@shgroup/dsh-serenity-hooks 1.28.0 → 1.28.1

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-serenity-hooks",
-  "version": "1.28.0",
+  "version": "1.28.1",
   "main": "lib/index.js",
   "description": "宁静号 ACC harness（Native Cordis 插件）：真实 DSH 工具 cc_fs/session/acc_msm/eap/neat/cce/handyman/session_rebuild/skiff_admin + 拦截缝机械约束（safe-mode/路径守卫）+ 高级设定面板（双端口网关/账号管理）+ Skiff 认知子集角色（实验性）。适配 DSH 公开版（0.1.0-rc，deepseek-ai/deepseek-harness）。",
   "engines": {

package/lib/client.js

@@ -3206,44 +3206,18 @@ window.__ModuleLoader__.load({
 			return null;
 		}
 		const CONFIG_PATH = "/serenity/config";
-		/**
-		* 获取已有工作区列表（需求 1：白名单从已有工作区选择而非手输）。
-		* 走 DSH 原生 RPC `POST /api/workspace.list`（JSON RPC 形态）。
-		* 信封必须是完整 ClientRequest：`{ type: 'client-request', rpcId, method, payload }`
-		* （api/rpc.ts wire 契约——缺 type/method → clientRequestSchema 校验失败 → bad-request）。
-		* 返回 { path, title }[]；失败返回空数组（面板显示"暂无可选工作区"）。
-		*/
-		async function fetchWorkspaces() {
-			try {
-				const res = await fetch("/api/workspace.list", {
-					method: "POST",
-					headers: { "content-type": "application/json" },
-					body: JSON.stringify({
-						type: "client-request",
-						rpcId: `ws-${Date.now().toString(36)}`,
-						method: "workspace.list",
-						payload: {}
-					})
-				});
-				if (!res.ok) return [];
-				const items = (await res.json())?.result?.value?.items;
-				if (!Array.isArray(items)) return [];
-				return items.filter((i) => typeof i.path === "string" && i.path !== "").map((i) => ({
-					path: i.path,
-					title: typeof i.title === "string" && i.title !== "" ? i.title : i.path
-				}));
-			} catch {
-				return [];
-			}
-		}
-		/** GET 配置（含账号列表；无 hash） */
+		/** GET 配置（含账号列表 + knownWorkspaces；无 hash） */
 		async function fetchConfig() {
 			const res = await fetch(CONFIG_PATH, { headers: {
 				accept: "application/json",
 				"x-serenity-ui": "1"
 			} });
 			if (!res.ok) return null;
-			return (await res.json()).config ?? null;
+			const body = await res.json();
+			return {
+				config: body.config ?? null,
+				knownWorkspaces: body.knownWorkspaces ?? []
+			};
 		}
 		/** PUT 配置（账号 patch + 工作区白名单 + persona 彩蛋 + 开放容器白名单）→ 返回保存后的 wire */
 		async function saveConfig(patch) {
@@ -3303,9 +3277,10 @@ window.__ModuleLoader__.load({
 			const [saved, setSaved] = (0, react.useState)(false);
 			(0, react.useEffect)(() => {
 				let alive = true;
-				Promise.all([fetchConfig(), fetchWorkspaces()]).then(([cfg, wss]) => {
+				fetchConfig().then((resp) => {
 					if (!alive) return;
-					setKnownWorkspaces(wss);
+					const cfg = resp?.config ?? null;
+					setKnownWorkspaces(resp?.knownWorkspaces ?? []);
 					if (cfg) {
 						setConfig(cfg);
 						setHost(cfg.gateway.host);
@@ -3734,8 +3709,8 @@ Instruction-following style:
 				let alive = true;
 				fetchConfig().then((cfg) => {
 					if (!alive || !cfg) return;
-					setMode(cfg.persona?.mode ?? "");
-					setOverrideText(cfg.persona?.overrideText ?? "");
+					setMode(cfg.config?.persona?.mode ?? "");
+					setOverrideText(cfg.config?.persona?.overrideText ?? "");
 					setLoaded(true);
 				});
 				return () => {
@@ -3893,7 +3868,7 @@ Instruction-following style:
 					try {
 						const cfg = await fetchConfig();
 						if (!alive) return;
-						setAllowed(cfg?.publicAsk?.allowed ?? []);
+						setAllowed(cfg?.config?.publicAsk?.allowed ?? []);
 					} catch {}
 				})();
 				return () => {

