@shgroup/dsh-serenity-hooks 1.77.0 → 1.78.0

package/lib/{message-source-CYa8LbbM.js → message-source-BOG0piL8.js}

@@ -1,7 +1,243 @@
-import { r as cccRootForCwd } from "./ccc-roots-rwgzt_0F.js";
-import { A as sessionsRoot, T as parseTrajectoryCode, b as getLastActiveSessionInfo, k as sessionEvents, y as getActiveSessionInfo } from "./profile-DplLGGqo.js";
+import { r as cccRootForCwd } from "./ccc-roots-D3ty1C8P.js";
+import { _ as resolveInside, g as readUtf8 } from "./ccc-CyYJL4F2.js";
+import { A as sessionEvents, E as parseTrajectoryCode, b as getActiveSessionInfo, j as sessionsRoot, x as getLastActiveSessionInfo } from "./profile-C7BuyZK7.js";
 import { dirname, join } from "node:path";
-import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, statSync, writeFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+//#region src/kernel/constants.ts
+/** 常量（纯模块，零 DSH 依赖） */
+/** 本包名 —— 上溯定位包根时的**身份核对**（同名目录家的邻居不会误命中） */
+const PACKAGE_NAME = "@shgroup/dsh-serenity-hooks";
+/** 上溯层数上限（源码态最深 `src/<域>/<子域>/` ／ 发布态 `lib/` ⇒ 8 层足够，且**保证有界**） */
+const MAX_ROOT_ASCENT = 8;
+/**
+* 包根 = 含**本包** `package.json` 的目录。
+*
+* 🔴 为什么不写 `join(here, '..')`：本模块自身的位置**随目录重构变化**
+* （曾 `src/`，现 `src/kernel/`），而发布态是从打包入口 `lib/index.js` 反推 ——
+* 两种布局的深度不同，写死层数**必然在其中一个布局下静默错位**。
+* 实测代价：`src/` → `src/kernel/` 之后，`join(here,'..')` 指到 `src/`（无 package.json）
+* ⇒ `ACC_VERSION` 落进 catch 分支变 `0.0.0`，**没有任何门禁报警**。
+*
+* ⇒ 判据改成**内容**（找带本包名的 package.json）而不是**层数**。
+*
+* @param start 起点目录（缺省 = 本模块所在目录；测试可注入）
+*/
+function findPackageRoot(start) {
+	let dir = start ?? dirname(fileURLToPath(import.meta.url));
+	for (let i = 0; i < MAX_ROOT_ASCENT; i += 1) {
+		try {
+			if (JSON.parse(readFileSync(join(dir, "package.json"), "utf-8")).name === PACKAGE_NAME) return dir;
+		} catch {}
+		const parent = dirname(dir);
+		if (parent === dir) return null;
+		dir = parent;
+	}
+	return null;
+}
+/**
+* ACC 版本：自动从 package.json 读取（单一真相源，消除与 CHANGELOG 的漂移）。
+* 发布时只需改 package.json 的 version。
+*/
+const ACC_VERSION = (() => {
+	try {
+		const root = findPackageRoot();
+		if (root === null) return "0.0.0";
+		return JSON.parse(readFileSync(join(root, "package.json"), "utf-8")).version ?? "0.0.0";
+	} catch {
+		return "0.0.0";
+	}
+})();
+//#endregion
+//#region src/trajectory/policy/rules.ts
+/**
+* trajectory/policy/rules.ts — 轨迹约束面的**纯逻辑助手**（零 DSH 依赖，可独立单测）
+*
+* ## 2026-10-19 重做后的职责边界（R↓，别再混起来）
+*
+* | 模块 | 管什么 |
+* |---|---|
+* | `./profile.ts` | **判据 + 读盘**（"这是不是 轨迹约束"、"约束面是什么"） |
+* | `./rules.ts`（本文件） | **从约束面派生出的纯函数**（白名单集合、提示词读取器、基础提示词文本） |
+* | `../session-create.ts` | 会话创建/复用、提问、守门查询 |
+*
+* ⇒ 本文件**不再读 `serenity.json`**：`轨迹约束.roles` 整段已退役（owner 2026-10-19 重做）。
+* 它只接收一个已解析好的 `TrajectoryConstraint`，因此**不涉及任何 IO**（除提示词文件，那是刻意懒读的）。
+*
+* ## S12（2026-10-19，轨迹中心重构）
+*
+* 原名 `role/轨迹约束/config.ts`。改名理由（框架 §6.3「角色不是一个概念，是一段历史」）：
+* 它派生的是**某条轨迹的约束面**，与"配置读取"无关（本文件零配置读取，见上一段）
+* ⇒ `config` 这个名字描述的是**它曾经的样子**，`rules` 描述它**现在做的事**。
+*/
+/** 白名单推导 ────────────────────────────────────────────────────────────── */
+/** 提示词来源提示串（`apply` 回执与面板共用；避免两处措辞漂） */
+const TRAJECTORY_CONSTRAINT_HINT = "systemPromptFile hot-reloads by mtime; the rest of trajectory-constraint.json is re-read every turn";
+/**
+* 该轨迹会话**可见**的工具面（tools ∪ `msm`）。
+*
+* 🔴 **返回值 `null` 有专门含义（D181，owner 2026-10-20 裁「不写当然不收窄」）**：
+*
+* | `tools` | `msms` | 返回 | 语义 |
+* |---|---|---|---|
+* | 缺省 | 缺省 | **`null`** | **不收窄任何工具面**（这条轨迹要的是别的设定，如只写 `resident`） |
+* | `[]` | 缺省 | `{'msm'?}` 空/仅 msm | **全隐藏**（除恒可用的 `skill`） |
+* | `['a']` | … | `{'a', …}` | 只给这些 |
+*
+* ⛔ **调用方不许把 `null` 当空集处理** —— 那正是 S196 被锁死的形态（D179(b)）。
