dsh-my-observability 0.3.0 → 0.3.2

package/lib/client.src.js

@@ -13,10 +13,18 @@
  * 样式走 DSH 语义 token（--dsw-alias-* / --dsw-font-*），随 activation
  * 注入、fiber teardown 卸载（HMR/禁用无残留）。
  *
+ * 侧边栏走**宿主原生扩展点**（issue #187 批 1），不再消费第三方侧边栏服务：
+ * sidebarRightTabs 注册页签类型（guide 胶囊供用户从右栏指南页打开），slots 的
+ * sidebar.right.pane.tab / .title 两个 keyed 席位注册面板与标题（key = 类型 id）。
+ * 原生能力经 Cordis 服务名 inject 获取，无需 require 任何
+ * @deepseek-ai/dsh-client-ui-* 包（官方范本：
+ * dsh-client-ui-sidebar-files/lib/client.js:681-711）。
+ *
  * BUILD NOTE: 本文件是模板源码，不是 DSH 实际服务的文件。scripts/build.mjs
- * 将片段文件（lib/parts/i18n.js / replay.js / git.js / styles.js，均为
- * 无 import/export 的纯函数声明文本；图标片段来自 dsh-shared 共享
- * client-parts，见 docs/UI规范.md）经下方 __PART_*__ 占位符（函数式
+ * 先编译 client TS 片段（src/client/parts/*.ts → lib/.client-build/parts/*.js），
+ * 再将这些片段（无 import/export 的纯函数声明文本；图标片段来自 dsh-shared
+ * 共享 client-parts，见 docs/UI规范.md；audit-view 片段来自 server 端产物
+ * lib/audit-view.js，剥离 export 前缀）经下方 __PART_*__ 占位符（函数式
  * replaceAll，避免 $&/$1 特殊解释）拼接进 factory 作用域，写出
  * lib/client.js —— 即 DSH 实际服务的产物。产物必须提交；CI 只对产物执行
  * node --check（见 scripts/test-all.sh / .github/workflows/ci.yml）。
@@ -29,7 +37,15 @@ window.__ModuleLoader__.load({
     Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' })
     const { createElement, useEffect, useState } = require('react')
 
+    // 原生页签身份（issue #187 批 1）：id/kind = 迁移前 better-sidebar 的 tab id
+    // （每个面板一个类型，id 全局唯一且是席位的 key），order = 迁移前的指南页顺序。
+    const REPLAY_TAB_ID = 'dsh-my-observability:replay'
+    const GIT_TAB_ID = 'dsh-my-observability:git'
+    const REPLAY_TAB_ORDER = 40
+    const GIT_TAB_ORDER = 41
+
     // ── parts（scripts/build.mjs 拼接；顺序固定）───────────────────────
+    /*__PART_NATIVE_TABS__*/
     /*__PART_I18N__*/
     /*__PART_ICONS__*/
     /*__PART_AUDIT_VIEW__*/
@@ -39,35 +55,45 @@ window.__ModuleLoader__.load({
     /*__PART_GIT__*/
     /*__PART_STYLES__*/
 
-    // ── 插件体：样式注入 + 两个页签注册 ────────────────────────────────
-    exports.inject = ['betterSidebar']
+    // ── 插件体：样式注入 + 两个原生页签注册 ─────────────────────────────
+    exports.inject = ['slots', 'sidebarRightTabs']
+
+    /** 原生 tab body 席位：适配成面板契约（ReplayPanel 要 visible）。 */
+    function ReplayTabBody(props) {
+      const info = typeof props.useTabInfo === 'function' ? props.useTabInfo() : undefined
+      return createElement(ReplayPanel, { visible: info?.tab?.visible !== false })
+    }
+
+    /** Git 面板不接 props（迁移前组件工厂同样只是透传）。 */
+    function GitTabBody() {
+      return createElement(GitPanel, null)
+    }
 
