@shgroup/dsh-serenity-hooks 1.30.8 → 1.30.9

package/lib/index.js

@@ -1,12 +1,12 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
 import { a as findSerenityRoot, c as matchBlacklist, d as readCccName$2, f as readHandymanConfig, i as findGitRoot, l as pathInside, m as resolveInside, n as SAFE_MODE_MARKER, o as isSafeModeOn, r as classifyPath, s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS, u as readBlacklist } from "./ccc-DAsSHsub.js";
 import { a as resolveRoleSystemPrompt, i as readSkiffRoles, l as systemPromptSource, r as isSkiffSessionId, s as roleToolWhitelist } from "./skiff-role-DlrbHPLD.js";
-import { C as newStopToken, D as writeFailedStatus, E as splitModel, O as writeProgress, S as listActiveHandymen, T as requireWhitelistedModel, _ as workspaceTrajectoryLine, a as startSkiffDebugServer, b as buildRoundPrompt, c as askSkiff, d as getSkiffAgent, f as skiffMsmGate, g as unregisterSkiffSession, h as skiffTrajectoryEnabled, k as skiffRoleFor, l as createSkiffAgent, m as skiffSessionSnapshot, n as jscSafeJsonText, o as stopSkiffDebugServer, p as skiffSessionInfo, r as renderSkiffMarkdown, s as stripThink, t as discoverCccs, u as ensureSkiffSession, v as waitAgentIdle, w as readProgress, x as handymanProgressPaths, y as HANDYMAN_GUIDE } from "./skiff-debug-8pF60JBO.js";
+import { C as newStopToken, D as writeFailedStatus, E as splitModel, O as writeProgress, S as listActiveHandymen, T as requireWhitelistedModel, _ as workspaceTrajectoryLine, a as startSkiffDebugServer, b as buildRoundPrompt, c as askSkiff, d as getSkiffAgent, f as skiffMsmGate, g as unregisterSkiffSession, h as skiffTrajectoryEnabled, k as skiffRoleFor, l as createSkiffAgent, m as skiffSessionSnapshot, n as jscSafeJsonText, o as stopSkiffDebugServer, p as skiffSessionInfo, r as renderSkiffMarkdown, s as stripThink, t as discoverCccs, u as ensureSkiffSession, v as waitAgentIdle, w as readProgress, x as handymanProgressPaths, y as HANDYMAN_GUIDE } from "./skiff-debug-TONJlpgF.js";
 import { i as hostSessions, n as hostInjected, o as hostWebServer, r as hostService, t as hostAgents } from "./access-CdL6BAYj.js";
 import { a as readWeixinCredential, c as weixinInboundDir, d as LOCALSTORE_SCOPES, f as checkLocalstoreGitCompliance, h as runLocalStore, i as matchWeixinRoute, l as weixinSessionIdFor, m as readGitTrack, n as extractWeixinText, o as readWeixinSettings, p as localstorePath, r as hasVoiceItem, s as sanitizeFileName$1, t as extractWeixinMedia } from "./weixin-route-BJ4g4ZNq.js";
 import { C as summarize, S as showSession, _ as readActiveSessionMd, a as archiveSessions, b as sessionsRoot, c as createSession, d as findSession, f as getActiveSessionInfo, g as qaCheck, h as parseSessionContextFromEvents, i as SESSION_ACTIONS, l as extractSessionMdPathFromText, m as listSessions, n as readLastBound, o as clearActiveSessionInfo, p as healthCheck, r as DEFAULT_SESSION_SCOPE, s as closeSession, t as appendBound, u as findLatestActiveSessionMd, v as resolveSessionByTitle, w as useSession, x as setActiveSessionInfo, y as sessionEvents } from "./session-bound-D2ANqVn-.js";
 import { n as registerSettingsSection, t as readSimpleSettings } from "./settings-section-BPk0e1du.js";
-import { a as markdownToPlainText, c as sniffImageExt, i as getUpdates, n as downloadMedia, o as sendTextMessage, r as getConfig, s as sendTyping, t as TypingStatus } from "./weixin-api-OUCuw0Ws.js";
+import { a as markdownToPlainText, c as sniffImageExt, i as getUpdates, n as downloadMedia, o as sendTextMessage, r as getConfig, s as sendTyping, t as TypingStatus } from "./weixin-api-BMpljodH.js";
 import z from "@deepseek-ai/schemastery";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 import { appendFileSync, chmodSync, cpSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync, utimesSync, writeFileSync } from "node:fs";
@@ -1577,6 +1577,28 @@ const gitTool = defineTool({
 	}
 });
 //#endregion
+//#region src/weixin-send-endpoint.ts
+/**
+* weixin-send-endpoint.ts — 主动发送入口地址的**零依赖叶模块**（v1.30.9，S142）
+*
+* 为什么单独一个模块（R↓）：地址的读者是 `msm-ops.buildMsmEnv`（把地址注入 MSM 子进程 env），
+* 写者才是 `weixin-send-api`（监听器启停）。若 msm-ops 直接 import weixin-send-api，
+* 静态依赖链会拖进整条微信桥栈（weixin-bridge → skiff-core → `@deepseek-ai/dsh-llm`）——
+* 后果实测：`acc-extras` / `ops` / `skiff-admin` 三个测试套件因解析不到宿主包而**整文件加载失败**
+* （它们只用到 MSM 注册表逻辑）。叶模块把「读」与「写」解耦：读者零依赖，写者自己承担重量。
+*
+* 同款先例：`host/effect.ts`（拆卸登记）、`agent-idle.ts`（等待结算）。
+*/
+let endpoint = null;
+/** 设置当前入口地址（weixin-send-api 启停时调用；null = 未启动） */
+function setWeixinSendEndpoint(value) {
+	endpoint = value;
+}
+/** 当前入口地址（形如 http://127.0.0.1:3082；未启动 → null） */
+function weixinSendEndpoint() {
+	return endpoint;
+}
+//#endregion
 //#region src/msm-ops.ts
 /**
 * msm-ops.ts — msm 纯操作层（acc_msm → msm 执行 + container_admin 管理面，v1.30；零 DSH 依赖）
@@ -1625,14 +1647,21 @@ function assertPathInsideRoot(root, value, flagName) {
 		if (e instanceof Error && e.message.includes("symlink")) throw e;
 	}
 }
-/** 业务子进程 env：注入 SERENITY_ROOT / SERENITY_CCC / SERENITY_VERSION（对齐 osp） */
+/**
+* 业务子进程 env：注入 SERENITY_ROOT / SERENITY_CCC / SERENITY_VERSION（对齐 osp）
+* + SERENITY_WEIXIN_API（v1.30.9：微信主动发送入口地址——MSM 脚本零硬编码端口；
+*   未启动则不注入，脚本回退默认值）。
+*/
 function buildMsmEnv(root) {
-	return {
+	const env = {
 		...process.env,
 		SERENITY_ROOT: root,
 		SERENITY_CCC: readCccName(root) ?? "",
 		SERENITY_VERSION: ACC_VERSION
 	};
+	const weixinApi = weixinSendEndpoint();
+	if (weixinApi) env.SERENITY_WEIXIN_API = weixinApi;
+	return env;
 }
 /**
 * Windows 兼容（审计观察点 A）：`.cmd` 不能直接被 CreateProcess 解析——
@@ -1801,7 +1830,11 @@ CCC 级微信个人号接入（iLink 协议）：dsh 一进程多 CCC，每 CCC
 账号/路由/开关在此文件；**bot_token 凭据在 CCC localstore credential scope**
 （扫码绑定后自动写入，永不进 git 明文面）。
 路由 user → role：exact 优先，* 通配兜底；role 必须 ∈ 该 CCC skiff.roles。
-面板（WebUI 设置 → 微信桥）可扫码绑定/移除账号/编辑路由；msm("weixin-doctor", ["status"|"diag"|"verify"]) 排查。凭据主动查看：localstore get WEIXIN_<ACCOUNT>_TOKEN。
+面板（WebUI 设置 → 微信桥）可扫码绑定/移除账号/编辑路由；msm("weixin-doctor", ["status"|"diag"|"verify"|"guide"]) 排查 + 大而全指南。凭据主动查看：localstore get WEIXIN_<ACCOUNT>_TOKEN。
+  ▸ 主动发送（v1.30.9）：CCC 用 msm("weixin-send", ["send", "--ccc", "<CCC>", "--user", "<别名|id>", "<文本>"])
+    给用户发消息——经 dsp 主动发送入口（**只绑 127.0.0.1**，plugin 全局配置 ~/.dsh/serenity-hooks.json
+    的 weixinApi.port，默认 3082；公网不可达故无密钥）→ weixin-bridge.sendProactiveText →
+    成功后触发 outgoing hook（source="proactive"）。send-file 仍由 MSM 直连 iLink 上传并自行补记。
 
   Config:
     { "weixin": {
@@ -1817,7 +1850,10 @@ CCC 级微信个人号接入（iLink 协议）：dsh 一进程多 CCC，每 CCC
 
   触发（双向）：
     incoming  = 用户 → bot：路由命中后、媒体落盘后触发（文本含语音转写；媒体带落盘 relPath）
-    outgoing  = bot → 用户：回复发送成功后触发（reply = 用户实际收到的纯文本，已剥离 think）
+    outgoing  = bot → 用户：发送成功后触发（reply = 用户实际收到的纯文本，已剥离 think）
+      · source="reply"（缺省）= 回复用户消息；source="proactive"（v1.30.9）= bot 主动发起
+        （CCC 经 weixin-send MSM → dsp 主动发送入口 → sendProactiveText）
+      · file（仅 send-file 补记）：{ "name": "报告.pdf", "size": 12345, "caption": "可选" }
 
   脚本约定（事件 JSON 单行经 stdin 传入；bun 优先 node 兜底）：
     #!/usr/bin/env bun  或  node script.js —— 读 process.stdin 整段 JSON.parse
@@ -1831,7 +1867,7 @@ CCC 级微信个人号接入（iLink 协议）：dsh 一进程多 CCC，每 CCC
       "message": { "text": "你好", "media": [{ "kind": "image", "relPath": "_tmp/weixin-inbound/<hash>/img_x.jpg" }] } }
     { "event": "outgoing", "ts": ..., "cccRoot": ..., "accountId": ...,
       "userId": ..., "sessionId": ..., "role": ...,
-      "reply": "已记录（纯文本）" }
+      "reply": "已记录（纯文本）", "source": "reply" | "proactive" }
 
   示例脚本（追加到按日文件——持久化归 CCC 自选：文件/DB/远端均可）：
     const fs = require('node:fs'); const p = '/path/ccc/AGENT_SESSIONS/_weixin-log.jsonl';
@@ -5048,6 +5084,10 @@ function defaultAdvancedSettings() {
 		publicAsk: {
 			key: "",
 			allowed: []
+		},
+		weixinApi: {
+			enabled: true,
+			port: 3082
 		}
 	};
 }
@@ -5098,6 +5138,7 @@ function mergeWithDefaults(raw) {
 	const gateway = o.gateway ?? {};
 	const persona = o.persona ?? {};
 	const publicAsk = o.publicAsk ?? {};
+	const weixinApi = o.weixinApi ?? {};
 	return {
 		gateway: {
 			enabled: typeof gateway.enabled === "boolean" ? gateway.enabled : def.gateway.enabled,
@@ -5116,6 +5157,10 @@ function mergeWithDefaults(raw) {
 		publicAsk: {
 			key: typeof publicAsk.key === "string" ? publicAsk.key : def.publicAsk.key,
 			allowed: Array.isArray(publicAsk.allowed) ? publicAsk.allowed.filter((n) => typeof n === "string" && n !== "") : def.publicAsk.allowed
+		},
+		weixinApi: {
+			enabled: typeof weixinApi.enabled === "boolean" ? weixinApi.enabled : def.weixinApi.enabled,
+			port: typeof weixinApi.port === "number" && Number.isInteger(weixinApi.port) && weixinApi.port >= 0 ? weixinApi.port : def.weixinApi.port
 		}
 	};
 }
@@ -5153,7 +5198,11 @@ function updateAdvancedSettings(patch) {
 		publicAsk: patch.publicAsk !== void 0 ? {
 			key: typeof patch.publicAsk.key === "string" ? patch.publicAsk.key : current.publicAsk.key,
 			allowed: Array.isArray(patch.publicAsk.allowed) ? patch.publicAsk.allowed.filter((n) => typeof n === "string" && n !== "") : current.publicAsk.allowed
-		} : current.publicAsk
+		} : current.publicAsk,
+		weixinApi: patch.weixinApi !== void 0 ? {
+			enabled: typeof patch.weixinApi.enabled === "boolean" ? patch.weixinApi.enabled : current.weixinApi.enabled,
+			port: typeof patch.weixinApi.port === "number" && Number.isInteger(patch.weixinApi.port) && patch.weixinApi.port >= 0 ? patch.weixinApi.port : current.weixinApi.port
+		} : current.weixinApi
 	};
 	writeAdvancedSettings(next);
 	return next;
@@ -6175,7 +6224,7 @@ function saveFileToTmp(root, fileName, data) {
 	writeFileSync(join(dir, filename), bytes);
 	return `${FILE_UPLOAD_DIR}/${filename}`;
 }
-function readBody$2(req, maxBytes) {
+function readBody$3(req, maxBytes) {
 	return new Promise((resolve, reject) => {
 		let data = "";
 		req.on("data", (chunk) => {
@@ -6189,7 +6238,7 @@ function readBody$2(req, maxBytes) {
 		req.on("error", reject);
 	});
 }
-function sendJson$1(res, code, body) {
+function sendJson$2(res, code, body) {
 	const payload = JSON.stringify(body);
 	res.writeHead(code, {
 		"content-type": "application/json; charset=utf-8",
@@ -6227,7 +6276,7 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "GET") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				const url = new URL(req.url ?? "/", "http://127.0.0.1");
@@ -6237,12 +6286,12 @@ function registerStatusApi(ctx, opts = {}) {
 				});
 				const root = findSerenityRoot(workspace);
 				if (!root) {
-					sendJson$1(res, 200, { handymen: [] });
+					sendJson$2(res, 200, { handymen: [] });
 					return;
 				}
-				sendJson$1(res, 200, { handymen: listActiveHandymen(root) });
+				sendJson$2(res, 200, { handymen: listActiveHandymen(root) });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6252,14 +6301,14 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "POST") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "图片落盘仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "图片落盘仅限 WebUI（client 专用）" });
 					return;
 				}
-				const raw = await readBody$2(req, 20971520);
+				const raw = await readBody$3(req, 20971520);
 				const body = JSON.parse(raw);
 				const workspace = resolveWorkspace(ctx, {
 					sessionId: body.sessionId,
@@ -6267,12 +6316,12 @@ function registerStatusApi(ctx, opts = {}) {
 				});
 				const root = findSerenityRoot(workspace);
 				if (!root) {
-					sendJson$1(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+					sendJson$2(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 					return;
 				}
-				sendJson$1(res, 200, { path: saveImageToTmp(root, body.mediaType ?? "", body.data ?? "") });
+				sendJson$2(res, 200, { path: saveImageToTmp(root, body.mediaType ?? "", body.data ?? "") });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6282,14 +6331,14 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "POST") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "文件落盘仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "文件落盘仅限 WebUI（client 专用）" });
 					return;
 				}
-				const raw = await readBody$2(req, 20971520);
+				const raw = await readBody$3(req, 20971520);
 				const body = JSON.parse(raw);
 				const workspace = resolveWorkspace(ctx, {
 					sessionId: body.sessionId,
@@ -6297,12 +6346,12 @@ function registerStatusApi(ctx, opts = {}) {
 				});
 				const root = findSerenityRoot(workspace);
 				if (!root) {
-					sendJson$1(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+					sendJson$2(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 					return;
 				}
-				sendJson$1(res, 200, { path: saveFileToTmp(root, body.name ?? "", body.data ?? "") });
+				sendJson$2(res, 200, { path: saveFileToTmp(root, body.name ?? "", body.data ?? "") });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6318,7 +6367,7 @@ function registerStatusApi(ctx, opts = {}) {
 						workspace: url.searchParams.get("workspace") ?? void 0
