@mengyuly/dsh-ponytail 0.3.0 → 0.3.2

package/CHANGELOG.md

@@ -5,6 +5,31 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## Unreleased
 
+## [0.3.2] - 2026-08-31
+
+### Changed
+
+- Compressed the structured Lite/Full/Ultra prompt by merging shared end-to-end,
+  contract-preservation, disconnected-payload, and proportional-investigation rules;
+  the safety boundaries and Full seven-rung ladder remain intact. Lite also keeps
+  its non-challenge boundary and proportional investigation rule.
+- Fixed the version-pinned GitHub Release example to use the asset name actually
+  published by v0.3.1; release-link verification now rejects unpublished
+  versioned asset names.
+- Fixed invariant package-name synchronization and added a distribution guard;
+  normalized source file modes for publishable metadata.
+
+## [0.3.1] - 2026-08-26
+
+### Changed
+
+- E2E 规则组补充防误解澄清句：「It does not mean every layer must change:
+  the change must be complete across the layers it touches.」——防止把
+  「最小完整端到端变更」误解为必须修改所有层（真实数据流那条的补充）。
+  其余规则文本不变；审计确认 Full/Ultra 的 E2E 组、Lite 架构保护句、
+  Gain 四段口径、主 Skill 指针卡与 modelInvocable:false、docs smoke
+  口径（null≠0/环境阻断/静态vs动态/高方差）均已符合，未重复修改。
+
 ## [0.3.0] - 2026-08-26
 
 ### Added

package/README.md

@@ -13,8 +13,8 @@
 
 - **稳定 latest 下载**（资产名固定，每次 Release 不变）：
   `https://github.com/MengYuil/dsh-ponytail/releases/latest/download/mengyuly-dsh-ponytail.tgz`
-- **固定版本下载**（按 Tag 不可变）：
-  `https://github.com/MengYuil/dsh-ponytail/releases/download/v0.2.2/mengyuly-dsh-ponytail-0.2.2.tgz`
+- **固定版本下载**（按 Tag 不可变）：当前 Release 仅提供固定资产名，使用
+  `https://github.com/MengYuil/dsh-ponytail/releases/download/v0.3.1/mengyuly-dsh-ponytail.tgz`
 
 说明：
 
@@ -36,8 +36,9 @@ dsh plugin --profile web add link:$(pwd)
 # 方式二：GitHub 直接装
 dsh plugin --profile web add github:MengYuil/dsh-ponytail
 
-# 方式三：Release 打包件（先下 tgz）
-dsh plugin --profile web add file:./mengyuly-dsh-ponytail-0.1.3.tgz
+# 方式三：Release 打包件（先下 tgz——latest 固定资产名恒定）
+#   https://github.com/MengYuil/dsh-ponytail/releases/latest/download/mengyuly-dsh-ponytail.tgz
+dsh plugin --profile web add file:./mengyuly-dsh-ponytail.tgz
 
 # 方式四：npm
 dsh plugin --profile web add @mengyuly/dsh-ponytail
@@ -85,7 +86,7 @@ dsh plugin --profile web add @mengyuly/dsh-ponytail
     ```
     例：`web → full`、`tui → lite`、`automation → off`。Profile 配置在插件初始化时读取（Cordis 无公开配置变更事件），**改后需重启该 profile**；非法值只告警一次并回退，不影响启动。用户 `config.json` 仍保持热更新。
   - **用户 config.json**（`~/.config/ponytail/config.json`，Windows `%APPDATA%\ponytail\config.json`）：`{"defaultMode": "lite"}`，热更新（~1s 轮询），非法内容保留上次合法值。
-- **子代理（如实边界）**：DSH 内置 `subagent` 工具是**隔离派生**，默认**不继承**本插件的 system-prompt；`PONYTAIL_SUBAGENT_MATCHER`（匹配子代理 `agentPreset` 的正则）**只用于筛选能进入本 Prompt 管线的子代理**，不是继承开关；DSH 当前没有公开的子代理派生/可继承 Prompt API，因此**未实现、也不宣称父子 Prompt 继承**（有官方 API 后再考虑只读快照传播）。非法正则告警一次并 fail-open。
+- **子代理（如实边界）**：DSH 内置 `subagent` 工具是**隔离派生**，但全局 system-prompt section 默认也会参与子代理的独立组装；这不是父代理 Prompt 或会话状态继承。`PONYTAIL_SUBAGENT_MATCHER`（匹配子代理 `agentPreset` 的正则）只用于筛选能进入本 Prompt 管线的子代理，不是继承开关；无 preset 时不会被 matcher 排除。DSH 当前没有公开的父子 Prompt 继承 API，因此**不宣称父子 Prompt 继承**（有官方 API 后再考虑只读模式快照传播）。非法正则告警一次并 fail-open。
 - **配置错误**：非法 JSON / 非法 `defaultMode` / 读取失败 / 非法正则只告警一次（不刷屏）；配置文件不存在属正常、不告警。
 
