@deepseek-ai/dsh-agent-presets 0.1.5-rc.2 → 0.1.6-alpha.2

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/preset/agent-presets/README.md
-README.md: 6ef3374a5f1ae6b83005073f80d63d156ee92f9c
-README.zh.md: a1be6d634e592126711befad4ffcb06ca0bdc26c
+README.md: d0eb1c108eaef091c776992c144ba389be2cf6c0
+README.zh.md: e9c1a35b22a1764e444c5757a1e34761bdc24fdf

package/README.md

@@ -33,7 +33,7 @@ The shipped Web `standard`, `ptc`, and `cordis` presets include [explicit file d
 
 A session composed from a preset runs the plugins that preset's `agent.cordis.yml` names: its tools, prompt sections, and skills. Sessions joined to the same preset share one installed composition, and each session's state stays separate. A child agent (subagent) joins its parent's composition, so it sees the same tools and prompt sections as the agent that spawned it.
 
-The presets you can choose from come from two places: the presets shipped inside this package under `presets/`, and your own presets under `<dshHome>/.agent-presets`. The picker shows each preset's display name and description; a preset whose composition cannot load is listed with the reason rather than hidden, so you can see what to fix or delete.
+The presets you can choose from come from three sources: the presets shipped inside this package under `presets/`, configured roots, and your own presets under `<dshHome>/.agent-presets`. The picker shows each preset's display name and description; a preset whose composition cannot load is listed with the reason rather than hidden, so you can see what to fix or delete.
 
 ### Minimal configuration
 
@@ -50,7 +50,7 @@ The plugin needs a `default` preset id and scans `roots` for presets:
 
 | Field | Default | Meaning |
 |---|---|---|
-| `default` | required | Preset id composed when a session names none |
+| `default` | required | Deployment fallback preset id, used while mode selection is disabled or no user default overrides it |
 | `roots` | `[]` | Scanned directories in precedence order; each supplies `path` (a leading `~` expands) and `trust` (defaults to `user`) |
 | `includeShippedRoot` | `true` | Prepend the package's bundled presets as a `system` root before every configured root |
 | `includeUserRoot` | `true` | Append `<dshHome>/.agent-presets` as a `user` root, after every configured root |
@@ -59,16 +59,17 @@ The generated [configuration catalog](../../../docs/config-catalog.md#deepseek-a
 
 The shipped root is prepended before every configured root, so the built-in set remains available and wins duplicate ids even when a patch replaces the roster configuration. `includeShippedRoot: false` drops that built-in set for deployments that supply all presets themselves. `includeUserRoot: false` drops the derived writable root; tests that pin an exact roster disable both derived roots.
 
-### Choosing the default preset
+### Showing the picker and choosing its default
 
-The `default` config sets the deployment default. When a settings provider is composed, this plugin registers the `agent-presets` namespace with `config.default` as its base, so a user document layers a per-user default over the deployment's:
+The required `default` config sets the deployment default. When a settings provider is composed, this plugin registers the `agent-presets` namespace with `{ default: config.default, modeSelectionEnabled: true }` as its base, so the existing new-session picker remains visible unless a user turns it off. The Host reads both fields on every default resolution: while `modeSelectionEnabled` is false, an omitted preset resolves to `config.default` even if the user document retains another `default`; while it is true, a user default may override the deployment value:
 
 ```yaml
 agent-presets:
+  modeSelectionEnabled: true
   default: minimal
 ```
 
-The value is read when a session is created, so a changed default affects only sessions created afterwards; running sessions stay on the preset they were composed from. Clearing the user field re-inherits the composition default.
+A client shows or hides selection by writing only `modeSelectionEnabled`; the [Web GUI settings switch](../../client/ui-agent-preset/README.md) does exactly that. The deployment default governs while selection is hidden; re-enabling it restores the saved user `default`, or keeps the deployment default when none has been saved. While mode selection stays enabled, choosing a default writes a user override for sessions created later. Because the Host owns the policy, it applies to every subsequently created session whose caller omits a preset, including Web, CLI, SDK, and headless callers; an explicitly named preset and every existing session remain unchanged.
 
