dsh-prompt-customizer 0.9.2 → 2.1.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-prompt-customizer",
-  "version": "0.9.2",
+  "version": "2.1.2",
   "description": "DeepSeek Harness 的三合一能力台：提示词定制（按名称屏蔽 / 替换 / 注入 / 排序，按会话阶段与 agent 预设分层）+ 技能集合管理（导入 / 分组 / 开关）+ MCP Server 接入（分层遮蔽与工具级启停）。纯插件注入，不动官方源码。",
   "keywords": [
     "dsh",
@@ -38,6 +38,7 @@
     "lib",
     "client",
     "scripts",
+    "docs",
     "build.mjs",
     "cordis.patch.yml",
     "README.md",
@@ -62,18 +63,19 @@
   },
   "scripts": {
     "build": "node build.mjs",
-    "test": "node --test",
+    "test": "node --import ./test/_db-setup.mjs --test",
     "smoke": "node scripts/smoke-host.mjs && node scripts/smoke-client.mjs",
     "check": "npm run build && npm test && npm run smoke",
     "prepack": "npm run build"
   },
   "engines": {
-    "node": ">=22"
+    "node": ">=24.9",
+    "dsh": "^0.2.2-rc.1"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.4",
-    "@deepseek-ai/dsh-client-locale": "^0.2.0-rc.2",
-    "@deepseek-ai/dsh-settings": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-locale": "^0.2.2-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.2.2-rc.1",
     "react": "^18.2.0",
     "react-dom": "^18.2.0"
   },

package/scripts/e2e-report.json

@@ -0,0 +1,221 @@
+{
+  "when": "2026-11-07T13:07:27.619Z",
+  "url": "http://127.0.0.1:3134",
+  "destructive": true,
+  "passed": 43,
+  "failed": 0,
+  "results": [
+    {
+      "name": "握手 /?token 获取 auth cookie",
+      "ok": true,
+      "detail": "status=303 cookie=dsh-auth-ofppdFcJozve_bX…"
+    },
+    {
+      "name": "inventory 清单",
+      "ok": true,
+      "detail": "GET /api/prompt-customizer/inventory status=200"
+    },
+    {
+      "name": "config 配置",
+      "ok": true,
+      "detail": "GET /api/prompt-customizer/config status=200"
+    },
+    {
+      "name": "agent-presets 预设名单",
+      "ok": true,
+      "detail": "GET /api/prompt-customizer/agent-presets status=200"
+    },
+    {
+      "name": "preview 三阶段(bootstrap)",
+      "ok": true,
+      "detail": "GET /api/prompt-customizer/preview?phase=bootstrap status=200"
+    },
+    {
+      "name": "session 当前会话",
+      "ok": true,
+      "detail": "GET /api/prompt-customizer/session status=200"
+    },
+    {
+      "name": "skill-manager list",
+      "ok": true,
+      "detail": "GET /api/skill-manager/list status=200"
+    },
+    {
+      "name": "skill-toggles status",
+      "ok": true,
+      "detail": "GET /api/skill-toggles/status status=200"
+    },
+    {
+      "name": "skill-toggles presets",
+      "ok": true,
+      "detail": "GET /api/skill-toggles/presets status=200"
+    },
+    {
+      "name": "skill-toggles workspaces",
+      "ok": true,
+      "detail": "GET /api/skill-toggles/workspaces status=200"
+    },
+    {
+      "name": "skill-health",
+      "ok": true,
+      "detail": "GET /api/skill-health status=200"
+    },
+    {
+      "name": "MCP status",
+      "ok": true,
+      "detail": "GET /api/triad/mcp-status status=200"
+    },
+    {
+      "name": "MCP workspace scope status",
+      "ok": true,
+      "detail": "GET /api/triad/mcp-workspace-scope/status?cwd=C%3A%5CUsers%5CADMINI~1%5CAppData%5CLocal%5CTemp%5Cpc-e2e-ws-YJLVdU status=200"
+    },
+    {
+      "name": "MCP 已注册 Server 数 >= 1",
+      "ok": true,
+      "detail": "servers=anysearch, codegraph"
+    },
+    {
+      "name": "MCP Server 存在: anysearch",
+      "ok": true,
+      "detail": "tools=5"
+    },
+    {
