@morlay/dsh-session-mode 0.0.14 → 0.0.16

package/dist/index.mjs

@@ -1,4 +1,5 @@
-import { n as SESSION_MODE_PATH, t as POLICY_NAMES } from "./shared-vjlwxiMt.mjs";
+import { r as MODE_SOURCES, t as modeConfig } from "./rows-DnHpp-Ak.mjs";
+import { a as POLICY_NAMES, c as groupRef, d as refGroup, f as toolGroupLabel, i as POLICY_DESCRIPTIONS, l as isProtectedTool, n as asModeConfig, o as SESSION_MODE_PATH, p as toolGroupOf, r as resolveModeConfig, s as deniedByList, u as isResidentToolGroup } from "./mode-config-CiQfAy4G.mjs";
 import { t as SessionModeCatalog } from "./catalog-D-n_RctY.mjs";
 import { Service } from "@deepseek-ai/cordis";
 import { modelSelectionProjectionDefinition } from "@deepseek-ai/dsh-agent";
@@ -6,11 +7,22 @@ import { ReasoningEffortId } from "@deepseek-ai/dsh-llm";
 import { agentPresetProjectionDefinition } from "@deepseek-ai/dsh-agent-preset-registry";
 import { z } from "zod";
 import z$1 from "@deepseek-ai/schemastery";
+import { SHORT_TOOL_DESCRIPTIONS, TOOLS_SDK_INTERFACE, renderToolKey, renderToolsDeclaration } from "@morlay/dsh-tool-guidance/groups";
 import { PERSONA_PREFIX_SECTION, PERSONA_SUFFIX_SECTION } from "@deepseek-ai/dsh-system-prompt";
+import { defineTool, projectToolSchema } from "@deepseek-ai/dsh-tools";
+import { jsonSchemaToTs } from "@deepseek-ai/dsh-tool-executor-ptc";
+import { mkdir, readFile, readdir, rm, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { dshHomePath } from "@deepseek-ai/dsh-home-paths";
+import { parse, stringify } from "smol-toml";
+import { defineDomain, domainTable } from "@deepseek-ai/dsh-storage-domain";
 // src/modes.ts
 function derivedSkills(mode) {
 	return (mode.allowTools.length === 0 || mode.allowTools.includes("skill")) && !mode.denyTools.includes("skill");
 }
+function normalizeMode(value) {
+	return modeSchema(value);
+}
 const localized = (text) => text;
 const personaSchema = z$1.object({
 	prefix: z$1.string().default(""),
@@ -33,10 +45,6 @@ const modelSchema = z$1.object({
 });
 const modeSchema = z$1.object({
 	preset: z$1.string().hidden(),
-	presetsOnly: z$1.array(z$1.string()).role("select", { source: "agent-presets" }).default([]).description(localized({
-		zh: "这个模式只允许挂哪些 agent preset（它们的 id，官方或本部署自建的）：行清单由挂着的那份提供，几个模式可以共享同一份名单。留空表示**允许全部**——哪份 preset 都行，选这个模式也不动会话当前挂着的那份；有值时当前的已经在名单里就不动，否则换成名单里的第一个。模式自己的提示词、工具收口与开关照常生效。",
-		en: "Which agent presets this mode may ride on (their ids, shipped or deployment-owned): that preset supplies the row list, and several modes may share one list. Empty means **every preset is allowed** — selecting the mode then leaves the session's current preset alone; when set, the current one stays if it is listed, otherwise the session switches to the first entry. The mode's persona, tool narrowing, and switches apply either way."
-	})),
 	name: z$1.string().required().description(localized({
 		zh: "模式名（事实文案；选择面归官方 roster）。",
 		en: "Mode name (fact copy; the picker belongs to the official roster)."
@@ -82,6 +90,10 @@ const modeSchema = z$1.object({
 		zh: "是否要技能目录（官方 `skill-catalog` 的注入）。**默认就按这个模式自己的工具名单推导**：`(allowTools 留空 ? 全部 : allowTools) − denyTools` 里含 `skill` 就要；写 `false` 就丢掉官方 `skill-catalog` 的注入（`skill` 工具的可见性仍归 `allowTools`）。",
 		en: "Whether the skill catalog applies (the official `skill-catalog` injection). The default derives it from this mode's own tool lists: it applies when `(empty allowTools ? every tool : allowTools) − denyTools` contains `skill`; `false` drops the official `skill-catalog` injection (`skill` tool visibility still belongs to `allowTools`)."
 	})),
+	dropSections: z$1.array(z$1.string()).default([]).description(localized({
+		zh: "这个模式下要丢弃的 system prompt section：写 section 名（精确匹配）或以 `*` 结尾的前缀（如 `mcp-*`）。",
+		en: "System prompt sections to drop for this mode: exact names, or prefixes ending in `*`."
+	})),
 	runtimeContext: z$1.boolean().default(true).description(localized({
 		zh: "是否要动态快照（文件沙箱策略、审批策略）与时钟注入（`standard` 那类 preset 声明的 `time-context`）。",
 		en: "Whether the runtime snapshot (sandbox and approval policy) and the clock injection (`time-context`, declared by presets such as `standard`) apply."
@@ -92,14 +104,11 @@ const modeSchema = z$1.object({
 	}))
 });
 const Config = z$1.object({
+	modes: z$1.dict(modeSchema).default({}),
 	default: z$1.string().required().description(localized({
 		zh: "新会话（还没选过模式的会话）用哪个模式；必须是下面 `modes` 里的一个 id。",
 		en: "Mode a session starts in before anyone picks one; must be an id in `modes`."
 	})).volatile(),
-	modes: z$1.dict(modeSchema).required().description(localized({
-		zh: "模式清单：id → 定义（persona / 工具名单 / 生效的 policy 规则 / 角色）。改它对**已运行会话**不自动生效——重挂后新建的会话、或重新应用模式的会话才用新定义。",
-		en: "Mode roster: id to definition (persona, tool lists, effective policy rules, role). Edits do not follow into already-running sessions; sessions created after the row is remounted use the new definition."
