@shgroup/dsh-serenity-hooks 1.16.11 → 1.16.13

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-serenity-hooks",
-  "version": "1.16.11",
+  "version": "1.16.13",
   "main": "lib/index.js",
   "description": "宁静号 ACC harness（Native Cordis 插件）：真实 DSH 工具 cc_fs/session/acc_msm/eap/neat/cce/loop + 拦截缝机械约束（safe-mode/路径守卫/会话落盘）。适配 DSH 公开版（0.1.0-rc，deepseek-ai/deepseek-harness）。私有（dsh-external 组织）。",
   "engines": {

package/lib/index.js

@@ -2827,6 +2827,51 @@ function eapBlock() {
 		""
 	].join("\n");
 }
+/**
+* 运行时状态块 1) safe-mode（S134 v1.16.12）：ON 时告知 agent（行为约束；机制仍由 guards 强制）。
+* 文案与实现逐项对应（guards.ts）：bash 禁用（restrict deny + decideGuard）、
+* 黑名单路径拦截、CCC 治理文件保护；write/edit 等其余工具保留（受路径逃逸/黑名单约束）。
+*/
+function safeModeBlock(root) {
+	if (!isSafeModeOn(root)) return "";
+	const blacklist = readBlacklist(root);
+	return [
+		"",
+		"=== Serenity Safe Mode ===",
+		"Safe mode is ON (enabled by the user): bash is disabled (hidden and blocked);",
+		"blacklist rules apply to file paths; CCC governance files (.serenity,",
+		".serenity-safe-on) are protected from agent writes. Other read/write tools",
+		"remain available, subject to path-escape and blacklist guards.",
+		"Behavior constraints: do not attempt to bypass restrictions; do not write to",
+		"blacklisted paths or governance files.",
+		blacklist.length > 0 ? `\nActive blacklist rules: ${blacklist.join(", ")}` : "",
+		""
+	].join("\n");
+}
+/**
+* 运行时状态块 2) localstore git 策略（S134 v1.16.12）：localstore.json 存在时按 gitTrack
+* 提示敏感行为约束。deny（缺省）= 本地私有不提交；allow = 进 git（个人私有仓）但敏感数据
+* 只限于该文件内（不外泄到其他文件/对话/日志）。
+*/
+function localstoreBlock(root) {
+	if (!existsSync(localstorePath(root))) return "";
+	return (readGitTrack(root) === "allow" ? [
+		"",
+		"=== Serenity Localstore ===",
+		"localstore.json is committed to git (gitTrack=allow — personal private repository).",
+		"Sensitive data may live in this file, but ONLY in this file: keep credentials and",
+		"secret values confined to localstore.json — never leak them into other files,",
+		"conversation, or logs.",
+		""
+	] : [
+		"",
+		"=== Serenity Localstore ===",
+		"localstore.json is a local private file (gitTrack=deny — not committed to git,",
+		".gitignore enforced). Credentials/config live only on this machine: do not write",
+		"them into conversation or logs; do not attempt to commit this file (cc_git will refuse).",
+		""
+	]).join("\n");
+}
 /** 4) SKILL.md 全文：该 CCC 顶层入口 skill 原文（对齐 osp：原文直推，无包裹头；仅过滤治理内容） */
 function entrySkillSectionText(root) {
 	const skills = findEntrySkills(root);
@@ -2882,9 +2927,11 @@ function serenitySystemPrompt(root, scope = DEFAULT_SESSION_SCOPE) {
 	const parts = [
 		accBlock(root),
 		cceBlock(),
-		constraintsBlock(root),
-		eapBlock()
+		constraintsBlock(root)
 	];
+	const state = [safeModeBlock(root), localstoreBlock(root)].filter((b) => b !== "").join("\n");
+	if (state) parts.push(state);
+	parts.push(eapBlock());
 	const skill = entrySkillSectionText(root);
 	if (skill) parts.push(skill);
 	const session = sessionBlock(root, scope);
@@ -3048,6 +3095,16 @@ function shouldAutoRestore(agent) {
 	if (session.id?.startsWith("loop-")) return false;
 	return true;
 }
+/**
+* 恢复触发判定（S134 泄漏修复 v1.16.13）：根会话 **且已有对话历史**（续跑/恢复的会话）
+* 才自动恢复上次激活的宁静号会话——全新会话（新任务，如 apaas-26116）无历史 → 不恢复，
+* 避免把过去的 SESSION 上下文注入新任务（跨任务污染）。
+*/
+function shouldRestoreActive(agent) {
+	if (!shouldAutoRestore(agent)) return false;
+	const events = agent.session?.events;
+	return Array.isArray(events) && events.length > 0;
+}
 function registerContext(ctx, opts = {}) {
 	const configPaths = opts.configPaths ?? DEFAULT_SERENITY_CONFIG_PATHS;
 	const entrySkillMaxChars = opts.entrySkillMaxChars ?? 3e4;
@@ -3056,7 +3113,7 @@ function registerContext(ctx, opts = {}) {
 		if (!root) return;
 		const key = agentKey(agent);
 		registerEntrySkillSection(agent, root);
-		if (shouldAutoRestore(agent)) try {
+		if (shouldRestoreActive(agent)) try {
 			if (loadSerenityConfig(root, configPaths).hooks?.autoRestoreSession ?? true) {
 				const restored = restoreActiveSession(root, agentScope(agent));
 				if (restored) console.log(`[serenity-hooks] ↻ 自动恢复激活会话: ${restored.dir}（from scope ${restored.from}）`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shgroup/dsh-serenity-hooks",
-  "version": "1.16.11",
+  "version": "1.16.13",
   "description": "宁静号 ACC harness — Native Cordis 插件（DeepSeek Harness 运行时）。真实 DSH 工具注册（cc_fs/session/acc_msm 等 9 工具）+ 拦截缝机械约束（safe-mode/路径守卫/会话落盘）+ 系统提示词注入（ACC/CCE/Constraints/SKILL/Session 五块）。适配 DSH 公开版（deepseek-ai/deepseek-harness 0.1.0-rc）。",
   "license": "MIT",
   "repository": {