@shgroup/dsh-serenity-hooks 1.29.1 → 1.30.0

package/lib/index.js

@@ -1,8 +1,9 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
 import { a as findSerenityRoot, c as matchBlacklist, d as readCccName$2, f as readHandymanConfig, i as findGitRoot, l as pathInside, m as resolveInside, n as SAFE_MODE_MARKER, o as isSafeModeOn, r as classifyPath, s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS, u as readBlacklist } from "./ccc-CX48YNUL.js";
-import { a as resolveRoleSystemPrompt, i as readSkiffRoles, l as systemPromptSource, r as isSkiffSessionId, s as roleToolWhitelist } from "./skiff-role-BTdBHyOQ.js";
-import { C as splitModel, E as skiffRoleFor, S as requireWhitelistedModel, T as writeProgress, _ as buildRoundPrompt, a as startSkiffDebugServer, b as newStopToken, c as askSkiff, d as skiffMsmGate, f as skiffSessionInfo, g as HANDYMAN_GUIDE, h as unregisterSkiffSession, l as createSkiffAgent, m as skiffTrajectoryEnabled, n as jscSafeJsonText, o as stopSkiffDebugServer, p as skiffSessionSnapshot, r as renderSkiffMarkdown, s as stripThink, t as discoverCccs, u as getSkiffAgent, v as handymanProgressPaths, w as writeFailedStatus, x as readProgress, y as listActiveHandymen } from "./skiff-debug-CBU6T2F_.js";
-import { a as readWeixinCredential, c as weixinInboundDir, d as LOCALSTORE_SCOPES, f as checkLocalstoreGitCompliance, h as runLocalStore, i as matchWeixinRoute, l as weixinSessionIdFor, m as readGitTrack, n as extractWeixinText, o as readWeixinSettings, p as localstorePath, r as hasVoiceItem, s as sanitizeFileName$1, t as extractWeixinMedia } from "./weixin-route-DFkRf9ou.js";
+import { a as resolveRoleSystemPrompt, i as readSkiffRoles, l as systemPromptSource, r as isSkiffSessionId, s as roleToolWhitelist } from "./skiff-role-LW4tjF9L.js";
+import { C as splitModel, E as skiffRoleFor, S as requireWhitelistedModel, T as writeProgress, _ as buildRoundPrompt, a as startSkiffDebugServer, b as newStopToken, c as askSkiff, d as skiffMsmGate, f as skiffSessionInfo, g as HANDYMAN_GUIDE, h as unregisterSkiffSession, l as createSkiffAgent, m as skiffTrajectoryEnabled, n as jscSafeJsonText, o as stopSkiffDebugServer, p as skiffSessionSnapshot, r as renderSkiffMarkdown, s as stripThink, t as discoverCccs, u as getSkiffAgent, v as handymanProgressPaths, w as writeFailedStatus, x as readProgress, y as listActiveHandymen } from "./skiff-debug-BA8CDeJl.js";
+import { a as readWeixinCredential, c as weixinInboundDir, d as LOCALSTORE_SCOPES, f as checkLocalstoreGitCompliance, h as runLocalStore, i as matchWeixinRoute, l as weixinSessionIdFor, m as readGitTrack, n as extractWeixinText, o as readWeixinSettings, p as localstorePath, r as hasVoiceItem, s as sanitizeFileName$1, t as extractWeixinMedia } from "./weixin-route-jA0qENOf.js";
+import { C as useSession, S as summarize, _ as resolveSessionByTitle, a as archiveSessions, b as setActiveSessionInfo, c as extractSessionMdPathFromText, d as getActiveSessionInfo, f as healthCheck, g as readActiveSessionMd, h as qaCheck, i as SESSION_ACTIONS, l as findLatestActiveSessionMd, m as parseSessionContextFromEvents, n as readLastBound, o as closeSession, p as listSessions, r as DEFAULT_SESSION_SCOPE, s as createSession, t as appendBound, u as findSession, v as sessionEvents, x as showSession, y as sessionsRoot } from "./session-bound-p9oR9dj9.js";
 import { n as registerSettingsSection, t as readSimpleSettings } from "./settings-section-BfVxgCZy.js";
 import { a as markdownToPlainText, c as sniffImageExt, i as getUpdates, n as downloadMedia, o as sendTextMessage, r as getConfig, s as sendTyping, t as TypingStatus } from "./weixin-api-OUCuw0Ws.js";
 import z from "@deepseek-ai/schemastery";
@@ -16,12 +17,12 @@ import { promisify } from "node:util";
 import { platform as platform$1 } from "node:process";
 import { createUserMessage } from "@deepseek-ai/dsh-llm";
 import { createHmac, randomBytes, randomUUID, scryptSync, timingSafeEqual } from "node:crypto";
-import { deriveEventMessage } from "@deepseek-ai/dsh-session";
 import { createServer, request } from "node:http";
 import * as zlib from "node:zlib";
+import { deriveEventMessage } from "@deepseek-ai/dsh-session";
 //#region src/fs-ops.ts
 /**
-* fs-ops.ts — cc_fs 纯操作层（零 DSH 依赖，可独立单测）
+* fs-ops.ts — container_fs 纯操作层（cc_fs → container_fs，v1.30；零 DSH 依赖，可独立单测）
 *
 * 行为对齐 osp（opencode-serenity-plugin/src/fs/file-system-tool.ts）——osp 是 ACC 工具 spec：
 *   - rm：目录需 recursive 才删除；非空目录无 recursive → [SKIP]；保护 .serenity 与 CCC 根；dry-run 预览
@@ -112,8 +113,8 @@ function assertNotProtectedRegistry(root, absPath, targetLabel) {
 	const lower = (s) => process.platform === "win32" ? s.toLowerCase() : s;
 	const hit = isProtectedRegistryTarget(root, lower(rel));
 	if (hit === null) return;
-	if (hit.hit === "file") throw new Error(`cc-fs: refusing to directly modify mech-registry.json — use acc_msm register/deregister instead`);
-	throw new Error(`cc-fs: refusing to ${/rm|delete|remove/i.test(targetLabel) ? "remove" : "move"} "${rel}" — it is an ancestor of the ACC-managed mech-registry.json (${protectedRegistryTargets(root)?.fileRel}); the registry is managed by acc_msm register/deregister`);
+	if (hit.hit === "file") throw new Error(`container-fs: refusing to directly modify mech-registry.json — use container_admin msm register/deregister instead`);
+	throw new Error(`container-fs: refusing to ${/rm|delete|remove/i.test(targetLabel) ? "remove" : "move"} "${rel}" — it is an ancestor of the ACC-managed mech-registry.json (${protectedRegistryTargets(root)?.fileRel}); the registry is managed by container_admin msm register/deregister`);
 }
 function validateWritePath(root, target) {
 	const absPath = target.startsWith("/") ? resolve(target) : resolveInside(root, target);
@@ -412,12 +413,12 @@ function runCcFs(root, args) {
 //#endregion
 //#region src/tools/cc-fs.ts
 /**
-* cc-fs.ts — cc_fs 真实 DSH 工具定义（defineTool）
+* cc-fs.ts — container_fs 真实 DSH 工具定义（defineTool）（v1.30：cc_fs → container_fs）
 *
 * 进程内注册（取代 v0.1 的 bash spawn runner）：zod/schemastery 参数校验、
 * 规范 JSON 输出、纯 render 投影。逻辑在 fs-ops.ts（可单测）。
 */
-function agentCwd$10(exec) {
+function agentCwd$9(exec) {
 	return exec.agent?.session?.header?.cwd ?? process.cwd();
 }
 function renderText$12(value) {
@@ -427,8 +428,8 @@ function renderText$12(value) {
 	}];
 }
 const ccFsTool = defineTool({
-	name: "cc_fs",
-	description: "CCC filesystem operations (cc-fs semantics, DSH-native). 15 subcommands: root/resolve/exists/list/tree/relative/mkdir/rm/mv/cp/touch/append/reveal/info/find. All paths confined to the CCC root; path escape is blocked automatically. reveal opens a path in the OS file manager (Linux xdg-open / macOS Finder / Windows Explorer). Complements read/write/edit (structural operations).",
+	name: "container_fs",
+	description: "Container filesystem operations (the CCC's hull — file operations confined to the container root; path escape blocked automatically). 15 subcommands: root/resolve/exists/list/tree/relative/mkdir/rm/mv/cp/touch/append/reveal/info/find. reveal opens a path in the OS file manager (Linux xdg-open / macOS Finder / Windows Explorer). Complements read/write/edit (structural operations).",
 	parameters: {
 		action: {
 			type: "string",
@@ -495,7 +496,7 @@ const ccFsTool = defineTool({
 		render: (args, value) => renderText$12(value)
 	},
 	async execute(args, exec) {
-		const root = findSerenityRoot(agentCwd$10(exec));
+		const root = findSerenityRoot(agentCwd$9(exec));
 		if (!root) throw new Error("No CCC found: no .serenity file from agent cwd");
 		return runCcFs(root, args);
 	}
@@ -530,12 +531,12 @@ const WRITE_TOOLS = /* @__PURE__ */ new Set([
 	"write",
 	"edit",
 	"str_replace_editor",
-	"cc_fs",
+	"container_fs",
 	"bash",
 	"append",
 	"touch"
 ]);
-/** cc_fs 的写类子命令（mkdir/rm/mv/cp/touch/append）；其余 9 子命令（root/resolve/exists/
+/** container_fs 的写类子命令（mkdir/rm/mv/cp/touch/append）；其余 9 子命令（root/resolve/exists/
 *  list/tree/relative/reveal/info/find）为只读——只读子命令不查黑名单（同 read 语义） */
 const CC_FS_WRITE_ACTIONS = /* @__PURE__ */ new Set([
 	"mkdir",
@@ -547,7 +548,7 @@ const CC_FS_WRITE_ACTIONS = /* @__PURE__ */ new Set([
 ]);
 /**
 * 凭据文件硬名单（数据面守卫，v1.26.3，S142 用户：localstore.json 需要在 read 工具的黑名单里）：
-* **任何工具**（含 read/grep/glob/cc_fs 只读子命令）命中这些相对 CCC 根的路径 → deny。
+* **任何工具**（含 read/grep/glob/container_fs 只读子命令）命中这些相对 CCC 根的路径 → deny。
 *
 * 与 safeMode.blacklist（写黑名单，v1.18.5 决策只拦写）语义独立：
 * - 黑名单 = 用户可配置的写保护（REPOSITORIES/ 等只读参考源不误伤读）
@@ -558,7 +559,7 @@ const CC_FS_WRITE_ACTIONS = /* @__PURE__ */ new Set([
 const SENSITIVE_CREDENTIAL_FILES = /* @__PURE__ */ new Set(["localstore.json"]);
 /**
 * MSM 注册表写保护（需求⑤b S142 用户拍板："msm注册的文件需要写保护起来，避免CCC意外写坏搞崩自己"）：
-* mech-registry.json 是 CCC 执行层地基（坏 → loadMsmEntries 抛 → acc_msm/skiff/output-guard 全崩，
+* mech-registry.json 是 CCC 执行层地基（坏 → loadMsmEntries 抛 → container_admin/output-guard 全崩，
 * register 也崩 → 自锁）。**写 deny、读 allow**（与 localstore 读 deny 语义区分 R6——注册表是
 * 结构核心不是秘密，需被 output-guard/skiff-admin 读取建 MSM 词表）。
 *
@@ -566,8 +567,8 @@ const SENSITIVE_CREDENTIAL_FILES = /* @__PURE__ */ new Set(["localstore.json"]);
 * `.opencode/skills/<cccName>/references/mech-registry.json`（cccName = .serenity 首行）。
 * 历史 root 级 `mech-registry.json` 与各 skill 分散注册表已废弃：**不再保护**
 * （review P1：保护一个永不被读的文件 = 死锁——MSM 既不可见又不可删/迁移）。
-* 写工具命中聚合档 → deny（唯一合法写通道 = acc_msm register/deregister 内部 writeRegistry，
-* 走工具实现不经 pre-execute → 天然豁免）；读工具放行。
+* 写工具命中聚合档 → deny（唯一合法写通道 = container_admin msm register/deregister
+* 内部 writeRegistry，走工具实现不经 pre-execute → 天然豁免）；读工具放行。
 */
 function isProtectedRegistryRel(root, rel) {
 	const lower = (s) => process.platform === "win32" ? s.toLowerCase() : s;
@@ -584,10 +585,10 @@ function isProtectedRegistryRel(root, rel) {
 	} catch {}
 	return false;
 }
-/** 判定工具是否为写类：普通工具按名；cc_fs 复合工具按子命令 action */
+/** 判定工具是否为写类：普通工具按名；container_fs 复合工具按子命令 action */
 function isWriteTool(toolName, action) {
 	if (!WRITE_TOOLS.has(toolName)) return false;
-	if (toolName === "cc_fs") return action !== void 0 && CC_FS_WRITE_ACTIONS.has(action);
+	if (toolName === "container_fs") return action !== void 0 && CC_FS_WRITE_ACTIONS.has(action);
 	return true;
 }
 /**
@@ -628,7 +629,7 @@ function decideGuard(input) {
 				kind: "deny"
 			};
 			if (isProtectedRegistryRel(root, rel)) return {
-				deny: rel.endsWith("/mech-registry.json") ? `mech-registry.json is ACC-managed (${rel}) — use acc_msm register/deregister instead of writing it directly` : `"${rel}" is an ancestor of the ACC-managed mech-registry.json — removing/moving it would destroy the registry; the registry is managed by acc_msm register/deregister`,
+				deny: rel.endsWith("/mech-registry.json") ? `mech-registry.json is ACC-managed (${rel}) — use container_admin msm register/deregister instead of writing it directly` : `"${rel}" is an ancestor of the ACC-managed mech-registry.json — removing/moving it would destroy the registry; the registry is managed by container_admin msm register/deregister`,
 				kind: "deny"
 			};
 			const hit = matchBlacklist(rel, blacklist);
@@ -706,7 +707,7 @@ function syncSafeModeRestriction(agent, root) {
 }
 /**
 * 从 exec 参数中提取常见路径字段（write/edit 工具）；宽松读取。
-* cc_fs 复合工具：path（单路径）/ paths（数组）/ src / dst——取第一个命中（越界检查
+* container_fs 复合工具：path（单路径）/ paths（数组）/ src / dst——取第一个命中（越界检查
 * 逐路径由 decideGuard 单 pathArg 覆盖；多路径字段取首个，避免漏检主体路径）。
 */
 function extractPathArg(exec) {
@@ -726,7 +727,7 @@ function extractPathArg(exec) {
 	const paths = a["paths"];
 	if (Array.isArray(paths) && paths.length > 0 && typeof paths[0] === "string") return paths[0];
 }
-/** 从 exec 参数提取 cc_fs 子命令 action；无则 undefined */
+/** 从 exec 参数提取 container_fs 子命令 action；无则 undefined */
 function extractAction(exec) {
 	const args = exec.arguments;
 	if (args === null || typeof args !== "object") return void 0;
@@ -833,7 +834,7 @@ function setSafeMode(root, on) {
 //#endregion
 //#region src/kit-ops.ts
 /**
-* kit-ops.ts — acc_kit 纯操作层（零 DSH 依赖）
+* kit-ops.ts — dashboard 纯操作层（acc_kit → dashboard，v1.30；零 DSH 依赖）
 *
 * 行为对齐 osp（opencode-serenity-plugin/src/acc-kit.ts）——osp 是 ACC 工具 spec：
 *   - health：{ccc, root, version, status: healthy|degraded, principles: {P1_rooted, P2_git_managed, P3_binary_permissions}}
@@ -990,9 +991,9 @@ async function runKit(root, args) {
 //#endregion
 //#region src/tools/kit.ts
 /**
-* kit.ts — acc_kit 真实 DSH 工具定义（defineTool）
+* kit.ts — dashboard 真实 DSH 工具定义（defineTool）（v1.30：acc_kit → dashboard）
 */
-function agentCwd$9(exec) {
+function agentCwd$8(exec) {
 	return exec.agent?.session?.header?.cwd ?? process.cwd();
 }
 function renderText$11(value) {
@@ -1002,8 +1003,8 @@ function renderText$11(value) {
 	}];
 }
 const kitTool = defineTool({
-	name: "acc_kit",
-	description: "ACC general-purpose utility kit: health (CCC three-principle check P1/P2/config + MSM registry integrity report, healthy/degraded) / time (now_iso/now_local/epoch_ms) / wait (wait N seconds, default 1). Routine self-check before entering a CCC.",
+	name: "dashboard",
+	description: "Dashboard — always-on container instruments (works any time, no side effects): health (CCC three-principle check P1/P2/config + MSM registry integrity report, healthy/degraded) / time (now_iso/now_local/epoch_ms) / wait (wait N seconds, default 1). Routine self-check before entering a CCC.",
 	parameters: {
 		action: {
 			type: "string",
@@ -1021,13 +1022,13 @@ const kitTool = defineTool({
 		render: (args, value) => renderText$11(value)
 	},
 	async execute(args, exec) {
-		return await runKit(findSerenityRoot(agentCwd$9(exec)), args);
+		return await runKit(findSerenityRoot(agentCwd$8(exec)), args);
 	}
 });
 //#endregion
 //#region src/git-ops.ts
 /**
-* git-ops.ts — cc_git 纯操作层（零 DSH 依赖）
+* git-ops.ts — container_git 纯操作层（cc_git → container_git，v1.30；零 DSH 依赖）
 *
 * 行为对齐 osp（opencode-serenity-plugin/src/git/cc-git-tool.ts）——osp 是 ACC 工具 spec：
 *   - status：JSON {clean, files:[{status,file}], summary}
@@ -1078,7 +1079,7 @@ function getCurrentBranch(root) {
 		"--abbrev-ref",
 		"HEAD"
 	]);
-	if (!stdout) throw new Error("cc_git: cannot determine current branch");
+	if (!stdout) throw new Error("container_git: cannot determine current branch");
 	return stdout;
 }
 function hasChanges(root) {
@@ -1117,21 +1118,21 @@ function runGit(root, args) {
 		case "commit": {
 			const ls = checkLocalstoreGitCompliance(root);
 			if (!ls.ok) throw new Error(ls.reason);
-			if (!args.message || args.message.trim() === "") throw new Error("cc_git commit: missing required arg \"message\"");
+			if (!args.message || args.message.trim() === "") throw new Error("container_git commit: missing required arg \"message\"");
 			if (!hasChanges(root)) return "(nothing to commit — working tree clean)";
 			const addResult = git(root, ["add", "-A"]);
-			if (addResult.stderr) throw new Error(`cc_git commit: git add failed\n${addResult.stderr}`);
+			if (addResult.stderr) throw new Error(`container_git commit: git add failed\n${addResult.stderr}`);
 			const commitResult = git(root, [
 				"commit",
 				"-m",
 				args.message
 			]);
 			if (commitResult.stderr && commitResult.stderr.includes("nothing to commit")) return "(nothing to commit — working tree clean)";
-			if (commitResult.stderr && !commitResult.stdout) throw new Error(`cc_git commit: git commit failed\n${commitResult.stderr}`);
+			if (commitResult.stderr && !commitResult.stdout) throw new Error(`container_git commit: git commit failed\n${commitResult.stderr}`);
 			return (commitResult.stdout || commitResult.stderr || "committed").trimEnd();
 		}
 		case "push": {
-			if (!hasRemote(root)) throw new Error("cc_git push: no remote configured. Add one with:\n  git remote add origin <url>");
+			if (!hasRemote(root)) throw new Error("container_git push: no remote configured. Add one with:\n  git remote add origin <url>");
 			const branch = getCurrentBranch(root);
 			try {
 				git(root, [
@@ -1145,12 +1146,12 @@ function runGit(root, args) {
 				"origin",
 				branch
 			]);
-			if (stderr.includes("non-fast-forward") || stderr.includes("rejected") || stderr.includes("[rejected]")) return `[REJECTED] Push to origin/${branch} was rejected (non-fast-forward).\n\nRemote has new commits and your local branch is behind. Suggested actions:\n  1. Use bash: git fetch origin ${branch}\n  2. Inspect remote changes: git log HEAD..origin/${branch}\n  3. Merge or rebase: git merge origin/${branch} or git rebase origin/${branch}\n  4. Resolve conflicts manually if any: git add ... && git commit\n  5. Push again: cc_git push`;
+			if (stderr.includes("non-fast-forward") || stderr.includes("rejected") || stderr.includes("[rejected]")) return `[REJECTED] Push to origin/${branch} was rejected (non-fast-forward).\n\nRemote has new commits and your local branch is behind. Suggested actions:\n  1. Use bash: git fetch origin ${branch}\n  2. Inspect remote changes: git log HEAD..origin/${branch}\n  3. Merge or rebase: git merge origin/${branch} or git rebase origin/${branch}\n  4. Resolve conflicts manually if any: git add ... && git commit\n  5. Push again: container_git push`;
 			if (!stderr || stderr.includes("->") || stderr === "") return stdout || `Pushed to origin/${branch}`;
-			throw new Error(`cc_git push failed:\n${stderr}`);
+			throw new Error(`container_git push failed:\n${stderr}`);
 		}
 		case "pull": {
-			if (!hasRemote(root)) throw new Error("cc_git pull: no remote configured. Add one with:\n  git remote add origin <url>");
+			if (!hasRemote(root)) throw new Error("container_git pull: no remote configured. Add one with:\n  git remote add origin <url>");
 			const branch = getCurrentBranch(root);
 			const fetchResult = git(root, [
 				"fetch",
@@ -1174,8 +1175,8 @@ function runGit(root, args) {
 				const msg = mergeResult.stdout || "Pulled successfully.";
 				return msg.endsWith("\n") ? msg.trimEnd() : msg;
 			}
-			if (mergeResult.stderr.includes("non-fast-forward") || mergeResult.stderr.includes("Not possible to fast-forward") || mergeResult.stderr.includes("rejected") || mergeResult.stderr.includes("could not be applied")) return `[REJECTED] Pull from origin/${branch} was rejected (non-fast-forward).\n\nRemote has new commits and your local history diverged from remote (non-fast-forward). Suggested actions:\n  1. Inspect differences: cc_git log HEAD..origin/${branch}\n  2. Merge manually with bash: git merge origin/${branch}\n  3. Or rebase: git rebase origin/${branch}\n  4. Resolve conflicts manually if any: git add <file> && git commit\n  5. Push: cc_git push`;
-			throw new Error(`cc_git pull failed:\n${mergeResult.stderr}`);
+			if (mergeResult.stderr.includes("non-fast-forward") || mergeResult.stderr.includes("Not possible to fast-forward") || mergeResult.stderr.includes("rejected") || mergeResult.stderr.includes("could not be applied")) return `[REJECTED] Pull from origin/${branch} was rejected (non-fast-forward).\n\nRemote has new commits and your local history diverged from remote (non-fast-forward). Suggested actions:\n  1. Inspect differences: container_git log HEAD..origin/${branch}\n  2. Merge manually with bash: git merge origin/${branch}\n  3. Or rebase: git rebase origin/${branch}\n  4. Resolve conflicts manually if any: git add <file> && git commit\n  5. Push: container_git push`;
+			throw new Error(`container_git pull failed:\n${mergeResult.stderr}`);
 		}
 		case "log": {
 			const n = Math.min(Math.max(args.count ?? 10, 1), 100);
@@ -1207,9 +1208,9 @@ function runGit(root, args) {
 //#endregion
 //#region src/tools/git.ts
 /**
-* git.ts — cc_git 真实 DSH 工具定义（defineTool）
+* git.ts — container_git 真实 DSH 工具定义（defineTool）（v1.30：cc_git → container_git）
 */
-function agentCwd$8(exec) {
+function agentCwd$7(exec) {
 	return exec.agent?.session?.header?.cwd ?? process.cwd();
 }
 function renderText$10(value) {
@@ -1219,7 +1220,7 @@ function renderText$10(value) {
 	}];
 }
 const gitTool = defineTool({
-	name: "cc_git",
+	name: "container_git",
 	description: "CCC git operations (cc-git semantics, aligned with osp). status/commit/push/log/pull/diff; non-fast-forward push/pull outputs [REJECTED] + suggested actions (never auto-force). merge/rebase/conflict resolution go through bash.",
 	parameters: {
 		action: {
@@ -1254,7 +1255,7 @@ const gitTool = defineTool({
 		render: (args, value) => renderText$10(value)
 	},
 	async execute(args, exec) {
-		const root = findSerenityRoot(agentCwd$8(exec));
+		const root = findSerenityRoot(agentCwd$7(exec));
 		if (!root) throw new Error("No CCC found: no .serenity file from agent cwd");
 		return runGit(root, args);
 	}
@@ -1262,9 +1263,9 @@ const gitTool = defineTool({
 //#endregion
 //#region src/msm-ops.ts
 /**
-* msm-ops.ts — acc_msm 纯操作层（零 DSH 依赖）
+* msm-ops.ts — msm 纯操作层（acc_msm → msm 执行 + container_admin 管理面，v1.30；零 DSH 依赖）
 *
-* MSM（Mech & Semi-Mech）框架：list / exec / admin(register|deregister|check)。
+* MSM（Mech & Semi-Mech）框架：exec 执行 / register|deregister|check 管理。
 * 复用 CCC 的 mech-registry.json（v1 或数组格式）。cwd 钉在 CCC 根。
 */
 const execFileAsync = promisify(execFile);
@@ -1323,38 +1324,28 @@ function buildMsmEnv(root) {
 * bun 无扩展名（bun.exe 可被 libuv 按 PATHEXT 解析），保持 'bun'。
 */
 const NPX_BIN = process.platform === "win32" ? "npx.cmd" : "npx";
-const MSM_ACTIONS = [
-	"list",
-	"exec",
-	"register",
-	"deregister",
-	"check",
-	"guide",
-	"ccc-config",
-	"catalog"
-];
 /**
 * ACC 能力目录（需求④ S142 用户拍板："acc 配置各自做 guide 越来越多，整合成目录式使用指南"）。
 * 目录在前、详情各归各——**单一真相源**：本目录只索引"去哪个工具/子命令看详情"，不复制详情
-* （避免 skiff_admin/weixin-doctor 等 guide 全文重复 → 多真相源 → 失同步）。
+* （避免 container_admin/weixin-doctor 等 guide 全文重复 → 多真相源 → 失同步）。
 * 后续新增功能只需在此加一行（低熵可演进）。
 */
 const ACC_CATALOG = `═══ ACC Usage Catalog ═══
 Directory of ACC capabilities — each area lists where to go for details (guides live with their feature; this catalog only points).
 
-  ① 会话与轨迹        → session tool（list/show/create/use/close/health/qa/archive/summary/hook-develop-guide）
-                         session_rebuild（超限重建；阈值 K 见 ccc-config / 设置面板重建阈值K）
-  ② 认知质量框架      → eap（E↑/R↓/S↑）/ neat（Neat 协议）/ cce（认知连续性工程）——渐进披露，无参即全文
-  ③ 工具与执行        → cc_fs（文件系统 15 子命令）/ cc_git（git）/ acc_kit（health 含注册表检查/time/wait）
-                         acc_msm（MSM 框架：本工具 list/exec/register/deregister/check/guide/ccc-config/catalog）
-                         handyman（杂工 agent 编排——guide 子命令：acc_msm exec handyman guide）
-  ④ 角色与对外面      → skiff_admin（Skiff 认知子集角色：guide/validate/apply/list——acc_msm exec skiff_admin guide）
+  ① 会话与轨迹        → logbook（list/show/create/use/close/health/qa/archive/summary/hook-develop-guide + rebuild 超限重建）
+                         session_rebuild 已并入 logbook rebuild（超限重建；阈值 K 见 container_admin ccc-config / 设置面板重建阈值K）
+  ② 认知质量框架      → praxis（eap/neat/cce 三合一——可实践理论注入，section 渐进披露，无参即目录）
+  ③ 工具与执行        → container_fs（容器文件系统 15 子命令）/ container_git（git）/ dashboard（health 含注册表检查/time/wait）
+                         acc_msm 已并入 msm（执行+发现）与 container_admin（管理）——msm("<name>", ["<args>"])；inspect=true 查用法
+                         handyman（杂工 agent 编排——guide 子命令：handyman guide）
+  ④ 角色与对外面      → container_admin role（Skiff 认知子集角色：guide/validate/apply/list——skiff_admin 已并入）
                          ACP（程序化 JSON-RPC 3100）/ Skiff 问答页（公网 ask）——面板「外部能力」组
   ⑤ 自主与接入        → autopilot-trajectory（Autopilot 一站式：all/init/random/diag/doc/check/status/guide）
-                         weixin 微信桥（配置/扫码/路由/消息 hook——CCC 侧 weixin-doctor MSM：acc_msm exec weixin-doctor guide）
-  ⑥ CCC 配置总览      → acc_msm ccc-config（8 段：handyman/sessionKeeper/localstore/hooks/safeMode/skiff/autopilotTrajectory/weixin）
-  ⑦ 注册表与安全      → mech-registry.json 由 acc_msm register/deregister 管理（写保护——不可直接编辑）
-                         acc_kit health 输出 registry 完整性检查；损坏恢复指引见 health registry.issues
+                         weixin 微信桥（配置/扫码/路由/消息 hook——CCC 侧 weixin-doctor MSM：msm("weixin-doctor", ["guide"])）
+  ⑥ CCC 配置总览      → container_admin msm ccc-config（8 段：handyman/sessionKeeper/localstore/hooks/safeMode/skiff/autopilotTrajectory/weixin）
+  ⑦ 注册表与安全      → mech-registry.json 由 container_admin msm register/deregister 管理（写保护——不可直接编辑）
+                         dashboard health 输出 registry 完整性检查；损坏恢复指引见 health registry.issues
 
 每区：一句话定位 + 详细入口（工具名 / guide 子命令）。详情永远以对应工具的 guide/ccc-config 为单一真相源。
 `;
@@ -1364,9 +1355,9 @@ const MSM_GUIDE = `MSM Development Manual (Mech & Semi-Mech framework)
 MSM = the executable-unit layer. Mech is pure TS with zero LLM reasoning; Semi-Mech is a TS framework + LLM decision points.
 MSM is ACC's deterministic executable-unit layer — all shell/exec operations go through MSM and cannot be bypassed.
 
