dsh-agent-persona 0.1.3 → 0.1.5

package/CHANGELOG.md

@@ -4,6 +4,52 @@ All notable changes to this project are documented here.
 The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.1.5] - 2026-10-20
+
+### Changed
+
+- **适配最新版 DSH `0.2.1-rc.2`。** 在 0.2.1-rc.2 上实测通过：设置页的人设列表、新建、保存
+  （`listPersonas` / `savePersona`，正文按 `MAX_TEXT_BYTES` 的 64 KiB 上限测了 6 KB 长文）与
+  system prompt 注入都正常；0.1.4 为 0.2.0-rc.2 补的 strict codec 契约（`create`/`decode`/`encode`）
+  与图标命名在 0.2.1-rc.2 上没有变化，所以那次适配继续有效。
+  `dsh.compatibility.dshReleases` 补上 `0.2.1-rc.2`（与 `0.1.5-rc.1`、`0.1.5-rc.2`、`0.2.0-rc.2`
+  并列 `compatible`）；宿主代码并不读取这个字段，它服务于插件市场/商店的版本提示，补上是为了让
+  "跑过哪些版本"与事实一致。
+- 宿主对**每一个**工具调用都会跑 `tools.guard`（0.2.1-rc.2 上实测 `compress` 也被拦），于是下面那条
+  守卫的误判从"偶尔"变成"常态"。
+
+### Fixed
+
+- **只读工具不再因为参数里出现人设存储路径而被拒绝。** `personaStoreGuardReason` 原来只看参数里有没有那个
+  路径，于是 `read`、`grep`、`compress` 这类根本不能改写存储的调用也会被拒绝，并回一条"工具不能写入或删除它"，
+  等于让会话连解释这个文件都做不到（同一个会话里 `compress` 就被挡过一次）。现在按工具名判断写意图：
+  `write`/`edit`/`multiedit`/`apply_patch` 等"参数即目标路径"的工具，路径指向存储才拒绝；`bash`/`pwsh`
+  等命令类工具仍要求同一个字符串里同时出现写特征（`rm`、`>`、`cp` 等）；其余只读工具一律放行。
+  存储保护本身没有放松：直接写存储、命令里删/覆盖存储，仍然照旧拒绝。
+
+## [0.1.4] - 2026-10-08
+
+### Fixed
+
+- **适配 DSH 0.2.0-rc.2。** 三处不兼容导致插件在新版本上完全无法使用：
+
+  1. **Typert strict codec 缺少 `create()` 工厂方法。** 0.2.0 的 typert-loader 和 gateway 要求每个 strict codec
+     提供 `create()` 并返回一个带 `parse()` 方法的对象，gateway 在处理 RPC 调用时执行 `codec.create().parse(value)`
+     进行边界校验。`generate-remote.mjs` 生成的 `remote.ts` 和 `typert.ts` 中的 codec 都只有
+     `{ mode, typeSymbol, schema }` 三个字段，缺少 `create`/`decode`/`encode`，导致宿主端 typert-loader 注册失败
+     （启动时报 warning "1 entry did not activate"），客户端 `ctx.remote.$mount()` 抛出异常使 `capturedApi` 始终
+     为 `undefined`，页面渲染回退为"插件还没加载好"错误提示，同时所有带参数的 RPC 调用（如 `sessionPrompt`、
+     `savePersona`）在 gateway 层因 `codec.create()` 返回 `undefined` 而报
+     "wire field \"input\" failed boundary validation"。
+
+  2. **图标组件名称变更。** `dsh-client-ui-primitives` 0.2.0-rc.2 将图标命名规则从尺寸后缀（如 `IconPlusOutline16`）
+     改为粗细后缀（如 `IconPlusOutlineRegular`），旧名称不再导出。从 primitives 解构出的 18 个图标全部为 `undefined`，
+     `verifyElements()` 检查失败，页面无法渲染。
+
+### Changed
+
+- `dsh.compatibility.dshReleases` 新增 `0.2.0-rc.2: compatible`。
+
 ## [0.1.3] - 2026-09-23
 
 ### Fixed

package/README.md

@@ -51,9 +51,9 @@ DSH 会把工作区指令（`AGENTS.md` 之类）变成一条 **user 角色**的
 
 ## 装
 
-**实测过的 DSH 版本：`0.1.5-rc.1`（作者的开发环境）与 `0.1.5-rc.2`。** `package.json` 的 `dsh.compatibility`
-声明的就是这两项 —— 含义是"我们在这些版本上跑过"，**不是**对更早或更新版本做过兼容工作的承诺；
-其它版本请自行验证。
+**实测过的 DSH 版本：`0.1.5-rc.1`（作者的开发环境）、`0.1.5-rc.2`、`0.2.0-rc.2` 与最新版
+`0.2.1-rc.2`。** `package.json` 的 `dsh.compatibility` 声明的就是这四项 —— 含义是"我们在这些版本上跑过"，
+**不是**对更早或更新版本做过兼容工作的承诺；其它版本请自行验证。
 
