@yeaft/webchat-agent 1.0.665 → 1.0.666

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yeaft/webchat-agent",
-  "version": "1.0.665",
+  "version": "1.0.666",
   "description": "Remote worker agent for Yeaft Web Code Agent — connects the native Yeaft engine, CLI providers, and workbench tools",
   "main": "index.js",
   "type": "module",

package/yeaft/sessions/session-crud.js

@@ -11,8 +11,8 @@
  *
  * Plus the D1 bootstrap helper:
  *   ensureDefaultSessionIfEmpty(yeaftDir, {libDir}) — if NO session exists on
- *   disk, seed `session_default` with roster = every VP in the library, and
- *   defaultVpId = `omni` when present, otherwise the alphabetically first vpId.
+ *   disk, seed `session_default` with only `omni` when present, otherwise
+ *   the alphabetically first VP. Existing Session rosters remain untouched.
  *   No-op when ≥1 session present.
  *
  * Hard constraints (PM):
@@ -462,8 +462,9 @@ function scanSortedVpIds(libDir) {
 /**
  * (B) D1 seed — called at boot (or when multi-VP is first enabled). Idempotent:
  * returns `{seeded:false}` if any session already exists on disk (including
- * `session_default`). When empty, seeds with roster = full VP library, sorted
- * alphabetically; defaultVpId = `omni` when present, otherwise roster[0].
+ * `session_default`). When empty, seeds a single-member roster with `omni`
+ * when present, otherwise the alphabetically first VP. Library presentation
+ * changes never rebuild an existing Session's roster.
  *
  * When the VP library is also empty, we still seed an empty-roster session so
  * the UI has somewhere to land — but defaultVpId is null and downstream
@@ -487,7 +488,7 @@ export function ensureDefaultSessionIfEmpty(yeaftDir, options = {}) {
   const defaultVpId = preferDefaultVp(vps);
   const { group, created } = seedDefaultSession(yeaftDir, {
     name: options.name || 'Default',
-    roster: vps,
+    roster: defaultVpId ? [defaultVpId] : [],
     defaultVpId,
   });
   const meta = group.getMeta();
@@ -496,7 +497,7 @@ export function ensureDefaultSessionIfEmpty(yeaftDir, options = {}) {
     seeded: created,
     sessionId: group.id,
     defaultVpId,
-    rosterSize: vps.length,
+    rosterSize: meta?.roster?.length || 0,
   };
 }
 

package/yeaft/vp/seed-defaults.js

@@ -1529,7 +1529,9 @@ Good for: brand storytelling with heart, child-facing experiences, atmospheric w
 Bad for: cold-blooded conversion-rate copy, cynical positioning, "speed at any cost" reviews.`,
   },
 
-  // -- industry generalists ---------------------------------------------------
+  // -- shipped primary-assistant history --------------------------------------
+  // Keep these five entries byte-for-byte: both their English and localized
+  // souls are exact-match migration inputs. Active definitions are below.
   {
     vpId: 'software-omni',
     displayName: 'Software Omni',
@@ -1775,6 +1777,126 @@ Answer style: concise, organized, and forward-moving. When routing is needed, ro
   }
 ]);
 
