@shgroup/dsh-serenity-hooks 1.28.1 → 1.29.0

package/lib/index.js

@@ -18,6 +18,7 @@ import { createUserMessage } from "@deepseek-ai/dsh-llm";
 import { createHmac, randomBytes, randomUUID, scryptSync, timingSafeEqual } from "node:crypto";
 import { deriveEventMessage } from "@deepseek-ai/dsh-session";
 import { createServer, request } from "node:http";
+import * as zlib from "node:zlib";
 //#region src/fs-ops.ts
 /**
 * fs-ops.ts — cc_fs 纯操作层（零 DSH 依赖，可独立单测）
@@ -1427,7 +1428,7 @@ handyman（杂工）工具可用模型白名单（provider/model 列表）；未
     { "handyman": { "models": ["minimax-cn-coding-plan/MiniMax-M3"], "defaultModel": "minimax-cn-coding-plan/MiniMax-M3", "maxRounds": 100, "maxParallel": 10 } }
 
 ── 2. sessionKeeper.threshold ──
-SESSION-KEEPER 提醒机制的积分阈值（非 headless 主 agent）。
+trajectory-assistant（TRAJECTORY-ASSISTANT · CHECKPOINT）提醒机制的积分阈值（非 headless 主 agent）。
 按工具调用加权 + 耗时计分；达到阈值注入提醒，要求模型回复 ACK 码。
 
   Config:
@@ -3823,6 +3824,49 @@ function registerBootstrap(ctx) {
 	}, { prepend: true });
 }
 //#endregion
+//#region src/trajectory-assistant.ts
+/**
+* trajectory-assistant.ts — 关卡化注入的统一命名与风格门面（v0.3，S142）
+*
+* 概念（用户拍板 2026-09-05）：dsp 全部"过程中动态提示注入"统一命名为
+* trajectory-assistant（轨迹助航员）。关卡设计思想塑造**结构与时机**
+* （何时/何地注入），**不用于提示词用词**（D8 词法原则）——纯游戏黑话
+* （BOSS/XP/level-up）禁止出现在提示词文本；CHECKPOINT/LIMIT/TUTORIAL 等
+* 跨领域自然通用词允许。
+*
+* 本模块 = token 常量 + level-event 词汇表的**单一真相源**（避免前缀散落
+* 各文件字符串字面量）+ 风格门面（plain 默认 / metaphor 星舰变体）。
+* 仅当 style=metaphor 时前缀包装措辞变化；可行动正文不变 → 零行为漂移。
+*
+* 设计简写（L0 环境 / L1 教程 / L2 目标 / L3 检查点 / L4 极限 / L5 守卫 /
+* L6 结算）仅在本模块注释与内部文档出现，永不浮现在提示词文本。
+*
+* 结算（settlement）挂点：D6 用户拍板——若 CCC 有标准 SESSION 复盘仪式，
+* 结算视图归 trajectory-assistant。当前 close/archive 无复盘摘要 → 机制
+* 延后，仅留 onSettlement 导出 seam（OP-1，无调用者）。
+*/
+/** 可见提示词前缀用词（跨领域自然词，D8：无游戏黑话） */
+const EVENT_LABEL = {
+	/** 计分同步提醒（原 TRAJECTORY-STEWARD） */
+	checkpoint: "CHECKPOINT",
+	/** 上下文极限重建提醒（原 TRAJECTORY；LIMIT 替代被否的 BOSS——自然词） */
+	limit: "LIMIT",
+	/** 极限强制升级（原 TRAJECTORY-ESCALATED） */
+	limitMandatory: "LIMIT · MANDATORY",
+	/** 重建锚点头部（原 TRAJECTORY-REBUILD） */
+	rebuild: "REBUILD",
+	/** 敏感输出边界守卫（原 SERENITY OUTPUT GUARD） */
+	guard: "BOUNDARY GUARD"
+};
+/** 家族标识（所有动态注入统一前缀） */
+const ASSISTANT_PREFIX = "TRAJECTORY-ASSISTANT";
+/** 完整 token：`[TRAJECTORY-ASSISTANT · <LABEL>]` */
+function eventToken(event) {
+	return `[${ASSISTANT_PREFIX} · ${EVENT_LABEL[event]}]`;
+}
+/** ACK 确认码前缀（recorded/skipped 语义不变，仅家族名更新） */
+const ACK_PREFIX = `${ASSISTANT_PREFIX}-recorded`;
+//#endregion
 //#region src/rebuild.ts
 const PLUGIN_SOURCE$4 = {
 	kind: "plugin",
@@ -3849,7 +3893,7 @@ function buildRebuildAnchor(root, sessionName, activeMdPath, anchorMessages = DE
 	const sessionDir = basename(dirname(activeMdPath));
 	const sessionLine = sessionDir !== "AGENT_SESSIONS" ? `- Serenity session: ${sessionName !== "" ? `${sessionName} (${sessionDir})` : sessionDir}` : null;
 	return [
-		"[TRAJECTORY-REBUILD] The conversation has been cleared and rebuilt (Ship of Theseus: the carrier is replaced, the trajectory continues).",
+		`${eventToken("rebuild")} The conversation has been cleared and rebuilt (Ship of Theseus: the carrier is replaced, the trajectory continues).`,
 		"",
 		...anchorMessages.flatMap((text) => [stripAckSuffix(text), ""]),
 		sessionName !== "" ? `Continue the work of ${sessionName}.` : "Continue the current work.",
@@ -4074,7 +4118,7 @@ function registerRebuildTurnHook(ctx) {
 				agent.steer(createUserMessage({
 					content: [{
 						type: "text",
-						text: "[TRAJECTORY-REBUILD] The conversation has been cleared and rebuilt. Follow the anchor instructions above now: read the persistent trajectory (SESSION.md) and continue the work automatically from the last checkpoint."
+						text: `${eventToken("rebuild")} The conversation has been cleared and rebuilt. Follow the anchor instructions above now: read the persistent trajectory (SESSION.md) and continue the work automatically from the last checkpoint.`
 					}],
 					source: PLUGIN_SOURCE$4
 				}));
@@ -4136,7 +4180,7 @@ function renderText$3(value) {
 function createRebuildTool(ctx) {
 	return defineTool({
 		name: "session_rebuild",
-		description: "Trajectory-tracker overflow rebuild (Ship of Theseus): this session is the rebuildable carrier of a trajectory — the current conversation is discarded and rebuilt in place at the end of this turn with the anchor \"continue the work of {SESSION name}\" (first-anchor protocol body included), then auto-continues. SESSION.md (the trajectory's persistent body) stays in place; identity continues from it. Use when you receive a [TRAJECTORY] reminder (context above threshold), at a natural pause point. After triggering, resume from SESSION.md when this turn ends.",
+		description: "Trajectory-tracker overflow rebuild (Ship of Theseus): this session is the rebuildable carrier of a trajectory — the current conversation is discarded and rebuilt in place at the end of this turn with the anchor \"continue the work of {SESSION name}\" (first-anchor protocol body included), then auto-continues. SESSION.md (the trajectory's persistent body) stays in place; identity continues from it. Use when you receive a " + eventToken("limit") + " reminder (context above threshold), at a natural pause point. After triggering, resume from SESSION.md when this turn ends.",
 		parameters: {
 			note: {
 				type: "string",
@@ -4599,7 +4643,7 @@ function buildWakeMessage(opts) {
 		lines.push(`[轨迹焦点] ${opts.topPrompt}`);
 		lines.push("");
 	}
-	lines.push(`[Autopilot Trajectory 唤起] — 距上次轨迹活动已满 ${intervalLabel}，自动继续。`, "", `身份锚定：继续 ${opts.sessionName} 的 trajectory（SESSION.md: ${opts.mdPath}）。`, "先验偏见：");
+	lines.push(`[Autopilot Trajectory · 唤起] — 距上次轨迹活动已满 ${intervalLabel}，自动继续。`, "", `身份锚定：继续 ${opts.sessionName} 的 trajectory（SESSION.md: ${opts.mdPath}）。`, "先验偏见：");
 	if (opts.motivation) lines.push(`  · 自生动机：${opts.motivation}`);
 	if (opts.biasContent) lines.push(`  · 偏见内容：${opts.biasContent}`);
 	if (!opts.motivation && !opts.biasContent) lines.push("  · （无——本轮纯自主探索）");
@@ -5127,7 +5171,7 @@ var KeeperTracker = class {
 	}
 };
 function reminderText(code, score) {
-	return `[TRAJECTORY-STEWARD] Score threshold reached (${score}). Please acknowledge with [TRAJECTORY-STEWARD-recorded-${code}] once progress is synced to the working session (acc-session show). No need to interrupt your work — just acknowledge inline and keep going.`;
+	return `${eventToken("checkpoint")} Score threshold reached (${score}). Please acknowledge with [${ACK_PREFIX}-${code}] once progress is synced to the working session (acc-session show). No need to interrupt your work — just acknowledge inline and keep going.`;
 }
 /**
 * F2 rebuild 提示（v1.21；v1.22.1 对齐"轨迹跟踪器"概念；v1.23.0 英化 + 载体关系；
@@ -5146,8 +5190,8 @@ function reminderText(code, score) {
 * thresholdK = 配置阈值（千 token）；文案 `Context usage at NNNK (threshold NNNK)`。
 */
 function rebuildReminderText(tokensK, thresholdK, escalated = false) {
