@shgroup/dsh-serenity-hooks 1.19.8 → 1.20.0

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-serenity-hooks",
-  "version": "1.19.8",
+  "version": "1.20.0",
   "main": "lib/index.js",
   "description": "宁静号 ACC harness（Native Cordis 插件）：真实 DSH 工具 cc_fs/session/acc_msm/eap/neat/cce/loop + 拦截缝机械约束（safe-mode/路径守卫）。适配 DSH 公开版（0.1.0-rc，deepseek-ai/deepseek-harness）。私有（dsh-external 组织）。",
   "engines": {

package/lib/client.js

@@ -8,11 +8,11 @@ window.__ModuleLoader__.load({
 		let react = require("react");
 		let react_jsx_runtime = require("react/jsx-runtime");
 		//#region \0sp-css:/home/yh/home/home-serenity/AI_LAB/dsh-serenity-plugin/hooks/dsh-serenity-hooks/src/client/SafeModePanel
-		const css = "/* SafeModePanel — 会话头部 Serenity 状态徽章（点击展开详情卡）。\n * 遵循 web-styling.md：颜色只用 --dsw-alias-* 语义 token（明暗自适应）；\n * 尺寸与官方 header 标签一致；前缀 sp- 防冲突。 */\n\n.sp-root {\n  position: relative;\n  display: inline-flex;\n  align-items: center;\n  gap: 6px;\n  height: 24px;\n  padding: 0 4px 0 4px;\n  border-radius: 6px;\n  background: var(--dsw-alias-bg-module-platform);\n  font-size: 12px;\n  line-height: 24px;\n  white-space: nowrap;\n}\n\n.sp-badge {\n  display: inline-flex;\n  align-items: center;\n  gap: 6px;\n  height: 22px;\n  padding: 0 6px;\n  border: none;\n  border-radius: 5px;\n  background: transparent;\n  color: inherit;\n  font-size: 12px;\n  cursor: pointer;\n  transition: background var(--ds-transition-duration-fast, 0.1s) var(--ds-ease-in-out, ease);\n}\n\n.sp-badge:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.sp-badge:focus-visible {\n  outline: 2px solid var(--dsw-alias-button-ghost-active-border);\n  outline-offset: 1px;\n}\n\n.sp-dot {\n  flex: none;\n  width: 7px;\n  height: 7px;\n  border-radius: 50%;\n}\n\n.sp-dotOn {\n  background: var(--dsw-alias-state-success-primary);\n}\n\n.sp-dotOff {\n  background: var(--dsw-alias-label-dimmed);\n}\n\n.sp-brand {\n  color: var(--dsw-alias-label-primary);\n  font-weight: 500;\n}\n\n.sp-toggle {\n  display: inline-flex;\n  align-items: center;\n  gap: 4px;\n  height: 18px;\n  padding: 0 8px;\n  border: none;\n  border-radius: 5px;\n  font-size: 12px;\n  font-weight: 600;\n  line-height: 18px;\n  cursor: pointer;\n  transition: background var(--ds-transition-duration-fast, 0.1s) var(--ds-ease-in-out, ease);\n}\n\n.sp-toggle:focus-visible {\n  outline: 2px solid var(--dsw-alias-button-ghost-active-border);\n  outline-offset: 1px;\n}\n\n.sp-toggle:disabled {\n  opacity: 0.55;\n  cursor: default;\n}\n\n.sp-toggleOn {\n  background: var(--dsw-alias-state-error-primary);\n  color: var(--dsw-alias-label-primary-foreground);\n}\n\n.sp-toggleOn:hover:not(:disabled) {\n  background: var(--dsw-alias-state-error-secondary);\n}\n\n.sp-toggleOff {\n  background: var(--dsw-alias-interactive-bg-hover);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.sp-toggleOff:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover-solid);\n}\n\n.sp-toggleIcon {\n  flex: none;\n}\n\n.sp-toggleLg {\n  height: 26px;\n  padding: 0 14px;\n  font-size: 13px;\n  line-height: 26px;\n  border-radius: 6px;\n}\n\n/* 详情卡：相对徽章绝对定位（右对齐），卡片 token */\n.sp-pop {\n  position: absolute;\n  top: calc(100% + 8px);\n  right: 0;\n  z-index: 20;\n  width: 300px;\n  box-sizing: border-box;\n  padding: 12px 14px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 12px;\n  background: var(--dsw-specific-tip);\n  box-shadow: 0 8px 24px rgba(0, 0, 0, 0.12);\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n}\n\n.sp-popRow {\n  display: flex;\n  align-items: baseline;\n  gap: 10px;\n  min-width: 0;\n}\n\n.sp-popLabel {\n  flex: none;\n  width: 34px;\n  font-size: 12px;\n  color: var(--dsw-alias-label-caption);\n}\n\n.sp-popValue {\n  flex: 1;\n  min-width: 0;\n  overflow: hidden;\n  text-overflow: ellipsis;\n  font-size: 12px;\n  color: var(--dsw-alias-label-secondary);\n  font-family: var(--ds-font-family-code, monospace);\n}\n\n.sp-popActions {\n  display: flex;\n  justify-content: flex-end;\n  padding-top: 4px;\n  border-top: 1px solid var(--dsw-alias-border-l1);\n  margin-top: 2px;\n}\n\n/* loop 运行状态区块（WebUI 等待界面；并行任务各自一行） */\n.sp-popSection {\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n  padding-top: 6px;\n  border-top: 1px solid var(--dsw-alias-border-l1);\n  margin-top: 2px;\n}\n\n.sp-loopItem {\n  display: flex;\n  flex-direction: column;\n  gap: 2px;\n  padding: 2px 0 2px 44px;\n  min-width: 0;\n}\n\n.sp-loopHead {\n  display: flex;\n  align-items: baseline;\n  gap: 8px;\n  min-width: 0;\n}\n\n.sp-loopLabel {\n  flex: 1;\n  min-width: 0;\n  overflow: hidden;\n  text-overflow: ellipsis;\n  white-space: nowrap;\n  font-size: 12px;\n  font-weight: 600;\n  color: var(--dsw-alias-label-primary);\n}\n\n.sp-loopRound {\n  flex: none;\n  font-size: 11px;\n  color: var(--dsw-alias-state-info-primary);\n  font-family: var(--ds-font-family-code, monospace);\n}\n\n.sp-loopTime {\n  flex: none;\n  font-size: 11px;\n  color: var(--dsw-alias-label-caption);\n}\n\n.sp-loopResp {\n  overflow: hidden;\n  text-overflow: ellipsis;\n  white-space: nowrap;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n  font-family: var(--ds-font-family-code, monospace);\n}\n\n@media (prefers-reduced-motion: reduce) {\n  .sp-toggle,\n  .sp-badge {\n    transition: none;\n  }\n}\n";
+		const css$1 = "/* SafeModePanel — 会话头部 Serenity 状态徽章（点击展开详情卡）。\n * 遵循 web-styling.md：颜色只用 --dsw-alias-* 语义 token（明暗自适应）；\n * 尺寸与官方 header 标签一致；前缀 sp- 防冲突。 */\n\n.sp-root {\n  position: relative;\n  display: inline-flex;\n  align-items: center;\n  gap: 6px;\n  height: 24px;\n  padding: 0 4px 0 4px;\n  border-radius: 6px;\n  background: var(--dsw-alias-bg-module-platform);\n  font-size: 12px;\n  line-height: 24px;\n  white-space: nowrap;\n}\n\n.sp-badge {\n  display: inline-flex;\n  align-items: center;\n  gap: 6px;\n  height: 22px;\n  padding: 0 6px;\n  border: none;\n  border-radius: 5px;\n  background: transparent;\n  color: inherit;\n  font-size: 12px;\n  cursor: pointer;\n  transition: background var(--ds-transition-duration-fast, 0.1s) var(--ds-ease-in-out, ease);\n}\n\n.sp-badge:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.sp-badge:focus-visible {\n  outline: 2px solid var(--dsw-alias-button-ghost-active-border);\n  outline-offset: 1px;\n}\n\n.sp-dot {\n  flex: none;\n  width: 7px;\n  height: 7px;\n  border-radius: 50%;\n}\n\n.sp-dotOn {\n  background: var(--dsw-alias-state-success-primary);\n}\n\n.sp-dotOff {\n  background: var(--dsw-alias-label-dimmed);\n}\n\n.sp-brand {\n  color: var(--dsw-alias-label-primary);\n  font-weight: 500;\n}\n\n.sp-toggle {\n  display: inline-flex;\n  align-items: center;\n  gap: 4px;\n  height: 18px;\n  padding: 0 8px;\n  border: none;\n  border-radius: 5px;\n  font-size: 12px;\n  font-weight: 600;\n  line-height: 18px;\n  cursor: pointer;\n  transition: background var(--ds-transition-duration-fast, 0.1s) var(--ds-ease-in-out, ease);\n}\n\n.sp-toggle:focus-visible {\n  outline: 2px solid var(--dsw-alias-button-ghost-active-border);\n  