@xia-sc/dsh-language-policy 0.0.0-stage → 0.1.1

package/CHANGELOG.md

@@ -0,0 +1,14 @@
+# Changelog
+
+## 0.1.1 — 2026-11-04
+
+- 发布链路改为 GitHub Actions + npm Trusted Publishing（OIDC），发布自动附带 provenance，不再使用长期 npm token。
+- README 增加 npm version / license / publish 徽标。
+- 无运行时代码变化。
+
+## 0.1.0 — 2026-11-04
+
+- 首个版本：Host-only bundle，通过 `ctx.systemPrompt.section()` 在系统提示词末尾（persona suffix 之后）注入简体中文语言策略。
+- 全局 section，主 agent、Agent Teams teammate、subagent 均生效。
+- 配置：`enabled`（关掉做 A/B 对照）、`text`（覆盖默认文本）。
+- 附带静态冒烟测试（`test/smoke.mjs`）与 A/B 实验工具（`tools/`）。

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 xia-sc
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,146 @@
-# Temporary Holding Version
+# @xia-sc/dsh-language-policy
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+[![npm version](https://img.shields.io/npm/v/@xia-sc/dsh-language-policy.svg)](https://www.npmjs.com/package/@xia-sc/dsh-language-policy)
+[![license](https://img.shields.io/npm/l/@xia-sc/dsh-language-policy.svg)](LICENSE)
+[![publish](https://github.com/xia-sc/dsh-language-policy/actions/workflows/publish.yml/badge.svg)](https://github.com/xia-sc/dsh-language-policy/actions/workflows/publish.yml)
+
+一个只做一件事的 **Host-only DSH bundle**：把一条简体中文语言策略钉在系统提示词的**最末尾**，让模型的内部推理（reasoning）和用户回复保持中文。
+
+- 零依赖（只用 `systemPrompt` 服务和 Cordis 的 `ctx.effect` 生命周期）
+- 不覆盖任何上游配置，纯追加
+- 全局 section：主 agent、Agent Teams 的 teammate、subagent 都会带上
+
+## 为什么需要它
+
+中文用户使用 DSH 时，模型内部的思考会周期性地变成英文，`~/.dsh/AGENTS.md` 里写「内部推理一律使用中文」也压不住长会话漂移。根本原因不在规则丢失：
+
+1. 系统提示词本身是纯英文的，而且很长（约 7.8K 字符 / 23 段，仅 1 段中文）；
+2. `AGENTS.md` 被注入成 **user 角色**的 `<system-reminder>`，框架文案明确写了它只是 guidance，**不覆盖 system/developer/user 指令**；
+3. `AGENTS.md` 只在会话开始注入一次（`baseline: true`），长会话中被稀释到很远的位置；
+4. 模型在「深度排障」类长推理任务里会回归英文训练分布（实测两个排障会话思考中文占比只有 4% / 9%，其余会话 75%–99%）。
+
+把同一条策略以 **system 角色、最后一段** 的形式注入，才能在优先级和位置上同时压住这个漂移。
+
+## 工作原理
+
+插件在 `apply()` 里向 `ctx.systemPrompt` 注册一个 section：
+
+| 字段 | 值 | 说明 |
+|---|---|---|
+| `name` | `policy:response-language` | `policy:` 前缀避免与第一方 section 撞名 |
+| `order` | `getSectionOrder('DEPLOYMENT_PERSONA_SUFFIX') + 1` | 跟随上游段落顺序，落在系统提示词最后；取不到时回退 `10201` |
+| `interpolate` | `false` | 策略是纯文本，不参与 `{{变量}}` 插值，避免装配报错 |
+| `text` | 见 `index.js` 的 `DEFAULT_TEXT` | 可用 `config.text` 覆盖 |
+
+选择「运行时插件」而不是「patch 里覆盖 `system-prompt` 的 config」的原因：后者要复述 `personaPrefix`，相当于把上游文案复制一份，上游一改就会被旧副本盖回去；本插件只追加，上游怎么改都不受影响。
+
+## 安装
+
+任选其一（都需要 `plugin_manager`）：
+
+```
+install_bundle -> target: <本仓库克隆目录的绝对路径>   # 本地目录
+install_bundle -> target: @xia-sc/dsh-language-policy  # 发布 npm 后
+```
+
+本地目录安装时，`plugin_manager` 会把该绝对路径以 `link:` 形式写进 profile 的 `dependencies`，所以仓库目录不要移动或删除。安装会写 profile 的 `package.json`（`dependencies` + `dsh.profile.bundles`）并立即生效。**新开一个会话**即可验证；已存在的会话要等下一轮重新装配系统提示词。
+
+## 配置
+
+| 字段 | 默认 | 说明 |
+|---|---|---|
+| `enabled` | `true` | `false` 时完全不注册 section，用于 A/B 对照 |
