dsh-advisor-group 0.0.1 → 0.1.1

package/lib/index.mjs

@@ -83,7 +83,23 @@ const DiscussionConfig = Schema.object({
 const TriggerConfig = Schema.object({
 	requireClassifier: Schema.boolean().default(true).description("Run the pre-classifier before starting a consultation."),
 	allowWebFallback: Schema.boolean().default(true).description("When classifier says web search is better, return that hint to the main model."),
-	confidenceThreshold: Schema.number().min(0).max(1).default(.6).description("Below this confidence score, ask_advisors should escalate even without domain keywords.")
+	confidenceThreshold: Schema.number().min(0).max(1).default(.6).description("Below this confidence score, ask_advisors should escalate even without domain keywords."),
+	jev: Schema.object({
+		enabled: Schema.boolean().default(false).description("Use Jev for semantic pre-classification when configured."),
+		provider: Schema.union([Schema.const("typesafe"), Schema.const("openrouter")]).default("typesafe"),
+		model: Schema.string().default("jev-latest"),
+		baseURL: Schema.string().description("Optional custom Jev API endpoint."),
+		apiKey: Schema.string().role("secret").description("Jev API key; prefer apiKeyEnv when possible."),
+		apiKeyEnv: Schema.string().description("Optional environment variable containing the Jev API key."),
+		timeoutMs: Schema.number().min(1e3).max(6e4).default(1e4),
+		confidenceThreshold: Schema.number().min(0).max(1).default(.6),
+		useEnglishState: Schema.boolean().default(false).description("Judge with the caller-provided English gist (questionEn) as the Jev state instead of the Chinese question; display and session records stay Chinese."),
+		highRiskThreshold: Schema.number().min(0).max(1).description("Threshold for the high_risk question; unset means follow confidenceThreshold."),
+		apiKeyMeta: Schema.object({
+			configured: Schema.boolean(),
+			last4: Schema.string()
+		}).description("Server-only API key presence metadata.")
+	}).default({})
 });
 const UiConfig = Schema.object({
 	theme: Schema.union([
@@ -99,13 +115,19 @@ const QuotaConfig = Schema.object({
 	maxPerDay: Schema.natural().min(1).max(1e5).default(50).description("Max new consultations per UTC day (1–100000); ignored when enabled is false.")
 });
 const Config = Schema.object({
-	enabled: Schema.boolean().default(true),
-	discussion: DiscussionConfig,
-	trigger: TriggerConfig,
-	ui: UiConfig,
-	quota: QuotaConfig,
-	advisors: Schema.array(AdvisorConfig).default([])
+	enabled: Schema.boolean().default(true).volatile(),
+	discussion: DiscussionConfig.volatile(),
+	trigger: TriggerConfig.volatile(),
+	ui: UiConfig.volatile(),
+	quota: QuotaConfig.volatile(),
+	advisors: Schema.array(AdvisorConfig).default([]).volatile()
 });
+function unwrapVolatileConfig(value) {
+	if (value && typeof value === "object" && "get" in value && typeof value.get === "function") return unwrapVolatileConfig(value.get());
+	if (Array.isArray(value)) return value.map((item) => unwrapVolatileConfig(item));
+	if (value && typeof value === "object") return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, unwrapVolatileConfig(item)]));
+	return value;
+}
 //#endregion
 //#region src/providers/advisor-prompt.ts
 /**
@@ -206,10 +228,7 @@ async function callViaCtxLlm(ctx, advisor, transcript, signal, onDelta, timeoutM
 			type: "text",
 			text: userText
 		}],
-		source: {
-			kind: "plugin",
-			plugin: "dsh-advisor-group"
-		}
+		source: { kind: "user" }
 	})];
 	const pair = timeoutSignalPair(timeoutMs ?? 12e4, signal);
 	const reasoningEffort = advisor.thinking === "disabled" ? "off" : advisor.reasoningEffort;
@@ -982,7 +1001,7 @@ async function streamOpenAICompatible(baseURL, advisor, apiKey, transcriptText,
 		} catch (error) {
 			const errName = error?.name ?? "UnknownError";
 			const errMessage = error instanceof Error ? error.message : String(error);
-			console.warn(`[dsh-advisor-group] direct-http stream read error: name=${errName} msg=${errMessage} isTimeout=${pair.isTimeout()} signalAborted=${signal?.aborted ?? false} collectedChars=${content.length + thinking.length}`);
+			console.warn(`[dsh-advisor-group] direct-http stream read error: advisor=${advisor.name} base=${baseURL} name=${errName} msg=${errMessage} isTimeout=${pair.isTimeout()} signalAborted=${signal?.aborted ?? false} collectedChars=${content.length + thinking.length}`);
 			if (pair.isTimeout()) return {
 				content,
 				thinking,
@@ -1112,7 +1131,7 @@ async function streamAnthropic(baseURL, advisor, apiKey, transcriptText, authMod
 		} catch (error) {
 			const errName = error?.name ?? "UnknownError";
 			const errMessage = error instanceof Error ? error.message : String(error);
-			console.warn(`[dsh-advisor-group] anthropic stream read error: name=${errName} msg=${errMessage} isTimeout=${pair.isTimeout()} signalAborted=${signal?.aborted ?? false} collectedChars=${content.length + thinking.length}`);
+			console.warn(`[dsh-advisor-group] anthropic stream read error: advisor=${advisor.name} base=${baseURL} name=${errName} msg=${errMessage} isTimeout=${pair.isTimeout()} signalAborted=${signal?.aborted ?? false} collectedChars=${content.length + thinking.length}`);
 			if (pair.isTimeout()) return {
 				content,
 				thinking,
@@ -1249,7 +1268,7 @@ function transcriptOf(session) {
 		return `[${message.role === "main" ? "主模型" : message.advisorName ?? message.advisorId ?? "顾问"}]\n${message.content}`;
 	}).join("\n\n").slice(-24e3);
 }
-async function generateWith(ctx, source, system, prompt, signal, timeoutMs = 6e5) {
+async function generateWith(ctx, source, sessionId, system, prompt, signal, timeoutMs = 6e5) {
 	try {
