@shgroup/dsh-serenity-hooks 1.26.1 → 1.26.3

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-serenity-hooks",
-  "version": "1.26.1",
+  "version": "1.26.3",
   "main": "lib/index.js",
   "description": "宁静号 ACC harness（Native Cordis 插件）：真实 DSH 工具 cc_fs/session/acc_msm/eap/neat/cce/handyman/session_rebuild/skiff_admin + 拦截缝机械约束（safe-mode/路径守卫）+ 高级设定面板（双端口网关/账号管理）+ Skiff 认知子集角色（实验性）。适配 DSH 公开版（0.1.0-rc，deepseek-ai/deepseek-harness）。",
   "engines": {

package/lib/client.js

@@ -3245,7 +3245,7 @@ window.__ModuleLoader__.load({
 			if (!res.ok) return null;
 			return (await res.json()).config ?? null;
 		}
-		/** PUT 配置（账号 patch + 工作区白名单 + persona 彩蛋）→ 返回保存后的 wire */
+		/** PUT 配置（账号 patch + 工作区白名单 + persona 彩蛋 + 开放容器白名单）→ 返回保存后的 wire */
 		async function saveConfig(patch) {
 			const res = await fetch(CONFIG_PATH, {
 				method: "PUT",
@@ -3263,7 +3263,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region \0sp-css:/home/yh/home/home-serenity/AI_LAB/dsh-serenity-plugin/hooks/dsh-serenity-hooks/src/client/AccountsEditor
-		const css$2 = "/* AccountsEditor — DSH 设置面板「外部访问」区块（v1.22）\n * 与 SettingsSection ss-* 同设计语言：--dsw-alias-* 语义 token，明暗自适应。 */\n\n.ae-root {\n  display: flex;\n  flex-direction: column;\n  gap: 16px;\n  padding: 12px 14px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 12px;\n  font-size: 13px;\n}\n\n.ae-warn {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-state-warning-fg, #f59e0b);\n  word-break: break-word;\n}\n\n.ae-block {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n}\n\n.ae-title {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  font-weight: 600;\n  letter-spacing: 0.02em;\n  text-transform: uppercase;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.ae-desc {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n  word-break: break-word;\n  overflow-wrap: anywhere;\n}\n\n.ae-note {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n/* ── 监听设置 / 白名单输入行 ── */\n\n.ae-row {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n}\n\n.ae-label {\n  flex: none;\n  font-size: 12px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-secondary);\n  white-space: nowrap;\n}\n\n.ae-input {\n  flex: 1;\n  min-width: 0;\n  padding: 6px 10px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  background: var(--dsw-alias-bg-module);\n  color: var(--dsw-alias-label-primary);\n  font-size: 13px;\n  outline: none;\n}\n\n.ae-input:focus {\n  border-color: var(--dsw-alias-button-primary-bg, var(--dsw-alias-accent, #3b82f6));\n}\n\n.ae-input::placeholder {\n  color: var(--dsw-alias-label-dimmed);\n}\n\n.ae-input.ae-port {\n  flex: none;\n  width: 76px;\n}\n\n/* ── 账号列表 ── */\n\n.ae-list {\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n}\n\n.ae-head {\n  display: flex;\n  gap: 8px;\n  font-size: 11px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-dimmed);\n  padding: 0 2px;\n  text-transform: uppercase;\n  letter-spacing: 0.02em;\n}\n\n.ae-item {\n  display: flex;\n  gap: 8px;\n  align-items: center;\n  padding: 6px 2px;\n}\n\n.ae-colUser { flex: 1.2; }\n.ae-colPass { flex: 1.6; }\n.ae-colTotp { flex: 2.2; min-width: 0; }\n.ae-colOp { flex: none; width: 48px; }\n\n/* ── v1.22.4 TOTP 第二因素 ── */\n\n.ae-totpBtn {\n  flex: none;\n  padding: 4px 10px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 6px;\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12px;\n  cursor: pointer;\n  white-space: nowrap;\n}\n\n.ae-totpBtn:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.ae-totpPending {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 6px;\n  align-items: center;\n  min-width: 0;\n}\n\n/* v1.24.6：TOTP 绑定二维码（扫码即录入；scalable SVG，白底保证扫码识别） */\n.ae-totpQr {\n  flex-basis: 100%;\n  display: inline-flex;\n  justify-content: center;\n  padding: 8px;\n  background: #fff;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 8px;\n}\n\n.ae-totpQr svg {\n  width: 132px;\n  height: 132px;\n  display: block;\n}\n\n.ae-totpSecret {\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 11px;\n  background: var(--dsw-alias-surface-raised, rgba(0, 0, 0, 0.25));\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 4px;\n  padding: 2px 6px;\n  color: var(--dsw-alias-label-secondary);\n  word-break: break-all;\n}\n\n.ae-totpUri {\n  font-size: 11px;\n  color: var(--dsw-alias-accent, #3b82f6);\n  text-decoration: none;\n}\n\n.ae-totpUri:hover {\n  text-decoration: underline;\n}\n\n/* v1.24.7：绑定提示（去确认码后——扫码或手动录入，保存即绑定） */\n.ae-totpHint {\n  flex-basis: 100%;\n  font-size: 11px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.ae-totpBadge {\n  font-size: 12px;\n  color: var(--dsw-alias-state-warning-fg, #f59e0b);\n}\n\n.ae-totpClear {\n  display: flex;\n  gap: 6px;\n  align-items: center;\n}\n\n.ae-check {\n  display: flex;\n  gap: 8px;\n  align-items: center;\n  font-size: 12px;\n  color: var(--dsw-alias-label-secondary);\n  margin-top: 10px;\n  cursor: pointer;\n}\n\n.ae-check input {\n  accent-color: var(--dsw-alias-accent, #3b82f6);\n}\n\n.ae-del {\n  flex: none;\n  padding: 4px 10px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 6px;\n  background: transparent;\n  color: var(--dsw-alias-state-danger-fg, #f87171);\n  font-size: 12px;\n  cursor: pointer;\n}\n\n.ae-del:hover {\n  background: var(--dsw-alias-state-danger-bg, rgba(248, 113, 113, 0.12));\n}\n\n.ae-add {\n  align-self: flex-start;\n  padding: 5px 12px;\n  border: 1px dashed var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12px;\n  cursor: pointer;\n}\n\n.ae-add:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.ae-wsSelect {\n  margin-top: 8px;\n  max-width: 100%;\n  cursor: pointer;\n}\n\n/* ── 工作区白名单 chips ── */\n\n.ae-wsList {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 6px;\n}\n\n.ae-wsChip {\n  display: inline-flex;\n  align-items: center;\n  gap: 6px;\n  padding: 3px 8px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  background: var(--dsw-alias-interactive-bg-active, rgba(128, 128, 128, 0.14));\n}\n\n.ae-wsPath {\n  font-size: 12px;\n  color: var(--dsw-alias-label-primary);\n  font-family: var(--ds-font-family-code, monospace);\n  word-break: break-all;\n}\n\n.ae-wsDel {\n  flex: none;\n  width: 18px;\n  height: 18px;\n  border: none;\n  border-radius: 50%;\n  background: transparent;\n  color: var(--dsw-alias-label-dimmed);\n  font-size: 13px;\n  line-height: 1;\n  cursor: pointer;\n}\n\n.ae-wsDel:hover {\n  background: var(--dsw-alias-state-danger-bg, rgba(248, 113, 113, 0.18));\n  color: var(--dsw-alias-state-danger-fg, #f87171);\n}\n\n/* ── 错误 / 操作区 ── */\n\n.ae-error {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-state-danger-fg, #f87171);\n  word-break: break-word;\n}\n\n.ae-actions {\n  display: flex;\n  justify-content: flex-end;\n  padding-top: 4px;\n  border-top: 1px solid var(--dsw-alias-border-l1);\n}\n\n.ae-save {\n  padding: 7px 24px;\n  border: 0;\n  border-radius: 8px;\n  background: var(--dsw-alias-button-primary-bg, var(--dsw-alias-accent, #3b82f6));\n  color: var(--dsw-alias-button-primary-fg, #fff);\n  font-size: 13px;\n  font-weight: 500;\n  cursor: pointer;\n}\n\n.ae-save:hover:not(:disabled) {\n  filter: brightness(1.08);\n}\n\n.ae-save:disabled {\n  opacity: 0.6;\n  cursor: default;\n}\n";
