@eddyskywalker/dsh-chatgpt-subscription 0.46.1 → 0.47.0

package/lib/types/shared/workbuddy-contracts.d.ts

@@ -0,0 +1,531 @@
+/**
+ * Wire contracts between the WorkBuddy host routes and the browser settings
+ * card. Everything here is public: no credential ever crosses this boundary.
+ */
+import type { AccountPoolStatusDto, PoolAccountSummaryDto } from './account-pool-contracts.ts';
+import type { PoolStorageDto } from './contracts.ts';
+/**
+ * Which deployment region an account belongs to.
+ *
+ * The two regions are separate backends serving overlapping-but-different model
+ * catalogs, and a model asked of the wrong region answers 400 `code 11102`
+ * ("service info not found") rather than failing over. The region is therefore
+ * a property of the credential, not of the request.
+ */
+export type WorkBuddyRegion = 'cn' | 'intl';
+/**
+ * Local quota guardrails, as the settings card edits them.
+ *
+ * The host owns the enforcement; this is the wire shape. `0` means OFF for every
+ * field, and all-off is the default, so an untouched install behaves exactly as
+ * before the guardrails existed.
+ */
+export interface WorkBuddyGuardrailsDto {
+    /** Stop serving an account whose remaining credits are below this. */
+    reserveCredits: number;
+    /** Stop serving an account for the rest of the local day at this many tokens. */
+    dailyTokens: number;
+    /** Stop serving one model for the rest of the local day at this many tokens. */
+    modelDailyTokens: number;
+}
+/** Client families this line can present to the gateway. */
+export type WorkBuddyOutboundProduct = 'cli' | 'workbuddy' | 'vscode';
+/**
+ * Stored preference for which client family requests present.
+ *
+ * `auto` assigns one product per account and keeps it for that account's whole
+ * life; every other value pins it line-wide. The shipped default (`cli`) is the
+ * identity this line has always sent.
+ */
+export type WorkBuddyOutboundSetting = 'auto' | WorkBuddyOutboundProduct;
+/**
+ * Consumption multiplier of one model, per region.
+ *
+ * The subscription publishes a \`credits\` string per model in its own
+ * \`/v3/config\` catalog — \`x0.79 credits\`, \`x6.67\` — which is the relative rate at
+ * which that model consumes the package allowance. The official CodeBuddy
+ * client renders it as \`6.67x\` beside the model in its picker; this route
+ * carries the same fact to the settings card, so a model's cost is visible at
+ * the moment it is chosen rather than only on the bill.
+ *
+ * Keyed by region because the two backends do not always agree: measured
+ * 2026-10-09, \`deepseek-v4.1-flash\` is \`0.11\` on cn against \`0.00\` on intl. A
+ * region the catalog did not name for this model is absent rather than guessed,
+ * and a model whose publisher declares no usable rate (\`default-model\` ships an
+ * empty string) carries no entry at all.
+ *
+ * Values are the bare numeric form (\`'0.79'\`), never the wire spelling: the
+ * label and the \`x\` suffix belong to whichever surface renders it.
+ */
+export type WorkBuddyModelCredits = Partial<Record<WorkBuddyRegion, string>>;
+/**
+ * Parse one gateway \`credits\` string into the bare multiplier it names.
+ *
+ * Measured shapes: \`x6.67\` (intl), \`x0.79 credits\` (cn), and \`''\` for a model
+ * whose publisher declares no rate. \`x0.00\` is deliberately kept — it is a real
+ * declaration ("this model does not consume allowance"), not a missing value,
+ * so it must not be confused with the empty string that means nothing is known.
+ *
+ * The return is \`null\` rather than \`0\` for anything unparseable, so a caller can
+ * tell "no rate published" from "a rate of zero".
+ */
+export declare function parseWorkBuddyCreditMultiplier(raw: unknown): string | null;
+/**
+ * Reasoning levels this route can name.
+ *
+ * Deliberately the widest set any model declares, so a saved default is not
+ * discarded merely because the model that suggested it is no longer selected.
+ * The settings card renders the subset the account's models actually declare.
+ */
+export type WorkBuddyReasoningEffort = 'none' | 'minimal' | 'low' | 'medium' | 'high' | 'xhigh' | 'max';
+/**
+ * Every level this route can name, in escalating order (the card's sort key).
+ *
+ * `none` is the one level that is not a rung of any ladder: it is the measured
+ * spelling that turns the reasoning trace OFF upstream (`reasoning_effort:
+ * "none"`, the value the sibling gateway sends on its own cheap calls). It is
+ * only ever offered on a model the catalog marks `canDisableThinking`, so it
+ * sorts below everything and is never used to converge a level onto a ladder.
+ */
+export declare const WORKBUDDY_REASONING_EFFORTS: readonly WorkBuddyReasoningEffort[];
+/**
+ * Ladder of a WorkBuddy model that leaves the level choice to the gateway.
