@shgroup/dsh-serenity-hooks 1.25.11 → 1.26.0

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-serenity-hooks",
-  "version": "1.25.11",
+  "version": "1.26.0",
   "main": "lib/index.js",
   "description": "宁静号 ACC harness（Native Cordis 插件）：真实 DSH 工具 cc_fs/session/acc_msm/eap/neat/cce/handyman/session_rebuild/skiff_admin + 拦截缝机械约束（safe-mode/路径守卫）+ 高级设定面板（双端口网关/账号管理）+ Skiff 认知子集角色（实验性）。适配 DSH 公开版（0.1.0-rc，deepseek-ai/deepseek-harness）。",
   "engines": {

package/lib/client.js

@@ -3895,6 +3895,9 @@ Instruction-following style:
 			const setSkiffPort = (v) => {
 				scope.set("skiffDebugPort", Math.min(65535, Math.max(1024, Math.round(v))));
 			};
+			const setAcpPort = (v) => {
+				scope.set("acpHttpPort", Math.min(65535, Math.max(1024, Math.round(v))));
+			};
 			if (!ready) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 				className: "ss-section",
 				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
@@ -3908,6 +3911,8 @@ Instruction-following style:
 			const namingOn = value?.namingEnabled ?? true;
 			const skiffOn = value?.skiffEnabled ?? false;
 			const skiffPort = value?.skiffDebugPort ?? 3099;
+			const acpOn = value?.acpEnabled ?? false;
+			const acpPort = value?.acpHttpPort ?? 3100;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "ss-section",
 				children: [
@@ -3996,6 +4001,32 @@ Instruction-following style:
 							})
 						}) })]
 					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Group, {
+						title: "ACP",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(RowCard, {
+							title: "ACP JSON-RPC 端点",
+							desc: "程序化调用 Skiff 角色（指定 CCC+角色+会话；实验性，仅监听 127.0.0.1）",
+							control: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Toggle, {
+								checked: acpOn,
+								onChange: (on) => toggle("acpEnabled", on)
+							})
+						}) }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(RowCard, {
+							title: "HTTP 端口",
+							desc: "ACP JSON-RPC 端口（1024 ~ 65535，默认 3100）",
+							control: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: "ss-threshold",
+								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									className: "ss-portInput",
+									type: "number",
+									min: 1024,
+									max: 65535,
+									value: acpPort,
+									disabled: !acpOn,
+									onChange: (e) => setAcpPort(Number(e.target.value))
+								})
+							})
+						}) })]
+					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: "ss-group",
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {

package/lib/index.js

@@ -736,6 +736,13 @@ function registerSkiffSession$1(sessionId, role, ccc) {
 		ccc
 	});
 }
+function unregisterSkiffSession$1(sessionId) {
+	skiffSessions.delete(sessionId);
+}
+/** 测试/调试：注册表快照（sessionId → {role, ccc}） */
+function skiffSessionSnapshot$1() {
+	return new Map(skiffSessions);
+}
 //#endregion
 //#region src/seams/guards.ts
 /**
@@ -2394,6 +2401,19 @@ function registerSkiffSession(sessionId, role, ccc, agent) {
 	skiffAgents.set(sessionId, agent);
 	registerSkiffSession$1(sessionId, role, ccc);
 }
+function unregisterSkiffSession(sessionId) {
+	skiffAgents.delete(sessionId);
+	unregisterSkiffSession$1(sessionId);
+}
+/** 测试/调试：注册表快照（sessionId → {role} 兼容展示） */
+function skiffSessionSnapshot() {
+	const out = /* @__PURE__ */ new Map();
+	for (const [id, b] of skiffSessionSnapshot$1()) out.set(id, {
+		role: b.role,
