@joekytc/dsh-swarm 0.1.1 → 0.2.0

package/lib/tools/wiki-tools.js

@@ -1,6 +1,7 @@
 import { defineTool } from '@deepseek-ai/dsh-tools';
+import {} from '@deepseek-ai/dsh-util-values';
 import { can } from '../domain/permissions.js';
-import { assertAllowedWikiPagePath } from '../wiki/page-path.js';
+import { assertAllowedWikiPagePath, KB_PAGE_NAMESPACES_HINT } from '../wiki/page-path.js';
 function guard(action, caller) {
     if (!can(action, caller.actor, null))
         throw new Error('permission denied: ' + action);
@@ -34,7 +35,7 @@ export function buildWikiTools(wiki, getCaller) {
         }),
         defineTool({
             name: 'wiki_write',
-            description: 'Write a wiki-vault page under the configured pagePrefix (W only).',
+            description: 'Write a wiki-vault page under projects/<repoSlug>/ namespaces (W only). pagePath must match: ' + KB_PAGE_NAMESPACES_HINT,
             parameters: {
                 pagePath: { type: 'string', required: true },
                 content: { type: 'string', required: true },
@@ -43,8 +44,8 @@ export function buildWikiTools(wiki, getCaller) {
             async execute(args) {
                 const caller = getCaller();
                 guard('wiki-write', caller);
-                // Q3&5：工具边界强校验——只允许 projects/checklists/、projects/ch_*/t_*.md、projects/ch_*/review/
-                // 三类命名空间（page-path.ts 白名单），杜绝 LLM 自造路径/拼错层级导致 kb_url 无法跳转。
+                // Q3&5：工具边界强校验——只允许 projects/<repoSlug>/ 白名单命名空间（KB_PAGE_NAMESPACES_HINT 五类，
+                // 见 page-path.ts），杜绝 LLM 自造路径/拼错层级导致 kb_url 无法跳转。
                 assertAllowedWikiPagePath(args.pagePath);
                 const out = await wiki.write(args.pagePath, args.content);
                 // Q4：工具直接拼完整 kb_url（host 用 config.wikiVault.baseUrl，杜绝 LLM 手写错域名）。

package/lib/wiki/kb-linkage.d.ts

@@ -1,9 +1,16 @@
-import type { WikiVaultClient } from './wiki-vault-client.js';
 import type { BoardState } from '../domain/types.js';
+/** kb-linkage 所需最小 wiki 面（WikiVaultClient / LocalWikiClient 均满足，D2 双模式客户端注入）。 */
+type KbWikiClient = {
+    read(pagePath: string): Promise<{
+        rawMd: string;
+    }>;
+    write(pagePath: string, content: string): Promise<unknown>;
+};
 /**
  * 机械互链登记：链上 w:kb 任务完成时调用。
  * - 清单页：追加/更新「关联文档」区块，列出链上全部已 done 的 W2/W3 页。
  * - 当前页：写回清单页链接（清单 ref 来自规格卡 kind:'kb' 附件）。
  * 幂等（containsLine / 区块就地替换）；任何 wiki 读/写失败均静默跳过，不抛错。
  */
-export declare function syncKbLinks(wiki: WikiVaultClient, state: BoardState, taskId: string): Promise<void>;
+export declare function syncKbLinks(wiki: KbWikiClient, state: BoardState, taskId: string): Promise<void>;
+export {};

package/lib/wiki/kb-linkage.js

@@ -49,9 +49,9 @@ export async function syncKbLinks(wiki, state, taskId) {
     if (!chain?.specCardId)
         return;
     const spec = state.specCards.get(chain.specCardId);
-    // 清单页 ref：kind:'kb' 附件；仅接受 projects/ 命名空间（临时目录兜底路径不是 KB 页，跳过）
+    // 清单页 ref：kind:'kb' 附件；接受 projects/（remote）或 wiki/（local）命名空间（临时目录兜底路径不是 KB 页，跳过）
     const checklistRef = spec?.attachments.find((a) => a.kind === 'kb')?.ref ?? null;
-    const checklistPath = checklistRef && checklistRef.startsWith('projects/') ? checklistRef : null;
+    const checklistPath = checklistRef && (checklistRef.startsWith('projects/') || checklistRef.startsWith('wiki/')) ? checklistRef : null;
     // 链上已 done 的 W2/W3 页（含当前任务所属页）
     const pages = [...state.tasks.values()]
         .filter((t) => t.chainId === task.chainId && t.assignee === 'w' && t.mode === 'kb' && t.status === 'done')
@@ -61,7 +61,7 @@ export async function syncKbLinks(wiki, state, taskId) {
             ? state.handoffs.get(t.id).metadata.page_path
             : null,
     }))
-        .filter((p) => p.pagePath !== null && p.pagePath.startsWith('projects/'));
+        .filter((p) => p.pagePath !== null && (p.pagePath.startsWith('projects/') || p.pagePath.startsWith('wiki/')));
     if (pages.length === 0)
         return;
     // 1) 清单页：登记全部 W2/W3 页链接

