dsh-dynamic-context 0.1.1-rc.35 → 0.1.1-rc.36

package/CHANGELOG.md

@@ -1,7 +1,7 @@
-# 0.1.1-rc.35 — DSH compatibility line
+# 0.1.1-rc.36 — DSH compatibility line
 
-- Pin this build to its listed DSH releases and pair it with the other plugin on RC slot 5.
-- Use the native Session plugin record API. Adapt the Web read endpoint to the native Session lookup of this host generation.
+- Pin this build to its listed DSH releases and pair it with the other plugin on RC slot 6.
+- Persist plugin records in a separate JSONL-host-bound journal while validating native tool evidence against DSH persistence. Adapt the Web read endpoint to the native Session lookup of this host generation.
 
 # 0.1.0-rc.24 — task-graph prerequisite and graph provenance (2026-11-13)
 

package/DSH-COMPATIBILITY.json

@@ -1,13 +1,13 @@
 {
   "schema": 1,
   "updateRound": 3,
-  "slot": 5,
-  "branch": "0.2.1-alpha.2",
-  "host": "0.2.1-alpha.2",
+  "slot": 6,
+  "branch": "0.2.1-alpha.1",
+  "host": "0.2.1-alpha.1",
   "hosts": [
-    "0.2.1-alpha.2"
+    "0.2.1-alpha.1"
   ],
-  "channel": "dsh-0.2.1-alpha.2",
-  "taskgraph": "0.3.1-rc.35",
-  "dynamicContext": "0.1.1-rc.35"
+  "channel": "dsh-0.2.1-alpha.1",
+  "taskgraph": "0.3.1-rc.36",
+  "dynamicContext": "0.1.1-rc.36"
 }

package/README.md

@@ -1,8 +1,8 @@
 # dsh-dynamic-context：动态上下文与受控请求通道
 
-本构建版本为 `0.1.1-rc.35`。适用宿主和配套版本见 [兼容清单](DSH-COMPATIBILITY.json)。
+本构建版本为 `0.1.1-rc.36`。适用宿主和配套版本见 [兼容清单](DSH-COMPATIBILITY.json)。
 
-分支 `0.2.1-alpha.2` 对应 npm 标签 `dsh-0.2.1-alpha.2`，适用于 DSH `0.2.1-alpha.2`，Node.js 要求为 `^22.19.0 || >=24.0.0`。请在同一 DSH profile 先安装 `dsh-bettertaskgraphs@0.3.1-rc.35`，再安装 `dsh-dynamic-context@0.1.1-rc.35`。Bundle 初装默认关闭，完成配置并启用后为新对话提供会话模式选择。
+分支 `0.2.1-alpha.1` 对应 npm 标签 `dsh-0.2.1-alpha.1`，适用于 DSH `0.2.1-alpha.1`，Node.js 要求为 `^22.19.0 || >=24.0.0`。请在同一 DSH profile 先安装 `dsh-bettertaskgraphs@0.3.1-rc.36`，再安装 `dsh-dynamic-context@0.1.1-rc.36`。Bundle 初装默认关闭，完成配置并启用后为新对话提供会话模式选择。
 
 前置插件：[dsh-bettertaskgraphs](https://github.com/oldcitynight/dsh-bettertaskgraphs)。开源协议为 GPL-3.0-only；复制的 DeepSeek 压缩策略另保留原 MIT 声明。验证范围和独立测试方法见 [VALIDATION.md](VALIDATION.md)。GitHub 源码发布与 npm 包发布是不同步骤，当前候选可从源码构建安装包。
 
@@ -17,7 +17,7 @@ TMPDIR="$PWD/.test-tmp" npm test
 npm run pack:bundle
 ```
 
-源码构建依赖任务图 `0.3.1-rc.35`。该版本发布前，先将同一批次的任务图 tarball 加入 npm 缓存，再执行 npm ci。运行配置见 `examples/`。
+源码构建依赖任务图 `0.3.1-rc.36`。该版本发布前，先将同一批次的任务图 tarball 加入 npm 缓存，再执行 npm ci。运行配置见 `examples/`。
 
 候选包的独立支持范围是 direct。`native-guarded` 仅为开发对照，依赖另行安装的 context-guard wire hook；干净 DSH 没有该补丁时，在认领任务和创建执行 Agent 前拒绝运行。发布包不修改 DSH 适配器来启用该对照通道。
 

package/RELEASING.md

@@ -1,6 +1,6 @@
-## 0.1.1-rc.35 维护线
+## 0.1.1-rc.36 维护线
 
-DSH `0.2.1-alpha.2`。同批配对任务图 `0.3.1-rc.35` 和动态上下文 `0.1.1-rc.35`，npm 通道为 `dsh-0.2.1-alpha.2`。兼容清单随 Bundle 分发。
+DSH `0.2.1-alpha.1`。同批配对任务图 `0.3.1-rc.36` 和动态上下文 `0.1.1-rc.36`，npm 通道为 `dsh-0.2.1-alpha.1`。兼容清单随 Bundle 分发。
 
 # 发布候选包 rc.24
 

package/VALIDATION.md

@@ -1,4 +1,4 @@
-# Candidate 0.1.1-rc.35
+# Candidate 0.1.1-rc.36
 
 See [the compatibility manifest](DSH-COMPATIBILITY.json) for the exact host versions and package pairing.