+		const css$2 = "/* AccountsEditor — DSH 设置面板「外部访问」区块（v1.22）\n * 与 SettingsSection ss-* 同设计语言：--dsw-alias-* 语义 token，明暗自适应。 */\n\n.ae-root {\n  display: flex;\n  flex-direction: column;\n  gap: 16px;\n  padding: 12px 14px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 12px;\n  font-size: 13px;\n}\n\n.ae-warn {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-state-warning-fg, #f59e0b);\n  word-break: break-word;\n}\n\n.ae-block {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n}\n\n.ae-title {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  font-weight: 600;\n  letter-spacing: 0.02em;\n  text-transform: uppercase;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.ae-desc {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n  word-break: break-word;\n  overflow-wrap: anywhere;\n}\n\n.ae-note {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n/* ── 监听设置 / 白名单输入行 ── */\n\n.ae-row {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n}\n\n.ae-label {\n  flex: none;\n  font-size: 12px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-secondary);\n  white-space: nowrap;\n}\n\n.ae-input {\n  flex: 1;\n  min-width: 0;\n  padding: 6px 10px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  background: var(--dsw-alias-bg-module);\n  color: var(--dsw-alias-label-primary);\n  font-size: 13px;\n  outline: none;\n}\n\n.ae-input:focus {\n  border-color: var(--dsw-alias-button-primary-bg, var(--dsw-alias-accent, #3b82f6));\n}\n\n.ae-input::placeholder {\n  color: var(--dsw-alias-label-dimmed);\n}\n\n.ae-input.ae-port {\n  flex: none;\n  width: 76px;\n}\n\n/* ── 账号列表 ── */\n\n.ae-list {\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n}\n\n.ae-head {\n  display: flex;\n  gap: 8px;\n  font-size: 11px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-dimmed);\n  padding: 0 2px;\n  text-transform: uppercase;\n  letter-spacing: 0.02em;\n}\n\n.ae-item {\n  display: flex;\n  gap: 8px;\n  align-items: center;\n  padding: 6px 2px;\n}\n\n.ae-colUser { flex: 1.2; }\n.ae-colPass { flex: 1.6; }\n.ae-colTotp { flex: 2.2; min-width: 0; }\n.ae-colOp { flex: none; width: 48px; }\n\n/* ── v1.22.4 TOTP 第二因素 ── */\n\n.ae-totpBtn {\n  flex: none;\n  padding: 4px 10px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 6px;\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12px;\n  cursor: pointer;\n  white-space: nowrap;\n}\n\n.ae-totpBtn:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.ae-totpPending {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 6px;\n  align-items: center;\n  min-width: 0;\n}\n\n/* v1.24.6：TOTP 绑定二维码（扫码即录入；scalable SVG，白底保证扫码识别） */\n.ae-totpQr {\n  flex-basis: 100%;\n  display: inline-flex;\n  justify-content: center;\n  padding: 8px;\n  background: #fff;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 8px;\n}\n\n.ae-totpQr svg {\n  width: 132px;\n  height: 132px;\n  display: block;\n}\n\n.ae-totpSecret {\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 11px;\n  background: var(--dsw-alias-surface-raised, rgba(0, 0, 0, 0.25));\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 4px;\n  padding: 2px 6px;\n  color: var(--dsw-alias-label-secondary);\n  word-break: break-all;\n}\n\n.ae-totpUri {\n  font-size: 11px;\n  color: var(--dsw-alias-accent, #3b82f6);\n  text-decoration: none;\n}\n\n.ae-totpUri:hover {\n  text-decoration: underline;\n}\n\n/* v1.24.7：绑定提示（去确认码后——扫码或手动录入，保存即绑定） */\n.ae-totpHint {\n  flex-basis: 100%;\n  font-size: 11px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.ae-totpBadge {\n  font-size: 12px;\n  color: var(--dsw-alias-state-warning-fg, #f59e0b);\n}\n\n.ae-totpClear {\n  display: flex;\n  gap: 6px;\n  align-items: center;\n}\n\n.ae-check {\n  display: flex;\n  gap: 8px;\n  align-items: center;\n  font-size: 12px;\n  color: var(--dsw-alias-label-secondary);\n  margin-top: 10px;\n  cursor: pointer;\n}\n\n.ae-check input {\n  accent-color: var(--dsw-alias-accent, #3b82f6);\n}\n\n.ae-del {\n  flex: none;\n  padding: 4px 10px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 6px;\n  background: transparent;\n  color: var(--dsw-alias-state-danger-fg, #f87171);\n  font-size: 12px;\n  cursor: pointer;\n}\n\n.ae-del:hover {\n  background: var(--dsw-alias-state-danger-bg, rgba(248, 113, 113, 0.12));\n}\n\n.ae-add {\n  align-self: flex-start;\n  padding: 5px 12px;\n  border: 1px dashed var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12px;\n  cursor: pointer;\n}\n\n.ae-add:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.ae-wsSelect {\n  margin-top: 8px;\n  max-width: 100%;\n  cursor: pointer;\n}\n\n/* ── 工作区白名单 chips ── */\n\n.ae-wsList {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 6px;\n}\n\n.ae-wsChip {\n  display: inline-flex;\n  align-items: center;\n  gap: 6px;\n  padding: 3px 8px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  background: var(--dsw-alias-interactive-bg-active, rgba(128, 128, 128, 0.14));\n}\n\n.ae-wsPath {\n  font-size: 12px;\n  color: var(--dsw-alias-label-primary);\n  font-family: var(--ds-font-family-code, monospace);\n  word-break: break-all;\n}\n\n.ae-wsDel {\n  flex: none;\n  width: 18px;\n  height: 18px;\n  border: none;\n  border-radius: 50%;\n  background: transparent;\n  color: var(--dsw-alias-label-dimmed);\n  font-size: 13px;\n  line-height: 1;\n  cursor: pointer;\n}\n\n.ae-wsDel:hover {\n  background: var(--dsw-alias-state-danger-bg, rgba(248, 113, 113, 0.18));\n  color: var(--dsw-alias-state-danger-fg, #f87171);\n}\n\n/* ── 错误 / 操作区 ── */\n\n.ae-error {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-state-danger-fg, #f87171);\n  word-break: break-word;\n}\n\n.ae-actions {\n  display: flex;\n  justify-content: flex-end;\n  padding-top: 4px;\n  border-top: 1px solid var(--dsw-alias-border-l1);\n}\n\n.ae-save {\n  padding: 7px 24px;\n  border: 0;\n  border-radius: 8px;\n  background: var(--dsw-alias-button-primary-bg, var(--dsw-alias-accent, #3b82f6));\n  color: var(--dsw-alias-button-primary-fg, #fff);\n  font-size: 13px;\n  font-weight: 500;\n  cursor: pointer;\n}\n\n.ae-save:hover:not(:disabled) {\n  filter: brightness(1.08);\n}\n\n.ae-save:disabled {\n  opacity: 0.6;\n  cursor: default;\n}\n\n/* ── v1.26.2 建议问答页配置（PublicAskEditor：开放容器白名单 chips + key/地址展示）── */\n\n.ae-chips {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 6px;\n  margin: 8px 0 4px;\n}\n\n.ae-chip {\n  padding: 4px 12px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 999px;\n  background: transparent;\n  color: var(--dsw-alias-text-primary);\n  font-size: 12px;\n  cursor: pointer;\n  transition: background 0.15s ease, border-color 0.15s ease;\n}\n\n.ae-chip:hover {\n  border-color: var(--dsw-alias-accent, #0ba875);\n}\n\n.ae-chipOn {\n  background: var(--dsw-alias-accent, #0ba875);\n  border-color: var(--dsw-alias-accent, #0ba875);\n  color: #fff;\n}\n\n.ae-saved {\n  margin-left: 10px;\n  font-size: 12px;\n  color: var(--dsw-alias-state-success-fg, #4ade80);\n}\n\n.ae-err {\n  margin-left: 10px;\n  font-size: 12px;\n  color: var(--dsw-alias-state-danger-fg, #f87171);\n}\n\n.ae-key {\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 12px;\n  padding: 2px 8px;\n  border-radius: 6px;\n  background: var(--dsw-alias-bg-l2);\n  color: var(--dsw-alias-text-primary);\n  word-break: break-all;\n  user-select: all;\n}\n\n.ae-copy {\n  flex: none;\n  margin-left: 8px;\n  padding: 3px 10px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 6px;\n  background: transparent;\n  color: var(--dsw-alias-text-primary);\n  font-size: 12px;\n  cursor: pointer;\n}\n\n.ae-copy:hover {\n  border-color: var(--dsw-alias-accent, #0ba875);\n  color: var(--dsw-alias-accent, #0ba875);\n}\n\n.ae-rows {\n  display: flex;\n  flex-direction: column;\n  gap: 6px;\n  margin-top: 8px;\n}\n\n.ae-labelDim {\n  opacity: 0.65;\n  min-width: 96px;\n}\n";
 		if (typeof document !== "undefined" && document.querySelector("style[data-sp-css=\"AccountsEditor\"]") === null) {
 			const tag = document.createElement("style");
 			tag.setAttribute("data-sp-css", "AccountsEditor");
@@ -3818,6 +3818,251 @@ Instruction-following style:
 			});
 		}
 		//#endregion
+		//#region src/client/PublicAskEditor.tsx
+		/**
+		* PublicAskEditor.tsx — 建议问答页配置（v1.26.2，S142 用户需求）
+		*
+		* 功能：
+		*  - **开放容器白名单**：从 /serenity/cccs 拉取候选容器，chips 选择哪些开放；
+		*    空白名单 = 全部容器开放（向后兼容 v1.26.1 全局开放语义）。
+		*  - **key + 地址展示**：经 /serenity/public-ask 获取访问 key 与各开放容器 URL
+		*    （用户：配置处需能获取 key 和地址——管理员复制分享给使用者）。
+		*
+		* 数据通道（plugin 全局）：
+		*  - GET /serenity/cccs       候选容器（node half discoverCccs）
+		*  - GET /serenity/public-ask key + 地址（x-serenity-ui 头）
+		*  - PUT /serenity/config     publicAsk.allowed 白名单保存（accounts-api saveConfig）
+		*/
+		function PublicAskEditor(props) {
+			const { publicAskOn } = props;
+			const [candidates, setCandidates] = (0, react.useState)([]);
+			const [allowed, setAllowed] = (0, react.useState)(null);
