dsh-subagent-profile 0.3.2 → 0.3.4

package/package.json

@@ -1,83 +1,82 @@
-{
-  "name": "dsh-subagent-profile",
-  "version": "0.3.2",
-  "description": "Dispatch one-shot subtasks to derived subagents with per-task overrides (preset/model/provider/reasoningEffort/persona/tool whitelist), a runtime-derived cost guard, a subagent-profiles service, observability metadata, and a web-GUI settings page plus a dispatch tool-call card.",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/muzyLink/dsh-subagent-profile.git"
-  },
-  "type": "module",
-  "main": "index.mjs",
-  "exports": {
-    ".": "./index.mjs",
-    "./client": "./lib/client.js",
-    "./package.json": "./package.json"
-  },
-  "files": [
-    "index.mjs",
-    "lib",
-    "cordis.patch.yml",
-    "presets",
-    "docs",
-    "README.md",
-    "README.zh.md"
-  ],
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "inject": [],
-      "platform": "web"
-    }
-  },
-  "peerDependencies": {
-    "@deepseek-ai/dsh-agent": ">=0.1.0-rc.6 <0.2.0",
-    "@deepseek-ai/dsh-llm": ">=0.1.0-rc.6 <0.2.0",
-    "@deepseek-ai/dsh-subagent": ">=0.1.0-rc.6 <0.2.0",
-    "@deepseek-ai/dsh-tools": ">=0.1.0-rc.6 <0.2.0"
-  },
-  "peerDependenciesMeta": {
-    "@deepseek-ai/dsh-agent": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-subagent": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-llm": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-tools": {
-      "optional": true
-    }
-  },
-  "devDependencies": {
-    "@deepseek-ai/dsh-agent": "0.1.0-rc.8",
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.8",
-    "@deepseek-ai/dsh-subagent": "0.1.0-rc.8",
-    "@deepseek-ai/dsh-tools": "0.1.0-rc.8",
-    "@eslint/js": "^10.0.1",
-    "eslint": "^10.9.0"
-  },
-  "engines": {
-    "node": "^22.19.0 || >=24"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "keywords": [
-    "deepseek-harness",
-    "dsh",
-    "subagent",
-    "dispatch",
-    "profiles"
-  ],
-  "license": "MIT",
-  "scripts": {
-    "release": "node scripts/release.mjs",
-    "test": "node --test \"test/**/*.test.mjs\"",
-    "test:bare": "node --test test/pure.test.mjs test/input-schema.test.mjs test/catalog-integrity.test.mjs",
-    "preflight": "node scripts/preflight.mjs",
-    "leak-scan": "node scripts/leak-scan.mjs"
-  }
-}
+{
+  "name": "dsh-subagent-profile",
+  "version": "0.3.4",
+  "description": "DeepSeek Harness 子 Agent 派发插件：按任务为子代理选模型、推理强度与工具范围，常用组合存成命名方案随时复用；内置安全检查、成本估算与节省分析、完整决策台账。",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/muzyLink/dsh-subagent-profile.git"
+  },
+  "type": "module",
+  "main": "index.mjs",
+  "scripts": {
+    "test": "node --test \"test/**/*.test.mjs\"",
+    "test:bare": "node --test test/pure.test.mjs test/input-schema.test.mjs test/catalog-integrity.test.mjs",
+    "preflight": "node scripts/preflight.mjs",
+    "leak-scan": "node scripts/leak-scan.mjs"
+  },
+  "exports": {
+    ".": "./index.mjs",
+    "./client": "./lib/client.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "index.mjs",
+    "lib",
+    "cordis.patch.yml",
+    "presets",
+    "docs/screenshots",
+    "README.md",
+    "README.zh.md"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [],
+      "platform": "web"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/dsh-agent": ">=0.1.0-rc.6 <0.2.0",
+    "@deepseek-ai/dsh-llm": ">=0.1.0-rc.6 <0.2.0",
+    "@deepseek-ai/dsh-subagent": ">=0.1.0-rc.6 <0.2.0",
+    "@deepseek-ai/dsh-tools": ">=0.1.0-rc.6 <0.2.0"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh-agent": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-subagent": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-llm": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tools": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@deepseek-ai/dsh-agent": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-llm": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-subagent": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-tools": "0.1.0-rc.8",
+    "@eslint/js": "^10.0.1",
+    "eslint": "^10.9.0"
+  },
+  "engines": {
+    "node": "^22.19.0 || >=24"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "deepseek-harness",
+    "dsh",
+    "subagent",
+    "dispatch",
+    "profiles"
+  ],
+  "license": "MIT"
+}

