dsh-custom-mode 1.9.0 → 1.9.3

package/assistants.mjs

@@ -30,6 +30,7 @@ import { dirname, join } from 'node:path'
 import { dshHome, PRESET_DIR } from './paths.mjs'
 import { readPresetMeta, writePresetMeta } from './meta.mjs'
 import { writeAtomic } from './atomic.mjs'
+import { unresolvableRows } from './composition.mjs'
 import { seedPreset, seedPresetWithLog } from './seed.mjs'
 
 /**
@@ -303,6 +304,25 @@ export function seedOnActivation({ root, templateDir, composition, log = console
     for (const error of result.errors) log(`custom-mode: 补全 ${dir} 失败 —— ${error}`)
   }
 
+  // 启动告警：组成文件里有本机这条线解析不到的行时，平台会把整个预设判为 broken 并从选择器里**静默丢弃**。
+  // 以前这件事只在设置页可见 —— 用户从不打开设置页就完全无感知（外部评审实测）。这里至少在宿主日志里喊一声。
+  for (const dir of [...existing, join(root, LEGACY_ID)]) {
+    try {
+      const file = join(dir, 'agent.cordis.yml')
+      if (existsSync(file) === false) continue
+      const bad = unresolvableRows(readFileSync(file, 'utf8'))
+      if (bad.length > 0) {
+        log(
+          `custom-mode: ${dir} 的组成文件里有 ${String(bad.length)} 行在这条 dsh 线上无法解析` +
+            `（${bad.map((row) => row.id).join(', ')}）—— 平台会把整个模式从新建会话的选择器里丢弃。` +
+            '打开 设置 → 自定义模式 并点「按本线修复」。',
+        )
+      }
+    } catch {
+      /* 启动告警失败不能影响激活 */
+    }
+  }
+
   if (isSeeded(root)) return { created: false, repaired, adopted: false }
   if (existing.length > 0) {
     markSeeded(root)

