@thincoder/core 0.10.8 → 0.10.10

package/agent-tools/subagent-spawn.mjs

@@ -26,9 +26,9 @@ import { nextSubagentId } from "./subagent-scheduler.mjs"
 import {
   normalizeFileList, describeBlockers, assertNoDepCycle, depInfo,
 } from "./subagent-scheduler.mjs"
-// M5 F2（ENGINEERING-MODE-V2-MODULE-DELEGATION §2.3）：任务书六强制字段校验本体落
+// M5 F2（ENGINEERING-MODE-V2-MODULE-DELEGATION §2.3）：任务书 round 枚举 + 五项结构化参数校验/拼装本体落
 // spawn-gates.mjs（纯谓词零依赖）——本处只加 import 调用。
-import { validateTaskBookFields } from "./spawn-gates.mjs"
+import { validateRoundParam, validateTaskBookParams, composeTaskBookBrief } from "./spawn-gates.mjs"
 // 台账 #23（AGENT-LOOP-SUBAGENT.md §6.26 · D23-3）：审计块构造器外提（`summarizeEngTaskBook`
 // + `buildAuditBlock` 纯函数）——spawn 档只做「收集 + 绑定」；块文本逐字搬移（D23-4）。
 import { buildAuditBlock } from "./audit-block.mjs"
@@ -38,6 +38,14 @@ import { resolveBatchReadPath, batchDocBases } from "./batch-paths.mjs"
 // LOGGING（LOGGING.md）：#309 形三观测留痕走同一事件通道。
 import { logEvent } from "../log.mjs"
 
+/** 任务书播报文本：该角色名集拼装 + 可选 task 自由文本（拼装空 ⇒ 原 task 逐字——旧形零变）。 */
+function taskBriefOf(args, role) {
+  const composed = composeTaskBookBrief(args, role)
+  if (!composed) return args.task
+  const extra = typeof args.task === "string" ? args.task.trim() : ""
+  return extra ? `${composed}\n\n${extra}` : composed
+}
+
 /** #309 任务书 token 判据（`AGENT-LOOP-SUBAGENT.md` §6.29.3）：`.md` 结尾的连续路径型字面
  *  （含盘符形态——裸名 `AGENTS.md` 无分隔符且非绝对，见调用点过滤）。 */
 const MD_PATH_TOKEN = /[A-Za-z0-9_@.:\\/-]+\.md\b/g
@@ -120,7 +128,7 @@ export function resolveDesignSlot(parent, designIdArg) {
     throw new Error(`Multiple approved designs in this session (${size}) — pass the designId parameter (echoed with each token) to choose which design this eng-coder spawn belongs to. Held design ids: ${heldIds}`)
   }
   if (size === 1) return { token: [...slots.values()][0] }
-  throw new Error("Invalid or missing design token — run advisor with type='design' first and pass the returned token as designToken.")
+  throw designTokenRefusal("missing")
 }
 
 /**
@@ -211,7 +219,7 @@ export function buildSpawnChild(parent, ctx, args, role, wantAsync, files, depen
     batchDocAbs = resolveBatchReadPath(parent.cwd ?? process.cwd(), given)
     if (!batchDocAbs) throw refusal(" (given path is not a readable file)")
     // #309 形三：任务书中的他批批次档引用观测留痕（不阻断——放行不受影响）。
-    logBatchDocRefs(parent, role, args.task, batchDocAbs)
+    logBatchDocRefs(parent, role, taskBriefOf(args, role), batchDocAbs)
   } else if (role === "coder") {
     const given = typeof args.batchDoc === "string" ? args.batchDoc.trim() : ""
     if (given) {
@@ -222,33 +230,18 @@ export function buildSpawnChild(parent, ctx, args, role, wantAsync, files, depen
     }
   }
 
-  // M5 F2（ENGINEERING-MODE-V2-MODULE-DELEGATION §2.2）：任务书六强制字段门——
-  // 工程角色（eng-coder/eng-designer）必带 round（initial|fix）+ 五段任务书字段；
-  // 落点 = batchDoc 门之后、token 门之前（§2.2 数据流契约同序）。判据只到「字段在场」——
-  // 内容够不够由执行者拒收兜底（需求 §1.14 #9 行为面）。explore/plan/coder 豁免。
-  if (role === "eng-coder" || role === "eng-designer") {
-    validateTaskBookFields(args)
-  }
+  // M5 F2（ENGINEERING-MODE-V2-MODULE-DELEGATION §2.2）：任务书参数门——**所有 spawn 角色**。
+  // 工程角色：round 枚举（initial|fix）+ 四项核心 + `designPoints`；explore / plan / coder：
+  // 四项核心 + `scope`。判据三条零改（存在 ∧ string ∧ trim 非空）；落点 = batchDoc 门之后、
+  // token 门之前（门序 = AGENT-LOOP-SUBAGENT.md §6.22）。
+  if (role === "eng-coder" || role === "eng-designer") validateRoundParam(args)
+  validateTaskBookParams(args, role)
 