+		ccc: b.ccc
+	});
+	return out;
+}
 /** Skiff agent 挂载的 DSH preset（v1.25.3 修复：read/grep/glob 等平台工具由 preset 决定工具面；
 *  handyman 经 composeFrom 继承父、skiff 无父上下文——直接挂 DSH 默认 standard preset；
 *  guard 角色白名单再按角色过滤可见/可用面——白名单外工具仍 deny） */
@@ -5237,7 +5257,9 @@ const simpleSettingsSchema = z.object({
 	rebuildThreshold: z.number().min(.01).max(1).default(.9),
 	namingEnabled: z.boolean().default(true),
 	skiffEnabled: z.boolean().default(false),
-	skiffDebugPort: z.number().min(1024).max(65535).default(3099)
+	skiffDebugPort: z.number().min(1024).max(65535).default(3099),
+	acpEnabled: z.boolean().default(false),
+	acpHttpPort: z.number().min(1024).max(65535).default(3100)
 });
 /** 从插件 Config 提取 entry 默认（settings base 层） */
 function entryDefaults(config) {
@@ -5247,7 +5269,9 @@ function entryDefaults(config) {
 		rebuildThreshold: config.rebuild?.thresholdRatio ?? .9,
 		namingEnabled: config.naming?.enabled ?? true,
 		skiffEnabled: config.skiff?.enabled ?? false,
-		skiffDebugPort: config.skiff?.debugPort ?? 3099
+		skiffDebugPort: config.skiff?.debugPort ?? 3099,
+		acpEnabled: config.acp?.enabled ?? false,
+		acpHttpPort: config.acp?.httpPort ?? 3100
 	};
 }
 /** 运行时源（installSettingsSection 注入：settings scope 或 entry fallback） */
@@ -5260,7 +5284,9 @@ function defaultSimpleSettings() {
 		rebuildThreshold: .9,
 		namingEnabled: true,
 		skiffEnabled: false,
-		skiffDebugPort: 3099
+		skiffDebugPort: 3099,
+		acpEnabled: false,
+		acpHttpPort: 3100
 	};
 }
 /**
@@ -6898,7 +6924,11 @@ dsp 只提供机制（双白名单强制 + 基础提示词 + 调试问答页）
 
 ── 运行 ──
   调试：设置面板「Serenity」页 Skiff 区块开启 → http://127.0.0.1:<debugPort> 问答页实测
-  （v1.25.0 唯一客户端面；ACP stdio 协议 F4c 后续，与调试页共用同一会话核心）
+  ACP 程序化面（v1.26.0）：设置面板「ACP」区块开启 → HTTP JSON-RPC 端点（默认 3100）——
+    POST /  {jsonrpc, id, method, params}
+    session/new {ccc, role, sessionId?}  → 创建/延续会话（sessionId 可选=进程内追问）
+    session/prompt {sessionId, question} → {answer, trajectory}
+    session/cancel / session/close / session/list / request_permission（恒 allow）
   启停 = 人工（设置面板开关，不随插件加载自动启动）；未开启零资源占用
   生效机制：角色配置**实时读取**（改 .opencode/serenity.json → 刷新调试页即生效）；
   改配置后用 skiff_admin apply 做显式校验 + 应用确认（绑定 CCC + 角色清单）
@@ -8298,7 +8328,7 @@ function saveFileToTmp(root, fileName, data) {
 	writeFileSync(join(dir, filename), bytes);
 	return `${FILE_UPLOAD_DIR}/${filename}`;
 }
-function readBody$2(req, maxBytes) {
+function readBody$3(req, maxBytes) {
 	return new Promise((resolve, reject) => {
 		let data = "";
 		req.on("data", (chunk) => {
@@ -8312,7 +8342,7 @@ function readBody$2(req, maxBytes) {
 		req.on("error", reject);
 	});
 }
-function sendJson$1(res, code, body) {
+function sendJson$2(res, code, body) {
 	const payload = JSON.stringify(body);
 	res.writeHead(code, {
 		"content-type": "application/json; charset=utf-8",
@@ -8350,7 +8380,7 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "GET") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				const url = new URL(req.url ?? "/", "http://127.0.0.1");
@@ -8359,12 +8389,12 @@ function registerStatusApi(ctx, opts = {}) {
 					workspace: url.searchParams.get("workspace") ?? void 0
 				}));
 				if (!root) {
-					sendJson$1(res, 200, { handymen: [] });
+					sendJson$2(res, 200, { handymen: [] });
 					return;
 				}
-				sendJson$1(res, 200, { handymen: listActiveHandymen(root) });