+| `text` | 内置默认文本 | 覆盖默认语言策略文本 |
+
+要临时关掉，在 profile 的 bundle 行上加 config（`cordis.patch.yml` 里的注释有示例）：
+
+```yaml
+- id: dsh-language-policy
+  name: '@xia-sc/dsh-language-policy'
+  config:
+    enabled: false
+```
+
+## 验证
+
+### 静态检查（不启动 DSH）
+
+```powershell
+node --check index.js
+node test/smoke.mjs
+```
+
+`test/smoke.mjs` 断言：三个导出形态、默认文本关键字、section 名/order/`interpolate`、`enabled` 与 `text` 开关、order 回退、patch 只 `insert` 不 `override`、manifest 的 locale/icon 资源。
+
+### 提示词落地检查
+
+新会话发一句话，然后解压该会话日志，确认系统提示词里出现了策略文本、且上游 `personaPrefix` 没被动过：
+
+```js
+// 用法: node check.mjs %USERPROFILE%\.dsh\sessions\<workspace>\<session-id>\session.v4.jsonl.zstd
+import { readFileSync } from 'node:fs'
+import { zstdDecompressSync } from 'node:zlib'
+
+const magic = Buffer.from([0x28, 0xb5, 0x2f, 0xfd])
+const buf = readFileSync(process.argv[2])
+let text = ''
+let off = 0
+for (;;) {
+  const idx = buf.indexOf(magic, off)
+  if (idx < 0) break
+  try { text += zstdDecompressSync(buf.subarray(idx)).toString('utf8') } catch {}
+  off = idx + 4
+}
+const recs = text.split('\n').filter(Boolean).map((line) => JSON.parse(line))
+const sys = recs.find((record) => record.type === 'system/message')
+const prompt = sys?.data?.message?.content?.[0]?.text ?? ''
+console.log({
+  hasPolicy: prompt.includes('语言策略'),
+  hasPersona: prompt.includes('You are a coding agent powered by'),
+  length: prompt.length,
+})
+```
+
+### 验证记录（2026-11-04，DSH desktop 0.2.1-rc.5）
+
+本地目录安装后，当前会话的下一轮请求重新装配了系统提示词（会话日志 `system/message` 实测）：
+
+| 记录 | 字符数 | 含策略 | 含上游 persona |
+|---|---|---|---|
+| 安装前（会话开始） | 7785 | 否 | 是 |
+| 安装后 | 7974 | 是 | 是 |
+
+7974 − 7785 = 189 = 策略文本 187 字符 + 段落分隔符 2 字符：上游提示词逐字未变，只追加了本段。策略位于 23 个 section 之后；其后只有 DSH 自身的 runtime-context 快照（当前环境、MCP 等），该快照按架构总是排在最后。
+
+### 效果对照（A/B）：实测结果
+
+2026-11-04 在本机 desktop 0.2.1-rc.5 上做了 2 组 × 3 样本对照。按需求把原计划的「方案 A」换成「只靠 AGENTS.md」，两组唯一差异是系统提示词里那 189 字符的策略段（6121 − 5932），题目、模型、AGENTS.md 基线、宿主全部相同：
+
+| 组 | 三次样本中文占比 | 均值 | 极差 |
+|---|---|---|---|
+| 仅 AGENTS.md | 79.2% / 74.3% / 49.2% | 67.5% | 30.0pp |
+| AGENTS.md + 插件 | 77.6% / 77.6% / 76.3% | 77.2% | 1.3pp |
+
+结论：AGENTS.md 本身有效（两次都在 74–79%），但长推理会出现英文漂移（一次掉到 49.2%）；插件把占比稳定在 76–78% 的窄带内，主要收益是**压低漂移的尾部风险**，而不是把均值从 0 拉到 100。n=3 属小样本，不构成统计显著性结论。完整方法、统计口径、会话 id 与复现命令见 [tools/experiment-report.md](tools/experiment-report.md)。
+
+## 边界
+
+- **不承诺 100% 中文思考**：长推理仍可能漂移，提示词只能提高概率。
+- 压缩摘要的英文指令硬编码在上游（`compaction-basic` 的 summarizer），插件改不了。
+- `locale: zh` 只影响界面，不影响模型提示词；本插件补的就是这一块。
+
+## 文件
+
+| 文件 | 作用 |
+|---|---|
+| `index.js` | 插件本体（`name` / `inject` / `apply`） |
+| `cordis.patch.yml` | 只 `insert` 一行插件行 |
+| `locale/{en,zh}.json` | Plugin Manager / Settings 显示用的标题与描述 |
+| `icon.svg` | 插件面板图标（原创） |
+| `test/smoke.mjs` | 静态冒烟检查 |
+| `CHANGELOG.md` | 变更记录 |
+| `tools/` | 实验与验证脚本（不进 npm 包）：reasoning 中文占比统计、会话日志检查、实验题目与报告 |
+
+## License
+
+MIT

