@shgroup/dsh-serenity-hooks 1.45.0 → 1.45.1

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-serenity-hooks",
-  "version": "1.45.0",
+  "version": "1.45.1",
   "main": "lib/index.js",
   "description": "宁静号 ACC harness（Native Cordis 插件）：给 DSH 装一个「AI 工作区」——11 个工具（container_fs/container_trajectory/dashboard/container_git/msm/praxis/handyman/localstore/container_admin/im-bridge/acc-diag；后两个按配置条件出现）+ 机械约束（安全模式/工作区围墙/密钥守卫）+ 轨迹日志与原地重建 + 网页登录入口/微信桥/子角色/对外问答页/trajectory 唤醒注册表。适配 DSH 0.1.5-rc.2（deepseek-ai/deepseek-harness）。",
   "engines": {

package/lib/clock-runtime.d.ts

@@ -24,10 +24,12 @@
  * **时钟永久不武装**（实测 6.6h 零 tick）。⇒ 现在「**全局闸开即武装**」，"有无目标"降级为
  * tick 内的廉价判定。**武装与"本次有无目标"是两件事，本工厂不得把二者耦合。**
  *
- * 🔴 硬约束三：**两条闸必须继续分开传**（v1.34 S-1 解耦）
+ * 🔴 硬约束三：**闸是可选能力，工厂不得替调用方假设"必须有闸"**（v1.34 S-1 解耦 → 2026-09-21 收窄）
  *
- * 唤醒调度器 `wakeSchedulerEnabled`（**缺省开**）｜autopilot `autopilotWakeEnabled`
- * （**缺省关**）——取值方向相反。工厂取 `gate` **回调**（每次现读），**不做**任何合并或缓存。
+ * 现只余 **autopilot `autopilotWakeEnabled`**（**缺省关**）一条；**唤醒调度器已无闸**
+ * （原 `wakeSchedulerEnabled` 于 2026-09-21 所有者令砍掉 ⇒ 调用方**不传** `gate`
+ * ＝ 恒武装、永不因闸跳过、`enabled` 恒 `true`）。工厂取 `gate` **回调**（每次现读），
+ * **不做**任何合并或缓存；**缺省无闸是合法形态，不是漏配**。
  *
  * ───────────────────────────────────────────────────────────────────────────
  * 两条时钟**逐项语义差**（`ClockOptions` 的每个可配项都对应下表一行，不是随意的灵活性）：

