dsh-homepage 0.1.2 → 0.1.3

package/README.md

@@ -4,6 +4,7 @@
 [![license: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 [![node: >=22.19](https://img.shields.io/badge/node-%3E%3D22.19-339933.svg)](package.json)
 [![DSH: 0.2.x](https://img.shields.io/badge/DSH-0.2.x-6f42c1.svg)](package.json)
+[![Awesome DSH Plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com)
 
 [English](README.md) | [简体中文](README.zh.md)
 

package/README.zh.md

@@ -4,6 +4,7 @@
 [![license: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 [![node: >=22.19](https://img.shields.io/badge/node-%3E%3D22.19-339933.svg)](package.json)
 [![DSH: 0.2.x](https://img.shields.io/badge/DSH-0.2.x-6f42c1.svg)](package.json)
+[![Awesome DSH Plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com)
 
 [English](README.md) | [简体中文](README.zh.md)
 

package/lib/audit-instructions.js

@@ -0,0 +1,21 @@
+/** Editable audit guidance shared by the host and the client build. */
+export const DEFAULT_AUDIT_INSTRUCTIONS = [
+  '1. 取源码：`web_fetch` 读 `https://raw.githubusercontent.com/<owner>/<repo>/HEAD/<path>`，或利用其他本地工具获取源码；必要时读取 npm 包 tarball 的内容。先读 `package.json`，再读入口文件，再顺着依赖与被动态加载的代码走下去。',
+  '2. 读代码，不读宣言：README 说什么是它想让你以为的，代码做什么才是要报的。',
+  '3. 按下面的顺序找问题：',
+  '   - 恶意行为：读取或外传凭据/令牌（`~/.dsh`、环境变量、ssh、云厂商配置）、上传本机文件、反弹 shell、挖矿、删除或加密用户文件、篡改 DSH 本身或其他插件；',
+  '   - 执行链：安装期脚本（preinstall/install/postinstall）执行命令；运行期 `child_process`；`eval`/`new Function`；从网络下载再执行；写入 `~/.dsh`、profile 或系统目录；',
+  '   - 隐蔽性：混淆或加密的字符串、base64 之后 eval、与功能无关的外联域名、把内容塞进资源文件里；',
+  '   - 越权：绕过 DSH 的沙箱与审批，或去调用别的插件的私有服务；',
+  '   - 版本：peer 范围与当前 DSH 版本是否相容（DSH 在安装时会拒绝不相容的包）。',
+  '4. 结论只有三档：',
+  '   - `safe`：没有发现上述任何问题，且代码与它声称的功能一致；',
+  '   - `warn`：可疑、需要用户知情（安装脚本、外部网络、权限偏大、版本不相容、源码读不到），但不像恶意；',
+  '   - `unsafe`：发现明确的恶意行为或高风险执行链。',
+  '5. 每一条 `warn` 都要带 `risk`，替用户回答四个问题——这是他唯一能据以决定装不装的东西：',
+  '   - `role`：这段代码在插件里做什么（功能角色）；',
+  '   - `why`：插件为什么需要它（合理的功能需要，还是抄来的惯例、与功能无关）；',
+  '   - `impact`：一旦被滥用会造成什么后果（拿到了什么、改了什么、传出了什么）；',
+  '   - `scenario` 取 `supply-chain`（供应链攻击：安装期/更新链上执行代码）、`privilege-escalation`（Agent 越权：绕过沙箱或审批、调用别的插件的私有服务）、`sandbox-escape`（沙箱逃逸）、`data-leak`（数据泄露：凭据/文件/环境变量被读取或外传）、`unsafe-publish`（不安全的网络发布）、`other`。',
+  '   只知道一部分就写那一部分，并在 `detail` 里说清你没看到什么；不要凭空补。`info`/`error` 不需要 `risk`。',
+].join('\n')

package/lib/cards/plugin-audit.js

@@ -331,7 +331,19 @@ function useStarter(api, view) {
     var decision = chosen === MODE_REVIEW ? MODE_REVIEW : MODE_INSTALL
     setError('')
     setBusy('start')
-    api.remote(START, { options: { target: wanted, mode: decision } })
+    var options = { target: wanted, mode: decision }
+    var prompt = String(api.control('auditPrompt') || '')
+    if (prompt) options.prompt = prompt
+    var model = String(api.control('auditModel') || '')
+    if (model) {
+      try {
+        var pair = JSON.parse(model)
+        options.selection = { provider: pair[0], model: pair[1] }
+      } catch (reason) { setBusy(''); setError(String(reason)); return }
+    }
+    var effort = String(api.control('auditEffort') || '')
+    if (effort) options.selection = Object.assign({}, options.selection || {}, { reasoningEffort: effort })
+    api.remote(START, { options: options })
       .then(function (next) {
         setBusy('')
         if (next && next.auditId) api.setControl('auditId', String(next.auditId))
@@ -380,7 +392,7 @@ function TargetRow(props) {
     onStart(wanted, mode)
     setDraft('')
   }
-  return h('div', { className: 'ph-loose' },
+  return h('div', { className: chooseMode ? 'ph-loose ph-audit-target-form' : 'ph-loose' },
     chooseMode
       ? h('div', { className: 'ph-loose-row' },
           h(UI.Segmented, {
@@ -414,6 +426,7 @@ function TargetRow(props) {
         onKeyDown: function (event) { if (event.key === 'Enter') submit() },
       }),
       h(UI.Button, {
+        tone: chooseMode ? 'primary' : undefined,
         disabled: busy || String(draft || '').trim() === '',
         onClick: submit,
       }, t('pluginAudit.action.start'))))
@@ -580,8 +593,9 @@ function FindingRow(props) {
       h('span', { className: 'ph-audit-finding-title' }, title),
       scenario ? h('span', { className: 'ph-audit-finding-tag' }, scenario) : null,
       h('span', { className: 'ph-audit-finding-more' }, t(open ? 'pluginAudit.finding.collapse' : 'pluginAudit.finding.expand'))),
-    open
-      ? h('div', { className: 'ph-audit-finding-body' },
+    h('div', { className: 'ph-audit-reveal', hidden: !open },
+      h('div', { className: 'ph-audit-reveal-inner' },
+        h('div', { className: 'ph-audit-finding-body' },
           detail ? h('p', { className: 'ph-audit-finding-detail' }, detail) : null,
           risk
             ? h('div', { className: 'ph-audit-risk' },
@@ -592,8 +606,7 @@ function FindingRow(props) {
             : (level === 'warn' ? h('p', { className: 'ph-audit-risk-missing' }, t('pluginAudit.risk.missing')) : null),
           finding.ref
             ? h('p', { className: 'ph-audit-finding-ref' }, t('pluginAudit.finding.ref', { ref: String(finding.ref) }))
-            : null)
-      : null)
+            : null))))
 }
 
