@shgroup/dsh-serenity-hooks 1.26.0 → 1.26.2

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-serenity-hooks",
-  "version": "1.26.0",
+  "version": "1.26.2",
   "main": "lib/index.js",
   "description": "宁静号 ACC harness（Native Cordis 插件）：真实 DSH 工具 cc_fs/session/acc_msm/eap/neat/cce/handyman/session_rebuild/skiff_admin + 拦截缝机械约束（safe-mode/路径守卫）+ 高级设定面板（双端口网关/账号管理）+ Skiff 认知子集角色（实验性）。适配 DSH 公开版（0.1.0-rc，deepseek-ai/deepseek-harness）。",
   "engines": {

package/lib/client.js

@@ -3245,7 +3245,7 @@ window.__ModuleLoader__.load({
 			if (!res.ok) return null;
 			return (await res.json()).config ?? null;
 		}
-		/** PUT 配置（账号 patch + 工作区白名单 + persona 彩蛋）→ 返回保存后的 wire */
+		/** PUT 配置（账号 patch + 工作区白名单 + persona 彩蛋 + 开放容器白名单）→ 返回保存后的 wire */
 		async function saveConfig(patch) {
 			const res = await fetch(CONFIG_PATH, {
 				method: "PUT",
@@ -3263,7 +3263,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region \0sp-css:/home/yh/home/home-serenity/AI_LAB/dsh-serenity-plugin/hooks/dsh-serenity-hooks/src/client/AccountsEditor
-		const css$2 = "/* AccountsEditor — DSH 设置面板「外部访问」区块（v1.22）\n * 与 SettingsSection ss-* 同设计语言：--dsw-alias-* 语义 token，明暗自适应。 */\n\n.ae-root {\n  display: flex;\n  flex-direction: column;\n  gap: 16px;\n  padding: 12px 14px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 12px;\n  font-size: 13px;\n}\n\n.ae-warn {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-state-warning-fg, #f59e0b);\n  word-break: break-word;\n}\n\n.ae-block {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n}\n\n.ae-title {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  font-weight: 600;\n  letter-spacing: 0.02em;\n  text-transform: uppercase;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.ae-desc {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n  word-break: break-word;\n  overflow-wrap: anywhere;\n}\n\n.ae-note {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n/* ── 监听设置 / 白名单输入行 ── */\n\n.ae-row {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n}\n\n.ae-label {\n  flex: none;\n  font-size: 12px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-secondary);\n  white-space: nowrap;\n}\n\n.ae-input {\n  flex: 1;\n  min-width: 0;\n  padding: 6px 10px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  background: var(--dsw-alias-bg-module);\n  color: var(--dsw-alias-label-primary);\n  font-size: 13px;\n  outline: none;\n}\n\n.ae-input:focus {\n  border-color: var(--dsw-alias-button-primary-bg, var(--dsw-alias-accent, #3b82f6));\n}\n\n.ae-input::placeholder {\n  color: var(--dsw-alias-label-dimmed);\n}\n\n.ae-input.ae-port {\n  flex: none;\n  width: 76px;\n}\n\n/* ── 账号列表 ── */\n\n.ae-list {\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n}\n\n.ae-head {\n  display: flex;\n  gap: 8px;\n  font-size: 11px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-dimmed);\n  padding: 0 2px;\n  text-transform: uppercase;\n  letter-spacing: 0.02em;\n}\n\n.ae-item {\n  display: flex;\n  gap: 8px;\n  align-items: center;\n  padding: 6px 2px;\n}\n\n.ae-colUser { flex: 1.2; }\n.ae-colPass { flex: 1.6; }\n.ae-colTotp { flex: 2.2; min-width: 0; }\n.ae-colOp { flex: none; width: 48px; }\n\n/* ── v1.22.4 TOTP 第二因素 ── */\n\n.ae-totpBtn {\n  flex: none;\n  padding: 4px 10px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 6px;\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12px;\n  cursor: pointer;\n  white-space: nowrap;\n}\n\n.ae-totpBtn:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.ae-totpPending {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 6px;\n  align-items: center;\n  min-width: 0;\n}\n\n/* v1.24.6：TOTP 绑定二维码（扫码即录入；scalable SVG，白底保证扫码识别） */\n.ae-totpQr {\n  flex-basis: 100%;\n  display: inline-flex;\n  justify-content: center;\n  padding: 8px;\n  background: #fff;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 8px;\n}\n\n.ae-totpQr svg {\n  width: 132px;\n  height: 132px;\n  display: block;\n}\n\n.ae-totpSecret {\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 11px;\n  background: var(--dsw-alias-surface-raised, rgba(0, 0, 0, 0.25));\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 4px;\n  padding: 2px 6px;\n  color: var(--dsw-alias-label-secondary);\n  word-break: break-all;\n}\n\n.ae-totpUri {\n  font-size: 11px;\n  color: var(--dsw-alias-accent, #3b82f6);\n  text-decoration: none;\n}\n\n.ae-totpUri:hover {\n  text-decoration: underline;\n}\n\n/* v1.24.7：绑定提示（去确认码后——扫码或手动录入，保存即绑定） */\n.ae-totpHint {\n  flex-basis: 100%;\n  font-size: 11px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.ae-totpBadge {\n  font-size: 12px;\n  color: var(--dsw-alias-state-warning-fg, #f59e0b);\n}\n\n.ae-totpClear {\n  display: flex;\n  gap: 6px;\n  align-items: center;\n}\n\n.ae-check {\n  display: flex;\n  gap: 8px;\n  align-items: center;\n  font-size: 12px;\n  color: var(--dsw-alias-label-secondary);\n  margin-top: 10px;\n  cursor: pointer;\n}\n\n.ae-check input {\n  accent-color: var(--dsw-alias-accent, #3b82f6);\n}\n\n.ae-del {\n  flex: none;\n  padding: 4px 10px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 6px;\n  background: transparent;\n  color: var(--dsw-alias-state-danger-fg, #f87171);\n  font-size: 12px;\n  cursor: pointer;\n}\n\n.ae-del:hover {\n  background: var(--dsw-alias-state-danger-bg, rgba(248, 113, 113, 0.12));\n}\n\n.ae-add {\n  align-self: flex-start;\n  padding: 5px 12px;\n  border: 1px dashed var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12px;\n  cursor: pointer;\n}\n\n.ae-add:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.ae-wsSelect {\n  margin-top: 8px;\n  max-width: 100%;\n  cursor: pointer;\n}\n\n/* ── 工作区白名单 chips ── */\n\n.ae-wsList {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 6px;\n}\n\n.ae-wsChip {\n  display: inline-flex;\n  align-items: center;\n  gap: 6px;\n  padding: 3px 8px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  background: var(--dsw-alias-interactive-bg-active, rgba(128, 128, 128, 0.14));\n}\n\n.ae-wsPath {\n  font-size: 12px;\n  color: var(--dsw-alias-label-primary);\n  font-family: var(--ds-font-family-code, monospace);\n  word-break: break-all;\n}\n\n.ae-wsDel {\n  flex: none;\n  width: 18px;\n  height: 18px;\n  border: none;\n  border-radius: 50%;\n  background: transparent;\n  color: var(--dsw-alias-label-dimmed);\n  font-size: 13px;\n  line-height: 1;\n  cursor: pointer;\n}\n\n.ae-wsDel:hover {\n  background: var(--dsw-alias-state-danger-bg, rgba(248, 113, 113, 0.18));\n  color: var(--dsw-alias-state-danger-fg, #f87171);\n}\n\n/* ── 错误 / 操作区 ── */\n\n.ae-error {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-state-danger-fg, #f87171);\n  word-break: break-word;\n}\n\n.ae-actions {\n  display: flex;\n  justify-content: flex-end;\n  padding-top: 4px;\n  border-top: 1px solid var(--dsw-alias-border-l1);\n}\n\n.ae-save {\n  padding: 7px 24px;\n  border: 0;\n  border-radius: 8px;\n  background: var(--dsw-alias-button-primary-bg, var(--dsw-alias-accent, #3b82f6));\n  color: var(--dsw-alias-button-primary-fg, #fff);\n  font-size: 13px;\n  font-weight: 500;\n  cursor: pointer;\n}\n\n.ae-save:hover:not(:disabled) {\n  filter: brightness(1.08);\n}\n\n.ae-save:disabled {\n  opacity: 0.6;\n  cursor: default;\n}\n";
