dsh-prompt-customizer 0.3.1 → 0.4.0

package/README.en.md

@@ -90,6 +90,19 @@ Two things that bite:
 
 The Preview tab shows the final system prompt and tool catalog after **all** plugins have filtered, switchable per phase. It reads the same assembly as the prompt and tools tabs, so what you see is what the model sees. The tools view reports "visible to the model / registry total" side by side — presets such as PTC or Code Mode wrap the whole catalog into a single `run_code`, so the registry alone misleads.
 
+### Prompt template variables
+
+The host registers only `provider` / `model` / `cwd` as template variables; referencing any other `{{name}}` in section text makes the whole assembly fail. This plugin adds two more families through the official extension point:
+
+- **Built-in system facts**: `date` / `time` / `datetime` / `weekday` / `hostname` / `platform` / `arch` / `username` / `home` / `shell` / `locale` / `node_version`, computed fresh at every assembly.
+- **Every environment variable**: each `process.env` key maps to `env_<lowercase, non-alphanumerics collapsed to _>`, e.g. `PATH` → `{{env_path}}`, `USER.NAME` → `{{env_user_name}}`.
+
+**Blocklist (`envBlocklist`)**: environment variables often carry secrets, and anything in the prompt is sent to the model with every request, so keys matching the blocklist are never registered. The prefilled entries cover common credential-style keys (`SECRET` / `TOKEN` / `PASSWORD` / `API_KEY` / `*_DSN` and friends); entries support `*` wildcards and are case-insensitive. The environment variable blocklist card in the panel lets you add or remove entries at any time, and its collapsible list shows the variables actually registered right now. Blocklist changes take effect at the next assembly (whether you edit the panel or `config.yaml` by hand).
+
+**Carried by export / import**: exporting a preset writes the current blocklist along with it; import merges it in by union (grow-only), consistent with the snapshot library semantics.
+
+The cost of strict rendering: referencing an unregistered name (such as a key the blocklist blocks) makes the **whole assembly fail** rather than rendering empty — only use names that appear in the panel's variable list.
+
 ### Config snapshots and agent presets
 
 - **Save current config** — capture the complete customization of the current scope (per-phase block lists, per-phase ordering and phase tool catalogs) as a reusable snapshot.
@@ -135,6 +148,7 @@ Code map:
 | `lib/index.js` | host half: assembly hook, five HTTP routes, agent-preset fork, one-off legacy cleanup |
 | `lib/effective.js` | pure functions: field-level override merge, phase selection (injections / tool catalogs), blacklist filtering |
 | `lib/promotion.js` | derives `{promoted, boundary}` from durable events — compaction resets, subagents always promoted |
+| `lib/vars.js` | prompt variables: built-in system facts + full env mapping / blocklist, lazily re-synced at the assembly entry by signature |
 | `lib/sectionOps.mjs` | phase-state pure functions **shared by the panel and the unit tests** (which list to write, injection identity, reorder, per-phase persistence) |
 | `lib/store.js` / `lib/catalog.js` | atomic write + last-good fallback config store; cross-preset section/tool accumulation cache |
 | `src/client/` | the panel (React written with `h()`, no JSX sugar), bundled into `client/client.js` |
@@ -176,7 +190,7 @@ One part per phase, chip-listing the catalog entering that phase's filter, title
 
 ### Config tab
 
-Three cards: **Save current config** (snapshot), **Save as agent preset** (fork the current target's preset directory), **Import config**. Each snapshot row is Apply / Export / Delete, and the active row carries an "in use" badge.
+Five cards: **Save current config** (snapshot), **Save as agent preset** (fork the current target's preset directory), **Import config**, **Environment variable blocklist** (add/remove entries, inspect the variables actually registered right now), **Force override switch**. Each snapshot row is Apply / Export / Delete, and the active row carries an "in use" badge.
 
