dsh-subagent-profile 0.3.2 → 0.3.4

package/index.mjs

@@ -1,52 +1,124 @@
-// index.mjs — dsh-subagent-profile 宿主侧正式插件 bundle（只做装配）。
-// 源自原型动态插件 `code.host` 主体；宿主导入面（registerTool/defineTool/
-// handle）收敛在 lib/core/shims.mjs，装配块按模块拆分驻留 lib/core/（catalog /
-// presets-sync / profiles-store / cost-guard / whitelist / intersection /
-// delegation / pure / shims / http-routes / profile-provider / dispatch-tool）。
-// apply 的装配辅助函数（syncBundledPresetsToHome / provideProfileService /
-// registerSystemPromptSections / registerSettingsRoutes）保持 section 文本与
-// 门控逐字不变；`enabled` 始终经 getter 注入，门控读取当前值。
+// index.mjs — dsh-subagent-profile 宿主侧插件 bundle（只做装配）。宿主导入面收敛在
+// lib/core/shims.mjs，装配块按模块拆分驻留 lib/core/；apply 的装配辅助函数保持
+// section 文本与门控逐字不变，`enabled` 始终经 getter 注入（门控读取当前值）。
 
+import { readdirSync, renameSync, rmSync } from 'node:fs';
+import { createRequire } from 'node:module';
 import { join } from 'node:path';
 import { syncBundledPresets } from './lib/core/presets-sync.mjs';
 import { dshHome, createProfileStore } from './lib/core/profiles-store.mjs';
 import { createHttpRoutes } from './lib/core/http-routes.mjs';
 import { createProfileProvider } from './lib/core/profile-provider.mjs';
 import { createDispatchTool } from './lib/core/dispatch-tool.mjs';
+import { createDispatchGuard } from './lib/core/dispatch-guard.mjs';
 import { createCatalogCache } from './lib/core/catalog-cache.mjs';
-import { tierSortKey } from './lib/core/pure.mjs';
+import { createFailureLedger } from './lib/core/decision-trace.mjs';
+import { createEvolutionLedger } from './lib/core/evolution-ledger.mjs';
+import { createAdoptionTracker } from './lib/core/adoption-tracker.mjs';
+import { createReminderStore } from './lib/core/reminder-store.mjs';
+import { mintReminder, mintUnadoptedReminder } from './lib/core/adoption-reminder.mjs';
+import { createBackgroundLedger } from './lib/core/background-ledger.mjs';
+import { createDraftsStore } from './lib/core/drafts-store.mjs';
+import { assessDraftProfile } from './lib/core/draft-gates.mjs';
+import { createEscapeStore, recordEscapeAllowProvider } from './lib/core/escape.mjs';
+import { resolveWhitelist, FALLBACK_WHITELIST } from './lib/core/whitelist.mjs';
+import { profileDirectoryRows, profileStatsFromSummaries, applyProfileStats } from './lib/core/profile-directory.mjs';
+import { buildAdviceText, refreshSummaries, readSummaries } from './lib/core/evolution-advice.mjs';
 
 export const name = 'dsh-subagent-profile';
 export const inject = ['subagents', 'tools', 'agents'];
 
-// Self-install the bundled "orchestrator" agent preset into the DSH
-// agent-presets root so the mode appears in the new-session picker without
-// manual copying (mirrors the shipped dsh-liangshen self-install). Idempotent:
-// byte-identical trees are skipped; a bundle change rewrites the preset — the
-// intended upgrade path. Fail-soft: the dispatch tool and settings page keep
-// working even if the write is denied.
+// 自装 bundled 的 "orchestrator" 预设到 agent-presets 根（与官方自安装相同）。
+// 幂等：字节一致跳过、bundle 变更重写；fail-soft：写入被拒时工具与设置页照常工作。
 function syncBundledPresetsToHome(ctx) {
   try {
     const presetRoot = join(dshHome(), '.agent-presets');
     const sync = syncBundledPresets(presetRoot);
     for (const { id, error } of sync.failed) ctx.logger.warn(`[dsh-subagent-profile] preset ${id} sync failed: ${error}`);
     if (sync.synced.length > 0) ctx.logger.info(`[dsh-subagent-profile] presets synced into ${presetRoot}: ${sync.synced.join(', ')}`);
+    if (sync.userModified.length > 0) ctx.logger.warn(`[dsh-subagent-profile] presets left untouched (user-modified): ${sync.userModified.join(', ')}`);
   } catch (error) {
     ctx.logger.warn('[dsh-subagent-profile] preset sync failed:', error instanceof Error ? error.message : String(error));
   }
 }
 
