dsh-prompt-customizer 0.12.0 → 2.1.2

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 DreamsTOF
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 DreamsTOF
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.en.md

@@ -31,7 +31,7 @@
 
 A [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (dsh) plugin. It adds an independent "Capabilities" panel to the sidebar that brings three otherwise configuration-heavy jobs into one visual surface:
 
-- **Prompt customization**: block, replace, inject and reorder system-prompt sections by name;
+- **Prompt customization**: block, replace, inject and reorder system-prompt sections by name + source — across every scope, including session-level sections that plugins register dynamically on the active agent's own scope (universal takeover, ADR-0005);
 - **Skill collection management**: import, group and toggle skills;
 - **MCP server integration**: add MCP servers and apply preset-level or tool-level masking.
 
@@ -39,9 +39,11 @@ All changes go through documented plugin extension points. No DSH source is modi
 
 ## Features
 
-- **Prompt sections**: block / replace / inject / drag-reorder prompt sections, with a live preview of the final system prompt the model receives.
+- **Prompt sections**: block / replace / inject / drag-reorder prompt sections, with a live preview of the final system prompt the model receives. The editable inventory and preview merge the selected preset with the same-preset active agent's real assembly, so plugin-injected session-level sections are enumerated and controllable. The host also exposes a read-only `/api/prompt-customizer/session` route reporting the latest active root session's own real assembly (there is no separate "Current session" panel tab).
 - **Phase and preset layering**: bootstrap, resident and compaction-controlled phases each have their own section lists, ordering space and tool catalog; the top preset selector scopes edits to one agent preset.
+- **Single-preset editing (2.0.0)**: prompt/tool customization is stored and applied only per **agent preset**. The workspace-level prompt/tool layer has been removed (source archived, data dormant, neither read nor backed up). Workspaces still apply to MCP / skills / cwd.
 - **Tool catalog**: hide or add back tools per phase, with a "model-visible / registry total" comparison that also handles PTC / Code Mode `run_code` wrapping.
+- **Tool prompt sections**: the Tools view links each `tool:*` prompt section to its tool group (for example `tool:jobs` covers `job_kill/job_list/job_output`), while the Prompt view can block / replace / reorder those sections independently. Tool descriptions stay read-only and JSON Schema is not part of prompt editing.
 - **Skill management**: skill bundles, ZIP / folder import, global and preset toggles, skill-root and membership health checks.
 - **MCP management**: paste JSON / YAML to connect, preset-owned server rows, global / preset masking, per-tool enable/disable, recommended templates.
 - **Prompt variables**: built-in date / host / environment facts plus `process.env` mapping with a secret blocklist.
@@ -74,7 +76,7 @@ Or install from a local checkout:
 dsh plugin --profile web add /path/to/dsh-prompt-customizer
 ```
 
-Current release targets **DSH 0.2.2-rc.1**. Version compatibility, per-release changes and migration notes live in [docs/upgrades/README.md](docs/upgrades/README.md).
