@shgroup/dsh-serenity-hooks 1.29.2 → 1.30.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -4
- package/dsh.plugin.json +9 -12
- package/experiments/autopilot-trajectory/SKILL.md +10 -10
- package/lib/client.js +2 -2
- package/lib/fs-ops.d.ts +1 -1
- package/lib/git-ops.d.ts +1 -1
- package/lib/index.d.ts +1 -1
- package/lib/index.js +1740 -2374
- package/lib/invariant.d.ts +1 -1
- package/lib/invariant.js +7 -10
- package/lib/kit-ops.d.ts +4 -4
- package/lib/localstore-ops.d.ts +3 -3
- package/lib/msm-ops.d.ts +7 -7
- package/lib/output-guard-seam.d.ts +1 -1
- package/lib/rebuild.d.ts +2 -1
- package/lib/seams/guards.d.ts +7 -7
- package/lib/seams/keeper.d.ts +1 -1
- package/lib/seams/system-prompt.d.ts +1 -1
- package/lib/session-bound-p9oR9dj9.js +725 -0
- package/lib/session-bound.d.ts +1 -1
- package/lib/session-ops.d.ts +1 -1
- package/lib/skiff-core.d.ts +1 -1
- package/lib/{skiff-debug-CBU6T2F_.js → skiff-debug-BA8CDeJl.js} +2 -2
- package/lib/{skiff-role-BTdBHyOQ.js → skiff-role-LW4tjF9L.js} +4 -4
- package/lib/skiff-role.d.ts +2 -2
- package/lib/tools/cc-fs.d.ts +1 -1
- package/lib/tools/container-admin.d.ts +17 -0
- package/lib/tools/git.d.ts +1 -1
- package/lib/tools/kit.d.ts +1 -1
- package/lib/tools/msm.d.ts +19 -1
- package/lib/tools/praxis.d.ts +14 -0
- package/lib/tools/skiff-admin.d.ts +4 -4
- package/lib/{weixin-route-DFkRf9ou.js → weixin-route-jA0qENOf.js} +5 -5
- package/package.json +1 -1
- package/lib/tools/rebuild.d.ts +0 -19
package/lib/invariant.d.ts
CHANGED
|
@@ -26,4 +26,4 @@ export declare function readPluginManifest(manifestPath: string): PluginManifest
|
|
|
26
26
|
*/
|
|
27
27
|
export declare function verifyToolConsistency(manifestPath: string, registeredTools: readonly string[]): string[];
|
|
28
28
|
/** 包级不变量：本插件注册的工具集合（与 dsh.plugin.json contributes.tools 一致） */
|
|
29
|
-
export declare const REGISTERED_TOOLS: readonly ["
|
|
29
|
+
export declare const REGISTERED_TOOLS: readonly ["container_fs", "logbook", "dashboard", "container_git", "msm", "praxis", "handyman", "localstore", "container_admin", "autopilot-trajectory"];
|
package/lib/invariant.js
CHANGED
|
@@ -33,18 +33,15 @@ function verifyToolConsistency(manifestPath, registeredTools) {
|
|
|
33
33
|
}
|
|
34
34
|
/** 包级不变量：本插件注册的工具集合（与 dsh.plugin.json contributes.tools 一致） */
|
|
35
35
|
const REGISTERED_TOOLS = [
|
|
36
|
-
"
|
|
37
|
-
"
|
|
38
|
-
"
|
|
39
|
-
"
|
|
40
|
-
"
|
|
41
|
-
"
|
|
42
|
-
"neat",
|
|
43
|
-
"cce",
|
|
36
|
+
"container_fs",
|
|
37
|
+
"logbook",
|
|
38
|
+
"dashboard",
|
|
39
|
+
"container_git",
|
|
40
|
+
"msm",
|
|
41
|
+
"praxis",
|
|
44
42
|
"handyman",
|
|
45
|
-
"session_rebuild",
|
|
46
43
|
"localstore",
|
|
47
|
-
"
|
|
44
|
+
"container_admin",
|
|
48
45
|
"autopilot-trajectory"
|
|
49
46
|
];
|
|
50
47
|
//#endregion
|
package/lib/kit-ops.d.ts
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* kit-ops.ts — acc_kit
|
|
2
|
+
* kit-ops.ts — dashboard 纯操作层（acc_kit → dashboard，v1.30；零 DSH 依赖）
|
|
3
3
|
*
|
|
4
4
|
* 行为对齐 osp（opencode-serenity-plugin/src/acc-kit.ts）——osp 是 ACC 工具 spec：
|
|
5
5
|
* - health：{ccc, root, version, status: healthy|degraded, principles: {P1_rooted, P2_git_managed, P3_binary_permissions}}
|
|
@@ -21,7 +21,7 @@ export interface KitArgs {
|
|
|
21
21
|
}
|
|
22
22
|
/**
|
|
23
23
|
* MSM 注册表完整性检查（需求⑤c S142 用户："要有ACC层检查方法检查注册表没坏，这东西太核心了"）。
|
|
24
|
-
* 注册表坏 → loadMsmEntries JSON.parse 抛 →
|
|
24
|
+
* 注册表坏 → loadMsmEntries JSON.parse 抛 → container_admin/output-guard 全崩 +
|
|
25
25
|
* register 判重也 loadMsmEntries → **自锁无法自救**（R7）——health 必须**不因坏表抛错**，
|
|
26
26
|
* 独立解析（不依赖 loadMsmEntries）逐项检查，坏 = ok:false + issues + 修复指引。
|
|
27
27
|
*
|
|
@@ -34,8 +34,8 @@ export interface KitArgs {
|