-// subagent-profiles service over the store's per-apply profiles Map —
-// lets the outside world enumerate and extend the registry without touching
-// internals.
+// 卸载清理：本插件 3 个数据文件 + orchestrator 预设目录改名备份（effect 清理器
+// 在禁用/热重载/退出时都可能触发，硬删除会静默丢用户数据）。备份保留可恢复副本；
+// 规范路径清空后重启按需重建。fail-soft：改名失败不抛。
+function removeOwnedData(home) {
+  const stamp = Date.now();
+  for (const file of ['subagent-profiles.json', 'subagent-profiles.state.json', 'subagent-profiles.failed-traces.json']) {
+    try { renameSync(join(home, file), join(home, `${file}.removed-${stamp}`)); } catch { /* 源不存在（正常首启）等：best effort */ }
+  }
+  try { renameSync(join(home, '.agent-presets', 'orchestrator'), join(home, '.agent-presets', `orchestrator.removed-${stamp}`)); } catch { /* best effort */ }
+}
+
+// 启动清理 .removed-* 备份残留（只清本插件前缀，防热重载反复产生新备份积累）；
+// 卸载后用户手动改回原名的场景不受影响。fail-soft。
+function cleanRemovedBackups(home) {
+  for (const dir of [home, join(home, '.agent-presets')]) {
+    let names;
+    try { names = readdirSync(dir); } catch { continue; }
+    for (const name of names) {
+      try {
+        if (name.startsWith('subagent-profiles.') && name.includes('.removed-')) {
+          rmSync(join(dir, name), { force: true });
+        } else if (name.startsWith('orchestrator.removed-')) {
+          rmSync(join(dir, name), { recursive: true, force: true });
+        }
+      } catch { /* best effort */ }
+    }
+  }
+}
+
+// parent_adopted 装配：tracker 工厂 + 根 ctx 订阅 session/event（按 session.id 过滤），
+// 卸载退订并清理定时器。onDecision 经 getRefreshAdvice 延迟读取（先判定后聚合时为空
+// 操作）；onDecided 把「明确未采纳」转成提醒中心条目（同源审计 + 注意级提醒）。
+function setupAdoptionTracker(ctx, home, getRefreshAdvice, onUnadopted) {
+  const adoptionTracker = createAdoptionTracker({
+    stateFile: join(home, 'subagent-evolution', 'adopted-state.json'),
+    warn: (message) => ctx.logger.warn(`[dsh-subagent-profile] ${message}`),
+    onDecision: () => { try { getRefreshAdvice()(); } catch { /* 聚合重算失败不影响判定（fail-soft） */ } },
+    onDecided: onUnadopted,
+  });
+  const onSessionEvent = (session, event) => adoptionTracker.handleEvent(session, event);
+  ctx.on('session/event', onSessionEvent);
+  ctx.effect(() => () => { ctx.off('session/event', onSessionEvent); adoptionTracker.dispose(); });
+  return adoptionTracker;
+}
+
+// 卸载接线：注销工具 + 清空台账 + 级联取消 + 删数据文件与预设目录。agent/disposed
+// 挂钩按父释放并发/token 记账，并把该父会话未决采纳判定判「明确未采纳」。
+function registerTeardown(ctx, dispatch, ledger, guard, home, backgroundLedger, adoptionTracker) {
+  ctx.effect(() => dispatch.dispose);
+  ctx.effect(() => ledger.clear);
+  ctx.effect(() => backgroundLedger.clear);
+  ctx.effect(() => () => {
+    guard.cancelAll();
+    guard.reset();
+    removeOwnedData(home);
+  });
+  const onAgentDisposed = ({ agent }) => {
+    const parentSessionId = agent?.session?.header?.id;
+    if (parentSessionId !== undefined && parentSessionId !== null && parentSessionId !== '') {
+      guard.resetParent(parentSessionId);
+      adoptionTracker.parentDisposed(parentSessionId);
