@shgroup/dsh-serenity-hooks 1.57.0 → 1.57.1

package/lib/index.js

@@ -1,12 +1,10 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { a as hostSessions, c as hostWeb, i as hostService, l as hostWebServer, n as hostInjected, o as hostSettings, r as hostLlm, s as hostSubagents, t as hostAgents } from "./access-CNccNtgf.js";
+import { c as hostInjected, d as hostSessions, f as hostSettings, h as hostWebServer, i as cccRootForExec, l as hostLlm, m as hostWeb, n as agentCwdFor, o as listCccs, p as hostSubagents, r as cccRootForCwd, s as hostAgents, t as NO_CCC_FROM_AGENT_CWD, u as hostService } from "./ccc-roots-GIJ3A_tw.js";
 import { _ as resolveInside, a as findSerenityRoot$1, c as matchBlacklist, d as readCccName$1, f as readCheapWorkerConfig, h as readTrajectorySkills, i as findGitRoot, l as pathInside, m as readSafeModeHiddenTools, n as SAFE_MODE_MARKER, o as isSafeModeOn, p as readExclusiveTools, r as classifyPath, s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS, u as readBlacklist } from "./ccc-B0ZGL9lx.js";
-import { i as cccRootForExec, n as agentCwdFor, o as listCccs, r as cccRootForCwd, t as NO_CCC_FROM_AGENT_CWD } from "./ccc-roots-BC8mn8iM.js";
-import { A as localIdStamp, C as setActiveSessionInfo, D as isoLocal, E as useSession, O as localFileStamp, S as sessionsRoot, T as summarize, _ as namingTitleFor, a as pruneMissingBindings, b as resolveSessionByTitle, c as setBindingStore, d as clearActiveSessionInfo, f as createSession, g as listSessions, h as getActiveSessionInfo, i as listBoundSessionIds, k as localHuman, l as DEFAULT_SESSION_SCOPE, m as findSession, n as PLUGIN_SOURCE, o as readLastBound, p as extractSessionMdPathFromText, r as appendBound, s as resolveSessionTrajectoryLabel, t as ACC_MESSAGE_KIND, u as TRAJECTORY_ACTIONS, v as parseSessionContextFromEvents, w as showSession, x as sessionEvents$1, y as readActiveSessionMd } from "./message-source-BcCRsEOh.js";
+import { A as localIdStamp, C as setActiveSessionInfo, D as isoLocal, E as useSession, O as localFileStamp, S as sessionsRoot, T as summarize, _ as namingTitleFor, a as pruneMissingBindings, b as resolveSessionByTitle, c as setBindingStore, d as clearActiveSessionInfo, f as createSession, g as listSessions, h as getActiveSessionInfo, i as listBoundSessionIds, k as localHuman, l as DEFAULT_SESSION_SCOPE, m as findSession, n as PLUGIN_SOURCE, o as readLastBound, p as extractSessionMdPathFromText, r as appendBound, s as resolveSessionTrajectoryLabel, t as ACC_MESSAGE_KIND, u as TRAJECTORY_ACTIONS, v as parseSessionContextFromEvents, w as showSession, x as sessionEvents$1, y as readActiveSessionMd } from "./message-source-B4P3Uw6D.js";
 import { a as readWeixinCredential, c as weixinInboundDir, d as LOCALSTORE_SCOPES, f as checkLocalstoreGitCompliance, g as runLocalStore, h as readStore, i as matchWeixinRoute, l as weixinSessionIdFor, m as readGitTrack, n as extractWeixinText, o as readWeixinSettings, p as localstorePath, r as hasVoiceItem, s as sanitizeFileName$1, t as extractWeixinMedia } from "./weixin-route-B9gU1YXz.js";
-import { a as unregisterSkiffSession$1, i as skiffSessionSnapshot$1, n as skiffRoleFor$1, o as ACC_VERSION, r as skiffSessionInfo$1, t as registerSkiffSession$1 } from "./skiff-registry-BjIX_KD1.js";
+import { a as GATEWAY_PORT, c as SKIFF_DEBUG_PORT, d as skiffRoleFor$1, f as skiffSessionInfo$1, i as FACE_PORTS, l as WEIXIN_SEND_PORT, m as ACC_VERSION, n as readSimpleSettings, o as MAIN_WEB_PORT, p as unregisterSkiffSession$1, r as registerSettingsSection, s as MECHANISM_PORTS, u as registerSkiffSession$1 } from "./settings-section-DQIVsTqE.js";
 import { a as readSkiffRoles, c as roleMsmWhitelist, d as systemPromptSource, f as trajectorySubset, i as isSkiffSessionId, l as roleToolWhitelist, n as buildSkiffBasePrompt, o as resolveRoleSystemPrompt, r as createRolePromptReader, s as resolveSkiffKind } from "./skiff-role-B615L9MV.js";
-import { a as ACP_HTTP_PORT, c as MAIN_WEB_PORT, d as WEIXIN_SEND_PORT, l as MECHANISM_PORTS, n as readSimpleSettings, o as FACE_PORTS, r as registerSettingsSection, s as GATEWAY_PORT, u as SKIFF_DEBUG_PORT } from "./settings-section-xHABl8nk.js";
 import { REGISTERED_TOOLS } from "./invariant.js";
 import { a as markdownToPlainText, c as sendTyping, i as getUpdates, l as sniffImageExt, n as downloadMedia, o as sendFileMessage, r as getConfig, s as sendTextMessage, t as TypingStatus } from "./weixin-api-BrRcPiQs.js";
 import { createRequire } from "node:module";
@@ -1086,7 +1084,8 @@ Directory of ACC capabilities — each area lists where to go for details (guide
                          cheap-worker（杂工 agent 编排——guide 子命令：cheap-worker guide）
                          专属工具（**默认对所有 CCC 隐藏**，只有在自己 exclusiveTools 里点名的 CCC 可见）→ acc-diag（运行态诊断）
   ④ 角色与对外面      → container_admin role（Skiff 认知子集角色：guide/validate/apply/list——skiff_admin 已并入）
-                         ACP（程序化 JSON-RPC 3100）/ Skiff 问答页（公网 ask）——面板「外部能力」组
+                         3099 Skiff 调试问答页（人工调试面）。🔴 2026-10-15：自造 ACP 面已退役
+                         ⇒ 外部程序化接入改走官方 dsh --profile acp ＋ 现成 ACP 客户端
   ⑤ 自主与接入        → container_trajectory send-now（跨轨迹的**即时**递送，**不排队**：live 目标在跑就当场注入当前轮、空闲则立即起轮；非 live 冷载入——等效于直接 wake；**有同步回执**）
                          container_trajectory send-later（跨轨迹的"未来时刻 + 一条 message"；fire-and-forget，无回执无回收）
                          weixin 微信桥（配置/扫码/路由/消息 hook——CCC 侧 weixin-doctor MSM：msm("weixin-doctor", ["guide"])）
@@ -2943,10 +2942,6 @@ function defaultAdvancedSettings() {
 			mode: "",
 			overrideText: ""
 		},
-		publicAsk: {
-			key: "",
-			allowed: []
-		},
 		weixinApi: {
 			enabled: true,
 			port: WEIXIN_SEND_PORT
@@ -2999,7 +2994,6 @@ function mergeWithDefaults(raw) {
 	const o = raw;
 	const gateway = o.gateway ?? {};
 	const persona = o.persona ?? {};
-	const publicAsk = o.publicAsk ?? {};
 	const weixinApi = o.weixinApi ?? {};
 	return {
 		gateway: {
@@ -3016,10 +3010,6 @@ function mergeWithDefaults(raw) {
 			mode: typeof persona.mode === "string" ? persona.mode : def.persona.mode,
 			overrideText: typeof persona.overrideText === "string" ? persona.overrideText : def.persona.overrideText
 		},
-		publicAsk: {
-			key: typeof publicAsk.key === "string" ? publicAsk.key : def.publicAsk.key,
-			allowed: Array.isArray(publicAsk.allowed) ? publicAsk.allowed.filter((n) => typeof n === "string" && n !== "") : def.publicAsk.allowed
-		},
 		weixinApi: {
 			enabled: typeof weixinApi.enabled === "boolean" ? weixinApi.enabled : def.weixinApi.enabled,
 			port: typeof weixinApi.port === "number" && Number.isInteger(weixinApi.port) && weixinApi.port >= 0 ? weixinApi.port : def.weixinApi.port
@@ -3057,10 +3047,6 @@ function updateAdvancedSettings(patch) {
 			mode: typeof ps.mode === "string" ? ps.mode : current.persona.mode,
 			overrideText: typeof ps.overrideText === "string" ? ps.overrideText : current.persona.overrideText
 		} : current.persona,
-		publicAsk: patch.publicAsk !== void 0 ? {
-			key: typeof patch.publicAsk.key === "string" ? patch.publicAsk.key : current.publicAsk.key,
-			allowed: Array.isArray(patch.publicAsk.allowed) ? patch.publicAsk.allowed.filter((n) => typeof n === "string" && n !== "") : current.publicAsk.allowed
-		} : current.publicAsk,
 		weixinApi: patch.weixinApi !== void 0 ? {
 			enabled: typeof patch.weixinApi.enabled === "boolean" ? patch.weixinApi.enabled : current.weixinApi.enabled,
 			port: typeof patch.weixinApi.port === "number" && Number.isInteger(patch.weixinApi.port) && patch.weixinApi.port >= 0 ? patch.weixinApi.port : current.weixinApi.port
@@ -3070,87 +3056,6 @@ function updateAdvancedSettings(patch) {
 	return next;
 }
 /**
-* 确保问答页访问 key 存在（首次启用自动生成 + 写回固定，用户拍板"配置时生成"）：
-* 读取全局配置 publicAsk.key；为空 → 生成 32 字节随机 hex（64 字符）→ 写回持久化。
-* @returns 当前固定 key（已生成则返回既有值——**幂等**，不会覆盖用户手改的 key）
-*/
-function ensurePublicAskKey() {
-	const current = readAdvancedSettings();
-	if (current.publicAsk.key !== "") return current.publicAsk.key;
-	const key = randomBytes(32).toString("hex");
-	updateAdvancedSettings({ publicAsk: {
-		key,
-		allowed: current.publicAsk.allowed
-	} });
-	return key;
-}
-/** 校验问答页访问 key（timing-safe；key 未生成 → 恒 false——没有 key 不工作） */
-function verifyPublicAskKey(provided) {
-	const expected = readAdvancedSettings().publicAsk.key;
-	if (!expected || typeof provided !== "string" || provided === "") return false;
-	const a = Buffer.from(provided);
-	const b = Buffer.from(expected);
-	return a.length === b.length && timingSafeEqual(a, b);
-}
-/**
-* 轮换问答页访问 key（v1.26.5，S142 用户：公网开放 + 不好说要换 key 呢）：
-* 生成新 32 字节随机 hex（64 字符）→ 覆盖写回（**强制替换**——旧 key 立即失效）。
-* @returns 新 key（面板展示给管理员，重新分享给使用者）
-*/
-function rotatePublicAskKey() {
-	const current = readAdvancedSettings();
-	const key = randomBytes(32).toString("hex");
-	updateAdvancedSettings({ publicAsk: {
-		key,
-		allowed: current.publicAsk.allowed
-	} });
-	return key;
-}
-/** 失败锁定阈值（连续失败次数） */
-const PUBLIC_ASK_FAIL_THRESHOLD = 5;
-/** 首次锁定基础时长（指数退避底数） */
-const PUBLIC_ASK_LOCK_BASE_MS = 9e5;
-/** 锁定上限 */
-const PUBLIC_ASK_LOCK_MAX_MS = 144e5;
-const ipFailStates = /* @__PURE__ */ new Map();
-/** 重置 IP 失败状态（测试/管理员解封） */
-function resetPublicAskIpFail(ip) {
-	ipFailStates.delete(ip);
-}
-/** IP 当前是否锁定（到期自动解锁） */
-function isPublicAskIpLocked(ip) {
-	const st = ipFailStates.get(ip);
-	if (!st || st.lockedUntil === 0) return false;
-	if (Date.now() >= st.lockedUntil) {
-		st.lockedUntil = 0;
-		st.count = 0;
-		return false;
-	}
-	return true;
-}
-/** 记录一次 key 校验失败；达到阈值 → 锁定（指数退避）。返回锁定剩余毫秒（0 = 未锁定） */
-function recordPublicAskFail(ip) {
-	let st = ipFailStates.get(ip);
-	if (!st) {
-		st = {
-			count: 0,
-			lockedUntil: 0,
