@shgroup/dsh-serenity-hooks 1.30.12 → 1.30.14

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-serenity-hooks",
-  "version": "1.30.12",
+  "version": "1.30.14",
   "main": "lib/index.js",
   "description": "宁静号 ACC harness（Native Cordis 插件）：给 DSH 装一个「AI 工作区」——10 个工具（container_fs/logbook/dashboard/container_git/msm/praxis/handyman/localstore/container_admin/autopilot-trajectory）+ 机械约束（安全模式/工作区围墙/密钥守卫）+ 工作日志与原地重建 + 网页登录入口/微信桥/子角色/对外问答页/自主巡航。适配 DSH 0.1.2-rc.1（deepseek-ai/deepseek-harness）。",
   "engines": {

package/lib/index.js

@@ -1,10 +1,10 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
 import { a as findSerenityRoot, c as matchBlacklist, d as readCccName$2, f as readHandymanConfig, i as findGitRoot, l as pathInside, m as resolveInside, n as SAFE_MODE_MARKER, o as isSafeModeOn, r as classifyPath, s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS, u as readBlacklist } from "./ccc-DAsSHsub.js";
 import { a as resolveRoleSystemPrompt, i as readSkiffRoles, l as systemPromptSource, r as isSkiffSessionId, s as roleToolWhitelist } from "./skiff-role-DlrbHPLD.js";
-import { C as newStopToken, D as writeFailedStatus, E as splitModel, O as writeProgress, S as listActiveHandymen, T as requireWhitelistedModel, _ as workspaceTrajectoryLine, a as startSkiffDebugServer, b as buildRoundPrompt, c as askSkiff, d as getSkiffAgent, f as skiffMsmGate, g as unregisterSkiffSession, h as skiffTrajectoryEnabled, k as skiffRoleFor, l as createSkiffAgent, m as skiffSessionSnapshot, n as jscSafeJsonText, o as stopSkiffDebugServer, p as skiffSessionInfo, r as renderSkiffMarkdown, s as stripThink, t as discoverCccs, u as ensureSkiffSession, v as waitAgentIdle, w as readProgress, x as handymanProgressPaths, y as HANDYMAN_GUIDE } from "./skiff-debug-CizJBLeZ.js";
+import { A as skiffRoleFor, C as listActiveHandymen, D as splitModel, E as requireWhitelistedModel, O as writeFailedStatus, S as handymanProgressPaths, T as readProgress, _ as unregisterSkiffSession, a as startSkiffDebugServer, b as HANDYMAN_GUIDE, c as askSkiff, d as ensureWorkspacePromptSection, f as getSkiffAgent, g as skiffTrajectoryEnabled, h as skiffSessionSnapshot, k as writeProgress, l as createSkiffAgent, m as skiffSessionInfo, n as jscSafeJsonText, o as stopSkiffDebugServer, p as skiffMsmGate, r as renderSkiffMarkdown, s as stripThink, t as discoverCccs, u as ensureSkiffSession, v as workspaceTrajectoryLine, w as newStopToken, x as buildRoundPrompt, y as waitAgentIdle } from "./skiff-debug-DYXDdzu3.js";
 import { i as hostSessions, n as hostInjected, o as hostWeb, r as hostService, s as hostWebServer, t as hostAgents } from "./access-dU_vG1q8.js";
 import { a as readWeixinCredential, c as weixinInboundDir, d as LOCALSTORE_SCOPES, f as checkLocalstoreGitCompliance, h as runLocalStore, i as matchWeixinRoute, l as weixinSessionIdFor, m as readGitTrack, n as extractWeixinText, o as readWeixinSettings, p as localstorePath, r as hasVoiceItem, s as sanitizeFileName$1, t as extractWeixinMedia } from "./weixin-route-BD_yYAZz.js";