+      "name": "MCP Server 存在: codegraph",
+      "ok": true,
+      "detail": "tools=1"
+    },
+    {
+      "name": "备份整库 /backup",
+      "ok": true,
+      "detail": "docs keys=mcp/tool-disable"
+    },
+    {
+      "name": "config/apply 预设级写入",
+      "ok": true,
+      "detail": "POST /api/prompt-customizer/config/apply status=200"
+    },
+    {
+      "name": "config 反映预设级 sections=__e2e_probe__",
+      "ok": true,
+      "detail": "sections=[\"__e2e_probe__\"]"
+    },
+    {
+      "name": "config/apply 预设级还原",
+      "ok": true,
+      "detail": "POST /api/prompt-customizer/config/apply status=200"
+    },
+    {
+      "name": "config/apply 工作区级写入",
+      "ok": true,
+      "detail": "POST /api/prompt-customizer/config/apply status=200"
+    },
+    {
+      "name": "config 反映工作区级 workspaceOverrides",
+      "ok": true,
+      "detail": "ws=[\"__e2e_ws__\"]"
+    },
+    {
+      "name": "config/apply 工作区级还原",
+      "ok": true,
+      "detail": "POST /api/prompt-customizer/config/apply status=200"
+    },
+    {
+      "name": "config/set forceSections=false",
+      "ok": true,
+      "detail": "POST /api/prompt-customizer/config/set status=200"
+    },
+    {
+      "name": "config 反映 forceSections=false",
+      "ok": true
+    },
+    {
+      "name": "config/unset forceSections",
+      "ok": true,
+      "detail": "POST /api/prompt-customizer/config/unset status=200"
+    },
+    {
+      "name": "export 当前预设定制",
+      "ok": true,
+      "detail": "GET /api/prompt-customizer/export?scope=standard status=200"
+    },
+    {
+      "name": "SKILL 工作区级关闭 diagnose-windows-sandbox-acl",
+      "ok": true,
+      "detail": "PUT /api/skill-toggles/workspaces/C%3A%5CUsers%5CADMINI~1%5CAppData%5CLocal%5CTemp%5Cpc-e2e-ws-YJLVdU/skills/diagnose-windows-sandbox-acl status=200"
+    },
+    {
+      "name": "SKILL workspaces 反映关闭",
+      "ok": true
+    },
+    {
+      "name": "SKILL 工作区级还原 diagnose-windows-sandbox-acl",
+      "ok": true,
+      "detail": "PUT /api/skill-toggles/workspaces/C%3A%5CUsers%5CADMINI~1%5CAppData%5CLocal%5CTemp%5Cpc-e2e-ws-YJLVdU/skills/diagnose-windows-sandbox-acl status=200"
+    },
+    {
+      "name": "SKILL 预设级关闭 diagnose-windows-sandbox-acl@standard",
+      "ok": true,
+      "detail": "PUT /api/skill-toggles/presets/standard/skills/diagnose-windows-sandbox-acl status=200"
+    },
+    {
+      "name": "SKILL 预设级还原 diagnose-windows-sandbox-acl@standard",
+      "ok": true,
+      "detail": "PUT /api/skill-toggles/presets/standard/skills/diagnose-windows-sandbox-acl status=200"
+    },
+    {
+      "name": "MCP 工作区级工具禁用 mcp__anysearch__batch_search",
+      "ok": true,
+      "detail": "PUT /api/triad/mcp-workspace-scope/workspace/C%3A%5CUsers%5CADMINI~1%5CAppData%5CLocal%5CTemp%5Cpc-e2e-ws-YJLVdU/tools status=200"
+    },
+    {
+      "name": "MCP status 反映工具禁用",
+      "ok": true,
+      "detail": "toolDisabled=[\"mcp__anysearch__batch_search\"]"
+    },
+    {
+      "name": "MCP 工作区级工具还原 mcp__anysearch__batch_search",
+      "ok": true,
+      "detail": "PUT /api/triad/mcp-workspace-scope/workspace/C%3A%5CUsers%5CADMINI~1%5CAppData%5CLocal%5CTemp%5Cpc-e2e-ws-YJLVdU/tools status=200"
+    },
+    {
+      "name": "MCP 工作区级关闭 server anysearch",
+      "ok": true,
+      "detail": "PUT /api/triad/mcp-workspace-scope/workspace/C%3A%5CUsers%5CADMINI~1%5CAppData%5CLocal%5CTemp%5Cpc-e2e-ws-YJLVdU/servers/anysearch status=200"
+    },
+    {
+      "name": "MCP status 反映 server 关闭",
+      "ok": true