 ### Authoring presets
 
@@ -82,7 +83,7 @@ A session can switch to a different preset only while it has produced nothing
 
 ### Failures and recovery
 
-A preset whose composition is missing, unparsable, not a list of named plugin rows, or naming a module that cannot be resolved is listed as broken with a reason naming the rows at fault; composing such a preset is refused up front, so a session never starts half-composed. What survives to session creation is a row whose module loads and then refuses — a plugin that throws, or one waiting for a service the composition never supplies — which fails the creation and rolls it back, naming every failed row including those inside a group. Fix the preset's file or delete it, then retry.
+A preset whose composition is missing, unparsable, not a list of named plugin rows, or naming a module that cannot be resolved is listed as broken with a reason naming the rows at fault; a package-lookup failure marks only the preset being checked as broken, while the rest of the roster remains available. Composing a broken preset is refused up front, so a session never starts half-composed. What survives to session creation is a row whose module loads and then refuses — a plugin that throws, or one waiting for a service the composition never supplies — which fails the creation and rolls it back, naming every failed row including those inside a group. Fix the preset's file or delete it, then retry.
 
 -----
 
@@ -126,7 +127,7 @@ This section explains the design behind the roster and the standing mount; obser
 
 ### The mount audit
 
-A directly-plugged subtree is absent from `ctx.loader.entries()`, so no boot audit covers it; `mountPreset` proves the result usable itself and rejects three shapes: an unscoped target (the preset's tools would register globally), a row still waiting for a service the composition never supplies, and a row that published a service into the root realm (process-global, so the second preset publishing the same name collides). The invariant companion re-checks the last rule on every service notification, because a row publishing from a timer or an asynchronous continuation would escape the one-shot audit.
+A directly-plugged subtree is absent from `ctx.loader.entries()`, so no boot audit covers it; `mountPreset` proves the result usable itself and rejects an import or activation failure, an unscoped target (the preset's tools would register globally), a row still waiting for a service the composition never supplies, and a row that published a service into the root realm (process-global, so the second preset publishing the same name collides). The invariant companion re-checks the last rule on every service notification, because a row publishing from a timer or an asynchronous continuation would escape the one-shot audit.
 
 ### Authoring mechanics
 

package/README.zh.md

@@ -1,5 +1,5 @@
 ---
-description: "按 preset cordis.yml 文件进行按会话的 agent 组装，供选择、配置或排查 agent preset 的用户与维护者阅读。"
+description: "按 preset cordis.yml 文件进行按会话的 agent（智能体）组装，供选择、配置或排查 agent preset 的用户与维护者阅读。"
 kind: "package-reference"
 ---
 
@@ -31,9 +31,9 @@ kind: "package-reference"
 
 ### preset 给会话带来什么
 
-从 preset 组装的会话会运行该 preset `agent.cordis.yml` 所列插件：它的工具、提示词段落与 skill。加入同一 preset 的会话共享一份已安装的组装，且各会话的状态彼此隔离。子 agent（subagent）会加入其父方的组装，因此它看到的工具与提示词段落和创建它的 agent 相同。
+从 preset 组装的会话会运行该 preset `agent.cordis.yml` 所列插件：它的工具、提示词段落与 skill。加入同一 preset 的会话共享一份已安装的组装，且各会话的状态彼此隔离。subagent 会加入其父方的组装，因此它看到的工具与提示词段落和创建它的 agent 相同。
 
-可选的 preset 来自两处：本包 `presets/` 下随包交付的 preset，以及你自己放在 `<dshHome>/.agent-presets` 下的 preset。选择器会展示每个 preset 的显示名与描述；组装无法加载的 preset 会连同原因一起列出而不是被隐藏，因此你能看到该修什么或删什么。
+可选的 preset 来自三类来源：本包 `presets/` 下随包交付的 preset、已配置的根目录，以及你自己放在 `<dshHome>/.agent-presets` 下的 preset。选择器会展示每个 preset 的显示名与描述；组装无法加载的 preset 会连同原因一起列出而不是被隐藏，因此你能看到该修什么或删什么。
 
 ### 最小配置
 
@@ -50,7 +50,7 @@ kind: "package-reference"
 
 | 字段 | 默认值 | 含义 |
 |---|---|---|
-| `default` | 必填 | 会话未指定时组装的 preset id |
+| `default` | 必填 | 部署 fallback preset id；模式选择关闭或没有用户默认值覆盖时使用 |
 | `roots` | `[]` | 按优先级排列的扫描目录；每项提供 `path`（开头的 `~` 会展开）与 `trust`（默认为 `user`） |
 | `includeShippedRoot` | `true` | 在全部已配置根目录之前，前置本包随附的 preset 作为 `system` 根目录 |
 | `includeUserRoot` | `true` | 在全部已配置根目录之后追加 `<dshHome>/.agent-presets` 作为 `user` 根目录 |
@@ -59,16 +59,17 @@ kind: "package-reference"
 