-import { C as summarize, S as showSession, _ as readActiveSessionMd, a as archiveSessions, b as sessionsRoot, c as createSession, d as findSession, f as getActiveSessionInfo, g as qaCheck, h as parseSessionContextFromEvents, i as SESSION_ACTIONS, l as extractSessionMdPathFromText, m as listSessions, n as readLastBound, o as clearActiveSessionInfo, p as healthCheck, r as DEFAULT_SESSION_SCOPE, s as closeSession, t as appendBound, u as findLatestActiveSessionMd, v as resolveSessionByTitle, w as useSession, x as setActiveSessionInfo, y as sessionEvents } from "./session-bound-D2ANqVn-.js";
+import { C as useSession, S as summarize, _ as resolveSessionByTitle, a as archiveSessions, b as setActiveSessionInfo, c as createSession, d as getActiveSessionInfo, f as healthCheck, g as readActiveSessionMd, h as qaCheck, i as SESSION_ACTIONS, l as extractSessionMdPathFromText, m as parseSessionContextFromEvents, n as readLastBound, o as clearActiveSessionInfo, p as listSessions, r as DEFAULT_SESSION_SCOPE, s as closeSession, t as appendBound, u as findSession, v as sessionEvents, x as showSession, y as sessionsRoot } from "./session-bound-BpTayaIS.js";
 import { n as registerSettingsSection, t as readSimpleSettings } from "./settings-section-CP4uMJf_.js";
 import { a as markdownToPlainText, c as sniffImageExt, i as getUpdates, n as downloadMedia, o as sendTextMessage, r as getConfig, s as sendTyping, t as TypingStatus } from "./weixin-api-BMpljodH.js";
 import z from "@deepseek-ai/schemastery";
@@ -6478,7 +6478,7 @@ function registerStatusApi(ctx, opts = {}) {
 					workspace: url.searchParams.get("workspace") ?? void 0
 				});
 				const root = findSerenityRoot(workspace) ?? "";
-				const { discoverCccs } = await import("./skiff-debug-CizJBLeZ.js").then((n) => n.i);
+				const { discoverCccs } = await import("./skiff-debug-DYXDdzu3.js").then((n) => n.i);
 				sendJson$2(res, 200, { cccs: await discoverCccs(ctx, root) });
 			} catch (err) {
 				sendJson$2(res, 400, { error: err.message ?? String(err) });
@@ -7962,7 +7962,17 @@ function sessionNameFromMdPath(mdPath) {
 /**
 * 稳固的 SESSION.md 定位（多层候选 + 存在性校验，**绝不输出虚假路径**）：
 * ① 内存活跃会话（本会话显式 use 过）→ ② events 恢复（use 标记 + 重建锚点规范行，进程重启后）
-* → ③ surface 首条锚点（events 异常时兜底）→ ④ AGENT_SESSIONS 约定回退（最新未完成活动目录）。
+* → ②b **权威绑定**（`AGENT_SESSIONS/.bindings.json`，本会话持久绑定）→ ③ surface 首条锚点
+* （events 异常时兜底）。
+*
+* v1.30.13（S142 用户"微信桥 + skiff 会话锚定要准确"，诊断 D4）：**移除**原 ④「全局最新未完成
+* 会话」（`findLatestActiveSessionMd`）。理由（R↓）：④ 是**跨轨迹**猜测——候选①②③全空时，
+* 它会把 rebuild 静默接到 AGENT_SESSIONS 里最新的另一个会话（临时 skiff 会话 persistent=false、
+* 重启后首条消息前、Danica 新会话都命中该形态），而"接错轨迹"比重建失败危险得多
+* （错误轨迹被继续写入 + 正确轨迹静默丢失）。现在全部候选失败 → 返回 null → 调用方
+* 报错引导用户显式 `logbook use`（响亮失败优于静默接错）。
+* 备选：④ 仅在"同 scope 确无绑定"时兜底——同样会接错轨迹，故不采纳。
+*
 * 每候选 resolve 后 existsSync 校验（相对路径按 root 解析）；全部失败返回 null → 调用方报错引导。
 */
 function resolveSessionMdPath(root, scope, session) {
@@ -7970,8 +7980,8 @@ function resolveSessionMdPath(root, scope, session) {
 	candidates.push(getActiveSessionInfo(scope)?.mdPath ?? null);
 	const events = sessionEvents(session);
