@shgroup/dsh-serenity-hooks 1.99.0 → 1.101.0

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-serenity-hooks",
-  "version": "1.99.0",
+  "version": "1.101.0",
   "main": "lib/index.js",
   "description": "宁静号 ACC harness（Native Cordis 插件）：给 DSH 装一个「AI 工作区」——14 个工具（container_fs/cognitive_trajectory/dashboard/container_git/msm/praxis/ontology/serenity-skill-creator/cheap-worker/localstore/container_admin；另三个 im-bridge/acc-diag/diagram 按配置条件出现）+ 机械约束（安全模式/工作区围墙/密钥守卫）+ 认知轨迹日志与原地重建 + 网页登录入口/IM 桥/认知轨迹唤醒注册表。轨迹声明 = 轨迹目录下的 trajectory.json（约束面 + 旧标识 uid + CRO 机器绑定 cro.host；旧名 trajectory-constraint.json / skiff.json 仍在读取族里）；轨迹提示词 = 轨迹目录下的 PROMPT.md（一条轨迹「是谁、按什么章程工作」，所有轨迹通用，追加在容器层与质量层之后，不替换它们）。适配 DSH 0.1.7-rc.1 / 0.2.0-rc.1 / 0.2.1-rc.1（三档，deepseek-ai/deepseek-harness）。",
   "engines": {

package/lib/index.js

@@ -4,7 +4,7 @@ import { _ as resolveInside, a as findSerenityRoot$1, c as matchBlacklist, d as
 import { A as namingTitleFor, B as summarize, C as createSession, E as getActiveSessionInfo, F as resolveSessionByTitle, G as readTrajectoryFile, H as useSession, I as sessionEvents, J as localHuman, K as isoLocal, L as sessionsRoot, M as parseTrajectoryCode, O as listActiveTrajectories, P as readTrajectoryUid, R as setActiveSessionInfo, S as clearActiveSessionInfo, T as findSession, U as TRAJECTORY_FILENAME, V as trajectoryDescOf, W as TRAJECTORY_LEGACY_FILENAMES, Y as localIdStamp, b as UID_FILENAME, c as replacesDefaultIdentity, i as listTrajectoryConstraints, j as parseSessionContextFromEvents, k as listSessions, l as trajectoryCodeForSession, n as findDirNameByCode, o as readTrajectoryConstraintAt, q as localFileStamp, r as isTrajectoryConstrained, s as readTrajectoryConstraintByCode, t as TRAJECTORY_CONSTRAINT_FILENAME, u as trajectoryConstraintForSession, v as COGNITIVE_TRAJECTORY_ACTIONS, w as extractSessionMdPathFromText, x as archiveSession, z as showSession } from "./profile-zxakCNXy.js";
 import { n as checkLocalstoreGitCompliance, o as readStore, s as runLocalStore, t as LOCALSTORE_SCOPES } from "./service-DDmHSglV.js";
 import { _ as resolveConstraintSystemPrompt, a as listBoundSessionIds, d as constraintCognitiveTrajectory, f as constraintSystemPromptSource, g as profileWriteWhitelist, h as profileToolWhitelist, i as carrierState, l as TRAJECTORY_CONSTRAINT_HINT, n as PLUGIN_SOURCE, o as readLastBound, r as appendBound, s as resolveSessionCognitiveTrajectoryLabel, t as ACC_MESSAGE_KIND, v as ACC_VERSION, y as findPackageRoot } from "./message-source-BAMwXu6i.js";
-import { A as buildResourceIndex, C as verifyPassword, D as recordToolUsage, E as verifyTotpCode, F as hasTrajectoryPrompt, M as isSafeSkillName, N as truncateContent, O as REFERENCE_DIR, P as TRAJECTORY_PROMPT_FILENAME, S as toWire, T as MECHANISM_PORTS, _ as registerEntrySkillSectionGlobal, a as trajectoryConstraintFor, b as projectKnownWorkspaces, c as trajectoryWorkspaceMdPath, d as CHEAP_WORKER_GUIDE, f as providerAvailabilityError, g as registerEntrySkillSection, h as registerCognitiveTrajectorySkillSection, i