 					}), configPaths);
 					const runtime = ctx.get("codeRuntime");
-					sendJson$1(res, 200, {
+					sendJson$2(res, 200, {
 						...status,
 						...runtime === void 0 ? { codeRuntime: null } : { codeRuntime: {
 							language: runtime.language,
@@ -6329,10 +6378,10 @@ function registerStatusApi(ctx, opts = {}) {
 				}
 				if (req.method === "POST") {
 					if (req.headers["x-serenity-ui"] !== "1") {
-						sendJson$1(res, 403, { error: "safe-mode 切换仅限 WebUI（agent 不可自行开关）" });
+						sendJson$2(res, 403, { error: "safe-mode 切换仅限 WebUI（agent 不可自行开关）" });
 						return;
 					}
-					const raw = await readBody$2(req, 65536);
+					const raw = await readBody$3(req, 65536);
 					const body = JSON.parse(raw);
 					const workspace = resolveWorkspace(ctx, {
 						sessionId: body.sessionId,
@@ -6340,19 +6389,19 @@ function registerStatusApi(ctx, opts = {}) {
 					});
 					const root = findSerenityRoot(workspace);
 					if (!root) {
-						sendJson$1(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+						sendJson$2(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 						return;
 					}
 					const result = setSafeMode(root, body.on === true);
-					sendJson$1(res, 200, {
+					sendJson$2(res, 200, {
 						...getStatus(workspace, configPaths),
 						...result
 					});
 					return;
 				}
-				sendJson$1(res, 405, { error: "method not allowed" });
+				sendJson$2(res, 405, { error: "method not allowed" });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6362,7 +6411,7 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "高级设定仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "高级设定仅限 WebUI（client 专用）" });
 					return;
 				}
 				if (req.method === "GET") {
@@ -6371,24 +6420,24 @@ function registerStatusApi(ctx, opts = {}) {
 					try {
 						known = projectKnownWorkspaces(hostService(ctx, "workspaceRegistry")?.list?.() ?? [], settings.gateway.workspaces);
 					} catch {}
-					sendJson$1(res, 200, {
+					sendJson$2(res, 200, {
 						config: toWire(settings),
 						knownWorkspaces: known
 					});
 					return;
 				}
 				if (req.method === "PUT") {
-					const raw = await readBody$2(req, 131072);
+					const raw = await readBody$3(req, 131072);
 					const saved = applyWirePatch(JSON.parse(raw).config ?? {});
 					try {
 						ctx.emit?.("serenity/config-updated");
 					} catch {}
-					sendJson$1(res, 200, { config: toWire(saved) });
+					sendJson$2(res, 200, { config: toWire(saved) });
 					return;
 				}
-				sendJson$1(res, 405, { error: "method not allowed" });
+				sendJson$2(res, 405, { error: "method not allowed" });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6398,7 +6447,7 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "GET") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				const url = new URL(req.url ?? "/", "http://127.0.0.1");
@@ -6407,10 +6456,10 @@ function registerStatusApi(ctx, opts = {}) {
 					workspace: url.searchParams.get("workspace") ?? void 0
 				});
 				const root = findSerenityRoot(workspace) ?? "";
-				const { discoverCccs } = await import("./skiff-debug-8pF60JBO.js").then((n) => n.i);
-				sendJson$1(res, 200, { cccs: await discoverCccs(ctx, root) });
+				const { discoverCccs } = await import("./skiff-debug-TONJlpgF.js").then((n) => n.i);
+				sendJson$2(res, 200, { cccs: await discoverCccs(ctx, root) });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6420,20 +6469,20 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "仅限 WebUI（key 属敏感凭据）" });
+					sendJson$2(res, 403, { error: "仅限 WebUI（key 属敏感凭据）" });
 					return;
 				}
 				if (req.method === "PUT") {
-					const raw = await readBody$2(req, 16384);
+					const raw = await readBody$3(req, 16384);
 					if (JSON.parse(raw).action !== "rotate") {
-						sendJson$1(res, 400, { error: "unsupported action (expected \"rotate\")" });
+						sendJson$2(res, 400, { error: "unsupported action (expected \"rotate\")" });
 						return;
 					}
-					sendJson$1(res, 200, { key: rotatePublicAskKey() });
+					sendJson$2(res, 200, { key: rotatePublicAskKey() });
 					return;
 				}
 				if (req.method !== "GET") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				const settings = readAdvancedSettings();
@@ -6446,7 +6495,7 @@ function registerStatusApi(ctx, opts = {}) {
 					name,
 					url: `${base}/c/${encodeURIComponent(name)}`
 				}));
-				sendJson$1(res, 200, {
+				sendJson$2(res, 200, {
 					enabled: simple.publicAskEnabled ?? false,
 					port,
 					key: ensurePublicAskKey(),
@@ -6455,7 +6504,7 @@ function registerStatusApi(ctx, opts = {}) {
 					listUrl: `${base}/`
 				});
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6466,13 +6515,13 @@ function registerStatusApi(ctx, opts = {}) {
 			try {
 				if (req.method === "POST") {
 					if (req.headers["x-serenity-ui"] !== "1") {
-						sendJson$1(res, 403, { error: "立即唤起仅限 WebUI（agent 不可自行唤起）" });
+						sendJson$2(res, 403, { error: "立即唤起仅限 WebUI（agent 不可自行唤起）" });
 						return;
 					}
-					const raw = await readBody$2(req, 16384);
+					const raw = await readBody$3(req, 16384);
 					const body = JSON.parse(raw);
 					if (body.action !== "wake") {
-						sendJson$1(res, 400, { error: "unsupported action (expected \"wake\")" });
+						sendJson$2(res, 400, { error: "unsupported action (expected \"wake\")" });
 						return;
 					}
 					const workspace = resolveWorkspace(ctx, {
@@ -6482,21 +6531,21 @@ function registerStatusApi(ctx, opts = {}) {
 					const root = findSerenityRoot(workspace);
 					const effectiveRoot = body.ccc?.trim() || !body.workspace && !body.sessionId ? body.ccc?.trim() ?? (await Promise.resolve().then(() => autopilot_trajectory_exports)).collectAutopilotCccs(ctx)[0] ?? root : root;
 					if (!effectiveRoot) {
-						sendJson$1(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+						sendJson$2(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 						return;
 					}
 					const { performAutopilotWake, readAutopilotSettings } = await Promise.resolve().then(() => autopilot_trajectory_exports);
 					const settings = readAutopilotSettings(effectiveRoot);
 					if (!settings) {
-						sendJson$1(res, 400, { error: "Autopilot Trajectory 未配置（.opencode/serenity.json 缺段）" });
+						sendJson$2(res, 400, { error: "Autopilot Trajectory 未配置（.opencode/serenity.json 缺段）" });
 						return;
 					}