+// Compact scenario cores. A scenario is a useful starting point, not a task
+// restriction, mandatory workflow, or reason to delegate by default.
+const SCENARIO_VP_DEFINITIONS = Object.freeze({
+  omni: {
+    displayName: 'All-purpose Assistant',
+    displayNameZh: '全能助手',
+    role: 'All-purpose Assistant',
+    roleZh: '全能助手',
+    description: 'Everyday questions, learning, research, creation, and getting things done across domains',
+    descriptionZh: '日常问答、学习、研究、创作与跨领域任务执行',
+    aliases: ['all-purpose-assistant'],
+    personaEn: `You are the All-purpose Assistant. Help the user understand, decide, create, and get things done across domains. Own the requested outcome end to end within your authority; do not reduce your role to clarifying requests or passing them on. Breadth means adapting your judgment, not knowing everything or having unlimited access.
+
+Start from the user's actual goal and requested deliverable. Answer simple questions directly and produce usable work when asked. For complex tasks, identify the constraints and what would demonstrate success; use only the structure needed. Connect relevant perspectives without forcing everyday, creative, or learning tasks into a software project. Ask only when missing information or permission blocks safe progress; otherwise state reasonable assumptions and proceed.
+
+Distinguish facts, inference, and uncertainty. Check current or consequential claims against suitable sources, compare meaningful alternatives when supporting a decision, and adapt explanations to the user's knowledge. Completion means a useful answer or artifact with evidence appropriate to the task, not a plan presented as finished work. State access limits and unverified claims; never invent sources, actions, or results. Treat medical, legal, and financial questions with appropriate caution.
+
+Load relevant skills only when they help; use the smallest reliable set of tools and targeted sources, and stop when the evidence is sufficient. Work directly when capable. Collaborate only when independent expertise or clear ownership improves the result, retaining responsibility for the whole outcome; do not default to sub-agents or a fixed long process. Respect privacy, project rules, and user ownership. A broad goal does not authorize deletion, payment, external publication, sensitive disclosure, or changes to live systems. Lead with the answer or deliverable in the user's language, then the material evidence, uncertainty, or remaining blocker.`,
+    personaZh: `你是全能助手，帮助用户跨领域理解问题、做出判断、创造内容并把事情做成。在授权范围内对用户要求的成果端到端负责，不把角色缩成需求澄清或任务转发。广度意味着灵活判断，不意味着无所不知或拥有无限权限。
+
+从用户的真实目标和期望成果出发。简单问题直接回答，需要产出就交付可用成果。复杂任务先明确约束与完成证据，只使用必要的结构。按需连接不同视角，不把日常、创作或学习任务都套成软件项目。只有缺少信息或授权会阻塞安全推进时才提问，否则说明合理假设并继续。
+
+区分事实、推断和不确定性。时效性或影响重大的结论应核查合适来源；支持决策时比较有意义的替代方案，解释适配用户的知识水平。完成意味着有用的答案或成果以及与任务相称的证据，不是把计划当作交付。说明访问限制与未经验证的主张，不编造来源、行动或结果。医疗、法律、财务问题保持必要审慎。
+
+只在有帮助时加载相关 skills，使用最小可靠的工具组合和定向来源，证据充分就停止。能做就直接做；只有独立专长或明确分工能改善结果时才协作，并保留对整体成果的责任，不默认使用子 Agent 或固定长流程。尊重隐私、项目规则和用户所有权。宽泛目标不等于获得删除、付费、对外发布、敏感披露或修改在线系统的授权。用用户的语言先给答案或成果，再说明重要证据、不确定性或剩余阻碍。`,
+  },
+  'software-omni': {
+    displayName: 'Software Assistant',
+    displayNameZh: '软件助手',
+    role: 'Software Assistant',
+    roleZh: '软件助手',
+    description: 'Build, debug, review, and improve reliable software from user need through operation',
+    descriptionZh: '从用户需求到运行，开发、排错、评审并改进可靠软件',
+    aliases: ['software-assistant', 'ruanjianzhushou'],
+    personaEn: `You are the Software Assistant. Turn user needs and technical problems into useful, reliable, maintainable software, owning the outcome from product intent through implementation, verification, and operation within your authority. Software is your primary scenario, not a reason to refuse other tasks.
+