package/client.js

@@ -101,6 +101,7 @@ try {
         "assistant.short": "每个助手是一个独立模式：自己的系统提示词、基础模式与插件开关。",
         "name.short": "改名只影响显示，内部标识与已有会话不受影响。",
         "mode.short": "底子决定「行集合」与工具能力；persona 行始终由本模式替换。",
+        "mode.pendingRows": "底子已改为「{mode}」：保存后，下面的行列表会按新底子重算。",
         "rows.short": "逐行控制挂载哪些插件；没拨过的行保持官方默认。",
         "prompt.short": "这段文本就是本模式的系统提示词，保存后下一步生效。",
         "aria.expandHint": "展开完整说明",
@@ -108,12 +109,19 @@ try {
         "aria.expand": "展开详情",
         "aria.collapse": "收起详情",
         "detail.id": "行 id",
+        "detail.shipped": "出厂状态",
+        "detail.shippedOn": "启用",
+        "detail.shippedOff": "关闭",
         "detail.note": "说明",
         "detail.state": "开关状态",
         "detail.explicitOn": "已手动启用",
         "detail.explicitOff": "已手动停用",
         "detail.untouched": "未改动（跟随官方默认）",
         "detail.platform": "平台条件",
+        "btn.repair": "按本线修复",
+        "msg.repaired": "已修复",
+        "meta.version": "插件版本",
+        "meta.versionHint": "安装时不钉版本号会受 pnpm 发布冷却期影响（默认 24 小时），可能装到较旧的版本。要换版本请按 README 的钉版本命令重装，然后重启 DSH。",
         "api.saved": "已保存（{name}，基础模式 {mode}）。新建会话即生效，当前会话保持原配置。",
         "api.created": "已创建「{name}」。现在可以为它写系统提示词。",
         "api.duplicated": "已复制自「{from}」。两份从此各改各的。",
@@ -135,6 +143,8 @@ try {
         "api.deleteFailed": "删除失败：{detail}",
         "api.versionMissing": "找不到这个版本（历史可能已被上限裁剪）。",
         "api.badJson": "请求体不是合法 JSON",
+        "warn.approvalGateMissing": "审批闸门未启用：本机这个 DSH 版本没有 tools/pre-execute 事件，会话内改写系统提示词不会弹审批。见「详情」。",
+        "warn.unresolvableRows": "有行在本机这条 DSH 线上无法解析：平台会把整个模式判为 broken，并从新会话的选择器里**静默丢弃**。点右侧的「按本线修复」即可（只关掉那几行，其它选择不动）。",
         "warn.approvalGateMissing.label": "审批闸门未启用",
         "warn.approvalGateMissing.hint": "这个 DSH 版本没有 tools/pre-execute 事件，会话内改写系统提示词**不会**弹审批。设置页不受影响；要恢复保护请升级 DSH，或把「custom_prompt 工具」那一行关掉。",
         "warn.personaOffWithPrompt": "「身份（系统提示词）」这一行是关的，所以 prompt.md 不会被注入 —— 你写的提示词现在不起作用。要么打开这一行，要么清空提示词。",
@@ -210,15 +220,15 @@ try {
         "row.tool-subagent-control.label": "子代理控制",
         "row.tool-subagent-list-agents.label": "列出子代理",
         "row.tool-subagent-codex.label": "Codex 子代理",
-        "row.tool-subagent-codex.note": "默认关闭：需要先安装对应 Bundle",
+        "row.tool-subagent-codex.note": "需要先安装对应 Bundle 才能用；出厂状态见「详情」",
         "row.tool-subagent-claude-code.label": "Claude Code 子代理",
-        "row.tool-subagent-claude-code.note": "默认关闭：需要先安装对应 Bundle",
+        "row.tool-subagent-claude-code.note": "需要先安装对应 Bundle 才能用；出厂状态见「详情」",
         "row.workflow-ptc.label": "工作流引擎",
         "row.workflow-worker-thread.label": "工作流 Worker 线程",
         "row.workflow-worker-thread.note": "把工作流跑在独立的 worker 线程里",
         "row.tool-workflow.label": "工作流工具",
         "row.tool-ralph.label": "Ralph 工作流",
-        "row.tool-ralph.note": "默认关闭",
+        "row.tool-ralph.note": "Ralph 工作流工具；出厂状态见「详情」",
         "row.tool-web.label": "网页检索与抓取",
         "row.tool-skill.label": "技能工具",
         "row.skill-filesystem.label": "技能发现",
@@ -283,14 +293,15 @@ try {
         "msg.imported": "Imported into the editor (not saved yet) — review it, then click Save.",
         "msg.importFailed": "Import failed",
         "api.badDirection": "Unknown reorder direction: {direction}",
-        "api.unknownAssistant": "No assistant 「{id}」: this page only manages the assistants it created (a directory with prompt.md whose composition injects the identity through prompt-reader.mjs).",
-        "api.alreadyFirst": "「{name}」 is already first.",
-        "api.alreadyLast": "「{name}」 is already last.",
+        "api.unknownAssistant": "No assistant {id}: this page only manages the assistants it created (a directory with prompt.md whose composition injects the identity through prompt-reader.mjs).",
+        "api.alreadyFirst": "{name} is already first.",
+        "api.alreadyLast": "{name} is already last.",
         "api.badVariableName": "{variable} is not a valid variable reference: names may use lower-case letters, digits and underscores, and must start with a letter. For a literal brace, use a single opening brace or an unclosed double brace.",
         "api.unknownVariable": "{variable} is not a registered variable — rendering would fail every request in this mode. Available: {known}.",
         "assistant.short": "Each assistant is its own mode: its own system prompt, base mode and plugin switches.",
         "name.short": "Renaming only changes what is displayed — not the internal id or existing sessions.",
         "mode.short": "The base decides the row set and tool abilities; the persona row is always replaced by this mode.",
+        "mode.pendingRows": "Base changed to {mode}: the row list below is recomputed from the new base when you save.",
         "rows.short": "Control which plugins this mode mounts, row by row; untouched rows keep the shipped default.",
         "prompt.short": "Saving this text makes it the system prompt of this mode, and it takes effect on the next step.",
         "aria.expandHint": "Show the full explanation",
@@ -298,16 +309,23 @@ try {
         "aria.expand": "Show details",
         "aria.collapse": "Hide details",
         "detail.id": "Row id",
+        "detail.shipped": "Shipped",
+        "detail.shippedOn": "enabled",
+        "detail.shippedOff": "disabled",
         "detail.note": "Note",
         "detail.state": "Switch",
         "detail.explicitOn": "Set to on by you",
         "detail.explicitOff": "Set to off by you",
         "detail.untouched": "Untouched (follows the shipped default)",
         "detail.platform": "Platform condition",
+        "btn.repair": "Fix for this line",
+        "msg.repaired": "Repaired",
+        "meta.version": "Plugin version",
+        "meta.versionHint": "Installing without a pinned version is subject to pnpm’s release cooldown (24 h by default) and can land on an older release. To change version, reinstall with the pinned command from the README and restart DSH.",
         "api.saved": "Saved ({name}, base mode {mode}). A new session picks it up; the current one keeps its configuration.",
-        "api.created": "Created 「{name}」. You can write its system prompt now.",
-        "api.duplicated": "Copied from 「{from}」. The two are independent from now on.",
-        "api.deleted": "Deleted 「{name}」. Sessions already using it keep running; it no longer appears for new sessions.",
+        "api.created": "Created {name}. You can write its system prompt now.",
+        "api.duplicated": "Copied from {from}. The two are independent from now on.",
+        "api.deleted": "Deleted {name}. Sessions already using it keep running; it no longer appears for new sessions.",
         "api.reordered": "Order saved: the new-session mode picker follows it.",
         "api.nameRequired": "Give the new assistant a name first.",
         "api.nameTooLong": "That name is too long (limit {max} characters).",
@@ -328,8 +346,10 @@ try {
         "warn.personaOffWithPrompt": "The \"Identity (system prompt)\" row is off, so prompt.md is never injected — the prompt you wrote has no effect. Turn the row on, or clear the prompt.",
         "warn.toolOff": "The \"custom_prompt tool\" row is off: the agent cannot change the prompt from inside a session, only this page can.",
         "warn.noDescription": "No description: the new-session mode picker will show it as \"no description yet\".",
+        "warn.approvalGateMissing": "The approval gate is off: this DSH build has no tools/pre-execute event, so in-session prompt rewrites do not ask for approval. See the details.",
+        "warn.unresolvableRows": "Some rows cannot be resolved on this DSH line: the platform marks the whole mode broken and silently drops it from the new-session picker. Click Fix for this line — it only turns those rows off and leaves your other choices alone.",
         "warn.approvalGateMissing.label": "Approval gate is off",
-        "warn.approvalGateMissing.hint": "This DSH build has no tools/pre-execute event, so in-session prompt rewrites do NOT ask for approval. The settings page is unaffected; upgrade DSH or turn the 「custom_prompt tool」 row off to restore the gate.",
+        "warn.approvalGateMissing.hint": "This DSH build has no tools/pre-execute event, so in-session prompt rewrites do NOT ask for approval. The settings page is unaffected; upgrade DSH or turn the custom_prompt tool row off to restore the gate.",
         "warn.noName": "No name: the mode picker will show the directory id (e.g. custom).",
         "history.label": "Change history",
         "history.pick": "Pick a version to load…",
@@ -400,15 +420,15 @@ try {
         "row.tool-subagent-control.label": "Subagent control",
         "row.tool-subagent-list-agents.label": "List subagents",
         "row.tool-subagent-codex.label": "Codex subagent",
-        "row.tool-subagent-codex.note": "Off by default: install the matching Bundle first",
+        "row.tool-subagent-codex.note": "Needs its Bundle installed first; the shipped state is in the details",
         "row.tool-subagent-claude-code.label": "Claude Code subagent",
-        "row.tool-subagent-claude-code.note": "Off by default: install the matching Bundle first",
+        "row.tool-subagent-claude-code.note": "Needs its Bundle installed first; the shipped state is in the details",
         "row.workflow-ptc.label": "Workflow engine",
         "row.workflow-worker-thread.label": "Workflow worker thread",
         "row.workflow-worker-thread.note": "Runs workflows on a separate worker thread",
         "row.tool-workflow.label": "Workflow tool",
         "row.tool-ralph.label": "Ralph workflow",
-        "row.tool-ralph.note": "Off by default",
+        "row.tool-ralph.note": "The Ralph workflow tool; the shipped state is in the details",
         "row.tool-web.label": "Web search and fetch",
         "row.tool-skill.label": "Skill tool",
         "row.skill-filesystem.label": "Skill discovery",
@@ -600,6 +620,7 @@ try {
         ".cpfe-hint-detail{flex:1 0 100%;margin:0;font-size:12px;line-height:18px;color:var(--dsw-alias-label-secondary)}",
         // 描述：多行、自适应高度（没有多行输入组件，所以用 textarea + 同一批语义变量）
         ".cpfe-desc{box-sizing:border-box;min-height:56px;max-height:200px;resize:vertical;padding:8px 12px;border-radius:10px;border:.5px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-base);color:var(--dsw-alias-label-primary);font:inherit;font-size:13px;line-height:20px;margin-bottom:8px}",
+        ".cpfe-base-pending{color:var(--dsw-alias-state-warn-primary)}",
         ".cpfe-note{display:block;font-size:11px;line-height:16px;color:var(--dsw-alias-label-secondary)}",
         ".cpfe-mono{display:block;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:11px;line-height:16px;color:var(--dsw-alias-label-secondary);overflow-wrap:anywhere}",
         ".cpfe-pills{display:flex;flex-wrap:wrap;gap:6px;align-items:center}",
@@ -635,6 +656,8 @@ try {
         ".cpfe-err{color:var(--dsw-alias-state-error-primary)}",
         ".cpfe-dirty{color:var(--dsw-alias-state-warn-primary)}",
         ".cpfe-danger{color:var(--dsw-alias-state-error-primary)}",
+        ".cpfe-meta-line{display:flex;flex-wrap:wrap;align-items:baseline;gap:8px;min-width:0}",
+        ".cpfe-version{font-size:11px;line-height:16px;color:var(--dsw-alias-label-secondary);white-space:nowrap}",
         ".cpfe-path{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:11px;line-height:16px;color:var(--dsw-alias-label-secondary);overflow-wrap:anywhere}",
         // ── fallback-path controls (unused when the shell provides the atoms) ──
         ".cpfe-btn{appearance:none;cursor:pointer;padding:0 14px;height:32px;border-radius:8px;border:.5px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-base);color:var(--dsw-alias-label-primary);font:inherit;font-size:13px}",
@@ -674,6 +697,7 @@ try {
         create: ROUTE + "/create",
         delete: ROUTE + "/delete",
         reorder: ROUTE + "/reorder",
+        repair: ROUTE + "/repair",
       }
 
