@dsh-plus/lifeboat 0.1.2 → 0.1.3

package/lib/index.d.ts

@@ -1,5 +1,5 @@
-import z from "@deepseek-ai/schemastery";
 import "@deepseek-ai/dsh-settings";
+import z from "@deepseek-ai/schemastery";
 import { Context } from "@deepseek-ai/cordis";
 
 //#region src/config.d.ts

package/lib/index.js

@@ -1,6 +1,6 @@
 import { dshHomePath } from "@deepseek-ai/dsh-home-paths";
-import z from "@deepseek-ai/schemastery";
 import { SettingsConflictError, settingsNamespace } from "@deepseek-ai/dsh-settings";
+import z from "@deepseek-ai/schemastery";
 import { copyFile, readFile, rename, writeFile } from "node:fs/promises";
 import { parseDocument } from "yaml";
 
@@ -43,164 +43,6 @@ const JournalSchema = z.object({
 	llmFallback: z.union([FallbackState, z.const(null)]).description("LLM 应急翻译状态；null 表示未处于降级").default(null)
 });
 
-//#endregion
-//#region src/notify.ts
-/**
-* 装配告警出口。返回同步派单函数：内部异步发送，失败只记日志。
-* notify-email 出现时升级为邮件；全程 journal 兜底可溯。
-*/
-function installAlerter(ctx, journal) {
-	const logger = ctx.logger("lifeboat");
-	let mailer;
-	ctx.inject(["notifyEmail"], (mailCtx) => {
-		mailer = mailCtx.notifyEmail;
-		return () => {
-			mailer = void 0;
-		};
-	});
-	return (subject, text) => {
-		journal("alert", `${subject} | ${text}`);
-		const active = mailer;
-		if (!active?.sendNotice) {
-			logger.warn(`${subject} —— ${text}`);
-			return;
-		}
-		active.sendNotice({
-			subject,
-			text
-		}).then((result) => {
-			if (!result.ok) logger.warn(`邮件告警投递失败: ${result.detail}`);
-		}, (error) => {
-			logger.warn(`邮件告警异常: ${error instanceof Error ? error.message : String(error)}`);
-		});
-	};
-}
-
-//#endregion
-//#region src/patch-file.ts
-/** 条目（含 insert 子列表）中是否已有针对 targetId 的 disabled 覆盖。 */
-function hasDisable(entries, targetId) {
-	for (const entry of entries) {
-		if (entry.id === targetId && entry.disabled === true) return true;
-		if (Array.isArray(entry.insert) && hasDisable(entry.insert, targetId)) return true;
-	}
-	return false;
-}
-/**
-* 向 patch 文件追加一条禁用覆盖；返回是否实际写入（已存在禁用则跳过）。
-* @throws 文件不可读/顶层不是数组/落盘失败——调用方负责告警。
-*/
-async function appendDisable(patchFile, targetId) {
-	const doc = parseDocument(await readFile(patchFile, "utf-8"));
-	const root = doc.toJS();
-	if (!Array.isArray(root)) throw new Error(`patch 文件顶层不是数组: ${patchFile}`);
-	if (hasDisable(root, targetId)) return false;
-	await copyFile(patchFile, `${patchFile}.lifeboat.bak`);
-	doc.add({
-		id: targetId,
-		disabled: true
-	});
-	const tmp = `${patchFile}.lifeboat.tmp`;
-	await writeFile(tmp, doc.toString(), "utf-8");
-	await rename(tmp, patchFile);
-	return true;
-}
-
-//#endregion
-//#region src/quarantine.ts
-/** Runtime mirror: FiberState 是 cordis 跨包 const enum（官方 dsh-host-plugin-inventory 同款做法）。 */
-const FIBER_FAILED = 3;
-/** 永不隔离的条目：救生艇自身与聚合 bundle（禁了它们等于关掉整个防线/全家）。 */
-const EXCLUDED = new Set(["dsh-plus-lifeboat", "dsh-plus-bundle-main"]);
-const GUARD_RE = /^dsh-plus-[a-z0-9-]+$/;
-/** 名字是否属于可隔离的 dsh-plus 兄弟插件（entry id 与插件 name 同字面量是本仓库约定）。 */
-function isGuardedPlugin(name$1) {
-	return typeof name$1 === "string" && GUARD_RE.test(name$1) && !EXCLUDED.has(name$1);
-}
-/** 装配隔离执行器（纯逻辑，可测）。 */
-function createQuarantine(ctx, deps) {
-	const logger = ctx.logger("lifeboat");
-	const lastAlertAt = /* @__PURE__ */ new Map();
-	const inFlight = /* @__PURE__ */ new Set();