as getTrajectoryAgent, j as buildResourceNameSuffix, k as SKILL_ONTOLOGY_FILE, l as unregisterTrajectorySession, m as splitModel, n as deliverToTrajectory, o as trajectoryConstraintMsmGate, p as requireWhitelistedModel, r as ensureWorkspacePromptSection, s as trajectoryConstraintParticipates, t as createTrajectoryAgent, u as workspaceCognitiveTrajectoryLine, v as applyWirePatch, w as FACE_PORTS, x as readAdvancedSettings, y as migrateLegacyLocalstore } from "./session-DFNtReQY.js";
+import { A as buildResourceIndex, C as verifyPassword, D as recordToolUsage, E as verifyTotpCode, F as hasTrajectoryPrompt, M as isSafeSkillName, N as truncateContent, O as REFERENCE_DIR, P as TRAJECTORY_PROMPT_FILENAME, S as toWire, T as MECHANISM_PORTS, _ as registerEntrySkillSectionGlobal, a as trajectoryConstraintFor, b as projectKnownWorkspaces, c as trajectoryWorkspaceMdPath, d as CHEAP_WORKER_GUIDE, f as providerAvailabilityError, g as registerEntrySkillSection, h as registerCognitiveTrajectorySkillSection, i as getTrajectoryAgent, j as buildResourceNameSuffix, k as SKILL_ONTOLOGY_FILE, l as unregisterTrajectorySession, m as splitModel, n as deliverToTrajectory, o as trajectoryConstraintMsmGate, p as requireWhitelistedModel, r as ensureWorkspacePromptSection, s as trajectoryConstraintParticipates, t as createTrajectoryAgent, u as workspaceCognitiveTrajectoryLine, v as applyWirePatch, w as FACE_PORTS, x as readAdvancedSettings, y as migrateLegacyLocalstore } from "./session-Beybbybh.js";
 import { i as sessionsRootDir, n as findSessionLog, r as hasSessionLogById } from "./cleanup-CPl1SSaK.js";
 import { i as runImBridge, n as isImWiredTrajectory, o as readSimpleSettings, r as registerImChannel, s as registerSettingsSection, t as imChannelIds } from "./channels-CuCsUfcY.js";
 import { a as readFeishuCredential, c as readWeixinSettings, d as weixinInboundDir, f as weixinSessionIdForTrajectory, i as matchWeixinRoute, n as extractWeixinText, r as hasVoiceItem, s as readWeixinCredential, t as extractWeixinMedia, u as sanitizeFileName$1 } from "./route-DxIKWeN9.js";
@@ -38,7 +38,13 @@ import { isIP } from "node:net";
 *   - cp：目录需 recursive；dst 已存在报错；自动建父目录
 *   - mv：dst 已存在报错；自动建父目录
 *   - list/tree/exists/info/find：输出结构与 osp 一致（JSON 元数据 / 嵌套树 / glob+fuzzy 搜索）
-*   - touch：存在更新 mtime、不存在创建（自动建父目录）；append：自动建父目录 + 返回字节数
+*   - touch：存在更新 mtime、不存在创建（自动建父目录）
+*   - 🔴 **`append` 已于 v1.101.0 退役**（owner 2026-10-26 令「砍掉 container_fs 的 append」）：
+*     它存在的唯一理由曾是"不读全文的追加"，但实测该用途几乎没人走（SESSION.md 追加
+*     7,291 次里 append 只有 74 次，占 1.0%）⇒ 留着一个**绕过 fs-observation 锁**的
+*     写通道，收益不足以抵它带来的规则面（写类动作清单、写白名单、两处工具描述都要维护它）。
+*     ⚠️ 传 `action:'append'` 现在得到 `PARAMETER_INVALID_VALUE` 并列出合法动作 —— **响亮失败**，
+*     不是静默忽略。
 * 保留 dsp 增强：win32 reveal 用 spawn+unref（explorer GUI 进程退出码不可靠，fire-and-forget）。
 */
 const CC_FS_ACTIONS = [
@@ -53,7 +59,6 @@ const CC_FS_ACTIONS = [
 	"mv",
 	"cp",
 	"touch",
-	"append",
 	"reveal",
 	"info",
 	"find"
@@ -314,15 +319,6 @@ function runCcFs(root, args) {