 

package/direct-runtime.mjs

@@ -1,5 +1,6 @@
 // SPDX-License-Identifier: GPL-3.0-only
 import fs from 'node:fs'
+import { homedir } from 'node:os'
 import path from 'node:path'
 import { createHash } from 'node:crypto'
 import { AsyncLocalStorage } from 'node:async_hooks'
@@ -10,9 +11,9 @@ import { defineTool } from '@deepseek-ai/dsh-tools'
 import { setSandboxMode } from '@deepseek-ai/dsh-sandbox-policy'
 import { setApprovalPolicy } from '@deepseek-ai/dsh-user-approval'
 import { discoverBaselineInstructionFiles } from '@deepseek-ai/dsh-agent-instructions'
-import { resolveDshHome, resolveAgentsHome } from '@deepseek-ai/dsh-home-paths'
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths'
 import { createAssistantMessage, createSystemMessage, createToolResultMessage } from '@deepseek-ai/dsh-llm'
-import { appendPluginRecord, Session } from '@deepseek-ai/dsh-session'
+import { Session } from '@deepseek-ai/dsh-session'
 import { digest } from 'dsh-bettertaskgraphs/core'
 import { deepFreeze, textContent } from './request-policy.mjs'
 import { DynamicContextError, fail } from './core.mjs'
@@ -56,8 +57,8 @@ const nativeModules = {
   shell: ['@deepseek-ai/dsh-tool-bash', { enableRunInBackground: false, promoteOnTimeout: false }],
   web: ['@deepseek-ai/dsh-tool-web', {}],
 }
-const requiredServices = { filesystem: ['fs', 'workingDirectory'], search: ['subprocess', 'workingDirectory'],
-  shell: ['shell', 'shellEnv', 'sandbox', 'workingDirectory'], web: ['web'], skills: ['skills'], state: [] }
+const requiredServices = { filesystem: ['fs'], search: ['subprocess'],
+  shell: ['shell', 'shellEnv', 'sandbox'], web: ['web'], skills: ['skills'], state: [] }
 const readTools = new Set(['read', 'glob', 'grep', 'web_search', 'web_fetch', 'skill', 'dynamic_task_status', 'dynamic_context_source_read'])
 const modes = ['read-only', 'workspace-write', 'danger-full-access']
 const minimumMode = (...values) => modes[Math.min(...values.map(value => modes.indexOf(value)))]
@@ -72,18 +73,20 @@ const jsonTool = (name, description, parameters, execute) => defineTool({ name,
 export async function prepareDirectRuntime({ ctx, config, assembly, sessionId, sourceAgent, control, record, resumeState, sourceReader }) {
   const options = config.direct.runtime
   if (!options) return undefined
-  for (const service of ['sandboxPolicy', 'approval', 'workingDirectory', ...options.modules.flatMap(name => requiredServices[name])]) {
+  for (const service of ['sandboxPolicy', 'approval', ...options.modules.flatMap(name => requiredServices[name])]) {
     if (!ctx.get(service)) fail('DIRECT_RUNTIME_MISSING_SERVICE', service)
   }
-  const sandboxPolicy = ctx.get('sandboxPolicy'), approval = ctx.get('approval'), workingDirectory = ctx.get('workingDirectory')
+  const sandboxPolicy = ctx.get('sandboxPolicy'), approval = ctx.get('approval')
   const filesystem = ctx.get('fs'), shell = ctx.get('shell'), skills = ctx.get('skills'), sessions = ctx.get('sessions')
   const sandbox = ctx.get('sandbox'), subprocess = ctx.get('subprocess'), credentials = ctx.get('credentials')
   const root = fs.realpathSync(config.projectRoot), cwd = fs.realpathSync(path.resolve(root, options.cwd ?? '.'))