 ### Edit target and saving
 

package/README.md

@@ -77,6 +77,7 @@
 - **注入**：每个阶段部分底部都能按名称 + 文本新建一段，带 `手动` 徽标，随时可删除。
 - **排序**：整行拖拽（拖到某行上方/下方出现插入线）或 ↑/↓ 箭头。顺序以 0 起始的连续虚拟下标存储，不会出现重复或小数 order，也不需要手填数字。
 - **每阶段独立**：引导期屏蔽写 `sectionsBootstrap`，压缩受控期写 `sectionsCompaction`，常驻期写 `sections`；三者的排序空间互不干扰，因此「引导期只留 5 段、常驻期全开」是可以分别表达的。
+- **强制覆盖（`forceSections`，默认开）**：包装宿主的装配入口，最终提示词段直接从注册表原始段重建 —— 预设插件自身的阶段裁段（如 liangshen 引导期 20→1）与 persona 的 `complete: true` 整段接管都无法再改写本插件的屏蔽 / 替换 / 注入 / 排序结果；工具目录与动态上下文保持预设与宿主行为。设为 `false` 退回瀑布流内过滤（此时完整段接管仍会压制段级定制）。
 
 ### 工具目录
 
@@ -90,6 +91,19 @@
 
 预览 Tab 展示经过**所有插件**过滤后的最终系统提示词与工具目录，并按阶段切换。它与提示词 / 工具 Tab 读同一份装配结果，所见即模型所见。工具视图给出「模型可见 / 注册表总数」的对照 —— PTC、Code Mode 这类预设会把整套目录包装成单个 `run_code`，只看注册表会误判。
 
+### 提示词变量
+
+宿主只注册 `provider` / `model` / `cwd` 三个变量，段文本里引用别的 `{{name}}` 会直接让整次装配失败。本插件经官方扩展点追加两类变量：
+
+- **内置系统事实**：`date` / `time` / `datetime` / `weekday` / `hostname` / `platform` / `arch` / `username` / `home` / `shell` / `locale` / `node_version`，每次装配现算。
+- **全量环境变量**：`process.env` 的每个键映射为 `env_<小写，非法字符归并为 _>`，如 `PATH` → `{{env_path}}`、`USER.NAME` → `{{env_user_name}}`。
+
+**黑名单（`envBlocklist`）**：env 里常有密钥，进了提示词就会随请求发给模型，所以命中黑名单的键不注册。预填条目覆盖常见凭据类键（含 `SECRET` / `TOKEN` / `PASSWORD` / `API_KEY` / `*_DSN` 等），条目支持 `*` 通配、大小写不敏感；面板的环境变量黑名单卡片可随时增删，卡里的折叠列表给出当前实际注册的变量清单。黑名单变化在下次装配生效（面板改动或直接改 `config.yaml` 都一样）。
+
+**导出 / 导入随行**：导出预设时当前黑名单随行写入文件；导入端按并集并入（只增不减），与快照库语义一致。
+
+严格渲染的代价：段里引用了一个未注册的名字（如被黑名单挡下的键），**整段装配失败**而不是留空 —— 面板清单里没列出的名字不要用。
+
 ### 配置快照与 agent 预设
 
 - **保存当前配置**：把当前作用域的完整定制（含每阶段屏蔽名单、每阶段排序、阶段工具目录）存成一份可复用的配置快照。
@@ -120,7 +134,7 @@
   </tr>
   <tr>
     <td colspan="9" align="center">
-      <b>⑤ 交卷前还有一手</b>：宿主在瀑布流<b>之后</b>，若存在 <code>complete: true</code> 的段就把整份 sections 还原成那一条 —— 这就是面板会对这类预设亮黄标的原因（工具目录不受影响）
+      <b>⑤ 交卷前还有一手</b>：宿主在瀑布流<b>之后</b>，若存在 <code>complete: true</code> 的段就把整份 sections 还原成那一条 —— 这就是面板会对这类预设亮黄标的原因（工具目录不受影响；<code>forceSections</code> 开启时本插件已在装配入口重建 sections，接管被绕过，不再亮黄标）
     </td>
   </tr>
   <tr>
@@ -135,6 +149,7 @@
 | `lib/index.js` | 宿主端：装配钩子、五条 HTTP 路由、agent 预设 fork、遗留字段一次性清理 |
 | `lib/effective.js` | 纯函数：字段级 override 合并、阶段选取（注入段 / 工具目录）、黑名单过滤 |
 | `lib/promotion.js` | 由 durable 事件推导 `{promoted, boundary}`，压缩复位、子代理恒已晋级 |
+| `lib/vars.js` | 提示词变量：内置系统事实 + env 全量映射 / 黑名单，装配入口按签名懒同步 |
 | `lib/sectionOps.mjs` | **面板与单测共用**的阶段状态纯函数（名单写回目标、注入身份、重排、逐阶段持久化） |
 | `lib/store.js` / `lib/catalog.js` | 原子写 + last-good 回落的配置存储；跨预设段/工具累积登记表 |
 | `src/client/` | 面板（React，无 JSX 语法糖依赖，`h()` 直写），构建进 `client/client.js` |
@@ -175,7 +190,7 @@ dsh plugin --profile web add /path/to/dsh-prompt-customizer
 
