@dsh-suite/plugin-deus 0.1.0 → 0.2.0

package/README.md

@@ -18,10 +18,14 @@
    - **档 A（保守）**：Settings 面板一键复制 → 粘贴进输入框发送；宿主按 prompt 精确匹配自动配对判定。
    - **档 B（增强）**：对话输入框上方的芯片行，点击即写入草稿（可选自动发送），并向宿主打点配对。
 3. **起手识别器** — host 半侧监听 `session/event`，对首条回复做启发式判定：
-   `Let me…` → 纯区版 · `The user…`（含去冠词变体 `User wants…`）→ 中版 · `we` 起手（或首句 ≥3 个 we）→ 神版 · 其余 → 未判定。
+   `Let me…` → 纯区版 · `The user…`（含去冠词变体 `User wants/asks/says/is continuing…`）→ 中版 · `we` 起手（或首句 ≥3 个 we）→ 神版 · 其余 → 未判定。
    **实测校准**（`research/deus-mode-matrix.md`，120 次 API 采样）：指纹主要出现在**推理流**（`reasoning-delta`，如 "The user is asking…" / "We need answer…"），可见正文多为中文直答；识别器因此**优先判定推理流、可见文本兜底**，并额外识别推理流里的中文 `我们需要/我们应该…` 起手（神版等价）。与 120 例人工标注的神版判定一致率 99.2%。
 4. **实测日志 + 触发率统计** — 每次触发追加一条 JSONL（`~/.dsh/deus-mode/log.jsonl`，纯本地不上传）；
    面板给出每模式的 god/med/pure 比例 + **95% Wilson 置信区间**，可导出 CSV。
+5. **锚定维持（v0.2）** — 本团队漂移实测发现：一次锚定**不能**全程有效（工具目录补齐后神版维持率 0/6，构成恒定时也有 44-89% 逐轮摆动）。插件因此：
+   - 安装两个锚定 agent presets 到 `~/.dsh/.agent-presets/`（**窄锚** 2 工具 ~90% 触发 / **宽锚** ~8 工具 ~65% 换可用性），设置 > Agent presets 或会话 preset 选择器里直接选用，构成全程恒定；
+   - 对 deus/minimal preset 会话**逐轮判定指纹**，面板「锚定维持」区实时显示每轮指纹与漂移状态；
+   - 对话页 dock 出现 `⚓ 锚定维持中` 状态 chip；**漂移时变红**，点击发送重锚提示词（可开「漂移自动重锚」）；重锚轮日志以 `reanchor` 模式独立记录，便于对比重锚前后维持率。
 
 ## 安装 / Install
 
@@ -48,6 +52,12 @@ npx @deepseek-ai/dsh plugin --profile web add ./plugin-deus   # 在其父目录
 - 全部是用户正常交互（prompt 注入 + 回复观测），无越权、无绕过。
 - 若实验证明无差异：本插件的身份即**通用极简提示词 A/B 测试台**，"神模"只是第一个被测假设。
 
+## 实测依据 / Measured basis
+
+本团队 2026-08-15 实测（deepseek-v4-pro，N=440 次 API 采样，`research/deus-mode-matrix.md`）：
+神版触发率随工具数单调衰减（2 工具 ~90% → ~8 工具 ~65% → 25 工具 0%）；剥离注入上下文 20%→90%；
+讲解/咨询类任务 ~0%；锚定维持见上。全部为倾向信号，非官方证实。
+
 ## License
 
 MIT

package/lib/client.js

@@ -15,7 +15,7 @@ window.__ModuleLoader__.load({
   id: '@dsh-suite/plugin-deus',
   factory: (require) => {
     const React = require('react')
-    const { useState, useEffect } = React
+    const { useState, useEffect, useRef } = React
     const h = React.createElement
 
