@quill507/dsh-orchestrator-preset 0.1.0

package/cordis.patch.yml

@@ -0,0 +1,399 @@
+# Generated by tools/gen-cordis-patch.mjs — DO NOT EDIT BY HAND.
+# Source of truth: tools/preset-declaration.mjs
+# Regenerate: node tools/gen-cordis-patch.mjs
+# Shell source: kind=dump-config fallback=yes bash=false @258 pwsh=true @262 normalized-digest=9d6e78b51fc4 (absolute path and raw md5 intentionally omitted; digest is path-normalized)
+#
+# This file's `plugins[]` rows are declared in full because DSH agent presets
+# have no inheritance or composition mechanism (see DESIGN.md §2.1).
+# Rows marked [official] below are configuration derived from DeepSeek Harness
+# (MIT License, Copyright (c) 2026 DeepSeek); see LICENSE for the attribution.
+- insert:
+    - id: preset-dsh-orchestrator-preset
+      name: '@deepseek-ai/dsh-agent-preset'
+      config:
+        id: 'dsh-orchestrator-preset'
+        name: 'DSH Orchestrator Preset'
+        description: |-
+          A thin orchestration preset: aegis method pack for methodology, self-authored lane boundaries for delegation. Declares its full plugins[] because DSH presets have no inheritance.
+        plugins:
+          - id: persona
+            name: '@quill507/dsh-orchestrator-preset/plan-aware-persona.mjs'
+            config:
+              suffix: 'Your working directory is {{cwd}}.'
+          - id: routing-sections
+            name: '@quill507/dsh-orchestrator-preset/routing-sections.mjs'
+          - id: lane-composition
+            name: '@quill507/dsh-orchestrator-preset/lane-composition.mjs'
+          - id: agent-instructions
+            name: '@deepseek-ai/dsh-agent-instructions'
+            config:
+              maxBytes: 65536
+          - id: tool-bash
+            name: '@deepseek-ai/dsh-tool-bash'
+            disabled: !!js process.platform === 'win32'
+          - id: tool-pwsh
+            name: '@deepseek-ai/dsh-tool-pwsh'
+            disabled: !!js process.platform !== 'win32'
+          - id: tool-fs
+            name: '@deepseek-ai/dsh-tool-fs'
+          - id: tool-fs-search
+            name: '@deepseek-ai/dsh-tool-fs-search'
+            config:
+              sampleOverCapGlobResults: false
+          - id: tool-jobs
+            name: '@deepseek-ai/dsh-tool-jobs'
+          - id: skill-filesystem
+            name: '@deepseek-ai/dsh-skill-filesystem'
+          - id: tool-skill
+            name: '@deepseek-ai/dsh-tool-skill'
+          - id: tool-ask-user
+            name: '@deepseek-ai/dsh-tool-ask-user'
+          - id: tool-todo
+            name: '@deepseek-ai/dsh-tool-todo'
+            config:
+              allowParallelInProgress: true
+          - id: tool-web
+            name: '@deepseek-ai/dsh-tool-web'
+            config:
+              fetch: true
+              searchTimeoutMs: 60000
+          - id: planning
+            name: cordis:group
+            group: true
+            isolate:
+              planMode: true
+            config:
+              - id: plan-mode
+                name: '@deepseek-ai/dsh-plan-mode'
+                config:
+                  section: |
+                    You are in plan mode. Stay in plan mode until exit_plan_mode succeeds or the user switches the session mode. Imperative language to implement changes means plan the implementation, not execute it. A user's conversational agreement — including an answer confirming something you asked — approves nothing and does not end plan mode; fold the confirmed decision into the plan and submit it through exit_plan_mode.
+
+                    Explore first. Use non-mutating reads, searches, static analysis, and checks to ground the plan in the actual repository. Do not edit or write files, change configuration, run formatters or code generation that rewrites tracked files, commit, or otherwise carry out the plan. Prefer existing functions and patterns over new machinery.
+
+                    The tool catalog stays the same across modes for request-cache stability. These plan-mode rules override any later tool description or guidance that suggests using mutation tools; those tools remain listed to keep the tool catalog unchanged. Do not use todo_write to track this planning phase: it tracks implementation after an approved plan, while the plan itself belongs in exit_plan_mode.