-	async function quarantine(name$1, origin) {
-		if (!isGuardedPlugin(name$1)) return;
-		if (inFlight.has(name$1)) return;
-		inFlight.add(name$1);
-		try {
-			const written = await appendDisable(deps.patchFile, name$1);
-			deps.journal("quarantine", `${name$1}（来源 ${origin}，${written ? "已写入禁用" : "已存在禁用"}）`);
-			const now = Date.now();
-			if (now - (lastAlertAt.get(name$1) ?? 0) >= deps.alertCooldownMs) {
-				lastAlertAt.set(name$1, now);
-				deps.alert(`[DSH] 插件 ${name$1} 加载失败，已自动隔离`, `检测到插件 ${name$1} 的 fiber 进入 FAILED（来源：${origin}）。\n已向 ${deps.patchFile} 写入 disabled 覆盖，重启/刷新后该插件不再加载，其余插件不受影响。\n修复后删除该条覆盖即可恢复。`);
-			}
-		} catch (error) {
-			const message = error instanceof Error ? error.message : String(error);
-			logger.warn(`隔离 ${name$1} 失败: ${message}`);
-			deps.journal("quarantine-error", `${name$1}: ${message}`);
-			deps.alert(`[DSH] 插件 ${name$1} 加载失败，自动隔离未果`, `隔离写入失败：${message}\n请手动在 patch 层禁用该插件。`);
-		} finally {
-			inFlight.delete(name$1);
-		}
-	}
-	return { quarantine };
-}
-/**
-* host 侧监听：root context 上兄弟 fiber 的 internal/status 转移。
-* fiber.name 对 loader 条目即插件 display name（模块导出的 name 字段）。
-*/
-function installHostWatch(ctx, q) {
-	ctx.root.on("internal/status", (fiber) => {
-		if (fiber.state !== FIBER_FAILED) return;
-		if (!isGuardedPlugin(fiber.name)) return;
-		q.quarantine(fiber.name, "host");
-	});
-}
-
-//#endregion
-//#region src/quarantine-api.ts
-const ROUTE = "/dsh-plus/lifeboat/quarantine";
-function sendJson(res, status, body) {
-	res.writeHead(status, { "content-type": "application/json; charset=utf-8" });
-	res.end(JSON.stringify(body));
-}
-function readBody(req) {
-	return new Promise((resolve, reject) => {
-		const chunks = [];
-		req.on("data", (chunk) => chunks.push(chunk));
-		req.on("end", () => resolve(Buffer.concat(chunks).toString("utf-8")));
-		req.on("error", reject);
-	});
-}
-/** 注册哨兵回报路由（webServer 缺失时由调用方保证不调用）。 */
-function registerQuarantineApi(ctx, q) {
-	const logger = ctx.logger("lifeboat");
-	ctx.webServer.register({
-		kind: "prefix",
-		path: ROUTE,
-		handler: async (req, res) => {
-			try {
-				if (req.method !== "POST") {
-					sendJson(res, 405, { error: "POST only" });
-					return;
-				}
-				const body = JSON.parse(await readBody(req));
-				if (typeof body.name !== "string") {
-					sendJson(res, 400, { error: "missing name" });
-					return;
-				}
-				q.quarantine(body.name, "client");
-				sendJson(res, 200, { ok: true });
-			} catch (error) {
-				const message = error instanceof Error ? error.message : String(error);
-				logger.warn(`quarantine api failed: ${message}`);
-				if (!res.headersSent) sendJson(res, 400, { error: message });
-				else res.end();
-			}
-		}
-	});
-}
-
 //#endregion
 //#region src/fallback-llm.ts
 const NS_PI_AI = settingsNamespace("llm-pi-ai");
@@ -356,7 +198,8 @@ function installLlmFallback(ctx, deps) {
 		await activate(def.provider, def.model);
 	}
 	const run = () => {
-		inFlight ??= evaluate().catch((error) => {
+		if (inFlight !== void 0) return;
+		inFlight = evaluate().catch((error) => {
 			const message = error instanceof Error ? error.message : String(error);
 			logger.warn(`llm fallback 评估失败: ${message}`);
 			deps.journal("llm-fallback-error", message);
@@ -378,6 +221,164 @@ function installLlmFallback(ctx, deps) {
 	ctx.root.on("llm/adapters-updated", run);
 }
 