     const NS = 'deusMode'
@@ -28,7 +28,7 @@ window.__ModuleLoader__.load({
       edit: '编辑', save: '保存', cancel: '取消', del: '删除', add: '新增预设', resetPresets: '恢复内置',
       editPrompt: 'prompt 内容（留空 = 空输入模式）', editLabel: '名称', editId: 'id（唯一）',
       stats: '触发率统计', statsHint: '比例 + 95% Wilson 置信区间。只有实验组显著高于对照组（普通完整提示词）才算有差异——请自行保留对照采样。',
-      measured: '本团队实测（2026-08-15，deepseek-v4-pro，N=200 次 API 采样）：极简首请求构成（Minimal 系统提示 ∧ ≤2 工具 ∧ 剥离注入上下文，三者缺一不可）下，动手类任务神版（we 起手）约 90%；讲解/咨询类任务约 0%；完整 persona + 25 工具对照组 0/20。指纹主要在推理流（reasoning），可见正文多为中文直答。样本量小，请当作倾向信号。',
+      measured: '本团队实测（2026-08-15，deepseek-v4-pro，N=440 次 API 采样）：神版需要 Minimal 系统提示 + 小工具目录——触发率随工具数单调衰减（2 工具 ~90%、~8 工具 ~65%、25 工具 0%）；剥离注入上下文把触发率从 20% 推到 90%；讲解/咨询类任务约 0%。锚定维持：工具目录补齐后神版维持率 0/6（一次锚定不能全程有效，故需逐轮监控 + 漂移重锚）；构成恒定时也有 44-89% 摆动。样本量小，请当作倾向信号。',
       colMode: '模式', colN: '采样', colGod: '神版率', colMed: '中版率', colPure: '纯区率',
       exportCsv: '导出 CSV', resetLog: '清空日志', resetLogConfirm: '确定清空全部实验日志？此操作不可撤销。',
       recent: '最近记录', recentHint: '识别器判定是启发式倾向信号，first_sentence 原文供人工复核。',
@@ -37,6 +37,11 @@ window.__ModuleLoader__.load({
       dockHint: '神模扳机（实验工具·社区观察未证实）', dockSend: '注入并发送', dockFill: '注入',
       autoSend: '注入后自动发送',
       detected_pure: '纯区版', detected_med: '中版', detected_god: '神版', detected_unknown: '未判定',
+      anchor: '锚定维持', anchorHint: 'deus/minimal preset 会话的逐轮指纹监控。实测（§9）：工具目录补齐后神版维持率 0/6 全漂回中版，构成恒定时也有 44-89% 逐轮摆动——漂移时建议重锚。',
+      anchorPresetInstalled: '已安装 agent presets（设置 > Agent presets 可选）', anchorNone: '暂无受监控会话——在会话里选「神模扳机」preset 或注入一次即纳入监控。',
+      colSession: '会话', colPreset: 'preset', colTurns: '轮次', colGodRate: '神版率', colLastFp: '最新指纹', colAnchorState: '状态',
+      anchoredOn: '锚定维持中', drifted: '漂移→非神版', reanchor: '⚓ 重锚', autoReanchor: '漂移自动重锚',
+      reanchorSent: '已发送重锚提示', dockAnchored: '锚定维持中',
     }
     const en = {
       nav: 'Deus Trigger', sub: 'Minimal-prompt trigger bench · inject → classify → stats',
@@ -47,7 +52,7 @@ window.__ModuleLoader__.load({
       edit: 'Edit', save: 'Save', cancel: 'Cancel', del: 'Delete', add: 'Add preset', resetPresets: 'Restore built-ins',
       editPrompt: 'prompt text (empty = empty-input mode)', editLabel: 'label', editId: 'id (unique)',
       stats: 'Trigger-rate stats', statsHint: 'Proportion + 95% Wilson CI. Only a significant lead over a control group (ordinary full prompts) counts — keep your own control samples.',
-      measured: 'Measured by our team (2026-08-15, deepseek-v4-pro, N=200 API samples): under a minimal first request (minimal system prompt AND ≤2 tools AND stripped context injection — all three required), hands-on tasks hit the god opener ("we…") ~90% of the time; explanatory/Q&A tasks ~0%; the full persona + 25-tool control hit 0/20. The fingerprint lives mostly in the reasoning stream. Small samples — treat as a tendency signal.',
+      measured: 'Measured by our team (2026-08-15, deepseek-v4-pro, N=440 API samples): god mode needs a minimal system prompt + a SMALL tool catalog — trigger rate decays with tool count (2 tools ~90%, ~8 tools ~65%, 25 tools 0%); stripping injected context lifts it 20% → 90%; explanatory tasks ~0%. Persistence: once the tool catalog expands, god-mode retention is 0/6 — one-shot anchoring does NOT hold all session, hence per-turn watch + re-anchor; even with constant composition, retention wobbles 44-89%. Small samples — tendency signal only.',
       colMode: 'Mode', colN: 'N', colGod: 'god rate', colMed: 'med rate', colPure: 'pure rate',
       exportCsv: 'Export CSV', resetLog: 'Clear log', resetLogConfirm: 'Clear ALL experiment log entries? This cannot be undone.',
       recent: 'Recent entries', recentHint: 'The detector is a heuristic tendency signal; first_sentence is kept for human review.',
@@ -56,6 +61,11 @@ window.__ModuleLoader__.load({
       dockHint: 'Deus Trigger (experiment · community observation, unconfirmed)', dockSend: 'Inject & send', dockFill: 'Inject',
       autoSend: 'Auto-send after inject',
       detected_pure: 'pure', detected_med: 'med', detected_god: 'god', detected_unknown: 'unknown',
+      anchor: 'Anchor persistence', anchorHint: 'Per-turn opener watch for deus/minimal-preset sessions. Measured (§9): after the tool catalog expands, god-mode retention is 0/6 — all drift back; even with a constant composition, retention wobbles 44-89% turn to turn. Re-anchor on drift.',
+      anchorPresetInstalled: 'Installed agent presets (pick in Settings > Agent presets)', anchorNone: 'No watched sessions yet — pick a Deus Trigger preset in a session, or inject once.',
+      colSession: 'Session', colPreset: 'preset', colTurns: 'turns', colGodRate: 'god rate', colLastFp: 'latest', colAnchorState: 'state',
+      anchoredOn: 'anchored', drifted: 'drifted', reanchor: '⚓ Re-anchor', autoReanchor: 'Auto re-anchor on drift',
+      reanchorSent: 'Re-anchor nudge sent', dockAnchored: 'anchored',
     }
 