+		const css$2 = "/* AccountsEditor — DSH 设置面板「外部访问」区块（v1.22）\n * 与 SettingsSection ss-* 同设计语言：--dsw-alias-* 语义 token，明暗自适应。 */\n\n.ae-root {\n  display: flex;\n  flex-direction: column;\n  gap: 16px;\n  padding: 12px 14px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 12px;\n  font-size: 13px;\n}\n\n.ae-warn {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-state-warning-fg, #f59e0b);\n  word-break: break-word;\n}\n\n.ae-block {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n}\n\n.ae-title {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  font-weight: 600;\n  letter-spacing: 0.02em;\n  text-transform: uppercase;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.ae-desc {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n  word-break: break-word;\n  overflow-wrap: anywhere;\n}\n\n.ae-note {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n/* ── 监听设置 / 白名单输入行 ── */\n\n.ae-row {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n}\n\n.ae-label {\n  flex: none;\n  font-size: 12px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-secondary);\n  white-space: nowrap;\n}\n\n.ae-input {\n  flex: 1;\n  min-width: 0;\n  padding: 6px 10px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  background: var(--dsw-alias-bg-module);\n  color: var(--dsw-alias-label-primary);\n  font-size: 13px;\n  outline: none;\n}\n\n.ae-input:focus {\n  border-color: var(--dsw-alias-button-primary-bg, var(--dsw-alias-accent, #3b82f6));\n}\n\n.ae-input::placeholder {\n  color: var(--dsw-alias-label-dimmed);\n}\n\n.ae-input.ae-port {\n  flex: none;\n  width: 76px;\n}\n\n/* ── 账号列表 ── */\n\n.ae-list {\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n}\n\n.ae-head {\n  display: flex;\n  gap: 8px;\n  font-size: 11px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-dimmed);\n  padding: 0 2px;\n  text-transform: uppercase;\n  letter-spacing: 0.02em;\n}\n\n.ae-item {\n  display: flex;\n  gap: 8px;\n  align-items: center;\n  padding: 6px 2px;\n}\n\n.ae-colUser { flex: 1.2; }\n.ae-colPass { flex: 1.6; }\n.ae-colTotp { flex: 2.2; min-width: 0; }\n.ae-colOp { flex: none; width: 48px; }\n\n/* ── v1.22.4 TOTP 第二因素 ── */\n\n.ae-totpBtn {\n  flex: none;\n  padding: 4px 10px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 6px;\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12px;\n  cursor: pointer;\n  white-space: nowrap;\n}\n\n.ae-totpBtn:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.ae-totpPending {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 6px;\n  align-items: center;\n  min-width: 0;\n}\n\n/* v1.24.6：TOTP 绑定二维码（扫码即录入；scalable SVG，白底保证扫码识别） */\n.ae-totpQr {\n  flex-basis: 100%;\n  display: inline-flex;\n  justify-content: center;\n  padding: 8px;\n  background: #fff;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 8px;\n}\n\n.ae-totpQr svg {\n  width: 132px;\n  height: 132px;\n  display: block;\n}\n\n.ae-totpSecret {\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 11px;\n  background: var(--dsw-alias-surface-raised, rgba(0, 0, 0, 0.25));\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 4px;\n  padding: 2px 6px;\n  color: var(--dsw-alias-label-secondary);\n  word-break: break-all;\n}\n\n.ae-totpUri {\n  font-size: 11px;\n  color: var(--dsw-alias-accent, #3b82f6);\n  text-decoration: none;\n}\n\n.ae-totpUri:hover {\n  text-decoration: underline;\n}\n\n/* v1.24.7：绑定提示（去确认码后——扫码或手动录入，保存即绑定） */\n.ae-totpHint {\n  flex-basis: 100%;\n  font-size: 11px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.ae-totpBadge {\n  font-size: 12px;\n  color: var(--dsw-alias-state-warning-fg, #f59e0b);\n}\n\n.ae-totpClear {\n  display: flex;\n  gap: 6px;\n  align-items: center;\n}\n\n.ae-check {\n  display: flex;\n  gap: 8px;\n  align-items: center;\n  font-size: 12px;\n  color: var(--dsw-alias-label-secondary);\n  margin-top: 10px;\n  cursor: pointer;\n}\n\n.ae-check input {\n  accent-color: var(--dsw-alias-accent, #3b82f6);\n}\n\n.ae-del {\n  flex: none;\n  padding: 4px 10px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 6px;\n  background: transparent;\n  color: var(--dsw-alias-state-danger-fg, #f87171);\n  font-size: 12px;\n  cursor: pointer;\n}\n\n.ae-del:hover {\n  background: var(--dsw-alias-state-danger-bg, rgba(248, 113, 113, 0.12));\n}\n\n.ae-add {\n  align-self: flex-start;\n  padding: 5px 12px;\n  border: 1px dashed var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12px;\n  cursor: pointer;\n}\n\n.ae-add:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.ae-wsSelect {\n  margin-top: 8px;\n  max-width: 100%;\n  cursor: pointer;\n}\n\n/* ── 工作区白名单 chips ── */\n\n.ae-wsList {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 6px;\n}\n\n.ae-wsChip {\n  display: inline-flex;\n  align-items: center;\n  gap: 6px;\n  padding: 3px 8px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  background: var(--dsw-alias-interactive-bg-active, rgba(128, 128, 128, 0.14));\n}\n\n.ae-wsPath {\n  font-size: 12px;\n  color: var(--dsw-alias-label-primary);\n  font-family: var(--ds-font-family-code, monospace);\n  word-break: break-all;\n}\n\n.ae-wsDel {\n  flex: none;\n  width: 18px;\n  height: 18px;\n  border: none;\n  border-radius: 50%;\n  background: transparent;\n  color: var(--dsw-alias-label-dimmed);\n  font-size: 13px;\n  line-height: 1;\n  cursor: pointer;\n}\n\n.ae-wsDel:hover {\n  background: var(--dsw-alias-state-danger-bg, rgba(248, 113, 113, 0.18));\n  color: var(--dsw-alias-state-danger-fg, #f87171);\n}\n\n/* ── 错误 / 操作区 ── */\n\n.ae-error {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-state-danger-fg, #f87171);\n  word-break: break-word;\n}\n\n.ae-actions {\n  display: flex;\n  justify-content: flex-end;\n  padding-top: 4px;\n  border-top: 1px solid var(--dsw-alias-border-l1);\n}\n\n.ae-save {\n  padding: 7px 24px;\n  border: 0;\n  border-radius: 8px;\n  background: var(--dsw-alias-button-primary-bg, var(--dsw-alias-accent, #3b82f6));\n  color: var(--dsw-alias-button-primary-fg, #fff);\n  font-size: 13px;\n  font-weight: 500;\n  cursor: pointer;\n}\n\n.ae-save:hover:not(:disabled) {\n  filter: brightness(1.08);\n}\n\n.ae-save:disabled {\n  opacity: 0.6;\n  cursor: default;\n}\n\n/* ── v1.26.2 建议问答页配置（PublicAskEditor：开放容器白名单 chips + key/地址展示）── */\n\n.ae-chips {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 6px;\n  margin: 8px 0 4px;\n}\n\n.ae-chip {\n  padding: 4px 12px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 999px;\n  background: transparent;\n  color: var(--dsw-alias-text-primary);\n  font-size: 12px;\n  cursor: pointer;\n  transition: background 0.15s ease, border-color 0.15s ease;\n}\n\n.ae-chip:hover {\n  border-color: var(--dsw-alias-accent, #0ba875);\n}\n\n.ae-chipOn {\n  background: var(--dsw-alias-accent, #0ba875);\n  border-color: var(--dsw-alias-accent, #0ba875);\n  color: #fff;\n}\n\n.ae-saved {\n  margin-left: 10px;\n  font-size: 12px;\n  color: var(--dsw-alias-state-success-fg, #4ade80);\n}\n\n.ae-err {\n  margin-left: 10px;\n  font-size: 12px;\n  color: var(--dsw-alias-state-danger-fg, #f87171);\n}\n\n.ae-key {\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 12px;\n  padding: 2px 8px;\n  border-radius: 6px;\n  background: var(--dsw-alias-bg-l2);\n  color: var(--dsw-alias-text-primary);\n  word-break: break-all;\n  user-select: all;\n}\n\n.ae-copy {\n  flex: none;\n  margin-left: 8px;\n  padding: 3px 10px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 6px;\n  background: transparent;\n  color: var(--dsw-alias-text-primary);\n  font-size: 12px;\n  cursor: pointer;\n}\n\n.ae-copy:hover {\n  border-color: var(--dsw-alias-accent, #0ba875);\n  color: var(--dsw-alias-accent, #0ba875);\n}\n\n.ae-rows {\n  display: flex;\n  flex-direction: column;\n  gap: 6px;\n  margin-top: 8px;\n}\n\n.ae-labelDim {\n  opacity: 0.65;\n  min-width: 96px;\n}\n";