 	if (events.length > 0) candidates.push(parseSessionContextFromEvents(events)?.mdPath ?? null);
+	candidates.push(readLastBound(session)?.mdPath ?? null);
 	candidates.push(parseAnchorMdPath(session));
-	candidates.push(findLatestActiveSessionMd(root));
 	for (const c of candidates) {
 		if (!c) continue;
 		const abs = c.startsWith(root) ? c : resolve(root, c);
@@ -8021,7 +8031,7 @@ async function queueRebuild(ctx, opts) {
 	const session = ctx.sessions?.get?.(dshSessionId);
 	if (!session) throw new Error(`Unable to locate dsh session ${dshSessionId} (session may be closed)`);
 	const mdPath = resolveSessionMdPath(root, dshSessionId, session);
-	if (!mdPath) throw new Error("Unable to determine the active SESSION.md — no session context found in this conversation. Run \"logbook use <S###> --summary <内容概括 ≤20 字>\" first to activate the trajectory to resume, then retry logbook rebuild.");
+	if (!mdPath) throw new Error("Unable to determine the active SESSION.md for this session — checked (in order): in-memory activation (logbook use in this process), [SESSION CONTEXT] events in this conversation, AGENT_SESSIONS/.bindings.json (authoritative binding), rebuild anchor in the surface. None matched an existing SESSION.md. Run \"logbook use <S###> --summary <内容概括 ≤20 字>\" to bind this conversation to a trajectory, then retry logbook rebuild. (No global fallback is applied on purpose — guessing could resume a different trajectory.)");
 	const sessionName = getActiveSessionInfo(dshSessionId)?.sessionId ?? sessionNameFromMdPath(mdPath);
 	const focus = note && note.trim() !== "" ? note : void 0;
 	const anchor = buildRebuildAnchor(root, sessionName, mdPath, DEFAULT_ANCHOR_MESSAGES, focus);
@@ -9548,7 +9558,9 @@ async function handleIncoming(ctx, root, accountId, cred, msg) {
 			}
 			const parts = [];
 			const activeWorkspace = getActiveSessionInfo(sessionId);
-			if (activeWorkspace?.mdPath) parts.push(workspaceTrajectoryLine(activeWorkspace.mdPath));
+			if (activeWorkspace?.mdPath) {
+				if (!ensureWorkspacePromptSection(ref.agent, sessionId)) parts.push(workspaceTrajectoryLine(activeWorkspace.mdPath));
+			}
 			const manualOutput = settings.autoReplyWithLastMessage === false;
 			if (manualOutput) parts.push(weixinManualOutputLine(root, accountId, fromUserId));
 			if (text) parts.push(text);
@@ -9885,7 +9897,7 @@ function matchCcc(input, candidates) {
 }
 /** 组装候选列表（discoverCccs 投影 + `.serenity` 名；动态 import 保持本模块静态依赖轻量） */
 async function collectCandidates(ctx) {
-	const { discoverCccs } = await import("./skiff-debug-CizJBLeZ.js").then((n) => n.i);
+	const { discoverCccs } = await import("./skiff-debug-DYXDdzu3.js").then((n) => n.i);
 	const entries = await discoverCccs(ctx, process.cwd());
 	const seen = /* @__PURE__ */ new Set();
 	const out = [];
@@ -10444,33 +10456,100 @@ function apply(ctx, config) {
 * F4 Skiff 调试服务装配：启停 = 人工（设置面板 Skiff 区块开关，settings 持久化）。
 * settings-changed 事件触发同步（skiffEnabled 开 → 启动调试服务；关 → 停止）。
 * 角色配置（skiff.roles）从当前 CCC 根读取（进程 cwd 优先，live 会话兜底）。
+*