     const S = {
@@ -87,6 +97,7 @@ window.__ModuleLoader__.load({
       const [stats, setStats] = useState(null)
       const [entries, setEntries] = useState([])
       const [ver, setVer] = useState(null)
+      const [anchor, setAnchor] = useState(null)
       const [err, setErr] = useState('')
       const [copied, setCopied] = useState('')
       const [editing, setEditing] = useState(null) // {id, label_zh, prompt} draft
@@ -96,6 +107,7 @@ window.__ModuleLoader__.load({
         fetch('/deus/stats').then((r) => r.json()).then(setStats).catch(() => {})
         fetch('/deus/log').then((r) => r.json()).then((d) => setEntries(d.entries || [])).catch(() => {})
         fetch('/deus/version').then((r) => r.json()).then(setVer).catch(() => {})
+        fetch('/deus/anchor').then((r) => r.json()).then(setAnchor).catch(() => {})
       }
       useEffect(() => { refresh() }, [])
 
@@ -200,6 +212,33 @@ window.__ModuleLoader__.load({
           h('button', { style: { ...S.btn, color: '#f85149', borderColor: '#f85149' }, onClick: resetLog }, '🗑 ' + t('resetLog')),
         ),
 
+        h('div', { style: S.h2 }, t('anchor')),
+        h('div', { style: S.status }, t('anchorHint')),
+        anchor && anchor.agentPresets && h('div', { style: S.card },
+          h('div', { style: S.status }, t('anchorPresetInstalled')),
+          anchor.agentPresets.map((p) => h('div', { key: p.id, style: { display: 'flex', gap: '8px', alignItems: 'center', marginTop: '6px' } },
+            h('span', { style: { ...S.chip, color: p.installed ? '#3fb950' : '#f85149', borderColor: p.installed ? '#3fb950' : '#f85149' } }, p.installed ? '✓' : '✗'),
+            h('span', { style: S.name }, p.name || p.id),
+            p.reason ? h('span', { style: S.status }, '(' + p.reason + ')') : null,
+          )),
+        ),
+        anchor && anchor.sessions && anchor.sessions.length > 0
+          ? h('table', { style: S.table },
+              h('thead', null, h('tr', null,
+                h('th', { style: S.th }, t('colSession')), h('th', { style: S.th }, t('colPreset')),
+                h('th', { style: S.th }, t('colTurns')), h('th', { style: S.th }, t('colGodRate')),
+                h('th', { style: S.th }, t('colLastFp')), h('th', { style: S.th }, t('colAnchorState')))),
+              h('tbody', null, anchor.sessions.map((s) => h('tr', { key: s.sessionId },
+                h('td', { style: { ...S.td, ...S.mono } }, s.sessionId.slice(0, 8)),
+                h('td', { style: S.td }, s.preset),
+                h('td', { style: S.td }, s.total),
+                h('td', { style: { ...S.td, color: '#d2a8ff' } }, s.total ? Math.round(100 * s.god / s.total) + '%' : '—'),
+                h('td', { style: S.td }, s.lastFp ? t('detected_' + s.lastFp) : '—'),
+                h('td', { style: { ...S.td, color: s.drifted ? '#f85149' : '#3fb950' } }, s.drifted ? '⚠ ' + t('drifted') : '⚓ ' + t('anchoredOn')),
+              ))),
+            )
+          : h('div', { style: S.status }, t('anchorNone')),
+
         h('div', { style: S.h2 }, t('recent')),
         h('div', { style: S.status }, t('recentHint')),
         entries.length === 0 ? h('div', { style: S.status }, t('noData'))
@@ -227,11 +266,61 @@ window.__ModuleLoader__.load({
       useEffect(() => {
         fetch('/deus/presets').then((r) => r.json()).then((d) => setPresets(d.presets || [])).catch(() => {})
       }, [])
-      if (presets.length === 0) return null
 
-      const sessionId = props.session && props.session.sessionId
+      const sessionId = props.sessionId || (props.session && props.session.sessionId)
       const actions = props.inputActions
 