 		if (typeof document !== "undefined" && document.querySelector("style[data-sp-css=\"AccountsEditor\"]") === null) {
 			const tag = document.createElement("style");
 			tag.setAttribute("data-sp-css", "AccountsEditor");
@@ -3818,6 +3818,251 @@ Instruction-following style:
 			});
 		}
 		//#endregion
+		//#region src/client/PublicAskEditor.tsx
+		/**
+		* PublicAskEditor.tsx — 建议问答页配置（v1.26.2，S142 用户需求）
+		*
+		* 功能：
+		*  - **开放容器白名单**：从 /serenity/cccs 拉取候选容器，chips 选择哪些开放；
+		*    空白名单 = 全部容器开放（向后兼容 v1.26.1 全局开放语义）。
+		*  - **key + 地址展示**：经 /serenity/public-ask 获取访问 key 与各开放容器 URL
+		*    （用户：配置处需能获取 key 和地址——管理员复制分享给使用者）。
+		*
+		* 数据通道（plugin 全局）：
+		*  - GET /serenity/cccs       候选容器（node half discoverCccs）
+		*  - GET /serenity/public-ask key + 地址（x-serenity-ui 头）
+		*  - PUT /serenity/config     publicAsk.allowed 白名单保存（accounts-api saveConfig）
+		*/
+		function PublicAskEditor(props) {
+			const { publicAskOn } = props;
+			const [candidates, setCandidates] = (0, react.useState)([]);
+			const [allowed, setAllowed] = (0, react.useState)(null);
+			const [info, setInfo] = (0, react.useState)(null);
+			const [busy, setBusy] = (0, react.useState)(false);
+			const [error, setError] = (0, react.useState)(null);
+			const [saved, setSaved] = (0, react.useState)(false);
+			(0, react.useEffect)(() => {
+				let alive = true;
+				(async () => {
+					try {
+						const cfg = await fetchConfig();
+						if (!alive) return;
+						setAllowed(cfg?.publicAsk?.allowed ?? []);
+					} catch {}
+				})();
+				return () => {
+					alive = false;
+				};
+			}, []);
+			(0, react.useEffect)(() => {
+				let alive = true;
+				(async () => {
+					try {
+						const res = await fetch("/serenity/cccs", { headers: { accept: "application/json" } });
+						if (!res.ok) return;
+						const body = await res.json();
+						if (alive) setCandidates(body?.cccs ?? []);
+					} catch {}
+				})();
+				return () => {
+					alive = false;
+				};
+			}, []);
+			(0, react.useEffect)(() => {
+				if (!publicAskOn) return;
+				let alive = true;
+				(async () => {
+					try {
+						const res = await fetch("/serenity/public-ask", { headers: {
+							accept: "application/json",
+							"x-serenity-ui": "1"
+						} });
+						if (!res.ok) return;
+						const body = await res.json();
+						if (alive) setInfo(body);
+					} catch {}
+				})();
+				return () => {
+					alive = false;
+				};
+			}, [publicAskOn]);
+			const toggleAllowed = (name) => {
+				setAllowed((cur) => {
+					const base = cur ?? [];
+					return base.includes(name) ? base.filter((n) => n !== name) : [...base, name];
+				});
+			};
+			const save = async () => {
+				if (allowed === null) return;
+				setBusy(true);
+				setError(null);
+				setSaved(false);
+				try {
+					const cfg = await saveConfig({ publicAsk: { allowed } });
+					if (cfg) {
+						setAllowed(cfg.publicAsk.allowed ?? []);
+						setSaved(true);
+						setTimeout(() => setSaved(false), 2e3);
+					}
+				} catch (err) {
+					setError(err instanceof Error ? err.message : String(err));
+				} finally {
+					setBusy(false);
+				}
+			};
+			const allOpen = (allowed ?? []).length === 0;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "ae-root",
+				children: [
+					!publicAskOn && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "ae-warn",
+						children: "⚠️ 建议问答页当前关闭——先开启上方「建议问答页」开关，外部访问才生效。"
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "ae-block",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h4", {
+								className: "ae-title",
+								children: "开放容器"
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+								className: "ae-desc",
+								children: [
+									"允许外部问答的认知容器（URL：/c/<容器名>）。",
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: "未选择 = 全部容器开放" }),
+									"； 选择后仅白名单内容器可访问。"
+								]
+							}),
+							candidates.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "ae-note",
+								children: "暂无可选容器（/serenity/cccs 未返回条目——先在工作区打开一个 CCC）"
+							}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: "ae-chips",
+								children: candidates.map((c) => {
+									const on = (allowed ?? []).includes(c.name);
+									return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+										type: "button",
+										className: `ae-chip${on ? " ae-chipOn" : ""}`,
+										onClick: () => toggleAllowed(c.name),
+										title: `${c.root}（${c.roles.length} 角色）`,
+										children: [c.name, on ? " ✓" : ""]
+									}, c.name);
+								})
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "ae-actions",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "ae-save",
+										disabled: busy || allowed === null,
+										onClick: () => void save(),
+										children: busy ? "保存中…" : "保存白名单"
+									}),
+									saved && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "ae-saved",
+										children: "✓ 已保存"
+									}),
+									error && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "ae-err",
+										children: error
+									})
+								]
+							}),
+							allOpen && allowed !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "ae-note",
+								children: "当前为「全部开放」——所有发现到的认知容器都可问答。"
+							})
+						]
+					}),
+					publicAskOn && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "ae-block",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h4", {
+							className: "ae-title",
+							children: "访问 Key 与地址"
+						}), info ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "ae-desc",
+								children: "把下面的 key 与地址分享给使用者；key 已自动保存在其浏览器（localStorage）。"
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "ae-row",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "ae-label",
+										children: "访问 Key"
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+										className: "ae-key",
+										children: info.key
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "ae-copy",
+										onClick: () => {
+											navigator.clipboard?.writeText(info.key);
+										},
+										children: "复制"
+									})
+								]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "ae-row",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "ae-label",
+										children: "容器列表页"
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+										className: "ae-key",
+										children: info.listUrl
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "ae-copy",
