@lmzhen/dsh-evolution-commands 0.16.1 → 0.17.0

package/lib/index.js

@@ -2,11 +2,296 @@ import { createRequire } from "node:module";
 import z from "@deepseek-ai/schemastery";
 import { effectiveSessionPolicy } from "@lmzhen/dsh-evolution-approval";
 import { createUserMessage } from "@deepseek-ai/dsh-llm";
-import { DEFAULT_SKILL_LIMITS, MAX_TIMER_DELAY_MS, PARAM_EXPOSURE, PARAM_GROUP_LABELS, PARAM_NAMESPACES, appendEvolutionEvent, assertSkillsRootAliasRetired, buildLearnPrompt, canonicalWriteId, clampedNumber, composePresetComposition, elapsedSince, errorText, eventsFile, evolutionRoot, isDeprecatedParamId, isMissingPath, newSkillLibrary, partitionVersions, policyStageLimits, resolveParamId, resolveRootConfig, scopedProbeReport } from "@lmzhen/dsh-evolution-core";
+import { DEFAULT_SKILL_LIMITS, MAX_TIMER_DELAY_MS, PARAM_EXPOSURE, PARAM_GROUP_LABELS, appendEvolutionEvent, applyNamespaceMigration, assertSkillsRootAliasRetired, buildLearnPrompt, canonicalWriteId, clampedNumber, classifyNamespaceMigration, composePresetEntry, elapsedSince, errorText, eventsFile, evolutionRoot, isDeprecatedParamId, isMissingPath, mergePresetRow, newSkillLibrary, paramSettingsId, partitionVersions, planNamespaceMigration, policyStageLimits, presetPatchText, presetRowBlock, presetRowBody, presetRowId, resolveBasePresetPatch, resolveParamId, resolveRootConfig, scopedProbeReport } from "@lmzhen/dsh-evolution-core";
 import { buildEnrichment, buildMaintainFacts, runMaintain, snapshotFromLibrary } from "@lmzhen/dsh-evolution-maintenance";
-import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { copyFileSync, existsSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
+//#region lib/types/migration.js
+/**
+* G3 (caller half): find the legacy settings document and run the namespace migration.
+*
+* The platform's own one-time import knows only its private table of entries, so a family
+* section left in the document only produces a warn there — the values stay in the file the
+* import renamed. This module reads that file (the renamed one first, a not-yet-imported
+* `settings.yaml` second), plans with core's pure planner, and merges through the platform's
+* own write. Everything it touches is injected, so a spec drives it without a host.
+* @module @lmzhen/dsh-evolution-commands/migration
+*/
+/**
+* The legacy document names the platform leaves behind, in read order.
+* @param home - the profile home the document sits in.
+* @returns both candidate paths, the renamed import first.
+*/
+function legacySettingsPaths(home) {
+	return [join(home, "settings.yaml.imported"), join(home, "settings.yaml")];
+}
+/** Nothing to do: no document, or no settings seat to write through. */
+const NOTHING = {
+	source: void 0,
+	plan: void 0,
+	report: void 0
+};
+/**
+* Read the first legacy document that exists and merge what it holds.
+*
+* The write goes through the platform's own `settings.update`, so the merge semantics, the
+* revision fence and the row's schema validation are the platform's — a row whose schema
+* refuses a key refuses the whole patch, which is why the planner refuses unknown keys
+* before this runs.
+* @param run - the home, the reader, the settings seat and the warning sink.
+* @returns the source file, its plan, and what the run did (all undefined when there was
+*   nothing to read or nowhere to write).
+*/
+async function runNamespaceMigration(run) {
+	const settings = run.settings;
+	if (settings === void 0) return NOTHING;
+	const read = (rowId) => settings.describe?.({ redactSecrets: false }).find((entry) => entry.ns === rowId);
+	const update = async (rowId, patch) => {
+		if (settings.update === void 0) return;
+		await settings.update(rowId, patch);
+	};
+	if (settings.describe === void 0 || settings.update === void 0) return NOTHING;
+	for (const source of legacySettingsPaths(run.home)) {
+		const text = await run.io.readText(source);
+		if (text === null) continue;
+		const plan = planNamespaceMigration(text);
+		if (plan.entries.length === 0) return {
+			source,
+			plan,
+			report: void 0
+		};
+		return {
+			source,
+			plan,
+			report: await applyNamespaceMigration(plan, {
+				read,
+				update,
+				warn: run.warn
+			})
+		};
+	}
+	return NOTHING;
+}
+/**
+* Read the legacy document and report what is still unmigrated.
+*
+* Read-only by construction: the answer comes from the pure classifier, never from the
+* applier, so a doctor run cannot write. `runNamespaceMigration` and this read the SAME
+* decision, which is what keeps the report and the next run's outcome from disagreeing.
+* @param run - the home, the reader, the settings seat.
+* @returns the state, or undefined when there is no legacy document or no settings seat.
+*/
+async function readLegacyDocumentState(run) {
+	const settings = run.settings;
+	if (settings?.describe === void 0) return void 0;
+	for (const source of legacySettingsPaths(run.home)) {
+		const text = await run.io.readText(source);
+		if (text === null) continue;
+		const plan = planNamespaceMigration(text);
+		const read = (rowId) => settings.describe?.({ redactSecrets: false }).find((entry) => entry.ns === rowId);
+		const decided = classifyNamespaceMigration(plan, read);
+		return {
+			source,
+			sections: plan.entries.length,
+			pending: decided.write.flatMap((row) => Object.keys(row.patch).map((key) => row.rowId + "." + key)),
+			settled: [...decided.unchanged.map((entry) => entry.rowId + "." + entry.key), ...decided.conflicts.map((entry) => entry.rowId + "." + entry.key)]
+		};
+	}
+}
+/**
+* Run the migration from a plugin context: probe the settings seat, the profile home and the
+* IO seam, then delegate to {@link runNamespaceMigration}.
+*
+* The command reports `problem` as its own error text; a boot-time caller skips instead — the
+* point of naming the missing prerequisite rather than throwing is that both readers can act.
+* @param host - the context (services + logger).
+* @returns the outcome, or the prerequisite that is absent.
+*/
+async function migrateFromContext(host) {
+	const settings = host.get("settings");
+	if (settings?.update === void 0 || settings.describe === void 0) return {
+		ok: false,
+		problem: "settings"
+	};
+	const profile = host.get("profileContext");
+	const home = typeof profile?.home === "string" ? profile.home : "";
+	if (home === "") return {
+		ok: false,
+		problem: "home"
+	};
+	const io = host.get("evolutionIo")?.provider?.();
+	if (io === void 0) return {
+		ok: false,
+		problem: "io"
+	};
+	return {
+		ok: true,
+		outcome: await runNamespaceMigration({
+			home,
+			io,
+			settings,
+			warn: (message) => {
+				host.logger.warn(message);
+			}
+		})
+	};
+}
+/**
+* Render one outcome for the command surface.
+* @param outcome - the run's result.
+* @returns the report text (Chinese copy, the family's user-facing language).
+*/
+function renderNamespaceMigration(outcome) {
+	if (outcome.source === void 0) return "迁移：没有找到旧设置文档（settings.yaml.imported / settings.yaml），无需迁移。";
+	const report = outcome.report;
+	if (report === void 0) return "迁移：" + outcome.source + " 里没有家族的旧分区，无需迁移。";
+	const rows = report.written.map((row) => `${row.rowId}:${row.keys.join("/")}`).join("；");
+	const kept = report.conflicts.map((conflict) => `${conflict.rowId}.${conflict.key}`).join("、");
+	const skipped = report.skipped.map((skip) => `${skip.namespace}.${skip.key}`).join("、");
+	return [
+		`迁移源：${outcome.source}`,
+		`写入：${report.written.length} 行${rows === "" ? "" : `（${rows}）`}`,
+		`已一致：${report.unchanged.length} 个键（值相同，未写入）`,
+		`保留现值：${report.conflicts.length} 个键${kept === "" ? "" : `（${kept}）`}`,
+		`未迁移：${report.skipped.length} 个键${skipped === "" ? "" : `（${skipped}）`}`
+	].join("\n");
+}
+//#endregion
+//#region lib/types/platform-view.js
+/**
+* G5: the platform's own view of the RUNNING profile, read through the services the platform
+* mounts — `pluginManager` (bundles, plugin rows), `configEditor` (inherited vs override) and
+* `pluginInventory` (live rows, agent presets).
