dsh-plugin-prompt-tool 0.7.2 → 0.8.1

package/engine/compositions/library/anchor-turn.yml

@@ -1,10 +0,0 @@
-# module: anchor-turn
-# source: engine/compositions/library/anchor-turn.yml (本地附加,上游 dsh-anchored-standard 移植)
-# 前置锚定轮：用户首条真实消息前 prepend 合成锚定轮（配合 zero-tool 模式 =
-# 空工具面上的 "we" 锚定）。默认 enabled: false（挂载即禁用，行为不变）；
-# 启用 = params.anchorTurn（UI 开关）或本行 config.enabled: true。
-
-- id: anchor-turn
-  name: ./engine/anchor-turn.mjs
-  config:
-    enabled: false

package/engine/compositions/library/bootstrap-filesystem.yml

@@ -1,19 +0,0 @@
-# module: bootstrap-filesystem
-# source: D:\AI\GitHub\deepseek-harness/packages/preset/agent-presets/presets/minimal/agent.cordis.yml
-# local patches: 1
-
-- id: bootstrap-filesystem
-  name: cordis:group
-  group: true
-  isolate:
-    fs: true
-  config:
-    - id: fs-local
-      name: '@deepseek-ai/dsh-fs-local'
-      config:
-        cwd: !!js process.env.DSH_CWD ?? process.cwd()
-
-    - id: str-replace-editor
-      name: '@deepseek-ai/dsh-tool-str-replace-editor'
-      config:
-        maxOutputChars: 16000

package/engine/compositions/library/code-presentation.yml

@@ -1,8 +0,0 @@
-# module: code-presentation
-# source: engine/compositions/source/local/code-presentation.yml (本地附加,非官方模块)
-# 晋升后 Code Mode (PTC) wire 呈现（从 tool-bootstrap 拆出，与目录窄化解耦）：
-# "只要 PTC 不要 bootstrap" = modules 只挂本行；PTC+bootstrap = 同时挂两行。
-# usePtcMode 默认 false（opt-in）；params.usePtcMode 显式覆盖（参数桥）。
-
-- id: code-presentation
-  name: ./engine/code-presentation.mjs

package/engine/compositions/library/context-gate.yml

@@ -1,39 +0,0 @@
-# module: context-gate
-# source: engine/compositions/source/local/context-gate.yml (本地附加,非官方模块)
-
-- id: context-gate
-  name: ./engine/context-gate.mjs
-  config:
-    promoteOn: either
-    includeSubagents: false
-
-# ── bootstrap ───────────────────────────────────────────────────────────────
-
-# Tool catalog control (mode-owned tool-bootstrap.mjs). V4 Pro conditions
-# strongly on the API tool catalog AND the first request output budget:
-# request #1 exposes the OFFICIAL Minimal preset's real tool pair —
-# persistent `bash` + `str_replace_editor` — which anchors at the
-# adapter-default maxTokens (256000) with no output cap needed (issue #11:
-# 5/5 anchored vs 11/11 standard-like for every standard-family schema);
-# after the session records its first durable promotion signal (a tool call OR
-# the first assistant message, default `promoteOn: either`), later steps keep
-# the assembled catalog and usePtcMode optionally switches the wire to Code
-# Mode (PTC). `bootstrapMaxTokens` is
-# opt-in for standard-schema bootstraps; unset, the adapter default flows. See
-# tool-bootstrap.mjs for the other triggers. Context stripping is NOT here —
-# the context-gate row above owns it.
-#
-# POST-PROMOTION (prompt-tool local addition): both modes keep the assembled
-# catalog after promotion. `usePtcMode` switches the wire presentation to Code
-# Mode (PTC, a single run_code backed by the full registry SDK) instead of
-# narrowing the resident set; the pre-promotion and post-compaction controlled
-# phase below still stays on the bootstrap pair + `compactionTools`.
-#
-# COMPACTION (local addition): after `compaction/end` the session falls back
-# to the controlled phase — bootstrap pair + `compactionTools` — until a NEW
-# durable promotion signal exists past the boundary (epoch-aware, see
-# compaction-epoch.mjs).
-#
-# `includeSubagents: true` keeps the subagent phase in sync with the
-# context-gate row: a subagent's first request sees the bootstrap pair, then
-# its own first reply or tool call promotes it to the assembled catalog.