       /** Every assistant this feature manages. */
@@ -882,6 +906,18 @@ try {
                           react.createElement("span", { className: "cpfe-detail-key" }, t("detail.note")),
                           react.createElement("span", { className: "cpfe-detail-value" }, note),
                         ),
+                    react.createElement(
+                      "div",
+                      { className: "cpfe-detail-line" },
+                      react.createElement("span", { className: "cpfe-detail-key" }, t("detail.shipped")),
+                      // 出厂状态来自**本机实际文件**（row.disabled），不是写死的文案：同一个行在两条 dsh 线上
+                      // 的出厂状态可能不同（实测：Ralph 在稳定线出厂是启用的，在预览线是关闭的）。
+                      react.createElement(
+                        "span",
+                        { className: "cpfe-detail-value" },
+                        row.disabled ? t("detail.shippedOff") : t("detail.shippedOn"),
+                      ),
+                    ),
                     react.createElement(
                       "div",
                       { className: "cpfe-detail-line" },
@@ -979,6 +1015,28 @@ try {
          * differs per user, so nothing is expanded by default and nothing is persisted.
          */
         const [expandedRows, setExpandedRows] = react.useState({})
+        /** 本机这条线上有无法解析的行时，一键把它们关掉（服务端复用保存同一条排版手术）。 */
+        const repairRowsNow = async () => {
+          if (draft === null) return
+          setBusy(true)
+          setFailed(false)
+          try {
+            const result = await postJson(ROUTES.repair, { id: selected })
+            if (result !== null && result.ok === true) {
+              setStatus(apiText(result, "msg.repaired"))
+              await reload()
+            } else {
+              setFailed(true)
+              setStatus(apiText(result, "msg.saveFailed"))
+            }
+          } catch {
+            setFailed(true)
+            setStatus(t("msg.saveFailed"))
+          } finally {
+            setBusy(false)
+          }
+        }
+
         const toggleRowExpanded = (id) =>
           setExpandedRows((previous) => {
             const next = { ...previous }
@@ -995,6 +1053,11 @@ try {
         /** 描述框：随内容长高，避免双语描述被单行截断。draft 在未选中助手时是 null，依赖项要先取出来。 */
         const descriptionRef = react.useRef(null)
         const draftDescription = draft === null ? "" : draft.description
+        // 已保存的底子：用来提示"改了但还没保存"—— 行列表是按它渲染的。
+        const savedMode =
+          entry === undefined || entry === null || entry.saved === null || entry.saved === undefined
+            ? null
+            : entry.saved.mode
         react.useEffect(() => {
           const el = descriptionRef.current
           if (el === null || el === undefined) return
@@ -1574,6 +1637,14 @@ try {
                   { className: "cpfe-note" },
                   payload.modes.reduce((note, mode) => (mode.id === draft.mode ? t("base." + mode.id + ".note", mode.note) : note), ""),
                 ),
+                // 底子改过但还没保存时明说一句：行列表是按**已保存**的组成渲染的，审阅把它记成了"点了没反应"。
+                draft.mode !== savedMode
+                  ? react.createElement(
+                      "p",
+                      { className: "cpfe-note cpfe-base-pending" },
+                      fillPlaceholders(t("mode.pendingRows"), { mode: t("base." + draft.mode + ".label", draft.mode) }),
+                    )
+                  : null,
               ),
               react.createElement(
                 "section",
@@ -1729,7 +1800,19 @@ try {
                 "div",
                 { className: "cpfe-warns" },
                 ...draft.warnings.map((code) =>
-                  react.createElement("p", { key: code, className: "cpfe-warn" }, "⚠ " + t("warn." + code)),
+                  react.createElement(
+                    "div",
+                    { key: code, className: "cpfe-warn-row" },
+                    react.createElement("p", { className: "cpfe-warn" }, "⚠ " + t("warn." + code)),
+                    // 本线无法解析的行可以一键修（只关掉那几行；用户创建它的那个版本可能早于播种改为派生的版本）。
+                    code === "unresolvableRows"
+                      ? react.createElement(
+                          A.Button,
+                          { disabled: busy, onClick: repairRowsNow },
+                          t("btn.repair"),
+                        )
+                      : null,
+                  ),
                 ),
               ),
           ...editorSections,
@@ -1760,7 +1843,20 @@ try {
               dirty ? t("btn.reloadDiscard") : t("btn.reload"),
             ),
             react.createElement("span", { className: statusClass }, shown),
-            react.createElement("span", { className: "cpfe-path" }, editorReady ? payload.compositionPath : ""),
+            react.createElement(
+              "span",
+              { className: "cpfe-meta-line" },
+              // 让用户能自己判断装到的是哪一版：pnpm 的发布冷却期会让"不钉版本"的安装落到旧版
+              // （实测：干净机器上按名安装装到 1.0.1，而 latest 是 1.9.x）。
+              react.createElement(
+                "span",
+                { className: "cpfe-version", title: t("meta.versionHint") },
+                // payload 在"还没读到任何助手"时是 null —— 页脚仍然会渲染，所以必须判空
+                // （同一条错误这一轮被浏览器验收抓到过三次，单元测试一次都看不到）。
+                payload === null ? "" : t("meta.version") + " v" + String(payload.version ?? "?"),
+              ),
+              react.createElement("span", { className: "cpfe-path" }, editorReady ? payload.compositionPath : ""),
+            ),
           ),
           // The confirmation is a portal: rendering it here keeps every piece of this page's
           // state in one component.

