@rezti/dsh-rez-suite 0.1.17 → 0.1.19

package/README.md

@@ -12,4 +12,4 @@ dsh plugin --profile web update @rezti/dsh-rez-suite
 
 包名是 `@rezti/dsh-rez-suite`，不是 `dsh-rezti-suite`。不要对同一 profile 再单独 add 子包，会重复注册。
 
-拆分包（`dsh-rez-odoo` 等）给开发改代码用。Web 面板（含微信扫码）暂时仍在本包。老板三室（搞钱 / 产品 / 运营）也在本包内播种并登记侧栏，**不要**再装 `@rezti/dsh-rez-boss-desk`。
+拆分包（`dsh-rez-odoo` 等）给开发改代码用。Web 面板（含微信扫码）暂时仍在本包。设置里角色选「老板」后，才会在侧栏登记搞钱 / 产品 / 运营；切走老板会拿掉这三间（文件夹保留）。**不要**再装 `@rezti/dsh-rez-boss-desk`。

package/lib/client.d.ts

@@ -7262,8 +7262,9 @@ declare const zh: {
   readonly 'tab.status': "状态";
   readonly 'tab.audit': "用量";
   readonly 'config.role': "角色";
-  readonly 'config.roleHint': "决定注册给模型的 MCP 工具";
+  readonly 'config.roleHint': "选「老板」会在左侧出现搞钱 / 产品 / 运营三室；其他角色决定 MCP 工具";
   readonly 'role.all': "全部";
+  readonly 'role.boss': "老板";
   readonly 'role.engineer': "工程师";
   readonly 'role.sales': "销售";
   readonly 'role.operations': "运营";

package/lib/client.js

@@ -23,8 +23,9 @@ const zh = {
 	"tab.status": "状态",
 	"tab.audit": "用量",
 	"config.role": "角色",
-	"config.roleHint": "决定注册给模型的 MCP 工具",
+	"config.roleHint": "选「老板」会在左侧出现搞钱 / 产品 / 运营三室；其他角色决定 MCP 工具",
 	"role.all": "全部",
+	"role.boss": "老板",
 	"role.engineer": "工程师",
 	"role.sales": "销售",
 	"role.operations": "运营",
@@ -121,8 +122,9 @@ const en = {
 	"tab.status": "Status",
 	"tab.audit": "Usage",
 	"config.role": "Role",
-	"config.roleHint": "Which MCP tools are registered for the model",
+	"config.roleHint": "Boss adds 搞钱 / 产品 / 运营 workspaces; other roles filter MCP tools",
 	"role.all": "All",
+	"role.boss": "Boss",
 	"role.engineer": "Engineer",
 	"role.sales": "Sales",
 	"role.operations": "Operations",
@@ -515,6 +517,10 @@ const ROLES = [
 		value: "all",
 		label: "role.all"
 	},
+	{
+		value: "boss",
+		label: "role.boss"
+	},
 	{
 		value: "engineer",
 		label: "role.engineer"

package/lib/index.d.ts

@@ -1678,7 +1678,8 @@ declare abstract class SettingsProvider extends Service {
 //#endregion
 //#region src/protocol.d.ts
 /** Agent role, the preset-loader key. */
-type RezRoleId = 'engineer' | 'sales' | 'operations' | 'all';
+declare const REZ_ROLE_IDS: readonly ["all", "boss", "engineer", "sales", "operations"];
+type RezRoleId = (typeof REZ_ROLE_IDS)[number];
 /** Transport kinds the in-plugin MCP host can connect. */
 type RezMcpTransport = 'stdio' | 'streamable-http';
 /** One MCP server launch descriptor (standard MCP-style config). */
@@ -1740,7 +1741,8 @@ declare const name = "rez-suite";
 declare const inject: string[];
 declare const REZ_SETTINGS_NAMESPACE: SettingsNamespace;
 declare const Config: Schema<RezConfig>;
-declare const REZ_GUIDANCE: string;
+declare const REZ_GUIDANCE_CORE: string;
+declare function rezGuidanceFor(role: RezConfig['role']): string;
 declare function apply(ctx: Context, config?: RezConfig): void;
 //#endregion
-export { Config, REZ_GUIDANCE, REZ_SETTINGS_NAMESPACE, apply, inject, name };
+export { Config, REZ_GUIDANCE_CORE, REZ_SETTINGS_NAMESPACE, apply, inject, name, rezGuidanceFor };