-	if (escalated) return `[TRAJECTORY-ESCALATED] Context usage at ${Math.round(tokensK)}K (threshold ${Math.round(thresholdK)}K) — you have been reminded repeatedly and have NOT called session_rebuild. This is now mandatory: STOP at the current task step, preserve valuable cognition into the CCC skills (or write a new-skill proposal into SESSION.md), then call the session_rebuild tool immediately, passing --summary "<content summary ≤20 chars>" (required; the dsh session title is renamed to S###-YYYY-MM-DD-<summary> after rebuild). The conversation will be cleared and rebuilt in place; SESSION.md is the persistent trajectory and stays in place — identity continues from it. Do not continue working without rebuilding; this reminder persists until you call session_rebuild.`;
-	return `[TRAJECTORY] Context usage at ${Math.round(tokensK)}K (threshold ${Math.round(thresholdK)}K). This session is the rebuildable carrier of the trajectory: SESSION.md is the persistent body, this conversation is only a temporary work copy. Before rebuilding: if this conversation produced valuable cognition, revise the relevant existing skill of this CCC (structure it with eap); if a new skill is warranted, write a short proposal into SESSION.md for the user to review — do not create it yourself. ACT NOW: at the next natural pause (end of the current task step), call the session_rebuild tool — passing --summary "<content summary ≤20 chars>" describing the next work phase (required; the dsh session title is renamed to S###-YYYY-MM-DD-<summary> after rebuild) — to clear and rebuild this conversation: the current copy is discarded, identity continues from SESSION.md. If you are in the middle of an unbreakable step, continue it, then rebuild at its end. Do not ignore this; rebuild is the expected action, not an option.`;
+	if (escalated) return `${eventToken("limitMandatory")} Context usage at ${Math.round(tokensK)}K (threshold ${Math.round(thresholdK)}K) — you have been reminded repeatedly and have NOT called session_rebuild. This is now mandatory: STOP at the current task step, preserve valuable cognition into the CCC skills (or write a new-skill proposal into SESSION.md), then call the session_rebuild tool immediately, passing --summary "<content summary ≤20 chars>" (required; the dsh session title is renamed to S###-YYYY-MM-DD-<summary> after rebuild). The conversation will be cleared and rebuilt in place; SESSION.md is the persistent trajectory and stays in place — identity continues from it. Do not continue working without rebuilding; this reminder persists until you call session_rebuild.`;
+	return `${eventToken("limit")} Context usage at ${Math.round(tokensK)}K (threshold ${Math.round(thresholdK)}K). This session is the rebuildable carrier of the trajectory: SESSION.md is the persistent body, this conversation is only a temporary work copy. Before rebuilding: if this conversation produced valuable cognition, revise the relevant existing skill of this CCC (structure it with eap); if a new skill is warranted, write a short proposal into SESSION.md for the user to review — do not create it yourself. ACT NOW: at the next natural pause (end of the current task step), call the session_rebuild tool — passing --summary "<content summary ≤20 chars>" describing the next work phase (required; the dsh session title is renamed to S###-YYYY-MM-DD-<summary> after rebuild) — to clear and rebuild this conversation: the current copy is discarded, identity continues from SESSION.md. If you are in the middle of an unbreakable step, continue it, then rebuild at its end. Do not ignore this; rebuild is the expected action, not an option.`;
 }
 /** 读取会话 contextPressure 投影（sessionProjections 可选服务；未装配返回 null） */
 function readContextPressure(ctx, session) {
@@ -5904,22 +5948,25 @@ function eapBlock() {
 	].join("\n");
 }
 /**
-* Metaphor 强化块（v1.19.6，S142）：宁静号宇宙隐喻域（船/海/罗盘/日志/船员）。
+* Metaphor 强化块（v1.19.6，S142；v1.29 星舰意象升级，S142 用户拍板）：
+* 宁静号宇宙隐喻域（星舰/深空/航程/船员）。海船→星舰意象：one starship, one voyage；
+* deep space / launch / docking clamp；Departure Inspection（原 Harbor Inspection）。
 * 隐喻是记忆钩子——形象唤起约束，前述块保持规则精确。每条隐喻 = 一个不可违背的
 * 物理事实 + 行为判据（verdict）。全英文（与 CCE/Constraints 一致）；独立块可
 * 回退；无 osp 对应（dsp 扩展，不进对齐断言参照）。
+* 结构约束（docs/metaphor-domain.md M-1~M-4）：三层骨架不变 + 每条映射约束不变。
 */
 function metaphorBlock() {
 	return [
 		"",
 		"=== Serenity Metaphor ===",
-		"The Serenity Universe — one ship, one sea. Metaphors are memory hooks:",
+		"The Serenity Universe — one starship, one voyage. Metaphors are memory hooks:",
 		"they make constraints vivid, while the rules above stay precise. Each",
 		"metaphor is an unbreakable physical fact; violating one is a behavioral",
 		"violation. The universe is structured in three layers — the Ship (the",
 		"container itself), the Voyage (the cognitive lifecycle), the Crew",
 		"(multi-agent collaboration); every metaphor maps to one protocol",
-		"constraint. The Sea has no mistakes — only waters you have not yet charted.",
+		"constraint. Deep space has no mistakes — only stars you have not yet mapped.",
 		"",
 		"THE SHIP — the container itself",
 		"",
@@ -5929,8 +5976,8 @@ function metaphorBlock() {
 		"   container = overload.",
 		"",
 		"2. Deck Order → Entropy (H_op). Clutter on deck raises the cost of",
-		"   finding things. H_op ≤ H_critical = the ship stays afloat.",
-		"   Verdict: disorganized output = stones on deck.",
+		"   finding things. H_op ≤ H_critical = the ship stays flight-worthy.",
+		"   Verdict: disorganized output = debris in the hold.",
 		"",
 		"3. Engineering Drawings → EAP. Every part dimensioned (E↑), the",
 		"   drawings rebuild the whole machine (R↓), the drawings are reusable",
@@ -5946,14 +5993,14 @@ function metaphorBlock() {
 		"   is on the manifest (mech-registry); there is exactly one manifest.",
 		"   An MSM self-describes (--help/--schema) — the manifest is the only",
 		"   key. Verdict: duplicating a tool's usage in documents = two",
-		"   contradictory charts.",
+		"   contradictory star charts.",
 		"",
 		"THE VOYAGE — the cognitive lifecycle",
 		"",
-		"6. Harbor Inspection → First Anchor. The first anchor = departure",
-		"   inspection: confirm identity (ACC manifesto), logbook (SESSION),",
-		"   ballast (constraints) before setting sail. Verdict: skipping the",
-		"   anchor and working directly = sailing uninspected.",
+		"6. Departure Inspection → First Anchor. The departure inspection = pre-",
+		"   launch checklist: confirm identity (ACC manifesto), logbook (SESSION),",
+		"   ballast (constraints) before setting course. Verdict: skipping the",
+		"   inspection and launching directly = flying uninspected.",
 		"",
 		"7. The Logbook → Session Tracking. SESSION.md is the trajectory's logbook —",
 		"   the persistent body of the voyage; sessions are rebuildable carriers of",
@@ -6089,12 +6136,12 @@ function sessionBlock(root, scope = DEFAULT_SESSION_SCOPE) {
