@shgroup/dsh-serenity-hooks 1.26.16 → 1.27.0

package/lib/index.js

@@ -1,4 +1,9 @@
-import { a as findSerenityRoot, c as matchBlacklist, d as readHandymanConfig, f as readUtf8, i as findGitRoot, l as pathInside, n as SAFE_MODE_MARKER, o as isSafeModeOn, p as resolveInside, r as classifyPath, s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS, u as readBlacklist } from "./ccc-CfDrlfA7.js";
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
+import { a as findSerenityRoot, c as matchBlacklist, d as readHandymanConfig, i as findGitRoot, l as pathInside, n as SAFE_MODE_MARKER, o as isSafeModeOn, p as resolveInside, r as classifyPath, s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS, u as readBlacklist } from "./ccc-CfDrlfA7.js";
+import { a as resolveRoleSystemPrompt, i as readSkiffRoles, l as systemPromptSource, r as isSkiffSessionId, s as roleToolWhitelist } from "./skiff-role-Dw7UKCUm.js";
+import { _ as writeFailedStatus, a as skiffSessionInfo, c as unregisterSkiffSession, d as handymanProgressPaths, f as listActiveHandymen, g as splitModel, h as requireWhitelistedModel, i as skiffMsmGate, l as HANDYMAN_GUIDE, m as readProgress, n as createSkiffAgent, o as skiffSessionSnapshot, p as newStopToken, r as getSkiffAgent, s as skiffTrajectoryEnabled, t as askSkiff, u as buildRoundPrompt, v as writeProgress, y as skiffRoleFor } from "./skiff-core-BewZSbVH.js";
+import { a as weixinSessionIdFor, c as checkLocalstoreGitCompliance, d as runLocalStore, i as readWeixinSettings, l as localstorePath, n as matchWeixinRoute, r as readWeixinCredential, s as LOCALSTORE_SCOPES, t as extractWeixinText, u as readGitTrack } from "./weixin-route-CHCWBvLZ.js";
+import { n as sendTextMessage, t as getUpdates } from "./weixin-api-b8HLmcPE.js";
 import z from "@deepseek-ai/schemastery";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 import { appendFileSync, chmodSync, cpSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync, utimesSync, writeFileSync } from "node:fs";
@@ -12,18 +17,6 @@ import { createUserMessage } from "@deepseek-ai/dsh-llm";
 import { createHmac, randomBytes, randomUUID, scryptSync, timingSafeEqual } from "node:crypto";
 import { deriveEventMessage } from "@deepseek-ai/dsh-session";
 import { createServer, request } from "node:http";
-//#region \0rolldown/runtime.js
-var __defProp = Object.defineProperty;
-var __exportAll = (all, no_symbols) => {
-	let target = {};
-	for (var name in all) __defProp(target, name, {
-		get: all[name],
-		enumerable: true
-	});
-	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
-	return target;
-};
-//#endregion
 //#region src/fs-ops.ts
 /**
 * fs-ops.ts — cc_fs 纯操作层（零 DSH 依赖，可独立单测）
@@ -484,141 +477,6 @@ const ACC_VERSION = (() => {
 	}
 })();
 //#endregion
-//#region src/skiff-role.ts
-/**
-* skiff-role.ts — Skiff（F4，v1.25.0 实验性）角色层纯逻辑（零 DSH 依赖，可独立单测）
-*
-* 概念（S142 用户拍板）：Skiff = 完整宁静号 trajectory（在宁静号内全知全能）的
-* **任意子集**——CCC 通过角色配置定义：能力面（tools 非 MSM 工具白名单 + msms
-* MSM 白名单，双白名单独立，白名单外全隐藏）+ 轨迹纪律面（trajectory 子集）+
-* 系统提示词（CCC 完整定义，dsp 只给基础部分）。
-*
-* 实验性质：未配置任何角色 → Skiff 完全零影响（无监听、无 agent 创建、guard 无规则）。
-*/
-/** Skiff agent 会话 id 前缀（agents.create 生成；seams 旁路/白名单判定用） */
-const SKIFF_SESSION_PREFIX = "skiff-";
-/** 判定 sessionId 是否为 Skiff 会话（仿 handyman- 前缀排除模式） */
-function isSkiffSessionId(sessionId) {
-	return typeof sessionId === "string" && sessionId.startsWith("skiff-");
-}
-/**
-* 读取 CCC 的 Skiff 角色配置（.opencode/serenity.json skiff.roles）。
-* @returns 名 → 角色配置 的 Map；未配置（无 skiff 段/空 roles）返回空 Map（Skiff 未启用）
-*/
-function readSkiffRoles(root, paths = DEFAULT_SERENITY_CONFIG_PATHS) {
-	const out = /* @__PURE__ */ new Map();
-	try {
-		const roles = loadSerenityConfig(root, paths).skiff?.roles;
-		if (!roles || typeof roles !== "object") return out;
-		for (const [name, role] of Object.entries(roles)) {
-			if (!role || typeof role !== "object") continue;
-			if (name.trim() === "") continue;
-			out.set(name.trim(), {
-				model: typeof role.model === "string" ? role.model : void 0,
-				msms: Array.isArray(role.msms) ? role.msms.filter((m) => typeof m === "string") : void 0,
-				tools: Array.isArray(role.tools) ? role.tools.filter((t) => typeof t === "string") : void 0,
-				trajectory: role.trajectory && typeof role.trajectory === "object" ? {
-					session: role.trajectory.session === true,
-					keeper: role.trajectory.keeper === true,
-					rebuild: role.trajectory.rebuild === true
-				} : void 0,
-				systemPrompt: typeof role.systemPrompt === "string" ? role.systemPrompt : void 0,
-				systemPromptFile: typeof role.systemPromptFile === "string" ? role.systemPromptFile : void 0
-			});
-		}
-	} catch {}
-	return out;
-}
-function trajectorySubset(role) {
-	return {
-		session: role?.trajectory?.session === true,
-		keeper: role?.trajectory?.keeper === true,
-		rebuild: role?.trajectory?.rebuild === true
-	};
-}
-/** 角色可用工具面（白名单并集）：tools + acc_msm（msms 非空时作为 MSM 通道自动可用） */
-function roleToolWhitelist(role) {
-	const out = /* @__PURE__ */ new Set();
-	for (const t of role?.tools ?? []) out.add(t);
-	if ((role?.msms?.length ?? 0) > 0) out.add("acc_msm");
-	return out;
-}
-/** 角色允许的 MSM 白名单（acc_msm exec 校验 / msm_list 过滤用；独立于 tools 白名单） */
-function roleMsmWhitelist(role) {
-	return new Set(role?.msms ?? []);
-}
-/**
-* 解析角色的系统提示词全文（v1.25.10，S142 用户：超长提示词 JSON 内嵌不可读）：
-* ① `systemPromptFile` 存在 → 读取文件内容（**推荐配置方法**；相对 CCC 根，
-*    路径逃逸拒绝（resolveInside）+ BOM 剥除（readUtf8）+ 存在性校验）
-* ② 否则 → 内嵌 `systemPrompt`（兼容旧配置）
-* ③ 都无 → 空字符串
-* 文件缺失/逃逸 → 抛错（调用方 catch 降级 + validate 报 issue）。
-* 懒读取：readSkiffRoles 不读文件（guards/seams 每次工具调用查询的热路径零 IO），
-* 仅在本函数（创建 agent / validate / list 时）读取。
-*/
-function resolveRoleSystemPrompt(root, role) {
-	if (!role) return "";
-	const file = role.systemPromptFile?.trim();
-	if (file) {
-		const abs = resolveInside(root, file);
-		if (!existsSync(abs)) throw new Error(`skiff role "${role.systemPrompt ?? "(unnamed)"}": systemPromptFile "${file}" not found (resolved: ${abs})`);
-		return readUtf8(abs).trim();
-	}
-	return role.systemPrompt ?? "";
-}
-/** 角色系统提示词来源（validate/list 展示用） */
