@gehennawu/dsh-service 2.0.6 → 2.0.8

package/index.js

@@ -20,6 +20,46 @@ import { createSessionsRoutes } from './session-routes.js'
 import { createQuotaRoutes } from './quota-routes.js'
 import { createSubagentRoutes } from './subagent-routes.js'
 import { createBackupRoutes } from './backup-routes.js'
+import { createModelConfigRoutes } from './model-config-routes.js'
+import { createProviderAvailability, installProviderAvailability } from './provider-availability.js'
+import { createWorkbenchStore, loadPiAiCatalog } from './model-workbench.js'
+import {
+  WORKBENCH_SIDECAR_VERSION,
+  applySuggestions,
+  applyUndo,
+  arbitrateModelSuggestions,
+  buildPiAiIndex,
+  abilityPatch,
+  consensusFields,
+  createFreshnessManager,
+  deriveKeyRefFor,
+  diffModelLists,
+  emptyWorkbenchSidecar,
+  fetchModelsProbe,
+  hostnameOf,
+  indexModelParamsDev,
+  isPrivateIpAddress,
+  loadModelParamsSnapshot,
+  loadWorkbenchSidecar,
+  modelParamsCandidates,
+  modelParamsDevEfforts,
+  modelPatchFromPiAi,
+  openRouterModelFacts,
+  openRouterVerifySource,
+  pickOpenRouterMatch,
+  modelsProbeLookup,
+  normalizeBaseURLForMatch,
+  parseModelListing,
+  probeBaseURLCheck,
+  profileFingerprint,
+  readLlmProfiles,
+  saveModelParamsSnapshot,
+  saveWorkbenchSidecar,
+  selfCheckModelsPatch,
+  suggestRouteId,
+  suggestionId,
+  undoPreviewModels,
+} from './model-workbench.js'
 import { collectPluginHealth, pluginCheckItem, restartPluginEntry } from './plugin-health.js'
 import {
   buildCliproxyAccountPlan as buildCliproxyAccountPlanAdapter,
@@ -88,6 +128,8 @@ const DEFAULT_FEATURE_SETTINGS = Object.freeze({
   // v1.8 新增：composer 模型按钮显示厂家/渠道图标（宽态加在模型名前，
   // 窄态替换官方默认图标；未适配渠道保留官方默认图标）。
   modelProviderIcons: true,
+  // v1.10 新增：模型配置工作台（供应商与模型 / 子代理路由），写路径经两段式确认。
+  modelCatalog: true,
 })
 /** 标记为「可热更新」的 Config 字段（0.1.7-alpha.1 的表单与原地热更新以此为准）。 */
 const volatileField = (schema) => (typeof schema?.extra === 'function' ? schema.extra('volatile', true) : schema)
@@ -238,6 +280,11 @@ const QUOTA_MIN_INTERVAL_MS = 15000
 const QUOTA_MANUAL_COOLDOWN_MS = 5000
 const QUOTA_BACKOFF_BASE_MS = 30000
 const QUOTA_BACKOFF_MAX_MS = 15 * 60 * 1000
+// 确定性失败矩阵：自动重试不会改变结果，只会白打上游（CPA 还会累计 fail2ban 失败次数、把 IP 打进 30 分钟封禁）。
+// 命中即把该 provider 转入「手动模式」——此后只认手动重试这一条路，直到一次成功落定或用户改配置/凭据。
+// 表外（network / network-transient / timeout / 5xx / upstream-error / cancelled）是可能自愈的瞬时失败，
+// 保留指数退避自动重试。与 QUOTA_UNUSABLE_ERROR_RE 无关：这里只决定「还要不要自动打上游」。
+const QUOTA_MANUAL_ONLY_ERROR_RE = /^(credential-missing|credential-rejected|credentials-unavailable|no-base-url|no-subscription|host-not-pinned|mgmt-disabled|mgmt-banned|transport-unavailable|bad-payload|http-status:4\d\d|upstream-status:4\d\d)/i
 const QUOTA_CONFIG_STAT_TTL_MS = 5000
 const QUOTA_MAX_CONCURRENCY = 4
 const MAX_QUOTA_RESPONSE_BYTES = 1024 * 1024
@@ -601,9 +648,42 @@ function backupMetadataPayload(version, createdAt) {
     dshVersion: typeof version === 'string' ? version : '',
     pluginVersion: typeof pluginVersion === 'string' ? pluginVersion : '',