 					const result = await performAutopilotWake(ctx, effectiveRoot, settings, { force: true });
-					sendJson$1(res, result.ok ? 200 : 400, result);
+					sendJson$2(res, result.ok ? 200 : 400, result);
 					return;
 				}
 				if (req.method !== "GET") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				const url = new URL(req.url ?? "/", "http://127.0.0.1");
@@ -6508,12 +6557,12 @@ function registerStatusApi(ctx, opts = {}) {
 				const { getAutopilotStatus, collectAutopilotCccs } = await Promise.resolve().then(() => autopilot_trajectory_exports);
 				const effectiveRoot = url.searchParams.get("ccc")?.trim() ?? (!url.searchParams.get("workspace") && !url.searchParams.get("sessionId") ? collectAutopilotCccs(ctx)[0] : null) ?? root;
 				if (!effectiveRoot) {
-					sendJson$1(res, 200, { status: null });
+					sendJson$2(res, 200, { status: null });
 					return;
 				}
-				sendJson$1(res, 200, { status: getAutopilotStatus(effectiveRoot) });
+				sendJson$2(res, 200, { status: getAutopilotStatus(effectiveRoot) });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6523,14 +6572,14 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "微信桥配置仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "微信桥配置仅限 WebUI（client 专用）" });
 					return;
 				}
 				const url = new URL(req.url ?? "/", "http://127.0.0.1");
 				if (req.method === "GET") {
 					const chk = requireCcc(url.searchParams.get("ccc") ?? void 0);
 					if (!chk.ok) {
-						sendJson$1(res, 400, { error: chk.error });
+						sendJson$2(res, 400, { error: chk.error });
 						return;
 					}
 					const { readWeixinSettings } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
@@ -6544,7 +6593,7 @@ function registerStatusApi(ctx, opts = {}) {
 						enabled: a.enabled !== false,
 						bound: readWeixinCredential(chk.root, a.accountId) !== null
 					}));
-					sendJson$1(res, 200, {
+					sendJson$2(res, 200, {
 						enabled: settings.enabled === true,
 						botType: settings.botType ?? void 0,
 						accounts,
@@ -6554,19 +6603,19 @@ function registerStatusApi(ctx, opts = {}) {
 					return;
 				}
 				if (req.method !== "POST") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
-				const raw = await readBody$2(req, 131072);
+				const raw = await readBody$3(req, 131072);
 				const body = JSON.parse(raw);
 				const chk = requireCcc(body.ccc);
 				if (!chk.ok) {
-					sendJson$1(res, 400, { error: chk.error });
+					sendJson$2(res, 400, { error: chk.error });
 					return;
 				}
 				const root = chk.root;
 				if (body.action === "login-start") {
-					const { fetchQRCode } = await import("./weixin-api-OUCuw0Ws.js").then((n) => n.l);
+					const { fetchQRCode } = await import("./weixin-api-BMpljodH.js").then((n) => n.l);
 					const { randomUUID } = await import("node:crypto");
 					for (const [key, v] of weixinLogins) if (Date.now() - v.startedAt > WEIXIN_LOGIN_TTL_MS) weixinLogins.delete(key);
 					const { readWeixinSettings } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
@@ -6578,7 +6627,7 @@ function registerStatusApi(ctx, opts = {}) {
 						startedAt: Date.now(),
 						polling: false
 					});
-					sendJson$1(res, 200, {
+					sendJson$2(res, 200, {
 						qrcode: qr.qrcode,
 						qrcode_img_content: qr.qrcode_img_content,
 						loginKey
@@ -6587,31 +6636,31 @@ function registerStatusApi(ctx, opts = {}) {
 				}
 				if (body.action === "remove-account") {
 					if (!body.accountId) {
-						sendJson$1(res, 400, { error: "missing accountId" });
+						sendJson$2(res, 400, { error: "missing accountId" });
 						return;
 					}
 					const { removeWeixinAccount } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 					const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 					removeWeixinAccount(root, body.accountId);
 					syncCccBridge(ctx, root);
-					sendJson$1(res, 200, { removed: body.accountId });
+					sendJson$2(res, 200, { removed: body.accountId });
 					return;
 				}
 				if (body.action === "save-routes") {
 					const routes = body.routes ?? [];
 					if (!Array.isArray(routes) || routes.some((r) => typeof r?.user !== "string" || typeof r?.role !== "string" || r.user === "" || r.role === "")) {
-						sendJson$1(res, 400, { error: "invalid routes (expected [{user, role}, ...])" });
+						sendJson$2(res, 400, { error: "invalid routes (expected [{user, role}, ...])" });
 						return;
 					}
 					const { saveWeixinRoutes } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 					const { readSkiffRoles } = await import("./skiff-role-DlrbHPLD.js").then((n) => n.c);
 					const roles = readSkiffRoles(root);
 					for (const r of routes) if (!roles.has(r.role)) {
-						sendJson$1(res, 400, { error: `unknown role: ${r.role} (not in ${root} skiff.roles)` });
+						sendJson$2(res, 400, { error: `unknown role: ${r.role} (not in ${root} skiff.roles)` });
 						return;
 					}
 					saveWeixinRoutes(root, routes);
-					sendJson$1(res, 200, { saved: routes.length });
+					sendJson$2(res, 200, { saved: routes.length });
 					return;
 				}
 				if (body.action === "set-enabled") {
@@ -6620,7 +6669,7 @@ function registerStatusApi(ctx, opts = {}) {
 					const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 					const settings = readWeixinSettings(root);
 					if (enabled && (settings.accounts ?? []).length === 0) {
-						sendJson$1(res, 400, { error: "启用前请先扫码绑定至少一个账号" });
+						sendJson$2(res, 400, { error: "启用前请先扫码绑定至少一个账号" });
 						return;
 					}
 					setWeixinEnabled(root, enabled);
@@ -6629,12 +6678,12 @@ function registerStatusApi(ctx, opts = {}) {
 						const { stopCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 						stopCccBridge(root);
 					}
-					sendJson$1(res, 200, { enabled });
+					sendJson$2(res, 200, { enabled });
 					return;
 				}
-				sendJson$1(res, 400, { error: `unsupported action: ${body.action ?? ""}` });
+				sendJson$2(res, 400, { error: `unsupported action: ${body.action ?? ""}` });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6644,25 +6693,25 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "微信桥配置仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "微信桥配置仅限 WebUI（client 专用）" });
 					return;
 				}
 				if (req.method !== "GET") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				const key = new URL(req.url ?? "/", "http://127.0.0.1").searchParams.get("key") ?? "";
 				const login = weixinLogins.get(key);
 				if (!login) {
