@shgroup/dsh-serenity-hooks 1.75.0 → 1.77.0

package/lib/index.js

@@ -1,10 +1,11 @@
 import { i as __toESM, n as __exportAll } from "./rolldown-runtime-B4iAMlE-.js";
-import { c as hostInjected, d as hostSessions, f as hostSettings, h as hostWebServer, i as cccRootForExec, l as hostLlm, m as hostWeb, n as agentCwdFor, o as listCccs, p as hostSubagents, r as cccRootForCwd, s as hostAgents, t as NO_CCC_FROM_AGENT_CWD, u as hostService } from "./ccc-roots-BVxn97dY.js";
+import { c as hostInjected, d as hostSessions, f as hostSettings, h as hostWebServer, i as cccRootForExec, l as hostLlm, m as hostWeb, n as agentCwdFor, o as listCccs, p as hostSubagents, r as cccRootForCwd, s as hostAgents, t as NO_CCC_FROM_AGENT_CWD, u as hostService } from "./ccc-roots-rwgzt_0F.js";
 import { _ as resolveInside, a as findSerenityRoot$1, c as matchBlacklist, d as readCccName$1, f as readCheapWorkerConfig, g as readUtf8, h as readSafeModeHiddenTools, i as findGitRoot, l as pathInside, m as readExclusiveTools, n as SAFE_MODE_MARKER, o as isSafeModeOn, p as readCognitiveTrajectorySkills, r as classifyPath, s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS, u as readBlacklist } from "./ccc-CyYJL4F2.js";
-import { A as sessionsRoot, B as localHuman, C as namingTitleFor, D as readTrajectoryUid, E as readActiveSessionMd, F as TRAJECTORY_FILENAME, I as TRAJECTORY_LEGACY_FILENAMES, L as readTrajectoryFile, M as showSession, N as summarize, O as resolveSessionByTitle, P as useSession, R as isoLocal, S as listSessions, T as parseTrajectoryCode, V as localIdStamp, _ as extractSessionMdPathFromText, a as readTrajectoryConstraintAt, c as registerTrajectorySession$1, d as COGNITIVE_TRAJECTORY_ACTIONS, f as DEFAULT_SESSION_SCOPE, g as createSession, h as clearActiveSessionInfo, j as setActiveSessionInfo, k as sessionEvents$1, l as trajectoryDirNameForSession, m as archiveSession, n as isTrajectoryConstrained, o as readTrajectoryConstraintByCode, p as UID_FILENAME, r as listTrajectoryConstraints, s as trajectoryConstraintForSession, t as TRAJECTORY_CONSTRAINT_FILENAME, u as unregisterTrajectorySession$1, v as findSession, w as parseSessionContextFromEvents, x as listActiveTrajectories, y as getActiveSessionInfo, z as localFileStamp } from "./profile-Cz4oBXlI.js";
+import { A as sessionsRoot, B as localFileStamp, C as namingTitleFor, D as readTrajectoryUid, E as readActiveSessionMd, F as useSession, H as localIdStamp, I as TRAJECTORY_FILENAME, L as TRAJECTORY_LEGACY_FILENAMES, M as showSession, N as summarize, O as resolveSessionByTitle, P as trajectoryDescOf, R as readTrajectoryFile, S as listSessions, T as parseTrajectoryCode, V as localHuman, _ as extractSessionMdPathFromText, a as readTrajectoryConstraintAt, c as registerTrajectorySession$1, d as COGNITIVE_TRAJECTORY_ACTIONS, f as DEFAULT_SESSION_SCOPE, g as createSession, h as clearActiveSessionInfo, j as setActiveSessionInfo, k as sessionEvents$1, l as trajectoryDirNameForSession, m as archiveSession, n as isTrajectoryConstrained, o as readTrajectoryConstraintByCode, p as UID_FILENAME, r as listTrajectoryConstraints, s as trajectoryConstraintForSession, t as TRAJECTORY_CONSTRAINT_FILENAME, u as unregisterTrajectorySession$1, v as findSession, w as parseSessionContextFromEvents, x as listActiveTrajectories, y as getActiveSessionInfo, z as isoLocal } from "./profile-DplLGGqo.js";