 /** The wall reading: where the review is, or an honest empty state. */
@@ -675,12 +688,101 @@ function HistoryList(props) {
  * installs from its own row — which is how somebody asks for several reviews at once
  * and decides afterwards.
  */
+var defaultInstructions = /* @audit-instructions */ ''
+
+function AuditModelPicker(props) {
+  var api = props.api
+  var t = props.t
+  var catalog = props.catalog
+  var data = catalog.data || {}
+  var models = Array.isArray(data.models) ? data.models : []
+  var chosen = String(api.control('auditModel') || '')
+  var effort = String(api.control('auditEffort') || '')
+  var defaults = data.defaultSelection || {}
+  var defaultKey = defaults.provider && defaults.model ? JSON.stringify([defaults.provider, defaults.model]) : ''
+  var selected = models.filter(function (item) { return JSON.stringify([item.provider, item.model]) === (chosen || defaultKey) })[0]
+  var efforts = selected && Array.isArray(selected.efforts) ? selected.efforts : []
+  function catalogLabel(value, fallback) {
+    if (typeof value === 'string') return value
+    return value && typeof value === 'object' ? (value[t('pluginAudit.catalogLanguage')] || value.en || value.zh || fallback) : fallback
+  }
+  return h('div', { className: 'ph-audit-models' },
+    h('label', { className: 'ph-audit-model-field' }, h('span', null, t('pluginAudit.model')),
+      h('select', { className: 'ph-input ph-audit-model-select', value: chosen, disabled: props.busy || !models.length,
+        onChange: function (event) { api.setControl('auditModel', event.target.value); api.setControl('auditEffort', '') },
+      }, h('option', { value: '' }, t('pluginAudit.model.default')),
+      chosen && !selected ? h('option', { value: chosen }, t('pluginAudit.model.unavailable')) : null,
+      models.map(function (item) {
+        var key = JSON.stringify([item.provider, item.model])
+        return h('option', { key: key, value: key }, catalogLabel(item.name, item.model) + ' · ' + item.provider)
+      }))),
+    h('label', { className: 'ph-audit-model-field' }, h('span', null, t('pluginAudit.effort')),
+      h('select', { className: 'ph-input ph-audit-effort-select', value: effort, disabled: props.busy || !efforts.length,
+        onChange: function (event) {
+          if (!chosen && event.target.value && defaultKey) api.setControl('auditModel', defaultKey)
+          api.setControl('auditEffort', event.target.value)
+        },
+      }, h('option', { value: '' }, t(efforts.length ? 'pluginAudit.effort.default' : 'pluginAudit.effort.none')),
+      efforts.map(function (item) { return h('option', { key: item.id, value: item.id }, catalogLabel(item.name, item.id)) }))),
+    catalog.error ? h('span', { className: 'ph-groups-error' }, t('pluginAudit.model.error')) : null)
+}
+
+function PromptEditor(props) {
+  var api = props.api
+  var t = props.t
+  var saved = String(api.control('auditPrompt') || '')
+  var state = React.useState(saved || defaultInstructions)
+  var draft = state[0]
+  var setDraft = state[1]
+  var dirty = draft !== (saved || defaultInstructions)
+  var expanded = React.useState(false)
+  var open = expanded[0]
+  return h('section', { className: 'ph-audit-launch' },
+    h('div', { className: 'ph-audit-launch-head' },
+      h('div', { className: 'ph-audit-launch-heading' },
+        h('span', { className: 'ph-audit-launch-icon', 'aria-hidden': true }, '↗'),
+        h('div', null,
+          h('h3', { className: 'ph-audit-launch-title' }, t('pluginAudit.section.target')))),
+      h('button', {
+        type: 'button', className: 'ph-audit-prompt-trigger', 'aria-expanded': open,
+        title: t('pluginAudit.prompt.hint'), onClick: function () { expanded[1](!open) },
+      }, h('span', { 'aria-hidden': true }, '✎'), t('pluginAudit.prompt.edit'),
+        h('span', { className: 'ph-audit-prompt-badge' }, t(saved ? 'pluginAudit.prompt.custom' : 'pluginAudit.prompt.default')))),
+    props.children,
+    h(AuditModelPicker, { api: api, t: t, busy: props.busy, catalog: props.catalog }),
+    h('div', { className: 'ph-audit-settings ph-audit-reveal', hidden: !open },
+      h('div', { className: 'ph-audit-reveal-inner ph-loose' },
+      h('div', { className: 'ph-audit-editor-head' },
+        h('strong', null, t('pluginAudit.prompt.title')),
+        h('span', { className: 'ph-note' }, String(draft.length) + ' / 20000')),
+      h('p', { className: 'ph-note' }, t('pluginAudit.prompt.hint')),
+      h('textarea', {
+        className: 'ph-input ph-audit-prompt', value: draft, maxLength: 20000,
+        'aria-label': t('pluginAudit.prompt.title'),
+        onChange: function (event) { setDraft(event.target.value) },
+      }),
+      h('div', { className: 'ph-audit-editor-footer' },
+        h('span', { className: 'ph-note', role: 'status' }, t(dirty ? 'pluginAudit.prompt.unsaved' : 'pluginAudit.prompt.ready')),
+        h(UI.Button, { tone: 'primary', disabled: !dirty, onClick: function () {
+          var value = draft.trim() ? draft : defaultInstructions
+          api.setControl('auditPrompt', value === defaultInstructions ? '' : value)
+          setDraft(value)
+        } }, t('pluginAudit.prompt.save')),
+        h(UI.Button, { disabled: !saved && draft === defaultInstructions, onClick: function () {
+          api.setControl('auditPrompt', '')
+          setDraft(defaultInstructions)
+        } }, t('pluginAudit.prompt.reset'))))))
+}
+
 function AuditDetail(props) {
   var api = props.api
   var t = props.t
   var view = useAudit(api)
   useAnnounce(api, 'pluginAudit', auditNotice(view.audit, t))
   var starter = useStarter(api, view)
+  // Keep the catalog above the tab panes: returning to Current must not
+  // rediscover every provider or briefly disable the model selectors.
+  var modelCatalog = useRemote('homepage/pluginAuditModels', { options: {} }, { refreshMs: 0 })
   var tab = React.useState('current')
   var pane = tab[0]
   var setPane = tab[1]
@@ -703,9 +805,15 @@ function AuditDetail(props) {
   var history = listed.map(function (entry) {
     return audit && entry && entry.auditId === audit.auditId ? audit : entry
   })
+  function changePane(next) {
+    if (next === pane) return
+    // Update immediately; the pane's local CSS animation needs no page snapshot
+    // or animation-frame handshake before React can commit the selected tab.
+    setPane(next)
+  }
   function openRecord(id) {
     api.setControl('auditId', id)
-    setPane('current')
+    changePane('current')
   }
   function decideFromRow(id, decision) {
     if (pendingRow) return
@@ -723,7 +831,7 @@ function AuditDetail(props) {
         setRowError(String((reason && reason.message) || reason))
       })
   }
-  return h('div', { className: 'ph-detail-block' },
+  return h('div', { className: 'ph-detail-block ph-audit-detail' },
     h(UI.Segmented, {
       options: [
         { value: 'current', label: t('pluginAudit.tab.current') },
@@ -735,11 +843,11 @@ function AuditDetail(props) {
         // Opening the history asks the host for it: the records are the host's, and
         // a review started while this card was closed has to be in the list.
         if (wanted === 'history' && typeof view.reloadList === 'function') view.reloadList(true)
-        setPane(wanted)
+        changePane(wanted)
       },
     }),
     pane === 'history'
-      ? h('div', { className: 'ph-loose' },
+      ? h('div', { className: 'ph-loose ph-audit-pane', key: 'history' },
           h('div', { className: 'ph-section-head' },
             h('h4', { className: 'ph-section-title' }, t('pluginAudit.section.history'))),
           h(HistoryList, {
@@ -751,16 +859,26 @@ function AuditDetail(props) {
             onDecide: decideFromRow,
           }),
           rowError ? h('span', { className: 'ph-groups-error' }, rowError) : null)
-      : h('div', { className: 'ph-loose' },
-          h('div', { className: 'ph-section-head' }, h('h4', { className: 'ph-section-title' }, t('pluginAudit.section.target'))),
-          h(TargetRow, {
-            t: t, busy: starter.busy, mode: starter.mode, setMode: starter.setMode,
-            onStart: starter.start, draft: draft, setDraft: setDraft,
-          }),
+      : h('div', { className: 'ph-loose ph-audit-pane', key: 'current' },
+          h(PromptEditor, { api: api, t: t, busy: starter.busy, catalog: modelCatalog },
+            h(TargetRow, {
+              t: t, busy: starter.busy, mode: starter.mode, setMode: starter.setMode,
+              onStart: starter.start, draft: draft, setDraft: setDraft,
+            })),
           starter.error ? h('span', { className: 'ph-groups-error' }, starter.error) : null,
           view.error ? h('span', { className: 'ph-groups-error' }, String(view.error)) : null,
           audit
-            ? h('div', { className: 'ph-kv' },
+            ? h('div', { className: 'ph-audit-result' },
+                h('div', { className: 'ph-audit-result-head' },
+                  h(UI.Chip, { tone: STATE_TONES[audit.state] || null }, stateText(t, audit.state)),
+                  h('strong', { className: 'ph-audit-name' }, auditName(audit, t)),
+                  plugin.version ? h('span', { className: 'ph-note' }, String(plugin.version)) : null),
+                h('p', { className: 'ph-audit-summary' }, audit.summary || progressText(t, audit)),
+                (canInstall(audit) || canDecline(audit)) ? h('div', { className: 'ph-audit-result-actions' },
+                  h(VerdictActions, { api: api, t: t, audit: audit, view: view })) : null,
+                h('details', { className: 'ph-audit-metadata' },
+                  h('summary', null, t('pluginAudit.metadata')),
+                  h('div', { className: 'ph-kv' },
                 h('div', { className: 'ph-kv-row' },
                   h('span', { className: 'ph-kv-key' }, t('pluginAudit.kv.plugin')),
                   h('span', { className: 'ph-kv-value' }, auditName(audit, t))),
@@ -785,20 +903,18 @@ function AuditDetail(props) {
                   h('span', { className: 'ph-kv-value' }, stateText(t, audit.state) + (audit.stage ? ' · ' + progressText(t, audit) : ''))),
                 h('div', { className: 'ph-kv-row' },
                   h('span', { className: 'ph-kv-key' }, t('pluginAudit.kv.installed')),
-                  h('span', { className: 'ph-kv-value' }, t(audit.installed ? 'pluginAudit.value.yes' : 'pluginAudit.value.no'))))
+                  h('span', { className: 'ph-kv-value' }, t(audit.installed ? 'pluginAudit.value.yes' : 'pluginAudit.value.no'))))))
             : h('p', { className: 'ph-note' }, view.error ? t('pluginAudit.error.status') : (view.busy ? t('pluginAudit.loading') : t('pluginAudit.idle'))),
           audit && audit.detail ? h('p', { className: 'ph-note' }, String(audit.detail)) : null,
-          audit && (canInstall(audit) || canDecline(audit)) ? h(VerdictActions, { api: api, t: t, audit: audit, view: view }) : null,
-          h('div', { className: 'ph-section-head' }, h('h4', { className: 'ph-section-title' }, t('pluginAudit.section.verdict'))),
-          h('p', { className: 'ph-note' }, audit && audit.summary ? String(audit.summary) : t('pluginAudit.summary.none')),
-          h('div', { className: 'ph-section-head' }, h('h4', { className: 'ph-section-title' }, t('pluginAudit.section.findings'))),
+          audit ? h('div', { className: 'ph-section-head' },
+            h('h4', { className: 'ph-section-title' }, t('pluginAudit.section.findings')),
+            h('span', { className: 'ph-note' }, String(findings.length))) : null,
           findings.length === 0
-            ? h('p', { className: 'ph-note' }, t('pluginAudit.findings.none'))
+            ? (audit ? h('p', { className: 'ph-note' }, t('pluginAudit.findings.none')) : null)
             : h('div', { className: 'ph-audit-findings' }, sortFindings(findings).map(function (finding, index) {
                 return h(FindingRow, { t: t, finding: finding, key: 'f' + index })
               })),
-          h('div', { className: 'ph-section-head' }, h('h4', { className: 'ph-section-title' }, t('pluginAudit.section.session'))),
-          audit ? h(SessionRow, { t: t, audit: audit }) : h('p', { className: 'ph-note' }, t('pluginAudit.session.none'))))
+          audit ? h(SessionRow, { t: t, audit: audit }) : null))
 }
 
 defineCard({
@@ -824,6 +940,9 @@ defineCard({
   actions: [],
   detailActions: [
     { id: 'auditId', type: 'text', hidden: true, value: '' },
+    { id: 'auditPrompt', type: 'text', hidden: true, value: '' },
+    { id: 'auditModel', type: 'text', hidden: true, value: '' },
+    { id: 'auditEffort', type: 'text', hidden: true, value: '' },
     // The changed-audit signal (see SIGNAL): a control rather than component state
     // because the preview and the expanded body are separate instances that must
     // agree, and a control is the one value the framework shares between them.
@@ -834,6 +953,24 @@ defineCard({
 dict({
   zh: {
     'card.pluginAudit.title': '插件审核',
+    'pluginAudit.metadata': '插件详情',
+    'pluginAudit.catalogLanguage': 'zh',
+    'pluginAudit.model': '审核模型',
+    'pluginAudit.model.default': '跟随全局默认模型',
+    'pluginAudit.model.unavailable': '已选模型不可用，请重新选择',
+    'pluginAudit.model.error': '模型列表读取失败，仍可使用全局默认模型',
+    'pluginAudit.effort': '思考强度',
+    'pluginAudit.effort.default': '模型默认',
+    'pluginAudit.effort.none': '不支持或未提供思考强度',
+    'pluginAudit.prompt.edit': '编辑提示词',
+    'pluginAudit.prompt.title': '审核提示词',
+    'pluginAudit.prompt.custom': '自定义',
+    'pluginAudit.prompt.default': '默认',
+    'pluginAudit.prompt.hint': '保存后用于后续审核。审核对象、结果回传格式与安全约束由系统自动附加。',
+    'pluginAudit.prompt.save': '保存提示词',
+    'pluginAudit.prompt.reset': '恢复默认',
+    'pluginAudit.prompt.unsaved': '有未保存的修改',
+    'pluginAudit.prompt.ready': '已保存 · 下次审核生效',
 
