@shgroup/dsh-serenity-hooks 1.30.5 → 1.30.9

package/lib/index.js

@@ -1,11 +1,12 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
-import { a as findSerenityRoot, c as matchBlacklist, d as readCccName$2, f as readHandymanConfig, i as findGitRoot, l as pathInside, m as resolveInside, n as SAFE_MODE_MARKER, o as isSafeModeOn, r as classifyPath, s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS, u as readBlacklist } from "./ccc-CX48YNUL.js";
-import { a as resolveRoleSystemPrompt, i as readSkiffRoles, l as systemPromptSource, r as isSkiffSessionId, s as roleToolWhitelist } from "./skiff-role-LW4tjF9L.js";
-import { C as readProgress, D as writeProgress, E as writeFailedStatus, O as skiffRoleFor, S as newStopToken, T as splitModel, _ as workspaceTrajectoryLine, a as startSkiffDebugServer, b as handymanProgressPaths, c as askSkiff, d as getSkiffAgent, f as skiffMsmGate, g as unregisterSkiffSession, h as skiffTrajectoryEnabled, l as createSkiffAgent, m as skiffSessionSnapshot, n as jscSafeJsonText, o as stopSkiffDebugServer, p as skiffSessionInfo, r as renderSkiffMarkdown, s as stripThink, t as discoverCccs, u as ensureSkiffSession, v as HANDYMAN_GUIDE, w as requireWhitelistedModel, x as listActiveHandymen, y as buildRoundPrompt } from "./skiff-debug-gYigSgl_.js";
-import { a as readWeixinCredential, c as weixinInboundDir, d as LOCALSTORE_SCOPES, f as checkLocalstoreGitCompliance, h as runLocalStore, i as matchWeixinRoute, l as weixinSessionIdFor, m as readGitTrack, n as extractWeixinText, o as readWeixinSettings, p as localstorePath, r as hasVoiceItem, s as sanitizeFileName$1, t as extractWeixinMedia } from "./weixin-route-jA0qENOf.js";
-import { C as useSession, S as summarize, _ as resolveSessionByTitle, a as archiveSessions, b as setActiveSessionInfo, c as extractSessionMdPathFromText, d as getActiveSessionInfo, f as healthCheck, g as readActiveSessionMd, h as qaCheck, i as SESSION_ACTIONS, l as findLatestActiveSessionMd, m as parseSessionContextFromEvents, n as readLastBound, o as closeSession, p as listSessions, r as DEFAULT_SESSION_SCOPE, s as createSession, t as appendBound, u as findSession, v as sessionEvents, x as showSession, y as sessionsRoot } from "./session-bound-p9oR9dj9.js";
-import { n as registerSettingsSection, t as readSimpleSettings } from "./settings-section-BfVxgCZy.js";
-import { a as markdownToPlainText, c as sniffImageExt, i as getUpdates, n as downloadMedia, o as sendTextMessage, r as getConfig, s as sendTyping, t as TypingStatus } from "./weixin-api-OUCuw0Ws.js";
+import { a as findSerenityRoot, c as matchBlacklist, d as readCccName$2, f as readHandymanConfig, i as findGitRoot, l as pathInside, m as resolveInside, n as SAFE_MODE_MARKER, o as isSafeModeOn, r as classifyPath, s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS, u as readBlacklist } from "./ccc-DAsSHsub.js";
+import { a as resolveRoleSystemPrompt, i as readSkiffRoles, l as systemPromptSource, r as isSkiffSessionId, s as roleToolWhitelist } from "./skiff-role-DlrbHPLD.js";
+import { C as newStopToken, D as writeFailedStatus, E as splitModel, O as writeProgress, S as listActiveHandymen, T as requireWhitelistedModel, _ as workspaceTrajectoryLine, a as startSkiffDebugServer, b as buildRoundPrompt, c as askSkiff, d as getSkiffAgent, f as skiffMsmGate, g as unregisterSkiffSession, h as skiffTrajectoryEnabled, k as skiffRoleFor, l as createSkiffAgent, m as skiffSessionSnapshot, n as jscSafeJsonText, o as stopSkiffDebugServer, p as skiffSessionInfo, r as renderSkiffMarkdown, s as stripThink, t as discoverCccs, u as ensureSkiffSession, v as waitAgentIdle, w as readProgress, x as handymanProgressPaths, y as HANDYMAN_GUIDE } from "./skiff-debug-TONJlpgF.js";
+import { i as hostSessions, n as hostInjected, o as hostWebServer, r as hostService, t as hostAgents } from "./access-CdL6BAYj.js";
+import { a as readWeixinCredential, c as weixinInboundDir, d as LOCALSTORE_SCOPES, f as checkLocalstoreGitCompliance, h as runLocalStore, i as matchWeixinRoute, l as weixinSessionIdFor, m as readGitTrack, n as extractWeixinText, o as readWeixinSettings, p as localstorePath, r as hasVoiceItem, s as sanitizeFileName$1, t as extractWeixinMedia } from "./weixin-route-BJ4g4ZNq.js";
+import { C as summarize, S as showSession, _ as readActiveSessionMd, a as archiveSessions, b as sessionsRoot, c as createSession, d as findSession, f as getActiveSessionInfo, g as qaCheck, h as parseSessionContextFromEvents, i as SESSION_ACTIONS, l as extractSessionMdPathFromText, m as listSessions, n as readLastBound, o as clearActiveSessionInfo, p as healthCheck, r as DEFAULT_SESSION_SCOPE, s as closeSession, t as appendBound, u as findLatestActiveSessionMd, v as resolveSessionByTitle, w as useSession, x as setActiveSessionInfo, y as sessionEvents } from "./session-bound-D2ANqVn-.js";
+import { n as registerSettingsSection, t as readSimpleSettings } from "./settings-section-BPk0e1du.js";
+import { a as markdownToPlainText, c as sniffImageExt, i as getUpdates, n as downloadMedia, o as sendTextMessage, r as getConfig, s as sendTyping, t as TypingStatus } from "./weixin-api-BMpljodH.js";
 import z from "@deepseek-ai/schemastery";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 import { appendFileSync, chmodSync, cpSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync, utimesSync, writeFileSync } from "node:fs";
@@ -836,6 +837,306 @@ function setSafeMode(root, on) {
 	return { on: isSafeModeOn(root) };
 }
 //#endregion
+//#region src/host/contract.ts
+/** dsp 依赖的宿主服务与成员（对照 AI_LAB/dsh-harness-public @ 0.1.2-rc.1 逐一核对） */
+const HOST_SERVICES = [
+	{
+		id: "tools",
+		name: "tools",
+		access: "injected",
+		members: [{
+			name: "register",
+			kind: "function"
+		}, {
+			name: "guard",
+			kind: "function"
+		}],
+		impact: "10 个 ACC 工具无法注册 / 机械守卫失效",
+		required: true
+	},
+	{
+		id: "sessions",
+		name: "sessions",
+		access: "injected",
+		members: [
+			{
+				name: "list",
+				kind: "function"
+			},
+			{
+				name: "get",
+				kind: "function"
+			},
+			{
+				name: "create",
+				kind: "function"
+			}
+		],
+		impact: "会话定位/rebuild/CCC 解析失效",
+		required: true
+	},
+	{
+		id: "agents",
+		name: "agents",
+		access: "injected",
+		members: [{
+			name: "create",
+			kind: "function"
+		}, {
+			name: "get",
+			kind: "function"
+		}],
+		impact: "skiff/handyman 无法创建或复用 agent",
+		required: true
+	},
+	{
+		id: "webServer",
+		name: "webServer",
+		access: "injected",
+		members: [{
+			name: "register",
+			kind: "function"
+		}, {
+			name: "port",
+			kind: "value"
+		}],
+		impact: "状态接口/网关端口发现失效",
+		required: true
+	},
+	{
+		id: "settings",
+		name: "settings",
+		access: "injected",
+		members: [{
+			name: "installSection",
+			kind: "function"
+		}],
+		impact: "设置面板不安装 → 所有开关静默 no-op",
+		required: true
+	},
+	{
+		id: "systemPrompt",
+		name: "systemPrompt",
+		access: "injected",
+		members: [],
+		impact: "Induction（入口 skill 段）注入失效",
+		required: true
+	},
+	{
+		id: "sessionProjections",
+		name: "sessionProjections",
+		access: "injected",
+		members: [{
+			name: "snapshot",
+			kind: "function"
+		}],
+		impact: "上下文压力读数失效 → rebuild 提醒不再触发",
+		required: false
+	},
+	{
+		id: "skills",
+		name: "skills",
+		access: "injected",
+		members: [],
+		impact: "opencode skill 兼容层（.opencode/skills 注册）失效",
+		required: false
+	},
+	{
+		id: "shellEnv",
+		name: "shellEnv",
+		access: "injected",
+		members: [],
+		impact: "DSH_SERENITY_* 环境事实注入失效",
+		required: false
+	},
+	{
+		id: "agentLoop",
+		name: "agentLoop",
+		access: "injected",
+		members: [],
+		impact: "handyman worker agent 无法装配 preset",
+		required: false
+	},
+	{
+		id: "sessionTitle",
+		name: "sessionTitle",
+		access: "lazy",
+		members: [{
+			name: "rename",
+			kind: "function"
+		}],
+		impact: "会话命名 / rebuild 后重命名跳过（仅告警）",
+		required: false
+	},
+	{
+		id: "tokenMeter",
+		name: "tokenMeter",
+		access: "lazy",
+		members: [{
+			name: "estimateMessage",
+			kind: "function"
+		}],
+		impact: "rebuild shadow-price 定价失效（计量不准）",
+		required: false
+	},
+	{
+		id: "workspaceRegistry",
+		name: "workspaceRegistry",
+		access: "lazy",
+		members: [{
+			name: "list",
+			kind: "function"
+		}],
+		impact: "工作区白名单下拉为空（外部访问配置受限）",
+		required: false
+	},
+	{
+		id: "sessionPersistence",
+		name: "sessionPersistence",
+		access: "lazy",
+		members: [{
+			name: "list",
+			kind: "function"
+		}],
+		impact: "CCC 自动发现回落失效（诊断面受限）",
+		required: false
+	},
+	{
+		id: "connection",
+		name: "connection",
+		access: "lazy",
+		members: [{
+			name: "authenticatedUrl",
+			kind: "function"
+		}, {
+			name: "authorizeIndex",
+			kind: "function"
+		}],
+		impact: "双端口网关无法换取 dsh cookie → 外部反代 401",
+		required: false
+	}
+];
+/** dsp 被验证过的宿主版本范围（与 package.json peerDependencies 同源，单一真相源） */
+const REQUIRED_HOST_RANGE = "^0.1.2-rc.1";
+/** 最小 semver 比较（无依赖）：返回 -1 / 0 / 1；解析失败返回 null */
+function compareSemver(a, b) {
+	const parse = (v) => {
+		const m = /^(\d+)\.(\d+)\.(\d+)(?:-(.*))?$/.exec(v.trim());
+		if (!m) return null;
+		return [
+			Number(m[1]),
+			Number(m[2]),
+			Number(m[3]),
+			m[4] ?? ""
+		];
+	};
+	const pa = parse(a);
+	const pb = parse(b);
+	if (!pa || !pb) return null;
+	for (let i = 0; i < 3; i++) if (pa[i] !== pb[i]) return pa[i] < pb[i] ? -1 : 1;
+	const ra = pa[3];
+	const rb = pb[3];
+	if (ra === rb) return 0;
+	if (ra === "") return 1;
+	if (rb === "") return -1;
+	return ra < rb ? -1 : 1;
+}
+/**
+* 宿主版本是否落在 dsp 被验证的范围（`^0.1.2-rc.1`）。
+* 无版本信息 → 视为未知（ok=false，detail 说明），不猜测。
+*/
+function checkHostVersion(version) {
+	if (version === null) return {
+		ok: false,
+		detail: `host version unknown (required ${REQUIRED_HOST_RANGE})`
+	};
+	const floor = compareSemver(version, "0.1.2-rc.1");
+	const ceiling = compareSemver(version, "0.2.0");
+	if (floor === null || ceiling === null) return {
+		ok: false,
+		detail: `host version "${version}" not parseable (required ${REQUIRED_HOST_RANGE})`
