@shgroup/dsh-serenity-hooks 1.30.4 → 1.30.8

package/lib/index.js

@@ -1,10 +1,11 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
-import { a as findSerenityRoot, c as matchBlacklist, d as readCccName$2, f as readHandymanConfig, i as findGitRoot, l as pathInside, m as resolveInside, n as SAFE_MODE_MARKER, o as isSafeModeOn, r as classifyPath, s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS, u as readBlacklist } from "./ccc-CX48YNUL.js";
-import { a as resolveRoleSystemPrompt, i as readSkiffRoles, l as systemPromptSource, r as isSkiffSessionId, s as roleToolWhitelist } from "./skiff-role-LW4tjF9L.js";
-import { C as readProgress, D as writeProgress, E as writeFailedStatus, O as skiffRoleFor, S as newStopToken, T as splitModel, _ as workspaceTrajectoryLine, a as startSkiffDebugServer, b as handymanProgressPaths, c as askSkiff, d as getSkiffAgent, f as skiffMsmGate, g as unregisterSkiffSession, h as skiffTrajectoryEnabled, l as createSkiffAgent, m as skiffSessionSnapshot, n as jscSafeJsonText, o as stopSkiffDebugServer, p as skiffSessionInfo, r as renderSkiffMarkdown, s as stripThink, t as discoverCccs, u as ensureSkiffSession, v as HANDYMAN_GUIDE, w as requireWhitelistedModel, x as listActiveHandymen, y as buildRoundPrompt } from "./skiff-debug-gYigSgl_.js";
-import { a as readWeixinCredential, c as weixinInboundDir, d as LOCALSTORE_SCOPES, f as checkLocalstoreGitCompliance, h as runLocalStore, i as matchWeixinRoute, l as weixinSessionIdFor, m as readGitTrack, n as extractWeixinText, o as readWeixinSettings, p as localstorePath, r as hasVoiceItem, s as sanitizeFileName$1, t as extractWeixinMedia } from "./weixin-route-jA0qENOf.js";
-import { C as useSession, S as summarize, _ as resolveSessionByTitle, a as archiveSessions, b as setActiveSessionInfo, c as extractSessionMdPathFromText, d as getActiveSessionInfo, f as healthCheck, g as readActiveSessionMd, h as qaCheck, i as SESSION_ACTIONS, l as findLatestActiveSessionMd, m as parseSessionContextFromEvents, n as readLastBound, o as closeSession, p as listSessions, r as DEFAULT_SESSION_SCOPE, s as createSession, t as appendBound, u as findSession, v as sessionEvents, x as showSession, y as sessionsRoot } from "./session-bound-p9oR9dj9.js";
-import { n as registerSettingsSection, t as readSimpleSettings } from "./settings-section-BfVxgCZy.js";
+import { a as findSerenityRoot, c as matchBlacklist, d as readCccName$2, f as readHandymanConfig, i as findGitRoot, l as pathInside, m as resolveInside, n as SAFE_MODE_MARKER, o as isSafeModeOn, r as classifyPath, s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS, u as readBlacklist } from "./ccc-DAsSHsub.js";
+import { a as resolveRoleSystemPrompt, i as readSkiffRoles, l as systemPromptSource, r as isSkiffSessionId, s as roleToolWhitelist } from "./skiff-role-DlrbHPLD.js";
+import { C as newStopToken, D as writeFailedStatus, E as splitModel, O as writeProgress, S as listActiveHandymen, T as requireWhitelistedModel, _ as workspaceTrajectoryLine, a as startSkiffDebugServer, b as buildRoundPrompt, c as askSkiff, d as getSkiffAgent, f as skiffMsmGate, g as unregisterSkiffSession, h as skiffTrajectoryEnabled, k as skiffRoleFor, l as createSkiffAgent, m as skiffSessionSnapshot, n as jscSafeJsonText, o as stopSkiffDebugServer, p as skiffSessionInfo, r as renderSkiffMarkdown, s as stripThink, t as discoverCccs, u as ensureSkiffSession, v as waitAgentIdle, w as readProgress, x as handymanProgressPaths, y as HANDYMAN_GUIDE } from "./skiff-debug-8pF60JBO.js";
+import { i as hostSessions, n as hostInjected, o as hostWebServer, r as hostService, t as hostAgents } from "./access-CdL6BAYj.js";
+import { a as readWeixinCredential, c as weixinInboundDir, d as LOCALSTORE_SCOPES, f as checkLocalstoreGitCompliance, h as runLocalStore, i as matchWeixinRoute, l as weixinSessionIdFor, m as readGitTrack, n as extractWeixinText, o as readWeixinSettings, p as localstorePath, r as hasVoiceItem, s as sanitizeFileName$1, t as extractWeixinMedia } from "./weixin-route-BJ4g4ZNq.js";
+import { C as summarize, S as showSession, _ as readActiveSessionMd, a as archiveSessions, b as sessionsRoot, c as createSession, d as findSession, f as getActiveSessionInfo, g as qaCheck, h as parseSessionContextFromEvents, i as SESSION_ACTIONS, l as extractSessionMdPathFromText, m as listSessions, n as readLastBound, o as clearActiveSessionInfo, p as healthCheck, r as DEFAULT_SESSION_SCOPE, s as closeSession, t as appendBound, u as findLatestActiveSessionMd, v as resolveSessionByTitle, w as useSession, x as setActiveSessionInfo, y as sessionEvents } from "./session-bound-D2ANqVn-.js";
