dsh-immune-system 0.9.0 → 0.9.2

package/README.md

@@ -1,5 +1,10 @@
 # dsh-plugin-immune
 
+[![npm](https://img.shields.io/npm/v/dsh-immune-system)](https://www.npmjs.com/package/dsh-immune-system)
+![license](https://img.shields.io/badge/license-MIT-green)
+![node](https://img.shields.io/badge/node-%E2%89%A522.5-blue)
+[![DSH plugin](https://img.shields.io/badge/DSH-plugin%20hub-4f9cf9)](https://dsh-plugin.org/plugins)
+
 **自进化避坑免疫系统** — 让 Agent 踩一次坑，就自己长记性。
 
 Agent 踩了坑、修好了，却没人写文档——这次的经验被自动提炼成一条**抗体**。
@@ -10,7 +15,7 @@ Agent 踩了坑、修好了，却没人写文档——这次的经验被自动
 > mistake can repeat.
 
 支持两个宿主：**DSH**（DeepSeek Harness，已按真实宿主契约实测）与 **ZCode**（按实测 hook 契约）。
-两者共用同一份 `core/`。
+两者共用同一份 `core/`，npm 包同名发布，一次踩坑、处处免疫。
 
 [中文](#中文) · [English](#english)
 
@@ -39,29 +44,24 @@ Agent 踩了坑、修好了，却没人写文档——这次的经验被自动
 
 #### DSH
 
-插件包就是 `dsh-immune-system/` 目录本身（`package.json` 带 `main`、`dsh.bundle.patch`
-与 `permissions` 声明，`dist/` 随包提交，安装时无需构建）。
-
-**方式一：tarball（不需要 npm 账号，已验证）**
+**npm（现在可用，最简）**：
 
 ```bash
-cd dsh-immune-system && npm pack          # → dsh-immune-system-0.3.8.tgz
-dsh plugin add ./dsh-immune-system-0.3.8.tgz
+dsh plugin --profile <profile> add dsh-immune-system
 ```
 
-冒烟验证过：装进空项目后 `import('dsh-immune-system')` 能解析到 `apply()`，
-`cordis.patch.yml` 随包到位。
+包发布在 https://www.npmjs.com/package/dsh-immune-system ，`dist/` 预构建随包。
 
-**方式二：npm（需先发布）**
+**tarball / git**（等价，无需 npm 账号）：
 
 ```bash
-cd dsh-immune-system && npm publish      # 需要你自己的 npm 账号
-dsh plugin add dsh-immune-system
+cd dsh-immune-system && npm pack          # → dsh-immune-system-0.9.0.tgz
+dsh plugin --profile <profile> add ./dsh-immune-system-0.9.0.tgz
+dsh plugin --profile <profile> add github:meat-daemon-404/dsh-plugin-immune
 ```
 
-**方式三：git** —— `dsh plugin add github:owner/repo` 会在安装时用 `prepare` 构建，
-而 pnpm 默认阻止依赖的构建脚本，需要把 pnpm 打印的 key 加进 profile 的
-`pnpm-workspace.yaml → allowBuilds` 才能装。除非你就要这个形态，否则用前两种。
+`git:` 安装会在安装时跑 `prepare` 构建，被 pnpm 默认拦截——需要把 pnpm 打印的 key
+加进 profile 的 `pnpm-workspace.yaml → allowBuilds`。除非你就要这个形态，否则用前两种。
 
 装完**重启 DSH**（bundle 是启动时装配的，运行中的进程不会自己加载）。
 `<profile>` 就是 `~/.dsh/profiles/` 下你实际在用的那个（桌面端通常是 `desktop`）。
@@ -99,9 +99,11 @@ node "<zcode.cjs 路径>" plugins install dsh-immune-system@dev-dsh-plugin-immun
 | `/dsh-immune-system:immune` | ZCode | 同上（加 `--all`） |
 | `/dsh-immune-system:immune-export` | ZCode | 同上 |
 | `/dsh-immune-system:immune-forget` | ZCode | 同上（`<id>` / `--last` / `--prune` / `--purge`） |
+| `/dsh-immune-system:immune-learn` | ZCode | 手动教一条规则 |
 | `/dsh-immune-system:immune-ui` | ZCode | 启动本地仪表盘，给出地址 |
 | `cli.js ui [--port N]` | 两者 | 同上（前台运行，默认 7788，端口占用自动顺延） |
 | `cli.js learn <trigger> [symptom] <prescription>` | 两者 | 手动教一条规则（借鉴 pro-workflow 的 `/learn-rule`） |
+| `cli.js search <query>` | 两者 | 只读检索——与仪表盘/MCP 同一条不计数通道 |
 | `cli.js export-json <path>` / `import-json <path>` | 两者 | 库快照导出/导入——跨机器同步、git 提交、团队共享 |
 | `cli.js doctor` | 两者 | 安装健康自检：node 版本、FTS5、数据库、marker、MCP 脚本 |
 