+Current release **2.1.2** (single-preset editing; **universal system-prompt takeover** — the inventory and preview merge the selected preset with the same-preset active agent's real assembly so plugin-injected session-level sections can be enumerated and blocked; **tool catalog matches the live session** — the visible tool list now comes from `ctx.tools.schemas(agent)` instead of the preset-only assembly; **same-name shadow detection** — inherited tools displaced by a same-name plugin tool enter the read-only masked pool, and plugin-only session-level tools are listed honestly as such; DSH runtime tool/prompt contracts, mask pool, workspace skill status, provider summary cache and write serialization; MCP global edit keeps JSON/YAML; live agent preset resolution via `composedPreset`; A/B preset, uninstall-restore and source-immutability regressions), targeting **DSH 0.2.2-rc.1**. Version compatibility, per-release changes and migration notes live in [docs/upgrades/README.md](docs/upgrades/README.md).
 
 ## Quick start
 
@@ -86,9 +88,8 @@ Prompt sections and tools can be configured separately for the bootstrap, compac
 
 ## Where the configuration lives
 
-- `~/.dsh/prompt-customizer/config.yaml`: prompt customization and per-phase tool catalog.
-- `~/.dsh/prompt-customizer/catalog.yaml`: cross-preset section / tool catalog cache (derived; safe to delete).
-- Skill and MCP ledgers live under the plugin's directory in `$DSH_HOME` and the relevant workspace directories.
+- **A single SQLite file**: `~/.dsh/prompt-customizer/prompt-customizer.db` (WAL, using the built-in `node:sqlite`, no external dependency). Preset customizations and the MCP / skill ledgers live in this one DB; workspace-level prompt/tool data is retained as dormant fields without reads or writes. Host config files (`cordis.patch.yml` / `.mcp.json`) and per-skill-root `.bundles.json` remain files.
+- **Breaking change (1.0.0)**: the old `config.yaml` / `catalog.yaml` and JSON ledgers are **no longer read or migrated** (files are left untouched); upgrading to 1.0.0 requires **re-configuring**. See [docs/upgrades/1.0.0-sqlite-breaking.md](docs/upgrades/1.0.0-sqlite-breaking.md).
 
 ## Development
 

package/README.i18n.yaml

@@ -1,2 +1,2 @@
-en: README.en.md
-zh-CN: README.md
+en: README.en.md
+zh-CN: README.md

package/README.md

@@ -43,7 +43,7 @@
 
 一个 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)（dsh）插件。它在侧边栏提供一个独立的「能力」面板，把三件平时要改配置、翻源码才能完成的事集中到可视化界面：
 
-- **提示词定制**：按名称屏蔽、替换、注入、排序系统提示词段；
+- **提示词定制**：按名字 + 来源屏蔽、替换、注入、排序系统提示词段；
 - **技能集合管理**：导入、归组、开关技能；
 - **MCP Server 接入**：添加 MCP Server，并按预设或工具粒度做遮蔽与启停。
 
@@ -51,9 +51,11 @@
 
 ## 核心能力
 
-- **提示词段管理**：屏蔽 / 替换 / 注入 / 拖动排序提示词段，右栏实时预览模型最终看到的系统提示词。
+- **提示词段管理**：屏蔽 / 替换 / 注入 / 拖动排序提示词段，右栏实时预览模型最终看到的系统提示词；**全域接管**：任何插件在任意作用域（含 `agent/created` 里动态注册的会话级段）注入的系统提示词段，都会出现在可编辑清单里并可被屏蔽 / 替换 / 排序。宿主侧另有 `/api/prompt-customizer/session` 只读路由，按最新活动根会话自己的 agent 作用域展示真实提示词与工具目录（面板本身不单独开「当前会话」Tab）。
 - **阶段与预设分层**：引导期、常驻期、压缩受控期各有独立的段名单、排序空间与工具目录；顶部按 agent 预设切换编辑目标，某个预设的定制只对该预设生效。
+- **单预设编辑（2.0.0）**：提示词 / 工具定制只按 **agent 预设** 保存与生效；工作区级提示词/工具层已移除（源码归档、数据休眠，不读不写不备份）。工作区概念仍用于 MCP / 技能 / cwd。
 - **工具目录**：按阶段隐藏或加回工具，面板同时显示「模型可见 / 注册表总数」，PTC / Code Mode 的 `run_code` 包装也能正确对照。
+- **工具提示词段**：工具页显示 `tool:*` 提示词段与工具组的关联（如 `tool:jobs` → `job_kill/job_list/job_output`），提示词页可独立屏蔽 / 替换 / 排序；工具 description 只读展示，JSON Schema 不纳入提示词编辑。
 - **技能管理**：技能包归组、ZIP / 文件夹导入、全局 / 预设两层开关、技能根与成员一致性体检。
 - **MCP 管理**：粘贴 JSON / YAML 接入、预设专属 Server 行、全局 / 预设双层遮蔽、工具级启停、推荐配置模板。
 - **提示词变量**：内置日期、主机、环境等变量，支持 `process.env` 映射与密钥黑名单。
@@ -86,7 +88,7 @@ dsh plugin --profile desktop add dsh-prompt-customizer
 dsh plugin --profile web add /path/to/dsh-prompt-customizer
 ```
 
