psyclaw 0.27.22 → 0.28.0

package/README.md

@@ -2,7 +2,9 @@
 
 PsyClaw 是面向社会科学研究的智能体工作台。它把研究项目、证据来源、Claim-Evidence 账本、完整性门禁、可恢复工作流和本地面板接到内置运行时上；只有无法由证据和通行方法消解、且会实质改变研究设计或解释的分歧才交由研究者取舍。它不替代统计软件，也不会把未经核验的引用、结果或审稿意见写成事实。
 
-当前版本：`0.27.22`。正式命令、用户配置目录和后续发布统一使用 `psyclaw`。
+PsyClaw 自有代码使用 MIT 许可证；随 npm 包内置的 Academic Research Skills 位于 `vendor/ars`，保持上游署名并单独遵循 CC BY-NC 4.0，仅限非商业用途。
+
+当前版本：`0.28.0`。正式命令、用户配置目录和后续发布统一使用 `psyclaw`。
 
 ## 发布流程
 
@@ -19,22 +21,22 @@ RELEASE_MESSAGE="release: describe the change" pnpm release:push
 需要 Node.js `>=22.19.0`。官方 npm 源：
 
 ```powershell
-npm install -g psyclaw@0.27.22
+npm install -g psyclaw@0.28.0
 ```
 
 如果本机 npm 配置把 registry 误写成带有 `~/` 的地址，请显式指定官方源：
 
 ```bash
-npm install -g psyclaw@0.27.22 --registry=https://registry.npmjs.org/
+npm install -g psyclaw@0.28.0 --registry=https://registry.npmjs.org/
 ```
 
 中国大陆网络较慢或无法访问官方源时：
 
 ```powershell
-npm install -g psyclaw@0.27.22 --registry=https://registry.npmmirror.com
+npm install -g psyclaw@0.28.0 --registry=https://registry.npmmirror.com
 ```
 
-PsyClaw 启动时会确保 `ripgrep` 和 `fd` 可用。检测到 `HTTP_PROXY`、`HTTPS_PROXY` 或 `ALL_PROXY` 时，通过代理访问 GitHub 官方 API 与 Release；检测到国内 npm registry 时，版本查询和压缩包统一通过国内 GitHub 镜像，并在镜像网络失败或返回错误页面时自动切换备用镜像。可用 `PSYCLAW_GITHUB_MIRROR=https://your-mirror.example/` 指定自建 HTTPS 镜像。
+PsyClaw 的 npm 发布包直接携带 Windows x64/arm64 版 `ripgrep` 和 `fd`，Windows 启动时直接使用包内可执行文件，不再联网下载。其他平台缺少这两个工具时仍由锁定的 Pi 原生工具管理器处理：代理环境走 GitHub 官方 API 与 Release，国内 npm registry 环境统一走国内镜像。
 
 确认命令入口：
 
@@ -87,7 +89,10 @@ psyclaw brief
 | 管理启动横幅宠物 | `/pet status`、`/pet on`、`/pet off`（默认关闭） |
 | 安装本地 Skill | `/skill install <本地目录>` |
 | 管理或安装 Skill | `/skill` 或 `/skill install <本地目录>` |
+| 创建项目能力 | `/create-skill`、`/create-hook`、`/create-rule`、`/create-subagent`（均先预览并确认） |
+| 运行自定义只读角色 | `/agents --agent <id> <task>` 或 `/agents --agents <id,...> <task>`（最多四个隔离 worker） |
 | 调用已加载 Skill | `/skill:<name>` |
+| 使用 PsyClaw ARS | `/ars doctor`，然后 `/ars full <task>` 或 `/ars start` |
 | 管理 Plugin | `/plugin`；终端使用 `psyclaw plugin install|remove|list` |
 | 调用已配置 MCP | 模型通过 `psyclaw_mcp` 自动发现并调用 `.psyclaw/mcp/*.json` 中启用的服务器 |
 
@@ -155,6 +160,7 @@ node -e 'const fs=require("node:fs"),os=require("node:os"),path=require("node:pa
 - [项目范围与里程碑](docs/开工纪要.md)
 - [架构蓝图](docs/架构蓝图.md)
 - [评测框架](docs/评测框架.md)
+- [PsyClaw ARS 模式与保护边界](docs/PsyClaw-ARS模式.md)
 - [文档与交付物规范](docs/文档规范.md)
 
 ## 边界

package/dist/apps/panel/index.html

@@ -65,8 +65,8 @@ function selectTree(button){document.querySelectorAll(".tree-item").forEach(item
 async function openFile(path,button){selectTree(button);$("viewer-path").textContent=path;$("viewer-kind").textContent="读取中";$("viewer-body").className="viewer-body empty";$("viewer-body").textContent="读取中...";try{const file=await json(`/api/project-file?path=${encodeURIComponent(path)}`);$("viewer-kind").textContent=file.format;$("viewer-body").className="viewer-body";$("viewer-body").innerHTML=file.format==="markdown"?`<article class="markdown">${renderMarkdown(file.content)}</article>`:`<pre class="raw">${esc(file.format==="json"?JSON.stringify(JSON.parse(file.content),null,2):file.content)}</pre>`}catch(error){$("viewer-body").className="viewer-body empty";$("viewer-body").textContent=error.message}}
 async function loadProject(){const files=await json("/api/project-files");state.files=files.files||[];renderTree();const goal=document.querySelector('[data-file="notes/goal.md"]')||document.querySelector("[data-file]");if(goal)goal.click()}
 
