@morlay/dsh-session-mode 0.0.4 → 0.0.6

package/dist/index.d.cts

@@ -23,6 +23,8 @@ interface SessionMode {
   readonly persona: SessionModePersona;
   readonly allowTools: string[];
   readonly denyTools: string[];
+  readonly allowSkills: string[];
+  readonly denySkills: string[];
   readonly allowPolicies: string[];
   readonly denyPolicies: string[];
   readonly instructions: boolean;

package/dist/index.d.mts

@@ -23,6 +23,8 @@ interface SessionMode {
   readonly persona: SessionModePersona;
   readonly allowTools: string[];
   readonly denyTools: string[];
+  readonly allowSkills: string[];
+  readonly denySkills: string[];
   readonly allowPolicies: string[];
   readonly denyPolicies: string[];
   readonly instructions: boolean;

package/dist/index.mjs

@@ -54,6 +54,14 @@ const modeSchema = z$1.object({
 		zh: "这个模式不用的工具（黑名单）：从 `allowTools` 定下的那份里减掉（`allowTools` 留空就是从全部里减）。留空 = 一条都不禁；同时命中两份名单时以这里为准。",
 		en: "Tools this mode must not use (deny list): subtracted from whatever `allowTools` settled on (with an empty `allowTools`, from everything). Empty denies nothing; a name in both lists is denied."
 	})),
+	allowSkills: z$1.array(z$1.string()).default([]).description(localized({
+		zh: "这个模式能用的技能；其余既不进技能目录，`skill` 工具加载它也被拒。**留空就是不设收窄**：技能注册表里有什么就用什么。",
+		en: "Skills this mode may use; everything else leaves the skill catalog and loading it through the `skill` tool is refused. Leave it empty to narrow nothing: the session then sees every skill the registry carries."
+	})),
+	denySkills: z$1.array(z$1.string()).default([]).description(localized({
+		zh: "这个模式不用的技能（黑名单）：从 `allowSkills` 定下的那份里减掉（`allowSkills` 留空就是从全部里减）。留空 = 一条都不禁；同时命中两份名单时以这里为准。",
+		en: "Skills this mode must not use (deny list): subtracted from whatever `allowSkills` settled on (with an empty `allowSkills`, from everything). Empty denies nothing; a name in both lists is denied."
+	})),
 	allowPolicies: z$1.array(z$1.string()).default([]).description(localized({
 		zh: "上游 policy 规则的生效白名单（`fs/write-intent` / `fs/edit-intent`）：留空 = 全部规则照旧生效；有值 = 只有列出的生效，其余的被绕过。",
 		en: "Allow list of upstream policy rules that stay in force (`fs/write-intent` / `fs/edit-intent`): empty keeps every rule; when set, only the listed ones stay, and the others are bypassed."
@@ -135,24 +143,73 @@ const DENYLISTED = (toolName, modeName) => `${toolName} 被「${modeName}」的
 function refusalOf(toolName, modeName, denial) {
 	return denial === "denylisted" ? DENYLISTED(toolName, modeName) : OUT_OF_SCOPE(toolName, modeName);
 }
+const SKILL_OUT_OF_SCOPE = (skillName, modeName) => `${skillName} 不在「${modeName}」的技能白名单里，加载它不会有结果；按当前模式可用的技能完成任务，或让用户切到别的模式。`;
+const SKILL_DENYLISTED = (skillName, modeName) => `${skillName} 被「${modeName}」的技能黑名单排除，加载它不会有结果；按当前模式可用的技能完成任务，或让用户切到别的模式。`;
+function skillRefusalOf(skillName, modeName, denial) {
+	return denial === "denylisted" ? SKILL_DENYLISTED(skillName, modeName) : SKILL_OUT_OF_SCOPE(skillName, modeName);
+}
 const TOOL_SECTION_PREFIX = "tool:";
-function gateOf(definition) {
-	const deny = new Set(definition.denyTools);
-	const allow = definition.allowTools.length === 0 ? void 0 : new Set(definition.allowTools);
-	if (allow === void 0 && deny.size === 0) return void 0;
+const SKILL_TOOL_NAME = "skill";
+function gateOfNames(allow, deny) {
+	const denied = new Set(deny);
+	const allowed = allow.length === 0 ? void 0 : new Set(allow);
+	if (allowed === void 0 && denied.size === 0) return void 0;
 	return {
-		allow,
-		deny
+		allow: allowed,
+		deny: denied
 	};
 }
-function denialOf(gate, toolName) {
-	if (gate.deny.has(toolName)) return "denylisted";
-	if (gate.allow !== void 0 && !gate.allow.has(toolName)) return "not-allowlisted";
+function denialOf(gate, name) {
+	if (gate.deny.has(name)) return "denylisted";
+	if (gate.allow !== void 0 && !gate.allow.has(name)) return "not-allowlisted";
 }
 function kindOf(message) {
 	const kind = message.source.kind;
 	return typeof kind === "string" ? kind : void 0;
 }
+const CATALOG_LINE = /^- `([^`]+)`: /u;
+function narrowCatalog(message, gate, warn) {
+	const source = message.source;
+	if (source.kind !== "skill-catalog") return void 0;
+	const entries = source.entries;
+	const denied = new Set(entries.map((entry) => entry.name).filter((name) => denialOf(gate, name) !== void 0));
+	if (denied.size === 0) return void 0;
+	const [block, ...rest] = message.content;
+	if (block?.type !== "text" || rest.length > 0) {