 		const options = {
 			provider: source.provider,
@@ -1260,10 +1279,7 @@ async function generateWith(ctx, source, system, prompt, signal, timeoutMs = 6e5
 					type: "text",
 					text: prompt
 				}],
-				source: {
-					kind: "plugin",
-					plugin: "dsh-advisor-group"
-				}
+				source: { kind: "user" }
 			})],
 			temperature: .7,
 			maxTokens: 2048,
@@ -1281,23 +1297,38 @@ async function generateWith(ctx, source, system, prompt, signal, timeoutMs = 6e5
 			} else reasoningDeltas += 1;
 		}
 		const trimmed = text.trim();
-		if (!trimmed) console.warn(`[dsh-advisor-group] 驱动模型空响应（${source.provider}/${source.model}）：chunks=${chunks} textDeltas=${textDeltas} reasoningDeltas=${reasoningDeltas}；建议配置 discussion.driverModel 或提高 maxTokens`);
+		if (!trimmed) console.warn(`[dsh-advisor-group] 驱动模型空响应（${source.provider}/${source.model}）：`, sessionId, `chunks=${chunks} textDeltas=${textDeltas} reasoningDeltas=${reasoningDeltas}；建议配置 discussion.driverModel 或提高 maxTokens`);
 		return trimmed || void 0;
 	} catch (error) {
 		if (signal?.aborted) throw error;
-		console.warn(`[dsh-advisor-group] 驱动模型生成失败（${source.provider}/${source.model}）：`, error instanceof Error ? error.message : String(error));
+		console.warn(`[dsh-advisor-group] 驱动模型生成失败（${source.provider}/${source.model}）：`, sessionId, error instanceof Error ? error.message : String(error));
 		return;
 	}
 }
 /** One deepening question for the next round (never throws; returns fallback text). */
 async function generateDeepenQuestion(ctx, session, source, signal, timeoutMs) {
 	if (!source) return FALLBACK_DEEPEN_QUESTION;
-	return await generateWith(ctx, source, DRIVER_SYSTEM_PROMPT, `以下是一轮顾问群的讨论记录：\n\n${transcriptOf(session)}\n\n请给出下一步的深入追问。`, signal, timeoutMs) || "请基于以上全部讨论，针对仍然存在的分歧、未验证的假设与主要风险，提出一个有深度的后续问题。";
+	return await generateWith(ctx, source, session.id, DRIVER_SYSTEM_PROMPT, `以下是一轮顾问群的讨论记录：\n\n${transcriptOf(session)}\n\n请给出下一步的深入追问。`, signal, timeoutMs) || "请基于以上全部讨论，针对仍然存在的分歧、未验证的假设与主要风险，提出一个有深度的后续问题。";
 }
 /** Final synthesis after all rounds (never throws; returns fallback text). */
 async function generateConclusion(ctx, session, source, signal, timeoutMs) {
 	if (!source) return FALLBACK_CONCLUSION;
-	return await generateWith(ctx, source, CONCLUSION_SYSTEM_PROMPT, `以下是顾问群全部 ${session.messages.filter((m) => m.role === "advisor").length} 条顾问回答的讨论记录：\n\n${transcriptOf(session)}\n\n请给出综合结论。`, signal, timeoutMs) || "（⚠ 驱动模型未能生成综合结论：请主模型以上述顾问讨论为基础，自行总结共识、分歧与最可靠的行动建议。）";
+	return await generateWith(ctx, source, session.id, CONCLUSION_SYSTEM_PROMPT, `以下是顾问群全部 ${session.messages.filter((m) => m.role === "advisor").length} 条顾问回答的讨论记录：\n\n${transcriptOf(session)}\n\n请给出综合结论。`, signal, timeoutMs) || "（⚠ 驱动模型未能生成综合结论：请主模型以上述顾问讨论为基础，自行总结共识、分歧与最可靠的行动建议。）";
+}
+//#endregion
+//#region src/risk-notes.ts
+const TRUNCATION_NOTE = "有顾问输出在流式过程中被截断（超时或网络中断），其正文可能不完整，且该顾问本轮可能只提供了部分意见。";
+const CANCEL_NOTE = "本次顾问群讨论已被用户或主模型取消，结论可能不完整。";
+/**
+* 汇总风险提示（两条规则：截断 / 取消）。
+* 判定只看消息上的截断标志与 cancelled 标志，**不读正文**——没有基于文本的猜测，
+* 因此不会误报。content 字段保留在入参类型里只为兼容既有调用方（本函数不再读它）。
+*/
+function buildRiskNotes(messages, cancelled) {
+	const notes = [];
+	if (messages.some((message) => message.truncated !== void 0)) notes.push(TRUNCATION_NOTE);
+	if (cancelled) notes.push(CANCEL_NOTE);
+	return notes;
 }
 //#endregion
 //#region src/session-log.ts
@@ -1625,7 +1656,8 @@ async function runAdvisorToolLoop(tools, streamOnce, executeTool, onToolStep) {
 			if (!READONLY_TOOL_NAMES.has(call.name)) console.warn(`[dsh-advisor-group] 顾问调用非只读工具（${call.name}）：`, argsPreview);
 			const { outcome, reused } = await executeDeduped(call);
 			if (outcome.trim()) {
-				const preview = outcome.replace(/\n+/g, " ").slice(0, 240).trim();
+				const flat = outcome.replace(/\n+/g, " ").trim();
+				const preview = flat.length > 240 ? `${flat.slice(0, 240)}…` : flat;
 				onToolStep({
 					kind: "result",
 					name: call.name,
@@ -1649,7 +1681,8 @@ async function runAdvisorToolLoop(tools, streamOnce, executeTool, onToolStep) {
 			if (!READONLY_TOOL_NAMES.has(call.name)) console.warn(`[dsh-advisor-group] 顾问调用非只读工具（${call.name}）：`, argsPreview);
 			const { outcome, reused } = await executeDeduped(call);
 			if (outcome.trim()) {
-				const preview = outcome.replace(/\n+/g, " ").slice(0, 240).trim();
+				const flat = outcome.replace(/\n+/g, " ").trim();
+				const preview = flat.length > 240 ? `${flat.slice(0, 240)}…` : flat;
 				onToolStep({
 					kind: "result",
 					name: call.name,
@@ -1798,12 +1831,14 @@ var AdvisorGroupService = class {
 				cwd: raw.cwd,
 				dshSessionId: raw.dshSessionId,
 				driverSource: raw.driverSource,
-				stopReason: raw.stopReason,
+				stopReason: raw.stopReason ?? "abort-error",
 				createdAt: raw.createdAt,
 				updatedAt: raw.updatedAt
 			};
 			this.sessions.set(session.id, session);
-		} catch {}
+		} catch (error) {
+			console.warn("[dsh-advisor-group] 会话快照读取失败，已跳过：", file, error instanceof Error ? error.message : String(error));
+		}
 	}
 	/** Serialization-safe snapshot: advisor identity only, NEVER credentials. */
 	snapshotPayload(session) {
@@ -1850,9 +1885,18 @@ var AdvisorGroupService = class {
 			await promises.writeFile(tmp, payload, "utf8");
 			await promises.rename(tmp, target);
 		}).catch((error) => {
-			console.warn("[dsh-advisor-group] 咨询快照持久化失败：", error instanceof Error ? error.message : String(error));
+			console.warn("[dsh-advisor-group] 咨询快照持久化失败：", session.id, error instanceof Error ? error.message : String(error));
 		});
 	}
+	/**
+	* Card-facing advisor failure text: credentials redacted, collapsed to one
+	* line, length-capped. The full raw error is logged server-side instead.