     'pluginAudit.state.none': '无审核',
     'pluginAudit.state.running': '审核中',
@@ -912,7 +1049,7 @@ dict({
     'pluginAudit.tab.current': '当前审核',
     'pluginAudit.tab.history': '审核记录',
     'pluginAudit.history.empty': '还没有审核记录',
-    'pluginAudit.history.view': '查看',
+    'pluginAudit.history.view': '加载条目',
 
     'pluginAudit.kv.plugin': '插件',
     'pluginAudit.kv.version': '版本',
@@ -930,6 +1067,24 @@ dict({
   },
   en: {
     'card.pluginAudit.title': 'Plugin audit',
+    'pluginAudit.metadata': 'Plugin details',
+    'pluginAudit.catalogLanguage': 'en',
+    'pluginAudit.model': 'Review model',
+    'pluginAudit.model.default': 'Use global default model',
+    'pluginAudit.model.unavailable': 'Selected model unavailable — choose again',
+    'pluginAudit.model.error': 'Could not load models. The global default is still available.',
+    'pluginAudit.effort': 'Reasoning effort',
+    'pluginAudit.effort.default': 'Model default',
+    'pluginAudit.effort.none': 'Reasoning effort unavailable',
+    'pluginAudit.prompt.edit': 'Edit prompt',
+    'pluginAudit.prompt.title': 'Review prompt',
+    'pluginAudit.prompt.custom': 'Custom',
+    'pluginAudit.prompt.default': 'Default',
+    'pluginAudit.prompt.hint': 'Applies to future reviews once saved. The target, report format and safety constraints are appended automatically.',
+    'pluginAudit.prompt.save': 'Save prompt',
+    'pluginAudit.prompt.reset': 'Restore default',
+    'pluginAudit.prompt.unsaved': 'Unsaved changes',
+    'pluginAudit.prompt.ready': 'Saved · applies to the next review',
 
     'pluginAudit.state.none': 'No audit',
     'pluginAudit.state.running': 'Reviewing',
@@ -1008,7 +1163,7 @@ dict({
     'pluginAudit.tab.current': 'Current review',
     'pluginAudit.tab.history': 'Review history',
     'pluginAudit.history.empty': 'No reviews yet',
-    'pluginAudit.history.view': 'View',
+    'pluginAudit.history.view': 'Load entry',
 
     'pluginAudit.kv.plugin': 'Plugin',
     'pluginAudit.kv.version': 'Version',

package/lib/client.js

@@ -4166,7 +4166,33 @@ var STYLES = [
       // A finding is what the user came to read, so it does not use the note size,
       // and its head is a real button (the whole row folds it) so the list can be
       // read and opened from the keyboard.
-      '.ph-audit-findings{display:flex;flex-direction:column;gap:6px}',
+      '.ph-audit-detail{gap:18px}.ph-audit-detail>.ph-loose{gap:14px}',
+      '.ph-audit-launch{position:relative;padding:24px;border-radius:18px;border:1px solid color-mix(in srgb,var(--dsw-alias-label-primary,#e6e8ea) 14%,transparent);background:linear-gradient(125deg,rgba(99,102,241,.09),transparent 65%),var(--dsw-alias-bg-layer-2,rgba(255,255,255,.035));box-shadow:0 8px 28px rgba(0,0,0,.035)}',
+      '.ph-audit-launch-head{display:flex;align-items:center;justify-content:space-between;gap:16px;margin-bottom:24px;flex-wrap:wrap}',
+      '.ph-audit-launch-heading{display:flex;align-items:center;gap:12px}.ph-audit-launch-icon{display:grid;place-items:center;width:40px;height:40px;border-radius:12px;background:rgba(99,102,241,.12);color:var(--dsw-alias-label-primary,#e6e8ea);font-size:23px}',
+      '.ph-audit-launch-title{margin:0;font-size:18px;font-weight:650;letter-spacing:-.025em}',
+      '.ph-audit-prompt-trigger{display:inline-flex;align-items:center;gap:8px;min-height:36px;padding:6px 10px;border-radius:10px;border:1px solid var(--dsw-alias-border-l1,rgba(255,255,255,.12));background:var(--dsw-alias-bg-layer-1,rgba(255,255,255,.04));color:inherit;font:inherit;font-size:12px;cursor:pointer;transition:background .16s,border-color .16s}',
+      '.ph-audit-prompt-trigger:hover,.ph-audit-prompt-trigger[aria-expanded=true]{background:rgba(99,102,241,.12);border-color:rgba(129,140,248,.5)}.ph-audit-prompt-badge{font-size:10px;padding:2px 6px;border-radius:5px;background:rgba(127,127,127,.1);color:var(--dsw-alias-label-secondary,#9aa4b2)}',
+      '.ph-audit-target-form{gap:14px}.ph-audit-target-form>.ph-loose-row:last-child{order:-1;display:flex;gap:10px;flex-wrap:nowrap}.ph-audit-target-form .ph-input{min-width:0;flex:1;height:48px;padding:0 15px;border-radius:12px;font-size:14px;box-sizing:border-box;background:var(--dsw-alias-bg-layer-1,rgba(0,0,0,.12))}',
+      '.ph-audit-target-form>.ph-loose-row:last-child button{min-height:48px;flex:none;padding:0 24px;border-radius:12px;font-size:13px;font-weight:650}.ph-audit-target-form .ph-segment{min-height:30px;font-size:11px;padding:5px 12px}.ph-audit-target-form .ph-segmented{padding:3px}',
+      '.ph-audit-detail>.ph-segmented{display:flex;width:100%;box-sizing:border-box;padding:5px;gap:5px;border-radius:13px}.ph-audit-detail>.ph-segmented>.ph-segment{flex:1;min-height:42px;font-size:14px;font-weight:650;border-radius:9px;transition:background .2s,color .2s,box-shadow .2s}',
+      '.ph-audit-models{display:grid;grid-template-columns:minmax(0,1.6fr) minmax(0,1fr);gap:12px;margin-top:18px;padding-top:16px;border-top:1px solid var(--dsw-alias-border-l1,rgba(255,255,255,.09))}.ph-audit-model-field{display:flex;flex-direction:column;gap:7px;min-width:0;font-size:11px;color:var(--dsw-alias-label-secondary,#9aa4b2)}.ph-audit-model-field select{width:100%;min-width:0;height:38px;border-radius:9px;padding:0 10px;color:var(--dsw-alias-label-primary,#e6e8ea)}',
+      '.ph-audit-settings.ph-audit-reveal{margin-top:20px;padding-top:20px;border-top:1px solid var(--dsw-alias-border-l1,rgba(255,255,255,.1));transition:grid-template-rows .25s ease,opacity .2s ease,margin .25s,padding .25s,border-color .25s}.ph-audit-settings[hidden]{margin-top:0;padding-top:0;border-color:transparent}',
+      '.ph-audit-reveal,.ph-audit-reveal[hidden]{display:grid;grid-template-rows:1fr;opacity:1;transition:grid-template-rows .25s ease,opacity .2s ease}.ph-audit-reveal[hidden]{grid-template-rows:0fr;opacity:0;pointer-events:none}.ph-audit-reveal-inner{min-height:0;overflow:hidden;visibility:visible;transition:visibility .25s}.ph-audit-reveal[hidden]>.ph-audit-reveal-inner{visibility:hidden}.ph-audit-settings>.ph-loose{gap:12px}',
+      '@keyframes ph-audit-enter{from{opacity:0;transform:translateY(6px)}to{opacity:1;transform:translateY(0)}}.ph-audit-pane{animation:ph-audit-enter .16s ease both}.ph-audit-result{animation:ph-audit-enter .22s ease both}.ph-audit-detail button{transition:background .18s,color .18s,border-color .18s,box-shadow .18s}',
+      '@supports(interpolate-size:allow-keywords){.ph-audit-metadata{interpolate-size:allow-keywords}.ph-audit-metadata::details-content{overflow:hidden;block-size:0;opacity:0;transition:block-size .25s,opacity .2s,content-visibility .25s allow-discrete}.ph-audit-metadata[open]::details-content{block-size:auto;opacity:1}}',
+      '@media(max-width:600px){.ph-audit-models{grid-template-columns:1fr}}@media(prefers-reduced-motion:reduce){.ph-audit-detail *,.ph-audit-detail *::details-content{animation:none!important;transition:none!important}}',
+      '.ph-audit-editor-head{display:flex;align-items:center;justify-content:space-between;font-size:13px}.ph-audit-editor-footer{display:flex;align-items:center;justify-content:flex-end;gap:8px;flex-wrap:wrap}.ph-audit-editor-footer>[role=status]{margin-right:auto}.ph-audit-editor-footer button{min-height:34px;padding:6px 12px;border-radius:8px}',
+      '.ph-audit-metadata>summary{cursor:pointer;font-size:12px;color:var(--dsw-alias-label-secondary,#9aa4b2);padding:6px 0}',
+      '.ph-audit-prompt{width:100%;min-height:260px;resize:vertical;box-sizing:border-box;font-family:inherit;font-size:12px;line-height:1.8;padding:14px;border-radius:10px}',
+      '.ph-audit-prompt-trigger:focus-visible{outline:2px solid #818cf8;outline-offset:3px}@media(max-width:600px){.ph-audit-launch{padding:16px}.ph-audit-target-form>.ph-loose-row:last-child{flex-wrap:wrap}.ph-audit-target-form>.ph-loose-row:last-child button{width:100%}.ph-audit-target-form .ph-input{flex-basis:100%}}',
+      '.ph-audit-result-actions{margin:16px 0}.ph-audit-result-actions button{min-height:36px;padding:7px 16px;border-radius:9px}',
+      '.ph-audit-result{padding:20px;border-radius:16px;background:var(--dsw-alias-bg-layer-2,rgba(255,255,255,.04));border:1px solid var(--dsw-alias-border-l1,rgba(255,255,255,.09))}',
+      '.ph-audit-result-head{display:flex;align-items:center;gap:10px;flex-wrap:wrap}.ph-audit-name{font-size:15px;overflow-wrap:anywhere}',
+      '.ph-audit-detail .ph-audit-finding-head{padding:11px 12px}.ph-audit-detail .ph-audit-finding-title{white-space:normal;overflow-wrap:anywhere;line-height:1.5}',
+      '.ph-audit-summary{font-size:14px;line-height:1.75;margin:12px 0;color:var(--dsw-alias-label-primary,#e6e8ea);overflow-wrap:anywhere}',
+      '.ph-audit-metadata .ph-kv{margin-top:10px}.ph-audit-detail summary:focus-visible{outline:2px solid currentColor;outline-offset:3px;border-radius:4px}',
+      '.ph-audit-findings{display:flex;flex-direction:column;gap:8px}',
       '.ph-audit-finding{border-radius:9px;overflow:hidden;' +
         'background:var(--dsw-alias-bg-layer-2,rgba(255,255,255,.04));' +
         'border:1px solid var(--dsw-alias-border-l1,rgba(255,255,255,.08))}',
@@ -8425,7 +8451,19 @@ var STYLES = [
       var decision = chosen === MODE_REVIEW ? MODE_REVIEW : MODE_INSTALL
       setError('')
       setBusy('start')
-      api.remote(START, { options: { target: wanted, mode: decision } })
+      var options = { target: wanted, mode: decision }
+      var prompt = String(api.control('auditPrompt') || '')
+      if (prompt) options.prompt = prompt
+      var model = String(api.control('auditModel') || '')
+      if (model) {
+        try {
+          var pair = JSON.parse(model)
+          options.selection = { provider: pair[0], model: pair[1] }
+        } catch (reason) { setBusy(''); setError(String(reason)); return }
+      }
+      var effort = String(api.control('auditEffort') || '')
+      if (effort) options.selection = Object.assign({}, options.selection || {}, { reasoningEffort: effort })
+      api.remote(START, { options: options })
         .then(function (next) {
           setBusy('')
           if (next && next.auditId) api.setControl('auditId', String(next.auditId))
@@ -8474,7 +8512,7 @@ var STYLES = [
       onStart(wanted, mode)
       setDraft('')
     }
-    return h('div', { className: 'ph-loose' },
+    return h('div', { className: chooseMode ? 'ph-loose ph-audit-target-form' : 'ph-loose' },
       chooseMode
         ? h('div', { className: 'ph-loose-row' },
             h(UI.Segmented, {
@@ -8508,6 +8546,7 @@ var STYLES = [
           onKeyDown: function (event) { if (event.key === 'Enter') submit() },
         }),
         h(UI.Button, {
+          tone: chooseMode ? 'primary' : undefined,
           disabled: busy || String(draft || '').trim() === '',
           onClick: submit,
         }, t('pluginAudit.action.start'))))
@@ -8674,8 +8713,9 @@ var STYLES = [
         h('span', { className: 'ph-audit-finding-title' }, title),
         scenario ? h('span', { className: 'ph-audit-finding-tag' }, scenario) : null,
         h('span', { className: 'ph-audit-finding-more' }, t(open ? 'pluginAudit.finding.collapse' : 'pluginAudit.finding.expand'))),
-      open
-        ? h('div', { className: 'ph-audit-finding-body' },
+      h('div', { className: 'ph-audit-reveal', hidden: !open },
+        h('div', { className: 'ph-audit-reveal-inner' },
+          h('div', { className: 'ph-audit-finding-body' },
             detail ? h('p', { className: 'ph-audit-finding-detail' }, detail) : null,
             risk
               ? h('div', { className: 'ph-audit-risk' },
@@ -8686,8 +8726,7 @@ var STYLES = [
               : (level === 'warn' ? h('p', { className: 'ph-audit-risk-missing' }, t('pluginAudit.risk.missing')) : null),
             finding.ref
               ? h('p', { className: 'ph-audit-finding-ref' }, t('pluginAudit.finding.ref', { ref: String(finding.ref) }))
-              : null)
-        : null)
+              : null))))
   }
 