 			writeFileSync(absPath, "", "utf-8");
 			return `created empty file: ${args.path}`;
 		}
-		case "append": {
-			if (!args.path || args.content === void 0) throw new Error("append requires path + content");
-			const absPath = validateWritePath(root, args.path);
-			const parentDir = dirname(absPath);
-			if (!existsSync(parentDir)) mkdirSync(parentDir, { recursive: true });
-			const content = args.content;
-			appendFileSync(absPath, content, "utf-8");
-			return `appended ${Buffer.byteLength(content, "utf8")} bytes to ${args.path}`;
-		}
 		case "reveal": {
 			if (!args.path) throw new Error("reveal requires path");
 			const absPath = resolveInside(root, args.path);
@@ -416,7 +412,7 @@ function runCcFs(root, args) {
 				count: matches.length
 			};
 		}
-		default: throw new Error(`Unknown action: ${a}`);
+		default: throw new Error(`Unknown action: ${a}. Valid actions: ${CC_FS_ACTIONS.join("/")}` + (a === "append" ? "（`append` 已于 v1.101.0 退役 —— 改用 edit 或 write）" : ""));
 	}
 }
 //#endregion
@@ -435,7 +431,7 @@ function renderText$11(value) {
 }
 const ccFsTool = defineTool({
 	name: "container_fs",
-	description: "Container filesystem operations (the CCC's hull — file operations confined to the container root; path escape blocked automatically). 15 subcommands: root/resolve/exists/list/tree/relative/mkdir/rm/mv/cp/touch/append/reveal/info/find. reveal opens a path in the OS file manager (Linux xdg-open / macOS Finder / Windows Explorer). Complements read/write/edit (structural operations).",
+	description: "Container filesystem operations (the CCC's hull — file operations confined to the container root; path escape blocked automatically). 14 subcommands: root/resolve/exists/list/tree/relative/mkdir/rm/mv/cp/touch/reveal/info/find. reveal opens a path in the OS file manager (Linux xdg-open / macOS Finder / Windows Explorer). Complements read/write/edit (structural operations).",
 	parameters: {
 		action: {
 			type: "string",
@@ -445,7 +441,7 @@ const ccFsTool = defineTool({
 		},
 		path: {
 			type: "string",
-			description: "Primary path argument (single-path ops: resolve/exists/list/tree/relative/touch/append/info/rm)"
+			description: "Primary path argument (single-path ops: resolve/exists/list/tree/relative/touch/info/rm)"
 		},
 		paths: {
 			type: "array",
@@ -462,7 +458,7 @@ const ccFsTool = defineTool({
 		},
 		content: {
 			type: "string",
-			description: "append content"
+			description: "Deprecated/ignored — the only consumer was `append`, retired in v1.101.0"
 		},
 		pattern: {
 			type: "string",
@@ -12635,8 +12631,6 @@ function createContainerAdminTool(ctx) {
 }
 //#endregion
 //#region src/seams/tool-visibility.ts
-/** ACC 自己注册的工具名集合（退化档只发这些 —— 它们一定在册） */
-const REGISTERED_TOOLS_SET = new Set(REGISTERED_TOOLS);
 /** 收集器：把各来源的 deny 合并成一个判决（**纯函数、无副作用**） */
 function collectVisibilityDecision(sources) {
 	const deny = /* @__PURE__ */ new Set();
@@ -12668,12 +12662,13 @@ const applied = /* @__PURE__ */ new Map();
 *    （旧集合是新集合的子集时叠不叠都看不出来，但**不是子集时**会残留 —— 必须撤。）