+		warn(`skill catalog message is not one text block; denied skills stay listed: ${[...denied].join(", ")}`);
+		return;
+	}
+	const removed = /* @__PURE__ */ new Set();
+	const lines = block.text.split("\n").filter((line) => {
+		const match = CATALOG_LINE.exec(line);
+		if (match === null) return true;
+		const name = match[1] ?? "";
+		if (!denied.has(name)) return true;
+		removed.add(name);
+		return false;
+	});
+	const missing = [...denied].filter((name) => !removed.has(name));
+	if (missing.length > 0) {
+		warn(`skill catalog lines not recognized; denied skills stay listed: ${missing.join(", ")}`);
+		return;
+	}
+	return {
+		...message,
+		content: [{
+			...block,
+			text: lines.join("\n")
+		}],
+		source: {
+			...source,
+			entries: entries.filter((entry) => !denied.has(entry.name))
+		}
+	};
+}
+function skillNameOf(arguments_) {
+	if (typeof arguments_ !== "object" || arguments_ === null) return void 0;
+	const name = arguments_.name;
+	return typeof name === "string" && name.length > 0 ? name : void 0;
+}
 var SessionScope = class {
 	applied = /* @__PURE__ */ new WeakMap();
 	ctx;
@@ -175,30 +232,54 @@ var SessionScope = class {
 			if (decision.kind !== "enter") return decision;
 			const applied = this.applied.get(payload.agent);
 			if (applied === void 0) return decision;
-			const kept = decision.messages.filter((message) => {
+			let changed = false;
+			const kept = [];
+			for (const message of decision.messages) {
 				const kind = kindOf(message);
-				if (kind === "agent-instructions") return applied.instructions;
-				if (kind === "skill-catalog") return applied.skills;
-				return true;
-			});
-			return kept.length === decision.messages.length ? decision : {
+				if (kind === "agent-instructions") {
+					if (applied.instructions) kept.push(message);
+					else changed = true;
+					continue;
+				}
+				if (kind === "skill-catalog") {
+					if (!applied.skills) {
+						changed = true;
+						continue;
+					}
+					const narrowed = applied.skillGate === void 0 ? void 0 : narrowCatalog(message, applied.skillGate, (line) => this.ctx.logger.warn(`session-mode: ${line}`));
+					if (narrowed === void 0) kept.push(message);
+					else {
+						changed = true;
+						kept.push(narrowed);
+					}
+					continue;
+				}
+				kept.push(message);
+			}
+			return changed ? {
 				...decision,
 				messages: kept
-			};
+			} : decision;
 		}, { prepend: true });
 	}
 	apply(agent, definition) {
 		const previous = this.applied.get(agent);
 		if (previous !== void 0) previous.dispose();
-		const gate = gateOf(definition);
+		const gate = gateOfNames(definition.allowTools, definition.denyTools);
+		const skillGate = gateOfNames(definition.allowSkills, definition.denySkills);
 		const dispose = agent.ctx.effect(() => {
 			const stoppers = [];
 			if (definition.runtimeContext === false) stoppers.push(agent.ctx.systemPrompt.suppressRuntimeContext());
 			const fiber = agent.ctx.inject(["tools"], (scope) => {
-				if (gate === void 0) return;
+				if (gate === void 0 && skillGate === void 0) return;
 				scope.tools.guard((exec) => {
-					const denial = denialOf(gate, exec.name);
-					return denial === void 0 ? void 0 : refusalOf(exec.name, definition.name, denial);
+					const denial = gate === void 0 ? void 0 : denialOf(gate, exec.name);
+					if (denial !== void 0) return refusalOf(exec.name, definition.name, denial);
+					if (skillGate === void 0 || exec.name !== SKILL_TOOL_NAME) return void 0;
+					const skillName = skillNameOf(exec.arguments);
+					if (skillName === void 0) return void 0;
+					const skillDenial = denialOf(skillGate, skillName);
+					return skillDenial === void 0 ? void 0 : skillRefusalOf(skillName, definition.name, skillDenial);
 				});
 			});
 			return [...stoppers, () => fiber.dispose()];
@@ -206,6 +287,7 @@ var SessionScope = class {
 		this.channel()?.setInstructions(agent, definition.instructions);
 		this.applied.set(agent, {
 			gate,
+			skillGate,
 			instructions: definition.instructions,
 			skills: definition.skills,
 			dispose
@@ -421,6 +503,8 @@ var SessionModes = class extends Service {
 			name: mode.name,
 			allowTools: mode.allowTools,
 			denyTools: mode.denyTools,
+			allowSkills: mode.allowSkills,
+			denySkills: mode.denySkills,
 			instructions: mode.instructions,
 			skills: mode.skills ?? derivedSkills(mode),
 			runtimeContext: mode.runtimeContext

