第3章：Profile 与 Patch 分层 —— 一个会话如何被组装

      空的 profile 根（一个空数组 [])
              │
              ▼
   ┌──────────────────────┐
   │ 层1  bundle patches  │  按 package.json 的 dsh.profile.bundles 顺序
   │  dsh-base      78 行  │  ← 共享内核
   │  dsh-web-app   78 行  │  ← 浏览器形态，按 id 覆盖 base 的行
   │  dsh-toolbelt   8 行  │  ← 第三方插件包
   └──────────────────────┘
              │
              ▼
   ┌──────────────────────┐
   │ 层2  profile patch   │  ~/.dsh/profiles/web/cordis.patch.yml
   │        （本机 8 行）   │  ← 用户自己的覆盖
   └──────────────────────┘
              │
              ▼
   ┌──────────────────────┐
   │ 层3  home patch      │  ~/.dsh/cordis.patch.yml（本机无）
   └──────────────────────┘
              │
              ▼
   ┌──────────────────────┐
   │ 层4  --patch 覆盖     │  命令行临时覆盖
   └──────────────────────┘
              │
              ▼
        最终插件树 → cordis Loader 装载

# dsh profile root — an empty entry list. The tree is composed as patches:
# each bundle in package.json's dsh.profile.bundles, then cordis.patch.yml, then any
# --patch overlays. Edit cordis.patch.yml, not this file.
[]

{
  "name": "dsh-profile-web",
  "dsh": {
    "profile": {
      "bundles": [
        "@deepseek-ai/dsh-base",
        "@deepseek-ai/dsh-web-app",
        "dsh-toolbelt"
      ]
    }
  }
}

- insert:
    - id: timer
      name: '@deepseek-ai/cordis-plugin-timer'

    - id: llm
      name: '@deepseek-ai/dsh-llm'

    - id: session
      name: '@deepseek-ai/dsh-session'

    - id: session-title
      name: '@deepseek-ai/dsh-session-title'
      config:
        fallbackMaxWords: 5
        fallbackMaxBytes: 40
        maxTitleBytes: 80

# Applied after dsh-base's insert; rows here override base rows by id, with
# the profile's own cordis.patch.yml and any --patch overlays still to come.
#
# A patch replaces the targeted row's whole `config`, so each row below
# restates every key it owns.

# Row order carries no load semantics (activation is service-availability
# driven); the grouping is for readers.

- id: bash-sandbox
  name: '@deepseek-ai/dsh-bash-sandbox'
  disabled: !!js process.platform === 'win32'
  config:
    timeoutMs: 60000

- id: pwsh-sandbox
  name: '@deepseek-ai/dsh-pwsh-sandbox'
  disabled: !!js process.platform !== 'win32'

- id: tool-bash
  name: '@deepseek-ai/dsh-tool-bash'
  disabled: !!js process.platform === 'win32'

- id: tool-pwsh
  name: '@deepseek-ai/dsh-tool-pwsh'
  disabled: !!js process.platform !== 'win32'

- id: session-persistence-jsonl
  config:
    root: !!js dshHomePath('sessions')

- id: session-telemetry-otel
  config:
    mode: !!js process.env.DSH_TELEMETRY_MODE || 'DISABLED'
    exporter:
      url: !!js process.env.DSH_TELEMETRY_OTLP_URL ?? '<官方遥测端点>'

- id: sandbox-policy
  config:
    mode: !!js process.env.DSH_PERMISSION_MODE ?? 'workspace-write'
    workspaceRoot: !!js process.cwd()

tool-bash              tool-pwsh              tool-jobs
tool-fs                tool-fs-search         tool-str-replace-editor
skill-filesystem       tool-skill             tool-goal
plan-mode              compaction-basic       command-compact
tool-result-pruner     tool-subagent-control  tool-subagent-list-agents
tool-subagent          tool-subagent-fork     workflow-worker-thread
tool-workflow          tool-ralph             agent-instructions
tool-todo              tool-web               hmr

- id: agent-presets
  name: '@deepseek-ai/dsh-agent-presets'

~/.dsh/.agent-presets/dsh-toolbelt/
├── preset.yml           （元数据：名称、描述、排序）
└── agent.cordis.yml     （13649 字节，33 个插件行）

agent-presets:
  default: standard

persona                    agent-instructions
tool-bash                  tool-pwsh
tool-fs                    tool-fs-search
tool-jobs                  tool-skill / skill-filesystem
tool-goal                  tool-todo / tool-web
planning ├ plan-mode
compaction ├ compaction-basic / command-compact / tool-result-pruner
delegation ├ tool-subagent / tool-subagent-fork
           ├ tool-subagent-control / tool-subagent-list-agents
           ├ workflow-worker-thread / tool-workflow / tool-ralph
python-workdir-guard       skill-shell-injection
language-guard

- id: mcp-client
  name: '@deepseek-ai/dsh-mcp-client'
  disabled: false
  config:
    # 按该包 README 的 schema 填

- id: python-workdir-guard
  name: 'dsh-toolbelt/python-workdir-guard'
  disabled: false

dsh --dump-default-config    # 默认配置树
dsh --dump-config            # 叠完所有 patch 的最终树

dsh plugin --profile web add <包名>

dsh --profile web --port 8080       # --port 属于 web app
dsh --profile headless "run the tests"
dsh --profile web --help            # web app 的 flag，不是启动器的
dsh --help                          # 启动器自己的 help

# 1. profile 的三层 bundle 声明
Get-Content "$env:DSH_HOME\profiles\web\package.json"

# 2. profile 根是空的
Get-Content "$env:DSH_HOME\profiles\web\cordis.yml"

# 3. 用户自己的 patch 层
Get-Content "$env:DSH_HOME\profiles\web\cordis.patch.yml"

# 4. 三层 bundle patch 各有多少行
foreach ($p in 'dsh-base','dsh-web-app') {
  $f = "$env:DSH_HOME\profiles\node_modules\@deepseek-ai\$p\cordis.patch.yml"
  "{0}: {1} 行" -f $p, (Select-String -Path $f -Pattern '^\s*-\s*id:').Count
}

# 5. web-app 到底禁了哪些
Select-String -Path "$env:DSH_HOME\profiles\node_modules\@deepseek-ai\dsh-web-app\cordis.patch.yml" `
  -Pattern 'disabled: true' -Context 2,0

# 6. agent preset 装了什么（另一套账）
Select-String -Path "$env:DSH_HOME\.agent-presets\dsh-toolbelt\agent.cordis.yml" `
  -Pattern '^\s*-?\s*(id|name):'

# 7. 所有 !!js 动态表达式
Select-String -Path "$env:DSH_HOME\profiles\node_modules\@deepseek-ai\dsh-base\cordis.patch.yml" `
  -Pattern '!!js'