-function systemPromptSource(role) {
-	if (role?.systemPromptFile?.trim()) return "file";
-	if (role?.systemPrompt?.trim()) return "inline";
-	return "none";
-}
-/**
-* Skiff 基础提示词（dsp 只给这部分；CCC 的 systemPrompt 段由调用方拼接）：
-* 身份 + 可用 MSM/工具清单 + 调用协议 + 边界声明。动态生成（清单来自角色白名单）。
-*/
-function buildSkiffBasePrompt(roleName, role) {
-	const msms = role?.msms ?? [];
-	const tools = role?.tools ?? [];
-	const lines = [
-		"=== Serenity Skiff ===",
-		`Role: ${roleName} (defined by this CCC)`,
-		"You interact with this CCC ONLY through the exposed surface below:"
-	];
-	if (msms.length > 0) lines.push(`  MSMs: ${msms.join(", ")} (call acc_msm exec <name> [args...]; pass --help as the first arg for usage)`);
-	else lines.push("  MSMs: (none)");
-	lines.push(`  Tools: ${tools.length > 0 ? tools.join(", ") : "(none)"}`);
-	lines.push("No other tools are available. Your capability boundary is this surface.");
-	lines.push("");
-	lines.push("---");
-	lines.push("");
-	return lines.join("\n");
-}
-//#endregion
-//#region src/skiff-registry.ts
-const skiffSessions = /* @__PURE__ */ new Map();
-/** 查 sessionId 的 Skiff 角色名（无 → null）——向后兼容（guards/seams 依赖） */
-function skiffRoleFor$1(sessionId) {
-	return skiffSessions.get(sessionId)?.role ?? null;
-}
-/** 查 sessionId 的完整绑定（role + ccc；无 → null）——v1.25.10 会话追问校验 */
-function skiffSessionInfo$1(sessionId) {
-	return skiffSessions.get(sessionId) ?? null;
-}
-function registerSkiffSession$1(sessionId, role, ccc) {
-	skiffSessions.set(sessionId, {
-		role,
-		ccc
-	});
-}
-function unregisterSkiffSession$1(sessionId) {
-	skiffSessions.delete(sessionId);
-}
-/** 测试/调试：注册表快照（sessionId → {role, ccc}） */
-function skiffSessionSnapshot$1() {
-	return new Map(skiffSessions);
-}
-//#endregion
 //#region src/seams/guards.ts
 /**
 * guards.ts — 拦截缝：安全模式 + 路径守卫（P3 语义的机械层）
@@ -675,8 +533,9 @@ function decideGuard(input) {
 	const { root, toolName, safeModeOn, blacklist, pathArg, action } = input;
 	if (input.skiffSessionId !== void 0 && isSkiffSessionId(input.skiffSessionId)) {
 		if (toolName === "skill") return { kind: "allow" };
-		const roleName = input.skiffSessionId ? skiffRoleFor$1(input.skiffSessionId) : null;
-		if (!roleToolWhitelist(roleName ? readSkiffRoles(root).get(roleName) : void 0).has(toolName)) return {
+		const roleName = input.skiffSessionId ? skiffRoleFor(input.skiffSessionId) : null;
+		const role = roleName ? readSkiffRoles(root).get(roleName) : void 0;
+		if (!roleToolWhitelist(role).has(toolName)) return {
 			deny: "tool not allowed in this skiff role",
 			kind: "deny"
 		};
@@ -1025,278 +884,6 @@ const kitTool = defineTool({
 	}
 });
 //#endregion
-//#region src/localstore-ops.ts
-/**
-* localstore-ops.ts — localstore 纯逻辑层（零 DSH 依赖，可独立单测）
-*
-* S134 重设计（v1.16.7）：存储从 ~/.serenity/ 迁到 **CCC 根根目录 localstore.json**
-* （JSON 格式——方便 MSM 直接 read + JSON.parse 读取，零解析依赖）。
-*
-* git 提交策略（可靠机制 × 用户自由）：
-*   - 配置：.opencode/serenity.json `localstore.gitTrack`: "allow"（可提交）| "deny"（禁提交）
-*   - **缺省 deny（没配就是不提交）**；且 deny 的保证**不依赖 dsh 运行**——
-*     写入时自动确保 .gitignore 含 localstore.json（物理保证：即使 dsh 不在、
-*     用户手动 git commit 也不会误提交），cc_git 检查为第二道防线（拒绝 + 提示）
-*   - allow：放行（文件可提交，用户自行管理 .gitignore）
-*
-* 存储结构（JSON 顶层分节）：
-*   { "credentials": { "HOME_GITLAB_TOKEN": "xxx" }, "<config节>": { "<key>": "v" } }
-*   credentials 为保留节（credential 命名空间，key 大写蛇形）；其余节归 config 命名空间
-*   （path = section.key，如 handyman.models）。
-*/
-const LOCALSTORE_SCOPES = ["credential", "config"];
-/** 存储文件名（CCC 根根目录） */
-const LOCALSTORE_FILENAME = "localstore.json";
-/** 凭据保留节名（JSON 顶层） */
-const CREDENTIALS_SECTION = "credentials";
-/** 凭据 key 规范：大写蛇形，如 HOME_GITLAB_TOKEN */
-const CREDENTIAL_KEY_RE = /^[A-Z][A-Z0-9_]*$/;
-/** 配置节名规范：小写字母数字连字符 */
-const CONFIG_SECTION_RE = /^[a-z][a-z0-9-]*$/;
-/** 配置 key 规范（节内）：小驼峰，如 defaultModel */
-const CONFIG_KEY_RE = /^[a-z][a-zA-Z0-9_]*$/;
-/** 存储文件绝对路径（CCC 根根目录） */
-function localstorePath(root) {
-	return join(root, LOCALSTORE_FILENAME);
-}
-/** git 策略：serenity.json localstore.gitTrack，缺省 deny（不提交） */
-function readGitTrack(root, paths = DEFAULT_SERENITY_CONFIG_PATHS) {
-	return loadSerenityConfig(root, paths).localstore?.gitTrack === "allow" ? "allow" : "deny";
-}
-/** .gitignore 是否已覆盖 localstore 文件（非空非注释行含文件名即算） */
-function isLocalstoreGitignored(root) {
-	const gi = join(root, ".gitignore");
-	if (!existsSync(gi)) return false;
-	return readFileSync(gi, "utf-8").split("\n").some((l) => {
-		const t = l.trim();
-		return t !== "" && !t.startsWith("#") && t.includes("localstore.json");
-	});
-}
-/**
-* 确保 .gitignore 含 localstore 文件（deny 时的物理保证，不依赖 dsh 运行）：
-* 写入 localstore 时调用——deny（含缺省）且 .gitignore 未覆盖 → 自动追加一行。
-* allow → 不写入（放行，文件可提交）。
-*/
-function ensureLocalstoreGitignored(root) {
-	if (readGitTrack(root) === "allow") return { status: "allow" };
-	if (isLocalstoreGitignored(root)) return { status: "ignored" };
-	const gi = join(root, ".gitignore");
-	const existing = existsSync(gi) ? readFileSync(gi, "utf-8") : "";
-	const line = `${LOCALSTORE_FILENAME}  # ACC localstore (localstore.gitTrack defaults to deny — do not commit)`;
-	writeFileSync(gi, (existing.endsWith("\n") || existing === "" ? existing : existing + "\n") + line + "\n", "utf-8");
-	return { status: "appended" };
-}
-/**
-* cc_git 联动检查（第二道防线）：文件存在 && deny && .gitignore 未覆盖 → 不通过。
-* 调用方（cc_git commit）据此拒绝提交；status 可输出 warning。
-*/
-function checkLocalstoreGitCompliance(root) {
-	if (!existsSync(localstorePath(root))) return { ok: true };
-	if (readGitTrack(root) === "allow") return { ok: true };
-	if (isLocalstoreGitignored(root)) return { ok: true };
-	return {
-		ok: false,
-		reason: `localstore.json must not be committed (localstore.gitTrack=deny default) but .gitignore does not cover it — add ${LOCALSTORE_FILENAME} to .gitignore (or set localstore.gitTrack=allow to explicitly permit)`
-	};
-}
-/** 读取全文件（顶层分节）；文件不存在/坏 JSON 返回空 */
-function readAll(root) {
-	const p = localstorePath(root);
-	if (!existsSync(p)) return {};
-	try {
-		const v = JSON.parse(readFileSync(p, "utf-8").replace(/^\uFEFF/, ""));
