@shgroup/dsh-serenity-hooks 1.28.0 → 1.28.2

package/lib/index.js

@@ -1,9 +1,9 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
 import { a as findSerenityRoot, c as matchBlacklist, d as readCccName$2, f as readHandymanConfig, i as findGitRoot, l as pathInside, m as resolveInside, n as SAFE_MODE_MARKER, o as isSafeModeOn, r as classifyPath, s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS, u as readBlacklist } from "./ccc-CX48YNUL.js";
 import { a as resolveRoleSystemPrompt, i as readSkiffRoles, l as systemPromptSource, r as isSkiffSessionId, s as roleToolWhitelist } from "./skiff-role-BTdBHyOQ.js";
-import { C as splitModel, E as skiffRoleFor, S as requireWhitelistedModel, T as writeProgress, _ as buildRoundPrompt, a as startSkiffDebugServer, b as newStopToken, c as askSkiff, d as skiffMsmGate, f as skiffSessionInfo, g as HANDYMAN_GUIDE, h as unregisterSkiffSession, l as createSkiffAgent, m as skiffTrajectoryEnabled, n as jscSafeJsonText, o as stopSkiffDebugServer, p as skiffSessionSnapshot, r as renderSkiffMarkdown, s as stripThink, t as discoverCccs, u as getSkiffAgent, v as handymanProgressPaths, w as writeFailedStatus, x as readProgress, y as listActiveHandymen } from "./skiff-debug-DIf_Uenr.js";
+import { C as splitModel, E as skiffRoleFor, S as requireWhitelistedModel, T as writeProgress, _ as buildRoundPrompt, a as startSkiffDebugServer, b as newStopToken, c as askSkiff, d as skiffMsmGate, f as skiffSessionInfo, g as HANDYMAN_GUIDE, h as unregisterSkiffSession, l as createSkiffAgent, m as skiffTrajectoryEnabled, n as jscSafeJsonText, o as stopSkiffDebugServer, p as skiffSessionSnapshot, r as renderSkiffMarkdown, s as stripThink, t as discoverCccs, u as getSkiffAgent, v as handymanProgressPaths, w as writeFailedStatus, x as readProgress, y as listActiveHandymen } from "./skiff-debug-CBU6T2F_.js";
 import { a as readWeixinCredential, c as weixinInboundDir, d as LOCALSTORE_SCOPES, f as checkLocalstoreGitCompliance, h as runLocalStore, i as matchWeixinRoute, l as weixinSessionIdFor, m as readGitTrack, n as extractWeixinText, o as readWeixinSettings, p as localstorePath, r as hasVoiceItem, s as sanitizeFileName$1, t as extractWeixinMedia } from "./weixin-route-DFkRf9ou.js";
-import { n as registerSettingsSection, t as readSimpleSettings } from "./settings-section-DnX9TJxt.js";
+import { n as registerSettingsSection, t as readSimpleSettings } from "./settings-section-BfVxgCZy.js";
 import { a as markdownToPlainText, c as sniffImageExt, i as getUpdates, n as downloadMedia, o as sendTextMessage, r as getConfig, s as sendTyping, t as TypingStatus } from "./weixin-api-OUCuw0Ws.js";
 import z from "@deepseek-ai/schemastery";
 import { defineTool } from "@deepseek-ai/dsh-tools";
@@ -18,6 +18,7 @@ import { createUserMessage } from "@deepseek-ai/dsh-llm";
 import { createHmac, randomBytes, randomUUID, scryptSync, timingSafeEqual } from "node:crypto";
 import { deriveEventMessage } from "@deepseek-ai/dsh-session";
 import { createServer, request } from "node:http";
+import * as zlib from "node:zlib";
 //#region src/fs-ops.ts
 /**
 * fs-ops.ts — cc_fs 纯操作层（零 DSH 依赖，可独立单测）
@@ -2301,7 +2302,8 @@ function waitIdle(ctx, agent) {
 }
 /** 读取会话最后一个 assistant/message 文本 */
 function lastAssistantText$1(agent) {
-	const events = agent.session.events;
+	const s = agent.session;
+	const events = typeof s.snapshotEvents === "function" ? s.snapshotEvents() : s.events ?? [];
 	for (let i = events.length - 1; i >= 0; i--) {
 		const e = events[i];
 		if (e && e.type === "assistant/message") {
@@ -2567,6 +2569,24 @@ const SESSION_ACTIONS = [
 	"summary",
 	"hook-develop-guide"
 ];
+/**
+* 读取 Session 事件序列（v1.28.1 适配 0.1.2-rc.1 补齐）：rc.1 起官方 Session 类
+* 移除 `.events` 属性 → `snapshotEvents()` 方法（dsh-session/src/session.ts：
+* `snapshotEvents(fromSeq, toSeqExclusive)`）。插件早期代码多处裸读 `.events`
+* （经 `as unknown as { events? }` 断言绕过 typecheck），运行时静默 undefined——
