@shgroup/dsh-serenity-hooks 1.25.11 → 1.26.1

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-serenity-hooks",
-  "version": "1.25.11",
+  "version": "1.26.1",
   "main": "lib/index.js",
   "description": "宁静号 ACC harness（Native Cordis 插件）：真实 DSH 工具 cc_fs/session/acc_msm/eap/neat/cce/handyman/session_rebuild/skiff_admin + 拦截缝机械约束（safe-mode/路径守卫）+ 高级设定面板（双端口网关/账号管理）+ Skiff 认知子集角色（实验性）。适配 DSH 公开版（0.1.0-rc，deepseek-ai/deepseek-harness）。",
   "engines": {

package/lib/client.js

@@ -3895,6 +3895,9 @@ Instruction-following style:
 			const setSkiffPort = (v) => {
 				scope.set("skiffDebugPort", Math.min(65535, Math.max(1024, Math.round(v))));
 			};
+			const setAcpPort = (v) => {
+				scope.set("acpHttpPort", Math.min(65535, Math.max(1024, Math.round(v))));
+			};
 			if (!ready) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 				className: "ss-section",
 				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
@@ -3908,6 +3911,9 @@ Instruction-following style:
 			const namingOn = value?.namingEnabled ?? true;
 			const skiffOn = value?.skiffEnabled ?? false;
 			const skiffPort = value?.skiffDebugPort ?? 3099;
+			const acpOn = value?.acpEnabled ?? false;
+			const acpPort = value?.acpHttpPort ?? 3100;
+			const publicAskOn = value?.publicAskEnabled ?? false;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "ss-section",
 				children: [
@@ -3996,6 +4002,43 @@ Instruction-following style:
 							})
 						}) })]
 					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Group, {
+						title: "ACP / 建议问答",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(RowCard, {
+								title: "ACP JSON-RPC 端点",
+								desc: "程序化调用 Skiff 角色（指定 CCC+角色+会话；实验性，仅监听 127.0.0.1）",
+								control: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Toggle, {
+									checked: acpOn,
+									onChange: (on) => toggle("acpEnabled", on)
+								})
+							}) }),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(RowCard, {
+								title: "建议问答页",
+								desc: "按认知容器暴露问答页供他人验证（需 key；首次开启自动生成固定 key，见 ~/.dsh/serenity-hooks.json）",
+								control: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Toggle, {
+									checked: publicAskOn,
+									onChange: (on) => toggle("publicAskEnabled", on)
+								})
+							}) }),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(RowCard, {
+								title: "HTTP 端口",
+								desc: "ACP JSON-RPC + 问答页共用端口（1024 ~ 65535，默认 3100）",
+								control: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+									className: "ss-threshold",
+									children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										className: "ss-portInput",
+										type: "number",
+										min: 1024,
+										max: 65535,
+										value: acpPort,
+										disabled: !acpOn && !publicAskOn,
+										onChange: (e) => setAcpPort(Number(e.target.value))
+									})
+								})
+							}) })
+						]
+					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: "ss-group",
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {

package/lib/index.js

@@ -736,6 +736,13 @@ function registerSkiffSession$1(sessionId, role, ccc) {
 		ccc
 	});
 }
+function unregisterSkiffSession$1(sessionId) {
+	skiffSessions.delete(sessionId);
+}
+/** 测试/调试：注册表快照（sessionId → {role, ccc}） */
+function skiffSessionSnapshot$1() {
+	return new Map(skiffSessions);
+}
 //#endregion
 //#region src/seams/guards.ts
 /**
@@ -2394,6 +2401,19 @@ function registerSkiffSession(sessionId, role, ccc, agent) {
 	skiffAgents.set(sessionId, agent);
 	registerSkiffSession$1(sessionId, role, ccc);
 }
+function unregisterSkiffSession(sessionId) {
+	skiffAgents.delete(sessionId);
+	unregisterSkiffSession$1(sessionId);
+}
+/** 测试/调试：注册表快照（sessionId → {role} 兼容展示） */
+function skiffSessionSnapshot() {
+	const out = /* @__PURE__ */ new Map();
+	for (const [id, b] of skiffSessionSnapshot$1()) out.set(id, {
+		role: b.role,
+		ccc: b.ccc
+	});
+	return out;
+}
 /** Skiff agent 挂载的 DSH preset（v1.25.3 修复：read/grep/glob 等平台工具由 preset 决定工具面；
 *  handyman 经 composeFrom 继承父、skiff 无父上下文——直接挂 DSH 默认 standard preset；
 *  guard 角色白名单再按角色过滤可见/可用面——白名单外工具仍 deny） */
@@ -5237,7 +5257,10 @@ const simpleSettingsSchema = z.object({
 	rebuildThreshold: z.number().min(.01).max(1).default(.9),
 	namingEnabled: z.boolean().default(true),
 	skiffEnabled: z.boolean().default(false),
-	skiffDebugPort: z.number().min(1024).max(65535).default(3099)
+	skiffDebugPort: z.number().min(1024).max(65535).default(3099),
+	acpEnabled: z.boolean().default(false),
+	acpHttpPort: z.number().min(1024).max(65535).default(3100),
+	publicAskEnabled: z.boolean().default(false)
 });
 /** 从插件 Config 提取 entry 默认（settings base 层） */
 function entryDefaults(config) {
@@ -5247,7 +5270,10 @@ function entryDefaults(config) {
 		rebuildThreshold: config.rebuild?.thresholdRatio ?? .9,
 		namingEnabled: config.naming?.enabled ?? true,
 		skiffEnabled: config.skiff?.enabled ?? false,