package/dist/rows.mjs

@@ -11,6 +11,12 @@ const MODE_SOURCES = [{
 	description: "功能完整的编码 Agent：文件、Shell、检索、联网等工具常驻，其余用法说明按需加载。",
 	persona: CODING_PERSONA,
 	role: ["main", "subagent"],
+	denyTools: ["load_workspace_dependencies"],
+	denySkills: [
+		"office-docx",
+		"office-pptx",
+		"office-xlsx"
+	],
 	denyPolicies: ["fs/edit-intent"]
 }, {
 	id: "chat",
@@ -34,6 +40,8 @@ function list(values) {
 function modeConfig(source) {
 	const allowTools = list(source.allowTools);
 	const denyTools = list(source.denyTools);
+	const allowSkills = list(source.allowSkills);
+	const denySkills = list(source.denySkills);
 	const allowPolicies = list(source.allowPolicies);
 	const denyPolicies = list(source.denyPolicies);
 	return {
@@ -44,6 +52,8 @@ function modeConfig(source) {
 		...source.persona === void 0 ? {} : { persona: { ...source.persona } },
 		...allowTools === void 0 ? {} : { allowTools },
 		...denyTools === void 0 ? {} : { denyTools },
+		...allowSkills === void 0 ? {} : { allowSkills },
+		...denySkills === void 0 ? {} : { denySkills },
 		...allowPolicies === void 0 ? {} : { allowPolicies },
 		...denyPolicies === void 0 ? {} : { denyPolicies },
 		...source.instructions === void 0 ? {} : { instructions: source.instructions },