|
|
34
34
|
* - path 根内 + 脚本存在（引用完整）
|
|
35
35
|
*
|
|
36
36
|
* 修复指引：register/deregister 每次变更精提交（只 add 注册表文件）→ 坏表可
|
|
37
|
-
* `git checkout -- <registry>` 恢复（bash 可用时 / 用户手动 /
|
|
38
|
-
*
|
|
37
|
+
* `git checkout -- <registry>` 恢复（bash 可用时 / 用户手动 / container_git 无 checkout
|
|
38
|
+
* 子命令——走 bash git restore，safe-mode 下建议用户介入）。工具只输出指引不代劳（用户拍板）。
|
|
39
39
|
*/
|
|
40
40
|
export interface RegistryHealthReport {
|
|
41
41
|
/** 聚合档路径（相对 CCC 根）；无 cccName → null */
|
package/lib/localstore-ops.d.ts
CHANGED
|
@@ -8,7 +8,7 @@
|
|
|
8
8
|
* - 配置：.opencode/serenity.json `localstore.gitTrack`: "allow"（可提交）| "deny"（禁提交）
|
|
9
9
|
* - **缺省 deny（没配就是不提交）**；且 deny 的保证**不依赖 dsh 运行**——
|
|
10
10
|
* 写入时自动确保 .gitignore 含 localstore.json（物理保证：即使 dsh 不在、
|
|
11
|
-
* 用户手动 git commit 也不会误提交），
|
|
11
|
+
* 用户手动 git commit 也不会误提交），container_git 检查为第二道防线（拒绝 + 提示）
|
|
12
12
|
* - allow：放行（文件可提交，用户自行管理 .gitignore）
|
|
13
13
|
*
|
|
14
14
|
* 存储结构（JSON 顶层分节）：
|
|
@@ -47,8 +47,8 @@ export declare function ensureLocalstoreGitignored(root: string): {
|
|
|
47
47
|
status: 'allow' | 'ignored' | 'appended';
|
|
48
48
|
};
|
|
49
49
|
/**
|
|
50
|
-
*
|
|
51
|
-
* 调用方（
|
|
50
|
+
* container_git 联动检查（第二道防线）：文件存在 && deny && .gitignore 未覆盖 → 不通过。
|
|
51
|
+
* 调用方（container_git commit）据此拒绝提交；status 可输出 warning。
|
|
52
52
|
*/
|
|
53
53
|
export declare function checkLocalstoreGitCompliance(root: string): {
|
|
54
54
|
ok: boolean;
|
package/lib/msm-ops.d.ts
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* msm-ops.ts — acc_msm
|
|
2
|
+
* msm-ops.ts — msm 纯操作层（acc_msm → msm 执行 + container_admin 管理面，v1.30；零 DSH 依赖）
|
|
3
3
|
*
|
|
4
|
-
* MSM（Mech & Semi-Mech）框架：
|
|
4
|
+
* MSM（Mech & Semi-Mech）框架：exec 执行 / register|deregister|check 管理。
|
|
5
5
|
* 复用 CCC 的 mech-registry.json（v1 或数组格式）。cwd 钉在 CCC 根。
|
|
6
6
|
*/
|
|
7
7
|
import type { JsonValue } from './json.js';
|
|
@@ -13,13 +13,13 @@ export declare const MSM_ACTIONS: readonly MsmAction[];
|
|
|
13
13
|
/**
|
|
14
14
|
* ACC 能力目录（需求④ S142 用户拍板："acc 配置各自做 guide 越来越多，整合成目录式使用指南"）。
|
|
15
15
|
* 目录在前、详情各归各——**单一真相源**：本目录只索引"去哪个工具/子命令看详情"，不复制详情
|
|
16
|
-
* （避免
|
|
16
|
+
* （避免 container_admin/weixin-doctor 等 guide 全文重复 → 多真相源 → 失同步）。
|
|
17
17
|
* 后续新增功能只需在此加一行（低熵可演进）。
|
|
18
18
|
*/
|
|
19
|
-
export declare const ACC_CATALOG = "\u2550\u2550\u2550 ACC Usage Catalog \u2550\u2550\u2550\nDirectory of ACC capabilities \u2014 each area lists where to go for details (guides live with their feature; this catalog only points).\n\n \u2460 \u4F1A\u8BDD\u4E0E\u8F68\u8FF9 \u2192
|
|
20
|
-
export declare const MSM_GUIDE = "MSM Development Manual (Mech & Semi-Mech framework)\n\n## What it is\nMSM = the executable-unit layer. Mech is pure TS with zero LLM reasoning; Semi-Mech is a TS framework + LLM decision points.\nMSM is ACC's deterministic executable-unit layer \u2014 all shell/exec operations go through MSM and cannot be bypassed.\n\n## Registering a new MSM (
|
|
19
|
+
export declare const ACC_CATALOG = "\u2550\u2550\u2550 ACC Usage Catalog \u2550\u2550\u2550\nDirectory of ACC capabilities \u2014 each area lists where to go for details (guides live with their feature; this catalog only points).