+
+                    Resolve discoverable facts by inspection. Use ask_user_question only for user-owned choices or material ambiguity that inspection cannot answer. Do not ask the user where code lives or how current behavior works when you can find out.
+
+                    Make the plan decision-complete: state the goal and success criteria; group implementation changes by subsystem; identify public API, schema, and data-flow changes; cover edge cases, failure modes, tests, acceptance criteria, and explicit assumptions. Keep it concise enough to review but detailed enough that another engineer can implement it without making design decisions.
+
+                    When ready, call exit_plan_mode with the complete plan markdown, starting with a # title. Make exit_plan_mode the only and final tool call in that assistant response: it presents the plan for approval, and implementation begins only in a later step after approval. Do not paste the final plan as a plain reply or ask "should I proceed?" through prose or ask_user_question. If review rejects it, incorporate the feedback and present again. If the review channel is unavailable or aborted, stay in plan mode and ask the user to switch modes manually; do not proceed with implementation.
+          - id: compaction
+            name: cordis:group
+            group: true
+            isolate:
+              compaction: true
+              toolResultPruner: true
+            config:
+              - id: compaction-basic
+                name: '@deepseek-ai/dsh-compaction-basic'
+              - id: command-compact
+                name: '@deepseek-ai/dsh-command-compact'
+              - id: tool-result-pruner
+                name: '@deepseek-ai/dsh-compaction-tool-result-pruner'
+                config:
+                  thresholdChars: 8192
+                  headChars: 4096
+                  tailChars: 1024
+          - id: delegation
+            name: cordis:group
+            group: true
+            config:
+              - id: tool-subagent-control
+                name: '@deepseek-ai/dsh-tool-subagent-control'
+              - id: tool-subagent-list-agents
+                name: '@deepseek-ai/dsh-tool-subagent-control/list-agents'
+              - id: tool-subagent-fork
+                name: '@deepseek-ai/dsh-tool-subagent'
+                config:
+                  provider: fork
+                  toolName: subagent_fork
+                  backgroundMode: continuable
+              - id: tool-subagent-scout
+                name: '@deepseek-ai/dsh-tool-subagent'
+                config:
+                  provider: spawn
+                  toolName: subagent_scout
+                  backgroundMode: continuable
+                  maxDepth: 1
+                  persona: !!js process.getBuiltinModule('node:fs').readFileSync(process.getBuiltinModule('node:module').createRequire(baseUrl).resolve('@quill507/dsh-orchestrator-preset/personas/scout.md'), 'utf8')
+                  toolFilter:
+                    deny:
+                      - write
+                      - edit
+                      - todo_write
+                      - ask_user_question
+                      - exit_plan_mode
+                      - send_message
+                      - interrupt_agent
+                      - list_agents
+                      - subagent_children
+                      - subagent_send
+                      - subagent_interrupt
+                      - subagent_fork
+                      - subagent_scout
+                      - subagent_archivist
+                      - subagent_seer
+                      - subagent_reader
+                      - subagent_analyst
+                      - subagent_auditor
+                      - subagent_wright
+                      - subagent_forge
+                      - subagent_planner
+                      - mcp_playwright
+                      - mcp_jlceda
+                      - mcp_cloudflare-browser
+                      - mcp_desktop-touch
+              - id: tool-subagent-archivist
+                name: '@deepseek-ai/dsh-tool-subagent'
+                config:
+                  provider: spawn
+                  toolName: subagent_archivist
+                  backgroundMode: continuable
+                  maxDepth: 1
+                  persona: !!js process.getBuiltinModule('node:fs').readFileSync(process.getBuiltinModule('node:module').createRequire(baseUrl).resolve('@quill507/dsh-orchestrator-preset/personas/archivist.md'), 'utf8')
+                  toolFilter:
+                    deny:
+                      - write
+                      - edit
+                      - todo_write
+                      - ask_user_question
+                      - exit_plan_mode
+                      - send_message
+                      - interrupt_agent
+                      - list_agents
+                      - subagent_children
+                      - subagent_send
+                      - subagent_interrupt
+                      - subagent_fork
+                      - subagent_scout
+                      - subagent_archivist
+                      - subagent_seer
+                      - subagent_reader