+	};
+	if (floor < 0) return {
+		ok: false,
+		detail: `host ${version} is below the verified floor (required ${REQUIRED_HOST_RANGE})`
+	};
+	if (ceiling >= 0) return {
+		ok: false,
+		detail: `host ${version} is outside the verified range (required ${REQUIRED_HOST_RANGE})`
+	};
+	return {
+		ok: true,
+		detail: `host ${version} within ${REQUIRED_HOST_RANGE}`
+	};
+}
+/** 结构化读取宿主服务（lazy → ctx.get；injected → 直接属性，属性缺失再试 ctx.get） */
+function readService(ctx, name, access) {
+	return access === "lazy" ? hostService(ctx, name) : hostInjected(ctx, name);
+}
+/**
+* 探针：核对运行中的宿主是否仍满足 dsp 依赖的服务与成员。
+*
+* @param ctx 宿主插件上下文（真实 cordis Context；测试可传结构化替身）
+* @param hostVersion 运行中宿主版本（`readDshVersion()` 结果；null = 未知）
+* @returns 报告（`ok:false` 时 `issues` 逐条给出缺失项与后果）
+*/
+function probeHostContract(ctx, hostVersion = null) {
+	const issues = [];
+	let checked = 0;
+	for (const svc of HOST_SERVICES) {
+		checked += 1;
+		let value;
+		try {
+			value = readService(ctx, svc.name, svc.access);
+		} catch {
+			value = void 0;
+		}
+		if (value === void 0 || value === null) {
+			issues.push({
+				id: svc.id,
+				kind: "service",
+				detail: `service "${svc.name}" not available (${svc.access})`,
+				impact: svc.impact,
+				required: svc.required
+			});
+			continue;
+		}
+		for (const member of svc.members) {
+			checked += 1;
+			const actual = value[member.name];
+			if (!(member.kind === "function" ? typeof actual === "function" : actual !== void 0)) issues.push({
+				id: `${svc.id}.${member.name}`,
+				kind: "member",
+				detail: `service "${svc.name}" is missing ${member.kind} "${member.name}"`,
+				impact: svc.impact,
+				required: svc.required
+			});
+		}
+	}
+	const version = checkHostVersion(hostVersion);
+	if (!version.ok) issues.push({
+		id: "host.version",
+		kind: "version",
+		detail: version.detail,
+		impact: "契约未经该宿主版本验证（漂移风险）",
+		required: false
+	});
+	return {
+		ok: issues.every((i) => !i.required),
+		checked,
+		hostVersion,
+		versionOk: version.ok,
+		issues
+	};
+}
+/** 单行摘要（启动告警用） */
+function summarizeHostContract(report) {
+	if (report.ok && report.issues.length === 0) return `host contract ok (${report.checked} checks, host ${report.hostVersion ?? "unknown"})`;
+	const required = report.issues.filter((i) => i.required);
+	const optional = report.issues.filter((i) => !i.required);
+	return `${required.length > 0 ? `host contract BROKEN (${required.length} required)` : `host contract degraded (${optional.length} optional)`}: ${report.issues.map((i) => i.detail).join("; ")}`;
+}
+//#endregion
 //#region src/kit-ops.ts
 /**
 * kit-ops.ts — dashboard 纯操作层（acc_kit → dashboard，v1.30；零 DSH 依赖）
@@ -933,7 +1234,7 @@ function checkRegistryHealth(root) {
 		issues
 	};
 }
-async function runKit(root, args) {
+async function runKit(root, args, hostCtx) {
 	switch (args.action) {
 		case "health": {
 			const cccName = readCccName$1(root);
@@ -973,6 +1274,11 @@ async function runKit(root, args) {
 			if (root) report.config = loadSerenityConfig(root);
 			report.accVersion = ACC_VERSION;
 			report.dshVersion = readDshVersion();
+			if (hostCtx !== void 0) {
+				const contract = probeHostContract(hostCtx, report.dshVersion);
+				report.hostContract = contract;
+				if (!contract.ok) report.status = "degraded";
+			}
 			return report;
 		}
 		case "time": {
@@ -1006,29 +1312,35 @@ function renderText$11(value) {
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
 	}];
 }
-const kitTool = defineTool({
-	name: "dashboard",
-	description: "Dashboard — always-on container instruments (works any time, no side effects): health (CCC three-principle check P1/P2/config + MSM registry integrity report, healthy/degraded) / time (now_iso/now_local/epoch_ms) / wait (wait N seconds, default 1). Routine self-check before entering a CCC.",
-	parameters: {
-		action: {
-			type: "string",
-			enum: [...KIT_ACTIONS],
-			required: true,
-			description: "Subcommand"
+/**
+* dashboard 工具（v1.30.7：闭包捕获 ctx → health 可附宿主契约探针 F-05）。
+* ctx 仅用于**只读探针**（`ctx.get` / 属性读取），无副作用。
+*/
+function createKitTool(ctx) {
+	return defineTool({
+		name: "dashboard",
+		description: "Dashboard — always-on container instruments (works any time, no side effects): health (CCC three-principle check P1/P2/config + MSM registry integrity + host-contract probe, healthy/degraded) / time (now_iso/now_local/epoch_ms) / wait (wait N seconds, default 1). Routine self-check before entering a CCC.",
+		parameters: {
+			action: {
+				type: "string",
+				enum: [...KIT_ACTIONS],
+				required: true,
+				description: "Subcommand"
+			},
+			seconds: {
+				type: "integer",
+				description: "Seconds to wait (positive integer, default 1)"
+			}
 		},
-		seconds: {
-			type: "integer",
-			description: "Seconds to wait (positive integer, default 1)"
+		output: {
+			schema: { type: "json" },
+			render: (args, value) => renderText$11(value)
+		},
+		async execute(args, exec) {
+			return await runKit(findSerenityRoot(agentCwd$8(exec)), args, ctx);
 		}
-	},
-	output: {
-		schema: { type: "json" },
-		render: (args, value) => renderText$11(value)
-	},
-	async execute(args, exec) {
-		return await runKit(findSerenityRoot(agentCwd$8(exec)), args);
-	}
-});
+	});
+}
 //#endregion
 //#region src/git-ops.ts
 /**
@@ -1265,6 +1577,28 @@ const gitTool = defineTool({
 	}
 });
 //#endregion
+//#region src/weixin-send-endpoint.ts
+/**
+* weixin-send-endpoint.ts — 主动发送入口地址的**零依赖叶模块**（v1.30.9，S142）
+*
+* 为什么单独一个模块（R↓）：地址的读者是 `msm-ops.buildMsmEnv`（把地址注入 MSM 子进程 env），
+* 写者才是 `weixin-send-api`（监听器启停）。若 msm-ops 直接 import weixin-send-api，
+* 静态依赖链会拖进整条微信桥栈（weixin-bridge → skiff-core → `@deepseek-ai/dsh-llm`）——
+* 后果实测：`acc-extras` / `ops` / `skiff-admin` 三个测试套件因解析不到宿主包而**整文件加载失败**
+* （它们只用到 MSM 注册表逻辑）。叶模块把「读」与「写」解耦：读者零依赖，写者自己承担重量。
+*
+* 同款先例：`host/effect.ts`（拆卸登记）、`agent-idle.ts`（等待结算）。
+*/
+let endpoint = null;
+/** 设置当前入口地址（weixin-send-api 启停时调用；null = 未启动） */
+function setWeixinSendEndpoint(value) {
+	endpoint = value;
+}
+/** 当前入口地址（形如 http://127.0.0.1:3082；未启动 → null） */
+function weixinSendEndpoint() {
+	return endpoint;
+}
+//#endregion
 //#region src/msm-ops.ts
 /**
 * msm-ops.ts — msm 纯操作层（acc_msm → msm 执行 + container_admin 管理面，v1.30；零 DSH 依赖）
@@ -1313,14 +1647,21 @@ function assertPathInsideRoot(root, value, flagName) {
 		if (e instanceof Error && e.message.includes("symlink")) throw e;
 	}
 }
-/** 业务子进程 env：注入 SERENITY_ROOT / SERENITY_CCC / SERENITY_VERSION（对齐 osp） */
+/**
+* 业务子进程 env：注入 SERENITY_ROOT / SERENITY_CCC / SERENITY_VERSION（对齐 osp）
+* + SERENITY_WEIXIN_API（v1.30.9：微信主动发送入口地址——MSM 脚本零硬编码端口；
+*   未启动则不注入，脚本回退默认值）。
+*/
 function buildMsmEnv(root) {
-	return {
+	const env = {
 		...process.env,
 		SERENITY_ROOT: root,
 		SERENITY_CCC: readCccName(root) ?? "",
 		SERENITY_VERSION: ACC_VERSION
 	};
+	const weixinApi = weixinSendEndpoint();
+	if (weixinApi) env.SERENITY_WEIXIN_API = weixinApi;
+	return env;
 }
 /**
 * Windows 兼容（审计观察点 A）：`.cmd` 不能直接被 CreateProcess 解析——
@@ -1489,7 +1830,11 @@ CCC 级微信个人号接入（iLink 协议）：dsh 一进程多 CCC，每 CCC
 账号/路由/开关在此文件；**bot_token 凭据在 CCC localstore credential scope**
 （扫码绑定后自动写入，永不进 git 明文面）。
 路由 user → role：exact 优先，* 通配兜底；role 必须 ∈ 该 CCC skiff.roles。
-面板（WebUI 设置 → 微信桥）可扫码绑定/移除账号/编辑路由；msm("weixin-doctor", ["status"|"diag"|"verify"]) 排查。凭据主动查看：localstore get WEIXIN_<ACCOUNT>_TOKEN。
+面板（WebUI 设置 → 微信桥）可扫码绑定/移除账号/编辑路由；msm("weixin-doctor", ["status"|"diag"|"verify"|"guide"]) 排查 + 大而全指南。凭据主动查看：localstore get WEIXIN_<ACCOUNT>_TOKEN。
+  ▸ 主动发送（v1.30.9）：CCC 用 msm("weixin-send", ["send", "--ccc", "<CCC>", "--user", "<别名|id>", "<文本>"])
+    给用户发消息——经 dsp 主动发送入口（**只绑 127.0.0.1**，plugin 全局配置 ~/.dsh/serenity-hooks.json
+    的 weixinApi.port，默认 3082；公网不可达故无密钥）→ weixin-bridge.sendProactiveText →
+    成功后触发 outgoing hook（source="proactive"）。send-file 仍由 MSM 直连 iLink 上传并自行补记。
 
   Config:
     { "weixin": {
@@ -1505,7 +1850,10 @@ CCC 级微信个人号接入（iLink 协议）：dsh 一进程多 CCC，每 CCC
 
   触发（双向）：
     incoming  = 用户 → bot：路由命中后、媒体落盘后触发（文本含语音转写；媒体带落盘 relPath）
-    outgoing  = bot → 用户：回复发送成功后触发（reply = 用户实际收到的纯文本，已剥离 think）
+    outgoing  = bot → 用户：发送成功后触发（reply = 用户实际收到的纯文本，已剥离 think）
+      · source="reply"（缺省）= 回复用户消息；source="proactive"（v1.30.9）= bot 主动发起
+        （CCC 经 weixin-send MSM → dsp 主动发送入口 → sendProactiveText）
+      · file（仅 send-file 补记）：{ "name": "报告.pdf", "size": 12345, "caption": "可选" }
 
   脚本约定（事件 JSON 单行经 stdin 传入；bun 优先 node 兜底）：
     #!/usr/bin/env bun  或  node script.js —— 读 process.stdin 整段 JSON.parse
@@ -1519,7 +1867,7 @@ CCC 级微信个人号接入（iLink 协议）：dsh 一进程多 CCC，每 CCC
       "message": { "text": "你好", "media": [{ "kind": "image", "relPath": "_tmp/weixin-inbound/<hash>/img_x.jpg" }] } }
     { "event": "outgoing", "ts": ..., "cccRoot": ..., "accountId": ...,
       "userId": ..., "sessionId": ..., "role": ...,
-      "reply": "已记录（纯文本）" }
+      "reply": "已记录（纯文本）", "source": "reply" | "proactive" }
 
   示例脚本（追加到按日文件——持久化归 CCC 自选：文件/DB/远端均可）：
     const fs = require('node:fs'); const p = '/path/ccc/AGENT_SESSIONS/_weixin-log.jsonl';
@@ -2332,7 +2680,7 @@ function handymanPresetInheritance(parentCtx) {
 *
 * 机制：ctx.agents.create()（带 setup 钩子）创建专用 agent（进程内），
 * 每轮 followup → agent/status idle → 读 session.events 响应 → 写进度 → stop token 检查 →
-* 未完成继续下一轮；followup/waitIdle 抛错（非正常停止）→ dispose 并重新 create agent
+* 未完成继续下一轮；followup/等待空闲抛错（非正常停止）→ dispose 并重新 create agent
 * （重启计数，≤100），同一轮重试。工厂模式：apply 时闭包捕获插件 ctx（工具 execute 无 ctx 参数）。
 *
 * preset 继承 + 工具收窄：setup 钩子里对子 agent 执行 agentPresets.composeFrom（对齐
@@ -2347,21 +2695,6 @@ function renderText$4(value) {
 		text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
 	}];
 }
-/** 等待 agent 空闲（agent/status → idle）；无超时（handyman 可永续，agent 工作多久等多久） */
-function waitIdle(ctx, agent) {
-	return new Promise((resolve) => {
-		let settled = false;
-		const finish = () => {
-			if (settled) return;
-			settled = true;
-			dispose();
-			resolve();
-		};