+*
+* Read structurally on purpose: the family declares no dependency edge into the platform's
+* management packages, because a plane that does not mount them must render a named line, not
+* fail to load. Every reader answers `undefined` for an absent surface; the caller says what
+* that means, and no caller may re-derive the same facts by scanning the profile off disk — one
+* fact has one home.
+* @module @lmzhen/dsh-evolution-commands/platform-view
+*/
+/**
+* Call one surface, awaiting it, and require an array back.
+* @param read - the call, or undefined when the member is absent.
+* @returns the array, or undefined when the member is absent, threw, or answered something else.
+*/
+async function arrayOf(read) {
+	if (read === void 0) return void 0;
+	try {
+		const value = await read();
+		return Array.isArray(value) ? value : void 0;
+	} catch {
+		return;
+	}
+}
+/**
+* Call one surface, awaiting it, and require an object back (the inventory answers one).
+* @param read - the call, or undefined when the member is absent.
+* @returns the object, or undefined when the member is absent, threw, or answered an array.
+*/
+async function objectOf(read) {
+	if (read === void 0) return void 0;
+	try {
+		const value = await read();
+		return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+	} catch {
+		return;
+	}
+}
+/**
+* Read every platform surface the doctor uses.
+* @param ctx - the context (services), read structurally.
+* @returns the view; each member is undefined when its surface is not mounted or did not answer.
+*/
+async function readPlatformView(ctx) {
+	const manager = ctx.get("pluginManager");
+	const editor = ctx.get("configEditor");
+	const inventory = ctx.get("pluginInventory");
+	const listed = await objectOf(inventory?.list === void 0 ? void 0 : () => inventory.list?.());
+	const plugins = await arrayOf(manager?.listPlugins === void 0 ? void 0 : () => manager.listPlugins?.());
+	return {
+		bundles: await arrayOf(manager?.listBundles === void 0 ? void 0 : () => manager.listBundles?.()),
+		plugins: plugins ?? listed?.entries,
+		configuration: await arrayOf(editor?.configuration === void 0 ? void 0 : () => editor.configuration?.()),
+		presets: listed?.agentPresets
+	};
+}
+//#endregion
+//#region lib/types/preset-source.js
+/**
+* Where a family preset ROW is written, and where the platform base rows it composes come from.
+*
+* 0.2.x replaced the preset directory with an ordinary composition row
+* (`packages/preset/agent-preset/src/index.ts`), so a family preset is a row in the profile's own
+* patch layer — the file the platform's Web editor also saves preset edits to — and the base rows
+* are the bundle patch layer that declares the platform's preset
+* (`packages/bundle/web-app/presets/<base>.patch.yml`).
+*
+* Platform anchors: `packages/boot/app-boot/src/profile-context.ts` (the launcher-owned
+* `profileContext` — `{ name, dir, patchPath, startedBundles }` — this module reads) and
+* `packages/boot/app-boot/src/profile.ts` (`PROFILE_PATCH_FILENAME`).
+* @module
+*/
+/** The patch file name inside a profile directory (`packages/boot/app-boot/src/profile.ts`,
+* `PROFILE_PATCH_FILENAME`). */
+const PROFILE_PATCH_FILENAME$1 = "cordis.patch.yml";
+/**
+* The profile patch this process writes into, or undefined outside a profile.
+*
+* `profileContext` is registered by the profile launcher only
+* (`packages/boot/app-boot/src/profile-context.ts`); a bare library mount — the family's own specs,
+* or a host started without a profile — has none, and then there is no file for a row to live in.
+* @param ctx - the plugin context (a `get(name)` view is enough).
+* @returns the target, or undefined when no profile is mounted.
+*/
+function presetProfileTarget(ctx) {
+	const profile = ctx.get("profileContext");
+	if (profile === void 0 || typeof profile.dir !== "string" || profile.dir === "") return void 0;
+	return {
+		profile: profile.name,
+		profileDir: profile.dir,
+		patchPath: typeof profile.patchPath === "string" && profile.patchPath !== "" ? profile.patchPath : join(profile.dir, PROFILE_PATCH_FILENAME$1),
+		bundles: Array.isArray(profile.startedBundles) ? profile.startedBundles : []
+	};
+}
+/**
+* Resolve the platform base preset patch one `--base` composes.
+*
+* The module graph is probed FIRST: a desktop/Electron host resolves the bundle package inside
+* `app.asar`, where no file walk reaches — the platform packages are not on disk at all. The file
+* candidates (the target profile's own `node_modules`, then the unpacked Electron resource scope,
+* then a source checkout, then a global install, then `DSH_AGENT_PRESET_ROOT`) and the loud failure
+* live in core's `resolveBasePresetPatch`.
+* @param base - the base name from `evolution-agent/bases.json`.
+* @param target - the profile target, when one is mounted.
+* @returns the patch file's absolute path.
+*/
+function resolvePresetBasePatch(base, target) {
+	return resolveBasePresetPatch(base, {
+		root: process.env["DSH_AGENT_PRESET_ROOT"],
+		resolve: moduleGraphPath,
+		profileDir: target?.profileDir,
+		bundles: target?.bundles,
+		fromDir: dirname(fileURLToPath(import.meta.url))
+	});
+}
+/**
+* The module-graph probe used by {@link resolvePresetBasePatch}.
+*
+* `import.meta.resolve` is the only lookup an Electron main process performs asar-aware, so it is
+* the candidate that reaches the platform packages inside `resources/app.asar`. The function is
+* optional in the runtime and the probe is a candidate, not a requirement: core treats a throw as a
+* miss and continues down the file chain.
+* @param specifier - the package-relative specifier to resolve.
+* @returns the resolved file path.
+*/
+function moduleGraphPath(specifier) {
+	const resolve = import.meta.resolve;
+	if (typeof resolve !== "function") throw new Error("import.meta.resolve is unavailable in this runtime");
+	return fileURLToPath(resolve(specifier));
+}
+//#endregion
 //#region lib/types/doctor.js
 /**
 * `/evolution doctor` — read-only self-check (0.3.55, WB2).
@@ -31,51 +316,112 @@ const EVOLUTION_BUNDLE_TAILS = new Set([
 	"dsh-evolution-preset"
 ]);
 /**
+* G5: which of the three family bundle forms a bundle-name list carries.
+* @param bundles - package names.
+* @returns one flag per form.
+*/
+function familyForms(bundles) {
+	return {
+		full: bundles.some((name) => tailOf(name) === "dsh-evolution-all"),
+		host: bundles.some((name) => tailOf(name) === "dsh-evolution-host"),
+		preset: bundles.some((name) => tailOf(name) === "dsh-evolution-preset")
+	};
+}
+/**
+* G5: the live Loader entry carrying one family row.
+* @param plugins - the platform's entry list.
+* @param rowId - the row id the family knows.
+* @returns the entry, or undefined when this runtime carries no such row.
+*/
+function familyRow(plugins, rowId) {
+	return plugins.find((entry) => entry.entryId === rowId || entry.entryId.endsWith(":" + rowId) || entry.moduleName === rowId);
+}
+/**
+* G5: the platform's own agent-preset verdicts.