+                      - subagent_analyst
+                      - subagent_auditor
+                      - subagent_wright
+                      - subagent_forge
+                      - subagent_planner
+                      - mcp_playwright
+                      - mcp_jlceda
+                      - mcp_cloudflare-browser
+                      - mcp_desktop-touch
+              - id: tool-subagent-seer
+                name: '@deepseek-ai/dsh-tool-subagent'
+                config:
+                  provider: spawn
+                  toolName: subagent_seer
+                  backgroundMode: continuable
+                  maxDepth: 1
+                  persona: !!js process.getBuiltinModule('node:fs').readFileSync(process.getBuiltinModule('node:module').createRequire(baseUrl).resolve('@quill507/dsh-orchestrator-preset/personas/seer.md'), 'utf8')
+                  toolFilter:
+                    deny:
+                      - write
+                      - edit
+                      - todo_write
+                      - ask_user_question
+                      - exit_plan_mode
+                      - send_message
+                      - interrupt_agent
+                      - list_agents
+                      - subagent_children
+                      - subagent_send
+                      - subagent_interrupt
+                      - subagent_fork
+                      - subagent_scout
+                      - subagent_archivist
+                      - subagent_seer
+                      - subagent_reader
+                      - subagent_analyst
+                      - subagent_auditor
+                      - subagent_wright
+                      - subagent_forge
+                      - subagent_planner
+                      - mcp_playwright
+                      - mcp_jlceda
+                      - mcp_cloudflare-browser
+                      - mcp_desktop-touch
+              - id: tool-subagent-reader
+                name: '@deepseek-ai/dsh-tool-subagent'
+                config:
+                  provider: spawn
+                  toolName: subagent_reader
+                  backgroundMode: continuable
+                  maxDepth: 1
+                  persona: !!js process.getBuiltinModule('node:fs').readFileSync(process.getBuiltinModule('node:module').createRequire(baseUrl).resolve('@quill507/dsh-orchestrator-preset/personas/reader.md'), 'utf8')
+                  toolFilter:
+                    allow:
+                      - read
+                      - read_image
+              - id: tool-subagent-analyst
+                name: '@deepseek-ai/dsh-tool-subagent'
+                config:
+                  provider: spawn
+                  toolName: subagent_analyst
+                  backgroundMode: continuable
+                  maxDepth: 1
+                  persona: !!js process.getBuiltinModule('node:fs').readFileSync(process.getBuiltinModule('node:module').createRequire(baseUrl).resolve('@quill507/dsh-orchestrator-preset/personas/analyst.md'), 'utf8')
+                  toolFilter:
+                    deny:
+                      - write
+                      - edit
+                      - todo_write
+                      - ask_user_question
+                      - exit_plan_mode
+                      - send_message
+                      - interrupt_agent
+                      - list_agents
+                      - subagent_children
+                      - subagent_send
+                      - subagent_interrupt
+                      - subagent_fork
+                      - subagent_scout
+                      - subagent_archivist
+                      - subagent_seer
+                      - subagent_reader
+                      - subagent_analyst
+                      - subagent_auditor
+                      - subagent_wright
+                      - subagent_forge
+                      - subagent_planner
+                      - mcp_playwright
+                      - mcp_jlceda
+                      - mcp_cloudflare-browser
+                      - mcp_desktop-touch
+              - id: tool-subagent-auditor
+                name: '@deepseek-ai/dsh-tool-subagent'
+                config:
+                  provider: spawn
+                  toolName: subagent_auditor
+                  backgroundMode: continuable
+                  maxDepth: 1
+                  persona: !!js process.getBuiltinModule('node:fs').readFileSync(process.getBuiltinModule('node:module').createRequire(baseUrl).resolve('@quill507/dsh-orchestrator-preset/personas/auditor.md'), 'utf8')
+                  toolFilter:
+                    deny:
+                      - write
+                      - edit
+                      - todo_write
+                      - ask_user_question
+                      - exit_plan_mode
+                      - send_message
+                      - interrupt_agent
+                      - list_agents
+                      - subagent_children
+                      - subagent_send
+                      - subagent_interrupt
+                      - subagent_fork
+                      - subagent_scout
+                      - subagent_archivist
