dsh-hashline-edit 0.2.3 → 0.3.0

package/cordis.patch.yml

@@ -1,8 +1,14 @@
 # dsh-hashline-edit bundle patch: mount the host-plane plugin row.
 # Installed via `dsh plugin --profile <name> add dsh-hashline-edit` (or a
-# profile's bundle list). The plugin hooks agent/created, shadows the built-in
-# read tool, and hides the native write/edit/str_replace_editor surface on each
-# agent's own scope layer, so no preset editing or user config is needed.
+# profile's bundle list). The row carries three feature switches, edited on the
+# Plugins page: `read` shadows the built-in read, `apply_patch` hides the native
+# write/edit/apply_patch/str_replace_editor surface, `undo` exposes the
+# undo_last_edit tool. Each toggles live: the host reloads this row and the plugin
+# re-mounts every live agent. Defaults: read on, apply_patch on, undo off.
 - insert:
     - id: dsh-hashline-edit
       name: dsh-hashline-edit
+      config:
+        read: true
+        applyPatch: true
+        undo: false

package/lib/client.js

@@ -0,0 +1,231 @@
+window.__ModuleLoader__.load({id:"dsh-hashline-edit",factory:(require)=>{const module={exports:{}};const exports=module.exports;(function(module,exports,require){
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name2 in all)
+    __defProp(target, name2, { get: all[name2], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// dsh/client/index.tsx
+var index_exports = {};
+__export(index_exports, {
+  apply: () => apply,
+  inject: () => inject,
+  name: () => name
+});
+module.exports = __toCommonJS(index_exports);
+var import_react = require("react");
+var import_jsx_runtime = require("react/jsx-runtime");
+var SWITCHES = [
+  { key: "read", label: "swRead", hint: "swReadHint", fallback: true },
+  { key: "applyPatch", label: "swApplyPatch", hint: "swApplyPatchHint", fallback: true },
+  { key: "undo", label: "swUndo", hint: "swUndoHint", fallback: false }
+];
+var en = {
+  swRead: "Read (shadow the host read)",
+  swReadHint: "Expose the hashline read tool with hash anchors and shadow the host's read.",
+  swApplyPatch: "Apply patch",
+  swApplyPatchHint: "Expose apply_patch and hide the native edit / write / apply_patch / str_replace_editor tools.",
+  swUndo: "Undo",
+  swUndoHint: "Expose undo_last_edit. Snapshots are always recorded; this only shows the tool to the model.",
+  groupTools: "Hashline tools",
+  groupToolsHint: "Toggle each tool live. Turning one off restores the host's own tool.",
+  save: "Save",
+  saving: "Saving\u2026",
+  reset: "Reset",
+  saved: "Saved. The host reloaded this row.",
+  rejected: "The host refused this save; reset and review your changes.",
+  loading: "Loading host settings\u2026",
+  unavailable: "Enable this row with the built-in switch to edit its settings.",
+  rowSummary: "Read, apply_patch and undo switches."
+};
+var zh = {
+  swRead: "\u8BFB\u53D6\uFF08\u906E\u853D\u5BBF\u4E3B read\uFF09",
+  swReadHint: "\u542F\u7528\u5E26\u54C8\u5E0C\u951A\u70B9\u7684 hashline read \u5DE5\u5177\uFF0C\u5E76\u906E\u853D\u5BBF\u4E3B\u7684 read\u3002",
+  swApplyPatch: "\u5E94\u7528\u8865\u4E01",
+  swApplyPatchHint: "\u542F\u7528 apply_patch\uFF0C\u5E76\u9690\u85CF\u539F\u751F edit / write / apply_patch / str_replace_editor\u3002",
+  swUndo: "\u64A4\u9500",
+  swUndoHint: "\u542F\u7528 undo_last_edit\u3002\u5FEB\u7167\u59CB\u7EC8\u8BB0\u5F55\uFF0C\u6B64\u9879\u4EC5\u5411\u6A21\u578B\u66B4\u9732\u5DE5\u5177\u3002",
+  groupTools: "Hashline \u5DE5\u5177",
+  groupToolsHint: "\u5B9E\u65F6\u5207\u6362\u6BCF\u4E2A\u5DE5\u5177\uFF1B\u5173\u95ED\u540E\u6062\u590D\u5BBF\u4E3B\u81EA\u5E26\u5DE5\u5177\u3002",
+  save: "\u4FDD\u5B58",
+  saving: "\u6B63\u5728\u4FDD\u5B58\u2026",
+  reset: "\u91CD\u7F6E",
+  saved: "\u5DF2\u4FDD\u5B58\uFF0C\u5BBF\u4E3B\u5DF2\u91CD\u65B0\u52A0\u8F7D\u6B64\u884C\u3002",
+  rejected: "\u5BBF\u4E3B\u62D2\u7EDD\u4E86\u6B64\u6B21\u4FDD\u5B58\uFF1B\u8BF7\u91CD\u7F6E\u540E\u91CD\u65B0\u68C0\u67E5\u66F4\u6539\u3002",
+  loading: "\u6B63\u5728\u52A0\u8F7D\u5BBF\u4E3B\u8BBE\u7F6E\u2026",
+  unavailable: "\u8BF7\u5148\u7528\u5185\u7F6E\u5F00\u5173\u542F\u7528\u6B64\u884C\u540E\u518D\u7F16\u8F91\u8BBE\u7F6E\u3002",
+  rowSummary: "\u8BFB\u53D6\u3001apply_patch \u4E0E\u64A4\u9500\u5F00\u5173\u3002"
+};
+var CSS = `
+.hashline-settings { display:flex; flex-direction:column; gap:12px; font:inherit; color:var(--dsw-alias-label-primary,#222); }
+.hashline-card { display:flex; flex-direction:column; gap:10px; padding:14px; border:.5px solid var(--dsw-alias-border-l2,#ddd); border-radius:8px; }
+.hashline-title { margin:0; font-size:13px; font-weight:600; color:var(--dsw-alias-label-secondary,#555); }
+.hashline-hint { margin:0; font-size:12px; line-height:1.5; color:var(--dsw-alias-label-tertiary,#888); }
+.hashline-rows { display:flex; flex-direction:column; }
+.hashline-row { display:flex; align-items:flex-start; gap:16px; padding:10px 0; border-top:.5px solid var(--dsw-alias-border-l2,#eee); }
+.hashline-row:first-child { border-top:0; padding-top:0; }
+.hashline-text { flex:1 1 auto; min-width:0; display:flex; flex-direction:column; gap:4px; }
+.hashline-label { font-size:13px; font-weight:500; }
+.hashline-switch { flex:none; position:relative; width:36px; height:20px; border:0; padding:0; border-radius:999px; background:#c8c8c8; cursor:pointer; transition:background .12s ease; }
+.hashline-switch.is-on { background:#2f6fed; }
+.hashline-switch:disabled { opacity:.5; cursor:default; }
+.hashline-knob { position:absolute; top:2px; left:2px; width:16px; height:16px; border-radius:50%; background:#fff; transition:transform .12s ease; }
+.hashline-switch.is-on .hashline-knob { transform:translateX(16px); }
+.hashline-actions { display:flex; align-items:center; gap:8px; }
+.hashline-primary { border:1px solid transparent; border-radius:6px; padding:5px 14px; font:inherit; font-size:13px; cursor:pointer; background:var(--dsw-alias-label-primary,#222); color:#fff; }
+.hashline-primary:disabled { opacity:.4; cursor:default; }
+.hashline-reset { border:0; background:none; font:inherit; font-size:12px; color:var(--dsw-alias-label-secondary,#555); cursor:pointer; }