 		"This preserves the session context across todo updates.",
 		"Do NOT remove or reorder this item — keep it at position 0.",
 		"",
-		"TRAJECTORY-STEWARD: a background tracker scores your tool use (write/edit=3,",
+		"TRAJECTORY-ASSISTANT: a background tracker scores your tool use (write/edit=3,",
 		"task=10, read/grep/glob/msm=1, +1 per minute) and reminds you with a",
-		"[TRAJECTORY-STEWARD] message when the threshold is reached. On every such",
+		"[TRAJECTORY-ASSISTANT · CHECKPOINT] message when the threshold is reached. On every such",
 		"reminder you MUST reply with the exact ACK code:",
-		"  [TRAJECTORY-STEWARD-recorded-{code}]  — if you recorded progress to SESSION.md",
-		"  [TRAJECTORY-STEWARD-skipped-{code}]  — if nothing to record this round",
+		"  [TRAJECTORY-ASSISTANT-recorded-{code}]  — if you recorded progress to SESSION.md",
+		"  [TRAJECTORY-ASSISTANT-skipped-{code}]  — if nothing to record this round",
 		"Do not ignore the reminder; do not stop ongoing work. Codes are single-use;",
 		"never reuse a prior code.",
 		""
@@ -7024,6 +7071,58 @@ function registerStatusApi(ctx, opts = {}) {
 			}
 		}
 	});
+	ctx.webServer.register({
+		kind: "exact",
+		path: "/serenity/session-cleanup",
+		handler: async (req, res) => {
+			try {
+				const url = new URL(req.url ?? "/", "http://127.0.0.1");
+				const daysParam = Number(url.searchParams.get("olderThanDays") ?? "30");
+				const days = Number.isFinite(daysParam) && daysParam >= 1 ? daysParam : 30;
+				const sessions = ctx.get("sessions");
+				const liveIds = /* @__PURE__ */ new Set();
+				if (sessions?.list) for (const s of sessions.list()) {
+					const id = s.id ?? s.header?.id;
+					if (id) liveIds.add(id);
+				}
+				const { sessionsRootDir, collectEligibleSessions, performCleanup, cutoffDaysAgo } = await import("./session-cleanup-PahSNvjI.js");
+				const root = sessionsRootDir();
+				if (req.method === "GET") {
+					const { candidates } = performCleanup(root, cutoffDaysAgo(days), liveIds, { dryRun: true });
+					sendJson$1(res, 200, {
+						root,
+						olderThanDays: days,
+						dryRun: true,
+						count: candidates.length,
+						candidates: candidates.map((c) => ({
+							id: c.id,
+							project: c.project,
+							lastActive: new Date(c.lastActiveMs).toISOString()
+						}))
+					});
+					return;
+				}
+				if (req.method !== "POST") {
+					sendJson$1(res, 405, { error: "method not allowed" });
+					return;
+				}
+				if (req.headers["x-serenity-ui"] !== "1") {
+					sendJson$1(res, 403, { error: "会话清理仅限 WebUI（client 专用）" });
+					return;
+				}
+				const { result } = performCleanup(root, cutoffDaysAgo(days), liveIds);
+				sendJson$1(res, 200, {
+					root,
+					olderThanDays: days,
+					dryRun: false,
+					deleted: result.deleted,
+					errors: result.errors
+				});
+			} catch (err) {
+				sendJson$1(res, 400, { error: err.message ?? String(err) });
+			}
+		}
+	});
 }
 /** 进行中的扫码登录（loginKey → 状态；进程内，5min 有效） */
 const weixinLogins = /* @__PURE__ */ new Map();
@@ -7453,7 +7552,9 @@ function workspaceDenyResponse(rpcId) {
 		}
 	});
 }
-/** 在 HTML 的 </head> 前注入 polyfill（幂等：含 marker 则跳过） */
+/**
+* 在 HTML 的 </head> 前注入 polyfill（幂等：含 marker 则跳过）
+*/
 function injectPolyfillHtml(html) {
 	if (html.includes(POLYFILL_MARKER)) return html;
 	const head = RANDOM_UUID_POLYFILL.replace("<script>", `<script ${POLYFILL_MARKER}="1">`);
@@ -7461,6 +7562,37 @@ function injectPolyfillHtml(html) {
 	return `${head}\n${html}`;
 }
 /**
+* 反代 HTML 响应注入变换（v1.28.2 修复，S142 白屏根因）：
+* 上游按 Accept-Encoding 可能返回 gzip/br/deflate 压缩的 HTML——注入必须在**明文**上进行，
+* 把压缩字节 toString 当文本注入会破坏压缩流（找不到 </head> → polyfill 前置 → HTML 损坏
+* → 浏览器白屏，用户实测 https://dsh.notfoundhome.cc 登录后白屏）。
+*
+* @param raw - 上游响应完整 body（可能压缩）
+* @param upstreamHeaders - 上游响应头（node IncomingHttpHeaders 形态）
+* @returns { body, headers } 注入后的明文 body + 修正后的响应头（去 content-encoding/transfer-encoding、
+*          重算 content-length）；解压失败返回 null（调用方应原样透传避免破坏）
+*/
+function transformHtmlForProxy(raw, upstreamHeaders) {
+	let body = raw;
+	const enc = String(upstreamHeaders["content-encoding"] ?? "").toLowerCase().trim();
+	const outHeaders = { ...upstreamHeaders };
+	if (enc === "gzip" || enc === "x-gzip" || enc === "deflate" || enc === "br") try {
+		if (enc === "br") body = zlib.brotliDecompressSync(body);
+		else if (enc === "deflate") body = zlib.inflateSync(body);
+		else body = zlib.gunzipSync(body);
+		delete outHeaders["content-encoding"];
+	} catch {
+		return null;
+	}
+	const transformed = injectPolyfillHtml(body.toString("utf-8"));
+	outHeaders["content-length"] = Buffer.byteLength(transformed);
+	delete outHeaders["transfer-encoding"];
+	return {
+		body: transformed,
+		headers: outHeaders
+	};
+}
+/**
 * 反代请求头构造（v1.22.1 信任栅栏修复，纯逻辑可测）：
 * DSH isTrustedApiRequest 要求 Origin.host === Host.host——Host 改写为 loopback 后
 * Origin 必须同步改写（浏览器 POST 必带 Origin，透传外部地址 → 403）。
@@ -7475,6 +7607,69 @@ function buildProxyHeaders(reqHeaders, mainPort, bodyOverride) {
 	return headers;
 }
 //#endregion
+//#region src/gateway-dsh-auth.ts
+/** 从一组 set-cookie 头提取 `dsh-auth-*` cookie（browser-auth sessionCookie 首段） */
+function pickDshCookie(setCookieHeader) {
+	const entries = Array.isArray(setCookieHeader) ? setCookieHeader : setCookieHeader === void 0 ? [] : [setCookieHeader];
+	for (const entry of entries) {
+		const first = entry.split(";", 1)[0].trim();
+		if (first.startsWith("dsh-auth-") && first.includes("=")) return first;
+	}
+}
+/**
+* 把 dsh browser cookie 合并进现有 Cookie 头（保持外部既有 cookie——serenity_session 等）。
+* 现有头可为 string / string[]（node 头形态）；无现有 → 只返回 dsh cookie。
+*/
+function mergeCookieHeader(existing, dshCookie) {
+	const existingStr = Array.isArray(existing) ? existing.join("; ") : typeof existing === "string" && existing !== "" ? existing : void 0;
+	return existingStr !== void 0 ? `${existingStr}; ${dshCookie}` : dshCookie;
+}
+/**
+* 内存换取 authority 绑定的 dsh browser cookie（S142 拍板方案核心）。
+* 用官方通道在进程内完成 token→cookie 交换：构造一个对 `http://<authority>/?token=…`
+* 的 index 请求 → connection.authorizeIndex 校验 token → 写 set-cookie → 提取 cookie。
+* @returns cookie 头值（如 `dsh-auth-xxx=v1.…`）；authority/connection 异常 → undefined
+*/
+function exchangeDshCookie(connection, authority) {
+	try {
+		const url = new URL(connection.authenticatedUrl(`http://${authority}`));
+		if (url.searchParams.get("token") === null) return void 0;
+		const headers = { host: authority };
+		const request = {
+			url: `${url.pathname}${url.search}`,
+			method: "GET",
+			headers
+		};
+		let captured;
+		const response = {
+			writeHead(_status, headers) {
+				if (headers !== void 0) captured = headers["set-cookie"];
+				return response;
+			},
+			end: () => response
+		};
+		connection.authorizeIndex(request, response);
+		return pickDshCookie(captured);
+	} catch {
+		return;
+	}
+}
+/**
+* 构建一个带内存缓存的 dsh cookie 提供者（S142 拍板：内存缓存，不落盘）。
+* 惰性换取：首次调用才向 connection 换；失败返回 undefined（不缓存失败——下次重试）。