+*
+* Only `broken` survives from the two candidates the design named. The other one — a row two
+* presets both declare — was measured on a real deployment and dropped: every platform base
+* composes the SAME base rows, so `persona` / `agent-instructions` / … are declared by every
+* preset in a perfectly healthy install, which buries the one case worth reporting (the family's
+* own bundle-vs-preset double mount, which the conflict matrix below already owns).
+* @param presets - the inventory's preset list, or undefined without that surface.
+* @returns one line per finding.
+*/
+function presetIssues(presets) {
+	if (presets === void 0) return [];
+	const issues = [];
+	for (const preset of presets) if (preset.broken !== void 0) issues.push(`agent preset \`${preset.id}\` is BROKEN (${preset.broken}) — the platform could not compose it`);
+	return issues;
+}
+/**
 * S4.3: the parameter-surface divergences a RUNNING deployment can show and the
 * build-time guards cannot. Three classes, each with its own move:
 *  - a user override (the effective value is no longer the deployment's),
 *  - a deprecated alias still written in a user section (writes refuse it),
 *  - a declared user-writable parameter whose owner publishes no user layer in
 *    this composition (the registry promises a face this deployment never mounts).
-* An unreadable settings surface is reported AS SUCH: silence would read as "no
-* divergences", which is the one claim this section exists to check.
-* @param ctx - the plugin context; the settings service is read optionally.
+* G5: the two layers and the live rows come from the platform (`configEditor.configuration()`,
+* `pluginManager.listPlugins()`); the registry side (which spellings are deprecated, which rows
+* declare an E3 parameter) stays the family's own table. A surface that is not mounted is
+* reported AS SUCH: silence would read as "no divergences", the one claim this section checks.
+* @param platform - the platform view.
 * @returns one readable line per divergence, empty when there is nothing to compare.
 */
-function paramDivergences(ctx) {
-	const provider = ctx.get("settings");
-	if (provider?.describe === void 0) return [];
-	let descriptors;
-	try {
-		descriptors = provider.describe({ redactSecrets: false });
-	} catch (error) {
-		return [`settings surface unreadable (${error instanceof Error ? error.message : String(error)}) — parameter divergences were NOT checked`];
-	}
+function paramDivergences(platform) {
+	if (platform.configuration === void 0) return ["the platform configuration surface (configEditor.configuration) is not mounted here — parameter divergences were NOT checked"];
 	const issues = [];
-	const registered = new Map(descriptors.map((descriptor) => [descriptor.ns, descriptor.user ?? {}]));
-	for (const [namespace, user] of registered) {
-		const keys = Object.keys(user);
-		if (keys.length > 0) {
-			const shown = keys.slice(0, 5).map((key) => `${key}=${JSON.stringify(user[key])}`);
-			const more = keys.length > shown.length ? ` and ${keys.length - shown.length} more` : "";
-			issues.push(`user override: ${namespace} sets ${keys.length} parameter(s) — ${shown.join(", ")}${more}`);
-		}
+	for (const row of platform.configuration) {
+		const override = asMapping(row.override);
+		if (override === void 0) continue;
+		const keys = Object.keys(override);
+		if (keys.length === 0) continue;
+		const entryId = row.entry.options?.id ?? row.entry.options?.name ?? "(unnamed entry)";
+		const shown = keys.slice(0, 5).map((key) => `${key}=${JSON.stringify(override[key])}`);
+		const more = keys.length > shown.length ? ` and ${keys.length - shown.length} more` : "";
+		issues.push(`user override: ${entryId} sets ${keys.length} parameter(s) — ${shown.join(", ")}${more}`);
 		for (const key of keys) {
 			if (!isDeprecatedParamId(key)) continue;
-			issues.push(`deprecated name: ${namespace} still writes "${key}" — write "${resolveParamId(key)}" instead (writes refuse the alias; it is removed in 0.7.0)`);
+			issues.push(`deprecated name: ${entryId} still writes "${key}" — write "${resolveParamId(key)}" instead (writes refuse the alias; it is removed in 0.7.0)`);
 		}
 	}
+	if (platform.plugins === void 0) {
+		issues.push("the platform plugin-row surface (pluginManager.listPlugins) is not mounted here — declared-but-unreachable parameters were NOT checked");
+		return issues;
+	}
+	const live = liveRowTails(platform.plugins);
 	const unreachable = PARAM_EXPOSURE.filter((entry) => entry.tier === "E3").filter((entry) => {
-		const namespace = PARAM_NAMESPACES[entry.owner];
-		return namespace === void 0 || !registered.has(namespace);
+		const namespace = paramSettingsId(entry.owner);
+		return namespace === void 0 || !live.has(namespace);
 	}).map((entry) => entry.id);
 	if (unreachable.length > 0) {
 		const shown = unreachable.slice(0, 6).join(", ");
 		const more = unreachable.length > 6 ? ` (+${unreachable.length - 6} more)` : "";
-		issues.push(`declared user-writable but unreachable here: ${shown}${more} — the owning package publishes no user layer in this composition`);
+		issues.push(`declared user-writable but unreachable here: ${shown}${more} — the owning row is not mounted in this runtime`);
 	}
 	return issues;
 }
+/**
+* The row id a Loader entry id ends in (`include:memory-files` → `memory-files`).
+* @param plugins - the platform's entry list.
+* @returns the tails, plus every module name the platform reported.
+*/
+function liveRowTails(plugins) {
+	const ids = /* @__PURE__ */ new Set();
+	for (const entry of plugins) {
+		ids.add(entry.entryId);
+		ids.add(entry.entryId.slice(entry.entryId.lastIndexOf(":") + 1));
+		if (entry.moduleName !== void 0) ids.add(entry.moduleName);
+	}
+	return ids;
+}
+/**
+* Read a value as a plain mapping (an override layer with no keys is not a divergence).
+* @param value - the parsed layer.
+* @returns the mapping, or undefined for anything else.
+*/
+function asMapping(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
 /** Profile bundle rows for evolution-family packages across all profiles.
 *
 * `onReadError` reports a profile whose manifest could not be READ or PARSED.
@@ -155,7 +501,8 @@ function memoryInterpolationIssues(home) {
 /** G3-② (B2): the family delta container. An optionalDependency of this
 * package, so resolution may legitimately fail; every failure degrades to
 * "unknown" — the doctor never throws.
-* Platform anchor: agentPresets.read(id) — preset/agent-presets/src/index.ts:501. */
+* Platform anchor: `packages/boot/app-boot/src/profile.ts` — a family preset is a ROW in the
+* profile's own patch layer there (`PROFILE_PATCH_FILENAME`), never a preset directory. */
 const AGENT_PRESET_PACKAGE = "@lmzhen/dsh-evolution-agent-preset";
 /** Resolve one asset the package declares in its exports map.
 * @param asset - bases.json or agent.cordis.yml.
@@ -182,9 +529,18 @@ function readAgentPresetBases$1(path) {
 		for (const raw of parsed.bases) {
 			const entry = raw;
 			if (typeof entry.name !== "string" || typeof entry.id !== "string") return null;
+			const display = entry.display;
+			if (display === null || typeof display !== "object" || typeof display.name !== "string" || typeof display.description !== "string" || typeof display.order !== "number" || !Number.isInteger(display.order)) return null;
+			const requires = entry.requires;
 			rows.push({
 				name: entry.name,
 				id: entry.id,
+				display: {
+					name: display.name,
+					description: display.description,
+					order: display.order
+				},
+				...requires !== null && typeof requires === "object" && typeof requires.service === "string" ? { requires: { service: requires.service } } : {},
 				...typeof entry.unsupported === "string" ? { unsupported: entry.unsupported } : {}
 			});
 		}
@@ -193,67 +549,117 @@ function readAgentPresetBases$1(path) {
 		return null;
 	}
 }
-/** Preset directories already on disk, used to keep an installed variant
-* VISIBLE when the base table itself could not be read.