   if (!inside(root, cwd) || !fs.statSync(cwd).isDirectory()) fail('DIRECT_RUNTIME_INVALID_WORKSPACE')
   const stateDirectory = fs.realpathSync(config.directory)
   if (inside(root, stateDirectory)) fail('DIRECT_RUNTIME_STATE_INSIDE_WORKSPACE')
+  const sessionRecords = ctx.transactionGraph.sessionRecords
+  const recordRoot = sessionRecords.root(true)
   if (process.platform === 'linux' && options.modules.includes('shell') && inside('/tmp', stateDirectory)) fail('DIRECT_RUNTIME_STATE_IN_SHARED_TEMP')
-  const instructionHomes = options.instructionHomes ?? { dshHome: resolveDshHome(), agentsHome: resolveAgentsHome() }
+  const instructionHomes = options.instructionHomes ?? { dshHome: resolveDshHome(), agentsHome: path.resolve(process.env.DSH_AGENTS_HOME || path.join(homedir(), '.agents')) }
   if (sourceAgent && ctx.agents.get(sourceAgent.id) !== sourceAgent) fail('DIRECT_RUNTIME_UNOWNED_SOURCE_AGENT')
   const ownerState = () => {
     const policy = sandboxPolicy.resolve(sourceAgent ? { session: sourceAgent.session } : {})
@@ -112,6 +115,18 @@ export async function prepareDirectRuntime({ ctx, config, assembly, sessionId, s
     if (!options.instructions) return []
     const files = await discoverBaselineInstructionFiles({ cwd: directory, projectRoot: root,
       ...instructionHomes, signal: control.signal })
+    // This host reads DSH_HOME/AGENTS.md and project rules. Include the
+    // second user-global file in the same pinned, bounded read as newer hosts.
+    const agentsRules = path.join(instructionHomes.agentsHome, 'AGENTS.md')
+    if (agentsRules !== path.join(instructionHomes.dshHome, 'AGENTS.md')
+        && !files.some(file => file.absolutePath === agentsRules)) {
+      try {
+        const info = fs.lstatSync(agentsRules)
+        if (!info.isFile()) fail('DIRECT_RUNTIME_INSTRUCTION_PATH_TYPE')
+        const global = files[0]?.absolutePath === path.join(instructionHomes.dshHome, 'AGENTS.md')
+        files.splice(global ? 1 : 0, 0, { absolutePath: agentsRules, displayPath: agentsRules })
+      } catch (error) { if (error.code !== 'ENOENT') throw error }
+    }
     const rows = []; let total = 0
     for (const file of files) {
       control.signal.throwIfAborted()
@@ -166,7 +181,7 @@ export async function prepareDirectRuntime({ ctx, config, assembly, sessionId, s
     if (options.protectPrivatePaths) privacy = createPrivatePathGuard({
       sandbox: options.modules.includes('shell') && assembly.tools.includes('bash') ? sandbox : undefined,
       subprocess: options.modules.includes('search') && assembly.tools.some(name => ['glob', 'grep'].includes(name)) ? subprocess : undefined,
-      workspaceRoot: cwd, protectedRoots: [config.storageRoot ?? root, stateDirectory,
+      workspaceRoot: cwd, protectedRoots: [config.storageRoot ?? root, stateDirectory, recordRoot,
         path.join(config.storageRoot ?? root, '.dsh', 'workflow-witnesses-v1'), ...options.privateReadRoots],
       credentialFiles: [serviceIdentity(credentials)?.spec?.filename,
         path.join(resolveDshHome(), '.credentials.yaml'), path.join(instructionHomes.dshHome, '.credentials.yaml'),
@@ -221,7 +236,6 @@ export async function prepareDirectRuntime({ ctx, config, assembly, sessionId, s
         agentCtx.tools.restrict({ allow: assembly.tools })
         setSandboxMode(agent.session, policy.sandboxMode)
         setApprovalPolicy(agent.session, policy.approvalPolicy)
-        appendPluginRecord(agent.session, 'plugin:dynamic-context/execution-host-v1', { taskId: assembly.task.id, contextVersion: assembly.contextVersion, policy })
         // The identity is native, but only this private runner owns its loop.
