@thincoder/core 0.10.9 → 0.10.11

package/agent-tools/subagent-spawn.mjs

@@ -6,12 +6,12 @@
  * 另在 subagent-run.mjs。subagent.mjs execute 经本文件 import 调用。
  * 2026-09-07：executeConsumeDesignAction 消费执行器（token 链终消费制——与 spawn 侧
  * slot 族同域——ENGINEERING-MODE.md §2.6 F1——removeDesignTokenSlot 自 token-ttl.mjs）。
- * 2026-09-22（台账 #23 · AGENT-LOOP-SUBAGENT.md §6.26）：审计块构造器（summarizeEngTaskBook
- * + buildAuditBlock）外提 `./audit-block.mjs`；spawn 级固定机制性指令改走 system 固块
- * （`child._spawnSystemBlock` 单点绑定——消费点 = 核 `prepareRun`），`input` 只留任务书。
+ * 2026-09-22（台账 #23 · AGENT-LOOP-SUBAGENT.md §6.26）：审计块构造器外提 `./audit-block.mjs`；
+ * spawn 级固定机制性指令改走 system 固块（`child._spawnSystemBlock` 单点绑定——消费点 = 核
+ * `prepareRun`），`input` 只留任务书。2026-10-24（§6.22）：工程角色 `input` = 一行机械任务书行
+ * （批档绝对路径 + §2 指向句），任务书本体由子代理自读 §2。
  */
 
-import { basename, isAbsolute, relative } from "node:path"
 import {
   createAgent,
   readonlyToolNames, escapeXml, excludeSubagentTools,
@@ -28,15 +28,16 @@ import {
 } from "./subagent-scheduler.mjs"
 // M5 F2（ENGINEERING-MODE-V2-MODULE-DELEGATION §2.3）：任务书 round 枚举 + 五项结构化参数校验/拼装本体落
 // spawn-gates.mjs（纯谓词零依赖）——本处只加 import 调用。
-import { validateRoundParam, validateTaskBookParams, composeTaskBookBrief } from "./spawn-gates.mjs"
-// 台账 #23（AGENT-LOOP-SUBAGENT.md §6.26 · D23-3）：审计块构造器外提（`summarizeEngTaskBook`
-// + `buildAuditBlock` 纯函数）——spawn 档只做「收集 + 绑定」；块文本逐字搬移（D23-4）。
+import {
+  validateRoundParam, validateTaskBookParams, composeTaskBookBrief,
+  isEngineeringRole, rejectEngFreeTextParams,
+} from "./spawn-gates.mjs"
+// 台账 #23（AGENT-LOOP-SUBAGENT.md §6.26 · D23-3）：审计块构造器外提（`buildAuditBlock` 纯函数）
+// ——spawn 档只做「收集 + 绑定」；块文本逐字搬移（D23-4）。
 import { buildAuditBlock } from "./audit-block.mjs"
 // 批次档路径解析单源（BATCH-RECORD.md §4.15 · 台账 #287）：门内解析改经叶档（读面非抛形），
 // 与 append / create 同源——门判据仍「参数在 + 路径可读」，错误文案逐字零变。
-import { resolveBatchReadPath, batchDocBases } from "./batch-paths.mjs"
-// LOGGING（LOGGING.md）：#309 形三观测留痕走同一事件通道。
-import { logEvent } from "../log.mjs"
+import { resolveBatchReadPath } from "./batch-paths.mjs"
 
 /** 任务书播报文本：该角色名集拼装 + 可选 task 自由文本（拼装空 ⇒ 原 task 逐字——旧形零变）。 */
 function taskBriefOf(args, role) {
@@ -46,31 +47,9 @@ function taskBriefOf(args, role) {
   return extra ? `${composed}\n\n${extra}` : composed
 }
 
-/** #309 任务书 token 判据（`AGENT-LOOP-SUBAGENT.md` §6.29.3）：`.md` 结尾的连续路径型字面
- *  （含盘符形态——裸名 `AGENTS.md` 无分隔符且非绝对，见调用点过滤）。 */
-const MD_PATH_TOKEN = /[A-Za-z0-9_@.:\\/-]+\.md\b/g
-
-/** #309 形三·task↔batchDoc 观测留痕（§6.29.3——**不阻断**，spawn 照常放行）：任务书文本提及
- *  **他批存在档** ⇒ `logEvent` 留痕一条（键面 = 两侧基名，零任务书内容）；只提绑定档 / 无路径型
- *  `.md` 字面 ⇒ 零事件。token 逐条经 `resolveBatchReadPath` 解析（路径单源），命中 = 可读 ∧
- *  落基底内 ∧ ≠ 绑定档（同一档多 token 按解析后绝对路径去重）。 */
-function logBatchDocRefs(parent, role, task, boundAbs) {
-  const cwd = parent?.cwd ?? process.cwd()
-  const text = typeof task === "string" ? task : ""
-  const key = (p) => (process.platform === "win32" ? p.toLowerCase() : p)
-  const bases = batchDocBases(cwd) // 歧义锚 ⇒ 候选项目基底并集（#828——入基底判据覆盖范围随之对齐）
-  const seen = new Set()
-  for (const m of text.matchAll(MD_PATH_TOKEN)) {
-    const token = m[0]
-    if (!/[/\\]/.test(token) && !isAbsolute(token)) continue // 裸名（AGENTS.md 形态）不取
-    const abs = resolveBatchReadPath(cwd, token)
-    if (!abs || key(abs) === key(boundAbs ?? "")) continue // 不可读 / 就是绑定档 ⇒ 零事件
-    const inBase = bases.some((b) => { const r = relative(b, abs); return r && !r.startsWith("..") && !isAbsolute(r) })
-    if (!inBase || seen.has(key(abs))) continue // 他 .md 引用（设计档 / 需求档等）/ 同档重复
-    seen.add(key(abs))
-    logEvent("child:batchdoc-ref", { role, batchDocBase: basename(boundAbs ?? ""), refBase: basename(abs) })
-  }
-}
+/** 原 #309 任务书 token 观测（`child:batchdoc-ref`）已废止——2026-10-24 用户裁定
+ *  「不允许跨批引用」后，工程角色 input 只剩一行机械文本，扫描对象失效；无场景分支不留
+ *  （AGENT-LOOP-SUBAGENT.md §6.29.3）。 */
 