+	*/
+	summarizeAdvisorError(raw) {
+		const singleLine = raw.replace(/\b(api[_-]?key["']?\s*[:=]\s*["']?)[^\s"',}&]+/gi, "$1[已隐藏]").replace(/([?&]key=)[^\s&"']+/gi, "$1[已隐藏]").replace(/\b(Bearer|Basic)\s+[A-Za-z0-9._~+/=-]+/gi, "$1 [已隐藏]").replace(/\bsk-[A-Za-z0-9_-]{8,}/g, "[已隐藏]").replace(/\s+/g, " ").trim();
+		if (singleLine.length <= 300) return singleLine;
+		return `${singleLine.slice(0, 300)}…（完整错误已记录到服务端日志）`;
+	}
 	/** Wait for queued durable writes before a host or test tears down storage. */
 	async flushPersistence() {
 		await Promise.all([this.dailyWriteChain, this.sessionWriteChain]);
@@ -1950,7 +1994,7 @@ var AdvisorGroupService = class {
 			store.enter(prepared);
 			return prepared;
 		} catch (error) {
-			console.warn("[dsh-advisor-group] 重建会话句柄失败（降级为 detached）：", error instanceof Error ? error.message : String(error));
+			console.warn("[dsh-advisor-group] 重建会话句柄失败（降级为 detached）：", session.id, error instanceof Error ? error.message : String(error));
 			const again = store.get(resumeId);
 			if (again) return again;
 			return this.buildDetachedSession(session, resumeId);
@@ -1996,7 +2040,9 @@ var AdvisorGroupService = class {
 		this.setEnabled(enabled);
 		if (this.persistEnabledCallback) try {
 			await this.persistEnabledCallback(enabled);
-		} catch {}
+		} catch (error) {
+			console.warn("[dsh-advisor-group] 启用开关保存失败（内存态未回滚）：", error instanceof Error ? error.message : String(error));
+		}
 		return this.enabled;
 	}
 	/**
@@ -2214,6 +2260,10 @@ var AdvisorGroupService = class {
 		stop.abort();
 		return true;
 	}
+	/** True while a pipeline run (auto-deepen or a follow-up round) is in flight. */
+	isSessionRunning(sessionId) {
+		return this.activeAborts.has(sessionId);
+	}
 	/**
 	* Resume a stopped/interrupted consultation from its interruption point.
 	* Works for a user stop (live session) and after a dsh restart (snapshot
@@ -2252,7 +2302,9 @@ var AdvisorGroupService = class {
 		this.persistSession(session);
 		if (dshSession) appendAdvisorResume(dshSession, session.id);
 		this.ctx.emit("advisor-group/resume", { sessionId: session.id });
-		this.runAutoPipeline(session, void 0, dshSession, resumeAgent).catch(() => {}).finally(() => this.releaseResumeLock(session.id));
+		this.runAutoPipeline(session, void 0, dshSession, resumeAgent).catch((error) => {
+			console.error("[dsh-advisor-group] 续跑流水线失败：", session.id, error instanceof Error ? error.message : String(error));
+		}).finally(() => this.releaseResumeLock(session.id));
 		return { ok: true };
 	}
 	/** Atomic cross-instance lock (mkdir-based, with stale takeover). */
@@ -2327,18 +2379,37 @@ var AdvisorGroupService = class {
 	* advisor models talking to themselves back-to-back.
 	*/
 	async runOneRoundAndSummarize(session, signal, sessionLog, agent) {
-		await this.runOneRound(session, signal, sessionLog, agent);
-		session.status = "completed";
-		session.updatedAt = Date.now();
-		const summary = this.buildSummary(session, false);
-		if (sessionLog) appendAdvisorEnd(sessionLog, session, summary);
-		this.persistSession(session);
-		await this.flushLog(sessionLog);
-		this.ctx.emit("advisor-group/session-end", {
-			sessionId: session.id,
-			summary
-		});
-		return summary;
+		const stop = new AbortController();
+		this.activeAborts.set(session.id, stop);
+		const combined = signal ? AbortSignal.any([signal, stop.signal]) : stop.signal;
+		try {
+			await this.runOneRound(session, combined, sessionLog, agent);
+			session.status = "completed";
+			session.updatedAt = Date.now();
+			const summary = this.buildSummary(session, false);
+			if (sessionLog) appendAdvisorEnd(sessionLog, session, summary);
+			this.persistSession(session);
+			await this.flushLog(sessionLog);
+			this.ctx.emit("advisor-group/session-end", {
+				sessionId: session.id,
+				summary
+			});
+			return summary;
+		} catch (error) {
+			if (isAbortError(error, combined) || stop.signal.aborted) {
+				if (stop.signal.aborted) session.stopReason = "user-stop";
+				else if (signal?.aborted) session.stopReason = "exec-cancel";
+				else session.stopReason = "abort-error";
+				session.status = "cancelled";
+				this.persistSession(session);
+				const summary = await this.generateFinalSummary(session, void 0, sessionLog, true);
+				await this.flushLog(sessionLog);
+				return summary;
+			}
+			throw error;
+		} finally {
+			this.activeAborts.delete(session.id);
+		}
 	}
 	getRoundCount(session) {
 		const advisorCount = Math.max(1, session.advisors.length);
@@ -2512,7 +2583,9 @@ var AdvisorGroupService = class {
 			if (actionDescriptions.length > 0) message.actionDescriptions = actionDescriptions;
 		} catch (error) {
 			if (isAbortError(error, signal)) throw error;
-			message.content = `（顾问调用失败：${error instanceof Error ? error.message : String(error)}）`;
+			const rawMessage = error instanceof Error ? error.message : String(error);
+			console.warn("[dsh-advisor-group] 顾问调用失败：", session.id, advisor.name, rawMessage);
+			message.content = `（顾问调用失败：${this.summarizeAdvisorError(rawMessage)}）`;
 		}
 		publish(session.id, {
 			advisorId: advisor.id,
@@ -2547,9 +2620,7 @@ var AdvisorGroupService = class {
 				corePoints: last ? this.extractCorePoints(last.content) : []
 			};
 		});
-		const riskNotes = advisorMessages.some((message) => /风险|注意|不确定|risk|uncertain|confidence/i.test(message.content)) ? ["部分顾问提到了风险、不确定性或置信度较低，请主模型谨慎采用。"] : [];
-		if (advisorMessages.some((message) => message.truncated !== void 0)) riskNotes.push("有顾问输出在流式过程中被截断（超时或网络中断），其正文可能不完整，且该顾问本轮可能只提供了部分意见。");
-		if (cancelled) riskNotes.push("本次顾问群讨论已被用户或主模型取消，结论可能不完整。");
+		const riskNotes = buildRiskNotes(advisorMessages, cancelled);
 		return {
 			sessionId: session.id,
 			question: session.question,
@@ -2904,6 +2975,167 @@ function matchAdvisors(text, advisors) {
 	return [...matches];
 }
 //#endregion
+//#region src/providers/jev.ts
+const DEFAULT_ENDPOINTS = {
+	typesafe: "https://api.typesafe.ai/v1/systemone",
+	openrouter: "https://openrouter.ai/api/alpha/decisions"
+};
+function numberValue(value) {
+	return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function answerIsTrue(answer, threshold) {
+	const noul = numberValue(answer?.noul);
+	if (noul !== void 0) return noul >= threshold;
+	const choice = typeof answer?.choice === "string" ? answer.choice.toLowerCase() : "";
+	if (choice === "yes" || choice === "true") return true;
+	if (choice === "no" || choice === "false") return false;
+	return false;
+}
+/**
+* An answer is usable only when it carries a finite noul or an explicit
+* yes/no choice. Anything else (missing key, string noul, "maybe") would be
+* read as `false` by answerIsTrue — which for needs_advisor/high_risk means a
+* silent rejection with no fallback to the local classifier.