 ## 效率（条件性收益，非保证）
@@ -101,9 +102,9 @@ prompt 与推理开销变得更贵。
 
 | 档位 | 字符数 | UTF-8 字节 | 说明 |
 |------|--------|-----------|------|
-| lite | 1474 | 1476 | 实测生成 |
-| full | 1678 | 1682 | 实测生成 |
-| ultra | 1625 | 1629 | 实测生成 |
+| lite | 1918 | 1920 | 实测生成 |
+| full | 3036 | 3052 | 实测生成 |
+| ultra | 2823 | 2839 | 实测生成 |
 | off | 0 | 0 | 不注入 |
 
 这些是 **Prompt 体积测量，不是账单金额，也不是对所有模型成立的节省

package/lib/index.js

@@ -924,7 +924,7 @@ function errorMessage(error) {
 * section (see `instructions.ts`) and must not be duplicated here. The other
 * five skills ship verbatim as runtime skills.
 *
-* @module @deepseek-ai/dsh-ponytail
+* @module @mengyuly/dsh-ponytail
 */
 /** The always-on lazy-senior-dev ruleset: also registered as a loadable skill. */
 const PONYTAIL_SKILL_BODY = `
@@ -1288,7 +1288,7 @@ function ponytailSkills() {
 * level via the `/ponytail` command is session-scoped and lives in an
 * in-memory, per-agent {@link ModeStore}.
 *
-* @module @deepseek-ai/dsh-ponytail
+* @module @mengyuly/dsh-ponytail
 */
 const DEFAULT_MODE = "full";
 const RUNTIME_MODES = [
@@ -1502,7 +1502,7 @@ function isSubagentSession(header) {
 * The three intensities therefore differ in their actual instructions, not
 * just in a table row.
 *
-* @module @deepseek-ai/dsh-ponytail
+* @module @mengyuly/dsh-ponytail
 */
 /** Shared identity line, carried by every non-`off` mode. */
 const INTRO = "You are a lazy senior developer. Lazy means efficient, not careless. The best code is the code never written.";
@@ -1511,10 +1511,11 @@ const INTRO = "You are a lazy senior developer. Lazy means efficient, not carele
 */
 const COMMON_RULES = [
 	"Understand the problem before choosing a solution: read the code the change touches and trace the real flow end to end. Laziness that skips comprehension ships a confident wrong fix.",
-	"Reuse what already exists in this codebase before writing anything new.",
-	"Reach for the standard library, platform-native features, and already-installed dependencies before custom code.",
-	"A non-trivial change leaves ONE minimal runnable check behind (an assert-based self-check or one small test file; no frameworks). Trivial one-liners need no test.",
-	"Explain briefly, but never omit the key decisions."
+	"Reuse existing code, standard-library and native features, and installed dependencies before writing custom code.",
+	"Choose the smallest complete change compatible with the existing architecture; completeness does not mean changing every layer.",
+	"Before adding a component, abstraction, migration, protocol, data format, or dependency, inspect and preserve the existing contract.",
+	"Do not leave disconnected UI, unused state, placeholders, or unwired payloads. Scale investigation to the task: a local, understood change does not require tracing unrelated layers.",
+	"For non-trivial changes, leave one minimal runnable check (assert or small test; no framework). Explain key decisions briefly."
 ].join("\n");
 /**
 * The never-cut list. Every non-`off` mode keeps these; intensities tune how
@@ -1536,7 +1537,6 @@ const SAFETY_BOUNDARIES = [
 /** Lite: complete the explicit ask; reuse; suggest, do not challenge. */
 const LITE_RULES = [
 	"Complete everything explicitly requested, including every acceptance criterion.",
-	"Prefer existing code, standard-library features, native platform features, and already-installed dependencies.",
 	"You may mention a simpler alternative briefly, but do not challenge or reject an explicit requirement.",
 	"Do not change the existing architecture merely to reduce line count.",
 	"Keep the smallest reasonable validation for non-trivial changes."
@@ -1547,14 +1547,14 @@ const E2E_RULES = [
 	"- Prefer the smallest complete end-to-end change compatible with the existing architecture, not merely the fewest lines in one file.",
 	"- Before creating a component, abstraction, protocol, migration, transport format, storage format, or dependency, inspect the repository’s existing path and preserve its current contract.",
 	"- Do not redesign transport, storage, API shape, or persistence when the task only asks for a local UI or behavior change.",
-	"- A locally smaller implementation that changes the system contract is not smaller overall.",
 	"- Prefer the smallest complete change across the real data flow: input → state → validation → payload → API → persistence → response/UI.",
+	"- It does not mean every layer must change: the change must be complete across the layers it touches.",
 	"- Do not leave a UI-only field, unused state, placeholder path, or disconnected payload merely because it produces a smaller diff."
 ].join("\n");
 const MODE_RULES = {
 	lite: LITE_RULES,
 	full: [
-		"Use the complete ladder — stop at the first rung that holds:",
+		"Use the seven-rung ladder; stop at the first rung that holds:",
 		"1. Does this need to exist at all? (YAGNI)",
 		"2. Does it already exist in this codebase? Reuse it.",
 		"3. Does the standard library do it? Use it.",
@@ -1562,19 +1562,13 @@ const MODE_RULES = {
 		"5. Does an already-installed dependency solve it? Use it.",
 		"6. Can the solution be reduced to a small expression? Make it that small.",
 		"7. Only then: write the minimum new implementation.",
-		"Default to the shortest correct implementation; prefer deletion and reuse, but do not trade away correctness, security, tests, explicit requirements, or the existing system contract.",
-		"Fix root causes, not symptoms: one guard in the shared function beats a guard in every caller.",
-		"",
+		"Default to the shortest correct implementation; prefer deletion and reuse. Fix root causes, not symptoms (one shared guard beats one per caller).",
 		E2E_RULES
 	].join("\n"),
 	ultra: [
-		"Delete before adding.",
-		"Actively question speculative features, caches, abstractions, configuration, migrations, transport changes, storage changes, and new dependencies.",
-		"Prefer the smallest complete end-to-end change, not the smallest local diff.",
-		"Do not change an existing contract merely to reduce lines.",
+		"Delete before adding. Actively question speculative features, caches, abstractions, configuration, migrations, transport changes, storage changes, and new dependencies.",
 		"For complex requests, ship the smallest correct complete version and state what would justify a larger version.",
-		"Ultra is not refusal: explicit requirements, safety, validation, accessibility, data protection, and acceptance criteria remain mandatory.",
-		"",
+		"Ultra is not refusal: explicit requirements and the safety boundaries remain mandatory.",
 		E2E_RULES
 	].join("\n")
 };
@@ -1632,7 +1626,7 @@ const instructionCache = /* @__PURE__ */ new Map();
 * `~/.config/ponytail/config.json` (see {@link readDefaultMode}), then
 * `full`. A session override via `/ponytail` outranks all of them.
 *
-* @module @deepseek-ai/dsh-ponytail
+* @module @mengyuly/dsh-ponytail
 */
 const name = "ponytail";
 const inject = ["systemPrompt", "skills"];