-async function loadEcosystem(){try{const[skills,plugins,mcps,enabled]=await Promise.all([json("/api/recommended-skills"),json("/api/recommended-plugins"),json("/api/recommended-mcps"),json("/api/enabled-capabilities")]);const skillSet=new Set((enabled.skills||[]).map(item=>item.id)),mcpSet=new Set((enabled.mcp||[]).map(item=>item.id));state.eco=[...(enabled.coreSkills||[]).map(item=>({...item,kind:"core",description:"PsyClaw 内置 Skill",sourceRef:"bundled",enabled:item.enabled,installed:true})),...(skills.items||[]).map(item=>({...item,kind:"skill",enabled:skillSet.has(item.id),installed:skillSet.has(item.id)})),...(plugins.items||[]).map(item=>({...item,kind:"plugin",enabled:Boolean(item.enabled),installed:Boolean(item.installed)})),...(enabled.localSkills||[]).map(item=>({...item,kind:"local",sourceRef:item.path||"用户目录",installed:true})),...(mcps.items||[]).map(item=>({...item,kind:"mcp",enabled:mcpSet.has(item.id),installed:mcpSet.has(item.id)})),...(skills.externalTools||[]).map(item=>({...item,kind:"external",enabled:false,installed:false}))];renderEcosystem()}catch(error){$("ecosystem-body").innerHTML=`<tr><td colspan="5">${esc(error.message)}</td></tr>`}}
-function renderEcosystem(){const query=$("eco-search").value.trim().toLowerCase(),sourceKind=$("eco-kind").value,status=$("eco-status").value,primaryKind=state.ecoKind;const primaryMatches=item=>primaryKind==="all"||(primaryKind==="skill"?(item.kind==="skill"||item.kind==="core"||item.kind==="local"):item.kind===primaryKind);const items=state.eco.filter(item=>primaryMatches(item)&&(sourceKind==="all"||item.kind===sourceKind)&&(status==="all"||(status==="enabled"?item.enabled:!item.enabled))&&`${item.name} ${item.description||""}`.toLowerCase().includes(query));$("ecosystem-body").innerHTML=items.map(item=>`<tr><td><div class="name">${esc(item.name)}</div><div class="subtle">${esc(item.description||"")}${item.kind==="plugin"&&item.scope?` · ${item.scope==="project"?"当前项目":"所有项目"}${item.filtered?" · 已限定资源范围":""}`:""}</div></td><td>${esc(item.kind==="core"?"Core Skill":item.kind==="local"?"用户 Skill":item.kind.toUpperCase())}</td><td>${/^https?:/.test(item.sourceRef||"")?`<a href="${esc(item.sourceRef)}" target="_blank" rel="noreferrer">来源</a>`:esc(item.sourceRef||"bundled")}</td><td><span class="tag ${item.enabled?"ok":item.configured?"warn":""}">${item.enabled?(item.kind==="plugin"?"已安装":"已启用"):item.kind==="plugin"&&item.configured?"配置存在，文件缺失":item.kind==="external"?"可安装外部工具":"未启用"}</span></td><td>${item.kind==="plugin"&&item.local?"—":item.kind==="plugin"?`<button class="button small ${item.installed?"":"primary"}" onclick="installCapability('plugin','${esc(item.id)}')">${item.installed?"重新安装":"安装"}</button>`:item.kind==="external"?`<button class="button small primary" onclick="installCapability('external','${esc(item.id)}')">安装</button>`:item.enabled?`<button class="button small" onclick="toggleCapability('${item.kind}','${esc(item.id)}',false)">停用</button>`:item.kind==="local"?`<button class="button small primary" onclick="toggleCapability('local','${esc(item.id)}',true)">启用</button>`:`<button class="button small primary" onclick="installCapability('${item.kind}','${esc(item.id)}')">${item.kind==="core"?"启用":"安装"}</button>`}</td></tr>`).join("")||'<tr><td colspan="5">没有匹配项</td></tr>'}