+ *
+ * `/v3/config` publishes a model's ladder in two shapes: an explicit
+ * `supportedEfforts` list, or a lone `{ effort }` field that names only the
+ * DEFAULT. Conflating them was a real bug — the lone field first became a
+ * one-entry ladder, which rejected an explicit `low`; widening it to every
+ * level this route can name then advertised `minimal`/`xhigh` on a model that
+ * has three. Measured against the live gateway, such a model accepts exactly
+ * `low`/`high`/`max` — the same three `glm-5.3-flash` and
+ * `kimi-k2.8-preview` declare explicitly — and every other value is routed
+ * into the nearest of them rather than honoured as a level of its own.
+ */
+export declare const WORKBUDDY_STANDARD_EFFORTS: readonly WorkBuddyReasoningEffort[];
+/**
+ * Snap a level onto the nearest rung a model's ladder actually exposes.
+ *
+ * The gateway names a default from a wider vocabulary than the ladder it
+ * publishes for the same model: an effort-only entry (minimax-m3, kimi-k3,
+ * `glm-5.3` in the cn region) reports `effort: 'medium'` while exposing only
+ * `low`/`high`/`max`. Letting that value through is not cosmetic — a default
+ * outside the ladder is discarded by the level-resolution step, the request
+ * then carries no `reasoning_effort`, and the model returns an EMPTY
+ * `reasoning_content` (measured on minimax-m3: 0 characters across three
+ * samples, versus 282-659 with the field). Ties resolve upward, which is the
+ * mapping the sibling Kimi line documents for `medium`. A ladder that names
+ * no level (a text-only model) yields nothing to converge to.
+ */
+export declare function convergeWorkBuddyEffort(effort: string, ladder: readonly string[]): WorkBuddyReasoningEffort | null;
+/** One model offered by the WorkBuddy subscription. */
+export interface WorkBuddyModelOption {
+    id: string;
+    name: string;
+    /** Enabled models are the ones DSH offers in the conversation model picker. */
+    enabled: boolean;
+    /** Context window this route assumes when the caller saves no override. */
+    defaultContextWindow: number;
+    /** Effective context window: the override when one is saved, else the default. */
+    contextWindow: number;
+    /** Maximum output tokens this route requests when a caller omits one. */
+    defaultMaxTokens: number;
+    /** Reasoning levels this route exposes; absent for non-reasoning models. */
+    reasoningEfforts?: string[];
+    /** Whether the model accepts image input on this route. */
+    supportsImage: boolean;
+    /** Regions that serve this model; the account's own region must be listed. */
+    regions: WorkBuddyRegion[];
+    /**
+     * Consumption multiplier per region, as the gateway declares it.
+     *
+     * Absent when nothing usable was published for this model — an unreachable
+     * gateway served by the shipped fallback for a model it does not rate, or an
+     * account whose region is not among the keys. The card must then show no
+     * multiplier rather than a placeholder: a guessed rate on a spend figure is
+     * worse than a missing one.
+     */
+    credits?: WorkBuddyModelCredits;
+    /** One-line description shown beside the model in the settings card. */
+    description?: string;
+}
+/**
+ * Daily check-in preference for the CN-region billing activity.
+ *
+ * The activity is CN-only: the international deployment answers no check-in
+ * surface, so the scheduler skips those accounts outright. There is no window
+ * to configure: the first tick after the host starts is the daily run.
+ */
+export interface WorkBuddyCheckinSettings {
+    /** Whether the in-process scheduler signs eligible accounts in. */
+    enabled: boolean;
+}
+/**
+ * Aggregate check-in state the settings card renders.
+ *
+ * Deliberately account-less: the card shows one line ("checked in x/y today"),
+ * not a per-account breakdown, so no account identity crosses here either.
+ */
+export interface WorkBuddyCheckinSummary {
+    enabled: boolean;
+    /** CN-region accounts eligible for the check-in activity. */
+    totalAccounts: number;
+    /** Accounts confirmed signed in today (already signed, or signed by a run). */
+    doneToday: number;
+    /**
+     * Accounts whose activity reported no entitlement today.
+     *
+     * Kept apart from {@link doneToday} because "the activity is inactive" is not
+     * "you are checked in": counting them together let the card claim a sign-in
+     * that never happened.
