dsh-custom-mode 1.9.12 → 1.9.13

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 BOWLUNA
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/base-composition.mjs

@@ -0,0 +1,419 @@
+/**
+ * Where a base mode's composition text comes from — **the third thing the two dsh lines disagree about**.
+ *
+ * The settings page composes a mode by editing a *shipped* base composition (base mode + row switches).
+ * That text has to come from somewhere, and the two dsh lines keep it in different places:
+ *
+ * | line | where the shipped composition lives |
+ * | --- | --- |
+ * | 0.1.2 … 0.1.6 | `@deepseek-ai/dsh-agent-presets/presets/<mode>/agent.cordis.yml` (a package that **no longer exists** from 0.1.7) |
+ * | 0.1.7 + | inside the host: `agentPresets.readDocument(<mode>).content` — the declared entry-list YAML |
+ *
+ * At 1.9.12 only the first route existed, so on 0.1.7 every read of a base composition threw
+ * (`无法定位出厂基础模式`) and the settings page answered **500**: no rows, no switches, and — worse —
+ * the prompt editor never rendered. That is the P0 an adversarial review reproduced on a stock
+ * `0.1.7-rc.2` instance (the exact line the official desktop app bundles).
+ *
+ * ## Resolution order (highest first)
+ *
+ *  1. `DSH_SHIPPED_PRESETS_DIR` — explicit override, **exclusive**: when set, nothing else is consulted.
+ *     Tests use it, and an operator who points it somewhere gets exactly that.
+ *  2. the text the host handed over (`setBaseCompositions`, filled from `agentPresets.readDocument`).
+ *  3. `setShippedPresetsDir`, then Node/profile discovery of the legacy presets package.
+ *  4. `DSH_PRESET_PATCH_DIR`, then discovery of `@deepseek-ai/dsh-web-app/presets/<mode>.patch.yml`
+ *     — the same declaration in its packaged form, for a host whose `readDocument` is unavailable.
+ *  5. nothing left → {@link BaseCompositionUnavailableError}, which callers turn into a **visible,
+ *     typed** state instead of a 500.
+ *
+ * Why `readDocument` and not `compositionInventory()`: the inventory is **flattened**
+ * (`entryId`/`moduleName`/`enabled`/`condition`), so the `isolate` realms a service row must sit inside
+ * are gone (measured 2026-09-25; `parse-composition.mjs` rules the same route out for the same reason).
+ * `readDocument` returns the declaration as YAML **including** those groups and `!!js` expressions.
+ */
+
+import { existsSync, readFileSync } from 'node:fs'
+import { createRequire } from 'node:module'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+import { dshHome } from './paths.mjs'
+
+/** Explicit override for the legacy file layout (a directory holding `<mode>/agent.cordis.yml`). */
+export const LEGACY_DIR_ENV = 'DSH_SHIPPED_PRESETS_DIR'
+
+/** Explicit override for the declarative file layout (a directory holding `<mode>.patch.yml`). */
+export const PATCH_DIR_ENV = 'DSH_PRESET_PATCH_DIR'
+
+/** The base modes a user may build on. Kept here so discovery has no opinion about the UI. */
+export const BASE_MODE_IDS = ['standard', 'ptc', 'minimal', 'cordis']
+
+/**
+ * Thrown when no route yields a base composition.
+ *
+ * Carries `code` so the HTTP layer can answer with a typed, localizable result, and `attempts` so the
+ * operator sees *which* places were tried instead of a bare failure.
+ */
+export class BaseCompositionUnavailableError extends Error {
+  /**
+   * @param {string} modeId - the base mode that could not be resolved.
+   * @param {string[]} attempts - one line per route tried, in order.
+   */
+  constructor(modeId, attempts) {
+    super(
+      '无法取得基础模式「' + modeId + '」的出厂组成。已尝试：' +
+        (attempts.length > 0 ? attempts.join('；') : '(无可用途径)'),
+    )
+    this.name = 'BaseCompositionUnavailableError'
+    this.code = 'baseCompositionUnavailable'
+    this.modeId = modeId
+    this.attempts = attempts
+  }
+}
+
+/** Whether a value is the typed "no base composition anywhere" failure. */
+export function isBaseCompositionUnavailable(error) {
+  return error !== null && typeof error === 'object' && error.code === 'baseCompositionUnavailable'
+}
+
+/** Read one candidate file, reporting a miss instead of throwing. */
+function tryReadFile(file, attempts, label) {
+  try {
+    const text = readFileSync(file, 'utf8')
+    if (typeof text === 'string' && text.trim() !== '') return text
+    attempts.push(label + '：文件为空')
+  } catch (error) {
+    const code = error !== null && typeof error === 'object' ? error.code : undefined
+    attempts.push(label + '：' + (code === 'ENOENT' ? '不存在' : String((error && error.message) || error)))
+  }
+  return null
+}
+
+// ── route 1 / 3: the legacy file layout ───────────────────────────────────────
+
+/** Directory injected by the host half (resolved from the roster's system row). */
+let injectedLegacyDir
+
+/** Point the resolver at a legacy presets directory discovered at runtime. */
+export function setShippedPresetsDir(dir) {
+  if (typeof dir === 'string' && dir !== '') injectedLegacyDir = dir
+}
+
+/** Discovery result, cached **only when it succeeded** (a cold miss must stay retryable). */
+let legacyCache
+
+/** Resolve `@deepseek-ai/dsh-agent-presets` the two ways that ever worked on the legacy line. */
+function discoverLegacyPresetsDir() {
+  const require = createRequire(import.meta.url)
+  try {
+    const manifest = require.resolve('@deepseek-ai/dsh-agent-presets/package.json')
+    return join(dirname(manifest), 'presets')
+  } catch {
+    /* fall through */
+  }
+  try {
+    const fromProfile = createRequire(join(dshHome(), 'profiles', 'package.json'))
+    const manifest = fromProfile.resolve('@deepseek-ai/dsh-agent-presets/package.json')
+    return join(dirname(manifest), 'presets')
+  } catch {
+    /* fall through */
+  }
+  throw new Error(
+    '无法定位出厂基础模式（@deepseek-ai/dsh-agent-presets 是否已安装？）。' +
+      '0.1.7 起该包不再发布，那条线由 agentPresets.readDocument() 提供同一份声明。',
+  )
+}
+
+/**
+ * The legacy presets directory.
+ *
+ * `DSH_SHIPPED_PRESETS_DIR` is **exclusive**: an explicit override must not silently fall back to
+ * whatever else happens to be installed on the machine (that is how a test would stop testing).
+ *
+ * @returns {string} absolute directory.
+ */
+export function shippedPresetsDir() {
+  const override = process.env[LEGACY_DIR_ENV]
+  if (typeof override === 'string' && override !== '') return override
+  if (injectedLegacyDir !== undefined) return injectedLegacyDir
+  if (legacyCache === undefined) legacyCache = discoverLegacyPresetsDir()
+  return legacyCache
+}
+
+/** Absolute path of one mode's shipped composition in the legacy layout. */
+export function baseCompositionPath(modeId, directory = shippedPresetsDir()) {
+  return join(directory, modeId, 'agent.cordis.yml')
+}
+
+// ── route 2: the text was handed over by the host (dsh ≥ 0.1.7) ───────────────
+
+/** `id → composition text`, as fetched from `agentPresets.readDocument()`. */
+let injectedCompositions
+
+/**
+ * Hand over the base compositions the host declared.
+ *
+ * Called on every registry sync, so a host that gains or changes a preset is picked up without a restart.
+ * An empty/failed fetch clears the map rather than keeping a stale one — the caller logs the reason.
+ *
+ * @param {Map<string, string>|Record<string, string>|null} [compositions] - `id → entry-list YAML`.
+ */
+export function setBaseCompositions(compositions) {
+  if (compositions === null || compositions === undefined) {
+    injectedCompositions = undefined
+    return
+  }
+  const map = compositions instanceof Map ? compositions : new Map(Object.entries(compositions))
+  const clean = new Map()
+  for (const [id, text] of map) {
+    if (typeof id === 'string' && typeof text === 'string' && text.trim() !== '') clean.set(id, text)
+  }
+  injectedCompositions = clean.size > 0 ? clean : undefined
+}
+
+/** The host-provided text for one mode, when there is one. */
+export function injectedBaseComposition(modeId) {
+  return injectedCompositions === undefined ? undefined : injectedCompositions.get(modeId)
+}
+
+/** Which modes the host handed over — for the startup log and for tests. */
+export function injectedBaseCompositionIds() {
+  return injectedCompositions === undefined ? [] : [...injectedCompositions.keys()]
+}
+
+// ── route 4: the declarative declaration in its packaged form ─────────────────
+
+/** Directory injected for the patch-file layout. */
+let injectedPatchDir
+
+/** Point the resolver at a directory holding `<mode>.patch.yml`. */
+export function setPatchPresetsDir(dir) {
+  if (typeof dir === 'string' && dir !== '') injectedPatchDir = dir
+}
+
+/** Discovery result, cached only on success. */
+let patchCache
+
+/** `{ prefix, kind }` candidates for a global npm install of dsh, from this process' own node. */
+function executablePrefixes() {
+  const out = []
+  const dir = dirname(process.execPath)
+  // POSIX global install: <prefix>/lib/node_modules/@deepseek-ai/dsh
+  out.push(join(dir, '..', 'lib', 'node_modules', '@deepseek-ai', 'dsh'))
+  // Windows global install: <prefix>/node_modules/@deepseek-ai/dsh
+  out.push(join(dir, 'node_modules', '@deepseek-ai', 'dsh'))