     exports.apply = function apply(ctx) {
+      // 样式先注入：不依赖任何服务（服务缺失/时序未就绪也不影响面板配色）。
       ctx.effect(() => injectStyles(), 'dsh-my-observability: styles')
-      const service = ctx.betterSidebar
-      if (service === undefined) return
-      ctx.effect(
-        () =>
-          service.registerTab({
-            id: 'dsh-my-observability:replay',
-            title: () => strings.replayTitle(),
-            order: 40,
-            single: true,
-            component: (props) => createElement(ReplayPanel, props),
-          }),
-        'dsh-my-observability: replay tab registration',
-      )
-      ctx.effect(
-        () =>
-          service.registerTab({
-            id: 'dsh-my-observability:git',
-            title: () => strings.gitTitle(),
-            order: 41,
-            single: true,
-            component: (props) => createElement(GitPanel, props),
-          }),
-        'dsh-my-observability: git tab registration',
-      )
+
+      const tabs = ctx.sidebarRightTabs
+      const slots = ctx.slots
+      // 判空必须同时覆盖 null 与 undefined（typeof null 是 object，会骗过 === undefined）。
+      if (tabs == null || slots == null) return
+
+      registerNativeTab(ctx, tabs, slots, {
+        id: REPLAY_TAB_ID,
+        order: REPLAY_TAB_ORDER,
+        label: 'replay',
+        title: () => strings.replayTitle(),
+        Body: ReplayTabBody,
+        Title: nativeTabTitle(() => strings.replayTitle()),
+      })
+      registerNativeTab(ctx, tabs, slots, {
+        id: GIT_TAB_ID,
+        order: GIT_TAB_ORDER,
+        label: 'git',
+        title: () => strings.gitTitle(),
+        Body: GitTabBody,
+        Title: nativeTabTitle(() => strings.gitTitle()),
+      })
     }
 
     return module.exports

package/lib/constants.js

@@ -1,7 +1,7 @@
 /**
  * dsh-my-observability — shared constants.
  */
-export const MAX_ARG_KEYS = 10
-export const MAX_TEXT_LEN = 200
-export const REVIEW_TIMEOUT_MS = 60000
-export const GIT_TIMEOUT_MS = 30000
+export const MAX_ARG_KEYS = 10;
+export const MAX_TEXT_LEN = 200;
+export const REVIEW_TIMEOUT_MS = 60000;
+export const GIT_TIMEOUT_MS = 30000;

