dsh-output-styles 0.4.3 → 0.6.0

package/CHANGELOG.md

@@ -4,6 +4,36 @@ All notable changes to this project are documented in this file. The format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and the
 project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.0] - 2026-08-26
+
+### Added
+
+- 与核心 outputStyles 共存/降级策略：探测 + 免重复注入 + 可运行检测。
+
+## [0.5.0] - 2026-08-23
+
+### Added
+
+- **`/export --save <path>`**: the export command now writes the rendered
+  document to a workspace path, gated by the user-approval service and the fs
+  service. `/export [md|markdown|html] [--renderer=<id>] [--save <path>]` — the
+  no-argument behavior is unchanged (the document is returned as output text);
+  `--save` writes only after `ctx.get('approval')` grants `allowed-once`
+  (fail-closed when the service is absent, rejects, cancels, or throws), uses
+  `ctx.get('fs')` for the actual write (fail-loud with a structured error when
+  absent), and passes the document through `sanitizeText` before writing.
+  `md` is accepted as a Markdown alias. `@deepseek-ai/dsh-fs` and
+  `@deepseek-ai/dsh-user-approval` are declared as optional peer dependencies.
+
+### Changed
+
+- **Standards alignment**: `package.json` declares `packageManager` (`pnpm@11.7.0`,
+  matching CI and the lockfile), and the `cordis.patch.yml` reference comment
+  now lists the two renderer-protocol config keys (`rules`, `enableExport`)
+  added in 0.4.0. No runtime behavior changes.
+- Five READMEs: `/export --save` reference, the `fs:write` workshop permission,
+  and the test count refreshed to 127.
+
 ## [0.4.3] - 2026-08-22
 
 ### Changed

package/README.es.md

@@ -40,7 +40,7 @@
 - **Paridad Claude Code** — `keep-coding-instructions`, `force-for-plugin` (alias `force`), compatibilidad JSON `outputStyles`, directorios `stylesDir` por capas, recarga en caliente y fallback del proyecto sobre la costura de settings de DSH.
 - **Registro de renderers (`output.render.*`)** — `ctx.outputRenderers` permite a cualquier plugin registrar un presenter puro, aplicado a través de la cascada `output.render/before`; renderers integrados `concise` y `step-by-step`.
 - **Reglas por sesión/por herramienta** — `rules: [{ match: { tool: 'bash' }, style: 'concise' }]` nombran el renderer para solicitudes coincidentes; editables mediante la sección de settings `output-style-rules`.
-- **`/export`** — renderiza la sesión actual a Markdown o HTML saneado a través de la tubería de render; cada render conserva el texto original junto al renderizado.
+- **`/export`** — renderiza la sesión actual a Markdown o HTML saneado a través de la tubería de render; `--save <path>` escribe el documento saneado en esa ruta de workspace tras la aprobación del usuario. Cada render conserva el texto original junto al renderizado.
 
 ## Quick start
 
@@ -111,14 +111,15 @@ Todos los parámetros son campos Schemastery `Config` (modificables desde cordis
 | `includeBuiltins` | `true` | Incluir los `styles/` del paquete como capa de menor prioridad |
 | `watchStyles` | `true` | Recargar la librería cuando un archivo de estilo cambia en disco |
 | `rules` | `[]` | Reglas de render por sesión/herramienta: `[{ match: { tool?, contentType?, session? }, style, priority? }]` |
-| `enableExport` | `true` | Registrar el comando `/export` (exportación de sesión Markdown/HTML, consciente del renderer) |
+| `enableExport` | `true` | Registrar el comando `/export` (exportación de sesión Markdown/HTML, consciente del renderer; `--save` escribe con aprobación) |
+| `respectCoreOutputStyles` | `true` | Al detectar un servicio core `outputStyles`, omitir la inyección de prompt de este plugin (mantener hot-switch / rules / export) |
 
 ## Tools & surfaces
 
 | Surface | Kind | Notes |
 |---|---|---|
 | `/style` | command | Lista estilos, cambia o restaura el valor por defecto del proyecto |
-| `/export` | command | Renderiza la sesión actual a Markdown o HTML saneado |
+| `/export` | command | Renderiza la sesión actual a Markdown o HTML saneado; `--save` escribe con aprobación |
 | `output_style` | storage domain | Elección de estilo por sesión, indexada por sessionId |
 | `systemPrompt.section()` | contribution | Inyecta el cuerpo del estilo actual en cada ensamblado |
 | `output.render.*` | renderer registry | `ctx.outputRenderers` + la cascada `output.render/before` |
@@ -135,8 +136,10 @@ Todos los parámetros son campos Schemastery `Config` (modificables desde cordis
 | `/style off` | Restaura el valor por defecto del proyecto (default de settings, luego `defaultStyle`) |
 | `/style nope` | `error: unknown output style "nope" (available: …)` |
 | `/export` | Renderiza la sesión actual a Markdown a través de la pipeline de render |
+| `/export md` | Renderiza a Markdown (`md` es la forma abreviada de `markdown`) |
 | `/export html` | Renderiza a HTML saneado |
 | `/export --renderer=concise` | Renderiza forzando un renderer (reglas omitidas) |
+| `/export md --save report.md` | Renderiza y luego escribe el documento saneado en `report.md` tras la aprobación |
 