-  // eng-coder token gate: the design review must have passed and the caller must
-  // present the exact token advisor issued — otherwise the child is not authorized to code.
-  // 2026-09-01: multi-design slots — the token is located by designId (exact slot,
-  // single-slot fallthrough); token validation itself is unchanged (2026-09-06:
-  // HMAC removed — validateDesignToken now checks format + TTL only).
+  // eng-coder token gate（TOOLS.md §6.25 ④）：判定本体 = gateDesignToken（本档模块尾）——
+  // missing / mismatch / expired / invalid 四态各出互异拒句；拒绝集合与旧三条件合取全等。
+  // 返回值 = 槽内令牌，必须落回 issuedToken：下方 `child._engDesignId` 回写依赖它。
   let issuedToken
-  if (role === "eng-coder") {
-    issuedToken = resolveDesignSlot(parent, args.designId).token
-    // R16 D-R16c ③ — spawn-gate cleanup: only an EXPIRY rejection removes the slot
-    // (the caller passed the slot's own token and it is past TTL — 长跑不重启也清);
-    // mismatch / format rejections never delete — the slot's own token may still be
-    // valid and a caller error must not destroy it (T-R16d). 单值镜像已退役（D3）——
-    // 无镜像同步清。
-    const expiredReject = !!issuedToken && args.designToken === issuedToken && tokenExpired(issuedToken)
-    if (!issuedToken || args.designToken !== issuedToken || !validateDesignToken(args.designToken)) {
-      if (expiredReject) removeDesignTokenSlot(parent, args.designId, issuedToken)
-      throw new Error("Invalid or missing design token — run advisor with type='design' first and pass the returned token as designToken.")
-    }
-  }
+  if (role === "eng-coder") issuedToken = gateDesignToken(parent, args)
 
   // Filter tool set by role: explore/plan are read-only (plan is a planning agent, its deliverable is the plan itself)
   let tools
@@ -345,7 +338,7 @@ export function buildSpawnChild(parent, ctx, args, role, wantAsync, files, depen
   // 审计/探索（"status 里这个文件算不算超清单？"）。注入分支整体删除（B 方案
   // git 只读变体亦随裁定废弃——D-AG5）。顶层主 agent 注入保留（§3 prepareRun——
   // setup.mjs depth===0——D-AG7 范围边界）。
-  let input = args.context ? `Context:\n${args.context}\n\nTask:\n${args.task}` : args.task
+  let input = args.context ? `Context:\n${args.context}\n\nTask:\n${taskBriefOf(args, role)}` : taskBriefOf(args, role)
   // 台账 #23（AGENT-LOOP-SUBAGENT.md §6.26 · D23-1）：**spawn 级固定机制性指令改走 system 固块**——
   // 两处（批次档路径行 + 审计模板块）原随 user 首条下发，压缩把首条并入摘要即丢（长任务中后期
   // 既看不到批次档路径、也看不到审计模板 ⇒ 过度勘察的真病根）；固块值在 child 生命周期内恒定
@@ -410,3 +403,32 @@ export function buildSpawnChild(parent, ctx, args, role, wantAsync, files, depen
   const childRunOpts = buildChildRunOpts(ctx)
   return { child, input, childOpts, childRunOpts, relayPrefix, childProvider }
 }
+
+// ── design-token 门（TOOLS.md §6.25 ③④——四态互异拒句；拒绝集合与旧三条件合取全等） ──
+
+/** 四态拒句（逐字 = TOOLS.md §6.25 ③）：missing / mismatch / expired / invalid。
+ *  mismatch 可携 designId（非凭证）；四句均零令牌值回显。 */
+export function designTokenRefusal(kind, designId) {
+  if (kind === "missing") return new Error("designToken missing — the eng-coder spawn is refused: no usable token for an approved design slot came with this spawn. Pass the designToken parameter with the exact value from the subagent action:'design-slots' row (the text after designToken=), copied verbatim; if that list is empty, no design review has been approved in this session yet — run advisor with type='design' first. No token value is echoed here.")
+  if (kind === "mismatch") return new Error("designToken mismatch — the eng-coder spawn is refused: the value passed does not equal the token held for this design slot. Re-read the subagent action:'design-slots' row and pass the value after designToken= verbatim, unchanged. No token value is echoed here." + (designId ? ` (designId: ${designId})` : ""))
+  if (kind === "expired") return new Error("designToken expired — the eng-coder spawn is refused: the token matches this design slot but is past its TTL. The expired slot has been removed; run advisor with type='design' again on the current design and pass the newly issued token — an expired authorization cannot be retried. No token value is echoed here.")
+  return new Error("designToken invalid — the eng-coder spawn is refused: the value passed equals this design slot's stored token, but that stored value is not a well-formed token, so no expiry can be judged and the slot was left in place. Run advisor with type='design' to issue a fresh token for this design; a malformed record never passes the gate. No token value is echoed here.")
+}
+
+/** eng-coder spawn 的令牌门（TOOLS.md §6.25 ④）：resolveDesignSlot 的既有两条 designId
+ *  诊断零改 → 参数在场 → 值相等 → 值有效。槽删除只在 tokenExpired(given) 成立时发生
+ *  （D-R16c ③）；mismatch / invalid 不删槽（T-R16d）。返回槽内令牌（调用方回写 designId
+ *  依赖它）；sync / async 两路共经 buildSpawnChild——一处判定双路生效。 */
+export function gateDesignToken(parent, args) {
+  const issuedToken = resolveDesignSlot(parent, args?.designId).token
+  // 非字符串 ⇒ 空串 ⇒ missing（本意——T9 锁定）
+  const given = typeof args?.designToken === "string" ? args.designToken : ""
+  if (!issuedToken || !given.trim()) throw designTokenRefusal("missing")
+  if (given !== issuedToken) throw designTokenRefusal("mismatch", args?.designId)
+  if (!validateDesignToken(given)) {
+    const expired = tokenExpired(given)
+    if (expired) removeDesignTokenSlot(parent, args?.designId, given)
+    throw designTokenRefusal(expired ? "expired" : "invalid")
+  }
+  return issuedToken
+}