+* 造成 first-anchor 每轮重插 / SESSION 激活恢复失效 / rebuild 定位错乱。
+* 统一收敛到本 helper：snapshotEvents() 优先（rc.1 真实形态），`.events` 兜底
+* （测试替身/旧运行时）。所有消费方一律经此读取，禁止再裸读 `.events`。
+* 泛型 T：调用方按需声明事件形状（如 `SessionEvent`），unknown 默认。
+*/
+function sessionEvents(session) {
+	const s = session;
+	if (!s) return [];
+	if (typeof s.snapshotEvents === "function") try {
+		return s.snapshotEvents() ?? [];
+	} catch {}
+	return s.events ?? [];
+}
 const SESSION_MD = "SESSION.md";
 const ARCHIVE_DIR_NAME = "_archived";
 const HEALTH_STALE_DAYS = 7;
@@ -3524,6 +3544,17 @@ const DEFAULT_COMPACTION_TOOLS = [
 */
 const DEFAULT_ANCHOR_MESSAGES = ["You are the operator agent of Serenity — a cognitive container governed by the Abstract Cognitive Container (ACC) protocol.\nWe operate under the Explicit Abstraction Principle (EAP): the functional value of a thought equals its external reconstructability — every output we produce must be explicit (E↑), reconstructable (R↓), and stable (S↑).\nThe personal pronoun is us/we.\nWe anchor first, then act: the abstract layer precedes the concrete.\nPlease simply reply \"acknowledge\" — no action needed.", "Before we proceed, align on how we work:\n1. We read before we write — every decision grounds in what already exists in the container.\n2. Every output records its reasoning (R↓): decisions carry reasons and alternatives.\n3. We never jump levels — abstract layer first, then specifics.\n4. Every artifact we create is a durable cognitive anchor for the work that follows.\n5. We keep the container's state coherent (SESSION.md) as we advance.\nPlease simply reply \"acknowledge\" — no action needed."];
 /**
+* 根会话锚定重入判定（v1.28.1 提取导出以便单测）：会话是否已有真实用户消息。
+* resume/续跑的会话已有对话历史 → **不重锚**（first-anchor 只注入一次）。
+*
+* 0.1.2-rc.1 适配教训：裸读 `session.events`（经类型断言）恒 undefined →
+* `!undefined` 恒 true → 有历史也永不跳过 → 任何情况发消息都重插 first-anchor。
+* 统一经 sessionEvents() 读取（snapshotEvents() 优先，.events 兜底）。
+*/
+function hasUserMessageHistory(session) {
+	return sessionEvents(session).some((event) => event.type === "user/message");
+}
+/**
 * 构建一个 epoch 感知晋升跟踪器（纯逻辑，可单测）。
 * requiredSignals：晋升所需信号数（boundary 后累计；默认 1）。
 * 多轮锚定（v4）：两轮递进锚定时 requiredSignals = 锚定轮数——
@@ -3552,8 +3583,8 @@ function createEpochPromotion(promoteEvents, requiredSignals = 1, maxRoundsFallb
 		let boundary = -1;
 		let signalCount = 0;
 		let rounds = 0;
-		const events = session?.events;
-		if (Array.isArray(events)) for (const event of events) {
+		const events = sessionEvents(session);
+		if (events.length > 0) for (const event of events) {
 			const e = event;
 			const seq = typeof e.seq === "number" ? e.seq : 0;
 			if (e.type === "compaction/end") {
@@ -3695,7 +3726,7 @@ function registerBootstrap(ctx) {
 			const sid = typeof session?.id === "string" ? session.id : void 0;
 			if (sid !== void 0 && (sid.startsWith("handyman-") || isSkiffSessionId(sid))) return;
 			if (depth === 0) {
-				if (session?.events?.some((event) => event.type === "user/message")) return;
+				if (hasUserMessageHistory(session)) return;
 			} else if (sid !== void 0 && anchoredSessions.has(sid)) return;
 			if (message?.source?.kind === "plugin") return;
 			const inbox = agent.inbox;
@@ -3834,8 +3865,8 @@ function parseAnchorMdPath(session) {
 	try {
 		const nodes = [...session.surface.nodes];
 		if (nodes.length === 0) return null;
-		const events = session.events;
-		if (!Array.isArray(events)) return null;
+		const events = sessionEvents(session);
+		if (events.length === 0) return null;
 		const event = events[nodes[0]];
 		if (!event) return null;
 		const message = deriveEventMessage(event);
@@ -3860,8 +3891,8 @@ function sessionNameFromMdPath(mdPath) {
 function resolveSessionMdPath(root, scope, session) {
 	const candidates = [];
 	candidates.push(getActiveSessionInfo(scope)?.mdPath ?? null);
-	const events = session.events;