package/lib/diff.js

@@ -5,81 +5,86 @@
  * 行（含行号）与二进制标记，供规则审查引擎消费。全部为纯函数，可独立
  * 测试。
  */
-
 /** 解析 diff 文本：{ files, binary }。 */
 export function parseDiff(text) {
-  if (typeof text !== 'string' || text === '') return { files: [], binary: false }
-  const files = []
-  let current = null
-  let hunkLine = 0
-  let binary = false
-  for (const line of text.split('\n')) {
-    const kind = classifyLine(line)
-    if (kind === 'file') {
-      current = { path: pathOf(line), insertions: 0, deletions: 0, addedLines: [], binary: false }
-      files.push(current)
-      hunkLine = 0
-      continue
+    if (typeof text !== 'string' || text === '')
+        return { files: [], binary: false };
+    const files = [];
+    let current = null;
+    let hunkLine = 0;
+    let binary = false;
+    for (const line of text.split('\n')) {
+        const kind = classifyLine(line);
+        if (kind === 'file') {
+            current = { path: pathOf(line), insertions: 0, deletions: 0, addedLines: [], binary: false };
+            files.push(current);
+            hunkLine = 0;
+            continue;
+        }
+        if (current === null)
+            continue;
+        const applied = applyLine(current, kind, line, hunkLine);
+        hunkLine = applied.hunkLine;
+        if (applied.binary)
+            binary = true;
     }
-    if (current === null) continue
-    const applied = applyLine(current, kind, line, hunkLine)
-    hunkLine = applied.hunkLine
-    if (applied.binary) binary = true
-  }
-  return { files, binary }
+    return { files, binary };
 }
-
 /** 应用一行到当前文件（返回新的 hunkLine 与 binary 标记）。 */
 function applyLine(current, kind, line, hunkLine) {
-  if (kind === 'binary') {
-    current.binary = true
-    return { hunkLine, binary: true }
-  }
-  if (kind === 'hunk') return { hunkLine: hunkLineOf(line) }
-  if (kind === 'added') {
-    current.insertions += 1
-    current.addedLines.push({ line: hunkLine, text: line.slice(1) })
-    return { hunkLine: hunkLine + 1 }
-  }
-  if (kind === 'deleted') {
-    current.deletions += 1
-    return { hunkLine }
-  }
-  if (kind === 'context') return { hunkLine: hunkLine + 1 }
-  return { hunkLine }
+    if (kind === 'binary') {
+        current.binary = true;
+        return { hunkLine, binary: true };
+    }
+    if (kind === 'hunk')
+        return { hunkLine: hunkLineOf(line) };
+    if (kind === 'added') {
+        current.insertions += 1;
+        current.addedLines.push({ line: hunkLine, text: line.slice(1) });
+        return { hunkLine: hunkLine + 1 };
+    }
+    if (kind === 'deleted') {
+        current.deletions += 1;
+        return { hunkLine };
+    }
+    if (kind === 'context')
+        return { hunkLine: hunkLine + 1 };
+    return { hunkLine };
 }
-
 /** diff 行分类（file/binary/hunk/added/deleted/context/other）。 */
 function classifyLine(line) {
-  if (line.startsWith('diff --git ')) return 'file'
-  if (line.startsWith('Binary files ')) return 'binary'
-  if (line.startsWith('@@ ')) return 'hunk'
-  if (line.startsWith('+') && !line.startsWith('+++')) return 'added'
-  if (line.startsWith('-') && !line.startsWith('---')) return 'deleted'
-  if (line.startsWith(' ')) return 'context'
-  return 'other'
+    if (line.startsWith('diff --git '))
+        return 'file';
+    if (line.startsWith('Binary files '))
+        return 'binary';
+    if (line.startsWith('@@ '))
+        return 'hunk';
+    if (line.startsWith('+') && !line.startsWith('+++'))
+        return 'added';
+    if (line.startsWith('-') && !line.startsWith('---'))
+        return 'deleted';
+    if (line.startsWith(' '))
+        return 'context';
+    return 'other';
 }
-
 /** 文件路径：`diff --git a/x b/y` → y（b/ 前缀剥除）。 */
 function pathOf(line) {
-  const parts = line.split(' ')
-  const b = parts[parts.length - 1] ?? ''
-  return b.startsWith('b/') ? b.slice(2) : b
+    const parts = line.split(' ');
+    const b = parts[parts.length - 1] ?? '';
+    return b.startsWith('b/') ? b.slice(2) : b;
 }
-
 /** hunk 起始行号：`@@ -1,3 +10,4 @@` → 10（新文件侧）。 */
 function hunkLineOf(line) {
-  const match = /@@ -\d+(?:,\d+)? \+(\d+)(?:,\d+)? @@/.exec(line)
-  return match !== null ? Number(match[1]) : 0
+    const match = /@@ -\d+(?:,\d+)? \+(\d+)(?:,\d+)? @@/.exec(line);
+    return match !== null ? Number(match[1]) : 0;
 }
-
 /** 是否为测试文件（路径含 test/spec 标记）。 */
 export function isTestFile(path) {
-  return /(^|\/)(test|tests|__tests__|spec)(\/|$)/.test(path) || /\.(test|spec)\./.test(path)
+    return /(^|\/)(test|tests|__tests__|spec)(\/|$)/.test(path) || /\.(test|spec)\./.test(path);
 }
-
 /** 是否为源码文件（排除纯文档/配置类；无扩展名视为源码）。 */
 export function isSourceFile(path) {
-  if (isTestFile(path)) return false
-  return !/\.(md|txt|json|yml|yaml|lock|png|jpg|jpeg|gif|svg|ico|woff2?|ttf|eot)$/.test(path)
+    if (isTestFile(path))
+        return false;
+    return !/\.(md|txt|json|yml|yaml|lock|png|jpg|jpeg|gif|svg|ico|woff2?|ttf|eot)$/.test(path);
 }