package/presets/orchestrator/agent.cordis.yml

@@ -1,36 +1,30 @@
-# The `orchestrator` agent preset: the main-agent coordinator mode.
+# `orchestrator` 编排者预设：主 Agent 协调模式。
 #
-# A full coding agent — identical to the shipped `standard` preset row-for-row —
-# whose persona turns it into the MAIN orchestrator: decompose work, delegate
-# each subtask to the right subagent via the host-registered `dispatch` tool
-# (per-scenario profile / preset / model / reasoning-effort) plus the ordinary
-# `subagent` / `subagent_fork` / `workflow` / `ralph` delegation tools, then
-# integrate the results. The `dispatch` tool itself is registered by the
-# dsh-subagent-profile host row, so it is already visible to every preset
-# including this one; this preset only adds the delegation tools below.
+# 与官方 `standard` 预设逐行一致，仅 persona 段改写为「主协调 Agent」身份：
+# 拆解任务、经宿主注册的 `dispatch` 工具（按场景选方案/预设/模型/推理强度）
+# 加普通 `subagent` / `subagent_fork` / `workflow` / `ralph` 委派工具分派子任务，
+# 再集成结果。`dispatch` 工具本身由 dsh-subagent-profile 宿主行注册，对所有
+# 预设可见；本预设只补下面的委派工具。
 #
-# Adapted from the builtin `standard` preset (the persona section is the only
-# change). This file is an AGENT-PLANE composition. The roster mounts it ONCE
-# under a standing scope; every session naming it joins by scope parentage, so
-# the tools and prompt sections registered here cover each joined agent while a
-# session's own state stays keyed per Session/Agent inside the plugins. The
-# host composition (`base.cordis.yml` + `web.cordis.yml`) keeps everything a
-# preset must not own: the registries themselves, the sandbox and approval
-# stack, persistence, and the model route.
+# 改编自官方 `standard` 预设（仅 persona 段不同）；原始 DeepSeek 版权与
+# MIT 许可声明见开源仓库。
 #
-# A service row here MUST sit inside a group carrying an `isolate` realm.
-# Without one it publishes into the root realm, where it is process-global —
-# another preset publishing the same name collides, and a host reader would
-# resolve one preset's instance for every session; `dsh-agent-presets` rejects
-# that at mount. `true` means an entry-local realm: this standing mount's own
-# private instance, apart from every other preset's. (A shared label does NOT
-# pool instances — `provide()` throws on the second registration under the
-# same realm symbol; labels join REALMS, and are not what this file needs.)
+# 本文件是 agent 平面组成：由 roster 挂载一次到 standing scope，引用它的会话
+# 经 scope 父系加入，本文件注册的工具与 prompt 段覆盖每个加入的 agent；会话
+# 自身状态仍按 Session/Agent 键控在插件内。宿主组成（base.cordis.yml +
+# web.cordis.yml）保留预设不得拥有的东西：注册表、沙箱与审批栈、持久化、
+# 模型路由。
+#
+# 服务行必须放在带 `isolate` realm 的 group 内：否则发布进根 realm 成为
+# 进程全局单例——另一预设发布同名会冲突，宿主读者会对每个会话解析同一实例，
+# `dsh-agent-presets` 挂载时拒绝。`true` 表示条目本地 realm：本 standing mount
+# 私有的实例。共享 label 不会合并实例（同一 realm 符号下二次 provide 抛错），
+# label 只连接 REALMS，本文件不需要。
 
 # ── identity ────────────────────────────────────────────────────────────────
 
-# The orchestrator persona, shadowing the deployment default for this agent.
-# `{{model}}` and `{{cwd}}` resolve from the agent's own route and workspace.
+# 编排者 persona，遮蔽本 agent 的部署默认人设。
+# `{{model}}` 与 `{{cwd}}` 从 agent 自身的路由与工作目录解析。
 - id: persona
   name: '@deepseek-ai/dsh-persona'
   config:
@@ -41,7 +35,7 @@
 
       prompt 必须自包含：子 Agent 看不到你的对话，写全背景、目标、期望产出、验收标准与禁止事项。
 
-      边界：子 Agent 能力 ⊆ 你，审批恒为「永不」；子 Agent 失败或超出权限时自己接手重做，或用 ask_user_question 向用户澄清。
+      边界：子 Agent 能力 ⊆ 你，派发不豁免父会话的审批要求；子 Agent 失败或超出权限时自己接手重做，或用 ask_user_question 向用户澄清。
 
 - id: agent-instructions
   name: '@deepseek-ai/dsh-agent-instructions'
@@ -50,13 +44,11 @@
 