 import { _ as runLocalStore, a as readFeishuCredential, d as weixinSessionIdForTrajectory, f as LOCALSTORE_SCOPES, g as readStore, h as readGitTrack, i as matchWeixinRoute, l as sanitizeFileName$1, m as localstorePath, n as extractWeixinText, o as readWeixinCredential, p as checkLocalstoreGitCompliance, r as hasVoiceItem, s as readWeixinSettings, t as extractWeixinMedia, u as weixinInboundDir } from "./route-COOFLTpU.js";
-import { a as buildTrajectoryBasePrompt, c as createProfilePromptReader, d as resolveConstraintSystemPrompt, f as ACC_VERSION, i as TRAJECTORY_CONSTRAINT_HINT, l as profileMsmWhitelist, n as readSimpleSettings, o as constraintCognitiveTrajectory, p as findPackageRoot, r as registerSettingsSection, s as constraintSystemPromptSource, u as profileToolWhitelist } from "./settings-CII0Y597.js";
-import { a as pruneMissingBindings, c as setBindingStore, i as listBoundSessionIds, n as PLUGIN_SOURCE, o as readLastBound, r as appendBound, s as resolveSessionCognitiveTrajectoryLabel, t as ACC_MESSAGE_KIND } from "./message-source-JhN-qyfn.js";
+import { a as buildTrajectoryBasePrompt, c as createProfilePromptReader, d as resolveConstraintSystemPrompt, f as ACC_VERSION, i as TRAJECTORY_CONSTRAINT_HINT, l as profileMsmWhitelist, n as readSimpleSettings, o as constraintCognitiveTrajectory, p as findPackageRoot, r as registerSettingsSection, s as constraintSystemPromptSource, u as profileToolWhitelist } from "./settings-f9WZXcgi.js";
+import { a as listBoundSessionIds, i as carrierState, n as PLUGIN_SOURCE, o as readLastBound, r as appendBound, s as resolveSessionCognitiveTrajectoryLabel, t as ACC_MESSAGE_KIND } from "./message-source-CYa8LbbM.js";
+import { n as hasSessionLogById, r as sessionsRootDir } from "./cleanup-C-92qnDs.js";
 import { REGISTERED_TOOLS } from "./invariant.js";
 import { c as sendTextMessage, i as getUpdates, l as sendTyping, n as downloadMedia, o as markdownToPlainText, r as getConfig, s as sendFileMessage, t as TypingStatus, u as sniffImageExt } from "./ilink-BMk2w2KY.js";
 import { a as registerImAccountImpl, i as normalizeAccountChannel, n as getImAccountImpl, r as imAccountChannels } from "./accounts-BHQbakUh.js";
@@ -9595,215 +9596,6 @@ function createCheapWorkerTool(ctx) {
 	});
 }
 //#endregion
-//#region src/trajectory/cleanup.ts
-/**
-* trajectory/cleanup.ts — DSH 平台旧会话自动清理（v1.29，S142 需求③）
-*
-* 背景（实证）：DSH 会话物理存储 = `$DSH_HOME/sessions/`（缺省 ~/.dsh/sessions；
-* base bundle cordis.patch.yml root: dshHomePath('sessions')）。磁盘布局：
-*   <root>/--<project-slug>--/<encoded-session-id>/session[.vN].jsonl(.zstd)
-* **世代（v1.31.13 补）**：宿主自 DSH 0.1.5 起按世代写文件，且迁移**保留源文件**
-* ⇒ 一个会话目录常见 v0 与 v3 两个文件并存。本模块用 `sessionLogArtifacts()` 统一枚举世代。
-* DSH **无删除会话 API**（PersistenceCoordinator 仅 create/append/load/inspect/borrow，
-* 无 delete/purge；workspace archiveSession 只加归档集不删文件）——物理删除只能直接
-* 删文件。删除后一致性（利好）：sessionPersistence.list() = readdir 扫描磁盘现存 →
-* 物理删后 list 不再返回；WorkspaceRegistry 下次启动重建 header index 自动消失。
-*
-* 方案（S142 用户拍板）：lastActive 基准 + 手动触发 + 不过滤不归档直接物理删；
-* 安全底线 = live 会话保护跳过（删正在运行的会话 = 灾难）。
-*