+                      - subagent_seer
+                      - subagent_reader
+                      - subagent_analyst
+                      - subagent_auditor
+                      - subagent_wright
+                      - subagent_forge
+                      - subagent_planner
+                      - mcp_playwright
+                      - mcp_jlceda
+                      - mcp_cloudflare-browser
+                      - mcp_desktop-touch
+              - id: tool-subagent-wright
+                name: '@deepseek-ai/dsh-tool-subagent'
+                config:
+                  provider: spawn
+                  toolName: subagent_wright
+                  backgroundMode: continuable
+                  maxDepth: 1
+                  persona: !!js process.getBuiltinModule('node:fs').readFileSync(process.getBuiltinModule('node:module').createRequire(baseUrl).resolve('@quill507/dsh-orchestrator-preset/personas/wright.md'), 'utf8')
+                  toolFilter:
+                    deny:
+                      - ask_user_question
+                      - exit_plan_mode
+                      - send_message
+                      - interrupt_agent
+                      - list_agents
+                      - subagent_children
+                      - subagent_send
+                      - subagent_interrupt
+                      - subagent_fork
+                      - subagent_scout
+                      - subagent_archivist
+                      - subagent_seer
+                      - subagent_reader
+                      - subagent_analyst
+                      - subagent_auditor
+                      - subagent_wright
+                      - subagent_forge
+                      - subagent_planner
+                      - mcp_playwright
+                      - mcp_jlceda
+                      - mcp_cloudflare-browser
+                      - mcp_desktop-touch
+              - id: tool-subagent-forge
+                name: '@deepseek-ai/dsh-tool-subagent'
+                config:
+                  provider: spawn
+                  toolName: subagent_forge
+                  backgroundMode: continuable
+                  maxDepth: 1
+                  persona: !!js process.getBuiltinModule('node:fs').readFileSync(process.getBuiltinModule('node:module').createRequire(baseUrl).resolve('@quill507/dsh-orchestrator-preset/personas/forge.md'), 'utf8')
+                  toolFilter:
+                    deny:
+                      - ask_user_question
+                      - exit_plan_mode
+                      - interrupt_agent
+                      - subagent_children
+                      - subagent_send
+                      - subagent_interrupt
+                      - subagent_fork
+                      - subagent_analyst
+                      - subagent_auditor
+                      - subagent_reader
+                      - subagent_wright
+                      - subagent_forge
+                      - subagent_planner
+                      - mcp_playwright
+                      - mcp_jlceda
+                      - mcp_cloudflare-browser
+                      - mcp_desktop-touch
+              - id: tool-subagent-planner
+                name: '@deepseek-ai/dsh-tool-subagent'
+                config:
+                  provider: spawn
+                  toolName: subagent_planner
+                  backgroundMode: continuable
+                  maxDepth: 1
+                  persona: !!js process.getBuiltinModule('node:fs').readFileSync(process.getBuiltinModule('node:module').createRequire(baseUrl).resolve('@quill507/dsh-orchestrator-preset/personas/planner.md'), 'utf8')
+                  toolFilter:
+                    deny:
+                      - write
+                      - edit
+                      - todo_write
+                      - ask_user_question
+                      - exit_plan_mode
+                      - send_message
+                      - interrupt_agent
+                      - list_agents
+                      - subagent_children
+                      - subagent_send
+                      - subagent_interrupt
+                      - subagent_fork
+                      - subagent_scout
+                      - subagent_archivist
+                      - subagent_seer
+                      - subagent_reader
+                      - subagent_analyst
+                      - subagent_auditor
+                      - subagent_wright
+                      - subagent_forge
+                      - subagent_planner
+                      - mcp_playwright
+                      - mcp_jlceda
+                      - mcp_cloudflare-browser
+                      - mcp_desktop-touch
+    - id: orch-method-pack
+      name: '@quill507/dsh-orchestrator-preset/extensions/dsh/index.js'
+    - id: orch-aegis-prefix
+      name: '@quill507/dsh-orchestrator-preset/extensions/dsh/aegis-prefix.js'
+      config:
+        prefixAegisSkills: true
+        describeAegisSkillsInZh: false

package/extensions/dsh/aegis-prefix.js

@@ -0,0 +1,197 @@
+/**
+ * Namespaces the aegis methodology pack's skills with an `aegis-` prefix, and
+ * optionally localises their descriptions.