-			lockRound: 0
-		};
-		ipFailStates.set(ip, st);
-	}
-	if (st.lockedUntil > 0 && Date.now() < st.lockedUntil) return st.lockedUntil - Date.now();
-	st.count += 1;
-	if (st.count >= PUBLIC_ASK_FAIL_THRESHOLD) {
-		const base = PUBLIC_ASK_LOCK_BASE_MS * 2 ** st.lockRound;
-		st.lockedUntil = Date.now() + Math.min(base, PUBLIC_ASK_LOCK_MAX_MS);
-		st.lockRound += 1;
-		st.count = 0;
-		return st.lockedUntil - Date.now();
-	}
-	return 0;
-}
-/**
 * 一次性迁移（v1.21.x → v1.22）：旧版把 `serenityAdvanced` 存在 CCC localstore.json；
 * 新版归 plugin 全局文件。全局文件已存在 → 跳过（幂等）；localstore 无旧节 → 跳过。
 * @param root - CCC 根（localstore.json 所在目录）
@@ -3183,8 +3088,7 @@ function toWire(settings) {
 			allowWorkspaceCreate: settings.gateway.allowWorkspaceCreate,
 			totpEnabled: settings.gateway.totpEnabled
 		},
-		persona: settings.persona,
-		publicAsk: { allowed: [...settings.publicAsk.allowed] }
+		persona: settings.persona
 	};
 }
 /**
@@ -3253,11 +3157,6 @@ function applyWirePatch(wire) {
 		if (typeof wire.persona.overrideText === "string") psPatch.overrideText = wire.persona.overrideText;
 		patch.persona = psPatch;
 	}
-	if (wire.publicAsk !== void 0 && Array.isArray(wire.publicAsk.allowed)) {
-		const paPatch = { ...current.publicAsk };
-		paPatch.allowed = wire.publicAsk.allowed.filter((n) => typeof n === "string" && n !== "");
-		patch.publicAsk = paPatch;
-	}
 	return updateAdvancedSettings(patch);
 }
 //#endregion
@@ -3877,15 +3776,6 @@ function unregisterSkiffSession(sessionId) {
 	skiffAgents.delete(sessionId);
 	unregisterSkiffSession$1(sessionId);
 }
-/** 测试/调试：注册表快照（sessionId → {role} 兼容展示） */
-function skiffSessionSnapshot() {
-	const out = /* @__PURE__ */ new Map();
-	for (const [id, b] of skiffSessionSnapshot$1()) out.set(id, {
-		role: b.role,
-		ccc: b.ccc
-	});
-	return out;
-}
 /** 自动创建的 bound 标记（readLastBound 恢复判定——只恢复本机制建的；手工 use 的旧 bound 不认） */
 const AUTO_BOUND_NOTE_PREFIX = "auto-created for skiff role";
 /**
@@ -3974,7 +3864,7 @@ function ensureWorkspacePromptSection(agent, scope) {
 *
 * 判定链：
 * ⓪ **临时身份不建工作台**（v1.30.9，S142 用户报"SESSION 爆炸"根治）：`persistent=false`
-*    （ACP/调试页/问答页等**无固定会话 id**的临时 agent）→ null。理由（R↓）：这些 agent 每次
+*    （调试页等**无固定会话 id**的临时 agent）→ null。理由（R↓）：这些 agent 每次
 *    调用都是新 id、无身份延续，为其建 SESSION = 每次问答留一个永久空目录（无界熵增）；
 *    用户模型「skiff 本质是临时会话机制」——工作台属于**持久身份**，不属于单次调用。
 * ① 角色未启用 session 能力（trajectory.session !== true）→ null（现状零变化）
@@ -4043,10 +3933,10 @@ const SKIFF_PRESET = "standard";
 * 指定 sessionId 且磁盘已有持久化 log → `ctx.agents.resume`（DSH 持久化语义：
 * sessionId 即身份，已持久化会话必须 resume——历史 + turn 续号延续，同用户长期记忆保留）；
 * 无 log（首次）/持久化未配置 → `ctx.agents.create`（新建）。不指定 sessionId →
-* 随机 id 恒 create（ACP/调试页默认路径）。
+* 随机 id 恒 create（调试页默认路径）。
 *
 * @param sessionId 指定会话 id（可选；微信桥等外部面用固定 id 实现用户↔会话长期映射——
-*   不传则随机生成 skiff-<role>-<uuid>，ACP/调试页默认路径）
+*   不传则随机生成 skiff-<role>-<uuid>，调试页默认路径）
 */
 async function createSkiffAgent(ctx, root, roleName, role, defaultModel, sessionId) {
 	if (!ctx.agents) throw new Error("skiff: ctx.agents unavailable");
@@ -4257,8 +4147,9 @@ function truncate(s, n) {
 * 提问一轮：followup → 等 idle → 读答案 + 轨迹。
 * @param eventsStart 轨迹起点：显式传 0 = 全量轨迹（会话追问时页面重绘完整时间线，
 *   v1.25.10 用户拍板）；不传（undefined）= 本轮增量（followup 前 events 之后）
-* @param options.includeTrajectory 是否计算轨迹（v1.26.10：**3100 对外只提供问答**——
-*   公开问答页 / ACP JSON-RPC 不返回 trajectory，传 false 跳过计算；3099 调试页默认 true 保留）
+* @param options.includeTrajectory 是否计算轨迹（v1.26.10 起供**对外面**传 false 跳过计算——
+*   原消费方 = 3100 公开问答页 / ACP JSON-RPC，**该面已于 2026-10-15 退役** ⇒ 现无生产调用方传 false；
+*   3099 调试页默认 true 保留）
 */
 async function askSkiff(ctx, agent, question, eventsStart, options) {
 	const before = eventsStart === void 0 ? sessionEvents(agent.session).length : eventsStart;
@@ -12275,11 +12166,10 @@ dsp 只提供机制（双白名单强制 + 基础提示词 + 调试问答页）
 
 ── 运行 ──
   调试：设置面板「Serenity」页 Skiff 区块开启 → http://127.0.0.1:<debugPort> 问答页实测
-  ACP 程序化面（v1.26.0）：设置面板「ACP」区块开启 → HTTP JSON-RPC 端点（默认 3100）——
-    POST /  {jsonrpc, id, method, params}
-    session/new {ccc, role, sessionId?}  → 创建/延续会话（sessionId 可选=进程内追问）
-    session/prompt {sessionId, question} → {answer, trajectory}
-    session/cancel / session/close / session/list / request_permission（恒 allow）
+  🔴 外部程序化接入（2026-10-15 起改走官方）：本插件自造的 ACP 面（HTTP JSON-RPC 3100 ／
+    建议问答页）**已整体退役**（owner 裁「砍掉外部问答」）。现在要程序化/远程接入，走宿主
+    自带的官方 ACP server：dsh --profile acp（纯 stdio、零认证）＋ 任一 ACP 客户端
+    （手机端如 Agmente / ACP UI）经隧道接入。详见 S142 的接入指南文档。
   启停 = 人工（设置面板开关，不随插件加载自动启动）；未开启零资源占用
   生效机制：角色配置**实时读取**（改 .opencode/serenity.json → 刷新调试页即生效）；
   改配置后用 container_admin role apply 做显式校验 + 应用确认（绑定 CCC + 角色清单）
@@ -12660,7 +12550,9 @@ function claimsUserNotification(text) {
 /**
 * **不许开**的会话（设计 §3 的"建议写死"，本版**确实写死**）：
 * `skiff-`（F4 问答 / **微信桥会话也是这个前缀** —— 桥那侧的"用户"是**家人**，
-* 代理替家人说话 = **冒充**）｜ `acp-`（对外程序化面）｜ `cheap-worker-`（自主 worker，已有自己的完成码循环）。
+* 代理替家人说话 = **冒充**）｜ `acp-`（对外程序化面 —— ⚠️ **2026-10-15 起已成死判据**：
+* 该前缀从无生产者且面 E 已退役；理由与"为何保留"见 `output-guard-seam.ts` 文件头）｜
+* `cheap-worker-`（自主 worker，已有自己的完成码循环）。
 *
 * ⚠️ **`rebuild-` 不在排除面**（与 `output-guard-seam.ts` 的取向**刻意不同**）：重建会话是
 * **同一轨迹的载体**（内部维护面），不是对外面；把它排除会让"重建后就没人推了"。
@@ -14733,7 +14625,6 @@ const UPLOAD_PATH = "/serenity/image-upload";
 const FILE_UPLOAD_PATH = "/serenity/file-upload";
 const CONFIG_PATH = "/serenity/config";
 const CCCS_PATH = "/serenity/cccs";
-const PUBLIC_ASK_PATH = "/serenity/public-ask";
 const WEIXIN_PATH = "/serenity/weixin";
 /** 图片落盘目录（CCC 根相对；S142 图片自动识别基础设施——粘贴图片落盘供 agent 经 CCC vlm MSM 自主处理） */
 const IMAGE_UPLOAD_DIR = "_tmp/images_from_user";
@@ -14817,7 +14708,7 @@ function saveFileToTmp(root, fileName, data) {
 	writeFileSync(join(dir, filename), bytes);
 	return `${FILE_UPLOAD_DIR}/${filename}`;
 }
-function readBody$4(req, maxBytes) {
+function readBody$3(req, maxBytes) {
 	return new Promise((resolve, reject) => {
 		let data = "";
 		req.on("data", (chunk) => {
@@ -14831,7 +14722,7 @@ function readBody$4(req, maxBytes) {
 		req.on("error", reject);
 	});
 }
-function sendJson$4(res, code, body) {
+function sendJson$3(res, code, body) {
 	const payload = JSON.stringify(body);
 	res.writeHead(code, {
 		"content-type": "application/json; charset=utf-8",
@@ -14856,7 +14747,7 @@ function senderIsWebUi(req) {
 */
 function requireWebUi(req, res, message) {
 	if (senderIsWebUi(req)) return true;
-	sendJson$4(res, 403, { error: message });
+	sendJson$3(res, 403, { error: message });
 	return false;
 }
 /**
@@ -14889,11 +14780,11 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "POST") {
-					sendJson$4(res, 405, { error: "method not allowed" });
+					sendJson$3(res, 405, { error: "method not allowed" });
 					return;
 				}
 				if (!requireWebUi(req, res, "图片落盘仅限 WebUI（client 专用）")) return;
-				const raw = await readBody$4(req, 20971520);
+				const raw = await readBody$3(req, 20971520);
 				const body = JSON.parse(raw);
 				const workspace = resolveWorkspace(ctx, {
 					sessionId: body.sessionId,
@@ -14901,12 +14792,12 @@ function registerStatusApi(ctx, opts = {}) {
 				});
 				const root = cccRootForCwd(workspace);
 				if (!root) {
-					sendJson$4(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+					sendJson$3(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 					return;
 				}
-				sendJson$4(res, 200, { path: saveImageToTmp(root, body.mediaType ?? "", body.data ?? "") });
+				sendJson$3(res, 200, { path: saveImageToTmp(root, body.mediaType ?? "", body.data ?? "") });
 			} catch (err) {
-				sendJson$4(res, 400, { error: err.message ?? String(err) });
+				sendJson$3(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -14916,11 +14807,11 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "POST") {
-					sendJson$4(res, 405, { error: "method not allowed" });
+					sendJson$3(res, 405, { error: "method not allowed" });
 					return;
 				}
 				if (!requireWebUi(req, res, "文件落盘仅限 WebUI（client 专用）")) return;
-				const raw = await readBody$4(req, 20971520);
+				const raw = await readBody$3(req, 20971520);
 				const body = JSON.parse(raw);
 				const workspace = resolveWorkspace(ctx, {
 					sessionId: body.sessionId,
@@ -14928,12 +14819,12 @@ function registerStatusApi(ctx, opts = {}) {
 				});
 				const root = cccRootForCwd(workspace);
 				if (!root) {
-					sendJson$4(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+					sendJson$3(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 					return;
 				}
-				sendJson$4(res, 200, { path: saveFileToTmp(root, body.name ?? "", body.data ?? "") });
+				sendJson$3(res, 200, { path: saveFileToTmp(root, body.name ?? "", body.data ?? "") });
 			} catch (err) {
-				sendJson$4(res, 400, { error: err.message ?? String(err) });
+				sendJson$3(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -14949,7 +14840,7 @@ function registerStatusApi(ctx, opts = {}) {
 						workspace: url.searchParams.get("workspace") ?? void 0
 					}), configPaths);
 					const runtime = ctx.get("codeRuntime");
-					sendJson$4(res, 200, {
+					sendJson$3(res, 200, {
 						...status,
 						...runtime === void 0 ? { codeRuntime: null } : { codeRuntime: {
 							language: runtime.language,
@@ -14960,7 +14851,7 @@ function registerStatusApi(ctx, opts = {}) {
 				}
 				if (req.method === "POST") {
 					if (!requireWebUi(req, res, "safe-mode 切换仅限 WebUI（agent 不可自行开关）")) return;
-					const raw = await readBody$4(req, 65536);
+					const raw = await readBody$3(req, 65536);
 					const body = JSON.parse(raw);
 					const workspace = resolveWorkspace(ctx, {
 						sessionId: body.sessionId,
@@ -14968,19 +14859,19 @@ function registerStatusApi(ctx, opts = {}) {
 					});
 					const root = cccRootForCwd(workspace);