-* 本模块纯逻辑（零 ctx 依赖）：传入 sessionsRoot + liveIds，可单测。
-*/
-var cleanup_exports = /* @__PURE__ */ __exportAll({
-	collectEligibleSessions: () => collectEligibleSessions,
-	cutoffDaysAgo: () => cutoffDaysAgo,
-	findSessionLog: () => findSessionLog,
-	hasSessionLogById: () => hasSessionLogById,
-	performCleanup: () => performCleanup,
-	sessionLogArtifacts: () => sessionLogArtifacts,
-	sessionLogBytesById: () => sessionLogBytesById,
-	sessionsRootDir: () => sessionsRootDir
-});
-/** DSH 会话 root：env DSH_HOME → ~/.dsh（config-ops globalConfigPath 同款推导） */
-function sessionsRootDir() {
-	const dshHome = process.env.DSH_HOME ?? join(process.env.HOME ?? "", ".dsh");
-	return join(dshHome, "sessions");
-}
-/** 一天的毫秒数 */
-const DAY_MS = 864e5;
-/**
-* 扫描 sessions root，列出可清理候选：
-* - 递归 `<root>/<project>/<session-id>/session.jsonl(.zstd)`（任意深度下找 *session* 文件）
-* - 过滤 live（liveIds 集合）——安全底线
-* - 过滤 lastActive >= cutoffMs（最后活动未达阈值 → 保留）
-* root 不存在/为空 → 返回 []（非错误）。
-*/
-function collectEligibleSessions(root, cutoffMs, liveIds = /* @__PURE__ */ new Set()) {
-	if (!existsSync(root)) return [];
-	const out = [];
-	for (const project of readdirSync(root, { withFileTypes: true })) {
-		if (!project.isDirectory()) continue;
-		const projectPath = join(root, project.name);
-		for (const entry of readdirSync(projectPath, { withFileTypes: true })) {
-			if (!entry.isDirectory()) continue;
-			const dirPath = join(projectPath, entry.name);
-			const artifacts = sessionLogArtifacts(dirPath);
-			if (artifacts.length === 0) continue;
-			const log = findSessionLog(dirPath);
-			if (log === null) continue;
-			if (liveIds.has(entry.name)) continue;
-			let mtime = Number.NEGATIVE_INFINITY;
-			for (const artifact of artifacts) try {
-				mtime = Math.max(mtime, statSync(artifact.path).mtimeMs);
-			} catch {}
-			if (!Number.isFinite(mtime)) continue;
-			if (mtime >= cutoffMs) continue;
-			out.push({
-				id: entry.name,
-				project: project.name,
-				logPath: log,
-				lastActiveMs: mtime
-			});
-		}
-	}
-	return out;
-}
-/**
-* 会话日志文件名识别：`session.jsonl` / `session.jsonl.zstd`（= **v0 世代**）/
-* `session.v<N>.jsonl[.zstd]`（= 第 N 世代，DSH 0.1.5 起按世代写文件）。
-* 出处：`@deepseek-ai/dsh-session-persistence-jsonl` 的 `parseSessionFormatLogFilename` 同款形态。
-*/
-const SESSION_LOG_RE = /^session(?:\.v(\d+))?\.jsonl(\.zstd)?$/;
-/**
-* 列出会话目录下的**全部日志世代**，按代递增排序（同代内 `.jsonl` 在前、`.zstd` 在后 = 后者更代表"当前书写格式"）。
-*
-* 为什么需要（R↓，v1.31.13 修复）：宿主自 0.1.5 起改成**按世代写文件**，且迁移**保留源文件**
-* ⇒ 同一会话常见 `session.jsonl.zstd`（v0）与 `session.v3.jsonl.zstd`（v3）**并存**。
-* 旧实现只认前两个名字 → 新格式会话对本模块**完全不可见**（静默 no-op：清理永远不生效、磁盘只涨）。
-*/
-function sessionLogArtifacts(sessionDirPath) {
-	let names;
-	try {
-		names = readdirSync(sessionDirPath);
-	} catch {
-		return [];
-	}
-	const out = [];
-	for (const name of names) {
-		const m = SESSION_LOG_RE.exec(name);
-		if (m === null) continue;
-		out.push({
-			name,
-			generation: m[1] === void 0 ? 0 : Number(m[1]),
-			path: join(sessionDirPath, name)
-		});
-	}
-	return out.sort((a, b) => a.generation - b.generation || (a.name.endsWith(".zstd") ? 1 : 0) - (b.name.endsWith(".zstd") ? 1 : 0));
-}
-/**
-* 在会话目录下找 session 日志文件；无 → null。
-* 多世代并存时返回**最高世代**（= 宿主 `findLog` 选中的当前世代；旧行为对单文件目录完全一致）。
-*/