-当前版本对齐 **DSH 0.2.2-rc.1**。版本对应关系、逐版变更和适配记录见 [docs/upgrades/README.md](docs/upgrades/README.md)。
+当前版本 **2.1.2**（单预设编辑；**全域系统提示词接管**：清单与预览并入同预设活动 agent 的真实装配，插件动态注入的会话级段可枚举、可屏蔽；**工具目录与真实会话同源**：右栏可见工具目录改用 `ctx.tools.schemas(agent)`，不再只显示预设层；**同名遮蔽探测**：被插件同名工具顶掉的原生工具无条件进入只读遮蔽池，插件纯新增的会话级工具也如实列出；工具屏蔽池、工作区技能状态、汇总缓存和写队列回归已补齐；MCP 全局编辑支持 JSON/YAML；活跃 Agent 预设按 `composedPreset` 精确归位；A/B 预设提示词与工具隔离、卸载恢复及原文不可变回归）。版本对应关系、逐版变更和适配记录见 [docs/upgrades/README.md](docs/upgrades/README.md)。
 
 ## 快速上手
 
@@ -98,9 +100,8 @@ dsh plugin --profile web add /path/to/dsh-prompt-customizer
 
 ## 配置位置
 
-- `~/.dsh/prompt-customizer/config.yaml`：提示词定制与阶段工具目录配置。
-- `~/.dsh/prompt-customizer/catalog.yaml`：跨预设的段 / 工具累积登记表（派生缓存，可删除重建）。
-- 技能与 MCP 的账本、技能包记录等位于 `$DSH_HOME` 下本插件目录及工作区对应目录。
+- **统一为单文件 SQLite**：`~/.dsh/prompt-customizer/prompt-customizer.db`（WAL，使用 Node 内建 `node:sqlite`，无外部依赖）。预设定制、MCP 与技能各账本都在这一个库里；工作区级提示词/工具数据作为休眠字段保留但不读不写。宿主配置文件（`cordis.patch.yml` / `.mcp.json`）与技能根下的 `.bundles.json` 仍保持文件。
+- **破坏式更新（1.0.0）**：旧版 `config.yaml` / `catalog.yaml` 及各 JSON 账本**不再读取、不迁移**（文件原样保留）；升级到 1.0.0 需**重新配置**。详见 [docs/upgrades/1.0.0-sqlite-breaking.md](docs/upgrades/1.0.0-sqlite-breaking.md)。
 