 ## Style library
 
@@ -182,7 +185,7 @@ Filtrado contra el ecosistema DSH antes del desarrollo (instantánea 2026-08): n
 
 ## Permissions & data
 
-- **Permissions**: el manifiesto de workshop declara `fs:read`, `fs:watch`, `storage:read`, `storage:write` y `settings:read`.
+- **Permissions**: el manifiesto de workshop declara `fs:read`, `fs:write`, `fs:watch`, `storage:read`, `storage:write` y `settings:read`.
 - **Data**: la elección de estilo vive en el dominio de almacenamiento `output_style` (indexada por sessionId); no se persiste otro estado, sin solicitudes de red.
 - **Session log**: el nombre del estilo viene de `command/run`, el texto exacto inyectado de `request/header`; el marcador de procedencia `{ kind: 'plugin', plugin: 'dsh-output-styles' }` viaja en el registro del dominio.
 
@@ -191,6 +194,7 @@ Filtrado contra el ecosistema DSH antes del desarrollo (instantánea 2026-08): n
 - **Solo servicios públicos.** Contribuye `systemPrompt`, comandos, almacenamiento y settings; sin cambios en engine / agent-loop / apiproxy / UI oficial.
 - **Visible para el modelo ⟺ registrado.** Todo lo que el modelo ve es reconstruible desde el registro de sesión — sin un nuevo tipo de evento de sesión, sin cambios en el agent-loop.
 - **Original siempre conservado.** Cada render (y `/export`) conserva el texto original junto al renderizado; para la exportación HTML se usa HTML saneado.
+- **Escrituras en disco controladas.** `/export --save` escribe solo después de que el servicio de aprobación lo conceda, y el contenido escrito pasa primero por la función pura `sanitizeText`; sin un servicio de aprobación o fs no escribe nada (fail-closed).
 