\n\n \u2460 \u4F1A\u8BDD\u4E0E\u8F68\u8FF9 \u2192 logbook\uFF08list/show/create/use/close/health/qa/archive/summary/hook-develop-guide + rebuild \u8D85\u9650\u91CD\u5EFA\uFF09\n session_rebuild \u5DF2\u5E76\u5165 logbook rebuild\uFF08\u8D85\u9650\u91CD\u5EFA\uFF1B\u9608\u503C K \u89C1 container_admin ccc-config / \u8BBE\u7F6E\u9762\u677F\u91CD\u5EFA\u9608\u503CK\uFF09\n \u2461 \u8BA4\u77E5\u8D28\u91CF\u6846\u67B6 \u2192 praxis\uFF08eap/neat/cce \u4E09\u5408\u4E00\u2014\u2014\u53EF\u5B9E\u8DF5\u7406\u8BBA\u6CE8\u5165\uFF0Csection \u6E10\u8FDB\u62AB\u9732\uFF0C\u65E0\u53C2\u5373\u76EE\u5F55\uFF09\n \u2462 \u5DE5\u5177\u4E0E\u6267\u884C \u2192 container_fs\uFF08\u5BB9\u5668\u6587\u4EF6\u7CFB\u7EDF 15 \u5B50\u547D\u4EE4\uFF09/ container_git\uFF08git\uFF09/ dashboard\uFF08health \u542B\u6CE8\u518C\u8868\u68C0\u67E5/time/wait\uFF09\n acc_msm \u5DF2\u5E76\u5165 msm\uFF08\u6267\u884C+\u53D1\u73B0\uFF09\u4E0E container_admin\uFF08\u7BA1\u7406\uFF09\u2014\u2014msm(\"<name>\", [\"<args>\"])\uFF1Binspect=true \u67E5\u7528\u6CD5\n handyman\uFF08\u6742\u5DE5 agent \u7F16\u6392\u2014\u2014guide \u5B50\u547D\u4EE4\uFF1Ahandyman guide\uFF09\n \u2463 \u89D2\u8272\u4E0E\u5BF9\u5916\u9762 \u2192 container_admin role\uFF08Skiff \u8BA4\u77E5\u5B50\u96C6\u89D2\u8272\uFF1Aguide/validate/apply/list\u2014\u2014skiff_admin \u5DF2\u5E76\u5165\uFF09\n ACP\uFF08\u7A0B\u5E8F\u5316 JSON-RPC 3100\uFF09/ Skiff \u95EE\u7B54\u9875\uFF08\u516C\u7F51 ask\uFF09\u2014\u2014\u9762\u677F\u300C\u5916\u90E8\u80FD\u529B\u300D\u7EC4\n \u2464 \u81EA\u4E3B\u4E0E\u63A5\u5165 \u2192 autopilot-trajectory\uFF08Autopilot \u4E00\u7AD9\u5F0F\uFF1Aall/init/random/diag/doc/check/status/guide\uFF09\n weixin \u5FAE\u4FE1\u6865\uFF08\u914D\u7F6E/\u626B\u7801/\u8DEF\u7531/\u6D88\u606F hook\u2014\u2014CCC \u4FA7 weixin-doctor MSM\uFF1Amsm(\"weixin-doctor\", [\"guide\"])\uFF09\n \u2465 CCC \u914D\u7F6E\u603B\u89C8 \u2192 container_admin msm ccc-config\uFF088 \u6BB5\uFF1Ahandyman/sessionKeeper/localstore/hooks/safeMode/skiff/autopilotTrajectory/weixin\uFF09\n \u2466 \u6CE8\u518C\u8868\u4E0E\u5B89\u5168 \u2192 mech-registry.json \u7531 container_admin msm register/deregister \u7BA1\u7406\uFF08\u5199\u4FDD\u62A4\u2014\u2014\u4E0D\u53EF\u76F4\u63A5\u7F16\u8F91\uFF09\n dashboard health \u8F93\u51FA registry \u5B8C\u6574\u6027\u68C0\u67E5\uFF1B\u635F\u574F\u6062\u590D\u6307\u5F15\u89C1 health registry.issues\n\n\u6BCF\u533A\uFF1A\u4E00\u53E5\u8BDD\u5B9A\u4F4D + \u8BE6\u7EC6\u5165\u53E3\uFF08\u5DE5\u5177\u540D / guide \u5B50\u547D\u4EE4\uFF09\u3002\u8BE6\u60C5\u6C38\u8FDC\u4EE5\u5BF9\u5E94\u5DE5\u5177\u7684 guide/ccc-config \u4E3A\u5355\u4E00\u771F\u76F8\u6E90\u3002\n";
|
|
20
|
+
export declare const MSM_GUIDE = "MSM Development Manual (Mech & Semi-Mech framework)\n\n## What it is\nMSM = the executable-unit layer. Mech is pure TS with zero LLM reasoning; Semi-Mech is a TS framework + LLM decision points.\nMSM is ACC's deterministic executable-unit layer \u2014 all shell/exec operations go through MSM and cannot be bypassed.\n\n## Registering a new MSM (container_admin msm register)\n1. Write the script under <skill>/scripts/ (runnable via tsx; must include a main() CLI guard with an import.meta.url check)\n2. container_admin msm register --domain msm --action register <name> --skill <s> --path <script path relative to root> --category <mech|semi-mech> --description <desc>\n3. Auto-writes mech-registry.json (preserving the original format) + git commit (commits only the registry file)\n4. Validation: path must be inside root, script must exist, name must be globally unique\n\n## flag schema (v1)\nflags is a new-style object array for parameter validation and path-escape guarding:\n [{\"name\":\"output\",\"type\":\"string\",\"description\":\"output path\"},\n {\"name\":\"target\",\"type\":\"path\",\"description\":\"operation target (type:path enables in-root validation + symlink defense)\"},\n {\"name\":\"force\",\"type\":\"boolean\",\"description\":\"force mode\",\"default\":false}]\n- {name, type} format \u2014 new style, type:\"path\" enables the path-escape guard\n- {flag, description} format \u2014 old style, CLI flag description string\n- On registration, flags are passed via container_admin msm register --flags '<json>'\n\n## Script