+import { n as registerSettingsSection, t as readSimpleSettings } from "./settings-section-BPk0e1du.js";
 import { a as markdownToPlainText, c as sniffImageExt, i as getUpdates, n as downloadMedia, o as sendTextMessage, r as getConfig, s as sendTyping, t as TypingStatus } from "./weixin-api-OUCuw0Ws.js";
 import z from "@deepseek-ai/schemastery";
 import { defineTool } from "@deepseek-ai/dsh-tools";
@@ -836,6 +837,306 @@ function setSafeMode(root, on) {
 	return { on: isSafeModeOn(root) };
 }
 //#endregion
+//#region src/host/contract.ts
+/** dsp 依赖的宿主服务与成员（对照 AI_LAB/dsh-harness-public @ 0.1.2-rc.1 逐一核对） */
+const HOST_SERVICES = [
+	{
+		id: "tools",
+		name: "tools",
+		access: "injected",
+		members: [{
+			name: "register",
+			kind: "function"
+		}, {
+			name: "guard",
+			kind: "function"
+		}],
+		impact: "10 个 ACC 工具无法注册 / 机械守卫失效",
+		required: true
+	},
+	{
+		id: "sessions",
+		name: "sessions",
+		access: "injected",
+		members: [
+			{
+				name: "list",
+				kind: "function"
+			},
+			{
+				name: "get",
+				kind: "function"
+			},
+			{
+				name: "create",
+				kind: "function"
+			}
+		],
+		impact: "会话定位/rebuild/CCC 解析失效",
+		required: true
+	},
+	{
+		id: "agents",
+		name: "agents",
+		access: "injected",
+		members: [{
+			name: "create",
+			kind: "function"
+		}, {
+			name: "get",
+			kind: "function"
+		}],
+		impact: "skiff/handyman 无法创建或复用 agent",
+		required: true
+	},
+	{
+		id: "webServer",
+		name: "webServer",
+		access: "injected",
+		members: [{
+			name: "register",
+			kind: "function"
+		}, {
+			name: "port",
+			kind: "value"
+		}],
+		impact: "状态接口/网关端口发现失效",
+		required: true
+	},
+	{
+		id: "settings",
+		name: "settings",
+		access: "injected",
+		members: [{
+			name: "installSection",
+			kind: "function"
+		}],
+		impact: "设置面板不安装 → 所有开关静默 no-op",
+		required: true
+	},
+	{
+		id: "systemPrompt",
+		name: "systemPrompt",
+		access: "injected",
+		members: [],
+		impact: "Induction（入口 skill 段）注入失效",
+		required: true
+	},
+	{
+		id: "sessionProjections",
+		name: "sessionProjections",
+		access: "injected",
+		members: [{
+			name: "snapshot",
+			kind: "function"
+		}],
+		impact: "上下文压力读数失效 → rebuild 提醒不再触发",
+		required: false
+	},
+	{
+		id: "skills",
+		name: "skills",
+		access: "injected",
+		members: [],
+		impact: "opencode skill 兼容层（.opencode/skills 注册）失效",
+		required: false
+	},
+	{
+		id: "shellEnv",
+		name: "shellEnv",
+		access: "injected",
+		members: [],
+		impact: "DSH_SERENITY_* 环境事实注入失效",
+		required: false
+	},
+	{
+		id: "agentLoop",
+		name: "agentLoop",
+		access: "injected",
+		members: [],
+		impact: "handyman worker agent 无法装配 preset",
+		required: false
+	},
+	{
+		id: "sessionTitle",
+		name: "sessionTitle",
+		access: "lazy",
+		members: [{
+			name: "rename",
+			kind: "function"
+		}],
+		impact: "会话命名 / rebuild 后重命名跳过（仅告警）",
+		required: false
+	},
+	{
+		id: "tokenMeter",
+		name: "tokenMeter",
+		access: "lazy",
+		members: [{
+			name: "estimateMessage",
+			kind: "function"
+		}],
+		impact: "rebuild shadow-price 定价失效（计量不准）",
+		required: false
+	},
+	{
+		id: "workspaceRegistry",
+		name: "workspaceRegistry",
+		access: "lazy",
+		members: [{
+			name: "list",
+			kind: "function"
+		}],
+		impact: "工作区白名单下拉为空（外部访问配置受限）",
+		required: false
+	},
+	{
+		id: "sessionPersistence",
+		name: "sessionPersistence",
+		access: "lazy",
+		members: [{
+			name: "list",
+			kind: "function"
+		}],
+		impact: "CCC 自动发现回落失效（诊断面受限）",
+		required: false
+	},
+	{
+		id: "connection",
+		name: "connection",
+		access: "lazy",
+		members: [{
+			name: "authenticatedUrl",
+			kind: "function"
+		}, {
+			name: "authorizeIndex",
+			kind: "function"
+		}],
+		impact: "双端口网关无法换取 dsh cookie → 外部反代 401",
+		required: false
+	}
+];
+/** dsp 被验证过的宿主版本范围（与 package.json peerDependencies 同源，单一真相源） */
+const REQUIRED_HOST_RANGE = "^0.1.2-rc.1";
+/** 最小 semver 比较（无依赖）：返回 -1 / 0 / 1；解析失败返回 null */
+function compareSemver(a, b) {
+	const parse = (v) => {
+		const m = /^(\d+)\.(\d+)\.(\d+)(?:-(.*))?$/.exec(v.trim());
+		if (!m) return null;
+		return [
+			Number(m[1]),
+			Number(m[2]),
+			Number(m[3]),
+			m[4] ?? ""
+		];
+	};
+	const pa = parse(a);
+	const pb = parse(b);
+	if (!pa || !pb) return null;
+	for (let i = 0; i < 3; i++) if (pa[i] !== pb[i]) return pa[i] < pb[i] ? -1 : 1;
+	const ra = pa[3];
+	const rb = pb[3];
+	if (ra === rb) return 0;
+	if (ra === "") return 1;
+	if (rb === "") return -1;
+	return ra < rb ? -1 : 1;
+}
+/**
+* 宿主版本是否落在 dsp 被验证的范围（`^0.1.2-rc.1`）。