+				sendJson$2(res, 200, { handymen: listActiveHandymen(root) });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -8374,14 +8404,14 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "POST") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "图片落盘仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "图片落盘仅限 WebUI（client 专用）" });
 					return;
 				}
-				const raw = await readBody$2(req, 20971520);
+				const raw = await readBody$3(req, 20971520);
 				const body = JSON.parse(raw);
 				const workspace = resolveWorkspace(ctx, {
 					sessionId: body.sessionId,
@@ -8389,12 +8419,12 @@ function registerStatusApi(ctx, opts = {}) {
 				});
 				const root = findSerenityRoot(workspace);
 				if (!root) {
-					sendJson$1(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+					sendJson$2(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 					return;
 				}
-				sendJson$1(res, 200, { path: saveImageToTmp(root, body.mediaType ?? "", body.data ?? "") });
+				sendJson$2(res, 200, { path: saveImageToTmp(root, body.mediaType ?? "", body.data ?? "") });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -8404,14 +8434,14 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "POST") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "文件落盘仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "文件落盘仅限 WebUI（client 专用）" });
 					return;
 				}
-				const raw = await readBody$2(req, 20971520);
+				const raw = await readBody$3(req, 20971520);
 				const body = JSON.parse(raw);
 				const workspace = resolveWorkspace(ctx, {
 					sessionId: body.sessionId,
@@ -8419,12 +8449,12 @@ function registerStatusApi(ctx, opts = {}) {
 				});
 				const root = findSerenityRoot(workspace);
 				if (!root) {
-					sendJson$1(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+					sendJson$2(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 					return;
 				}
-				sendJson$1(res, 200, { path: saveFileToTmp(root, body.name ?? "", body.data ?? "") });
+				sendJson$2(res, 200, { path: saveFileToTmp(root, body.name ?? "", body.data ?? "") });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -8440,7 +8470,7 @@ function registerStatusApi(ctx, opts = {}) {
 						workspace: url.searchParams.get("workspace") ?? void 0
 					}), configPaths);
 					const runtime = ctx.get("codeRuntime");
-					sendJson$1(res, 200, {
+					sendJson$2(res, 200, {
 						...status,
 						...runtime === void 0 ? { codeRuntime: null } : { codeRuntime: {
 							language: runtime.language,
@@ -8451,10 +8481,10 @@ function registerStatusApi(ctx, opts = {}) {
 				}
 				if (req.method === "POST") {
 					if (req.headers["x-serenity-ui"] !== "1") {
-						sendJson$1(res, 403, { error: "safe-mode 切换仅限 WebUI（agent 不可自行开关）" });
+						sendJson$2(res, 403, { error: "safe-mode 切换仅限 WebUI（agent 不可自行开关）" });
 						return;
 					}
-					const raw = await readBody$2(req, 65536);
+					const raw = await readBody$3(req, 65536);
 					const body = JSON.parse(raw);
 					const workspace = resolveWorkspace(ctx, {
 						sessionId: body.sessionId,
@@ -8462,19 +8492,19 @@ function registerStatusApi(ctx, opts = {}) {
 					});
 					const root = findSerenityRoot(workspace);
 					if (!root) {
-						sendJson$1(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+						sendJson$2(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 						return;
 					}
 					const result = setSafeMode(root, body.on === true);
