@dsh-plus/lifeboat 0.1.2 → 0.1.4

package/lib/client.js

@@ -3,37 +3,35 @@ window.__ModuleLoader__.load({
 	factory: (require) => {
 		var module = { exports: {} };
 		var exports = module.exports;
-
-
-//#region src/client/client.ts
-const name = "dsh-plus-lifeboat";
-/** Runtime mirror: FiberState 是 cordis 跨包 const enum（FAILED = 3，cordis 4.0.1）。 */
-const FIBER_FAILED = 3;
-/** 永不回报的条目：救生艇自身与聚合 bundle。 */
-const EXCLUDED = new Set(["dsh-plus-lifeboat", "dsh-plus-bundle-main"]);
-const GUARD_RE = /^dsh-plus-[a-z0-9-]+$/;
-function apply(ctx) {
-	try {
-		const reported = /* @__PURE__ */ new Set();
-		ctx.root.on("internal/status", (fiber) => {
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		//#region src/client/client.ts
+		const name = "dsh-plus-lifeboat";
+		/** Runtime mirror: FiberState 是 cordis 跨包 const enum（FAILED = 3，cordis 4.0.1）。 */
+		const FIBER_FAILED = 3;
+		/** 永不回报的条目：救生艇自身与聚合 bundle。 */
+		const EXCLUDED = /* @__PURE__ */ new Set(["dsh-plus-lifeboat", "dsh-plus-bundle-main"]);
+		const GUARD_RE = /^dsh-plus-[a-z0-9-]+$/;
+		function apply(ctx) {
 			try {
-				if (fiber.state !== FIBER_FAILED) return;
-				const plugin = fiber.name;
-				if (!GUARD_RE.test(plugin) || EXCLUDED.has(plugin) || reported.has(plugin)) return;
-				reported.add(plugin);
-				fetch("/dsh-plus/lifeboat/quarantine", {
-					method: "POST",
-					headers: { "content-type": "application/json" },
-					body: JSON.stringify({ name: plugin })
-				}).catch(() => {});
+				const reported = /* @__PURE__ */ new Set();
+				ctx.root.on("internal/status", (fiber) => {
+					try {
+						if (fiber.state !== FIBER_FAILED) return;
+						const plugin = fiber.name;
+						if (!GUARD_RE.test(plugin) || EXCLUDED.has(plugin) || reported.has(plugin)) return;
+						reported.add(plugin);
+						fetch("/dsh-plus/lifeboat/quarantine", {
+							method: "POST",
+							headers: { "content-type": "application/json" },
+							body: JSON.stringify({ name: plugin })
+						}).catch(() => {});
+					} catch {}
+				});
 			} catch {}
-		});
-	} catch {}
-}
-
-//#endregion
-exports.apply = apply;
-exports.name = name;
+		}
+		//#endregion
+		exports.apply = apply;
+		exports.name = name;
 		return module.exports;
 	}
 });

package/lib/index.d.ts

@@ -1,9 +1,6 @@
 import z from "@deepseek-ai/schemastery";
-import "@deepseek-ai/dsh-settings";
 import { Context } from "@deepseek-ai/cordis";
-
 //#region src/config.d.ts
-
 /** 行级配置：全部有默认值，正常部署零配置。 */
 declare const Config: z<Schemastery.ObjectS<{
   enabled: z<boolean, boolean>;