-function findSessionLog(sessionDirPath) {
-	const artifacts = sessionLogArtifacts(sessionDirPath);
-	const latest = artifacts[artifacts.length - 1];
-	return latest === void 0 ? null : latest.path;
-}
-/**
-* 执行清理（用户拍板：直接物理删，不过滤不归档；dryRun 预览不删）。
-* 删除 = rmSync 整个会话目录（recursive + force）。失败逐个记 errors 不中断。
-*/
-function performCleanup(root, cutoffMs, liveIds = /* @__PURE__ */ new Set(), opts = {}) {
-	const candidates = collectEligibleSessions(root, cutoffMs, liveIds);
-	if (opts.dryRun) return {
-		candidates,
-		result: null
-	};
-	const result = {
-		deleted: [],
-		errors: []
-	};
-	for (const c of candidates) {
-		const dir = dirOf(c.logPath);
-		try {
-			rmSync(dir, {
-				recursive: true,
-				force: true
-			});
-			result.deleted.push(c.id);
-		} catch (e) {
-			result.errors.push({
-				id: c.id,
-				reason: e.message
-			});
-		}
-	}
-	return {
-		candidates,
-		result
-	};
-}
-/** 从日志路径取会话目录（父目录） */
-function dirOf(logPath) {
-	return logPath.slice(0, logPath.lastIndexOf("/")) || logPath;
-}
-/**
-* 某一 dsh 会话（目录名 / 会话 id）的**当前世代日志体积**（字节）。
-*
-* 为什么要它（S142 §0y「旧会话累积 ⇒ dsh 内存崩溃」，所有者令）：
-*   · 宿主恢复/继续一条会话必须**重放全部事件**（`scanLog` → `materializeAppendBatch`）
-*     ⇒ **代价 ∝ 日志体积**；
-*   · 实测（`_tmp/measure-session-load.mjs`，照宿主 `scanZstdFrames` 复刻）：
-*     一条 **72.2 MB**（zstd）的日志 = 35 559 个 frame / 252.6 MB 文本 / 62 680 条事件，
-*     **光是读一遍峰值 RSS +1 175 MB**（探针什么都不保留）；
-*   · 而宿主的解析缓存 `COLD_LOG_MEMO_MAX_ENTRIES = 2` 是**按条数限、不按字节限**的
-*     （`dsh-session-persistence-jsonl/lib/index.js:2175`）⇒ 两条巨日志 = 上限内。
-* 🔴 **在本函数之前，ACC 侧没有任何地方知道"绑定的这条会话日志多大"——这个信号根本不存在。**
-* 这是"靠 agent 自觉 rebuild 不够"的机制层原因（keeper 的 K 量的是**模型上下文**，压缩后回落；
-* 而**日志文件只增不减** ⇒ rebuild 提醒永远不会因为"日志 72 MB"触发）。
-*
-* 只认会话目录（含任意世代日志）；返回**最高世代**的日志（= 宿主 `findLog` 选中的当前世代）。
-* 未命中 / 不可读 → null（非错误，调用方按"未知"处理）。
-* @param root - DSH 会话 root（{@link sessionsRootDir}）
-* @param sessionId - 会话目录名（`.bindings.json` 的键，含 `session-` 前缀）或裸 id
-* @returns 字节数 + 日志绝对路径；未命中 → null
-*/
-function sessionLogBytesById(root, sessionId) {
-	if (sessionId === "" || !existsSync(root)) return null;
-	const dirName = sessionId.startsWith("session-") ? sessionId : `session-${sessionId}`;
-	for (const project of readdirSync(root, { withFileTypes: true })) {
-		if (!project.isDirectory()) continue;
-		const log = findSessionLog(join(root, project.name, dirName));
-		if (log === null) continue;
-		try {
-			return {
-				bytes: statSync(log).size,
-				path: log
-			};
-		} catch {
-			return null;
-		}
-	}
-	return null;
-}
-/**
-* **(c) 绑定一致性兜底**的判据：某会话的日志**是否仍在磁盘上**。
-*
-* 🔴 **fail-closed**：sessions root 本身不存在时**一律返回 true（当作"在"）**——
-* 否则换 `DSH_HOME` / 换机器会让"全部绑定看起来都悬空"，进而误清整张绑定表。
-* 只有"root 在、而这个会话目录确实不在"才算悬空。
-* @param sessionRoot - DSH 会话 root（{@link sessionsRootDir}）
-* @param sessionId - 会话目录名（`.bindings.json` 的键）或裸 id
-*/
-function hasSessionLogById(sessionRoot, sessionId) {
-	if (!existsSync(sessionRoot)) return true;
-	return sessionLogBytesById(sessionRoot, sessionId) !== null;
-}
-/** 便捷：默认 N 天前为 cutoff（供 API/调用方） */
-function cutoffDaysAgo(days, nowMs = Date.now()) {
-	return nowMs - days * DAY_MS;
-}
-//#endregion
 //#region src/wake/registry.ts
 /**
 * wake/registry.ts — 认知轨迹唤醒注册表（D58，S142 2026-09-13）
