@shgroup/dsh-serenity-hooks 1.102.0 → 1.104.0

package/lib/invariant.js

@@ -144,7 +144,6 @@ const REGISTERED_TOOLS = [
 	"praxis",
 	"ontology",
 	"serenity-skill-creator",
-	"cheap-worker",
 	"localstore",
 	"container_admin",
 	"im-bridge",

package/lib/kernel/ccc-roots.d.ts

@@ -52,9 +52,10 @@ export interface ExecOrAgent {
  * `exec.agent?.session?.header?.cwd ?? process.cwd()`。
  *
  * ⚠️ 无 `exec.agent` 时回落进程 cwd —— "用服务启动目录冒充会话目录"是**既有语义**，
- * 不是本模块的选择（改它会动到 9 个工具的根解析行为）。已知副作用与规避见
- * `tools/cheap-worker.ts` 的「调用形态检查前移」补偿（`?? process.cwd()` 会把真因
- * "exec.agent 不存在"盖成 `No CCC found`）。
+ * 不是本模块的选择（改它会动到所有工具的根解析行为）。已知副作用：`?? process.cwd()`
+ * 会把真因"exec.agent 不存在"盖成 `No CCC found` —— 工具侧须把**调用形态检查前移**再判根
+ * （原实现范例 `tools/cheap-worker.ts`，该文件已于 2026-10-28 随工具下线删除；
+ *   现行的正例见 `tools/fs/service.ts` 的入参校验顺序）。
  */
 export declare function agentCwdFor(execOrAgent: ExecOrAgent): string;
 /**

package/lib/kernel/ccc.d.ts

@@ -32,24 +32,6 @@ export declare function resolveInside(root: string, p: string): string;
  */
 export declare function readCccName(root: string): string | null;
 interface SerenityConfig {
-    /** cheap-worker（杂工）配置：模型白名单（v1.24.0 取代 loop；2026-10-14 取代 handyman） */
-    'cheap-worker'?: {
-        /** 可用模型白名单（provider/model 列表）——cheap-worker 只能使用其中模型（用户拍板：CCC 配置控制） */
-        models?: string[];
-        /** 缺省模型（必须 ∈ models） */
-        defaultModel?: string;
-    };
-    /**
-     * 🔴 **旧键（历史名）**：2026-10-14 起本插件读 `cheap-worker`，**读不到时回落到这里**
-     * （owner 令「配置兼容旧配置 key」）。仍可含 `maxRounds`／`maxParallel` —— 那两个键已随
-     * background 模式退场，**不再被读取**，但**留在文件里不会报错**（宽松解析，见 loadSerenityConfig）。
-     */
-    handyman?: {
-        models?: string[];
-        defaultModel?: string;
-        maxRounds?: number;
-        maxParallel?: number;
-    };
     sessionKeeper?: {
         /** 计分提醒阈值（缺省 150） */
         threshold?: number;
@@ -295,21 +277,21 @@ export interface WeixinRouteConfig {
  * 而新模型里 轨迹约束恒等于一条轨迹 ⇒ 恒有 SESSION.md ⇒ 该区分没有指称对象（静默忽略）。
  */
 /**
- * 解析 cheap-worker 配置。
- *
- * 🔴 **键的优先级（2026-10-14，owner 令「配置兼容旧配置 key」）**：
- *   ① 新键 `cheap-worker`；② **读不到（键缺失或 models 非有效数组）⇒ 回落旧键 `handyman`**。
- *   「读不到」的判据是**同一套**（models 必须是至少含一个非空字符串的数组）—— 这样"新键存在但写错了"
- *   与"没写新键"行为一致，都不会静默走一个空白名单。
+ * 🔴 **`readCheapWorkerConfig` / `pickModelSection` 已于 2026-10-28 删除**
+ * （owner 令「下线 cheap-worker，完全删掉」）。
  *
- * ⚠️ `maxRounds`／`maxParallel` 已随 background 模式退场，**不再被本函数读取**（旧配置里留着无害）。
+ * 它们原本有三个消费者，三个都已同步处置：
+ * | 消费者 | 处置 |
+ * |---|---|
+ * | `tools/cheap-worker.ts`（模型白名单校验） | 文件整体删除 |
+ * | `surface/status.ts` 的 `cheapWorkerModel`（面板回显） | 字段删除（面板同步） |
+ * | `tools/trajectory-constraint-admin.ts` 的 `model ∈ cheap-worker.models` 校验 | **校验整条移除** |
  *
- * @returns 白名单 + 缺省模型；两处都取不到 models 时返回 null（工具应报错要求配置）
+ * ⚠️ 最后一条要说清（R↓）：那条校验原本是「轨迹约束声明的 model 必须在 CCC 白名单里」。
+ * 白名单随 cheap-worker 一起消失 ⇒ **它失去了判据来源**。而模型合法性本来就有
+ * **更权威的判据**（`trajectory/model-runtime.ts`：宿主报非法模型 ⇒ 不切＋响亮告警）
+ * ⇒ 删掉它**不是丢了一个保护，而是去掉一份与权威判据并行的第二真相源**（D131 同族）。
  */
-export declare function readCheapWorkerConfig(root: string, paths?: string[]): {
-    models: string[];
-    defaultModel: string;
-} | null;
 /**
  * ACC 依赖的 CCC 配置路径（S134 修正：兼容历史——历史在 .opencode，规范位置 = .opencode；
  * .dsh 仅作 dsh 运行时回退，不优先）。

