompt), so 9950
+ * appends rule text at the very end of the system prompt.
+ */
+const SECTION_ORDER = 9950;
+
+/**
+ * On-disk persistence for the rule table. Lives under DSH_HOME, outside any
+ * profile's node_modules so reinstalls and upgrades never touch it.
+ */
+const DATA_DIR = join(process.env.DSH_HOME || join(homedir(), ".dsh"), "model-prompt-injector");
+const CONFIG_FILE = join(DATA_DIR, "config.json");
+
+/** Rule key = `provider/model`; `*` as model marks the provider-wide rule. */
+function ruleKey(provider, model) {
+  return provider + "/" + model;
+}
+
+// ---- helpers ----------------------------------------------------------------
+
+/**
+ * Mark one instance method as a Remote export without relying on decorator
+ * syntax (Node ESM does not support the proposal decorators here). We drive
+ * the same `Remote(name)` decorator manually through a synthetic decorator
+ * context and run the registered initializers against the instance.
+ */
+function markRemoteMethod(instance, method, exportName) {
+  const decorator = Remote(method, undefined);
+  const initializers = [];
+  decorator(undefined, {
+    kind: "method",
+    name: method,
+    static: false,
+    private: false,
+    addInitializer: (fn) => initializers.push(fn),
+  });
+  for (const fn of initializers) fn.call(instance);
+}
+
+/** Coerce one persisted/remote record into a clean rule, or null when invalid. */
+function sanitizeRule(input) {
+  if (!input || typeof input !== "object") return null;
+  const provider = typeof input.provider === "string" ? input.provider.trim() : "";
+  const model = typeof input.model === "string" ? input.model.trim() : "";
+  const prompt = typeof input.prompt === "string" ? input.prompt : "";
+  if (provider.length === 0 || model.length === 0 || prompt.trim().length === 0) return null;
+  const updatedAt = typeof input.updatedAt === "string" ? input.updatedAt : new Date().toISOString();
+  return { key: ruleKey(provider, model), provider, model, prompt, updatedAt };
+}
+
+/** Defensive path navigation over a plain settings value (never throws). */
+function getPath(value, path) {
+  let node = value;
+  for (const key of path) {
+    if (node === null || typeof node !== "object") return undefined;
+    node = node[key];
+  }
+  return node;
+}
+
+/** Best-effort error text. */
+function errText(e) {
+  return e && typeof e.message === "string" ? e.message : String(e);
+}
+
+// ---- service ----------------------------------------------------------------
+
+export class ModelPromptInjectorService extends TypertRemoteService {
+  /**
+   * No hard dependencies: every capability surface (`systemPrompt` for the
+   * injection, `llm`/`settings` for the directory) is mounted optionally so
+   * the plugin keeps serving its settings page (and stored rules) even when
+   * one registry is absent from the composition.
+   */
+
+  /**
+   * Cordis instantiates class plugins with `new Callback(ctx, config)` — the
+   * second argument is the plugin config, NOT the service key. Pass the exact
+   * service key to `super()`.
+   */
+  constructor(ctx, config) {
+    super(ctx, "modelPromptInjector");
+  }
+
+  /**
+   * Cordis class-plugin initializer: mark the Remote methods, hydrate the
+   * persisted rule table, then mount the injection section.
+   */
+  async [Service.init]() {
+    markRemoteMethod(this, "getState", "getState");
+    markRemoteMethod(this, "setRule", "setRule");
+
+    /**
+     * The rule table: [{ key, provider, model, prompt, updatedAt }], kept
+     * ascending by key so a provider-wide `provider/*` entry (0x2A) always
+     * sorts before that provider's exact-model entries and therefore injects
+     * first. Persisted in config.json.
+     */
+    this._rules = [];
+
+    await this._loadPersisted();
+
+    // The injection itself: one dynamic section in the ROOT scope, so every
+    // agent's per-step assembly (main sessions, subagents, workflow children)
+    // evaluates it. `ctx.inject` mounts the contribution only while the
+    // systemPrompt registry is composed and unwinds cleanly with it.