     createdAt: createdAt instanceof Date ? createdAt.toISOString() : new Date().toISOString(),
+    // 来源平台/架构（v0.47）：跨设备恢复时用来提示「这份快照出自哪个系统」。
+    // 与其它字段一样全部来自宿主常量，浏览器不参与；旧版插件读新归档时忽略这两个键。
+    platform: process.platform,
+    arch: process.arch,
   }, null, 2)}\n`, 'utf8')
 }
 
+// 目标平台的事实来源：执行恢复的那台机器的进程平台。声明式覆盖只服务测试与验证
+// （与 DSH_SERVICE_RUNTIME_ENV 同规），它只能影响只读提示与错误措辞，**不放宽**任何
+// 归档校验——否则「声明成 Linux」就成了把 Windows 非法文件名塞进写入路径的后门。
+function readBackupPlatform() {
+  const declared = process.env.DSH_SERVICE_BACKUP_PLATFORM
+  return typeof declared === 'string' && /^[a-z][a-z0-9_-]{0,15}$/.test(declared) ? declared : process.platform
+}
+
+// 目标机可用于承载恢复内容的 profile 名清单（宿主侧 readdir 事实，浏览器只在该清单内
+// 选名字）。名字口径与备份侧白名单同规：单一路径段、长度封顶。
+async function listLocalProfiles(dshHome) {
+  const root = join(dshHome, 'profiles')
+  let entries
+  try { entries = await readdir(root, { withFileTypes: true }) } catch (error) {
+    if (error?.code === 'ENOENT') return []
+    throw error
+  }
+  const profiles = []
+  for (const entry of entries) {
+    if (!entry.isDirectory() || !/^[A-Za-z0-9._-]{1,64}$/.test(entry.name) || entry.name === '.' || entry.name === '..') continue
+    profiles.push({
+      name: entry.name,
+      hasManifest: await pathExists(join(root, entry.name, 'package.json')),
+      hasPatch: await pathExists(join(root, entry.name, 'cordis.patch.yml')),
+    })
+  }
+  return profiles.sort((a, b) => a.name.localeCompare(b.name))
+}
+
 // 从归档名解析版本段（列表展示用，零 I/O）。只有 Host 自己签发的名字会走到这里，
 // 但正则本身也保证不会把任意文本当版本号回给浏览器。
 function backupVersionFromName(name) {
@@ -2241,8 +2321,9 @@ async function requestQuotaJson(endpoint, options = {}) {
 }
 
 // 每 provider 节流状态机（内存态，重启清零）。一切来源共用同一判定，优先序：
-// 单飞去重 > 失败指数退避（30s×2 封顶 15min）> 成功 TTL 60s > 最小上游间隔 15s（与 attempt()
-// 判定序一致）；now 由调用方注入，测试可推进假时钟。
+// 单飞去重 > 确定性失败后的手动模式 > 失败指数退避（30s×2 封顶 15min）> 成功 TTL 60s >
+// 最小上游间隔 15s（与 attempt() 判定序一致）；手动模式只由「一次成功落定」或用户写操作
+// （resetGates）解除，中途不会因时间流逝自动恢复。now 由调用方注入，测试可推进假时钟。
 function createQuotaThrottle(options = {}) {
   const successTtlMs = options.successTtlMs ?? QUOTA_SUCCESS_TTL_MS
   const minIntervalMs = options.minIntervalMs ?? QUOTA_MIN_INTERVAL_MS
@@ -2253,7 +2334,7 @@ function createQuotaThrottle(options = {}) {
   const entryOf = (provider) => {
     let entry = entries.get(provider)
     if (entry === undefined) {
-      entry = { lastSuccessAt: 0, lastUpstreamAt: 0, lastManualAt: 0, backoffUntil: 0, failures: 0, inflight: false, windows: undefined, fetchedAt: 0, lastError: undefined, lastErrorDetail: undefined, lastErrorEndpoint: undefined, lastErrorAccount: undefined }
+      entry = { lastSuccessAt: 0, lastUpstreamAt: 0, lastManualAt: 0, backoffUntil: 0, failures: 0, inflight: false, manualOnly: false, windows: undefined, fetchedAt: 0, lastError: undefined, lastErrorDetail: undefined, lastErrorEndpoint: undefined, lastErrorAccount: undefined }
       entries.set(provider, entry)
     }
     return entry
@@ -2273,7 +2354,7 @@ function createQuotaThrottle(options = {}) {