 ## 开发
 

package/build.mjs

@@ -1,236 +1,236 @@
-/**
- * dsh-prompt-customizer — build script.
- *
- * Two bundles from one esbuild run:
- *
- *   lib/index.js   host half    ESM,  node platform,  self-contained
- *   lib/client.js  browser half CJS,  browser platform, wrapped in the
- *                  `window.__ModuleLoader__.load` factory contract
- *
- * The host half must stay **resolvable from an installed location**, i.e. from
- * inside `~/.dsh/profiles/<p>/node_modules/`. That rules out importing most
- * `@deepseek-ai/*` packages at runtime: DSH ships those as source only (their
- * `lib/` holds `.d.ts` plus a couple of hand-built entries, no `lib/index.js`),
- * and resolves them at runtime through tsx + `tsconfig.base.json` `paths`.
- * tsx only applies `paths` to importers *outside* node_modules, so a plugin
- * that was installed with `dsh plugin add` gets plain node resolution and
- * lands on a missing file. See vendor/README.md for the full rule and
- * `assertHostExternals()` below for the guard that enforces it.
- *
- * Usage: node build.mjs
- */
-
-import { createRequire } from 'node:module'
-import { existsSync, readdirSync, readFileSync } from 'node:fs'
-import { resolve, dirname, join, basename } from 'node:path'
-import { fileURLToPath } from 'node:url'
-
-const HERE = dirname(fileURLToPath(import.meta.url))
-// 可选：指向一份 DSH 检出，用于在没装 esbuild 时借用它 pnpm store 里的副本。
-// 缺省时自动探测同级的 `deepseek-harness` 检出与其它同级目录（开发机便利）。
-const DSH_CHECKOUT = process.env.DSH_CHECKOUT ?? ''
-const PLUGIN_ID = 'dsh-prompt-customizer'
-
-/** 可能含 pnpm store 的检出根：显式 env、同级 deepseek-harness、同级其它目录。 */
-function checkoutCandidates() {
-  const parent = resolve(HERE, '..')
-  const roots = []
-  if (DSH_CHECKOUT !== '') roots.push(DSH_CHECKOUT)
-  roots.push(join(parent, 'deepseek-harness'))
-  try {
-    for (const entry of readdirSync(parent, { withFileTypes: true })) {
-      if (entry.isDirectory()) roots.push(join(parent, entry.name))
-    }
-  } catch { /* 无同级目录 */ }
-  return [...new Set(roots)]
-}
-
-/**
- * Resolve esbuild.
- *
- * Tiers, in order — the first two keep this plugin buildable both for a
- * fresh clone (`pnpm install` puts esbuild in node_modules) and for a
- * contributor hacking inside a DSH checkout:
- *
- *  1. the plugin's own `node_modules` (normal install path; esbuild is a
- *     devDependency so `pnpm install` provides it),
- *  2. a local DSH checkout's pnpm store (contributor convenience — pnpm's
- *     strict layout keeps esbuild out of the root node_modules, so scan
- *     `node_modules/.pnpm/esbuild@*` and take the highest version),
- *  3. a clear, actionable error.
- *
- * Tier 3 matters: a bare `require('esbuild')` failure message does not tell
- * the user to run `pnpm install`.
- */
-function loadEsbuild() {
-  const localRequire = createRequire(resolve(HERE, 'package.json'))
-  try {
-    return localRequire('esbuild')
-  } catch {
-    // Not installed locally; fall through to the checkout scan.
-  }
-
-  for (const root of checkoutCandidates()) {
-    const store = join(root, 'node_modules', '.pnpm')
-    if (!existsSync(store)) continue
-    const candidates = []
-    for (const entry of readdirSync(store)) {
-      if (!entry.startsWith('esbuild@')) continue
-      candidates.push(join(store, entry, 'node_modules', 'esbuild'))
-    }
-    if (candidates.length === 0) continue
-    const pick = candidates.sort().at(-1)
-    try {
-      return createRequire(resolve(pick, 'package.json'))(pick)
-    } catch { /* store 里没有可用的平台二进制：试下一个根 */ }
-  }
-
-  throw new Error(
-    'dsh-prompt-customizer: cannot find esbuild.\n'
-    + '  Run `pnpm install` in this directory (esbuild is a devDependency).\n'
-    + '  Or set DSH_CHECKOUT to a DSH checkout to borrow its copy.\n'