package/lib/wiki/local-kb-client.d.ts

@@ -0,0 +1,14 @@
+import { type WikiSearchResult } from './wiki-vault-client.js';
+export declare class LocalWikiClient {
+    readonly baseUrl = "";
+    readonly root: string;
+    constructor(root: string);
+    private abs;
+    write(pagePath: string, content: string): Promise<{
+        path: string;
+    }>;
+    read(pagePath: string): Promise<{
+        rawMd: string;
+    }>;
+    search(q: string): Promise<WikiSearchResult[]>;
+}

package/lib/wiki/local-kb-client.js

@@ -0,0 +1,101 @@
+// src/wiki/local-kb-client.ts
+// 本地 KB 客户端（llm-wiki 目录结构）：与 WikiVaultClient 同构的 search/read/write 面，
+// local 模式下替换注入（planning 工具 / kb-linkage / memory-recall 复用既有逻辑，零分支扩散）。
+// 排序原则 D12：相关性优先 7 : 新鲜度 3（0.7*scoreNorm + 0.3*mtimeNorm）。
+import { readdirSync, readFileSync, writeFileSync, mkdirSync, statSync, existsSync } from 'node:fs';
+import { join, dirname, resolve, sep } from 'node:path';
+import { WikiError } from './wiki-vault-client.js';
+import { isInsideKbRoot } from './local-kb.js';
+import { assertLocalKbPagePath } from './page-path.js';
+export class LocalWikiClient {
+    baseUrl = '';
+    root;
+    constructor(root) { this.root = root; }
+    abs(pagePath) {
+        assertLocalKbPagePath(pagePath); // Task 1 白名单单一来源（wiki/**、拒 .. 与绝对路径），勿内联重复
+        const t = resolve(this.root, pagePath);
+        if (!isInsideKbRoot(this.root, t))
+            throw new WikiError('kb-rejected', undefined, `kb-rejected: path escapes local KB root: ${pagePath}`);
+        return t;
+    }
+    async write(pagePath, content) {
+        const t = this.abs(pagePath);
+        try {
+            mkdirSync(dirname(t), { recursive: true });
+            writeFileSync(t, content, 'utf8');
+        }
+        catch (err) {
+            // §9 降级链依赖：fs 失败归一 kb-unreachable（planning 工具按 code 判定 temp 兜底/软失败，审查 M5）
+            throw new WikiError('kb-unreachable', undefined, `kb-unreachable: local KB write failed: ${String(err)}`);
+        }
+        return { path: pagePath };
+    }
+    async read(pagePath) {
+        const t = this.abs(pagePath);
+        if (!existsSync(t))
+            throw new WikiError('kb-rejected', undefined, `kb-rejected: page not found: ${pagePath}`);
+        try {
+            return { rawMd: readFileSync(t, 'utf8') };
+        }
+        catch (err) {
+            throw new WikiError('kb-unreachable', undefined, `kb-unreachable: local KB read failed: ${String(err)}`);
+        }
+    }
+    async search(q) {
+        const needle = String(q ?? '').toLowerCase().trim();
+        if (!needle)
+            return [];
+        const hits = [];
+        const walk = (dir) => {
+            let entries = [];
+            try {
+                entries = readdirSync(dir);
+            }
+            catch {
+                return;
+            }
+            for (const e of entries) {
+                const p = join(dir, e);
+                const st = statSync(p);
+                if (st.isDirectory()) {
+                    walk(p);
+                    continue;
+                }
+                if (!e.endsWith('.md'))
+                    continue;
+                let text = '';
+                try {
+                    text = readFileSync(p, 'utf8');
+                }
+                catch {
+                    continue;
+                }
+                const lower = text.toLowerCase();
+                const n = lower.split(needle).length - 1;
+                if (n === 0)
+                    continue;
+                hits.push({
+                    path: p.slice(this.root.length + 1).split(sep).join('/'),
+                    title: text.split('\n')[0]?.replace(/^#\s*/, '').trim() || e,
+                    score: n,
+                    mtime: Math.floor(st.mtimeMs / 1000),
+                    hits: n,
+                });
+            }
+        };
+        walk(this.root);
+        if (hits.length === 0)
+            return [];
+        const maxHits = Math.max(...hits.map((h) => h.hits));
+        const times = hits.map((h) => h.mtime);
+        const minT = Math.min(...times);
+        const maxT = Math.max(...times);
+        const span = maxT - minT || 1;
+        return hits
+            .map((h) => ({
+            ...h,
+            score: Number((0.7 * (h.hits / maxHits) + 0.3 * ((h.mtime - minT) / span)).toFixed(4)),
+        }))
+            .sort((a, b) => b.score - a.score);
+    }
+}