         lastErrorAccount: entry.lastErrorAccount,
       }
     },
-    /** 只读快照：缓存窗口、是否刷新中、下次允许发起上游的时间（null=进行中未知）。 */
+    /** 只读快照：缓存窗口、是否刷新中、是否已转手动、下次允许自动发起上游的时间（null=进行中/手动模式）。 */
     view(provider, now = Date.now()) {
       const entry = entryOf(provider)
       return {
@@ -2284,21 +2365,28 @@ function createQuotaThrottle(options = {}) {
         lastErrorDetail: entry.lastErrorDetail,
         lastErrorEndpoint: entry.lastErrorEndpoint,
         lastErrorAccount: entry.lastErrorAccount,
-        nextAllowedAt: entry.inflight
+        // 手动模式：自动路径一律拒发，故没有「下次自动重试时刻」可报（客户端据此换文案）。
+        manualOnly: entry.manualOnly === true,
+        nextAllowedAt: entry.inflight || entry.manualOnly
           ? null
           : Math.max(entry.backoffUntil, entry.lastUpstreamAt + minIntervalMs, entry.lastSuccessAt + successTtlMs),
       }
     },
-    /** 申请一次上游调用。允许则置单飞并返回 ok；拒绝时给出稳定原因与 nextAllowedAt（优先序：单飞 > 退避 > 成功 TTL > 最小间隔）。 */
-    attempt(provider, now = Date.now()) {
+    /** 申请一次上游调用。允许则置单飞并返回 ok；拒绝时给出稳定原因与 nextAllowedAt
+     * （优先序：单飞 > 手动模式 > 退避 > 成功 TTL > 最小间隔）。
+     * options.manual=true 是「用户手动连接」：跳过手动模式与三道时间闸，只受 force() 的冷却约束。 */
+    attempt(provider, now = Date.now(), options = {}) {
       const entry = entryOf(provider)
       if (entry.inflight) return { ok: false, reason: 'inflight', nextAllowedAt: null }
-      if (now < entry.backoffUntil) return { ok: false, reason: 'backoff', nextAllowedAt: entry.backoffUntil }
-      if (now - entry.lastSuccessAt < successTtlMs) {
-        return { ok: false, reason: 'fresh', nextAllowedAt: entry.lastSuccessAt + successTtlMs }
-      }
-      if (entry.lastUpstreamAt > 0 && now - entry.lastUpstreamAt < minIntervalMs) {
-        return { ok: false, reason: 'interval', nextAllowedAt: entry.lastUpstreamAt + minIntervalMs }
+      if (options.manual !== true) {
+        if (entry.manualOnly) return { ok: false, reason: 'manual-only', nextAllowedAt: null }
+        if (now < entry.backoffUntil) return { ok: false, reason: 'backoff', nextAllowedAt: entry.backoffUntil }
+        if (now - entry.lastSuccessAt < successTtlMs) {
+          return { ok: false, reason: 'fresh', nextAllowedAt: entry.lastSuccessAt + successTtlMs }
+        }
+        if (entry.lastUpstreamAt > 0 && now - entry.lastUpstreamAt < minIntervalMs) {
+          return { ok: false, reason: 'interval', nextAllowedAt: entry.lastUpstreamAt + minIntervalMs }
+        }
       }
       entry.inflight = true
       entry.lastUpstreamAt = now
@@ -2312,6 +2400,8 @@ function createQuotaThrottle(options = {}) {
         entry.lastSuccessAt = now
         entry.failures = 0
         entry.backoffUntil = 0
+        // 唯一解锁点（除 resetGates 的用户写操作外）：一次成功落定即回归自动模式。
+        entry.manualOnly = false
         entry.windows = outcome.windows ?? []
         entry.fetchedAt = now
         entry.lastError = undefined
@@ -2324,27 +2414,29 @@ function createQuotaThrottle(options = {}) {
       const delay = Math.min(backoffBaseMs * 2 ** (entry.failures - 1), backoffMaxMs)
       entry.backoffUntil = now + delay