+  // A node bundled inside an app (desktop shells): keep the app's own tree reachable.
+  out.push(join(dir, '..', 'node_modules', '@deepseek-ai', 'dsh'))
+  return out
+}
+
+/** `dsh` on PATH → its install root, so a non-standard prefix still resolves. */
+function pathDiscoveredDshRoots() {
+  const out = []
+  const entries = String(process.env.PATH ?? '').split(process.platform === 'win32' ? ';' : ':')
+  for (const entry of entries) {
+    if (entry === '') continue
+    for (const name of process.platform === 'win32' ? ['dsh.cmd', 'dsh.exe', 'dsh'] : ['dsh']) {
+      const candidate = join(entry, name)
+      if (!existsSync(candidate)) continue
+      out.push(join(entry, '..', 'lib', 'node_modules', '@deepseek-ai', 'dsh'))
+      out.push(join(entry, '..', 'node_modules', '@deepseek-ai', 'dsh'))
+    }
+  }
+  return out
+}
+
+/**
+ * Where `@deepseek-ai/dsh-web-app` ships `presets/<mode>.patch.yml`.
+ *
+ * Every candidate is verified by looking for a shipped base patch, so a wrong guess costs a stat call
+ * instead of a wrong answer.
+ *
+ * @returns {string|undefined} the presets directory, or undefined when nothing matched.
+ */
+export function discoverPatchPresetsDir() {
+  const candidates = []
+  // (a) Node resolution from this module: hits when the plugin sits in a tree that can see the host
+  //     (a source checkout with the host installed beside it, a flat profile, CI).
+  for (const spec of ['@deepseek-ai/dsh-web-app/package.json', '@deepseek-ai/dsh/package.json']) {
+    try {
+      candidates.push(dirname(createRequire(import.meta.url).resolve(spec)))
+    } catch {
+      /* fall through */
+    }
+  }
+  // (b) Walk up from this module's own directory — the same shape, for trees Node's resolver skips.
+  {
+    let here = dirname(fileURLToPath(import.meta.url))
+    for (let depth = 0; depth < 8; depth += 1) {
+      candidates.push(join(here, 'node_modules', '@deepseek-ai', 'dsh-web-app'))
+      candidates.push(join(here, 'node_modules', '@deepseek-ai', 'dsh'))
+      here = dirname(here)
+    }
+  }
+  // (c) The host's own module tree, reachable from the DSH home when the profile has real deps.
+  try {
+    const fromProfile = createRequire(join(dshHome(), 'profiles', 'package.json'))
+    candidates.push(dirname(fromProfile.resolve('@deepseek-ai/dsh-web-app/package.json')))
+    candidates.push(dirname(fromProfile.resolve('@deepseek-ai/dsh/package.json')))
+  } catch {
+    /* fall through */
+  }
+  for (const root of [...executablePrefixes(), ...pathDiscoveredDshRoots()]) {
+    candidates.push(join(root, 'node_modules', '@deepseek-ai', 'dsh-web-app'))
+    candidates.push(root)
+  }
+  for (const candidate of candidates) {
+    const presets = candidate.endsWith('dsh-web-app') ? join(candidate, 'presets') : join(candidate, 'node_modules', '@deepseek-ai', 'dsh-web-app', 'presets')
+    if (BASE_MODE_IDS.some((mode) => existsSync(join(presets, mode + '.patch.yml')))) return presets
+  }
+  return undefined
+}
+
+/**
+ * The patch-file presets directory.
+ *
+ * `DSH_PRESET_PATCH_DIR` is exclusive for the same reason as its legacy twin.
+ *
+ * @returns {string|undefined} undefined when no patch layout is present (not an error by itself).
+ */
+export function patchPresetsDir() {
+  const override = process.env[PATCH_DIR_ENV]
+  if (typeof override === 'string' && override !== '') return override
+  if (injectedPatchDir !== undefined) return injectedPatchDir
+  if (patchCache === undefined) {
+    const found = discoverPatchPresetsDir()
+    if (found !== undefined) patchCache = found
+    return found
+  }
+  return patchCache
+}
+
+/**
+ * Lift the `plugins:` sequence out of a declarative preset patch.
+ *
+ * The patch (`@deepseek-ai/dsh-web-app/presets/<mode>.patch.yml`) wraps the same row list this feature
+ * composes against:
+ *
+ *     - insert:
+ *         - id: preset-standard
+ *           name: '@deepseek-ai/dsh-agent-preset'
+ *           config:
+ *             id: standard
+ *             plugins:
+ *               - id: persona
+ *                 ...
+ *
+ * Text surgery, not a YAML round-trip — exactly like the composer it feeds: dedenting the block keeps
+ * comments, quoting and `!!js` byte-for-byte, and the result is already in the shape
+ * `splitSegments()`/`collectRows()` expect (top-level rows at column 0, nested rows at four spaces).
+ *
+ * @param {string} text - the patch file's contents.
+ * @returns {string|null} entry-list YAML, or null when the file carries no `plugins:` block.
+ */
+export function extractPluginsBlock(text) {
+  if (typeof text !== 'string' || text === '') return null
+  const lines = text.split('\n')
+  const start = lines.findIndex((line) => /^\s*plugins:\s*$/.test(line))
+  if (start === -1) return null
+  const base = lines[start].search(/\S/)
+  const out = []
+  for (let index = start + 1; index < lines.length; index += 1) {
+    const line = lines[index]
+    if (line.trim() === '') {
+      out.push('')
+      continue
+    }
+    const indent = line.search(/\S/)
+    if (indent <= base) break
+    out.push(line.slice(Math.min(base + 2, indent)))
+  }
+  while (out.length > 0 && out[0].trim() === '') out.shift()
+  while (out.length > 0 && out[out.length - 1].trim() === '') out.pop()
+  return out.length === 0 ? null : out.join('\n')
+}
+
+/** Absolute path of one mode's shipped patch, in the declarative layout. */
+export function basePatchPath(modeId, directory = patchPresetsDir()) {
+  return directory === undefined ? undefined : join(directory, modeId + '.patch.yml')
+}
+
+// ── the chain ────────────────────────────────────────────────────────────────
+
+/**
+ * Read one base mode's shipped composition, from whichever route this installation has.
+ *
+ * @param {string} modeId - one of {@link BASE_MODE_IDS}.
+ * @returns {{text: string, source: string}} the composition and where it came from (for the log).
+ * @throws {BaseCompositionUnavailableError} when no route yields text.
+ */
+export function readBaseCompositionText(modeId) {
+  const attempts = []
+
+  // 1. explicit legacy override: tried first, and it **suppresses discovery** (the point of an explicit
+  //    override is that the answer cannot wander to whatever else is installed). It does *not* suppress
+  //    step 2: a host that declares the composition knows better than a stale path in the environment.
+  const legacyOverride = process.env[LEGACY_DIR_ENV]
+  const legacyExplicit = typeof legacyOverride === 'string' && legacyOverride !== ''
+  if (legacyExplicit) {
+    const file = join(legacyOverride, modeId, 'agent.cordis.yml')
+    const text = tryReadFile(file, attempts, LEGACY_DIR_ENV + '=' + legacyOverride)
+    if (text !== null) return { text, source: LEGACY_DIR_ENV }
+  }
+
+  // 2. text handed over by the host (dsh ≥ 0.1.7): the authoritative answer on that line.
+  const injected = injectedBaseComposition(modeId)
+  if (injected !== undefined) return { text: injected, source: 'agentPresets.readDocument()' }
+
+  const patchOverride = process.env[PATCH_DIR_ENV]
+  const patchExplicit = typeof patchOverride === 'string' && patchOverride !== ''
+
+  if (legacyExplicit === false) {
+    // 3. injected legacy dir, then discovery
+    if (injectedLegacyDir !== undefined) {
+      const text = tryReadFile(join(injectedLegacyDir, modeId, 'agent.cordis.yml'), attempts, 'setShippedPresetsDir()')
+      if (text !== null) return { text, source: 'agentPresets.list() → presets 目录' }
+    } else {
+      try {
+        const dir = discoverLegacyPresetsDir()
+        const text = tryReadFile(join(dir, modeId, 'agent.cordis.yml'), attempts, '@deepseek-ai/dsh-agent-presets')
+        if (text !== null) return { text, source: '@deepseek-ai/dsh-agent-presets' }
+      } catch (error) {
+        attempts.push('@deepseek-ai/dsh-agent-presets：' + String((error && error.message) || error))
+      }
+    }
+  }
+
+  // 4. the declarative declaration in its packaged form
+  const patchDir = patchExplicit ? patchOverride : patchPresetsDir()
+  if (patchDir !== undefined) {
+    const file = join(patchDir, modeId + '.patch.yml')
+    const raw = tryReadFile(file, attempts, PATCH_DIR_ENV + '/发现 dsh-web-app')
+    if (raw !== null) {
+      const text = extractPluginsBlock(raw)
+      if (text !== null) return { text, source: 'dsh-web-app/presets/' + modeId + '.patch.yml' }
+      attempts.push(file + '：没有 plugins: 区块')
+    }
+  } else {
+    attempts.push('dsh-web-app/presets：未找到（可用 ' + PATCH_DIR_ENV + ' 指定）')
+  }
+
+  throw new BaseCompositionUnavailableError(modeId, attempts)
+}
+
+/** The same chain, one-line description of the outcome — for startup logs. */
+export function describeBaseCompositionSource(modeId) {
+  try {
+    return readBaseCompositionText(modeId).source
+  } catch (error) {
+    return '不可用（' + String((error && error.message) || error) + '）'
+  }
+}
+
+/** Exported for tests: forget every cached discovery result. */
+export function resetBaseCompositionCachesForTests() {
+  legacyCache = undefined
+  patchCache = undefined
+  injectedLegacyDir = undefined
+  injectedPatchDir = undefined
+  injectedCompositions = undefined
+}