 /**
  * Effective subagent model override for a role (CLI parity shared with VS Code):
@@ -128,7 +107,7 @@ export function resolveDesignSlot(parent, designIdArg) {
     throw new Error(`Multiple approved designs in this session (${size}) — pass the designId parameter (echoed with each token) to choose which design this eng-coder spawn belongs to. Held design ids: ${heldIds}`)
   }
   if (size === 1) return { token: [...slots.values()][0] }
-  throw new Error("Invalid or missing design token — run advisor with type='design' first and pass the returned token as designToken.")
+  throw designTokenRefusal("missing")
 }
 
 /**
@@ -198,6 +177,8 @@ export function prepareScheduling(parent, filesRaw, dependsRaw, wantAsync) {
 export function buildSpawnChild(parent, ctx, args, role, wantAsync, files, dependsOn, engAuditAttempt) {
   // Provider/model override: tool `model` arg > subagentModels[role] > subagentModel > parent provider
   const childProvider = resolveChildProvider(parent, effectiveSubagentModel(parent, role, args.model))
+  // 工程角色（任务书 = 批次档 §2，零任务书文本参数）——AGENT-LOOP-SUBAGENT.md §6.22.1。
+  const engineeringRole = isEngineeringRole(role)
 
   // ── batchDoc gate（ENGINEERING-MODE.md §2.12 + §2.15 D1——FR20 #9 机械面）────────
   // 工程模式下 spawn 工程角色（**eng-coder / eng-designer**——第 2 批扩为角色集合）必传
@@ -211,15 +192,13 @@ export function buildSpawnChild(parent, ctx, args, role, wantAsync, files, depen
   // 工程专属、不移植）；传则须可读（同评审面判据）⇒ `child._batchDoc` 绑定 §5 记录通道；
   // 未携 ⇒ 不绑定、照常 spawn。
   let batchDocAbs = null
-  if (role === "eng-coder" || role === "eng-designer") {
+  if (engineeringRole) {
     const given = typeof args.batchDoc === "string" ? args.batchDoc.trim() : ""
     const refusal = (suffix = "") => new Error(
       `batchDoc is required for role='${role}' — pass the batch record path (e.g. <repo>/docs/batches/<batch>-<topic>.md; relative paths resolve against the session cwd first, then candidate project roots — or absolute); spawn refused without it.` + suffix)
     if (!given) throw refusal()
     batchDocAbs = resolveBatchReadPath(parent.cwd ?? process.cwd(), given)
     if (!batchDocAbs) throw refusal(" (given path is not a readable file)")
-    // #309 形三：任务书中的他批批次档引用观测留痕（不阻断——放行不受影响）。
-    logBatchDocRefs(parent, role, taskBriefOf(args, role), batchDocAbs)
   } else if (role === "coder") {
     const given = typeof args.batchDoc === "string" ? args.batchDoc.trim() : ""
     if (given) {
@@ -230,32 +209,23 @@ export function buildSpawnChild(parent, ctx, args, role, wantAsync, files, depen
     }
   }
 
-  // M5 F2（ENGINEERING-MODE-V2-MODULE-DELEGATION §2.2）：任务书参数门——**所有 spawn 角色**。
-  // 工程角色：round 枚举（initial|fix）+ 四项核心 + `designPoints`；explore / plan / coder：
-  // 四项核心 + `scope`。判据三条零改（存在 ∧ string ∧ trim 非空）；落点 = batchDoc 门之后、
-  // token 门之前（门序 = AGENT-LOOP-SUBAGENT.md §6.22）。
-  if (role === "eng-coder" || role === "eng-designer") validateRoundParam(args)
-  validateTaskBookParams(args, role)
+  // M5 F2 + §6.22（2026-10-24）任务书门——按角色分流：
+  //   工程角色（eng-coder / eng-designer）：零任务书文本参数——八个自由文本键命中即拒（键在场即拒）并点名
+  //     （值全空白也拒）；随后 round 枚举（initial|fix）。
+  //   explore / plan / coder：四项核心 + `scope` 必带（判据三条零改：存在 ∧ string ∧ trim 非空）。
+  // 落点 = batchDoc 门之后、token 门之前（门序 = AGENT-LOOP-SUBAGENT.md §6.22.1）。
+  if (engineeringRole) {
+    rejectEngFreeTextParams(args, role)
+    validateRoundParam(args)
+  } else {
+    validateTaskBookParams(args, role)
+  }
 
-  // eng-coder token gate: the design review must have passed and the caller must
-  // present the exact token advisor issued — otherwise the child is not authorized to code.
-  // 2026-09-01: multi-design slots — the token is located by designId (exact slot,
-  // single-slot fallthrough); token validation itself is unchanged (2026-09-06:
-  // HMAC removed — validateDesignToken now checks format + TTL only).
+  // eng-coder token gate（TOOLS.md §6.25 ④）：判定本体 = gateDesignToken（本档模块尾）——
+  // missing / mismatch / expired / invalid 四态各出互异拒句；拒绝集合与旧三条件合取全等。
+  // 返回值 = 槽内令牌，必须落回 issuedToken：下方 `child._engDesignId` 回写依赖它。
   let issuedToken
-  if (role === "eng-coder") {
-    issuedToken = resolveDesignSlot(parent, args.designId).token
-    // R16 D-R16c ③ — spawn-gate cleanup: only an EXPIRY rejection removes the slot
-    // (the caller passed the slot's own token and it is past TTL — 长跑不重启也清);
-    // mismatch / format rejections never delete — the slot's own token may still be
-    // valid and a caller error must not destroy it (T-R16d). 单值镜像已退役（D3）——
-    // 无镜像同步清。
-    const expiredReject = !!issuedToken && args.designToken === issuedToken && tokenExpired(issuedToken)
-    if (!issuedToken || args.designToken !== issuedToken || !validateDesignToken(args.designToken)) {
-      if (expiredReject) removeDesignTokenSlot(parent, args.designId, issuedToken)
-      throw new Error("Invalid or missing design token — run advisor with type='design' first and pass the returned token as designToken.")
-    }
-  }
+  if (role === "eng-coder") issuedToken = gateDesignToken(parent, args)
 
