dsh-immune-system 1.0.0 → 1.0.1

package/README.md

@@ -55,8 +55,8 @@ dsh plugin --profile <profile> add dsh-immune-system
 **tarball / git**（等价，无需 npm 账号）：
 
 ```bash
-cd dsh-immune-system && npm pack          # → dsh-immune-system-0.9.8.tgz
-dsh plugin --profile <profile> add ./dsh-immune-system-0.9.8.tgz
+cd dsh-immune-system && npm pack          # → dsh-immune-system-<version>.tgz
+dsh plugin --profile <profile> add ./dsh-immune-system-<version>.tgz
 dsh plugin --profile <profile> add github:meat-daemon-404/dsh-plugin-immune
 ```
 
@@ -149,10 +149,13 @@ KPI（含预算）、搜索与清除、页签计数、排序、状态圆点、
 
 > 诚实说明：客户端与路由的**契约**有测试（模拟 `__ModuleLoader__` 装载、假 ctx 验证路由、
 > 跨源拒绝、无 web 服务时不注册、预算透传），布局则用真实 React 18 做过静态渲染自检
-> （含深色模式、空态、窄屏）。**0.9.8 之前**它还从未被宿主真正当成浏览器半——根因是
-> manifest 漏了 `dsh.client` 声明（实测：`/plugins/dsh-immune-system/api` 返回 200，
-> 说明宿主半在跑；而 `/plugins/dsh-immune-system/client.js` 返回 404）。0.9.8 起已补齐，
-> 但需要**重启 DSH** 后到 `设置 → 插件` 确认 tab 出现。
+> （含深色模式、空态、窄屏）。
+>
+> **已在真实宿主里验证过**：0.9.8 补齐 `dsh.client` 声明后，`设置 → 插件` 里的 tab
+> 确实出现了（此前 `/plugins/dsh-immune-system/client.js` 返回 404，只有宿主半在跑）。
+> 0.9.12 进一步把它放进 **shadow root**——真实的设置弹窗会用自己的样式表重排裸
+> `table`/`td`/`div`，导致行被压成几像素、下拉框空白；shadow root 双向隔离，
+> 宿主 CSS 进不来、我们的样式也出不去。
 
 ### 同步与体检
 
@@ -346,9 +349,12 @@ node "<plugin>/dist/zcode/src/cli.js" doctor                     # 安装自检
 
 - **模型端点默认拒绝环回**：本地 Ollama 类服务需显式设 `IMMUNE_ALLOW_PRIVATE_ENDPOINT=1`。
   这是防 SSRF 的代价，不是疏漏。
-- **外部 LLM 蒸馏未实测**：规则蒸馏器全流程有测试；接真实模型端点的路径只有 mock 覆盖。
+- **外部 LLM 蒸馏未实测**：规则蒸馏器全流程有测试；接真实模型端点的路径只有 mock 覆盖
+  （含批量路径的降级链）。
 - **真实 agent 端到端未验**：验证期间模型额度返回 402，turn 到不了工具阶段。同一条链路改为
   向安装副本投喂真实事件载荷验证（含真 Cordis 宿主的 20 条断言）。
+- **`IMMUNE_GUARD=warn` 仅 ZCode 有效**：DSH 的 `PreToolDecision` 没有携带上下文的字段，
+  那边只能"拦或不拦"。
 
 ---
 
@@ -376,7 +382,7 @@ dsh plugin --profile <profile> add dsh-immune-system
 
 ```bash
 cd dsh-immune-system && npm pack
-dsh plugin --profile <profile> add ./dsh-immune-system-0.9.8.tgz
+dsh plugin --profile <profile> add ./dsh-immune-system-<version>.tgz
 dsh plugin --profile <profile> add github:meat-daemon-404/dsh-plugin-immune
 ```
 

