@fooksky/lodestar 0.2.3 → 0.2.5

package/README.md

@@ -6,9 +6,9 @@ Lodestar 是 DeepSeek Harness（DSH）的开发工作流插件，帮助 Agent
 
 - **`lodestar` skill**：指导需求澄清、设计取舍、授权判断、任务组织和验收。
 - **`lodestar_change` 工具**：维护 change 的文档版本、决定、验收项、执行引用、验证记录及流程状态，校验阶段前置条件。
-- **可选「Lodestar · 开发工作流」模式**：为会话添加流程提示，复用部署已有工具与 Teams，默认关闭。
+- **可选「Lodestar · 开发工作流」模式**：默认对齐标准模式能力，提供能力组开关和流程提示，复用部署已有的 Teams 等扩展；模式组件默认关闭。
 
-模式是提示适配器，不会安装工具、复制 profile、选择模型或扩大权限。写代码、测试和协作使用 DSH 原生能力；授权的含义与证据是否充分由 Lead 判断。Lodestar 不创建分支、不跨需求调度，也不自动提交、推送或发布。
+模式默认装配与标准模式对齐的原生能力，支持按能力组配置开关；不会安装缺失的宿主依赖、复制 profile、选择模型或扩大权限。写代码、测试和协作使用 DSH 原生能力；授权的含义与证据是否充分由 Lead 判断。Lodestar 不创建分支、不跨需求调度，也不自动提交、推送或发布。
 
 ## 开始使用
 
@@ -24,6 +24,8 @@ Lodestar 是 DeepSeek Harness（DSH）的开发工作流插件，帮助 Agent
 
 若需要模式入口，进入侧栏「插件」→「已安装」→ `@fooksky/lodestar` 详情，在「包含的组件」中启用默认关闭的 `dev-workflow-preset`，再于新会话开始前选择「Lodestar · 开发工作流」。已有会话可直接加载 skill；选择模式本身不构成实施授权。支持模式指南的宿主可展示「模式说明 / 如何使用」；旧宿主会忽略指南字段，仍可阅读随包文档。完整步骤、能力要求与恢复方法见 [使用指南：模式说明 / 如何使用](skills/dev-workflow/USER_GUIDE.md)。
 
+启用预设后，点击 `dev-workflow-preset` 行的配置入口即可勾选能力组、保存或恢复默认。更改用于新会话，已有会话保留原装配。详见 [能力开关](skills/dev-workflow/USER_GUIDE.md#能力开关)。
+
 ## 材料与工作区
 
 默认一个独立需求对应一个 change、一条分支、一个 worktree 和一个 Lead。由用户或外部助手先准备工作区；代码、知识、change 材料和需保留的证据均在本 worktree 内维护。