package/agent-tools/subagent.mjs

@@ -5,7 +5,6 @@
  * 2026-10-07 批 ledger-tool（#927 并入）：+action: design-slots（只读清点面——
  * DESIGN-TOKEN-SETTLEMENT.md §9 F-SL1）+ consume-design 选择器扩展（designIds / expired /
  * olderThanDays）——实现在 `design-slots.mjs`（subagent-spawn.mjs re-export 保 import 面）。
- * 2026-10-14 批 design-token-recovery（#1384 并入）：design-slots 回收读口——`designId` 过滤 + `reveal:true` 单槽揭值（必携 designId；掩蔽 = 只揭活槽）——实现随动在 `design-slots.mjs`。
  *
  * 2026-09-03 拆分轮: subagent.mjs 超 500 硬顶——async 常量、共享 post-spawn 管线
  *（runChildPipeline）与队列/注入/并账机械迁至 ./subagent-async.mjs。execute
@@ -37,7 +36,7 @@ import { executeStatusAction, executeEscalateAction, executePanelAction, execute
 import { prepareScheduling, buildSpawnChild, executeConsumeDesignAction } from "./subagent-spawn.mjs"
 import { executeDesignSlotsAction } from "./design-slots.mjs"
 import { executeAsyncSpawn } from "./subagent-run.mjs"
-import { ROUND_VALUES } from "./spawn-gates.mjs"
+import { ROUND_VALUES, composeTaskBookBrief } from "./spawn-gates.mjs"
 // #15 描述外置：描述文本单点 = tool-docs/subagent.md（DESC 单解析面，缺档抛错语义不变）
 import { DESC } from "../tools/shared.mjs"
 