+			const [info, setInfo] = (0, react.useState)(null);
+			const [busy, setBusy] = (0, react.useState)(false);
+			const [error, setError] = (0, react.useState)(null);
+			const [saved, setSaved] = (0, react.useState)(false);
+			(0, react.useEffect)(() => {
+				let alive = true;
+				(async () => {
+					try {
+						const cfg = await fetchConfig();
+						if (!alive) return;
+						setAllowed(cfg?.publicAsk?.allowed ?? []);
+					} catch {}
+				})();
+				return () => {
+					alive = false;
+				};
+			}, []);
+			(0, react.useEffect)(() => {
+				let alive = true;
+				(async () => {
+					try {
+						const res = await fetch("/serenity/cccs", { headers: { accept: "application/json" } });
+						if (!res.ok) return;
+						const body = await res.json();
+						if (alive) setCandidates(body?.cccs ?? []);
+					} catch {}
+				})();
+				return () => {
+					alive = false;
+				};
+			}, []);
+			(0, react.useEffect)(() => {
+				if (!publicAskOn) return;
+				let alive = true;
+				(async () => {
+					try {
+						const res = await fetch("/serenity/public-ask", { headers: {
+							accept: "application/json",
+							"x-serenity-ui": "1"
+						} });
+						if (!res.ok) return;
+						const body = await res.json();
+						if (alive) setInfo(body);
+					} catch {}
+				})();
+				return () => {
+					alive = false;
+				};
+			}, [publicAskOn]);
+			const toggleAllowed = (name) => {
+				setAllowed((cur) => {
+					const base = cur ?? [];
+					return base.includes(name) ? base.filter((n) => n !== name) : [...base, name];
+				});
+			};
+			const save = async () => {
+				if (allowed === null) return;
+				setBusy(true);
+				setError(null);
+				setSaved(false);
+				try {
+					const cfg = await saveConfig({ publicAsk: { allowed } });
+					if (cfg) {
+						setAllowed(cfg.publicAsk.allowed ?? []);
+						setSaved(true);
+						setTimeout(() => setSaved(false), 2e3);
+					}
+				} catch (err) {
+					setError(err instanceof Error ? err.message : String(err));
+				} finally {
+					setBusy(false);
+				}
+			};
+			const allOpen = (allowed ?? []).length === 0;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "ae-root",
+				children: [
+					!publicAskOn && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "ae-warn",
+						children: "⚠️ 建议问答页当前关闭——先开启上方「建议问答页」开关，外部访问才生效。"
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "ae-block",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h4", {
+								className: "ae-title",
+								children: "开放容器"
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+								className: "ae-desc",
+								children: [
+									"允许外部问答的认知容器（URL：/c/<容器名>）。",
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: "未选择 = 全部容器开放" }),
+									"； 选择后仅白名单内容器可访问。"
+								]
+							}),
+							candidates.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "ae-note",
+								children: "暂无可选容器（/serenity/cccs 未返回条目——先在工作区打开一个 CCC）"
+							}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: "ae-chips",
+								children: candidates.map((c) => {
+									const on = (allowed ?? []).includes(c.name);
+									return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+										type: "button",
+										className: `ae-chip${on ? " ae-chipOn" : ""}`,
+										onClick: () => toggleAllowed(c.name),
+										title: `${c.root}（${c.roles.length} 角色）`,
+										children: [c.name, on ? " ✓" : ""]
+									}, c.name);
+								})
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "ae-actions",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "ae-save",
+										disabled: busy || allowed === null,
+										onClick: () => void save(),
+										children: busy ? "保存中…" : "保存白名单"
+									}),
+									saved && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "ae-saved",
+										children: "✓ 已保存"
+									}),
+									error && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "ae-err",
+										children: error
+									})
+								]
+							}),
+							allOpen && allowed !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "ae-note",
+								children: "当前为「全部开放」——所有发现到的认知容器都可问答。"
+							})
+						]
+					}),
+					publicAskOn && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "ae-block",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h4", {
+							className: "ae-title",
+							children: "访问 Key 与地址"
+						}), info ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "ae-desc",
+								children: "把下面的 key 与地址分享给使用者；key 已自动保存在其浏览器（localStorage）。"
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "ae-row",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "ae-label",
+										children: "访问 Key"
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+										className: "ae-key",
+										children: info.key
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "ae-copy",
+										onClick: () => {
+											navigator.clipboard?.writeText(info.key);
+										},
+										children: "复制"
+									})
+								]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "ae-row",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "ae-label",
+										children: "容器列表页"
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+										className: "ae-key",
+										children: info.listUrl
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "ae-copy",
+										onClick: () => {
+											navigator.clipboard?.writeText(info.listUrl);
+										},
+										children: "复制"
+									})
+								]
+							}),
+							info.urls.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "ae-rows",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: "ae-label",
+									children: "各容器地址"
+								}), info.urls.map((u) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									className: "ae-row",
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+											className: "ae-label ae-labelDim",
+											children: u.name
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+											className: "ae-key",
+											children: u.url
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											className: "ae-copy",
+											onClick: () => {
+												navigator.clipboard?.writeText(u.url);
+											},
+											children: "复制"
+										})
+									]
+								}, u.name))]
+							})
+						] }) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							className: "ae-note",
+							children: "开启后此处显示访问 key 与地址…"
+						})]
+					})
+				]
+			});
+		}
+		//#endregion
 		//#region \0sp-css:/home/yh/home/home-serenity/AI_LAB/dsh-serenity-plugin/hooks/dsh-serenity-hooks/src/client/SettingsSection
 		const css = "/* SettingsSection — dsh 原生设置面板 serenity-hooks 简单配置页\n   v1.21.1 看齐 dsh 自身：官方 settings 设计语言——\n   section > title + intro + group(groupTitle) + rowCard 行卡；\n   全部 --dsw-alias-* token（与 ui-settings-models 同词汇表）。 */\n\n/* 页面容器（官方 .section：flex column gap 12） */\n.ss-section {\n  display: flex;\n  flex-direction: column;\n  gap: 14px;\n  max-width: 720px;\n  color: var(--dsw-alias-label-primary);\n}\n\n/* 页面标题（官方 .title：16px/24 500） */\n.ss-title {\n  margin: 0;\n  font-size: 16px;\n  line-height: 24px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n/* 页面说明（官方 .intro：14px/22 tertiary） */\n.ss-intro {\n  margin: 0;\n  font-size: 14px;\n  line-height: 22px;\n  color: var(--dsw-alias-label-tertiary);\n  word-break: break-word;\n  overflow-wrap: anywhere;\n}\n\n/* 分组（多级标题：分组标题 + 行卡列表） */\n.ss-group {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n}\n\n/* 分组标题（二级：12px/18 500 secondary——官方 fieldLabel 风格） */\n.ss-groupTitle {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  font-weight: 600;\n  letter-spacing: 0.02em;\n  text-transform: uppercase;\n  color: var(--dsw-alias-label-secondary);\n}\n\n/* 行卡列表（官方 .rows：无 marker，gap 8） */\n.ss-rows {\n  list-style: none;\n  margin: 0;\n  padding: 0;\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n}\n\n/* 行卡（官方 .rowCard：border-l2 r12 padding 12/14） */\n.ss-rowCard {\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 12px;\n  padding: 12px 14px;\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 16px;\n}\n\n/* 行卡文本（标题 + 说明 左列） */\n.ss-rowText {\n  display: flex;\n  flex-direction: column;\n  gap: 3px;\n  min-width: 0;\n  flex: 1;\n}\n\n/* 行卡标题（官方 .rowName：14px/22 500） */\n.ss-rowName {\n  font-size: 14px;\n  line-height: 22px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n/* 行卡说明（12px/18 tertiary） */\n.ss-rowDesc {\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n  word-break: break-word;\n  overflow-wrap: anywhere;\n}\n\n/* 行卡控件（右置） */\n.ss-rowControl {\n  flex: none;\n  display: flex;\n  align-items: center;\n}\n\n/* 开关（官方 token 的自绘 toggle：track 22px，thumb 16px） */\n.ss-switch {\n  position: relative;\n  flex: none;\n  width: 40px;\n  height: 22px;\n  cursor: pointer;\n}\n\n.ss-switch input {\n  position: absolute;\n  opacity: 0;\n  width: 100%;\n  height: 100%;\n  margin: 0;\n  cursor: pointer;\n}\n\n.ss-switchTrack {\n  position: absolute;\n  inset: 0;\n  border-radius: 11px;\n  background: var(--dsw-alias-interactive-bg-active, rgba(128, 128, 128, 0.3));\n  transition: background var(--ds-transition-duration-fast, 0.15s) var(--ds-ease-in-out, ease);\n}\n\n.ss-switchTrack::after {\n  content: '';\n  position: absolute;\n  top: 3px;\n  left: 3px;\n  width: 16px;\n  height: 16px;\n  border-radius: 50%;\n  background: var(--dsw-alias-label-primary, #eee);\n  transition: transform var(--ds-transition-duration-fast, 0.15s) var(--ds-ease-in-out, ease);\n}\n\n.ss-switch input:checked + .ss-switchTrack {\n  background: var(--dsw-alias-state-success-primary, #22c55e);\n}\n\n.ss-switch input:checked + .ss-switchTrack::after {\n  transform: translateX(18px);\n}\n\n.ss-switch input:disabled + .ss-switchTrack {\n  opacity: 0.4;\n  cursor: default;\n}\n\n/* 阈值行（滑块 + 值） */\n.ss-threshold {\n  display: flex;\n  align-items: center;\n  gap: 12px;\n}\n\n.ss-threshold input[type='range'] {\n  width: 160px;\n}\n\n/* Skiff 调试端口输入（number；关闭时跟随 disabled 半透明） */\n.ss-portInput {\n  width: 96px;\n  padding: 6px 8px;\n  border-radius: 8px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  background: var(--dsw-alias-fill-l1, rgba(128, 128, 128, 0.08));\n  color: var(--dsw-alias-label-primary);\n  font-size: 13px;\n  font-variant-numeric: tabular-nums;\n  text-align: right;\n}\n\n.ss-portInput:disabled {\n  opacity: 0.4;\n  cursor: default;\n}\n\n.ss-value {\n  min-width: 40px;\n  font-variant-numeric: tabular-nums;\n  font-size: 13px;\n  font-weight: 600;\n  color: var(--dsw-alias-label-primary);\n  text-align: right;\n}\n\n/* 底部帮助行 */\n.ss-hint {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n  word-break: break-word;\n  overflow-wrap: anywhere;\n}\n\n/* 降级提示 */\n.ss-degrade {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-state-warn-label);\n  word-break: break-word;\n  overflow-wrap: anywhere;\n}\n";
 		if (typeof document !== "undefined" && document.querySelector("style[data-sp-css=\"SettingsSection\"]") === null) {
@@ -4039,6 +4284,13 @@ Instruction-following style:
 							}) })
 						]
 					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "ss-group",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+							className: "ss-groupTitle",
+							children: "建议问答"
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(PublicAskEditor, { publicAskOn })]
+					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: "ss-group",
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {

package/lib/index.js

@@ -11,6 +11,18 @@ import { createUserMessage } from "@deepseek-ai/dsh-llm";
 import { createHmac, randomBytes, randomUUID, scryptSync, timingSafeEqual } from "node:crypto";
 import { deriveEventMessage } from "@deepseek-ai/dsh-session";
 import { createServer, request } from "node:http";
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+//#endregion
 //#region src/ccc.ts
 /**
 * ccc.ts — CCC 纯逻辑层（零 DSH 依赖，可独立单测）
@@ -773,6 +785,17 @@ const CC_FS_WRITE_ACTIONS = /* @__PURE__ */ new Set([
 	"touch",
 	"append"
 ]);
+/**
+* 凭据文件硬名单（数据面守卫，v1.26.3，S142 用户：localstore.json 需要在 read 工具的黑名单里）：
+* **任何工具**（含 read/grep/glob/cc_fs 只读子命令）命中这些相对 CCC 根的路径 → deny。
+*
+* 与 safeMode.blacklist（写黑名单，v1.18.5 决策只拦写）语义独立：
+* - 黑名单 = 用户可配置的写保护（REPOSITORIES/ 等只读参考源不误伤读）
+* - 凭据硬名单 = **结构性数据面边界**（不依赖 safe-mode 开关，凭据文件任何时候不可读）——
+*   对齐 CCE Bounded Space + wardn "structural guarantee, not policy"：localstore.json
+*   含 API keys/tokens/SSH 密码，即使 prompt 纪律失败也无值可吐（机械保证）。
+*/
+const SENSITIVE_CREDENTIAL_FILES = /* @__PURE__ */ new Set(["localstore.json"]);
 /** 判定工具是否为写类：普通工具按名；cc_fs 复合工具按子命令 action */
 function isWriteTool(toolName, action) {
 	if (!WRITE_TOOLS.has(toolName)) return false;
@@ -805,8 +828,12 @@ function decideGuard(input) {
 			deny: `path escape blocked: "${pathArg}" escapes the CCC root`,
 			kind: "deny"
 		};
+		const rel = relative(root, abs).split("\\").join("/");
+		if (SENSITIVE_CREDENTIAL_FILES.has(rel)) return {
+			deny: `access blocked: "${pathArg}" is a sensitive credential file (${rel})`,
+			kind: "deny"
+		};
 		if (isWriteTool(toolName, action)) {
-			const rel = relative(root, abs).split("\\").join("/");
 			if (rel === ".serenity-safe-on" || rel === ".serenity" || rel.startsWith(".serenity-safe-on/") || rel.startsWith(".serenity/")) return {
 				deny: `CCC governance file "${rel}" is reserved for the user — agent must not write`,
 				kind: "deny"
@@ -2380,7 +2407,7 @@ function listActiveHandymen(root) {
 }
 //#endregion
 //#region src/skiff-core.ts
-const PLUGIN_SOURCE$3 = {
+const PLUGIN_SOURCE$4 = {
 	kind: "plugin",
 	plugin: "dsh-serenity-hooks"
 };
@@ -2479,7 +2506,7 @@ function waitIdle$1(ctx, agent) {
 	});
 }
 /** 读会话最后一个 assistant/message 文本（handyman 同款） */
-function lastAssistantText$1(agent) {
+function lastAssistantText$2(agent) {
 	const events = agent.session.events;
 	for (let i = events.length - 1; i >= 0; i--) {
 		const e = events[i];
@@ -2548,10 +2575,10 @@ async function askSkiff(ctx, agent, question, eventsStart) {
 			type: "text",
 			text: question
 		}],
-		source: PLUGIN_SOURCE$3
+		source: PLUGIN_SOURCE$4
 	}));
 	await waitIdle$1(ctx, agent);
-	const answer = lastAssistantText$1(agent);
+	const answer = lastAssistantText$2(agent);
 	const trajectory = eventsToTrajectory(agent.session.events.slice(before));
 	return {
 		answer,
@@ -2961,7 +2988,7 @@ function waitIdle(ctx, agent) {
 	});
 }
 /** 读取会话最后一个 assistant/message 文本 */
-function lastAssistantText(agent) {
+function lastAssistantText$1(agent) {
 	const events = agent.session.events;
 	for (let i = events.length - 1; i >= 0; i--) {
 		const e = events[i];
@@ -3059,7 +3086,7 @@ async function runHandymanJob(ctx, opts) {
 					}
 				}));
 				await waitIdle(ctx, workerAgent);
-				lastResponse = lastAssistantText(workerAgent);
+				lastResponse = lastAssistantText$1(workerAgent);
 			} catch {
 				restarts++;
 				if (restarts > 100) {
@@ -5248,6 +5275,14 @@ function installSettingsSection(ctx, ns, schema, entry, hooks) {
 }
 //#endregion
 //#region src/settings-section.ts
+var settings_section_exports = /* @__PURE__ */ __exportAll({
+	SERENITY_SETTINGS_NS: () => SERENITY_SETTINGS_NS,
+	defaultSimpleSettings: () => defaultSimpleSettings,
+	entryDefaults: () => entryDefaults,
+	readSimpleSettings: () => readSimpleSettings,
+	registerSettingsSection: () => registerSettingsSection,
+	simpleSettingsSchema: () => simpleSettingsSchema
+});
 /** 简单配置命名空间（dsh 设置面板的 section id / settings.yaml section） */
 const SERENITY_SETTINGS_NS = "serenity-hooks";
 /** schemastery schema（与 DSH 各插件 Config 同款） */
@@ -6547,7 +6582,7 @@ function registerBootstrap(ctx) {
 }
 //#endregion
 //#region src/rebuild.ts
-const PLUGIN_SOURCE$2 = {
+const PLUGIN_SOURCE$3 = {
 	kind: "plugin",
 	plugin: "dsh-serenity-hooks"
 };
@@ -6733,7 +6768,7 @@ function registerRebuildTurnHook(ctx) {
 						type: "text",
 						text: "[TRAJECTORY-REBUILD] The conversation has been cleared and rebuilt. Follow the anchor instructions above now: read the persistent trajectory (SESSION.md) and continue the work automatically from the last checkpoint."