+    },
+    {
+      "name": "MCP 工作区级启用 server anysearch",
+      "ok": true,
+      "detail": "PUT /api/triad/mcp-workspace-scope/workspace/C%3A%5CUsers%5CADMINI~1%5CAppData%5CLocal%5CTemp%5Cpc-e2e-ws-YJLVdU/servers/anysearch status=200"
+    },
+    {
+      "name": "MCP 预设级遮蔽 anysearch@standard",
+      "ok": true,
+      "detail": "PUT /api/triad/mcp-masks/standard/anysearch status=200"
+    },
+    {
+      "name": "MCP 预设级遮蔽还原 anysearch@standard",
+      "ok": true,
+      "detail": "PUT /api/triad/mcp-masks/standard/anysearch status=200"
+    },
+    {
+      "name": "catalog/rescan 可调用",
+      "ok": true,
+      "detail": "status=200 "
+    },
+    {
+      "name": "恢复整库 /restore",
+      "ok": true,
+      "detail": "status=200"
+    },
+    {
+      "name": "恢复后 overrides 与备份一致",
+      "ok": true,
+      "detail": ""
+    }
+  ]
+}

package/scripts/e2e-terminal.mjs

@@ -0,0 +1,210 @@
+#!/usr/bin/env node
+/**
+ * dsh-prompt-customizer 终端级 E2E 终测脚本。
+ *
+ * 用法：
+ *   node scripts/e2e-terminal.mjs --url "http://127.0.0.1:PORT/?token=XXXX" [--destructive]
+ *
+ * 说明：
+ *  - 先对 `/?token=` 做一次握手拿 dsh-auth cookie，再带 cookie 访问各 API。
+ *  - 默认只跑只读检查；`--destructive` 会跑写入场景，且**测试前整库备份、结束时恢复**，
+ *    保护真实数据。任何异常都会在 finally 里尝试恢复。
+ *  - 退出码：全部通过 0，否则 1。结果同时写到 scripts/e2e-report.json。
+ *
+ * 状态（2.1.0）：`--destructive` 里的「config/apply 工作区级写入 / 还原」场景仍用
+ * 2.0.0 已移除的 `level=workspace` 与 `workspaceOverrides`，与当前契约不相容；只读
+ * 检查仍可用。`scripts/e2e-report.json` 与 `docs/testing/feature-matrix.md` 都是历史
+ * 运行结果，不是当前验证结论（当前门禁见 `npm run check`）。
+ */
+import fs from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+
+const argv = process.argv.slice(2)
+const arg = (name, fallback) => {
+  const i = argv.indexOf(name)
+  return i >= 0 && argv[i + 1] !== undefined ? argv[i + 1] : fallback
+}
+const TOKEN_URL = arg('--url')
+const DESTRUCTIVE = argv.includes('--destructive')
+if (TOKEN_URL === undefined) {
+  console.error('缺少 --url "http://127.0.0.1:PORT/?token=XXXX"')
+  process.exit(2)
+}
+const U = new URL(TOKEN_URL)
+const ORIGIN = U.origin
+
+const results = []
+const record = (name, ok, detail) => {
+  results.push({ name, ok, detail })
+  console.log(`${ok ? 'PASS' : 'FAIL'}  ${name}${detail === undefined ? '' : `  — ${detail}`}`)
+}
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms))
+
+let cookie = ''
+async function handshake() {
+  const res = await fetch(TOKEN_URL, { redirect: 'manual' })
+  const sc = typeof res.headers.getSetCookie === 'function' ? res.headers.getSetCookie() : []
+  cookie = sc.map((c) => c.split(';')[0]).join('; ')
+  record('握手 /?token 获取 auth cookie', res.status < 400 && cookie !== '', `status=${res.status} cookie=${cookie.slice(0, 24)}…`)
+}
+
+async function req(method, p, body) {
+  const headers = { accept: 'application/json' }
+  if (cookie !== '') headers.cookie = cookie
+  if (body !== undefined) headers['content-type'] = 'application/json'
+  const res = await fetch(ORIGIN + p, { method, headers, body: body === undefined ? undefined : JSON.stringify(body) })
+  let json = null
+  try { json = await res.json() } catch { json = null }
+  return { status: res.status, json }
+}
+
+async function okGet(name, p, validate) {
+  try {
+    const { status, json } = await req('GET', p)
+    const good = status === 200 && json !== null && json.ok !== false && (validate === undefined || validate(json))
+    record(name, good, `GET ${p} status=${status}${good ? '' : ` body=${JSON.stringify(json).slice(0, 160)}`}`)