-		skiffDebugPort: config.skiff?.debugPort ?? 3099
+		skiffDebugPort: config.skiff?.debugPort ?? 3099,
+		acpEnabled: config.acp?.enabled ?? false,
+		acpHttpPort: config.acp?.httpPort ?? 3100,
+		publicAskEnabled: config.publicAsk?.enabled ?? false
 	};
 }
 /** 运行时源（installSettingsSection 注入：settings scope 或 entry fallback） */
@@ -5260,7 +5286,10 @@ function defaultSimpleSettings() {
 		rebuildThreshold: .9,
 		namingEnabled: true,
 		skiffEnabled: false,
-		skiffDebugPort: 3099
+		skiffDebugPort: 3099,
+		acpEnabled: false,
+		acpHttpPort: 3100,
+		publicAskEnabled: false
 	};
 }
 /**
@@ -6898,7 +6927,11 @@ dsp 只提供机制（双白名单强制 + 基础提示词 + 调试问答页）
 
 ── 运行 ──
   调试：设置面板「Serenity」页 Skiff 区块开启 → http://127.0.0.1:<debugPort> 问答页实测
-  （v1.25.0 唯一客户端面；ACP stdio 协议 F4c 后续，与调试页共用同一会话核心）
+  ACP 程序化面（v1.26.0）：设置面板「ACP」区块开启 → HTTP JSON-RPC 端点（默认 3100）——
+    POST /  {jsonrpc, id, method, params}
+    session/new {ccc, role, sessionId?}  → 创建/延续会话（sessionId 可选=进程内追问）
+    session/prompt {sessionId, question} → {answer, trajectory}
+    session/cancel / session/close / session/list / request_permission（恒 allow）
   启停 = 人工（设置面板开关，不随插件加载自动启动）；未开启零资源占用
   生效机制：角色配置**实时读取**（改 .opencode/serenity.json → 刷新调试页即生效）；
   改配置后用 skiff_admin apply 做显式校验 + 应用确认（绑定 CCC + 角色清单）
@@ -7339,7 +7372,8 @@ function defaultAdvancedSettings() {
 		persona: {
 			mode: "",
 			overrideText: ""
-		}
+		},
+		publicAsk: { key: "" }
 	};
 }
 const SCRYPT_KEYLEN = 32;
@@ -7390,6 +7424,7 @@ function mergeWithDefaults(raw) {
 	const rebuild = o.rebuild ?? {};
 	const naming = o.naming ?? {};
 	const persona = o.persona ?? {};
+	const publicAsk = o.publicAsk ?? {};
 	return {
 		gateway: {
 			enabled: typeof gateway.enabled === "boolean" ? gateway.enabled : def.gateway.enabled,
@@ -7409,7 +7444,8 @@ function mergeWithDefaults(raw) {
 		persona: {
 			mode: typeof persona.mode === "string" ? persona.mode : def.persona.mode,
 			overrideText: typeof persona.overrideText === "string" ? persona.overrideText : def.persona.overrideText
-		}
+		},
+		publicAsk: { key: typeof publicAsk.key === "string" ? publicAsk.key : def.publicAsk.key }
 	};
 }
 /** 读取全局配置（文件缺失/坏 JSON → 默认值） */
@@ -7449,12 +7485,33 @@ function updateAdvancedSettings(patch) {
 		persona: ps !== void 0 ? {
 			mode: typeof ps.mode === "string" ? ps.mode : current.persona.mode,
 			overrideText: typeof ps.overrideText === "string" ? ps.overrideText : current.persona.overrideText
-		} : current.persona
+		} : current.persona,
+		publicAsk: patch.publicAsk !== void 0 ? { key: typeof patch.publicAsk.key === "string" ? patch.publicAsk.key : current.publicAsk.key } : current.publicAsk
 	};
 	writeAdvancedSettings(next);
 	return next;
 }
 /**
+* 确保问答页访问 key 存在（首次启用自动生成 + 写回固定，用户拍板"配置时生成"）：
+* 读取全局配置 publicAsk.key；为空 → 生成 32 字节随机 hex（64 字符）→ 写回持久化。
+* @returns 当前固定 key（已生成则返回既有值——**幂等**，不会覆盖用户手改的 key）
+*/
+function ensurePublicAskKey() {
+	const current = readAdvancedSettings();
+	if (current.publicAsk.key !== "") return current.publicAsk.key;
+	const key = randomBytes(32).toString("hex");
+	updateAdvancedSettings({ publicAsk: { key } });
+	return key;
+}
+/** 校验问答页访问 key（timing-safe；key 未生成 → 恒 false——没有 key 不工作） */
+function verifyPublicAskKey(provided) {
+	const expected = readAdvancedSettings().publicAsk.key;
+	if (!expected || typeof provided !== "string" || provided === "") return false;
+	const a = Buffer.from(provided);
+	const b = Buffer.from(expected);
+	return a.length === b.length && timingSafeEqual(a, b);
+}
+/**
 * 一次性迁移（v1.21.x → v1.22）：旧版把 `serenityAdvanced` 存在 CCC localstore.json；
 * 新版归 plugin 全局文件。全局文件已存在 → 跳过（幂等）；localstore 无旧节 → 跳过。
 * @param root - CCC 根（localstore.json 所在目录）
@@ -8298,7 +8355,7 @@ function saveFileToTmp(root, fileName, data) {
 	writeFileSync(join(dir, filename), bytes);
 	return `${FILE_UPLOAD_DIR}/${filename}`;
 }
-function readBody$2(req, maxBytes) {
+function readBody$3(req, maxBytes) {
 	return new Promise((resolve, reject) => {
 		let data = "";
 		req.on("data", (chunk) => {
@@ -8312,7 +8369,7 @@ function readBody$2(req, maxBytes) {
 		req.on("error", reject);
 	});
 }
-function sendJson$1(res, code, body) {
+function sendJson$2(res, code, body) {
 	const payload = JSON.stringify(body);
 	res.writeHead(code, {
 		"content-type": "application/json; charset=utf-8",
@@ -8350,7 +8407,7 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "GET") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				const url = new URL(req.url ?? "/", "http://127.0.0.1");
@@ -8359,12 +8416,12 @@ function registerStatusApi(ctx, opts = {}) {
 					workspace: url.searchParams.get("workspace") ?? void 0
 				}));
 				if (!root) {
-					sendJson$1(res, 200, { handymen: [] });
+					sendJson$2(res, 200, { handymen: [] });
 					return;
 				}
-				sendJson$1(res, 200, { handymen: listActiveHandymen(root) });