+										onClick: () => {
+											navigator.clipboard?.writeText(info.listUrl);
+										},
+										children: "复制"
+									})
+								]
+							}),
+							info.urls.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "ae-rows",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: "ae-label",
+									children: "各容器地址"
+								}), info.urls.map((u) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									className: "ae-row",
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+											className: "ae-label ae-labelDim",
+											children: u.name
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+											className: "ae-key",
+											children: u.url
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											className: "ae-copy",
+											onClick: () => {
+												navigator.clipboard?.writeText(u.url);
+											},
+											children: "复制"
+										})
+									]
+								}, u.name))]
+							})
+						] }) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							className: "ae-note",
+							children: "开启后此处显示访问 key 与地址…"
+						})]
+					})
+				]
+			});
+		}
+		//#endregion
 		//#region \0sp-css:/home/yh/home/home-serenity/AI_LAB/dsh-serenity-plugin/hooks/dsh-serenity-hooks/src/client/SettingsSection
 		const css = "/* SettingsSection — dsh 原生设置面板 serenity-hooks 简单配置页\n   v1.21.1 看齐 dsh 自身：官方 settings 设计语言——\n   section > title + intro + group(groupTitle) + rowCard 行卡；\n   全部 --dsw-alias-* token（与 ui-settings-models 同词汇表）。 */\n\n/* 页面容器（官方 .section：flex column gap 12） */\n.ss-section {\n  display: flex;\n  flex-direction: column;\n  gap: 14px;\n  max-width: 720px;\n  color: var(--dsw-alias-label-primary);\n}\n\n/* 页面标题（官方 .title：16px/24 500） */\n.ss-title {\n  margin: 0;\n  font-size: 16px;\n  line-height: 24px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n/* 页面说明（官方 .intro：14px/22 tertiary） */\n.ss-intro {\n  margin: 0;\n  font-size: 14px;\n  line-height: 22px;\n  color: var(--dsw-alias-label-tertiary);\n  word-break: break-word;\n  overflow-wrap: anywhere;\n}\n\n/* 分组（多级标题：分组标题 + 行卡列表） */\n.ss-group {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n}\n\n/* 分组标题（二级：12px/18 500 secondary——官方 fieldLabel 风格） */\n.ss-groupTitle {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  font-weight: 600;\n  letter-spacing: 0.02em;\n  text-transform: uppercase;\n  color: var(--dsw-alias-label-secondary);\n}\n\n/* 行卡列表（官方 .rows：无 marker，gap 8） */\n.ss-rows {\n  list-style: none;\n  margin: 0;\n  padding: 0;\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n}\n\n/* 行卡（官方 .rowCard：border-l2 r12 padding 12/14） */\n.ss-rowCard {\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 12px;\n  padding: 12px 14px;\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 16px;\n}\n\n/* 行卡文本（标题 + 说明 左列） */\n.ss-rowText {\n  display: flex;\n  flex-direction: column;\n  gap: 3px;\n  min-width: 0;\n  flex: 1;\n}\n\n/* 行卡标题（官方 .rowName：14px/22 500） */\n.ss-rowName {\n  font-size: 14px;\n  line-height: 22px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n/* 行卡说明（12px/18 tertiary） */\n.ss-rowDesc {\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n  word-break: break-word;\n  overflow-wrap: anywhere;\n}\n\n/* 行卡控件（右置） */\n.ss-rowControl {\n  flex: none;\n  display: flex;\n  align-items: center;\n}\n\n/* 开关（官方 token 的自绘 toggle：track 22px，thumb 16px） */\n.ss-switch {\n  position: relative;\n  flex: none;\n  width: 40px;\n  height: 22px;\n  cursor: pointer;\n}\n\n.ss-switch input {\n  position: absolute;\n  opacity: 0;\n  width: 100%;\n  height: 100%;\n  margin: 0;\n  cursor: pointer;\n}\n\n.ss-switchTrack {\n  position: absolute;\n  inset: 0;\n  border-radius: 11px;\n  background: var(--dsw-alias-interactive-bg-active, rgba(128, 128, 128, 0.3));\n  transition: background var(--ds-transition-duration-fast, 0.15s) var(--ds-ease-in-out, ease);\n}\n\n.ss-switchTrack::after {\n  content: '';\n  position: absolute;\n  top: 3px;\n  left: 3px;\n  width: 16px;\n  height: 16px;\n  border-radius: 50%;\n  background: var(--dsw-alias-label-primary, #eee);\n  transition: transform var(--ds-transition-duration-fast, 0.15s) var(--ds-ease-in-out, ease);\n}\n\n.ss-switch input:checked + .ss-switchTrack {\n  background: var(--dsw-alias-state-success-primary, #22c55e);\n}\n\n.ss-switch input:checked + .ss-switchTrack::after {\n  transform: translateX(18px);\n}\n\n.ss-switch input:disabled + .ss-switchTrack {\n  opacity: 0.4;\n  cursor: default;\n}\n\n/* 阈值行（滑块 + 值） */\n.ss-threshold {\n  display: flex;\n  align-items: center;\n  gap: 12px;\n}\n\n.ss-threshold input[type='range'] {\n  width: 160px;\n}\n\n/* Skiff 调试端口输入（number；关闭时跟随 disabled 半透明） */\n.ss-portInput {\n  width: 96px;\n  padding: 6px 8px;\n  border-radius: 8px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  background: var(--dsw-alias-fill-l1, rgba(128, 128, 128, 0.08));\n  color: var(--dsw-alias-label-primary);\n  font-size: 13px;\n  font-variant-numeric: tabular-nums;\n  text-align: right;\n}\n\n.ss-portInput:disabled {\n  opacity: 0.4;\n  cursor: default;\n}\n\n.ss-value {\n  min-width: 40px;\n  font-variant-numeric: tabular-nums;\n  font-size: 13px;\n  font-weight: 600;\n  color: var(--dsw-alias-label-primary);\n  text-align: right;\n}\n\n/* 底部帮助行 */\n.ss-hint {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n  word-break: break-word;\n  overflow-wrap: anywhere;\n}\n\n/* 降级提示 */\n.ss-degrade {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-state-warn-label);\n  word-break: break-word;\n  overflow-wrap: anywhere;\n}\n";
 		if (typeof document !== "undefined" && document.querySelector("style[data-sp-css=\"SettingsSection\"]") === null) {
@@ -3913,6 +4158,7 @@ Instruction-following style:
 			const skiffPort = value?.skiffDebugPort ?? 3099;
 			const acpOn = value?.acpEnabled ?? false;
 			const acpPort = value?.acpHttpPort ?? 3100;
+			const publicAskOn = value?.publicAskEnabled ?? false;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "ss-section",
 				children: [
@@ -4002,30 +4248,48 @@ Instruction-following style:
 						}) })]
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Group, {
-						title: "ACP",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(RowCard, {
-							title: "ACP JSON-RPC 端点",
-							desc: "程序化调用 Skiff 角色（指定 CCC+角色+会话；实验性，仅监听 127.0.0.1）",
-							control: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Toggle, {
-								checked: acpOn,
-								onChange: (on) => toggle("acpEnabled", on)
-							})
-						}) }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(RowCard, {
-							title: "HTTP 端口",
-							desc: "ACP JSON-RPC 端口（1024 ~ 65535，默认 3100）",
-							control: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-								className: "ss-threshold",
-								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-									className: "ss-portInput",
-									type: "number",
-									min: 1024,
-									max: 65535,
-									value: acpPort,
-									disabled: !acpOn,
-									onChange: (e) => setAcpPort(Number(e.target.value))
+						title: "ACP / 建议问答",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(RowCard, {
+								title: "ACP JSON-RPC 端点",