package/lib/index.js

@@ -2,7 +2,7 @@ import { createRequire } from "node:module";
 import { homedir } from "node:os";
 import { dirname, join, relative } from "node:path";
 import { REZ_CREDENTIAL_REFS, REZ_DEFAULT_CONNECTIONS, REZ_SYSTEMS, lastMcpStartError, mergeConnections, secretConfigured, writeManagedCredential } from "@rezti/dsh-rez-sso";
-import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, statSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, statSync, writeFileSync } from "node:fs";
 import { DatabaseSync } from "node:sqlite";
 import { fileURLToPath } from "node:url";
 //#region ../../node_modules/.pnpm/@deepseek-ai+cosmokit@1.8.2/node_modules/@deepseek-ai/cosmokit/lib/index.js
@@ -2937,6 +2937,17 @@ function testComposedServers(input) {
 }
 //#endregion
 //#region src/protocol.ts
+/** Agent role, the preset-loader key. */
+const REZ_ROLE_IDS = [
+	"all",
+	"boss",
+	"engineer",
+	"sales",
+	"operations"
+];
+function isRezRoleId(value) {
+	return typeof value === "string" && REZ_ROLE_IDS.includes(value);
+}
 const REZ_API = {
 	config: "/api/dsh-rez-suite/config",
 	test: "/api/dsh-rez-suite/test",
@@ -3033,7 +3044,7 @@ function mergeConfig(base, override) {
 	const result = JSON.parse(JSON.stringify(base));
 	if (typeof value.enabled === "boolean") result.enabled = value.enabled;
 	if (typeof value.announceToAgent === "boolean") result.announceToAgent = value.announceToAgent;
-	if (value.role === "engineer" || value.role === "sales" || value.role === "operations" || value.role === "all") result.role = value.role;
+	if (isRezRoleId(value.role)) result.role = value.role;
 	result.connections = mergeConnections(value.connections ?? result.connections);
 	if (typeof value.servers === "object" && value.servers !== null) for (const [id, raw] of Object.entries(value.servers)) {
 		if (typeof raw !== "object" || raw === null) continue;
@@ -3145,7 +3156,7 @@ function applyPublicPatch(current, patch) {
 	const next = JSON.parse(JSON.stringify(current));
 	const secrets = [];
 	if (typeof patch.enabled === "boolean") next.enabled = patch.enabled;
-	if (patch.role === "engineer" || patch.role === "sales" || patch.role === "operations" || patch.role === "all") next.role = patch.role;
+	if (isRezRoleId(patch.role)) next.role = patch.role;
 	if (typeof patch.connections === "object" && patch.connections !== null) {
 		const incoming = patch.connections;
 		next.connections = mergeConnections({
@@ -7656,9 +7667,32 @@ function rezConfigTool(config) {
 }
 //#endregion
 //#region src/boss/register.ts
+/**
+* Register or drop the three boss rooms in the official workspace sidebar.
+* `workspaceRegistry.create` is idempotent: same canonical path returns the
+* existing record. New records are prepended, so we register in reverse to
+* keep 搞钱 → 产品 → 运营 at the top of the sidebar.
+* `delete` only drops the registry row — directories and session logs stay.
+*/
+function canon(path) {
+	try {
+		return realpathSync(path);
+	} catch {
+		return path;
+	}
+}
+function isRegisteredBossRoom(workspace, rooms) {
+	return new Set(rooms.map((room) => canon(room.path))).has(canon(workspace.path));
+}
 async function registerBossWorkspaces(registry, rooms) {
 	for (const room of [...rooms].reverse()) await registry.create(room.path, room.folder);
 }