+*/
+function answerUsable(answer) {
+	if (numberValue(answer?.noul) !== void 0) return true;
+	const choice = typeof answer?.choice === "string" ? answer.choice.toLowerCase() : "";
+	return choice === "yes" || choice === "true" || choice === "no" || choice === "false";
+}
+function parseResponse(body, config, advisors) {
+	if (!body || typeof body !== "object") throw new Error("Jev 响应不是对象");
+	const answers = body.answers;
+	if (!answers || typeof answers !== "object") throw new Error("Jev 响应缺少 answers");
+	const needsAdvisor = answers.needs_advisor;
+	const webSearch = answers.web_search;
+	const risk = answers.high_risk;
+	const domainAnswer = answers.domain;
+	if (!answerUsable(needsAdvisor)) throw new Error("Jev 响应缺少 needs_advisor 的有效判定");
+	if (!answerUsable(risk)) throw new Error("Jev 响应缺少 high_risk 的有效判定");
+	const domain = typeof domainAnswer?.choice === "string" ? domainAnswer.choice : "general";
+	const needsAdvisorNoul = numberValue(needsAdvisor?.noul);
+	const confidence = numberValue(needsAdvisor?.confidence) ?? needsAdvisorNoul;
+	const shouldEscalate = answerIsTrue(needsAdvisor, config.confidenceThreshold);
+	const suggestWebSearch = answerIsTrue(webSearch, config.confidenceThreshold);
+	const highRisk = answerIsTrue(risk, config.highRiskThreshold ?? config.confidenceThreshold);
+	const reportedModel = body.model;
+	const webSearchNoul = numberValue(webSearch?.noul);
+	const riskNoul = numberValue(risk?.noul);
+	const rawAnswers = {
+		...needsAdvisorNoul === void 0 ? {} : { needsAdvisor: needsAdvisorNoul },
+		...webSearchNoul === void 0 ? {} : { webSearch: webSearchNoul },
+		...riskNoul === void 0 ? {} : { highRisk: riskNoul },
+		domain
+	};
+	return {
+		shouldEscalate: shouldEscalate || highRisk,
+		suggestWebSearch: !shouldEscalate && !highRisk && suggestWebSearch,
+		suggestedAdvisors: matchAdvisors(`${domain}\n${domainAnswer?.choice ?? ""}`, advisors),
+		reason: highRisk ? "Jev 判断该问题包含高风险因素，建议启动顾问群。" : shouldEscalate ? `Jev 判断该问题需要顾问群（${confidence === void 0 ? "无置信度" : `置信度 ${confidence}`}）。` : suggestWebSearch ? "Jev 判断该问题更适合联网搜索。" : "Jev 判断该问题不需要启动顾问群。",
+		...confidence === void 0 ? {} : { confidence },
+		rawAnswers,
+		...typeof reportedModel === "string" ? { model: reportedModel } : {},
+		provider: config.provider
+	};
+}
+async function classifyWithJev(question, context, advisors, config, signal, questionEn) {
+	const endpoint = config.baseURL?.trim() || DEFAULT_ENDPOINTS[config.provider];
+	const storedKey = typeof config.apiKey === "string" ? config.apiKey : config.apiKey && typeof config.apiKey === "object" && "value" in config.apiKey ? String(config.apiKey.value ?? "") : void 0;
+	const apiKey = (config.apiKeyEnv ? process.env[config.apiKeyEnv] : void 0) || storedKey;
+	if (!apiKey) throw new Error("Jev 未配置 API key");
+	const controller = new AbortController();
+	const timeout = setTimeout(() => controller.abort(/* @__PURE__ */ new Error(`Jev 超时（${config.timeoutMs}ms）`)), config.timeoutMs);
+	const abort = () => controller.abort();
+	signal?.addEventListener("abort", abort, { once: true });
+	try {
+		const response = await fetch(endpoint, {
+			method: "POST",
+			headers: {
+				authorization: `Bearer ${apiKey}`,
+				"content-type": "application/json"
+			},
+			body: JSON.stringify({
+				state: config.useEnglishState && questionEn?.trim() ? questionEn.trim() : `${question}\n\n背景：${context || "无"}`,
+				model: config.model || "jev-latest",
+				questions: {
+					needs_advisor: {
+						type: "noul",
+						instructions: "Does answering this question require expert-level knowledge?",
+						criteria: {
+							true: {
+								what: "The subject matter is professional, specialist, or long-tail knowledge a competent generalist would not reliably get right, or the field itself has no single settled answer without specialist judgment.",
+								examples: [
+									"professional-domain judgment such as accounting treatment, engineering trade-offs, or contract drafting",
+									"rare or long-tail situations with little public consensus",
+									"topics where reasonable experts disagree and picking correctly matters"
+								]
+							},
+							false: {
+								what: "A competent generalist can answer from common knowledge, widely documented facts, or ordinary reasoning without specialist judgment.",
+								examples: ["everyday facts, definitions, or casual opinions", "well-documented mainstream topics with an agreed answer"]
+							}
+						}
+					},
+					web_search: {
+						type: "noul",
+						instructions: "Does answering this question primarily require current, real-time, or externally verifiable information?",
+						criteria: {
+							true: {
+								what: "The correct answer depends on facts that change over time or live outside the provided state, so it must be looked up rather than reasoned out.",
+								examples: [
+									"today’s weather, prices, exchange rates, or quotes",
+									"recent releases, news, or version-specific changelogs",
+									"local or niche facts with no authoritative source in memory"
+								]
+							},
+							false: {
+								what: "The answer follows from stable knowledge or reasoning already available in the state.",
+								examples: ["concepts, definitions, and established best practices", "questions fully answerable from the provided background"]
+							}
+						}
+					},
+					high_risk: {
+						type: "noul",
+						instructions: "Does this question involve medical, legal, financial, safety, compliance, or other high-risk advice?",
+						criteria: {
+							true: {
+								what: "A wrong or careless answer could materially harm the asker or a third party in health, money, safety, or legal standing.",
+								examples: [
+									"medical symptoms, medication, diagnosis, or treatment decisions",
+									"legal rights, contracts, litigation, or regulatory compliance",
+									"investment, insurance, tax, or other money decisions with real downside",
+									"physical safety, hazardous actions, or regulated activities"
+								]
+							},
+							false: {
+								what: "Being wrong carries no material harm to health, money, safety, or legal standing.",
+								examples: ["general knowledge, opinions, or entertainment questions", "technical details whose worst case is wasted time"]
+							}
+						}
+					},
+					domain: {
+						type: "choice",
+						instructions: "Which domain best describes this question?",
+						criteria: {
+							legal: "law, contracts, litigation, compliance, or taxation",
+							medical: "medicine, symptoms, medication, diagnosis, or treatment",
+							finance: "investment, insurance, accounting, or financial risk",
+							code: "software, programming, architecture, debugging, or APIs",
+							general: "none of the listed domains"
+						}
+					}
+				}
+			}),
+			signal: controller.signal
+		});
+		if (!response.ok) throw new Error(`Jev HTTP ${response.status}`);
+		return parseResponse(await response.json(), config, advisors);
+	} finally {
+		clearTimeout(timeout);
+		signal?.removeEventListener("abort", abort);
+	}
+}
+//#endregion
 //#region src/tools.ts
 function registerAdvisorTools(service) {
 	return [defineTool({
@@ -2934,6 +3166,10 @@ function registerAdvisorTools(service) {
 			confidence: {
 				type: "number",
 				description: "Optional self-assessed confidence 0-1. Values below the configured threshold escalate even without domain keywords."