+    return { status, json }
+  } catch (e) {
+    record(name, false, `GET ${p} 异常: ${e instanceof Error ? e.message : String(e)}`)
+    return { status: 0, json: null }
+  }
+}
+
+async function expect(name, p, method, body, pred) {
+  try {
+    const { status, json } = await req(method, p, body)
+    const good = (pred ? pred(status, json) : status === 200 && json !== null && json.ok === true)
+    record(name, good, `${method} ${p} status=${status}${good ? '' : ` body=${JSON.stringify(json).slice(0, 200)}`}`)
+    return { status, json }
+  } catch (e) {
+    record(name, false, `${method} ${p} 异常: ${e instanceof Error ? e.message : String(e)}`)
+    return { status: 0, json: null }
+  }
+}
+
+const WS = fs.mkdtempSync(path.join(os.tmpdir(), 'pc-e2e-ws-')) // 隔离的临时工作区 cwd
+
+async function main() {
+  await handshake()
+
+  // ── 只读接口全量 ──────────────────────────────────────────────
+  await okGet('inventory 清单', '/api/prompt-customizer/inventory', (j) => Array.isArray(j.tools) || Array.isArray(j.sections) || j.counts !== undefined)
+  const cfg = await okGet('config 配置', '/api/prompt-customizer/config', (j) => j.config !== undefined)
+  await okGet('agent-presets 预设名单', '/api/prompt-customizer/agent-presets', (j) => Array.isArray(j.presets))
+  await okGet('preview 三阶段(bootstrap)', '/api/prompt-customizer/preview?phase=bootstrap', (j) => j !== null)
+  await okGet('session 当前会话', '/api/prompt-customizer/session', (j) => j !== null)
+  await okGet('skill-manager list', '/api/skill-manager/list', (j) => Array.isArray(j.bundles) || Array.isArray(j.loose) || Array.isArray(j.skills))
+  const st = await okGet('skill-toggles status', '/api/skill-toggles/status', (j) => j.skills !== undefined)
+  await okGet('skill-toggles presets', '/api/skill-toggles/presets', (j) => Array.isArray(j.presets))
+  await okGet('skill-toggles workspaces', '/api/skill-toggles/workspaces', (j) => j.workspaces !== undefined)
+  await okGet('skill-health', '/api/skill-health', (j) => Array.isArray(j.issues) || j.ok === true)
+  const mcp = await okGet('MCP status', '/api/triad/mcp-status', (j) => Array.isArray(j.servers))
+  await okGet('MCP workspace scope status', `/api/triad/mcp-workspace-scope/status?cwd=${encodeURIComponent(WS)}`, (j) => j.ok === true)
+
+  const presets = cfg.json?.config ? cfg.json : cfg.json
+  const presetList = (await req('GET', '/api/prompt-customizer/agent-presets')).json?.presets ?? []
+  const presetId = Array.isArray(presetList) && presetList.length > 0 ? (presetList.find((p) => !p.broken)?.id ?? presetList[0].id) : 'standard'
+  const servers = Array.isArray(mcp.json?.servers) ? mcp.json.servers : []
+  record('MCP 已注册 Server 数 >= 1', servers.length >= 1, `servers=${servers.map((s) => s.serverName).join(', ')}`)
+  for (const s of servers) {
+    record(`MCP Server 存在: ${s.serverName}`, true, `tools=${(s.tools ?? []).length}`
+    )
+  }
+  const skillsObj = st.json?.skills ?? {}
+  const skillNames = Object.keys(skillsObj)
+
+  if (!DESTRUCTIVE) {
+    return
+  }
+
+  // ── 写入场景（备份 → 测试 → 恢复）────────────────────────────
+  const backup = await req('GET', '/api/prompt-customizer/backup')
+  record('备份整库 /backup', backup.status === 200 && backup.json?.ok === true && backup.json.docs !== undefined, `docs keys=${Object.keys(backup.json?.docs ?? {}).join(',')}`)
+  const backupFile = path.join(process.cwd(), 'scripts', '.e2e-backup.json')
+  fs.writeFileSync(backupFile, JSON.stringify(backup.json, null, 2))