+    }
+  };
+  ctx.on('agent/disposed', onAgentDisposed);
+  ctx.effect(() => () => ctx.off('agent/disposed', onAgentDisposed));
+}
+
+// subagent-profiles service：包在 store 的 per-apply profiles Map 之上，对外只暴露
+// 枚举/扩展注册表的窄接口，不触碰内部结构。
 function provideProfileService(ctx, store) {
   ctx.provide('subagent-profiles', {
     register(profile) {
       if (!profile || typeof profile.id !== 'string' || profile.id.length === 0) {
-        throw new Error('subagent-profiles: profile id must be a non-empty string');
+        throw new Error('subagent-profiles: profile id 必须为非空字符串');
       }
       if (store.profiles.has(profile.id)) {
-        throw new Error(`subagent-profiles: profile "${profile.id}" is already registered`);
+        throw new Error(`subagent-profiles: profile "${profile.id}" 已注册（id 需唯一）`);
       }
       const registered = { ...profile };
       store.profiles.set(profile.id, registered);
@@ -96,55 +168,94 @@ function sectionGatePasses(ctx, getEnabled, context) {
 // dispatch:profiles section 文本。引号引用：description 套引号；为空时显示
 // 占位符（不套引号）。压平在存储层完成（sanitizeProfile），此处仅负责显示层包裹。
 // 门控 profiles section 内附一行行为规则提示（非开放的 persona 注入）。
-function profileSectionText(store, gate, context) {
+function profileSectionText(store, gate, context, summaries) {
   if (!gate(context)) return '';
-  const rows = [...store.profiles.values()]
-    .filter((p) => p.enabled !== false)
-    .sort((a, b) => tierSortKey(a.tokenTier) - tierSortKey(b.tokenTier))
-    .map((p) => {
-      const desc = typeof p.description === 'string' && p.description.length > 0 ? `"${p.description}"` : '(无描述)';
-      return `- ${p.id}: ${desc}${p.preset !== undefined ? ` (preset: ${p.preset})` : ''}`;
-    });
+  const rows = applyProfileStats(profileDirectoryRows(store), profileStatsFromSummaries(store, summaries));
   if (rows.length === 0) return '';
-  const note = '- 选择方案时先匹配任务复杂度与方案描述的能力边界，成本只在能力都胜任的方案之间比较——复杂任务不得为省 token 改用能力不足的便宜方案。\n- 别把 1-2 步即可自查/可搜完的小事委派出去 —— 几分钟内能自查完的直接做。';
-  return `Available dispatch profiles (dispatch.profile):\n${rows.join('\n')}\n${note}`;
+  const lines = rows.map((p) => {
+    const desc = p.description.length > 0 ? `"${p.description}"` : '(无描述)';
+    const meta = [];
+    if (p.preset !== undefined) meta.push(`preset: ${p.preset}`);
+    else if (p.model !== undefined) meta.push(`model: ${p.model}`);
+    if (p.tokenTier !== undefined) meta.push(`tier: ${p.tokenTier}`);
+    if (p.avgCost !== undefined) meta.push(`平均 ${p.avgCost} 元/次`);
+    if (p.successRate !== undefined) meta.push(`成功率 ${p.successRate}${p.n !== undefined ? ` (N=${p.n})` : ''}`);
+    return `- ${p.id}: ${desc}${meta.length > 0 ? ` (${meta.join(' · ')})` : ''}`;
+  });
+  const note = '- 选择方案时先匹配任务复杂度与方案描述的能力边界，成本只在能力都胜任的方案之间比较——复杂任务不得为省 token 改用能力不足的便宜方案。\n- 别把 1-2 步即可自查/可搜完的小事委派出去 —— 几分钟内能自查完的直接做。\n- 优先使用已保存的 profile；只有少数字段需要临时覆盖时才传 per-call 参数。查资料/汇总/读文件等轻任务优先 cheap 或 flash。';
+  return `Available dispatch profiles (dispatch.profile):\n${lines.join('\n')}\n${note}`;
 }
 