 随附根目录前置在全部已配置根目录之前，因此即使补丁替换 roster 配置，内置集合仍然可用并赢得重复 id。`includeShippedRoot: false` 会为完全自行提供 preset 的部署移除内置集合。`includeUserRoot: false` 会移除推导出的可写根目录；钉住确切 roster 的测试会同时关闭两个推导根目录。
 
-### 选择默认 preset
+### 显示选择器并选择默认 preset
 
-`default` 配置设定部署级默认值。当组装中存在 settings 提供方时，本插件会注册 `agent-presets` 命名空间，并以 `config.default` 作为其 base，因此用户文档会在部署默认值之上层叠一份按用户设置的默认值：
+必填的 `default` 配置设定部署默认值。当组装中存在 settings 提供方时，本插件会注册 `agent-presets` 命名空间，并以 `{ default: config.default, modeSelectionEnabled: true }` 作为 base，因此既有的新建会话选择器会保持显示，除非用户主动关闭。Host 每次解析默认值都会读取这两个字段：`modeSelectionEnabled` 为 `false` 时，未显式指定 preset 的会话解析为 `config.default`，即使用户文档还保留其他 `default` 也会忽略它；该字段为 `true` 时，用户默认值才可覆盖部署值：
 
 ```yaml
 agent-presets:
+  modeSelectionEnabled: true
   default: minimal
 ```
 
-该值在会话创建时读取，因此更改默认值只影响此后创建的会话；运行中的会话仍停留在它们当初据以组装的 preset 上。清空用户字段即重新继承组装默认值。
+客户端只需写入 `modeSelectionEnabled` 即可显示或隐藏选择，[Web GUI 设置开关](../../client/ui-agent-preset/README.zh.md)正是这样做的。选择器隐藏期间由部署默认值生效；再次开启时恢复已保存的用户 `default`，尚未保存时则继续使用部署默认值。模式选择保持开启时，选择默认模式会写入用户覆盖值，仅供此后创建的会话使用。由于该策略归 Host 所有，它适用于 Web、CLI、SDK 与 headless 调用方此后创建的全部未显式指定 preset 的会话；显式指定的 preset 与任何既有会话均不受影响。
 
 ### 创作 preset
 
@@ -82,7 +83,7 @@ agent-presets:
 
 ### 失败与恢复
 
-组装缺失、无法解析、不是具名插件行列表，或者引用了无法解析的模块的 preset 会被列为 broken，原因会指名出问题的行；组装此类 preset 会被提前拒绝，因此会话绝不会以半组装状态启动。能活到会话创建的，是模块能加载但随后拒绝的行——抛错的插件，或等待组装从未提供的服务的插件——它会让创建失败并回滚，且会指名每一个失败的行，包括组内的行。修复 preset 的文件或删除它，然后重试。
+组装缺失、无法解析、不是具名插件行列表，或者引用了无法解析的模块的 preset 会被列为 broken，原因会指名出问题的行；包查询失败只会把正在检查的 preset 标为 broken，名单中的其他 preset 仍然可用。组装 broken preset 会被提前拒绝，因此会话绝不会以半组装状态启动。能活到会话创建的，是模块能加载但随后拒绝的行——抛错的插件，或等待组装从未提供的服务的插件——它会让创建失败并回滚，且会指名每一个失败的行，包括组内的行。修复 preset 的文件或删除它，然后重试。
 
 -----
 
@@ -113,7 +114,7 @@ agent-presets:
 | [`src/authoring.ts`](src/authoring.ts) | 本地创作 preset 的复制/删除/读取、权限收紧 |
 | [`src/metadata.ts`](src/metadata.ts) | `preset.yml` 展示元数据 |
 | [`src/session.ts`](src/session.ts) | `agent-preset/selected` 事件与 `agentPreset` Session 投影 |
-| [`src/types.ts`](src/types.ts) | client-safe 的线上载荷与 cordis 事件声明 |
+| [`src/types.ts`](src/types.ts) | client-safe 的协议载荷与 cordis 事件声明 |
 | [`src/invariant.ts`](src/invariant.ts) | 不变式伴生插件：挂载后的服务泄漏复查、未加入 agent 的失败 |
 
