dsh-lite-memory 0.18.36 → 0.18.37

package/docs/RELEASE-0.18.37.md

@@ -0,0 +1,8 @@
+# 0.18.37：npm 提醒先看当前项目层
+
+- 动作前的 npm 提醒不再只查全局层：先查当前项目层的现行记忆，再查全局层，项目规则优先。
+- 本机流程按记忆分层规矩留在项目层，也能在 `npm whoami` / `npm publish` 前拦一次，而不是因为没进全局层就失效。
+- 同一条提醒仍然每轮最多一次，已交付过的条目不会再提示；项目记忆关闭时行为不变。
+- 补回归：项目层与全局层各放一条 npm 规则，验证项目层优先且正文送达。
+
+验证：`npm test` 全绿；`npm run bench` / `npm run bench:evolution` 均 exit 0；`style-lint` 通过。

package/index.js

@@ -2671,8 +2671,16 @@ export function apply(ctx, config) {
       const held = prepared.get(agent);
       if (!held || held.npmHinted) return undefined;
       if (!memoryOnForAgent(agent)) return undefined;
-      const index = loadIndex(globalScope());
-      const row = (index.entries || []).find((entry) => {
+      /** 本机流程按规矩留在项目层；全局层是兜底，先看当前项目再看全局。 */
+      const scopes = [];
+      try {
+        const project = scopeOf(cwdOf({ agent }));
+        if (project && project.confirmed !== false && project.key !== 'global') scopes.push(project);
+      } catch { /* 项目根还没确认时只看全局 */ }
+      scopes.push(globalScope());
+      const row = scopes.flatMap((scope) => {
+        try { return loadIndex(scope).entries || []; } catch { return []; }
+      }).find((entry) => {
         if (!entry || entry.archived || entry.origin === 'project_evolution') return false;
         /** 过期/被取代的规则不能再在动作前拦人。 */
         if (view.lifecycleStatusOf(entry)) return false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-lite-memory",
-  "version": "0.18.36",
+  "version": "0.18.37",
   "description": "On-demand memory for the DeepSeek Harness: nothing resident, at most three small cards on a real hit, bodies read on demand.",
   "type": "module",
   "main": "index.js",

package/test/recall.test.mjs

@@ -846,6 +846,40 @@ console.log('recall.test.mjs: ok');
   assert.ok(scopeNpm.key, '项目层不受影响');
 }
 
+// A27b：npm 提醒先看当前项目层，再看全局层；本机流程留在项目层也能在动作前拦人。
+{
+  const cwdNpmProject = mkdir('npm-guard-project');
+  const scopeNpmProject = store.scopeOf(cwdNpmProject);
+  store.setRecallMode(scopeNpmProject, 'adaptive', { operationId: 'npm-guard-project-mode' });
+  assert.ok(store.upsert(global, {
+    title: 'npm 全局登录提醒',
+    summary: '全局层的 npm 登录说明',
+    body: '全局层：npm login 会误导，改用 dsh-npm。',
+    tags: ['npm'],
+    applicability: 'all_in_scope',
+  }).record);
+  assert.ok(store.upsert(scopeNpmProject, {
+    title: 'npm 项目发布前先看凭据',
+    summary: '这个项目的 npm 发布步骤',
+    body: '项目层：先读 Keychain 位置，再用 dsh-npm publish，不要 npm whoami。',
+    tags: ['npm', '发布'],
+    applicability: 'all_in_scope',
+  }).record);
+  const guards = [];
+  const agent = makeAgent('agent-npm-project', cwdNpmProject);
+  agent.ctx = {
+    tools: { guard: (fn) => { guards.push(fn); return () => {}; } },
+    effect: (fn) => fn(),
+  };
+  const runtime = boot();
+  runtime.handlers.get('agent/created').at(-1)({ agent });
+  const sig = signal();
+  await runtime.preStep({ agent, signal: sig, turn: 'npm-project-1' }, enter(human('先看下环境状态')));
+  const blocked = guards[0]({ name: 'bash', callId: 'call-npm-project', arguments: { command: 'npm publish' } });
+  assert.match(String(blocked), /项目发布前先看凭据/, '项目层规则优先于全局层');
+  assert.match(String(blocked), /Keychain/, '给项目层正文');
+}
+
 // A28：零命中的同一轮里，关键动作发生后补查一次；补到后不再重复注入。
 {
   const cwdActionKey = mkdir('action-key');