 * ③ 🔴 **未注册的名字不许炸掉整次发射**：宿主契约"unknown names … fail"。
 *    合并后集合里只要有一个不在册的名字，整次 restrict 就失败 ⇒ 六个机制**全都不生效**。
-*    ⇒ 策略 = **直接发 → 全量被拒才退到「只发 ACC 自己注册的那些」一档**，退档时
-*    把被放弃的名字如实记账（进 `dropped`，由调用方决定要不要告警）。
+*    ⇒ 策略 = **直接发 → 被拒时从宿主的错误文案里解析出它点名的未知名字 → 只剔那几个、其余重发一次**。
+*    被剔掉的名字进 `dropped`（调用方决定要不要告警）。
 *    ⚠️ **不做 `tools.get` 预探活** —— 那个视图查不出 agent-plane 贡献的工具
 *    （`bash` / `schedule_*`），会把**在册的名字误判成未注册**（见下方发射段的实测记录）。
-*    ⚠️ 这比旧行为**更保守**：旧行为是"某条 restrict 失败 ⇒ 那一格静默不生效"，
-*    新行为是"全量失败 ⇒ 至少 ACC 那一格照常生效" —— **等价或更好**，且总有日志。
+*    🔴 **也不按"谁注册的"降级** —— `REGISTERED_TOOLS` 只含 ACC 自己的 14 个，
+*    用它当"在册面"会**整类丢掉宿主工具**（2026-10-24 真机缺陷，见发射段）。
+*    ⇒ 唯一合法的在册判据是**宿主自己的回答**：要么发一次成功，要么它说出哪些名字不认识。
 *
 * @returns `'unchanged'` ／ `'applied'` ／ `'failed'`（`failed` 时 `deny` 保持原样）
 */
@@ -12716,33 +12711,72 @@ function applyVisibilityDecision(agent, sessionId, decision) {
 			dropped
 		};
 	} catch (firstError) {
-		const accOnly = names.filter((n) => REGISTERED_TOOLS_SET.has(n));
-		if (accOnly.length === 0 || accOnly.length === names.length) return {
+		const message = errorText(firstError);
+		const unknown = parseUnknownToolNames(message);
+		if (unknown.length === 0) return {
+			status: "failed",
+			dropped,
+			error: message
+		};
+		const unknownSet = new Set(unknown);
+		const remaining = names.filter((n) => !unknownSet.has(n));
+		dropped.push(...names.filter((n) => unknownSet.has(n)));
+		if (remaining.length === 0) return {
 			status: "failed",
 			dropped,
-			error: firstError.message
+			error: message
 		};
-		const abandoned = names.filter((n) => !REGISTERED_TOOLS_SET.has(n));
 		try {
-			const dispose = tools.restrict({ deny: accOnly });
+			const dispose = tools.restrict({ deny: remaining });
 			applied.set(sessionId, {
-				signature,
-				deny: accOnly,
+				signature: decisionSignature({
+					...decision,
+					deny: remaining
+				}),
+				deny: remaining,
 				dispose
 			});
 			return {
 				status: "applied",
-				dropped: abandoned
+				dropped
 			};
 		} catch (secondError) {
 			return {
 				status: "failed",
 				dropped,
-				error: secondError.message
+				error: errorText(secondError)
 			};
 		}
 	}
 }
+/** 取异常的可读文案（非 Error 也能取到 message；都没有则 String()） */
+function errorText(e) {
+	if (e instanceof Error) return e.message;
+	if (typeof e === "object" && e !== null && "message" in e && typeof e.message === "string") return e.message;
+	return String(e);
+}
+/**
+* 从宿主的 `tools.restrict()` 错误文案里解析出**被点名的未知工具名**。
+*
+* 宿主逐字形态（`dsh-tools/lib/types/index.js` 的 `restrict()`）：
+* ```
+* tools.restrict() names unknown global tool(s) "a", "b"; known global tools: x, y, z
+* ```
+* 单数时是 `tool`，复数时是 `tool(s)`——两种都匹配。
+*
+* 🔴 **只取分号之前那一段**：分号后是 `known global tools:` 清单，**不能**误当成未知名字。
+* 🔴 解析不出来就返回 `[]`（调用方据此走"如实失败、不记账"），**绝不猜**。
+*/
+function parseUnknownToolNames(message) {
+	const head = message.split(";")[0] ?? "";
+	if (!/names unknown global tool/.test(head)) return [];
+	const out = [];
+	for (const m of head.matchAll(/"([^"]+)"/g)) {