conventions\n- Top-of-file documentation: purpose / usage / exit codes\n- Exit codes: 0 success / 1 user / 2 system / 3 operator (per ACC protocol classification)\n- main() CLI guard (DC-M2): the script must start with\n if (import.meta.url === `file://${process.argv[1]}`) { main() }\n or an equivalent isMain / require.main === check \u2014 so vitest imports never trigger top-level code\n- A paired .test.ts or .spec.ts (DC-M1, vitest)\n- Business subprocess environment: SERENITY_ROOT / SERENITY_CCC / SERENITY_VERSION injected\n\n## Interaction & confirmation conventions (no blocking confirmation)\n- MSMs run in **user-less subprocesses** (spawn/execFile, 600s timeout) \u2014 **never** use\n readline / prompt / process.stdin etc. to block waiting for user input (it would hang until killed by the timeout)\n- When a second confirmation is needed: **directly return the confirmation request** (list the operation to perform and its impact + how to retry with the confirmation flag),\n returning a non-zero exit code (or an explicit hint)\n- After the agent confirms, **re-invoke the MSM with the confirmation flag** (e.g. --confirm / --yes / --force) to retry\n- Standard mode (two-phase):\n 1. First call: destructive/confirmation-requiring operation detected and no confirmation flag present \u2192 output the confirmation request (list operation/impact/rollback),\n exit non-zero (e.g. 1 user), **perform no changes**\n 2. After the agent evaluates, re-invoke: with the confirmation flag \u2192 execute and output the result\n- Applies to: delete/overwrite/push/batch operations and other irreversible or wide-impact operations\n- Anti-example (forbidden): readline waiting for user input, process.stdin.on('data') blocking waits\n (MSMs have no stdin interaction channel \u2014 they hang until the 600s timeout)\n\n## Quality checks (container_admin msm check, DC-M1~M4)\nDC-M1 has .test.ts/.spec.ts; DC-M2 has a main() guard (function main( / isMain / require.main === / import.meta.url);\nDC-M3 bidirectional: scripts unregistered + registry references missing scripts; DC-M4 path-type flags marked type:\"path\"\n\n## Self-description (protocol flags, first argument only)\nmsm(\"<name>\", [\"--list\"]) \u2014 list all MSMs\nmsm(\"<name>\", [\"--schema\", \"<n>\"]) \u2014 view a specific MSM's parameter schema\nmsm(\"<name>\", [\"--format=json\"]) \u2014 JSON output mode (remaining args passed through losslessly)\n";
|
|
21
21
|
/** CCC 配置参考（对齐 osp ccc-config action） */
|
|
22
|
-
export declare const CCC_CONFIG_REFERENCE = "\u2550\u2550\u2550 CCC Configuration Reference \u2550\u2550\u2550\n\nCCC-level features are configured in .opencode/serenity.json.\nBelow are all available configuration sections.\n\n\u2500\u2500 1. handyman.models \u2500\u2500\nhandyman\uFF08\u6742\u5DE5\uFF09\u5DE5\u5177\u53EF\u7528\u6A21\u578B\u767D\u540D\u5355\uFF08provider/model \u5217\u8868\uFF09\uFF1B\u672A\u914D\u7F6E\u65F6 handyman \u62A5\u9519\u8981\u6C42\u914D\u7F6E\u3002\n\u7F3A\u7701\u6A21\u578B = models[0]\uFF08\u53EF\u7528 handyman.defaultModel \u6307\u5B9A\uFF0C\u5FC5\u987B \u2208 models\uFF09\u3002\n\n Config:\n { \"handyman\": { \"models\": [\"provider/model-name\"] } }\n\n Example:\n { \"handyman\": { \"models\": [\"minimax-cn-coding-plan/MiniMax-M3\"], \"defaultModel\": \"minimax-cn-coding-plan/MiniMax-M3\", \"maxRounds\": 100, \"maxParallel\": 10 } }\n\n\u2500\u2500 2. sessionKeeper.threshold \u2500\u2500\ntrajectory-assistant\uFF08TRAJECTORY-ASSISTANT \u00B7 CHECKPOINT\uFF09\u63D0\u9192\u673A\u5236\u7684\u79EF\u5206\u9608\u503C\uFF08\u975E headless \u4E3B agent\uFF09\u3002\n\u6309\u5DE5\u5177\u8C03\u7528\u52A0\u6743 + \u8017\u65F6\u8BA1\u5206\uFF1B\u8FBE\u5230\u9608\u503C\u6CE8\u5165\u63D0\u9192\uFF0C\u8981\u6C42\u6A21\u578B\u56DE\u590D