-					sendJson$1(res, 404, { error: "login not found or expired" });
+					sendJson$2(res, 404, { error: "login not found or expired" });
 					return;
 				}
 				if (Date.now() - login.startedAt > WEIXIN_LOGIN_TTL_MS) {
 					weixinLogins.delete(key);
-					sendJson$1(res, 200, { status: "expired" });
+					sendJson$2(res, 200, { status: "expired" });
 					return;
 				}
-				const { pollQRStatus } = await import("./weixin-api-OUCuw0Ws.js").then((n) => n.l);
+				const { pollQRStatus } = await import("./weixin-api-BMpljodH.js").then((n) => n.l);
 				const { readWeixinSettings } = await import("./weixin-route-BJ4g4ZNq.js").then((n) => n.u);
 				const settings = readWeixinSettings(login.root);
 				const status = await pollQRStatus({
@@ -6672,7 +6721,7 @@ function registerStatusApi(ctx, opts = {}) {
 				switch (status.status) {
 					case "confirmed": {
 						if (!status.bot_token) {
-							sendJson$1(res, 200, {
+							sendJson$2(res, 200, {
 								status: "error",
 								error: "confirmed but no bot_token"
 							});
@@ -6693,7 +6742,7 @@ function registerStatusApi(ctx, opts = {}) {
 						});
 						syncCccBridge(ctx, login.root);
 						weixinLogins.delete(key);
-						sendJson$1(res, 200, {
+						sendJson$2(res, 200, {
 							status: "confirmed",
 							accountId,
 							tokenSaved: true
@@ -6702,14 +6751,14 @@ function registerStatusApi(ctx, opts = {}) {
 					}
 					case "expired":
 						weixinLogins.delete(key);
-						sendJson$1(res, 200, { status: "expired" });
+						sendJson$2(res, 200, { status: "expired" });
 						return;
 					default:
-						sendJson$1(res, 200, { status: status.status ?? "wait" });
+						sendJson$2(res, 200, { status: status.status ?? "wait" });
 						return;
 				}
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -6731,7 +6780,7 @@ function registerStatusApi(ctx, opts = {}) {
 				const root = sessionsRootDir();
 				if (req.method === "GET") {
 					const { candidates } = performCleanup(root, cutoffDaysAgo(days), liveIds, { dryRun: true });
-					sendJson$1(res, 200, {
+					sendJson$2(res, 200, {
 						root,
 						olderThanDays: days,
 						dryRun: true,
@@ -6745,15 +6794,15 @@ function registerStatusApi(ctx, opts = {}) {
 					return;
 				}
 				if (req.method !== "POST") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "会话清理仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "会话清理仅限 WebUI（client 专用）" });
 					return;
 				}
 				const { result } = performCleanup(root, cutoffDaysAgo(days), liveIds);
-				sendJson$1(res, 200, {
+				sendJson$2(res, 200, {
 					root,
 					olderThanDays: days,
 					dryRun: false,
@@ -6761,7 +6810,7 @@ function registerStatusApi(ctx, opts = {}) {
 					errors: result.errors
 				});
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -7346,7 +7395,7 @@ function createDshCookieProvider(connection, authority) {
 //#endregion
 //#region src/gateway.ts
 /** 读取请求体（≤ maxBytes；超限 reject） */
-function readBody$1(req, maxBytes) {
+function readBody$2(req, maxBytes) {
 	return new Promise((resolve, reject) => {
 		let data = "";
 		req.on("data", (chunk) => {
@@ -7471,7 +7520,7 @@ function startGateway(config, getAccounts, getDshCookie) {
 		const session = authed(req);
 		if (session !== void 0) {
 			if (req.method === "POST" && isWorkspaceCreatePath(url.pathname)) {
-				readBody$1(req, 131072).then((body) => {
+				readBody$2(req, 131072).then((body) => {
 					const { rpcId, path } = parseWorkspaceCreateBody(body);
 					if (!allowWorkspaceCreate) {
 						res.writeHead(403, { "content-type": "application/json" });
@@ -8538,8 +8587,8 @@ function rpcError(id, code, message) {
 * 实验性质：未开启时零资源占用（无监听、无 agent 创建）。
 */
 /** 运行中的 ACP HTTP 服务（单实例；进程级） */
-let active = null;
-function readBody(req) {
+let active$1 = null;
+function readBody$1(req) {
 	return new Promise((resolve, reject) => {
 		const chunks = [];
 		req.on("data", (c) => chunks.push(c));
@@ -8547,7 +8596,7 @@ function readBody(req) {
 		req.on("error", reject);
 	});
 }
-function sendJson(res, status, payload) {
+function sendJson$1(res, status, payload) {
 	const body = jscSafeJsonText(JSON.stringify(payload));
 	res.writeHead(status, {
 		"Content-Type": "application/json; charset=utf-8",
@@ -8569,7 +8618,7 @@ function sendHtml(res, html) {
 * @param defaultRoot 默认 CCC 根（问答页候选发现兜底；resolveSkiffRoot 传入）
 */
 async function startAcpHttpServer(ctx, port, defaultRoot) {
-	if (active) return;
+	if (active$1) return;
 	const server = createServer((req, res) => {
 		handle(ctx, defaultRoot ?? "", req, res);
 	});
@@ -8577,7 +8626,7 @@ async function startAcpHttpServer(ctx, port, defaultRoot) {
 		server.once("error", reject);
 		server.listen(port, "127.0.0.1", () => resolve());
 	});
-	active = {
+	active$1 = {
 		server,
 		port
 	};
@@ -8588,11 +8637,11 @@ async function startAcpHttpServer(ctx, port, defaultRoot) {
 	console.log(`[serenity-hooks] ✓ ACP HTTP: http://127.0.0.1:${port}（${faces.join(" + ") || "未开启任何面"}；session/new 支持 {ccc, role, sessionId?}）`);
 }
 function stopAcpHttpServer() {
-	if (!active) return;
+	if (!active$1) return;
 	try {
-		active.server.close();
+		active$1.server.close();
 	} catch {}
-	active = null;
+	active$1 = null;
 }
 async function handle(ctx, defaultRoot, req, res) {
 	try {
@@ -8601,14 +8650,14 @@ async function handle(ctx, defaultRoot, req, res) {
 		const ip = req.headers["x-forwarded-for"]?.split(",")[0]?.trim() || req.socket.remoteAddress || "unknown";
 		if (req.method === "POST" && url === "/") {
 			if (!s.acpEnabled) {
-				sendJson(res, 403, { error: "ACP JSON-RPC disabled (enable in Serenity settings)" });
+				sendJson$1(res, 403, { error: "ACP JSON-RPC disabled (enable in Serenity settings)" });
 				return;
 			}
 			let body;
 			try {
-				body = JSON.parse(await readBody(req));
+				body = JSON.parse(await readBody$1(req));
 			} catch {
-				sendJson(res, 400, [{
+				sendJson$1(res, 400, [{
 					jsonrpc: "2.0",
 					id: null,
 					error: {
@@ -8618,7 +8667,7 @@ async function handle(ctx, defaultRoot, req, res) {
 				}]);
 				return;
 			}
-			sendJson(res, 200, await dispatchRpc(new AcpServer(ctx), body));
+			sendJson$1(res, 200, await dispatchRpc(new AcpServer(ctx), body));
 			return;
 		}
 		if (!s.publicAskEnabled) {
@@ -8627,10 +8676,10 @@ async function handle(ctx, defaultRoot, req, res) {
 				return;
 			}
 			if (req.method === "POST" && (url === "/ask" || url.startsWith("/c/"))) {
