@shgroup/dsh-serenity-hooks 1.25.2 → 1.25.3

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-serenity-hooks",
-  "version": "1.25.2",
+  "version": "1.25.3",
   "main": "lib/index.js",
   "description": "宁静号 ACC harness（Native Cordis 插件）：真实 DSH 工具 cc_fs/session/acc_msm/eap/neat/cce/handyman/session_rebuild/skiff_admin + 拦截缝机械约束（safe-mode/路径守卫）+ 高级设定面板（双端口网关/账号管理）+ Skiff 认知子集角色（实验性）。适配 DSH 公开版（0.1.0-rc，deepseek-ai/deepseek-harness）。",
   "engines": {

package/lib/index.js

@@ -756,6 +756,7 @@ function isWriteTool(toolName, action) {
 function decideGuard(input) {
 	const { root, toolName, safeModeOn, blacklist, pathArg, action } = input;
 	if (input.skiffSessionId !== void 0 && isSkiffSessionId(input.skiffSessionId)) {
+		if (toolName === "skill") return { kind: "allow" };
 		const roleName = input.skiffSessionId ? skiffRoleFor$1(input.skiffSessionId) : null;
 		if (!roleToolWhitelist(roleName ? readSkiffRoles(root).get(roleName) : void 0).has(toolName)) return {
 			deny: "tool not allowed in this skiff role",
@@ -2360,9 +2361,13 @@ function registerSkiffSession(sessionId, role, agent) {
 	skiffAgents.set(sessionId, agent);
 	registerSkiffSession$1(sessionId, role);
 }
+/** Skiff agent 挂载的 DSH preset（v1.25.3 修复：read/grep/glob 等平台工具由 preset 决定工具面；
+*  handyman 经 composeFrom 继承父、skiff 无父上下文——直接挂 DSH 默认 standard preset；
+*  guard 角色白名单再按角色过滤可见/可用面——白名单外工具仍 deny） */
+const SKIFF_PRESET = "standard";
 /**
 * 创建 Skiff agent：标准 DSH agent + cwd=CCC root + 角色模型 +
-* scoped 系统提示词（基础提示词 + CCC 定义段，全替换 ACC 默认注入）。
+* standard preset（平台工具面）+ scoped 系统提示词（基础提示词 + CCC 定义段，全替换 ACC 默认注入）。
 */
 async function createSkiffAgent(ctx, root, roleName, role, defaultModel) {
 	if (!ctx.agents) throw new Error("skiff: ctx.agents unavailable");
@@ -2370,7 +2375,15 @@ async function createSkiffAgent(ctx, root, roleName, role, defaultModel) {
 	const sessionId = `${SKIFF_SESSION_PREFIX}${roleName}-${randomUUID()}`;
 	const handle = await ctx.agents.create({
 		sessionId,
-		meta: { cwd: root },
+		meta: {
+			cwd: root,
+			agentPreset: SKIFF_PRESET
+		},
+		setup: async (agentCtx) => {
+			try {
+				await agentCtx.get("agentPresets")?.mount?.(agentCtx, SKIFF_PRESET);
+			} catch {}
+		},
 		...model ? { agentOptions: splitModel(model) } : {}
 	});
 	const agent = handle.agent;
@@ -6821,7 +6834,10 @@ dsp 只提供机制（双白名单强制 + 基础提示词 + 调试问答页）
 ── 运行 ──
   调试：设置面板「Serenity」页 Skiff 区块开启 → http://127.0.0.1:<debugPort> 问答页实测
   （v1.25.0 唯一客户端面；ACP stdio 协议 F4c 后续，与调试页共用同一会话核心）
-  启停 = 人工（设置面板开关，不随插件加载自动启动）；未开启零资源占用`;
+  启停 = 人工（设置面板开关，不随插件加载自动启动）；未开启零资源占用
+  生效机制：角色配置**实时读取**（改 .opencode/serenity.json → 刷新调试页即生效）；
+  改配置后用 skiff_admin apply 做显式校验 + 应用确认（绑定 CCC + 角色清单）
+  注意：skill 加载对 skiff **恒可用**（不设白名单——读知识面，无写能力）`;
 /** 校验当前 CCC 的 skiff 配置：roles schema 合法 / msms 均已注册 / model ∈ handyman.models / systemPrompt 非空 */
 function validateSkiffConfig(root) {
 	const roles = readSkiffRoles(root);
@@ -6870,18 +6886,45 @@ function listSkiffRoles(root) {
 		count: items.length
 	};
 }
+/**
+* 应用当前 skiff 配置（v1.25.3，S142 用户：改了 json 应该有个生效机制）。
+*
+* 语义：配置是**每次请求实时读取**的（v1.25.2）——apply 不是"推送"，而是**显式校验 + 应用确认**：
+* ① 校验配置合法（复用 validate：msms 注册 / model 白名单 / systemPrompt 非空）
