@shgroup/dsh-serenity-hooks 1.26.10 → 1.26.12

package/lib/index.js

@@ -522,10 +522,10 @@ function runCcFs(root, args) {
 * 进程内注册（取代 v0.1 的 bash spawn runner）：zod/schemastery 参数校验、
 * 规范 JSON 输出、纯 render 投影。逻辑在 fs-ops.ts（可单测）。
 */
-function agentCwd$9(exec) {
+function agentCwd$10(exec) {
 	return exec.agent?.session?.header?.cwd ?? process.cwd();
 }
-function renderText$11(value) {
+function renderText$12(value) {
 	return [{
 		type: "text",
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
@@ -597,10 +597,10 @@ const ccFsTool = defineTool({
 	},
 	output: {
 		schema: { type: "json" },
-		render: (args, value) => renderText$11(value)
+		render: (args, value) => renderText$12(value)
 	},
 	async execute(args, exec) {
-		const root = findSerenityRoot(agentCwd$9(exec));
+		const root = findSerenityRoot(agentCwd$10(exec));
 		if (!root) throw new Error("No CCC found: no .serenity file from agent cwd");
 		return runCcFs(root, args);
 	}
@@ -1128,10 +1128,10 @@ async function runKit(root, args) {
 /**
 * kit.ts — acc_kit 真实 DSH 工具定义（defineTool）
 */
-function agentCwd$8(exec) {
+function agentCwd$9(exec) {
 	return exec.agent?.session?.header?.cwd ?? process.cwd();
 }
-function renderText$10(value) {
+function renderText$11(value) {
 	return [{
 		type: "text",
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
@@ -1154,10 +1154,10 @@ const kitTool = defineTool({
 	},
 	output: {
 		schema: { type: "json" },
-		render: (args, value) => renderText$10(value)
+		render: (args, value) => renderText$11(value)
 	},
 	async execute(args, exec) {
-		return await runKit(findSerenityRoot(agentCwd$8(exec)), args);
+		return await runKit(findSerenityRoot(agentCwd$9(exec)), args);
 	}
 });
 //#endregion
@@ -1617,10 +1617,10 @@ function runGit(root, args) {
 /**
 * git.ts — cc_git 真实 DSH 工具定义（defineTool）
 */
-function agentCwd$7(exec) {
+function agentCwd$8(exec) {
 	return exec.agent?.session?.header?.cwd ?? process.cwd();
 }
-function renderText$9(value) {
+function renderText$10(value) {
 	return [{
 		type: "text",
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
@@ -1659,10 +1659,10 @@ const gitTool = defineTool({
 	},
 	output: {
 		schema: { type: "json" },
-		render: (args, value) => renderText$9(value)
+		render: (args, value) => renderText$10(value)
 	},
 	async execute(args, exec) {
-		const root = findSerenityRoot(agentCwd$7(exec));
+		const root = findSerenityRoot(agentCwd$8(exec));
 		if (!root) throw new Error("No CCC found: no .serenity file from agent cwd");
 		return runGit(root, args);
 	}
@@ -2407,7 +2407,7 @@ function listActiveHandymen(root) {
 }
 //#endregion
 //#region src/skiff-core.ts
-const PLUGIN_SOURCE$4 = {
+const PLUGIN_SOURCE$5 = {
 	kind: "plugin",
 	plugin: "dsh-serenity-hooks"
 };
@@ -2577,7 +2577,7 @@ async function askSkiff(ctx, agent, question, eventsStart, options) {
 			type: "text",
 			text: question
 		}],
-		source: PLUGIN_SOURCE$4
+		source: PLUGIN_SOURCE$5
 	}));
 	await waitIdle$1(ctx, agent);
 	const answer = lastAssistantText$2(agent);
@@ -2622,13 +2622,13 @@ function skiffMsmGate(root, sessionId, action, name) {
 /**
 * msm.ts — acc_msm 真实 DSH 工具定义（defineTool）
 */
-function agentCwd$6(exec) {
+function agentCwd$7(exec) {
 	return exec.agent?.session?.header?.cwd ?? process.cwd();
 }
 function agentSessionId$1(exec) {
 	return exec.agent?.session?.id ?? "";
 }
-function renderText$8(value) {
+function renderText$9(value) {
 	return [{
 		type: "text",
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
@@ -2680,10 +2680,10 @@ const msmTool = defineTool({
 	},
 	output: {
