dsh-client-auto-continue 0.5.7 → 0.6.1

package/README.md

@@ -40,6 +40,7 @@ For [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (`dsh we
 - **Error classification** — transient failures (network / timeout / 5xx / 429…) are auto-resumed; permanent ones are **skipped** and notified, because retrying them never helps. A failure counts as permanent when its HTTP status is 401/403 or its code/message matches auth, credential/API-key, balance/quota, unknown-model, or context-length/overflow keywords. Turn classification off to resume everything
 - **Adaptive backoff** — consecutive failures wait longer each time (cooldown × factor: 20s → 40s → 80s…), capped at the max backoff, instead of hammering a broken upstream
 - **Templated continue text** — `continueText` supports `{code}` `{message}` `{status}` `{tool}` `{turn}` `{errorCount}` `{sessionTitle}` `{elapsed}` placeholders, so the resume message can carry the failure context ("继续 (git push failed: UPSTREAM)"); a **separate template** fires on `max-tokens` (e.g. "继续输出, 不要重复已生成的内容")
+- **Idempotency guard** — before resuming, the plugin inspects the last tool call: if its result is unconfirmed (the turn died mid-tool, e.g. a `git push` that may have gone through), the resume message tells the model to check state first and not to rerun; if the tool is confirmed done, it says so and asks not to repeat it; a failed tool gets no guard (retrying it is the point). Both guard texts are configurable (`{tool}` / `{result}` placeholders)
 - **Pause** — a global **Pause auto-continue** toggle in the settings card stops everything (live + scan) instantly; per-session pauses (e.g. via a notification button) suspend only one session until they expire
 - **Notification buttons** — notifications carry **Resume now** (send immediately, ignoring cooldown and the consecutive cap) and **Pause this session 1h** actions
 - **Stats panel** — the settings card shows today's auto-continue count, recoveries, failures, permanent skips and give-ups, broken down by error code, with a one-click reset
@@ -124,12 +125,12 @@ dsh web
 
 > Switching from a manual install to `dsh plugin add`? Remove the manual `insert` entry first — the bundle patch registers the row and a duplicate would conflict.
 
-> **Known DSH limitation (0.1.0-rc.6):** the web settings surface only exposes
-> namespaces on a hardcoded allowlist in the installed `@deepseek-ai/dsh-host-apiproxy`
-> bundle. Until upstream moves exposure into `settings.register()`, one idempotent
-> vendor patch makes exposure **registry-driven** — every namespace a plugin
-> registers (this one or any other) becomes visible, with no plugin-specific
-> strings anywhere. Run it once, and re-run after reinstalling dsh:
+> **Note (DSH ≥ 0.1.0-rc.7):** upstream made settings exposure **registry-driven**
+> — every namespace a plugin registers is served to the web settings surface,
+> so the settings card just works, no vendor patch needed. Only DSH 0.1.0-rc.6
+> and earlier gate exposure behind a hardcoded allowlist in
+> `@deepseek-ai/dsh-host-apiproxy`; on those versions, run the idempotent
+> vendor patch once (and re-run after reinstalling dsh):
 >
 > ```sh
 > npx --yes --package dsh-client-auto-continue patch-expose
@@ -143,7 +144,7 @@ dsh web
 > own. If you installed from this repository instead, the same script is
 > `node scripts/patch-expose.mjs` at the repo root. The auto-continue engine
 > itself works without this patch — it only gates the GUI settings section;
-> until then, configure everything directly in `~/.dsh/settings.yaml`
+> on rc.6 and earlier, configure everything directly in `~/.dsh/settings.yaml`
 > (see [Configuration](#configuration)).