+* 调用方可周期性失效缓存重换（cookie 30 天有效；进程重启 token 仍在 → 换一次长期可用）。
+*/
+function createDshCookieProvider(connection, authority) {
+	let cached;
+	return () => {
+		if (connection === void 0) return void 0;
+		if (cached !== void 0) return cached;
+		const cookie = exchangeDshCookie(connection, authority);
+		if (cookie !== void 0) cached = cookie;
+		return cookie;
+	};
+}
+//#endregion
 //#region src/gateway.ts
 /** 读取请求体（≤ maxBytes；超限 reject） */
 function readBody$1(req, maxBytes) {
@@ -7497,7 +7692,7 @@ function readBody$1(req, maxBytes) {
 * @param config - 监听/代理配置。
 * @param getAccounts - 运行时读取账号列表（plugin 全局文件；gateway.enabled 开关在调用方判）。
 */
-function startGateway(config, getAccounts) {
+function startGateway(config, getAccounts, getDshCookie) {
 	const { host, port, cookieName, mainPort, loginDelayMs } = config;
 	const allowWorkspaces = config.allowWorkspaces ?? [];
 	const cookieSecure = config.cookieSecure === true;
@@ -7506,6 +7701,18 @@ function startGateway(config, getAccounts) {
 	/** 校验请求 Cookie 是否含有效 token（v1.22.4：滑动过期 + 返回会话供审计） */
 	const authed = (req) => validateToken(cookieValue(req.headers.cookie, cookieName));
 	/**
+	* 构造上游请求头（buildProxyHeaders 基准 + dsh browser cookie 注入）。
+	* v1.28.2（0.1.2-rc.1 BrowserAuth 适配）：主端口 /api + index 需 dsh browser cookie。
+	* 反代 Host 已改写 loopback（过信任栅栏）→ 只缺 cookie → 注入内存换取 cookie
+	*（createDshCookieProvider 官方通道，零落盘）。无 cookie（旧 dsh/换取失败）→ 不注入向后兼容。
+	*/
+	const upstreamHeaders = (req, bodyOverride) => {
+		const headers = buildProxyHeaders(req.headers, mainPort, bodyOverride);
+		const dshCookie = getDshCookie?.();
+		if (dshCookie !== void 0) headers.cookie = mergeCookieHeader(headers.cookie, dshCookie);
+		return headers;
+	};
+	/**
 	* 反向代理：改写 Host + Origin 头 → 主端口（loopback 过信任栅栏）。
 	* v1.22.1 修复：DSH 信任栅栏（api-request-trust.ts isTrustedApiRequest）要求
 	* **Origin.host === Host.host**——仅改写 Host（127.0.0.1:3080）而 Origin 透传
@@ -7516,7 +7723,7 @@ function startGateway(config, getAccounts) {
 	* @param bodyOverride - workspace.create 已读 body 时的重放（白名单检查后转发）
 	*/
 	const proxy = (req, res, bodyOverride) => {
-		const headers = buildProxyHeaders(req.headers, mainPort, bodyOverride);
+		const headers = upstreamHeaders(req, bodyOverride);
 		const target = request({
 			host: "127.0.0.1",
 			port: mainPort,
@@ -7530,13 +7737,15 @@ function startGateway(config, getAccounts) {
 				const chunks = [];
 				upstream.on("data", (c) => chunks.push(c));
 				upstream.on("end", () => {
-					const transformed = injectPolyfillHtml(Buffer.concat(chunks).toString("utf-8"));
-					const out = {
-						...upstream.headers,
-						"content-length": Buffer.byteLength(transformed)
-					};
-					res.writeHead(status, out);
-					res.end(transformed);
+					let raw = Buffer.concat(chunks);
+					const transformedRes = transformHtmlForProxy(raw, upstream.headers);
+					if (transformedRes === null) {
+						res.writeHead(status, upstream.headers);
+						res.end(raw);
+						return;
+					}
+					res.writeHead(status, transformedRes.headers);
+					res.end(transformedRes.body);
 				});
 				upstream.on("error", () => {
 					try {
@@ -7767,7 +7976,7 @@ function startGateway(config, getAccounts) {
 			port: mainPort,
 			path: req.url ?? "/",
 			method: req.method,
-			headers: buildProxyHeaders(req.headers, mainPort)
+			headers: upstreamHeaders(req)
 		});
 		upstream.on("upgrade", (ures, usock, uhead) => {
 			usocket = usock;
@@ -7841,6 +8050,42 @@ function startGateway(config, getAccounts) {
 		}
 	};
 }
+/**
+* 构造 dsh browser cookie 提供者（v1.28.2 0.1.2-rc.1 BrowserAuth 适配）：
+* 经 ctx.connection（HostConnectionHandle）官方通道在内存换取 authority=127.0.0.1:<mainPort>
+* 的 cookie 并缓存（createDshCookieProvider 惰性换取）。connection 缺失（旧 dsh/非 web 装配）
+* → provider 返回 undefined → 反代不注入（旧形态无 BrowserAuth，天然兼容）。
+*
+* v1.28.2 修复：**connection 每次调用现取**（不绑定 sync 时点）——gateway sync 在 apply
+* 早期跑，此时 connection 服务可能尚未装配（web-app 的 URL 打印在其后）；首次反代请求
+* 到达时 connection 必已就绪。cachedProvider 缓存换取结果（同一 connection 实例）。
+*/
+function buildDshCookieProvider(ctx, mainPort) {
+	const authority = `127.0.0.1:${mainPort}`;
+	let cachedProvider;
+	let diagnosed = false;
+	return () => {
+		try {
+			const connection = ctx.get?.("connection");
+			if (!connection || typeof connection.authenticatedUrl !== "function" || typeof connection.authorizeIndex !== "function") {
+				if (!diagnosed) {
+					diagnosed = true;
+					console.log("[serenity-hooks] dsh browser-auth 适配: connection ✗ 不可取（不注入 dsh cookie——旧 dsh/非 web 装配兼容）");
+				}
+				return;
+			}
+			if (cachedProvider === void 0) cachedProvider = createDshCookieProvider(connection, authority);
+			const cookie = cachedProvider();
+			if (!diagnosed) {
+				diagnosed = true;
+				console.log(`[serenity-hooks] dsh browser-auth 适配: connection ✓ 可取 + cookie ${cookie === void 0 ? "✗ 换取失败（上游 401 时检查）" : "✓ 已内存换取（注入反代）"}`);
+			}
+			return cookie;
+		} catch {
+			return;
+		}
+	};
+}
 /** 注册 gateway（index.ts apply 调用）。
 * 归属原则（v1.22）：gateway 是 plugin 全局能力——enabled 开关读 DSH settings
 * （readSimpleSettings().gatewayEnabled），host/port/accounts 读 plugin 全局文件
@@ -7878,7 +8123,7 @@ function registerGateway(ctx) {
 				cookieSecure: settings.gateway.cookieSecure === true,
 				allowWorkspaceCreate: settings.gateway.allowWorkspaceCreate !== false,
 				totpEnabled: settings.gateway.totpEnabled === true
-			}, () => readAdvancedSettings().gateway.accounts);
+			}, () => readAdvancedSettings().gateway.accounts, buildDshCookieProvider(ctx, webServer.port));
 			const accounts = settings.gateway.accounts.length;
 			const wsNote = settings.gateway.workspaces.length === 0 ? "" : `；工作区白名单 ${settings.gateway.workspaces.length} 条`;
 			console.log(`[serenity-hooks] gateway 已启动: http://${settings.gateway.host}:${settings.gateway.port} → 127.0.0.1:${webServer.port}` + (accounts === 0 ? "（⚠️ 未配置账号，登录页将提示）" : `（${accounts} 个账号）`) + wsNote);
@@ -7941,6 +8186,8 @@ const MECHANISM_WORDS = [
 	"tools/post-execute",
 	"session_rebuild",
 	"Trajectory Steward",
+	"TRAJECTORY-STEWARD",
+	"TRAJECTORY-ASSISTANT",
 	"first-anchor",
 	"拦截缝",
 	"装配层",
@@ -8043,7 +8290,9 @@ const CATEGORY_GUIDE = {
 */
 function buildRebuke(hits) {
 	const count = hits.length;
-	return `[SERENITY OUTPUT GUARD] Your previous response contained ${count} sensitive internal ${count === 1 ? "term" : "terms"} that must not appear in user-visible output:\n${hits.map((h) => `- "${h.word}" — ${CATEGORY_GUIDE[h.category]}`).join("\n")}\nRegenerate the response from scratch without ANY of these — describe the same substance without referencing internal machinery, credentials, ports, tool names, or implementation details. Do not repeat the terms; do not explain this instruction to the user.`;
+	const noun = count === 1 ? "term" : "terms";
+	const lines = hits.map((h) => `- "${h.word}" — ${CATEGORY_GUIDE[h.category]}`).join("\n");