-## Registering a new MSM (acc_msm register)
+## Registering a new MSM (container_admin msm register)
 1. Write the script under <skill>/scripts/ (runnable via tsx; must include a main() CLI guard with an import.meta.url check)
-2. acc_msm register <name> --skill <s> --path <script path relative to root> --category <mech|semi-mech> --description <desc>
+2. container_admin msm register --domain msm --action register <name> --skill <s> --path <script path relative to root> --category <mech|semi-mech> --description <desc>
 3. Auto-writes mech-registry.json (preserving the original format) + git commit (commits only the registry file)
 4. Validation: path must be inside root, script must exist, name must be globally unique
 
@@ -1377,7 +1368,7 @@ flags is a new-style object array for parameter validation and path-escape guard
    {"name":"force","type":"boolean","description":"force mode","default":false}]
 - {name, type} format — new style, type:"path" enables the path-escape guard
 - {flag, description} format — old style, CLI flag description string
-- On registration, flags are passed via acc_msm register --flags '<json>' (the tool currently parses the name style)
+- On registration, flags are passed via container_admin msm register --flags '<json>'
 
 ## Script conventions
 - Top-of-file documentation: purpose / usage / exit codes
@@ -1402,14 +1393,14 @@ flags is a new-style object array for parameter validation and path-escape guard
 - Anti-example (forbidden): readline waiting for user input, process.stdin.on('data') blocking waits
   (MSMs have no stdin interaction channel — they hang until the 600s timeout)
 
-## Quality checks (acc_msm check, DC-M1~M4)
+## Quality checks (container_admin msm check, DC-M1~M4)
 DC-M1 has .test.ts/.spec.ts; DC-M2 has a main() guard (function main( / isMain / require.main === / import.meta.url);
 DC-M3 bidirectional: scripts unregistered + registry references missing scripts; DC-M4 path-type flags marked type:"path"
 
 ## Self-description (protocol flags, first argument only)
-acc_msm exec <name> --list        — list all MSMs
-acc_msm exec <name> --schema <n>   — view a specific MSM's parameter schema
-acc_msm exec <name> --format=json  — JSON output mode (remaining args passed through losslessly)
+msm("<name>", ["--list"])           — list all MSMs
+msm("<name>", ["--schema", "<n>"])  — view a specific MSM's parameter schema
+msm("<name>", ["--format=json"])    — JSON output mode (remaining args passed through losslessly)
 `;
 /** CCC 配置参考（对齐 osp ccc-config action） */
 const CCC_CONFIG_REFERENCE = `═══ CCC Configuration Reference ═══
@@ -1439,7 +1430,7 @@ trajectory-assistant（TRAJECTORY-ASSISTANT · CHECKPOINT）提醒机制的积
 
 ── 3. localstore.gitTrack ──
 localstore.json 的 git 策略：allow 可提交 / deny 禁提交（默认 deny）。
-deny 时写入自动确保 .gitignore 含该文件（物理保证），cc_git commit 会检查拒绝。
+deny 时写入自动确保 .gitignore 含该文件（物理保证），container_git commit 会检查拒绝。
 
   Config:
     { "localstore": { "gitTrack": "allow" } }
@@ -1461,7 +1452,7 @@ Skiff 角色 = 全知全能 trajectory 的任意子集（CCC 定义）。每角
 （MSM 白名单 msms[] 与非 MSM 工具白名单 tools[]，白名单外全隐藏；skill 加载恒可用）。
 trajectory 纪律子集（session/keeper/rebuild 参与项）默认全关 = 完全独立。
 systemPrompt 内联 或 systemPromptFile（.md 引用，推荐）——角色会话的完整人格/边界提示词。
-validate 校验 / apply 生效 / list 查看：acc_msm exec skiff_admin <guide|validate|apply|list>。
+validate 校验 / apply 生效 / list 查看：container_admin role <guide|validate|apply|list>（skiff_admin 已并入）。
 
   Config:
     { "skiff": { "roles": {
@@ -1477,7 +1468,7 @@ CCC 定义的一条自主 trajectory——时钟到点自动唤起（前台注
 未配置或 enabled=false → 完全不启动（零资源占用）。多 CCC 独立：每 CCC 自己的配置。
 唤起消息四段式：轨迹焦点 topPrompt（最先注入，稳定锚）→ 身份锚定 → 先验偏见
 （CCC 根脚本 biasProvider 输出）→ 任务。目标会话 session 必填（目录须带 --auto 后缀）。
-诊断/状态/立即唤起：acc_msm exec autopilot-trajectory <all|check|status|diag>。
+诊断/状态/立即唤起：autopilot-trajectory <all|check|status|diag>（msm("autopilot-trajectory", ["all"])）。
 
   Config:
     { "autopilotTrajectory": {
@@ -1494,8 +1485,7 @@ CCC 级微信个人号接入（iLink 协议）：dsh 一进程多 CCC，每 CCC
 账号/路由/开关在此文件；**bot_token 凭据在 CCC localstore credential scope**
 （扫码绑定后自动写入，永不进 git 明文面）。
 路由 user → role：exact 优先，* 通配兜底；role 必须 ∈ 该 CCC skiff.roles。
-面板（WebUI 设置 → 微信桥）可扫码绑定/移除账号/编辑路由；acc_msm exec weixin-doctor
-<status|diag|verify> 排查。凭据主动查看：localstore get WEIXIN_<ACCOUNT>_TOKEN。
+面板（WebUI 设置 → 微信桥）可扫码绑定/移除账号/编辑路由；msm("weixin-doctor", ["status"|"diag"|"verify"]) 排查。凭据主动查看：localstore get WEIXIN_<ACCOUNT>_TOKEN。
 