package/dsh-immune-system/dist/core/pairing.js

@@ -13,7 +13,6 @@
  *  - paths are normalised to a project-relative form so a failure in
  *    `./src/a.ts` and a success in `<cwd>/src/a.ts` still match.
  */
-import { basename, isAbsolute, relative, sep } from 'node:path';
 /** Programs that never change state; their success proves nothing. */
 const PROBE_PROGRAMS = new Set([
     'ls',
@@ -58,22 +57,32 @@ function pickString(obj, keys) {
 /**
  * Normalise a path to a project-relative, forward-slash form.
  *
- * Absolute paths outside the project are collapsed to their basename so two
- * checkouts of the same file still match.
+ * Works on both platforms: drive-letter paths are absolute everywhere (the
+ * check is explicit, because POSIX `isAbsolute` does not recognise `C:/…`), and
+ * a path inside `cwd` is made relative to it so the same file matches across
+ * machines and checkouts.
  */
 export function normaliseTargetPath(rawPath, cwd) {
-    const normalised = rawPath.replace(/\\/g, '/').trim();
-    if (!normalised)
+    const p = rawPath.replace(/\\/g, '/').trim();
+    if (!p)
         return '';
-    if (cwd && isAbsolute(normalised)) {
-        const rel = relative(cwd, normalised).replace(/\\/g, '/');
-        if (rel && !rel.startsWith('..'))
-            return rel;
-        return basename(normalised);
+    if (cwd) {
+        const base = cwd.replace(/\\/g, '/').replace(/\/+$/, '').toLowerCase();
+        if (base) {
+            const lower = p.toLowerCase();
+            if (lower === base)
+                return '';
+            if (lower.startsWith(`${base}/`))
+                return p.slice(base.length + 1);
+        }
     }
-    if (isAbsolute(normalised) || /^[A-Za-z]:\//.test(normalised))
-        return basename(normalised);
-    return normalised.replace(/^\.\//, '');
+    if (/^[A-Za-z]:[\/]/.test(p) || p.startsWith('/')) {
+        // Outside the project: collapse to the basename (matches the original
+        // Windows behaviour and keeps signatures comparable across checkouts).
+        const parts = p.split('/').filter(Boolean);
+        return parts[parts.length - 1] ?? p;
+    }
+    return p.replace(/^\.\//, '');
 }
 /** Split a shell command into `program` and its first non-flag subcommand. */
 export function parseCommand(command) {
@@ -83,11 +92,13 @@ export function parseCommand(command) {
         .trim()
         .split(/\s+/)
         .filter(Boolean);
-    // Skip leading env assignments (FOO=bar cmd).
+    // Skip leading env assignments (FOO=bar cmd), then strip a leading path from
+    // the program token ("C:\tools\npm.cmd test" -> "npm.cmd") on any platform.
     let index = 0;
     while (index < tokens.length && /^[A-Za-z_][A-Za-z0-9_]*=/.test(tokens[index] ?? ''))
         index += 1;
-    const program = basename((tokens[index] ?? '').replace(/^["']|["']$/g, ''));
+    const programToken = (tokens[index] ?? '').replace(/^["']|["']$/g, '');
+    const program = (programToken.split(/[\\/]/).pop() ?? programToken).toLowerCase();
     let sub = '';
     for (let i = index + 1; i < tokens.length; i += 1) {
         const token = tokens[i] ?? '';
@@ -175,4 +186,3 @@ export function canCloseEpisode(failedSignature, incoming) {
     }
     return !failedTarget || failedTarget === '?' || !incomingTarget || incomingTarget === '?';
 }
-export { sep as pathSeparator };

package/dsh-immune-system/dist/core/selfnoise.js

@@ -16,7 +16,7 @@
  *    identifies another clone of the plugin wherever it sits on disk.
  */
 import { existsSync, readFileSync, realpathSync } from 'node:fs';
-import { dirname, resolve } from 'node:path';
+import { resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 /** Package names that mean "this is the immune system itself". */
 const SELF_PACKAGE_NAMES = new Set(['dsh-immune-system', 'dsh-plugin-immune']);
@@ -43,14 +43,37 @@ function safeRealpath(path) {
 function normalizePath(value) {
     return value.replace(/\\\\/g, '\\').replace(/\\/g, '/').toLowerCase();
 }
+/**
+ * Parent directory that treats BOTH separators as separators, on every platform.
+ *
+ * `path.dirname` uses the platform separator: on Linux a Windows path like
+ * `D:\work\app\src\main.ts` has no `/`, so dirname returns '.' and an upward
+ * walk would scan the current workspace instead of the named path — that exact
+ * false positive failed CI (the workspace root has a package.json whose name is
+ * this plugin's).
+ *
+ * A drive root (`D:`, `D:/`) has no parent and returns null: resolving against
+ * it would use the process's drive-relative cwd, which is how the CI false
+ * positive happened.
+ */
+function parentDir(path) {
+    const normalised = path.replace(/\\/g, '/');
+    const cut = normalised.lastIndexOf('/');
+    if (cut <= 0)
+        return null;
+    const parent = normalised.slice(0, cut);
+    if (/^[A-Za-z]:$/.test(parent))
+        return null; // drive root
+    return parent.length >= 2 ? parent : null;
+}
 /** Nearest directory at or above `start` that holds a package.json. */
 function findPackageRoot(start) {
     let dir = start;
     for (let i = 0; i < MAX_UPWARD; i += 1) {
         if (existsSync(resolve(dir, 'package.json')))
             return dir;
-        const parent = dirname(dir);
-        if (parent === dir)
+        const parent = parentDir(dir);
+        if (parent === null || parent === dir)
             return null;
         dir = parent;
     }
@@ -77,7 +100,7 @@ export function moduleRoot() {
     try {
         const here = fileURLToPath(import.meta.url);
         const real = safeRealpath(here) ?? here;
-        const root = findPackageRoot(dirname(real));
+        const root = findPackageRoot(parentDir(real) ?? real);
         cachedModuleRoot = root ? normalizePath(root) : null;
     }
     catch {
@@ -124,7 +147,9 @@ export function isSelfEpisode(trace, markers = []) {
     // Fingerprint: another clone of the plugin, wherever it lives.
     for (const candidate of collectPaths(trace)) {
         const real = safeRealpath(candidate) ?? candidate;
-        const pkgRoot = findPackageRoot(dirname(real)) ?? findPackageRoot(real);
+        // Starting from the file path itself (not its dir) is deliberate: on POSIX
+        // a Windows-style path has no dirname, so parentDir would lose the walk.
+        const pkgRoot = findPackageRoot(real);
         if (!pkgRoot)
             continue;
         const name = packageNameAt(pkgRoot);