+     */
+    skippedToday: number;
+    /** Accounts that exhausted today's retry cap without signing in. */
+    failedToday: number;
+    /** Unix milliseconds the scheduler last ran, automatic or manual. */
+    lastRunAt: number | null;
+}
+/** One credit allowance reported by the billing service. */
+export interface WorkBuddyMeter {
+    id: string;
+    label: string;
+    /** Used fraction in [0, 1] when the service reports a bounded allowance. */
+    usedFraction: number | null;
+    /** Remaining fraction in [0, 1], when the service reports one. */
+    remainingFraction: number | null;
+    used: string | null;
+    limit: string | null;
+    /** Unix milliseconds the meter resets, when reported. */
+    resetsAt: number | null;
+    description: string | null;
+}
+/** Account identity read from the local CodeBuddy credential file. */
+export interface WorkBuddyAccount {
+    /** Stable, non-secret selection key derived from region + account identity. */
+    id: string;
+    uid: string | null;
+    nickname: string | null;
+    /** Tencent UIN, masked by the card rather than sent in full. */
+    uin: string | null;
+    /** Account kind the client reports, e.g. `personal`. */
+    accountType: string | null;
+    /** Enterprise/tenant id when the account is an enterprise one. */
+    enterpriseId: string | null;
+    region: WorkBuddyRegion;
+    /** Backend base URL this account's region resolves to. */
+    backend: string;
+    /** Auth domain recorded in the credential, e.g. `copilot.tencent.com`. */
+    domain: string;
+    /** Unix milliseconds the access token expires. */
+    expiresAt: number | null;
+    /** File the credential was read from; null for plugin-managed accounts. */
+    sourceFile: string | null;
+    /** Desktop credentials are external; managed credentials belong to this plugin. */
+    source: 'desktop' | 'managed';
+    /** Managed credentials may be deleted; desktop credentials may only be hidden. */
+    removable: boolean;
+    /** Hidden desktop accounts do not participate in automatic selection. */
+    hidden: boolean;
+}
+/** One WorkBuddy account as the shared pool card renders it. Never carries a token. */
+export interface WorkBuddyAccountSummaryDto extends PoolAccountSummaryDto {
+    region: WorkBuddyRegion;
+    /** Which store owns the credential; only managed accounts may be deleted. */
+    source: 'desktop' | 'managed';
+    /** Whether the card may offer Delete for this account. */
+    removable: boolean;
+    nickname?: string;
+    /** Tencent UIN, masked by the card rather than shown in full. */
+    uin?: string;
+    /** IDE file a desktop account was adopted from. */
+    sourceFile?: string;
+    /** Auth domain recorded in the credential, e.g. `copilot.tencent.com`. */
+    domain?: string;
+    /** Backend base URL the account's region resolves to. */
+    backend?: string;
+    /** Account kind the client reports, e.g. `personal`. */
+    accountType?: string;
+    /**
+     * Whether the plugin currently routes to this account.
+     *
+     * Distinct from the pool's `activeAccountId`: a hidden account keeps its
+     * place in the pool but is not offered for routing while hidden.
+     */
+    hidden?: boolean;
+    /**
+     * Models this account is parked on, as the line's pool knows them.
+     *
+     * Line-private on purpose: the shared `PoolAccountSummaryDto` carries no
+     * per-model cooldown, because a model park is a fact about THIS gateway's
+     * account × model metering and nothing else. Widening the shared DTO would
+     * make every other line answer a field it never fills; this extension keeps
+     * the fact where it belongs and still reaches the routes and the card.
+     */
+    modelCooldowns?: WorkBuddyModelCooldownDto[];
+    /**
+     * Account-scoped refusal the gateway reported, when it reported one.
+     *
+     * Distinct from both cooldowns above: a cooldown lifts on its own and parks
+     * one model or one account for a while, while a restriction says the account
+     * itself may not be served at all and the pool must stop selecting it.
+     */
+    restriction?: WorkBuddyAccountRestrictionDto;
+}
+/** One point-in-time quota snapshot for the signed-in WorkBuddy account. */
+export interface WorkBuddyAccountQuota {
+    account: WorkBuddyAccount;
+    /** Package name the billing service reports, e.g. `Free Plan Subscription`. */
+    packageName: string | null;
+    /** Total credits the package grants, as reported. */
+    totalCredits: number | null;
+    /** Credits remaining in the current cycle. */
+    remainingCredits: number | null;
+    /** Credits consumed in the current cycle. */
+    cycleUsedCredits: number | null;
+    /** Cycle allowance, when the service reports a per-cycle cap. */
+    cycleCredits: number | null;
+    /** Start of the current billing cycle, as Unix milliseconds. */
+    cycleStartsAt: number | null;
+    /** End of the current billing cycle, as Unix milliseconds. */
+    cycleEndsAt: number | null;
+    meters: WorkBuddyMeter[];
+    /** When this snapshot was read. */
+    fetchedAt: number;
+    /** Billing routes that answered, for diagnostics in the settings card. */
+    sources: string[];
+}
+/** Everything the settings card and the composer badge render. */
+export interface WorkBuddyWebStatus extends Partial<AccountPoolStatusDto> {
+    enabled?: boolean;
+    authenticated: boolean;
+    hasCredentials: boolean;
+    /** Where credentials are read from; the local CodeBuddy auth directory. */
+    authDirectory: string;
+    /** Storage description for the plugin's own settings file. */
+    storagePath: string;
+    account: WorkBuddyAccount | null;
+    quota: WorkBuddyAccountQuota | null;
+    lastFetchedAt: number | null;
+    /**
+     * Whether a quota refresh is running behind this answer.
+     *
+     * The card renders the snapshot it already had instead of waiting on the
+     * upstream request; when this is true the client asks again shortly so the
+     * refreshed snapshot reaches the UI.