+* 判据是**字段在不在**，不是数组空不空。
+*
+* 🔴 `msm` 为什么自动加入：`msms` 非空意味着这个轨迹 **有 MSM 通道**，
+* 而 MSM 的唯一合法调用入口是 `msm` 工具（单入口纪律）——不给它 `msm` 就等于
+* 声明了一堆调不动的能力。⚠️ 这是**并集**，不是覆盖：`tools` 里显式写的照旧生效。
+*
+* @returns 白名单集合；**`null` = 不收窄**（调用方须显式判 `null`）
+*/
+function profileToolWhitelist(profile) {
+	if (!profile) return null;
+	if (profile.tools === void 0 && profile.msms === void 0) return null;
+	const out = /* @__PURE__ */ new Set();
+	for (const t of profile.tools ?? []) out.add(t);
+	if ((profile.msms?.length ?? 0) > 0) out.add("msm");
+	return out;
+}
+/** 该轨迹会话可 exec 的 MSM 白名单（`msm` 工具内部再过滤；独立于工具白名单） */
+function profileMsmWhitelist(profile) {
+	return new Set(profile?.msms ?? []);
+}
+/** 轨迹纪律参与项（`profile` 缺省已在 `readTrajectoryConstraintAt` 归一为全 true） */
+function constraintCognitiveTrajectory(profile) {
+	return {
+		session: profile?.cognitiveTrajectory.session === true,
+		keeper: profile?.cognitiveTrajectory.keeper === true,
+		rebuild: profile?.cognitiveTrajectory.rebuild === true
+	};
+}
+/**
+* 解析约束面声明的**系统提示词全文**（一次性读取；`create` / `validate` / `list` 用）。
+*
+* 顺序：`systemPromptFile`（**推荐**：超长提示词在 JSON 里内嵌不可读）→ 内嵌 `systemPrompt` → 空串。
+* 文件缺失/逃逸 ⇒ **抛错**（调用方 catch 降级；`validate` 据此报 issue）。
+*
+* ⚠️ 热路径**不用**它（那会用每次工具调用去读盘）——热路径用 `createProfilePromptReader`。
+*/
+function resolveConstraintSystemPrompt(root, profile) {
+	if (!profile) return "";
+	const file = profile.systemPromptFile?.trim();
+	if (file) {
+		const abs = resolveInside(root, file);
+		if (!existsSync(abs)) throw new Error(`轨迹约束 "${profile.code}": systemPromptFile "${file}" not found (resolved: ${abs})`);
+		return readUtf8(abs).trim();
+	}
+	return profile.systemPrompt ?? "";
+}
+/**
+* 提示词来源（`list`/`validate` 展示用）。
+*
+* 🔴 **2026-10-19 修（T4 的漏网面）**：v1.72.0 起提示词有两代来源——**新形态**
+* 是轨迹目录里的 `PROMPT.md`（`trajectory/prompt.ts`，**优先**），旧形态才是
+* `systemPromptFile` / `systemPrompt`。本函数原先只认旧形态 ⇒ 两条只写了 `PROMPT.md`
+* 的轨迹在 `container_admin config list` 里恒显示 `promptSource: 'none'`。
+*
+* 那是**读数器过时**，不是配置缺失：`validate` 侧早已按两条来源判（见
+* `trajectory-constraint-admin.ts` 的 `hasTrajectoryPromptOrLegacy`），而 `list` 侧漏了。
+* ⇒ 返 **四种**值，把"有章程但来源是新形态"这一格单独说出来。
+*
+* @param hasPromptFile 该轨迹目录下**是否真有** `PROMPT.md`（调用方查，本函数不做 IO）
+*/
+function constraintSystemPromptSource(profile, hasPromptFile = false) {
+	if (hasPromptFile) return "trajectory-file";
+	if (profile?.systemPromptFile?.trim()) return "file";
+	if (profile?.systemPrompt?.trim()) return "inline";
+	return "none";
+}
+/**
+* 提示词**读取器**（长期热更新；改文件即生效，无需重启）。
+*
+* 为什么返回函数而不是字符串（R↓，实证代价）：旧实现在创建时把提示词**快照**进系统提示词段闭包
+* ⇒ CCC 改了提示词文件必须重启 dsh web 才生效（实测：改完 18KB 提示词，live agent 仍用旧文本）。
+* 现形态由系统提示词段的 `text()` **每轮调用**本读取器：
+*   - `systemPromptFile`：按 **mtime + size** 缓存重读（命中缓存零 IO；未变不解析）
+*   - 内嵌 `systemPrompt`：静态（改 JSON 仍需重载配置，这与文件热更的差别是**必然**的 —— 文件有 mtime，JSON 没有）
+*   - 读取失败：返回**上次成功内容**（⛔ 绝不返回空——空提示词会让角色失去人格与纪律），并按标签去重告警一次
+*
+* @param root CCC 根
+* @param profile 约束面
+*/
+function createProfilePromptReader(root, profile) {
+	const file = profile?.systemPromptFile?.trim();
+	if (!file) {
+		const inline = profile?.systemPrompt ?? "";
+		return () => inline;
+	}
+	let abs = null;
+	try {
+		abs = resolveInside(root, file);
+	} catch (err) {
+		console.warn(`[serenity-hooks] ✗ 轨迹约束提示词路径非法（${file}）: ${String(err?.message ?? err)}`);
+	}
+	if (abs === null) return () => "";
+	const absPath = abs;
+	let cachedMtime = -1;
+	let cachedSize = -1;
+	let cachedText = "";
+	let warned = false;
+	return () => {
+		try {
+			const st = statSync(absPath);
+			if (st.mtimeMs === cachedMtime && st.size === cachedSize) return cachedText;
+			const text = readUtf8(absPath).trim();