package/lib/git.js

@@ -10,138 +10,137 @@
  * 提交流程：git add -A → git commit -m <完整消息>（单参数传入，消息由
  * 服务端生成，不拼接用户输入到 shell）。
  */
-import { execFile } from 'node:child_process'
-import { statSync } from 'node:fs'
-import { GIT_TIMEOUT_MS } from './constants.js'
-
+import { execFile } from 'node:child_process';
+import { statSync } from 'node:fs';
+import { GIT_TIMEOUT_MS } from './constants.js';
 /** Conventional Commits 类型枚举。 */
-export const COMMIT_TYPES = ['feat', 'fix', 'docs', 'style', 'refactor', 'test', 'chore']
-
+export const COMMIT_TYPES = ['feat', 'fix', 'docs', 'style', 'refactor', 'test', 'chore'];
 /** 生成类型化提交消息（纯函数，可独立测试）。 */
-export function formatCommitMessage({ type, scope, description, body }) {
-  const head = scope !== undefined && scope !== '' ? `${type}(${scope}): ${description}` : `${type}: ${description}`
-  return body !== undefined && body !== '' ? `${head}\n\n${body}` : head
+export function formatCommitMessage(input) {
+    const { type, scope, description, body } = input;
+    const head = scope !== undefined && scope !== '' ? `${type}(${scope}): ${description}` : `${type}: ${description}`;
+    return body !== undefined && body !== '' ? `${head}\n\n${body}` : head;
 }
-
 /** 校验并规整提交请求；非法返回 undefined（type/scope/description 规则见上）。 */
 export function parseCommitRequest(payload) {
-  if (!isObject(payload)) return undefined
-  if (!COMMIT_TYPES.includes(payload.type)) return undefined
-  const description = stringOf(payload.description).trim()
-  if (description === '') return undefined
-  const scope = stringOf(payload.scope).trim()
-  if (scope !== '' && !/^[a-z0-9-]+$/.test(scope)) return undefined
-  if (payload.body !== undefined && typeof payload.body !== 'string') return undefined
-  return { type: payload.type, scope, description, body: stringOf(payload.body).trim() }
+    if (!isObject(payload))
+        return undefined;
+    if (!COMMIT_TYPES.includes(payload.type))
+        return undefined;
+    const description = stringOf(payload.description).trim();
+    if (description === '')
+        return undefined;
+    const scope = stringOf(payload.scope).trim();
+    if (scope !== '' && !/^[a-z0-9-]+$/.test(scope))
+        return undefined;
+    if (payload.body !== undefined && typeof payload.body !== 'string')
+        return undefined;
+    return { type: payload.type, scope, description, body: stringOf(payload.body).trim() };
 }
-
 function isObject(value) {
-  return value !== null && typeof value === 'object'
+    return value !== null && typeof value === 'object';
 }
-
 function stringOf(value) {
-  return typeof value === 'string' ? value : ''
+    return typeof value === 'string' ? value : '';
 }
-
 /** 路径是否为存在的 git 仓库（目录存在且 git rev-parse 成功）。 */
 export async function isGitRepo(repoPath) {
-  if (typeof repoPath !== 'string' || repoPath === '') return false
-  try {
-    if (!statSync(repoPath).isDirectory()) return false
-  } catch {
-    return false
-  }
-  const result = await runGit(repoPath, ['rev-parse', '--git-dir'])
-  return result.ok
+    if (typeof repoPath !== 'string' || repoPath === '')
+        return false;
+    try {
+        if (!statSync(repoPath).isDirectory())
