dsh-rule-engine 0.5.17 → 0.6.1

package/lib/core/state.js

@@ -247,6 +247,7 @@ export function freshTurn() {
     realUserSeen: false, // v0.5.7：本回合是否有真实用户消息（注入轮不检测的依据）
     askSeen: false,
     askRejected: false, // 本回合 ask 已被拒（防连环 ask，弹窗消减）
+    askApproved: false, // 2026-09-06 M7 修复：本回合已获 ask 授权答复（M7 approval-gap 豁免信号）
     questionOnly: false,
     intents: null,
     intentState: "lexicon", // lexicon | llm-pending | llm-ready（LLM 意图兜底状态）
@@ -265,7 +266,7 @@ export function freshTurn() {
     reasoningText: "",
     // 规则 22 粒度升级（2026-08-24）：本回合已获授权范围（execute 子句 + ask 授权）
     scopes: [],
-    // M8 双通道机制（2026-08-24）：dsh-manual-write 落盘后同轮 engram_store 校验
+    // M8 双通道机制（2026-08-24）：统一入口落盘后同轮 engram_store 校验（entryMarker 经配置）
     manualWriteSeen: false,
     engramStoreSeen: false
   };

package/lib/core/text-detect.js

@@ -35,6 +35,15 @@ export const CRITICISM_WEAK_RE =
 
 export const DELIVERY_RE = /(?:已完成|全部(?:[^\s，。；！？]{0,12})完成|已[^\s，。；！？]{0,8}完成|修复完成|落盘完成|验证[^\s，。；！？]{0,6}(?:通过|成功)|全部通过|全部[^\s，。；！？]{0,10}通过|已通过|已修复|搞定)(?:\s*了|!|！|，[^。]*)?(?![^。]*(?:尚未|没有|未|没|还没|未完|待做|待完成))/;
 
+// 2026-09-06 0.6.x（tsk_527d222c 第一期）：路径缩写 B 级检测——回复含缩写路径（reports\ / ~/.dsh / %USERPROFILE%）
+// 且非完整盘符形态 → 提醒写完整绝对路径（规则 14⑤ 机器化第一层；WEAK 形态：留痕+注入，不拦截）
+const PATH_ABBREV_RE = /(?:^|[\s"'“”（(])(?:reports|~\/?\.dsh|%USERPROFILE%)[\\/]/i;
+const ABS_PATH_RE = /[A-Za-z]:[\\/][^\n]*/g;
+export function hasPathAbbrev(text) {
+  if (typeof text !== "string") return false;
+  return PATH_ABBREV_RE.test(String(text).replace(ABS_PATH_RE, ""));
+}
+
 /** 从 assistant message 内容中提取纯文本 */
 export function extractAssistantText(message) {
   if (!message) return "";
@@ -144,7 +153,7 @@ export function detectTimeRule(session, text, timeCfg) {
  * @param {string} options.text assistant 纯文本
  * @returns {Array<{ruleId:string,title:string,kind:string,reason:string}>}
  */
-export function detectViolations({ configs, session, text, reasoningText = "", mountRevision = 0 }) {
+export function detectViolations({ configs, session, text, reasoningText = "", mountRevision = 0, rule5Window = 3 }) {
   const hits = [];
   const byId = new Map(configs.filter((c) => c.confidence !== "low").map((c) => [String(c.ruleId), c]));
 
@@ -184,6 +193,16 @@ export function detectViolations({ configs, session, text, reasoningText = "", m
     });
   }
 