-		const dispose = ctx.on("agent/status", (payload) => {
-			if (payload.agent === agent && payload.status === "idle") finish();
-		});
-	});
-}
 /** 读取会话最后一个 assistant/message 文本 */
 function lastAssistantText$1(agent) {
 	const s = agent.session;
@@ -2461,7 +2794,7 @@ async function runHandymanJob(ctx, opts) {
 						plugin: "dsh-serenity-hooks"
 					}
 				}));
-				await waitIdle(ctx, workerAgent);
+				await waitAgentIdle(ctx, workerAgent);
 				lastResponse = lastAssistantText$1(workerAgent);
 			} catch {
 				restarts++;
@@ -2727,7 +3060,7 @@ function renameDshSessionOnUse(deps, session, titles, active, summary) {
 */
 function renameDshSessionForActive(ctx, exec, info, summary) {
 	try {
-		const titles = ctx.get?.("sessionTitle");
+		const titles = hostService(ctx, "sessionTitle");
 		const dshSession = exec.agent?.session;
 		if (!dshSession) {
 			console.warn(`[serenity-hooks] dsh 会话重命名未执行: 缺少 agent session（info: ${info.sessionId}）`);
@@ -3328,6 +3661,40 @@ const containerAdminTool = defineTool({
 	}
 });
 //#endregion
+//#region src/host/effect.ts
+/** 已告警的标签（进程级去重：重复装配/多测试替身不刷屏，但绝不静默） */
+const warnedLabels = /* @__PURE__ */ new Set();
+/**
+* 登记一个卸载时执行的清理。
+* @param ctx 宿主插件上下文
+* @param label 日志标签（定位是哪个资源未装配）
+* @param cleanup 卸载时执行；抛错被吞掉（不阻断其它清理）
+* @returns 是否成功装配（false = 宿主无 `ctx.effect`，已告警）
+*/
+function registerDisposer(ctx, label, cleanup) {
+	const effect = ctx?.effect;
+	if (typeof effect !== "function") {
+		if (!warnedLabels.has(label)) {
+			warnedLabels.add(label);
+			console.warn(`[serenity-hooks] ✗ 资源拆卸未装配（${label}）：ctx.effect 不可用（宿主契约缺失）`);
+		}
+		return false;
+	}
+	try {
+		effect.call(ctx, () => () => {
+			try {
+				cleanup();
+			} catch (err) {
+				console.warn(`[serenity-hooks] ✗ 资源清理失败（${label}）: ${String(err?.message ?? err)}`);
+			}
+		}, `dsh-serenity-hooks: ${label}`);
+		return true;
+	} catch (err) {
+		console.warn(`[serenity-hooks] ✗ 资源拆卸注册失败（${label}）: ${String(err?.message ?? err)}`);
+		return false;
+	}
+}
+//#endregion
 //#region src/autopilot-trajectory.ts
 var autopilot_trajectory_exports = /* @__PURE__ */ __exportAll({
 	AUDIT_HISTORY_MAX: () => 50,
@@ -3678,6 +4045,12 @@ function registerAutopilot(ctx) {
 	try {
 		ctx.on("serenity/settings-changed", () => startTimer());
 	} catch {}
+	registerDisposer(ctx, "autopilot 时钟", () => {
+		if (timer) {
+			clearInterval(timer);
+			timer = null;
+		}
+	});
 }
 /**
 * 目标 agent：从 SESSION.md 反向定位 dsh 会话（cwd 归属校验 + **bound 精确匹配优先**，
@@ -3697,8 +4070,8 @@ function resolveTargetAgent(ctx, mdPath) {
 	const idMatch = dirName.match(/--S(\d{3,})--/);
 	const sid = idMatch ? `S${idMatch[1]}` : null;
 	const targetRoot = findSerenityRoot(mdPath);
-	const sessions = ctx.sessions;
-	const agents = ctx.agents;
+	const sessions = hostSessions(ctx);
+	const agents = hostAgents(ctx);
 	const candidates = [];
 	try {
 		for (const s of sessions?.list?.() ?? []) {
@@ -3764,7 +4137,7 @@ function diagnoseTargetUnavailable(ctx, mdPath) {
 	const sameCccTitles = [];
 	const agentMissing = { matched: false };
 	try {
-		const sessions = ctx.sessions;
+		const sessions = hostSessions(ctx);
 		for (const s of sessions?.list?.() ?? []) {
 			const sess = s;
 			const cwd = sess?.header?.cwd ?? "";
@@ -3777,7 +4150,7 @@ function diagnoseTargetUnavailable(ctx, mdPath) {
 			const boundMatched = bound !== null && bound.dirName === dirName;
 			const titleMatched = sid !== null && title !== null && (title === sid || title.startsWith(`${sid}-`));
 			if (boundMatched || titleMatched) {
-				if (!ctx.agents?.get?.(sess.id ?? "")) agentMissing.matched = true;
+				if (!hostAgents(ctx)?.get?.(sess.id ?? "")) agentMissing.matched = true;
 			}
 		}
 	} catch {}
@@ -3790,7 +4163,7 @@ function resolveAutopilotRoot(ctx) {
 	const fromCwd = findSerenityRoot(process.cwd());
 	if (fromCwd) return fromCwd;
 	try {
-		const sessions = ctx.sessions;
+		const sessions = hostSessions(ctx);
 		for (const s of sessions?.list?.() ?? []) {
 			const r = findSerenityRoot(s?.header?.cwd ?? "");
 			if (r) return r;
@@ -3843,7 +4216,7 @@ function getAutopilotStatus(root) {
 function listLiveSessions(ctx) {
 	const out = [];
 	try {
-		const sessions = ctx.sessions;
+		const sessions = hostSessions(ctx);
 		for (const s of sessions?.list?.() ?? []) {
 			const cwd = s?.header?.cwd ?? null;
 			out.push({
@@ -4457,7 +4830,7 @@ function rebuildReminderText(tokensK, thresholdK, escalated = false) {
 /** 读取会话 contextPressure 投影（sessionProjections 可选服务；未装配返回 null） */
 function readContextPressure(ctx, session) {
 	try {
-		const projections = ctx.get?.("sessionProjections");
+		const projections = hostService(ctx, "sessionProjections");
 		if (!projections) return null;
 		const pressure = (projections.snapshot?.(session))?.values?.contextPressure;
 		if (!pressure || typeof pressure.projectedTokens !== "number") return null;
@@ -4711,6 +5084,10 @@ function defaultAdvancedSettings() {
 		publicAsk: {
 			key: "",
 			allowed: []
+		},
+		weixinApi: {
+			enabled: true,
+			port: 3082
 		}
 	};
 }
@@ -4761,6 +5138,7 @@ function mergeWithDefaults(raw) {
 	const gateway = o.gateway ?? {};
 	const persona = o.persona ?? {};
 	const publicAsk = o.publicAsk ?? {};
+	const weixinApi = o.weixinApi ?? {};
 	return {
 		gateway: {
 			enabled: typeof gateway.enabled === "boolean" ? gateway.enabled : def.gateway.enabled,
@@ -4779,6 +5157,10 @@ function mergeWithDefaults(raw) {
 		publicAsk: {
 			key: typeof publicAsk.key === "string" ? publicAsk.key : def.publicAsk.key,
 			allowed: Array.isArray(publicAsk.allowed) ? publicAsk.allowed.filter((n) => typeof n === "string" && n !== "") : def.publicAsk.allowed
+		},
+		weixinApi: {
+			enabled: typeof weixinApi.enabled === "boolean" ? weixinApi.enabled : def.weixinApi.enabled,
+			port: typeof weixinApi.port === "number" && Number.isInteger(weixinApi.port) && weixinApi.port >= 0 ? weixinApi.port : def.weixinApi.port
 		}
 	};
 }
@@ -4816,7 +5198,11 @@ function updateAdvancedSettings(patch) {
 		publicAsk: patch.publicAsk !== void 0 ? {
 			key: typeof patch.publicAsk.key === "string" ? patch.publicAsk.key : current.publicAsk.key,
 			allowed: Array.isArray(patch.publicAsk.allowed) ? patch.publicAsk.allowed.filter((n) => typeof n === "string" && n !== "") : current.publicAsk.allowed
-		} : current.publicAsk
+		} : current.publicAsk,
+		weixinApi: patch.weixinApi !== void 0 ? {
+			enabled: typeof patch.weixinApi.enabled === "boolean" ? patch.weixinApi.enabled : current.weixinApi.enabled,
+			port: typeof patch.weixinApi.port === "number" && Number.isInteger(patch.weixinApi.port) && patch.weixinApi.port >= 0 ? patch.weixinApi.port : current.weixinApi.port
+		} : current.weixinApi
 	};
 	writeAdvancedSettings(next);
 	return next;
@@ -5838,7 +6224,7 @@ function saveFileToTmp(root, fileName, data) {
 	writeFileSync(join(dir, filename), bytes);
 	return `${FILE_UPLOAD_DIR}/${filename}`;
 }
-function readBody$2(req, maxBytes) {
+function readBody$3(req, maxBytes) {
 	return new Promise((resolve, reject) => {
 		let data = "";
 		req.on("data", (chunk) => {
@@ -5852,7 +6238,7 @@ function readBody$2(req, maxBytes) {
 		req.on("error", reject);
 	});
 }
-function sendJson$1(res, code, body) {
+function sendJson$2(res, code, body) {
 	const payload = JSON.stringify(body);
 	res.writeHead(code, {
 		"content-type": "application/json; charset=utf-8",
@@ -5874,10 +6260,10 @@ function resolveWorkspaceCore(sessionCwd, workspaceParam, listCwds, fallback) {
 }
 function resolveWorkspace(ctx, params) {
 	let sessionCwd;
-	if (params.sessionId) sessionCwd = (ctx.sessions?.get?.(params.sessionId))?.header?.cwd;
+	if (params.sessionId) sessionCwd = (hostSessions(ctx)?.get?.(params.sessionId))?.header?.cwd;
 	let listCwds = () => [];
 	try {
-		const sessions = ctx.sessions;
+		const sessions = hostSessions(ctx);
 		if (typeof sessions?.list === "function") listCwds = () => sessions.list().map((s) => s.header?.cwd ?? "").filter(Boolean);
 	} catch {}
 	return resolveWorkspaceCore(sessionCwd, params.workspace, listCwds, process.cwd());
@@ -5890,7 +6276,7 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "GET") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				const url = new URL(req.url ?? "/", "http://127.0.0.1");
@@ -5900,12 +6286,12 @@ function registerStatusApi(ctx, opts = {}) {
 				});
 				const root = findSerenityRoot(workspace);
 				if (!root) {
-					sendJson$1(res, 200, { handymen: [] });
+					sendJson$2(res, 200, { handymen: [] });
 					return;
 				}
-				sendJson$1(res, 200, { handymen: listActiveHandymen(root) });
+				sendJson$2(res, 200, { handymen: listActiveHandymen(root) });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -5915,14 +6301,14 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "POST") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "图片落盘仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "图片落盘仅限 WebUI（client 专用）" });
 					return;
 				}
-				const raw = await readBody$2(req, 20971520);
+				const raw = await readBody$3(req, 20971520);
 				const body = JSON.parse(raw);
 				const workspace = resolveWorkspace(ctx, {
 					sessionId: body.sessionId,
@@ -5930,12 +6316,12 @@ function registerStatusApi(ctx, opts = {}) {
 				});
 				const root = findSerenityRoot(workspace);
 				if (!root) {
-					sendJson$1(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+					sendJson$2(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 					return;
 				}
-				sendJson$1(res, 200, { path: saveImageToTmp(root, body.mediaType ?? "", body.data ?? "") });
+				sendJson$2(res, 200, { path: saveImageToTmp(root, body.mediaType ?? "", body.data ?? "") });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -5945,14 +6331,14 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "POST") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "文件落盘仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "文件落盘仅限 WebUI（client 专用）" });
 					return;