 ### 常驻挂载
@@ -122,11 +123,11 @@ agent-presets:
 
 ### 组合清单
 
-`compositionInventory()` 向插件清单表面提供每个预设的压平行及其名单身份（id、trust、显示名、默认标记）：已有存活 standing mount 的预设由其最新世代的 Loader 条目作答——匹配限定在本运行时自己的 root 内，同进程里的第二个 Cordis 运行时不会替它作答；即使文件事后损坏也照常作答，因为挂载才是会话实际运行的组合，broken 裁决只适用于无人组合的预设——开机以来从未被组合的预设由其组合文件作答，`!!js` disabled 门用 Loader 上下文求值，使两种答案反映同一台宿主。读取从不挂载预设——列出所有组合的设置页不会激活其中任何一个。求值器拒绝的门保持 `'conditional'`；在发现的健康裁决与行读取之间变得不可读的文件，会携带竞态原因报告为 broken，而不是被静默丢弃。`./display` 子路径导出 `presetDisplayText` 纯函数，把内置预设 id 映射到各自的字典文案键；它没有任何 import，浏览器包直接内联，也是「哪个内置 id 对应哪份文案」的唯一归属地。
+`compositionInventory()` 向插件清单表面提供每个预设的压平行及其名单身份（id、trust、显示名、默认标记）：已有存活 standing mount 的预设由其最新世代的 Loader 条目作答——匹配限定在本运行时自己的 root 内，同进程里的第二个 Cordis 运行时不会替它作答；即使文件事后损坏也照常作答，因为挂载才是会话实际运行的组合，broken 裁决只适用于无人组合的预设——开机以来从未被组合的预设由其组合文件作答，`!!js` disabled 门用 Loader 上下文求值，使两种答案反映同一台宿主。读取从不挂载预设——列出所有组合的设置页不会激活其中任何一个。求值器拒绝的门保持 `'conditional'`；在发现的健康裁决与行读取之间变得不可读的文件，会携带竞态原因报告为 broken，而不是被静默丢弃。`./display` 子路径导出 `presetDisplayText` 映射，把随附 preset id 映射到各自的字典文案键；它没有任何 import，浏览器包直接内联，也是「哪个内置 id 对应哪份文案」的唯一归属地。
 
 ### 挂载审计
 
-直接挂载的子树不会出现在 `ctx.loader.entries()` 中，因此没有启动审计能覆盖它；`mountPreset` 自行证明结果可用，并拒绝三种形态：无 scope 的目标（preset 的工具会注册成全局的）、仍在等待组装从未提供的服务的行、以及把服务发布进根 realm 的行（进程级全局，第二个发布同名服务的 preset 会相撞）。不变式伴生插件在每次服务通知时复查最后一条规则，因为从定时器或异步续体发布的行会绕过一次性审计。
+直接挂载的子树不会出现在 `ctx.loader.entries()` 中，因此没有启动审计能覆盖它；`mountPreset` 自行证明结果可用，并拒绝导入或激活失败、无 scope 的目标（preset 的工具会注册成全局的）、仍在等待组装从未提供的服务的行、以及把服务发布进根 realm 的行（进程级全局，第二个发布同名服务的 preset 会相撞）。不变式伴生插件在每次服务通知时复查最后一条规则，因为从定时器或异步续体发布的行会绕过一次性审计。
 
 ### 创作机制
 
@@ -175,7 +176,7 @@ agent-presets:
 - **代际只以组装文件为键**——stamp 检查只察觉 `agent.cordis.yml` 的变化，察觉不到旁边 skill 文件或资产的编辑；那些编辑要等组装文件本身变动或进程重启才达到新会话。
 - **被替代的代际永不回收**——已加入的会话保持其运行所在的代际，而名单没有加入计数可以判断最后一个何时离开，因此整棵子树一直挂到进程结束。代价按代际计而非按会话计，但并非为零：`dsh-skill-filesystem` 默认监听自己的根目录，因此每一轮「编辑后建会话」都会新增一套活的 watcher。
 - **副本从不被实际挂载以校验**——它与来源逐字节相同，因此磁盘上已坏的来源会产出与来源同样损坏的副本；发现过程的健康检查会在下一次读取名单时把两行都标出来，而不是把失败推迟到会话启动。
-- **健康问的是「装没装」，不是「能不能 import」**——发现过程证明组装能以加载器方言解析、由具名行组成，且每一行它能证明会启动的行所引用的包装在 harness 基准之上、或所引用的文件确实存在；它从不 import 任何一个，因此入口文件缺失的包、在 apply 时抛错的插件、以及永远等待某个服务的插件，都仍在第一个会话处失败。`disabled` 是加载器唯一会插值的条目字段，因此在该字段写了表达式的行会被跳过，而不是仅凭文件下判断。
+- **健康问的是「装没装」，不是「能不能 import」**——发现过程证明组装能以加载器方言解析、由具名行组成，且对于每个能证明会启动的行，其引用的包存在于 harness 基址以上，或引用的文件确实存在；它从不 import 任何一个，因此入口文件缺失的包、在 apply 时抛错的插件、以及永远等待某个服务的插件，都仍在第一个会话处失败。`disabled` 是加载器唯一会插值的条目字段，因此该字段带表达式的行不予检查，而不是仅凭文件作出判断。
 - **副本是会漂移的快照**——升级部署不会更新随附 preset 的副本，本层也没有表达「standard 加一处改动」的 patch 语义；随附集合自己也接受同样的代价——`cordis` 与 `code` 都复制了 `standard` 的完整组装并在此基础上编辑——换来整份组装在一个文件里可读。
 - **根目录扫描不做监听**——每次读取都实际访问文件系统，这让名单保持新鲜，但每次 `list()` 会对每个根目录产生一次 `readdir`。
 