package/lib/kernel/invariant.d.ts

@@ -58,6 +58,6 @@ export declare function assertManifestProse(manifestPath: string, readmePaths: r
  * `review`（C 档，调引擎 `compliance`）／`index`（调 P1 的生成器）／`status` ⇒ **14**。
  * 同规格：**条件可见与否不影响这里列它**（本常量 = "插件**具备**的工具面"）。
  */
-export declare const REGISTERED_TOOLS: readonly ["container_fs", "cognitive_trajectory", "dashboard", "container_git", "msm", "praxis", "ontology", "serenity-skill-creator", "cheap-worker", "localstore", "container_admin", "im-bridge", "acc-diag", "diagram"];
+export declare const REGISTERED_TOOLS: readonly ["container_fs", "cognitive_trajectory", "dashboard", "container_git", "msm", "praxis", "ontology", "serenity-skill-creator", "localstore", "container_admin", "im-bridge", "acc-diag", "diagram"];
 /** 条件出现的工具数（`REGISTERED_TOOLS` 的**末段**；`assertManifestProse` 用） */
 export declare const CONDITIONAL_TOOL_COUNT = 3;

package/lib/{message-source-BAMwXu6i.js → message-source-CKJPJCzc.js}

@@ -1,6 +1,6 @@
-import { r as cccRootForCwd } from "./ccc-roots-WfktvbN8.js";
-import { _ as resolveInside, g as readUtf8 } from "./ccc-CyYJL4F2.js";
-import { D as getLastActiveSessionInfo, E as getActiveSessionInfo, I as sessionEvents, L as sessionsRoot, M as parseTrajectoryCode, _ as readBindDeclaration, g as listBindDeclarations, h as isBindUsable, m as claimBinding } from "./profile-zxakCNXy.js";
+import { r as cccRootForCwd } from "./ccc-roots-BIdg0EyM.js";
+import { g as resolveInside, h as readUtf8 } from "./ccc-B-h_A7uc.js";
+import { D as getLastActiveSessionInfo, E as getActiveSessionInfo, I as sessionEvents, L as sessionsRoot, M as parseTrajectoryCode, _ as readBindDeclaration, g as listBindDeclarations, h as isBindUsable, m as claimBinding } from "./profile-Dpg3wYO5.js";
 import { dirname, join } from "node:path";
 import { existsSync, readFileSync, statSync } from "node:fs";
 import { fileURLToPath } from "node:url";
@@ -446,6 +446,17 @@ function appendBound(session, action, rec) {
 			detail
 		};
 	}
+	const header = sessionHeader(session);
+	if (header?.origin === "subagent") {
+		const detail = `会话 ${id} 是 **subagent 子会话**（header.origin="subagent"${header.parentSession ? `，parentSession=${header.parentSession}` : ""}），不能作为轨迹「${rec.dirName}」的载体 ⇒ current.dsh_session_bind **未被改写**。\n  原因：子会话的消息投递权归宿主 subagent routing，ACC 唤醒/投递会被宿主以 \`session/agent-busy\`（is owned by subagent routing）拒绝 ⇒ 该轨迹**每一条**到点唤醒都送不出去。
+  正确做法：在**根会话**（不是子会话）里执行 cognitive_trajectory use。`;
+		console.warn(`[serenity-hooks] ✗ 绑定未写入（SESSION_IS_SUBAGENT）：${detail}`);
+		return {
+			ok: false,
+			code: "SESSION_IS_SUBAGENT",
+			detail
+		};
+	}
 	const result = claimBinding(sessionsRoot(root), rec.dirName, {
 		sessionId: id,
 		at: Date.now(),

