@huanlin/dsh-plugin-tools-manager 0.2.0

package/LICENSE

@@ -0,0 +1,17 @@
+GNU AFFERO GENERAL PUBLIC LICENSE
+Version 3, 19 November 2007
+
+Copyright (C) 2026 huanlin
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as published
+by the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program. If not, see <https://www.gnu.org/licenses/>.

package/README.md

@@ -0,0 +1,109 @@
+# dsh-tools-manager
+
+DSH 插件：以 tree 形式列出「插件 → 工具」，并支持全局启停单个工具。
+
+- **Tree 列出工具**：按来源插件分组，展示每个插件注册的全部工具（name / description）。
+- **全局启停**：对任意工具一键禁用/启用，跨会话持久化，立即生效（模型不可见 + 执行被拒，两层一致）。
+- **UI 入口**：设置页独立「工具管理」Tab（`settings.section` slot，与「MCP」Tab 同级）。
+
+## 架构
+
+### 工具来源归属（tree 数据基础）
+
+- **归因算法**（零源码修改）：
+  1. 启动时快照 `ctx.tools.schemas()` 作基线，归到 `(baseline)` 分组。
+  2. 监听 Cordis `internal/plugin`（`fiber.name` = 插件名）→ 维护 `pendingPlugins` 栈。
+  3. 监听 `tools/change`（register/unregister/restriction 均触发，unfiltered）→ 对 `ctx.tools.schemas()` 做 diff：
+     - 新增工具 → 归因到栈顶（最近加载）插件；
+     - 移除工具 → 从归属表删除。
+  4. 插件卸载（`internal/status` DISPOSED）→ 其工具随 effect 自动注销，diff 自然移除。
+
+### 全局启停（两层一致，缺一不可）
+
+| 层 | 缝 | 实现 |
+|---|---|---|
+| 隐藏（模型不可见） | `system-prompt/assemble`（waterfall） | 过滤 `assembly.tools` 中 disabled 工具，返回变换后的 assembly |
+| 拒执行（防绕过） | 全局 `ctx.tools.guard()`（plain ctx） | disabled 工具返回 reason（如 `tool "X" is disabled by tools-manager: "X"`） |
+
+- 同一个 `disabled: Set<string>` 驱动两层，保证 prompt 与执行语义一致。
+- 覆盖场景：模型直调（guard 兜底）、run_code SDK 子调用（guard 兜底）、隐藏后模型不再发起。
+- 不依赖 `ctx.tools.restrict()`（其强制 scoped ctx，不能做全局过滤）。
+
+### 持久化
+
+- `ctx.settings.register('tools-manager', Config)` → 存 `$DSH_HOME/settings.yaml`，跨会话生效。
+- `Config`：`{ disabled: string[] }`（Schemastery schema，默认 `[]`）。
+- 设置变更即时应用（guard/assemble 读同一份 `disabled` 状态，无需重启）。
+
+### Host↔Client 通道
+
+- 宿主 HTTP 路由：`ctx.webServer.register({ kind: 'prefix', path: '/tools-manager/api', handler })`。
+- 接口（JSON envelope）：
+  - `POST /tools-manager/api/list` → `{ ok, value: { plugins: [{ name, tools: [{ name, description, disabled }] }] } }`
+  - `POST /tools-manager/api/set` body `{ toolName, disabled }` → `{ ok, value: { plugins: [...] } }`
+  - 错误：`{ ok: false, error: { code, message } }`
+
+## 开发
+
+```sh
+pnpm install          # 安装依赖（link: 指向 ~/.dsh/source/current/）
+pnpm run typecheck    # tsc --noEmit
+pnpm test             # vitest run
+pnpm run build        # tsc (host) + build-client.mjs (client bundle) + tsc (types)
+```
+
+### 目录结构
+
+```
+src/
+├── index.ts              # Host 入口：name, inject, apply（registry + policy + gateway）
+├── config.ts             # Config schema (schemastery), ResolvedConfig, resolveConfig
+├── registry.ts           # ToolRegistry: 归因 diff（internal/plugin + tools/change）
+├── policy.ts             # installPolicy: system-prompt/assemble 过滤 + tools.guard
+├── settings.ts           # installToolsManagerSettings: 注册 namespace，返回 bridge
+├── gateway.ts            # registerHttpGateway: /tools-manager/api 前缀路由（list/set）
+└── client/
+    ├── index.ts              # Client 入口：settings.section slot 注册独立 Tab
+    ├── ToolsManagerPanel.tsx # 面板组件（tree + 开关，inline styles 对齐 mcp-manager）
+    └── locales.ts            # i18n (zh + en)
+```
+
+## 运行
+
+### 本地安装
+
+```sh
+dsh plugin --profile web add "link:D:/Projects/deepseek-harness/dsh-tools-manager"
+```
+
+### 配置
+
+默认配置（`cordis.patch.yml`）：
+
+```yaml
+disabled: []    # 预置禁用的工具名列表（默认空）
+```
+
+运行时通过设置页「插件配置」分区的卡片修改，持久化到 `$DSH_HOME/settings.yaml`。
+
+## 检查
+
+```sh
+pnpm run typecheck && pnpm test && pnpm run build
+```
+
+验证 `lib/` 产物：
+- `lib/index.js` — host bundle（ESM）
+- `lib/client.js` — client bundle（CJS，`window.__ModuleLoader__.load` 包裹）
+- `lib/types/` — TypeScript 声明文件