 		schema: { type: "json" },
-		render: (args, value) => renderText$8(value)
+		render: (args, value) => renderText$9(value)
 	},
 	async execute(args, exec) {
-		const root = findSerenityRoot(agentCwd$6(exec));
+		const root = findSerenityRoot(agentCwd$7(exec));
 		if (!root) throw new Error("No CCC found: no .serenity file from agent cwd");
 		const gate = skiffMsmGate(root, agentSessionId$1(exec), args.action, args.name);
 		if (gate.reject) throw new Error(gate.reject);
@@ -2733,7 +2733,7 @@ CCC (home-serenity etc.) encodes cognitive content as skills/SESSIONs/design doc
 
 ## Reference
 https://github.com/tellmewhattodo/theory-eap`;
-function renderText$7(value) {
+function renderText$8(value) {
 	return [{
 		type: "text",
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
@@ -2753,7 +2753,7 @@ const eapTool = defineTool({
 	} },
 	output: {
 		schema: { type: "string" },
-		render: (_args, value) => renderText$7(value)
+		render: (_args, value) => renderText$8(value)
 	},
 	async execute(args) {
 		if (args.section === "variables") return EAP_CONTENT.split("## Pre-Output Self-Check Checklist")[0];
@@ -2794,7 +2794,7 @@ Requirements → Scope → Solution → Interface → Implementation
 2. Wait for confirmation or correction (small step)
 3. After confirmation, record the decision (into session SESSION.md or a design doc)
 4. Move to the next decision point`;
-function renderText$6(value) {
+function renderText$7(value) {
 	return [{
 		type: "text",
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
@@ -2810,7 +2810,7 @@ const neatTool = defineTool({
 	} },
 	output: {
 		schema: { type: "string" },
-		render: (_args, value) => renderText$6(value)
+		render: (_args, value) => renderText$7(value)
 	},
 	async execute(args) {
 		if (args.section === "rules") return NEAT_CONTENT.match(/## Four Iron Rules[\s\S]*?(?=## )/)?.[0] ?? NEAT_CONTENT;
@@ -2873,7 +2873,7 @@ CCE answers "how structured knowledge should keep evolving across time without l
 ## Relationship with Serenity
 Serenity's session system, session tracking, and entropy management mechanisms (SQC quality loop) are all engineering implementations of CCE;
 the behavioral constraints embedded in CCC system prompts come from CCE.`;
-function renderText$5(value) {
+function renderText$6(value) {
 	return [{
 		type: "text",
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
@@ -2894,7 +2894,7 @@ const cceTool = defineTool({
 	} },
 	output: {
 		schema: { type: "string" },
-		render: (_args, value) => renderText$5(value)
+		render: (_args, value) => renderText$6(value)
 	},
 	async execute(args) {
 		const section = args.section;
@@ -2965,10 +2965,10 @@ function handymanPresetInheritance(parentCtx) {
 * preset 继承 + 工具收窄：setup 钩子里对子 agent 执行 agentPresets.composeFrom（对齐
 * subagent 先例）+ tools.restrict deny handyman（worker 内部看不到 handyman 工具）。
 */
-function agentCwd$5(exec) {
+function agentCwd$6(exec) {
 	return (exec.agent?.session)?.header?.cwd ?? process.cwd();
 }
-function renderText$4(value) {
+function renderText$5(value) {
 	return [{
 		type: "text",
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
@@ -3185,11 +3185,11 @@ function createHandymanTool(ctx) {
 		},
 		output: {
 			schema: { type: "json" },
-			render: (_args, value) => renderText$4(value)
+			render: (_args, value) => renderText$5(value)
 		},
 		async execute(args, exec) {
 			if (args.guide) return { guide: HANDYMAN_GUIDE };
-			const root = findSerenityRoot(agentCwd$5(exec));
+			const root = findSerenityRoot(agentCwd$6(exec));
 			if (!root) throw new Error("No CCC found: no .serenity file from agent cwd");