       entry.lastError = typeof outcome.code === 'string' ? outcome.code : 'unknown'
+      // 确定性失败（换凭据/改配置才可能恢复）→ 转手动模式：自动快照不再重打上游。
+      // 瞬时失败保持自动退避，等下一轮快照接续。
+      if (QUOTA_MANUAL_ONLY_ERROR_RE.test(entry.lastError)) entry.manualOnly = true
       entry.lastErrorDetail = typeof outcome.detail === 'string' && outcome.detail !== '' ? outcome.detail : undefined
       // 渠道特有事实（多候选链的失败端点 / CPA 的失败账号）：只作附注，与错误码、上游原话分开存。
       entry.lastErrorEndpoint = sanitizeQuotaErrorDetail(outcome.endpoint)
       entry.lastErrorAccount = sanitizeQuotaErrorDetail(outcome.account)
     },
-    /** 手动刷新：允许绕过成功 TTL，但保留失败退避，并有不可绕过的硬冷却；单飞仍优先。 */
+    /** 手动重试的准入判定：只受单飞与不可绕过的硬冷却约束——手动模式与失败退避都由调用方的
+     * attempt({ manual: true }) 跳过（用户明确要求「仅可手动连接报错的渠道」，手动不该比自动更受限）。 */
     force(provider, now = Date.now()) {
       const entry = entryOf(provider)
       if (entry.inflight) return { ok: false, reason: 'inflight', nextAllowedAt: null }
-      if (now < entry.backoffUntil) return { ok: false, reason: 'backoff', nextAllowedAt: entry.backoffUntil }
       if (entry.lastManualAt > 0 && now - entry.lastManualAt < manualCooldownMs) {
         return { ok: false, reason: 'cooldown', nextAllowedAt: entry.lastManualAt + manualCooldownMs }
       }
       entry.lastManualAt = now
-      entry.lastSuccessAt = 0
-      entry.lastUpstreamAt = 0
       return { ok: true }
     },
     // 凭据/适配变更后的闸门重置（保存 key/Cookie、改适配类型时调用）：旧失败是旧配置造成的，
     // 填完就该立刻重试，不傻等最长 15min 的指数退避（GUI 反馈点名）；单飞在途不抢占。
-    // 与 force() 的区别：本方法只由宿主写入口触发，可以连硬冷却一并清掉。
+    // 这也是手动模式唯一的「非成功解锁」路径——保存凭据/改适配本身就是用户的手动动作，
+    // 且凭据类错误的「手动连接」正是保存后立刻重试。与 force() 的区别：连硬冷却一并清掉。
     resetGates(provider) {
       const entry = entryOf(provider)
       if (entry.inflight) return { ok: false, reason: 'inflight', nextAllowedAt: null }
@@ -2353,6 +2445,7 @@ function createQuotaThrottle(options = {}) {
       entry.lastManualAt = 0
       entry.lastUpstreamAt = 0
       entry.lastSuccessAt = 0
+      entry.manualOnly = false
       return { ok: true }
     },
     prune(activeProviders) {
@@ -4185,7 +4278,7 @@ function subagentRouteCandidates(request, config, options = {}) {
 
 function resolveSubagentInjection(request, config, options = {}) {
   for (const candidate of subagentRouteCandidates(request, config, options)) {
-    if (options.isRoutable !== undefined && !options.isRoutable(candidate.provider)) {
+    if (options.isRoutable !== undefined && !options.isRoutable(candidate.provider, candidate.model)) {
       options.note?.(`${candidate.provider}/${candidate.model} skipped (not routable)`)
       continue
     }
@@ -5270,6 +5363,11 @@ function apply(ctx, featureConfig) {
     runtimeEnv,
     previousInstanceId: instanceId,
     scheduleRestart: () => scheduleRestart(ctx, runtimeEnv),
+    // 目标平台与目标 profile 清单都由宿主侧事实提供：恢复发生在哪台机器上，
+    // 就以哪台机器的进程平台与 profiles 目录为准，浏览器不参与判定。
+    platform: readBackupPlatform(),
+    // 工厂只要名字清单（映射校验用）；端点另取带 hasManifest/hasPatch 的完整形态。
+    listProfiles: async () => (await listLocalProfiles(dshHome)).map((profile) => profile.name),