package/lib/index.js

@@ -2,13 +2,13 @@ import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
 import { a as hostSettings, c as hostWebServer, i as hostSessions, n as hostInjected, o as hostSubagents, r as hostService, s as hostWeb, t as hostAgents } from "./access-fiehjxV6.js";
 import { a as findSerenityRoot, c as matchBlacklist, d as readCccName$1, f as readExclusiveTools, g as resolveInside, i as findGitRoot, l as pathInside, m as readTrajectorySkills, n as SAFE_MODE_MARKER, o as isSafeModeOn, p as readHandymanConfig, r as classifyPath, s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS, u as readBlacklist } from "./ccc-DG4Oc7I1.js";
 import { i as cccRootForExec, n as agentCwdFor, o as listCccs, r as cccRootForCwd, t as NO_CCC_FROM_AGENT_CWD } from "./ccc-roots-FxWXuZPw.js";
-import { C as summarize, E as localFileStamp, S as showSession, T as isoLocal, _ as readActiveSessionMd, a as resolveSessionTrajectoryLabel, b as sessionsRoot, c as DEFAULT_SESSION_SCOPE, d as createSession, f as extractSessionMdPathFromText, g as parseSessionContextFromEvents, h as listSessions, i as readLastBound, l as TRAJECTORY_ACTIONS, m as getActiveSessionInfo, o as setBindingStore, p as findSession, r as pruneMissingBindings, s as supersedeOtherBindings, t as appendBound, u as clearActiveSessionInfo, v as resolveSessionByTitle, w as useSession, x as setActiveSessionInfo, y as sessionEvents$1 } from "./trajectory-bound-BzdzsDPI.js";
+import { C as useSession, S as summarize, T as localFileStamp, _ as resolveSessionByTitle, a as resolveSessionTrajectoryLabel, b as setActiveSessionInfo, c as TRAJECTORY_ACTIONS, d as extractSessionMdPathFromText, f as findSession, g as readActiveSessionMd, h as parseSessionContextFromEvents, i as readLastBound, l as clearActiveSessionInfo, m as listSessions, o as setBindingStore, p as getActiveSessionInfo, r as pruneMissingBindings, s as DEFAULT_SESSION_SCOPE, t as appendBound, u as createSession, v as sessionEvents$1, w as isoLocal, x as showSession, y as sessionsRoot } from "./trajectory-bound-BPWKkzJC.js";
 import { a as readWeixinCredential, c as weixinInboundDir, d as LOCALSTORE_SCOPES, f as checkLocalstoreGitCompliance, g as runLocalStore, h as readStore, i as matchWeixinRoute, l as weixinSessionIdFor, m as readGitTrack, n as extractWeixinText, o as readWeixinSettings, p as localstorePath, r as hasVoiceItem, s as sanitizeFileName$1, t as extractWeixinMedia } from "./weixin-route-CWMRa36W.js";
 import { a as unregisterSkiffSession$1, i as skiffSessionSnapshot$1, n as skiffRoleFor$1, o as ACC_VERSION, r as skiffSessionInfo$1, t as registerSkiffSession$1 } from "./skiff-registry-BjIX_KD1.js";
 import { a as readSkiffRoles, c as roleMsmWhitelist, d as systemPromptSource, f as trajectorySubset, i as isSkiffSessionId, l as roleToolWhitelist, n as buildSkiffBasePrompt, o as resolveRoleSystemPrompt, r as createRolePromptReader, s as resolveSkiffKind } from "./skiff-role-KqQA6pkr.js";
 import { a as FACE_PORTS, c as MECHANISM_PORTS, i as ACP_HTTP_PORT, l as SKIFF_DEBUG_PORT, n as registerSettingsSection, o as GATEWAY_PORT, s as MAIN_WEB_PORT, t as readSimpleSettings, u as WEIXIN_SEND_PORT } from "./settings-section-CIuyoSOX.js";