-				sendJson(res, 403, { error: "public ask disabled (enable in Serenity settings)" });
+				sendJson$1(res, 403, { error: "public ask disabled (enable in Serenity settings)" });
 				return;
 			}
-			sendJson(res, 404, { error: "not found" });
+			sendJson$1(res, 404, { error: "not found" });
 			return;
 		}
 		const containerAllowed = (name) => {
@@ -8661,16 +8710,16 @@ async function handle(ctx, defaultRoot, req, res) {
 			const name = decodeURIComponent(aMatch[1] ?? "");
 			const ccc = (await discoverCccs(ctx, defaultRoot || (findSerenityRoot(process.cwd()) ?? ""))).find((c) => c.name === name);
 			if (!ccc || !containerAllowed(name)) {
-				sendJson(res, 403, { error: `container "${name}" is not open for public ask` });
+				sendJson$1(res, 403, { error: `container "${name}" is not open for public ask` });
 				return;
 			}
 			let body;
 			try {
-				const parsed = JSON.parse(await readBody(req));
+				const parsed = JSON.parse(await readBody$1(req));
 				if (parsed === null || typeof parsed !== "object") throw new Error("not an object");
 				body = parsed;
 			} catch {
-				sendJson(res, 400, { error: "invalid JSON body" });
+				sendJson$1(res, 400, { error: "invalid JSON body" });
 				return;
 			}
 			await handleAskParsed(ctx, ccc, body, res, ip);
@@ -8679,11 +8728,11 @@ async function handle(ctx, defaultRoot, req, res) {
 		if (req.method === "POST" && url === "/ask") {
 			let body;
 			try {
-				const parsed = JSON.parse(await readBody(req));
+				const parsed = JSON.parse(await readBody$1(req));
 				if (parsed === null || typeof parsed !== "object") throw new Error("not an object");
 				body = parsed;
 			} catch {
-				sendJson(res, 400, { error: "invalid JSON body" });
+				sendJson$1(res, 400, { error: "invalid JSON body" });
 				return;
 			}
 			const cccValue = typeof body.ccc === "string" && body.ccc !== "" ? body.ccc : void 0;
@@ -8699,15 +8748,15 @@ async function handle(ctx, defaultRoot, req, res) {
 				};
 			}
 			if (!ccc || !containerAllowed(ccc.name)) {
-				sendJson(res, 403, { error: "container is not open for public ask" });
+				sendJson$1(res, 403, { error: "container is not open for public ask" });
 				return;
 			}
 			await handleAskParsed(ctx, ccc, body, res, ip);
 			return;
 		}
-		sendJson(res, 404, { error: "not found" });
+		sendJson$1(res, 404, { error: "not found" });
 	} catch (err) {
-		sendJson(res, 500, { error: err?.message ?? String(err) });
+		sendJson$1(res, 500, { error: err?.message ?? String(err) });
 	}
 }
 /**
@@ -8719,12 +8768,12 @@ async function handle(ctx, defaultRoot, req, res) {
 async function handleAskParsed(ctx, ccc, body, res, ip) {
 	const key = typeof body.key === "string" ? body.key : void 0;
 	if (isPublicAskIpLocked(ip)) {
-		sendJson(res, 429, { error: "too many failed attempts — temporarily locked (retry later)" });
+		sendJson$1(res, 429, { error: "too many failed attempts — temporarily locked (retry later)" });
 		return;
 	}
 	if (!verifyPublicAskKey(key)) {
 		const remaining = recordPublicAskFail(ip);
-		sendJson(res, remaining > 0 ? 429 : 401, { error: remaining > 0 ? `too many failed attempts — locked for ${Math.ceil(remaining / 6e4)} min` : "invalid or missing key" });
+		sendJson$1(res, remaining > 0 ? 429 : 401, { error: remaining > 0 ? `too many failed attempts — locked for ${Math.ceil(remaining / 6e4)} min` : "invalid or missing key" });
 		return;
 	}
 	resetPublicAskIpFail(ip);
@@ -8733,7 +8782,7 @@ async function handleAskParsed(ctx, ccc, body, res, ip) {
 	const question = typeof body.question === "string" ? body.question : "";
 	const sessionId = typeof body.sessionId === "string" && body.sessionId !== "" ? body.sessionId : void 0;
 	if (!question.trim()) {
-		sendJson(res, 400, { error: "empty question" });
+		sendJson$1(res, 400, { error: "empty question" });
 		return;
 	}
 	const roles = readSkiffRoles(root);
@@ -8741,7 +8790,7 @@ async function handleAskParsed(ctx, ccc, body, res, ip) {
 	const effectiveRole = roleName && explicit ? roleName : roles.keys().next().value;
 	const effectiveCfg = (roleName && explicit ? explicit : effectiveRole ? roles.get(effectiveRole) : void 0) ?? void 0;
 	if (!effectiveRole || !effectiveCfg) {
-		sendJson(res, 400, { error: `no skiff role available in ccc: ${root}` });
+		sendJson$1(res, 400, { error: `no skiff role available in ccc: ${root}` });
 		return;
 	}
 	let agent;
@@ -8759,7 +8808,7 @@ async function handleAskParsed(ctx, ccc, body, res, ip) {
 		agent = (await createSkiffAgent(ctx, root, effectiveRole, effectiveCfg, hc?.defaultModel)).agent;
 	}
 	const result = await askSkiff(ctx, agent, question, void 0, { includeTrajectory: false });
-	sendJson(res, 200, {
+	sendJson$1(res, 200, {
 		answer: result.answer,
 		answer_html: renderSkiffMarkdown(result.answer, true),
 		sessionId: result.sessionId,
@@ -9140,7 +9189,8 @@ function buildOutgoingHookEvent(input) {
 		userId: input.userId,
 		sessionId: input.sessionId,
 		role: input.role,
-		reply: input.reply
+		reply: input.reply,
+		...input.source === "proactive" ? { source: "proactive" } : {}
 	};
 }
 /**
@@ -9255,6 +9305,7 @@ function invokeWeixinHook(root, hookRel, event) {
 var weixin_bridge_exports = /* @__PURE__ */ __exportAll({
 	handleIncoming: () => handleIncoming,
 	registerWeixinBridge: () => registerWeixinBridge,
+	sendProactiveText: () => sendProactiveText,
 	stopAllBridges: () => stopAllBridges,
 	stopCccBridge: () => stopCccBridge,
 	syncCccBridge: () => syncCccBridge,
@@ -9384,7 +9435,7 @@ async function handleIncoming(ctx, root, accountId, cred, msg) {
 		const existing = getSkiffAgent(sessionId);
 		const hc = readHandymanConfig(root);
 		if (existing) try {
-			ensureSkiffSession(root, existing, roleName, role);
+			ensureSkiffSession(root, existing, roleName, role, true);
 		} catch (err) {
 			console.warn(`[serenity-hooks] weixin-bridge ensure 失败（不影响处理）: ${String(err?.message ?? err)}`);
 		}
@@ -9535,11 +9586,93 @@ function stopCccBridge(root) {
 	for (const loop of bridge.loops.values()) loop.stopped = true;
 	bridges.delete(root);
 }
-/** 停止全部桥（插件 dispose） */
+/**
+* 停止全部桥（插件 dispose）
+*/
 function stopAllBridges() {
 	for (const bridge of bridges.values()) for (const loop of bridge.loops.values()) loop.stopped = true;
 	bridges.clear();
 }
+/**
+* 以 bot 身份主动给指定用户发文本（**不经用户消息触发**）。
+*
+* 为什么放在桥里而不是让 CCC 自己直连 iLink（用户拍板 A 方案）：