-	if (Array.isArray(events)) candidates.push(parseSessionContextFromEvents(events)?.mdPath ?? null);
+	const events = sessionEvents(session);
+	if (events.length > 0) candidates.push(parseSessionContextFromEvents(events)?.mdPath ?? null);
 	candidates.push(parseAnchorMdPath(session));
 	candidates.push(findLatestActiveSessionMd(root));
 	for (const c of candidates) {
@@ -3953,8 +3984,9 @@ function performRebuild(session, pending, meter) {
 	if (nodes.length === 0) return false;
 	if (meter) {
 		let shadowedTokenCount = 0;
+		const events = sessionEvents(session);
 		for (const seq of nodes) {
-			const event = session.events?.[seq];
+			const event = events[seq];
 			if (!event) continue;
 			const message = deriveEventMessage(event);
 			if (message) shadowedTokenCount += meter.estimateMessage(message);
@@ -4765,8 +4797,7 @@ function resolveTargetAgent(ctx, mdPath) {
 */
 function readSessionTitle(session) {
 	try {
-		const events = session?.events;
-		if (!Array.isArray(events)) return null;
+		const events = sessionEvents(session);
 		for (let i = events.length - 1; i >= 0; i--) {
 			const e = events[i];
 			if (e?.type === "session/title" && typeof e.data?.title === "string" && e.data.title.trim() !== "") return e.data.title.trim();
@@ -5603,6 +5634,18 @@ function toWire(settings) {
 	};
 }
 /**
+* 已知工作区投影（v1.28.0 适配 0.1.2-rc.1 A2 方案 A′）：
+* rc.1 workspace.list unary 删除 → AccountsEditor 白名单下拉的数据源改走 gateway 自有
+* /serenity/config 的 knownWorkspaces（host workspaceRegistry.list() 投影，白名单过滤）。
+* 纯函数可单测。allowPrefixes 空 = 全部放行（向后兼容默认）。
+*/
+function projectKnownWorkspaces(workspaces, allowPrefixes) {
+	return workspaces.filter((w) => typeof w.path === "string" && w.path !== "").filter((w) => allowPrefixes.length === 0 || allowPrefixes.some((p) => w.path.startsWith(p))).map((w) => ({
+		path: w.path,
+		title: typeof w.title === "string" && w.title !== "" ? w.title : w.path
+	}));
+}
+/**
 * wire → 持久化（面板 PUT 用）：
 * accounts 元素可选带 `pass`：非空 → 重新 hash；空/缺省 → 保留现有 hash（按 id 匹配）。
 * 新账号（id 不在现有）必须带非空 pass，否则抛错（无法生成 hash）。
@@ -6264,8 +6307,7 @@ function shouldAutoRestore(agent) {
 */
 function shouldRestoreActive(agent) {
 	if (!shouldAutoRestore(agent)) return false;
-	const events = agent.session?.events;
-	return Array.isArray(events) && events.length > 0;
+	return sessionEvents(agent.session).length > 0;
 }
 function registerContext(ctx, opts = {}) {
 	const configPaths = opts.configPaths ?? DEFAULT_SERENITY_CONFIG_PATHS;
@@ -6280,7 +6322,7 @@ function registerContext(ctx, opts = {}) {
 		const scope = agentScope(agent);
 		if (shouldRestoreActive(agent) && getActiveSessionInfo(scope) === null) try {
 			if (loadSerenityConfig(root, configPaths).hooks?.autoRestoreSession ?? true) {
-				const info = parseSessionContextFromEvents(agent.session.events ?? []);
+				const info = parseSessionContextFromEvents(sessionEvents(agent.session));
 				if (info) {
 					const abs = info.mdPath.startsWith(root) ? info.mdPath : resolve(root, info.mdPath);
 					if (existsSync(abs)) {
@@ -6635,7 +6677,16 @@ function registerStatusApi(ctx, opts = {}) {
 					return;
 				}
 				if (req.method === "GET") {
-					sendJson$1(res, 200, { config: toWire(readAdvancedSettings()) });
+					const settings = readAdvancedSettings();
+					let known = [];
+					try {
+						const registry = ctx.get?.("workspaceRegistry");
+						known = projectKnownWorkspaces(registry?.list?.() ?? [], settings.gateway.workspaces);
+					} catch {}
+					sendJson$1(res, 200, {
+						config: toWire(settings),
+						knownWorkspaces: known
+					});
 					return;
 				}
 				if (req.method === "PUT") {
@@ -6668,7 +6719,7 @@ function registerStatusApi(ctx, opts = {}) {
 					workspace: url.searchParams.get("workspace") ?? void 0
 				});
 				const root = findSerenityRoot(workspace) ?? "";
-				const { discoverCccs } = await import("./skiff-debug-DIf_Uenr.js").then((n) => n.i);
