@shgroup/dsh-serenity-hooks 1.50.1 → 1.51.1

package/lib/index.js

@@ -1,13 +1,14 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { a as hostSessions, c as hostWeb, i as hostService, l as hostWebServer, n as hostInjected, o as hostSettings, r as hostLlm, s as hostSubagents, t as hostAgents } from "./access-CNccNtgf.js";
 import { a as findSerenityRoot, c as matchBlacklist, d as readCccName$1, f as readExclusiveTools, g as resolveInside, i as findGitRoot, l as pathInside, m as readTrajectorySkills, n as SAFE_MODE_MARKER, o as isSafeModeOn, p as readHandymanConfig, r as classifyPath, s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS, u as readBlacklist } from "./ccc-DG4Oc7I1.js";
-import { i as cccRootForExec, n as agentCwdFor, o as listCccs, r as cccRootForCwd, t as NO_CCC_FROM_AGENT_CWD } from "./ccc-roots-Duk89a-h.js";
-import { A as localIdStamp, C as setActiveSessionInfo, D as isoLocal, E as useSession, O as localFileStamp, S as sessionsRoot, T as summarize, _ as namingTitleFor, a as pruneMissingBindings, b as resolveSessionByTitle, c as setBindingStore, d as clearActiveSessionInfo, f as createSession, g as listSessions, h as getActiveSessionInfo, i as listBoundSessionIds, k as localHuman, l as DEFAULT_SESSION_SCOPE, m as findSession, n as PLUGIN_SOURCE, o as readLastBound, p as extractSessionMdPathFromText, r as appendBound, s as resolveSessionTrajectoryLabel, t as ACC_MESSAGE_KIND, u as TRAJECTORY_ACTIONS, v as parseSessionContextFromEvents, w as showSession, x as sessionEvents$1, y as readActiveSessionMd } from "./message-source-D72jte0u.js";
-import { a as readWeixinCredential, c as weixinInboundDir, d as LOCALSTORE_SCOPES, f as checkLocalstoreGitCompliance, g as runLocalStore, h as readStore, i as matchWeixinRoute, l as weixinSessionIdFor, m as readGitTrack, n as extractWeixinText, o as readWeixinSettings, p as localstorePath, r as hasVoiceItem, s as sanitizeFileName$1, t as extractWeixinMedia } from "./weixin-route-CWMRa36W.js";
+import { i as cccRootForExec, n as agentCwdFor, o as listCccs, r as cccRootForCwd, t as NO_CCC_FROM_AGENT_CWD } from "./ccc-roots-DtiMVRPo.js";
+import { A as localIdStamp, C as setActiveSessionInfo, D as isoLocal, E as useSession, O as localFileStamp, S as sessionsRoot, T as summarize, _ as namingTitleFor, a as pruneMissingBindings, b as resolveSessionByTitle, c as setBindingStore, d as clearActiveSessionInfo, f as createSession, g as listSessions, h as getActiveSessionInfo, i as listBoundSessionIds, k as localHuman, l as DEFAULT_SESSION_SCOPE, m as findSession, n as PLUGIN_SOURCE, o as readLastBound, p as extractSessionMdPathFromText, r as appendBound, s as resolveSessionTrajectoryLabel, t as ACC_MESSAGE_KIND, u as TRAJECTORY_ACTIONS, v as parseSessionContextFromEvents, w as showSession, x as sessionEvents$1, y as readActiveSessionMd } from "./message-source-LnJwIqLm.js";
+import { a as readWeixinCredential, c as weixinInboundDir, d as LOCALSTORE_SCOPES, f as checkLocalstoreGitCompliance, g as runLocalStore, h as readStore, i as matchWeixinRoute, l as weixinSessionIdFor, m as readGitTrack, n as extractWeixinText, o as readWeixinSettings, p as localstorePath, r as hasVoiceItem, s as sanitizeFileName$1, t as extractWeixinMedia } from "./weixin-route-7BtOiy4X.js";
 import { a as unregisterSkiffSession$1, i as skiffSessionSnapshot$1, n as skiffRoleFor$1, o as ACC_VERSION, r as skiffSessionInfo$1, t as registerSkiffSession$1 } from "./skiff-registry-BjIX_KD1.js";
-import { a as readSkiffRoles, c as roleMsmWhitelist, d as systemPromptSource, f as trajectorySubset, i as isSkiffSessionId, l as roleToolWhitelist, n as buildSkiffBasePrompt, o as resolveRoleSystemPrompt, r as createRolePromptReader, s as resolveSkiffKind } from "./skiff-role-KqQA6pkr.js";
-import { a as FACE_PORTS, c as MECHANISM_PORTS, i as ACP_HTTP_PORT, l as SKIFF_DEBUG_PORT, n as registerSettingsSection, o as GATEWAY_PORT, s as MAIN_WEB_PORT, t as readSimpleSettings, u as WEIXIN_SEND_PORT } from "./settings-section-EmaYsI-e.js";
-import { a as markdownToPlainText, c as sendTyping, i as getUpdates, l as sniffImageExt, n as downloadMedia, o as sendFileMessage, r as getConfig, s as sendTextMessage, t as TypingStatus } from "./weixin-api-CtFYm53S.js";
+import { a as readSkiffRoles, c as roleMsmWhitelist, d as systemPromptSource, f as trajectorySubset, i as isSkiffSessionId, l as roleToolWhitelist, n as buildSkiffBasePrompt, o as resolveRoleSystemPrompt, r as createRolePromptReader, s as resolveSkiffKind } from "./skiff-role-DQZ6eR51.js";
+import { a as ACP_HTTP_PORT, c as MAIN_WEB_PORT, d as WEIXIN_SEND_PORT, l as MECHANISM_PORTS, n as readSimpleSettings, o as FACE_PORTS, r as registerSettingsSection, s as GATEWAY_PORT, u as SKIFF_DEBUG_PORT } from "./settings-section-xHABl8nk.js";
+import { a as markdownToPlainText, c as sendTyping, i as getUpdates, l as sniffImageExt, n as downloadMedia, o as sendFileMessage, r as getConfig, s as sendTextMessage, t as TypingStatus } from "./weixin-api-BrRcPiQs.js";
+import { createRequire } from "node:module";
 import z from "@deepseek-ai/schemastery";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 import { basename, dirname, extname, isAbsolute, join, relative, resolve } from "node:path";
@@ -24,6 +25,7 @@ import * as zlib from "node:zlib";
 import { deriveEventMessage } from "@deepseek-ai/dsh-session";
 import { lookup } from "node:dns/promises";
 import { isIP } from "node:net";
+import { Resvg, initWasm } from "@resvg/resvg-wasm";
 //#region src/fs-ops.ts
 /**
 * fs-ops.ts — container_fs 纯操作层（cc_fs → container_fs，v1.30；零 DSH 依赖，可独立单测）
@@ -1984,11 +1986,11 @@ const HANDYMAN_GUIDE = `# handyman — Scale-Up Usage Guide (guide)
 ## Two modes (v1.31.3; default = foreground)
 | | foreground (default) | background |
 |---|---|---|
-| What | child agent(s) run the task ONCE and return their final text (jobs=[...] ⇒ parallel, cap 5) | loop-validated worker: hard while-loop + random completion code |
+| What | child agent(s) run the task ONCE and return their final text (jobs=[...] ⇒ parallel, cap 10) | loop-validated worker: hard while-loop + random completion code |
 | Use when | you need result(s) back now (per-case testers, single conversions, parallel fan-out) | long/unattended work needing anti-early-finish, resumability, or parallel jobs |
 | Loop / validation | none | stop-token is the ONLY completion condition; round cap (default 100); auto-restart (≤100) |
 | Progress file | none | AGENT_SESSIONS/handyman-<label>.md/.json (same label resumes) |
-| Parallel jobs | **yes** — jobs=[{task,label?,model?},...], **cap 5 (fixed)** | yes (jobs=[...], handyman.maxParallel default 10) |
+| Parallel jobs | **yes** — jobs=[{task,label?,model?},...], **cap 10 (fixed)** | yes (jobs=[...], handyman.maxParallel default 10) |
 | Mechanism | host delegation service ctx.subagents.start("spawn") + agentOptions | ctx.agents.create + internal while-loop |
 | Model source | CCC handyman.models whitelist (same for both) | same |
 
@@ -2027,12 +2029,12 @@ Before calling handyman, load eap (acc-eap skill) and design the "scale-up handy
 
 ### 4. Parallel strategy (both modes)
 - Independent subtasks can run in parallel:
-  · **foreground** — handyman(jobs=[{task,label?,model?},...]) ⇒ fan-out of custom-model subagents, **cap 5**,