+async function loadEcosystem(){try{const[skills,plugins,mcps,enabled]=await Promise.all([json("/api/recommended-skills"),json("/api/recommended-plugins"),json("/api/recommended-mcps"),json("/api/enabled-capabilities")]);const skillSet=new Set((enabled.skills||[]).map(item=>item.id)),mcpSet=new Set((enabled.mcp||[]).map(item=>item.id));state.eco=[...(enabled.coreSkills||[]).map(item=>({...item,kind:"core",description:item.description||"PsyClaw 内置 Skill",sourceRef:"bundled",enabled:item.enabled,installed:true})),...(skills.items||[]).map(item=>({...item,kind:"skill",enabled:skillSet.has(item.id),installed:skillSet.has(item.id)})),...(plugins.items||[]).map(item=>({...item,kind:"plugin",enabled:Boolean(item.enabled),installed:Boolean(item.installed)})),...(enabled.localSkills||[]).map(item=>({...item,kind:"local",sourceRef:item.path||"用户目录",installed:true})),...(mcps.items||[]).map(item=>({...item,kind:"mcp",enabled:mcpSet.has(item.id),installed:mcpSet.has(item.id)})),...(skills.externalTools||[]).map(item=>({...item,kind:"external",enabled:false,installed:false}))];renderEcosystem()}catch(error){$("ecosystem-body").innerHTML=`<tr><td colspan="5">${esc(error.message)}</td></tr>`}}
+function renderEcosystem(){const query=$("eco-search").value.trim().toLowerCase(),sourceKind=$("eco-kind").value,status=$("eco-status").value,primaryKind=state.ecoKind;const primaryMatches=item=>primaryKind==="all"||(primaryKind==="skill"?(item.kind==="skill"||item.kind==="core"||item.kind==="local"):item.kind===primaryKind);const items=state.eco.filter(item=>primaryMatches(item)&&(sourceKind==="all"||item.kind===sourceKind)&&(status==="all"||(status==="enabled"?item.enabled:!item.enabled))&&`${item.name} ${item.description||""}`.toLowerCase().includes(query));$("ecosystem-body").innerHTML=items.map(item=>`<tr><td><div class="name">${esc(item.name)}</div><div class="subtle">${esc(item.description||"")}${item.kind==="plugin"&&item.scope?` · ${item.scope==="project"?"当前项目":"所有项目"}${item.filtered?" · 已限定资源范围":""}`:""}</div></td><td>${esc(item.kind==="core"?"Core Skill":item.kind==="local"?"用户 Skill":item.kind.toUpperCase())}</td><td>${/^https?:/.test(item.sourceRef||"")?`<a href="${esc(item.sourceRef)}" target="_blank" rel="noreferrer">来源</a>`:esc(item.sourceRef||"bundled")}</td><td><span class="tag ${item.enabled?"ok":item.configured?"warn":""}">${item.locked?"可用":item.enabled?(item.kind==="plugin"?"已安装":"已启用"):item.kind==="plugin"&&item.configured?"配置存在，文件缺失":item.kind==="external"?"可安装外部工具":"未启用"}</span></td><td>${item.locked?"—":item.kind==="plugin"&&item.local?"—":item.kind==="plugin"?`<button class="button small ${item.installed?"":"primary"}" onclick="installCapability('plugin','${esc(item.id)}')">${item.installed?"重新安装":"安装"}</button>`:item.kind==="external"?`<button class="button small primary" onclick="installCapability('external','${esc(item.id)}')">安装</button>`:item.enabled?`<button class="button small" onclick="toggleCapability('${item.kind}','${esc(item.id)}',false)">停用</button>`:item.kind==="local"?`<button class="button small primary" onclick="toggleCapability('local','${esc(item.id)}',true)">启用</button>`:`<button class="button small primary" onclick="installCapability('${item.kind}','${esc(item.id)}')">${item.kind==="core"?"启用":"安装"}</button>`}</td></tr>`).join("")||'<tr><td colspan="5">没有匹配项</td></tr>'}
 async function toggleCapability(kind,id,enabled){await json("/api/recommendation-state",{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({kind:kind==="core"?"core-skill":kind==="skill"?"skills":kind==="local"?"local-skill":kind,id,enabled})});await loadEcosystem()}
 async function installCapability(kind,id){if(kind==="core"){await toggleCapability(kind,id,true);return}const scope=kind==="skill"||kind==="plugin"?(confirm("安装到系统目录？\n确定：所有项目使用；取消：仅当前项目使用。")?"user":"project"):undefined;if(!confirm(`确认安装 ${id}？${kind==="external"?"模型将按官方来源安装并验证。":"安装完成后需要 /reload。"}`))return;const result=await json("/api/install/execute",{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({kind,id,scope,approved:true,actor:"researcher"})});alert(result.message||(result.ok?"安装任务已处理。":"安装未完成"));await loadEcosystem()}
 [$("eco-search"),$("eco-kind"),$("eco-status")].forEach(control=>control.addEventListener("input",renderEcosystem));