+			const isReload = cachedMtime !== -1;
+			cachedMtime = st.mtimeMs;
+			cachedSize = st.size;
+			cachedText = text;
+			warned = false;
+			if (isReload) console.info(`[serenity-hooks] ↻ 轨迹约束提示词已热重载（${file}，${text.length} 字符）`);
+			return text;
+		} catch (err) {
+			if (!warned) {
+				warned = true;
+				console.warn(`[serenity-hooks] ✗ 轨迹约束提示词读取失败（${file}）——沿用上次成功内容: ${String(err?.message ?? err)}`);
+			}
+			return cachedText;
+		}
+	};
+}
+/**
+* 轨迹约束 基础提示词（dsp 只给这部分；CCC 的 `systemPrompt` 段由调用方拼接）。
+*
+* ## 🔴 为什么**不再枚举**清单（owner 2026-10-19 令）
+*
+* 旧版在这里抄了两份清单（`MSMs: a, b, c` / `Tools: read, grep, …`）。那是**第二真相源**，
+* 而真相源本来就在模型自己手里：
+*   · **工具清单** = 这一轮实际注册给它的 tool schema —— 模型已经看得见，抄一遍只会漂
+*   · **MSM 清单** = `msm()` 无参调用返回的目录 —— 已按白名单过滤，且**每次实时读配置**
+*
+* ⚠️ **漂移不是理论风险，是已发生的缺陷**（2026-10-19）：角色配置早就长到 8 个工具，
+* 而这个函数是从**创建时冻结的快照**求值的 ⇒ 提示词里一直写着旧的 4 个
+* ⇒ 模型照着提示词办事，**它自己以为没有的能力就不去调** ⇒ 症状是"工具用不了"，
+* 而守卫那边（每调用实时读配置）其实是放行的。两个真相源打架，输的总是提示词。
+*
+* ⇒ 现在只声明**边界与发现路径**，不抄内容：清单在哪，怎么取，越界会怎样。
+*
+* @param code 轨迹编码（轨迹约束的身份 —— 不是"角色名"，那个概念已退役）
+*/
+function buildTrajectoryBasePrompt(code) {
+	return [
+		"=== Serenity 轨迹约束 ===",
+		`Cognitive trajectory: ${code} (this is the trajectory you ARE, not a role you play)`,
+		"Your capability boundary is enforced mechanically by this CCC — anything outside it is rejected at the call site, not by your judgment.",
+		"Discover your surface, do not memorize it (both are generated from the live config on every turn):",
+		"  · Your tools are exactly the tool schemas you see in this session — if a tool is not in your schema, it is not available.",
+		"  · Your MSMs are listed by calling msm() with no arguments — that directory is already filtered to this trajectory.",
+		"  · Usage for any MSM: msm(\"<name>\", [], inspect=true) or pass \"--help\" as the first argument.",
+		"Do not infer unavailability from anything you remember or from an earlier list: this surface changes when the CCC configuration changes, and it takes effect without restarting.",
+		"",
+		"---",
+		""
+	].join("\n");
+}
+//#endregion
 //#region src/trajectory/bind-file.ts
 /**
 * trajectory/bind-file.ts — **当前载体绑定 = 认知轨迹目录里的自我交代**（判决 D172，owner 2026-10-20）
@@ -485,4 +721,4 @@ const ACC_MESSAGE_KIND = "plugin:dsh-serenity-hooks";
 /** ACC 注入消息的统一来源值（各缝共用；需要 `form` 时按 `ContextFormed` 另加字段）。 */
 const PLUGIN_SOURCE = { kind: ACC_MESSAGE_KIND };
 //#endregion
-export { listBoundSessionIds as a, setBindingStore as c, carrierState as i, PLUGIN_SOURCE as n, readLastBound as o, appendBound as r, resolveSessionCognitiveTrajectoryLabel as s, ACC_MESSAGE_KIND as t };
+export { ACC_VERSION as _, listBoundSessionIds as a, setBindingStore as c, constraintCognitiveTrajectory as d, constraintSystemPromptSource as f, resolveConstraintSystemPrompt as g, profileToolWhitelist as h, carrierState as i, TRAJECTORY_CONSTRAINT_HINT as l, profileMsmWhitelist as m, PLUGIN_SOURCE as n, readLastBound as o, createProfilePromptReader as p, appendBound as r, resolveSessionCognitiveTrajectoryLabel as s, ACC_MESSAGE_KIND as t, buildTrajectoryBasePrompt as u, findPackageRoot as v };

package/lib/{profile-DplLGGqo.js → profile-C7BuyZK7.js}

@@ -243,7 +243,8 @@ const COGNITIVE_TRAJECTORY_ACTIONS = [
 	"uid",
 	"send-now",
 	"send-later",
-	"cro-guide"
+	"cro-guide",
+	"resident"
 ];
 /**
 * 读取 Session 事件序列（v1.28.1 适配 0.1.2-rc.1 补齐）：rc.1 起官方 Session 类
@@ -949,6 +950,7 @@ var profile_exports = /* @__PURE__ */ __exportAll({
 	listTrajectoryConstraints: () => listTrajectoryConstraints,
 	readTrajectoryConstraintAt: () => readTrajectoryConstraintAt,
 	readTrajectoryConstraintByCode: () => readTrajectoryConstraintByCode,