+- `cordis.patch.yml` — bundle 配置层
+
+## 已知边界
+
+| 风险 | 影响 | 缓解 |
+|---|---|---|
+| 归因偏移（插件运行期动态注册工具） | tree 中工具挂错插件 | 记录 Known Limitations；`list` 接口对未归属工具归到 `(unknown)` 分组 |
+| `system-prompt/assemble` 多监听时序 | 其他插件也可能变换 tools | 本项目过滤只删 disabled，`next()` 委托其余；序靠后仍正确 |
+| guard 与 assemble 双层不同步 | 隐藏与拒执行不一致 | 单一 `disabled` 状态源；单测断言两缝读同一状态 |
+| settings 服务缺失 | 启停不持久 | 降级为内存态（仅本次运行生效），`set` 返回明确错误 |
+| `run_code` 模式 | 模型经 SDK 子调用禁用工具 | guard 全局兜底拒绝；文档说明"禁用=执行不可达" |

package/cordis.patch.yml

@@ -0,0 +1,9 @@
+# dsh-tools-manager bundle layer: inserts the plugin row.
+# Loaded by `dsh plugin --profile <name> add link:./dsh-tools-manager`.
+# The `name` is the package entry; Loader resolves it from profile node_modules.
+# Defaults: no tools disabled.
+- insert:
+    - id: tools-manager
+      name: '@huanlin/dsh-plugin-tools-manager'
+      config:
+        disabled: []

package/lib/client.js

@@ -0,0 +1,490 @@
+window.__ModuleLoader__.load({ id: "@huanlin/dsh-plugin-tools-manager", factory: (require) => {
+var module = { exports: {} }; var exports = module.exports;
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/client/index.ts
+var index_exports = {};
+__export(index_exports, {
+  apply: () => apply,
+  inject: () => inject
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/client/ToolsManagerPanel.tsx
+var import_react = require("react");
+var import_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
+
+// src/client/prefixTree.ts
+function splitToolName(name) {
+  const parts = name.split("__");
+  if (parts.length > 1) {
+    const result = [];
+    for (let i = 0; i < parts.length; i++) {
+      if (i === 0) {
+        if (parts[i] !== "") result.push(parts[i]);
+      } else if (i === parts.length - 1) {
+        if (parts[i] !== "") result.push(parts[i]);
+      } else {
+        const sub2 = parts[i].split("_").filter((s) => s !== "");
+        result.push(...sub2);
+      }
+    }
+    return result;
+  }
+  const sub = name.split("_").filter((s) => s !== "");
+  return sub.length > 0 ? sub : [name];
+}
+function buildPrefixTree(tools) {
+  const root = { children: /* @__PURE__ */ new Map() };
+  for (const tool of tools) {
+    const segments = splitToolName(tool.name);
+    let current = root;
+    for (let i = 0; i < segments.length; i++) {
+      const segment = segments[i];
+      const isLast = i === segments.length - 1;
+      if (isLast) {
+        current.children.set(segment, {
+          kind: "leaf",
+          name: tool.name,
+          description: tool.description,
+          disabled: tool.disabled
+        });
+      } else {
+        let child = current.children.get(segment);
+        if (child === void 0 || child.kind === "leaf") {
+          const branch = { children: /* @__PURE__ */ new Map() };
+          child = { kind: "branch", prefix: segments.slice(0, i + 1).join("_"), label: segment, branch };
+          current.children.set(segment, child);
+        }
+        if (child.kind === "branch") {
+          current = child.branch;
+        }
+      }
+    }
+  }
+  return convertBranchToNodes(root);
+}
+function convertBranchToNodes(branch) {
+  const nodes = [];
+  for (const [, child] of branch.children) {
+    if (child.kind === "leaf") {
+      nodes.push(child);
+    } else {
+      nodes.push({
+        kind: "node",
+        prefix: child.prefix,
+        label: child.label,
+        children: convertBranchToNodes(child.branch)
+      });
+    }
+  }
+  nodes.sort((a, b) => {
+    if (a.kind !== b.kind) return a.kind === "node" ? -1 : 1;
+    const aLabel = a.kind === "node" ? a.label : a.name;
+    const bLabel = b.kind === "node" ? b.label : b.name;