+			},
+			questionEn: {
+				type: "string",
+				description: "Optional self-contained English gist of the question plus key background. Used as the Jev pre-classification input only when the「Jev 英文判定」setting is enabled; the displayed question, session records, and duplicate detection always keep using question/context in Chinese. Omit it otherwise."
 			}
 		},
 		output: {
@@ -2989,7 +3225,18 @@ function registerAdvisorTools(service) {
 			const questionText = typeof args.question === "string" ? args.question : "";
 			const contextText = typeof args.context === "string" ? args.context : "";
 			const mentionedAdvisorGroup = /@顾问群|@顧問群/.test(`${questionText}\n${contextText}`);
-			const forcedByRepeat = (service.getRepeatPressure(sessionLog?.id)?.count ?? 0) >= 3;
+			const repeatCount = service.getRepeatPressure(sessionLog?.id)?.count ?? 0;
+			const forcedByRepeat = repeatCount >= 3;
+			let shadow;
+			let shadowWritten = false;
+			const recordShadow = (launched) => {
+				if (!shadow || shadowWritten) return;
+				shadowWritten = true;
+				appendShadowSample({
+					...shadow,
+					launched
+				});
+			};
 			if (args.sessionId) {
 				if (!args.followUp) return {
 					sessionId: args.sessionId,
@@ -3004,6 +3251,12 @@ function registerAdvisorTools(service) {
 					skipped: true,
 					reason: "session-not-found"
 				};
+				if (service.isSessionRunning(session.id)) return {
+					sessionId: session.id,
+					advice: "该顾问群会话正在运行中，请等本轮结束后再追问。",
+					skipped: true,
+					reason: "session-running"
+				};
 				if (service.hasReachedMaxRounds(session)) return {
 					sessionId: session.id,
 					advice: "本轮已是顾问群讨论的最后一轮，请综合现有顾问意见给出最终答复，不要再追问。",
@@ -3011,11 +3264,11 @@ function registerAdvisorTools(service) {
 					reason: "max-rounds-reached"
 				};
 				service.appendFollowUp(session.id, args.followUp, sessionLog);
-				await service.runOneRoundAndSummarize(session, exec.signal, sessionLog, exec.agent);
+				const summary = await service.runOneRoundAndSummarize(session, exec.signal, sessionLog, exec.agent);
 				const canContinue = !service.hasReachedMaxRounds(session);
 				return {
 					sessionId: session.id,
-					advice: formatConversation(session) + (canContinue ? "\n\n（如需继续，可再次传入 sessionId 和 followUp 追问。）" : "\n\n（讨论轮数已达上限，请综合顾问意见给出最终答复。）"),
+					advice: formatConversation(session) + formatRiskNotes(summary) + (canContinue ? "\n\n（如需继续，可再次传入 sessionId 和 followUp 追问。）" : "\n\n（讨论轮数已达上限，请综合顾问意见给出最终答复。）"),
 					skipped: false
 				};
 			}
@@ -3026,17 +3279,41 @@ function registerAdvisorTools(service) {
 				reason: "missing-question"
 			};
 			if (cfg.trigger.requireClassifier && !mentionedAdvisorGroup && !forcedByRepeat) {
-				const classification = classifyRequest(args.question, args.context, cfg.advisors, args.confidence, cfg.trigger.confidenceThreshold);
-				appendShadowSample({
+				let classification;
+				let jevResult;
+				let jevError;
+				let jevLatencyMs;
+				const jev = cfg.trigger.jev;
+				if (jev?.enabled) {
+					const jevStartedAt = Date.now();
+					try {
+						jevResult = await classifyWithJev(args.question, args.context, cfg.advisors, jev, exec.signal, typeof args.questionEn === "string" ? args.questionEn : void 0);
+						classification = jevResult;
+					} catch (error) {
+						if (exec.signal.aborted) throw error;
+						jevError = error instanceof Error ? error.message : String(error);
+						console.warn("[dsh-advisor-group] Jev 分类失败，回退到本地分类器：", sessionLog?.id ?? "no-session", jevError);
+					} finally {
+						jevLatencyMs = Date.now() - jevStartedAt;
+					}
+				}
+				classification ??= classifyRequest(args.question, args.context, cfg.advisors, args.confidence, cfg.trigger.confidenceThreshold);
+				shadow = {
 					ts: Date.now(),
 					question: args.question,
 					...typeof args.confidence === "number" ? { confidence: args.confidence } : {},
 					shouldEscalate: classification.shouldEscalate,
 					reason: classification.reason,
 					suggestWebSearch: classification.suggestWebSearch,
-					launched: classification.shouldEscalate
-				});
+					provider: jevResult ? "jev" : "local",
+					...jevError === void 0 ? {} : { jevError },
+					...jevLatencyMs === void 0 ? {} : { jevLatencyMs },
+					...repeatCount > 0 ? { repeatCount } : {},
+					...jevResult?.rawAnswers ? { scores: jevResult.rawAnswers } : {},
+					...jevResult?.model ? { model: jevResult.model } : {}
+				};
 				if (!classification.shouldEscalate) {
+					recordShadow(false);
 					if (classification.suggestWebSearch && cfg.trigger.allowWebFallback) return {
 						sessionId: "",
 						advice: `前置分类器建议不启动顾问群：${classification.reason}`,
@@ -3050,29 +3327,45 @@ function registerAdvisorTools(service) {
 						reason: "classifier-rejected"
 					};
 				}
-			}
+			} else if (cfg.trigger.requireClassifier) shadow = {
+				ts: Date.now(),
+				question: args.question,
+				shouldEscalate: true,
+				reason: mentionedAdvisorGroup ? "用户点名 @顾问群，跳过前置分类器。" : `同一问题已重复 ${repeatCount} 次，强制升级跳过前置分类器。`,
+				suggestWebSearch: false,
+				provider: "bypass",
+				bypass: mentionedAdvisorGroup ? "mention" : "repeat",
+				repeatCount
+			};
 			if (args.advisorIds && args.advisorIds.length > 0) {
 				const configuredIds = new Set(cfg.advisors.map((advisor) => advisor.id));
-				if (args.advisorIds.filter((id) => configuredIds.has(id)).length === 0) return {
+				if (args.advisorIds.filter((id) => configuredIds.has(id)).length === 0) {