+* ① **记录归桥**——发送成功后触发既有 outgoing hook，`_weixin-logs/*.jsonl` 与对话回复
+*    同源同格式（事件多一个 `source: 'proactive'` 标记）；② 协议/账号/凭据解析单一真相源，
+*    CCC 侧不必重复实现 sendmessage；③ 多账号可选。
+*
+* 记录一致性：`sessionId` 取 `weixinSessionIdFor(toUserId)`——与该用户平时对话**同一条轨迹**，
+* 记录里能直接按会话串联；`role` 取该 CCC 路由命中角色（未命中 → 空串）。
+*
+* 主动消息不带 context_token（iLink 接受 bot 主动发起；带 token 的路径见 handleIncoming 回复）。
+* @param input CCC 根 + 目标用户 + 文本 +（可选）账号
+* @returns 成功含 accountId/userId/sessionId/role；失败含稳定 code 与可行动提示（不抛错）
+*/
+async function sendProactiveText(input) {
+	const { root, toUserId } = input;
+	const settings = readWeixinSettings(root);
+	if (!settings.enabled) return {
+		ok: false,
+		code: "BRIDGE_DISABLED",
+		error: `微信桥未启用（ccc=${root}）`,
+		remediation: "在 CCC 的 .opencode/serenity.json weixin.enabled 打开"
+	};
+	const accounts = (settings.accounts ?? []).filter((a) => a.enabled !== false);
+	if (accounts.length === 0) return {
+		ok: false,
+		code: "NO_ACCOUNT",
+		error: "微信桥未配置任何启用账号",
+		remediation: "在设置面板「微信桥」扫码绑定账号"
+	};
+	const accountId = input.accountId ?? accounts[0].accountId;
+	if (!accounts.some((a) => a.accountId === accountId)) return {
+		ok: false,
+		code: "ACCOUNT_NOT_FOUND",
+		error: `账号不存在或未启用: ${accountId}`,
+		remediation: `可用账号: ${accounts.map((a) => a.accountId).join(", ")}`
+	};
+	const cred = readWeixinCredential(root, accountId);
+	if (!cred) return {
+		ok: false,
+		code: "ACCOUNT_NOT_BOUND",
+		error: `账号未绑定（无凭据）: ${accountId}`,
+		remediation: "在设置面板重新扫码绑定"
+	};
+	const sessionId = weixinSessionIdFor(toUserId);
+	const role = matchWeixinRoute(settings.routes ?? [], toUserId) ?? "";
+	try {
+		await sendTextMessage({
+			baseUrl: cred.baseUrl,
+			token: cred.token,
+			toUserId,
+			text: input.text
+		});
+	} catch (err) {
+		return {
+			ok: false,
+			code: "SEND_FAILED",
+			error: `发送失败: ${err instanceof Error ? err.message : String(err)}`
+		};
+	}
+	if (settings.hook) invokeWeixinHook(root, settings.hook, buildOutgoingHookEvent({
+		cccRoot: root,
+		accountId,
+		userId: toUserId,
+		sessionId,
+		role,
+		reply: markdownToPlainText(input.text),
+		source: "proactive"
+	})).catch((err) => {
+		console.log(`[serenity-hooks] weixin hook outgoing(proactive) error: ${err instanceof Error ? err.message : String(err)}`);
+	});
+	return {
+		ok: true,
+		accountId,
+		userId: toUserId,
+		sessionId,
+		role
+	};
+}
 /** 桥状态快照（面板数据源）：每 CCC → 每账号 → 轮询健康 */
 function weixinBridgeStatus() {
 	const out = [];
@@ -9571,6 +9704,363 @@ function registerWeixinBridge(ctx) {
 	} catch {}
 }
 //#endregion
+//#region src/weixin-send-api.ts
+/**
+* weixin-send-api.ts — 主动发送入口（S142 v1.30.9，用户需求"微信桥支持被调用发消息给指定用户"）
+*
+* 形态（用户拍板 A2）：**独立监听器，只绑 127.0.0.1**（默认 3082，plugin 全局配置 weixinApi）。
+* 为什么不挂在主 webServer(3080) 上：3080 会被 3081 公网网关原样反代（含全部请求头），
+* 而 3081 的登录态属于"家庭账号"——一旦挂上去，任何已登录的外部用户都能冒充 bot 发消息。
+* 独立 loopback 监听器则**不经网关、公网不可达**，因此不做共享密钥；仍校验来源地址。
+*
+* 调用者 = CCC 自己的 MSM（`msm weixin-send ...`）：ACC **不新增工具**，只多一个本机 HTTP 面。
+* 发送与记录都经 `weixin-bridge.sendProactiveText` → 复用既有 outgoing hook（`source: 'proactive'`）。
+*
+* 契约：
+*   POST /send   { ccc: "<名称|绝对路径>", user: "<from_user_id>", text: "...", accountId?: "wechat-1" }
+*     → 200 { ok: true, accountId, userId, sessionId, role }
+*     → 4xx/5xx { ok: false, code, error, remediation? }
+*   GET  /health → 200 { ok: true, port }
+*
+* 职责切分（E↑）：**别名 → id 的解析归 CCC**（MSM 读该 CCC localstore 的 WEIXIN_USER_*）；
+* 本入口只接受 iLink 形式的 id。协议、账号选择、记录归桥。
+*/
+/** 请求体上限（文本消息远小于此；防滥用） */
+const MAX_BODY_BYTES = 65536;
+/** 文本长度上限（微信侧单条消息实践上限；超限拒绝而非静默截断） */
+const WEIXIN_SEND_MAX_TEXT = 4e3;
+/** 运行中的入口（null = 未启动） */
+let active = null;
+/** 当前入口地址（MSM 环境变量注入用；未启动 → null）——状态在叶模块（msm-ops 零依赖读取） */
+/** 测试辅助：读取当前监听端口（生产零调用） */
+function weixinSendPort() {
+	return active?.port ?? null;
+}
+/** 来源必须是 loopback（127.0.0.1 / ::1 / IPv4-mapped） */
+function isLoopbackAddress(address) {
+	if (typeof address !== "string" || address === "") return false;
+	const a = address.startsWith("::ffff:") ? address.slice(7) : address;
+	return a === "127.0.0.1" || a === "::1";
+}
+/**
+* 校验并归一 /send 请求体（纯函数，可测）。
+* 只做**结构**校验：ccc 必填（无隐式当前 CCC——用户拍板）、user 必须是 iLink id 形式、text 非空且不超限。
+*/
+function parseSendRequest(body) {
+	if (body === null || typeof body !== "object") return {
+		ok: false,
+		error: "body must be a JSON object"
+	};
+	const o = body;
+	const ccc = typeof o.ccc === "string" ? o.ccc.trim() : "";
+	if (ccc === "") return {
+		ok: false,
+		error: "missing \"ccc\"",
+		remediation: "ccc = CCC 名称或绝对路径（必填，无默认值）"
+	};
+	const user = typeof o.user === "string" ? o.user.trim() : "";
+	if (user === "") return {
+		ok: false,
+		error: "missing \"user\"",
+		remediation: "user = iLink from_user_id（形如 xxx@im.wechat）；别名解析归调用方"
+	};
+	if (!user.includes("@")) return {
+		ok: false,
+		error: `invalid "user": ${user}`,
+		remediation: "需为 iLink from_user_id（含 @）；别名（yh/danica）请在调用方解析"
+	};
+	const text = typeof o.text === "string" ? o.text.trim() : "";
+	if (text === "") return {
+		ok: false,
+		error: "missing \"text\"",
+		remediation: "text = 要发送的文本（非空）"
+	};
+	if (text.length > 4e3) return {
+		ok: false,
+		error: `text too long: ${text.length} > ${WEIXIN_SEND_MAX_TEXT}`
+	};
+	const accountId = typeof o.accountId === "string" && o.accountId.trim() !== "" ? o.accountId.trim() : void 0;
+	return {
+		ok: true,
+		ccc,
+		user,
+		text,
+		...accountId ? { accountId } : {}
+	};
+}
+/**
+* 按名称/路径解析 CCC 根（纯函数，可测）。
+* 匹配顺序：① 绝对路径精确/上溯 ② 目录名 ③ `.serenity` 首行名（大小写不敏感）。
+* 歧义（多个同名）→ 报错并列出候选（不猜——用户拍板"ccc 必须指定"）。
+*/
+function matchCcc(input, candidates) {
+	const trimmed = input.trim();
+	if (trimmed === "") return {
+		ok: false,
+		error: "empty ccc"
+	};
+	if (trimmed.startsWith("/")) {
+		const root = findSerenityRoot(trimmed);
+		if (!root) return {
+			ok: false,
+			error: `no CCC found from path: ${trimmed}`,
+			remediation: "确认该路径在某个 CCC 内（含 .serenity 标记）"
+		};
+		return {
+			ok: true,
+			root
+		};
+	}
+	const lower = trimmed.toLowerCase();
+	const exactPath = candidates.find((c) => c.root.toLowerCase() === lower);
+	if (exactPath) return {
+		ok: true,
+		root: exactPath.root
+	};
+	const byName = candidates.filter((c) => c.dirName.toLowerCase() === lower || c.cccName !== null && c.cccName.toLowerCase() === lower);
+	if (byName.length === 1) return {
+		ok: true,
+		root: byName[0].root
+	};
+	if (byName.length > 1) return {
+		ok: false,
+		error: `ambiguous ccc name: ${trimmed}`,