+		const name = m[1];
+		if (name !== void 0 && name !== "") out.push(name);
+	}
+	return [...new Set(out)];
+}
 /** 会话销毁清理（防 per-会话 Map 无界增长；lifecycle 调用） */
 function forgetToolVisibility(sessionId) {
 	const existing = applied.get(sessionId);
@@ -12769,18 +12803,17 @@ const WRITE_TOOLS = /* @__PURE__ */ new Set([
 	"str_replace_editor",
 	"container_fs",
 	"bash",
-	"append",
 	"touch"
 ]);
-/** container_fs 的写类子命令（mkdir/rm/mv/cp/touch/append）；其余 9 子命令（root/resolve/exists/
-*  list/tree/relative/reveal/info/find）为只读——只读子命令不查黑名单（同 read 语义） */
+/** container_fs 的写类子命令（mkdir/rm/mv/cp/touch）；其余 9 子命令（root/resolve/exists/
+*  list/tree/relative/reveal/info/find）为只读——只读子命令不查黑名单（同 read 语义）
+*  🔴 `append` 已于 v1.101.0 退役（owner 2026-10-26），故不在此集合。 */
 const CC_FS_WRITE_ACTIONS = /* @__PURE__ */ new Set([
 	"mkdir",
 	"rm",
 	"mv",
 	"cp",
-	"touch",
-	"append"
+	"touch"
 ]);
 /**
 * 凭据文件硬名单（数据面守卫，v1.26.3，S142 用户：localstore.json 需要在 read 工具的黑名单里）：

package/lib/seams/tool-visibility.d.ts

@@ -51,12 +51,13 @@ export declare function getToolVisibilityDiagnostics(): {
  *    （旧集合是新集合的子集时叠不叠都看不出来，但**不是子集时**会残留 —— 必须撤。）
  * ③ 🔴 **未注册的名字不许炸掉整次发射**：宿主契约"unknown names … fail"。
  *    合并后集合里只要有一个不在册的名字，整次 restrict 就失败 ⇒ 六个机制**全都不生效**。
- *    ⇒ 策略 = **直接发 → 全量被拒才退到「只发 ACC 自己注册的那些」一档**，退档时
- *    把被放弃的名字如实记账（进 `dropped`，由调用方决定要不要告警）。
+ *    ⇒ 策略 = **直接发 → 被拒时从宿主的错误文案里解析出它点名的未知名字 → 只剔那几个、其余重发一次**。
+ *    被剔掉的名字进 `dropped`（调用方决定要不要告警）。
  *    ⚠️ **不做 `tools.get` 预探活** —— 那个视图查不出 agent-plane 贡献的工具
  *    （`bash` / `schedule_*`），会把**在册的名字误判成未注册**（见下方发射段的实测记录）。
- *    ⚠️ 这比旧行为**更保守**：旧行为是"某条 restrict 失败 ⇒ 那一格静默不生效"，
- *    新行为是"全量失败 ⇒ 至少 ACC 那一格照常生效" —— **等价或更好**，且总有日志。
+ *    🔴 **也不按"谁注册的"降级** —— `REGISTERED_TOOLS` 只含 ACC 自己的 14 个，
+ *    用它当"在册面"会**整类丢掉宿主工具**（2026-10-24 真机缺陷，见发射段）。
+ *    ⇒ 唯一合法的在册判据是**宿主自己的回答**：要么发一次成功，要么它说出哪些名字不认识。
  *
  * @returns `'unchanged'` ／ `'applied'` ／ `'failed'`（`failed` 时 `deny` 保持原样）
  */
@@ -73,5 +74,18 @@ export declare function applyVisibilityDecision(agent: {
     dropped: string[];
     error?: string;
 };
+/**
+ * 从宿主的 `tools.restrict()` 错误文案里解析出**被点名的未知工具名**。
+ *
+ * 宿主逐字形态（`dsh-tools/lib/types/index.js` 的 `restrict()`）：
+ * ```
+ * tools.restrict() names unknown global tool(s) "a", "b"; known global tools: x, y, z
+ * ```
+ * 单数时是 `tool`，复数时是 `tool(s)`——两种都匹配。
+ *
+ * 🔴 **只取分号之前那一段**：分号后是 `known global tools:` 清单，**不能**误当成未知名字。
+ * 🔴 解析不出来就返回 `[]`（调用方据此走"如实失败、不记账"），**绝不猜**。
+ */
+export declare function parseUnknownToolNames(message: string): string[];
 /** 会话销毁清理（防 per-会话 Map 无界增长；lifecycle 调用） */
 export declare function forgetToolVisibility(sessionId: string): void;

package/lib/{session-DFNtReQY.js → session-Beybbybh.js}

@@ -1500,7 +1500,7 @@ function toolsBlock() {
 		"=== Serenity Tools ===",
 		"The ACC (this plugin) provides the following built-in tools:",
 		"",
-		"  container_fs — container filesystem operations (15 subcommands: root/resolve/exists/list/tree/relative/mkdir/rm/mv/cp/touch/append/reveal/info/find)",