-					sendJson$1(res, 200, {
+					sendJson$2(res, 200, {
 						...getStatus(workspace, configPaths),
 						...result
 					});
 					return;
 				}
-				sendJson$1(res, 405, { error: "method not allowed" });
+				sendJson$2(res, 405, { error: "method not allowed" });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -8484,25 +8514,25 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "高级设定仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "高级设定仅限 WebUI（client 专用）" });
 					return;
 				}
 				if (req.method === "GET") {
-					sendJson$1(res, 200, { config: toWire(readAdvancedSettings()) });
+					sendJson$2(res, 200, { config: toWire(readAdvancedSettings()) });
 					return;
 				}
 				if (req.method === "PUT") {
-					const raw = await readBody$2(req, 131072);
+					const raw = await readBody$3(req, 131072);
 					const saved = applyWirePatch(JSON.parse(raw).config ?? {});
 					try {
 						ctx.emit?.("serenity/config-updated");
 					} catch {}
-					sendJson$1(res, 200, { config: toWire(saved) });
+					sendJson$2(res, 200, { config: toWire(saved) });
 					return;
 				}
-				sendJson$1(res, 405, { error: "method not allowed" });
+				sendJson$2(res, 405, { error: "method not allowed" });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -8958,7 +8988,7 @@ function buildProxyHeaders(reqHeaders, mainPort, bodyOverride) {
 //#endregion
 //#region src/gateway.ts
 /** 读取请求体（≤ maxBytes；超限 reject） */
-function readBody$1(req, maxBytes) {
+function readBody$2(req, maxBytes) {
 	return new Promise((resolve, reject) => {
 		let data = "";
 		req.on("data", (chunk) => {
@@ -9091,7 +9121,7 @@ function startGateway(config, getAccounts) {
 		if (session !== void 0) {
 			if (req.method === "POST" && url.pathname === "/api/workspace.create") {
 				if (!allowWorkspaceCreate) {
-					readBody$1(req, 131072).then((body) => {
+					readBody$2(req, 131072).then((body) => {
 						let rpcId = "unknown";
 						try {
 							const parsed = JSON.parse(body);
@@ -9127,7 +9157,7 @@ function startGateway(config, getAccounts) {
 					});
 					return;
 				}
-				readBody$1(req, 131072).then((body) => {
+				readBody$2(req, 131072).then((body) => {
 					let rpcId = "unknown";
 					let path;
 					try {
@@ -11079,8 +11109,8 @@ x.lex;
 * 实验性质：未开启时零资源占用（无监听、无 agent 创建）。
 */
 /** 运行中的调试服务（单实例；进程级） */
-let active = null;
-function readBody(req) {
+let active$1 = null;
+function readBody$1(req) {
 	return new Promise((resolve, reject) => {
 		const chunks = [];
 		req.on("data", (c) => chunks.push(c));
@@ -11088,7 +11118,7 @@ function readBody(req) {
 		req.on("error", reject);
 	});
 }
-function sendJson(res, status, payload) {
+function sendJson$1(res, status, payload) {
 	const body = JSON.stringify(payload);
 	res.writeHead(status, {
 		"Content-Type": "application/json; charset=utf-8",
@@ -11356,28 +11386,28 @@ function renderSkiffMarkdown(raw) {
 * @param webPort 主 WebUI 端口（WebUI 链接）
 */
 async function startSkiffDebugServer(ctx, root, port, webPort) {
-	if (active) return;
+	if (active$1) return;
 	const server = createServer((req, res) => {
-		handle(ctx, root, webPort, req, res);
+		handle$1(ctx, root, webPort, req, res);
 	});
 	await new Promise((resolve, reject) => {
 		server.once("error", reject);
 		server.listen(port, "127.0.0.1", () => resolve());
 	});
-	active = {
+	active$1 = {
 		server,