+//#endregion
+//#region src/notify.ts
+/**
+* 装配告警出口。返回同步派单函数：内部异步发送，失败只记日志。
+* notify-email 出现时升级为邮件；全程 journal 兜底可溯。
+*/
+function installAlerter(ctx, journal) {
+	const logger = ctx.logger("lifeboat");
+	let mailer;
+	ctx.inject(["notifyEmail"], (mailCtx) => {
+		mailer = mailCtx.notifyEmail;
+		return () => {
+			mailer = void 0;
+		};
+	});
+	return (subject, text) => {
+		journal("alert", `${subject} | ${text}`);
+		const active = mailer;
+		if (!active?.sendNotice) {
+			logger.warn(`${subject} —— ${text}`);
+			return;
+		}
+		active.sendNotice({
+			subject,
+			text
+		}).then((result) => {
+			if (!result.ok) logger.warn(`邮件告警投递失败: ${result.detail}`);
+		}, (error) => {
+			logger.warn(`邮件告警异常: ${error instanceof Error ? error.message : String(error)}`);
+		});
+	};
+}
+
+//#endregion
+//#region src/patch-file.ts
+/** 条目（含 insert 子列表）中是否已有针对 targetId 的 disabled 覆盖。 */
+function hasDisable(entries, targetId) {
+	for (const entry of entries) {
+		if (entry.id === targetId && entry.disabled === true) return true;
+		if (Array.isArray(entry.insert) && hasDisable(entry.insert, targetId)) return true;
+	}
+	return false;
+}
+/**
+* 向 patch 文件追加一条禁用覆盖；返回是否实际写入（已存在禁用则跳过）。
+* @throws 文件不可读/顶层不是数组/落盘失败——调用方负责告警。
+*/
+async function appendDisable(patchFile, targetId) {
+	const doc = parseDocument(await readFile(patchFile, "utf-8"));
+	const root = doc.toJS();
+	if (!Array.isArray(root)) throw new Error(`patch 文件顶层不是数组: ${patchFile}`);
+	if (hasDisable(root, targetId)) return false;
+	await copyFile(patchFile, `${patchFile}.lifeboat.bak`);
+	doc.add({
+		id: targetId,
+		disabled: true
+	});
+	const tmp = `${patchFile}.lifeboat.tmp`;
+	await writeFile(tmp, doc.toString(), "utf-8");
+	await rename(tmp, patchFile);
+	return true;
+}
+
+//#endregion
+//#region src/quarantine.ts
+/** Runtime mirror: FiberState 是 cordis 跨包 const enum（官方 dsh-host-plugin-inventory 同款做法）。 */
+const FIBER_FAILED = 3;
+/** 永不隔离的条目：救生艇自身与聚合 bundle（禁了它们等于关掉整个防线/全家）。 */
+const EXCLUDED = new Set(["dsh-plus-lifeboat", "dsh-plus-bundle-main"]);
+const GUARD_RE = /^dsh-plus-[a-z0-9-]+$/;
+/** 名字是否属于可隔离的 dsh-plus 兄弟插件（entry id 与插件 name 同字面量是本仓库约定）。 */
+function isGuardedPlugin(name$1) {
+	return typeof name$1 === "string" && GUARD_RE.test(name$1) && !EXCLUDED.has(name$1);
+}
+/** 装配隔离执行器（纯逻辑，可测）。 */
+function createQuarantine(ctx, deps) {
+	const logger = ctx.logger("lifeboat");
+	const lastAlertAt = /* @__PURE__ */ new Map();
+	const inFlight = /* @__PURE__ */ new Set();
+	async function quarantine(name$1, origin) {
+		if (!isGuardedPlugin(name$1)) return;
+		if (inFlight.has(name$1)) return;
+		inFlight.add(name$1);
+		try {
+			const written = await appendDisable(deps.patchFile, name$1);