-	})).volatile(),
 	models: z$1.dict(modelSchema).default({}).hidden()
 });
 const POLICY_NAME_SET = new Set(POLICY_NAMES);
@@ -141,6 +150,137 @@ function installPersona(agent, persona) {
 		for (const dispose of disposers) dispose();
 	};
 }
+// src/ptc-sdk.ts
+function renderSkeleton(groups, members = []) {
+	const list = groups.length === 0 ? "（当前没有可用的组）" : groups.map((g) => JSON.stringify(g)).join(" | ");
+	return [
+		"在 `run_code` 写的程序里调用工具：`await tools.name(args)`；名字带引号的成员用索引访问（`tools[\"名字\"](args)`）。**常驻组**的签名已列在下面；其余组用 `describe_tool({ group })` 现取（不带 `group` 返回分组清单）：",
+		"",
+		"```ts",
+		"declare global {",
+		`  interface ${TOOLS_SDK_INTERFACE} {`,
+		...members,
+		`    describe_tool(args: { group?: ${list} }): Promise<{ text?: string }>`,
+		"  }",
+		`  const tools: ${TOOLS_SDK_INTERFACE}`,
+		"}",
+		"```"
+	].join("\n");
+}
+renderSkeleton([]);
+function renderTools(schemas) {
+	if (schemas.length === 0) return "";
+	const sorted = [...schemas].sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
+	const declaration = renderToolsDeclaration(sorted.map((schema) => ({
+		name: schema.name,
+		args: schema.args,
+		output: schema.output
+	})));
+	const hint = sorted.some((schema) => renderToolKey(schema.name) !== schema.name) ? "名字带引号的成员用索引访问：`tools[\"名字\"](args)`。\n\n" : "";
+	const sections = schemas.map((schema) => schema.section?.trim() ?? "").filter((text) => text.length > 0).join("\n\n");
+	return `${sections.length === 0 ? "" : `${sections}\n\n`}${hint}${[
+		"```ts",
+		declaration,
+		"```"
+	].join("\n")}`;
+}
+function replaceToolsSdk(sections, skeleton) {
+	return sections.map((section) => section.name === "tools:sdk" ? {
+		...section,
+		text: skeleton
+	} : section);
+}
+// src/ptc-describe.ts
+function groupEntries(entries) {
+	const groups = /* @__PURE__ */ new Map();
+	for (const entry of entries) {
+		const group = toolGroupOf(entry.name);
+		const list = groups.get(group);
+		const schema = {
+			name: entry.name,
+			description: SHORT_TOOL_DESCRIPTIONS[entry.name] ?? entry.description,
+			args: schemaText(entry.parametersSchema),
+			output: schemaText(entry.outputSchema)
+		};
+		if (list === void 0) groups.set(group, [schema]);
+		else list.push(schema);
+	}
+	return groups;
+}
+function schemaText(schema) {
+	return schema === void 0 ? "JsonValue" : jsonSchemaToTs(schema);
+}
+const GROUP_SUMMARY = {
+	fs: "文件读写",
+	shell: "执行命令",
+	"web-access": "联网检索与抓取",
+	ask: "向用户提问",
+	plan: "计划与待办",
+	swarm: "子代理与消息",
+	skill: "加载技能说明",
+	code: "代码执行（PTC）",
+	mcp: "MCP 资源",
+	onDemand: "按需工具",
+	other: "其它"
+};
+const GROUP_SECTION = {
+	collab: "## 协作\n\n可以派发子代理、给队友发消息、等待队友；所有人共享同一个工作目录与文件系统，写操作要划分互不重叠的范围，必要时用共享任务记录范围与依赖。",
+	"mcp:resources": "## MCP 资源\n\n按 URI 读取 MCP server 暴露的只读资源（文档、日志、数据）；先 list 再 read。当前 server 都是 tools-only，通常没有可读资源。",
+	fs: "## 文件\n\n读、写、改文件与检索；改文件前先读当前内容，避免覆盖别人的改动。",
+	shell: "## Shell\n\n执行命令；不要用它绕过文件工具做批量改写。",
+	"web-access": "## 联网\n\n搜索与抓取网页。",
+	skill: "## 技能\n\n按需加载技能说明，再照着做。"
+};
+function sectionOfGroup(group) {
+	return GROUP_SECTION[group] ?? "";
+}
+function summaryOf(group) {
+	if (group.startsWith("mcp:")) return `MCP · ${group.slice(4)}`;
+	return GROUP_SUMMARY[group] ?? "其它";
+}
+function describeTools(entries, group) {
+	const groups = groupEntries(entries);
+	if (group === void 0) return [...groups.keys()].sort().map((name) => `${name} — ${summaryOf(name)}`).join("\n");
+	const declaration = renderTools(groups.get(group) ?? []);
+	const section = sectionOfGroup(group);
+	return section.length === 0 ? declaration : `${section}\n\n${declaration}`;
+}
+// src/per-agent.ts
+function perAgentAccount(ctx, agent) {
+	const stoppers = [];
+	let released = false;
+	let rowAccount = () => {};
+	let agentAccount = () => {};
+	const release = () => {
+		if (released) return;
+		released = true;
+		for (const stop of stoppers.splice(0).reverse()) stop();
+		agentAccount();
+		rowAccount();
+	};
+	rowAccount = ctx.effect(() => () => release(), "session-mode: per-agent releases");
+	agentAccount = agent.ctx.effect(() => () => release(), "session-mode: per-agent releases");
+	return {
+		add: (stop) => {
+			if (released) stop();
+			else stoppers.push(stop);
+		},
+		release
+	};
+}
+// src/tool-groups.ts
+function groupTools(names) {
+	const groups = /* @__PURE__ */ new Map();
+	for (const name of names) {
+		const group = toolGroupOf(name);
+		if (isResidentToolGroup(group)) continue;
+		const key = groupRef(group);
+		const tools = groups.get(key);
+		if (tools === void 0) groups.set(key, [name]);
+		else tools.push(name);
+	}
+	return groups;
+}
 // src/scope.ts
 const SKILL_OUT_OF_SCOPE = (skillName, modeName) => `${skillName} 不在「${modeName}」的技能白名单里，加载它不会有结果；按当前模式可用的技能完成任务，或让用户切到别的模式。`;
 const SKILL_DENYLISTED = (skillName, modeName) => `${skillName} 被「${modeName}」的技能黑名单排除，加载它不会有结果；按当前模式可用的技能完成任务，或让用户切到别的模式。`;
@@ -148,6 +288,7 @@ function skillRefusalOf(skillName, modeName, denial) {
 	return denial === "denylisted" ? SKILL_DENYLISTED(skillName, modeName) : SKILL_OUT_OF_SCOPE(skillName, modeName);
 }
 const TOOL_SECTION_PREFIX = "tool:";
+const RUNTIME_SECTIONS = /* @__PURE__ */ new Set(["harness:source", "app:web-surface"]);
 const SKILL_TOOL_NAME = "skill";
 function gateOfNames(allow, deny) {
 	const denied = new Set(deny);
@@ -207,69 +348,221 @@ function skillNameOf(arguments_) {
 }
 var SessionScope = class {
 	applied = /* @__PURE__ */ new WeakMap();