 ### 配置 Tab
 
-三张卡片：**保存当前配置**（配置快照）、**存为 agent 预设**（fork 当前目标的预设目录）、**导入配置**。快照列表每行是 应用 / 导出 / 删除，正在使用的那一行带「使用中」标记。
+五张卡片：**保存当前配置**（配置快照）、**存为 agent 预设**（fork 当前目标的预设目录）、**导入配置**、**环境变量黑名单**（增删条目、查看当前实际注册的变量清单）、**强制覆盖开关**。快照列表每行是 应用 / 导出 / 删除，正在使用的那一行带「使用中」标记。另有一张**恢复初始状态**卡片：清空全部定制并关闭 `forceSections`，与卸载插件等效（无需卸载 / 重启），点击需二次确认。
 
 ### 编辑目标与保存
 
@@ -190,7 +205,7 @@ dsh plugin --profile web add /path/to/dsh-prompt-customizer
 
 下面都是实测结论。面板在相关情况下会直接给出黄色警示，不需要你猜：
 
-- **有些预设的提示词不由段组成**。若某个段以 `complete: true` 注册（dsh-persona 的「整段接管」），宿主会在装配瀑布流**之后**把整份 sections 还原成那一条段 —— 此时本插件的屏蔽 / 替换 / 注入 / 排序对模型完全无效（工具过滤不受影响）。面板会写明「最终系统提示词由 `deployment:persona` 段整段接管」。要让段级定制生效，只能在该 agent 预设里关掉 persona 的 `complete`。
+- **有些预设的提示词不由段组成。** 若某个段以 `complete: true` 注册（dsh-persona 的「整段接管」），宿主会在装配瀑布流**之后**把整份 sections 还原成那一条段。`forceSections`（默认开）已在装配入口绕开该机制，段级定制照常生效；只有把它设为 `false` 时，本插件的屏蔽 / 替换 / 注入 / 排序才会对这类预设无效（工具过滤不受影响），面板会写明「最终系统提示词由 `deployment:persona` 段整段接管」。
 - **丢弃段的原因不止一种**。除了 `complete` 接管，也存在预设用自己的规则在特定阶段裁段（实测某预设引导期 20 段 → 1 段，而注册表里并没有 complete 段）。所以面板还做了一次机制无关的比对：把本插件产出的段名与最终装配逐名核对，不符时提示「产出 N 段，模型只见 M 段」。
 - **预览的伪会话可能降级**。阶段视图由一次合成会话驱动，个别预设插件会在这种会话上抛错；此时该阶段回退为无会话装配并标注「已降级」，即那个阶段看到的是不带原生阶段裁剪的结果。
 - **替换动态生成的段会固定其内容**。像 `app:web-surface` 这类段在装配时实时生成（嵌入当前 Web 端口等）。替换后文本冻结为你编辑时的值，不再跟随运行时变化；想保持跟随请改用屏蔽。