 			const hc = readHandymanConfig(root, DEFAULT_SERENITY_CONFIG_PATHS);
 			if (hc === null) throw new Error("handyman requires a model whitelist: configure .opencode/serenity.json \"handyman.models\" (e.g. {\"handyman\": {\"models\": [\"minimax-cn-coding-plan/MiniMax-M3\"], \"defaultModel\": \"minimax-cn-coding-plan/MiniMax-M3\"}})");
@@ -5987,7 +5987,7 @@ function qaCheck(root, key) {
 * 同步把当前 dsh 会话重命名为该 SESSION 目录名**（sessionTitle.rename，user source
 * pin 住标题）。非创建时预命名。
 */
-function agentCwd$4(exec) {
+function agentCwd$5(exec) {
 	return exec.agent?.session?.header?.cwd ?? process.cwd();
 }
 /** 当前 dsh 会话 id（use/close 按会话隔离的 scope） */
@@ -6087,7 +6087,7 @@ function renameDshSessionForActive(ctx, exec, info) {
 		console.warn(`[serenity-hooks] dsh 会话重命名异常: ${String(err?.message ?? err)}`);
 	}
 }
-function renderText$3(value) {
+function renderText$4(value) {
 	return [{
 		type: "text",
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
@@ -6221,10 +6221,10 @@ function createSessionTool(ctx) {
 		},
 		output: {
 			schema: { type: "json" },
-			render: (args, value) => renderText$3(value)
+			render: (args, value) => renderText$4(value)
 		},
 		async execute(args, exec) {
-			const root = findSerenityRoot(agentCwd$4(exec));
+			const root = findSerenityRoot(agentCwd$5(exec));
 			if (!root) throw new Error("No CCC found: no .serenity file from agent cwd");
 			const entries = loadMsmEntries(root);
 			const hasSessionTool = entries.some((e) => e.name === "session-tool");
@@ -6584,7 +6584,7 @@ function registerBootstrap(ctx) {
 }
 //#endregion
 //#region src/rebuild.ts
-const PLUGIN_SOURCE$3 = {
+const PLUGIN_SOURCE$4 = {
 	kind: "plugin",
 	plugin: "dsh-serenity-hooks"
 };
@@ -6770,7 +6770,7 @@ function registerRebuildTurnHook(ctx) {
 						type: "text",
 						text: "[TRAJECTORY-REBUILD] The conversation has been cleared and rebuilt. Follow the anchor instructions above now: read the persistent trajectory (SESSION.md) and continue the work automatically from the last checkpoint."
 					}],
-					source: PLUGIN_SOURCE$3
+					source: PLUGIN_SOURCE$4
 				}));
 				console.log(`[serenity-hooks] session_rebuild executed with auto-continue (turn ${payload.turn ?? "?"} ended): ${id}`);
 			}
@@ -6796,13 +6796,13 @@ function registerRebuildTurnHook(ctx) {
 * （turn 结束前所有 tool/result 已 append → 无孤儿；S141 INVALID_REQUEST 根治）。
 * 服务端逻辑在 ../rebuild.ts（queueRebuild/performRebuild/registerRebuildTurnHook）。
 */
-function agentCwd$3(exec) {
+function agentCwd$4(exec) {
 	return exec.agent?.session?.header?.cwd ?? process.cwd();
 }
 function agentSessionId(exec) {
 	return exec.agent?.session?.id ?? "";
 }
-function renderText$2(value) {
+function renderText$3(value) {
 	return [{
 		type: "text",
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
@@ -6819,17 +6819,17 @@ function createRebuildTool(ctx) {
 		} },
 		output: {
 			schema: { type: "json" },
-			render: (args, value) => renderText$2(value)
+			render: (args, value) => renderText$3(value)
 		},
 		async execute(args, exec) {
-			const root = findSerenityRoot(agentCwd$3(exec));
+			const root = findSerenityRoot(agentCwd$4(exec));
 			if (!root) throw new Error("No CCC found: no .serenity file from agent cwd");
 			const dshSessionId = agentSessionId(exec);
 			if (!dshSessionId) throw new Error("Unable to determine the current dsh session id");
 			const result = await queueRebuild(ctx, {
 				root,
 				note: args.note,
-				agentCwd: agentCwd$3(exec),
+				agentCwd: agentCwd$4(exec),
 				dshSessionId
 			});
 			return {
@@ -6859,10 +6859,10 @@ const ACTIONS = [