 					if (!root) {
-						sendJson$4(res, 404, { error: `no CCC found from workspace: ${workspace}` });
+						sendJson$3(res, 404, { error: `no CCC found from workspace: ${workspace}` });
 						return;
 					}
 					const result = setSafeMode(root, body.on === true);
-					sendJson$4(res, 200, {
+					sendJson$3(res, 200, {
 						...getStatus(workspace, configPaths),
 						...result
 					});
 					return;
 				}
-				sendJson$4(res, 405, { error: "method not allowed" });
+				sendJson$3(res, 405, { error: "method not allowed" });
 			} catch (err) {
-				sendJson$4(res, 400, { error: err.message ?? String(err) });
+				sendJson$3(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -14996,24 +14887,24 @@ function registerStatusApi(ctx, opts = {}) {
 					try {
 						known = projectKnownWorkspaces(hostService(ctx, "workspaceRegistry")?.list?.() ?? [], settings.gateway.workspaces);
 					} catch {}
-					sendJson$4(res, 200, {
+					sendJson$3(res, 200, {
 						config: toWire(settings),
 						knownWorkspaces: known
 					});
 					return;
 				}
 				if (req.method === "PUT") {
-					const raw = await readBody$4(req, 131072);
+					const raw = await readBody$3(req, 131072);
 					const saved = applyWirePatch(JSON.parse(raw).config ?? {});
 					try {
 						ctx.emit?.("serenity/config-updated");
 					} catch {}
-					sendJson$4(res, 200, { config: toWire(saved) });
+					sendJson$3(res, 200, { config: toWire(saved) });
 					return;
 				}
-				sendJson$4(res, 405, { error: "method not allowed" });
+				sendJson$3(res, 405, { error: "method not allowed" });
 			} catch (err) {
-				sendJson$4(res, 400, { error: err.message ?? String(err) });
+				sendJson$3(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -15023,7 +14914,7 @@ function registerStatusApi(ctx, opts = {}) {
 		handler: async (req, res) => {
 			try {
 				if (req.method !== "GET") {
-					sendJson$4(res, 405, { error: "method not allowed" });
+					sendJson$3(res, 405, { error: "method not allowed" });
 					return;
 				}
 				const url = new URL(req.url ?? "/", "http://127.0.0.1");
@@ -15032,54 +14923,12 @@ function registerStatusApi(ctx, opts = {}) {
 					workspace: url.searchParams.get("workspace") ?? void 0
 				});
 				const root = cccRootForCwd(workspace) ?? "";
-				sendJson$4(res, 200, { cccs: await listCccs(ctx, {
+				sendJson$3(res, 200, { cccs: await listCccs(ctx, {
 					defaultRoot: root,
 					withRoles: true
 				}) });
 			} catch (err) {
-				sendJson$4(res, 400, { error: err.message ?? String(err) });
-			}
-		}
-	});
-	ctx.webServer.register({
-		kind: "exact",
-		path: PUBLIC_ASK_PATH,
-		handler: async (req, res) => {
-			try {
-				if (!requireWebUi(req, res, "仅限 WebUI（key 属敏感凭据）")) return;
-				if (req.method === "PUT") {
-					const raw = await readBody$4(req, 16384);
-					if (JSON.parse(raw).action !== "rotate") {
-						sendJson$4(res, 400, { error: "unsupported action (expected \"rotate\")" });
-						return;
-					}
-					sendJson$4(res, 200, { key: rotatePublicAskKey() });
-					return;
-				}
-				if (req.method !== "GET") {
-					sendJson$4(res, 405, { error: "method not allowed" });
-					return;
-				}
-				const settings = readAdvancedSettings();
-				const { readSimpleSettings } = await import("./settings-section-xHABl8nk.js").then((n) => n.i);
-				const simple = readSimpleSettings();
-				const allowed = settings.publicAsk.allowed;
-				const port = simple.acpHttpPort ?? ACP_HTTP_PORT;
-				const base = `http://127.0.0.1:${port}`;
-				const containerUrls = allowed.map((name) => ({
-					name,
-					url: `${base}/c/${encodeURIComponent(name)}`
-				}));
-				sendJson$4(res, 200, {
-					enabled: simple.publicAskEnabled ?? false,
-					port,
-					key: ensurePublicAskKey(),
-					allowed,
-					urls: containerUrls,
-					listUrl: `${base}/`
-				});
-			} catch (err) {
-				sendJson$4(res, 400, { error: err.message ?? String(err) });
+				sendJson$3(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -15093,7 +14942,7 @@ function registerStatusApi(ctx, opts = {}) {
 				if (req.method === "GET") {
 					const chk = requireCcc(url.searchParams.get("ccc") ?? void 0);
 					if (!chk.ok) {
-						sendJson$4(res, 400, { error: chk.error });
+						sendJson$3(res, 400, { error: chk.error });
 						return;
 					}
 					const { readWeixinSettings } = await import("./weixin-route-B9gU1YXz.js").then((n) => n.u);
@@ -15107,7 +14956,7 @@ function registerStatusApi(ctx, opts = {}) {
 						enabled: a.enabled !== false,
 						bound: readWeixinCredential(chk.root, a.accountId) !== null
 					}));
-					sendJson$4(res, 200, {
+					sendJson$3(res, 200, {
 						enabled: settings.enabled === true,
 						botType: settings.botType ?? void 0,
 						accounts,
@@ -15117,14 +14966,14 @@ function registerStatusApi(ctx, opts = {}) {
 					return;
 				}
 				if (req.method !== "POST") {
-					sendJson$4(res, 405, { error: "method not allowed" });
+					sendJson$3(res, 405, { error: "method not allowed" });
 					return;
 				}
-				const raw = await readBody$4(req, 131072);
+				const raw = await readBody$3(req, 131072);
 				const body = JSON.parse(raw);
 				const chk = requireCcc(body.ccc);
 				if (!chk.ok) {
-					sendJson$4(res, 400, { error: chk.error });
+					sendJson$3(res, 400, { error: chk.error });
 					return;
 				}
 				const root = chk.root;
@@ -15141,7 +14990,7 @@ function registerStatusApi(ctx, opts = {}) {
 						startedAt: Date.now(),
 						polling: false
 					});
-					sendJson$4(res, 200, {
+					sendJson$3(res, 200, {
 						qrcode: qr.qrcode,
 						qrcode_img_content: qr.qrcode_img_content,
 						loginKey
@@ -15150,31 +14999,31 @@ function registerStatusApi(ctx, opts = {}) {
 				}
 				if (body.action === "remove-account") {
 					if (!body.accountId) {
-						sendJson$4(res, 400, { error: "missing accountId" });
+						sendJson$3(res, 400, { error: "missing accountId" });
 						return;
 					}
 					const { removeWeixinAccount } = await import("./weixin-route-B9gU1YXz.js").then((n) => n.u);
 					const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 					removeWeixinAccount(root, body.accountId);
 					syncCccBridge(ctx, root);
-					sendJson$4(res, 200, { removed: body.accountId });
+					sendJson$3(res, 200, { removed: body.accountId });
 					return;
 				}
 				if (body.action === "save-routes") {
 					const routes = body.routes ?? [];
 					if (!Array.isArray(routes) || routes.some((r) => typeof r?.user !== "string" || typeof r?.role !== "string" || r.user === "" || r.role === "")) {
-						sendJson$4(res, 400, { error: "invalid routes (expected [{user, role}, ...])" });
+						sendJson$3(res, 400, { error: "invalid routes (expected [{user, role}, ...])" });
 						return;
 					}
 					const { saveWeixinRoutes } = await import("./weixin-route-B9gU1YXz.js").then((n) => n.u);
 					const { readSkiffRoles } = await import("./skiff-role-B615L9MV.js").then((n) => n.u);
 					const roles = readSkiffRoles(root);
 					for (const r of routes) if (!roles.has(r.role)) {
-						sendJson$4(res, 400, { error: `unknown role: ${r.role} (not in ${root} skiff.roles)` });
+						sendJson$3(res, 400, { error: `unknown role: ${r.role} (not in ${root} skiff.roles)` });
 						return;
 					}
 					saveWeixinRoutes(root, routes);
-					sendJson$4(res, 200, { saved: routes.length });
+					sendJson$3(res, 200, { saved: routes.length });
 					return;
 				}
 				if (body.action === "set-enabled") {
@@ -15183,7 +15032,7 @@ function registerStatusApi(ctx, opts = {}) {
 					const { syncCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 					const settings = readWeixinSettings(root);
 					if (enabled && (settings.accounts ?? []).length === 0) {
-						sendJson$4(res, 400, { error: "启用前请先扫码绑定至少一个账号" });
+						sendJson$3(res, 400, { error: "启用前请先扫码绑定至少一个账号" });
 						return;
 					}
 					setWeixinEnabled(root, enabled);
@@ -15192,12 +15041,12 @@ function registerStatusApi(ctx, opts = {}) {
 						const { stopCccBridge } = await Promise.resolve().then(() => weixin_bridge_exports);
 						stopCccBridge(root);
 					}
-					sendJson$4(res, 200, { enabled });
+					sendJson$3(res, 200, { enabled });
 					return;
 				}
-				sendJson$4(res, 400, { error: `unsupported action: ${body.action ?? ""}` });
+				sendJson$3(res, 400, { error: `unsupported action: ${body.action ?? ""}` });
 			} catch (err) {
-				sendJson$4(res, 400, { error: err.message ?? String(err) });
+				sendJson$3(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -15208,18 +15057,18 @@ function registerStatusApi(ctx, opts = {}) {
 			try {
 				if (!requireWebUi(req, res, "微信桥配置仅限 WebUI（client 专用）")) return;
 				if (req.method !== "GET") {
-					sendJson$4(res, 405, { error: "method not allowed" });
+					sendJson$3(res, 405, { error: "method not allowed" });
 					return;
 				}
 				const key = new URL(req.url ?? "/", "http://127.0.0.1").searchParams.get("key") ?? "";
 				const login = weixinLogins.get(key);
 				if (!login) {
-					sendJson$4(res, 404, { error: "login not found or expired" });
+					sendJson$3(res, 404, { error: "login not found or expired" });
 					return;
 				}
 				if (Date.now() - login.startedAt > WEIXIN_LOGIN_TTL_MS) {
 					weixinLogins.delete(key);
-					sendJson$4(res, 200, { status: "expired" });
+					sendJson$3(res, 200, { status: "expired" });
 					return;
 				}
 				const { pollQRStatus } = await import("./weixin-api-BrRcPiQs.js").then((n) => n.u);
@@ -15232,7 +15081,7 @@ function registerStatusApi(ctx, opts = {}) {
 				switch (status.status) {
 					case "confirmed": {
 						if (!status.bot_token) {