+     */
+    quotaRefreshing?: boolean;
+    models: WorkBuddyModelOption[];
+    contextWindowOverrides: Record<string, number>;
+    defaultReasoningEffort: WorkBuddyReasoningEffort | null;
+    /** Account selected for model discovery and all requests; null means automatic. */
+    selectedAccountId: string | null;
+    /** Encrypted storage used for accounts added from this plugin. */
+    managedStoragePath: string;
+    /** Route the plugin currently serves; false when another plugin owns it. */
+    serving: boolean;
+    /** Diagnostic when the route is owned by a different adapter family. */
+    conflict: string | null;
+    /** Pool summaries the shared account card renders; empty without a pool. */
+    accounts?: WorkBuddyAccountSummaryDto[];
+    /** Aggregate daily check-in state; absent when the host predates check-in. */
+    checkin?: WorkBuddyCheckinSummary | null;
+    /** Which client identity chat requests present. */
+    outboundIdentity?: WorkBuddyOutboundSetting;
+    /** Local quota guardrails currently armed (all zero when off). */
+    guardrails?: WorkBuddyGuardrailsDto;
+    /**
+     * Whether this process holds the key that opens `$wbEncrypted` credentials.
+     *
+     * False with {@link sealedAccounts} above zero is the actionable state: the
+     * desktop client has sealed its tokens and nothing can read them yet.
+     */
+    atRestKeySet?: boolean;
+    /** Sealed desktop credential files the last scan met. */
+    sealedAccounts?: number;
+    /** Why the last sealed file refused to open, when one did. */
+    sealedAccountsError?: string | null;
+    /**
+     * Whole-pool state: pause, restricted accounts, and where the pool is kept.
+     *
+     * Absent means the host predates pool persistence, which is not the same as
+     * "not paused" — a card must render nothing rather than "running".
+     */
+    pool?: WorkBuddyPoolStateDto;
+}
+/** Patch accepted by the models/settings route. */
+export interface WorkBuddySettingsUpdateDto {
+    enabled?: boolean;
+    enabledModelIds?: string[];
+    /** A number sets an override for that model; `null` restores the catalog default. */
+    contextWindowOverrides?: Record<string, number | null>;
+    defaultReasoningEffort?: WorkBuddyReasoningEffort | null;
+    selectedAccountId?: string | null;
+    /** Partial check-in update; omitted fields keep their stored value. */
+    checkin?: Partial<WorkBuddyCheckinSettings>;
+    /** Which client identity chat requests present. */
+    outboundIdentity?: WorkBuddyOutboundSetting;
+    /** Partial guardrail update; omitted fields keep their stored value. */
+    guardrails?: Partial<WorkBuddyGuardrailsDto>;
+}
+/** Result of a connection test against the upstream chat endpoint. */
+export interface WorkBuddyConnectionDto {
+    connected: boolean;
+    account: WorkBuddyAccount | null;
+    /** Round-trip time of the probe request. */
+    latencyMs: number;
+    /** Model the probe asked for. */
+    model: string;
+    checkedAt: number;
+}
+/**
+ * Gateway code for an account the subscription itself refuses to serve.
+ *
+ * Distinct from every code the host names elsewhere: `11102` is one model the
+ * region does not serve and `6004` is a usage window, while this one bars the
+ * ACCOUNT — the pool must stop selecting it rather than park one model on it.
+ *
+ * PROVENANCE — read from upstream source, not inferred:
+ *
+ * - `magpie-community/plugins` @ `1e7122e1`, `packages/workbuddy/index.mjs`
+ *   L2770-2780 defines the code as the gateway's restricted-account signal
+ *   (`RESTRICTED_CODE = 11140`) together with the wording a restricted account
+ *   is answered with — the account is barred from being served, not one model
+ *   parked.
+ * - `ardeyouxipianyi/workbuddy2api-hub` @ `1ea7f61e`, `wb_proxy.py`
+ *   L14253-14333 handles the same code, so the classification (account-scoped
+ *   rather than model-scoped) is corroborated by two independent clients rather
+ *   than by a single reading.
+ *
+ * Still open, and stated as open: the exact `msg` text and the reset instant a
+ * LIVE gateway attaches to the code are a measurement this wave does not make.
+ * Treat `11140` as "account barred" — do not parse its message for a duration.
+ */
+export declare const WORKBUDDY_RESTRICTED_ACCOUNT_CODE: 11140;
+/**
+ * One model an account is parked on, inside the account's own eligibility.
+ *
+ * The account can still serve every model NOT named here, which is why this is
+ * a list on the account rather than a second account-level cooldown: a card
+ * that only drew `cooldownUntil` would report the account as available while
+ * the one model the request wants is the one that is refused.
+ */
+export interface WorkBuddyModelCooldownDto {
+    /** Model id in the vocabulary of the catalog the pool routed with. */
+    model: string;
+    /** Unix milliseconds the park lifts; a past value is already lifted. */
+    cooldownUntil: number;
+}
+/** An account-scoped refusal, as the settings card reports it. */
+export interface WorkBuddyAccountRestrictionDto {
+    /**
+     * Gateway code. {@link WORKBUDDY_RESTRICTED_ACCOUNT_CODE} is the one that
+     * bars the account itself; `11158` is the same shape for a single model an
+     * account has no entitlement for.
+     */
+    code: number;
+    /** Upstream `msg` when one came with the code. Never a credential. */
+    message?: string;
+    /** Unix milliseconds the refusal lifts, when the gateway names one. */
+    until?: number;
+}
+/**
+ * Whole-pool state the settings card and the composer badge read.