+  · **foreground** — handyman(jobs=[{task,label?,model?},...]) ⇒ fan-out of custom-model subagents, **cap 10**,
     results come back **in the order you passed them** (label is only a display name here; per-job "model" allowed)
   · **background** — handyman(mode="background", jobs=[...]): each job gets its own label + task + stop token + progress file
 - Concurrency safety guaranteed: unique sessionId (handyman-<label>-<uuid>), progress files isolated per label
   (AGENT_SESSIONS/handyman-<label>.json) — same label resumes, different labels never interfere
-- Parallel cap: **foreground 5 (fixed)** / background handyman.maxParallel (default 10 — cheap models are cheap)
+- Parallel cap: **foreground 10 (fixed)** / background handyman.maxParallel (default 10 — cheap models are cheap)
 - Aggregation: foreground returns all outputs in one result; background: after each parallel job produces progress, the main agent merges (or spawns one aggregation handyman)
 - For programmable pipeline/phase orchestration at scale, use the platform's workflow tool instead
 
@@ -3133,7 +3135,7 @@ function toolsBlock() {
 		"  container_git— git operations (status/commit/push/log)",
 		"  msm          — execute a registered CCC MSM: msm(name, args); partial name returns candidates; inspect=true shows usage",
 		"  praxis       — actionable theory injection: praxis (index) / praxis eap / praxis neat / praxis cce",
-		"  handyman     — delegate work to a worker agent on a CCC-whitelisted model; mode=\"foreground\" (default) = child agent(s) run once and return their final text (jobs=[...] fans out in parallel, cap 5, per-job model); mode=\"background\" = loop-validated worker (completion code + round cap + restart + progress file), jobs=[] orchestrates parallel work",
+		"  handyman     — delegate work to a worker agent on a CCC-whitelisted model; mode=\"foreground\" (default) = child agent(s) run once and return their final text (jobs=[...] fans out in parallel, cap 10, per-job model); mode=\"background\" = loop-validated worker (completion code + round cap + restart + progress file), jobs=[] orchestrates parallel work",
 		"  localstore   — ACC local credential/config storage (CCC-root localstore.json; git policy localstore.gitTrack default deny)",
 		"  container_admin — container administration (the maintenance bay): role (Skiff roles: guide/validate/apply/list) / msm (register/deregister/check/guide/catalog/ccc-config) / config (view)",
 		"",
@@ -4459,16 +4461,18 @@ function parseJobs(raw) {
 	return jobs;
 }
 /**
-* 🔴 **foreground 并行上限 = 5**（owner 2026-09-27 具名令：「handyman foreground 能否允许并行，最大 5；
-* 就当是支持自定模型的 subagent 用了，急需」）。
+* 🔴 **foreground 并行上限 = 10**（owner 2026-09-29 具名令：「这个版本顺手帮我把 handyman 并行度从 5 调整成 10」；
+* 原值 5 出自 owner 2026-09-27 的具名令「最大 5；就当是支持自定模型的 subagent 用了，急需」）。
 *
-* 为什么是**硬编码**而不是又一个配置键：owner 的原话就是"最大 5"（同 `REBUILD-TODO` 那次的裁决口径
-* —— 设定项能不加就不加，见 S142 的「可砍设定项」）。若将来真要调，再按具名令改成配置。
+* 为什么是**硬编码**而不是又一个配置键：owner 两次都是**直接给数**（同 `REBUILD-TODO` 那次的裁决口径
+* —— 设定项能不加就不加，见 S142 的「可砍设定项」）。若将来还要调，仍按具名令改这个常量。
 *
-* 为什么 foreground 也要限流（而不是直接复用 `handyman.maxParallel` = 10）：**foreground 会占住主
-* agent 的这一轮**（调用方在等结果），并发越高越容易把宿主的并发面与用量推上去 ⇒ 前台给一个更紧的闸。
+* 为什么 foreground 仍与 background 分开（后台 = `handyman.maxParallel`，缺省 **10**）：**foreground 会占住
+* 主 agent 的这一轮**（调用方在等结果），并发越高越容易把宿主的并发面与用量推上去。
+* ⚠️ 现在两档**数值相等但语义不同**（前台 = 占住本轮 ／ 后台 = 不占）⇒ **刻意不合并成一个常量**：
+* 合并会让"哪天要给前台单独降档"变成一次语义手术。
 */
-const FOREGROUND_MAX_PARALLEL = 5;
+const FOREGROUND_MAX_PARALLEL = 10;
 /** foreground 的 jobs 解析（与 background 的差别：**label 可选** —— 前台 label 只是显示名，不命名进度文件） */
 function parseForegroundJobs(raw) {
 	if (!Array.isArray(raw) || raw.length === 0) return null;
@@ -4708,11 +4712,11 @@ async function runHandymanJob(ctx, opts) {
 function createHandymanTool(ctx) {
 	return defineTool({
 		name: "handyman",
-		description: "The handyman (杂工): delegate work to a worker agent on a CCC-configured model. Two modes (v1.31.3).\nMode \"foreground\" (DEFAULT): one serial child agent runs the task once and returns its final text — no loop, no completion-code validation, no progress file; use it for one-shot serial delegation (e.g. per-case testers that just gather evidence). Usage: handyman(task, [label], [model]).\nMode \"background\": the loop-validated worker — internal hard while-loop whose ONLY completion condition is the worker echoing this round's random completion code (stop token, prevents low-intelligence models from finishing early), round cap (default 100, resumable), automatic restart on abnormal stop (≤100), progress file AGENT_SESSIONS/handyman-<label>.md/.json (same label resumes), and parallel jobs (handyman.maxParallel, default 10). Usage: handyman(mode=\"background\", task, label, [model]) or handyman(mode=\"background\", jobs=[{task,label,model?},...]).\nChoosing: need exactly one result back now → foreground; need anti-early-finish guarantees or resumability → background; need N results back now (parallel, per-job model) → foreground with jobs (cap 5).\nModel: only models whitelisted in .opencode/serenity.json \"handyman.models\" (missing config = error); default reads handyman.defaultModel. Both modes share the same whitelist and default.\nProvider check: the whitelist lives in the CCC (it travels with the repo) while provider adapters are registered per machine by the host — so before spawning, the provider of the resolved model is verified against the adapters present on THIS machine. If it is missing you get the available providers plus the exact fix (foreground: in `diagnostic`; background: thrown), never an opaque failure.\nRecursion: a worker's tool set excludes handyman itself (orchestration belongs to the main agent).\nGuide: handyman(guide=true) prints the scale-up usage guide.",
+		description: "The handyman (杂工): delegate work to a worker agent on a CCC-configured model. Two modes (v1.31.3).\nMode \"foreground\" (DEFAULT): one serial child agent runs the task once and returns its final text — no loop, no completion-code validation, no progress file; use it for one-shot serial delegation (e.g. per-case testers that just gather evidence). Usage: handyman(task, [label], [model]).\nMode \"background\": the loop-validated worker — internal hard while-loop whose ONLY completion condition is the worker echoing this round's random completion code (stop token, prevents low-intelligence models from finishing early), round cap (default 100, resumable), automatic restart on abnormal stop (≤100), progress file AGENT_SESSIONS/handyman-<label>.md/.json (same label resumes), and parallel jobs (handyman.maxParallel, default 10). Usage: handyman(mode=\"background\", task, label, [model]) or handyman(mode=\"background\", jobs=[{task,label,model?},...]).\nChoosing: need exactly one result back now → foreground; need anti-early-finish guarantees or resumability → background; need N results back now (parallel, per-job model) → foreground with jobs (cap 10).\nModel: only models whitelisted in .opencode/serenity.json \"handyman.models\" (missing config = error); default reads handyman.defaultModel. Both modes share the same whitelist and default.\nProvider check: the whitelist lives in the CCC (it travels with the repo) while provider adapters are registered per machine by the host — so before spawning, the provider of the resolved model is verified against the adapters present on THIS machine. If it is missing you get the available providers plus the exact fix (foreground: in `diagnostic`; background: thrown), never an opaque failure.\nRecursion: a worker's tool set excludes handyman itself (orchestration belongs to the main agent).\nGuide: handyman(guide=true) prints the scale-up usage guide.",