package/dist/src/adapters/pi/extension.js

@@ -2,7 +2,10 @@ import { DefaultPackageManager, getAgentDir, SettingsManager } from "@earendil-w
 import { Type } from "typebox";
 import { appendApproval, approvalInputDigest, asProject, assertResearchDecision, bootstrapProject, projectPaths, readApprovals, resolveResearchDecision, runOfflineBrief, runInstitutionalFulltext, runLiteratureReview, runExpertReview, runAnalysisDelegation, runWritingReview, runMetaAnalysis, createStageRunner, exportAcademicDocument, recordCitationUse, runParallelPeerReview, writeHandoff } from "../../index.js";
 import { runPlanWithPi } from "../../orchestration/pi-executor.js";
+import { customPersonaPlan, loadCustomPersonas, parseAgentsRequest } from "../../orchestration/personas.js";
 import { atomicWriteFile } from "../../project/jsonl.js";
+import { applyCreation, previewCreation, runArsMultiAgentBridge } from "../../index.js";
+import { loadUserRules, userRulesPrompt } from "../../rules/user-rules.js";
 import { RunEventLog } from "../../panel/events.js";
 import { readProject } from "../../research/ledger.js";
 import { join } from "node:path";
@@ -15,6 +18,7 @@ import { SkillManagerComponent } from "../../tui/skill-manager.js";
 import { enabledLocalSkillPaths, enabledLocalPromptPaths, readUserSkillState, scanLocalSkills, setLocalSkillEnabled, setLocalSkillsEnabled, skillNamesInPaths, installLocalSkill, userSkillId, } from "../../skills/user-skills.js";
 import { RuntimeMcpRegistry, setUserMcpConfigEnabled, } from "../../integrations/mcp-runtime.js";
 import { SecretInputComponent, ProviderPickerComponent, } from "../../tui/provider-picker.js";
+import { ARS_REPOSITORY_URL, ARS_UPSTREAM_COMMIT, ARS_UPSTREAM_REF, PSYCLAW_ARS_PROFILE_VERSION, detectNatureArsFillers, formatNatureArsFillerStatus, isArsPiActive, isArsPiTurn, psyclawArsPatch, } from "../../ars/profile.js";
 const PARADIGMS = new Set([
     "survey-observational",
     "qualitative-thematic",
@@ -167,6 +171,14 @@ function researchTaskPlan(runId, objective) {
         horizon: { strategy: "hierarchical-plan-act-reflect", maxIterations: 12, reflectionEvery: 1 },
     };
 }
+function creationCommandPrompt(kind, request) {
+    return [
+        `The user explicitly requested /create-${kind}.`,
+        "Call the psyclaw_create tool exactly once. Convert the request into the narrow structured fields accepted by that tool.",
+        "Do not add permissions, shell commands, network access, credential access, gate bypasses, or external publication authority.",
+        `Requested ${kind}: ${request || "Ask the user for the missing name, description, and instructions."}`,
+    ].join("\n");
+}
 function academicGrillRequest(subject, mode) {
     return [
         "先调用 psyclaw_skill 工具加载 PsyClaw 内置的 academic-grill Skill，然后严格遵循该 Skill 对我的学术研究进行追问。",
@@ -255,6 +267,10 @@ function parseRunArgs(args) {
         mode: auto ? "auto" : "human",
     };
 }
+function contextProjectTrusted(ctx) {
+    const candidate = ctx;
+    return typeof candidate.isProjectTrusted === "function" && candidate.isProjectTrusted();
+}
 function toolApprovalSummary(toolName, input) {
     const record = input && typeof input === "object" && !Array.isArray(input) ? input : {};
     const target = [record.path, record.file_path, record.command, record.action, record.server, record.tool]
@@ -267,16 +283,6 @@ function toolNeedsApproval(toolName, input) {
     const action = input && typeof input === "object" && !Array.isArray(input) ? input.action : undefined;
     return typeof action === "string" && /write|save|publish|install|download|execute|call/i.test(action);
 }
-function autoApprovalBlocked(toolName, input) {
-    const text = JSON.stringify(input ?? {}).toLocaleLowerCase();
-    const mutatingTool = ["write", "edit", "bash", "powershell"].includes(toolName);
-    if (mutatingTool && /(?:data[\\/]raw|credential|secret|auth\.json|api[_ -]?key)/.test(text))
-        return "该操作可能覆盖原始数据或接触凭据，不能纳入 /run 的常规授权";
-    if (["bash", "powershell"].includes(toolName) && /\b(rm|rmdir|del|remove-item|format|shutdown|reboot|git\s+reset\s+--hard)\b/i.test(text)) {
-        return "破坏性命令不能纳入 /run 的常规授权";
-    }
-    return undefined;
-}
 function requiresSeparateOperationConfirmation(toolName, input) {
     const text = `${toolName} ${JSON.stringify(input ?? {})}`;
     return /submit\s+(?:manuscript|paper|form)|投稿(?:到|至)|发布到(?:外部|期刊|会议|网站)|send\s+(?:email|message)|邮件发送/i.test(text);
@@ -340,7 +346,14 @@ async function recommendedItems(kind) {
     return { items: [], plugins: [], externalTools: [], installPrep: [] };
 }
 function pluginSourceIdentity(source) {
-    return source.trim().replace(/^git:/, "").replace(/\.git$/i, "").replace(/\/$/, "").toLocaleLowerCase();
+    return source.trim()
+        .replace(/^git:/, "")
+        .replace(/^https?:\/\//i, "")
+        .replace(/^git@([^:]+):/i, "$1/")
+        .replace(/@[^/]+$/, "")
+        .replace(/\.git$/i, "")
+        .replace(/\/$/, "")
+        .toLocaleLowerCase();
 }
 function nativePluginManager(ctx) {
     const settingsManager = SettingsManager.create(ctx.cwd, getAgentDir(), { projectTrusted: ctx.isProjectTrusted() });
@@ -432,7 +445,7 @@ async function skillManagerRows(root, state) {
             // A managed target that exists on disk but fails validation (e.g. a URL
             // install whose manifest/hash does not match the pinned catalog) is still
             // shown as installed so the user sees it; enabling it only takes effect
-            // once the install is repaired through /install.
+            // once the install is repaired through /skill.
             let onDisk = false;
             try {
                 const target = recommendedSkillTarget(root, id, scope);
@@ -627,7 +640,7 @@ async function openPluginManager(ctx, rows) {