   // Filter tool set by role: explore/plan are read-only (plan is a planning agent, its deliverable is the plan itself)
   let tools
@@ -303,7 +273,6 @@ export function buildSpawnChild(parent, ctx, args, role, wantAsync, files, depen
   // G6（施工②）+ §2.15 B4（第 2 批）：工程角色场景即工程纪律——engineering=true 使 setup
   // 场景映射落到 assemblePrompt("eng-coder"/"eng-designer")（persona-{role} + common +
   // discipline-engineering）；designer 也必须 engineering=true 才能装配工程纪律槽。
-  const engineeringRole = role === "eng-coder" || role === "eng-designer"
   const childConfig = engineeringRole
     ? { ...parent.config, agent: { ...parent.config.agent, engineering: true } }
     : parent.config
@@ -352,7 +321,12 @@ export function buildSpawnChild(parent, ctx, args, role, wantAsync, files, depen
   // 审计/探索（"status 里这个文件算不算超清单？"）。注入分支整体删除（B 方案
   // git 只读变体亦随裁定废弃——D-AG5）。顶层主 agent 注入保留（§3 prepareRun——
   // setup.mjs depth===0——D-AG7 范围边界）。
-  let input = args.context ? `Context:\n${args.context}\n\nTask:\n${taskBriefOf(args, role)}` : taskBriefOf(args, role)
+  // §6.22.2 子代理任务输入：工程角色 `input` = 一行机械任务书行（批档绝对路径 + §2 指向句）——
+  // 任务书本体由子代理自读 §2（KD-SC5：运行时不抽取正文注入，避免过期副本 / 脆标题解析）；
+  // 非工程角色 = 既有拼装（context 前缀 + 任务书参数 + 可选 task——零变）。
+  const input = engineeringRole
+    ? `Task book: §2 of the batch record at ${batchDocAbs} — read it before acting; it is the only task channel for this spawn.`
+    : (args.context ? `Context:\n${args.context}\n\nTask:\n${taskBriefOf(args, role)}` : taskBriefOf(args, role))
   // 台账 #23（AGENT-LOOP-SUBAGENT.md §6.26 · D23-1）：**spawn 级固定机制性指令改走 system 固块**——
   // 两处（批次档路径行 + 审计模板块）原随 user 首条下发，压缩把首条并入摘要即丢（长任务中后期
   // 既看不到批次档路径、也看不到审计模板 ⇒ 过度勘察的真病根）；固块值在 child 生命周期内恒定
@@ -361,23 +335,16 @@ export function buildSpawnChild(parent, ctx, args, role, wantAsync, files, depen
   // 的 system 逐字节同改前——§6.26 缓存契约兼容证明）。
   const spawnBlocks = []
   // §2.11 第 1 点（FR16 载体 + FR17 铁律 #5 的机械面）：批次档**绝对路径**下发给工程角色
-  // （eng-coder 实现 / eng-designer 写稿）——任务文本本身不动（批次档 §2 才是任务书本体；
-  // 本行让子代理"拿到本档路径"）。行文不含 summarizeEngTaskBook 的三组段 marker
-  // （Docs involved / Files list / Acceptance criteria）——段匹配不受影响。工程角色恒注入；
-  // 携绑定 coder（§4.16）随绑定注入（绑定 coder 要能读到本档）。
+  // （eng-coder 实现 / eng-designer 写稿）——任务书本体 = 本档 §2；本行让子代理"拿到本档路径"。
+  // 工程角色恒注入；携绑定 coder（§4.16）随绑定注入（绑定 coder 要能读到本档）。
   if (batchBound) spawnBlocks.push(`Batch record (batchDoc): ${batchDocAbs}`)
-  // AGENT-LOOP-SUBAGENT.md §6.7.6 D-E2 ③ (round4 #4, T-E13/T-E15): an eng-coder audit spawn's task book is
-  // the eng-coder's OWN spawn task — mechanically kept as _engTaskInput by the
-  // parent spawn and injected as the D-TS5 A2 mechanical summary (design docs /
-  // affected-file list / acceptance criteria verbatim, verbose context dropped)
-  // — ∪ the mechanically tracked _touchedFiles — NEVER the eng-coder's
-  // self-written list: a self-report could omit exactly the out-of-scope file
-  // the audit must catch. 块文本（含模板逐字）住 `./audit-block.mjs`（D23-3 外提）。
+  // AGENT-LOOP-SUBAGENT.md §6.7.6 D-E2 ③ + §6.22 KD-SC6：审计 spawn 的范围证据 = 机械跟踪的
+  // `_touchedFiles` ∪ 批档 §2（审计子代理自读）——**不是** eng-coder 自述（自述可恰好漏掉应抓的
+  // 越界档）。块文本（含模板逐字）住 `./audit-block.mjs`（D23-3 外提）。
   if (engAuditAttempt !== null) spawnBlocks.push(buildAuditBlock(ctx))
-  // The child's own task input rides the child object: an eng-coder's audit
-  // spawns reuse it as the task-book SOURCE — injected as the D-TS5 A2
-  // mechanical summary, not verbatim (see above). D23-6：语义 = **纯任务书**（不含固块）。
-  if (role === "eng-coder") child._engTaskInput = input
+  // The child's own task input rides the child object: D23-6 —— `_engTaskInput` 语义 = **一行机械
+  // 任务书行**（批档绝对路径 + §2 指向句；不含固块）。
+  if (engineeringRole) child._engTaskInput = input
   // spawn 固块单点绑定（sync / async 同点——buildSpawnChild 唯一调用点）：此后只读 ⇒ 同一
   // child 的任意 run（resume 续跑 / 报告追问重跑）逐字节恒定；消费点 = 核 `prepareRun`。
   if (spawnBlocks.length > 0) child._spawnSystemBlock = spawnBlocks.join("\n\n")
@@ -417,3 +384,32 @@ export function buildSpawnChild(parent, ctx, args, role, wantAsync, files, depen
   const childRunOpts = buildChildRunOpts(ctx)
   return { child, input, childOpts, childRunOpts, relayPrefix, childProvider }
 }
+
+// ── design-token 门（TOOLS.md §6.25 ③④——四态互异拒句；拒绝集合与旧三条件合取全等） ──
+
+/** 四态拒句（逐字 = TOOLS.md §6.25 ③）：missing / mismatch / expired / invalid。
+ *  mismatch 可携 designId（非凭证）；四句均零令牌值回显。 */
+export function designTokenRefusal(kind, designId) {
+  if (kind === "missing") return new Error("designToken missing — the eng-coder spawn is refused: no usable token for an approved design slot came with this spawn. Pass the designToken parameter with the exact value from the subagent action:'design-slots' row (the text after designToken=), copied verbatim; if that list is empty, no design review has been approved in this session yet — run advisor with type='design' first. No token value is echoed here.")
+  if (kind === "mismatch") return new Error("designToken mismatch — the eng-coder spawn is refused: the value passed does not equal the token held for this design slot. Re-read the subagent action:'design-slots' row and pass the value after designToken= verbatim, unchanged. No token value is echoed here." + (designId ? ` (designId: ${designId})` : ""))
+  if (kind === "expired") return new Error("designToken expired — the eng-coder spawn is refused: the token matches this design slot but is past its TTL. The expired slot has been removed; run advisor with type='design' again on the current design and pass the newly issued token — an expired authorization cannot be retried. No token value is echoed here.")
+  return new Error("designToken invalid — the eng-coder spawn is refused: the value passed equals this design slot's stored token, but that stored value is not a well-formed token, so no expiry can be judged and the slot was left in place. Run advisor with type='design' to issue a fresh token for this design; a malformed record never passes the gate. No token value is echoed here.")
+}
+
+/** eng-coder spawn 的令牌门（TOOLS.md §6.25 ④）：resolveDesignSlot 的既有两条 designId
+ *  诊断零改 → 参数在场 → 值相等 → 值有效。槽删除只在 tokenExpired(given) 成立时发生
+ *  （D-R16c ③）；mismatch / invalid 不删槽（T-R16d）。返回槽内令牌（调用方回写 designId
+ *  依赖它）；sync / async 两路共经 buildSpawnChild——一处判定双路生效。 */
+export function gateDesignToken(parent, args) {
+  const issuedToken = resolveDesignSlot(parent, args?.designId).token
+  // 非字符串 ⇒ 空串 ⇒ missing（本意——T9 锁定）
+  const given = typeof args?.designToken === "string" ? args.designToken : ""
+  if (!issuedToken || !given.trim()) throw designTokenRefusal("missing")
+  if (given !== issuedToken) throw designTokenRefusal("mismatch", args?.designId)
+  if (!validateDesignToken(given)) {
+    const expired = tokenExpired(given)
+    if (expired) removeDesignTokenSlot(parent, args?.designId, given)
+    throw designTokenRefusal(expired ? "expired" : "invalid")
+  }
+  return issuedToken
+}