 		parameters: {
 			mode: {
 				type: "string",
-				description: "Delegation mode: \"foreground\" (default — child agent(s) run once and return their final text; accepts `jobs` for parallel fan-out, cap 5) or \"background\" (loop-validated worker with completion-code check, round cap, auto-restart, progress file, parallel jobs)"
+				description: "Delegation mode: \"foreground\" (default — child agent(s) run once and return their final text; accepts `jobs` for parallel fan-out, cap 10) or \"background\" (loop-validated worker with completion-code check, round cap, auto-restart, progress file, parallel jobs)"
 			},
 			task: {
 				type: "string",
@@ -4732,7 +4736,7 @@ function createHandymanTool(ctx) {
 			},
 			jobs: {
 				type: "array",
-				description: "Multi-job orchestration (workflow capability): [{task, label?, model?}, ...] — runs jobs in parallel. Cap: foreground 5 (fixed) / background handyman.maxParallel (default 10). Results keep the order you passed them in.",
+				description: "Multi-job orchestration (workflow capability): [{task, label?, model?}, ...] — runs jobs in parallel. Cap: foreground 10 (fixed) / background handyman.maxParallel (default 10). Results keep the order you passed them in.",
 				items: {
 					type: "object",
 					properties: {
@@ -10354,7 +10358,7 @@ function registerStatusApi(ctx, opts = {}) {
 					return;
 				}
 				const settings = readAdvancedSettings();
-				const { readSimpleSettings } = await import("./settings-section-EmaYsI-e.js").then((n) => n.r);
+				const { readSimpleSettings } = await import("./settings-section-xHABl8nk.js").then((n) => n.i);
 				const simple = readSimpleSettings();
 				const allowed = settings.publicAsk.allowed;
 				const port = simple.acpHttpPort ?? ACP_HTTP_PORT;
@@ -10389,11 +10393,11 @@ function registerStatusApi(ctx, opts = {}) {
 						sendJson$4(res, 400, { error: chk.error });
 						return;
 					}
-					const { readWeixinSettings } = await import("./weixin-route-CWMRa36W.js").then((n) => n.u);
+					const { readWeixinSettings } = await import("./weixin-route-7BtOiy4X.js").then((n) => n.u);
 					const { weixinBridgeStatus } = await Promise.resolve().then(() => weixin_bridge_exports);
 					const settings = readWeixinSettings(chk.root);
 					const bridge = weixinBridgeStatus().find((b) => b.ccc === chk.root);
-					const { readWeixinCredential } = await import("./weixin-route-CWMRa36W.js").then((n) => n.u);
+					const { readWeixinCredential } = await import("./weixin-route-7BtOiy4X.js").then((n) => n.u);
 					const accounts = (settings.accounts ?? []).map((a) => ({
 						accountId: a.accountId,
 						name: a.name ?? void 0,
@@ -10422,10 +10426,10 @@ function registerStatusApi(ctx, opts = {}) {
 				}
 				const root = chk.root;
 				if (body.action === "login-start") {
-					const { fetchQRCode } = await import("./weixin-api-CtFYm53S.js").then((n) => n.u);
+					const { fetchQRCode } = await import("./weixin-api-BrRcPiQs.js").then((n) => n.u);
 					const { randomUUID } = await import("node:crypto");
 					for (const [key, v] of weixinLogins) if (Date.now() - v.startedAt > WEIXIN_LOGIN_TTL_MS) weixinLogins.delete(key);
-					const { readWeixinSettings } = await import("./weixin-route-CWMRa36W.js").then((n) => n.u);
+					const { readWeixinSettings } = await import("./weixin-route-7BtOiy4X.js").then((n) => n.u);
 					const qr = await fetchQRCode({ botType: readWeixinSettings(root).botType ?? void 0 });
 					const loginKey = randomUUID();
 					weixinLogins.set(loginKey, {
@@ -10446,7 +10450,7 @@ function registerStatusApi(ctx, opts = {}) {
 						sendJson$4(res, 400, { error: "missing accountId" });
 						return;
 					}
-					const { removeWeixinAccount } = await import("./weixin-route-CWMRa36W.js").then((n) => n.u);
+					const { removeWeixinAccount } = await import("./weixin-route-7BtOiy4X.js").then((n) => n.u);
 					const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 					removeWeixinAccount(root, body.accountId);
 					syncCccBridge(ctx, root);
@@ -10459,8 +10463,8 @@ function registerStatusApi(ctx, opts = {}) {
 						sendJson$4(res, 400, { error: "invalid routes (expected [{user, role}, ...])" });
 						return;
 					}
-					const { saveWeixinRoutes } = await import("./weixin-route-CWMRa36W.js").then((n) => n.u);
-					const { readSkiffRoles } = await import("./skiff-role-KqQA6pkr.js").then((n) => n.u);
+					const { saveWeixinRoutes } = await import("./weixin-route-7BtOiy4X.js").then((n) => n.u);
+					const { readSkiffRoles } = await import("./skiff-role-DQZ6eR51.js").then((n) => n.u);
 					const roles = readSkiffRoles(root);
 					for (const r of routes) if (!roles.has(r.role)) {
 						sendJson$4(res, 400, { error: `unknown role: ${r.role} (not in ${root} skiff.roles)` });
@@ -10472,7 +10476,7 @@ function registerStatusApi(ctx, opts = {}) {
 				}
 				if (body.action === "set-enabled") {
 					const enabled = body.enabled === true;
-					const { readWeixinSettings, setWeixinEnabled } = await import("./weixin-route-CWMRa36W.js").then((n) => n.u);
+					const { readWeixinSettings, setWeixinEnabled } = await import("./weixin-route-7BtOiy4X.js").then((n) => n.u);
 					const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 					const settings = readWeixinSettings(root);
 					if (enabled && (settings.accounts ?? []).length === 0) {
@@ -10515,8 +10519,8 @@ function registerStatusApi(ctx, opts = {}) {
 					sendJson$4(res, 200, { status: "expired" });
 					return;
 				}
-				const { pollQRStatus } = await import("./weixin-api-CtFYm53S.js").then((n) => n.u);
-				const { readWeixinSettings } = await import("./weixin-route-CWMRa36W.js").then((n) => n.u);
+				const { pollQRStatus } = await import("./weixin-api-BrRcPiQs.js").then((n) => n.u);
+				const { readWeixinSettings } = await import("./weixin-route-7BtOiy4X.js").then((n) => n.u);
 				const settings = readWeixinSettings(login.root);
 				const status = await pollQRStatus({
 					baseUrl: void 0,
@@ -10531,7 +10535,7 @@ function registerStatusApi(ctx, opts = {}) {
 							});
 							return;
 						}
-						const { upsertWeixinAccount, writeWeixinCredential, nextWeixinAccountId } = await import("./weixin-route-CWMRa36W.js").then((n) => n.u);
+						const { upsertWeixinAccount, writeWeixinCredential, nextWeixinAccountId } = await import("./weixin-route-7BtOiy4X.js").then((n) => n.u);
 						const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 						const accountId = nextWeixinAccountId(settings);
 						upsertWeixinAccount(login.root, {
@@ -10646,12 +10650,12 @@ const VOYAGE_PATH = "/serenity/voyage";
 */
 const VOYAGE_ASSET = "assets/serenity-voyage.html";
 /** 包根 = 本模块所在目录的上一级（构建产物在 `lib/`，与 `assets/` 同级；同 constants.ts 定位法） */
-function packageRootPath() {
+function packageRootPath$1() {