+* 无版本信息 → 视为未知（ok=false，detail 说明），不猜测。
+*/
+function checkHostVersion(version) {
+	if (version === null) return {
+		ok: false,
+		detail: `host version unknown (required ${REQUIRED_HOST_RANGE})`
+	};
+	const floor = compareSemver(version, "0.1.2-rc.1");
+	const ceiling = compareSemver(version, "0.2.0");
+	if (floor === null || ceiling === null) return {
+		ok: false,
+		detail: `host version "${version}" not parseable (required ${REQUIRED_HOST_RANGE})`
+	};
+	if (floor < 0) return {
+		ok: false,
+		detail: `host ${version} is below the verified floor (required ${REQUIRED_HOST_RANGE})`
+	};
+	if (ceiling >= 0) return {
+		ok: false,
+		detail: `host ${version} is outside the verified range (required ${REQUIRED_HOST_RANGE})`
+	};
+	return {
+		ok: true,
+		detail: `host ${version} within ${REQUIRED_HOST_RANGE}`
+	};
+}
+/** 结构化读取宿主服务（lazy → ctx.get；injected → 直接属性，属性缺失再试 ctx.get） */
+function readService(ctx, name, access) {
+	return access === "lazy" ? hostService(ctx, name) : hostInjected(ctx, name);
+}
+/**
+* 探针：核对运行中的宿主是否仍满足 dsp 依赖的服务与成员。
+*
+* @param ctx 宿主插件上下文（真实 cordis Context；测试可传结构化替身）
+* @param hostVersion 运行中宿主版本（`readDshVersion()` 结果；null = 未知）
+* @returns 报告（`ok:false` 时 `issues` 逐条给出缺失项与后果）
+*/
+function probeHostContract(ctx, hostVersion = null) {
+	const issues = [];
+	let checked = 0;
+	for (const svc of HOST_SERVICES) {
+		checked += 1;
+		let value;
+		try {
+			value = readService(ctx, svc.name, svc.access);
+		} catch {
+			value = void 0;
+		}
+		if (value === void 0 || value === null) {
+			issues.push({
+				id: svc.id,
+				kind: "service",
+				detail: `service "${svc.name}" not available (${svc.access})`,
+				impact: svc.impact,
+				required: svc.required
+			});
+			continue;
+		}
+		for (const member of svc.members) {
+			checked += 1;
+			const actual = value[member.name];
+			if (!(member.kind === "function" ? typeof actual === "function" : actual !== void 0)) issues.push({
+				id: `${svc.id}.${member.name}`,
+				kind: "member",
+				detail: `service "${svc.name}" is missing ${member.kind} "${member.name}"`,
+				impact: svc.impact,
+				required: svc.required
+			});
+		}
+	}
+	const version = checkHostVersion(hostVersion);
+	if (!version.ok) issues.push({
+		id: "host.version",
+		kind: "version",
+		detail: version.detail,
+		impact: "契约未经该宿主版本验证（漂移风险）",
+		required: false
+	});
+	return {
+		ok: issues.every((i) => !i.required),
+		checked,
+		hostVersion,
+		versionOk: version.ok,
+		issues
+	};
+}
+/** 单行摘要（启动告警用） */
+function summarizeHostContract(report) {
+	if (report.ok && report.issues.length === 0) return `host contract ok (${report.checked} checks, host ${report.hostVersion ?? "unknown"})`;
+	const required = report.issues.filter((i) => i.required);
+	const optional = report.issues.filter((i) => !i.required);
+	return `${required.length > 0 ? `host contract BROKEN (${required.length} required)` : `host contract degraded (${optional.length} optional)`}: ${report.issues.map((i) => i.detail).join("; ")}`;
+}
+//#endregion
 //#region src/kit-ops.ts
 /**
 * kit-ops.ts — dashboard 纯操作层（acc_kit → dashboard，v1.30；零 DSH 依赖）
@@ -933,7 +1234,7 @@ function checkRegistryHealth(root) {
 		issues
 	};
 }
-async function runKit(root, args) {
+async function runKit(root, args, hostCtx) {
 	switch (args.action) {
 		case "health": {
 			const cccName = readCccName$1(root);
@@ -973,6 +1274,11 @@ async function runKit(root, args) {
 			if (root) report.config = loadSerenityConfig(root);
 			report.accVersion = ACC_VERSION;
 			report.dshVersion = readDshVersion();
+			if (hostCtx !== void 0) {
+				const contract = probeHostContract(hostCtx, report.dshVersion);
+				report.hostContract = contract;
+				if (!contract.ok) report.status = "degraded";
+			}
 			return report;
 		}
 		case "time": {
@@ -1006,29 +1312,35 @@ function renderText$11(value) {
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
 	}];
 }
-const kitTool = defineTool({
-	name: "dashboard",
-	description: "Dashboard — always-on container instruments (works any time, no side effects): health (CCC three-principle check P1/P2/config + MSM registry integrity report, healthy/degraded) / time (now_iso/now_local/epoch_ms) / wait (wait N seconds, default 1). Routine self-check before entering a CCC.",
-	parameters: {
-		action: {
-			type: "string",
-			enum: [...KIT_ACTIONS],
-			required: true,
-			description: "Subcommand"
+/**
+* dashboard 工具（v1.30.7：闭包捕获 ctx → health 可附宿主契约探针 F-05）。
+* ctx 仅用于**只读探针**（`ctx.get` / 属性读取），无副作用。
+*/
+function createKitTool(ctx) {
+	return defineTool({
+		name: "dashboard",