 ## Known limitations
 
@@ -203,7 +207,7 @@ Filtrado contra el ecosistema DSH antes del desarrollo (instantánea 2026-08): n
 ```sh
 pnpm install
 pnpm run typecheck   # ambos proyectos tsc
-pnpm test            # vitest — 107 tests
+pnpm test            # vitest — 127 tests
 pnpm run verify      # typecheck + tests + self-contained (la puerta de prepublishOnly)
 pnpm run build       # artefactos lib/ (bundles host + client)
 pnpm pack            # tarball para dsh plugin add

package/README.hi.md

@@ -40,7 +40,7 @@
 - **Claude Code समानता** — `keep-coding-instructions`, `force-for-plugin` (उपनाम `force`), `outputStyles` JSON संगतता, स्तरित `stylesDir` निर्देशिकाएँ, हॉट रीलोड और DSH settings सीम पर परियोजना-डिफ़ॉल्ट फ़ॉलबैक।
 - **रेंडरर रजिस्ट्री (`output.render.*`)** — `ctx.outputRenderers` किसी भी प्लगइन को एक शुद्ध presenter पंजीकृत करने देता है, जो `output.render/before` वॉटरफ़ॉल से लागू होता है; अंतर्निहित रेंडरर `concise` और `step-by-step`।
 - **प्रति-सत्र/प्रति-टूल नियम** — `rules: [{ match: { tool: 'bash' }, style: 'concise' }]` मिलान वाले अनुरोधों के लिए रेंडरर नामित करते हैं; `output-style-rules` settings अनुभाग से संपादन-योग्य।
-- **`/export`** — रेंडर पाइपलाइन से वर्तमान सत्र को Markdown या सैनिटाइज़्ड HTML में प्रस्तुत करता है; हर रेंडर मूल पाठ को रेंडर किए गए के साथ रखता है।
+- **`/export`** — रेंडर पाइपलाइन से वर्तमान सत्र को Markdown या सैनिटाइज़्ड HTML में प्रस्तुत करता है; `--save <path>` उपयोगकर्ता की स्वीकृति के बाद सैनिटाइज़्ड दस्तावेज़ को उस workspace पथ पर लिखता है। हर रेंडर मूल पाठ को रेंडर किए गए के साथ रखता है।
 
 ## Quick start
 
@@ -111,14 +111,15 @@ flowchart LR
 | `includeBuiltins` | `true` | पैकेज के अंतर्निहित `styles/` को निम्नतम-प्राथमिकता परत के रूप में शामिल करें |
 | `watchStyles` | `true` | डिस्क पर शैली फ़ाइल बदलने पर पुस्तकालय फिर से लोड करें |
 | `rules` | `[]` | प्रति-सत्र/प्रति-टूल रेंडर नियम: `[{ match: { tool?, contentType?, session? }, style, priority? }]` |
-| `enableExport` | `true` | `/export` कमांड पंजीकृत करें (Markdown/HTML सत्र निर्यात, रेंडरर-जागरूक) |
+| `enableExport` | `true` | `/export` कमांड पंजीकृत करें (Markdown/HTML सत्र निर्यात, रेंडरर-जागरूक; `--save` स्वीकृति से लिखता है) |
+| `respectCoreOutputStyles` | `true` | कोर `outputStyles` सेवा का पता चलने पर इस प्लगइन का prompt इंजेक्शन छोड़ें (hot-switch / rules / export बनाए रखें) |
 
 ## Tools & surfaces
 
 | Surface | Kind | Notes |
 |---|---|---|
 | `/style` | command | शैलियाँ सूचीबद्ध करें, बदलें या परियोजना डिफ़ॉल्ट बहाल करें |
-| `/export` | command | वर्तमान सत्र को Markdown या सैनिटाइज़्ड HTML में प्रस्तुत करें |
+| `/export` | command | वर्तमान सत्र को Markdown या सैनिटाइज़्ड HTML में प्रस्तुत करें; `--save` स्वीकृति से लिखता है |
 | `output_style` | storage domain | sessionId से अनुक्रमित सत्र-स्कोप्ड शैली चयन |
 | `systemPrompt.section()` | contribution | हर संयोजन पर वर्तमान शैली का मुख्य भाग इंजेक्ट करता है |
 | `output.render.*` | renderer registry | `ctx.outputRenderers` + `output.render/before` वॉटरफ़ॉल |
@@ -135,8 +136,10 @@ flowchart LR
 | `/style off` | परियोजना डिफ़ॉल्ट बहाल करें (settings डिफ़ॉल्ट, फिर `defaultStyle`) |
 | `/style nope` | `error: unknown output style "nope" (available: …)` |
 | `/export` | रेंडर पाइपलाइन से वर्तमान सत्र को Markdown में प्रस्तुत करें |
+| `/export md` | Markdown में प्रस्तुत करें (`md`, `markdown` का संक्षिप्त रूप है) |
 | `/export html` | सैनिटाइज़्ड HTML में प्रस्तुत करें |
 | `/export --renderer=concise` | एक रेंडरर बाध्य करके प्रस्तुत करें (नियम छोड़े गए) |
+| `/export md --save report.md` | प्रस्तुत करें, फिर स्वीकृति के बाद सैनिटाइज़्ड दस्तावेज़ को `report.md` में लिखें |
 
 ## Style library
 
@@ -182,7 +185,7 @@ flowchart LR
 
 ## Permissions & data
 
-- **Permissions**: workshop मैनिफ़ेस्ट `fs:read`, `fs:watch`, `storage:read`, `storage:write` और `settings:read` घोषित करता है।
+- **Permissions**: workshop मैनिफ़ेस्ट `fs:read`, `fs:write`, `fs:watch`, `storage:read`, `storage:write` और `settings:read` घोषित करता है।
 - **Data**: शैली चयन `output_style` स्टोरेज डोमेन में रहता है (sessionId से अनुक्रमित); कोई अन्य स्थिति स्थायी नहीं, कोई नेटवर्क अनुरोध नहीं।
 - **Session log**: शैली नाम `command/run` से आता है, सटीक इंजेक्ट किया गया पाठ `request/header` से; स्रोत मार्कर `{ kind: 'plugin', plugin: 'dsh-output-styles' }` डोमेन रिकॉर्ड में चलता है।
 
@@ -191,6 +194,7 @@ flowchart LR
 - **केवल सार्वजनिक सेवाएँ।** `systemPrompt`, कमांड, स्टोरेज और settings योगदान करता है; engine / agent-loop / apiproxy / आधिकारिक UI में कोई बदलाव नहीं।
 - **मॉडल-दृश्य ⟺ लॉग किया गया।** मॉडल जो देखता है वह सब सत्र लॉग से पुनर्निर्माण-योग्य है — कोई नया सत्र घटना प्रकार नहीं, कोई agent-loop बदलाव नहीं।
 - **मूल हमेशा रखा गया।** हर रेंडर (और `/export`) मूल पाठ को रेंडर किए गए के साथ रखता है; HTML निर्यात के लिए सैनिटाइज़्ड HTML उपयोग होता है।
+- **डिस्क लेखन गेटेड।** `/export --save` केवल स्वीकृति सेवा की अनुमति के बाद लिखता है, और लिखा गया कंटेंट पहले `sanitizeText` शुद्ध फ़ंक्शन से गुज़रता है; स्वीकृति या fs सेवा के बिना कुछ भी नहीं लिखा जाता (fail-closed)।
 
 ## Known limitations
 
@@ -203,7 +207,7 @@ flowchart LR
 ```sh
 pnpm install
 pnpm run typecheck   # दोनों tsc परियोजनाएँ
-pnpm test            # vitest — 107 tests
+pnpm test            # vitest — 127 tests
 pnpm run verify      # typecheck + tests + self-contained (prepublishOnly द्वार)
 pnpm run build       # lib/ कलाकृतियाँ (host + client बंडल)
 pnpm pack            # dsh plugin add के लिए tarball