package/package.json

@@ -1,24 +1,67 @@
 {
   "name": "@fooksky/lodestar",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "license": "MIT",
-  "repository": { "type": "git", "url": "git+https://github.com/urzz/lodestar.git" },
-  "publishConfig": { "access": "public", "registry": "https://registry.npmjs.org/", "provenance": false },
-  "keywords": ["dsh", "cordis", "agent", "development", "workflow", "worktree"],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/urzz/lodestar.git"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/",
+    "provenance": false
+  },
+  "keywords": [
+    "dsh",
+    "cordis",
+    "agent",
+    "development",
+    "workflow",
+    "worktree"
+  ],
   "type": "module",
   "description": "Native DSH development workflow skill and structured change state",
-  "engines": { "node": ">=24", "dsh": ">=0.2.2-rc.1 <0.3.0" },
+  "engines": {
+    "node": ">=24",
+    "dsh": ">=0.2.2-rc.1 <0.3.0"
+  },
   "exports": {
     ".": "./index.js",
     "./preset": "./src/preset.js",
+    "./client": "./src/client.js",
     "./cordis.patch.yml": "./cordis.patch.yml",
     "./package.json": "./package.json",
     "./locale/*.json": "./locale/*.json"
   },
-  "files": ["index.js", "src", "cordis.patch.yml", "skills", "locale", "icon.svg", "README.md", "LICENSE"],
-  "scripts": { "test": "node --test tests/*.test.js", "check": "node --check index.js && node --check src/state.js && node --check src/store.js && node --check src/tool.js && node --check src/schema.js && node --check src/workspace.js && node --check src/preset.js", "prepack": "pnpm check && pnpm test" },
+  "files": [
+    "index.js",
+    "src",
+    "cordis.patch.yml",
+    "skills",
+    "locale",
+    "icon.svg",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "test": "node --test tests/*.test.js",
+    "check": "node --check index.js && node --check src/state.js && node --check src/store.js && node --check src/tool.js && node --check src/schema.js && node --check src/workspace.js && node --check src/preset.js && node --check src/preset-capabilities.js && node --check src/client.js",
+    "prepack": "pnpm check && pnpm test"
+  },
   "icon": "./icon.svg",
-  "dsh": { "bundle": { "patch": "./cordis.patch.yml" } },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-plugin-manager"
+      ]
+    }
+  },
   "peerDependencies": {
     "@deepseek-ai/cordis": "~4.1.0",
     "@deepseek-ai/dsh-skill": "0.2.2-rc.1",
@@ -32,16 +75,39 @@
     "@deepseek-ai/dsh-system-prompt": "0.2.2-rc.1"
   },
   "peerDependenciesMeta": {
-    "@deepseek-ai/cordis": { "optional": true },
-    "@deepseek-ai/dsh-skill": { "optional": true },
-    "@deepseek-ai/dsh-tools": { "optional": true },
-    "@deepseek-ai/dsh-fs": { "optional": true },
-    "@deepseek-ai/dsh-working-directory": { "optional": true },
-    "@deepseek-ai/dsh-sandbox-policy": { "optional": true },
-    "@deepseek-ai/dsh-subprocess": { "optional": true },
-    "@deepseek-ai/dsh-sandbox": { "optional": true },
-    "@deepseek-ai/dsh-agent-preset-registry": { "optional": true },
-    "@deepseek-ai/dsh-system-prompt": { "optional": true }
-  },
-  "dependencies": { "zod": "^4.6.7" }
+    "@deepseek-ai/cordis": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-skill": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tools": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-fs": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-working-directory": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-sandbox-policy": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-subprocess": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-sandbox": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-agent-preset-registry": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-system-prompt": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "@deepseek-ai/schemastery": "~3.19.0",
+    "zod": "^4.6.7"
+  }
 }

package/skills/dev-workflow/USER_GUIDE.md

@@ -2,7 +2,7 @@
 
 ## 模式说明
 
-「Lodestar · 开发工作流」是可选的 DSH 会话模式。它加入一段流程入口提示，让 Agent 加载公开技能 `lodestar`，通过 `lodestar_change` 维护开发变更，并复用当前部署已有的文件、终端、会话历史和 Teams 工具。它是提示适配器，不是额外的执行器；不会安装缺失工具、复制完整 profile、切换模型、改变权限或替用户批准实施。
+「Lodestar · 开发工作流」是可选的 DSH 会话模式。它在标准模式原生能力之上加入流程入口提示，让 Agent 加载公开技能 `lodestar`，通过 `lodestar_change` 维护开发变更。默认装配文件、搜索、终端与后台任务、技能、子 Agent、网页、计划、压缩等标准插件，支持按能力组配置开关；会话历史、Teams、浏览器及记忆等扩展沿用宿主部署。它不会安装缺失的宿主依赖、复制 profile、切换模型、改变权限或替用户批准实施。
 
 核心插件注册技能和状态工具，可在其他兼容模式中使用；可选 preset 默认关闭。模式内部标识仍为 `dev-workflow`，这是配置标识；用户加载技能时使用 `lodestar`。资源目录保留原名称以稳定随包路径。
 