 				}
-				const raw = await readBody$2(req, 20971520);
+				const raw = await readBody$3(req, 20971520);
 				const body = JSON.parse(raw);
 				const workspace = resolveWorkspace(ctx, {
 					sessionId: body.sessionId,
@@ -5960,12 +6346,12 @@ function registerStatusApi(ctx, opts = {}) {
 				});
 				const root = findSerenityRoot(workspace);
 				if (!root) {
-					sendJson$1(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+					sendJson$2(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 					return;
 				}
-				sendJson$1(res, 200, { path: saveFileToTmp(root, body.name ?? "", body.data ?? "") });
+				sendJson$2(res, 200, { path: saveFileToTmp(root, body.name ?? "", body.data ?? "") });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -5981,7 +6367,7 @@ function registerStatusApi(ctx, opts = {}) {
 						workspace: url.searchParams.get("workspace") ?? void 0
 					}), configPaths);
 					const runtime = ctx.get("codeRuntime");
-					sendJson$1(res, 200, {
+					sendJson$2(res, 200, {
 						...status,
 						...runtime === void 0 ? { codeRuntime: null } : { codeRuntime: {
 							language: runtime.language,
@@ -5992,10 +6378,10 @@ function registerStatusApi(ctx, opts = {}) {
 				}
 				if (req.method === "POST") {
 					if (req.headers["x-serenity-ui"] !== "1") {
-						sendJson$1(res, 403, { error: "safe-mode 切换仅限 WebUI（agent 不可自行开关）" });
+						sendJson$2(res, 403, { error: "safe-mode 切换仅限 WebUI（agent 不可自行开关）" });
 						return;
 					}
-					const raw = await readBody$2(req, 65536);
+					const raw = await readBody$3(req, 65536);
 					const body = JSON.parse(raw);
 					const workspace = resolveWorkspace(ctx, {
 						sessionId: body.sessionId,
@@ -6003,19 +6389,19 @@ function registerStatusApi(ctx, opts = {}) {
 					});
 					const root = findSerenityRoot(workspace);
 					if (!root) {
-						sendJson$1(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+						sendJson$2(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 						return;
 					}
 					const result = setSafeMode(root, body.on === true);
-					sendJson$1(res, 200, {
+					sendJson$2(res, 200, {
 						...getStatus(workspace, configPaths),
 						...result
 					});
 					return;
 				}
-				sendJson$1(res, 405, { error: "method not allowed" });
+				sendJson$2(res, 405, { error: "method not allowed" });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6025,34 +6411,33 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "高级设定仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "高级设定仅限 WebUI（client 专用）" });
 					return;
 				}
 				if (req.method === "GET") {
 					const settings = readAdvancedSettings();
 					let known = [];
 					try {
-						const registry = ctx.get?.("workspaceRegistry");
-						known = projectKnownWorkspaces(registry?.list?.() ?? [], settings.gateway.workspaces);
+						known = projectKnownWorkspaces(hostService(ctx, "workspaceRegistry")?.list?.() ?? [], settings.gateway.workspaces);
 					} catch {}
-					sendJson$1(res, 200, {
+					sendJson$2(res, 200, {
 						config: toWire(settings),
 						knownWorkspaces: known
 					});
 					return;
 				}
 				if (req.method === "PUT") {
-					const raw = await readBody$2(req, 131072);
+					const raw = await readBody$3(req, 131072);
 					const saved = applyWirePatch(JSON.parse(raw).config ?? {});
 					try {
 						ctx.emit?.("serenity/config-updated");
 					} catch {}
-					sendJson$1(res, 200, { config: toWire(saved) });
+					sendJson$2(res, 200, { config: toWire(saved) });
 					return;
 				}
-				sendJson$1(res, 405, { error: "method not allowed" });
+				sendJson$2(res, 405, { error: "method not allowed" });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6062,7 +6447,7 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "GET") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				const url = new URL(req.url ?? "/", "http://127.0.0.1");
@@ -6071,10 +6456,10 @@ function registerStatusApi(ctx, opts = {}) {
 					workspace: url.searchParams.get("workspace") ?? void 0
 				});
 				const root = findSerenityRoot(workspace) ?? "";
-				const { discoverCccs } = await import("./skiff-debug-gYigSgl_.js").then((n) => n.i);
-				sendJson$1(res, 200, { cccs: await discoverCccs(ctx, root) });
+				const { discoverCccs } = await import("./skiff-debug-TONJlpgF.js").then((n) => n.i);
+				sendJson$2(res, 200, { cccs: await discoverCccs(ctx, root) });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6084,24 +6469,24 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "仅限 WebUI（key 属敏感凭据）" });
+					sendJson$2(res, 403, { error: "仅限 WebUI（key 属敏感凭据）" });
 					return;
 				}
 				if (req.method === "PUT") {
-					const raw = await readBody$2(req, 16384);
+					const raw = await readBody$3(req, 16384);
 					if (JSON.parse(raw).action !== "rotate") {
-						sendJson$1(res, 400, { error: "unsupported action (expected \"rotate\")" });
+						sendJson$2(res, 400, { error: "unsupported action (expected \"rotate\")" });
 						return;
 					}
-					sendJson$1(res, 200, { key: rotatePublicAskKey() });
+					sendJson$2(res, 200, { key: rotatePublicAskKey() });
 					return;
 				}
 				if (req.method !== "GET") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				const settings = readAdvancedSettings();
-				const { readSimpleSettings } = await import("./settings-section-BfVxgCZy.js").then((n) => n.r);
+				const { readSimpleSettings } = await import("./settings-section-BPk0e1du.js").then((n) => n.r);
 				const simple = readSimpleSettings();
 				const allowed = settings.publicAsk.allowed;
 				const port = simple.acpHttpPort ?? 3100;
@@ -6110,7 +6495,7 @@ function registerStatusApi(ctx, opts = {}) {
 					name,
 					url: `${base}/c/${encodeURIComponent(name)}`
 				}));
-				sendJson$1(res, 200, {
+				sendJson$2(res, 200, {
 					enabled: simple.publicAskEnabled ?? false,
 					port,
 					key: ensurePublicAskKey(),
@@ -6119,7 +6504,7 @@ function registerStatusApi(ctx, opts = {}) {
 					listUrl: `${base}/`
 				});
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6130,13 +6515,13 @@ function registerStatusApi(ctx, opts = {}) {
 			try {
 				if (req.method === "POST") {
 					if (req.headers["x-serenity-ui"] !== "1") {
-						sendJson$1(res, 403, { error: "立即唤起仅限 WebUI（agent 不可自行唤起）" });
+						sendJson$2(res, 403, { error: "立即唤起仅限 WebUI（agent 不可自行唤起）" });
 						return;
 					}
-					const raw = await readBody$2(req, 16384);
+					const raw = await readBody$3(req, 16384);
 					const body = JSON.parse(raw);
 					if (body.action !== "wake") {
-						sendJson$1(res, 400, { error: "unsupported action (expected \"wake\")" });
+						sendJson$2(res, 400, { error: "unsupported action (expected \"wake\")" });
 						return;
 					}
 					const workspace = resolveWorkspace(ctx, {
@@ -6146,21 +6531,21 @@ function registerStatusApi(ctx, opts = {}) {
 					const root = findSerenityRoot(workspace);
 					const effectiveRoot = body.ccc?.trim() || !body.workspace && !body.sessionId ? body.ccc?.trim() ?? (await Promise.resolve().then(() => autopilot_trajectory_exports)).collectAutopilotCccs(ctx)[0] ?? root : root;
 					if (!effectiveRoot) {
-						sendJson$1(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+						sendJson$2(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 						return;
 					}
 					const { performAutopilotWake, readAutopilotSettings } = await Promise.resolve().then(() => autopilot_trajectory_exports);
 					const settings = readAutopilotSettings(effectiveRoot);
 					if (!settings) {
-						sendJson$1(res, 400, { error: "Autopilot Trajectory 未配置（.opencode/serenity.json 缺段）" });
+						sendJson$2(res, 400, { error: "Autopilot Trajectory 未配置（.opencode/serenity.json 缺段）" });
 						return;
 					}
 					const result = await performAutopilotWake(ctx, effectiveRoot, settings, { force: true });
-					sendJson$1(res, result.ok ? 200 : 400, result);
+					sendJson$2(res, result.ok ? 200 : 400, result);
 					return;
 				}
 				if (req.method !== "GET") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				const url = new URL(req.url ?? "/", "http://127.0.0.1");
@@ -6172,12 +6557,12 @@ function registerStatusApi(ctx, opts = {}) {
 				const { getAutopilotStatus, collectAutopilotCccs } = await Promise.resolve().then(() => autopilot_trajectory_exports);
 				const effectiveRoot = url.searchParams.get("ccc")?.trim() ?? (!url.searchParams.get("workspace") && !url.searchParams.get("sessionId") ? collectAutopilotCccs(ctx)[0] : null) ?? root;
 				if (!effectiveRoot) {
-					sendJson$1(res, 200, { status: null });
+					sendJson$2(res, 200, { status: null });
 					return;
 				}
-				sendJson$1(res, 200, { status: getAutopilotStatus(effectiveRoot) });
+				sendJson$2(res, 200, { status: getAutopilotStatus(effectiveRoot) });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6187,28 +6572,28 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "微信桥配置仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "微信桥配置仅限 WebUI（client 专用）" });
 					return;
 				}
 				const url = new URL(req.url ?? "/", "http://127.0.0.1");
 				if (req.method === "GET") {
 					const chk = requireCcc(url.searchParams.get("ccc") ?? void 0);
 					if (!chk.ok) {
-						sendJson$1(res, 400, { error: chk.error });
+						sendJson$2(res, 400, { error: chk.error });
 						return;
 					}
-					const { readWeixinSettings } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
+					const { readWeixinSettings } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 					const { weixinBridgeStatus } = await Promise.resolve().then(() => weixin_bridge_exports);
 					const settings = readWeixinSettings(chk.root);
 					const bridge = weixinBridgeStatus().find((b) => b.ccc === chk.root);
-					const { readWeixinCredential } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
+					const { readWeixinCredential } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 					const accounts = (settings.accounts ?? []).map((a) => ({