+    this.ctx.inject(["systemPrompt"], (scope) => {
+      scope.systemPrompt.section({
+        name: SECTION_NAME,
+        order: SECTION_ORDER,
+        text: (context) => this._extraPrompt(context),
+      });
+    });
+  }
+
+  // ---- injection --------------------------------------------------------------
+
+  /**
+   * Section text, evaluated before every model step. The runtime assembly
+   * context carries the agent (`assembleContextFor` returns
+   * `{ agent, scope, signal }`), and `agent.options.provider/model` is the
+   * route the upcoming request targets — the same source the loop builds the
+   * (deep-frozen) request header from, so matching here is exact. Returns ""
+   * for unmatched routes: the prompt renderer drops empty sections, so
+   * unmatched models pay nothing. Never throws — a section evaluation failure
+   * would otherwise poison the whole assembly.
+   */
+  _extraPrompt(context) {
+    try {
+      const agent = context ? context.agent : undefined;
+      const options = agent ? agent.options : undefined;
+      if (!options) return "";
+      const provider = options.provider;
+      const model = options.model;
+      if (typeof provider !== "string" || provider.length === 0) return "";
+      if (typeof model !== "string" || model.length === 0) return "";
+      const parts = [];
+      for (const rule of this._rules) {
+        if (rule.provider !== provider) continue;
+        if (rule.model === "*" || rule.model === model) parts.push(rule.prompt);
+      }
+      return parts.join("\n\n");
+    } catch (e) {
+      return "";
+    }
+  }
+
+  // ---- persistence ----------------------------------------------------------
+
+  /** Hydrate the rule table from config.json (never throws). */
+  async _loadPersisted() {
+    try {
+      const raw = await readFile(CONFIG_FILE, "utf8");
+      const data = JSON.parse(raw);
+      if (data && Array.isArray(data.rules)) {
+        const clean = [];
+        for (const entry of data.rules) {
+          const rule = sanitizeRule(entry);
+          if (rule !== null) clean.push(rule);
+        }
+        clean.sort((a, b) => (a.key < b.key ? -1 : a.key > b.key ? 1 : 0));
+        this._rules = clean;
+      }
+    } catch (e) {
+      /* first run or a corrupt file both start empty */
+    }
+  }
+
+  /**
+   * Persist the rule table (fire-and-forget, best-effort): a persistence
+   * failure must never break the settings UI or the injection path — the
+   * in-memory table stays authoritative for this process either way.
+   */
+  _persist() {
+    const payload = JSON.stringify({ version: 1, rules: this._rules }, null, 2);
+    mkdir(DATA_DIR, { recursive: true })
+      .then(() => writeFile(CONFIG_FILE, payload, "utf8"))
+      .catch(() => {});
+  }
+
+  /** Detached, display-ordered copy of the rule table. */
+  _rulesSnapshot() {
+    return this._rules.map((rule) => ({
+      key: rule.key,
+      provider: rule.provider,
+      model: rule.model,
+      prompt: rule.prompt,
+      updatedAt: rule.updatedAt,
+    }));
+  }
+
+  // ---- Remote methods ---------------------------------------------------------
+
+  /**
+   * Settings page snapshot: the rule table plus the directory of locally
+   * configured providers/models (see _directory).
+   */
+  async getState() {
+    return { ok: true, value: { rules: this._rulesSnapshot(), providers: this._directory() } };
+  }
+
+  /**
+   * Upsert one rule; a blank prompt deletes it. Returns the full table so the
+   * client can replace its state wholesale.