-		if (v && typeof v === "object" && !Array.isArray(v)) return v;
-		return {};
-	} catch {
-		return {};
-	}
-}
-/** 写回全文件（2 空格缩进 + 尾换行，方便 MSM 直接读取） */
-function writeAll(root, data) {
-	writeFileSync(localstorePath(root), JSON.stringify(data, null, 2) + "\n", "utf-8");
-}
-/** 读取命名空间全部条目：credential → 扁平；config → 分节（剔除 credentials 保留节） */
-function readStore(root, scope) {
-	const all = readAll(root);
-	if (scope === "credential") return all["credentials"] ?? {};
-	const { [CREDENTIALS_SECTION]: _cred, ...rest } = all;
-	return rest;
-}
-/** 校验凭据 key 合法（大写蛇形）；不合法抛错 */
-function assertCredentialKey(key) {
-	if (!CREDENTIAL_KEY_RE.test(key)) throw new Error(`credential key "${key}" must match UPPER_SNAKE ^[A-Z][A-Z0-9_]*$ (e.g. HOME_GITLAB_TOKEN)`);
-}
-/** 校验 config 路径（节.key）；不合法抛错 */
-function assertConfigPath(path) {
-	const idx = path.indexOf(".");
-	if (idx <= 0 || idx === path.length - 1) throw new Error(`config path "${path}" must be section.key (e.g. handyman.models)`);
-	const section = path.slice(0, idx);
-	const key = path.slice(idx + 1);
-	if (!CONFIG_SECTION_RE.test(section)) throw new Error(`config section "${section}" must match ^[a-z][a-z0-9-]*$`);
-	if (!CONFIG_KEY_RE.test(key)) throw new Error(`config key "${key}" must match lowerCamel ^[a-z][a-zA-Z0-9_]*$ (e.g. defaultModel)`);
-	return {
-		section,
-		key
-	};
-}
-/** 写入单个条目（自动建文件；deny 默认时同步确保 .gitignore 物理保证） */
-function writeEntry(root, scope, name, value) {
-	const all = readAll(root);
-	if (scope === "credential") {
-		assertCredentialKey(name);
-		all[CREDENTIALS_SECTION] ??= {};
-		all[CREDENTIALS_SECTION][name] = value;
-	} else {
-		const { section, key } = assertConfigPath(name);
-		all[section] ??= {};
-		all[section][key] = value;
-	}
-	writeAll(root, all);
-	ensureLocalstoreGitignored(root);
-}
-/** 删除单个条目（不存在返回 false）；空节自动移除 */
-function unsetEntry(root, scope, name) {
-	const all = readAll(root);
-	if (scope === "credential") {
-		assertCredentialKey(name);
-		const sec = all[CREDENTIALS_SECTION];
-		if (!sec || !(name in sec)) return false;
-		delete sec[name];
-		if (Object.keys(sec).length === 0) delete all[CREDENTIALS_SECTION];
-	} else {
-		const { section, key } = assertConfigPath(name);
-		const sec = all[section];
-		if (!sec || !(key in sec)) return false;
-		delete sec[key];
-		if (Object.keys(sec).length === 0) delete all[section];
-	}
-	writeAll(root, all);
-	return true;
-}
-/** 读取单个条目值；不存在返回 null */
-function getEntry(root, scope, name) {
-	const all = readAll(root);
-	if (scope === "credential") {
-		assertCredentialKey(name);
-		return all["credentials"]?.[name] ?? null;
-	}
-	const { section, key } = assertConfigPath(name);
-	return all[section]?.[key] ?? null;
-}
-/** 列出 key（凭据只返回 key 名，不返回值） */
-function listKeys(root, scope) {
-	const data = readStore(root, scope);
-	if (scope === "credential") return Object.keys(data);
-	return Object.entries(data).flatMap(([section, entries]) => Object.keys(entries).map((key) => `${section}.${key}`));
-}
-/**
-* doc 说明文本：输出存储位置/格式/key 规范/git 策略/读写方法。
-* agent 据此可直接用 fs 工具（read/write）自己读写凭据/配置。
-*/
-function docText(root) {
-	const path = localstorePath(root);
-	return [
-		"# localstore — ACC local credential/config storage (standard, S134 redesign)",
-		"",
-		"One tool manages two namespaces: credential (credentials) + config (preferences).",
-		`Stored at the CCC root in ${path} (JSON format; MSMs can read + JSON.parse directly).`,
-		"",
-		"## Git commit policy",
-		"- Config: .opencode/serenity.json `localstore.gitTrack`: `\"allow\"` (may commit) | `\"deny\"` (must not commit; .dsh fallback)",
-		"- **Default deny (unset = not committed)**; when deny, writes automatically ensure .gitignore contains localstore.json",
-		"  (physical guarantee, independent of dsh runtime); cc_git commit checks and refuses",
-		"- To commit: set `\"localstore\": { \"gitTrack\": \"allow\" }` and remove localstore.json from .gitignore",
-		"",
-		"## Format (JSON top-level sections)",
-		"```json",
-		"{",
-		"  \"credentials\": {",
-		"    \"HOME_GITLAB_TOKEN\": \"xxx\"",
-		"  },",
-		"  \"handyman\": {",
-		"    \"models\": [\"minimax-cn-coding-plan/MiniMax-M3\"]",
-		"  }",
-		"}",
-		"```",
-		"- credentials is a reserved section (credentials, UPPER_SNAKE keys); other sections = config (path = section.key)",
-		"",
-		"## Key conventions",
-		"- credential key: ^[A-Z][A-Z0-9_]*$ (e.g. HOME_GITLAB_TOKEN)",
-		"- config path: section.key (section ^[a-z][a-z0-9-]*$, key lowerCamel ^[a-z][a-zA-Z0-9_]*$, e.g. handyman.models)",
-		"",
-		"## Reading (agents may use fs tools directly)",
-		`- Read ${path} with the read tool → JSON.parse`,
-		"- Or use localstore get <name> [--scope credential|config]",
-		"",
-		"## Writing",
-		"- Recommended: localstore set <name> <value> [--scope ...] (auto-creates file / preserves other entries / syncs .gitignore)",
-		"- Or modify the file directly with write/edit, keeping the JSON valid",
-		"",
-		"## Security boundary",
-		"- list/show return only key names for credentials, never values",
-		"- Credential values should be used internally by the agent; never write them into conversation or logs",
-		"- Default deny: the file is not committed to git (.gitignore physical guarantee + cc_git check fallback)",
-		""
-	].join("\n");
-}
-/** 运行 localstore 操作（纯逻辑；返回 JSON 值供工具 render） */
-function runLocalStore(root, args) {
-	const scope = args.scope === "config" ? "config" : "credential";
-	switch (args.action) {
-		case "list": return {
-			scope,
-			keys: listKeys(root, scope)
-		};
-		case "get": {
-			if (!args.name) throw new Error("get requires name");
-			const value = getEntry(root, scope, args.name);
-			if (value === null) throw new Error(`not found: ${args.name} (scope=${scope})`);
-			return {
-				scope,
-				name: args.name,
-				value,
-				source: scope
-			};
-		}
-		case "set": {
-			if (!args.name) throw new Error("set requires name");
-			if (args.value === void 0) throw new Error("set requires value");
-			writeEntry(root, scope, args.name, args.value);