-* @param root - the .agent-presets directory.
-* @returns the directory names; empty when nothing is installed. */
-function installedPresetIds(root) {
-	const ids = [];
+/** The profile patch file name (`packages/boot/app-boot/src/profile.ts`,
+* `PROFILE_PATCH_FILENAME`). */
+const PROFILE_PATCH_FILENAME = "cordis.patch.yml";
+/** Every profile directory under one DSH_HOME, by name.
+* @param home - resolved DSH_HOME.
+* @returns `{ profile, dir }` per directory under `profiles/` that carries a manifest.
+*/
+function profileDirectories(home) {
+	const out = [];
+	const root = join(home, "profiles");
 	let entries;
 	try {
 		entries = readdirSync(root, { withFileTypes: true });
 	} catch {
-		return ids;
+		return out;
 	}
-	for (const entry of entries) if (entry.isDirectory()) ids.push(entry.name);
-	return ids;
+	for (const entry of entries) {
+		if (!entry.isDirectory() || entry.name.startsWith(".")) continue;
+		if (entry.name === "node_modules") continue;
+		const dir = join(root, entry.name);
+		if (!existsSync(join(dir, "package.json"))) continue;
+		out.push({
+			profile: entry.name,
+			dir
+		});
+	}
+	return out;
+}
+/** The bundle rows one profile manifest mounts (scope-agnostic, as written).
+* @param profileDir - the profile directory.
+* @returns the bundle names; empty when the manifest is missing or torn.
+*/
+function profileBundles(profileDir) {
+	try {
+		const bundles = JSON.parse(readFileSync(join(profileDir, "package.json"), "utf8")).dsh?.profile?.bundles;
+		return Array.isArray(bundles) ? bundles.filter((name) => typeof name === "string") : [];
+	} catch {
+		return [];
+	}
+}
+/** The profile patch text, or `''` when the profile has none.
+* @param profileDir - the profile directory.
+* @returns the patch text.
+*/
+function profilePatchText(profileDir) {
+	try {
+		return readFileSync(join(profileDir, PROFILE_PATCH_FILENAME), "utf8");
+	} catch {
+		return "";
+	}
+}
+/** Whether a base's `requires.service` precondition is met by one profile's bundles — the same
+* judgement the installer applies (`baseUnavailableReason`), read from the same rows.
+* @param base - the table row.
+* @param bundles - the profile's bundle names.
+* @returns true when the base can be installed here.
+*/
+function baseInstallable(base, bundles) {
+	if (typeof base.unsupported === "string") return false;
+	const service = base.requires?.service;
+	if (typeof service !== "string" || service === "") return true;
+	return bundles.some((name) => name.trim().endsWith("dsh-web-app"));
 }
 /**
-* S1-F1: ids of the family's DELIVERED layered presets — every
-* `.agent-presets/<id>/agent.cordis.yml` artifact that can actually carry the
-* family model rows. The detection used to probe ONLY the default base id
-* (`evolution`), so a `--base ptc|cordis` layered install was invisible:
-* installForm degraded to `none`/`host` and the action ladder recommended
-* installing `evolution-all` on top — the exact double-mount the doctor exists
-* to prevent (V27 G6.4 closed it for the default id only).
+* S1-F1: ids of the family's INSTALLED preset rows — every declared preset row in a profile patch
+* that can actually carry the family model rows.
+*
+* The artifact is a declared preset ROW in a profile's own patch layer, so this probe reads that
+* file (`PROFILE_PATCH_FILENAME`) in every profile of the home. A probe narrowed to one base id
+* leaves a `--base ptc|cordis` install invisible: installForm then degrades to `none`/`host` and
+* the action ladder recommends installing `evolution-all` on top — the exact double-mount the
+* doctor exists to prevent.
 *
-* A directory counts only when the base table names it as a SUPPORTED family
-* base (the `unsupported` minimal base carries no model rows and cannot
-* double-mount anything). When the table itself cannot be read, every
-* delivered artifact counts — the visible-by-directory posture of
-* {@link probePresetFreshness}: flag rather than stay silent.
-* @param root - the `.agent-presets` home directory.
-* @returns installed family base ids whose `agent.cordis.yml` is on disk.
+* A row counts only when the base table names its id as a SUPPORTED family base (the `unsupported`
+* minimal base carries no model rows and cannot double-mount anything). When the table itself
+* cannot be read, any `preset-<family stem>*` row counts — the flag-rather-than-stay-silent
+* posture of {@link probePresetFreshness}.
+* @param home - resolved DSH_HOME.
+* @returns installed family base ids, in profile-then-table order.
 */
-function installedLayeredPresetIds(root) {
-	const delivered = installedPresetIds(root).filter((id) => existsSync(join(root, id, "agent.cordis.yml")));
-	if (delivered.length === 0) return [];
+function installedLayeredPresetIds(home) {
 	const basesPath = resolveAgentPresetAsset("bases.json");
 	const bases = basesPath === null ? null : readAgentPresetBases$1(basesPath);
-	if (bases === null) return delivered.filter((id) => {
-		try {
-			return readFileSync(join(root, id, "agent.cordis.yml"), "utf8").includes("@deepseek-ai/dsh-");
-		} catch {
-			return false;
+	const ids = /* @__PURE__ */ new Set();
+	for (const { dir } of profileDirectories(home)) {
+		const text = profilePatchText(dir);
+		if (text === "") continue;
+		if (bases === null) {
+			for (const match of text.matchAll(/^\s*- id:\s*(preset-[a-z0-9-]+)\s*$/gm)) if (match[1]?.startsWith(`preset-evolution`)) ids.add(match[1].slice(7));
+			continue;
 		}
-	});
-	const supported = new Set(bases.filter((row) => row.unsupported === void 0).map((row) => row.id));
-	return delivered.filter((id) => supported.has(id));
+		for (const base of bases) {
+			if (typeof base.unsupported === "string") continue;
+			if (presetRowBlock(text, presetRowId(base.id)) !== null) ids.add(base.id);
+		}
+	}
+	return [...ids];
 }
 /**
 * G3-② (B2): recompute what a fresh generation would write for every
 * installed variant and compare it byte-for-byte with the file on disk.
 *
-* The recomputation goes through composePresetComposition — the SAME rule
-* /evolution preset install and install-layered.mjs apply (collision guard +
-* row-overrides.json), so doctor cannot disagree with the installer about what
-* "fresh" means. Read-only by contract: the snapshot is never rewritten.
+* The recomputation goes through composePresetEntry — the SAME composer
+* /evolution preset install and install-layered.mjs apply (base patch rows +
+* collision guard + row-overrides.json), so doctor cannot disagree with the
+* installer about what "fresh" means. Read-only by contract: the snapshot is
+* never rewritten.
 * @param home - resolved DSH_HOME.
-* @param registry - the platform agent-preset registry, undefined when unmounted.
-* @returns one row per base in the family bases.json.
+* @returns one row per profile × installable base of the family bases.json.