package/README.md

@@ -41,7 +41,7 @@
 - **Claude Code parity** — `keep-coding-instructions`, `force-for-plugin` (`force` alias), `outputStyles` JSON compatibility, layered `stylesDir` directories, hot reload, and project-default fallback over the DSH settings seam.
 - **Renderer registry (`output.render.*`)** — `ctx.outputRenderers` lets any plugin register a pure presenter, applied through the `output.render/before` waterfall; built-in renderers `concise` and `step-by-step`.
 - **Per-session/per-tool rules** — `rules: [{ match: { tool: 'bash' }, style: 'concise' }]` name the renderer for matching requests; editable through the `output-style-rules` settings section.
-- **`/export`** — render the current session to Markdown or sanitized HTML through the render pipeline; every render keeps the original text beside the rendered one.
+- **`/export`** — render the current session to Markdown or sanitized HTML through the render pipeline; `--save <path>` writes the sanitized document to that workspace path after user approval. Every render keeps the original text beside the rendered one.
 
 ## Quick start
 
@@ -112,14 +112,15 @@ All tunables are Schemastery `Config` fields (changeable from cordis.yml). Inval
 | `includeBuiltins` | `true` | Include the package's bundled `styles/` as the lowest-priority layer |
 | `watchStyles` | `true` | Reload the library when a style file changes on disk |
 | `rules` | `[]` | Per-session/per-tool render rules: `[{ match: { tool?, contentType?, session? }, style, priority? }]` |
-| `enableExport` | `true` | Register the `/export` command (Markdown/HTML session export, renderer-aware) |
+| `enableExport` | `true` | Register the `/export` command (Markdown/HTML session export, renderer-aware; `--save` writes with approval) |
+| `respectCoreOutputStyles` | `true` | When a core `outputStyles` service is detected, skip this plugin's prompt injection (keep hot-switch / rules / export) |
 
 ## Tools & surfaces
 
 | Surface | Kind | Notes |
 |---|---|---|
 | `/style` | command | List styles, switch, or restore the project default |
-| `/export` | command | Render the current session to Markdown or sanitized HTML |
+| `/export` | command | Render the current session to Markdown or sanitized HTML; `--save` writes with approval |
 | `output_style` | storage domain | Session-scoped style choice, keyed by sessionId |
 | `systemPrompt.section()` | contribution | Injects the current style body at every assembly |
 | `output.render.*` | renderer registry | `ctx.outputRenderers` + the `output.render/before` waterfall |
@@ -136,8 +137,10 @@ All tunables are Schemastery `Config` fields (changeable from cordis.yml). Inval
 | `/style off` | Restore the project default (settings default, then `defaultStyle`) |
 | `/style nope` | `error: unknown output style "nope" (available: …)` |
 | `/export` | Render the current session to Markdown through the renderer pipeline |
+| `/export md` | Render to Markdown (`md` is the shorthand for `markdown`) |
 | `/export html` | Render to sanitized HTML |
 | `/export --renderer=concise` | Render with one renderer forced (rules bypassed) |
+| `/export md --save report.md` | Render, then write the sanitized document to `report.md` after approval |
 
 ## Style library
 
@@ -183,7 +186,7 @@ Screened against the DSH ecosystem before development (2026-08 snapshot): no `st
 
 ## Permissions & data
 
-- **Permissions**: declares `fs:read`, `fs:watch`, `storage:read`, `storage:write`, and `settings:read` in its workshop manifest.
+- **Permissions**: declares `fs:read`, `fs:write`, `fs:watch`, `storage:read`, `storage:write`, and `settings:read` in its workshop manifest.
 - **Data**: the style choice lives in the `output_style` storage domain (keyed by sessionId); no other state is persisted, no network requests.
 - **Session log**: the style name comes from `command/run`, the exact injected text from `request/header`; the provenance marker `{ kind: 'plugin', plugin: 'dsh-output-styles' }` rides in the domain record.
 