@@ -10160,6 +9952,110 @@ function listWakes(root, opts = {}) {
 	};
 }
 //#endregion
+//#region src/trajectory/user-carrier.ts
+/**
+* trajectory/user-carrier.ts — **造一条与"用户人工创建"基本一致的 dsh 会话载体**（判决 D171，owner 2026-10-20 裁 B）
+*
+* ## 这个文件解决什么（白话）
+*
+* `send-now` 在目标没有活跃会话时会**就地建一条**。它一直能建、也能挂工作区，
+* 但建出来的东西与用户在 UI 里新建的那条**在宿主眼里不是同一种东西**：
+*
+* | 宿主投影 | 用户建 | 我们自建（修前实测） |
+* |---|---|---|
+* | `title` | 自动生成 | **永远 `null`** |
+* | `titleInput.count` | ≥1 | **0** |
+* | 假首轮（对齐声明 ＋ EAP） | 注入 | **被自家递归守卫挡掉** |
+*
+* ## 🔴 根因（读宿主源码，不是推断）
+*
+* `dsh-session-title` 的 `sessionTitleUserMessageOf()` **第一行**就是：
+*
+* ```js
+* if (event.type !== "user/message" || event.data.source.kind !== "user") return void 0
+* ```
+*
+* 而 ACC 投递的消息一律是 `{ kind: 'plugin:dsh-serenity-hooks' }`（`kernel/message-source.ts`）
+* ⇒ **宿主从头到尾不把它当"有真人说过话"的会话** ⇒ 自动命名不触发、`titleInput` 恒 0。
+*
+* ## owner 的裁决 = B：**模拟一个用户开场白**
+*
+* `MessageSourceMap` 里 `user: { kind: 'user' }`，而 `UserMessage.source` 是**任意**
+* `MessageSource` ⇒ `createUserMessage({ content, source: { kind: 'user' } })` **类型合法、
+* 零改 DSH**（D4 仍成立）。
+*
+* ## 🔴 这是一次**明知故犯的伪造**，代价写在这里，不许悄悄付
+*
+* 1. **伪造用户身份**：与 D160「不再造历史」方向相反。范围**仅限**"载体开场白"这一条消息，
+*    且正文**逐字自证**是模拟的（{@link CARRIER_OPENING_MARK}）⇒ 将来翻日志的人一眼能看出。
+* 2. **污染所有者语料**：`session-corpus` 的"所有者发言"判据**必须**排除这条
+*    （判据 = 正文含 {@link CARRIER_OPENING_MARK}）⇒ 否则统计"owner 说过什么"会算进一句
+*    机器写的开场白。**这一条是同批改动，不是待办。**
+* 3. **与假首轮的先后**：开场白必须让假首轮先注入（同一次 `agent/inbox/inserted` 里
+*    prepend 天然排在真实消息之前），否则 `hasUserMessageHistory` 会把假首轮挡掉。
+*    ⇒ 单测钉死顺序，不靠"应该会"。
+*
+* ## 归属（D23）
+* 机制在 ACC（怎么建、建什么形状）；**内容归 CCC**（开场白正文由调用方给）。
+*
+* ## 与 `trajectory/carrier.ts` 的关系
+* 🔴 **两个文件、两件事**，名字刻意区分：`carrier.ts` 回答"**这条载体跑完没有**"（等待空闲／销毁竞速）；
+* 本文件回答"**怎么造一条载体**"。合在一起会让两条互不相关的依赖链卷成一团。
+*/
+/**
+* 模拟开场白的**自证标记**（逐字）。
+*
+* 🔴 三个用途，缺一不可：
+* ① 人类翻日志时能一眼看出"这不是真主说的"；
+* ② `session-corpus` 用它**排除**语料（不污染"所有者发言"）；
+* ③ 单测反向钉住：真实用户发言里**不会**出现这串 ⇒ 断言"语料里 0 条含它"才有意义。
+*/
+const CARRIER_OPENING_MARK = "[ACC 代用户开场]";
+/**
+* 构造模拟开场白的正文。
+*
+* ⚠️ **不含版本号／日期／模型名**（D159：任务书里不得写死版本号 ⇒ 写与版本无关的判据）。
+* 正文只描述"这是谁、要接着做什么"，不描述"哪一版干的"。
+*
+* @param code 轨迹编码（`S###` 或自定义）
+* @param desc 轨迹目录名里那段可读描述（**人起的**，不另造第二真相源）
+* @returns 一条自证是模拟的开场白正文
+*/
+function buildCarrierOpening(code, desc) {
+	const label = desc.trim() === "" ? code : `${code}（${desc}）`;
+	return [
+		`${CARRIER_OPENING_MARK} 激活认知轨迹 ${label}，接着它 SESSION.md 里的工作往下做。`,
+		"",
+		"（这条开场白由 ACC 代为发出。如此做的目的只有一个：让程序性创建的会话与用户在界面里",
+		"人工创建的会话，在宿主侧具有相同的投影 —— 有标题、有首轮对齐声明。它不是任何人的发言。）"
+	].join("\n");
+}
+/**
+* 投一条"用户形态"的消息进目标 agent（**B 的核心动作**）。
+*
+* 🔴 为什么单独成函数而不是就地写：这是**全仓唯一**允许 `kind:'user'` 的地方。
+* 集中在一处，将来若要收紧（或 owner 改主意回 A），只有一个点要改。
+*
+* @param agent 目标 agent（须有 `followup`）
+* @param text 开场白正文（**必须**由 {@link buildCarrierOpening} 产出，以带上自证标记）
+* @returns 投递是否成功（失败返回 false，由调用方决定降级 —— 不抛）
+*/
+function deliverCarrierOpening(agent, text) {
+	if (typeof agent.followup !== "function") return false;
+	try {
+		agent.followup(createUserMessage({
+			content: [{
+				type: "text",
+				text
+			}],
+			source: { kind: "user" }
+		}));
+		return true;
+	} catch {
+		return false;
+	}
+}
+//#endregion
 //#region src/cro/core.ts
 /**
 * cro/core.ts — CRO（Continuous Re-Occurrence · 持续再发生）机制层（S142 §7.8，2026-09-19）