+	replacesDefaultIdentity: () => replacesDefaultIdentity,
 	trajectoryConstraintForSession: () => trajectoryConstraintForSession
 });
 /**
@@ -1011,7 +1013,20 @@ function readTrajectoryConstraintAt(trajectoryDir, root) {
 	}
 	const obj = raw;
 	const file = found;
-	const strList = (v) => Array.isArray(v) ? v.filter((x) => typeof x === "string" && x.trim() !== "").map((x) => x.trim()) : [];
+	/**
+	* 白名单字段的**两态**读取（D181，owner 2026-10-20 裁「不写当然不收窄」）：
+	*
+	* | 文件里 | 返回 | 语义 |
+	* |---|---|---|
+	* | 字段**不存在** | `undefined` | **不收窄**（这条轨迹要的是别的设定，比如只写 `resident`） |
+	* | `[]`（显式空数组） | `[]` | **全隐藏**（除恒可用的 `skill`）—— 用户明说了"我一个都不给" |
+	* | `["a","b"]` | `["a","b"]` | 只给这些 |
+	*
+	* 🔴 **为什么不能归一成 `[]`**：那会把"我没提这件事"读成"我要禁止一切"，
+	* 于是「只想声明常驻」的人会被静默锁死（S196 实测踩到，见 D179(b)）。
+	* 判据是**字段在不在**，不是数组空不空。
+	*/
+	const strListMaybe = (v) => v === void 0 ? void 0 : Array.isArray(v) ? v.filter((x) => typeof x === "string" && x.trim() !== "").map((x) => x.trim()) : void 0;
 	/** 布尔缺省 **true**（R↓ 见接口：工作台就是这条轨迹自己的身体） */
 	const boolOrTrue = (v) => typeof v === "boolean" ? v : true;
 	const ct = obj.cognitiveTrajectory && typeof obj.cognitiveTrajectory === "object" ? obj.cognitiveTrajectory : {};
@@ -1025,13 +1040,22 @@ function readTrajectoryConstraintAt(trajectoryDir, root) {
 	} catch (err) {
 		console.warn(`[serenity-hooks] ✗ ${TRAJECTORY_CONSTRAINT_FILENAME} 的 systemPromptFile 越界，已忽略（其余约束仍生效）: ${file} — ${String(err?.message ?? err)}`);
 	}
+	const residentRaw = obj.resident;
+	let resident;
+	if (residentRaw && typeof residentRaw === "object" && !Array.isArray(residentRaw)) {
+		const serves = residentRaw.serves;
+		resident = typeof serves === "string" && serves.trim() !== "" ? { serves: serves.trim() } : {};
+	}
+	const tools = strListMaybe(obj.tools);
+	const msms = strListMaybe(obj.msms);
 	return {
 		dirName,
 		code,
 		path: file,
 		...model !== void 0 ? { model } : {},
-		tools: strList(obj.tools),
-		msms: strList(obj.msms),
+		...tools !== void 0 ? { tools } : {},
+		...msms !== void 0 ? { msms } : {},
+		...resident !== void 0 ? { resident } : {},
 		cognitiveTrajectory: {
 			session: boolOrTrue(ct.session),
 			keeper: boolOrTrue(ct.keeper),
@@ -1103,9 +1127,43 @@ function registeredDirName(sessionId) {
 *
 * 存在的理由：调用点很多只要一个"是/不是"（seams 的旁路判定），
 * 让它们各自写 `!== null` 会把判据散开；**判据只能有一个入口**。
+*
+* 🔴 **D183（owner 2026-10-20）：这里的 `true` 只表示"有声明"，不再等于"该旁路默认行为"。**
+* 要判断后者请用 `replacesDefaultIdentity()` —— 两者**刻意分开**，因为：
+* 「我声明过」与「我声明了什么」是两件事，而旁路 ACC 身份只需要后者成立。
 */
 function isTrajectoryConstrained(root, sessionId) {
 	return trajectoryConstraintForSession(root, sessionId) !== null;
 }
+/**
+* 这条声明**是否真的取代了该轨迹的默认身份**（= 该不该旁路 ACC 身份/首轮/恢复等默认行为）。
+*
+* ## 为什么需要它（D183，owner 2026-10-20 逐字）
+*
+* > 「这个 `trajectory.json` 中**所有 key 都是可选的；不写就是不设定 不应影响默认行为**」
+*
+* 旧判据是**文件存在** ⇒ 只写一句 `resident`（对外用途自述）就会连带丢掉
+* ACC 身份播种、首轮锚定、自动恢复、compact 重注入 —— **完全超出用户预期**。
+*
+* ## 判据（哪些 key 真的改"这条轨迹是谁"）
+*
+* | key | 取代默认身份？ | 理由 |
+* |---|---|---|
+* | `tools` / `msms` | **否** | 它们收窄**能力**，但"我是谁、我按什么章程工作"没变 ⇒ 仍该拿 ACC 身份 |
+* | `model` | **否** | 换的只是**执行的模型**，不是身份 |
+* | `resident` | **否** | 纯对外自述，D173 明说"不碰任何默认行为" |
+* | `cro.host` | **否** | 管"哪台机器跑 CRO 程序"，与身份无关 |
+* | `cognitiveTrajectory` | **否** | 管"参与哪些纪律"，纪律是叠加不是取代 |
+* | `systemPromptFile` / `systemPrompt` | **是** | 它自带**章程** ⇒ 用户的提示词整段取代 ACC 的 |
+* | `PROMPT.md`（目录里） | **否** | 它**追加**在 ACC 身份之外（v1.72.0 起的机制），不取代 |
+*
+* @returns `true` ⇒ 该轨迹自带章程，应旁路 ACC 身份类默认行为；否则 `false`
+*/
+function replacesDefaultIdentity(profile) {
+	if (!profile) return false;
+	const hasFile = (profile.systemPromptFile ?? "").trim() !== "";