 
 ### Verify & uninstall
@@ -173,6 +174,9 @@ auto-continue:
   paused: false
   continueText: '继续'
   continueTextMaxTokens: '继续'
+  guardTools: true
+  guardPendingText: '(上一步工具「{tool}」可能未完成, 先确认状态再继续, 不要重复执行)'
+  guardDoneText: '(上一步工具「{tool}」已完成, 结果: {result}; 不要重复执行, 直接继续)'
   graceMs: 3000
   cooldownMs: 20000
   maxConsecutive: 3
@@ -204,6 +208,9 @@ auto-continue:
 | Pause auto-continue | `off` | Global pause: no live or scan auto-send fires, queued pending sends are cancelled |
 | Continue text | `继续` | Text automatically sent after an interruption |
 | Continue text (max tokens) | `继续` | Text sent when the output token ceiling is reached (same placeholders) |
+| Idempotency guard | `on` | Inspect the last tool call before resuming and steer the model (see What It Does) |
+| Guard text (unconfirmed result) | `(上一步工具「{tool}」可能未完成…)` | Appended when the last tool may have partially executed; `{tool}` placeholder |
+| Guard text (tool succeeded) | `(上一步工具「{tool}」已完成…)` | Appended when the last tool is confirmed done; `{tool}` / `{result}` placeholders |
 | Grace period (ms) | `3000` | Wait after an interruption; cancelled if the host recovers on its own |
 | Cooldown (ms) | `20000` | Min interval between auto-continues per session (failed attempts count too) |
 | Max consecutive | `3` | Max consecutive auto-continues; stops until a user intervenes or a turn completes |
@@ -218,7 +225,7 @@ auto-continue:
 | Max backoff (ms) | `300000` | Cap on the adaptive backoff interval |
 | Browser notifications | `off` | Notify when auto-continue fires, gives up, or hits a permanent error |
 
-`continueText` (and `continueTextMaxTokens`) accept the placeholders `{code}`, `{message}`, `{status}`, `{tool}` (last tool call before the failure), `{turn}`, `{errorCount}` (consecutive failures including this one), `{sessionTitle}` (from the session list) and `{elapsed}` (time since the failure, e.g. `1m5s`) — e.g. `继续 ({tool}: {code})` becomes `继续 (git push: UPSTREAM)`.
+`continueText` (and `continueTextMaxTokens`) accept the placeholders `{code}`, `{message}`, `{status}`, `{tool}` (last tool call before the failure), `{turn}`, `{errorCount}` (consecutive failures including this one), `{sessionTitle}` (from the session list) and `{elapsed}` (time since the failure, e.g. `1m5s`) — e.g. `继续 ({tool}: {code})` becomes `继续 (git push: UPSTREAM)`. The guard texts accept `{tool}` and `{result}` (a truncated excerpt of the last tool output).
 
 ---
 
@@ -239,7 +246,7 @@ The plugin is browser-only and touches **no files, credentials, or network beyon
 npm run typecheck   # tsc --noEmit
 npm run build       # lib/client.js + lib/index.js + lib/types
 npm run watch       # rebuild on change; host HMR hot-reloads without a page refresh
-npm run test        # node tests/simulate.mjs — 22 behavioral scenarios
+npm run test        # node tests/simulate.mjs — 27 behavioral scenarios
 ```
 
 While `npm run watch` runs, the profile's client-hmr row polls `lib/client.js` every 500 ms and hot-reloads the plugin in the browser — no server restart needed for code changes.

package/README.zh.md

@@ -40,6 +40,7 @@
 - **错误分类** — 临时性错误(网络 / 超时 / 5xx / 429 等)自动续跑; 永久性错误跳过并通知, 因为重试也没用。判定为永久性的条件: HTTP 状态码 401/403, 或 code/message 命中认证、凭据/API Key、余额/配额、模型不存在、上下文长度/超限等关键词。关闭分类后则全部自动继续