   Config:
     { "weixin": {
@@ -1669,7 +1659,7 @@ function runMsm(root, args) {
 				skill,
 				category,
 				description,
-				usage: args.usage ?? `acc_msm exec ${name} [args...]`,
+				usage: args.usage ?? `msm ${name} [args...]`,
 				flags: flags ?? []
 			});
 			writeRegistry(regPath, entries, isV1Wrapped);
@@ -1870,7 +1860,7 @@ function msmExecResult(name, status, stdout, stderr, fmtJson, hasHelp = false) {
 	};
 }
 /**
-* 异步执行 MSM（acc_msm 工具主路径）：
+* 异步执行 MSM（msm 工具主路径）：
 * 用 execFile + promisify + timeout（超时自动 kill），**不阻塞 Node 事件循环**。
 * （同步 spawnSync 版会阻塞 web 事件循环 → MSM 脚本自请求 3080 时死锁，见 postmortem。）
 */
@@ -1930,9 +1920,23 @@ async function runMsmAsync(root, args) {
 //#endregion
 //#region src/tools/msm.ts
 /**
-* msm.ts — acc_msm 真实 DSH 工具定义（defineTool）
+* msm.ts — msm 工具（v1.30 重构：单入口执行，list/exec 合一）
+*
+* 设计（S142 用户拍板"msm 单入口同意 + 参数简易高效"）：
+*   acc_msm（8 action enum）→ msm（3 参数：name + args + inspect）——
+*   最高频工具参数极简：无 action 选择、无协议 flag 前置学习。
+*
+* LLM 直觉用法：
+*   msm("ssh-connect", ["status"])        — 执行已注册 MSM
+*   msm("ssh-connect")                    — 无参执行
+*   msm("ssh-connect", [], inspect=true)  — 查该 MSM 用法/参数（不执行）
+*   msm("ssh")                            — 未精确命中 → 返回模糊候选（LLM 下轮选对）
+*   msm()                                 — 返回精简分类目录（替代旧全量 list）
+*
+* 管理面（register/deregister/check/guide/catalog/ccc-config）已移入 container_admin。
+* 底层 runMsmAsync/prepareExec 全复用；未命中候选为新增 findSuggestions。
 */
-function agentCwd$7(exec) {
+function agentCwd$6(exec) {
 	return exec.agent?.session?.header?.cwd ?? process.cwd();
 }
 function agentSessionId$1(exec) {
@@ -1944,48 +1948,46 @@ function renderText$9(value) {
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
 	}];
 }
+/** 精简目录（无参调用返回；替代全量 list 的巨输出）——按 skill 分组统计 + 顶部指引 */
+function buildMsmIndex(root) {
+	const entries = loadMsmEntries(root);
+	if (entries.length === 0) return "(no MSM registered — call container_admin register to add one)";
+	const bySkill = /* @__PURE__ */ new Map();
+	for (const e of entries) {
+		const k = e.skill ?? "uncategorized";
+		bySkill.set(k, (bySkill.get(k) ?? 0) + 1);
+	}
+	const groups = [...bySkill.entries()].sort((a, b) => b[1] - a[1]).map(([skill, count]) => `  ${skill}: ${count} MSM`).join("\n");
+	return `${entries.length} MSMs registered (by skill):\n${groups}\n\nExecute: msm("<name>", ["<args>"]) — e.g. msm("ssh-connect", ["status"])\nInspect: msm("<name>", [], inspect=true) — view usage/flags\nPartial name returns matching candidates.\nFull listing: use container_admin (register/deregister/check).`;
+}
+/** 模糊候选：name/description 子串匹配（未精确命中时返回 top-K，供 LLM 下轮选对） */
+function suggestMsm(root, query, limit = 5) {
+	const q = query.toLowerCase();
+	const hits = loadMsmEntries(root).filter((e) => e.name.toLowerCase().includes(q) || (e.description ?? "").toLowerCase().includes(q)).slice(0, limit);
+	if (hits.length === 0) return `No MSM matches "${query}". Registered: ${buildMsmIndex(root)}`;
+	const lines = hits.map((e) => {
+		const base = `${e.name} | ${e.skill ?? "-"} | ${e.category ?? "-"} | ${e.description ?? ""}`;
+		const flags = (e.flags ?? []).map((f) => `--${f.name} <${f.type ?? "string"}>`).join(", ");
+		return flags ? `${base} [flags: ${flags}]` : base;
+	});
+	return `No exact MSM "${query}" — did you mean one of these?\n` + lines.join("\n");
+}
 const msmTool = defineTool({
-	name: "acc_msm",
-	description: "MSM (Mech & Semi-Mech) framework: list lists registered MSMs (header+flags display); exec executes (600s timeout, path-escape + symlink blocking, injects SERENITY_ROOT/CCC/VERSION env, appends --help TIP on failure; first arg --list/--schema/--format=json is protocol); register/deregister manage the registry (path inside root + script exists + globally unique validation, auto git precision commit); check quality checks DC-M1~M4; guide development manual; catalog ACC usage directory (all capability areas — points to each feature guide, single source of truth); ccc-config CCC config reference (all sections: handyman.models / sessionKeeper.threshold / localstore.gitTrack / hooks.autoRestoreSession / safeMode.blacklist / skiff.roles / autopilotTrajectory / weixin incl. message hook full guide). Reuses the CCC mech-registry.json.",
+	name: "msm",
+	description: "Execute a registered CCC MSM (Mech & Semi-Mech). msm(name, args) runs it directly; name not found returns matching candidates; inspect=true shows usage/flags without running; no args returns a summary index. The full CCC MSM list is discoverable via partial-name matching or the index.",
 	parameters: {
-		action: {
-			type: "string",
-			enum: [...MSM_ACTIONS],
-			required: true,
-			description: "Subcommand: list/exec/register/deregister/check/guide/catalog/ccc-config"
-		},
 		name: {
 			type: "string",
-			description: "MSM name (exec/register/deregister)"
+			description: "MSM name to execute (or a partial fragment — not found returns matching candidates)"
 		},
 		args: {
 			type: "array",
 			items: { type: "string" },
-			description: "exec business args (first arg --list/--schema <n>/--format=json is protocol flag, rest passed through losslessly)"
-		},
-		skill: {
-			type: "string",
-			description: "register owning skill"
-		},
-		path: {
-			type: "string",
-			description: "register script relative path (must be inside root and exist)"
-		},
-		category: {
-			type: "string",
-			description: "register category (mech/semi-mech)"
+			description: "Arguments passed to the MSM (optional; defaults to none). Pass \"--help\" as first arg to see an MSM's own usage."
 		},
-		description: {
-			type: "string",
-			description: "register description"
-		},
-		flags: {
-			type: "string",
-			description: "register flags JSON string (new-style object array; type:\"path\" enables escape validation)"
-		},
-		usage: {
-			type: "string",
-			description: "register custom usage (auto-generated by default)"
+		inspect: {
+			type: "boolean",
+			description: "true = print the MSM's usage/flags/params WITHOUT executing (default false)"
 		}
 	},
 	output: {
@@ -1993,22 +1995,29 @@ const msmTool = defineTool({
 		render: (args, value) => renderText$9(value)
 	},
 	async execute(args, exec) {
-		const root = findSerenityRoot(agentCwd$7(exec));
+		const root = findSerenityRoot(agentCwd$6(exec));
 		if (!root) throw new Error("No CCC found: no .serenity file from agent cwd");
 		const sessionId = agentSessionId$1(exec);
-		const gate = skiffMsmGate(root, sessionId, args.action, args.name);
+		const name = args.name;
+		const gate = skiffMsmGate(root, sessionId, name ? "exec" : "list", name);
 		if (gate.reject) throw new Error(gate.reject);
-		if (args.action === "list" && gate.whitelist) {
-			const out = runMsm(root, args);
-			const text = typeof out === "string" ? out : JSON.stringify(out);
-			const header = text.split("\n")[0] ?? "";
-			const lines = text.split("\n").slice(1).filter((line) => {
-				const name = line.split(" | ")[0]?.trim();
-				return name !== void 0 && name !== "" && gate.whitelist.has(name);
-			});
-			return `${header}\n${lines.length > 0 ? lines.join("\n") : "(no MSM allowed in this role)"}`;
-		}
-		return runMsmAsync(root, args);
+		if (!name || name.trim() === "") return gate.whitelist ? "MSMs allowed in this role:\n" + [...gate.whitelist].join("\n") : buildMsmIndex(root);
+		const clean = name.trim();
+		if (gate.whitelist && !gate.whitelist.has(clean)) return `MSM "${clean}" is not in this role's whitelist. Allowed: ${[...gate.whitelist].join(", ")}`;
+		if (!findEntry(root, clean)) {
+			const suggest = suggestMsm(root, clean);
+			return gate.whitelist ? `(whitelisted role — candidates filtered)\n${suggest}` : suggest;
+		}
+		if (args.inspect === true) return runMsmAsync(root, {
+			action: "exec",
+			name: clean,
+			args: ["--schema", clean]
+		});
+		return runMsmAsync(root, {
+			action: "exec",
+			name: clean,
+			args: args.args ?? []
+		});
 	}
 });
 //#endregion
@@ -2050,7 +2059,7 @@ function renderText$8(value) {
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
 	}];
 }
-const eapTool = defineTool({
+defineTool({
 	name: "eap",
 	description: "EAP cognitive quality framework (progressive disclosure): defines E↑ explicitness / R↓ reconstructability / S↑ stability + pre-output self-check checklist. No section returns the full framework; specify a section to focus.",
 	parameters: { section: {
@@ -2111,7 +2120,7 @@ function renderText$7(value) {
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
 	}];
 }
-const neatTool = defineTool({
+defineTool({
 	name: "neat",
 	description: "Neat design collaboration protocol (progressive disclosure): small-step alignment / explicit decisions / document-driven / no level-skipping (requirements→scope→solution→interface→implementation). No section returns the full protocol.",
 	parameters: { section: {
@@ -2190,7 +2199,7 @@ function renderText$6(value) {
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
 	}];
 }
-const cceTool = defineTool({
+defineTool({
 	name: "cce",
 	description: "CCE cognitive continuity engineering (progressive disclosure): the engineering discipline of maintaining a cognitive entity's identity/accessibility/evolution under bounded resources and irreversible uncertainty. No section returns the full framework; specify a section to focus.",
 	parameters: { section: {
@@ -2232,6 +2241,55 @@ const cceTool = defineTool({
 	}
 });
 //#endregion
+//#region src/tools/praxis.ts
+/**
+* praxis.ts — praxis（可实践理论注入工具，v1.30 合并 eap/neat/cce）
+*
+* eap / neat / cce 三个知识工具合并为一个——它们都是「可实践理论」：
+* 调用时把对应框架注入当前认知（指导输出质量 / 协作协议 / 连续性工程）。
+* 名字：praxis（理论与实践的统一——理论注入实践，实践反哺理论）。
+* Metaphor 映射：Engineering Drawings（图纸 = 可实践理论的编码，第 3 条隐喻）。
+*
+* section 参数渐进披露：不传 = 返回精简目录；传 = 返回对应框架全文/章节。
+*/
+/** 知识源：与各原工具内容保持一致（单一真相源——eap/neat/cce 各自源文件已并入此处） */
+/** 框架清单（无参调用时返回的精简目录） */
+const PRAXIS_INDEX = `praxis — 可实践理论注入（认知框架，按需加载）
+选择框架：praxis eap（认知质量——E↑/R↓/S↑ 三变量 + 输出前自检）
+          praxis neat（Neat 协作协议——小步对齐/显式决策/文档驱动）
+          praxis cce（认知连续性工程——容器 5 行为约束 + H_op 操作熵）
+无参返回本目录；详情以对应框架原文为准（单一真相源）。
+`;
+function renderText$5(value) {
+	return [{
+		type: "text",
+		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
+	}];
+}
+const praxisTool = defineTool({
+	name: "praxis",
+	description: "Praxis — actionable theory injection (cognitive frameworks, loaded on demand): eap (cognitive quality: E↑ explicitness / R↓ reconstructability / S↑ stability + self-check checklist) / neat (Neat design collaboration protocol: small-step alignment, explicit decisions, document-driven) / cce (Cognitive Continuity Engineering: container identity/accessibility/evolution under bounded resources). No section returns the index; pass a section to load that framework.",
+	parameters: { section: {
+		type: "string",
+		enum: [
+			"eap",
+			"neat",
+			"cce"
+		],
+		description: "Framework to inject: eap / neat / cce. Omit for the praxis index."
+	} },
+	output: {
+		schema: { type: "string" },
+		render: (_args, value) => renderText$5(value)
+	},
+	async execute(args) {
+		if (args.section === "eap") return EAP_CONTENT;
+		if (args.section === "neat") return NEAT_CONTENT;
+		if (args.section === "cce") return CCE_CONTENT;
+		return PRAXIS_INDEX;
+	}
+});
+//#endregion
 //#region src/handyman-preset-inherit.ts
 /**
 * 解析 handyman worker 从父 agent 继承的 preset，并组装创建 setup 钩子。
@@ -2276,10 +2334,10 @@ function handymanPresetInheritance(parentCtx) {
 * preset 继承 + 工具收窄：setup 钩子里对子 agent 执行 agentPresets.composeFrom（对齐
 * subagent 先例）+ tools.restrict deny handyman（worker 内部看不到 handyman 工具）。
 */
-function agentCwd$6(exec) {
+function agentCwd$5(exec) {
 	return (exec.agent?.session)?.header?.cwd ?? process.cwd();
 }
-function renderText$5(value) {
+function renderText$4(value) {
 	return [{
 		type: "text",
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
@@ -2497,11 +2555,11 @@ function createHandymanTool(ctx) {
 		},
 		output: {
 			schema: { type: "json" },
-			render: (_args, value) => renderText$5(value)
+			render: (_args, value) => renderText$4(value)
 		},
 		async execute(args, exec) {
 			if (args.guide) return { guide: HANDYMAN_GUIDE };
-			const root = findSerenityRoot(agentCwd$6(exec));
+			const root = findSerenityRoot(agentCwd$5(exec));
 			if (!root) throw new Error("No CCC found: no .serenity file from agent cwd");
 			const hc = readHandymanConfig(root, DEFAULT_SERENITY_CONFIG_PATHS);
 			if (hc === null) throw new Error("handyman requires a model whitelist: configure .opencode/serenity.json \"handyman.models\" (e.g. {\"handyman\": {\"models\": [\"minimax-cn-coding-plan/MiniMax-M3\"], \"defaultModel\": \"minimax-cn-coding-plan/MiniMax-M3\"}})");
@@ -2545,727 +2603,6 @@ function createHandymanTool(ctx) {
 	});
 }
 //#endregion
-//#region src/session-ops.ts
-/**
-* session-ops.ts — session 工具纯操作层（零 DSH 依赖，可独立单测）
-*
-* 行为对齐 osp（opencode-serenity-plugin/src/session/lib.ts）——osp 是 ACC 工具 spec：
-*   - create：--desc / --issue 二选一（互斥、缺省报错）；issue 模式目录 YYYY-MM-DD--<issue>
-*     （无 S###，sessionId=issue）；desc 模式 YYYY-MM-DD--S###--<desc>；goal 写入目标段；dry-run 预览
-*   - close：需 name + confirm=true；标记 [x] 已完成+已关闭 + 进度记录"关闭"
-*   - archive：name 缺省 → 批量归档（completed + ≥7 天 → 移动 _archived/）；单会话需 completed + grace
-*   - list/show/health/qa/summary：文本输出格式与 osp 一致
-* 保留 dsp S134 活跃会话机制（内存 Map + events 恢复，不落盘）——osp 同为内存 active-state。
-*/
-const SESSION_ACTIONS = [
-	"list",
-	"show",
-	"create",
-	"use",
-	"close",
-	"health",
-	"qa",
-	"archive",
-	"summary",
-	"hook-develop-guide"
-];
-/**
-* 读取 Session 事件序列（v1.28.1 适配 0.1.2-rc.1 补齐）：rc.1 起官方 Session 类
-* 移除 `.events` 属性 → `snapshotEvents()` 方法（dsh-session/src/session.ts：
-* `snapshotEvents(fromSeq, toSeqExclusive)`）。插件早期代码多处裸读 `.events`
-* （经 `as unknown as { events? }` 断言绕过 typecheck），运行时静默 undefined——
-* 造成 first-anchor 每轮重插 / SESSION 激活恢复失效 / rebuild 定位错乱。
-* 统一收敛到本 helper：snapshotEvents() 优先（rc.1 真实形态），`.events` 兜底
-* （测试替身/旧运行时）。所有消费方一律经此读取，禁止再裸读 `.events`。
-* 泛型 T：调用方按需声明事件形状（如 `SessionEvent`），unknown 默认。
-*/
-function sessionEvents(session) {
-	const s = session;
-	if (!s) return [];
-	if (typeof s.snapshotEvents === "function") try {
-		return s.snapshotEvents() ?? [];
-	} catch {}
-	return s.events ?? [];
-}
-const SESSION_MD = "SESSION.md";
-const ARCHIVE_DIR_NAME = "_archived";
-const HEALTH_STALE_DAYS = 7;
-const HEALTH_STALLED_PCT = 30;
-const HEALTH_STALLED_DAYS = 3;
-const HEALTH_GHOST_DAYS = 2;
-const DAY = 864e5;
-function sessionsRoot(root) {
-	return join(root, "AGENT_SESSIONS");
-}
-/** 解析 SESSION.md 状态元数据（对齐 osp parseSessionMd） */
-function parseSessionMd(filePath) {
-	try {
-		const content = readFileSync(filePath, "utf-8");
-		return {
-			hasSessionMd: true,
-			completed: /\[\s*x\s*\]/i.test(content),
-			completedCount: (content.match(/\[\s*x\s*\]/gi) ?? []).length,
-			pendingCount: (content.match(/\[\s*[ \t]\s*\]/g) ?? []).length,
-			unresolvedCount: (content.match(/(未解决|open|question|TODO)/gi) ?? []).length
-		};
-	} catch {
-		return {
-			hasSessionMd: false,
-			completed: false,
-			completedCount: 0,
-			pendingCount: 0,
-			unresolvedCount: 0
-		};
-	}
-}
-function readSessionEntry(dirPath) {
-	try {
-		const st = statSync(dirPath);
-		if (!st.isDirectory()) return null;
-		const dirName = basename(dirPath);
-		const mdPath = join(dirPath, SESSION_MD);
-		const status = existsSync(mdPath) ? parseSessionMd(mdPath) : {
-			hasSessionMd: false,
-			completed: false,
-			completedCount: 0,
-			pendingCount: 0,
-			unresolvedCount: 0
-		};
-		return {
-			dirName,
-			path: dirPath,
-			mtime: st.mtime,
-			status
-		};
-	} catch {
-		return null;
-	}
-}
-/** 读取 AGENT_SESSIONS 中所有会话，活跃（未完成）排前（对齐 osp readAllSessions） */
-function readAllSessions(sessionsDir) {
-	try {
-		return readdirSync(sessionsDir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => readSessionEntry(join(sessionsDir, e.name))).filter((s) => s !== null).sort((a, b) => {
-			if (!a.status.completed && b.status.completed) return -1;
-			if (a.status.completed && !b.status.completed) return 1;
-			return b.mtime.getTime() - a.mtime.getTime();
-		});
-	} catch {
-		return [];
-	}
-}
-/** 提取目录名中的会话 ID（S### 或 issue 名）；无匹配返回 '' */
-function extractSessionId(dirName) {
-	const m = dirName.match(/--S(\d{3,})--/);
-	return m ? `S${m[1]}` : "";
-}
-/**
-* 根据 key 查找会话（对齐 osp findSession）：
-* 精确目录名 → S### ID（允许 S31→031）→ 唯一模糊子串匹配（多个则报错）
-*/
-function findSession(sessionsDir, key) {
-	const all = readAllSessions(sessionsDir);
-	const byName = all.find((s) => s.dirName === key);
-	if (byName) return byName;
-	const searchId = key.replace(/^S/, "").padStart(3, "0");
-	const byId = all.find((s) => {
-		const m = s.dirName.match(/--S(\d{3,})--/);
-		return m && m[1] === searchId;
-	});
-	if (byId) return byId;
-	const lower = key.toLowerCase();
-	const fuzzy = all.filter((s) => s.dirName.toLowerCase().includes(lower));
-	if (fuzzy.length === 1) return fuzzy[0] ?? null;
-	if (fuzzy.length > 1) throw new Error(`Found ${fuzzy.length} sessions matching "${key}": ` + fuzzy.map((s) => s.dirName).join(", ") + ". Use a more specific query.");
-	return null;
-}
-/** list 子命令（对齐 osp listSessions 文本格式 + active 标记） */
-function listSessions(root, activeId) {
-	const sessions = readAllSessions(sessionsRoot(root));
-	if (sessions.length === 0) return "(no sessions in AGENT_SESSIONS/)";
-	const lines = sessions.map((s) => {
-		const age = Math.floor((Date.now() - s.mtime.getTime()) / DAY);
-		const sessionId = extractSessionId(s.dirName);
-		return `${activeId !== void 0 && sessionId !== "" && sessionId === activeId ? "●" : s.status.completed ? "✓" : "○"} ${s.dirName} (${age}d ago)`;
-	});
-	return `AGENT_SESSIONS/ (${sessions.length} sessions)\n` + lines.join("\n");
-}
-/** show 子命令（对齐 osp showSession：`# dirName\n\n` + SESSION.md 内容） */
-function showSession(root, key) {
-	const session = findSession(sessionsRoot(root), key);
-	if (!session) throw new Error(`Session not found: "${key}". Use "list" to see available sessions.`);
-	const mdPath = join(session.path, SESSION_MD);
-	if (!existsSync(mdPath)) return `Session ${session.dirName} (no SESSION.md — directory exists but is empty)`;
-	const content = readFileSync(mdPath, "utf-8");
-	return `# ${session.dirName}\n\n${content}`;
-}
-/** 生成 SESSION.md 模板（对齐 osp：goal 写入目标段，时间戳 YYYY-MM-DD HH:mm） */
-function sessionMdTemplate(title, id, goal, now) {
-	const ts = now.toISOString().slice(0, 16).replace("T", " ");
-	return `# SESSION: ${title}\n- ID: ${id}\n\n## 目标\n${goal ?? "（待补充）"}\n\n## 状态\n- [ ] 进行中\n\n## 关键决策\n| # | 决策 | 理由 |\n|---|------|------|\n| 1 | | |\n\n## 进度记录\n- ${ts} — 创建\n\n## 产出物\n- \n\n## 未解决的问题\n- \n`;
-}
-/** create 子命令（对齐 osp createSession：--desc/--issue 二选一 + dry-run + 长度限制） */
-/** 目录名脱敏（Windows 审计问题 10）：非法字符 → '-', 去尾点/空格, 保留名（CON/NUL 等）加前缀 */
-function sanitizeDirName(s) {
-	const cleaned = s.replace(/[<>:"/\\|?*\u0000-\u001f]/g, "-").replace(/[ .]+$/g, "");
-	if (/^(con|prn|aux|nul|com[1-9]|lpt[1-9])$/i.test(cleaned)) return `_${cleaned}`;
-	return cleaned;
-}
-function createSession(opts) {
-	const { root, desc, issue, goal, dryRun } = opts;
-	const sessionsDir = sessionsRoot(root);
-	const now = /* @__PURE__ */ new Date();
-	const datePrefix = now.toISOString().slice(0, 10);
-	if (!desc && !issue) throw new Error("create requires either --desc or --issue");
-	if (desc && issue) throw new Error("--desc and --issue are mutually exclusive");
-	if (issue) {
-		if (issue.length > 100) throw new Error(`issue too long: ${issue.length} chars (max 100)`);
-		const dirName = `${datePrefix}--${sanitizeDirName(issue)}`;
-		const sessionPath = join(sessionsDir, dirName);
-		if (!dryRun && existsSync(sessionPath)) throw new Error(`Session directory already exists: "${dirName}"`);
-		if (dryRun) return {
-			message: `[dry-run] Would create: ${dirName}/`,
-			dirName,
-			sessionPath,
-			sessionId: issue
-		};
-		mkdirSync(sessionPath, { recursive: true });
-		writeFileSync(join(sessionPath, SESSION_MD), sessionMdTemplate(issue, issue, goal, now), "utf-8");
-		return {
-			message: `Created: ${dirName}/`,
-			dirName,
-			sessionPath,
-			sessionId: issue
-		};
-	}
-	if (!desc || desc.length === 0) throw new Error("description cannot be empty");
-	if (desc.length > 200) throw new Error(`description too long: ${desc.length} chars (max 200)`);
-	const sessions = readAllSessions(sessionsDir);
-	let maxId = 0;
-	for (const s of sessions) {
-		const m = s.dirName.match(/--S(\d{3,})--/);
-		if (m) {
-			const num = parseInt(m[1], 10);
-			if (num > maxId) maxId = num;
-		}
-	}
-	const nextId = String(maxId + 1).padStart(3, "0");
-	const dirName = `${datePrefix}--S${nextId}--${sanitizeDirName(desc)}`;
-	const sessionPath = join(sessionsDir, dirName);
-	if (!dryRun && existsSync(sessionPath)) throw new Error(`Session directory already exists: "${dirName}"`);
-	if (dryRun) return {
-		message: `[dry-run] Would create: ${dirName}/\n  goal=${goal ?? "(none)"}`,
-		dirName,
-		sessionPath,
-		sessionId: `S${nextId}`
-	};
-	mkdirSync(sessionPath, { recursive: true });
-	writeFileSync(join(sessionPath, SESSION_MD), sessionMdTemplate(desc, `S${nextId}`, goal, now), "utf-8");
-	return {
-		message: `Created: ${dirName}/ (S${nextId})`,
-		dirName,
-		sessionPath,
-		sessionId: `S${nextId}`
-	};
-}
-/**
-* 活动会话跟踪（S134 v1.16.14 内存化，对齐 osp active-state）：
-* **不落盘**——活跃会话状态在内存 Map（key = scope = dsh 会话 id），避免落盘标记
-* 文件累积与跨会话串台（落盘版 `.dsh/active-sessions/<scope>` 已被此方案取代）。
-* 进程重启恢复：从**当前会话历史（events）**解析 `[SESSION CONTEXT]` 标记（use 时注入），
-* 只扫自己会话——无全局扫描、无跨会话污染。
-*/
-const DEFAULT_SESSION_SCOPE = "default";
-/** [SESSION CONTEXT] 恢复标记（use 时注入 events 历史；进程重启后从 events 解析） */
-const SESSION_CONTEXT_MARKER = "[SESSION CONTEXT] Activated:";
-/** 内存活跃会话：scope（dsh 会话 id）→ 会话信息（不落盘；并行多会话各自 key 隔离） */
-const activeStore = /* @__PURE__ */ new Map();
-/** 全局最近活跃（对齐 osp lastActive；供无 scope 上下文使用） */
-let lastActive = null;
-function getActiveSessionInfo(scope) {
-	return activeStore.get(scope) ?? null;
-}
-function setActiveSessionInfo(scope, info) {
-	activeStore.set(scope, info);
-	lastActive = info;
-}
-function clearActiveSessionInfo(scope) {
-	activeStore.delete(scope);
-	if (lastActive && ![...activeStore.values()].some((v) => v === lastActive)) lastActive = null;
-}
-/** 当前 scope 的活跃会话 SESSION.md 绝对路径；无激活返回 null（读内存，不落盘） */
-function readActiveSessionMd(_root, scope = DEFAULT_SESSION_SCOPE) {
-	return getActiveSessionInfo(scope)?.mdPath ?? null;
-}
-/**
-* use 子命令：激活会话（写内存 Map）+ 返回对齐 osp 的输出文本
-* （含 [SESSION CONTEXT] 标记 + todowrite 指令；标记随工具结果进 events 历史，
-*  进程重启后从当前会话 events 解析恢复）。
-*/
-function useSession(root, key, scope = DEFAULT_SESSION_SCOPE) {
-	const session = findSession(sessionsRoot(root), key);
-	if (!session) throw new Error(`Session not found: "${key}". Use "list" to see available sessions.`);
-	const mdPath = join(session.path, SESSION_MD);
-	if (!existsSync(mdPath)) throw new Error(`Session "${session.dirName}" has no SESSION.md — nothing to load.`);
-	const sessionId = extractSessionId(session.dirName) || basename(session.dirName);
-	const dirName = session.dirName;
-	const shortName = dirName.replace(/^\d{4}-\d{2}-\d{2}--/, "");
-	setActiveSessionInfo(scope, {
-		sessionId,
-		dirName,
-		mdPath
-	});
-	return {
-		dir: dirName,
-		mdPath,
-		context: [
-			`───────────────────────────────────────────────────────────────`,
-			`${SESSION_CONTEXT_MARKER} ${dirName}`,
-			`───────────────────────────────────────────────────────────────`,
-			`Use "session show ${sessionId}" to view session details.`,
-			`SESSION.md path: ${mdPath}`,
-			``,
-			`→ All subsequent work should refer back to this session.`,
-			`  Use "session show ${sessionId}" to check current progress.`,
-			`  After advancing work, update the "进度记录" (progress) section in SESSION.md.`,
-			``,
-			`→ BEFORE responding to the user, you MUST call todowrite immediately`,
-			`  with the session todo list. The first item MUST be:`,
-			`    content: "SESSION: ${sessionId} — ${shortName}"`,
-			`    status: "completed", priority: "low"`,
-			`  Follow with any tasks parsed from SESSION.md.`,
-			`───────────────────────────────────────────────────────────────`
-		].join("\n")
-	};
-}
-/**
-* close 子命令（对齐 osp closeSession）：需 name + confirm=true；
-* 标记 SESSION.md 为 [x] 已完成 + [x] 已关闭 + 进度记录"关闭"；清除该会话的活跃状态。
-*/
-function closeSession(root, key, confirm, scope = DEFAULT_SESSION_SCOPE) {
-	if (!confirm) return "⚠ Close requires explicit confirmation.\n  Re-run with --confirm to confirm closing this session.";
-	const session = findSession(sessionsRoot(root), key);
-	if (!session) throw new Error(`Session not found: "${key}". Use "list" to see available sessions.`);
-	if (session.status.completed) return `Session "${session.dirName}" is already completed.`;
-	const mdPath = join(session.path, SESSION_MD);
-	if (!existsSync(mdPath)) throw new Error(`Session "${session.dirName}" has no SESSION.md — nothing to close.`);
-	let content = readFileSync(mdPath, "utf-8");
-	content = content.replace(/\r\n/g, "\n");
-	content = content.replace(/## 状态\n\n?- \[ \] 进行中/, "## 状态\n- [x] 已完成\n- [x] 已关闭");
-	const now = (/* @__PURE__ */ new Date()).toISOString().slice(0, 16).replace("T", " ");
-	if (!content.includes("-- 关闭")) content = content.replace(/(## 进度记录\n)/, `$1- ${now} — 关闭\n`);
-	writeFileSync(mdPath, content, "utf-8");
-	clearActiveSessionInfo(scope);
-	return `Session "${session.dirName}" closed and marked as completed.`;
-}
-/**
-* 从会话历史（events）解析会话身份（进程重启恢复；只扫**当前会话**自己的历史——无跨会话串台）。
-*
-* v1.24.11 稳固化（S142 用户需求：重建后新会话必须准确知道从哪个 SESSION 恢复）：
-* **路径规范行即可，不再要求 [SESSION CONTEXT] 标记**——`session use` 上下文与重建锚点
-* （buildRebuildAnchor 的 `- Persistent trajectory — SESSION.md path: <rel>` 行）同格式，
-* 因此**仅靠重建锚点的会话（从未显式 use）同样可恢复**。从**尾到头**扫描，最后一条
-* 合法路径胜出（时间序最新）；会话目录名/ID 从路径本身派生（单一真相源，不猜）。
-* 路径可为相对（重建锚点存 rel）——绝对化与存在性校验在调用方（知道 root）执行。
-*/
-function parseSessionContextFromEvents(events) {
-	for (let i = events.length - 1; i >= 0; i--) {
-		const strs = [];
-		collectStrings(events[i], strs);
-		for (const s of strs) {
-			const md = extractSessionMdPathFromText(s);
-			if (!md) continue;
-			let dirName;
-			let filePath;
-			if (basename(md) === SESSION_MD) {
-				dirName = basename(dirname(md));
-				filePath = md;
-			} else if (isSessionDirName(basename(md))) {
-				dirName = basename(md);
-				filePath = join(md, SESSION_MD);
-			} else continue;
-			if (!isSessionDirName(dirName)) continue;
-			const idMatch = dirName.match(/--S(\d{3,})--/);
-			return {
-				sessionId: idMatch ? `S${idMatch[1]}` : dirName,
-				dirName,
-				mdPath: filePath
-			};
-		}
-	}
-	return null;
-}
-/** 递归收集对象/数组/字符串中的全部字符串（保留原文，无 JSON 转义） */
-function collectStrings(v, out) {
-	if (typeof v === "string") {
-		out.push(v);
-		return;
-	}
-	if (v && typeof v === "object") for (const val of Object.values(v)) collectStrings(val, out);
-}
-/** 规范行正则：`SESSION.md path: <路径>`（路径可含空格 → [^\r\n]+ 整行匹配） */
-const SESSION_MD_PATH_RE = /SESSION\.md path:\s*([^\r\n]+)/;
-/** 从文本提取 SESSION.md 路径（use 上下文 / 重建锚点规范行通用；无匹配返回 null）。
-*  同行已知尾注（如系统提示词 Session 块的 persistent-body 注释）剥除——规范行只取路径本体。 */
-function extractSessionMdPathFromText(text) {
-	const m = text.match(SESSION_MD_PATH_RE);
-	if (!m) return null;
-	let p = m[1].trim();
-	const suffix = p.search(/ \(the trajectory's persistent body/);
-	if (suffix > 0) p = p.slice(0, suffix).trim();
-	return p;
-}
-/** 会话目录名形态校验（createSession 恒带日期前缀 `YYYY-MM-DD--`） */
-function isSessionDirName(dirName) {
-	return /^\d{4}-\d{2}-\d{2}--/.test(dirName) && dirName.length > 11;
-}
-/**
-* 从 dsh 会话标题解析 SESSION 目录（编码无关 best-match，U3/U4）——
-* 标题不假设 S### 前缀（CCC 可自定义编码：apaas-xxx / P### / 完整目录名等）。
-* 匹配优先级（全部对 AGENT_SESSIONS 现有目录 best-match，不猜）：
-*   ① 标题即完整目录名（含日期前缀 `YYYY-MM-DD--`）→ 精确命中
-*   ② 标题含 `--<code>--` 段（如完整目录名被截断为 `<code>-日期-概括` 前段）→
-*      按 code 段匹配：取标题首 token（`-` 前），与各目录 `--<code>--`/`--<code>` 尾段比对
-*   ③ 唯一模糊子串匹配（多个则返回 null 防误猜）
-* @param title dsh 会话标题（如 `S142-2026-08-24-概括` / `apaas-26116-…` / 完整目录名）
-* @param sessionsDir AGENT_SESSIONS 绝对路径
-* @returns 命中目录的绝对路径（SESSION.md）；无/歧义返回 null
-*/
-function resolveSessionByTitle(title, sessionsDir) {
-	const t = (title ?? "").trim();
-	if (!t) return null;
-	const all = readAllSessions(sessionsDir);
-	if (all.length === 0) return null;
-	if (isSessionDirName(t)) {
-		const exact = all.find((s) => s.dirName === t);
-		if (exact) return join(exact.path, SESSION_MD);
-	}
-	const codeToken = t.split("-")[0]?.trim() ?? "";
-	if (codeToken) {
-		const byCode = all.filter((s) => {
-			const m = s.dirName.match(/--([^--]+)--/);
-			const code = m ? m[1] : null;
-			const tailMatch = s.dirName.match(/--([^--]+)$/);
-			const tailCode = tailMatch && !s.dirName.includes("--", s.dirName.lastIndexOf("--") + 3) ? tailMatch[1] : null;
-			return code === codeToken || tailCode === codeToken || s.dirName === codeToken || s.dirName.includes(`--${codeToken}`);
-		});
-		if (byCode.length === 1) return join(byCode[0].path, SESSION_MD);
-		if (byCode.length > 1) return null;
-	}
-	const fuzzy = all.filter((s) => s.dirName.toLowerCase().includes(t.toLowerCase()));
-	if (fuzzy.length === 1) return join(fuzzy[0].path, SESSION_MD);
-	return null;
-}
-/**
-* 约定回退（v1.24.11）：AGENT_SESSIONS 下最新修改的**未完成**会话的 SESSION.md。
-* readAllSessions 已按「未完成优先 + mtime 降序」排序 → 首个未完成且含 SESSION.md 即最新活动。
-* 只作最后手段（内存/events/锚点全缺时），保证重建锚点至少指向一个真实存在的轨迹。
-*/
-function findLatestActiveSessionMd(root) {
-	for (const s of readAllSessions(sessionsRoot(root))) {
-		if (s.status.completed) continue;
-		const md = join(s.path, SESSION_MD);
-		if (existsSync(md)) return md;
-	}
-	return null;
-}
-/** health 子命令（对齐 osp healthCheck：stale/stalled/ghost/drift 四类检查，文本输出） */
-function healthCheck(root) {
-	const sessions = readAllSessions(sessionsRoot(root));
-	if (sessions.length === 0) return "No sessions found — nothing to check.";
-	const now = Date.now();
-	const issues = [];
-	for (const s of sessions) {
-		const ageDays = (now - s.mtime.getTime()) / DAY;
-		const st = s.status;
-		if (ageDays > HEALTH_STALE_DAYS && !st.completed) issues.push({
-			dirName: s.dirName,
-			issue: `No activity for ${Math.floor(ageDays)}d`,
-			severity: "stale"
-		});
-		const totalTasks = st.completedCount + st.pendingCount;
-		if (totalTasks > 0) {
-			const pct = Math.round(st.completedCount / totalTasks * 100);
-			if (pct < HEALTH_STALLED_PCT && ageDays > HEALTH_STALLED_DAYS && !st.completed) issues.push({
-				dirName: s.dirName,
-				issue: `Only ${pct}% done after ${Math.floor(ageDays)}d`,
-				severity: "stalled"
-			});
-		}
-		if (!st.hasSessionMd && ageDays > HEALTH_GHOST_DAYS) issues.push({
-			dirName: s.dirName,
-			issue: "No SESSION.md (ghost directory)",
-			severity: "ghost"
-		});
-		if (st.unresolvedCount > 3 && !st.completed) issues.push({
-			dirName: s.dirName,
-			issue: `${st.unresolvedCount} unresolved items`,
-			severity: "drift"
-		});
-	}
-	if (issues.length === 0) return "All sessions healthy — no issues found.";
-	const lines = issues.map((i) => `[${i.severity.toUpperCase()}] ${i.dirName}: ${i.issue}`);
-	return `${issues.length} issue(s) found:\n` + lines.join("\n");
-}
-/** archive 子命令（对齐 osp archiveSessions：移动 _archived/；name 缺省批量） */
-function archiveSessions(root, opts) {
-	const { name, dryRun } = opts;
-	const sessionsDir = sessionsRoot(root);
-	const now = Date.now();
-	const archiveDir = join(sessionsDir, ARCHIVE_DIR_NAME);
-	if (name) {
-		const session = findSession(sessionsDir, name);
-		if (!session) throw new Error(`Session not found: "${name}"`);
-		if (!session.status.completed) return `Session "${session.dirName}" is not completed — skipping.`;
-		const ageDays = (now - session.mtime.getTime()) / DAY;
-		if (ageDays < 7) return `Session "${session.dirName}" completed ${Math.floor(ageDays)}d ago — needs ${7 - Math.floor(ageDays)} more days before archiving.`;
-		if (dryRun) return `[dry-run] Would archive: ${session.dirName} → ${ARCHIVE_DIR_NAME}/`;
-		if (!existsSync(archiveDir)) mkdirSync(archiveDir, { recursive: true });
-		renameSync(session.path, join(archiveDir, session.dirName));
-		return `Archived: ${session.dirName} → _archived/`;
-	}
-	const toArchive = readAllSessions(sessionsDir).filter((s) => {
-		if (!s.status.completed) return false;
-		return (now - s.mtime.getTime()) / DAY >= 7;
-	});
-	if (toArchive.length === 0) return "No sessions eligible for archiving.";
-	if (dryRun) return `[dry-run] Would archive ${toArchive.length} session(s):\n` + toArchive.map((s) => `  ${s.dirName}`).join("\n");
-	if (!existsSync(archiveDir)) mkdirSync(archiveDir, { recursive: true });
-	let count = 0;
-	for (const s of toArchive) {
-		renameSync(s.path, join(archiveDir, s.dirName));
-		count++;
-	}
-	return `Archived ${count} session(s) → _archived/`;
-}
-/** summary 子命令（对齐 osp sessionSummary 文本仪表盘） */
-function summarize(root) {
-	const sessions = readAllSessions(sessionsRoot(root));
-	if (sessions.length === 0) return "AGENT_SESSIONS/ is empty.";
-	const now = Date.now();
-	const completed = sessions.filter((s) => s.status.completed).length;
-	const active = sessions.length - completed;
-	const stale = sessions.filter((s) => !s.status.completed && (now - s.mtime.getTime()) / DAY > HEALTH_STALE_DAYS).length;
-	const ghost = sessions.filter((s) => !s.status.hasSessionMd).length;
-	const recent = sessions.slice(0, 5);
-	const lines = [
-		`AGENT_SESSIONS Summary`,
-		`────────────────────────`,
-		`Total:    ${sessions.length}`,
-		`Active:   ${active}`,
-		`Completed: ${completed}`,
-		`Stale:    ${stale}`,
-		`Ghost:    ${ghost}`,
-		``,
-		`Recent activity (top 5):`,
-		...recent.map((s) => {
-			const age = Math.floor((now - s.mtime.getTime()) / DAY);
-			return `  ${s.status.completed ? "✓" : "○"} ${s.dirName} (${age}d ago)`;
-		})
-	];
-	if (stale > 0) lines.push("", "⚠ Warning: Stale sessions found — run \"session health\" for details.");
-	return lines.join("\n");
-}
-/** 事实核对：SESSION.md 声明 vs 实际情况（结构/一致性/新鲜度/决策质量/产出物） */
-function qaCheck(root, key) {
-	const session = findSession(sessionsRoot(root), key);
-	if (!session) throw new Error(`Session not found: "${key}". Use "list" to see available sessions.`);
-	const mdPath = join(session.path, SESSION_MD);
-	if (!existsSync(mdPath)) return `[ERROR] Session "${session.dirName}" has no SESSION.md — nothing to verify.`;
-	const content = readFileSync(mdPath, "utf-8");
-	const issues = [];
-	for (const section of [
-		{
-			heading: "目标",
-			label: "目标 (goal)"
-		},
-		{
-			heading: "状态",
-			label: "状态 (status)"
-		},
-		{
-			heading: "关键决策",
-			label: "关键决策 (key decisions)"
-		},
-		{
-			heading: "进度记录",
-			label: "进度记录 (progress)"
-		},
-		{
-			heading: "产出物",
-			label: "产出物 (outputs)"
-		},
-		{
-			heading: "未解决的问题",
-			label: "未解决的问题 (unresolved)"
-		}
-	]) {
-		const headingRegex = new RegExp(`^##\\s*${section.heading}[\\s\\S]*?(?=^##|(?![\\s\\S]))`, "m");
-		const match = content.match(headingRegex);
-		if (!match) {
-			issues.push({
-				severity: "warning",
-				category: "structure",
-				message: `Missing section: ${section.label}`
-			});
-			continue;
-		}
-		const headingLineRegex = new RegExp(`^##\\s*${section.heading}\\s*$`, "m");
-		const body = match[0].replace(headingLineRegex, "").trim();
-		if (!body || /^[-*]\s*$/.test(body)) issues.push({
-			severity: "warning",
-			category: "structure",
-			message: `Section "${section.label}" is empty (only placeholder)`
-		});
-	}
-	const completedTasks = (content.match(/\[\s*x\s*\]/gi) ?? []).length;
-	const pendingTasks = (content.match(/\[\s*[ \t]\s*\]/gi) ?? []).length;
-	const statusSection = content.match(/^##\s*状态[\s\S]*?(?=^##|(?![^]))/im);
-	const statusBody = statusSection ? statusSection[0].replace(/^##\s*状态.*$/m, "").trim() : "";
-	const hasCompletionMark = statusBody ? /#+\s*(?:完成|done|completed|closed)\b/i.test(statusBody) || /(?:全部完成|已全部完成|所有.*任务.*完成|任务.*全部完成|已完成.*所有)/i.test(statusBody) : false;
-	const unresolvedSection = content.match(/^##\s*未解决的问题[\s\S]*?(?=^##|(?![^]))/im);
-	const unresolvedBody = unresolvedSection ? unresolvedSection[0].replace(/^##\s*未解决的问题.*$/m, "").trim() : "";
-	const unresolvedCount = unresolvedBody ? (unresolvedBody.match(/(?:未解决|open|question|TODO)/gi) ?? []).length : 0;
-	if (hasCompletionMark && pendingTasks > 0) issues.push({
-		severity: "error",
-		category: "consistency",
-		message: `Session marked as completed but has ${pendingTasks} pending task(s)`
-	});
-	if (hasCompletionMark && unresolvedCount > 0) issues.push({
-		severity: "warning",
-		category: "consistency",
-		message: `Session marked as completed but has ${unresolvedCount} unresolved item(s)`
-	});
-	if (completedTasks > 0 && pendingTasks === 0 && !hasCompletionMark) issues.push({
-		severity: "info",
-		category: "consistency",
-		message: `All ${completedTasks} task(s) completed but session not marked complete`
-	});
-	const progressSection = content.match(/##\s*进度记录[\s\S]*?(?=^##|\z)/m);
-	if (progressSection) {
-		const dateMatches = progressSection[0].match(/\b(\d{4}-\d{2}-\d{2})\b/g);
-		if (dateMatches && dateMatches.length > 0) {
-			const lastDateStr = dateMatches[dateMatches.length - 1];
-			const lastDate = new Date(lastDateStr);
-			const daysSince = Math.floor((Date.now() - lastDate.getTime()) / DAY);
-			if (daysSince > HEALTH_STALE_DAYS && pendingTasks > 0) issues.push({
-				severity: "warning",
-				category: "stale",
-				message: `No progress entry for ${daysSince} days (last: ${lastDateStr}), session still has ${pendingTasks} pending task(s)`
-			});
-		}
-	}
-	const decisionSection = content.match(/##\s*关键决策[\s\S]*?(?=^##|\z)/m);
-	if (decisionSection) {
-		const decisionLines = decisionSection[0].split("\n").filter((l) => /^\|\s*\d+\s*\|/.test(l));
-		if (decisionLines.length > 0) {
-			const emptyDecisions = decisionLines.filter((l) => {
-				const cells = l.split("|").map((c) => c.trim());
-				return cells.length >= 4 && (!cells[2] || !cells[3] || cells[2] === "-" || cells[3] === "-");
-			});
-			if (emptyDecisions.length > 0) issues.push({
-				severity: "info",
-				category: "quality",
-				message: `${emptyDecisions.length} decision(s) have empty reason — consider filling gaps`
-			});
-		} else if (!hasCompletionMark) issues.push({
-			severity: "info",
-			category: "quality",
-			message: "No decisions recorded yet — add key decisions as the session progresses"
-		});
-	}
-	const outputSection = content.match(/##\s*产出物[\s\S]*?(?=^##|\z)/m);
-	if (outputSection) {
-		const outputLines = outputSection[0].split("\n").filter((l) => /^\s*[-*]\s/.test(l));
-		const fileRefs = [];
-		for (const line of outputLines) {
-			const refs = line.match(/`[^`]+`/g) ?? [];
-			fileRefs.push(...refs.map((r) => r.replace(/`/g, "")));
-			const inlineRefs = line.match(/\b[\w./-]+\.[a-zA-Z]{1,5}\b/g) ?? [];
-			fileRefs.push(...inlineRefs.filter((r) => r.includes("/") || r.includes(".")));
-		}
-		if (fileRefs.length > 0) {
-			const missing = fileRefs.filter((ref) => !existsSync(join(root, ref)));
-			if (missing.length > 0 && completedTasks > 0) issues.push({
-				severity: "warning",
-				category: "outputs",
-				message: `${missing.length} referenced file(s) not found: ${missing.slice(0, 3).join(", ")}${missing.length > 3 ? `... (+${missing.length - 3} more)` : ""}`
-			});
-		}
-	}
-	const errorCount = issues.filter((i) => i.severity === "error").length;
-	const warningCount = issues.filter((i) => i.severity === "warning").length;
-	const infoCount = issues.filter((i) => i.severity === "info").length;
-	const verified = errorCount === 0 && warningCount === 0;
-	const lines = [
-		`QA Report: ${session.dirName}`,
-		`────────────────${"─".repeat(session.dirName.length)}`,
-		`Summary: ${issues.length} issue(s) found (${errorCount} error, ${warningCount} warning, ${infoCount} info)`,
-		`Status: ${verified ? "✓ Verified" : "⚠ Issues found"}`
-	];
-	if (issues.length > 0) {
-		lines.push("");
-		for (const issue of issues) {
-			const tag = issue.severity === "error" ? "ERR" : issue.severity === "warning" ? "WRN" : "INF";
-			lines.push(`  [${tag}:${issue.category}] ${issue.message}`);
-		}
-	}
-	lines.push("", "Recommendations:");
-	if (errorCount > 0) lines.push("  • Fix errors before closing the session (status vs content mismatch)");
-	if (warningCount > 0) lines.push("  • Review warnings — they may indicate incomplete or outdated information");
-	if (verified) lines.push("  • Session looks clean — no issues detected");
-	return lines.join("\n");
-}
-//#endregion
-//#region src/session-bound.ts
-/** 事件 type 常量（声明 + 读取共用） */
-const SESSION_BOUND_EVENT = "serenity/bound";
-/** 事件形状归一（运行时数据经 session.append 深冻结，此处仅类型收窄） */
-function asBoundEvent(e) {
-	const ev = e;
-	if (!ev || ev.type !== "serenity/bound") return null;