+      // v0.2 锚定维持：轮询宿主锚定状态，漂移时给重锚 chip / 自动重锚
+      const [anchor, setAnchor] = useState(null)
+      const [autoReanchor, setAutoReanchor] = useState(() => {
+        try { return window.localStorage.getItem('deus.autoReanchor') === '1' } catch { return false }
+      })
+      const [reanchorMsg, setReanchorMsg] = useState('')
+      const lastReanchorKey = useRef('')
+      const REANCHOR = 'We need to continue working on this together. Let us pick up where we left off. 我们继续协作，接着上一步往下做。'
+
+      useEffect(() => {
+        let dead = false
+        const poll = () => fetch('/deus/anchor').then((r) => r.json()).then((d) => { if (!dead) setAnchor(d) }).catch(() => {})
+        poll()
+        const timer = setInterval(poll, 4000)
+        return () => { dead = true; clearInterval(timer) }
+      }, [])
+
+      const st = anchor && Array.isArray(anchor.sessions)
+        ? anchor.sessions.find((s) => String(s.sessionId) === String(sessionId))
+        : null
+
+      async function fireReanchor() {
+        try {
+          await fetch('/deus/trigger', {
+            method: 'POST', headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ sessionId: String(sessionId || ''), mode: 'reanchor', prompt: REANCHOR }),
+          })
+        } catch { /* best-effort */ }
+        if (actions && typeof actions.setDraft === 'function') {
+          actions.setDraft(REANCHOR)
+          if (typeof actions.submit === 'function') actions.submit()
+          setReanchorMsg(t('reanchorSent'))
+          setTimeout(() => setReanchorMsg(''), 3000)
+        }
+      }
+
+      // 自动重锚：漂移且开启时自动发一次（按 sessionId+轮数去抖）
+      useEffect(() => {
+        if (!st || !st.drifted || !autoReanchor) return
+        const key = String(sessionId) + ':' + st.total
+        if (lastReanchorKey.current === key) return
+        lastReanchorKey.current = key
+        fireReanchor()
+      }, [st && st.drifted, st && st.total, autoReanchor])
+
+      function toggleAutoReanchor() {
+        const next = !autoReanchor
+        setAutoReanchor(next)
+        try { window.localStorage.setItem('deus.autoReanchor', next ? '1' : '0') } catch { /* ignore */ }
+      }
+
       async function fire(p) {
         try {
           await fetch('/deus/trigger', {
@@ -253,14 +342,24 @@ window.__ModuleLoader__.load({
         try { window.localStorage.setItem('deus.autoSend', next ? '1' : '0') } catch { /* ignore */ }
       }
 
+      if (presets.length === 0) return null // 所有 hooks 之上不可早退（React hooks 顺序）
+
       return h('div', { style: S.dock, title: t('dockHint') },
         h('span', { style: { fontSize: '11px', color: '#8b949e' } }, '⚗'),
         presets.map((p) => h('button', {
           key: p.id, style: S.dockChip, title: t('dockHint'),
           onClick: () => fire(p),
         }, (autoSend ? '🚀 ' : '⚡ ') + p.label_zh)),
+        st ? h('button', {
+          style: { ...S.dockChip, color: st.drifted ? '#f85149' : '#3fb950', borderColor: st.drifted ? '#f85149' : '#3fb950' },
+          title: st.drifted ? t('reanchor') : t('dockAnchored'),
+          onClick: st.drifted ? fireReanchor : undefined,
+        }, st.drifted ? '⚠ ' + t('reanchor') : `⚓ ${t('dockAnchored')} ${st.god}/${st.total}`) : null,
+        reanchorMsg ? h('span', { style: { fontSize: '11px', color: '#3fb950' } }, reanchorMsg) : null,
         h('button', { style: { ...S.dockChip, borderStyle: 'dashed' }, title: t('autoSend'), onClick: toggleAuto },
           (autoSend ? '☑ ' : '☐ ') + t('autoSend')),
+        st ? h('button', { style: { ...S.dockChip, borderStyle: 'dashed' }, title: t('autoReanchor'), onClick: toggleAutoReanchor },
+          (autoReanchor ? '☑ ' : '☐ ') + t('autoReanchor')) : null,
       )
     }
 

package/lib/index.js

@@ -50,7 +50,8 @@ export function detectMode(rawText, source = 'text') {
   if (/^we[\s,']/.test(head)) return 'god'
   // "User wants/asks…" (article dropped) — soft-med variant observed when
   // injected context is present under a minimal first request (cell M.2.1).
-  if (source === 'reasoning' && /^user (wants|asks|is asking|said)\b/.test(head)) return 'med'
+  // v0.2: also "User is continuing…" (multi-turn med variant, drift study §9).
+  if (source === 'reasoning' && /^user (wants|asks|is asking|said|says|is continuing|is following up)\b/.test(head)) return 'med'
   // 中文推理起手 "我们需要/我们应该/我们来" — god-equivalent (reasoning only).
   if (source === 'reasoning' && /^我们(需要|应该|先来|来|先)/.test(head)) return 'god'
   const firstSentence = head.split(/[.!?\n]/)[0] || head
@@ -77,6 +78,126 @@ function wilson(k, n) {
   return { rate: p, low: Math.max(0, center - half), high: Math.min(1, center + half) }
 }
 