   })
   // 会话管理（v0.35）：删除两段式计划（planId → {id, path, bytes}），TTL 过期自动驱逐。
   const sessionDeletePlans = new Map()
@@ -5292,6 +5390,18 @@ function apply(ctx, featureConfig) {
   // 版本一变即自然失效，不必手工清理。
   const releaseNotesCache = new Map()
   const quotaThrottle = createQuotaThrottle()
+  // 模型配置工作台（v1.10）：侧车仓库持有写前快照/绑定/验证摘要/人工恢复态。
+  // 写串行化在仓库内部；目录随 DSH 升级才变，进程内缓存一次。
+  const modelProfileDir = ctx.get('profileContext')?.dir ?? process.env.DSH_PROFILE_DIR
+  const workbenchStore = createWorkbenchStore(typeof modelProfileDir === 'string' && modelProfileDir !== '' ? modelProfileDir : join(dshHome, 'dsh-service-model-config', 'legacy'))
+  const providerAvailability = createProviderAvailability(workbenchStore)
+  const notifyProviderAvailability = () => ctx.emit('llm/adapters-updated')
+  ctx.inject(['llm'], (scope) => {
+    const llm = scope.get('llm') ?? ctx.get('llm')
+    if (!llm) return
+    const dispose = installProviderAvailability(llm, providerAvailability, notifyProviderAvailability)
+    scope.effect(() => dispose)
+  })
   // 技能管理（v0.22）：侧车索引缓存 + 批量补全状态。批量随 Fiber 销毁中止。
   // 可重赋值的 let 一律以 { current } 箱体跨模块传递：端点工厂解构是值快照，
   // let 重赋值不会穿过解构边界；箱体靠对象身份保持活绑定。
@@ -5369,13 +5479,15 @@ function apply(ctx, featureConfig) {
   const subagentSeamRef = { current: false }
   // 子代理派发记录环（v1.2）：apply 级持有，RPC 端点与 seam 共同读写（seam 写入、端点只读）。
   const dispatchRing = { order: [], byChild: new Map() }
-  // 只包装宿主 subagents 注册表的两个入口（start / startContinuable，spawn/fork/acp 全走这
-  // 两个口）：未显式指定模型的派生按配置注入 agentOptions，其余原样透传。Fiber 销毁还原
-  // 原方法——包装挂在服务实例上，disposer 期间新派生恢复原生行为。
+  // 按宿主能力包装子代理启动入口：新版 startActivation，旧版 start/startContinuable。
+  // 未显式指定模型的派生按配置注入 agentOptions，其余原样透传；Fiber 销毁时还原原方法。
   ctx.inject(['subagents'], (scope) => {
     const subagents = scope.subagents
-    if (subagents === undefined || typeof subagents.start !== 'function' || typeof subagents.startContinuable !== 'function') return
-    const isRoutable = (provider) => {
+    const hasActivation = typeof subagents?.startActivation === 'function'
+    const hasLegacyStarts = typeof subagents?.start === 'function' && typeof subagents?.startContinuable === 'function'
+    if (!hasActivation && !hasLegacyStarts) return
+    const isRoutable = (provider, model) => {
+      if (model !== undefined && !providerAvailability.modelEnabled(provider, model)) return false
       const llm = ctx.get('llm')
       if (llm === undefined || typeof llm.listProviders !== 'function') return false
       try {
@@ -5426,6 +5538,8 @@ function apply(ctx, featureConfig) {
       return quotaProviderUnusable(view) === false
     }
     const applyInjection = (request) => {
+      const explicit = request?.agentOptions?.provider
+      if (typeof explicit === 'string' && explicit) providerAvailability.assertEnabled(explicit, request?.agentOptions?.model)
       // 功能关闭：零记录（完全静默，与原生行为一致）——记录是 subagentRoute 功能的一部分。
       if (!featureEnabled('subagentRoute')) return { request, dispatch: undefined }
       const routeOptions = {
