@shgroup/dsh-serenity-hooks 1.75.0 → 1.76.0

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-serenity-hooks",
-  "version": "1.75.0",
+  "version": "1.76.0",
   "main": "lib/index.js",
   "description": "宁静号 ACC harness（Native Cordis 插件）：给 DSH 装一个「AI 工作区」——14 个工具（container_fs/cognitive_trajectory/dashboard/container_git/msm/praxis/ontology/serenity-skill-creator/cheap-worker/localstore/container_admin；另三个 im-bridge/acc-diag/diagram 按配置条件出现）+ 机械约束（安全模式/工作区围墙/密钥守卫）+ 认知轨迹日志与原地重建 + 网页登录入口/IM 桥/认知轨迹唤醒注册表。轨迹声明 = 轨迹目录下的 trajectory.json（约束面 + 旧标识 uid + CRO 机器绑定 cro.host；旧名 trajectory-constraint.json / skiff.json 仍在读取族里）；轨迹提示词 = 轨迹目录下的 PROMPT.md（一条轨迹「是谁、按什么章程工作」，所有轨迹通用，追加在容器层与质量层之后，不替换它们）。适配 DSH 0.1.7-rc.1 / 0.2.0-rc.1 / 0.2.1-rc.1（三档，deepseek-ai/deepseek-harness）。",
   "engines": {

package/lib/{ccc-roots-BVxn97dY.js → ccc-roots-rwgzt_0F.js}

@@ -227,7 +227,7 @@ async function listCccs(ctx, opts = {}) {
 	if (typeof defaultRoot === "string" && defaultRoot !== "" && !c.roots.includes(defaultRoot)) c.roots.unshift(defaultRoot);
 	let rolesOf = null;
 	if (opts.withRoles === true) {
-		const { listTrajectoryConstraints } = await import("./profile-Cz4oBXlI.js").then((n) => n.i);
+		const { listTrajectoryConstraints } = await import("./profile-DplLGGqo.js").then((n) => n.i);
 		rolesOf = (root) => {
 			try {
 				return listTrajectoryConstraints(root).map((p) => p.code);

package/lib/host/storage-domain.d.ts

@@ -43,6 +43,14 @@ export interface BindingRecord {
     action: string;
     at: number;
     note?: string;
+    /**
+     * 🆕 **这条载体是 ACC 以"用户开场白"形态建出来的**（2026-10-20 owner 裁 B）。
+     *
+     * 🔴 为什么必须单列一个字段、而不是靠 `note` 文案判：`note` 是人类可读的自由文本，
+     * 判据一旦长在它上面，改一次文案就静默失效（D151 同族：引用与口径会随演进失效）。
+     * ⇒ 审计"哪些会话不是真人建的"必须有一个**布尔事实**。
+     */
+    createdAsUser?: boolean;
     /** 已被取代（D69：同轨迹多会话只留一条；记录保留、退出"当前"） */
     supersededAt?: number;
 }