@@ -21,7 +21,39 @@
 
 需要 Node.js 24+、Git 和兼容 DSH；版本范围见 [包配置](../../package.json)。使用 DSH 的插件管理安装 `@fooksky/lodestar` 并启用核心插件。若需要模式入口，进入侧栏「插件」→「已安装」→ `@fooksky/lodestar` 详情，在「包含的组件」中打开 `dev-workflow-preset` 行的「启用组件」开关；该组件默认关闭。再在新会话开始前选择「Lodestar · 开发工作流」。支持模式指南的宿主可展示本指南的「模式说明 / 如何使用」；旧宿主忽略指南字段，不影响核心技能和随包文档的使用。
 
-核心需要宿主提供技能、工具、文件、工作目录和 subprocess 服务。完整开发模式还使用读写编辑、路径搜索、终端与 job、提问、会话历史及 Teams 能力。preset 仅检查可见工具并在提示中报告缺口，不会提供这些服务。部署缺少实际任务所需能力时，Agent 应说明缺口；浏览器、记忆及普通 subagent 仅在环境提供且任务需要时使用。受委派成员只检查自己的任务包所需能力。
+核心需要宿主提供技能、工具、文件、工作目录和 subprocess 服务。preset 会装配标准模式的原生工具插件；底层宿主服务和插件包仍需由兼容 DSH 提供。部署缺少实际任务所需能力时，Agent 应说明缺口；受委派成员只检查自己的任务包所需能力。
+
+### 能力开关
+
+在侧栏「插件」→「已安装」→ Lodestar 详情，先启用 `dev-workflow-preset` 组件，再点击该行的配置入口。页面提供 14 组能力勾选项，点击「保存更改」后生效；「恢复默认」会在保存时移除用户覆盖，继承部署配置（未配置时全部开启）。离开页面不会保存草稿；保存失败时会保留草稿并显示原因。配置冲突时可「放弃更改」后重新编辑。
+
+也可在该组件的 `config` 中填写：
+
+```yaml
+capabilities:
+  web: false
+  scheduling: false
+  pluginManagement: false
+```
+
+未填写的组默认开启，默认能力基线对齐 DSH 标准模式。可配置的组如下：
+
+| 配置键 | 能力 |
+|---|---|
+| `context` | 角色、项目规则、时间上下文 |
+| `files` | 文件读写、编辑、图片读取、路径与内容搜索 |
+| `terminal` | 平台对应的 Bash / PowerShell、后台任务 |
+| `skills` | 技能发现与加载 |
+| `delegation` | subagent、fork、workflow |
+| `questions` / `todos` | 用户提问 / 任务进度 |
+| `web` / `present` | 网页搜索和抓取 / 文件交付 |
+| `goals` / `scheduling` | 持续目标 / 定时任务 |
+| `planning` / `compaction` | 原生计划模式 / 上下文压缩 |
+| `pluginManagement` | 插件管理（需宿主 profile 服务，market 工具仍默认关闭） |
+
+配置更新用于之后采用新预设版本的会话；已有会话和其子 Agent 保留原装配。关闭 `skills` 会影响加载工作流技能，关闭 `files` 或 `terminal` 会限制常规开发，应按任务需要选择。核心 `lodestar_change` 不由这些开关控制。
+
+这些开关仅控制本 preset 装配的插件，不是权限或安全隔离开关：宿主全局提供的同名工具、Teams、浏览器、记忆和会话历史可能仍可见，实际执行继续遵守会话权限与沙箱。缺失的宿主依赖会作为加载错误显示；关闭能力不会自动安装或卸载插件包。
 
 默认由用户或外部助手为每个独立需求准备分支和 worktree。Lodestar 会检查调用 Agent 的实际 cwd 与项目根，并把 change 绑定到工作区；不会创建或切换分支。明确指定在现有工作区执行的授权仍按用户范围处理。
 