@@ -11808,6 +11704,21 @@ async function sendToCognitiveTrajectory(ctx, root, target, message, sender) {
 	let createdNote = "";
 	if ("error" in acquired) {
 		if (!acquired.notReady && acquired.noBinding === true) {
+			const carrier = carrierState(root, t.dirName, (id) => {
+				if (hostAgents(ctx)?.get?.(id)) return true;
+				try {
+					return hasSessionLogById(sessionsRootDir(), id);
+				} catch {
+					return true;
+				}
+			});
+			if (carrier.state !== "never") {
+				const why = carrier.state === "occupied" ? `该轨迹曾经由会话 ${carrier.sessionId} 承载，而它此刻不在了` : `该轨迹当前由会话 ${carrier.sessionId} 承载`;
+				return {
+					ok: false,
+					detail: `${t.dirName}：${why} ⇒ **拒绝自动新建载体**（一条轨迹至多一个载体）。\n  · 要让它重新跑起来：把那个会话恢复，或用 cognitive_trajectory rebuild 换代（显式 takeover）。\n  · 不明所以就先 cognitive_trajectory show ${t.dirName} 看它的交代文件。`
+				};
+			}
 			acquired = await createAndBindTarget(ctx, root, t.dirName);
 			if ("error" in acquired) return {
 				ok: false,
@@ -11939,10 +11850,12 @@ async function createAndBindTarget(ctx, root, dirName) {
 	} }, "activate", {
 		dirName,
 		mdPath: join(root, "AGENT_SESSIONS", dirName, "SESSION.md"),
-		note: "auto-created by send-now"
+		note: "auto-created by send-now",
+		createdAsUser: true
 	});
+	const openingNote = deliverCarrierOpening(agent, buildCarrierOpening(parseTrajectoryCode(dirName) ?? dirName, trajectoryDescOf(dirName))) ? ", opening-as-user" : ", ⚠️ 开场白未投递";
 	const wsNote = workspaceId !== void 0 ? "" : await attachToWorkspace(ctx, root, sessionId);
-	const how = `auto-create(${sessionId}${bound ? ", bound" : ", ⚠️ 绑定写入失败"}${workspaceId !== void 0 ? ", via-workspaceId(=用户同一形态)" : ", via-cwd+attach"}${wsNote})`;
+	const how = `auto-create(${sessionId}${bound ? ", bound" : ", ⚠️ 绑定写入失败"}${workspaceId !== void 0 ? ", via-workspaceId(=用户同一形态)" : ", via-cwd+attach"}${openingNote}${wsNote})`;
 	return {
 		agent,
 		how
@@ -12711,6 +12624,12 @@ function createCognitiveTrajectoryTool(ctx) {
 			"rebuild requires --summary (next-phase summary ≤20 chars) + optional --note (task focus for the rebuilt self).",
 			"send-later requires target (a code or AGENT_SESSIONS dir name) + at (RFC3339 or +30m/+2h) + message.",
 			"send-now requires target + message.",
+			"AUTHORIZATION (read this before creating anything): creating a cognitive trajectory or a dsh carrier costs real work,",
+			"and both are meant to serve a human intent — not to be spawned speculatively. Call create only when the user asked for",
+			"a new line of work (or confirmed it), never to \"tidy up\" or to pre-provision something nobody requested.",
+			"send-now creating a missing carrier on demand is likewise acceptable ONLY for a delivery the user actually wants made;",
+			"it is not a way to start work nobody asked for. When in doubt, ask the user instead of creating.",
+			"⚠️ This is a behavioral rule, not a mechanical gate: nothing stops a careless call. Treat it as etiquette with a cost.",
 			"uid: READS a legacy TRAJECTORY-UID only — setting one is retired (codes replaced it). Use create --id instead.",
 			"The summary is appended to the dsh session title (S###-YYYY-MM-DD-<summary>); the code and date stay server-derived unless you pass --id."