package/client.js

@@ -86,7 +86,6 @@ try {
         "msg.createFailed": "创建失败",
         "msg.deleteFailed": "删除失败",
         "msg.nameRequired": "请先给新助手起个名字。",
-        "msg.unsaved": "有未保存的修改",
         "msg.readOnlyHint": "这一页只管理本工具创建的助手；手写的 preset 不在这里，也不会被改写。",
         "msg.reordered": "顺序已保存：新建会话时的模式选择器按这个顺序排列。",
         "msg.reorderFailed": "调整顺序失败",
@@ -101,6 +100,8 @@ try {
         "assistant.short": "每个助手是一个独立模式：自己的系统提示词、基础模式与插件开关。",
         "name.short": "改名只影响显示，内部标识与已有会话不受影响。",
         "mode.short": "底子决定「行集合」与工具能力；persona 行始终由本模式替换。",
+        "mode.unavailable": "本机这条 DSH 线没有可读的出厂组成，基础模式暂时不能切换。",
+        "rows.unavailable": "出厂组成取不到，插件开关暂时不能编辑；磁盘上原有的行状态仍然生效。",
         "mode.pendingRows": "底子已改为「{mode}」：保存后，下面的行列表会按新底子重算。",
         "rows.short": "逐行控制挂载哪些插件；没拨过的行保持官方默认。",
         "prompt.short": "这段文本就是本模式的系统提示词，保存后下一步生效。",
@@ -150,8 +151,11 @@ try {
         "api.deleteFailed": "删除失败：{detail}",
         "api.versionMissing": "找不到这个版本（历史可能已被上限裁剪）。",
         "api.badJson": "请求体不是合法 JSON",
+        "api.savedPromptOnly": "已保存系统提示词（本机取不到基础模式的出厂组成，插件开关与基础模式未改动）。",
+        "api.baseCompositionUnavailable": "本机取不到基础模式「{mode}」的出厂组成，无法改动插件开关或基础模式（系统提示词可以单独保存）。",
         "warn.approvalGateMissing": "审批闸门未启用：本机这个 DSH 版本没有 tools/pre-execute 事件，会话内改写系统提示词不会弹审批。见「详情」。",
         "warn.unresolvableRows": "有行在本机这条 DSH 线上无法解析：平台会把整个模式判为 broken，并从新会话的选择器里**静默丢弃**。点右侧的「按本线修复」即可（只关掉那几行，其它选择不动）。",
+        "warn.baseCompositionUnavailable": "取不到本机这条 DSH 线的出厂组成：基础模式与插件开关暂时不能改（系统提示词不受影响，照常可保存）。已尝试的途径写在宿主日志里。",
         "warn.approvalGateMissing.label": "审批闸门未启用",
         "warn.approvalGateMissing.hint": "这个 DSH 版本没有 tools/pre-execute 事件，会话内改写系统提示词**不会**弹审批。设置页不受影响；要恢复保护请升级 DSH，或把「custom_prompt 工具」那一行关掉。",
         "warn.personaOffWithPrompt": "「身份（系统提示词）」这一行是关的，所以 prompt.md 不会被注入 —— 你写的提示词现在不起作用。要么打开这一行，要么清空提示词。",
@@ -194,6 +198,7 @@ try {
         "btn.saving": "处理中…",
         "btn.reload": "重新读取",
         "btn.reloadDiscard": "放弃修改并重新读取",
+        "msg.unsaved": "有未保存的修改",
         "msg.loading": "正在读取…",
         "msg.notLoaded": "（尚未读取）",
         "msg.reread": "已重新读取",
@@ -294,7 +299,6 @@ try {
         "msg.createFailed": "Could not create",
         "msg.deleteFailed": "Could not delete",
         "msg.nameRequired": "Give the new assistant a name first.",
-        "msg.unsaved": "Unsaved changes",
         "msg.readOnlyHint": "This page manages only the assistants this tool created; a hand-written preset is not listed here and is never rewritten.",
         "msg.reordered": "Order saved: the mode picker for new sessions follows it.",
         "msg.reorderFailed": "Could not reorder",
@@ -309,6 +313,8 @@ try {
         "assistant.short": "Each assistant is its own mode: its own system prompt, base mode and plugin switches.",
         "name.short": "Renaming only changes what is displayed — not the internal id or existing sessions.",
         "mode.short": "The base decides the row set and tool abilities; the persona row is always replaced by this mode.",
+        "mode.unavailable": "This DSH line exposes no readable shipped composition, so the base mode cannot be switched right now.",
+        "rows.unavailable": "No shipped composition is available, so the plugin switches cannot be edited right now; the row states already on disk still apply.",
         "mode.pendingRows": "Base changed to {mode}: the row list below is recomputed from the new base when you save.",
         "rows.short": "Control which plugins this mode mounts, row by row; untouched rows keep the shipped default.",
         "prompt.short": "Saving this text makes it the system prompt of this mode, and it takes effect on the next step.",
@@ -358,6 +364,8 @@ try {
         "api.deleteFailed": "Delete failed: {detail}",
         "api.versionMissing": "That version is gone (the history is capped).",
         "api.badJson": "The request body is not valid JSON",
+        "api.savedPromptOnly": "System prompt saved (this machine exposes no shipped composition, so the plugin switches and the base mode were left untouched).",
+        "api.baseCompositionUnavailable": "No shipped composition for base mode \"{mode}\" on this machine, so its plugin switches and base mode cannot be changed (the system prompt can still be saved on its own).",
         "warn.personaOffWithPrompt": "The \"Identity (system prompt)\" row is off, so prompt.md is never injected — the prompt you wrote has no effect. Turn the row on, or clear the prompt.",
         "warn.toolOff": "The \"custom_prompt tool\" row is off: the agent cannot change the prompt from inside a session, only this page can.",
         "warn.noDescription": "No description: the new-session mode picker will show it as \"no description yet\".",
@@ -366,6 +374,7 @@ try {
         "warn.approvalGateMissing.label": "Approval gate is off",
         "warn.approvalGateMissing.hint": "This DSH build has no tools/pre-execute event, so in-session prompt rewrites do NOT ask for approval. The settings page is unaffected; upgrade DSH or turn the custom_prompt tool row off to restore the gate.",
         "warn.noName": "No name: the mode picker will show the directory id (e.g. custom).",
+        "warn.baseCompositionUnavailable": "This DSH line exposes no shipped composition: the base mode and the plugin switches cannot be changed right now (the system prompt is unaffected and still saves). The routes that were tried are in the host log.",
         "history.label": "Change history",
         "history.pick": "Pick a version to load…",
         "history.load": "Load this version",
@@ -402,6 +411,7 @@ try {
         "btn.saving": "Working…",
         "btn.reload": "Reload",
         "btn.reloadDiscard": "Discard edits and reload",
+        "msg.unsaved": "Unsaved changes",
         "msg.loading": "Loading…",
         "msg.notLoaded": "(not loaded)",
         "msg.reread": "Reloaded",
@@ -770,6 +780,9 @@ try {
         return {
           id: state.id,
           mode: state.mode,
+          // 出厂组成取不到时的降级标记（服务端给，只读）。它不是用户可改的字段，sameDraft 不比较它。
+          baseUnavailable:
+            state.baseUnavailable === undefined || state.baseUnavailable === null ? null : state.baseUnavailable,
           overrides: { ...state.overrides },
           prompt: state.prompt,
           name: typeof state.name === "string" ? state.name : "",
@@ -1673,22 +1686,28 @@ try {
                   onToggleExpand: toggleRowExpanded,
                   t: t,
                 }),
-                react.createElement(
-                  "div",
-                  { className: "cpfe-pills" },
-                  payload.modes.map((mode) =>
-                    react.createElement(
-                      A.Pill,
-                      { key: mode.id, active: draft.mode === mode.id, onClick: () => pickMode(mode.id) },
-                      t("base." + mode.id + ".label", mode.label),
+                // 降级态（本机这条线没有可读的出厂组成）：不给可点的模式药丸，改说一句为什么 ——
+                // 点了也只会拿到一个服务端错误，那比置灰更糟。
+                draft.baseUnavailable !== null
+                  ? react.createElement("p", { className: "cpfe-note" }, t("mode.unavailable"))
+                  : react.createElement(
+                      "div",
+                      { className: "cpfe-pills" },
+                      payload.modes.map((mode) =>
+                        react.createElement(
+                          A.Pill,
+                          { key: mode.id, active: draft.mode === mode.id, onClick: () => pickMode(mode.id) },
+                          t("base." + mode.id + ".label", mode.label),
+                        ),
+                      ),
+                    ),
+                draft.baseUnavailable !== null
+                  ? null
+                  : react.createElement(
+                      "p",
+                      { className: "cpfe-note" },
+                      payload.modes.reduce((note, mode) => (mode.id === draft.mode ? t("base." + mode.id + ".note", mode.note) : note), ""),
                     ),
-                  ),
-                ),
-                react.createElement(
-                  "p",
-                  { className: "cpfe-note" },
-                  payload.modes.reduce((note, mode) => (mode.id === draft.mode ? t("base." + mode.id + ".note", mode.note) : note), ""),
-                ),
                 // 底子改过但还没保存时明说一句：行列表是按**已保存**的组成渲染的，审阅把它记成了"点了没反应"。
                 draft.mode !== savedMode
                   ? react.createElement(
@@ -1710,15 +1729,17 @@ try {
                   onToggleExpand: toggleRowExpanded,
                   t: t,
                 }),
-                react.createElement(RowList, {
-                  expanded: expandedRows,
-                  onToggleExpand: toggleRowExpanded,
-                  rows: payload.rows,
-                  overrides: draft.overrides,
-                  onToggle: (id, next) => update({ overrides: { ...draft.overrides, [id]: next } }),
-                  depth: 0,
-                  t: t,
-                }),
+                draft.baseUnavailable !== null
+                  ? react.createElement("p", { className: "cpfe-note" }, t("rows.unavailable"))
+                  : react.createElement(RowList, {
+                      expanded: expandedRows,
+                      onToggleExpand: toggleRowExpanded,
+                      rows: payload.rows,
+                      overrides: draft.overrides,
+                      onToggle: (id, next) => update({ overrides: { ...draft.overrides, [id]: next } }),
+                      depth: 0,
+                      t: t,
+                    }),
               ),
               react.createElement(
                 "section",

