dsh-prompt-picker 0.0.0-stage → 0.8.0

package/CHANGELOG.md

@@ -0,0 +1,134 @@
+# Changelog
+
+## 0.8.0
+
+### Security
+
+- **Same-origin guard on the RPC route.** A webpage could make a browser POST
+  `text/plain` JSON at the loopback port (no preflight) and silently add or
+  check prompts. `/_dsh/prompt-picker/rpc` now refuses a request before
+  reading anything unless Origin (when present) equals the server's own
+  origin, Host is loopback or the server's own hostname, and POST bodies are
+  `application/json`; refusals answer `403 {code:'forbidden'}` and change
+  nothing.
+
+### Changed
+
+- **Slim debug log by default.** The per-assembly line keeps `t`, `sub`,
+  `why`, `injected`; the context dump (`keys` + `ctx`) is only written with
+  `debugContext: true` in the row config. Fixes the stale
+  `full-throttle-debug.log` filename in the header comment.
+
+## 0.7.0
+
+### Added
+
+- **The built-in row is editable.** The `update` action now accepts
+  `full-throttle` like any row — pencil, scope chip and the footer's edit list
+  all work on it (the footer list shows every row, built-in included). The
+  edit persists as a `builtin` override in `prompt-picker.json` and survives
+  restarts; editing the row back to its generated default drops the override
+  key entirely, so an uncustomized row keeps following config `instructions`.
+  Only deletion stays rejected: the row itself is code.
+
+### Changed
+
+- The footer's edit list now contains every row (the built-in one first), so
+  "Edit prompt…" is never disabled and the unreachable empty hint is gone.
+
+## 0.6.0
+
+### Added
+
+- **Clear all** — the footer's new button (right of the prompt button) removes
+  every saved row after its own second confirmation (`将删除全部 {n} 条自建提示词…`),
+  through the new host RPC action `deleteAll` (`{action:'deleteAll'}`). One
+  serialized persist; the built-in row is code and keeps its own checked state.
+  Disabled while no user row exists.
+- **Two-level prompt menu** — the footer's prompt button now expands
+  `新增提示词… / 修改提示词…` instead of opening the add dialog directly; the
+  edit branch lists every saved row (name + scope chip), and picking one opens
+  the shared dialog prefilled. The per-row inline pencil stays.
+
+### Changed
+
+- **Removed the footer's Uncheck-all item** (unchecking stays one click per row,
+  and `deleteAll` empties the list outright). The host `clear` RPC action is
+  unchanged for API compatibility.
+- The add/edit dialogs merged into one `PromptDialog` (mode add | edit) whose
+  save is awaited: a rejected RPC keeps the dialog open and surfaces the message
+  inline, instead of closing and erroring the whole widget.
+
+### Fixed
+
+- Verified scope routing end to end against a live harness: a `main` row reached
+  only the top session (`why=header:main`), a `sub` row only a spawned child
+  (`why=origin=subagent,delegationDepth=1`), `both` reached both.
+
+## 0.5.1
+
+### Fixed
+
+- **Concurrent state writes no longer drift.** `persist()` used a temporary file
+  named only after `process.pid`, so overlapping `toggle` / `update` / `delete`
+  calls clobbered the same temporary file and raced their rename/unlink steps; the
+  in-memory `selectedIds` could then disagree with the state file until the next
+  successful write (the file never tore, and a reload took the disk as truth).
+  Writes are now serialized through one promise chain and each uses a unique
+  temporary name (`<pid>.<time>.<random>.tmp`); the payload is serialized when
+  the write runs, so the last write always reflects the current rows.
+
+### Changed
+
+- Documented the validation contract of `update`: an empty name or text answers
+  `400 rejected`, while an out-of-range `scope` falls back to `both` — the same
+  `scopeOf()` rule `add` has always applied, kept identical on purpose.
+- `test/edit-delete.test.mjs` now also covers 36 overlapping toggle/update calls
+  (memory must equal disk, no `.tmp` residue, a reload must agree) and the
+  documented scope fallback.
+
+## 0.5.0
+
+### Added
+
+- Per-row **edit** (pencil → inline form for name / text / scope, saved through the
+  new `update` action) and **delete** (trash → second confirmation, then the new
+  `delete` action). The built-in row is read-only: it shows neither entry.
+- Host RPC actions on `/_dsh/prompt-picker/rpc`:
+  - `update` — `{action:'update', id, name?, text?, scope?}`; a partial update.
+    Unchanged fields keep their value; validation matches `add` (name trimmed to
+    60 characters and non-empty, text non-empty, scope through `scopeOf`);
+    the in-memory row is restored if the write fails.
+  - `delete` — `{action:'delete', id}`; removes the row and drops its id from
+    `selectedIds`, rolling both back if the write fails.
+  - Both answer `{ok:true, value:<state>}`, or `400 {ok:false, error:{code:'rejected', message}}`
+    for an unknown id, an empty field, or the built-in row.
+- `test/edit-delete.test.mjs`: action-level, RPC-contract, restart-reload,
+  toggle/update interleaving, scope-routing and zh/en copy-parity coverage.
+
+### Fixed
+
+- **Sub-agent detection.** `classifyAgent` read `delegationDepth` / `origin` off
+  the flat assembly context, which never carries them, so every assembly fell
+  through to the `default-main` branch. `scope: 'main'` rows therefore leaked
+  into sub-agents — including teammates (18/18 assemblies in a real session).
+  It now reads the durable session header (`context.agent.session.header`) plus
+  `AgentOptions.subagentDepth`, matching `delegationDepthOf()` in
+  `@deepseek-ai/dsh-subagent`, and the calibration log distinguishes
+  `origin=…`, `delegationDepth=…`, `header:main` and
+  `default-main:no-header`.
+
+### Changed
+
+- Version 0.4.0 → 0.5.0. README (both languages) documents the scope
+  discriminator, the degradation path and the new row actions.
+
+## 0.4.0
+
+- Published as the standalone plugin `dsh-prompt-picker`: multi-select prompts,
+  per-row scopes (both / main / sub), solid-hollow bolt icon, same-origin host RPC.
+
+## 0.3.x
+
+- Earlier releases under the previous `dsh-full-throttle` identity (single switch →
+  multi-select picker).