package/engine/compositions/library/cot-drip.yml

@@ -1,11 +0,0 @@
-# module: cot-drip
-# source: engine/compositions/library/cot-drip.yml (本地附加,上游 dsh-anchored-standard 移植)
-# 深思维持节拍：每 N 次工具结果滴入一条 "We …" 重申提醒（additionalContexts）。
-# 默认 enabled: false（挂载即禁用）；启用 = params.cotDrip（UI 开关）。
-
-- id: cot-drip
-  name: ./engine/cot-drip.mjs
-  config:
-    enabled: false
-    every: 4
-    maxPerTurn: 1

package/engine/compositions/library/custom-bash.yml

@@ -1,14 +0,0 @@
-# module: custom-bash
-# source: engine/compositions/source/local/custom-bash.yml (本地附加,非官方模块)
-
-- id: custom-bash
-  name: ./engine/custom-bash.mjs
-  disabled: !!js process.platform !== 'win32'
-  config:
-    timeoutMs: 120000
-    maxOutputBytes: 64000
-
-# ── filesystem ──────────────────────────────────────────────────────────────
-
-# Both register into the host `tools` registry and provide nothing, so
-# they need no realm. The `fs` service and its policy stay in the host.

package/engine/compositions/library/deliberation-gate.yml

@@ -1,11 +0,0 @@
-# module: deliberation-gate
-# source: engine/compositions/library/deliberation-gate.yml (本地附加,上游 dsh-anchored-standard 移植)
-# 轨迹深度门：首工具调用前流式深思 < minChars 时 deny 一次（规划式提示）。
-# 默认 enabled: false（挂载即禁用）；启用 = params.deliberationGate（UI 开关）。
-
-- id: deliberation-gate
-  name: ./engine/deliberation-gate.mjs
-  config:
-    enabled: false
-    minChars: 400
-    maxGatesPerTurn: 1

package/engine/compositions/library/official-agent-instructions.yml

@@ -1,17 +0,0 @@
-# module: official-agent-instructions
-# source: deepseek-harness official standard agent preset (agent-instructions)
-
-- id: agent-instructions
-  name: '@deepseek-ai/dsh-agent-instructions'
-  config:
-    maxBytes: 65536
-
-# ── shell ───────────────────────────────────────────────────────────────────
-
-# `shell-env` stays in the HOST composition: `apps/cli/src/web.ts` injects it to
-# publish `DSH_WEB_URL`/`DSH_WEB_MODE`, and a host row that injects a service is
-# the criterion for host-plane ownership — injection resolves before any session
-# exists, so there is no agent to key by. Behind a preset realm those variables
-# never reached the model's shell at all. Both shell tools consume the host
-# registry from here; their executors (`bash-sandbox`/`pwsh-sandbox`) are
-# host-plane too.

package/engine/compositions/library/official-skill-filesystem-cordis.yml

@@ -1,10 +0,0 @@
-# module: official-skill-filesystem-cordis
-# source: deepseek-harness official cordis agent preset (skill-filesystem)
-# 差异含 !!js 表达式（代码类），无法经 moduleConfigs 参数化（YAML tag 不保真），保留独立文件。
-
-- id: skill-filesystem
-  name: '@deepseek-ai/dsh-skill-filesystem'
-  config:
-    customSkillDirs:
-      - !!js "process.getBuiltinModule('node:url').fileURLToPath(new URL('skills/', baseUrl))"
-

package/engine/compositions/library/official-tool-bash.yml

@@ -1,6 +0,0 @@
-# module: official-tool-bash
-# source: deepseek-harness official standard agent preset (tool-bash)
-
-- id: tool-bash
-  name: '@deepseek-ai/dsh-tool-bash'
-  disabled: !!js process.platform === 'win32'

package/engine/compositions/library/official-tool-cordis.yml

@@ -1,13 +0,0 @@
-# module: official-tool-cordis
-# source: deepseek-harness official cordis agent preset (tool-cordis)
-
-- id: tool-cordis
-  name: '@deepseek-ai/dsh-tool-cordis'
-
-# The composition-authoring skill travels with this preset rather than living
-# in the user's skill root: it documents THIS deployment's two planes, and a
-# preset is the unit that gets copied and edited. `baseUrl` is the preset's
-# own directory, so the root resolves wherever the preset is installed.
-# Both rows register into THIS preset's layer of the host skill registry, so
-# they need no realm; the agent's merged catalog also carries whatever the
-# deployment registered globally (repository plugins).