+				sendJson$2(res, 200, { handymen: listActiveHandymen(root) });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -8374,14 +8431,14 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "POST") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "图片落盘仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "图片落盘仅限 WebUI（client 专用）" });
 					return;
 				}
-				const raw = await readBody$2(req, 20971520);
+				const raw = await readBody$3(req, 20971520);
 				const body = JSON.parse(raw);
 				const workspace = resolveWorkspace(ctx, {
 					sessionId: body.sessionId,
@@ -8389,12 +8446,12 @@ function registerStatusApi(ctx, opts = {}) {
 				});
 				const root = findSerenityRoot(workspace);
 				if (!root) {
-					sendJson$1(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+					sendJson$2(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 					return;
 				}
-				sendJson$1(res, 200, { path: saveImageToTmp(root, body.mediaType ?? "", body.data ?? "") });
+				sendJson$2(res, 200, { path: saveImageToTmp(root, body.mediaType ?? "", body.data ?? "") });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -8404,14 +8461,14 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "POST") {
-					sendJson$1(res, 405, { error: "method not allowed" });
+					sendJson$2(res, 405, { error: "method not allowed" });
 					return;
 				}
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "文件落盘仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "文件落盘仅限 WebUI（client 专用）" });
 					return;
 				}
-				const raw = await readBody$2(req, 20971520);
+				const raw = await readBody$3(req, 20971520);
 				const body = JSON.parse(raw);
 				const workspace = resolveWorkspace(ctx, {
 					sessionId: body.sessionId,
@@ -8419,12 +8476,12 @@ function registerStatusApi(ctx, opts = {}) {
 				});
 				const root = findSerenityRoot(workspace);
 				if (!root) {
-					sendJson$1(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+					sendJson$2(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 					return;
 				}
-				sendJson$1(res, 200, { path: saveFileToTmp(root, body.name ?? "", body.data ?? "") });
+				sendJson$2(res, 200, { path: saveFileToTmp(root, body.name ?? "", body.data ?? "") });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -8440,7 +8497,7 @@ function registerStatusApi(ctx, opts = {}) {
 						workspace: url.searchParams.get("workspace") ?? void 0
 					}), configPaths);
 					const runtime = ctx.get("codeRuntime");
-					sendJson$1(res, 200, {
+					sendJson$2(res, 200, {
 						...status,
 						...runtime === void 0 ? { codeRuntime: null } : { codeRuntime: {
 							language: runtime.language,
@@ -8451,10 +8508,10 @@ function registerStatusApi(ctx, opts = {}) {
 				}
 				if (req.method === "POST") {
 					if (req.headers["x-serenity-ui"] !== "1") {
-						sendJson$1(res, 403, { error: "safe-mode 切换仅限 WebUI（agent 不可自行开关）" });
+						sendJson$2(res, 403, { error: "safe-mode 切换仅限 WebUI（agent 不可自行开关）" });
 						return;
 					}
-					const raw = await readBody$2(req, 65536);
+					const raw = await readBody$3(req, 65536);
 					const body = JSON.parse(raw);
 					const workspace = resolveWorkspace(ctx, {
 						sessionId: body.sessionId,
@@ -8462,19 +8519,19 @@ function registerStatusApi(ctx, opts = {}) {
 					});
 					const root = findSerenityRoot(workspace);
 					if (!root) {
-						sendJson$1(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+						sendJson$2(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 						return;
 					}
 					const result = setSafeMode(root, body.on === true);
-					sendJson$1(res, 200, {
+					sendJson$2(res, 200, {
 						...getStatus(workspace, configPaths),
 						...result
 					});
 					return;
 				}
-				sendJson$1(res, 405, { error: "method not allowed" });
+				sendJson$2(res, 405, { error: "method not allowed" });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -8484,25 +8541,25 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.headers["x-serenity-ui"] !== "1") {
-					sendJson$1(res, 403, { error: "高级设定仅限 WebUI（client 专用）" });
+					sendJson$2(res, 403, { error: "高级设定仅限 WebUI（client 专用）" });
 					return;
 				}
 				if (req.method === "GET") {
-					sendJson$1(res, 200, { config: toWire(readAdvancedSettings()) });
+					sendJson$2(res, 200, { config: toWire(readAdvancedSettings()) });
 					return;
 				}
 				if (req.method === "PUT") {
-					const raw = await readBody$2(req, 131072);
+					const raw = await readBody$3(req, 131072);
 					const saved = applyWirePatch(JSON.parse(raw).config ?? {});
 					try {
 						ctx.emit?.("serenity/config-updated");
 					} catch {}
-					sendJson$1(res, 200, { config: toWire(saved) });
+					sendJson$2(res, 200, { config: toWire(saved) });
 					return;
 				}
-				sendJson$1(res, 405, { error: "method not allowed" });
+				sendJson$2(res, 405, { error: "method not allowed" });
 			} catch (err) {
-				sendJson$1(res, 400, { error: err.message ?? String(err) });