+		description: "Dashboard — always-on container instruments (works any time, no side effects): health (CCC three-principle check P1/P2/config + MSM registry integrity + host-contract probe, healthy/degraded) / time (now_iso/now_local/epoch_ms) / wait (wait N seconds, default 1). Routine self-check before entering a CCC.",
+		parameters: {
+			action: {
+				type: "string",
+				enum: [...KIT_ACTIONS],
+				required: true,
+				description: "Subcommand"
+			},
+			seconds: {
+				type: "integer",
+				description: "Seconds to wait (positive integer, default 1)"
+			}
 		},
-		seconds: {
-			type: "integer",
-			description: "Seconds to wait (positive integer, default 1)"
+		output: {
+			schema: { type: "json" },
+			render: (args, value) => renderText$11(value)
+		},
+		async execute(args, exec) {
+			return await runKit(findSerenityRoot(agentCwd$8(exec)), args, ctx);
 		}
-	},
-	output: {
-		schema: { type: "json" },
-		render: (args, value) => renderText$11(value)
-	},
-	async execute(args, exec) {
-		return await runKit(findSerenityRoot(agentCwd$8(exec)), args);
-	}
-});
+	});
+}
 //#endregion
 //#region src/git-ops.ts
 /**
@@ -2332,7 +2644,7 @@ function handymanPresetInheritance(parentCtx) {
 *
 * 机制：ctx.agents.create()（带 setup 钩子）创建专用 agent（进程内），
 * 每轮 followup → agent/status idle → 读 session.events 响应 → 写进度 → stop token 检查 →
-* 未完成继续下一轮；followup/waitIdle 抛错（非正常停止）→ dispose 并重新 create agent
+* 未完成继续下一轮；followup/等待空闲抛错（非正常停止）→ dispose 并重新 create agent
 * （重启计数，≤100），同一轮重试。工厂模式：apply 时闭包捕获插件 ctx（工具 execute 无 ctx 参数）。
 *
 * preset 继承 + 工具收窄：setup 钩子里对子 agent 执行 agentPresets.composeFrom（对齐
@@ -2347,21 +2659,6 @@ function renderText$4(value) {
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
 	}];
 }
-/** 等待 agent 空闲（agent/status → idle）；无超时（handyman 可永续，agent 工作多久等多久） */
-function waitIdle(ctx, agent) {
-	return new Promise((resolve) => {
-		let settled = false;
-		const finish = () => {
-			if (settled) return;
-			settled = true;
-			dispose();
-			resolve();
-		};
-		const dispose = ctx.on("agent/status", (payload) => {
-			if (payload.agent === agent && payload.status === "idle") finish();
-		});
-	});
-}
 /** 读取会话最后一个 assistant/message 文本 */
 function lastAssistantText$1(agent) {
 	const s = agent.session;
@@ -2461,7 +2758,7 @@ async function runHandymanJob(ctx, opts) {
 						plugin: "dsh-serenity-hooks"
 					}
 				}));
-				await waitIdle(ctx, workerAgent);
+				await waitAgentIdle(ctx, workerAgent);
 				lastResponse = lastAssistantText$1(workerAgent);
 			} catch {
 				restarts++;
@@ -2727,7 +3024,7 @@ function renameDshSessionOnUse(deps, session, titles, active, summary) {
 */
 function renameDshSessionForActive(ctx, exec, info, summary) {
 	try {
-		const titles = ctx.get?.("sessionTitle");
+		const titles = hostService(ctx, "sessionTitle");
 		const dshSession = exec.agent?.session;
 		if (!dshSession) {
 			console.warn(`[serenity-hooks] dsh 会话重命名未执行: 缺少 agent session（info: ${info.sessionId}）`);
@@ -3328,6 +3625,40 @@ const containerAdminTool = defineTool({
 	}
 });
 //#endregion
+//#region src/host/effect.ts
+/** 已告警的标签（进程级去重：重复装配/多测试替身不刷屏，但绝不静默） */
+const warnedLabels = /* @__PURE__ */ new Set();
+/**
+* 登记一个卸载时执行的清理。
+* @param ctx 宿主插件上下文
+* @param label 日志标签（定位是哪个资源未装配）
+* @param cleanup 卸载时执行；抛错被吞掉（不阻断其它清理）
+* @returns 是否成功装配（false = 宿主无 `ctx.effect`，已告警）
+*/
+function registerDisposer(ctx, label, cleanup) {
+	const effect = ctx?.effect;
+	if (typeof effect !== "function") {
+		if (!warnedLabels.has(label)) {
+			warnedLabels.add(label);
+			console.warn(`[serenity-hooks] ✗ 资源拆卸未装配（${label}）：ctx.effect 不可用（宿主契约缺失）`);
+		}
+		return false;
+	}
+	try {
+		effect.call(ctx, () => () => {
+			try {
+				cleanup();
+			} catch (err) {
+				console.warn(`[serenity-hooks] ✗ 资源清理失败（${label}）: ${String(err?.message ?? err)}`);
+			}
+		}, `dsh-serenity-hooks: ${label}`);
+		return true;
+	} catch (err) {
+		console.warn(`[serenity-hooks] ✗ 资源拆卸注册失败（${label}）: ${String(err?.message ?? err)}`);
+		return false;
+	}
+}
+//#endregion
 //#region src/autopilot-trajectory.ts
 var autopilot_trajectory_exports = /* @__PURE__ */ __exportAll({
 	AUDIT_HISTORY_MAX: () => 50,
@@ -3678,6 +4009,12 @@ function registerAutopilot(ctx) {
 	try {
 		ctx.on("serenity/settings-changed", () => startTimer());
 	} catch {}
+	registerDisposer(ctx, "autopilot 时钟", () => {
+		if (timer) {
+			clearInterval(timer);
+			timer = null;
+		}
+	});
 }
 /**
 * 目标 agent：从 SESSION.md 反向定位 dsh 会话（cwd 归属校验 + **bound 精确匹配优先**，
@@ -3697,8 +4034,8 @@ function resolveTargetAgent(ctx, mdPath) {
 	const idMatch = dirName.match(/--S(\d{3,})--/);