package/lib/index.js

@@ -1,10 +1,10 @@
 import { i as __toESM, n as __exportAll } from "./rolldown-runtime-B4iAMlE-.js";
-import { c as hostInjected, d as hostSessions, f as hostSettings, h as hostWebServer, i as cccRootForExec, l as hostLlm, m as hostWeb, n as agentCwdFor, o as listCccs, p as hostSubagents, r as cccRootForCwd, s as hostAgents, t as NO_CCC_FROM_AGENT_CWD, u as hostService } from "./ccc-roots-BVxn97dY.js";
+import { c as hostInjected, d as hostSessions, f as hostSettings, h as hostWebServer, i as cccRootForExec, l as hostLlm, m as hostWeb, n as agentCwdFor, o as listCccs, p as hostSubagents, r as cccRootForCwd, s as hostAgents, t as NO_CCC_FROM_AGENT_CWD, u as hostService } from "./ccc-roots-rwgzt_0F.js";
 import { _ as resolveInside, a as findSerenityRoot$1, c as matchBlacklist, d as readCccName$1, f as readCheapWorkerConfig, g as readUtf8, h as readSafeModeHiddenTools, i as findGitRoot, l as pathInside, m as readExclusiveTools, n as SAFE_MODE_MARKER, o as isSafeModeOn, p as readCognitiveTrajectorySkills, r as classifyPath, s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS, u as readBlacklist } from "./ccc-CyYJL4F2.js";
-import { A as sessionsRoot, B as localHuman, C as namingTitleFor, D as readTrajectoryUid, E as readActiveSessionMd, F as TRAJECTORY_FILENAME, I as TRAJECTORY_LEGACY_FILENAMES, L as readTrajectoryFile, M as showSession, N as summarize, O as resolveSessionByTitle, P as useSession, R as isoLocal, S as listSessions, T as parseTrajectoryCode, V as localIdStamp, _ as extractSessionMdPathFromText, a as readTrajectoryConstraintAt, c as registerTrajectorySession$1, d as COGNITIVE_TRAJECTORY_ACTIONS, f as DEFAULT_SESSION_SCOPE, g as createSession, h as clearActiveSessionInfo, j as setActiveSessionInfo, k as sessionEvents$1, l as trajectoryDirNameForSession, m as archiveSession, n as isTrajectoryConstrained, o as readTrajectoryConstraintByCode, p as UID_FILENAME, r as listTrajectoryConstraints, s as trajectoryConstraintForSession, t as TRAJECTORY_CONSTRAINT_FILENAME, u as unregisterTrajectorySession$1, v as findSession, w as parseSessionContextFromEvents, x as listActiveTrajectories, y as getActiveSessionInfo, z as localFileStamp } from "./profile-Cz4oBXlI.js";
+import { A as sessionsRoot, B as localFileStamp, C as namingTitleFor, D as readTrajectoryUid, E as readActiveSessionMd, F as useSession, H as localIdStamp, I as TRAJECTORY_FILENAME, L as TRAJECTORY_LEGACY_FILENAMES, M as showSession, N as summarize, O as resolveSessionByTitle, P as trajectoryDescOf, R as readTrajectoryFile, S as listSessions, T as parseTrajectoryCode, V as localHuman, _ as extractSessionMdPathFromText, a as readTrajectoryConstraintAt, c as registerTrajectorySession$1, d as COGNITIVE_TRAJECTORY_ACTIONS, f as DEFAULT_SESSION_SCOPE, g as createSession, h as clearActiveSessionInfo, j as setActiveSessionInfo, k as sessionEvents$1, l as trajectoryDirNameForSession, m as archiveSession, n as isTrajectoryConstrained, o as readTrajectoryConstraintByCode, p as UID_FILENAME, r as listTrajectoryConstraints, s as trajectoryConstraintForSession, t as TRAJECTORY_CONSTRAINT_FILENAME, u as unregisterTrajectorySession$1, v as findSession, w as parseSessionContextFromEvents, x as listActiveTrajectories, y as getActiveSessionInfo, z as isoLocal } from "./profile-DplLGGqo.js";
 import { _ as runLocalStore, a as readFeishuCredential, d as weixinSessionIdForTrajectory, f as LOCALSTORE_SCOPES, g as readStore, h as readGitTrack, i as matchWeixinRoute, l as sanitizeFileName$1, m as localstorePath, n as extractWeixinText, o as readWeixinCredential, p as checkLocalstoreGitCompliance, r as hasVoiceItem, s as readWeixinSettings, t as extractWeixinMedia, u as weixinInboundDir } from "./route-COOFLTpU.js";