+async function unregisterBossWorkspaces(registry, rooms) {
+	for (const workspace of registry.list()) {
+		if (!isRegisteredBossRoom(workspace, rooms)) continue;
+		await registry.delete(workspace.id);
+	}
+}
 //#endregion
 //#region src/boss/seed.ts
 const BOSS_ROOMS = [
@@ -7755,33 +7789,47 @@ function listFiles(root) {
 }
 //#endregion
 //#region src/boss/mount.ts
+const BOSS_ROLE_HINT = "设置 → 插件 → ReZ-TI → 角色选「老板」后，左侧会出现搞钱 / 产品 / 运营三室。不必手动「添加工作区」。";
 const BOSS_GUIDANCE = [
-	"老板三室已播种并登记为侧栏工作区：~/.dsh/workspaces/搞钱、产品、运营。不必手动「添加工作区」。",
-	"每个文件夹是独立作战室。官方 dsh 会注入该目录 AGENTS.md。",
+	"当前角色是老板。侧栏已登记三室：~/.dsh/workspaces/搞钱、产品、运营。不必手动「添加工作区」。",
+	"每个文件夹是独立作战室，官方 dsh 会注入该目录 AGENTS.md。",
 	"若该室仍有 BOOTSTRAP.md：本会话先做短问三拍，沉淀到 PRIORITIES.md / MEMORY.md，然后删除 BOOTSTRAP.md。",
 	"已初始化后：读 PRIORITIES.md + MEMORY.md + 今日/昨日 memory/；回答固定四行：结论 → 数字（哪家公司、哪段时间）→ 拍板 1～3 件事 → 未执行任何过账/付款/对外发送。",
 	"微信文件夹仍是收件箱，不要在那边查账或砍 SKU。"
 ].join("");
+function bossGuidanceFor(role) {
+	return role === "boss" ? BOSS_GUIDANCE : BOSS_ROLE_HINT;
+}
 function destRoot(env = process.env) {
 	if (env.REZ_BOSS_WORKSPACES !== void 0 && env.REZ_BOSS_WORKSPACES !== "") return env.REZ_BOSS_WORKSPACES;
 	return join(env.DSH_HOME !== void 0 && env.DSH_HOME !== "" ? env.DSH_HOME : join(homedir(), ".dsh"), "workspaces");
 }
-function tryWorkspaceRegistry(ctx) {
-	try {
-		return ctx.get("workspaceRegistry");
-	} catch {
+function expectedBossRooms(env = process.env) {
+	const root = destRoot(env);
+	return BOSS_ROOMS.map((room) => ({
+		path: join(root, room.folder),
+		folder: room.folder
+	}));
+}
+async function syncBossWorkspaces(registry, role, env = process.env) {
+	if (role === "boss") {
+		await registerBossWorkspaces(registry, seedBossWorkspaces({ destRoot: destRoot(env) }).rooms);
 		return;
 	}
+	await unregisterBossWorkspaces(registry, expectedBossRooms(env));
 }
-/** Seed files and register official workspaces. Safe when registry is absent. */
-function mountBossDesk(ctx) {
-	const seeded = seedBossWorkspaces({ destRoot: destRoot() });
-	const registry = tryWorkspaceRegistry(ctx);
-	if (registry === void 0) return;
-	registerBossWorkspaces(registry, seeded.rooms).catch((error) => {
-		const why = error instanceof Error ? error.message : String(error);
-		console.error("[dsh-rez-suite] workspaceRegistry.create failed:", why);
-	});
+/** Seed/register 三室 only for role=boss; drop sidebar rows otherwise. Returns a re-sync function. */
+function mountBossDesk(ctx, getRole) {
+	const run = () => {
+		ctx.inject(["workspaceRegistry"], (inner) => {
+			syncBossWorkspaces(inner.get("workspaceRegistry"), getRole()).catch((error) => {
+				const why = error instanceof Error ? error.message : String(error);
+				console.error("[dsh-rez-suite] boss workspace sync failed:", why);
+			});
+		});
+	};
+	run();
+	return run;
 }
 //#endregion
 //#region src/index.ts
@@ -7807,10 +7855,11 @@ const Config = Schema.object({
 	enabled: Schema.boolean().default(true),
 	announceToAgent: Schema.boolean().default(true),
 	role: Schema.union([
+		"all",
+		"boss",
 		"engineer",
 		"sales",
-		"operations",
-		"all"
+		"operations"
 	]).default("all"),
 	servers: Schema.dict(serverSchema).default({}),
 	connections: Schema.object({
@@ -7840,15 +7889,17 @@ const Config = Schema.object({
 	})
 });
 const SECTION_ORDER = 150;