 侧边栏卡片还需要 **`dsh-better-sidebar`**：没装它时，「注册到 dsh-better-sidebar」这个开关不会出现
 （没有可注册的地方），插件其余功能照常。

package/README_EN.md

@@ -61,9 +61,9 @@ workspace cannot touch this layer.
 
 ## Install
 
-**Tested against DSH `0.1.5-rc.1` (the author's development environment) and `0.1.5-rc.2`.** That is what
-`package.json`'s `dsh.compatibility` declares — it means "we ran on these", not a promise of compatibility work
-for older or newer releases; please verify on yours.
+**Tested against DSH `0.1.5-rc.1` (the author's development environment), `0.1.5-rc.2`, `0.2.0-rc.2` and
+the current `0.2.1-rc.2`.** That is what `package.json`'s `dsh.compatibility` declares — it means "we ran on
+these", not a promise of compatibility work for older or newer releases; please verify on yours.
 
 The sidebar card additionally needs **`dsh-better-sidebar`**: without it the `注册到 dsh-better-sidebar` switch is not
 shown at all (there is nothing to register into), and everything else works as usual.

package/lib/client.js

@@ -1,11 +1,17 @@
 (() => {
   // src/remote.ts
   var PKG = "dsh-agent-persona";
-  var codec = (typeSymbol, parse) => ({
-    mode: "strict",
-    typeSymbol: `${PKG}#${typeSymbol}`,
-    schema: { parse }
-  });
+  var codec = (typeSymbol, parse) => {
+    const schema = { parse };
+    return {
+      mode: "strict",
+      typeSymbol: `${PKG}#${typeSymbol}`,
+      schema,
+      create: () => schema,
+      decode: (v) => v,
+      encode: (v) => v
+    };
+  };
   var passthrough = (value) => value;
   var asInput = (value) => {
     if (value === void 0 || value === null) return {};
@@ -61,25 +67,44 @@
         Toast,
         Pill,
         Tooltip,
-        IconCheckOutline14,
-        IconChevronDownOutline14,
-        IconChevronRightOutline14,
-        IconAgentPresetOutline16,
-        IconBrowseOutline16,
-        IconChevronUpOutline14,
-        IconCloseOutline16,
-        IconEditOutline16,
-        IconEllipsisOutline16,
-        IconEnhanceOutline16,
-        IconFolderOpen16,
-        IconListPenOutline16,
-        IconPersonalizationOutline16,
-        IconRefreshOutline16,
-        IconUserOutline16,
-        IconWarningOutline16,
-        IconPlusOutline16,
-        IconTrashOutline16
+        IconCheckOutlineRegular,
+        IconChevronDownOutlineRegular,
+        IconChevronRightOutlineRegular,
+        IconAgentPresetOutlineRegular,
+        IconBrowseOutlineRegular,
+        IconChevronUpOutlineRegular,
+        IconCloseOutlineRegular,
+        IconEditOutlineRegular,
+        IconEllipsisOutlineRegular,
+        IconEnhanceOutlineRegular,
+        IconFolderOpenRegular,
+        IconListPenOutlineRegular,
+        IconPersonalizationOutlineRegular,
+        IconRefreshOutlineRegular,
+        IconUserOutlineRegular,
+        IconWarningOutlineRegular,
+        IconPlusOutlineRegular,
+        IconTrashOutlineRegular
       } = primitives;
+      const sized = (icon, size) => (props) => h(icon, { size, ...props });
+      const IconCheckOutline14 = sized(IconCheckOutlineRegular, 14);
+      const IconChevronDownOutline14 = sized(IconChevronDownOutlineRegular, 14);
+      const IconChevronRightOutline14 = sized(IconChevronRightOutlineRegular, 14);
+      const IconChevronUpOutline14 = sized(IconChevronUpOutlineRegular, 14);
+      const IconAgentPresetOutline16 = sized(IconAgentPresetOutlineRegular, 16);
+      const IconBrowseOutline16 = sized(IconBrowseOutlineRegular, 16);
+      const IconCloseOutline16 = sized(IconCloseOutlineRegular, 16);
+      const IconEditOutline16 = sized(IconEditOutlineRegular, 16);
+      const IconEllipsisOutline16 = sized(IconEllipsisOutlineRegular, 16);
+      const IconEnhanceOutline16 = sized(IconEnhanceOutlineRegular, 16);
+      const IconFolderOpen16 = sized(IconFolderOpenRegular, 16);
+      const IconListPenOutline16 = sized(IconListPenOutlineRegular, 16);
+      const IconPersonalizationOutline16 = sized(IconPersonalizationOutlineRegular, 16);
+      const IconRefreshOutline16 = sized(IconRefreshOutlineRegular, 16);
+      const IconUserOutline16 = sized(IconUserOutlineRegular, 16);
+      const IconWarningOutline16 = sized(IconWarningOutlineRegular, 16);
+      const IconPlusOutline16 = sized(IconPlusOutlineRegular, 16);
+      const IconTrashOutline16 = sized(IconTrashOutlineRegular, 16);
       const NS = "agent-persona";
       const MOD_KEY = typeof navigator !== "undefined" && /Mac|iPhone|iPad/.test(navigator.platform ?? navigator.userAgent ?? "") ? "\u2318" : "Ctrl+";
       const DESCRIPTION = "\u7ED9\u4E0D\u540C\u7684\u5DE5\u4F5C\u533A\u3001\u4E0D\u540C\u7684\u4F1A\u8BDD\u7528\u4E0D\u540C\u7684\u4EBA\u8BBE\u3002\u4EBA\u8BBE\u4F1A\u4F5C\u4E3A\u7CFB\u7EDF\u63D0\u793A\u8BCD\u6CE8\u5165\uFF0C\u4F18\u5148\u7EA7\u9AD8\u4E8E\u5DE5\u4F5C\u533A\u91CC\u7684 AGENTS.md\u3002";
@@ -784,6 +809,10 @@
         }
         return raw;
       };
+      const sessionIdOf = (props) => {
+        const id = props?.sessionId ?? props?.session?.id ?? props?.scope?.sessionId;
+        return typeof id === "string" && id !== "" ? id : null;
+      };
       const SidebarPersonaView = (props) => h(PersonaView, { ...props, host: "sidebar" });
       class PersonaView extends React.Component {
         constructor(props) {
@@ -793,9 +822,15 @@
         componentDidMount() {
           void this.load();
         }
+        /**
+         * A sidebar tab stays mounted while the reader moves between sessions, so the view has to follow the
+         * session it is showing; otherwise it keeps rendering the one it was first opened for.
+         */
+        componentDidUpdate(previous) {
+          if (this.sessionId() !== sessionIdOf(previous)) void this.load();
+        }
         sessionId() {
-          const id = this.props?.sessionId ?? this.props?.session?.id;
-          return typeof id === "string" && id !== "" ? id : null;
+          return sessionIdOf(this.props);
         }
         async load() {
           const api = apiOf(this.props);

