@shgroup/dsh-serenity-hooks 1.100.0 → 1.102.0

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-serenity-hooks",
-  "version": "1.100.0",
+  "version": "1.102.0",
   "main": "lib/index.js",
   "description": "宁静号 ACC harness（Native Cordis 插件）：给 DSH 装一个「AI 工作区」——14 个工具（container_fs/cognitive_trajectory/dashboard/container_git/msm/praxis/ontology/serenity-skill-creator/cheap-worker/localstore/container_admin；另三个 im-bridge/acc-diag/diagram 按配置条件出现）+ 机械约束（安全模式/工作区围墙/密钥守卫）+ 认知轨迹日志与原地重建 + 网页登录入口/IM 桥/认知轨迹唤醒注册表。轨迹声明 = 轨迹目录下的 trajectory.json（约束面 + 旧标识 uid + CRO 机器绑定 cro.host；旧名 trajectory-constraint.json / skiff.json 仍在读取族里）；轨迹提示词 = 轨迹目录下的 PROMPT.md（一条轨迹「是谁、按什么章程工作」，所有轨迹通用，追加在容器层与质量层之后，不替换它们）。适配 DSH 0.1.7-rc.1 / 0.2.0-rc.1 / 0.2.1-rc.1（三档，deepseek-ai/deepseek-harness）。",
   "engines": {