+ *
+ * WHY THE PREFIX LIVES HERE
+ * The preset's resident routing table names twenty-one skills by their prefixed
+ * name, while the upstream pack registers them bare — it is host-agnostic and has
+ * no reason to know this preset exists. Nothing bridged that, so every aegis row
+ * in the routing table pointed at a name resolving to nothing, and the failure was
+ * silent: a routing entry that matches no skill simply never fires.
+ *
+ * WHY THE DESCRIPTION SWAP IS A SECOND, OFF-BY-DEFAULT FLAG
+ * Translating the catalogue is a reader preference, not a routing requirement, and
+ * forcing it on everyone who installs this preset would be wrong. It is OFF by
+ * default and turned on per deployment, in a layer the reader owns.
+ *
+ * WHY BOTH LIVE IN ONE PLUGIN
+ * They were briefly two plugins: this bridge for the prefix, a separate local one
+ * for descriptions. That produced a race — this bridge copies a description while
+ * registering, so whichever plugin ran first decided whether Chinese or English
+ * got copied, and the observed result was neither: twenty-one routing targets
+ * resolved, but only four descriptions were localised. Two plugins mutating the
+ * same registrations need a load-order contract to be correct, and such a contract
+ * is only correct until somebody reorders the bundle array. Doing both in one pass
+ * at registration removes the question instead of answering it.
+ *
+ * `skills/change` is still observed rather than reading the catalogue once, so a
+ * pack that registers late still gets namespaced.
+ */
+
+import z from '@deepseek-ai/schemastery'
+
+const AEGIS_PROVIDER = 'aegis-method-pack'
+const PREFIX = 'aegis-'
+
+/** Cordis plugin name. */
+export const name = 'orch-aegis-prefix'
+
+/** Only the skill registry: this plugin registers names, it serves none.
+ *  No `settings` injection, because there is no settings surface to serve — the
+ *  switches are set in a patch layer. See the note above `Config`. */
+export const inject = ['skills']
+
+/** Behaviour defaults, shared by the schema below and by the read in `apply`.
+ *  Declared once so the schema's default and the code's default cannot drift. */
+const DEFAULTS = Object.freeze({
+  prefixAegisSkills: true,
+  describeAegisSkillsInZh: false,
+})
+
+/**
+ * The two switches. **Not rendered as a settings card — see below.**
+ *
+ * Set them in a patch layer: the home layer `$DSH_HOME/cordis.patch.yml` applies
+ * after this bundle's, so a row there wins. Restate both keys, because a patch
+ * replaces a row's config rather than deep-merging it.
+ *
+ * WHY THERE IS NO UI, measured rather than assumed
+ * The host does build forms from plugin schemas — `dsh-settings.describe()` reads
+ * `entry.fiber.runtime.Config` and runs its own `volatileForm()` over it — but it
+ * only considers entries returned by `dsh-config-editor.entries()`, which filters
+ * to rows whose `parent.tree.ctx.fiber.entry?.id === "include"`. A row inserted by
+ * a bundle patch is not one of those, so nothing here appears in the settings UI.
+ *
+ * The one third-party plugin on this host that *does* have a settings card
+ * (`@quill507/dsh-auto-approval-llm`) does not use that path either: it ships a
+ * browser client plugin and its own GET route, and its source says outright that
+ * the route exists as the degradation source "for a card that has no host form
+ * (entry not ACTIVE)".
+ *
+ * So reaching the UI means writing a client plugin, which is a separate project
+ * rather than a field on this schema. The schema is kept anyway: it is the correct
+ * declaration, it carries the two defaults, and it is exactly what such a client
+ * would bind to. Two earlier attempts at the auto-form failed for reasons recorded
+ * above — a `zod` Config is invisible to `volatileForm`, and adding schemastery plus
+ * `.volatile()` satisfies that function while leaving the `include` filter unmet.