 		port
 	};
 	console.log(`[serenity-hooks] ✓ Skiff 调试问答页: http://127.0.0.1:${port}（默认 CCC: ${root}，WebUI: ${webPort}）`);
 }
 function stopSkiffDebugServer() {
-	if (!active) return;
+	if (!active$1) return;
 	try {
-		active.server.close();
+		active$1.server.close();
 	} catch {}
-	active = null;
+	active$1 = null;
 }
-async function handle(ctx, defaultRoot, webPort, req, res) {
+async function handle$1(ctx, defaultRoot, webPort, req, res) {
 	try {
 		const url = (req.url ?? "/").split("?")[0] ?? "/";
 		if (req.method === "GET" && url === "/") {
@@ -11387,11 +11417,11 @@ async function handle(ctx, defaultRoot, webPort, req, res) {
 		if (req.method === "POST" && url === "/ask") {
 			let body;
 			try {
-				const parsed = JSON.parse(await readBody(req));
+				const parsed = JSON.parse(await readBody$1(req));
 				if (parsed === null || typeof parsed !== "object") throw new Error("not an object");
 				body = parsed;
 			} catch {
-				sendJson(res, 400, { error: "invalid JSON body" });
+				sendJson$1(res, 400, { error: "invalid JSON body" });
 				return;
 			}
 			const ccc = typeof body.ccc === "string" && body.ccc !== "" ? body.ccc : defaultRoot;
@@ -11400,11 +11430,11 @@ async function handle(ctx, defaultRoot, webPort, req, res) {
 			const sessionId = typeof body.sessionId === "string" && body.sessionId !== "" ? body.sessionId : void 0;
 			const role = readSkiffRoles(ccc).get(roleName);
 			if (!roleName || !role) {
-				sendJson(res, 400, { error: `unknown role: ${roleName} (ccc: ${ccc})` });
+				sendJson$1(res, 400, { error: `unknown role: ${roleName} (ccc: ${ccc})` });
 				return;
 			}
 			if (!question.trim()) {
-				sendJson(res, 400, { error: "empty question" });
+				sendJson$1(res, 400, { error: "empty question" });
 				return;
 			}
 			let agent;
@@ -11413,11 +11443,11 @@ async function handle(ctx, defaultRoot, webPort, req, res) {
 				const info = skiffSessionInfo(sessionId);
 				const live = getSkiffAgent(sessionId);
 				if (!info || !live) {
-					sendJson(res, 400, { error: "session is not recoverable (process restarted or session unknown) — start a new conversation" });
+					sendJson$1(res, 400, { error: "session is not recoverable (process restarted or session unknown) — start a new conversation" });
 					return;
 				}
 				if (info.role !== roleName || info.ccc !== ccc) {
-					sendJson(res, 400, { error: `session "${sessionId}" belongs to role "${info.role}" in another CCC — start a new conversation` });
+					sendJson$1(res, 400, { error: `session "${sessionId}" belongs to role "${info.role}" in another CCC — start a new conversation` });
 					return;
 				}
 				agent = live;
@@ -11426,7 +11456,7 @@ async function handle(ctx, defaultRoot, webPort, req, res) {
 			const hc = readHandymanConfig(ccc);
 			if (!agent) agent = (await createSkiffAgent(ctx, ccc, roleName, role, hc?.defaultModel)).agent;
 			const result = await askSkiff(ctx, agent, question, 0);
-			sendJson(res, 200, {
+			sendJson$1(res, 200, {
 				answer: result.answer,
 				answer_html: renderSkiffMarkdown(result.answer),
 				sessionId: result.sessionId,
@@ -11435,6 +11465,273 @@ async function handle(ctx, defaultRoot, webPort, req, res) {
 			});
 			return;
 		}
+		sendJson$1(res, 404, { error: "not found" });
+	} catch (err) {
+		sendJson$1(res, 500, { error: err?.message ?? String(err) });