+    return aLabel < bLabel ? -1 : aLabel > bLabel ? 1 : 0;
+  });
+  return nodes;
+}
+function collectLeafNames(node) {
+  if (node.kind === "leaf") return [node.name];
+  const names = [];
+  for (const child of node.children) {
+    names.push(...collectLeafNames(child));
+  }
+  return names;
+}
+function countLeaves(node) {
+  if (node.kind === "leaf") {
+    return { total: 1, disabled: node.disabled ? 1 : 0 };
+  }
+  let total = 0;
+  let disabled = 0;
+  for (const child of node.children) {
+    const counts = countLeaves(child);
+    total += counts.total;
+    disabled += counts.disabled;
+  }
+  return { total, disabled };
+}
+
+// src/client/ToolsManagerPanel.tsx
+var import_jsx_runtime = require("react/jsx-runtime");
+var sectionStyle = {
+  display: "flex",
+  flexDirection: "column",
+  gap: 12,
+  color: "var(--dsw-alias-label-primary)"
+};
+var titleStyle = {
+  margin: 0,
+  fontSize: 16,
+  lineHeight: "24px",
+  fontWeight: 500,
+  color: "var(--dsw-alias-label-primary)"
+};
+var introStyle = {
+  margin: 0,
+  fontSize: 14,
+  lineHeight: "22px",
+  color: "var(--dsw-alias-label-tertiary)"
+};
+var treeStyle = {
+  margin: "8px 0 0",
+  display: "flex",
+  flexDirection: "column",
+  gap: 1
+};
+var errorStyle = {
+  margin: 0,
+  fontSize: 12,
+  lineHeight: "18px",
+  color: "var(--dsw-alias-state-error-primary)"
+};
+var emptyStyle = {
+  margin: "12px 0",
+  fontSize: 14,
+  color: "var(--dsw-alias-label-tertiary)"
+};
+var metaStyle = {
+  fontSize: 11,
+  lineHeight: "16px",
+  color: "var(--dsw-alias-label-tertiary)",
+  fontFamily: "ui-monospace, monospace"
+};
+var INDENT = 20;
+function nodeHeaderStyle(depth) {
+  return {
+    display: "flex",
+    alignItems: "center",
+    gap: 6,
+    padding: "5px 8px",
+    cursor: "pointer",
+    borderRadius: 6,
+    userSelect: "none",
+    marginLeft: depth * INDENT
+  };
+}
+var nodeHeaderClass = "tm-node-header";
+var nodeLabelStyle = {
+  fontSize: 13,
+  fontWeight: 600,
+  color: "var(--dsw-alias-label-primary)",
+  fontFamily: "ui-monospace, monospace"
+};
+var nodeActionsStyle = {
+  display: "flex",
+  alignItems: "center",
+  gap: 6,
+  marginLeft: "auto"
+};
+function leafRowStyle(depth) {
+  return {
+    display: "flex",
+    alignItems: "flex-start",
+    gap: 8,
+    padding: "5px 8px",
+    borderRadius: 6,
+    marginLeft: depth * INDENT
+  };
+}
+var leafRowClass = "tm-leaf-row";
+var leafInfoStyle = {
+  flex: 1,
+  minWidth: 0
+};
+var leafNameStyle = {
+  fontSize: 13,
+  fontWeight: 500,
+  color: "var(--dsw-alias-label-primary)",
+  fontFamily: "ui-monospace, monospace",
+  wordBreak: "break-all"
+};
+var leafDescStyle = {
+  fontSize: 12,
+  lineHeight: "18px",
+  color: "var(--dsw-alias-label-tertiary)",
+  marginTop: 2,
+  wordBreak: "break-word",
+  display: "-webkit-box",
+  WebkitLineClamp: 2,
+  WebkitBoxOrient: "vertical",
+  overflow: "hidden"
+};
+var leafToggleStyle = {
+  flexShrink: 0,
+  display: "flex",
+  alignItems: "center",
+  gap: 6
+};
+function Chevron({ open }) {
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+    import_dsh_client_ui_primitives.IconChevronRightOutline14,
+    {
+      size: 14,
+      className: open ? "chevron-open" : "chevron-closed"
+    }
+  );
+}
+function ToolsManagerPanel(_props) {
+  const [plugins, setPlugins] = (0, import_react.useState)([]);
+  const [error, setError] = (0, import_react.useState)(void 0);
+  const [loading, setLoading] = (0, import_react.useState)(true);
+  const [busy, setBusy] = (0, import_react.useState)(false);
+  const [pendingTools, setPendingTools] = (0, import_react.useState)(/* @__PURE__ */ new Set());