package/lib/{profile-zxakCNXy.js → profile-Dpg3wYO5.js}

@@ -1,5 +1,5 @@
 import { n as __exportAll } from "./rolldown-runtime-B4iAMlE-.js";
-import { _ as resolveInside, g as readUtf8 } from "./ccc-CyYJL4F2.js";
+import { g as resolveInside, h as readUtf8 } from "./ccc-B-h_A7uc.js";
 import { basename, dirname, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, statSync, writeFileSync } from "node:fs";
 //#region src/kernel/time.ts

package/lib/{route-DxIKWeN9.js → route-CmEoKp9w.js}

@@ -1,6 +1,6 @@
 import { n as __exportAll } from "./rolldown-runtime-B4iAMlE-.js";
-import { s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS } from "./ccc-CyYJL4F2.js";
-import { c as unsetEntry, l as writeEntry, r as getEntry } from "./service-DDmHSglV.js";
+import { s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS } from "./ccc-B-h_A7uc.js";
+import { c as unsetEntry, l as writeEntry, r as getEntry } from "./service-Cndtf7q4.js";
 import { join, resolve } from "node:path";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { createHash } from "node:crypto";

package/lib/seams/context.d.ts

@@ -15,7 +15,8 @@ import type { UserMessage } from '@deepseek-ai/dsh-session';
 export declare function accIdentityText(root: string, configPaths?: string[], entrySkillMaxChars?: number): string;
 /**
  * ACC 注入消息（S134 去重）：**只含简短身份锚点**（[ACC] 已激活 + CCC 根 + 约束 + Phase 2）。
- * ⚠️ 原文案含「+ cheap-worker 模型」，该注入已于 2026-09-16 删除（§0e-G）⇒ 此处同步订正（散文级残留）。
+ * ⚠️ 原文案含「+ cheap-worker 模型」；该注入已于 2026-09-16 删除（§0e-G），
+ *    且 cheap-worker 本身已于 2026-10-28 整条下线 ⇒ 此处订正（散文级残留已无对应实现）。
  * 完整身份（ACC 5 块 + CCE + Constraints + EAP + SKILL 全文 + Session 块）由**系统提示词层**
  * （systemPrompt.section，每轮 prompt 装配自动注入，含 subagent）承担——对话消息流/压缩重注入
  * 不再重复注入同一内容（token 双倍浪费，见 S134 注入方案梳理）。
@@ -39,7 +40,9 @@ export declare function hasAccBanner(session: unknown): boolean;
  * 只有"conversation 根会话"才自动恢复最近激活的宁静号会话——
  * - subagent：session header `origin === 'subagent'`（DSH 路由语义，agent-lookup.ts）
  * - 派生会话：`parentSession` 存在（任何子会话）
- * - cheap-worker 杂工：sessionId 固定 `cheap-worker-` 前缀（tools/cheap-worker.ts 生成）
+ * - 历史 `cheap-worker-` 前缀会话（**兼容保留**：生成者 `tools/cheap-worker.ts` 已于
+ *   2026-10-28 整条下线 ⇒ **不会再产生新会话**，但**旧持久化会话仍可能被 resume**，
+ *   那时它依旧不该把主会话激活注入子上下文）
  * 三者都不恢复（避免把主会话激活注入子上下文，违背 v1.16.2 scope 隔离）。
  */
 export declare function shouldAutoRestore(agent: Agent, root?: string | null): boolean;