package/agent-tools/subagent.mjs

@@ -16,7 +16,7 @@
  * escalate/cancel/panel）——async 结果仅自动通道送达。
  * 2026-09-05 拆分轮: status/escalate/panel 动作执行器 → ./subagent-actions.mjs；§20
  * 调度器全套 → ./subagent-scheduler.mjs——本文件 import 源随之改写。
- * 2026-09-05 模块拆分轮（726 > 500 硬限）: spawn 前置 helpers（summarizeEngTaskBook/
+ * 2026-09-05 模块拆分轮（726 > 500 硬限）: spawn 前置 helpers（subagent 工具描述与门同源面 /
  * effectiveSubagentModel/resolveDesignSlot）+ AGENT-LOOP-SUBAGENT.md §6.9 准入（prepareScheduling）+ child
  * 装配（buildSpawnChild）→ ./subagent-spawn.mjs；async 分支（executeAsyncSpawn）
  * → ./subagent-run.mjs——execute 只保留动作分流 + 装配调用 + 阻塞路径。
@@ -36,7 +36,7 @@ import { executeStatusAction, executeEscalateAction, executePanelAction, execute
 import { prepareScheduling, buildSpawnChild, executeConsumeDesignAction } from "./subagent-spawn.mjs"
 import { executeDesignSlotsAction } from "./design-slots.mjs"
 import { executeAsyncSpawn } from "./subagent-run.mjs"
-import { ROUND_VALUES, composeTaskBookBrief } from "./spawn-gates.mjs"
+import { ROUND_VALUES, composeTaskBookBrief, isEngineeringRole } from "./spawn-gates.mjs"
 // #15 描述外置：描述文本单点 = tool-docs/subagent.md（DESC 单解析面，缺档抛错语义不变）
 import { DESC } from "../tools/shared.mjs"
 