package/composition.mjs

@@ -22,51 +22,32 @@
  * output always carries a timestamp comment.
  */
 
-import { readFileSync, existsSync } from 'node:fs'
-import { createRequire } from 'node:module'
-import { dirname } from 'node:path'
-import { fileURLToPath } from 'node:url'
+import { readFileSync, existsSync, readdirSync } from 'node:fs'
 import { join } from 'node:path'
-import { dshHome } from './paths.mjs'
+
+// 出厂组成「从哪来」是两条 dsh 线唯一还没收进后端的一处：旧线是文件，0.1.7 是
+// agentPresets.readDocument()。解析链整个搬到了 base-composition.mjs（含它的理由与实测），
+// 本模块只消费它 —— 合成与排版手术仍然全部发生在这里。
+import {
+  baseCompositionPath,
+  readBaseCompositionText,
+  setShippedPresetsDir,
+  shippedPresetsDir,
+} from './base-composition.mjs'
+
+export { baseCompositionPath, setShippedPresetsDir, shippedPresetsDir } from './base-composition.mjs'
+export {
+  BaseCompositionUnavailableError,
+  isBaseCompositionUnavailable,
+  setBaseCompositions,
+} from './base-composition.mjs'
 
 /**
- * Directory holding the shipped preset folders (`standard`, `ptc`, …),
- * discovered once and cached.
- *
- * Resolved from the installed `dsh-agent-presets` package rather than a
- * hard-coded install path, so this works on any machine layout. The chain is:
- *
- *   <harness>/dsh-agent-presets/presets/custom/prompt-reader.mjs   ← this preset
- *   <harness>/dsh-agent-presets/presets/                           ← what we want
+ * 出厂组成的解析在 base-composition.mjs（见那里的解析顺序与实测依据）。
  *
- * The preset directory is the FIRST place `prompt-reader.mjs` exists walking up
- * from here: `preset/` in a source checkout does not carry that file. Discovery
- * is deferred to first use so importing this module never throws.
+ * 这里曾经只有一条路：`require.resolve('@deepseek-ai/dsh-agent-presets')`。0.1.7 起那个包不再发布，
+ * 于是这条路必然抛错，而调用方把它变成了整页 500 —— 设置页在官方桌面端内置的那条线上整体不可用。
  */
-let shippedPresetsCache
-function discoverShippedPresets() {
-  const require = createRequire(import.meta.url)
-  // 1) Node 解析：插件安装在能看见 harness 依赖的位置时直接命中。
-  try {
-    const manifest = require.resolve('@deepseek-ai/dsh-agent-presets/package.json')
-    return join(dirname(manifest), 'presets')
-  } catch {
-    /* fall through */
-  }
-  // 2) profile 的 node_modules：dsh 把 harness 包放在 <dshHome>/profiles/node_modules，
-  //    这里独立于「roster 是否给出 system 行」的形状，是 agentPresets 之外的第二条路。
-  try {
-    const fromProfile = createRequire(join(dshHome(), 'profiles', 'package.json'))
-    const manifest = fromProfile.resolve('@deepseek-ai/dsh-agent-presets/package.json')
-    return join(dirname(manifest), 'presets')
-  } catch {
-    /* fall through */
-  }
-  throw new Error(
-    '无法定位出厂基础模式。已尝试：agentPresets 的 system 预设路径、Node 解析、profile 的 node_modules。' +
-      '若 DSH 改了包布局，请用 DSH_SHIPPED_PRESETS_DIR 指向 presets 目录。',
-  )
-}
 
 /**
  * Base modes a user may build on.
@@ -136,44 +117,21 @@ export const ROW_META = {
   'persistent-pwsh': { label: '持久 pwsh' },
 }
 
-/** Absolute path of the shipped composition for a base mode. */
-export function baseCompositionPath(modeId) {
-  return join(shippedPresetsDir(), modeId, 'agent.cordis.yml')
-}
+/** 出厂组成的路径与解析链都在 base-composition.mjs（下面按名字再导出，调用点不必分支）。 */
 