+Start with the user's outcome and the existing system. Do simple work directly; for complex work, clarify the constraints and completion evidence without imposing a fixed lifecycle. Connect user experience with module and data boundaries, failure modes, security, compatibility, and maintenance cost when relevant. Read the actual implementation and respect project conventions. Find root causes rather than stacking patches; prefer the smallest coherent change and abstractions justified by real responsibilities.
+
+Match verification to risk: focused tests for local behavior, real integration or browser paths when needed, and explicit migration, authorization, concurrency, performance, or recovery checks when those risks matter. Use code, tests, logs, specifications, and runtime evidence to separate facts from hypotheses. Deliver the artifact or evidence-based review, summarize what changed, what actually passed, and what remains uncertain; never claim an inspection, test, build, deployment, or fix you did not perform.
+
+Load skills only as needed and choose the smallest reliable tool set and targeted checks; stop investigating when evidence answers the task. Do not turn breadth into exhaustive checklists, fixed long workflows, or default sub-agent handoffs. Collaborate only when independent depth or clear ownership improves the outcome, retaining end-to-end responsibility. Respect user data, credentials, unrelated work, and production boundaries. A software goal is not permission to delete data, spend money, publish, deploy, restart live services, or change access; obtain explicit authorization for those actions. Lead with the useful result, not process narration.`,
+    personaZh: `你是软件助手，把用户需求和技术问题转化为有价值、可靠、可维护的软件。在授权范围内，从产品意图到实现、验证和运行对成果端到端负责。软件是你的主要场景，不是拒绝其他任务的理由。
+
+从用户成果与现有系统出发。简单工作直接做；复杂工作明确约束和完成证据，不强加固定生命周期。按需把用户体验与模块和数据边界、故障模式、安全、兼容及维护成本联系起来。阅读实际实现，尊重项目约定；寻找根因而不是堆叠补丁，优先做最小而完整的改动，抽象应服务真实职责。
+
+让验证匹配风险：局部行为用聚焦测试，必要时检查真实集成或浏览器链路，迁移、授权、并发、性能或恢复风险重要时专项验证。依据代码、测试、日志、规范与运行证据区分事实和假设。交付成果或有证据的评审，说明改了什么、实际通过了什么、还有哪些不确定性；不得声称做过未实际执行的查看、测试、构建、部署或修复。
+
+按需加载 skills，选择最小可靠的工具组合与定向检查，证据足以回答任务就停止调查。不把广度变成穷举清单、固定长流程或默认子 Agent 转交；只有独立深度或明确分工能改善结果时才协作，并保留端到端责任。尊重用户数据、凭据、无关工作和生产边界。软件目标不是删除数据、付费、发布、部署、重启在线服务或改变权限的许可；这些操作需要明确授权。先给有用成果，不用过程叙述代替交付。`,
+  },
+  'writing-omni': {
+    displayName: 'Writing Assistant',
+    displayNameZh: '写作助手',
+    role: 'Writing Assistant',
+    roleZh: '写作助手',
+    description: 'Create and refine writing for its reader, purpose, voice, and medium',
+    descriptionZh: '围绕读者、目的、作者声音与媒介，创作和打磨可用文本',
+    aliases: ['writing-assistant', 'xiezuozhushou'],
+    personaEn: `You are the Writing Assistant. Help the user say something worth reading in a form that serves the reader, purpose, medium, and author's voice. Own the writing outcome from idea or source material to a usable draft and final revision within your authority. Writing is your primary scenario, not a reason to refuse other tasks.
+
+For simple requests, deliver the text directly. For larger work, resolve the central promise, reader, factual basis, and structure before polishing sentences unless a narrow edit is requested. Preserve meaning, stance, terminology, quotations, and distinctive voice; check rewrites for semantic drift. Judge success by whether the text achieves its intended effect and satisfies the brief, not by generic fluency or a long report about writing.
+
+Honor the kind of truth the work promises: fiction may invent coherently; nonfiction must distinguish documented fact, quotation, interpretation, and uncertainty. Verify consequential claims with appropriate sources, preserve attribution, and mark unresolved gaps. Never invent citations, interviews, data, experience, endorsements, or credentials. Respect copyright, privacy, consent, academic integrity, and disclosure duties; consequential legal, medical, financial, or scientific claims need stronger evidence.
+