 						accountId: a.accountId,
 						name: a.name ?? void 0,
 						enabled: a.enabled !== false,
 						bound: readWeixinCredential(chk.root, a.accountId) !== null
 					}));
-					sendJson$1(res, 200, {
+					sendJson$2(res, 200, {
 						enabled: settings.enabled === true,
 						botType: settings.botType ?? void 0,
 						accounts,
@@ -6218,22 +6603,22 @@ function registerStatusApi(ctx, opts = {}) {
 					return;
 				}
 				if (req.method !== "POST") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
-				const raw = await readBody$2(req, 131072);
+				const raw = await readBody$3(req, 131072);
 				const body = JSON.parse(raw);
 				const chk = requireCcc(body.ccc);
 				if (!chk.ok) {
-					sendJson$1(res, 400, { error: chk.error });
+					sendJson$2(res, 400, { error: chk.error });
 					return;
 				}
 				const root = chk.root;
 				if (body.action === "login-start") {
-					const { fetchQRCode } = await import("./weixin-api-OUCuw0Ws.js").then((n) => n.l);
+					const { fetchQRCode } = await import("./weixin-api-BMpljodH.js").then((n) => n.l);
 					const { randomUUID } = await import("node:crypto");
 					for (const [key, v] of weixinLogins) if (Date.now() - v.startedAt > WEIXIN_LOGIN_TTL_MS) weixinLogins.delete(key);
-					const { readWeixinSettings } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
+					const { readWeixinSettings } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 					const qr = await fetchQRCode({ botType: readWeixinSettings(root).botType ?? void 0 });
 					const loginKey = randomUUID();
 					weixinLogins.set(loginKey, {
@@ -6242,7 +6627,7 @@ function registerStatusApi(ctx, opts = {}) {
 						startedAt: Date.now(),
 						polling: false
 					});
-					sendJson$1(res, 200, {
+					sendJson$2(res, 200, {
 						qrcode: qr.qrcode,
 						qrcode_img_content: qr.qrcode_img_content,
 						loginKey
@@ -6251,40 +6636,40 @@ function registerStatusApi(ctx, opts = {}) {
 				}
 				if (body.action === "remove-account") {
 					if (!body.accountId) {
-						sendJson$1(res, 400, { error: "missing accountId" });
+						sendJson$2(res, 400, { error: "missing accountId" });
 						return;
 					}
-					const { removeWeixinAccount } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
+					const { removeWeixinAccount } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 					const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 					removeWeixinAccount(root, body.accountId);
 					syncCccBridge(ctx, root);
-					sendJson$1(res, 200, { removed: body.accountId });
+					sendJson$2(res, 200, { removed: body.accountId });
 					return;
 				}
 				if (body.action === "save-routes") {
 					const routes = body.routes ?? [];
 					if (!Array.isArray(routes) || routes.some((r) => typeof r?.user !== "string" || typeof r?.role !== "string" || r.user === "" || r.role === "")) {
-						sendJson$1(res, 400, { error: "invalid routes (expected [{user, role}, ...])" });
+						sendJson$2(res, 400, { error: "invalid routes (expected [{user, role}, ...])" });
 						return;
 					}
-					const { saveWeixinRoutes } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
-					const { readSkiffRoles } = await import("./skiff-role-LW4tjF9L.js").then((n) => n.c);
+					const { saveWeixinRoutes } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
+					const { readSkiffRoles } = await import("./skiff-role-DlrbHPLD.js").then((n) => n.c);
 					const roles = readSkiffRoles(root);
 					for (const r of routes) if (!roles.has(r.role)) {
-						sendJson$1(res, 400, { error: `unknown role: ${r.role} (not in ${root} skiff.roles)` });
+						sendJson$2(res, 400, { error: `unknown role: ${r.role} (not in ${root} skiff.roles)` });
 						return;
 					}
 					saveWeixinRoutes(root, routes);
-					sendJson$1(res, 200, { saved: routes.length });
+					sendJson$2(res, 200, { saved: routes.length });
 					return;
 				}
 				if (body.action === "set-enabled") {
 					const enabled = body.enabled === true;
-					const { readWeixinSettings, setWeixinEnabled } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
+					const { readWeixinSettings, setWeixinEnabled } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 					const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 					const settings = readWeixinSettings(root);
 					if (enabled && (settings.accounts ?? []).length === 0) {
-						sendJson$1(res, 400, { error: "启用前请先扫码绑定至少一个账号" });
+						sendJson$2(res, 400, { error: "启用前请先扫码绑定至少一个账号" });
 						return;
 					}
 					setWeixinEnabled(root, enabled);
@@ -6293,12 +6678,12 @@ function registerStatusApi(ctx, opts = {}) {
 						const { stopCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 						stopCccBridge(root);
 					}
-					sendJson$1(res, 200, { enabled });
+					sendJson$2(res, 200, { enabled });
 					return;
 				}
-				sendJson$1(res, 400, { error: `unsupported action: ${body.action ?? ""}` });
+				sendJson$2(res, 400, { error: `unsupported action: ${body.action ?? ""}` });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6308,26 +6693,26 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "微信桥配置仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "微信桥配置仅限 WebUI（client 专用）" });
 					return;
 				}
 				if (req.method !== "GET") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				const key = new URL(req.url ?? "/", "http://127.0.0.1").searchParams.get("key") ?? "";
 				const login = weixinLogins.get(key);
 				if (!login) {
-					sendJson$1(res, 404, { error: "login not found or expired" });
+					sendJson$2(res, 404, { error: "login not found or expired" });
 					return;
 				}
 				if (Date.now() - login.startedAt > WEIXIN_LOGIN_TTL_MS) {
 					weixinLogins.delete(key);
-					sendJson$1(res, 200, { status: "expired" });
+					sendJson$2(res, 200, { status: "expired" });
 					return;
 				}
-				const { pollQRStatus } = await import("./weixin-api-OUCuw0Ws.js").then((n) => n.l);
-				const { readWeixinSettings } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
+				const { pollQRStatus } = await import("./weixin-api-BMpljodH.js").then((n) => n.l);
+				const { readWeixinSettings } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 				const settings = readWeixinSettings(login.root);
 				const status = await pollQRStatus({
 					baseUrl: void 0,
@@ -6336,13 +6721,13 @@ function registerStatusApi(ctx, opts = {}) {
 				switch (status.status) {
 					case "confirmed": {
 						if (!status.bot_token) {
-							sendJson$1(res, 200, {
+							sendJson$2(res, 200, {
 								status: "error",
 								error: "confirmed but no bot_token"
 							});
 							return;
 						}
-						const { upsertWeixinAccount, writeWeixinCredential, nextWeixinAccountId } = await import("./weixin-route-jA0qENOf.js").then((n) => n.u);
+						const { upsertWeixinAccount, writeWeixinCredential, nextWeixinAccountId } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 						const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 						const accountId = nextWeixinAccountId(settings);
 						upsertWeixinAccount(login.root, {
@@ -6357,7 +6742,7 @@ function registerStatusApi(ctx, opts = {}) {
 						});
 						syncCccBridge(ctx, login.root);
 						weixinLogins.delete(key);
-						sendJson$1(res, 200, {
+						sendJson$2(res, 200, {
 							status: "confirmed",
 							accountId,
 							tokenSaved: true
@@ -6366,14 +6751,14 @@ function registerStatusApi(ctx, opts = {}) {
 					}
 					case "expired":
 						weixinLogins.delete(key);
-						sendJson$1(res, 200, { status: "expired" });
+						sendJson$2(res, 200, { status: "expired" });
 						return;
 					default:
-						sendJson$1(res, 200, { status: status.status ?? "wait" });
+						sendJson$2(res, 200, { status: status.status ?? "wait" });
 						return;
 				}
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6395,7 +6780,7 @@ function registerStatusApi(ctx, opts = {}) {
 				const root = sessionsRootDir();
 				if (req.method === "GET") {
 					const { candidates } = performCleanup(root, cutoffDaysAgo(days), liveIds, { dryRun: true });
-					sendJson$1(res, 200, {
+					sendJson$2(res, 200, {
 						root,
 						olderThanDays: days,
 						dryRun: true,
@@ -6409,15 +6794,15 @@ function registerStatusApi(ctx, opts = {}) {
 					return;
 				}
 				if (req.method !== "POST") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "会话清理仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "会话清理仅限 WebUI（client 专用）" });
 					return;
 				}
 				const { result } = performCleanup(root, cutoffDaysAgo(days), liveIds);
-				sendJson$1(res, 200, {
+				sendJson$2(res, 200, {
 					root,
 					olderThanDays: days,
 					dryRun: false,
@@ -6425,7 +6810,7 @@ function registerStatusApi(ctx, opts = {}) {
 					errors: result.errors
 				});
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6859,6 +7244,38 @@ function workspaceDenyResponse(rpcId) {
 	});
 }
 /**
+* 判定 workspace 创建请求的端点（v1.30.6，review F-03）。
+*
+* 宿主 rc.1 的 Remote 端点由 `typertEndpoint({namespace,method})` 派生为
+* `workspace/create`，因此浏览器实际请求 `POST /api/workspace/create`
+* （packages/typert/registry/src/service.ts:63-69；client/connection/src/client/rpc.ts:44）。
+* 旧实现只匹配 `/api/workspace.create` → 该分支从未命中，外部白名单与禁建校验失效。
+* 保留旧端点以兼容旧宿主。
+*/
+function isWorkspaceCreatePath(pathname) {
+	return pathname === "/api/workspace/create" || pathname === "/api/workspace.create";
+}
+/**
+* 从 workspace 创建请求体解析 `{ rpcId, path }`（v1.30.6，review F-03）。
+*
+* rc.1 wire 信封：`{ type:'client-request', rpcId, method:'workspace/create',
+* payload:{ args:{ path } } }`（packages/api/gateway/src/index.ts:955 `args: payload.args`）；
+* 旧宿主为 `payload.path`。解析失败返回 rpcId='unknown' + path=undefined。
+*/
+function parseWorkspaceCreateBody(body) {
+	try {
+		const parsed = JSON.parse(body);
+		const rpcId = typeof parsed.rpcId === "string" ? parsed.rpcId : "unknown";