+   */
+  async setRule(request) {
+    try {
+      const provider = typeof request.provider === "string" ? request.provider.trim() : "";
+      const model = typeof request.model === "string" ? request.model.trim() : "";
+      const prompt = typeof request.prompt === "string" ? request.prompt.trim() : "";
+      if (provider.length === 0 || model.length === 0) {
+        return { ok: false, error: { code: "invalid-argument", message: "provider and model are required" } };
+      }
+      const key = ruleKey(provider, model);
+      const index = this._rules.findIndex((rule) => rule.key === key);
+      if (prompt.length === 0) {
+        if (index !== -1) this._rules.splice(index, 1);
+      } else {
+        const next = { key, provider, model, prompt, updatedAt: new Date().toISOString() };
+        if (index === -1) this._rules.push(next);
+        else this._rules[index] = next;
+        this._rules.sort((a, b) => (a.key < b.key ? -1 : a.key > b.key ? 1 : 0));
+      }
+      this._persist();
+      return { ok: true, value: { rules: this._rulesSnapshot() } };
+    } catch (e) {
+      return { ok: false, error: { code: "internal", message: errText(e) } };
+    }
+  }
+
+  // ---- provider/model directory ---------------------------------------------
+
+  /**
+   * The directory of LOCALLY CONFIGURED providers and their model catalogs,
+   * enumerated exactly like the Models settings page: walk the configurable
+   * provider directory, keep entries whose settings namespace is registered
+   * and whose settingsPath resolves, then read each entry's model list at
+   * `[...settingsPath, "models"]`. Active routes (a mounted adapter) are
+   * flagged via `llm.listProviders()`. Only detached leaf values cross the
+   * wire; a missing `llm`/`settings` registry degrades to an empty list.
+   */
+  _directory() {
+    const out = [];
+    const llm = this.ctx.get("llm");
+    if (llm === undefined) return out;
+    const settings = this.ctx.get("settings");
+    const active = new Set();
+    try {
+      for (const info of llm.listProviders()) {
+        if (info && typeof info.id === "string") active.add(info.id);
+      }
+    } catch (e) {
+      /* an empty active set only affects the badge */
+    }
+    let entries = [];
+    try {
+      entries = llm.listConfigurableProviders();
+    } catch (e) {
+      return out;
+    }
+    for (const entry of entries) {
+      try {
+        const settingsPath = Array.isArray(entry.settingsPath) ? entry.settingsPath : [];
+        let value;
+        if (settings !== undefined) {
+          try {
+            value = settings.get(entry.settingsNs);
+          } catch (e) {
+            value = undefined;
+          }
+        }
+        const configured =
+          value !== undefined && (settingsPath.length === 0 || getPath(value, settingsPath) !== undefined);
+        if (!configured) continue;
+        const rawModels = getPath(value, settingsPath.concat(["models"]));
+        const models = [];
+        if (Array.isArray(rawModels)) {
+          for (const item of rawModels) {
+            if (item && typeof item === "object" && typeof item.id === "string" && item.id.length > 0) {
+              models.push({
+                id: item.id,
+                name: typeof item.name === "string" && item.name.length > 0 ? item.name : item.id,
+              });
+            }
+          }
+        }
+        out.push({
+          provider: String(entry.provider),
+          displayName:
+            typeof entry.displayName === "string" && entry.displayName.length > 0
+              ? entry.displayName
+              : String(entry.provider),
+          active: active.has(entry.provider),
+          models,
+        });
+      } catch (e) {
+        /* one unreadable entry does not sink the directory */
+      }
+    }
+    return out;
+  }
+}
+
+export default ModelPromptInjectorService;

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "@duke-dsh-plugins/dsh-model-prompt-injector",
+  "version": "1.0.0",
+  "description": "为 DeepSeek Harness 中本地已配置的模型追加系统提示词：按 provider/model 精确匹配或服务商级通配（provider/*）注入到系统提示词末尾，设置面板逐模型管理，规则持久化、重启不丢。",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/MoonlitDropOfBlood/dsh-model-prompt-injector.git"
+  },
+  "homepage": "https://github.com/MoonlitDropOfBlood/dsh-model-prompt-injector",
+  "bugs": { "url": "https://github.com/MoonlitDropOfBlood/dsh-model-prompt-injector/issues" },
+  "publishConfig": { "access": "public" },
+  "keywords": [
+    "dsh",
+    "deepseek-harness",
+    "plugin",
+    "system-prompt",
+    "prompt",
+    "model",
+    "persona",
+    "llm"
+  ],
+  "type": "module",
+  "main": "index.js",
+  "exports": {
+    ".": "./index.js",
+    "./client": "./client.js",
+    "./typert": "./typert.host.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "index.js",
+    "client.js",
+    "typert.host.js",
+    "cordis.patch.yml",
+    "README.md",
+    "LICENSE"
+  ],
+  "license": "MIT",
+  "dsh": {
+    "bundle": { "patch": "./cordis.patch.yml" },
+    "client": {
+      "platform": "web"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "4.0.1 || 4.0.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.1-rc.2 || 0.1.2-rc.1"
+  },
+  "dependencies": {
+    "zod": "^4.4.3"
+  },
+  "scripts": {
+    "check": "node --check index.js && node --check client.js && node --check typert.host.js",
+    "test": "node --check index.js && node --check client.js && node --check typert.host.js"
+  }
+}

package/typert.host.js

@@ -0,0 +1,216 @@
+/**
+ * dsh-model-prompt-injector — Typert Host manifest.