+	activatedGroups = /* @__PURE__ */ new WeakMap();
+	faces = /* @__PURE__ */ new WeakMap();
+	catalogs = /* @__PURE__ */ new WeakMap();
 	ctx;
 	constructor(ctx) {
 		this.ctx = ctx;
 		ctx.on("system-prompt/assemble", async (_assembly, context, next) => {
 			const agent = context.agent;
 			const applied = agent === void 0 ? void 0 : this.applied.get(agent);
-			if (applied === void 0 || applied.gate === void 0) return next();
+			if (applied === void 0) return next();
 			const gate = applied.gate;
 			const result = await next();
+			const filtered = result.sections.filter((section) => {
+				if (!applied.runtimeContext && RUNTIME_SECTIONS.has(section.name)) return false;
+				if (applied.dropSections.some((pattern) => pattern.endsWith("*") ? section.name.startsWith(pattern.slice(0, -1)) : section.name === pattern)) return false;
+				if (gate === void 0) return true;
+				if (gate !== void 0 && section.name.startsWith(TOOL_SECTION_PREFIX)) return denialOf(gate, section.name.slice(5)) === void 0;
+				if (gate !== void 0 && section.name.startsWith("mcp:")) {
+					const server = section.name.slice(4);
+					return applied.known.some((name) => name.startsWith(`mcp__${server}__`) && denialOf(gate, name) === void 0);
+				}
+				return true;
+			});
 			return {
 				...result,
-				sections: result.sections.filter((section) => section.name.startsWith(TOOL_SECTION_PREFIX) ? denialOf(gate, section.name.slice(5)) === void 0 : true)
+				sections: replaceToolsSdk([...filtered], renderSkeleton([...new Set(applied.known.map((name) => toolGroupOf(name)))].sort()))
 			};
 		});
 	}
+	account(agent) {
+		return perAgentAccount(this.ctx, agent);
+	}
 	apply(agent, definition) {
 		const previous = this.applied.get(agent);
 		if (previous !== void 0) previous.dispose();
 		const gate = gateOfNames(definition.allowTools, definition.denyTools);
 		const skillGate = gateOfNames(definition.allowSkills, definition.denySkills);
-		const dispose = agent.ctx.effect(() => {
-			const stoppers = [];
-			stoppers.push(agent.ctx.on("agent/pre-step", async (_payload, next) => {
-				const decision = await next();
-				if (decision.kind !== "enter") return decision;
-				const kept = this.suppress(decision.messages, definition, skillGate);
-				return kept === void 0 ? decision : {
-					...decision,
-					messages: kept
-				};
-			}, { prepend: true }));
-			if (definition.runtimeContext === false) stoppers.push(agent.ctx.systemPrompt.suppressRuntimeContext());
-			const install = (scope) => {
-				const disposers = [];
-				if (gate !== void 0) {
-					const known = new Set(scope.tools.definitions(agent).map((tool) => tool.name));
-					disposers.push(scope.tools.restrict({
-						...gate.allow === void 0 ? {} : { allow: [...gate.allow].filter((name) => known.has(name)) },
-						...gate.deny.size === 0 ? {} : { deny: [...gate.deny].filter((name) => known.has(name)) }
-					}));
-				}
-				if (skillGate === void 0) return disposers;
-				disposers.push(scope.tools.guard((exec) => {
-					if (exec.name !== SKILL_TOOL_NAME) return void 0;
-					const skillName = skillNameOf(exec.arguments);
-					if (skillName === void 0) return void 0;
-					const skillDenial = denialOf(skillGate, skillName);
-					return skillDenial === void 0 ? void 0 : skillRefusalOf(skillName, definition.name, skillDenial);
-				}));
-				return disposers;
+		const account = this.account(agent);
+		account.add(agent.ctx.on("agent/pre-step", async (_payload, next) => {
+			const decision = await next();
+			if (decision.kind !== "enter") return decision;
+			const kept = this.suppress(decision.messages, definition, skillGate);
+			return kept === void 0 ? decision : {
+				...decision,
+				messages: kept
 			};
-			if (agent.ctx.get("tools") === void 0) {
-				const fiber = agent.ctx.inject(["tools"], (scope) => {
-					stoppers.push(...install(scope));
-				});
-				stoppers.push(() => fiber.dispose());
-			} else stoppers.push(...install(agent.ctx));
-			return stoppers;
-		}, "session-mode: per-session gate");
+		}, { prepend: true }));
+		if (definition.runtimeContext === false) account.add(agent.ctx.systemPrompt.suppressRuntimeContext());
+		const install = (scope) => {
+			const disposers = [];
+			const definitions = scope.tools.definitions(agent);
+			const known = definitions.map((tool) => tool.name);
+			this.catalogs.set(agent, definitions.map((tool) => ({
+				name: tool.name,
+				description: tool.description
+			})));
+			const groups = gate === void 0 || gate.allow === void 0 ? groupTools(known) : /* @__PURE__ */ new Map();
+			const activated = this.activatedGroups.get(agent) ?? /* @__PURE__ */ new Set();
+			this.activatedGroups.set(agent, activated);
+			const face = {
+				agent,
+				known,
+				baseDeny: new Set(definition.denyTools),
+				allowOverride: new Set(definition.allowToolsOverride ?? []),
+				denyOverride: new Set(definition.denyToolsOverride ?? []),
+				groups
+			};
+			this.faces.set(agent, face);
+			disposers.push(scope.tools.register(this.toolsDescribeTool(scope)));
+			this.restrict(scope, gate, face, activated);
+			if (skillGate !== void 0) disposers.push(scope.tools.guard((exec) => {
+				if (exec.name !== SKILL_TOOL_NAME) return void 0;
+				const skillName = skillNameOf(exec.arguments);
+				if (skillName === void 0) return void 0;
+				const skillDenial = denialOf(skillGate, skillName);