 - **自适应退避** — 连续失败时等待时间递增(冷却 × 系数: 20s → 40s → 80s…), 有上限, 不再对故障上游狂轰滥炸
 - **模板化继续文本** — `continueText` 支持 `{code}` `{message}` `{status}` `{tool}` `{turn}` `{errorCount}` `{sessionTitle}` `{elapsed}` 占位符, 续跑消息可携带失败上下文(如「继续 (git push 失败: UPSTREAM)」); 达到 `max-tokens` 时使用**另一套模板**(如「继续输出, 不要重复已生成的内容」)
+- **幂等护栏** — 续跑前检查上一步工具调用: 结果未确认(回合在工具执行中途夭折, 如 `git push` 可能已经推上去了)时, 续跑消息会提示模型先确认状态、不要重复执行; 工具已确认成功时说明已完成、请勿重复; 工具失败则不加护栏(重试本来就是目的)。两段护栏文本都可配置(支持 `{tool}` / `{result}` 占位符)
 - **暂停** — 设置卡片里的全局 **暂停自动继续** 开关可立即停掉一切(实时 + 扫描); 会话级暂停(如通过通知按钮)只挂起单个会话, 到期自动恢复
 - **通知按钮** — 通知带 **立即续跑**(无视冷却与连续上限, 马上发送)和 **暂停该会话 1 小时** 按钮
 - **统计面板** — 设置卡片展示今日自动继续次数、恢复成功、继续后失败、永久性跳过、达上限停止, 按错误码分布, 可一键清零
@@ -124,11 +125,10 @@ dsh web
 
 > 从手动安装切换到 `dsh plugin add` 时, 请先删掉手动加的 `insert` 条目——包自带的 bundle patch 会注册插件行, 重复注册会冲突。
 
-> **已知 DSH 限制(0.1.0-rc.6):** webui 的设置区只暴露已安装
-> `@deepseek-ai/dsh-host-apiproxy` 包中硬编码白名单里的设置命名空间。在官方把暴露
-> 逻辑移入 `settings.register()` 之前, 需要执行一次幂等的供应商补丁, 让暴露变成
-> **注册表驱动**——任何插件注册的命名空间(本插件或其他插件)都会自动可见, 补丁中
-> 没有任何插件相关的硬编码字符串。执行一次即可, 重新安装 dsh 后重跑:
+> **说明(DSH ≥ 0.1.0-rc.7):** 上游已把设置暴露改成**注册表驱动**——插件注册的
+> 任何命名空间都会直接出现在 webui 设置区, 设置卡片开箱即用, 无需任何供应商补丁。
+> 仅 DSH 0.1.0-rc.6 及更早版本仍在 `@deepseek-ai/dsh-host-apiproxy` 里用硬编码白名单
+> 门禁暴露; 这些版本需要执行一次幂等的供应商补丁(重新安装 dsh 后重跑):
 >
 > ```sh
 > npx --yes --package dsh-client-auto-continue patch-expose
@@ -139,8 +139,8 @@ dsh web
 > 无需猜测 profile 路径), 并覆盖所有可达的 dsh 安装: profile 链接副本、全局
 > `npm i -g @deepseek-ai/dsh` 安装、以及当前目录的安装。若是从本仓库安装,
 > 同一脚本在仓库根目录执行 `node scripts/patch-expose.mjs` 即可。自动续跑引擎
-> 本身不依赖这个补丁——它只影响 GUI 设置区是否可见; 在此之前, 可以直接在
-> `~/.dsh/settings.yaml` 里配置全部参数(见 [配置](#配置))。
+> 本身不依赖这个补丁——它只影响 GUI 设置区是否可见; 在 rc.6 及更早版本上,
+> 可以直接在 `~/.dsh/settings.yaml` 里配置全部参数(见 [配置](#配置))。
 
 ### 验证与卸载
 
@@ -169,6 +169,9 @@ auto-continue:
   paused: false
   continueText: '继续'
   continueTextMaxTokens: '继续'
+  guardTools: true
+  guardPendingText: '(上一步工具「{tool}」可能未完成, 先确认状态再继续, 不要重复执行)'
+  guardDoneText: '(上一步工具「{tool}」已完成, 结果: {result}; 不要重复执行, 直接继续)'
   graceMs: 3000
   cooldownMs: 20000
   maxConsecutive: 3
@@ -200,6 +203,9 @@ auto-continue:
 | 暂停自动继续 | 关 | 全局暂停: 实时与扫描都不再自动发送, 已排队的待发送也会取消 |
 | 继续文本 | `继续` | 中断后自动发送的消息内容 |
 | 超限时的继续文本 | `继续` | 达到输出 token 上限时自动发送的文本(支持相同占位符) |
+| 幂等护栏 | 开 | 续跑前检查上一步工具调用并给出指引(见「它做什么」) |
+| 结果未确认时的护栏文本 | `(上一步工具「{tool}」可能未完成…)` | 上一步工具可能已部分执行时附加; 支持 {tool} 占位符 |
+| 工具已成功时的护栏文本 | `(上一步工具「{tool}」已完成…)` | 上一步工具已确认成功时附加; 支持 {tool} / {result} 占位符 |
 | 宽限期 (ms) | `3000` | 中断后等待的时长; 期间宿主自行恢复则取消 |
 | 冷却时间 (ms) | `20000` | 同一会话两次自动「继续」的最小间隔(失败尝试也计入) |
 | 最大连续次数 | `3` | 同一会话连续自动「继续」上限; 超过后停止, 直到用户介入或成功回合 |
@@ -214,7 +220,7 @@ auto-continue:
 | 最大退避间隔 (ms) | `300000` | 自适应退避的上限 |
 | 浏览器通知 | 关 | 自动继续成功 / 放弃 / 遇到永久性错误时弹通知 |
 
-`continueText`(以及 `continueTextMaxTokens`)支持占位符 `{code}`、`{message}`、`{status}`、`{tool}`(失败前最后一次工具调用)、`{turn}`、`{errorCount}`(连续失败次数, 含本次)、`{sessionTitle}`(来自会话列表)和 `{elapsed}`(距失败经过的时间, 如 `1m5s`)——例如 `继续 ({tool}: {code})` 会变成 `继续 (git push: UPSTREAM)`。
+`continueText`(以及 `continueTextMaxTokens`)支持占位符 `{code}`、`{message}`、`{status}`、`{tool}`(失败前最后一次工具调用)、`{turn}`、`{errorCount}`(连续失败次数, 含本次)、`{sessionTitle}`(来自会话列表)和 `{elapsed}`(距失败经过的时间, 如 `1m5s`)——例如 `继续 ({tool}: {code})` 会变成 `继续 (git push: UPSTREAM)`。护栏文本支持 `{tool}` 与 `{result}`(上一步工具输出的截断摘要)。
 
 ---
 
@@ -235,7 +241,7 @@ auto-continue:
 npm run typecheck   # tsc --noEmit
 npm run build       # lib/client.js + lib/index.js + lib/types
 npm run watch       # 监听变更自动重建; 宿主 HMR 免刷新热重载
-npm run test        # node tests/simulate.mjs — 22 个行为场景
+npm run test        # node tests/simulate.mjs — 27 个行为场景
 ```
 
 `npm run watch` 运行时, profile 的 client-hmr 行每 500ms 轮询 `lib/client.js` 并在浏览器中热重载插件——改代码无需重启服务。

package/lib/client.js

@@ -42,6 +42,9 @@ module.exports = __toCommonJS(index_exports);
 var DEFAULT_CONFIG = {
   continueText: "继续",
   continueTextMaxTokens: "继续",
+  guardTools: true,
+  guardPendingText: "(上一步工具「{tool}」可能未完成, 先确认状态再继续, 不要重复执行)",
+  guardDoneText: "(上一步工具「{tool}」已完成, 结果: {result}; 不要重复执行, 直接继续)",
   graceMs: 3e3,
   cooldownMs: 2e4,
   maxConsecutive: 3,
@@ -67,9 +70,14 @@ function resolveConfig(section) {
   const value = section ?? {};
   const text = typeof value.continueText === "string" && value.continueText.trim() !== "" ? value.continueText : DEFAULT_CONFIG.continueText;
   const maxTokensText = typeof value.continueTextMaxTokens === "string" && value.continueTextMaxTokens.trim() !== "" ? value.continueTextMaxTokens : DEFAULT_CONFIG.continueTextMaxTokens;
+  const guardPendingText = typeof value.guardPendingText === "string" && value.guardPendingText.trim() !== "" ? value.guardPendingText : DEFAULT_CONFIG.guardPendingText;
+  const guardDoneText = typeof value.guardDoneText === "string" && value.guardDoneText.trim() !== "" ? value.guardDoneText : DEFAULT_CONFIG.guardDoneText;
   return {
     continueText: text,
     continueTextMaxTokens: maxTokensText,
+    guardTools: booleanOr(value.guardTools, DEFAULT_CONFIG.guardTools),
+    guardPendingText,
+    guardDoneText,
     graceMs: numberOr(value.graceMs, DEFAULT_CONFIG.graceMs),
     cooldownMs: numberOr(value.cooldownMs, DEFAULT_CONFIG.cooldownMs),
     maxConsecutive: Math.max(1, numberOr(value.maxConsecutive, DEFAULT_CONFIG.maxConsecutive)),
@@ -139,7 +147,31 @@ function formatElapsed(ms) {
   return `${Math.floor(s / 60)}m${s % 60 > 0 ? `${s % 60}s` : ""}`;
 }
 function fillTemplate(template, ctx) {
-  return template.replace(/\{code\}/g, ctx.facts?.code ?? "").replace(/\{message\}/g, ctx.facts?.message ?? "").replace(/\{status\}/g, ctx.facts?.status !== void 0 ? String(ctx.facts.status) : "").replace(/\{tool\}/g, ctx.tool ?? "").replace(/\{turn\}/g, ctx.turn !== void 0 ? String(ctx.turn) : "").replace(/\{errorCount\}/g, ctx.errorCount !== void 0 ? String(ctx.errorCount) : "").replace(/\{sessionTitle\}/g, ctx.sessionTitle ?? "").replace(/\{elapsed\}/g, formatElapsed(ctx.elapsedMs));
+  return template.replace(/\{code\}/g, ctx.facts?.code ?? "").replace(/\{message\}/g, ctx.facts?.message ?? "").replace(/\{status\}/g, ctx.facts?.status !== void 0 ? String(ctx.facts.status) : "").replace(/\{tool\}/g, ctx.tool ?? "").replace(/\{turn\}/g, ctx.turn !== void 0 ? String(ctx.turn) : "").replace(/\{errorCount\}/g, ctx.errorCount !== void 0 ? String(ctx.errorCount) : "").replace(/\{sessionTitle\}/g, ctx.sessionTitle ?? "").replace(/\{elapsed\}/g, formatElapsed(ctx.elapsedMs)).replace(/\{result\}/g, ctx.result ?? "");
+}
+var TOOL_RESULT_CAP = 160;
+function extractText(blocks, cap) {
+  let out = "";
+  const walk = (value) => {
+    if (out.length >= cap) return;
+    if (Array.isArray(value)) {