 		].join(" "),
@@ -12747,7 +12666,7 @@ function createCognitiveTrajectoryTool(ctx) {
 			},
 			desc: {
 				type: "string",
-				description: "create: short description (any language, ≤5 words; mutually exclusive with issue)"
+				description: "create: short description (any language, ≤5 words; mutually exclusive with issue). 🔴 AUTHORIZATION: create is user-intent-driven — do not create a trajectory the user did not ask for (see the tool description)."
 			},
 			id: {
 				type: "string",
@@ -12783,7 +12702,7 @@ function createCognitiveTrajectoryTool(ctx) {
 			},
 			message: {
 				type: "string",
-				description: "send-later/send-now: the single message delivered to the target cognitive trajectory"
+				description: "send-later/send-now: the single message delivered to the target cognitive trajectory. send-now may create and bind a carrier when the target has no live session — acceptable only for a delivery the user actually wants made (user-intent-driven), not for speculatively starting work."
 			}
 		},
 		output: {
@@ -12846,22 +12765,16 @@ function createCognitiveTrajectoryTool(ctx) {
 					if (!targetEntry) throw new Error(`Session not found: "${args.name}". Use "list" to see available sessions.`);
 					const targetDirName = targetEntry.dirName;
 					const currentDir = currentBoundDirName(exec, scope);
-					const switching = currentDir !== null && targetDirName !== currentDir;
-					const force = args.force === true;
-					if (switching && !force) throw new Error(`Session is bound to ${currentDir}. Switching to ${targetDirName} would orphan the current cognitive trajectory. Re-run with --force to switch (or close the current session first).`);
+					if (currentDir !== null && targetDirName !== currentDir) throw new Error(`这个会话已经承载认知轨迹「${currentDir}」，不能改宗到「${targetDirName}」。\n一个会话终身只属于一条认知轨迹（2026-10-20 裁决，--force 已退役）。\n要继续用「${currentDir}」⇒ 不用任何操作；要给「${targetDirName}」开一个载体 ⇒ 新建一条会话再 use。`);
 					const active = useSession(root, args.name, scope);
 					const info = getActiveSessionInfo(scope);
 					if (info) renameDshSessionForActive(ctx, exec, info, args.summary);
 					const dsh = agentDshSession(exec);
-					if (dsh && info) {
-						const prevBound = readLastBound(dsh);
-						appendBound(dsh, switching && prevBound ? "switch" : "activate", {
-							dirName: info.dirName,
-							mdPath: info.mdPath,
-							sessionId: info.sessionId,
-							...switching ? { note: "forced switch" } : {}
-						});
-					}
+					if (dsh && info) appendBound(dsh, "activate", {
+						dirName: info.dirName,
+						mdPath: info.mdPath,
+						sessionId: info.sessionId
+					});
 					const advisory = advisoryHint(targetEntry.dirName, join(targetEntry.path, "SESSION.md"));
 					const out = {
 						dir: active.dir,
@@ -12869,10 +12782,6 @@ function createCognitiveTrajectoryTool(ctx) {
 						context: active.context
 					};
 					if (advisory) out.advisory = advisory;
-					if (dsh) {
-						const pruned = pruneMissingBindings(root, (id) => !hasSessionLogById(sessionsRootDir(), id));
-						if (pruned.length > 0) out.prunedBindings = pruned;
-					}
 					return out;
 				}
 				case "rebuild": {
@@ -16083,7 +15992,7 @@ function registerStatusApi(ctx, opts = {}) {
 						});
 					}
 					const { saveWeixinRoutes } = await import("./route-COOFLTpU.js").then((n) => n.c);
-					const { findDirNameByCode } = await import("./profile-Cz4oBXlI.js").then((n) => n.i);