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -8958,7 +9015,7 @@ function buildProxyHeaders(reqHeaders, mainPort, bodyOverride) {
 //#endregion
 //#region src/gateway.ts
 /** 读取请求体（≤ maxBytes；超限 reject） */
-function readBody$1(req, maxBytes) {
+function readBody$2(req, maxBytes) {
 	return new Promise((resolve, reject) => {
 		let data = "";
 		req.on("data", (chunk) => {
@@ -9091,7 +9148,7 @@ function startGateway(config, getAccounts) {
 		if (session !== void 0) {
 			if (req.method === "POST" && url.pathname === "/api/workspace.create") {
 				if (!allowWorkspaceCreate) {
-					readBody$1(req, 131072).then((body) => {
+					readBody$2(req, 131072).then((body) => {
 						let rpcId = "unknown";
 						try {
 							const parsed = JSON.parse(body);
@@ -9127,7 +9184,7 @@ function startGateway(config, getAccounts) {
 					});
 					return;
 				}
-				readBody$1(req, 131072).then((body) => {
+				readBody$2(req, 131072).then((body) => {
 					let rpcId = "unknown";
 					let path;
 					try {
@@ -11079,8 +11136,8 @@ x.lex;
 * 实验性质：未开启时零资源占用（无监听、无 agent 创建）。
 */
 /** 运行中的调试服务（单实例；进程级） */
-let active = null;
-function readBody(req) {
+let active$1 = null;
+function readBody$1(req) {
 	return new Promise((resolve, reject) => {
 		const chunks = [];
 		req.on("data", (c) => chunks.push(c));
@@ -11088,7 +11145,7 @@ function readBody(req) {
 		req.on("error", reject);
 	});
 }
-function sendJson(res, status, payload) {
+function sendJson$1(res, status, payload) {
 	const body = JSON.stringify(payload);
 	res.writeHead(status, {
 		"Content-Type": "application/json; charset=utf-8",
@@ -11096,7 +11153,7 @@ function sendJson(res, status, payload) {
 	});
 	res.end(body);
 }
-function sendHtml(res, html) {
+function sendHtml$1(res, html) {
 	res.writeHead(200, {
 		"Content-Type": "text/html; charset=utf-8",
 		"Cache-Control": "no-store"
@@ -11356,42 +11413,42 @@ function renderSkiffMarkdown(raw) {
 * @param webPort 主 WebUI 端口（WebUI 链接）
 */
 async function startSkiffDebugServer(ctx, root, port, webPort) {
-	if (active) return;
+	if (active$1) return;
 	const server = createServer((req, res) => {
-		handle(ctx, root, webPort, req, res);
+		handle$1(ctx, root, webPort, req, res);
 	});
 	await new Promise((resolve, reject) => {
 		server.once("error", reject);
 		server.listen(port, "127.0.0.1", () => resolve());
 	});
-	active = {
+	active$1 = {
 		server,
 		port
 	};
 	console.log(`[serenity-hooks] ✓ Skiff 调试问答页: http://127.0.0.1:${port}（默认 CCC: ${root}，WebUI: ${webPort}）`);
 }
 function stopSkiffDebugServer() {
-	if (!active) return;
+	if (!active$1) return;
 	try {
-		active.server.close();
+		active$1.server.close();
 	} catch {}
-	active = null;
+	active$1 = null;
 }
-async function handle(ctx, defaultRoot, webPort, req, res) {
+async function handle$1(ctx, defaultRoot, webPort, req, res) {
 	try {
 		const url = (req.url ?? "/").split("?")[0] ?? "/";
 		if (req.method === "GET" && url === "/") {
-			sendHtml(res, skiffDebugPage(await discoverCccs(ctx, defaultRoot), defaultRoot, webPort));
+			sendHtml$1(res, skiffDebugPage(await discoverCccs(ctx, defaultRoot), defaultRoot, webPort));
 			return;
 		}
 		if (req.method === "POST" && url === "/ask") {
 			let body;
 			try {
-				const parsed = JSON.parse(await readBody(req));
+				const parsed = JSON.parse(await readBody$1(req));
 				if (parsed === null || typeof parsed !== "object") throw new Error("not an object");
 				body = parsed;
 			} catch {
-				sendJson(res, 400, { error: "invalid JSON body" });
+				sendJson$1(res, 400, { error: "invalid JSON body" });
 				return;
 			}
 			const ccc = typeof body.ccc === "string" && body.ccc !== "" ? body.ccc : defaultRoot;
@@ -11400,11 +11457,11 @@ async function handle(ctx, defaultRoot, webPort, req, res) {
 			const sessionId = typeof body.sessionId === "string" && body.sessionId !== "" ? body.sessionId : void 0;
 			const role = readSkiffRoles(ccc).get(roleName);
 			if (!roleName || !role) {
-				sendJson(res, 400, { error: `unknown role: ${roleName} (ccc: ${ccc})` });
+				sendJson$1(res, 400, { error: `unknown role: ${roleName} (ccc: ${ccc})` });
 				return;
 			}
 			if (!question.trim()) {
-				sendJson(res, 400, { error: "empty question" });
+				sendJson$1(res, 400, { error: "empty question" });
 				return;
 			}
 			let agent;
@@ -11413,11 +11470,11 @@ async function handle(ctx, defaultRoot, webPort, req, res) {
 				const info = skiffSessionInfo(sessionId);
 				const live = getSkiffAgent(sessionId);
 				if (!info || !live) {
-					sendJson(res, 400, { error: "session is not recoverable (process restarted or session unknown) — start a new conversation" });
+					sendJson$1(res, 400, { error: "session is not recoverable (process restarted or session unknown) — start a new conversation" });
 					return;
 				}
 				if (info.role !== roleName || info.ccc !== ccc) {
-					sendJson(res, 400, { error: `session "${sessionId}" belongs to role "${info.role}" in another CCC — start a new conversation` });