package/lib/{service-DDmHSglV.js → service-Cndtf7q4.js}

@@ -1,4 +1,4 @@
-import { s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS } from "./ccc-CyYJL4F2.js";
+import { s as loadSerenityConfig, t as DEFAULT_SERENITY_CONFIG_PATHS } from "./ccc-B-h_A7uc.js";
 import { join } from "node:path";
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
 //#region src/tools/localstore/service.ts
@@ -18,7 +18,7 @@ import { existsSync, readFileSync, writeFileSync } from "node:fs";
 * 存储结构（JSON 顶层分节）：
 *   { "credentials": { "HOME_GITLAB_TOKEN": "xxx" }, "<config节>": { "<key>": "v" } }
 *   credentials 为保留节（credential 命名空间，key 大写蛇形）；其余节归 config 命名空间
-*   （path = section.key，如 cheap-worker.models）。
+*   （path = section.key，如 my-feature.someKey）。
 */
 const LOCALSTORE_SCOPES = ["credential", "config"];
 /** 存储文件名（CCC 根根目录） */
@@ -111,7 +111,7 @@ function assertCredentialKey(key) {
 /** 校验 config 路径（节.key）；不合法抛错 */
 function assertConfigPath(path) {
 	const idx = path.indexOf(".");
-	if (idx <= 0 || idx === path.length - 1) throw new Error(`config path "${path}" must be section.key (e.g. cheap-worker.models)`);
+	if (idx <= 0 || idx === path.length - 1) throw new Error(`config path "${path}" must be section.key (e.g. my-feature.someKey)`);
 	const section = path.slice(0, idx);
 	const key = path.slice(idx + 1);
 	if (!CONFIG_SECTION_RE.test(section)) throw new Error(`config section "${section}" must match ^[a-z][a-z0-9-]*$`);
@@ -195,8 +195,8 @@ function docText(root) {
 		"  \"credentials\": {",
 		"    \"HOME_GITLAB_TOKEN\": \"xxx\"",
 		"  },",
-		"  \"cheap-worker\": {",
-		"    \"models\": [\"minimax-cn-coding-plan/MiniMax-M3\"]",
+		"  \"my-feature\": {",
+		"    \"someKey\": \"some-value\"",
 		"  }",
 		"}",
 		"```",
@@ -204,7 +204,7 @@ function docText(root) {
 		"",
 		"## Key conventions",
 		"- credential key: ^[A-Z][A-Z0-9_]*$ (e.g. HOME_GITLAB_TOKEN)",
-		"- config path: section.key (section ^[a-z][a-z0-9-]*$, key lowerCamel ^[a-z][a-zA-Z0-9_]*$, e.g. cheap-worker.models)",
+		"- config path: section.key (section ^[a-z][a-z0-9-]*$, key lowerCamel ^[a-z][a-zA-Z0-9_]*$, e.g. my-feature.someKey)",
 		"",
 		"## Reading (agents may use fs tools directly)",
 		`- Read ${path} with the read tool → JSON.parse`,