+			deps.journal("quarantine", `${name$1}（来源 ${origin}，${written ? "已写入禁用" : "已存在禁用"}）`);
+			const now = Date.now();
+			if (now - (lastAlertAt.get(name$1) ?? 0) >= deps.alertCooldownMs) {
+				lastAlertAt.set(name$1, now);
+				deps.alert(`[DSH] 插件 ${name$1} 加载失败，已自动隔离`, `检测到插件 ${name$1} 的 fiber 进入 FAILED（来源：${origin}）。\n已向 ${deps.patchFile} 写入 disabled 覆盖，重启/刷新后该插件不再加载，其余插件不受影响。\n修复后删除该条覆盖即可恢复。`);
+			}
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			logger.warn(`隔离 ${name$1} 失败: ${message}`);
+			deps.journal("quarantine-error", `${name$1}: ${message}`);
+			deps.alert(`[DSH] 插件 ${name$1} 加载失败，自动隔离未果`, `隔离写入失败：${message}\n请手动在 patch 层禁用该插件。`);
+		} finally {
+			inFlight.delete(name$1);
+		}
+	}
+	return { quarantine };
+}
+/**
+* host 侧监听：root context 上兄弟 fiber 的 internal/status 转移。
+* fiber.name 对 loader 条目即插件 display name（模块导出的 name 字段）。
+*/
+function installHostWatch(ctx, q) {
+	ctx.root.on("internal/status", (fiber) => {
+		if (fiber.state !== FIBER_FAILED) return;
+		if (!isGuardedPlugin(fiber.name)) return;
+		q.quarantine(fiber.name, "host");
+	});
+}
+
+//#endregion
+//#region src/quarantine-api.ts
+const ROUTE = "/dsh-plus/lifeboat/quarantine";
+function sendJson(res, status, body) {
+	res.writeHead(status, { "content-type": "application/json; charset=utf-8" });
+	res.end(JSON.stringify(body));
+}
+function readBody(req) {
+	return new Promise((resolve, reject) => {
+		const chunks = [];
+		req.on("data", (chunk) => chunks.push(chunk));
+		req.on("end", () => resolve(Buffer.concat(chunks).toString("utf-8")));
+		req.on("error", reject);
+	});
+}
+/** 注册哨兵回报路由（webServer 缺失时由调用方保证不调用）。 */
+function registerQuarantineApi(ctx, q) {
+	const logger = ctx.logger("lifeboat");
+	ctx.webServer.register({
+		kind: "prefix",
+		path: ROUTE,
+		handler: async (req, res) => {
+			try {
+				if (req.method !== "POST") {
+					sendJson(res, 405, { error: "POST only" });
+					return;
+				}
+				const body = JSON.parse(await readBody(req));
+				if (typeof body.name !== "string") {
+					sendJson(res, 400, { error: "missing name" });
+					return;
+				}
+				q.quarantine(body.name, "client");
+				sendJson(res, 200, { ok: true });
+			} catch (error) {
+				const message = error instanceof Error ? error.message : String(error);
+				logger.warn(`quarantine api failed: ${message}`);
+				if (!res.headersSent) sendJson(res, 400, { error: message });
+				else res.end();
+			}
+		}
+	});
+}
+
 //#endregion
 //#region src/index.ts
 const name = "dsh-plus-lifeboat";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dsh-plus/lifeboat",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "dsh-plus service plugin: 故障救生艇——兄弟插件崩溃时自动隔离（写用户 patch 层禁用），llm-pi 缺席时把其配置临时翻译为官方 llm-pi-ai 路由，恢复后自动还原",
   "type": "module",
   "main": "lib/index.js",