 	"show",
 	"doc"
 ];
-function agentCwd$2(exec) {
+function agentCwd$3(exec) {
 	return exec.agent?.session?.header?.cwd ?? process.cwd();
 }
-function renderText$1(value) {
+function renderText$2(value) {
 	return [{
 		type: "text",
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
@@ -6894,10 +6894,10 @@ const localstoreTool = defineTool({
 	},
 	output: {
 		schema: { type: "json" },
-		render: (args, value) => renderText$1(value)
+		render: (args, value) => renderText$2(value)
 	},
 	async execute(args, exec) {
-		const root = findSerenityRoot(agentCwd$2(exec));
+		const root = findSerenityRoot(agentCwd$3(exec));
 		if (!root) throw new Error("No CCC found: no .serenity file from agent cwd");
 		return runLocalStore(root, args);
 	}
@@ -6912,10 +6912,10 @@ const localstoreTool = defineTool({
 *
 * 归属：ACC 机制工具（教会 + 校验），角色内容仍归 CCC 配置（.opencode/serenity.json skiff.roles）。
 */
-function agentCwd$1(exec) {
+function agentCwd$2(exec) {
 	return exec.agent?.session?.header?.cwd ?? process.cwd();
 }
-function renderText(value) {
+function renderText$1(value) {
 	return [{
 		type: "text",
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
@@ -7070,10 +7070,10 @@ const skiffAdminTool = defineTool({
 	} },
 	output: {
 		schema: { type: "json" },
-		render: (args, value) => renderText(value)
+		render: (args, value) => renderText$1(value)
 	},
 	async execute(args, exec) {
-		const root = findSerenityRoot(agentCwd$1(exec));
+		const root = findSerenityRoot(agentCwd$2(exec));
 		if (!root) throw new Error("No CCC found: no .serenity file from agent cwd");
 		switch (args.action) {
 			case "guide": return { guide: SKIFF_GUIDE };
@@ -7085,6 +7085,82 @@ const skiffAdminTool = defineTool({
 	}
 });
 //#endregion
+//#region src/tools/autotrajectory-exp.ts
+/**
+* autotrajectory-exp.ts — 自主轨迹实验一站式管理工具（v1.26.12 实验提案，默认关）
+*
+* 定位：dsp **只提供工具与知识**，不向 CCC 自动安装任何东西（实验可能失败，不污染 CCC）——
+* 实验是 CCC 的自选动作：agent 调本工具（doc/全报告）即懂实验，init/random/check 辅助，
+* 实际执行（写配置/写偏见脚本/标记会话）由 CCC 自己决定、自己用现有工具完成。
+*
+* 实现：薄封装——exec 包内静态脚本（npm files 含 experiments/），脚本是单一真相源。
+* 环境注入 SERENITY_ROOT（当前 CCC 根）供脚本定位；bun 优先（可直跑 TS）。
+*/
+/** 包内实验脚本（lib/tools/ → ../../experiments/...；npm files 分发） */
+const EXP_SCRIPT = resolve(dirname(fileURLToPath(import.meta.url)), "..", "..", "experiments", "autotrajectory", "scripts", "autotrajectory-exp.ts");
+const AUTO_TRAJECTORY_EXP_ACTIONS = [
+	"all",
+	"init",
+	"random",
+	"doc",
+	"check",
+	"status",
+	"guide"
+];
+function agentCwd$1(exec) {
+	return exec.agent?.session?.header?.cwd ?? process.cwd();
+}
+function renderText(value) {
+	return [{
+		type: "text",
+		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
+	}];
+}
+const autoTrajectoryExpTool = defineTool({
+	name: "autotrajectory-exp",
+	description: "自主轨迹实验（Self-Sustaining Trajectory）一站式管理——实验提案 v1.26.12，默认关。无参/action=all：全报告（背景摘要 + 就绪检查 + 状态 + 下一步）——CCC agent 看一次即完整理解实验并知道怎么开始；init：初始化辅助（写配置 + 生成偏见提供者脚本模板）；random：运行偏见提供者脚本输出当前偏见内容；doc：实验定义全文；check/status/guide：单项。实验是 CCC 的自选动作——dsp 只提供工具与知识，不自动安装任何东西。",
+	parameters: { action: {
+		type: "string",
+		enum: [...AUTO_TRAJECTORY_EXP_ACTIONS],
+		required: true,
+		description: "Subcommand"
+	} },
+	output: {
+		schema: { type: "json" },
+		render: (_args, value) => renderText(value)
+	},
+	async execute(args, exec) {
+		const root = findSerenityRoot(agentCwd$1(exec));
+		const result = {};
+		if (!existsSync(EXP_SCRIPT)) {
+			result.error = `autotrajectory-exp 脚本缺失（${EXP_SCRIPT}）——实验包未随安装分发，请检查 npm 包完整性`;
+			return result;
+		}
+		const env = { ...process.env };
+		if (root) env.SERENITY_ROOT = root;