 import { r as sessionsRootDir, t as hasSessionLogById } from "./session-cleanup-BtkSmry8.js";
-import { a as registerDisposer, c as addWake, i as registerCroTurnTracking, l as listWakes, n as sendToTrajectory, o as buildCroSnapshot, r as wakeSchedulerState, s as WAKE_CATCH_UP_MS, t as registerWakeScheduler } from "./wake-scheduler-fVe71jkg.js";
+import { a as registerDisposer, c as addWake, i as registerCroTurnTracking, l as listWakes, n as sendToTrajectory, o as buildCroSnapshot, r as wakeSchedulerState, s as WAKE_CATCH_UP_MS, t as registerWakeScheduler } from "./wake-scheduler-DF-YWcX5.js";
 import { a as markdownToPlainText, c as sendTyping, i as getUpdates, l as sniffImageExt, n as downloadMedia, o as sendFileMessage, r as getConfig, s as sendTextMessage, t as TypingStatus } from "./weixin-api-CtFYm53S.js";
 import z from "@deepseek-ai/schemastery";
 import { defineTool } from "@deepseek-ai/dsh-tools";
@@ -4497,6 +4497,9 @@ ${renderCroSampleSnapshot()}
 *    ⇒ 族名取共享词干 **`send-`**、轴取 **`-now` / `-later`**（同构）。**硬切无别名**（D46/D61 先例）；
 *    机制层词汇（`wake-registry.json` / `w-*` id / `WakeEntry` / 调度器名 / 配置键 `wakeSchedulerEnabled`）
 *    **一律不动** —— 接受"机制叫 wake、动作叫 send-later"的**分层命名**（二者本是两层）。
+*    🔴 **2026-09-21 补注（不改写历史，只标失效时点）**：上句里那个**配置键 `wakeSchedulerEnabled`
+*    已随后续所有者令被砍**（唤醒调度器无闸、恒武装）⇒ 该词从"机制层词汇"里**自然减员**；
+*    现行总闸键是 CRO 阶段的 **`croEnabled`**。
 *
 * 与旧面（logbook 11 动作 + trajectory 12 动作）的对应（用户逐条裁决，R↓）：
 *   · `summary` → 并入 `list`（全库统计随清单一起给）
@@ -4520,10 +4523,21 @@ ${renderCroSampleSnapshot()}
 function agentScope$1(exec) {
 	return exec.agent?.session?.id ?? "default";
 }
-/** 当前 dsh 会话对象（append bound 用）；无 → null */
+/**
+* 当前 dsh 会话对象（绑定的读写都要用它）；无 `append` → null。
+*
+* 🔴 **2026-09-21 修 F3（原实现是 F1 的上游成因）**：本函数原先把会话**削成只带 `append` 的包装对象**。
+* 但 `appendBound` / `readLastBound` 定位"这是哪条会话、哪个 CCC 根"靠的是
+* `session.header.id` 与 `session.header.cwd`（见 `trajectory-bound.ts` 的 `sessionHeader`）——
+* **包装对象没有 header** ⇒ ① `appendBound` **在读 id 处直接 `return false`**（静默 no-op）
+* ⇒ **`use` 这条路从来不写当前载体的绑定**（实证吻合：S142 §7.4 记录"当前载体的绑定**直到
+* 17:05 那次 rebuild 才写入**"）② `readLastBound` 同样恒 null ⇒ G1 切换守卫只能靠内存回退。
+* ⇒ 改为**返回原会话对象**（只增字段、不削字段）：只用 `append` 的调用点行为不变，
+*   而绑定读写从此拿得到 header。
+*/
 function agentDshSession(exec) {
 	const s = exec.agent?.session;
-	return s && typeof s.append === "function" ? { append: s.append } : null;
+	return s && typeof s.append === "function" ? s : null;
 }
 /**
 * 当前绑定的权威 dirName（优先持久化 bound——防内存被误 use 污染；无 bound 回退内存 active）。
@@ -4759,9 +4773,6 @@ function createTrajectoryTool(ctx) {
 					};
 					if (advisory) out.advisory = advisory;
 					if (dsh) {
-						const selfId = String(dsh.header?.id ?? "");
-						const superseded = supersedeOtherBindings(root, info?.dirName ?? targetDirName, selfId === "" ? /* @__PURE__ */ new Set() : /* @__PURE__ */ new Set([selfId]));
-						if (superseded.length > 0) out.supersededBindings = superseded;
 						const pruned = pruneMissingBindings(root, (id) => !hasSessionLogById(sessionsRootDir(), id));
 						if (pruned.length > 0) out.prunedBindings = pruned;
 					}