-							sendJson$4(res, 200, {
+							sendJson$3(res, 200, {
 								status: "error",
 								error: "confirmed but no bot_token"
 							});
@@ -15253,7 +15102,7 @@ function registerStatusApi(ctx, opts = {}) {
 						});
 						syncCccBridge(ctx, login.root);
 						weixinLogins.delete(key);
-						sendJson$4(res, 200, {
+						sendJson$3(res, 200, {
 							status: "confirmed",
 							accountId,
 							tokenSaved: true
@@ -15262,14 +15111,14 @@ function registerStatusApi(ctx, opts = {}) {
 					}
 					case "expired":
 						weixinLogins.delete(key);
-						sendJson$4(res, 200, { status: "expired" });
+						sendJson$3(res, 200, { status: "expired" });
 						return;
 					default:
-						sendJson$4(res, 200, { status: status.status ?? "wait" });
+						sendJson$3(res, 200, { status: status.status ?? "wait" });
 						return;
 				}
 			} catch (err) {
-				sendJson$4(res, 400, { error: err.message ?? String(err) });
+				sendJson$3(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -15291,7 +15140,7 @@ function registerStatusApi(ctx, opts = {}) {
 				const root = sessionsRootDir();
 				if (req.method === "GET") {
 					const { candidates } = performCleanup(root, cutoffDaysAgo(days), liveIds, { dryRun: true });
-					sendJson$4(res, 200, {
+					sendJson$3(res, 200, {
 						root,
 						olderThanDays: days,
 						dryRun: true,
@@ -15305,12 +15154,12 @@ function registerStatusApi(ctx, opts = {}) {
 					return;
 				}
 				if (req.method !== "POST") {
-					sendJson$4(res, 405, { error: "method not allowed" });
+					sendJson$3(res, 405, { error: "method not allowed" });
 					return;
 				}
 				if (!requireWebUi(req, res, "会话清理仅限 WebUI（client 专用）")) return;
 				const { result } = performCleanup(root, cutoffDaysAgo(days), liveIds);
-				sendJson$4(res, 200, {
+				sendJson$3(res, 200, {
 					root,
 					olderThanDays: days,
 					dryRun: false,
@@ -15318,7 +15167,7 @@ function registerStatusApi(ctx, opts = {}) {
 					errors: result.errors
 				});
 			} catch (err) {
-				sendJson$4(res, 400, { error: err.message ?? String(err) });
+				sendJson$3(res, 400, { error: err.message ?? String(err) });
 			}
 		}
 	});
@@ -15371,7 +15220,7 @@ function loadVoyageHtml(assetPath = voyageAssetPath()) {
 	return readFileSync(assetPath, "utf-8");
 }
 /** 发 JSON（错误分支用；与 api.ts 的 sendJson 同形，但本模块不依赖它，保持零耦合） */
-function sendJson$3(res, status, body) {
+function sendJson$2(res, status, body) {
 	res.statusCode = status;
 	res.setHeader("content-type", "application/json; charset=utf-8");
 	res.end(JSON.stringify(body));
@@ -15386,14 +15235,14 @@ function registerVoyageApi(ctx, opts = {}) {
 		path: VOYAGE_PATH,
 		handler: (req, res) => {
 			if (req.method !== "GET") {
-				sendJson$3(res, 405, { error: "method not allowed" });
+				sendJson$2(res, 405, { error: "method not allowed" });
 				return;
 			}
 			let html;
 			try {
 				html = loadVoyageHtml(opts.assetPath ?? voyageAssetPath());
 			} catch (err) {
-				sendJson$3(res, 500, { error: `voyage asset unavailable: ${err?.message ?? String(err)}` });
+				sendJson$2(res, 500, { error: `voyage asset unavailable: ${err?.message ?? String(err)}` });
 				return;
 			}
 			res.statusCode = 200;
@@ -15988,14 +15837,16 @@ function summarizeHostContract(report) {
 *
 * ## 现状 → 本模块要收掉什么（取证：`…/acc-c4c5-current-state.md` §①/§③ 3.1）
 *
-* 插件自己 spawn 了**四个** node:http 监听器（B 3081 网关 / C 3082 微信发送 / D 3099 Skiff 调试
-* / E 3100 ACP+问答）。此前四处各写一份同款样板：`createServer` + `server.once('error')` +
+* 插件自己 spawn 了**三个** node:http 监听器（B 3081 网关 / C 3082 微信发送 / D 3099 Skiff 调试）。
+* ⚠️ **2026-10-15 变更**：原为四个（含 **E 3100 ACP+问答**），E 已随 owner「砍掉外部问答」令**整面退役**
+* ⇒ 仍保有面 B/C/D 三个；本段保留"当年是四个"的记述，因为下方"两套拆卸"的病史由它解释。
+* 此前四处各写一份同款样板：`createServer` + `server.once('error')` +
 * `listen(port, host)` + 模块级 `active` 变量 + `close()`；拆卸也分裂成**两套**——
 * `seams/lifecycle.ts` 有一个聚合 disposer，而 `gateway.ts` 与 `weixin-send-api.ts`
 * **各自另注册**一个（D/E 干脆没有自己的 disposer）。
 *
 * 本模块把"listener 生命周期"收成一处：**active 表 + 统一 listen/close + 统一错误与端口占用
-* 处理**。四个面各自只提供 `{ name, port, host, enabled, handler }`。
+* 处理**。各面各自只提供 `{ name, port, host, enabled, handler }`。
 *
 * ## 🔴 共享的是「生命周期与样板」，**绝不是**「路由 / 监听器 / 鉴权」
 *
@@ -16003,12 +15854,12 @@ function summarizeHostContract(report) {
 *   · **A ↔ C 解耦**（`weixin-send-api.ts:4-7`）：3080 会被 3081 原样反代（连请求头），
 *     把 3082 的端点挂到 3080 上 = 已登录的外部家庭账号即可冒充 bot 发消息
 *     ⇒ 本模块**不提供**"把面挂到别的面"的能力，也不共享路由表；
-*   · **E ↔ D** 共用会话核心（acp-core → skiff-core）但各自独立 listener + 独立路由/HTML；
+*   · （原 **E ↔ D** 共用会话核心但各自独立 listener 一条，**随 E 退役删除**）；
 *   · **B 是 A 的代理宿主**（把请求打到 `127.0.0.1:<主端口>`），不是另一个路由面。
 *
 * ## 面 A（3080）不在本模块之列
 * 它是**宿主 DSH 主 WebUI**，插件只往上挂 `/serenity/*` 路由（`ctx.webServer.register`），
-* **插件不起这个 listener** ⇒ 面宿主只持有 B/C/D/E 四个自起面。
+* **插件不起这个 listener** ⇒ 面宿主只持有 B/C/D 三个自起面。
 *
 * ## 两个入口的分工（这是本模块唯一的"抽象决策"，别混）
 *   · {@link startFace} —— **机械启动**：把一个 handler 绑到 `host:port` 上。同名面若已在监听，
@@ -16633,7 +16484,7 @@ function createDshCookieProvider(connection, authority) {
 /** 面名（C4 块 A：listener 生命周期归 `face-host`） */
 const FACE_GATEWAY = "gateway";
 /** 读取请求体（≤ maxBytes；超限 reject） */
-function readBody$3(req, maxBytes) {
+function readBody$2(req, maxBytes) {
 	return new Promise((resolve, reject) => {
 		let data = "";
 		req.on("data", (chunk) => {
@@ -16760,7 +16611,7 @@ async function startGateway(config, getAccounts, getDshCookie) {
 		const session = authed(req);
 		if (session !== void 0) {
 			if (req.method === "POST" && isWorkspaceCreatePath(url.pathname)) {
-				readBody$3(req, 131072).then((body) => {
+				readBody$2(req, 131072).then((body) => {
 					const { rpcId, path } = parseWorkspaceCreateBody(body);
 					if (!allowWorkspaceCreate) {
 						res.writeHead(403, { "content-type": "application/json" });
@@ -19090,7 +18941,7 @@ const SKIFF_DEBUG_HOST = FACE_PORTS.skiffDebug.host ?? "127.0.0.1";
 function skiffDebugActive() {
 	return faceActive(FACE_SKIFF_DEBUG);
 }
-function readBody$2(req) {
+function readBody$1(req) {
 	return new Promise((resolve, reject) => {
 		const chunks = [];
 		req.on("data", (c) => chunks.push(c));
@@ -19098,7 +18949,7 @@ function readBody$2(req) {
 		req.on("error", reject);
 	});
 }
-function sendJson$2(res, status, payload) {
+function sendJson$1(res, status, payload) {
 	const body = JSON.stringify(payload);
 	res.writeHead(status, {
 		"Content-Type": "application/json; charset=utf-8",
@@ -19106,7 +18957,7 @@ function sendJson$2(res, status, payload) {
 	});
 	res.end(body);
 }
-function sendHtml$1(res, html) {
+function sendHtml(res, html) {
 	res.writeHead(200, {
 		"Content-Type": "text/html; charset=utf-8",
 		"Cache-Control": "no-store"
@@ -19303,8 +19154,8 @@ function escapeHtml(s) {
 * 在 JSON **文本层**把它们替换为 `\uXXXX` 转义序列：JSON.parse 后语义完全一致（还原原字符），
 * 且 JSC 正则看到的是常规 ASCII 转义（与 JSON.stringify 对控制字符的输出同形态，安全）。
 *
-* 3100 问答页客户端 `await res.json()`（acp-http.ts）与页面内嵌 JSON（skiff-debug/acp-http）
-* 均需此兼容层——iOS Safari 用户实测"复杂回答"触发。
+* 3099 调试页客户端 `await res.json()` 与页面内嵌 JSON 均需此兼容层
+* ——iOS Safari 用户实测"复杂回答"触发。（原同批还列了 3100 问答页，该面已退役，2026-10-15）
 *
 * @param jsonText JSON.stringify 的输出文本；原地等价替换，返回 JSC 安全文本
 */
@@ -19432,7 +19283,7 @@ function skiffDebugSpec(ctx, root, port, webPort) {
 		port,
 		host: SKIFF_DEBUG_HOST,
 		enabled: () => readSimpleSettings().skiffEnabled,
-		handler: (req, res) => handle$1(ctx, root, webPort, req, res)
+		handler: (req, res) => handle(ctx, root, webPort, req, res)
 	};
 }
 /**
@@ -19456,11 +19307,11 @@ async function startSkiffDebugServer(ctx, root, port, webPort) {
 function stopSkiffDebugServer() {
 	stopFace(FACE_SKIFF_DEBUG);
 }
-async function handle$1(ctx, defaultRoot, webPort, req, res) {
+async function handle(ctx, defaultRoot, webPort, req, res) {
 	try {
 		const url = (req.url ?? "/").split("?")[0] ?? "/";
 		if (req.method === "GET" && url === "/") {
-			sendHtml$1(res, skiffDebugPage(await listCccs(ctx, {
+			sendHtml(res, skiffDebugPage(await listCccs(ctx, {
 				defaultRoot,
 				withRoles: true
 			}), defaultRoot, webPort));
@@ -19469,11 +19320,11 @@ async function handle$1(ctx, defaultRoot, webPort, req, res) {
 		if (req.method === "POST" && url === "/ask") {
 			let body;
 			try {
-				const parsed = JSON.parse(await readBody$2(req));
+				const parsed = JSON.parse(await readBody$1(req));
 				if (parsed === null || typeof parsed !== "object") throw new Error("not an object");
 				body = parsed;
 			} catch {
-				sendJson$2(res, 400, { error: "invalid JSON body" });
+				sendJson$1(res, 400, { error: "invalid JSON body" });
 				return;
 			}
 			const ccc = typeof body.ccc === "string" && body.ccc !== "" ? body.ccc : defaultRoot;
@@ -19482,11 +19333,11 @@ async function handle$1(ctx, defaultRoot, webPort, req, res) {
 			const sessionId = typeof body.sessionId === "string" && body.sessionId !== "" ? body.sessionId : void 0;
 			const role = readSkiffRoles(ccc).get(roleName);
 			if (!roleName || !role) {
-				sendJson$2(res, 400, { error: `unknown role: ${roleName} (ccc: ${ccc})` });
+				sendJson$1(res, 400, { error: `unknown role: ${roleName} (ccc: ${ccc})` });
 				return;
 			}
 			if (!question.trim()) {
-				sendJson$2(res, 400, { error: "empty question" });
+				sendJson$1(res, 400, { error: "empty question" });
 				return;
 			}
 			let agent;
@@ -19495,11 +19346,11 @@ async function handle$1(ctx, defaultRoot, webPort, req, res) {
 				const info = skiffSessionInfo(sessionId);
 				const live = getSkiffAgent(sessionId);
 				if (!info || !live) {
-					sendJson$2(res, 400, { error: "session is not recoverable (process restarted or session unknown) — start a new conversation" });