+	const hasInline = (profile.systemPrompt ?? "").trim() !== "";
+	return hasFile || hasInline;
+}
 //#endregion
-export { sessionsRoot as A, localFileStamp as B, namingTitleFor as C, readTrajectoryUid as D, readActiveSessionMd as E, useSession as F, localIdStamp as H, TRAJECTORY_FILENAME as I, TRAJECTORY_LEGACY_FILENAMES as L, showSession as M, summarize as N, resolveSessionByTitle as O, trajectoryDescOf as P, readTrajectoryFile as R, listSessions as S, parseTrajectoryCode as T, localHuman as V, extractSessionMdPathFromText as _, readTrajectoryConstraintAt as a, getLastActiveSessionInfo as b, registerTrajectorySession as c, COGNITIVE_TRAJECTORY_ACTIONS as d, DEFAULT_SESSION_SCOPE as f, createSession as g, clearActiveSessionInfo as h, profile_exports as i, setActiveSessionInfo as j, sessionEvents as k, trajectoryDirNameForSession as l, archiveSession as m, isTrajectoryConstrained as n, readTrajectoryConstraintByCode as o, UID_FILENAME as p, listTrajectoryConstraints as r, trajectoryConstraintForSession as s, TRAJECTORY_CONSTRAINT_FILENAME as t, unregisterTrajectorySession as u, findSession as v, parseSessionContextFromEvents as w, listActiveTrajectories as x, getActiveSessionInfo as y, isoLocal as z };
+export { sessionEvents as A, isoLocal as B, listSessions as C, readActiveSessionMd as D, parseTrajectoryCode as E, trajectoryDescOf as F, localHuman as H, useSession as I, TRAJECTORY_FILENAME as L, setActiveSessionInfo as M, showSession as N, readTrajectoryUid as O, summarize as P, TRAJECTORY_LEGACY_FILENAMES as R, listActiveTrajectories as S, parseSessionContextFromEvents as T, localIdStamp as U, localFileStamp as V, createSession as _, readTrajectoryConstraintAt as a, getActiveSessionInfo as b, trajectoryConstraintForSession as c, unregisterTrajectorySession as d, COGNITIVE_TRAJECTORY_ACTIONS as f, clearActiveSessionInfo as g, archiveSession as h, profile_exports as i, sessionsRoot as j, resolveSessionByTitle as k, registerTrajectorySession as l, UID_FILENAME as m, isTrajectoryConstrained as n, readTrajectoryConstraintByCode as o, DEFAULT_SESSION_SCOPE as p, listTrajectoryConstraints as r, replacesDefaultIdentity as s, TRAJECTORY_CONSTRAINT_FILENAME as t, trajectoryDirNameForSession as u, extractSessionMdPathFromText as v, namingTitleFor as w, getLastActiveSessionInfo as x, findSession as y, readTrajectoryFile as z };

package/lib/{route-COOFLTpU.js → route-Dr0SFD8A.js}

@@ -1,286 +1,9 @@
 import { n as __exportAll } from "./rolldown-runtime-B4iAMlE-.js";
 import { s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS } from "./ccc-CyYJL4F2.js";
+import { c as unsetEntry, l as writeEntry, r as getEntry } from "./service-DDmHSglV.js";
 import { join, resolve } from "node:path";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { createHash } from "node:crypto";
-//#region src/tools/localstore/service.ts
-/**
-* tools/localstore/service.ts — localstore 纯逻辑层（零 DSH 依赖，可独立单测）
-*
-* S134 重设计（v1.16.7）：存储从 ~/.serenity/ 迁到 **CCC 根根目录 localstore.json**
-* （JSON 格式——方便 MSM 直接 read + JSON.parse 读取，零解析依赖）。
-*
-* git 提交策略（可靠机制 × 用户自由）：
-*   - 配置：.opencode/serenity.json `localstore.gitTrack`: "allow"（可提交）| "deny"（禁提交）
-*   - **缺省 deny（没配就是不提交）**；且 deny 的保证**不依赖 dsh 运行**——
-*     写入时自动确保 .gitignore 含 localstore.json（物理保证：即使 dsh 不在、
-*     用户手动 git commit 也不会误提交），container_git 检查为第二道防线（拒绝 + 提示）
-*   - allow：放行（文件可提交，用户自行管理 .gitignore）
-*
-* 存储结构（JSON 顶层分节）：
-*   { "credentials": { "HOME_GITLAB_TOKEN": "xxx" }, "<config节>": { "<key>": "v" } }
-*   credentials 为保留节（credential 命名空间，key 大写蛇形）；其余节归 config 命名空间
-*   （path = section.key，如 cheap-worker.models）。