@@ -140,18 +139,23 @@ export const subagentTool = {
       action: { type: "string", enum: ["spawn", "status", "escalate", "cancel", "panel", "consume-design", "observe", "send", "design-slots"], description: "Which action — spawn (default) / status / observe / send / escalate / cancel / panel / consume-design / design-slots; semantics per action in the tool description." },
       view: { type: "boolean", description: "action:'panel' only: true (default) = the live panel blocks as the user sees them; false without freeze = error. Mutually exclusive with freeze (freeze wins)." },
       freeze: { type: "string", description: "action:'panel' only: block key of a digested-stuck block — reclaims it into the conversation; refused for running/done/unknown blocks or a still-pending report; works on the CLI TUI panel and on the desktop renderer panel (live readback of the blocks as the user sees them)." },
-      task: { type: "string", description: "Required for action:'spawn' (the self-contained task brief) and action:'escalate' (goal, constraints, entry files, acceptance criteria)." },
+      task: { type: "string", description: "For action:'spawn' (any role): OPTIONAL free-text supplement — the brief itself is the structured task-book parameters (four core: goal / knownFacts / acceptance / reportFormat, plus the role's fifth: designPoints for eng-coder/eng-designer, scope for explore/plan/coder); a task-only spawn is refused. For action:'escalate': the brief (goal, constraints, entry files, acceptance criteria)." },
       context: { type: "string", description: "Optional background the sub-agent needs (it cannot see this conversation); action:'spawn' only." },
       role: { type: "string", enum: ["explore", "plan", "coder", "eng-coder", "eng-designer"], description: "The sub-agent role — see the role matrix in the tool description. Exact spelling required. action:'spawn' only (escalate spawns its own expert internally)." },
       model: { type: "string", description: "action:'spawn': provider/model override ('provider:model', a provider, or a model name on the parent's provider) — defaults config.agent.subagentModels[role] → config.agent.subagentModel → the parent's provider; \"default\" inherits. action:'escalate': a consult candidate (default = the first)." },
-      designToken: { type: "string", description: "Required when role='eng-coder': the token from advisor(type='design') after the review passed — without it, eng-coder cannot modify files." },
-      designId: { type: "string", description: "role='eng-coder': the designId echoed with the approved token — required to pick between concurrent designs (optional for one). action:'consume-design': the single-slot selector (required to pick between several; the gate refuses to guess); see designIds / expired / olderThanDays for batch consumption. action:'design-slots': filter the inventory to one slot (trimmed exact match; an empty string means no filter; an unknown id is refused with the held id list) — REQUIRED with reveal:true." },
+      designToken: { type: "string", description: "REQUIRED for role='eng-coder': the exact token issued by advisor(type='design') after the review passed — copy it verbatim from the design-slots row (the text after designToken=). missing or mismatched = the spawn is refused; an expired token is refused with expired named. Pass it on every eng-coder spawn, fix rounds included (they reuse the same token)." },
+      designId: { type: "string", description: "role='eng-coder': the designId echoed with the approved token — required to pick between concurrent designs (optional for one). action:'consume-design': the single-slot selector (required to pick between several; the gate refuses to guess); see designIds / expired / olderThanDays for batch consumption. action:'design-slots': filter the inventory to one slot (trimmed exact match; an empty string means no filter; an unknown id is refused with the held id list)." },
       designIds: { type: "array", items: { type: "string" }, description: "action:'consume-design' (batch): an explicit non-empty list of design ids to close out — pass exactly ONE selector per call (designId / designIds / expired / olderThanDays)." },
       expired: { type: "boolean", description: "action:'consume-design' (batch): true = close out every expired slot (exactly ONE selector per call)." },
       olderThanDays: { type: "number", description: "action:'consume-design' (batch): close out every slot older than N days (age > N; exactly ONE selector per call)." },