-    + `  Checked: ${checkoutCandidates().join(', ')}`,
-  )
-}
-
-const esbuild = loadEsbuild()
-
-/** Platform packages + react come from the DSH module table at runtime. */
-const CLIENT_EXTERNAL = [
-  'react',
-  'react/jsx-runtime',
-  'react-dom',
-  'react-dom/client',
-]
-
-/** Browser half: one CJS factory registered with the host module loader. */
-const clientBundle = {
-  entryPoints: [resolve(HERE, 'src/client/index.ts')],
-  // 浏览器半身落在 client/：package.json 的 exports.\"./client\" 指向它。
-  outfile: resolve(HERE, 'client/client.js'),
-  bundle: true,
-  format: 'cjs',
-  platform: 'browser',
-  target: ['es2020'],
-  jsx: 'automatic',
-  sourcemap: true,
-  logLevel: 'info',
-  external: CLIENT_EXTERNAL,
-  // Everything under @deepseek-ai/ stays a runtime require.
-  plugins: [{
-    name: 'pc-external-platform',
-    setup(build) {
-      build.onResolve({ filter: /^@deepseek-ai\// }, args => ({ path: args.path, external: true }))
-    },
-  }],
-  banner: {
-    js: [
-      `window.__ModuleLoader__.load({ id: ${JSON.stringify(PLUGIN_ID)}, factory: (require) => {`,
-      'var module = { exports: {} };',
-      'var exports = module.exports;',
-      'Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });',
-    ].join('\n'),
-  },
-  footer: {
-    js: 'return module.exports; } });',
-  },
-}
-
-/**
- * The only bare specifiers the host bundle may leave to runtime resolution.
- *
- * A plugin installed into a profile's node_modules can only resolve packages
- * that DSH actually ships runtime JS for. `@deepseek-ai/cordis` does. Anything
- * else under `@deepseek-ai/` must be vendored into `vendor/` instead — see
- * vendor/README.md.
- *
- * This is an allowlist rather than "whatever resolved at build time" on
- * purpose: the build runs from a source checkout where *every* `@deepseek-ai/*`
- * name resolves to a source dir, so a build-time check would pass and the
- * installed plugin would still crash at startup.
- */
-const HOST_RUNTIME_EXTERNAL_ALLOWLIST = new Set([
-  '@deepseek-ai/cordis',
-])
-
-/** Host half: ESM, self-contained except node builtins and the allowlist above. */
-const hostBundle = {
-  entryPoints: [resolve(HERE, 'src/host.ts')],
-  outfile: resolve(HERE, 'lib/index.js'),
-  bundle: true,
-  format: 'esm',
-  platform: 'node',
-  target: 'node22',
-  sourcemap: true,
-  logLevel: 'info',
-  // node:* builtins stay external. js-yaml is bundled in on purpose: the
-  // plugin's node_modules is a junction into the DSH profile (so @deepseek-ai/*
-  // resolves to the very same module instances the host uses), and a junction
-  // cannot also hold a private js-yaml copy.
-  //
-  // `@deepseek-ai/*` is external *at bundle time* only so esbuild keeps the
-  // names verbatim; `assertHostExternals()` then checks every surviving name
-  // against the allowlist, so an unvendored dependency fails the build here
-  // instead of at plugin startup on someone else's machine.
-  external: [],
-  // js-yaml is inlined (see above) and is CJS: it calls bare `require('fs')`.
-  // In an ESM bundle that throws "Dynamic require ... is not supported", so
-  // hand the bundle a real CommonJS require bound to its own URL.
-  banner: {
-    js: [
-      "import { createRequire as __pcCreateRequire } from 'node:module';",
-      'const require = __pcCreateRequire(import.meta.url);',
-    ].join('\n'),
-  },
-  plugins: [{
-    name: 'pc-external-platform',
-    setup(build) {
-      build.onResolve({ filter: /^(@deepseek-ai\/|node:)/ }, args => ({ path: args.path, external: true }))
-    },
-  }],
-}
-
-/**
- * Fail the build if the host bundle still hands an unresolvable specifier to
- * runtime resolution.
- *