package/lib/index.js

@@ -230,20 +230,13 @@ function entryListProblem(rows, at = "") {
 	}
 }
 /**
-* Whether a package name is installed anywhere above `base`.
+* Whether a package specifier is installed above `base` without importing it.
 *
-* Node's own upward `node_modules` walk, stopping at the package directory:
-* the question is whether the package is there at all, which is what a row
-* naming a package a rename or an uninstall took away gets wrong. A pnpm
-* store link answers through the symlink, and a link left dangling by a
-* deleted checkout answers false — the shape a stale profile install leaves.
-*
-* `existsSync` rather than the async `stat`: the walk is a handful of lookups
-* per package and runs on every roster read, where 150 promise round-trips
-* cost more than the lookups they wrap.
-* @param name - the package specifier, possibly carrying a subpath.
-* @param base - the URL to walk up from.
-* @returns true when the package directory is installed above `base`.
+* The direct disk walk accepts unexported subpaths and rejects stale links
+* whose package directory no longer exists.
+* @param name - package specifier, possibly carrying a subpath.
+* @param base - directory URL whose ancestors contain candidate `node_modules` directories.
+* @returns true when the package is installed.
 */
 function packageInstalled(name, base) {
 	const pkg = name.split("/").slice(0, name.startsWith("@") ? 2 : 1).join("/");
@@ -258,35 +251,17 @@ function packageInstalled(name, base) {
 /**
 * Whether one classified row names a module that exists, importing nothing.
 *
-* Each kind is checked by what actually answers it. A package name is looked
-* up on disk — the same upward walk Node's own resolver starts with — and a
-* relative or `file:` specifier is statted, because both name one file.
-* Nothing is evaluated either way, so a row is judged without its plugin
-* observing that discovery looked.
-*
-* `import.meta.resolve` is deliberately not the fallback for a name the disk
-* lookup misses. Its `parentURL` argument only takes effect under
-* `--experimental-import-meta-resolve`, which no launch passes, so it would
-* resolve from THIS module rather than from the harness — reporting a
-* dependency visible only to this package as healthy, and a plugin the mount
-* can import as broken. The resolver that does honour an explicit parent is
-* the Loader's internal one, whose `resolveSync` signature differs between
-* Node 22 and 24 (`ModuleLoader.fromInternal` tags the raw object rather than
-* normalising it); reaching into that for a case the walk already covers buys
-* nothing a supported deployment needs, because every plugin a preset names
-* is installed beside the roster.
-*
-* What that gives up: a package resolvable ONLY through a loader hook — an
-* import map, or a tree with no `node_modules` at all — is reported broken.
-* No supported install produces one.
+* Package rows delegate to the injected lookup. Relative and `file:` rows use
+* file metadata. No check evaluates the named module.
 * @param row - the classified specifier, from {@link classifyRowSpecifier}.
 * @param presetBase - directory URL a preset-relative specifier resolves against.
 * @param harnessBase - base URL a package name resolves against.
+* @param resolves - package lookup selected by the owning caller.
 * @returns true when the row names something that can be imported.
 */
-async function rowResolves(row, presetBase, harnessBase) {
+async function rowResolves(row, presetBase, harnessBase, resolves) {
 	if (row.kind === "builtin") return true;
-	if (row.kind === "package") return isBuiltin(row.specifier) || packageInstalled(row.specifier, harnessBase);
+	if (row.kind === "package") return isBuiltin(row.specifier) || resolves(row.specifier, harnessBase);
 	return await isFile(fileURLToPath(row.kind === "file" ? new URL(row.specifier) : new URL(row.specifier, presetBase)));
 }
 /**
@@ -310,17 +285,17 @@ async function rowResolves(row, presetBase, harnessBase) {
 * @param at - row-path prefix for nested diagnostics, empty at the top level.
 * @returns one entry per unresolvable row, in composition order.
 */
-async function unresolvableRows(rows, presetBase, harnessBase, at = "") {
+async function unresolvableRows(rows, presetBase, harnessBase, resolves, at = "") {