+  const refresh = (0, import_react.useCallback)(async () => {
+    try {
+      const res = await fetch("/tools-manager/api/list", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: "{}"
+      });
+      const body = await res.json();
+      if (body.ok === true && body.value !== void 0) {
+        setPlugins(body.value.plugins);
+        setError(void 0);
+      } else {
+        setError(body.error?.message ?? "\u52A0\u8F7D\u5931\u8D25");
+      }
+    } catch (caught) {
+      setError(caught instanceof Error ? caught.message : String(caught));
+    } finally {
+      setLoading(false);
+    }
+  }, []);
+  (0, import_react.useEffect)(() => {
+    void refresh();
+  }, [refresh]);
+  const toggleOne = (0, import_react.useCallback)(async (toolName, disabled) => {
+    setBusy(true);
+    setPendingTools((prev) => new Set(prev).add(toolName));
+    setError(void 0);
+    try {
+      const res = await fetch("/tools-manager/api/set", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ toolName, disabled })
+      });
+      const body = await res.json();
+      if (body.ok === true && body.value !== void 0) {
+        setPlugins(body.value.plugins);
+      } else {
+        setError(body.error?.message ?? "\u5207\u6362\u5931\u8D25");
+      }
+    } catch (caught) {
+      setError(caught instanceof Error ? caught.message : String(caught));
+    } finally {
+      setBusy(false);
+      setPendingTools((prev) => {
+        const next = new Set(prev);
+        next.delete(toolName);
+        return next;
+      });
+    }
+  }, []);
+  const toggleNode = (0, import_react.useCallback)(async (node) => {
+    const names = collectLeafNames(node);
+    if (names.length === 0) return;
+    const toolMap = /* @__PURE__ */ new Map();
+    for (const g of plugins) {
+      for (const t of g.tools) toolMap.set(t.name, t.disabled);
+    }
+    const anyEnabled = names.some((n) => toolMap.get(n) !== true);
+    const targetDisabled = anyEnabled;
+    const toToggle = names.filter((n) => toolMap.get(n) !== targetDisabled);
+    if (toToggle.length === 0) return;
+    setBusy(true);
+    setPendingTools((prev) => {
+      const next = new Set(prev);
+      for (const n of toToggle) next.add(n);
+      return next;
+    });
+    setError(void 0);
+    try {
+      let lastBody;
+      for (const name of toToggle) {
+        const res = await fetch("/tools-manager/api/set", {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify({ toolName: name, disabled: targetDisabled })
+        });
+        lastBody = await res.json();
+        if (lastBody.ok !== true) {
+          setError(lastBody.error?.message ?? `\u6279\u91CF\u5207\u6362\u5931\u8D25: ${name}`);
+          break;
+        }
+      }
+      if (lastBody?.ok === true && lastBody.value !== void 0) {
+        setPlugins(lastBody.value.plugins);
+      }
+    } catch (caught) {
+      setError(caught instanceof Error ? caught.message : String(caught));
+    } finally {
+      setBusy(false);
+      setPendingTools((prev) => {
+        const next = new Set(prev);
+        for (const n of toToggle) next.delete(n);
+        return next;
+      });
+    }
+  }, [plugins]);
+  const allTools = (0, import_react.useMemo)(() => {
+    const tools = [];
+    for (const g of plugins) tools.push(...g.tools);
+    return tools;
+  }, [plugins]);
+  const tree = (0, import_react.useMemo)(() => buildPrefixTree(allTools), [allTools]);
+  const totalTools = allTools.length;
+  const disabledCount = allTools.filter((t) => t.disabled).length;