package/lib/invariant.js

@@ -1,9 +1,9 @@
 //#region lib/types/invariant.js
 /**
-* Package-owned invariant companion for `@deepseek-ai/dsh-ponytail`.
-* @module @deepseek-ai/dsh-ponytail/invariant
+* Package-owned invariant companion for `@mengyuly/dsh-ponytail`.
+* @module @mengyuly/dsh-ponytail/invariant
 */
-const PACKAGE_NAME = "@deepseek-ai/dsh-ponytail";
+const PACKAGE_NAME = "@mengyuly/dsh-ponytail";
 /** Cordis companion plugin name. */
 const name = "ponytail-invariant";
 /** Service required before the companion can reserve package ownership. */

package/lib/types/content.d.ts

@@ -6,7 +6,7 @@
  * section (see `instructions.ts`) and must not be duplicated here. The other
  * five skills ship verbatim as runtime skills.
  *
- * @module @deepseek-ai/dsh-ponytail
+ * @module @mengyuly/dsh-ponytail
  */
 import type { SkillRegistration } from '@deepseek-ai/dsh-skill';
 /** The always-on lazy-senior-dev ruleset: also registered as a loadable skill. */

package/lib/types/index.d.ts

@@ -11,7 +11,7 @@
  * `~/.config/ponytail/config.json` (see {@link readDefaultMode}), then
  * `full`. A session override via `/ponytail` outranks all of them.
  *
- * @module @deepseek-ai/dsh-ponytail
+ * @module @mengyuly/dsh-ponytail
  */
 import type { Context } from '@deepseek-ai/cordis';
 export declare const name = "ponytail";

package/lib/types/instructions.d.ts

@@ -5,7 +5,7 @@
  * The three intensities therefore differ in their actual instructions, not
  * just in a table row.
  *
- * @module @deepseek-ai/dsh-ponytail
+ * @module @mengyuly/dsh-ponytail
  */
 import { type PonytailRuntimeMode } from './modes.ts';
 /**

package/lib/types/invariant.d.ts

@@ -1,6 +1,6 @@
 /**
- * Package-owned invariant companion for `@deepseek-ai/dsh-ponytail`.
- * @module @deepseek-ai/dsh-ponytail/invariant
+ * Package-owned invariant companion for `@mengyuly/dsh-ponytail`.
+ * @module @mengyuly/dsh-ponytail/invariant
  */
 import type { Context } from '@deepseek-ai/cordis';
 /** Cordis companion plugin name. */

package/lib/types/modes.d.ts

@@ -6,7 +6,7 @@
  * level via the `/ponytail` command is session-scoped and lives in an
  * in-memory, per-agent {@link ModeStore}.
  *
- * @module @deepseek-ai/dsh-ponytail
+ * @module @mengyuly/dsh-ponytail
  */
 /** One settable runtime intensity. `review` is command-only and never a default. */
 export type PonytailRuntimeMode = 'off' | 'lite' | 'full' | 'ultra';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mengyuly/dsh-ponytail",
   "description": "Lazy senior dev mode for DeepSeek Harness: always-on minimal-code ruleset, intensity switching, and short review/audit/debt/gain/help skills",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "publishConfig": {
     "access": "public"
   },