outline-offset: 1px;\n}\n\n.sp-toggle:disabled {\n  opacity: 0.55;\n  cursor: default;\n}\n\n.sp-toggleOn {\n  background: var(--dsw-alias-state-error-primary);\n  color: var(--dsw-alias-label-primary-foreground);\n}\n\n.sp-toggleOn:hover:not(:disabled) {\n  background: var(--dsw-alias-state-error-secondary);\n}\n\n.sp-toggleOff {\n  background: var(--dsw-alias-interactive-bg-hover);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.sp-toggleOff:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover-solid);\n}\n\n.sp-toggleIcon {\n  flex: none;\n}\n\n.sp-toggleLg {\n  height: 26px;\n  padding: 0 14px;\n  font-size: 13px;\n  line-height: 26px;\n  border-radius: 6px;\n}\n\n/* 详情卡：相对徽章绝对定位（右对齐），卡片 token */\n.sp-pop {\n  position: absolute;\n  top: calc(100% + 8px);\n  right: 0;\n  z-index: 20;\n  width: 300px;\n  box-sizing: border-box;\n  padding: 12px 14px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 12px;\n  background: var(--dsw-specific-tip);\n  box-shadow: 0 8px 24px rgba(0, 0, 0, 0.12);\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n}\n\n.sp-popRow {\n  display: flex;\n  align-items: baseline;\n  gap: 10px;\n  min-width: 0;\n}\n\n.sp-popLabel {\n  flex: none;\n  width: 34px;\n  font-size: 12px;\n  color: var(--dsw-alias-label-caption);\n}\n\n.sp-popValue {\n  flex: 1;\n  min-width: 0;\n  overflow: hidden;\n  text-overflow: ellipsis;\n  font-size: 12px;\n  color: var(--dsw-alias-label-secondary);\n  font-family: var(--ds-font-family-code, monospace);\n}\n\n.sp-popActions {\n  display: flex;\n  justify-content: flex-end;\n  padding-top: 4px;\n  border-top: 1px solid var(--dsw-alias-border-l1);\n  margin-top: 2px;\n}\n\n/* loop 运行状态区块（WebUI 等待界面；并行任务各自一行） */\n.sp-popSection {\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n  padding-top: 6px;\n  border-top: 1px solid var(--dsw-alias-border-l1);\n  margin-top: 2px;\n}\n\n.sp-loopItem {\n  display: flex;\n  flex-direction: column;\n  gap: 2px;\n  padding: 2px 0 2px 44px;\n  min-width: 0;\n}\n\n.sp-loopHead {\n  display: flex;\n  align-items: baseline;\n  gap: 8px;\n  min-width: 0;\n}\n\n.sp-loopLabel {\n  flex: 1;\n  min-width: 0;\n  overflow: hidden;\n  text-overflow: ellipsis;\n  white-space: nowrap;\n  font-size: 12px;\n  font-weight: 600;\n  color: var(--dsw-alias-label-primary);\n}\n\n.sp-loopRound {\n  flex: none;\n  font-size: 11px;\n  color: var(--dsw-alias-state-info-primary);\n  font-family: var(--ds-font-family-code, monospace);\n}\n\n.sp-loopTime {\n  flex: none;\n  font-size: 11px;\n  color: var(--dsw-alias-label-caption);\n}\n\n.sp-loopResp {\n  overflow: hidden;\n  text-overflow: ellipsis;\n  white-space: nowrap;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n  font-family: var(--ds-font-family-code, monospace);\n}\n\n@media (prefers-reduced-motion: reduce) {\n  .sp-toggle,\n  .sp-badge {\n    transition: none;\n  }\n}\n";
 		if (typeof document !== "undefined" && document.querySelector("style[data-sp-css]") === null) {
 			const tag = document.createElement("style");
 			tag.setAttribute("data-sp-css", "1");
-			tag.textContent = css;
+			tag.textContent = css$1;
 			document.head.appendChild(tag);
 		}
 		//#endregion
@@ -240,15 +240,159 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region \0sp-css:/home/yh/home/home-serenity/AI_LAB/dsh-serenity-plugin/hooks/dsh-serenity-hooks/src/client/ImageFallbackDock