+	}
+}
+//#endregion
+//#region src/acp-core.ts
+/** JSON-RPC 错误码（对齐标准） */
+const RPC_ERROR = {
+	PARSE: -32700,
+	INVALID_REQUEST: -32600,
+	METHOD_NOT_FOUND: -32601,
+	INVALID_PARAMS: -32602,
+	INTERNAL: -32603
+};
+/**
+* ACP 会话管理器：持有 skiff agent 会话（与 skiff-core 注册表同源——
+* 创建走 createSkiffAgent（自动注册），关闭走 unregisterSkiffSession）。
+* 传输无关：HTTP 端点/企业微信桥/未来 stdio 都调 handle(method, params)。
+*/
+var AcpServer = class {
+	ctx;
+	constructor(ctx) {
+		this.ctx = ctx;
+	}
+	/** 实现级方法调度（返回 result 或抛 JSON-RPC 语义错误） */
+	async handle(method, params) {
+		switch (method) {
+			case "initialize": return this.initialize();
+			case "authenticate": return {};
+			case "session/new": return this.newSession(params);
+			case "session/list": return this.listSessions();
+			case "session/prompt": return this.prompt(params);
+			case "session/cancel": return this.cancel(params);
+			case "session/close": return this.closeSession(params);
+			case "session/request_permission": return { allow: true };
+			default: throw new RpcMethodError(`method not found: ${method}`);
+		}
+	}
+	initialize() {
+		return {
+			protocolVersion: 1,
+			capabilities: {
+				sessionId: true,
+				ccc: true,
+				role: true
+			},
+			serverInfo: {
+				name: "dsh-serenity-hooks-acp",
+				version: "1.26.0"
+			}
+		};
+	}
+	/**
+	* session/new：{ ccc, role, sessionId? } → 创建或延续 skiff 会话。
+	* 无 sessionId → createSkiffAgent（新会话，continued:false）；
+	* 有 → 进程内延续（getSkiffAgent 命中 + role/ccc 绑定校验；未命中 → 错误）。
+	*/
+	async newSession(params) {
+		const ccc = typeof params?.ccc === "string" && params.ccc !== "" ? params.ccc : void 0;
+		const roleName = typeof params?.role === "string" ? params.role : void 0;
+		const sessionId = typeof params?.sessionId === "string" && params.sessionId !== "" ? params.sessionId : void 0;
+		if (!ccc) throw new RpcInvalidParams("session/new requires ccc (CCC root path)");
+		if (!roleName) throw new RpcInvalidParams("session/new requires role");
+		const role = readSkiffRoles(ccc).get(roleName);
+		if (!role) throw new RpcInvalidParams(`unknown role: ${roleName} (ccc: ${ccc})`);
+		if (sessionId) {
+			const info = skiffSessionInfo(sessionId);
+			const live = getSkiffAgent(sessionId);
+			if (!info || !live) throw new RpcInvalidParams("session is not recoverable (process restarted or session unknown) — start a new conversation");
+			if (info.role !== roleName || info.ccc !== ccc) throw new RpcInvalidParams(`session "${sessionId}" belongs to role "${info.role}" in another CCC`);
+			return {
+				sessionId,
+				role: roleName,
+				ccc,
+				continued: true
+			};
+		}
+		const hc = readHandymanConfig(ccc);
+		return {
+			sessionId: (await createSkiffAgent(this.ctx, ccc, roleName, role, hc?.defaultModel)).sessionId,
+			role: roleName,
+			ccc,
+			continued: false
+		};
+	}
+	listSessions() {
+		const sessions = [];
+		for (const [id, b] of skiffSessionSnapshot()) sessions.push({
+			sessionId: id,
+			role: b.role,
+			ccc: b.ccc
+		});
+		return { sessions };
+	}
+	/** session/prompt：{ sessionId, question } → 答案 + 全量轨迹 */
+	async prompt(params) {
+		const sessionId = typeof params?.sessionId === "string" ? params.sessionId : void 0;
+		const question = typeof params?.question === "string" ? params.question : void 0;
+		if (!sessionId) throw new RpcInvalidParams("session/prompt requires sessionId");