package/engine/compositions/library/official-tool-presentation.yml

@@ -1,7 +0,0 @@
-# module: official-tool-presentation
-# source: deepseek-harness official code agent preset (tool-presentation)
-
-- id: tool-presentation
-  name: '@deepseek-ai/dsh-agent-tool-presentation'
-  config:
-    mode: code

package/engine/compositions/library/official-tool-skill.yml

@@ -1,14 +0,0 @@
-# module: official-tool-skill
-# source: deepseek-harness official standard agent preset (tool-skill)
-
-- id: tool-skill
-  name: '@deepseek-ai/dsh-tool-skill'
-
-# ── goals ───────────────────────────────────────────────────────────────────
-
-# Only the model-facing tool. The goal SERVICE, its session driver, and the
-# `/goal` command stay on the host plane: the Gateway serves the goal domain as
-# Remote endpoints whose receiver comes from a generated descriptor, so it
-# resolves `goals` on the host and an entry-local realm here would hide it. The
-# registry is keyed by session anyway, so one host instance serves every
-# session. What a preset chooses is whether its agent can call the goal tool.

package/engine/compositions/library/persona.yml

@@ -1,13 +0,0 @@
-# module: persona
-# source: D:\AI\GitHub\deepseek-harness/packages/preset/agent-presets/presets/standard/agent.cordis.yml
-# local patches: 0
-
-# ── identity ────────────────────────────────────────────────────────────────
-
-# The preset's own persona, shadowing the deployment default for this agent.
-# `{{model}}` and `{{cwd}}` resolve from the agent's own route and workspace.
-- id: persona
-  name: '@deepseek-ai/dsh-persona'
-  config:
-    text: >-
-      You are a coding agent powered by the {{model}} model. Your working directory is {{cwd}}.

package/engine/compositions/library/prompt-config-engine.yml

@@ -1,16 +0,0 @@
-# module: prompt-config-engine
-# source: engine/compositions/source/local/prompt-config-engine.yml (本地附加,非官方模块)
-
-- id: prompt-config-engine
-  name: ./engine/prompt-config-engine.mjs
-  config:
-    configsDir: ../prompt-configs
-
-# ── PTC run_code environment (prompt-tool local addition) ──────────────────
-#
-# Official Code Mode runs the model program in a worker with env={}; the
-# program cannot read system environment. This row patches the reserved
-# run_code transport so every program gets a frozen `env` global containing
-# the whitelisted non-secret host variables below plus managed DSH_* facts
-# and DSH_WORKSPACE. Add deployment-specific names to envKeys as needed.
-# Credential-shaped names (KEY/PASSWORD/SECRET/TOKEN) are always rejected.

package/engine/compositions/library/run-code-env.yml

@@ -1,15 +0,0 @@
-# module: run-code-env
-# source: engine/compositions/source/local/run-code-env.yml (本地附加,非官方模块)
-
-- id: run-code-env
-  name: ./engine/run-code-env.mjs
-  config:
-    enabled: true
-    envKeys: [PATH, PATHEXT, HOME, USERPROFILE, USERNAME, COMPUTERNAME, OS, TEMP, TMP, SystemRoot, ProgramFiles, ProgramFiles(x86), LOCALAPPDATA, APPDATA]
-
-# ── identity ────────────────────────────────────────────────────────────────
-
-# Keep this text byte-identical to the Minimal preset. `complete` prevents the
-# Harness identity and per-tool guidance from changing the system prompt, while
-# runtime-context suppression leaves task and repository rules to user messages
-# and explicit file reads. Tool schemas and their runtime enforcement remain.