+		const r = spawnSync("bun", [EXP_SCRIPT, args.action ?? "all"], {
+			encoding: "utf-8",
+			timeout: 6e5,
+			env,
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+		if (r.status === 0) {
+			result.output = r.stdout?.trim() || "(empty)";
+			return result;
+		}
+		if (r.error?.code === "ENOENT") {
+			result.error = "autotrajectory-exp 需要 bun 运行时（bun not found in PATH）";
+			return result;
+		}
+		result.error = r.stderr?.trim() || r.stdout?.trim() || `exit ${r.status ?? "?"}`;
+		return result;
+	}
+});
+//#endregion
 //#region src/seams/keeper.ts
 const SCORES = {
 	write: 3,
@@ -7167,7 +7243,7 @@ function readContextPressure(ctx, session) {
 		return null;
 	}
 }
-const PLUGIN_SOURCE$2 = {
+const PLUGIN_SOURCE$3 = {
 	kind: "plugin",
 	plugin: "dsh-serenity-hooks"
 };
@@ -7230,7 +7306,7 @@ function registerKeeper(ctx, opts = {}) {
 		if (blocks.length === 0) return downstream;
 		const reminderAll = createUserMessage({
 			content: blocks,
-			source: PLUGIN_SOURCE$2
+			source: PLUGIN_SOURCE$3
 		});
 		if (downstream.kind === "block") return {
 			kind: "block",
@@ -8241,7 +8317,7 @@ function accIdentityText(root, configPaths = DEFAULT_SERENITY_CONFIG_PATHS, entr
 	}
 	return lines.join("\n");
 }
-const PLUGIN_SOURCE$1 = {
+const PLUGIN_SOURCE$2 = {
 	kind: "plugin",
 	plugin: "dsh-serenity-hooks"
 };
@@ -8258,7 +8334,7 @@ function accMessage(root, configPaths, entrySkillMaxChars) {
 	}];
 	return createUserMessage({
 		content,
-		source: PLUGIN_SOURCE$1
+		source: PLUGIN_SOURCE$2
 	});
 }
 /** 每 agent 是否已注入过（进程内存态） */
@@ -9705,53 +9781,89 @@ const MECHANISM_PORTS = [
 function buildSensitiveTable(root) {
 	const exact = /* @__PURE__ */ new Set();
 	const substring = [];
+	const credentialWords = [];
+	const mechanismWords = [...MECHANISM_WORDS];
+	const portWords = [...MECHANISM_PORTS];
+	const msmWords = [];
 	try {
 		const p = join(root, "localstore.json");
 		if (existsSync(p)) {
 			const creds = JSON.parse(readFileSync(p, "utf-8").replace(/^\uFEFF/, ""))?.credentials;
 			if (creds && typeof creds === "object") for (const [name, value] of Object.entries(creds)) {
-				if (name) exact.add(name);
-				if (typeof value === "string" && value !== "") exact.add(value);
+				if (name) {
+					exact.add(name);
+					credentialWords.push(name);
+				}
+				if (typeof value === "string" && value !== "") {
+					exact.add(value);
+					credentialWords.push(value);
+				}
 			}
 		}
 	} catch {}
-	for (const w of MECHANISM_WORDS) substring.push(w);
-	for (const p of MECHANISM_PORTS) substring.push(p);
+	for (const w of mechanismWords) substring.push(w);
+	for (const p of portWords) substring.push(p);
 	try {
-		for (const entry of loadMsmEntries(root)) if (entry.name) exact.add(entry.name);
+		for (const entry of loadMsmEntries(root)) if (entry.name) {
+			exact.add(entry.name);
+			msmWords.push(entry.name);
+		}
 	} catch {}
 	return {
 		exact,
 		substring,
+		credentialWords,
+		mechanismWords,
+		portWords,
+		msmWords,
 		sources: {
 			exact: [...exact],
 			substring
 		}
 	};
 }
-/** 检测文本中命中的敏感词（返回命中列表；未命中返回空数组） */
+/**
+* 检测文本中命中的敏感词（v1.26.11：返回带分类的命中——credential/mechanism/port/msm，
+* 打回消息据此给语义化规避指引；未命中返回空数组）
+*/
 function detectSensitive(text, table) {
 	if (!text) return [];
-	const hits = /* @__PURE__ */ new Set();
-	for (const w of table.exact) if (w !== "" && text.includes(w)) hits.add(w);
-	for (const w of table.substring) if (w !== "" && text.includes(w)) hits.add(w);
-	return [...hits];
+	const hits = /* @__PURE__ */ new Map();
+	const hit = (w, cat) => {