 	return join(dirname(fileURLToPath(import.meta.url)), "..");
 }
 /** 资产绝对路径（导出以便测试与 pack-check 共用同一判据来源） */
 function voyageAssetPath() {
-	return join(packageRootPath(), VOYAGE_ASSET);
+	return join(packageRootPath$1(), VOYAGE_ASSET);
 }
 /** 缓存（830 KB，避免每次展开卡片都读盘；进程内只读一次） */
 let cachedHtml = null;
@@ -16684,7 +16688,7 @@ function manualOutputFallbackNeeded(input) {
 */
 async function resolveCccRootByAlias(ctx, alias) {
 	try {
-		const { listCccs } = await import("./ccc-roots-Duk89a-h.js").then((n) => n.a);
+		const { listCccs } = await import("./ccc-roots-DtiMVRPo.js").then((n) => n.a);
 		const entries = await listCccs(ctx);
 		const byName = entries.find((e) => e.name === alias);
 		if (byName) return byName.root;
@@ -17183,7 +17187,7 @@ function syncHumanChannel(ctx) {
 	(async () => {
 		try {
 			stopMachineLoops();
-			const { listCccs } = await import("./ccc-roots-Duk89a-h.js").then((n) => n.a);
+			const { listCccs } = await import("./ccc-roots-DtiMVRPo.js").then((n) => n.a);
 			for (const entry of await listCccs(ctx)) syncCccBridge(ctx, entry.root);
 		} catch {}
 	})();
@@ -17419,7 +17423,7 @@ function matchCcc(input, candidates) {
 }
 /** 组装候选列表（`ccc-roots.listCccs` 投影 + `.serenity` 名；动态 import 保持本模块静态依赖轻量） */
 async function collectCandidates(ctx) {
-	const { listCccs } = await import("./ccc-roots-Duk89a-h.js").then((n) => n.a);
+	const { listCccs } = await import("./ccc-roots-DtiMVRPo.js").then((n) => n.a);
 	const entries = await listCccs(ctx, { defaultRoot: process.cwd() });
 	const seen = /* @__PURE__ */ new Set();
 	const out = [];
@@ -19270,6 +19274,936 @@ function createAccDiagTool(ctx) {
 	});
 }
 //#endregion
+//#region src/diagram/dsl.ts
+/** 文本形态的标签（其余标签自闭合、无文本内容） */
+const TEXT_TAGS = [
+	"title",
+	"subtitle",
+	"text"
+];
+/** 属性值 → 数字；缺失或非数字返回 undefined（不抛） */
+function num(v) {
+	if (v === void 0) return void 0;
+	const t = v.trim();
+	if (t === "") return void 0;
+	const n = Number(t);
+	return Number.isFinite(n) ? n : void 0;
+}
+/** 逗号分隔的 4 个数字；不合法返回 undefined */
+function quad(v) {
+	const parts = v.split(",");
+	if (parts.length !== 4) return void 0;
+	const [x0, y0, x1, y1] = parts.map(num);
+	if (x0 === void 0 || y0 === void 0 || x1 === void 0 || y1 === void 0) return void 0;
+	return {
+		x0,
+		y0,
+		x1,
+		y1
+	};
+}
+/** 剥离 <!-- ... -->（可跨行）；用空格占位以保住行号 */
+function stripComments(src) {
+	let out = "";
+	let i = 0;
+	while (i < src.length) {
+		const start = src.indexOf("<!--", i);
+		if (start < 0) {
+			out += src.slice(i);
+			break;
+		}
+		out += src.slice(i, start);
+		const end = src.indexOf("-->", start + 4);
+		const stop = end < 0 ? src.length : end + 3;
+		out += src.slice(start, stop).replace(/[^\n]/g, " ");
+		i = stop;
+	}
+	return out;
+}
+/** 索引处字符所在行（1-based） */
+function lineAt(src, idx) {
+	let ln = 1;
+	for (let i = 0; i < idx; i++) if (src[i] === "\n") ln++;
+	return ln;
+}
+/** 解析标签格式源码。**绝不抛异常**：看不懂的行记进 errors 并跳过，其余照收。 */
+function parseDsl(source) {
+	const src = stripComments(source);
+	const errors = [];
+	/**
+	* 🔴 **默认坐标系 = 画布像素、y 向下**（v1.51.1 修的真缺陷，见下）。
+	*
+	* v1.51.0 的默认值是从旧 mini-SVG 移植时**原样带过来**的：`0~100 × −19~72 且 y 向上`
+	* —— 而工具描述里**只写了 `box="x0,y0,x1,y1"`，没写量程与单位**。
+	* 模型按常识写画布像素（`box="100,100,400,200"`）⇒ 渲染器把它塞进那个 100 宽的域里
+	* ⇒ **所有坐标飞出画布**（实测 SVG：`x=990 y=-919 w=2940`），而 `errors`／`lint` **全空**
+	* ⇒ 图是空白却一声不吭，模型只能反复试错（owner 实测「别的 CCC 根本用不起来」的根因）。
+	*
+	* ⇒ 现在：**默认域 = `0,0,width,height`**（`width/height` 未写时 1000×780）⇒ 1 单位 ≈ 1 像素量级，
+	* `y` 越大越靠下（`dsl-render.ts` 的 `py()` 同批改成 y 向下）。
+	* `domain="x0,y0,x1,y1"` 仍然保留 —— 需要"数学式坐标窗口"时显式写它（**y 也向下**，口径只有一种）。
+	*/
+	const model = {
+		W: 1e3,
+		H: 780,
+		x0: 0,
+		y0: 0,
+		x1: 1e3,
+		y1: 780,
+		pad: 10,
+		title: "",
+		subtitle: "",
+		colors: {},
+		rects: [],
+		segments: [],
+		texts: []
+	};
+	const ids = /* @__PURE__ */ new Set();
+	let rectOrdinal = 0;
+	let tagIndex = 0;
+	let i = 0;
+	const fail = (n, ln, msg) => {
+		errors.push(`第 ${n} 个标签（第 ${ln} 行）：${msg}`);
+	};
+	while (i < src.length) {
+		const lt = src.indexOf("<", i);
+		if (lt < 0) break;
+		let j = lt + 1;
+		let inQuote = false;
+		while (j < src.length) {
+			const c = src[j];
+			if (c === "\"") inQuote = !inQuote;
+			else if (c === ">" && !inQuote) break;
+			j++;
+		}
+		const ln = lineAt(src, lt);
+		if (j >= src.length) {
+			tagIndex++;
+			fail(tagIndex, ln, "标签未闭合（属性值引号未闭合）");
+			const gt = src.indexOf(">", lt + 1);
+			if (gt < 0) break;
+			i = gt + 1;
+			continue;
+		}
+		const raw = src.slice(lt + 1, j);
+		if (/^\s*\//.test(raw)) {
+			i = j + 1;
+			continue;
+		}
+		tagIndex++;
+		const selfClosing = /\/\s*$/.test(raw);
+		const body = raw.replace(/\/\s*$/, "");
+		const head = /^\s*([A-Za-z_][\w-]*)/.exec(body);
+		const tag = head ? head[1] : void 0;
+		if (tag === void 0) {
+			fail(tagIndex, ln, "标签名缺失或非法");
+			i = j + 1;
+			continue;
+		}
+		const attrs = {};
+		const attrRe = /([A-Za-z_][\w-]*)\s*=\s*"([^"]*)"/g;
+		let a;
+		while ((a = attrRe.exec(body)) !== null) {
+			const [k, val] = [a[1], a[2]];
+			if (k !== void 0 && val !== void 0) attrs[k] = val;
+		}
+		let content = "";
+		let next = j + 1;
+		if (!selfClosing && TEXT_TAGS.indexOf(tag) >= 0) {
+			const close = src.indexOf(`</${tag}`, next);
+			if (close < 0) {
+				fail(tagIndex, ln, `缺少 </${tag}> 闭合标签`);
+				i = next;
+				continue;
+			}
+			content = src.slice(next, close).trim();
+			const gt = src.indexOf(">", close);
+			next = gt < 0 ? src.length : gt + 1;
+		}
+		i = next;
+		if (tag === "diagram") {
+			const w = num(attrs.width);
+			const h = num(attrs.height);
+			if (w !== void 0) model.W = w;
+			if (h !== void 0) model.H = h;
+			if (attrs.domain !== void 0) {
+				const d = quad(attrs.domain);
+				if (d) {
+					model.x0 = d.x0;
+					model.y0 = d.y0;
+					model.x1 = d.x1;
+					model.y1 = d.y1;
+				} else fail(tagIndex, ln, `domain 不是 4 个数字：${attrs.domain}（已忽略）`);
+			} else {
+				model.x0 = 0;
+				model.y0 = 0;
+				model.x1 = model.W;
+				model.y1 = model.H;
+			}
+			continue;
+		}
+		if (tag === "title" || tag === "subtitle") {
+			if (tag === "title") model.title = content;
+			else model.subtitle = content;
+			continue;
+		}
+		if (tag === "color") {
+			const name = attrs.name;
+			const value = attrs.value;
+			if (!name || value === void 0) {
+				fail(tagIndex, ln, "color 缺 name 或 value");
+				continue;
+			}
+			model.colors[name] = value;
+			continue;
+		}
+		if (tag === "legend") {
+			model.legend = {
+				x: num(attrs.x) ?? 0,
+				y: num(attrs.y) ?? 0,
+				size: num(attrs.size) ?? 12
+			};
+			continue;
+		}
+		if (tag === "rect") {
+			rectOrdinal++;
+			if (attrs.box === void 0) {
+				fail(tagIndex, ln, "rect 缺 box");
+				continue;
+			}
+			const b = quad(attrs.box);
+			if (!b) {
+				fail(tagIndex, ln, `box 不是 4 个数字：${attrs.box}`);
+				continue;
+			}
+			const label = attrs.label;
+			const id = attrs.id || attrs.name || label || `rect${rectOrdinal}`;
+			if (ids.has(id)) {
+				fail(tagIndex, ln, `rect id 重复：${id}`);
+				continue;
+			}
+			ids.add(id);
+			const rect = {
+				id,
+				x0: Math.min(b.x0, b.x1),
+				y0: Math.min(b.y0, b.y1),
+				x1: Math.max(b.x0, b.x1),
+				y1: Math.max(b.y0, b.y1),
+				size: num(attrs.size) ?? 13,
+				fill: attrs.fill ?? ""
+			};