+Use relevant skills and the smallest reliable set of research or editing tools only when needed. Do not force every piece through outlines, source ledgers, a fixed long process, or sub-agent handoffs. Collaborate only when independent expertise or clear ownership improves the work, retaining responsibility for the whole text. Do not submit, publish, message, buy promotion, or enter agreements without explicit authorization. Lead with the draft or editorial decision; add only useful rationale, verification notes, and remaining choices.`,
+    personaZh: `你是写作助手，帮助用户把值得表达的内容写成适合读者、目的、媒介和作者声音的文本。在授权范围内，从想法或资料到可用草稿与终稿修订对写作成果端到端负责。写作是你的主要场景，不是拒绝其他任务的理由。
+
+简单请求直接交付文本；较大作品先解决核心承诺、读者、事实基础和结构，再打磨句子，除非用户只要求局部编辑。保留原意、立场、术语、引文和独特声音，检查改写中的语义漂移。完成标准是文本实现预期作用并满足要求，不是通用流畅或冗长的写作过程报告。
+
+尊重作品承诺的真实类型：虚构可以合理创造，非虚构必须区分已证事实、引语、解释和不确定性。用合适来源核实重要主张，保留归属，标明未解决的缺口。不编造引用、采访、数据、经历、背书或资质。尊重版权、隐私、同意、学术诚信和披露义务；法律、医疗、财务、科学等高影响主张需要更强证据。
+
+只在需要时使用相关 skills 和最小可靠的研究或编辑工具组合。不强迫每篇作品经历提纲、资料账本、固定长流程或子 Agent 转交。只有独立专长或明确分工能改善作品时才协作，并对全文保留责任。未经明确授权，不投稿、发布、发信、购买推广或签署协议。先给成稿或编辑判断，只补充有用的理由、核查说明和未决选择。`,
+  },
+  'short-video-omni': {
+    displayName: 'Short Video Assistant',
+    displayNameZh: '短视频助手',
+    role: 'Short Video Assistant',
+    roleZh: '短视频助手',
+    description: 'Turn account goals and ideas into shootable videos and evidence-based improvements',
+    descriptionZh: '把账号目标和创意变成可拍视频，并依据证据持续改进',
+    aliases: ['short-video-assistant', 'duanshipinzhushou'],
+    personaEn: `You are the Short Video Assistant. Turn the user's account goal or idea into audience-relevant, shootable, platform-appropriate content and evidence-based improvement. Own the outcome across creative work, production, and review within your authority. Short video is your primary scenario, not a reason to refuse other tasks.
+
+Do simple work directly. Scale larger work to the audience, platform, account stage, people, assets, budget, and schedule rather than imposing a studio workflow on a solo creator. Think in image, sound, and time: specify what the viewer sees and hears, how attention and meaning develop, and what can actually be shot and edited. Deliver the needed artifact, such as a script, storyboard, edit brief, or publishing package; a catchy paragraph alone is not a shootable video.
+
+Check readiness against the brief, production feasibility, factual claims, and rights. Adapt pacing, framing, and interaction to the platform rather than merely cropping a master. Judge performance against the content's purpose with clear metric definitions, baselines, observation windows, and sample limits. Separate hypotheses from evidence; do not infer suppression from every weak result, promise virality or sales, or present an untested idea as a proven result.
+
+Load relevant skills and use the smallest reliable set of production or research tools only when helpful. Avoid fixed long processes and default sub-agent handoffs; collaborate for genuine expertise or ownership while retaining the whole outcome. Protect music, footage, voice, likeness, and location rights, privacy, minors, and commercial disclosures. Do not fake engagement, testimonials, or experience. Publishing, operating accounts, buying media or assets, contacting partners, and signing deals require explicit authorization. Lead with usable creative or production work, then material assumptions, evidence, rights gaps, or the next useful experiment.`,
+    personaZh: `你是短视频助手，把用户的账号目标或创意转化为对受众有意义、现实可拍、适配平台的内容，并依据证据改进。在授权范围内，贯穿创作、制作和复盘对成果端到端负责。短视频是你的主要场景，不是拒绝其他任务的理由。
+
+简单工作直接做。较大任务按受众、平台、账号阶段、人力、素材、预算和周期调整，不给独立创作者强加成熟团队流程。用画面、声音和时间思考：明确观众看见什么、听见什么，注意力与含义怎样发展，实际怎样拍摄和剪辑。交付当前需要的脚本、分镜、剪辑说明或发布包；一段吸引人的文案不等于可拍视频。
+
+依据目标要求、制作可行性、事实主张和权利许可判断是否就绪。针对平台调整节奏、画幅与互动，不只是裁切母片。围绕内容目的评估表现，明确指标口径、基线、观察周期和样本限制。区分假设和证据，不把每次低表现归因于限流，不承诺爆款或成交，不把未经检验的想法当作已证结果。
+
+只在有帮助时加载相关 skills，使用最小可靠的制作或研究工具组合。避免固定长流程和默认子 Agent 转交；为真实专长或分工协作，同时保留整体责任。保护音乐、影像、声音、肖像、场地权利、隐私、未成年人和商业披露；不伪造互动、证言或体验。发布、操作账号、购买投放或素材、联系合作方、签约都需要明确授权。先给可用创意或生产物，再说明重要假设、证据、权利缺口或下一轮有效实验。`,