@@ -5436,7 +5550,7 @@ function apply(ctx, featureConfig) {
       }
       const injected = resolveSubagentInjection(request, subagentRouteRef.current, routeOptions)
       const routeCandidates = injected === undefined ? [] : subagentRouteCandidates(request, subagentRouteRef.current, routeOptions)
-        .filter((candidate) => isRoutable(candidate.provider) && isQuotaHealthy(candidate.provider) !== false)
+        .filter((candidate) => isRoutable(candidate.provider, candidate.model) && isQuotaHealthy(candidate.provider) !== false)
         .filter((candidate, index, candidates) => candidates.findIndex((item) => item.provider === candidate.provider && item.model === candidate.model) === index)
       const injectedIndex = routeCandidates.findIndex((candidate) => candidate.provider === injected?.provider && candidate.model === injected?.model)
       const eligibleRoutes = injectedIndex < 0 ? [] : routeCandidates.slice(injectedIndex)
@@ -5464,15 +5578,27 @@ function apply(ctx, featureConfig) {
       if (dispatch === undefined) return work()
       return pendingDispatchStorage.run(dispatch, work)
     }
+    const originalStartActivation = subagents.startActivation
     const originalStart = subagents.start
     const originalStartContinuable = subagents.startContinuable
-    subagents.start = (name, request) => {
-      const { request: decorated, dispatch } = applyInjection(request)
-      return runWithDispatch(dispatch, () => originalStart.call(subagents, name, decorated))
-    }
-    subagents.startContinuable = (spec) => {
-      const { request: decorated, dispatch } = applyInjection(spec.request)
-      return runWithDispatch(dispatch, () => originalStartContinuable.call(subagents, { ...spec, request: decorated }))
+    if (hasActivation) {
+      subagents.startActivation = async (spec) => {
+        await providerAvailability.loading
+        const { request: decorated, dispatch } = applyInjection(spec.request)
+        if (dispatch === undefined) return originalStartActivation.call(subagents, spec)
+        return runWithDispatch(dispatch, () => originalStartActivation.call(subagents, { ...spec, request: decorated }))
+      }
+    } else {
+      subagents.start = async (name, request) => {
+        await providerAvailability.loading
+        const { request: decorated, dispatch } = applyInjection(request)
+        return runWithDispatch(dispatch, () => originalStart.call(subagents, name, decorated))
+      }
+      subagents.startContinuable = async (spec) => {
+        await providerAvailability.loading
+        const { request: decorated, dispatch } = applyInjection(spec.request)
+        return runWithDispatch(dispatch, () => originalStartContinuable.call(subagents, { ...spec, request: decorated }))
+      }
     }
     // agent/created（0.1.6 起由 announce await ctx.serial 异步串行派发；0.1.5 及之前同步派发在创建栈内）：
     // 记录派发路由 + 绑定等级（仅当确有非空等级）。监听器内部全 try/catch 严格保证绝不抛错，
@@ -5552,8 +5678,11 @@ function apply(ctx, featureConfig) {
     }, { prepend: true }) : null