-	const d = ev.data;
-	if (!d || typeof d.dirName !== "string" || typeof d.mdPath !== "string") return null;
-	return d;
-}
-/**
-* 读取会话日志中**最后一条** `serenity/bound`（权威绑定，latest-wins）。
-* 尾到头扫描（时间序最新在后）；无 bound 事件返回 null。
-* 纯逻辑零 DSH 依赖（经 sessionEvents helper 读 snapshotEvents/events 兜底）。
-*/
-function readLastBound(session) {
-	const events = sessionEvents(session);
-	for (let i = events.length - 1; i >= 0; i--) {
-		const b = asBoundEvent(events[i]);
-		if (b) return b;
-	}
-	return null;
-}
-/**
-* append 一条 `serenity/bound` 绑定事件（log-only，无 surfaceOp——元数据不进模型可见面）。
-* @param session 目标 dsh 会话（真实 Session；append 泛型经内部断言兼容——类型由
-*   `serenity/bound` 声明面保证，append 接受已声明事件）
-* @param action 绑定动作
-* @param rec 绑定记录（dirName + mdPath 必填；sessionId 可选展示码）
-* @returns 是否成功（append 抛错/会话不可用时 false——绑定失败不阻断主流程）
-*/
-function appendBound(session, action, rec) {
-	if (!session || typeof session.append !== "function") return false;
-	try {
-		const append = session.append;
-		append(SESSION_BOUND_EVENT, {
-			dirName: rec.dirName,
-			mdPath: rec.mdPath,
-			...rec.sessionId ? { sessionId: rec.sessionId } : {},
-			action,
-			at: Date.now(),
-			...rec.note ? { note: rec.note } : {}
-		});
-		return true;
-	} catch {
-		return false;
-	}
-}
-//#endregion
 //#region src/tools/session.ts
 /**
 * session.ts — session 真实 DSH 工具定义（defineTool）
@@ -3283,7 +2620,7 @@ function appendBound(session, action, rec) {
 * 同步把当前 dsh 会话重命名为该 SESSION 目录名**（sessionTitle.rename，user source
 * pin 住标题）。非创建时预命名。
 */
-function agentCwd$5(exec) {
+function agentCwd$4(exec) {
 	return exec.agent?.session?.header?.cwd ?? process.cwd();
 }
 /** 当前 dsh 会话 id（use/close 按会话隔离的 scope） */
@@ -3399,7 +2736,7 @@ function renameDshSessionForActive(ctx, exec, info, summary) {
 		console.warn(`[serenity-hooks] dsh 会话重命名异常: ${String(err?.message ?? err)}`);
 	}
 }
-function renderText$4(value) {
+function renderText$3(value) {
 	return [{
 		type: "text",
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
@@ -3424,10 +2761,10 @@ function discoverCccSubcommands(entries) {
 }
 /** 生成扩展提示（对齐 osp buildExtHint） */
 function buildExtHint(hasSessionTool, hooks, subcommands) {
-	if (!hasSessionTool) return "\n\n[CCC] To extend session capabilities, register a session-tool MSM (acc_msm register); see session hook-develop-guide";
+	if (!hasSessionTool) return "\n\n[CCC] To extend session capabilities, register a session-tool MSM (container_admin msm register); see session hook-develop-guide";
 	const parts = [];
 	if (hooks.length > 0) parts.push(`hooks: ${hooks.join(", ")}`);
-	if (subcommands.length > 0) parts.push(`custom subcommands (acc_msm exec session-tool): ${subcommands.join(", ")}`);
+	if (subcommands.length > 0) parts.push(`custom subcommands (msm session-tool): ${subcommands.join(", ")}`);
 	return `\n\n[CCC] session-tool MSM registered${parts.length > 0 ? ` (${parts.join("; ")})` : ""}`;
 }
 /** hook-develop-guide 内容（对齐 osp getHookDevelopGuide） */
@@ -3449,13 +2786,13 @@ function getHookDevelopGuide(hasSessionTool) {
 		"",
 		"  create-transform",
 		"    Trigger: after create writes the default SESSION.md",
-		"    Invocation: acc_msm exec session-tool --hook=create-transform --session-dir=<path>",
+		"    Invocation: msm session-tool --hook=create-transform --session-dir=<path>",
 		"    Allowed: read SESSION.md and modify it in place (append fields, swap templates, call APIs, etc.)",
 		"    Note: ACC has already ensured the directory and SESSION.md exist; the CCC only modifies",
 		"",
 		"── Extension point 2: Custom subcommands ──",
 		"",
-		"The LLM can call acc_msm exec session-tool <subcommand> to run CCC-specific",
+		"The LLM can call msm session-tool <subcommand> to run CCC-specific",
 		"subcommands such as reindex, export, batch-create. These bypass the ACC session",
 		"tool's enum.",
 		"",
@@ -3465,7 +2802,7 @@ function getHookDevelopGuide(hasSessionTool) {
 		"     .opencode/skills/<ccc-name>/scripts/session-tool.ts",
 		"",
 		"2. Register it in mech-registry.json:",
-		"     acc_msm register session-tool \\",
+		"     container_admin msm register session-tool \\",
 		"       --skill <ccc-name> --path .opencode/skills/<ccc-name>/scripts/session-tool.ts \\",
 		"       --category semi-mech \\",
 		"       --description \"CCC session extension: hooks + custom subcommands\" \\",
@@ -3482,9 +2819,9 @@ function getHookDevelopGuide(hasSessionTool) {
 		"",
 		"4. Subcommand declaration convention:",
 		"     The --subcommand description field in flags enumerates supported subcommand names, split by |.",
-		"     The LLM can then call acc_msm exec session-tool <subcommand>.",
+		"     The LLM can then call msm session-tool <subcommand>.",
 		"",
-		hasSessionTool ? "✅ This CCC has a session-tool MSM registered" : "ℹ️  This CCC has no session-tool MSM yet — start with acc_msm register",
+		hasSessionTool ? "✅ This CCC has a session-tool MSM registered" : "ℹ️  This CCC has no session-tool MSM yet — start with container_admin msm register",
 		"",
 		"── More information ──",
 		"",
@@ -3497,19 +2834,23 @@ function getHookDevelopGuide(hasSessionTool) {
 */
 function createSessionTool(ctx) {
 	return defineTool({
-		name: "session",
-		description: "Full work-session lifecycle (AGENT_SESSIONS/, home-session convention). list/show/create/use/close/health/qa/archive/summary/hook-develop-guide. create requires --desc <desc> [--goal] or --issue <ticket> (exactly one) plus --summary (≤20 chars, content summary — required, except --dry-run preview and --issue sessions which are exempt); close requires --confirm; use activates the session for the current dsh conversation (in-memory + events restore, isolated per dsh session) and requires --summary (≤20 chars). The summary is appended to the dsh session title (S###-YYYY-MM-DD-<summary>); the S### id and date stay server-derived.",
+		name: "logbook",
+		description: "The Logbook (AGENT_SESSIONS/ trajectory log — the voyage's persistent record). Full work-session lifecycle: list/show/create/use/close/health/qa/archive/summary/hook-develop-guide + rebuild (trajectory-tracker overflow: clear and rebuild the current conversation in place, Ship of Theseus). create requires --desc <desc> [--goal] or --issue <ticket> (exactly one) plus --summary (≤20 chars, content summary — required, except --dry-run preview and --issue sessions which are exempt); close requires --confirm; use activates the session for the current dsh conversation (in-memory + events restore, isolated per dsh session) and requires --summary (≤20 chars). rebuild requires --summary (next-phase content summary ≤20 chars) + optional --note (task focus for the rebuilt self). The summary is appended to the dsh session title (S###-YYYY-MM-DD-<summary>); the S### id and date stay server-derived.",
 		parameters: {
 			action: {
 				type: "string",
 				enum: [...SESSION_ACTIONS],
 				required: true,
-				description: "Subcommand: list (status summary) / show (S### or dir name or fuzzy keyword) / create (--desc or --issue) / use (activate context, closed can be reopened) / close (requires --name + --confirm, irreversible) / health (stale/stalled/drift/ghost) / qa (fact check) / archive (archive, name defaults to batch) / summary (dashboard) / hook-develop-guide (CCC extension guide)"
+				description: "Subcommand: list (status summary) / show (S### or dir name or fuzzy keyword) / create (--desc or --issue) / use (activate context, closed can be reopened) / close (requires --name + --confirm, irreversible) / health (stale/stalled/drift/ghost) / qa (fact check) / archive (archive, name defaults to batch) / summary (dashboard) / rebuild (clear-and-rebuild current conversation, Ship of Theseus — requires --summary + optional --note) / hook-develop-guide (CCC extension guide)"
 			},
 			name: {
 				type: "string",
 				description: "show/use/close/archive/qa session identifier (S### or dir name or keyword)"
 			},
+			note: {
+				type: "string",
+				description: "rebuild: task focus ≤200 chars for the rebuilt self — what to work on next (short, no history; SESSION.md holds the full history). Injected as \"- Task focus: …\" into the rebuild anchor."
+			},
 			desc: {
 				type: "string",
 				description: "create short description (any language, ≤5 words; mutually exclusive with issue)"
@@ -3541,10 +2882,10 @@ function createSessionTool(ctx) {
 		},
 		output: {
 			schema: { type: "json" },
-			render: (args, value) => renderText$4(value)
+			render: (args, value) => renderText$3(value)
 		},
 		async execute(args, exec) {
-			const root = findSerenityRoot(agentCwd$5(exec));
+			const root = findSerenityRoot(agentCwd$4(exec));
 			if (!root) throw new Error("No CCC found: no .serenity file from agent cwd");
 			const entries = loadMsmEntries(root);
 			const hasSessionTool = entries.some((e) => e.name === "session-tool");
@@ -3641,724 +2982,33 @@ function createSessionTool(ctx) {
 				case "qa":
 					if (!args.name) throw new Error("qa requires name (S### or directory name)");
 					return qaCheck(root, args.name) + extHint;
+				case "rebuild": {
+					if (!args.summary || args.summary.trim() === "") throw new Error("rebuild requires --summary <content summary ≤20 chars> (the dsh session title is renamed to S###-YYYY-MM-DD-<summary> after rebuild)");
+					const dshSessionId = exec.agent?.session?.id ?? "";
+					if (!dshSessionId) throw new Error("Unable to determine the current dsh session id");
+					const { queueRebuild } = await Promise.resolve().then(() => rebuild_exports);
+					const result = await queueRebuild(ctx, {
+						root,
+						note: args.note,
+						summary: args.summary,
+						agentCwd: agentCwd$4(exec),
+						dshSessionId
+					});
+					return {
+						ok: true,
+						queued: result.queued,
+						anchor: result.anchor,
+						sessionMdPath: result.sessionMdPath,
+						instruction: "Queued clear-and-rebuild: when this turn ends, the same conversation will be cleared and injected with the \"continue the work\" anchor (first-anchor protocol body included), then auto-continue — no manual input needed; resume from SESSION.md at that point."
+					};
+				}
 				default: throw new Error(`Unknown action: ${args.action}`);
 			}
 		}
 	});
 }
 //#endregion
-//#region src/seams/bootstrap.ts
-/** 默认首请求工具集：dsp 平台 Minimal 等价核心（anchored 是 bash+str_replace_editor） */
-const DEFAULT_BOOTSTRAP_TOOLS = [
-	"read",
-	"write",
-	"edit",
-	"glob",
-	"grep"
-];
-/** 默认剥离的自动注入源（anchored 默认：可用技能目录提醒 + 工作区指令摘要） */
-const DEFAULT_SUPPRESSED_SOURCES = ["skill-catalog", "agent-instructions"];
-/** 默认 compaction 恢复工作集（anchored 默认 read/write/edit/glob/grep/todo_write/ask_user_question） */
-const DEFAULT_COMPACTION_TOOLS = [
-	"read",
-	"write",
-	"edit",
-	"glob",
-	"grep",
-	"todo_write"
-];
-/**
-* 协议级锚定消息序列（用户确认固化，2026-08-24 S142）：任何 CCC 在抽象层都是
-* 宁静号/ACC——首轮锚定话语统一，无 CCC 配置面。两轮递进：
-*  ① ACC 身份 + EAP 原则 + we/us 人称 + 先锚定后行动
-*  ② 协作协议 5 条 + acknowledge 要求（只回确认，不做事）
-* 文本 = 原 home-serenity CCC 配置（anchorMessages），随零配置化固化进代码。
-*/
-const DEFAULT_ANCHOR_MESSAGES = ["You are the operator agent of Serenity — a cognitive container governed by the Abstract Cognitive Container (ACC) protocol.\nWe operate under the Explicit Abstraction Principle (EAP): the functional value of a thought equals its external reconstructability — every output we produce must be explicit (E↑), reconstructable (R↓), and stable (S↑).\nThe personal pronoun is us/we.\nWe anchor first, then act: the abstract layer precedes the concrete.\nPlease simply reply \"acknowledge\" — no action needed.", "Before we proceed, align on how we work:\n1. We read before we write — every decision grounds in what already exists in the container.\n2. Every output records its reasoning (R↓): decisions carry reasons and alternatives.\n3. We never jump levels — abstract layer first, then specifics.\n4. Every artifact we create is a durable cognitive anchor for the work that follows.\n5. We keep the container's state coherent (SESSION.md) as we advance.\nPlease simply reply \"acknowledge\" — no action needed."];
-/**
-* 根会话锚定重入判定（v1.28.1 提取导出以便单测）：会话是否已有真实用户消息。
-* resume/续跑的会话已有对话历史 → **不重锚**（first-anchor 只注入一次）。
-*
-* 0.1.2-rc.1 适配教训：裸读 `session.events`（经类型断言）恒 undefined →
-* `!undefined` 恒 true → 有历史也永不跳过 → 任何情况发消息都重插 first-anchor。
-* 统一经 sessionEvents() 读取（snapshotEvents() 优先，.events 兜底）。
-*/
-function hasUserMessageHistory(session) {
-	return sessionEvents(session).some((event) => event.type === "user/message");
-}
-/**
-* 构建一个 epoch 感知晋升跟踪器（纯逻辑，可单测）。
-* requiredSignals：晋升所需信号数（boundary 后累计；默认 1）。
-* 多轮锚定（v4）：两轮递进锚定时 requiredSignals = 锚定轮数——
-* 每条锚定回复（assistant/message）计一次，最后一条回复后晋升。
-*
-* maxRoundsFallback：**轮次兜底**（v1.19.3 修复 responses API 兼容）。
-* 某些模型/协议（如 opencode-go-responses）的会话可能不产生标准
-* `assistant/message` 晋升信号 → 永不晋升 → bootstrap 阶段工具被裁空
-* （zeroTools 首请求 0 工具，ACC 工具不可见）。兜底：无论晋升信号是否
-* 到达，观察到的模型 step 数（`step/start` 事件计数，平台稳定事件，
-* responses/completions 都触发，独立于 promoteEvents）达到 maxRoundsFallback
-* 即强制 promoted（开放完整工具）。正常模型锚定轮数（requiredSignals）
-* 通常 ≤ 2 < 默认兜底 3，不受影响。
-*/
-function createEpochPromotion(promoteEvents, requiredSignals = 1, maxRoundsFallback = 3) {
-	/** sessionId -> { boundary, signalCount, rounds }（rounds = 兜底用回复轮计数） */
-	const state = /* @__PURE__ */ new Map();
-	const sessionIdOf = (session) => {
-		if (session && typeof session === "object") {
-			const id = session.id;
-			if (typeof id === "string") return id;
-		}
-	};
-	const promotedBy = (entry) => entry.signalCount >= requiredSignals || entry.rounds >= maxRoundsFallback;
-	const scan = (session) => {
-		let boundary = -1;
-		let signalCount = 0;
-		let rounds = 0;
-		const events = sessionEvents(session);
-		if (events.length > 0) for (const event of events) {
-			const e = event;
-			const seq = typeof e.seq === "number" ? e.seq : 0;
-			if (e.type === "compaction/end") {
-				boundary = seq;
-				signalCount = 0;
-				rounds = 0;
-				continue;
-			}
-			if (promoteEvents.has(e.type) && seq > boundary) signalCount++;
-			if (e.type === "step/start" && seq > boundary) rounds++;
-		}
-		const entry = {
-			boundary,
-			signalCount,
-			rounds
-		};
-		const sid = sessionIdOf(session);
-		if (sid) state.set(sid, entry);
-		return {
-			boundary,
-			promoted: promotedBy(entry)
-		};
-	};
-	return {
-		status(agent) {
-			if (agent === void 0) return {
-				boundary: -1,
-				promoted: true
-			};
-			const session = agent.session;
-			if (session === void 0) return {
-				boundary: -1,
-				promoted: true
-			};
-			const loopSid = session.id;
-			if (typeof loopSid === "string" && (loopSid.startsWith("handyman-") || isSkiffSessionId(loopSid))) return {
-				boundary: -1,
-				promoted: true
-			};
-			if ((session.header?.delegationDepth ?? 0) > 0) return {
-				boundary: -1,
-				promoted: true
-			};
-			const sid = sessionIdOf(session);
-			if (sid === void 0) return {
-				boundary: -1,
-				promoted: true
-			};
-			const s = state.get(sid);
-			if (s) return {
-				boundary: s.boundary,
-				promoted: promotedBy(s)
-			};
-			return scan(session);
-		},
-		observe(session, event) {
-			const sid = sessionIdOf(session);
-			if (sid === void 0) return;
-			const entry = state.get(sid);
-			if (entry === void 0) return;
-			const e = event;
-			const seq = typeof e.seq === "number" ? e.seq : 0;
-			if (e.type === "compaction/end") {
-				state.set(sid, {
-					boundary: seq,
-					signalCount: 0,
-					rounds: 0
-				});
-				return;
-			}
-			if (promoteEvents.has(e.type) && seq > entry.boundary) entry.signalCount++;
-			if (e.type === "step/start" && seq > entry.boundary) entry.rounds++;
-			state.set(sid, entry);
-		}
-	};
-}
-const PROMOTE_EVENTS = {
-	"tool-call": /* @__PURE__ */ new Set(["tool/call"]),
-	"assistant-message": /* @__PURE__ */ new Set(["assistant/message"]),
-	either: /* @__PURE__ */ new Set(["tool/call", "assistant/message"])
-};
-/** 协议固有 bootstrap 设置：zeroTools=true（首请求 0 工具纯文字锚定轮）、
-*  晋升信号仅 assistant/message（对齐 zero-anchored-standard）、
-*  requiredSignals = 锚定轮数（2 条消息 → 2 条回复后晋升）。无参——零配置面。 */
-function resolveBootstrapSettings() {
-	return {
-		bootstrapTools: [...DEFAULT_BOOTSTRAP_TOOLS],
-		promoteEvents: PROMOTE_EVENTS["assistant-message"],
-		requiredSignals: DEFAULT_ANCHOR_MESSAGES.length,
-		suppressedSources: new Set(DEFAULT_SUPPRESSED_SOURCES),
-		compactionTools: [...DEFAULT_COMPACTION_TOOLS],
-		anchorMessages: [...DEFAULT_ANCHOR_MESSAGES],
-		zeroTools: true
-	};
-}
-/**
-* 注册 Anchored bootstrap 机制（协议固有，零配置面——S142；按 agent cwd 定位 CCC root，
-* 晋升状态按 root 隔离，但设置全局一致）：
-*  1. session/event 观察晋升信号（assistant/message + step/start 兜底 + compaction/end）
-*  2. system-prompt/assemble：bootstrap 阶段目录窄化到 bootstrapTools（+compaction 后 compactionTools）
-*  3. agent/pre-step：bootstrap 阶段剥离 suppressedSources 注入消息（降级保留全部）
-*
-* 摘除 = 删除 index.ts 中本注册行（独立模块）。
-*/
-/** 从 agent 解析 CCC 根（宽松；无 agent/无 CCC 返回 null） */
-function agentRoot(agent) {
-	const cwd = agent?.session?.header?.cwd;
-	if (typeof cwd !== "string") return null;
-	return findSerenityRoot(cwd);
-}
-/** 协议固有设置（零配置面）：所有 CCC 使用同一固化设置 */
-const SETTINGS = resolveBootstrapSettings();
-function registerBootstrap(ctx) {
-	const trackers = /* @__PURE__ */ new Map();
-	/** 已锚定会话（进程内防重：子 agent 每会话只锚定一次） */
-	const anchoredSessions = /* @__PURE__ */ new Set();
-	const trackerFor = (root) => {
-		let t = trackers.get(root);
-		if (!t) {
-			t = createEpochPromotion(SETTINGS.promoteEvents, SETTINGS.requiredSignals);
-			trackers.set(root, t);
-		}
-		return t;
-	};
-	ctx.on("session/event", (session, event) => {
-		try {
-			const cwd = session?.header?.cwd;
-			if (typeof cwd !== "string") return;
-			const root = findSerenityRoot(cwd);
-			if (!root) return;
-			trackerFor(root).observe(session, event);
-		} catch {}
-	});
-	ctx.on("agent/inbox/inserted", ({ agent, message }) => {
-		try {
-			if (!agentRoot(agent)) return;
-			const session = agent.session;
-			const depth = session?.header?.delegationDepth ?? 0;
-			const sid = typeof session?.id === "string" ? session.id : void 0;
-			if (sid !== void 0 && (sid.startsWith("handyman-") || isSkiffSessionId(sid))) return;
-			if (depth === 0) {
-				if (hasUserMessageHistory(session)) return;
-			} else if (sid !== void 0 && anchoredSessions.has(sid)) return;
-			if (message?.source?.kind === "plugin") return;
-			const inbox = agent.inbox;
-			if (!inbox?.prepend) return;
-			for (let i = SETTINGS.anchorMessages.length - 1; i >= 0; i--) inbox.prepend("next-turn", {
-				id: `bootstrap-anchor-${Date.now()}-${Math.random().toString(36).slice(2, 8)}-${i}`,
-				role: "user",
-				content: [{
-					type: "text",
-					text: SETTINGS.anchorMessages[i]
-				}],
-				source: {
-					kind: "plugin",
-					plugin: "dsh-serenity-hooks",
-					form: "notice",
-					summary: "bootstrap anchor turn"
-				}
-			});
-			if (sid !== void 0) anchoredSessions.add(sid);
-			warnOnce(`anchor turns injected: ${SETTINGS.anchorMessages.length} 条（${SETTINGS.anchorMessages[0].slice(0, 40)}…）`);
-		} catch {}
-	});
-	let warned = false;
-	const warnOnce = (message) => {
-		if (warned) return;
-		warned = true;
-		try {
-			console.warn(`[serenity-hooks] bootstrap: ${message}`);
-		} catch {}
-	};
-	ctx.on("system-prompt/assemble", async (_assembly, context, next) => {
-		const assembled = await next();
-		try {
-			const agent = context.agent;
-			const root = agentRoot(agent);
-			if (!root) return assembled;
-			const status = trackerFor(root).status(agent);
-			if (status.promoted) return assembled;
-			const tools = assembled.tools;
-			if (!Array.isArray(tools)) return assembled;
-			const available = new Set(tools.map((tool) => tool.name).filter((n) => typeof n === "string"));
-			if (SETTINGS.zeroTools) {
-				if (status.boundary < 0) return {
-					...assembled,
-					tools: []
-				};
-				const keep = new Set(SETTINGS.compactionTools);
-				const missing = [...keep].filter((name) => !available.has(name));
-				if (missing.length > 0) {
-					warnOnce(`expected compaction tools missing=${JSON.stringify(missing)} — bootstrap disabled, full catalog exposed`);
-					return assembled;
-				}
-				return {
-					...assembled,
-					tools: tools.filter((tool) => typeof tool.name === "string" && keep.has(tool.name))
-				};
-			}
-			const keep = new Set(SETTINGS.bootstrapTools);
-			if (status.boundary >= 0) for (const toolName of SETTINGS.compactionTools) keep.add(toolName);
-			const missing = [...keep].filter((name) => !available.has(name));
-			if (missing.length > 0) {
-				warnOnce(`expected bootstrap tools missing=${JSON.stringify(missing)} — bootstrap disabled, full catalog exposed`);
-				return assembled;
-			}
-			return {
-				...assembled,
-				tools: tools.filter((tool) => typeof tool.name === "string" && keep.has(tool.name))
-			};
-		} catch (error) {
-			warnOnce(`assemble filter failed, exposing the full catalog: ${String(error?.message ?? error)}`);
-			return assembled;
-		}
-	});
-	ctx.on("agent/pre-step", async ({ agent }, next) => {
-		const decision = await next();
-		if (decision.kind === "reject") return decision;
-		try {
-			const root = agentRoot(agent);
-			if (!root) return decision;
-			if (trackerFor(root).status(agent).promoted || SETTINGS.suppressedSources.size === 0) return decision;
-			const messages = decision.messages;
-			if (!Array.isArray(messages)) return decision;
-			const kept = messages.filter((message) => {
-				const kind = message?.source?.kind;
-				return typeof kind !== "string" || !SETTINGS.suppressedSources.has(kind);
-			});
-			return kept.length === messages.length ? decision : {
-				...decision,
-				messages: kept
-			};
-		} catch (error) {
-			warnOnce(`pre-step context filter failed, keeping injected context: ${String(error?.message ?? error)}`);
-			return decision;
-		}
-	}, { prepend: true });
-}
-//#endregion
-//#region src/trajectory-assistant.ts
-/**
-* trajectory-assistant.ts — 关卡化注入的统一命名与风格门面（v0.3，S142）
-*
-* 概念（用户拍板 2026-09-05）：dsp 全部"过程中动态提示注入"统一命名为
-* trajectory-assistant（轨迹助航员）。关卡设计思想塑造**结构与时机**
-* （何时/何地注入），**不用于提示词用词**（D8 词法原则）——纯游戏黑话
-* （BOSS/XP/level-up）禁止出现在提示词文本；CHECKPOINT/LIMIT/TUTORIAL 等
-* 跨领域自然通用词允许。
-*
-* 本模块 = token 常量 + level-event 词汇表的**单一真相源**（避免前缀散落
-* 各文件字符串字面量）+ 风格门面（plain 默认 / metaphor 星舰变体）。
-* 仅当 style=metaphor 时前缀包装措辞变化；可行动正文不变 → 零行为漂移。
-*
-* 设计简写（L0 环境 / L1 教程 / L2 目标 / L3 检查点 / L4 极限 / L5 守卫 /
-* L6 结算）仅在本模块注释与内部文档出现，永不浮现在提示词文本。
-*
-* 结算（settlement）挂点：D6 用户拍板——若 CCC 有标准 SESSION 复盘仪式，
-* 结算视图归 trajectory-assistant。当前 close/archive 无复盘摘要 → 机制
-* 延后，仅留 onSettlement 导出 seam（OP-1，无调用者）。
-*/
-/** 可见提示词前缀用词（跨领域自然词，D8：无游戏黑话） */
-const EVENT_LABEL = {
-	/** 计分同步提醒（原 TRAJECTORY-STEWARD） */
-	checkpoint: "CHECKPOINT",
-	/** 上下文极限重建提醒（原 TRAJECTORY；LIMIT 替代被否的 BOSS——自然词） */
-	limit: "LIMIT",
-	/** 极限强制升级（原 TRAJECTORY-ESCALATED） */
-	limitMandatory: "LIMIT · MANDATORY",
-	/** 重建锚点头部（原 TRAJECTORY-REBUILD） */
-	rebuild: "REBUILD",
-	/** 敏感输出边界守卫（原 SERENITY OUTPUT GUARD） */
-	guard: "BOUNDARY GUARD"
-};
-/** 家族标识（所有动态注入统一前缀） */
-const ASSISTANT_PREFIX = "TRAJECTORY-ASSISTANT";
-/** 完整 token：`[TRAJECTORY-ASSISTANT · <LABEL>]` */
-function eventToken(event) {
-	return `[${ASSISTANT_PREFIX} · ${EVENT_LABEL[event]}]`;
-}
-/** ACK 确认码前缀（recorded/skipped 语义不变，仅家族名更新） */
-const ACK_PREFIX = `${ASSISTANT_PREFIX}-recorded`;
-//#endregion
-//#region src/rebuild.ts
-const PLUGIN_SOURCE$4 = {
-	kind: "plugin",
-	plugin: "dsh-serenity-hooks"
-};
-/** acknowledge 尾句（first-anchor 的确认要求——rebuild 重建后不重走确认轮，直接继续） */
-const ACK_SUFFIX_RE = /Please simply reply "acknowledge" — no action needed\.\s*$/;
-/**
-* 剥离 first-anchor 消息的 acknowledge 尾句（rebuild 锚点保留协议正文但不要求确认回复）。
-*/
-function stripAckSuffix(text) {
-	return text.replace(ACK_SUFFIX_RE, "").trimEnd();
-}
-/**
-* 构建重建锚点消息（v1.22.4 定稿语义 + v1.22.5 保留 first-anchor 正文）：
-* 「[TRAJECTORY-REBUILD] + first-anchor 协议正文（去 acknowledge 尾句）+ 继续 {SESSION 名} 的工作」。
-* @param root - CCC 根
-* @param sessionName - 当前 use 的宁静号 SESSION 名（如 S142）；无激活则通用指令
-* @param activeMdPath - 持久轨迹 SESSION.md 绝对路径（保持原位）
-* @param anchorMessages - first-anchor 协议消息序列（缺省 DEFAULT_ANCHOR_MESSAGES；可注入测试）
-*/
-function buildRebuildAnchor(root, sessionName, activeMdPath, anchorMessages = DEFAULT_ANCHOR_MESSAGES) {
-	const rel = activeMdPath.startsWith(root) ? activeMdPath.slice(root.length + 1) : activeMdPath;
-	const sessionDir = basename(dirname(activeMdPath));
-	const sessionLine = sessionDir !== "AGENT_SESSIONS" ? `- Serenity session: ${sessionName !== "" ? `${sessionName} (${sessionDir})` : sessionDir}` : null;
-	return [
-		`${eventToken("rebuild")} The conversation has been cleared and rebuilt (Ship of Theseus: the carrier is replaced, the trajectory continues).`,
-		"",
-		...anchorMessages.flatMap((text) => [stripAckSuffix(text), ""]),
-		sessionName !== "" ? `Continue the work of ${sessionName}.` : "Continue the current work.",
-		...sessionLine ? [sessionLine] : [],
-		`- Persistent trajectory — SESSION.md path: ${rel}`,
-		`  (the trajectory's persistent body — stays in place through rebuilds)`,
-		`- Read that SESSION.md first (goal/decisions/progress/unresolved), then continue from the last checkpoint.`
-	].join("\n");
-}
-/** 从会话 surface 首条 user 消息（重建锚点）解析 SESSION.md 路径（events 异常/缺失时的兜底） */
-function parseAnchorMdPath(session) {
-	try {
-		const nodes = [...session.surface.nodes];
-		if (nodes.length === 0) return null;
-		const events = sessionEvents(session);
-		if (events.length === 0) return null;
-		const event = events[nodes[0]];
-		if (!event) return null;
-		const message = deriveEventMessage(event);
-		if (!message) return null;
-		return extractSessionMdPathFromText(message.content?.map((c) => c.type === "text" ? c.text ?? "" : "").join("") ?? "");
-	} catch {
-		return null;
-	}
-}
-/** 从 SESSION.md 绝对路径派生会话名（S###；issue 目录回退完整目录名） */
-function sessionNameFromMdPath(mdPath) {
-	const dirName = basename(dirname(mdPath));
-	const idMatch = dirName.match(/--S(\d{3,})--/);
-	return idMatch ? `S${idMatch[1]}` : dirName;
-}
-/**
-* 稳固的 SESSION.md 定位（多层候选 + 存在性校验，**绝不输出虚假路径**）：
-* ① 内存活跃会话（本会话显式 use 过）→ ② events 恢复（use 标记 + 重建锚点规范行，进程重启后）
-* → ③ surface 首条锚点（events 异常时兜底）→ ④ AGENT_SESSIONS 约定回退（最新未完成活动目录）。
-* 每候选 resolve 后 existsSync 校验（相对路径按 root 解析）；全部失败返回 null → 调用方报错引导。
-*/
-function resolveSessionMdPath(root, scope, session) {
-	const candidates = [];
-	candidates.push(getActiveSessionInfo(scope)?.mdPath ?? null);
-	const events = sessionEvents(session);
-	if (events.length > 0) candidates.push(parseSessionContextFromEvents(events)?.mdPath ?? null);
-	candidates.push(parseAnchorMdPath(session));
-	candidates.push(findLatestActiveSessionMd(root));
-	for (const c of candidates) {
-		if (!c) continue;
-		const abs = c.startsWith(root) ? c : resolve(root, c);
-		if (existsSync(abs)) return abs;
-	}
-	return null;
-}
-const pendingRebuilds = /* @__PURE__ */ new Map();
-/** 陈旧队列存活时长（毫秒）：超过则丢弃（turn 异常结束/agent 崩溃时防残留误清空） */
-const PENDING_TTL_MS = 6e5;
-let diagState = {
-	lastTs: "",
-	lastSessionId: "",
-	lastEvent: "",
-	queueCount: 0,
-	rebuiltCount: 0,
-	droppedCount: 0,
-	failedCount: 0
-};
-function writeRebuildDiag(root, entry) {
-	try {
-		const dir = join(root, "AGENT_SESSIONS");
-		mkdirSync(dir, { recursive: true });
-		const file = join(dir, ".rebuild-diag.json");
-		const s = diagState;
-		if (entry.event === "queued") s.queueCount += 1;
-		if (entry.event === "rebuilt") s.rebuiltCount += 1;
-		if (entry.event === "ttl-dropped") s.droppedCount += 1;
-		if (entry.event === "failed") s.failedCount += 1;
-		s.lastTs = (/* @__PURE__ */ new Date()).toISOString();
-		s.lastSessionId = entry.sessionId;
-		s.lastEvent = entry.event;
-		s.detail = entry.detail;
-		writeFileSync(file, JSON.stringify(s, null, 2) + "\n", "utf-8");
-	} catch {}
-}
-/**
-* 排队一次重建（v1.22.4 定稿语义第一步）：
-* ① 门控校验（rebuild.enabled + 会话定位）
-* ② 构建锚点（激活会话名 + 持久轨迹路径）
-* ③ 写入 pending 队列——**不立即改 surface**（等 turn-stopping 执行）
-* @returns 排队结果；rebuild.enabled=false 或非 CCC 抛错
-*/
-async function queueRebuild(ctx, opts) {
-	if (!readSimpleSettings().rebuildEnabled) throw new Error("session_rebuild is disabled (rebuild.enabled=false — enable it in the dsh settings panel)");
-	const { root, note, summary, dshSessionId } = opts;
-	const session = ctx.sessions?.get?.(dshSessionId);
-	if (!session) throw new Error(`Unable to locate dsh session ${dshSessionId} (session may be closed)`);
-	const mdPath = resolveSessionMdPath(root, dshSessionId, session);
-	if (!mdPath) throw new Error("Unable to determine the active SESSION.md — no session context found in this conversation. Run \"session use <S###> --summary <内容概括 ≤20 字>\" first to activate the trajectory to resume, then retry session_rebuild.");
-	const sessionName = getActiveSessionInfo(dshSessionId)?.sessionId ?? sessionNameFromMdPath(mdPath);
-	const anchor = buildRebuildAnchor(root, sessionName, mdPath);
-	appendBound(session, "rebuild", {
-		dirName: basename(dirname(mdPath)),
-		mdPath,
-		sessionId: sessionName.startsWith("S") ? sessionName : void 0,
-		note: "rebuild queued"
-	});
-	pendingRebuilds.set(dshSessionId, {
-		anchor,
-		summary,
-		mdPath,
-		queuedAt: Date.now()
-	});
-	writeRebuildDiag(root, {
-		sessionId: dshSessionId,
-		event: "queued"
-	});
-	return {
-		queued: true,
-		anchor,
-		sessionMdPath: mdPath
-	};
-}
-/**
-* 执行真正的 surface replace（v1.22.4 定稿语义第二步，turn-stopping 时调用）：
-* 当前 turn 已完整结束（所有 tool/result 已 append）→ 全部节点替换为锚点消息。
-* 同一会话 id 原地重建——同工作区天然满足，无新/旧会话之分。
-*
-* **shadow-price 协议（v1.23.5 修复，S142 用户问询）**：DSH token-meter 的
-* `foldSurfaceProjection` 对 surface `replace` 要求**紧邻其前的 metering 事件**
-* （`compaction/summary` 或 `compaction/prune`）声明被替换范围的启发式 token 价，
-* 否则 claim 缺失 → `deltaTokens=0` → `contextBreakdown.messageTokens` 永不扣减
-* → UI「对话消息」虚高累计、往复 rebuild 计量爆炸（用户截图实证：总 15% 但
-* 对话消息 ~1M）。官方先例 = `compaction-tool-result-pruner`（append
-* `compaction/prune` → 紧接 replace）。此处同款：先 append `compaction/prune`
-* （定价全部被替换节点，经 ctx.tokenMeter.estimateMessage 逐节点累加），再
-* append 锚点 replace——meter 不可用时退化（无 claim，仅计量漂移，会话功能不受影响）。
-*
-* @returns 是否执行了 replace（false = 无 pending 或 surface 空）
-*/
-function performRebuild(session, pending, meter) {
-	const nodes = [...session.surface.nodes];
-	if (nodes.length === 0) return false;
-	if (meter) {
-		let shadowedTokenCount = 0;
-		const events = sessionEvents(session);
-		for (const seq of nodes) {
-			const event = events[seq];
-			if (!event) continue;
-			const message = deriveEventMessage(event);
-			if (message) shadowedTokenCount += meter.estimateMessage(message);
-		}
-		session.append("compaction/prune", {
-			shadowedRange: {
-				start: nodes[0],
-				end: nodes[nodes.length - 1]
-			},
-			shadowedSeqs: nodes,
-			shadowedTokenCount
-		});
-	}
-	session.append("user/message", {
-		content: [{
-			type: "text",
-			text: pending.anchor
-		}],
-		source: { kind: "user" }
-	}, {
-		surfaceOp: {
-			op: "replace",
-			start: nodes[0],
-			end: nodes[nodes.length - 1]
-		},
-		sourceEventSeqs: nodes
-	});
-	return true;
-}
-/**
-* 重建后重命名 dsh 会话标题（需求② S142 用户拍板：rebuild 后标题带新阶段概括）。
-* 标题 = S###-YYYY-MM-DD-<summary>——S### 与日期从持久轨迹目录名派生（不信任 LLM），
-* 概括来自 queueRebuild 的 summary 参数（服务端清洗截断）。
-* 失败仅 warn 不阻断重建主流程（标题美观非关键路径）。
-*/
-function renameAfterRebuild(ctx, agent, pending) {
-	try {
-		const mdPath = pending.mdPath;
-		const dirName = basename(dirname(mdPath));
-		const idMatch = dirName.match(/--S(\d{3,})--/);
-		const title = namingTitleFor({
-			sessionId: idMatch ? `S${idMatch[1]}` : dirName.replace(/^\d{4}-\d{2}-\d{2}--/, ""),
-			dirName,
-			mdPath
-		}, pending.summary);
-		const titles = ctx.get?.("sessionTitle");
-		if (!titles || typeof titles.rename !== "function") {
-			console.warn("[serenity-hooks] rebuild 后重命名跳过: sessionTitle 服务不可用");
-			return;
-		}
-		titles.rename(agent.session, title);
-		console.log(`[serenity-hooks] rebuild 后会话重命名: ${agent.id} → ${title}`);
-	} catch (error) {
-		console.warn(`[serenity-hooks] rebuild 后重命名失败（不阻断）: ${String(error?.message ?? error)}`);
-	}
-}
-/**
-* 注册 turn-stopping 钩子（index.ts apply 调用）：
-* agent 每轮 turn 结束前（serial）检查 pending 队列——有该会话的重建请求 → 执行清空
-* 并 **steer 自动继续**（v1.22.5：next-step 非空 → turn 不 break → 模型自动读取
-* SESSION.md 继续，无需用户手工输入；DSH 官方先例 hooks-claude-code Stop hook）。
-* 陈旧队列（超 TTL）丢弃防误清空；无 pending 零开销。
-*/
-function registerRebuildTurnHook(ctx) {
-	ctx.on("agent/turn-stopping", (payload) => {
-		const agent = payload?.agent;
-		if (!agent) return;
-		const id = agent.id;
-		const pending = pendingRebuilds.get(id);
-		if (pending === void 0) return;
-		if (Date.now() - pending.queuedAt > PENDING_TTL_MS) {
-			pendingRebuilds.delete(id);
-			writeRebuildDiag(resolveSerenityRootFor(agent), {
-				sessionId: id,
-				event: "ttl-dropped",
-				detail: `queuedAt=${new Date(pending.queuedAt).toISOString()} older than ${PENDING_TTL_MS / 6e4}min TTL — turn did not end in time`
-			});
-			return;
-		}
-		pendingRebuilds.delete(id);
-		try {
-			const tokenMeter = ctx.get?.("tokenMeter");
-			const meter = tokenMeter && typeof tokenMeter.estimateMessage === "function" ? { estimateMessage: (m) => tokenMeter.estimateMessage(m) } : void 0;
-			if (performRebuild(agent.session, pending, meter)) {
-				renameAfterRebuild(ctx, agent, pending);
-				agent.steer(createUserMessage({
-					content: [{
-						type: "text",
-						text: `${eventToken("rebuild")} The conversation has been cleared and rebuilt. Follow the anchor instructions above now: read the persistent trajectory (SESSION.md) and continue the work automatically from the last checkpoint.`
-					}],
-					source: PLUGIN_SOURCE$4
-				}));
-				writeRebuildDiag(resolveSerenityRootFor(agent), {
-					sessionId: id,
-					event: "rebuilt"
-				});
-				console.log(`[serenity-hooks] session_rebuild executed with auto-continue (turn ${payload.turn ?? "?"} ended): ${id}`);
-			} else writeRebuildDiag(resolveSerenityRootFor(agent), {
-				sessionId: id,
-				event: "empty-surface"
-			});
-		} catch (error) {
-			const msg = String(error?.message ?? error);
-			writeRebuildDiag(resolveSerenityRootFor(agent), {
-				sessionId: id,
-				event: "failed",
-				detail: msg
-			});
-			console.warn(`[serenity-hooks] session_rebuild failed: ${msg}`);
-		}
-	});
-}
-/** 从 agent 会话 cwd 解析 CCC 根（诊断落盘用）；无则回退进程 cwd */
-function resolveSerenityRootFor(agent) {
-	const cwd = agent.session?.header?.cwd;
-	return findSerenityRoot(cwd ?? process.cwd()) ?? process.cwd();
-}
-//#endregion
-//#region src/tools/rebuild.ts
-/**
-* rebuild.ts — session_rebuild 工具定义（轨迹跟踪器，v1.22.4 定稿：复用旧会话 + 完全清空重来）
-*
-* LLM 主动触发清空重建（用户决策：keeper 超阈值提示 [TRAJECTORY]，不自动执行——防误清空）。
-* v1.22.4 定稿语义（用户明确）：**复用当前 dsh 会话（同一 id），turn 结束时 surface
-* 完全清空重建**——锚点消息「继续 {宁静号 SESSION 名} 的工作」；SESSION.md 是持久轨迹
-* 永远原位，身份从 SESSION.md 自动延续。同一会话 id → 同工作区天然满足、无新/旧会话
-* 之分、无需销毁/切换/归档。
-* v1.22.5 增强（S142 用户需求）：① turn-stopping 执行 replace 后 **steer 自动继续**
-* （无需用户手工输入，模型自动读 SESSION.md 接续）；② 锚点消息**保留 first-anchor
-* 协议正文**（ACC 身份/EAP/协作协议，去 acknowledge 尾句——重建后直接干活）。
-* 执行时机：工具只排队（queueRebuild），`agent/turn-stopping` 钩子执行真正 replace
-* （turn 结束前所有 tool/result 已 append → 无孤儿；S141 INVALID_REQUEST 根治）。
-* 服务端逻辑在 ../rebuild.ts（queueRebuild/performRebuild/registerRebuildTurnHook）。
-*/
-function agentCwd$4(exec) {
-	return exec.agent?.session?.header?.cwd ?? process.cwd();
-}
-function agentSessionId(exec) {
-	return exec.agent?.session?.id ?? "";
-}
-function renderText$3(value) {
-	return [{
-		type: "text",
-		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
-	}];
-}
-/** 创建 session_rebuild 工具（闭包捕获 ctx → 排队清空重建，turn 结束时同一会话原地重来并自动继续） */
-function createRebuildTool(ctx) {
-	return defineTool({
-		name: "session_rebuild",
-		description: "Trajectory-tracker overflow rebuild (Ship of Theseus): this session is the rebuildable carrier of a trajectory — the current conversation is discarded and rebuilt in place at the end of this turn with the anchor \"continue the work of {SESSION name}\" (first-anchor protocol body included), then auto-continues. SESSION.md (the trajectory's persistent body) stays in place; identity continues from it. Use when you receive a " + eventToken("limit") + " reminder (context above threshold), at a natural pause point. After triggering, resume from SESSION.md when this turn ends.",
-		parameters: {
-			note: {
-				type: "string",
-				description: "Optional: one-sentence rebuild background note (for the rebuilt self)"
-			},
-			summary: {
-				type: "string",
-				description: "REQUIRED: content summary ≤20 chars of the next work phase — the dsh session title is renamed to S###-YYYY-MM-DD-<summary> after the rebuild (the rebuilt phase gets a fresh summary); sanitized/truncated server-side"
-			}
-		},
-		output: {
-			schema: { type: "json" },
-			render: (args, value) => renderText$3(value)
-		},
-		async execute(args, exec) {
-			const root = findSerenityRoot(agentCwd$4(exec));
-			if (!root) throw new Error("No CCC found: no .serenity file from agent cwd");
-			const dshSessionId = agentSessionId(exec);
-			if (!dshSessionId) throw new Error("Unable to determine the current dsh session id");
-			if (!args.summary || args.summary.trim() === "") throw new Error("session_rebuild requires --summary <content summary ≤20 chars> (the dsh session title is renamed after rebuild to S###-YYYY-MM-DD-<summary>)");
-			const result = await queueRebuild(ctx, {
-				root,
-				note: args.note,
-				summary: args.summary,
-				agentCwd: agentCwd$4(exec),
-				dshSessionId
-			});
-			return {
-				ok: true,
-				queued: result.queued,
-				anchor: result.anchor,
-				sessionMdPath: result.sessionMdPath,
-				instruction: "Queued clear-and-rebuild: when this turn ends, the same conversation will be cleared and injected with the \"continue the work\" anchor (first-anchor protocol body included), then auto-continue — no manual input needed; resume from SESSION.md at that point."
-			};
-		}
-	});
-}
-//#endregion
-//#region src/tools/localstore.ts
+//#region src/tools/localstore.ts
 /**
 * localstore.ts — localstore 真实 DSH 工具定义（defineTool）
 *
@@ -4385,7 +3035,7 @@ function renderText$2(value) {
 }
 const localstoreTool = defineTool({
 	name: "localstore",
-	description: "ACC standard local credential/config storage: one tool manages two namespaces — credential (credentials) and config (local preferences). Stored in localstore.json at the CCC root (JSON format, directly readable by MSMs). Git policy: .opencode/serenity.json localstore.gitTrack (allow commits / deny commits, default deny; .dsh fallback) — when deny, writes ensure .gitignore contains this file (physical guarantee), cc_git commit checks and refuses. Subcommands: list (list keys, credentials never return values) / get <name> (read value) / set <name> <value> (write) / unset <name> (delete) / show <name> (metadata, credentials never print values) / doc (output the storage spec — path/format/key conventions/git policy; agents may operate the file directly with read/write per the spec). Default scope=credential; config requires --scope config (path is section.key, e.g. handyman.models).",
+	description: "ACC standard local credential/config storage: one tool manages two namespaces — credential (credentials) and config (local preferences). Stored in localstore.json at the CCC root (JSON format, directly readable by MSMs). Git policy: .opencode/serenity.json localstore.gitTrack (allow commits / deny commits, default deny; .dsh fallback) — when deny, writes ensure .gitignore contains this file (physical guarantee), container_git commit checks and refuses. Subcommands: list (list keys, credentials never return values) / get <name> (read value) / set <name> <value> (write) / unset <name> (delete) / show <name> (metadata, credentials never print values) / doc (output the storage spec — path/format/key conventions/git policy; agents may operate the file directly with read/write per the spec). Default scope=credential; config requires --scope config (path is section.key, e.g. handyman.models).",
 	parameters: {
 		action: {
 			type: "string",
@@ -4419,23 +3069,6 @@ const localstoreTool = defineTool({
 });
 //#endregion
 //#region src/tools/skiff-admin.ts
-/**
-* skiff-admin.ts — skiff_admin ACC 工具（F4a'，v1.25.0 实验性，第 12 个工具）
-*
-* 教 CCC 如何定义 Skiff 角色（仿 session 工具 hook-develop-guide 的 SEP 教学模式，
-* 用户拍板 2026-08-28：guide 定义教程 / validate 配置校验 / list 角色摘要）。
-*
-* 归属：ACC 机制工具（教会 + 校验），角色内容仍归 CCC 配置（.opencode/serenity.json skiff.roles）。
-*/
-function agentCwd$2(exec) {
-	return exec.agent?.session?.header?.cwd ?? process.cwd();
-}
-function renderText$1(value) {
-	return [{
-		type: "text",
-		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
-	}];
-}
 /** Skiff 定义教程（核心）：概念 / schema / 认知 MSM 写法 / 双白名单 / 轨迹纪律 / 示例角色 */
 const SKIFF_GUIDE = `═══ Skiff Definition Guide (F4, experimental) ═══
 