package/lib/index.js

@@ -1,20 +1,20 @@
 import { dshHomePath } from "@deepseek-ai/dsh-home-paths";
-import z from "@deepseek-ai/schemastery";
 import { SettingsConflictError, settingsNamespace } from "@deepseek-ai/dsh-settings";
+import z from "@deepseek-ai/schemastery";
 import { copyFile, readFile, rename, writeFile } from "node:fs/promises";
 import { parseDocument } from "yaml";
-
-//#region src/ns.ts
-/**
-* settings 命名空间字面量（纯常量，零依赖，浏览器半可安全引入）。
-* @module lifeboat/ns
-*/
-const SETTINGS_NS$1 = "dsh-plus-lifeboat";
-
 //#endregion
 //#region src/config.ts
+/**
+* 配置与 journal 单一事实源。
+* - 行级 Config（cordis 组合层）：救生艇自身行为开关，dev/prod patch 层可覆盖。
+* - settings 命名空间 dsh-plus-lifeboat：运行期 journal 与 LLM 应急翻译状态，
+*   经 dsh-settings-file 持久化到 $DSH_HOME/settings.yaml，重启后可据此还原。
+* schema 刻意宽松：lifeboat 是最后防线，自身命名空间的数据问题绝不能让它起不来。
+* @module lifeboat/config
+*/
 /** settings 命名空间（品牌化后供 settings 服务注册/读写）。 */
-const SETTINGS_NS = settingsNamespace(SETTINGS_NS$1);
+const SETTINGS_NS = settingsNamespace("dsh-plus-lifeboat");
 /** 行级配置：全部有默认值，正常部署零配置。 */
 const Config = z.object({
 	enabled: z.boolean().description("故障隔离总开关").default(true),
@@ -42,176 +42,27 @@ const JournalSchema = z.object({
 	journal: z.array(JournalEntry).description("救生艇操作日志（最新在尾，封顶 50 条）").default([]),
 	llmFallback: z.union([FallbackState, z.const(null)]).description("LLM 应急翻译状态；null 表示未处于降级").default(null)
 });
-
 //#endregion
-//#region src/notify.ts
-/**
-* 装配告警出口。返回同步派单函数：内部异步发送，失败只记日志。
-* notify-email 出现时升级为邮件；全程 journal 兜底可溯。
-*/
-function installAlerter(ctx, journal) {
-	const logger = ctx.logger("lifeboat");
-	let mailer;
-	ctx.inject(["notifyEmail"], (mailCtx) => {
-		mailer = mailCtx.notifyEmail;
-		return () => {
-			mailer = void 0;
-		};
-	});
-	return (subject, text) => {
-		journal("alert", `${subject} | ${text}`);
-		const active = mailer;
-		if (!active?.sendNotice) {
-			logger.warn(`${subject} —— ${text}`);
-			return;
-		}
-		active.sendNotice({
-			subject,
-			text
-		}).then((result) => {
-			if (!result.ok) logger.warn(`邮件告警投递失败: ${result.detail}`);
-		}, (error) => {
-			logger.warn(`邮件告警异常: ${error instanceof Error ? error.message : String(error)}`);
-		});
-	};
-}
-
-//#endregion
-//#region src/patch-file.ts
-/** 条目（含 insert 子列表）中是否已有针对 targetId 的 disabled 覆盖。 */
-function hasDisable(entries, targetId) {
-	for (const entry of entries) {
-		if (entry.id === targetId && entry.disabled === true) return true;
-		if (Array.isArray(entry.insert) && hasDisable(entry.insert, targetId)) return true;
-	}
-	return false;
-}
-/**
-* 向 patch 文件追加一条禁用覆盖；返回是否实际写入（已存在禁用则跳过）。
-* @throws 文件不可读/顶层不是数组/落盘失败——调用方负责告警。
-*/
-async function appendDisable(patchFile, targetId) {
-	const doc = parseDocument(await readFile(patchFile, "utf-8"));
-	const root = doc.toJS();
-	if (!Array.isArray(root)) throw new Error(`patch 文件顶层不是数组: ${patchFile}`);
-	if (hasDisable(root, targetId)) return false;
-	await copyFile(patchFile, `${patchFile}.lifeboat.bak`);
-	doc.add({
-		id: targetId,
-		disabled: true
-	});
-	const tmp = `${patchFile}.lifeboat.tmp`;
-	await writeFile(tmp, doc.toString(), "utf-8");
-	await rename(tmp, patchFile);
-	return true;
-}
-
-//#endregion
-//#region src/quarantine.ts
-/** Runtime mirror: FiberState 是 cordis 跨包 const enum（官方 dsh-host-plugin-inventory 同款做法）。 */
-const FIBER_FAILED = 3;
-/** 永不隔离的条目：救生艇自身与聚合 bundle（禁了它们等于关掉整个防线/全家）。 */
-const EXCLUDED = new Set(["dsh-plus-lifeboat", "dsh-plus-bundle-main"]);
-const GUARD_RE = /^dsh-plus-[a-z0-9-]+$/;
-/** 名字是否属于可隔离的 dsh-plus 兄弟插件（entry id 与插件 name 同字面量是本仓库约定）。 */
-function isGuardedPlugin(name$1) {
-	return typeof name$1 === "string" && GUARD_RE.test(name$1) && !EXCLUDED.has(name$1);
-}
-/** 装配隔离执行器（纯逻辑，可测）。 */
-function createQuarantine(ctx, deps) {
-	const logger = ctx.logger("lifeboat");
-	const lastAlertAt = /* @__PURE__ */ new Map();
-	const inFlight = /* @__PURE__ */ new Set();
-	async function quarantine(name$1, origin) {
-		if (!isGuardedPlugin(name$1)) return;
-		if (inFlight.has(name$1)) return;
-		inFlight.add(name$1);
-		try {
-			const written = await appendDisable(deps.patchFile, name$1);
-			deps.journal("quarantine", `${name$1}（来源 ${origin}，${written ? "已写入禁用" : "已存在禁用"}）`);
-			const now = Date.now();
-			if (now - (lastAlertAt.get(name$1) ?? 0) >= deps.alertCooldownMs) {
-				lastAlertAt.set(name$1, now);
-				deps.alert(`[DSH] 插件 ${name$1} 加载失败，已自动隔离`, `检测到插件 ${name$1} 的 fiber 进入 FAILED（来源：${origin}）。\n已向 ${deps.patchFile} 写入 disabled 覆盖，重启/刷新后该插件不再加载，其余插件不受影响。\n修复后删除该条覆盖即可恢复。`);
-			}
-		} catch (error) {
-			const message = error instanceof Error ? error.message : String(error);
-			logger.warn(`隔离 ${name$1} 失败: ${message}`);
-			deps.journal("quarantine-error", `${name$1}: ${message}`);
-			deps.alert(`[DSH] 插件 ${name$1} 加载失败，自动隔离未果`, `隔离写入失败：${message}\n请手动在 patch 层禁用该插件。`);
-		} finally {
-			inFlight.delete(name$1);
-		}
-	}
-	return { quarantine };
-}
+//#region src/fallback-llm.ts
 /**
-* host 侧监听：root context 上兄弟 fiber 的 internal/status 转移。
-* fiber.name 对 loader 条目即插件 display name（模块导出的 name 字段）。
+* LLM 应急翻译：默认模型路由的 provider 无已注册 adapter 时（典型场景：llm-pi
+* 被隔离/加载失败），把 settings.yaml 里 dsh-plus-llm-pi 的 provider 配置翻译为
+* 官方 llm-pi-ai 命名空间的原生格式（键加 -fb 后缀避开 DUPLICATE_ADAPTER 冲突），
+* 默认模型指到翻译路由；源 provider 恢复健康后按 journal 自动还原。
+*
+* 为什么读原始 settings.yaml 而不是 settings 服务：插件被禁用后其命名空间随之
+* 注销，服务层读不到——但数据仍在文件里（只读，不修改）。
+* 降级语义：翻译只覆盖官方物化的字段子集，dsh-plus 扩展的全量 compat 丢弃；
+* 协议推断是启发式（显式 api > 路由名 > 模型继承源 > openai-completions 兜底）。
+* @module lifeboat/fallback-llm
 */
-function installHostWatch(ctx, q) {
-	ctx.root.on("internal/status", (fiber) => {
-		if (fiber.state !== FIBER_FAILED) return;
-		if (!isGuardedPlugin(fiber.name)) return;
-		q.quarantine(fiber.name, "host");
-	});