package/lib/config-ops.d.ts

@@ -150,6 +150,19 @@ export interface AdvancedSettingsWire {
 }
 /** 持久化 → wire（剥离 passHash/totpSecret；只留布尔） */
 export declare function toWire(settings: AdvancedSettings): AdvancedSettingsWire;
+/**
+ * 已知工作区投影（v1.28.0 适配 0.1.2-rc.1 A2 方案 A′）：
+ * rc.1 workspace.list unary 删除 → AccountsEditor 白名单下拉的数据源改走 gateway 自有
+ * /serenity/config 的 knownWorkspaces（host workspaceRegistry.list() 投影，白名单过滤）。
+ * 纯函数可单测。allowPrefixes 空 = 全部放行（向后兼容默认）。
+ */
+export declare function projectKnownWorkspaces(workspaces: Array<{
+    path?: string;
+    title?: string;
+}>, allowPrefixes: readonly string[]): Array<{
+    path: string;
+    title: string;
+}>;
 /**
  * wire → 持久化（面板 PUT 用）：
  * accounts 元素可选带 `pass`：非空 → 重新 hash；空/缺省 → 保留现有 hash（按 id 匹配）。

package/lib/index.d.ts

@@ -14,7 +14,8 @@
 import type { Context } from 'cordis';
 import z from '@deepseek-ai/schemastery';
 export declare const name = "dsh-serenity-hooks";
-/** 主动调用的服务；其余（agent 事件）随 harness 装配必然存在 */
+/** 主动调用的服务；其余（agent 事件）随 harness 装配必然存在
+ *  （v1.28.0 适配 0.1.2-rc.1：+ 'settings'——B4 settings 服务由 provider 插件加载后才有） */
 export declare const inject: string[];
 /** 插件配置（cordis.yml 提供；进程级） */
 export interface Config {