-      reveal: { type: "boolean", description: "action:'design-slots' only: true = reveal the selected slot's full designToken — REQUIRES designId (one slot at a time, never a bulk dump); an expired or malformed slot is masked (designToken=—); a non-boolean value is refused. After a token drops from your context (compaction, restart), read it back this way and pass designId + designToken verbatim on the eng-coder spawn — the gate checks exact equality." },
       batchDoc: { type: "string", description: "REQUIRED for role='eng-coder'/'eng-designer': the batch record path (e.g. <repo>/docs/batches/<batch>-<topic>.md; relative paths resolve against the session cwd first, then candidate project roots — or absolute) — the task book this spawn implements/writes. Refused when absent or when the path does not resolve to a readable file; the content is never validated. role='coder' (normal mode): optional — binds this spawn's §5 record-write channel (unbound ⇒ the main agent records §5 on its behalf); when provided the path must resolve to a readable file." },
       round: { type: "string", enum: ROUND_VALUES, description: "REQUIRED for role='eng-coder'/'eng-designer': initial (first round for this design) or fix (a correction round reusing the same designId+designToken; docs FIRST). No default — missing = refused." },
+      goal: { type: "string", description: "REQUIRED for every spawn role: the task book's goal & why — the problem this solves and the cost chain (content only, no label — the runtime composes the labels)." },
+      knownFacts: { type: "string", description: "REQUIRED for every spawn role: the facts and file paths the parent already verified — the child must not re-explore them." },
+      designPoints: { type: "string", description: "REQUIRED for role='eng-coder'/'eng-designer' (the fifth task-book parameter for engineering roles): design points & forbidden scope — what to land and what must not be touched. Non-engineering roles use `scope` instead — `scope` never substitutes for this one." },
+      scope: { type: "string", description: "REQUIRED for role='explore'/'plan'/'coder' (the fifth task-book parameter for non-engineering roles): scope & forbidden scope — what to read / search and what not to touch. Engineering roles use `designPoints` instead — `designPoints` never substitutes for this one." },
+      acceptance: { type: "string", description: "REQUIRED for every spawn role: acceptance criteria — machine-verifiable (commands / thresholds / assertion counts)." },
+      reportFormat: { type: "string", description: "REQUIRED for every spawn role: the delivery-report format the child must produce." },
       async: { type: "boolean", description: "action:'spawn'/'escalate': default at depth 0 = true (async; the report arrives automatically); depth>0 always sync. async:false forces the blocking flight." },
       files: { type: "array", items: { type: "string" }, description: "action:'spawn' only: the file write-domain this task declares — file-level paths only (cwd-relative or absolute; directories rejected — they bypass the conflict detector). Overlapping-file tasks serialize automatically. Omit = no conflict detection." },
       dependsOn: { type: "array", items: { type: "string" }, description: "action:'spawn' only: ids from prior async returns whose outcome this task needs — queues until every dependency settles, then starts. Consumed ids count as satisfied; a cancelled/failed dependency stays queued marked 'dependency cancelled' until you decide (AUTO sessions auto-start). Unknown ids error." },
@@ -218,8 +222,10 @@ export const subagentTool = {
     // Spawn requires a task brief — schema `required` is advisory (multi-action
     // schema), so the mechanical check lives here: an absent task would otherwise
     // flow downstream as `content: undefined` and surface as an obscure error.
-    if (typeof args.task !== "string" || !args.task.trim()) {
-      throw new Error("subagent action:'spawn' requires a task (the self-contained task brief).")
+    // 任务书载体：结构化参数（拼装后非空）——task 只作补充；两者皆缺 ⇒ 此处先拒。
+    // （五项必带门 = spawn-gates.validateTaskBookParams，覆盖所有 spawn 角色、落 buildSpawnChild——task-only 由该门点名拒。）
+    if (!composeTaskBookBrief(args, args.role) && (typeof args.task !== "string" || !args.task.trim())) {
+      throw new Error("subagent action:'spawn' requires the structured task-book parameters (four core + the role's fifth: designPoints for eng-coder/eng-designer, scope for explore/plan/coder) — a free-text task alone is not the brief.")
     }
     // §18 D-E1a depth-gated async default (2026-09-06 需求池 R12): depth-0 spawns
     // default to async for EVERY role (the old role-level default — eng-coder only —