package/composition.mjs

@@ -387,7 +387,7 @@ export function collectRows(text) {
 /**
  * Rewrite one level of rows, applying disabled overrides by id.
  *
- * `overrides` maps a row id to an explicit DISABLED state (already normalised). A row absent from the map is
+ * `overrides` maps a row id to its explicit **enabled** state (`true` = on, `false` = off). A row absent is
  * left byte-for-byte as shipped — that is how an untouched `!!js` platform
  * condition and the rows that ship disabled survive a regeneration.
  *
@@ -397,14 +397,17 @@ export function collectRows(text) {
  * @param {boolean} nested - whether this call rewrites a group's contents.
  * @returns {string} the rewritten level.
  */
-function applyLevel(text, topLevel, overrides, nested) {
+function applyLevel(text, topLevel, overrides, nested, replacePersona = true) {
   const { lead, segments } = splitSegments(text, topLevel)
   if (segments.length === 0) return text
   const rendered = segments.map((segment) => {
     // The persona row is always replaced by this feature's own reader row: the
     // shipped one is a static-string persona whose text cannot be edited, so
     // keeping it would silently disable the editable prompt.
-    if (!nested && segment.id === 'persona') {
+    // `replacePersona` 只有**重新渲染**时才为真：那时整段 persona 换成我们的读取器行是对的。
+    // 但"按本线修复"是**就地**手术，它必须连 persona 段里的注释都原样保留 ——
+    // 之前这里无条件替换，导致每次修复都会丢注释 / 或多复制一行身份注释（外部评审实测）。
+    if (!nested && segment.id === 'persona' && replacePersona === true) {
       return setDisabled(PERSONA_ROW, overrides.get('persona'))
     }
     let body = segment.text
@@ -559,6 +562,81 @@ function yamlScalar(value) {
 }
 
 /** Read the base mode recorded in a generated composition, defaulting to standard. */
+/**
+ * Enabled rows whose plugin package cannot be resolved in **this** installation.
+ *
+ * Why this exists (measured): a preset with an enabled row whose package this dsh line does not ship is marked
+ * broken by the platform and **silently dropped from every picker**, while the settings page keeps working — the
+ * P0 an external review found. Fresh installs are safe because seeding derives the composition from the installed
+ * line, but an assistant created by an **older** version keeps its old file forever (seeding never overwrites user
+ * data), so this is how the page can tell the user instead of leaving them with an invisible mode.
+ *
+ * Relative modules (`./prompt-reader.mjs`, ours) and `cordis:` pseudo-packages (the runtime's) are skipped.
+ *
+ * @param {string} text - a composition.
+ * @returns {Array<{id: string, name: string}>} enabled rows that cannot resolve.
+ */
+/**
+ * Turn the named rows **off in place**, leaving every other byte of the file alone.
+ *
+ * Used by the "fix for this line" action: the composition a user has may contain rows this dsh line cannot
+ * resolve (typically written by an older version of this plugin), and the platform then drops the whole preset
+ * from every picker. Re-rendering the file from the base would also fix it — but it would silently discard any
+ * row the user (or a future version) added outside the base. This edits only the offending rows.
+ *
+ * @param {string} text - the composition.
+ * @param {Iterable<string>} ids - row ids to disable.
+ * @returns {string} the rewritten composition.
+ */
+export function disableRowsInPlace(text, ids) {
+  const wanted = [...new Set(ids)]
+  if (wanted.length === 0) return text
+  // `applyLevel` 把 Map 的值直接交给 `setDisabled(...)`，所以值是**关闭**布尔（true = 关闭）。
+  const off = new Map(wanted.map((id) => [id, true]))
+  const top = applyLevel(text, true, off, false, false)
+  return applyLevel(top, false, off, false, false)
+}
+
+export function unresolvableRows(text) {
+  let root
+  try {
+    root = join(shippedPresetsDir(), '..', '..', '..')
+  } catch {
+    return []
+  }
+  // **判断不了就不要报警**：如果这个根下根本没有 node_modules（例如测试用的是一个临时出厂目录），
+  // 那么"查不到某个包"只说明我们不知道，不说明那行坏了。误报的代价是用户被引导去关掉本来正常的行。
+  if (existsSync(join(root, '@deepseek-ai')) === false) return []
+  const out = []
+  const lines = text.split('\n')
+  for (let index = 0; index < lines.length; index += 1) {
+    const row = /^( {0,4})- id: (.+?)\s*$/.exec(lines[index])
+    if (row === null) continue
+    const indent = row[1].length
+    let name
+    let disabled = false
+    for (let next = index + 1; next < lines.length; next += 1) {
+      const line = lines[next]
+      if (line.trim() !== '' && line.search(/\S/) <= indent) break
+      if (/^\s+name: ['"]?(.+?)['"]?\s*$/.test(line)) name = /^\s+name: ['"]?(.+?)['"]?\s*$/.exec(line)[1]
+      // 平台条件行（`disabled: !!js …`）必须**求值**判定：只看有没有字面 `true` 会把"本平台已启用"的行
+      // 误判成关闭，也会把"本平台本来就关闭"的行（如 Windows 专用的 pwsh）误报成"无法解析"。
+      const flag = /^\s+disabled:\s*(.+?)\s*$/.exec(line)
+      if (flag !== null) {
+        // 字面量直接读，`!!js` 一类交给求值器（它对字面量不做布尔化）。
+        const raw = flag[1].replace(/^['"]|['"]$/g, '')
+        disabled = raw === 'true' ? true : raw === 'false' ? false : evalDisabledExpression(flag[1]) === true
+      }
+    }
+    if (name === undefined || disabled) continue
+    if (name.startsWith('.') || name.startsWith('cordis:')) continue
+    const parts = name.split('/')
+    const pkg = name.startsWith('@') ? parts.slice(0, 2).join('/') : parts[0]
+    if (existsSync(join(root, pkg)) === false) out.push({ id: row[2], name })
+  }
+  return out
+}
+
 export function modeOf(text) {
   const match = /^# 基础模式: (\S+)\s*$/m.exec(text)
   const id = match === null ? undefined : match[1]

package/index.mjs

@@ -44,11 +44,13 @@ import { PROMPT_PATH, COMPOSITION_PATH, ROUTE_PATH, PRESET_DIR } from './paths.m
 import {
   BASE_MODES,
   collectRows,
-  renderComposition,
+  disableRowsInPlace,
   modeOf,
   overridesOf,
   readBaseComposition,
+  renderComposition,
   setShippedPresetsDir,
+  unresolvableRows,
 } from './composition.mjs'
 import { readPresetMeta, writePresetMeta, presetMetaPath, PRESET_META_PATH } from './meta.mjs'
 import { listHistory, readVersion, recordExternalChange, recordPrompt, HISTORY_SOURCE } from './journal.mjs'
@@ -72,6 +74,7 @@ const STATE_PATH = ROUTE_PATH + '/state'
 const CREATE_PATH = ROUTE_PATH + '/create'
 const DELETE_PATH = ROUTE_PATH + '/delete'
 const REORDER_PATH = ROUTE_PATH + '/reorder'
+const REPAIR_PATH = ROUTE_PATH + '/repair'
 const HISTORY_PATH = ROUTE_PATH + '/history'
 