+					sendJson$1(res, 400, { error: `session "${sessionId}" belongs to role "${info.role}" in another CCC — start a new conversation` });
 					return;
 				}
 				agent = live;
@@ -11426,6 +11483,361 @@ async function handle(ctx, defaultRoot, webPort, req, res) {
 			const hc = readHandymanConfig(ccc);
 			if (!agent) agent = (await createSkiffAgent(ctx, ccc, roleName, role, hc?.defaultModel)).agent;
 			const result = await askSkiff(ctx, agent, question, 0);
+			sendJson$1(res, 200, {
+				answer: result.answer,
+				answer_html: renderSkiffMarkdown(result.answer),
+				sessionId: result.sessionId,
+				continued,
+				trajectory: result.trajectory
+			});
+			return;
+		}
+		sendJson$1(res, 404, { error: "not found" });
+	} catch (err) {
+		sendJson$1(res, 500, { error: err?.message ?? String(err) });
+	}
+}
+//#endregion
+//#region src/acp-core.ts
+/** JSON-RPC 错误码（对齐标准） */
+const RPC_ERROR = {
+	PARSE: -32700,
+	INVALID_REQUEST: -32600,
+	METHOD_NOT_FOUND: -32601,
+	INVALID_PARAMS: -32602,
+	INTERNAL: -32603
+};
+/**
+* ACP 会话管理器：持有 skiff agent 会话（与 skiff-core 注册表同源——
+* 创建走 createSkiffAgent（自动注册），关闭走 unregisterSkiffSession）。
+* 传输无关：HTTP 端点/企业微信桥/未来 stdio 都调 handle(method, params)。
+*/
+var AcpServer = class {
+	ctx;
+	constructor(ctx) {
+		this.ctx = ctx;
+	}
+	/** 实现级方法调度（返回 result 或抛 JSON-RPC 语义错误） */
+	async handle(method, params) {
+		switch (method) {
+			case "initialize": return this.initialize();
+			case "authenticate": return {};
+			case "session/new": return this.newSession(params);
+			case "session/list": return this.listSessions();
+			case "session/prompt": return this.prompt(params);
+			case "session/cancel": return this.cancel(params);
+			case "session/close": return this.closeSession(params);
+			case "session/request_permission": return { allow: true };
+			default: throw new RpcMethodError(`method not found: ${method}`);
+		}
+	}
+	initialize() {
+		return {
+			protocolVersion: 1,
+			capabilities: {
+				sessionId: true,
+				ccc: true,
+				role: true
+			},
+			serverInfo: {
+				name: "dsh-serenity-hooks-acp",
+				version: "1.26.0"
+			}
+		};
+	}
+	/**
+	* session/new：{ ccc, role, sessionId? } → 创建或延续 skiff 会话。
+	* 无 sessionId → createSkiffAgent（新会话，continued:false）；
+	* 有 → 进程内延续（getSkiffAgent 命中 + role/ccc 绑定校验；未命中 → 错误）。
+	*/
+	async newSession(params) {
+		const ccc = typeof params?.ccc === "string" && params.ccc !== "" ? params.ccc : void 0;
+		const roleName = typeof params?.role === "string" ? params.role : void 0;
+		const sessionId = typeof params?.sessionId === "string" && params.sessionId !== "" ? params.sessionId : void 0;
+		if (!ccc) throw new RpcInvalidParams("session/new requires ccc (CCC root path)");
+		if (!roleName) throw new RpcInvalidParams("session/new requires role");
+		const role = readSkiffRoles(ccc).get(roleName);
+		if (!role) throw new RpcInvalidParams(`unknown role: ${roleName} (ccc: ${ccc})`);
+		if (sessionId) {
+			const info = skiffSessionInfo(sessionId);
+			const live = getSkiffAgent(sessionId);
+			if (!info || !live) throw new RpcInvalidParams("session is not recoverable (process restarted or session unknown) — start a new conversation");
+			if (info.role !== roleName || info.ccc !== ccc) throw new RpcInvalidParams(`session "${sessionId}" belongs to role "${info.role}" in another CCC`);
+			return {
+				sessionId,
+				role: roleName,
+				ccc,
+				continued: true
+			};
+		}
+		const hc = readHandymanConfig(ccc);
+		return {
+			sessionId: (await createSkiffAgent(this.ctx, ccc, roleName, role, hc?.defaultModel)).sessionId,
+			role: roleName,
+			ccc,
+			continued: false
+		};
+	}
+	listSessions() {
+		const sessions = [];
+		for (const [id, b] of skiffSessionSnapshot()) sessions.push({
+			sessionId: id,
+			role: b.role,
+			ccc: b.ccc
+		});
+		return { sessions };
+	}
+	/** session/prompt：{ sessionId, question } → 答案 + 全量轨迹 */
+	async prompt(params) {
+		const sessionId = typeof params?.sessionId === "string" ? params.sessionId : void 0;
+		const question = typeof params?.question === "string" ? params.question : void 0;
+		if (!sessionId) throw new RpcInvalidParams("session/prompt requires sessionId");
+		if (!question?.trim()) throw new RpcInvalidParams("session/prompt requires question");
+		const agent = getSkiffAgent(sessionId);
+		if (!agent) throw new RpcInvalidParams(`unknown session: ${sessionId} (not recoverable — process restarted?)`);
+		const result = await askSkiff(this.ctx, agent, question, 0);
+		return {
+			answer: result.answer,
+			sessionId: result.sessionId,
+			trajectory: result.trajectory
+		};
+	}
+	/** session/cancel：{ sessionId } → 中断当前 prompt（DSH interrupt） */
+	cancel(params) {
+		const sessionId = typeof params?.sessionId === "string" ? params.sessionId : void 0;
+		if (!sessionId) return { cancelled: false };
+		const agent = getSkiffAgent(sessionId);