package/lib/index.js

@@ -4,7 +4,7 @@ import { _ as resolveInside, a as findSerenityRoot$1, c as matchBlacklist, d as
 import { A as namingTitleFor, B as summarize, C as createSession, E as getActiveSessionInfo, F as resolveSessionByTitle, G as readTrajectoryFile, H as useSession, I as sessionEvents, J as localHuman, K as isoLocal, L as sessionsRoot, M as parseTrajectoryCode, O as listActiveTrajectories, P as readTrajectoryUid, R as setActiveSessionInfo, S as clearActiveSessionInfo, T as findSession, U as TRAJECTORY_FILENAME, V as trajectoryDescOf, W as TRAJECTORY_LEGACY_FILENAMES, Y as localIdStamp, b as UID_FILENAME, c as replacesDefaultIdentity, i as listTrajectoryConstraints, j as parseSessionContextFromEvents, k as listSessions, l as trajectoryCodeForSession, n as findDirNameByCode, o as readTrajectoryConstraintAt, q as localFileStamp, r as isTrajectoryConstrained, s as readTrajectoryConstraintByCode, t as TRAJECTORY_CONSTRAINT_FILENAME, u as trajectoryConstraintForSession, v as COGNITIVE_TRAJECTORY_ACTIONS, w as extractSessionMdPathFromText, x as archiveSession, z as showSession } from "./profile-zxakCNXy.js";
 import { n as checkLocalstoreGitCompliance, o as readStore, s as runLocalStore, t as LOCALSTORE_SCOPES } from "./service-DDmHSglV.js";
 import { _ as resolveConstraintSystemPrompt, a as listBoundSessionIds, d as constraintCognitiveTrajectory, f as constraintSystemPromptSource, g as profileWriteWhitelist, h as profileToolWhitelist, i as carrierState, l as TRAJECTORY_CONSTRAINT_HINT, n as PLUGIN_SOURCE, o as readLastBound, r as appendBound, s as resolveSessionCognitiveTrajectoryLabel, t as ACC_MESSAGE_KIND, v as ACC_VERSION, y as findPackageRoot } from "./message-source-BAMwXu6i.js";
-import { A as buildResourceIndex, C as verifyPassword, D as recordToolUsage, E as verifyTotpCode, F as hasTrajectoryPrompt, M as isSafeSkillName, N as truncateContent, O as REFERENCE_DIR, P as TRAJECTORY_PROMPT_FILENAME, S as toWire, T as MECHANISM_PORTS, _ as registerEntrySkillSectionGlobal, a as trajectoryConstraintFor, b as projectKnownWorkspaces, c as trajectoryWorkspaceMdPath, d as CHEAP_WORKER_GUIDE, f as providerAvailabilityError, g as registerEntrySkillSection, h as registerCognitiveTrajectorySkillSection, i as getTrajectoryAgent, j as buildResourceNameSuffix, k as SKILL_ONTOLOGY_FILE, l as unregisterTrajectorySession, m as splitModel, n as deliverToTrajectory, o as trajectoryConstraintMsmGate, p as requireWhitelistedModel, r as ensureWorkspacePromptSection, s as trajectoryConstraintParticipates, t as createTrajectoryAgent, u as workspaceCognitiveTrajectoryLine, v as applyWirePatch, w as FACE_PORTS, x as readAdvancedSettings, y as migrateLegacyLocalstore } from "./session-DFNtReQY.js";
+import { A as buildResourceIndex, C as verifyPassword, D as recordToolUsage, E as verifyTotpCode, F as hasTrajectoryPrompt, M as isSafeSkillName, N as truncateContent, O as REFERENCE_DIR, P as TRAJECTORY_PROMPT_FILENAME, S as toWire, T as MECHANISM_PORTS, _ as registerEntrySkillSectionGlobal, a as trajectoryConstraintFor, b as projectKnownWorkspaces, c as trajectoryWorkspaceMdPath, d as CHEAP_WORKER_GUIDE, f as providerAvailabilityError, g as registerEntrySkillSection, h as registerCognitiveTrajectorySkillSection, i as getTrajectoryAgent, j as buildResourceNameSuffix, k as SKILL_ONTOLOGY_FILE, l as unregisterTrajectorySession, m as splitModel, n as deliverToTrajectory, o as trajectoryConstraintMsmGate, p as requireWhitelistedModel, r as ensureWorkspacePromptSection, s as trajectoryConstraintParticipates, t as createTrajectoryAgent, u as workspaceCognitiveTrajectoryLine, v as applyWirePatch, w as FACE_PORTS, x as readAdvancedSettings, y as migrateLegacyLocalstore } from "./session-Dao7X5lR.js";
 import { i as sessionsRootDir, n as findSessionLog, r as hasSessionLogById } from "./cleanup-CPl1SSaK.js";
 import { i as runImBridge, n as isImWiredTrajectory, o as readSimpleSettings, r as registerImChannel, s as registerSettingsSection, t as imChannelIds } from "./channels-CuCsUfcY.js";
 import { a as readFeishuCredential, c as readWeixinSettings, d as weixinInboundDir, f as weixinSessionIdForTrajectory, i as matchWeixinRoute, n as extractWeixinText, r as hasVoiceItem, s as readWeixinCredential, t as extractWeixinMedia, u as sanitizeFileName$1 } from "./route-DxIKWeN9.js";
@@ -38,7 +38,13 @@ import { isIP } from "node:net";
 *   - cp：目录需 recursive；dst 已存在报错；自动建父目录
 *   - mv：dst 已存在报错；自动建父目录
 *   - list/tree/exists/info/find：输出结构与 osp 一致（JSON 元数据 / 嵌套树 / glob+fuzzy 搜索）
-*   - touch：存在更新 mtime、不存在创建（自动建父目录）；append：自动建父目录 + 返回字节数