+				const { discoverCccs } = await import("./skiff-debug-CBU6T2F_.js").then((n) => n.i);
 				sendJson$1(res, 200, { cccs: await discoverCccs(ctx, root) });
 			} catch (err) {
 				sendJson$1(res, 400, { error: err.message ?? String(err) });
@@ -6698,7 +6749,7 @@ function registerStatusApi(ctx, opts = {}) {
 					return;
 				}
 				const settings = readAdvancedSettings();
-				const { readSimpleSettings } = await import("./settings-section-DnX9TJxt.js").then((n) => n.r);
+				const { readSimpleSettings } = await import("./settings-section-BfVxgCZy.js").then((n) => n.r);
 				const simple = readSimpleSettings();
 				const allowed = settings.publicAsk.allowed;
 				const port = simple.acpHttpPort ?? 3100;
@@ -7381,25 +7432,6 @@ const RANDOM_UUID_POLYFILL = `<script>
 /** 注入标记（幂等：已注入的 HTML 不重复注入） */
 const POLYFILL_MARKER = "data-sp-randomuuid-polyfill";
 /**
-* workspace.list 响应过滤（v1.22 白名单）：
-* DSH client→server RPC 全部走 HTTP JSON（`POST /api/workspace.list`，WS 仅下行推送）。
-* 白名单（workspaces 路径前缀）非空 → 只保留匹配前缀的 items；
-* 空 = 全部允许（默认，向后兼容）。
-*/
-function filterWorkspaceList(body, allowPrefixes) {
-	if (allowPrefixes.length === 0) return body;
-	try {
-		const parsed = JSON.parse(body);
-		const value = parsed?.result?.value;
-		if (parsed?.result?.ok !== true || !value || !Array.isArray(value.items)) return body;
-		const keep = (path) => typeof path === "string" && allowPrefixes.some((p) => path.startsWith(p));
-		value.items = value.items.filter((item) => keep(item.path));
-		return JSON.stringify(parsed);
-	} catch {
-		return body;
-	}
-}
-/**
 * 校验 workspace.create 请求路径是否在白名单内（v1.22）：
 * 白名单非空且路径不匹配 → 拒绝（由调用方构造 403 RPC 响应）。
 */
@@ -7422,7 +7454,9 @@ function workspaceDenyResponse(rpcId) {
 		}
 	});
 }
-/** 在 HTML 的 </head> 前注入 polyfill（幂等：含 marker 则跳过） */
+/**
+* 在 HTML 的 </head> 前注入 polyfill（幂等：含 marker 则跳过）
+*/
 function injectPolyfillHtml(html) {
 	if (html.includes(POLYFILL_MARKER)) return html;
 	const head = RANDOM_UUID_POLYFILL.replace("<script>", `<script ${POLYFILL_MARKER}="1">`);
@@ -7430,6 +7464,37 @@ function injectPolyfillHtml(html) {
 	return `${head}\n${html}`;
 }
 /**
+* 反代 HTML 响应注入变换（v1.28.2 修复，S142 白屏根因）：
+* 上游按 Accept-Encoding 可能返回 gzip/br/deflate 压缩的 HTML——注入必须在**明文**上进行，
+* 把压缩字节 toString 当文本注入会破坏压缩流（找不到 </head> → polyfill 前置 → HTML 损坏
+* → 浏览器白屏，用户实测 https://dsh.notfoundhome.cc 登录后白屏）。
+*
+* @param raw - 上游响应完整 body（可能压缩）
+* @param upstreamHeaders - 上游响应头（node IncomingHttpHeaders 形态）
+* @returns { body, headers } 注入后的明文 body + 修正后的响应头（去 content-encoding/transfer-encoding、
+*          重算 content-length）；解压失败返回 null（调用方应原样透传避免破坏）
+*/
+function transformHtmlForProxy(raw, upstreamHeaders) {
+	let body = raw;
+	const enc = String(upstreamHeaders["content-encoding"] ?? "").toLowerCase().trim();
+	const outHeaders = { ...upstreamHeaders };
+	if (enc === "gzip" || enc === "x-gzip" || enc === "deflate" || enc === "br") try {
+		if (enc === "br") body = zlib.brotliDecompressSync(body);
+		else if (enc === "deflate") body = zlib.inflateSync(body);
+		else body = zlib.gunzipSync(body);
+		delete outHeaders["content-encoding"];
+	} catch {
+		return null;
+	}
+	const transformed = injectPolyfillHtml(body.toString("utf-8"));
+	outHeaders["content-length"] = Buffer.byteLength(transformed);
+	delete outHeaders["transfer-encoding"];
+	return {
+		body: transformed,
+		headers: outHeaders
+	};
+}
+/**
 * 反代请求头构造（v1.22.1 信任栅栏修复，纯逻辑可测）：
 * DSH isTrustedApiRequest 要求 Origin.host === Host.host——Host 改写为 loopback 后
 * Origin 必须同步改写（浏览器 POST 必带 Origin，透传外部地址 → 403）。
@@ -7444,6 +7509,69 @@ function buildProxyHeaders(reqHeaders, mainPort, bodyOverride) {
 	return headers;
 }
 //#endregion
+//#region src/gateway-dsh-auth.ts
+/** 从一组 set-cookie 头提取 `dsh-auth-*` cookie（browser-auth sessionCookie 首段） */
+function pickDshCookie(setCookieHeader) {
+	const entries = Array.isArray(setCookieHeader) ? setCookieHeader : setCookieHeader === void 0 ? [] : [setCookieHeader];