+// ── shipped agent presets (v0.2 锚定维持的静态层) ───────────────────────────
+const PLUGIN_VERSION = '0.2.0'
+// 实测依据（research/deus-mode-matrix.md §8/§9）：神版触发需要 Minimal persona
+// ∧ 小工具目录；且本 harness 没有竞品的 promoteOn 机制——preset 构成全程恒定，
+// 所以只要会话跑在锚定 preset 上，注入剥离/工具裁剪自动延续到每一轮。
+// 用户级 preset 目录 <dshHome>/.agent-presets/<id>/ 由官方 agent-presets 插件
+// 实时发现，安装后在 设置 > Agent presets 与会话 preset 选择器中立即可选。
+const PERSONA_YML = `- id: persona
+  name: '@deepseek-ai/dsh-persona'
+  config:
+    text: You are a helpful software engineer assistant.
+    complete: true
+    includeRuntimeContext: false
+`
+const SHELL_YML = `- id: persistent-shell
+  name: cordis:group
+  group: true
+  isolate:
+    terminals: true
+  config:
+    - id: pty
+      name: '@deepseek-ai/dsh-terminal'
+    - id: terminal-bash
+      name: '@deepseek-ai/dsh-terminal-bash'
+      config:
+        timeoutMs: 300000
+    - id: persistent-bash
+      name: '@deepseek-ai/dsh-tool-bash-persistent'
+      config:
+        timeoutMs: 300000
+        description: |-
+          Run commands in a bash shell
+          * When invoking this tool, the contents of the "command" parameter does NOT need to be XML-escaped.
+          * You don't have access to the internet via this tool.
+          * You do have access to a mirror of common linux and python packages via apt and pip.
+          * State is persistent across command calls and discussions with the user.
+          * To inspect a particular line range of a file, e.g. lines 10-25, try 'sed -n 10,25p /path/to/the/file'.
+          * Please avoid commands that may produce a very large amount of output.
+          * Please run long lived commands in the background, e.g. 'sleep 10 &' or start a server in the background.
+`
+const FS_YML = `- id: filesystem
+  name: cordis:group
+  group: true
+  isolate:
+    fs: true
+  config:
+    - id: fs-local
+      name: '@deepseek-ai/dsh-fs-local'
+      config:
+        cwd: !!js process.env.DSH_CWD ?? process.cwd()
+    - id: str-replace-editor
+      name: '@deepseek-ai/dsh-tool-str-replace-editor'
+      config:
+        maxOutputChars: 16000
+`
+// 宽档追加的常用工具（实测梯度 §8：~8 工具档仍有 ~65% 触发率，换可用性）
+const WIDE_TOOLS_YML = `- id: tool-fs
+  name: '@deepseek-ai/dsh-tool-fs'
+- id: tool-fs-search
+  name: '@deepseek-ai/dsh-tool-fs-search'
+  config:
+    sampleOverCapGlobResults: false
+- id: tool-todo
+  name: '@deepseek-ai/dsh-tool-todo'
+  config:
+    allowParallelInProgress: true
+`
+const AGENT_PRESETS = [
+  {
+    id: 'deus-anchored',
+    name: '神模扳机 · 窄锚（2 工具）',
+    description: 'Minimal persona + bash/str_replace_editor，剥注入；实测动手类神版起手 ~90%。@dsh-suite/plugin-deus 安装。',
+    order: 90,
+    cordis: `# deus-anchored: 2-tool minimal anchor preset (@dsh-suite/plugin-deus v0.2)\n${PERSONA_YML}\n${SHELL_YML}\n${FS_YML}`,
+  },
+  {
+    id: 'deus-anchored-wide',
+    name: '神模扳机 · 宽锚（~8 工具）',
+    description: 'Minimal persona + bash/编辑/读写/glob/grep/todo，剥注入；实测 ~65% 触发率换可用性。@dsh-suite/plugin-deus 安装。',
+    order: 91,
+    cordis: `# deus-anchored-wide: ~8-tool wide anchor preset (@dsh-suite/plugin-deus v0.2)\n${PERSONA_YML}\n${SHELL_YML}\n${FS_YML}\n${WIDE_TOOLS_YML}`,
+  },
+]
+
+function agentPresetsRoot() {
+  return join(dshHome(), '.agent-presets')
+}
+
+// Idempotent install: only write when missing or content changed; never touch
+// a preset dir the user has modified (marker mismatch → skip with warning).
+function installAgentPresets(logger) {
+  const installed = []
+  for (const p of AGENT_PRESETS) {
+    try {
+      const dir = join(agentPresetsRoot(), p.id)
+      const marker = join(dir, '.deus-managed')
+      const cordisPath = join(dir, 'agent.cordis.yml')
+      const presetPath = join(dir, 'preset.yml')
+      const presetYml = `name: ${p.name}\ndescription: ${p.description}\norder: ${p.order}\n`
+      if (existsSync(dir) && !existsSync(marker)) {
+        logger?.warn?.(`[plugin-deus] skip ${p.id}: dir exists without .deus-managed marker (user-modified?)`)
+        installed.push({ id: p.id, installed: false, reason: 'user-modified' })
+        continue
+      }
+      const current = existsSync(cordisPath) ? readFileSync(cordisPath, 'utf8') : null
+      if (current !== p.cordis) {
+        mkdirSync(dir, { recursive: true })
+        writeFileSync(cordisPath, p.cordis)
+        writeFileSync(presetPath, presetYml)
+        writeFileSync(marker, `@dsh-suite/plugin-deus@${PLUGIN_VERSION}\n`)
+      }
+      installed.push({ id: p.id, installed: true, name: p.name, dir })
+    } catch (e) {
+      logger?.warn?.(`[plugin-deus] install ${p.id} failed:`, e)
+      installed.push({ id: p.id, installed: false, reason: String(e) })
+    }
+  }
+  return installed
+}
+
 // ── storage paths ────────────────────────────────────────────────────────────
 function dshHome() {
   return process.env.DSH_HOME || join(homedir(), '.dsh')
@@ -165,10 +286,10 @@ function statsFrom(entries) {
 }
 