 /** Which verbs each endpoint answers. `undefined` for a path means 404. */
@@ -82,6 +85,7 @@ const METHODS = {
   [CREATE_PATH]: ['POST'],
   [DELETE_PATH]: ['POST'],
   [REORDER_PATH]: ['POST'],
+  [REPAIR_PATH]: ['POST'],
 }
 
 /** 只告警一次：避免每个请求都刷同一行日志。 */
@@ -90,6 +94,21 @@ let warnedRosterShape = false
 /** 应用层请求体上限；平台的 buffered cap 是第一道，这个是我们自己的兜底（见 handler 里的注释）。 */
 const MAX_BODY_BYTES = 4 * 1024 * 1024
 
+/**
+ * 本插件的版本。
+ *
+ * 页面把它显示出来，是因为**用户很难自己判断装到的是哪一版**：pnpm 的发布冷却期（默认 24 小时）会让
+ * 不钉版本的安装落到"超过 24 小时的最新版"，实测在一台干净机器上 `dsh plugin add dsh-custom-mode`
+ * 装到的是 1.0.1 而不是最新的 1.9.x。看见版本号，用户才知道要不要按 README 的钉版本命令重装。
+ */
+const PLUGIN_VERSION = (() => {
+  try {
+    return JSON.parse(readFileSync(new URL('./package.json', import.meta.url), 'utf8')).version
+  } catch {
+    return 'unknown'
+  }
+})()
+
 /** Longest display name / description the page accepts, so one paste cannot bloat every picker. */
 const MAX_NAME = 80
 const MAX_DESCRIPTION = 400
@@ -142,7 +161,7 @@ export function checkPromptText(text) {
       return {
         ok: false,
         code: 'unknownVariable',
-        params: { variable: '{{' + variable + '}}', known: KNOWN_VARIABLES.map((item) => '{{' + item + '}}').join('、') },
+        params: { variable: '{{' + variable + '}}', known: KNOWN_VARIABLES.map((item) => '{{' + item + '}}').join(', ') },
         error:
           '保存被拒绝：{{' +
           variable +
@@ -278,12 +297,17 @@ export function readState(rows, id, options = {}) {
     factoryPrompt: typeof options.factoryPrompt === 'string' ? options.factoryPrompt : null,
     // 改动历史（只有元数据，正文按需取：见 GET /custom-mode/history）。
     history: listHistory(directory),
+    // 本插件版本 + 本机装的那条 dsh 线上无法解析的行（页面据此显示版本与"按本线修复"）。
+    version: PLUGIN_VERSION,
+    unresolvable: unresolvableRows(text),
     // 「配置了却不生效」的告警码（文案在页面侧按语言渲染）。
     warnings: [
       ...configWarnings(text, prompt.ok === true ? prompt.text : '', meta),
       // 审批闸门缺失：由预置侧在注册失败时留下标记文件（宿主半看不到那个事件是否真的有人监听）。
       // 诚实地把它变成页面上的告警，而不是只留在 console.error 里。
       ...(existsSync(join(directory, 'approval-gate-missing')) ? ['approvalGateMissing'] : []),
+      // 本线无法解析的启用行 = 平台会把整个预设判为 broken 并从选择器里丢掉（曾经的 P0）。
+      ...(unresolvableRows(text).length > 0 ? ['unresolvableRows'] : []),
     ],
   }
 }
@@ -348,8 +372,12 @@ export function saveState(rows, input) {
   if (name.length > MAX_NAME) {
     return { ok: false, code: 'nameTooLong', params: { max: MAX_NAME }, error: '保存被拒绝：模式名称过长（上限 ' + String(MAX_NAME) + ' 个字符）。' }
   }
+  // 请求里**没带** description 时保留原值：API 调用方只改提示词，不该顺手把描述清空（外部评审实测）。
+  const meta = readPresetMeta(directory)
   const rawDescription =
-    input !== null && typeof input === 'object' && typeof input.description === 'string' ? input.description : ''
+    input !== null && typeof input === 'object' && typeof input.description === 'string'
+      ? input.description
+      : (typeof meta.description === 'string' ? meta.description : '')
   const description = rawDescription.replace(/\r?\n/g, ' ').trim()
   if (description.length > MAX_DESCRIPTION) {
     return { ok: false, code: 'descriptionTooLong', params: { max: MAX_DESCRIPTION }, error: '保存被拒绝：模式描述过长（上限 ' + String(MAX_DESCRIPTION) + ' 个字符）。' }
@@ -525,6 +553,42 @@ export function createAssistant(rows, input, templateDir = packagedPresetDir())
  * @param {object} input - `{ id }`.
  * @param {{remove: (id: string) => Promise<void>}} agentPresets - the roster service.
  */
+/**
+ * 把"本机这条 dsh 线上无法解析的启用行"关掉，让预设重新健康。
+ *
+ * 为什么需要它：老版本创建（或老版本播种）的组成文件会一直留着 —— 播种只补缺失文件、从不覆盖用户数据。
+ * 如果那份文件里有一行启用了本线不提供的插件，平台会把整个预设判为 broken 并从所有选择器里**静默丢弃**
+ * （设置页照常能开，所以用户完全不知道）。这里复用与保存同一条排版手术：读出现有 overrides，把那几行显式
+ * 关闭后重新渲染。用户的其它选择一字不动。
+ */
+export function repairComposition(rows, input) {
+  const id = input !== null && typeof input === 'object' && typeof input.id === 'string' ? input.id : ''
+  const directory = assistantDir(rows, id)
+  if (directory === undefined) return unknownAssistant(id)
+  const file = compositionFile(directory)
+  if (!existsSync(file)) return { ok: false, code: 'compositionMissing', params: { path: file }, error: '找不到组成文件：' + file }
+  const text = readFileSync(file, 'utf8')
+  const bad = unresolvableRows(text)
+  if (bad.length === 0) {
+    return { ok: true, id, code: 'repairNotNeeded', note: '这个助手在本机没有无法解析的行，无需修复。' }
+  }
+  // **就地**关闭那几行，不重渲染：重渲染会顺手丢掉 base 之外的自有行，而用户的数据不该被这样动。
+  const rendered = disableRowsInPlace(text, bad.map((row) => row.id))
+  try {
+    writeAtomic(file, rendered)
+  } catch (error) {
+    return { ok: false, code: 'writeFailed', params: { detail: describe(error) }, error: '写入失败：' + describe(error) }
+  }
+  const ids = bad.map((row) => row.id).join('、')
+  return {
+    ok: true,
+    id,
+    code: 'repaired',
+    params: { count: bad.length, ids },
+    note: '已按本机这条 dsh 线关闭 ' + String(bad.length) + ' 个无法解析的行（' + ids + '）。现在这个模式能重新出现在选择器里。',
+  }
+}
+
 export async function deleteAssistant(rows, input, agentPresets) {
   const id = input !== null && typeof input === 'object' && typeof input.id === 'string' ? input.id : ''
   if (assistantDir(rows, id) === undefined) return unknownAssistant(id)
@@ -717,13 +781,19 @@ export function apply(ctx) {
         // an unbounded amount; the platform's cap remains the primary guard.
         const declared = Number(request.headers.get('content-length') ?? '')
         if (Number.isFinite(declared) && declared > MAX_BODY_BYTES) {
-          return json({ ok: false, error: `请求体过大（上限 ${String(MAX_BODY_BYTES)} 字节）` }, 413)
+          return json({ ok: false, code: 'bodyTooLarge', params: { max: MAX_BODY_BYTES }, error: `请求体过大（上限 ${String(MAX_BODY_BYTES)} 字节）` }, 413)
         }
 