+*   - touch：存在更新 mtime、不存在创建（自动建父目录）
+*   - 🔴 **`append` 已于 v1.101.0 退役**（owner 2026-10-26 令「砍掉 container_fs 的 append」）：
+*     它存在的唯一理由曾是"不读全文的追加"，但实测该用途几乎没人走（SESSION.md 追加
+*     7,291 次里 append 只有 74 次，占 1.0%）⇒ 留着一个**绕过 fs-observation 锁**的
+*     写通道，收益不足以抵它带来的规则面（写类动作清单、写白名单、两处工具描述都要维护它）。
+*     ⚠️ 传 `action:'append'` 现在得到 `PARAMETER_INVALID_VALUE` 并列出合法动作 —— **响亮失败**，
+*     不是静默忽略。
 * 保留 dsp 增强：win32 reveal 用 spawn+unref（explorer GUI 进程退出码不可靠，fire-and-forget）。
 */
 const CC_FS_ACTIONS = [
@@ -53,7 +59,6 @@ const CC_FS_ACTIONS = [
 	"mv",
 	"cp",
 	"touch",
-	"append",
 	"reveal",
 	"info",
 	"find"
@@ -314,15 +319,6 @@ function runCcFs(root, args) {
 			writeFileSync(absPath, "", "utf-8");
 			return `created empty file: ${args.path}`;
 		}
-		case "append": {
-			if (!args.path || args.content === void 0) throw new Error("append requires path + content");
-			const absPath = validateWritePath(root, args.path);
-			const parentDir = dirname(absPath);
-			if (!existsSync(parentDir)) mkdirSync(parentDir, { recursive: true });
-			const content = args.content;
-			appendFileSync(absPath, content, "utf-8");
-			return `appended ${Buffer.byteLength(content, "utf8")} bytes to ${args.path}`;
-		}
 		case "reveal": {
 			if (!args.path) throw new Error("reveal requires path");
 			const absPath = resolveInside(root, args.path);
@@ -416,7 +412,7 @@ function runCcFs(root, args) {
 				count: matches.length
 			};
 		}
-		default: throw new Error(`Unknown action: ${a}`);
+		default: throw new Error(`Unknown action: ${a}. Valid actions: ${CC_FS_ACTIONS.join("/")}` + (a === "append" ? "（`append` 已于 v1.101.0 退役 —— 改用 edit 或 write）" : ""));
 	}
 }
 //#endregion
@@ -435,7 +431,7 @@ function renderText$11(value) {
 }
 const ccFsTool = defineTool({
 	name: "container_fs",
-	description: "Container filesystem operations (the CCC's hull — file operations confined to the container root; path escape blocked automatically). 15 subcommands: root/resolve/exists/list/tree/relative/mkdir/rm/mv/cp/touch/append/reveal/info/find. reveal opens a path in the OS file manager (Linux xdg-open / macOS Finder / Windows Explorer). Complements read/write/edit (structural operations).",
+	description: "Container filesystem operations (the CCC's hull — file operations confined to the container root; path escape blocked automatically). 14 subcommands: root/resolve/exists/list/tree/relative/mkdir/rm/mv/cp/touch/reveal/info/find. reveal opens a path in the OS file manager (Linux xdg-open / macOS Finder / Windows Explorer). Complements read/write/edit (structural operations).",
 	parameters: {
 		action: {
 			type: "string",
@@ -445,7 +441,7 @@ const ccFsTool = defineTool({
 		},
 		path: {
 			type: "string",
-			description: "Primary path argument (single-path ops: resolve/exists/list/tree/relative/touch/append/info/rm)"
+			description: "Primary path argument (single-path ops: resolve/exists/list/tree/relative/touch/info/rm)"
 		},
 		paths: {
 			type: "array",
@@ -462,7 +458,7 @@ const ccFsTool = defineTool({
 		},
 		content: {
 			type: "string",
-			description: "append content"
+			description: "Deprecated/ignored — the only consumer was `append`, retired in v1.101.0"
 		},
 		pattern: {
 			type: "string",
@@ -12807,18 +12803,17 @@ const WRITE_TOOLS = /* @__PURE__ */ new Set([
 	"str_replace_editor",
 	"container_fs",
 	"bash",
-	"append",
 	"touch"
 ]);
-/** container_fs 的写类子命令（mkdir/rm/mv/cp/touch/append）；其余 9 子命令（root/resolve/exists/
-*  list/tree/relative/reveal/info/find）为只读——只读子命令不查黑名单（同 read 语义） */
+/** container_fs 的写类子命令（mkdir/rm/mv/cp/touch）；其余 9 子命令（root/resolve/exists/
+*  list/tree/relative/reveal/info/find）为只读——只读子命令不查黑名单（同 read 语义）
+*  🔴 `append` 已于 v1.101.0 退役（owner 2026-10-26），故不在此集合。 */
 const CC_FS_WRITE_ACTIONS = /* @__PURE__ */ new Set([
 	"mkdir",
 	"rm",
 	"mv",
 	"cp",
-	"touch",
-	"append"
+	"touch"
 ]);
 /**
 * 凭据文件硬名单（数据面守卫，v1.26.3，S142 用户：localstore.json 需要在 read 工具的黑名单里）：
@@ -20455,7 +20450,6 @@ async function handleInboundEvent(ctx, root, accountId, io, event, preset) {
 		*/
 		releaseLock = await acquireSessionLock(sessionId);
 		const existing = getTrajectoryAgent(sessionId);
-		const hc = readCheapWorkerConfig(root);
 		const ref = existing ? {
 			agent: existing,
 			sessionId,
@@ -20471,7 +20465,7 @@ async function handleInboundEvent(ctx, root, accountId, io, event, preset) {
 				keeper: true,
 				rebuild: true
 			}
-		}, hc?.defaultModel, sessionId);
+		}, sessionId);
 		if (!ref.resumed) await io.sendText({
 			toUserId: fromUserId,
 			text: "（新的对话已开始）",