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("section", { style: sectionStyle, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h2", { style: titleStyle, children: "\u5DE5\u5177\u7BA1\u7406" }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: introStyle, children: "\u6309\u5DE5\u5177\u540D\u524D\u7F00\u5206\u7EC4\u7684\u53EF\u6298\u53E0\u6811\u3002\u70B9\u51FB\u8282\u70B9\u5C55\u5F00/\u6298\u53E0\uFF0C\u5185\u90E8\u8282\u70B9\u652F\u6301\u6279\u91CF\u542F\u505C\u5B50\u5DE5\u5177\u3002\u7981\u7528\u7684\u5DE5\u5177\u5BF9\u6A21\u578B\u4E0D\u53EF\u89C1\u4E14\u6267\u884C\u88AB\u62D2\uFF0C\u8DE8\u4F1A\u8BDD\u6301\u4E45\u5316\u3002" }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { style: metaStyle, children: [
+      "\u5171 ",
+      plugins.length,
+      " \u4E2A\u63D2\u4EF6 \xB7 ",
+      totalTools,
+      " \u4E2A\u5DE5\u5177 \xB7 ",
+      disabledCount,
+      " \u4E2A\u5DF2\u7981\u7528"
+    ] }),
+    error !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: errorStyle, children: error }),
+    loading ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: introStyle, children: "\u52A0\u8F7D\u4E2D\u2026" }) : totalTools === 0 ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { style: emptyStyle, children: "\u5F53\u524D\u6CA1\u6709\u5DF2\u6CE8\u518C\u7684\u5DE5\u5177\u3002" }) : /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: treeStyle, children: tree.map((node) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+      TreeEntry,
+      {
+        node,
+        depth: 0,
+        pendingTools,
+        busy,
+        onToggleTool: toggleOne,
+        onToggleNode: toggleNode
+      },
+      node.kind === "node" ? node.prefix : node.name
+    )) }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("style", { children: `
+        .chevron-closed { transition: transform 0.15s ease; transform: rotate(0deg); }
+        .chevron-open { transition: transform 0.15s ease; transform: rotate(90deg); }
+        .tm-node-header:hover { background: var(--dsw-alias-bg-module-platform, rgba(0,0,0,0.04)); }
+        .tm-leaf-row:hover { background: var(--dsw-alias-bg-module-platform, rgba(0,0,0,0.04)); }
+      ` })
+  ] });
+}
+function TreeEntry(props) {
+  const { node, depth, pendingTools, busy, onToggleTool, onToggleNode } = props;
+  if (node.kind === "leaf") {
+    const pending = pendingTools.has(node.name);
+    return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: leafRowStyle(depth), className: leafRowClass, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: leafInfoStyle, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: leafNameStyle, children: node.name }),
+        node.description ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: leafDescStyle, children: node.description }) : null
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: leafToggleStyle, children: [
+        node.disabled ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.Pill, { children: "\u5DF2\u7981\u7528" }) : /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.Pill, { active: true, children: "\u5DF2\u542F\u7528" }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+          import_dsh_client_ui_primitives.Button,
+          {
+            onClick: () => onToggleTool(node.name, !node.disabled),
+            disabled: busy && pending,
+            children: node.disabled ? "\u542F\u7528" : "\u7981\u7528"
+          }
+        )
+      ] })
+    ] });
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+    PrefixNodeEntry,
+    {
+      node,
+      depth,
+      pendingTools,
+      busy,
+      onToggleTool,
+      onToggleNode
+    }
+  );
+}
+function PrefixNodeEntry(props) {