package/src/config.ts

@@ -6,8 +6,9 @@
  * schema 刻意宽松：lifeboat 是最后防线，自身命名空间的数据问题绝不能让它起不来。
  * @module lifeboat/config
  */
-import z from '@deepseek-ai/schemastery'
+
 import { settingsNamespace } from '@deepseek-ai/dsh-settings'
+import z from '@deepseek-ai/schemastery'
 
 import { SETTINGS_NS as NS_LITERAL } from './ns.ts'
 
@@ -17,11 +18,16 @@ export const SETTINGS_NS = settingsNamespace(NS_LITERAL)
 /** 行级配置：全部有默认值，正常部署零配置。 */
 export const Config = z.object({
   enabled: z.boolean().description('故障隔离总开关').default(true),
-  patchFile: z.string()
-    .description('隔离写入的 profile 用户 patch 文件绝对路径；留空自动取 $DSH_HOME/profiles/web/cordis.patch.yml')
+  patchFile: z
+    .string()
+    .description(
+      '隔离写入的 profile 用户 patch 文件绝对路径；留空自动取 $DSH_HOME/profiles/web/cordis.patch.yml',
+    )
     .default(''),
-  llmFallback: z.boolean()
-    .description('llm-pi 缺席时自动翻译其配置到官方 llm-pi-ai 并切换默认模型').default(true),
+  llmFallback: z
+    .boolean()
+    .description('llm-pi 缺席时自动翻译其配置到官方 llm-pi-ai 并切换默认模型')
+    .default(true),
   alertCooldownMs: z.natural().description('同一插件重复告警的最小间隔毫秒数').default(300000),
 })
 
@@ -47,7 +53,10 @@ const FallbackState = z.object({
 /** 命名空间 schema：宽松承载 journal 与翻译状态，上限截断防膨胀。 */
 export const JournalSchema = z.object({
   journal: z.array(JournalEntry).description('救生艇操作日志（最新在尾，封顶 50 条）').default([]),
-  llmFallback: z.union([FallbackState, z.const(null)]).description('LLM 应急翻译状态；null 表示未处于降级').default(null),
+  llmFallback: z
+    .union([FallbackState, z.const(null)])
+    .description('LLM 应急翻译状态；null 表示未处于降级')
+    .default(null),
 })
 
 export type JournalDoc = Schemastery.TypeT<typeof JournalSchema>

package/src/fallback-llm.ts

@@ -15,7 +15,11 @@ import { readFile } from 'node:fs/promises'
 import type { Context } from '@deepseek-ai/cordis'
 import { dshHomePath } from '@deepseek-ai/dsh-home-paths'
 import type {} from '@deepseek-ai/dsh-llm'
-import { SettingsConflictError, settingsNamespace, type SettingsProvider } from '@deepseek-ai/dsh-settings'
+import {
+  SettingsConflictError,
+  type SettingsProvider,
+  settingsNamespace,
+} from '@deepseek-ai/dsh-settings'
 import { parseDocument } from 'yaml'
 
 import type { FallbackStateT } from './config.ts'
@@ -100,7 +104,8 @@ export function inferApi(routeKey: string, provider: RawProvider): string {
   if (routeHint !== undefined) return routeHint
   const firstExtends = provider.models?.find((m) => typeof m.extends === 'string')?.extends
   const source = firstExtends?.split('/')[0]
-  if (source !== undefined && EXTENDS_PROTOCOL[source] !== undefined) return EXTENDS_PROTOCOL[source]
+  if (source !== undefined && EXTENDS_PROTOCOL[source] !== undefined)
+    return EXTENDS_PROTOCOL[source]
   return 'openai-completions'
 }
 
@@ -113,9 +118,11 @@ export function translateProvider(routeKey: string, raw: RawProvider): Translate
   if (raw.apiKeyEnv !== undefined) out.apiKeyEnv = raw.apiKeyEnv
   if (raw.baseURL !== undefined) out.baseURL = raw.baseURL
   if (raw.headers !== undefined) out.headers = raw.headers
-  if (raw.reasoning !== undefined && REASONING_LEVELS.has(raw.reasoning)) out.reasoning = raw.reasoning
+  if (raw.reasoning !== undefined && REASONING_LEVELS.has(raw.reasoning))
+    out.reasoning = raw.reasoning
   if (raw.thinkingBudgets !== undefined) out.thinkingBudgets = raw.thinkingBudgets
-  if (Array.isArray(raw.defaultInput) && raw.defaultInput.length > 0) out.defaultInput = raw.defaultInput
+  if (Array.isArray(raw.defaultInput) && raw.defaultInput.length > 0)
+    out.defaultInput = raw.defaultInput
   if (raw.compat !== undefined) {
     const compat: Record<string, unknown> = {}
     for (const key of COMPAT_WHITELIST) {
@@ -137,7 +144,9 @@ export function translateProvider(routeKey: string, raw: RawProvider): Translate
 }
 