-const REZ_GUIDANCE = [
+const REZ_GUIDANCE_CORE = [
 	"本机已安装 ReZ-TI 拆分包：工作身份由 dsh-rez-sso 提供，MCP 由官方 dsh-mcp-client 接入 Odoo / Nextcloud / 企业微信 / Home Assistant。",
 	"工具名 mcp__odoo__*、mcp__nextcloud__*、mcp__wechat__*、mcp__homeassistant__*。",
 	"密钥：REZ_ODOO_TOKEN、REZ_NEXTCLOUD_PASSWORD、REZ_WECHAT_WEBHOOK、REZ_HA_TOKEN。",
 	"个人微信（QClaw/ClawBot）：打开 设置 → 插件 → ReZ-TI → 微信 扫码，然后直接在微信里说话。消息进入网页左侧「微信」文件夹并延续同一会话，模型跟网页默认。网页归档了再从微信说话会自动恢复到侧栏。发「重启对话」会新开一条可见会话并把旧会话归档。网页端必须开着。不必再跑命令、也不要调用微信 MCP 工具。",
 	"意图用 rez_set_intent（erp/files/chat/home/auto）。审计用 rez_audit。",
-	"涉及资金、对外发送、设备控制、生产写入时先征得用户批准。",
-	BOSS_GUIDANCE
+	"涉及资金、对外发送、设备控制、生产写入时先征得用户批准。"
 ].join("");
+function rezGuidanceFor(role) {
+	return REZ_GUIDANCE_CORE + bossGuidanceFor(role);
+}
 function normalize(input) {
 	return mergeConfig(defaultConfig(), input ?? {});
 }
@@ -7868,8 +7919,8 @@ function delegatedHost(ctx, getConfig) {
 	};
 }
 function apply(ctx, config) {
-	mountBossDesk(ctx);
 	let current = () => normalize(config);
+	const syncBossDesk = mountBossDesk(ctx, () => current().role);
 	const tokens = new TokenManager(joinTokenDb());
 	const host = delegatedHost(ctx, () => current());
 	ctx.effect(() => () => {
@@ -7882,6 +7933,7 @@ function apply(ctx, config) {
 			const value = normalize(next);
 			saveConfig(value);
 			current = () => value;
+			syncBossDesk();
 			try {
 				const settings = ctx.get("settings");
 				if (settings?.update !== void 0) await settings.update(REZ_SETTINGS_NAMESPACE, value);
@@ -7918,7 +7970,7 @@ function apply(ctx, config) {
 		if (value.announceToAgent) disposeSection = ctx.systemPrompt.section({
 			name: "plugin:dsh-rez-suite",
 			order: SECTION_ORDER,
-			text: REZ_GUIDANCE
+			text: rezGuidanceFor(value.role)
 		});
 		disposeRoutes = ctx.effect(() => {
 			const disposers = routes.map((route) => ctx.webServer.register(route));
@@ -7937,8 +7989,12 @@ function apply(ctx, config) {
 		setSource: (source) => {
 			current = source;
 			sync();
+			syncBossDesk();
 		},
-		onChange: sync
+		onChange: () => {
+			sync();
+			syncBossDesk();
+		}
 	});
 	sync();
 }
@@ -7946,4 +8002,4 @@ function joinTokenDb() {
 	return join(homedir(), ".dsh", "dsh-rez-token-manager.sqlite");
 }
 //#endregion
-export { Config, REZ_GUIDANCE, REZ_SETTINGS_NAMESPACE, apply, inject, name };
+export { Config, REZ_GUIDANCE_CORE, REZ_SETTINGS_NAMESPACE, apply, inject, name, rezGuidanceFor };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rezti/dsh-rez-suite",
   "description": "ReZ-TI one-package install for DeepSeek Harness. Update with: dsh plugin --profile web update @rezti/dsh-rez-suite",
-  "version": "0.1.17",
+  "version": "0.1.19",
   "type": "module",
   "engines": {
     "node": "^22.19.0 || >=24.0.0"
@@ -38,13 +38,13 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
     "zod": "^4.4.3",
-    "@rezti/dsh-rez-intent": "0.1.4",
-    "@rezti/dsh-rez-sso": "0.1.7",
-    "@rezti/dsh-rez-token-manager": "0.1.4",
+    "@rezti/dsh-rez-ha-bridge": "0.1.7",
     "@rezti/dsh-rez-odoo": "0.1.7",
+    "@rezti/dsh-rez-intent": "0.1.4",
     "@rezti/dsh-rez-nextcloud": "0.1.7",
+    "@rezti/dsh-rez-sso": "0.1.7",
     "@rezti/dsh-rez-wechat": "0.1.11",
-    "@rezti/dsh-rez-ha-bridge": "0.1.7"
+    "@rezti/dsh-rez-token-manager": "0.1.4"
   },
   "peerDependencies": {
     "react": "^18.2.0",