-}
-
-//#endregion
-//#region src/quarantine-api.ts
-const ROUTE = "/dsh-plus/lifeboat/quarantine";
-function sendJson(res, status, body) {
-	res.writeHead(status, { "content-type": "application/json; charset=utf-8" });
-	res.end(JSON.stringify(body));
-}
-function readBody(req) {
-	return new Promise((resolve, reject) => {
-		const chunks = [];
-		req.on("data", (chunk) => chunks.push(chunk));
-		req.on("end", () => resolve(Buffer.concat(chunks).toString("utf-8")));
-		req.on("error", reject);
-	});
-}
-/** 注册哨兵回报路由（webServer 缺失时由调用方保证不调用）。 */
-function registerQuarantineApi(ctx, q) {
-	const logger = ctx.logger("lifeboat");
-	ctx.webServer.register({
-		kind: "prefix",
-		path: ROUTE,
-		handler: async (req, res) => {
-			try {
-				if (req.method !== "POST") {
-					sendJson(res, 405, { error: "POST only" });
-					return;
-				}
-				const body = JSON.parse(await readBody(req));
-				if (typeof body.name !== "string") {
-					sendJson(res, 400, { error: "missing name" });
-					return;
-				}
-				q.quarantine(body.name, "client");
-				sendJson(res, 200, { ok: true });
-			} catch (error) {
-				const message = error instanceof Error ? error.message : String(error);
-				logger.warn(`quarantine api failed: ${message}`);
-				if (!res.headersSent) sendJson(res, 400, { error: message });
-				else res.end();
-			}
-		}
-	});
-}
-
-//#endregion
-//#region src/fallback-llm.ts
 const NS_PI_AI = settingsNamespace("llm-pi-ai");
 const NS_AGENT_DEFAULT = settingsNamespace("agent-default-model");
 const RAW_NS_LLM_PI = "dsh-plus-llm-pi";
-/** 翻译路由键后缀：与源路由错开，避免 llm-pi 恢复瞬间撞 DUPLICATE_ADAPTER。 */
-const FALLBACK_SUFFIX = "-fb";
 /** 官方配置路径物化的 compat 子集（其余字段降级期丢弃）。 */
 const COMPAT_WHITELIST = ["thinkingFormat", "supportsReasoningEffort"];
 /** 官方 reasoning 词表（ModelThinkingLevel 的保守子集），不在其中的值丢弃。 */
-const REASONING_LEVELS = new Set([
+const REASONING_LEVELS = /* @__PURE__ */ new Set([
 	"off",
 	"minimal",
 	"low",
@@ -278,12 +129,13 @@ function translateProvider(routeKey, raw) {
 /** 整表翻译：键加 -fb 后缀（纯函数）。 */
 function translateProviders(providers) {
 	const out = {};
-	for (const [key, raw] of Object.entries(providers)) out[`${key}${FALLBACK_SUFFIX}`] = translateProvider(key, raw);
+	for (const [key, raw] of Object.entries(providers)) out[`${key}-fb`] = translateProvider(key, raw);
 	return out;
 }
 /** 读 settings.yaml 原始文档的指定段落（只读；文件/段落缺失返回 undefined）。 */
 async function readRawSection(settingsFile, ns) {
-	const section = parseDocument(await readFile(settingsFile, "utf-8")).toJS()[ns];
+	const text = await readFile(settingsFile, "utf-8");
+	const section = parseDocument(text).toJS()[ns];
 	if (typeof section !== "object" || section === null) return void 0;
 	return section;
 }
@@ -312,7 +164,7 @@ function installLlmFallback(ctx, deps) {
 			return;
 		}
 		const translated = translateProviders(providers);
-		const fbProvider = `${provider}${FALLBACK_SUFFIX}`;
+		const fbProvider = `${provider}-fb`;
 		await writeWithRetry(() => writes.update(NS_PI_AI, { providers: translated }));
 		await writeWithRetry(() => writes.update(NS_AGENT_DEFAULT, {
 			provider: fbProvider,
@@ -356,7 +208,8 @@ function installLlmFallback(ctx, deps) {
 		await activate(def.provider, def.model);
 	}
 	const run = () => {
-		inFlight ??= evaluate().catch((error) => {
+		if (inFlight !== void 0) return;
+		inFlight = evaluate().catch((error) => {
 			const message = error instanceof Error ? error.message : String(error);
 			logger.warn(`llm fallback 评估失败: ${message}`);
 			deps.journal("llm-fallback-error", message);
@@ -367,7 +220,7 @@ function installLlmFallback(ctx, deps) {
 	const bootTimer = setTimeout(run, 1e4);
 	ctx.effect(() => () => clearTimeout(bootTimer), "lifeboat: fallback boot timer");
 	ctx.on("ready", run);
-	const WATCHED_NS = new Set([
+	const WATCHED_NS = /* @__PURE__ */ new Set([
 		"agent-default-model",
 		"llm-pi-ai",
 		RAW_NS_LLM_PI
@@ -377,13 +230,182 @@ function installLlmFallback(ctx, deps) {
 	});
 	ctx.root.on("llm/adapters-updated", run);
 }
-
+//#endregion
+//#region src/notify.ts
+/**
+* 装配告警出口。返回同步派单函数：内部异步发送，失败只记日志。
+* notify-email 出现时升级为邮件；全程 journal 兜底可溯。
+*/
+function installAlerter(ctx, journal) {
+	const logger = ctx.logger("lifeboat");
+	let mailer;
+	ctx.inject(["notifyEmail"], (mailCtx) => {
+		mailer = mailCtx.notifyEmail;
+		return () => {
+			mailer = void 0;
+		};
+	});
+	return (subject, text) => {
+		journal("alert", `${subject} | ${text}`);
+		const active = mailer;
+		if (!active?.sendNotice) {
+			logger.warn(`${subject} —— ${text}`);
+			return;
+		}
+		active.sendNotice({
+			subject,
+			text
+		}).then((result) => {
+			if (!result.ok) logger.warn(`邮件告警投递失败: ${result.detail}`);
+		}, (error) => {
+			logger.warn(`邮件告警异常: ${error instanceof Error ? error.message : String(error)}`);
+		});
+	};
+}
+//#endregion
+//#region src/patch-file.ts
+/**
+* profile 用户 patch 文件（cordis.patch.yml）的安全写入。
+* 官方预留的逃生门：用户层支持 id 定向 disabled，覆盖 bundle 层 insert。
+* 写入纪律：先备份、幂等（已禁用跳过）、原子落盘（tmp + rename），失败抛错由调用方告警，
+* 绝不写半个文件、绝不改动既有条目内容。
+* @module lifeboat/patch-file
+*/
+/** 条目（含 insert 子列表）中是否已有针对 targetId 的 disabled 覆盖。 */
+function hasDisable(entries, targetId) {
+	for (const entry of entries) {
+		if (entry.id === targetId && entry.disabled === true) return true;
+		if (Array.isArray(entry.insert) && hasDisable(entry.insert, targetId)) return true;
+	}
+	return false;
+}
+/**
+* 向 patch 文件追加一条禁用覆盖；返回是否实际写入（已存在禁用则跳过）。
+* @throws 文件不可读/顶层不是数组/落盘失败——调用方负责告警。
+*/
+async function appendDisable(patchFile, targetId) {
+	const text = await readFile(patchFile, "utf-8");
+	const doc = parseDocument(text);
+	const root = doc.toJS();
+	if (!Array.isArray(root)) throw new Error(`patch 文件顶层不是数组: ${patchFile}`);