+				return skillDenial === void 0 ? void 0 : skillRefusalOf(skillName, definition.name, skillDenial);
+			}));
+			return [...disposers, () => {
+				face.disposeRestriction?.();
+				face.disposeRestriction = void 0;
+			}];
+		};
+		if (agent.ctx.get("tools") === void 0) {
+			const fiber = agent.ctx.inject(["tools"], (scope) => {
+				for (const stop of install(scope)) account.add(stop);
+			});
+			account.add(() => {
+				fiber.dispose().catch((error) => this.ctx.logger.error(error));
+			});
+		} else for (const stop of install(agent.ctx)) account.add(stop);
 		this.channel()?.setInstructions(agent, definition.instructions);
+		const known = this.faces.get(agent)?.known ?? [];
+		const expand = (names) => {
+			const out = /* @__PURE__ */ new Set();
+			for (const ref of names) if (ref.startsWith("group:") || ref.startsWith("mcp:")) {
+				const group = refGroup(ref);
+				for (const tool of known) if (toolGroupOf(tool) === group) out.add(tool);
+			} else out.add(ref);
+			return [...out];
+		};
+		const expandedDeny = expand(definition.denyTools);
+		for (const id of definition.allowToolsOverride ?? []) {
+			const at = expandedDeny.indexOf(id);
+			if (at >= 0) expandedDeny.splice(at, 1);
+		}
+		for (const id of definition.denyToolsOverride ?? []) if (!expandedDeny.includes(id)) expandedDeny.push(id);
+		const allowExpanded = expand(definition.allowTools);
 		this.applied.set(agent, {
-			gate,
-			dispose
+			gate: gateOfNames(allowExpanded, [...expandedDeny, ...this.onDemandDeny(agent)]),
+			allowExpanded,
+			denyExpanded: expandedDeny,
+			known,
+			dropSections: definition.dropSections ?? [],
+			runtimeContext: definition.runtimeContext,
+			dispose: () => account.release()
+		});
+	}
+	onDemandDeny(agent) {
+		const face = this.faces.get(agent);
+		if (face === void 0) return [];
+		const activated = this.activatedGroups.get(agent);
+		const denied = [];
+		for (const [group, tools] of face.groups) {
+			if (activated?.has(group) === true) continue;
+			denied.push(...tools);
+		}
+		return denied;
+	}
+	knownTools(agent) {
+		const applied = this.applied.get(agent);
+		if (applied === void 0) return [];
+		const names = (this.ctx.get("tools")?.definitions(agent) ?? applied.known.map((name) => ({ name }))).map((definition) => definition.name);
+		const gate = applied.gate;
+		return gate === void 0 ? names : names.filter((tool) => denialOf(gate, tool) === void 0);
+	}
+	catalogOf(agent) {
+		return this.catalogs.get(agent) ?? [];
+	}
+	restrict(scope, gate, face, activated) {
+		face.disposeRestriction?.();
+		face.disposeRestriction = void 0;
+		const denied = /* @__PURE__ */ new Set();
+		for (const ref of face.baseDeny) if (ref.startsWith("group:") || ref.startsWith("mcp:")) {
+			const group = refGroup(ref);
+			for (const tool of face.known) if (toolGroupOf(tool) === group) denied.add(tool);
+		} else denied.add(ref);
+		for (const [group, tools] of face.groups) {
+			if (activated.has(group)) continue;
+			for (const tool of tools) denied.add(tool);
+		}
+		for (const id of face.allowOverride) denied.delete(id);
+		for (const id of face.denyOverride) denied.add(id);
+		for (const id of denied) if (isProtectedTool(id)) denied.delete(id);
+		if (gate?.allow === void 0 && denied.size === 0) return;
+		const known = new Set(face.known);
+		const allow = gate?.allow === void 0 ? void 0 : [...gate.allow, ...[...known].filter(isProtectedTool)].filter((name) => known.has(name));
+		const denyList = [...denied].filter((name) => known.has(name));
+		face.disposeRestriction = this.installRestriction(scope, allow, denyList);
+	}
+	installRestriction(scope, allow, deny) {
+		const attempt = (nextAllow, nextDeny) => {
+			if (nextAllow === void 0 && nextDeny.length === 0) return void 0;
+			try {
+				return scope.tools.restrict({
+					...nextAllow === void 0 ? {} : { allow: [...nextAllow] },
+					...nextDeny.length === 0 ? {} : { deny: [...nextDeny] }
+				});
+			} catch (error) {
+				this.ctx.logger.debug(`session-mode: 工具面收窄降级（${String(error)}）`);
+				return;
+			}
+		};
+		const first = attempt(allow, deny);
+		if (first !== void 0 || allow === void 0 && deny.length === 0) return first;
+		const global = this.globalToolNames();
+		return attempt(allow === void 0 ? void 0 : allow.filter((name) => global.has(name)), deny.filter((name) => global.has(name)));
+	}
+	globalToolNames() {
+		const tools = this.ctx.get("tools");
+		return new Set((tools?.definitions() ?? []).map((definition) => definition.name));
+	}
+	toolsDescribeTool(scope) {
+		return defineTool({
+			name: "describe_tool",
+			description: "",
+			parameters: { group: { type: "string" } },
+			output: {
+				schema: {
+					type: "object",
+					additionalProperties: false,
+					properties: { text: {
+						type: "string",
+						required: true
+					} }
+				},
+				render: (_args, value) => [{
+					type: "text",
+					text: value.text
+				}]
+			},
+			async execute(args) {
+				const definitions = scope.tools.definitions();
+				const prompt = scope.get("systemPrompt");
+				const sectionOf = (name) => {
+					const section = prompt?.sections?.get(`tool:${name}`);
+					return typeof section?.text === "string" ? section.text : void 0;
+				};
+				return { text: describeTools(definitions.map((definition) => ({
+					name: definition.name,
+					description: definition.description ?? "",
+					parametersSchema: projectToolSchema(definition, false).parameters,