 					}],
-					source: PLUGIN_SOURCE$2
+					source: PLUGIN_SOURCE$3
 				}));
 				console.log(`[serenity-hooks] session_rebuild executed with auto-continue (turn ${payload.turn ?? "?"} ended): ${id}`);
 			}
@@ -7130,7 +7165,7 @@ function readContextPressure(ctx, session) {
 		return null;
 	}
 }
-const PLUGIN_SOURCE$1 = {
+const PLUGIN_SOURCE$2 = {
 	kind: "plugin",
 	plugin: "dsh-serenity-hooks"
 };
@@ -7193,7 +7228,7 @@ function registerKeeper(ctx, opts = {}) {
 		if (blocks.length === 0) return downstream;
 		const reminderAll = createUserMessage({
 			content: blocks,
-			source: PLUGIN_SOURCE$1
+			source: PLUGIN_SOURCE$2
 		});
 		if (downstream.kind === "block") return {
 			kind: "block",
@@ -7373,7 +7408,10 @@ function defaultAdvancedSettings() {
 			mode: "",
 			overrideText: ""
 		},
-		publicAsk: { key: "" }
+		publicAsk: {
+			key: "",
+			allowed: []
+		}
 	};
 }
 const SCRYPT_KEYLEN = 32;
@@ -7445,7 +7483,10 @@ function mergeWithDefaults(raw) {
 			mode: typeof persona.mode === "string" ? persona.mode : def.persona.mode,
 			overrideText: typeof persona.overrideText === "string" ? persona.overrideText : def.persona.overrideText
 		},
-		publicAsk: { key: typeof publicAsk.key === "string" ? publicAsk.key : def.publicAsk.key }
+		publicAsk: {
+			key: typeof publicAsk.key === "string" ? publicAsk.key : def.publicAsk.key,
+			allowed: Array.isArray(publicAsk.allowed) ? publicAsk.allowed.filter((n) => typeof n === "string" && n !== "") : def.publicAsk.allowed
+		}
 	};
 }
 /** 读取全局配置（文件缺失/坏 JSON → 默认值） */
@@ -7486,7 +7527,10 @@ function updateAdvancedSettings(patch) {
 			mode: typeof ps.mode === "string" ? ps.mode : current.persona.mode,
 			overrideText: typeof ps.overrideText === "string" ? ps.overrideText : current.persona.overrideText
 		} : current.persona,
-		publicAsk: patch.publicAsk !== void 0 ? { key: typeof patch.publicAsk.key === "string" ? patch.publicAsk.key : current.publicAsk.key } : current.publicAsk
+		publicAsk: patch.publicAsk !== void 0 ? {
+			key: typeof patch.publicAsk.key === "string" ? patch.publicAsk.key : current.publicAsk.key,
+			allowed: Array.isArray(patch.publicAsk.allowed) ? patch.publicAsk.allowed.filter((n) => typeof n === "string" && n !== "") : current.publicAsk.allowed
+		} : current.publicAsk
 	};
 	writeAdvancedSettings(next);
 	return next;
@@ -7500,7 +7544,10 @@ function ensurePublicAskKey() {
 	const current = readAdvancedSettings();
 	if (current.publicAsk.key !== "") return current.publicAsk.key;
 	const key = randomBytes(32).toString("hex");
-	updateAdvancedSettings({ publicAsk: { key } });
+	updateAdvancedSettings({ publicAsk: {
+		key,
+		allowed: current.publicAsk.allowed
+	} });
 	return key;
 }
 /** 校验问答页访问 key（timing-safe；key 未生成 → 恒 false——没有 key 不工作） */
@@ -7546,7 +7593,8 @@ function toWire(settings) {
 		},
 		rebuild: settings.rebuild,
 		naming: settings.naming,
-		persona: settings.persona
+		persona: settings.persona,
+		publicAsk: { allowed: [...settings.publicAsk.allowed] }
 	};
 }
 /**
@@ -7610,6 +7658,11 @@ function applyWirePatch(wire) {
 		if (typeof wire.persona.overrideText === "string") psPatch.overrideText = wire.persona.overrideText;
 		patch.persona = psPatch;
 	}
+	if (wire.publicAsk !== void 0 && Array.isArray(wire.publicAsk.allowed)) {
+		const paPatch = { ...current.publicAsk };
+		paPatch.allowed = wire.publicAsk.allowed.filter((n) => typeof n === "string" && n !== "");
+		patch.publicAsk = paPatch;
+	}
 	return updateAdvancedSettings(patch);
 }
 //#endregion
@@ -8130,7 +8183,7 @@ function accIdentityText(root, configPaths = DEFAULT_SERENITY_CONFIG_PATHS, entr
 	}
 	return lines.join("\n");
 }
-const PLUGIN_SOURCE = {
+const PLUGIN_SOURCE$1 = {
 	kind: "plugin",
 	plugin: "dsh-serenity-hooks"
 };
@@ -8147,7 +8200,7 @@ function accMessage(root, configPaths, entrySkillMaxChars) {
 	}];
 	return createUserMessage({
 		content,
-		source: PLUGIN_SOURCE
+		source: PLUGIN_SOURCE$1
 	});
 }
 /** 每 agent 是否已注入过（进程内存态） */
@@ -8273,6 +8326,8 @@ const HANDYMEN_PATH = "/serenity/handymen";
 const UPLOAD_PATH = "/serenity/image-upload";
 const FILE_UPLOAD_PATH = "/serenity/file-upload";
 const CONFIG_PATH = "/serenity/config";
+const CCCS_PATH = "/serenity/cccs";
+const PUBLIC_ASK_PATH = "/serenity/public-ask";
 /** 图片落盘目录（CCC 根相对；S142 图片自动识别基础设施——粘贴图片落盘供 agent 经 CCC vlm MSM 自主处理） */
 const IMAGE_UPLOAD_DIR = "_tmp/images_from_user";
 const IMAGE_MEDIA_TYPES = /* @__PURE__ */ new Set([
@@ -8563,6 +8618,63 @@ function registerStatusApi(ctx, opts = {}) {
 			}
 		}
 	});
+	ctx.webServer.register({
+		kind: "exact",
+		path: CCCS_PATH,
+		handler: async (req, res) => {
+			try {
+				if (req.method !== "GET") {
+					sendJson$2(res, 405, { error: "method not allowed" });
+					return;
+				}
+				const url = new URL(req.url ?? "/", "http://127.0.0.1");
+				const root = findSerenityRoot(resolveWorkspace(ctx, {
+					sessionId: url.searchParams.get("sessionId") ?? void 0,
+					workspace: url.searchParams.get("workspace") ?? void 0
+				})) ?? "";
+				const { discoverCccs } = await Promise.resolve().then(() => skiff_debug_exports);
+				sendJson$2(res, 200, { cccs: await discoverCccs(ctx, root) });
+			} catch (err) {
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
+			}
+		}
+	});
+	ctx.webServer.register({
+		kind: "exact",
+		path: PUBLIC_ASK_PATH,
+		handler: async (req, res) => {
+			try {
+				if (req.method !== "GET") {
+					sendJson$2(res, 405, { error: "method not allowed" });
+					return;
+				}
+				if (req.headers["x-serenity-ui"] !== "1") {
+					sendJson$2(res, 403, { error: "仅限 WebUI（key 属敏感凭据）" });
+					return;
+				}
+				const settings = readAdvancedSettings();
+				const { readSimpleSettings } = await Promise.resolve().then(() => settings_section_exports);
+				const simple = readSimpleSettings();
+				const allowed = settings.publicAsk.allowed;
+				const port = simple.acpHttpPort ?? 3100;
+				const base = `http://127.0.0.1:${port}`;
+				const containerUrls = allowed.map((name) => ({
+					name,
+					url: `${base}/c/${encodeURIComponent(name)}`
+				}));
+				sendJson$2(res, 200, {
+					enabled: simple.publicAskEnabled ?? false,
+					port,
+					key: ensurePublicAskKey(),
+					allowed,
+					urls: containerUrls,
+					listUrl: `${base}/`
+				});
+			} catch (err) {
+				sendJson$2(res, 400, { error: err.message ?? String(err) });
+			}
+		}
+	});
 }
 //#endregion
 //#region src/seams/env.ts
@@ -9465,6 +9577,171 @@ function registerGateway(ctx) {
 	});
 }
 //#endregion
+//#region src/output-guard.ts
+/**
+* output-guard.ts — 最终输出敏感词检测 + 打回重生成（v1.26.3，S142 用户需求）
+*
+* 认知容器对外提供认知结果时，**支撑宁静号自身的凭据与机制**不应透露给用户。
+* 用户拍板方案（讨论稿定稿）：不做工具结果 redaction（那是模型工作内存），
+* 改为**卡最终输出**——`agent/turn-stopping`（serial）时取 turn 最后 assistant 文本，
+* 命中敏感词表 → `agent.steer()` 打回重生成，直到合规或达上限。
+*
+* 敏感词表（有限，ACC 立场，用户确认"这样比较全面了"）：
+*   ① 凭据词  — localstore.json credentials 条目名 + 值精确匹配（运行时读）
+*   ② 机制词  — 内部结构静态词（插件名/配置路径/端口/内部实现词）
+*   ③ MSM 词  — mech-registry.json 注册的工具名（用户补充：msm_list 里的工具名）
+*   **不含** 公开概念（宁静号/Serenity/认知容器/EAP/CCE/Neat——正常交流词，误伤灾难）
+*
+* 机制依据（DSH 官方）：agent/turn-stopping 注释 "a listener that objects steers and
+* the machine re-reads its inbox: fresh steering runs another step, none closes the
+* turn"——steer 打回是官方支持的"重生成"通道（v1.22.5 rebuild 自动继续同款先例）。
+*/
+/** 插件/内部实现词（静态内置；命中即视为机制泄露） */
+const MECHANISM_WORDS = [
+	"dsh-serenity-hooks",