+					const { findDirNameByCode } = await import("./profile-DplLGGqo.js").then((n) => n.i);
 					for (const r of routes) if (findDirNameByCode(root, r.trajectory) === null) {
 						sendJson$2(res, 400, { error: `unknown trajectory: ${r.trajectory} (no such trajectory code in ${root})` });
 						return;
@@ -16231,7 +16140,7 @@ function registerStatusApi(ctx, opts = {}) {
 					const id = s.id ?? s.header?.id;
 					if (id) liveIds.add(id);
 				}
-				const { sessionsRootDir, collectEligibleSessions, performCleanup, cutoffDaysAgo } = await Promise.resolve().then(() => cleanup_exports);
+				const { sessionsRootDir, collectEligibleSessions, performCleanup, cutoffDaysAgo } = await import("./cleanup-C-92qnDs.js").then((n) => n.t);
 				const root = sessionsRootDir();
 				if (req.method === "GET") {
 					const { candidates } = performCleanup(root, cutoffDaysAgo(days), liveIds, { dryRun: true });
@@ -18290,7 +18199,6 @@ async function queueRebuild(ctx, opts) {
 	const boundRec = {
 		dirName: basename(dirname(mdPath)),
 		mdPath,
-		sessionId: sessionName.startsWith("S") ? sessionName : void 0,
 		note: "rebuild queued"
 	};
 	appendBound(session, "rebuild", boundRec);
@@ -21066,7 +20974,7 @@ const MEDIA_MAX_BYTES = 20971520;
 */
 async function resolveCccRootByAlias(ctx, alias) {
 	try {
-		const { listCccs } = await import("./ccc-roots-BVxn97dY.js").then((n) => n.a);
+		const { listCccs } = await import("./ccc-roots-rwgzt_0F.js").then((n) => n.a);
 		const entries = await listCccs(ctx);
 		const byName = entries.find((e) => e.name === alias);
 		if (byName) return byName.root;
@@ -21134,7 +21042,7 @@ async function resolveInboundTarget(ctx, input) {
 		});
 		return null;
 	}
-	const { findDirNameByCode } = await import("./profile-Cz4oBXlI.js").then((n) => n.i);
+	const { findDirNameByCode } = await import("./profile-DplLGGqo.js").then((n) => n.i);
 	if (findDirNameByCode(root, target.role) === null) {
 		const detail = `目标 CCC "${target.ccc}" 内没有编码为 "${target.role}" 的认知轨迹`;
 		console.error(`[serenity-hooks] ✗ human-channel: ${detail}（account=${input.account} user=${input.user}）—— 该消息**未投递**，请改订阅表里的目标编码`);
@@ -21946,7 +21854,7 @@ function syncHumanChannel(ctx) {
 	(async () => {
 		try {
 			stopMachineLoops();
-			const { listCccs } = await import("./ccc-roots-BVxn97dY.js").then((n) => n.a);
+			const { listCccs } = await import("./ccc-roots-rwgzt_0F.js").then((n) => n.a);
 			for (const entry of await listCccs(ctx)) syncCccBridge(ctx, entry.root);
 		} catch {}
 	})();
@@ -22210,7 +22118,7 @@ function matchCcc(input, candidates) {
 }
 /** 组装候选列表（`ccc-roots.listCccs` 投影 + `.serenity` 名；动态 import 保持本模块静态依赖轻量） */
 async function collectCandidates(ctx) {
-	const { listCccs } = await import("./ccc-roots-BVxn97dY.js").then((n) => n.a);
+	const { listCccs } = await import("./ccc-roots-rwgzt_0F.js").then((n) => n.a);
 	const entries = await listCccs(ctx, { defaultRoot: process.cwd() });
 	const seen = /* @__PURE__ */ new Set();
 	const out = [];
@@ -25077,11 +24985,9 @@ function apply(ctx, config) {
 	(async () => {
 		try {
 			const domain = await openBindingDomain(ctx);
-			setBindingStore(bindingStore(domain));
+			bindingStore(domain);
 			if (!domain) console.log("[serenity-hooks] §0L 存储域不可用 → 绑定继续走 CCC 内 .bindings.json（向前兼容回落）");
-		} catch {
-			setBindingStore(null);
-		}
+		} catch {}
 	})();
 	if (config.tools) {
 		ctx.tools.register(ccFsTool);