package/README.md

@@ -1,3 +1,33 @@
-# Temporary Holding Version
+# dsh-prompt-picker
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+English | [中文](README.zh.md)
+
+One bolt icon ⚡ in the composer toolbar: click it and check the system prompts to inject. Multi-select.
+
+| Off (hollow) | On (solid) |
+| --- | --- |
+| ![off](docs/preview-bolt-off.svg) | ![on](docs/preview-bolt-on.svg) |
+
+## What it does
+
+- **Check = inject**: checked rows go into the system prompt in list order, separated by blank lines; check nothing and nothing is injected
+- **Per-row scope**: all / main agent only / sub-agents only (click the chip at the end of a row; teammate sessions count as sub-agents)
+- **Manage**: add, edit (the built-in "Full Throttle" row included), delete one by one, or clear every saved row at once
+- **Survives restarts**: state lives in `~/.dsh/prompt-picker.json`
+- **Local debug log**: each injection appends one slim JSON line (scope verdict + names) to `~/.dsh/prompt-picker-debug.log`; add `debugContext: true` to the row config for the full context dump. Local only, auto-resets past 256 KiB
+
+## Install
+
+- **Market**: search `dsh-prompt-picker` in the DSH plugin market (dshmarket), one click
+- **Manual**: Plugins page → Add plugin → paste `https://github.com/solopole/dsh-prompt-picker`
+- **CLI**: `dsh plugin --profile <name> add dsh-prompt-picker`
+
+## Customize the built-in text (optional)
+
+Edit the built-in row right in the menu, or change its generated default in the profile's `cordis.patch.yml`:
+
+```yaml
+- id: prompt-picker
+  config:
+    instructions: 'Your default text'
+```

package/README.zh.md

@@ -0,0 +1,33 @@
+# dsh-prompt-picker（提示词选择器）
+
+[English](README.md) | 中文
+
+输入框工具栏的闪电图标 ⚡：点开勾选要注入的系统提示词，可多选。
+
+| 关（空心） | 开（实心） |
+| --- | --- |
+| ![关](docs/preview-bolt-off.svg) | ![开](docs/preview-bolt-on.svg) |
+
+## 功能
+
+- **勾选即注入**：勾选的提示词按列表顺序、空行分隔写进系统提示词；一条不勾就什么都不注入
+- **每条可设作用域**：全部 / 仅主 agent / 仅子 agent（点行尾圆片切换；teammate 会话也算子 agent）
+- **管理**：新增、修改（内置「火力全开」行也能改）、单条删除、一键全清自建条目
+- **重启不丢**：状态保存在 `~/.dsh/prompt-picker.json`
+- **本地调试日志**：每次注入在 `~/.dsh/prompt-picker-debug.log` 记一行极简 JSON（作用域判定与注入名）；需要完整上下文转储时在配置里加 `debugContext: true`。纯本地，超 256KiB 自动清零
+
+## 安装
+
+- **插件市场**：DSH 插件市场（dshmarket）搜 `dsh-prompt-picker`，一键安装
+- **手动**：插件页 → 添加插件 → 贴 `https://github.com/solopole/dsh-prompt-picker`
+- **CLI**：`dsh plugin --profile <名字> add dsh-prompt-picker`
+
+## 自定义内置文案（可选）
+
+内置「火力全开」可以在菜单里直接改；也可以在 profile 的 `cordis.patch.yml` 里改它的默认值：
+
+```yaml
+- id: prompt-picker
+  config:
+    instructions: '你的默认文案'
+```