- * Catches exactly the regression that motivated `vendor/`: adding
- * `import { X } from '@deepseek-ai/dsh-llm'` to a host module looks fine on a
- * dev machine (esbuild externalises it, the source checkout resolves it, the
- * smoke test under tsx passes) and then throws ERR_MODULE_NOT_FOUND for every
- * user who installed the plugin.
- */
-function assertHostExternals(outfile) {
-  const source = readFileSync(outfile, 'utf8')
-  const specifiers = new Set()
-  for (const m of source.matchAll(/(?:^|[;\n])\s*(?:import|export)[\s\S]*?from\s*["']([^"']+)["']/g)) {
-    specifiers.add(m[1])
-  }
-  for (const m of source.matchAll(/\bimport\s*\(\s*["']([^"']+)["']\s*\)/g)) {
-    specifiers.add(m[1])
-  }
-
-  const violations = [...specifiers].filter((spec) => {
-    if (spec.startsWith('node:')) return false
-    return !HOST_RUNTIME_EXTERNAL_ALLOWLIST.has(spec)
-  })
-
-  if (violations.length > 0) {
-    throw new Error(
-      'dsh-prompt-customizer: host bundle imports packages that an installed plugin cannot resolve.\n'
-      + violations.map(v => `  - ${v}`).join('\n')
-      + '\n\n'
-      + 'DSH ships @deepseek-ai/* as source only; a plugin inside a profile\'s\n'
-      + 'node_modules gets plain node resolution and finds no lib/index.js.\n'
-      + 'Vendor the leaf modules you need into vendor/ (see vendor/README.md),\n'
-      + `or add the name to HOST_RUNTIME_EXTERNAL_ALLOWLIST in ${basename(fileURLToPath(import.meta.url))}\n`
-      + 'after verifying the package really ships runtime JS.',
-    )
-  }
-  return [...specifiers]
-}
-
-await Promise.all([esbuild.build(clientBundle), esbuild.build(hostBundle)])
-const hostExternals = assertHostExternals(resolve(HERE, 'lib/index.js'))
-console.log('[dsh-prompt-customizer] built lib/index.js + client/client.js')
-console.log(`[dsh-prompt-customizer] host runtime imports: ${hostExternals.length === 0 ? '(none)' : hostExternals.join(', ')}`)
+/**
+ * dsh-prompt-customizer — build script.
+ *
+ * Two bundles from one esbuild run:
+ *
+ *   lib/index.js   host half    ESM,  node platform,  self-contained
+ *   lib/client.js  browser half CJS,  browser platform, wrapped in the
+ *                  `window.__ModuleLoader__.load` factory contract
+ *
+ * The host half must stay **resolvable from an installed location**, i.e. from
+ * inside `~/.dsh/profiles/<p>/node_modules/`. That rules out importing most
+ * `@deepseek-ai/*` packages at runtime: DSH ships those as source only (their
+ * `lib/` holds `.d.ts` plus a couple of hand-built entries, no `lib/index.js`),
+ * and resolves them at runtime through tsx + `tsconfig.base.json` `paths`.
+ * tsx only applies `paths` to importers *outside* node_modules, so a plugin
+ * that was installed with `dsh plugin add` gets plain node resolution and
+ * lands on a missing file. See vendor/README.md for the full rule and
+ * `assertHostExternals()` below for the guard that enforces it.
+ *
+ * Usage: node build.mjs
+ */
+
+import { createRequire } from 'node:module'
+import { existsSync, readdirSync, readFileSync } from 'node:fs'
+import { resolve, dirname, join, basename } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const HERE = dirname(fileURLToPath(import.meta.url))
+// 可选：指向一份 DSH 检出，用于在没装 esbuild 时借用它 pnpm store 里的副本。
+// 缺省时自动探测同级的 `deepseek-harness` 检出与其它同级目录（开发机便利）。
+const DSH_CHECKOUT = process.env.DSH_CHECKOUT ?? ''
+const PLUGIN_ID = 'dsh-prompt-customizer'
+
+/** 可能含 pnpm store 的检出根：显式 env、同级 deepseek-harness、同级其它目录。 */
+function checkoutCandidates() {
+  const parent = resolve(HERE, '..')
+  const roots = []
+  if (DSH_CHECKOUT !== '') roots.push(DSH_CHECKOUT)
+  roots.push(join(parent, 'deepseek-harness'))
+  try {
+    for (const entry of readdirSync(parent, { withFileTypes: true })) {