package/src/boss/mount.ts

@@ -1,38 +1,64 @@
 import { homedir } from 'node:os'
 import { join } from 'node:path'
 import type { Context } from '@deepseek-ai/cordis'
-import { registerBossWorkspaces, type WorkspaceRegistrar } from './register.ts'
-import { seedBossWorkspaces } from './seed.ts'
+import type { RezRoleId } from '../protocol.ts'
+import {
+  registerBossWorkspaces,
+  unregisterBossWorkspaces,
+  type BossRoomRef,
+  type WorkspaceRegistrar,
+} from './register.ts'
+import { BOSS_ROOMS, seedBossWorkspaces } from './seed.ts'
+
+export const BOSS_ROLE_HINT = '设置 → 插件 → ReZ-TI → 角色选「老板」后，左侧会出现搞钱 / 产品 / 运营三室。不必手动「添加工作区」。'
 
 export const BOSS_GUIDANCE = [
-  '老板三室已播种并登记为侧栏工作区：~/.dsh/workspaces/搞钱、产品、运营。不必手动「添加工作区」。',
-  '每个文件夹是独立作战室。官方 dsh 会注入该目录 AGENTS.md。',
+  '当前角色是老板。侧栏已登记三室：~/.dsh/workspaces/搞钱、产品、运营。不必手动「添加工作区」。',
+  '每个文件夹是独立作战室，官方 dsh 会注入该目录 AGENTS.md。',
   '若该室仍有 BOOTSTRAP.md：本会话先做短问三拍，沉淀到 PRIORITIES.md / MEMORY.md，然后删除 BOOTSTRAP.md。',
   '已初始化后：读 PRIORITIES.md + MEMORY.md + 今日/昨日 memory/；回答固定四行：结论 → 数字（哪家公司、哪段时间）→ 拍板 1～3 件事 → 未执行任何过账/付款/对外发送。',
   '微信文件夹仍是收件箱，不要在那边查账或砍 SKU。',
 ].join('')
 
+export function bossGuidanceFor(role: RezRoleId): string {
+  return role === 'boss' ? BOSS_GUIDANCE : BOSS_ROLE_HINT
+}
+
 function destRoot(env: NodeJS.ProcessEnv = process.env): string {
   if (env.REZ_BOSS_WORKSPACES !== undefined && env.REZ_BOSS_WORKSPACES !== '') return env.REZ_BOSS_WORKSPACES
   const home = env.DSH_HOME !== undefined && env.DSH_HOME !== '' ? env.DSH_HOME : join(homedir(), '.dsh')
   return join(home, 'workspaces')
 }
 
-function tryWorkspaceRegistry(ctx: Context): WorkspaceRegistrar | undefined {
-  try {
-    return ctx.get('workspaceRegistry') as WorkspaceRegistrar
-  } catch {
-    return undefined
+export function expectedBossRooms(env: NodeJS.ProcessEnv = process.env): BossRoomRef[] {
+  const root = destRoot(env)
+  return BOSS_ROOMS.map((room) => ({ path: join(root, room.folder), folder: room.folder }))
+}
+
+export async function syncBossWorkspaces(
+  registry: WorkspaceRegistrar,
+  role: RezRoleId,
+  env: NodeJS.ProcessEnv = process.env,
+): Promise<void> {
+  if (role === 'boss') {
+    const seeded = seedBossWorkspaces({ destRoot: destRoot(env) })
+    await registerBossWorkspaces(registry, seeded.rooms)
+    return
   }
+  await unregisterBossWorkspaces(registry, expectedBossRooms(env))
 }
 
-/** Seed files and register official workspaces. Safe when registry is absent. */
-export function mountBossDesk(ctx: Context): void {
-  const seeded = seedBossWorkspaces({ destRoot: destRoot() })
-  const registry = tryWorkspaceRegistry(ctx)
-  if (registry === undefined) return
-  void registerBossWorkspaces(registry, seeded.rooms).catch((error: unknown) => {
-    const why = error instanceof Error ? error.message : String(error)
-    console.error('[dsh-rez-suite] workspaceRegistry.create failed:', why)
-  })
+/** Seed/register 三室 only for role=boss; drop sidebar rows otherwise. Returns a re-sync function. */
+export function mountBossDesk(ctx: Context, getRole: () => RezRoleId): () => void {
+  const run = (): void => {
+    ctx.inject(['workspaceRegistry'], (inner) => {
+      const registry = inner.get('workspaceRegistry') as WorkspaceRegistrar
+      void syncBossWorkspaces(registry, getRole()).catch((error: unknown) => {
+        const why = error instanceof Error ? error.message : String(error)
+        console.error('[dsh-rez-suite] boss workspace sync failed:', why)
+      })
+    })
+  }
+  run()
+  return run
 }