+  // 2026-09-06 0.6.x（tsk_527d222c 第一期）：路径缩写 B 级（规则 14⑤ 机器化——WEAK，留痕+注入不拦）
+  if (hasPathAbbrev(text)) {
+    hits.push({
+      ruleId: "14",
+      title: "汇报规范（完整文件位置路径）",
+      kind: "correct",
+      reason: "回复含缩写路径（reports\\ / ~/.dsh / %USERPROFILE% 等）——给用户应写完整盘符绝对路径（规则 14⑤）"
+    });
+  }
+
   const sourceCfg = byId.get("5");
   if (sourceCfg && !SOURCE_MARK.test(text)) {
     if (URL_RE.test(text)) {
@@ -195,15 +214,16 @@ export function detectViolations({ configs, session, text, reasoningText = "", m
       });
     } else if (INTERNAL_REF_RE.test(text) && !isQuoteOrParaphraseContext(text, INTERNAL_REF_RE)) {
       // 规则 5 扩展（2026-09-01 用户拍板）：内部文档引用（手册/踩坑/条款/源码…）须有依据——
-      // 近 3 回合无对应 read/grep 时提示（B 级：留痕+注入，不拦截）。
+      // 近 rule5Window 回合（默认 3；配置层 rule-engine.json `rule5SourceWindow` 可覆盖，2026-09-03
+      // 通用化修正：本机偏好走配置、通用默认保持 3）无对应 read/grep 时提示（B 级：留痕+注入，不拦截）。
       const curTurn = session.turn.number || 0;
       const lastQuery = session.lastQueryTurn ?? -1;
-      if (lastQuery < 0 || curTurn - lastQuery > 3) {
+      if (lastQuery < 0 || curTurn - lastQuery > rule5Window) {
         hits.push({
           ruleId: "5",
           title: sourceCfg.title,
           kind: "correct",
-          reason: "回答引用内部文档（手册/踩坑/条款/源码等）但近 3 回合无对应 read/grep——请标注手册位置或删去断言"
+          reason: `回答引用内部文档（手册/踩坑/条款/源码等）但近 ${rule5Window} 回合无对应 read/grep——请标注手册位置或删去断言`
         });
       }
     }

package/lib/core/tool-catalog.js

@@ -26,6 +26,9 @@ const ANALYSIS_TOOLS = new Set([
   // 子代理交付工具（官方 dsh-tool-subagent-report，2026-08-24 实测发现）：仅子代理环境注册，
   // 参数仅 output 文本 → 直接交付父代理，无文件副作用 → analysis（避免子代理交付被 unknown deny 阻断）
   "report",
+  // 官方子代理模型发现（@deepseek-ai/dsh-tool-subagent，2026-09-06 工具目录漂移补录）：只读枚举
+  // 可用子代理模型（模型发现/所选路由校验），无持久副作用 → analysis
+  "list_subagent_models",
   // 官方 0.5.9 补全（tool-catalog 镜像 2026-08-27 交叉）
   "lsp",
   "session_event_read", "session_event_search", "session_event_trace", "session_search", "session_trace",

package/lib/index.js

@@ -1,7 +1,7 @@
 // dsh-rule-engine —— DSH 规则执行引擎 v3（host 插件，纯 Node）
 // 容器：解析 AGENTS.md → 理解器 → 匹配机 → 执行框架。
 // 执行框架：ctx.tools.guard() 硬拦 + session/event 文本纠察 + 审计台账 + /guard 命令。
-import { readFileSync, watch, writeFileSync } from "node:fs";
+import { readFileSync, watch, writeFileSync, existsSync } from "node:fs";
 import { randomUUID } from "node:crypto";
 import { audit, readAuditLog } from "./core/audit.js";
 import { loadPluginConfig } from "./core/config.js";
@@ -61,6 +61,7 @@ import {
 import { toolClass } from "./core/tool-catalog.js";
 import { parseWhitelist, mergeWhitelist, serializeWhitelist } from "./core/whitelist.js";
 import { state } from "./core/runtime.js";
+import { APPROVE_TYPES, normalizePath, setTypeHints } from "./core/authorization.js";
 import { DELIVERY_RE, detectViolations, extractAssistantText } from "./core/text-detect.js";
 import { buildTurnCard } from "./core/turn-card.js";
 import { shouldDetectTurn, shouldDeliver } from "./core/semantic.js";
@@ -101,6 +102,8 @@ export const name = "dsh-rule-engine";
 export const inject = ["tools", "commands", "agents", "workspaceRegistry", "skills", "llm"];
 