+	return `${eventToken("guard")} Your previous response contained ${count} sensitive internal ${noun} that must not appear in user-visible output:\n${lines}\nRegenerate the response from scratch without ANY of these — describe the same substance without referencing internal machinery, credentials, ports, tool names, or implementation details. Do not repeat the terms; do not explain this instruction to the user.`;
 }
 /** 打回状态（按 agent 会话跟踪连续命中轮数） */
 const rebukeStates = /* @__PURE__ */ new Map();

package/lib/msm-ops.d.ts

@@ -19,7 +19,7 @@ export declare const MSM_ACTIONS: readonly MsmAction[];
 export declare const ACC_CATALOG = "\u2550\u2550\u2550 ACC Usage Catalog \u2550\u2550\u2550\nDirectory of ACC capabilities \u2014 each area lists where to go for details (guides live with their feature; this catalog only points).\n\n  \u2460 \u4F1A\u8BDD\u4E0E\u8F68\u8FF9        \u2192 session tool\uFF08list/show/create/use/close/health/qa/archive/summary/hook-develop-guide\uFF09\n                         session_rebuild\uFF08\u8D85\u9650\u91CD\u5EFA\uFF1B\u9608\u503C K \u89C1 ccc-config / \u8BBE\u7F6E\u9762\u677F\u91CD\u5EFA\u9608\u503CK\uFF09\n  \u2461 \u8BA4\u77E5\u8D28\u91CF\u6846\u67B6      \u2192 eap\uFF08E\u2191/R\u2193/S\u2191\uFF09/ neat\uFF08Neat \u534F\u8BAE\uFF09/ cce\uFF08\u8BA4\u77E5\u8FDE\u7EED\u6027\u5DE5\u7A0B\uFF09\u2014\u2014\u6E10\u8FDB\u62AB\u9732\uFF0C\u65E0\u53C2\u5373\u5168\u6587\n  \u2462 \u5DE5\u5177\u4E0E\u6267\u884C        \u2192 cc_fs\uFF08\u6587\u4EF6\u7CFB\u7EDF 15 \u5B50\u547D\u4EE4\uFF09/ cc_git\uFF08git\uFF09/ acc_kit\uFF08health \u542B\u6CE8\u518C\u8868\u68C0\u67E5/time/wait\uFF09\n                         acc_msm\uFF08MSM \u6846\u67B6\uFF1A\u672C\u5DE5\u5177 list/exec/register/deregister/check/guide/ccc-config/catalog\uFF09\n                         handyman\uFF08\u6742\u5DE5 agent \u7F16\u6392\u2014\u2014guide \u5B50\u547D\u4EE4\uFF1Aacc_msm exec handyman guide\uFF09\n  \u2463 \u89D2\u8272\u4E0E\u5BF9\u5916\u9762      \u2192 skiff_admin\uFF08Skiff \u8BA4\u77E5\u5B50\u96C6\u89D2\u8272\uFF1Aguide/validate/apply/list\u2014\u2014acc_msm exec skiff_admin guide\uFF09\n                         ACP\uFF08\u7A0B\u5E8F\u5316 JSON-RPC 3100\uFF09/ Skiff \u95EE\u7B54\u9875\uFF08\u516C\u7F51 ask\uFF09\u2014\u2014\u9762\u677F\u300C\u5916\u90E8\u80FD\u529B\u300D\u7EC4\n  \u2464 \u81EA\u4E3B\u4E0E\u63A5\u5165        \u2192 autopilot-trajectory\uFF08Autopilot \u4E00\u7AD9\u5F0F\uFF1Aall/init/random/diag/doc/check/status/guide\uFF09\n                         weixin \u5FAE\u4FE1\u6865\uFF08\u914D\u7F6E/\u626B\u7801/\u8DEF\u7531/\u6D88\u606F hook\u2014\u2014CCC \u4FA7 weixin-doctor MSM\uFF1Aacc_msm exec weixin-doctor guide\uFF09\n  \u2465 CCC \u914D\u7F6E\u603B\u89C8      \u2192 acc_msm ccc-config\uFF088 \u6BB5\uFF1Ahandyman/sessionKeeper/localstore/hooks/safeMode/skiff/autopilotTrajectory/weixin\uFF09\n  \u2466 \u6CE8\u518C\u8868\u4E0E\u5B89\u5168      \u2192 mech-registry.json \u7531 acc_msm register/deregister \u7BA1\u7406\uFF08\u5199\u4FDD\u62A4\u2014\u2014\u4E0D\u53EF\u76F4\u63A5\u7F16\u8F91\uFF09\n                         acc_kit health \u8F93\u51FA registry \u5B8C\u6574\u6027\u68C0\u67E5\uFF1B\u635F\u574F\u6062\u590D\u6307\u5F15\u89C1 health registry.issues\n\n\u6BCF\u533A\uFF1A\u4E00\u53E5\u8BDD\u5B9A\u4F4D + \u8BE6\u7EC6\u5165\u53E3\uFF08\u5DE5\u5177\u540D / guide \u5B50\u547D\u4EE4\uFF09\u3002\u8BE6\u60C5\u6C38\u8FDC\u4EE5\u5BF9\u5E94\u5DE5\u5177\u7684 guide/ccc-config \u4E3A\u5355\u4E00\u771F\u76F8\u6E90\u3002\n";
 export declare const MSM_GUIDE = "MSM Development Manual (Mech & Semi-Mech framework)\n\n## What it is\nMSM = the executable-unit layer. Mech is pure TS with zero LLM reasoning; Semi-Mech is a TS framework + LLM decision points.\nMSM is ACC's deterministic executable-unit layer \u2014 all shell/exec operations go through MSM and cannot be bypassed.\n\n## Registering a new MSM (acc_msm register)\n1. Write the script under <skill>/scripts/ (runnable via tsx; must include a main() CLI guard with an import.meta.url check)\n2. acc_msm register <name> --skill <s> --path <script path relative to root> --category <mech|semi-mech> --description <desc>\n3. Auto-writes mech-registry.json (preserving the original format) + git commit (commits only the registry file)\n4. Validation: path must be inside root, script must exist, name must be globally unique\n\n## flag schema (v1)\nflags is a new-style object array for parameter validation and path-escape guarding:\n  [{\"name\":\"output\",\"type\":\"string\",\"description\":\"output path\"},\n   {\"name\":\"target\",\"type\":\"path\",\"description\":\"operation target (type:path enables in-root validation + symlink defense)\"},\n   {\"name\":\"force\",\"type\":\"boolean\",\"description\":\"force mode\",\"default\":false}]\n- {name, type} format \u2014 new style, type:\"path\" enables the path-escape guard\n- {flag, description} format \u2014 old style, CLI flag description string\n- On registration, flags are passed via acc_msm register --flags '<json>' (the tool currently parses the name style)\n\n## Script conventions\n- Top-of-file documentation: purpose / usage / exit codes\n- Exit codes: 0 success / 1 user / 2 system / 3 operator (per ACC protocol classification)\n- main() CLI guard (DC-M2): the script must start with\n    if (import.meta.url === `file://${process.argv[1]}`) { main() }\n  or an equivalent isMain / require.main === check \u2014 so vitest imports never trigger top-level code\n- A paired .test.ts or .spec.ts (DC-M1, vitest)\n- Business subprocess environment: SERENITY_ROOT / SERENITY_CCC / SERENITY_VERSION injected\n\n## Interaction & confirmation conventions (no blocking confirmation)\n- MSMs run in **user-less subprocesses** (spawn/execFile, 600s timeout) \u2014 **never** use\n  readline / prompt / process.stdin etc. to block waiting for user input (it would hang until killed by the timeout)\n- When a second confirmation is needed: **directly return the confirmation request** (list the operation to perform and its impact + how to retry with the confirmation flag),\n  returning a non-zero exit code (or an explicit hint)\n- After the agent confirms, **re-invoke the MSM with the confirmation flag** (e.g. --confirm / --yes / --force) to retry\n- Standard mode (two-phase):\n  1. First call: destructive/confirmation-requiring operation detected and no confirmation flag present \u2192 output the confirmation request (list operation/impact/rollback),\n     exit non-zero (e.g. 1 user), **perform no changes**\n  2. After the agent evaluates, re-invoke: with the confirmation flag \u2192 execute and output the result\n- Applies to: delete/overwrite/push/batch operations and other irreversible or wide-impact operations\n- Anti-example (forbidden): readline waiting for user input, process.stdin.on('data') blocking waits\n  (MSMs have no stdin interaction channel \u2014 they hang until the 600s timeout)\n\n## Quality checks (acc_msm check, DC-M1~M4)\nDC-M1 has .test.ts/.spec.ts; DC-M2 has a main() guard (function main( / isMain / require.main === / import.meta.url);\nDC-M3 bidirectional: scripts unregistered + registry references missing scripts; DC-M4 path-type flags marked type:\"path\"\n\n## Self-description (protocol flags, first argument only)\nacc_msm exec <name> --list        \u2014 list all MSMs\nacc_msm exec <name> --schema <n>   \u2014 view a specific MSM's parameter schema\nacc_msm exec <name> --format=json  \u2014 JSON output mode (remaining args passed through losslessly)\n";