@@ -4447,7 +3080,7 @@ dsp 只提供机制（双白名单强制 + 基础提示词 + 调试问答页）
   { "skiff": { "roles": {
       "<role-name>": {
         "model": "provider/model",             // 角色模型（CCC 直接指定，无白名单校验；缺省回退 handyman.defaultModel）
-        "msms": ["msm-a", "msm-b"],            // MSM 白名单（独立）：acc_msm exec 只能跑这些；register/deregister 必拒；list 只显示这些
+        "msms": ["msm-a", "msm-b"],            // MSM 白名单（独立）：msm 工具只能执行这些；register/deregister 必拒
         "tools": ["read","grep","glob",...],   // 非 MSM 工具白名单（独立）：白名单外工具一律不可用（guard 强制）
         "trajectory": { "session": false, "keeper": false, "rebuild": false },  // 轨迹纪律子集（缺省全关 = 完全独立）
         // 角色人格/认知边界/风格（CCC 完整定义；dsp 只给基础提示词）
@@ -4458,7 +3091,7 @@ dsp 只提供机制（双白名单强制 + 基础提示词 + 调试问答页）
 
 ── 双白名单语义（全按白名单暴露，白名单外全隐藏）──
   - tools 空 + msms 非空 = 纯 MSM 角色（认知问答典型形态）
-  - msms 非空 → acc_msm 工具自动可用（MSM 通道）
+  - msms 非空 → msm 工具自动可用（MSM 通道）
   - 白名单外工具即使 DSH 未来新增也自动被挡（guard 按角色判定，不枚举工具名——完备性）
 
