dsh-ronge-adaptive-skill-archive 5.1.0 → 5.2.0

package/README.md

@@ -31,7 +31,7 @@
   <sub>会话右侧的「技能」抽屉：推荐 / 组队计划 / 经验 / 安全与更新，都在一个面板里。</sub>
 </p>
 
-> **v5.1.0 发布说明**：本 README 是当前发布稿。三大新能力 `plan → compose → draft`（任务拆解 / 技能组队 / 按缺口造技能）与 12 领域包为本次发布新增；每条声明的证据、实测状态与未验证项统一记录在 **[docs/claims.md](docs/claims.md)**。benchmark 数字见 **[docs/benchmark.md](docs/benchmark.md)**（2026-10-30 快照）。
+> **v5.2.0 发布说明**：本 README 是当前发布稿。三大新能力 `plan → compose → draft`（任务拆解 / 技能组队 / 按缺口造技能）与 12 领域包为本次发布新增；每条声明的证据、实测状态与未验证项统一记录在 **[docs/claims.md](docs/claims.md)**。benchmark 数字见 **[docs/benchmark.md](docs/benchmark.md)**（2026-10-30 快照）。
 
 ## 为什么需要 v5
 
@@ -59,8 +59,8 @@ v5 的驾驶舱把这条链路补全：
 npx dsh-ronge-adaptive-skill-archive
 #    想先体检：npx dsh-ronge-adaptive-skill-archive doctor
 
-# 2) 把打印出的这一行交给任意 DSH 会话里的 Agent 执行（v5.1.0 发布后可用）
-plugin_manager install_bundle target=dsh-ronge-adaptive-skill-archive@5.1.0
+# 2) 把打印出的这一行交给任意 DSH 会话里的 Agent 执行（v5.2.0 发布后可用）
+plugin_manager install_bundle target=dsh-ronge-adaptive-skill-archive@5.2.0
 
 # 3) 刷新页面 → 右上角「技能」→ 右侧抽屉；计划模式 / 沉浸模式切换
 ```
@@ -246,8 +246,8 @@ v5.0.0 在 DSH 里注册三个**只读 / 只出草稿**的工具（面板与 MCP
 | 方式 | 命令 | 适合 |
 |---|---|---|
 | **npx 助手** | `npx dsh-ronge-adaptive-skill-archive`（体检：`npx dsh-ronge-adaptive-skill-archive doctor`） | 第一次用；不装东西，只体检 + 打印安装命令 |
-| **npm** | `plugin_manager install_bundle target=dsh-ronge-adaptive-skill-archive@5.1.0` | v5.1.0 发布到 npm 后可用 |
-| **GitHub tag** | `plugin_manager install_bundle target=git+https://github.com/bugtakue/dsh-ronge-adaptive-skill-archive.git#v5.1.0` | 固定版本、可审源码 |
+| **npm** | `plugin_manager install_bundle target=dsh-ronge-adaptive-skill-archive@5.2.0` | v5.2.0 发布到 npm 后可用 |
+| **GitHub tag** | `plugin_manager install_bundle target=git+https://github.com/bugtakue/dsh-ronge-adaptive-skill-archive.git#v5.2.0` | 固定版本、可审源码 |
 | **本地目录** | `plugin_manager install_bundle target="/absolute/path/to/dsh-ronge-adaptive-skill-archive"` | 开发、改代码、离线 |
 
 > v5.0.0 打 tag / 发布 npm 之前，`@5.0.0` 会 404：请先用本地目录，或安装当时最新的已发布版本。安装后 DSH 需**重启**才会加载新的 Host 模块；浏览器刷新加载 Client。
@@ -356,7 +356,7 @@ MIT。见 [LICENSE](LICENSE)。索引中的技能元数据归原作者，边界
 **Install** (in a DSH session):
 