+					recordShadow(false);
+					return {
+						sessionId: "",
+						advice: "未匹配到任何指定顾问，请检查 advisorIds 是否与设置中的顾问 id 一致。",
+						skipped: true,
+						reason: "no-matching-advisors"
+					};
+				}
+			}
+			const costGuard = service.tryStartConsultation();
+			if (!costGuard.ok) {
+				recordShadow(false);
+				return {
 					sessionId: "",
-					advice: "未匹配到任何指定顾问，请检查 advisorIds 是否与设置中的顾问 id 一致。",
+					advice: costGuard.reason,
 					skipped: true,
-					reason: "no-matching-advisors"
+					reason: "daily-limit-reached"
 				};
 			}
-			const costGuard = service.tryStartConsultation();
-			if (!costGuard.ok) return {
-				sessionId: "",
-				advice: costGuard.reason,
-				skipped: true,
-				reason: "daily-limit-reached"
-			};
 			const session = service.createSession(args.question, args.context, args.advisorIds, sessionLog ? sessionLog.header.cwd : void 0, sessionLog ? sessionLog.id : void 0);
 			if (sessionLog) appendAdvisorStart(sessionLog, session);
+			recordShadow(true);
 			const summary = await service.runAutoPipeline(session, exec.signal, sessionLog, exec.agent);
 			return {
 				sessionId: session.id,
-				advice: formatConversation(session) + (summary.conclusion ? `\n\n【综合结论】\n${summary.conclusion}` : "") + (service.hasReachedMaxRounds(session) ? "\n\n（已达设置的最大讨论轮数，请参考上述顾问意见与综合结论给出最终答复。）" : ""),
+				advice: formatConversation(session) + (summary.conclusion ? `\n\n【综合结论】\n${summary.conclusion}` : "") + formatRiskNotes(summary) + (service.hasReachedMaxRounds(session) ? "\n\n（已达设置的最大讨论轮数，请参考上述顾问意见与综合结论给出最终答复。）" : ""),
 				skipped: false
 			};
 		}
@@ -3103,6 +3396,9 @@ function registerAdvisorTools(service) {
 		}
 	})];
 }
+function formatRiskNotes(summary) {
+	return summary.riskNotes.length > 0 ? `\n\n【风险提示】\n${summary.riskNotes.join("\n")}` : "";
+}
 function formatConversation(session) {
 	const lines = [`顾问群对话（session: ${session.id}）`, ""];
 	for (const message of session.messages) {
@@ -3129,11 +3425,135 @@ const STOP_REASON_TEXT = {
 	network: "网络中断"
 };
 //#endregion
+//#region src/prompt-guard.ts
+const REPLACEMENT = "�";
+const BOM = "";
+/**
+* Unambiguity check: same line count, and every character either equals the
+* template or is a replacement char (the byte-loss corruption signature).
+*/
+function matchesTemplateWithReplacement(storedLines, templateLines) {
+	for (let i = 0; i < storedLines.length; i++) {
+		const stored = storedLines[i];
+		const template = templateLines[i];
+		if (stored === template) continue;
+		if (stored.length !== template.length) return false;
+		for (let j = 0; j < stored.length; j++) if (stored[j] !== template[j] && stored[j] !== REPLACEMENT) return false;
+	}
+	return true;
+}
+/**
+* Advisor system-prompt corruption guard (P1, 2026-09-27).
+* Fast path is free: prompts without replacement chars pass through
+* untouched (a customized prompt is legitimate and must never be overwritten).
+* A leading BOM alone is stripped (action 'stripped', no template involved).
+* Only on a replacement char do we compare against the built-in template:
+* unambiguous (line count + per-character match) -> heal to the template;
+* anything else keeps the stored value and reports it for manual handling.
+*/
+function healAdvisorSystemPrompt(stored, template = DEFAULT_ADVISOR_PROMPT) {
+	let value = stored;
+	let hadBom = false;
+	if (value.startsWith(BOM)) {
+		value = value.slice(1);
+		hadBom = true;
+	}
+	const replacements = (value.match(/\uFFFD/g) ?? []).length;
+	if (replacements === 0) {
+		if (hadBom) return {
+			action: "stripped",
+			value,
+			reason: "开头含 BOM，已剥除"
+		};
+		return {
+			action: "ok",
+			value: stored
+		};
+	}
+	const storedLines = value.split("\n");
+	const templateLines = template.split("\n");
+	if (storedLines.length !== templateLines.length) return {
+		action: "needs-manual",
+		value: stored,
+		reason: `含 ${replacements} 个替换符，行数 ${storedLines.length} 与模板 ${templateLines.length} 不一致，无法无歧义回填`
+	};
+	if (!matchesTemplateWithReplacement(storedLines, templateLines)) return {
+		action: "needs-manual",
+		value: stored,
+		reason: `含 ${replacements} 个替换符，但与模板逐位比对存在不一致（可能含自定义内容），未回填`
+	};
+	return {
+		action: "healed",
+		value: template,
+		reason: `含 ${replacements} 个替换符${hadBom ? "，另开头含 BOM" : ""}，行数与逐位比对均与模板一致，已回填内置模板`
+	};
+}
+/**
+* Load-time guard over every advisor prompt. Returns the original config
+* object untouched when nothing was healed, so callers can rely on identity
+* checks to detect "no change".
+*/
+function guardAdvisorPrompts(config) {
+	const findings = [];
+	let healedAny = false;
+	const advisors = config.advisors.map((advisor) => {
+		const result = healAdvisorSystemPrompt(advisor.systemPrompt);
+		if (result.action === "ok") return advisor;
+		findings.push({
+			advisorId: advisor.id,
+			action: result.action,
+			reason: result.reason ?? ""
+		});
+		if (result.action === "healed" || result.action === "stripped") {
+			healedAny = true;
+			return {
+				...advisor,
+				systemPrompt: result.value
+			};
+		}
+		return advisor;
+	});
+	return {
+		config: healedAny ? {
+			...config,
+			advisors
+		} : config,
+		findings
+	};
+}
+/**
+* Shared logger for both call sites: one line per finding, stating the action
+* actually taken (healed vs left untouched) plus the concrete reason.
+* Every line carries an ISO-8601 timestamp so the host console redirect
+* (which does not timestamp lines itself) stays forensically usable.