@@ -192,9 +195,11 @@ Screened against the DSH ecosystem before development (2026-08 snapshot): no `st
 - **Public services only.** Contributes `systemPrompt`, commands, storage, and settings; no engine / agent-loop / apiproxy / official-UI changes.
 - **Model-visible ⟺ logged.** Everything the model sees is reconstructable from the session log — no new session event type, no agent-loop changes.
 - **Original always kept.** Every render (and `/export`) keeps the original text beside the rendered one; sanitized HTML is used for HTML export.
+- **Disk writes gated.** `/export --save` writes only after the approval service grants it, and the written content passes through the `sanitizeText` pure function first; without an approval or fs service it writes nothing (fail-closed).
 
 ## Known limitations
 
+- **Core coexistence.** If a first-party `outputStyles` capability lands, this plugin detects its `outputStyles` service and degrades to the incremental surface (hot-switch, rules, `/export`) while leaving prompt injection to the core — see [`docs/COEXISTENCE.md`](docs/COEXISTENCE.md) and the exported `detectCoreOutputStyles` / `coexistenceReport` functions.
 - **Main conversation only.** Styles apply to the main conversation; subagent sessions keep their own prompts (matching Claude Code).
 - **Truncation.** Style bodies longer than `maxStyleChars` are truncated with a marker.
 - **Skipped style files.** A bad style file is skipped with a warning and never breaks the profile.
@@ -204,7 +209,7 @@ Screened against the DSH ecosystem before development (2026-08 snapshot): no `st
 ```sh
 pnpm install
 pnpm run typecheck   # both tsc projects
-pnpm test            # vitest — 107 tests
+pnpm test            # vitest — 127 tests
 pnpm run verify      # typecheck + tests + self-contained (the prepublishOnly gate)
 pnpm run build       # lib/ artifacts (host + client bundles)
 pnpm pack            # tarball for dsh plugin add

package/README.pt.md

@@ -40,7 +40,7 @@ O `dsh-output-styles` é o equivalente do `outputStyles` do Claude Code para o D
 - **Paridade Claude Code** — `keep-coding-instructions`, `force-for-plugin` (alias `force`), compatibilidade JSON `outputStyles`, diretórios `stylesDir` em camadas, recarga a quente e fallback do projeto sobre a costura de settings do DSH.
 - **Registro de renderers (`output.render.*`)** — `ctx.outputRenderers` permite a qualquer plugin registrar um presenter puro, aplicado pela cascata `output.render/before`; renderers integrados `concise` e `step-by-step`.
 - **Regras por sessão/por ferramenta** — `rules: [{ match: { tool: 'bash' }, style: 'concise' }]` nomeiam o renderer para solicitações coincidentes; editáveis pela seção de settings `output-style-rules`.
-- **`/export`** — renderiza a sessão atual para Markdown ou HTML saneado pela pipeline de render; cada render mantém o texto original ao lado do renderizado.
+- **`/export`** — renderiza a sessão atual para Markdown ou HTML saneado pela pipeline de render; `--save <path>` escreve o documento saneado nessa rota de workspace após aprovação do usuário. Cada render mantém o texto original ao lado do renderizado.
 
 ## Quick start
 
@@ -111,14 +111,15 @@ Todos os parâmetros são campos Schemastery `Config` (alteráveis pelo cordis.y
 | `includeBuiltins` | `true` | Incluir os `styles/` do pacote como camada de menor prioridade |
 | `watchStyles` | `true` | Recarregar a biblioteca quando um arquivo de estilo muda em disco |
 | `rules` | `[]` | Regras de render por sessão/ferramenta: `[{ match: { tool?, contentType?, session? }, style, priority? }]` |
-| `enableExport` | `true` | Registrar o comando `/export` (exportação de sessão Markdown/HTML, ciente do renderer) |
+| `enableExport` | `true` | Registrar o comando `/export` (exportação de sessão Markdown/HTML, ciente do renderer; `--save` escreve com aprovação) |
+| `respectCoreOutputStyles` | `true` | Ao detectar um serviço core `outputStyles`, omitir a injeção de prompt deste plugin (manter hot-switch / rules / export) |
 