@@ -54,7 +86,7 @@ Agent 先确认范围、调用 `workspace` 核对工作区，再按需要创建
 ## 能力边界与故障处理
 
 - 缺少 `lodestar_change`：检查核心插件是否启用；Agent 不应手工伪造状态。
-- 模式提示缺少能力：补齐部署服务，或按当前任务缩小范围并如实报告未完成项；模式不会扩大权限。
+- 模式提示缺少已启用能力：检查宿主依赖和加载错误；若提示按配置关闭，检查 `capabilities`。按任务范围补齐能力或如实报告未完成项；模式不会扩大权限。
 - revision 冲突：重新读取并合并语义，避免盲重试；写入结果未知时先查已有记录。
 - 缺少必要验证环境：报告具体阻断，不能把编译或 fixture 当作真实交互验收。
 - 提交、推送、发布、安装及清理：依据用户明确授权执行；选择本模式并不授权这些动作。

package/src/client.js

@@ -0,0 +1,96 @@
+// Browser module delivered by DSH; React is supplied by the host module table.
+window.__ModuleLoader__.load({
+  id: '@fooksky/lodestar',
+  factory(require) {
+    const React = require('react');
+    const h = React.createElement;
+    const labels = {
+      context: '角色、项目规则和时间上下文', terminal: '终端和后台任务',
+      files: '文件读写、编辑和搜索', scheduling: '定时任务', skills: '技能发现和加载',
+      goals: '持续目标', planning: '原生计划模式', compaction: '上下文压缩',
+      delegation: '子 Agent 和 workflow', questions: '用户提问', todos: '任务进度',
+      web: '网页搜索和抓取', present: '文件交付', pluginManagement: '插件管理',
+    };
+    const enLabels = {
+      context: 'Role, project rules and time context', terminal: 'Terminal and background jobs',
+      files: 'File editing and search', scheduling: 'Scheduled tasks', skills: 'Skill discovery and loading',
+      goals: 'Persistent goals', planning: 'Plan mode', compaction: 'Context compaction',
+      delegation: 'Subagents and workflow', questions: 'User questions', todos: 'Task progress',
+      web: 'Web search and fetch', present: 'File delivery', pluginManagement: 'Plugin management',
+    };
+    const strings = {
+      zh: { title: '预设能力', summary: '选择开发工作流可使用的能力。',
+        intro: '保存后供新会话使用；已有会话保留原装配。开关仅控制此预设。',
+        unavailable: '请先启用 dev-workflow-preset 组件，再打开配置。', loading: '正在读取配置…',
+        readonly: '当前配置为只读。', save: '保存更改', saving: '正在保存…', reset: '恢复默认',
+        cancel: '放弃更改', saved: '已保存，新会话将使用更新后的能力。',
+        conflict: '未能保存。配置可能已变化，请放弃更改后重试。', resetHint: '恢复默认将在保存时应用。' },
+      en: { title: 'Preset capabilities', summary: 'Choose capabilities for the development workflow.',
+        intro: 'Changes apply to new sessions. Existing sessions keep their composition. These switches affect this preset only.',
+        unavailable: 'Enable the dev-workflow-preset component, then open configuration.', loading: 'Loading configuration…',
+        readonly: 'This configuration is read-only.', save: 'Save changes', saving: 'Saving…', reset: 'Restore defaults',
+        cancel: 'Discard changes', saved: 'Saved. New sessions will use the updated capabilities.',
+        conflict: 'Could not save. Configuration may have changed. Discard changes and try again.', resetHint: 'Defaults will be restored when you save.' },
+    };
+    return {
+      inject: ['slots', 'locale'],
+      apply(ctx) {
+        function Capabilities({ view, form }) {
+          const locale = React.useSyncExternalStore(listener => ctx.locale.subscribe(listener), () => ctx.locale.getSnapshot());
+          const zh = locale.active.startsWith('zh');
+          const t = strings[zh ? 'zh' : 'en'];
+          const [draft, setDraft] = React.useState(null);
+          const [busy, setBusy] = React.useState(false);
+          const [message, setMessage] = React.useState(null);