+					sendJson$1(res, 400, { error: "session is not recoverable (process restarted or session unknown) — start a new conversation" });
 					return;
 				}
 				if (info.role !== roleName || info.ccc !== ccc) {
-					sendJson$2(res, 400, { error: `session "${sessionId}" belongs to role "${info.role}" in another CCC — start a new conversation` });
+					sendJson$1(res, 400, { error: `session "${sessionId}" belongs to role "${info.role}" in another CCC — start a new conversation` });
 					return;
 				}
 				agent = live;
@@ -19508,7 +19359,7 @@ async function handle$1(ctx, defaultRoot, webPort, req, res) {
 			const hc = readCheapWorkerConfig(ccc);
 			if (!agent) agent = (await createSkiffAgent(ctx, ccc, roleName, role, hc?.defaultModel)).agent;
 			const result = await askSkiff(ctx, agent, question, 0);
-			sendJson$2(res, 200, {
+			sendJson$1(res, 200, {
 				answer: result.answer,
 				answer_html: renderSkiffMarkdown(result.answer),
 				sessionId: result.sessionId,
@@ -19517,9 +19368,9 @@ async function handle$1(ctx, defaultRoot, webPort, req, res) {
 			});
 			return;
 		}
-		sendJson$2(res, 404, { error: "not found" });
+		sendJson$1(res, 404, { error: "not found" });
 	} catch (err) {
-		sendJson$2(res, 500, { error: err?.message ?? String(err) });
+		sendJson$1(res, 500, { error: err?.message ?? String(err) });
 	}
 }
 //#endregion
@@ -19663,7 +19514,9 @@ const rebukeStates = /* @__PURE__ */ new Map();
 //#endregion
 //#region src/output-guard-seam.ts
 /** 外部面会话判定（v1.26.3 用户拍板：仅外部面检测，本地维护会话豁免）：
-*  skiff-（F4 问答）/ acp-（F4c 程序化）/ rebuild-（v1.22.4 重建会话）前缀 */
+*  skiff-（F4 问答）/ rebuild-（v1.22.4 重建会话）前缀。
+*  🔴 `acp-` 分支保留但**已是死判据**（无生产者；面 E 已于 2026-10-15 退役）——
+*  理由与"为何不擅自删"见文件头注释。 */
 function isExternalFaceSession(sessionId) {
 	if (!sessionId) return false;
 	return isSkiffSessionId(sessionId) || sessionId.startsWith("acp-") || sessionId.startsWith("rebuild-");
@@ -19958,760 +19811,6 @@ function registerUnattendedSeam(ctx) {
 	});
 }
 //#endregion
-//#region src/acp-core.ts
-/** JSON-RPC 错误码（对齐标准） */
-const RPC_ERROR = {
-	PARSE: -32700,
-	INVALID_REQUEST: -32600,
-	METHOD_NOT_FOUND: -32601,
-	INVALID_PARAMS: -32602,
-	INTERNAL: -32603
-};
-/**
-* ACP 会话管理器：持有 skiff agent 会话（与 skiff-core 注册表同源——
-* 创建走 createSkiffAgent（自动注册），关闭走 unregisterSkiffSession）。
-* 传输无关：HTTP 端点/企业微信桥/未来 stdio 都调 handle(method, params)。
-*/
-var AcpServer = class {
-	ctx;
-	constructor(ctx) {
-		this.ctx = ctx;
-	}
-	/** 实现级方法调度（返回 result 或抛 JSON-RPC 语义错误） */
-	async handle(method, params) {
-		switch (method) {
-			case "initialize": return this.initialize();
-			case "authenticate": return {};
-			case "session/new": return this.newSession(params);
-			case "session/list": return this.listSessions();
-			case "session/prompt": return this.prompt(params);
-			case "session/cancel": return this.cancel(params);
-			case "session/close": return this.closeSession(params);
-			case "session/request_permission": return { allow: true };
-			default: throw new RpcMethodError(`method not found: ${method}`);
-		}
-	}
-	initialize() {
-		return {
-			protocolVersion: 1,
-			capabilities: {
-				sessionId: true,
-				ccc: true,
-				role: true
-			},
-			serverInfo: {
-				name: "dsh-serenity-hooks-acp",
-				version: "1.26.0"
-			}
-		};
-	}
-	/**
-	* session/new：{ ccc, role, sessionId? } → 创建或延续 skiff 会话。
-	* 无 sessionId → createSkiffAgent（新会话，continued:false）；
-	* 有 → 进程内延续（getSkiffAgent 命中 + role/ccc 绑定校验；未命中 → 错误）。
-	*/
-	async newSession(params) {
-		const ccc = typeof params?.ccc === "string" && params.ccc !== "" ? params.ccc : void 0;
-		const roleName = typeof params?.role === "string" ? params.role : void 0;
-		const sessionId = typeof params?.sessionId === "string" && params.sessionId !== "" ? params.sessionId : void 0;
-		if (!ccc) throw new RpcInvalidParams("session/new requires ccc (CCC root path)");
-		if (!roleName) throw new RpcInvalidParams("session/new requires role");
-		const role = readSkiffRoles(ccc).get(roleName);
-		if (!role) throw new RpcInvalidParams(`unknown role: ${roleName} (ccc: ${ccc})`);
-		if (sessionId) {
-			const info = skiffSessionInfo(sessionId);
-			const live = getSkiffAgent(sessionId);
-			if (!info || !live) throw new RpcInvalidParams("session is not recoverable (process restarted or session unknown) — start a new conversation");
-			if (info.role !== roleName || info.ccc !== ccc) throw new RpcInvalidParams(`session "${sessionId}" belongs to role "${info.role}" in another CCC`);
-			return {
-				sessionId,
-				role: roleName,
-				ccc,
-				continued: true
-			};
-		}
-		const hc = readCheapWorkerConfig(ccc);
-		return {
-			sessionId: (await createSkiffAgent(this.ctx, ccc, roleName, role, hc?.defaultModel)).sessionId,
-			role: roleName,
-			ccc,
-			continued: false
-		};
-	}
-	listSessions() {
-		const sessions = [];
-		for (const [id, b] of skiffSessionSnapshot()) sessions.push({
-			sessionId: id,
-			role: b.role,
-			ccc: b.ccc
-		});
-		return { sessions };
-	}
-	/**
-	* session/prompt：{ sessionId, question } → 答案（**v1.26.10：不返回 trajectory**——
-	* 3100 对外只提供问答，轨迹含工具结果等内部信息；3099 调试页另走 /ask 保留）
-	*/
-	async prompt(params) {
-		const sessionId = typeof params?.sessionId === "string" ? params.sessionId : void 0;
-		const question = typeof params?.question === "string" ? params.question : void 0;
-		if (!sessionId) throw new RpcInvalidParams("session/prompt requires sessionId");
-		if (!question?.trim()) throw new RpcInvalidParams("session/prompt requires question");
-		const agent = getSkiffAgent(sessionId);
-		if (!agent) throw new RpcInvalidParams(`unknown session: ${sessionId} (not recoverable — process restarted?)`);
-		const result = await askSkiff(this.ctx, agent, question, void 0, { includeTrajectory: false });
-		return {
-			answer: result.answer,
-			sessionId: result.sessionId
-		};
-	}
-	/** session/cancel：{ sessionId } → 取消该会话的当前活动（Agent.cancel，宿主 rc.1 契约） */
-	cancel(params) {
-		const sessionId = typeof params?.sessionId === "string" ? params.sessionId : void 0;
-		if (!sessionId) return { cancelled: false };
-		const agent = getSkiffAgent(sessionId);
-		if (!agent) return { cancelled: false };
-		try {
-			agent.cancel({ kind: "user" });
-		} catch {}
-		return { cancelled: true };
-	}
-	/** session/close：{ sessionId } → 释放 agent + 注册表清理（进程内） */
-	closeSession(params) {
-		const sessionId = typeof params?.sessionId === "string" ? params.sessionId : void 0;
-		if (!sessionId) return { closed: false };
-		if (!getSkiffAgent(sessionId)) return { closed: false };
-		unregisterSkiffSession(sessionId);
-		return { closed: true };
-	}
-};
-/** 方法不存在错误（JSON-RPC -32601） */
-var RpcMethodError = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = "RpcMethodError";
-	}
-};
-/** 参数错误（JSON-RPC -32602） */
-var RpcInvalidParams = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = "RpcInvalidParams";
-	}
-};
-/**
-* JSON-RPC 2.0 批处理（单帧）：解析请求/通知 → 调 AcpServer.handle → 响应。
-* 传输无关：acp-http 端点 / 未来 stdio 共用。
-* @returns 响应帧数组（请求有响应；通知无；解析失败 → 单错误响应）
-*/
-async function dispatchRpc(server, frame) {
-	if (frame === null || typeof frame !== "object") return [rpcError(null, RPC_ERROR.INVALID_REQUEST, "invalid request")];
-	const req = frame;
-	if (req.jsonrpc !== "2.0" || typeof req.method !== "string") return [rpcError(req.id ?? null, RPC_ERROR.INVALID_REQUEST, "invalid request")];
-	if (req.id === void 0) {
-		try {
-			await server.handle(req.method, req.params);
-		} catch {}
-		return [];
-	}
-	try {
-		const result = await server.handle(req.method, req.params);
-		return [{
-			jsonrpc: "2.0",
-			id: req.id,
-			result
-		}];
-	} catch (error) {
-		return [rpcError(req.id, rpcCodeOf(error), error instanceof Error ? error.message : String(error))];
-	}
-}
-function rpcCodeOf(error) {
-	if (error instanceof RpcMethodError) return RPC_ERROR.METHOD_NOT_FOUND;
-	if (error instanceof RpcInvalidParams) return RPC_ERROR.INVALID_PARAMS;
-	return RPC_ERROR.INTERNAL;
-}
-function rpcError(id, code, message) {
-	return {
-		jsonrpc: "2.0",
-		id,
-		error: {
-			code,
-			message
-		}
-	};
-}
-//#endregion
-//#region src/acp-http.ts
-/** 面名（C4 块 A） */
-const FACE_ACP_HTTP = "acp-http";
-/** 监听地址：**只绑 loopback**（JSON-RPC 子面无认证——仅靠 loopback；问答页另有 key 认证） */
-const ACP_HTTP_HOST = FACE_PORTS.acpHttp.host ?? "127.0.0.1";
-function acpHttpActive() {
-	return faceActive(FACE_ACP_HTTP);
-}
-function readBody$1(req) {
-	return new Promise((resolve, reject) => {
-		const chunks = [];
-		req.on("data", (c) => chunks.push(c));
-		req.on("end", () => resolve(Buffer.concat(chunks).toString("utf-8")));
-		req.on("error", reject);
-	});
-}
-function sendJson$1(res, status, payload) {
-	const body = jscSafeJsonText(JSON.stringify(payload));
-	res.writeHead(status, {
-		"Content-Type": "application/json; charset=utf-8",
-		"Cache-Control": "no-store"
-	});
-	res.end(body);
-}
-function sendHtml(res, html) {
-	res.writeHead(200, {
-		"Content-Type": "text/html; charset=utf-8",
-		"Cache-Control": "no-store"
-	});
-	res.end(html);
-}
-/**
-* 本面的规格（C4 块 A/④：**只提供** name/port/host/enabled/handler）。
-* 两个子面（ACP JSON-RPC / 对外问答页）的路由与鉴权仍全部归 {@link handle}——
-* 面宿主不介入面语义，也**不合并** D/E 两面（两者共用会话核心但各有独立 listener/路由/HTML）。
-*/
-function acpHttpSpec(ctx, port, defaultRoot) {
-	return {
-		name: FACE_ACP_HTTP,
-		port,
-		host: ACP_HTTP_HOST,
-		enabled: () => {
-			const s = readSimpleSettings();
-			return s.acpEnabled || s.publicAskEnabled;
-		},
-		handler: (req, res) => handle(ctx, defaultRoot ?? "", req, res)
-	};
-}
-/**
-* 启动 ACP HTTP JSON-RPC + 建议问答页服务（单实例；重复启动幂等返回既有实例）。
-* C4 块 A：listener 的创建/监听/错误/端口占用/关闭归 `face-host`。
-* @param ctx 插件上下文（AcpServer 内部经 skiff-core 创建 agent）