-			const git = checkLocalstoreGitCompliance(root);
-			return {
-				scope,
-				name: args.name,
-				set: true,
-				path: localstorePath(root),
-				gitTrack: readGitTrack(root),
-				gitOk: git.ok,
-				git: git.reason ? { warning: git.reason } : null
-			};
-		}
-		case "unset": {
-			if (!args.name) throw new Error("unset requires name");
-			const removed = unsetEntry(root, scope, args.name);
-			return {
-				scope,
-				name: args.name,
-				removed
-			};
-		}
-		case "show": {
-			if (!args.name) throw new Error("show requires name");
-			const exists = getEntry(root, scope, args.name) !== null;
-			return {
-				scope,
-				name: args.name,
-				exists,
-				path: localstorePath(root)
-			};
-		}
-		case "doc": return { doc: docText(root) };
-		default: throw new Error(`Unknown subcommand: ${args.action} (available: list/get/set/unset/show/doc)`);
-	}
-}
-//#endregion
 //#region src/git-ops.ts
 /**
 * git-ops.ts — cc_git 纯操作层（零 DSH 依赖）
@@ -2091,397 +1678,6 @@ async function runMsmAsync(root, args) {
 	}
 }
 //#endregion
-//#region src/handyman-ops.ts
-/**
-* handyman-ops.ts — handyman（杂工）纯逻辑层（零 DSH 依赖，可独立单测）
-*
-* v1.24.0：loop（牛马）→ handyman（杂工）重命名。语义对齐 osp loop：
-* 进度文件（handyman-<label>.md/.json）、续跑、轮次 prompt 结构、stop token。
-* 不兼容旧 loop- 进度文件（用户拍板：仅新 handyman- 前缀）。
-*/
-/** label 脱敏（Windows 审计问题 17）：非法字符 → '-'，去尾点/空格，限长（按码点截断，修复代理对切散 U+FFFD） */
-function sanitizeLabel(label) {
-	return [...label.replace(/[<>:"/\\|?*\u0000-\u001f]/g, "-").replace(/[ .]+$/g, "")].slice(0, 50).join("");
-}
-function handymanProgressPaths(root, label) {
-	const dir = join(root, "AGENT_SESSIONS");
-	const safe = sanitizeLabel(label);
-	return {
-		md: join(dir, `handyman-${safe}.md`),
-		json: join(dir, `handyman-${safe}.json`)
-	};
-}
-/** 读取进度（续跑）；无文件返回 round 0 */
-function readProgress(root, label) {
-	const { json } = handymanProgressPaths(root, label);
-	if (!existsSync(json)) return null;
-	try {
-		return JSON.parse(readFileSync(json, "utf-8"));
-	} catch {
-		return null;
-	}
-}
-function writeProgress(root, label, p) {
-	const { md, json } = handymanProgressPaths(root, label);
-	mkdirSync(join(root, "AGENT_SESSIONS"), { recursive: true });
-	writeFileSync(json, JSON.stringify({
-		...p,
-		status: p.status ?? "running",
-		updated: (/* @__PURE__ */ new Date()).toISOString()
-	}, null, 2) + "\n", "utf-8");
-	const lines = [
-		`# handyman: ${label}`,
-		`- Model: ${p.model}`,
-		`- Round: ${p.round}`,
-		`- Done: ${p.done}`,
-		"",
-		`## Latest response`,
-		"",
-		p.lastResponse,
-		""
-	];
-	writeFileSync(md, lines.join("\n"), "utf-8");
-}
-/** 失败状态落盘（对齐 osp writeFailedStatus：done=true / status=failed / errorCode） */
-function writeFailedStatus(root, label, info) {
-	const { json } = handymanProgressPaths(root, label);
-	mkdirSync(join(root, "AGENT_SESSIONS"), { recursive: true });
-	const prev = readProgress(root, label);
-	writeFileSync(json, JSON.stringify({
-		round: prev?.round ?? 0,
-		done: true,
-		label,
-		model: prev?.model ?? "",
-		status: "failed",
-		errorCode: info.errorCode,
-		errorMessage: info.errorMessage,
-		updated: (/* @__PURE__ */ new Date()).toISOString(),
-		lastResponse: prev?.lastResponse ?? ""
-	}, null, 2) + "\n", "utf-8");
-}
-function newStopToken() {
-	return `SERENITY_HANDYMAN_DONE_${randomBytes(8).toString("hex")}`;
-}
-/** 解析 model 字符串（provider/model）→ {provider, model}；无 / 视为 model-only */
-function splitModel(model) {
-	const idx = model.indexOf("/");
-	if (idx < 0) return {
-		provider: void 0,
-		model
-	};
-	return {
-		provider: model.slice(0, idx),
-		model: model.slice(idx + 1)
-	};
-}
-/** 校验模型在白名单内；不在 → 抛错（用户拍板：只能使用 CCC 配置的模型） */
-function requireWhitelistedModel(model, models) {
-	if (!models.includes(model)) throw new Error(`handyman: model "${model}" is not in the CCC whitelist. Configure .opencode/serenity.json "handyman.models" with one of: ${models.join(", ")}`);
-}
-/** 轮次 prompt（对齐老 loop 结构：回顾进度 → 自由工作 → 汇报；S134 EAP 化：固定详尽） */
-function buildRoundPrompt(opts) {
-	const { root, session, label, round, stopToken, progress, task } = opts;
-	const resumeNote = progress && progress.round > 0 ? `Previous round (round ${progress.round}) completed: ${progress.lastResponse.slice(0, 300)}\nAlways continue from where you left off; never redo completed work.` : "This is the first round.";
-	return `# ${label} — handyman round ${round}
-
-CCC root: ${root}
-${session ? `Work session: ${session} (progress recorded in AGENT_SESSIONS/${session}/SESSION.md)` : ""}
-${task ? `Task: ${task}` : `Task: follow the work corresponding to label "${label}" (if a work session exists, read SESSION.md first to clarify the goal)`}
-${resumeNote}
-
-## Work rules (fixed every round, must follow)
-1. Work freely within this round: read files, modify code, execute commands — use every means to advance the task.
-2. If this task is **reading/curating or text-writing work** (extracting from files, summarizing, writing docs, generating text, etc.),
-   first load eap (acc-eap skill) and organize output per the EAP standard:
-   - E↑ Explicit: entities/variables clearly defined, relationships with direction and cardinality, boundaries drawn, no ambiguous words
-   - R↓ Reconstructable: key conclusions record sources and reasoning, rebuildable by later agents
-   - S↑ Stable: output structure regenerates repeatably, no reliance on implicit context
-3. Reports must be concrete and verifiable — no filler.
-
-## Per-round report (fixed format, answer each item)
-1. What was done this round (concrete)
-2. Next-step plan
-3. Whether the task is complete (if complete, output only ${stopToken})
-
-If the task is complete, output only ${stopToken}.`;
-}
-/**
-* handyman 规模化使用指引（guide 子命令输出；S134 继承 + v1.24.0 更新）：
-* 使用 handyman 前必须先加载 eap 设计方案；并行策略（jobs 编排）；提示词规范（详尽固定 EAP）；
-* 阅读/文字编写类 handyman 内部也加载 eap。
-*/
-const HANDYMAN_GUIDE = `# handyman — Scale-Up Usage Guide (guide)
-
-## ⚠️ Before using: load eap and design the plan
-Before calling handyman, load eap (acc-eap skill) and design the "scale-up handyman plan" based on the EAP framework.