-import { a as buildTrajectoryBasePrompt, c as createProfilePromptReader, d as resolveConstraintSystemPrompt, f as ACC_VERSION, i as TRAJECTORY_CONSTRAINT_HINT, l as profileMsmWhitelist, n as readSimpleSettings, o as constraintCognitiveTrajectory, p as findPackageRoot, r as registerSettingsSection, s as constraintSystemPromptSource, u as profileToolWhitelist } from "./settings-CII0Y597.js";
-import { a as pruneMissingBindings, c as setBindingStore, i as listBoundSessionIds, n as PLUGIN_SOURCE, o as readLastBound, r as appendBound, s as resolveSessionCognitiveTrajectoryLabel, t as ACC_MESSAGE_KIND } from "./message-source-JhN-qyfn.js";
+import { a as buildTrajectoryBasePrompt, c as createProfilePromptReader, d as resolveConstraintSystemPrompt, f as ACC_VERSION, i as TRAJECTORY_CONSTRAINT_HINT, l as profileMsmWhitelist, n as readSimpleSettings, o as constraintCognitiveTrajectory, p as findPackageRoot, r as registerSettingsSection, s as constraintSystemPromptSource, u as profileToolWhitelist } from "./settings-f9WZXcgi.js";
+import { a as pruneMissingBindings, c as setBindingStore, i as listBoundSessionIds, n as PLUGIN_SOURCE, o as readLastBound, r as appendBound, s as resolveSessionCognitiveTrajectoryLabel, t as ACC_MESSAGE_KIND } from "./message-source-C_Zd2vJh.js";
 import { REGISTERED_TOOLS } from "./invariant.js";
 import { c as sendTextMessage, i as getUpdates, l as sendTyping, n as downloadMedia, o as markdownToPlainText, r as getConfig, s as sendFileMessage, t as TypingStatus, u as sniffImageExt } from "./ilink-BMk2w2KY.js";
 import { a as registerImAccountImpl, i as normalizeAccountChannel, n as getImAccountImpl, r as imAccountChannels } from "./accounts-BHQbakUh.js";
@@ -10160,6 +10160,110 @@ function listWakes(root, opts = {}) {
 	};
 }
 //#endregion
+//#region src/trajectory/user-carrier.ts
+/**
+* trajectory/user-carrier.ts — **造一条与"用户人工创建"基本一致的 dsh 会话载体**（判决 D171，owner 2026-10-20 裁 B）
+*
+* ## 这个文件解决什么（白话）
+*
+* `send-now` 在目标没有活跃会话时会**就地建一条**。它一直能建、也能挂工作区，
+* 但建出来的东西与用户在 UI 里新建的那条**在宿主眼里不是同一种东西**：
+*
+* | 宿主投影 | 用户建 | 我们自建（修前实测） |
+* |---|---|---|
+* | `title` | 自动生成 | **永远 `null`** |
+* | `titleInput.count` | ≥1 | **0** |
+* | 假首轮（对齐声明 ＋ EAP） | 注入 | **被自家递归守卫挡掉** |
+*
+* ## 🔴 根因（读宿主源码，不是推断）
+*
+* `dsh-session-title` 的 `sessionTitleUserMessageOf()` **第一行**就是：
+*
+* ```js
+* if (event.type !== "user/message" || event.data.source.kind !== "user") return void 0
+* ```
+*
+* 而 ACC 投递的消息一律是 `{ kind: 'plugin:dsh-serenity-hooks' }`（`kernel/message-source.ts`）
+* ⇒ **宿主从头到尾不把它当"有真人说过话"的会话** ⇒ 自动命名不触发、`titleInput` 恒 0。
+*
+* ## owner 的裁决 = B：**模拟一个用户开场白**
+*
+* `MessageSourceMap` 里 `user: { kind: 'user' }`，而 `UserMessage.source` 是**任意**
+* `MessageSource` ⇒ `createUserMessage({ content, source: { kind: 'user' } })` **类型合法、
+* 零改 DSH**（D4 仍成立）。
+*
+* ## 🔴 这是一次**明知故犯的伪造**，代价写在这里，不许悄悄付
+*
+* 1. **伪造用户身份**：与 D160「不再造历史」方向相反。范围**仅限**"载体开场白"这一条消息，
+*    且正文**逐字自证**是模拟的（{@link CARRIER_OPENING_MARK}）⇒ 将来翻日志的人一眼能看出。
+* 2. **污染所有者语料**：`session-corpus` 的"所有者发言"判据**必须**排除这条
+*    （判据 = 正文含 {@link CARRIER_OPENING_MARK}）⇒ 否则统计"owner 说过什么"会算进一句
+*    机器写的开场白。**这一条是同批改动，不是待办。**
+* 3. **与假首轮的先后**：开场白必须让假首轮先注入（同一次 `agent/inbox/inserted` 里
+*    prepend 天然排在真实消息之前），否则 `hasUserMessageHistory` 会把假首轮挡掉。
+*    ⇒ 单测钉死顺序，不靠"应该会"。
+*
+* ## 归属（D23）
+* 机制在 ACC（怎么建、建什么形状）；**内容归 CCC**（开场白正文由调用方给）。
+*
+* ## 与 `trajectory/carrier.ts` 的关系
+* 🔴 **两个文件、两件事**，名字刻意区分：`carrier.ts` 回答"**这条载体跑完没有**"（等待空闲／销毁竞速）；