+	for (const entry of entries) {
+		const first = entry.split(";", 1)[0].trim();
+		if (first.startsWith("dsh-auth-") && first.includes("=")) return first;
+	}
+}
+/**
+* 把 dsh browser cookie 合并进现有 Cookie 头（保持外部既有 cookie——serenity_session 等）。
+* 现有头可为 string / string[]（node 头形态）；无现有 → 只返回 dsh cookie。
+*/
+function mergeCookieHeader(existing, dshCookie) {
+	const existingStr = Array.isArray(existing) ? existing.join("; ") : typeof existing === "string" && existing !== "" ? existing : void 0;
+	return existingStr !== void 0 ? `${existingStr}; ${dshCookie}` : dshCookie;
+}
+/**
+* 内存换取 authority 绑定的 dsh browser cookie（S142 拍板方案核心）。
+* 用官方通道在进程内完成 token→cookie 交换：构造一个对 `http://<authority>/?token=…`
+* 的 index 请求 → connection.authorizeIndex 校验 token → 写 set-cookie → 提取 cookie。
+* @returns cookie 头值（如 `dsh-auth-xxx=v1.…`）；authority/connection 异常 → undefined
+*/
+function exchangeDshCookie(connection, authority) {
+	try {
+		const url = new URL(connection.authenticatedUrl(`http://${authority}`));
+		if (url.searchParams.get("token") === null) return void 0;
+		const headers = { host: authority };
+		const request = {
+			url: `${url.pathname}${url.search}`,
+			method: "GET",
+			headers
+		};
+		let captured;
+		const response = {
+			writeHead(_status, headers) {
+				if (headers !== void 0) captured = headers["set-cookie"];
+				return response;
+			},
+			end: () => response
+		};
+		connection.authorizeIndex(request, response);
+		return pickDshCookie(captured);
+	} catch {
+		return;
+	}
+}
+/**
+* 构建一个带内存缓存的 dsh cookie 提供者（S142 拍板：内存缓存，不落盘）。
+* 惰性换取：首次调用才向 connection 换；失败返回 undefined（不缓存失败——下次重试）。
+* 调用方可周期性失效缓存重换（cookie 30 天有效；进程重启 token 仍在 → 换一次长期可用）。
+*/
+function createDshCookieProvider(connection, authority) {
+	let cached;
+	return () => {
+		if (connection === void 0) return void 0;
+		if (cached !== void 0) return cached;
+		const cookie = exchangeDshCookie(connection, authority);
+		if (cookie !== void 0) cached = cookie;
+		return cookie;
+	};
+}
+//#endregion
 //#region src/gateway.ts
 /** 读取请求体（≤ maxBytes；超限 reject） */
 function readBody$1(req, maxBytes) {
@@ -7466,7 +7594,7 @@ function readBody$1(req, maxBytes) {
 * @param config - 监听/代理配置。
 * @param getAccounts - 运行时读取账号列表（plugin 全局文件；gateway.enabled 开关在调用方判）。
 */
-function startGateway(config, getAccounts) {
+function startGateway(config, getAccounts, getDshCookie) {
 	const { host, port, cookieName, mainPort, loginDelayMs } = config;
 	const allowWorkspaces = config.allowWorkspaces ?? [];
 	const cookieSecure = config.cookieSecure === true;
@@ -7475,6 +7603,18 @@ function startGateway(config, getAccounts) {
 	/** 校验请求 Cookie 是否含有效 token（v1.22.4：滑动过期 + 返回会话供审计） */
 	const authed = (req) => validateToken(cookieValue(req.headers.cookie, cookieName));
 	/**
+	* 构造上游请求头（buildProxyHeaders 基准 + dsh browser cookie 注入）。
+	* v1.28.2（0.1.2-rc.1 BrowserAuth 适配）：主端口 /api + index 需 dsh browser cookie。
+	* 反代 Host 已改写 loopback（过信任栅栏）→ 只缺 cookie → 注入内存换取 cookie
+	*（createDshCookieProvider 官方通道，零落盘）。无 cookie（旧 dsh/换取失败）→ 不注入向后兼容。
+	*/
+	const upstreamHeaders = (req, bodyOverride) => {
+		const headers = buildProxyHeaders(req.headers, mainPort, bodyOverride);
+		const dshCookie = getDshCookie?.();
+		if (dshCookie !== void 0) headers.cookie = mergeCookieHeader(headers.cookie, dshCookie);
+		return headers;
+	};
+	/**
 	* 反向代理：改写 Host + Origin 头 → 主端口（loopback 过信任栅栏）。
 	* v1.22.1 修复：DSH 信任栅栏（api-request-trust.ts isTrustedApiRequest）要求
 	* **Origin.host === Host.host**——仅改写 Host（127.0.0.1:3080）而 Origin 透传
@@ -7485,9 +7625,7 @@ function startGateway(config, getAccounts) {
 	* @param bodyOverride - workspace.create 已读 body 时的重放（白名单检查后转发）
 	*/
 	const proxy = (req, res, bodyOverride) => {
-		const url = new URL(req.url ?? "/", `http://${host}:${port}`);
-		const method = req.method === "POST" && url.pathname.startsWith("/api/") ? url.pathname.slice(5) : null;