package/src/boss/register.ts

@@ -1,18 +1,54 @@
 /**
- * Register seeded room directories as official dsh workspaces.
+ * Register or drop the three boss rooms in the official workspace sidebar.
  * `workspaceRegistry.create` is idempotent: same canonical path returns the
  * existing record. New records are prepended, so we register in reverse to
  * keep 搞钱 → 产品 → 运营 at the top of the sidebar.
+ * `delete` only drops the registry row — directories and session logs stay.
  */
+import { realpathSync } from 'node:fs'
+
+export interface WorkspaceRecord {
+  id: string
+  path: string
+  title: string
+}
+
 export interface WorkspaceRegistrar {
   create(path: string, title?: string): Promise<unknown>
+  list(): WorkspaceRecord[]
+  delete(id: string): Promise<boolean>
+}
+
+export type BossRoomRef = { path: string; folder: string }
+
+function canon(path: string): string {
+  try {
+    return realpathSync(path)
+  } catch {
+    return path
+  }
+}
+
+export function isRegisteredBossRoom(workspace: WorkspaceRecord, rooms: ReadonlyArray<BossRoomRef>): boolean {
+  const wanted = new Set(rooms.map((room) => canon(room.path)))
+  return wanted.has(canon(workspace.path))
 }
 
 export async function registerBossWorkspaces(
   registry: WorkspaceRegistrar,
-  rooms: ReadonlyArray<{ path: string; folder: string }>,
+  rooms: ReadonlyArray<BossRoomRef>,
 ): Promise<void> {
   for (const room of [...rooms].reverse()) {
     await registry.create(room.path, room.folder)
   }
 }
+
+export async function unregisterBossWorkspaces(
+  registry: WorkspaceRegistrar,
+  rooms: ReadonlyArray<BossRoomRef>,
+): Promise<void> {
+  for (const workspace of registry.list()) {
+    if (!isRegisteredBossRoom(workspace, rooms)) continue
+    await registry.delete(workspace.id)
+  }
+}

package/src/client/locales.ts

@@ -14,8 +14,9 @@ export const zh = {
   'tab.audit': '用量',
   // config
   'config.role': '角色',
-  'config.roleHint': '决定注册给模型的 MCP 工具',
+  'config.roleHint': '选「老板」会在左侧出现搞钱 / 产品 / 运营三室；其他角色决定 MCP 工具',
   'role.all': '全部',
+  'role.boss': '老板',
   'role.engineer': '工程师',
   'role.sales': '销售',
   'role.operations': '运营',
@@ -118,8 +119,9 @@ export const en: Record<RezKey, string> = {
   'tab.status': 'Status',
   'tab.audit': 'Usage',
   'config.role': 'Role',
-  'config.roleHint': 'Which MCP tools are registered for the model',
+  'config.roleHint': 'Boss adds 搞钱 / 产品 / 运营 workspaces; other roles filter MCP tools',
   'role.all': 'All',
+  'role.boss': 'Boss',
   'role.engineer': 'Engineer',
   'role.sales': 'Sales',
   'role.operations': 'Operations',

package/src/client/panel/ConfigTab.tsx

@@ -11,6 +11,7 @@ import css from './panel.module.css'
 
 const ROLES: Array<{ value: RezRoleId; label: string }> = [
   { value: 'all', label: 'role.all' },
+  { value: 'boss', label: 'role.boss' },
   { value: 'engineer', label: 'role.engineer' },
   { value: 'sales', label: 'role.sales' },
   { value: 'operations', label: 'role.operations' },

package/src/index.ts

@@ -27,7 +27,7 @@ import { defaultConfig, mergeConfig, saveConfig } from './store.ts'
 import { TokenManager } from './token-manager.ts'
 import { rezConfigTool, rezStatusTool } from './tools.ts'
 import type { RezConfig } from './protocol.ts'
-import { BOSS_GUIDANCE, mountBossDesk } from './boss/mount.ts'
+import { bossGuidanceFor, mountBossDesk } from './boss/mount.ts'
 
 export const name = 'rez-suite'
 