         for (const method of ['followup', 'inject', 'steer']) Object.defineProperty(agent, method, {
           value: () => fail('DIRECT_RUNTIME_NATIVE_MESSAGE_DISABLED'), configurable: false, writable: false,
@@ -230,6 +244,7 @@ export async function prepareDirectRuntime({ ctx, config, assembly, sessionId, s
       },
     }))
     const { agent } = handle
+    sessionRecords.append(agent.session, 'plugin:dynamic-context/execution-host-v1', { taskId: assembly.task.id, contextVersion: assembly.contextVersion, policy })
     const visible = ctx.tools.schemas(agent).map(row => row.name).sort()
     if (JSON.stringify(visible) !== JSON.stringify([...assembly.tools].sort())) fail('DIRECT_RUNTIME_TOOL_SCOPE_MISMATCH')
     const shellConfinement = assembly.tools.includes('bash') ? await sandbox.confine(['true'], {
@@ -283,12 +298,12 @@ export async function prepareDirectRuntime({ ctx, config, assembly, sessionId, s
     ]
     const systemPrompt = `${config.systemPrompt}\n\n${rules.join('\n')}\n\n<direct_host_facts>\n${JSON.stringify(facts)}\n</direct_host_facts>`
     const currentPolicy = () => ({ sandboxMode: sandboxPolicy.resolve({ session: agent.session }).mode,
-      approvalPolicy: approval.effectivePolicy(agent.session), plan: policy.plan, cwd: workingDirectory.get(agent.session) })
+      approvalPolicy: approval.effectivePolicy(agent.session), plan: policy.plan, cwd: agent.session.header.cwd })
     const check = () => {
       control.signal.throwIfAborted()
       if (sourceAgent && ctx.agents.get(sourceAgent.id) !== sourceAgent) fail('DIRECT_RUNTIME_OWNER_DISPOSED')
       if (ctx.agents.get(agent.id) !== agent) fail('DIRECT_RUNTIME_EXECUTION_HOST_DISPOSED')
-      for (const [name, service] of Object.entries({ sandboxPolicy, approval, workingDirectory, fs: filesystem, sandbox, subprocess, shell, skills, credentials }))
+      for (const [name, service] of Object.entries({ sandboxPolicy, approval, fs: filesystem, sandbox, subprocess, shell, skills, credentials }))
         if (serviceIdentity(ctx.get(name)) !== serviceIdentity(service)) fail('DIRECT_RUNTIME_SERVICE_CHANGED')
       privacy?.check()
       if (digest(ownerState()) !== digest(owner) || digest(currentPolicy()) !== digest(policy)) fail('DIRECT_RUNTIME_POLICY_CHANGED')
@@ -352,7 +367,7 @@ export async function prepareDirectRuntime({ ctx, config, assembly, sessionId, s
         const initial = new Set(initialInstructions.map(row => row.path)), required = new Set(facts.requiredSkills.map(row => row.name))
         return { instructions: [...instructionPins.values()].filter(row => !initial.has(row.path)), skills: [...loadedSkills.values()].filter(row => !required.has(row.name)) }
       },
-      checkpoint(reference) { appendPluginRecord(agent.session, 'plugin:dynamic-context/checkpoint-v1', reference) },
+      checkpoint(reference) { sessionRecords.append(agent.session, 'plugin:dynamic-context/checkpoint-v1', reference) },
       async complete() { await verifySources(); completed = true; await close() },
       async preflight(calls) {
         await verifySources()

package/host.mjs

@@ -11,7 +11,6 @@ import AgentLoop from '@deepseek-ai/dsh-agent-loop'
 import TokenMeter from '@deepseek-ai/dsh-token-meter'
 import SandboxPolicy from '@deepseek-ai/dsh-sandbox-policy'
 import Filesystem from '@deepseek-ai/dsh-fs-sandbox'
-import WorkingDirectory from '@deepseek-ai/dsh-working-directory'
 import Approval from '@deepseek-ai/dsh-user-approval'
 import Subprocess from '@deepseek-ai/dsh-subprocess-local'
 import Sandbox from '@deepseek-ai/dsh-sandbox-local'
@@ -46,7 +45,6 @@ export async function createDirectHost(input) {
     const runtime = config.direct.runtime
     await ctx.plugin(SandboxPolicy, { mode: runtime.sandboxMode, workspaceRoot: config.projectRoot })
     await ctx.plugin(Filesystem, { cwd: config.projectRoot })
-    await ctx.plugin(WorkingDirectory, { defaultDirectory: config.projectRoot })
     await ctx.plugin(Approval, { policy: runtime.approvalPolicy })
     await ctx.plugin(Subprocess)
     await ctx.plugin(Sandbox)

package/index.mjs

@@ -3,7 +3,7 @@ import fs from 'node:fs'
 import path from 'node:path'
 import { createHash, randomUUID } from 'node:crypto'
 import { createUserMessage } from '@deepseek-ai/dsh-llm'
-import { SessionId, appendPluginRecord } from '@deepseek-ai/dsh-session'
+import { SessionId } from '@deepseek-ai/dsh-session'
 import { z } from 'zod'
 import { DynamicContextGraph, fail } from './core.mjs'