package/lib/index.js

@@ -1,9 +1,9 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
 import { a as findSerenityRoot, c as matchBlacklist, d as readCccName$2, f as readHandymanConfig, i as findGitRoot, l as pathInside, m as resolveInside, n as SAFE_MODE_MARKER, o as isSafeModeOn, r as classifyPath, s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS, u as readBlacklist } from "./ccc-CX48YNUL.js";
 import { a as resolveRoleSystemPrompt, i as readSkiffRoles, l as systemPromptSource, r as isSkiffSessionId, s as roleToolWhitelist } from "./skiff-role-BTdBHyOQ.js";
-import { C as splitModel, E as skiffRoleFor, S as requireWhitelistedModel, T as writeProgress, _ as buildRoundPrompt, a as startSkiffDebugServer, b as newStopToken, c as askSkiff, d as skiffMsmGate, f as skiffSessionInfo, g as HANDYMAN_GUIDE, h as unregisterSkiffSession, l as createSkiffAgent, m as skiffTrajectoryEnabled, n as jscSafeJsonText, o as stopSkiffDebugServer, p as skiffSessionSnapshot, r as renderSkiffMarkdown, s as stripThink, t as discoverCccs, u as getSkiffAgent, v as handymanProgressPaths, w as writeFailedStatus, x as readProgress, y as listActiveHandymen } from "./skiff-debug-DIf_Uenr.js";
+import { C as splitModel, E as skiffRoleFor, S as requireWhitelistedModel, T as writeProgress, _ as buildRoundPrompt, a as startSkiffDebugServer, b as newStopToken, c as askSkiff, d as skiffMsmGate, f as skiffSessionInfo, g as HANDYMAN_GUIDE, h as unregisterSkiffSession, l as createSkiffAgent, m as skiffTrajectoryEnabled, n as jscSafeJsonText, o as stopSkiffDebugServer, p as skiffSessionSnapshot, r as renderSkiffMarkdown, s as stripThink, t as discoverCccs, u as getSkiffAgent, v as handymanProgressPaths, w as writeFailedStatus, x as readProgress, y as listActiveHandymen } from "./skiff-debug-CBU6T2F_.js";
 import { a as readWeixinCredential, c as weixinInboundDir, d as LOCALSTORE_SCOPES, f as checkLocalstoreGitCompliance, h as runLocalStore, i as matchWeixinRoute, l as weixinSessionIdFor, m as readGitTrack, n as extractWeixinText, o as readWeixinSettings, p as localstorePath, r as hasVoiceItem, s as sanitizeFileName$1, t as extractWeixinMedia } from "./weixin-route-DFkRf9ou.js";
-import { n as registerSettingsSection, t as readSimpleSettings } from "./settings-section-DnX9TJxt.js";
+import { n as registerSettingsSection, t as readSimpleSettings } from "./settings-section-BfVxgCZy.js";
 import { a as markdownToPlainText, c as sniffImageExt, i as getUpdates, n as downloadMedia, o as sendTextMessage, r as getConfig, s as sendTyping, t as TypingStatus } from "./weixin-api-OUCuw0Ws.js";
 import z from "@deepseek-ai/schemastery";
 import { defineTool } from "@deepseek-ai/dsh-tools";
@@ -2301,7 +2301,8 @@ function waitIdle(ctx, agent) {
 }
 /** 读取会话最后一个 assistant/message 文本 */
 function lastAssistantText$1(agent) {
-	const events = agent.session.events;
+	const s = agent.session;
+	const events = typeof s.snapshotEvents === "function" ? s.snapshotEvents() : s.events ?? [];
 	for (let i = events.length - 1; i >= 0; i--) {
 		const e = events[i];
 		if (e && e.type === "assistant/message") {
@@ -2567,6 +2568,24 @@ const SESSION_ACTIONS = [
 	"summary",
 	"hook-develop-guide"
 ];
+/**
+* 读取 Session 事件序列（v1.28.1 适配 0.1.2-rc.1 补齐）：rc.1 起官方 Session 类
+* 移除 `.events` 属性 → `snapshotEvents()` 方法（dsh-session/src/session.ts：
+* `snapshotEvents(fromSeq, toSeqExclusive)`）。插件早期代码多处裸读 `.events`
+* （经 `as unknown as { events? }` 断言绕过 typecheck），运行时静默 undefined——
+* 造成 first-anchor 每轮重插 / SESSION 激活恢复失效 / rebuild 定位错乱。
+* 统一收敛到本 helper：snapshotEvents() 优先（rc.1 真实形态），`.events` 兜底
+* （测试替身/旧运行时）。所有消费方一律经此读取，禁止再裸读 `.events`。
+* 泛型 T：调用方按需声明事件形状（如 `SessionEvent`），unknown 默认。
+*/
+function sessionEvents(session) {
+	const s = session;
+	if (!s) return [];
+	if (typeof s.snapshotEvents === "function") try {
+		return s.snapshotEvents() ?? [];
+	} catch {}
+	return s.events ?? [];
+}
 const SESSION_MD = "SESSION.md";
 const ARCHIVE_DIR_NAME = "_archived";
 const HEALTH_STALE_DAYS = 7;
@@ -3524,6 +3543,17 @@ const DEFAULT_COMPACTION_TOOLS = [
 */
 const DEFAULT_ANCHOR_MESSAGES = ["You are the operator agent of Serenity — a cognitive container governed by the Abstract Cognitive Container (ACC) protocol.\nWe operate under the Explicit Abstraction Principle (EAP): the functional value of a thought equals its external reconstructability — every output we produce must be explicit (E↑), reconstructable (R↓), and stable (S↑).\nThe personal pronoun is us/we.\nWe anchor first, then act: the abstract layer precedes the concrete.\nPlease simply reply \"acknowledge\" — no action needed.", "Before we proceed, align on how we work:\n1. We read before we write — every decision grounds in what already exists in the container.\n2. Every output records its reasoning (R↓): decisions carry reasons and alternatives.\n3. We never jump levels — abstract layer first, then specifics.\n4. Every artifact we create is a durable cognitive anchor for the work that follows.\n5. We keep the container's state coherent (SESSION.md) as we advance.\nPlease simply reply \"acknowledge\" — no action needed."];