+*/
+function reportPromptGuardFindings(findings) {
+	const stamp = () => `[${(/* @__PURE__ */ new Date()).toISOString()}]`;
+	for (const finding of findings) if (finding.action === "healed") console.warn(`${stamp()} [dsh-advisor-group] 顾问提示词损坏，已按内置模板回填：${finding.advisorId}（${finding.reason}）`);
+	else if (finding.action === "stripped") console.warn(`${stamp()} [dsh-advisor-group] 顾问提示词开头含 BOM，已剥除、正文未改动：${finding.advisorId}（${finding.reason}）`);
+	else console.warn(`${stamp()} [dsh-advisor-group] 顾问提示词损坏且无法无歧义回填，未改动、需人工处理：${finding.advisorId}（${finding.reason}）`);
+}
+//#endregion
 //#region src/settings-api.ts
 function sendJson(res, status, body) {
 	res.writeHead(status, { "content-type": "application/json" });
 	res.end(JSON.stringify(body));
 }
+function normalizeJevConfig(input) {
+	const apiKey = typeof input?.apiKey === "string" ? input.apiKey : input?.apiKey && typeof input.apiKey === "object" && "value" in input.apiKey ? String(input.apiKey.value ?? "") : void 0;
+	return {
+		enabled: input?.enabled ?? false,
+		provider: input?.provider ?? "typesafe",
+		model: input?.model ?? "jev-latest",
+		...input?.baseURL ? { baseURL: input.baseURL } : {},
+		...apiKey ? { apiKey } : {},
+		...input?.apiKeyEnv ? { apiKeyEnv: input.apiKeyEnv } : {},
+		timeoutMs: input?.timeoutMs ?? 1e4,
+		confidenceThreshold: input?.confidenceThreshold ?? .6,
+		useEnglishState: input?.useEnglishState ?? false,
+		...typeof input?.highRiskThreshold === "number" ? { highRiskThreshold: input.highRiskThreshold } : {}
+	};
+}
 /** Mask a stored API key so it never leaves the host in plain text. */
 function maskApiKey(apiKey) {
 	if (!apiKey) return apiKey;
@@ -3156,15 +3576,27 @@ function isMaskedApiKey(incoming, previous) {
 /**
 * Return a copy of the config safe to send to the browser.
 *
-* 0.1.2-rc.1 SecretField convergence: no key material (not even a mask) leaves
+* SecretField convergence: no key material (not even a mask) leaves
 * the host. `apiKey` is returned empty and per-provider presence facts
 * (`configured` + `last4`) ride in `apiKeyMetaByProvider`, so the card can
 * render the official "已配置/未配置" badge and publish new/cleared keys
 * without ever round-tripping a mask.
 */
 function sanitizeConfig(config) {
+	const jev = normalizeJevConfig(config.trigger.jev);
 	return {
 		...config,
+		trigger: {
+			...config.trigger,
+			jev: {
+				...jev,
+				apiKey: "",
+				...jev?.apiKey ? { apiKeyMeta: {
+					configured: true,
+					last4: jev.apiKey.slice(-4)
+				} } : {}
+			}
+		},
 		advisors: config.advisors.map((advisor) => {
 			const { apiKeysByProvider: _apiKeysByProvider, clearApiKey: _clearApiKey, apiKeyMetaByProvider: _meta, ...rest } = advisor;
 			const meta = {};
@@ -3204,8 +3636,19 @@ function hasSameCredentialScope(a, b) {
 */
 function reconcileApiKeys(incoming, previous) {
 	const previousById = new Map(previous.advisors.map((advisor) => [advisor.id, advisor]));
+	const incomingJev = normalizeJevConfig(incoming.trigger.jev);
+	const previousJev = normalizeJevConfig(previous.trigger.jev);
+	const jevApiKey = incomingJev?.apiKey || previousJev?.apiKey;
 	return {
 		...incoming,
+		trigger: {
+			...incoming.trigger,
+			jev: {
+				...incomingJev,
+				...jevApiKey ? { apiKey: jevApiKey } : {},
+				apiKeyMeta: void 0
+			}
+		},
 		advisors: incoming.advisors.map((advisor) => {
 			const { clearApiKey, ...advisorRest } = advisor;
 			const prev = previousById.get(advisor.id);
@@ -3273,7 +3716,14 @@ async function parseLookupParams(req) {
 	return params;
 }
 const ALLOWED_API_KEY_ENVS = new Set(Object.values(PROVIDER_PRESETS).map((preset) => preset.apiKeyEnv));
+ALLOWED_API_KEY_ENVS.add("TYPESAFE_API_KEY");
+ALLOWED_API_KEY_ENVS.add("OPENROUTER_API_KEY");
 function validateSecurity(input) {
+	if (input.trigger.jev?.baseURL) {
+		const url = input.trigger.jev.baseURL.trim();
+		if (!(url.startsWith("https://") || url.startsWith("http://127.0.0.1") || url.startsWith("http://localhost"))) return "Jev API 地址仅允许 https:// 或本机 http://127.0.0.1 / http://localhost";
+	}
+	if (input.trigger.jev?.apiKeyEnv && !/^[A-Za-z_][A-Za-z0-9_]*$/.test(input.trigger.jev.apiKeyEnv.trim())) return `Jev API Key 环境变量名无效：${input.trigger.jev.apiKeyEnv}`;
 	const ids = /* @__PURE__ */ new Set();
 	for (const advisor of input.advisors) {
 		if (ids.has(advisor.id)) return `顾问 id 重复：${advisor.id}`;
@@ -3465,10 +3915,21 @@ async function handleModelsRequest(ctx, service, req, res) {
 	} catch (error) {
 		sendJson(res, 400, {
 			ok: false,
-			error: error instanceof Error ? error.message : String(error)
+			error: describeConnectionError(error)
 		});
 	}
 }
+/** 网络/HTTP 类失败的设置页可读文案；原始信息保留在括号里。 */
+function describeConnectionError(error) {
+	const message = error instanceof Error ? error.message : String(error);
+	if (/HTTP (401|403)\b/i.test(message)) return `密钥无效或没有访问权限（${message}）`;
+	if (/HTTP 404\b/i.test(message)) return `地址不存在，检查 baseURL 是否写对（${message}）`;
+	if (/ENOTFOUND|EAI_AGAIN/i.test(message)) return `找不到这个地址，检查域名拼写与网络（${message}）`;
+	if (/ECONNREFUSED/i.test(message)) return `对方拒绝了连接，检查地址与端口（${message}）`;
+	if (/ETIMEDOUT|\btimeout\b|aborted/i.test(message)) return `连接超时（${message}）`;
+	if (/fetch failed/i.test(message)) return `网络连接失败，检查网络后重试（${message}）`;
+	return `连接失败（${message}）`;
+}
 async function handleTestConnectionRequest(ctx, service, req, res) {
 	const params = await parseLookupParams(req);
 	const provider = params.provider ?? "";
@@ -3545,7 +4006,7 @@ async function handleTestConnectionRequest(ctx, service, req, res) {
 	} catch (error) {
 		sendJson(res, 400, {
 			ok: false,
-			error: error instanceof Error ? error.message : String(error)
+			error: describeConnectionError(error)
 		});
 	}
 }
@@ -3580,7 +4041,7 @@ function handleStreamRequest(req, res) {
 	});
 }
 function handleConfigRequest(ctx, scopedCtx, service, authToken) {
-	const namespace = "advisor-group";
+	const namespace = "dsh-advisor-group";
 	return async (req, res) => {
 		const rawUrl = req.url ?? "";