+* v1.30.13（S142 诊断 D1）：**CCC root 解析失败要重试**。旧实现只在 apply 时同步一次——
+* 此刻通常还没有 live 会话，进程 cwd（服务启动目录）也不在 CCC 内 → `resolveSkiffRoot`
+* 返回 null → 打印一行警告后**永不重试**（实证：重启日志
+* `✗ Skiff 调试服务未启动：无法定位 CCC root`，`ss -ltn` 无 3099；同批 ACP 因容忍
+* `root ?? undefined` 而正常启动）。现形态三层触发（用户"锚定要准确"同源要求）：
+*   ① 启动时同步一次 ② 定位失败 → 定时退避重试（1s/3s/8s/20s/40s，共 5 次）
+*   ③ 首个 live 会话就绪（`agent/session-start` / `session/created`）→ 立即再试一次。
+*
+* v1.30.14（重启日志实证后的收敛）：**并发启动守卫** + 首次未定位降级为信息级日志。
+*  - 实证（v1.30.13 重启日志）：重试定时器与"会话就绪"事件几乎同时触发 → 两次 sync 都
+*    看到 `started === false` → **两次 start**（第一次绑定成功、第二次 `EADDRINUSE` 刷错误日志）。
+*    → 加 `starting` 在飞标志（启动 Promise settle 前不再重复发起）。
+*  - 首次未定位**不是失败**（apply 时无 live 会话是常态）→ 用 `console.log` 说明"等待 live 会话"，
+*    只有**退避重试耗尽**才 `console.warn` 报错（失败语义只留给真正失败）。
 */
 function registerSkiff(ctx) {
 	let started = false;
-	const sync = () => {
+	let starting = false;
+	let retryTimer = null;
+	let retries = 0;
+	let informedRoot = false;
+	const clearRetry = () => {
+		if (retryTimer !== null) {
+			clearTimeout(retryTimer);
+			retryTimer = null;
+		}
+	};
+	/** 退避重试定位 CCC root（幂等：已有待执行重试则不再排） */
+	const scheduleRootRetry = () => {
+		if (retryTimer !== null || started || starting) return;
+		if (retries >= SKIFF_ROOT_RETRY_DELAYS_MS.length) {
+			console.warn(`[serenity-hooks] ✗ Skiff 调试服务未启动：重试 ${retries} 次仍无法定位 CCC root（进程 cwd 与 live 会话均无 .serenity）`);
+			return;
+		}
+		const delay = SKIFF_ROOT_RETRY_DELAYS_MS[retries] ?? 0;
+		retryTimer = setTimeout(() => {
+			retryTimer = null;
+			retries += 1;
+			sync();
+		}, delay);
+		retryTimer.unref?.();
+	};
+	function sync() {
 		const s = readSimpleSettings();
-		if (s.skiffEnabled && !started) {
+		if (s.skiffEnabled && !started && !starting) {
 			const root = resolveSkiffRoot(ctx);
 			if (!root) {
-				console.warn("[serenity-hooks] ✗ Skiff 调试服务未启动：无法定位 CCC root（进程 cwd 与 live 会话均无 .serenity）");
+				if (!informedRoot) {
+					informedRoot = true;
+					console.log("[serenity-hooks] Skiff 调试服务等待 CCC root（此刻无 live 会话；已排入退避重试，会话就绪即试）");
+				}
+				scheduleRootRetry();
 				return;
 			}
+			clearRetry();
 			const webPort = readWebPort(ctx);
+			starting = true;
 			startSkiffDebugServer(ctx, root, s.skiffDebugPort, webPort).then(() => {
 				started = true;
+				if (retries > 0) console.info(`[serenity-hooks] ✓ Skiff 调试服务已启动（重试 ${retries} 次后定位到 CCC root: ${root}）`);
 			}).catch((err) => {
 				console.error(`[serenity-hooks] ✗ Skiff 调试服务启动失败: ${String(err?.message ?? err)}`);
+			}).finally(() => {
+				starting = false;
 			});
 		} else if (!s.skiffEnabled && started) {
 			stopSkiffDebugServer();
 			started = false;
+		} else if (!s.skiffEnabled) {
+			clearRetry();
+			retries = 0;
+			informedRoot = false;
 		}
-	};
+	}
 	try {
 		ctx.on("serenity/settings-changed", sync);
 	} catch {}
+	for (const eventName of ["agent/session-start", "session/created"]) try {
+		ctx.on(eventName, () => {
+			if (!started) sync();
+		});
+	} catch {}
 	sync();
-}
+	registerDisposer(ctx, "skiff root retry timer", clearRetry);
+}
+/** Skiff 调试服务 CCC root 退避重试间隔（毫秒；累计 ~72s 后放弃并响亮告警） */