+      for (const item of value) walk(item);
+      return;
+    }
+    if (typeof value !== "object" || value === null) return;
+    const record = value;
+    if (record["type"] === "text" && typeof record["text"] === "string") {
+      out += record["text"];
+      return;
+    }
+    for (const child of Object.values(record)) walk(child);
+  };
+  walk(blocks);
+  return out.slice(0, cap);
+}
+function toolResultFacts(data) {
+  const failed = data.error !== void 0 || data.message?.content?.[0]?.isError === true;
+  return { ok: !failed, excerpt: extractText(data.message?.content?.[0]?.content, TOOL_RESULT_CAP) };
 }
 function effectiveCooldown(consecutive, base, factor, max) {
   const multiplier = Math.pow(factor, consecutive);
@@ -284,6 +316,7 @@ var freshState = () => ({
   lastFailure: void 0,
   lastFailureAt: 0,
   lastTool: void 0,
+  lastToolResult: void 0,
   lastTurn: void 0,
   pendingRecoveryAt: 0
 });
@@ -392,7 +425,16 @@ var AutoContinueRunner = class {
       case "session/event":
         if (frame.event.type === "tool/call") {
           const name = frame.event.data.name;
-          if (typeof name === "string") this.state(frame.sessionId).lastTool = name;
+          if (typeof name === "string") {
+            const state = this.state(frame.sessionId);
+            state.lastTool = name;
+            state.lastToolResult = "pending";
+          }
+        } else if (frame.event.type === "tool/result") {
+          const state = this.state(frame.sessionId);
+          if (state.lastToolResult === "pending") {
+            state.lastToolResult = toolResultFacts(frame.event.data);
+          }
         }
         this.onSessionEvent(frame.sessionId, frame.event);
         break;
@@ -412,6 +454,8 @@ var AutoContinueRunner = class {
     switch (event.type) {
       case "turn/start":
         state.running = true;
+        state.lastTool = void 0;
+        state.lastToolResult = void 0;
         this.cancelPending(sessionId, "宿主自行开启新回合");
         break;
       case "turn/end": {
@@ -639,14 +683,7 @@ var AutoContinueRunner = class {
         sessionTitle = info?.title;
       }
     }
-    const text = fillTemplate(template, {
-      facts: state.lastFailure,
-      tool: state.lastTool,
-      turn: state.lastTurn,
-      errorCount: state.consecutive + 1,
-      sessionTitle,
-      elapsedMs: state.lastFailureAt > 0 ? Date.now() - state.lastFailureAt : void 0
-    });
+    const text = this.buildContinueText(config, state, template, sessionTitle);
     const zone = clientTimeZone();
     state.lastAttemptAt = Date.now();
     try {
@@ -694,6 +731,40 @@ var AutoContinueRunner = class {
       releaseSend(sessionId);
     }
   }
+  /**
+   * 组装本次续跑消息: 模板填充 + 幂等护栏。
+   * 护栏依据上一步工具调用的执行状态附加指引, 防止重跑副作用操作:
+   * - 结果未确认(可能已部分执行)→ 提示先确认状态、不要重复执行
+   * - 已确认成功 → 提示已完成、不要重复执行
+   * - 已失败 → 不加护栏(重试工具本来就是目的)
+   */
+  buildContinueText(config, state, template, sessionTitle) {
+    let text = fillTemplate(template, {
+      facts: state.lastFailure,
+      tool: state.lastTool,
+      turn: state.lastTurn,
+      errorCount: state.consecutive + 1,
+      sessionTitle,
+      elapsedMs: state.lastFailureAt > 0 ? Date.now() - state.lastFailureAt : void 0
+    });
+    if (!config.guardTools) return text;
+    const guard = this.currentGuard(state);