-*/
-const LOCALSTORE_SCOPES = ["credential", "config"];
-/** 存储文件名（CCC 根根目录） */
-const LOCALSTORE_FILENAME = "localstore.json";
-/** 凭据保留节名（JSON 顶层） */
-const CREDENTIALS_SECTION = "credentials";
-/** 凭据 key 规范：大写蛇形，如 HOME_GITLAB_TOKEN */
-const CREDENTIAL_KEY_RE = /^[A-Z][A-Z0-9_]*$/;
-/** 配置节名规范：小写字母数字连字符 */
-const CONFIG_SECTION_RE = /^[a-z][a-z0-9-]*$/;
-/** 配置 key 规范（节内）：小驼峰，如 defaultModel */
-const CONFIG_KEY_RE = /^[a-z][a-zA-Z0-9_]*$/;
-/** 存储文件绝对路径（CCC 根根目录） */
-function localstorePath(root) {
-	return join(root, LOCALSTORE_FILENAME);
-}
-/** git 策略：serenity.json localstore.gitTrack，缺省 deny（不提交） */
-function readGitTrack(root, paths = DEFAULT_SERENITY_CONFIG_PATHS) {
-	return loadSerenityConfig(root, paths).localstore?.gitTrack === "allow" ? "allow" : "deny";
-}
-/** .gitignore 是否已覆盖 localstore 文件（非空非注释行含文件名即算） */
-function isLocalstoreGitignored(root) {
-	const gi = join(root, ".gitignore");
-	if (!existsSync(gi)) return false;
-	return readFileSync(gi, "utf-8").split("\n").some((l) => {
-		const t = l.trim();
-		return t !== "" && !t.startsWith("#") && t.includes("localstore.json");
-	});
-}
-/**
-* 确保 .gitignore 含 localstore 文件（deny 时的物理保证，不依赖 dsh 运行）：
-* 写入 localstore 时调用——deny（含缺省）且 .gitignore 未覆盖 → 自动追加一行。
-* allow → 不写入（放行，文件可提交）。
-*/
-function ensureLocalstoreGitignored(root) {
-	if (readGitTrack(root) === "allow") return { status: "allow" };
-	if (isLocalstoreGitignored(root)) return { status: "ignored" };
-	const gi = join(root, ".gitignore");
-	const existing = existsSync(gi) ? readFileSync(gi, "utf-8") : "";
-	const line = `${LOCALSTORE_FILENAME}  # ACC localstore (localstore.gitTrack defaults to deny — do not commit)`;
-	writeFileSync(gi, (existing.endsWith("\n") || existing === "" ? existing : existing + "\n") + line + "\n", "utf-8");
-	return { status: "appended" };
-}
-/**
-* container_git 联动检查（第二道防线）：文件存在 && deny && .gitignore 未覆盖 → 不通过。
-* 调用方（container_git commit）据此拒绝提交；status 可输出 warning。
-*/
-function checkLocalstoreGitCompliance(root) {
-	if (!existsSync(localstorePath(root))) return { ok: true };
-	if (readGitTrack(root) === "allow") return { ok: true };
-	if (isLocalstoreGitignored(root)) return { ok: true };
-	return {
-		ok: false,
-		reason: `localstore.json must not be committed (localstore.gitTrack=deny default) but .gitignore does not cover it — add ${LOCALSTORE_FILENAME} to .gitignore (or set localstore.gitTrack=allow to explicitly permit)`
-	};
-}
-/** 已告警的坏 localstore 路径（进程级去重；F-07：凭据文件损坏不得静默） */
-const warnedBrokenStores = /* @__PURE__ */ new Set();
-/** 读取全文件（顶层分节）；文件不存在 → 空；**坏 JSON → 空 + 响亮告警**（每路径一次） */
-function readAll(root) {
-	const p = localstorePath(root);
-	if (!existsSync(p)) return {};
-	try {
-		const v = JSON.parse(readFileSync(p, "utf-8").replace(/^\uFEFF/, ""));
-		if (v && typeof v === "object" && !Array.isArray(v)) return v;
-		return {};
-	} catch (err) {
-		if (!warnedBrokenStores.has(p)) {
-			warnedBrokenStores.add(p);
-			console.warn(`[serenity-hooks] ✗ localstore 解析失败，已按空存储继续（其中凭据/配置对工具表现为"未设置"，请修 JSON）: ${p} — ${String(err?.message ?? err)}`);
-		}
-		return {};
-	}
-}
-/** 写回全文件（2 空格缩进 + 尾换行，方便 MSM 直接读取） */
-function writeAll(root, data) {
-	writeFileSync(localstorePath(root), JSON.stringify(data, null, 2) + "\n", "utf-8");
-}
-/** 读取命名空间全部条目：credential → 扁平；config → 分节（剔除 credentials 保留节） */
-function readStore(root, scope) {
-	const all = readAll(root);
-	if (scope === "credential") return all[CREDENTIALS_SECTION] ?? {};
-	const { [CREDENTIALS_SECTION]: _cred, ...rest } = all;
-	return rest;
-}
-/** 校验凭据 key 合法（大写蛇形）；不合法抛错 */
-function assertCredentialKey(key) {