+		"  container_fs — container filesystem operations (14 subcommands: root/resolve/exists/list/tree/relative/mkdir/rm/mv/cp/touch/reveal/info/find)",
 		"  cognitive_trajectory — one cognitive trajectory: its persistent body (SESSION.md) + its timeline. Lifecycle: list (inventory + stats) / show / create / use (activate; inline integrity check — silent when fine) / rebuild (clear-and-rebuild this conversation in place, Ship of Theseus); delivery: send-now (deliver one message RIGHT NOW; live target injected immediately, non-live cold-resumed like a direct wake — returns a synchronous receipt) / send-later (one future instant + one message to any cognitive trajectory; fire-and-forget — no receipt, no recall) / cro-guide (the CRO programming guide: how to give THIS cognitive trajectory its own program that decides when it should be woken)",
 		"  dashboard    — always-on container instruments: health (CCC three-principle check + registry integrity) / time (now) / wait (N seconds)",
 		"  container_git— git operations (status/commit/push/log/pull/diff)",

package/lib/tools/fs/service.d.ts

@@ -6,11 +6,17 @@
  *   - cp：目录需 recursive；dst 已存在报错；自动建父目录
  *   - mv：dst 已存在报错；自动建父目录
  *   - list/tree/exists/info/find：输出结构与 osp 一致（JSON 元数据 / 嵌套树 / glob+fuzzy 搜索）
- *   - touch：存在更新 mtime、不存在创建（自动建父目录）；append：自动建父目录 + 返回字节数
+ *   - touch：存在更新 mtime、不存在创建（自动建父目录）
+ *   - 🔴 **`append` 已于 v1.101.0 退役**（owner 2026-10-26 令「砍掉 container_fs 的 append」）：
+ *     它存在的唯一理由曾是"不读全文的追加"，但实测该用途几乎没人走（SESSION.md 追加
+ *     7,291 次里 append 只有 74 次，占 1.0%）⇒ 留着一个**绕过 fs-observation 锁**的
+ *     写通道，收益不足以抵它带来的规则面（写类动作清单、写白名单、两处工具描述都要维护它）。
+ *     ⚠️ 传 `action:'append'` 现在得到 `PARAMETER_INVALID_VALUE` 并列出合法动作 —— **响亮失败**，
+ *     不是静默忽略。
  * 保留 dsp 增强：win32 reveal 用 spawn+unref（explorer GUI 进程退出码不可靠，fire-and-forget）。
  */
 import type { JsonValue } from '../../kernel/json.js';
-type CcFsAction = 'root' | 'resolve' | 'exists' | 'list' | 'tree' | 'relative' | 'mkdir' | 'rm' | 'mv' | 'cp' | 'touch' | 'append' | 'reveal' | 'info' | 'find';
+type CcFsAction = 'root' | 'resolve' | 'exists' | 'list' | 'tree' | 'relative' | 'mkdir' | 'rm' | 'mv' | 'cp' | 'touch' | 'reveal' | 'info' | 'find';
 export declare const CC_FS_ACTIONS: readonly CcFsAction[];
 export interface CcFsArgs {
     action: CcFsAction;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shgroup/dsh-serenity-hooks",
-  "version": "1.99.0",
+  "version": "1.101.0",
   "description": "宁静号 ACC harness（Native Cordis 插件）——给 DeepSeek Harness 装一个「AI 工作区」：14 个工具（container_fs/cognitive_trajectory/dashboard/container_git/msm/praxis/ontology/serenity-skill-creator/cheap-worker/localstore/container_admin；另三个 im-bridge/acc-diag/diagram 按配置条件出现）+ 机械约束（安全模式/工作区围墙/密钥守卫/对外输出守卫）+ 认知轨迹日志与原地重建 + 网页登录入口/IM 桥/认知轨迹唤醒注册表。轨迹声明 = 轨迹目录下的 trajectory.json（约束面 + 旧标识 uid + CRO 机器绑定 cro.host；旧名 trajectory-constraint.json / skiff.json 仍在读取族里）；轨迹提示词 = 轨迹目录下的 PROMPT.md（一条轨迹「是谁、按什么章程工作」，所有轨迹通用，追加在容器层与质量层之后，不替换它们）。适配 DSH 0.1.7-rc.1 / 0.2.0-rc.1 / 0.2.1-rc.1（三档）。",
   "license": "MIT",
   "repository": {