+		if (w !== "" && text.includes(w) && !hits.has(w)) hits.set(w, cat);
+	};
+	for (const w of table.credentialWords) hit(w, "credential");
+	for (const w of table.msmWords) hit(w, "msm");
+	for (const w of table.mechanismWords) hit(w, "mechanism");
+	for (const w of table.portWords) hit(w, "port");
+	return [...hits].map(([word, category]) => ({
+		word,
+		category
+	}));
 }
+/** 分类 → 规避指引（v1.26.11：告诉模型这个词**是什么**、**怎么规避**——裸词无法行动） */
+const CATEGORY_GUIDE = {
+	credential: "credential identifier (a name, key, token, or password) — never mention credential names or values",
+	mechanism: "internal mechanism term — never mention internal implementation/machinery names or config paths",
+	port: "internal service port or address — never mention internal ports, addresses, or service endpoints",
+	msm: "internal tool name — never mention internal tool names"
+};
 /**
-* 打回消息（steer 内容）：**告知命中词并指令重新生成**（v1.26.10 用户调整——
-* 原 v1.26.3 设计"不含命中词防二次泄露"导致模型不知道改什么；命中词本就已在被拦截的
-* 回复中进入会话（已暴露面），打回消息重复一次不扩大暴露，模型据此精准重写）。
-* 命中词已落入模型上下文（它刚写过），此消息不回显给用户（steer 是 plugin source 消息，
-* 3100 对外响应 v1.26.10 起已不含 trajectory → 打回文本不会到达外部用户）。
+* 打回消息（steer 内容）：**逐词告知命中词 + 分类规避指引**（v1.26.11 用户调整——
+* v1.26.10 只列裸词（如 "3080"）模型仍不知道是什么/怎么规避；现在按类说明：
+* "3080" → 内部服务端口，不要提及内部端口/地址/端点）。
+* R↓ 安全性：命中词本就已在被拦截回复中进入会话（已暴露面），打回重复一次不扩大暴露；
+* steer 是 plugin source 消息不回显给用户（3100 对外响应已不含 trajectory → 打回文本不达外部用户）。
 */
 function buildRebuke(hits) {
-	return `[SERENITY OUTPUT GUARD] Your previous response contained ${hits.length} sensitive internal term(s) (mechanism/credential identifiers) that must not appear in user-visible output: ${[...new Set(hits)].join(", ")}. Regenerate the response from scratch without ANY of these terms — describe the same substance without referencing internal machinery, credentials, tool names, or implementation details. Do not repeat the terms; do not explain this instruction to the user.`;
+	const count = hits.length;
+	return `[SERENITY OUTPUT GUARD] Your previous response contained ${count} sensitive internal ${count === 1 ? "term" : "terms"} that must not appear in user-visible output:\n${hits.map((h) => `- "${h.word}" — ${CATEGORY_GUIDE[h.category]}`).join("\n")}\nRegenerate the response from scratch without ANY of these — describe the same substance without referencing internal machinery, credentials, ports, tool names, or implementation details. Do not repeat the terms; do not explain this instruction to the user.`;
 }
 /** 打回状态（按 agent 会话跟踪连续命中轮数） */
 const rebukeStates = /* @__PURE__ */ new Map();
 //#endregion
 //#region src/output-guard-seam.ts
-const PLUGIN_SOURCE = {
+const PLUGIN_SOURCE$1 = {
 	kind: "plugin",
 	plugin: "dsh-serenity-hooks"
 };
@@ -9807,7 +9919,7 @@ function registerOutputGuardHook(ctx) {
 					type: "text",
 					text: buildRebuke(hits)
 				}],
-				source: PLUGIN_SOURCE
+				source: PLUGIN_SOURCE$1
 			}));
 		} catch (error) {
 			console.warn(`[serenity-hooks] output-guard steer failed: ${String(error?.message ?? error)}`);
@@ -12704,6 +12816,227 @@ qInput.focus()
 </html>`;
 }
 //#endregion
+//#region src/autotrajectory.ts
+const PLUGIN_SOURCE = {
+	kind: "plugin",
+	plugin: "dsh-serenity-hooks"
+};
+/** 自主轨迹会话目录后缀标志（用户拍板：后缀） */
+const AUTO_DIR_SUFFIX = "--auto";
+/** 调度 tick 周期（10min——验证形态"一个就够"） */
+const TICK_MS = 6e5;
+/** SESSION.md 内「下一轮动机」段标记（自生偏见载体——轨迹预设自己的未来） */
+const MOTIVATION_MARKER = "下一轮动机";
+/** 缺省避开的高峰时段（北京时间 [start, end) 不唤起——用量峰谷省钱） */
+const DEFAULT_AVOID_HOURS = {
+	start: 8,
+	end: 18
+};
+function readAutoTrajectorySettings(root) {
+	return loadSerenityConfig(root).autotrajectory ?? null;
+}
+/**