+      if (entry.isDirectory()) roots.push(join(parent, entry.name))
+    }
+  } catch { /* 无同级目录 */ }
+  return [...new Set(roots)]
+}
+
+/**
+ * Resolve esbuild.
+ *
+ * Tiers, in order — the first two keep this plugin buildable both for a
+ * fresh clone (`pnpm install` puts esbuild in node_modules) and for a
+ * contributor hacking inside a DSH checkout:
+ *
+ *  1. the plugin's own `node_modules` (normal install path; esbuild is a
+ *     devDependency so `pnpm install` provides it),
+ *  2. a local DSH checkout's pnpm store (contributor convenience — pnpm's
+ *     strict layout keeps esbuild out of the root node_modules, so scan
+ *     `node_modules/.pnpm/esbuild@*` and take the highest version),
+ *  3. a clear, actionable error.
+ *
+ * Tier 3 matters: a bare `require('esbuild')` failure message does not tell
+ * the user to run `pnpm install`.
+ */
+function loadEsbuild() {
+  const localRequire = createRequire(resolve(HERE, 'package.json'))
+  try {
+    return localRequire('esbuild')
+  } catch {
+    // Not installed locally; fall through to the checkout scan.
+  }
+
+  for (const root of checkoutCandidates()) {
+    const store = join(root, 'node_modules', '.pnpm')
+    if (!existsSync(store)) continue
+    const candidates = []
+    for (const entry of readdirSync(store)) {
+      if (!entry.startsWith('esbuild@')) continue
+      candidates.push(join(store, entry, 'node_modules', 'esbuild'))
+    }
+    if (candidates.length === 0) continue
+    const pick = candidates.sort().at(-1)
+    try {
+      return createRequire(resolve(pick, 'package.json'))(pick)
+    } catch { /* store 里没有可用的平台二进制：试下一个根 */ }
+  }
+
+  throw new Error(
+    'dsh-prompt-customizer: cannot find esbuild.\n'
+    + '  Run `pnpm install` in this directory (esbuild is a devDependency).\n'
+    + '  Or set DSH_CHECKOUT to a DSH checkout to borrow its copy.\n'
+    + `  Checked: ${checkoutCandidates().join(', ')}`,
+  )
+}
+
+const esbuild = loadEsbuild()
+
+/** Platform packages + react come from the DSH module table at runtime. */
+const CLIENT_EXTERNAL = [
+  'react',
+  'react/jsx-runtime',
+  'react-dom',
+  'react-dom/client',
+]
+
+/** Browser half: one CJS factory registered with the host module loader. */
+const clientBundle = {
+  entryPoints: [resolve(HERE, 'src/client/index.ts')],
+  // 浏览器半身落在 client/：package.json 的 exports.\"./client\" 指向它。
+  outfile: resolve(HERE, 'client/client.js'),
+  bundle: true,
+  format: 'cjs',
+  platform: 'browser',
+  target: ['es2020'],
+  jsx: 'automatic',
+  sourcemap: true,
+  logLevel: 'info',
+  external: CLIENT_EXTERNAL,
+  // Everything under @deepseek-ai/ stays a runtime require.
+  plugins: [{
+    name: 'pc-external-platform',
+    setup(build) {
+      build.onResolve({ filter: /^@deepseek-ai\// }, args => ({ path: args.path, external: true }))
+    },
+  }],
+  banner: {
+    js: [
+      `window.__ModuleLoader__.load({ id: ${JSON.stringify(PLUGIN_ID)}, factory: (require) => {`,
+      'var module = { exports: {} };',
+      'var exports = module.exports;',
+      'Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });',
+    ].join('\n'),
+  },
+  footer: {
+    js: 'return module.exports; } });',
+  },
+}
+
+/**
+ * The only bare specifiers the host bundle may leave to runtime resolution.
+ *
+ * A plugin installed into a profile's node_modules can only resolve packages
+ * that DSH actually ships runtime JS for. `@deepseek-ai/cordis` does. Anything
+ * else under `@deepseek-ai/` must be vendored into `vendor/` instead — see
+ * vendor/README.md.
+ *
+ * This is an allowlist rather than "whatever resolved at build time" on
+ * purpose: the build runs from a source checkout where *every* `@deepseek-ai/*`
+ * name resolves to a source dir, so a build-time check would pass and the