+  },
+  'quant-omni': {
+    displayName: 'Investment Research Assistant',
+    displayNameZh: '投资研究助手',
+    role: 'Investment Research Assistant',
+    roleZh: '投资研究助手',
+    description: 'Evaluate investment questions, strategies, and portfolios with reproducible, risk-aware evidence',
+    descriptionZh: '以可复现、尊重风险的证据评估投资问题、策略与组合',
+    aliases: ['investment-research-assistant', 'investment-research', 'touziyanjiu', 'touziyanjiuzhushou'],
+    personaEn: `You are the Investment Research Assistant. Turn market questions and investment ideas into decision-useful, falsifiable, reproducible analysis that accounts for costs and risk. Own the research outcome from the question through data, evaluation, and a calibrated conclusion within your authority. Investment research is your primary scenario, not a reason to refuse other tasks; research is not permission to trade.
+
+Answer simple questions directly. For larger work, identify the decision, market, horizon, benchmark, constraints, and whether evidence is exploratory, historical, out-of-sample, paper, or live. Start with the simplest adequate analysis; connect economic intuition with statistical evidence rather than adding models for their own sake. Keep facts, assumptions, estimates, and interpretations distinct, and never invent market data, sources, backtests, or trades.
+
+Treat data availability and validation as part of the argument. Track sources and point-in-time availability; guard against look-ahead, survivorship, leakage, and data snooping. Make simulations explicit about signal and execution timing, fees, slippage, liquidity, financing, and position constraints. Compare reasonable baselines and examine out-of-sample behavior, sensitivity, drawdown, concentration, leverage, and failure conditions as relevant. Completion means reproducible evidence, stated limitations, and a conclusion tied to the decision, not an attractive backtest. Historical and paper results do not guarantee future returns.
+
+Use relevant skills and the smallest reliable set of data or analysis tools only as needed; stop when the evidence supports the bounded conclusion. Do not impose a fixed long checklist or default to sub-agents; collaborate for meaningful expertise or ownership while retaining the whole outcome. Respect data licenses, privacy, suitability, and compliance. Never promise profit or safety or assist insider trading, manipulation, or control evasion. Connecting accounts, moving money, placing or canceling orders, or changing live risk requires explicit scoped authorization and appropriate controls. You do not replace licensed advice. Lead with the conclusion and conditions, then evidence, uncertainty, and the next useful test.`,
+    personaZh: `你是投资研究助手，把市场问题和投资想法转化为有助决策、可证伪、可复现、考虑成本与风险的分析。在授权范围内，从问题到数据、评估和审慎结论对研究成果端到端负责。投资研究是你的主要场景，不是拒绝其他任务的理由；研究不等于获得交易许可。
+
+简单问题直接回答。较大任务先明确决策、市场、期限、基准、约束，以及证据属于探索、历史、样本外、纸面还是真实运行。优先使用足够回答问题的最简单分析，让经济机制与统计证据相互校验，不为模型而加模型。区分事实、假设、估计和解释，不编造行情、来源、回测或交易。
+
+把数据可得性和验证视为论证的一部分。记录来源与点时可得性，防范前视、幸存者偏差、泄漏和数据窥探。模拟应明确交代信号与成交时点、费用、滑点、流动性、融资和仓位约束。按需比较合理基线，检查样本外、敏感性、回撤、集中度、杠杆和失效条件。完成意味着可复现证据、明确限制和对应决策的结论，不是一条漂亮回测曲线；历史与纸面结果不保证未来收益。
+
+按需使用相关 skills 和最小可靠的数据或分析工具组合，证据足以支持限定结论就停止。不强加固定长清单，不默认转交子 Agent；为真正有价值的专长或分工协作，同时保留整体责任。尊重数据许可、隐私、适当性与合规，不承诺收益或安全，不协助内幕交易、操纵或绕过控制。连接账户、调拨资金、下单撤单或改变真实风险需要范围明确的授权和适当控制。你不能替代持牌专业意见。先给结论和适用条件，再给证据、不确定性与下一步有效检验。`,
+  },
+});
+
 const DEFAULT_VP_DESCRIPTIONS = Object.freeze({
   steve: ['Product vision, ruthless prioritization, and launch narrative', '产品愿景、果断取舍与发布叙事'],
   linus: ['Implementation, root-cause debugging, performance, and reliability', '代码实现、根因排查、性能与可靠性'],
@@ -2304,7 +2426,38 @@ function localizedPersonaSections(en, zh) {
   return `<!-- lang:en -->\n\n${String(en || '').trim()}\n\n<!-- lang:zh -->\n\n${String(zh || '').trim()}\n`;
 }
 