@@ -50,7 +50,7 @@ const serverSchema = z.object({
 export const Config: z<RezConfig> = z.object({
   enabled: z.boolean().default(true),
   announceToAgent: z.boolean().default(true),
-  role: z.union(['engineer', 'sales', 'operations', 'all'] as const).default('all'),
+  role: z.union(['all', 'boss', 'engineer', 'sales', 'operations'] as const).default('all'),
   servers: z.dict(serverSchema).default({}),
   connections: z.object({
     odoo: z.object({
@@ -79,16 +79,19 @@ export const Config: z<RezConfig> = z.object({
 
 const SECTION_ORDER = 150
 
-export const REZ_GUIDANCE = [
+export const REZ_GUIDANCE_CORE = [
   '本机已安装 ReZ-TI 拆分包：工作身份由 dsh-rez-sso 提供，MCP 由官方 dsh-mcp-client 接入 Odoo / Nextcloud / 企业微信 / Home Assistant。',
   '工具名 mcp__odoo__*、mcp__nextcloud__*、mcp__wechat__*、mcp__homeassistant__*。',
   '密钥：REZ_ODOO_TOKEN、REZ_NEXTCLOUD_PASSWORD、REZ_WECHAT_WEBHOOK、REZ_HA_TOKEN。',
   '个人微信（QClaw/ClawBot）：打开 设置 → 插件 → ReZ-TI → 微信 扫码，然后直接在微信里说话。消息进入网页左侧「微信」文件夹并延续同一会话，模型跟网页默认。网页归档了再从微信说话会自动恢复到侧栏。发「重启对话」会新开一条可见会话并把旧会话归档。网页端必须开着。不必再跑命令、也不要调用微信 MCP 工具。',
   '意图用 rez_set_intent（erp/files/chat/home/auto）。审计用 rez_audit。',
   '涉及资金、对外发送、设备控制、生产写入时先征得用户批准。',
-  BOSS_GUIDANCE,
 ].join('')
 
+export function rezGuidanceFor(role: RezConfig['role']): string {
+  return REZ_GUIDANCE_CORE + bossGuidanceFor(role)
+}
+
 function normalize(input: Partial<RezConfig> | undefined): RezConfig {
   return mergeConfig(defaultConfig(), input ?? {})
 }
@@ -110,8 +113,8 @@ function delegatedHost(ctx: Context, getConfig: () => RezConfig): McpHost {
 }
 
 export function apply(ctx: Context, config?: RezConfig): void {
-  mountBossDesk(ctx)
   let current: () => RezConfig = () => normalize(config)
+  const syncBossDesk = mountBossDesk(ctx, () => current().role)
 
   const tokens = new TokenManager(joinTokenDb())
   const host = delegatedHost(ctx, () => current())
@@ -128,6 +131,7 @@ export function apply(ctx: Context, config?: RezConfig): void {
       const value = normalize(next as Partial<RezConfig>)
       saveConfig(value)
       current = () => value
+      syncBossDesk()
       try {
         const settings = ctx.get('settings') as { update?: (namespace: unknown, value: unknown) => Promise<void> } | undefined
         if (settings?.update !== undefined) await settings.update(REZ_SETTINGS_NAMESPACE, value)
@@ -160,7 +164,7 @@ export function apply(ctx: Context, config?: RezConfig): void {
       disposeSection = ctx.systemPrompt.section({
         name: 'plugin:dsh-rez-suite',
         order: SECTION_ORDER,
-        text: REZ_GUIDANCE,
+        text: rezGuidanceFor(value.role),
       })
     }
 
@@ -179,8 +183,12 @@ export function apply(ctx: Context, config?: RezConfig): void {
     setSource: (source) => {
       current = source
       sync()
+      syncBossDesk()
+    },
+    onChange: () => {
+      sync()
+      syncBossDesk()
     },
-    onChange: sync,
   })
 
   sync()

package/src/presets.ts

@@ -13,7 +13,7 @@ interface RoleRule {
   pattern: string
 }
 
-const RULES: Record<Exclude<RezRoleId, 'all'>, RoleRule[]> = {
+const RULES: Record<Exclude<RezRoleId, 'all' | 'boss'>, RoleRule[]> = {
   engineer: [
     // Odoo lookups and reads.
     { server: 'odoo', pattern: '*search*' },
@@ -111,7 +111,7 @@ function compilePattern(pattern: string): RegExp {
   return new RegExp(source, 'i')
 }
 