package/lib/tools/trajectory.d.ts

@@ -15,6 +15,9 @@
  *    ⇒ 族名取共享词干 **`send-`**、轴取 **`-now` / `-later`**（同构）。**硬切无别名**（D46/D61 先例）；
  *    机制层词汇（`wake-registry.json` / `w-*` id / `WakeEntry` / 调度器名 / 配置键 `wakeSchedulerEnabled`）
  *    **一律不动** —— 接受"机制叫 wake、动作叫 send-later"的**分层命名**（二者本是两层）。
+ *    🔴 **2026-09-21 补注（不改写历史，只标失效时点）**：上句里那个**配置键 `wakeSchedulerEnabled`
+ *    已随后续所有者令被砍**（唤醒调度器无闸、恒武装）⇒ 该词从"机制层词汇"里**自然减员**；
+ *    现行总闸键是 CRO 阶段的 **`croEnabled`**。
  *
  * 与旧面（logbook 11 动作 + trajectory 12 动作）的对应（用户逐条裁决，R↓）：
  *   · `summary` → 并入 `list`（全库统计随清单一起给）

package/lib/{trajectory-bound-BzdzsDPI.js → trajectory-bound-BPWKkzJC.js}

@@ -801,66 +801,30 @@ function listBoundSessionIds(root, dirName) {
 	return hits.sort((a, b) => b.at - a.at).map((h) => h.id);
 }
 /**
-* **(b) 同一 trajectory 多 live 会话的机械守卫**（S142 §0y，所有者 2026-09-18 裁「b 做」）。
+* 🔴 **「只留一条」的唯一判据**（2026-09-21 收进单一实现；此前同一判据在域侧/文件侧各写一遍）。
 *
-* 把绑定到 `dirName` 的**其它**会话 id 标记为 `supersededAt` —— **保留记录**（沿革/正向查询不丢），
-* 只切断"**唤醒还会找到它**"这条路。语义上即"解绑"，且**不动那个会话本身**（它仍可被人工使用）。
+* 判据：同 `dirName` ∧ **不是** `keepIds` 里的 ∧ **尚未** `supersededAt`。
+* 域侧与文件侧**同判据**——历史缺陷（2026-09-19）正是"只在一侧收集 ⇒ 返回值恒空"，
+* 见 {@link supersedeOtherBindings} 的注释。
 *
-* 为什么必须有机制（R↓）：`.bindings.json` 的语义是"latest-wins 覆盖**本条会话记录**"，
-* 对**同一 trajectory 的其它会话**没有任何约束 ⇒ 多代会话自然堆积（实测 S142 4 代 / S185 2 代），
-* 而 `acquireWakeAgent` 是"遍历全部绑定 id、任一条 live 就用它"——**两条 live 都能被选中**。
-*
-* @param root CCC 根
-* @param dirName 目标 trajectory 目录名
-* @param keepIds 保留（不标记）的会话 id 集合——通常是"当前正在 use 的这条"
-* @returns **实际被标记**的会话 id（升序稳定；供调用方如实报告，未标记任何一条 → `[]`）
+* @param fileSessions 旧文件表的记录集
+* @param domainEntries 域侧条目（域不可用时传 `undefined` = 不参与判定）
 */
-function supersedeOtherBindings(root, dirName, keepIds) {
-	const path = join(root, BINDINGS_REL_PATH);
-	const file = readBindingsFile(path);
-	const at = Date.now();
-	/**
-	* 需要退休的会话 id 集合。
-	*
-	* 🔴 必须取**域 ∪ 文件的并集**（实测缺陷，2026-09-19）：
-	* 首版实现只在**文件循环**里 `marked.push(id)`，于是"记录只在域里"时
-	* 返回值恒为 `[]` —— 而调用方（`tools/trajectory.ts` 的 `use`）**靠这个返回值**决定
-	* 是否回报 `supersededBindings`，并且早先用 `marked.length === 0` 短路**跳过了写盘**。
-	* ⇒ 症状是"D69 只留一条**静默不生效**"（记录没被标记，返回也看不出异常）。
-	* 由 `tests/trajectory-bound.test.ts` 的 D69 域路径用例抓到。
-	*/
+function collectSupersedeTargets(dirName, keepIds, fileSessions, domainEntries) {
 	const toMark = /* @__PURE__ */ new Set();
-	if (domainStore?.available) for (const [id, raw] of domainStore.entries()) {
+	if (domainEntries) for (const [id, raw] of domainEntries) {
 		const rec = fromDomainRecord(raw);
 		if (rec.dirName !== dirName) continue;
 		if (keepIds.has(id) || rec.supersededAt !== void 0) continue;
 		toMark.add(id);
 	}
-	for (const [id, raw] of Object.entries(file.sessions)) {
+	for (const [id, raw] of Object.entries(fileSessions)) {
 		const rec = asBoundRecord(raw);
 		if (!rec || rec.dirName !== dirName) continue;
 		if (keepIds.has(id) || rec.supersededAt !== void 0) continue;
 		toMark.add(id);
 	}
-	if (toMark.size === 0) return [];
-	if (domainStore?.available) for (const id of toMark) {
-		const raw = domainStore.get(id);
-		if (!raw) continue;
-		domainStore.put(id, toDomainRecord({