+								desc: "程序化调用 Skiff 角色（指定 CCC+角色+会话；实验性，仅监听 127.0.0.1）",
+								control: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Toggle, {
+									checked: acpOn,
+									onChange: (on) => toggle("acpEnabled", on)
 								})
-							})
-						}) })]
+							}) }),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(RowCard, {
+								title: "建议问答页",
+								desc: "按认知容器暴露问答页供他人验证（需 key；首次开启自动生成固定 key，见 ~/.dsh/serenity-hooks.json）",
+								control: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Toggle, {
+									checked: publicAskOn,
+									onChange: (on) => toggle("publicAskEnabled", on)
+								})
+							}) }),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(RowCard, {
+								title: "HTTP 端口",
+								desc: "ACP JSON-RPC + 问答页共用端口（1024 ~ 65535，默认 3100）",
+								control: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+									className: "ss-threshold",
+									children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										className: "ss-portInput",
+										type: "number",
+										min: 1024,
+										max: 65535,
+										value: acpPort,
+										disabled: !acpOn && !publicAskOn,
+										onChange: (e) => setAcpPort(Number(e.target.value))
+									})
+								})
+							}) })
+						]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "ss-group",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+							className: "ss-groupTitle",
+							children: "建议问答"
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(PublicAskEditor, { publicAskOn })]
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: "ss-group",

package/lib/index.js

@@ -11,6 +11,18 @@ import { createUserMessage } from "@deepseek-ai/dsh-llm";
 import { createHmac, randomBytes, randomUUID, scryptSync, timingSafeEqual } from "node:crypto";
 import { deriveEventMessage } from "@deepseek-ai/dsh-session";
 import { createServer, request } from "node:http";
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+//#endregion
 //#region src/ccc.ts
 /**
 * ccc.ts — CCC 纯逻辑层（零 DSH 依赖，可独立单测）
@@ -5248,6 +5260,14 @@ function installSettingsSection(ctx, ns, schema, entry, hooks) {
 }
 //#endregion
 //#region src/settings-section.ts
+var settings_section_exports = /* @__PURE__ */ __exportAll({
+	SERENITY_SETTINGS_NS: () => SERENITY_SETTINGS_NS,
+	defaultSimpleSettings: () => defaultSimpleSettings,
+	entryDefaults: () => entryDefaults,
+	readSimpleSettings: () => readSimpleSettings,
+	registerSettingsSection: () => registerSettingsSection,
+	simpleSettingsSchema: () => simpleSettingsSchema
+});
 /** 简单配置命名空间（dsh 设置面板的 section id / settings.yaml section） */
 const SERENITY_SETTINGS_NS = "serenity-hooks";
 /** schemastery schema（与 DSH 各插件 Config 同款） */
@@ -5259,7 +5279,8 @@ const simpleSettingsSchema = z.object({
 	skiffEnabled: z.boolean().default(false),
 	skiffDebugPort: z.number().min(1024).max(65535).default(3099),
 	acpEnabled: z.boolean().default(false),
-	acpHttpPort: z.number().min(1024).max(65535).default(3100)
+	acpHttpPort: z.number().min(1024).max(65535).default(3100),
+	publicAskEnabled: z.boolean().default(false)
 });
 /** 从插件 Config 提取 entry 默认（settings base 层） */
 function entryDefaults(config) {
@@ -5271,7 +5292,8 @@ function entryDefaults(config) {
 		skiffEnabled: config.skiff?.enabled ?? false,
 		skiffDebugPort: config.skiff?.debugPort ?? 3099,
 		acpEnabled: config.acp?.enabled ?? false,
-		acpHttpPort: config.acp?.httpPort ?? 3100
+		acpHttpPort: config.acp?.httpPort ?? 3100,
+		publicAskEnabled: config.publicAsk?.enabled ?? false
 	};
 }
 /** 运行时源（installSettingsSection 注入：settings scope 或 entry fallback） */
@@ -5286,7 +5308,8 @@ function defaultSimpleSettings() {
 		skiffEnabled: false,
 		skiffDebugPort: 3099,
 		acpEnabled: false,
-		acpHttpPort: 3100
+		acpHttpPort: 3100,
+		publicAskEnabled: false
 	};
 }
 /**
@@ -7369,6 +7392,10 @@ function defaultAdvancedSettings() {
 		persona: {
 			mode: "",
 			overrideText: ""
+		},
+		publicAsk: {
+			key: "",
+			allowed: []
 		}
 	};
 }
@@ -7420,6 +7447,7 @@ function mergeWithDefaults(raw) {
 	const rebuild = o.rebuild ?? {};
 	const naming = o.naming ?? {};
 	const persona = o.persona ?? {};
+	const publicAsk = o.publicAsk ?? {};
 	return {
 		gateway: {
 			enabled: typeof gateway.enabled === "boolean" ? gateway.enabled : def.gateway.enabled,
@@ -7439,6 +7467,10 @@ function mergeWithDefaults(raw) {
 		persona: {
 			mode: typeof persona.mode === "string" ? persona.mode : def.persona.mode,
 			overrideText: typeof persona.overrideText === "string" ? persona.overrideText : def.persona.overrideText
+		},
+		publicAsk: {
+			key: typeof publicAsk.key === "string" ? publicAsk.key : def.publicAsk.key,
+			allowed: Array.isArray(publicAsk.allowed) ? publicAsk.allowed.filter((n) => typeof n === "string" && n !== "") : def.publicAsk.allowed
 		}
 	};
 }
@@ -7479,12 +7511,39 @@ function updateAdvancedSettings(patch) {
 		persona: ps !== void 0 ? {
 			mode: typeof ps.mode === "string" ? ps.mode : current.persona.mode,
 			overrideText: typeof ps.overrideText === "string" ? ps.overrideText : current.persona.overrideText
-		} : current.persona
+		} : current.persona,
+		publicAsk: patch.publicAsk !== void 0 ? {
+			key: typeof patch.publicAsk.key === "string" ? patch.publicAsk.key : current.publicAsk.key,
+			allowed: Array.isArray(patch.publicAsk.allowed) ? patch.publicAsk.allowed.filter((n) => typeof n === "string" && n !== "") : current.publicAsk.allowed
+		} : current.publicAsk
 	};
 	writeAdvancedSettings(next);
 	return next;
 }
 /**
+* 确保问答页访问 key 存在（首次启用自动生成 + 写回固定，用户拍板"配置时生成"）：
+* 读取全局配置 publicAsk.key；为空 → 生成 32 字节随机 hex（64 字符）→ 写回持久化。
+* @returns 当前固定 key（已生成则返回既有值——**幂等**，不会覆盖用户手改的 key）
+*/
+function ensurePublicAskKey() {
+	const current = readAdvancedSettings();
+	if (current.publicAsk.key !== "") return current.publicAsk.key;
+	const key = randomBytes(32).toString("hex");
+	updateAdvancedSettings({ publicAsk: {
+		key,
+		allowed: current.publicAsk.allowed
+	} });
+	return key;
+}
+/** 校验问答页访问 key（timing-safe；key 未生成 → 恒 false——没有 key 不工作） */
+function verifyPublicAskKey(provided) {
+	const expected = readAdvancedSettings().publicAsk.key;
+	if (!expected || typeof provided !== "string" || provided === "") return false;
+	const a = Buffer.from(provided);
+	const b = Buffer.from(expected);
+	return a.length === b.length && timingSafeEqual(a, b);
+}
+/**
 * 一次性迁移（v1.21.x → v1.22）：旧版把 `serenityAdvanced` 存在 CCC localstore.json；
 * 新版归 plugin 全局文件。全局文件已存在 → 跳过（幂等）；localstore 无旧节 → 跳过。
 * @param root - CCC 根（localstore.json 所在目录）
@@ -7519,7 +7578,8 @@ function toWire(settings) {
 		},
 		rebuild: settings.rebuild,
 		naming: settings.naming,
-		persona: settings.persona
+		persona: settings.persona,
+		publicAsk: { allowed: [...settings.publicAsk.allowed] }
 	};
 }
 /**
@@ -7583,6 +7643,11 @@ function applyWirePatch(wire) {
 		if (typeof wire.persona.overrideText === "string") psPatch.overrideText = wire.persona.overrideText;
 		patch.persona = psPatch;
 	}
+	if (wire.publicAsk !== void 0 && Array.isArray(wire.publicAsk.allowed)) {
+		const paPatch = { ...current.publicAsk };