+            return false;
+    }
+    catch {
+        return false;
+    }
+    const result = await runGit(repoPath, ['rev-parse', '--git-dir']);
+    return result.ok;
 }
-
 /** 执行 git 命令（不经 shell；超时 + 输出上限；失败返回 { ok:false, error }）。 */
 function runGit(repoPath, args) {
-  return new Promise((resolve) => {
-    execFile(
-      'git',
-      args,
-      {
-        cwd: repoPath,
-        timeout: GIT_TIMEOUT_MS,
-        maxBuffer: 16 * 1024 * 1024,
-      },
-      (error, stdout, stderr) => {
-        if (error !== null) {
-          const message = typeof stderr === 'string' && stderr.trim() !== '' ? stderr.trim() : error.message
-          resolve({ ok: false, error: { message } })
-          return
-        }
-        resolve({ ok: true, stdout, stderr })
-      },
-    )
-  })
+    return new Promise((resolve) => {
+        execFile('git', args, {
+            cwd: repoPath,
+            timeout: GIT_TIMEOUT_MS,
+            maxBuffer: 16 * 1024 * 1024,
+        }, (error, stdout, stderr) => {
+            if (error !== null) {
+                const message = typeof stderr === 'string' && stderr.trim() !== '' ? stderr.trim() : error.message;
+                resolve({ ok: false, error: { message } });
+                return;
+            }
+            resolve({ ok: true, stdout, stderr });
+        });
+    });
 }
-
 /** 仓库状态：分支 + 变更清单（status --short --branch 解析）。 */
 export async function gitStatus(repoPath) {
-  if (!(await isGitRepo(repoPath))) return { ok: false, error: { message: 'not a git repository' } }
-  const result = await runGit(repoPath, ['status', '--short', '--branch'])
-  if (!result.ok) return result
-  const lines = result.stdout.split('\n').filter((line) => line !== '')
-  const branch = parseBranch(lines[0] ?? '')
-  const changes = lines.slice(1).map(parseChangeLine)
-  return {
-    ok: true,
-    branch,
-    changes,
-    stagedCount: changes.filter((change) => change.staged).length,
-    unstagedCount: changes.filter((change) => !change.staged).length,
-    clean: changes.length === 0,
-  }
+    if (!(await isGitRepo(repoPath)))
+        return { ok: false, error: { message: 'not a git repository' } };
+    const result = await runGit(repoPath, ['status', '--short', '--branch']);
+    if (!result.ok)
+        return result;
+    const lines = result.stdout.split('\n').filter((line) => line !== '');
+    const branch = parseBranch(lines[0] ?? '');
+    const changes = lines.slice(1).map(parseChangeLine);
+    return {
+        ok: true,
+        branch,
+        changes,
+        stagedCount: changes.filter((change) => change.staged).length,
+        unstagedCount: changes.filter((change) => !change.staged).length,
+        clean: changes.length === 0,
+    };
 }
-
 /** 分支行解析：`## main...origin/main [ahead 1]` → main。 */
 function parseBranch(line) {
-  if (!line.startsWith('## ')) return ''
-  const head = line.slice(3).split('...')[0].trim()
-  return head
+    if (!line.startsWith('## '))
+        return '';
+    const head = line.slice(3).split('...')[0].trim();
+    return head;
 }
-
 /** 变更行解析：`XY path`（X=暂存区状态，Y=工作区状态；`??`=未跟踪）。 */