+    if (guard.kind === "pending") {
+      text += ` ${fillTemplate(config.guardPendingText, { tool: guard.tool, result: guard.result })}`;
+    } else if (guard.kind === "done") {
+      text += ` ${fillTemplate(config.guardDoneText, { tool: guard.tool, result: guard.result })}`;
+    }
+    return text;
+  }
+  /** 上一步工具调用的护栏状态(实时路径, 由 mux 帧维护)。 */
+  currentGuard(state) {
+    if (state.lastTool === void 0 || state.lastToolResult === void 0) return { kind: "none" };
+    if (state.lastToolResult === "pending") return { kind: "pending", tool: state.lastTool };
+    if (state.lastToolResult.ok) {
+      return { kind: "done", tool: state.lastTool, result: state.lastToolResult.excerpt };
+    }
+    return { kind: "failed", tool: state.lastTool };
+  }
   /** 查一次 session.list, 顺带缓存该会话的标题。 */
   async fetchSessionInfo(sessionId) {
     try {
@@ -797,11 +868,34 @@ var AutoContinueRunner = class {
         if (superseded) break;
       }
       if (superseded) continue;
+      this.applyGuardFromEvents(state, events, lastEnd.seq);
       this.log(`扫描发现中断 ${summary.sessionId}(turn/end:${reason.kind}), 安排自动继续`);
       this.schedule(summary.sessionId, `scan:turn/end:${reason.kind}`);
     }
     return true;
   }
+  /** 从历史事件恢复上一步工具调用状态(扫描路径的幂等护栏)。 */
+  applyGuardFromEvents(state, events, untilSeq) {
+    state.lastTool = void 0;
+    state.lastToolResult = void 0;
+    let call;
+    for (const entry of events) {
+      const event = entry.event;
+      if (event.seq >= untilSeq) continue;
+      if (event.type === "tool/call") call = event;
+    }
+    if (call === void 0) return;
+    state.lastTool = call.data.name;
+    state.lastToolResult = "pending";
+    for (const entry of events) {
+      const event = entry.event;
+      if (event.seq <= call.seq || event.seq >= untilSeq) continue;
+      if (event.type === "tool/result") {
+        state.lastToolResult = toolResultFacts(event.data);
+        break;
+      }
+    }
+  }
 };
 
 // src/client/locales.ts
@@ -814,6 +908,12 @@ var zh = {
   "field.continueTextHint": "中断后自动发送的消息内容。",
   "field.continueTextMaxTokens": "超限时的继续文本",
   "field.continueTextMaxTokensHint": "达到输出 token 上限时自动发送的文本, 支持与继续文本相同的占位符。",
+  "field.guardTools": "幂等护栏",
+  "field.guardToolsHint": "续跑前检查上一步工具调用: 结果未确认时提示先确认状态, 已成功时提示不要重复执行, 避免重复 commit/调 API。",
+  "field.guardPendingText": "结果未确认时的护栏文本",
+  "field.guardPendingTextHint": "上一步工具可能已部分执行时附加到继续文本之后, 支持 {tool} 占位符。",
+  "field.guardDoneText": "工具已成功时的护栏文本",
+  "field.guardDoneTextHint": "上一步工具已确认成功时附加到继续文本之后, 支持 {tool} 与 {result}(结果摘要)占位符。",
   "field.graceMs": "宽限期 (ms)",
   "field.graceMsHint": "检测到中断后等待的时长; 期间宿主自行恢复则取消。",
   "field.cooldownMs": "冷却时间 (ms)",
@@ -878,6 +978,12 @@ var en = {
   "field.continueTextHint": "Message automatically sent after an interruption.",
   "field.continueTextMaxTokens": "Continue text (max tokens)",
   "field.continueTextMaxTokensHint": "Text sent when the output token ceiling is reached; same placeholders as the continue text.",
+  "field.guardTools": "Idempotency guard",
+  "field.guardToolsHint": "Before resuming, inspect the last tool call: if its result is unconfirmed, tell the model to check state first; if it succeeded, tell it not to rerun — avoids duplicate commits / API calls.",
+  "field.guardPendingText": "Guard text (unconfirmed result)",