 const pluginConfig = loadPluginConfig();
+// C4：启动时合并配置层 typeHints（本机扩展授权类型；默认空=仅内置 8+archive 类）
+setTypeHints(pluginConfig.typeHints);
 state.enabled = pluginConfig.enabled;
 applyTaskContractConfig(state, pluginConfig);
 // T3 通用化（2026-08-31）：声明式绑定覆盖表注入（rule-engine.json 可选键 handlerOverrides；缺省 {}）
@@ -108,6 +111,44 @@ state.handlerOverrides = pluginConfig?.handlerOverrides || {};
 // 残余1 剥离（2026-08-31）：本机默认偏好表注入（rule-engine.json 可选键 handlerDefaultMap；
 // 通用部署=空表——代码零本机编号，本机偏好不随包走、升级不丢）
 state.handlerDefaultMap = pluginConfig?.handlerDefaultMap || {};
+// P2（2026-09-04）：本机集成参数化层（localIntegrations）——默认空=通用行为不变；
+// 本机专属约定（统一入口脚本名/M8 双通道/手册路径豁免扩展）由配置注入，代码零本机字面量
+state.localIntegrations = pluginConfig?.localIntegrations || {};
+// A-8（0.6.0，启动自检硬验收）：localIntegrations 存在但 entryScript 指向的脚本文件在磁盘不存在
+// → 启动即审计告警（失败不阻断加载，但留下可观测证据——无声守卫消失风险的对策）
+// 0.6.0 修正：裸文件名（无路径段）视为脚本名——可能在工作区/全局 PATH，
+// 不告警（防误报）；仅当 entryScript 含明确路径段（\ / 盘符）且文件不存在时才告警。
+{
+  const li = state.localIntegrations;
+  const script = li?.entryScript;
+  const isBareName = typeof script === "string" && /^[A-Za-z0-9._-]+$/.test(script.replace(/\\/g, "/"));
+  if (typeof script === "string" && script && !isBareName) {
+    let found = false;
+    try { found = existsSync(script); } catch { found = false; }
+    if (!found) {
+      audit({
+        kind: "entry-script-missing",
+        rule: "__entry-script-missing",
+        name: "启动自检：统一入口脚本不存在",
+        event: "startup",
+        reason: `localIntegrations.entryScript 指向的脚本（${script}）在磁盘不存在——本机守卫仍按配置工作，但入口通道可能失效；请检查配置或部署该脚本`,
+        session: "global"
+      });
+    }
+  }
+}
+// li-skipped（0.6.0 A2-2 补充）：无 localIntegrations.entryScript → 启动登记一次 skipped 审计
+// （验证"默认无"留痕；登录于启动/配置加载时，而非每次工具调用——修正此前写类分支被 12A 前置拦截的缺陷）
+if (!state.localIntegrations?.entryScript) {
+  audit({
+    kind: "li-skipped",
+    rule: "19",
+    name: "本地集成未配置（守卫无对象）",
+    event: "startup",
+    reason: "skipped: no localIntegrations.entryScript——该守卫在此环境不存在（0.6.0 默认无）",
+    session: "global"
+  });
+}
 // reloadRules 内部已统一刷新理解产物（P0-3），此处不再重复写
 reloadRules(state);
 