 # ── shell ───────────────────────────────────────────────────────────────────
 
-# `shell-env` stays in the HOST composition: `apps/cli/src/web.ts` injects it to
-# publish `DSH_WEB_URL`/`DSH_WEB_MODE`, and a host row that injects a service is
-# the criterion for host-plane ownership — injection resolves before any session
-# exists, so there is no agent to key by. Behind a preset realm those variables
-# never reached the model's shell at all. Both shell tools consume the host
-# registry from here; their executors (`bash-sandbox`/`pwsh-sandbox`) are
-# host-plane too.
+# `shell-env` 留在宿主组成：apps/cli/src/web.ts 注入它以发布
+# DSH_WEB_URL/DSH_WEB_MODE，且宿主行注入服务即宿主平面归属标准——注入在
+# 会话存在前解析，没有可归属的 agent；放预设 realm 里这些变量到不了模型
+# 的 shell。两个 shell 工具在此消费宿主注册表；其执行器
+# （bash-sandbox/pwsh-sandbox）也在宿主平面。
 - id: tool-bash
   name: '@deepseek-ai/dsh-tool-bash'
   disabled: !!js process.platform === 'win32'
@@ -67,8 +59,7 @@
 
 # ── filesystem ──────────────────────────────────────────────────────────────
 
-# Both register into the host `tools` registry and provide nothing, so
-# they need no realm. The `fs` service and its policy stay in the host.
+# 两者都注册进宿主 tools 注册表且不提供服务，无需 realm；fs 服务与其策略留在宿主。
 - id: tool-fs
   name: '@deepseek-ai/dsh-tool-fs'
 
@@ -79,23 +70,18 @@
 
 # ── background jobs ────────────────────────────────────────────────────────
 
-# Only the model-facing controls. The task REGISTRY stays on the host plane:
-# its producers sit outside any realm this file could put it in — `tool-bash`
-# above resolves it with `ctx.get`, and an entry-local realm here is invisible
-# to every sibling row, so `run_in_background` would answer "background jobs
-# unavailable" while these controls sat in the catalog. The registry is keyed by
-# owning agent anyway, so one host instance serves every session. What a preset
-# chooses is whether its agent can collect and stop background work at all.
+# 只放模型可见的控制。任务注册表留在宿主平面：其生产者在本文件任何 realm
+# 之外（上面 tool-bash 用 ctx.get 解析它，条目本地 realm 对兄弟行不可见），
+# 否则 run_in_background 会答「后台任务不可用」。注册表本就按所属 agent
+# 键控，一个宿主实例服务所有会话；预设只决定其 agent 能否收集/停止后台任务。
 - id: tool-jobs
   name: '@deepseek-ai/dsh-tool-jobs'
 
 # ── skills ──────────────────────────────────────────────────────────────────
 
-# The skill REGISTRY lives in the host composition and is layered per scope:
-# these rows register into THIS preset's layer of it, so they need no realm.
-# `skill-filesystem` contributes local-root discovery for agents on this preset, and
-# `tool-skill` gives them the catalog and loader; the merged catalog also
-# carries whatever the deployment registered globally (repository plugins).
+# skill 注册表在宿主组成中按 scope 分层；以下行注册进本预设的那一层，
+# 无需 realm。`skill-filesystem` 为本预设的 agent 提供本地根发现，
+# `tool-skill` 提供目录与加载器；合并后的目录也包含部署全局注册的内容。
 - id: skill-filesystem
   name: '@deepseek-ai/dsh-skill-filesystem'
 
@@ -104,19 +90,16 @@
 
 # ── goals ───────────────────────────────────────────────────────────────────
 
-# Only the model-facing tool. The goal SERVICE, its session driver, and the
-# `/goal` command stay on the host plane: the Gateway serves the goal domain as
-# Remote endpoints whose receiver comes from a generated descriptor, so it
-# resolves `goals` on the host and an entry-local realm here would hide it. The
-# registry is keyed by session anyway, so one host instance serves every
-# session. What a preset chooses is whether its agent can call the goal tool.
+# 只放模型可见的工具。goal 服务、会话驱动与 /goal 命令留在宿主平面：
+# Gateway 以 Remote endpoint 服务 goal 域，接收方来自生成描述符，条目本地
+# realm 会隐藏它。注册表本就按会话键控，一个宿主实例服务所有会话；预设
+# 只决定其 agent 能否调用 goal 工具。
 - id: tool-goal
   name: '@deepseek-ai/dsh-tool-goal'
 
 # ── plan mode ───────────────────────────────────────────────────────────────
 
-# Plan state is per-agent by nature, so an entry-local realm is not a
-# workaround here — it is the correct lifetime.
+# plan 状态按 agent 天然独立，条目本地 realm 正是正确的生命周期。
 - id: planning
   name: cordis:group
   group: true
@@ -141,15 +124,13 @@
 