   /** The wall reading: where the review is, or an honest empty state. */
@@ -8769,12 +8808,101 @@ var STYLES = [
    * installs from its own row — which is how somebody asks for several reviews at once
    * and decides afterwards.
    */
+  var defaultInstructions = "1. 取源码：`web_fetch` 读 `https://raw.githubusercontent.com/<owner>/<repo>/HEAD/<path>`，或用 `github_file`/`github_api` 列目录、读文件；必要时读取 npm 包 tarball 的内容。先读 `package.json`，再读入口文件，再顺着依赖与被动态加载的代码走下去。\n2. 读代码，不读宣言：README 说什么是它想让你以为的，代码做什么才是要报的。\n3. 按下面的顺序找问题：\n   - 恶意行为：读取或外传凭据/令牌（`~/.dsh`、环境变量、ssh、云厂商配置）、上传本机文件、反弹 shell、挖矿、删除或加密用户文件、篡改 DSH 本身或其他插件；\n   - 执行链：安装期脚本（preinstall/install/postinstall）执行命令；运行期 `child_process`；`eval`/`new Function`；从网络下载再执行；写入 `~/.dsh`、profile 或系统目录；\n   - 隐蔽性：混淆或加密的字符串、base64 之后 eval、与功能无关的外联域名、把内容塞进资源文件里；\n   - 越权：绕过 DSH 的沙箱与审批，或去调用别的插件的私有服务；\n   - 版本：peer 范围与当前 DSH 版本是否相容（DSH 在安装时会拒绝不相容的包）。\n4. 结论只有三档：\n   - `safe`：没有发现上述任何问题，且代码与它声称的功能一致；\n   - `warn`：可疑、需要用户知情（安装脚本、外部网络、权限偏大、版本不相容、源码读不到），但不像恶意；\n   - `unsafe`：发现明确的恶意行为或高风险执行链。\n5. 每一条 `warn` 都要带 `risk`，替用户回答四个问题——这是他唯一能据以决定装不装的东西：\n   - `role`：这段代码在插件里做什么（功能角色）；\n   - `why`：插件为什么需要它（合理的功能需要，还是抄来的惯例、与功能无关）；\n   - `impact`：一旦被滥用会造成什么后果（拿到了什么、改了什么、传出了什么）；\n   - `scenario` 取 `supply-chain`（供应链攻击：安装期/更新链上执行代码）、`privilege-escalation`（Agent 越权：绕过沙箱或审批、调用别的插件的私有服务）、`sandbox-escape`（沙箱逃逸）、`data-leak`（数据泄露：凭据/文件/环境变量被读取或外传）、`unsafe-publish`（不安全的网络发布）、`other`。\n   只知道一部分就写那一部分，并在 `detail` 里说清你没看到什么；不要凭空补。`info`/`error` 不需要 `risk`。"
+
+  function AuditModelPicker(props) {
+    var api = props.api
+    var t = props.t
+    var catalog = props.catalog
+    var data = catalog.data || {}
+    var models = Array.isArray(data.models) ? data.models : []
+    var chosen = String(api.control('auditModel') || '')
+    var effort = String(api.control('auditEffort') || '')
+    var defaults = data.defaultSelection || {}
+    var defaultKey = defaults.provider && defaults.model ? JSON.stringify([defaults.provider, defaults.model]) : ''
+    var selected = models.filter(function (item) { return JSON.stringify([item.provider, item.model]) === (chosen || defaultKey) })[0]
+    var efforts = selected && Array.isArray(selected.efforts) ? selected.efforts : []
+    function catalogLabel(value, fallback) {
+      if (typeof value === 'string') return value
+      return value && typeof value === 'object' ? (value[t('pluginAudit.catalogLanguage')] || value.en || value.zh || fallback) : fallback
+    }
+    return h('div', { className: 'ph-audit-models' },
+      h('label', { className: 'ph-audit-model-field' }, h('span', null, t('pluginAudit.model')),
+        h('select', { className: 'ph-input ph-audit-model-select', value: chosen, disabled: props.busy || !models.length,
+          onChange: function (event) { api.setControl('auditModel', event.target.value); api.setControl('auditEffort', '') },
+        }, h('option', { value: '' }, t('pluginAudit.model.default')),
+        chosen && !selected ? h('option', { value: chosen }, t('pluginAudit.model.unavailable')) : null,
+        models.map(function (item) {
+          var key = JSON.stringify([item.provider, item.model])
+          return h('option', { key: key, value: key }, catalogLabel(item.name, item.model) + ' · ' + item.provider)
+        }))),
+      h('label', { className: 'ph-audit-model-field' }, h('span', null, t('pluginAudit.effort')),
+        h('select', { className: 'ph-input ph-audit-effort-select', value: effort, disabled: props.busy || !efforts.length,
+          onChange: function (event) {
+            if (!chosen && event.target.value && defaultKey) api.setControl('auditModel', defaultKey)
+            api.setControl('auditEffort', event.target.value)
+          },
+        }, h('option', { value: '' }, t(efforts.length ? 'pluginAudit.effort.default' : 'pluginAudit.effort.none')),
+        efforts.map(function (item) { return h('option', { key: item.id, value: item.id }, catalogLabel(item.name, item.id)) }))),
+      catalog.error ? h('span', { className: 'ph-groups-error' }, t('pluginAudit.model.error')) : null)
+  }
+
+  function PromptEditor(props) {
+    var api = props.api
+    var t = props.t
+    var saved = String(api.control('auditPrompt') || '')
+    var state = React.useState(saved || defaultInstructions)
+    var draft = state[0]
+    var setDraft = state[1]
+    var dirty = draft !== (saved || defaultInstructions)
+    var expanded = React.useState(false)
+    var open = expanded[0]
+    return h('section', { className: 'ph-audit-launch' },
+      h('div', { className: 'ph-audit-launch-head' },
+        h('div', { className: 'ph-audit-launch-heading' },
+          h('span', { className: 'ph-audit-launch-icon', 'aria-hidden': true }, '↗'),
+          h('div', null,
+            h('h3', { className: 'ph-audit-launch-title' }, t('pluginAudit.section.target')))),
+        h('button', {
+          type: 'button', className: 'ph-audit-prompt-trigger', 'aria-expanded': open,
+          title: t('pluginAudit.prompt.hint'), onClick: function () { expanded[1](!open) },
+        }, h('span', { 'aria-hidden': true }, '✎'), t('pluginAudit.prompt.edit'),
+          h('span', { className: 'ph-audit-prompt-badge' }, t(saved ? 'pluginAudit.prompt.custom' : 'pluginAudit.prompt.default')))),
+      props.children,
+      h(AuditModelPicker, { api: api, t: t, busy: props.busy, catalog: props.catalog }),
+      h('div', { className: 'ph-audit-settings ph-audit-reveal', hidden: !open },
+        h('div', { className: 'ph-audit-reveal-inner ph-loose' },
+        h('div', { className: 'ph-audit-editor-head' },
+          h('strong', null, t('pluginAudit.prompt.title')),
+          h('span', { className: 'ph-note' }, String(draft.length) + ' / 20000')),
+        h('p', { className: 'ph-note' }, t('pluginAudit.prompt.hint')),
+        h('textarea', {
+          className: 'ph-input ph-audit-prompt', value: draft, maxLength: 20000,
+          'aria-label': t('pluginAudit.prompt.title'),
+          onChange: function (event) { setDraft(event.target.value) },
+        }),
+        h('div', { className: 'ph-audit-editor-footer' },
+          h('span', { className: 'ph-note', role: 'status' }, t(dirty ? 'pluginAudit.prompt.unsaved' : 'pluginAudit.prompt.ready')),
+          h(UI.Button, { tone: 'primary', disabled: !dirty, onClick: function () {
+            var value = draft.trim() ? draft : defaultInstructions
+            api.setControl('auditPrompt', value === defaultInstructions ? '' : value)
+            setDraft(value)
+          } }, t('pluginAudit.prompt.save')),
+          h(UI.Button, { disabled: !saved && draft === defaultInstructions, onClick: function () {
+            api.setControl('auditPrompt', '')
+            setDraft(defaultInstructions)
+          } }, t('pluginAudit.prompt.reset'))))))
+  }
+
   function AuditDetail(props) {
     var api = props.api
     var t = props.t
     var view = useAudit(api)
     useAnnounce(api, 'pluginAudit', auditNotice(view.audit, t))
     var starter = useStarter(api, view)
+    // Keep the catalog above the tab panes: returning to Current must not
+    // rediscover every provider or briefly disable the model selectors.
+    var modelCatalog = useRemote('homepage/pluginAuditModels', { options: {} }, { refreshMs: 0 })
     var tab = React.useState('current')
     var pane = tab[0]
     var setPane = tab[1]
@@ -8797,9 +8925,15 @@ var STYLES = [
     var history = listed.map(function (entry) {
       return audit && entry && entry.auditId === audit.auditId ? audit : entry
     })
+    function changePane(next) {
+      if (next === pane) return
+      // Update immediately; the pane's local CSS animation needs no page snapshot
+      // or animation-frame handshake before React can commit the selected tab.
+      setPane(next)
+    }
     function openRecord(id) {
       api.setControl('auditId', id)
-      setPane('current')
+      changePane('current')
     }
     function decideFromRow(id, decision) {
       if (pendingRow) return
@@ -8817,7 +8951,7 @@ var STYLES = [
           setRowError(String((reason && reason.message) || reason))
         })
     }
-    return h('div', { className: 'ph-detail-block' },
+    return h('div', { className: 'ph-detail-block ph-audit-detail' },
       h(UI.Segmented, {
         options: [
           { value: 'current', label: t('pluginAudit.tab.current') },
@@ -8829,11 +8963,11 @@ var STYLES = [
           // Opening the history asks the host for it: the records are the host's, and
           // a review started while this card was closed has to be in the list.
           if (wanted === 'history' && typeof view.reloadList === 'function') view.reloadList(true)
-          setPane(wanted)
+          changePane(wanted)
         },
       }),
       pane === 'history'
-        ? h('div', { className: 'ph-loose' },
+        ? h('div', { className: 'ph-loose ph-audit-pane', key: 'history' },
             h('div', { className: 'ph-section-head' },
               h('h4', { className: 'ph-section-title' }, t('pluginAudit.section.history'))),
             h(HistoryList, {
@@ -8845,16 +8979,26 @@ var STYLES = [
               onDecide: decideFromRow,
             }),
             rowError ? h('span', { className: 'ph-groups-error' }, rowError) : null)
-        : h('div', { className: 'ph-loose' },
-            h('div', { className: 'ph-section-head' }, h('h4', { className: 'ph-section-title' }, t('pluginAudit.section.target'))),
-            h(TargetRow, {
-              t: t, busy: starter.busy, mode: starter.mode, setMode: starter.setMode,
-              onStart: starter.start, draft: draft, setDraft: setDraft,
-            }),
+        : h('div', { className: 'ph-loose ph-audit-pane', key: 'current' },
+            h(PromptEditor, { api: api, t: t, busy: starter.busy, catalog: modelCatalog },
+              h(TargetRow, {
+                t: t, busy: starter.busy, mode: starter.mode, setMode: starter.setMode,
+                onStart: starter.start, draft: draft, setDraft: setDraft,
+              })),
             starter.error ? h('span', { className: 'ph-groups-error' }, starter.error) : null,
             view.error ? h('span', { className: 'ph-groups-error' }, String(view.error)) : null,
             audit
-              ? h('div', { className: 'ph-kv' },
+              ? h('div', { className: 'ph-audit-result' },
+                  h('div', { className: 'ph-audit-result-head' },
+                    h(UI.Chip, { tone: STATE_TONES[audit.state] || null }, stateText(t, audit.state)),
+                    h('strong', { className: 'ph-audit-name' }, auditName(audit, t)),
+                    plugin.version ? h('span', { className: 'ph-note' }, String(plugin.version)) : null),
+                  h('p', { className: 'ph-audit-summary' }, audit.summary || progressText(t, audit)),
+                  (canInstall(audit) || canDecline(audit)) ? h('div', { className: 'ph-audit-result-actions' },
+                    h(VerdictActions, { api: api, t: t, audit: audit, view: view })) : null,
+                  h('details', { className: 'ph-audit-metadata' },
+                    h('summary', null, t('pluginAudit.metadata')),
+                    h('div', { className: 'ph-kv' },
                   h('div', { className: 'ph-kv-row' },
                     h('span', { className: 'ph-kv-key' }, t('pluginAudit.kv.plugin')),
                     h('span', { className: 'ph-kv-value' }, auditName(audit, t))),
@@ -8879,20 +9023,18 @@ var STYLES = [
                     h('span', { className: 'ph-kv-value' }, stateText(t, audit.state) + (audit.stage ? ' · ' + progressText(t, audit) : ''))),
                   h('div', { className: 'ph-kv-row' },
                     h('span', { className: 'ph-kv-key' }, t('pluginAudit.kv.installed')),
-                    h('span', { className: 'ph-kv-value' }, t(audit.installed ? 'pluginAudit.value.yes' : 'pluginAudit.value.no'))))
+                    h('span', { className: 'ph-kv-value' }, t(audit.installed ? 'pluginAudit.value.yes' : 'pluginAudit.value.no'))))))
               : h('p', { className: 'ph-note' }, view.error ? t('pluginAudit.error.status') : (view.busy ? t('pluginAudit.loading') : t('pluginAudit.idle'))),
             audit && audit.detail ? h('p', { className: 'ph-note' }, String(audit.detail)) : null,
-            audit && (canInstall(audit) || canDecline(audit)) ? h(VerdictActions, { api: api, t: t, audit: audit, view: view }) : null,
-            h('div', { className: 'ph-section-head' }, h('h4', { className: 'ph-section-title' }, t('pluginAudit.section.verdict'))),
-            h('p', { className: 'ph-note' }, audit && audit.summary ? String(audit.summary) : t('pluginAudit.summary.none')),
-            h('div', { className: 'ph-section-head' }, h('h4', { className: 'ph-section-title' }, t('pluginAudit.section.findings'))),
+            audit ? h('div', { className: 'ph-section-head' },
+              h('h4', { className: 'ph-section-title' }, t('pluginAudit.section.findings')),
+              h('span', { className: 'ph-note' }, String(findings.length))) : null,
             findings.length === 0
-              ? h('p', { className: 'ph-note' }, t('pluginAudit.findings.none'))
+              ? (audit ? h('p', { className: 'ph-note' }, t('pluginAudit.findings.none')) : null)
               : h('div', { className: 'ph-audit-findings' }, sortFindings(findings).map(function (finding, index) {
                   return h(FindingRow, { t: t, finding: finding, key: 'f' + index })
                 })),
-            h('div', { className: 'ph-section-head' }, h('h4', { className: 'ph-section-title' }, t('pluginAudit.section.session'))),
-            audit ? h(SessionRow, { t: t, audit: audit }) : h('p', { className: 'ph-note' }, t('pluginAudit.session.none'))))
+            audit ? h(SessionRow, { t: t, audit: audit }) : null))
   }
 