@@ -434,15 +475,18 @@ export function handleSessionEvent(ctx, session, event) {
     return;
   }
   if (event.type === "turn/end") {
-    // M8 双通道机制：本回合用 dsh-manual-write 落盘手册/AGENTS 后，必须同轮 engram_store 沉淀记忆；
+    // M8 双通道机制：本回合用统一入口落盘手册/AGENTS 后，必须同轮 engram_store 沉淀记忆；
     // 缺失 → 审计 + 注入纠正（用户明确要求机制化，2026-08-24）
-    if (s.turn.manualWriteSeen && !s.turn.engramStoreSeen) {
+    // A3-1（0.6.0）：默认关闭 → 显式 enabled:true + 配置 entryMarker 才生效（无配置 = M8 机制整体不存在）
+    const m8Cfg = state.localIntegrations?.m8 || {};
+    const m8Marker = m8Cfg.entryMarker;
+    if (m8Cfg.enabled === true && m8Marker && s.turn.manualWriteSeen && !s.turn.engramStoreSeen) {
       audit({
         kind: "engram-gap",
         rule: "__engram-gap",
         name: "双通道记忆缺失",
         event: "turn/end",
-        reason: "本回合 dsh-manual-write 落盘了手册/AGENTS，但未同轮调用 engram_store；按规则 19/77/M8 应在同一回合完成记忆沉淀",
+        reason: "本回合经本机配置的统一入口落盘了手册/AGENTS，但未同轮调用 engram_store；按规则 19/77/M8 应在同一回合完成记忆沉淀",
         session: sid
       });
       maybeInject(ctx, sid, {
@@ -519,7 +563,7 @@ export function handleSessionEvent(ctx, session, event) {
     if (!text) return;
     // 引擎自身注入的 [规则引擎] 提示不是用户消息，跳过——否则其中的“请直接执行”会被记录成授权（自我续授权漏洞）
     if (isEngineInjectedMessage(text)) return;
-    // 模板兜底（对 kind=user 同样生效，防"标 user 的注入"——super-injector createUserMessage 同类风险）：
+    // 模板兜底（对 kind=user 同样生效，防"标 user 的注入"——example-injector createUserMessage 同类风险）：
     // runtime context 快照 / 子代理完成通知 / vision-router 挂载提醒等已知注入模板 → 整体跳过
     if (isKnownSystemInjection(text)) {
       audit({
@@ -659,7 +703,7 @@ export function handleSessionEvent(ctx, session, event) {
         pendingCall.backupPaths.push(bpTool);
       }
     }
-    if (isManualReadTool(toolName, args)) s.manualReadSeen = true;
+    if (isManualReadTool(toolName, args, state.localIntegrations?.manualExempt?.paths || [])) s.manualReadSeen = true;
     // 规则 5/31 扩展（2026-09-01）：查询类工具调用记下回合号（"近 3 回合有据"判定）
     if (isReadOnlyTool(toolName, args)) s.lastQueryTurn = s.turn.number;
     if (toolName === "skill" && args?.name) s.turn.skillNames.push(args.name);
@@ -772,10 +816,13 @@ export function handleSessionEvent(ctx, session, event) {
       }
     }
 