+		const raw = parsed.payload?.args?.path ?? parsed.payload?.path;
+		return typeof raw === "string" ? {
+			rpcId,
+			path: raw
+		} : { rpcId };
+	} catch {
+		return { rpcId: "unknown" };
+	}
+}
+/**
 * 在 HTML 的 </head> 前注入 polyfill（幂等：含 marker 则跳过）
 */
 function injectPolyfillHtml(html) {
@@ -6978,7 +7395,7 @@ function createDshCookieProvider(connection, authority) {
 //#endregion
 //#region src/gateway.ts
 /** 读取请求体（≤ maxBytes；超限 reject） */
-function readBody$1(req, maxBytes) {
+function readBody$2(req, maxBytes) {
 	return new Promise((resolve, reject) => {
 		let data = "";
 		req.on("data", (chunk) => {
@@ -7102,14 +7519,10 @@ function startGateway(config, getAccounts, getDshCookie) {
 		}
 		const session = authed(req);
 		if (session !== void 0) {
-			if (req.method === "POST" && url.pathname === "/api/workspace.create") {
-				if (!allowWorkspaceCreate) {
-					readBody$1(req, 131072).then((body) => {
-						let rpcId = "unknown";
-						try {
-							const parsed = JSON.parse(body);
-							if (typeof parsed.rpcId === "string") rpcId = parsed.rpcId;
-						} catch {}
+			if (req.method === "POST" && isWorkspaceCreatePath(url.pathname)) {
+				readBody$2(req, 131072).then((body) => {
+					const { rpcId, path } = parseWorkspaceCreateBody(body);
+					if (!allowWorkspaceCreate) {
 						res.writeHead(403, { "content-type": "application/json" });
 						res.end(JSON.stringify({
 							type: "server-response",
@@ -7123,31 +7536,8 @@ function startGateway(config, getAccounts, getDshCookie) {
 								}
 							}
 						}));
-					}).catch(() => {
-						res.writeHead(400, { "content-type": "application/json" });
-						res.end(JSON.stringify({
-							type: "server-response",
-							rpcId: "unknown",
-							result: {
-								ok: false,
-								error: {
-									code: "bad-request",
-									message: "body too large",
-									details: {}
-								}
-							}
-						}));
-					});
-					return;
-				}
-				readBody$1(req, 131072).then((body) => {
-					let rpcId = "unknown";
-					let path;
-					try {
-						const parsed = JSON.parse(body);
-						if (typeof parsed.rpcId === "string") rpcId = parsed.rpcId;
-						if (typeof parsed.payload?.path === "string") path = parsed.payload.path;
-					} catch {}
+						return;
+					}
 					if (!workspaceAllowed(allowWorkspaces, path)) {
 						res.writeHead(403, { "content-type": "application/json" });
 						res.end(workspaceDenyResponse(rpcId));
@@ -7372,7 +7762,7 @@ function buildDshCookieProvider(ctx, mainPort) {
 	let diagnosed = false;
 	return () => {
 		try {
-			const connection = ctx.get?.("connection");
+			const connection = hostService(ctx, "connection");
 			if (!connection || typeof connection.authenticatedUrl !== "function" || typeof connection.authorizeIndex !== "function") {
 				if (!diagnosed) {
 					diagnosed = true;
@@ -7404,7 +7794,7 @@ function registerGateway(ctx) {
 	let lastSig = null;
 	const sync = () => {
 		try {
-			const webServer = ctx.get?.("webServer");
+			const webServer = hostWebServer(ctx);
 			if (!webServer?.port) return;
 			const enabled = readSimpleSettings().gatewayEnabled;
 			const settings = readAdvancedSettings();
@@ -7455,6 +7845,11 @@ function registerGateway(ctx) {
 	ctx.on("serenity/settings-changed", () => {
 		sync();
 	});
+	registerDisposer(ctx, "gateway 第二监听器", () => {
+		current?.dispose();
+		current = null;
+		lastSig = null;
+	});
 }
 //#endregion
 //#region src/rebuild.ts
@@ -7702,7 +8097,7 @@ function renameAfterRebuild(ctx, agent, pending) {
 			dirName,
 			mdPath
 		}, pending.summary);
-		const titles = ctx.get?.("sessionTitle");
+		const titles = hostService(ctx, "sessionTitle");
 		if (!titles || typeof titles.rename !== "function") {
 			console.warn("[serenity-hooks] rebuild 后重命名跳过: sessionTitle 服务不可用");
 			return;
@@ -7738,7 +8133,7 @@ function registerRebuildTurnHook(ctx) {
 		}
 		pendingRebuilds.delete(id);
 		try {
-			const tokenMeter = ctx.get?.("tokenMeter");
+			const tokenMeter = hostService(ctx, "tokenMeter");
 			const meter = tokenMeter && typeof tokenMeter.estimateMessage === "function" ? { estimateMessage: (m) => tokenMeter.estimateMessage(m) } : void 0;
 			if (performRebuild(agent.session, pending, meter)) {
 				renameAfterRebuild(ctx, agent, pending);
@@ -8096,14 +8491,14 @@ var AcpServer = class {
 			sessionId: result.sessionId
 		};
 	}
-	/** session/cancel：{ sessionId } → 中断当前 prompt（DSH interrupt） */
+	/** session/cancel：{ sessionId } → 取消该会话的当前活动（Agent.cancel，宿主 rc.1 契约） */
 	cancel(params) {
 		const sessionId = typeof params?.sessionId === "string" ? params.sessionId : void 0;
 		if (!sessionId) return { cancelled: false };
 		const agent = getSkiffAgent(sessionId);
 		if (!agent) return { cancelled: false };
 		try {
-			agent.interrupt?.();
+			agent.cancel({ kind: "user" });
 		} catch {}
 		return { cancelled: true };
 	}
@@ -8192,8 +8587,8 @@ function rpcError(id, code, message) {
 * 实验性质：未开启时零资源占用（无监听、无 agent 创建）。
 */
 /** 运行中的 ACP HTTP 服务（单实例；进程级） */
-let active = null;
-function readBody(req) {
+let active$1 = null;
+function readBody$1(req) {
 	return new Promise((resolve, reject) => {
 		const chunks = [];
 		req.on("data", (c) => chunks.push(c));
@@ -8201,7 +8596,7 @@ function readBody(req) {
 		req.on("error", reject);
 	});
 }
-function sendJson(res, status, payload) {
+function sendJson$1(res, status, payload) {
 	const body = jscSafeJsonText(JSON.stringify(payload));
 	res.writeHead(status, {
 		"Content-Type": "application/json; charset=utf-8",
@@ -8223,7 +8618,7 @@ function sendHtml(res, html) {
 * @param defaultRoot 默认 CCC 根（问答页候选发现兜底；resolveSkiffRoot 传入）
 */
 async function startAcpHttpServer(ctx, port, defaultRoot) {
-	if (active) return;
+	if (active$1) return;
 	const server = createServer((req, res) => {
 		handle(ctx, defaultRoot ?? "", req, res);
 	});
@@ -8231,7 +8626,7 @@ async function startAcpHttpServer(ctx, port, defaultRoot) {
 		server.once("error", reject);
 		server.listen(port, "127.0.0.1", () => resolve());
 	});
-	active = {
+	active$1 = {
 		server,
 		port
 	};
@@ -8242,11 +8637,11 @@ async function startAcpHttpServer(ctx, port, defaultRoot) {
 	console.log(`[serenity-hooks] ✓ ACP HTTP: http://127.0.0.1:${port}（${faces.join(" + ") || "未开启任何面"}；session/new 支持 {ccc, role, sessionId?}）`);
 }
 function stopAcpHttpServer() {
-	if (!active) return;
+	if (!active$1) return;
 	try {
-		active.server.close();
+		active$1.server.close();
 	} catch {}
-	active = null;
+	active$1 = null;
 }
 async function handle(ctx, defaultRoot, req, res) {
 	try {
@@ -8255,14 +8650,14 @@ async function handle(ctx, defaultRoot, req, res) {
 		const ip = req.headers["x-forwarded-for"]?.split(",")[0]?.trim() || req.socket.remoteAddress || "unknown";
 		if (req.method === "POST" && url === "/") {
 			if (!s.acpEnabled) {
-				sendJson(res, 403, { error: "ACP JSON-RPC disabled (enable in Serenity settings)" });
+				sendJson$1(res, 403, { error: "ACP JSON-RPC disabled (enable in Serenity settings)" });
 				return;
 			}
 			let body;
 			try {
-				body = JSON.parse(await readBody(req));
+				body = JSON.parse(await readBody$1(req));
 			} catch {
-				sendJson(res, 400, [{
+				sendJson$1(res, 400, [{
 					jsonrpc: "2.0",
 					id: null,
 					error: {
@@ -8272,7 +8667,7 @@ async function handle(ctx, defaultRoot, req, res) {
 				}]);
 				return;
 			}
-			sendJson(res, 200, await dispatchRpc(new AcpServer(ctx), body));
+			sendJson$1(res, 200, await dispatchRpc(new AcpServer(ctx), body));
 			return;
 		}
 		if (!s.publicAskEnabled) {
@@ -8281,10 +8676,10 @@ async function handle(ctx, defaultRoot, req, res) {
 				return;
 			}
 			if (req.method === "POST" && (url === "/ask" || url.startsWith("/c/"))) {
-				sendJson(res, 403, { error: "public ask disabled (enable in Serenity settings)" });
+				sendJson$1(res, 403, { error: "public ask disabled (enable in Serenity settings)" });
 				return;
 			}
-			sendJson(res, 404, { error: "not found" });
+			sendJson$1(res, 404, { error: "not found" });
 			return;
 		}
 		const containerAllowed = (name) => {
@@ -8315,16 +8710,16 @@ async function handle(ctx, defaultRoot, req, res) {
 			const name = decodeURIComponent(aMatch[1] ?? "");
 			const ccc = (await discoverCccs(ctx, defaultRoot || (findSerenityRoot(process.cwd()) ?? ""))).find((c) => c.name === name);
 			if (!ccc || !containerAllowed(name)) {
-				sendJson(res, 403, { error: `container "${name}" is not open for public ask` });
+				sendJson$1(res, 403, { error: `container "${name}" is not open for public ask` });
 				return;
 			}
 			let body;
 			try {
-				const parsed = JSON.parse(await readBody(req));
+				const parsed = JSON.parse(await readBody$1(req));
 				if (parsed === null || typeof parsed !== "object") throw new Error("not an object");
 				body = parsed;
 			} catch {
-				sendJson(res, 400, { error: "invalid JSON body" });
+				sendJson$1(res, 400, { error: "invalid JSON body" });
 				return;
 			}
 			await handleAskParsed(ctx, ccc, body, res, ip);
@@ -8333,11 +8728,11 @@ async function handle(ctx, defaultRoot, req, res) {
 		if (req.method === "POST" && url === "/ask") {
 			let body;
 			try {
-				const parsed = JSON.parse(await readBody(req));
+				const parsed = JSON.parse(await readBody$1(req));
 				if (parsed === null || typeof parsed !== "object") throw new Error("not an object");
 				body = parsed;
 			} catch {
-				sendJson(res, 400, { error: "invalid JSON body" });
+				sendJson$1(res, 400, { error: "invalid JSON body" });
 				return;
 			}
 			const cccValue = typeof body.ccc === "string" && body.ccc !== "" ? body.ccc : void 0;
@@ -8353,15 +8748,15 @@ async function handle(ctx, defaultRoot, req, res) {
 				};
 			}
 			if (!ccc || !containerAllowed(ccc.name)) {
-				sendJson(res, 403, { error: "container is not open for public ask" });
+				sendJson$1(res, 403, { error: "container is not open for public ask" });
 				return;
 			}