-
-### 1. Task decomposition (E↑ Explicit)
-- Split large tasks into explicit subtasks: each subtask defines goal / input / boundaries (what to do, what not to do) / acceptance criteria
-- Make dependencies explicit: dependent tasks run serially, independent ones can run in parallel
-
-### 2. Prompt design (handyman's task parameter)
-- task must be detailed, fixed, and EAP-compliant: clear goal, drawn boundaries, decidable acceptance criteria
-- Anti-example "handle this file" — ambiguous; good example "read <path>, extract all rows of the「关键决策」table,
-  output a JSON array (fields id/conclusion/evidence), do not modify the original file"
-- Reading/curating or text-writing work (extracting from files, summarizing, writing docs, generating text, etc.):
-  the handyman-internal agent is also required to load eap and organize output per the EAP standard
-
-### 3. Model whitelist (CCC-configured, mandatory)
-- handyman only uses models listed in .opencode/serenity.json "handyman.models" — never arbitrary models
-- Recursive subagents inside a handyman inherit the handyman's model automatically (DSH native)
-- Keep the subagent tool instance free of a fixed agentOptions, or model inheritance breaks
-
-### 4. Parallel strategy (jobs orchestration, workflow capability)
-- Independent subtasks can run in parallel via handyman(jobs=[...]): each job gets its own label + task + stop token + progress file
-- Concurrency safety guaranteed: unique sessionId (handyman-<label>-<uuid>), progress files isolated per label
-  (AGENT_SESSIONS/handyman-<label>.json) — same label resumes, different labels never interfere
-- Parallel cap: handyman.maxParallel (default 10 — cheap models are cheap)
-- Aggregation: after each parallel job produces progress, the main agent merges (or spawns one aggregation handyman)
-- For programmable pipeline/phase orchestration at scale, use the platform's workflow tool instead
-
-## Completion criteria (osp loop standard)
-- The only completion condition = the handyman-internal agent echoes this round's random verification code (stop token); dialogue round cap (default 100, osp fail-safe, forced stop beyond the cap, resumable)
-- Automatic restart on abnormal agent stop (≤100 restarts, anti-infinite-loop)
-
-## Waiting UI
-- The WebUI session-header Serenity detail card shows running handymen's progress (label / round / last response), one line per parallel job, ~3s refresh
-`;
-/** 列出 AGENT_SESSIONS/handyman-*.json 的全部进度（按 updated 倒序；坏文件跳过） */
-function listActiveHandymen(root) {
-	const dir = join(root, "AGENT_SESSIONS");
-	if (!existsSync(dir)) return [];
-	const out = [];
-	for (const entry of readdirSync(dir)) {
-		if (!entry.startsWith("handyman-") || !entry.endsWith(".json")) continue;
-		try {
-			const data = JSON.parse(readFileSync(join(dir, entry), "utf-8"));
-			if (typeof data.label !== "string" || typeof data.round !== "number") continue;
-			out.push({
-				label: data.label,
-				round: data.round,
-				done: data.done === true,
-				model: typeof data.model === "string" ? data.model : "",
-				updated: typeof data.updated === "string" ? data.updated : "",
-				lastResponse: typeof data.lastResponse === "string" ? data.lastResponse : ""
-			});
-		} catch {}
-	}
-	out.sort((a, b) => a.updated < b.updated ? 1 : -1);
-	return out;
-}
-//#endregion
-//#region src/skiff-core.ts
-const PLUGIN_SOURCE$5 = {
-	kind: "plugin",
-	plugin: "dsh-serenity-hooks"
-};
-const skiffAgents = /* @__PURE__ */ new Map();
-/** 查 sessionId 的 Skiff 角色名（无 → null） */
-function skiffRoleFor(sessionId) {
-	return skiffRoleFor$1(sessionId);
-}
-/** 查 sessionId 的会话绑定（role + ccc；无 → null）——v1.25.10 追问校验 */
-function skiffSessionInfo(sessionId) {
-	return skiffSessionInfo$1(sessionId);
-}
-/** 查 sessionId 的活体 agent（进程内会话延续用；未注册/已清理 → undefined） */
-function getSkiffAgent(sessionId) {
-	return skiffAgents.get(sessionId);
-}
-function registerSkiffSession(sessionId, role, ccc, agent) {
-	skiffAgents.set(sessionId, agent);
-	registerSkiffSession$1(sessionId, role, ccc);
-}
-function unregisterSkiffSession(sessionId) {
-	skiffAgents.delete(sessionId);
-	unregisterSkiffSession$1(sessionId);
-}
-/** 测试/调试：注册表快照（sessionId → {role} 兼容展示） */
-function skiffSessionSnapshot() {
-	const out = /* @__PURE__ */ new Map();
-	for (const [id, b] of skiffSessionSnapshot$1()) out.set(id, {
-		role: b.role,
-		ccc: b.ccc
-	});
-	return out;
-}
-/** Skiff agent 挂载的 DSH preset（v1.25.3 修复：read/grep/glob 等平台工具由 preset 决定工具面；
-*  handyman 经 composeFrom 继承父、skiff 无父上下文——直接挂 DSH 默认 standard preset；
-*  guard 角色白名单再按角色过滤可见/可用面——白名单外工具仍 deny） */
-const SKIFF_PRESET = "standard";
-/**
-* 创建 Skiff agent：标准 DSH agent + cwd=CCC root + 角色模型 +
-* standard preset（平台工具面）+ scoped 系统提示词（基础提示词 + CCC 定义段，全替换 ACC 默认注入）。
-*/
-async function createSkiffAgent(ctx, root, roleName, role, defaultModel) {
-	if (!ctx.agents) throw new Error("skiff: ctx.agents unavailable");
-	const model = role.model?.trim() || defaultModel || "";
-	const sessionId = `${SKIFF_SESSION_PREFIX}${roleName}-${randomUUID()}`;
-	const handle = await ctx.agents.create({
-		sessionId,
-		meta: {
-			cwd: root,
-			agentPreset: SKIFF_PRESET
-		},
-		setup: async (agentCtx) => {
-			try {
-				await agentCtx.get("agentPresets")?.mount?.(agentCtx, SKIFF_PRESET);
-			} catch {}
-		},
-		...model ? { agentOptions: splitModel(model) } : {}
-	});
-	const agent = handle.agent;
-	let cccPrompt = "";
-	try {
-		cccPrompt = resolveRoleSystemPrompt(root, role);
-	} catch (err) {
-		console.warn(`[serenity-hooks] skiff 角色 "${roleName}" 系统提示词解析失败（回退仅基础段）: ${String(err?.message ?? err)}`);
-	}
-	try {
-		agent.ctx.systemPrompt.section({
-			name: "serenity-skiff",
-			order: -60,
-			text: () => [buildSkiffBasePrompt(roleName, role), cccPrompt].filter(Boolean).join("\n")
-		});
-	} catch (err) {
-		console.warn(`[serenity-hooks] skiff 系统提示词注册失败: ${String(err?.message ?? err)}`);
-	}
-	registerSkiffSession(sessionId, roleName, root, agent);
-	return {
-		handle,
-		agent,
-		sessionId
-	};
-}
-/** 等待 agent 空闲（agent/status → idle）；无超时（agent 工作多久等多久，handyman 同款） */
-function waitIdle$1(ctx, agent) {
-	return new Promise((resolve) => {
-		let settled = false;
-		let dispose = () => {};
-		const finish = () => {
-			if (settled) return;
-			settled = true;
-			dispose();
-			resolve();
-		};
-		dispose = ctx.on("agent/status", (payload) => {
-			if (payload.agent === agent && payload.status === "idle") finish();
-		});
-	});
-}
-/** 读会话最后一个 assistant/message 文本（handyman 同款） */
-function lastAssistantText$2(agent) {
-	const events = agent.session.events;
-	for (let i = events.length - 1; i >= 0; i--) {
-		const e = events[i];
-		if (e && e.type === "assistant/message") {
-			const text = (e.data?.message?.content ?? e.data?.content ?? []).filter((b) => b.type === "text" && b.text).map((b) => b.text).join("\n");
-			if (text) return text;
-		}
-	}
-	return "";
-}
-/** events → 可读轨迹（user/assistant 文本 + 工具调用 + 工具结果；单条解析失败跳过） */
-function eventsToTrajectory(events) {
-	const out = [];
-	for (const raw of events) try {
-		const ev = raw;