+          if (view === 'summary') return h('p', null, t.summary);
+          const state = form?.state;
+          if (!state || state.status === 'unavailable') return h('p', null, t.unavailable);
+          if (state.status === 'loading') return h('p', { role: 'status' }, t.loading);
+          const values = draft?.values ?? state.value.capabilities;
+          const editable = state.writable && !busy;
+          const begin = () => ({ values: { ...state.value.capabilities }, revision: state.revision, reset: false });
+          async function save(event) {
+            event.preventDefault();
+            setBusy(true);
+            setMessage(null);
+            try {
+              const ops = Object.keys(labels).map(key => draft.reset
+                ? { op: 'unset', path: ['capabilities', key] }
+                : { op: 'set', path: ['capabilities', key], value: draft.values[key] });
+              const accepted = await form.mutate(ops, draft.revision);
+              if (accepted) setDraft(null);
+              setMessage({ error: !accepted, text: accepted ? t.saved : t.conflict });
+            } catch (error) {
+              setMessage({ error: true, text: error.message });
+            } finally { setBusy(false); }
+          }
+          return h('form', { onSubmit: save, style: { maxWidth: '48rem', display: 'grid', gap: '1rem' } },
+            h('p', null, t.intro),
+            !state.writable && h('p', null, t.readonly),
+            h('fieldset', { disabled: !editable, style: { border: 0, margin: 0, padding: 0, display: 'grid', gap: '.75rem' } },
+              h('legend', { style: { fontWeight: 600, marginBottom: '.75rem' } }, t.title),
+              ...Object.keys(labels).map(key => h('label', { key, style: { display: 'flex', alignItems: 'center', gap: '.75rem', minHeight: '2rem' } },
+                h('input', { type: 'checkbox', checked: values[key], onChange: event => {
+                  const next = draft ?? begin();
+                  setDraft({ ...next, reset: false, values: { ...next.values, [key]: event.target.checked } });
+                  setMessage(null);
+                } }), (zh ? labels : enLabels)[key]))),
+            draft?.reset && h('p', { role: 'status' }, t.resetHint),
+            message && h('p', { role: message.error ? 'alert' : 'status' }, message.text),
+            h('div', { style: { display: 'flex', gap: '.75rem', flexWrap: 'wrap' } },
+              h('button', { type: 'submit', disabled: !editable || !draft }, busy ? t.saving : t.save),
+              h('button', { type: 'button', disabled: !editable, onClick: () => {
+                const base = state.base?.capabilities ?? {};
+                setDraft({ ...(draft ?? begin()), reset: true,
+                  values: Object.fromEntries(Object.keys(labels).map(key => [key, base[key] ?? true])) });
+                setMessage(null);
+              } }, t.reset),
+              draft && h('button', { type: 'button', disabled: busy, onClick: () => { setDraft(null); setMessage(null); } }, t.cancel)));
+        }
+        ctx.effect(() => ctx.slots.inject('plugins.row.config', () => ctx.slots.register({
+          name: 'plugins.row.config', key: '@fooksky/lodestar#dev-workflow-preset',
+        }, Capabilities)));
+      },
+    };
+  },
+});