 ## Tools & surfaces
 
 | Surface | Kind | Notes |
 |---|---|---|
 | `/style` | command | Lista estilos, alterna ou restaura o padrão do projeto |
-| `/export` | command | Renderiza a sessão atual para Markdown ou HTML saneado |
+| `/export` | command | Renderiza a sessão atual para Markdown ou HTML saneado; `--save` escreve com aprovação |
 | `output_style` | storage domain | Escolha de estilo por sessão, indexada por sessionId |
 | `systemPrompt.section()` | contribution | Injeta o corpo do estilo atual a cada montagem |
 | `output.render.*` | renderer registry | `ctx.outputRenderers` + a cascata `output.render/before` |
@@ -135,8 +136,10 @@ Todos os parâmetros são campos Schemastery `Config` (alteráveis pelo cordis.y
 | `/style off` | Restaura o padrão do projeto (default de settings, depois `defaultStyle`) |
 | `/style nope` | `error: unknown output style "nope" (available: …)` |
 | `/export` | Renderiza a sessão atual para Markdown pela pipeline de render |
+| `/export md` | Renderiza para Markdown (`md` é a forma abreviada de `markdown`) |
 | `/export html` | Renderiza para HTML saneado |
 | `/export --renderer=concise` | Renderiza forçando um renderer (regras ignoradas) |
+| `/export md --save report.md` | Renderiza e então escreve o documento saneado em `report.md` após aprovação |
 
 ## Style library
 
@@ -182,7 +185,7 @@ Filtrado contra o ecossistema DSH antes do desenvolvimento (instantânea 2026-08
 
 ## Permissions & data
 
-- **Permissions**: o manifesto de workshop declara `fs:read`, `fs:watch`, `storage:read`, `storage:write` e `settings:read`.
+- **Permissions**: o manifesto de workshop declara `fs:read`, `fs:write`, `fs:watch`, `storage:read`, `storage:write` e `settings:read`.
 - **Data**: a escolha de estilo vive no domínio de armazenamento `output_style` (indexada por sessionId); nenhum outro estado é persistido, sem solicitações de rede.
 - **Session log**: o nome do estilo vem de `command/run`, o texto exato injetado de `request/header`; o marcador de procedência `{ kind: 'plugin', plugin: 'dsh-output-styles' }` viaja no registro do domínio.
 
@@ -191,6 +194,7 @@ Filtrado contra o ecossistema DSH antes do desenvolvimento (instantânea 2026-08
 - **Somente serviços públicos.** Contribui `systemPrompt`, comandos, armazenamento e settings; sem alterações em engine / agent-loop / apiproxy / UI oficial.
 - **Visível para o modelo ⟺ registrado.** Tudo o que o modelo vê é reconstruível a partir do log de sessão — sem novo tipo de evento de sessão, sem alterações no agent-loop.
 - **Original sempre conservado.** Cada render (e `/export`) mantém o texto original ao lado do renderizado; a exportação HTML usa HTML saneado.
+- **Escritas em disco controladas.** `/export --save` escreve somente após o serviço de aprovação conceder, e o conteúdo escrito passa primeiro pela função pura `sanitizeText`; sem um serviço de aprovação ou fs, nada é escrito (fail-closed).
 
 ## Known limitations
 
@@ -203,7 +207,7 @@ Filtrado contra o ecossistema DSH antes do desenvolvimento (instantânea 2026-08
 ```sh
 pnpm install
 pnpm run typecheck   # ambos os projetos tsc
-pnpm test            # vitest — 107 tests
+pnpm test            # vitest — 127 tests
 pnpm run verify      # typecheck + tests + self-contained (a porta de prepublishOnly)
 pnpm run build       # artefatos lib/ (bundles host + client)
 pnpm pack            # tarball para dsh plugin add

package/README.zh.md

@@ -40,7 +40,7 @@
 - **Claude Code 对齐** —— `keep-coding-instructions`、`force-for-plugin`（别名 `force`）、`outputStyles` JSON 兼容、分层 `stylesDir` 目录、热重载，以及通过 DSH settings 接缝的项目默认回退。
 - **渲染器注册表（`output.render.*`）** —— `ctx.outputRenderers` 允许任意插件注册纯 presenter，经 `output.render/before` waterfall 应用；内置渲染器 `concise` 与 `step-by-step`。
 - **按会话/按工具规则** —— `rules: [{ match: { tool: 'bash' }, style: 'concise' }]` 为匹配请求指定渲染器；可通过 `output-style-rules` 设置区编辑。
-- **`/export`** —— 经渲染管线把当前会话导出为 Markdown 或净化 HTML；每次渲染都保留原文与渲染结果并列。
+- **`/export`** —— 经渲染管线把当前会话导出为 Markdown 或净化 HTML；`--save <path>` 经用户审批后把净化文档写入该工作区路径。每次渲染都保留原文与渲染结果并列。
 