 import { digest } from 'dsh-bettertaskgraphs/core'
@@ -142,7 +142,7 @@ export class DynamicContextRuntime {
   }
   graphPresence() {
     const presence = this.graph.store.recoveryPlan()
-    if (presence.state === 'NEVER_CREATED' && this.controller?.session.snapshotEvents().some(event =>
+    if (presence.state === 'NEVER_CREATED' && this.controller && this.taskGraph.sessionRecords.read(this.controller.session).some(({ event }) =>
       event.type === GRAPH_COMMIT_RECORD && event.ignorable && event.data.workflowId === this.workflowId))
       return { state: 'GRAPH_AND_WITNESS_LOST_AFTER_COMMIT', previouslyCommitted: true, recoveryRequired: true, canRestore: false }
     return presence
@@ -248,7 +248,7 @@ export class DynamicContextRuntime {
       if (this.config.transport === 'direct' && !this.config.direct.runtime && (binding.tools ?? []).some(tool => !this.config.direct.agentlessTools.includes(tool))) fail('DIRECT_TOOL_REQUIRES_EXPLICIT_AGENTLESS_PERMISSION')
     }
     const result = this.graph.submit(proposal)
-    if (sourceAgent) appendPluginRecord(sourceAgent.session, GRAPH_COMMIT_RECORD, { workflowId: this.workflowId,
+    if (sourceAgent) this.taskGraph.sessionRecords.append(sourceAgent.session, GRAPH_COMMIT_RECORD, { workflowId: this.workflowId,
       graphId: result.graph.state.plan.id, firstChecksum: result.checksum, revision: result.revision })
     this.publish('created'); return result
   }

package/interaction.mjs

@@ -2,7 +2,6 @@
 import fs from 'node:fs'
 import path from 'node:path'
 import { defineTool } from '@deepseek-ai/dsh-tools'
-import { appendPluginRecord } from '@deepseek-ai/dsh-session'
 import { digest, normalizePlan } from 'dsh-bettertaskgraphs/core'
 import { connectTaskGraph } from './interop.mjs'
 import { registerControlTools } from './control-tools.mjs'
@@ -29,8 +28,8 @@ export class SessionInteraction {
     this.entries = new Map(); this.filters = new Map(); this.pending = new Set(); this.closed = false
   }
   record(agent) {
-    return agent?.session.snapshotEvents().findLast(event => event.type === MODE_RECORD
-      && event.ignorable === true && event.data.sessionId === agent.session.id)?.data
+    return agent && this.template.taskGraph.sessionRecords.read(agent.session).findLast(({ event }) => event.type === MODE_RECORD
+      && event.data.sessionId === agent.session.id)?.event.data
   }
   classic(agent) {
     if (!agent || this.ctx.agents.get(agent.id) !== agent) return null
@@ -43,7 +42,9 @@ export class SessionInteraction {
   linkedPresence(agent) {
     const entry = this.entries.get(agent)
     if (entry) return entry.runner.graphPresence()
-    const events = agent.session.snapshotEvents()
+    let events
+    try { events = this.template.taskGraph.sessionRecords.read(agent.session).map(({ event }) => event) }
+    catch (error) { return { state: 'SESSION_PLUGIN_RECORDS_UNAVAILABLE', previouslyCommitted: null, code: error.code ?? error.name } }
     const key = digest({ id: agent.session.id, createdAt: agent.session.header.createdAt, cwd: agent.session.header.cwd })
     const committed = events.some(event => event.ignorable && event.type === GRAPH_COMMIT_RECORD
       && event.data.workflowId === `workflow_${key.slice(0, 40)}`)
@@ -74,7 +75,7 @@ export class SessionInteraction {
       text: ({ agent }) => {
         if (!agent || !ctx.agents.roots().includes(agent)) return ''
         const mode = this.mode(agent), entry = this.entries.get(agent)
-        const state = { mode, selected: Boolean(this.record(agent)), taskGraphPresent: Boolean(this.classic(agent)), baseGraphPresence: this.basePresence(agent) }
+        const state = { mode, selected: mode === 'recovery' ? null : Boolean(this.record(agent)), taskGraphPresent: Boolean(this.classic(agent)), baseGraphPresence: this.basePresence(agent) }
         if (mode !== 'full' || !entry) return JSON.stringify(state)
         const runner = entry.runner
         return JSON.stringify({ ...state, workflowId: runner.config.interop.workflowId, status: runner.status() })
@@ -163,9 +164,10 @@ export class SessionInteraction {
     this.exact(agent); signal?.throwIfAborted()
     if (typeof reason !== 'string' || !reason.trim()) reject('DYNAMIC_CONTEXT_MODE_REASON_REQUIRED')
     if (this.pending.has(agent)) reject('DYNAMIC_CONTEXT_MODE_QUESTION_PENDING')
+    const baseGraphPresence = this.basePresence(agent)
+    if (!['PRESENT', 'CREATION_PENDING', 'NEVER_CREATED', 'OUTSIDE_SCOPE'].includes(baseGraphPresence.state))