-* @param port 监听端口（仅 127.0.0.1）
-* @param defaultRoot 默认 CCC 根（问答页候选发现兜底；resolveSkiffRoot 传入）
-*/
-async function startAcpHttpServer(ctx, port, defaultRoot) {
-	if (acpHttpActive()) return;
-	const handle = await startFace(acpHttpSpec(ctx, port, defaultRoot));
-	const s = readSimpleSettings();
-	const faces = [];
-	if (s.acpEnabled) faces.push("JSON-RPC");
-	if (s.publicAskEnabled) faces.push("问答页(key 认证)");
-	console.log(`[serenity-hooks] ✓ ACP HTTP: http://127.0.0.1:${handle.port}（${faces.join(" + ") || "未开启任何面"}；session/new 支持 {ccc, role, sessionId?}）`);
-}
-function stopAcpHttpServer() {
-	stopFace(FACE_ACP_HTTP);
-}
-async function handle(ctx, defaultRoot, req, res) {
-	try {
-		const url = (req.url ?? "/").split("?")[0] ?? "/";
-		const s = readSimpleSettings();
-		const ip = req.headers["x-forwarded-for"]?.split(",")[0]?.trim() || req.socket.remoteAddress || "unknown";
-		if (req.method === "POST" && url === "/") {
-			if (!s.acpEnabled) {
-				sendJson$1(res, 403, { error: "ACP JSON-RPC disabled (enable in Serenity settings)" });
-				return;
-			}
-			let body;
-			try {
-				body = JSON.parse(await readBody$1(req));
-			} catch {
-				sendJson$1(res, 400, [{
-					jsonrpc: "2.0",
-					id: null,
-					error: {
-						code: -32700,
-						message: "parse error"
-					}
-				}]);
-				return;
-			}
-			sendJson$1(res, 200, await dispatchRpc(new AcpServer(ctx), body));
-			return;
-		}
-		if (!s.publicAskEnabled) {
-			if (req.method === "GET" && (url === "/" || url.startsWith("/c/"))) {
-				sendHtml(res, publicAskDisabledHtml());
-				return;
-			}
-			if (req.method === "POST" && (url === "/ask" || url.startsWith("/c/"))) {
-				sendJson$1(res, 403, { error: "public ask disabled (enable in Serenity settings)" });
-				return;
-			}
-			sendJson$1(res, 404, { error: "not found" });
-			return;
-		}
-		const containerAllowed = (name) => {
-			const allowed = readAdvancedSettings().publicAsk.allowed;
-			return allowed.length === 0 || allowed.includes(name);
-		};
-		let cccsCache = null;
-		const cccsOf = async () => {
-			if (cccsCache === null) cccsCache = await listCccs(ctx, {
-				defaultRoot: defaultRoot || (cccRootForCwd(process.cwd()) ?? ""),
-				withRoles: true
-			});
-			return cccsCache;
-		};
-		const cMatch = /^\/c\/([^/]+)$/.exec(url);
-		if (req.method === "GET" && cMatch) {
-			const name = decodeURIComponent(cMatch[1] ?? "");
-			const ccc = (await cccsOf()).find((c) => c.name === name);
-			if (!ccc) {
-				sendHtml(res, publicAskContainerUnknownHtml(name));
-				return;
-			}
-			if (!containerAllowed(name)) {
-				sendHtml(res, publicAskContainerClosedHtml(name));
-				return;
-			}
-			sendHtml(res, publicAskContainerPage(ccc));
-			return;
-		}
-		if (req.method === "GET" && url === "/") {
-			sendHtml(res, publicAskListPage((await cccsOf()).filter((c) => containerAllowed(c.name))));
-			return;
-		}
-		const aMatch = /^\/c\/([^/]+)\/ask$/.exec(url);
-		if (req.method === "POST" && aMatch) {
-			const name = decodeURIComponent(aMatch[1] ?? "");
-			const ccc = (await cccsOf()).find((c) => c.name === name);
-			if (!ccc || !containerAllowed(name)) {
-				sendJson$1(res, 403, { error: `container "${name}" is not open for public ask` });
-				return;
-			}
-			let body;
-			try {
-				const parsed = JSON.parse(await readBody$1(req));
-				if (parsed === null || typeof parsed !== "object") throw new Error("not an object");
-				body = parsed;
-			} catch {
-				sendJson$1(res, 400, { error: "invalid JSON body" });
-				return;
-			}
-			await handleAskParsed(ctx, ccc, body, res, ip);
-			return;
-		}
-		if (req.method === "POST" && url === "/ask") {
-			let body;
-			try {
-				const parsed = JSON.parse(await readBody$1(req));
-				if (parsed === null || typeof parsed !== "object") throw new Error("not an object");
-				body = parsed;
-			} catch {
-				sendJson$1(res, 400, { error: "invalid JSON body" });
-				return;
-			}
-			const cccValue = typeof body.ccc === "string" && body.ccc !== "" ? body.ccc : void 0;
-			const nameValue = typeof body.name === "string" && body.name !== "" ? body.name : void 0;
-			let ccc;
-			if (nameValue) ccc = (await cccsOf()).find((c) => c.name === nameValue);
-			else if (cccValue) {
-				ccc = (await cccsOf()).find((c) => c.root === cccValue);
-				if (!ccc && cccValue !== "") ccc = {
-					root: cccValue,
-					name: cccValue.split("/").filter(Boolean).pop() ?? cccValue,
-					roles: [...readSkiffRoles(cccValue).keys()]
-				};
-			}
-			if (!ccc || !containerAllowed(ccc.name)) {
-				sendJson$1(res, 403, { error: "container is not open for public ask" });
-				return;
-			}
-			await handleAskParsed(ctx, ccc, body, res, ip);
-			return;
-		}
-		sendJson$1(res, 404, { error: "not found" });
-	} catch (err) {
-		sendJson$1(res, 500, { error: err?.message ?? String(err) });
-	}
-}
-/**
-* 单容器问答核心（/c/<name>/ask 与 /ask 共用）：
-* body { key, role?, question, sessionId? } → key 校验（401 + IP 失败锁定）→ 角色缺省取 CCC 第一个
-* → 会话延续（v1.25.10 语义，静默新建）→ askSkiff(0 全量轨迹) → { answer, answer_html, sessionId, continued, trajectory }
-* @param ip 请求来源 IP（v1.26.5 公网 key 失败锁定：X-Forwarded-For 优先——公网反代，回退 remoteAddress）
-*/
-async function handleAskParsed(ctx, ccc, body, res, ip) {
-	const key = typeof body.key === "string" ? body.key : void 0;
-	if (isPublicAskIpLocked(ip)) {
-		sendJson$1(res, 429, { error: "too many failed attempts — temporarily locked (retry later)" });
-		return;
-	}
-	if (!verifyPublicAskKey(key)) {
-		const remaining = recordPublicAskFail(ip);
-		sendJson$1(res, remaining > 0 ? 429 : 401, { error: remaining > 0 ? `too many failed attempts — locked for ${Math.ceil(remaining / 6e4)} min` : "invalid or missing key" });
-		return;
-	}
-	resetPublicAskIpFail(ip);
-	const root = ccc.root;
-	const roleName = typeof body.role === "string" && body.role !== "" ? body.role : void 0;
-	const question = typeof body.question === "string" ? body.question : "";
-	const sessionId = typeof body.sessionId === "string" && body.sessionId !== "" ? body.sessionId : void 0;
-	if (!question.trim()) {
-		sendJson$1(res, 400, { error: "empty question" });
-		return;
-	}
-	const roles = readSkiffRoles(root);
-	const explicit = roleName ? roles.get(roleName) : void 0;
-	const effectiveRole = roleName && explicit ? roleName : roles.keys().next().value;
-	const effectiveCfg = (roleName && explicit ? explicit : effectiveRole ? roles.get(effectiveRole) : void 0) ?? void 0;
-	if (!effectiveRole || !effectiveCfg) {
-		sendJson$1(res, 400, { error: `no skiff role available in ccc: ${root}` });
-		return;
-	}
-	let agent;
-	let continued = false;
-	if (sessionId) {
-		const info = skiffSessionInfo(sessionId);
-		const live = getSkiffAgent(sessionId);
-		if (info && live && info.role === effectiveRole && info.ccc === root) {
-			agent = live;
-			continued = true;
-		}
-	}
-	if (!agent) agent = (await createSkiffAgent(ctx, root, effectiveRole, effectiveCfg, readCheapWorkerConfig(root)?.defaultModel)).agent;
-	const result = await askSkiff(ctx, agent, question, void 0, { includeTrajectory: false });
-	sendJson$1(res, 200, {
-		answer: result.answer,
-		answer_html: renderSkiffMarkdown(result.answer, true),
-		sessionId: result.sessionId,
-		continued
-	});
-}
-/** 问答页未启用提示页 */
-function publicAskDisabledHtml() {
-	return `<!DOCTYPE html>
-<html lang="zh"><head><meta charset="utf-8"><title>Serenity Public Ask</title></head>
-<body style="font-family:system-ui;padding:48px;text-align:center;color:#57606a">
-<h2>Serenity Public Ask</h2>
-<p>问答页未启用（请在 dsh 设置面板「Serenity」页开启「建议问答」）。</p>
-</body></html>`;
-}
-/** 容器不存在提示页（URL 容器名不在已发现 CCC 中） */
-function publicAskContainerUnknownHtml(name) {
-	return `<!DOCTYPE html>
-<html lang="zh"><head><meta charset="utf-8"><title>Serenity Public Ask</title></head>
-<body style="font-family:system-ui;padding:48px;text-align:center;color:#57606a">
-<h2>Serenity Public Ask</h2>
-<p>认知容器「${name}」不存在。</p>
-<p style="font-size:13px"><a href="/" style="color:#0ba875">返回容器列表</a></p>
-</body></html>`;
-}
-/** 容器未开放提示页（白名单外） */
-function publicAskContainerClosedHtml(name) {
-	return `<!DOCTYPE html>
-<html lang="zh"><head><meta charset="utf-8"><title>Serenity Public Ask</title></head>
-<body style="font-family:system-ui;padding:48px;text-align:center;color:#57606a">
-<h2>Serenity Public Ask</h2>
-<p>认知容器「${name}」当前未开放问答（管理员在设置面板「开放容器」中配置）。</p>
-<p style="font-size:13px"><a href="/" style="color:#0ba875">返回容器列表</a></p>
-</body></html>`;
-}
-/** 页面基础样式（列表页 + 单容器页共用；v1.26.4 聊天 UI） */
-const ASK_CSS = `
-  :root { color-scheme: light dark; --sp-green: #0ba875; --sp-green-dim: #059669; }
-  * { box-sizing: border-box; }
-  html, body { height: 100%; }
-  body { font-family: system-ui, -apple-system, sans-serif; margin: 0; background: #f6f7f9; color: #1f2328; }
-  @media (prefers-color-scheme: dark) { body { background: #16181c; color: #e6e6e6; } }
-  main { max-width: 720px; margin: 0 auto; }
-  h1 { font-size: 18px; margin: 0 0 4px; }
-  .sub { opacity: .65; font-size: 13px; margin-bottom: 16px; }
-  .card { background: #fff; border: 1px solid #d0d7de; border-radius: 10px; padding: 14px 16px; margin-bottom: 10px; display: block; text-decoration: none; color: inherit; }
-  @media (prefers-color-scheme: dark) { .card { background: #26282c; border-color: #3a3d42; } }
-  .card:hover { border-color: var(--sp-green); }
-  .card .cname { font-weight: 600; font-size: 15px; }
-  .card .cmeta { opacity: .6; font-size: 12px; margin-top: 2px; }
-  .empty { text-align: center; opacity: .7; padding: 24px 0; }
-  .ccname { font-weight: 600; color: var(--sp-green); }
-  /* key 门（v1.26.6：选容器前必填） */