+			if (label !== void 0) rect.label = label;
+			model.rects.push(rect);
+			continue;
+		}
+		if (tag === "line" || tag === "arrow") {
+			const from = attrs.from;
+			const to = attrs.to;
+			if (!from || !to) {
+				fail(tagIndex, ln, `${tag} 缺 from 或 to`);
+				continue;
+			}
+			const seg = {
+				kind: tag,
+				from,
+				to,
+				free: attrs.free === "1",
+				ln
+			};
+			if (attrs.color !== void 0) seg.color = attrs.color;
+			const w = num(attrs.width);
+			if (w !== void 0) seg.width = w;
+			if (attrs.dash !== void 0) seg.dash = attrs.dash;
+			model.segments.push(seg);
+			continue;
+		}
+		if (tag === "text") {
+			const x = num(attrs.x);
+			const y = num(attrs.y);
+			if (x === void 0 || y === void 0) {
+				fail(tagIndex, ln, "text 缺 x 或 y");
+				continue;
+			}
+			const al = attrs.align;
+			const t = {
+				x,
+				y,
+				text: content,
+				align: al === "center" || al === "middle" ? "center" : al === "right" || al === "end" ? "right" : "left",
+				size: num(attrs.size) ?? 12.5,
+				ln
+			};
+			if (attrs.color !== void 0) t.color = attrs.color;
+			model.texts.push(t);
+			continue;
+		}
+		fail(tagIndex, ln, `未知标签：<${tag}>`);
+	}
+	return {
+		model,
+		errors
+	};
+}
+//#endregion
+//#region src/diagram/fonts.ts
+/**
+* diagram 字体事实源（**唯一真相源**：资产路径 ＋ 家族名 ＋ CSS 家族栈）
+*
+* 为什么单独成模块（R↓）：两处都要它，而它们的依赖面**必须**保持不同 ——
+*   · `dsl-render.ts` 只生成 SVG 字符串（**纯函数、零 fs**），它需要在 SVG 里写 `font-family` 栈；
+*   · `rasterize.ts` 要读字体文件喂给 wasm，并设 `defaultFontFamily`。
+* ⇒ 谁都不该从对方 import（前者会被拖进 `node:fs`／wasm，后者不该定义 SVG 措辞）。
+*
+* ## 为什么是**三个**字型（每一个都由一张实测图证明，不是偏好，也不是"多带点保险"）
+*
+* | 字型 | 覆盖 | 它修好了什么（实测） |
+* |---|---|---|
+* | `DroidSansFallbackFull.ttf` | 汉字 | 没有它 ⇒ 中文全是方框（docker 实测：wasm 对系统字体**完全不可见**） |
+* | `NotoSans-Regular.ttf` | 拉丁 | 没有它 ⇒ `diagram` ／ `parseDsl` 全变方框（Droid 是 **CJK 兜底字型**，**不含拉丁**） |
+* | `DejaVuSans.ttf` | 符号 | 没有它 ⇒ `① ② ③` ／ `⇒ ⇒` ／ `→` 仍是方框（**前两个都没有这些字形**，实测对照图见 `docs/diagram-tool-feasibility.md`） |
+*
+* 🔴 **上一版的判据漏洞**（v1.51.1 修的）：那条"有字 vs 无字逐字节不同"只证明**有墨**，
+* 没证明**墨是那个字** —— 方框也是墨 ⇒ 拉丁全变方框时它**照样绿**。
+* ⇒ 现在每条覆盖声明都配一条**点名字符集**的差分用例：同长度不同字形 ⇒ 必须出不同墨。
+*
+* ## 家族名是**量出来的**，不是猜的
+* 下表取自各文件 `name` 表 `nameID=1`（平台 3 ／ UTF-16BE）：
+* `Droid Sans Fallback` ／ `Noto Sans` ／ `DejaVu Sans`。
+* 写错名字时 resvg 的自动回退仍可能把字画出来（**图上看不出来**）⇒ 名字正确与否只能这样证明。
+*/
+const DIAGRAM_CJK_FONT_ASSET = "assets/diagram/DroidSansFallbackFull.ttf";
+const DIAGRAM_LATIN_FONT_ASSET = "assets/diagram/NotoSans-Regular.ttf";
+const DIAGRAM_SYMBOL_FONT_ASSET = "assets/diagram/DejaVuSans.ttf";
+/** 汉字字型的家族名（**字体文件自报的族名**，写错就取不到） */
+const DIAGRAM_CJK_FONT_FAMILY = "Droid Sans Fallback";
+/**
+* SVG 里写的家族栈（**顺序即回退顺序**）：拉丁优先取 Noto，符号落 DejaVu，其余字形落到 Droid。
+* ⚠️ 末尾的通用名（`sans-serif`）只是兜底惯例：本部署里 resvg **不带系统字体**
+* （`loadSystemFonts: false`）⇒ 它取不到任何东西，真正的兜底是上面三个内置字型。
+*/
+const DIAGRAM_FONT_STACK = `'Noto Sans', 'DejaVu Sans', '${DIAGRAM_CJK_FONT_FAMILY}', sans-serif`;
+//#endregion
+//#region src/diagram/dsl-render.ts
+const TITLE_BAND = 68;
+const EPS = .35;
+const DEF_W = 960;
+const DEF_H = 540;
+const DEF_PAD = 24;
+const DEF_SIZE = 14;
+const DEF_FILL = "#cccccc";
+const DEF_INK = "#111111";
+const n = (v, d) => typeof v === "number" && Number.isFinite(v) ? v : d;
+const r2 = (v) => Math.round(v * 100) / 100;
+const esc = (v) => String(v ?? "").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+const textWidth = (s, size) => {
+	let w = 0;
+	for (const ch of s) w += (ch.codePointAt(0) ?? 0) > 11904 ? size : size * .55;
+	return w;
+};
+const lineNo = (s, i) => typeof s.line === "number" && Number.isFinite(s.line) ? s.line : i + 1;
+const ANCHOR_RE = /^(.+)\.(ne|nw|se|sw|n|s|e|w|c)(?:([+-]?\d+(?:\.\d+)?),([+-]?\d+(?:\.\d+)?))?$/;
+const NUM_PAIR_RE = /^(-?\d+(?:\.\d+)?),(-?\d+(?:\.\d+)?)$/;
+/** 点是否在块内或贴块边（eps = EPS） */
+const inBox = (p, r) => p.x >= n(r.x0, 0) - EPS && p.x <= n(r.x1, 0) + EPS && p.y >= n(r.y0, 0) - EPS && p.y <= n(r.y1, 0) + EPS;
+/** Liang-Barsky：线段与轴对齐盒是否相交 */
+const segHitsBox = (ax, ay, bx, by, box) => {
+	const p = [
+		ax - bx,
+		bx - ax,
+		ay - by,
+		by - ay
+	];
+	const q = [
+		ax - box[0],
+		box[2] - ax,
+		ay - box[1],
+		box[3] - ay
+	];
+	let t0 = 0;
+	let t1 = 1;
+	for (let i = 0; i < 4; i++) {
+		const pi = p[i] ?? 0;
+		const qi = q[i] ?? 0;
+		if (pi === 0) {
+			if (qi < 0) return false;
+			continue;
+		}
+		const r = qi / pi;
+		if (pi < 0) {
+			if (r > t1) return false;
+			if (r > t0) t0 = r;
+		} else if (r < t0) return false;
+		else if (r < t1) t1 = r;
+	}
+	return true;
+};
+/** 把模型渲染成 SVG，并做四项体检。绝不抛异常：出错的图元跳过、记 errors、其余照画。 */
+/**
+* 🔴 **适配层（2026-09-29 加，修一处真缺陷）**
+*
+* 本文件此前用 `model as unknown as Model` 把 `DslModel` **硬 cast** 成自己的内部形状
+* ⇒ **编译器对字段名彻底变瞎**。而两侧字段名实际不同：
+* `W/H` vs `width/height` ／ `fill` vs `color` ／ `ln` vs `line` ／ `align` vs `anchor`
+* ⇒ 运行期整片取到 `undefined`，**而 `typecheck` 照样绿**（那个绿是假信号）。
+*
+* 现在改为**逐字段显式搬运**：类型系统会核对每一个名字 ⇒ 再对不上就**编译不过**。
+* 🆕 判据：**"typecheck 通过"≠"两侧接口一致"** —— 一个 cast 就足以让类型检查失效；
+* 这一层在，`typecheck` 才是证据。
+*/
+function adapt(model) {
+	return {
+		title: model.title,
+		subtitle: model.subtitle,
+		width: model.W,
+		height: model.H,
+		pad: model.pad,
+		x0: model.x0,
+		x1: model.x1,
+		y0: model.y0,
+		y1: model.y1,
+		colors: model.colors,
+		legend: model.legend,
+		rects: model.rects.map((r) => ({
+			id: r.id,
+			label: r.label,
+			x0: r.x0,
+			y0: r.y0,
+			x1: r.x1,
+			y1: r.y1,
+			color: r.fill,
+			size: r.size
+		})),
+		segs: model.segments.map((s) => ({
+			kind: s.kind,
+			from: s.from,
+			to: s.to,
+			color: s.color,
+			width: s.width,
+			dash: s.dash,
+			free: s.free,
+			line: s.ln
+		})),
+		texts: model.texts.map((t) => ({
+			x: t.x,
+			y: t.y,
+			text: t.text,
+			size: t.size,
+			color: t.color,
+			anchor: t.align
+		}))
+	};
+}
+function renderDsl(model) {
+	const m = adapt(model);
+	const lint = [];
+	const errors = [];
+	const rects = m.rects ?? [];
+	const segs = m.segs ?? [];
+	const texts = m.texts ?? [];
+	const colors = m.colors ?? {};
+	const ids = rects.map((r) => r.id);
+	const col = (v, d) => {
+		const s = typeof v === "string" ? v : "";
+		if (s === "") return d;
+		if (s.charAt(0) === "#") return s;
+		return colors[s] ?? s;
+	};
+	const W = n(m.width, DEF_W);
+	const H = n(m.height, DEF_H);
+	const pad = n(m.pad, DEF_PAD);
+	const gx = [];
+	const gy = [];
+	for (const r of rects) gx.push(n(r.x0, 0), n(r.x1, 0));
+	for (const r of rects) gy.push(n(r.y0, 0), n(r.y1, 0));
+	for (const t of texts) gx.push(n(t.x, 0));
+	for (const t of texts) gy.push(n(t.y, 0));
+	const hasBox = gx.length > 0 && gy.length > 0;
+	const x0 = n(m.x0, hasBox ? Math.min(...gx) : 0);
+	const x1 = n(m.x1, hasBox ? Math.max(...gx) : 100);
+	const y0 = n(m.y0, hasBox ? Math.min(...gy) : 0);
+	const y1 = n(m.y1, hasBox ? Math.max(...gy) : 100);
+	const scaleX = (W - 2 * pad) / (x1 - x0 || 1);
+	const scaleY = (H - TITLE_BAND - pad) / (y1 - y0 || 1);
+	const px = (x) => r2(pad + (x - x0) * scaleX);
+	const py = (y) => r2(TITLE_BAND + (y - y0) * scaleY);
+	/** 绘图窗口 = 声明的域（默认就是画布）。出窗口的图元**报错并跳过**，不静默画到看不见的地方。 */
+	const tolX = Math.abs(x1 - x0) * .01;
+	const tolY = Math.abs(y1 - y0) * .01;
+	const outside = (x, y) => x < x0 - tolX || x > x1 + tolX || y < y0 - tolY || y > y1 + tolY;
+	const windowText = `坐标窗口 x ${r2(x0)}..${r2(x1)} ／ y ${r2(y0)}..${r2(y1)}（y 向下；不写 domain 时＝画布）`;