         enterAction: "install",
         toggleEnabled: false,
         enabledText: "已由 Pi 原生 Plugin 管理器安装；Enter 可重新安装",
-        missingMessage: "按 Enter 选择项目目录或系统目录并安装。",
+        missingMessage: "按 Enter 安装到当前项目。",
     })));
 }
 async function installRecommendedPlugin(ctx, row) {
@@ -635,15 +648,8 @@ async function installRecommendedPlugin(ctx, row) {
         throw new Error(row.reason ?? `${row.name} 尚未提供可安装的 Plugin package`);
     if (!row.sourceRef)
         throw new Error(`推荐 Plugin 没有来源网址: ${row.id}`);
-    const location = await ctx.ui.select("选择 Plugin 安装位置", ["项目目录（仅当前项目）", "系统目录（所有项目）"]);
-    if (!location)
-        return;
-    const local = location.startsWith("项目目录");
-    const approved = await ctx.ui.confirm("使用 Pi 原生管理器安装 Plugin？", `${row.name}\n来源：${row.sourceRef}\n安装位置：${location}\n安装完成后需要执行 /reload。`);
-    if (!approved)
-        return;
-    await nativePluginManager(ctx).installAndPersist(row.sourceRef, { local });
-    ctx.ui.notify(`${row.name} 已安装到${location}。请执行 /reload 载入 Plugin。`, "info");
+    await nativePluginManager(ctx).installAndPersist(row.sourceRef, { local: true });
+    ctx.ui.notify(`${row.name} 已安装到项目目录（仅当前项目）。请执行 /reload 载入 Plugin。`, "info");
 }
 async function showPluginManager(args, ctx) {
     const [verb, id] = args.trim().split(/\s+/).filter(Boolean);
@@ -705,16 +711,6 @@ function modelMcpInstallTask(root, row, plan) {
         `成功后确保 .psyclaw/recommendations.json 的 mcp 列表包含 ${JSON.stringify(row.id)}，说明写入了哪些配置，并提醒用户执行 /reload。若安装命令本身失败，直接诊断并修复；只有遇到必须由用户提供的凭据或外部软件许可证时才向用户说明。`,
     ].join("\n");
 }
-function modelExternalToolInstallTask(root, item) {
-    return [
-        `安装推荐外部工具：${String(item.name ?? item.id ?? "external tool")}。`,
-        `官方来源：${String(item.sourceRef ?? "未提供；请停止并告知用户")}`,
-        `当前工作目录：${root}`,
-        String(item.installHint ?? "读取官方最新安装说明，选择适合当前操作系统的安装方式。"),
-        "用户已通过 /install 明确请求安装。直接读取官方说明、执行安装并验证版本或最小命令，不要再次请求安装许可。不要读取或输出凭据。",
-        "这是外部工具，不要将它宣称为来源仓库提供的 Skill 或 Pi Plugin。完成后报告实际安装位置、版本和验证结果；只有需要凭据、商业许可证或管理员提权时再请用户处理。",
-    ].join("\n");
-}
 async function queueModelMcpInstall(pi, ctx, row, plan) {
     if (!row.sourceRef)
         throw new Error(`推荐 MCP 没有来源网址: ${row.id}`);
@@ -1069,6 +1065,12 @@ const WORKFLOW_RUNNERS = {
     "writing-review": runWritingReview,
     "expert-review": runExpertReview,
 };
+function natureFillersFromCommandContext(ctx) {
+    return detectNatureArsFillers({
+        skills: ctx.getSystemPromptOptions?.()?.skills,
+        systemPrompt: ctx.getSystemPrompt?.(),
+    });
+}
 export default function psyclawExtension(pi) {
     const developerCommands = process.env.PSYCLAW_DEVELOPER_COMMANDS === "1";
     const legacyTestApi = typeof pi.registerTool !== "function";
@@ -1089,6 +1091,25 @@ export default function psyclawExtension(pi) {
         });
     if (!legacyTestApi && typeof pi.on === "function")
         pi.on("session_shutdown", () => runtimeMcps.close());
+    if (!legacyTestApi && typeof pi.on === "function")
+        pi.on("before_agent_start", async (event, ctx) => {
+            if (!(await readControlledRun(ctx?.cwd ?? process.cwd())))
+                return;
+            const prompt = userRulesPrompt(await loadUserRules(ctx?.cwd ?? process.cwd()));
+            if (prompt)
+                return { systemPrompt: `${event.systemPrompt}\n\n${prompt}` };
+        });
+    if (!legacyTestApi && typeof pi.on === "function")
+        pi.on("before_agent_start", (event, ctx) => {
+            if (!isArsPiTurn(event.systemPrompt) && !isArsPiActive(ctx?.sessionManager))
+                return;
+            return {
+                systemPrompt: `${event.systemPrompt}\n\n${psyclawArsPatch({
+                    skills: event.systemPromptOptions?.skills,
+                    systemPrompt: event.systemPrompt,
+                })}`,
+            };
+        });
     if (!legacyTestApi && typeof pi.on === "function")
         pi.on("input", (event, ctx) => {
             if (event.source === "extension")
@@ -1098,25 +1119,24 @@ export default function psyclawExtension(pi) {
             ctx.ui.notify("PsyClaw 已统一隐藏底层登录命令。请使用 /provider 配置、切换或更新模型凭据。", "info");
             return { action: "handled" };
         });
+    if (!legacyTestApi && typeof pi.on === "function")
+        pi.on("input", async (event, ctx) => {
+            if (event.source === "extension" || isArsPiActive(ctx.sessionManager))
+                return;
+            if (!/^\/(?:ars-[a-z0-9-]+|skill:(?:deep-research|academic-paper|academic-paper-reviewer|academic-pipeline))(?:\s|$)/i.test(event.text.trim()))
+                return;
+            if (!ctx.hasUI)
+                return { action: "handled" };
+            const approved = await ctx.ui.confirm("启用 ARS？", `来源：${ARS_REPOSITORY_URL} @ ${ARS_UPSTREAM_REF}\n许可：CC BY-NC 4.0，仅限非商业用途。关键研究阶段仍会请求确认。`);
+            if (!approved)
+                return { action: "handled" };
+        });
     if (!legacyTestApi && typeof pi.on === "function")
         pi.on("tool_call", async (event, ctx) => {
             const run = await readControlledRun(ctx.cwd);
             if (!run || !toolNeedsApproval(event.toolName, event.input))
                 return;
             const summary = toolApprovalSummary(event.toolName, event.input);
-            const blockedReason = autoApprovalBlocked(event.toolName, event.input);
-            if (blockedReason) {
-                await appendApproval(ctx.cwd, {
-                    kind: "tool",
-                    nodeId: event.toolCallId,
-                    decision: "rejected",
-                    actor: "auto",
-                    runId: run.runId,
-                    sha256: approvalInputDigest({ toolName: event.toolName, input: event.input }),
-                    summary: blockedReason,
-                });