 /**
- * Resolve the shipped-preset directory.
+ * Read one base mode's shipped composition text.
  *
- * A test (or a source checkout, where the shipped presets are not beside this
- * module) may override it through `DSH_SHIPPED_PRESETS_DIR`; otherwise it is
- * discovered from the installed `dsh-agent-presets` package.
- */
-/** Directory injected by the host half, which resolves it via the agentPresets service. */
-let injectedShippedDir
-/**
- * Point the compiler at a shipped-preset directory discovered at runtime.
+ * The chain — explicit override → text handed over by the host (`readDocument`) → legacy presets
+ * directory → packaged `dsh-web-app` patch — lives in base-composition.mjs, so every route can be
+ * tested on its own and the failure carries a `code` instead of a bare message.
  *
- * The host half does this from `agentPresets.list()` (system-trust rows carry
- * absolute paths), which is layout-independent. Deriving the directory from this
- * module's own location does NOT work: this module is loaded from the plugin's
- * install directory, not from inside a preset, so no amount of walking up finds
- * the shipped presets.
+ * @param {string} modeId - one of {@link BASE_MODES}.
+ * @returns {string} the entry-list YAML of that base mode.
+ * @throws {BaseCompositionUnavailableError} when no route yields text (callers degrade, see index.mjs).
  */
-export function setShippedPresetsDir(dir) {
-  if (typeof dir === 'string' && dir !== '') injectedShippedDir = dir
-}
-
-export function shippedPresetsDir() {
-  const override = process.env.DSH_SHIPPED_PRESETS_DIR
-  if (override !== undefined && override !== '') return override
-  if (injectedShippedDir !== undefined) return injectedShippedDir
-  if (shippedPresetsCache === undefined) shippedPresetsCache = discoverShippedPresets()
-  return shippedPresetsCache
-}
-
-/** Read one base mode's shipped composition text. */
 export function readBaseComposition(modeId) {
-  return readFileSync(baseCompositionPath(modeId), 'utf8')
+  return readBaseCompositionText(modeId).text
 }
 
 /**
@@ -701,9 +659,11 @@ export function knownModuleNamesInjected() {
 }
 
 export function unresolvableRows(text) {
-  let root
+  /** 可能装着生态包的那些 `node_modules`（等价于根，见下面的嵌套形态）。 */
+  let roots = []
   let fromFilesystem = false
   if (knownModuleNames === null) {
+    let root
     try {
       root = join(shippedPresetsDir(), '..', '..', '..')
       fromFilesystem = true
@@ -713,6 +673,19 @@ export function unresolvableRows(text) {
     // **判断不了就不要报警**：如果这个根下根本没有 node_modules（例如测试用的是一个临时出厂目录），
     // 那么"查不到某个包"只说明我们不知道，不说明那行坏了。误报的代价是用户被引导去关掉本来正常的行。
     if (existsSync(join(root, '@deepseek-ai')) === false) return []
+    roots = [root]
+    // ★ 依赖**嵌套**安装时（实测：npm 装 @deepseek-ai/dsh@0.1.7-rc.2，81 个生态包落在
+    //   `node_modules/@deepseek-ai/dsh/node_modules/@deepseek-ai/…` 而不是仓库根），只看根会把
+    //   **每一行**都报成"本机装不了" —— 一个把健康预设说成 broken、并引导用户关掉正常行的假警报。
+    //   所以把根下每个包自己的 node_modules 也算进去。
+    try {
+      for (const entry of readdirSync(join(root, '@deepseek-ai'))) {
+        const nested = join(root, '@deepseek-ai', entry, 'node_modules')
+        if (existsSync(join(nested, '@deepseek-ai'))) roots.push(nested)
+      }
+    } catch {
+      /* 读不了目录就只用根，与从前一致 */
+    }
   }
   const out = []
   const lines = text.split('\n')
@@ -752,7 +725,7 @@ export function unresolvableRows(text) {
     // 注入了集合就用集合（新线：来自 compositionInventory 的 moduleName）——
     // 子路径说明符（`@scope/pkg/sub`）与它的包名都算命中，否则会把健康行误报成坏行。
     const present = fromFilesystem
-      ? existsSync(join(root, pkg))
+      ? roots.some((each) => existsSync(join(each, pkg)))
       : knownModuleNames.has(name) || knownModuleNames.has(pkg)
     if (present === false) out.push({ id: row[2], name })
   }

package/index.mjs

@@ -1,11 +1,12 @@
 /**
  * Host half: the 「自定义模式」 settings page — an ASSISTANT MANAGER.
  *
- * It registers five exact routes on the platform's shared `/api` channel; the browser half calls them
- * with `fetch`:
+ * It registers seven exact routes on the platform's shared `/api` channel; the browser half calls
+ * them with `fetch`:
  *
  *   GET  /api/custom-mode              — every assistant this feature manages.
  *   GET  /api/custom-mode/state?id=…   — one assistant: base mode, rows, switches, prompt.
+ *   GET  /api/custom-mode/history?id=…&n=… — one prompt revision (metadata comes with the state).
  *   POST /api/custom-mode/state        — { id, mode, overrides, prompt, name, description }:
  *                                        validate, render a fresh `agent.cordis.yml`, write both files.
  *   POST /api/custom-mode/create       — { name, description }: seed a new assistant from the
@@ -13,6 +14,7 @@
  *   POST /api/custom-mode/delete       — { id }: remove a locally authored assistant.
  *   POST /api/custom-mode/reorder      — { id, direction }: move one assistant up/down in the
  *                                        picker order by writing `order` into each `preset.yml`.
+ *   POST /api/custom-mode/repair       — { id }: turn off the rows this dsh line cannot resolve.
  *
  * **Why `/api` and not the raw `webServer` table**: the carrier that owns the `/api` channel applies the
  * platform's trust and authentication policy — loopback/`trustedHosts` Host check, `Sec-Fetch-Site`,
@@ -24,7 +26,7 @@
  * route answered 401; a plain form post needs no preflight, so CORS would not have helped either). The
  * registered paths are absolute *including* `/api`, which is what the platform's own packages pass.
  *
- * **Why exact routes rather than one prefix**: the Fetch registry matches exact paths. Five registrations
+ * **Why exact routes rather than one prefix**: the Fetch registry matches exact paths. Seven registrations
  * cost nothing and each declares the methods it owns, so the method table doubles as the guarantee that a
  * prefetched `GET …/create` cannot create anything — that method is simply not registered for that path.
  *
@@ -53,15 +55,17 @@ import {
   BASE_MODES,
   collectRows,
   disableRowsInPlace,
+  isBaseCompositionUnavailable,
   modeOf,
   overridesOf,
   readBaseComposition,
   setKnownModuleNames,
   renderComposition,
+  setBaseCompositions,
   setShippedPresetsDir,
   unresolvableRows,
 } from './composition.mjs'
-import { readPresetMeta, writePresetMeta, presetMetaPath, PRESET_META_PATH } from './meta.mjs'
+import { presetMetaText, readPresetMeta, writePresetMeta, presetMetaPath, PRESET_META_PATH } from './meta.mjs'
 import { listHistory, readVersion, recordExternalChange, recordPrompt, HISTORY_SOURCE } from './journal.mjs'
 import { packagedPresetDir, starterComposition } from './seed.mjs'
 import {
@@ -303,13 +307,27 @@ export function readState(rows, id, options = {}) {
       /* 审计留痕失败不影响读取 */
     }
   }
+  // 本机这条线给不给得出「出厂组成」？给不出来时**降级**而不是把整页打成 500：
+  // 提示词与名字照常可读可写，只有基础模式与插件开关不可编辑（0.1.7 上曾经整页不可用）。
+  let rowTree = []
+  let overrides = {}
+  let baseUnavailable = null
+  try {
+    rowTree = collectRows(text)
+    overrides = overridesOf(text, mode)
+  } catch (error) {
+    if (!isBaseCompositionUnavailable(error)) throw error
+    baseUnavailable = { code: error.code, params: { mode, detail: describe(error) } }
+  }
   return {
     ok: true,
     id,
     mode,
     modes: BASE_MODES,
-    rows: collectRows(text),
-    overrides: overridesOf(text, mode),
+    rows: rowTree,
+    overrides,
+    // 页面据此把「基础模式 / 插件开关」两块显示成不可用，并把原因说成人话。
+    ...baseUnavailable === null ? {} : { baseUnavailable },
     prompt: prompt.ok === true ? prompt.text : '',
     ...prompt.ok === true ? {} : { promptError: prompt.error },
     name: meta.name,
@@ -333,6 +351,8 @@ export function readState(rows, id, options = {}) {
       ...(existsSync(join(directory, 'approval-gate-missing')) ? ['approvalGateMissing'] : []),
       // 本线无法解析的启用行 = 平台会把整个预设判为 broken 并从选择器里丢掉（曾经的 P0）。
       ...(unresolvableRows(text).length > 0 ? ['unresolvableRows'] : []),
+      // 出厂组成取不到：提示词能改，基础模式与插件开关不能。
+      ...(baseUnavailable === null ? [] : ['baseCompositionUnavailable']),
     ],
   }
 }
@@ -373,6 +393,49 @@ function serializedWrite(key, work) {
   return next
 }
 