+const SKIFF_ROOT_RETRY_DELAYS_MS = [
+	1e3,
+	3e3,
+	8e3,
+	2e4,
+	4e4
+];
 /**
 * 解析 Skiff 调试服务绑定的 CCC 根（v1.25.2 用户指出：skiff 必须绑定 CCC）：
 * ① live 会话中**配置了 skiff.roles 的 CCC 优先**（用户认知中的绑定目标）

package/lib/rebuild.d.ts

@@ -71,7 +71,17 @@ export interface RebuildResult {
 /**
  * 稳固的 SESSION.md 定位（多层候选 + 存在性校验，**绝不输出虚假路径**）：
  * ① 内存活跃会话（本会话显式 use 过）→ ② events 恢复（use 标记 + 重建锚点规范行，进程重启后）
- * → ③ surface 首条锚点（events 异常时兜底）→ ④ AGENT_SESSIONS 约定回退（最新未完成活动目录）。
+ * → ②b **权威绑定**（`AGENT_SESSIONS/.bindings.json`，本会话持久绑定）→ ③ surface 首条锚点
+ * （events 异常时兜底）。
+ *
+ * v1.30.13（S142 用户"微信桥 + skiff 会话锚定要准确"，诊断 D4）：**移除**原 ④「全局最新未完成
+ * 会话」（`findLatestActiveSessionMd`）。理由（R↓）：④ 是**跨轨迹**猜测——候选①②③全空时，
+ * 它会把 rebuild 静默接到 AGENT_SESSIONS 里最新的另一个会话（临时 skiff 会话 persistent=false、
+ * 重启后首条消息前、Danica 新会话都命中该形态），而"接错轨迹"比重建失败危险得多
+ * （错误轨迹被继续写入 + 正确轨迹静默丢失）。现在全部候选失败 → 返回 null → 调用方
+ * 报错引导用户显式 `logbook use`（响亮失败优于静默接错）。
+ * 备选：④ 仅在"同 scope 确无绑定"时兜底——同样会接错轨迹，故不采纳。
+ *
  * 每候选 resolve 后 existsSync 校验（相对路径按 root 解析）；全部失败返回 null → 调用方报错引导。
  */
 export declare function resolveSessionMdPath(root: string, scope: string, session: Session): string | null;

package/lib/{session-bound-D2ANqVn-.js → session-bound-BpTayaIS.js}

@@ -412,19 +412,6 @@ function resolveSessionByTitle(title, sessionsDir) {
 	if (fuzzy.length === 1) return join(fuzzy[0].path, SESSION_MD);
 	return null;
 }
-/**
-* 约定回退（v1.24.11）：AGENT_SESSIONS 下最新修改的**未完成**会话的 SESSION.md。
-* readAllSessions 已按「未完成优先 + mtime 降序」排序 → 首个未完成且含 SESSION.md 即最新活动。
-* 只作最后手段（内存/events/锚点全缺时），保证重建锚点至少指向一个真实存在的轨迹。
-*/
-function findLatestActiveSessionMd(root) {
-	for (const s of readAllSessions(sessionsRoot(root))) {
-		if (s.status.completed) continue;
-		const md = join(s.path, SESSION_MD);
-		if (existsSync(md)) return md;
-	}
-	return null;
-}
 /** health 子命令（对齐 osp healthCheck：stale/stalled/ghost/drift 四类检查，文本输出） */
 function healthCheck(root) {
 	const sessions = readAllSessions(sessionsRoot(root));
@@ -776,4 +763,4 @@ function appendBound(session, action, rec) {
 	}
 }
 //#endregion
-export { summarize as C, showSession as S, readActiveSessionMd as _, archiveSessions as a, sessionsRoot as b, createSession as c, findSession as d, getActiveSessionInfo as f, qaCheck as g, parseSessionContextFromEvents as h, SESSION_ACTIONS as i, extractSessionMdPathFromText as l, listSessions as m, readLastBound as n, clearActiveSessionInfo as o, healthCheck as p, DEFAULT_SESSION_SCOPE as r, closeSession as s, appendBound as t, findLatestActiveSessionMd as u, resolveSessionByTitle as v, useSession as w, setActiveSessionInfo as x, sessionEvents as y };
+export { useSession as C, summarize as S, resolveSessionByTitle as _, archiveSessions as a, setActiveSessionInfo as b, createSession as c, getActiveSessionInfo as d, healthCheck as f, readActiveSessionMd as g, qaCheck as h, SESSION_ACTIONS as i, extractSessionMdPathFromText as l, parseSessionContextFromEvents as m, readLastBound as n, clearActiveSessionInfo as o, listSessions as p, DEFAULT_SESSION_SCOPE as r, closeSession as s, appendBound as t, findSession as u, sessionEvents as v, showSession as x, sessionsRoot as y };