ACK \u7801\u3002\n\n Config:\n { \"sessionKeeper\": { \"threshold\": 150 } }\n\n \u8BA1\u5206\uFF1Awrite/edit = 3\uFF0Ctask = 10\uFF0Cread/grep/glob/msm \u7B49 = 1\uFF0C\u65F6\u95F4 = 1/\u5206\u949F\n \u9ED8\u8BA4\uFF1A150\n\n\u2500\u2500 3. localstore.gitTrack \u2500\u2500\nlocalstore.json \u7684 git \u7B56\u7565\uFF1Aallow \u53EF\u63D0\u4EA4 / deny \u7981\u63D0\u4EA4\uFF08\u9ED8\u8BA4 deny\uFF09\u3002\ndeny \u65F6\u5199\u5165\u81EA\u52A8\u786E\u4FDD .gitignore \u542B\u8BE5\u6587\u4EF6\uFF08\u7269\u7406\u4FDD\u8BC1\uFF09\
|
|
22
|
+
export declare const CCC_CONFIG_REFERENCE = "\u2550\u2550\u2550 CCC Configuration Reference \u2550\u2550\u2550\n\nCCC-level features are configured in .opencode/serenity.json.\nBelow are all available configuration sections.\n\n\u2500\u2500 1. handyman.models \u2500\u2500\nhandyman\uFF08\u6742\u5DE5\uFF09\u5DE5\u5177\u53EF\u7528\u6A21\u578B\u767D\u540D\u5355\uFF08provider/model \u5217\u8868\uFF09\uFF1B\u672A\u914D\u7F6E\u65F6 handyman \u62A5\u9519\u8981\u6C42\u914D\u7F6E\u3002\n\u7F3A\u7701\u6A21\u578B = models[0]\uFF08\u53EF\u7528 handyman.defaultModel \u6307\u5B9A\uFF0C\u5FC5\u987B \u2208 models\uFF09\u3002\n\n Config:\n { \"handyman\": { \"models\": [\"provider/model-name\"] } }\n\n Example:\n { \"handyman\": { \"models\": [\"minimax-cn-coding-plan/MiniMax-M3\"], \"defaultModel\": \"minimax-cn-coding-plan/MiniMax-M3\", \"maxRounds\": 100, \"maxParallel\": 10 } }\n\n\u2500\u2500 2. sessionKeeper.threshold \u2500\u2500\ntrajectory-assistant\uFF08TRAJECTORY-ASSISTANT \u00B7 CHECKPOINT\uFF09\u63D0\u9192\u673A\u5236\u7684\u79EF\u5206\u9608\u503C\uFF08\u975E headless \u4E3B agent\uFF09\u3002\n\u6309\u5DE5\u5177\u8C03\u7528\u52A0\u6743 + \u8017\u65F6\u8BA1\u5206\uFF1B\u8FBE\u5230\u9608\u503C\u6CE8\u5165\u63D0\u9192\uFF0C\u8981\u6C42\u6A21\u578B\u56DE\u590D ACK \u7801\u3002\n\n Config:\n { \"sessionKeeper\": { \"threshold\": 150 } }\n\n \u8BA1\u5206\uFF1Awrite/edit = 3\uFF0Ctask = 10\uFF0Cread/grep/glob/msm \u7B49 = 1\uFF0C\u65F6\u95F4 = 1/\u5206\u949F\n \u9ED8\u8BA4\uFF1A150\n\n\u2500\u2500 3. localstore.gitTrack \u2500\u2500\nlocalstore.json \u7684 git \u7B56\u7565\uFF1Aallow \u53EF\u63D0\u4EA4 / deny \u7981\u63D0\u4EA4\uFF08\u9ED8\u8BA4 deny\uFF09\u3002\ndeny \u65F6\u5199\u5165\u81EA\u52A8\u786E\u4FDD .gitignore \u542B\u8BE5\u6587\u4EF6\uFF08\u7269\u7406\u4FDD\u8BC1\uFF09\uFF0Ccontainer_git commit \u4F1A\u68C0\u67E5\u62D2\u7EDD\u3002\n\n Config:\n { \"localstore\": { \"gitTrack\": \"allow\" } }\n\n\u2500\u2500 4. hooks.autoRestoreSession \u2500\u2500\n\u4F1A\u8BDD\u81EA\u52A8\u6062\u590D\uFF08\u9ED8\u8BA4 true\uFF1B\u53D7 events \u95E8\u63A7\u2014\u2014\u4EC5\u6839\u4F1A\u8BDD + \u5DF2\u6709\u5BF9\u8BDD\u5386\u53F2\u624D\u6062\u590D\uFF09\u3002\n\n Config:\n { \"hooks\": { \"autoRestoreSession\": false } }\n\n\u2500\u2500 5. safeMode / blacklist \u2500\u2500\nsafe-mode \u7531 WebUI \u5F00\u5173\u63A7\u5236\uFF08\u5199 .serenity-safe-on \u6807\u8BB0\uFF09\uFF1B\u9ED1\u540D\u5355\u8DEF\u5F84\u53D7 guards seam \u62E6\u622A\u3002\n\n Config:\n { \"safeMode\": { \"blacklist\": [\".secrets/\"] } }\n\n\u2500\u2500 6. skiff.roles\uFF08F4 \u8BA4\u77E5\u5B50\u96C6\u89D2\u8272\uFF09\u2500\u2500\nSkiff \u89D2\u8272 = \u5168\u77E5\u5168\u80FD trajectory \u7684\u4EFB\u610F\u5B50\u96C6\uFF08CCC \u5B9A\u4E49\uFF09\u3002\u6BCF\u89D2\u8272\u72EC\u7ACB\u6A21\u578B + \u53CC\u767D\u540D\u5355\n\uFF08MSM \u767D\u540D\u5355 msms[] \u4E0E\u975E MSM \u5DE5\u5177\u767D\u540D\u5355 tools[]\uFF0C\u767D\u540D\u5355\u5916\u5168\u9690\u85CF\uFF1Bskill \u52A0\u8F7D\u6052\u53EF\u7528\uFF09\u3002\ntrajectory \u7EAA\u5F8B\u5B50\u96C6\uFF08session/keeper/rebuild \u53C2\u4E0E\u9879\uFF09\u9ED8\u8BA4\u5168\u5173 = \u5B8C\u5168\u72EC\u7ACB\u3002\nsystemPrompt \u5185\u8054 \u6216 systemPromptFile\uFF08.md \u5F15\u7528\uFF0C\u63A8\u8350\uFF09\u2014\u2014\u89D2\u8272\u4F1A\u8BDD\u7684\u5B8C\u6574\u4EBA\u683C/\u8FB9\u754C\u63D0\u793A\u8BCD\u3002\nvalidate \u6821\u9A8C / apply \u751F\u6548 / list \u67E5\u770B\uFF1Acontainer_admin role <guide|validate|apply|list>\uFF08skiff_admin \u5DF2\u5E76\u5165\uFF09\u3002\n\n Config:\n { \"skiff\": { \"roles\": {\n \"qa\": {\n \"model\": \"provider/model\",\n \"msms\": [\"web-search\", \"vlm-describe\"],\n \"tools\": [\"read\", \"grep\", \"glob\"],\n \"systemPromptFile\": \".opencode/skiff/qa.md\"\n } } } }\n\n\u2500\u2500 7. autopilotTrajectory\uFF08\u81EA\u52A8\u5DE1\u822A\u8F68\u8FF9\uFF09\u2500\u2500\nCCC \u5B9A\u4E49\u7684\u4E00\u6761\u81EA\u4E3B trajectory\u2014\u2014\u65F6\u949F\u5230\u70B9\u81EA\u52A8\u5524\u8D77\uFF08\u524D\u53F0\u6CE8\u5165\uFF0C\u7528\u6237\u53EF\u89C1\u53EF\u4ECB\u5165\uFF09\u3002\n\u672A\u914D\u7F6E\u6216 enabled=false \u2192 \u5B8C\u5168\u4E0D\u542F\u52A8\uFF08\u96F6\u8D44\u6E90\u5360\u7528\uFF09\u3002\u591A CCC \u72EC\u7ACB\uFF1A\u6BCF CCC \u81EA\u5DF1\u7684\u914D\u7F6E\u3002\n\u5524\u8D77\u6D88\u606F\u56DB\u6BB5\u5F0F\uFF1A\u8F68\u8FF9\u7126\u70B9 topPrompt\uFF08\u6700\u5148\u6CE8\u5165\uFF0C\u7A33\u5B9A\u951A\uFF09\u2192 \u8EAB\u4EFD\u951A\u5B9A \u2192 \u5148\u9A8C\u504F\u89C1\n\uFF08CCC \u6839\u811A\u672C biasProvider \u8F93\u51FA\uFF09\u2192 \u4EFB\u52A1\u3002\u76EE\u6807\u4F1A\u8BDD session \u5FC5\u586B\uFF08\u76EE\u5F55\u987B\u5E26 --auto \u540E\u7F00\uFF09\u3002\n\u8BCA\u65AD/\u72B6\u6001/\u7ACB\u5373\u5524\u8D77\uFF1Aautopilot-trajectory <all|check|status|diag>\uFF08msm(\"autopilot-trajectory\", [\"all\"])\uFF09\u3002\n\n Config:\n { \"autopilotTrajectory\": {\n \"enabled\": true,\n \"intervalHours\": 2,\n \"session\": \"S151\",\n \"biasProvider\": \"autopilot-bias.ts\",\n \"topPrompt\": \"\u672C\u8F68\u8FF9\u6838\u5FC3\u76EE\u6807/\u7EAA\u5F8B/\u8D28\u91CF\u8981\u6C42\uFF08CCC \u81EA\u586B\uFF0C\u9632\u6F02\u79FB\uFF09\",\n \"avoidWakeHours\": { \"start\": 8, \"end\": 18 }\n } }\n\n\u2500\u2500 8. weixin\uFF08\u5FAE\u4FE1\u6865 F4c-3\uFF0C\u542B\u6D88\u606F\u8BB0\u5F55 hook\uFF09\u2500\u2500\nCCC \u7EA7\u5FAE\u4FE1\u4E2A\u4EBA\u53F7\u63A5\u5165\uFF08iLink \u534F\u8BAE\uFF09\uFF1Adsh \u4E00\u8FDB\u7A0B\u591A CCC\uFF0C\u6BCF CCC \u72EC\u7ACB\u5BF9\u63A5\u5FAE\u4FE1\u6865\u3002\n\u8D26\u53F7/\u8DEF\u7531/\u5F00\u5173\u5728\u6B64\u6587\u4EF6\uFF1B**bot_token \u51ED\u636E\u5728 CCC localstore credential scope**\n\uFF08\u626B\u7801\u7ED1\u5B9A\u540E\u81EA\u52A8\u5199\u5165\uFF0C\u6C38\u4E0D\u8FDB git \u660E\u6587\u9762\uFF09\u3002\n\u8DEF\u7531 user \u2192 role\uFF1Aexact \u4F18\u5148\uFF0C* \u901A\u914D\u515C\u5E95\uFF1Brole \u5FC5\u987B \u2208 \u8BE5 CCC skiff.roles\u3002\n\u9762\u677F\uFF08WebUI \u8BBE\u7F6E \u2192 \u5FAE\u4FE1\u6865\uFF09\u53EF\u626B\u7801\u7ED1\u5B9A/\u79FB\u9664\u8D26\u53F7/\u7F16\u8F91\u8DEF\u7531\uFF1Bmsm(\"weixin-doctor\", [\"status\"|\"diag\"|\"verify\"]) \u6392\u67E5\u3002\u51ED\u636E\u4E3B\u52A8\u67E5\u770B\uFF1Alocalstore get WEIXIN_<ACCOUNT>_TOKEN\u3002\n\n Config:\n { \"weixin\": {\n \"enabled\": true,\n \"hook\": \"scripts/weixin-message-hook.ts\",\n \"accounts\": [{ \"accountId\": \"wechat-1\", \"name\": \"\u5BB6\u5EAD\u52A9\u624B\", \"enabled\": true }],\n \"routes\": [{ \"user\": \"*\", \"role\": \"zhaocai\" }]\n } }\n\n \u25B8 weixin.hook\uFF08\u6D88\u606F\u8BB0\u5F55 hook\uFF0Cv1.27.13\uFF09\uFF1A\n \u5FAE\u4FE1\u6865\u6BCF\u6536/\u53D1\u4E00\u6761\u6D88\u606F\u89E6\u53D1\u4E00\u6B21 CCC \u81EA\u5199\u811A\u672C\uFF0C\u7531 CCC \u81EA\u884C\u6301\u4E45\u5316\u4FDD\u5B58\uFF08\u5B58\u54EA/\u5B58\u6210\u4EC0\u4E48\n /\u662F\u5426\u5165\u5E93\u5168\u5F52 