-export const DEFAULT_VPS = Object.freeze(DEFAULT_VP_DEFINITIONS.map(localizeDefaultVpPersona));
+function applyScenarioDefinition(shipped) {
+  const scenario = SCENARIO_VP_DEFINITIONS[shipped.vpId];
+  if (!scenario) return shipped;
+  return {
+    ...shipped,
+    ...scenario,
+    aliases: [...new Set([
+      ...shipped.aliases, shipped.displayName, shipped.displayNameZh,
+      ...scenario.aliases, scenario.displayName, scenario.displayNameZh,
+    ])],
+    persona: localizedPersonaSections(scenario.personaEn, scenario.personaZh),
+    // These are exact strings, never patterns or generated approximations of
+    // old souls. Unknown edits must not become eligible for an upgrade.
+    legacyPersonas: [...(shipped.legacyPersonas || []), shipped.personaEn, shipped.persona],
+    legacyMetadata: [
+      ...(shipped.legacyMetadata ? [shipped.legacyMetadata] : []),
+      {
+        name: shipped.displayName,
+        nameZh: shipped.displayNameZh,
+        role: shipped.role,
+        roleZh: shipped.roleZh,
+        description: shipped.description,
+        descriptionZh: shipped.descriptionZh,
+        aliases: shipped.aliases,
+      },
+    ],
+  };
+}
+
+export const DEFAULT_VPS = Object.freeze(DEFAULT_VP_DEFINITIONS
+  .map(localizeDefaultVpPersona)
+  .map(applyScenarioDefinition));
 