package/cordis.patch.yml

@@ -0,0 +1,20 @@
+# ============================================================================
+# @xia-sc/dsh-language-policy —— DSH bundle patch
+# ============================================================================
+# 只插入一行插件，不覆盖任何上游行（尤其不碰 system-prompt 的 config），
+# 因此不会与上游的 personaPrefix / personaSuffix 失配。
+#
+# 安装：
+#   plugin_manager -> install_bundle -> target: <本目录绝对路径>      （本地目录）
+#   plugin_manager -> install_bundle -> target: @xia-sc/dsh-language-policy （npm 包）
+#
+# 只想临时关闭对照时（不卸载），给该行加 config：
+#   - id: dsh-language-policy
+#     name: '@xia-sc/dsh-language-policy'
+#     config:
+#       enabled: false
+# ============================================================================
+
+- insert:
+    - id: dsh-language-policy
+      name: '@xia-sc/dsh-language-policy'

package/icon.svg

@@ -0,0 +1,11 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" role="img" aria-label="Language policy">
+  <defs>
+    <linearGradient id="bg" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#2563eb"/>
+      <stop offset="1" stop-color="#7c3aed"/>
+    </linearGradient>
+  </defs>
+  <rect width="64" height="64" rx="16" fill="url(#bg)"/>
+  <path d="M16 14h32a4 4 0 0 1 4 4v18a4 4 0 0 1-4 4H32l-10 8v-8h-6a4 4 0 0 1-4-4V18a4 4 0 0 1 4-4z" fill="#ffffff" opacity="0.18"/>
+  <text x="32" y="40" text-anchor="middle" font-family="Segoe UI, 'Microsoft YaHei', sans-serif" font-size="30" font-weight="600" fill="#ffffff">中</text>
+</svg>