-		if (ev.type === "user/message") {
-			const text = extractText(ev.data);
-			if (text) out.push({
-				role: "user",
-				text
-			});
-		} else if (ev.type === "assistant/message") {
-			const d = ev.data;
-			const text = (d?.message?.content ?? d?.content ?? []).filter((b) => b.type === "text" && b.text).map((b) => b.text).join("\n");
-			const calls = d?.message?.tool_calls ?? [];
-			if (text) out.push({
-				role: "assistant",
-				text
-			});
-			for (const c of calls ?? []) {
-				const args = typeof c.arguments === "string" ? c.arguments : JSON.stringify(c.arguments ?? {});
-				out.push({
-					role: "assistant",
-					text: `→ ${c.name ?? "(tool)"} ${truncate(args, 300)}`,
-					tool: c.name
-				});
-			}
-		} else if (ev.type === "tool/result") {
-			const outText = extractText(ev.data);
-			if (outText) out.push({
-				role: "tool",
-				text: truncate(outText, 500),
-				tool: String(ev.data?.name ?? "")
-			});
-		}
-	} catch {}
-	return out;
-}
-function extractText(data) {
-	const content = data?.content;
-	if (!Array.isArray(content)) return "";
-	return content.filter((b) => b.type === "text" && b.text).map((b) => b.text).join("\n");
-}
-function truncate(s, n) {
-	return s.length > n ? `${s.slice(0, n)}…` : s;
-}
-/**
-* 提问一轮：followup → 等 idle → 读答案 + 轨迹。
-* @param eventsStart 轨迹起点：显式传 0 = 全量轨迹（会话追问时页面重绘完整时间线，
-*   v1.25.10 用户拍板）；不传（undefined）= 本轮增量（followup 前 events 之后）
-* @param options.includeTrajectory 是否计算轨迹（v1.26.10：**3100 对外只提供问答**——
-*   公开问答页 / ACP JSON-RPC 不返回 trajectory，传 false 跳过计算；3099 调试页默认 true 保留）
-*/
-async function askSkiff(ctx, agent, question, eventsStart, options) {
-	const before = eventsStart === void 0 ? agent.session.events.length : eventsStart;
-	agent.followup(createUserMessage({
-		content: [{
-			type: "text",
-			text: question
-		}],
-		source: PLUGIN_SOURCE$5
-	}));
-	await waitIdle$1(ctx, agent);
-	const answer = lastAssistantText$2(agent);
-	const trajectory = options?.includeTrajectory === false ? [] : eventsToTrajectory(agent.session.events.slice(before));
-	return {
-		answer,
-		sessionId: String(agent.session.id ?? ""),
-		trajectory
-	};
-}
-/**
-* Skiff 会话的轨迹纪律参与判定：非 skiff 会话恒 true（正常参与）；
-* skiff 会话按角色 trajectory 子集（session/keeper/rebuild）决定；
-* 注册表缺失（进程重启遗留等）→ 保守旁路（false，完全独立）。
-*/
-function skiffTrajectoryEnabled(root, sessionId, key) {
-	if (!isSkiffSessionId(sessionId)) return true;
-	const roleName = sessionId ? skiffRoleFor(sessionId) : null;
-	if (!roleName) return false;
-	return trajectorySubset(readSkiffRoles(root).get(roleName))[key];
-}
-/**
-* acc_msm 的 Skiff 门控：非 skiff 会话恒放行；skiff 会话——
-* exec 非白名单 MSM 拒绝（不列名单）、register/deregister 必拒、
-* list 白名单过滤、check/guide/ccc-config 只读放行。
-*/
-function skiffMsmGate(root, sessionId, action, name) {
-	if (!isSkiffSessionId(sessionId)) return {};
-	const roleName = sessionId ? skiffRoleFor(sessionId) : null;
-	const role = roleName ? readSkiffRoles(root).get(roleName) : void 0;
-	if (!roleName || !role) return { reject: "MSM not allowed in this skiff session" };
-	if (action === "register" || action === "deregister") return { reject: "register/deregister is not allowed in skiff sessions" };
-	if (action === "exec") {
-		if (!name || !(role.msms ?? []).includes(name)) return { reject: "MSM not allowed" };
-		return {};
-	}
-	if (action === "list") return { whitelist: roleMsmWhitelist(role) };
-	return {};
-}
-//#endregion
 //#region src/tools/msm.ts
 /**
 * msm.ts — acc_msm 真实 DSH 工具定义（defineTool）
@@ -2549,7 +1745,8 @@ const msmTool = defineTool({
 	async execute(args, exec) {
 		const root = findSerenityRoot(agentCwd$7(exec));
 		if (!root) throw new Error("No CCC found: no .serenity file from agent cwd");
-		const gate = skiffMsmGate(root, agentSessionId$1(exec), args.action, args.name);
+		const sessionId = agentSessionId$1(exec);
+		const gate = skiffMsmGate(root, sessionId, args.action, args.name);
 		if (gate.reject) throw new Error(gate.reject);
 		if (args.action === "list" && gate.whitelist) {
 			const out = runMsm(root, args);
@@ -7100,14 +6297,14 @@ async function fetchBiasContent(root, providerRel) {
 		error: "偏见内容提供者脚本无法运行（bun 与 node 均不可用）"
 	};
 }
-/** 唤起消息（三段式：身份锚定 / 先验偏见[自生动机+偏见内容] / 任务）——注入前台会话，用户可见 */
+/** 唤起消息（四段式：轨迹焦点[CCC 定义，稳定] / 身份锚定 / 先验偏见[自生动机+偏见内容] / 任务）——注入前台会话，用户可见 */
 function buildWakeMessage(opts) {
-	const lines = [
-		`[自主轨迹唤起] — 距上次轨迹活动已满 ${opts.intervalHours} 小时，自动继续。`,
-		"",
-		`身份锚定：继续 ${opts.sessionName} 的 trajectory（SESSION.md: ${opts.mdPath}）。`,
-		"先验偏见："
-	];
+	const lines = [];
+	if (opts.topPrompt) {
+		lines.push(`[轨迹焦点] ${opts.topPrompt}`);
+		lines.push("");
+	}
+	lines.push(`[自主轨迹唤起] — 距上次轨迹活动已满 ${opts.intervalHours} 小时，自动继续。`, "", `身份锚定：继续 ${opts.sessionName} 的 trajectory（SESSION.md: ${opts.mdPath}）。`, "先验偏见：");
 	if (opts.motivation) lines.push(`  · 自生动机：${opts.motivation}`);
 	if (opts.biasContent) lines.push(`  · 偏见内容：${opts.biasContent}`);
 	if (!opts.motivation && !opts.biasContent) lines.push("  · （无——本轮纯自主探索）");
@@ -7164,6 +6361,7 @@ async function performAutoTrajectoryWake(ctx, root, settings, opts = {}) {
 		sessionName: basename(dirname(mdPath)),
 		mdPath,
 		intervalHours: Math.max(1, settings.intervalHours ?? 12),
+		topPrompt: settings.topPrompt?.trim() || null,
 		motivation,
 		biasContent: biasRes.text
 	});
@@ -7321,6 +6519,7 @@ function getAutoTrajectoryStatus(root) {
 		enabled: cfg?.enabled ?? false,
 		intervalHours: Math.max(1, cfg?.intervalHours ?? 12),
 		biasProvider: cfg?.biasProvider?.trim() || "autotrajectory-bias.ts",
+		topPrompt: cfg?.topPrompt?.trim() || null,
 		session: cfg?.session ?? null,
 		avoidWakeHours: {
 			start: cfg?.avoidWakeHours?.start ?? DEFAULT_AVOID_HOURS.start,
@@ -7497,7 +6696,7 @@ function renderDiagLive(r) {
 function createAutoTrajectoryExpTool(ctx) {
 	return defineTool({
 		name: "autotrajectory-exp",
-		description: "自主轨迹实验（Self-Sustaining Trajectory）一站式管理——实验提案 v1.26.14，默认关。无参/action=all：全报告（背景摘要 + 就绪检查 + 状态 + 下一步）——CCC agent 看一次即完整理解实验并知道怎么开始；init：初始化辅助（写配置 + 生成偏见提供者脚本模板）；random：运行偏见提供者脚本输出当前偏见内容；diag：唤起条件链诊断（--ccc <path> 指定 CCC，无参递归扫描 /home/yh 两层——覆盖任意实验 CCC 位置；逐条件输出 + 阻断点 + 修复建议）；diag-live：**进程内诊断**（v1.26.14——live 会话清单/标题/agent 定位/面板解析目标；排查\"面板检测不到实验 CCC\"）；doc：实验定义全文；check/status/guide：单项。实验是 CCC 的自选动作——dsp 只提供工具与知识，不自动安装任何东西。",
+		description: "自主轨迹实验（Self-Sustaining Trajectory）一站式管理——实验提案 v1.26.14，默认关。无参/action=all：全报告（背景摘要 + 就绪检查 + 状态 + 下一步）——CCC agent 看一次即完整理解实验并知道怎么开始；init：初始化辅助（写配置 + 生成偏见提供者脚本模板）；random：运行偏见提供者脚本输出当前偏见内容；diag：唤起条件链诊断（--ccc <path> 指定 CCC，无参递归扫描 /home/yh 两层——覆盖任意实验 CCC 位置；逐条件输出 + 阻断点 + 修复建议）；diag-live：**进程内诊断**（v1.26.14——live 会话清单/标题/agent 定位/面板解析目标；排查\"面板检测不到实验 CCC\"）；doc：实验定义全文；check/status/guide：单项。**topPrompt（v1.26.17，轨迹焦点）**：CCC 定义 autotrajectory 时自己填写本轨迹核心焦点（顶层提示词），每次唤起最先注入——稳定焦点锚定防漂移（实验观察：无焦点多轮唤起轨迹腐化），与偏见内容（每轮随机探索）互补。实验是 CCC 的自选动作——dsp 只提供工具与知识，不自动安装任何东西。",
 		parameters: { action: {
 			type: "string",
 			enum: [...AUTO_TRAJECTORY_EXP_ACTIONS],
@@ -8853,6 +8052,7 @@ const CONFIG_PATH = "/serenity/config";
 const CCCS_PATH = "/serenity/cccs";
 const PUBLIC_ASK_PATH = "/serenity/public-ask";