-  .keyGate { display: flex; align-items: center; gap: 8px; margin-bottom: 14px; background: rgba(127,127,127,.06); border: 1px solid rgba(127,127,127,.18); border-radius: 10px; padding: 10px 14px; }
-  .keyGate label { font-size: 12px; opacity: .7; white-space: nowrap; }
-  .keyGate input { flex: 1; border: 1px solid rgba(127,127,127,.25); border-radius: 8px; background: transparent; color: inherit; padding: 8px 12px; font-size: 14px; }
-  .keyGate input:focus { outline: none; border-color: var(--sp-green); }
-
-  /* ── 聊天布局（v1.26.4 体验升级：参考 ChatGPT/Claude 会话形态）── */
-  .chat { display: flex; flex-direction: column; height: 100vh; max-width: 720px; margin: 0 auto; }
-  .chatHead { display: flex; align-items: center; gap: 10px; padding: 10px 16px; border-bottom: 1px solid rgba(127,127,127,.18); background: rgba(127,127,127,.04); position: sticky; top: 0; z-index: 5; }
-  .chatHead .back { color: var(--sp-green); text-decoration: none; font-size: 13px; white-space: nowrap; }
-  .chatHead .title { font-weight: 600; font-size: 14px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
-  .chatHead .spacer { flex: 1; }
-  .chatHead select { border: 1px solid rgba(127,127,127,.25); border-radius: 8px; background: transparent; color: inherit; padding: 4px 8px; font-size: 12px; }
-  .chatHead .newBtn { border: 1px solid rgba(127,127,127,.25); border-radius: 8px; background: transparent; color: inherit; padding: 4px 10px; font-size: 12px; cursor: pointer; white-space: nowrap; }
-  .chatHead .newBtn:hover { border-color: var(--sp-green); color: var(--sp-green); }
-  /* 消息流 */
-  .msgList { flex: 1; overflow-y: auto; padding: 18px 16px; display: flex; flex-direction: column; gap: 16px; }
-  .msg { display: flex; flex-direction: column; max-width: 88%; }
-  .msg.user { align-self: flex-end; align-items: flex-end; }
-  .msg.assistant { align-self: flex-start; align-items: flex-start; }
-  .msg .who { font-size: 11px; opacity: .55; margin-bottom: 4px; padding: 0 4px; }
-  .msg .bubble { padding: 10px 14px; border-radius: 14px; font-size: 14px; line-height: 1.65; word-break: break-word; white-space: normal; }
-  .msg.user .bubble { background: var(--sp-green); color: #fff; border-bottom-right-radius: 4px; }
-  .msg.assistant .bubble { background: #fff; border: 1px solid #d0d7de; border-bottom-left-radius: 4px; }
-  @media (prefers-color-scheme: dark) { .msg.assistant .bubble { background: #26282c; border-color: #3a3d42; } }
-  .bubble p { margin: 6px 0; }
-  .bubble p:first-child { margin-top: 0; }
-  .bubble p:last-child { margin-bottom: 0; }
-  .bubble h1, .bubble h2, .bubble h3, .bubble h4 { margin: 12px 0 6px; font-size: 15px; line-height: 1.4; }
-  .bubble ul, .bubble ol { margin: 6px 0; padding-left: 22px; }
-  .bubble code { background: rgba(127,127,127,.14); border-radius: 4px; padding: 1px 5px; font-size: 13px; font-family: ui-monospace, monospace; }
-  .bubble pre { background: rgba(127,127,127,.1); border-radius: 8px; padding: 10px 12px; overflow-x: auto; margin: 8px 0; }
-  .bubble pre code { background: none; padding: 0; }
-  .bubble blockquote { margin: 6px 0; padding: 2px 12px; border-left: 3px solid rgba(127,127,127,.3); opacity: .85; }
-  .bubble a { color: var(--sp-green); }
-  .bubble table { border-collapse: collapse; margin: 8px 0; }
-  .bubble th, .bubble td { border: 1px solid rgba(127,127,127,.25); padding: 4px 10px; font-size: 13px; }
-  .bubble img { max-width: 100%; border-radius: 8px; }
-  .bubble hr { border: 0; border-top: 1px solid rgba(127,127,127,.2); margin: 10px 0; }
-  .typing { display: inline-flex; align-items: center; gap: 4px; padding: 4px 2px; }
-  .typing i { width: 6px; height: 6px; border-radius: 50%; background: rgba(127,127,127,.5); animation: blink 1.2s infinite; }
-  .typing i:nth-child(2) { animation-delay: .2s; }
-  .typing i:nth-child(3) { animation-delay: .4s; }
-  @keyframes blink { 0%, 80%, 100% { opacity: .3 } 40% { opacity: 1 } }
-  .err { color: #cf222e; white-space: pre-wrap; font-size: 13px; }
-  .msg .err { padding: 0 4px; }
-  /* 输入区 */
-  .chatInput { border-top: 1px solid rgba(127,127,127,.18); padding: 10px 16px calc(12px + env(safe-area-inset-bottom)); background: rgba(127,127,127,.04); }
-  .inputRow { display: flex; align-items: flex-end; gap: 8px; }
-  .inputRow textarea { flex: 1; border: 1px solid rgba(127,127,127,.25); border-radius: 12px; background: #fff; color: inherit; padding: 10px 12px; font-size: 14px; resize: none; min-height: 44px; max-height: 140px; line-height: 1.5; }
-  @media (prefers-color-scheme: dark) { .inputRow textarea { background: #26282c; border-color: #3a3d42; } }
-  .inputRow textarea:focus { outline: none; border-color: var(--sp-green); }
-  .inputRow .sendBtn { border: 0; border-radius: 12px; background: var(--sp-green); color: #fff; padding: 10px 18px; font-size: 14px; font-weight: 600; cursor: pointer; white-space: nowrap; }
-  .inputRow .sendBtn:disabled { opacity: .5; cursor: wait; }
-  .inputRow .sendBtn:hover:not(:disabled) { background: var(--sp-green-dim); }
-  .hint { text-align: center; font-size: 12px; opacity: .55; padding: 20px 0; }
-
-  /* ── 移动端适配（v1.26.6：手机/平板——iOS 防放大 16px / 触控 ≥44px / 100dvh / safe-area）── */
-  @media (max-width: 640px) {
-    main { padding: 20px 16px calc(28px + env(safe-area-inset-bottom)); }
-    .sub { font-size: 14px; margin-bottom: 14px; }
-    .keyGate { flex-wrap: wrap; gap: 6px; }
-    .keyGate input { flex: 1 1 100%; font-size: 16px; padding: 12px 14px; min-height: 48px; } /* 16px 防 iOS 聚焦放大 + 触控 ≥44px */
-    .card { padding: 16px; border-radius: 12px; }
-    .card .cname { font-size: 16px; }
-    .card .cmeta { font-size: 13px; }
-    .chat { height: 100vh; height: 100dvh; } /* dvh：iOS 地址栏收起/展开不跳动 */
-    .chatHead { gap: 8px; padding: 8px 12px calc(8px + env(safe-area-inset-top)); }
-    .chatHead .back { font-size: 14px; padding: 10px 4px; } /* 触控目标 ≥44px */
-    .chatHead .title { font-size: 14px; }
-    .chatHead select { font-size: 16px; padding: 8px 6px; min-height: 44px; } /* 16px 防放大 + 触控 */
-    .chatHead .newBtn { font-size: 14px; padding: 10px 12px; min-height: 44px; }
-    .msgList { padding: 14px 12px calc(20px + env(safe-area-inset-bottom)); gap: 14px; }
-    .msg { max-width: 94%; }
-    .msg .bubble { font-size: 15px; padding: 12px 14px; }
-    .msg .who { font-size: 12px; }
-    .chatInput { padding: 8px 12px calc(10px + env(safe-area-inset-bottom)); }
-    .inputRow textarea { font-size: 16px; padding: 12px 14px; min-height: 48px; } /* 16px 防放大 + 触控 */
-    .inputRow .sendBtn { font-size: 16px; padding: 12px 20px; min-height: 48px; }
-  }
-`;
-/** 容器列表页（v1.26.2 → v1.26.6）：key 在选容器前填写（v1.26.6 用户拍板：不填 key 不让选容器） */
-function publicAskListPage(cccs) {
-	const cards = cccs.map((c) => `
-    <a class="card" data-name="${c.name}" href="/c/${encodeURIComponent(c.name)}">
-      <div class="cname">${c.name}</div>
-      <div class="cmeta">${c.roles.length} 个问答角色 · 点击进入</div>
-    </a>`).join("") || "<div class=\"empty\">暂无可问答的认知容器（管理员尚未开放）</div>";
-	return `<!DOCTYPE html>
-<html lang="zh">
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
-<title>Serenity Public Ask</title>
-<style>${ASK_CSS}</style>
-</head>
-<body>
-<main>
-  <h1>Serenity Public Ask</h1>
-  <div class="sub">先填写访问 key，再选择认知容器开始提问</div>
-  <div class="keyGate">
-    <label for="gateKey">访问 Key</label>
-    <input id="gateKey" type="password" placeholder="请输入访问 key（仅本次浏览器记忆）" autocomplete="off" autocapitalize="none" enterkeyhint="done">
-  </div>
-  <div id="cards">${cards}</div>
-</main>
-<script>
-const KEY_STORE = 'serenity-public-ask-key'
-const gateKey = document.getElementById('gateKey')
-const cardList = document.getElementById('cards')
-// 容器卡片（key 未填时禁用——v1.26.6 用户拍板：key 在选容器前填写）
-function applyGate() {
-  const ok = gateKey.value.trim().length > 0
-  for (const card of cardList.querySelectorAll('a.card')) {
-    card.classList.toggle('locked', !ok)
-    card.setAttribute('aria-disabled', ok ? 'false' : 'true')
-    if (!ok) { card.removeAttribute('href'); card.style.pointerEvents = 'none'; card.style.opacity = '.4' }
-    else { card.setAttribute('href', '/c/' + encodeURIComponent(card.dataset.name)); card.style.pointerEvents = ''; card.style.opacity = '' }
-  }
-}
-gateKey.addEventListener('input', () => {
-  // 即存 localStorage（v1.26.7 修复：v1.26.6 漏掉保存——填一次就记录，对话页读取）
-  try { localStorage.setItem(KEY_STORE, gateKey.value.trim()) } catch {}
-  applyGate()
-})
-// key 自动从 localStorage 恢复
-let hasSavedKey = false
-try { const saved = localStorage.getItem(KEY_STORE); if (saved) { gateKey.value = saved; hasSavedKey = true } } catch {}
-if (hasSavedKey) gateKey.placeholder = '访问 Key（已记忆，可修改）'
-applyGate()
-gateKey.focus()
-<\/script>
-</body>
-</html>`;
-}
-/** 单容器问答页（v1.26.2→v1.26.6）：URL 锁定容器；聊天 UI——消息流 + 连续对话 + key 从列表页记忆（v1.26.6 用户拍板：对话页不再填 key） */
-function publicAskContainerPage(ccc) {
-	const data = jscSafeJsonText(JSON.stringify({
-		name: ccc.name,
-		root: ccc.root,
-		roles: ccc.roles
-	}).replace(/</g, "\\u003c"));
-	return `<!DOCTYPE html>
-<html lang="zh">
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
-<title>Serenity · ${ccc.name}</title>
-<style>${ASK_CSS}</style>
-</head>
-<body>
-<div class="chat">
-  <div class="chatHead">
-    <a class="back" href="/">← 容器</a>
-    <span class="title">Serenity · <span class="ccname">${ccc.name}</span></span>
-    <span class="spacer"></span>
-    <select id="role" title="问答角色"></select>
-    <button id="newChat" class="newBtn" title="清空当前对话（不存储，刷新即失）">新对话</button>
-  </div>
-
-  <div id="msgs" class="msgList"></div>
-
-  <div class="chatInput">
-    <div class="inputRow">