+	"serenity-hooks",
+	"serenity-hooks.json",
+	"mech-registry",
+	"mech-registry.json",
+	"localstore.json",
+	".opencode/serenity.json",
+	"AGENT_SESSIONS",
+	"agent/session-start",
+	"agent/turn-stopping",
+	"tools/pre-execute",
+	"tools/post-execute",
+	"session_rebuild",
+	"Trajectory Steward",
+	"first-anchor",
+	"拦截缝",
+	"装配层",
+	"acp-core",
+	"skiff-core",
+	"skiff-registry",
+	"skiff-role",
+	"output-guard"
+];
+/** 内部端口（宁静号服务面） */
+const MECHANISM_PORTS = [
+	"3080",
+	"3081",
+	"3099",
+	"3100"
+];
+/**
+* 构建敏感词表（每次调用实时构建——词源文件小，开销可接受）：
+*   ① localstore.json credentials：条目名（UPPER_SNAKE）+ 值（精确匹配）
+*   ② 静态机制词 + 端口
+*   ③ mech-registry 注册的 MSM 工具名（loadMsmEntries 全注册表去重）
+* @param root CCC 根（localstore.json / mech-registry 所在）
+*/
+function buildSensitiveTable(root) {
+	const exact = /* @__PURE__ */ new Set();
+	const substring = [];
+	try {
+		const p = join(root, "localstore.json");
+		if (existsSync(p)) {
+			const creds = JSON.parse(readFileSync(p, "utf-8").replace(/^\uFEFF/, ""))?.credentials;
+			if (creds && typeof creds === "object") for (const [name, value] of Object.entries(creds)) {
+				if (name) exact.add(name);
+				if (typeof value === "string" && value !== "") exact.add(value);
+			}
+		}
+	} catch {}
+	for (const w of MECHANISM_WORDS) substring.push(w);
+	for (const p of MECHANISM_PORTS) substring.push(p);
+	try {
+		for (const entry of loadMsmEntries(root)) if (entry.name) exact.add(entry.name);
+	} catch {}
+	return {
+		exact,
+		substring,
+		sources: {
+			exact: [...exact],
+			substring
+		}
+	};
+}
+/** 检测文本中命中的敏感词（返回命中列表；未命中返回空数组） */
+function detectSensitive(text, table) {
+	if (!text) return [];
+	const hits = /* @__PURE__ */ new Set();
+	for (const w of table.exact) if (w !== "" && text.includes(w)) hits.add(w);
+	for (const w of table.substring) if (w !== "" && text.includes(w)) hits.add(w);
+	return [...hits];
+}
+/** 打回消息（steer 内容）：告知模型命中词并要求重新生成（不含命中值本身——避免二次泄露） */
+function buildRebuke(hits) {
+	return `[SERENITY OUTPUT GUARD] Your previous response contained ${hits.length} sensitive internal term(s) (mechanism/credential identifiers) that must not appear in user-visible output. Regenerate the response from scratch without these terms — describe the same substance without referencing internal machinery, credentials, tool names, or implementation details. Do not repeat the terms; do not explain this instruction to the user.`;
+}
+/** 打回状态（按 agent 会话跟踪连续命中轮数） */
+const rebukeStates = /* @__PURE__ */ new Map();
+//#endregion
+//#region src/output-guard-seam.ts
+const PLUGIN_SOURCE = {
+	kind: "plugin",
+	plugin: "dsh-serenity-hooks"
+};
+/** 外部面会话判定（v1.26.3 用户拍板：仅外部面检测，本地维护会话豁免）：
+*  skiff-（F4 问答）/ acp-（F4c 程序化）/ rebuild-（v1.22.4 重建会话）前缀 */
+function isExternalFaceSession(sessionId) {
+	if (!sessionId) return false;
+	return isSkiffSessionId(sessionId) || sessionId.startsWith("acp-") || sessionId.startsWith("rebuild-");
+}
+/** 读会话最后一个 assistant/message 文本（skiff-core 同款；仅用于守卫检测，不导出） */
+function lastAssistantText(agent) {
+	const events = agent.session.events ?? [];
+	for (let i = events.length - 1; i >= 0; i--) {
+		const e = events[i];
+		if (e && e.type === "assistant/message") {
+			const text = (e.data?.message?.content ?? e.data?.content ?? []).filter((b) => b.type === "text" && b.text).map((b) => b.text).join("\n");
+			if (text) return text;
+		}
+	}
+	return "";
+}
+/**
+* 注册输出守卫（index.ts apply 调用）：
+* turn-stopping 时检测最终输出，命中敏感词 → steer 打回重生成（官方机制，零改 DSH）。
+*/
+function registerOutputGuardHook(ctx) {
+	ctx.on("agent/turn-stopping", (payload) => {
+		const agent = payload?.agent;
+		if (!agent) return;
+		if (!isExternalFaceSession(String(agent.session.id ?? ""))) return;
+		const root = findSerenityRoot(agent.session.header?.cwd ?? process.cwd());
+		if (!root) return;
+		const id = agent.id;
+		const text = lastAssistantText(agent);
+		if (!text) return;
+		const hits = detectSensitive(text, buildSensitiveTable(root));
+		if (hits.length === 0) {
+			rebukeStates.delete(id);
+			return;
+		}
+		const st = rebukeStates.get(id) ?? { consecutive: 0 };
+		st.consecutive += 1;
+		rebukeStates.set(id, st);
+		if (st.consecutive > 3) {
+			rebukeStates.delete(id);
+			console.warn(`[serenity-hooks] output-guard: giving up after 3 rebukes (agent=${id}, turn=${payload.turn ?? "?"}) — response kept for manual review`);
+			return;
+		}
+		console.log(`[serenity-hooks] output-guard: rebuke ${st.consecutive}/3 (agent=${id}, turn=${payload.turn ?? "?"}, hits=${hits.length})`);
+		try {
+			agent.steer(createUserMessage({
+				content: [{
+					type: "text",
+					text: buildRebuke(hits)
+				}],
+				source: PLUGIN_SOURCE
+			}));
+		} catch (error) {
+			console.warn(`[serenity-hooks] output-guard steer failed: ${String(error?.message ?? error)}`);
+		}
+	});
+}
+//#endregion
 //#region node_modules/.pnpm/marked@18.0.11/node_modules/marked/lib/marked.esm.js
 /**
 * marked v18.0.11 - a markdown parser
@@ -11135,6 +11412,13 @@ x.lex;
 *
 * 实验性质：未开启时零资源占用（无监听、无 agent 创建）。
 */
+var skiff_debug_exports = /* @__PURE__ */ __exportAll({
+	discoverCccs: () => discoverCccs,
+	renderSkiffMarkdown: () => renderSkiffMarkdown,
+	skiffDebugPage: () => skiffDebugPage,
+	startSkiffDebugServer: () => startSkiffDebugServer,
+	stopSkiffDebugServer: () => stopSkiffDebugServer
+});
 /** 运行中的调试服务（单实例；进程级） */
 let active$1 = null;
 function readBody$1(req) {
@@ -11685,11 +11969,11 @@ function rpcError(id, code, message) {
 * node:http 服务（默认关，仅监听 127.0.0.1；启停 = 人工——设置面板「Serenity」
 * 页 ACP 区块开关 / 问答页开关，不随插件加载自动启动；仿 skiff 调试服务模式）。
 *
-* - POST /     → JSON-RPC 2.0 单帧/批处理（acpEnabled 门控；ACP 程序化面）
-* - GET  /     → 建议问答页 HTML（publicAskEnabled 门控；F4d，S142 用户：
-*                按认知容器暴露问答页供他人验证——key 认证，无 key 不工作）
-* - POST /ask  → { key, ccc, role?, question, sessionId? } → key 校验（timing-safe）
-*                → acp-core 会话 → { answer, answer_html, sessionId, trajectory }
+* - POST /          → JSON-RPC 2.0 单帧/批处理（acpEnabled 门控；ACP 程序化面）
+* - GET  /          → 容器列表页（publicAskEnabled 门控；v1.26.2：只列已开放容器）
+* - GET  /c/<name>  → 单容器问答页（v1.26.2：URL 体现容器名，用户只输 key）
+* - POST /c/<name>/ask → 该容器问答（key 校验 + allowed 白名单校验）
+* - POST /ask       → 兼容旧形态 { key, ccc, ... }（key 校验 + allowed 校验）
 *
 * 与 skiff 调试页（人工测试面）共享同一会话核心（acp-core → skiff-core）；
 * 企业微信桥（F4c-2）同进程直调 acp-core 处理器函数，不经本端点。
@@ -11780,17 +12064,47 @@ async function handle(ctx, defaultRoot, req, res) {
 			sendJson(res, 200, await dispatchRpc(new AcpServer(ctx), body));
 			return;
 		}
-		if (req.method === "GET" && url === "/") {
-			if (!s.publicAskEnabled) {
+		if (!s.publicAskEnabled) {
+			if (req.method === "GET" && (url === "/" || url.startsWith("/c/"))) {
 				sendHtml(res, publicAskDisabledHtml());
 				return;
 			}
-			sendHtml(res, publicAskPage(await discoverCccs(ctx, defaultRoot || (findSerenityRoot(process.cwd()) ?? "")), readSimpleSettings() && hasPublicAskKey()));
+			if (req.method === "POST" && (url === "/ask" || url.startsWith("/c/"))) {
+				sendJson(res, 403, { error: "public ask disabled (enable in Serenity settings)" });
+				return;
+			}
+			sendJson(res, 404, { error: "not found" });
 			return;
 		}
-		if (req.method === "POST" && url === "/ask") {
-			if (!s.publicAskEnabled) {
-				sendJson(res, 403, { error: "public ask disabled (enable in Serenity settings)" });
+		const containerAllowed = (name) => {
+			const allowed = readAdvancedSettings().publicAsk.allowed;