 	const sid = idMatch ? `S${idMatch[1]}` : null;
 	const targetRoot = findSerenityRoot(mdPath);
-	const sessions = ctx.sessions;
-	const agents = ctx.agents;
+	const sessions = hostSessions(ctx);
+	const agents = hostAgents(ctx);
 	const candidates = [];
 	try {
 		for (const s of sessions?.list?.() ?? []) {
@@ -3764,7 +4101,7 @@ function diagnoseTargetUnavailable(ctx, mdPath) {
 	const sameCccTitles = [];
 	const agentMissing = { matched: false };
 	try {
-		const sessions = ctx.sessions;
+		const sessions = hostSessions(ctx);
 		for (const s of sessions?.list?.() ?? []) {
 			const sess = s;
 			const cwd = sess?.header?.cwd ?? "";
@@ -3777,7 +4114,7 @@ function diagnoseTargetUnavailable(ctx, mdPath) {
 			const boundMatched = bound !== null && bound.dirName === dirName;
 			const titleMatched = sid !== null && title !== null && (title === sid || title.startsWith(`${sid}-`));
 			if (boundMatched || titleMatched) {
-				if (!ctx.agents?.get?.(sess.id ?? "")) agentMissing.matched = true;
+				if (!hostAgents(ctx)?.get?.(sess.id ?? "")) agentMissing.matched = true;
 			}
 		}
 	} catch {}
@@ -3790,7 +4127,7 @@ function resolveAutopilotRoot(ctx) {
 	const fromCwd = findSerenityRoot(process.cwd());
 	if (fromCwd) return fromCwd;
 	try {
-		const sessions = ctx.sessions;
+		const sessions = hostSessions(ctx);
 		for (const s of sessions?.list?.() ?? []) {
 			const r = findSerenityRoot(s?.header?.cwd ?? "");
 			if (r) return r;
@@ -3843,7 +4180,7 @@ function getAutopilotStatus(root) {
 function listLiveSessions(ctx) {
 	const out = [];
 	try {
-		const sessions = ctx.sessions;
+		const sessions = hostSessions(ctx);
 		for (const s of sessions?.list?.() ?? []) {
 			const cwd = s?.header?.cwd ?? null;
 			out.push({
@@ -4457,7 +4794,7 @@ function rebuildReminderText(tokensK, thresholdK, escalated = false) {
 /** 读取会话 contextPressure 投影（sessionProjections 可选服务；未装配返回 null） */
 function readContextPressure(ctx, session) {
 	try {
-		const projections = ctx.get?.("sessionProjections");
+		const projections = hostService(ctx, "sessionProjections");
 		if (!projections) return null;
 		const pressure = (projections.snapshot?.(session))?.values?.contextPressure;
 		if (!pressure || typeof pressure.projectedTokens !== "number") return null;
@@ -5874,10 +6211,10 @@ function resolveWorkspaceCore(sessionCwd, workspaceParam, listCwds, fallback) {
 }
 function resolveWorkspace(ctx, params) {
 	let sessionCwd;
-	if (params.sessionId) sessionCwd = (ctx.sessions?.get?.(params.sessionId))?.header?.cwd;
+	if (params.sessionId) sessionCwd = (hostSessions(ctx)?.get?.(params.sessionId))?.header?.cwd;
 	let listCwds = () => [];
 	try {
-		const sessions = ctx.sessions;
+		const sessions = hostSessions(ctx);
 		if (typeof sessions?.list === "function") listCwds = () => sessions.list().map((s) => s.header?.cwd ?? "").filter(Boolean);
 	} catch {}
 	return resolveWorkspaceCore(sessionCwd, params.workspace, listCwds, process.cwd());
@@ -6032,8 +6369,7 @@ function registerStatusApi(ctx, opts = {}) {
 					const settings = readAdvancedSettings();
 					let known = [];
 					try {
-						const registry = ctx.get?.("workspaceRegistry");
-						known = projectKnownWorkspaces(registry?.list?.() ?? [], settings.gateway.workspaces);
+						known = projectKnownWorkspaces(hostService(ctx, "workspaceRegistry")?.list?.() ?? [], settings.gateway.workspaces);
 					} catch {}
 					sendJson$1(res, 200, {
 						config: toWire(settings),
@@ -6071,7 +6407,7 @@ function registerStatusApi(ctx, opts = {}) {
 					workspace: url.searchParams.get("workspace") ?? void 0
 				});
 				const root = findSerenityRoot(workspace) ?? "";
-				const { discoverCccs } = await import("./skiff-debug-gYigSgl_.js").then((n) => n.i);
+				const { discoverCccs } = await import("./skiff-debug-8pF60JBO.js").then((n) => n.i);
 				sendJson$1(res, 200, { cccs: await discoverCccs(ctx, root) });
 			} catch (err) {
 				sendJson$1(res, 400, { error: err.message ?? String(err) });
@@ -6101,7 +6437,7 @@ function registerStatusApi(ctx, opts = {}) {
 					return;
 				}
 				const settings = readAdvancedSettings();
-				const { readSimpleSettings } = await import("./settings-section-BfVxgCZy.js").then((n) => n.r);
+				const { readSimpleSettings } = await import("./settings-section-BPk0e1du.js").then((n) => n.r);
 				const simple = readSimpleSettings();
 				const allowed = settings.publicAsk.allowed;
 				const port = simple.acpHttpPort ?? 3100;
@@ -6197,11 +6533,11 @@ function registerStatusApi(ctx, opts = {}) {
 						sendJson$1(res, 400, { error: chk.error });