 function toCsv(entries) {
-  const head = 'ts,sessionId,prompt_mode,prompt_text,detected,source,first_sentence,model'
+  const head = 'ts,sessionId,prompt_mode,prompt_text,detected,source,turn,first_sentence,model'
   const esc = (v) => `"${String(v ?? '').replace(/"/g, '""')}"`
   const rows = entries.map((e) =>
-    [e.ts, e.sessionId, e.prompt_mode, e.prompt_text, e.detected, e.source, e.first_sentence, e.model].map(esc).join(','))
+    [e.ts, e.sessionId, e.prompt_mode, e.prompt_text, e.detected, e.source, e.turn, e.first_sentence, e.model].map(esc).join(','))
   return [head, ...rows].join('\n') + '\n'
 }
 
@@ -226,12 +347,58 @@ function textOf(content) {
 }
 
 export function apply(ctx) {
+  // v0.2: 安装锚定 agent presets 到用户 preset 根（幂等，官方 agent-presets 插件实时发现）
+  const installedPresets = installAgentPresets(ctx.logger)
+
   // Pending trigger marks: sessionId -> { mode, prompt_text, ts, auto }
   const pending = new Map()
   // Chunk accumulation while a trigger is pending: sessionId -> { turn, step, reasoning, text }
   // （实测校准：指纹在 reasoning-delta 流里，text-delta 兜底；见 detectMode 注释）
   const buffers = new Map()
 
+  // ── v0.2 锚定维持：逐轮监控 deus/minimal preset 会话的指纹漂移 ─────────────
+  // 实测依据（§9）：构成恒定不代表锚定恒定——V2 对照组全程极简也有 44-89% 的
+  // 逐轮摆动，且一旦漂移到中版（工具补齐或轮次噪声），竞品 promoteOn 场景 0/6
+  // 维持。所以我们逐轮判定、漂移即标记，客户端据此提示/自动重锚。
+  // anchored: sessionId -> { preset, turns: [{turn, fp}], lastFp, drifted, skipTurn, updatedAt }
+  const anchored = new Map()
+  // 逐轮缓冲: sessionId -> { turn, reasoning, text }
+  const watchBuf = new Map()
+  const ANCHOR_PRESET_RE = /^(deus-|minimal)/
+
+  function markAnchored(sessionId, preset, force = false) {
+    if (!sessionId || !preset || (!force && !ANCHOR_PRESET_RE.test(preset))) return
+    const cur = anchored.get(sessionId)
+    if (cur) { cur.preset = preset; cur.updatedAt = new Date().toISOString() }
+    else anchored.set(sessionId, { preset, turns: [], lastFp: null, drifted: false, skipTurn: -1, updatedAt: new Date().toISOString() })
+  }
+
+  function finalizeWatch(sessionId, turnNo, buf) {
+    const st = anchored.get(sessionId)
+    if (!st || !buf || turnNo === st.skipTurn) return
+    // 注入轮由 pending 流程判定并写日志；pending 未结案期间抑制 watch（避免同轮双记）
+    if (pending.has(sessionId)) return
+    const source = buf.reasoning.trim() !== '' ? 'reasoning' : 'text'
+    const text = source === 'reasoning' ? buf.reasoning : buf.text
+    if (text.trim() === '') return
+    if (st.turns.some((t) => t.turn === turnNo)) return // 已判定过这一轮
+    const fp = detectMode(text, source)
+    st.lastFp = fp
+    st.drifted = fp !== 'god'
+    st.turns.push({ turn: turnNo, fp, ts: new Date().toISOString() })
+    if (st.turns.length > 50) st.turns = st.turns.slice(-50)
+    st.updatedAt = new Date().toISOString()
+    appendLog({
+      ts: new Date().toISOString(),
+      sessionId,
+      prompt_mode: 'watch:' + st.preset,
+      detected: fp,
+      source,
+      first_sentence: firstSentenceOf(text),
+      turn: turnNo,
+    })
+  }
+
   function finalize(sessionId, fallbackText) {
     const mark = pending.get(sessionId)
     if (!mark) return
@@ -239,17 +406,29 @@ export function apply(ctx) {
     const reasoning = (buf && buf.reasoning) || ''
     const text = (buf && buf.text) || fallbackText || ''
     if (reasoning.trim() === '' && text.trim() === '' && !fallbackText) return // keep waiting for real content
+    const judgedTurn = typeof mark.turn === 'number' ? mark.turn : (buf && typeof buf.turn === 'number' ? buf.turn : undefined)
     pending.delete(sessionId)
     buffers.delete(sessionId)
     // 指纹优先取推理流（实测校准：指纹在 reasoning-delta 里），可见文本兜底
     const source = reasoning.trim() !== '' ? 'reasoning' : 'text'
     const classifyOn = source === 'reasoning' ? reasoning : text
+    const fp = detectMode(classifyOn, source)
+    // v0.2: 注入轮的判定并入锚定状态（turns 去重即阻止 watch 同轮双记；
+    // 此前仅靠 skipTurn/pending 抑制，user/message 无可靠 turn 号时会漏）
+    const st = anchored.get(sessionId)
+    if (st && typeof judgedTurn === 'number' && !st.turns.some((t) => t.turn === judgedTurn)) {
+      st.lastFp = fp
+      st.drifted = fp !== 'god'
+      st.turns.push({ turn: judgedTurn, fp, ts: new Date().toISOString() })
+      if (st.turns.length > 50) st.turns = st.turns.slice(-50)
+      st.updatedAt = new Date().toISOString()
+    }
     appendLog({
       ts: new Date().toISOString(),
       sessionId,
       prompt_mode: mark.mode,
       prompt_text: mark.prompt_text,
-      detected: detectMode(classifyOn, source),
+      detected: fp,
       source,
       first_sentence: firstSentenceOf(classifyOn),
       model: mark.model || undefined,
@@ -259,6 +438,14 @@ export function apply(ctx) {
   ctx.on('session/event', (session, event) => {
     const sessionId = String(session.id)
 