 // orchestrator:mode section 文本（逐字保留；与 profiles 同门控）。
 const ORCHESTRATOR_MODE_TEXT = '本机已安装 dsh-subagent-profile 插件的「编排者模式」agent preset：新建会话的预设选择器中可选「编排者模式」。该模式把 Agent 定位为主协调者——拆解任务后按场景用 dispatch（内置 swap-standard=标准编码、researcher=调研检索，可在「子 Agent 方案」设置页自定义）与 subagent/subagent_fork/workflow 委派给子 Agent，再整合结果。preset 文件由插件维护于 ~/.dsh/.agent-presets，安装/升级时自动同步；用户提到「编排者模式 / orchestrator / 主协调模式」时即指本预设，请据此协作。';
 
-// Directory section rendering the available profiles (systemPrompt's
-// section `text` accepts a function, as the shipped tool-subagent proves).
-// gate: `enabled` must be read live (getter), so /set-enabled toggles
-// apply immediately without a restart.
-function registerSystemPromptSections(ctx, store, getEnabled) {
+// 建议注入候选池：受信任预设白名单（解析失败回退内置名单）。不叠加逃生舱放行集。
+async function resolveAdviceWhitelist(ctx) {
+  try {
+    return new Set(await resolveWhitelist(ctx.get('agentPresets')));
+  } catch {
+    return new Set(FALLBACK_WHITELIST);
+  }
+}
+
+// 系统提示各 section：门控经 sectionGatePasses；`enabled` 经 getter 实时读取。
+function registerSystemPromptSections(ctx, store, getEnabled, getEvolutionAdvice, adviceEnv, guard) {
   const pluginSystemPrompt = ctx.get('systemPrompt');
   if (pluginSystemPrompt === undefined) return;
   const gate = (context) => sectionGatePasses(ctx, getEnabled, context);
   pluginSystemPrompt.section({
     name: 'dispatch:profiles',
     order: 116.5,
-    text: (context) => profileSectionText(store, gate, context),
+    text: (context) => {
+      let summaries = null;
+      try { summaries = readSummaries(adviceEnv.summariesFile, adviceEnv.logger); } catch { /* 统计只增强，不影响目录注入 */ }
+      return profileSectionText(store, gate, context, summaries);
+    },
   });
-  // Announce the self-installed orchestrator preset so the current agent
-  // knows the mode exists and can point the user to it. Gated the same
-  // way — only a dispatch-capable agent sees it.
+  // 宣告自装的 orchestrator 预设，让当前 agent 知道该模式存在、可引导用户使用。
+  // 门控与 profiles 段相同——只有可派发的 agent 才看得到。
   pluginSystemPrompt.section({
     name: 'orchestrator:mode',
     order: 117,
     text: (context) => (gate(context) ? ORCHESTRATOR_MODE_TEXT : ''),
   });
+  // 派发优化建议段：门控 = orchestrator + evolutionAdvice 开关；异常兜底不阻断装配。
+  pluginSystemPrompt.section({
+    name: 'evolution:advice',
+    order: 116.8,
+    text: (context) => {
+      if (!getEvolutionAdvice() || !gate(context)) return '';
+      try {
+        return buildAdviceText(adviceEnv);
+      } catch (error) {
+        // 候选校验失败（如逃生舱放行的非 system 预设）不再静默空转——logger.warn
+        // 留痕 + 注入段标注「建议暂不可用及原因」，父 Agent 可见、派发行为不受影响。
+        const reason = error instanceof Error ? error.message : String(error);
+        adviceEnv.logger.warn(`[dsh-subagent-profile] evolution:advice 生成失败：${reason}`);
+        return `（派发优化建议暂不可用：${reason}。派发行为不受影响。）`;
+      }
+    },
+  });
+  // 派发预算余量段：与 profiles 同门控；无父 sessionId 不注入（无法关联具体会话）。
+  pluginSystemPrompt.section({
+    name: 'dispatch:budget',
+    order: 116.7,
+    text: (context) => {
+      if (!gate(context)) return '';
+      const parentSessionId = context?.agent?.session?.header?.id;
+      if (typeof parentSessionId !== 'string' || parentSessionId === '') return '';
+      const b = guard.snapshot(parentSessionId);
+      return `派发预算余量：本会话在途 ${b.concurrency}/${b.maxConcurrent}，累计 token ${b.tokens}/${b.maxParentTokens}，剩余 ${Math.max(0, b.maxParentTokens - b.tokens)} token。`;
+    },
+  });
 }
 
-// HTTP loopback routes for the Client settings UI (webServer.register ↔
-// client fetch; JSON only) — the routes themselves live in
-// lib/core/http-routes.mjs (imported above); this wiring only injects the
-// per-apply deps. webServer is optional — a headless deployment keeps the
-// dispatch tool and drops only the settings page. webServer's activation
-// (listen) is async and may not be ready when this plugin's inject deps
-// resolve, so register inside an inject sub-scope that waits for it
-// (ctx.get would read undefined at apply time).
-function registerSettingsRoutes(ctx, store, getEnabled, setEnabled, syncTool, catalog) {
+// Client 设置 UI 的 HTTP loopback 路由（webServer.register ↔ client fetch，纯 JSON）。
+// 路由本体在 lib/core/http-routes.mjs（上文已 import）；这里只注入 per-apply 依赖。
+// webServer 可选——无头部署保留 dispatch 工具、只丢设置页。webServer 的激活
+// （listen）是异步的，可能晚于本插件 inject 依赖解析完成，故在等它的 inject
+// 子 scope 内注册（apply 时 ctx.get 会读到 undefined）。
+function registerSettingsRoutes(ctx, store, getEnabled, setEnabled, syncTool, catalog, ledger, backgroundLedger, draftsStore, applyDraft, getAudit, getEvolutionAdvice, setEvolutionAdvice, getEscapeEnabled, setEscapeEnabled, escape, refreshAdvice, summariesFile, dispatchFile, adviceWhitelist, previewDraft, reminderStore) {
   ctx.inject(['webServer'], (scope) => {
     scope.effect(createHttpRoutes({
       webServer: scope.webServer,
@@ -153,6 +264,22 @@ function registerSettingsRoutes(ctx, store, getEnabled, setEnabled, syncTool, ca
       setEnabled,
       syncTool,
       catalog,
+      ledger,
+      backgroundLedger,
+      draftsStore,
+      applyDraft,
+      getAudit,
+      getEvolutionAdvice,
+      setEvolutionAdvice,
+      getEscapeEnabled,
+      setEscapeEnabled,
+      escape,
+      refreshAdvice,
+      summariesFile,
+      dispatchFile,
+      adviceWhitelist,
+      previewDraft,
+      reminderStore,
       logger: ctx.logger,
     }), 'dsh-subagent-profile: settings routes');
   });
@@ -170,48 +297,116 @@ function createSharedCatalog(ctx) {
   });
 }
 