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@morlay/dsh-session-mode",
-  "version": "0.0.4",
-  "description": "Personal dsh bundle: session modes (coding / chat) as data — a mode is a persona plus its tool lists, its upstream policy lists, its instruction / skill-catalog / runtime-context switches and an optional default model. The host applies the current mode to each session, and the chip in the composer sits beside the official agent-preset entry, which stays.",
+  "version": "0.0.6",
+  "description": "Session modes for dsh: coding / chat as data — a mode is a persona plus its tool lists, its upstream policy lists, its instruction / skill-catalog / runtime-context switches and an optional default model. The host applies the current mode to each session, and the chip in the composer sits beside the official agent-preset entry, which stays.",
   "keywords": [
     "dsh",
-    "dsh-bundle",
+    "dsh-plugin",
     "persona",
     "session-mode"
   ],
@@ -41,27 +41,28 @@
     "@deepseek-ai/cordis-plugin-include": "1.0.9",
     "@deepseek-ai/cordis-plugin-loader": "1.0.5",
     "@deepseek-ai/cosmokit": "1.8.5",
-    "@deepseek-ai/dsh-agent": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-agent-loop-testkit": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-agent-preset-registry": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-api-remotes": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-api-session-controller": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-locale": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-primitives": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-fs": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-fs-local": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-fs-observation-policy": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-llm": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-session": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-session-projection": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-skill": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-tools": "0.2.0-rc.1",
-    "@morlay/dsh-client-ui-conversation": "0.1.3",
-    "@morlay/dsh-client-ui-primitives": "0.0.6",
-    "@morlay/dsh-context-assembler": "0.0.4",
+    "@deepseek-ai/dsh-agent": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-loop-testkit": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-preset-registry": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-api-remotes": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-api-session-controller": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-fs": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-fs-local": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-fs-observation-policy": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-projection": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-skill": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-tool-skill": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-tools": "0.2.0-rc.2",
+    "@morlay/dsh-client-ui-primitives": "0.0.7",
+    "@morlay/dsh-context-assembler": "0.0.5",
     "@testing-library/react": "^16.3.0",
     "@types/js-yaml": "^4.0.9",
     "@types/react": "~18.3.1",
@@ -72,28 +73,26 @@
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.4",
     "@deepseek-ai/cosmokit": "^1.8.5",
-    "@deepseek-ai/dsh-agent": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-agent-preset-registry": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-api-session-controller": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-locale": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-fs": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-llm": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-session": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-session-projection": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-system-prompt": "^0.2.0-rc.1",
-    "@deepseek-ai/schemastery": "^3.18.4",
-    "@morlay/dsh-client-ui-conversation": "0.1.3",
-    "@morlay/dsh-client-ui-primitives": "0.0.6"
+    "@deepseek-ai/dsh-agent": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-preset-registry": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-api-session-controller": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-locale": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-fs": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-session": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-projection": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "^0.2.0-rc.2",
+    "@deepseek-ai/schemastery": "^3.18.4"
   },
   "dsh": {
     "client": {
       "platform": "web",
       "inject": [
         "@deepseek-ai/dsh-client-locale",
-        "@deepseek-ai/dsh-client-ui-slots",
-        "@morlay/dsh-client-ui-primitives"
+        "@deepseek-ai/dsh-client-ui-slots"
       ]
     }
   },

package/src/client/SessionModeSeat.tsx

@@ -12,7 +12,7 @@ import type { PropsLocale, PropsRuntime } from "@deepseek-ai/dsh-client-ui-slots
 // Type-only：拉入本包 host 半的 Context / 投影声明（`sessionMode`），让 `projectionValues` 有类型。
 import type {} from "../index.ts";
 // Type-only：拉入 ui-conversation 的 SlotMap 合并（composer 工具行的座位）。
-import type {} from "@morlay/dsh-client-ui-conversation/client";
+import type {} from "@deepseek-ai/dsh-client-ui-conversation/client";
 import { selectMode } from "./api.ts";
 import { useRoster } from "./use-roster.ts";
 import css from "./SessionModeSeat.module.css";

package/src/client/index.ts

@@ -8,7 +8,8 @@ import type {} from "@deepseek-ai/dsh-api-remotes/client";
 import type {} from "@deepseek-ai/dsh-client-locale/client";
 import type {} from "@deepseek-ai/dsh-client-ui-slots";
 // Type-only：槽位声明与 standard props（session / session-maybe / global）。
-import type {} from "@morlay/dsh-client-ui-conversation/client";
+import type {} from "@deepseek-ai/dsh-client-ui-conversation/client";
+import { apply as installUiPrimitives } from "@morlay/dsh-client-ui-primitives/client";
 import { POLICY_NAMES } from "../shared.ts";
 import { SessionModeSeat } from "./SessionModeSeat.tsx";
 import { en, zh, type SessionModeLocaleKey } from "./locales.ts";
@@ -62,6 +63,8 @@ function readAt(root: unknown, path: readonly string[]): unknown {
 