 # ── compaction ──────────────────────────────────────────────────────────────
 
-# `compaction-basic` reads `toolResultPrune` through `ctx.get`, so the pruner must
-# share this realm rather than sit outside it.
+# `compaction-basic` 经 ctx.get 读取 toolResultPrune，pruner 必须与本 realm
+# 共享而非留在外面。
 #
-# `tokenMeter` is deliberately NOT in this realm: the meter stays on the HOST
-# plane, and the rows here resolve that one instance. It takes no configuration,
-# keys every fold by Session, and owns the context-meter projection units the
-# browser reads for every session — behind a realm those units would come and go
-# with whichever presets happen to be mounted. What a preset chooses is whether
-# its agent compacts at all, which is `compaction-basic` below.
+# `tokenMeter` 刻意不在本 realm：meter 留在宿主平面，此处各行解析那个单例。
+# 它无配置、按 Session 键控每次 fold，且持有浏览器为每个会话读取的上下文
+# 计量单位——进 realm 会随挂载的预设增减。预设只决定其 agent 是否压缩，
+# 即下面的 compaction-basic。
 - id: compaction
   name: cordis:group
   group: true
@@ -172,24 +153,18 @@
 
 # ── delegation and workflows ────────────────────────────────────────────────
 
-# The `subagents` registry and its spawn/fork backends live in the HOST
-# composition: the registry is a process singleton whose cross-session queries
-# the api-proxy serves to the browser, and a provider name may only be
-# registered once. This preset contributes the delegation TOOLS, which resolve
-# that host registry. The `dispatch` tool (and the `profile` provider it
-# drives) are registered by the dsh-subagent-profile host row, so they are
-# host-global and already visible here; this group adds the ordinary
-# subagent/workflow tools so the orchestrator can choose the cheapest fit.
+# `subagents` 注册表及其 spawn/fork 后端在宿主组成中：注册表是进程单例，
+# api-proxy 供浏览器跨会话查询，provider 名只能注册一次。本预设贡献
+# delegation 工具，解析该宿主注册表。`dispatch` 工具（及其驱动的 profile
+# provider）由 dsh-subagent-profile 宿主行注册，宿主全局可见；本组补普通
+# subagent/workflow 工具，让编排者选最省成本的方式。
 #
-# `workflows` is different — nothing outside an agent reads it — so every row
-# that reaches it shares one entry-local realm here, and a consumer left
-# outside would resolve a host registry this preset does not populate.
+# `workflows` 不同——没有 agent 之外的东西读它——到达它的行共享本条目本地
+# realm，留在外面的消费者会解析到本预设未填充的宿主注册表。
 #
-# `tool-subagent-report` is host-plane for the same reason as the registry,
-# not because a preset may not want it: it registers a CONTINUABLE SETUP on
-# that singleton rather than a tool this agent calls, and the setup list is
-# not scope-aware — one copy per mounted preset means every child gets
-# `report` registered once per live session, which throws on the second.
+# `tool-subagent-report` 与注册表同理在宿主平面：它在那个单例上注册
+# continuable setup 而非本 agent 调用的工具，且 setup 列表不感知 scope——
+# 每个挂载的预设各注册一份，每个子 agent 都会重复注册 `report`，第二次抛错。
 - id: delegation
   name: cordis:group
   group: true
@@ -216,10 +191,8 @@
         toolName: subagent_fork
         backgroundMode: continuable
 
-    # Production dsh does not install these optional providers. Install the
-    # matching Bundle in this Profile and restart the Host, then copy this
-    # preset and remove `disabled` from the matching tool row. Host availability
-    # alone grants no tool.
+    # 生产版 dsh 不安装这些可选 provider。在本 Profile 安装对应 Bundle 并
+    # 重启宿主，再复制本预设、移除对应行的 disabled。宿主可用性本身不授予工具。
     - id: tool-subagent-codex
       name: '@deepseek-ai/dsh-tool-subagent'
       disabled: true
@@ -262,8 +235,7 @@
   config:
     allowParallelInProgress: true
 
-# The `web` service and its search provider stay in the host composition; only
-# the model-facing tool is per-session.
+# `web` 服务及其搜索 provider 留在宿主组成；只有模型可见的工具按会话。
 - id: tool-web
   name: '@deepseek-ai/dsh-tool-web'
   config:

package/presets/orchestrator/NOTICE

@@ -1,3 +0,0 @@
-agent.cordis.yml 改编自 DeepSeek Harness 内置 standard preset（MIT）。
-仅 persona 段改写为「主协调 Agent」身份；其余行与原 standard 预设一致。
-原始 DeepSeek 版权与 MIT 许可声明见开源仓库。