 */
-async function probePresetFreshness(home, registry) {
-	const presetsRoot = join(home, ".agent-presets");
+function probePresetFreshness(home) {
 	const basesPath = resolveAgentPresetAsset("bases.json");
 	const deltaPath = resolveAgentPresetAsset("agent.cordis.yml");
 	const bases = basesPath === null ? null : readAgentPresetBases$1(basesPath);
@@ -264,86 +670,79 @@ async function probePresetFreshness(home, registry) {
 	} catch (error) {
 		deltaFailure = `${deltaPath} could not be read (${error instanceof Error ? error.message : String(error)})`;
 	}
+	const profiles = profileDirectories(home);
 	if (bases === null) {
 		const tablePath = basesPath ?? `${AGENT_PRESET_PACKAGE}/bases.json`;
-		return installedPresetIds(presetsRoot).map((id) => ({
-			base: id,
-			destination: join(presetsRoot, id),
-			status: "unknown",
-			detail: `the family base table could not be read (${tablePath}) — a fresh generation cannot be recomputed`
-		}));
+		return profiles.flatMap(({ profile, dir }) => {
+			const patchPath = join(dir, PROFILE_PATCH_FILENAME);
+			return [...profilePatchText(dir).matchAll(/^\s*- id:\s*(preset-[a-z0-9-]+)\s*$/gm)].map((match) => match[1]).map((id) => ({
+				profile,
+				base: id.slice(7),
+				destination: patchPath,
+				status: "unknown",
+				detail: `the family base table could not be read (${tablePath}) — a fresh generation cannot be recomputed`
+			}));
+		});
 	}
 	const rows = [];
-	for (const base of bases) {
-		const destination = join(presetsRoot, base.id);
-		const compositionPath = join(destination, "agent.cordis.yml");
-		if (!existsSync(compositionPath)) {
-			rows.push({
-				base: base.name,
-				destination,
-				status: "absent"
-			});
-			continue;
-		}
-		if (registry === void 0) {
-			rows.push({
-				base: base.name,
-				destination,
-				status: "unknown",
-				detail: "the platform agent-preset registry is not mounted, so the runtime composition cannot be read"
-			});
-			continue;
-		}
-		if (delta === null) {
-			rows.push({
-				base: base.name,
-				destination,
-				status: "unknown",
-				detail: deltaFailure
-			});
-			continue;
-		}
-		let platform;
-		try {
-			platform = await registry.read(base.name);
-		} catch (error) {
-			rows.push({
-				base: base.name,
-				destination,
-				status: "unknown",
-				detail: `the runtime composition for base "${base.name}" could not be read (${error instanceof Error ? error.message : String(error)})`
-			});
-			continue;
-		}
-		let fresh;
-		try {
-			fresh = composePresetComposition(platform, delta);
-		} catch (error) {
-			rows.push({
-				base: base.name,
-				destination,
-				status: "unknown",
-				detail: `a fresh generation refused to compose (${error instanceof Error ? error.message : String(error)})`
-			});
-			continue;
-		}
-		let onDisk;
-		try {
-			onDisk = readFileSync(compositionPath, "utf8");
-		} catch (error) {
+	for (const { profile, dir } of profiles) {
+		const patchPath = join(dir, PROFILE_PATCH_FILENAME);
+		const text = profilePatchText(dir);
+		const bundles = profileBundles(dir);
+		for (const base of bases) {
+			if (!baseInstallable(base, bundles)) continue;
+			const block = presetRowBlock(text, presetRowId(base.id));
+			if (block === null) {
+				rows.push({
+					profile,
+					base: base.name,
+					destination: patchPath,
+					status: "absent"
+				});
+				continue;
+			}
+			if (delta === null) {
+				rows.push({
+					profile,
+					base: base.name,
+					destination: patchPath,
+					status: "unknown",
+					detail: deltaFailure
+				});
+				continue;
+			}
+			const target = {
+				profile,
+				profileDir: dir,
+				patchPath,
+				bundles
+			};
+			let fresh;
+			try {
+				fresh = composePresetEntry(readFileSync(resolvePresetBasePatch(base.name, target), "utf8"), delta, {
+					rowId: presetRowId(base.id),
+					id: base.id,
+					name: base.display.name,
+					description: base.display.description,
+					order: base.display.order
+				});
+			} catch (error) {
+				rows.push({
+					profile,
+					base: base.name,
+					destination: patchPath,
+					status: "unknown",
+					detail: error instanceof Error ? error.message : String(error)
+				});
+				continue;
+			}
 			rows.push({
+				profile,
 				base: base.name,
-				destination,
-				status: "unknown",
-				detail: `${compositionPath} could not be read (${error instanceof Error ? error.message : String(error)})`
+				destination: patchPath,
+				status: presetRowBody(fresh) === presetRowBody(block) ? "fresh" : "differs"
 			});
-			continue;
 		}
-		rows.push({
-			base: base.name,
-			destination,
-			status: fresh === onDisk ? "fresh" : "differs"
-		});
 	}
 	return rows;
 }
@@ -352,6 +751,54 @@ async function probePresetFreshness(home, registry) {
 * only `get` is enough); `home` defaults to the evolution root so tests can
 * point doctor at a temp DSH_HOME.
 */
+/**
+* The legacy settings document's remaining work, for the doctor report.
+*
+* Every failure mode is a verdict, not an exception: a deployment without the settings seat
+* or the family IO seam reports `unavailable`, and an unreadable document is reported through
+* the same warn channel the boot migration uses.
+* @param ctx - the context (services), read structurally.
+* @param home - the profile home the legacy document sits in.
+* @returns the row the report renders.
+*/
+async function legacyMigrationRow(ctx, home) {
+	const settings = ctx.get("settings");
+	const io = ctx.get("evolutionIo")?.provider?.();
+	if (settings?.describe === void 0 || io === void 0) return {
+		state: "unavailable",
+		source: void 0,
+		pending: []
+	};
+	try {
+		const state = await readLegacyDocumentState({
+			home,
+			io,
+			settings
+		});
+		if (state === void 0) return {
+			state: "absent",
+			source: void 0,
+			pending: []
+		};
+		if (state.sections === 0) return {
+			state: "none",
+			source: state.source,
+			pending: []
+		};
+		return {
+			state: state.pending.length > 0 ? "pending" : "migrated",
+			source: state.source,
+			pending: state.pending
+		};
+	} catch (error) {
+		ctx.logger?.warn("evolution-commands: the legacy settings document could not be read — %s", error instanceof Error ? error.message : String(error));
+		return {
+			state: "unavailable",
+			source: void 0,
+			pending: []
+		};
+	}
+}
 async function diagnose(ctx, options = {}) {
 	const home = options.home ?? evolutionRoot();
 	const conflicts = [];
@@ -360,11 +807,18 @@ async function diagnose(ctx, options = {}) {
 		conflicts.push(scope === "profiles-dir" ? `the home profiles directory could not be enumerated (${detail}) — bundle-based install-form and conflict checks are DEGRADED and may miss installed bundles` : `a profile manifest could not be read or parsed (${detail}) — this profile's bundle rows are UNKNOWN, so the install-form and conflict checks are DEGRADED and may miss installed bundles`);
 	});
 	const has = (name) => ctx.get(name) !== void 0;
-	const presetFreshness = await probePresetFreshness(home, ctx.get("agentPresets"));
-	const full = bundles.some((name) => tailOf(name) === "dsh-evolution-all");
-	const host = bundles.some((name) => tailOf(name) === "dsh-evolution-host");
-	const preset = bundles.some((name) => tailOf(name) === "dsh-evolution-preset");
-	const layeredIds = installedLayeredPresetIds(join(home, ".agent-presets"));
+	const presetFreshness = probePresetFreshness(home);
+	const platform = await readPlatformView(ctx);
+	const familyBundleRows = platform.bundles?.filter((row) => tailOf(row.name).startsWith("dsh-evolution-"));
+	const runtimeBundles = familyBundleRows === void 0 ? void 0 : familyBundleRows.filter((row) => row.enabled).map((row) => row.name);