+ *
+ * Hand-written TYPERT manifest (the format the DSH typert-loader consumes
+ * from the package's `./typert` export). It describes the
+ * `modelPromptInjector` Remote service the Host half publishes so the
+ * browser Client half can call it through `ctx.remote.modelPromptInjector.*`
+ * (after mounting the namespace via `ctx.remote.$mount` — see client.js).
+ *
+ * Keep the invocation ids, service/namespace names and method names in sync
+ * with `index.js` (ModelPromptInjectorService) and `client.js`.
+ *
+ * Result schemas are STRICT: every Host return value must match exactly
+ * (fields present, types correct), or the gateway validation fails.
+ */
+
+import { z } from "zod";
+
+// ---- shared shapes ----------------------------------------------------------
+
+const ruleSchema = z
+  .object({
+    key: z.string(),
+    provider: z.string(),
+    model: z.string(),
+    prompt: z.string(),
+    updatedAt: z.string(),
+  })
+  .readonly();
+
+const targetModelSchema = z
+  .object({
+    id: z.string(),
+    name: z.string(),
+  })
+  .readonly();
+
+const targetProviderSchema = z
+  .object({
+    provider: z.string(),
+    displayName: z.string(),
+    active: z.boolean(),
+    models: z.array(targetModelSchema).readonly(),
+  })
+  .readonly();
+
+const stateValueSchema = z
+  .object({
+    rules: z.array(ruleSchema).readonly(),
+    providers: z.array(targetProviderSchema).readonly(),
+  })
+  .readonly();
+
+const rulesValueSchema = z
+  .object({
+    rules: z.array(ruleSchema).readonly(),
+  })
+  .readonly();
+
+/** The shared ok|error envelope. */
+function okResult(valueSchema) {
+  return z.union([
+    z
+      .object({
+        ok: z.literal(true).readonly(),
+        value: valueSchema.readonly(),
+      })
+      .readonly(),
+    z
+      .object({
+        ok: z.literal(false).readonly(),
+        error: z
+          .object({
+            code: z.string().readonly(),
+            message: z.string().readonly().optional(),
+          })
+          .readonly(),
+      })
+      .readonly(),
+  ]);
+}
+
+const stateResultSchema = okResult(stateValueSchema);
+const setRuleResultSchema = okResult(rulesValueSchema);
+
+// ---- per-invocation parameter schemas ---------------------------------------
+
+const _modelPromptInjector_setRule_parameter_0$schema = z.object({
+  provider: z.string(),
+  model: z.string(),
+  prompt: z.string(),
+});
+
+export const TYPERT = {
+  package: "@duke-dsh-plugins/dsh-model-prompt-injector",
+  face: "host",
+  schemas: [],
+  invocations: [
+    {
+      id: "dsh-model-prompt-injector#modelPromptInjector/getState",
+      service: "modelPromptInjector",
+      namespace: "modelPromptInjector",
+      method: "getState",
+      invocation: { kind: "direct" },
+      parameters: [],
+      result: {
+        mode: "strict",
+        typeSymbol: "dsh-model-prompt-injector#ModelPromptInjectorStateResult",
+        schema: stateResultSchema,
+      },
+      sourceLocation: { file: "index.js", line: 1, column: 1 },
+    },
+    {
+      id: "dsh-model-prompt-injector#modelPromptInjector/setRule",
+      service: "modelPromptInjector",
+      namespace: "modelPromptInjector",
+      method: "setRule",
+      invocation: { kind: "direct" },
+      parameters: [
+        {
+          name: "request",
+          wire: "request",
+          source: "json",
+          codec: {
+            mode: "strict",
+            typeSymbol: "dsh-model-prompt-injector#ModelPromptInjectorSetRuleRequest",
+            schema: _modelPromptInjector_setRule_parameter_0$schema,
+          },
+        },
+      ],
+      result: {
+        mode: "strict",
+        typeSymbol: "dsh-model-prompt-injector#ModelPromptInjectorSetRuleResult",
+        schema: setRuleResultSchema,
+      },
+      sourceLocation: { file: "index.js", line: 1, column: 1 },
+    },
+  ],
+  model: {
+    services: [
+      {
+        description:
+          "Per-model system-prompt injection service: appends persisted per-route rules (exact provider/model or provider-wide provider/*) to the end of the system prompt on every matching model step, and serves the Settings page state (rule table + locally configured provider/model directory) to the DeepSeek Harness web UI.",
+        summary: "Per-model system-prompt injection service.",
+        tags: [],
+        jsDoc:
+          "/**\n * Per-model system-prompt injection: persisted rules appended to the system prompt tail per matching route.\n */",
+        key: "modelPromptInjector",
+        exportName: "ModelPromptInjectorService",
+        members: [
+          {
+            kind: "method",
+            name: "getState",
+            signature: "@Remote('getState') async getState(): Promise<ModelPromptInjectorStateResult>",
+            summary: "Snapshot for the Settings page (rule table + configured provider/model directory).",
+            jsDoc:
+              "/**\n * Return the persisted rule table plus the directory of locally configured providers and their models.\n * @returns success or a business failure.\n */",
+          },
+          {
+            kind: "method",
+            name: "setRule",
+            signature:
+              "@Remote('setRule') async setRule(request: ModelPromptInjectorSetRuleRequest): Promise<ModelPromptInjectorSetRuleResult>",
+            summary: "Upsert one rule (blank prompt deletes it) and persist the table.",
+            jsDoc:
+              "/**\n * Upsert the rule for one exact provider/model or a provider-wide model of \"*\"; a blank prompt deletes the rule.\n * @param request - { provider, model, prompt }.\n * @returns the full rule table.\n */",
+          },
+        ],
+        types: [
+          {
+            name: "ModelPromptInjectorRule",
+            declaration:
+              "export interface ModelPromptInjectorRule {\n    readonly key: string;\n    readonly provider: string;\n    readonly model: string;\n    readonly prompt: string;\n    readonly updatedAt: string;\n}",
+          },
+          {
+            name: "ModelPromptInjectorTargetModel",
+            declaration:
+              "export interface ModelPromptInjectorTargetModel {\n    readonly id: string;\n    readonly name: string;\n}",
+          },
+          {
+            name: "ModelPromptInjectorTargetProvider",
+            declaration:
+              "export interface ModelPromptInjectorTargetProvider {\n    readonly provider: string;\n    readonly displayName: string;\n    readonly active: boolean;\n    readonly models: readonly ModelPromptInjectorTargetModel[];\n}",
+          },
+          {
+            name: "ModelPromptInjectorSetRuleRequest",
+            declaration:
+              "export interface ModelPromptInjectorSetRuleRequest {\n    readonly provider: string;\n    readonly model: string;\n    readonly prompt: string;\n}",
+          },
+          {
+            name: "ModelPromptInjectorStateValue",
+            declaration:
+              "export interface ModelPromptInjectorStateValue {\n    readonly rules: readonly ModelPromptInjectorRule[];\n    readonly providers: readonly ModelPromptInjectorTargetProvider[];\n}",
+          },
+          {
+            name: "ModelPromptInjectorStateResult",
+            declaration:
+              "export type ModelPromptInjectorStateResult = { ok: true; value: ModelPromptInjectorStateValue } | { ok: false; error: { code: string; message?: string } };",
+          },
+          {
+            name: "ModelPromptInjectorRulesValue",
+            declaration:
+              "export interface ModelPromptInjectorRulesValue {\n    readonly rules: readonly ModelPromptInjectorRule[];\n}",
+          },
+          {
+            name: "ModelPromptInjectorSetRuleResult",
+            declaration:
+              "export type ModelPromptInjectorSetRuleResult = { ok: true; value: ModelPromptInjectorRulesValue } | { ok: false; error: { code: string; message?: string } };",
+          },
+        ],
+      },
+    ],
+    events: [],
+    objects: [],
+  },
+};