 /** 整表翻译：键加 -fb 后缀（纯函数）。 */
-export function translateProviders(providers: Record<string, RawProvider>): Record<string, TranslatedProvider> {
+export function translateProviders(
+  providers: Record<string, RawProvider>,
+): Record<string, TranslatedProvider> {
   const out: Record<string, TranslatedProvider> = {}
   for (const [key, raw] of Object.entries(providers)) {
     out[`${key}${FALLBACK_SUFFIX}`] = translateProvider(key, raw)
@@ -146,7 +155,10 @@ export function translateProviders(providers: Record<string, RawProvider>): Reco
 }
 
 /** 读 settings.yaml 原始文档的指定段落（只读；文件/段落缺失返回 undefined）。 */
-export async function readRawSection(settingsFile: string, ns: string): Promise<Record<string, unknown> | undefined> {
+export async function readRawSection(
+  settingsFile: string,
+  ns: string,
+): Promise<Record<string, unknown> | undefined> {
   const text = await readFile(settingsFile, 'utf-8')
   const doc = parseDocument(text).toJS() as Record<string, unknown>
   const section = doc[ns]
@@ -156,7 +168,14 @@ export async function readRawSection(settingsFile: string, ns: string): Promise<
 
 interface SettingsWrite {
   update(ns: ReturnType<typeof settingsNamespace>, patch: object): Promise<void>
-  mutate(ns: ReturnType<typeof settingsNamespace>, ops: readonly { op: 'set' | 'unset'; path: readonly string[]; value?: unknown }[]): Promise<void>
+  mutate(
+    ns: ReturnType<typeof settingsNamespace>,
+    ops: readonly {
+      op: 'set' | 'unset'
+      path: readonly string[]
+      value?: unknown
+    }[],
+  ): Promise<void>
 }
 
 /** 写 settings 带一次冲突重试（用户同时改配置时不抢，放弃并告警）。
@@ -168,7 +187,9 @@ async function writeWithRetry(write: () => Promise<void>): Promise<void> {
   } catch (error) {
     const conflict =
       error instanceof SettingsConflictError ||
-      (typeof error === 'object' && error !== null && (error as { code?: unknown }).code === 'SETTINGS_CONFLICT')
+      (typeof error === 'object' &&
+        error !== null &&
+        (error as { code?: unknown }).code === 'SETTINGS_CONFLICT')
     if (!conflict) throw error
     await write()
   }
@@ -190,8 +211,7 @@ export function installLlmFallback(ctx: Context, deps: FallbackDeps): void {
   const settingsFile = dshHomePath('settings.yaml')
   let inFlight: Promise<void> | undefined
 
-  const listProviderIds = (): Set<string> =>
-    new Set(ctx.llm.listProviders().map((p) => p.id))
+  const listProviderIds = (): Set<string> => new Set(ctx.llm.listProviders().map((p) => p.id))
 
   async function activate(provider: string, model: string): Promise<void> {
     const section = await readRawSection(settingsFile, RAW_NS_LLM_PI).catch(() => undefined)
@@ -215,7 +235,10 @@ export function installLlmFallback(ctx: Context, deps: FallbackDeps): void {
       providers: Object.keys(translated),
       at: new Date().toISOString(),
     })
-    deps.journal('llm-fallback', `默认模型切换到 ${fbProvider}/${model}（翻译 ${Object.keys(translated).length} 个 provider）`)
+    deps.journal(
+      'llm-fallback',
+      `默认模型切换到 ${fbProvider}/${model}（翻译 ${Object.keys(translated).length} 个 provider）`,
+    )
     deps.alert(
       '[DSH] LLM 配置已应急翻译',
       `默认模型的 provider "${provider}" 不可用（llm-pi 缺席？），已把 ${RAW_NS_LLM_PI} 配置翻译为官方 llm-pi-ai 路由（-fb 后缀）并切换默认模型为 ${fbProvider}/${model}。源插件恢复后将自动还原。`,
@@ -223,13 +246,22 @@ export function installLlmFallback(ctx: Context, deps: FallbackDeps): void {
   }
 