 // 装上会话里的那一个面，以及本行配置页的字段文案。
 export function apply(ctx: Context): void {
+  // 基础面随本包 inline（不再是装配行）：装上它提供的字典、字段槽与按行配置页；多份副本只装一次。
+  installUiPrimitives(ctx);
   const t = ctx.locale.bind(NS);
   ctx.effect(() => ctx.locale.register(NS, { zh, en }), "session-mode: dictionaries");
 

package/src/css-modules.d.ts

@@ -0,0 +1,6 @@
+// 本包 client 半的组件样式是上游那套 CSS Modules（`SessionModeSeat.module.css`）：bundler 解析得动，
+// TS 需要这份 ambient 声明把它定成「有一个 class 映射的模块」。
+declare module "*.module.css" {
+  const classes: Readonly<Record<string, string>>;
+  export default classes;
+}

package/src/index.ts

@@ -389,12 +389,14 @@ export class SessionModes extends Service {
         for (const dispose of disposers) dispose();
       },
     });
-    // 收口要的那几项按模式定义整份推过去：`name` / `allowTools` / `denyTools` / 三个开关。`skills` 缺省时在这里
+    // 收口要的那几项按模式定义整份推过去：`name` / 两份工具名单 / 两份技能名单 / 三个开关。`skills` 缺省时在这里
     // 按这份定义自己的工具名单推导（见 `derivedSkills`）——收口那一侧只认解析后的布尔。
     this.scope.apply(agent, {
       name: mode.name,
       allowTools: mode.allowTools,
       denyTools: mode.denyTools,
+      allowSkills: mode.allowSkills,
+      denySkills: mode.denySkills,
       instructions: mode.instructions,
       skills: mode.skills ?? derivedSkills(mode),
       runtimeContext: mode.runtimeContext,

package/src/mode-sources.ts

@@ -20,6 +20,10 @@ export interface ModeSource {
   readonly allowTools?: readonly string[];
   // 这个模式不用的工具（黑名单）：从 `allowTools` 定的那份里减掉（deny 优先）。
   readonly denyTools?: readonly string[];
+  // 这个模式能用的技能；**可选**，不写（留空）就是不设收窄——技能注册表里有什么就用什么。
+  readonly allowSkills?: readonly string[];
+  // 这个模式不用的技能（黑名单）：从 `allowSkills` 定的那份里减掉（deny 优先）。
+  readonly denySkills?: readonly string[];
   // 上游 policy 规则的生效白名单：**可选**，不写（留空）= 全部规则生效。
   readonly allowPolicies?: readonly PolicyName[];
   // 上游 policy 规则的黑名单：列出的规则禁用（它在上游那条 waterfall 上的裁决被绕过）。
@@ -69,7 +73,11 @@ export const MODE_SOURCES: readonly ModeSource[] = [
     // 用户可选，也允许作为子代理的 mode（子代理默认继承父 mode，不看角色；这里是"可被指定"的候选集）。
     role: ["main", "subagent"],
     // 不写 `allowTools`：不设收窄——这个会话用它挂着的 preset 提供的全部工具（抄一份清单只会与行清单漂移）。
-    // 不写 `denyTools`：一件工具都不禁。
+    // 只排除一件工具：官方 Office 组合（宿主代码挂载，profile 层停不掉它的行）里那个载荷查询。
+    denyTools: ["load_workspace_dependencies"],
+    // 官方 Office 技能的三个名字同样按会话排除：技能目录里不列它们，`skill` 工具加载它们也被拒。
+    // 名单是技能名这一层的模型可见契约（官方 `skill-office` 的 `SKILL_NAMES`），跟着上游改名走。
+    denySkills: ["office-docx", "office-pptx", "office-xlsx"],
     //
     // `denyPolicies` 只禁 `fs/edit-intent`（上游那条"先读后改"）：改文件不再要求先读过——写路径上的
     // `fs/write-intent`（陈旧版本 CAS 那层安全网）照旧生效，那正是这条配置不写成"两条都禁"的理由。