+					outputSchema: definition.output?.schema,
+					section: sectionOf(definition.name)
+				})), typeof args.group === "string" ? args.group : void 0) };
+			}
 		});
 	}
 	suppress(messages, definition, skillGate) {
@@ -312,6 +605,49 @@ var SessionScope = class {
 		}
 	}
 };
+// src/mode-store.ts
+function modesDir() {
+	return dshHomePath("modes");
+}
+async function loadModeOverrides() {
+	const dir = modesDir();
+	const entries = await readdir(dir).catch(() => []);
+	const overrides = {};
+	for (const name of entries) {
+		if (!name.endsWith(".toml")) continue;
+		const text = await readFile(join(dir, name), "utf8").catch(() => void 0);
+		if (text === void 0) continue;
+		try {
+			overrides[name.slice(0, -5)] = parse(text);
+		} catch {}
+	}
+	return overrides;
+}
+function prettyToml(text) {
+	return text.split("\n").map((line) => {
+		const match = /^(\s*[A-Za-z0-9_.-]+)\s*=\s*"((?:[^"\\]|\\.)*)"$/u.exec(line);
+		if (match === null) return line;
+		const [, key, raw] = match;
+		if (key === void 0 || raw === void 0 || !raw.includes("\\n")) return line;
+		return `${key} = """\n${raw.replace(/\\n/gu, "\n").replace(/\\"/gu, "\"").replace(/"""/gu, "\\\"\"\"")}"""`;
+	}).join("\n");
+}
+async function writeMode(id, value) {
+	await mkdir(modesDir(), { recursive: true });
+	await writeFile(join(modesDir(), `${id}.toml`), prettyToml(stringify(value)), "utf8");
+}
+async function removeMode(id) {
+	await rm(join(modesDir(), `${id}.toml`), { force: true });
+}
+// src/session-mode-store.ts
+const sessionModeRecord = z.object({ config: z.record(z.string(), z.unknown()) });
+const sessionModeDomainSpec = defineDomain({
+	name: "session_mode",
+	version: 1,
+	invalidRecords: "backup-and-skip",
+	layout: "per-record",
+	tables: { sessions: domainTable(sessionModeRecord) }
+});
 // src/index.ts
 const name = "session-mode";
 const inject = [
@@ -320,6 +656,9 @@ const inject = [
 	"sessionProjections",
 	"systemPrompt"
 ];
+function plainMode(value) {
+	return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== void 0));
+}
 const sessionModeSchema = z.union([z.string(), z.null()]);
 const sessionModeProjection = {
 	key: "sessionMode",
@@ -346,6 +685,8 @@ const sessionModeEditableProjection = {
 };
 var SessionModes = class SessionModes extends Service {
 	installs = /* @__PURE__ */ new WeakMap();
+	modeOverrides = /* @__PURE__ */ new WeakMap();
+	sessionsTable;
 	scope;
 	projectionHandle;
 	editableHandle;
@@ -356,7 +697,7 @@ var SessionModes = class SessionModes extends Service {
 		super(ctx, "sessionModes");
 		this.config = {
 			default: config.default.get(),
-			modes: structuredClone(config.modes.get())
+			modes: structuredClone(config.modes ?? {})
 		};
 		const problem = configProblem({
 			...this.config,
@@ -366,6 +707,7 @@ var SessionModes = class SessionModes extends Service {
 		this.scope = new SessionScope(ctx);
 		ctx.on("fs/write-intent", (_target, actor, next) => this.decidePolicy("fs/write-intent", actor, next), { prepend: true });
 		ctx.on("fs/edit-intent", (_target, actor, next) => this.decidePolicy("fs/edit-intent", actor, next), { prepend: true });
+		ctx.on("fs/delete-intent", (_target, actor, next) => this.decidePolicy("fs/delete-intent", actor, next), { prepend: true });
 		ctx.on("agent/created", ({ agent }) => {
 			this.installFor(agent);
 		});
@@ -378,11 +720,30 @@ var SessionModes = class SessionModes extends Service {
 		});
 	}
 	static async create(ctx, config) {
-		const modes = new SessionModes(ctx, config);
-		await modes.init();
-		return modes;
+		const injected = config.modes ?? {};
+		const modes = Object.keys(injected).length === 0 ? Object.fromEntries(MODE_SOURCES.map((source) => [source.id, normalizeMode(modeConfig(source))])) : injected;
+		const sessionModes = new SessionModes(ctx, {
+			...config,
+			modes
+		});
+		await sessionModes.init();
+		return sessionModes;
 	}
 	async init() {
+		const modes = this.config.modes;
+		for (const [id, value] of Object.entries(await loadModeOverrides())) {
+			if (id === "noop") continue;
+			modes[id] = normalizeMode({
+				...modes[id],
+				...value
+			});
+		}
+		const storage = this.ctx.get("storageDomain");
+		if (storage !== void 0) {
+			const domain = await storage.open(sessionModeDomainSpec);
+			this.ctx.effect(() => () => domain.close(), "session-mode.domainClose");
+			this.sessionsTable = domain.table("sessions");
+		}
 		this.projectionHandle = await this.ctx.sessionProjections.register(sessionModeProjection);
 		this.editableHandle = await this.ctx.sessionProjections.register(sessionModeEditableProjection);
 		this.modelSelectionHandle = await this.ctx.sessionProjections.register(modelSelectionProjectionDefinition);
@@ -431,9 +792,254 @@ var SessionModes = class SessionModes extends Service {
 	editableOf(session) {
 		return this.editableHandle.stateOf(session);
 	}
+	buildCatalog(agent, base, merged, registered, visible) {
+		const entry = (id, description, group, allowKey, denyKey) => {
+			const fallback = deniedByList(base[denyKey], id) ? "deny" : base[allowKey].length > 0 ? base[allowKey].includes(id) ? "allow" : "deny" : "default";
+			return {
+				id,
+				description,
+				...group === void 0 ? {} : {
+					group,
+					groupLabel: toolGroupLabel(group)
+				},
+				fallback,
+				override: (() => {
+					const baseDeny = deniedByList(base[denyKey], id);