package/lib/index.js

@@ -221,6 +221,10 @@ export const backupStoreFile = (storePath, stamp) => {
 /** Write features that turn "mentions the store" into "writes the store" inside one shell command. */
 const STORE_WRITE_MARKERS = ['>', 'rm ', 'rm\t', 'mv ', 'cp ', 'chmod', 'chflags', 'truncate', 'sed -i', 'tee ', 'write(', 'unlink(', 'rename('];
 const STORE_REFUSAL = '人设存储由 agent-persona 插件管理：工具不能写入或删除它。需要修改人设时，请让用户在「设置 → Agent 人设」里操作。';
+/** Tools whose own arguments name the file they write, so a store path in them is the target. */
+const STORE_PATH_TOOLS = new Set(['write', 'edit', 'multiedit', 'apply_patch', 'create_file', 'delete_file', 'move_file']);
+/** Tools that run a command line, where the store only matters next to a write feature. */
+const STORE_SHELL_TOOLS = new Set(['bash', 'pwsh', 'shell', 'exec', 'terminal', 'run_command']);
 /** Every string nested anywhere in a tool call's arguments, to a bounded depth. */
 const stringsIn = (value, out = [], depth = 0) => {
     if (depth > 6 || value === null || value === undefined)
@@ -251,23 +255,32 @@ const stringsIn = (value, out = [], depth = 0) => {
  * whole command, so a read and a write of the store in one line is refused as a unit.
  */
 export const personaStoreGuardReason = (execution, storePath) => {
+    const name = String(execution?.name ?? '');
+    const shell = STORE_SHELL_TOOLS.has(name);
+    // A read-only call cannot rewrite the store, so a path that merely appears in its arguments is not a
+    // write. Refusing those (`read`, `grep`, `compress`, ...) turned the guard into a trap for honest work:
+    // any tool whose arguments quoted the store path was denied with a message about writing it.
+    if (!shell && !STORE_PATH_TOOLS.has(name))
+        return undefined;
     const values = stringsIn(execution?.arguments);
     const target = resolve(storePath);
-    if (values.some((value) => {
+    const base = basename(storePath);
+    const dir = dirname(storePath);
+    const pointsAtStore = values.some((value) => {
         try {
             return resolve(value) === target;
         }
         catch {
             return false;
         }
-    }))
-        return STORE_REFUSAL;
-    const base = basename(storePath);
-    const dir = dirname(storePath);
-    if (values.some((value) => (value.includes(base) || value.includes(dir))
-        && STORE_WRITE_MARKERS.some((marker) => value.includes(marker))))
-        return STORE_REFUSAL;
-    return undefined;
+    });
+    const nearStore = values.some((value) => value.includes(base) || value.includes(dir));
+    const writes = values.some((value) => STORE_WRITE_MARKERS.some((marker) => value.includes(marker)));
+    // A tool that names its own target writes exactly what it points at; a shell command has to mention a
+    // write feature before the path inside it counts.
+    if (shell)
+        return nearStore && writes ? STORE_REFUSAL : undefined;
+    return pointsAtStore || (nearStore && writes) ? STORE_REFUSAL : undefined;
 };
 export const sanitizePersona = (text, warn = () => { }) => {
     const dropped = [];