package/src/modes.ts

@@ -51,6 +51,12 @@ export interface SessionMode {
   // 这个模式**不用**哪些工具（黑名单）：从 `allowTools` 定下的那份里减掉（`allowTools` 留空时就是从全部里减）。
   // 留空表示不禁任何工具。同时命中两份名单时以这里为准（deny 优先）。
   readonly denyTools: string[];
+  // 这个模式能用哪些**技能**；其余的既不进技能目录，`skill` 工具加载它也被拒。**留空表示不设收窄**：技能注册表
+  // 里有什么就用什么（官方 `skill-office` 那类由宿主代码挂载的技能也在这份"全部"里）。
+  readonly allowSkills: string[];
+  // 这个模式**不用**哪些技能（黑名单）：从 `allowSkills` 定下的那份里减掉（`allowSkills` 留空时就是从全部里减）。
+  // 留空表示不禁任何技能；同时命中两份名单时以这里为准（deny 优先）。
+  readonly denySkills: string[];
   // 上游 policy 规则的**生效白名单**：留空（或不写）表示全部规则照旧生效；有值表示只有列出的那些生效，
   // 其余的按 `denyPolicies` 那一套被绕过。名单见 `POLICY_NAMES`。空数组与不写同义。
   readonly allowPolicies: string[];
@@ -198,6 +204,24 @@ const modeSchema: z<SessionMode> = z.object({
         en: "Tools this mode must not use (deny list): subtracted from whatever `allowTools` settled on (with an empty `allowTools`, from everything). Empty denies nothing; a name in both lists is denied.",
       }),
     ),
+  allowSkills: z
+    .array(z.string())
+    .default([])
+    .description(
+      localized({
+        zh: "这个模式能用的技能；其余既不进技能目录，`skill` 工具加载它也被拒。**留空就是不设收窄**：技能注册表里有什么就用什么。",
+        en: "Skills this mode may use; everything else leaves the skill catalog and loading it through the `skill` tool is refused. Leave it empty to narrow nothing: the session then sees every skill the registry carries.",
+      }),
+    ),
+  denySkills: z
+    .array(z.string())
+    .default([])
+    .description(
+      localized({
+        zh: "这个模式不用的技能（黑名单）：从 `allowSkills` 定下的那份里减掉（`allowSkills` 留空就是从全部里减）。留空 = 一条都不禁；同时命中两份名单时以这里为准。",
+        en: "Skills this mode must not use (deny list): subtracted from whatever `allowSkills` settled on (with an empty `allowSkills`, from everything). Empty denies nothing; a name in both lists is denied.",
+      }),
+    ),
   allowPolicies: z
     .array(z.string())
     .default([])
@@ -298,6 +322,10 @@ interface Validated {
         readonly allowTools?: readonly string[];
         // 留空合法：不禁任何工具；与 `allowTools` 同时命中合法（deny 优先）。
         readonly denyTools?: readonly string[];
+        // 留空合法：不设技能收窄。
+        readonly allowSkills?: readonly string[];
+        // 留空合法：不禁任何技能；与 `allowSkills` 同时命中合法（deny 优先）。
+        readonly denySkills?: readonly string[];
         // 留空合法：全部规则生效。
         readonly allowPolicies?: readonly string[];
         // 留空合法：一条都不禁；与 `allowPolicies` 同时命中合法（deny 优先）。

package/src/rows.ts

@@ -24,6 +24,8 @@ function list<T>(values: readonly T[] | undefined): readonly T[] | undefined {
 function modeConfig(source: ModeSource): Record<string, unknown> {
   const allowTools = list(source.allowTools);
   const denyTools = list(source.denyTools);
+  const allowSkills = list(source.allowSkills);
+  const denySkills = list(source.denySkills);
   const allowPolicies = list(source.allowPolicies);
   const denyPolicies = list(source.denyPolicies);
   return {
@@ -35,9 +37,12 @@ function modeConfig(source: ModeSource): Record<string, unknown> {
     ...(source.persona === undefined ? {} : { persona: { ...source.persona } }),
     // 四份名单都是可选的：不写（或写成空数组）就是这个键不进 config，schema 默认空数组。
     // `allowTools` 不写 = 不设收窄；`denyTools` 不写 = 一件都不禁（两份同配时 deny 优先）；
+    // `allowSkills` / `denySkills` 同一套语义，收的是技能名（技能目录与 `skill` 工具两处一起收）；
     // `allowPolicies` 不写 = 全部上游 policy 规则生效；`denyPolicies` 不写 = 一条都不禁。
     ...(allowTools === undefined ? {} : { allowTools }),
     ...(denyTools === undefined ? {} : { denyTools }),
+    ...(allowSkills === undefined ? {} : { allowSkills }),
+    ...(denySkills === undefined ? {} : { denySkills }),
     ...(allowPolicies === undefined ? {} : { allowPolicies }),
     ...(denyPolicies === undefined ? {} : { denyPolicies }),
     ...(source.instructions === undefined ? {} : { instructions: source.instructions }),