-    // M8 双通道机制（2026-08-24）：dsh-manual-write 落盘成功 → 标记；同轮 engram_store 成功 → 标记
+    // M8 双通道机制（2026-08-24）：统一入口落盘成功 → 标记；同轮 engram_store 成功 → 标记
+    // A3-1（0.6.0）：默认关闭 → 显式 enabled:true + 配置 entryMarker 才生效（无配置 = M8 机制整体不存在）
     if (!isError && pendingCall) {
       const cmd = pendingCall.args?.command || pendingCall.args?.code || "";
-      if ((pendingCall.name === "pwsh" || pendingCall.name === "bash") && /\bdsh-manual-write\.mjs/.test(cmd)) {
+      const m8Cfg2 = state.localIntegrations?.m8 || {};
+      const marker = m8Cfg2.entryMarker;
+      if (m8Cfg2.enabled === true && marker && (pendingCall.name === "pwsh" || pendingCall.name === "bash") && cmd.includes(marker)) {
         s.turn.manualWriteSeen = true;
       }
       if (pendingCall.name === "engram_store") {
@@ -924,6 +971,7 @@ export function handleSessionEvent(ctx, session, event) {
       const result = d.result ?? d.value ?? d;
       if (askResultApproved(result)) {
         s.turn.realUserSeen = true; // v0.5.7：ask 弹窗答复也算"真实用户在场"
+        s.turn.askApproved = true; // 2026-09-06 M7 修复：ask 授权答复 = 本回合已授权（M7 approval-gap 豁免）
         const qText = askQuestionText(pending.questions);
         const selectedText = askResultSelectedText(result);
         // 授权范围只取“问题核心 + 用户实际选择”，不再把全部选项描述纳入；
@@ -1036,7 +1084,7 @@ export function handleSessionEvent(ctx, session, event) {
           rule: "23",
           name: "交付声明缺验证闸门记录",
           event: "assistant/message",
-          reason: "交付/完成类声明缺少同会话近期 verify-pass（ALL TESTS PASSED / check-plugin-load RESULT: PASS）记录",
+          reason: "交付/完成类声明缺少同会话近期 verify-pass（测试全绿或冷加载探针 RESULT: PASS）记录",
           session: sid
         });
         // v0.5.7 后续（用户拍板"暗示型统一裁决"）：23④ 词面命中只是嫌疑——"完成"≠交付声明
@@ -1081,7 +1129,7 @@ export function handleSessionEvent(ctx, session, event) {
       }
     }
     // F1（2026-08-28 阶段三）：规则 2 违规不在此时投递——标记 pendingRule2，turn/end 复核（Get-Date 定案）①
-    let violations = detectViolations({ configs: state.configs, session: s, text, reasoningText: s.turn.reasoningText, mountRevision: state.mountRevision });
+    let violations = detectViolations({ configs: state.configs, session: s, text, reasoningText: s.turn.reasoningText, mountRevision: state.mountRevision, rule5Window: pluginConfig.rule5SourceWindow ?? 3 });
     const rule2s = violations.filter((v) => v.ruleId === "2");
     for (const v of rule2s) {
       if (!s.turn.pendingRule2) s.turn.pendingRule2 = v.reason;
@@ -1148,7 +1196,8 @@ const COMMAND_SPECS = [
   { name: "budget", args: "...", desc: "设置预算（agents=N files=... deps=allow hash=allow）" },
   { name: "contract", args: "", desc: "查看当前任务契约" },
   { name: "contract categories", args: "...", desc: "设定契约类别白名单（0.5.12）" },
-  { name: "label", args: "<id> <label>", desc: "给审计记录打标（correct/incorrect/inconclusive）" }
+  { name: "label", args: "<id> <label>", desc: "给审计记录打标（correct/incorrect/inconclusive）" },
+  { name: "approve", args: "<type> <路径> [min]", desc: "物理确认：授予指定类型+路径的临时授权（仅用户输入；默认 10 分钟）" }
 ];
 
 const USAGE = [
@@ -1204,6 +1253,17 @@ function parseCommand(rawInput) {
   if (m) return { kind: "label", eventId: m[1], label: m[2].toLowerCase() };
   m = text.match(/^label\s+clear\s+(.+)$/i);
   if (m) return { kind: "label-clear", fingerprint: m[1].trim() };
+  // C4：/guard approve <type> <路径> [min]——物理确认（类型在 executeGuard 校验枚举）
+  m = text.match(/^approve\s+([A-Za-z_][A-Za-z0-9_-]*)\s*("(?:[^"]*)"|'(?:[^']*)'|\S+)(?:\s+(\d+))?$/i);
+  if (m) {
+    const p = m[2];
+    return {
+      kind: "approve",
+      type: m[1].toLowerCase(),
+      path: p.replace(/^["']|["']$/g, ""),
+      minutes: m[3] ? Number(m[3]) : 10
+    };
+  }
   return { kind: "invalid" };
 }
 