@@ -139,23 +139,22 @@ export const subagentTool = {
       action: { type: "string", enum: ["spawn", "status", "escalate", "cancel", "panel", "consume-design", "observe", "send", "design-slots"], description: "Which action — spawn (default) / status / observe / send / escalate / cancel / panel / consume-design / design-slots; semantics per action in the tool description." },
       view: { type: "boolean", description: "action:'panel' only: true (default) = the live panel blocks as the user sees them; false without freeze = error. Mutually exclusive with freeze (freeze wins)." },
       freeze: { type: "string", description: "action:'panel' only: block key of a digested-stuck block — reclaims it into the conversation; refused for running/done/unknown blocks or a still-pending report; works on the CLI TUI panel and on the desktop renderer panel (live readback of the blocks as the user sees them)." },
-      task: { type: "string", description: "For action:'spawn' (any role): OPTIONAL free-text supplement — the brief itself is the structured task-book parameters (four core: goal / knownFacts / acceptance / reportFormat, plus the role's fifth: designPoints for eng-coder/eng-designer, scope for explore/plan/coder); a task-only spawn is refused. For action:'escalate': the brief (goal, constraints, entry files, acceptance criteria)." },
-      context: { type: "string", description: "Optional background the sub-agent needs (it cannot see this conversation); action:'spawn' only." },
+      task: { type: "string", description: "For action:'spawn': normal-mode roles (explore/plan/coder) — OPTIONAL free-text supplement; the brief itself is the four core parameters (goal / knownFacts / acceptance / reportFormat) + scope. Engineering roles (eng-coder / eng-designer) take NO task-book text parameters — their task book is batch record §2 (batchDoc), read by the child itself. For action:'escalate': the brief (goal, constraints, entry files, acceptance criteria)." },
+      context: { type: "string", description: "Optional background for normal-mode spawns (explore/plan/coder) only; action:'spawn' only." },
       role: { type: "string", enum: ["explore", "plan", "coder", "eng-coder", "eng-designer"], description: "The sub-agent role — see the role matrix in the tool description. Exact spelling required. action:'spawn' only (escalate spawns its own expert internally)." },
       model: { type: "string", description: "action:'spawn': provider/model override ('provider:model', a provider, or a model name on the parent's provider) — defaults config.agent.subagentModels[role] → config.agent.subagentModel → the parent's provider; \"default\" inherits. action:'escalate': a consult candidate (default = the first)." },
-      designToken: { type: "string", description: "Required when role='eng-coder': the token from advisor(type='design') after the review passed — without it, eng-coder cannot modify files." },
+      designToken: { type: "string", description: "REQUIRED for role='eng-coder': the exact token issued by advisor(type='design') after the review passed — copy it verbatim from the design-slots row (the text after designToken=). missing or mismatched = the spawn is refused; an expired token is refused with expired named. Pass it on every eng-coder spawn, fix rounds included (they reuse the same token)." },
       designId: { type: "string", description: "role='eng-coder': the designId echoed with the approved token — required to pick between concurrent designs (optional for one). action:'consume-design': the single-slot selector (required to pick between several; the gate refuses to guess); see designIds / expired / olderThanDays for batch consumption. action:'design-slots': filter the inventory to one slot (trimmed exact match; an empty string means no filter; an unknown id is refused with the held id list)." },
       designIds: { type: "array", items: { type: "string" }, description: "action:'consume-design' (batch): an explicit non-empty list of design ids to close out — pass exactly ONE selector per call (designId / designIds / expired / olderThanDays)." },
       expired: { type: "boolean", description: "action:'consume-design' (batch): true = close out every expired slot (exactly ONE selector per call)." },
       olderThanDays: { type: "number", description: "action:'consume-design' (batch): close out every slot older than N days (age > N; exactly ONE selector per call)." },
-      batchDoc: { type: "string", description: "REQUIRED for role='eng-coder'/'eng-designer': the batch record path (e.g. <repo>/docs/batches/<batch>-<topic>.md; relative paths resolve against the session cwd first, then candidate project roots — or absolute) — the task book this spawn implements/writes. Refused when absent or when the path does not resolve to a readable file; the content is never validated. role='coder' (normal mode): optional — binds this spawn's §5 record-write channel (unbound ⇒ the main agent records §5 on its behalf); when provided the path must resolve to a readable file." },
+      batchDoc: { type: "string", description: "REQUIRED for role='eng-coder'/'eng-designer': the batch record path (e.g. <repo>/docs/batches/<batch>-<topic>.md; relative paths resolve against the session cwd first, then candidate project roots — or absolute) — the task book this spawn implements/writes. This IS the task book for engineering roles — batch record §2, read by the child itself. Refused when absent or when the path does not resolve to a readable file; the content is never validated. role='coder' (normal mode): optional — binds this spawn's §5 record-write channel (unbound ⇒ the main agent records §5 on its behalf); when provided the path must resolve to a readable file." },
       round: { type: "string", enum: ROUND_VALUES, description: "REQUIRED for role='eng-coder'/'eng-designer': initial (first round for this design) or fix (a correction round reusing the same designId+designToken; docs FIRST). No default — missing = refused." },
-      goal: { type: "string", description: "REQUIRED for every spawn role: the task book's goal & why — the problem this solves and the cost chain (content only, no label — the runtime composes the labels)." },
-      knownFacts: { type: "string", description: "REQUIRED for every spawn role: the facts and file paths the parent already verified — the child must not re-explore them." },
-      designPoints: { type: "string", description: "REQUIRED for role='eng-coder'/'eng-designer' (the fifth task-book parameter for engineering roles): design points & forbidden scope — what to land and what must not be touched. Non-engineering roles use `scope` instead — `scope` never substitutes for this one." },
-      scope: { type: "string", description: "REQUIRED for role='explore'/'plan'/'coder' (the fifth task-book parameter for non-engineering roles): scope & forbidden scope — what to read / search and what not to touch. Engineering roles use `designPoints` instead — `designPoints` never substitutes for this one." },
-      acceptance: { type: "string", description: "REQUIRED for every spawn role: acceptance criteria — machine-verifiable (commands / thresholds / assertion counts)." },
-      reportFormat: { type: "string", description: "REQUIRED for every spawn role: the delivery-report format the child must produce." },
+      goal: { type: "string", description: "REQUIRED for role='explore'/'plan'/'coder' (normal-mode task book): the task book's goal & why — the problem this solves and the cost chain (content only, no label — the runtime composes the labels)." },
+      knownFacts: { type: "string", description: "REQUIRED for role='explore'/'plan'/'coder' (normal-mode task book): the facts and file paths the parent already verified — the child must not re-explore them." },
+      scope: { type: "string", description: "REQUIRED for role='explore'/'plan'/'coder' (normal-mode task book, the fifth parameter): scope & forbidden scope — what to read / search and what not to touch." },
+      acceptance: { type: "string", description: "REQUIRED for role='explore'/'plan'/'coder' (normal-mode task book): acceptance criteria — machine-verifiable (commands / thresholds / assertion counts)." },
+      reportFormat: { type: "string", description: "REQUIRED for role='explore'/'plan'/'coder' (normal-mode task book): the delivery-report format the child must produce." },
       async: { type: "boolean", description: "action:'spawn'/'escalate': default at depth 0 = true (async; the report arrives automatically); depth>0 always sync. async:false forces the blocking flight." },
       files: { type: "array", items: { type: "string" }, description: "action:'spawn' only: the file write-domain this task declares — file-level paths only (cwd-relative or absolute; directories rejected — they bypass the conflict detector). Overlapping-file tasks serialize automatically. Omit = no conflict detection." },
       dependsOn: { type: "array", items: { type: "string" }, description: "action:'spawn' only: ids from prior async returns whose outcome this task needs — queues until every dependency settles, then starts. Consumed ids count as satisfied; a cancelled/failed dependency stays queued marked 'dependency cancelled' until you decide (AUTO sessions auto-start). Unknown ids error." },
@@ -222,10 +221,11 @@ export const subagentTool = {
     // Spawn requires a task brief — schema `required` is advisory (multi-action
     // schema), so the mechanical check lives here: an absent task would otherwise
     // flow downstream as `content: undefined` and surface as an obscure error.
-    // 任务书载体：结构化参数（拼装后非空）——task 只作补充；两者皆缺 ⇒ 此处先拒。
-    // （五项必带门 = spawn-gates.validateTaskBookParams，覆盖所有 spawn 角色、落 buildSpawnChild——task-only 由该门点名拒。）
-    if (!composeTaskBookBrief(args, args.role) && (typeof args.task !== "string" || !args.task.trim())) {
-      throw new Error("subagent action:'spawn' requires the structured task-book parameters (four core + the role's fifth: designPoints for eng-coder/eng-designer, scope for explore/plan/coder) — a free-text task alone is not the brief.")
+    // 载体判据：**非工程角色** = 结构化参数（拼装后非空）——task 只作补充；两者皆缺 ⇒ 此处先拒。
+    // 工程角色 = 无任务书文本参数（任务书 = 批次档 §2）：此处不判——自由文本键由
+    // buildSpawnChild 的任务书门键在场即拒并点名（空集拼装不得误报「缺任务书」）。
+    if (!isEngineeringRole(args.role) && !composeTaskBookBrief(args, args.role) && (typeof args.task !== "string" || !args.task.trim())) {
+      throw new Error("subagent action:'spawn' requires the structured task-book parameters for normal-mode roles (four core: goal / knownFacts / acceptance / reportFormat + scope) — a free-text task alone is not the brief. Engineering roles take no task-book text parameters: their task book is batch record §2.")
     }
     // §18 D-E1a depth-gated async default (2026-09-06 需求池 R12): depth-0 spawns
     // default to async for EVERY role (the old role-level default — eng-coder only —