package/agent-tools/timer.mjs

@@ -50,14 +50,14 @@ function kindText(t) {
   if (typeof everyMs === "number" && Number.isFinite(everyMs) && everyMs > 0) return `every ${everyMs / 1000}s`
   const daily = t?.daily
   if (typeof daily === "string" && DAILY_RE.test(daily)) return `daily ${daily}`
-  if (t?.at === true) return `at ${localText(t.expiresAt)}`
+  if (t?.at === true && Number.isFinite(t.expiresAt)) return `at ${localText(t.expiresAt)}`
   return "one-shot"
 }
 
 /** `list` 行第三槽：到期未投 ⇒ `due now`；否则 `next <dur>`（剩余现算）。 */
 function nextText(t, now) {
   const at = Number(t?.expiresAt)
-  return at > now ? `next ${durText(at - now)}` : "due now"
+  return Number.isFinite(at) && at > now ? `next ${durText(at - now)}` : "due now"
 }
 
 /** `message` 首行（`list` 行第四槽——逐字原样，不截断）。 */

package/agent-tools.mjs

@@ -13,7 +13,7 @@ export { recentChangesTool } from "./agent-tools/recent-changes.mjs"
 export { timerTool } from "./agent-tools/timer.mjs"
 export { advisorTool } from "./agent-tools/advisor.mjs"
 export { engTool } from "./agent-tools/eng.mjs"
-export { manifestTool } from "./agent-tools/manifest.mjs"
+export { manifestTool, manifestReadTool } from "./agent-tools/manifest.mjs"
 export { readHistoryTool } from "./agent-tools/read-history.mjs"
 // 模型主动整理上下文（CONTEXT-COMPACTION.md §6.16 · F-CC5）：单工具三操作 stats / prune / compact
 // ——depth-0 段挂载（子代理面裁见 §6.16.6 `family-tools.mjs` `depthOnly`）。