 /** CCC 配置参考（对齐 osp ccc-config action） */
-export declare const CCC_CONFIG_REFERENCE = "\u2550\u2550\u2550 CCC Configuration Reference \u2550\u2550\u2550\n\nCCC-level features are configured in .opencode/serenity.json.\nBelow are all available configuration sections.\n\n\u2500\u2500 1. handyman.models \u2500\u2500\nhandyman\uFF08\u6742\u5DE5\uFF09\u5DE5\u5177\u53EF\u7528\u6A21\u578B\u767D\u540D\u5355\uFF08provider/model \u5217\u8868\uFF09\uFF1B\u672A\u914D\u7F6E\u65F6 handyman \u62A5\u9519\u8981\u6C42\u914D\u7F6E\u3002\n\u7F3A\u7701\u6A21\u578B = models[0]\uFF08\u53EF\u7528 handyman.defaultModel \u6307\u5B9A\uFF0C\u5FC5\u987B \u2208 models\uFF09\u3002\n\n  Config:\n    { \"handyman\": { \"models\": [\"provider/model-name\"] } }\n\n  Example:\n    { \"handyman\": { \"models\": [\"minimax-cn-coding-plan/MiniMax-M3\"], \"defaultModel\": \"minimax-cn-coding-plan/MiniMax-M3\", \"maxRounds\": 100, \"maxParallel\": 10 } }\n\n\u2500\u2500 2. sessionKeeper.threshold \u2500\u2500\nSESSION-KEEPER \u63D0\u9192\u673A\u5236\u7684\u79EF\u5206\u9608\u503C\uFF08\u975E headless \u4E3B agent\uFF09\u3002\n\u6309\u5DE5\u5177\u8C03\u7528\u52A0\u6743 + \u8017\u65F6\u8BA1\u5206\uFF1B\u8FBE\u5230\u9608\u503C\u6CE8\u5165\u63D0\u9192\uFF0C\u8981\u6C42\u6A21\u578B\u56DE\u590D ACK \u7801\u3002\n\n  Config:\n    { \"sessionKeeper\": { \"threshold\": 150 } }\n\n  \u8BA1\u5206\uFF1Awrite/edit = 3\uFF0Ctask = 10\uFF0Cread/grep/glob/msm \u7B49 = 1\uFF0C\u65F6\u95F4 = 1/\u5206\u949F\n  \u9ED8\u8BA4\uFF1A150\n\n\u2500\u2500 3. localstore.gitTrack \u2500\u2500\nlocalstore.json \u7684 git \u7B56\u7565\uFF1Aallow \u53EF\u63D0\u4EA4 / deny \u7981\u63D0\u4EA4\uFF08\u9ED8\u8BA4 deny\uFF09\u3002\ndeny \u65F6\u5199\u5165\u81EA\u52A8\u786E\u4FDD .gitignore \u542B\u8BE5\u6587\u4EF6\uFF08\u7269\u7406\u4FDD\u8BC1\uFF09\uFF0Ccc_git commit \u4F1A\u68C0\u67E5\u62D2\u7EDD\u3002\n\n  Config:\n    { \"localstore\": { \"gitTrack\": \"allow\" } }\n\n\u2500\u2500 4. hooks.autoRestoreSession \u2500\u2500\n\u4F1A\u8BDD\u81EA\u52A8\u6062\u590D\uFF08\u9ED8\u8BA4 true\uFF1B\u53D7 events \u95E8\u63A7\u2014\u2014\u4EC5\u6839\u4F1A\u8BDD + \u5DF2\u6709\u5BF9\u8BDD\u5386\u53F2\u624D\u6062\u590D\uFF09\u3002\n\n  Config:\n    { \"hooks\": { \"autoRestoreSession\": false } }\n\n\u2500\u2500 5. safeMode / blacklist \u2500\u2500\nsafe-mode \u7531 WebUI \u5F00\u5173\u63A7\u5236\uFF08\u5199 .serenity-safe-on \u6807\u8BB0\uFF09\uFF1B\u9ED1\u540D\u5355\u8DEF\u5F84\u53D7 guards seam \u62E6\u622A\u3002\n\n  Config:\n    { \"safeMode\": { \"blacklist\": [\".secrets/\"] } }\n\n\u2500\u2500 6. skiff.roles\uFF08F4 \u8BA4\u77E5\u5B50\u96C6\u89D2\u8272\uFF09\u2500\u2500\nSkiff \u89D2\u8272 = \u5168\u77E5\u5168\u80FD trajectory \u7684\u4EFB\u610F\u5B50\u96C6\uFF08CCC \u5B9A\u4E49\uFF09\u3002\u6BCF\u89D2\u8272\u72EC\u7ACB\u6A21\u578B + \u53CC\u767D\u540D\u5355\n\uFF08MSM \u767D\u540D\u5355 msms[] \u4E0E\u975E MSM \u5DE5\u5177\u767D\u540D\u5355 tools[]\uFF0C\u767D\u540D\u5355\u5916\u5168\u9690\u85CF\uFF1Bskill \u52A0\u8F7D\u6052\u53EF\u7528\uFF09\u3002\ntrajectory \u7EAA\u5F8B\u5B50\u96C6\uFF08session/keeper/rebuild \u53C2\u4E0E\u9879\uFF09\u9ED8\u8BA4\u5168\u5173 = \u5B8C\u5168\u72EC\u7ACB\u3002\nsystemPrompt \u5185\u8054 \u6216 systemPromptFile\uFF08.md \u5F15\u7528\uFF0C\u63A8\u8350\uFF09\u2014\u2014\u89D2\u8272\u4F1A\u8BDD\u7684\u5B8C\u6574\u4EBA\u683C/\u8FB9\u754C\u63D0\u793A\u8BCD\u3002\nvalidate \u6821\u9A8C / apply \u751F\u6548 / list \u67E5\u770B\uFF1Aacc_msm exec skiff_admin <guide|validate|apply|list>\u3002\n\n  Config:\n    { \"skiff\": { \"roles\": {\n        \"qa\": {\n          \"model\": \"provider/model\",\n          \"msms\": [\"web-search\", \"vlm-describe\"],\n          \"tools\": [\"read\", \"grep\", \"glob\"],\n          \"systemPromptFile\": \".opencode/skiff/qa.md\"\n        } } } }\n\n\u2500\u2500 7. autopilotTrajectory\uFF08\u81EA\u52A8\u5DE1\u822A\u8F68\u8FF9\uFF09\u2500\u2500\nCCC \u5B9A\u4E49\u7684\u4E00\u6761\u81EA\u4E3B trajectory\u2014\u2014\u65F6\u949F\u5230\u70B9\u81EA\u52A8\u5524\u8D77\uFF08\u524D\u53F0\u6CE8\u5165\uFF0C\u7528\u6237\u53EF\u89C1\u53EF\u4ECB\u5165\uFF09\u3002\n\u672A\u914D\u7F6E\u6216 enabled=false \u2192 \u5B8C\u5168\u4E0D\u542F\u52A8\uFF08\u96F6\u8D44\u6E90\u5360\u7528\uFF09\u3002\u591A CCC \u72EC\u7ACB\uFF1A\u6BCF CCC \u81EA\u5DF1\u7684\u914D\u7F6E\u3002\n\u5524\u8D77\u6D88\u606F\u56DB\u6BB5\u5F0F\uFF1A\u8F68\u8FF9\u7126\u70B9 topPrompt\uFF08\u6700\u5148\u6CE8\u5165\uFF0C\u7A33\u5B9A\u951A\uFF09\u2192 \u8EAB\u4EFD\u951A\u5B9A \u2192 \u5148\u9A8C\u504F\u89C1\n\uFF08CCC \u6839\u811A\u672C biasProvider \u8F93\u51FA\uFF09\u2192 \u4EFB\u52A1\u3002\u76EE\u6807\u4F1A\u8BDD session \u5FC5\u586B\uFF08\u76EE\u5F55\u987B\u5E26 --auto \u540E\u7F00\uFF09\u3002\n\u8BCA\u65AD/\u72B6\u6001/\u7ACB\u5373\u5524\u8D77\uFF1Aacc_msm exec autopilot-trajectory <all|check|status|diag>\u3002\n\n  Config:\n    { \"autopilotTrajectory\": {\n        \"enabled\": true,\n        \"intervalHours\": 2,\n        \"session\": \"S151\",\n        \"biasProvider\": \"autopilot-bias.ts\",\n        \"topPrompt\": \"\u672C\u8F68\u8FF9\u6838\u5FC3\u76EE\u6807/\u7EAA\u5F8B/\u8D28\u91CF\u8981\u6C42\uFF08CCC \u81EA\u586B\uFF0C\u9632\u6F02\u79FB\uFF09\",\n        \"avoidWakeHours\": { \"start\": 8, \"end\": 18 }\n      } }\n\n\u2500\u2500 8. weixin\uFF08\u5FAE\u4FE1\u6865 F4c-3\uFF0C\u542B\u6D88\u606F\u8BB0\u5F55 hook\uFF09\u2500\u2500\nCCC \u7EA7\u5FAE\u4FE1\u4E2A\u4EBA\u53F7\u63A5\u5165\uFF08iLink \u534F\u8BAE\uFF09\uFF1Adsh \u4E00\u8FDB\u7A0B\u591A CCC\uFF0C\u6BCF CCC \u72EC\u7ACB\u5BF9\u63A5\u5FAE\u4FE1\u6865\u3002\n\u8D26\u53F7/\u8DEF\u7531/\u5F00\u5173\u5728\u6B64\u6587\u4EF6\uFF1B**bot_token \u51ED\u636E\u5728 CCC localstore credential scope**\n\uFF08\u626B\u7801\u7ED1\u5B9A\u540E\u81EA\u52A8\u5199\u5165\uFF0C\u6C38\u4E0D\u8FDB git \u660E\u6587\u9762\uFF09\u3002\n\u8DEF\u7531 user \u2192 role\uFF1Aexact \u4F18\u5148\uFF0C* \u901A\u914D\u515C\u5E95\uFF1Brole \u5FC5\u987B \u2208 \u8BE5 CCC skiff.roles\u3002\n\u9762\u677F\uFF08WebUI \u8BBE\u7F6E \u2192 \u5FAE\u4FE1\u6865\uFF09\u53EF\u626B\u7801\u7ED1\u5B9A/\u79FB\u9664\u8D26\u53F7/\u7F16\u8F91\u8DEF\u7531\uFF1Bacc_msm exec weixin-doctor\n<status|diag|verify> \u6392\u67E5\u3002\u51ED\u636E\u4E3B\u52A8\u67E5\u770B\uFF1Alocalstore get WEIXIN_<ACCOUNT>_TOKEN\u3002\n\n  Config:\n    { \"weixin\": {\n        \"enabled\": true,\n        \"hook\": \"scripts/weixin-message-hook.ts\",\n        \"accounts\": [{ \"accountId\": \"wechat-1\", \"name\": \"\u5BB6\u5EAD\u52A9\u624B\", \"enabled\": true }],\n        \"routes\": [{ \"user\": \"*\", \"role\": \"zhaocai\" }]\n      } }\n\n  \u25B8 weixin.hook\uFF08\u6D88\u606F\u8BB0\u5F55 hook\uFF0Cv1.27.13\uFF09\uFF1A\n  \u5FAE\u4FE1\u6865\u6BCF\u6536/\u53D1\u4E00\u6761\u6D88\u606F\u89E6\u53D1\u4E00\u6B21 CCC \u81EA\u5199\u811A\u672C\uFF0C\u7531 CCC \u81EA\u884C\u6301\u4E45\u5316\u4FDD\u5B58\uFF08\u5B58\u54EA/\u5B58\u6210\u4EC0\u4E48\n  /\u662F\u5426\u5165\u5E93\u5168\u5F52 CCC\u2014\u2014ACC \u4E0D\u7ED1\u5B9A\u5B58\u50A8\uFF09\u3002\u672A\u914D\u7F6E hook \u2192 \u96F6\u53D8\u5316\uFF08\u4E0D\u89E6\u53D1\uFF09\u3002\n\n  \u89E6\u53D1\uFF08\u53CC\u5411\uFF09\uFF1A\n    incoming  = \u7528\u6237 \u2192 bot\uFF1A\u8DEF\u7531\u547D\u4E2D\u540E\u3001\u5A92\u4F53\u843D\u76D8\u540E\u89E6\u53D1\uFF08\u6587\u672C\u542B\u8BED\u97F3\u8F6C\u5199\uFF1B\u5A92\u4F53\u5E26\u843D\u76D8 relPath\uFF09\n    outgoing  = bot \u2192 \u7528\u6237\uFF1A\u56DE\u590D\u53D1\u9001\u6210\u529F\u540E\u89E6\u53D1\uFF08reply = \u7528\u6237\u5B9E\u9645\u6536\u5230\u7684\u7EAF\u6587\u672C\uFF0C\u5DF2\u5265\u79BB think\uFF09\n\n  \u811A\u672C\u7EA6\u5B9A\uFF08\u4E8B\u4EF6 JSON \u5355\u884C\u7ECF stdin \u4F20\u5165\uFF1Bbun \u4F18\u5148 node \u515C\u5E95\uFF09\uFF1A\n    #!/usr/bin/env bun  \u6216  node script.js \u2014\u2014 \u8BFB process.stdin \u6574\u6BB5 JSON.parse\n    const ev = JSON.parse(await new Response(process.stdin).text())\n    ev.event === 'incoming' | 'outgoing'\n\n  \u4E8B\u4EF6 schema\uFF08**\u4E0D\u542B\u4EFB\u4F55\u4F1A\u8BDD\u51ED\u636E**\u2014\u2014context_token/bot_token/token/aes_key \u5747\u4E0D\u51FA\u73B0\uFF09\uFF1A\n    { \"event\": \"incoming\", \"ts\": 1788359941488, \"cccRoot\": \"/path/ccc\",\n      \"accountId\": \"wechat-1\", \"userId\": \"u1@im.wechat\",\n      \"sessionId\": \"skiff-weixin-xxx\", \"role\": \"zhaocai\",\n      \"message\": { \"text\": \"\u4F60\u597D\", \"media\": [{ \"kind\": \"image\", \"relPath\": \"_tmp/weixin-inbound/<hash>/img_x.jpg\" }] } }\n    { \"event\": \"outgoing\", \"ts\": ..., \"cccRoot\": ..., \"accountId\": ...,\n      \"userId\": ..., \"sessionId\": ..., \"role\": ...,\n      \"reply\": \"\u5DF2\u8BB0\u5F55\uFF08\u7EAF\u6587\u672C\uFF09\" }\n\n  \u793A\u4F8B\u811A\u672C\uFF08\u8FFD\u52A0\u5230\u6309\u65E5\u6587\u4EF6\u2014\u2014\u6301\u4E45\u5316\u5F52 CCC \u81EA\u9009\uFF1A\u6587\u4EF6/DB/\u8FDC\u7AEF\u5747\u53EF\uFF09\uFF1A\n    const fs = require('node:fs'); const p = '/path/ccc/AGENT_SESSIONS/_weixin-log.jsonl';\n    fs.appendFileSync(p, JSON.stringify(ev) + '\\n');\n\n  \u6267\u884C\u8BED\u4E49\uFF08\u65C1\u8DEF\u5BB9\u5FCD\uFF09\uFF1A\u5F02\u6B65 fire-and-forget + 15s \u8D85\u65F6 kill + \u5931\u8D25\u4EC5\u65E5\u5FD7\u2014\u2014\n  \u5FAE\u4FE1\u6865\u6D88\u606F\u5904\u7406/\u56DE\u590D\u4E0D\u53D7 hook \u5F71\u54CD\uFF1B\u811A\u672C\u987B\u5728 CCC \u6839\u5185\uFF08\u8DEF\u5F84\u9003\u9038\u62D2\u7EDD\uFF09\u3002\n  \u5A92\u4F53 relPath \u6307\u5411 _tmp/weixin-inbound/\uFF08\u4E34\u65F6\u76EE\u5F55\uFF09\u2014\u2014\u9700\u6301\u4E45\u4FDD\u5B58\u5A92\u4F53\u6587\u4EF6\u8BF7\u81EA\u884C copy\u3002\n";
+export declare const CCC_CONFIG_REFERENCE = "\u2550\u2550\u2550 CCC Configuration Reference \u2550\u2550\u2550\n\nCCC-level features are configured in .opencode/serenity.json.\nBelow are all available configuration sections.\n\n\u2500\u2500 1. handyman.models \u2500\u2500\nhandyman\uFF08\u6742\u5DE5\uFF09\u5DE5\u5177\u53EF\u7528\u6A21\u578B\u767D\u540D\u5355\uFF08provider/model \u5217\u8868\uFF09\uFF1B\u672A\u914D\u7F6E\u65F6 handyman \u62A5\u9519\u8981\u6C42\u914D\u7F6E\u3002\n\u7F3A\u7701\u6A21\u578B = models[0]\uFF08\u53EF\u7528 handyman.defaultModel \u6307\u5B9A\uFF0C\u5FC5\u987B \u2208 models\uFF09\u3002\n\n  Config:\n    { \"handyman\": { \"models\": [\"provider/model-name\"] } }\n\n  Example:\n    { \"handyman\": { \"models\": [\"minimax-cn-coding-plan/MiniMax-M3\"], \"defaultModel\": \"minimax-cn-coding-plan/MiniMax-M3\", \"maxRounds\": 100, \"maxParallel\": 10 } }\n\n\u2500\u2500 2. sessionKeeper.threshold \u2500\u2500\ntrajectory-assistant\uFF08TRAJECTORY-ASSISTANT \u00B7 CHECKPOINT\uFF09\u63D0\u9192\u673A\u5236\u7684\u79EF\u5206\u9608\u503C\uFF08\u975E headless \u4E3B agent\uFF09\u3002\n\u6309\u5DE5\u5177\u8C03\u7528\u52A0\u6743 + \u8017\u65F6\u8BA1\u5206\uFF1B\u8FBE\u5230\u9608\u503C\u6CE8\u5165\u63D0\u9192\uFF0C\u8981\u6C42\u6A21\u578B\u56DE\u590D ACK \u7801\u3002\n\n  Config:\n    { \"sessionKeeper\": { \"threshold\": 150 } }\n\n  \u8BA1\u5206\uFF1Awrite/edit = 3\uFF0Ctask = 10\uFF0Cread/grep/glob/msm \u7B49 = 1\uFF0C\u65F6\u95F4 = 1/\u5206\u949F\n  \u9ED8\u8BA4\uFF1A150\n\n\u2500\u2500 3. localstore.gitTrack \u2500\u2500\nlocalstore.json \u7684 git \u7B56\u7565\uFF1Aallow \u53EF\u63D0\u4EA4 / deny \u7981\u63D0\u4EA4\uFF08\u9ED8\u8BA4 deny\uFF09\u3002\ndeny \u65F6\u5199\u5165\u81EA\u52A8\u786E\u4FDD .gitignore \u542B\u8BE5\u6587\u4EF6\uFF08\u7269\u7406\u4FDD\u8BC1\uFF09\uFF0Ccc_git commit \u4F1A\u68C0\u67E5\u62D2\u7EDD\u3002\n\n  Config:\n    { \"localstore\": { \"gitTrack\": \"allow\" } }\n\n\u2500\u2500 4. hooks.autoRestoreSession \u2500\u2500\n\u4F1A\u8BDD\u81EA\u52A8\u6062\u590D\uFF08\u9ED8\u8BA4 true\uFF1B\u53D7 events \u95E8\u63A7\u2014\u2014\u4EC5\u6839\u4F1A\u8BDD + \u5DF2\u6709\u5BF9\u8BDD\u5386\u53F2\u624D\u6062\u590D\uFF09\u3002\n\n  Config:\n    { \"hooks\": { \"autoRestoreSession\": false } }\n\n\u2500\u2500 5. safeMode / blacklist \u2500\u2500\nsafe-mode \u7531 WebUI \u5F00\u5173\u63A7\u5236\uFF08\u5199 .serenity-safe-on \u6807\u8BB0\uFF09\uFF1B\u9ED1\u540D\u5355\u8DEF\u5F84\u53D7 guards seam \u62E6\u622A\u3002\n\n  Config:\n    { \"safeMode\": { \"blacklist\": [\".secrets/\"] } }\n\n\u2500\u2500 6. skiff.roles\uFF08F4 \u8BA4\u77E5\u5B50\u96C6\u89D2\u8272\uFF09\u2500\u2500\nSkiff \u89D2\u8272 = \u5168\u77E5\u5168\u80FD trajectory \u7684\u4EFB\u610F\u5B50\u96C6\uFF08CCC \u5B9A\u4E49\uFF09\u3002\u6BCF\u89D2\u8272\u72EC\u7ACB\u6A21\u578B + \u53CC\u767D\u540D\u5355\n\uFF08MSM \u767D\u540D\u5355 msms[] \u4E0E\u975E MSM \u5DE5\u5177\u767D\u540D\u5355 tools[]\uFF0C\u767D\u540D\u5355\u5916\u5168\u9690\u85CF\uFF1Bskill \u52A0\u8F7D\u6052\u53EF\u7528\uFF09\u3002\ntrajectory \u7EAA\u5F8B\u5B50\u96C6\uFF08session/keeper/rebuild \u53C2\u4E0E\u9879\uFF09\u9ED8\u8BA4\u5168\u5173 = \u5B8C\u5168\u72EC\u7ACB\u3002\nsystemPrompt \u5185\u8054 \u6216 systemPromptFile\uFF08.md \u5F15\u7528\uFF0C\u63A8\u8350\uFF09\u2014\u2014\u89D2\u8272\u4F1A\u8BDD\u7684\u5B8C\u6574\u4EBA\u683C/\u8FB9\u754C\u63D0\u793A\u8BCD\u3002\nvalidate \u6821\u9A8C / apply \u751F\u6548 / list \u67E5\u770B\uFF1Aacc_msm exec skiff_admin <guide|validate|apply|list>\u3002\n\n  Config:\n    { \"skiff\": { \"roles\": {\n        \"qa\": {\n          \"model\": \"provider/model\",\n          \"msms\": [\"web-search\", \"vlm-describe\"],\n          \"tools\": [\"read\", \"grep\", \"glob\"],\n          \"systemPromptFile\": \".opencode/skiff/qa.md\"\n        } } } }\n\n\u2500\u2500 