+* 本文件回答"**怎么造一条载体**"。合在一起会让两条互不相关的依赖链卷成一团。
+*/
+/**
+* 模拟开场白的**自证标记**（逐字）。
+*
+* 🔴 三个用途，缺一不可：
+* ① 人类翻日志时能一眼看出"这不是真主说的"；
+* ② `session-corpus` 用它**排除**语料（不污染"所有者发言"）；
+* ③ 单测反向钉住：真实用户发言里**不会**出现这串 ⇒ 断言"语料里 0 条含它"才有意义。
+*/
+const CARRIER_OPENING_MARK = "[ACC 代用户开场]";
+/**
+* 构造模拟开场白的正文。
+*
+* ⚠️ **不含版本号／日期／模型名**（D159：任务书里不得写死版本号 ⇒ 写与版本无关的判据）。
+* 正文只描述"这是谁、要接着做什么"，不描述"哪一版干的"。
+*
+* @param code 轨迹编码（`S###` 或自定义）
+* @param desc 轨迹目录名里那段可读描述（**人起的**，不另造第二真相源）
+* @returns 一条自证是模拟的开场白正文
+*/
+function buildCarrierOpening(code, desc) {
+	const label = desc.trim() === "" ? code : `${code}（${desc}）`;
+	return [
+		`${CARRIER_OPENING_MARK} 激活认知轨迹 ${label}，接着它 SESSION.md 里的工作往下做。`,
+		"",
+		"（这条开场白由 ACC 代为发出。如此做的目的只有一个：让程序性创建的会话与用户在界面里",
+		"人工创建的会话，在宿主侧具有相同的投影 —— 有标题、有首轮对齐声明。它不是任何人的发言。）"
+	].join("\n");
+}
+/**
+* 投一条"用户形态"的消息进目标 agent（**B 的核心动作**）。
+*
+* 🔴 为什么单独成函数而不是就地写：这是**全仓唯一**允许 `kind:'user'` 的地方。
+* 集中在一处，将来若要收紧（或 owner 改主意回 A），只有一个点要改。
+*
+* @param agent 目标 agent（须有 `followup`）
+* @param text 开场白正文（**必须**由 {@link buildCarrierOpening} 产出，以带上自证标记）
+* @returns 投递是否成功（失败返回 false，由调用方决定降级 —— 不抛）
+*/
+function deliverCarrierOpening(agent, text) {
+	if (typeof agent.followup !== "function") return false;
+	try {
+		agent.followup(createUserMessage({
+			content: [{
+				type: "text",
+				text
+			}],
+			source: { kind: "user" }
+		}));
+		return true;
+	} catch {
+		return false;
+	}
+}
+//#endregion
 //#region src/cro/core.ts
 /**
 * cro/core.ts — CRO（Continuous Re-Occurrence · 持续再发生）机制层（S142 §7.8，2026-09-19）
@@ -11939,10 +12043,12 @@ async function createAndBindTarget(ctx, root, dirName) {
 	} }, "activate", {
 		dirName,
 		mdPath: join(root, "AGENT_SESSIONS", dirName, "SESSION.md"),
-		note: "auto-created by send-now"
+		note: "auto-created by send-now",
+		createdAsUser: true
 	});
+	const openingNote = deliverCarrierOpening(agent, buildCarrierOpening(parseTrajectoryCode(dirName) ?? dirName, trajectoryDescOf(dirName))) ? ", opening-as-user" : ", ⚠️ 开场白未投递";
 	const wsNote = workspaceId !== void 0 ? "" : await attachToWorkspace(ctx, root, sessionId);
-	const how = `auto-create(${sessionId}${bound ? ", bound" : ", ⚠️ 绑定写入失败"}${workspaceId !== void 0 ? ", via-workspaceId(=用户同一形态)" : ", via-cwd+attach"}${wsNote})`;
+	const how = `auto-create(${sessionId}${bound ? ", bound" : ", ⚠️ 绑定写入失败"}${workspaceId !== void 0 ? ", via-workspaceId(=用户同一形态)" : ", via-cwd+attach"}${openingNote}${wsNote})`;
 	return {
 		agent,
 		how
@@ -12711,6 +12817,12 @@ function createCognitiveTrajectoryTool(ctx) {
 			"rebuild requires --summary (next-phase summary ≤20 chars) + optional --note (task focus for the rebuilt self).",
 			"send-later requires target (a code or AGENT_SESSIONS dir name) + at (RFC3339 or +30m/+2h) + message.",
 			"send-now requires target + message.",
+			"AUTHORIZATION (read this before creating anything): creating a cognitive trajectory or a dsh carrier costs real work,",
+			"and both are meant to serve a human intent — not to be spawned speculatively. Call create only when the user asked for",
+			"a new line of work (or confirmed it), never to \"tidy up\" or to pre-provision something nobody requested.",
+			"send-now creating a missing carrier on demand is likewise acceptable ONLY for a delivery the user actually wants made;",
+			"it is not a way to start work nobody asked for. When in doubt, ask the user instead of creating.",
+			"⚠️ This is a behavioral rule, not a mechanical gate: nothing stops a careless call. Treat it as etiquette with a cost.",
 			"uid: READS a legacy TRAJECTORY-UID only — setting one is retired (codes replaced it). Use create --id instead.",