@@ -301,19 +303,25 @@ against the real host contract) and **ZCode** (verified against its hooks).
 
 ### Install
 
-**DSH** — the plugin is a bundle: a directory carrying `package.json` (with
-`dsh.bundle.patch`) plus `cordis.patch.yml`, listed in the profile's
-`dsh.profile.bundles`. From a local checkout (verified path):
-
-```powershell
-New-Item -ItemType Junction `
-  -Path  "$env:USERPROFILE\.dsh\profiles\<profile>\node_modules\dsh-immune-system" `
-  -Target "<repo>\dsh-immune-system"
-# then in that profile's package.json:
-#   dependencies["dsh-immune-system"] = "link:<repo>/dsh-immune-system"
-#   append "dsh-immune-system" to dsh.profile.bundles
+**npm** — published as [`dsh-immune-system`](https://www.npmjs.com/package/dsh-immune-system),
+prebuilt, no toolchain needed:
+
+```bash
+dsh plugin --profile <profile> add dsh-immune-system
 ```
 
+**tarball / git** (equivalent, no npm account required):
+
+```bash
+cd dsh-immune-system && npm pack
+dsh plugin --profile <profile> add ./dsh-immune-system-0.9.0.tgz
+dsh plugin --profile <profile> add github:meat-daemon-404/dsh-plugin-immune
+```
+
+`git:` installs build at install time via `prepare`, which pnpm blocks until
+allowlisted — see the Chinese section above for the exact fix. Prefer npm or the
+tarball.
+
 **Restart DSH** afterwards — bundles are composed at startup.
 
 **ZCode** — this repository *is* a marketplace source:

package/dsh-immune-system/dist/core/sync.js

@@ -87,7 +87,7 @@ export function importLibrary(store, snapshot) {
                 // status has no numeric setter; go through setStatus when it changed.
                 if (mergedStatus !== existing.status)
                     store.setStatus(existing.id, mergedStatus);
-                applyTallies(store, existing.id, mergedHits, mergedFails);
+                applyTallies(store, existing.id, mergedHits, mergedFails, incoming.created_at);
             }
             report.merged += 1;
             continue;
@@ -104,7 +104,7 @@ export function importLibrary(store, snapshot) {
             continue;
         }
         if (incoming.hit_count > 0 || incoming.fail_count > 0) {
-            applyTallies(store, id, incoming.hit_count, incoming.fail_count);
+            applyTallies(store, id, incoming.hit_count, incoming.fail_count, incoming.created_at);
         }
         if (incoming.status === 'retired')
             store.setStatus(id, 'retired');
@@ -112,8 +112,14 @@ export function importLibrary(store, snapshot) {
     }
     return report;
 }
-/** Set tallies directly; used by import, which owns merge policy. */
-function applyTallies(store, id, hitCount, failCount) {
+/** Set tallies (and optionally creation time) directly; import owns merge policy. */
+function applyTallies(store, id, hitCount, failCount, createdAt) {
     const db = store.db;
+    if (createdAt && createdAt > 0) {
+        // Snapshot time is preserved so zombie aging counts from the original
+        // lesson, not from when this machine imported it.
+        db.prepare('UPDATE antibodies SET hit_count = ?, fail_count = ?, created_at = ? WHERE id = ?').run(hitCount, failCount, createdAt, id);
+        return;
+    }
     db.prepare('UPDATE antibodies SET hit_count = ?, fail_count = ? WHERE id = ?').run(hitCount, failCount, id);
 }

package/dsh-immune-system/dist/dsh/src/index.js

@@ -367,19 +367,30 @@ function startPlugin(ctx) {
     });
     ctx.commands.register({
         name: 'immune-learn',
-        description: 'Teach a rule directly: <trigger> [symptom] <prescription>',
-        input: { hint: '<trigger> [symptom] <prescription>' },
+        description: 'Teach a rule directly: <trigger> | [symptom] | <prescription>  (| separated; without |, trigger = first token and prescription = the rest)',