+					const effDeny = deniedByList(merged[denyKey], id);
+					if (baseDeny !== effDeny) return effDeny ? "deny" : "allow";
+					const baseAllow = base[allowKey].includes(id);
+					const effAllow = merged[allowKey].includes(id);
+					if (baseAllow !== effAllow) return effAllow ? "allow" : "deny";
+					return null;
+				})()
+			};
+		};
+		const known = /* @__PURE__ */ new Map();
+		if (agent !== void 0) {
+			for (const tool of this.scope.catalogOf(agent)) known.set(tool.name, tool);
+			for (const tool of visible) if (!known.has(tool.name)) known.set(tool.name, {
+				name: tool.name,
+				description: tool.description ?? ""
+			});
+		}
+		const tools = [...known.values()].map((tool) => entry(tool.name, tool.description, toolGroupOf(tool.name), "allowTools", "denyTools"));
+		const toolIds = new Set(tools.map((tool) => tool.id));
+		const fsActive = [
+			"read",
+			"write",
+			"edit",
+			"apply_patch"
+		].some((id) => toolIds.has(id));
+		return {
+			tools,
+			skills: registered.map((skill) => entry(skill.name, skill.description, void 0, "allowSkills", "denySkills")),
+			policies: POLICY_NAMES.map((policy) => {
+				const row = entry(policy, POLICY_DESCRIPTIONS[policy], void 0, "allowPolicies", "denyPolicies");
+				return fsActive ? row : {
+					...row,
+					fallback: "deny",
+					override: null
+				};
+			})
+		};
+	}
+	knownToolsOf(agent) {
+		return this.scope.knownTools(agent);
+	}
 	modeOfSession(session) {
 		return this.definition(this.modeOf(session));
 	}
+	record(agent) {
+		const session = this.modeOverrides.get(agent);
+		if (this.sessionsTable === void 0) return;
+		if (session === void 0) this.sessionsTable.delete(agent.session.id);
+		else this.sessionsTable.put(agent.session.id, { config: { ...session } });
+	}
+	hydrate(agent) {
+		if (this.modeOverrides.has(agent) || this.sessionsTable === void 0) return;
+		const row = this.sessionsTable.get(agent.session.id);
+		if (row === void 0) return;
+		this.modeOverrides.set(agent, row.config);
+		const modeId = this.resolveModeId(agent);
+		this.installs.get(agent)?.dispose();
+		this.installs.delete(agent);
+		this.installFor(agent, modeId);
+	}
+	async saveConfig(sessionId, config) {
+		const agent = this.ctx.agents.get(sessionId);
+		if (agent === void 0) return void 0;
+		const modeId = this.modeOf(agent.session);
+		this.config.modes[modeId] = config;
+		await writeMode(modeId, plainMode({ ...config }));
+		this.modeOverrides.delete(agent);
+		this.record(agent);
+		this.installs.get(agent)?.dispose();
+		this.installs.delete(agent);
+		this.installFor(agent, modeId);
+		return this.activeState(sessionId);
+	}
+	async applyConfig(sessionId, config) {
+		const agent = this.ctx.agents.get(sessionId);
+		if (agent === void 0) return void 0;
+		this.modeOverrides.set(agent, structuredClone(config));
+		this.record(agent);
+		const modeId = this.resolveModeId(agent);
+		this.installs.get(agent)?.dispose();
+		this.installs.delete(agent);
+		this.installFor(agent, modeId);
+		return this.activeState(sessionId);
+	}
+	toolNames(agent) {
+		const tools = this.ctx.get("tools");
+		const known = new Set((tools?.definitions() ?? []).map((tool) => tool.name));
+		for (const tool of this.scope.catalogOf(agent)) known.add(tool.name);
+		return [...known];
+	}
+	editableFaceOf(mode) {
+		return {
+			persona: { ...mode.persona },
+			allowTools: [...mode.allowTools],
+			denyTools: [...mode.denyTools],
+			allowSkills: [...mode.allowSkills],
+			denySkills: [...mode.denySkills],
+			allowPolicies: [...mode.allowPolicies],
+			denyPolicies: [...mode.denyPolicies],
+			instructions: mode.instructions,
+			skills: mode.skills ?? true,
+			runtimeContext: mode.runtimeContext
+		};
+	}
+	definitionFor(agent, modeId) {
+		const base = this.definition(modeId);
+		const normalized = asModeConfig(base, base.skills ?? true);
+		const session = this.modeOverrides.get(agent);
+		return resolveModeConfig(normalized, session === void 0 ? void 0 : {
+			...normalized,
+			...session
+		});
+	}
+	overriddenKeys(agent) {
+		if (agent === void 0) return [];
+		const override = this.modeOverrides.get(agent);
+		if (override === void 0) return [];
+		return Object.keys(override).filter((key) => override[key] !== void 0);
+	}
+	overriddenFields(agent) {
+		if (agent === void 0) return [];
+		const override = this.modeOverrides.get(agent);
+		return override === void 0 ? [] : Object.keys(override);
+	}
+	async setModePatch(sessionId, patch) {
+		const agent = this.ctx.agents.get(sessionId);
+		if (agent === void 0) return void 0;
+		const next = { ...this.modeOverrides.get(agent) };
+		for (const [key, value] of Object.entries(patch)) if (value === null) Reflect.deleteProperty(next, key);
+		else next[key] = value;
+		this.modeOverrides.set(agent, next);
+		const modeId = this.resolveModeId(agent);
+		this.record(agent);
+		this.installs.get(agent)?.dispose();
+		this.installs.delete(agent);
+		this.installFor(agent, modeId);
+		return this.activeState(sessionId);
+	}
+	async setSwitches(sessionId, patch) {
+		if (this.ctx.agents.get(sessionId) === void 0) return void 0;
+		return this.setModePatch(sessionId, patch);
+	}
+	async saveAsDefault(sessionId) {
+		const agent = this.ctx.agents.get(sessionId);
+		if (agent === void 0) throw new Error("会话不存在。");
+		if (this.modeOverrides.get(agent) === void 0) return;
+		const modeId = this.modeOf(agent.session);
+		const editable = this.editableFaceOf(this.definitionFor(agent, modeId));