-			...fromDomainRecord(raw),
-			supersededAt: at
-		})).catch(() => {});
-	}
-	for (const id of toMark) {
-		const rec = asBoundRecord(file.sessions[id]);
-		if (!rec) continue;
-		rec.supersededAt = at;
-		file.sessions[id] = rec;
-	}
-	try {
-		writeBindingsFile(path, file);
-	} catch {}
-	return [...toMark].sort();
+	return toMark;
 }
 /**
 * **(c) 绑定一致性兜底**（S142 §0y，所有者 2026-09-18 裁「c 也算个兜底」）：
@@ -906,6 +870,11 @@ function pruneMissingBindings(root, isMissing) {
 * 写入绑定（latest-wins 覆盖该会话记录）。
 *
 * 绑定持久化尽力而为：无法定位 CCC 根 / 无会话 id / 写盘失败 → 返回 false，不阻断主流程。
+*
+* 🔴 **同时是「只留一条」（D69）的唯一写入口**（2026-09-21 起）：每写一条，就在**同一次 RMW** 里
+* 把同轨迹的**其它**条标 `supersededAt`（自己除外）。⇒ 任何调用路径（`create`/`activate`/`switch`/
+* `rebuild`/`reconcile`）**都自动满足"只留一条"**，调用方**不需要**（也**不应当**）自己算 selfId。
+*
 * @param session 目标 dsh 会话（需 `header.id` + `header.cwd` 可定位 CCC 根）
 * @param action 绑定动作
 * @param rec 绑定记录（dirName + mdPath 必填；sessionId 可选展示码）
@@ -927,11 +896,26 @@ function appendBound(session, action, rec) {
 	try {
 		const file = readBindingsFile(path);
 		file.sessions[id] = record;
+		const targets = collectSupersedeTargets(rec.dirName, /* @__PURE__ */ new Set([id]), file.sessions, domainStore?.available ? domainStore.entries() : void 0);
+		for (const other of targets) {
+			const otherRec = asBoundRecord(file.sessions[other]);
+			if (!otherRec) continue;
+			otherRec.supersededAt = record.at;
+			file.sessions[other] = otherRec;
+		}
 		writeBindingsFile(path, file);
+		if (domainStore?.available) for (const other of targets) {
+			const raw = domainStore.get(other);
+			if (!raw) continue;
+			domainStore.put(other, toDomainRecord({
+				...fromDomainRecord(raw),
+				supersededAt: record.at
+			})).catch(() => {});
+		}
 		return true;
 	} catch {
 		return domainStore?.available === true;
 	}
 }
 //#endregion
-export { summarize as C, localHuman as D, localFileStamp as E, localIdStamp as O, showSession as S, isoLocal as T, readActiveSessionMd as _, resolveSessionTrajectoryLabel as a, sessionsRoot as b, DEFAULT_SESSION_SCOPE as c, createSession as d, extractSessionMdPathFromText as f, parseSessionContextFromEvents as g, listSessions as h, readLastBound as i, TRAJECTORY_ACTIONS as l, getActiveSessionInfo as m, listBoundSessionIds as n, setBindingStore as o, findSession as p, pruneMissingBindings as r, supersedeOtherBindings as s, appendBound as t, clearActiveSessionInfo as u, resolveSessionByTitle as v, useSession as w, setActiveSessionInfo as x, sessionEvents as y };
+export { useSession as C, localIdStamp as D, localHuman as E, summarize as S, localFileStamp as T, resolveSessionByTitle as _, resolveSessionTrajectoryLabel as a, setActiveSessionInfo as b, TRAJECTORY_ACTIONS as c, extractSessionMdPathFromText as d, findSession as f, readActiveSessionMd as g, parseSessionContextFromEvents as h, readLastBound as i, clearActiveSessionInfo as l, listSessions as m, listBoundSessionIds as n, setBindingStore as o, getActiveSessionInfo as p, pruneMissingBindings as r, DEFAULT_SESSION_SCOPE as s, appendBound as t, createSession as u, sessionEvents as v, isoLocal as w, showSession as x, sessionsRoot as y };