package/agent-tools.mjs

@@ -13,7 +13,7 @@ export { recentChangesTool } from "./agent-tools/recent-changes.mjs"
 export { timerTool } from "./agent-tools/timer.mjs"
 export { advisorTool } from "./agent-tools/advisor.mjs"
 export { engTool } from "./agent-tools/eng.mjs"
-export { manifestTool } from "./agent-tools/manifest.mjs"
+export { manifestTool, manifestReadTool } from "./agent-tools/manifest.mjs"
 export { readHistoryTool } from "./agent-tools/read-history.mjs"
 // 模型主动整理上下文（CONTEXT-COMPACTION.md §6.16 · F-CC5）：单工具三操作 stats / prune / compact
 // ——depth-0 段挂载（子代理面裁见 §6.16.6 `family-tools.mjs` `depthOnly`）。

package/browser/launch.mjs

@@ -31,7 +31,17 @@ export const CANDIDATES = {
 
 /** 全候选落空（N-BT5）——装配期不剔除工具，首用显式报此句（§2.6）。 */
 export const BROWSER_NOT_FOUND = "no Chromium-based browser found (Edge/Chrome) — install one or set BROWSER_PATH"
-export const START_TIMEOUT_MS = 12_000
+export const START_TIMEOUT_MS = 25_000 // 缺省启动窗（重负载 Windows 实测 13–17s，留 ≈8s 余量）
+const START_TIMEOUT_MIN_MS = 2_000 // 下限：防「瞬间判失败」
+const START_TIMEOUT_MAX_MS = 30_000 // 上限：首动作总墙钟 = 启动窗 + 动作预算（§2.9 两段各自有帽——KD-25）
+
+/** env 覆盖 `BROWSER_START_TIMEOUT_MS`（§2.4 取值口径 · KD-25）：`Number.isFinite(v) && v > 0` 才采纳，
+ *  随后夹进 `[2_000, 30_000]`（`"1500"` ⇒ 2000、`"40000"` ⇒ 30000）；非数值 ∥ 空串 ∥ `0` ∥ 负值 ⇒ 回落缺省 25s。 */
+export function browserStartTimeoutMs(env = process.env) {
+  const wanted = Number(env?.BROWSER_START_TIMEOUT_MS)
+  if (!Number.isFinite(wanted) || wanted <= 0) return START_TIMEOUT_MS
+  return Math.min(START_TIMEOUT_MAX_MS, Math.max(START_TIMEOUT_MIN_MS, wanted))
+}
 
 const defaultPathExists = (p) => existsSync(p)
 function defaultWhich(name) {
@@ -141,11 +151,12 @@ export function reclaimProfileOrphans(profile, io = {}) {
 }
 
 /**
- * 启动浏览器（spawn + `DevToolsActivePort` 轮询 ≤12s）。
+ * 启动浏览器（spawn + `DevToolsActivePort` 轮询 ≤ 启动窗）。
+ * 启动窗 = `timeoutMs` 显式入参 ＞ env `BROWSER_START_TIMEOUT_MS` ＞ 缺省 25s（`browserStartTimeoutMs`）。
  * 持久 profile ⇒ 启动前清陈旧端口文件（否则旧值被当本次读数——发现即失效）。
  * @returns {Promise<{child: import("node:child_process").ChildProcess, port: number, profile: string}>}
  */
-export async function launchBrowser({ exe, headless = true, profile, timeoutMs = START_TIMEOUT_MS, sleep = (ms) => new Promise((r) => setTimeout(r, ms)), reclaimIo = undefined } = {}) {
+export async function launchBrowser({ exe, headless = true, profile, timeoutMs = browserStartTimeoutMs(), sleep = (ms) => new Promise((r) => setTimeout(r, ms)), reclaimIo = undefined } = {}) {
   const args = [
     ...(headless ? ["--headless=new"] : []),
     "--disable-gpu", "--no-first-run", "--hide-scrollbars",

package/browser/queue.mjs

@@ -12,7 +12,7 @@ import { WAIT_TIMEOUT_DEFAULT, WAIT_TIMEOUT_MAX } from "./actions.mjs"
 
 /** 动作预算表（§2.9——机检）：动作 ⇒ 预算 ms。wait 无固定值（谓词帽 + 余量——`budgetFor` 解算）。 */
 export const ACTION_BUDGETS = {
-  navigate: 45_000, // 含会话自启（12s 启动帽内）+ 导航 + 就绪轮询 + 快照
+  navigate: 45_000, // 不含会话自启（自启段有自身帽——§2.4 / KD-26）+ 导航 + 就绪轮询 + 快照
   click: 30_000,
   evaluate: 30_000,
   screenshot: 30_000,
@@ -58,11 +58,39 @@ export class ActionController {
     this._abortHooks = []
     this._abortP = new Promise((resolve) => { this._resolveAbort = resolve })
     this._timer = setTimeout(() => this.abort("timeout"), budgetMs)
+    this._pausedAt = null // 冷启段暂停点（null = 计时中——§2.4 冷启预算）
   }
 
-  /** 剩余预算（ms）——动作内调用帽的下界参照（§2.9 层一：动作内调用随控制器）。 */
+  /** 剩余预算（ms）——动作内调用帽的下界参照（§2.9 层一：动作内调用随控制器）；暂停期读暂停点。 */
   remaining() {
-    return Math.max(1, this._deadline - Date.now())
+    return Math.max(1, this._deadline - (this._pausedAt ?? Date.now()))
+  }
+
+  /** 冷启段暂停计量（§2.4 冷启预算 / KD-26）：自启窗口内动作预算钟不裁决——清钟、记暂停点。
+   *  与 `resumeBudget` 成对；自启段自身由启动窗帽 + 三域 enable 帽界定（session.mjs 开启序）。 */
+  pauseBudget() {
+    if (this.aborted || this._pausedAt !== null) return
+    this._pausedAt = Date.now()
+    if (this._timer) { clearTimeout(this._timer); this._timer = null }
+  }
+
+  /** 冷启段恢复计量：把暂停时长还给 deadline（经 `extendBy` 重设并重挂）——动作时钟自会话就绪后起算。 */
+  resumeBudget() {
+    if (this._pausedAt === null) return
+    const pausedMs = Math.max(0, Date.now() - this._pausedAt)
+    this._pausedAt = null
+    this.extendBy(pausedMs)
+  }
+
+  /** 冷启段回补（§2.4 冷启预算 / KD-26）：把给定时长加回 deadline 并重挂定时器（`ms = 0` 也重挂——
+   *  暂停后恢复的零时长路径仍须有活钟）。`budgetMs` 不动（超时句仍报动作本预算）；中止后无效果。 */
+  extendBy(ms) {
+    if (this.aborted) return
+    const extra = Number(ms)
+    if (!Number.isFinite(extra) || extra < 0) return
+    this._deadline += extra
+    if (this._timer) clearTimeout(this._timer)
+    this._timer = setTimeout(() => this.abort("timeout"), Math.max(1, this._deadline - Date.now()))
   }
 