+	const resolve = (token) => {
+		const t = String(token ?? "").trim();
+		const np = NUM_PAIR_RE.exec(t);
+		if (np) return {
+			x: Number(np[1]),
+			y: Number(np[2]),
+			numeric: true
+		};
+		const mt = ANCHOR_RE.exec(t);
+		if (!mt) return null;
+		const ref = rects.find((r) => r.id === mt[1]);
+		if (!ref) return null;
+		const rx0 = n(ref.x0, 0);
+		const rx1 = n(ref.x1, 0);
+		const ry0 = n(ref.y0, 0);
+		const ry1 = n(ref.y1, 0);
+		const cx = (rx0 + rx1) / 2;
+		const cy = (ry0 + ry1) / 2;
+		const base = {
+			n: [cx, ry0],
+			s: [cx, ry1],
+			e: [rx1, cy],
+			w: [rx0, cy],
+			c: [cx, cy],
+			ne: [rx1, ry0],
+			nw: [rx0, ry0],
+			se: [rx1, ry1],
+			sw: [rx0, ry1]
+		}[mt[2] ?? ""];
+		if (!base) return null;
+		const dx = mt[3] === void 0 ? 0 : Number(mt[3]);
+		const dy = mt[4] === void 0 ? 0 : Number(mt[4]);
+		return {
+			x: base[0] + dx,
+			y: base[1] + dy,
+			numeric: false
+		};
+	};
+	for (let i = 0; i < rects.length; i++) for (let j = i + 1; j < rects.length; j++) {
+		const A = rects[i];
+		const B = rects[j];
+		const ix = Math.min(n(A.x1, 0), n(B.x1, 0)) - Math.max(n(A.x0, 0), n(B.x0, 0));
+		const iy = Math.min(n(A.y1, 0), n(B.y1, 0)) - Math.max(n(A.y0, 0), n(B.y0, 0));
+		if (ix > 0 && iy > 0) lint.push(`块重叠：${A.label ?? A.id} × ${B.label ?? B.id} ⇒ 相交 ${r2(ix)}×${r2(iy)}（面积 ${r2(ix * iy)} 平方数据单位）`);
+	}
+	for (const r of rects) {
+		if (!r.label) continue;
+		const need = textWidth(r.label, n(r.size, DEF_SIZE));
+		const boxPx = Math.abs(n(r.x1, 0) - n(r.x0, 0)) * scaleX;
+		if (need > boxPx - 6) lint.push(`标签溢出：${r.label}（需 ≈${r2(need)}px，块宽 ${r2(boxPx)}px）`);
+	}
+	const headEls = [], rectEls = [], segEls = [];
+	const textEls = [], legendEls = [], l3 = [], l4 = [];
+	let marks = 0;
+	headEls.push(`<svg xmlns="http://www.w3.org/2000/svg" width="${W}" height="${H}" viewBox="0 0 ${W} ${H}" font-family="${DIAGRAM_FONT_STACK}">`);
+	headEls.push(`<rect width="${W}" height="${H}" fill="#fbfaf7"/>`);
+	marks += 2;
+	if (m.title) headEls.push(`<text x="10" y="34" font-size="21" font-weight="bold" fill="#111">${esc(m.title)}</text>`);
+	if (m.title) marks += 1;
+	if (m.subtitle) headEls.push(`<text x="10" y="58" font-size="13" fill="#666">${esc(m.subtitle)}</text>`);
+	if (m.subtitle) marks += 1;
+	for (const r of rects) {
+		if (outside(n(r.x0, 0), n(r.y0, 0)) || outside(n(r.x1, 0), n(r.y1, 0))) {
+			errors.push(`矩形「${r.label ?? r.id}」在绘图窗口外：box=${r2(n(r.x0, 0))},${r2(n(r.y0, 0))},${r2(n(r.x1, 0))},${r2(n(r.y1, 0))} ／ ${windowText} ⇒ 该图元已跳过`);
+			continue;
+		}
+		const X = px(n(r.x0, 0));
+		const Y = py(n(r.y0, 0));
+		const bw = r2(px(n(r.x1, 0)) - X);
+		const bh = r2(py(n(r.y1, 0)) - Y);
+		rectEls.push(`<rect x="${X}" y="${Y}" width="${bw}" height="${bh}" rx="2" fill="${esc(col(r.color, DEF_FILL))}" stroke="#ffffff" stroke-width="1.5"/>`);
+		marks += 1;
+		if (!r.label) continue;
+		const cx = px((n(r.x0, 0) + n(r.x1, 0)) / 2);
+		const cy = py((n(r.y0, 0) + n(r.y1, 0)) / 2);
+		rectEls.push(`<text x="${cx}" y="${cy}" font-size="${n(r.size, DEF_SIZE)}" font-weight="bold" fill="#1b1b1b" text-anchor="middle" dominant-baseline="middle">${esc(r.label)}</text>`);
+		marks += 1;
+	}
+	for (let i = 0; i < segs.length; i++) {
+		const s = segs[i];
+		const kind = s.kind === "arrow" ? "arrow" : "line";
+		const a = resolve(s.from);
+		const b = resolve(s.to);
+		if (!a || !b) {
+			const bad = !a ? s.from : s.to;
+			const shown = ids.slice(0, 8).join("、");
+			errors.push(`第 ${lineNo(s, i)} 行 ${kind}：锚点引用解析不了（${esc(bad)}）；已知 id = ${shown}${ids.length > 8 ? ` …（共 ${ids.length} 个）` : ""}；rect 要能被引用请写 id="…"（name="…" 亦可）⇒ 该图元已跳过`);
+			continue;
+		}
+		if (outside(a.x, a.y) || outside(b.x, b.y)) {
+			errors.push(`第 ${lineNo(s, i)} 行 ${kind}：端点在绘图窗口外 (${r2(a.x)},${r2(a.y)})→(${r2(b.x)},${r2(b.y)}) ／ ${windowText} ⇒ 该图元已跳过`);
+			continue;
+		}
+		const X0 = px(a.x);
+		const Y0 = py(a.y);
+		const X1 = px(b.x);
+		const Y1 = py(b.y);
+		if (s.free !== true) {
+			if (a.numeric && !rects.some((r) => inBox(a, r))) l3.push(`端点悬空：${kind} 起点 (${r2(a.x)}, ${r2(a.y)}) 不在任何块内、也不贴任何块边`);
+			if (b.numeric && !rects.some((r) => inBox(b, r))) l3.push(`端点悬空：${kind} 终点 (${r2(b.x)}, ${r2(b.y)}) 不在任何块内、也不贴任何块边`);
+		}
+		for (const r of rects) {
+			if (!r.label) continue;
+			const size = n(r.size, DEF_SIZE);
+			const hw = textWidth(r.label, size) / 2 + 1;
+			const hh = size / 2 + 1;
+			const bx = px((n(r.x0, 0) + n(r.x1, 0)) / 2);
+			const by = py((n(r.y0, 0) + n(r.y1, 0)) / 2);
+			if (!segHitsBox(X0, Y0, X1, Y1, [
+				bx - hw,
+				by - hh,
+				bx + hw,
+				by + hh
+			])) continue;
+			l4.push(`线压标签：${kind}(${r2(a.x)},${r2(a.y)})→(${r2(b.x)},${r2(b.y)}) 穿过「${r.label}」⇒ 把该线挪开，或用锚点偏移（如 ${r.id}.n+3,0）`);
+		}
+		const stroke = esc(col(s.color, DEF_INK));
+		const dash = typeof s.dash === "string" && s.dash !== "" ? ` stroke-dasharray="${esc(s.dash)}"` : "";
+		if (kind === "arrow") {
+			const ang = Math.atan2(Y1 - Y0, X1 - X0);
+			const L = 13;
+			const Wd = 6.5;
+			const vx = X1 - Math.cos(ang) * L;
+			const vy = Y1 - Math.sin(ang) * L;
+			segEls.push(`<line x1="${X0}" y1="${Y0}" x2="${r2(vx)}" y2="${r2(vy)}" stroke="${stroke}" stroke-width="${n(s.width, 2.2)}"${dash}/>`);
+			segEls.push(`<polygon points="${X1},${Y1} ${r2(vx - Math.sin(ang) * Wd)},${r2(vy + Math.cos(ang) * Wd)} ${r2(vx + Math.sin(ang) * Wd)},${r2(vy - Math.cos(ang) * Wd)}" fill="${stroke}"/>`);
+			marks += 2;
+		} else {
+			segEls.push(`<line x1="${X0}" y1="${Y0}" x2="${X1}" y2="${Y1}" stroke="${stroke}" stroke-width="${n(s.width, 1.5)}"${dash}/>`);
+			marks += 1;
+		}
+	}
+	for (const t of texts) {
+		if (outside(n(t.x, 0), n(t.y, 0))) {
+			errors.push(`文字「${t.text}」在绘图窗口外：(x ${r2(n(t.x, 0))}, y ${r2(n(t.y, 0))}) ／ ${windowText} ⇒ 该图元已跳过`);
+			continue;
+		}
+		const anchor = t.anchor === "left" || t.anchor === "start" ? "start" : t.anchor === "right" || t.anchor === "end" ? "end" : "middle";
+		textEls.push(`<text x="${px(n(t.x, 0))}" y="${py(n(t.y, 0))}" font-size="${n(t.size, DEF_SIZE)}" fill="${esc(col(t.color, "#4a4a4a"))}" text-anchor="${anchor}" dominant-baseline="middle">${esc(t.text)}</text>`);
+		marks += 1;
+	}
+	if (m.legend) {
+		const size = n(m.legend.size, DEF_SIZE);
+		const LX = px(n(m.legend.x, 0));
+		const LY = py(n(m.legend.y, 0));
+		const entries = Object.entries(colors);
+		for (let i = 0; i < entries.length; i++) {
+			const row = LY + i * (size + 6);
+			legendEls.push(`<rect x="${LX}" y="${r2(row - 8)}" width="12" height="12" rx="2" fill="${esc(entries[i][1])}"/>`);
+			legendEls.push(`<text x="${r2(LX + 18)}" y="${r2(row)}" font-size="${size}" fill="#333" dominant-baseline="middle">${esc(entries[i][0])}</text>`);
+			marks += 2;
+		}
+	}
+	lint.push(...l3, ...l4);
+	return {
+		svg: [
+			...headEls,
+			...rectEls,
+			...segEls,
+			...textEls,
+			...legendEls,
+			"</svg>"
+		].join("\n") + "\n",
+		lint,
+		errors,
+		marks
+	};
+}
+//#endregion
+//#region src/diagram/rasterize.ts
+/**
+* diagram 光栅化 —— SVG → PNG（**纯进程内，不起浏览器、不截图**）
+*
+* 为什么是 `@resvg/resvg-wasm`（owner 2026-09-29 裁「内置」，判据 = 可行性调研 §7 的 docker 实测）：
+*   ① **纯 wasm**：无原生二进制、无平台/架构约束、无 postinstall 构建（公开包最怕那三样）；
+*   ② 实测渲染一张图尺寸画布 ≈60 ms ／ ~55 KB PNG。
+*