+  const originalOverrides = JSON.parse(JSON.stringify(backup.json?.docs?.config?.overrides ?? {}))
+
+  try {
+    // 提示词·预设级 config/apply
+    await expect('config/apply 预设级写入', '/api/prompt-customizer/config/apply', 'POST', { target: presetId, patch: { sections: ['__e2e_probe__'] } })
+    const c1 = await req('GET', '/api/prompt-customizer/config')
+    record('config 反映预设级 sections=__e2e_probe__', (c1.json?.config?.overrides?.[presetId]?.sections ?? []).includes('__e2e_probe__'), `sections=${JSON.stringify(c1.json?.config?.overrides?.[presetId]?.sections)}`)
+    await expect('config/apply 预设级还原', '/api/prompt-customizer/config/apply', 'POST', { target: presetId, patch: { sections: null } })
+
+    // 提示词·工作区级 config/apply level=workspace
+    await expect('config/apply 工作区级写入', '/api/prompt-customizer/config/apply', 'POST', { level: 'workspace', workspace: WS, patch: { sections: ['__e2e_ws__'] } })
+    const c2 = await req('GET', '/api/prompt-customizer/config')
+    record('config 反映工作区级 workspaceOverrides', (c2.json?.workspaceOverrides?.[WS]?.sections ?? []).includes('__e2e_ws__'), `ws=${JSON.stringify(c2.json?.workspaceOverrides?.[WS]?.sections)}`)
+    await expect('config/apply 工作区级还原', '/api/prompt-customizer/config/apply', 'POST', { level: 'workspace', workspace: WS, patch: { sections: null } })
+
+    // config/set + unset（forceSections）
+    await expect('config/set forceSections=false', '/api/prompt-customizer/config/set', 'POST', { field: 'forceSections', value: false })
+    const c3 = await req('GET', '/api/prompt-customizer/config')
+    record('config 反映 forceSections=false', c3.json?.config?.forceSections === false)
+    await expect('config/unset forceSections', '/api/prompt-customizer/config/unset', 'POST', { field: 'forceSections' })
+
+    // export（只读导出该预设定制）
+    await okGet(`export 当前预设定制`, `/api/prompt-customizer/export?scope=${encodeURIComponent(presetId)}`, (j) => j.customization !== undefined)
+
+    // SKILL·工作区级
+    if (skillNames.length > 0) {
+      const sk = skillNames[0]
+      await expect(`SKILL 工作区级关闭 ${sk}`, `/api/skill-toggles/workspaces/${encodeURIComponent(WS)}/skills/${encodeURIComponent(sk)}`, 'PUT', { enabled: false })
+      const w1 = await req('GET', '/api/skill-toggles/workspaces')
+      record('SKILL workspaces 反映关闭', (w1.json?.workspaces?.[WS]?.[sk]) === false)
+      await expect(`SKILL 工作区级还原 ${sk}`, `/api/skill-toggles/workspaces/${encodeURIComponent(WS)}/skills/${encodeURIComponent(sk)}`, 'PUT', { enabled: true })
+      // SKILL·预设级
+      await expect(`SKILL 预设级关闭 ${sk}@${presetId}`, `/api/skill-toggles/presets/${encodeURIComponent(presetId)}/skills/${encodeURIComponent(sk)}`, 'PUT', { enabled: false })
+      await expect(`SKILL 预设级还原 ${sk}@${presetId}`, `/api/skill-toggles/presets/${encodeURIComponent(presetId)}/skills/${encodeURIComponent(sk)}`, 'PUT', { enabled: true })
+    } else {
+      record('SKILL 开关（无可用技能，跳过）', true, '0 skills')
+    }
+
+    // MCP·工作区级工具启停 + server 关闭 + 还原
+    if (servers.length > 0) {
+      const s0 = servers[0]
+      const fullName = (s0.tools ?? [])[0]?.name ?? `mcp__${s0.serverName}__probe`
+      await expect(`MCP 工作区级工具禁用 ${fullName}`, `/api/triad/mcp-workspace-scope/workspace/${encodeURIComponent(WS)}/tools`, 'PUT', { name: fullName, enabled: false })
+      const m1 = await req('GET', `/api/triad/mcp-workspace-scope/status?cwd=${encodeURIComponent(WS)}`)
+      record('MCP status 反映工具禁用', (m1.json?.toolDisabled ?? []).includes(fullName), `toolDisabled=${JSON.stringify(m1.json?.toolDisabled)}`)