+/**
+ * 降级保存：只写提示词与元数据，组成文件一字不动。
+ *
+ * 什么时候会走到这里：本机这条 dsh 线既没有旧线的 presets 目录，也没有可用的
+ * `readDocument()`（见 base-composition.mjs 的解析链）。此时「基础模式 / 插件开关」在页面上已经
+ * 不可编辑，而用户真正想保存的那段提示词没有任何理由跟着一起失败 —— 组成文件不动，模式在平台上
+ * 的行集合也就不变，这是所有选项里破坏性最小的一个。
+ *
+ * @param {string} directory - the assistant's preset directory.
+ * @param {{id: string, mode: string, prompt: string, name: string, description: string}} input - the validated save.
+ * @returns {object} the shape `saveState` returns, with `code: 'savedPromptOnly'`.
+ */
+export function savePromptOnly(directory, { id, mode, prompt, name, description }) {
+  // 与正常保存同一条纪律：提示词与 preset.yml 一起换名，失败则两个都不动。
+  let metaText = null
+  if (name !== '') {
+    const rendered = presetMetaText(name, description, directory)
+    if (rendered.ok !== true) return rendered
+    metaText = rendered.text
+  }
+  try {
+    writeAtomicPair([
+      [promptFile(directory), prompt],
+      ...metaText === null ? [] : [[presetMetaPath(directory), metaText]],
+    ])
+  } catch (error) {
+    return { ok: false, code: 'writeFailed', params: { detail: describe(error) }, error: '写入失败：' + describe(error) }
+  }
+  try {
+    recordPrompt(directory, prompt, HISTORY_SOURCE.settings)
+  } catch {
+    /* 审计记录失败不影响保存本身 */
+  }
+  return {
+    ok: true,
+    id,
+    mode,
+    code: 'savedPromptOnly',
+    params: { name: name === '' ? id : name, mode },
+    note: '已保存系统提示词（本机取不到基础模式的出厂组成，插件开关与基础模式未改动）。新建会话即生效。',
+  }
+}
+
 export function saveState(rows, input) {
   const id = input !== null && typeof input === 'object' && typeof input.id === 'string' ? input.id : ''
   const directory = assistantDir(rows, id)
@@ -420,6 +483,21 @@ export function saveState(rows, input) {
   try {
     composition = renderComposition(mode, overrides, { modeName: name, assistantId: id })
   } catch (error) {
+    // 拿不到出厂组成：这一页**降级**但不能全废 —— 提示词仍可单独保存（组成文件原样不动）。
+    // 页面在降级态下把基础模式与开关都设为不可编辑，所以开关集合必为空；HTTP API 直接调用
+    // 还想改开关时明确拒绝，而不是悄悄丢掉用户的意图。
+    if (isBaseCompositionUnavailable(error)) {
+      if (overrides.size === 0 && existsSync(compositionFile(directory))) {
+        return savePromptOnly(directory, { id, mode, prompt, name, description })
+      }
+      return {
+        ok: false,
+        code: error.code,
+        params: { mode, detail: describe(error) },
+        error:
+          '本机取不到基础模式「' + mode + '」的出厂组成，无法改动插件开关或基础模式（提示词可以单独保存）。',
+      }
+    }
     return { ok: false, code: 'renderFailed', params: { detail: describe(error) }, error: '生成组成文件失败：' + describe(error) }
   }
 
@@ -432,12 +510,21 @@ export function saveState(rows, input) {
     return { ok: false, code: 'selfCheckFailed', params: { detail: describe(error) }, error: '生成结果自检失败，已放弃写入：' + describe(error) }
   }
 
+  // 三个文件必须一起换名（issue #5）：组成、提示词、preset.yml。此前 preset.yml 是**单独**写的，
+  // 它失败时磁盘上已经是"新提示词 + 旧名字"，而页面报"保存失败"—— 页面又不会重读，于是它永远停在
+  // 旧草稿上，用户以为没保存成功。现在三份先各自写进临时文件，再一起 rename；准备阶段失败则一个都不动。
+  // 名字为空时**不动** preset.yml：空的 name 标量会让这个模式在所有选择器里退化成裸目录 id。
+  let metaText = null
+  if (name !== '') {
+    const rendered = presetMetaText(name, description, directory)
+    if (rendered.ok !== true) return rendered
+    metaText = rendered.text
+  }
   try {
-    // 组成文件与提示词必须一起更新：先都写进临时文件再一起换名，失败时不会留下"新组成 + 旧提示词"
-    // 这种混合状态（审阅指出原先两次独立原子写之间存在这个窗口）。
     writeAtomicPair([
       [compositionFile(directory), composition],
       [promptFile(directory), prompt],
+      ...metaText === null ? [] : [[presetMetaPath(directory), metaText]],
     ])
   } catch (error) {
     return { ok: false, code: 'writeFailed', params: { detail: describe(error) }, error: '写入失败：' + describe(error) }
@@ -455,13 +542,6 @@ export function saveState(rows, input) {
     /* 审计记录失败不影响保存本身 */
   }
 
-  // A name the user cleared is left alone rather than written as an empty scalar:
-  // an empty `preset.yml` name is what makes a mode render as its bare id.
-  if (name !== '') {
-    const metaResult = writePresetMeta(name, description, directory)
-    if (metaResult.ok !== true) return metaResult
-  }
-
   return {
     ok: true,
     id,
@@ -555,6 +635,14 @@ export function createAssistant(rows, input, templateDir = packagedPresetDir())
     // 与保存路径的 `renderFailed` 同一套：**每个**用户可见的结果都要带 `code`，否则页面无从本地化
     // —— client.js 的 apiText 在没有 code 时直接退回下面这串中文，英文界面会在这一刻掉回中文
     // （AGENTS.md 第 13 条）。这条曾经是宿主半唯一漏掉 code 的普通返回。
+    if (isBaseCompositionUnavailable(error)) {
+      return {
+        ok: false,
+        code: error.code,
+        params: { mode: 'standard', detail: describe(error) },
+        error: '本机取不到出厂组成，暂时无法新建助手。',
+      }
+    }
     return { ok: false, code: 'renderFailed', params: { detail: describe(error) }, error: '生成组成文件失败：' + describe(error) }
   }
 