package/client/client.js

@@ -94,7 +94,7 @@ window.__ModuleLoader__.load({
 				toolCopied: "已把「{name}」复制到{to}：{from}那份保持不动，隐藏/启用状态一起带过去。",
 				toolShown: "「{name}」已在{to}显示。",
 				toolHiddenIn: "「{name}」已在{to}隐藏。",
-				sectionsTakenOver: "该目标的最终系统提示词由「{name}」段整段接管：宿主在装配瀑布流之后把 sections 强制还原为那一条段，因此本插件的段级屏蔽 / 替换 / 注入 / 排序都不会进入模型看到的提示词（工具过滤仍然生效）。要让段级定制生效，需在该 agent 预设里关掉 persona 的 complete。",
+				sectionsTakenOver: "「{name}」段声明了 complete 整段接管（宿主在装配瀑布流之后强制还原为那一条段）。本插件默认的 forceSections 已绕开该机制，段级屏蔽 / 替换 / 注入 / 排序照常生效；此提示只会在 forceSections 关闭或强制覆盖失效时出现，开启 forceSections 即可恢复。",
 				sectionsLost: "本插件在该阶段产出的 {emitted} 个段里，只有 {survived} 个进入最终提示词：其余被下游装配规则丢弃，段级定制不会完全生效（工具过滤不受影响）。",
 				sectionBlockedStrip: "（本阶段已屏蔽，模型不可见）",
 				phaseSuppressed: "被抑制（不在任何阶段的装配中）",
@@ -109,6 +109,24 @@ window.__ModuleLoader__.load({
 				saveOk: "已保存",
 				saveFail: "保存失败",
 				discardConfirm: "有未保存的更改，离开将丢弃。确定离开吗？",
+				forceTitle: "强制覆盖（forceSections）",
+				forceHint: "开启后所有预设的提示词段一律以本插件为准（绕过 complete 整段接管与预设阶段裁段）；关闭后退回瀑布流内过滤，预设可能压过定制。「恢复初始状态」会自动关闭它。",
+				forceOn: "已开启",
+				forceOff: "已关闭",
+				envBlockTitle: "环境变量黑名单（envBlocklist）",
+				envBlockHint: "系统环境变量（process.env）已全量注册为提示词变量：段文本里写 {{env_键名小写}} 引用（如 {{env_path}}）；命中黑名单的键不注册——env 里常有密钥，进了提示词就会随请求发给模型。条目支持 * 通配、大小写不敏感。内置变量 {{date}} {{time}} {{datetime}} {{weekday}} {{hostname}} {{platform}} {{arch}} {{username}} {{home}} {{shell}} {{locale}} {{node_version}} 恒可用。",
+				envBlockAdd: "键名或通配，如 GITHUB_TOKEN 或 *_KEY*",
+				envBlockAddAction: "添加",
+				envBlockEmpty: "黑名单为空：所有环境变量都会被注册",
+				envVarsTitle: "已注册的提示词变量",
+				envVarsHint: "段文本里引用 {{变量名}}；引用未注册的名字会让整次渲染报错（宿主严格模式）。",
+				importBlockMerge: "，文件中的环境变量黑名单已并入（+{count} 条）",
+				resetTitle: "恢复初始状态",
+				resetHint: "清空全部定制（屏蔽 / 替换 / 注入 / 排序、阶段工具目录、配置快照、agent 预设覆盖），并关闭 forceSections —— 之后所有 AI 对话不再受本插件影响，与卸载插件等效，无需卸载或重启。此操作不可撤销；要重新启用定制，在上方打开「强制覆盖」开关即可。",
+				resetConfirm: "确定清空全部定制并恢复初始状态吗？\n\n将删除：屏蔽名单、段替换、注入段、阶段工具目录、配置快照、agent 预设覆盖；并关闭 forceSections。\n之后所有 AI 对话都不再受本插件影响（与卸载插件等效）。\n此操作不可撤销。",
+				resetAction: "清空全部定制",
+				resetOk: "已恢复初始状态：所有 AI 对话不再受本插件影响",
+				resetFail: "恢复初始状态失败",
 				scopeFallback: "该 agent 预设的常驻 scope 未能挂载，以下显示的是全局层内容（并非该预设的原生段与工具）。",
 				previewDegraded: "伪会话触发了某个预设插件的异常，本次预览已降级为无会话装配——预设原生的阶段裁剪规则未参与运行。",
 				previewFail: "该阶段装配失败（scope 挂载失败或预设插件异常），请切换目标或查看服务日志。",
@@ -203,7 +221,7 @@ window.__ModuleLoader__.load({
 				toolCopied: "Copied \"{name}\" to {to}: the copy in {from} is left untouched, and its hidden/enabled state carries over.",
 				toolShown: "\"{name}\" is now visible in {to}.",
 				toolHiddenIn: "\"{name}\" is now hidden in {to}.",
-				sectionsTakenOver: "The final system prompt here is taken over wholesale by the \"{name}\" section: the host restores that single section after the assembly waterfall, so this plugin’s section-level blocking / replacement / injection / ordering never reaches the model (tool filtering still applies). To make section customization effective, turn off the persona’s complete flag in this agent preset.",
+				sectionsTakenOver: "The \"{name}\" section declares a complete takeover (the host restores that single section after the assembly waterfall). This plugin’s forceSections (default on) bypasses that mechanism, so section-level blocking / replacement / injection / ordering still applies; this notice only appears when forceSections is off or the override fails — enable it to restore.",