+		const css = "/* ImageFallbackDock — 图片自动落盘兜底状态条（S142） */\n\n.serenity-image-fallback {\n  display: inline-flex;\n  align-items: center;\n  gap: 8px;\n  font-size: 12px;\n  line-height: 1.5;\n  padding: 2px 8px;\n  border-radius: 6px;\n  background: var(--dsw-alias-surface-muted, rgba(127, 127, 127, 0.1));\n  color: var(--dsw-alias-text-secondary, currentColor);\n}\n\n.serenity-image-fallback[data-state='busy'] {\n  color: var(--dsw-alias-text-secondary, currentColor);\n}\n\n.serenity-image-fallback[data-state='done'] {\n  color: var(--dsw-alias-text-success, currentColor);\n}\n\n.serenity-image-fallback[data-state='error'] {\n  color: var(--dsw-alias-text-danger, currentColor);\n}\n\n.serenity-image-fallback code {\n  font-family: var(--dsw-alias-font-mono, monospace);\n  font-size: 11px;\n  background: var(--dsw-alias-surface-muted, rgba(127, 127, 127, 0.12));\n  border-radius: 4px;\n  padding: 0 4px;\n}\n";
+		if (typeof document !== "undefined" && document.querySelector("style[data-sp-css]") === null) {
+			const tag = document.createElement("style");
+			tag.setAttribute("data-sp-css", "1");
+			tag.textContent = css;
+			document.head.appendChild(tag);
+		}
+		//#endregion
+		//#region src/client/ImageFallbackDock.tsx
+		/** input.dock 条目：图片发送失败自动落盘 + 文本重发 */
+		function ImageFallbackDock(props) {
+			const zone = props;
+			const session = zone.session;
+			const input = zone.input;
+			const sessionId = props.sessionId;
+			const { uploadImage, getDraftFiles, resendText } = props;
+			const [state, setState] = (0, react.useState)("idle");
+			const [paths, setPaths] = (0, react.useState)([]);
+			const handlingRef = (0, react.useRef)(false);
+			const promptError = session?.promptError?.error;
+			const imageIds = input?.imageIds ?? [];
+			(0, react.useEffect)(() => {
+				if (promptError?.code !== "attachment-error") return;
+				if (promptError.details?.reason !== "MODEL_DOES_NOT_SUPPORT_IMAGES") return;
+				if (handlingRef.current || imageIds.length === 0) return;
+				handlingRef.current = true;
+				setState("uploading");
+				(async () => {
+					try {
+						const files = await getDraftFiles(String(sessionId), imageIds);
+						if (files.length === 0) throw new Error("no draft image files");
+						const saved = [];
+						for (const file of files) saved.push(await uploadImage(file));
+						const note = saved.map((p) => `用户提供了图片在 ${p}`).join("\n");
+						const draft = input?.draft ?? "";
+						const text = draft === "" ? note : `${draft}\n${note}`;
+						await resendText(String(sessionId), text);
+						setPaths(saved);
+						setState("done");
+					} catch (err) {
+						console.warn(`[serenity] image fallback failed: ${String(err?.message ?? err)}`);
+						setState("error");
+					} finally {
+						handlingRef.current = false;
+					}
+				})();
+			}, [
+				promptError,
+				imageIds,
+				sessionId,
+				uploadImage,
+				getDraftFiles,
+				resendText,
+				input?.draft
+			]);
+			if (state === "idle") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+				className: "serenity-image-fallback",
+				"data-state": "idle"
+			});
+			if (state === "uploading") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+				className: "serenity-image-fallback",
+				"data-state": "busy",
+				children: "图片已保存中…"
+			});
+			if (state === "done") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+				className: "serenity-image-fallback",
+				"data-state": "done",
+				children: paths.map((p) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", { children: p }, p))
+			});