package/lib/trajectory-bound.d.ts

@@ -169,6 +169,11 @@ export declare function pruneMissingBindings(root: string, isMissing: (sessionId
  * 写入绑定（latest-wins 覆盖该会话记录）。
  *
  * 绑定持久化尽力而为：无法定位 CCC 根 / 无会话 id / 写盘失败 → 返回 false，不阻断主流程。
+ *
+ * 🔴 **同时是「只留一条」（D69）的唯一写入口**（2026-09-21 起）：每写一条，就在**同一次 RMW** 里
+ * 把同轨迹的**其它**条标 `supersededAt`（自己除外）。⇒ 任何调用路径（`create`/`activate`/`switch`/
+ * `rebuild`/`reconcile`）**都自动满足"只留一条"**，调用方**不需要**（也**不应当**）自己算 selfId。
+ *
  * @param session 目标 dsh 会话（需 `header.id` + `header.cwd` 可定位 CCC 根）
  * @param action 绑定动作
  * @param rec 绑定记录（dirName + mdPath 必填；sessionId 可选展示码）

package/lib/{wake-scheduler-fVe71jkg.js → wake-scheduler-DF-YWcX5.js}

@@ -1,7 +1,7 @@
 import { r as hostService, t as hostAgents } from "./access-fiehjxV6.js";
 import { g as resolveInside } from "./ccc-DG4Oc7I1.js";
 import { o as listCccs } from "./ccc-roots-FxWXuZPw.js";
-import { D as localHuman, O as localIdStamp, T as isoLocal, b as sessionsRoot, n as listBoundSessionIds, p as findSession } from "./trajectory-bound-BzdzsDPI.js";
+import { D as localIdStamp, E as localHuman, f as findSession, n as listBoundSessionIds, w as isoLocal, y as sessionsRoot } from "./trajectory-bound-BPWKkzJC.js";
 import { t as readSimpleSettings } from "./settings-section-CIuyoSOX.js";
 import { basename, dirname, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, statSync, writeFileSync } from "node:fs";
@@ -1190,10 +1190,12 @@ function appendCroWakeLog(root, dirName, input, nowMs = Date.now()) {
 * **时钟永久不武装**（实测 6.6h 零 tick）。⇒ 现在「**全局闸开即武装**」，"有无目标"降级为
 * tick 内的廉价判定。**武装与"本次有无目标"是两件事，本工厂不得把二者耦合。**
 *
-* 🔴 硬约束三：**两条闸必须继续分开传**（v1.34 S-1 解耦）
+* 🔴 硬约束三：**闸是可选能力，工厂不得替调用方假设"必须有闸"**（v1.34 S-1 解耦 → 2026-09-21 收窄）
 *
-* 唤醒调度器 `wakeSchedulerEnabled`（**缺省开**）｜autopilot `autopilotWakeEnabled`
-* （**缺省关**）——取值方向相反。工厂取 `gate` **回调**（每次现读），**不做**任何合并或缓存。
+* 现只余 **autopilot `autopilotWakeEnabled`**（**缺省关**）一条；**唤醒调度器已无闸**
+* （原 `wakeSchedulerEnabled` 于 2026-09-21 所有者令砍掉 ⇒ 调用方**不传** `gate`
+* ＝ 恒武装、永不因闸跳过、`enabled` 恒 `true`）。工厂取 `gate` **回调**（每次现读），
+* **不做**任何合并或缓存；**缺省无闸是合法形态，不是漏配**。
 *
 * ───────────────────────────────────────────────────────────────────────────
 * 两条时钟**逐项语义差**（`ClockOptions` 的每个可配项都对应下表一行，不是随意的灵活性）：

package/lib/wake-scheduler.d.ts

@@ -18,8 +18,9 @@
  *       而非"投递失败"，见 `WakeDeliveryResult.notReady` —— 启动那一拍早于懒服务就绪是常态）
  *  4. 投递：`agent.followup(...)`（"Queue an ordinary follow-up turn and wake the driver"）
  *
- * 守卫（I-4 默认 + v1.34 S-1 解耦）：全局 `wakeSchedulerEnabled`（**缺省开**；**不再**回退旧键
- * `autopilotEnabled`——关周期自唤醒不得连带关一次性唤醒）｜
+ * 守卫（2026-09-21 起**本钟无闸**）：🔴 **恒武装**——原 `wakeSchedulerEnabled` 已砍，
+ * 本钟不再有「可被误关的开关」；旧配置残留该键**静默忽略**，且**不**回退 `autopilotEnabled`｜
+ * CRO 阶段另有**独立**总闸 `croEnabled`（只停 CRO，**不影响**本注册表投递）｜
  * 补跑窗口 2h（超窗置 missed 留痕）｜同 tick 串行｜唤起后维持 live（人类可介入）。
  */
 import type { Context } from 'cordis';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shgroup/dsh-serenity-hooks",
-  "version": "1.45.0",
+  "version": "1.45.1",
   "description": "宁静号 ACC harness（Native Cordis 插件）——给 DeepSeek Harness 装一个「AI 工作区」：11 个工具（container_fs/container_trajectory/dashboard/container_git/msm/praxis/handyman/localstore/container_admin/im-bridge/acc-diag）+ 机械约束（安全模式/工作区围墙/密钥守卫/对外输出守卫）+ 工作日志与原地重建 + 网页登录入口/微信桥/子角色/对外问答页/trajectory 唤醒注册表。适配 DSH 0.1.5-rc.2。",
   "license": "MIT",
   "repository": {