package/lib/wiki/local-kb.d.ts

@@ -0,0 +1,6 @@
+export declare function localKbRoot(): string;
+/** 尽力创建库根（幂等）；失败由调用方告警 + block(kb-unreachable)（设计 §9）。 */
+export declare function ensureLocalKbRoot(root?: string): string;
+/** target 须为绝对路径且解析后落在 root 内（resolve 折叠重复斜杠；相对路径 fail-closed，
+ *  因为 bash/fs 里的相对目标语义属会话 cwd 而非库根，护栏不可猜测）。 */
+export declare function isInsideKbRoot(root: string, target: string): boolean;

package/lib/wiki/local-kb.js

@@ -0,0 +1,25 @@
+// src/wiki/local-kb.ts
+// 本地 KB（llm-wiki）库根工具（设计 D4：独立 <DSH_HOME>/storages/kanban/wiki/，隔离用户个人 ~/.llm-wiki-path）。
+import { homedir } from 'node:os';
+import { join, resolve, sep } from 'node:path';
+import { mkdirSync } from 'node:fs';
+export function localKbRoot() {
+    const dshHome = process.env.DSH_HOME ?? join(homedir(), '.dsh');
+    return join(dshHome, 'storages', 'kanban', 'wiki');
+}
+/** 尽力创建库根（幂等）；失败由调用方告警 + block(kb-unreachable)（设计 §9）。 */
+export function ensureLocalKbRoot(root = localKbRoot()) {
+    mkdirSync(root, { recursive: true });
+    return root;
+}
+/** target 须为绝对路径且解析后落在 root 内（resolve 折叠重复斜杠；相对路径 fail-closed，
+ *  因为 bash/fs 里的相对目标语义属会话 cwd 而非库根，护栏不可猜测）。 */
+export function isInsideKbRoot(root, target) {
+    if (!target)
+        return false;
+    // 相对路径 fail-closed：不与 root 拼接猜测（相对目标语义属会话 cwd）
+    if (resolve(target) !== target)
+        return false;
+    const r = resolve(root).replace(/\/+$/, '');
+    return resolve(target) === r || resolve(target).startsWith(r + sep);
+}

package/lib/wiki/memory-recall.d.ts

@@ -0,0 +1,24 @@
+import type { WikiSearchResult } from './wiki-vault-client.js';
+/** KB 客户端最小检索面（WikiVaultClient / LocalWikiClient 均满足）。 */
+type WikiSearchClient = {
+    search(q: string): Promise<WikiSearchResult[]>;
+};
+export declare function recallLearningIndex(wiki: WikiSearchClient, opts: {
+    requirementName: string | null;
+    workspaceDir: string | null;
+    kbMode?: 'remote' | 'local';
+}): Promise<WikiSearchResult[]>;
+export declare function recallDocIndex(wiki: WikiSearchClient, opts: {
+    requirementName: string | null;
+    workspaceDir: string | null;
+    kbMode?: 'remote' | 'local';
+}): Promise<WikiSearchResult[]>;
+export declare function recallMemoryIndex(wiki: WikiSearchClient, opts: {
+    requirementName: string | null;
+    workspaceDir: string | null;
+    maxEntries: number;
+    kbMode?: 'remote' | 'local';
+}): Promise<string | null>;
+/** /openspec: 恢复路径复用：搜【需求】候选清单页（pagePrefix 前缀 top5；local 调用方传 wiki/queries/checklists/）。 */
+export declare function searchChecklists(wiki: WikiSearchClient, pagePrefix?: string): Promise<string[]>;
+export {};