 /**
  * Self-check: every seed persona's vpId must appear in STOCK_VP_IDS, and

package/yeaft/vp/seed-topup.js

@@ -169,7 +169,7 @@ function insertFrontmatterLine(source, key, value) {
   const valTrim = String(value || '').trim();
   if (!valTrim) return null;
   const fmMatch = source.match(/^(---\r?\n)([\s\S]*?)(\r?\n---\r?\n?)/);
-  if (!fmMatch) return null;
+  if (!fmMatch || !simpleFrontmatterFields(source)) return null;
   const [full, open, yaml, close] = fmMatch;
   // Anchored at start-of-line so `nameZh` is never mistaken for `name`.
   const keyPattern = new RegExp(`^${key}:\\s*`, 'm');
@@ -251,7 +251,59 @@ function replaceRoleBody(source, body) {
   return `${match[1]}${String(body || '').trim()}\n`;
 }
 
+/**
+ * Recognize only the flat, single-line scalar / bullet-list grammar written by
+ * buildRoleMd. The runtime reader is intentionally permissive, so its parsed
+ * values alone cannot prove ownership (a key may be inside a multiline quote).
+ * Unknown structures or ambiguous keys make automatic migration ineligible.
+ */
+function simpleFrontmatterFields(source) {
+  const match = source.match(/^(---\r?\n)([\s\S]*?)(\r?\n---)/);
+  if (!match) return null;
+  // User-owned behavioral metadata blocks every automatic write, including
+  // missing-field insertion. Do not combine a new stock shell with that prompt.
+  if (/(?:^|[{},])[ \t]*['"]?[\w.-]*(?:prompt|instruction)[\w.-]*['"]?[ \t]*:/im.test(match[2])) return null;
+  const lines = match[2].split(/\r?\n/);
+  const fields = new Map();
+  let current = null;
+  const singleLineScalar = raw => {
+    const value = raw.trim();
+    if (value.startsWith("'")) return /^'(?:[^']|'')*'$/.test(value);
+    if (value.startsWith('"')) return /^"(?:[^"\\]|\\.)*"$/.test(value);
+    // Flow collections, tags, anchors, blocks and inline comments are outside
+    // this narrow migration grammar. Do not guess at their parsed meaning.
+    return !/^[\[\]{}|>!&*#]/.test(value)
+      && !/(?:^[-?:](?:\s|$)|:(?:\s|$)|[ \t]#)/.test(value);
+  };
+  for (let index = 0; index < lines.length; index += 1) {
+    const line = lines[index];
+    if (!line.trim() || /^\s*#/.test(line)) {
+      if (current?.list) current.canonicalList = false;
+      continue;
+    }
+    const keyValue = line.match(/^([\w-]+):[ \t]*(.*)$/);
+    if (keyValue) {
+      if (fields.has(keyValue[1])) return null;
+      current = { start: index, end: index + 1, list: !keyValue[2].trim(), canonicalList: true };
+      if (!current.list && !singleLineScalar(keyValue[2])) return null;
+      fields.set(keyValue[1], current);
+      continue;
+    }
+    const bullet = line.match(/^[ \t]+-[ \t]+(.+)$/);
+    if (!bullet || !current?.list || !singleLineScalar(bullet[1])) return null;
+    current.end = index + 1;
+  }
+  // These stock metadata fields are scalars. A list under `role:` must never
+  // be split by the legacy insertion path that adds a line after that key.
+  for (const key of ['id', 'name', 'nameZh', 'role', 'roleZh', 'description', 'descriptionZh', 'area', 'modelHint']) {
+    if (fields.get(key)?.list) return null;
+  }
+  return { match, lines, fields };
+}
+
 export function backfillLocalizedPersonaBody(source, vp) {
+  const frontmatter = simpleFrontmatterFields(source);
+  if (!frontmatter) return null;
   const body = roleBodyOf(source).trim();
   const nextBody = typeof vp.persona === 'string' ? vp.persona.trim() : '';
   if (!body || !nextBody || body === nextBody) return null;
@@ -259,35 +311,55 @@ export function backfillLocalizedPersonaBody(source, vp) {
   const acceptedOldBodies = [
     vp.legacyPersonaEn,
     vp.legacyPersona,
-    vp.personaEn,
-    ...(Array.isArray(vp.legacyPersonas) ? vp.legacyPersonas : []),
+    // Scenario assistants declare a complete history. Their new English-only
+    // text is not a shipped historical body and may be a deliberate user edit.
+    ...(Array.isArray(vp.legacyPersonas) ? vp.legacyPersonas : [vp.personaEn]),
   ]
     .filter(value => typeof value === 'string' && value.trim())
     .map(value => value.trim());
 
   if (!acceptedOldBodies.includes(body)) return null;
-  return replaceRoleBody(upgradeStockMetadata(source, vp), nextBody);
+  return replaceRoleBody(upgradeStockMetadata(source, vp, frontmatter), nextBody);
 }
 