+  "field.guardPendingTextHint": "Appended when the last tool may have partially executed; supports the {tool} placeholder.",
+  "field.guardDoneText": "Guard text (tool succeeded)",
+  "field.guardDoneTextHint": "Appended when the last tool is confirmed done; supports {tool} and {result} (result excerpt).",
   "field.graceMs": "Grace period (ms)",
   "field.graceMsHint": "Wait after an interruption; cancelled if the host recovers on its own.",
   "field.cooldownMs": "Cooldown (ms)",
@@ -1299,6 +1405,9 @@ var AutoContinueSettingsCardController = class {
       booleanField("paused"),
       textField("continueText"),
       textField("continueTextMaxTokens"),
+      booleanField("guardTools"),
+      textField("guardPendingText"),
+      textField("guardDoneText"),
       numberField("graceMs", 0),
       numberField("cooldownMs", 0),
       numberField("maxConsecutive", 1),
@@ -1321,6 +1430,9 @@ var AutoContinueSettingsCardController = class {
       paused: this.form.field("paused"),
       continueText: this.form.field("continueText"),
       continueTextMaxTokens: this.form.field("continueTextMaxTokens"),
+      guardTools: this.form.field("guardTools"),
+      guardPendingText: this.form.field("guardPendingText"),
+      guardDoneText: this.form.field("guardDoneText"),
       graceMs: this.form.field("graceMs"),
       cooldownMs: this.form.field("cooldownMs"),
       maxConsecutive: this.form.field("maxConsecutive"),
@@ -1600,6 +1712,42 @@ function AutoContinueSettingsCard(props) {
             onReset: () => props.resetField("continueTextMaxTokens")
           }
         ),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+          BooleanField,
+          {
+            id: "auto-continue-guard-tools",
+            label: t("field.guardTools"),
+            hint: t("field.guardToolsHint"),
+            ...shared,
+            ...state.guardTools,
+            onEdit: (text) => props.edit("guardTools", text),
+            onReset: () => props.resetField("guardTools")
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+          ValueField,
+          {
+            id: "auto-continue-guard-pending-text",
+            label: t("field.guardPendingText"),
+            hint: t("field.guardPendingTextHint"),
+            ...shared,
+            ...state.guardPendingText,
+            onEdit: (text) => props.edit("guardPendingText", text),
+            onReset: () => props.resetField("guardPendingText")
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+          ValueField,
+          {
+            id: "auto-continue-guard-done-text",
+            label: t("field.guardDoneText"),
+            hint: t("field.guardDoneTextHint"),
+            ...shared,
+            ...state.guardDoneText,
+            onEdit: (text) => props.edit("guardDoneText", text),
+            onReset: () => props.resetField("guardDoneText")
+          }
+        ),
         /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
           ValueField,
           {
@@ -1787,8 +1935,7 @@ function apply(ctx) {
     () => ctx.slots.register(
       {
         name: "settings.plugin.item",
-        id: "auto-continue",
-        order: 90,
+        key: SETTINGS_NS,
         locale: NS,
         inject: () => controller.inject()
       },