package/lib/wiki/memory-recall.js

@@ -0,0 +1,62 @@
+import { buildMemoryIndexBlock, weightedRank, buildRepoSlug } from '../domain/memory.js';
+import { isAllowedWikiPagePath } from './page-path.js';
+const TIMEOUT_MS = 6_000;
+async function withTimeout(p) {
+    try {
+        return await Promise.race([p, new Promise((resolve) => setTimeout(() => resolve(null), TIMEOUT_MS))]);
+    }
+    catch {
+        return null;
+    }
+}
+/** 路1 范围：remote = 当前仓库项目级 learnings（workspaceDir 空 → 无范围匹配；全局 learnings 命名空间已断代）；
+ *  local = wiki/synthesis/learnings/。 */
+function isScopedLearning(path, repoSlug, kbMode = 'remote') {
+    if (kbMode === 'local')
+        return path.startsWith('wiki/synthesis/learnings/');
+    return !!repoSlug && path.startsWith(`projects/${repoSlug}/learnings/`);
+}
+export async function recallLearningIndex(wiki, opts) {
+    const repoSlug = opts.workspaceDir ? buildRepoSlug(opts.workspaceDir) : null;
+    const kbMode = opts.kbMode ?? 'remote';
+    if (opts.requirementName) {
+        const r = await withTimeout(wiki.search(opts.requirementName));
+        if (!r)
+            return [];
+        return weightedRank(r.filter((x) => isScopedLearning(x.path, repoSlug, kbMode)), (x) => x.score, (x) => x.mtime);
+    }
+    const r = await withTimeout(wiki.search('【Learning】'));
+    if (!r)
+        return [];
+    return r.filter((x) => isScopedLearning(x.path, repoSlug, kbMode)).sort((a, b) => b.mtime - a.mtime);
+}
+export async function recallDocIndex(wiki, opts) {
+    if (!opts.requirementName)
+        return [];
+    const r = await withTimeout(wiki.search(opts.requirementName));
+    if (!r)
+        return [];
+    const repoSlug = opts.workspaceDir ? buildRepoSlug(opts.workspaceDir) : null;
+    const kbMode = opts.kbMode ?? 'remote';
+    return r
+        .filter((x) => kbMode === 'local'
+        ? x.path.startsWith('wiki/') && !isScopedLearning(x.path, repoSlug, 'local')
+        : isAllowedWikiPagePath(x.path) && !isScopedLearning(x.path, repoSlug, 'remote'))
+        .sort((a, b) => b.score - a.score);
+}
+export async function recallMemoryIndex(wiki, opts) {
+    const [learnings, docs] = await Promise.all([
+        recallLearningIndex(wiki, { requirementName: opts.requirementName, workspaceDir: opts.workspaceDir, kbMode: opts.kbMode }),
+        recallDocIndex(wiki, { requirementName: opts.requirementName, workspaceDir: opts.workspaceDir, kbMode: opts.kbMode }),
+    ]);
+    const learningEntries = learnings.slice(0, Math.ceil(opts.maxEntries / 2)).map((r) => ({ kind: 'learning', title: r.title, path: r.path }));
+    const docEntries = docs.slice(0, opts.maxEntries - learningEntries.length).map((r) => ({ kind: 'doc', title: r.title, path: r.path }));
+    return buildMemoryIndexBlock([...learningEntries, ...docEntries]);
+}
+/** /openspec: 恢复路径复用：搜【需求】候选清单页（pagePrefix 前缀 top5；local 调用方传 wiki/queries/checklists/）。 */
+export async function searchChecklists(wiki, pagePrefix = 'projects/') {
+    const r = await withTimeout(wiki.search('【需求】'));
+    if (!r)
+        return [];
+    return r.map((x) => x.path).filter((p) => p.startsWith(pagePrefix)).slice(0, 5);
+}