+	const dormantBundles = familyBundleRows?.filter((row) => !row.enabled).map((row) => row.name) ?? [];
+	const runtimeFlags = runtimeBundles === void 0 ? void 0 : familyForms(runtimeBundles);
+	const aggregateFlags = familyForms(bundles);
+	const forms = runtimeFlags ?? aggregateFlags;
+	const full = forms.full;
+	const host = forms.host;
+	const preset = forms.preset;
+	const layeredIds = installedLayeredPresetIds(home);
 	const presetDirInstalled = layeredIds.length > 0;
 	const layeredArtifactLabel = presetDirInstalled ? layeredIds.join(", ") : "evolution";
 	const layered = host && presetDirInstalled;
@@ -373,7 +827,8 @@ async function diagnose(ctx, options = {}) {
 	if (host && preset) conflicts.push("evolution-host and evolution-preset are installed together — the infra rows double-mount. Keep ONE.");
 	if (full && presetDirInstalled) conflicts.push(`evolution-all and the layered Evolution preset (${layeredArtifactLabel}) are both present — the four model rows AND the systemPrompt sections double-instance across the profile and preset layers; the preset loader does not fail on it, shadowing semantics take the nearest layer, so an Evolution-preset session silently runs the preset's copies of everything. Keep ONE (use layered without all, or drop the preset).`);
 	if (preset && presetDirInstalled) conflicts.push(`evolution-preset and the layered Evolution preset (${layeredArtifactLabel}) are both present — the preset bundle carries the same model rows as all, so the four model rows AND the systemPrompt sections double-instance and shadowing semantics take the nearest layer (the preset loader does not fail on it). Keep ONE (drop the preset bundle, or remove the layered preset).`);
-	const reviewMounted = full || host || preset;
+	const reviewRow = platform.plugins === void 0 ? void 0 : familyRow(platform.plugins, "evolution-review");
+	const reviewMounted = reviewRow?.enabled ?? (full || host || preset);
 	const services = {
 		review: reviewMounted,
 		curator: has("evolutionCurator"),
@@ -408,15 +863,19 @@ async function diagnose(ctx, options = {}) {
 	if (mountConflicts.length > 0) actions.push("Resolve the conflict first: keep exactly one of evolution-all / evolution-host / evolution-preset / layered.");
 	else if (undecidable) actions.push("The install form is UNDECIDABLE (see the DEGRADED row above): an unreadable profiles directory or profile manifest hides whatever is installed, so this report must not add or remove a bundle. Fix the reported read failure, then re-run /evolution doctor.");
 	else if (installForm === "none") actions.push("Install the default full bundle: dsh plugin --profile web add @lmzhen/dsh-evolution-all");
-	else if (installForm === "preset-only") actions.push(`The Evolution preset is delivered but no profile mounts an evolution bundle — re-add @lmzhen/dsh-evolution-host for the layered layout (do NOT add all on top of the preset: that double-mounts the model rows), or remove .agent-presets/${layeredArtifactLabel} if the layered layout is no longer wanted.`);
+	else if (installForm === "preset-only") actions.push(`The Evolution preset row is installed but no profile mounts an evolution bundle — re-add @lmzhen/dsh-evolution-host for the layered layout (do NOT add all on top of the preset: that double-mounts the model rows), or drop the row (${layeredArtifactLabel}) from the profile patch if the layered layout is no longer wanted.`);
 	else if (installForm === "layered") actions.push("Variant form (session opt-in): model tools follow the Evolution preset, and a session on a platform original preset carries no family rows; add @lmzhen/dsh-evolution-all instead if every session should have them.");
 	const env = envIssues();
 	if (env.length > 0) actions.push("Fix the DSH_EVOLUTION_* variable listed above.");
 	if (services.review && !services.curator) actions.push("Curator service is not mounted — automatic curation is off; verify the host/all bundle row set is complete.");
 	if (pendingCount === null && services.approval) actions.push("Approval service is mounted but pending listing failed — check the evolution state service.");
+	const presetIssueRows = presetIssues(platform.presets);
+	if (presetIssueRows.length > 0) actions.push("Resolve the agent-preset finding above: a broken preset composes no session, and a row two presets declare is resolved by layer order (keep the declaration in one preset).");
+	const legacy = await legacyMigrationRow(ctx, home);
+	if (legacy.state === "pending") actions.push(`The legacy settings document still holds ${legacy.pending.length} family value(s) — /evolution migrate moves them onto their rows (the document itself is left alone, so nothing is lost)`);
 	const memoryIssues = memoryInterpolationIssues(home);
 	const budgetIssues = memoryBudgetIssues(ctx);
-	const paramIssues = paramDivergences(ctx);
+	const paramIssues = paramDivergences(platform);
 	const queryIssues = await sessionQueryIssues(ctx);
 	if (queryIssues.length > 0) actions.push("Session search is degraded: isolate the session named above (or wait for the platform fix described in the family maintenance notes) before retrying the same query");
 	if (paramIssues.length > 0) actions.push("Review the parameter divergences above: /evolution params shows every row with its source, /evolution policy set writes a user value, and a declared-but-unreachable row needs its owning plugin row mounted in this profile.");
@@ -426,7 +885,7 @@ async function diagnose(ctx, options = {}) {
 	if ((executingCount ?? 0) > 0) actions.push(`${executingCount} staged write(s) are EXECUTING (an approve crashed mid-run — or one is still in flight). Inspect with /evolution pending: if you started the approve, verify the landed write and do not reject it; only reject after verifying no write is intended. For a verified orphan (this build: S2-P2-22), /evolution release <id> returns it to the pending window instead.`);
 	for (const row of presetFreshness) {
 		if (row.status !== "differs") continue;
-		actions.push(`Preset variant ${row.destination} DIFFERS from a fresh generation — it is an install-time snapshot; re-run the installer (/evolution preset install) to regenerate`);
+		actions.push(`Preset row for base "${row.base}" in ${row.destination} DIFFERS from a fresh generation — it is an install-time snapshot; re-run the installer (/evolution preset install) to regenerate`);
 	}
 	return {
 		installForm,
@@ -443,6 +902,12 @@ async function diagnose(ctx, options = {}) {
 		executingCount,
 		presetFreshness,
 		scopedProbe,
+		legacy,
+		runtimeBundles: runtimeBundles ?? null,
+		formSource: runtimeFlags === void 0 ? "aggregate" : "platform",
+		presetIssues: presetIssueRows,
+		dormantBundles,
+		serviceSource: reviewRow === void 0 ? "bundles" : "platform",
 		actions
 	};
 }
@@ -550,20 +1015,38 @@ function scopedProbeLine(check) {
 	const detail = check.verdict === "hit" ? `${check.hits} scoped evaluation(s) carried the family tools` : check.verdict === "never-hit" ? `${check.misses} scoped evaluation(s) resolved false — review injection and skill-usage telemetry are inert for every session observed; HOST-ONLY installs reach this because tool-memory / tool-skill-manage are not dependencies of evolution-host, VARIANT installs only match once a session runs the Evolution preset` : "the gate has not evaluated a session in this process yet — no session event has reached it since startup";
 	return `scoped rows: ${rows}, probe=${check.verdict} (${detail})`;
 }
+/**
+* One line for the legacy settings document's state.
+* @param row - the report's legacy row.
+* @returns the rendered line.