package/lib/{session-DFNtReQY.js → session-Dao7X5lR.js}

@@ -1500,7 +1500,7 @@ function toolsBlock() {
 		"=== Serenity Tools ===",
 		"The ACC (this plugin) provides the following built-in tools:",
 		"",
-		"  container_fs — container filesystem operations (15 subcommands: root/resolve/exists/list/tree/relative/mkdir/rm/mv/cp/touch/append/reveal/info/find)",
+		"  container_fs — container filesystem operations (14 subcommands: root/resolve/exists/list/tree/relative/mkdir/rm/mv/cp/touch/reveal/info/find)",
 		"  cognitive_trajectory — one cognitive trajectory: its persistent body (SESSION.md) + its timeline. Lifecycle: list (inventory + stats) / show / create / use (activate; inline integrity check — silent when fine) / rebuild (clear-and-rebuild this conversation in place, Ship of Theseus); delivery: send-now (deliver one message RIGHT NOW; live target injected immediately, non-live cold-resumed like a direct wake — returns a synchronous receipt) / send-later (one future instant + one message to any cognitive trajectory; fire-and-forget — no receipt, no recall) / cro-guide (the CRO programming guide: how to give THIS cognitive trajectory its own program that decides when it should be woken)",
 		"  dashboard    — always-on container instruments: health (CCC three-principle check + registry integrity) / time (now) / wait (N seconds)",
 		"  container_git— git operations (status/commit/push/log/pull/diff)",
@@ -2351,9 +2351,9 @@ const TRAJECTORY_PRESET = "standard";
 * @param profile 该 轨迹约束的约束面（来自 `trajectory-constraint.json`）
 * @param sessionId 指定会话 id（可选；微信桥等外部面用固定 id 实现"轨迹 ↔ 会话"长期映射）
 */
-async function createTrajectoryAgent(ctx, root, profile, defaultModel, sessionId) {
+async function createTrajectoryAgent(ctx, root, profile, sessionId) {
 	if (!ctx.agents) throw new Error("trajectory constraint: ctx.agents unavailable");
-	const model = profile.model?.trim() || defaultModel || "";
+	const model = profile.model?.trim() ?? "";
 	const id = sessionId ?? `轨迹约束-${profile.code}-${randomUUID()}`;
 	const setup = async (agentCtx) => {
 		try {