-                return { block: true, terminate: true, reason: blockedReason };
-            }
             if (requiresSeparateOperationConfirmation(event.toolName, event.input)) {
                 if (!ctx.hasUI)
                     return { block: true, terminate: true, reason: "外部发布需要用户在交互界面中明确确认" };
@@ -1333,6 +1353,19 @@ export default function psyclawExtension(pi) {
                 ctx.ui.notify("已启动有界研究循环；使用 /loop stop 可请求中止", "info");
             },
         });
+    for (const kind of ["skill", "hook", "rule", "subagent"]) {
+        if (!legacyTestApi)
+            pi.registerCommand(`create-${kind}`, {
+                description: `预览并创建项目级 ${kind}`,
+                handler: async (args, ctx) => {
+                    if (!args.trim()) {
+                        ctx.ui.notify(`Usage: /create-${kind} <name and requirements>`, "info");
+                        return;
+                    }
+                    pi.sendUserMessage(creationCommandPrompt(kind, args.trim()), ctx.isIdle() ? {} : { deliverAs: "followUp" });
+                },
+            });
+    }
     if (!legacyTestApi)
         pi.registerCommand("skill", {
             description: "管理和安装 Skill",
@@ -1374,6 +1407,61 @@ export default function psyclawExtension(pi) {
                 ctx.ui.notify("Usage: /skill [status|enable <id>|disable <id>|enable-all|disable-all|install <local-directory>]", "info");
             },
         });
+    if (!legacyTestApi)
+        pi.registerCommand("ars", {
+            description: "启动或管理 PsyClaw ARS 模式",
+            handler: async (args, ctx) => {
+                try {
+                    const [action = "status", ...rest] = args.trim().split(/\s+/).filter(Boolean);
+                    if (action === "status") {
+                        ctx.ui.notify([
+                            `PsyClaw ARS profile v${PSYCLAW_ARS_PROFILE_VERSION}`,
+                            "模式：轻量 ARS（不要求 /init 或 /run）",
+                            `来源：${ARS_REPOSITORY_URL} @ ${ARS_UPSTREAM_REF} (${ARS_UPSTREAM_COMMIT.slice(0, 12)})`,
+                            "入口：/ars doctor，/ars start，/ars full <task>，/ars stop",
+                            formatNatureArsFillerStatus(natureFillersFromCommandContext(ctx)),
+                        ].join("\n"), "info");
+                        return;
+                    }
+                    if (action === "install") {
+                        ctx.ui.notify("ARS 可直接使用：运行 /ars start 或 /ars full <task>。", "info");
+                        return;
+                    }
+                    if ((action === "start" || action === "full") && !isArsPiActive(ctx.sessionManager)) {
+                        const approved = await ctx.ui.confirm("启用 ARS？", `来源：${ARS_REPOSITORY_URL} @ ${ARS_UPSTREAM_REF}\n许可：CC BY-NC 4.0，仅限非商业用途。关键研究阶段仍会请求确认。`);
+                        if (!approved)
+                            return;
+                    }
+                    const upstreamCommand = action === "doctor"
+                        ? "/ars-pi-doctor"
+                        : action === "start"
+                            ? "/ars-pi-start"
+                            : action === "stop"
+                                ? "/ars-pi-stop"
+                                : action === "full"
+                                    ? `/ars-full${rest.length > 0 ? ` ${rest.join(" ")}` : ""}`
+                                    : undefined;
+                    if (!upstreamCommand) {
+                        ctx.ui.notify("Usage: /ars [status|doctor|start|full <task>|stop]", "info");
+                        return;
+                    }
+                    if (action === "doctor" || action === "full" || action === "start") {
+                        ctx.ui.notify(formatNatureArsFillerStatus(natureFillersFromCommandContext(ctx)), "info");
+                    }
+                    // A queued prompt does not get a fresh system prompt in Pi. Wait so the
+                    // upstream wrapper can activate ARS and inject its compatibility note.
+                    if (action === "full" && !ctx.isIdle())
+                        await ctx.waitForIdle();
+                    pi.sendUserMessage(upstreamCommand, {
+                        ...(!ctx.isIdle() ? { deliverAs: "followUp" } : {}),
+                        expandPromptTemplates: true,
+                    });
+                }
+                catch (error) {
+                    await notifyError(ctx, error);
+                }
+            },
+        });
     if (!legacyTestApi)
         pi.registerCommand("plugin", {
             description: "浏览推荐并管理 Plugin / Extension",
@@ -1428,50 +1516,6 @@ export default function psyclawExtension(pi) {
                 }
             },
         });
-    if (!legacyTestApi)
-        pi.registerCommand("install", {
-            description: "查看推荐 Skill/MCP，或交给当前模型安装",
-            handler: async (args, ctx) => {
-                try {
-                    const [kind, id] = args.trim().split(/\s+/, 2);
-                    if (!kind) {
-                        const [skills, mcps] = await Promise.all([recommendedItems("skills"), recommendedItems("mcp")]);
-                        const skillLines = skills.items.slice(0, 8).map((item) => `Skill: ${String(item.id)} — ${String(item.name)}`);
-                        const mcpLines = mcps.items.slice(0, 8).map((item) => `MCP: ${String(item.id)} — ${String(item.name)}`);
-                        const pluginLines = skills.plugins.slice(0, 8).map((item) => `Plugin: ${String(item.id)} — ${String(item.name)}`);
-                        const toolLines = skills.externalTools.slice(0, 8).map((item) => `外部工具: ${String(item.id)} — ${String(item.name)}`);
-                        ctx.ui.notify(["推荐安装入口", "", ...skillLines, ...pluginLines, ...mcpLines, "", ...toolLines, "", "安装：/install skill|mcp|external <id>", "Plugin：/plugin 或 /plugin install <id>", "管理：/skill、/plugin 或 /mcp", "也可以打开 /panel 查看推荐页面"].join("\n"), "info");