+    // v0.2 锚定监控的会话归属判定：preset 选择事件 / 会话自带 preset / 注入命中
+    if (event.type === 'agent-preset/selected') {
+      markAnchored(sessionId, event.data && (event.data.agentPreset || event.data.preset || event.data.id))
+    }
+    if (session && typeof session.agentPreset === 'string' && ANCHOR_PRESET_RE.test(session.agentPreset)) {
+      markAnchored(sessionId, session.agentPreset)
+    }
+
     // A user message can BE the trigger: exact-match against the preset
     // library covers the conservative "copy + paste + enter" path (档 A)
     // without any explicit marking from the panel.
@@ -267,12 +454,52 @@ export function apply(ctx) {
       if (text !== '' && !pending.has(sessionId)) {
         const hit = loadPresets().find((p) => p.prompt !== null && p.prompt.trim() === text)
         if (hit) {
+          buffers.delete(sessionId) // 防止上轮残留 buffer 污染注入轮判定
           pending.set(sessionId, { mode: hit.id, prompt_text: hit.prompt, ts: Date.now(), auto: true })
+          // 注入命中的会话纳入锚定监控；注入轮由 pending 流程判定，watch 跳过该轮避免双记
+          markAnchored(sessionId, 'inject', true)
+          const st = anchored.get(sessionId)
+          if (st && typeof event.data?.turn === 'number') st.skipTurn = event.data.turn
         }
       }
       return
     }
 
+    // v0.2: 锚定会话的逐轮判定（与 pending 流程并行；pending 只覆盖注入轮）
+    if (anchored.has(sessionId) && (event.type === 'assistant/chunk' || event.type === 'assistant/message')) {
+      if (event.type === 'assistant/chunk') {
+        const chunk = event.data && event.data.chunk
+        const isReasoning = chunk && chunk.type === 'reasoning-delta' && typeof chunk.text === 'string'
+        const isText = chunk && chunk.type === 'text-delta' && typeof chunk.text === 'string'
+        if (isReasoning || isText) {
+          const cur = watchBuf.get(sessionId) || { turn: event.data.turn, reasoning: '', text: '' }
+          if (cur.turn !== event.data.turn) {
+            finalizeWatch(sessionId, cur.turn, cur) // 新一轮开始 → 结算上一轮
+            cur.turn = event.data.turn; cur.reasoning = ''; cur.text = ''
+          }
+          // 每轮只采第一个 step 的起手（指纹在开头）
+          if (cur.reasoning.length < DETECT_WINDOW * 2 && cur.text.length < DETECT_WINDOW * 2) {
+            if (isReasoning) cur.reasoning += chunk.text
+            else cur.text += chunk.text
+          }
+          watchBuf.set(sessionId, cur)
+          const head = cur.reasoning !== '' ? cur.reasoning : cur.text
+          if ((head.length >= 8 && /[.!?\n。！？]/.test(head)) || head.length >= DETECT_WINDOW) finalizeWatch(sessionId, cur.turn, cur)
+        }
+      } else {
+        const parts = event.data && event.data.message && event.data.message.content
+        let reasoning = ''
+        if (Array.isArray(parts)) {
+          for (const p of parts) {
+            if (p && typeof p === 'object' && p.type === 'reasoning' && typeof p.text === 'string') reasoning += p.text
+          }
+        }
+        const cur = watchBuf.get(sessionId)
+        if (cur && reasoning !== '' && cur.reasoning === '') cur.reasoning = reasoning
+        if (cur) finalizeWatch(sessionId, cur.turn, cur)
+      }
+    }
+
     if (!pending.has(sessionId)) return
 