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+				className: "serenity-image-fallback",
+				"data-state": "error",
+				children: "图片保存失败，请重试"
+			});
+		}
+		//#endregion
+		//#region src/client/image-fallback-api.ts
+		/** 图片落盘接口路径（node half api.ts，client 专属 x-serenity-ui 头） */
+		const UPLOAD_PATH = "/serenity/image-upload";
+		/** 浏览器 File → base64（与 ui-conversation serializeImages 等价的最小实现） */
+		function fileToBase64(file) {
+			return file.arrayBuffer().then((buffer) => {
+				const bytes = new Uint8Array(buffer);
+				let binary = "";
+				const chunk = 32768;
+				for (let offset = 0; offset < bytes.length; offset += chunk) binary += String.fromCharCode(...bytes.subarray(offset, offset + chunk));
+				return btoa(binary);
+			});
+		}
+		/** 上传一张图片到 CCC _tmp/images_from_user/，返回相对路径（如 _tmp/images_from_user/xxx.png） */
+		async function uploadImage(file) {
+			const data = await fileToBase64(file);
+			const res = await fetch(UPLOAD_PATH, {
+				method: "POST",
+				headers: {
+					"content-type": "application/json",
+					"x-serenity-ui": "1"
+				},
+				body: JSON.stringify({
+					mediaType: file.type,
+					name: file.name,
+					data
+				})
+			});
+			const body = await res.json();
+			if (!res.ok || typeof body.path !== "string") throw new Error(`serenity image upload failed: ${body.error ?? res.status}`);
+			return body.path;
+		}
+		/** 取 rail 图片的浏览器 File（conversation.draftImages，session-scoped；类型宽松访问——IConversation 类型面未含 draftImages） */
+		async function getDraftFiles(ctx, sessionId, ids) {
+			const draftImages = (ctx.sessions.scope(sessionId)?.conversation)?.draftImages;
+			if (draftImages === void 0) return [];
+			return (draftImages(ids) ?? []).map((a) => a.file);
+		}
+		/** 纯文本重发（绕过图片门禁——不含 image part，模型永不触发 MODEL_DOES_NOT_SUPPORT_IMAGES） */
+		async function resendText(ctx, sessionId, text) {
+			const prompt = ctx.sessions.binding(sessionId)?.session?.prompt;
+			if (prompt === void 0) throw new Error("serenity image fallback: session unavailable");
+			const result = await prompt([{
+				type: "text",
+				text
+			}], "queue");
+			if (!result.ok) throw new Error(`serenity image fallback resend failed: ${result.error?.code}: ${result.error?.message}`);
+		}
+		//#endregion
 		//#region src/client/index.ts
-		const inject = ["slots", "conversation"];
+		const inject = [
+			"slots",
+			"conversation",
+			"sessions"
+		];
 		function apply(ctx) {
-			ctx.inject(["slots", "conversation"], (scope) => {
+			ctx.inject([
+				"slots",
+				"conversation",
+				"sessions"
+			], (scope) => {
 				scope.effect(() => scope.slots.register({
 					name: "conversation.session.header.actions",
 					id: "serenity-safe",
 					order: 10
 				}, SafeModePanel), "serenity: header status badge");
+				scope.effect(() => scope.slots.register({
+					name: "conversation.input.dock",
+					id: "serenity-image-fallback",
+					order: 100,
+					inject: () => ({
+						uploadImage: (file) => uploadImage(file),
+						getDraftFiles: (sessionId, ids) => getDraftFiles(scope, sessionId, ids),
+						resendText: (sessionId, text) => resendText(scope, sessionId, text)
+					})
+				}, ImageFallbackDock), "serenity: image fallback dock");
 			});
 		}
 		//#endregion

package/lib/index.js

@@ -4106,6 +4106,13 @@ function principlesBlock(root) {
 		"fault to be hidden. Never disguise or excuse what you do not know;",
 		"not-knowing is a state to be repaired, and reporting it is the first repair.",
 		"",
