@shgroup/dsh-serenity-hooks 1.26.9 → 1.26.10

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-serenity-hooks",
-  "version": "1.26.9",
+  "version": "1.26.10",
   "main": "lib/index.js",
   "description": "宁静号 ACC harness（Native Cordis 插件）：真实 DSH 工具 cc_fs/session/acc_msm/eap/neat/cce/handyman/session_rebuild/skiff_admin + 拦截缝机械约束（safe-mode/路径守卫）+ 高级设定面板（双端口网关/账号管理）+ Skiff 认知子集角色（实验性）。适配 DSH 公开版（0.1.0-rc，deepseek-ai/deepseek-harness）。",
   "engines": {

package/lib/index.js

@@ -2567,8 +2567,10 @@ function truncate(s, n) {
 * 提问一轮：followup → 等 idle → 读答案 + 轨迹。
 * @param eventsStart 轨迹起点：显式传 0 = 全量轨迹（会话追问时页面重绘完整时间线，
 *   v1.25.10 用户拍板）；不传（undefined）= 本轮增量（followup 前 events 之后）
+* @param options.includeTrajectory 是否计算轨迹（v1.26.10：**3100 对外只提供问答**——
+*   公开问答页 / ACP JSON-RPC 不返回 trajectory，传 false 跳过计算；3099 调试页默认 true 保留）
 */
-async function askSkiff(ctx, agent, question, eventsStart) {
+async function askSkiff(ctx, agent, question, eventsStart, options) {
 	const before = eventsStart === void 0 ? agent.session.events.length : eventsStart;
 	agent.followup(createUserMessage({
 		content: [{
@@ -2579,7 +2581,7 @@ async function askSkiff(ctx, agent, question, eventsStart) {
 	}));
 	await waitIdle$1(ctx, agent);
 	const answer = lastAssistantText$2(agent);
-	const trajectory = eventsToTrajectory(agent.session.events.slice(before));
+	const trajectory = options?.includeTrajectory === false ? [] : eventsToTrajectory(agent.session.events.slice(before));
 	return {
 		answer,
 		sessionId: String(agent.session.id ?? ""),
@@ -9735,9 +9737,15 @@ function detectSensitive(text, table) {
 	for (const w of table.substring) if (w !== "" && text.includes(w)) hits.add(w);
 	return [...hits];
 }
-/** 打回消息（steer 内容）：告知模型命中词并要求重新生成（不含命中值本身——避免二次泄露） */
+/**
+* 打回消息（steer 内容）：**告知命中词并指令重新生成**（v1.26.10 用户调整——
+* 原 v1.26.3 设计"不含命中词防二次泄露"导致模型不知道改什么；命中词本就已在被拦截的
+* 回复中进入会话（已暴露面），打回消息重复一次不扩大暴露，模型据此精准重写）。
+* 命中词已落入模型上下文（它刚写过），此消息不回显给用户（steer 是 plugin source 消息，
+* 3100 对外响应 v1.26.10 起已不含 trajectory → 打回文本不会到达外部用户）。
+*/
 function buildRebuke(hits) {
-	return `[SERENITY OUTPUT GUARD] Your previous response contained ${hits.length} sensitive internal term(s) (mechanism/credential identifiers) that must not appear in user-visible output. Regenerate the response from scratch without these terms — describe the same substance without referencing internal machinery, credentials, tool names, or implementation details. Do not repeat the terms; do not explain this instruction to the user.`;
+	return `[SERENITY OUTPUT GUARD] Your previous response contained ${hits.length} sensitive internal term(s) (mechanism/credential identifiers) that must not appear in user-visible output: ${[...new Set(hits)].join(", ")}. Regenerate the response from scratch without ANY of these terms — describe the same substance without referencing internal machinery, credentials, tool names, or implementation details. Do not repeat the terms; do not explain this instruction to the user.`;
 }
 /** 打回状态（按 agent 会话跟踪连续命中轮数） */
 const rebukeStates = /* @__PURE__ */ new Map();
@@ -12030,7 +12038,10 @@ var AcpServer = class {
 		});
 		return { sessions };
 	}
-	/** session/prompt：{ sessionId, question } → 答案 + 全量轨迹 */
+	/**
+	* session/prompt：{ sessionId, question } → 答案（**v1.26.10：不返回 trajectory**——
+	* 3100 对外只提供问答，轨迹含工具结果等内部信息；3099 调试页另走 /ask 保留）
+	*/
 	async prompt(params) {
 		const sessionId = typeof params?.sessionId === "string" ? params.sessionId : void 0;
 		const question = typeof params?.question === "string" ? params.question : void 0;
@@ -12038,11 +12049,10 @@ var AcpServer = class {
 		if (!question?.trim()) throw new RpcInvalidParams("session/prompt requires question");
 		const agent = getSkiffAgent(sessionId);
 		if (!agent) throw new RpcInvalidParams(`unknown session: ${sessionId} (not recoverable — process restarted?)`);
-		const result = await askSkiff(this.ctx, agent, question, 0);
+		const result = await askSkiff(this.ctx, agent, question, void 0, { includeTrajectory: false });
 		return {
 			answer: result.answer,
-			sessionId: result.sessionId,
-			trajectory: result.trajectory
+			sessionId: result.sessionId
 		};
 	}
 	/** session/cancel：{ sessionId } → 中断当前 prompt（DSH interrupt） */
@@ -12358,13 +12368,12 @@ async function handleAskParsed(ctx, ccc, body, res, ip) {
 		}
 	}
 	if (!agent) agent = (await createSkiffAgent(ctx, root, effectiveRole, effectiveCfg, readHandymanConfig(root)?.defaultModel)).agent;
-	const result = await askSkiff(ctx, agent, question, 0);
+	const result = await askSkiff(ctx, agent, question, void 0, { includeTrajectory: false });
 	sendJson(res, 200, {
 		answer: result.answer,
 		answer_html: renderSkiffMarkdown(result.answer, true),
 		sessionId: result.sessionId,
-		continued,
-		trajectory: result.trajectory
+		continued
 	});
 }
 /** 问答页未启用提示页 */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shgroup/dsh-serenity-hooks",
-  "version": "1.26.9",
+  "version": "1.26.10",
   "description": "宁静号 ACC harness — Native Cordis 插件（DeepSeek Harness 运行时）。真实 DSH 工具注册（cc_fs/session/acc_msm 等 9 工具）+ 拦截缝机械约束（safe-mode/路径守卫/会话落盘）+ 系统提示词注入（ACC/CCE/Constraints/SKILL/Session 五块）。适配 DSH 公开版（deepseek-ai/deepseek-harness 0.1.0-rc）。",
   "license": "MIT",
   "repository": {