+* 北京时间（UTC+8）当前小时——不依赖服务器时区（服务器可能 UTC/本地任意）。
+*/
+function beijingHour(nowMs) {
+	return Math.floor((nowMs + 288e5) % 864e5 / 36e5);
+}
+/**
+* 唤起窗口判定：北京时间 [avoidStart, avoidEnd) 内不唤起（缺省 8~18）。
+* 单段避开（start<=end）：窗口 = [0,start) ∪ [end,24)；跨零点避开（start>end）：窗口 = [end,start)。
+*/
+function inAllowedWakeWindow(nowMs, avoid) {
+	const start = avoid?.start ?? DEFAULT_AVOID_HOURS.start;
+	const end = avoid?.end ?? DEFAULT_AVOID_HOURS.end;
+	const h = beijingHour(nowMs);
+	if (start <= end) return h < start || h >= end;
+	return h >= end && h < start;
+}
+/** 标志位判定：SESSION.md 所在目录名以 --auto 结尾 → 自主轨迹形态 */
+function isAutoTrajectorySession(mdPath) {
+	return basename(dirname(mdPath)).endsWith(AUTO_DIR_SUFFIX);
+}
+/**
+* 目标会话定位：**必须配置 cfg.session**（S###/目录名）——CCC 日常有多条 trajectory 在跑，
+* 绝不默认唤起（缺省最近活跃会误伤其他正在运行的轨迹；用户拍板：必须配置才生效）。
+* 未配置 session 或未命中 → null（不唤起）。
+*/
+function resolveTargetMd(root, cfg) {
+	if (!cfg?.session) return null;
+	const found = findSession(sessionsRoot(root), cfg.session);
+	if (!found) return null;
+	const md = join(found.path, "SESSION.md");
+	return existsSync(md) ? md : null;
+}
+/**
+* 唤起条件（纯逻辑，可测）：enabled + 未在运行 + 目录标志 + mtime 超间隔 + 窗口允许。
+*/
+function shouldWake(settings, mdPath, nowMs, running) {
+	if (!settings?.enabled || running) return false;
+	if (!mdPath || !isAutoTrajectorySession(mdPath)) return false;
+	if (!inAllowedWakeWindow(nowMs, settings.avoidWakeHours)) return false;
+	try {
+		const mtime = statSync(mdPath).mtimeMs;
+		const hours = Math.max(1, settings.intervalHours ?? 12);
+		return nowMs - mtime >= hours * 36e5;
+	} catch {
+		return false;
+	}
+}
+/** 自生动机读取：SESSION.md「下一轮动机」段内容（到下一个二级标题或文件尾；无 → null） */
+function readSelfGeneratedMotivation(mdPath) {
+	try {
+		const content = readFileSync(mdPath, "utf-8");
+		const idx = content.indexOf(MOTIVATION_MARKER);
+		if (idx < 0) return null;
+		const rest = content.slice(idx + 5);
+		const nextHeading = rest.search(/\n## /);
+		return (nextHeading >= 0 ? rest.slice(0, nextHeading) : rest).trim() || null;
+	} catch {
+		return null;
+	}
+}
+/**
+* 偏见内容：直接运行 CCC 根目录下偏见提供者脚本（biasProvider，缺省 autotrajectory-bias.ts）→ stdout。
+* 脚本缺失 → 返回 { text: null, error: 提示实现 }（唤起侧报错要求实现，不静默跳过）。
+* 路径逃逸校验（resolveInside）；bun 优先，node 兜底；600s 超时。
+*/
+async function fetchBiasContent(root, providerRel) {
+	let scriptAbs;
+	try {
+		scriptAbs = resolveInside(root, providerRel);
+	} catch {
+		return {
+			text: null,
+			error: `biasProvider 路径逃逸（须在 CCC 根内）: ${providerRel}`
+		};
+	}
+	if (!existsSync(scriptAbs)) return {
+		text: null,
+		error: `请在 CCC 根目录实现偏见内容提供者脚本: ${providerRel}（stdout 输出偏见内容一行；acc_msm exec autotrajectory-exp init 可生成模板）`
+	};
+	const runs = [["bun", [scriptAbs]], [process.execPath, [scriptAbs]]];
+	for (const [cmd, args] of runs) try {
+		const r = spawnSync(cmd, args, {
+			encoding: "utf-8",
+			timeout: 6e5,
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+		if (r.status === 0) return {
+			text: (r.stdout ?? "").trim() || null,
+			error: null
+		};
+		if (r.error?.code === "ENOENT") continue;
+		return {
+			text: null,
+			error: `偏见内容提供者脚本执行失败（exit ${r.status ?? "?"}）: ${r.stderr?.trim() || r.stdout?.trim() || ""}`
+		};
+	} catch {
+		continue;
+	}
+	return {
+		text: null,
+		error: "偏见内容提供者脚本无法运行（bun 与 node 均不可用）"
+	};
+}
+/** 唤起消息（三段式：身份锚定 / 先验偏见[自生动机+偏见内容] / 任务）——注入前台会话，用户可见 */
+function buildWakeMessage(opts) {
+	const lines = [
+		`[自主轨迹唤起] — 距上次轨迹活动已满 ${opts.intervalHours} 小时，自动继续。`,
+		"",
+		`身份锚定：继续 ${opts.sessionName} 的 trajectory（SESSION.md: ${opts.mdPath}）。`,
+		"先验偏见："
+	];
+	if (opts.motivation) lines.push(`  · 自生动机：${opts.motivation}`);