+		"MSM principles — machinery before improvisation:",
+		"- Determinism first: use a registered Mech before hand-rolling; reserve",
+		"  Semi-Mech for genuine judgment points.",
+		"- Single source of truth: an MSM is the only decoder of its own usage",
+		"  (--help/--schema); documents must not duplicate it.",
+		"- Registered to act: no tool exists unless it is on the manifest.",
+		"",
 		"Operational boundaries:",
 		`Root: ${root}`,
 		"  • File access — read/edit/write/grep/glob are confined to Root; paths outside Root are rejected (RR5)",
@@ -4164,30 +4171,42 @@ function metaphorBlock() {
 		"   drawings rebuild the whole machine (R↓), the drawings are reusable",
 		"   (S↑). Verdict: an undimensioned part = unassemblable.",
 		"",
+		"4. The Machinery → MSM (Mech & Semi-Mech). The ship's equipment is",
+		"   machinery: registered, deterministic, self-describing. Turn the",
+		"   crank of a Mech and the action is exact; the wheel with a helmsman",
+		"   (Semi-Mech) steers where judgment is needed. Verdict: hand-rolling",
+		"   what a machine already does = wasting the crew.",
+		"",
+		"5. The Manifest → Single Source of Truth. Every tool exists only if it",
+		"   is on the manifest (mech-registry); there is exactly one manifest.",
+		"   An MSM self-describes (--help/--schema) — the manifest is the only",
+		"   key. Verdict: duplicating a tool's usage in documents = two",
+		"   contradictory charts.",
+		"",
 		"THE VOYAGE — the cognitive lifecycle",
 		"",
-		"4. Harbor Inspection → First Anchor. The first anchor = departure",
+		"6. Harbor Inspection → First Anchor. The first anchor = departure",
 		"   inspection: confirm identity (ACC manifesto), logbook (SESSION),",
 		"   ballast (constraints) before setting sail. Verdict: skipping the",
 		"   anchor and working directly = sailing uninspected.",
 		"",
-		"5. The Logbook → Session Tracking. SESSION.md is the only ship log.",
+		"7. The Logbook → Session Tracking. SESSION.md is the only ship log.",
 		"   Unrecorded = unvoyaged. Verdict: finishing multi-step work without",
 		"   a progress record = a missing page.",
 		"",
-		"6. The Ship of Theseus → Continuity. Planks may be replaced; the ship",
+		"8. The Ship of Theseus → Continuity. Planks may be replaced; the ship",
 		"   remains the same. The container can be rebuilt; identity persists.",
 		"   You are part of a trajectory, not a new ship. Verdict: acting",
 		"   without consulting precedent = a different ship.",
 		"",
 		"THE CREW — multi-agent collaboration",
 		"",
-		"7. Crew Rotation → Multi-Agent Cognition. Other crew members will come",
+		"9. Crew Rotation → Multi-Agent Cognition. Other crew members will come",
 		"   after you. When you leave, leave a handover they can pick up",
 		"   (SESSION closed, open problems listed). Verdict: leaving without",
 		"   handover = abandoning ship.",
 		"",
-		"8. Blueprint over Statue → Reconstruction > Preservation. Keep the",
+		"10. Blueprint over Statue → Reconstruction > Preservation. Keep the",
 		"   blueprint, not the statue. Recording only conclusions without",
 		"   rationale = a statue with no blueprint, unreconstructable.",
 		"   Verdict: a decision record without reasons or alternatives =",
@@ -4575,12 +4594,45 @@ function registerCompactRetention(ctx, opts = {}) {
 //#region src/api.ts
 const ROUTE_PATH = "/serenity/status";
 const LOOPS_PATH = "/serenity/loops";
-function readBody(req) {
+const UPLOAD_PATH = "/serenity/image-upload";