 			"The summary is appended to the dsh session title (S###-YYYY-MM-DD-<summary>); the code and date stay server-derived unless you pass --id."
 		].join(" "),
@@ -12747,7 +12859,7 @@ function createCognitiveTrajectoryTool(ctx) {
 			},
 			desc: {
 				type: "string",
-				description: "create: short description (any language, ≤5 words; mutually exclusive with issue)"
+				description: "create: short description (any language, ≤5 words; mutually exclusive with issue). 🔴 AUTHORIZATION: create is user-intent-driven — do not create a trajectory the user did not ask for (see the tool description)."
 			},
 			id: {
 				type: "string",
@@ -12783,7 +12895,7 @@ function createCognitiveTrajectoryTool(ctx) {
 			},
 			message: {
 				type: "string",
-				description: "send-later/send-now: the single message delivered to the target cognitive trajectory"
+				description: "send-later/send-now: the single message delivered to the target cognitive trajectory. send-now may create and bind a carrier when the target has no live session — acceptable only for a delivery the user actually wants made (user-intent-driven), not for speculatively starting work."
 			}
 		},
 		output: {
@@ -16083,7 +16195,7 @@ function registerStatusApi(ctx, opts = {}) {
 						});
 					}
 					const { saveWeixinRoutes } = await import("./route-COOFLTpU.js").then((n) => n.c);
-					const { findDirNameByCode } = await import("./profile-Cz4oBXlI.js").then((n) => n.i);
+					const { findDirNameByCode } = await import("./profile-DplLGGqo.js").then((n) => n.i);
 					for (const r of routes) if (findDirNameByCode(root, r.trajectory) === null) {
 						sendJson$2(res, 400, { error: `unknown trajectory: ${r.trajectory} (no such trajectory code in ${root})` });
 						return;
@@ -21066,7 +21178,7 @@ const MEDIA_MAX_BYTES = 20971520;
 */
 async function resolveCccRootByAlias(ctx, alias) {
 	try {
-		const { listCccs } = await import("./ccc-roots-BVxn97dY.js").then((n) => n.a);
+		const { listCccs } = await import("./ccc-roots-rwgzt_0F.js").then((n) => n.a);
 		const entries = await listCccs(ctx);
 		const byName = entries.find((e) => e.name === alias);
 		if (byName) return byName.root;
@@ -21134,7 +21246,7 @@ async function resolveInboundTarget(ctx, input) {
 		});
 		return null;
 	}
-	const { findDirNameByCode } = await import("./profile-Cz4oBXlI.js").then((n) => n.i);
+	const { findDirNameByCode } = await import("./profile-DplLGGqo.js").then((n) => n.i);
 	if (findDirNameByCode(root, target.role) === null) {
 		const detail = `目标 CCC "${target.ccc}" 内没有编码为 "${target.role}" 的认知轨迹`;
 		console.error(`[serenity-hooks] ✗ human-channel: ${detail}（account=${input.account} user=${input.user}）—— 该消息**未投递**，请改订阅表里的目标编码`);
@@ -21946,7 +22058,7 @@ function syncHumanChannel(ctx) {
 	(async () => {
 		try {
 			stopMachineLoops();
-			const { listCccs } = await import("./ccc-roots-BVxn97dY.js").then((n) => n.a);
+			const { listCccs } = await import("./ccc-roots-rwgzt_0F.js").then((n) => n.a);
 			for (const entry of await listCccs(ctx)) syncCccBridge(ctx, entry.root);
 		} catch {}
 	})();
@@ -22210,7 +22322,7 @@ function matchCcc(input, candidates) {
 }
 /** 组装候选列表（`ccc-roots.listCccs` 投影 + `.serenity` 名；动态 import 保持本模块静态依赖轻量） */
 async function collectCandidates(ctx) {
-	const { listCccs } = await import("./ccc-roots-BVxn97dY.js").then((n) => n.a);
+	const { listCccs } = await import("./ccc-roots-rwgzt_0F.js").then((n) => n.a);
 	const entries = await listCccs(ctx, { defaultRoot: process.cwd() });
 	const seen = /* @__PURE__ */ new Set();
 	const out = [];