CCC\u2014\u2014ACC \u4E0D\u7ED1\u5B9A\u5B58\u50A8\uFF09\u3002\u672A\u914D\u7F6E hook \u2192 \u96F6\u53D8\u5316\uFF08\u4E0D\u89E6\u53D1\uFF09\u3002\n\n \u89E6\u53D1\uFF08\u53CC\u5411\uFF09\uFF1A\n incoming = \u7528\u6237 \u2192 bot\uFF1A\u8DEF\u7531\u547D\u4E2D\u540E\u3001\u5A92\u4F53\u843D\u76D8\u540E\u89E6\u53D1\uFF08\u6587\u672C\u542B\u8BED\u97F3\u8F6C\u5199\uFF1B\u5A92\u4F53\u5E26\u843D\u76D8 relPath\uFF09\n outgoing = bot \u2192 \u7528\u6237\uFF1A\u56DE\u590D\u53D1\u9001\u6210\u529F\u540E\u89E6\u53D1\uFF08reply = \u7528\u6237\u5B9E\u9645\u6536\u5230\u7684\u7EAF\u6587\u672C\uFF0C\u5DF2\u5265\u79BB think\uFF09\n\n \u811A\u672C\u7EA6\u5B9A\uFF08\u4E8B\u4EF6 JSON \u5355\u884C\u7ECF stdin \u4F20\u5165\uFF1Bbun \u4F18\u5148 node \u515C\u5E95\uFF09\uFF1A\n #!/usr/bin/env bun \u6216 node script.js \u2014\u2014 \u8BFB process.stdin \u6574\u6BB5 JSON.parse\n const ev = JSON.parse(await new Response(process.stdin).text())\n ev.event === 'incoming' | 'outgoing'\n\n \u4E8B\u4EF6 schema\uFF08**\u4E0D\u542B\u4EFB\u4F55\u4F1A\u8BDD\u51ED\u636E**\u2014\u2014context_token/bot_token/token/aes_key \u5747\u4E0D\u51FA\u73B0\uFF09\uFF1A\n { \"event\": \"incoming\", \"ts\": 1788359941488, \"cccRoot\": \"/path/ccc\",\n \"accountId\": \"wechat-1\", \"userId\": \"u1@im.wechat\",\n \"sessionId\": \"skiff-weixin-xxx\", \"role\": \"zhaocai\",\n \"message\": { \"text\": \"\u4F60\u597D\", \"media\": [{ \"kind\": \"image\", \"relPath\": \"_tmp/weixin-inbound/<hash>/img_x.jpg\" }] } }\n { \"event\": \"outgoing\", \"ts\": ..., \"cccRoot\": ..., \"accountId\": ...,\n \"userId\": ..., \"sessionId\": ..., \"role\": ...,\n \"reply\": \"\u5DF2\u8BB0\u5F55\uFF08\u7EAF\u6587\u672C\uFF09\" }\n\n \u793A\u4F8B\u811A\u672C\uFF08\u8FFD\u52A0\u5230\u6309\u65E5\u6587\u4EF6\u2014\u2014\u6301\u4E45\u5316\u5F52 CCC \u81EA\u9009\uFF1A\u6587\u4EF6/DB/\u8FDC\u7AEF\u5747\u53EF\uFF09\uFF1A\n const fs = require('node:fs'); const p = '/path/ccc/AGENT_SESSIONS/_weixin-log.jsonl';\n fs.appendFileSync(p, JSON.stringify(ev) + '\\n');\n\n \u6267\u884C\u8BED\u4E49\uFF08\u65C1\u8DEF\u5BB9\u5FCD\uFF09\uFF1A\u5F02\u6B65 fire-and-forget + 15s \u8D85\u65F6 kill + \u5931\u8D25\u4EC5\u65E5\u5FD7\u2014\u2014\n \u5FAE\u4FE1\u6865\u6D88\u606F\u5904\u7406/\u56DE\u590D\u4E0D\u53D7 hook \u5F71\u54CD\uFF1B\u811A\u672C\u987B\u5728 CCC \u6839\u5185\uFF08\u8DEF\u5F84\u9003\u9038\u62D2\u7EDD\uFF09\u3002\n \u5A92\u4F53 relPath \u6307\u5411 _tmp/weixin-inbound/\uFF08\u4E34\u65F6\u76EE\u5F55\uFF09\u2014\u2014\u9700\u6301\u4E45\u4FDD\u5B58\u5A92\u4F53\u6587\u4EF6\u8BF7\u81EA\u884C copy\u3002\n";
|
|
23
23
|
export interface MsmFlag {
|
|
24
24
|
name: string;
|
|
25
25
|
type?: string;
|
|
@@ -46,7 +46,7 @@ export interface MsmArgs {
|
|
|
46
46
|
description?: string;
|
|
47
47
|
/** register: flags JSON 字符串（对齐 osp --flags 入参；如 '[{"name":"hook","type":"string",...}]'） */
|
|
48
48
|
flags?: string;
|
|
49
|
-
/** register: 自定义 usage（缺省 '
|
|
49
|
+
/** register: 自定义 usage（缺省 'msm <name> [args...]'） */
|
|
50
50
|
usage?: string;
|
|
51
51
|
}
|
|
52
52
|
export declare function parseRegistry(raw: string): MsmEntry[];
|
|
@@ -8,7 +8,7 @@
|
|
|
8
8
|
* 作用范围（v1.26.3 用户拍板）：**仅外部面**——skiff/ACP/问答页等对外输出会话
|
|
9
9
|
* （session id `skiff-`/`acp-`/`rebuild-` 前缀；v1.22.4 rebuild 新建会话同面）。
|
|
10
10
|
* **本地维护会话（普通 dsh 会话）不检测**——维护会话必然提及机制词
|
|
11
|
-
* （dsh-serenity-hooks/
|
|
11
|
+
* （dsh-serenity-hooks/logbook rebuild/mech-registry），打回会瘫痪自身工作。
|
|
12
12
|
*/
|
|
13
13
|
import type { Context } from 'cordis';
|
|
14
14
|
/** 外部面会话判定（v1.26.3 用户拍板：仅外部面检测，本地维护会话豁免）：
|
package/lib/rebuild.d.ts
CHANGED
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* rebuild.ts — 轨迹跟踪器（Trajectory Tracker）超限重建：
|
|
2
|
+
