@lievclouds/dsh-cortex 0.3.4 → 0.3.6

package/index.js

@@ -41,14 +41,16 @@ export function apply(ctx, config) {
           name: 'dsh-cortex.tools',
           order: 500,
           text: [
-            '## Cortex (dsh-cortex plugin, no MCP needed)',
-            'The local Cortex database (schema v5) is available through native tools. The old `mcp__cortex__*` servers/skills are not required; prefer the `cortex_*` tools whenever the user mentions Cortex, 漏洞库/漏洞, 资产, 快照, 内网作战 or 记忆星云.',
-            '- Cortex findings: `cortex_list_vulns` / `cortex_get_vuln`; save with `cortex_save_vuln` (dedupe by host first).',
+            '## Cortex (dsh-cortex plugin, always active)',
+            'This plugin is installed and injects this guide automatically: the cortex_* tools below are available in every conversation without a skill or an MCP server.',
+            'When the user asks for ANY authorized penetration-testing work (渗透测试 / SRC / 漏洞挖掘 / 安全评估 / 资产与接口侦察 / 内网横向 / 漏洞复测), use the Cortex tools proactively instead of relying on memory:',
+            '- Reuse memory first: `cortex_list_snapshots` + `cortex_get_snapshot` for task progress, `cortex_list_vulns` + `cortex_get_asset` for existing findings/assets; `cortex_list_assets` before repeating recon.',
+            '- Persist confirmed findings: dedupe with `cortex_list_vulns`, then `cortex_save_vuln` (reproduction_steps in Markdown).',
+            '- Persist recon context: `cortex_sync_asset_info` (mode=merge) for fingerprints, interfaces (raw HTTP), leaks and test parameters.',
             '- Status / retest: `cortex_update_vuln_status`, `cortex_append_retest` (append-only, never overwrite original evidence).',
-            '- Assets: `cortex_list_assets`, `cortex_get_asset`, `cortex_sync_asset_info` (fingerprints, interfaces, leaks, test parameters).',
-            '- Snapshots / internal / nebula: `cortex_list_snapshots`, `cortex_get_snapshot`, `cortex_internal_overview`, `cortex_graph_summary`.',
-            'Examples that should call the tools: “列出 Cortex 里的高危漏洞”, “把刚才确认的漏洞写入 Cortex”, “把 127.0.0.1:8080 的接口同步到资产库”, “把 VULN-… 标记为已确认并追加复测结论”.',
-            'If a tools call fails, report the failure; never claim a record was stored without a successful result.',
+            '- Summaries: `cortex_internal_overview`, `cortex_graph_summary`.',
+            'Do not skip these calls merely because no skill was loaded. If a tool call fails, report the failure; never claim a record was saved without a successful result.',
+            'Examples: “列出 Cortex 里的高危漏洞”, “把刚才确认的漏洞写入 Cortex”, “把 127.0.0.1:8080 的接口同步到资产库”, “把 VULN-… 标记为已确认并追加复测结论”.',
           ].join('\n'),
         }),
       'dsh-cortex: usage prompt',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lievclouds/dsh-cortex",
-  "version": "0.3.4",
+  "version": "0.3.6",
   "description": "Cortex workbench for DeepSeek Harness: the original Cortex UI (vulnerabilities, assets, internal operations, Memory Nebula, snapshots, retest) as a native DSH panel, plus 12 native agent tools so DSH conversations use the local Cortex SQLite without MCP.",
   "type": "module",
   "main": "index.js",

package/src/cortex-ui/dsh/css-overrides.css

@@ -99,6 +99,14 @@
   border: 3px solid transparent;
 }
 
+/* DSH draws its native window buttons above the page in the top-right corner.
+   Right-hand inspector sheets start at the very top edge, so their header
+   actions (export / close) ended up underneath those buttons. Move every sheet
+   below that band; the overlay still dims the area behind it. */
+.dshc-cortex-root .sheet-content {
+  top: calc(0.875rem + 2.25rem);
+}
+
 /* ------------------------------------------------------------------------- */
 /* DSH shell adaptations                                                     */
 /* ------------------------------------------------------------------------- */