package/src/preset-capabilities.js

@@ -0,0 +1,59 @@
+// Native agent-plane composition aligned with DSH 0.2.2-rc.1 standard.patch.yml.
+const plugin = (id, config) => ({ id, name: `@deepseek-ai/dsh-${id}`, ...(config ? { config } : {}) });
+const group = (id, isolate, config) => ({ id, name: 'cordis:group', group: true, isolate, config });
+const planSection = `You are in plan mode. Stay in plan mode until the user approves your plan through exit_plan_mode or switches the session mode. Imperative language to implement changes means plan the implementation, not execute it. A user's conversational agreement — including an answer confirming something you asked — approves nothing and does not end plan mode; fold the confirmed decision into the plan and submit it through exit_plan_mode.
+
+Explore first. Use non-mutating reads, searches, static analysis, and checks to ground the plan in the actual repository. Do not edit or write files, change configuration, run formatters or code generation that rewrites tracked files, commit, or otherwise carry out the plan. Prefer existing functions and patterns over new machinery.
+
+The tool catalog stays the same across modes for request-cache stability. These plan-mode rules override any later tool description or guidance that suggests using mutation tools; those tools remain listed to keep the tool catalog unchanged. Do not use todo_write to track this planning phase: it tracks implementation after an approved plan, while the plan itself belongs in exit_plan_mode.
+
+Resolve discoverable facts by inspection. Use ask_user_question only for user-owned choices or material ambiguity that inspection cannot answer. Do not ask the user where code lives or how current behavior works when you can find out.
+
+Make the plan decision-complete: state the goal and success criteria; group implementation changes by subsystem; identify public API, schema, and data-flow changes; cover edge cases, failure modes, tests, acceptance criteria, and explicit assumptions. Keep it concise enough to review but detailed enough that another engineer can implement it without making design decisions.
+
+When ready, call exit_plan_mode with the complete plan markdown, starting with a # title. Make exit_plan_mode the only and final tool call in that assistant response: it presents the plan for approval, and implementation begins only in a later step after approval. Do not paste the final plan as a plain reply or ask "should I proceed?" through prose or ask_user_question. If review rejects it, incorporate the feedback and present again. If the review channel is unavailable or aborted, stay in plan mode and ask the user to switch modes manually; do not proceed with implementation.
+`;
+
+export const capabilityGroups = {
+  context: { label: '角色、项目规则和时间上下文', tools: [], plugins: [
+    plugin('persona', { prefix: 'You are a coding agent powered by the {{model}} model.' }),
+    plugin('agent-instructions', { maxBytes: 65536 }), plugin('time-context'),
+  ] },