package/lib/skiff-core.d.ts

@@ -31,10 +31,36 @@ export declare function skiffSessionSnapshot(): ReadonlyMap<string, {
  * 系统提示词中的**工作台纪律块**（v1.30.4 升级：从单行路径 → 完整 ACC 层约束）。
  * 用户点破（S142）：只给路径 LLM 不会主动用——需注入「已绑定 + 使用纪律 + 动作指引」。
  * SESSION = 工作台——skiff 与主舱同一套机制（零特调，用户拍板）：
- * 自动绑定已生效（无需 logbook use）、SESSION.md 是持久记忆载体（write/edit 维护）、
- * rebuild 自动从本 SESSION 续接。注入 agent 系统提示词（用户对话面不可见）。
+ * 自动绑定已生效（无需 logbook use）、SESSION.md 是持久记忆载体、rebuild 自动从本 SESSION 续接。
+ * 注入 agent 系统提示词（用户对话面不可见）。
+ *
+ * v1.30.13（S142 诊断 D5）：写入纪律**不点名具体工具**。旧文案写死 "with write/edit"，
+ * 而 zhaocai 角色的工具白名单已移除 write/edit（写能力收归 CCC 的 session-write MSM）
+ * → 指令指向它根本没有的工具（注入纪律与能力面矛盾，模型只能猜）。
+ * 现文案改为「用本角色被授权的写入通道」——ACC 只声明义务（写进工作台），
+ * 具体通道由 CCC 的角色配置与角色提示词决定（ACC/CCC 归属二分；也不把某个 CCC 的
+ * MSM 名硬编码进 ACC 源码）。
  */
 export declare function workspaceTrajectoryLine(mdPath: string): string;
+/**
+ * 把**工作台纪律块**挂到 agent 的系统提示词段（单一真相源，v1.30.13 用户需求）。
+ *
+ * 用户原话（S142，2026-09-08）："微信桥的注入机制，每个用户消息都会注入，skiff 本身也会注入，
+ * 这样就重复，能否微信桥情况下，注入内容直接取 skiff 的，这样不用配两遍"。
+ *
+ * 现状（改前）：`createSkiffAgent` 把 `workspaceTrajectoryLine(mdPath)` 塞进基础段
+ * （创建时一次快照），微信桥又**每条消息**把同一文本拼进 question（v1.30.4 为覆盖
+ * "live/existing 快路径不重挂提示词"而加）→ 新建 agent 首轮起即重复，且每轮重复付 token。
+ *
+ * 现形态（单一注入点）：工作台行**只**经本函数挂系统提示词段（name `serenity-skiff-workspace`，
+ * 动态 `text()` 每轮按 scope 读当前活跃 mdPath → 绑定变化自动跟随，无需重挂）：
+ *  - `createSkiffAgent` 调它（不再把工作台行拼进基础段）；
+ *  - 微信桥对 live/existing agent 调它（不再拼 question）。
+ *
+ * @returns true = 段已在位（本次注册成功或此前已注册）；false = 该 agent 无法挂系统提示词段
+ *   （宿主 systemPrompt 缺失/注册抛错）→ 调用方降级为 question 前缀注入（约束必须在场）
+ */
+export declare function ensureWorkspacePromptSection(agent: Agent, scope: string): boolean;
 /**
  * 确保启用 session 能力的 skiff 会话拥有**专属 SESSION**（工作台）：
  * 懒绑定 + 幂等（per skiff 会话 scope 隔离——微信多用户各自独立，永不共享同一份）。

package/lib/{skiff-debug-CizJBLeZ.js → skiff-debug-DYXDdzu3.js}

@@ -2,7 +2,7 @@ import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
 import { a as findSerenityRoot, f as readHandymanConfig } from "./ccc-DAsSHsub.js";
 import { a as resolveRoleSystemPrompt, i as readSkiffRoles, n as buildSkiffBasePrompt, o as roleMsmWhitelist, r as isSkiffSessionId, u as trajectorySubset } from "./skiff-role-DlrbHPLD.js";
 import { i as hostSessions, r as hostService, t as hostAgents } from "./access-dU_vG1q8.js";
-import { c as createSession, f as getActiveSessionInfo, n as readLastBound, t as appendBound, x as setActiveSessionInfo } from "./session-bound-D2ANqVn-.js";
+import { b as setActiveSessionInfo, c as createSession, d as getActiveSessionInfo, n as readLastBound, t as appendBound } from "./session-bound-BpTayaIS.js";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { basename, join } from "node:path";
 import { createUserMessage } from "@deepseek-ai/dsh-llm";
@@ -293,8 +293,15 @@ const AUTO_BOUND_NOTE_PREFIX = "auto-created for skiff role";
 * 系统提示词中的**工作台纪律块**（v1.30.4 升级：从单行路径 → 完整 ACC 层约束）。
 * 用户点破（S142）：只给路径 LLM 不会主动用——需注入「已绑定 + 使用纪律 + 动作指引」。