+	if (hasDisable(root, targetId)) return false;
+	await copyFile(patchFile, `${patchFile}.lifeboat.bak`);
+	doc.add({
+		id: targetId,
+		disabled: true
+	});
+	const tmp = `${patchFile}.lifeboat.tmp`;
+	await writeFile(tmp, doc.toString(), "utf-8");
+	await rename(tmp, patchFile);
+	return true;
+}
+//#endregion
+//#region src/quarantine.ts
+/** Runtime mirror: FiberState 是 cordis 跨包 const enum（官方 dsh-host-plugin-inventory 同款做法）。 */
+const FIBER_FAILED = 3;
+/** 永不隔离的条目：救生艇自身与聚合 bundle（禁了它们等于关掉整个防线/全家）。 */
+const EXCLUDED = /* @__PURE__ */ new Set(["dsh-plus-lifeboat", "dsh-plus-bundle-main"]);
+const GUARD_RE = /^dsh-plus-[a-z0-9-]+$/;
+/** 名字是否属于可隔离的 dsh-plus 兄弟插件（entry id 与插件 name 同字面量是本仓库约定）。 */
+function isGuardedPlugin(name) {
+	return typeof name === "string" && GUARD_RE.test(name) && !EXCLUDED.has(name);
+}
+/** 告警/journal 里的失败原因摘录上限，防长堆栈淹没通知渠道。 */
+const REASON_CAP = 500;
+/** 提取 fiber 失败原因的短文本（无则空串）；cordis 把错误挂在 fiber._error。 */
+function reasonText(reason) {
+	if (reason === void 0 || reason === null) return "";
+	const text = reason instanceof Error ? reason.stack ?? reason.message : String(reason);
+	return text.length > REASON_CAP ? `${text.slice(0, REASON_CAP)}…` : text;
+}
+/** 装配隔离执行器（纯逻辑，可测）。 */
+function createQuarantine(ctx, deps) {
+	const logger = ctx.logger("lifeboat");
+	const lastAlertAt = /* @__PURE__ */ new Map();
+	const inFlight = /* @__PURE__ */ new Set();
+	async function quarantine(name, origin, reason) {
+		if (!isGuardedPlugin(name)) return;
+		if (inFlight.has(name)) return;
+		inFlight.add(name);
+		const reasonBlock = reasonText(reason);
+		const reasonSuffix = reasonBlock === "" ? "" : `\n失败原因：\n${reasonBlock}`;
+		try {
+			const written = await appendDisable(deps.patchFile, name);
+			deps.journal("quarantine", `${name}（来源 ${origin}，${written ? "已写入禁用" : "已存在禁用"}）${reasonSuffix}`);
+			const now = Date.now();
+			if (now - (lastAlertAt.get(name) ?? 0) >= deps.alertCooldownMs) {
+				lastAlertAt.set(name, now);
+				deps.alert(`[DSH] 插件 ${name} 加载失败，已自动隔离`, `检测到插件 ${name} 的 fiber 进入 FAILED（来源：${origin}）。\n已向 ${deps.patchFile} 写入 disabled 覆盖，重启/刷新后该插件不再加载，其余插件不受影响。\n修复后删除该条覆盖即可恢复。${reasonSuffix}`);
+			}
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			logger.warn(`隔离 ${name} 失败: ${message}`);
+			deps.journal("quarantine-error", `${name}: ${message}`);
+			deps.alert(`[DSH] 插件 ${name} 加载失败，自动隔离未果`, `隔离写入失败：${message}\n请手动在 patch 层禁用该插件。`);
+		} finally {
+			inFlight.delete(name);
+		}
+	}
+	return { quarantine };
+}
+/**
+* host 侧监听：root context 上兄弟 fiber 的 internal/status 转移。
+* fiber.name 对 loader 条目即插件 display name（模块导出的 name 字段）。
+*/
+function installHostWatch(ctx, q) {
+	ctx.root.on("internal/status", (fiber) => {
+		if (fiber.state !== FIBER_FAILED) return;
+		if (!isGuardedPlugin(fiber.name)) return;
+		q.quarantine(fiber.name, "host", fiber._error);
+	});
+}
+//#endregion
+//#region src/quarantine-api.ts
+const ROUTE = "/dsh-plus/lifeboat/quarantine";
+function sendJson(res, status, body) {
+	res.writeHead(status, { "content-type": "application/json; charset=utf-8" });
+	res.end(JSON.stringify(body));
+}
+function readBody(req) {
+	return new Promise((resolve, reject) => {
+		const chunks = [];
+		req.on("data", (chunk) => chunks.push(chunk));
+		req.on("end", () => resolve(Buffer.concat(chunks).toString("utf-8")));
+		req.on("error", reject);
+	});
+}
+/** 注册哨兵回报路由（webServer 缺失时由调用方保证不调用）。 */
+function registerQuarantineApi(ctx, q) {
+	const logger = ctx.logger("lifeboat");
+	ctx.webServer.register({
+		kind: "prefix",
+		path: ROUTE,
+		handler: async (req, res) => {
+			try {
+				if (req.method !== "POST") {
+					sendJson(res, 405, { error: "POST only" });
+					return;
+				}
+				const body = JSON.parse(await readBody(req));
+				if (typeof body.name !== "string") {
+					sendJson(res, 400, { error: "missing name" });
+					return;
+				}
+				q.quarantine(body.name, "client");
+				sendJson(res, 200, { ok: true });
+			} catch (error) {
+				const message = error instanceof Error ? error.message : String(error);
+				logger.warn(`quarantine api failed: ${message}`);
+				if (!res.headersSent) sendJson(res, 400, { error: message });
+				else res.end();
+			}
+		}
+	});
+}
 //#endregion
 //#region src/index.ts
 const name = "dsh-plus-lifeboat";
 const inject = ["settings", "llm"];
-/** journal 上限：只留最近 50 条，防长期运行膨胀。 */
-const JOURNAL_CAP = 50;
 function apply(ctx, config) {
 	const logger = ctx.logger("lifeboat");
 	let doc = {
@@ -405,7 +427,7 @@ function apply(ctx, config) {
 				at: (/* @__PURE__ */ new Date()).toISOString(),
 				kind,
 				detail
-			}].slice(-JOURNAL_CAP)
+			}].slice(-50)
 		};
 		persist?.({ journal: doc.journal }).catch((error) => {
 			logger.warn(`journal 持久化失败: ${error instanceof Error ? error.message : String(error)}`);
@@ -437,6 +459,5 @@ function apply(ctx, config) {
 		}
 	});
 }
-
 //#endregion
-export { Config, apply, inject, name };
+export { Config, apply, inject, name };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dsh-plus/lifeboat",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "dsh-plus service plugin: 故障救生艇——兄弟插件崩溃时自动隔离（写用户 patch 层禁用），llm-pi 缺席时把其配置临时翻译为官方 llm-pi-ai 路由，恢复后自动还原",
   "type": "module",
   "main": "lib/index.js",
@@ -38,10 +38,10 @@
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.1",
-    "@deepseek-ai/dsh-home-paths": "0.1.0-rc.8",
-    "@deepseek-ai/dsh-host-webserver": "0.1.0-rc.8",
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.8",
-    "@deepseek-ai/dsh-settings": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-home-paths": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.1-rc.2",
     "@deepseek-ai/schemastery": "3.18.1"
   },
   "publishConfig": {