 function parseChangeLine(line) {
-  const status = line.slice(0, 2)
-  const path = line.slice(3)
-  const staged = status[0] !== ' ' && status[0] !== '?'
-  return { status, path, staged }
+    const status = line.slice(0, 2);
+    const path = line.slice(3);
+    const staged = status[0] !== ' ' && status[0] !== '?';
+    return { status, path, staged };
 }
-
 /** 差异文本：git diff（工作区）或 git diff --staged（暂存区）。 */
 export async function gitDiff(repoPath, staged) {
-  if (!(await isGitRepo(repoPath))) return { ok: false, error: { message: 'not a git repository' } }
-  const args = staged ? ['diff', '--staged'] : ['diff']
-  const result = await runGit(repoPath, args)
-  if (!result.ok) return result
-  return { ok: true, text: result.stdout }
+    if (!(await isGitRepo(repoPath)))
+        return { ok: false, error: { message: 'not a git repository' } };
+    const args = staged ? ['diff', '--staged'] : ['diff'];
+    const result = await runGit(repoPath, args);
+    if (!result.ok)
+        return result;
+    return { ok: true, text: result.stdout };
 }
-
 /** 类型化提交：git add -A → git commit -m <消息>；返回 hash + 提交摘要。 */
 export async function gitCommit(repoPath, request) {
-  if (!(await isGitRepo(repoPath))) return { ok: false, error: { message: 'not a git repository' } }
-  const parsed = parseCommitRequest(request)
-  if (parsed === undefined) return { ok: false, error: { message: 'invalid commit request' } }
-  const message = formatCommitMessage(parsed)
-  const addResult = await runGit(repoPath, ['add', '-A'])
-  if (!addResult.ok) return addResult
-  const commitResult = await runGit(repoPath, ['commit', '-m', message])
-  if (!commitResult.ok) return commitResult
-  const hash = parseCommitHash(commitResult.stdout)
-  return { ok: true, hash, message, summary: commitSummary(commitResult.stdout) }
+    if (!(await isGitRepo(repoPath)))
+        return { ok: false, error: { message: 'not a git repository' } };
+    const parsed = parseCommitRequest(request);
+    if (parsed === undefined)
+        return { ok: false, error: { message: 'invalid commit request' } };
+    const message = formatCommitMessage(parsed);
+    const addResult = await runGit(repoPath, ['add', '-A']);
+    if (!addResult.ok)
+        return addResult;
+    const commitResult = await runGit(repoPath, ['commit', '-m', message]);
+    if (!commitResult.ok)
+        return commitResult;
+    const hash = parseCommitHash(commitResult.stdout);
+    return { ok: true, hash, message, summary: commitSummary(commitResult.stdout) };
 }
-
 /** 从 commit 输出提取 hash（`[main abc1234] ...`）。 */
 function parseCommitHash(stdout) {
-  const match = /\[[^\]]+\s+([0-9a-f]{7,40})\]/.exec(stdout)
-  return match !== null ? match[1] : ''
+    const match = /\[[^\]]+\s+([0-9a-f]{7,40})\]/.exec(stdout);
+    return match !== null ? match[1] : '';
 }
-
 /** 提交摘要：输出首行（`[main abc1234] message`）。 */
 function commitSummary(stdout) {
-  const first = stdout.split('\n')[0].trim()
-  return first.length > 120 ? `${first.slice(0, 120)}…` : first
+    const first = stdout.split('\n')[0].trim();
+    return first.length > 120 ? `${first.slice(0, 120)}…` : first;
 }