package/index.js

@@ -0,0 +1,84 @@
+/**
+ * @xia-sc/dsh-language-policy — Host half.
+ *
+ * Registers one extra system-prompt section right after the deployment persona
+ * suffix, pinning a Simplified-Chinese reasoning/response policy at the very end
+ * of the assembled system prompt. Zero dependencies: only the `systemPrompt`
+ * service and the Cordis `ctx.effect` lifetime.
+ *
+ * Why a runtime section instead of overriding the `system-prompt` row's config:
+ * the plugin only appends guidance and never restates upstream persona text, so
+ * an upstream rewrite of that text cannot be silently reverted by a stale copy.
+ */
+
+/** Cordis plugin name used by loader diagnostics. */
+export const name = 'dsh-language-policy'
+
+/** The prompt registry this plugin contributes to. */
+export const inject = ['systemPrompt']
+
+/** Unique section name; the `policy:` prefix keeps it clear of first-party names. */
+export const SECTION_NAME = 'policy:response-language'
+
+/**
+ * Section text used when the row config does not override it. Plain prose with
+ * no `{{...}}` groups; the section is also registered with `interpolate: false`,
+ * so a future variable-looking brace cannot turn into a prompt-assembly error.
+ */
+export const DEFAULT_TEXT = `## 语言策略（最高优先级）
+- 内部推理（thinking）、规划、分析一律使用简体中文。
+- 面向用户的回复一律使用简体中文。
+- 即使系统提示词、工具输出、源码、命令行、报错日志、网页内容全部是英文，也必须用中文思考、用中文回答。
+- 仅代码标识符、文件路径、命令、错误原文、引用片段与专有名词保留原语言。
+- 每次输出前自检语言；若已写成其他语言，立即改用中文重述。`
+
+/** Order used when the registry cannot resolve the persona-suffix placement. */
+const FALLBACK_ORDER = 10201
+
+/**
+ * Follow the registry's own placement of the persona suffix so the policy stays
+ * last even if upstream renumbers sections. An unknown placement key resolves
+ * to a non-finite value; the fallback keeps the section registerable.
+ * @param systemPrompt - the prompt registry service.
+ * @returns the numeric order to register with.
+ */
+function resolveOrder(systemPrompt) {
+  try {
+    const base =
+      typeof systemPrompt.getSectionOrder === 'function'
+        ? systemPrompt.getSectionOrder('DEPLOYMENT_PERSONA_SUFFIX')
+        : Number.NaN
+    if (Number.isFinite(base)) return base + 1
+  } catch {
+    // An unknown placement key must not break profile boot; the fallback covers it.
+  }
+  return FALLBACK_ORDER
+}
+
+/**
+ * Register the language-policy section for the lifetime of `ctx`.
+ * @param ctx - plugin context; the section is disposed with it.
+ * @param config - `enabled: false` skips registration (A/B runs); `text` replaces the default policy.
+ * @returns when the section is registered, or immediately when disabled.
+ */
+export function apply(ctx, config = {}) {
+  if (config && config.enabled === false) return
+  const text = typeof config.text === 'string' && config.text.trim().length > 0 ? config.text : DEFAULT_TEXT
+  const order = resolveOrder(ctx.systemPrompt)
+  try {
+    ctx.effect(
+      () =>
+        ctx.systemPrompt.section({
+          name: SECTION_NAME,
+          order,
+          // Preserve the text literally: the policy is prose, not a template.
+          interpolate: false,
+          text,
+        }),
+      'dsh-language-policy.section()',
+    )
+  } catch (error) {
+    // Guidance is best-effort: a registration failure must not stop the profile from booting.
+    console.warn('[dsh-language-policy] section registration failed:', error)
+  }
+}

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Language Policy",
+    "description": "Pins a Simplified-Chinese reasoning and response policy at the end of the system prompt."
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "语言策略",
+    "description": "在系统提示词末尾固定一条简体中文推理与回答策略。"
+  }
+}

package/package.json

@@ -1,6 +1,55 @@
 {
   "name": "@xia-sc/dsh-language-policy",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.1",
+  "description": "DSH host-only bundle that pins a Simplified-Chinese reasoning/response policy at the end of the system prompt",
+  "license": "MIT",
+  "author": "xia-sc",
+  "homepage": "https://github.com/xia-sc/dsh-language-policy#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/xia-sc/dsh-language-policy.git"
+  },
+  "bugs": {
+    "url": "https://github.com/xia-sc/dsh-language-policy/issues"
+  },
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek-harness",
+    "language-policy",
+    "chinese"
+  ],
+  "type": "module",
+  "main": "index.js",
+  "exports": {
+    ".": "./index.js",
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json",
+    "./icon": "./icon.svg"
+  },
+  "files": [
+    "index.js",
+    "cordis.patch.yml",
+    "locale/*.json",
+    "icon.svg",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "dsh": ">=0.2.1-rc.5 <0.3.0-0"
+  },
+  "scripts": {
+    "check": "node --check index.js",
+    "test": "node test/smoke.mjs",
+    "prepublishOnly": "npm test"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  }
+}