 						return;
 					}
-					const { readWeixinSettings } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
+					const { readWeixinSettings } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 					const { weixinBridgeStatus } = await Promise.resolve().then(() => weixin_bridge_exports);
 					const settings = readWeixinSettings(chk.root);
 					const bridge = weixinBridgeStatus().find((b) => b.ccc === chk.root);
-					const { readWeixinCredential } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
+					const { readWeixinCredential } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 					const accounts = (settings.accounts ?? []).map((a) => ({
 						accountId: a.accountId,
 						name: a.name ?? void 0,
@@ -6233,7 +6569,7 @@ function registerStatusApi(ctx, opts = {}) {
 					const { fetchQRCode } = await import("./weixin-api-OUCuw0Ws.js").then((n) => n.l);
 					const { randomUUID } = await import("node:crypto");
 					for (const [key, v] of weixinLogins) if (Date.now() - v.startedAt > WEIXIN_LOGIN_TTL_MS) weixinLogins.delete(key);
-					const { readWeixinSettings } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
+					const { readWeixinSettings } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 					const qr = await fetchQRCode({ botType: readWeixinSettings(root).botType ?? void 0 });
 					const loginKey = randomUUID();
 					weixinLogins.set(loginKey, {
@@ -6254,7 +6590,7 @@ function registerStatusApi(ctx, opts = {}) {
 						sendJson$1(res, 400, { error: "missing accountId" });
 						return;
 					}
-					const { removeWeixinAccount } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
+					const { removeWeixinAccount } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 					const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 					removeWeixinAccount(root, body.accountId);
 					syncCccBridge(ctx, root);
@@ -6267,8 +6603,8 @@ function registerStatusApi(ctx, opts = {}) {
 						sendJson$1(res, 400, { error: "invalid routes (expected [{user, role}, ...])" });
 						return;
 					}
-					const { saveWeixinRoutes } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
-					const { readSkiffRoles } = await import("./skiff-role-LW4tjF9L.js").then((n) => n.c);
+					const { saveWeixinRoutes } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
+					const { readSkiffRoles } = await import("./skiff-role-DlrbHPLD.js").then((n) => n.c);
 					const roles = readSkiffRoles(root);
 					for (const r of routes) if (!roles.has(r.role)) {
 						sendJson$1(res, 400, { error: `unknown role: ${r.role} (not in ${root} skiff.roles)` });
@@ -6280,7 +6616,7 @@ function registerStatusApi(ctx, opts = {}) {
 				}
 				if (body.action === "set-enabled") {
 					const enabled = body.enabled === true;
-					const { readWeixinSettings, setWeixinEnabled } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
+					const { readWeixinSettings, setWeixinEnabled } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 					const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 					const settings = readWeixinSettings(root);
 					if (enabled && (settings.accounts ?? []).length === 0) {
@@ -6327,7 +6663,7 @@ function registerStatusApi(ctx, opts = {}) {
 					return;
 				}
 				const { pollQRStatus } = await import("./weixin-api-OUCuw0Ws.js").then((n) => n.l);
-				const { readWeixinSettings } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
+				const { readWeixinSettings } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 				const settings = readWeixinSettings(login.root);
 				const status = await pollQRStatus({
 					baseUrl: void 0,
@@ -6342,7 +6678,7 @@ function registerStatusApi(ctx, opts = {}) {
 							});
 							return;
 						}
-						const { upsertWeixinAccount, writeWeixinCredential, nextWeixinAccountId } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
+						const { upsertWeixinAccount, writeWeixinCredential, nextWeixinAccountId } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 						const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 						const accountId = nextWeixinAccountId(settings);
 						upsertWeixinAccount(login.root, {
@@ -6859,6 +7195,38 @@ function workspaceDenyResponse(rpcId) {
 	});
 }
 /**
+* 判定 workspace 创建请求的端点（v1.30.6，review F-03）。
+*
+* 宿主 rc.1 的 Remote 端点由 `typertEndpoint({namespace,method})` 派生为
+* `workspace/create`，因此浏览器实际请求 `POST /api/workspace/create`
+* （packages/typert/registry/src/service.ts:63-69；client/connection/src/client/rpc.ts:44）。
+* 旧实现只匹配 `/api/workspace.create` → 该分支从未命中，外部白名单与禁建校验失效。