 /**
+* 根会话锚定重入判定（v1.28.1 提取导出以便单测）：会话是否已有真实用户消息。
+* resume/续跑的会话已有对话历史 → **不重锚**（first-anchor 只注入一次）。
+*
+* 0.1.2-rc.1 适配教训：裸读 `session.events`（经类型断言）恒 undefined →
+* `!undefined` 恒 true → 有历史也永不跳过 → 任何情况发消息都重插 first-anchor。
+* 统一经 sessionEvents() 读取（snapshotEvents() 优先，.events 兜底）。
+*/
+function hasUserMessageHistory(session) {
+	return sessionEvents(session).some((event) => event.type === "user/message");
+}
+/**
 * 构建一个 epoch 感知晋升跟踪器（纯逻辑，可单测）。
 * requiredSignals：晋升所需信号数（boundary 后累计；默认 1）。
 * 多轮锚定（v4）：两轮递进锚定时 requiredSignals = 锚定轮数——
@@ -3552,8 +3582,8 @@ function createEpochPromotion(promoteEvents, requiredSignals = 1, maxRoundsFallb
 		let boundary = -1;
 		let signalCount = 0;
 		let rounds = 0;
-		const events = session?.events;
-		if (Array.isArray(events)) for (const event of events) {
+		const events = sessionEvents(session);
+		if (events.length > 0) for (const event of events) {
 			const e = event;
 			const seq = typeof e.seq === "number" ? e.seq : 0;
 			if (e.type === "compaction/end") {
@@ -3695,7 +3725,7 @@ function registerBootstrap(ctx) {
 			const sid = typeof session?.id === "string" ? session.id : void 0;
 			if (sid !== void 0 && (sid.startsWith("handyman-") || isSkiffSessionId(sid))) return;
 			if (depth === 0) {
-				if (session?.events?.some((event) => event.type === "user/message")) return;
+				if (hasUserMessageHistory(session)) return;
 			} else if (sid !== void 0 && anchoredSessions.has(sid)) return;
 			if (message?.source?.kind === "plugin") return;
 			const inbox = agent.inbox;
@@ -3834,8 +3864,8 @@ function parseAnchorMdPath(session) {
 	try {
 		const nodes = [...session.surface.nodes];
 		if (nodes.length === 0) return null;
-		const events = session.events;
-		if (!Array.isArray(events)) return null;
+		const events = sessionEvents(session);
+		if (events.length === 0) return null;
 		const event = events[nodes[0]];
 		if (!event) return null;
 		const message = deriveEventMessage(event);
@@ -3860,8 +3890,8 @@ function sessionNameFromMdPath(mdPath) {
 function resolveSessionMdPath(root, scope, session) {
 	const candidates = [];
 	candidates.push(getActiveSessionInfo(scope)?.mdPath ?? null);
-	const events = session.events;
-	if (Array.isArray(events)) candidates.push(parseSessionContextFromEvents(events)?.mdPath ?? null);
+	const events = sessionEvents(session);
+	if (events.length > 0) candidates.push(parseSessionContextFromEvents(events)?.mdPath ?? null);
 	candidates.push(parseAnchorMdPath(session));
 	candidates.push(findLatestActiveSessionMd(root));
 	for (const c of candidates) {
@@ -3953,8 +3983,9 @@ function performRebuild(session, pending, meter) {
 	if (nodes.length === 0) return false;
 	if (meter) {
 		let shadowedTokenCount = 0;
+		const events = sessionEvents(session);
 		for (const seq of nodes) {
-			const event = session.events?.[seq];
+			const event = events[seq];
 			if (!event) continue;
 			const message = deriveEventMessage(event);
 			if (message) shadowedTokenCount += meter.estimateMessage(message);
@@ -4765,8 +4796,7 @@ function resolveTargetAgent(ctx, mdPath) {
 */
 function readSessionTitle(session) {
 	try {
-		const events = session?.events;
-		if (!Array.isArray(events)) return null;
+		const events = sessionEvents(session);
 		for (let i = events.length - 1; i >= 0; i--) {
 			const e = events[i];
 			if (e?.type === "session/title" && typeof e.data?.title === "string" && e.data.title.trim() !== "") return e.data.title.trim();
@@ -5603,6 +5633,18 @@ function toWire(settings) {
 	};
 }
 /**
+* 已知工作区投影（v1.28.0 适配 0.1.2-rc.1 A2 方案 A′）：
+* rc.1 workspace.list unary 删除 → AccountsEditor 白名单下拉的数据源改走 gateway 自有
+* /serenity/config 的 knownWorkspaces（host workspaceRegistry.list() 投影，白名单过滤）。
+* 纯函数可单测。allowPrefixes 空 = 全部放行（向后兼容默认）。
+*/
+function projectKnownWorkspaces(workspaces, allowPrefixes) {
+	return workspaces.filter((w) => typeof w.path === "string" && w.path !== "").filter((w) => allowPrefixes.length === 0 || allowPrefixes.some((p) => w.path.startsWith(p))).map((w) => ({
+		path: w.path,
+		title: typeof w.title === "string" && w.title !== "" ? w.title : w.path
+	}));
+}
+/**
 * wire → 持久化（面板 PUT 用）：
 * accounts 元素可选带 `pass`：非空 → 重新 hash；空/缺省 → 保留现有 hash（按 id 匹配）。
 * 新账号（id 不在现有）必须带非空 pass，否则抛错（无法生成 hash）。
@@ -6264,8 +6306,7 @@ function shouldAutoRestore(agent) {
 */
 function shouldRestoreActive(agent) {
 	if (!shouldAutoRestore(agent)) return false;
-	const events = agent.session?.events;
-	return Array.isArray(events) && events.length > 0;
+	return sessionEvents(agent.session).length > 0;
 }
 function registerContext(ctx, opts = {}) {
 	const configPaths = opts.configPaths ?? DEFAULT_SERENITY_CONFIG_PATHS;
@@ -6280,7 +6321,7 @@ function registerContext(ctx, opts = {}) {
 		const scope = agentScope(agent);
 		if (shouldRestoreActive(agent) && getActiveSessionInfo(scope) === null) try {
 			if (loadSerenityConfig(root, configPaths).hooks?.autoRestoreSession ?? true) {
-				const info = parseSessionContextFromEvents(agent.session.events ?? []);