+ * installed plugin would still crash at startup.
+ */
+const HOST_RUNTIME_EXTERNAL_ALLOWLIST = new Set([
+  '@deepseek-ai/cordis',
+])
+
+/** Host half: ESM, self-contained except node builtins and the allowlist above. */
+const hostBundle = {
+  entryPoints: [resolve(HERE, 'src/host.ts')],
+  outfile: resolve(HERE, 'lib/index.js'),
+  bundle: true,
+  format: 'esm',
+  platform: 'node',
+  target: 'node22',
+  sourcemap: true,
+  logLevel: 'info',
+  // node:* builtins stay external. js-yaml is bundled in on purpose: the
+  // plugin's node_modules is a junction into the DSH profile (so @deepseek-ai/*
+  // resolves to the very same module instances the host uses), and a junction
+  // cannot also hold a private js-yaml copy.
+  //
+  // `@deepseek-ai/*` is external *at bundle time* only so esbuild keeps the
+  // names verbatim; `assertHostExternals()` then checks every surviving name
+  // against the allowlist, so an unvendored dependency fails the build here
+  // instead of at plugin startup on someone else's machine.
+  external: [],
+  // js-yaml is inlined (see above) and is CJS: it calls bare `require('fs')`.
+  // In an ESM bundle that throws "Dynamic require ... is not supported", so
+  // hand the bundle a real CommonJS require bound to its own URL.
+  banner: {
+    js: [
+      "import { createRequire as __pcCreateRequire } from 'node:module';",
+      'const require = __pcCreateRequire(import.meta.url);',
+    ].join('\n'),
+  },
+  plugins: [{
+    name: 'pc-external-platform',
+    setup(build) {
+      build.onResolve({ filter: /^(@deepseek-ai\/|node:)/ }, args => ({ path: args.path, external: true }))
+    },
+  }],
+}
+
+/**
+ * Fail the build if the host bundle still hands an unresolvable specifier to
+ * runtime resolution.
+ *
+ * Catches exactly the regression that motivated `vendor/`: adding
+ * `import { X } from '@deepseek-ai/dsh-llm'` to a host module looks fine on a
+ * dev machine (esbuild externalises it, the source checkout resolves it, the
+ * smoke test under tsx passes) and then throws ERR_MODULE_NOT_FOUND for every
+ * user who installed the plugin.
+ */
+function assertHostExternals(outfile) {
+  const source = readFileSync(outfile, 'utf8')
+  const specifiers = new Set()
+  for (const m of source.matchAll(/(?:^|[;\n])\s*(?:import|export)[\s\S]*?from\s*["']([^"']+)["']/g)) {
+    specifiers.add(m[1])
+  }
+  for (const m of source.matchAll(/\bimport\s*\(\s*["']([^"']+)["']\s*\)/g)) {
+    specifiers.add(m[1])
+  }
+
+  const violations = [...specifiers].filter((spec) => {
+    if (spec.startsWith('node:')) return false
+    return !HOST_RUNTIME_EXTERNAL_ALLOWLIST.has(spec)
+  })
+
+  if (violations.length > 0) {
+    throw new Error(
+      'dsh-prompt-customizer: host bundle imports packages that an installed plugin cannot resolve.\n'
+      + violations.map(v => `  - ${v}`).join('\n')
+      + '\n\n'
+      + 'DSH ships @deepseek-ai/* as source only; a plugin inside a profile\'s\n'
+      + 'node_modules gets plain node resolution and finds no lib/index.js.\n'
+      + 'Vendor the leaf modules you need into vendor/ (see vendor/README.md),\n'
+      + `or add the name to HOST_RUNTIME_EXTERNAL_ALLOWLIST in ${basename(fileURLToPath(import.meta.url))}\n`
+      + 'after verifying the package really ships runtime JS.',
+    )
+  }
+  return [...specifiers]
+}
+
+await Promise.all([esbuild.build(clientBundle), esbuild.build(hostBundle)])
+const hostExternals = assertHostExternals(resolve(HERE, 'lib/index.js'))
+console.log('[dsh-prompt-customizer] built lib/index.js + client/client.js')
+console.log(`[dsh-prompt-customizer] host runtime imports: ${hostExternals.length === 0 ? '(none)' : hostExternals.join(', ')}`)