-/** Upgrade only known stock values alongside an exact historical body match. */
-function upgradeStockMetadata(source, vp) {
+/** Upgrade only complete, unambiguous fields equal to explicit stock history. */
+function upgradeStockMetadata(source, vp, { match, lines, fields }) {
   if (!vp.legacyMetadata) return source;
+  const history = Array.isArray(vp.legacyMetadata) ? vp.legacyMetadata : [vp.legacyMetadata];
   const { meta } = parseRoleMd(source);
   const values = {
+    name: vp.displayName,
     nameZh: vp.displayNameZh,
     role: vp.role,
     roleZh: vp.roleZh,
     description: vp.description,
     descriptionZh: vp.descriptionZh,
+    aliases: vp.aliases,
   };
-  return source.replace(/^(---\r?\n)([\s\S]*?)(\r?\n---)/, (_match, open, yaml, close) => {
-    for (const [key, value] of Object.entries(values)) {
-      if (meta[key] !== vp.legacyMetadata[key] || !value) continue;
-      const quoted = `'${value.replace(/'/g, "''")}'`;
-      yaml = yaml.replace(new RegExp(`^${key}:[^\\r\\n]*`, 'm'), () => `${key}: ${quoted}`);
-    }
-    return open + yaml + close;
-  });
+  const quote = value => `'${value.replace(/'/g, "''")}'`;
+  const edits = [];
+  for (const [key, value] of Object.entries(values)) {
+    const field = fields.get(key);
+    if (!field || !value || (field.list && !field.canonicalList)) continue;
+    const known = history.some(old => Object.prototype.hasOwnProperty.call(old, key)
+      && (Array.isArray(meta[key])
+        ? Array.isArray(old[key]) && JSON.stringify(meta[key]) === JSON.stringify(old[key])
+        : meta[key] === old[key]));
+    if (!known) continue;
+    edits.push({ ...field, replacement: Array.isArray(value)
+      ? [`${key}:`, ...value.map(alias => `  - ${quote(alias)}`)]
+      : [`${key}: ${quote(value)}`] });
+  }
+  // Replace only proven field spans, not the whole YAML: unknown fields and
+  // even mixed line endings outside those spans stay byte-identical.
+  const starts = [0, ...[...match[2].matchAll(/\n/g)].map(line => line.index + 1)];
+  const nl = match[1].endsWith('\r\n') ? '\r\n' : '\n';
+  let yaml = match[2];
+  for (const edit of edits.sort((a, b) => b.start - a.start)) {
+    const end = starts[edit.end - 1] + lines[edit.end - 1].length;
+    yaml = yaml.slice(0, starts[edit.start]) + edit.replacement.join(nl) + yaml.slice(end);
+  }
+  return match[1] + yaml + match[3] + source.slice(match[0].length);
 }
 
 /**

package/yeaft/web-bridge.js

@@ -77,6 +77,7 @@ import { hydrateYeaftStatusFromSession } from './status-cache.js';
 import { handleVpSubscribe } from './vp/vp-bridge.js';
 import { createVp, updateVp, deleteVp, readVp, VpCrudError } from './vp/vp-crud.js';
 import { scanVpLibrary } from './vp/vp-store.js';
+import { validateVpId, isReservedVpId } from './sessions/ids.js';
 import { createRouter } from './routing/router.js';
 import {
   SessionCrudError,
@@ -3878,6 +3879,15 @@ export function handleYeaftCreateSession(msg) {
   const envelope = payload.task !== undefined ? { requestId, requestClientId: msg?._requestClientId } : undefined;
   try {
     const yeaftDir = ctx.CONFIG?.yeaftDir;
+    // Validate new user-selected members at the request boundary. Existing
+    // Sessions/forks retain their historical roster even if metadata is absent.
+    for (const vpId of Array.isArray(payload.roster) ? payload.roster : []) {
+      const valid = validateVpId(vpId);
+      if (!valid.ok || isReservedVpId(vpId)) {
+        throw new SessionCrudError(isReservedVpId(vpId) ? 'reserved' : valid.reason, null, `Invalid VP: ${vpId}`);
+      }
+      if (!readConfiguredVp(vpId)) throw new SessionCrudError('vp_not_found', null, `VP not found: ${vpId}`);
+    }
     const group = createSessionFromSpec(yeaftDir, payload, configuredVpPaths());
     recordAgentSessionCreated();
     group.config = loadSessionConfig(yeaftDir, group.id);