+ *
+ * A pause is a decision about the POOL — nothing is routable right now — and no
+ * per-account field can express it. Drawing "3 accounts available" while the
+ * pool is stopped for one restricted account is exactly the lie this exists to
+ * prevent, so the pause is reported on its own and the card renders it first.
+ */
+export interface WorkBuddyPoolStateDto {
+    /** Whether new requests are refused right now. */
+    paused: boolean;
+    /** Why the pool is paused, when it is. Composed by the host, never a token. */
+    pauseReason?: string;
+    /** Unix milliseconds the pause began. */
+    pausedSince?: number;
+    /**
+     * Unix milliseconds the pause lifts on its own. Absent means it does not lift
+     * without the user (every account restricted, or a manual pause).
+     */
+    pausedUntil?: number;
+    /** Account ids currently barred by a {@link WorkBuddyAccountRestrictionDto}. */
+    restrictedAccountIds?: string[];
+    /**
+     * Which backend holds the pool document, and whether it encrypts it at rest.
+     *
+     * Deliberately the SHARED `PoolStorageDto` (`src/shared/contracts.ts`), not a
+     * line-private copy. The account-pool storage choice is one deployment fact —
+     * `mode: 'keyring' | 'credentials'` resolved to `backend: 'keyring' |
+     * 'credentials' | 'dpapi' | 'keychain'`, with `encrypted` and an
+     * `unavailable` reason code — and every line's card has to answer it the same
+     * way. A line-private shape would let a card name a store the host is not
+     * actually using, which is the one thing this field exists to prevent.
+     *
+     * Absent means the host predates pool persistence — not "unencrypted".
+     */
+    storage?: PoolStorageDto;
+}
+/**
+ * The parks of one account that have not lifted yet.
+ *
+ * `now` is a parameter rather than a hidden `Date.now()` so one render walks a
+ * consistent instant. An expired park is dropped rather than reported: a card
+ * that lists a park that already lifted tells the user an eligible account is
+ * unavailable.
+ */
+export declare function liveWorkBuddyModelCooldowns(cooldowns: readonly WorkBuddyModelCooldownDto[] | undefined, now: number): WorkBuddyModelCooldownDto[];
+/**
+ * Which wire protocol one model is served on.
+ *
+ * The subscription speaks two. OpenAI chat completions serves its own models;
+ * Anthropic's Messages shape serves the Claude models of the CHINA deployment,
+ * beside them on the same host. Everything downstream — routes, adapter,
+ * mapper — picks its path and its reasoning field from here, never from a model
+ * name spelled out again, so the two vocabularies cannot drift apart.
+ */
+export type WorkBuddyModelProtocol = 'chat-completions' | 'anthropic-messages';
+/**
+ * Regions that answer `/v1/messages`.
+ *
+ * Measured on 2026-10-24: only the China deployment (`copilot.tencent.com`)
+ * serves Messages. The international deployment answers "404 Route Not Found"
+ * to `/v1/messages`, `/v2/messages` and `/v1/messages?beta=true` whatever
+ * the model, so a Claude model there stays on chat completions.
+ *
+ * Source: `magpie-community/plugins@1e7122e1`, `packages/workbuddy/index.mjs`
+ * L132-157 (`apiMessages` = `<endpoint>/v1`, `nativeOf`, and the 404 note).
+ */
+export declare const WORKBUDDY_MESSAGES_REGIONS: readonly WorkBuddyRegion[];
+/**
+ * How each protocol accepts a reasoning level.
+ *
+ * This difference is why a Claude model is not merely a path change: chat
+ * completions takes a `reasoning_effort` field, while Anthropic's shape asks
+ * for thinking (`thinking.type: adaptive` plus `output_config.effort`). The
+ * upstream client measured the chat endpoint answering the same at every level,
+ * which is the other half of the same fact.
+ *
+ * Source: same file, L134-139.
+ */
+export declare const WORKBUDDY_PROTOCOL_REASONING: Readonly<Record<WorkBuddyModelProtocol, 'chat-effort' | 'anthropic-thinking'>>;
+/** One model's route on one region, frozen for the mapper wave to consume. */
+export interface WorkBuddyModelRouteDto {
+    /** Model id, in whichever vocabulary the caller resolved it. */
+    model: string;
+    region: WorkBuddyRegion;
+    protocol: WorkBuddyModelProtocol;
+    /** Reasoning field this protocol honours (see {@link WORKBUDDY_PROTOCOL_REASONING}). */
+    reasoning: 'chat-effort' | 'anthropic-thinking';
+}
+/** Whether a model id is Anthropic's own, which is what Messages routability keys on. */
+export declare function isWorkBuddyClaudeModel(model: string): boolean;
+/**
+ * Route one model on one region.
+ *
+ * The rule is the upstream client's own (`nativeOf`): a Claude model on a
+ * deployment that serves Messages goes to Messages; everything else — and every
+ * model on the international deployment — stays on chat completions. Total and
+ * pure, so the mapper wave never has to ask the network which path a model takes
+ * or re-derive the rule privately.