 				sectionsLost: "Only {survived} of the {emitted} sections this plugin emitted for this phase reach the final prompt — the rest are dropped by downstream assembly rules, so section-level customization cannot fully apply (tool filtering is unaffected).",
 				sectionBlockedStrip: " (blocked in this period; invisible to the model)",
 				phaseSuppressed: "Suppressed (absent from every phase assembly)",
@@ -218,6 +236,24 @@ window.__ModuleLoader__.load({
 				saveOk: "Saved",
 				saveFail: "Save failed",
 				discardConfirm: "You have unsaved changes; leaving will discard them. Leave anyway?",
+				forceTitle: "Force override (forceSections)",
+				forceHint: "When on, every preset’s prompt sections always follow this plugin (bypassing complete takeover and preset phase pruning); when off, filtering falls back to the waterfall, where presets may override your customization. \"Restore initial state\" turns this off automatically.",
+				forceOn: "On",
+				forceOff: "Off",
+				envBlockTitle: "Environment variable blocklist (envBlocklist)",
+				envBlockHint: "All system environment variables (process.env) are registered as prompt variables: reference them in section text as {{env_lowercase_key}} (e.g. {{env_path}}); keys hit by the blocklist are not registered — env often carries secrets, and anything in the prompt is sent to the model. Entries support * wildcards, case-insensitive. Built-ins {{date}} {{time}} {{datetime}} {{weekday}} {{hostname}} {{platform}} {{arch}} {{username}} {{home}} {{shell}} {{locale}} {{node_version}} are always available.",
+				envBlockAdd: "Key or wildcard, e.g. GITHUB_TOKEN or *_KEY*",
+				envBlockAddAction: "Add",
+				envBlockEmpty: "Blocklist is empty: every environment variable gets registered",
+				envVarsTitle: "Registered prompt variables",
+				envVarsHint: "Reference {{name}} in section text; an unregistered name fails the whole render (host strict mode).",
+				importBlockMerge: ", the file’s env-variable blocklist was merged in (+{count} entries)",
+				resetTitle: "Restore initial state",
+				resetHint: "Clears all customization (blocking / replacement / injection / ordering, per-phase tool catalogs, config snapshots, agent-preset overrides) and turns forceSections off — every AI conversation goes back to being unaffected by this plugin, equivalent to uninstalling it, without uninstalling or restarting. This cannot be undone; to re-enable customization, turn the \"Force override\" switch above back on.",
+				resetConfirm: "Clear all customization and restore the initial state?\n\nThis will delete: block lists, section replacements, injected sections, per-phase tool catalogs, config snapshots, and agent-preset overrides; forceSections will be turned off.\nAfterwards no AI conversation is affected by this plugin (equivalent to uninstalling).\nThis cannot be undone.",
+				resetAction: "Clear all customization",
+				resetOk: "Initial state restored: no AI conversation is affected by this plugin anymore",
+				resetFail: "Failed to restore initial state",
 				scopeFallback: "This agent preset's standing scope could not be mounted; what you see is the global layer (not the preset's native sections/tools).",
 				previewDegraded: "A preset plugin threw on the synthetic session; this preview fell back to an agent-less assembly — native phase rules did not run.",
 				previewFail: "Assembly for this phase failed (scope mount error or a preset plugin threw); switch target or check the server log.",