@@ -1281,6 +1341,30 @@ async function executeGuard(ctx, invocation) {
         text: `已临时放行全部守卫 ${minutes} 分钟。到期自动恢复，也可 /guard reload 后立即恢复。`
       };
     }
+    case "approve": {
+      // C4（2026-09-03）物理确认：用户亲手输入=词表无法误读；最小范围（类型+路径+时长）；无全局通配
+      if (!loadPluginConfig().approveEnabled) {
+        return { kind: "error", text: "/guard approve 未开启：请在 rule-engine.json 设 approveEnabled=true（设置页开关随后续版本）后使用" };
+      }
+      if (!APPROVE_TYPES().includes(command.type)) {
+        return { kind: "error", text: `不支持的类型 ${command.type}（可用：${APPROVE_TYPES().join("/")}；any=全局通配被禁止——物理确认必须最小范围）` };
+      }
+      if (!command.path) return { kind: "error", text: "路径缺失：/guard approve <type> <路径> [min]（建议路径用双引号包裹，如 /guard approve write \"D:\\...\\file.json\" 10）" };
+      const minutes = Math.min(Math.max(1, command.minutes), 720);
+      const pfx = normalizePath(command.path);
+      const sid = sessionIdOfInvocation(invocation);
+      recordAuthorization(state, sid, {
+        type: command.type,
+        pathPrefix: pfx,
+        source: "physical-confirm",
+        expiresAt: Date.now() + minutes * 60000
+      });
+      audit({ kind: "guard-command", rule: "__physical-confirm", name: "物理确认授权", event: "command", reason: `/guard approve ${command.type} ${pfx} ${minutes}m`, session: sid });
+      return {
+        kind: "success",
+        text: `已物理确认授权：${command.type}｜${pfx}｜${minutes} 分钟。仅该类型+该路径（含子路径）生效；/guard revoke 可立即撤销；到期自动失效。`
+      };
+    }
     case "lock": {
       state.unlockUntil = 0;
       state.bypassUntil = 0;
@@ -1554,9 +1638,13 @@ export function apply(ctx) {
         //（调整/补充/评估/建议且无落盘词）→ approval-gap 审计 + 注入提醒（规则 22 自证③：方案性指令 ≠ 落盘授权）
         {
           const cmd = exec?.arguments?.command || exec?.arguments?.code || "";
-          if ((exec?.name === "pwsh" || exec?.name === "bash") && /\bdsh-manual-write\.mjs/.test(cmd)) {
+          const entryScript = state.localIntegrations?.entryScript;
+          // A3-2（0.6.0）：入口脚本名从配置读取并转义；无配置不走本分支。
+          // 边界裁决（v1.3 关键裁决 4）：正则保持无尾部 \b（保守匹配，xxx.mjs.bak 等变体同样命中）。
+          if ((exec?.name === "pwsh" || exec?.name === "bash") && entryScript && new RegExp(`\\b${entryScript.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}`).test(cmd)) {
             const s7 = getSessionState(state, sessionIdOfExec(exec));
-            if (needsApprovalReminder(s7.turn.userText || "")) {
+            // 2026-09-06 M7 修复：ask 授权答复（turn.askApproved）→ 豁免 approval-gap（12A 授权链已由 ask 建立）
+            if (needsApprovalReminder(s7.turn.userText || "", { askApproved: !!s7.turn.askApproved })) {
               audit({
                 kind: "approval-gap",
                 rule: "__approval-gap",

package/lib/service.js

@@ -204,7 +204,8 @@ class RuleEngineService extends TypertRemoteService {
           askEnabled: conf.askEnabled === true,
           taskContractMode: conf.taskContractMode === "armed" ? "armed" : "observe",
           taskContractDefaults: conf.taskContractDefaults || {},
-          turnCard: { enabled: conf.turnCard?.enabled === true }
+          turnCard: { enabled: conf.turnCard?.enabled === true },
+          approveEnabled: conf.approveEnabled === true
         }
       };
     } catch (error) {
@@ -215,6 +216,7 @@ class RuleEngineService extends TypertRemoteService {
   /** 保存任务契约配置（设置页；写入 rule-engine.json 并热同步 state） */
   async setTaskContractConfig(partial) {
     try {
+      audit({ kind: "guard-command", rule: "__settings-save", name: "设置页保存", event: "command", reason: `setTaskContractConfig keys=${JSON.stringify(Object.keys(partial || {}))}`, session: "global" });
       const conf = savePluginConfig(partial || {});
       applyTaskContractConfig(state, conf);
       return {
@@ -224,7 +226,8 @@ class RuleEngineService extends TypertRemoteService {
           askEnabled: conf.askEnabled === true,
           taskContractMode: conf.taskContractMode === "armed" ? "armed" : "observe",
           taskContractDefaults: conf.taskContractDefaults || {},
-          turnCard: { enabled: conf.turnCard?.enabled === true }
+          turnCard: { enabled: conf.turnCard?.enabled === true },
+          approveEnabled: conf.approveEnabled === true
         }
       };
     } catch (error) {