 ── 认知 MSM 写法（读知识 / 操作能力）──
@@ -4486,7 +3119,7 @@ dsp 只提供机制（双白名单强制 + 基础提示词 + 调试问答页）
     session/cancel / session/close / session/list / request_permission（恒 allow）
   启停 = 人工（设置面板开关，不随插件加载自动启动）；未开启零资源占用
   生效机制：角色配置**实时读取**（改 .opencode/serenity.json → 刷新调试页即生效）；
-  改配置后用 skiff_admin apply 做显式校验 + 应用确认（绑定 CCC + 角色清单）
+  改配置后用 container_admin role apply 做显式校验 + 应用确认（绑定 CCC + 角色清单）
   会话追问（v1.25.10）：调试页持有当前会话，追问自动续接（同会话上下文延续）；
   「新对话」按钮开新会话；进程重启后旧会话不可续（WebUI 仍可见历史）
   注意：skill 加载对 skiff **恒可用**（不设白名单——读知识面，无写能力）`;
@@ -4559,7 +3192,7 @@ function applySkiffConfig(root) {
 		cccRoot: root,
 		roleCount: roles.size,
 		issues: validation.issues,
-		hint: "fix the issues above, then run skiff_admin apply again"
+		hint: "fix the issues above, then run container_admin role apply again"
 	};
 	return {
 		applied: true,
@@ -4569,20 +3202,81 @@ function applySkiffConfig(root) {
 		note: "roles are read live from .opencode/serenity.json — the skiff debug page reflects changes on refresh; skill loading is always available to skiff sessions (not whitelisted)"
 	};
 }
-const skiffAdminTool = defineTool({
-	name: "skiff_admin",
-	description: "Skiff (F4, experimental): CCC cognitive-subset roles (subsets of the full serenity trajectory). guide: definition tutorial (concept/role schema/cognitive MSM writing/dual whitelist/trajectory subset/examples); validate: check the CCC skiff config (roles schema legal / msms registered / model in handyman.models / system prompt resolvable — systemPromptFile (recommended) or systemPrompt non-empty); apply: validate then confirm the config is live (bound CCC + role list; roles are read live on every request); list: role summary (name/model/msms/tools/trajectory/prompt source). Roles are defined by the CCC in .opencode/serenity.json skiff.roles; skill loading is always available to skiff sessions (not whitelisted).",
-	parameters: { action: {
-		type: "string",
-		enum: [
-			"guide",
-			"validate",
-			"apply",
-			"list"
-		],
-		required: true,
-		description: "Subcommand: guide (definition tutorial) / validate (config check) / apply (validate + confirm live) / list (role summary)"
-	} },
+//#endregion
+//#region src/tools/container-admin.ts
+/**
+* container-admin.ts — container_admin（v1.30：机务舱——容器管理面统一入口）
+*
+* 合并自：
+*   · skiff_admin（F4 Skiff 认知子集角色：guide/validate/apply/list）
+*   · acc_msm 管理面（register/deregister/check/guide/catalog/ccc-config）
+*     —— msm 工具只管执行+发现；一切「管理容器」的操作归本工具
+*
+* 语义（用户拍板"skiff_admin 及系列 admin 合并成 container_admin"）：
+*   container = CCC（具体认知容器）；admin = 管理操作。
+*   类比 The Manifest（清单维护——工具注册表）+ Crew（角色管理）+ 机务（配置/手册）。
+*
+* 参数极简（LLM 直觉）：domain（管理域）+ action（该域子命令）+ 少量业务参数。
+*/
+function agentCwd$2(exec) {
+	return exec.agent?.session?.header?.cwd ?? process.cwd();
+}
+function agentSessionId(exec) {
+	return exec.agent?.session?.id ?? "";
+}
+function renderText$1(value) {
+	return [{
+		type: "text",
+		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
+	}];
+}
+const containerAdminTool = defineTool({
+	name: "container_admin",
+	description: "Container administration (the ship's maintenance bay — one entry for managing the CCC): role — Skiff cognitive-subset roles (guide/validate/apply/list); msm — MSM registry management (register/deregister/check quality DC-M1~M4) + manuals (guide dev manual / catalog ACC capability directory / ccc-config CCC configuration reference); config — view CCC configuration. Execution of registered MSMs belongs to the msm tool; this tool manages the container.",
+	parameters: {
+		domain: {
+			type: "string",
+			enum: [
+				"role",
+				"msm",
+				"config"
+			],
+			required: true,
+			description: "Management domain: role (Skiff roles) / msm (MSM registry + manuals) / config (CCC config view)"
+		},
+		action: {
+			type: "string",
+			description: "Domain subcommand (see domain descriptions; e.g. role: validate/apply/list/guide; msm: register/deregister/check/guide/catalog/ccc-config)"
+		},
+		name: {
+			type: "string",
+			description: "MSM name (register/deregister)"
+		},
+		path: {
+			type: "string",
+			description: "register: script relative path inside root"
+		},
+		category: {
+			type: "string",
+			description: "register: mech | semi-mech"
+		},
+		description: {
+			type: "string",
+			description: "register: one-line description"
+		},
+		skill: {
+			type: "string",
+			description: "register: owning skill"
+		},
+		flags: {
+			type: "string",
+			description: "register: flags JSON string (e.g. [{\"name\":\"x\",\"type\":\"string\"}] — type:\"path\" enables escape guard)"
+		},
+		usage: {
+			type: "string",
+			description: "register: custom usage (auto-generated by default)"
+		}
+	},
 	output: {
 		schema: { type: "json" },
 		render: (args, value) => renderText$1(value)
@@ -4590,13 +3284,43 @@ const skiffAdminTool = defineTool({
 	async execute(args, exec) {
 		const root = findSerenityRoot(agentCwd$2(exec));
 		if (!root) throw new Error("No CCC found: no .serenity file from agent cwd");
-		switch (args.action) {
+		const sessionId = agentSessionId(exec);
+		const domain = args.domain;
+		const action = args.action ?? "";
+		if (domain === "msm" && (action === "register" || action === "deregister")) {
+			const gate = skiffMsmGate(root, sessionId, action, args.name);
+			if (gate.reject) throw new Error(gate.reject);
+		}
+		if (domain === "role") switch (action) {
 			case "guide": return { guide: SKIFF_GUIDE };
 			case "validate": return validateSkiffConfig(root);
 			case "apply": return applySkiffConfig(root);
 			case "list": return listSkiffRoles(root);
-			default: throw new Error("skiff_admin requires action: guide | validate | apply | list");
+			default: throw new Error(`container_admin role requires action: guide | validate | apply | list`);
+		}
+		if (domain === "msm") {
+			const mgmtActions = [
+				"register",
+				"deregister",
+				"check",
+				"guide",
+				"catalog",
+				"ccc-config"
+			];
+			if (!mgmtActions.includes(action)) throw new Error(`container_admin msm requires action: ${mgmtActions.join(" | ")} (execution goes through the msm tool)`);
+			return runMsm(root, {
+				action,
+				name: args.name,
+				skill: args.skill,
+				path: args.path,
+				category: args.category,
+				description: args.description,
+				flags: args.flags,
+				usage: args.usage
+			});
 		}
+		if (domain === "config") return { config: runMsm(root, { action: "ccc-config" }) };
+		throw new Error(`container_admin requires domain: role | msm | config`);
 	}
 });
 //#endregion
@@ -4630,7 +3354,7 @@ var autopilot_trajectory_exports = /* @__PURE__ */ __exportAll({
 	shouldWake: () => shouldWake,
 	wakeHistoryFor: () => wakeHistoryFor
 });
-const PLUGIN_SOURCE$3 = {
+const PLUGIN_SOURCE$4 = {
 	kind: "plugin",
 	plugin: "dsh-serenity-hooks"
 };
@@ -4744,7 +3468,7 @@ async function fetchBiasContent(root, providerRel) {
 	}
 	if (!existsSync(scriptAbs)) return {
 		text: null,
-		error: `请在 CCC 根目录实现偏见内容提供者脚本: ${providerRel}（或旧默认 ${LEGACY_BIAS_PROVIDER}；stdout 输出偏见内容一行；acc_msm exec autopilot-trajectory init 可生成模板）`
+		error: `请在 CCC 根目录实现偏见内容提供者脚本: ${providerRel}（或旧默认 ${LEGACY_BIAS_PROVIDER}；stdout 输出偏见内容一行；msm autopilot-trajectory init 可生成模板）`
 	};
 	const runs = [["bun", [scriptAbs]], [process.execPath, [scriptAbs]]];
 	for (const [cmd, args] of runs) try {
@@ -4868,401 +3592,795 @@ async function performAutopilotWake(ctx, root, settings, opts = {}) {
 			type: "text",
 			text: message
 		}],
-		source: PLUGIN_SOURCE$3
+		source: PLUGIN_SOURCE$4
 	}));
 	return {
-		ok: true,
-		detail: `已唤起 ${basename(dirname(mdPath))}（偏见提供者 ${provider}）`
+		ok: true,
+		detail: `已唤起 ${basename(dirname(mdPath))}（偏见提供者 ${provider}）`
+	};
+}
+/**
+* 装配（index.ts apply 调用）。时钟唤起（v1.26.14 修复 + v1.27.4 多 CCC 独立）：
+*
+* v1.26.14 根因：旧实现启动时一次性解析 root——web 进程启动时 live 会话往往为空 → 定时器不启动。
+* 修复：① 每次 tick 动态解析 root+settings ② 监听 session/created 启动定时器 ③ 优先实验 CCC。
+*
+* **v1.27.4 多 CCC 独立（用户"4个CCC能各自有autotrajectory吗"）**：
+* - 单定时器保留（TICK_MS 10min），每次 tick **遍历所有 live+enabled CCC**（collectAutopilotCccs）
+*   各自评估 shouldWake + 各自唤起——每 CCC 的 interval/session/bias/topPrompt/窗口独立
+* - `running` 守卫 **per-CCC**（不同 CCC 唤起互不阻塞）
+* - **全局串行化**（wakeChain：同 tick 多 CCC 到点 → 依次唤起，防模型并发挤兑）
+*
+* 零资源占用语义保留：无 enabled CCC → tick 内直接 return（定时器存在但每 10min 一次空检查，
+* unref 不阻塞进程退出）。
+*/
+function registerAutopilot(ctx) {
+	let timer = null;
+	const runningByRoot = /* @__PURE__ */ new Map();
+	let wakeChain = Promise.resolve();
+	const globalOn = () => {
+		try {
+			return readSimpleSettings().autopilotEnabled === true;
+		} catch {
+			return false;
+		}
+	};
+	const tick = () => {
+		if (!globalOn()) return;
+		const roots = collectAutopilotCccs(ctx);
+		if (roots.length === 0) return;
+		for (const root of roots) {
+			if (runningByRoot.get(root)) continue;
+			const settings = readAutopilotSettings(root);
+			if (!settings?.enabled) continue;
+			if (!shouldWake(settings, resolveTargetMd(root, settings), Date.now(), false, wakeHistoryFor(root))) continue;
+			runningByRoot.set(root, true);
+			wakeChain = wakeChain.then(async () => {
+				try {
+					const res = await performAutopilotWake(ctx, root, settings, { force: false });
+					recordWake(root, {
+						time: Date.now(),
+						ok: res.ok,
+						detail: res.detail
+					});
+					if (res.ok) console.log(`[serenity-hooks] ✓ Autopilot Trajectory 唤起（${res.detail}）`);
+					else console.warn(`[serenity-hooks] ✗ Autopilot Trajectory 唤起跳过：${res.detail}`);
+				} catch (err) {
+					recordWake(root, {
+						time: Date.now(),
+						ok: false,
+						detail: `唤起异常: ${String(err?.message ?? err)}`
+					});
+					console.warn(`[serenity-hooks] ✗ Autopilot Trajectory 唤起失败: ${String(err?.message ?? err)}`);
+				} finally {
+					runningByRoot.set(root, false);
+				}
+			});
+		}
+	};
+	const startTimer = () => {
+		if (timer) return;
+		if (!globalOn()) return;
+		if (collectAutopilotCccs(ctx).length === 0) return;
+		timer = setInterval(tick, TICK_MS);
+		timer.unref();
+		console.log(`[serenity-hooks] ✓ Autopilot Trajectory 定时器启动（${collectAutopilotCccs(ctx).length} 个 CCC 启用）`);
+		tick();
+	};
+	startTimer();
+	try {
+		ctx.on("session/created", () => startTimer());
+	} catch {}
+	try {
+		ctx.on("serenity/settings-changed", () => startTimer());
+	} catch {}
+}
+/**
+* 目标 agent：从 SESSION.md 反向定位 dsh 会话（cwd 归属校验 + **bound 精确匹配优先**，
+* 标题 F3 命名回退）；不可得 → null。
+*
+* v1.29.2（R2，用户"autopilot 会话绑定应当更稳固——唤起的时候能唤起最新的、
+* 绑定 autopilot SESSION 的会话"）：v1.29.1 `serenity/bound` 事件是权威绑定
+* （session use 激活时 append，dirName = 完整 AGENT_SESSIONS 目录名，编码无关 U4）。
+* 旧实现只按标题猜（=== sid / startsWith(sid-)）——若绑定该 SESSION 的 dsh 会话
+* 标题不是 S###- 前缀（LLM 改过/重建后 rename 异常），绑定明明在却唤起失败。
+* 加强：**bound.dirName 精确匹配优先**（权威证据），标题匹配降级为回退（存量
+* 无 bound 的 live 会话兼容）；多候选（罕见：同 SESSION 绑定多个 live 会话）取
+* **绑定最新**（bound.at 最大——最近 use 过 = 最可能当前在用）。
+*/
+function resolveTargetAgent(ctx, mdPath) {
+	const dirName = basename(dirname(mdPath));
+	const idMatch = dirName.match(/--S(\d{3,})--/);
+	const sid = idMatch ? `S${idMatch[1]}` : null;
+	const targetRoot = findSerenityRoot(mdPath);
+	const sessions = ctx.sessions;
+	const agents = ctx.agents;
+	const candidates = [];
+	try {
+		for (const s of sessions?.list?.() ?? []) {
+			const sess = s;
+			const cwd = sess?.header?.cwd ?? "";
+			if (targetRoot) {
+				if (findSerenityRoot(cwd) !== targetRoot) continue;
+			} else if (cwd !== "" && !mdPath.startsWith(cwd.endsWith("/") ? cwd : cwd + "/")) continue;
+			const bound = readLastBound(sess);
+			const title = readSessionTitle(sess);
+			const boundMatched = bound !== null && bound.dirName === dirName;
+			const titleMatched = sid !== null && title !== null && (title === sid || title.startsWith(`${sid}-`));
+			if (boundMatched) candidates.push({
+				session: sess,
+				boundAt: bound?.at ?? null,
+				titleMatched
+			});
+			else if (titleMatched) candidates.push({
+				session: sess,
+				boundAt: null,
+				titleMatched
+			});
+		}
+	} catch {}
+	if (candidates.length === 0) return null;
+	candidates.sort((a, b) => {
+		const aBound = a.boundAt !== null;
+		if (aBound !== (b.boundAt !== null)) return aBound ? -1 : 1;
+		return (b.boundAt ?? 0) - (a.boundAt ?? 0);
+	});
+	for (const c of candidates) {
+		const agent = agents?.get?.(c.session.id ?? "");
+		if (agent) return agent;
+	}
+	return null;
+}
+/**
+* 从 dsh 会话 log 读取标题（latest-wins `session/title` 事件）——
+* **标题不在 sessions.list() 条目上**（wire/对象均无 title 字段；F3 命名经
+* sessionTitle.rename 写进 session log），必须从 events 提取（rebuild 同款读取模式）。
+*/
+function readSessionTitle(session) {
+	try {
+		const events = sessionEvents(session);
+		for (let i = events.length - 1; i >= 0; i--) {
+			const e = events[i];
+			if (e?.type === "session/title" && typeof e.data?.title === "string" && e.data.title.trim() !== "") return e.data.title.trim();
+		}
+	} catch {}
+	return null;
+}
+/**
+* 诊断：目标会话 agent 为何不可得（供 performAutopilotWake 失败信息——
+* 区分"无 live 会话" / "标题不匹配" / "bound 或标题命中但 agent 未加载"）。
+* v1.29.2（R2）：bound 命中但 agent 未加载也归入「已匹配未加载」（原只查标题）。
+* 返回诊断文本（无则 null）。
+*/
+function diagnoseTargetUnavailable(ctx, mdPath) {
+	const dirName = basename(dirname(mdPath));
+	const idMatch = dirName.match(/--S(\d{3,})--/);
+	const sid = idMatch ? `S${idMatch[1]}` : null;
+	const targetRoot = findSerenityRoot(mdPath);
+	const sameCccTitles = [];
+	const agentMissing = { matched: false };
+	try {
+		const sessions = ctx.sessions;
+		for (const s of sessions?.list?.() ?? []) {
+			const sess = s;
+			const cwd = sess?.header?.cwd ?? "";
+			if (targetRoot) {
+				if (findSerenityRoot(cwd) !== targetRoot) continue;
+			} else if (cwd !== "" && !mdPath.startsWith(cwd.endsWith("/") ? cwd : cwd + "/")) continue;
+			const bound = readLastBound(sess);
+			const title = readSessionTitle(sess);
+			if (title) sameCccTitles.push(title);
+			const boundMatched = bound !== null && bound.dirName === dirName;
+			const titleMatched = sid !== null && title !== null && (title === sid || title.startsWith(`${sid}-`));
+			if (boundMatched || titleMatched) {
+				if (!ctx.agents?.get?.(sess.id ?? "")) agentMissing.matched = true;
+			}
+		}
+	} catch {}
+	if (agentMissing.matched) return `会话已绑定/匹配 ${sid ?? dirName} 但 agent 未加载（会话可能刚创建/正在恢复——稍后重试）`;
+	if (sameCccTitles.length > 0) return `目标 CCC 内 live 会话标题: [${sameCccTitles.join(", ")}]——均不匹配 ${sid ?? dirName}（目标会话未在 WebUI 打开，或绑定/命名未生效）`;
+	return `目标 CCC 内无 live 会话（先在 WebUI 打开 ${sid ?? dirName} 会话后重试）`;
+}
+/** Autopilot 绑定的回退 CCC 根：进程 cwd 上溯 .serenity 优先，回退任一 live 会话 root */
+function resolveAutopilotRoot(ctx) {
+	const fromCwd = findSerenityRoot(process.cwd());
+	if (fromCwd) return fromCwd;
+	try {
+		const sessions = ctx.sessions;
+		for (const s of sessions?.list?.() ?? []) {
+			const r = findSerenityRoot(s?.header?.cwd ?? "");
+			if (r) return r;
+		}
+	} catch {}
+	return null;
+}
+function getAutopilotStatus(root) {
+	const cfg = readAutopilotSettings(root);
+	const now = Date.now();
+	const base = {
+		configured: cfg !== null,
+		enabled: cfg?.enabled ?? false,
+		intervalHours: Math.max(MIN_INTERVAL_HOURS, cfg?.intervalHours ?? 12),
+		biasProvider: cfg?.biasProvider?.trim() || "autopilot-bias.ts",
+		topPrompt: cfg?.topPrompt?.trim() || null,
+		session: cfg?.session ?? null,
+		avoidWakeHours: {
+			start: cfg?.avoidWakeHours?.start ?? DEFAULT_AVOID_HOURS.start,
+			end: cfg?.avoidWakeHours?.end ?? DEFAULT_AVOID_HOURS.end
+		},
+		beijingHour: beijingHour(now),
+		windowAllowed: inAllowedWakeWindow(now, cfg?.avoidWakeHours),
+		recentWakes: wakeHistoryFor(root).slice(-10).reverse()
+	};
+	if (!cfg) return {
+		...base,
+		target: null
+	};
+	const mdPath = resolveTargetMd(root, cfg);
+	if (!mdPath) return {
+		...base,
+		target: null
+	};
+	let idleHours = 0;
+	try {
+		idleHours = (now - statSync(mdPath).mtimeMs) / 36e5;
+	} catch {}
+	return {
+		...base,
+		target: {
+			dirName: basename(dirname(mdPath)),
+			autoFlag: isAutopilotSession(mdPath),
+			idleHours: Math.max(0, idleHours),
+			wakeable: shouldWake(cfg, mdPath, now, false, wakeHistoryFor(root))
+		}
+	};
+}
+/** 遍历 live 会话（sessions.list()）+ 补标题（events session/title latest-wins）+ ccc 归属 */
+function listLiveSessions(ctx) {
+	const out = [];
+	try {
+		const sessions = ctx.sessions;
+		for (const s of sessions?.list?.() ?? []) {
+			const cwd = s?.header?.cwd ?? null;
+			out.push({
+				id: s?.id ?? "",
+				cwd,
+				cccRoot: cwd ? findSerenityRoot(cwd) : null,
+				title: readSessionTitle(s)
+			});
+		}
+	} catch {}
+	return out;
+}
+/**
+* 收集所有「配置了 Autopilot Trajectory 的 live CCC」——**v1.27.4 多 CCC 独立**：
+* 返回 enabled 的 CCC 列表（时钟 tick 遍历目标）；无 enabled → []。
+* （原 resolveAutoTrajectoryCcc 单目标语义被 collect 取代——面板/诊断用 enableOnly=false 取全量）
+*/
+function collectAutopilotCccs(ctx, opts = {}) {
+	const enabled = [];
+	const configured = [];
+	for (const s of listLiveSessions(ctx)) {
+		if (!s.cccRoot) continue;
+		const cfg = readAutopilotSettings(s.cccRoot);
+		if (!cfg) continue;
+		if (cfg.enabled) {
+			if (!enabled.includes(s.cccRoot)) enabled.push(s.cccRoot);
+		} else if (!configured.includes(s.cccRoot)) configured.push(s.cccRoot);
+	}
+	return opts.includeDisabled ? [...enabled, ...configured] : enabled;
+}
+function diagLive(ctx) {
+	const liveSessions = listLiveSessions(ctx);
+	const processCwd = process.cwd();
+	const processCcc = findSerenityRoot(processCwd);
+	const panelResolved = collectAutopilotCccs(ctx)[0] ?? resolveAutopilotRoot(ctx);
+	const autopilotCccs = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const s of liveSessions) {
+		if (!s.cccRoot || seen.has(s.cccRoot)) continue;
+		const cfg = readAutopilotSettings(s.cccRoot);
+		if (!cfg) continue;
+		seen.add(s.cccRoot);
+		const status = getAutopilotStatus(s.cccRoot);
+		const mdPath = resolveTargetMd(s.cccRoot, cfg);
+		const agentResolved = mdPath ? resolveTargetAgent(ctx, mdPath) !== null : false;
+		const agentDiagnosis = mdPath && !agentResolved ? diagnoseTargetUnavailable(ctx, mdPath) : null;
+		autopilotCccs.push({
+			root: s.cccRoot,
+			enabled: status.enabled,
+			session: status.session,
+			target: status.target,
+			agentResolved,
+			agentDiagnosis
+		});
+	}
+	return {
+		processCwd,
+		processCcc,
+		liveSessions,
+		autopilotCccs,
+		panelResolved
 	};
 }
+//#endregion
+//#region src/tools/autopilot-trajectory.ts
 /**
-* 装配（index.ts apply 调用）。时钟唤起（v1.26.14 修复 + v1.27.4 多 CCC 独立）：
-*
-* v1.26.14 根因：旧实现启动时一次性解析 root——web 进程启动时 live 会话往往为空 → 定时器不启动。
-* 修复：① 每次 tick 动态解析 root+settings ② 监听 session/created 启动定时器 ③ 优先实验 CCC。
+* autopilot-trajectory.ts — Autopilot Trajectory 一站式管理工具（v1.26.12 实验
+* autotrajectory-exp → v1.27.4 正式化改名）
 *
-* **v1.27.4 多 CCC 独立（用户"4个CCC能各自有autotrajectory吗"）**：
-* - 单定时器保留（TICK_MS 10min），每次 tick **遍历所有 live+enabled CCC**（collectAutopilotCccs）
-*   各自评估 shouldWake + 各自唤起——每 CCC 的 interval/session/bias/topPrompt/窗口独立
-* - `running` 守卫 **per-CCC**（不同 CCC 唤起互不阻塞）
-* - **全局串行化**（wakeChain：同 tick 多 CCC 到点 → 依次唤起，防模型并发挤兑）
+* 定位：dsp **只提供工具与知识**，不向 CCC 自动安装任何东西（机制是 CCC 的自选动作）——
+* agent 调本工具（doc/全报告）即懂机制，init/random/check 辅助，
+* 实际执行（写配置/写偏见脚本/标记会话）由 CCC 自己决定、自己用现有工具完成。
 *
-* 零资源占用语义保留：无 enabled CCC → tick 内直接 return（定时器存在但每 10min 一次空检查，
-* unref 不阻塞进程退出）。
+* 实现：薄封装——exec 包内静态脚本（npm files 含 experiments/），脚本是单一真相源。
+* 环境注入 SERENITY_ROOT（当前 CCC 根）供脚本定位；bun 优先（可直跑 TS）。
+* diag-live：**进程内诊断**（v1.26.14 用户"排查访问不到"）——闭包捕获 ctx，
+* 直接读 live 会话/标题/agent（脚本 diag 看不到运行时），输出实例级诊断报告。
 */
-function registerAutopilot(ctx) {
-	let timer = null;
-	const runningByRoot = /* @__PURE__ */ new Map();
-	let wakeChain = Promise.resolve();
-	const globalOn = () => {
-		try {
-			return readSimpleSettings().autopilotEnabled === true;
-		} catch {
-			return false;
-		}
-	};
-	const tick = () => {
-		if (!globalOn()) return;
-		const roots = collectAutopilotCccs(ctx);
-		if (roots.length === 0) return;
-		for (const root of roots) {
-			if (runningByRoot.get(root)) continue;
-			const settings = readAutopilotSettings(root);
-			if (!settings?.enabled) continue;
-			if (!shouldWake(settings, resolveTargetMd(root, settings), Date.now(), false, wakeHistoryFor(root))) continue;
-			runningByRoot.set(root, true);
-			wakeChain = wakeChain.then(async () => {
-				try {
-					const res = await performAutopilotWake(ctx, root, settings, { force: false });
-					recordWake(root, {
-						time: Date.now(),
-						ok: res.ok,
-						detail: res.detail
-					});
-					if (res.ok) console.log(`[serenity-hooks] ✓ Autopilot Trajectory 唤起（${res.detail}）`);
-					else console.warn(`[serenity-hooks] ✗ Autopilot Trajectory 唤起跳过：${res.detail}`);
-				} catch (err) {
-					recordWake(root, {
-						time: Date.now(),
-						ok: false,
-						detail: `唤起异常: ${String(err?.message ?? err)}`
-					});
-					console.warn(`[serenity-hooks] ✗ Autopilot Trajectory 唤起失败: ${String(err?.message ?? err)}`);
-				} finally {
-					runningByRoot.set(root, false);
-				}
-			});
-		}
-	};
-	const startTimer = () => {
-		if (timer) return;
-		if (!globalOn()) return;
-		if (collectAutopilotCccs(ctx).length === 0) return;
-		timer = setInterval(tick, TICK_MS);
-		timer.unref();
-		console.log(`[serenity-hooks] ✓ Autopilot Trajectory 定时器启动（${collectAutopilotCccs(ctx).length} 个 CCC 启用）`);
-		tick();
-	};
-	startTimer();
-	try {
-		ctx.on("session/created", () => startTimer());
-	} catch {}
-	try {
-		ctx.on("serenity/settings-changed", () => startTimer());
-	} catch {}
+/**
+* 定位包内脚本（npm files 分发 experiments/autopilot-trajectory/）。
+* 布局差异：tsdown bundle 后 import.meta.url 指向 lib/index.js（lib → 包根 1 层）；
+* vitest 源码直跑时指向 src/tools/x.ts（src/tools → 包根 2 层）——逐级上溯查找，
+* 两种布局都稳（找到 experiments/autopilot-trajectory/scripts/autopilot-trajectory.ts 即止）。
+*/
+function findExpScript(startDir) {
+	let cur = startDir;
+	while (true) {
+		const cand = join(cur, "experiments", "autopilot-trajectory", "scripts", "autopilot-trajectory.ts");
+		if (existsSync(cand)) return cand;
+		const parent = dirname(cur);
+		if (parent === cur) return null;
+		cur = parent;
+	}
 }
-/** 目标 agent：从 SESSION.md 反向定位 dsh 会话（标题 F3 命名 S###-日期 匹配 + cwd 归属校验）；不可得 → null */
-function resolveTargetAgent(ctx, mdPath) {
-	const idMatch = basename(dirname(mdPath)).match(/--S(\d{3,})--/);
-	const sid = idMatch ? `S${idMatch[1]}` : null;
-	const targetRoot = findSerenityRoot(mdPath);
-	try {
-		const sessions = ctx.sessions;
-		for (const s of sessions?.list?.() ?? []) {
-			const cwd = s?.header?.cwd ?? "";
-			if (targetRoot) {
-				if (findSerenityRoot(cwd) !== targetRoot) continue;
-			} else if (cwd !== "" && !mdPath.startsWith(cwd.endsWith("/") ? cwd : cwd + "/")) continue;
-			const title = readSessionTitle(s);
-			if (sid && title && (title === sid || title.startsWith(`${sid}-`))) {
-				const agent = ctx.agents?.get?.(s.id ?? "");
-				if (agent) return agent;
+/** 包内脚本（上溯查找；找不到 → execute 报错提示包完整性） */
+const EXP_SCRIPT = findExpScript(dirname(fileURLToPath(import.meta.url)));
+const AUTOPILOT_ACTIONS = [
+	"all",
+	"init",
+	"random",
+	"diag",
+	"doc",
+	"check",
+	"status",
+	"guide",
+	"diag-live"
+];
+function agentCwd$1(exec) {
+	return exec.agent?.session?.header?.cwd ?? process.cwd();
+}
+function renderText(value) {
+	return [{
+		type: "text",
+		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
+	}];
+}
+/** 渲染 diag-live 报告为可读文本（EAP：结构清晰、命中点显式） */
+function renderDiagLive(r) {
+	const lines = [
+		"═══ Autopilot Trajectory 进程内诊断（diag-live，v1.26.14）═══",
+		`进程 cwd: ${r.processCwd}（CCC: ${r.processCcc ?? "无 .serenity"}）`,
+		`面板解析（无参 GET 目标）: ${r.panelResolved ?? "无配置 Autopilot 的 live CCC"}`,
+		"",
+		`── live 会话（${r.liveSessions.length}）──`
+	];
+	if (r.liveSessions.length === 0) lines.push("  （无 live 会话——WebUI 未打开任何会话；定时器绑定依赖 live 会话 cwd）");
+	for (const s of r.liveSessions) lines.push(`  · ${s.id}${s.title ? ` [${s.title}]` : " [无标题]"}${s.cwd ? ` cwd=${s.cwd}` : " cwd=无"}${s.cccRoot ? ` → CCC ${s.cccRoot}` : ""}`);
+	lines.push("", `── 配置了 Autopilot Trajectory 的 CCC（${r.autopilotCccs.length}）──`);
+	if (r.autopilotCccs.length === 0) lines.push("  （无——live 会话中无任何 CCC 配置 autopilotTrajectory）");
+	for (const c of r.autopilotCccs) {
+		lines.push(`  · ${c.root}（enabled=${c.enabled}）`);
+		lines.push(`    session=${c.session ?? "未配置"} | 目标=${c.target ? `${c.target.dirName}（--auto ${c.target.autoFlag ? "✓" : "✗"}，空闲 ${c.target.idleHours.toFixed(1)}h）` : "未命中"}`);
+		lines.push(`    agent 定位: ${c.agentResolved ? "✓ 可注入" : `✗ 不可得——${c.agentDiagnosis ?? "未知"}`}`);
+	}
+	return lines.join("\n");
+}
+/** 创建 autopilot-trajectory 工具（闭包捕获 ctx → diag-live 进程内诊断；v1.26.14 + v1.27.4 改名） */
+function createAutopilotTool(ctx) {
+	return defineTool({
+		name: "autopilot-trajectory",
+		description: "Autopilot Trajectory（自动巡航轨迹，正式版 v1.27.4；前身 autotrajectory 实验）一站式管理。无参/action=all：全报告（背景摘要 + 就绪检查 + 状态 + 下一步）——CCC agent 看一次即完整理解并知道怎么开始；init：初始化辅助（写配置 + 生成偏见提供者脚本模板）；random：运行偏见提供者脚本输出当前偏见内容；diag：唤起条件链诊断（--ccc <path> 指定 CCC，无参递归扫描 /home/yh 两层；逐条件输出 + 阻断点 + 修复建议）；diag-live：**进程内诊断**（live 会话清单/标题/agent 定位/面板解析目标；排查\"面板检测不到实验 CCC\"）；doc：定义全文；check/status/guide：单项。**topPrompt（轨迹焦点）**：CCC 定义时自己填写本轨迹核心焦点（顶层提示词），每次唤起最先注入——稳定焦点锚定防漂移，与偏见内容（每轮随机探索）互补。多 CCC 独立（v1.27.4）：每个 live+enabled CCC 各自时钟唤起。机制是 CCC 的自选动作——dsp 只提供工具与知识，不自动安装任何东西。",
+		parameters: { action: {
+			type: "string",
+			enum: [...AUTOPILOT_ACTIONS],
+			required: true,
+			description: "Subcommand"
+		} },
+		output: {
+			schema: { type: "json" },
+			render: (_args, value) => renderText(value)
+		},
+		async execute(args, exec) {
+			if (args.action === "diag-live") return { output: renderDiagLive(diagLive(ctx)) };
+			const root = findSerenityRoot(agentCwd$1(exec));
+			const result = {};
+			if (!EXP_SCRIPT) {
+				result.error = "autopilot-trajectory 脚本未随安装分发（npm 包缺 experiments/autopilot-trajectory/）——请检查包完整性";
+				return result;
 			}
+			const script = EXP_SCRIPT;
+			if (!existsSync(script)) {
+				result.error = `autopilot-trajectory 脚本缺失（${script}）——包未随安装分发，请检查 npm 包完整性`;
+				return result;
+			}
+			const env = { ...process.env };
+			if (root) env.SERENITY_ROOT = root;
+			const r = spawnSync("bun", [script, args.action ?? "all"], {
+				encoding: "utf-8",
+				timeout: 6e5,
+				env,
+				stdio: [
+					"ignore",
+					"pipe",
+					"pipe"
+				]
+			});
+			if (r.status === 0) {
+				result.output = r.stdout?.trim() || "(empty)";
+				return result;
+			}
+			if (r.error?.code === "ENOENT") {
+				result.error = "autopilot-trajectory 需要 bun 运行时（bun not found in PATH）";
+				return result;
+			}
+			result.error = r.stderr?.trim() || r.stdout?.trim() || `exit ${r.status ?? "?"}`;
+			return result;
 		}
-	} catch {}
-	return null;
+	});
 }
+//#endregion
+//#region src/seams/bootstrap.ts
+/** 默认首请求工具集：dsp 平台 Minimal 等价核心（anchored 是 bash+str_replace_editor） */
+const DEFAULT_BOOTSTRAP_TOOLS = [
+	"read",
+	"write",
+	"edit",
+	"glob",
+	"grep"
+];
+/** 默认剥离的自动注入源（anchored 默认：可用技能目录提醒 + 工作区指令摘要） */
+const DEFAULT_SUPPRESSED_SOURCES = ["skill-catalog", "agent-instructions"];
+/** 默认 compaction 恢复工作集（anchored 默认 read/write/edit/glob/grep/todo_write/ask_user_question） */
+const DEFAULT_COMPACTION_TOOLS = [
+	"read",
+	"write",
+	"edit",
+	"glob",
+	"grep",
+	"todo_write"
+];
 /**
-* 从 dsh 会话 log 读取标题（latest-wins `session/title` 事件）——
-* **标题不在 sessions.list() 条目上**（wire/对象均无 title 字段；F3 命名经
-* sessionTitle.rename 写进 session log），必须从 events 提取（rebuild 同款读取模式）。
+* 协议级锚定消息序列（用户确认固化，2026-08-24 S142）：任何 CCC 在抽象层都是
+* 宁静号/ACC——首轮锚定话语统一，无 CCC 配置面。两轮递进：
+*  ① ACC 身份 + EAP 原则 + we/us 人称 + 先锚定后行动
+*  ② 协作协议 5 条 + acknowledge 要求（只回确认，不做事）
+* 文本 = 原 home-serenity CCC 配置（anchorMessages），随零配置化固化进代码。
+*/
+const DEFAULT_ANCHOR_MESSAGES = ["You are the operator agent of Serenity — a cognitive container governed by the Abstract Cognitive Container (ACC) protocol.\nWe operate under the Explicit Abstraction Principle (EAP): the functional value of a thought equals its external reconstructability — every output we produce must be explicit (E↑), reconstructable (R↓), and stable (S↑).\nThe personal pronoun is us/we.\nWe anchor first, then act: the abstract layer precedes the concrete.\nPlease simply reply \"acknowledge\" — no action needed.", "Before we proceed, align on how we work:\n1. We read before we write — every decision grounds in what already exists in the container.\n2. Every output records its reasoning (R↓): decisions carry reasons and alternatives.\n3. We never jump levels — abstract layer first, then specifics.\n4. Every artifact we create is a durable cognitive anchor for the work that follows.\n5. We keep the container's state coherent (SESSION.md) as we advance.\nPlease simply reply \"acknowledge\" — no action needed."];
+/**
+* 根会话锚定重入判定（v1.28.1 提取导出以便单测）：会话是否已有真实用户消息。
+* resume/续跑的会话已有对话历史 → **不重锚**（first-anchor 只注入一次）。
+*
+* 0.1.2-rc.1 适配教训：裸读 `session.events`（经类型断言）恒 undefined →
+* `!undefined` 恒 true → 有历史也永不跳过 → 任何情况发消息都重插 first-anchor。
+* 统一经 sessionEvents() 读取（snapshotEvents() 优先，.events 兜底）。
 */
-function readSessionTitle(session) {
-	try {
-		const events = sessionEvents(session);
-		for (let i = events.length - 1; i >= 0; i--) {
-			const e = events[i];
-			if (e?.type === "session/title" && typeof e.data?.title === "string" && e.data.title.trim() !== "") return e.data.title.trim();
-		}
-	} catch {}
-	return null;
+function hasUserMessageHistory(session) {
+	return sessionEvents(session).some((event) => event.type === "user/message");
 }
 /**
-* 诊断：目标会话 agent 为何不可得（供 performAutopilotWake 失败信息——
-* 区分"live 会话里无匹配" vs "匹配但 agent 未加载"）。返回诊断文本（无则 null）。
+* 构建一个 epoch 感知晋升跟踪器（纯逻辑，可单测）。
+* requiredSignals：晋升所需信号数（boundary 后累计；默认 1）。
+* 多轮锚定（v4）：两轮递进锚定时 requiredSignals = 锚定轮数——
+* 每条锚定回复（assistant/message）计一次，最后一条回复后晋升。
+*
+* maxRoundsFallback：**轮次兜底**（v1.19.3 修复 responses API 兼容）。
+* 某些模型/协议（如 opencode-go-responses）的会话可能不产生标准
+* `assistant/message` 晋升信号 → 永不晋升 → bootstrap 阶段工具被裁空
+* （zeroTools 首请求 0 工具，ACC 工具不可见）。兜底：无论晋升信号是否
+* 到达，观察到的模型 step 数（`step/start` 事件计数，平台稳定事件，
+* responses/completions 都触发，独立于 promoteEvents）达到 maxRoundsFallback
+* 即强制 promoted（开放完整工具）。正常模型锚定轮数（requiredSignals）
+* 通常 ≤ 2 < 默认兜底 3，不受影响。
 */
-function diagnoseTargetUnavailable(ctx, mdPath) {