+* ② 非法 → 报告问题清单，不应用（提示修复后重跑 apply）
+* ③ 合法 → 应用确认：绑定 CCC + 角色清单 + 说明（调试页刷新即生效）
+*/
+function applySkiffConfig(root) {
+	const validation = validateSkiffConfig(root);
+	const roles = readSkiffRoles(root);
+	if (!validation.ok) return {
+		applied: false,
+		cccRoot: root,
+		roleCount: roles.size,
+		issues: validation.issues,
+		hint: "fix the issues above, then run skiff_admin apply again"
+	};
+	return {
+		applied: true,
+		cccRoot: root,
+		roleCount: roles.size,
+		roles: [...roles.keys()],
+		note: "roles are read live from .opencode/serenity.json — the skiff debug page reflects changes on refresh; skill loading is always available to skiff sessions (not whitelisted)"
+	};
+}
 const skiffAdminTool = defineTool({
 	name: "skiff_admin",
-	description: "Skiff (F4, experimental): CCC cognitive-subset roles (subsets of the full serenity trajectory). guide: definition tutorial (concept/role schema/cognitive MSM writing/dual whitelist/trajectory subset/examples); validate: check the CCC skiff config (roles schema legal / msms registered / model in handyman.models / systemPrompt non-empty); list: role summary (name/model/msms/tools/trajectory). Roles are defined by the CCC in .opencode/serenity.json skiff.roles.",
+	description: "Skiff (F4, experimental): CCC cognitive-subset roles (subsets of the full serenity trajectory). guide: definition tutorial (concept/role schema/cognitive MSM writing/dual whitelist/trajectory subset/examples); validate: check the CCC skiff config (roles schema legal / msms registered / model in handyman.models / systemPrompt non-empty); apply: validate then confirm the config is live (bound CCC + role list; roles are read live on every request); list: role summary (name/model/msms/tools/trajectory). Roles are defined by the CCC in .opencode/serenity.json skiff.roles; skill loading is always available to skiff sessions (not whitelisted).",
 	parameters: { action: {
 		type: "string",
 		enum: [
 			"guide",
 			"validate",
+			"apply",
 			"list"
 		],
 		required: true,
-		description: "Subcommand: guide (definition tutorial) / validate (config check) / list (role summary)"
+		description: "Subcommand: guide (definition tutorial) / validate (config check) / apply (validate + confirm live) / list (role summary)"
 	} },
 	output: {
 		schema: { type: "json" },
@@ -6893,8 +6936,9 @@ const skiffAdminTool = defineTool({
 		switch (args.action) {
 			case "guide": return { guide: SKIFF_GUIDE };
 			case "validate": return validateSkiffConfig(root);
+			case "apply": return applySkiffConfig(root);
 			case "list": return listSkiffRoles(root);
-			default: throw new Error("skiff_admin requires action: guide | validate | list");
+			default: throw new Error("skiff_admin requires action: guide | validate | apply | list");
 		}
 	}
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shgroup/dsh-serenity-hooks",
-  "version": "1.25.2",
+  "version": "1.25.3",
   "description": "宁静号 ACC harness — Native Cordis 插件（DeepSeek Harness 运行时）。真实 DSH 工具注册（cc_fs/session/acc_msm 等 9 工具）+ 拦截缝机械约束（safe-mode/路径守卫/会话落盘）+ 系统提示词注入（ACC/CCE/Constraints/SKILL/Session 五块）。适配 DSH 公开版（deepseek-ai/deepseek-harness 0.1.0-rc）。",
   "license": "MIT",
   "repository": {