+      return { status: 'RECOVERY_REQUIRED', mode: 'recovery', baseGraphPresence, changed: false }
     const prior = this.record(agent)
-    if (!['PRESENT', 'CREATION_PENDING', 'NEVER_CREATED', 'OUTSIDE_SCOPE'].includes(this.basePresence(agent).state))
-      return { status: 'RECOVERY_REQUIRED', mode: 'recovery', baseGraphPresence: this.basePresence(agent), changed: false }
     const graphPresence = this.entries.get(agent)?.runner.graphPresence()
     if (graphPresence?.recoveryRequired) return { status: 'RECOVERY_REQUIRED', mode: 'full', graphPresence, changed: false, nextTool: 'dynamic_context_recover_graphs' }
     if (prior && !reconsider) return { mode: prior.mode, alreadySelected: true }
@@ -186,7 +188,7 @@ export class SessionInteraction {
     const row = { version: 1, sessionId: agent.session.id, mode, evidence,
       ...(mode === 'full' && this.template.config.revision ? { policy: this.policy(agent) } : {}) }
     await this.release(agent)
-    appendPluginRecord(agent.session, MODE_RECORD, row)
+    this.template.taskGraph.sessionRecords.append(agent.session, MODE_RECORD, row)
     if (!await this.ctx.sessions.flush(agent.session)) reject('DYNAMIC_CONTEXT_MODE_NOT_DURABLE')
     signal?.throwIfAborted(); this.exact(agent)
     if (mode === 'full') await this.mount(agent, row)

package/interop.mjs

@@ -13,6 +13,7 @@ export function requireTaskGraph(ctx, expected) {
   if (!service || expected && identity(service) !== identity(expected) || service.host?.closed || service.workflows?.closed
       || service.workflowContract !== WORKFLOW_CONTRACT || service.extensionContract !== EXTENSION_CONTRACT
       || typeof service.registerWorkflowProvider !== 'function' || typeof service.registerSessionPolicy !== 'function'
+      || typeof service.sessionRecords?.read !== 'function' || typeof service.sessionRecords?.append !== 'function'
       || typeof service.createExtensionStore !== 'function' || typeof service.inspectGraphPresence !== 'function')
     throw new Error('DYNAMIC_CONTEXT_REQUIRES_ACTIVE_TASK_GRAPH')
   return service

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-dynamic-context",
-  "version": "0.1.1-rc.35",
+  "version": "0.1.1-rc.36",
   "description": "Task-scoped direct model execution, native tools and durable context checkpoints for DeepSeek Harness",
   "license": "GPL-3.0-only",
   "type": "module",
@@ -64,7 +64,7 @@
   ],
   "engines": {
     "node": "^22.19.0 || >=24.0.0",
-    "dsh": "0.2.1-alpha.2"
+    "dsh": "0.2.1-alpha.1"
   },
   "scripts": {
     "test": "node scripts/test.mjs",
@@ -79,41 +79,40 @@
     "zod": "4.6.7"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-fs": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-credentials-local": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-authorization": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-deepseek-account-platform": "0.2.1-alpha.2",
-    "dsh-bettertaskgraphs": "0.3.1-rc.35",
+    "@deepseek-ai/dsh-fs": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-credentials-local": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-authorization": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-deepseek-account-platform": "0.2.1-alpha.1",
+    "dsh-bettertaskgraphs": "0.3.1-rc.36",
     "@deepseek-ai/cordis": "4.0.5",
-    "@deepseek-ai/dsh-agent": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-agent-instructions": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-llm": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-sandbox-policy": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-scope": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-tools": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-user-approval": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-tool-fs": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-tool-fs-search": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-tool-bash": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-tool-web": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-agent-loop": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-token-meter": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-fs-sandbox": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-working-directory": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-subprocess-local": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-sandbox-local": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-bash-sandbox": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-shell-env": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-skill": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-fs-observation-policy": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-tool-call-timeout-policy": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-llm-deepseek": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-user-questions": "0.2.1-alpha.2"