+			return allowed.length === 0 || allowed.includes(name);
+		};
+		const cMatch = /^\/c\/([^/]+)$/.exec(url);
+		if (req.method === "GET" && cMatch) {
+			const name = decodeURIComponent(cMatch[1] ?? "");
+			const ccc = (await discoverCccs(ctx, defaultRoot || (findSerenityRoot(process.cwd()) ?? ""))).find((c) => c.name === name);
+			if (!ccc) {
+				sendHtml(res, publicAskContainerUnknownHtml(name));
+				return;
+			}
+			if (!containerAllowed(name)) {
+				sendHtml(res, publicAskContainerClosedHtml(name));
+				return;
+			}
+			sendHtml(res, publicAskContainerPage(ccc));
+			return;
+		}
+		if (req.method === "GET" && url === "/") {
+			sendHtml(res, publicAskListPage((await discoverCccs(ctx, defaultRoot || (findSerenityRoot(process.cwd()) ?? ""))).filter((c) => containerAllowed(c.name))));
+			return;
+		}
+		const aMatch = /^\/c\/([^/]+)\/ask$/.exec(url);
+		if (req.method === "POST" && aMatch) {
+			const name = decodeURIComponent(aMatch[1] ?? "");
+			const ccc = (await discoverCccs(ctx, defaultRoot || (findSerenityRoot(process.cwd()) ?? ""))).find((c) => c.name === name);
+			if (!ccc || !containerAllowed(name)) {
+				sendJson(res, 403, { error: `container "${name}" is not open for public ask` });
 				return;
 			}
 			let body;
@@ -11802,49 +12116,36 @@ async function handle(ctx, defaultRoot, req, res) {
 				sendJson(res, 400, { error: "invalid JSON body" });
 				return;
 			}
-			if (!verifyPublicAskKey(typeof body.key === "string" ? body.key : void 0)) {
-				sendJson(res, 401, { error: "invalid or missing key" });
-				return;
-			}
-			const ccc = typeof body.ccc === "string" && body.ccc !== "" ? body.ccc : defaultRoot || "";
-			const roleName = typeof body.role === "string" && body.role !== "" ? body.role : void 0;
-			const question = typeof body.question === "string" ? body.question : "";
-			const sessionId = typeof body.sessionId === "string" && body.sessionId !== "" ? body.sessionId : void 0;
-			if (!ccc) {
-				sendJson(res, 400, { error: "ccc required" });
+			await handleAskParsed(ctx, ccc, body, res);
+			return;
+		}
+		if (req.method === "POST" && url === "/ask") {
+			let body;
+			try {
+				const parsed = JSON.parse(await readBody(req));
+				if (parsed === null || typeof parsed !== "object") throw new Error("not an object");
+				body = parsed;
+			} catch {
+				sendJson(res, 400, { error: "invalid JSON body" });
 				return;
 			}
-			if (!question.trim()) {
-				sendJson(res, 400, { error: "empty question" });
-				return;
+			const cccValue = typeof body.ccc === "string" && body.ccc !== "" ? body.ccc : void 0;
+			const nameValue = typeof body.name === "string" && body.name !== "" ? body.name : void 0;
+			let ccc;
+			if (nameValue) ccc = (await discoverCccs(ctx, defaultRoot || (findSerenityRoot(process.cwd()) ?? ""))).find((c) => c.name === nameValue);
+			else if (cccValue) {
+				ccc = (await discoverCccs(ctx, defaultRoot || (findSerenityRoot(process.cwd()) ?? ""))).find((c) => c.root === cccValue);
+				if (!ccc && cccValue !== "") ccc = {
+					root: cccValue,
+					name: cccValue.split("/").filter(Boolean).pop() ?? cccValue,
+					roles: [...readSkiffRoles(cccValue).keys()]
+				};
 			}
-			const roles = readSkiffRoles(ccc);
-			const explicit = roleName ? roles.get(roleName) : void 0;
-			const effectiveRole = roleName && explicit ? roleName : roles.keys().next().value;
-			const effectiveCfg = (roleName && explicit ? explicit : effectiveRole ? roles.get(effectiveRole) : void 0) ?? void 0;
-			if (!effectiveRole || !effectiveCfg) {
-				sendJson(res, 400, { error: `no skiff role available in ccc: ${ccc}` });
+			if (!ccc || !containerAllowed(ccc.name)) {
+				sendJson(res, 403, { error: "container is not open for public ask" });
 				return;
 			}
-			let agent;
-			let continued = false;
-			if (sessionId) {
-				const info = skiffSessionInfo(sessionId);
-				const live = getSkiffAgent(sessionId);
-				if (info && live && info.role === effectiveRole && info.ccc === ccc) {
-					agent = live;
-					continued = true;
-				}
-			}
-			if (!agent) agent = (await createSkiffAgent(ctx, ccc, effectiveRole, effectiveCfg, readHandymanConfig(ccc)?.defaultModel)).agent;
-			const result = await askSkiff(ctx, agent, question, 0);
-			sendJson(res, 200, {
-				answer: result.answer,
-				answer_html: renderSkiffMarkdown(result.answer),
-				sessionId: result.sessionId,
-				continued,
-				trajectory: result.trajectory
-			});
+			await handleAskParsed(ctx, ccc, body, res);
 			return;
 		}
 		sendJson(res, 404, { error: "not found" });
@@ -11852,12 +12153,51 @@ async function handle(ctx, defaultRoot, req, res) {
 		sendJson(res, 500, { error: err?.message ?? String(err) });
 	}
 }
-function hasPublicAskKey() {
-	try {
-		return ensurePublicAskKey() !== "";
-	} catch {
-		return false;
+/**
+* 单容器问答核心（/c/<name>/ask 与 /ask 共用）：
+* body { key, role?, question, sessionId? } → key 校验（401）→ 角色缺省取 CCC 第一个
+* → 会话延续（v1.25.10 语义，静默新建）→ askSkiff(0 全量轨迹) → { answer, answer_html, sessionId, continued, trajectory }
+*/
+async function handleAskParsed(ctx, ccc, body, res) {
+	if (!verifyPublicAskKey(typeof body.key === "string" ? body.key : void 0)) {
+		sendJson(res, 401, { error: "invalid or missing key" });
+		return;
+	}
+	const root = ccc.root;
+	const roleName = typeof body.role === "string" && body.role !== "" ? body.role : void 0;
+	const question = typeof body.question === "string" ? body.question : "";
+	const sessionId = typeof body.sessionId === "string" && body.sessionId !== "" ? body.sessionId : void 0;
+	if (!question.trim()) {
+		sendJson(res, 400, { error: "empty question" });
+		return;
 	}
+	const roles = readSkiffRoles(root);
+	const explicit = roleName ? roles.get(roleName) : void 0;
+	const effectiveRole = roleName && explicit ? roleName : roles.keys().next().value;
+	const effectiveCfg = (roleName && explicit ? explicit : effectiveRole ? roles.get(effectiveRole) : void 0) ?? void 0;
+	if (!effectiveRole || !effectiveCfg) {
+		sendJson(res, 400, { error: `no skiff role available in ccc: ${root}` });
+		return;
+	}
+	let agent;
+	let continued = false;
+	if (sessionId) {
+		const info = skiffSessionInfo(sessionId);
+		const live = getSkiffAgent(sessionId);
+		if (info && live && info.role === effectiveRole && info.ccc === root) {
+			agent = live;
+			continued = true;
+		}
+	}
+	if (!agent) agent = (await createSkiffAgent(ctx, root, effectiveRole, effectiveCfg, readHandymanConfig(root)?.defaultModel)).agent;
+	const result = await askSkiff(ctx, agent, question, 0);
+	sendJson(res, 200, {
+		answer: result.answer,
+		answer_html: renderSkiffMarkdown(result.answer),
+		sessionId: result.sessionId,
+		continued,
+		trajectory: result.trajectory
+	});
 }
 /** 问答页未启用提示页 */
 function publicAskDisabledHtml() {
@@ -11868,15 +12208,28 @@ function publicAskDisabledHtml() {
 <p>问答页未启用（请在 dsh 设置面板「Serenity」页开启「建议问答」）。</p>
 </body></html>`;
 }
-/** 建议问答页（F4d）：key 输入 + CCC 选择 + 问题 + 答案（marked 服务端渲染） */
-function publicAskPage(cccs, _hasKey) {
+/** 容器不存在提示页（URL 容器名不在已发现 CCC 中） */
+function publicAskContainerUnknownHtml(name) {
 	return `<!DOCTYPE html>
-<html lang="zh">
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<title>Serenity Public Ask</title>
-<style>
+<html lang="zh"><head><meta charset="utf-8"><title>Serenity Public Ask</title></head>