package/lib/wiki/page-path.d.ts

@@ -1,6 +1,15 @@
-export declare const CHECKLIST_PAGE_PREFIX = "projects/checklists/";
+/** 命名空间提示（报错/工具 description 文案单一来源，禁止散落硬编码）。 */
+export declare const KB_PAGE_NAMESPACES_HINT = "projects/<repoSlug>/checklists/\u3001projects/<repoSlug>/learnings/\u3001projects/<repoSlug>/ch_*/learnings/\u3001projects/<repoSlug>/ch_*/t_*.md\u3001projects/<repoSlug>/ch_*/review/";
 /** 从需求名（回退 problem）派生 URL 安全 slug：ASCII 化、空格/特殊字符→-、限长 40；全非 ASCII（如中文）兜底 'req'。 */
 export declare function buildChecklistSlug(name: string): string;
 export declare function isAllowedWikiPagePath(pagePath: string): boolean;
+/** learnings 路径谓词：项目级 / 需求级（均在 repoSlug 下）。 */
+export declare function isLearningsPath(pagePath: string): boolean;
 /** 工具边界硬校验：不符白名单直接抛 kb-rejected（wiki_write 用）。 */
 export declare function assertAllowedWikiPagePath(pagePath: string): void;
+export declare const LOCAL_CHECKLIST_PREFIX = "wiki/queries/checklists/";
+export declare const LOCAL_LEARNING_BASE = "wiki/synthesis/learnings/";
+/** 本地模式交付白名单：KB 库根下 wiki/** 相对路径（拒绝对象路径、.. 穿越、空串）。 */
+export declare function isLocalKbPagePath(pagePath: string): boolean;
+/** 本地模式工具边界硬校验：不符直接抛 kb-rejected。 */
+export declare function assertLocalKbPagePath(pagePath: string): void;

package/lib/wiki/page-path.js

@@ -1,12 +1,15 @@
 // src/wiki/page-path.ts
-// Q3&5：KB 页面路径统一规则（单一来源）。三份文档：
-//   需求清单     projects/checklists/<slug>-<ts>.md     （planning_checklist_save，代码强制）
-//   实施计划/结果 projects/ch_<id>/t_<id>.md             （W2/W3 wiki_write，工具边界强制）
-//   DT 评审页    projects/ch_<id>/review/<name>.md      （DT wiki_write，工具边界强制）
+// KB 页面路径统一规则（单一来源）：一级段 = repoSlug（buildRepoSlug(workspaceDir) 派生），
+// 知识库内按目标仓库分组定位。旧全局命名空间（projects/checklists|learnings|ch_* 直挂根）已断代，不兼容。
+//   需求清单      projects/<repoSlug>/checklists/<slug>-<ts>.md  （planning_checklist_save，代码强制）
+//   实施计划/结果 projects/<repoSlug>/ch_<id>/t_<id>.md          （W2/W3 wiki_write，工具边界强制）
+//   DT 评审页     projects/<repoSlug>/ch_<id>/review/<name>.md   （DT wiki_write + 写护栏强制）
+//   经验          projects/<repoSlug>/learnings/、projects/<repoSlug>/ch_<id>/learnings/
 import { WikiError } from './wiki-vault-client.js';
-export const CHECKLIST_PAGE_PREFIX = 'projects/checklists/';
-/** 白名单：wiki_write 只允许写这三类命名空间（杜绝 LLM 自造路径/拼错层级）。id 段宽松匹配（兼容真实 nid 两段式 ch_1_xxx 与测试单段 ch_1）。 */
-const KB_PAGE_PATH_RE = /^projects\/(?:checklists\/|ch_[0-9a-z_]+\/(?:t_[0-9a-z_]+\.md|review\/))/;
+/** 命名空间提示（报错/工具 description 文案单一来源，禁止散落硬编码）。 */
+export const KB_PAGE_NAMESPACES_HINT = 'projects/<repoSlug>/checklists/、projects/<repoSlug>/learnings/、projects/<repoSlug>/ch_*/learnings/、projects/<repoSlug>/ch_*/t_*.md、projects/<repoSlug>/ch_*/review/';
+/** 白名单：projects/<repoSlug>/ 下五类命名空间（repoSlug=[a-z0-9-]+，杜绝 LLM 自造路径）。 */
+const KB_PAGE_PATH_RE = /^projects\/[a-z0-9-]+\/(?:checklists\/|learnings\/|ch_[0-9a-z_]+\/(?:t_[0-9a-z_]+\.md|review\/|learnings\/))/;
 /** 从需求名（回退 problem）派生 URL 安全 slug：ASCII 化、空格/特殊字符→-、限长 40；全非 ASCII（如中文）兜底 'req'。 */
 export function buildChecklistSlug(name) {
     const slug = name
@@ -20,9 +23,29 @@ export function buildChecklistSlug(name) {
 export function isAllowedWikiPagePath(pagePath) {
     return KB_PAGE_PATH_RE.test(pagePath);
 }
+/** learnings 路径谓词：项目级 / 需求级（均在 repoSlug 下）。 */
+export function isLearningsPath(pagePath) {
+    return /^projects\/[a-z0-9-]+\/(?:learnings\/|ch_[0-9a-z_]+\/learnings\/)/.test(pagePath);
+}
 /** 工具边界硬校验：不符白名单直接抛 kb-rejected（wiki_write 用）。 */
 export function assertAllowedWikiPagePath(pagePath) {
     if (!isAllowedWikiPagePath(pagePath)) {
-        throw new WikiError('kb-rejected', undefined, `page path outside allowed namespaces (projects/checklists/, projects/ch_*/t_*.md, projects/ch_*/review/): ${pagePath}`);
+        throw new WikiError('kb-rejected', undefined, `page path outside allowed namespaces (${KB_PAGE_NAMESPACES_HINT}): ${pagePath}`);
+    }
+}
+// ── 本地 KB（llm-wiki）路径规则（双模式 D5/D9）──────────────────────────────
+export const LOCAL_CHECKLIST_PREFIX = 'wiki/queries/checklists/';
+export const LOCAL_LEARNING_BASE = 'wiki/synthesis/learnings/';
+/** 本地模式交付白名单：KB 库根下 wiki/** 相对路径（拒绝对象路径、.. 穿越、空串）。 */
+export function isLocalKbPagePath(pagePath) {
+    const p = String(pagePath ?? '');
+    if (!p || p.startsWith('/') || p.includes('..'))
+        return false;
+    return p.startsWith('wiki/');
+}
+/** 本地模式工具边界硬校验：不符直接抛 kb-rejected。 */
+export function assertLocalKbPagePath(pagePath) {
+    if (!isLocalKbPagePath(pagePath)) {
+        throw new WikiError('kb-rejected', undefined, `kb-rejected: local KB page path outside wiki/**: ${pagePath}`);
     }
 }