+* 🔴 **必须喂字体，且这是实测结论不是设计偏好**：docker 里给容器装好中文字体（`fc-list` 认它）
+*   后，resvg-wasm 渲染中文**仍得到空白画布**，且 `loadSystemFonts:true` 与 `false` **逐字节相同**
+*   ⇒ **wasm 对系统字体完全不可见**。只有 `fontBuffers` 才画得出字。
+*   ⇒ 顺带白拿一个好处：**输出与机器无关**（同一份内置字体 ⇒ 逐字节可复现，S↑ 稳定）。
+*
+* 字体资产随包分发（三个，各有各的覆盖，见 `fonts.ts` 的表）：汉字 3.8 MB（Apache-2.0）／
+* 拉丁 0.5 MB（OFL-1.1）／符号 0.75 MB（DejaVu 许可证），各自带许可证与出处。
+*/
+/**
+* 包根 = **向上找到含 `package.json` 的那一级**。
+*
+* 🔴 为什么不能照抄 `voyage-page.ts` 的「`..` 一次」：那个文件在 `src/` 根下，一次 `..` 恰好是包根；
+* 本模块在 `src/diagram/` 里 ⇒ 开发态（vitest 直接跑 TS 源码）一次 `..` 只到 `src/`，
+* 于是去找 `src/assets/…` —— **实测 ENOENT**（测试全红，且现象是"字体不在"，与真因"路径层级算错"
+* 长得完全不同）。按 `package.json` 上溯对**开发态（src/diagram）与发布态（lib/diagram）都成立**。
+* @returns 包根绝对路径；四层内找不到 `package.json` 时回落"上一级"（不抛——定位失败由调用方响亮报错）
+*/
+function packageRootPath() {
+	const start = dirname(fileURLToPath(import.meta.url));
+	let dir = start;
+	for (let i = 0; i < 4; i++) {
+		if (existsSync(join(dir, "package.json"))) return dir;
+		dir = dirname(dir);
+	}
+	return join(start, "..");
+}
+/** 汉字字型绝对路径（导出以便测试与 pack-check 共用同一判据来源） */
+function diagramFontPath() {
+	return join(packageRootPath(), DIAGRAM_CJK_FONT_ASSET);
+}
+/** 拉丁字型绝对路径 */
+function diagramLatinFontPath() {
+	return join(packageRootPath(), DIAGRAM_LATIN_FONT_ASSET);
+}
+/** 符号字型绝对路径 */
+function diagramSymbolFontPath() {
+	return join(packageRootPath(), DIAGRAM_SYMBOL_FONT_ASSET);
+}
+/**
+* 兜底字型的族名 = **汉字字型**（本工具的图以中文为主）。
+* 两个内置字型的家族名与 CSS 家族栈统一定义在 `fonts.ts`（单一真相源），此处只透出兜底那一个。
+*/
+const DIAGRAM_FONT_FAMILY = DIAGRAM_CJK_FONT_FAMILY;
+let wasmReady = null;
+let fontBuf = null;
+let latinBuf = null;
+let symbolBuf = null;
+/**
+* wasm 模块路径：**先解析 JS 入口再取同目录的 `.wasm`**。
+* 不直接 resolve `.wasm` 的原因：包的 `exports` 表未必暴露该子路径（解析失败会抛，
+* 而"抛"与"文件不在"在验收上长得一样 —— 故走这条更稳的路）。
+*/
+function wasmPath() {
+	const req = createRequire(import.meta.url);
+	return join(dirname(req.resolve("@resvg/resvg-wasm")), "index_bg.wasm");
+}
+function ensureReady() {
+	if (wasmReady === null) wasmReady = initWasm(readFileSync(wasmPath())).catch((err) => {
+		if (/already initialized/iu.test(String(err?.message ?? err))) return;
+		throw err;
+	});
+	return wasmReady;
+}
+/** 三个字型各只读一次（3.8 MB ＋ 0.5 MB ＋ 0.75 MB，进程内缓存） */
+function fontBuffer() {
+	if (fontBuf === null) fontBuf = readFileSync(diagramFontPath());
+	return fontBuf;
+}
+function latinFontBuffer() {
+	if (latinBuf === null) latinBuf = readFileSync(diagramLatinFontPath());
+	return latinBuf;
+}
+function symbolFontBuffer() {
+	if (symbolBuf === null) symbolBuf = readFileSync(diagramSymbolFontPath());
+	return symbolBuf;
+}
+/**
+* SVG → PNG。
+* @param width 输出像素宽（矢量无损放大；高度按 SVG 自身比例推出）
+*/
+async function rasterizeSvg(svg, width) {
+	await ensureReady();
+	const t0 = Date.now();
+	const img = new Resvg(svg, {
+		fitTo: {
+			mode: "width",
+			value: width
+		},
+		font: {
+			fontBuffers: [
+				latinFontBuffer(),
+				symbolFontBuffer(),
+				fontBuffer()
+			],
+			loadSystemFonts: false,
+			defaultFontFamily: DIAGRAM_FONT_FAMILY
+		}
+	}).render();
+	return {
+		png: img.asPng(),
+		width: img.width,
+		height: img.height,
+		ms: Date.now() - t0
+	};
+}
+//#endregion
+//#region src/tools/diagram.ts
+/**
+* diagram.ts — `diagram` 工具：**agent 直接给一段标签格式源码，自动出图**
+*
+* owner 2026-09-29 具名令（D104）：「做成一个 tool，**ACC 级别**的，配合一个开关（demo 功能嘛，
+* 默认关，开了才可用）；Agent 调用这个 tool **直接给代码**就行，然后 dsh 可以**自动渲染成图片**
+* （注意**不借助浏览器生成截图**）」。权威设计 = 插件仓 `docs/diagram-tool-feasibility.md`。
+*
+* 链路（全部进程内，**不起浏览器**）：标签源码 → `parseDsl` → `renderDsl`（SVG ＋ 四项体检）
+* → `rasterizeSvg`（resvg-wasm ＋ **内置字型**）→ PNG → **图片块进对话**。
+*
+* 🔴 **不落文件**（owner 2026-09-29 明确）：「这个 diagram 生成文件干啥，没有任何意义啊，
+* 直接生成给用户看就好了」⇒ 正常路径**一份文件都不写**（图走附件的 durable 引用直进对话记录，
+* 可回看、可被后续轮次引用、可转微信 —— 这才是"给人看"的落点）。
+* ⚠️ **唯一的例外**：图**贴不进对话**时（附件服务不在／部署不收 png／当前路由不声明图像输入／
+* 存字节失败），才把 PNG 落到 `<CCC>/_tmp/diagram/` 并**在回执里给出路径与原因** ——
+* 否则那一次就真的什么都没有了（"降级不吞回执"同一条纪律）。
+*
+* 🔴 **为什么 PNG 是必需的**：宿主的对话内图片通路**白名单只有光栅格式**
+* （`image/png|jpeg|webp|gif`，见 `dsh-attachment/types.d.ts`）⇒ **SVG 进不去**。
+*
+* 🔴 **开关**：由 `index.ts` 门控（**关时不注册** ⇒ 工具根本不进模型工具清单），同 skiff／acp 口径。
+*
+* ## 🔴 两条**宿主契约**（2026-09-29 现场取证；第 ① 条是本文件第一版写错的地方）
+*
+* ① **`output.render` 是「同步投影」，宿主不 await 它**：`@deepseek-ai/dsh-tools` 的
+*    `createSuccessResult()` 直接 `rendered = tool.output.render(args, value)`，紧接着
+*    `snapshotJsonValue(rendered)` —— 返回一个 Promise 会被判「**非 lossless JSON**」⇒
+*    **整条工具调用失败**（图片与文字回执**一起**丢掉）。
+* ② **图片块带的 `attachment` 必须是附件服务的 durable 引用**（`ImageAttachmentRef`），
+*    而存字节是 async ⇒ **只能分两段**：`execute` 里 `saveImage`（async，把引用拼进**纯 JSON** 的返回值），
+*    `render` 里**同步**装配 `{ type: 'image', attachment: … }`。
+*    这正是平台自家 `read_image` 的形态（本机 live 安装 `dsh-tool-fs` 取证），本文件照该形态实现。
+*
+* ⚠️ 因此 render 里那个 `as unknown as ContentBlock` 是**必要的**（本包不引 `@deepseek-ai/dsh-attachment`，
+* 它不是 peerDep ⇒ 拿不到 `AttachmentId` 的 brand），而它**同时让类型检查对字段名变瞎**（判据 ㉜）⇒
+* 字段名由 `tests/diagram-tool.test.ts` 逐字钉住。
+*/
+/** 输出宽度缺省（矢量无损放大；高度按图自身比例推出） */
+const DEFAULT_WIDTH = 1200;
+/** 时间戳：ISO → `YYYYMMDD-HHMMSS`（仅降级落盘的文件名用） */
+function stamp() {
+	return (/* @__PURE__ */ new Date()).toISOString().replace(/[-:]/g, "").replace("T", "-").slice(0, 15);
+}
+/**
+* 当前模型路由是否**明确声明**收图像输入（正判据 —— 与 `read_image` 同一道门）。
+*
+* 🔴 为什么这道门必须过（而不是"先附上试试"）：图片块进的是**工具结果内容**，
+* 若路由不收图，最坏情形是**整轮请求**被装配层拒掉 —— 比"没图"坏得多。
+* ⚠️ 与 `read_image` 唯一的差别：**这里不抛错**（改走"降级落盘 ＋ 如实说明"）。
+*/
+async function routeDeclaresImage(ctx, exec) {
+	const agent = exec.agent;
+	const routed = agent?.session?.requestHeader?.()?.config;
+	const provider = routed?.provider ?? agent?.options?.provider;
+	const model = routed?.model ?? agent?.options?.model;
+	const llm = ctx.get?.("llm");
+	if (provider === void 0 || model === void 0 || llm?.resolveModelInfo === void 0) return false;
+	const signal = exec.signal;
+	const modes = (await llm.resolveModelInfo(provider, model, signal))?.inputModalities;
+	return Array.isArray(modes) && modes.includes("image");
+}
+/** 降级落盘（**只在"贴不进对话"时走**）：PNG 落 `<CCC>/_tmp/diagram/`，返回相对路径或 `null` */
+function saveFallbackPng(exec, png, base) {
+	const root = cccRootForExec(exec);
+	if (root === null) return null;
+	try {
+		const rel = join("_tmp", "diagram");
+		const dir = join(root, rel);
+		mkdirSync(dir, { recursive: true });
+		writeFileSync(join(dir, `${base}.png`), png);
+		return join(rel, `${base}.png`);
+	} catch {
+		return null;
+	}
+}
+/**
+* 把 PNG 落成**可进对话的图片块**所需的 durable 引用（async 段 —— 见文件头契约 ①）。
+*
+* 四条降级**都不抛错**（图的价值不允许"附不上图"把整条回执一起带走），且都**如实带回原因**；
+* 降级时顺手把 PNG 落盘一次（见文件头"唯一的例外"）：
+*  ① 附件服务不在（未挂载） ② 部署不收 `image/png` ③ 当前路由未声明图像输入 ④ `saveImage` 自身报错。
+*/
+async function resolveImage(ctx, exec, png, base) {
+	const skip = (reason) => ({
+		image: null,
+		imageSkip: reason,
+		fallbackRel: saveFallbackPng(exec, png, base)
+	});
+	const attachments = ctx.get?.("attachments");
+	if (attachments === void 0 || typeof attachments.saveImage !== "function") return skip("附件服务未挂载（ctx.attachments 不在）");
+	if (!attachments.imageLimits.mediaTypes.includes("image/png")) return skip("本部署不收 image/png");
+	try {
+		if (!await routeDeclaresImage(ctx, exec)) return skip("当前模型路由未声明图像输入（同 read_image 的门）");
+	} catch (err) {
+		return skip(`模型路由未能解析：${String(err?.message ?? err)}`);
+	}
+	try {
+		const ref = await attachments.saveImage({
+			data: png,