-	if (!CREDENTIAL_KEY_RE.test(key)) throw new Error(`credential key "${key}" must match UPPER_SNAKE ^[A-Z][A-Z0-9_]*$ (e.g. HOME_GITLAB_TOKEN)`);
-}
-/** 校验 config 路径（节.key）；不合法抛错 */
-function assertConfigPath(path) {
-	const idx = path.indexOf(".");
-	if (idx <= 0 || idx === path.length - 1) throw new Error(`config path "${path}" must be section.key (e.g. cheap-worker.models)`);
-	const section = path.slice(0, idx);
-	const key = path.slice(idx + 1);
-	if (!CONFIG_SECTION_RE.test(section)) throw new Error(`config section "${section}" must match ^[a-z][a-z0-9-]*$`);
-	if (!CONFIG_KEY_RE.test(key)) throw new Error(`config key "${key}" must match lowerCamel ^[a-z][a-zA-Z0-9_]*$ (e.g. defaultModel)`);
-	return {
-		section,
-		key
-	};
-}
-/** 写入单个条目（自动建文件；deny 默认时同步确保 .gitignore 物理保证） */
-function writeEntry(root, scope, name, value) {
-	const all = readAll(root);
-	if (scope === "credential") {
-		assertCredentialKey(name);
-		all[CREDENTIALS_SECTION] ??= {};
-		all[CREDENTIALS_SECTION][name] = value;
-	} else {
-		const { section, key } = assertConfigPath(name);
-		all[section] ??= {};
-		all[section][key] = value;
-	}
-	writeAll(root, all);
-	ensureLocalstoreGitignored(root);
-}
-/** 删除单个条目（不存在返回 false）；空节自动移除 */
-function unsetEntry(root, scope, name) {
-	const all = readAll(root);
-	if (scope === "credential") {
-		assertCredentialKey(name);
-		const sec = all[CREDENTIALS_SECTION];
-		if (!sec || !(name in sec)) return false;
-		delete sec[name];
-		if (Object.keys(sec).length === 0) delete all[CREDENTIALS_SECTION];
-	} else {
-		const { section, key } = assertConfigPath(name);
-		const sec = all[section];
-		if (!sec || !(key in sec)) return false;
-		delete sec[key];
-		if (Object.keys(sec).length === 0) delete all[section];
-	}
-	writeAll(root, all);
-	return true;
-}
-/** 读取单个条目值；不存在返回 null */
-function getEntry(root, scope, name) {
-	const all = readAll(root);
-	if (scope === "credential") {
-		assertCredentialKey(name);
-		return all[CREDENTIALS_SECTION]?.[name] ?? null;
-	}
-	const { section, key } = assertConfigPath(name);
-	return all[section]?.[key] ?? null;
-}
-/** 列出 key（凭据只返回 key 名，不返回值） */
-function listKeys(root, scope) {
-	const data = readStore(root, scope);
-	if (scope === "credential") return Object.keys(data);
-	return Object.entries(data).flatMap(([section, entries]) => Object.keys(entries).map((key) => `${section}.${key}`));
-}
-/**
-* doc 说明文本：输出存储位置/格式/key 规范/git 策略/读写方法。
-* agent 据此可直接用 fs 工具（read/write）自己读写凭据/配置。
-*/
-function docText(root) {
-	const path = localstorePath(root);
-	return [
-		"# localstore — ACC local credential/config storage (standard, S134 redesign)",
-		"",
-		"One tool manages two namespaces: credential (credentials) + config (preferences).",
-		`Stored at the CCC root in ${path} (JSON format; MSMs can read + JSON.parse directly).`,
-		"",
-		"## Git commit policy",
-		"- Config: .opencode/serenity.json `localstore.gitTrack`: `\"allow\"` (may commit) | `\"deny\"` (must not commit; .dsh fallback)",
-		"- **Default deny (unset = not committed)**; when deny, writes automatically ensure .gitignore contains localstore.json",
-		"  (physical guarantee, independent of dsh runtime); container_git commit checks and refuses",
-		"- To commit: set `\"localstore\": { \"gitTrack\": \"allow\" }` and remove localstore.json from .gitignore",
-		"",
-		"## Format (JSON top-level sections)",
-		"```json",
-		"{",
-		"  \"credentials\": {",
-		"    \"HOME_GITLAB_TOKEN\": \"xxx\"",
-		"  },",
-		"  \"cheap-worker\": {",
-		"    \"models\": [\"minimax-cn-coding-plan/MiniMax-M3\"]",
-		"  }",
-		"}",
-		"```",