+.hashline-note { margin:0; font-size:12px; line-height:1.6; color:var(--dsw-alias-label-tertiary,#888); }
+`;
+function readValues(value) {
+  const out = {};
+  for (const spec of SWITCHES) {
+    const raw = value[spec.key];
+    out[spec.key] = typeof raw === "boolean" ? raw : spec.fallback;
+  }
+  return out;
+}
+function Switch(props) {
+  const { checked, label, disabled = false, onChange } = props;
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+    "button",
+    {
+      type: "button",
+      role: "switch",
+      "aria-checked": checked,
+      "aria-label": label,
+      disabled,
+      className: `hashline-switch${checked ? " is-on" : ""}`,
+      onClick: () => onChange(!checked),
+      children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "hashline-knob" })
+    }
+  );
+}
+function Summary(props) {
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_jsx_runtime.Fragment, { children: props.t("rowSummary") });
+}
+function RowForm(props) {
+  const { form, t } = props;
+  const ready = form?.state.status === "ready" && form.state.writable !== false;
+  const [draft, setDraft] = (0, import_react.useState)(
+    () => readValues(form?.state.value ?? {})
+  );
+  const [baseline, setBaseline] = (0, import_react.useState)(() => form?.state.value ?? {});
+  const [revision, setRevision] = (0, import_react.useState)(form?.state.revision);
+  const [dirty, setDirty] = (0, import_react.useState)(false);
+  const [busy, setBusy] = (0, import_react.useState)(false);
+  const [message, setMessage] = (0, import_react.useState)("");
+  (0, import_react.useEffect)(() => {
+    if (dirty) return;
+    setDraft(readValues(form?.state.value ?? {}));
+    setBaseline(form?.state.value ?? {});
+    setRevision(form?.state.revision);
+  }, [form?.state.revision, form?.state.status, dirty]);
+  if (!ready) {
+    return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "hashline-note", role: "status", children: t(form?.state.status === "loading" ? "loading" : "unavailable") });
+  }
+  const toggle = (key, checked) => {
+    setDraft({ ...draft, [key]: checked });
+    setDirty(true);
+    setMessage("");
+  };
+  const reset = () => {
+    setDraft(readValues(baseline));
+    setDirty(false);
+    setMessage("");
+  };
+  const save = async () => {
+    if (form === void 0 || busy || revision === void 0) return;
+    const base = readValues(baseline);
+    const operations = [];
+    for (const spec of SWITCHES) {
+      if (draft[spec.key] !== base[spec.key]) {
+        operations.push({ op: "set", path: [spec.key], value: draft[spec.key] });
+      }
+    }
+    setBusy(true);
+    setMessage("");
+    try {
+      const accepted = await form.mutate(operations, revision);
+      setMessage(t(accepted ? "saved" : "rejected"));
+      if (accepted) setDirty(false);
+    } catch (error) {
+      setMessage(error instanceof Error ? error.message : String(error));
+    } finally {
+      setBusy(false);
+    }
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(
+    "form",
+    {
+      className: "hashline-settings",
+      onSubmit: (event) => {
+        event.preventDefault();
+        void save();
+      },
+      children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("section", { className: "hashline-card", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h4", { className: "hashline-title", children: t("groupTools") }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "hashline-hint", children: t("groupToolsHint") }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "hashline-rows", children: SWITCHES.map((spec) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "hashline-row", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "hashline-text", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "hashline-label", children: t(spec.label) }),
+              /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "hashline-hint", children: t(spec.hint) })
+            ] }),
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+              Switch,
+              {
+                checked: draft[spec.key] === true,
+                label: t(spec.label),
+                disabled: busy,
+                onChange: (checked) => toggle(spec.key, checked)
+              }
+            )
+          ] }, spec.key)) })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "hashline-actions", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "submit", className: "hashline-primary", disabled: busy || !dirty, children: t(busy ? "saving" : "save") }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", className: "hashline-reset", onClick: reset, disabled: busy, children: t("reset") })
+        ] }),
+        message !== "" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "hashline-note", role: "status", children: message })
+      ]
+    }
+  );
+}
+var name = "dsh-hashline-edit-settings";
+var inject = ["slots", "locale"];
+function apply(ctx) {
+  ctx.effect(() => ctx.locale.register("hashlineEdit", { en, zh }));
+  ctx.effect(() => {
+    const style = document.createElement("style");
+    style.dataset.dshHashlineEdit = "true";
+    style.textContent = CSS;
+    document.head.append(style);
+    return () => style.remove();
+  });
+  ctx.slots.inject("plugins.row.config", function* () {
+    yield ctx.slots.register(
+      {
+        name: "plugins.row.config",
+        key: "dsh-hashline-edit#dsh-hashline-edit",
+        locale: "hashlineEdit"
+      },
+      (props) => props.view === "summary" ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Summary, { ...props }) : /* @__PURE__ */ (0, import_jsx_runtime.jsx)(RowForm, { ...props })
+    );
+  });
+}
+
+})(module,module.exports,require);return module.exports;}});

package/lib/index.js

@@ -1,3 +1,6 @@
+// dsh/index.ts
+import Schema from "@deepseek-ai/schemastery";
+
 // dsh/fs.ts
 import { constants } from "node:fs";
 import {
@@ -45,7 +48,7 @@ import {
 import { dirname as dirname2, join as join4, parse, resolve, sep } from "node:path";
 