+		remediation: `同名多个，请用绝对路径：${byName.map((c) => c.root).join(" | ")}`
+	};
+	return {
+		ok: false,
+		error: `unknown ccc: ${trimmed}`,
+		remediation: candidates.length === 0 ? "当前进程未发现任何 CCC（打开一个 CCC 会话后重试）" : `已知 CCC: ${candidates.map((c) => c.dirName).join(", ")}`
+	};
+}
+/** 组装候选列表（discoverCccs 投影 + `.serenity` 名；动态 import 保持本模块静态依赖轻量） */
+async function collectCandidates(ctx) {
+	const { discoverCccs } = await import("./skiff-debug-TONJlpgF.js").then((n) => n.i);
+	const entries = await discoverCccs(ctx, process.cwd());
+	const seen = /* @__PURE__ */ new Set();
+	const out = [];
+	for (const e of entries) {
+		if (!e?.root || seen.has(e.root)) continue;
+		seen.add(e.root);
+		out.push({
+			root: e.root,
+			dirName: e.name || basename(e.root),
+			cccName: readCccName$2(e.root)
+		});
+	}
+	return out;
+}
+function sendJson(res, status, payload) {
+	const body = JSON.stringify(payload);
+	res.writeHead(status, {
+		"content-type": "application/json; charset=utf-8",
+		"content-length": Buffer.byteLength(body)
+	});
+	res.end(body);
+}
+async function readBody(req) {
+	const chunks = [];
+	let total = 0;
+	for await (const chunk of req) {
+		const buf = chunk;
+		total += buf.length;
+		if (total > MAX_BODY_BYTES) throw new Error(`body too large (> ${MAX_BODY_BYTES} bytes)`);
+		chunks.push(buf);
+	}
+	return Buffer.concat(chunks).toString("utf-8");
+}
+/** HTTP 状态映射（失败 code → 语义化状态；调用方按 code 判定，不看文案） */
+function statusForCode(code) {
+	switch (code) {
+		case "ACCOUNT_NOT_BOUND":
+		case "BRIDGE_DISABLED":
+		case "NO_ACCOUNT": return 409;
+		case "ACCOUNT_NOT_FOUND": return 400;
+		case "SEND_FAILED": return 502;
+		default: return 400;
+	}
+}
+/** 单请求处理（导出供测试直接驱动，不经真实端口） */
+async function handleWeixinSendRequest(ctx, req, res) {
+	if (!isLoopbackAddress(req.socket?.remoteAddress)) {
+		sendJson(res, 403, {
+			ok: false,
+			code: "FORBIDDEN",
+			error: "only loopback clients allowed"
+		});
+		return;
+	}
+	const path = (req.url ?? "/").split("?")[0];
+	if (req.method === "GET" && path === "/health") {
+		sendJson(res, 200, {
+			ok: true,
+			port: weixinSendPort()
+		});
+		return;
+	}
+	if (path !== "/send") {
+		sendJson(res, 404, {
+			ok: false,
+			code: "NOT_FOUND",
+			error: `unknown path: ${path}`
+		});
+		return;
+	}
+	if (req.method !== "POST") {
+		sendJson(res, 405, {
+			ok: false,
+			code: "METHOD_NOT_ALLOWED",
+			error: "use POST /send"
+		});
+		return;
+	}
+	let raw;
+	try {
+		raw = await readBody(req);
+	} catch (err) {
+		sendJson(res, 413, {
+			ok: false,
+			code: "BODY_TOO_LARGE",
+			error: String(err?.message ?? err)
+		});
+		return;
+	}
+	let body;
+	try {
+		body = JSON.parse(raw === "" ? "{}" : raw);
+	} catch (err) {
+		sendJson(res, 400, {
+			ok: false,
+			code: "BAD_JSON",
+			error: `invalid JSON: ${String(err?.message ?? err)}`
+		});
+		return;
+	}
+	const parsed = parseSendRequest(body);
+	if (!parsed.ok) {
+		sendJson(res, 400, {
+			ok: false,
+			code: "BAD_REQUEST",
+			error: parsed.error,
+			remediation: parsed.remediation
+		});
+		return;
+	}
+	let root;
+	try {
+		const matched = matchCcc(parsed.ccc, await collectCandidates(ctx));
+		if (!matched.ok) {
+			sendJson(res, 404, {
+				ok: false,
+				code: "UNKNOWN_CCC",
+				error: matched.error,
+				remediation: matched.remediation
+			});
+			return;
+		}
+		root = matched.root;
+	} catch (err) {
+		sendJson(res, 500, {
+			ok: false,
+			code: "CCC_DISCOVERY_FAILED",
+			error: String(err?.message ?? err)
+		});
+		return;
+	}
+	const result = await sendProactiveText({
+		root,
+		toUserId: parsed.user,
+		text: parsed.text,
+		...parsed.accountId ? { accountId: parsed.accountId } : {}
+	});
+	if (result.ok) {
+		sendJson(res, 200, {
+			ok: true,
+			accountId: result.accountId,
+			userId: result.userId,
+			sessionId: result.sessionId,
+			role: result.role
+		});
+		return;
+	}
+	sendJson(res, statusForCode(result.code), {
+		ok: false,
+		code: result.code,
+		error: result.error,
+		remediation: result.remediation
+	});
+}
+/** 启动监听器（仅 127.0.0.1）；已启动 → 幂等返回 */
+async function startWeixinSendApi(ctx, port) {
+	if (active) return active.port;
+	const server = createServer((req, res) => {
+		handleWeixinSendRequest(ctx, req, res).catch((err) => {
+			console.warn(`[serenity-hooks] ✗ weixin send api 处理失败: ${String(err?.message ?? err)}`);
+			try {
+				sendJson(res, 500, {
+					ok: false,
+					code: "INTERNAL",
+					error: "internal error"
+				});
+			} catch {}
+		});
+	});
+	await new Promise((resolve, reject) => {
+		server.once("error", reject);
+		server.listen(port, "127.0.0.1", () => resolve());
+	});
+	server.unref();
+	const addr = server.address();
+	const actualPort = typeof addr === "object" && addr !== null ? addr.port : port;
+	active = {
+		server,
+		port: actualPort
+	};
+	setWeixinSendEndpoint(`http://127.0.0.1:${actualPort}`);
+	console.log(`[serenity-hooks] ✓ 微信主动发送入口: http://127.0.0.1:${actualPort}/send（仅 loopback；CCC MSM 调用）`);
+	return actualPort;
+}
+/** 停止监听器（幂等） */
+function stopWeixinSendApi() {
+	if (!active) return;
+	try {
+		active.server.close();
+	} catch {}
+	active = null;
+	setWeixinSendEndpoint(null);
+}
+/**
+* 装配（index.ts apply 调用）：按 plugin 全局配置 weixinApi 启停，配置变化热同步。
+* 默认启用（仅 loopback，零公网暴露）；`enabled:false` 或 `port:0` 关闭。
+*/
+function registerWeixinSendApi(ctx) {
+	const sync = () => {
+		let cfg;
+		try {
+			cfg = readAdvancedSettings().weixinApi;
+		} catch (err) {
+			console.warn(`[serenity-hooks] ✗ weixin send api 配置读取失败，跳过同步: ${String(err?.message ?? err)}`);
+			return;
+		}
+		const want = cfg.enabled && cfg.port > 0;
+		if (want && !active) {
+			startWeixinSendApi(ctx, cfg.port).catch((err) => {
+				console.warn(`[serenity-hooks] ✗ 微信主动发送入口启动失败（port=${cfg.port}）: ${String(err?.message ?? err)}`);
+			});
+			return;
+		}
+		if (!want && active) stopWeixinSendApi();
+	};
+	try {
+		ctx.on("serenity/config-updated", sync);
+	} catch {}
+	try {
+		ctx.on("serenity/settings-changed", sync);
+	} catch {}
+	sync();
+	registerDisposer(ctx, "weixin send api", () => stopWeixinSendApi());
+}
+//#endregion
 //#region src/seams/lifecycle.ts
 /** 从 Agent / Session / 事件负载中取会话 id（形状宽容：未知结构返回 null） */
 function sessionIdOf(value) {
@@ -9703,6 +10193,7 @@ function apply(ctx, config) {
 	registerAcp(ctx);
 	registerAutopilot(ctx);
 	registerWeixinBridge(ctx);
+	registerWeixinSendApi(ctx);
 	registerLifecycle(ctx);
 }
 /**