-	const idMatch = basename(dirname(mdPath)).match(/--S(\d{3,})--/);
-	const sid = idMatch ? `S${idMatch[1]}` : null;
-	const targetRoot = findSerenityRoot(mdPath);
-	const sameCccTitles = [];
-	const agentMissing = { sid: false };
-	try {
-		const sessions = ctx.sessions;
-		for (const s of sessions?.list?.() ?? []) {
-			const cwd = s?.header?.cwd ?? "";
-			if (targetRoot) {
-				if (findSerenityRoot(cwd) !== targetRoot) continue;
-			} else if (cwd !== "" && !mdPath.startsWith(cwd.endsWith("/") ? cwd : cwd + "/")) continue;
-			const title = readSessionTitle(s);
-			if (title) sameCccTitles.push(title);
-			if (sid && title && (title === sid || title.startsWith(`${sid}-`))) {
-				if (!ctx.agents?.get?.(s.id ?? "")) agentMissing.sid = true;
-			}
-		}
-	} catch {}
-	if (agentMissing.sid) return `会话 ${sid} 已打开但 agent 未加载（会话可能刚创建/正在恢复——稍后重试）`;
-	if (sameCccTitles.length > 0) return `目标 CCC 内 live 会话标题: [${sameCccTitles.join(", ")}]——均不匹配 ${sid}（目标会话未在 WebUI 打开，或命名未生效）`;
-	return `目标 CCC 内无 live 会话（先在 WebUI 打开 ${sid} 会话后重试）`;
-}
-/** Autopilot 绑定的回退 CCC 根：进程 cwd 上溯 .serenity 优先，回退任一 live 会话 root */
-function resolveAutopilotRoot(ctx) {
-	const fromCwd = findSerenityRoot(process.cwd());
-	if (fromCwd) return fromCwd;
-	try {
-		const sessions = ctx.sessions;
-		for (const s of sessions?.list?.() ?? []) {
-			const r = findSerenityRoot(s?.header?.cwd ?? "");
-			if (r) return r;
+function createEpochPromotion(promoteEvents, requiredSignals = 1, maxRoundsFallback = 3) {
+	/** sessionId -> { boundary, signalCount, rounds }（rounds = 兜底用回复轮计数） */
+	const state = /* @__PURE__ */ new Map();
+	const sessionIdOf = (session) => {
+		if (session && typeof session === "object") {
+			const id = session.id;
+			if (typeof id === "string") return id;
 		}
-	} catch {}
-	return null;
-}
-function getAutopilotStatus(root) {
-	const cfg = readAutopilotSettings(root);
-	const now = Date.now();
-	const base = {
-		configured: cfg !== null,
-		enabled: cfg?.enabled ?? false,
-		intervalHours: Math.max(MIN_INTERVAL_HOURS, cfg?.intervalHours ?? 12),
-		biasProvider: cfg?.biasProvider?.trim() || "autopilot-bias.ts",
-		topPrompt: cfg?.topPrompt?.trim() || null,
-		session: cfg?.session ?? null,
-		avoidWakeHours: {
-			start: cfg?.avoidWakeHours?.start ?? DEFAULT_AVOID_HOURS.start,
-			end: cfg?.avoidWakeHours?.end ?? DEFAULT_AVOID_HOURS.end
-		},
-		beijingHour: beijingHour(now),
-		windowAllowed: inAllowedWakeWindow(now, cfg?.avoidWakeHours),
-		recentWakes: wakeHistoryFor(root).slice(-10).reverse()
 	};
-	if (!cfg) return {
-		...base,
-		target: null
-	};
-	const mdPath = resolveTargetMd(root, cfg);
-	if (!mdPath) return {
-		...base,
-		target: null
+	const promotedBy = (entry) => entry.signalCount >= requiredSignals || entry.rounds >= maxRoundsFallback;
+	const scan = (session) => {
+		let boundary = -1;
+		let signalCount = 0;
+		let rounds = 0;
+		const events = sessionEvents(session);
+		if (events.length > 0) for (const event of events) {
+			const e = event;
+			const seq = typeof e.seq === "number" ? e.seq : 0;
+			if (e.type === "compaction/end") {
+				boundary = seq;
+				signalCount = 0;
+				rounds = 0;
+				continue;
+			}
+			if (promoteEvents.has(e.type) && seq > boundary) signalCount++;
+			if (e.type === "step/start" && seq > boundary) rounds++;
+		}
+		const entry = {
+			boundary,
+			signalCount,
+			rounds
+		};
+		const sid = sessionIdOf(session);
+		if (sid) state.set(sid, entry);
+		return {
+			boundary,
+			promoted: promotedBy(entry)
+		};
 	};
-	let idleHours = 0;
-	try {
-		idleHours = (now - statSync(mdPath).mtimeMs) / 36e5;
-	} catch {}
 	return {
-		...base,
-		target: {
-			dirName: basename(dirname(mdPath)),
-			autoFlag: isAutopilotSession(mdPath),
-			idleHours: Math.max(0, idleHours),
-			wakeable: shouldWake(cfg, mdPath, now, false, wakeHistoryFor(root))
+		status(agent) {
+			if (agent === void 0) return {
+				boundary: -1,
+				promoted: true
+			};
+			const session = agent.session;
+			if (session === void 0) return {
+				boundary: -1,
+				promoted: true
+			};
+			const loopSid = session.id;
+			if (typeof loopSid === "string" && (loopSid.startsWith("handyman-") || isSkiffSessionId(loopSid))) return {
+				boundary: -1,
+				promoted: true
+			};
+			if ((session.header?.delegationDepth ?? 0) > 0) return {
+				boundary: -1,
+				promoted: true
+			};
+			const sid = sessionIdOf(session);
+			if (sid === void 0) return {
+				boundary: -1,
+				promoted: true
+			};
+			const s = state.get(sid);
+			if (s) return {
+				boundary: s.boundary,
+				promoted: promotedBy(s)
+			};
+			return scan(session);
+		},
+		observe(session, event) {
+			const sid = sessionIdOf(session);
+			if (sid === void 0) return;
+			const entry = state.get(sid);
+			if (entry === void 0) return;
+			const e = event;
+			const seq = typeof e.seq === "number" ? e.seq : 0;
+			if (e.type === "compaction/end") {
+				state.set(sid, {
+					boundary: seq,
+					signalCount: 0,
+					rounds: 0
+				});
+				return;
+			}
+			if (promoteEvents.has(e.type) && seq > entry.boundary) entry.signalCount++;
+			if (e.type === "step/start" && seq > entry.boundary) entry.rounds++;
+			state.set(sid, entry);
 		}
 	};
 }
-/** 遍历 live 会话（sessions.list()）+ 补标题（events session/title latest-wins）+ ccc 归属 */
-function listLiveSessions(ctx) {
-	const out = [];
-	try {
-		const sessions = ctx.sessions;
-		for (const s of sessions?.list?.() ?? []) {
-			const cwd = s?.header?.cwd ?? null;
-			out.push({
-				id: s?.id ?? "",
-				cwd,
-				cccRoot: cwd ? findSerenityRoot(cwd) : null,
-				title: readSessionTitle(s)
-			});
-		}
-	} catch {}
-	return out;
-}
-/**
-* 收集所有「配置了 Autopilot Trajectory 的 live CCC」——**v1.27.4 多 CCC 独立**：
-* 返回 enabled 的 CCC 列表（时钟 tick 遍历目标）；无 enabled → []。
-* （原 resolveAutoTrajectoryCcc 单目标语义被 collect 取代——面板/诊断用 enableOnly=false 取全量）
-*/
-function collectAutopilotCccs(ctx, opts = {}) {
-	const enabled = [];
-	const configured = [];
-	for (const s of listLiveSessions(ctx)) {
-		if (!s.cccRoot) continue;
-		const cfg = readAutopilotSettings(s.cccRoot);
-		if (!cfg) continue;
-		if (cfg.enabled) {
-			if (!enabled.includes(s.cccRoot)) enabled.push(s.cccRoot);
-		} else if (!configured.includes(s.cccRoot)) configured.push(s.cccRoot);
-	}
-	return opts.includeDisabled ? [...enabled, ...configured] : enabled;
-}
-function diagLive(ctx) {
-	const liveSessions = listLiveSessions(ctx);
-	const processCwd = process.cwd();
-	const processCcc = findSerenityRoot(processCwd);
-	const panelResolved = collectAutopilotCccs(ctx)[0] ?? resolveAutopilotRoot(ctx);
-	const autopilotCccs = [];
-	const seen = /* @__PURE__ */ new Set();
-	for (const s of liveSessions) {
-		if (!s.cccRoot || seen.has(s.cccRoot)) continue;
-		const cfg = readAutopilotSettings(s.cccRoot);
-		if (!cfg) continue;
-		seen.add(s.cccRoot);
-		const status = getAutopilotStatus(s.cccRoot);
-		const mdPath = resolveTargetMd(s.cccRoot, cfg);
-		const agentResolved = mdPath ? resolveTargetAgent(ctx, mdPath) !== null : false;
-		const agentDiagnosis = mdPath && !agentResolved ? diagnoseTargetUnavailable(ctx, mdPath) : null;
-		autopilotCccs.push({
-			root: s.cccRoot,
-			enabled: status.enabled,
-			session: status.session,
-			target: status.target,
-			agentResolved,
-			agentDiagnosis
-		});
-	}
+const PROMOTE_EVENTS = {
+	"tool-call": /* @__PURE__ */ new Set(["tool/call"]),
+	"assistant-message": /* @__PURE__ */ new Set(["assistant/message"]),
+	either: /* @__PURE__ */ new Set(["tool/call", "assistant/message"])
+};
+/** 协议固有 bootstrap 设置：zeroTools=true（首请求 0 工具纯文字锚定轮）、
+*  晋升信号仅 assistant/message（对齐 zero-anchored-standard）、
+*  requiredSignals = 锚定轮数（2 条消息 → 2 条回复后晋升）。无参——零配置面。 */
+function resolveBootstrapSettings() {
 	return {
-		processCwd,
-		processCcc,
-		liveSessions,
-		autopilotCccs,
-		panelResolved
+		bootstrapTools: [...DEFAULT_BOOTSTRAP_TOOLS],
+		promoteEvents: PROMOTE_EVENTS["assistant-message"],
+		requiredSignals: DEFAULT_ANCHOR_MESSAGES.length,
+		suppressedSources: new Set(DEFAULT_SUPPRESSED_SOURCES),
+		compactionTools: [...DEFAULT_COMPACTION_TOOLS],
+		anchorMessages: [...DEFAULT_ANCHOR_MESSAGES],
+		zeroTools: true
 	};
 }
-//#endregion
-//#region src/tools/autopilot-trajectory.ts
 /**
-* autopilot-trajectory.ts — Autopilot Trajectory 一站式管理工具（v1.26.12 实验
-* autotrajectory-exp → v1.27.4 正式化改名）
-*
-* 定位：dsp **只提供工具与知识**，不向 CCC 自动安装任何东西（机制是 CCC 的自选动作）——
-* agent 调本工具（doc/全报告）即懂机制，init/random/check 辅助，
-* 实际执行（写配置/写偏见脚本/标记会话）由 CCC 自己决定、自己用现有工具完成。
+* 注册 Anchored bootstrap 机制（协议固有，零配置面——S142；按 agent cwd 定位 CCC root，
+* 晋升状态按 root 隔离，但设置全局一致）：
+*  1. session/event 观察晋升信号（assistant/message + step/start 兜底 + compaction/end）
+*  2. system-prompt/assemble：bootstrap 阶段目录窄化到 bootstrapTools（+compaction 后 compactionTools）
+*  3. agent/pre-step：bootstrap 阶段剥离 suppressedSources 注入消息（降级保留全部）
 *
-* 实现：薄封装——exec 包内静态脚本（npm files 含 experiments/），脚本是单一真相源。
-* 环境注入 SERENITY_ROOT（当前 CCC 根）供脚本定位；bun 优先（可直跑 TS）。
-* diag-live：**进程内诊断**（v1.26.14 用户"排查访问不到"）——闭包捕获 ctx，
-* 直接读 live 会话/标题/agent（脚本 diag 看不到运行时），输出实例级诊断报告。
-*/
-/**
-* 定位包内脚本（npm files 分发 experiments/autopilot-trajectory/）。
-* 布局差异：tsdown bundle 后 import.meta.url 指向 lib/index.js（lib → 包根 1 层）；
-* vitest 源码直跑时指向 src/tools/x.ts（src/tools → 包根 2 层）——逐级上溯查找，
-* 两种布局都稳（找到 experiments/autopilot-trajectory/scripts/autopilot-trajectory.ts 即止）。
+* 摘除 = 删除 index.ts 中本注册行（独立模块）。
 */
-function findExpScript(startDir) {
-	let cur = startDir;
-	while (true) {
-		const cand = join(cur, "experiments", "autopilot-trajectory", "scripts", "autopilot-trajectory.ts");
-		if (existsSync(cand)) return cand;
-		const parent = dirname(cur);
-		if (parent === cur) return null;
-		cur = parent;
-	}
-}
-/** 包内脚本（上溯查找；找不到 → execute 报错提示包完整性） */
-const EXP_SCRIPT = findExpScript(dirname(fileURLToPath(import.meta.url)));
-const AUTOPILOT_ACTIONS = [
-	"all",
-	"init",
-	"random",
-	"diag",
-	"doc",
-	"check",
-	"status",
-	"guide",
-	"diag-live"
-];
-function agentCwd$1(exec) {
-	return exec.agent?.session?.header?.cwd ?? process.cwd();
-}
-function renderText(value) {
-	return [{
-		type: "text",
-		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
-	}];
-}
-/** 渲染 diag-live 报告为可读文本（EAP：结构清晰、命中点显式） */
-function renderDiagLive(r) {
-	const lines = [
-		"═══ Autopilot Trajectory 进程内诊断（diag-live，v1.26.14）═══",
-		`进程 cwd: ${r.processCwd}（CCC: ${r.processCcc ?? "无 .serenity"}）`,
-		`面板解析（无参 GET 目标）: ${r.panelResolved ?? "无配置 Autopilot 的 live CCC"}`,
-		"",
-		`── live 会话（${r.liveSessions.length}）──`
-	];
-	if (r.liveSessions.length === 0) lines.push("  （无 live 会话——WebUI 未打开任何会话；定时器绑定依赖 live 会话 cwd）");
-	for (const s of r.liveSessions) lines.push(`  · ${s.id}${s.title ? ` [${s.title}]` : " [无标题]"}${s.cwd ? ` cwd=${s.cwd}` : " cwd=无"}${s.cccRoot ? ` → CCC ${s.cccRoot}` : ""}`);
-	lines.push("", `── 配置了 Autopilot Trajectory 的 CCC（${r.autopilotCccs.length}）──`);
-	if (r.autopilotCccs.length === 0) lines.push("  （无——live 会话中无任何 CCC 配置 autopilotTrajectory）");
-	for (const c of r.autopilotCccs) {
-		lines.push(`  · ${c.root}（enabled=${c.enabled}）`);
-		lines.push(`    session=${c.session ?? "未配置"} | 目标=${c.target ? `${c.target.dirName}（--auto ${c.target.autoFlag ? "✓" : "✗"}，空闲 ${c.target.idleHours.toFixed(1)}h）` : "未命中"}`);
-		lines.push(`    agent 定位: ${c.agentResolved ? "✓ 可注入" : `✗ 不可得——${c.agentDiagnosis ?? "未知"}`}`);
-	}
-	return lines.join("\n");
+/** 从 agent 解析 CCC 根（宽松；无 agent/无 CCC 返回 null） */
+function agentRoot(agent) {
+	const cwd = agent?.session?.header?.cwd;
+	if (typeof cwd !== "string") return null;
+	return findSerenityRoot(cwd);
 }
-/** 创建 autopilot-trajectory 工具（闭包捕获 ctx → diag-live 进程内诊断；v1.26.14 + v1.27.4 改名） */
-function createAutopilotTool(ctx) {
-	return defineTool({
-		name: "autopilot-trajectory",
-		description: "Autopilot Trajectory（自动巡航轨迹，正式版 v1.27.4；前身 autotrajectory 实验）一站式管理。无参/action=all：全报告（背景摘要 + 就绪检查 + 状态 + 下一步）——CCC agent 看一次即完整理解并知道怎么开始；init：初始化辅助（写配置 + 生成偏见提供者脚本模板）；random：运行偏见提供者脚本输出当前偏见内容；diag：唤起条件链诊断（--ccc <path> 指定 CCC，无参递归扫描 /home/yh 两层；逐条件输出 + 阻断点 + 修复建议）；diag-live：**进程内诊断**（live 会话清单/标题/agent 定位/面板解析目标；排查\"面板检测不到实验 CCC\"）；doc：定义全文；check/status/guide：单项。**topPrompt（轨迹焦点）**：CCC 定义时自己填写本轨迹核心焦点（顶层提示词），每次唤起最先注入——稳定焦点锚定防漂移，与偏见内容（每轮随机探索）互补。多 CCC 独立（v1.27.4）：每个 live+enabled CCC 各自时钟唤起。机制是 CCC 的自选动作——dsp 只提供工具与知识，不自动安装任何东西。",
-		parameters: { action: {
-			type: "string",
-			enum: [...AUTOPILOT_ACTIONS],
-			required: true,
-			description: "Subcommand"
-		} },
-		output: {
-			schema: { type: "json" },
-			render: (_args, value) => renderText(value)
-		},
-		async execute(args, exec) {
-			if (args.action === "diag-live") return { output: renderDiagLive(diagLive(ctx)) };
-			const root = findSerenityRoot(agentCwd$1(exec));
-			const result = {};
-			if (!EXP_SCRIPT) {
-				result.error = "autopilot-trajectory 脚本未随安装分发（npm 包缺 experiments/autopilot-trajectory/）——请检查包完整性";
-				return result;
-			}
-			const script = EXP_SCRIPT;
-			if (!existsSync(script)) {
-				result.error = `autopilot-trajectory 脚本缺失（${script}）——包未随安装分发，请检查 npm 包完整性`;
-				return result;
-			}
-			const env = { ...process.env };
-			if (root) env.SERENITY_ROOT = root;
-			const r = spawnSync("bun", [script, args.action ?? "all"], {
-				encoding: "utf-8",
-				timeout: 6e5,
-				env,
-				stdio: [
-					"ignore",
-					"pipe",
-					"pipe"
-				]
+/** 协议固有设置（零配置面）：所有 CCC 使用同一固化设置 */
+const SETTINGS = resolveBootstrapSettings();
+function registerBootstrap(ctx) {
+	const trackers = /* @__PURE__ */ new Map();
+	/** 已锚定会话（进程内防重：子 agent 每会话只锚定一次） */
+	const anchoredSessions = /* @__PURE__ */ new Set();
+	const trackerFor = (root) => {
+		let t = trackers.get(root);
+		if (!t) {
+			t = createEpochPromotion(SETTINGS.promoteEvents, SETTINGS.requiredSignals);
+			trackers.set(root, t);
+		}
+		return t;
+	};
+	ctx.on("session/event", (session, event) => {
+		try {
+			const cwd = session?.header?.cwd;
+			if (typeof cwd !== "string") return;
+			const root = findSerenityRoot(cwd);
+			if (!root) return;
+			trackerFor(root).observe(session, event);
+		} catch {}
+	});
+	ctx.on("agent/inbox/inserted", ({ agent, message }) => {
+		try {
+			if (!agentRoot(agent)) return;
+			const session = agent.session;
+			const depth = session?.header?.delegationDepth ?? 0;
+			const sid = typeof session?.id === "string" ? session.id : void 0;
+			if (sid !== void 0 && (sid.startsWith("handyman-") || isSkiffSessionId(sid))) return;
+			if (depth === 0) {
+				if (hasUserMessageHistory(session)) return;
+			} else if (sid !== void 0 && anchoredSessions.has(sid)) return;
+			if (message?.source?.kind === "plugin") return;
+			const inbox = agent.inbox;
+			if (!inbox?.prepend) return;
+			for (let i = SETTINGS.anchorMessages.length - 1; i >= 0; i--) inbox.prepend("next-turn", {
+				id: `bootstrap-anchor-${Date.now()}-${Math.random().toString(36).slice(2, 8)}-${i}`,
+				role: "user",
+				content: [{
+					type: "text",
+					text: SETTINGS.anchorMessages[i]
+				}],
+				source: {
+					kind: "plugin",
+					plugin: "dsh-serenity-hooks",
+					form: "notice",
+					summary: "bootstrap anchor turn"
+				}
 			});
-			if (r.status === 0) {
-				result.output = r.stdout?.trim() || "(empty)";
-				return result;
+			if (sid !== void 0) anchoredSessions.add(sid);
+			warnOnce(`anchor turns injected: ${SETTINGS.anchorMessages.length} 条（${SETTINGS.anchorMessages[0].slice(0, 40)}…）`);
+		} catch {}
+	});
+	let warned = false;
+	const warnOnce = (message) => {
+		if (warned) return;
+		warned = true;
+		try {
+			console.warn(`[serenity-hooks] bootstrap: ${message}`);
+		} catch {}
+	};
+	ctx.on("system-prompt/assemble", async (_assembly, context, next) => {
+		const assembled = await next();
+		try {
+			const agent = context.agent;
+			const root = agentRoot(agent);
+			if (!root) return assembled;
+			const status = trackerFor(root).status(agent);
+			if (status.promoted) return assembled;
+			const tools = assembled.tools;
+			if (!Array.isArray(tools)) return assembled;
+			const available = new Set(tools.map((tool) => tool.name).filter((n) => typeof n === "string"));
+			if (SETTINGS.zeroTools) {
+				if (status.boundary < 0) return {
+					...assembled,
+					tools: []
+				};
+				const keep = new Set(SETTINGS.compactionTools);
+				const missing = [...keep].filter((name) => !available.has(name));
+				if (missing.length > 0) {
+					warnOnce(`expected compaction tools missing=${JSON.stringify(missing)} — bootstrap disabled, full catalog exposed`);
+					return assembled;
+				}
+				return {
+					...assembled,
+					tools: tools.filter((tool) => typeof tool.name === "string" && keep.has(tool.name))
+				};
 			}
-			if (r.error?.code === "ENOENT") {
-				result.error = "autopilot-trajectory 需要 bun 运行时（bun not found in PATH）";
-				return result;
+			const keep = new Set(SETTINGS.bootstrapTools);
+			if (status.boundary >= 0) for (const toolName of SETTINGS.compactionTools) keep.add(toolName);
+			const missing = [...keep].filter((name) => !available.has(name));
+			if (missing.length > 0) {
+				warnOnce(`expected bootstrap tools missing=${JSON.stringify(missing)} — bootstrap disabled, full catalog exposed`);
+				return assembled;
 			}
-			result.error = r.stderr?.trim() || r.stdout?.trim() || `exit ${r.status ?? "?"}`;
-			return result;
+			return {
+				...assembled,
+				tools: tools.filter((tool) => typeof tool.name === "string" && keep.has(tool.name))
+			};
+		} catch (error) {
+			warnOnce(`assemble filter failed, exposing the full catalog: ${String(error?.message ?? error)}`);
+			return assembled;
 		}
 	});
+	ctx.on("agent/pre-step", async ({ agent }, next) => {
+		const decision = await next();
+		if (decision.kind === "reject") return decision;
+		try {
+			const root = agentRoot(agent);
+			if (!root) return decision;
+			if (trackerFor(root).status(agent).promoted || SETTINGS.suppressedSources.size === 0) return decision;
+			const messages = decision.messages;
+			if (!Array.isArray(messages)) return decision;
+			const kept = messages.filter((message) => {
+				const kind = message?.source?.kind;
+				return typeof kind !== "string" || !SETTINGS.suppressedSources.has(kind);
+			});
+			return kept.length === messages.length ? decision : {
+				...decision,
+				messages: kept
+			};
+		} catch (error) {
+			warnOnce(`pre-step context filter failed, keeping injected context: ${String(error?.message ?? error)}`);
+			return decision;
+		}
+	}, { prepend: true });
+}
+//#endregion
+//#region src/trajectory-assistant.ts
+/**
+* trajectory-assistant.ts — 关卡化注入的统一命名与风格门面（v0.3，S142）
+*
+* 概念（用户拍板 2026-09-05）：dsp 全部"过程中动态提示注入"统一命名为
+* trajectory-assistant（轨迹助航员）。关卡设计思想塑造**结构与时机**
+* （何时/何地注入），**不用于提示词用词**（D8 词法原则）——纯游戏黑话
+* （BOSS/XP/level-up）禁止出现在提示词文本；CHECKPOINT/LIMIT/TUTORIAL 等
+* 跨领域自然通用词允许。
+*
+* 本模块 = token 常量 + level-event 词汇表的**单一真相源**（避免前缀散落
+* 各文件字符串字面量）+ 风格门面（plain 默认 / metaphor 星舰变体）。
+* 仅当 style=metaphor 时前缀包装措辞变化；可行动正文不变 → 零行为漂移。
+*
+* 设计简写（L0 环境 / L1 教程 / L2 目标 / L3 检查点 / L4 极限 / L5 守卫 /
+* L6 结算）仅在本模块注释与内部文档出现，永不浮现在提示词文本。
+*
+* 结算（settlement）挂点：D6 用户拍板——若 CCC 有标准 SESSION 复盘仪式，
+* 结算视图归 trajectory-assistant。当前 close/archive 无复盘摘要 → 机制
+* 延后，仅留 onSettlement 导出 seam（OP-1，无调用者）。
+*/
+/** 可见提示词前缀用词（跨领域自然词，D8：无游戏黑话） */
+const EVENT_LABEL = {
+	/** 计分同步提醒（原 TRAJECTORY-STEWARD） */
+	checkpoint: "CHECKPOINT",
+	/** 上下文极限重建提醒（原 TRAJECTORY；LIMIT 替代被否的 BOSS——自然词） */
+	limit: "LIMIT",
+	/** 极限强制升级（原 TRAJECTORY-ESCALATED） */
+	limitMandatory: "LIMIT · MANDATORY",
+	/** 重建锚点头部（原 TRAJECTORY-REBUILD） */
+	rebuild: "REBUILD",
+	/** 敏感输出边界守卫（原 SERENITY OUTPUT GUARD） */
+	guard: "BOUNDARY GUARD"
+};
+/** 家族标识（所有动态注入统一前缀） */
+const ASSISTANT_PREFIX = "TRAJECTORY-ASSISTANT";
+/** 完整 token：`[TRAJECTORY-ASSISTANT · <LABEL>]` */
+function eventToken(event) {
+	return `[${ASSISTANT_PREFIX} · ${EVENT_LABEL[event]}]`;
 }
+/** ACK 确认码前缀（recorded/skipped 语义不变，仅家族名更新） */
+const ACK_PREFIX = `${ASSISTANT_PREFIX}-recorded`;
 //#endregion
 //#region src/seams/keeper.ts
 const SCORES = {
@@ -5274,8 +4392,8 @@ const SCORES = {
 	grep: 1,
 	glob: 1,
 	skill: 1,
-	acc_msm: 1,
-	cc_fs: 1
+	msm: 1,
+	container_fs: 1
 };
 function scoreTool(toolName) {
 	return SCORES[toolName] ?? 0;
@@ -5323,14 +4441,14 @@ function reminderText(code, score) {
 * 简短留自由度（不提"加载 eap 工具"，模型自知；只说修订 skill + 新建 skill 落 SESSION）。
 *
 * escalated=true（v1.23.3）：连续多轮超阈值仍未 rebuild → 升级强制语气
-* （STOP and rebuild now，持续注入直到调用 session_rebuild）。
+* （STOP and rebuild now，持续注入直到调用 logbook rebuild）。
 *
 * 需求①（S142 用户拍板）：百分比比例 → K 数值——tokensK = 实际占用（千 token），
 * thresholdK = 配置阈值（千 token）；文案 `Context usage at NNNK (threshold NNNK)`。
 */
 function rebuildReminderText(tokensK, thresholdK, escalated = false) {
-	if (escalated) return `${eventToken("limitMandatory")} Context usage at ${Math.round(tokensK)}K (threshold ${Math.round(thresholdK)}K) — you have been reminded repeatedly and have NOT called session_rebuild. This is now mandatory: STOP at the current task step, preserve valuable cognition into the CCC skills (or write a new-skill proposal into SESSION.md), then call the session_rebuild tool immediately, passing --summary "<content summary ≤20 chars>" (required; the dsh session title is renamed to S###-YYYY-MM-DD-<summary> after rebuild). The conversation will be cleared and rebuilt in place; SESSION.md is the persistent trajectory and stays in place — identity continues from it. Do not continue working without rebuilding; this reminder persists until you call session_rebuild.`;
-	return `${eventToken("limit")} Context usage at ${Math.round(tokensK)}K (threshold ${Math.round(thresholdK)}K). This session is the rebuildable carrier of the trajectory: SESSION.md is the persistent body, this conversation is only a temporary work copy. Before rebuilding: if this conversation produced valuable cognition, revise the relevant existing skill of this CCC (structure it with eap); if a new skill is warranted, write a short proposal into SESSION.md for the user to review — do not create it yourself. ACT NOW: at the next natural pause (end of the current task step), call the session_rebuild tool — passing --summary "<content summary ≤20 chars>" describing the next work phase (required; the dsh session title is renamed to S###-YYYY-MM-DD-<summary> after rebuild) — to clear and rebuild this conversation: the current copy is discarded, identity continues from SESSION.md. If you are in the middle of an unbreakable step, continue it, then rebuild at its end. Do not ignore this; rebuild is the expected action, not an option.`;
+	if (escalated) return `${eventToken("limitMandatory")} Context usage at ${Math.round(tokensK)}K (threshold ${Math.round(thresholdK)}K) — you have been reminded repeatedly and have NOT called the logbook rebuild action. This is now mandatory: STOP at the current task step, preserve valuable cognition into the CCC skills (or write a new-skill proposal into SESSION.md), then call logbook rebuild immediately, passing --summary "<content summary ≤20 chars>" (required; the dsh session title is renamed to S###-YYYY-MM-DD-<summary> after rebuild). The conversation will be cleared and rebuilt in place; SESSION.md is the persistent trajectory and stays in place — identity continues from it. Do not continue working without rebuilding; this reminder persists until you call logbook rebuild.`;
+	return `${eventToken("limit")} Context usage at ${Math.round(tokensK)}K (threshold ${Math.round(thresholdK)}K). This session is the rebuildable carrier of the trajectory: SESSION.md is the persistent body, this conversation is only a temporary work copy. Before rebuilding: if this conversation produced valuable cognition, revise the relevant existing skill of this CCC (structure it with eap); if a new skill is warranted, write a short proposal into SESSION.md for the user to review — do not create it yourself. ACT NOW: at the next natural pause (end of the current task step), call the logbook rebuild action — passing --summary "<content summary ≤20 chars>" describing the next work phase (required; the dsh session title is renamed to S###-YYYY-MM-DD-<summary> after rebuild) — to clear and rebuild this conversation: the current copy is discarded, identity continues from SESSION.md. If you are in the middle of an unbreakable step, continue it, then rebuild at its end. Do not ignore this; rebuild is the expected action, not an option.`;
 }
 /** 读取会话 contextPressure 投影（sessionProjections 可选服务；未装配返回 null） */
 function readContextPressure(ctx, session) {
@@ -5347,7 +4465,7 @@ function readContextPressure(ctx, session) {
 		return null;
 	}
 }
-const PLUGIN_SOURCE$2 = {
+const PLUGIN_SOURCE$3 = {
 	kind: "plugin",
 	plugin: "dsh-serenity-hooks"
 };
@@ -5411,7 +4529,7 @@ function registerKeeper(ctx, opts = {}) {
 		if (blocks.length === 0) return downstream;
 		const reminderAll = createUserMessage({
 			content: blocks,
-			source: PLUGIN_SOURCE$2
+			source: PLUGIN_SOURCE$3
 		});
 		if (downstream.kind === "block") return {
 			kind: "block",
@@ -5930,7 +5048,7 @@ function identityBlock(root) {
 		"",
 		"The DSH platform tools remain available too (read/write/edit/glob/grep/web_search/ask_user_question/subagent/workflow/goal and more) — the ACC tools are the serenity-native layer, not the only tools.",
 		"",
-		"Additional MSMs registered by this CCC are available — call acc_msm list to discover them.",
+		"Additional MSMs registered by this CCC are available — call msm(\"<name>\") to execute or discover them (see the \"Serenity Tools\" heading below).",
 		""
 	].join("\n");
 }
@@ -5939,7 +5057,7 @@ function identityBlock(root) {
 * 原 accBlock 内嵌 13 行工具清单 → 独立成块放装配末尾（SKILL 后、Session 前）。
 * 身份先行（认知轨迹开头不被 13 行清单干扰）、工具参考殿后（需要时再看）。
 * 附带 MSM 调用示例（用户拍板：顶层提示词加调用方式说明，避免偶发调用错误——
-* 模型对 acc_msm 参数面/协议 flag 理解不稳）。
+* 模型对 msm 参数面/协议 flag 理解不稳）。
 */
 function toolsBlock() {
 	return [
@@ -5947,27 +5065,22 @@ function toolsBlock() {
 		"=== Serenity Tools ===",
 		"The ACC (this plugin) provides the following built-in tools:",
 		"",
-		"  cc_fs     — CCC filesystem operations (root/resolve/exists/list/tree/relative/mkdir/rm/mv/cp/touch/append/reveal/info/find)",
-		"  session   — session lifecycle (list/show/create/use/close/health/qa/archive/summary/hook-develop-guide)",
-		"  acc_kit   — ACC utility kit (health: CCC three principles + MSM registry integrity report / time: now / wait: wait N seconds)",
-		"  cc_git    — git operations (status/commit/push/log)",
-		"  acc_msm   — MSM framework (list/exec/register/deregister/check/guide/catalog/ccc-config)",
-		"  eap       — return the full EAP cognitive quality framework",
-		"  neat      — return the full Neat design collaboration protocol",
-		"  cce       — return the full Cognitive Continuity Engineering framework",
-		"  handyman  — delegate a do-everything worker agent (CCC-whitelisted model) to run synchronously in rounds until done; jobs=[] orchestrates parallel work",
-		"  session_rebuild — rebuild this conversation in place from SESSION.md when the trajectory-tracker trips",
-		"  localstore — ACC local credential/config storage (CCC-root localstore.json, JSON format; git policy localstore.gitTrack default deny); doc subcommand outputs the spec",
-		"  skiff_admin — Skiff (F4, experimental): CCC cognitive-subset roles — guide (definition tutorial) / validate (config check) / apply (validate + confirm live) / list (role summary)",
+		"  container_fs — container filesystem operations (15 subcommands: root/resolve/exists/list/tree/relative/mkdir/rm/mv/cp/touch/append/reveal/info/find)",
+		"  logbook      — the voyage's logbook: work-session lifecycle (list/show/create/use/close/health/qa/archive/summary/rebuild/hook-develop-guide)",
+		"  dashboard    — always-on container instruments: health (CCC three-principle check + registry integrity) / time (now) / wait (N seconds)",
+		"  container_git— git operations (status/commit/push/log)",
+		"  msm          — execute a registered CCC MSM: msm(name, args); partial name returns candidates; inspect=true shows usage",
+		"  praxis       — actionable theory injection: praxis (index) / praxis eap / praxis neat / praxis cce",
+		"  handyman     — delegate a do-everything worker agent (CCC-whitelisted model) to run synchronously in rounds until done; jobs=[] orchestrates parallel work",
+		"  localstore   — ACC local credential/config storage (CCC-root localstore.json; git policy localstore.gitTrack default deny)",
+		"  container_admin — container administration (the maintenance bay): role (Skiff roles: guide/validate/apply/list) / msm (register/deregister/check/guide/catalog/ccc-config) / config",
 		"  autopilot-trajectory — Autopilot Trajectory one-stop management (all/init/random/diag/doc/check/status/guide)",
 		"",
-		"First-time in a CCC? Run acc_msm catalog — ACC usage directory (capability areas + where each guide lives).",
-		"",
-		"MSM call protocol (registered CCC MSMs, deterministic Mech & Semi-Mech):",
-		"  1. Discover:       acc_msm list                    — list all registered MSMs",
-		"  2. Inspect usage:  acc_msm exec <name> --schema 1  — print one MSM's usage/flags (protocol flag, no execution)",
-		"  3. Execute:        acc_msm exec <name> <args...>   — run the MSM with business args (first arg may be --list/--schema/--format=json)",
-		"  Register new MSMs with acc_msm register; deregister with acc_msm deregister (registry is ACC-managed — never edit mech-registry.json directly).",
+		"MSM call (registered CCC MSMs, deterministic Mech & Semi-Mech):",
+		"  Execute:       msm(\"<name>\", [\"<arg1>\", \"<arg2>\"])   — run a registered MSM directly (partial name returns matching candidates)",
+		"  Inspect:       msm(\"<name>\", [], inspect=true)       — view that MSM's usage/flags without running",
+		"  Index:         msm()                                 — summary of registered MSMs by skill",
+		"  Manage:        container_admin msm register|deregister|check (registry is ACC-managed — never edit mech-registry.json directly)",
 		""
 	].join("\n");
 }