+		paPatch.allowed = wire.publicAsk.allowed.filter((n) => typeof n === "string" && n !== "");
+		patch.publicAsk = paPatch;
+	}
 	return updateAdvancedSettings(patch);
 }
 //#endregion
@@ -8246,6 +8311,8 @@ const HANDYMEN_PATH = "/serenity/handymen";
 const UPLOAD_PATH = "/serenity/image-upload";
 const FILE_UPLOAD_PATH = "/serenity/file-upload";
 const CONFIG_PATH = "/serenity/config";
+const CCCS_PATH = "/serenity/cccs";
+const PUBLIC_ASK_PATH = "/serenity/public-ask";
 /** 图片落盘目录（CCC 根相对；S142 图片自动识别基础设施——粘贴图片落盘供 agent 经 CCC vlm MSM 自主处理） */
 const IMAGE_UPLOAD_DIR = "_tmp/images_from_user";
 const IMAGE_MEDIA_TYPES = /* @__PURE__ */ new Set([
@@ -8536,6 +8603,63 @@ function registerStatusApi(ctx, opts = {}) {
 			}
 		}
 	});
+	ctx.webServer.register({
+		kind: "exact",
+		path: CCCS_PATH,
+		handler: async (req, res) => {
+			try {
+				if (req.method !== "GET") {
+					sendJson$2(res, 405, { error: "method not allowed" });
+					return;
+				}
+				const url = new URL(req.url ?? "/", "http://127.0.0.1");
+				const root = findSerenityRoot(resolveWorkspace(ctx, {
+					sessionId: url.searchParams.get("sessionId") ?? void 0,
+					workspace: url.searchParams.get("workspace") ?? void 0
+				})) ?? "";
+				const { discoverCccs } = await Promise.resolve().then(() => skiff_debug_exports);
+				sendJson$2(res, 200, { cccs: await discoverCccs(ctx, root) });
+			} catch (err) {
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
+			}
+		}
+	});
+	ctx.webServer.register({
+		kind: "exact",
+		path: PUBLIC_ASK_PATH,
+		handler: async (req, res) => {
+			try {
+				if (req.method !== "GET") {
+					sendJson$2(res, 405, { error: "method not allowed" });
+					return;
+				}
+				if (req.headers["x-serenity-ui"] !== "1") {
+					sendJson$2(res, 403, { error: "仅限 WebUI（key 属敏感凭据）" });
+					return;
+				}
+				const settings = readAdvancedSettings();
+				const { readSimpleSettings } = await Promise.resolve().then(() => settings_section_exports);
+				const simple = readSimpleSettings();
+				const allowed = settings.publicAsk.allowed;
+				const port = simple.acpHttpPort ?? 3100;
+				const base = `http://127.0.0.1:${port}`;
+				const containerUrls = allowed.map((name) => ({
+					name,
+					url: `${base}/c/${encodeURIComponent(name)}`
+				}));
+				sendJson$2(res, 200, {
+					enabled: simple.publicAskEnabled ?? false,
+					port,
+					key: ensurePublicAskKey(),
+					allowed,
+					urls: containerUrls,
+					listUrl: `${base}/`
+				});
+			} catch (err) {
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
+			}
+		}
+	});
 }
 //#endregion
 //#region src/seams/env.ts
@@ -11108,6 +11232,13 @@ x.lex;
 *
 * 实验性质：未开启时零资源占用（无监听、无 agent 创建）。
 */
+var skiff_debug_exports = /* @__PURE__ */ __exportAll({
+	discoverCccs: () => discoverCccs,
+	renderSkiffMarkdown: () => renderSkiffMarkdown,
+	skiffDebugPage: () => skiffDebugPage,
+	startSkiffDebugServer: () => startSkiffDebugServer,
+	stopSkiffDebugServer: () => stopSkiffDebugServer
+});
 /** 运行中的调试服务（单实例；进程级） */
 let active$1 = null;
 function readBody$1(req) {
@@ -11126,7 +11257,7 @@ function sendJson$1(res, status, payload) {
 	});
 	res.end(body);
 }
-function sendHtml(res, html) {
+function sendHtml$1(res, html) {
 	res.writeHead(200, {
 		"Content-Type": "text/html; charset=utf-8",
 		"Cache-Control": "no-store"
@@ -11411,7 +11542,7 @@ async function handle$1(ctx, defaultRoot, webPort, req, res) {
 	try {
 		const url = (req.url ?? "/").split("?")[0] ?? "/";
 		if (req.method === "GET" && url === "/") {
-			sendHtml(res, skiffDebugPage(await discoverCccs(ctx, defaultRoot), defaultRoot, webPort));
+			sendHtml$1(res, skiffDebugPage(await discoverCccs(ctx, defaultRoot), defaultRoot, webPort));
 			return;
 		}
 		if (req.method === "POST" && url === "/ask") {
@@ -11653,12 +11784,16 @@ function rpcError(id, code, message) {
 //#endregion
 //#region src/acp-http.ts
 /**
-* acp-http.ts — ACP HTTP JSON-RPC 端点（F4c，v1.26.0 实验性）
+* acp-http.ts — ACP HTTP JSON-RPC + 建议问答页（F4c/F4d，v1.26.x 实验性）
 *
 * node:http 服务（默认关，仅监听 127.0.0.1；启停 = 人工——设置面板「Serenity」
-* 页 ACP 区块开关，不随插件加载自动启动；仿 skiff 调试服务模式）。
+* 页 ACP 区块开关 / 问答页开关，不随插件加载自动启动；仿 skiff 调试服务模式）。
 *
-* - POST / → JSON-RPC 2.0 单帧/批处理（body 为 JSON）→ JSON-RPC 响应数组
+* - POST /          → JSON-RPC 2.0 单帧/批处理（acpEnabled 门控；ACP 程序化面）
+* - GET  /          → 容器列表页（publicAskEnabled 门控；v1.26.2：只列已开放容器）
+* - GET  /c/<name>  → 单容器问答页（v1.26.2：URL 体现容器名，用户只输 key）
+* - POST /c/<name>/ask → 该容器问答（key 校验 + allowed 白名单校验）
+* - POST /ask       → 兼容旧形态 { key, ccc, ... }（key 校验 + allowed 校验）
 *
 * 与 skiff 调试页（人工测试面）共享同一会话核心（acp-core → skiff-core）；
 * 企业微信桥（F4c-2）同进程直调 acp-core 处理器函数，不经本端点。
@@ -11684,15 +11819,23 @@ function sendJson(res, status, payload) {
 	});
 	res.end(body);
 }
+function sendHtml(res, html) {
+	res.writeHead(200, {
+		"Content-Type": "text/html; charset=utf-8",
+		"Cache-Control": "no-store"
+	});
+	res.end(html);
+}
 /**
-* 启动 ACP HTTP JSON-RPC 端点（单实例；重复启动幂等返回既有实例）。
+* 启动 ACP HTTP JSON-RPC + 建议问答页服务（单实例；重复启动幂等返回既有实例）。
 * @param ctx 插件上下文（AcpServer 内部经 skiff-core 创建 agent）
 * @param port 监听端口（仅 127.0.0.1）
+* @param defaultRoot 默认 CCC 根（问答页候选发现兜底；resolveSkiffRoot 传入）
 */
-async function startAcpHttpServer(ctx, port) {
+async function startAcpHttpServer(ctx, port, defaultRoot) {
 	if (active) return;
 	const server = createServer((req, res) => {
-		handle(ctx, req, res);
+		handle(ctx, defaultRoot ?? "", req, res);
 	});
 	await new Promise((resolve, reject) => {
 		server.once("error", reject);
@@ -11702,7 +11845,11 @@ async function startAcpHttpServer(ctx, port) {
 		server,
 		port
 	};
-	console.log(`[serenity-hooks] ✓ ACP HTTP JSON-RPC: http://127.0.0.1:${port}（session/new 支持 {ccc, role, sessionId?}）`);
+	const s = readSimpleSettings();
+	const faces = [];
+	if (s.acpEnabled) faces.push("JSON-RPC");
+	if (s.publicAskEnabled) faces.push("问答页(key 认证)");
+	console.log(`[serenity-hooks] ✓ ACP HTTP: http://127.0.0.1:${port}（${faces.join(" + ") || "未开启任何面"}；session/new 支持 {ccc, role, sessionId?}）`);
 }
 function stopAcpHttpServer() {
 	if (!active) return;
@@ -11711,10 +11858,15 @@ function stopAcpHttpServer() {
 	} catch {}
 	active = null;
 }
-async function handle(ctx, req, res) {
+async function handle(ctx, defaultRoot, req, res) {
 	try {
 		const url = (req.url ?? "/").split("?")[0] ?? "/";
+		const s = readSimpleSettings();
 		if (req.method === "POST" && url === "/") {
+			if (!s.acpEnabled) {
+				sendJson(res, 403, { error: "ACP JSON-RPC disabled (enable in Serenity settings)" });
+				return;
+			}
 			let body;
 			try {
 				body = JSON.parse(await readBody(req));
@@ -11732,11 +11884,299 @@ async function handle(ctx, req, res) {
 			sendJson(res, 200, await dispatchRpc(new AcpServer(ctx), body));
 			return;
 		}
+		if (!s.publicAskEnabled) {
+			if (req.method === "GET" && (url === "/" || url.startsWith("/c/"))) {
+				sendHtml(res, publicAskDisabledHtml());
+				return;
+			}
+			if (req.method === "POST" && (url === "/ask" || url.startsWith("/c/"))) {
+				sendJson(res, 403, { error: "public ask disabled (enable in Serenity settings)" });
+				return;
+			}
+			sendJson(res, 404, { error: "not found" });
+			return;
+		}