+      await expect(`MCP 工作区级工具还原 ${fullName}`, `/api/triad/mcp-workspace-scope/workspace/${encodeURIComponent(WS)}/tools`, 'PUT', { name: fullName, enabled: true })
+
+      await expect(`MCP 工作区级关闭 server ${s0.serverName}`, `/api/triad/mcp-workspace-scope/workspace/${encodeURIComponent(WS)}/servers/${encodeURIComponent(s0.serverName)}`, 'PUT', { enabled: false })
+      const m2 = await req('GET', `/api/triad/mcp-workspace-scope/status?cwd=${encodeURIComponent(WS)}`)
+      record('MCP status 反映 server 关闭', (m2.json?.closed ?? []).includes(s0.serverName))
+      await expect(`MCP 工作区级启用 server ${s0.serverName}`, `/api/triad/mcp-workspace-scope/workspace/${encodeURIComponent(WS)}/servers/${encodeURIComponent(s0.serverName)}`, 'PUT', { enabled: true })
+
+      // 预设级遮蔽 mask
+      await expect(`MCP 预设级遮蔽 ${s0.serverName}@${presetId}`, `/api/triad/mcp-masks/${encodeURIComponent(presetId)}/${encodeURIComponent(s0.serverName)}`, 'PUT', { enabled: false }, (st2, j) => st2 === 200 && j?.ok === true)
+      await expect(`MCP 预设级遮蔽还原 ${s0.serverName}@${presetId}`, `/api/triad/mcp-masks/${encodeURIComponent(presetId)}/${encodeURIComponent(s0.serverName)}`, 'PUT', { enabled: true }, (st2, j) => st2 === 200 && j?.ok === true)
+    } else {
+      record('MCP 写入（无 Server，跳过）', true, '0 servers')
+    }
+
+    // catalog rescan（可能 200 / 501 / 409）
+    const rs = await req('POST', '/api/prompt-customizer/catalog/rescan')
+    record('catalog/rescan 可调用', [200, 409, 501].includes(rs.status), `status=${rs.status} ${rs.json?.error ?? ''}`)
+  } finally {
+    // 恢复整库
+    const restore = await req('POST', '/api/prompt-customizer/restore', { docs: backup.json?.docs ?? {}, catalog: backup.json?.catalog ?? {} })
+    record('恢复整库 /restore', restore.status === 200 && restore.json?.ok === true, `status=${restore.status}`)
+    const after = await req('GET', '/api/prompt-customizer/config')
+    const a = JSON.stringify(after.json?.config?.overrides ?? {})
+    const b = JSON.stringify(originalOverrides)
+    record('恢复后 overrides 与备份一致', a === b, a === b ? '' : '不一致')
+    try { fs.unlinkSync(backupFile) } catch { /* ignore */ }
+  }
+}
+
+try {
+  await main()
+} catch (e) {
+  record('主流程异常', false, e instanceof Error ? e.stack ?? e.message : String(e))
+} finally {
+  const passed = results.filter((r) => r.ok).length
+  const failed = results.length - passed
+  console.log(`\n==== 汇总: ${passed}/${results.length} 通过, ${failed} 失败 ====`)
+  try { fs.writeFileSync(path.join(process.cwd(), 'scripts', 'e2e-report.json'), JSON.stringify({ when: new Date().toISOString(), url: ORIGIN, destructive: DESTRUCTIVE, passed, failed, results }, null, 2)) } catch { /* ignore */ }
+  process.exit(failed === 0 ? 0 : 1)
+}

package/scripts/simulate-rescan.mjs

@@ -0,0 +1,184 @@
+/**
+ * 端到端模拟：用真实投递的 `lib/index.js`，在隔离的临时 DSH_HOME 里跑
+ * `/api/prompt-customizer/catalog/rescan`，验证「积压 → 重扫 → 对齐真实注册表」。
+ *
+ * 不碰用户 profile：DSH_HOME 是临时目录，假 roster 与假装配都在本进程内，
+ * 只有被测代码是真实构建产物。真实的 4 个预设各自贡献的段/工具用 stub 装配
+ * 按真实形状（含 dsh_browser_* 这类已卸载的历史工具）构造。
+ *
+ * Usage: node scripts/simulate-rescan.mjs
+ *
+ * 状态（2.1.0）：本脚本基于 ADR-0001 已删除的「目录累积池 + /catalog/rescan」，
+ * 现在跑不通，保留作历史材料。全域接管的当前验证见
+ * test/universal-prompt-takeover.test.mjs 与 `npm run check`。
+ */
+
+import fs from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+import { pathToFileURL } from 'node:url'
+import { parse } from 'yaml'
+
+const ROOT = path.resolve(import.meta.dirname, '..')