 * SESSION = 工作台——skiff 与主舱同一套机制（零特调，用户拍板）：
-* 自动绑定已生效（无需 logbook use）、SESSION.md 是持久记忆载体（write/edit 维护）、
-* rebuild 自动从本 SESSION 续接。注入 agent 系统提示词（用户对话面不可见）。
+* 自动绑定已生效（无需 logbook use）、SESSION.md 是持久记忆载体、rebuild 自动从本 SESSION 续接。
+* 注入 agent 系统提示词（用户对话面不可见）。
+*
+* v1.30.13（S142 诊断 D5）：写入纪律**不点名具体工具**。旧文案写死 "with write/edit"，
+* 而 zhaocai 角色的工具白名单已移除 write/edit（写能力收归 CCC 的 session-write MSM）
+* → 指令指向它根本没有的工具（注入纪律与能力面矛盾，模型只能猜）。
+* 现文案改为「用本角色被授权的写入通道」——ACC 只声明义务（写进工作台），
+* 具体通道由 CCC 的角色配置与角色提示词决定（ACC/CCC 归属二分；也不把某个 CCC 的
+* MSM 名硬编码进 ACC 源码）。
 */
 function workspaceTrajectoryLine(mdPath) {
 	return [
@@ -305,8 +312,10 @@ function workspaceTrajectoryLine(mdPath) {
 		"Rules of the workspace:",
 		"  1. This SESSION.md is your persistent memory carrier (like the main cabin SESSION) — ",
 		"     read it first when context feels thin or work spans turns.",
-		"  2. Record key decisions/progress/unresolved items INTO this SESSION.md with write/edit",
-		"     (sections: 目标 / 状态 / 关键决策 / 进度记录 / 未解决的问题). Keep it current — it is",
+		"  2. Record key decisions/progress/unresolved items INTO this SESSION.md using the write channel",
+		"     your role is actually granted (use whatever write tool or MSM this role has — never assume",
+		"     a specific write tool exists; if none is granted, report that instead of pretending to write).",
+		"     Sections: 目标 / 状态 / 关键决策 / 进度记录 / 未解决的问题. Keep it current — it is",
 		"     what a rebuild resumes from.",
 		"  3. When context pressure is high, run logbook rebuild — it auto-resumes from THIS SESSION.md",
 		"     (no manual use; do not switch to or read other SESSIONs unless the user explicitly asks).",
@@ -315,6 +324,50 @@ function workspaceTrajectoryLine(mdPath) {
 	].join("\n");
 }
 /**
+* 已挂工作台提示词段的 agent（幂等：同一 agent 只注册一次，避免 duplicate section）。
+* WeakSet → agent 被回收即自动清理，无泄漏。
+*/
+const workspaceSectionAgents = /* @__PURE__ */ new WeakSet();
+/**
+* 把**工作台纪律块**挂到 agent 的系统提示词段（单一真相源，v1.30.13 用户需求）。
+*
+* 用户原话（S142，2026-09-08）："微信桥的注入机制，每个用户消息都会注入，skiff 本身也会注入，
+* 这样就重复，能否微信桥情况下，注入内容直接取 skiff 的，这样不用配两遍"。
+*
+* 现状（改前）：`createSkiffAgent` 把 `workspaceTrajectoryLine(mdPath)` 塞进基础段
+* （创建时一次快照），微信桥又**每条消息**把同一文本拼进 question（v1.30.4 为覆盖
+* "live/existing 快路径不重挂提示词"而加）→ 新建 agent 首轮起即重复，且每轮重复付 token。
+*
+* 现形态（单一注入点）：工作台行**只**经本函数挂系统提示词段（name `serenity-skiff-workspace`，
+* 动态 `text()` 每轮按 scope 读当前活跃 mdPath → 绑定变化自动跟随，无需重挂）：
+*  - `createSkiffAgent` 调它（不再把工作台行拼进基础段）；
+*  - 微信桥对 live/existing agent 调它（不再拼 question）。
+*
+* @returns true = 段已在位（本次注册成功或此前已注册）；false = 该 agent 无法挂系统提示词段
+*   （宿主 systemPrompt 缺失/注册抛错）→ 调用方降级为 question 前缀注入（约束必须在场）
+*/
+function ensureWorkspacePromptSection(agent, scope) {
+	if (!agent || typeof agent !== "object") return false;
+	if (workspaceSectionAgents.has(agent)) return true;
+	const api = agent.ctx?.systemPrompt;
+	if (typeof api?.section !== "function") return false;
+	try {
+		api.section({
+			name: "serenity-skiff-workspace",
+			order: -55,
+			text: () => {
+				const mdPath = getActiveSessionInfo(scope)?.mdPath;