+/** 图片落盘目录（CCC 根相对；S142 图片自动识别基础设施——粘贴图片落盘供 agent 经 CCC vlm MSM 自主处理） */
+const IMAGE_UPLOAD_DIR = "_tmp/images_from_user";
+const IMAGE_MEDIA_TYPES = /* @__PURE__ */ new Set([
+	"image/png",
+	"image/jpeg",
+	"image/webp",
+	"image/gif"
+]);
+const EXT_BY_MEDIA = {
+	"image/png": "png",
+	"image/jpeg": "jpg",
+	"image/webp": "webp",
+	"image/gif": "gif"
+};
+const MAX_IMAGE_BYTES = 10485760;
+/**
+* 图片落盘核心逻辑（可测）：校验 mediaType 白名单 + base64 解码 + 大小上限 →
+* 写 CCC 根 _tmp/images_from_user/<ts>-<rand>.<ext>，返回相对路径。
+* 校验失败抛 Error（handler 转 400）。
+*/
+function saveImageToTmp(root, mediaType, data) {
+	if (!IMAGE_MEDIA_TYPES.has(mediaType)) throw new Error(`unsupported media type: ${mediaType}`);
+	if (typeof data !== "string" || data.length === 0) throw new Error("missing image data");
+	const bytes = Buffer.from(data, "base64");
+	if (bytes.length === 0 || bytes.length > MAX_IMAGE_BYTES) throw new Error(`image size out of range: ${bytes.length} bytes (max ${MAX_IMAGE_BYTES})`);
+	const dir = join(root, IMAGE_UPLOAD_DIR);
+	mkdirSync(dir, { recursive: true });
+	const ext = EXT_BY_MEDIA[mediaType] ?? "img";
+	const filename = `${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}-${Math.random().toString(36).slice(2, 8)}.${ext}`;
+	writeFileSync(join(dir, filename), bytes);
+	return `${IMAGE_UPLOAD_DIR}/${filename}`;
+}
+function readBody(req, maxBytes) {
 	return new Promise((resolve, reject) => {
 		let data = "";
 		req.on("data", (chunk) => {
 			data += chunk.toString("utf-8");
-			if (data.length > 65536) {
+			if (data.length > maxBytes) {
 				reject(/* @__PURE__ */ new Error("body too large"));
 				req.destroy();
 			}
@@ -4632,6 +4684,36 @@ function registerStatusApi(ctx, opts = {}) {
 			}
 		}
 	});
+	ctx.webServer.register({
+		kind: "exact",
+		path: UPLOAD_PATH,
+		handler: async (req, res) => {
+			try {
+				if (req.method !== "POST") {
+					sendJson(res, 405, { error: "method not allowed" });
+					return;
+				}
+				if (req.headers["x-serenity-ui"] !== "1") {
+					sendJson(res, 403, { error: "图片落盘仅限 WebUI（client 专用）" });
+					return;
+				}
+				const raw = await readBody(req, 20971520);
+				const body = JSON.parse(raw);
+				const workspace = resolveWorkspace(ctx, {
+					sessionId: body.sessionId,
+					workspace: body.workspace
+				});
+				const root = findSerenityRoot(workspace);
+				if (!root) {
+					sendJson(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+					return;
+				}
+				sendJson(res, 200, { path: saveImageToTmp(root, body.mediaType ?? "", body.data ?? "") });
+			} catch (err) {
+				sendJson(res, 400, { error: err.message ?? String(err) });
+			}
+		}
+	});
 	ctx.webServer.register({
 		kind: "exact",
 		path: ROUTE_PATH,
@@ -4658,7 +4740,7 @@ function registerStatusApi(ctx, opts = {}) {
 						sendJson(res, 403, { error: "safe-mode 切换仅限 WebUI（agent 不可自行开关）" });
 						return;
 					}
-					const raw = await readBody(req);
+					const raw = await readBody(req, 65536);
 					const body = JSON.parse(raw);
 					const workspace = resolveWorkspace(ctx, {
 						sessionId: body.sessionId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shgroup/dsh-serenity-hooks",
-  "version": "1.19.8",
+  "version": "1.20.0",
   "description": "宁静号 ACC harness — Native Cordis 插件（DeepSeek Harness 运行时）。真实 DSH 工具注册（cc_fs/session/acc_msm 等 9 工具）+ 拦截缝机械约束（safe-mode/路径守卫/会话落盘）+ 系统提示词注入（ACC/CCE/Constraints/SKILL/Session 五块）。适配 DSH 公开版（deepseek-ai/deepseek-harness 0.1.0-rc）。",
   "license": "MIT",
   "repository": {