 ## Quick start
 
@@ -111,14 +111,15 @@ flowchart LR
 | `includeBuiltins` | `true` | 将包内置 `styles/` 作为最低优先级层 |
 | `watchStyles` | `true` | 风格文件在磁盘上变化时重载库 |
 | `rules` | `[]` | 按会话/按工具渲染规则：`[{ match: { tool?, contentType?, session? }, style, priority? }]` |
-| `enableExport` | `true` | 注册 `/export` 命令（Markdown/HTML 会话导出，感知渲染器） |
+| `enableExport` | `true` | 注册 `/export` 命令（Markdown/HTML 会话导出，感知渲染器；`--save` 经审批写入） |
+| `respectCoreOutputStyles` | `true` | 检测到核心 `outputStyles` 服务时跳过本插件的提示词注入（保留热切换 / rules / export） |
 
 ## Tools & surfaces
 
 | Surface | Kind | Notes |
 |---|---|---|
 | `/style` | command | 列出风格、切换或恢复项目默认 |
-| `/export` | command | 把当前会话渲染为 Markdown 或净化 HTML |
+| `/export` | command | 把当前会话渲染为 Markdown 或净化 HTML；`--save` 经审批写入 |
 | `output_style` | storage domain | 按 sessionId 隔离的会话级风格选择 |
 | `systemPrompt.section()` | contribution | 在每次组装时注入当前风格正文 |
 | `output.render.*` | renderer registry | `ctx.outputRenderers` + `output.render/before` waterfall |
@@ -135,8 +136,10 @@ flowchart LR
 | `/style off` | 恢复项目默认（settings 默认，其次 `defaultStyle`） |
 | `/style nope` | `error: unknown output style "nope" (available: …)` |
 | `/export` | 经渲染管线把当前会话渲染为 Markdown |
+| `/export md` | 渲染为 Markdown（`md` 是 `markdown` 的简写） |
 | `/export html` | 渲染为净化 HTML |
 | `/export --renderer=concise` | 强制指定一个渲染器渲染（跳过规则） |
+| `/export md --save report.md` | 渲染后经审批把净化文档写入 `report.md` |
 
 ## Style library
 
@@ -182,7 +185,7 @@ flowchart LR
 
 ## Permissions & data
 
-- **Permissions**：workshop 清单声明 `fs:read`、`fs:watch`、`storage:read`、`storage:write` 与 `settings:read`。
+- **Permissions**：workshop 清单声明 `fs:read`、`fs:write`、`fs:watch`、`storage:read`、`storage:write` 与 `settings:read`。
 - **Data**：风格选择存于 `output_style` 存储域（按 sessionId 隔离）；不持久化其他状态，无网络请求。
 - **Session log**：风格名来自 `command/run`，精确注入文本来自 `request/header`；来源标记 `{ kind: 'plugin', plugin: 'dsh-output-styles' }` 随域记录携带。
 
@@ -191,6 +194,7 @@ flowchart LR
 - **仅公开服务。** 贡献 `systemPrompt`、命令、存储与 settings；不改 engine / agent-loop / apiproxy / 官方 UI。
 - **模型可见 ⟺ 已记录。** 模型所见的一切都能从会话日志重建 —— 无新增会话事件类型、无 agent-loop 改动。
 - **始终保留原文。** 每次渲染（含 `/export`）都保留原文与渲染结果并列；HTML 导出使用净化 HTML。
+- **写盘有门禁。** `/export --save` 仅在审批服务放行后写入，且写入内容先经 `sanitizeText` 纯函数净化；缺少审批或 fs 服务时一律不写入（fail-closed）。
 