-		"- credentials is a reserved section (credentials, UPPER_SNAKE keys); other sections = config (path = section.key)",
-		"",
-		"## Key conventions",
-		"- credential key: ^[A-Z][A-Z0-9_]*$ (e.g. HOME_GITLAB_TOKEN)",
-		"- config path: section.key (section ^[a-z][a-z0-9-]*$, key lowerCamel ^[a-z][a-zA-Z0-9_]*$, e.g. cheap-worker.models)",
-		"",
-		"## Reading (agents may use fs tools directly)",
-		`- Read ${path} with the read tool → JSON.parse`,
-		"- Or use localstore get <name> [--scope credential|config]",
-		"",
-		"## Writing",
-		"- Recommended: localstore set <name> <value> [--scope ...] (auto-creates file / preserves other entries / syncs .gitignore)",
-		"- Or modify the file directly with write/edit, keeping the JSON valid",
-		"",
-		"## Security boundary",
-		"- list/show return only key names for credentials, never values",
-		"- Credential values should be used internally by the agent; never write them into conversation or logs",
-		"- Default deny: the file is not committed to git (.gitignore physical guarantee + container_git check fallback)",
-		""
-	].join("\n");
-}
-/** 运行 localstore 操作（纯逻辑；返回 JSON 值供工具 render） */
-function runLocalStore(root, args) {
-	const scope = args.scope === "config" ? "config" : "credential";
-	switch (args.action) {
-		case "list": return {
-			scope,
-			keys: listKeys(root, scope)
-		};
-		case "get": {
-			if (!args.name) throw new Error("get requires name");
-			const value = getEntry(root, scope, args.name);
-			if (value === null) throw new Error(`not found: ${args.name} (scope=${scope})`);
-			return {
-				scope,
-				name: args.name,
-				value,
-				source: scope
-			};
-		}
-		case "set": {
-			if (!args.name) throw new Error("set requires name");
-			if (args.value === void 0) throw new Error("set requires value");
-			writeEntry(root, scope, args.name, args.value);
-			const git = checkLocalstoreGitCompliance(root);
-			return {
-				scope,
-				name: args.name,
-				set: true,
-				path: localstorePath(root),
-				gitTrack: readGitTrack(root),
-				gitOk: git.ok,
-				git: git.reason ? { warning: git.reason } : null
-			};
-		}
-		case "unset": {
-			if (!args.name) throw new Error("unset requires name");
-			const removed = unsetEntry(root, scope, args.name);
-			return {
-				scope,
-				name: args.name,
-				removed
-			};
-		}
-		case "show": {
-			if (!args.name) throw new Error("show requires name");
-			const exists = getEntry(root, scope, args.name) !== null;
-			return {
-				scope,
-				name: args.name,
-				exists,
-				path: localstorePath(root)
-			};
-		}
-		case "doc": return { doc: docText(root) };
-		default: throw new Error(`Unknown subcommand: ${args.action} (available: list/get/set/unset/show/doc)`);
-	}
-}
-//#endregion
 //#region src/im/route.ts
 /**
 * im/route.ts — 微信桥 CCC 配置层纯逻辑（F4c-3，v1.27.0 实验性）
@@ -693,4 +416,4 @@ function setWeixinEnabled(root, enabled) {
 	return next;
 }
 //#endregion
-export { runLocalStore as _, readFeishuCredential as a, route_exports as c, weixinSessionIdForTrajectory as d, LOCALSTORE_SCOPES as f, readStore as g, readGitTrack as h, matchWeixinRoute as i, sanitizeFileName as l, localstorePath as m, extractWeixinText as n, readWeixinCredential as o, checkLocalstoreGitCompliance as p, hasVoiceItem as r, readWeixinSettings as s, extractWeixinMedia as t, weixinInboundDir as u };
+export { readFeishuCredential as a, route_exports as c, weixinSessionIdForTrajectory as d, matchWeixinRoute as i, sanitizeFileName as l, extractWeixinText as n, readWeixinCredential as o, hasVoiceItem as r, readWeixinSettings as s, extractWeixinMedia as t, weixinInboundDir as u };