-		const headers = buildProxyHeaders(req.headers, mainPort, bodyOverride);
+		const headers = upstreamHeaders(req, bodyOverride);
 		const target = request({
 			host: "127.0.0.1",
 			port: mainPort,
@@ -7501,32 +7639,15 @@ function startGateway(config, getAccounts) {
 				const chunks = [];
 				upstream.on("data", (c) => chunks.push(c));
 				upstream.on("end", () => {
-					const transformed = injectPolyfillHtml(Buffer.concat(chunks).toString("utf-8"));
-					const out = {
-						...upstream.headers,
-						"content-length": Buffer.byteLength(transformed)
-					};
-					res.writeHead(status, out);
-					res.end(transformed);
-				});
-				upstream.on("error", () => {
-					try {
-						res.destroy();
-					} catch {}
-				});
-				return;
-			}
-			if (method === "workspace.list" && status === 200 && ct.includes("application/json")) {
-				const chunks = [];
-				upstream.on("data", (c) => chunks.push(c));
-				upstream.on("end", () => {
-					const transformed = filterWorkspaceList(Buffer.concat(chunks).toString("utf-8"), allowWorkspaces);
-					const out = {
-						...upstream.headers,
-						"content-length": Buffer.byteLength(transformed)
-					};
-					res.writeHead(status, out);
-					res.end(transformed);
+					let raw = Buffer.concat(chunks);
+					const transformedRes = transformHtmlForProxy(raw, upstream.headers);
+					if (transformedRes === null) {
+						res.writeHead(status, upstream.headers);
+						res.end(raw);
+						return;
+					}
+					res.writeHead(status, transformedRes.headers);
+					res.end(transformedRes.body);
 				});
 				upstream.on("error", () => {
 					try {
@@ -7757,7 +7878,7 @@ function startGateway(config, getAccounts) {
 			port: mainPort,
 			path: req.url ?? "/",
 			method: req.method,
-			headers: buildProxyHeaders(req.headers, mainPort)
+			headers: upstreamHeaders(req)
 		});
 		upstream.on("upgrade", (ures, usock, uhead) => {
 			usocket = usock;
@@ -7831,6 +7952,42 @@ function startGateway(config, getAccounts) {
 		}
 	};
 }
+/**
+* 构造 dsh browser cookie 提供者（v1.28.2 0.1.2-rc.1 BrowserAuth 适配）：
+* 经 ctx.connection（HostConnectionHandle）官方通道在内存换取 authority=127.0.0.1:<mainPort>
+* 的 cookie 并缓存（createDshCookieProvider 惰性换取）。connection 缺失（旧 dsh/非 web 装配）
+* → provider 返回 undefined → 反代不注入（旧形态无 BrowserAuth，天然兼容）。
+*
+* v1.28.2 修复：**connection 每次调用现取**（不绑定 sync 时点）——gateway sync 在 apply
+* 早期跑，此时 connection 服务可能尚未装配（web-app 的 URL 打印在其后）；首次反代请求
+* 到达时 connection 必已就绪。cachedProvider 缓存换取结果（同一 connection 实例）。
+*/
+function buildDshCookieProvider(ctx, mainPort) {
+	const authority = `127.0.0.1:${mainPort}`;
+	let cachedProvider;
+	let diagnosed = false;
+	return () => {
+		try {
+			const connection = ctx.get?.("connection");
+			if (!connection || typeof connection.authenticatedUrl !== "function" || typeof connection.authorizeIndex !== "function") {
+				if (!diagnosed) {
+					diagnosed = true;
+					console.log("[serenity-hooks] dsh browser-auth 适配: connection ✗ 不可取（不注入 dsh cookie——旧 dsh/非 web 装配兼容）");
+				}
+				return;
+			}
+			if (cachedProvider === void 0) cachedProvider = createDshCookieProvider(connection, authority);
+			const cookie = cachedProvider();
+			if (!diagnosed) {
+				diagnosed = true;
+				console.log(`[serenity-hooks] dsh browser-auth 适配: connection ✓ 可取 + cookie ${cookie === void 0 ? "✗ 换取失败（上游 401 时检查）" : "✓ 已内存换取（注入反代）"}`);
+			}
+			return cookie;
+		} catch {
+			return;
+		}
+	};
+}
 /** 注册 gateway（index.ts apply 调用）。
 * 归属原则（v1.22）：gateway 是 plugin 全局能力——enabled 开关读 DSH settings
 * （readSimpleSettings().gatewayEnabled），host/port/accounts 读 plugin 全局文件
@@ -7868,7 +8025,7 @@ function registerGateway(ctx) {
 				cookieSecure: settings.gateway.cookieSecure === true,
 				allowWorkspaceCreate: settings.gateway.allowWorkspaceCreate !== false,
 				totpEnabled: settings.gateway.totpEnabled === true