package/lib/tools/fs/service.d.ts

@@ -6,11 +6,17 @@
  *   - cp：目录需 recursive；dst 已存在报错；自动建父目录
  *   - mv：dst 已存在报错；自动建父目录
  *   - list/tree/exists/info/find：输出结构与 osp 一致（JSON 元数据 / 嵌套树 / glob+fuzzy 搜索）
- *   - touch：存在更新 mtime、不存在创建（自动建父目录）；append：自动建父目录 + 返回字节数
+ *   - touch：存在更新 mtime、不存在创建（自动建父目录）
+ *   - 🔴 **`append` 已于 v1.101.0 退役**（owner 2026-10-26 令「砍掉 container_fs 的 append」）：
+ *     它存在的唯一理由曾是"不读全文的追加"，但实测该用途几乎没人走（SESSION.md 追加
+ *     7,291 次里 append 只有 74 次，占 1.0%）⇒ 留着一个**绕过 fs-observation 锁**的
+ *     写通道，收益不足以抵它带来的规则面（写类动作清单、写白名单、两处工具描述都要维护它）。
+ *     ⚠️ 传 `action:'append'` 现在得到 `PARAMETER_INVALID_VALUE` 并列出合法动作 —— **响亮失败**，
+ *     不是静默忽略。
  * 保留 dsp 增强：win32 reveal 用 spawn+unref（explorer GUI 进程退出码不可靠，fire-and-forget）。
  */
 import type { JsonValue } from '../../kernel/json.js';
-type CcFsAction = 'root' | 'resolve' | 'exists' | 'list' | 'tree' | 'relative' | 'mkdir' | 'rm' | 'mv' | 'cp' | 'touch' | 'append' | 'reveal' | 'info' | 'find';
+type CcFsAction = 'root' | 'resolve' | 'exists' | 'list' | 'tree' | 'relative' | 'mkdir' | 'rm' | 'mv' | 'cp' | 'touch' | 'reveal' | 'info' | 'find';
 export declare const CC_FS_ACTIONS: readonly CcFsAction[];
 export interface CcFsArgs {
     action: CcFsAction;

package/lib/trajectory/session.d.ts

@@ -100,7 +100,7 @@ interface TrajectoryAgentRef {
  * @param profile 该 轨迹约束的约束面（来自 `trajectory-constraint.json`）
  * @param sessionId 指定会话 id（可选；微信桥等外部面用固定 id 实现"轨迹 ↔ 会话"长期映射）
  */
-export declare function createTrajectoryAgent(ctx: Context, root: string, profile: TrajectoryConstraint, defaultModel?: string, sessionId?: string): Promise<TrajectoryAgentRef>;
+export declare function createTrajectoryAgent(ctx: Context, root: string, profile: TrajectoryConstraint, sessionId?: string): Promise<TrajectoryAgentRef>;
 interface TrajectoryAskResult {
     answer: string;
     sessionId: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shgroup/dsh-serenity-hooks",
-  "version": "1.100.0",
+  "version": "1.102.0",
   "description": "宁静号 ACC harness（Native Cordis 插件）——给 DeepSeek Harness 装一个「AI 工作区」：14 个工具（container_fs/cognitive_trajectory/dashboard/container_git/msm/praxis/ontology/serenity-skill-creator/cheap-worker/localstore/container_admin；另三个 im-bridge/acc-diag/diagram 按配置条件出现）+ 机械约束（安全模式/工作区围墙/密钥守卫/对外输出守卫）+ 认知轨迹日志与原地重建 + 网页登录入口/IM 桥/认知轨迹唤醒注册表。轨迹声明 = 轨迹目录下的 trajectory.json（约束面 + 旧标识 uid + CRO 机器绑定 cro.host；旧名 trajectory-constraint.json / skiff.json 仍在读取族里）；轨迹提示词 = 轨迹目录下的 PROMPT.md（一条轨迹「是谁、按什么章程工作」，所有轨迹通用，追加在容器层与质量层之后，不替换它们）。适配 DSH 0.1.7-rc.1 / 0.2.0-rc.1 / 0.2.1-rc.1（三档）。",
   "license": "MIT",
   "repository": {