@@ -1091,6 +1127,7 @@ window.__ModuleLoader__.load({
 			const partNote = (key) => {
 				const view = phases?.[key];
 				if (view === void 0 || view === null) return null;
+				if (cfg.forceSections !== false) return null;
 				if (view.takenOverBy !== void 0) return (0, react.createElement)("div", { style: s.noticeWarn }, t("sectionsTakenOver", { name: view.takenOverBy }));
 				const lost = view.lostSections;
 				if (lost !== void 0) return (0, react.createElement)("div", { style: s.noticeWarn }, t("sectionsLost", {
@@ -1384,7 +1421,7 @@ window.__ModuleLoader__.load({
 						}, t("save")),
 						(0, react.createElement)("button", {
 							style: s.mini,
-							onClick: () => setEditing(null)
+							onClick: () => setDraft("")
 						}, t("clearInput")),
 						!row.custom && (row.override || Object.hasOwn(cfg.replace ?? {}, row.name)) ? (0, react.createElement)("button", {
 							style: s.mini,
@@ -1818,11 +1855,13 @@ window.__ModuleLoader__.load({
 			anchor.click();
 			target.revoke(url);
 		}
-		/** 把单个预设编码为导出文件的 JSON 格式（单对象格式）。 */
-		function encodePresetExport(preset) {
+		/** 把单个预设编码为导出文件的 JSON 格式（单对象格式）。`envBlocklist`
+		*  是全局环境变量黑名单的随行快照：导入端按并集并入（见 PresetsTab）。 */
+		function encodePresetExport(preset, envBlocklist) {
 			return JSON.stringify({
 				name: preset.name,
-				data: preset.data
+				data: preset.data,
+				...Array.isArray(envBlocklist) ? { envBlocklist } : {}
 			}, null, 2);
 		}
 		/**
@@ -1861,10 +1900,10 @@ window.__ModuleLoader__.load({
 		* 导出一个预设：宿主能提供原生对话框时走 tauri 保存（cancelled = 用户
 		* 拒绝，绝不回退下载）；否则走 Web 下载。
 		*/
-		async function exportPresetFile(preset, io) {
+		async function exportPresetFile(preset, io, envBlocklist) {
 			const env = io ?? makeIoEnv();
 			try {
-				const text = encodePresetExport(preset);
+				const text = encodePresetExport(preset, envBlocklist);
 				const filename = presetExportFilename(preset.name);
 				if (env.tauri) {
 					const out = await env.saveText(filename, text);
@@ -1919,9 +1958,10 @@ window.__ModuleLoader__.load({
 		*    覆盖项，新预设随即出现在顶部的编辑目标选择器里。
 		*  导入导出经 preset-io 双端适配：Tauri 2 桌面走原生对话框，Web 走
 		*  下载 / 文件选择；成功 / 失败 / 取消都有面板内消息条提示。 */
-		function PresetsTab({ cfg, inv, phases, t, writePatch, writeGlobal, saveAsPreset, forkSource }) {
+		function PresetsTab({ cfg, inv, phases, t, writePatch, writeGlobal, saveAsPreset, forkSource, onReset, envBlocklist }) {
 			const presets = cfg.presets ?? [];
 			const [name, setName] = (0, react.useState)("");
+			const [blockInput, setBlockInput] = (0, react.useState)("");
 			const [agentName, setAgentName] = (0, react.useState)("");
 			const [creating, setCreating] = (0, react.useState)(false);
 			const [notice, setNotice] = (0, react.useState)(null);
@@ -1965,7 +2005,7 @@ window.__ModuleLoader__.load({
 			};
 			const exportPreset = async (preset) => {
 				try {
-					const res = await exportPresetFile(preset);
+					const res = await exportPresetFile(preset, void 0, envBlocklist);
 					if (res.ok) show("ok", t("exportOk"));
 					else if (res.cancelled) show("ok", t("exportCancel"));
 					else show("error", `${t("exportFail")}${res.message ? ": " + res.message : ""}`);
@@ -1978,10 +2018,13 @@ window.__ModuleLoader__.load({
 					const parsed = decodePresetExport(text);
 					const next = addImportedPresets(presets, parsed, genId);
 					const added = next.length - presets.length;
-					if (added <= 0) show("ok", t("importNone"));