package/src/config.ts

@@ -6,8 +6,9 @@
  * schema 刻意宽松：lifeboat 是最后防线，自身命名空间的数据问题绝不能让它起不来。
  * @module lifeboat/config
  */
-import z from '@deepseek-ai/schemastery'
+
 import { settingsNamespace } from '@deepseek-ai/dsh-settings'
+import z from '@deepseek-ai/schemastery'
 
 import { SETTINGS_NS as NS_LITERAL } from './ns.ts'
 
@@ -17,11 +18,16 @@ export const SETTINGS_NS = settingsNamespace(NS_LITERAL)
 /** 行级配置：全部有默认值，正常部署零配置。 */
 export const Config = z.object({
   enabled: z.boolean().description('故障隔离总开关').default(true),
-  patchFile: z.string()
-    .description('隔离写入的 profile 用户 patch 文件绝对路径；留空自动取 $DSH_HOME/profiles/web/cordis.patch.yml')
+  patchFile: z
+    .string()
+    .description(
+      '隔离写入的 profile 用户 patch 文件绝对路径；留空自动取 $DSH_HOME/profiles/web/cordis.patch.yml',
+    )
     .default(''),
-  llmFallback: z.boolean()
-    .description('llm-pi 缺席时自动翻译其配置到官方 llm-pi-ai 并切换默认模型').default(true),
+  llmFallback: z
+    .boolean()
+    .description('llm-pi 缺席时自动翻译其配置到官方 llm-pi-ai 并切换默认模型')
+    .default(true),
   alertCooldownMs: z.natural().description('同一插件重复告警的最小间隔毫秒数').default(300000),
 })
 