+		if (!question?.trim()) throw new RpcInvalidParams("session/prompt requires question");
+		const agent = getSkiffAgent(sessionId);
+		if (!agent) throw new RpcInvalidParams(`unknown session: ${sessionId} (not recoverable — process restarted?)`);
+		const result = await askSkiff(this.ctx, agent, question, 0);
+		return {
+			answer: result.answer,
+			sessionId: result.sessionId,
+			trajectory: result.trajectory
+		};
+	}
+	/** session/cancel：{ sessionId } → 中断当前 prompt（DSH interrupt） */
+	cancel(params) {
+		const sessionId = typeof params?.sessionId === "string" ? params.sessionId : void 0;
+		if (!sessionId) return { cancelled: false };
+		const agent = getSkiffAgent(sessionId);
+		if (!agent) return { cancelled: false };
+		try {
+			agent.interrupt?.();
+		} catch {}
+		return { cancelled: true };
+	}
+	/** session/close：{ sessionId } → 释放 agent + 注册表清理（进程内） */
+	closeSession(params) {
+		const sessionId = typeof params?.sessionId === "string" ? params.sessionId : void 0;
+		if (!sessionId) return { closed: false };
+		if (!getSkiffAgent(sessionId)) return { closed: false };
+		unregisterSkiffSession(sessionId);
+		return { closed: true };
+	}
+};
+/** 方法不存在错误（JSON-RPC -32601） */
+var RpcMethodError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "RpcMethodError";
+	}
+};
+/** 参数错误（JSON-RPC -32602） */
+var RpcInvalidParams = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "RpcInvalidParams";
+	}
+};
+/**
+* JSON-RPC 2.0 批处理（单帧）：解析请求/通知 → 调 AcpServer.handle → 响应。
+* 传输无关：acp-http 端点 / 未来 stdio 共用。
+* @returns 响应帧数组（请求有响应；通知无；解析失败 → 单错误响应）
+*/
+async function dispatchRpc(server, frame) {
+	if (frame === null || typeof frame !== "object") return [rpcError(null, RPC_ERROR.INVALID_REQUEST, "invalid request")];
+	const req = frame;
+	if (req.jsonrpc !== "2.0" || typeof req.method !== "string") return [rpcError(req.id ?? null, RPC_ERROR.INVALID_REQUEST, "invalid request")];
+	if (req.id === void 0) {
+		try {
+			await server.handle(req.method, req.params);
+		} catch {}
+		return [];
+	}
+	try {
+		const result = await server.handle(req.method, req.params);
+		return [{
+			jsonrpc: "2.0",
+			id: req.id,
+			result
+		}];
+	} catch (error) {
+		return [rpcError(req.id, rpcCodeOf(error), error instanceof Error ? error.message : String(error))];
+	}
+}
+function rpcCodeOf(error) {
+	if (error instanceof RpcMethodError) return RPC_ERROR.METHOD_NOT_FOUND;
+	if (error instanceof RpcInvalidParams) return RPC_ERROR.INVALID_PARAMS;
+	return RPC_ERROR.INTERNAL;
+}
+function rpcError(id, code, message) {
+	return {
+		jsonrpc: "2.0",
+		id,
+		error: {
+			code,
+			message
+		}
+	};
+}
+//#endregion
+//#region src/acp-http.ts
+/**
+* acp-http.ts — ACP HTTP JSON-RPC 端点（F4c，v1.26.0 实验性）
+*
+* node:http 服务（默认关，仅监听 127.0.0.1；启停 = 人工——设置面板「Serenity」
+* 页 ACP 区块开关，不随插件加载自动启动；仿 skiff 调试服务模式）。
+*
+* - POST / → JSON-RPC 2.0 单帧/批处理（body 为 JSON）→ JSON-RPC 响应数组
+*
+* 与 skiff 调试页（人工测试面）共享同一会话核心（acp-core → skiff-core）；
+* 企业微信桥（F4c-2）同进程直调 acp-core 处理器函数，不经本端点。
+* stdio 形态（独立进程部署）后续复用同一 acp-core（官方 NDJSON 帧格式）。
+*
+* 实验性质：未开启时零资源占用（无监听、无 agent 创建）。
+*/
+/** 运行中的 ACP HTTP 服务（单实例；进程级） */
+let active = null;
+function readBody(req) {
+	return new Promise((resolve, reject) => {
+		const chunks = [];
+		req.on("data", (c) => chunks.push(c));
+		req.on("end", () => resolve(Buffer.concat(chunks).toString("utf-8")));
+		req.on("error", reject);