-      <textarea id="q" placeholder="向 ${ccc.name} 提问…（Enter 发送，Shift+Enter 换行）" rows="1" enterkeyhint="send" autocapitalize="sentences"></textarea>
-      <button id="ask" class="sendBtn">发送</button>
-    </div>
-  </div>
-</div>
-<script id="ask-data" type="application/json">${data}<\/script>
-<script>
-const CCC = JSON.parse(document.getElementById('ask-data').textContent)
-const KEY_STORE = 'serenity-public-ask-key'
-const roleSel = document.getElementById('role')
-const btn = document.getElementById('ask')
-const msgs = document.getElementById('msgs')
-const qInput = document.getElementById('q')
-let sessionId = ''
-let busy = false
-
-// 角色下拉
-roleSel.innerHTML = (CCC.roles || []).map((r) => '<option value="' + r + '">' + r + '</option>').join('') || '<option value="">(无角色)</option>'
-// key 从 localStorage 读取（列表页填写时记忆；对话页不填——v1.26.6 用户拍板）
-function getStoredKey() {
-  try { return (localStorage.getItem(KEY_STORE) || '').trim() } catch { return '' }
-}
-
-/** 追加一条消息气泡（role: user|assistant） */
-function addMsg(role, htmlOrText, isHtml) {
-  const m = document.createElement('div')
-  m.className = 'msg ' + role
-  const who = document.createElement('div')
-  who.className = 'who'
-  who.textContent = role === 'user' ? '你' : CCC.name
-  const bubble = document.createElement('div')
-  bubble.className = 'bubble'
-  if (isHtml) bubble.innerHTML = htmlOrText
-  else bubble.textContent = htmlOrText
-  m.appendChild(who)
-  m.appendChild(bubble)
-  msgs.appendChild(m)
-  msgs.scrollTop = msgs.scrollHeight
-  return bubble
-}
-
-/** 打字指示器（等待回答时显示） */
-function addTyping() {
-  const m = document.createElement('div')
-  m.className = 'msg assistant'
-  const who = document.createElement('div')
-  who.className = 'who'
-  who.textContent = CCC.name
-  const bubble = document.createElement('div')
-  bubble.className = 'bubble'
-  bubble.innerHTML = '<span class="typing"><i></i><i></i><i></i></span>'
-  m.appendChild(who)
-  m.appendChild(bubble)
-  msgs.appendChild(m)
-  msgs.scrollTop = msgs.scrollHeight
-  return bubble
-}
-
-async function ask() {
-  const q = qInput.value.trim()
-  const key = getStoredKey()
-  const role = roleSel.value || undefined
-  if (!q) return
-  if (!key) { addMsg('assistant', '⚠️ 未找到访问 key，请先回到 <a href="/">容器列表页</a> 填写 key。', true); return }
-  if (busy) return
-  // 追加用户消息 + 打字指示
-  addMsg('user', q, false)
-  qInput.value = ''
-  autoGrow()
-  const typing = addTyping()
-  busy = true
-  btn.disabled = true
-  try {
-    const res = await fetch('/c/' + encodeURIComponent(CCC.name) + '/ask', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ key, role, question: q, sessionId: sessionId || undefined }) })
-    const data = await res.json()
-    typing.remove() // 移除打字指示，替换为真实回答
-    if (!res.ok) {
-      sessionId = ''
-      addMsg('assistant', '⚠️ ' + (data.error || ('HTTP ' + res.status)), true)
-      return
-    }
-    addMsg('assistant', data.answer_html || data.answer || '（空回答）', true)
-    sessionId = data.sessionId || ''
-  } catch (err) {
-    typing.remove()
-    addMsg('assistant', '⚠️ ' + String(err.message || err), true)
-  } finally {
-    busy = false
-    btn.disabled = false
-    qInput.focus()
-  }
-}
-
-function autoGrow() {
-  qInput.style.height = 'auto'
-  qInput.style.height = Math.min(qInput.scrollHeight, 140) + 'px'
-}
-
-btn.addEventListener('click', () => void ask())
-qInput.addEventListener('keydown', (e) => {
-  if (e.key === 'Enter' && !e.shiftKey) { e.preventDefault(); void ask() }
-})
-qInput.addEventListener('input', autoGrow)
-// 新对话：重置 sessionId + 清空消息流（前端内存，不存储——刷新即失）
-document.getElementById('newChat').addEventListener('click', () => {
-  sessionId = ''
-  msgs.innerHTML = ''
-  qInput.focus()
-})
-
-// 初始欢迎消息（外层模板求值注入容器名；textContent 渲染防注入）
-addMsg('assistant', '你好，我是「${ccc.name}」的认知助手。有什么可以帮你的？（本对话仅当前页面有效，刷新即失）', false)
-qInput.focus()
-<\/script>
-</body>
-</html>`;
-}
-//#endregion
 //#region src/human-channel.ts
 /**
 * human-channel.ts — 人机信道的**机制层**（机器级；2026-09-26 owner 定案 ⇒ 方案 §2.6）
@@ -21033,7 +20132,7 @@ function buildManualOutputRebuke(session) {
 }
 /**
 * 装配闸门（index.ts apply 调用）。
-* 只对**已登记的手动模式会话**生效——其他会话（主舱/其他 skiff/ACP 临时会话）零干预。
+* 只对**已登记的手动模式会话**生效——其他会话（主舱/其他 skiff 会话）零干预。
 */
 function registerWeixinOutputGuard(ctx) {
 	try {
@@ -21394,7 +20493,7 @@ function manualOutputFallbackNeeded(input) {
 */
 async function resolveCccRootByAlias(ctx, alias) {
 	try {
-		const { listCccs } = await import("./ccc-roots-BC8mn8iM.js").then((n) => n.a);
+		const { listCccs } = await import("./ccc-roots-GIJ3A_tw.js").then((n) => n.a);
 		const entries = await listCccs(ctx);
 		const byName = entries.find((e) => e.name === alias);
 		if (byName) return byName.root;
@@ -21893,7 +20992,7 @@ function syncHumanChannel(ctx) {
 	(async () => {
 		try {
 			stopMachineLoops();
-			const { listCccs } = await import("./ccc-roots-BC8mn8iM.js").then((n) => n.a);
+			const { listCccs } = await import("./ccc-roots-GIJ3A_tw.js").then((n) => n.a);
 			for (const entry of await listCccs(ctx)) syncCccBridge(ctx, entry.root);
 		} catch {}
 	})();
@@ -22129,7 +21228,7 @@ function matchCcc(input, candidates) {
 }
 /** 组装候选列表（`ccc-roots.listCccs` 投影 + `.serenity` 名；动态 import 保持本模块静态依赖轻量） */
 async function collectCandidates(ctx) {
-	const { listCccs } = await import("./ccc-roots-BC8mn8iM.js").then((n) => n.a);
+	const { listCccs } = await import("./ccc-roots-GIJ3A_tw.js").then((n) => n.a);
 	const entries = await listCccs(ctx, { defaultRoot: process.cwd() });
 	const seen = /* @__PURE__ */ new Set();
 	const out = [];
@@ -22395,7 +21494,7 @@ function registerLifecycle(ctx) {
 			stopAllBridges();
 		} catch {}
 	};
-	registerDisposer(ctx, "self-started resources (gateway/weixin/skiff-debug/acp faces + weixin bridges)", disposeAll);
+	registerDisposer(ctx, "self-started resources (gateway/weixin/skiff-debug faces + weixin bridges)", disposeAll);
 }
 //#endregion
 //#region src/web-fetch-provider.ts
@@ -24597,7 +23696,7 @@ function renderDsl(model) {
 * 🔴 **为什么 PNG 是必需的**：宿主的对话内图片通路**白名单只有光栅格式**
 * （`image/png|jpeg|webp|gif`，见 `dsh-attachment/types.d.ts`）⇒ **SVG 进不去**。
 *
-* 🔴 **开关**：由 `index.ts` 门控（**关时不注册** ⇒ 工具根本不进模型工具清单），同 skiff／acp 口径。
+* 🔴 **开关**：由 `index.ts` 门控（**关时不注册** ⇒ 工具根本不进模型工具清单），同 skiff 口径。
 *
 * ## 🔴 两条**宿主契约**（2026-09-29 现场取证；第 ① 条是本文件第一版写错的地方）
 *
@@ -24971,10 +24070,6 @@ const Config = z.object({
 		enabled: z.boolean().default(false),
 		debugPort: z.number().min(1024).max(65535).default(SKIFF_DEBUG_PORT)
 	}),
-	acp: z.object({
-		enabled: z.boolean().default(false),
-		httpPort: z.number().min(1024).max(65535).default(ACP_HTTP_PORT)
-	}),
 	webFetch: z.object({ enabled: z.boolean().default(true) }),
 	opencodeProvider: z.object({ autoConfigure: z.boolean().default(true) }),
 	visionPatch: z.object({ enabled: z.boolean().default(true) }),
@@ -24989,9 +24084,6 @@ const Config = z.object({
 	rebuildThresholdK: z.number().min(50).max(4e3).volatile(),
 	skiffEnabled: z.boolean().volatile(),
 	skiffDebugPort: z.number().min(1024).max(65535).volatile(),
-	acpEnabled: z.boolean().volatile(),
-	acpHttpPort: z.number().min(1024).max(65535).volatile(),
-	publicAskEnabled: z.boolean().volatile(),
 	croEnabled: z.boolean().volatile(),
 	unattendedEnabled: z.boolean().volatile(),
 	diagramEnabled: z.boolean().volatile()
@@ -25054,7 +24146,6 @@ function apply(ctx, config) {
 	if (config.opencodeSkills) registerOpencodeSkills(ctx);
 	registerBootstrap(ctx);
 	registerSkiff(ctx);
-	registerAcp(ctx);
 	registerCroTurnTracking(ctx);
 	registerWakeScheduler(ctx);
 	registerWeixinBridge(ctx);
@@ -25078,7 +24169,7 @@ function apply(ctx, config) {
 *   ① 听宿主的**真事件** `settings/document-updated`（ns = 我们那张设置页）——顺带说明为什么不用
 *      我们自己的 `serenity/settings-changed`：那个事件**全仓没有任何 `emit` 点**（只有 `ctx.on` 侧
 *      在用）＝**死通道**，照着它接线等于接了个永远不响的铃；
-*   ② 兜底再挂 `agent/created` ／ `session/created`（与 skiff／acp 同款做法，那两条在实测里确实会 fire）
+*   ② 兜底再挂 `agent/created` ／ `session/created`（与 skiff 同款做法，那两条在实测里确实会 fire）
 *      —— 宿主事件面若换名，至少还有这一条能自愈；
 *   ③ 启动时同步一次（apply 时按当前配置定初始态）。
 * 🔴 **关的时候要注销**（不是"留着但不响应"）：与"关时不注册"同一口径 —— 工具不出现在模型清单里。
@@ -25125,7 +24216,8 @@ function registerDiagramTool(ctx) {
 * 同步一次——此刻通常还没有 live 会话，进程 cwd（服务启动目录）也不在 CCC 内 →
 * `resolveSkiffRoot` 返回 null → 打印一行警告后**永不重试**（实证：重启日志
 * `✗ Skiff 调试服务未启动：无法定位 CCC root`，`ss -ltn` 无 3099；同批 ACP 因容忍
-* `root ?? undefined` 而正常启动）。
+* `root ?? undefined` 而正常启动 —— ⚠️ **该对照已随面 E 退役而失效**（2026-10-15），
+* 但本条记录的**病因与修法不受影响**（Skiff 侧仍是"首次未定位 → 曾永不重试"）。
 *
 * v1.30.14（重启日志实证后的收敛）：**并发启动守卫** + 首次未定位降级为信息级日志。
 *  - 实证（v1.30.13 重启日志）：定时触发与"会话就绪"事件几乎同时到达 → 两次 sync 都
@@ -25249,29 +24341,5 @@ function readWebPort(ctx) {
 		return MAIN_WEB_PORT;
 	}
 }
-/**
-* F4c ACP HTTP + F4d 建议问答页装配（v1.26.x 实验性）：启停 = 人工（设置面板
-* 「Serenity」页 ACP / 问答页开关，settings 持久化）。任一面开启即启动服务
-* （同一端口：POST / = JSON-RPC 需 acpEnabled；GET / + /ask = 问答页需 publicAskEnabled）。
-* 会话创建/延续走 acp-core → skiff-core；仅监听 127.0.0.1；未开启零资源占用。
-*/
-function registerAcp(ctx) {
-	const sync = async () => {
-		const s = readSimpleSettings();
-		const anyFace = s.acpEnabled || s.publicAskEnabled;
-		if (anyFace && !acpHttpActive()) {
-			const root = await resolveSkiffRoot(ctx);
-			return startAcpHttpServer(ctx, s.acpHttpPort, root ?? void 0).catch((err) => {
-				console.error(`[serenity-hooks] ✗ ACP HTTP 服务启动失败: ${String(err?.message ?? err)}`);
-			});
-		} else if (!anyFace && acpHttpActive()) stopAcpHttpServer();
-	};
-	try {
-		ctx.on("serenity/settings-changed", () => {
-			sync();
-		});
-	} catch {}
-	sync();
-}
 //#endregion
 export { Config, apply, humanChannelAccountSchema, humanChannelSubscriptionSchema, inject, name };