@@ -47,7 +53,10 @@ const FallbackState = z.object({
 /** 命名空间 schema：宽松承载 journal 与翻译状态，上限截断防膨胀。 */
 export const JournalSchema = z.object({
   journal: z.array(JournalEntry).description('救生艇操作日志（最新在尾，封顶 50 条）').default([]),
-  llmFallback: z.union([FallbackState, z.const(null)]).description('LLM 应急翻译状态；null 表示未处于降级').default(null),
+  llmFallback: z
+    .union([FallbackState, z.const(null)])
+    .description('LLM 应急翻译状态；null 表示未处于降级')
+    .default(null),
 })
 
 export type JournalDoc = Schemastery.TypeT<typeof JournalSchema>

package/src/fallback-llm.ts

@@ -15,7 +15,11 @@ import { readFile } from 'node:fs/promises'
 import type { Context } from '@deepseek-ai/cordis'
 import { dshHomePath } from '@deepseek-ai/dsh-home-paths'
 import type {} from '@deepseek-ai/dsh-llm'
-import { SettingsConflictError, settingsNamespace, type SettingsProvider } from '@deepseek-ai/dsh-settings'
+import {
+  SettingsConflictError,
+  type SettingsProvider,
+  settingsNamespace,
+} from '@deepseek-ai/dsh-settings'
 import { parseDocument } from 'yaml'
 
 import type { FallbackStateT } from './config.ts'
@@ -100,7 +104,8 @@ export function inferApi(routeKey: string, provider: RawProvider): string {
   if (routeHint !== undefined) return routeHint
   const firstExtends = provider.models?.find((m) => typeof m.extends === 'string')?.extends
   const source = firstExtends?.split('/')[0]
-  if (source !== undefined && EXTENDS_PROTOCOL[source] !== undefined) return EXTENDS_PROTOCOL[source]
+  if (source !== undefined && EXTENDS_PROTOCOL[source] !== undefined)
+    return EXTENDS_PROTOCOL[source]
   return 'openai-completions'
 }
 
@@ -113,9 +118,11 @@ export function translateProvider(routeKey: string, raw: RawProvider): Translate
   if (raw.apiKeyEnv !== undefined) out.apiKeyEnv = raw.apiKeyEnv
   if (raw.baseURL !== undefined) out.baseURL = raw.baseURL
   if (raw.headers !== undefined) out.headers = raw.headers
-  if (raw.reasoning !== undefined && REASONING_LEVELS.has(raw.reasoning)) out.reasoning = raw.reasoning
+  if (raw.reasoning !== undefined && REASONING_LEVELS.has(raw.reasoning))
+    out.reasoning = raw.reasoning
   if (raw.thinkingBudgets !== undefined) out.thinkingBudgets = raw.thinkingBudgets
-  if (Array.isArray(raw.defaultInput) && raw.defaultInput.length > 0) out.defaultInput = raw.defaultInput
+  if (Array.isArray(raw.defaultInput) && raw.defaultInput.length > 0)
+    out.defaultInput = raw.defaultInput
   if (raw.compat !== undefined) {
     const compat: Record<string, unknown> = {}
     for (const key of COMPAT_WHITELIST) {
@@ -137,7 +144,9 @@ export function translateProvider(routeKey: string, raw: RawProvider): Translate
 }
 
 /** 整表翻译：键加 -fb 后缀（纯函数）。 */
-export function translateProviders(providers: Record<string, RawProvider>): Record<string, TranslatedProvider> {
+export function translateProviders(
+  providers: Record<string, RawProvider>,
+): Record<string, TranslatedProvider> {
   const out: Record<string, TranslatedProvider> = {}
   for (const [key, raw] of Object.entries(providers)) {
     out[`${key}${FALLBACK_SUFFIX}`] = translateProvider(key, raw)
@@ -146,7 +155,10 @@ export function translateProviders(providers: Record<string, RawProvider>): Reco
 }
 
 /** 读 settings.yaml 原始文档的指定段落（只读；文件/段落缺失返回 undefined）。 */
-export async function readRawSection(settingsFile: string, ns: string): Promise<Record<string, unknown> | undefined> {
+export async function readRawSection(
+  settingsFile: string,
+  ns: string,
+): Promise<Record<string, unknown> | undefined> {
   const text = await readFile(settingsFile, 'utf-8')
   const doc = parseDocument(text).toJS() as Record<string, unknown>
   const section = doc[ns]
@@ -156,7 +168,14 @@ export async function readRawSection(settingsFile: string, ns: string): Promise<
 
 interface SettingsWrite {
   update(ns: ReturnType<typeof settingsNamespace>, patch: object): Promise<void>
-  mutate(ns: ReturnType<typeof settingsNamespace>, ops: readonly { op: 'set' | 'unset'; path: readonly string[]; value?: unknown }[]): Promise<void>
+  mutate(
+    ns: ReturnType<typeof settingsNamespace>,
+    ops: readonly {
+      op: 'set' | 'unset'
+      path: readonly string[]
+      value?: unknown
+    }[],
+  ): Promise<void>
 }
 
 /** 写 settings 带一次冲突重试（用户同时改配置时不抢，放弃并告警）。
@@ -168,7 +187,9 @@ async function writeWithRetry(write: () => Promise<void>): Promise<void> {
   } catch (error) {
     const conflict =
       error instanceof SettingsConflictError ||
-      (typeof error === 'object' && error !== null && (error as { code?: unknown }).code === 'SETTINGS_CONFLICT')
+      (typeof error === 'object' &&
+        error !== null &&
+        (error as { code?: unknown }).code === 'SETTINGS_CONFLICT')
     if (!conflict) throw error
     await write()
   }
@@ -190,8 +211,7 @@ export function installLlmFallback(ctx: Context, deps: FallbackDeps): void {
   const settingsFile = dshHomePath('settings.yaml')
   let inFlight: Promise<void> | undefined
 