@@ -6042,12 +5155,12 @@ function principlesBlock(root, omitMsmPrinciples = false) {
 		"The session-trajectory relation: a session is the rebuildable carrier of a",
 		"trajectory. SESSION.md is the trajectory's persistent body — it never moves;",
 		"the current conversation is a temporary work copy that may be discarded and",
-		"rebuilt (session_rebuild). Identity belongs to the trajectory, not to any",
+		"rebuilt (logbook rebuild). Identity belongs to the trajectory, not to any",
 		"session.",
 		""
 	];
 	if (!omitMsmPrinciples) lines.push("MSM principles — machinery before improvisation:", "- Determinism first: use a registered Mech before hand-rolling; reserve", "  Semi-Mech for genuine judgment points.", "- Single source of truth: an MSM is the only decoder of its own usage", "  (--help/--schema); documents must not duplicate it.", "- Registered to act: no tool exists unless it is on the manifest.", "");
-	lines.push("Operational boundaries:", `Root: ${root}`, "  • File access — read/edit/write/grep/glob are confined to Root; paths outside Root are rejected (RR5)", "  • Shell — use acc_msm by default. Note: bash may be disabled", "  • Subagent — copies ALL parent constraints: file boundary, shell rules, session rules (no bypass)", "  • Session-first — before starting multi-step work, propose an existing or new AGENT_SESSIONS entry; wait for user \"use\" or \"使用\" to confirm", "");
+	lines.push("Operational boundaries:", `Root: ${root}`, "  • File access — read/edit/write/grep/glob are confined to Root; paths outside Root are rejected (RR5)", "  • Shell — use msm by default. Note: bash may be disabled", "  • Subagent — copies ALL parent constraints: file boundary, shell rules, session rules (no bypass)", "  • Session-first — before starting multi-step work, propose an existing or new AGENT_SESSIONS entry; wait for user \"use\" or \"使用\" to confirm", "");
 	return lines.join("\n");
 }
 /**
@@ -6218,7 +5331,7 @@ function localstoreBlock(root) {
 		"=== Serenity Localstore ===",
 		"localstore.json is a local private file (gitTrack=deny — not committed to git,",
 		".gitignore enforced). Credentials/config live only on this machine: do not write",
-		"them into conversation or logs; do not attempt to commit this file (cc_git will refuse).",
+		"them into conversation or logs; do not attempt to commit this file (container_git will refuse).",
 		""
 	]).join("\n");
 }
@@ -6337,8 +5450,8 @@ function codeModeAdaptationLine(ctx, scope) {
 	return [
 		"",
 		"=== Serenity Code Mode ===",
-		"This session renders tools in Code Mode: direct calls to ACC tool names (cc_fs/acc_msm etc.) are rejected (UNKNOWN_TOOL).",
-		"Call them inside a single run_code program via the generated SDK bindings: `await tools.cc_fs(...)`, `await tools.acc_msm(...)`.",
+		"This session renders tools in Code Mode: direct calls to ACC tool names (container_fs/msm etc.) are rejected (UNKNOWN_TOOL).",
+		"Call them inside a single run_code program via the generated SDK bindings: `await tools.container_fs(...)`, `await tools.msm(...)`.",
 		"The program only returns what you print/return — curate your output.",
 		""
 	].join("\n");
@@ -6451,7 +5564,7 @@ function accIdentityText(root, configPaths = DEFAULT_SERENITY_CONFIG_PATHS, entr
 	}
 	return lines.join("\n");
 }
-const PLUGIN_SOURCE$1 = {
+const PLUGIN_SOURCE$2 = {
 	kind: "plugin",
 	plugin: "dsh-serenity-hooks"
 };
@@ -6468,7 +5581,7 @@ function accMessage(root, configPaths, entrySkillMaxChars) {
 	}];
 	return createUserMessage({
 		content,
-		source: PLUGIN_SOURCE$1
+		source: PLUGIN_SOURCE$2
 	});
 }
 /** 每 agent 是否已注入过（进程内存态） */
@@ -6954,7 +6067,7 @@ function registerStatusApi(ctx, opts = {}) {
 					workspace: url.searchParams.get("workspace") ?? void 0
 				});
 				const root = findSerenityRoot(workspace) ?? "";
-				const { discoverCccs } = await import("./skiff-debug-CBU6T2F_.js").then((n) => n.i);
+				const { discoverCccs } = await import("./skiff-debug-BA8CDeJl.js").then((n) => n.i);
 				sendJson$1(res, 200, { cccs: await discoverCccs(ctx, root) });
 			} catch (err) {
 				sendJson$1(res, 400, { error: err.message ?? String(err) });
@@ -7080,11 +6193,11 @@ function registerStatusApi(ctx, opts = {}) {
 						sendJson$1(res, 400, { error: chk.error });
 						return;
 					}
-					const { readWeixinSettings } = await import("./weixin-route-DFkRf9ou.js").then((n) => n.u);
+					const { readWeixinSettings } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
 					const { weixinBridgeStatus } = await Promise.resolve().then(() => weixin_bridge_exports);
 					const settings = readWeixinSettings(chk.root);
 					const bridge = weixinBridgeStatus().find((b) => b.ccc === chk.root);
-					const { readWeixinCredential } = await import("./weixin-route-DFkRf9ou.js").then((n) => n.u);
+					const { readWeixinCredential } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
 					const accounts = (settings.accounts ?? []).map((a) => ({
 						accountId: a.accountId,
 						name: a.name ?? void 0,
@@ -7116,7 +6229,7 @@ function registerStatusApi(ctx, opts = {}) {
 					const { fetchQRCode } = await import("./weixin-api-OUCuw0Ws.js").then((n) => n.l);
 					const { randomUUID } = await import("node:crypto");
 					for (const [key, v] of weixinLogins) if (Date.now() - v.startedAt > WEIXIN_LOGIN_TTL_MS) weixinLogins.delete(key);
-					const { readWeixinSettings } = await import("./weixin-route-DFkRf9ou.js").then((n) => n.u);
+					const { readWeixinSettings } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
 					const qr = await fetchQRCode({ botType: readWeixinSettings(root).botType ?? void 0 });
 					const loginKey = randomUUID();
 					weixinLogins.set(loginKey, {
@@ -7137,7 +6250,7 @@ function registerStatusApi(ctx, opts = {}) {
 						sendJson$1(res, 400, { error: "missing accountId" });
 						return;
 					}
-					const { removeWeixinAccount } = await import("./weixin-route-DFkRf9ou.js").then((n) => n.u);
+					const { removeWeixinAccount } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
 					const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 					removeWeixinAccount(root, body.accountId);
 					syncCccBridge(ctx, root);
@@ -7150,8 +6263,8 @@ function registerStatusApi(ctx, opts = {}) {
 						sendJson$1(res, 400, { error: "invalid routes (expected [{user, role}, ...])" });
 						return;
 					}
-					const { saveWeixinRoutes } = await import("./weixin-route-DFkRf9ou.js").then((n) => n.u);
-					const { readSkiffRoles } = await import("./skiff-role-BTdBHyOQ.js").then((n) => n.c);
+					const { saveWeixinRoutes } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
+					const { readSkiffRoles } = await import("./skiff-role-LW4tjF9L.js").then((n) => n.c);
 					const roles = readSkiffRoles(root);
 					for (const r of routes) if (!roles.has(r.role)) {
 						sendJson$1(res, 400, { error: `unknown role: ${r.role} (not in ${root} skiff.roles)` });
@@ -7163,7 +6276,7 @@ function registerStatusApi(ctx, opts = {}) {
 				}
 				if (body.action === "set-enabled") {
 					const enabled = body.enabled === true;
-					const { readWeixinSettings, setWeixinEnabled } = await import("./weixin-route-DFkRf9ou.js").then((n) => n.u);
+					const { readWeixinSettings, setWeixinEnabled } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
 					const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 					const settings = readWeixinSettings(root);
 					if (enabled && (settings.accounts ?? []).length === 0) {
@@ -7210,7 +6323,7 @@ function registerStatusApi(ctx, opts = {}) {
 					return;
 				}
 				const { pollQRStatus } = await import("./weixin-api-OUCuw0Ws.js").then((n) => n.l);
-				const { readWeixinSettings } = await import("./weixin-route-DFkRf9ou.js").then((n) => n.u);
+				const { readWeixinSettings } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
 				const settings = readWeixinSettings(login.root);
 				const status = await pollQRStatus({
 					baseUrl: void 0,
@@ -7225,7 +6338,7 @@ function registerStatusApi(ctx, opts = {}) {
 							});
 							return;
 						}
-						const { upsertWeixinAccount, writeWeixinCredential, nextWeixinAccountId } = await import("./weixin-route-DFkRf9ou.js").then((n) => n.u);
+						const { upsertWeixinAccount, writeWeixinCredential, nextWeixinAccountId } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
 						const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 						const accountId = nextWeixinAccountId(settings);
 						upsertWeixinAccount(login.root, {
@@ -8231,114 +7344,432 @@ function startGateway(config, getAccounts, getDshCookie) {
 		});
 		server.listen(port, host);
 	};
-	listenWithRetry();
+	listenWithRetry();
+	return {
+		server,
+		dispose: () => {
+			server.close();
+		}
+	};
+}
+/**
+* 构造 dsh browser cookie 提供者（v1.28.2 0.1.2-rc.1 BrowserAuth 适配）：
+* 经 ctx.connection（HostConnectionHandle）官方通道在内存换取 authority=127.0.0.1:<mainPort>
+* 的 cookie 并缓存（createDshCookieProvider 惰性换取）。connection 缺失（旧 dsh/非 web 装配）
+* → provider 返回 undefined → 反代不注入（旧形态无 BrowserAuth，天然兼容）。
+*
+* v1.28.2 修复：**connection 每次调用现取**（不绑定 sync 时点）——gateway sync 在 apply
+* 早期跑，此时 connection 服务可能尚未装配（web-app 的 URL 打印在其后）；首次反代请求
+* 到达时 connection 必已就绪。cachedProvider 缓存换取结果（同一 connection 实例）。
+*/
+function buildDshCookieProvider(ctx, mainPort) {
+	const authority = `127.0.0.1:${mainPort}`;
+	let cachedProvider;
+	let diagnosed = false;
+	return () => {
+		try {
+			const connection = ctx.get?.("connection");
+			if (!connection || typeof connection.authenticatedUrl !== "function" || typeof connection.authorizeIndex !== "function") {
+				if (!diagnosed) {
+					diagnosed = true;
+					console.log("[serenity-hooks] dsh browser-auth 适配: connection ✗ 不可取（不注入 dsh cookie——旧 dsh/非 web 装配兼容）");
+				}
+				return;
+			}
+			if (cachedProvider === void 0) cachedProvider = createDshCookieProvider(connection, authority);
+			const cookie = cachedProvider();
+			if (!diagnosed) {
+				diagnosed = true;
+				console.log(`[serenity-hooks] dsh browser-auth 适配: connection ✓ 可取 + cookie ${cookie === void 0 ? "✗ 换取失败（上游 401 时检查）" : "✓ 已内存换取（注入反代）"}`);
+			}
+			return cookie;
+		} catch {
+			return;
+		}
+	};
+}
+/** 注册 gateway（index.ts apply 调用）。
+* 归属原则（v1.22）：gateway 是 plugin 全局能力——enabled 开关读 DSH settings
+* （readSimpleSettings().gatewayEnabled），host/port/accounts 读 plugin 全局文件
+* （readAdvancedSettings()，~/.dsh/serenity-hooks.json）。**不依赖任何具体 CCC**。
+* 幂等 sync：仅当 配置/端口/开关 变化时重建监听器。
+* 事件驱动：config-updated（/serenity/config PUT 后 emit）+ DSH settings 变化（onChange emit）触发重新 sync。
+*/
+function registerGateway(ctx) {
+	let current = null;
+	let lastSig = null;
+	const sync = () => {
+		try {
+			const webServer = ctx.get?.("webServer");
+			if (!webServer?.port) return;
+			const enabled = readSimpleSettings().gatewayEnabled;
+			const settings = readAdvancedSettings();
+			const sig = `${enabled}|${settings.gateway.host}|${settings.gateway.port}|${settings.gateway.accounts.length}|${settings.gateway.workspaces.join(",")}|${webServer.port}`;
+			if (sig === lastSig) return;
+			lastSig = sig;
+			if (current) {
+				current.dispose();
+				current = null;
+			}
+			if (!enabled) {
+				console.log("[serenity-hooks] gateway 已停止（gatewayEnabled=false，可在 dsh 设置面板开启）");
+				return;
+			}
+			current = startGateway({
+				host: settings.gateway.host,
+				port: settings.gateway.port,
+				cookieName: "serenity_session",
+				mainPort: webServer.port,
+				loginDelayMs: 0,
+				allowWorkspaces: settings.gateway.workspaces,
+				cookieSecure: settings.gateway.cookieSecure === true,
+				allowWorkspaceCreate: settings.gateway.allowWorkspaceCreate !== false,
+				totpEnabled: settings.gateway.totpEnabled === true
+			}, () => readAdvancedSettings().gateway.accounts, buildDshCookieProvider(ctx, webServer.port));
+			const accounts = settings.gateway.accounts.length;
+			const wsNote = settings.gateway.workspaces.length === 0 ? "" : `；工作区白名单 ${settings.gateway.workspaces.length} 条`;
+			console.log(`[serenity-hooks] gateway 已启动: http://${settings.gateway.host}:${settings.gateway.port} → 127.0.0.1:${webServer.port}` + (accounts === 0 ? "（⚠️ 未配置账号，登录页将提示）" : `（${accounts} 个账号）`) + wsNote);
+		} catch (err) {
+			console.warn(`[serenity-hooks] gateway 同步失败: ${String(err?.message ?? err)}`);
+		}
+	};
+	sync();
+	ctx.on("agent/session-start", (payload) => {
+		try {
+			const cwd = payload.agent?.session?.header?.cwd;
+			if (cwd) {
+				const root = findSerenityRoot(cwd);
+				if (root && migrateLegacyLocalstore(root)) console.log(`[serenity-hooks] ✓ 已迁移 serenityAdvanced（CCC localstore → plugin 全局文件）`);
+			}
+		} catch {}
+		sync();
+	});
+	ctx.on("serenity/config-updated", () => {
+		lastSig = null;
+		sync();
+	});
+	ctx.on("serenity/settings-changed", () => {
+		sync();
+	});
+}
+//#endregion
+//#region src/rebuild.ts
+var rebuild_exports = /* @__PURE__ */ __exportAll({
+	buildRebuildAnchor: () => buildRebuildAnchor,
+	performRebuild: () => performRebuild,
+	queueRebuild: () => queueRebuild,
+	registerRebuildTurnHook: () => registerRebuildTurnHook,
+	resolveSessionMdPath: () => resolveSessionMdPath,
+	sanitizeFocusLine: () => sanitizeFocusLine,
+	stripAckSuffix: () => stripAckSuffix
+});
+const PLUGIN_SOURCE$1 = {
+	kind: "plugin",
+	plugin: "dsh-serenity-hooks"
+};
+/** acknowledge 尾句（first-anchor 的确认要求——rebuild 重建后不重走确认轮，直接继续） */
+const ACK_SUFFIX_RE = /Please simply reply "acknowledge" — no action needed\.\s*$/;
+/**
+* 剥离 first-anchor 消息的 acknowledge 尾句（rebuild 锚点保留协议正文但不要求确认回复）。
+*/
+function stripAckSuffix(text) {
+	return text.replace(ACK_SUFFIX_RE, "").trimEnd();
+}
+/**
+* 构建重建锚点消息（v1.22.4 定稿语义 + v1.22.5 保留 first-anchor 正文）：
+* 「[TRAJECTORY-REBUILD] + first-anchor 协议正文（去 acknowledge 尾句）+ 继续 {SESSION 名} 的工作」。
+* v1.29.2（R1）：可选 task focus 段——简短任务焦点文字传入重建后会话（不含历史，
+* 历史完整在 SESSION.md；让重建后的自己第一时间理解本轮焦点，降低冷启动认知成本）。
+* @param root - CCC 根
+* @param sessionName - 当前 use 的宁静号 SESSION 名（如 S142）；无激活则通用指令
+* @param activeMdPath - 持久轨迹 SESSION.md 绝对路径（保持原位）
+* @param anchorMessages - first-anchor 协议消息序列（缺省 DEFAULT_ANCHOR_MESSAGES；可注入测试）
+* @param focus - 可选任务焦点（单行化 + ≤200 字消毒；无则不输出 focus 段——向后兼容）
+*/
+function buildRebuildAnchor(root, sessionName, activeMdPath, anchorMessages = DEFAULT_ANCHOR_MESSAGES, focus) {
+	const rel = activeMdPath.startsWith(root) ? activeMdPath.slice(root.length + 1) : activeMdPath;
+	const sessionDir = basename(dirname(activeMdPath));
+	const sessionLine = sessionDir !== "AGENT_SESSIONS" ? `- Serenity session: ${sessionName !== "" ? `${sessionName} (${sessionDir})` : sessionDir}` : null;
+	const focusLine = sanitizeFocusLine(focus);
+	return [
+		`${eventToken("rebuild")} The conversation has been cleared and rebuilt (Ship of Theseus: the carrier is replaced, the trajectory continues).`,
+		"",
+		...anchorMessages.flatMap((text) => [stripAckSuffix(text), ""]),
+		sessionName !== "" ? `Continue the work of ${sessionName}.` : "Continue the current work.",
+		...sessionLine ? [sessionLine] : [],
+		`- Persistent trajectory — SESSION.md path: ${rel}`,
+		`  (the trajectory's persistent body — stays in place through rebuilds)`,
+		`- Read that SESSION.md first (goal/decisions/progress/unresolved), then continue from the last checkpoint.`,
+		...focusLine ? [`- Task focus: ${focusLine}`] : []
+	].join("\n");
+}
+/**
+* 任务焦点行消毒（纯函数可单测）：单行化（换行/回车 → 空格）+ 控制字符清除 +
+* ≤200 字截断。空/纯空白 → null（不输出 focus 段）。防 LLM 传多行注入伪造锚点结构。
+*/
+function sanitizeFocusLine(focus) {
+	if (!focus) return null;
+	const single = focus.replace(/[\r\n\t]+/g, " ").replace(/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/g, "").trim();
+	if (single === "") return null;
+	return single.length <= FOCUS_MAX_CHARS ? single : single.slice(0, FOCUS_MAX_CHARS);
+}
+/** 任务焦点最大长度（字/码点；200 足够一句话任务焦点——非历史） */
+const FOCUS_MAX_CHARS = 200;
+/** 从会话 surface 首条 user 消息（重建锚点）解析 SESSION.md 路径（events 异常/缺失时的兜底） */
+function parseAnchorMdPath(session) {
+	try {
+		const nodes = [...session.surface.nodes];
+		if (nodes.length === 0) return null;
+		const events = sessionEvents(session);
+		if (events.length === 0) return null;
+		const event = events[nodes[0]];
+		if (!event) return null;
+		const message = deriveEventMessage(event);
+		if (!message) return null;
+		const text = message.content?.map((c) => c.type === "text" ? c.text ?? "" : "").join("") ?? "";
+		return extractSessionMdPathFromText(text);
+	} catch {
+		return null;
+	}
+}
+/** 从 SESSION.md 绝对路径派生会话名（S###；issue 目录回退完整目录名） */
+function sessionNameFromMdPath(mdPath) {
+	const dirName = basename(dirname(mdPath));
+	const idMatch = dirName.match(/--S(\d{3,})--/);
+	return idMatch ? `S${idMatch[1]}` : dirName;
+}
+/**
+* 稳固的 SESSION.md 定位（多层候选 + 存在性校验，**绝不输出虚假路径**）：
+* ① 内存活跃会话（本会话显式 use 过）→ ② events 恢复（use 标记 + 重建锚点规范行，进程重启后）
+* → ③ surface 首条锚点（events 异常时兜底）→ ④ AGENT_SESSIONS 约定回退（最新未完成活动目录）。
+* 每候选 resolve 后 existsSync 校验（相对路径按 root 解析）；全部失败返回 null → 调用方报错引导。
+*/
+function resolveSessionMdPath(root, scope, session) {
+	const candidates = [];
+	candidates.push(getActiveSessionInfo(scope)?.mdPath ?? null);
+	const events = sessionEvents(session);
+	if (events.length > 0) candidates.push(parseSessionContextFromEvents(events)?.mdPath ?? null);
+	candidates.push(parseAnchorMdPath(session));
+	candidates.push(findLatestActiveSessionMd(root));
+	for (const c of candidates) {
+		if (!c) continue;
+		const abs = c.startsWith(root) ? c : resolve(root, c);
+		if (existsSync(abs)) return abs;
+	}
+	return null;
+}
+const pendingRebuilds = /* @__PURE__ */ new Map();
+/** 陈旧队列存活时长（毫秒）：超过则丢弃（turn 异常结束/agent 崩溃时防残留误清空） */
+const PENDING_TTL_MS = 6e5;
+let diagState = {
+	lastTs: "",
+	lastSessionId: "",
+	lastEvent: "",
+	queueCount: 0,
+	rebuiltCount: 0,
+	droppedCount: 0,
+	failedCount: 0
+};
+function writeRebuildDiag(root, entry) {
+	try {
+		const dir = join(root, "AGENT_SESSIONS");
+		mkdirSync(dir, { recursive: true });
+		const file = join(dir, ".rebuild-diag.json");
+		const s = diagState;
+		if (entry.event === "queued") s.queueCount += 1;
+		if (entry.event === "rebuilt") s.rebuiltCount += 1;
+		if (entry.event === "ttl-dropped") s.droppedCount += 1;
+		if (entry.event === "failed") s.failedCount += 1;
+		s.lastTs = (/* @__PURE__ */ new Date()).toISOString();
+		s.lastSessionId = entry.sessionId;
+		s.lastEvent = entry.event;
+		s.detail = entry.detail;
+		writeFileSync(file, JSON.stringify(s, null, 2) + "\n", "utf-8");
+	} catch {}
+}
+/**
+* 排队一次重建（v1.22.4 定稿语义第一步）：
+* ① 门控校验（rebuild.enabled + 会话定位）
+* ② 构建锚点（激活会话名 + 持久轨迹路径）
+* ③ 写入 pending 队列——**不立即改 surface**（等 turn-stopping 执行）
+* @returns 排队结果；rebuild.enabled=false 或非 CCC 抛错
+*/
+async function queueRebuild(ctx, opts) {
+	if (!readSimpleSettings().rebuildEnabled) throw new Error("logbook rebuild is disabled (rebuild.enabled=false — enable it in the dsh settings panel)");
+	const { root, note, summary, dshSessionId } = opts;
+	const session = ctx.sessions?.get?.(dshSessionId);
+	if (!session) throw new Error(`Unable to locate dsh session ${dshSessionId} (session may be closed)`);
+	const mdPath = resolveSessionMdPath(root, dshSessionId, session);
+	if (!mdPath) throw new Error("Unable to determine the active SESSION.md — no session context found in this conversation. Run \"logbook use <S###> --summary <内容概括 ≤20 字>\" first to activate the trajectory to resume, then retry logbook rebuild.");
+	const sessionName = getActiveSessionInfo(dshSessionId)?.sessionId ?? sessionNameFromMdPath(mdPath);
+	const focus = note && note.trim() !== "" ? note : void 0;
+	const anchor = buildRebuildAnchor(root, sessionName, mdPath, DEFAULT_ANCHOR_MESSAGES, focus);
+	const boundRec = {
+		dirName: basename(dirname(mdPath)),
+		mdPath,
+		sessionId: sessionName.startsWith("S") ? sessionName : void 0,
+		note: "rebuild queued"
+	};
+	appendBound(session, "rebuild", boundRec);
+	pendingRebuilds.set(dshSessionId, {
+		anchor,
+		summary,
+		mdPath,
+		focus,
+		queuedAt: Date.now()
+	});
+	writeRebuildDiag(root, {
+		sessionId: dshSessionId,
+		event: "queued"
+	});
 	return {
-		server,
-		dispose: () => {
-			server.close();
-		}
+		queued: true,
+		anchor,
+		sessionMdPath: mdPath
 	};
 }
 /**
-* 构造 dsh browser cookie 提供者（v1.28.2 0.1.2-rc.1 BrowserAuth 适配）：
-* 经 ctx.connection（HostConnectionHandle）官方通道在内存换取 authority=127.0.0.1:<mainPort>
-* 的 cookie 并缓存（createDshCookieProvider 惰性换取）。connection 缺失（旧 dsh/非 web 装配）
-* → provider 返回 undefined → 反代不注入（旧形态无 BrowserAuth，天然兼容）。
+* 执行真正的 surface replace（v1.22.4 定稿语义第二步，turn-stopping 时调用）：
+* 当前 turn 已完整结束（所有 tool/result 已 append）→ 全部节点替换为锚点消息。
+* 同一会话 id 原地重建——同工作区天然满足，无新/旧会话之分。
 *
-* v1.28.2 修复：**connection 每次调用现取**（不绑定 sync 时点）——gateway sync 在 apply
-* 早期跑，此时 connection 服务可能尚未装配（web-app 的 URL 打印在其后）；首次反代请求
-* 到达时 connection 必已就绪。cachedProvider 缓存换取结果（同一 connection 实例）。
+* **shadow-price 协议（v1.23.5 修复，S142 用户问询）**：DSH token-meter 的
+* `foldSurfaceProjection` 对 surface `replace` 要求**紧邻其前的 metering 事件**
+* （`compaction/summary` 或 `compaction/prune`）声明被替换范围的启发式 token 价，
+* 否则 claim 缺失 → `deltaTokens=0` → `contextBreakdown.messageTokens` 永不扣减
+* → UI「对话消息」虚高累计、往复 rebuild 计量爆炸（用户截图实证：总 15% 但
+* 对话消息 ~1M）。官方先例 = `compaction-tool-result-pruner`（append
+* `compaction/prune` → 紧接 replace）。此处同款：先 append `compaction/prune`
+* （定价全部被替换节点，经 ctx.tokenMeter.estimateMessage 逐节点累加），再
+* append 锚点 replace——meter 不可用时退化（无 claim，仅计量漂移，会话功能不受影响）。
+*
+* @returns 是否执行了 replace（false = 无 pending 或 surface 空）
 */
-function buildDshCookieProvider(ctx, mainPort) {
-	const authority = `127.0.0.1:${mainPort}`;
-	let cachedProvider;
-	let diagnosed = false;
-	return () => {
-		try {
-			const connection = ctx.get?.("connection");
-			if (!connection || typeof connection.authenticatedUrl !== "function" || typeof connection.authorizeIndex !== "function") {
-				if (!diagnosed) {
-					diagnosed = true;
-					console.log("[serenity-hooks] dsh browser-auth 适配: connection ✗ 不可取（不注入 dsh cookie——旧 dsh/非 web 装配兼容）");
-				}
-				return;
-			}
-			if (cachedProvider === void 0) cachedProvider = createDshCookieProvider(connection, authority);
-			const cookie = cachedProvider();
-			if (!diagnosed) {
-				diagnosed = true;
-				console.log(`[serenity-hooks] dsh browser-auth 适配: connection ✓ 可取 + cookie ${cookie === void 0 ? "✗ 换取失败（上游 401 时检查）" : "✓ 已内存换取（注入反代）"}`);
-			}
-			return cookie;
-		} catch {
+function performRebuild(session, pending, meter) {
+	const nodes = [...session.surface.nodes];
+	if (nodes.length === 0) return false;
+	if (meter) {
+		let shadowedTokenCount = 0;
+		const events = sessionEvents(session);
+		for (const seq of nodes) {
+			const event = events[seq];
+			if (!event) continue;
+			const message = deriveEventMessage(event);
+			if (message) shadowedTokenCount += meter.estimateMessage(message);
+		}
+		session.append("compaction/prune", {
+			shadowedRange: {
+				start: nodes[0],
+				end: nodes[nodes.length - 1]
+			},
+			shadowedSeqs: nodes,
+			shadowedTokenCount
+		});
+	}
+	session.append("user/message", {
+		content: [{
+			type: "text",
+			text: pending.anchor
+		}],
+		source: { kind: "user" }
+	}, {
+		surfaceOp: {
+			op: "replace",
+			start: nodes[0],
+			end: nodes[nodes.length - 1]
+		},
+		sourceEventSeqs: nodes
+	});
+	return true;
+}
+/**
+* 重建后重命名 dsh 会话标题（需求② S142 用户拍板：rebuild 后标题带新阶段概括）。
+* 标题 = S###-YYYY-MM-DD-<summary>——S### 与日期从持久轨迹目录名派生（不信任 LLM），
+* 概括来自 queueRebuild 的 summary 参数（服务端清洗截断）。
+* 失败仅 warn 不阻断重建主流程（标题美观非关键路径）。
+*/
+function renameAfterRebuild(ctx, agent, pending) {
+	try {
+		const mdPath = pending.mdPath;
+		const dirName = basename(dirname(mdPath));
+		const idMatch = dirName.match(/--S(\d{3,})--/);
+		const title = namingTitleFor({
+			sessionId: idMatch ? `S${idMatch[1]}` : dirName.replace(/^\d{4}-\d{2}-\d{2}--/, ""),
+			dirName,
+			mdPath
+		}, pending.summary);
+		const titles = ctx.get?.("sessionTitle");
+		if (!titles || typeof titles.rename !== "function") {
+			console.warn("[serenity-hooks] rebuild 后重命名跳过: sessionTitle 服务不可用");
 			return;
 		}
-	};
+		titles.rename(agent.session, title);
+		console.log(`[serenity-hooks] rebuild 后会话重命名: ${agent.id} → ${title}`);
+	} catch (error) {
+		console.warn(`[serenity-hooks] rebuild 后重命名失败（不阻断）: ${String(error?.message ?? error)}`);
+	}
 }
-/** 注册 gateway（index.ts apply 调用）。
-* 归属原则（v1.22）：gateway 是 plugin 全局能力——enabled 开关读 DSH settings
-* （readSimpleSettings().gatewayEnabled），host/port/accounts 读 plugin 全局文件
-* （readAdvancedSettings()，~/.dsh/serenity-hooks.json）。**不依赖任何具体 CCC**。
-* 幂等 sync：仅当 配置/端口/开关 变化时重建监听器。
-* 事件驱动：config-updated（/serenity/config PUT 后 emit）+ DSH settings 变化（onChange emit）触发重新 sync。
+/**
+* 注册 turn-stopping 钩子（index.ts apply 调用）：
+* agent 每轮 turn 结束前（serial）检查 pending 队列——有该会话的重建请求 → 执行清空
+* 并 **steer 自动继续**（v1.22.5：next-step 非空 → turn 不 break → 模型自动读取
+* SESSION.md 继续，无需用户手工输入；DSH 官方先例 hooks-claude-code Stop hook）。
+* 陈旧队列（超 TTL）丢弃防误清空；无 pending 零开销。
 */
-function registerGateway(ctx) {
-	let current = null;
-	let lastSig = null;
-	const sync = () => {
-		try {
-			const webServer = ctx.get?.("webServer");
-			if (!webServer?.port) return;
-			const enabled = readSimpleSettings().gatewayEnabled;
-			const settings = readAdvancedSettings();
-			const sig = `${enabled}|${settings.gateway.host}|${settings.gateway.port}|${settings.gateway.accounts.length}|${settings.gateway.workspaces.join(",")}|${webServer.port}`;
-			if (sig === lastSig) return;
-			lastSig = sig;
-			if (current) {
-				current.dispose();
-				current = null;
-			}
-			if (!enabled) {
-				console.log("[serenity-hooks] gateway 已停止（gatewayEnabled=false，可在 dsh 设置面板开启）");
-				return;
-			}
-			current = startGateway({
-				host: settings.gateway.host,
-				port: settings.gateway.port,
-				cookieName: "serenity_session",
-				mainPort: webServer.port,
-				loginDelayMs: 0,
-				allowWorkspaces: settings.gateway.workspaces,
-				cookieSecure: settings.gateway.cookieSecure === true,
-				allowWorkspaceCreate: settings.gateway.allowWorkspaceCreate !== false,
-				totpEnabled: settings.gateway.totpEnabled === true
-			}, () => readAdvancedSettings().gateway.accounts, buildDshCookieProvider(ctx, webServer.port));
-			const accounts = settings.gateway.accounts.length;
-			const wsNote = settings.gateway.workspaces.length === 0 ? "" : `；工作区白名单 ${settings.gateway.workspaces.length} 条`;
-			console.log(`[serenity-hooks] gateway 已启动: http://${settings.gateway.host}:${settings.gateway.port} → 127.0.0.1:${webServer.port}` + (accounts === 0 ? "（⚠️ 未配置账号，登录页将提示）" : `（${accounts} 个账号）`) + wsNote);
-		} catch (err) {
-			console.warn(`[serenity-hooks] gateway 同步失败: ${String(err?.message ?? err)}`);
+function registerRebuildTurnHook(ctx) {
+	ctx.on("agent/turn-stopping", (payload) => {
+		const agent = payload?.agent;
+		if (!agent) return;
+		const id = agent.id;
+		const pending = pendingRebuilds.get(id);
+		if (pending === void 0) return;
+		if (Date.now() - pending.queuedAt > PENDING_TTL_MS) {
+			pendingRebuilds.delete(id);
+			writeRebuildDiag(resolveSerenityRootFor(agent), {
+				sessionId: id,
+				event: "ttl-dropped",
+				detail: `queuedAt=${new Date(pending.queuedAt).toISOString()} older than ${PENDING_TTL_MS / 6e4}min TTL — turn did not end in time`
+			});
+			return;
 		}
-	};
-	sync();
-	ctx.on("agent/session-start", (payload) => {
+		pendingRebuilds.delete(id);
 		try {
-			const cwd = payload.agent?.session?.header?.cwd;
-			if (cwd) {
-				const root = findSerenityRoot(cwd);
-				if (root && migrateLegacyLocalstore(root)) console.log(`[serenity-hooks] ✓ 已迁移 serenityAdvanced（CCC localstore → plugin 全局文件）`);
-			}
-		} catch {}
-		sync();
-	});
-	ctx.on("serenity/config-updated", () => {
-		lastSig = null;
-		sync();
-	});
-	ctx.on("serenity/settings-changed", () => {
-		sync();
+			const tokenMeter = ctx.get?.("tokenMeter");
+			const meter = tokenMeter && typeof tokenMeter.estimateMessage === "function" ? { estimateMessage: (m) => tokenMeter.estimateMessage(m) } : void 0;
+			if (performRebuild(agent.session, pending, meter)) {
+				renameAfterRebuild(ctx, agent, pending);
+				agent.steer(createUserMessage({
+					content: [{
+						type: "text",
+						text: `${eventToken("rebuild")} The conversation has been cleared and rebuilt. Follow the anchor instructions above now: read the persistent trajectory (SESSION.md) and continue the work automatically from the last checkpoint.`
+					}],
+					source: PLUGIN_SOURCE$1
+				}));
+				writeRebuildDiag(resolveSerenityRootFor(agent), {
+					sessionId: id,
+					event: "rebuilt"
+				});
+				console.log(`[serenity-hooks] logbook rebuild executed with auto-continue (turn ${payload.turn ?? "?"} ended): ${id}`);
+			} else writeRebuildDiag(resolveSerenityRootFor(agent), {
+				sessionId: id,
+				event: "empty-surface"
+			});
+		} catch (error) {
+			const msg = String(error?.message ?? error);
+			writeRebuildDiag(resolveSerenityRootFor(agent), {
+				sessionId: id,
+				event: "failed",
+				detail: msg
+			});
+			console.warn(`[serenity-hooks] logbook rebuild failed: ${msg}`);
+		}
 	});
 }
+/** 从 agent 会话 cwd 解析 CCC 根（诊断落盘用）；无则回退进程 cwd */
+function resolveSerenityRootFor(agent) {
+	const cwd = agent.session?.header?.cwd;
+	return findSerenityRoot(cwd ?? process.cwd()) ?? process.cwd();
+}
 //#endregion
 //#region src/output-guard.ts
 /**
@@ -8373,7 +7804,6 @@ const MECHANISM_WORDS = [
 	"agent/turn-stopping",
 	"tools/pre-execute",
 	"tools/post-execute",
-	"session_rebuild",
 	"Trajectory Steward",
 	"TRAJECTORY-STEWARD",
 	"TRAJECTORY-ASSISTANT",
@@ -9827,13 +9257,10 @@ function apply(ctx, config) {
 		ctx.tools.register(kitTool);
 		ctx.tools.register(gitTool);
 		ctx.tools.register(msmTool);
-		ctx.tools.register(eapTool);
-		ctx.tools.register(neatTool);
-		ctx.tools.register(cceTool);
+		ctx.tools.register(praxisTool);
 		ctx.tools.register(createHandymanTool(ctx));
-		ctx.tools.register(createRebuildTool(ctx));
 		ctx.tools.register(localstoreTool);
-		ctx.tools.register(skiffAdminTool);
+		ctx.tools.register(containerAdminTool);
 		ctx.tools.register(createAutopilotTool(ctx));
 	}
 	if (config.guards) registerGuards(ctx, { configPaths: config.serenityConfigPaths });