 // src/hashline/alphabet.ts
-var HASH_LEN = true ? 3 : resolveAnchorWidth(process.env);
+var HASH_LEN = true ? 4 : resolveAnchorWidth(process.env);
 var ALPHA = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
 var ALPHA_SAFE = ALPHA.replace(/-/g, "\\-");
 var ALPHA_RE = new RegExp(`^[${ALPHA_SAFE}]+$`);
@@ -1672,7 +1675,7 @@ function toDshToolError(error, fallbackCode = "E_UNKNOWN") {
 // dsh/metrics/instrument.ts
 var WARNING_CODE = /\b(W_[A-Z0-9_]+)\b/u;
 var RESULT_CODE = /\b([EW]_[A-Z0-9_]+)\b/u;
-var HASH_ROW = /^[A-Za-z0-9]{4}│/u;
+var HASH_ROW = new RegExp(`^${HASH_CLASS}\u2502`, "u");
 function jsonChars(value) {
   if (value === void 0) return 0;
   try {
@@ -2236,7 +2239,14 @@ function resolveSectionText(rootCtx, section, presetId, homeDir, orderFor, warne
     return section.renderDefault();
   }
 }
-function registerGuidanceSections(rootCtx, agentCtx) {
+function sectionEnabled(name2, toggles) {
+  if (toggles === void 0) return true;
+  if (name2 === "tool:read") return toggles.read;
+  if (name2 === "tool:apply_patch") return toggles.applyPatch;
+  if (name2 === "tool:undo_last_edit") return toggles.undo;
+  return true;
+}
+function registerGuidanceSections(rootCtx, agentCtx, enabled) {
   const registry = registryFor(agentCtx) ?? registryFor(rootCtx);
   if (registry === void 0) {
     warn2(rootCtx, "systemPrompt registry unavailable; hashline guidance not registered");
@@ -2267,6 +2277,7 @@ function registerGuidanceSections(rootCtx, agentCtx) {
   for (let index = 0; index < sections.length; index++) {
     const section = sections[index];
     const definition = GUIDANCE_SECTIONS2[index];
+    if (!sectionEnabled(definition.name, enabled)) continue;
     if (section.malformed !== void 0) {
       warn2(
         rootCtx,
@@ -8957,7 +8968,7 @@ async function publishPluginWrites(deps, requestPaths, ctx, exec) {
 