-  const listProviderIds = (): Set<string> =>
-    new Set(ctx.llm.listProviders().map((p) => p.id))
+  const listProviderIds = (): Set<string> => new Set(ctx.llm.listProviders().map((p) => p.id))
 
   async function activate(provider: string, model: string): Promise<void> {
     const section = await readRawSection(settingsFile, RAW_NS_LLM_PI).catch(() => undefined)
@@ -215,7 +235,10 @@ export function installLlmFallback(ctx: Context, deps: FallbackDeps): void {
       providers: Object.keys(translated),
       at: new Date().toISOString(),
     })
-    deps.journal('llm-fallback', `默认模型切换到 ${fbProvider}/${model}（翻译 ${Object.keys(translated).length} 个 provider）`)
+    deps.journal(
+      'llm-fallback',
+      `默认模型切换到 ${fbProvider}/${model}（翻译 ${Object.keys(translated).length} 个 provider）`,
+    )
     deps.alert(
       '[DSH] LLM 配置已应急翻译',
       `默认模型的 provider "${provider}" 不可用（llm-pi 缺席？），已把 ${RAW_NS_LLM_PI} 配置翻译为官方 llm-pi-ai 路由（-fb 后缀）并切换默认模型为 ${fbProvider}/${model}。源插件恢复后将自动还原。`,
@@ -223,13 +246,22 @@ export function installLlmFallback(ctx: Context, deps: FallbackDeps): void {
   }
 
   async function revert(state: FallbackStateT): Promise<void> {
-    const ops = state.providers.map((key) => ({ op: 'unset' as const, path: ['providers', key] }))
+    const ops = state.providers.map((key) => ({
+      op: 'unset' as const,
+      path: ['providers', key],
+    }))
     await writeWithRetry(() => writes.mutate(NS_PI_AI, ops))
     await writeWithRetry(() =>
-      writes.update(NS_AGENT_DEFAULT, { provider: state.originalProvider, model: state.originalModel }),
+      writes.update(NS_AGENT_DEFAULT, {
+        provider: state.originalProvider,
+        model: state.originalModel,
+      }),
     )
     await deps.writeState(null)
-    deps.journal('llm-fallback-revert', `默认模型还原为 ${state.originalProvider}/${state.originalModel}`)
+    deps.journal(
+      'llm-fallback-revert',
+      `默认模型还原为 ${state.originalProvider}/${state.originalModel}`,
+    )
     deps.alert(
       '[DSH] LLM 应急翻译已还原',
       `provider "${state.originalProvider}" 恢复健康，默认模型已还原，临时翻译路由已清除。`,
@@ -243,14 +275,17 @@ export function installLlmFallback(ctx: Context, deps: FallbackDeps): void {
       if (ids.has(state.originalProvider)) await revert(state)
       return
     }
-    const def = ctx.settings.get(NS_AGENT_DEFAULT) as { provider?: string; model?: string } | undefined
+    const def = ctx.settings.get(NS_AGENT_DEFAULT) as
+      | { provider?: string; model?: string }
+      | undefined
     if (def?.provider === undefined || def.model === undefined) return
     if (ids.has(def.provider)) return
     await activate(def.provider, def.model)
   }
 
   const run = (): void => {
-    inFlight ??= evaluate()
+    if (inFlight !== undefined) return
+    inFlight = evaluate()
       .catch((error: unknown) => {
         const message = error instanceof Error ? error.message : String(error)
         logger.warn(`llm fallback 评估失败: ${message}`)
@@ -264,10 +299,7 @@ export function installLlmFallback(ctx: Context, deps: FallbackDeps): void {
   // 首次评估延迟到启动收尾：lifeboat 首位加载时兄弟插件的 adapter 尚未注册，
   // 立刻评估会把"还没加载"误判为"缺席"。事件订阅覆盖后续变化。
   const bootTimer = setTimeout(run, 10_000)
-  ctx.effect(
-    () => () => clearTimeout(bootTimer),
-    'lifeboat: fallback boot timer',
-  )
+  ctx.effect(() => () => clearTimeout(bootTimer), 'lifeboat: fallback boot timer')
   ctx.on('ready' as never, run)
   // 只响应与本判定相关的命名空间变化：journal 写自身命名空间，不过滤会自触发循环。
   const WATCHED_NS = new Set(['agent-default-model', 'llm-pi-ai', RAW_NS_LLM_PI])

package/src/index.ts

@@ -15,11 +15,18 @@
 import type { Context } from '@deepseek-ai/cordis'
 import { dshHomePath } from '@deepseek-ai/dsh-home-paths'
 
-import { Config, JournalSchema, SETTINGS_NS, type FallbackStateT, type JournalDoc, type LifeboatConfig } from './config.ts'
+import {
+  Config,
+  type FallbackStateT,
+  type JournalDoc,
+  JournalSchema,
+  type LifeboatConfig,
+  SETTINGS_NS,
+} from './config.ts'
+import { installLlmFallback } from './fallback-llm.ts'
 import { installAlerter } from './notify.ts'
 import { createQuarantine, installHostWatch } from './quarantine.ts'
 import { registerQuarantineApi } from './quarantine-api.ts'
-import { installLlmFallback } from './fallback-llm.ts'
 
 export const name = 'dsh-plus-lifeboat'
 
@@ -42,11 +49,16 @@ export function apply(ctx: Context, config: LifeboatConfig): void {
     doc = scope.get()
     persist = (patch) => scope.update(patch)
   } catch (error) {
-    logger.warn(`journal 命名空间注册失败，降级为内存态: ${error instanceof Error ? error.message : String(error)}`)
+    logger.warn(
+      `journal 命名空间注册失败，降级为内存态: ${error instanceof Error ? error.message : String(error)}`,
+    )
   }
 
   const journal = (kind: string, detail: string): void => {
-    doc = { ...doc, journal: [...doc.journal, { at: new Date().toISOString(), kind, detail }].slice(-JOURNAL_CAP) }
+    doc = {
+      ...doc,
+      journal: [...doc.journal, { at: new Date().toISOString(), kind, detail }].slice(-JOURNAL_CAP),
+    }
     void persist?.({ journal: doc.journal }).catch((error: unknown) => {
       logger.warn(`journal 持久化失败: ${error instanceof Error ? error.message : String(error)}`)
     })
@@ -55,9 +67,10 @@ export function apply(ctx: Context, config: LifeboatConfig): void {
   const alert = installAlerter(ctx, journal)
 
   if (config.enabled) {
-    const patchFile = config.patchFile.length > 0
-      ? config.patchFile
-      : dshHomePath('profiles', 'web', 'cordis.patch.yml')
+    const patchFile =
+      config.patchFile.length > 0
+        ? config.patchFile
+        : dshHomePath('profiles', 'web', 'cordis.patch.yml')
     const quarantine = createQuarantine(ctx, {
       patchFile,
       alertCooldownMs: config.alertCooldownMs,