+<body style="font-family:system-ui;padding:48px;text-align:center;color:#57606a">
+<h2>Serenity Public Ask</h2>
+<p>认知容器「${name}」不存在。</p>
+<p style="font-size:13px"><a href="/" style="color:#0ba875">返回容器列表</a></p>
+</body></html>`;
+}
+/** 容器未开放提示页（白名单外） */
+function publicAskContainerClosedHtml(name) {
+	return `<!DOCTYPE html>
+<html lang="zh"><head><meta charset="utf-8"><title>Serenity Public Ask</title></head>
+<body style="font-family:system-ui;padding:48px;text-align:center;color:#57606a">
+<h2>Serenity Public Ask</h2>
+<p>认知容器「${name}」当前未开放问答（管理员在设置面板「开放容器」中配置）。</p>
+<p style="font-size:13px"><a href="/" style="color:#0ba875">返回容器列表</a></p>
+</body></html>`;
+}
+/** 页面基础样式（列表页 + 单容器页共用） */
+const ASK_CSS = `
   :root { color-scheme: light dark; }
   body { font-family: system-ui, -apple-system, sans-serif; margin: 0; padding: 24px; background: #f6f7f9; color: #1f2328; }
   @media (prefers-color-scheme: dark) { body { background: #1a1b1e; color: #e6e6e6; } }
@@ -11889,6 +12242,11 @@ function publicAskPage(cccs, _hasKey) {
   textarea { min-height: 72px; resize: vertical; }
   button { margin-top: 12px; padding: 9px 18px; border-radius: 8px; border: 0; background: #0ba875; color: #fff; font-size: 14px; font-weight: 600; cursor: pointer; }
   button:disabled { opacity: .55; cursor: wait; }
+  .card { background: #fff; border: 1px solid #d0d7de; border-radius: 10px; padding: 14px 16px; margin-bottom: 10px; display: block; text-decoration: none; color: inherit; }
+  @media (prefers-color-scheme: dark) { .card { background: #26282c; border-color: #3a3d42; } }
+  .card:hover { border-color: #0ba875; }
+  .card .cname { font-weight: 600; font-size: 15px; }
+  .card .cmeta { opacity: .6; font-size: 12px; margin-top: 2px; }
   #answer { background: #fff; border: 1px solid #d0d7de; border-radius: 8px; padding: 12px; margin-top: 16px; font-size: 14px; line-height: 1.6; min-height: 48px; word-break: break-word; }
   @media (prefers-color-scheme: dark) { #answer { background: #26282c; border-color: #3a3d42; } }
   #answer p { margin: 6px 0; }
@@ -11900,41 +12258,89 @@ function publicAskPage(cccs, _hasKey) {
   .muted { opacity: .6; font-size: 13px; }
   details.think { margin: 8px 0; border: 1px solid rgba(210,153,34,.4); border-radius: 8px; background: rgba(210,153,34,.06); }
   details.think summary { cursor: pointer; padding: 6px 10px; font-size: 12px; color: #d29922; font-weight: 600; }
-</style>
+  .empty { text-align: center; opacity: .7; padding: 24px 0; }
+  .back { display: inline-block; margin-bottom: 12px; font-size: 13px; color: #0ba875; text-decoration: none; }
+  .ccname { font-weight: 600; color: #0ba875; }
+`;
+/** 容器列表页（v1.26.2）：只列已开放容器，点击进入 /c/<name> */
+function publicAskListPage(cccs) {
+	const cards = cccs.map((c) => `
+    <a class="card" href="/c/${encodeURIComponent(c.name)}">
+      <div class="cname">${c.name}</div>
+      <div class="cmeta">${c.roles.length} 个问答角色 · 点击进入</div>
+    </a>`).join("") || "<div class=\"empty\">暂无可问答的认知容器（管理员尚未开放）</div>";
+	return `<!DOCTYPE html>
+<html lang="zh">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Serenity Public Ask</title>
+<style>${ASK_CSS}</style>
 </head>
 <body>
 <main>
   <h1>Serenity Public Ask</h1>
-  <div class="sub">认知容器问答验证页 — 选择认知容器后提问（访问需 key）</div>
+  <div class="sub">选择认知容器开始提问（访问需 key，key 由管理员提供）</div>
+  ${cards}
+</main>
+</body>
+</html>`;
+}
+/** 单容器问答页（v1.26.2）：URL 锁定容器，key + 角色；key 自动存 localStorage */
+function publicAskContainerPage(ccc) {
+	const data = JSON.stringify({
+		name: ccc.name,
+		root: ccc.root,
+		roles: ccc.roles
+	}).replace(/</g, "\\u003c");
+	return `<!DOCTYPE html>
+<html lang="zh">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Serenity Public Ask · ${ccc.name}</title>
+<style>${ASK_CSS}</style>
+</head>
+<body>
+<main>
+  <a class="back" href="/">← 容器列表</a>
+  <h1>Serenity Public Ask</h1>
+  <div class="sub">认知容器：<span class="ccname">${ccc.name}</span></div>
   <label for="key">访问 Key</label>
   <input id="key" type="password" placeholder="请输入访问 key" autocomplete="off">
-  <label for="ccc">认知容器</label>
-  <select id="ccc"></select>
+  <label for="role">问答角色</label>
+  <select id="role"></select>
   <label for="q">问题</label>
   <textarea id="q" placeholder="向该认知容器提问…"></textarea>
   <button id="ask">提问</button>
   <div id="answer" class="muted">等待提问…</div>
 </main>
-<script id="ask-data" type="application/json">${JSON.stringify(cccs).replace(/</g, "\\u003c")}<\/script>
+<script id="ask-data" type="application/json">${data}<\/script>
 <script>
-const CCCS = JSON.parse(document.getElementById('ask-data').textContent)
+const CCC = JSON.parse(document.getElementById('ask-data').textContent)
+const KEY_STORE = 'serenity-public-ask-key'
 const keyInput = document.getElementById('key')
-const cccSel = document.getElementById('ccc')
+const roleSel = document.getElementById('role')
 const btn = document.getElementById('ask')
 const answer = document.getElementById('answer')
 let sessionId = ''
-cccSel.innerHTML = CCCS.map((c) => '<option value="' + c.root + '">' + c.name + (c.roles.length ? ' (' + c.roles.length + ' 角色)' : '') + '</option>').join('') || '<option value="">(未发现认知容器)</option>'
+// 角色下拉（v1.26.2 用户：3100 应能选择角色）
+roleSel.innerHTML = (CCC.roles || []).map((r) => '<option value="' + r + '">' + r + '</option>').join('') || '<option value="">(无角色)</option>'
+// key 自动从 localStorage 恢复（v1.26.2：输入一次后浏览器记住，无需每次粘贴）
+try { const saved = localStorage.getItem(KEY_STORE); if (saved) keyInput.value = saved } catch {}
 btn.addEventListener('click', async () => {
-  const ccc = cccSel.value
   const q = document.getElementById('q').value.trim()
   const key = keyInput.value.trim()
-  if (!ccc || !q) { answer.className = 'err'; answer.textContent = '请选择认知容器并输入问题'; return }
+  const role = roleSel.value || undefined
+  if (!q) { answer.className = 'err'; answer.textContent = '请输入问题'; return }
   if (!key) { answer.className = 'err'; answer.textContent = '请输入访问 key（没有 key 无法使用）'; return }
+  // 输入即记住（保存到 localStorage；下次自动填充）
+  try { localStorage.setItem(KEY_STORE, key) } catch {}
   btn.disabled = true
   answer.className = 'muted'
   answer.textContent = '运行中…'
   try {
-    const res = await fetch('/ask', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ key, ccc, question: q, sessionId: sessionId || undefined }) })
+    const res = await fetch('/c/' + encodeURIComponent(CCC.name) + '/ask', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ key, role, question: q, sessionId: sessionId || undefined }) })
     const data = await res.json()
     if (!res.ok) { sessionId = ''; throw new Error(data.error || ('HTTP ' + res.status)) }
     answer.className = ''
@@ -12026,6 +12432,7 @@ function apply(ctx, config) {
 	registerSettingsSection(ctx, config);
 	registerGateway(ctx);
 	registerRebuildTurnHook(ctx);
+	registerOutputGuardHook(ctx);
 	if (config.env) registerEnv(ctx);
 	if (config.opencodeSkills) registerOpencodeSkills(ctx);
 	registerBootstrap(ctx);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shgroup/dsh-serenity-hooks",
-  "version": "1.26.1",
+  "version": "1.26.3",
   "description": "宁静号 ACC harness — Native Cordis 插件（DeepSeek Harness 运行时）。真实 DSH 工具注册（cc_fs/session/acc_msm 等 9 工具）+ 拦截缝机械约束（safe-mode/路径守卫/会话落盘）+ 系统提示词注入（ACC/CCE/Constraints/SKILL/Session 五块）。适配 DSH 公开版（deepseek-ai/deepseek-harness 0.1.0-rc）。",
   "license": "MIT",
   "repository": {