 // dsh/tools/read.ts
 var READ_TOOL_NAME = "read";
-var READ_DESCRIPTION = "Read a file as hash-anchored rows (`HASH\u2502content`). In the default `served` mode the 4-character anchor before each line is the line identity an `apply_patch` identity hunk must use, and every row shown is recorded as served for this session. `verbatim` mode returns the same page as plain text with no anchors, so nothing is served. Supports a single offset/limit page, several line windows (offset/limit or around_anchor \xB1 radius). UTF-8 only: a file whose bytes are not valid UTF-8 is refused instead of decoded. A small requested window may widen to its enclosing function, method or section; a `[widened \u2026]` note names the block that was served.";
+var READ_DESCRIPTION = 'Read a UTF-8 text file as hash-anchored `HASH\u2502content` rows; each anchor is the `apply_patch` identity for that line. Served mode is the default; `mode: "verbatim"` returns plain text with no anchors. Supports offset/limit pages and `windows` (offset/limit or around_anchor).';
 var RENDER_MODES = ["served", "verbatim"];
 function createDefaultReadSpanProvider(io) {
   const readTextFile = io === void 0 ? void 0 : async (path) => {
@@ -9415,7 +9426,7 @@ function buildReadTool(deps, options = {}) {
       },
       windows: {
         type: "array",
-        description: `Optional array of up to ${MAX_READ_WINDOWS} line windows to read in a single call. Each window is either an offset/limit range or an around_anchor radius around a 4-character anchor this session served; every served row is usable in one edit.`,
+        description: `Optional array of up to ${MAX_READ_WINDOWS} windows, each an offset/limit range or an around_anchor + radius around a served anchor.`,
         items: {
           oneOf: [
             {
@@ -9425,7 +9436,7 @@ function buildReadTool(deps, options = {}) {
                 around_anchor: {
                   type: "string",
                   required: true,
-                  description: "A 4-character anchor this session served: the window centres on its line"
+                  description: "A served anchor: the window centres on its line"
                 },
                 radius: {
                   type: "number",
@@ -9455,7 +9466,7 @@ function buildReadTool(deps, options = {}) {
       mode: {
         type: "string",
         enum: RENDER_MODES,
-        description: 'Render mode: "served" (default) returns each line as a 4-character anchor plus content and records every shown row as served; "verbatim" returns the same lines as plain text with no anchors and serves nothing, so an edit cannot target those lines.'
+        description: "`served` (default) returns `HASH\u2502content` rows and records them as served; `verbatim` returns plain text with no anchors."
       }
     },
     output: {
@@ -13126,7 +13137,7 @@ var TOOL_RESULT_SCHEMA = {
     details: { type: "json", required: true }
   }
 };
-var DIFF_ROW = /^([ +-]).{4}│(.*)$/u;
+var DIFF_ROW = new RegExp(`^([ +-]).{${HASH_LEN}}\u2502(.*)$`, "u");
 var DIFF_FILE_HEADER = /^--- (.+) ---$/u;
 var MAX_META_HUNKS = 24;
 var MAX_META_CHARS = 8192;
@@ -13240,9 +13251,14 @@ var APPLY_PATCH_PARAMETERS = {
   input: {
     type: "string",
     required: true,
-    description: "Complete patch text: *** Begin Patch ... *** End Patch"
+    description: "Patch text: start with *** Begin Patch and end with *** End Patch. `*** Add File: path` with + lines; `*** Update File: path`, optionally `*** Move to: path`, with fragment hunks (`@@` or `@@ <context>`, body lines prefixed space/+/-) or identity hunks (`@@<a>` / `@@<a>-<b>`, + lines only; empty body deletes); `*** Copy From: path <a>-<b>` / `*** Cut From: path <a>-<b>` reuse a served span; `*** End of File` pins a hunk to the file end; `*** Delete File: path` deletes. Paths are workspace-relative or absolute."
   }
 };
+var REFERENCE_HEADER = new RegExp(
+  `^\\*\\*\\* (?:Copy From|Cut From): (.+) (${HASH_CLASS}(?:-${HASH_CLASS})?)$`,
+  "u"
+);
+var CUT_HEADER = new RegExp(`^\\*\\*\\* Cut From: (.+) (${HASH_CLASS}(?:-${HASH_CLASS})?)$`, "u");
 function previewPatch(input) {
   const diffs = [];
   const locations = [];
@@ -13271,7 +13287,7 @@ function previewPatch(input) {
       locations.push(move2[1].trim());
       continue;
     }
-    const reference = /^\*\*\* (?:Copy From|Cut From): (.+) ([A-Za-z0-9]{4}(?:-[A-Za-z0-9]{4})?)$/u.exec(line);
+    const reference = REFERENCE_HEADER.exec(line);
     if (reference !== null) {
       locations.push(reference[1].trim());
       continue;
@@ -13302,7 +13318,7 @@ function writtenPatchPaths(input) {
       add(move2[1]);
       continue;
     }
-    const cut = /^\*\*\* Cut From: (.+) [A-Za-z0-9]{4}(?:-[A-Za-z0-9]{4})?$/u.exec(line);
+    const cut = CUT_HEADER.exec(line);
     if (cut !== null) add(cut[1]);
   }
   return paths;
@@ -13779,8 +13795,34 @@ function registerWriteHook(rootCtx, agentCtx, io, observations) {
 // dsh/index.ts
 var name = "dsh-hashline-edit";
 var inject = ["tools", "systemPrompt"];
+var Config = Schema.object({
+  read: Schema.boolean().default(true).volatile(),
+  applyPatch: Schema.boolean().default(true).volatile(),
+  undo: Schema.boolean().default(false).volatile()
+});
+function switchValue(value, fallback) {
+  if (typeof value === "boolean") return value;
+  if (value !== null && typeof value === "object" && typeof value.get === "function") {
+    try {
+      const inner = value.get();
+      return typeof inner === "boolean" ? inner : fallback;
+    } catch {
+      return fallback;
+    }
+  }
+  return fallback;
+}
+function resolveSwitches(config = {}) {
+  const fields = config;
+  return {
+    read: switchValue(fields.read, true),
+    applyPatch: switchValue(fields.applyPatch, true),
+    undo: switchValue(fields.undo, false)
+  };
+}
 function installAgentTools(rootCtx, agent, metrics, config = {}) {
-  agent.ctx.effect(() => {
+  const switches = resolveSwitches(config);
+  return agent.ctx.effect(() => {
     const io = createLocalFileIO();
     const sandbox = new FsSandboxController(rootCtx);
     const fsService = rootCtx.get("fs");
@@ -13795,27 +13837,31 @@ function installAgentTools(rootCtx, agent, metrics, config = {}) {
     };
     const disposers = [];
     try {
-      const spanProvider = createDefaultReadSpanProvider(coreIo);
-      const readDefinition = buildReadTool(deps, { spanProvider });
-      const undoDefinition = buildUndoTool(deps);
-      disposers.push(agent.ctx.tools.register(readDefinition));
-      const applyPatch = registerApplyPatchTool(rootCtx, agent, deps);
-      if (applyPatch !== null) {
-        disposers.push(applyPatch.dispose);
-        disposers.push(
-          registerNativeToolHiding(rootCtx, agent.ctx, {
-            toolName: applyPatch.name,
-            scope: agent,
-            hideNativeWriteTools: config.hideNativeWriteTools ?? true,
-            ...config.hiddenToolNames === void 0 ? {} : { hiddenToolNames: config.hiddenToolNames }
-          })
-        );
+      if (switches.read) {
+        const spanProvider = createDefaultReadSpanProvider(coreIo);
+        disposers.push(agent.ctx.tools.register(buildReadTool(deps, { spanProvider })));
+      }
+      if (switches.applyPatch) {
+        const applyPatch = registerApplyPatchTool(rootCtx, agent, deps);
+        if (applyPatch !== null) {
+          disposers.push(applyPatch.dispose);
+          disposers.push(
+            registerNativeToolHiding(rootCtx, agent.ctx, {
+              toolName: applyPatch.name,
+              scope: agent
+            })
+          );
+        }
+      }
+      if (switches.undo) {
+        disposers.push(agent.ctx.tools.register(buildUndoTool(deps)));
+      }
+      disposers.push(registerGuidanceSections(rootCtx, agent.ctx, switches));
+      if (switches.read) {
+        disposers.push(registerWriteHook(rootCtx, agent.ctx, io, bridge?.observations));
+        disposers.push(registerShellHook(rootCtx, agent.ctx, deps));
       }
-      disposers.push(agent.ctx.tools.register(undoDefinition));
-      disposers.push(registerGuidanceSections(rootCtx, agent.ctx));
-      disposers.push(registerWriteHook(rootCtx, agent.ctx, io, bridge?.observations));
       disposers.push(registerToolObserver(agent.ctx, metrics));
-      disposers.push(registerShellHook(rootCtx, agent.ctx, deps));
     } catch (error) {
       disposeReverse(disposers);
       throw error;
@@ -13846,6 +13892,15 @@ function disposeReverse(disposers) {
 function warnVia3(rootCtx, message) {
   rootCtx.logger.warn(`dsh-hashline-edit: ${message}`);
 }
+var pluginStates = /* @__PURE__ */ new WeakMap();
+function liveAgentsFrom(rootCtx) {
+  try {
+    const service = rootCtx.get("agents");
+    return typeof service?.list === "function" ? service.list() : [];
+  } catch {
+    return [];
+  }
+}
 function apply(rootCtx, config = {}) {
   const metrics = createToolMetrics(
     metricSinkFromEnv(process.env, (error) => {
@@ -13854,22 +13909,76 @@ function apply(rootCtx, config = {}) {
       );
     })
   );
-  const installed = /* @__PURE__ */ new WeakSet();
-  rootCtx.on("agent/created", ({ agent }) => {
-    if (installed.has(agent)) return;
-    installed.add(agent);
+  let state = pluginStates.get(rootCtx);
+  if (state === void 0) {
+    state = { agents: /* @__PURE__ */ new Set(), installs: /* @__PURE__ */ new Map() };
+    pluginStates.set(rootCtx, state);
+  }
+  const current = state;
+  const reconcile = (agent) => {
+    const previous = current.installs.get(agent);
+    if (previous !== void 0) {
+      current.installs.delete(agent);
+      try {
+        previous();
+      } catch {
+      }
+    }
     try {
-      installAgentTools(rootCtx, agent, metrics, config);
+      current.installs.set(agent, installAgentTools(rootCtx, agent, metrics, config));
     } catch (error) {
       rootCtx.logger.warn(
         `dsh-hashline-edit: failed to install tools for agent ${agent.id}: ${error instanceof Error ? error.message : String(error)}`
       );
     }
+  };
+  const live = liveAgentsFrom(rootCtx);
+  if (live.length > 0) {
+    const alive = new Set(live);
+    const gone = [];
+    for (const known of current.agents) if (!alive.has(known)) gone.push(known);
+    for (const agent of gone) current.agents.delete(agent);
+    for (const agent of live) current.agents.add(agent);
+  }
+  for (const agent of current.agents) reconcile(agent);
+  rootCtx.on("agent/created", ({ agent }) => {
+    current.agents.add(agent);
+    reconcile(agent);
   });
+  rootCtx.on("agent/disposed", ({ agent }) => {
+    current.agents.delete(agent);
+    const dispose = current.installs.get(agent);
+    if (dispose !== void 0) {
+      current.installs.delete(agent);
+      try {
+        dispose();
+      } catch {
+      }
+    }
+  });
+  const onEvent = rootCtx.on;
+  if (typeof onEvent === "function") {
+    onEvent.call(rootCtx, "loader/volatile-update", () => {
+      for (const agent of current.agents) reconcile(agent);
+    });
+  }
+  if (typeof rootCtx.effect === "function") {
+    rootCtx.effect(() => () => {
+      for (const dispose of current.installs.values()) {
+        try {
+          dispose();
+        } catch {
+        }
+      }
+      current.installs.clear();
+    });
+  }
 }
 export {
+  Config,
   apply,
   inject,
   installAgentTools,
-  name
+  name,
+  resolveSwitches
 };