 ```bash
-plugin_manager install_bundle target=dsh-ronge-adaptive-skill-archive@5.1.0
+plugin_manager install_bundle target=dsh-ronge-adaptive-skill-archive@5.2.0
 # then open any session → 「技能」 → switch Plan / Immersive
 ```
 

package/client.js

@@ -282,6 +282,7 @@ window.__ModuleLoader__.load({
       intelInput: '输入',
       intelOutput: '输出',
       intelHandoff: '交接物',
+      intelAcceptance: '验收标准',
       intelFallback: '失败备选',
       intelMissing: '缺失能力',
       intelDraftNeeded: '需生成草稿',
@@ -575,6 +576,7 @@ window.__ModuleLoader__.load({
       intelInput: 'Input',
       intelOutput: 'Output',
       intelHandoff: 'Handoff',
+      intelAcceptance: 'Acceptance',
       intelFallback: 'Fallback',
       intelMissing: 'Missing capabilities',
       intelDraftNeeded: 'Draft needed',
@@ -2236,6 +2238,7 @@ window.__ModuleLoader__.load({
             if (stage.output) lines.push('   ' + t('intelOutput') + ': ' + textValue(stage.output))
             if (stage.handoff) lines.push('   ' + t('intelHandoff') + ': ' + textValue(stage.handoff))
             if (stage.fallback) lines.push('   ' + t('intelFallback') + ': ' + textValue(stage.fallback))
+            if (stage.acceptance) lines.push('   ' + t('intelAcceptance') + ': ' + textValue(stage.acceptance))
           })
         }
         const missing = Array.isArray(plan.missing) ? plan.missing.filter(Boolean) : []
@@ -2347,6 +2350,7 @@ window.__ModuleLoader__.load({
               name: String(intelDraft.name),
               description: String(intelDraft.description || ''),
               whenToUse: String(intelDraft.whenToUse || ''),
+              content: typeof intelDraft.content === 'string' ? intelDraft.content : '',
             }),
           })
           const payload = await response.json().catch(() => ({}))
@@ -4207,6 +4211,14 @@ window.__ModuleLoader__.load({
                           h('span', null, textValue(stage.fallback)),
                         )
                       : null,
+                    stage.acceptance
+                      ? h(
+                          'div',
+                          { className: 'sf-intel-line' },
+                          h('span', { className: 'sf-intel-k' }, t('intelAcceptance')),
+                          h('span', null, textValue(stage.acceptance)),
+                        )
+                      : null,
                   ),
                 ),
               )

package/docs/dsh-compatibility.md

@@ -7,10 +7,10 @@
 
 ```bash
 # npm（推荐）
-plugin_manager install_bundle target=dsh-ronge-adaptive-skill-archive@5.1.0
+plugin_manager install_bundle target=dsh-ronge-adaptive-skill-archive@5.2.0
 
 # GitHub tag（固定版本、可审源码）
-plugin_manager install_bundle target=git+https://github.com/bugtakue/dsh-ronge-adaptive-skill-archive.git#v5.1.0
+plugin_manager install_bundle target=git+https://github.com/bugtakue/dsh-ronge-adaptive-skill-archive.git#v5.2.0
 
 # 本地目录（开发）
 plugin_manager install_bundle target=/absolute/path/to/dsh-ronge-adaptive-skill-archive
@@ -42,7 +42,7 @@ plugin_manager install_bundle target=/absolute/path/to/dsh-ronge-adaptive-skill-
 - Host E2E：20/20（真实 loopback HTTP + raw.githubusercontent.com）
 - UI E2E：27/27
 - `npm run check:dsh`：manifest / factory id / slots / routes / 数据迁移 / market index 全部通过
-- npm registry 安装 v3.0.0 历史验证；v5.1.0 发布后以 registry 为准；市场索引 format 1 托管在 `https://bugtakue.github.io/dsh-ronge-adaptive-skill-archive/plugin-market.json`
+- npm registry 安装 v3.0.0 历史验证；v5.2.0 发布后以 registry 为准；市场索引 format 1 托管在 `https://bugtakue.github.io/dsh-ronge-adaptive-skill-archive/plugin-market.json`
 
 ## 已知边界
 

package/index.js

@@ -3184,18 +3184,31 @@ function createSkill(payload) {
   if (description.length > 500) throw new HttpError(400, 'description must be at most 500 characters')
   if (whenToUse.length > 500) throw new HttpError(400, 'whenToUse must be at most 500 characters')
 