+    "@deepseek-ai/dsh-agent": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-agent-instructions": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-home-paths": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-llm": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-sandbox-policy": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-scope": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-session": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-tools": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-user-approval": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-tool-fs": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-tool-fs-search": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-tool-bash": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-tool-web": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-agent-loop": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-token-meter": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-fs-sandbox": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-subprocess-local": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-sandbox-local": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-bash-sandbox": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-shell-env": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-skill": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-fs-observation-policy": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-tool-call-timeout-policy": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-llm-deepseek": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-user-questions": "0.2.1-alpha.1"
   },
   "dsh": {
     "bundle": {
@@ -122,12 +121,12 @@
   },
   "publishConfig": {
     "access": "public",
-    "tag": "dsh-0.2.1-alpha.2",
+    "tag": "dsh-0.2.1-alpha.1",
     "registry": "https://registry.npmjs.org/"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh": "0.2.1-alpha.2",
-    "dsh-bettertaskgraphs": "0.3.1-rc.35"
+    "@deepseek-ai/dsh": "0.2.1-alpha.1",
+    "dsh-bettertaskgraphs": "0.3.1-rc.36"
   },
   "homepage": "https://github.com/oldcitynight/dsh-dynamic-context#readme",
   "repository": {

package/revision-host.mjs

@@ -6,14 +6,14 @@ import { copy, digest, GraphError } from 'dsh-bettertaskgraphs/core'
 import { artifactProof } from './artifacts.mjs'
 
 export function revisionAuthority(ctx, agent) {
-  const sessions = ctx.get?.('sessions') ?? ctx.sessions, workingDirectory = ctx.get?.('workingDirectory') ?? ctx.workingDirectory
+  const sessions = ctx.get?.('sessions') ?? ctx.sessions
   if (!agent || ctx.agents.get(agent.id) !== agent || sessions.get(agent.session.id) !== agent.session)
     throw new GraphError('REVISION_CONTROLLER_CHANGED')
   const sandbox = ctx.get('sandboxPolicy')?.resolve({ session: agent.session }), goal = ctx.get('goals')?.get(agent)
   const plan = ctx.get('runtimeQuality')?.planActive(agent)
     ?? ctx.get('agentPresets')?.serviceFor(agent, 'planMode')?.loggedActive(agent.session)
     ?? agent.ctx?.get('planMode')?.loggedActive(agent.session)
-  return { cwd: workingDirectory.get(agent.session), header: agent.session.header,
+  return { cwd: ctx.get?.('workingDirectory')?.get(agent.session) ?? agent.session.header.cwd, header: agent.session.header,
     input: agent.session.deriveMessages().filter(message => ['user', 'developer', 'system'].includes(message.role)),
     sandbox: sandbox ? { mode: sandbox.mode, workspaceRoot: sandbox.workspaceRoot } : null,
     approval: ctx.get('approval')?.effectivePolicy(agent.session) ?? null, plan: Boolean(plan),

package/test/interaction.test.mjs

@@ -73,7 +73,9 @@ for (const mode of ['native', 'task-graph', 'full']) test(`human choice ${mode}
   assert.equal(schemaNames(f.h.ctx, first.agent).includes('dynamic_context_submit'), mode === 'full')
   assert.equal((await f.call(first.agent, 'dynamic_context_select_mode', { reason: '重复调用' })).alreadySelected, true)
   assert.equal(f.questions.length, 1)
-  assert.ok(first.agent.session.snapshotEvents().some(row => row.type === MODE_RECORD && row.data.mode === mode))
+  const records = f.h.ctx.transactionGraph.sessionRecords