+				const info = parseSessionContextFromEvents(sessionEvents(agent.session));
 				if (info) {
 					const abs = info.mdPath.startsWith(root) ? info.mdPath : resolve(root, info.mdPath);
 					if (existsSync(abs)) {
@@ -6635,7 +6676,16 @@ function registerStatusApi(ctx, opts = {}) {
 					return;
 				}
 				if (req.method === "GET") {
-					sendJson$1(res, 200, { config: toWire(readAdvancedSettings()) });
+					const settings = readAdvancedSettings();
+					let known = [];
+					try {
+						const registry = ctx.get?.("workspaceRegistry");
+						known = projectKnownWorkspaces(registry?.list?.() ?? [], settings.gateway.workspaces);
+					} catch {}
+					sendJson$1(res, 200, {
+						config: toWire(settings),
+						knownWorkspaces: known
+					});
 					return;
 				}
 				if (req.method === "PUT") {
@@ -6668,7 +6718,7 @@ function registerStatusApi(ctx, opts = {}) {
 					workspace: url.searchParams.get("workspace") ?? void 0
 				});
 				const root = findSerenityRoot(workspace) ?? "";
-				const { discoverCccs } = await import("./skiff-debug-DIf_Uenr.js").then((n) => n.i);
+				const { discoverCccs } = await import("./skiff-debug-CBU6T2F_.js").then((n) => n.i);
 				sendJson$1(res, 200, { cccs: await discoverCccs(ctx, root) });
 			} catch (err) {
 				sendJson$1(res, 400, { error: err.message ?? String(err) });
@@ -6698,7 +6748,7 @@ function registerStatusApi(ctx, opts = {}) {
 					return;
 				}
 				const settings = readAdvancedSettings();
-				const { readSimpleSettings } = await import("./settings-section-DnX9TJxt.js").then((n) => n.r);
+				const { readSimpleSettings } = await import("./settings-section-BfVxgCZy.js").then((n) => n.r);
 				const simple = readSimpleSettings();
 				const allowed = settings.publicAsk.allowed;
 				const port = simple.acpHttpPort ?? 3100;
@@ -7381,25 +7431,6 @@ const RANDOM_UUID_POLYFILL = `<script>
 /** 注入标记（幂等：已注入的 HTML 不重复注入） */
 const POLYFILL_MARKER = "data-sp-randomuuid-polyfill";
 /**
-* workspace.list 响应过滤（v1.22 白名单）：
-* DSH client→server RPC 全部走 HTTP JSON（`POST /api/workspace.list`，WS 仅下行推送）。
-* 白名单（workspaces 路径前缀）非空 → 只保留匹配前缀的 items；
-* 空 = 全部允许（默认，向后兼容）。
-*/
-function filterWorkspaceList(body, allowPrefixes) {
-	if (allowPrefixes.length === 0) return body;
-	try {
-		const parsed = JSON.parse(body);
-		const value = parsed?.result?.value;
-		if (parsed?.result?.ok !== true || !value || !Array.isArray(value.items)) return body;
-		const keep = (path) => typeof path === "string" && allowPrefixes.some((p) => path.startsWith(p));
-		value.items = value.items.filter((item) => keep(item.path));
-		return JSON.stringify(parsed);
-	} catch {
-		return body;
-	}
-}
-/**
 * 校验 workspace.create 请求路径是否在白名单内（v1.22）：
 * 白名单非空且路径不匹配 → 拒绝（由调用方构造 403 RPC 响应）。
 */
@@ -7485,8 +7516,6 @@ function startGateway(config, getAccounts) {
 	* @param bodyOverride - workspace.create 已读 body 时的重放（白名单检查后转发）
 	*/
 	const proxy = (req, res, bodyOverride) => {
-		const url = new URL(req.url ?? "/", `http://${host}:${port}`);
-		const method = req.method === "POST" && url.pathname.startsWith("/api/") ? url.pathname.slice(5) : null;
 		const headers = buildProxyHeaders(req.headers, mainPort, bodyOverride);
 		const target = request({
 			host: "127.0.0.1",
@@ -7516,25 +7545,6 @@ function startGateway(config, getAccounts) {
 				});
 				return;
 			}
-			if (method === "workspace.list" && status === 200 && ct.includes("application/json")) {
-				const chunks = [];
-				upstream.on("data", (c) => chunks.push(c));
-				upstream.on("end", () => {
-					const transformed = filterWorkspaceList(Buffer.concat(chunks).toString("utf-8"), allowWorkspaces);
-					const out = {
-						...upstream.headers,
-						"content-length": Buffer.byteLength(transformed)
-					};
-					res.writeHead(status, out);
-					res.end(transformed);
-				});
-				upstream.on("error", () => {
-					try {
-						res.destroy();
-					} catch {}
-				});
-				return;
-			}
 			res.writeHead(status, upstream.headers);
 			upstream.pipe(res);
 			upstream.on("error", () => {
@@ -8055,7 +8065,7 @@ function isExternalFaceSession(sessionId) {
 *  否则 think 内提及内部机制词（思考过程必然推演机制）会误打回。复用 stripThink
 *  （v1.26.8 状态机，弃正则——同 v1.27.1 微信桥回复链路）。 */
 function lastAssistantText(agent) {
-	const events = agent.session.events ?? [];
+	const events = sessionEvents(agent.session);
 	for (let i = events.length - 1; i >= 0; i--) {
 		const e = events[i];
 		if (e && e.type === "assistant/message") {
@@ -9332,7 +9342,8 @@ function registerWeixinBridge(ctx) {
 //#endregion
 //#region src/index.ts
 const name = "dsh-serenity-hooks";
-/** 主动调用的服务；其余（agent 事件）随 harness 装配必然存在 */
+/** 主动调用的服务；其余（agent 事件）随 harness 装配必然存在
+*  （v1.28.0 适配 0.1.2-rc.1：+ 'settings'——B4 settings 服务由 provider 插件加载后才有） */
 const inject = [
 	"tools",
 	"webServer",
@@ -9342,7 +9353,8 @@ const inject = [
 	"agentLoop",
 	"agents",
 	"systemPrompt",
-	"sessionProjections"
+	"sessionProjections",
+	"settings"
 ];
 const Config = z.object({
 	serenityConfigPaths: z.array(z.string()).default([...DEFAULT_SERENITY_CONFIG_PATHS]),