   /** 快速失败（§2.9）：abort 之后一切后续调用即刻拒绝（清理路径不得再起命令）。 */

package/browser/session.mjs

@@ -196,12 +196,16 @@ async function ensureSession(wanted) {
     return
   }
   let opened
+  const ctl = currentController
+  ctl?.pauseBudget() // 冷启段不占动作预算（§2.4 冷启预算 / KD-26）：自启窗口内预算钟暂停（自启段自身由启动窗帽 + 三域 enable 帽界定）
   try {
     opened = await runFrame("launch browser", () => (_deps.openBrowser ?? openBrowserReal)({ headless: wanted === undefined ? true : wanted }))
   } catch (e) {
     if (e?.browserAbort) state.reopenNote = true
+    ctl?.resumeBudget() // 失败腿同样恢复（自启失败的裁决归启动窗帽与错误本体）
     throw e
   }
+  ctl?.resumeBudget() // 动作时钟自会话就绪后起算（自启用时不计入动作预算；排队期照旧计入）
   state.cdp = opened.cdp
   state.child = opened.child ?? null
   state.lockPath = opened.lock ?? null

package/config-defaults.mjs

@@ -12,6 +12,10 @@
 import { join } from "node:path"
 import { configDir } from "./config-io.mjs"
 
+/** provider 响应体（body）阶段读侧空闲超时的单源缺省：provider 缺省 ∥ 传输层缺省同值同源。
+ *  可经 `agent.bodyIdleTimeoutMs` 覆盖；`≤0` / 非有限数回退本值（不禁用——无现场判据）。 */
+export const DEFAULT_BODY_IDLE_MS = 120000
+
 export const DEFAULTS = {
   defaultModel: null, // top-level "provider:model" composite — new-session starting point (F-1)
   agent: {
@@ -20,6 +24,10 @@ export const DEFAULTS = {
     subagentModel: null,  // default subagent model: "provider:model" | model name (parent provider); null = inherit parent provider
     subagentModels: {},   // per-type override: { explore, plan, coder, "eng-coder" } — priority: subagent tool model arg > this[role] > subagentModel > parent provider
     goalTurns: 200,
+    // body 阶段读侧空闲超时（毫秒，TIMEOUT-DIGEST.md §2.1）：长生成只要有数据流动就不超时，
+    // 连续该值无新 chunk 才断。登记进 DEFAULTS 是为了 `settings list` 可见（判据 A3）——
+    // 与 `agent.fetchTimeoutMs`（只被 config 提升、不进本表）不同的一处偏离，理由即此。
+    bodyIdleTimeoutMs: DEFAULT_BODY_IDLE_MS,
     // compactThreshold: 键缺省 = auto（CONTEXT-COMPACTION.md §6.17 三档落值）——无默认值：留着默认值
     // 会让每份配置看着都像显式。派生线只进 agent.compactThresholdResolved（内存面，不落盘）。
     verifyGuard: false,  // push model back to verify when files were mutated but verify not run (opt-in)

package/config-presets.mjs

@@ -13,7 +13,7 @@
  * 候选清单字段亦不预置——运行期从 provider 拉取（`GET /models`）。
  */
 
-/** Built-in provider presets: shared by /provider add <preset> and first-run wizard. */
+/** Built-in provider presets: shared by the `/model` provider flow, the first-run wizard, and the desktop / VSC provider forms. */
 export const PROVIDER_PRESETS = {
   deepseek: { baseURL: "https://api.deepseek.com", thinking: { type: "enabled" }, reasoningEffort: "max", maxTokens: 384_000, desc: "DeepSeek" },
   kimi:     { baseURL: "https://api.moonshot.cn/v1", thinking: null, reasoningEffort: "max", maxTokens: 131072, desc: "Kimi / Moonshot" },

package/config.mjs

@@ -37,8 +37,10 @@ export { DEFAULTS }
 // Model capability table + spec lookup live in model-specs.mjs (2026-08-31
 // extract — config.mjs had grown past the 300-line advisory). Re-exported here
 // so the 23 existing importers keep their import paths.
-import { specForModel, providerSpec, specMatch, assistantToolCallMessage } from "./model-specs.mjs"
-export { specForModel, providerSpec, specMatch, assistantToolCallMessage }
+import { specForModel, providerSpec, providerSpecResolution, specMatch, formatContextK, assistantToolCallMessage } from "./model-specs.mjs"
+export { specForModel, providerSpec, providerSpecResolution, specMatch, formatContextK, assistantToolCallMessage }
+// 上下文解析链的取值校验单点（PROVIDER.md §6.15）：装载归一与读面共用一个谓词。
+import { positiveInt, warnContextOnce } from "./model-context.mjs"
 