     if (event.type === 'assistant/chunk') {
@@ -281,8 +508,11 @@ export function apply(ctx) {
       const isText = chunk && chunk.type === 'text-delta' && typeof chunk.text === 'string'
       if (isReasoning || isText) {
         const key = sessionId
+        const entry = pending.get(sessionId)
+        if (entry && entry.turn === undefined) entry.turn = event.data.turn // 记录注入轮号，watch 据此去重
         const cur = buffers.get(key) || { turn: event.data.turn, step: event.data.step, reasoning: '', text: '' }
         if (cur.turn !== event.data.turn || cur.step !== event.data.step) {
+          finalize(sessionId) // 轮边界先结算旧轮（此前静默清空导致判定延迟到后续轮）
           cur.turn = event.data.turn; cur.step = event.data.step; cur.reasoning = ''; cur.text = ''
         }
         if (isReasoning) cur.reasoning += chunk.text
@@ -315,6 +545,8 @@ export function apply(ctx) {
     }
 
     if (event.type === 'turn/end') {
+      const wb = watchBuf.get(sessionId)
+      if (wb) finalizeWatch(sessionId, wb.turn, wb)
       finalize(sessionId, '')
     }
   })
@@ -359,12 +591,22 @@ export function apply(ctx) {
         readBody(req, (body) => {
           const sessionId = String(body.sessionId || '')
           const mode = String(body.mode || '')
+          // v0.2: mode=reanchor 是漂移重锚的显式标记（提示文本由 client 随 body 带上）
+          if (mode === 'reanchor' && sessionId) {
+            buffers.delete(sessionId)
+            pending.set(sessionId, { mode: 'reanchor', prompt_text: String(body.prompt || ''), ts: Date.now(), auto: false })
+            markAnchored(sessionId, 'inject', true)
+            json({ ok: true })(req, res)
+            return
+          }
           const preset = loadPresets().find((p) => p.id === mode)
           if (!sessionId || !preset) {
             json({ ok: false, error: 'missing sessionId or unknown mode' }, 400)(req, res)
             return
           }
+          buffers.delete(sessionId)
           pending.set(sessionId, { mode, prompt_text: preset.prompt, ts: Date.now(), auto: false })
+          markAnchored(sessionId, 'inject', true) // 注入会话纳入逐轮锚定监控
           json({ ok: true })(req, res)
         })
       } }),
@@ -386,7 +628,21 @@ export function apply(ctx) {
       ctx.webServer.register({ kind: 'exact', path: '/deus/version', handler: (req, res) => {
         let dsh = 'unknown'
         try { dsh = detectDshVersion() } catch (e) { ctx.logger.warn('[plugin-deus] version detect failed:', e) }
-        json({ plugin: '0.1.0', dsh, logPath: logFile() })(req, res)
+        json({ plugin: PLUGIN_VERSION, dsh, logPath: logFile() })(req, res)
+      } }),
+      // v0.2 锚定维持状态: 安装的 agent presets + 受监控会话的逐轮指纹/漂移状态
+      ctx.webServer.register({ kind: 'exact', path: '/deus/anchor', handler: (req, res) => {
+        const sessions = [...anchored.entries()].map(([sessionId, st]) => ({
+          sessionId,
+          preset: st.preset,
+          total: st.turns.length,
+          god: st.turns.filter((t) => t.fp === 'god').length,
+          lastFp: st.lastFp,
+          drifted: st.drifted,
+          turns: st.turns.slice(-10),
+          updatedAt: st.updatedAt,
+        }))
+        json({ agentPresets: installedPresets, sessions })(req, res)
       } }),
     ]
     return () => { for (const d of disposers) d() }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dsh-suite/plugin-deus",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "神模扳机 Deus Trigger — 极简提示词触发实验台：预设库 + 一键注入 + 起手识别器 + 触发率统计（Wilson CI）。社区观察未获官方证实，本插件不承诺解锁任何隐藏能力。",
   "type": "module",
   "main": "lib/index.js",