package/lib/types/dsh/guidance.d.ts

@@ -116,4 +116,10 @@ export declare function guidanceHomeDir(env?: Record<string, string | undefined>
  * come from the shared prompt sources, so the plugin package must ship
  * `prompts/` for them to load.
  */
-export declare function registerGuidanceSections(rootCtx: Context, agentCtx: Context): () => void;
+/** Which feature tools are enabled, so a disabled tool's guidance section is not registered. */
+export interface GuidanceToggles {
+    readonly read: boolean;
+    readonly applyPatch: boolean;
+    readonly undo: boolean;
+}
+export declare function registerGuidanceSections(rootCtx: Context, agentCtx: Context, enabled?: GuidanceToggles): () => void;

package/lib/types/dsh/index.d.ts

@@ -17,6 +17,7 @@
  */
 import type { Context } from "@deepseek-ai/cordis";
 import type { Agent } from "@deepseek-ai/dsh-agent";
+import Schema from "@deepseek-ai/schemastery";
 import { type ToolMetrics } from "./metrics/instrument.js";
 /** Cordis plugin name used by loader diagnostics. */
 export declare const name = "dsh-hashline-edit";
@@ -25,17 +26,47 @@ export declare const name = "dsh-hashline-edit";
  * services are resolved with `ctx.get` inside `dsh/sandbox.ts` instead.
  */
 export declare const inject: string[];
+/**
+ * The row's editable config schema. Exporting `Config` is what makes the host
+ * expose `dsh-hashline-edit#dsh-hashline-edit` as a writable settings namespace,
+ * so the Plugins-page card can render its three switches and write them back.
+ */
+export declare const Config: Schema<Schemastery.ObjectS<NoInfer<{
+    read: Schema<boolean, boolean, "volatile-defined">;
+    applyPatch: Schema<boolean, boolean, "volatile-defined">;
+    undo: Schema<boolean, boolean, "volatile-defined">;
+}>>, Schemastery.ObjectT<NoInfer<{
+    read: Schema<boolean, boolean, "volatile-defined">;
+    applyPatch: Schema<boolean, boolean, "volatile-defined">;
+    undo: Schema<boolean, boolean, "volatile-defined">;
+}>>, "plain">;
 /** The plugin configuration the loader passes as the second `apply` argument. */
 export interface PluginConfig {
     /**
-     * Hide the native `write`/`edit`/`str_replace_editor` tools so every file
-     * mutation goes through `apply_patch`. Defaults to true. A whole-file
-     * replacement is one `*** Update File:` identity hunk over the served range.
+     * Expose the hashline `read` tool, shadowing the host's native `read`.
+     * Defaults to true; off leaves the native `read` in place.
+     */
+    read?: boolean;
+    /**
+     * Expose the hashline `apply_patch` tool and hide the native
+     * `edit`/`write`/`apply_patch`/`str_replace_editor` tools. Defaults to true;
+     * off keeps every native mutation tool.
      */
-    hideNativeWriteTools?: boolean;
-    /** Extra global tool names to hide alongside the native write set. */
-    hiddenToolNames?: readonly string[];
+    applyPatch?: boolean;
+    /**
+     * Expose the `undo_last_edit` tool. Defaults to false. The undo snapshot row is
+     * still written on every commit; only the model-facing tool is opt-in.
+     */
+    undo?: boolean;
+}
+/** The three feature switches after the shipped defaults are applied. */
+export interface ResolvedSwitches {
+    readonly read: boolean;
+    readonly applyPatch: boolean;
+    readonly undo: boolean;
 }
+/** Resolve the plugin's three switches with the shipped defaults: read and apply_patch on, undo off. */
+export declare function resolveSwitches(config?: PluginConfig): ResolvedSwitches;
 /**
  * Install the hashline toolset for one agent inside its own effect, so the
  * registrations are disposed in reverse order when the agent scope unwinds.
@@ -43,6 +74,6 @@ export interface PluginConfig {
  * Exported separately from {@link apply} so the host test can drive one fake
  * agent directly and integration probes can reuse the exact install path.
  */
-export declare function installAgentTools(rootCtx: Context, agent: Agent, metrics?: ToolMetrics, config?: PluginConfig): void;
-/** Mount the plugin: install the hashline toolset on every new agent. */
+export declare function installAgentTools(rootCtx: Context, agent: Agent, metrics?: ToolMetrics, config?: PluginConfig): () => void;
+/** Mount the plugin and reconcile live agents on every (re)apply. */
 export declare function apply(rootCtx: Context, config?: PluginConfig): void;

package/lib/types/dsh/tools/read.d.ts

@@ -54,7 +54,7 @@ export declare function createDefaultReadSpanProvider(io?: CoreReadIo): SpanProv
 export interface ServedFileLine {
     /** 1-based line number the anchor addresses. */
     readonly line: number;
-    /** The line's 4-character anchor, usable by `apply_patch`. */
+    /** The line's served anchor, usable by `apply_patch`. */
     readonly hash: string;
     /** The line's decoded text, without the anchor prefix. */
     readonly text: string;

package/lib/types/src/apply-patch/grammar.d.ts

@@ -20,7 +20,7 @@ export interface ParsePatchOptions {
 export declare function parseApplyPatch(input: string, options?: ParsePatchOptions): ParsePatchResult;
 /**
  * Parse an anchor token: `<a>` (single line) or `<a>-<b>` (closed span).
- * Returns `undefined` when the token is not a valid four-character anchor pair; the
+ * Returns `undefined` when the token is not a valid anchor pair; the
  * grammar layer turns that into an `E_PATCH_SYNTAX` problem at the patch line.
  *
  * @param token - the text after `@@` (no leading space).