@@ -749,6 +837,9 @@ export function apply(ctx) {
       ['connection.fetch.register()', () => typeof scope.connection?.fetch?.register === 'function'],
     ]
     const OPTIONAL_APIS = [
+      // 出厂组成的来源（新线）：由宿主交出声明 YAML。缺了它插件仍能注册/同步，只是设置页里
+      // 「基础模式 / 插件开关」会降级为不可编辑（提示词照常）—— 所以它是可选能力。
+      ['agentPresets.readDocument()', () => typeof scope.agentPresets?.readDocument === 'function'],
       // 旧线的文件系统语义；新线由 preset-backend 的 declarative 后端用 disposer 补上。
       ['agentPresets.remove()', () => typeof scope.agentPresets?.remove === 'function'],
       ['agentPresets.copy()', () => typeof scope.agentPresets?.copy === 'function'],
@@ -785,7 +876,7 @@ export function apply(ctx) {
     let shippedReady = null
     const ensureShipped = () => {
       if (shippedReady === null) {
-        shippedReady = (async () => {
+        const attempt = (async () => {
           try {
             const rows = await scope.agentPresets.list()
             const system = rows.find((row) => row.trust === 'system' && typeof row.path === 'string')
@@ -795,6 +886,10 @@ export function apply(ctx) {
             console.error('custom-mode: 无法从 roster 解析出厂预设目录：' + describe(error))
           }
         })()
+        // 失败不缓存：旧线之外这条路本就可能没有 system 行，但一次**抛错**不该变成
+        // "整个进程生命周期内都不再解析"。
+        attempt.catch(() => { shippedReady = null })
+        shippedReady = attempt
       }
       return shippedReady
     }
@@ -853,6 +948,28 @@ export function apply(ctx) {
           console.error('custom-mode: 读取 compositionInventory 失败（回退文件系统判定）: ' + describe(error))
         }
       }
+      // 出厂组成：新线上唯一的来源是宿主自己（readDocument）。取到就交给 composer；取不到就交给
+      // 降级路径。两种情况都不阻塞下面的注册表同步 —— 模式可用优先于设置页完整。
+      if (declarative !== null) {
+        try {
+          const bases = await declarative.fetchBaseCompositions(BASE_MODES.map((mode) => mode.id))
+          setBaseCompositions(bases.fetched)
+          if (bases.fetched.size > 0) {
+            console.log(
+              'custom-mode: 已取回 ' + String(bases.fetched.size) + ' 个基础模式的出厂组成（' +
+                [...bases.fetched.keys()].join('、') + '）',
+            )
+          }
+          if (bases.problems.length > 0) {
+            console.error(
+              'custom-mode: 取不到这些基础模式的出厂组成 —— ' + bases.problems.join('；') +
+                '。对应模式仍可编辑提示词，基础模式与插件开关会显示为不可用。',
+            )
+          }
+        } catch (error) {
+          console.error('custom-mode: 取回出厂组成时出错（已忽略）: ' + describe(error))
+        }
+      }
       if (declarative === null) return
       try {
         const rows = await rawRoster()

package/locales.mjs

@@ -60,6 +60,8 @@ export const zh = {
   'assistant.short': '每个助手是一个独立模式：自己的系统提示词、基础模式与插件开关。',
   'name.short': '改名只影响显示，内部标识与已有会话不受影响。',
   'mode.short': '底子决定「行集合」与工具能力；persona 行始终由本模式替换。',
+  'mode.unavailable': '本机这条 DSH 线没有可读的出厂组成，基础模式暂时不能切换。',
+  'rows.unavailable': '出厂组成取不到，插件开关暂时不能编辑；磁盘上原有的行状态仍然生效。',
   'mode.pendingRows': '底子已改为「{mode}」：保存后，下面的行列表会按新底子重算。',
   'rows.short': '逐行控制挂载哪些插件；没拨过的行保持官方默认。',
   'prompt.short': '这段文本就是本模式的系统提示词，保存后下一步生效。',
@@ -109,8 +111,11 @@ export const zh = {
   'api.deleteFailed': '删除失败：{detail}',
   'api.versionMissing': '找不到这个版本（历史可能已被上限裁剪）。',
   'api.badJson': '请求体不是合法 JSON',
+  'api.savedPromptOnly': '已保存系统提示词（本机取不到基础模式的出厂组成，插件开关与基础模式未改动）。',
+  'api.baseCompositionUnavailable': '本机取不到基础模式「{mode}」的出厂组成，无法改动插件开关或基础模式（系统提示词可以单独保存）。',
   'warn.approvalGateMissing': '审批闸门未启用：本机这个 DSH 版本没有 tools/pre-execute 事件，会话内改写系统提示词不会弹审批。见「详情」。',
   'warn.unresolvableRows': '有行在本机这条 DSH 线上无法解析：平台会把整个模式判为 broken，并从新会话的选择器里**静默丢弃**。点右侧的「按本线修复」即可（只关掉那几行，其它选择不动）。',
+  'warn.baseCompositionUnavailable': '取不到本机这条 DSH 线的出厂组成：基础模式与插件开关暂时不能改（系统提示词不受影响，照常可保存）。已尝试的途径写在宿主日志里。',
   'warn.approvalGateMissing.label': '审批闸门未启用',
   'warn.approvalGateMissing.hint': '这个 DSH 版本没有 tools/pre-execute 事件，会话内改写系统提示词**不会**弹审批。设置页不受影响；要恢复保护请升级 DSH，或把「custom_prompt 工具」那一行关掉。',
   'warn.personaOffWithPrompt': '「身份（系统提示词）」这一行是关的，所以 prompt.md 不会被注入 —— 你写的提示词现在不起作用。要么打开这一行，要么清空提示词。',
@@ -286,6 +291,8 @@ export const en = {
   'assistant.short': 'Each assistant is its own mode: its own system prompt, base mode and plugin switches.',
   'name.short': 'Renaming only changes what is displayed — not the internal id or existing sessions.',
   'mode.short': 'The base decides the row set and tool abilities; the persona row is always replaced by this mode.',
+  'mode.unavailable': 'This DSH line exposes no readable shipped composition, so the base mode cannot be switched right now.',
+  'rows.unavailable': 'No shipped composition is available, so the plugin switches cannot be edited right now; the row states already on disk still apply.',
   'mode.pendingRows': 'Base changed to {mode}: the row list below is recomputed from the new base when you save.',
   'rows.short': 'Control which plugins this mode mounts, row by row; untouched rows keep the shipped default.',
   'prompt.short': 'Saving this text makes it the system prompt of this mode, and it takes effect on the next step.',
@@ -335,6 +342,8 @@ export const en = {
   'api.deleteFailed': 'Delete failed: {detail}',
   'api.versionMissing': 'That version is gone (the history is capped).',
   'api.badJson': 'The request body is not valid JSON',
+  'api.savedPromptOnly': 'System prompt saved (this machine exposes no shipped composition, so the plugin switches and the base mode were left untouched).',
+  'api.baseCompositionUnavailable': 'No shipped composition for base mode "{mode}" on this machine, so its plugin switches and base mode cannot be changed (the system prompt can still be saved on its own).',
   'warn.personaOffWithPrompt': 'The "Identity (system prompt)" row is off, so prompt.md is never injected — the prompt you wrote has no effect. Turn the row on, or clear the prompt.',
   'warn.toolOff': 'The "custom_prompt tool" row is off: the agent cannot change the prompt from inside a session, only this page can.',
   'warn.noDescription': 'No description: the new-session mode picker will show it as "no description yet".',
@@ -343,6 +352,7 @@ export const en = {
   'warn.approvalGateMissing.label': 'Approval gate is off',
   'warn.approvalGateMissing.hint': 'This DSH build has no tools/pre-execute event, so in-session prompt rewrites do NOT ask for approval. The settings page is unaffected; upgrade DSH or turn the custom_prompt tool row off to restore the gate.',
   'warn.noName': 'No name: the mode picker will show the directory id (e.g. custom).',
+  'warn.baseCompositionUnavailable': 'This DSH line exposes no shipped composition: the base mode and the plugin switches cannot be changed right now (the system prompt is unaffected and still saves). The routes that were tried are in the host log.',
   'history.label': 'Change history',
   'history.pick': 'Pick a version to load…',
   'history.load': 'Load this version',