     subagentSeamRef.current = true
     scope.effect(() => () => {
-      subagents.start = originalStart
-      subagents.startContinuable = originalStartContinuable
+      if (hasActivation) subagents.startActivation = originalStartActivation
+      else {
+        subagents.start = originalStart
+        subagents.startContinuable = originalStartContinuable
+      }
       if (typeof disposeCreated === 'function') disposeCreated()
       if (typeof disposeRequest === 'function') disposeRequest()
       if (typeof disposeRequestError === 'function') disposeRequestError()
@@ -5665,8 +5794,10 @@ function apply(ctx, featureConfig) {
   }
   // 远端额度：后台补拉一次。index.js 只提供节流/生命周期/受控传输 context；所有方言、
   // 端点、凭据策略与编排都通过同一 Adapter interface 执行，不再区分 parser/fetcher 形状。
-  const kickQuotaRefresh = (profile, adapter, config) => {
-    const decision = quotaThrottle.attempt(profile.name)
+  // options.manual=true 只由 quota-refresh（手动重试/连接）传入：跳过手动模式与三道时间闸，
+  // 是「确定性失败转手动」之后唯一还能打上游的路径。
+  const kickQuotaRefresh = (profile, adapter, config, options = {}) => {
+    const decision = quotaThrottle.attempt(profile.name, Date.now(), { manual: options.manual === true })
     if (!decision.ok) return
     const queued = enqueueQuotaWork(async () => {
       const controller = new AbortController()
@@ -6130,8 +6261,29 @@ function apply(ctx, featureConfig) {
     createSkillsRoutes({ ctx, describeJobs, dshHome, makeDescribeJobLogger, registerSkillCall, serializeSkillsIndexWrite, skillFileCache, skillsActiveControllers, skillsBatchRef, skillsIndexRef, SKILL_DESCRIPTION_MAX_CHARS, SKILL_USAGE_MAX_CHARS, bodyHashOf, describeSkillDraft, evaluateSkillFile, fixLegacySkillInvocationKeys, listSkillModels, locateSkillFrontmatter, mutateSkillEntryById, name, normalizeSkillDescribeLang, publicSkillEntry, rpcTechnicalFailure, sanitizeSkillDraftText, scanSkillEntries, selectSkillBatchCandidates, setSkillInvocationKey }),
     createSessionsRoutes({ ctx, dshHome, sessionBytesCache, sessionDeletePlans, sessionTitleCache, sessionTitlesReady, sessionViewCache, SESSIONS_BYTES_MAX_IDS, SESSIONS_DELETE_PLAN_TTL_MS, SESSIONS_VIEW_PAGE_SIZE, listSessionsForManage, loadDeletedSessions, name, resolveSessionBytesForIds, resolveSessionForDelete, rpcFailure, rpcTechnicalFailure, saveDeletedSessions, searchSessionsContent, sessionExists, sessionIsLive, viewSessionPage }),
     createQuotaRoutes({ ctx, kickQuotaRefresh, quotaThrottle, refreshQuotaConfigCache, serializeQuotaConfigWrite, MAX_QUOTA_PROVIDER_NAME, MAX_QUOTA_RESET_CARDS, MAX_QUOTA_RESET_CARDS_PER_PROVIDER, MAX_QUOTA_RESET_CARD_ACCOUNT, canonicalResetCardExpiresAt, QUOTA_ADAPTER_BY_KIND, name, quotaCredentialConfigured, quotaCredentialEndpoint, quotaCredentialHintNames, readQuotaProfiles, resolveQuotaKind, rpcTechnicalFailure }),
-    createSubagentRoutes({ ctx, dispatchRing, serializeSubagentRouteWrite, subagentRouteRef, subagentRouteLoadPromise, subagentSeamRef, MAX_SUBAGENT_ROUTE_FIELD, SUBAGENT_ROUTE_FALLBACK_MAX, SUBAGENT_ROUTE_MODES, listSubagentDispatches, listSubagentModels, rpcTechnicalFailure }),