package/lib/{session-Dao7X5lR.js → session-CaNqSHVB.js}

@@ -1,8 +1,8 @@
-import { n as agentCwdFor, r as cccRootForCwd, s as hostAgents } from "./ccc-roots-WfktvbN8.js";
-import { g as readUtf8, o as isSafeModeOn, p as readCognitiveTrajectorySkills, u as readBlacklist } from "./ccc-CyYJL4F2.js";
-import { K as isoLocal, L as sessionsRoot, N as readActiveSessionMd, d as registerTrajectorySession$1, f as trajectoryDirNameForSession, o as readTrajectoryConstraintAt, p as unregisterTrajectorySession$1, u as trajectoryConstraintForSession, y as DEFAULT_SESSION_SCOPE } from "./profile-zxakCNXy.js";
-import { a as readGitTrack, i as localstorePath } from "./service-DDmHSglV.js";
-import { d as constraintCognitiveTrajectory, m as profileMsmWhitelist, n as PLUGIN_SOURCE, o as readLastBound, p as createProfilePromptReader, u as buildTrajectoryBasePrompt, v as ACC_VERSION } from "./message-source-BAMwXu6i.js";
+import { n as agentCwdFor, r as cccRootForCwd, s as hostAgents } from "./ccc-roots-BIdg0EyM.js";
+import { f as readCognitiveTrajectorySkills, h as readUtf8, o as isSafeModeOn, u as readBlacklist } from "./ccc-B-h_A7uc.js";
+import { K as isoLocal, L as sessionsRoot, N as readActiveSessionMd, d as registerTrajectorySession$1, f as trajectoryDirNameForSession, o as readTrajectoryConstraintAt, p as unregisterTrajectorySession$1, u as trajectoryConstraintForSession, y as DEFAULT_SESSION_SCOPE } from "./profile-Dpg3wYO5.js";
+import { a as readGitTrack, i as localstorePath } from "./service-Cndtf7q4.js";
+import { d as constraintCognitiveTrajectory, m as profileMsmWhitelist, n as PLUGIN_SOURCE, o as readLastBound, p as createProfilePromptReader, u as buildTrajectoryBasePrompt, v as ACC_VERSION } from "./message-source-CKJPJCzc.js";
 import { basename, dirname, join, resolve } from "node:path";
 import { chmodSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, statSync, writeFileSync } from "node:fs";
 import { createUserMessage } from "@deepseek-ai/dsh-llm";
@@ -1507,7 +1507,6 @@ function toolsBlock() {
 		"  msm          — execute a registered CCC MSM: msm(name, args); partial name returns candidates; inspect=true shows usage",
 		"  praxis       — actionable theory injection: praxis (index) / praxis eap / praxis neat / praxis cce / praxis ontology",
 		"  ontology     — ontology engineering ENGINE (executable): init (write template) / check (M1-M10 structural; level=strict adds L1-L5 hints) / explain (summary) / verify (V1-V4 runtime compliance) / review (semantic-review prompt) / compliance (axiom-vs-skill checklist). Sibling of `praxis ontology` — that one is the METHOD TEXT, this one RUNS it. path must stay inside the container; the receipt carries the engine exit code (0/1/2/4) and the engine text verbatim, so read it rather than assuming success",
-		"  cheap-worker     — delegate work to a worker agent on the CCC-configured model; one serial child per task, returns its final text. `jobs=[...]` fans out in parallel (cap 10, results keep your order). No loop, no completion code, no progress file. The model is NOT selectable per call (read from the CCC config); a worker's tool set excludes cheap-worker itself",
 		"  serenity-skill-creator — creator for serenity-skills (this container's enhanced skill standard): guide (authoring/optimization method — read first) / create <name> (scaffold SKILL.md + skill.ttl + references/, base-chain import path computed) / check <name> (A1 structural + A2 base-chain; three states: modeled-ok / plain-skill / modeled-but-check-could-not-run) / review <name> (C tier: axiom-vs-text compliance question list, half-mechanical) / index <name> (preview the second-layer resource list the model will see) / status (which skills are modeled). A skill is \"modeled\" iff it has a file named exactly skill.ttl next to SKILL.md; a plain skill is NOT an anomaly. Only `create` writes, and it refuses an existing directory",
 		"  localstore   — ACC local credential/config storage (CCC-root localstore.json; git policy localstore.gitTrack default deny)",
 		"  container_admin — container administration (the maintenance bay): role (轨迹约束 roles: guide/validate/apply/list) / msm (register/deregister/check/guide/catalog/ccc-config) / config (view)",
@@ -2090,21 +2089,29 @@ function registerCognitiveTrajectorySkillSection(agent, root) {
 	}
 }
 //#endregion
-//#region src/trajectory/delegate/core.ts
+//#region src/trajectory/model-string.ts
 /**
-* trajectory/delegate/core.ts — cheap-worker（杂工）纯逻辑层（零 DSH 依赖，可独立单测）
+* trajectory/model-string.ts — `provider/model` 串解析（**共用件**，不属于任何工具）
 *
-* 🆕 2026-10-14（owner 令「删除后台运行能力」）：**进度文件 / stop token / 轮次循环**整族已退场 ——
-* 它们**只**服务于 background 模式。本模块现存 = 前台委派真正需要的三件：
-* 模型串解析 ／ 白名单校验 ／ provider 可用性判读（＋ 使用指引文本）。
+* ## 为什么单独成模块（2026-10-28，cheap-worker 下线时抽出）
 *
-* ## S14（2026-10-19，轨迹中心重构）：此前位于 `role/worker/` 下（该目录已消失）
+* 它原本住在 `trajectory/delegate/core.ts`（cheap-worker 的纯逻辑层）。但 grep 调用点后发现
+* **它有两个与 cheap-worker 无关的消费者**：
+*   - `trajectory/session.ts`（`agentOptions` 装配，IM 入站 / send-now 冷启都用）
+*   - `trajectory/model-runtime.ts`（`trajectory.json` 的 `model` 运行时热切换）
 *
-* 落点 = `trajectory/delegate/`。判据（判读表 §3.1）：它是**轨迹 × 轨迹**那种合法形态 ——
-* 主语是「主轨迹把活交给子 agent」，既不是某一条轨迹的切面，也不是容器宪法。