package/config-defaults.mjs

@@ -0,0 +1,92 @@
+/**
+ * config-defaults.mjs — the configuration default table itself (pure data, one comment per
+ * non-obvious key). Split out of config.mjs so that changing a default value does not require
+ * reading the whole loader: defaults (data) ∥ load-time normalization rules (logic) ∥ request
+ * budget arithmetic were three unrelated things living in one file
+ * (CONTEXT-COMPACTION.md §6.16.9 — C1 split, judged by responsibility, not by line count).
+ *
+ * Re-exported unchanged by config.mjs (`export { DEFAULTS }`) — the 34 importer files keep
+ * their import path and this table keeps its name.
+ */
+
+import { join } from "node:path"
+import { configDir } from "./config-io.mjs"
+
+export const DEFAULTS = {
+  defaultModel: null, // top-level "provider:model" composite — new-session starting point (F-1)
+  agent: {
+    maxTurns: 200,
+    subagentTurns: 100,
+    subagentModel: null,  // default subagent model: "provider:model" | model name (parent provider); null = inherit parent provider
+    subagentModels: {},   // per-type override: { explore, plan, coder, "eng-coder" } — priority: subagent tool model arg > this[role] > subagentModel > parent provider
+    goalTurns: 200,
+    // compactThreshold: 键缺省 = auto（CONTEXT-COMPACTION.md §6.17 三档落值）——无默认值：留着默认值
+    // 会让每份配置看着都像显式。派生线只进 agent.compactThresholdResolved（内存面，不落盘）。
+    verifyGuard: false,  // push model back to verify when files were mutated but verify not run (opt-in)
+    // Multi-model consultation ("会诊") + escalate ("飞刀") — CLI parity with the VS Code plugin.
+    // consultModels: candidate pool for BOTH consult and escalate ({ provider, model, effort? }, up to 5).
+    consultModels: [],
+    consultTurns: 40,      // per-consultant tool-turn budget (diagnosis tasks)
+    consultTimeoutMs: 600000, // wall-clock ceiling per consultant (10min)
+    streamRules: [],      // time-traveling stream rules: [{ pattern: "regex", message: "reminder", action: "abort"|"warn", repeat: "always"|"once" }]
+    advisor: { guard: false },  // code review is always available; guard: true pushes completion back until reviewed (opt-in). Also accepts provider/model/thinking/reasoningEffort/timeoutMs overrides. Deprecated: enabled (2026-08-21)
+    autoThink: false,     // auto-classify task difficulty and set reasoning effort per-turn
+    engineering: false,   // initial default only — the runtime value is the session authority (MANIFEST.md §2.2 / ENGINEERING-MODE-V2.md §2.3 E5.1). Strict methodology enforcement — design-before-code (design review + user approval before code)
+    // Async pool limits (AGENT-LOOP-ASYNC-POOL.md §6.10 D-24a/R14 + R13 — POOL-CONFIG-
+    // UNIFIED 2026-09-09): { engCoder, other, advisor } — eng-coder pool / other-role
+    // pool / advisor-review pool, defaults 4/4/4 (user ruling "eng-coder 四路，其他
+    // 4 路" + advisor 评审池并入同一可配体系——三池统一默认 4)。engCoder/other
+    // runtime-validated at every subagent pool admission (subagent-async
+    // resolvePoolLimits); advisor runtime-validated at every advisor launch
+    // (advisor-async advisorPoolLimitFor——F-2——两域读取器独立不共享)——非法/缺省
+    // 回退 4——settings tool 与 /config 并发池菜单写此键——变更下个 spawn/launch 生效。
+    // ⚠ 与 subagent-async.mjs ASYNC_POOL_LIMITS（两键）/advisor-async.mjs
+    // ADVISOR_POOL_LIMIT 逐键同值（运行时回退常量）——耦合锚 T-24a4 断言锁住——
+    // 勿单侧改默认。
+    poolLimits: { engCoder: 4, other: 4, advisor: 4 },
+    // §6.30.3 门三件③（D-TW5）：timer 空闲自唤醒开关——默认开（工具描述面已承诺到点提醒）；
+    // false ⇒ 端侧不武装闩（回既有回合边界投递——零调度器面）。键面随 DEFAULTS 派生进 settings 类型表。
+    timerWake: true,
+    // 注入开关（PROMPT-SYSTEM.md §6.24 · 台账 #1420）：文档类 ∥ 记忆类自动注入——默认开；
+    // 判据 `!== false`（缺省 = 现行为零变）。消费点 = 核 `agent/setup.mjs` 判点（逐 run 现读）。
+    // 2026-10-15（§6.27 · 台账 #1465）：① 项目指令块独立成键——`injectDocs` 收窄为只管 ② 相关文档块；
+    // 两键完全正交（关任一方另一方照常）。`injectProjectRules` 判点 = 核 `agent/setup.mjs`（`prepareRun` 项目指令段）。
+    injectDocs: true,
+    injectProjectRules: true,
+    injectMemories: true,
+  },
+  memory: {
+    dbPath: join(configDir, "memory.db"),
+    projectDir: ".thincoder/memory",
+    team: null,
+    // 索引自维护（§6.14 面⑤ · 台账 #1096）：维护型备份保留枚数（轮转保最新 N——引擎钳 ≥ 1）
+    maintain: { backupKeep: 2 },
+  },
+  shell: null,            // bash tool shell executable (e.g. "C:\\Program Files\\Git\\bin\\bash.exe" or "pwsh"); null = system default (cmd on Windows, /bin/sh elsewhere)
+  embedding: {
+    baseURL: "https://api.siliconflow.cn/v1",
+    model: "BAAI/bge-m3",
+  },
+  mcp: {
+    servers: [],
+  },
+  websearch: {
+    // Structured search via Tavily when a key is set — empty apiKey → Bing RSS/HTML fallback (zero-config).
+    apiKey: "",          // Tavily key (tvly-...) — optional
+    // WEB-BACKEND-DEEPSEEK（CONFIG.md §6.5）：`auto` = a configured DeepSeek provider wins（TOOLS.md §6.23）；`local` = skip it.
+    backend: "auto",
+  },
+  // fetch 工具的后端选择（CONFIG.md §6.5）——语义同 `websearch.backend`（`local` = 本地直取）。
+  fetch: { backend: "auto" },
+  // 浏览器工具（BROWSER-TOOL.md §3.2）：非空 ⇒ navigate 目标 host ∥ click/evaluate/type 的当前页 host 须命中
+  //（全等（大小写不敏感）∥ `*.` 前缀 = 子域通配）——收束面非沙箱；缺省空 = 不设限。
+  browser: { allowDomains: [] },
+  traces: {
+    enabled: false,  // §18.6 D-TR6 修订（2026-09-05 用户裁定——发布隐私："不希望用户那边也采集"）：轨迹存档默认 OFF——新用户零采集；本地调试分析可显式开（~/.thincoder/config.json traces.enabled:true）
+    retentionHours: 24, // D-TR10：轨迹文件保留小时数——CLI 启动时删除超过该时长的文件（默认 24h）
+  },
+  // 诊断开关（用户面 ① 配置键——CONFIG.md §6.2 名录）：`heapWatch` 默认开（设 false 关闭）——自愈分支
+  // 遥测；`heapSnapshot` 默认关——采集 opt-in（堆转储敏感度 ≥ traces ⇒ 对齐发布隐私先例 D-TR6；
+  // 2026-09-30 采集收网批；桌面端运行期热读 ∥ CLI 本进程下次启动）
+  diagnostics: { heapWatch: true, heapSnapshot: false },
+}