+					const fresh = (parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) && Array.isArray(parsed.envBlocklist) ? (parsed.envBlocklist ?? []).filter((e) => typeof e === "string") : []).filter((e) => !envBlocklist.includes(e));
+					if (fresh.length > 0) writeGlobal("envBlocklist", [...envBlocklist, ...fresh]);
+					const mergedNote = fresh.length > 0 ? t("importBlockMerge", { count: fresh.length }) : "";
+					if (added <= 0) show("ok", t("importNone") + mergedNote);
 					else {
 						writeGlobal("presets", next);
-						show("ok", `${t("importOk")} (+${added})`);
+						show("ok", `${t("importOk")} (+${added})${mergedNote}`);
 					}
 				} catch (e) {
 					show("error", `${t("importFail")}: ${e instanceof Error ? e.message : String(e)}`);
@@ -2019,6 +2062,15 @@ window.__ModuleLoader__.load({
 				if (await saveAsPreset(trimmed)) setAgentName("");
 				setCreating(false);
 			};
+			const removeBlockEntry = (entry) => {
+				writeGlobal("envBlocklist", envBlocklist.filter((e) => e !== entry));
+			};
+			const addBlockEntry = () => {
+				const entry = blockInput.trim();
+				setBlockInput("");
+				if (entry === "" || envBlocklist.includes(entry)) return;
+				writeGlobal("envBlocklist", [...envBlocklist, entry]);
+			};
 			return (0, react.createElement)("div", { style: s.list }, [
 				notice ? (0, react.createElement)("div", { style: notice.kind === "ok" ? s.noticeOk : s.error }, notice.text) : null,
 				(0, react.createElement)("div", { style: s.injectBox }, [(0, react.createElement)("div", { style: s.rowTitle }, t("savePreset")), (0, react.createElement)("div", { style: s.injectRow }, [(0, react.createElement)("input", {
@@ -2064,6 +2116,79 @@ window.__ModuleLoader__.load({
 					style: { display: "none" },
 					onChange: onImportFile
 				})])]),
+				(0, react.createElement)("div", { style: s.injectBox }, [
+					(0, react.createElement)("div", { style: s.rowTitle }, t("forceTitle")),
+					(0, react.createElement)("div", { style: s.muted }, t("forceHint")),
+					(0, react.createElement)("div", { style: s.injectRow }, [(0, react.createElement)("label", { style: s.switchWrap }, [(0, react.createElement)("input", {
+						type: "checkbox",
+						checked: cfg.forceSections !== false,
+						onChange: (e) => writeGlobal("forceSections", e.target.checked)
+					}), (0, react.createElement)("span", { style: cfg.forceSections !== false ? s.badgeOk : s.badgeBlocked }, cfg.forceSections !== false ? t("forceOn") : t("forceOff"))])])
+				]),
+				(0, react.createElement)("div", { style: s.injectBox }, [
+					(0, react.createElement)("div", { style: s.rowTitle }, t("envBlockTitle")),
+					(0, react.createElement)("div", { style: s.muted }, t("envBlockHint")),
+					(0, react.createElement)("div", { style: {
+						...s.toolWrap,
+						marginTop: 6
+					} }, envBlocklist.map((entry) => (0, react.createElement)("span", {
+						key: entry,
+						style: {
+							...s.toolChip,
+							display: "inline-flex",
+							alignItems: "center",
+							gap: 4
+						}
+					}, [entry, (0, react.createElement)("span", {
+						style: { cursor: "pointer" },
+						title: t("delete"),
+						onClick: () => removeBlockEntry(entry)
+					}, "×")]))),
+					envBlocklist.length === 0 ? (0, react.createElement)("div", { style: s.muted }, t("envBlockEmpty")) : null,
+					(0, react.createElement)("div", { style: {
+						...s.injectRow,
+						marginTop: 6