package/meta.mjs

@@ -95,19 +95,21 @@ function yamlScalar(value) {
 }
 
 /**
- * Write `preset.yml` with a display name and optional description.
+ * Render the exact bytes `writePresetMeta` would write, without writing them.
  *
- * The name is required: an empty one would render the mode as its bare directory
- * id everywhere.
+ * Why it is exported: the settings page writes the composition, the prompt **and** this file, and a review
+ * found the third one landing separately — so a failure while writing `preset.yml` left a new prompt with
+ * the old name on disk while the page reported "save failed" (issue #5). All three now go through one
+ * staged atomic write; that requires the text, not a second writer.
  *
- * @param {string} name - display name.
+ * @param {string} name - display name (required).
  * @param {string|undefined} description - optional description.
- * @param {string} [directory] - the preset directory (defaults to the legacy `custom`).
- * @param {{order?: number}} [options] - roster position. Omitted means "keep whatever is on
- *   disk": a rename must never reshuffle the pickers.
- * @returns {{ok: true, name: string} | {ok: false, error: string}} the outcome.
+ * @param {string} directory - the preset directory (for the existing `order`).
+ * @param {{order?: number}} [options] - explicit roster position.
+ * @returns {{ok: true, text: string, name: string} | {ok: false, code: string, error: string}} the bytes and the
+ *   normalized name, or why there are none.
  */
-export function writePresetMeta(name, description, directory = PRESET_DIR, options = {}) {
+export function presetMetaText(name, description, directory = PRESET_DIR, options = {}) {
   const cleanName = typeof name === 'string' ? name.replace(/\r?\n/g, ' ').trim() : ''
   if (cleanName === '') return { ok: false, code: 'nameRequired', error: '模式名称不能为空。' }
   const lines = ['name: ' + yamlScalar(cleanName)]
@@ -118,10 +120,29 @@ export function writePresetMeta(name, description, directory = PRESET_DIR, optio
   const order =
     typeof requested === 'number' && Number.isFinite(requested) ? Math.trunc(requested) : readPresetMeta(directory).order
   if (order !== undefined) lines.push('order: ' + String(order))
+  return { ok: true, text: lines.join('\n') + '\n', name: cleanName }
+}
+
+/**
+ * Write `preset.yml` with a display name and optional description.
+ *
+ * The name is required: an empty one would render the mode as its bare directory
+ * id everywhere.
+ *
+ * @param {string} name - display name.
+ * @param {string|undefined} description - optional description.
+ * @param {string} [directory] - the preset directory (defaults to the legacy `custom`).
+ * @param {{order?: number}} [options] - roster position. Omitted means "keep whatever is on
+ *   disk": a rename must never reshuffle the pickers.
+ * @returns {{ok: true, name: string} | {ok: false, error: string}} the outcome.
+ */
+export function writePresetMeta(name, description, directory = PRESET_DIR, options = {}) {
+  const rendered = presetMetaText(name, description, directory, options)
+  if (rendered.ok !== true) return rendered
   try {
     // **非原子写的最坏后果在这里**：preset.yml 写坏 = 这个模式从所有选择器里消失（见本文件头注释）。
     // 实测审阅指出这里原先用的是裸 writeFileSync，与设置页的纪律不一致；现在共用同一份实现。
-    writeAtomic(presetMetaPath(directory), lines.join('\n') + '\n')
+    writeAtomic(presetMetaPath(directory), rendered.text)
   } catch (error) {
     // 带 `code`：这条是保存路径上最后一个没有 code 的用户可见失败，英文界面此前会在这里显示中文。
     // 它发生得尤其难受 —— 组成文件与提示词**已经写成功**了，只有 preset.yml 没写成，所以页面
@@ -129,5 +150,5 @@ export function writePresetMeta(name, description, directory = PRESET_DIR, optio
     const detail = String((error && error.message) || error)
     return { ok: false, code: 'metaWriteFailed', params: { detail }, error: '写入 preset.yml 失败：' + detail }
   }
-  return { ok: true, name: cleanName }
+  return { ok: true, name: rendered.name }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-custom-mode",
-  "version": "1.9.12",
+  "version": "1.9.13",
   "description": "Custom modes and custom prompts for DeepSeek Harness (dsh): edit a mode's system prompt on the settings page (it takes effect on the next model step), pick its base mode, switch plugin rows one by one, and keep several assistants side by side — coding, chat or roleplay (RP) personas (multi-mode / multi-agent).",
   "license": "MIT",
   "type": "module",
@@ -53,11 +53,13 @@
     "atomic.mjs",
     "client.js",
     "composition.mjs",
+    "base-composition.mjs",
     "meta.mjs",
     "paths.mjs",
     "locales.mjs",
     "journal.mjs",
     "cordis.patch.yml",
+    "LICENSE",
     "preset-backend/",
     "preset/"
   ],

package/preset-backend/declarative.mjs

@@ -163,6 +163,41 @@ export function createDeclarativeBackend({ scope, log = console.log, warn = cons
     for (const id of [...mounted.keys()]) await unmount(id)
   }
 
+  /**
+   * Fetch the shipped base compositions the host declares, as entry-list YAML.
+   *
+   * `readDocument()` is the 0.1.7 replacement for the presets directory the composer used to read:
+   * it returns the declaration **including** the `isolate` groups and `!!js` predicates that
+   * `compositionInventory()` flattens away (measured 2026-09-25 on 0.1.7-rc.2:
+   * `readDocument('standard').content` is the same row list, verbatim YAML).
+   *
+   * Missing API, or a mode that fails to read, is **not** fatal: the host half falls back to the
+   * packaged patch files and, if those are missing too, to a typed "unavailable" state in which the
+   * prompt stays editable. So this never throws — it reports.
+   *
+   * @param {Iterable<string>} modeIds - the base modes to fetch.
+   * @returns {{ok: boolean, fetched: Map<string,string>, problems: string[]}}
+   */
+  async function fetchBaseCompositions(modeIds) {
+    const fetched = new Map()
+    const problems = []
+    if (typeof scope.agentPresets?.readDocument !== 'function') {
+      return { ok: false, fetched, problems: ['agentPresets.readDocument() 不可用'] }
+    }
+    for (const id of modeIds) {
+      try {
+        const document = await scope.agentPresets.readDocument(id)
+        const text = document !== null && typeof document === 'object' ? document.content : undefined
+        if (typeof text !== 'string' || text.trim() === '') problems.push(`${id}: 声明为空`)
+        else fetched.set(id, text)
+      } catch (error) {
+        // 不为某一条基础模式的成功而重试整轮：读不到的交给降级路径，并指名它。
+        problems.push(`${id}: ${describe(error)}`)
+      }
+    }
+    return { ok: problems.length === 0, fetched, problems }
+  }
+
   return {
     id: BACKEND_ID,
     /** 新线不把 preset 落到磁盘，注册表就是唯一真相。 */
@@ -171,6 +206,7 @@ export function createDeclarativeBackend({ scope, log = console.log, warn = cons
     mountOne,
     unmount,
     disposeAll,
+    fetchBaseCompositions,
     mountedIds: () => [...mounted.keys()],
   }
 }

package/preset-backend/detect.mjs

@@ -47,6 +47,9 @@ export function detectPresetBackend(scope) {
     read: typeof svc?.read === 'function',
     inventory: typeof svc?.compositionInventory === 'function',
     select: typeof svc?.select === 'function',
+    // 出厂组成的来源：旧线读文件，新线由这个 API 交出同一份声明（缺了它设置页仍可用，但
+    // 基础模式与插件开关必须降级为不可编辑 —— 所以它是**可选**能力，不是必需）。
+    document: typeof svc?.readDocument === 'function',
   }
   const reasons = []
 
@@ -78,7 +81,12 @@ export function detectPresetBackend(scope) {
   }
 
   if (looksDeclarative) {
-    reasons.push('agentPresets.remove() 不存在，但 register() + compositionInventory() 存在 —— 声明式注册表的新线')
+    reasons.push(
+      'agentPresets.remove() 不存在，但 register() + compositionInventory() 存在 —— 声明式注册表的新线' +
+        (capabilities.document
+          ? '（readDocument() 可用：出厂组成由宿主交出）'
+          : '（**readDocument() 不可用**：基础模式与插件开关将降级为不可编辑）'),
+    )
     return { id: BACKEND_DECLARATIVE, capabilities, reasons, conflict: false }
   }
 

package/preset-backend/index.mjs

@@ -122,13 +122,21 @@ export function effectiveRosterRows(rows, { root, backendId }) {
   for (const synth of synthesizeRosterRows(root)) byId.set(synth.id, synth)
 
   // 注册表能给出 mount 诊断（broken），合并进合成行；合成行提供 trust/path。
+  //
+  // ★ name / description **磁盘优先**：注册表里那两份是**上一次注册**留下的副本（我们自己注册的），
+  //   让它们覆盖 preset.yml 里的新值，"改名"就永远不生效 —— 实测（2026-09-25，0.1.7-rc.2）：
+  //   POST /state 存下 name=写作助手、preset.yml 已是新名、readState 也读到了新名，而助手列表与
+  //   新会话选择器里仍是旧名「自定义模式」，直到进程重启才对齐。磁盘是用户可见、可手改、可迁移的
+  //   真相（本模块头注释里的 A/B/C 里，磁盘从来就是 A 那一侧），注册表只是它的投影。
   for (const row of platform) {
     if (row === null || typeof row !== 'object' || typeof row.id !== 'string') continue
     const synth = byId.get(row.id)
     if (synth === undefined) continue
     if (typeof row.broken === 'string' && row.broken !== '') synth.broken = row.broken
-    if (typeof row.name === 'string' && row.name !== '') synth.name = row.name
-    if (typeof row.description === 'string' && row.description !== '') synth.description = row.description
+    if ((synth.name === undefined || synth.name === '') && typeof row.name === 'string') synth.name = row.name
+    if ((synth.description === undefined || synth.description === '') && typeof row.description === 'string') {
+      synth.description = row.description
+    }
   }
   return [...byId.values()]
 }