package/lib/wiki/wiki-vault-client.d.ts

@@ -7,14 +7,15 @@ export interface WikiSearchResult {
     path: string;
     title: string;
     score: number;
+    mtime: number;
 }
 export declare class WikiVaultClient {
-    private readonly cfg;
-    constructor(cfg: {
+    private readonly getCfg;
+    constructor(getCfg: () => {
         baseUrl: string;
         pagePrefix: string;
     });
-    /** P2：暴露 baseUrl getter（下游 WikiWorker 拼 kb_url 用），不挖私有字段。 */
+    /** P2：暴露 baseUrl getter（下游 WikiWorker 拼 kb_url 用），不挖私有字段；经 getCfg 每次取最新配置（热生效）。 */
     get baseUrl(): string;
     private request;
     search(q: string): Promise<WikiSearchResult[]>;

package/lib/wiki/wiki-vault-client.js

@@ -9,12 +9,12 @@ export class WikiError extends Error {
     }
 }
 export class WikiVaultClient {
-    cfg;
-    constructor(cfg) { this.cfg = cfg; }
-    /** P2：暴露 baseUrl getter（下游 WikiWorker 拼 kb_url 用），不挖私有字段。 */
-    get baseUrl() { return this.cfg.baseUrl; }
+    getCfg;
+    constructor(getCfg) { this.getCfg = getCfg; }
+    /** P2：暴露 baseUrl getter（下游 WikiWorker 拼 kb_url 用），不挖私有字段；经 getCfg 每次取最新配置（热生效）。 */
+    get baseUrl() { return this.getCfg().baseUrl; }
     async request(method, path, body) {
-        const url = this.cfg.baseUrl.replace(/\/$/, '') + path;
+        const url = this.getCfg().baseUrl.replace(/\/$/, '') + path;
         let res;
         try {
             res = await fetch(url, {
@@ -39,7 +39,7 @@ export class WikiVaultClient {
         return this.request('GET', '/api/pages/' + encodeURIComponent(pagePath));
     }
     async write(pagePath, content) {
-        if (!pagePath.startsWith(this.cfg.pagePrefix)) {
+        if (!pagePath.startsWith(this.getCfg().pagePrefix)) {
             throw new WikiError('kb-rejected', undefined, 'page path outside prefix: ' + pagePath);
         }
         await this.request('PUT', '/api/pages/' + encodeURIComponent(pagePath), { content });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@joekytc/dsh-swarm",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "A governed swarm of six specialist DSH agents (orchestrator, planner, knowledge-base bridge, developer and two reviewers) that turns a requirement into a strict phase pipeline with machine-verified delivery evidence, review-gated merges, a full audit-log event stream and a live kanban tab; design inspired by the Hermes Agent kanban",
   "license": "MIT",
   "author": "joekytc",
@@ -23,6 +23,7 @@
     "lib",
     "client",
     "personas",
+    "skills",
     "cordis.patch.yml"
   ],
   "dsh": {
@@ -55,25 +56,29 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-persona": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-session": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-tools": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-tool-bash": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-tool-fs": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-tool-fs-search": "^0.1.0-rc.6",
+    "@deepseek-ai/dsh-agent": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-api-session-controller": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-persona": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-session": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-tool-bash": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-tool-fs": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-tool-fs-search": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-tools": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-util-values": "^0.1.2-rc.1",
     "@deepseek-ai/schemastery": "^3.18.1"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-client-runtime": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-ui-layout": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.6",
+    "@deepseek-ai/dsh-client-store": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-layout": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.2-rc.1",
     "@testing-library/dom": "^10.4.0",
     "@testing-library/react": "^16.1.0",
     "@types/node": "^22.0.0",
     "@types/react": "^18.3.0",
     "@types/react-dom": "^18.3.0",
     "esbuild": "^0.28.2",
+    "js-yaml": "^4.3.2",
     "jsdom": "^25.0.0",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",