+*/
+function legacyLine(row) {
+	if (row.state === "unavailable") return "legacy settings: unknown — no settings seat or no family IO seam is mounted here";
+	if (row.state === "absent") return "legacy settings: no settings.yaml / settings.yaml.imported under this home";
+	if (row.state === "none") return `legacy settings: ${row.source ?? "(unknown)"} carries no family section`;
+	if (row.state === "migrated") return `legacy settings: every family value sits on its row (${row.source ?? "(unknown)"})`;
+	const shown = row.pending.slice(0, 6).join(", ");
+	const more = row.pending.length > 6 ? ` (+${row.pending.length - 6} more)` : "";
+	return `legacy settings: ${row.pending.length} family value(s) still on ${row.source ?? "(unknown)"}: ${shown}${more} — /evolution migrate moves them`;
+}
 function renderDoctorText(report) {
 	const lines = [
-		`Evolution doctor — install form: ${report.installForm} (deployment: ${report.deploymentForm})`,
+		`Evolution doctor — install form: ${report.installForm} (deployment: ${report.deploymentForm}; from ${report.formSource === "platform" ? "this runtime's bundle surface" : "the cross-profile aggregate"})`,
+		report.runtimeBundles === null ? "runtime bundles: unknown — the platform bundle surface (pluginManager.listBundles) is not mounted here" : `runtime bundles (this profile): ${report.runtimeBundles.length > 0 ? report.runtimeBundles.join(", ") : "(none)"}`,
+		report.dormantBundles.length === 0 ? null : `installed but not selected: ${report.dormantBundles.join(", ")} — the Plugins page lists them; this runtime mounts neither`,
 		`bundles (all profiles): ${report.bundles.length > 0 ? report.bundles.join(", ") : "(none)"}`,
-		`services: review=${report.services.review} (inferred from bundles, all profiles) curator=${report.services.curator} approval=${report.services.approval} skillUsage=${report.services.skillUsage} io=${report.services.io}`,
+		`services: review=${report.services.review} (${report.serviceSource === "platform" ? "the live row, this runtime" : "inferred from bundles, all profiles"}) curator=${report.services.curator} approval=${report.services.approval} skillUsage=${report.services.skillUsage} io=${report.services.io}`,
 		scopedProbeLine(report.scopedProbe),
+		legacyLine(report.legacy),
 		`pending: ${report.pendingCount === null ? "unknown" : report.pendingCount}`,
 		`executing: ${report.executingCount === null ? "unknown" : report.executingCount}`
 	];
 	for (const row of report.presetFreshness) {
 		if (row.status === "absent") continue;
 		const verdict = row.status === "fresh" ? "fresh — a fresh generation matches this file byte-for-byte" : row.status === "differs" ? "DIFFERS from a fresh generation — it is an install-time snapshot; re-run the installer (/evolution preset install) to regenerate" : `unknown — a fresh generation could not be recomputed (${row.detail ?? "reason not recorded"})`;
-		lines.push(`preset:   ${row.destination}  ${verdict}`);
+		lines.push(`preset:   ${row.base} → ${row.destination}  ${verdict}`);
 	}
+	if (report.presetIssues.length > 0) lines.push("agent presets:", ...report.presetIssues.map((line) => `  ! ${line}`));
 	if (report.conflicts.length > 0) lines.push("conflicts:", ...report.conflicts.map((line) => `  ! ${line}`));
 	if (report.envIssues.length > 0) lines.push("env:", ...report.envIssues.map((line) => `  ! ${line}`));
 	if (report.memoryIssues.length > 0) lines.push("memory:", ...report.memoryIssues.map((line) => `  ! ${line}`));
@@ -571,7 +1054,7 @@ function renderDoctorText(report) {
 	if (report.paramIssues.length > 0) lines.push("parameters:", ...report.paramIssues.map((line) => `  ! ${line}`));
 	if (report.queryIssues.length > 0) lines.push("session search:", ...report.queryIssues.map((line) => `  ! ${line}`));
 	if (report.actions.length > 0) lines.push("next steps:", ...report.actions.map((line) => `  → ${line}`));
-	return lines.join("\n");
+	return lines.filter((line) => line !== null).join("\n");
 }
 //#endregion
 //#region lib/types/params.js
@@ -580,10 +1063,10 @@ function renderDoctorText(report) {
 * surface, so one text answers "which parameters exist, who may write them, and
 * did I already override this one".
 *
-* The join key is the OWNER PACKAGE: core's `PARAM_NAMESPACES` maps a package to
-* the one namespace it registers, and `settings.describe()` reports that
-* namespace's raw user section (a key's PRESENCE is the override) plus the
-* resolved value. Everything here is pure; the command handler supplies the data.
+* The join key is the OWNER PACKAGE: `settings.describe()` keys a section by the Loader
+* entry id, which is the row id (core's `paramSettingsId` names that mapping), and reports
+* that section's raw user section (a key's PRESENCE is the override) plus the resolved
+* value. Everything here is pure; the command handler supplies the data.
 * @module @lmzhen/dsh-evolution-commands/params
 */
 /**
@@ -608,7 +1091,7 @@ function paramSurfaceRows(sections, entries = PARAM_EXPOSURE) {
 			applies: entry.applies,
 			owner: entry.owner
 		};
-		const namespace = PARAM_NAMESPACES[entry.owner];
+		const namespace = paramSettingsId(entry.owner);
 		const section = namespace === void 0 ? void 0 : sections.get(namespace);
 		if (section === void 0) return {
 			...base,
@@ -804,6 +1287,10 @@ const COMMAND_ENTRIES = [
 		usage: "maintain [--timeout=<ms> | --facts]",
 		summary: "运行一次维护扫描（--facts 为 0 token 预览）"
 	},
+	{
+		usage: "migrate",
+		summary: "把旧设置文档里家族的旧分区迁进现在的行（幂等；已迁移过就报「已一致」）"
+	},
 	{
 		usage: "policy set <id> <value> [--expect <revision>]",
 		summary: "通过设置服务写入一个你可改的参数 (E3 only; E1/E2 stay in cordis.yml)"
@@ -814,7 +1301,7 @@ const COMMAND_ENTRIES = [
 	},
 	{
 		usage: "preset install [--base <name>[,<name>...]]",
-		summary: "按指定基础生成自进化 Agent 预设到用户 root (bases from the agent package's bases.json)"
+		summary: "把自进化 Agent 预设**行**写进当前 profile 的 patch 层（`profiles/<p>/cordis.patch.yml`；bases 来自 agent 包的 bases.json）"
 	},
 	{
 		usage: "restructure <name> \"<heading>\" <to_file> [--plan <runId>]",
@@ -1089,8 +1576,7 @@ function apply(ctx, rawConfig = {}) {
 							text: buildLearnPrompt(request)
 						}],
 						source: {
-							kind: "plugin",
-							plugin: "dsh-evolution-commands",
+							kind: "evolution-commands",
 							form: "notice",
 							summary: "learn request"
 						}
@@ -1234,34 +1720,38 @@ function apply(ctx, rawConfig = {}) {
 							if (entry === void 0) return err(`Unknown agent-preset base "${name}" — ${join(source, "bases.json")} lists ${table.entries.map((candidate) => candidate.name).join(", ")}`);
 							selected.push(entry);
 						}
-						const rawBases = JSON.parse(readFileSync(join(source, "bases.json"), "utf8"));
 						const deltaPath = join(source, "agent.cordis.yml");
 						if (!existsSync(deltaPath)) return err(`Preset file missing from ${source} — is the dsh-evolution-agent-preset package installed?`);
-						const registry = ctx.get("agentPresets");
-						if (!registry) return err("Agent preset registry not mounted — cannot compose the Evolution preset against the runtime standard.");
+						const profile = presetProfileTarget(ctx);
+						if (profile === void 0) return err("No profile is mounted in this process, so there is no profile patch to write the preset row into — run the command in a session started by `dsh --profile <name>`.");
+						const delta = readFileSync(deltaPath, "utf8");
+						const current = existsSync(profile.patchPath) ? readFileSync(profile.patchPath, "utf8") : "";
+						let merged = current;
 						const written = [];
 						for (const base of selected) {
-							const ability = rawBases.bases?.find((candidate) => candidate.name === base.name);
-							if (typeof ability?.unsupported === "string") return err(`Base "${base.name}" is registered as UNSUPPORTED: ${ability.unsupported}`);