-			}, () => readAdvancedSettings().gateway.accounts);
+			}, () => readAdvancedSettings().gateway.accounts, buildDshCookieProvider(ctx, webServer.port));
 			const accounts = settings.gateway.accounts.length;
 			const wsNote = settings.gateway.workspaces.length === 0 ? "" : `；工作区白名单 ${settings.gateway.workspaces.length} 条`;
 			console.log(`[serenity-hooks] gateway 已启动: http://${settings.gateway.host}:${settings.gateway.port} → 127.0.0.1:${webServer.port}` + (accounts === 0 ? "（⚠️ 未配置账号，登录页将提示）" : `（${accounts} 个账号）`) + wsNote);
@@ -8055,7 +8212,7 @@ function isExternalFaceSession(sessionId) {
 *  否则 think 内提及内部机制词（思考过程必然推演机制）会误打回。复用 stripThink
 *  （v1.26.8 状态机，弃正则——同 v1.27.1 微信桥回复链路）。 */
 function lastAssistantText(agent) {
-	const events = agent.session.events ?? [];
+	const events = sessionEvents(agent.session);
 	for (let i = events.length - 1; i >= 0; i--) {
 		const e = events[i];
 		if (e && e.type === "assistant/message") {
@@ -9332,7 +9489,8 @@ function registerWeixinBridge(ctx) {
 //#endregion
 //#region src/index.ts
 const name = "dsh-serenity-hooks";
-/** 主动调用的服务；其余（agent 事件）随 harness 装配必然存在 */
+/** 主动调用的服务；其余（agent 事件）随 harness 装配必然存在
+*  （v1.28.0 适配 0.1.2-rc.1：+ 'settings'——B4 settings 服务由 provider 插件加载后才有） */
 const inject = [
 	"tools",
 	"webServer",
@@ -9342,7 +9500,8 @@ const inject = [
 	"agentLoop",
 	"agents",
 	"systemPrompt",
-	"sessionProjections"
+	"sessionProjections",
+	"settings"
 ];
 const Config = z.object({
 	serenityConfigPaths: z.array(z.string()).default([...DEFAULT_SERENITY_CONFIG_PATHS]),

package/lib/seams/bootstrap.d.ts

@@ -50,6 +50,15 @@ export declare const DEFAULT_COMPACTION_TOOLS: string[];
  * 文本 = 原 home-serenity CCC 配置（anchorMessages），随零配置化固化进代码。
  */
 export declare const DEFAULT_ANCHOR_MESSAGES: string[];
+/**
+ * 根会话锚定重入判定（v1.28.1 提取导出以便单测）：会话是否已有真实用户消息。
+ * resume/续跑的会话已有对话历史 → **不重锚**（first-anchor 只注入一次）。
+ *
+ * 0.1.2-rc.1 适配教训：裸读 `session.events`（经类型断言）恒 undefined →
+ * `!undefined` 恒 true → 有历史也永不跳过 → 任何情况发消息都重插 first-anchor。
+ * 统一经 sessionEvents() 读取（snapshotEvents() 优先，.events 兜底）。
+ */
+export declare function hasUserMessageHistory(session: unknown): boolean;
 export interface PromotionStatus {
     /** 最后一次 compaction/end 的 seq（-1 = 未压缩过） */
     boundary: number;

package/lib/session-ops.d.ts

@@ -12,6 +12,17 @@
 import type { JsonValue } from './json.js';
 export type SessionAction = 'list' | 'show' | 'create' | 'use' | 'close' | 'health' | 'qa' | 'archive' | 'summary' | 'hook-develop-guide';
 export declare const SESSION_ACTIONS: readonly SessionAction[];
+/**
+ * 读取 Session 事件序列（v1.28.1 适配 0.1.2-rc.1 补齐）：rc.1 起官方 Session 类
+ * 移除 `.events` 属性 → `snapshotEvents()` 方法（dsh-session/src/session.ts：
+ * `snapshotEvents(fromSeq, toSeqExclusive)`）。插件早期代码多处裸读 `.events`
+ * （经 `as unknown as { events? }` 断言绕过 typecheck），运行时静默 undefined——
+ * 造成 first-anchor 每轮重插 / SESSION 激活恢复失效 / rebuild 定位错乱。
+ * 统一收敛到本 helper：snapshotEvents() 优先（rc.1 真实形态），`.events` 兜底
+ * （测试替身/旧运行时）。所有消费方一律经此读取，禁止再裸读 `.events`。
+ * 泛型 T：调用方按需声明事件形状（如 `SessionEvent`），unknown 默认。
+ */
+export declare function sessionEvents<T = unknown>(session: unknown): readonly T[];
 export declare function sessionsRoot(root: string): string;
 interface SessionStatus {
     hasSessionMd: boolean;

package/lib/settings-section-BfVxgCZy.js

@@ -0,0 +1,91 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
+import z from "@deepseek-ai/schemastery";
+//#region src/settings-section.ts
+var settings_section_exports = /* @__PURE__ */ __exportAll({
+	SERENITY_SETTINGS_NS: () => SERENITY_SETTINGS_NS,
+	defaultSimpleSettings: () => defaultSimpleSettings,
+	entryDefaults: () => entryDefaults,
+	readSimpleSettings: () => readSimpleSettings,
+	registerSettingsSection: () => registerSettingsSection,
+	simpleSettingsSchema: () => simpleSettingsSchema
+});
+/** 简单配置命名空间（dsh 设置面板的 section id / settings.yaml section） */