-    createBackupRoutes({ ctx, backupIntegrity, backupProgress, clearBackupProgress, downloadTokens, dshHome, dshVersion, setBackupProgress, withBackupLock, backupNameVersionSuffix, createBackup, deleteBackup, exportBackup, formatBackupTimestamp, importBackup, listBackups, name, rpcFailure }),
+    createSubagentRoutes({ ctx, providerAvailability, dispatchRing, serializeSubagentRouteWrite, subagentRouteRef, subagentRouteLoadPromise, subagentSeamRef, MAX_SUBAGENT_ROUTE_FIELD, SUBAGENT_ROUTE_FALLBACK_MAX, SUBAGENT_ROUTE_MODES, listSubagentDispatches, listSubagentModels, rpcTechnicalFailure }),
+    createBackupRoutes({ ctx, backupIntegrity, backupProgress, clearBackupProgress, downloadTokens, dshHome, dshVersion, setBackupProgress, withBackupLock, backupNameVersionSuffix, createBackup, deleteBackup, exportBackup, formatBackupTimestamp, importBackup, listBackups, listLocalProfiles, name, rpcFailure }),
+    createModelConfigRoutes({
+      ctx,
+      loadPiCatalog: loadPiAiCatalog,
+      workbenchStore,
+      providerAvailability,
+      notifyProviderAvailability,
+      // 移除守卫的只读引用面：子代理路由配置 + 官方默认模型选择（都是宿主侧事实，浏览器不参与）。
+      loadSubagentRoute: async () => {
+        await subagentRouteLoadPromise
+        return subagentRouteRef.current
+      },
+      loadAgentDefaultModelSelection: () => {
+        const service = ctx.get('agentDefaultModel')
+        if (service === undefined || typeof service.currentSelection !== 'function') return undefined
+        return service.currentSelection()
+      },
+      writeSubagentRoute: serializeSubagentRouteWrite,
+      listSubagentModels,
+      dshHome,
+      pluginVersion,
+    }),
   ])
 
   const dispatchEndpoint = createRpcDispatcher({ endpoints: rpcEndpoints, featureEnabled, logger: ctx.logger })
@@ -6241,6 +6393,45 @@ export {
   saveUnifiedConfig,
   updateUnifiedConfigSection,
   sanitizeSettingsNavConfig,
+  // 模型配置工作台（v1.10）：领域纯函数经 index.js 再导出，测试从 '../index.js' 导入的
+  // 既有约定保持不变（旧分支 test/workbench.test.js 即此形状）。
+  WORKBENCH_SIDECAR_VERSION,
+  applySuggestions,
+  applyUndo,
+  arbitrateModelSuggestions,
+  buildPiAiIndex,
+  createWorkbenchStore,
+  deriveKeyRefFor,
+  diffModelLists,
+  emptyWorkbenchSidecar,
+  fetchModelsProbe,
+  hostnameOf,
+  isPrivateIpAddress,
+  loadWorkbenchSidecar,
+  modelPatchFromPiAi,
+  modelsProbeLookup,
+  normalizeBaseURLForMatch,
+  parseModelListing,
+  probeBaseURLCheck,
+  profileFingerprint,
+  readLlmProfiles,
+  saveWorkbenchSidecar,
+  selfCheckModelsPatch,
+  suggestRouteId,
+  suggestionId,
+  undoPreviewModels,
+  // P3.5 补充源（modelparams.dev）与多源共识：同样经 index.js 再导出供测试直达。
+  abilityPatch,
+  consensusFields,
+  createFreshnessManager,
+  indexModelParamsDev,
+  loadModelParamsSnapshot,
+  modelParamsCandidates,
+  modelParamsDevEfforts,
+  openRouterModelFacts,
+  openRouterVerifySource,
+  pickOpenRouterMatch,
+  saveModelParamsSnapshot,
 }
 // 插件 Config：0.1.7-alpha.1 起宿主配置面由 Profile 的插件 Config 托管；声明它即可让
 // 功能开关出现在插件管理页，并让宿主经 `loader/volatile-update` 热更新（无需重启）。