-                        return;
-                    }
-                    if (kind !== "skill" && kind !== "mcp" && kind !== "external")
-                        throw new Error("Usage: /install skill|mcp|external <id>");
-                    if (!id) {
-                        if (kind === "skill")
-                            await showSkillManager(pi, "", ctx);
-                        else if (kind === "mcp")
-                            await showMcpManager(pi, "", ctx, runtimeMcps);
-                        else
-                            ctx.ui.notify("Usage: /install external <id>", "info");
-                        return;
-                    }
-                    if (kind === "skill")
-                        await showSkillManager(pi, `install ${id}`, ctx);
-                    else if (kind === "mcp")
-                        await showMcpManager(pi, `install ${id}`, ctx, runtimeMcps);
-                    else {
-                        const skills = await recommendedItems("skills");
-                        const item = skills.externalTools.find((candidate) => candidate.id === id && candidate.installable !== false);
-                        if (!item)
-                            throw new Error(`未找到可安装的推荐外部工具: ${id}`);
-                        pi.sendUserMessage(modelExternalToolInstallTask(ctx.cwd, item), ctx.isIdle() ? {} : { deliverAs: "followUp" });
-                        ctx.ui.notify(`已将 ${String(item.name ?? id)} 的安装任务交给当前模型；完成后会报告版本与验证结果。`, "info");
-                    }
-                }
-                catch (error) {
-                    await notifyError(ctx, error);
-                }
-            },
-        });
     if (!legacyTestApi)
         pi.registerCommand("provider", {
             description: "查看或切换模型 Provider",
@@ -1759,6 +1803,84 @@ export default function psyclawExtension(pi) {
                 }
             },
         });
+        pi.registerTool({
+            name: "psyclaw_ars_multi_agent",
+            label: "ARS multi-agent review bridge",
+            description: "Run ARS reviewer_full Stage 3 as five process-separated read-only reviewer seats, or Stage 3 re-review as three ordered fenced calls. This is a parallel-agent capability; it preserves ARS checkpoints and never claims independent error processes.",
+            parameters: Type.Object({
+                mode: Type.Union([Type.Literal("reviewer_full"), Type.Literal("reviewer_re_review")]),
+                manuscriptPath: Type.Optional(Type.String()),
+                originalManuscriptPath: Type.Optional(Type.String()),
+                roadmapPath: Type.Optional(Type.String()),
+                authorAdjudicationPath: Type.Optional(Type.String()),
+                revisionEvidenceBundlePath: Type.Optional(Type.String()),
+                responseLetterPath: Type.Optional(Type.String()),
+                editorialDecisionPath: Type.Optional(Type.String()),
+                round1FindingsPath: Type.Optional(Type.String()),
+                reviewerCardsPath: Type.Optional(Type.String()),
+                revisionPatchPaths: Type.Optional(Type.Array(Type.String(), { maxItems: 50 })),
+                applyReportPaths: Type.Optional(Type.Array(Type.String(), { maxItems: 50 })),
+                resumeRunId: Type.Optional(Type.String()),
+                reviewerCards: Type.Optional(Type.String({ maxLength: 40000 })),
+                title: Type.Optional(Type.String()), field: Type.Optional(Type.String()), passportDigest: Type.Optional(Type.String()),
+            }),
+            executionMode: "sequential",
+            async execute(_toolCallId, params, _signal, _onUpdate, ctx) {
+                try {
+                    if (!isArsPiActive(ctx.sessionManager))
+                        throw new Error("ARS mode is not active");
+                    if (!contextProjectTrusted(ctx))
+                        throw new Error("project is not trusted");
+                    if (!ctx.hasUI || typeof ctx.ui?.confirm !== "function")
+                        throw new Error("ARS external model dispatch requires interactive confirmation");
+                    const paths = [params.manuscriptPath, params.originalManuscriptPath, params.roadmapPath, params.authorAdjudicationPath, params.revisionEvidenceBundlePath, params.responseLetterPath, params.editorialDecisionPath, params.round1FindingsPath, params.reviewerCardsPath, ...(params.revisionPatchPaths ?? []), ...(params.applyReportPaths ?? [])].filter((value) => typeof value === "string");
+                    const approved = await ctx.ui.confirm("将研究材料发送给当前模型 Provider？", `模式：${params.mode}\nProvider/Model：${ctx.model?.provider ?? "unknown"}/${ctx.model?.id ?? "unknown"}\n文件：\n${paths.map((path) => `- ${path}`).join("\n")}\n\nStage 3 可能至少产生 11 次模型调用；进程隔离不代表误差独立。`);
+                    if (!approved)
+                        throw new Error("ARS dispatch cancelled; no material was sent");
+                    const result = await runArsMultiAgentBridge(params, { root: ctx.cwd, ...(ctx.model?.provider ? { provider: ctx.model.provider } : {}), ...(ctx.model?.id ? { model: ctx.model.id } : {}), env: providerEnvironment(ctx.model?.provider), agentDir: join(ctx.cwd, ".psyclaw", "ars-agent") });
+                    return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }], details: result, ...(result.status === "blocked" ? { isError: true } : {}) };
+                }
+                catch (error) {
+                    return { content: [{ type: "text", text: `ARS multi-agent bridge failed: ${error instanceof Error ? error.message : String(error)}` }], details: { status: "blocked" }, isError: true };
+                }
+            },