-  const dir = path.join(dshHome(), 'skills', name)
-  const file = path.join(dir, 'SKILL.md')
-  if (fs.existsSync(dir)) throw new HttpError(409, `skill "${name}" already exists`)
-  fs.mkdirSync(dir, { recursive: true })
-  const frontmatter = [
-    '---',
-    `name: ${name}`,
-    `description: ${JSON.stringify(description)}`,
-  ]
-  if (whenToUse) frontmatter.push(`whenToUse: ${JSON.stringify(whenToUse)}`)
-  frontmatter.push('---', '')
-  const body = `${frontmatter.join('\n')}
+  const suppliedContent = typeof payload?.content === 'string' ? payload.content.trim() : ''
+  let content = ''
+  let security = null
+  if (suppliedContent) {
+    if (Buffer.byteLength(suppliedContent) > 128 * 1024) throw new HttpError(413, 'generated SKILL.md is too large')
+    const front = parseFrontmatter(suppliedContent)
+    if (!suppliedContent.startsWith('---') || !front || typeof front !== 'object') {
+      throw new HttpError(400, 'content must start with SKILL.md frontmatter')
+    }
+    if (String(front.name || '') !== name) throw new HttpError(400, 'content frontmatter name must match name')
+    if (!String(front.description || '').trim()) throw new HttpError(400, 'content frontmatter description is required')
+    security = scanSkillText(suppliedContent)
+    if (security.level === 'high') {
+      throw new HttpError(422, 'high-risk generated SKILL.md blocked: ' + security.findings.map((finding) => finding.rule).join(', '))
+    }
+    content = suppliedContent.endsWith('\n') ? suppliedContent : suppliedContent + '\n'
+  } else {
+    const frontmatter = [
+      '---',
+      `name: ${name}`,
+      `description: ${JSON.stringify(description)}`,
+    ]
+    if (whenToUse) frontmatter.push(`whenToUse: ${JSON.stringify(whenToUse)}`)
+    frontmatter.push('---', '')
+    content = `${frontmatter.join('\n')}
 # ${name}
 
 ## When to use
@@ -3208,10 +3221,18 @@ ${whenToUse || description}
 2. Follow the instructions in this file.
 3. Report the result with concrete evidence.
 `
-  atomicWriteFile(file, body, { mode: 0o644 })
-  return { ok: true, name, path: file }
+  }
+
+  const dir = path.join(dshHome(), 'skills', name)
+  const file = path.join(dir, 'SKILL.md')
+  if (fs.existsSync(dir)) throw new HttpError(409, `skill "${name}" already exists`)
+  fs.mkdirSync(dir, { recursive: true, mode: 0o755 })
+  atomicWriteFile(file, content, { mode: 0o644 })
+  appendAudit('create', { name, sha256: sha256(content), source: suppliedContent ? 'generated-draft' : 'template' })
+  return { ok: true, name, path: file, bytes: Buffer.byteLength(content), generated: Boolean(suppliedContent), security }
 }
 
+
 let intelligenceModule = null
 let capabilityIndexCache = null
 
@@ -3254,8 +3275,6 @@ async function resolveInstalledSkills(ctx, cwd) {
   } catch {
     registry = []
   }
-  // The registry can be agent-scoped/partial; the filesystem scan is what makes
-  // the panel complete. Merge both, with registry entries taking precedence.
   const merged = new Map()
   for (const skill of scanSkills(cwd)) {
     if (skill && skill.name) merged.set(skill.name, { ...skill, source: skill.source || 'scan' })
@@ -3286,7 +3305,6 @@ async function resolveInstalledSkills(ctx, cwd) {
   return { skills, source, count: skills.length }
 }
 