 
 // Window utilization ratio (CONTEXT-COMPACTION.md §6.2 / D-CC30 / §6.17 / D-CC32): auto threshold =
@@ -79,8 +81,10 @@ export function usableWindow(context, reserve) {
  *  maxTokens), the stats budget line (agent-tools/context.mjs), the pre-send guard
  *  (agent/run-stages.mjs). transport derives from provider.format ("anthropic" | "google" |
  *  "responses" | default = OpenAI-compatible). Fields:
- *  - window / windowSource: spec.context (providers[].context K override already merged by
- *    providerSpec); source = "provider-override" when the override is present, else "spec".
+ *  - window / windowSource: spec.context (the §6.15 chain — modelContext / legacy context /
+ *    /models self-report / static table / default — already resolved by providerSpec);
+ *    source = providerSpecResolution(provider).source — closed set { modelContext |
+ *    provider-override | list | spec | default }, passed through verbatim (no class merging).
  *  - maxTokens / maxTokensSource: the value THIS transport writes into the request body —
  *    anthropic always sends it (explicit ?? spec.maxOutput); the other three faces send only an
  *    explicit provider.maxTokens, absent ⇒ undefined / "absent". Never a guard criterion
@@ -90,16 +94,19 @@ export function usableWindow(context, reserve) {
  *  - threshold: min(usable, ⌊window × COMPACT_RATIO⌋) — the compaction trigger line.
  *  - limit: window − reserve — hard prompt ceiling; the guard's ONLY numeric criterion field
  *    (always a number; negative = any prompt overflows). */
-export function requestBudget(provider, spec = providerSpec(provider)) {
-  const window = spec?.context ?? 0
-  const k = Number(provider?.context)
-  const windowSource = Number.isInteger(k) && k > 0 ? "provider-override" : "spec"
+export function requestBudget(provider, spec) {
+  // windowSource = 五级链的同一次遍历出口（§6.15）——L1 / L3 命中也会如实报来源，不再二值猜。
+  // 调用方传 spec（core.mjs 已算过 providerSpec）时窗口值用它，来源仍读 resolution（恒等映射，不并类）。
+  const resolution = providerSpecResolution(provider)
+  const resolved = spec ?? resolution.spec
+  const window = resolved?.context ?? 0
+  const windowSource = resolution.source
   const explicitRaw = Number(provider?.maxTokens)
   const explicit = Number.isFinite(explicitRaw) && explicitRaw > 0 ? explicitRaw : undefined
   const anthropicAlwaysSends = provider?.format === "anthropic"
-  const maxTokens = explicit ?? (anthropicAlwaysSends ? spec?.maxOutput ?? 0 : undefined)
+  const maxTokens = explicit ?? (anthropicAlwaysSends ? resolved?.maxOutput ?? 0 : undefined)
   const maxTokensSource = explicit != null ? "explicit" : anthropicAlwaysSends ? "spec" : "absent"
-  const reserve = maxTokens ?? spec?.maxOutput ?? 0
+  const reserve = maxTokens ?? resolved?.maxOutput ?? 0
   const usable = usableWindow(window, reserve)
   return {
     window, windowSource, maxTokens, maxTokensSource, reserve, usable,
@@ -182,6 +189,20 @@ export function findProvider(providers, name) {
   return providers[0] ?? { name: "default", baseURL: "" }
 }
 
+/**
+ * Promote `agent.advisor` into the runtime view `config.advisor`（decoupled copy——`{ ...config.advisor,
+ * ...config.agent.advisor }`）。单一规则：`loadConfig` 装载期与 `settings set` 写面共用（`SETTINGS-TOOL.md` §2.3）。
+ * 只住运行面的会话级键（如 `advisor.guard`——`cmd-advisor.mjs` 只写 promoted）在合并中保留；
+ * promoted 是副本而不自动跟随 nested，所以每个写点都得同步（`AGENT-PARAMS.md` §2 写面不变式）。
+ */
+export function promoteAgentViews(config) {
+  const nested = config.agent?.advisor
+  // 非对象段（手写 config.json 的畸形值）不展开——字符串 spread 会产出 0/1/2 垃圾键；
+  // 读面本身对非法值「一律回退默认」（AGENT-PARAMS.md §2 / D-P3）
+  config.advisor = { ...config.advisor, ...(nested !== null && typeof nested === "object" && !Array.isArray(nested) ? nested : {}) }
+  return config
+}
+
 /**
  * Load configuration.
  * No env-var overrides — config.json is the single source of truth
@@ -257,6 +278,30 @@ export function loadConfig() {
     delete p.context
   }
 
+  // providers[].modelContext（按模型的人工声明，K 单位——PROVIDER.md §6.15）：值只收正整数，
+  // 非法（0 / 负 / 非数 / 非整 / 布尔 / 数字字符串）⇒ 该键视为未声明（落 L2）+ 装载期告警一次
+  // （P-13）。数字字符串**不归一**（不同于旧键 context）：写面先 parse 再落盘，文件里的字符串是
+  // 手改/笔误，静默转数会把「想写哪个单位」藏起来（旧键两起 ×1024 事故的根因）。
+  // 读面（manualContextK）仍逐次防御——装载归一不产新键，只清内存镜像（磁盘原文零变）。
+  for (const p of merged.providers) {
+    if (p.modelContext === undefined) continue
+    const rawMC = p.modelContext
+    if (!rawMC || typeof rawMC !== "object" || Array.isArray(rawMC)) {
+      warnContextOnce(`modelContext-shape\0${p.name ?? ""}`,
+        `[config] provider "${p.name}" modelContext must be an object of model ID → positive integer K (e.g. 128 = 128K) — got ${JSON.stringify(rawMC)} — ignored`)
+      delete p.modelContext
+      continue
+    }
+    p.modelContext = { ...rawMC }
+    for (const [key, value] of Object.entries(p.modelContext)) {
+      if (positiveInt(value) !== null) continue
+      warnContextOnce(`modelContext-invalid\0${p.name ?? ""}\0${key}`,
+        `[config] provider "${p.name}" modelContext["${key}"] must be a positive integer in K units (e.g. 128 = 128K) — got ${JSON.stringify(value)} — ignored, falling through to the provider context / list / model spec value`)
+      delete p.modelContext[key]
+    }
+    if (Object.keys(p.modelContext).length === 0) delete p.modelContext // 不留空对象
+  }
+
   // F-4 (IKCDMR) consultModels 软失败化——D-S1 范式（defaultModel 无效同族）：非法条目
   // 过滤不 throw（去 startup brick——无修复入口的硬崩消）；一次性启动警告内嵌修复指引
   // （引导清条目载体——保留 discoverability）；过滤记录挂 merged.agent.consultModelsFiltered
@@ -319,8 +364,12 @@ export function loadConfig() {
   // fetch 超时可配置（2026-09-01：agent.fetchTimeoutMs——provider/core.mjs effectiveFetchTimeoutMs 消费）
   merged.provider.fetchTimeoutMs = Number.isFinite(merged.agent?.fetchTimeoutMs) && merged.agent.fetchTimeoutMs > 0
     ? merged.agent.fetchTimeoutMs : undefined
+  // body 阶段空闲超时同形提升（TIMEOUT-DIGEST.md §2.1 —— provider/core.mjs effectiveBodyIdleMs 消费）：
+  // 非法 ∥ 缺省 ⇒ undefined ⇒ 回退 DEFAULT_BODY_IDLE_MS（不静默禁用保护）
+  merged.provider.bodyIdleTimeoutMs = Number.isFinite(merged.agent?.bodyIdleTimeoutMs) && merged.agent.bodyIdleTimeoutMs > 0
+    ? merged.agent.bodyIdleTimeoutMs : undefined
   merged.providersList = merged.providers
-  merged.advisor = { ...merged.agent.advisor }  // promote for consistent access (decoupled copy)
+  promoteAgentViews(merged)  // agent.advisor → advisor promote for consistent access (decoupled copy)
 
   return merged
 }