+		const containerAllowed = (name) => {
+			const allowed = readAdvancedSettings().publicAsk.allowed;
+			return allowed.length === 0 || allowed.includes(name);
+		};
+		const cMatch = /^\/c\/([^/]+)$/.exec(url);
+		if (req.method === "GET" && cMatch) {
+			const name = decodeURIComponent(cMatch[1] ?? "");
+			const ccc = (await discoverCccs(ctx, defaultRoot || (findSerenityRoot(process.cwd()) ?? ""))).find((c) => c.name === name);
+			if (!ccc) {
+				sendHtml(res, publicAskContainerUnknownHtml(name));
+				return;
+			}
+			if (!containerAllowed(name)) {
+				sendHtml(res, publicAskContainerClosedHtml(name));
+				return;
+			}
+			sendHtml(res, publicAskContainerPage(ccc));
+			return;
+		}
+		if (req.method === "GET" && url === "/") {
+			sendHtml(res, publicAskListPage((await discoverCccs(ctx, defaultRoot || (findSerenityRoot(process.cwd()) ?? ""))).filter((c) => containerAllowed(c.name))));
+			return;
+		}
+		const aMatch = /^\/c\/([^/]+)\/ask$/.exec(url);
+		if (req.method === "POST" && aMatch) {
+			const name = decodeURIComponent(aMatch[1] ?? "");
+			const ccc = (await discoverCccs(ctx, defaultRoot || (findSerenityRoot(process.cwd()) ?? ""))).find((c) => c.name === name);
+			if (!ccc || !containerAllowed(name)) {
+				sendJson(res, 403, { error: `container "${name}" is not open for public ask` });
+				return;
+			}
+			let body;
+			try {
+				const parsed = JSON.parse(await readBody(req));
+				if (parsed === null || typeof parsed !== "object") throw new Error("not an object");
+				body = parsed;
+			} catch {
+				sendJson(res, 400, { error: "invalid JSON body" });
+				return;
+			}
+			await handleAskParsed(ctx, ccc, body, res);
+			return;
+		}
+		if (req.method === "POST" && url === "/ask") {
+			let body;
+			try {
+				const parsed = JSON.parse(await readBody(req));
+				if (parsed === null || typeof parsed !== "object") throw new Error("not an object");
+				body = parsed;
+			} catch {
+				sendJson(res, 400, { error: "invalid JSON body" });
+				return;
+			}
+			const cccValue = typeof body.ccc === "string" && body.ccc !== "" ? body.ccc : void 0;
+			const nameValue = typeof body.name === "string" && body.name !== "" ? body.name : void 0;
+			let ccc;
+			if (nameValue) ccc = (await discoverCccs(ctx, defaultRoot || (findSerenityRoot(process.cwd()) ?? ""))).find((c) => c.name === nameValue);
+			else if (cccValue) {
+				ccc = (await discoverCccs(ctx, defaultRoot || (findSerenityRoot(process.cwd()) ?? ""))).find((c) => c.root === cccValue);
+				if (!ccc && cccValue !== "") ccc = {
+					root: cccValue,
+					name: cccValue.split("/").filter(Boolean).pop() ?? cccValue,
+					roles: [...readSkiffRoles(cccValue).keys()]
+				};
+			}
+			if (!ccc || !containerAllowed(ccc.name)) {
+				sendJson(res, 403, { error: "container is not open for public ask" });
+				return;
+			}
+			await handleAskParsed(ctx, ccc, body, res);
+			return;
+		}
 		sendJson(res, 404, { error: "not found" });
 	} catch (err) {
 		sendJson(res, 500, { error: err?.message ?? String(err) });
 	}
 }
+/**
+* 单容器问答核心（/c/<name>/ask 与 /ask 共用）：
+* body { key, role?, question, sessionId? } → key 校验（401）→ 角色缺省取 CCC 第一个
+* → 会话延续（v1.25.10 语义，静默新建）→ askSkiff(0 全量轨迹) → { answer, answer_html, sessionId, continued, trajectory }
+*/
+async function handleAskParsed(ctx, ccc, body, res) {
+	if (!verifyPublicAskKey(typeof body.key === "string" ? body.key : void 0)) {
+		sendJson(res, 401, { error: "invalid or missing key" });
+		return;
+	}
+	const root = ccc.root;
+	const roleName = typeof body.role === "string" && body.role !== "" ? body.role : void 0;
+	const question = typeof body.question === "string" ? body.question : "";
+	const sessionId = typeof body.sessionId === "string" && body.sessionId !== "" ? body.sessionId : void 0;
+	if (!question.trim()) {
+		sendJson(res, 400, { error: "empty question" });
+		return;
+	}
+	const roles = readSkiffRoles(root);
+	const explicit = roleName ? roles.get(roleName) : void 0;
+	const effectiveRole = roleName && explicit ? roleName : roles.keys().next().value;
+	const effectiveCfg = (roleName && explicit ? explicit : effectiveRole ? roles.get(effectiveRole) : void 0) ?? void 0;
+	if (!effectiveRole || !effectiveCfg) {
+		sendJson(res, 400, { error: `no skiff role available in ccc: ${root}` });
+		return;
+	}
+	let agent;
+	let continued = false;
+	if (sessionId) {
+		const info = skiffSessionInfo(sessionId);
+		const live = getSkiffAgent(sessionId);
+		if (info && live && info.role === effectiveRole && info.ccc === root) {
+			agent = live;
+			continued = true;
+		}
+	}
+	if (!agent) agent = (await createSkiffAgent(ctx, root, effectiveRole, effectiveCfg, readHandymanConfig(root)?.defaultModel)).agent;
+	const result = await askSkiff(ctx, agent, question, 0);
+	sendJson(res, 200, {
+		answer: result.answer,
+		answer_html: renderSkiffMarkdown(result.answer),
+		sessionId: result.sessionId,
+		continued,
+		trajectory: result.trajectory
+	});
+}
+/** 问答页未启用提示页 */
+function publicAskDisabledHtml() {
+	return `<!DOCTYPE html>
+<html lang="zh"><head><meta charset="utf-8"><title>Serenity Public Ask</title></head>
+<body style="font-family:system-ui;padding:48px;text-align:center;color:#57606a">
+<h2>Serenity Public Ask</h2>
+<p>问答页未启用（请在 dsh 设置面板「Serenity」页开启「建议问答」）。</p>
+</body></html>`;
+}
+/** 容器不存在提示页（URL 容器名不在已发现 CCC 中） */
+function publicAskContainerUnknownHtml(name) {
+	return `<!DOCTYPE html>
+<html lang="zh"><head><meta charset="utf-8"><title>Serenity Public Ask</title></head>
+<body style="font-family:system-ui;padding:48px;text-align:center;color:#57606a">
+<h2>Serenity Public Ask</h2>
+<p>认知容器「${name}」不存在。</p>
+<p style="font-size:13px"><a href="/" style="color:#0ba875">返回容器列表</a></p>
+</body></html>`;
+}
+/** 容器未开放提示页（白名单外） */
+function publicAskContainerClosedHtml(name) {
+	return `<!DOCTYPE html>
+<html lang="zh"><head><meta charset="utf-8"><title>Serenity Public Ask</title></head>
+<body style="font-family:system-ui;padding:48px;text-align:center;color:#57606a">
+<h2>Serenity Public Ask</h2>
+<p>认知容器「${name}」当前未开放问答（管理员在设置面板「开放容器」中配置）。</p>
+<p style="font-size:13px"><a href="/" style="color:#0ba875">返回容器列表</a></p>
+</body></html>`;
+}
+/** 页面基础样式（列表页 + 单容器页共用） */
+const ASK_CSS = `
+  :root { color-scheme: light dark; }
+  body { font-family: system-ui, -apple-system, sans-serif; margin: 0; padding: 24px; background: #f6f7f9; color: #1f2328; }
+  @media (prefers-color-scheme: dark) { body { background: #1a1b1e; color: #e6e6e6; } }
+  main { max-width: 720px; margin: 0 auto; }
+  h1 { font-size: 18px; margin: 0 0 4px; }
+  .sub { opacity: .65; font-size: 13px; margin-bottom: 16px; }
+  label { font-size: 13px; font-weight: 600; display: block; margin: 12px 0 4px; }
+  input, select, textarea { width: 100%; box-sizing: border-box; padding: 8px 10px; border-radius: 8px; border: 1px solid #d0d7de; background: #fff; color: inherit; font-size: 14px; }
+  @media (prefers-color-scheme: dark) { input, select, textarea { background: #26282c; border-color: #3a3d42; } }
+  textarea { min-height: 72px; resize: vertical; }