-							const requiredService = ability?.requires?.service;
+							if (typeof base.unsupported === "string") return err(`Base "${base.name}" is registered as UNSUPPORTED: ${base.unsupported}`);
+							const requiredService = base.requires?.service;
 							if (typeof requiredService === "string" && ctx.get(requiredService) === void 0) return err(`Base "${base.name}" requires the "${requiredService}" service, which this deployment does not provide — the generated preset would refuse to mount.`);
-							const target = join(evolutionRoot(), ".agent-presets", base.id);
-							const presetPath = join(source, base.metadata);
-							if (!existsSync(presetPath)) return err(`Preset file missing from ${source} — is the dsh-evolution-agent-preset package installed?`);
-							const composition = composePresetComposition(await registry.read(base.name), readFileSync(deltaPath, "utf8"));
-							mkdirSync(target, { recursive: true });
-							atomicWriteFiles(target, [{
-								name: "agent.cordis.yml",
-								content: composition
-							}, {
-								name: "preset.yml",
-								content: readFileSync(presetPath)
-							}], void 0, (message) => {
-								ctx.logger.warn(message);
+							const basePatch = resolvePresetBasePatch(base.name, profile);
+							const rowId = presetRowId(base.id);
+							const entryText = composePresetEntry(readFileSync(basePatch, "utf8"), delta, {
+								rowId,
+								id: base.id,
+								name: base.display.name,
+								description: base.display.description,
+								order: base.display.order
 							});
-							written.push(`${base.name} → ${target}`);
+							const next = mergePresetRow(merged, entryText, rowId);
+							written.push(next === merged ? `${base.name} → ${profile.patchPath} (already current)` : `${base.name} → ${rowId} in ${profile.patchPath}`);
+							merged = next;
 						}
-						return ok(`Evolution agent preset installed (${written.join("; ")}). Restart the session switcher to select it.`);
+						if (merged !== current) atomicWriteFiles(dirname(profile.patchPath), [{
+							name: PROFILE_PATCH_FILENAME$1,
+							content: presetPatchText(merged)
+						}], void 0, (message) => {
+							ctx.logger.warn(message);
+						});
+						return ok(`Evolution agent preset row installed (${written.join("; ")}). Restart the session switcher to select it.`);
 					} catch (error) {
 						return err(`Preset install failed: ${error instanceof Error ? error.message : String(error)}`);
 					}
@@ -1374,7 +1864,7 @@ function apply(ctx, rawConfig = {}) {
 						a2: entry.tier,
 						a3: entry.owner
 					}));
-					const namespace = PARAM_NAMESPACES[entry.owner];
+					const namespace = paramSettingsId(entry.owner);
 					if (namespace === void 0) return err(errorText("e-315-id-has-no-user", {
 						a1: id,
 						a2: entry.owner
@@ -1415,6 +1905,15 @@ function apply(ctx, rawConfig = {}) {
 						wasOverridden: descriptor.user !== void 0 && Object.hasOwn(descriptor.user, id)
 					}));
 				}
+				if (input === "migrate") {
+					const attempt = await migrateFromContext(ctx);
+					if (!attempt.ok) {
+						if (attempt.problem === "settings") return err(errorText("e-311-no-settings-service-is"));
+						if (attempt.problem === "home") return err(errorText("e-320-the-profile-home-is-not"));
+						return err(errorText("e-321-no-io-provider-is"));
+					}
+					return ok(renderNamespaceMigration(attempt.outcome));
+				}
 				if (input === "doctor" || input === "doctor --json") {
 					const report = await diagnose(ctx, { home: evolutionRoot() });
 					if (input === "doctor --json") return ok(JSON.stringify(report, null, 2));
@@ -1429,10 +1928,40 @@ function apply(ctx, rawConfig = {}) {
 		};
 		commandCtx.effect(() => commands.register(evolutionCommand));
 	});
+	let migrationRunning = false;
+	const runMigrationOnce = () => {
+		if (migrationRunning) return;
+		migrationRunning = true;
+		(async () => {
+			try {
+				const attempt = await migrateFromContext(ctx);
+				if (!attempt.ok) {
+					migrationRunning = false;
+					ctx.logger.warn("evolution-commands: the legacy settings migration cannot run here (no %s) — run /evolution migrate after that service is mounted", attempt.problem);
+					return;
+				}
+				const { outcome } = attempt;
+				if (outcome.source !== void 0 && outcome.report !== void 0 && outcome.report.written.length > 0) ctx.logger.info("evolution-commands: migrated the legacy settings document (%s)", renderNamespaceMigration(outcome));
+			} catch (error) {
+				migrationRunning = false;
+				ctx.logger.warn("evolution-commands: the legacy settings migration did not run — %s", error instanceof Error ? error.message : String(error));
+			}
+		})();
+	};
+	ctx.inject(["settings"], () => {
+		runMigrationOnce();
+	});
+	(async () => {
+		const loader = ctx.root.loader;
+		try {
+			await loader?.await?.();
+		} catch {}
+		runMigrationOnce();
+	})();
 }
 /**
 * 0.3.14 (P1-1): locate the installed `dsh-evolution-agent-preset` package
-* (the delivery container for agent.cordis.yml/preset.yml). Resolution order:
+* (the delivery container for agent.cordis.yml/bases.json). Resolution order:
 * npm-name sibling (published profile layout), dev-tree sibling (source/test
 * layout), then module resolution. The package dir name differs from the npm
 * name (`evolution-agent` vs `@lmzhen/dsh-evolution-agent-preset` — the rc.44
@@ -1449,11 +1978,22 @@ function readAgentPresetBases(source) {
 	if (!Array.isArray(parsed.bases) || parsed.bases.length === 0) throw new Error(`${path} carries no bases[]`);
 	const entries = parsed.bases.map((raw) => {
 		const entry = raw;
-		if (typeof entry.name !== "string" || typeof entry.id !== "string" || typeof entry.metadata !== "string") throw new Error(`${path} entry ${JSON.stringify(raw)} needs name/id/metadata strings`);
+		if (typeof entry.name !== "string" || typeof entry.id !== "string") throw new Error(`${path} entry ${JSON.stringify(raw)} needs name/id strings`);
+		const display = entry.display;
+		if (display === null || typeof display !== "object" || typeof display.name !== "string" || display.name === "" || typeof display.description !== "string" || display.description === "" || typeof display.order !== "number" || !Number.isInteger(display.order)) throw new Error(`${path} entry "${entry.name}" needs display { name, description, order }`);
+		const requires = entry.requires;
+		if (requires !== void 0 && (requires === null || typeof requires !== "object" || typeof requires.service !== "string")) throw new Error(`${path} entry "${entry.name}" needs requires.service as a string`);
+		if (entry.unsupported !== void 0 && (typeof entry.unsupported !== "string" || entry.unsupported === "")) throw new Error(`${path} entry "${entry.name}" needs unsupported as a non-empty reason string`);
 		return {
 			name: entry.name,
 			id: entry.id,
-			metadata: entry.metadata
+			display: {
+				name: display.name,
+				description: display.description,
+				order: display.order
+			},
+			...requires === void 0 ? {} : { requires: { service: requires.service } },
+			...entry.unsupported === void 0 ? {} : { unsupported: entry.unsupported }
 		};
 	});
 	const declared = parsed.default;
@@ -1465,7 +2005,7 @@ function readAgentPresetBases(source) {
 }
 function resolveAgentPresetDir(importMetaUrl) {
 	const overlayCandidate = join(dirname(fileURLToPath(importMetaUrl)), "..", "..", "evolution-agent");
-	if (existsSync(join(overlayCandidate, "agent.cordis.yml")) && existsSync(join(overlayCandidate, "preset.yml"))) return overlayCandidate;
+	if (existsSync(join(overlayCandidate, "agent.cordis.yml")) && existsSync(join(overlayCandidate, "bases.json"))) return overlayCandidate;
 	try {
 		return dirname(createRequire(importMetaUrl).resolve("@lmzhen/dsh-evolution-agent-preset/package.json"));
 	} catch {