+ */
+export declare function workBuddyModelRoute(model: string, region: WorkBuddyRegion): WorkBuddyModelRouteDto;
+//# sourceMappingURL=workbuddy-contracts.d.ts.map

package/lib/types/shared/workbuddy-contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workbuddy-contracts.d.ts","sourceRoot":"","sources":["../../../src/shared/workbuddy-contracts.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAC9F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAEpD;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG,IAAI,GAAG,MAAM,CAAA;AAE3C;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC,sEAAsE;IACtE,cAAc,EAAE,MAAM,CAAA;IACtB,iFAAiF;IACjF,WAAW,EAAE,MAAM,CAAA;IACnB,gFAAgF;IAChF,gBAAgB,EAAE,MAAM,CAAA;CACzB;AAED,4DAA4D;AAC5D,MAAM,MAAM,wBAAwB,GAAG,KAAK,GAAG,WAAW,GAAG,QAAQ,CAAA;AAErE;;;;;;GAMG;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,wBAAwB,CAAA;AAExE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAA;AAE5E;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAO1E;AAED;;;;;;GAMG;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAA;AAEvG;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,wBAAwB,EACb,CAAA;AAE9D;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,wBAAwB,EAClD,CAAA;AAExB;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,SAAS,MAAM,EAAE,GACxB,wBAAwB,GAAG,IAAI,CAoBjC;AAED,uDAAuD;AACvD,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,+EAA+E;IAC/E,OAAO,EAAE,OAAO,CAAA;IAChB,2EAA2E;IAC3E,oBAAoB,EAAE,MAAM,CAAA;IAC5B,kFAAkF;IAClF,aAAa,EAAE,MAAM,CAAA;IACrB,yEAAyE;IACzE,gBAAgB,EAAE,MAAM,CAAA;IACxB,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC3B,2DAA2D;IAC3D,aAAa,EAAE,OAAO,CAAA;IACtB,8EAA8E;IAC9E,OAAO,EAAE,eAAe,EAAE,CAAA;IAC1B;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,qBAAqB,CAAA;IAC/B,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC,mEAAmE;IACnE,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAA;IAChB,6DAA6D;IAC7D,aAAa,EAAE,MAAM,CAAA;IACrB,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;;OAMG;IACH,YAAY,EAAE,MAAM,CAAA;IACpB,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,4EAA4E;IAC5E,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,kEAAkE;IAClE,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,yDAAyD;IACzD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,EAAE,EAAE,MAAM,CAAA;IACV,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,gEAAgE;IAChE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,wDAAwD;IACxD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,kEAAkE;IAClE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,MAAM,EAAE,eAAe,CAAA;IACvB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAA;IACf,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAA;IACd,kDAAkD;IAClD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,mFAAmF;IACnF,MAAM,EAAE,SAAS,GAAG,SAAS,CAAA;IAC7B,kFAAkF;IAClF,SAAS,EAAE,OAAO,CAAA;IAClB,yEAAyE;IACzE,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,uFAAuF;AACvF,MAAM,WAAW,0BAA2B,SAAQ,qBAAqB;IACvE,MAAM,EAAE,eAAe,CAAA;IACvB,6EAA6E;IAC7E,MAAM,EAAE,SAAS,GAAG,SAAS,CAAA;IAC7B,0DAA0D;IAC1D,SAAS,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,yBAAyB,EAAE,CAAA;IAC5C;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,8BAA8B,CAAA;CAC7C;AAED,4EAA4E;AAC5E,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,gBAAgB,CAAA;IACzB,+EAA+E;IAC/E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,qDAAqD;IACrD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,8CAA8C;IAC9C,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,6CAA6C;IAC7C,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,iEAAiE;IACjE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,gEAAgE;IAChE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,8DAA8D;IAC9D,