+const SERENITY_SETTINGS_NS = "serenity-hooks";
+/** schemastery schema（与 DSH 各插件 Config 同款） */
+const simpleSettingsSchema = z.object({
+	gatewayEnabled: z.boolean().default(false),
+	rebuildEnabled: z.boolean().default(true),
+	rebuildThresholdK: z.number().min(50).max(4e3).default(400),
+	skiffEnabled: z.boolean().default(false),
+	skiffDebugPort: z.number().min(1024).max(65535).default(3099),
+	acpEnabled: z.boolean().default(false),
+	acpHttpPort: z.number().min(1024).max(65535).default(3100),
+	publicAskEnabled: z.boolean().default(false),
+	autopilotEnabled: z.boolean().default(false)
+});
+/** 从插件 Config 提取 entry 默认（settings base 层） */
+function entryDefaults(config) {
+	return {
+		gatewayEnabled: config.gateway?.enabled ?? false,
+		rebuildEnabled: config.rebuild?.enabled ?? true,
+		rebuildThresholdK: config.rebuild?.thresholdK ?? 400,
+		skiffEnabled: config.skiff?.enabled ?? false,
+		skiffDebugPort: config.skiff?.debugPort ?? 3099,
+		acpEnabled: config.acp?.enabled ?? false,
+		acpHttpPort: config.acp?.httpPort ?? 3100,
+		publicAskEnabled: config.publicAsk?.enabled ?? false,
+		autopilotEnabled: false
+	};
+}
+/** 运行时源（installSettingsSection 注入：settings scope 或 entry fallback） */
+let simpleSource = null;
+/** 进程级默认（无 settings 服务时的兜底） */
+function defaultSimpleSettings() {
+	return {
+		gatewayEnabled: false,
+		rebuildEnabled: true,
+		rebuildThresholdK: 400,
+		skiffEnabled: false,
+		skiffDebugPort: 3099,
+		acpEnabled: false,
+		acpHttpPort: 3100,
+		publicAskEnabled: false,
+		autopilotEnabled: false
+	};
+}
+/**
+* 读取当前简单配置（settings 解析值；无 provider/未注册 → entry 默认）。
+* 各功能（gateway/rebuild/naming）启动与运行时判断开关都经此函数。
+*/
+function readSimpleSettings() {
+	return simpleSource ? simpleSource() : defaultSimpleSettings();
+}
+/**
+* 注册简单配置到 DSH settings（零改 DSH；settings.yaml 持久化 + 原生面板渲染）。
+* 注：插件 Config（cordis.yml 组合层）作为 base；用户文档层叠加其上。
+* 运行时读取简单配置统一经 `readSimpleSettings()`。
+* v1.28.0 适配 0.1.2-rc.1（B4）：`installSettingsSection`/`settingsNamespace` 便捷函数在
+* rc.1 消失 → 改 `SettingsProvider.installSection(owner, ns, schema, entry, hooks)`
+* （owner = consumer 插件 ctx；ns 直接字符串）。
+*/
+function registerSettingsSection(ctx, config) {
+	const hooks = {
+		setSource: (get) => {
+			simpleSource = get;
+		},
+		onChange: () => {
+			try {
+				ctx.emit?.("serenity/settings-changed");
+			} catch {}
+		}
+	};
+	const settingsAny = ctx.settings;
+	if (settingsAny) {
+		settingsAny.installSection.call(settingsAny, ctx, SERENITY_SETTINGS_NS, simpleSettingsSchema, entryDefaults(config), hooks);
+		return;
+	}
+	hooks.setSource(() => ({}));
+	hooks.onChange();
+}
+//#endregion
+export { registerSettingsSection as n, settings_section_exports as r, readSimpleSettings as t };

package/lib/settings-section.d.ts

@@ -4,8 +4,9 @@
  * 分层决策（S142）：**简单配置（开关/阈值）→ dsh 原生设置面板**；
  * **复杂配置（账号列表）→ 宁静号高级面板**（localstore + /serenity/config）。
  *
- * 本模块承载简单配置层：`installSettingsSection(ctx, settingsNamespace('serenity-hooks'), schema, entry)`
+ * 本模块承载简单配置层：`SettingsProvider.installSection(ctx, 'serenity-hooks', schema, entry)`
  * 注册 `serenity-hooks` namespace——三功能总开关 + F2 阈值。
+ * （v1.28.0 适配 0.1.2-rc.1：installSettingsSection/settingsNamespace 便捷函数消失 → 方法调用）
  *
  * 运行时降级守卫（版本鲁棒性）：旧 RC（staging 架构）api-proxy 有
  * `WEB_SETTINGS_NAMESPACES` 静态白名单，第三方 ns 会收到 settings-not-exposed
@@ -107,5 +108,8 @@ export declare function __setSimpleSourceForTest(source: (() => SerenitySimpleSe
  * 注册简单配置到 DSH settings（零改 DSH；settings.yaml 持久化 + 原生面板渲染）。
  * 注：插件 Config（cordis.yml 组合层）作为 base；用户文档层叠加其上。
  * 运行时读取简单配置统一经 `readSimpleSettings()`。
+ * v1.28.0 适配 0.1.2-rc.1（B4）：`installSettingsSection`/`settingsNamespace` 便捷函数在
+ * rc.1 消失 → 改 `SettingsProvider.installSection(owner, ns, schema, entry, hooks)`
+ * （owner = consumer 插件 ctx；ns 直接字符串）。
  */
 export declare function registerSettingsSection(ctx: Context, config: SimpleConfigFragment): void;