+  terminal: { label: '终端和后台任务', tools: [process.platform === 'win32' ? 'pwsh' : 'bash', 'job_output', 'job_list', 'job_kill'], plugins: [
+    { ...plugin('tool-bash'), disabled: { __jsExpr: "process.platform === 'win32'" } },
+    { ...plugin('tool-pwsh'), disabled: { __jsExpr: "process.platform !== 'win32'" } }, plugin('tool-jobs'),
+  ] },
+  files: { label: '文件读写、编辑和搜索', tools: ['read', 'write', 'edit', 'glob', 'grep'], plugins: [
+    plugin('tool-fs', { applyPatch: false }), plugin('tool-fs-search', { sampleOverCapGlobResults: false }),
+  ] },
+  scheduling: { label: '定时任务', tools: [], plugins: [plugin('tool-schedule')] },
+  skills: { label: '技能发现和加载', tools: ['skill'], plugins: [plugin('skill-filesystem'), plugin('tool-skill')] },
+  goals: { label: '持续目标', tools: [], plugins: [plugin('command-goal'), plugin('tool-goal')] },
+  planning: { label: '原生计划模式', tools: [], plugins: [group('planning', { planMode: true }, [plugin('plan-mode', { section: planSection })])] },
+  compaction: { label: '上下文压缩', tools: [], plugins: [group('compaction', { compaction: true, toolResultPruner: true }, [
+    plugin('compaction-basic'), plugin('command-compact'),
+    { id: 'tool-result-pruner', name: '@deepseek-ai/dsh-compaction-tool-result-pruner', config: { thresholdChars: 8192, headChars: 4096, tailChars: 1024 } },
+  ])] },
+  delegation: { label: '子 Agent 和 workflow', tools: [], plugins: [group('delegation', { workflowEngine: true }, [
+    plugin('tool-subagent-control'),
+    plugin('tool-subagent', { provider: 'spawn', toolName: 'subagent', modelSelection: true, modelDiscovery: true }),
+    { id: 'tool-subagent-fork', name: '@deepseek-ai/dsh-tool-subagent', config: { provider: 'fork', toolName: 'subagent_fork' } },
+    plugin('workflow-ptc', { provider: 'spawn' }), plugin('tool-workflow'),
+  ])] },
+  questions: { label: '用户提问', tools: ['ask_user_question'], plugins: [plugin('tool-ask-user')] },
+  todos: { label: '任务进度', tools: ['todo_write'], plugins: [plugin('tool-todo', { allowParallelInProgress: true })] },
+  web: { label: '网页搜索和抓取', tools: [], plugins: [plugin('tool-web', { fetch: true, searchTimeoutMs: 60000 })] },
+  present: { label: '文件交付', tools: [], plugins: [{ id: 'present', name: '@deepseek-ai/dsh-tool-present' }] },
+  pluginManagement: { label: '插件管理（需宿主 profile 服务）', tools: [], plugins: [
+    { id: 'tool-plugin-manager', name: '@deepseek-ai/dsh-plugin-manager/tools', disabled: { __jsExpr: "!ctx.get('profileContext')" } },
+    { id: 'tool-plugin-market', name: '@deepseek-ai/dsh-plugin-market/tools', disabled: true },
+  ] },
+};
+
+export const defaultCapabilities = Object.fromEntries(Object.keys(capabilityGroups).map(key => [key, true]));
+export function capabilityPlugins(capabilities) {
+  return Object.entries(capabilityGroups).flatMap(([key, group]) => capabilities[key] ? structuredClone(group.plugins) : []);
+}
+export function expectedTools(capabilities) {
+  return ['lodestar_change', ...Object.entries(capabilityGroups).flatMap(([key, group]) => capabilities[key] ? group.tools : [])];
+}