 	const found = [];
 	for (const [index, entry] of rows.entries()) {
 		const row = entry;
 		if (Boolean(row.disabled)) continue;
 		const positional = at === "" ? `row ${String(index + 1)}` : `${at} row ${String(index + 1)}`;
 		if (row.group === true) {
-			found.push(...await unresolvableRows(row.config, presetBase, harnessBase, positional));
+			found.push(...await unresolvableRows(row.config, presetBase, harnessBase, resolves, positional));
 			continue;
 		}
-		if (await rowResolves(classifyRowSpecifier(row.name), presetBase, harnessBase)) continue;
+		if (await rowResolves(classifyRowSpecifier(row.name), presetBase, harnessBase, resolves)) continue;
 		const label = typeof row.id === "string" && row.id !== "" ? `row "${row.id}"` : positional;
 		found.push({
 			label,
@@ -334,11 +309,13 @@ async function unresolvableRows(rows, presetBase, harnessBase, at = "") {
 * loadable. Parsed with the loader's own YAML dialect ({@link entryListSchema},
 * the one carrying `!!js`), so health can never call a composition broken
 * that the loader would accept.
+* A package-lookup failure becomes this composition's broken reason, so one
+* preset cannot abort discovery of the rest of the roster.
 * @param path - absolute path of the composition file.
 * @param harnessBase - base URL a row's package name resolves against.
 * @returns one human-readable reason, or undefined when the file is loadable.
 */
-async function compositionProblem(path, harnessBase) {
+async function compositionProblem(path, harnessBase, resolves) {
 	let content;
 	try {
 		content = await readFile(path, "utf8");
@@ -354,7 +331,12 @@ async function compositionProblem(path, harnessBase) {
 	const shape = entryListProblem(rows);
 	if (shape !== void 0) return shape;
 	const presetBase = new URL(".", pathToFileURL(path)).href;
-	const unresolvable = await unresolvableRows(rows, presetBase, harnessBase);
+	let unresolvable;
+	try {
+		unresolvable = await unresolvableRows(rows, presetBase, harnessBase, resolves);
+	} catch (error) {
+		return `the composition's plugins cannot be checked: ${(error instanceof Error ? error.message : String(error)).replace(/\n[\s\S]*$/, "")}`;
+	}
 	const [first] = unresolvable;
 	if (first === void 0) return void 0;
 	if (unresolvable.length === 1) return `${first.label} names a plugin that cannot be resolved: ${first.name}`;
@@ -387,9 +369,10 @@ async function isFile(path) {
 * @param root - the directory and the trust its presets inherit.
 * @param harnessBase - base URL a row's package name resolves against; the
 * caller's own `ctx.baseUrl`, which is where the installed harness lives.
+* @param resolves - package-presence lookup for the active runtime.
 * @returns the root's presets ordered by id.
 */
-async function scanRoot(root, harnessBase) {
+async function scanRoot(root, harnessBase, resolves = packageInstalled) {
 	const dir = resolve(expandHomePath(root.path));
 	let children;
 	try {
@@ -403,7 +386,7 @@ async function scanRoot(root, harnessBase) {
 		if (!child.isDirectory() || !PRESET_ID.test(child.name)) continue;
 		const directory = join(dir, child.name);
 		const path = join(directory, COMPOSITION_FILE);
-		const broken = await isFile(path) ? await compositionProblem(path, harnessBase) : `the composition file ${COMPOSITION_FILE} is missing — the directory still occupies the id; delete it or restore the file`;
+		const broken = await isFile(path) ? await compositionProblem(path, harnessBase, resolves) : `the composition file ${COMPOSITION_FILE} is missing — the directory still occupies the id; delete it or restore the file`;
 		const metadata = await readPresetMetadata(directory);
 		found.push({
 			id: child.name,
@@ -422,11 +405,12 @@ async function scanRoot(root, harnessBase) {
 * Scan every root in precedence order.
 * @param roots - roots in precedence order; an earlier root wins a duplicate id.
 * @param harnessBase - base URL a row's package name resolves against.
+* @param resolves - package-presence lookup for the active runtime.
 * @returns every discovered preset, first-root-wins per id.
 */
-async function discoverPresets(roots, harnessBase) {
+async function discoverPresets(roots, harnessBase, resolves = packageInstalled) {
 	const byId = /* @__PURE__ */ new Map();
-	for (const root of roots) for (const preset of await scanRoot(root, harnessBase)) {