 		const url = new URL(rawUrl, "http://localhost");
@@ -3625,6 +4086,7 @@ function handleConfigRequest(ctx, scopedCtx, service, authToken) {
 					stopped: service.stopConsultation(parsed.sessionId)
 				});
 			} catch (error) {
+				console.warn("[dsh-advisor-group] stop 请求处理失败：", error instanceof Error ? error.message : String(error));
 				sendJson(res, 400, {
 					ok: false,
 					error: error instanceof Error ? error.message : String(error)
@@ -3649,6 +4111,7 @@ function handleConfigRequest(ctx, scopedCtx, service, authToken) {
 					...result.reason ? { error: result.reason } : {}
 				});
 			} catch (error) {
+				console.warn("[dsh-advisor-group] resume 请求处理失败：", error instanceof Error ? error.message : String(error));
 				sendJson(res, 400, {
 					ok: false,
 					error: error instanceof Error ? error.message : String(error)
@@ -3664,12 +4127,20 @@ function handleConfigRequest(ctx, scopedCtx, service, authToken) {
 			return;
 		}
 		if (req.method === "GET" && (pathname === "/advisor-group/config" || pathname === "/advisor-group/config/")) {
-			sendJson(res, 200, {
-				ok: true,
-				config: sanitizeConfig(service.getConfig()),
-				revision: currentRevision(scopedCtx, namespace),
-				dailyGuard: service.getDailyGuard()
-			});
+			try {
+				sendJson(res, 200, {
+					ok: true,
+					config: sanitizeConfig(service.getConfig()),
+					revision: currentRevision(scopedCtx, namespace),
+					dailyGuard: service.getDailyGuard()
+				});
+			} catch (error) {
+				console.error("[dsh-advisor-group] config read failed:", error instanceof Error ? error.message : String(error));
+				sendJson(res, 500, {
+					ok: false,
+					error: error instanceof Error ? error.message : String(error)
+				});
+			}
 			return;
 		}
 		if (req.method === "POST" && (pathname === "/advisor-group/config" || pathname === "/advisor-group/config/")) {
@@ -3678,7 +4149,7 @@ function handleConfigRequest(ctx, scopedCtx, service, authToken) {
 				const parsed = JSON.parse(raw);
 				const configInput = parsed.config ?? parsed;
 				const expectedRevision = typeof parsed.expectedRevision === "number" ? parsed.expectedRevision : currentRevision(scopedCtx, namespace);
-				const reconciled = reconcileApiKeys(Config(configInput), service.getConfig());
+				const reconciled = reconcileApiKeys(unwrapVolatileConfig(Config(configInput)), service.getConfig());
 				const securityError = validateSecurity(reconciled);
 				if (securityError) {
 					sendJson(res, 400, {
@@ -3687,8 +4158,10 @@ function handleConfigRequest(ctx, scopedCtx, service, authToken) {
 					});
 					return;
 				}
-				await scopedCtx.settings.replace(namespace, reconciled, expectedRevision);
-				service.setConfig(reconciled);
+				const guarded = guardAdvisorPrompts(reconciled);
+				reportPromptGuardFindings(guarded.findings);
+				await scopedCtx.settings.replace(namespace, guarded.config, expectedRevision);
+				service.setConfig(guarded.config);
 				sendJson(res, 200, {
 					ok: true,
 					config: sanitizeConfig(service.getConfig()),
@@ -3704,7 +4177,7 @@ function handleConfigRequest(ctx, scopedCtx, service, authToken) {
 				}
 				sendJson(res, 400, {
 					ok: false,
-					error: error instanceof Error ? error.message : String(error)
+					error: `保存失败：请检查刚才修改项的格式（原始信息：${error instanceof Error ? error.message : String(error)}）`
 				});
 			}
 			return;
@@ -3752,14 +4225,16 @@ function registerAdvisorSettingsAndRoutes(ctx, config, service) {
 	if (!inject) return;
 	inject(["settings", "webServer"], (scoped) => {
 		const scopedCtx = scoped;
-		const namespace = "advisor-group";
-		const scope = scopedCtx.settings.register(namespace, Config, { base: config });
-		service.setConfig(scope.get());
+		const namespace = "dsh-advisor-group";
+		service.setConfig(config);
+		const presentationDisposer = scopedCtx.settings.configure({ auto: false }, ctx.fiber);
 		service.setPersistEnabled(async (enabled) => {
 			await scopedCtx.settings.update(namespace, { enabled });
 		});
-		const watchDisposer = scope.watch((next) => {
-			service.setConfig(next);
+		const watchDisposer = ctx.on("loader/volatile-update", () => {
+			const guarded = guardAdvisorPrompts(unwrapVolatileConfig(ctx.fiber.config));
+			reportPromptGuardFindings(guarded.findings);
+			service.setConfig(guarded.config);
 		});
 		const authToken = randomUUID();
 		const indexTapDisposer = scopedCtx.webServer.tapIndex ? scopedCtx.webServer.tapIndex((html) => html.replace("<head>", `<head><script>globalThis.__ADVISOR_GROUP_TOKEN__ = ${JSON.stringify(authToken)}<\/script>`)) : null;
@@ -3772,6 +4247,7 @@ function registerAdvisorSettingsAndRoutes(ctx, config, service) {
 			watchDisposer();
 			routeDisposer();
 			indexTapDisposer?.();
+			presentationDisposer();
 		}, "dsh-advisor-group: settings watcher + config routes");
 	});
 }
@@ -3817,7 +4293,7 @@ function buildAdvisorPrompt(config, repeatPressure) {
 /**
 * Host-only registration for the advisor-group session event vocabulary.
 *
-* The official 0.1.2-rc.1 compatibility mechanism is the per-event
+* The official compatibility mechanism is the per-event
 * `SessionEvent.ignorable: true` envelope marker: `dsh-session-persistence`
 * refuses unknown event types unless `KNOWN_SESSION_EVENT_TYPES.has(type)`
 * or the stored event is marked ignorable. However `Session.append()` exposes
@@ -3854,8 +4330,10 @@ const inject = [
 	"sessions"
 ];
 function apply(ctx, config) {
-	const service = new AdvisorGroupService(ctx, config);
-	registerAdvisorSettingsAndRoutes(ctx, config, service);
+	const guarded = guardAdvisorPrompts(unwrapVolatileConfig(config));
+	reportPromptGuardFindings(guarded.findings);
+	const service = new AdvisorGroupService(ctx, guarded.config);
+	registerAdvisorSettingsAndRoutes(ctx, guarded.config, service);
 	for (const tool of registerAdvisorTools(service)) ctx.tools.register(tool);
 	const systemPrompt = ctx.systemPrompt;
 	if (systemPrompt) ctx.effect(() => systemPrompt.section({