   defineCard({
@@ -8918,6 +9060,9 @@ var STYLES = [
     actions: [],
     detailActions: [
       { id: 'auditId', type: 'text', hidden: true, value: '' },
+      { id: 'auditPrompt', type: 'text', hidden: true, value: '' },
+      { id: 'auditModel', type: 'text', hidden: true, value: '' },
+      { id: 'auditEffort', type: 'text', hidden: true, value: '' },
       // The changed-audit signal (see SIGNAL): a control rather than component state
       // because the preview and the expanded body are separate instances that must
       // agree, and a control is the one value the framework shares between them.
@@ -8928,6 +9073,24 @@ var STYLES = [
   dict({
     zh: {
       'card.pluginAudit.title': '插件审核',
+      'pluginAudit.metadata': '插件详情',
+      'pluginAudit.catalogLanguage': 'zh',
+      'pluginAudit.model': '审核模型',
+      'pluginAudit.model.default': '跟随全局默认模型',
+      'pluginAudit.model.unavailable': '已选模型不可用，请重新选择',
+      'pluginAudit.model.error': '模型列表读取失败，仍可使用全局默认模型',
+      'pluginAudit.effort': '思考强度',
+      'pluginAudit.effort.default': '模型默认',
+      'pluginAudit.effort.none': '不支持或未提供思考强度',
+      'pluginAudit.prompt.edit': '编辑提示词',
+      'pluginAudit.prompt.title': '审核提示词',
+      'pluginAudit.prompt.custom': '自定义',
+      'pluginAudit.prompt.default': '默认',
+      'pluginAudit.prompt.hint': '保存后用于后续审核。审核对象、结果回传格式与安全约束由系统自动附加。',
+      'pluginAudit.prompt.save': '保存提示词',
+      'pluginAudit.prompt.reset': '恢复默认',
+      'pluginAudit.prompt.unsaved': '有未保存的修改',
+      'pluginAudit.prompt.ready': '已保存 · 下次审核生效',
 