package/lib/{message-source-JhN-qyfn.js → message-source-C_Zd2vJh.js}

@@ -1,5 +1,5 @@
-import { r as cccRootForCwd } from "./ccc-roots-BVxn97dY.js";
-import { T as parseTrajectoryCode, b as getLastActiveSessionInfo, k as sessionEvents, y as getActiveSessionInfo } from "./profile-Cz4oBXlI.js";
+import { r as cccRootForCwd } from "./ccc-roots-rwgzt_0F.js";
+import { T as parseTrajectoryCode, b as getLastActiveSessionInfo, k as sessionEvents, y as getActiveSessionInfo } from "./profile-DplLGGqo.js";
 import { dirname, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 //#region src/trajectory/bound.ts
@@ -50,6 +50,7 @@ function fromDomainRecord(rec) {
 		action: rec.action ?? "activate",
 		at: typeof rec.at === "number" ? rec.at : 0,
 		...rec.note ? { note: rec.note } : {},
+		...rec.createdAsUser === true ? { createdAsUser: true } : {},
 		...rec.supersededAt !== void 0 ? { supersededAt: rec.supersededAt } : {}
 	};
 }
@@ -62,6 +63,7 @@ function toDomainRecord(rec) {
 		action: rec.action,
 		at: rec.at,
 		...rec.note ? { note: rec.note } : {},
+		...rec.createdAsUser === true ? { createdAsUser: true } : {},
 		...rec.supersededAt !== void 0 ? { supersededAt: rec.supersededAt } : {}
 	};
 }
@@ -394,7 +396,8 @@ function appendBound(session, action, rec) {
 		...rec.sessionId ? { sessionId: rec.sessionId } : {},
 		action,
 		at: Date.now(),
-		...rec.note ? { note: rec.note } : {}
+		...rec.note ? { note: rec.note } : {},
+		...rec.createdAsUser === true ? { createdAsUser: true } : {}
 	};
 	if (domainStore?.available) domainStore.put(id, toDomainRecord(record)).catch(() => {});
 	if (!path) return domainStore?.available === true;

package/lib/{profile-Cz4oBXlI.js → profile-DplLGGqo.js}

@@ -352,6 +352,19 @@ function parseTrajectoryCode(dirName) {
 	return code === "" ? null : code;
 }
 /**
+* 从目录名取**可读描述**（编码之后那一段；没有就返回空串）。
+*
+* 用途：给"模拟用户开场白"当标签（D171）。判据 = 与 {@link parseTrajectoryCode} **互逆、同源**：
+* 剥日期前缀 → 第一段是编码 → 其后（去掉前导 `--`）全是描述。
+* ⚠️ 描述里**可以**含 `--`（只有编码不许）⇒ 这里必须取"第一段之后整串"，不能 split 再取第二段。
+*/
+function trajectoryDescOf(dirName) {
+	if (!DIR_DATE_PREFIX_RE.test(dirName)) return "";
+	const rest = dirName.replace(DIR_DATE_PREFIX_RE, "");
+	const sep = rest.indexOf("--");
+	return sep === -1 ? "" : rest.slice(sep + 2).trim();
+}
+/**
 * 展示用会话 ID（`list` 面板 / 绑定记录的 `sessionId` 字段）。
 *
 * 🔴 2026-10-19 起**编码即 ID**，不再只认 `S###` —— 旧实现只匹配 `--S(\d{3,})--`，
@@ -1095,4 +1108,4 @@ function isTrajectoryConstrained(root, sessionId) {
 	return trajectoryConstraintForSession(root, sessionId) !== null;
 }
 //#endregion
-export { sessionsRoot as A, localHuman as B, namingTitleFor as C, readTrajectoryUid as D, readActiveSessionMd as E, TRAJECTORY_FILENAME as F, TRAJECTORY_LEGACY_FILENAMES as I, readTrajectoryFile as L, showSession as M, summarize as N, resolveSessionByTitle as O, useSession as P, isoLocal as R, listSessions as S, parseTrajectoryCode as T, localIdStamp as V, extractSessionMdPathFromText as _, readTrajectoryConstraintAt as a, getLastActiveSessionInfo as b, registerTrajectorySession as c, COGNITIVE_TRAJECTORY_ACTIONS as d, DEFAULT_SESSION_SCOPE as f, createSession as g, clearActiveSessionInfo as h, profile_exports as i, setActiveSessionInfo as j, sessionEvents as k, trajectoryDirNameForSession as l, archiveSession as m, isTrajectoryConstrained as n, readTrajectoryConstraintByCode as o, UID_FILENAME as p, listTrajectoryConstraints as r, trajectoryConstraintForSession as s, TRAJECTORY_CONSTRAINT_FILENAME as t, unregisterTrajectorySession as u, findSession as v, parseSessionContextFromEvents as w, listActiveTrajectories as x, getActiveSessionInfo as y, localFileStamp as z };
+export { sessionsRoot as A, localFileStamp as B, namingTitleFor as C, readTrajectoryUid as D, readActiveSessionMd as E, useSession as F, localIdStamp as H, TRAJECTORY_FILENAME as I, TRAJECTORY_LEGACY_FILENAMES as L, showSession as M, summarize as N, resolveSessionByTitle as O, trajectoryDescOf as P, readTrajectoryFile as R, listSessions as S, parseTrajectoryCode as T, localHuman as V, extractSessionMdPathFromText as _, readTrajectoryConstraintAt as a, getLastActiveSessionInfo as b, registerTrajectorySession as c, COGNITIVE_TRAJECTORY_ACTIONS as d, DEFAULT_SESSION_SCOPE as f, createSession as g, clearActiveSessionInfo as h, profile_exports as i, setActiveSessionInfo as j, sessionEvents as k, trajectoryDirNameForSession as l, archiveSession as m, isTrajectoryConstrained as n, readTrajectoryConstraintByCode as o, UID_FILENAME as p, listTrajectoryConstraints as r, trajectoryConstraintForSession as s, TRAJECTORY_CONSTRAINT_FILENAME as t, unregisterTrajectorySession as u, findSession as v, parseSessionContextFromEvents as w, listActiveTrajectories as x, getActiveSessionInfo as y, isoLocal as z };