+		if (!agent) return { cancelled: false };
+		try {
+			agent.interrupt?.();
+		} catch {}
+		return { cancelled: true };
+	}
+	/** session/close：{ sessionId } → 释放 agent + 注册表清理（进程内） */
+	closeSession(params) {
+		const sessionId = typeof params?.sessionId === "string" ? params.sessionId : void 0;
+		if (!sessionId) return { closed: false };
+		if (!getSkiffAgent(sessionId)) return { closed: false };
+		unregisterSkiffSession(sessionId);
+		return { closed: true };
+	}
+};
+/** 方法不存在错误（JSON-RPC -32601） */
+var RpcMethodError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "RpcMethodError";
+	}
+};
+/** 参数错误（JSON-RPC -32602） */
+var RpcInvalidParams = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "RpcInvalidParams";
+	}
+};
+/**
+* JSON-RPC 2.0 批处理（单帧）：解析请求/通知 → 调 AcpServer.handle → 响应。
+* 传输无关：acp-http 端点 / 未来 stdio 共用。
+* @returns 响应帧数组（请求有响应；通知无；解析失败 → 单错误响应）
+*/
+async function dispatchRpc(server, frame) {
+	if (frame === null || typeof frame !== "object") return [rpcError(null, RPC_ERROR.INVALID_REQUEST, "invalid request")];
+	const req = frame;
+	if (req.jsonrpc !== "2.0" || typeof req.method !== "string") return [rpcError(req.id ?? null, RPC_ERROR.INVALID_REQUEST, "invalid request")];
+	if (req.id === void 0) {
+		try {
+			await server.handle(req.method, req.params);
+		} catch {}
+		return [];
+	}
+	try {
+		const result = await server.handle(req.method, req.params);
+		return [{
+			jsonrpc: "2.0",
+			id: req.id,
+			result
+		}];
+	} catch (error) {
+		return [rpcError(req.id, rpcCodeOf(error), error instanceof Error ? error.message : String(error))];
+	}
+}
+function rpcCodeOf(error) {
+	if (error instanceof RpcMethodError) return RPC_ERROR.METHOD_NOT_FOUND;
+	if (error instanceof RpcInvalidParams) return RPC_ERROR.INVALID_PARAMS;
+	return RPC_ERROR.INTERNAL;
+}
+function rpcError(id, code, message) {
+	return {
+		jsonrpc: "2.0",
+		id,
+		error: {
+			code,
+			message
+		}
+	};
+}
+//#endregion
+//#region src/acp-http.ts
+/**
+* acp-http.ts — ACP HTTP JSON-RPC + 建议问答页（F4c/F4d，v1.26.x 实验性）
+*
+* node:http 服务（默认关，仅监听 127.0.0.1；启停 = 人工——设置面板「Serenity」
+* 页 ACP 区块开关 / 问答页开关，不随插件加载自动启动；仿 skiff 调试服务模式）。
+*
+* - POST /     → JSON-RPC 2.0 单帧/批处理（acpEnabled 门控；ACP 程序化面）
+* - GET  /     → 建议问答页 HTML（publicAskEnabled 门控；F4d，S142 用户：
+*                按认知容器暴露问答页供他人验证——key 认证，无 key 不工作）
+* - POST /ask  → { key, ccc, role?, question, sessionId? } → key 校验（timing-safe）
+*                → acp-core 会话 → { answer, answer_html, sessionId, trajectory }
+*
+* 与 skiff 调试页（人工测试面）共享同一会话核心（acp-core → skiff-core）；
+* 企业微信桥（F4c-2）同进程直调 acp-core 处理器函数，不经本端点。
+* stdio 形态（独立进程部署）后续复用同一 acp-core（官方 NDJSON 帧格式）。
+*
+* 实验性质：未开启时零资源占用（无监听、无 agent 创建）。
+*/
+/** 运行中的 ACP HTTP 服务（单实例；进程级） */
+let active = null;
+function readBody(req) {
+	return new Promise((resolve, reject) => {
+		const chunks = [];
+		req.on("data", (c) => chunks.push(c));
+		req.on("end", () => resolve(Buffer.concat(chunks).toString("utf-8")));
+		req.on("error", reject);
+	});
+}
+function sendJson(res, status, payload) {
+	const body = JSON.stringify(payload);
+	res.writeHead(status, {
+		"Content-Type": "application/json; charset=utf-8",
+		"Cache-Control": "no-store"
+	});
+	res.end(body);
+}
+function sendHtml(res, html) {
+	res.writeHead(200, {
+		"Content-Type": "text/html; charset=utf-8",
+		"Cache-Control": "no-store"
+	});
+	res.end(html);
+}
+/**
+* 启动 ACP HTTP JSON-RPC + 建议问答页服务（单实例；重复启动幂等返回既有实例）。
+* @param ctx 插件上下文（AcpServer 内部经 skiff-core 创建 agent）
+* @param port 监听端口（仅 127.0.0.1）
+* @param defaultRoot 默认 CCC 根（问答页候选发现兜底；resolveSkiffRoot 传入）
+*/
+async function startAcpHttpServer(ctx, port, defaultRoot) {
+	if (active) return;
+	const server = createServer((req, res) => {
+		handle(ctx, defaultRoot ?? "", req, res);
+	});
+	await new Promise((resolve, reject) => {
+		server.once("error", reject);
+		server.listen(port, "127.0.0.1", () => resolve());
+	});
+	active = {
+		server,
+		port
+	};
+	const s = readSimpleSettings();
+	const faces = [];
+	if (s.acpEnabled) faces.push("JSON-RPC");
+	if (s.publicAskEnabled) faces.push("问答页(key 认证)");
+	console.log(`[serenity-hooks] ✓ ACP HTTP: http://127.0.0.1:${port}（${faces.join(" + ") || "未开启任何面"}；session/new 支持 {ccc, role, sessionId?}）`);
+}
+function stopAcpHttpServer() {
+	if (!active) return;
+	try {
+		active.server.close();
+	} catch {}
+	active = null;
+}
+async function handle(ctx, defaultRoot, req, res) {
+	try {
+		const url = (req.url ?? "/").split("?")[0] ?? "/";
+		const s = readSimpleSettings();
+		if (req.method === "POST" && url === "/") {
+			if (!s.acpEnabled) {
+				sendJson(res, 403, { error: "ACP JSON-RPC disabled (enable in Serenity settings)" });
+				return;
+			}
+			let body;
+			try {
+				body = JSON.parse(await readBody(req));
+			} catch {
+				sendJson(res, 400, [{
+					jsonrpc: "2.0",
+					id: null,
+					error: {
+						code: -32700,
+						message: "parse error"
+					}
+				}]);