package/lib/types/src/apply-patch/types.d.ts

@@ -8,7 +8,7 @@
  *   (`PatchPlan`, `PlannedFile`, `PlannedMutation`),
  * - the **result / error** types the renderer and the host adapter consume.
  *
- * The engine underneath is the existing hashline kernel: content-addressed 4-char
+ * The engine underneath is the existing hashline kernel: content-addressed
  * anchors, served leases, MVCC snapshots, correlated multi-file transactions and
  * the undo store. Nothing here re-declares those primitives; the plan IR only
  * adds the addressing and lifecycle vocabulary apply_patch needs.
@@ -23,7 +23,7 @@ import type { LineEnding } from "../edit-diff.js";
 import type { HashStore } from "../hash-store.js";
 import type { TransactionRecoveryReport } from "../mutation-engine/types.js";
 /** Patch AST (grammar layer output). */
-/** A 4-character anchor: `[A-Za-z0-9]{4}` (the hashline alphabet). */
+/** An anchor token: `HASH_LEN` characters of the hashline alphabet. */
 export type Anchor = string;
 /** A 1-based line number in the submitted patch text, used by every diagnostic. */
 export type PatchLineNumber = number;
@@ -164,7 +164,7 @@ export interface FileBaseline {
     readonly absolutePath: string;
     /** LF-normalized text; `""` for an Add File target. */
     readonly text: string;
-    /** 4-char anchors parallel to the file's lines; empty for an Add File target. */
+    /** Anchors parallel to the file's lines; empty for an Add File target. */
     readonly hashes: readonly string[];
     /** Byte-order mark the file carried ("" when none). */
     readonly bom: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-hashline-edit",
-  "version": "0.2.3",
+  "version": "0.3.0",
   "description": "Hash-anchored read/apply_patch tools for DeepSeek Harness (dsh). Every line gets a unique 3- or 4-char hash (A-Za-z0-9, configurable) that stays stable across edits; apply_patch is the only file-mutation entry point and commits one patch batch per transaction. Undo persists across restarts.",
   "keywords": [
     "anchors",
@@ -42,6 +42,9 @@
       "types": "./lib/types/dsh/index.d.ts",
       "default": "./lib/index.js"
     },
+    "./client": {
+      "default": "./lib/client.js"
+    },
     "./package.json": "./package.json"
   },
   "scripts": {
@@ -49,6 +52,7 @@
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage --coverage.thresholds.lines=85 --coverage.thresholds.statements=85 --coverage.thresholds.functions=85 --coverage.thresholds.branches=80",
     "test:win": "vitest run --config vitest.config.windows.ts",
+    "test:win:3": "node scripts/test-width.mjs 3 dsh",
     "test:win:coverage": "vitest run --config vitest.config.windows.ts --coverage --coverage.thresholds.lines=85 --coverage.thresholds.statements=85 --coverage.thresholds.functions=85 --coverage.thresholds.branches=80",
     "lint": "oxlint . && knip --max-issues 0",
     "lint:knip": "knip --max-issues 0",
@@ -78,16 +82,19 @@
     "@deepseek-ai/dsh-home-paths": "0.2.2-rc.1",
     "@deepseek-ai/dsh-sandbox": "0.2.2-rc.1",
     "@deepseek-ai/dsh-tools": "0.2.2-rc.1",
+    "@deepseek-ai/schemastery": "3.19.0",
     "@semantic-release/git": "^11.0.1",
     "@semantic-release/github": "^12.0.9",
     "@semantic-release/npm": "^13.1.5",
     "@types/node": "^24.0.0",
+    "@types/react": "18.3.1",
     "@vitest/coverage-v8": "^4.1.10",
     "esbuild": "0.28.2",
     "husky": "^9.1.7",
     "knip": "6.40.0",
     "oxfmt": "^0.66.0",
     "oxlint": "^1.81.0",
+    "react": "18.3.1",
     "semantic-release": "^25.0.9",
     "typescript": "^7.0.0",
     "vite": "^8.3.5",
@@ -112,6 +119,18 @@
   "dsh": {
     "bundle": {
       "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-api-gateway",
+        "@deepseek-ai/dsh-client-ui-renderer",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-plugin-manager",
+        "@deepseek-ai/dsh-client-ui-slots",
+        "@deepseek-ai/dsh-client-ui-primitives"
+      ],
+      "platform": "web",
+      "immediately": true
     }
   }
 }

package/prompts/apply-patch-guidelines.md

@@ -1,10 +1,4 @@
-- apply_patch: one call = one transaction. Collect every related file change (code, tests, docs, config) into one patch; split only when an earlier RESULT must decide a later edit.
-- apply_patch: two addressing modes. Fragment mode (`@@` or `@@ <context>`) locates by exact content and needs no served state. Identity mode (`@@<a>` / `@@<a>-<b>`) targets rows this session served and never writes the old text back.
-- apply_patch: the character after `@@` selects the mode. `@@` followed immediately by exactly {{HASH_LEN}} anchor characters is identity mode; `@@` followed by a space is Codex context mode (`@@ <line>`); a bare `@@` starts the search at the file start. Any other token is a syntax rejection.
-- apply_patch: fragment mode must match exactly once. Zero or several hits reject and serve the candidate rows; add surrounding context to disambiguate, never guess.
-- apply_patch: identity mode accepts only `+` lines; an empty body deletes the span. A `-` or context line in an identity hunk, or body lines in a Copy/Cut hunk, rejects at admission with its patch line number.
-- apply_patch: every hunk resolves against the file as it was before the call; later windows begin after the previous hunk's end. Overlapping target ranges in one file reject the whole batch.
-- apply_patch: lifecycle joins the same transaction and undo. `*** Add File:` content lines all start with `+`; `*** Delete File:` removes the file; `*** Move to:` must immediately follow `*** Update File:` and renames before its hunks apply; an existing move target rejects.
-- apply_patch: a rejection writes nothing. Read the `- patch line N ([E_*], path): ...` lines, then use the immediately following `HASH│content` block — those are the current rows and anchors; retry directly without issuing a separate `read`.
-- apply_patch: a success starts with `Updated N files:` and ends with the changed lines' fresh anchors per file; use those anchors directly in the next identity hunk. `[W_*]` lines are informational.
-- apply_patch: paths are workspace-relative or workspace-absolute; `..`, `.git`, and symlink targets reject. Whole-file replacement is one `*** Update File:` identity hunk spanning every served line with `+` lines for the new content.
+- apply_patch: one call = one transaction; batch related changes and split only when an earlier RESULT decides the next.
+- apply_patch: hunks are validated against the pre-call file in order (overlapping ranges reject the batch); a fragment hunk must match exactly once — add context to disambiguate, never guess — while identity hunks target served rows and a stale or unknown anchor is rejected; both serve the current rows back.
+- apply_patch: a rejection writes nothing; retry from the served `HASH│content` rows without another `read`.
+- apply_patch: success returns fresh anchors for changed lines; whole-file replacement is one identity hunk over every served line.