package/lib/{settings-CII0Y597.js → settings-f9WZXcgi.js}

@@ -1,4 +1,4 @@
-import { f as hostSettings } from "./ccc-roots-BVxn97dY.js";
+import { f as hostSettings } from "./ccc-roots-rwgzt_0F.js";
 import { _ as resolveInside, g as readUtf8 } from "./ccc-CyYJL4F2.js";
 import { dirname, join } from "node:path";
 import { existsSync, readFileSync, statSync } from "node:fs";

package/lib/trajectory/bound.d.ts

@@ -32,6 +32,8 @@ interface SessionBoundRecord {
     action: SessionBoundAction;
     at: number;
     note?: string;
+    /** 🆕 ACC 以"用户开场白"形态建的载体（判决 D171）。**布尔事实**，不从 `note` 文案推。 */
+    createdAsUser?: boolean;
     /**
      * **(b) 已被取代标记**（S142 §0y，所有者 2026-09-18 裁「b 做」）。
      *
@@ -166,5 +168,6 @@ export declare function appendBound(session: unknown, action: SessionBoundAction
     mdPath: string;
     sessionId?: string;
     note?: string;
+    createdAsUser?: boolean;
 }): boolean;
 export {};

package/lib/trajectory/core.d.ts

@@ -109,6 +109,14 @@ export declare function isValidTrajectoryCode(code: string): boolean;
  * @returns 编码；目录名不带日期前缀（非本工具建的 / 损坏）→ `null`
  */
 export declare function parseTrajectoryCode(dirName: string): string | null;
+/**
+ * 从目录名取**可读描述**（编码之后那一段；没有就返回空串）。
+ *
+ * 用途：给"模拟用户开场白"当标签（D171）。判据 = 与 {@link parseTrajectoryCode} **互逆、同源**：
+ * 剥日期前缀 → 第一段是编码 → 其后（去掉前导 `--`）全是描述。
+ * ⚠️ 描述里**可以**含 `--`（只有编码不许）⇒ 这里必须取"第一段之后整串"，不能 split 再取第二段。
+ */
+export declare function trajectoryDescOf(dirName: string): string;
 /**
  * UID 的声明文件名（**固定名、住在轨迹目录内**）。
  *