       'pluginAudit.state.none': '无审核',
       'pluginAudit.state.running': '审核中',
@@ -9006,7 +9169,7 @@ var STYLES = [
       'pluginAudit.tab.current': '当前审核',
       'pluginAudit.tab.history': '审核记录',
       'pluginAudit.history.empty': '还没有审核记录',
-      'pluginAudit.history.view': '查看',
+      'pluginAudit.history.view': '加载条目',
 
       'pluginAudit.kv.plugin': '插件',
       'pluginAudit.kv.version': '版本',
@@ -9024,6 +9187,24 @@ var STYLES = [
     },
     en: {
       'card.pluginAudit.title': 'Plugin audit',
+      'pluginAudit.metadata': 'Plugin details',
+      'pluginAudit.catalogLanguage': 'en',
+      'pluginAudit.model': 'Review model',
+      'pluginAudit.model.default': 'Use global default model',
+      'pluginAudit.model.unavailable': 'Selected model unavailable — choose again',
+      'pluginAudit.model.error': 'Could not load models. The global default is still available.',
+      'pluginAudit.effort': 'Reasoning effort',
+      'pluginAudit.effort.default': 'Model default',
+      'pluginAudit.effort.none': 'Reasoning effort unavailable',
+      'pluginAudit.prompt.edit': 'Edit prompt',
+      'pluginAudit.prompt.title': 'Review prompt',
+      'pluginAudit.prompt.custom': 'Custom',
+      'pluginAudit.prompt.default': 'Default',
+      'pluginAudit.prompt.hint': 'Applies to future reviews once saved. The target, report format and safety constraints are appended automatically.',
+      'pluginAudit.prompt.save': 'Save prompt',
+      'pluginAudit.prompt.reset': 'Restore default',
+      'pluginAudit.prompt.unsaved': 'Unsaved changes',
+      'pluginAudit.prompt.ready': 'Saved · applies to the next review',
 
       'pluginAudit.state.none': 'No audit',
       'pluginAudit.state.running': 'Reviewing',
@@ -9102,7 +9283,7 @@ var STYLES = [
       'pluginAudit.tab.current': 'Current review',
       'pluginAudit.tab.history': 'Review history',
       'pluginAudit.history.empty': 'No reviews yet',
-      'pluginAudit.history.view': 'View',
+      'pluginAudit.history.view': 'Load entry',
 
       'pluginAudit.kv.plugin': 'Plugin',
       'pluginAudit.kv.version': 'Version',

package/lib/framework.part.js

@@ -4154,7 +4154,33 @@ var STYLES = [
       // A finding is what the user came to read, so it does not use the note size,
       // and its head is a real button (the whole row folds it) so the list can be
       // read and opened from the keyboard.
-      '.ph-audit-findings{display:flex;flex-direction:column;gap:6px}',
+      '.ph-audit-detail{gap:18px}.ph-audit-detail>.ph-loose{gap:14px}',
+      '.ph-audit-launch{position:relative;padding:24px;border-radius:18px;border:1px solid color-mix(in srgb,var(--dsw-alias-label-primary,#e6e8ea) 14%,transparent);background:linear-gradient(125deg,rgba(99,102,241,.09),transparent 65%),var(--dsw-alias-bg-layer-2,rgba(255,255,255,.035));box-shadow:0 8px 28px rgba(0,0,0,.035)}',
+      '.ph-audit-launch-head{display:flex;align-items:center;justify-content:space-between;gap:16px;margin-bottom:24px;flex-wrap:wrap}',
+      '.ph-audit-launch-heading{display:flex;align-items:center;gap:12px}.ph-audit-launch-icon{display:grid;place-items:center;width:40px;height:40px;border-radius:12px;background:rgba(99,102,241,.12);color:var(--dsw-alias-label-primary,#e6e8ea);font-size:23px}',
+      '.ph-audit-launch-title{margin:0;font-size:18px;font-weight:650;letter-spacing:-.025em}',
+      '.ph-audit-prompt-trigger{display:inline-flex;align-items:center;gap:8px;min-height:36px;padding:6px 10px;border-radius:10px;border:1px solid var(--dsw-alias-border-l1,rgba(255,255,255,.12));background:var(--dsw-alias-bg-layer-1,rgba(255,255,255,.04));color:inherit;font:inherit;font-size:12px;cursor:pointer;transition:background .16s,border-color .16s}',
+      '.ph-audit-prompt-trigger:hover,.ph-audit-prompt-trigger[aria-expanded=true]{background:rgba(99,102,241,.12);border-color:rgba(129,140,248,.5)}.ph-audit-prompt-badge{font-size:10px;padding:2px 6px;border-radius:5px;background:rgba(127,127,127,.1);color:var(--dsw-alias-label-secondary,#9aa4b2)}',
+      '.ph-audit-target-form{gap:14px}.ph-audit-target-form>.ph-loose-row:last-child{order:-1;display:flex;gap:10px;flex-wrap:nowrap}.ph-audit-target-form .ph-input{min-width:0;flex:1;height:48px;padding:0 15px;border-radius:12px;font-size:14px;box-sizing:border-box;background:var(--dsw-alias-bg-layer-1,rgba(0,0,0,.12))}',
+      '.ph-audit-target-form>.ph-loose-row:last-child button{min-height:48px;flex:none;padding:0 24px;border-radius:12px;font-size:13px;font-weight:650}.ph-audit-target-form .ph-segment{min-height:30px;font-size:11px;padding:5px 12px}.ph-audit-target-form .ph-segmented{padding:3px}',
+      '.ph-audit-detail>.ph-segmented{display:flex;width:100%;box-sizing:border-box;padding:5px;gap:5px;border-radius:13px}.ph-audit-detail>.ph-segmented>.ph-segment{flex:1;min-height:42px;font-size:14px;font-weight:650;border-radius:9px;transition:background .2s,color .2s,box-shadow .2s}',
+      '.ph-audit-models{display:grid;grid-template-columns:minmax(0,1.6fr) minmax(0,1fr);gap:12px;margin-top:18px;padding-top:16px;border-top:1px solid var(--dsw-alias-border-l1,rgba(255,255,255,.09))}.ph-audit-model-field{display:flex;flex-direction:column;gap:7px;min-width:0;font-size:11px;color:var(--dsw-alias-label-secondary,#9aa4b2)}.ph-audit-model-field select{width:100%;min-width:0;height:38px;border-radius:9px;padding:0 10px;color:var(--dsw-alias-label-primary,#e6e8ea)}',
+      '.ph-audit-settings.ph-audit-reveal{margin-top:20px;padding-top:20px;border-top:1px solid var(--dsw-alias-border-l1,rgba(255,255,255,.1));transition:grid-template-rows .25s ease,opacity .2s ease,margin .25s,padding .25s,border-color .25s}.ph-audit-settings[hidden]{margin-top:0;padding-top:0;border-color:transparent}',
+      '.ph-audit-reveal,.ph-audit-reveal[hidden]{display:grid;grid-template-rows:1fr;opacity:1;transition:grid-template-rows .25s ease,opacity .2s ease}.ph-audit-reveal[hidden]{grid-template-rows:0fr;opacity:0;pointer-events:none}.ph-audit-reveal-inner{min-height:0;overflow:hidden;visibility:visible;transition:visibility .25s}.ph-audit-reveal[hidden]>.ph-audit-reveal-inner{visibility:hidden}.ph-audit-settings>.ph-loose{gap:12px}',
+      '@keyframes ph-audit-enter{from{opacity:0;transform:translateY(6px)}to{opacity:1;transform:translateY(0)}}.ph-audit-pane{animation:ph-audit-enter .16s ease both}.ph-audit-result{animation:ph-audit-enter .22s ease both}.ph-audit-detail button{transition:background .18s,color .18s,border-color .18s,box-shadow .18s}',
+      '@supports(interpolate-size:allow-keywords){.ph-audit-metadata{interpolate-size:allow-keywords}.ph-audit-metadata::details-content{overflow:hidden;block-size:0;opacity:0;transition:block-size .25s,opacity .2s,content-visibility .25s allow-discrete}.ph-audit-metadata[open]::details-content{block-size:auto;opacity:1}}',
+      '@media(max-width:600px){.ph-audit-models{grid-template-columns:1fr}}@media(prefers-reduced-motion:reduce){.ph-audit-detail *,.ph-audit-detail *::details-content{animation:none!important;transition:none!important}}',
+      '.ph-audit-editor-head{display:flex;align-items:center;justify-content:space-between;font-size:13px}.ph-audit-editor-footer{display:flex;align-items:center;justify-content:flex-end;gap:8px;flex-wrap:wrap}.ph-audit-editor-footer>[role=status]{margin-right:auto}.ph-audit-editor-footer button{min-height:34px;padding:6px 12px;border-radius:8px}',
+      '.ph-audit-metadata>summary{cursor:pointer;font-size:12px;color:var(--dsw-alias-label-secondary,#9aa4b2);padding:6px 0}',
+      '.ph-audit-prompt{width:100%;min-height:260px;resize:vertical;box-sizing:border-box;font-family:inherit;font-size:12px;line-height:1.8;padding:14px;border-radius:10px}',
+      '.ph-audit-prompt-trigger:focus-visible{outline:2px solid #818cf8;outline-offset:3px}@media(max-width:600px){.ph-audit-launch{padding:16px}.ph-audit-target-form>.ph-loose-row:last-child{flex-wrap:wrap}.ph-audit-target-form>.ph-loose-row:last-child button{width:100%}.ph-audit-target-form .ph-input{flex-basis:100%}}',
+      '.ph-audit-result-actions{margin:16px 0}.ph-audit-result-actions button{min-height:36px;padding:7px 16px;border-radius:9px}',
+      '.ph-audit-result{padding:20px;border-radius:16px;background:var(--dsw-alias-bg-layer-2,rgba(255,255,255,.04));border:1px solid var(--dsw-alias-border-l1,rgba(255,255,255,.09))}',
+      '.ph-audit-result-head{display:flex;align-items:center;gap:10px;flex-wrap:wrap}.ph-audit-name{font-size:15px;overflow-wrap:anywhere}',
+      '.ph-audit-detail .ph-audit-finding-head{padding:11px 12px}.ph-audit-detail .ph-audit-finding-title{white-space:normal;overflow-wrap:anywhere;line-height:1.5}',
+      '.ph-audit-summary{font-size:14px;line-height:1.75;margin:12px 0;color:var(--dsw-alias-label-primary,#e6e8ea);overflow-wrap:anywhere}',
+      '.ph-audit-metadata .ph-kv{margin-top:10px}.ph-audit-detail summary:focus-visible{outline:2px solid currentColor;outline-offset:3px;border-radius:4px}',
+      '.ph-audit-findings{display:flex;flex-direction:column;gap:8px}',
       '.ph-audit-finding{border-radius:9px;overflow:hidden;' +
         'background:var(--dsw-alias-bg-layer-2,rgba(255,255,255,.04));' +
         'border:1px solid var(--dsw-alias-border-l1,rgba(255,255,255,.08))}',