 			await handleAskParsed(ctx, ccc, body, res, ip);
 			return;
 		}
-		sendJson(res, 404, { error: "not found" });
+		sendJson$1(res, 404, { error: "not found" });
 	} catch (err) {
-		sendJson(res, 500, { error: err?.message ?? String(err) });
+		sendJson$1(res, 500, { error: err?.message ?? String(err) });
 	}
 }
 /**
@@ -8373,12 +8768,12 @@ async function handle(ctx, defaultRoot, req, res) {
 async function handleAskParsed(ctx, ccc, body, res, ip) {
 	const key = typeof body.key === "string" ? body.key : void 0;
 	if (isPublicAskIpLocked(ip)) {
-		sendJson(res, 429, { error: "too many failed attempts — temporarily locked (retry later)" });
+		sendJson$1(res, 429, { error: "too many failed attempts — temporarily locked (retry later)" });
 		return;
 	}
 	if (!verifyPublicAskKey(key)) {
 		const remaining = recordPublicAskFail(ip);
-		sendJson(res, remaining > 0 ? 429 : 401, { error: remaining > 0 ? `too many failed attempts — locked for ${Math.ceil(remaining / 6e4)} min` : "invalid or missing key" });
+		sendJson$1(res, remaining > 0 ? 429 : 401, { error: remaining > 0 ? `too many failed attempts — locked for ${Math.ceil(remaining / 6e4)} min` : "invalid or missing key" });
 		return;
 	}
 	resetPublicAskIpFail(ip);
@@ -8387,7 +8782,7 @@ async function handleAskParsed(ctx, ccc, body, res, ip) {
 	const question = typeof body.question === "string" ? body.question : "";
 	const sessionId = typeof body.sessionId === "string" && body.sessionId !== "" ? body.sessionId : void 0;
 	if (!question.trim()) {
-		sendJson(res, 400, { error: "empty question" });
+		sendJson$1(res, 400, { error: "empty question" });
 		return;
 	}
 	const roles = readSkiffRoles(root);
@@ -8395,7 +8790,7 @@ async function handleAskParsed(ctx, ccc, body, res, ip) {
 	const effectiveRole = roleName && explicit ? roleName : roles.keys().next().value;
 	const effectiveCfg = (roleName && explicit ? explicit : effectiveRole ? roles.get(effectiveRole) : void 0) ?? void 0;
 	if (!effectiveRole || !effectiveCfg) {
-		sendJson(res, 400, { error: `no skiff role available in ccc: ${root}` });
+		sendJson$1(res, 400, { error: `no skiff role available in ccc: ${root}` });
 		return;
 	}
 	let agent;
@@ -8413,7 +8808,7 @@ async function handleAskParsed(ctx, ccc, body, res, ip) {
 		agent = (await createSkiffAgent(ctx, root, effectiveRole, effectiveCfg, hc?.defaultModel)).agent;
 	}
 	const result = await askSkiff(ctx, agent, question, void 0, { includeTrajectory: false });
-	sendJson(res, 200, {
+	sendJson$1(res, 200, {
 		answer: result.answer,
 		answer_html: renderSkiffMarkdown(result.answer, true),
 		sessionId: result.sessionId,
@@ -8794,7 +9189,8 @@ function buildOutgoingHookEvent(input) {
 		userId: input.userId,
 		sessionId: input.sessionId,
 		role: input.role,
-		reply: input.reply
+		reply: input.reply,
+		...input.source === "proactive" ? { source: "proactive" } : {}
 	};
 }
 /**
@@ -8909,6 +9305,8 @@ function invokeWeixinHook(root, hookRel, event) {
 var weixin_bridge_exports = /* @__PURE__ */ __exportAll({
 	handleIncoming: () => handleIncoming,
 	registerWeixinBridge: () => registerWeixinBridge,
+	sendProactiveText: () => sendProactiveText,
+	stopAllBridges: () => stopAllBridges,
 	stopCccBridge: () => stopCccBridge,
 	syncCccBridge: () => syncCccBridge,
 	weixinBridgeStatus: () => weixinBridgeStatus
@@ -9037,7 +9435,7 @@ async function handleIncoming(ctx, root, accountId, cred, msg) {
 		const existing = getSkiffAgent(sessionId);
 		const hc = readHandymanConfig(root);
 		if (existing) try {
-			ensureSkiffSession(root, existing, roleName, role);
+			ensureSkiffSession(root, existing, roleName, role, true);
 		} catch (err) {
 			console.warn(`[serenity-hooks] weixin-bridge ensure 失败（不影响处理）: ${String(err?.message ?? err)}`);
 		}
@@ -9188,6 +9586,93 @@ function stopCccBridge(root) {
 	for (const loop of bridge.loops.values()) loop.stopped = true;
 	bridges.delete(root);
 }
+/**
+* 停止全部桥（插件 dispose）
+*/
+function stopAllBridges() {
+	for (const bridge of bridges.values()) for (const loop of bridge.loops.values()) loop.stopped = true;
+	bridges.clear();
+}
+/**
+* 以 bot 身份主动给指定用户发文本（**不经用户消息触发**）。
+*
+* 为什么放在桥里而不是让 CCC 自己直连 iLink（用户拍板 A 方案）：
+* ① **记录归桥**——发送成功后触发既有 outgoing hook，`_weixin-logs/*.jsonl` 与对话回复
+*    同源同格式（事件多一个 `source: 'proactive'` 标记）；② 协议/账号/凭据解析单一真相源，
+*    CCC 侧不必重复实现 sendmessage；③ 多账号可选。
+*
+* 记录一致性：`sessionId` 取 `weixinSessionIdFor(toUserId)`——与该用户平时对话**同一条轨迹**，
+* 记录里能直接按会话串联；`role` 取该 CCC 路由命中角色（未命中 → 空串）。
+*
+* 主动消息不带 context_token（iLink 接受 bot 主动发起；带 token 的路径见 handleIncoming 回复）。
+* @param input CCC 根 + 目标用户 + 文本 +（可选）账号
+* @returns 成功含 accountId/userId/sessionId/role；失败含稳定 code 与可行动提示（不抛错）
+*/
+async function sendProactiveText(input) {
+	const { root, toUserId } = input;
+	const settings = readWeixinSettings(root);
+	if (!settings.enabled) return {
+		ok: false,
+		code: "BRIDGE_DISABLED",
+		error: `微信桥未启用（ccc=${root}）`,
+		remediation: "在 CCC 的 .opencode/serenity.json weixin.enabled 打开"
+	};
+	const accounts = (settings.accounts ?? []).filter((a) => a.enabled !== false);
+	if (accounts.length === 0) return {
+		ok: false,
+		code: "NO_ACCOUNT",
+		error: "微信桥未配置任何启用账号",
+		remediation: "在设置面板「微信桥」扫码绑定账号"
+	};
+	const accountId = input.accountId ?? accounts[0].accountId;
+	if (!accounts.some((a) => a.accountId === accountId)) return {
+		ok: false,
+		code: "ACCOUNT_NOT_FOUND",
+		error: `账号不存在或未启用: ${accountId}`,
+		remediation: `可用账号: ${accounts.map((a) => a.accountId).join(", ")}`
+	};
+	const cred = readWeixinCredential(root, accountId);
+	if (!cred) return {
+		ok: false,
+		code: "ACCOUNT_NOT_BOUND",
+		error: `账号未绑定（无凭据）: ${accountId}`,
+		remediation: "在设置面板重新扫码绑定"
+	};
+	const sessionId = weixinSessionIdFor(toUserId);
+	const role = matchWeixinRoute(settings.routes ?? [], toUserId) ?? "";
+	try {
+		await sendTextMessage({
+			baseUrl: cred.baseUrl,
+			token: cred.token,
+			toUserId,
+			text: input.text
+		});
+	} catch (err) {
+		return {
+			ok: false,
+			code: "SEND_FAILED",
+			error: `发送失败: ${err instanceof Error ? err.message : String(err)}`
+		};
+	}
+	if (settings.hook) invokeWeixinHook(root, settings.hook, buildOutgoingHookEvent({
+		cccRoot: root,
+		accountId,
+		userId: toUserId,
+		sessionId,
+		role,
+		reply: markdownToPlainText(input.text),
+		source: "proactive"
+	})).catch((err) => {
+		console.log(`[serenity-hooks] weixin hook outgoing(proactive) error: ${err instanceof Error ? err.message : String(err)}`);
+	});
+	return {
+		ok: true,
+		accountId,
+		userId: toUserId,
+		sessionId,
+		role
+	};
+}
 /** 桥状态快照（面板数据源）：每 CCC → 每账号 → 轮询健康 */
 function weixinBridgeStatus() {
 	const out = [];
@@ -9208,7 +9693,7 @@ function weixinBridgeStatus() {
 function registerWeixinBridge(ctx) {
 	const syncFromLive = () => {
 		try {
-			const cwds = (ctx.sessions?.list?.() ?? []).map((s) => s.header?.cwd ?? "").filter(Boolean);
+			const cwds = (hostSessions(ctx)?.list?.() ?? []).map((s) => s.header?.cwd ?? "").filter(Boolean);
 			const roots = [...new Set(cwds.map((c) => findSerenityRoot(c))).values()].filter((r) => r !== null);
 			for (const root of roots) syncCccBridge(ctx, root);
 		} catch {}
@@ -9219,6 +9704,410 @@ function registerWeixinBridge(ctx) {
 	} catch {}
 }
 //#endregion
+//#region src/weixin-send-api.ts
+/**
+* weixin-send-api.ts — 主动发送入口（S142 v1.30.9，用户需求"微信桥支持被调用发消息给指定用户"）
+*
+* 形态（用户拍板 A2）：**独立监听器，只绑 127.0.0.1**（默认 3082，plugin 全局配置 weixinApi）。
+* 为什么不挂在主 webServer(3080) 上：3080 会被 3081 公网网关原样反代（含全部请求头），
+* 而 3081 的登录态属于"家庭账号"——一旦挂上去，任何已登录的外部用户都能冒充 bot 发消息。
+* 独立 loopback 监听器则**不经网关、公网不可达**，因此不做共享密钥；仍校验来源地址。
+*
+* 调用者 = CCC 自己的 MSM（`msm weixin-send ...`）：ACC **不新增工具**，只多一个本机 HTTP 面。
+* 发送与记录都经 `weixin-bridge.sendProactiveText` → 复用既有 outgoing hook（`source: 'proactive'`）。
+*
+* 契约：
+*   POST /send   { ccc: "<名称|绝对路径>", user: "<from_user_id>", text: "...", accountId?: "wechat-1" }
+*     → 200 { ok: true, accountId, userId, sessionId, role }
+*     → 4xx/5xx { ok: false, code, error, remediation? }
+*   GET  /health → 200 { ok: true, port }
+*
+* 职责切分（E↑）：**别名 → id 的解析归 CCC**（MSM 读该 CCC localstore 的 WEIXIN_USER_*）；
+* 本入口只接受 iLink 形式的 id。协议、账号选择、记录归桥。
+*/
+/** 请求体上限（文本消息远小于此；防滥用） */
+const MAX_BODY_BYTES = 65536;
+/** 文本长度上限（微信侧单条消息实践上限；超限拒绝而非静默截断） */
+const WEIXIN_SEND_MAX_TEXT = 4e3;
+/** 运行中的入口（null = 未启动） */
+let active = null;
+/** 当前入口地址（MSM 环境变量注入用；未启动 → null）——状态在叶模块（msm-ops 零依赖读取） */
+/** 测试辅助：读取当前监听端口（生产零调用） */
+function weixinSendPort() {
+	return active?.port ?? null;
+}
+/** 来源必须是 loopback（127.0.0.1 / ::1 / IPv4-mapped） */
+function isLoopbackAddress(address) {
+	if (typeof address !== "string" || address === "") return false;
+	const a = address.startsWith("::ffff:") ? address.slice(7) : address;
+	return a === "127.0.0.1" || a === "::1";
+}
+/**
+* 校验并归一 /send 请求体（纯函数，可测）。
+* 只做**结构**校验：ccc 必填（无隐式当前 CCC——用户拍板）、user 必须是 iLink id 形式、text 非空且不超限。
+*/
+function parseSendRequest(body) {
+	if (body === null || typeof body !== "object") return {
+		ok: false,
+		error: "body must be a JSON object"
+	};
+	const o = body;
+	const ccc = typeof o.ccc === "string" ? o.ccc.trim() : "";
+	if (ccc === "") return {
+		ok: false,
+		error: "missing \"ccc\"",
+		remediation: "ccc = CCC 名称或绝对路径（必填，无默认值）"
+	};
+	const user = typeof o.user === "string" ? o.user.trim() : "";
+	if (user === "") return {
+		ok: false,
+		error: "missing \"user\"",
+		remediation: "user = iLink from_user_id（形如 xxx@im.wechat）；别名解析归调用方"
+	};
+	if (!user.includes("@")) return {
+		ok: false,
+		error: `invalid "user": ${user}`,
+		remediation: "需为 iLink from_user_id（含 @）；别名（yh/danica）请在调用方解析"
+	};
+	const text = typeof o.text === "string" ? o.text.trim() : "";
+	if (text === "") return {
+		ok: false,
+		error: "missing \"text\"",
+		remediation: "text = 要发送的文本（非空）"
+	};
+	if (text.length > 4e3) return {
+		ok: false,
+		error: `text too long: ${text.length} > ${WEIXIN_SEND_MAX_TEXT}`
+	};