7. autopilotTrajectory\uFF08\u81EA\u52A8\u5DE1\u822A\u8F68\u8FF9\uFF09\u2500\u2500\nCCC \u5B9A\u4E49\u7684\u4E00\u6761\u81EA\u4E3B trajectory\u2014\u2014\u65F6\u949F\u5230\u70B9\u81EA\u52A8\u5524\u8D77\uFF08\u524D\u53F0\u6CE8\u5165\uFF0C\u7528\u6237\u53EF\u89C1\u53EF\u4ECB\u5165\uFF09\u3002\n\u672A\u914D\u7F6E\u6216 enabled=false \u2192 \u5B8C\u5168\u4E0D\u542F\u52A8\uFF08\u96F6\u8D44\u6E90\u5360\u7528\uFF09\u3002\u591A CCC \u72EC\u7ACB\uFF1A\u6BCF CCC \u81EA\u5DF1\u7684\u914D\u7F6E\u3002\n\u5524\u8D77\u6D88\u606F\u56DB\u6BB5\u5F0F\uFF1A\u8F68\u8FF9\u7126\u70B9 topPrompt\uFF08\u6700\u5148\u6CE8\u5165\uFF0C\u7A33\u5B9A\u951A\uFF09\u2192 \u8EAB\u4EFD\u951A\u5B9A \u2192 \u5148\u9A8C\u504F\u89C1\n\uFF08CCC \u6839\u811A\u672C biasProvider \u8F93\u51FA\uFF09\u2192 \u4EFB\u52A1\u3002\u76EE\u6807\u4F1A\u8BDD session \u5FC5\u586B\uFF08\u76EE\u5F55\u987B\u5E26 --auto \u540E\u7F00\uFF09\u3002\n\u8BCA\u65AD/\u72B6\u6001/\u7ACB\u5373\u5524\u8D77\uFF1Aacc_msm exec autopilot-trajectory <all|check|status|diag>\u3002\n\n  Config:\n    { \"autopilotTrajectory\": {\n        \"enabled\": true,\n        \"intervalHours\": 2,\n        \"session\": \"S151\",\n        \"biasProvider\": \"autopilot-bias.ts\",\n        \"topPrompt\": \"\u672C\u8F68\u8FF9\u6838\u5FC3\u76EE\u6807/\u7EAA\u5F8B/\u8D28\u91CF\u8981\u6C42\uFF08CCC \u81EA\u586B\uFF0C\u9632\u6F02\u79FB\uFF09\",\n        \"avoidWakeHours\": { \"start\": 8, \"end\": 18 }\n      } }\n\n\u2500\u2500 8. weixin\uFF08\u5FAE\u4FE1\u6865 F4c-3\uFF0C\u542B\u6D88\u606F\u8BB0\u5F55 hook\uFF09\u2500\u2500\nCCC \u7EA7\u5FAE\u4FE1\u4E2A\u4EBA\u53F7\u63A5\u5165\uFF08iLink \u534F\u8BAE\uFF09\uFF1Adsh \u4E00\u8FDB\u7A0B\u591A CCC\uFF0C\u6BCF CCC \u72EC\u7ACB\u5BF9\u63A5\u5FAE\u4FE1\u6865\u3002\n\u8D26\u53F7/\u8DEF\u7531/\u5F00\u5173\u5728\u6B64\u6587\u4EF6\uFF1B**bot_token \u51ED\u636E\u5728 CCC localstore credential scope**\n\uFF08\u626B\u7801\u7ED1\u5B9A\u540E\u81EA\u52A8\u5199\u5165\uFF0C\u6C38\u4E0D\u8FDB git \u660E\u6587\u9762\uFF09\u3002\n\u8DEF\u7531 user \u2192 role\uFF1Aexact \u4F18\u5148\uFF0C* \u901A\u914D\u515C\u5E95\uFF1Brole \u5FC5\u987B \u2208 \u8BE5 CCC skiff.roles\u3002\n\u9762\u677F\uFF08WebUI \u8BBE\u7F6E \u2192 \u5FAE\u4FE1\u6865\uFF09\u53EF\u626B\u7801\u7ED1\u5B9A/\u79FB\u9664\u8D26\u53F7/\u7F16\u8F91\u8DEF\u7531\uFF1Bacc_msm exec weixin-doctor\n<status|diag|verify> \u6392\u67E5\u3002\u51ED\u636E\u4E3B\u52A8\u67E5\u770B\uFF1Alocalstore get WEIXIN_<ACCOUNT>_TOKEN\u3002\n\n  Config:\n    { \"weixin\": {\n        \"enabled\": true,\n        \"hook\": \"scripts/weixin-message-hook.ts\",\n        \"accounts\": [{ \"accountId\": \"wechat-1\", \"name\": \"\u5BB6\u5EAD\u52A9\u624B\", \"enabled\": true }],\n        \"routes\": [{ \"user\": \"*\", \"role\": \"zhaocai\" }]\n      } }\n\n  \u25B8 weixin.hook\uFF08\u6D88\u606F\u8BB0\u5F55 hook\uFF0Cv1.27.13\uFF09\uFF1A\n  \u5FAE\u4FE1\u6865\u6BCF\u6536/\u53D1\u4E00\u6761\u6D88\u606F\u89E6\u53D1\u4E00\u6B21 CCC \u81EA\u5199\u811A\u672C\uFF0C\u7531 CCC \u81EA\u884C\u6301\u4E45\u5316\u4FDD\u5B58\uFF08\u5B58\u54EA/\u5B58\u6210\u4EC0\u4E48\n  /\u662F\u5426\u5165\u5E93\u5168\u5F52 CCC\u2014\u2014ACC \u4E0D\u7ED1\u5B9A\u5B58\u50A8\uFF09\u3002\u672A\u914D\u7F6E hook \u2192 \u96F6\u53D8\u5316\uFF08\u4E0D\u89E6\u53D1\uFF09\u3002\n\n  \u89E6\u53D1\uFF08\u53CC\u5411\uFF09\uFF1A\n    incoming  = \u7528\u6237 \u2192 bot\uFF1A\u8DEF\u7531\u547D\u4E2D\u540E\u3001\u5A92\u4F53\u843D\u76D8\u540E\u89E6\u53D1\uFF08\u6587\u672C\u542B\u8BED\u97F3\u8F6C\u5199\uFF1B\u5A92\u4F53\u5E26\u843D\u76D8 relPath\uFF09\n    outgoing  = bot \u2192 \u7528\u6237\uFF1A\u56DE\u590D\u53D1\u9001\u6210\u529F\u540E\u89E6\u53D1\uFF08reply = \u7528\u6237\u5B9E\u9645\u6536\u5230\u7684\u7EAF\u6587\u672C\uFF0C\u5DF2\u5265\u79BB think\uFF09\n\n  \u811A\u672C\u7EA6\u5B9A\uFF08\u4E8B\u4EF6 JSON \u5355\u884C\u7ECF stdin \u4F20\u5165\uFF1Bbun \u4F18\u5148 node \u515C\u5E95\uFF09\uFF1A\n    #!/usr/bin/env bun  \u6216  node script.js \u2014\u2014 \u8BFB process.stdin \u6574\u6BB5 JSON.parse\n    const ev = JSON.parse(await new Response(process.stdin).text())\n    ev.event === 'incoming' | 'outgoing'\n\n  \u4E8B\u4EF6 schema\uFF08**\u4E0D\u542B\u4EFB\u4F55\u4F1A\u8BDD\u51ED\u636E**\u2014\u2014context_token/bot_token/token/aes_key \u5747\u4E0D\u51FA\u73B0\uFF09\uFF1A\n    { \"event\": \"incoming\", \"ts\": 1788359941488, \"cccRoot\": \"/path/ccc\",\n      \"accountId\": \"wechat-1\", \"userId\": \"u1@im.wechat\",\n      \"sessionId\": \"skiff-weixin-xxx\", \"role\": \"zhaocai\",\n      \"message\": { \"text\": \"\u4F60\u597D\", \"media\": [{ \"kind\": \"image\", \"relPath\": \"_tmp/weixin-inbound/<hash>/img_x.jpg\" }] } }\n    { \"event\": \"outgoing\", \"ts\": ..., \"cccRoot\": ..., \"accountId\": ...,\n      \"userId\": ..., \"sessionId\": ..., \"role\": ...,\n      \"reply\": \"\u5DF2\u8BB0\u5F55\uFF08\u7EAF\u6587\u672C\uFF09\" }\n\n  \u793A\u4F8B\u811A\u672C\uFF08\u8FFD\u52A0\u5230\u6309\u65E5\u6587\u4EF6\u2014\u2014\u6301\u4E45\u5316\u5F52 CCC \u81EA\u9009\uFF1A\u6587\u4EF6/DB/\u8FDC\u7AEF\u5747\u53EF\uFF09\uFF1A\n    const fs = require('node:fs'); const p = '/path/ccc/AGENT_SESSIONS/_weixin-log.jsonl';\n    fs.appendFileSync(p, JSON.stringify(ev) + '\\n');\n\n  \u6267\u884C\u8BED\u4E49\uFF08\u65C1\u8DEF\u5BB9\u5FCD\uFF09\uFF1A\u5F02\u6B65 fire-and-forget + 15s \u8D85\u65F6 kill + \u5931\u8D25\u4EC5\u65E5\u5FD7\u2014\u2014\n  \u5FAE\u4FE1\u6865\u6D88\u606F\u5904\u7406/\u56DE\u590D\u4E0D\u53D7 hook \u5F71\u54CD\uFF1B\u811A\u672C\u987B\u5728 CCC \u6839\u5185\uFF08\u8DEF\u5F84\u9003\u9038\u62D2\u7EDD\uFF09\u3002\n  \u5A92\u4F53 relPath \u6307\u5411 _tmp/weixin-inbound/\uFF08\u4E34\u65F6\u76EE\u5F55\uFF09\u2014\u2014\u9700\u6301\u4E45\u4FDD\u5B58\u5A92\u4F53\u6587\u4EF6\u8BF7\u81EA\u884C copy\u3002\n";
 export interface MsmFlag {
     name: string;
     type?: string;

package/lib/seams/keeper.d.ts

@@ -7,7 +7,7 @@
  * 计分（对齐 opencode-serenity-plugin session-keeper）：
  *   write/edit=3, task=10, read/grep/glob/msm=1, 经过时间 +1 分/分钟
  * 阈值：.opencode/serenity.json sessionKeeper.threshold（规范位置，.dsh 回退；缺省 150）
- * 提醒要求模型回应 [SESSION-KEEPER-recorded-{code}] 确认（DCP 模式）。
+ * 提醒要求模型回应 [TRAJECTORY-ASSISTANT-recorded-{code}] 确认（DCP 模式）。
  */
 import type { Context } from 'cordis';
 export declare function scoreTool(toolName: string): number;

package/lib/seams/system-prompt.d.ts

@@ -61,10 +61,13 @@ export declare function personaBlock(mode: string, overrideText: string): string
  */
 export declare function eapBlock(): string;
 /**
- * Metaphor 强化块（v1.19.6，S142）：宁静号宇宙隐喻域（船/海/罗盘/日志/船员）。
+ * Metaphor 强化块（v1.19.6，S142；v1.29 星舰意象升级，S142 用户拍板）：
+ * 宁静号宇宙隐喻域（星舰/深空/航程/船员）。海船→星舰意象：one starship, one voyage；
+ * deep space / launch / docking clamp；Departure Inspection（原 Harbor Inspection）。
  * 隐喻是记忆钩子——形象唤起约束，前述块保持规则精确。每条隐喻 = 一个不可违背的
  * 物理事实 + 行为判据（verdict）。全英文（与 CCE/Constraints 一致）；独立块可
  * 回退；无 osp 对应（dsp 扩展，不进对齐断言参照）。
+ * 结构约束（docs/metaphor-domain.md M-1~M-4）：三层骨架不变 + 每条映射约束不变。
  */
 export declare function metaphorBlock(): string;
 /**