+					} }, [(0, react.createElement)("input", {
+						style: {
+							...s.input,
+							flex: 1
+						},
+						placeholder: t("envBlockAdd"),
+						value: blockInput,
+						onChange: (e) => setBlockInput(e.target.value)
+					}), (0, react.createElement)("button", {
+						style: s.mini,
+						disabled: blockInput.trim() === "",
+						onClick: addBlockEntry
+					}, t("envBlockAddAction"))]),
+					(0, react.createElement)("details", { style: { marginTop: 6 } }, [
+						(0, react.createElement)("summary", { style: {
+							...s.muted,
+							cursor: "pointer"
+						} }, `${t("envVarsTitle")} (${inv?.variables?.length ?? 0})`),
+						(0, react.createElement)("div", { style: {
+							...s.muted,
+							marginTop: 4
+						} }, t("envVarsHint")),
+						(0, react.createElement)("div", { style: {
+							...s.toolWrap,
+							marginTop: 4
+						} }, (inv?.variables ?? []).map((name) => (0, react.createElement)("span", {
+							key: name,
+							style: s.toolChip
+						}, `{{${name}}}`)))
+					])
+				]),
+				(0, react.createElement)("div", { style: s.injectBox }, [
+					(0, react.createElement)("div", { style: s.rowTitle }, t("resetTitle")),
+					(0, react.createElement)("div", { style: s.muted }, t("resetHint")),
+					(0, react.createElement)("div", { style: s.injectRow }, [(0, react.createElement)("button", {
+						style: s.mini,
+						onClick: () => {
+							if (window.confirm(t("resetConfirm"))) onReset();
+						}
+					}, t("resetAction"))])
+				]),
 				presets.length === 0 ? (0, react.createElement)("div", { style: s.muted }, t("empty")) : null,
 				presets.map((preset) => {
 					const active = cfg.activePreset === preset.id;
@@ -2178,6 +2303,7 @@ window.__ModuleLoader__.load({
 		const CONFIG_SET_URL = "/api/prompt-customizer/config/set";
 		const CONFIG_UNSET_URL = "/api/prompt-customizer/config/unset";
 		const CONFIG_APPLY_URL = "/api/prompt-customizer/config/apply";
+		const CONFIG_RESET_URL = "/api/prompt-customizer/config/reset";
 		const PRESETS_CREATE_URL = "/api/prompt-customizer/presets";
 		const PREVIEW_URL = "/api/prompt-customizer/preview";
 		/** 三套名义装配的共享布局：顺序固定，refresh 按此并行拉取。 */
@@ -2332,6 +2458,19 @@ window.__ModuleLoader__.load({
 			};
 			const writeGlobal = writeField;
 			const writeGlobalField = writeField;
+			const resetAll = () => {
+				fetch(CONFIG_RESET_URL, {
+					method: "POST",
+					headers: { "content-type": "application/json" }
+				}).then((r) => r.json()).then((body) => {
+					if (body?.ok !== true) throw new Error(body?.error ?? "reset failed");
+					setCfg(body.config);
+					setDraft(null);
+					setError(null);
+					setVersion((n) => n + 1);
+					showFlash(t("resetOk"));
+				}).catch((e) => setError(`${t("resetFail")}: ${e instanceof Error ? e.message : String(e)}`));
+			};
 			const switchTab = (next) => {
 				if ((tab === "sections" || tab === "tools") && (next === "presets" || next === "preview")) {
 					if (draft?.dirty && !window.confirm(t("discardConfirm"))) return;
@@ -2445,7 +2584,9 @@ window.__ModuleLoader__.load({
 					writePatch,
 					writeGlobal,
 					saveAsPreset,
-					forkSource: target ? agentPresets.find((p) => p.id === target)?.name ?? target : void 0
+					forkSource: target ? agentPresets.find((p) => p.id === target)?.name ?? target : void 0,
+					onReset: resetAll,
+					envBlocklist: cfg.envBlocklist ?? []
 				}) : (0, react.createElement)(PreviewTab, {
 					t,
 					active: tab === "preview",