-* ⚠️ 它**不属于** `policy/`：policy 管"这条轨迹允许什么"，本模块管"一条轨迹怎么把活派出去"。
+* ⇒ 若跟着 `delegate/` 一起删掉，**轨迹的模型热切换与载体装配会一起断**。
+* ⇒ 判据（可外推）：**删一个模块前，先核它的导出有没有"跨域消费者"** ——
+*    目录归属（谁住在谁的目录里）不等于依赖归属（谁在用）。同族先例：`listWakes` 有完整诊断出口
+*    却被误判成零调用点（续 337 ②b）。
+*/
+/**
+* 解析 model 字符串（`provider/model`）→ `{ provider, model }`。
+*
+* 无 `/` ⇒ 视为 **model-only**（`provider === undefined`），由调用方决定是否接受这种形态。
+* ⚠️ 只按**第一个** `/` 切分：provider id 不含 `/`，但 model id 可能含（如 `p/ns/model-x`）
+* ⇒ 取 `indexOf` 而非 `split('/')` 才是对的。
 */
-/** 解析 model 字符串（provider/model）→ {provider, model}；无 / 视为 model-only */
 function splitModel(model) {
 	const idx = model.indexOf("/");
 	if (idx < 0) return {
@@ -2116,130 +2123,9 @@ function splitModel(model) {
 		model: model.slice(idx + 1)
 	};
 }
-/** 校验模型在白名单内；不在 → 抛错（用户拍板：只能使用 CCC 配置的模型） */
-function requireWhitelistedModel(model, models) {
-	if (!models.includes(model)) throw new Error(`cheap-worker: model "${model}" is not in the CCC whitelist. Configure .opencode/serenity.json "cheap-worker.models" with one of: ${models.join(", ")}`);
-}
-/**
-* providerAvailabilityError — 判定「**本机有没有该 provider 的 adapter**」，并产出**可执行**的错误文本。
-* 返回 `null` = 全部可用（调用方照常继续）。
-*
-* 🔴 为什么需要它（S142 2026-09-25，owner 在 **Mac** 上实测）：`cheap-worker` 的模型白名单写在
-*   **CCC**（`.opencode/serenity.json`，**随 git 走**），而 provider adapter 由**每台机器的宿主**
-*   注册（profile 配置 / settings 命名空间）⇒ 同一份白名单在一台机器可用、在另一台必失败。
-*   实测症状：宿主抛 `no adapter registered for provider "<p>"`（`dsh-llm`，code `NO_ADAPTER`），
-*   而**前台路径的 `diagnostic` 是空的** ⇒ 调用方（LLM）拿到 `stopReason:"error"` 却**不知道为什么**，
-*   也就无法修正自己的配置 —— 本条把「沉默的失败」变成「可执行的错误」。
-*
-* 数据来源（宿主 `LlmRuntime`）：`listProviders()` = **有 adapter 的路由**；
-* `listConfigurableProviders()` = **已声明但未必激活**的路由（含激活用的 settings 命名空间）。
-*
-* 判据边界：`model` 串里**没有 `/`** 时取不到 provider（沿用 agent 默认路由）⇒ **不判定**（跳过）。
-*/
-function providerAvailabilityError(models, facts) {
-	const registered = new Set(facts.registered.map((r) => r.id));
-	const requested = models.map((m) => ({
-		raw: m,
-		provider: splitModel(m).provider
-	})).filter((e) => typeof e.provider === "string" && e.provider !== "");
-	const missing = [...new Set(requested.filter((e) => !registered.has(e.provider)).map((e) => e.provider))];
-	if (missing.length === 0) return null;
-	const list = (items, cap = 12) => items.length === 0 ? "  (none)" : items.slice(0, cap).map((s) => `  - ${s}`).join("\n") + (items.length > cap ? `\n  … and ${items.length - cap} more` : "");
-	const available = facts.registered.map((r) => r.name ? `${r.id} (${r.name})` : r.id).sort();
-	const declared = (facts.declared ?? []).filter((d) => missing.includes(d.provider));
-	const configPath = facts.configPath ?? "<ccc>/.opencode/serenity.json";
-	const missingList = missing.map((p) => `"${p}"`).join(", ");
-	return [
-		`cheap-worker: provider ${missingList} has no adapter registered on this machine.`,
-		"",
-		"  Requested model(s) :",
-		...requested.map((e) => `    ${e.raw}`),
-		`  Configured in      : ${configPath} → "cheap-worker.models" / "cheap-worker.defaultModel"`,
-		"",
-		"  Why this happens   : the whitelist lives in the CCC (it travels with the repository), while",
-		"                       provider adapters are registered per machine by the host. An entry that",
-		"                       works on one machine can fail on another.",
-		"",
-		"  Available on this machine (registered adapters):",
-		list(available),
-		"",
-		"  Declared but NOT active here (activate via settings, then retry):",
-		list(declared.map((d) => `${d.provider}${d.displayName ? ` (${d.displayName})` : ""}${d.settingsNs ? ` — settings namespace "${d.settingsNs}"` : ""}`)),
-		"",
-		"  Fix (pick one, then retry):",
-		`    1. Point the whitelist at a provider that IS registered here — edit ${configPath}`,
-		"       (\"cheap-worker.models\", and \"cheap-worker.defaultModel\" if that is what you relied on).",
-		`    2. Register/activate provider ${missingList} on this machine (host profile config,`,
-		"       or the settings namespace listed above).",
-		"",
-		"  Do not retry unchanged — the same call fails identically."
-	].join("\n");
-}
-/**
-* cheap-worker 规模化使用指引（guide 子命令输出）。
-*
-* 🆕 2026-10-14：**双模式段已整段退场**（owner 令「删除后台运行能力」）。本指引只描述现行机制：
-* 前台委派（单任务）／前台并行扇出（jobs）／白名单与 provider 预检。
-*/
-const CHEAP_WORKER_GUIDE = `# cheap-worker — Scale-Up Usage Guide (guide)
-
-## What it is
-One delegation primitive: **foreground spawn**. The host starts child agent(s) through its delegation
-service, awaits them, and returns their final text. There is no loop, no completion code, no progress
-file, and no unattended/background run.
-
-| | single | parallel (jobs) |
-|---|---|---|
-| Call | cheap-worker(task, [label]) | cheap-worker(jobs=[{task, label?}, ...]) |
-| Behaviour | one child runs the task once | all children start at once, results keep your order |
-| Cap | — | **10 (fixed, hardcoded)** |
-| Model | CCC config (single source) | same |
-
-## ⚠️ Before using: load eap and design the plan
-Before calling cheap-worker, load eap (acc-eap skill) and design the "scale-up cheap-worker plan" based on the EAP framework.
-
-### 1. Task decomposition (E↑ Explicit)
-- Split large tasks into explicit subtasks: each subtask defines goal / input / boundaries (what to do, what not to do) / acceptance criteria