package/lib/remote.d.ts

@@ -20,6 +20,11 @@ export declare const RPC_REMOTE: {
             schema: {
                 parse: any;
             };
+            create: () => {
+                parse: any;
+            };
+            decode: (v: any) => any;
+            encode: (v: any) => any;
         };
     }[];
 };

package/lib/remote.js

@@ -1,10 +1,16 @@
 // 该文件由 scripts/generate-remote.mjs 生成，请勿手改（改 src/endpoints.ts 后重新生成）。
 const PKG = "dsh-agent-persona";
-const codec = (typeSymbol, parse) => ({
-    mode: "strict",
-    typeSymbol: `${PKG}#${typeSymbol}`,
-    schema: { parse },
-});
+const codec = (typeSymbol, parse) => {
+    const schema = { parse };
+    return {
+        mode: "strict",
+        typeSymbol: `${PKG}#${typeSymbol}`,
+        schema,
+        create: () => schema,
+        decode: (v) => v,
+        encode: (v) => v,
+    };
+};
 const passthrough = (value) => value;
 const asInput = (value) => {
     if (value === undefined || value === null)

package/lib/typert.d.ts

@@ -37,12 +37,18 @@ export declare const TYPERT: {
                 mode: string;
                 typeSymbol: string;
                 schema: z.ZodUnknown;
+                create: () => z.ZodUnknown;
+                decode: (v: any) => any;
+                encode: (v: any) => any;
             };
         }[];
         result: {
             mode: string;
             typeSymbol: string;
             schema: z.ZodUnknown;
+            create: () => z.ZodUnknown;
+            decode: (v: any) => any;
+            encode: (v: any) => any;
         };
     }[];
 };

package/lib/typert.js

@@ -2,11 +2,17 @@
 import { z } from "zod";
 const PKG = "dsh-agent-persona";
 const direct = { kind: "direct" };
-const jsonCodec = (typeSymbol) => ({
-    mode: "strict",
-    typeSymbol: `${PKG}#${typeSymbol}`,
-    schema: z.unknown(),
-});
+const jsonCodec = (typeSymbol) => {
+    const schema = z.unknown();
+    return {
+        mode: "strict",
+        typeSymbol: `${PKG}#${typeSymbol}`,
+        schema,
+        create: () => schema,
+        decode: (v) => v,
+        encode: (v) => v,
+    };
+};
 const result = (typeSymbol) => jsonCodec(typeSymbol);
 export const TYPERT = {
     package: PKG,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-agent-persona",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Workspace personas for DeepSeek Harness (DSH): create many system-prompt personas and scope each one by workspace path or session id (exact / prefix / regex / contains), managed from a Web settings page with Markdown editing and AI tuning.",
   "type": "module",
   "main": "lib/index.js",
@@ -81,7 +81,9 @@
     "compatibility": {
       "dshReleases": {
         "0.1.5-rc.1": "compatible",
-        "0.1.5-rc.2": "compatible"
+        "0.1.5-rc.2": "compatible",
+        "0.2.0-rc.2": "compatible",
+        "0.2.1-rc.2": "compatible"
       }
     }
   },