package/lib/seams/bootstrap.d.ts

@@ -50,6 +50,15 @@ export declare const DEFAULT_COMPACTION_TOOLS: string[];
  * 文本 = 原 home-serenity CCC 配置（anchorMessages），随零配置化固化进代码。
  */
 export declare const DEFAULT_ANCHOR_MESSAGES: string[];
+/**
+ * 根会话锚定重入判定（v1.28.1 提取导出以便单测）：会话是否已有真实用户消息。
+ * resume/续跑的会话已有对话历史 → **不重锚**（first-anchor 只注入一次）。
+ *
+ * 0.1.2-rc.1 适配教训：裸读 `session.events`（经类型断言）恒 undefined →
+ * `!undefined` 恒 true → 有历史也永不跳过 → 任何情况发消息都重插 first-anchor。
+ * 统一经 sessionEvents() 读取（snapshotEvents() 优先，.events 兜底）。
+ */
+export declare function hasUserMessageHistory(session: unknown): boolean;
 export interface PromotionStatus {
     /** 最后一次 compaction/end 的 seq（-1 = 未压缩过） */
     boundary: number;

package/lib/session-ops.d.ts

@@ -12,6 +12,17 @@
 import type { JsonValue } from './json.js';
 export type SessionAction = 'list' | 'show' | 'create' | 'use' | 'close' | 'health' | 'qa' | 'archive' | 'summary' | 'hook-develop-guide';
 export declare const SESSION_ACTIONS: readonly SessionAction[];
+/**
+ * 读取 Session 事件序列（v1.28.1 适配 0.1.2-rc.1 补齐）：rc.1 起官方 Session 类
+ * 移除 `.events` 属性 → `snapshotEvents()` 方法（dsh-session/src/session.ts：
+ * `snapshotEvents(fromSeq, toSeqExclusive)`）。插件早期代码多处裸读 `.events`
+ * （经 `as unknown as { events? }` 断言绕过 typecheck），运行时静默 undefined——
+ * 造成 first-anchor 每轮重插 / SESSION 激活恢复失效 / rebuild 定位错乱。
+ * 统一收敛到本 helper：snapshotEvents() 优先（rc.1 真实形态），`.events` 兜底
+ * （测试替身/旧运行时）。所有消费方一律经此读取，禁止再裸读 `.events`。
+ * 泛型 T：调用方按需声明事件形状（如 `SessionEvent`），unknown 默认。
+ */
+export declare function sessionEvents<T = unknown>(session: unknown): readonly T[];
 export declare function sessionsRoot(root: string): string;
 interface SessionStatus {
     hasSessionMd: boolean;