package/lib/host/audit-runner.js

@@ -10,6 +10,8 @@
  *                   its session, and the agent id *is* the session id
  *   - `sessions()`  the host `sessions` service, to flush the log to disk
  *   - `presets()`   the `agentPresets` service, when a preset is asked for
+ *   - `llm()`       the live provider/model registry, including reasoning efforts
+ *   - `defaultModel()` the profile's default selection (read only)
  *   - `title()`     the `sessionTitle` service, for the session's name
  *   - `on()`        `ctx.on`, for the session's progress events
  *   - `install()`   `pluginManager.installBundle(spec, options)`
@@ -31,6 +33,7 @@ import {
   compatibilityCheck,
   createAuditRegistry,
   needsConfirmation,
+  normalizeAuditInstructions,
   resolveTarget,
   verdictAcknowledgement,
 } from './audit.js'
@@ -124,7 +127,7 @@ export function describeInstall(result) {
 /**
  * Build the runner.
  * @param options - the injected engine surface (see the file comment).
- * @returns `{ start, status, list, decide, report, tool }`.
+ * @returns `{ models, start, status, list, decide, report, tool }`.
  */
 export function createAuditRunner(options = {}) {
   const now = typeof options.now === 'function' ? options.now : () => Date.now()
@@ -431,8 +434,71 @@ export function createAuditRunner(options = {}) {
     })
   }
 
-  /** Create the review session and hand it the prompt. */
-  async function openSession(id) {
+  /** Copy only the default selection fields exposed by the audit API. */
+  function defaultSelection() {
+    const defaults = serviceOf('defaultModel')
+    const selected = defaults && typeof defaults.currentSelection === 'function'
+      ? defaults.currentSelection()
+      : null
+    if (!selected || !selected.provider || !selected.model) return null
+    return {
+      provider: selected.provider,
+      model: selected.model,
+      ...(selected.reasoningEffort === undefined ? {} : { reasoningEffort: selected.reasoningEffort }),
+    }
+  }
+
+  /** Project the live catalog just as DSH's session-controller/catalog.ts does. */
+  async function providerModels(llm, provider) {
+    const models = await llm.listModels(provider)
+    return Promise.all(models.map(async (model) => {
+      const resolved = typeof llm.resolveModelInfo === 'function'
+        ? await llm.resolveModelInfo(provider, model.id)
+        : model
+      return {
+        provider,
+        model: model.id,
+        name: model.name,
+        efforts: (resolved.reasoning?.efforts || []).map(({ id, name }) => ({ id, name })),
+      }
+    }))
+  }
+
+  /** Validate before fetching source or creating history; never change defaults. */
+  async function selectModel(input) {
+    const selected = input === undefined ? defaultSelection() : input
+    if (input === undefined && selected === null) throw new Error('读不到默认模型，审核会话无法启动')
+    if (!selected || typeof selected !== 'object' || Array.isArray(selected)
+      || typeof selected.provider !== 'string' || selected.provider.trim() === ''
+      || typeof selected.model !== 'string' || selected.model.trim() === '') {
+      throw new Error('selection 必须包含 provider 和 model 字符串')
+    }
+    // An explicit model with no effort uses that model's own default, even when
+    // it happens to be the profile's current model. Do not merge the selections.
+    const selection = {
+      provider: selected.provider,
+      model: selected.model,
+      ...(selected.reasoningEffort === undefined ? {} : { reasoningEffort: selected.reasoningEffort }),
+    }
+    const llm = serviceOf('llm')
+    if (!llm || typeof llm.listProviders !== 'function' || typeof llm.listModels !== 'function') {
+      throw new Error('llm 模型目录不可用，审核会话无法启动')
+    }
+    if (!(await llm.listProviders()).some((provider) => provider.id === selection.provider)) {
+      throw new Error('审核模型 provider 不可用：' + selection.provider)
+    }
+    const models = await providerModels(llm, selection.provider)
+    const model = models.find((entry) => entry.model === selection.model)
+    if (!model) throw new Error('审核 model 不可用：' + selection.model)
+    if (selection.reasoningEffort !== undefined
+      && !model.efforts.some((effort) => effort.id === selection.reasoningEffort)) {
+      throw new Error('审核模型不支持 reasoningEffort：' + String(selection.reasoningEffort))
+    }
+    return selection
+  }
+
+  /** Create the review session with its validated selection and hand it the prompt. */
+  async function openSession(id, instructions, selection) {
     const audit = registry.get(id)
     if (!audit) return
     let handle = null
@@ -445,17 +511,6 @@ export function createAuditRunner(options = {}) {
       const preset = presets && typeof presets.resolve === 'function' && options.preset
         ? await presets.resolve(options.preset)
         : null
-      // Which model the review runs on. Not decoration: the persona needs it.
-      const defaultModel = serviceOf('defaultModel')
-      let selection = null
-      if (defaultModel && typeof defaultModel.currentSelection === 'function') {
-        const selected = defaultModel.currentSelection()
-        if (selected && selected.provider && selected.model) {
-          selection = { provider: selected.provider, model: selected.model }
-          if (selected.reasoningEffort !== undefined) selection.reasoningEffort = selected.reasoningEffort
-        }
-      }
-      if (!selection) throw new Error('读不到默认模型，审核会话无法启动')
       const dir = typeof options.cwd === 'function' ? await options.cwd() : undefined
       handle = await agents.create({
         sessionId: 'plugin-audit-' + randomUUID(),
@@ -491,7 +546,7 @@ export function createAuditRunner(options = {}) {
       }
       registry.attachSession(id, { id: String(agent.id), title }, '审核会话正在读源码…')
       watch(id, agent)
-      const prompt = registry.prompt(id)
+      const prompt = registry.prompt(id, instructions)
       if (typeof agent.followup === 'function') await agent.followup(await userMessage(prompt))
       else if (typeof agent.send === 'function') await agent.send(await userMessage(prompt))
       else throw new Error('审核会话不接受消息')
@@ -578,15 +633,33 @@ export function createAuditRunner(options = {}) {
   }
 
   return {
+    /** @returns live models and the profile default; unavailable providers are omitted. */
+    async models() {
+      const selection = defaultSelection()
+      const llm = serviceOf('llm')
+      if (!llm || typeof llm.listProviders !== 'function' || typeof llm.listModels !== 'function') {
+        return { models: [], defaultSelection: selection }
+      }
+      const providers = await llm.listProviders()
+      const groups = await Promise.all(providers.map(async (provider) => {
+        try { return await providerModels(llm, provider.id) }
+        catch { return [] }
+      }))
+      return { models: groups.flat(), defaultSelection: selection }
+    },
     /**
      * The card's one entry point: give it what the user typed, get back a running
      * audit. The session is open before this resolves, the verdict is not.
-     * @param input - `{ target, mode }`, where mode is `install` (default) or `review`.
+     * @param input - `{ target, mode, prompt, selection }`, where mode is `install` (default) or `review`,
+     *   prompt is optional guidance (at most 20000 characters), and selection is
+     *   `{ provider, model, reasoningEffort? }` (omitted means the profile default).
      * @returns the audit in the endpoint shape.
      */
     async start(input = {}) {
+      const instructions = normalizeAuditInstructions(input.prompt)
       const raw = typeof input.target === 'string' ? input.target.trim() : ''
       if (raw === '') throw new Error('请填写要审核的插件：npm 包名、owner/repo 或仓库地址')
+      const selection = await selectModel(input.selection)
       await ensureLoaded()
       const resolved = await resolveTarget(raw, { fetchJson })
       // Before a session is spent on it: does this runtime accept the package at
@@ -599,7 +672,7 @@ export function createAuditRunner(options = {}) {
         findings: (Array.isArray(resolved.findings) ? resolved.findings : []).concat(compatibility.findings),
         compatibility,
       })
-      await openSession(audit.id)
+      await openSession(audit.id, instructions, selection)
       return present(registry.get(audit.id))
     },
     /**

package/lib/host/audit.js

@@ -29,6 +29,9 @@
  */
 
 import { dirname, join } from 'node:path'
+import { DEFAULT_AUDIT_INSTRUCTIONS } from '../audit-instructions.js'
+
+export { DEFAULT_AUDIT_INSTRUCTIONS }
 