+	for (const root of roots) for (const preset of await scanRoot(root, harnessBase, resolves)) {
 		if (byId.has(preset.id)) continue;
 		byId.set(preset.id, preset);
 	}
@@ -830,24 +814,28 @@ function serviceForAgent(ctx, agent, name) {
 /**
 * Rows that did not reach a usable state, each rendered as one diagnostic line.
 *
-* A row whose module failed to import or whose plugin threw already rejects the
-* mount through the loader; what remains observable here is a row still waiting
-* for a service the composition never supplies.
+* Wait for the subtree, then report import failures, activation failures, and
+* rows waiting for services the composition does not supply.
 * @param tree - the mounted subtree.
 * @returns one line per unusable row, empty when every enabled row is usable.
 */
-function inactiveRows(tree) {
+async function inactiveRows(tree) {
+	await tree.await();
 	const lines = [];
 	for (const entry of tree.entries()) {
 		if (entry.disabled) continue;
 		const fiber = entry.fiber;
-		/* v8 ignore next 4 -- the loader rejects an entry whose module or plugin failed,
-		so a settled tree never holds an enabled fiber-less entry; the branch exists
-		only because `Entry.fiber` is declared optional. */
 		if (fiber === void 0) {
 			lines.push(`${entry.options.id} (${entry.options.name}): never started`);
 			continue;
 		}
+		try {
+			await fiber.await();
+		} catch (error) {
+			const detail = mountDetail(error);
+			lines.push(`${entry.options.id} (${entry.options.name}): ${detail}`);
+			continue;
+		}
 		const missing = Object.keys(fiber.inject).filter((name) => fiber.ctx.get(name) === void 0);
 		if (missing.length > 0) lines.push(`${entry.options.id} (${entry.options.name}): waiting for ${missing.join(", ")}`);
 	}
@@ -856,14 +844,8 @@ function inactiveRows(tree) {
 /**
 * The causes of `error` whose detail its own message does not already carry.
 *
-* `AggregateError` names none of its causes in its own message, so its
-* `errors` are the branches. The Loader's per-row wrapper takes the opposite
-* approach: it appends `cause.message` to the message it builds and keeps the
-* cause only as `error.cause`, so following a plain chain would print every
-* line twice. That leaves exactly one lossy shape — a wrapped row whose cause
-* is an `AggregateError`. Its message ends with the aggregate's own line and
-* drops the `errors` behind it, which is how a failed group reports as
-* "loader entries failed to apply" and names none of the rows that failed.
+* Aggregate errors carry separate member messages. A wrapper can preserve the
+* aggregate as its cause without including those messages in its own text.
 * @param error - the failure to read branches from.
 * @returns the branches to render beneath `error.message`, possibly empty.
 */
@@ -874,19 +856,12 @@ function detailBranches(error) {
 /**
 * The reportable text of a mount failure.
 *
-* The loader reports several failed rows as one `AggregateError`, whose own
-* message names none of them; without flattening, a composition that fails on
-* two rows says only "loader entries failed to apply" and the operator has
-* nothing to act on. Nested groups indent under the row that owns them, so a
-* composition failing inside a group still names the rows rather than the
-* group alone.
+* A plugin may reject with an aggregate or wrap one as its cause. Include its
+* member messages beneath the row diagnostic so each failure is visible.
 * @param error - the value the mount rejected with.
 * @returns a single-line-per-cause description.
 */
 function mountDetail(error) {
-	/* v8 ignore next -- every path into the mount's catch throws an Error: the loader
-	wraps a row's thrown value before it propagates, and this module's own
-	rejections are Errors. The fallback keeps a hostile value readable. */
 	if (!(error instanceof Error)) return String(error);
 	const branches = detailBranches(error);
 	if (branches.length === 0) return error.message;
@@ -915,7 +890,7 @@ async function mountPreset(agentCtx, preset) {
 		/* v8 ignore next -- the subclass constructor runs before `await()` settles for every mounted tree */
 		if (subtree === void 0) throw new Error("mounted subtree did not publish its entry tree");
 		const { tree, fiber } = subtree;