 ## Known limitations
 
@@ -203,7 +207,7 @@ flowchart LR
 ```sh
 pnpm install
 pnpm run typecheck   # 两个 tsc 项目
-pnpm test            # vitest —— 107 个测试
+pnpm test            # vitest —— 127 个测试
 pnpm run verify      # typecheck + tests + self-contained（prepublishOnly 门禁）
 pnpm run build       # lib/ 产物（host + client 包）
 pnpm pack            # 供 dsh plugin add 的 tarball

package/cordis.patch.yml

@@ -31,6 +31,11 @@
       #   truncationMarker: "\n\n[style truncated]"
       #   includeBuiltins: true
       #   watchStyles: true
+      #   rules: []                  # per-session/per-tool render rules
+      #                              # [{ match: { tool?, contentType?, session? }, style, priority? }]
+      #   enableExport: true         # register the /export command
+      #                              # (md|html; --save <path> writes the
+      #                              # sanitized document after approval)
 
     # Optional invariant companion (envelope-level checks). Only for profiles
     # that DISABLE the main row above: the main plugin already registers

package/docs/COEXISTENCE.md

@@ -0,0 +1,62 @@
+# Coexistence with a core `outputStyles` capability
+
+`dsh-output-styles` is the standalone Claude Code `outputStyles`-equivalent. If
+DeepSeek Harness ships a first-party `outputStyles` feature, the two would
+otherwise both inject an output-style directive into the system prompt. This
+plugin ships a coexistence policy that detects the core capability and degrades
+to the incremental surface it uniquely adds.
+
+## Detection
+
+The core capability is detected through its reserved service seam, not by name
+guessing. A core implementation publishes the `outputStyles` service; the plugin
+probes it at mount:
+
+```ts
+import { detectCoreOutputStyles } from 'dsh-output-styles'
+
+// ctx is the plugin-scoped Cordis context.
+const coreActive = detectCoreOutputStyles(ctx)
+```
+
+- **Core absent** → `standalone` mode: the plugin injects the style section
+  (`systemPrompt.section('output-style:selection')` plus the
+  `system-prompt/assemble` waterfall for `keep-coding-instructions: false`).
+- **Core present** → `degraded` mode: prompt injection is left to the core, and
+  the plugin keeps only hot-switch (`/style`), rules, and `/export`.
+
+## Runnable verification
+
+`coexistenceReport` is the runnable check for one composition:
+
+```ts
+import { coexistenceReport } from 'dsh-output-styles'
+
+const report = coexistenceReport(ctx)
+// report = { coreActive, mode: 'standalone' | 'degraded',
+//            promptInjection: 'enabled' | 'disabled', retained, disabled }
+```
+
+It is also covered by the test suite (`tests/coexist.spec.ts`), which mounts the
+plugin with a fake `outputStyles` service and asserts the injected section is
+absent while `/style` and the renderer registry stay active.
+
+## Forcing injection
+
+A deployment that wants this plugin to keep injecting regardless of the core can
+set `respectCoreOutputStyles: false` in `cordis.yml`. The default is `true`
+(honor the core and avoid duplicate injection).
+
+## Degraded surface
+
+In `degraded` mode the plugin still contributes:
+
+- **Hot-switch** — `/style` listing/selection, per-session persistence over the
+  `output_style` domain, and the `style` session projection.
+- **Rules** — the `output.render.*` renderer registry, the
+  `output.render/before` waterfall, and per-session/per-tool rules.
+- **Export** — `/export` (Markdown / sanitized HTML) through the renderer
+  pipeline, with approval-gated `--save`.
+
+Only the two prompt-injection registrations (the prompt section and the
+`system-prompt/assemble` waterfall) are skipped.

package/docs/renderer-protocol.md

@@ -132,3 +132,13 @@ export function apply(ctx: Context): void {
 const result = await ctx.outputRenderers.renderText(rawText, { tool: 'sql', contentType: 'text' })
 // { original, rendered, rendererId, changed } — log both halves wherever you surface it.
 ```
+
+## Export to disk
+
+`/export` returns the rendered document as command output text. `/export
+[md|markdown|html] [--renderer=<id>] --save <path>` additionally writes the
+document to a workspace path: the document passes through the `sanitizeText`
+pure function first, then the write is gated by the approval service
+(`ctx.get('approval')`, fail-closed when absent) and performed by the fs
+service (`ctx.get('fs')`, fail-loud when absent). The render pipeline itself is
+unchanged — the same presenters and rule table apply before either output.

package/docs/renderer-protocol.zh.md

@@ -123,3 +123,11 @@ export function apply(ctx: Context): void {
 const result = await ctx.outputRenderers.renderText(rawText, { tool: 'sql', contentType: 'text' })
 // { original, rendered, rendererId, changed } —— 在任何展示它的地方把两半都记下来。
 ```
+
+## 导出到磁盘
+
+`/export` 把渲染后的文档作为命令输出文本返回。`/export [md|markdown|html]
+[--renderer=<id>] --save <path>` 另外把文档写入工作区路径：文档先经 `sanitizeText`
+纯函数净化，随后写入由审批服务（`ctx.get('approval')`，缺失则 fail-closed）把关、由
+fs 服务（`ctx.get('fs')`，缺失则大声失败）执行。渲染流水线本身不变——两种输出之前都应用
+同样的 presenter 与规则表。