package/engine/compositions/library/skill-search.yml

@@ -1,14 +0,0 @@
-# module: skill-search
-# source: engine/compositions/source/local/skill-search.yml (本地附加,非官方模块)
-
-- id: skill-search
-  name: ./engine/skill-search.mjs
-
-# ── goals ───────────────────────────────────────────────────────────────────
-
-# Only the model-facing tool. The goal SERVICE, its session driver, and the
-# `/goal` command stay on the host plane: the Gateway serves the goal domain as
-# Remote endpoints whose receiver comes from a generated descriptor, so it
-# resolves `goals` on the host and an entry-local realm here would hide it. The
-# registry is keyed by session anyway, so one host instance serves every
-# session. What a preset chooses is whether its agent can call the goal tool.

package/engine/compositions/library/str-replace-editor.yml

@@ -1,10 +0,0 @@
-# module: str-replace-editor
-# source: engine/compositions/source/local/str-replace-editor.yml (本地附加,非官方模块)
-# 官方 minimal 内置工具（filesystem group 内的 str-replace-editor 行）拆出为独立模块：
-# 复用宿主 sandbox 的 ctx.fs，不挂 fs-local 裸文件系统。
-# maxOutputChars 参数化：params.strReplaceEditorMaxOutputChars（默认官方值 16000）。
-
-- id: str-replace-editor
-  name: '@deepseek-ai/dsh-tool-str-replace-editor'
-  config:
-    maxOutputChars: 16000

package/engine/compositions/library/tool-bootstrap.yml

@@ -1,14 +0,0 @@
-# module: tool-bootstrap
-# source: engine/compositions/source/local/tool-bootstrap.yml (本地附加,非官方模块)
-
-- id: tool-bootstrap
-  name: ./engine/tool-bootstrap.mjs
-  config:
-    bootstrapTools: [bash, str_replace_editor]
-    promoteOn: either
-    includeSubagents: false
-    # Post-compaction core work set: the model is mid-task and needs to keep
-    # working, but faces a small catalog instead of the full Standard set.
-    compactionTools: [read, write, edit, glob, grep, todo_write, ask_user_question]
-
-# ── prompt-tool 模板自带行(由 write-preset 按 manifest 变量物化) ─────────────

package/engine/compositions/library/tool-config-engine.yml

@@ -1,9 +0,0 @@
-# module: tool-config-engine
-# source: 本地新增（自定义工具引擎：preset.yml customTools 段 → 渲染 custom-tools/ → 运行时注册）
-# 工具定义在预设目录 custom-tools/*.yml；执行器 shell/http/delegate/fs/ask-user。
-# requireApproval 数组可列出需 approval 门的执行器（默认空 = 不要求）。
-
-- id: tool-config-engine
-  name: ./engine/tool-config-engine.mjs
-  config:
-    configsDir: ../custom-tools

package/engine/compositions/library/tool-filter.yml

@@ -1,8 +0,0 @@
-# module: tool-filter
-# source: engine/compositions/source/local/tool-filter.yml (本地附加,非官方模块)
-# 主会话常驻工具白名单/黑名单：作用于任意注册工具（含第三方插件工具）。
-# config 由参数桥按 params.toolFilterAllow/Deny/Subagents 合并；
-# 未声明 = 不过滤（官方默认），见 tool-filter.mjs。
-
-- id: tool-filter
-  name: ./engine/tool-filter.mjs

package/engine/compositions/source/local/code-presentation.yml

@@ -1,8 +0,0 @@
-# module: code-presentation
-# source: engine/compositions/source/local/code-presentation.yml (本地附加,非官方模块)
-# 晋升后 Code Mode (PTC) wire 呈现（从 tool-bootstrap 拆出，与目录窄化解耦）：
-# "只要 PTC 不要 bootstrap" = modules 只挂本行；PTC+bootstrap = 同时挂两行。
-# usePtcMode 默认 false（opt-in）；params.usePtcMode 显式覆盖（参数桥）。
-
-- id: code-presentation
-  name: ./engine/code-presentation.mjs