-		const unusable = inactiveRows(tree);
+		const unusable = await inactiveRows(tree);
 		if (unusable.length > 0) throw new Error(`${String(unusable.length)} row(s) did not activate:\n${unusable.join("\n")}`);
 		const leaked = leakedServices(agentCtx, fiber);
 		if (leaked.length > 0) throw new Error(`row(s) published process-global service(s) [${leaked.join(", ")}]; a preset service must sit behind an \`isolate\` realm or move to the host composition`);
@@ -1141,14 +1116,17 @@ var __esDecorate = function(ctor, descriptorIn, decorators, contextIn, initializ
 	if (target) Object.defineProperty(target, contextIn.name, descriptor);
 	done = true;
 };
-/** Settings namespace carrying the user's chosen default preset. */
+/** Settings namespace carrying the user's preset-picker preference and chosen default. */
 const SETTINGS_NAMESPACE = "agent-presets";
 /** Refuse an empty preset id before invoking a domain operation. */
 function validatePresetId(value, field) {
 	if (value.length === 0) throw new RemoteError("gateway/bad-request", `${field} must be a non-empty string`, {});
 }
 /** Runtime schema for the user-writable slice. */
-const AgentPresetSettingsSchema = z.object({ default: z.string() });
+const AgentPresetSettingsSchema = z.object({
+	default: z.string(),
+	modeSelectionEnabled: z.boolean()
+});
 /**
 * Registry over the deployment's agent presets.
 *
@@ -1309,7 +1287,10 @@ let AgentPresets = (() => {
 				}] : []
 			];
 			ctx.inject(["settings"], (settingsCtx) => {
-				this.settings = settingsCtx.settings.register(SETTINGS_NAMESPACE, AgentPresetSettingsSchema, { base: { default: config.default } });
+				this.settings = settingsCtx.settings.register(SETTINGS_NAMESPACE, AgentPresetSettingsSchema, { base: {
+					default: config.default,
+					modeSelectionEnabled: true
+				} });
 				this.settingsService = settingsCtx.settings;
 				settingsCtx.effect(() => () => {
 					this.settings = void 0;
@@ -1335,35 +1316,51 @@ let AgentPresets = (() => {
 		* every running session on the preset it was composed from.
 		*/
 		get defaultId() {
-			return this.settings?.get().default ?? this.config.default;
+			return this.selectionPolicy().defaultId;
+		}
+		/** Read one internally consistent snapshot of the selection policy. */
+		selectionPolicy() {
+			const settings = this.settings?.get();
+			if (settings === void 0) return {
+				enabled: true,
+				defaultId: this.config.default
+			};
+			const enabled = settings.modeSelectionEnabled;
+			return {
+				enabled,
+				defaultId: enabled ? settings.default : this.config.default
+			};
 		}
 		/**
 		* Every preset the configured roots currently supply.
 		* @returns the presets, first-root-wins per id.
 		*/
 		async list() {
-			return await discoverPresets(this.resolvedRoots, this.harnessBase);
+			const packages = this.ctx.get("pluginPackages");
+			return packages === void 0 ? await discoverPresets(this.resolvedRoots, this.harnessBase) : await discoverPresets(this.resolvedRoots, this.harnessBase, (specifier, base) => packages.packageOf(specifier, base) !== void 0);
 		}
 		/**
 		* The roster off the Host: {@link list} projected to path-free rows, with
-		* the default marked and this deployment's authoring capability beside it.
+		* the policy-effective default marked, this deployment's authoring
+		* capability, and its mode-selection policy beside it.
 		*
 		* Whether a client can open a preset's directory is the Host's own opener
 		* capability, not a roster property — a caller needing both joins them.
-		* @returns the rows and the authoring capability.
+		* @returns the rows, authoring capability, and effective selection policy.
 		*/
 		async remoteExportList() {
-			const defaultId = this.defaultId;
+			const policy = this.selectionPolicy();
 			return {
 				presets: (await this.list()).map((preset) => ({
 					id: preset.id,
 					trust: preset.trust,
-					isDefault: preset.id === defaultId,
+					isDefault: preset.id === policy.defaultId,
 					...preset.name === void 0 ? {} : { name: preset.name },
 					...preset.description === void 0 ? {} : { description: preset.description },
 					...preset.broken === void 0 ? {} : { broken: preset.broken }
 				})),
-				authorable: this.authorable
+				authorable: this.authorable,
+				modeSelectionEnabled: policy.enabled
 			};
 		}
 		/**