+		const next = plainMode({
+			...this.config.modes[modeId],
+			...editable
+		});
+		this.config.modes[modeId] = next;
+		await writeMode(modeId, next);
+		this.modeOverrides.delete(agent);
+		this.installs.get(agent)?.dispose();
+		this.installs.delete(agent);
+		this.installFor(agent, modeId);
+		return this.activeState(sessionId);
+	}
+	async saveAsNewMode(sessionId, code, name) {
+		const agent = this.ctx.agents.get(sessionId);
+		if (agent === void 0) throw new Error("会话不存在。");
+		const id = code.trim();
+		if (id.length === 0) throw new Error("模式 code 不能为空。");
+		if (!/^[a-zA-Z0-9_-]+$/u.test(id)) throw new Error("模式 code 只能包含字母、数字、下划线与连字符。");
+		if (this.config.modes[id] !== void 0) throw new Error(`模式 ${id} 已存在。`);
+		const next = plainMode({
+			...this.definitionFor(agent, this.resolveModeId(agent)),
+			name: name?.trim() || id
+		});
+		this.config.modes[id] = next;
+		await writeMode(id, next);
+		return id;
+	}
+	async deleteMode(sessionId) {
+		const agent = this.ctx.agents.get(sessionId);
+		if (agent === void 0) throw new Error("会话不存在。");
+		const modeId = this.modeOf(agent.session);
+		if (modeId === this.defaultId) throw new Error("部署默认模式不能删除。");
+		const remaining = Object.keys(this.config.modes).filter((id) => id !== modeId);
+		if (remaining.length === 0) throw new Error("至少要留一个模式。");
+		const fallback = this.defaultId === modeId ? remaining[0] : this.defaultId;
+		Reflect.deleteProperty(this.config.modes, modeId);
+		await removeMode(modeId);
+		this.modeOverrides.delete(agent);
+		if (this.projectionHandle.stateOf(agent.session) === modeId) agent.session.append("session-mode/selected", { sessionMode: fallback });
+		this.installs.get(agent)?.dispose();
+		this.installFor(agent, fallback);
+		return fallback;
+	}
+	async activeState(sessionId) {
+		const session = this.ctx.sessions.get(sessionId);
+		if (session === void 0) return void 0;
+		const agent = this.ctx.agents.get(sessionId);
+		const id = this.modeOf(session);
+		const mode = agent === void 0 ? this.definition(id) : this.definitionFor(agent, id);
+		const unwrap = (value) => value === void 0 ? void 0 : value[Symbol.for("cordis.original")] ?? value;
+		const tools = unwrap(this.ctx.get("tools"));
+		const skills = unwrap(this.ctx.get("skills"));
+		const cwd = (agent?.session.header)?.cwd;
+		const registered = skills === void 0 ? [] : await skills.list({
+			...agent === void 0 ? {} : { scope: agent },
+			...typeof cwd === "string" ? { cwd } : {}
+		}).catch((error) => {
+			this.ctx.logger.warn("session-mode: skills.list() failed %o", { error: String(error) });
+			return [];
+		});
+		const config = asModeConfig(this.definition(id), this.definition(id).skills ?? true);
+		const override = agent === void 0 ? void 0 : this.modeOverrides.get(agent);
+		const overriddenFields = override === void 0 ? [] : [
+			["persona", "persona"],
+			["instructions", "instructions"],
+			["skills", "skills"],
+			["runtimeContext", "runtimeContext"],
+			["allowTools", "allowTools"],
+			["denyTools", "denyTools"],
+			["allowSkills", "allowSkills"],
+			["denySkills", "denySkills"],
+			["allowPolicies", "allowPolicies"],
+			["denyPolicies", "denyPolicies"]
+		].filter(([key]) => JSON.stringify(override[key]) !== JSON.stringify(config[key])).map(([, field]) => field);
+		return {
+			mode: {
+				id,
+				name: mode.name,
+				description: mode.description
+			},
+			config,
+			session: override,
+			overriddenFields,
+			deletable: id !== this.defaultId && Object.keys(this.config.modes).length > 1,
+			catalog: this.buildCatalog(agent, this.definition(id), mode, registered, tools === void 0 ? [] : [...tools.definitions(), ...agent === void 0 ? [] : tools.schemas(agent)])
+		};
+	}
 	policyInForce(policy, actor) {
 		const agent = actor?.agent;
 		if (agent === void 0) return true;
@@ -457,7 +1063,7 @@ var SessionModes = class SessionModes extends Service {
 		const agent = this.ctx.agents.get(sessionId);
 		const registry = this.presetRegistry();
 		if (agent !== void 0 && registry !== void 0) {
-			const target = this.presetTarget(definition.presetsOnly, this.presetOfAgent(registry, agent));
+			const target = this.presetTarget(definition.presetsOnly ?? [], this.presetOfAgent(registry, agent));
 			if (target !== void 0) await registry.select(agent, target);
 		}
 		if (this.projectionHandle.stateOf(session) !== mode) session.append("session-mode/selected", { sessionMode: mode });
@@ -487,6 +1093,7 @@ var SessionModes = class SessionModes extends Service {
 		}
 	}
 	applyTo(agent, mode, options = {}) {
+		this.hydrate(agent);
 		this.definition(mode);
 		if (options.record !== false) agent.session.append("session-mode/selected", { sessionMode: mode });
 		this.installFor(agent, mode);
@@ -510,7 +1117,7 @@ var SessionModes = class SessionModes extends Service {
 	}
 	modeForPreset(preset) {
 		if (preset === void 0) return void 0;
-		const owners = Object.keys(this.config.modes).filter((id) => this.config.modes[id]?.presetsOnly.includes(preset));
+		const owners = Object.keys(this.config.modes).filter((id) => (this.config.modes[id]?.presetsOnly ?? []).includes(preset));
 		return owners.length === 1 ? owners[0] : void 0;
 	}
 	inheritedModeId(agent) {
@@ -523,23 +1130,26 @@ var SessionModes = class SessionModes extends Service {
 		const installed = this.installs.get(agent);
 		if (installed?.mode === modeId) return;