-const COMPILED: Record<Exclude<RezRoleId, 'all'>, { server: RezServerId; test: RegExp }[]> = {
+const COMPILED: Record<Exclude<RezRoleId, 'all' | 'boss'>, { server: RezServerId; test: RegExp }[]> = {
   engineer: RULES.engineer.map(rule => ({ server: rule.server, test: compilePattern(rule.pattern) })),
   sales: RULES.sales.map(rule => ({ server: rule.server, test: compilePattern(rule.pattern) })),
   operations: RULES.operations.map(rule => ({ server: rule.server, test: compilePattern(rule.pattern) })),
@@ -119,7 +119,7 @@ const COMPILED: Record<Exclude<RezRoleId, 'all'>, { server: RezServerId; test: R
 
 /** Whether one MCP tool may be registered for the selected role. */
 export function isToolAllowed(role: RezRoleId, server: string, rawName: string): boolean {
-  if (role === 'all') return true
+  if (role === 'all' || role === 'boss') return true
   const rules = COMPILED[role]
   return rules.some(rule => rule.server === server && rule.test.test(rawName))
 }

package/src/protocol.ts

@@ -8,7 +8,12 @@
 export type RezServerId = string
 
 /** Agent role, the preset-loader key. */
-export type RezRoleId = 'engineer' | 'sales' | 'operations' | 'all'
+export const REZ_ROLE_IDS = ['all', 'boss', 'engineer', 'sales', 'operations'] as const
+export type RezRoleId = (typeof REZ_ROLE_IDS)[number]
+
+export function isRezRoleId(value: unknown): value is RezRoleId {
+  return typeof value === 'string' && (REZ_ROLE_IDS as readonly string[]).includes(value)
+}
 
 /** Transport kinds the in-plugin MCP host can connect. */
 export type RezMcpTransport = 'stdio' | 'streamable-http'

package/src/routes.ts

@@ -13,8 +13,8 @@ import {
   writeManagedCredential,
   type RezSystem,
 } from '@rezti/dsh-rez-sso'
-import type { RezConfig, RezMcpServerSpec, RezRoleId } from './protocol.ts'
-import { REZ_API } from './protocol.ts'
+import type { RezConfig, RezMcpServerSpec } from './protocol.ts'
+import { isRezRoleId, REZ_API } from './protocol.ts'
 import type { McpHost } from './mcp-host.ts'
 import type { TokenManager } from './token-manager.ts'
 import { publicConfig } from './store.ts'
@@ -85,7 +85,7 @@ function applyPublicPatch(current: RezConfig, patch: Record<string, unknown>): {
   const next: RezConfig = JSON.parse(JSON.stringify(current)) as RezConfig
   const secrets: Array<{ system: RezSystem; value: string }> = []
   if (typeof patch.enabled === 'boolean') next.enabled = patch.enabled
-  if (patch.role === 'engineer' || patch.role === 'sales' || patch.role === 'operations' || patch.role === 'all') next.role = patch.role as RezRoleId
+  if (isRezRoleId(patch.role)) next.role = patch.role
 
   if (typeof patch.connections === 'object' && patch.connections !== null) {
     const incoming = patch.connections as Record<string, unknown>

package/src/store.ts

@@ -15,6 +15,7 @@ import {
   secretConfigured,
 } from '@rezti/dsh-rez-sso'
 import type { RezConfig, RezMcpServerSpec, RezPublicConfig } from './protocol.ts'
+import { isRezRoleId } from './protocol.ts'
 
 /** File format version. */
 const FORMAT_VERSION = 1
@@ -128,7 +129,7 @@ export function mergeConfig(base: RezConfig, override: unknown): RezConfig {
   const result: RezConfig = JSON.parse(JSON.stringify(base)) as RezConfig
   if (typeof value.enabled === 'boolean') result.enabled = value.enabled
   if (typeof value.announceToAgent === 'boolean') result.announceToAgent = value.announceToAgent
-  if (value.role === 'engineer' || value.role === 'sales' || value.role === 'operations' || value.role === 'all') result.role = value.role
+  if (isRezRoleId(value.role)) result.role = value.role
 
   result.connections = mergeConnections(value.connections ?? result.connections)