+* 保留旧端点以兼容旧宿主。
+*/
+function isWorkspaceCreatePath(pathname) {
+	return pathname === "/api/workspace/create" || pathname === "/api/workspace.create";
+}
+/**
+* 从 workspace 创建请求体解析 `{ rpcId, path }`（v1.30.6，review F-03）。
+*
+* rc.1 wire 信封：`{ type:'client-request', rpcId, method:'workspace/create',
+* payload:{ args:{ path } } }`（packages/api/gateway/src/index.ts:955 `args: payload.args`）；
+* 旧宿主为 `payload.path`。解析失败返回 rpcId='unknown' + path=undefined。
+*/
+function parseWorkspaceCreateBody(body) {
+	try {
+		const parsed = JSON.parse(body);
+		const rpcId = typeof parsed.rpcId === "string" ? parsed.rpcId : "unknown";
+		const raw = parsed.payload?.args?.path ?? parsed.payload?.path;
+		return typeof raw === "string" ? {
+			rpcId,
+			path: raw
+		} : { rpcId };
+	} catch {
+		return { rpcId: "unknown" };
+	}
+}
+/**
 * 在 HTML 的 </head> 前注入 polyfill（幂等：含 marker 则跳过）
 */
 function injectPolyfillHtml(html) {
@@ -7102,14 +7470,10 @@ function startGateway(config, getAccounts, getDshCookie) {
 		}
 		const session = authed(req);
 		if (session !== void 0) {
-			if (req.method === "POST" && url.pathname === "/api/workspace.create") {
-				if (!allowWorkspaceCreate) {
-					readBody$1(req, 131072).then((body) => {
-						let rpcId = "unknown";
-						try {
-							const parsed = JSON.parse(body);
-							if (typeof parsed.rpcId === "string") rpcId = parsed.rpcId;
-						} catch {}
+			if (req.method === "POST" && isWorkspaceCreatePath(url.pathname)) {
+				readBody$1(req, 131072).then((body) => {
+					const { rpcId, path } = parseWorkspaceCreateBody(body);
+					if (!allowWorkspaceCreate) {
 						res.writeHead(403, { "content-type": "application/json" });
 						res.end(JSON.stringify({
 							type: "server-response",
@@ -7123,31 +7487,8 @@ function startGateway(config, getAccounts, getDshCookie) {
 								}
 							}
 						}));
-					}).catch(() => {
-						res.writeHead(400, { "content-type": "application/json" });
-						res.end(JSON.stringify({
-							type: "server-response",
-							rpcId: "unknown",
-							result: {
-								ok: false,
-								error: {
-									code: "bad-request",
-									message: "body too large",
-									details: {}
-								}
-							}
-						}));
-					});
-					return;
-				}
-				readBody$1(req, 131072).then((body) => {
-					let rpcId = "unknown";
-					let path;
-					try {
-						const parsed = JSON.parse(body);
-						if (typeof parsed.rpcId === "string") rpcId = parsed.rpcId;
-						if (typeof parsed.payload?.path === "string") path = parsed.payload.path;
-					} catch {}
+						return;
+					}
 					if (!workspaceAllowed(allowWorkspaces, path)) {
 						res.writeHead(403, { "content-type": "application/json" });
 						res.end(workspaceDenyResponse(rpcId));
@@ -7372,7 +7713,7 @@ function buildDshCookieProvider(ctx, mainPort) {
 	let diagnosed = false;
 	return () => {
 		try {
-			const connection = ctx.get?.("connection");
+			const connection = hostService(ctx, "connection");
 			if (!connection || typeof connection.authenticatedUrl !== "function" || typeof connection.authorizeIndex !== "function") {
 				if (!diagnosed) {
 					diagnosed = true;
@@ -7404,7 +7745,7 @@ function registerGateway(ctx) {
 	let lastSig = null;
 	const sync = () => {
 		try {
-			const webServer = ctx.get?.("webServer");
+			const webServer = hostWebServer(ctx);
 			if (!webServer?.port) return;
 			const enabled = readSimpleSettings().gatewayEnabled;
 			const settings = readAdvancedSettings();
@@ -7455,6 +7796,11 @@ function registerGateway(ctx) {
 	ctx.on("serenity/settings-changed", () => {
 		sync();
 	});
+	registerDisposer(ctx, "gateway 第二监听器", () => {
+		current?.dispose();
+		current = null;
+		lastSig = null;
+	});
 }
 //#endregion
 //#region src/rebuild.ts
@@ -7702,7 +8048,7 @@ function renameAfterRebuild(ctx, agent, pending) {
 			dirName,
 			mdPath
 		}, pending.summary);
-		const titles = ctx.get?.("sessionTitle");
+		const titles = hostService(ctx, "sessionTitle");
 		if (!titles || typeof titles.rename !== "function") {
 			console.warn("[serenity-hooks] rebuild 后重命名跳过: sessionTitle 服务不可用");
 			return;
@@ -7738,7 +8084,7 @@ function registerRebuildTurnHook(ctx) {
 		}
 		pendingRebuilds.delete(id);
 		try {
-			const tokenMeter = ctx.get?.("tokenMeter");
+			const tokenMeter = hostService(ctx, "tokenMeter");
 			const meter = tokenMeter && typeof tokenMeter.estimateMessage === "function" ? { estimateMessage: (m) => tokenMeter.estimateMessage(m) } : void 0;
 			if (performRebuild(agent.session, pending, meter)) {
 				renameAfterRebuild(ctx, agent, pending);