-- Make dependencies explicit: dependent tasks run serially, independent ones can run in parallel via \`jobs\`
-
-### 2. Prompt design (cheap-worker's task parameter)
-- task must be detailed, fixed, and EAP-compliant: clear goal, drawn boundaries, decidable acceptance criteria
-- the child does NOT share your conversation — restate everything it needs in task
-- Anti-example "handle this file" — ambiguous; good example "read <path>, extract all rows of the「关键决策」table,
-  output a JSON array (fields id/conclusion/evidence), do not modify the original file"
-- Reading/curating or text-writing work (extracting from files, summarizing, writing docs, generating text, etc.):
-  the cheap-worker-internal agent is also required to load eap and organize output per the EAP standard
-
-### 3. Model (CCC-configured, not selectable per call)
-- The model is read from .opencode/serenity.json "cheap-worker.models" — **the caller cannot pass one**
-  (there is no "model" parameter). "cheap-worker.defaultModel" names which entry is used; it falls back to models[0].
-- The CCC is expected to point this whitelist at LOW-COST models: cheap-worker is the bulk-execution channel
-- A child's own recursive subagents inherit the child's model automatically (DSH native)
-
-### 3b. 🔴 Provider availability (per-machine — the whitelist is NOT enough)
-- The whitelist lives in the **CCC** ("serenity.json", it **travels with the repository**), but provider
-  **adapters are registered per machine by the host** (profile config / settings namespace). An entry that
-  works on one machine can fail on another with: "no adapter registered for provider <p>".
-- Before spawning, cheap-worker verifies the provider of the resolved model against the adapters registered
-  **on this machine**; if it is missing it reports the requested model, where it is configured, **the
-  providers that ARE available here**, any declared-but-dormant route (with its settings namespace), and the
-  exact fix — delivered in the result's "diagnostic" field (never an opaque failure, never a created child).
-- ⇒ If you see "has no adapter registered on this machine": edit ".opencode/serenity.json" "cheap-worker.models"
-  (and "cheap-worker.defaultModel") to a provider listed as available, or activate/register the provider on this
-  machine. **Do not retry the same call unchanged** — it fails identically.
-
-### 4. Parallel strategy
-- Independent subtasks: cheap-worker(jobs=[{task,label?},...]) ⇒ fan-out, **cap 10**, results come back
-  **in the order you passed them** (label is only a display name).
-- For programmable pipeline/phase orchestration at scale, use the platform's workflow tool instead.
-
-## Completion criteria
-- The child's run settles; done=true only when stopReason="completed" — otherwise read "diagnostic"
-  (and "output" for whatever partial text was produced).
-`;
 //#endregion
 //#region src/trajectory/session.ts
-/** `provider/model` → agentOptions（由 delegate/core 提供，保持单一实现） */
+/** `provider/model` → agentOptions（由 `model-string.ts` 提供，保持单一实现） */
 const trajectoryAgents = /* @__PURE__ */ new Map();
 /** 查 sessionId 的活体 agent（进程内会话延续用；未注册/已清理 → undefined） */
 function getTrajectoryAgent(sessionId) {
@@ -2567,4 +2453,4 @@ function trajectoryConstraintMsmGate(root, sessionId, action, name) {
 	return {};
 }
 //#endregion
-export { buildResourceIndex as A, verifyPassword as C, recordToolUsage as D, verifyTotpCode as E, hasTrajectoryPrompt as F, isSafeSkillName as M, truncateContent as N, REFERENCE_DIR as O, TRAJECTORY_PROMPT_FILENAME as P, toWire as S, MECHANISM_PORTS as T, registerEntrySkillSectionGlobal as _, trajectoryConstraintFor as a, projectKnownWorkspaces as b, trajectoryWorkspaceMdPath as c, CHEAP_WORKER_GUIDE as d, providerAvailabilityError as f, registerEntrySkillSection as g, registerCognitiveTrajectorySkillSection as h, getTrajectoryAgent as i, buildResourceNameSuffix as j, SKILL_ONTOLOGY_FILE as k, unregisterTrajectorySession as l, splitModel as m, deliverToTrajectory as n, trajectoryConstraintMsmGate as o, requireWhitelistedModel as p, ensureWorkspacePromptSection as r, trajectoryConstraintParticipates as s, createTrajectoryAgent as t, workspaceCognitiveTrajectoryLine as u, applyWirePatch as v, FACE_PORTS as w, readAdvancedSettings as x, migrateLegacyLocalstore as y };
+export { truncateContent as A, verifyTotpCode as C, buildResourceIndex as D, SKILL_ONTOLOGY_FILE as E, hasTrajectoryPrompt as M, buildResourceNameSuffix as O, MECHANISM_PORTS as S, REFERENCE_DIR as T, projectKnownWorkspaces as _, trajectoryConstraintFor as a, verifyPassword as b, trajectoryWorkspaceMdPath as c, splitModel as d, registerCognitiveTrajectorySkillSection as f, migrateLegacyLocalstore as g, applyWirePatch as h, getTrajectoryAgent as i, TRAJECTORY_PROMPT_FILENAME as j, isSafeSkillName as k, unregisterTrajectorySession as l, registerEntrySkillSectionGlobal as m, deliverToTrajectory as n, trajectoryConstraintMsmGate as o, registerEntrySkillSection as p, ensureWorkspacePromptSection as r, trajectoryConstraintParticipates as s, createTrajectoryAgent as t, workspaceCognitiveTrajectoryLine as u, readAdvancedSettings as v, recordToolUsage as w, FACE_PORTS as x, toWire as y };

