@suifei/dsh-pmo-button 0.7.3 → 0.8.0

package/README.md

@@ -58,6 +58,22 @@ dsh plugin --profile <你的profile> add github:suifei/dsh-pmo-button
 | `greet` | `hi` | 每次启动发给子代理的问候文本 |
 | `rolePrompt` | （内置审查规程原文） | 身份提示词；每会话仅发一次，置空禁用 |
 | `maxRounds` | `20` | 自上次用户输入以来的审查轮数上限（0 = 不限），超出自动熄灭 |
+| `childModelProvider` | （空 = 继承主会话） | 子代理提供方覆盖，如 `deepseek-official` |
+| `childModel` | （空 = 继承主会话） | 子代理模型覆盖，如 `deepseek-v4.1-flash` |
+| `childReasoningEffort` | （空 = 继承主会话） | 子代理思考等级覆盖，如 `max` |
+
+### 🔀 异构审查（审查方 ≠ 执行方）
+
+三个 `childModel*` 字段留空时，子代理**自动继承主会话**的提供方/模型/思考等级；全部留空即"同模型互审"。想要"盲区不同"的异构审查，把三项指向另一个模型即可：
+
+```yaml
+config:
+  childModelProvider: deepseek-official
+  childModel: deepseek-v4.1-flash
+  childReasoningEffort: max
+```
+
+> 前提：该提供方已在 Harness 中配置好凭据；id 以模型选择器目录为准。指定的模型/等级会写入子代理持久描述符——**冷恢复按描述符还原，不会漂回主会话模型**。
 
 ## 📜 日志格式
 

package/client.js

@@ -1,5 +1,5 @@
 /**
- * PMO button — Client half v0.7.3.
+ * PMO button — Client half v0.8.0.
  * Red start/stop control in `conversation.input.right` (idle: neutral circle
  * with red arrow; armed: red circle with pulse animation) plus a liveness
  * strip in `conversation.composer.dock`. State is owned by the Host half via
@@ -12,7 +12,7 @@ window.__ModuleLoader__.load({
     const React = require('react');
     const h = React.createElement;
     const BASE = '/pmo-button';
-    const VER = 'v0.7.3';
+    const VER = 'v0.8.0';
     let loadError = null;
     let t = { start: 'Start PMO automation', stop: 'PMO running: click to stop', busy: 'PMO: pending…', offline: 'PMO: host unreachable' };
 

package/index.js

@@ -1,5 +1,5 @@
 /**
- * PMO button — Host half v0.7.3.
+ * PMO button — Host half v0.8.0.
  * Per-session armed set, turn buffers, child registry, and the once-per-session
  * identity-prompt flag are persisted (pmo-state.json), so restarts lose nothing.
  * The `session/event` feed drives two jobs for armed sessions:
@@ -67,6 +67,12 @@ export const Config = Schema.object({
   rolePrompt: Schema.string().default(ROLE_PROMPT_DEFAULT),
   /** Review-round cap per session since the last user input; 0 disables the cap. */
   maxRounds: Schema.number().default(20),
+  /** Child provider override; empty inherits the parent session's provider. */
+  childModelProvider: Schema.string().default(''),
+  /** Child model override; empty inherits the parent session's model. */
+  childModel: Schema.string().default(''),
+  /** Child reasoning-effort override; empty inherits the parent session's effort. */
+  childReasoningEffort: Schema.string().default(''),
 })
 
 const SEP = '\n' + '─'.repeat(68) + '\n'
@@ -180,6 +186,11 @@ export function apply(ctx, config) {
     if (t.length <= limit) return t
     return t.slice(0, limit) + `\n…(截断，原长 ${t.length} 字符)`
   }
+  /** Never let credential-looking strings (npm_ tokens etc.) reach the log,
+   *  the review forward, or the child's durable session. */
+  function redact(s) {
+    return String(s ?? '').replace(/npm_[A-Za-z0-9]{20,}/g, 'npm_***已脱敏***')
+  }
   /** Auto-stop: dim the button and gate forwarding WITHOUT deafening the
    * session listener — turn logging keeps running, and user speech (or a
    * button re-light) releases the gate so the loop can auto-resume. */
@@ -315,7 +326,7 @@ export function apply(ctx, config) {
       otherTasks.forEach((t) => parts.push(`[注入:${t.src}] ${t.text}`))
       attachTasks.forEach((t) => parts.push(t.text))
       if (b.texts?.length > 0) parts.push(`[主代理] ${b.texts.join('\n\n---\n\n')}`)
-      const forward = clip(`【PMO 轮次转发 · turn=${turn}】\n` + parts.join('\n'), config.maxChars * 2)
+      const forward = clip(redact(`【PMO 轮次转发 · turn=${turn}】\n` + parts.join('\n')), config.maxChars * 2)
       const agents = ctx.get('agents')
       const agent = agents && typeof agents.get === 'function' ? agents.get(sid) : undefined
       const subagentsSvc = ctx.get('subagents')
@@ -381,12 +392,21 @@ export function apply(ctx, config) {
       ...roleBlocks,
       { type: 'text', text: config.greet },
     ]
+    // agentOptions overrides (spawn capability): empty strings inherit the
+    // parent session's provider/model/reasoning effort (spawn README: the
+    // child inherits provider, model, reasoning effort unless agentOptions).
+    const overrides = {}
+    if (config.childModelProvider) overrides.provider = config.childModelProvider
+    if (config.childModel) overrides.model = config.childModel
+    if (config.childReasoningEffort) overrides.reasoningEffort = config.childReasoningEffort
+    const request = { parent: agent, prompt: promptBlocks, description: config.childLabel }
+    if (Object.keys(overrides).length > 0) request.agentOptions = overrides
     const act = await subagents.startActivation({
       provider: config.provider,
       label: config.childLabel,
       delivery: 'parent',
       signal: controller.signal,
-      request: { parent: agent, prompt: promptBlocks, description: config.childLabel },
+      request,
     })
     children.set(sid, String(act.childId))
     if (needRole) {
@@ -424,7 +444,7 @@ export function apply(ctx, config) {
         const srcKind = text.trimStart().startsWith('<system-reminder>')
           ? 'system-reminder'
           : sourceKind(event.data)
-        b.tasks.push({ src: srcKind, text })
+        b.tasks.push({ src: srcKind, text: redact(text) })
         for (const s of nonTextSummaries(event.data)) b.tasks.push({ src: '__attach__', text: s })
         // Recognize the PMO child's STATUS protocol from its settlement notice
         // or direct adjacent message, and record the review verdict.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suifei/dsh-pmo-button",
-  "version": "0.7.3",
+  "version": "0.8.0",
   "description": "PMO 审查循环按钮 for DeepSeek Harness — 持久审查子代理 + 轮次转发 + STATUS 协议（CONTINUE/DONE/NEED_HUMAN）自动循环推进",
   "keywords": [
     "deepseek-harness", "dsh", "dsh-plugin", "pmo", "code-review",