package/lib/trajectory/user-carrier.d.ts

@@ -0,0 +1,82 @@
+/**
+ * trajectory/user-carrier.ts — **造一条与"用户人工创建"基本一致的 dsh 会话载体**（判决 D171，owner 2026-10-20 裁 B）
+ *
+ * ## 这个文件解决什么（白话）
+ *
+ * `send-now` 在目标没有活跃会话时会**就地建一条**。它一直能建、也能挂工作区，
+ * 但建出来的东西与用户在 UI 里新建的那条**在宿主眼里不是同一种东西**：
+ *
+ * | 宿主投影 | 用户建 | 我们自建（修前实测） |
+ * |---|---|---|
+ * | `title` | 自动生成 | **永远 `null`** |
+ * | `titleInput.count` | ≥1 | **0** |
+ * | 假首轮（对齐声明 ＋ EAP） | 注入 | **被自家递归守卫挡掉** |
+ *
+ * ## 🔴 根因（读宿主源码，不是推断）
+ *
+ * `dsh-session-title` 的 `sessionTitleUserMessageOf()` **第一行**就是：
+ *
+ * ```js
+ * if (event.type !== "user/message" || event.data.source.kind !== "user") return void 0
+ * ```
+ *
+ * 而 ACC 投递的消息一律是 `{ kind: 'plugin:dsh-serenity-hooks' }`（`kernel/message-source.ts`）
+ * ⇒ **宿主从头到尾不把它当"有真人说过话"的会话** ⇒ 自动命名不触发、`titleInput` 恒 0。
+ *
+ * ## owner 的裁决 = B：**模拟一个用户开场白**
+ *
+ * `MessageSourceMap` 里 `user: { kind: 'user' }`，而 `UserMessage.source` 是**任意**
+ * `MessageSource` ⇒ `createUserMessage({ content, source: { kind: 'user' } })` **类型合法、
+ * 零改 DSH**（D4 仍成立）。
+ *
+ * ## 🔴 这是一次**明知故犯的伪造**，代价写在这里，不许悄悄付
+ *
+ * 1. **伪造用户身份**：与 D160「不再造历史」方向相反。范围**仅限**"载体开场白"这一条消息，
+ *    且正文**逐字自证**是模拟的（{@link CARRIER_OPENING_MARK}）⇒ 将来翻日志的人一眼能看出。
+ * 2. **污染所有者语料**：`session-corpus` 的"所有者发言"判据**必须**排除这条
+ *    （判据 = 正文含 {@link CARRIER_OPENING_MARK}）⇒ 否则统计"owner 说过什么"会算进一句
+ *    机器写的开场白。**这一条是同批改动，不是待办。**
+ * 3. **与假首轮的先后**：开场白必须让假首轮先注入（同一次 `agent/inbox/inserted` 里
+ *    prepend 天然排在真实消息之前），否则 `hasUserMessageHistory` 会把假首轮挡掉。
+ *    ⇒ 单测钉死顺序，不靠"应该会"。
+ *
+ * ## 归属（D23）
+ * 机制在 ACC（怎么建、建什么形状）；**内容归 CCC**（开场白正文由调用方给）。
+ *
+ * ## 与 `trajectory/carrier.ts` 的关系
+ * 🔴 **两个文件、两件事**，名字刻意区分：`carrier.ts` 回答"**这条载体跑完没有**"（等待空闲／销毁竞速）；
+ * 本文件回答"**怎么造一条载体**"。合在一起会让两条互不相关的依赖链卷成一团。
+ */
+/**
+ * 模拟开场白的**自证标记**（逐字）。
+ *
+ * 🔴 三个用途，缺一不可：
+ * ① 人类翻日志时能一眼看出"这不是真主说的"；
+ * ② `session-corpus` 用它**排除**语料（不污染"所有者发言"）；
+ * ③ 单测反向钉住：真实用户发言里**不会**出现这串 ⇒ 断言"语料里 0 条含它"才有意义。
+ */
+export declare const CARRIER_OPENING_MARK = "[ACC \u4EE3\u7528\u6237\u5F00\u573A]";
+/**
+ * 构造模拟开场白的正文。
+ *
+ * ⚠️ **不含版本号／日期／模型名**（D159：任务书里不得写死版本号 ⇒ 写与版本无关的判据）。
+ * 正文只描述"这是谁、要接着做什么"，不描述"哪一版干的"。
+ *
+ * @param code 轨迹编码（`S###` 或自定义）
+ * @param desc 轨迹目录名里那段可读描述（**人起的**，不另造第二真相源）
+ * @returns 一条自证是模拟的开场白正文
+ */
+export declare function buildCarrierOpening(code: string, desc: string): string;
+/**
+ * 投一条"用户形态"的消息进目标 agent（**B 的核心动作**）。
+ *
+ * 🔴 为什么单独成函数而不是就地写：这是**全仓唯一**允许 `kind:'user'` 的地方。
+ * 集中在一处，将来若要收紧（或 owner 改主意回 A），只有一个点要改。
+ *
+ * @param agent 目标 agent（须有 `followup`）
+ * @param text 开场白正文（**必须**由 {@link buildCarrierOpening} 产出，以带上自证标记）
+ * @returns 投递是否成功（失败返回 false，由调用方决定降级 —— 不抛）
+ */
+export declare function deliverCarrierOpening(agent: {
+    followup?: (msg: unknown) => void;
+}, text: string): boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shgroup/dsh-serenity-hooks",
-  "version": "1.75.0",
+  "version": "1.76.0",
   "description": "宁静号 ACC harness（Native Cordis 插件）——给 DeepSeek Harness 装一个「AI 工作区」：14 个工具（container_fs/cognitive_trajectory/dashboard/container_git/msm/praxis/ontology/serenity-skill-creator/cheap-worker/localstore/container_admin；另三个 im-bridge/acc-diag/diagram 按配置条件出现）+ 机械约束（安全模式/工作区围墙/密钥守卫/对外输出守卫）+ 认知轨迹日志与原地重建 + 网页登录入口/IM 桥/认知轨迹唤醒注册表。轨迹声明 = 轨迹目录下的 trajectory.json（约束面 + 旧标识 uid + CRO 机器绑定 cro.host；旧名 trajectory-constraint.json / skiff.json 仍在读取族里）；轨迹提示词 = 轨迹目录下的 PROMPT.md（一条轨迹「是谁、按什么章程工作」，所有轨迹通用，追加在容器层与质量层之后，不替换它们）。适配 DSH 0.1.7-rc.1 / 0.2.0-rc.1 / 0.2.1-rc.1（三档）。",
   "license": "MIT",
   "repository": {