package/prompts/apply-patch.md

@@ -1 +1 @@
-Apply one Codex-format patch to one or more files in a single transaction: `{ input: string }`. `input` is the complete patch text: `*** Begin Patch` ... `*** End Patch`, with `*** Add File:`, `*** Delete File:`, `*** Update File:` (plus optional `*** Move to:`) and hunks addressed either by content (`@@` or `@@ <context>` with ` `/`-`/`+` lines) or by served anchors (`@@<a>` / `@@<a>-<b>` with `+` lines only). `*** Copy From:` / `*** Cut From:` copy or move a served span from another file. Every target validates before anything is written; a rejection changes nothing and returns the current rows with anchors. On success the result lists the changed files and the new anchors for the changed lines, so a follow-up call needs no `read`. To replace a whole file, use `*** Update File:` with one identity hunk spanning every served line and `+` lines for the new content.
+Create, update, delete, move, copy, or cut UTF-8 text files with a single transactional patch; prefer it over multiple single-file edits when a change spans files or separated regions. Pass the complete patch as `input`.

package/prompts/read-guidelines.md

@@ -1,6 +1,6 @@
-- read: call it only for information the tool never served you, such as content past the auto-read diff. A bash view or an auto-read already served the file, so apply_patch from those rows.
-- read: when you need several blocks or both boundaries of one replacement, put every range in ONE call. Use `{ file, windows: [{ offset, limit }] }`. Each window is served in that turn, so its anchors work in the same apply_patch call. A window can also be `{ around_anchor, radius }` to centre on a line this session already served. An anchor outside this session's served rows is omitted with an inline `[Window warning: ...]`.
-- read: a requested window of 61 lines or fewer can widen to its enclosing block; overlapping or adjacent windows fold before this test. Caps are 80 lines for code and Markdown, 40 for plain text. Widened rows begin with `[widened <requested> -> <served>, <label>]`; above three requested windows the note is `[widened N windows: <ranges>]`. An over-cap Markdown section clamps and names `(section <extent>)`; over-cap code or plain text refuses with no note. `mode: "verbatim"` widens too, with no anchors.
-- read: when you will not apply_patch the file, pass `mode: "verbatim"` for plain content with no anchors. Examples are a config value, docs, a README, or skill content (a SKILL.md or any file in its directory). Omit `mode` when you intend to use the anchors with apply_patch, so the rows carry anchors.
-- read: send one file per call as `{ file, windows?, mode? }`, the same way `apply_patch` does. The single top-level `mode` applies to the file. To read several files, make parallel `read` calls.
-- read: PNG/JPG images return as image attachments for multimodal models. Request one with `file` like any other file.
+- read: call it for content the tool has never served you; a bash view or an auto-read already served the file, so `apply_patch` can use those rows.
+- read: batch several disjoint ranges in ONE call with `windows` — an offset/limit range, or `around_anchor` plus `radius` around a line this session served.
+- read: pass `mode: "verbatim"` when you will not `apply_patch` the file (config, docs, a README, skill files); otherwise omit it so the rows carry anchors.
+- read: a window of 61 lines or fewer may widen to its enclosing block; widened rows carry a `[widened …]` note. Caps are 80 lines for code/Markdown and 40 for plain text.
+- read: read several files with parallel `read` calls, one file per call.
+- read: PNG/JPG/GIF/WebP files return as an image attachment for multimodal models; binary files and directories are refused.

package/prompts/read.md

@@ -1 +1 @@
-Read one text file via `file`, with optional `windows` and top-level `mode`. To read several files, make parallel `read` calls. Served mode (default) returns each line as HASH│content with a {{HASH_LEN}}-char alphanumeric hash. That hash is the `apply_patch` identity anchor, so copy only the {{HASH_LEN}} chars before `│`. Pass `mode: "verbatim"` for plain text with no anchors when you will not apply_patch. `mode: "verbatim"` is not capped by line budget. Name ranges with `windows`: `[{ offset, limit }]` (offset is 1-indexed, limit is a line count, maximum 16 windows) or `[{ around_anchor: "<anchor>", radius: 10 }]` for a line this session served. When a page stops short, continue from the next unshown line with `windows: [{ offset, limit }]`. A requested window of 61 lines or fewer can widen to its enclosing block before serving; overlapping or adjacent windows fold before this test. Caps are 80 lines for code and Markdown, 40 for plain text. A widened page begins with `[widened <requested> -> <served>, <label>]`; more than three requested windows collapse to `[widened N windows: <ranges>]`. An over-cap Markdown section clamps to a cap-sized window and names `(section <extent>)`; an over-cap code or plain-text block refuses, serving the requested window. `mode: "verbatim"` widens the same way but adds no anchors. Inline `[...]` notices describe the served result, not file content. Empty files return `HASH│` (use an apply_patch identity hunk to insert). PNG/JPG/GIF/WebP return as image attachments for multimodal models. Binary and directory files are rejected. Hashes are file-scoped: an anchor is bound to the file it was served from.
+Reads a UTF-8 file as `HASH│content` rows in served mode; each row's anchor is the `apply_patch` identity anchor for that line. Pass `mode: "verbatim"` for plain text with no anchors when you will not apply_patch; verbatim is not capped by line budget. Batch disjoint ranges in one call with `windows` (offset/limit or `around_anchor`).

package/prompts/zh/apply-patch-guidelines.md

@@ -0,0 +1,4 @@
+- apply_patch：一次调用 = 一个事务；把相关改动成批处理，只有当先前的结果决定下一步时才拆分。
+- apply_patch：各 hunk 按顺序针对调用前的文件校验（重叠范围会拒绝整批）；片段 hunk 必须恰好匹配一次——补充上下文以消歧，绝不猜测——身份 hunk 定位已服务的行，陈旧或未知锚点会被拒绝；两者都会回送当前行。
+- apply_patch：拒绝时不写入任何内容；从回送的 `HASH│content` 行重试，无需再次 `read`。
+- apply_patch：成功时返回改动行的新锚点；整文件替换是用一个身份 hunk 覆盖每一行已服务的行。

package/prompts/zh/apply-patch.md

@@ -0,0 +1 @@
+用单个事务补丁创建、更新、删除、移动、复制或剪切 UTF-8 文本文件；当改动跨多个文件或分散区域时，优先于多次单文件编辑。把完整补丁作为 `input` 传入。

package/prompts/zh/read-guidelines.md

@@ -0,0 +1,6 @@
+- read：仅在工具尚未服务给你信息时调用，例如自动读取 diff 之外的内容。bash 视图或自动读取已经服务过该文件，因此直接用那些行 apply_patch。
+- read：当一次替换需要多个块或两端边界时，把每个范围放进同一次调用。用 `{ file, windows: [{ offset, limit }] }`。每个窗口都在当轮被服务，因此其锚点可在同一次 apply_patch 调用中使用。窗口也可以是 `{ around_anchor, radius }`，以本会话已服务的某行为中心。本会话未服务过的锚点会被省略，并内联标注 `[Window warning: ...]`。
+- read：61 行及以内的请求窗口可扩展到其所在块；重叠或相邻窗口在此判定前合并。上限为：代码与 Markdown 80 行，纯文本 40 行。扩展的行以 `[widened <requested> -> <served>, <label>]` 开头；超过三个请求窗口的提示为 `[widened N windows: <ranges>]`。超限的 Markdown 章节会裁剪并标注 `(section <extent>)`；超限的代码或纯文本则拒绝且无提示。`mode: "verbatim"` 也会扩展，但不加锚点。
+- read：当你不打算对该文件 apply_patch 时，用 `mode: "verbatim"` 获取无锚点的纯内容。例如配置值、文档、README 或技能内容（SKILL.md 或其所处目录中的任意文件）。当你打算用锚点配合 apply_patch 时，就不要指定 `mode`，让这些行带上锚点。
+- read：每次调用只发送一个文件，形式为 `{ file, windows?, mode? }`，与 `apply_patch` 相同。单个顶层 `mode` 作用于该文件。要读多个文件就并行发起多次 `read` 调用。
+- read：PNG/JPG 图像以图像附件形式返回，供多模态模型使用。像其他文件一样用 `file` 请求。