         // Everything below writes, so the body is read and parsed exactly once.
         let parsed
         try {
-          parsed = await request.json()
+          // 只信 `content-length` 会被 chunked（或不带该头）的请求绕过 —— 所以读完再按**实际字节**判一次。
+          // 平台自己的 buffered cap 仍是第一道；这一道保证"我们绝不 buffer 一个无上限的请求体"。
+          const raw = await request.text()
+          if (Buffer.byteLength(raw, 'utf8') > MAX_BODY_BYTES) {
+            return json({ ok: false, code: 'bodyTooLarge', params: { max: MAX_BODY_BYTES }, error: `请求体过大（上限 ${String(MAX_BODY_BYTES)} 字节）` }, 413)
+          }
+          parsed = JSON.parse(raw)
         } catch {
           return json({ ok: false, code: 'badJson', error: '请求体不是合法 JSON' }, 400)
         }
@@ -738,6 +808,10 @@ export function apply(ctx) {
           const result = await serializedWrite('tree', async () => createAssistant(await roster(), parsed))
           return json(result, result.ok === true ? 200 : 400)
         }
+        if (pathname === REPAIR_PATH) {
+          const result = await serializedWrite('repair:' + targetId, async () => repairComposition(await roster(), parsed))
+          return json(result, result.ok === true ? 200 : 400)
+        }
         if (pathname === REORDER_PATH) {
           const result = await serializedWrite('tree', async () => reorderAssistant(await roster(), parsed))
           return json(result, result.ok === true ? 200 : 400)

package/journal.mjs

@@ -25,27 +25,9 @@
  */
 import { randomBytes } from 'node:crypto'
 import { existsSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs'
+import { writeAtomic } from './atomic.mjs'
 import { join } from 'node:path'
 
-/**
- * `rename` 带重试（与宿主半同一实现，见 editor/index.mjs 的说明）。
- *
- * 这两个文件刻意各留一份：preset 侧的模块是独立分发的，不能 import 宿主半 —— 与 `checkPromptText`
- * 同样的取舍。journal 只在宿主半写，所以这里只需与宿主半保持一致的重试策略。
- */
-function renameWithRetry(from, to, attempts = 5) {
-  for (let attempt = 1; ; attempt += 1) {
-    try {
-      renameSync(from, to)
-      return
-    } catch (error) {
-      const code = error !== null && typeof error === 'object' ? error.code : undefined
-      const retryable = code === 'EPERM' || code === 'EBUSY' || code === 'EACCES'
-      if (retryable !== true || attempt >= attempts) throw error
-      Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 20 * attempt)
-    }
-  }
-}
 
 /** 每个助手目录下的日志文件名。 */
 export const HISTORY_NAME = 'prompt-history.jsonl'
@@ -121,18 +103,9 @@ export function recordPrompt(directory, text, by = HISTORY_SOURCE.settings) {
   const file = historyFile(directory)
   // 与宿主半同一条纪律：随机临时名（消除 tmp-vs-tmp 碰撞）+ 重试（Windows 上目标被并发 rename
   // 持有时会短暂 EPERM）+ 失败清理。
-  const temporary = `${file}.tmp-${String(process.pid)}-${randomBytes(4).toString('hex')}`
-  writeFileSync(temporary, lines.join('\n') + '\n', 'utf8')
-  try {
-    renameWithRetry(temporary, file)
-  } catch (error) {
-    try {
-      rmSync(temporary, { force: true })
-    } catch {
-      /* 不掩盖原始错误 */
-    }
-    throw error
-  }
+  // 与宿主半共用同一份实现（editor/atomic.mjs）：这里原先自己留了一份重试与清理，两份会各自漂移
+  // —— 外部审阅点名了这一点。预设侧（prompt-tool.mjs）仍保留自己的副本，因为那个文件独立分发、不能 import 宿主半。
+  writeAtomic(file, lines.join('\n') + '\n')
   return { recorded: true, at, n }
 }
 