+ */
+export const Config = z.object({
+  prefixAegisSkills: z.boolean().default(DEFAULTS.prefixAegisSkills).volatile(),
+  describeAegisSkillsInZh: z.boolean().default(DEFAULTS.describeAegisSkillsInZh).volatile(),
+})
+
+/**
+ * English original -> compressed Chinese. The English string is the match key,
+ * taken verbatim from each SKILL.md, so an upstream rewrite falls through to
+ * English rather than mismatching into something garbled. `tools/verify-install.sh`
+ * checks every key against the installed pack, so a stale table announces itself.
+ */
+const ZH_DESCRIPTIONS = [
+  ['Use when touching retiring old logic, collapsing duplicate owners, removing fallbacks, or schema/persistence/source-of-truth boundaries; identify opportunities automatically; destructive execution requires explicit confirmation.', '退役旧逻辑/合并重复owner/移除回退/动数据源边界时用；自动识别机会，破坏性执行需确认。'],
+  ['Use when defining ambiguous or high-complexity new features, product behavior, UI/component design, architecture choices, contract changes, or when grilling/pressure-testing a plan or design. Routine small requests stay on the fast path.', '模糊/高复杂度新功能、UI/组件、架构选择、合同变更，或盘问/压力测试方案时用；常规小请求走快路径。'],
+  ['Use when the user asks for caveman mode, fewer tokens, brief responses, compressed communication, or otherwise explicitly requests a much shorter answer.', '用户要求 caveman 模式/少 token/简短回答/压缩沟通时用。'],
+  ['Use when facing 2+ independent tasks without a written plan, with no conflicting shared mutable state or sequential dependencies, where parallel delegation beats inline cost; otherwise inline. Planned tasks use subagent-driven-development.', '2+ 独立无依赖任务、无书面计划、无冲突共享可变状态/顺序依赖、并行派发优于内联时用；有计划的任务用 subagent-driven-development。'],
+  ['Use when the user asks to establish shared project language, or project work exposes a conflicting, renamed, or deprecated domain term that needs active semantic modeling. Routine small tasks stay on the fast path.', '建立共享项目语言，或领域术语冲突/重命名/过时需要语义建模时用；常规小任务走快路径。'],
+  ['Use when executing a written implementation plan across sessions or with review checkpoints. Small or single-slice plans stay inline. For same-session independent tasks, use subagent-driven-development instead.', '跨会话或带审查检查点执行书面实现计划时用；小/单切片计划内联；同会话独立任务用 subagent-driven-development。'],
+  ['Use when verified work needs integration or cleanup of an existing task-created branch/worktree, or the user explicitly requests merge, PR, or branch lifecycle handling.', '已验证工作需集成/清理任务创建的分支/worktree，或用户明确要求 merge/PR/分支生命周期处理时用。'],
+  ["Use when asked for first-principles or Occam's-razor review, or when high-risk decisions involve competing constraints, fallback growth, duplicate owners, or architecture direction risk. Ordinary bug fixes stay on the fast path.", '被要求第一性原理/Occam 剃刀审查，或高风险决策（竞争约束/回退增长/重复owner/架构方向风险）时用；普通 bug 修复走快路径。'],
+  ['Use when the user explicitly sets an Aegis goal with /aegis-goal, Aegis goal:, or asks to define goal, success evidence, stop condition, or task boundaries before work.', '用户用 /aegis-goal、Aegis goal:，或要求定义目标、成功证据、停止条件、任务边界时用。'],
+  ['Use when a task is multi-step, may span context resets or sessions, uses subagents, or risks losing state before completion.', '任务多步骤、跨上下文重置/会话、用子代理、或有完成前丢失状态风险时用。'],
+  ['Use when receiving code review feedback before implementing suggestions, especially when feedback is unclear, risky, disputed, or technically questionable.', '收到代码评审反馈、实施建议前用，尤其反馈不清晰、有风险、有争议或技术上可疑时。'],
+  ['Use when the user asks to create, write, update, amend, supersede, or evaluate an ADR, architecture decision record, durable architecture decision, decision log, or baseline sync after architecture-changing work.', '用户要求创建/编写/更新/修订/废止/评估 ADR、架构决策记录、持久化架构决策、决策日志或基线同步时用。'],