package/prompts/zh/read-snippet.md

@@ -0,0 +1 @@
+通过 `file`、`windows?`、`mode?` 读取文件；默认返回可直接编辑的 HASH│content 行，`mode: "verbatim"` 在你不编辑时返回纯文本；用 `windows` 在一次调用中批量读取多个范围

package/prompts/zh/read.md

@@ -0,0 +1 @@
+通过 `file` 读取一个文本文件，可选 `windows` 与顶层 `mode`。要读多个文件就并行发起多次 `read` 调用。服务模式（默认）把每行返回为 HASH│content，带一个 {{HASH_LEN}} 字符的字母数字哈希。该哈希就是 `apply_patch` 的身份锚点，因此只复制 `│` 之前的 {{HASH_LEN}} 个字符。当你不打算 apply_patch 该文件时，用 `mode: "verbatim"` 获取无锚点的纯文本。`mode: "verbatim"` 不受行数上限限制。用 `windows` 指定范围：`[{ offset, limit }]`（offset 从 1 开始，limit 为行数，最多 16 个窗口）或 `[{ around_anchor: "<anchor>", radius: 10 }]`（针对本会话已服务的某行）。当页面未取全时，用 `windows: [{ offset, limit }]` 从下一个未显示行继续。61 行及以内的请求窗口在返回前可能扩展到其所在块；重叠或相邻的窗口在此判定前会合并。上限为：代码与 Markdown 80 行，纯文本 40 行。扩展页以 `[widened <requested> -> <served>, <label>]` 开头；超过三个请求窗口时折叠为 `[widened N windows: <ranges>]`。超限的 Markdown 章节会裁剪为上限大小的窗口并标注 `(section <extent>)`；超限的代码或纯文本块则拒绝，只返回所请求的窗口。`mode: "verbatim"` 同样会扩展，但不加锚点。行内的 `[...]` 提示描述的是返回结果，而非文件内容。空文件返回 `HASH│`（用 apply_patch 身份 hunk 插入）。PNG/JPG/GIF/WebP 以图像附件形式返回，供多模态模型使用。二进制与目录文件会被拒绝。哈希是文件作用域的：一个锚点绑定于它被服务时所在的文件。

package/prompts/zh/undo-last-edit-guidelines.md

@@ -0,0 +1,2 @@
+- undo_last_edit：还原最近一次触及 `path` 处文件的 `apply_patch` 批次及其每个成员：文本 hunk 加文件生命周期操作（增/删/移动）。例外是外来 `cut`：此时撤销也会还原源文件。文件必须仍保有被编辑后的字节。带外写入会让调用以 `E_UNDO_STALE` 失败，且文件保持字节不变。一旦结果不对就立刻调用它。
+- undo_last_edit：对该文件的 `write`，或之后的一次 `apply_patch` 批次，会替换撤销记录。一次读取、bash 视图或带外写入会保留该记录。当一次 apply_patch 的 diff 显示出你本想保留的行的 `-HASH│` 行时，该结果就是错的。例子包括一个收尾花括号、一句 import 或一个声明。

package/prompts/zh/undo-last-edit-snippet.md

@@ -0,0 +1 @@
+撤销对 `path` 处文件最近一次的 `apply_patch` 批次

package/prompts/zh/undo-last-edit.md

@@ -0,0 +1 @@
+撤销最近一次触及 `path` 处文件的 `apply_patch` 批次，把整批——每个文本 hunk 加上文件生命周期操作（增/删/移动）——还原到先前状态。当某次 `apply_patch` 产生了错误结果（例如内容错误、重复行、语法损坏）时使用。该文件自那批之后必须未被改动。

package/src/apply-patch/grammar.ts

@@ -101,7 +101,7 @@ export function parseApplyPatch(input: string, options?: ParsePatchOptions): Par
 
 /**
  * Parse an anchor token: `<a>` (single line) or `<a>-<b>` (closed span).
- * Returns `undefined` when the token is not a valid four-character anchor pair; the
+ * Returns `undefined` when the token is not a valid anchor pair; the
  * grammar layer turns that into an `E_PATCH_SYNTAX` problem at the patch line.
  *
  * @param token - the text after `@@` (no leading space).

package/src/apply-patch/types.ts

@@ -8,7 +8,7 @@
  *   (`PatchPlan`, `PlannedFile`, `PlannedMutation`),
  * - the **result / error** types the renderer and the host adapter consume.
  *
- * The engine underneath is the existing hashline kernel: content-addressed 4-char
+ * The engine underneath is the existing hashline kernel: content-addressed
  * anchors, served leases, MVCC snapshots, correlated multi-file transactions and
  * the undo store. Nothing here re-declares those primitives; the plan IR only
  * adds the addressing and lifecycle vocabulary apply_patch needs.
@@ -25,7 +25,7 @@ import type { TransactionRecoveryReport } from "../mutation-engine/types.js";
 
 /** Patch AST (grammar layer output). */
 
-/** A 4-character anchor: `[A-Za-z0-9]{4}` (the hashline alphabet). */
+/** An anchor token: `HASH_LEN` characters of the hashline alphabet. */
 export type Anchor = string;
 
 /** A 1-based line number in the submitted patch text, used by every diagnostic. */
@@ -175,7 +175,7 @@ export interface FileBaseline {
   readonly absolutePath: string;
   /** LF-normalized text; `""` for an Add File target. */
   readonly text: string;
-  /** 4-char anchors parallel to the file's lines; empty for an Add File target. */
+  /** Anchors parallel to the file's lines; empty for an Add File target. */
   readonly hashes: readonly string[];
   /** Byte-order mark the file carried ("" when none). */
   readonly bom: string;

package/prompts/read-snippet.md

@@ -1 +0,0 @@
-Read a file via `file`, `windows?`, `mode?`; default returns HASH│content rows for editing, `mode: "verbatim"` returns plain text when you will not edit; batch several ranges in one call via `windows`