+			mediaType: "image/png",
+			name: `${base}.png`
+		});
+		return {
+			image: {
+				attachmentId: ref.attachmentId,
+				mediaType: ref.mediaType,
+				bytes: ref.bytes,
+				width: ref.width,
+				height: ref.height,
+				name: ref.name ?? `${base}.png`
+			},
+			imageSkip: null,
+			fallbackRel: null
+		};
+	} catch (err) {
+		return skip(`附件服务拒收：${String(err?.message ?? err)}`);
+	}
+}
+function createDiagramTool(ctx) {
+	return defineTool({
+		name: "diagram",
+		description: "Draw a diagram and show it to the user IN THE CONVERSATION (in-process, no browser, no files written). Pass the source directly as tag format. Geometry: coordinates are canvas pixels with y growing DOWNWARD; the drawing window defaults to the canvas (0,0 to width,height) — only pass domain=\"x0,y0,x1,y1\" if you want your own window. Tags: <rect id=\"A\" box=\"x0,y0,x1,y1\" label=\"...\" fill=\"#hex|colorName\"/> (name= works as an alias of id), <arrow from=\"A.e\" to=\"B.w\"/> or <line>, endpoints use anchors n/s/e/w/ne/nw/se/sw/c and may be offset like A.n+3,0, or a raw \"x,y\" pair; <text x=\"..\" y=\"..\" align=\"left|center|right\">text</text>, <color name=\"x\" value=\"#hex\"/>, <legend x=\"..\" y=\"..\"/>, <title>/<subtitle>. Returns the image itself plus any authoring errors and four layout warnings (overlapping boxes / label overflow / dangling endpoints / a line crossing a label). Elements whose coordinates fall outside the drawing window are reported as errors and skipped; the rest still render. Example:\n<diagram width=\"1000\" height=\"600\" title=\"三层\">\n  <rect id=\"a\" box=\"100,60,400,140\" label=\"接入层\" fill=\"#dbe7f6\"/>\n  <rect id=\"b\" box=\"100,200,400,280\" label=\"服务层\" fill=\"#dbe7f6\"/>\n  <arrow from=\"a.s\" to=\"b.n\"/>\n</diagram>",
+		parameters: {
+			source: {
+				type: "string",
+				required: true,
+				description: "Tag-format diagram source"
+			},
+			width: {
+				type: "integer",
+				description: `Output pixel width (default ${DEFAULT_WIDTH}; vector, so scaling is lossless)`
+			},
+			name: {
+				type: "string",
+				description: "Optional short name (attachment label; also used if a degraded fallback file is written)"
+			}
+		},
+		output: {
+			schema: { type: "json" },
+			render: (_args, value) => {
+				const v = value;
+				const lines = [`图已生成（${v.marks} 个图元 ／ ${v.pxW}×${v.pxH} px ／ ${v.bytes} B PNG ／ 光栅化 ${v.ms} ms）`];
+				if (v.imageSkip !== null) {
+					lines.push(`⚠️ 未能把图贴进对话：${v.imageSkip}`);
+					lines.push(v.fallbackRel === null ? "（本会话解析不到 CCC 根，连降级落盘也没做 ⇒ 这一次没有可看的东西）" : `已降级落盘：${v.fallbackRel}（可直接打开，或用 read_image 读它）`);
+				}
+				if (v.errors.length > 0) {
+					lines.push(`✗ 源码错误 ${v.errors.length} 条（图已尽力渲染；下列图元已跳过）`);
+					for (const e of v.errors) lines.push(`  [err] ${e}`);
+				}
+				if (v.lint.length === 0) lines.push("[lint] 体检干净（0 告警）");
+				else for (const w of v.lint) lines.push(`  [lint] ${w}`);
+				const blocks = [{
+					type: "text",
+					text: lines.join("\n")
+				}];
+				if (v.image !== null) blocks.push({
+					type: "image",
+					attachment: { ...v.image }
+				});
+				return blocks;
+			}
+		},
+		async execute(args, exec) {
+			const src = typeof args.source === "string" ? args.source : "";
+			const name = typeof args.name === "string" && args.name.trim() !== "" ? args.name.trim() : "diagram";
+			const width = typeof args.width === "number" && Number.isFinite(args.width) && args.width > 0 ? Math.round(args.width) : DEFAULT_WIDTH;
+			const parsed = parseDsl(src);
+			const rendered = renderDsl(parsed.model);
+			const { png, ms, width: pxW, height: pxH } = await rasterizeSvg(rendered.svg, width);
+			const base = `${stamp()}-${name.replace(/[^\w\u4e00-\u9fa5-]/g, "_")}`;
+			const { image, imageSkip, fallbackRel } = await resolveImage(ctx, exec, png, base);
+			return {
+				name: base,
+				lint: rendered.lint,
+				errors: [...parsed.errors, ...rendered.errors],
+				marks: rendered.marks,
+				ms,
+				bytes: png.length,
+				pxW,
+				pxH,
+				image,
+				imageSkip,
+				fallbackRel
+			};
+		}
+	});
+}
+//#endregion
 //#region src/host/storage-domain.ts
 /**
 * host/storage-domain.ts — 宿主存储域上的「会话 ↔ 轨迹」绑定表（§0L，S142 2026-09-19）
@@ -19482,6 +20416,7 @@ const Config = z.object({
 	webFetch: z.object({ enabled: z.boolean().default(true) }),
 	opencodeProvider: z.object({ autoConfigure: z.boolean().default(true) }),
 	visionPatch: z.object({ enabled: z.boolean().default(true) }),
+	diagram: z.object({ enabled: z.boolean().default(false) }),
 	humanChannel: z.object({
 		accounts: z.array(humanChannelAccountSchema).default([]),
 		subscriptions: z.array(humanChannelSubscriptionSchema).default([]),
@@ -19496,7 +20431,8 @@ const Config = z.object({
 	acpHttpPort: z.number().min(1024).max(65535).volatile(),
 	publicAskEnabled: z.boolean().volatile(),
 	croEnabled: z.boolean().volatile(),
-	unattendedEnabled: z.boolean().volatile()
+	unattendedEnabled: z.boolean().volatile(),
+	diagramEnabled: z.boolean().volatile()
 });
 function apply(ctx, config) {
 	try {
@@ -19545,6 +20481,7 @@ function apply(ctx, config) {
 		registerVoyageApi(ctx);
 	}
 	registerSettingsSection(ctx, config);
+	if (config.tools) registerDiagramTool(ctx);
 	registerGateway(ctx);
 	registerRebuildTurnHook(ctx);
 	registerOutputGuardHook(ctx);
@@ -19565,6 +20502,57 @@ function apply(ctx, config) {
 	if (config.visionPatch?.enabled !== false) registerDeepseekVisionPatch(ctx, true);
 }
 /**
+* diagram 工具装配（**D104**，2026-09-29 owner 具名令）：**默认关**的实验性工具 ⇒ 关时**不注册**。
+*
+* 归属与边界（E↑）：**机制归 ACC**（工具面 ＋ 开关 ＋ 光栅化），**图的语义归调用方**
+* （标签语法与四项体检在 `src/diagram/`，权威设计 = 插件仓 `docs/diagram-tool-feasibility.md`）。
+*
+* 🔴 **v1.51.1 修的真缺陷（owner 实测：「我把开关开了，工具没出来」）**：
+* 面板拨开关**只改配置、不重跑 `apply`**（铁证 = 插件重启才刷新"武装于"；`cordis.patch.yml` 里
+* `diagramEnabled: true` 已落盘而工具没注册）⇒ 旧实现"apply 时判一次"等于**开关要重启才生效**。
+* ⇒ 现在改成**反应式**：
+*   ① 听宿主的**真事件** `settings/document-updated`（ns = 我们那张设置页）——顺带说明为什么不用
+*      我们自己的 `serenity/settings-changed`：那个事件**全仓没有任何 `emit` 点**（只有 `ctx.on` 侧
+*      在用）＝**死通道**，照着它接线等于接了个永远不响的铃；
+*   ② 兜底再挂 `agent/created` ／ `session/created`（与 skiff／acp 同款做法，那两条在实测里确实会 fire）
+*      —— 宿主事件面若换名，至少还有这一条能自愈；
+*   ③ 启动时同步一次（apply 时按当前配置定初始态）。
+* 🔴 **关的时候要注销**（不是"留着但不响应"）：与"关时不注册"同一口径 —— 工具不出现在模型清单里。
+* @param ctx - 插件上下文
+*/
+function registerDiagramTool(ctx) {
+	/** 当前注册的 disposer（`null` = 未注册）。宿主 `ctx.tools.register` **返回注销器**。 */
+	let dispose = null;
+	const sync = () => {
+		const on = readSimpleSettings().diagramEnabled;
+		if (on && dispose === null) {
+			try {
+				dispose = ctx.tools.register(createDiagramTool(ctx));
+			} catch (err) {
+				console.error(`[serenity-hooks] ✗ diagram 工具注册失败: ${String(err?.message ?? err)}`);
+			}
+			return;
+		}
+		if (!on && dispose !== null) {
+			try {
+				dispose();
+			} catch {}
+			dispose = null;
+		}
+	};
+	try {
+		ctx.on("settings/document-updated", (ns) => {
+			if (String(ns) === "serenity-hooks") sync();
+		});
+	} catch {}
+	for (const eventName of ["agent/created", "session/created"]) try {
+		ctx.on(eventName, () => {
+			sync();
+		});
+	} catch {}
+	sync();
+}
+/**
 * F4 Skiff 调试服务装配：启停 = 人工（设置面板 Skiff 区块开关，settings 持久化）。
 * settings-changed 事件触发同步（skiffEnabled 开 → 启动调试服务；关 → 停止）。
 * 角色配置（skiff.roles）从当前 CCC 根读取（含 skiff.roles 的 CCC 优先，进程 cwd 次之）。