 /** The three answers an audit may produce, in ascending severity. */
 export const AUDIT_VERDICTS = Object.freeze(['safe', 'warn', 'unsafe'])
@@ -632,18 +635,36 @@ export function normalizeVerdict(payload) {
   return { verdict, summary, findings }
 }
 
+/**
+ * Validate editable guidance before starting any work. Only omitted or blank
+ * strings use the default; a nonblank string keeps its original formatting.
+ * @param prompt - optional guidance supplied by the card.
+ * @returns the guidance text, without host-owned context or constraints.
+ */
+export function normalizeAuditInstructions(prompt) {
+  if (prompt === undefined) return DEFAULT_AUDIT_INSTRUCTIONS
+  if (typeof prompt !== 'string') throw new TypeError('prompt 必须是字符串')
+  if (prompt.length > 20000) throw new RangeError('prompt 最多 20000 字符')
+  return prompt.trim() === '' ? DEFAULT_AUDIT_INSTRUCTIONS : prompt
+}
+
 /**
  * The instruction the audit session receives. It is written for a reader that
  * has tools and no context: where the source is, what to look for, what the
  * three verdicts mean, and the exact shape the answer has to take.
  * @param audit - a record from the registry.
+ * @param prompt - optional editable guidance; host context and constraints always follow.
  * @returns the prompt text.
  */
-export function buildAuditPrompt(audit) {
+export function buildAuditPrompt(audit, prompt) {
+  const instructions = normalizeAuditInstructions(prompt)
   const target = audit && audit.target ? audit.target : {}
   const lines = []
   lines.push('这台机器上有一张「插件审核」卡片，你负责这一次审核。请读完待审插件的源码，判断它是否安全，最后调用 `' + AUDIT_TOOL_NAME + '` 工具汇报结论。')
   lines.push('')
+  lines.push('## 怎么做')
+  lines.push(instructions)
+  lines.push('')
   lines.push('## 待审对象')
   lines.push('- 用户输入：' + String(target.input || ''))
   lines.push('- 名称：' + String(target.name || '(未知)') + (target.version ? ' @ ' + target.version : ''))
@@ -664,27 +685,9 @@ export function buildAuditPrompt(audit) {
     }
   }
   lines.push('')
-  lines.push('## 怎么做')
-  lines.push('1. 取源码：`web_fetch` 读 `https://raw.githubusercontent.com/<owner>/<repo>/HEAD/<path>`，或用 `github_file`/`github_api` 列目录、读文件；必要时读取 npm 包 tarball 的内容。先读 `package.json`，再读入口文件，再顺着依赖与被动态加载的代码走下去。')
-  lines.push('2. 读代码，不读宣言：README 说什么是它想让你以为的，代码做什么才是要报的。')
-  lines.push('3. 按下面的顺序找问题：')
-  lines.push('   - 恶意行为：读取或外传凭据/令牌（`~/.dsh`、环境变量、ssh、云厂商配置）、上传本机文件、反弹 shell、挖矿、删除或加密用户文件、篡改 DSH 本身或其他插件；')
-  lines.push('   - 执行链：安装期脚本（preinstall/install/postinstall）执行命令；运行期 `child_process`；`eval`/`new Function`；从网络下载再执行；写入 `~/.dsh`、profile 或系统目录；')
-  lines.push('   - 隐蔽性：混淆或加密的字符串、base64 之后 eval、与功能无关的外联域名、把内容塞进资源文件里；')
-  lines.push('   - 越权：绕过 DSH 的沙箱与审批，或去调用别的插件的私有服务；')
-  lines.push('   - 版本：peer 范围与当前 DSH 版本是否相容（DSH 在安装时会拒绝不相容的包）。')
-  lines.push('4. 结论只有三档：')
-  lines.push('   - `safe`：没有发现上述任何问题，且代码与它声称的功能一致；')
-  lines.push('   - `warn`：可疑、需要用户知情（安装脚本、外部网络、权限偏大、版本不相容、源码读不到），但不像恶意；')
-  lines.push('   - `unsafe`：发现明确的恶意行为或高风险执行链。')
-  lines.push('5. 每一条 `warn` 都要带 `risk`，替用户回答四个问题——这是他唯一能据以决定装不装的东西：')
-  lines.push('   - `role`：这段代码在插件里做什么（功能角色）；')
-  lines.push('   - `why`：插件为什么需要它（合理的功能需要，还是抄来的惯例、与功能无关）；')
-  lines.push('   - `impact`：一旦被滥用会造成什么后果（拿到了什么、改了什么、传出了什么）；')
-  lines.push('   - `scenario` 取 `supply-chain`（供应链攻击：安装期/更新链上执行代码）、`privilege-escalation`（Agent 越权：绕过沙箱或审批、调用别的插件的私有服务）、`sandbox-escape`（沙箱逃逸）、`data-leak`（数据泄露：凭据/文件/环境变量被读取或外传）、`unsafe-publish`（不安全的网络发布）、`other`。')
-  lines.push('   只知道一部分就写那一部分，并在 `detail` 里说清你没看到什么；不要凭空补。`info`/`error` 不需要 `risk`。')
-  lines.push('6. 调用 `' + AUDIT_TOOL_NAME + '`，`auditId` 必须是 `' + String((audit && audit.id) || '') + '`；`summary` 用中文一到两句说清结论与最重要的理由；`findings` 每一项 `{ level, title, detail, ref }`（`warn` 再加 `risk: { role, why, impact, scenario }`），`level` 取 `info`/`warn`/`error`，`ref` 写具体位置（例如 `lib/index.js:120`）。')
-  lines.push('7. 只汇报一次。不确定就给 `warn`，并在 findings 里写清你没能看到什么。不要修改任何文件，不要自己安装插件，也不要执行仓库里的代码。')
+  lines.push('## 汇报要求与安全约束（始终适用）')
+  lines.push('调用 `' + AUDIT_TOOL_NAME + '`，`auditId` 必须是 `' + String((audit && audit.id) || '') + '`；`summary` 用中文一到两句说清结论与最重要的理由；`findings` 每一项 `{ level, title, detail, ref }`（`warn` 再加 `risk: { role, why, impact, scenario }`），`level` 取 `info`/`warn`/`error`，`ref` 写具体位置（例如 `lib/index.js:120`）。')
+  lines.push('只汇报一次。不确定就给 `warn`，并在 findings 里写清你没能看到什么。不要修改任何文件，不要自己安装插件，也不要执行仓库里的代码。')
   lines.push('')
   const mode = audit && audit.mode === 'review' ? 'review' : 'install'
   lines.push(mode === 'review'
@@ -881,9 +884,9 @@ export function createAuditRegistry(options = {}) {
       audit.updatedAt = now()
       return changed(audit)
     },
-    /** @returns the prompt for one audit. */
-    prompt(id) {
-      return buildAuditPrompt(need(id))
+    /** @returns the prompt for one audit, with optional editable guidance. */
+    prompt(id, instructions) {
+      return buildAuditPrompt(need(id), instructions)
     },
     /**
      * Record what the session reported. One report per audit: a second call is

package/lib/index.js

@@ -1395,6 +1395,7 @@ export function apply(ctx, config) {
     // from `agent.options.model`, so a session created without a selection cannot
     // assemble its prompt (that was the first live failure of this card).
     defaultModel: () => service(ctx, 'agentDefaultModel'),
+    llm: () => service(ctx, 'llm'),
     permissions: () => service(ctx, 'permissionPresets'),
     title: () => service(ctx, 'sessionTitle'),
     on: (event, handler) => ctx.on(event, handler),
@@ -1642,11 +1643,16 @@ export function apply(ctx, config) {
       try { return await sidebarStore().write(layout) }
       catch (error) { throw new Error(remoteError(error)) }
     },
+    /** @returns available audit models, reasoning efforts and the profile default selection. */
+    async pluginAuditModels() {
+      try { return await audits.models() }
+      catch (error) { throw new Error(remoteError(error)) }
+    },
     /**
      * Open a security review of one plugin: resolve the target, create the
      * review session, hand it the prompt. The verdict arrives later, through the
      * `report_plugin_audit` tool, so the caller polls `pluginAuditStatus`.
-     * @param options - `{ target, mode }`, where mode is `install` or `review`.
+     * @param options - `{ target, mode, prompt, selection }`; selection is `{ provider, model, reasoningEffort? }`.
      * @returns the audit in the endpoint shape.
      */
     async pluginAuditStart(options) {
@@ -1896,6 +1902,7 @@ export function apply(ctx, config) {
       remoteInvocation('sidebarLayout', []),
       remoteInvocation('saveSidebarLayout', ['layout']),
       remoteInvocation('pluginAuditStart', ['options']),
+      remoteInvocation('pluginAuditModels', ['options']),
       remoteInvocation('pluginAuditStatus', ['options']),
       remoteInvocation('pluginAuditList', []),
       remoteInvocation('pluginAuditDecide', ['options']),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-homepage",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "DeepSeek Harness plugin: a personal home page in the sidebar for a DSH instance. Review a plugin before installing it, and read sessions, projects, tool usage, device, storage, DSH cores, Skills and cost from one composable, registrable card wall.",
   "keywords": [
     "dsh-plugin",
@@ -50,6 +50,7 @@
     "locale/*.json",
     "icon.svg",
     "docs",
+    "screenshots.json",
     "README.md",
     "README.zh.md",
     "LICENSE"

package/screenshots.json

@@ -0,0 +1,4 @@
+[
+  "docs/img/en.png",
+  "docs/img/zh.png"
+]