+	});
+}
+function sendJson(res, status, payload) {
+	const body = JSON.stringify(payload);
+	res.writeHead(status, {
+		"Content-Type": "application/json; charset=utf-8",
+		"Cache-Control": "no-store"
+	});
+	res.end(body);
+}
+/**
+* 启动 ACP HTTP JSON-RPC 端点（单实例；重复启动幂等返回既有实例）。
+* @param ctx 插件上下文（AcpServer 内部经 skiff-core 创建 agent）
+* @param port 监听端口（仅 127.0.0.1）
+*/
+async function startAcpHttpServer(ctx, port) {
+	if (active) return;
+	const server = createServer((req, res) => {
+		handle(ctx, req, res);
+	});
+	await new Promise((resolve, reject) => {
+		server.once("error", reject);
+		server.listen(port, "127.0.0.1", () => resolve());
+	});
+	active = {
+		server,
+		port
+	};
+	console.log(`[serenity-hooks] ✓ ACP HTTP JSON-RPC: http://127.0.0.1:${port}（session/new 支持 {ccc, role, sessionId?}）`);
+}
+function stopAcpHttpServer() {
+	if (!active) return;
+	try {
+		active.server.close();
+	} catch {}
+	active = null;
+}
+async function handle(ctx, req, res) {
+	try {
+		const url = (req.url ?? "/").split("?")[0] ?? "/";
+		if (req.method === "POST" && url === "/") {
+			let body;
+			try {
+				body = JSON.parse(await readBody(req));
+			} catch {
+				sendJson(res, 400, [{
+					jsonrpc: "2.0",
+					id: null,
+					error: {
+						code: -32700,
+						message: "parse error"
+					}
+				}]);
+				return;
+			}
+			sendJson(res, 200, await dispatchRpc(new AcpServer(ctx), body));
+			return;
+		}
 		sendJson(res, 404, { error: "not found" });
 	} catch (err) {
 		sendJson(res, 500, { error: err?.message ?? String(err) });
@@ -11476,6 +11773,10 @@ const Config = z.object({
 	skiff: z.object({
 		enabled: z.boolean().default(false),
 		debugPort: z.number().min(1024).max(65535).default(3099)
+	}),
+	acp: z.object({
+		enabled: z.boolean().default(false),
+		httpPort: z.number().min(1024).max(65535).default(3100)
 	})
 });
 function apply(ctx, config) {
@@ -11515,6 +11816,7 @@ function apply(ctx, config) {
 	if (config.opencodeSkills) registerOpencodeSkills(ctx);
 	registerBootstrap(ctx);
 	registerSkiff(ctx);
+	registerAcp(ctx);
 }
 /**
 * F4 Skiff 调试服务装配：启停 = 人工（设置面板 Skiff 区块开关，settings 持久化）。
@@ -11579,5 +11881,29 @@ function readWebPort(ctx) {
 		return 3080;
 	}
 }
+/**
+* F4c ACP HTTP JSON-RPC 端点装配（v1.26.0 实验性）：启停 = 人工（设置面板
+* 「Serenity」页 ACP 区块开关，settings 持久化）。会话创建/延续走 acp-core →
+* skiff-core（与调试页同核心）；仅监听 127.0.0.1；未开启零资源占用。
+*/
+function registerAcp(ctx) {
+	let started = false;
+	const sync = () => {
+		const s = readSimpleSettings();
+		if (s.acpEnabled && !started) startAcpHttpServer(ctx, s.acpHttpPort).then(() => {
+			started = true;
+		}).catch((err) => {
+			console.error(`[serenity-hooks] ✗ ACP HTTP 端点启动失败: ${String(err?.message ?? err)}`);
+		});
+		else if (!s.acpEnabled && started) {
+			stopAcpHttpServer();
+			started = false;
+		}
+	};
+	try {
+		ctx.on("serenity/settings-changed", sync);
+	} catch {}
+	sync();
+}
 //#endregion
 export { Config, apply, inject, name };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shgroup/dsh-serenity-hooks",
-  "version": "1.25.11",
+  "version": "1.26.0",
   "description": "宁静号 ACC harness — Native Cordis 插件（DeepSeek Harness 运行时）。真实 DSH 工具注册（cc_fs/session/acc_msm 等 9 工具）+ 拦截缝机械约束（safe-mode/路径守卫/会话落盘）+ 系统提示词注入（ACC/CCE/Constraints/SKILL/Session 五块）。适配 DSH 公开版（deepseek-ai/deepseek-harness 0.1.0-rc）。",
   "license": "MIT",
   "repository": {