 const AUTOTRAJECTORY_PATH = "/serenity/autotrajectory";
+const WEIXIN_PATH = "/serenity/weixin";
 /** 图片落盘目录（CCC 根相对；S142 图片自动识别基础设施——粘贴图片落盘供 agent 经 CCC vlm MSM 自主处理） */
 const IMAGE_UPLOAD_DIR = "_tmp/images_from_user";
 const IMAGE_MEDIA_TYPES = /* @__PURE__ */ new Set([
@@ -9269,6 +8469,221 @@ function registerStatusApi(ctx, opts = {}) {
 			}
 		}
 	});
+	ctx.webServer.register({
+		kind: "exact",
+		path: WEIXIN_PATH,
+		handler: async (req, res) => {
+			try {
+				if (req.headers["x-serenity-ui"] !== "1") {
+					sendJson$2(res, 403, { error: "微信桥配置仅限 WebUI（client 专用）" });
+					return;
+				}
+				const url = new URL(req.url ?? "/", "http://127.0.0.1");
+				if (req.method === "GET") {
+					const chk = requireCcc(url.searchParams.get("ccc") ?? void 0);
+					if (!chk.ok) {
+						sendJson$2(res, 400, { error: chk.error });
+						return;
+					}
+					const { readWeixinSettings } = await import("./weixin-route-CHCWBvLZ.js").then((n) => n.o);
+					const { weixinBridgeStatus } = await Promise.resolve().then(() => weixin_bridge_exports);
+					const settings = readWeixinSettings(chk.root);
+					const bridge = weixinBridgeStatus().find((b) => b.ccc === chk.root);
+					const { readWeixinCredential } = await import("./weixin-route-CHCWBvLZ.js").then((n) => n.o);
+					const accounts = (settings.accounts ?? []).map((a) => ({
+						accountId: a.accountId,
+						name: a.name ?? void 0,
+						enabled: a.enabled !== false,
+						bound: readWeixinCredential(chk.root, a.accountId) !== null
+					}));
+					sendJson$2(res, 200, {
+						enabled: settings.enabled === true,
+						botType: settings.botType ?? void 0,
+						accounts,
+						routes: settings.routes ?? [],
+						bridge: bridge?.accounts ?? []
+					});
+					return;
+				}
+				if (req.method !== "POST") {
+					sendJson$2(res, 405, { error: "method not allowed" });
+					return;
+				}
+				const raw = await readBody$3(req, 131072);
+				const body = JSON.parse(raw);
+				const chk = requireCcc(body.ccc);
+				if (!chk.ok) {
+					sendJson$2(res, 400, { error: chk.error });
+					return;
+				}
+				const root = chk.root;
+				if (body.action === "login-start") {
+					const { fetchQRCode } = await import("./weixin-api-b8HLmcPE.js").then((n) => n.r);
+					const { randomUUID } = await import("node:crypto");
+					for (const [key, v] of weixinLogins) if (Date.now() - v.startedAt > WEIXIN_LOGIN_TTL_MS) weixinLogins.delete(key);
+					const { readWeixinSettings } = await import("./weixin-route-CHCWBvLZ.js").then((n) => n.o);
+					const qr = await fetchQRCode({ botType: readWeixinSettings(root).botType ?? void 0 });
+					const loginKey = randomUUID();
+					weixinLogins.set(loginKey, {
+						root,
+						qrcode: qr.qrcode,
+						startedAt: Date.now(),
+						polling: false
+					});
+					sendJson$2(res, 200, {
+						qrcode: qr.qrcode,
+						qrcode_img_content: qr.qrcode_img_content,
+						loginKey
+					});
+					return;
+				}
+				if (body.action === "remove-account") {
+					if (!body.accountId) {
+						sendJson$2(res, 400, { error: "missing accountId" });
+						return;
+					}
+					const { removeWeixinAccount } = await import("./weixin-route-CHCWBvLZ.js").then((n) => n.o);
+					const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
+					removeWeixinAccount(root, body.accountId);
+					syncCccBridge(ctx, root);
+					sendJson$2(res, 200, { removed: body.accountId });
+					return;
+				}
+				if (body.action === "save-routes") {
+					const routes = body.routes ?? [];
+					if (!Array.isArray(routes) || routes.some((r) => typeof r?.user !== "string" || typeof r?.role !== "string" || r.user === "" || r.role === "")) {
+						sendJson$2(res, 400, { error: "invalid routes (expected [{user, role}, ...])" });
+						return;
+					}
+					const { saveWeixinRoutes } = await import("./weixin-route-CHCWBvLZ.js").then((n) => n.o);
+					const { readSkiffRoles } = await import("./skiff-role-Dw7UKCUm.js").then((n) => n.c);
+					const roles = readSkiffRoles(root);
+					for (const r of routes) if (!roles.has(r.role)) {
+						sendJson$2(res, 400, { error: `unknown role: ${r.role} (not in ${root} skiff.roles)` });
+						return;
+					}
+					saveWeixinRoutes(root, routes);
+					sendJson$2(res, 200, { saved: routes.length });
+					return;
+				}
+				if (body.action === "set-enabled") {
+					const enabled = body.enabled === true;
+					const { readWeixinSettings, setWeixinEnabled } = await import("./weixin-route-CHCWBvLZ.js").then((n) => n.o);
+					const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
+					const settings = readWeixinSettings(root);
+					if (enabled && (settings.accounts ?? []).length === 0) {
+						sendJson$2(res, 400, { error: "启用前请先扫码绑定至少一个账号" });
+						return;
+					}
+					setWeixinEnabled(root, enabled);
+					if (enabled) syncCccBridge(ctx, root);
+					else {
+						const { stopCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
+						stopCccBridge(root);
+					}
+					sendJson$2(res, 200, { enabled });
+					return;
+				}
+				sendJson$2(res, 400, { error: `unsupported action: ${body.action ?? ""}` });
+			} catch (err) {
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
+			}
+		}
+	});
+	ctx.webServer.register({
+		kind: "exact",
+		path: `${WEIXIN_PATH}/login`,
+		handler: async (req, res) => {
+			try {
+				if (req.headers["x-serenity-ui"] !== "1") {
+					sendJson$2(res, 403, { error: "微信桥配置仅限 WebUI（client 专用）" });
+					return;
+				}
+				if (req.method !== "GET") {
+					sendJson$2(res, 405, { error: "method not allowed" });
+					return;
+				}
+				const key = new URL(req.url ?? "/", "http://127.0.0.1").searchParams.get("key") ?? "";
+				const login = weixinLogins.get(key);
+				if (!login) {
+					sendJson$2(res, 404, { error: "login not found or expired" });
+					return;
+				}
+				if (Date.now() - login.startedAt > WEIXIN_LOGIN_TTL_MS) {
+					weixinLogins.delete(key);
+					sendJson$2(res, 200, { status: "expired" });
+					return;
+				}
+				const { pollQRStatus } = await import("./weixin-api-b8HLmcPE.js").then((n) => n.r);
+				const { readWeixinSettings } = await import("./weixin-route-CHCWBvLZ.js").then((n) => n.o);
+				const settings = readWeixinSettings(login.root);
+				const status = await pollQRStatus({
+					baseUrl: void 0,
+					qrcode: login.qrcode
+				});
+				switch (status.status) {
+					case "confirmed": {
+						if (!status.bot_token) {
+							sendJson$2(res, 200, {
+								status: "error",
+								error: "confirmed but no bot_token"
+							});
+							return;
+						}
+						const { upsertWeixinAccount, writeWeixinCredential } = await import("./weixin-route-CHCWBvLZ.js").then((n) => n.o);
+						const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
+						const accountId = `wechat-${(settings.accounts?.length ?? 0) + 1}`;
+						upsertWeixinAccount(login.root, {
+							accountId,
+							name: `微信 ${accountId}`,
+							enabled: true
+						});
+						writeWeixinCredential(login.root, accountId, {
+							token: status.bot_token,
+							baseUrl: status.baseurl ?? "",