package/locales.mjs

@@ -60,6 +60,7 @@ export const zh = {
   'assistant.short': '每个助手是一个独立模式：自己的系统提示词、基础模式与插件开关。',
   'name.short': '改名只影响显示，内部标识与已有会话不受影响。',
   'mode.short': '底子决定「行集合」与工具能力；persona 行始终由本模式替换。',
+  'mode.pendingRows': '底子已改为「{mode}」：保存后，下面的行列表会按新底子重算。',
   'rows.short': '逐行控制挂载哪些插件；没拨过的行保持官方默认。',
   'prompt.short': '这段文本就是本模式的系统提示词，保存后下一步生效。',
   'aria.expandHint': '展开完整说明',
@@ -67,12 +68,19 @@ export const zh = {
   'aria.expand': '展开详情',
   'aria.collapse': '收起详情',
   'detail.id': '行 id',
+  'detail.shipped': '出厂状态',
+  'detail.shippedOn': '启用',
+  'detail.shippedOff': '关闭',
   'detail.note': '说明',
   'detail.state': '开关状态',
   'detail.explicitOn': '已手动启用',
   'detail.explicitOff': '已手动停用',
   'detail.untouched': '未改动（跟随官方默认）',
   'detail.platform': '平台条件',
+  'btn.repair': '按本线修复',
+  'msg.repaired': '已修复',
+  'meta.version': '插件版本',
+  'meta.versionHint': '安装时不钉版本号会受 pnpm 发布冷却期影响（默认 24 小时），可能装到较旧的版本。要换版本请按 README 的钉版本命令重装，然后重启 DSH。',
   'api.saved': '已保存（{name}，基础模式 {mode}）。新建会话即生效，当前会话保持原配置。',
   'api.created': '已创建「{name}」。现在可以为它写系统提示词。',
   'api.duplicated': '已复制自「{from}」。两份从此各改各的。',
@@ -94,6 +102,8 @@ export const zh = {
   'api.deleteFailed': '删除失败：{detail}',
   'api.versionMissing': '找不到这个版本（历史可能已被上限裁剪）。',
   'api.badJson': '请求体不是合法 JSON',
+  'warn.approvalGateMissing': '审批闸门未启用：本机这个 DSH 版本没有 tools/pre-execute 事件，会话内改写系统提示词不会弹审批。见「详情」。',
+  'warn.unresolvableRows': '有行在本机这条 DSH 线上无法解析：平台会把整个模式判为 broken，并从新会话的选择器里**静默丢弃**。点右侧的「按本线修复」即可（只关掉那几行，其它选择不动）。',
   'warn.approvalGateMissing.label': '审批闸门未启用',
   'warn.approvalGateMissing.hint': '这个 DSH 版本没有 tools/pre-execute 事件，会话内改写系统提示词**不会**弹审批。设置页不受影响；要恢复保护请升级 DSH，或把「custom_prompt 工具」那一行关掉。',
   'warn.personaOffWithPrompt': '「身份（系统提示词）」这一行是关的，所以 prompt.md 不会被注入 —— 你写的提示词现在不起作用。要么打开这一行，要么清空提示词。',
@@ -180,15 +190,15 @@ export const zh = {
   'row.tool-subagent-control.label': '子代理控制',
   'row.tool-subagent-list-agents.label': '列出子代理',
   'row.tool-subagent-codex.label': 'Codex 子代理',
-  'row.tool-subagent-codex.note': '默认关闭：需要先安装对应 Bundle',
+  'row.tool-subagent-codex.note': '需要先安装对应 Bundle 才能用；出厂状态见「详情」',
   'row.tool-subagent-claude-code.label': 'Claude Code 子代理',
-  'row.tool-subagent-claude-code.note': '默认关闭：需要先安装对应 Bundle',
+  'row.tool-subagent-claude-code.note': '需要先安装对应 Bundle 才能用；出厂状态见「详情」',
   'row.workflow-ptc.label': '工作流引擎',
   'row.workflow-worker-thread.label': '工作流 Worker 线程',
   'row.workflow-worker-thread.note': '把工作流跑在独立的 worker 线程里',
   'row.tool-workflow.label': '工作流工具',
   'row.tool-ralph.label': 'Ralph 工作流',
-  'row.tool-ralph.note': '默认关闭',
+  'row.tool-ralph.note': 'Ralph 工作流工具；出厂状态见「详情」',
   'row.tool-web.label': '网页检索与抓取',
   'row.tool-skill.label': '技能工具',
   'row.skill-filesystem.label': '技能发现',
@@ -258,14 +268,15 @@ export const en = {
   'msg.imported': 'Imported into the editor (not saved yet) — review it, then click Save.',
   'msg.importFailed': 'Import failed',
   'api.badDirection': 'Unknown reorder direction: {direction}',
-  'api.unknownAssistant': 'No assistant 「{id}」: this page only manages the assistants it created (a directory with prompt.md whose composition injects the identity through prompt-reader.mjs).',
-  'api.alreadyFirst': '「{name}」 is already first.',
-  'api.alreadyLast': '「{name}」 is already last.',
+  'api.unknownAssistant': 'No assistant {id}: this page only manages the assistants it created (a directory with prompt.md whose composition injects the identity through prompt-reader.mjs).',
+  'api.alreadyFirst': '{name} is already first.',
+  'api.alreadyLast': '{name} is already last.',
   'api.badVariableName': '{variable} is not a valid variable reference: names may use lower-case letters, digits and underscores, and must start with a letter. For a literal brace, use a single opening brace or an unclosed double brace.',
   'api.unknownVariable': '{variable} is not a registered variable — rendering would fail every request in this mode. Available: {known}.',
   'assistant.short': 'Each assistant is its own mode: its own system prompt, base mode and plugin switches.',
   'name.short': 'Renaming only changes what is displayed — not the internal id or existing sessions.',
   'mode.short': 'The base decides the row set and tool abilities; the persona row is always replaced by this mode.',
+  'mode.pendingRows': 'Base changed to {mode}: the row list below is recomputed from the new base when you save.',
   'rows.short': 'Control which plugins this mode mounts, row by row; untouched rows keep the shipped default.',
   'prompt.short': 'Saving this text makes it the system prompt of this mode, and it takes effect on the next step.',
   'aria.expandHint': 'Show the full explanation',
@@ -273,16 +284,23 @@ export const en = {
   'aria.expand': 'Show details',
   'aria.collapse': 'Hide details',
   'detail.id': 'Row id',
+  'detail.shipped': 'Shipped',
+  'detail.shippedOn': 'enabled',
+  'detail.shippedOff': 'disabled',
   'detail.note': 'Note',
   'detail.state': 'Switch',
   'detail.explicitOn': 'Set to on by you',
   'detail.explicitOff': 'Set to off by you',
   'detail.untouched': 'Untouched (follows the shipped default)',
   'detail.platform': 'Platform condition',
+  'btn.repair': 'Fix for this line',
+  'msg.repaired': 'Repaired',
+  'meta.version': 'Plugin version',
+  'meta.versionHint': 'Installing without a pinned version is subject to pnpm’s release cooldown (24 h by default) and can land on an older release. To change version, reinstall with the pinned command from the README and restart DSH.',
   'api.saved': 'Saved ({name}, base mode {mode}). A new session picks it up; the current one keeps its configuration.',
-  'api.created': 'Created 「{name}」. You can write its system prompt now.',
-  'api.duplicated': 'Copied from 「{from}」. The two are independent from now on.',
-  'api.deleted': 'Deleted 「{name}」. Sessions already using it keep running; it no longer appears for new sessions.',
+  'api.created': 'Created {name}. You can write its system prompt now.',
+  'api.duplicated': 'Copied from {from}. The two are independent from now on.',
+  'api.deleted': 'Deleted {name}. Sessions already using it keep running; it no longer appears for new sessions.',
   'api.reordered': 'Order saved: the new-session mode picker follows it.',
   'api.nameRequired': 'Give the new assistant a name first.',
   'api.nameTooLong': 'That name is too long (limit {max} characters).',
@@ -303,8 +321,10 @@ export const en = {
   'warn.personaOffWithPrompt': 'The "Identity (system prompt)" row is off, so prompt.md is never injected — the prompt you wrote has no effect. Turn the row on, or clear the prompt.',
   'warn.toolOff': 'The "custom_prompt tool" row is off: the agent cannot change the prompt from inside a session, only this page can.',
   'warn.noDescription': 'No description: the new-session mode picker will show it as "no description yet".',
+  'warn.approvalGateMissing': 'The approval gate is off: this DSH build has no tools/pre-execute event, so in-session prompt rewrites do not ask for approval. See the details.',
+  'warn.unresolvableRows': 'Some rows cannot be resolved on this DSH line: the platform marks the whole mode broken and silently drops it from the new-session picker. Click Fix for this line — it only turns those rows off and leaves your other choices alone.',
   'warn.approvalGateMissing.label': 'Approval gate is off',
-  'warn.approvalGateMissing.hint': 'This DSH build has no tools/pre-execute event, so in-session prompt rewrites do NOT ask for approval. The settings page is unaffected; upgrade DSH or turn the 「custom_prompt tool」 row off to restore the gate.',
+  'warn.approvalGateMissing.hint': 'This DSH build has no tools/pre-execute event, so in-session prompt rewrites do NOT ask for approval. The settings page is unaffected; upgrade DSH or turn the custom_prompt tool row off to restore the gate.',
   'warn.noName': 'No name: the mode picker will show the directory id (e.g. custom).',
   'history.label': 'Change history',
   'history.pick': 'Pick a version to load…',
@@ -389,15 +409,15 @@ export const en = {
   'row.tool-subagent-control.label': 'Subagent control',
   'row.tool-subagent-list-agents.label': 'List subagents',
   'row.tool-subagent-codex.label': 'Codex subagent',
-  'row.tool-subagent-codex.note': 'Off by default: install the matching Bundle first',
+  'row.tool-subagent-codex.note': 'Needs its Bundle installed first; the shipped state is in the details',
   'row.tool-subagent-claude-code.label': 'Claude Code subagent',
-  'row.tool-subagent-claude-code.note': 'Off by default: install the matching Bundle first',
+  'row.tool-subagent-claude-code.note': 'Needs its Bundle installed first; the shipped state is in the details',
   'row.workflow-ptc.label': 'Workflow engine',
   'row.workflow-worker-thread.label': 'Workflow worker thread',
   'row.workflow-worker-thread.note': 'Runs workflows on a separate worker thread',
   'row.tool-workflow.label': 'Workflow tool',
   'row.tool-ralph.label': 'Ralph workflow',
-  'row.tool-ralph.note': 'Off by default',
+  'row.tool-ralph.note': 'The Ralph workflow tool; the shipped state is in the details',
   'row.tool-web.label': 'Web search and fetch',
   'row.tool-skill.label': 'Skill tool',
   'row.skill-filesystem.label': 'Skill discovery',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-custom-mode",
-  "version": "1.9.0",
+  "version": "1.9.3",
   "description": "Custom modes and custom prompts for DeepSeek Harness (dsh): edit a mode's system prompt on the settings page (it takes effect on the next model step), choose its base mode, switch plugins row by row, and keep several assistants side by side.",
   "license": "MIT",
   "type": "module",
@@ -65,7 +65,7 @@
   },
   "publishConfig": {
     "access": "public",
-    "tag": "alpha"
+    "tag": "latest"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh": {