+  const { node, depth, pendingTools, busy, onToggleTool, onToggleNode } = props;
+  const [open, setOpen] = (0, import_react.useState)(depth < 1);
+  if (node.kind !== "node") return null;
+  const counts = countLeaves(node);
+  const allDisabled = counts.disabled === counts.total;
+  const anyEnabled = counts.disabled < counts.total;
+  const nodePending = collectLeafNames(node).some((n) => pendingTools.has(n));
+  const statusPill = allDisabled ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.Pill, { children: "\u5168\u90E8\u5DF2\u7981\u7528" }) : /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_dsh_client_ui_primitives.Pill, { active: true, children: [
+    counts.total - counts.disabled,
+    "/",
+    counts.total
+  ] });
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(
+      "div",
+      {
+        style: nodeHeaderStyle(depth),
+        className: nodeHeaderClass,
+        onClick: () => setOpen(!open),
+        children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Chevron, { open }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: nodeLabelStyle, children: node.label }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: nodeActionsStyle, children: [
+            statusPill,
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+              import_dsh_client_ui_primitives.Button,
+              {
+                onClick: (e) => {
+                  e.stopPropagation();
+                  onToggleNode(node);
+                },
+                disabled: busy && nodePending,
+                children: anyEnabled ? "\u5168\u90E8\u7981\u7528" : "\u5168\u90E8\u542F\u7528"
+              }
+            )
+          ] })
+        ]
+      }
+    ),
+    open && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { display: "flex", flexDirection: "column", gap: 1 }, children: node.children.map((child) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+      TreeEntry,
+      {
+        node: child,
+        depth: depth + 1,
+        pendingTools,
+        busy,
+        onToggleTool,
+        onToggleNode
+      },
+      child.kind === "node" ? child.prefix : child.name
+    )) })
+  ] });
+}
+
+// src/client/index.ts
+var inject = ["slots"];
+function apply(ctx) {
+  ctx.slots.inject("settings.section", () => ctx.slots.register({
+    name: "settings.section",
+    id: "dsh-tools-manager",
+    order: 62,
+    // after MCP (61)
+    label: () => "\u5DE5\u5177\u7BA1\u7406",
+    inject: () => ({})
+  }, ToolsManagerPanel));
+}
+return module.exports; } });

package/lib/config.js

@@ -0,0 +1,26 @@
+/**
+ * config.ts — composition-layer schema and resolved config shape.
+ *
+ * The composition `Config` (cordis.patch.yml) is the first-boot seed; the
+ * settings user layer composes on top of it at runtime. `resolveConfig`
+ * normalises any combination of partial source values into a fully-populated
+ * {@link ResolvedConfig}.
+ *
+ * @module dsh-tools-manager/config
+ */
+import z from 'schemastery';
+/** Schemastery schema for the composition entry and the `tools-manager` settings namespace. */
+export const Config = z.object({
+    disabled: z.array(z.string()).default([]).description('Globally disabled tool names; hidden from the model and denied at execution.'),
+});
+/**
+ * Resolve config with fallbacks for missing / invalid values.
+ * @param config - raw config from cordis.yml or settings scope.
+ * @returns a fully-populated {@link ResolvedConfig}.
+ */
+export function resolveConfig(config) {
+    const disabled = Array.isArray(config.disabled)
+        ? config.disabled.filter((name) => typeof name === 'string' && name !== '')
+        : [];
+    return { disabled };
+}