+        });
+        pi.registerTool({
+            name: "psyclaw_create",
+            label: "Create project capability",
+            description: "Preview and, after an explicit UI confirmation, create one PsyClaw-native project Skill, declarative analysis Hook, additive Rule, or read-only Subagent persona.",
+            parameters: Type.Object({
+                kind: Type.Union([Type.Literal("skill"), Type.Literal("hook"), Type.Literal("rule"), Type.Literal("subagent")]),
+                id: Type.String({ minLength: 1, maxLength: 64 }),
+                description: Type.String({ minLength: 1, maxLength: 1024 }),
+                instructions: Type.Optional(Type.String({ maxLength: 8000 })),
+                event: Type.Optional(Type.Union([Type.Literal("before-plan"), Type.Literal("before-analysis"), Type.Literal("before-delegation"), Type.Literal("before-write"), Type.Literal("after-analysis"), Type.Literal("before-report"), Type.Literal("after-report")])),
+                severity: Type.Optional(Type.Union([Type.Literal("warn"), Type.Literal("block")])),
+                pattern: Type.Optional(Type.String({ maxLength: 500 })),
+                pathPrefix: Type.Optional(Type.String({ maxLength: 200 })),
+                role: Type.Optional(Type.Union([Type.Literal("planner"), Type.Literal("researcher"), Type.Literal("analyst"), Type.Literal("critic"), Type.Literal("writer"), Type.Literal("verifier")])),
+            }),
+            executionMode: "sequential",
+            async execute(_toolCallId, params, _signal, _onUpdate, ctx) {
+                try {
+                    if (!contextProjectTrusted(ctx))
+                        throw new Error("project is not trusted");
+                    const request = params;
+                    const preview = await previewCreation(ctx.cwd, request);
+                    if (!ctx.hasUI || typeof ctx.ui?.confirm !== "function") {
+                        return { content: [{ type: "text", text: JSON.stringify({ ...preview, status: "preview-only", reason: "interactive confirmation unavailable" }, null, 2) }], details: preview };
+                    }
+                    const approved = await ctx.ui.confirm(`创建 ${params.kind} “${preview.id}”？`, `目标：${preview.path}\nSHA-256：${preview.sha256}\n\n${preview.contents}`);
+                    if (!approved)
+                        return { content: [{ type: "text", text: "Creation cancelled; no file was written." }], details: { status: "cancelled", preview } };
+                    const result = await applyCreation(ctx.cwd, request, preview.sha256, true);
+                    return { content: [{ type: "text", text: JSON.stringify({ status: "created", path: result.preview.path, sha256: result.preview.sha256, receipt: result.receipt }, null, 2) }], details: result };
+                }
+                catch (error) {
+                    return { content: [{ type: "text", text: `Creation failed: ${error instanceof Error ? error.message : String(error)}` }], details: { status: "failed" }, isError: true };
+                }
+            },
+        });
         pi.registerTool({
             name: "psyclaw_skill",
             label: "Research skill",
@@ -2001,9 +2123,10 @@ export default function psyclawExtension(pi) {
         pi.registerCommand("agents", {
             description: "运行经批准的只读研究 Agent",
             handler: async (args, ctx) => {
-                const objective = args.trim();
+                const requested = parseAgentsRequest(args);
+                const objective = requested.objective;
                 if (!objective) {
-                    ctx.ui.notify("Usage: /agents <bounded read-only research task>", "info");
+                    ctx.ui.notify("Usage: /agents [--agent <id>|--agents <id,...>] <bounded read-only research task>", "info");
                     return;
                 }
                 if (objective.length > 4_000) {
@@ -2026,7 +2149,16 @@ export default function psyclawExtension(pi) {
                 activeAgentRuns.add(ctx.cwd);
                 try {
                     const runId = `pi_agent_${Date.now()}`;
-                    const plan = researchTaskPlan(runId, objective);
+                    let plan = researchTaskPlan(runId, objective);
+                    if (requested.ids.length > 0) {
+                        const available = await loadCustomPersonas(ctx.cwd);
+                        const byId = new Map(available.map((persona) => [persona.id, persona]));
+                        const selected = requested.ids.map((id) => byId.get(id));
+                        const missing = requested.ids.filter((_id, index) => !selected[index]);
+                        if (missing.length > 0)
+                            throw new Error(`Unknown or invalid custom subagent: ${missing.join(", ")}`);
+                        plan = customPersonaPlan(runId, objective, selected.filter((persona) => persona !== undefined));
+                    }
                     await mkdir(join(ctx.cwd, ".psyclaw", "plans"), { recursive: true });
                     await atomicWriteFile(join(ctx.cwd, ".psyclaw", "plans", `${runId}.json`), `${JSON.stringify(plan, null, 2)}\n`);
                     const eventLog = new RunEventLog(ctx.cwd, runId);
@@ -2036,6 +2168,7 @@ export default function psyclawExtension(pi) {
                         ...(ctx.model?.provider === undefined ? {} : { provider: ctx.model.provider }),
                         ...(ctx.model?.id === undefined ? {} : { model: ctx.model.id }),
                         env: providerEnvironment(ctx.model?.provider),
+                        ...(requested.ids.length > 0 ? { tools: [] } : {}),
                         root: ctx.cwd,
                         pauseRequested: async () => {
                             try {