package/package.json

@@ -1,58 +1,60 @@
-{
-  "name": "dsh-rule-engine",
-  "version": "0.5.17",
-  "description": "DSH 规则执行引擎 v3：容器解析 AGENTS.md + 理解器 + 匹配机 + 执行框架",
-  "type": "module",
-  "main": "lib/index.js",
-  "exports": {
-    ".": "./lib/index.js",
-    "./lib/service.js": "./lib/service.js",
-    "./package.json": "./package.json"
-  },
-  "files": [
-    "lib",
-    "scripts",
-    "upgrade-impact.json",
-    "cordis.patch.yml",
-    "README.md",
-    "LICENSE"
-  ],
-  "keywords": [
-    "deepseek-harness",
-    "dsh",
-    "dsh-plugin",
-    "cordis",
-    "rules",
-    "guard",
-    "security",
-    "agent"
-  ],
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/jilian-dsh/dsh-rule-engine.git"
-  },
-  "homepage": "https://github.com/jilian-dsh/dsh-rule-engine",
-  "engines": {
-    "node": ">=22"
-  },
-  "dshCompat": {
-    "min": "0.1.0-rc.3",
-    "max": "0.2.0"
-  },
-  "scripts": {
-    "test": "node test/run-all.mjs",
-    "check": "node --check lib/index.js",
-    "verify": "node scripts/verify-all.mjs",
-    "audit:mount": "node scripts/audit-mount-consistency.mjs --profile web"
-  },
-  "peerDependencies": {
-    "@deepseek-ai/dsh-home-paths": ">=0.1.0-rc.3 <0.2.0 || >=0.1.1-rc.0 <0.2.0",
-    "@deepseek-ai/dsh-typert-protocol": ">=0.1.0-rc.3 <0.2.0 || >=0.1.1-rc.0 <0.2.0"
-  },
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    }
-  }
-}
+{
+  "name": "dsh-rule-engine",
+  "version": "0.6.1",
+  "description": "DSH 规则执行引擎 v3：容器解析 AGENTS.md + 理解器 + 匹配机 + 执行框架",
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./lib/service.js": "./lib/service.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "scripts",
+    "!scripts/local-residue-markers.txt",
+    "upgrade-impact.json",
+    "cordis.patch.yml",
+    "README.md",
+    "LICENSE"
+  ],
+  "keywords": [
+    "deepseek-harness",
+    "dsh",
+    "dsh-plugin",
+    "cordis",
+    "rules",
+    "guard",
+    "security",
+    "agent"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/jilian-dsh/dsh-rule-engine.git"
+  },
+  "homepage": "https://github.com/jilian-dsh/dsh-rule-engine",
+  "engines": {
+    "node": ">=22"
+  },
+  "dshCompat": {
+    "min": "0.1.0-rc.3",
+    "max": "0.2.0"
+  },
+  "scripts": {
+    "test": "node test/run-all.mjs",
+    "check": "node --check lib/index.js",
+    "verify": "node scripts/verify-all.mjs",
+    "audit:mount": "node scripts/audit-mount-consistency.mjs --profile web",
+    "check:meta": "node scripts/readme-version-check.mjs && node scripts/local-residue-scan.mjs"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/dsh-home-paths": ">=0.1.0-rc.3 <0.2.0 || >=0.1.1-rc.0 <0.2.0",
+    "@deepseek-ai/dsh-typert-protocol": ">=0.1.0-rc.3 <0.2.0 || >=0.1.1-rc.0 <0.2.0"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  }
+}