-
 function planRequestCwd(ctx, payload) {
   if (payload && payload.cwd) return String(payload.cwd)
   if (payload && payload.sessionId) {

package/lib/intelligence/compose.js

@@ -81,6 +81,30 @@ const INTENT_INPUT = {
   general: '任务上下文',
 }
 
+const INTENT_ACCEPTANCE = {
+  'contract-review': '条款逐条核对完成；金额/日期/主体无遗漏；风险项有出处。',
+  'document-create': '文档结构完整；关键信息齐全；格式符合要求。',
+  'document-edit': '修改点有对照；原文未误删；差异可回滚。',
+  'document-convert': '目标格式可打开；内容无丢失；版式检查通过。',
+  'layout-review': '版式问题有截图/位置；修复建议可执行。',
+  'video-create': '成片时长/画幅正确；字幕与音频同步；关键镜头完整。',
+  'video-edit': '剪辑点符合要求；无黑帧/爆音；输出可播放。',
+  'data-analysis': '口径明确；数字可复算；图表与结论一致。',
+  research: '关键结论有来源；不确定项标注；覆盖范围说明。',
+  marketing: '目标受众/渠道明确；文案可发布；事实与合规检查。',
+  design: '交付物符合品牌/尺寸；图层/资源可编辑；导出检查。',
+  'software-build': '测试通过；关键路径可运行；变更说明完整。',
+  'plugin-development': '插件可安装/启用；slot/工具验证；可卸载回滚。',
+  'security-review': '风险有复现/证据；修复建议可执行；残余风险标注。',
+  teaching: '目标/练习匹配；示例可复现；难点有解释。',
+  'business-plan': '假设与数据来源明确；测算可复核；风险与备选方案。',
+  planning: '任务有负责人/依赖/验收；关键路径明确。',
+  automation: '流程可重跑；失败可恢复；输出可验证。',
+  'meeting-notes': '决议/行动项/负责人齐全；原文可追溯。',
+  'ai-build': '工具/提示词可复现；有评测与失败处理；权限边界明确。',
+  general: '交付物可验收；不确定项已标注。',
+}
+
 const ALLOWED_PATTERNS = new Set(PATTERNS)
 
 function capabilityDomain(capabilityId) {
@@ -439,6 +463,7 @@ function assignSkillsToStages({ selected, decomposition, covered, required, patt
           ? '与其它阶段独立，可并行执行；汇总后统一交付'
           : '上一阶段完成后进入下一阶段',
       fallback: '若无可用技能：先起草技能或人工完成',
+      acceptance: INTENT_ACCEPTANCE[intentId] || INTENT_ACCEPTANCE.general,
     })
   }
 
@@ -455,6 +480,7 @@ function assignSkillsToStages({ selected, decomposition, covered, required, patt
       output: INTENT_OUTPUT[decomposition.primaryIntent] || INTENT_OUTPUT.general,
       handoff: '输出任务结果（意图与技能未完全对齐，执行前建议确认）',
       fallback: '若无可用技能：缩小范围或人工完成',
+      acceptance: INTENT_ACCEPTANCE[decomposition.primaryIntent] || INTENT_ACCEPTANCE.general,
     })
     for (const candidate of selected) assigned.add(candidate.name)
   }
@@ -545,6 +571,7 @@ function buildReviewStage({ selected, decomposition, pattern, usedNames = new Se
     output: INTENT_OUTPUT[decomposition.primaryIntent] || '复核意见',
     handoff: reviewSkills.length ? '复核通过后交付；不通过则回退上一步' : '由用户/Agent 人工复核后交付；不通过则回退上一步',
     fallback: '无法复核时：先交付草稿并明确标注未复核项',
+    acceptance: '复核项逐条通过；未通过项有回退/修正记录。',
     gate: true,
   }
 }
@@ -637,6 +664,7 @@ export function composeSkillPlan(input = {}) {
           output: '待确认的能力缺口与补位方案',
           handoff: '用户确认/安装缺失技能后再执行',
           fallback: '缩小任务范围或改为纯人工流程',
+          acceptance: '缺口清单明确；用户确认安装/取舍后再进入执行。',
           gate: true,
         },
       ])

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-ronge-adaptive-skill-archive",
-  "version": "5.1.0",
+  "version": "5.2.0",
   "description": "DSH-native skill intelligence cockpit: task decomposition, cross-domain multi-skill composition, skill authoring, local recommendations and safety scans for DeepSeek Harness.",
   "type": "module",
   "repository": {