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,kEAAkE;AAClE,MAAM,WAAW,kBAAmB,SAAQ,OAAO,CAAC,oBAAoB,CAAC;IACvE,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,aAAa,EAAE,OAAO,CAAA;IACtB,cAAc,EAAE,OAAO,CAAA;IACvB,2EAA2E;IAC3E,aAAa,EAAE,MAAM,CAAA;IACrB,8DAA8D;IAC9D,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAAA;IAChC,KAAK,EAAE,qBAAqB,GAAG,IAAI,CAAA;IACnC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,MAAM,EAAE,oBAAoB,EAAE,CAAA;IAC9B,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9C,sBAAsB,EAAE,wBAAwB,GAAG,IAAI,CAAA;IACvD,mFAAmF;IACnF,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,kEAAkE;IAClE,kBAAkB,EAAE,MAAM,CAAA;IAC1B,4EAA4E;IAC5E,OAAO,EAAE,OAAO,CAAA;IAChB,wEAAwE;IACxE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,0BAA0B,EAAE,CAAA;IACvC,8EAA8E;IAC9E,OAAO,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAA;IACxC,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,wBAAwB,CAAA;IAC3C,kEAAkE;IAClE,UAAU,CAAC,EAAE,sBAAsB,CAAA;IACnC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,8DAA8D;IAC9D,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,qBAAqB,CAAA;CAC7B;AAED,mDAAmD;AACnD,MAAM,WAAW,0BAA0B;IACzC,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,qFAAqF;IACrF,sBAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAA;IACtD,sBAAsB,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAA;IACxD,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,uEAAuE;IACvE,OAAO,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAA;IAC3C,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,wBAAwB,CAAA;IAC3C,wEAAwE;IACxE,UAAU,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAA;CAC7C;AAED,sEAAsE;AACtE,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,OAAO,CAAA;IAClB,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAAA;IAChC,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAA;IACjB,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,iCAAiC,EAAG,KAAc,CAAA;AAE/D;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAA;IACb,wEAAwE;IACxE,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,kEAAkE;AAClE,MAAM,WAAW,8BAA8B;IAC7C;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,kDAAkD;IAClD,MAAM,EAAE,OAAO,CAAA;IACf,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,yCAAyC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,EAAE,cAAc,CAAA;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,SAAS,yBAAyB,EAAE,GAAG,SAAS,EAC3D,GAAG,EAAE,MAAM,GACV,yBAAyB,EAAE,CAE7B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,GAAG,oBAAoB,CAAA;AAE9E;;;;;;;;;;GAUG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,eAAe,EAAW,CAAA;AAE5E;;;;;;;;;;GAUG;AACH,eAAO,MAAM,4BAA4B,EAAE,QAAQ,CACjD,MAAM,CAAC,sBAAsB,EAAE,aAAa,GAAG,oBAAoB,CAAC,CAIrE,CAAA;AAED,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACrC,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,eAAe,CAAA;IACvB,QAAQ,EAAE,sBAAsB,CAAA;IAChC,wFAAwF;IACxF,SAAS,EAAE,aAAa,GAAG,oBAAoB,CAAA;CAChD;AAED,yFAAyF;AACzF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,eAAe,GACtB,sBAAsB,CAMxB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eddyskywalker/dsh-chatgpt-subscription",
-  "version": "0.46.1",
+  "version": "0.47.0",
   "description": "DSH provider plugin for Codex access through a ChatGPT subscription.",
   "icon": "./icon.svg",
   "author": {
@@ -46,7 +46,11 @@
       "default": "./lib/progress-updates.js"
     },
     "./progress-updates/locale/*.json": "./locale/progress-updates/*.json",
-    "./progress-updates/icon": "./progress-updates.svg"
+    "./progress-updates/icon": "./progress-updates.svg",
+    "./plan-mode-pipeline": {
+      "types": "./lib/types/entry-plan-mode-pipeline.d.ts",
+      "default": "./lib/plan-mode-pipeline.js"
+    }