+  button { margin-top: 12px; padding: 9px 18px; border-radius: 8px; border: 0; background: #0ba875; color: #fff; font-size: 14px; font-weight: 600; cursor: pointer; }
+  button:disabled { opacity: .55; cursor: wait; }
+  .card { background: #fff; border: 1px solid #d0d7de; border-radius: 10px; padding: 14px 16px; margin-bottom: 10px; display: block; text-decoration: none; color: inherit; }
+  @media (prefers-color-scheme: dark) { .card { background: #26282c; border-color: #3a3d42; } }
+  .card:hover { border-color: #0ba875; }
+  .card .cname { font-weight: 600; font-size: 15px; }
+  .card .cmeta { opacity: .6; font-size: 12px; margin-top: 2px; }
+  #answer { background: #fff; border: 1px solid #d0d7de; border-radius: 8px; padding: 12px; margin-top: 16px; font-size: 14px; line-height: 1.6; min-height: 48px; word-break: break-word; }
+  @media (prefers-color-scheme: dark) { #answer { background: #26282c; border-color: #3a3d42; } }
+  #answer p { margin: 6px 0; }
+  #answer h1, #answer h2, #answer h3 { margin: 12px 0 6px; font-size: 15px; }
+  #answer code { background: rgba(127,127,127,.14); border-radius: 4px; padding: 1px 5px; font-size: 13px; font-family: ui-monospace, monospace; }
+  #answer pre { background: rgba(127,127,127,.1); border-radius: 8px; padding: 10px 12px; overflow-x: auto; }
+  #answer ul, #answer ol { margin: 6px 0; padding-left: 22px; }
+  .err { color: #cf222e; white-space: pre-wrap; }
+  .muted { opacity: .6; font-size: 13px; }
+  details.think { margin: 8px 0; border: 1px solid rgba(210,153,34,.4); border-radius: 8px; background: rgba(210,153,34,.06); }
+  details.think summary { cursor: pointer; padding: 6px 10px; font-size: 12px; color: #d29922; font-weight: 600; }
+  .empty { text-align: center; opacity: .7; padding: 24px 0; }
+  .back { display: inline-block; margin-bottom: 12px; font-size: 13px; color: #0ba875; text-decoration: none; }
+  .ccname { font-weight: 600; color: #0ba875; }
+`;
+/** 容器列表页（v1.26.2）：只列已开放容器，点击进入 /c/<name> */
+function publicAskListPage(cccs) {
+	const cards = cccs.map((c) => `
+    <a class="card" href="/c/${encodeURIComponent(c.name)}">
+      <div class="cname">${c.name}</div>
+      <div class="cmeta">${c.roles.length} 个问答角色 · 点击进入</div>
+    </a>`).join("") || "<div class=\"empty\">暂无可问答的认知容器（管理员尚未开放）</div>";
+	return `<!DOCTYPE html>
+<html lang="zh">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Serenity Public Ask</title>
+<style>${ASK_CSS}</style>
+</head>
+<body>
+<main>
+  <h1>Serenity Public Ask</h1>
+  <div class="sub">选择认知容器开始提问（访问需 key，key 由管理员提供）</div>
+  ${cards}
+</main>
+</body>
+</html>`;
+}
+/** 单容器问答页（v1.26.2）：URL 锁定容器，key + 角色；key 自动存 localStorage */
+function publicAskContainerPage(ccc) {
+	const data = JSON.stringify({
+		name: ccc.name,
+		root: ccc.root,
+		roles: ccc.roles
+	}).replace(/</g, "\\u003c");
+	return `<!DOCTYPE html>
+<html lang="zh">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Serenity Public Ask · ${ccc.name}</title>
+<style>${ASK_CSS}</style>
+</head>
+<body>
+<main>
+  <a class="back" href="/">← 容器列表</a>
+  <h1>Serenity Public Ask</h1>
+  <div class="sub">认知容器：<span class="ccname">${ccc.name}</span></div>
+  <label for="key">访问 Key</label>
+  <input id="key" type="password" placeholder="请输入访问 key" autocomplete="off">
+  <label for="role">问答角色</label>
+  <select id="role"></select>
+  <label for="q">问题</label>
+  <textarea id="q" placeholder="向该认知容器提问…"></textarea>
+  <button id="ask">提问</button>
+  <div id="answer" class="muted">等待提问…</div>
+</main>
+<script id="ask-data" type="application/json">${data}<\/script>
+<script>
+const CCC = JSON.parse(document.getElementById('ask-data').textContent)
+const KEY_STORE = 'serenity-public-ask-key'
+const keyInput = document.getElementById('key')
+const roleSel = document.getElementById('role')
+const btn = document.getElementById('ask')
+const answer = document.getElementById('answer')
+let sessionId = ''
+// 角色下拉（v1.26.2 用户：3100 应能选择角色）
+roleSel.innerHTML = (CCC.roles || []).map((r) => '<option value="' + r + '">' + r + '</option>').join('') || '<option value="">(无角色)</option>'
+// key 自动从 localStorage 恢复（v1.26.2：输入一次后浏览器记住，无需每次粘贴）
+try { const saved = localStorage.getItem(KEY_STORE); if (saved) keyInput.value = saved } catch {}
+btn.addEventListener('click', async () => {
+  const q = document.getElementById('q').value.trim()
+  const key = keyInput.value.trim()
+  const role = roleSel.value || undefined
+  if (!q) { answer.className = 'err'; answer.textContent = '请输入问题'; return }
+  if (!key) { answer.className = 'err'; answer.textContent = '请输入访问 key（没有 key 无法使用）'; return }
+  // 输入即记住（保存到 localStorage；下次自动填充）
+  try { localStorage.setItem(KEY_STORE, key) } catch {}
+  btn.disabled = true
+  answer.className = 'muted'
+  answer.textContent = '运行中…'
+  try {
+    const res = await fetch('/c/' + encodeURIComponent(CCC.name) + '/ask', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ key, role, question: q, sessionId: sessionId || undefined }) })
+    const data = await res.json()
+    if (!res.ok) { sessionId = ''; throw new Error(data.error || ('HTTP ' + res.status)) }
+    answer.className = ''
+    answer.innerHTML = data.answer_html || data.answer || '（空回答）'
+    sessionId = data.sessionId || ''
+  } catch (err) {
+    answer.className = 'err'
+    answer.textContent = String(err.message || err)
+  } finally {
+    btn.disabled = false
+  }
+})
+<\/script>
+</body>
+</html>`;
+}
 //#endregion
 //#region src/index.ts
 const name = "dsh-serenity-hooks";
@@ -11882,20 +12322,24 @@ function readWebPort(ctx) {
 	}
 }
 /**
-* F4c ACP HTTP JSON-RPC 端点装配（v1.26.0 实验性）：启停 = 人工（设置面板
-* 「Serenity」页 ACP 区块开关，settings 持久化）。会话创建/延续走 acp-core →
-* skiff-core（与调试页同核心）；仅监听 127.0.0.1；未开启零资源占用。
+* F4c ACP HTTP + F4d 建议问答页装配（v1.26.x 实验性）：启停 = 人工（设置面板
+* 「Serenity」页 ACP / 问答页开关，settings 持久化）。任一面开启即启动服务
+* （同一端口：POST / = JSON-RPC 需 acpEnabled；GET / + /ask = 问答页需 publicAskEnabled）。
+* 会话创建/延续走 acp-core → skiff-core；仅监听 127.0.0.1；未开启零资源占用。
 */
 function registerAcp(ctx) {
 	let started = false;
 	const sync = () => {
 		const s = readSimpleSettings();
-		if (s.acpEnabled && !started) startAcpHttpServer(ctx, s.acpHttpPort).then(() => {
-			started = true;
-		}).catch((err) => {
-			console.error(`[serenity-hooks] ✗ ACP HTTP 端点启动失败: ${String(err?.message ?? err)}`);
-		});
-		else if (!s.acpEnabled && started) {
+		const anyFace = s.acpEnabled || s.publicAskEnabled;
+		if (anyFace && !started) {
+			const root = resolveSkiffRoot(ctx);
+			startAcpHttpServer(ctx, s.acpHttpPort, root ?? void 0).then(() => {
+				started = true;
+			}).catch((err) => {
+				console.error(`[serenity-hooks] ✗ ACP HTTP 服务启动失败: ${String(err?.message ?? err)}`);
+			});
+		} else if (!anyFace && started) {
 			stopAcpHttpServer();
 			started = false;
 		}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shgroup/dsh-serenity-hooks",
-  "version": "1.26.0",
+  "version": "1.26.2",
   "description": "宁静号 ACC harness — Native Cordis 插件（DeepSeek Harness 运行时）。真实 DSH 工具注册（cc_fs/session/acc_msm 等 9 工具）+ 拦截缝机械约束（safe-mode/路径守卫/会话落盘）+ 系统提示词注入（ACC/CCE/Constraints/SKILL/Session 五块）。适配 DSH 公开版（deepseek-ai/deepseek-harness 0.1.0-rc）。",
   "license": "MIT",
   "repository": {