+
+const fail = (msg) => { console.error(`FAIL  ${msg}`); process.exitCode = 1 }
+const pass = (msg) => console.log(`ok    ${msg}`)
+
+// ── 一个隔离的 DSH_HOME，预置「积压」登记表 ────────────────────────────────
+const home = fs.mkdtempSync(path.join(os.tmpdir(), 'pc-rescan-sim-'))
+const dataDir = path.join(home, 'prompt-customizer')
+fs.mkdirSync(dataDir, { recursive: true })
+const catalogFile = path.join(dataDir, 'catalog.yaml')
+
+// 积压：407 个工具里 307 个早已不存在（这里取真实样本形状），45 个段里 44 个是幽灵。
+const staleTools = Array.from({ length: 307 }, (_, i) => ({
+  name: i < 20 ? `dsh_browser_${['open', 'click', 'type', 'scroll', 'screenshot'][i % 5]}_${i}` : `ghost_tool_${i}`,
+  description: 'stale — the plugin that registered this is long gone',
+}))
+const liveTools = [
+  { name: 'bash', description: 'run a shell' },
+  { name: 'edit', description: 'edit a file' },
+  { name: 'grep', description: 'search' },
+]
+const staleSections = Array.from({ length: 44 }, (_, i) => ({ name: `ghost:section:${i}`, text: 'old' }))
+const liveSections = [{ name: 'persona', text: 'You are a coding agent.' }]
+
+fs.writeFileSync(catalogFile, [
+  'tools:',
+  ...[...staleTools, ...liveTools].map((t) => `  - name: ${t.name}\n    description: ${JSON.stringify(t.description)}`),
+  'sections:',
+  ...[...staleSections, ...liveSections].map((s) => `  - name: ${s.name}\n    text: ${JSON.stringify(s.text)}`),
+  '',
+].join('\n'))
+
+// ── 真实的宿主替身：4 个预设，各自贡献不同的段/工具 ────────────────────────
+const PRESET_VIEWS = {
+  standard: {
+    sections: [{ name: 'persona', text: 'You are a coding agent.' }, { name: 'guidelines', text: 'Be careful.' }],
+    tools: [{ name: 'bash', description: 'run a shell' }, { name: 'edit', description: 'edit a file' }, { name: 'grep', description: 'search' }],
+  },
+  minimal: {
+    sections: [{ name: 'persona', text: 'You are a coding agent.' }],
+    tools: [{ name: 'bash', description: 'run a shell' }],
+  },
+  ptc: {
+    sections: [{ name: 'persona', text: 'You are a coding agent.' }],
+    tools: [{ name: 'run_code', description: 'PTC transport' }],
+  },
+  cordis: {
+    sections: [{ name: 'persona', text: 'You are a coding agent.' }, { name: 'cordis:composition', text: 'compose plugins' }],
+    tools: [{ name: 'bash', description: 'run a shell' }, { name: 'cordis_api_catalog', description: 'catalog' }],
+  },
+}
+// 真实预期并集（4 个预设各自 base 视图去重后）：
+const EXPECT_SECTIONS = ['persona', 'guidelines', 'cordis:composition']
+const EXPECT_TOOLS = ['bash', 'edit', 'grep', 'run_code', 'cordis_api_catalog']
+
+const routes = {}
+const disposed = []
+const roster = {
+  defaultId: 'standard',
+  list: async () => Object.keys(PRESET_VIEWS).map((id) => ({ id })),
+  acquireScope: async (id) => ({
+    key: id,
+    async [Symbol.asyncDispose]() { disposed.push(id) },
+  }),
+}
+
+const webServer = { register: (r) => { routes[r.path] = r.handler; return () => {} } }
+const ctx = {
+  on: () => {},
+  // 真实 Cordis 的 effect 立即执行回调并登记 disposer；inject 立即用子作用域调用
+  // 回调。桩必须同形，否则路由根本不会注册上（实测踩过）。
+  effect: (fn) => { fn?.(); return () => {} },
+  inject: (names, callback) => { callback?.(ctx); return () => {} },
+  logger: { info: () => {}, warn: (m) => console.log("CTX-WARN:", String(m).slice(0,300)), debug: () => {} },
+  // host.ts 有两层：自有模块用 `ctx.webServer` 属性，vendor 半身用 `ctx.get('webServer')`。
+  // 两个面都要给，否则提示词半身整块不挂（实测踩过）。
+  webServer,
+  tools: { schemas: () => [], register: () => () => {} },
+  sessionProjections: { register: () => () => {} },
+  get: (name) => {
+    if (name === 'webServer') return webServer
+    if (name === 'agentPresets') return roster