+  ['Use when requesting independent code review, after implementation slices, before merging high-risk work, or when verification exposes evidence, baseline, architecture, compatibility, or retirement uncertainty.', '请求独立代码评审：实现切片后、合并高风险工作前、或验证暴露证据/基线/架构/兼容性/退役不确定性时用。'],
+  ['Use when executing a written implementation plan with independent tasks in the current session where delegation beats inline coordination cost; otherwise inline. Ad-hoc 2+ tasks without a plan use dispatching-parallel-agents.', '执行书面实现计划、当前会话独立任务委托优于内联时用；临时 2+ 无计划任务用 dispatching-parallel-agents。'],
+  ['Use when encountering a bug, test failure, or unexpected behavior, before proposing fixes', '遇到 bug、测试失败或意外行为、提出修复前用。'],
+  ['Use when the user explicitly requests strict or test-first TDD, or when the current conversation already contains an explicit `TDD Route: strict` decision from another Aegis workflow.', '用户显式要求严格/测试优先 TDD，或会话已有 TDD Route: strict 决策时用。'],
+  ['Use when the user says `aegis:update`, asks to update or upgrade an installed Aegis method-pack, wants the latest Aegis version, or asks whether Aegis is current on this host.', '用户说 aegis:update、要求更新/升级已装方法包、要最新版本或询问是否最新时用。'],
+  ['Use when starting a turn or checking Aegis skill routing.', '回合开始或检查 Aegis 技能路由时用。'],
+  ['Use when a coding task needs a concurrent checkout, unrelated dirty state blocks safe branch switching, or the user or repository explicitly requires a worktree.', '编码任务需并发 checkout、无关脏状态阻止安全切分支、或用户/仓库明确要求 worktree 时用。'],
+  ['Use when about to claim work is complete, fixed, passing, verified, release-ready, or ready to commit, merge, publish, or hand off.', '声称完成/修复/通过/可发布，或准备提交/合并/发布/移交时用。'],
+  ['Use when you have an approved spec or written requirements for a multi-step task that needs a durable plan document before touching code. Small, single-owner, or fast-path tasks do not need this skill.', '有已批准规格/书面需求的多步骤任务、动代码前需持久计划文档时用；小/单owner/快路径任务不需要。'],
+  ['Use when creating new skills, editing existing skills, or verifying skills work before deployment', '创建新技能、编辑现有技能、或部署前验证技能可用时用。'],
+]
+
+const ZH_BY_EN = new Map(ZH_DESCRIPTIONS)
+
+export function apply(ctx, rawConfig) {
+  // Read the two switches off the raw patch value, applying DEFAULTS for whatever
+  // the row does not set. Schemastery schemas are not zod's: there is no `.parse`
+  // here, and calling the schema does not fill defaults either — so the defaults
+  // have to come from the shared constant, which is also what the card shows.
+  const raw = rawConfig !== null && typeof rawConfig === 'object' ? rawConfig : {}
+  const pick = (key) => (typeof raw[key] === 'boolean' ? raw[key] : DEFAULTS[key])
+  const wantPrefix = pick('prefixAegisSkills')
+  const wantZh = pick('describeAegisSkillsInZh')
+
+  if (!wantPrefix) {
+    ctx.logger.info("[orch-aegis-prefix] prefix disabled by config; the preset's routing table will not resolve")
+    return
+  }
+
+  const skills = ctx.skills
+  const done = new Set()
+  const disposers = []
+  let syncing = false
+
+  async function sync() {
+    if (syncing) return
+    syncing = true
+    try {
+      const summaries = await skills.list()
+      const targets = summaries.filter((s) => s.provider === AEGIS_PROVIDER && !done.has(s.name))
+      for (const summary of targets) {
+        const skill = await skills.get(summary.name)
+        if (!skill) continue
+        const bare = skill.name
+        const prefixed = bare.startsWith(PREFIX) ? bare : PREFIX + bare
+        // The swap happens HERE, in the same pass as the rename, so no window
+        // exists in which another plugin could copy the un-swapped text.