 		installed?.dispose();
-		const mode = this.definition(modeId);
-		const disposers = [installPersona(agent, mode.persona), this.installDefaultModel(agent, modeId)];
+		const mode = this.definitionFor(agent, modeId);
+		const account = this.scope.account(agent);
+		account.add(installPersona(agent, mode.persona));
+		account.add(this.installDefaultModel(agent, modeId));
 		this.installs.set(agent, {
 			mode: modeId,
-			dispose: () => {
-				for (const dispose of disposers) dispose();
-			}
+			dispose: () => account.release()
 		});
 		this.scope.apply(agent, {
 			name: mode.name,
 			allowTools: mode.allowTools,
 			denyTools: mode.denyTools,
+			allowToolsOverride: [],
+			denyToolsOverride: [],
 			allowSkills: mode.allowSkills,
 			denySkills: mode.denySkills,
 			instructions: mode.instructions,
 			skills: mode.skills ?? derivedSkills(mode),
-			runtimeContext: mode.runtimeContext
+			runtimeContext: mode.runtimeContext,
+			dropSections: mode.dropSections ?? []
 		});
 	}
 	installDefaultModel(agent, modeId) {
@@ -583,20 +1193,87 @@ function requestJson(request) {
 		request.on("error", reject);
 	});
 }
+function queryValue(url, name) {
+	if (url === void 0) return void 0;
+	const separator = url.indexOf("?");
+	if (separator < 0) return void 0;
+	const value = new URLSearchParams(url.slice(separator + 1)).get(name);
+	return value === null || value.length === 0 ? void 0 : value;
+}
 function requiredString(value, field) {
 	if (typeof value !== "string" || value.length === 0) throw new TypeError(`${field} 必须是非空字符串。`);
 	return value;
 }
+function isWriteRequest(record) {
+	return typeof record["switches"] === "object" || typeof record["modePatch"] === "object" || typeof record["itemState"] === "object" || typeof record["applyConfig"] === "object" || typeof record["saveConfig"] === "object" || typeof record["saveAsNewMode"] === "object" && record["saveAsNewMode"] !== null || record["deleteMode"] === true || record["saveAsDefault"] === true;
+}
 async function handleRoute(modes, request, response) {
 	try {
 		if (request.method === "GET") {
-			respondJson(response, 200, modes.roster());
+			const sessionId = queryValue(request.url, "sessionId");
+			if (sessionId === void 0) {
+				respondJson(response, 200, modes.roster());
+				return;
+			}
+			const active = await modes.activeState(sessionId);
+			if (active === void 0) {
+				respondJson(response, 404, { error: "会话不存在。" });
+				return;
+			}
+			respondJson(response, 200, active);
 			return;
 		}
 		if (request.method === "POST") {
 			const body = await requestJson(request);
 			if (typeof body !== "object" || body === null || Array.isArray(body)) throw new TypeError("请求体必须是 JSON 对象。");
 			const record = body;
+			if (isWriteRequest(record)) {
+				const target = requiredString(record["sessionId"], "sessionId");
+				const saved = record["saveAsDefault"] === true ? await modes.saveAsDefault(target) : void 0;
+				if (saved !== void 0) {
+					respondJson(response, 200, saved);
+					return;
+				}
+				if (record["deleteMode"] === true) {
+					await modes.deleteMode(target);
+					const state = await modes.activeState(target);
+					respondJson(response, state === void 0 ? 404 : 200, state ?? { error: "会话不存在。" });
+					return;
+				}
+				const saving = record["saveAsNewMode"];
+				if (typeof saving === "object" && saving !== null) {
+					const value = saving;
+					await modes.saveAsNewMode(target, requiredString(value.code, "code"), typeof value.name === "string" ? value.name : void 0);
+				}
+				if (typeof record["saveConfig"] === "object" && record["saveConfig"] !== null) {
+					const draft = record["saveConfig"];
+					if (draft.config === void 0) {
+						respondJson(response, 400, { error: "saveConfig 需要完整的 config。" });
+						return;
+					}
+					const state = await modes.saveConfig(target, draft.config);
+					respondJson(response, state === void 0 ? 404 : 200, state ?? { error: "会话不存在。" });
+					return;
+				}
+				if (typeof record["applyConfig"] === "object" && record["applyConfig"] !== null) {
+					const draft = record["applyConfig"];
+					if (draft.config === void 0) {
+						respondJson(response, 400, { error: "applyConfig 需要完整的 config。" });
+						return;
+					}
+					const state = await modes.applyConfig(target, draft.config);
+					respondJson(response, state === void 0 ? 404 : 200, state ?? { error: "会话不存在。" });
+					return;
+				}
+				const patch = record["modePatch"] ?? record["switches"];
+				const state = typeof patch === "object" && patch !== null ? await modes.setModePatch(target, patch) : await modes.activeState(target);
+				if (state === void 0) {
+					respondJson(response, 404, { error: "会话不存在。" });
+					return;
+				}
+				respondJson(response, 200, state);
+				return;
+			}
 			const sessionId = requiredString(record["sessionId"], "sessionId");
 			const mode = requiredString(record["mode"], "mode");
 			respondJson(response, 200, { mode: await modes.select(sessionId, mode) });
@@ -620,4 +1297,4 @@ function registerHttpRoutes(ctx, modes) {
 		}), "session-mode: HTTP route");
 	});
 }
-export { Config, POLICY_NAMES, SESSION_MODE_PATH, SessionModes, apply, inject, name, sessionModeEditableProjection, sessionModeProjection };
+export { Config, POLICY_NAMES, SESSION_MODE_PATH, SessionModes, apply, inject, isWriteRequest, name, sessionModeEditableProjection, sessionModeProjection };