package/config-normalize.mjs

@@ -0,0 +1,109 @@
+/**
+ * config-normalize.mjs — load-time normalization: pure functions that wash a dirty disk face
+ * into a canonical shape (and the one-time warn flags that report what was dropped). Split out
+ * of config.mjs by responsibility (CONTEXT-COMPACTION.md §6.16.9 — C1): defaults (data) ∥ these
+ * rules (logic) ∥ request-budget arithmetic. Zero core imports — every function here is pure
+ * (the warn flags are process-level once-only guards), so the module adds no cycle.
+ *
+ * config.mjs re-exports the four load-bearing ones (`sanitizeSubagentModel` ·
+ * `sanitizeSubagentModels` · `normalizeProxy` · `normalizeTeamSection`) — importers keep their
+ * path. `sanitizeProviderHeaders` / `sanitizeConsultModels` / the two warn helpers are consumed
+ * by loadConfig only and are not part of the public config.mjs surface.
+ */
+
+/** F-4 (IKCDMR) 软失败清洗（D-S1 范式——loadConfig 是 CLI 启动砖点）：consultModels 非法
+ *  条目过滤不 throw——非数组 → []、形状非法/未知渠道丢弃、超 5 截断（keep 前 5）。
+ *  返回 { keep, dropped }——dropped 供一次性警告；merged.agent.consultModelsFiltered 挂载
+ *  供后续首帧引导消费（数据层——本批文件面无消费方——同 providerInvalidReason 载体先例）。 */
+export function sanitizeConsultModels(cm, providerNames) {
+  if (cm === undefined || cm === null) return { keep: [], dropped: [] }
+  if (!Array.isArray(cm)) {
+    return { keep: [], dropped: [`agent.consultModels must be an array of { provider, model } entries (got ${typeof cm})`] }
+  }
+  const names = new Set(providerNames)
+  const keep = []
+  const dropped = []
+  for (const entry of cm) {
+    if (keep.length >= 5) { dropped.push(`over the 5-entry cap — dropped ${JSON.stringify(entry)}`); continue }
+    if (!entry || typeof entry !== "object" || typeof entry.provider !== "string" || !entry.provider.trim()
+        || typeof entry.model !== "string" || !entry.model.trim()) {
+      dropped.push(`invalid entry (expected { provider: string, model: string }) — got ${JSON.stringify(entry)}`)
+      continue
+    }
+    if (!names.has(entry.provider)) {
+      dropped.push(`entry "${entry.provider}:${entry.model}" references unknown provider "${entry.provider}" (available: ${[...names].join(", ") || "none"})`)
+      continue
+    }
+    keep.push(entry)
+  }
+  return { keep, dropped }
+}
+
+/** F-4：过滤警告——进程级一次性（loadConfig 同进程可多次调用：TUI 启动 + reloadConfig）。 */
+let warnedConsultModels = false
+export function warnConsultModelsFiltered(dropped, path) {
+  if (warnedConsultModels || dropped.length === 0) return
+  warnedConsultModels = true
+  console.warn(`[config] agent.consultModels: ${dropped.length} invalid entr${dropped.length === 1 ? "y ignored" : "ies ignored"} (filtered — startup continues; no crash):\n` +
+    dropped.map((d) => `  - ${d}`).join("\n") +
+    `\n  Fix: clean agent.consultModels in ${path} or use /config → consult/escalate pool menu.`)
+}
+
+/** #861（AGENT-LOOP-SUBAGENT.md §6.7.1）：subagent 模型覆盖加载期清洗——单源纯函数（核 loadConfig ∥ VSC 端壳 raw 读点同消费）；非法形态不 throw（`subagentModel` 非法 ⇒ null、`subagentModels` 非对象 ⇒ {}、值非法 ⇒ 剔除该键）。 */
+export function sanitizeSubagentModel(v) {
+  const ok = typeof v === "string" && v.trim()
+  const dropped = ok || v == null ? [] : [`agent.subagentModel must be a non-empty string ("provider:model" | model) — got ${Array.isArray(v) ? "array" : typeof v} — ignored (inherits the parent provider)`]
+  return { value: ok ? v : null, dropped }
+}
+export function sanitizeSubagentModels(v) {
+  if (v == null) return { value: {}, dropped: [] }
+  if (typeof v !== "object" || Array.isArray(v)) return { value: {}, dropped: [`agent.subagentModels must be an object mapping role → model override — got ${Array.isArray(v) ? "array" : typeof v} — ignored`] }
+  const value = {}, dropped = []
+  for (const [role, val] of Object.entries(v)) {
+    if (typeof val === "string" && val.trim()) { value[role] = val; continue }
+    dropped.push(`agent.subagentModels.${role} must be a non-empty string ("provider:model" | model) — got ${Array.isArray(val) ? "array" : typeof val} — dropped`)
+  }
+  return { value, dropped }
+}
+
+let warnedSubagentModels = false // #861：清洗警告——进程级一次性（同 consultModels 先例）
+export function warnSubagentModelsFiltered(dropped, path) {
+  if (warnedSubagentModels || dropped.length === 0) return
+  warnedSubagentModels = true
+  console.warn(`[config] agent.subagentModel/subagentModels: ${dropped.length} invalid entr${dropped.length === 1 ? "y ignored" : "ies ignored"} (filtered — startup continues; no crash):\n` +
+    `${dropped.map((d) => `  - ${d}`).join("\n")}\n  Fix: clean it in ${path} — "provider:model" | model.`)
+}
+
+/** Normalize proxy config to { uri, web } or undefined (uri/url both accepted; invalid types dropped) */
+export function normalizeProxy(proxy) {
+  if (typeof proxy === "string") return proxy ? { uri: proxy, web: true } : undefined
+  if (!proxy || typeof proxy !== "object" || Array.isArray(proxy)) return undefined
+  const uri = proxy.uri || proxy.url || ""
+  if (typeof uri !== "string" || !uri) return undefined
+  return { uri, web: proxy.web !== false }
+}
+
+/** 团队登录段加载归一（B1 批——`docs/core/design/TEAM.md` §2.1 ∥ CONFIG.md §6.4）：非对象 ⇒ null（软失败
+ *  不阻启动——沿 proxy 段先例）；键级 = trim 非空字符串（非串 ∥ 空 ⇒ null）；`member` 浅形 `{ username, name }`。
+ *  **不入 `DEFAULTS`**（settings 工具面零涉——agent 不可写；`team.token` 经读面到达 = 敏感段词表遮罩）。 */
+export function normalizeTeamSection(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) return null
+  const str = (v) => (typeof v === "string" && v.trim() !== "" ? v.trim() : null)
+  const raw = value.member
+  const member = raw !== null && typeof raw === "object" && !Array.isArray(raw) ? { username: str(raw.username), name: str(raw.name) } : null
+  return { server: str(value.server), member, label: str(value.label), token: str(value.token) }
+}
+
+/** Keep only { header: "string value" } pairs from a provider's headers field — anything
+ *  else (null, arrays, nested objects) is dropped so it can never reach a fetch call.
+ *  Authorization is built-in and cannot be overridden from headers (core.mjs spreads first). */
+export function sanitizeProviderHeaders(p) {
+  if (p.headers == null || typeof p.headers !== "object" || Array.isArray(p.headers)) { delete p.headers; return p }
+  const clean = {}
+  for (const [k, v] of Object.entries(p.headers)) {
+    if (typeof v === "string" && k.toLowerCase() !== "authorization") clean[k] = v
+  }
+  if (Object.keys(clean).length > 0) p.headers = clean
+  else delete p.headers
+  return p
+}