+							userId: status.ilink_user_id
+						});
+						syncCccBridge(ctx, login.root);
+						weixinLogins.delete(key);
+						sendJson$2(res, 200, {
+							status: "confirmed",
+							accountId,
+							tokenSaved: true
+						});
+						return;
+					}
+					case "expired":
+						weixinLogins.delete(key);
+						sendJson$2(res, 200, { status: "expired" });
+						return;
+					default:
+						sendJson$2(res, 200, { status: status.status ?? "wait" });
+						return;
+				}
+			} catch (err) {
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
+			}
+		}
+	});
+}
+/** 进行中的扫码登录（loginKey → 状态；进程内，5min 有效） */
+const weixinLogins = /* @__PURE__ */ new Map();
+const WEIXIN_LOGIN_TTL_MS = 3e5;
+/** 校验微信桥面板操作的头/参数（x-serenity-ui + ccc 必填） */
+function requireCcc(root) {
+	if (!root || root.trim() === "") return {
+		ok: false,
+		error: "missing ccc param"
+	};
+	const serenityRoot = findSerenityRoot(root);
+	if (!serenityRoot) return {
+		ok: false,
+		error: `no CCC found from: ${root}`
+	};
+	return {
+		ok: true,
+		root: serenityRoot
+	};
 }
 //#endregion
 //#region src/seams/env.ts
@@ -12932,7 +12347,10 @@ async function handleAskParsed(ctx, ccc, body, res, ip) {
 			continued = true;
 		}
 	}
-	if (!agent) agent = (await createSkiffAgent(ctx, root, effectiveRole, effectiveCfg, readHandymanConfig(root)?.defaultModel)).agent;
+	if (!agent) {
+		const hc = readHandymanConfig(root);
+		agent = (await createSkiffAgent(ctx, root, effectiveRole, effectiveCfg, hc?.defaultModel)).agent;
+	}
 	const result = await askSkiff(ctx, agent, question, void 0, { includeTrajectory: false });
 	sendJson(res, 200, {
 		answer: result.answer,
@@ -13269,6 +12687,161 @@ qInput.focus()
 </html>`;
 }
 //#endregion
+//#region src/weixin-bridge.ts
+var weixin_bridge_exports = /* @__PURE__ */ __exportAll({
+	handleIncoming: () => handleIncoming,
+	registerWeixinBridge: () => registerWeixinBridge,
+	stopCccBridge: () => stopCccBridge,
+	syncCccBridge: () => syncCccBridge,
+	weixinBridgeStatus: () => weixinBridgeStatus
+});
+const bridges = /* @__PURE__ */ new Map();
+/** 轮询间隔（getupdates 失败后重试延迟；成功 = 立即续轮询） */
+const POLL_RETRY_MS = 3e3;
+/** 单账号轮询循环：getupdates 长轮询 → 逐消息分发 → 回复回写 */
+async function runAccountLoop(ctx, root, accountId, cred, loop) {
+	let buf = "";
+	while (!loop.stopped) {
+		loop.lastPollAt = Date.now();
+		try {
+			const resp = await getUpdates({
+				baseUrl: cred.baseUrl,
+				token: cred.token,
+				getUpdatesBuf: buf,
+				timeoutMs: 35e3
+			});
+			buf = resp.get_updates_buf ?? buf;
+			for (const msg of resp.msgs ?? []) {
+				if (loop.stopped) break;
+				if (msg.message_type !== 1) continue;
+				await handleIncoming(ctx, root, accountId, cred, msg);
+			}
+		} catch (err) {
+			loop.lastError = err instanceof Error ? err.message : String(err);
+			await new Promise((r) => setTimeout(r, POLL_RETRY_MS));
+		}
+	}
+}
+/**
+* 处理单条微信消息：路由 → skiff 会话（固定 id 创建/延续）→ 提问 → 回复回写。
+*
+* 会话语义：`weixinSessionIdFor(fromUserId)` 固定可重建——同用户长期同一会话；
+* 进程内已有（getSkiffAgent 命中）→ 延续；无（首次/进程重启）→ createSkiffAgent
+* 以固定 id 新建（角色不变，记忆从新开始——重启后自动重建，与 3100 问答页同语义）。
+*/
+async function handleIncoming(ctx, root, _accountId, cred, msg) {
+	const fromUserId = msg.from_user_id;
+	if (!fromUserId) return;
+	const text = extractWeixinText(msg);
+	if (!text) return;
+	const settings = readWeixinSettings(root);
+	if (!settings.enabled) return;
+	const roleName = matchWeixinRoute(settings.routes ?? [], fromUserId);
+	if (!roleName) return;
+	try {
+		const role = readSkiffRoles(root).get(roleName);
+		if (!role) {
+			console.log(`[serenity-hooks] weixin-bridge: 路由命中角色 "${roleName}" 但该 CCC 未定义（检查 skiff.roles）`);
+			return;
+		}
+		const sessionId = weixinSessionIdFor(fromUserId);
+		const existing = getSkiffAgent(sessionId);
+		const recreated = !existing;
+		const hc = readHandymanConfig(root);
+		const ref = existing ? {
+			agent: existing,
+			sessionId
+		} : await createSkiffAgent(ctx, root, roleName, role, hc?.defaultModel, sessionId);
+		if (recreated) await sendTextMessage({
+			baseUrl: cred.baseUrl,
+			token: cred.token,
+			toUserId: fromUserId,
+			text: "（新的对话已开始）",
+			contextToken: msg.context_token
+		}).catch(() => {});
+		const answer = (await askSkiff(ctx, ref.agent, text, void 0, { includeTrajectory: false })).answer ?? "";
+		if (answer === "") return;
+		await sendTextMessage({
+			baseUrl: cred.baseUrl,
+			token: cred.token,
+			toUserId: fromUserId,
+			text: answer,
+			contextToken: msg.context_token
+		});
+	} catch (err) {
+		console.log(`[serenity-hooks] weixin-bridge error (ccc=${root}): ${err instanceof Error ? err.message : String(err)}`);
+	}
+}
+/**
+* 启动/重建某 CCC 的桥：读配置 → 对每个 enabled + 有凭据的账号启动轮询循环。
+* 已存在（配置变化热重建）→ 先停旧循环再启动新的。
+*/
+function syncCccBridge(ctx, root) {
+	const existing = bridges.get(root);
+	if (existing) {
+		for (const loop of existing.loops.values()) loop.stopped = true;
+		bridges.delete(root);
+	}
+	const settings = readWeixinSettings(root);
+	if (!settings.enabled) return;
+	const bridge = {
+		root,
+		loops: /* @__PURE__ */ new Map()
+	};
+	for (const account of settings.accounts ?? []) {
+		if (account.enabled === false) continue;
+		const cred = readWeixinCredential(root, account.accountId);
+		if (!cred) continue;
+		const loop = {
+			stopped: false,
+			lastPollAt: 0
+		};
+		bridge.loops.set(account.accountId, loop);
+		runAccountLoop(ctx, root, account.accountId, cred, loop);
+	}
+	if (bridge.loops.size > 0) {
+		bridges.set(root, bridge);
+		console.log(`[serenity-hooks] ✓ weixin-bridge: ccc=${root} accounts=${[...bridge.loops.keys()].join(",")}`);
+	}
+}
+/** 停止某 CCC 的桥（移除账号/禁用时） */
+function stopCccBridge(root) {
+	const bridge = bridges.get(root);
+	if (!bridge) return;
+	for (const loop of bridge.loops.values()) loop.stopped = true;
+	bridges.delete(root);
+}
+/** 桥状态快照（面板数据源）：每 CCC → 每账号 → 轮询健康 */
+function weixinBridgeStatus() {
+	const out = [];
+	for (const [root, bridge] of bridges) out.push({
+		ccc: root,
+		accounts: [...bridge.loops.entries()].map(([accountId, loop]) => ({
+			accountId,
+			lastPollAt: loop.lastPollAt,
+			...loop.lastError ? { lastError: loop.lastError } : {}
+		}))
+	});
+	return out;
+}
+/**
+* 装配（index.ts 调用）：扫描 live CCC 启动桥 + 监听会话变化。
+* 事件驱动（对齐 autotrajectory v1.26.15）：live 会话出现 → 同步该 CCC 桥。
+*/
+function registerWeixinBridge(ctx) {
+	const syncFromLive = () => {
+		try {
+			const cwds = (ctx.sessions?.list?.() ?? []).map((s) => s.header?.cwd ?? "").filter(Boolean);
+			const roots = [...new Set(cwds.map((c) => findSerenityRoot(c))).values()].filter((r) => r !== null);
+			for (const root of roots) syncCccBridge(ctx, root);
+		} catch {}
+	};
+	syncFromLive();
+	try {
+		ctx.on("session/created", () => syncFromLive());
+	} catch {}
+}
+//#endregion
 //#region src/index.ts
 const name = "dsh-serenity-hooks";
 /** 主动调用的服务；其余（agent 事件）随 harness 装配必然存在 */
@@ -13351,6 +12924,7 @@ function apply(ctx, config) {
 	registerSkiff(ctx);
 	registerAcp(ctx);
 	registerAutoTrajectory(ctx);
+	registerWeixinBridge(ctx);
 }
 /**
 * F4 Skiff 调试服务装配：启停 = 人工（设置面板 Skiff 区块开关，settings 持久化）。