   async function revert(state: FallbackStateT): Promise<void> {
-    const ops = state.providers.map((key) => ({ op: 'unset' as const, path: ['providers', key] }))
+    const ops = state.providers.map((key) => ({
+      op: 'unset' as const,
+      path: ['providers', key],
+    }))
     await writeWithRetry(() => writes.mutate(NS_PI_AI, ops))
     await writeWithRetry(() =>
-      writes.update(NS_AGENT_DEFAULT, { provider: state.originalProvider, model: state.originalModel }),
+      writes.update(NS_AGENT_DEFAULT, {
+        provider: state.originalProvider,
+        model: state.originalModel,
+      }),
     )
     await deps.writeState(null)
-    deps.journal('llm-fallback-revert', `默认模型还原为 ${state.originalProvider}/${state.originalModel}`)
+    deps.journal(
+      'llm-fallback-revert',
+      `默认模型还原为 ${state.originalProvider}/${state.originalModel}`,
+    )
     deps.alert(
       '[DSH] LLM 应急翻译已还原',
       `provider "${state.originalProvider}" 恢复健康，默认模型已还原，临时翻译路由已清除。`,
@@ -243,14 +275,17 @@ export function installLlmFallback(ctx: Context, deps: FallbackDeps): void {
       if (ids.has(state.originalProvider)) await revert(state)
       return
     }
-    const def = ctx.settings.get(NS_AGENT_DEFAULT) as { provider?: string; model?: string } | undefined
+    const def = ctx.settings.get(NS_AGENT_DEFAULT) as
+      | { provider?: string; model?: string }
+      | undefined
     if (def?.provider === undefined || def.model === undefined) return
     if (ids.has(def.provider)) return
     await activate(def.provider, def.model)
   }
 
   const run = (): void => {
-    inFlight ??= evaluate()
+    if (inFlight !== undefined) return
+    inFlight = evaluate()
       .catch((error: unknown) => {
         const message = error instanceof Error ? error.message : String(error)
         logger.warn(`llm fallback 评估失败: ${message}`)
@@ -264,10 +299,7 @@ export function installLlmFallback(ctx: Context, deps: FallbackDeps): void {
   // 首次评估延迟到启动收尾：lifeboat 首位加载时兄弟插件的 adapter 尚未注册，
   // 立刻评估会把"还没加载"误判为"缺席"。事件订阅覆盖后续变化。
   const bootTimer = setTimeout(run, 10_000)
-  ctx.effect(
-    () => () => clearTimeout(bootTimer),
-    'lifeboat: fallback boot timer',
-  )
+  ctx.effect(() => () => clearTimeout(bootTimer), 'lifeboat: fallback boot timer')
   ctx.on('ready' as never, run)
   // 只响应与本判定相关的命名空间变化：journal 写自身命名空间，不过滤会自触发循环。
   const WATCHED_NS = new Set(['agent-default-model', 'llm-pi-ai', RAW_NS_LLM_PI])

package/src/index.ts

@@ -15,11 +15,18 @@
 import type { Context } from '@deepseek-ai/cordis'
 import { dshHomePath } from '@deepseek-ai/dsh-home-paths'
 
-import { Config, JournalSchema, SETTINGS_NS, type FallbackStateT, type JournalDoc, type LifeboatConfig } from './config.ts'
+import {
+  Config,
+  type FallbackStateT,
+  type JournalDoc,
+  JournalSchema,
+  type LifeboatConfig,
+  SETTINGS_NS,
+} from './config.ts'
+import { installLlmFallback } from './fallback-llm.ts'
 import { installAlerter } from './notify.ts'
 import { createQuarantine, installHostWatch } from './quarantine.ts'
 import { registerQuarantineApi } from './quarantine-api.ts'
-import { installLlmFallback } from './fallback-llm.ts'
 
 export const name = 'dsh-plus-lifeboat'
 