+        input: { hint: '<trigger> | [symptom] | <prescription>' },
         handler: ({ rawInput }) => {
-            const parts = rawInput.trim().split(/\s+/);
-            // A 3-part split cannot work on free text, so the rule is: trigger is the
-            // first token, prescription is the last, symptom is whatever is between.
-            const trigger = parts[0] ?? '';
-            const prescription = parts.length >= 2 ? parts[parts.length - 1] ?? '' : '';
-            const symptom = parts.length >= 3 ? parts.slice(1, -1).join(' ') : '';
-            if (!trigger || !prescription) {
+            const text = rawInput.trim();
+            // Free text cannot be split by whitespace: "用 pnpm 不是 npm" would put
+            // "npm" in the prescription slot. Pipe-separated when given; the
+            // separator-free form keeps trigger = first token, prescription = the rest.
+            const hasPipes = text.includes('|');
+            const segments = hasPipes
+                ? text.split('|').map((part) => part.trim())
+                : (() => {
+                    const tokens = text.split(/\s+/);
+                    const first = tokens[0] ?? '';
+                    const rest = tokens.slice(1).join(' ');
+                    return rest ? [first, rest] : [first];
+                })();
+            const trigger = segments[0] ?? '';
+            const prescription = segments[segments.length - 1] ?? '';
+            const symptom = segments.length >= 3 ? segments.slice(1, -1).join(' | ') : '';
+            if (!trigger || !prescription || segments.length > 3) {
                 return {
                     kind: 'error',
-                    text: `${t.notFound} — usage: <trigger> [symptom] <prescription>\nexample: pnpm-lock.yaml 这个仓库用 pnpm 不是 npm`,
+                    text: `${t.notFound} — expected: <trigger> | [symptom] | <prescription>\n` +
+                        `example: pnpm-lock.yaml 这个仓库 | npm 装依赖报错 | 用 pnpm 不要用 npm`,
                 };
             }
             const id = store.insert({

package/dsh-immune-system/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-immune-system",
-  "version": "0.9.0",
+  "version": "0.9.2",
   "description": "Self-evolving pitfall immunity for coding agents: capture every failed-then-fixed tool episode, distil it into a reusable antibody, and inject the relevant ones before the agent repeats the mistake.",
   "type": "module",
   "main": "./dist/dsh/src/index.js",
@@ -24,7 +24,7 @@
   "dsh": {
     "id": "dsh-immune-system",
     "name": "DSH Immune System",
-    "version": "0.9.0",
+    "version": "0.9.2",
     "repo": "meat-daemon-404/dsh-plugin-immune",
     "permissions": "读取工具调用结果与斜杠命令输入；在本机写 SQLite 抗体库（默认落在 $DSH_HOME/storages/dsh-immune-system/ 下按项目隔离）；仅在显式配置 IMMUNE_LLM_BASE_URL 与 IMMUNE_LLM_MODEL 时才向该端点发起请求；不读取其它插件的配置，不执行任意命令",
     "bundle": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-immune-system",
-  "version": "0.9.0",
+  "version": "0.9.2",
   "description": "Self-evolving pitfall immunity for DeepSeek Harness: capture every failed-then-fixed tool episode, distil it into a reusable antibody stored in SQLite+FTS5, and inject the relevant ones before the agent repeats the mistake.",
   "type": "module",
   "license": "MIT",
@@ -24,7 +24,7 @@
   "dsh": {
     "id": "dsh-immune-system",
     "name": "DSH Immune System",
-    "version": "0.9.0",
+    "version": "0.9.2",
     "repo": "meat-daemon-404/dsh-plugin-immune",
     "permissions": "读取工具调用结果与斜杠命令输入；在本机写 SQLite 抗体库（默认落在 $DSH_HOME/storages/dsh-immune-system/ 下按项目隔离）；仅在显式配置 IMMUNE_LLM_BASE_URL 与 IMMUNE_LLM_MODEL 时才向该端点发起请求；不读取其它插件的配置，不执行任意命令",
     "bundle": {