package/dsh-immune-system/dist/zcode/src/mcp-server.js

@@ -20,6 +20,7 @@
 import { createInterface } from 'node:readline';
 import { pathToFileURL } from 'node:url';
 import { ImmuneStore } from '../../core/store/index.js';
+import { renderSkillMarkdown } from '../../core/export.js';
 const SERVER_INFO = { name: 'dsh-immune-system', version: '0.8.0' };
 const TOOLS = [
     {
@@ -39,6 +40,17 @@ const TOOLS = [
         description: 'Counts: active/retired rules, total injections, queued distillation jobs, database path.',
         inputSchema: { type: 'object', properties: {} },
     },
+    {
+        name: 'immune_export',
+        description: 'Render the proven rules (hits >= threshold) as a SKILL.md document and return its text. Save the text to share the library with teammates or commit it.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                minHits: { type: 'number', description: 'Minimum hit count. Default 3.' },
+                title: { type: 'string', description: 'Skill title. Default "project-pitfalls".' },
+            },
+        },
+    },
     {
         name: 'immune_learn',
         description: 'Teach a rule directly, without waiting for a failed-then-fixed episode. Use for conventions the agent keeps getting wrong.',
@@ -116,6 +128,16 @@ export function callTool(store, name, args) {
                 `queued distill jobs: ${store.pendingJobCount()}\n` +
                 `database: ${store.dbPath}`);
         }
+        case 'immune_export': {
+            const minHits = typeof args.minHits === 'number' && args.minHits > 0 ? args.minHits : 3;
+            const title = typeof args.title === 'string' && args.title.trim() ? args.title.trim() : 'project-pitfalls';
+            const rows = store.exportable(minHits);
+            if (rows.length === 0) {
+                return `No rule has reached ${minHits} hits yet; nothing worth sharing.`;
+            }
+            const md = renderSkillMarkdown(rows, { minHits, title });
+            return `Exported ${rows.length} rules as SKILL.md:\n\n${md}`;
+        }
         case 'immune_learn': {
             const trigger = typeof args.trigger === 'string' ? args.trigger : '';
             const symptom = typeof args.symptom === 'string' ? args.symptom : '';

package/dsh-immune-system/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-immune-system",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Self-evolving pitfall immunity for coding agents: capture every failed-then-fixed tool episode, distil it into a reusable antibody, and inject the relevant ones before the agent repeats the mistake.",
   "type": "module",
   "main": "./dist/dsh/src/index.js",
@@ -24,7 +24,7 @@
   "dsh": {
     "id": "dsh-immune-system",
     "name": "DSH Immune System",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "repo": "meat-daemon-404/dsh-plugin-immune",
     "permissions": "读取工具调用结果与斜杠命令输入；在本机写 SQLite 抗体库（默认落在 $DSH_HOME/storages/dsh-immune-system/ 下按项目隔离）；仅在显式配置 IMMUNE_LLM_BASE_URL 与 IMMUNE_LLM_MODEL 时才向该端点发起请求；不读取其它插件的配置，不执行任意命令",
     "bundle": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-immune-system",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Self-evolving pitfall immunity for DeepSeek Harness: capture every failed-then-fixed tool episode, distil it into a reusable antibody stored in SQLite+FTS5, and inject the relevant ones before the agent repeats the mistake.",
   "type": "module",
   "license": "MIT",
@@ -24,7 +24,7 @@
   "dsh": {
     "id": "dsh-immune-system",
     "name": "DSH Immune System",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "repo": "meat-daemon-404/dsh-plugin-immune",
     "permissions": "读取工具调用结果与斜杠命令输入；在本机写 SQLite 抗体库（默认落在 $DSH_HOME/storages/dsh-immune-system/ 下按项目隔离）；仅在显式配置 IMMUNE_LLM_BASE_URL 与 IMMUNE_LLM_MODEL 时才向该端点发起请求；不读取其它插件的配置，不执行任意命令",
     "bundle": {