   },
   "dsh": {
     "bundle": {

package/presets/dispatch/README.md

@@ -6,8 +6,9 @@
 ## 运行骨架
 
 ```
-分诊(Triage) → 澄清访谈(Grill) → 规划(Plan) → 派发(Dispatch) → 审查(Review) → 验收(Accept) → 文档(Docs)
-     │              │
+分诊(Triage) → 澄清访谈(Grill) → 计划模式(Plan Mode) → 规划(Plan) → 审批(Approve) → 派发(Dispatch) → 审查(Review) → 验收(Accept) → 文档(Docs)
+     │              │                    │
+     │              │                    └─ R9：只读探索与 decision-complete 计划都在计划模式内写，exit_plan_mode 是唯一审批出口
      │              └─ 仅 L2 强制；L1 轻量；L0 跳过
      └─ R0：判定 L0 / L1 / L2，决定后面阶段是否展开
 ```
@@ -32,6 +33,7 @@
 | R7 | 主代理维护任务清单、决策记录与访谈结论 |
 | R8 | 兜底需说明原因；**任务级、非会话级**——只覆盖触发它的那一个任务，下一个任务按 R0 重新分诊并恢复派发 |
 | R-W | 回合边界纪律：等待靠完成通知而非 sleep/轮询；不主动建目标（清单走 `todo_write`）；需要拍板一律用提问工具 |
+| R9 | 计划模式管线：仅 L2 且 R-G 已收敛（前沿为空 + 用户明确确认）时立刻 `enter_plan_mode`；进入这一步只完成进入，下一步才做只读探索并在计划模式内写出 decision-complete 计划，`exit_plan_mode` 是该轮唯一且最后的调用；打回（Keep planning）= 按反馈修订后再呈交，放弃计划须用户明确表示并带 reason 调 `leave_plan_mode`（它不是审批出口）；旧代或开关关闭时降级为用一次 `ask_user_question` 请用户输入 `/plan` |
 
 ## 回合边界（R-W）
 
@@ -78,7 +80,59 @@
 自判身份，从而不套用面向调度者的 R0/R-G/R1/R2/R4/R5。若需要真正的子代理专属提示词，
 需要在 DSH 侧扩展（`tool-subagent` 的 `persona` 只能整段覆盖，不适用于此）。
 
+**计划模式管线的工具作用域 = preset 行**：`enter_plan_mode` / `leave_plan_mode` 由
+`plan-mode-pipeline` 这一行在 `planning` 隔离组内注册（与 `plan-mode` 同一个 realm，排在其后），
+所以它们只属于挂载了本 preset 的会话。换用其它 preset 的会话拿不到这两个工具，R9 在那里也无从执行。
+
+**子代理不进入计划模式**：子代理由本会话 spawn，因此继承同一份 preset 组成，`enter_plan_mode` /
+`leave_plan_mode` 在它的工具列表里**是可见的**——可见不等于可用。桥接能拦到哪一步取决于 harness 代际：
+
+- **新代（能判定存活根）**——`agents` 服务在场且 `agents.roots()` 可用时，存活子代理的调用会以
+  `DELEGATED_CALLER` 被拒（这是该错误码唯一的抛出点）；
+- **老代（判不了根）**——`agents` 缺失，或有 `agents` 但 `roots` 不是函数时，桥接只判存活、判不了根
+  就**放行**，子代理的调用会真的切换它自己的计划模式。
+
+所以**不要依赖这道拒绝**：子代理无论如何都不得自行进入计划模式、也不得提交计划，必须把未决决定
+——包括「要不要进入计划模式」这个请求——带回调度者，由调度者走 R9；persona 的 R9 段末有一条同名条款
+钉住这件事。任务书里不要要求子代理「进入计划模式」，它是执行者，只按任务书干活并回报证据。
+
+**旧代 harness 或开关关闭时降级**：工具列表里没有 `enter_plan_mode`（插件不支持该行的旧代 harness，
+或 `planModePipeline` 开关关闭导致该行不注册工具）时，退化路径是用一次 `ask_user_question` 请用户手动
+输入 `/plan`，然后按已配置的 `plan-mode` section 继续；不得把计划直接贴在普通回复里代替审批。
+
+## 缓存成本与两处压缩
+
+Kimi 线路按请求内容前缀命中缓存：**同一会话内 system 段或工具列表一变，整个前缀缓存归零**
+（见根 `README.md`）。「进入计划模式」这一步两样都会变——`plan-mode` 的 section 换新，
+`exit_plan_mode` 第一次进入工具表——所以这一次重建**无法避免**，换任何写法都躲不掉。
+
+能压的只有**重建之后每一步都还要重发的字节**。于是做了两处压缩：
+
+| 位置 | 改前 | 改后 | 性质 |
+|---|---|---|---|
+| `agent.cordis.yml` 的 `plan-mode` section | 2627 字符（约 660 tokens） | 309 字符（一句话，保留五条护栏） | 计划模式期间**每一步**都渲染 |
+| `enter_plan_mode` / `leave_plan_mode` 工具描述 | 772 / 424 字符 | ≤ 380 / ≤ 220 字符 | 常驻（随每一步的工具表重发） |
+| `enter_plan_mode` 的返回文本 | 约 400 字符 | ≤ 1400 字符 | **末尾追加**，不破坏前缀 |
+
+- **section 压成一句话**：它同时是**用户手动 `/plan` 那条路径上唯一的护栏**（那条路没有工具返回
+  兜底），所以五条规则原样留在句子里——留在计划模式直到经 `exit_plan_mode` 提交计划；「去实现」
+  按「去规划」处理；对话里的确认只是一个设计决定，不是批准计划；只读探索（不改文件、不跑会重写
+  已跟踪文件的命令）；批准前不实施。
+- **只读与「批准前不实施」为什么留在 section 而不是只搬去工具返回**：`enter_plan_mode` 的返回里
+  确实有这两条，但那条返回只有模型调用工具时才会出现。而用户手动 `/plan` 是 R9 写明的**显式降级入口**
+  （旧代 harness 没有 `enter_plan_mode`，或 `planModePipeline` 开关关闭），那条路上永远没有
+  工具返回。只把这两条放在返回里，等于把用户送上一条没有「不许写文件」提示的路。所以 section 保留
+  一份压缩副本，长度预算从 ≤220 放宽到 **≤360**：多付约 105 字符（≈26 tokens），且只在计划模式
+  期间渲染。
+- **详细指引搬进工具返回**：只读探索的完整版（不改文件、不跑会重写工作区文件的命令）、decision-complete
+  计划清单、`exit_plan_mode` 是该轮唯一且最后的调用、被打回则按反馈修订后再呈交、批准前不实施
+  不派发，都写在 `enter_plan_mode` 的返回里。工具结果是末尾追加，不改变已发前缀，所以这份详细
+  指引只付一次，进入之后的每一步都还能看到它。
+- **工具描述只留判定条件**：能不能调用（仅调度模式、仅 L2 且 R-G 已收敛、本步只完成进入、L0/L1
+  或访谈未收敛时不得调用）留在描述里，其余交给 persona 的 R9——persona 反正常驻，搬过去不增加
+  新的常驻成本。
+
 ## 刻意不配置的项
 
 - `tool-subagent.config.agentOptions` — 硬绑 `provider`/`model` 会架空 R2。
-- `tool-subagent.config.persona` — 会给所有子代理强行打同一角色，违反 R4。
+- `tool-subagent.config.persona` — 会给所有子代理强行打同一角色，违反 R4。