+        const description = wantZh
+          ? (ZH_BY_EN.get(skill.description ?? '') ?? skill.description)
+          : skill.description
+        disposers.push(
+          skills.register({
+            name: prefixed,
+            ...(description !== undefined ? { description } : {}),
+            ...(skill.whenToUse !== undefined ? { whenToUse: skill.whenToUse } : {}),
+            invocation: skill.invocation ?? { modelInvocable: true, userInvocable: true },
+            source: 'orch-aegis-prefix',
+            content: skill.content,
+            ...(skill.resourceBase !== undefined ? { resourceBase: skill.resourceBase } : {}),
+            ...(skill.path !== undefined ? { path: skill.path } : {}),
+            ...(skill.metadata !== undefined ? { metadata: skill.metadata } : {}),
+          }),
+        )
+        if (prefixed !== bare) {
+          // Tombstone the bare name. Runtime beats bundled on collision, so this
+          // wins over the provider's entry and the old spelling stops being
+          // loadable — one skill, one name, no way to reach it by the other.
+          disposers.push(
+            skills.register({
+              name: bare,
+              description: `Renamed to ${prefixed}; load that name instead.`,
+              invocation: { modelInvocable: false, userInvocable: false },
+              source: 'orch-aegis-prefix',
+              content: `This skill was renamed to ${prefixed}.`,
+            }),
+          )
+        }
+        done.add(summary.name)
+        ctx.logger.info(`[orch-aegis-prefix] "${bare}" -> "${prefixed}"${wantZh ? ' (zh)' : ''}`)
+      }
+    } catch (error) {
+      ctx.logger.warn(`[orch-aegis-prefix] sync failed: ${String(error)}`)
+    } finally {
+      syncing = false
+    }
+  }
+
+  ctx.logger.info(`[orch-aegis-prefix] applied; zh=${wantZh}, ${ZH_DESCRIPTIONS.length} mappings available`)
+  void sync()
+  ctx.on('skills/change', () => {
+    void sync()
+  })
+  ctx.effect(() => () => {
+    for (const dispose of disposers) dispose()
+  })
+}

package/extensions/dsh/index.js

@@ -0,0 +1,41 @@
+/**
+ * Thin DeepSeek Harness bundle adapter for the orchestrator preset's own skills.
+ *
+ * Deliberately aegis-shaped and nothing more:
+ * - the host-owned filesystem provider stays the discovery implementation; this
+ *   adapter only points one isolated provider at this package's own skills/ tree;
+ * - no skill bodies are copied at load time and the native skill tool is untouched;
+ * - no agent or agentTeams injection, so `inject` is just ["skills"].
+ *
+ * The `orch-` prefix is NOT applied here. It lives in each SKILL.md's frontmatter
+ * `name:`, which is where the filesystem provider reads the skill name from, so a
+ * resync from source can never bake a second naming decision into the tree.
+ *
+ * `includeDefaultRoots: false` is what keeps this isolated: the user's global
+ * skills directory is somebody else's environment and is not this package's
+ * business.
+ *
+ * Entry specifier: the bundle patch mounts this file as
+ *   @quill507/dsh-orchestrator-preset/extensions/dsh/index.js
+ * The full scoped form is required. A bare or short form resolves to a directory
+ * that does not exist and the bundle fails to load with MODULE_NOT_FOUND, which
+ * is silent from the user's side — measured on this host, see the note in
+ * tools/verify-install.sh and hw-skills' own cordis.patch.yml.
+ */
+
+import { fileURLToPath } from "node:url";
+import { apply as applyFilesystemProvider } from "@deepseek-ai/dsh-skill-filesystem";
+
+const skillsRoot = fileURLToPath(new URL("../../skills/", import.meta.url));
+
+export const name = "orch-method-pack";
+export const inject = ["skills"];
+
+export function apply(ctx) {
+  applyFilesystemProvider(ctx, {
+    providerName: "orch-method-pack",
+    includeDefaultRoots: false,
+    bundledSkillDir: skillsRoot,
+    watch: false,
+  });
+}