@@ -42,11 +49,16 @@ export function apply(ctx: Context, config: LifeboatConfig): void {
     doc = scope.get()
     persist = (patch) => scope.update(patch)
   } catch (error) {
-    logger.warn(`journal 命名空间注册失败，降级为内存态: ${error instanceof Error ? error.message : String(error)}`)
+    logger.warn(
+      `journal 命名空间注册失败，降级为内存态: ${error instanceof Error ? error.message : String(error)}`,
+    )
   }
 
   const journal = (kind: string, detail: string): void => {
-    doc = { ...doc, journal: [...doc.journal, { at: new Date().toISOString(), kind, detail }].slice(-JOURNAL_CAP) }
+    doc = {
+      ...doc,
+      journal: [...doc.journal, { at: new Date().toISOString(), kind, detail }].slice(-JOURNAL_CAP),
+    }
     void persist?.({ journal: doc.journal }).catch((error: unknown) => {
       logger.warn(`journal 持久化失败: ${error instanceof Error ? error.message : String(error)}`)
     })
@@ -55,9 +67,10 @@ export function apply(ctx: Context, config: LifeboatConfig): void {
   const alert = installAlerter(ctx, journal)
 
   if (config.enabled) {
-    const patchFile = config.patchFile.length > 0
-      ? config.patchFile
-      : dshHomePath('profiles', 'web', 'cordis.patch.yml')
+    const patchFile =
+      config.patchFile.length > 0
+        ? config.patchFile
+        : dshHomePath('profiles', 'web', 'cordis.patch.yml')
     const quarantine = createQuarantine(ctx, {
       patchFile,
       alertCooldownMs: config.alertCooldownMs,

package/src/notify.ts

@@ -16,7 +16,10 @@ export type Alerter = (subject: string, text: string) => void
  * 装配告警出口。返回同步派单函数：内部异步发送，失败只记日志。
  * notify-email 出现时升级为邮件；全程 journal 兜底可溯。
  */
-export function installAlerter(ctx: Context, journal: (kind: string, detail: string) => void): Alerter {
+export function installAlerter(
+  ctx: Context,
+  journal: (kind: string, detail: string) => void,
+): Alerter {
   const logger: Logger = ctx.logger('lifeboat')
   let mailer: NotifyEmailLike | undefined
   ctx.inject(['notifyEmail' as never], (mailCtx) => {
@@ -32,10 +35,13 @@ export function installAlerter(ctx: Context, journal: (kind: string, detail: str
       logger.warn(`${subject} —— ${text}`)
       return
     }
-    void active.sendNotice({ subject, text }).then((result) => {
-      if (!result.ok) logger.warn(`邮件告警投递失败: ${result.detail}`)
-    }, (error: unknown) => {
-      logger.warn(`邮件告警异常: ${error instanceof Error ? error.message : String(error)}`)
-    })
+    void active.sendNotice({ subject, text }).then(
+      (result) => {
+        if (!result.ok) logger.warn(`邮件告警投递失败: ${result.detail}`)
+      },
+      (error: unknown) => {
+        logger.warn(`邮件告警异常: ${error instanceof Error ? error.message : String(error)}`)
+      },
+    )
   }
 }

package/src/quarantine.ts

@@ -46,7 +46,10 @@ export function createQuarantine(ctx: Context, deps: QuarantineDeps): Quarantine
     inFlight.add(name)
     try {
       const written = await appendDisable(deps.patchFile, name)
-      deps.journal('quarantine', `${name}（来源 ${origin}，${written ? '已写入禁用' : '已存在禁用'}）`)
+      deps.journal(
+        'quarantine',
+        `${name}（来源 ${origin}，${written ? '已写入禁用' : '已存在禁用'}）`,
+      )
       const now = Date.now()
       const last = lastAlertAt.get(name) ?? 0
       if (now - last >= deps.alertCooldownMs) {
@@ -62,7 +65,10 @@ export function createQuarantine(ctx: Context, deps: QuarantineDeps): Quarantine
       const message = error instanceof Error ? error.message : String(error)
       logger.warn(`隔离 ${name} 失败: ${message}`)
       deps.journal('quarantine-error', `${name}: ${message}`)
-      deps.alert(`[DSH] 插件 ${name} 加载失败，自动隔离未果`, `隔离写入失败：${message}\n请手动在 patch 层禁用该插件。`)
+      deps.alert(
+        `[DSH] 插件 ${name} 加载失败，自动隔离未果`,
+        `隔离写入失败：${message}\n请手动在 patch 层禁用该插件。`,
+      )
     } finally {
       inFlight.delete(name)
     }