@@ -8096,14 +8442,14 @@ var AcpServer = class {
 			sessionId: result.sessionId
 		};
 	}
-	/** session/cancel：{ sessionId } → 中断当前 prompt（DSH interrupt） */
+	/** session/cancel：{ sessionId } → 取消该会话的当前活动（Agent.cancel，宿主 rc.1 契约） */
 	cancel(params) {
 		const sessionId = typeof params?.sessionId === "string" ? params.sessionId : void 0;
 		if (!sessionId) return { cancelled: false };
 		const agent = getSkiffAgent(sessionId);
 		if (!agent) return { cancelled: false };
 		try {
-			agent.interrupt?.();
+			agent.cancel({ kind: "user" });
 		} catch {}
 		return { cancelled: true };
 	}
@@ -8909,6 +9255,7 @@ function invokeWeixinHook(root, hookRel, event) {
 var weixin_bridge_exports = /* @__PURE__ */ __exportAll({
 	handleIncoming: () => handleIncoming,
 	registerWeixinBridge: () => registerWeixinBridge,
+	stopAllBridges: () => stopAllBridges,
 	stopCccBridge: () => stopCccBridge,
 	syncCccBridge: () => syncCccBridge,
 	weixinBridgeStatus: () => weixinBridgeStatus
@@ -9188,6 +9535,11 @@ function stopCccBridge(root) {
 	for (const loop of bridge.loops.values()) loop.stopped = true;
 	bridges.delete(root);
 }
+/** 停止全部桥（插件 dispose） */
+function stopAllBridges() {
+	for (const bridge of bridges.values()) for (const loop of bridge.loops.values()) loop.stopped = true;
+	bridges.clear();
+}
 /** 桥状态快照（面板数据源）：每 CCC → 每账号 → 轮询健康 */
 function weixinBridgeStatus() {
 	const out = [];
@@ -9208,7 +9560,7 @@ function weixinBridgeStatus() {
 function registerWeixinBridge(ctx) {
 	const syncFromLive = () => {
 		try {
-			const cwds = (ctx.sessions?.list?.() ?? []).map((s) => s.header?.cwd ?? "").filter(Boolean);
+			const cwds = (hostSessions(ctx)?.list?.() ?? []).map((s) => s.header?.cwd ?? "").filter(Boolean);
 			const roots = [...new Set(cwds.map((c) => findSerenityRoot(c))).values()].filter((r) => r !== null);
 			for (const root of roots) syncCccBridge(ctx, root);
 		} catch {}
@@ -9219,6 +9571,53 @@ function registerWeixinBridge(ctx) {
 	} catch {}
 }
 //#endregion
+//#region src/seams/lifecycle.ts
+/** 从 Agent / Session / 事件负载中取会话 id（形状宽容：未知结构返回 null） */
+function sessionIdOf(value) {
+	const v = value;
+	const id = v?.session?.id ?? v?.id ?? v?.header?.id;
+	return typeof id === "string" && id !== "" ? id : null;
+}
+/** 单会话内存态清理（幂等；无对应状态即 no-op） */
+function cleanupSessionState(sessionId) {
+	try {
+		unregisterSkiffSession(sessionId);
+	} catch {}
+	try {
+		clearActiveSessionInfo(sessionId);
+	} catch {}
+}
+/**
+* 装配生命周期订阅与资源拆卸。
+* @param ctx 宿主插件上下文
+*/
+function registerLifecycle(ctx) {
+	try {
+		ctx.on("agent/disposed", (payload) => {
+			const id = sessionIdOf(payload?.agent);
+			if (id) cleanupSessionState(id);
+		});
+	} catch {}
+	try {
+		ctx.on("session/disposed", (session) => {
+			const id = sessionIdOf(session);
+			if (id) cleanupSessionState(id);
+		});
+	} catch {}
+	const disposeAll = () => {
+		try {
+			stopSkiffDebugServer();
+		} catch {}
+		try {
+			stopAcpHttpServer();
+		} catch {}
+		try {
+			stopAllBridges();
+		} catch {}
+	};
+	registerDisposer(ctx, "self-started resources (skiff-debug/acp/weixin)", disposeAll);
+}
+//#endregion
 //#region src/index.ts
 const name = "dsh-serenity-hooks";
 /** 主动调用的服务；其余（agent 事件）随 harness 装配必然存在
@@ -9262,10 +9661,14 @@ const Config = z.object({
 	})
 });
 function apply(ctx, config) {
+	try {
+		const report = probeHostContract(ctx, readDshVersion());
+		if (report.issues.length > 0) console.warn(`[serenity-hooks] ${summarizeHostContract(report)}`);
+	} catch {}
 	if (config.tools) {
 		ctx.tools.register(ccFsTool);
 		ctx.tools.register(createSessionTool(ctx));
-		ctx.tools.register(kitTool);
+		ctx.tools.register(createKitTool(ctx));
 		ctx.tools.register(gitTool);
 		ctx.tools.register(msmTool);
 		ctx.tools.register(praxisTool);
@@ -9300,6 +9703,7 @@ function apply(ctx, config) {
 	registerAcp(ctx);
 	registerAutopilot(ctx);
 	registerWeixinBridge(ctx);
+	registerLifecycle(ctx);
 }
 /**
 * F4 Skiff 调试服务装配：启停 = 人工（设置面板 Skiff 区块开关，settings 持久化）。
@@ -9341,7 +9745,7 @@ function registerSkiff(ctx) {
 function resolveSkiffRoot(ctx) {
 	const liveRoots = [];
 	try {
-		const sessions = ctx.sessions;
+		const sessions = hostSessions(ctx);
 		for (const s of sessions?.list?.() ?? []) {
 			const cwd = s?.header?.cwd;
 			if (typeof cwd === "string") {
@@ -9358,7 +9762,7 @@ function resolveSkiffRoot(ctx) {
 /** 主 WebUI 端口（WebUI 链接；webServer 未装配回退 3080） */
 function readWebPort(ctx) {
 	try {
-		const ws = ctx.webServer;
+		const ws = hostWebServer(ctx);
 		return typeof ws?.port === "number" ? ws.port : 3080;
 	} catch {
 		return 3080;