package/src/preset.js

@@ -1,4 +1,6 @@
 import { readFile } from 'node:fs/promises';
+import z from '@deepseek-ai/schemastery';
+import { capabilityGroups, defaultCapabilities, capabilityPlugins, expectedTools } from './preset-capabilities.js';
 
 const guideText = await readFile(new URL('../skills/dev-workflow/USER_GUIDE.md', import.meta.url), 'utf8');
 // Inline host Markdown has no package-relative URL base; keep labels for local links.
@@ -7,39 +9,69 @@ const [explanation, usage] = inlineGuide.split('\n## 如何使用\n');
 
 export const name = 'dev-workflow-preset';
 export const inject = ['tools', 'agentPresets', 'systemPrompt'];
-
-// Reuse the deployment's native services and visible tools, without cloning a profile.
-export const requiredTools = [
-  'lodestar_change', 'read', 'write', 'edit', 'glob', 'grep', 'bash',
-  'job_output', 'job_list', 'job_kill', 'skill', 'ask_user_question',
-  'session_search', 'session_event_search', 'session_event_read',
-  'team_task_list', 'team_task_get', 'team_task_update', 'team_task_create',
-  'spawn_teammate', 'send_message', 'list_agents',
-];
-export const modeText = '本会话采用开发工作流。开发变更先加载 lodestar，定位或创建 change，按当前阶段继续。只调查、解释或设计时遵守该范围；选择模式不构成实施、提交、发布或安装授权。受委派成员执行任务包并向 Lead 回报，不重复启动 Lead 需求确认流程。浏览器、记忆和普通 subagent 仅在部署提供且任务需要时使用。';
-export const definition = {
-  id: 'dev-workflow', name: 'Lodestar · 开发工作流',
-  description: '确认真实需求、评审方案，使用已有工具与 Teams 执行，并依据证据交付；也支持仅设计。',
-  guide: { explanation, usage },
-  plugins: [{ id: 'dev-workflow-entry', name: '@fooksky/lodestar/preset', config: { entry: true } }],
-};
+export const Config = z.object({
+  entry: z.boolean().default(false).hidden(),
+  capabilities: z.object(Object.fromEntries(Object.entries(capabilityGroups).map(([key, group]) =>
+    [key, z.boolean().default(true).description(group.label)]))).default(defaultCapabilities).description('能力开关；默认对齐标准模式，仅控制本 preset 装配').volatile(),
+});
+export const requiredTools = expectedTools(defaultCapabilities);
+export const modeText = '本会话采用开发工作流。开发变更先加载 lodestar，定位或创建 change，按当前阶段继续。只调查、解释或设计时遵守该范围；选择模式不构成实施、提交、发布或安装授权。受委派成员执行任务包并向 Lead 回报，不重复启动 Lead 需求确认流程。浏览器、记忆和 Teams 等扩展沿用宿主部署；普通 subagent 按任务需要使用。';
+export function createDefinition(capabilities = defaultCapabilities) {
+  return {
+    id: 'dev-workflow', name: 'Lodestar · 开发工作流',
+    description: '默认提供标准模式能力，支持能力开关；确认真实需求、评审方案、原生执行并依据证据交付。',
+    guide: { explanation, usage },
+    plugins: [...capabilityPlugins(capabilities), {
+      id: 'dev-workflow-entry', name: '@fooksky/lodestar/preset', config: { entry: true, capabilities },
+    }],
+  };
+}
+export const definition = createDefinition();
 export async function apply(ctx, config = {}) {
-  if (config.entry) {
+  // Cordis resolves Config before activation; direct callers provide raw config.
+  const resolved = config.capabilities?.get ? config : Config(config);
+  const { entry } = resolved;
+  const readCapabilities = () => resolved.capabilities.get();
+  const capabilities = readCapabilities();
+  if (entry) {
     if (!ctx.systemPrompt) throw new Error('dev-workflow mode requires systemPrompt');
     const dispose = ctx.systemPrompt.section({
       name: 'dev-workflow-entry', order: 650,
       text({ scope }) {
         const visible = new Set(ctx.tools.definitions(scope).map(tool => tool.name));
-        const missing = requiredTools.filter(name => !visible.has(name));
-        return modeText + (missing.length
-          ? `\n当前作用域未提供以下完整开发模式能力：${missing.join(', ')}。Lead 首次开展开发时检查所需能力并报告配置缺口；受委派成员只按任务包判断实际需要的能力，不因缺少创建团队等 Lead 能力重启主流程。`
+        const missing = expectedTools(capabilities).filter(name => !visible.has(name));
+        const disabled = Object.keys(capabilityGroups).filter(key => !capabilities[key]);
+        return modeText + (disabled.length ? `\n本 preset 已按配置关闭能力组：${disabled.join(', ')}。以当前可见工具为准，任务依赖这些能力时报告具体缺口。` : '') + (missing.length
+          ? `\n当前作用域未提供以下已启用的开发模式能力：${missing.join(', ')}。Lead 首次开展开发时检查所需能力并报告配置缺口；受委派成员只按任务包判断实际需要的能力。`
           : '');
       },
     });
     ctx.effect(() => dispose);
   } else {
     if (!ctx.agentPresets) throw new Error('dev-workflow preset requires agentPresets');
-    const dispose = await ctx.agentPresets.register(definition);
-    ctx.effect(() => dispose);
+    const registry = ctx.agentPresets;
+    await ctx.effect(async () => {
+      let dispose;
+      let closed = false;
+      const replace = async () => {
+        if (closed) return;
+        // Same-id registration is rejected. Retiring first preserves existing
+        // users of the old generation while new scopes join the replacement.
+        await dispose?.();
+        dispose = undefined;
+        if (!closed) dispose = await registry.register(createDefinition(readCapabilities()));
+      };
+      let pending = replace();
+      ctx.on('loader/volatile-update', paths => {
+        if (!paths.some(path => path[0] === 'capabilities')) return;
+        pending = pending.then(replace);
+        pending.catch(error => ctx.logger.error(error));
+      });
+      await pending;
+      return async () => {
+        closed = true;
+        try { await pending; } finally { await dispose?.(); }
+      };
+    });
   }
 }