package/lib/index.js

@@ -19,52 +19,51 @@
  *  - ai.js       — 可选 AI 审查增强（agents.create，失败降级）
  *  - routes.js   — /observability/api 路由
  */
-import { createStore } from './store.js'
-import { attachAuditListeners } from './audit.js'
-import { registerObservabilityRoutes } from './routes.js'
-import { createResourceMonitor } from './resource-monitor.js'
-
-export const name = 'dsh-my-observability'
-
-export const inject = ['webServer']
-
+import { createStore } from './store.js';
+import { attachAuditListeners } from './audit.js';
+import { registerObservabilityRoutes } from './routes.js';
+import { createResourceMonitor } from './resource-monitor.js';
+export const name = 'dsh-my-observability';
+export const inject = ['webServer'];
+/** 从配置构建 ObservabilityOptions。 */
+function buildOptions(config) {
+    return {
+        aiProvider: config?.aiProvider,
+        aiModel: config?.aiModel,
+        aiCwd: config?.aiCwd,
+        aiReview: config?.aiReview !== false,
+        aiTimeoutMs: Number.isFinite(config?.aiTimeoutMs) && config?.aiTimeoutMs > 0
+            ? config?.aiTimeoutMs
+            : 60000,
+    };
+}
 export function apply(ctx, config) {
-  // ── 配置（应用层 config 覆盖，默认全部开启）─────────────────────────
-  const options = {
-    aiReview: config?.aiReview !== false,
-    aiTimeoutMs: Number.isFinite(config?.aiTimeoutMs) && config.aiTimeoutMs > 0 ? config.aiTimeoutMs : 60000,
-  }
-
-  // ── 审计存储：会话隔离 + 持久化 + 重启恢复 ──────────────────────────
-  const store = createStore(ctx)
-
-  // ── 事件监听（只读观察；waterfall 一律透传 next()）──────────────────
-  attachAuditListeners(ctx, store.record)
-
-  // ── 资源监控 + 降级看门狗（15s 采样 CPU/内存/审计写入速率；写放大/文件
-  //    超限连续触发时自动降级停落盘，资源回归后自动恢复——issue #127）────
-  const monitor = createResourceMonitor(ctx, {
-    intervalMs: config?.resourceIntervalMs,
-    limits: config?.resourceLimits,
-    onDegrade: () => {
-      store.setPersistEnabled(false)
-      ctx.logger.warn(
-        '[dsh-my-observability] 资源看门狗：审计写入速率/文件大小连续超限，已暂停落盘（事件仍在内存，恢复后全量快照补齐）',
-      )
-    },
-    onRecover: () => {
-      store.setPersistEnabled(true)
-      ctx.logger.warn('[dsh-my-observability] 资源看门狗：写入速率回归正常，已恢复审计落盘')
-    },
-  })
-  monitor.start()
-
-  // ── 路由（查询 / git 工具 / diff 审查 / 资源）───────────────────────
-  registerObservabilityRoutes(ctx, store, monitor, options)
-
-  // ── 卸载冲刷：清防抖定时器 + 立即落盘 + 停采样 ──────────────────────
-  ctx.effect(() => {
-    monitor.stop()
-    return store.dispose
-  }, 'dsh-my-observability: persistence teardown')
+    // ── 配置（应用层 config 覆盖，默认全部开启）─────────────────────────
+    const options = buildOptions(config);
+    // ── 审计存储：会话隔离 + 持久化 + 重启恢复 ──────────────────────────
+    const store = createStore(ctx);
+    // ── 事件监听（只读观察；waterfall 一律透传 next()）──────────────────
+    attachAuditListeners(ctx, store.record);
+    // ── 资源监控 + 降级看门狗（15s 采样 CPU/内存/审计写入速率；写放大/文件
+    //    超限连续触发时自动降级停落盘，资源回归后自动恢复——issue #127）────
+    const monitor = createResourceMonitor(ctx, {
+        intervalMs: config?.resourceIntervalMs,
+        limits: config?.resourceLimits,
+        onDegrade: () => {
+            store.setPersistEnabled(false);
+            ctx.logger.warn('[dsh-my-observability] 资源看门狗：审计写入速率/文件大小连续超限，已暂停落盘（事件仍在内存，恢复后全量快照补齐）');
+        },
+        onRecover: () => {
+            store.setPersistEnabled(true);
+            ctx.logger.warn('[dsh-my-observability] 资源看门狗：写入速率回归正常，已恢复审计落盘');
+        },
+    });
+    monitor.start();
+    // ── 路由（查询 / git 工具 / diff 审查 / 资源）───────────────────────
+    registerObservabilityRoutes(ctx, store, monitor, options);
+    // ── 卸载冲刷：清防抖定时器 + 立即落盘 + 停采样 ──────────────────────
+    ctx.effect(() => {
+        monitor.stop();
+        return store.dispose;
+    }, 'dsh-my-observability: persistence teardown');
 }