+    if (name === 'connection') return { requestRejection: () => undefined }
+    if (name === 'settings') return { documentPath: path.join(home, 'settings.yaml') }
+    if (name === 'profileContext') return undefined
+    return undefined
+  },
+  systemPrompt: {
+    assemble: async (hint) => ({
+      sections: [], tools: [], variables: {}, contexts: [],
+      layers: { merge: () => new Map() },
+      promptCustomizerBaseView: PRESET_VIEWS[hint.scope] ?? { sections: [], tools: [] },
+    }),
+  },
+}
+
+// ── 跑真实构建产物 ────────────────────────────────────────────────────────
+const mod = await import(pathToFileURL(path.join(ROOT, 'lib/index.js')).href)
+// host.ts 的 apply 是 async：不 await 会在第一个 await 处就往下走，
+// 结果是只有同步注册的 skill-manager 挂上了（实测踩过）。
+await mod.apply(ctx, { dataDir })
+
+const handler = routes['/api/prompt-customizer/catalog/rescan']
+console.log('ROUTES', Object.keys(routes).join(', '))
+if (handler === undefined) fail('catalog/rescan 路由未注册')
+else pass('catalog/rescan 路由已注册')
+
+function post() {
+  const req = { url: '/api/prompt-customizer/catalog/rescan', method: 'POST', headers: { host: '127.0.0.1' }, on(ev, cb) { if (ev === 'end') cb() } }
+  return new Promise((resolve) => {
+    const res = {
+      status: 0, body: null,
+      writeHead(code) { this.status = code },
+      end(text) { this.body = JSON.parse(text); resolve(res) },
+    }
+    void handler(req, res)
+  })
+}
+
+// ── 断言 ──────────────────────────────────────────────────────────────────
+const before = parse(fs.readFileSync(catalogFile, 'utf8'))
+pass(`积压现状：${before.tools.length} 个工具 / ${before.sections.length} 个段`)
+
+const res = await post()
+
+if (res.status !== 200) fail(`重扫应 200，实得 ${res.status}: ${JSON.stringify(res.body)}`)
+else pass('重扫返回 200')
+
+const report = res.body.report ?? {}
+const afterTools = res.body.catalog?.tools ?? []
+const afterSections = res.body.catalog?.sections ?? []
+
+const gotTools = afterTools.map((t) => t.name).sort()
+const gotSections = afterSections.map((s) => s.name).sort()
+
+if (JSON.stringify(gotTools) !== JSON.stringify([...EXPECT_TOOLS].sort())) {
+  fail(`工具并集应等于真实注册表\n  期望 ${JSON.stringify([...EXPECT_TOOLS].sort())}\n  实得 ${JSON.stringify(gotTools)}`)
+} else pass(`工具并集对齐真实注册表（${gotTools.length} 个）`)
+
+if (JSON.stringify(gotSections) !== JSON.stringify([...EXPECT_SECTIONS].sort())) {
+  fail(`段并集应等于真实注册表\n  期望 ${JSON.stringify([...EXPECT_SECTIONS].sort())}\n  实得 ${JSON.stringify(gotSections)}`)
+} else pass(`段并集对齐真实注册表（${gotSections.length} 个）`)
+
+if (report.tools?.removed === 307) pass(`清掉 307 个已不存在的工具（${report.tools.before} → ${report.tools.after}）`)
+else fail(`应清掉 307 个工具，实得 ${JSON.stringify(report.tools)}`)
+
+if (report.sections?.removed === 44) pass(`清掉 44 个已不存在的段（${report.sections.before} → ${report.sections.after}）`)
+else fail(`应清掉 44 个段，实得 ${JSON.stringify(report.sections)}`)
+
+if (JSON.stringify(disposed.sort()) === JSON.stringify(Object.keys(PRESET_VIEWS).sort())) pass('每个预设的作用域租约都已释放')
+else fail(`租约释放不全：${JSON.stringify(disposed)}`)
+
+// 落盘：重启后不会被历史条目捞回来
+const onDisk = parse(fs.readFileSync(catalogFile, 'utf8'))
+if (onDisk.tools.length === EXPECT_TOOLS.length && onDisk.sections.length === EXPECT_SECTIONS.length) {
+  pass('登记表已落盘（重启不会捞回历史条目）')
+} else fail(`落盘内容不对：${onDisk.tools.length} 工具 / ${onDisk.sections.length} 段`)
+
+if ((res.body.skipped ?? []).length === 0) pass('无预设被跳过')
+else fail(`不应有跳过的预设：${JSON.stringify(res.body.skipped)}`)
+
+fs.rmSync(home, { recursive: true, force: true })
+console.log(process.exitCode === 1 ? '\nSIMULATION FAILED' : '\nSIMULATION PASSED — 积压清理按真实注册表对齐')