@shgroup/dsh-serenity-hooks 1.18.4 → 1.18.6

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-serenity-hooks",
-  "version": "1.18.4",
+  "version": "1.18.6",
   "main": "lib/index.js",
   "description": "宁静号 ACC harness（Native Cordis 插件）：真实 DSH 工具 cc_fs/session/acc_msm/eap/neat/cce/loop + 拦截缝机械约束（safe-mode/路径守卫/会话落盘）。适配 DSH 公开版（0.1.0-rc，deepseek-ai/deepseek-harness）。私有（dsh-external 组织）。",
   "engines": {

package/lib/index.js

@@ -1924,16 +1924,18 @@ function decideGuard(input) {
 			deny: `path escape blocked: "${pathArg}" 越出 CCC 根`,
 			kind: "deny"
 		};
-		const rel = relative(root, abs).split("\\").join("/");
-		if (rel === ".serenity-safe-on" || rel === ".serenity" || rel.startsWith(".serenity-safe-on/") || rel.startsWith(".serenity/")) return {
-			deny: `CCC 治理文件 "${rel}" 保留给用户，agent 不可写`,
-			kind: "deny"
-		};
-		const hit = matchBlacklist(rel, blacklist);
-		if (hit) return {
-			deny: hit.message ?? `blacklist blocked: "${pathArg}" 命中规则 "${hit.pattern}"`,
-			kind: "deny"
-		};
+		if (toolName === "write" || toolName === "edit" || toolName === "str_replace_editor" || toolName === "cc_fs" || toolName === "bash" || toolName === "append" || toolName === "touch") {
+			const rel = relative(root, abs).split("\\").join("/");
+			if (rel === ".serenity-safe-on" || rel === ".serenity" || rel.startsWith(".serenity-safe-on/") || rel.startsWith(".serenity/")) return {
+				deny: `CCC 治理文件 "${rel}" 保留给用户，agent 不可写`,
+				kind: "deny"
+			};
+			const hit = matchBlacklist(rel, blacklist);
+			if (hit) return {
+				deny: hit.message ?? `blacklist blocked: "${pathArg}" 命中规则 "${hit.pattern}"`,
+				kind: "deny"
+			};
+		}
 	}
 	return { kind: "allow" };
 }
@@ -3682,6 +3684,8 @@ function readBootstrapConfig(agent) {
 function registerBootstrap(ctx) {
 	const settingsByRoot = /* @__PURE__ */ new Map();
 	const trackers = /* @__PURE__ */ new Map();
+	/** 已锚定会话（进程内防重：子 agent 每会话只锚定一次） */
+	const anchoredSessions = /* @__PURE__ */ new Set();
 	const trackerFor = (root, settings) => {
 		let t = trackers.get(root);
 		if (!t) {
@@ -3707,8 +3711,11 @@ function registerBootstrap(ctx) {
 			if (!root) return;
 			const settings = settingsByRoot.get(root) ?? readBootstrapConfig(agent);
 			const session = agent.session;
-			if ((session?.header?.delegationDepth ?? 0) > 0) return;
-			if (session?.events?.some((event) => event.type === "user/message")) return;
+			const depth = session?.header?.delegationDepth ?? 0;
+			const sid = typeof session?.id === "string" ? session.id : void 0;
+			if (depth === 0) {
+				if (session?.events?.some((event) => event.type === "user/message")) return;
+			} else if (sid !== void 0 && anchoredSessions.has(sid)) return;
 			if (message?.source?.kind === "plugin") return;
 			const inbox = agent.inbox;
 			if (!inbox?.prepend) return;
@@ -3726,6 +3733,7 @@ function registerBootstrap(ctx) {
 					summary: "bootstrap anchor turn"
 				}
 			});
+			if (sid !== void 0) anchoredSessions.add(sid);
 			warnOnce(`anchor turns injected: ${settings.anchorMessages.length} 条（${settings.anchorMessages[0].slice(0, 40)}…）`);
 		} catch {}
 	});
@@ -4250,9 +4258,14 @@ function codeModeAdaptationLine(ctx, scope) {
 		""
 	].join("\n");
 }
-/** 从 assembly context 解析 agent cwd（subagent/后台 agent 同样带 agent） */
+/** 从 assembly context 解析 agent cwd（subagent/后台 agent 同样带 agent）；
+*  无 agent → undefined（不注入）；有 agent 但无 header.cwd（workflow subagent 等）
+*  回退 process.cwd()——对齐 context.ts，否则这些 agent 系统提示词注入为空
+*  （v1.18.6：workflow subagent 无宁静号上下文 bug） */
 function agentCwd(context) {
-	return (context.agent?.session)?.header?.cwd;
+	const agent = context.agent;
+	if (!agent) return void 0;
+	return agent.session?.header?.cwd ?? process.cwd();
 }
 /** 从 assembly context 解析 dsh 会话 id（Session 块按会话隔离的 scope） */
 function agentScope$1(context) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shgroup/dsh-serenity-hooks",
-  "version": "1.18.4",
+  "version": "1.18.6",
   "description": "宁静号 ACC harness — Native Cordis 插件（DeepSeek Harness 运行时）。真实 DSH 工具注册（cc_fs/session/acc_msm 等 9 工具）+ 拦截缝机械约束（safe-mode/路径守卫/会话落盘）+ 系统提示词注入（ACC/CCE/Constraints/SKILL/Session 五块）。适配 DSH 公开版（deepseek-ai/deepseek-harness 0.1.0-rc）。",
   "license": "MIT",
   "repository": {