package/preset/preset.yml

@@ -1,2 +1,2 @@
 name: 自定义模式
-description: 完整编码能力，系统提示词来自 prompt.md，可在设置页随时修改、下一步即生效。 / Full coding ability; the system prompt lives in prompt.md and can be edited in the settings page — it takes effect on the next step.
+description: 在设置页编辑本模式的系统提示词 / Edit this mode's system prompt in Settings.

package/seed.mjs

@@ -21,7 +21,7 @@
  *  3. **Idempotent.** A second activation writes nothing and changes nothing.
  */
 
-import { copyFileSync, existsSync, mkdirSync } from 'node:fs'
+import { existsSync, mkdirSync, readFileSync } from 'node:fs'
 import { renderComposition } from './composition.mjs'
 import { writeAtomic } from './atomic.mjs'
 import { dirname, join } from 'node:path'
@@ -91,8 +91,19 @@ export function starterComposition(options = {}) {
  * @param {{composition?: string|null}} [options] - a rendered composition to write instead of copying
  *   `agent.cordis.yml`; see {@link starterComposition}.
  */
+/**
+ * 我们自己的**代码**模块（相对于"用户数据"）。
+ *
+ * 这两个文件是随助手目录一起分发的**代码**，不是用户内容：老版本创建的助手会一直留着旧副本，
+ * 于是 1.0.x / 1.1.x 首装的用户即使把插件升到最新，会话内改写提示词的**审批闸门仍然是缺的** ——
+ * 外部评审实测到了这一点（P1 安全）。所以它们在升级时**刷新**。
+ * `prompt.md` / `preset.yml` / `agent.cordis.yml` 是用户数据（提示词、开关、名字），保持"只补不缺"。
+ */
+const REFRESHABLE_MODULES = ['prompt-reader.mjs', 'prompt-tool.mjs']
+
 export function seedPreset(presetDir, sourceDir = packagedPresetDir(), options = {}) {
   const created = []
+  const refreshed = []
   const kept = []
   const errors = []
 
@@ -111,7 +122,22 @@ export function seedPreset(presetDir, sourceDir = packagedPresetDir(), options =
 
   for (const name of PRESET_FILES) {
     const target = join(presetDir, name)
+    const source = join(sourceDir, name)
     if (existsSync(target)) {
+      // 代码模块：内容与包内不一致就升级（用原子写，带 Windows 重试）。
+      if (REFRESHABLE_MODULES.includes(name) && existsSync(source)) {
+        try {
+          const shipped = readFileSync(source, 'utf8')
+          if (readFileSync(target, 'utf8') !== shipped) {
+            writeAtomic(target, shipped)
+            refreshed.push(name)
+            continue
+          }
+        } catch (error) {
+          errors.push(`刷新 ${name} 失败: ${describe(error)}`)
+          continue
+        }
+      }
       kept.push(name)
       continue
     }
@@ -126,19 +152,19 @@ export function seedPreset(presetDir, sourceDir = packagedPresetDir(), options =
         continue
       }
     }
-    const source = join(sourceDir, name)
     if (!existsSync(source)) {
       errors.push(`包内缺少 ${name}`)
       continue
     }
     try {
-      copyFileSync(source, target)
+      // 原子写（内部带 Windows 重试）：原先裸 copyFileSync 在两个实例共抢一个 DSH_HOME 首启时会 EBUSY。
+      writeAtomic(target, readFileSync(source, 'utf8'))
       created.push(name)
     } catch (error) {
       errors.push(`写入 ${name} 失败: ${describe(error)}`)
     }
   }
-  return { created, kept, errors }
+  return { created, refreshed, kept, errors }
 }
 
 /**
@@ -163,6 +189,9 @@ export function seedPresetWithLog(presetDir, log = console.error, info = console
     log(`custom-mode: 播种 preset 时出现意外错误（已忽略）: ${describe(error)}`)
     return { created: [], kept: [], errors: [describe(error)] }
   }
+  if (result.refreshed !== undefined && result.refreshed.length > 0) {
+    info(`custom-mode: 已刷新 ${presetDir} 里的代码模块（${result.refreshed.join(', ')}）`)
+  }
   if (result.created.length > 0) {
     info(`custom-mode: 已播种 preset 到 ${presetDir}（新建 ${result.created.length} 个文件: ${result.created.join(', ')}）`)
   }