+				return;
+			}
+			sendJson(res, 200, await dispatchRpc(new AcpServer(ctx), body));
+			return;
+		}
+		if (req.method === "GET" && url === "/") {
+			if (!s.publicAskEnabled) {
+				sendHtml(res, publicAskDisabledHtml());
+				return;
+			}
+			sendHtml(res, publicAskPage(await discoverCccs(ctx, defaultRoot || (findSerenityRoot(process.cwd()) ?? "")), readSimpleSettings() && hasPublicAskKey()));
+			return;
+		}
+		if (req.method === "POST" && url === "/ask") {
+			if (!s.publicAskEnabled) {
+				sendJson(res, 403, { error: "public ask disabled (enable in Serenity settings)" });
+				return;
+			}
+			let body;
+			try {
+				const parsed = JSON.parse(await readBody(req));
+				if (parsed === null || typeof parsed !== "object") throw new Error("not an object");
+				body = parsed;
+			} catch {
+				sendJson(res, 400, { error: "invalid JSON body" });
+				return;
+			}
+			if (!verifyPublicAskKey(typeof body.key === "string" ? body.key : void 0)) {
+				sendJson(res, 401, { error: "invalid or missing key" });
+				return;
+			}
+			const ccc = typeof body.ccc === "string" && body.ccc !== "" ? body.ccc : defaultRoot || "";
+			const roleName = typeof body.role === "string" && body.role !== "" ? body.role : void 0;
+			const question = typeof body.question === "string" ? body.question : "";
+			const sessionId = typeof body.sessionId === "string" && body.sessionId !== "" ? body.sessionId : void 0;
+			if (!ccc) {
+				sendJson(res, 400, { error: "ccc required" });
+				return;
+			}
+			if (!question.trim()) {
+				sendJson(res, 400, { error: "empty question" });
+				return;
+			}
+			const roles = readSkiffRoles(ccc);
+			const explicit = roleName ? roles.get(roleName) : void 0;
+			const effectiveRole = roleName && explicit ? roleName : roles.keys().next().value;
+			const effectiveCfg = (roleName && explicit ? explicit : effectiveRole ? roles.get(effectiveRole) : void 0) ?? void 0;
+			if (!effectiveRole || !effectiveCfg) {
+				sendJson(res, 400, { error: `no skiff role available in ccc: ${ccc}` });
+				return;
+			}
+			let agent;
+			let continued = false;
+			if (sessionId) {
+				const info = skiffSessionInfo(sessionId);
+				const live = getSkiffAgent(sessionId);
+				if (info && live && info.role === effectiveRole && info.ccc === ccc) {
+					agent = live;
+					continued = true;
+				}
+			}
+			if (!agent) agent = (await createSkiffAgent(ctx, ccc, effectiveRole, effectiveCfg, readHandymanConfig(ccc)?.defaultModel)).agent;
+			const result = await askSkiff(ctx, agent, question, 0);
 			sendJson(res, 200, {
 				answer: result.answer,
 				answer_html: renderSkiffMarkdown(result.answer),
@@ -11440,6 +11852,105 @@ async function handle(ctx, defaultRoot, webPort, req, res) {
 		sendJson(res, 500, { error: err?.message ?? String(err) });
 	}
 }
+function hasPublicAskKey() {
+	try {
+		return ensurePublicAskKey() !== "";
+	} catch {
+		return false;
+	}
+}
+/** 问答页未启用提示页 */
+function publicAskDisabledHtml() {
+	return `<!DOCTYPE html>
+<html lang="zh"><head><meta charset="utf-8"><title>Serenity Public Ask</title></head>
+<body style="font-family:system-ui;padding:48px;text-align:center;color:#57606a">
+<h2>Serenity Public Ask</h2>
+<p>问答页未启用（请在 dsh 设置面板「Serenity」页开启「建议问答」）。</p>
+</body></html>`;
+}
+/** 建议问答页（F4d）：key 输入 + CCC 选择 + 问题 + 答案（marked 服务端渲染） */
+function publicAskPage(cccs, _hasKey) {
+	return `<!DOCTYPE html>
+<html lang="zh">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Serenity Public Ask</title>
+<style>
+  :root { color-scheme: light dark; }
+  body { font-family: system-ui, -apple-system, sans-serif; margin: 0; padding: 24px; background: #f6f7f9; color: #1f2328; }
+  @media (prefers-color-scheme: dark) { body { background: #1a1b1e; color: #e6e6e6; } }
+  main { max-width: 720px; margin: 0 auto; }
+  h1 { font-size: 18px; margin: 0 0 4px; }
+  .sub { opacity: .65; font-size: 13px; margin-bottom: 16px; }
+  label { font-size: 13px; font-weight: 600; display: block; margin: 12px 0 4px; }
+  input, select, textarea { width: 100%; box-sizing: border-box; padding: 8px 10px; border-radius: 8px; border: 1px solid #d0d7de; background: #fff; color: inherit; font-size: 14px; }
+  @media (prefers-color-scheme: dark) { input, select, textarea { background: #26282c; border-color: #3a3d42; } }
+  textarea { min-height: 72px; resize: vertical; }
+  button { margin-top: 12px; padding: 9px 18px; border-radius: 8px; border: 0; background: #0ba875; color: #fff; font-size: 14px; font-weight: 600; cursor: pointer; }
+  button:disabled { opacity: .55; cursor: wait; }
+  #answer { background: #fff; border: 1px solid #d0d7de; border-radius: 8px; padding: 12px; margin-top: 16px; font-size: 14px; line-height: 1.6; min-height: 48px; word-break: break-word; }
+  @media (prefers-color-scheme: dark) { #answer { background: #26282c; border-color: #3a3d42; } }
+  #answer p { margin: 6px 0; }