package/personas/kanban-d/preset.yml

@@ -1,2 +1,2 @@
-name: 全栈开发（D）
+name: 全栈开发官（D）
 description: 看板链唯一执行者，在目标仓库实现并自测规格、提交带 git 证据的交付，不再向下派单。

package/personas/kanban-dt/agent.cordis.yml

@@ -31,8 +31,8 @@
       <branch>, delegation mode; <branch> = D's feature branch from the parent handoff
       metadata.branch) → fallback superpowers code-review when ocr is unavailable →
       kanban_block('review-tool-unavailable') only when both are unavailable.
-      4. Wiki is read-only plus writes limited to projects/<chain>/review/ namespace (review
-      conclusion/evidence chain — does not replace W's artifact sync duty).
+      4. Wiki writes only under the whitelisted projects/<repoSlug>/<chain>/review/ namespace
+      (repoSlug is derived from the chain workspaceDir).
       5. Write the review conclusion into kanban_complete metadata review_evidence =
       { verdict: 'pass'|'fail', issues: [...], test/build/typecheck/lint/diff/git/
       openCodeReview/reviewPage }: pass = all six checks pass (system advances to W3);
@@ -59,7 +59,7 @@
 
 # run_code 供验证程序（跑测试/构建/typecheck 编排）；ToolGuard 拦其对源码的写
 - id: tool-presentation
-  name: '@deepseek-ai/dsh-tool-presentation'
+  name: '@deepseek-ai/dsh-agent-tool-presentation'
   config:
     mode: both
 

package/personas/kanban-dt/preset.yml

@@ -1,2 +1,2 @@
-name: 交付评审（DT）
+name: 交付评审官（DT）
 description: 只读校验 D 的实现（测试/构建/diff/规格对齐/代码评审）并出具结论，绝不修改源码。

package/personas/kanban-p/agent.cordis.yml

@@ -44,6 +44,22 @@
       needed=true. needed=true means V creates a PT (plan review) card attaching your reason;
       needed=false skips PT straight to W2. This is the only input the system uses to decide
       whether a PT card is created.
+      7. This session runs at danger-full-access (the permission ceiling): when calling write/
+      edit you MUST NOT attach the `sandbox_permissions` parameter — every value is rejected
+      by the sandbox (escalation only accepts strictly wider modes, and none exists above the
+      ceiling). Write directly with file_path + content only; never retry a denied call with
+      the parameter attached.
+      8. tasks.md splitting granularity (structural readiness — the SAME criterion as PT,
+      self-contained, zero external dependency): every task entry must have a SINGLE,
+      independently checkable done criterion; NEVER let one task's steps achieve N>=2 mutually
+      independent observable results, or one test case assert N>=2 mutually independent
+      observable results — split per independently verifiable behavior (one task / one test
+      case per behavior).
+      9. proposal.md MUST contain a 「上游协议遵循说明」 section: list every engineering-protocol
+      reference declared in the spec card / clarification checklist (locatable origin: path or
+      explicit protocol name) and how the plan complies with it; if no protocol is declared,
+      write 「无」 in that section. Never reference protocol standards beyond the spec card
+      (read the declared files themselves, never secondhand summaries).
 