* rebuild.ts — 轨迹跟踪器（Trajectory Tracker）超限重建：logbook rebuild
|
|
3
|
+
* （v1.30 起并入 logbook 的 rebuild action；原独立 session_rebuild 工具）
|
|
3
4
|
*
|
|
4
5
|
* 概念（S142 用户拍板命名，v1.22.1 语义修正；v1.22.4 定稿语义）：
|
|
5
6
|
* **SESSION.md = 持久 agent（轨迹）**——身份/决策/进度/未解决问题的本体，
|
package/lib/seams/guards.d.ts
CHANGED
|
@@ -16,14 +16,14 @@ export interface GuardInput {
|
|
|
16
16
|
blacklist: BlacklistRule[];
|
|
17
17
|
/** 工具参数中可能携带的路径（write/edit 等）；无则 undefined */
|
|
18
18
|
pathArg?: string;
|
|
19
|
-
/**
|
|
19
|
+
/** container_fs 等复合工具的子命令 action（只读子命令不查黑名单） */
|
|
20
20
|
action?: string;
|
|
21
21
|
/** 当前 agent 的 dsh 会话 id（Skiff 角色白名单判定；非 skiff 会话不判定） */
|
|
22
22
|
skiffSessionId?: string;
|
|
23
23
|
}
|
|
24
24
|
/**
|
|
25
25
|
* 凭据文件硬名单（数据面守卫，v1.26.3，S142 用户：localstore.json 需要在 read 工具的黑名单里）：
|
|
26
|
-
* **任何工具**（含 read/grep/glob/
|
|
26
|
+
* **任何工具**（含 read/grep/glob/container_fs 只读子命令）命中这些相对 CCC 根的路径 → deny。
|
|
27
27
|
*
|
|
28
28
|
* 与 safeMode.blacklist（写黑名单，v1.18.5 决策只拦写）语义独立：
|
|
29
29
|
* - 黑名单 = 用户可配置的写保护（REPOSITORIES/ 等只读参考源不误伤读）
|
|
@@ -34,7 +34,7 @@ export interface GuardInput {
|
|
|
34
34
|
export declare const SENSITIVE_CREDENTIAL_FILES: Set<string>;
|
|
35
35
|
/**
|
|
36
36
|
* MSM 注册表写保护（需求⑤b S142 用户拍板："msm注册的文件需要写保护起来，避免CCC意外写坏搞崩自己"）：
|
|
37
|
-
* mech-registry.json 是 CCC 执行层地基（坏 → loadMsmEntries 抛 →
|
|
37
|
+
* mech-registry.json 是 CCC 执行层地基（坏 → loadMsmEntries 抛 → container_admin/output-guard 全崩，
|
|
38
38
|
* register 也崩 → 自锁）。**写 deny、读 allow**（与 localstore 读 deny 语义区分 R6——注册表是
|
|
39
39
|
* 结构核心不是秘密，需被 output-guard/skiff-admin 读取建 MSM 词表）。
|
|
40
40
|
*
|
|
@@ -42,13 +42,13 @@ export declare const SENSITIVE_CREDENTIAL_FILES: Set<string>;
|
|
|
42
42
|
* `.opencode/skills/<cccName>/references/mech-registry.json`（cccName = .serenity 首行）。
|
|
43
43
|
* 历史 root 级 `mech-registry.json` 与各 skill 分散注册表已废弃：**不再保护**
|
|
44
44
|
* （review P1：保护一个永不被读的文件 = 死锁——MSM 既不可见又不可删/迁移）。
|
|
45
|
-
* 写工具命中聚合档 → deny（唯一合法写通道 =
|
|
46
|
-
*
|
|
45
|
+
* 写工具命中聚合档 → deny（唯一合法写通道 = container_admin msm register/deregister
|
|
46
|
+
* 内部 writeRegistry，走工具实现不经 pre-execute → 天然豁免）；读工具放行。
|
|
47
47
|
*/
|
|
48
48
|
export declare function isProtectedRegistryRel(root: string, rel: string): boolean;
|
|
49
|
-
/** 判定工具是否为读类（read/grep/glob +
|
|
49
|
+
/** 判定工具是否为读类（read/grep/glob + container_fs 只读子命令）：凭据文件对读工具同样 deny */
|
|
50
50
|
export declare function isReadTool(toolName: string, action?: string): boolean;
|
|
51
|
-
/** 判定工具是否为写类：普通工具按名；
|
|
51
|
+
/** 判定工具是否为写类：普通工具按名；container_fs 复合工具按子命令 action */
|
|
52
52
|
export declare function isWriteTool(toolName: string, action?: string): boolean;
|
|
53
53
|
export interface GuardDecisionResult {
|
|
54
54
|
deny?: string;
|
package/lib/seams/keeper.d.ts
CHANGED
|
@@ -36,7 +36,7 @@ export declare function reminderText(code: string, score: number): string;
|
|
|
36
36
|
* 简短留自由度（不提"加载 eap 工具"，模型自知；只说修订 skill + 新建 skill 落 SESSION）。
|
|
37
37
|
*
|
|
38
38
|
* escalated=true（v1.23.3）：连续多轮超阈值仍未 rebuild → 升级强制语气
|
|
39
|
-
* （STOP and rebuild now，持续注入直到调用
|
|
39
|
+
* （STOP and rebuild now，持续注入直到调用 logbook rebuild）。
|
|
40
40
|
*
|
|
41
41
|
* 需求①（S142 用户拍板）：百分比比例 → K 数值——tokensK = 实际占用（千 token），
|
|
42
42
|
* thresholdK = 配置阈值（千 token）；文案 `Context usage at NNNK (threshold NNNK)`。
|
|
@@ -32,7 +32,7 @@ export declare function identityBlock(root: string): string;
|
|
|
32
32
|
* 原 accBlock 内嵌 13 行工具清单 → 独立成块放装配末尾（SKILL 后、Session 前）。
|
|
33
33
|
* 身份先行（认知轨迹开头不被 13 行清单干扰）、工具参考殿后（需要时再看）。
|
|
34
34
|
* 附带 MSM 调用示例（用户拍板：顶层提示词加调用方式说明，避免偶发调用错误——
|
|
35
|
-
* 模型对
|
|
35
|
+
* 模型对 msm 参数面/协议 flag 理解不稳）。
|
|
36
36
|
*/
|
|
37
37
|
export declare function toolsBlock(): string;
|
|
38
38
|
/** 2) CCE 块：逐字对齐 osp（CCE 5 行为约束 + H_op 操作熵） */
|