+  #answer h1, #answer h2, #answer h3 { margin: 12px 0 6px; font-size: 15px; }
+  #answer code { background: rgba(127,127,127,.14); border-radius: 4px; padding: 1px 5px; font-size: 13px; font-family: ui-monospace, monospace; }
+  #answer pre { background: rgba(127,127,127,.1); border-radius: 8px; padding: 10px 12px; overflow-x: auto; }
+  #answer ul, #answer ol { margin: 6px 0; padding-left: 22px; }
+  .err { color: #cf222e; white-space: pre-wrap; }
+  .muted { opacity: .6; font-size: 13px; }
+  details.think { margin: 8px 0; border: 1px solid rgba(210,153,34,.4); border-radius: 8px; background: rgba(210,153,34,.06); }
+  details.think summary { cursor: pointer; padding: 6px 10px; font-size: 12px; color: #d29922; font-weight: 600; }
+</style>
+</head>
+<body>
+<main>
+  <h1>Serenity Public Ask</h1>
+  <div class="sub">认知容器问答验证页 — 选择认知容器后提问（访问需 key）</div>
+  <label for="key">访问 Key</label>
+  <input id="key" type="password" placeholder="请输入访问 key" autocomplete="off">
+  <label for="ccc">认知容器</label>
+  <select id="ccc"></select>
+  <label for="q">问题</label>
+  <textarea id="q" placeholder="向该认知容器提问…"></textarea>
+  <button id="ask">提问</button>
+  <div id="answer" class="muted">等待提问…</div>
+</main>
+<script id="ask-data" type="application/json">${JSON.stringify(cccs).replace(/</g, "\\u003c")}<\/script>
+<script>
+const CCCS = JSON.parse(document.getElementById('ask-data').textContent)
+const keyInput = document.getElementById('key')
+const cccSel = document.getElementById('ccc')
+const btn = document.getElementById('ask')
+const answer = document.getElementById('answer')
+let sessionId = ''
+cccSel.innerHTML = CCCS.map((c) => '<option value="' + c.root + '">' + c.name + (c.roles.length ? ' (' + c.roles.length + ' 角色)' : '') + '</option>').join('') || '<option value="">(未发现认知容器)</option>'
+btn.addEventListener('click', async () => {
+  const ccc = cccSel.value
+  const q = document.getElementById('q').value.trim()
+  const key = keyInput.value.trim()
+  if (!ccc || !q) { answer.className = 'err'; answer.textContent = '请选择认知容器并输入问题'; return }
+  if (!key) { answer.className = 'err'; answer.textContent = '请输入访问 key（没有 key 无法使用）'; return }
+  btn.disabled = true
+  answer.className = 'muted'
+  answer.textContent = '运行中…'
+  try {
+    const res = await fetch('/ask', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ key, ccc, question: q, sessionId: sessionId || undefined }) })
+    const data = await res.json()
+    if (!res.ok) { sessionId = ''; throw new Error(data.error || ('HTTP ' + res.status)) }
+    answer.className = ''
+    answer.innerHTML = data.answer_html || data.answer || '（空回答）'
+    sessionId = data.sessionId || ''
+  } catch (err) {
+    answer.className = 'err'
+    answer.textContent = String(err.message || err)
+  } finally {
+    btn.disabled = false
+  }
+})
+<\/script>
+</body>
+</html>`;
+}
 //#endregion
 //#region src/index.ts
 const name = "dsh-serenity-hooks";
@@ -11476,6 +11987,10 @@ const Config = z.object({
 	skiff: z.object({
 		enabled: z.boolean().default(false),
 		debugPort: z.number().min(1024).max(65535).default(3099)
+	}),
+	acp: z.object({
+		enabled: z.boolean().default(false),
+		httpPort: z.number().min(1024).max(65535).default(3100)
 	})
 });
 function apply(ctx, config) {
@@ -11515,6 +12030,7 @@ function apply(ctx, config) {
 	if (config.opencodeSkills) registerOpencodeSkills(ctx);
 	registerBootstrap(ctx);
 	registerSkiff(ctx);
+	registerAcp(ctx);
 }
 /**
 * F4 Skiff 调试服务装配：启停 = 人工（设置面板 Skiff 区块开关，settings 持久化）。
@@ -11579,5 +12095,33 @@ function readWebPort(ctx) {
 		return 3080;
 	}
 }
+/**
+* F4c ACP HTTP + F4d 建议问答页装配（v1.26.x 实验性）：启停 = 人工（设置面板
+* 「Serenity」页 ACP / 问答页开关，settings 持久化）。任一面开启即启动服务
+* （同一端口：POST / = JSON-RPC 需 acpEnabled；GET / + /ask = 问答页需 publicAskEnabled）。
+* 会话创建/延续走 acp-core → skiff-core；仅监听 127.0.0.1；未开启零资源占用。
+*/
+function registerAcp(ctx) {
+	let started = false;
+	const sync = () => {
+		const s = readSimpleSettings();
+		const anyFace = s.acpEnabled || s.publicAskEnabled;
+		if (anyFace && !started) {
+			const root = resolveSkiffRoot(ctx);
+			startAcpHttpServer(ctx, s.acpHttpPort, root ?? void 0).then(() => {
+				started = true;
+			}).catch((err) => {
+				console.error(`[serenity-hooks] ✗ ACP HTTP 服务启动失败: ${String(err?.message ?? err)}`);
+			});
+		} else if (!anyFace && started) {
+			stopAcpHttpServer();
+			started = false;
+		}
+	};
+	try {
+		ctx.on("serenity/settings-changed", sync);
+	} catch {}
+	sync();
+}
 //#endregion
 export { Config, apply, inject, name };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shgroup/dsh-serenity-hooks",
-  "version": "1.25.11",
+  "version": "1.26.1",
   "description": "宁静号 ACC harness — Native Cordis 插件（DeepSeek Harness 运行时）。真实 DSH 工具注册（cc_fs/session/acc_msm 等 9 工具）+ 拦截缝机械约束（safe-mode/路径守卫/会话落盘）+ 系统提示词注入（ACC/CCE/Constraints/SKILL/Session 五块）。适配 DSH 公开版（deepseek-ai/deepseek-harness 0.1.0-rc）。",
   "license": "MIT",
   "repository": {