package/lib/settings-section-BfVxgCZy.js

@@ -0,0 +1,91 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
+import z from "@deepseek-ai/schemastery";
+//#region src/settings-section.ts
+var settings_section_exports = /* @__PURE__ */ __exportAll({
+	SERENITY_SETTINGS_NS: () => SERENITY_SETTINGS_NS,
+	defaultSimpleSettings: () => defaultSimpleSettings,
+	entryDefaults: () => entryDefaults,
+	readSimpleSettings: () => readSimpleSettings,
+	registerSettingsSection: () => registerSettingsSection,
+	simpleSettingsSchema: () => simpleSettingsSchema
+});
+/** 简单配置命名空间（dsh 设置面板的 section id / settings.yaml section） */
+const SERENITY_SETTINGS_NS = "serenity-hooks";
+/** schemastery schema（与 DSH 各插件 Config 同款） */
+const simpleSettingsSchema = z.object({
+	gatewayEnabled: z.boolean().default(false),
+	rebuildEnabled: z.boolean().default(true),
+	rebuildThresholdK: z.number().min(50).max(4e3).default(400),
+	skiffEnabled: z.boolean().default(false),
+	skiffDebugPort: z.number().min(1024).max(65535).default(3099),
+	acpEnabled: z.boolean().default(false),
+	acpHttpPort: z.number().min(1024).max(65535).default(3100),
+	publicAskEnabled: z.boolean().default(false),
+	autopilotEnabled: z.boolean().default(false)
+});
+/** 从插件 Config 提取 entry 默认（settings base 层） */
+function entryDefaults(config) {
+	return {
+		gatewayEnabled: config.gateway?.enabled ?? false,
+		rebuildEnabled: config.rebuild?.enabled ?? true,
+		rebuildThresholdK: config.rebuild?.thresholdK ?? 400,
+		skiffEnabled: config.skiff?.enabled ?? false,
+		skiffDebugPort: config.skiff?.debugPort ?? 3099,
+		acpEnabled: config.acp?.enabled ?? false,
+		acpHttpPort: config.acp?.httpPort ?? 3100,
+		publicAskEnabled: config.publicAsk?.enabled ?? false,
+		autopilotEnabled: false
+	};
+}
+/** 运行时源（installSettingsSection 注入：settings scope 或 entry fallback） */
+let simpleSource = null;
+/** 进程级默认（无 settings 服务时的兜底） */
+function defaultSimpleSettings() {
+	return {
+		gatewayEnabled: false,
+		rebuildEnabled: true,
+		rebuildThresholdK: 400,
+		skiffEnabled: false,
+		skiffDebugPort: 3099,
+		acpEnabled: false,
+		acpHttpPort: 3100,
+		publicAskEnabled: false,
+		autopilotEnabled: false
+	};
+}
+/**
+* 读取当前简单配置（settings 解析值；无 provider/未注册 → entry 默认）。
+* 各功能（gateway/rebuild/naming）启动与运行时判断开关都经此函数。
+*/
+function readSimpleSettings() {
+	return simpleSource ? simpleSource() : defaultSimpleSettings();
+}
+/**
+* 注册简单配置到 DSH settings（零改 DSH；settings.yaml 持久化 + 原生面板渲染）。
+* 注：插件 Config（cordis.yml 组合层）作为 base；用户文档层叠加其上。
+* 运行时读取简单配置统一经 `readSimpleSettings()`。
+* v1.28.0 适配 0.1.2-rc.1（B4）：`installSettingsSection`/`settingsNamespace` 便捷函数在
+* rc.1 消失 → 改 `SettingsProvider.installSection(owner, ns, schema, entry, hooks)`
+* （owner = consumer 插件 ctx；ns 直接字符串）。
+*/
+function registerSettingsSection(ctx, config) {
+	const hooks = {
+		setSource: (get) => {
+			simpleSource = get;
+		},
+		onChange: () => {
+			try {
+				ctx.emit?.("serenity/settings-changed");
+			} catch {}
+		}
+	};
+	const settingsAny = ctx.settings;
+	if (settingsAny) {
+		settingsAny.installSection.call(settingsAny, ctx, SERENITY_SETTINGS_NS, simpleSettingsSchema, entryDefaults(config), hooks);
+		return;
+	}
+	hooks.setSource(() => ({}));
+	hooks.onChange();
+}
+//#endregion
+export { registerSettingsSection as n, settings_section_exports as r, readSimpleSettings as t };