+	const accountId = typeof o.accountId === "string" && o.accountId.trim() !== "" ? o.accountId.trim() : void 0;
+	return {
+		ok: true,
+		ccc,
+		user,
+		text,
+		...accountId ? { accountId } : {}
+	};
+}
+/**
+* 按名称/路径解析 CCC 根（纯函数，可测）。
+* 匹配顺序：① 绝对路径精确/上溯 ② 目录名 ③ `.serenity` 首行名（大小写不敏感）。
+* 歧义（多个同名）→ 报错并列出候选（不猜——用户拍板"ccc 必须指定"）。
+*/
+function matchCcc(input, candidates) {
+	const trimmed = input.trim();
+	if (trimmed === "") return {
+		ok: false,
+		error: "empty ccc"
+	};
+	if (trimmed.startsWith("/")) {
+		const root = findSerenityRoot(trimmed);
+		if (!root) return {
+			ok: false,
+			error: `no CCC found from path: ${trimmed}`,
+			remediation: "确认该路径在某个 CCC 内（含 .serenity 标记）"
+		};
+		return {
+			ok: true,
+			root
+		};
+	}
+	const lower = trimmed.toLowerCase();
+	const exactPath = candidates.find((c) => c.root.toLowerCase() === lower);
+	if (exactPath) return {
+		ok: true,
+		root: exactPath.root
+	};
+	const byName = candidates.filter((c) => c.dirName.toLowerCase() === lower || c.cccName !== null && c.cccName.toLowerCase() === lower);
+	if (byName.length === 1) return {
+		ok: true,
+		root: byName[0].root
+	};
+	if (byName.length > 1) return {
+		ok: false,
+		error: `ambiguous ccc name: ${trimmed}`,
+		remediation: `同名多个，请用绝对路径：${byName.map((c) => c.root).join(" | ")}`
+	};
+	return {
+		ok: false,
+		error: `unknown ccc: ${trimmed}`,
+		remediation: candidates.length === 0 ? "当前进程未发现任何 CCC（打开一个 CCC 会话后重试）" : `已知 CCC: ${candidates.map((c) => c.dirName).join(", ")}`
+	};
+}
+/** 组装候选列表（discoverCccs 投影 + `.serenity` 名；动态 import 保持本模块静态依赖轻量） */
+async function collectCandidates(ctx) {
+	const { discoverCccs } = await import("./skiff-debug-TONJlpgF.js").then((n) => n.i);
+	const entries = await discoverCccs(ctx, process.cwd());
+	const seen = /* @__PURE__ */ new Set();
+	const out = [];
+	for (const e of entries) {
+		if (!e?.root || seen.has(e.root)) continue;
+		seen.add(e.root);
+		out.push({
+			root: e.root,
+			dirName: e.name || basename(e.root),
+			cccName: readCccName$2(e.root)
+		});
+	}
+	return out;
+}
+function sendJson(res, status, payload) {
+	const body = JSON.stringify(payload);
+	res.writeHead(status, {
+		"content-type": "application/json; charset=utf-8",
+		"content-length": Buffer.byteLength(body)
+	});
+	res.end(body);
+}
+async function readBody(req) {
+	const chunks = [];
+	let total = 0;
+	for await (const chunk of req) {
+		const buf = chunk;
+		total += buf.length;
+		if (total > MAX_BODY_BYTES) throw new Error(`body too large (> ${MAX_BODY_BYTES} bytes)`);
+		chunks.push(buf);
+	}
+	return Buffer.concat(chunks).toString("utf-8");
+}
+/** HTTP 状态映射（失败 code → 语义化状态；调用方按 code 判定，不看文案） */
+function statusForCode(code) {
+	switch (code) {
+		case "ACCOUNT_NOT_BOUND":
+		case "BRIDGE_DISABLED":
+		case "NO_ACCOUNT": return 409;
+		case "ACCOUNT_NOT_FOUND": return 400;
+		case "SEND_FAILED": return 502;
+		default: return 400;
+	}
+}
+/** 单请求处理（导出供测试直接驱动，不经真实端口） */
+async function handleWeixinSendRequest(ctx, req, res) {
+	if (!isLoopbackAddress(req.socket?.remoteAddress)) {
+		sendJson(res, 403, {
+			ok: false,
+			code: "FORBIDDEN",
+			error: "only loopback clients allowed"
+		});
+		return;
+	}
+	const path = (req.url ?? "/").split("?")[0];
+	if (req.method === "GET" && path === "/health") {
+		sendJson(res, 200, {
+			ok: true,
+			port: weixinSendPort()
+		});
+		return;
+	}
+	if (path !== "/send") {
+		sendJson(res, 404, {
+			ok: false,
+			code: "NOT_FOUND",
+			error: `unknown path: ${path}`
+		});
+		return;
+	}
+	if (req.method !== "POST") {
+		sendJson(res, 405, {
+			ok: false,
+			code: "METHOD_NOT_ALLOWED",
+			error: "use POST /send"
+		});
+		return;
+	}
+	let raw;
+	try {
+		raw = await readBody(req);
+	} catch (err) {
+		sendJson(res, 413, {
+			ok: false,
+			code: "BODY_TOO_LARGE",
+			error: String(err?.message ?? err)
+		});
+		return;
+	}
+	let body;
+	try {
+		body = JSON.parse(raw === "" ? "{}" : raw);
+	} catch (err) {
+		sendJson(res, 400, {
+			ok: false,
+			code: "BAD_JSON",
+			error: `invalid JSON: ${String(err?.message ?? err)}`
+		});
+		return;
+	}
+	const parsed = parseSendRequest(body);
+	if (!parsed.ok) {
+		sendJson(res, 400, {
+			ok: false,
+			code: "BAD_REQUEST",
+			error: parsed.error,
+			remediation: parsed.remediation
+		});
+		return;
+	}
+	let root;
+	try {
+		const matched = matchCcc(parsed.ccc, await collectCandidates(ctx));
+		if (!matched.ok) {
+			sendJson(res, 404, {
+				ok: false,
+				code: "UNKNOWN_CCC",
+				error: matched.error,
+				remediation: matched.remediation
+			});
+			return;
+		}
+		root = matched.root;
+	} catch (err) {
+		sendJson(res, 500, {
+			ok: false,
+			code: "CCC_DISCOVERY_FAILED",
+			error: String(err?.message ?? err)
+		});
+		return;
+	}
+	const result = await sendProactiveText({
+		root,
+		toUserId: parsed.user,
+		text: parsed.text,
+		...parsed.accountId ? { accountId: parsed.accountId } : {}
+	});
+	if (result.ok) {
+		sendJson(res, 200, {
+			ok: true,
+			accountId: result.accountId,
+			userId: result.userId,
+			sessionId: result.sessionId,
+			role: result.role
+		});
+		return;
+	}
+	sendJson(res, statusForCode(result.code), {
+		ok: false,
+		code: result.code,
+		error: result.error,
+		remediation: result.remediation
+	});
+}
+/** 启动监听器（仅 127.0.0.1）；已启动 → 幂等返回 */
+async function startWeixinSendApi(ctx, port) {
+	if (active) return active.port;
+	const server = createServer((req, res) => {
+		handleWeixinSendRequest(ctx, req, res).catch((err) => {
+			console.warn(`[serenity-hooks] ✗ weixin send api 处理失败: ${String(err?.message ?? err)}`);
+			try {
+				sendJson(res, 500, {
+					ok: false,
+					code: "INTERNAL",
+					error: "internal error"
+				});
+			} catch {}
+		});
+	});
+	await new Promise((resolve, reject) => {
+		server.once("error", reject);
+		server.listen(port, "127.0.0.1", () => resolve());
+	});
+	server.unref();
+	const addr = server.address();
+	const actualPort = typeof addr === "object" && addr !== null ? addr.port : port;
+	active = {
+		server,
+		port: actualPort
+	};
+	setWeixinSendEndpoint(`http://127.0.0.1:${actualPort}`);
+	console.log(`[serenity-hooks] ✓ 微信主动发送入口: http://127.0.0.1:${actualPort}/send（仅 loopback；CCC MSM 调用）`);
+	return actualPort;
+}
+/** 停止监听器（幂等） */
+function stopWeixinSendApi() {
+	if (!active) return;
+	try {
+		active.server.close();
+	} catch {}
+	active = null;
+	setWeixinSendEndpoint(null);
+}
+/**
+* 装配（index.ts apply 调用）：按 plugin 全局配置 weixinApi 启停，配置变化热同步。
+* 默认启用（仅 loopback，零公网暴露）；`enabled:false` 或 `port:0` 关闭。
+*/
+function registerWeixinSendApi(ctx) {
+	const sync = () => {
+		let cfg;
+		try {
+			cfg = readAdvancedSettings().weixinApi;
+		} catch (err) {
+			console.warn(`[serenity-hooks] ✗ weixin send api 配置读取失败，跳过同步: ${String(err?.message ?? err)}`);
+			return;
+		}
+		const want = cfg.enabled && cfg.port > 0;
+		if (want && !active) {
+			startWeixinSendApi(ctx, cfg.port).catch((err) => {
+				console.warn(`[serenity-hooks] ✗ 微信主动发送入口启动失败（port=${cfg.port}）: ${String(err?.message ?? err)}`);
+			});
+			return;
+		}
+		if (!want && active) stopWeixinSendApi();
+	};
+	try {
+		ctx.on("serenity/config-updated", sync);
+	} catch {}
+	try {
+		ctx.on("serenity/settings-changed", sync);
+	} catch {}
+	sync();
+	registerDisposer(ctx, "weixin send api", () => stopWeixinSendApi());
+}
+//#endregion
+//#region src/seams/lifecycle.ts
+/** 从 Agent / Session / 事件负载中取会话 id（形状宽容：未知结构返回 null） */
+function sessionIdOf(value) {
+	const v = value;
+	const id = v?.session?.id ?? v?.id ?? v?.header?.id;
+	return typeof id === "string" && id !== "" ? id : null;
+}
+/** 单会话内存态清理（幂等；无对应状态即 no-op） */
+function cleanupSessionState(sessionId) {
+	try {
+		unregisterSkiffSession(sessionId);
+	} catch {}
+	try {
+		clearActiveSessionInfo(sessionId);
+	} catch {}
+}
+/**
+* 装配生命周期订阅与资源拆卸。
+* @param ctx 宿主插件上下文
+*/
+function registerLifecycle(ctx) {
+	try {
+		ctx.on("agent/disposed", (payload) => {
+			const id = sessionIdOf(payload?.agent);
+			if (id) cleanupSessionState(id);
+		});
+	} catch {}
+	try {
+		ctx.on("session/disposed", (session) => {
+			const id = sessionIdOf(session);
+			if (id) cleanupSessionState(id);
+		});
+	} catch {}
+	const disposeAll = () => {
+		try {
+			stopSkiffDebugServer();
+		} catch {}
+		try {
+			stopAcpHttpServer();
+		} catch {}
+		try {
+			stopAllBridges();
+		} catch {}
+	};
+	registerDisposer(ctx, "self-started resources (skiff-debug/acp/weixin)", disposeAll);
+}
+//#endregion
 //#region src/index.ts
 const name = "dsh-serenity-hooks";
 /** 主动调用的服务；其余（agent 事件）随 harness 装配必然存在
@@ -9262,10 +10151,14 @@ const Config = z.object({
 	})
 });
 function apply(ctx, config) {
+	try {
+		const report = probeHostContract(ctx, readDshVersion());
+		if (report.issues.length > 0) console.warn(`[serenity-hooks] ${summarizeHostContract(report)}`);
+	} catch {}
 	if (config.tools) {
 		ctx.tools.register(ccFsTool);
 		ctx.tools.register(createSessionTool(ctx));
-		ctx.tools.register(kitTool);
+		ctx.tools.register(createKitTool(ctx));
 		ctx.tools.register(gitTool);
 		ctx.tools.register(msmTool);
 		ctx.tools.register(praxisTool);
@@ -9300,6 +10193,8 @@ function apply(ctx, config) {
 	registerAcp(ctx);
 	registerAutopilot(ctx);
 	registerWeixinBridge(ctx);
+	registerWeixinSendApi(ctx);
+	registerLifecycle(ctx);
 }
 /**
 * F4 Skiff 调试服务装配：启停 = 人工（设置面板 Skiff 区块开关，settings 持久化）。
@@ -9341,7 +10236,7 @@ function registerSkiff(ctx) {
 function resolveSkiffRoot(ctx) {
 	const liveRoots = [];
 	try {
-		const sessions = ctx.sessions;
+		const sessions = hostSessions(ctx);
 		for (const s of sessions?.list?.() ?? []) {
 			const cwd = s?.header?.cwd;
 			if (typeof cwd === "string") {
@@ -9358,7 +10253,7 @@ function resolveSkiffRoot(ctx) {
 /** 主 WebUI 端口（WebUI 链接；webServer 未装配回退 3080） */
 function readWebPort(ctx) {
 	try {
-		const ws = ctx.webServer;
+		const ws = hostWebServer(ctx);
 		return typeof ws?.port === "number" ? ws.port : 3080;
 	} catch {
 		return 3080;