+  assert.ok(records.read(first.agent.session).some(({ event }) => event.type === MODE_RECORD && event.data.mode === mode))
+  assert.ok(!first.agent.session.snapshotEvents().some(event => event.type === MODE_RECORD))
   const secondPrompt = await f.h.ctx.systemPrompt.assemble({ agent: second.agent, scope: second.agent })
   assert.doesNotMatch(JSON.stringify(secondPrompt), /FIRST_TASK_CONTRACT|MUST_NOT_LEAK_TEMPLATE_GOAL/)
   if (mode === 'full') {
@@ -187,7 +189,7 @@ test('session commit receipt prevents fresh creation after both graph and witnes
   await f.call(agent, 'dynamic_context_select_mode', { reason: '项目任务' })
   await f.call(agent, 'dynamic_context_submit', { proposal: runtimeProposal([]) })
   const child = f.h.runner.interaction.entries.get(agent).runner
-  assert.ok(agent.session.snapshotEvents().some(event => event.type === GRAPH_COMMIT_RECORD))
+  assert.ok(f.h.ctx.transactionGraph.sessionRecords.read(agent.session).some(({ event }) => event.type === GRAPH_COMMIT_RECORD))
   fs.unlinkSync(child.graph.store.file); fs.unlinkSync(child.graph.store.witness.file)
   assert.equal(child.graphPresence().state, 'GRAPH_AND_WITNESS_LOST_AFTER_COMMIT')
   assert.equal(child.graphPresence().canRestore, false)
@@ -279,3 +281,22 @@ for (const full of [false, true]) test(`native tool loop reaches ${full ? 'joint
   }
   assert.equal(f.questions.length, 1)
 })
+
+test('legacy session record loss blocks mode changes while native JSONL remains readable', async t => {
+  const f = await fixture(t), { agent } = await f.agent('lost-plugin-records')
+  await f.call(agent, 'dynamic_context_select_mode', { reason: '项目任务' })
+  await f.call(agent, 'dynamic_context_submit', { proposal: runtimeProposal([]) })
+  const records = f.h.ctx.transactionGraph.sessionRecords
+  const native = await f.h.ctx.sessionPersistence.open(agent.id, 'read')
+  try {
+    const { events } = await native.read(0, 100)
+    assert.ok(events.some(row => row.type === 'user/message'))
+    assert.ok(events.every(row => !row.type.startsWith('plugin:')))
+  } finally { await native.close() }
+  fs.unlinkSync(path.join(records.directory(agent.session), 'records.json'))
+  const status = await f.call(agent, 'dynamic_context_graph_status', {})
+  assert.equal(status.mode, 'recovery')
+  assert.equal(status.base.code, 'LEGACY_SESSION_RECORD_JOURNAL_MISSING')
+  const selection = await f.call(agent, 'dynamic_context_select_mode', { reason: '尝试新建', reconsider: true })
+  assert.equal(selection.status, 'RECOVERY_REQUIRED')
+})

package/testing/harness.mjs

@@ -12,7 +12,6 @@ import TaskGraph from 'dsh-bettertaskgraphs'
 import Persistence from '@deepseek-ai/dsh-session-persistence-jsonl'
 import SandboxPolicy from '@deepseek-ai/dsh-sandbox-policy'
 import Filesystem from '@deepseek-ai/dsh-fs-sandbox'
-import WorkingDirectory from '@deepseek-ai/dsh-working-directory'
 import * as DynamicContext from '../index.mjs'
 import { startFakeLlama } from './fake-llama.mjs'
 
@@ -50,7 +49,6 @@ export async function createHarness({ projectRoot, directory, respond, config =
     if (taskGraph && !ctx.get('transactionGraph')) {
       if (!ctx.get('sandboxPolicy')) await ctx.plugin(SandboxPolicy, { mode: 'workspace-write', workspaceRoot: projectRoot })
       if (!ctx.get('fs')) await ctx.plugin(Filesystem, { cwd: projectRoot })
-      if (!ctx.get('workingDirectory')) await ctx.plugin(WorkingDirectory, { defaultDirectory: projectRoot })
       if (!ctx.get('sessionPersistence')) await ctx.plugin(Persistence, { root: directory + '/native-sessions' })
       await ctx.plugin(TaskGraph, { projectRoot })
     }

package/testing/runtime-harness.mjs

@@ -1,6 +1,5 @@
 import SandboxPolicy from '@deepseek-ai/dsh-sandbox-policy'
 import SandboxedFileSystem from '@deepseek-ai/dsh-fs-sandbox'
-import WorkingDirectory from '@deepseek-ai/dsh-working-directory'
 import Approval from '@deepseek-ai/dsh-user-approval'
 import Subprocess from '@deepseek-ai/dsh-subprocess-local'
 import Sandbox from '@deepseek-ai/dsh-sandbox-local'
@@ -21,7 +20,6 @@ export async function createRuntimeHarness({ projectRoot, directory, respond, ba
     setup: async ctx => {
       await ctx.plugin(SandboxPolicy, { mode, workspaceRoot: projectRoot })
       await ctx.plugin(SandboxedFileSystem, { cwd: projectRoot })
-      await ctx.plugin(WorkingDirectory, { defaultDirectory: projectRoot })
       await ctx.plugin(Approval, { policy: approval })
       await ctx.plugin(Subprocess)
       await ctx.plugin(Sandbox)