package/lib/surface/status.d.ts

@@ -1,7 +1,7 @@
 /**
  * surface/status.ts — 状态与安全模式操作（纯逻辑，零 DSH 依赖，可独立单测）
  *
- * WebUI 停靠栏的数据源：ACC 版本 / CCC 根 / safe-mode 状态 / 黑名单 / keeper 阈值 / cheap-worker 模型。
+ * WebUI 停靠栏的数据源：ACC 版本 / CCC 根 / safe-mode 状态 / 黑名单 / keeper 阈值。
  * setSafeMode 直接读写 .serenity-safe-on 标记（守卫实时读取，写即生效）。
  */
 import { type TrajectorySummary } from '../trajectory/core.js';
@@ -56,7 +56,6 @@ interface SerenityStatus {
         message?: string;
     }[];
     threshold: number | null;
-    cheapWorkerModel: string | null;
     /**
      * 活跃轨迹清单（owner 2026-10-18：CCC 状态面板要展示"所有没有归档的轨迹"）。
      * 🔴 判据源 = `listActiveTrajectories`（它内含 `_` 前缀跳过 ⇒ 归档区自动不在域内）；

package/lib/tools/localstore/service.d.ts

@@ -14,7 +14,7 @@
  * 存储结构（JSON 顶层分节）：
  *   { "credentials": { "HOME_GITLAB_TOKEN": "xxx" }, "<config节>": { "<key>": "v" } }
  *   credentials 为保留节（credential 命名空间，key 大写蛇形）；其余节归 config 命名空间
- *   （path = section.key，如 cheap-worker.models）。
+ *   （path = section.key，如 my-feature.someKey）。
  */
 import type { JsonValue } from '../../kernel/json.js';
 /** 命名空间：credential（凭据）| config（配置） */