+	if (opts.biasContent) lines.push(`  · 偏见内容：${opts.biasContent}`);
+	if (!opts.motivation && !opts.biasContent) lines.push("  · （无——本轮纯自主探索）");
+	lines.push("", "任务：执行一轮自主认知（探索/反事实检验），把产出写入 SESSION.md", "「自主探索日志」段，并预写「下一轮动机」段。完成后自然结束。");
+	return lines.join("\n");
+}
+/**
+* 装配（index.ts apply 调用）：仅当 CCC 配置 autotrajectory.enabled=true 时启动定时器；
+* 否则零资源占用。定时器 tick 检查唤起条件 → 注入活跃会话（agent.steer，前台可见）。
+*/
+function registerAutoTrajectory(ctx) {
+	const root = resolveAutoTrajectoryRoot(ctx);
+	const settings = root ? readAutoTrajectorySettings(root) : null;
+	if (!settings?.enabled) return;
+	let running = false;
+	const tick = () => {
+		if (running) return;
+		const mdPath = resolveTargetMd(root, settings);
+		if (!shouldWake(settings, mdPath, Date.now(), running)) return;
+		const agent = resolveTargetAgent(ctx, mdPath);
+		if (!agent) {
+			console.warn("[serenity-hooks] ✗ 自主轨迹唤起跳过：目标会话 agent 不可得（session use 激活后重试）");
+			return;
+		}
+		running = true;
+		(async () => {
+			try {
+				const provider = settings.biasProvider?.trim() || "autotrajectory-bias.ts";
+				const biasRes = await fetchBiasContent(root, provider);
+				if (biasRes.error) {
+					console.error(`[serenity-hooks] ✗ 自主轨迹唤起中止（偏见内容缺失）: ${biasRes.error}`);
+					return;
+				}
+				const motivation = readSelfGeneratedMotivation(mdPath);
+				const message = buildWakeMessage({
+					sessionName: basename(dirname(mdPath)),
+					mdPath,
+					intervalHours: settings.intervalHours ?? 12,
+					motivation,
+					biasContent: biasRes.text
+				});
+				agent.steer(createUserMessage({
+					content: [{
+						type: "text",
+						text: message
+					}],
+					source: PLUGIN_SOURCE
+				}));
+				console.log(`[serenity-hooks] ✓ 自主轨迹唤起（${basename(dirname(mdPath))}，偏见提供者 ${provider}）`);
+			} catch (err) {
+				console.warn(`[serenity-hooks] ✗ 自主轨迹唤起失败: ${String(err?.message ?? err)}`);
+			} finally {
+				running = false;
+			}
+		})();
+	};
+	setInterval(tick, TICK_MS).unref();
+	tick();
+}
+/** 目标 agent：从 SESSION.md 反向定位 dsh 会话（标题 F3 命名 S###-日期 匹配）；不可得 → null */
+function resolveTargetAgent(ctx, mdPath) {
+	const idMatch = basename(dirname(mdPath)).match(/--S(\d{3,})--/);
+	const sid = idMatch ? `S${idMatch[1]}` : null;
+	try {
+		const sessions = ctx.sessions;
+		for (const s of sessions?.list?.() ?? []) if (sid && (s.title === sid || s.title?.startsWith(`${sid}-`))) {
+			const agent = ctx.agents?.get?.(s.id ?? "");
+			if (agent) return agent;
+		}
+	} catch {}
+	return null;
+}
+/** 自主轨迹绑定的 CCC 根：进程 cwd 上溯 .serenity 优先，回退任一 live 会话 root */
+function resolveAutoTrajectoryRoot(ctx) {
+	const fromCwd = findSerenityRoot(process.cwd());
+	if (fromCwd) return fromCwd;
+	try {
+		const sessions = ctx.sessions;
+		for (const s of sessions?.list?.() ?? []) {
+			const r = findSerenityRoot(s?.header?.cwd ?? "");
+			if (r) return r;
+		}
+	} catch {}
+	return null;
+}
+//#endregion
 //#region src/index.ts
 const name = "dsh-serenity-hooks";
 /** 主动调用的服务；其余（agent 事件）随 harness 装配必然存在 */
@@ -12759,6 +13092,7 @@ function apply(ctx, config) {
 		ctx.tools.register(createRebuildTool(ctx));
 		ctx.tools.register(localstoreTool);
 		ctx.tools.register(skiffAdminTool);
+		ctx.tools.register(autoTrajectoryExpTool);
 	}
 	if (config.guards) registerGuards(ctx, { configPaths: config.serenityConfigPaths });
 	if (config.keeper) registerKeeper(ctx, {
@@ -12784,6 +13118,7 @@ function apply(ctx, config) {
 	registerBootstrap(ctx);
 	registerSkiff(ctx);
 	registerAcp(ctx);
+	registerAutoTrajectory(ctx);
 }
 /**
 * F4 Skiff 调试服务装配：启停 = 人工（设置面板 Skiff 区块开关，settings 持久化）。