package/engine/compositions/source/local/context-gate.yml

@@ -1,36 +0,0 @@
-- id: context-gate
-  name: ./engine/context-gate.mjs
-  config:
-    promoteOn: either
-    includeSubagents: false
-
-# ── bootstrap ───────────────────────────────────────────────────────────────
-
-# Tool catalog control (mode-owned tool-bootstrap.mjs). V4 Pro conditions
-# strongly on the API tool catalog AND the first request output budget:
-# request #1 exposes the OFFICIAL Minimal preset's real tool pair —
-# persistent `bash` + `str_replace_editor` — which anchors at the
-# adapter-default maxTokens (256000) with no output cap needed (issue #11:
-# 5/5 anchored vs 11/11 standard-like for every standard-family schema);
-# after the session records its first durable promotion signal (a tool call OR
-# the first assistant message, default `promoteOn: either`), later steps keep
-# the assembled catalog and usePtcMode optionally switches the wire to Code
-# Mode (PTC). `bootstrapMaxTokens` is
-# opt-in for standard-schema bootstraps; unset, the adapter default flows. See
-# tool-bootstrap.mjs for the other triggers. Context stripping is NOT here —
-# the context-gate row above owns it.
-#
-# POST-PROMOTION (prompt-tool local addition): both modes keep the assembled
-# catalog after promotion. `usePtcMode` switches the wire presentation to Code
-# Mode (PTC, a single run_code backed by the full registry SDK) instead of
-# narrowing the resident set; the pre-promotion and post-compaction controlled
-# phase below still stays on the bootstrap pair + `compactionTools`.
-#
-# COMPACTION (local addition): after `compaction/end` the session falls back
-# to the controlled phase — bootstrap pair + `compactionTools` — until a NEW
-# durable promotion signal exists past the boundary (epoch-aware, see
-# compaction-epoch.mjs).
-#
-# `includeSubagents: true` keeps the subagent phase in sync with the
-# context-gate row: a subagent's first request sees the bootstrap pair, then
-# its own first reply or tool call promotes it to the assembled catalog.

package/engine/compositions/source/local/custom-bash.yml

@@ -1,11 +0,0 @@
-- id: custom-bash
-  name: ./engine/custom-bash.mjs
-  disabled: !!js process.platform !== 'win32'
-  config:
-    timeoutMs: 120000
-    maxOutputBytes: 64000
-
-# ── filesystem ──────────────────────────────────────────────────────────────
-
-# Both register into the host `tools` registry and provide nothing, so
-# they need no realm. The `fs` service and its policy stay in the host.

package/engine/compositions/source/local/str-replace-editor.yml

@@ -1,10 +0,0 @@
-# module: str-replace-editor
-# source: engine/compositions/source/local/str-replace-editor.yml (本地附加,非官方模块)
-# 官方 minimal 内置工具（filesystem group 内的 str-replace-editor 行）拆出为独立模块：
-# 复用宿主 sandbox 的 ctx.fs，不挂 fs-local 裸文件系统。
-# maxOutputChars 参数化：params.strReplaceEditorMaxOutputChars（默认官方值 16000）。
-
-- id: str-replace-editor
-  name: '@deepseek-ai/dsh-tool-str-replace-editor'
-  config:
-    maxOutputChars: 16000

package/engine/compositions/source/local/tool-bootstrap.yml

@@ -1,11 +0,0 @@
-- id: tool-bootstrap
-  name: ./engine/tool-bootstrap.mjs
-  config:
-    bootstrapTools: [bash, str_replace_editor]
-    promoteOn: either
-    includeSubagents: false
-    # Post-compaction core work set: the model is mid-task and needs to keep
-    # working, but faces a small catalog instead of the full Standard set.
-    compactionTools: [read, write, edit, glob, grep, todo_write, ask_user_question]
-
-# ── prompt-tool 模板自带行(由 write-preset 按 manifest 变量物化) ─────────────

package/engine/compositions/source/local/tool-filter.yml

@@ -1,8 +0,0 @@
-# module: tool-filter
-# source: engine/compositions/source/local/tool-filter.yml (本地附加,非官方模块)
-# 主会话常驻工具白名单/黑名单：作用于任意注册工具（含第三方插件工具）。
-# config 由参数桥按 params.toolFilterAllow/Deny/Subagents 合并；
-# 未声明 = 不过滤（官方默认），见 tool-filter.mjs。
-
-- id: tool-filter
-  name: ./engine/tool-filter.mjs