package/src/notify.ts

@@ -16,7 +16,10 @@ export type Alerter = (subject: string, text: string) => void
  * 装配告警出口。返回同步派单函数：内部异步发送，失败只记日志。
  * notify-email 出现时升级为邮件；全程 journal 兜底可溯。
  */
-export function installAlerter(ctx: Context, journal: (kind: string, detail: string) => void): Alerter {
+export function installAlerter(
+  ctx: Context,
+  journal: (kind: string, detail: string) => void,
+): Alerter {
   const logger: Logger = ctx.logger('lifeboat')
   let mailer: NotifyEmailLike | undefined
   ctx.inject(['notifyEmail' as never], (mailCtx) => {
@@ -32,10 +35,13 @@ export function installAlerter(ctx: Context, journal: (kind: string, detail: str
       logger.warn(`${subject} —— ${text}`)
       return
     }
-    void active.sendNotice({ subject, text }).then((result) => {
-      if (!result.ok) logger.warn(`邮件告警投递失败: ${result.detail}`)
-    }, (error: unknown) => {
-      logger.warn(`邮件告警异常: ${error instanceof Error ? error.message : String(error)}`)
-    })
+    void active.sendNotice({ subject, text }).then(
+      (result) => {
+        if (!result.ok) logger.warn(`邮件告警投递失败: ${result.detail}`)
+      },
+      (error: unknown) => {
+        logger.warn(`邮件告警异常: ${error instanceof Error ? error.message : String(error)}`)
+      },
+    )
   }
 }

package/src/quarantine.ts

@@ -31,7 +31,17 @@ export interface QuarantineDeps {
 
 export interface Quarantine {
   /** 隔离指定插件（幂等；冷却期内重复触发只计 journal 不写文件）。 */
-  quarantine(name: string, origin: 'host' | 'client'): Promise<void>
+  quarantine(name: string, origin: 'host' | 'client', reason?: unknown): Promise<void>
+}
+
+/** 告警/journal 里的失败原因摘录上限，防长堆栈淹没通知渠道。 */
+const REASON_CAP = 500
+
+/** 提取 fiber 失败原因的短文本（无则空串）；cordis 把错误挂在 fiber._error。 */
+function reasonText(reason: unknown): string {
+  if (reason === undefined || reason === null) return ''
+  const text = reason instanceof Error ? (reason.stack ?? reason.message) : String(reason)
+  return text.length > REASON_CAP ? `${text.slice(0, REASON_CAP)}…` : text
 }
 
 /** 装配隔离执行器（纯逻辑，可测）。 */
@@ -40,13 +50,22 @@ export function createQuarantine(ctx: Context, deps: QuarantineDeps): Quarantine
   const lastAlertAt = new Map<string, number>()
   const inFlight = new Set<string>()
 
-  async function quarantine(name: string, origin: 'host' | 'client'): Promise<void> {
+  async function quarantine(
+    name: string,
+    origin: 'host' | 'client',
+    reason?: unknown,
+  ): Promise<void> {
     if (!isGuardedPlugin(name)) return
     if (inFlight.has(name)) return
     inFlight.add(name)
+    const reasonBlock = reasonText(reason)
+    const reasonSuffix = reasonBlock === '' ? '' : `\n失败原因：\n${reasonBlock}`
     try {
       const written = await appendDisable(deps.patchFile, name)
-      deps.journal('quarantine', `${name}（来源 ${origin}，${written ? '已写入禁用' : '已存在禁用'}）`)
+      deps.journal(
+        'quarantine',
+        `${name}（来源 ${origin}，${written ? '已写入禁用' : '已存在禁用'}）${reasonSuffix}`,
+      )
       const now = Date.now()
       const last = lastAlertAt.get(name) ?? 0
       if (now - last >= deps.alertCooldownMs) {
@@ -55,14 +74,17 @@ export function createQuarantine(ctx: Context, deps: QuarantineDeps): Quarantine
           `[DSH] 插件 ${name} 加载失败，已自动隔离`,
           `检测到插件 ${name} 的 fiber 进入 FAILED（来源：${origin}）。\n` +
             `已向 ${deps.patchFile} 写入 disabled 覆盖，重启/刷新后该插件不再加载，其余插件不受影响。\n` +
-            `修复后删除该条覆盖即可恢复。`,
+            `修复后删除该条覆盖即可恢复。${reasonSuffix}`,
         )
       }
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error)
       logger.warn(`隔离 ${name} 失败: ${message}`)
       deps.journal('quarantine-error', `${name}: ${message}`)
-      deps.alert(`[DSH] 插件 ${name} 加载失败，自动隔离未果`, `隔离写入失败：${message}\n请手动在 patch 层禁用该插件。`)
+      deps.alert(
+        `[DSH] 插件 ${name} 加载失败，自动隔离未果`,
+        `隔离写入失败：${message}\n请手动在 patch 层禁用该插件。`,
+      )
     } finally {
       inFlight.delete(name)
     }
@@ -76,9 +98,9 @@ export function createQuarantine(ctx: Context, deps: QuarantineDeps): Quarantine
  * fiber.name 对 loader 条目即插件 display name（模块导出的 name 字段）。
  */
 export function installHostWatch(ctx: Context, q: Quarantine): void {
-  ctx.root.on('internal/status', (fiber: { state: number; name: string }) => {
+  ctx.root.on('internal/status', (fiber: { state: number; name: string; _error?: unknown }) => {
     if (fiber.state !== FIBER_FAILED) return
     if (!isGuardedPlugin(fiber.name)) return
-    void q.quarantine(fiber.name, 'host')
+    void q.quarantine(fiber.name, 'host', fiber._error)
   })
 }