+				return mdPath ? workspaceTrajectoryLine(mdPath) : "";
+			}
+		});
+		workspaceSectionAgents.add(agent);
+		return true;
+	} catch (err) {
+		console.warn(`[serenity-hooks] skiff 工作台提示词段注册失败（回退 question 注入）: ${String(err?.message ?? err)}`);
+		return false;
+	}
+}
+/**
 * 确保启用 session 能力的 skiff 会话拥有**专属 SESSION**（工作台）：
 * 懒绑定 + 幂等（per skiff 会话 scope 隔离——微信多用户各自独立，永不共享同一份）。
 *
@@ -421,15 +474,12 @@ async function createSkiffAgent(ctx, root, roleName, role, defaultModel, session
 		agent.ctx.systemPrompt.section({
 			name: "serenity-skiff",
 			order: -60,
-			text: () => [
-				buildSkiffBasePrompt(roleName, role),
-				workspaceMdPath ? workspaceTrajectoryLine(workspaceMdPath) : "",
-				cccPrompt
-			].filter(Boolean).join("\n")
+			text: () => [buildSkiffBasePrompt(roleName, role), cccPrompt].filter(Boolean).join("\n")
 		});
 	} catch (err) {
 		console.warn(`[serenity-hooks] skiff 系统提示词注册失败: ${String(err?.message ?? err)}`);
 	}
+	if (workspaceMdPath) ensureWorkspacePromptSection(agent, id);
 	registerSkiffSession(id, roleName, root, agent);
 	return {
 		handle,
@@ -2793,4 +2843,4 @@ async function handle(ctx, defaultRoot, webPort, req, res) {
 	}
 }
 //#endregion
-export { newStopToken as C, writeFailedStatus as D, splitModel as E, writeProgress as O, listActiveHandymen as S, requireWhitelistedModel as T, workspaceTrajectoryLine as _, startSkiffDebugServer as a, buildRoundPrompt as b, askSkiff as c, getSkiffAgent as d, skiffMsmGate as f, unregisterSkiffSession as g, skiffTrajectoryEnabled as h, skiff_debug_exports as i, skiffRoleFor$1 as k, createSkiffAgent as l, skiffSessionSnapshot as m, jscSafeJsonText as n, stopSkiffDebugServer as o, skiffSessionInfo as p, renderSkiffMarkdown as r, stripThink as s, discoverCccs as t, ensureSkiffSession as u, waitAgentIdle as v, readProgress as w, handymanProgressPaths as x, HANDYMAN_GUIDE as y };
+export { skiffRoleFor$1 as A, listActiveHandymen as C, splitModel as D, requireWhitelistedModel as E, writeFailedStatus as O, handymanProgressPaths as S, readProgress as T, unregisterSkiffSession as _, startSkiffDebugServer as a, HANDYMAN_GUIDE as b, askSkiff as c, ensureWorkspacePromptSection as d, getSkiffAgent as f, skiffTrajectoryEnabled as g, skiffSessionSnapshot as h, skiff_debug_exports as i, writeProgress as k, createSkiffAgent as l, skiffSessionInfo as m, jscSafeJsonText as n, stopSkiffDebugServer as o, skiffMsmGate as p, renderSkiffMarkdown as r, stripThink as s, discoverCccs as t, ensureSkiffSession as u, workspaceTrajectoryLine as v, newStopToken as w, buildRoundPrompt as x, waitAgentIdle as y };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shgroup/dsh-serenity-hooks",
-  "version": "1.30.12",
+  "version": "1.30.14",
   "description": "宁静号 ACC harness（Native Cordis 插件）——给 DeepSeek Harness 装一个「AI 工作区」：10 个工具（container_fs/logbook/dashboard/container_git/msm/praxis/handyman/localstore/container_admin/autopilot-trajectory）+ 机械约束（安全模式/工作区围墙/密钥守卫/对外输出守卫）+ 工作日志与原地重建 + 网页登录入口/微信桥/子角色/对外问答页/自主巡航。适配 DSH 0.1.2-rc.1。",
   "license": "MIT",
   "repository": {