 - id: agent-instructions
   name: '@deepseek-ai/dsh-agent-instructions'

package/personas/kanban-p/preset.yml

@@ -1,2 +1,2 @@
-name: 规划师（P）
+name: 规划官（P）
 description: 仅依据需求卡与注入上下文产出 openspec 实施计划，不探索仓库、不执行任何开发动作。

package/personas/kanban-pt/agent.cordis.yml

@@ -13,19 +13,49 @@
       You are the plan-review agent (read-only) powered by the {{model}} model. Your working
       directory is {{cwd}}. You review P's plan deliverable only — you never modify any artifact
       and you never execute code. Rules:
-      1. Read-only review of the P plan (proposal/design/tasks, from the handoff artifacts_path):
-      check requirement alignment (spec problem/user_stories), completeness (solution/
-      impl_decisions coverage) and logical/interaction consistency (internally coherent,
-      executable).
+      1. Read-only review of the P plan (proposal/design/tasks, from the handoff artifacts_path)
+      against five elements:
+      - Requirement alignment (granularity): every task item / task point / note in the
+      clarification checklist / spec card maps both ways to plan tasks — nothing missing,
+      nothing beyond scope (an out-of-scope task must trace back to a clarification answer,
+      else issue).
+      - Completeness: solution/impl_decisions cover all requirement points; every task has a
+      checkable done criterion.
+      - Logical/interaction consistency: no internal contradictions; slice/task dependency
+      order is executable.
+      - Structural readiness (self-contained rule, zero external skill dependency): every task
+      entry must have a SINGLE, independently checkable done criterion; if one task's steps
+      achieve N>=2 mutually independent observable results, or one test case asserts N>=2
+      mutually independent observable results, it is a "mixed behavior" — issue requires a
+      split. Judge from the plan text only; never reference or require execution-layer wording
+      (RED/GREEN/named narrow tests).
+      - Engineering-protocol consistency: only reconcile against the 「上游协议遵循说明」
+      section of proposal.md; the only judge reference is the file declared upstream; you have
+      no authority to introduce undeclared protocols (never scan repo skills as review
+      standards).
       2. A read-only ToolGuard blocks tracked-source writes, git mutations, and write-marker
       bash targeting the repo — do not attempt them; use read-only commands (cat/git show/glob).
       3. Write the review conclusion into kanban_complete metadata review_evidence =
       { verdict: 'pass'|'fail', issues: [{ severity, title, detail, location?, resolved }], ... }:
-      pass = plan satisfies the three checks above; fail = critical/high issues remain (the
-      system then creates a rework task for P and a fresh review card).
-      4. Never call kanban_create, never write the wiki, never edit/approve spec cards; only
+      every issue MUST carry four elements — location (which task/section) + basis (upstream
+      declaration reference or internal contradiction) + problem (what is violated) + fix
+      (actionable suggestion); missing any element = invalid issue.
+      pass = all five elements satisfied; issues may then only carry non-blocking suggestions
+      (execution-layer reference, not blocking). fail = critical/high issues remain (the system
+      then creates a rework task for P and a fresh review card).
+      Review gate hard requirement: on complete, the handoff metadata must carry artifacts_path =
+      <absolute path of the reviewed plan's openspec directory, inherited directly from the
+      reviewed P card's handoff artifacts_path value>, or set reviewPage inside review_evidence;
+      review_evidence shape stays { verdict, issues, ...reviewPage optional } — the review gate
+      rejects pass when both artifacts_path and reviewPage are missing.
+      4. Re-review (task body contains the 「上一轮评审未通过 issues」 section): reconcile FIRST —
+      each prior issue gets a three-state conclusion (fixed resolved=true / unfixed resolved=false
+      carried over as-is / partially fixed resolved=false with the remaining part in detail), then
+      raise new issues; unfixed prior issues MUST stay in the issues list. Never skip
+      reconciliation and only raise new issues.
+      5. Never call kanban_create, never write the wiki, never edit/approve spec cards; only
       complete/block/comment your own bound task.
-      5. Use kanban_show/kanban_list/kanban_complete/kanban_block/kanban_heartbeat/
+      6. Use kanban_show/kanban_list/kanban_complete/kanban_block/kanban_heartbeat/
       kanban_comment + spec_card_view; bash limited to read-only commands.
 
 - id: agent-instructions

package/personas/kanban-pt/preset.yml

@@ -1,2 +1,2 @@
-name: 计划评审（PT）
+name: 计划审查官（PT）
 description: 只读评审 P 产出的实施计划，输出通过/打回结论，不修改任何产物、不执行代码。