package/lib/settings-section.d.ts

@@ -4,8 +4,9 @@
  * 分层决策（S142）：**简单配置（开关/阈值）→ dsh 原生设置面板**；
  * **复杂配置（账号列表）→ 宁静号高级面板**（localstore + /serenity/config）。
  *
- * 本模块承载简单配置层：`installSettingsSection(ctx, settingsNamespace('serenity-hooks'), schema, entry)`
+ * 本模块承载简单配置层：`SettingsProvider.installSection(ctx, 'serenity-hooks', schema, entry)`
  * 注册 `serenity-hooks` namespace——三功能总开关 + F2 阈值。
+ * （v1.28.0 适配 0.1.2-rc.1：installSettingsSection/settingsNamespace 便捷函数消失 → 方法调用）
  *
  * 运行时降级守卫（版本鲁棒性）：旧 RC（staging 架构）api-proxy 有
  * `WEB_SETTINGS_NAMESPACES` 静态白名单，第三方 ns 会收到 settings-not-exposed
@@ -107,5 +108,8 @@ export declare function __setSimpleSourceForTest(source: (() => SerenitySimpleSe
  * 注册简单配置到 DSH settings（零改 DSH；settings.yaml 持久化 + 原生面板渲染）。
  * 注：插件 Config（cordis.yml 组合层）作为 base；用户文档层叠加其上。
  * 运行时读取简单配置统一经 `readSimpleSettings()`。
+ * v1.28.0 适配 0.1.2-rc.1（B4）：`installSettingsSection`/`settingsNamespace` 便捷函数在
+ * rc.1 消失 → 改 `SettingsProvider.installSection(owner, ns, schema, entry, hooks)`
+ * （owner = consumer 插件 ctx；ns 直接字符串）。
  */
 export declare function registerSettingsSection(ctx: Context, config: SimpleConfigFragment): void;

package/lib/{skiff-debug-DIf_Uenr.js → skiff-debug-CBU6T2F_.js}

@@ -396,9 +396,20 @@ function waitIdle(ctx, agent) {
 		});
 	});
 }
+/**
+* 会话事件读取（v1.28.0 适配 0.1.2-rc.1）：rc.1 Session 移除 `.events` 属性 → `snapshotEvents()` 方法。
+* 兼容双形态（运行时 rc.1 snapshotEvents；测试替身 events）——同一函数两处语义，测试注入零侵入。
+* 注：与 session-ops.ts 导出的共享 `sessionEvents` 同构（v1.28.1 收敛基准）。本模块保留本地副本
+* 以维持独立 import 面（零 DSH 依赖测试替身形态一致）；若未来重构可统一 import 共享版。
+*/
+function sessionEvents(session) {
+	const s = session;
+	if (typeof s.snapshotEvents === "function") return s.snapshotEvents();
+	return s.events ?? [];
+}
 /** 读会话最后一个 assistant/message 文本（handyman 同款） */
 function lastAssistantText(agent) {
-	const events = agent.session.events;
+	const events = sessionEvents(agent.session);
 	for (let i = events.length - 1; i >= 0; i--) {
 		const e = events[i];
 		if (e && e.type === "assistant/message") {
@@ -462,7 +473,7 @@ function truncate(s, n) {
 *   公开问答页 / ACP JSON-RPC 不返回 trajectory，传 false 跳过计算；3099 调试页默认 true 保留）
 */
 async function askSkiff(ctx, agent, question, eventsStart, options) {
-	const before = eventsStart === void 0 ? agent.session.events.length : eventsStart;
+	const before = eventsStart === void 0 ? sessionEvents(agent.session).length : eventsStart;
 	agent.followup(createUserMessage({
 		content: [{
 			type: "text",
@@ -472,7 +483,7 @@ async function askSkiff(ctx, agent, question, eventsStart, options) {
 	}));
 	await waitIdle(ctx, agent);
 	const answer = lastAssistantText(agent);
-	const trajectory = options?.includeTrajectory === false ? [] : eventsToTrajectory(agent.session.events.slice(before));
+	const trajectory = options?.includeTrajectory === false ? [] : eventsToTrajectory(sessionEvents(agent.session).slice(before));
 	return {
 		answer,
 		sessionId: String(agent.session.id ?? ""),