-export async function apply(ctx) {
-  // Enable/disable switch (default on, runtime-toggled by the settings
-  // page, persisted across restarts) + profile registry — lib/profiles-store
-  // .mjs: createProfileStore. loadProfiles runs once at startup via the
-  // explicit call below (the factory itself does not auto-load).
-  const store = createProfileStore({ dshHome: dshHome(), logger: ctx.logger });
-  let enabled = store.loadEnabled();
-  store.loadProfiles();
-  // Self-install the bundled "orchestrator" preset (idempotent, fail-soft).
-  syncBundledPresetsToHome(ctx);
-  // 进程级共享 catalog 快照（/options 三路由 + dispatch cost guard 共用）。
-  const catalog = createSharedCatalog(ctx);
-  // `dispatch` tool — lib/core/dispatch-tool.mjs: defineTool block (schema +
-  // execute), the result-schema consistency lock and the syncTool
-  // register/unregister logic.
-  // Created BEFORE the HTTP inject so createHttpRoutes can capture
-  // dispatch.syncTool (/set-enabled).
-  const dispatch = createDispatchTool({
+// 读本插件 package.json version 供派发台账 provenance 使用。fail-soft：读取/解析
+// 失败回退 'unknown'，绝不阻断插件启动。
+function readPluginVersion() {
+  try {
+    const pkg = createRequire(import.meta.url)('./package.json');
+    return typeof pkg?.version === 'string' && pkg.version !== '' ? pkg.version : 'unknown';
+  } catch {
+    return 'unknown';
+  }
+}
+
+// 逃生舱装配：放行集 store + 开关态（state.json 持久化）+ 访问器。开关态经对象字段
+// 可变（/set-escape 改写），getEscapeSet 开关关时恒空数组（零叠加、零放行审计）。
+// 放行时 mint P0（紧急）提醒（高可见治理事件，与放行审计同源留痕）。
+function setupEscape(ctx, store, evoLedger, home, getReminderStore) {
+  const escape = createEscapeStore({ dshHome: home, logger: ctx.logger, onGovernanceFailure: () => evoLedger.markGovernanceFailure() });
+  const state = { escapeEnabled: store.loadEscapeEnabled() };
+  return {
+    escape,
+    getEscapeSet: () => (state.escapeEnabled ? escape.list() : []),
+    getEscapeEnabled: () => state.escapeEnabled,
+    setEscapeEnabled: (next) => { state.escapeEnabled = next; },
+    recordEscapeAllowProvider: (parent, preset) => {
+      recordEscapeAllowProvider(evoLedger, parent, preset);
+      mintReminder(getReminderStore(), { severity: 'P0', kind: 'escape-allow', title: '逃生舱放行非官方预设', detail: '预设 "' + preset + '" 经逃生舱放行，其余安全检查仍全量生效', sessionId: parent?.session?.header?.id });
+    },
+  };
+}
+
+// `dispatch` 工具装配（defineTool + execute + syncTool）。须在 HTTP inject 之前
+// 构造，使 createHttpRoutes 能拿 dispatch.syncTool 供 /set-enabled 注册/注销。
+function createDispatch(ctx, store, catalog, ledger, guard, evoLedger, backgroundLedger, adoptionTracker, getEscapeSet, getEnabled, getEvolutionAdvice) {
+  return createDispatchTool({
     register: (tool) => ctx.tools.register(tool),
     store,
-    getEnabled: () => enabled,
+    getEnabled,
     getService: (name) => ctx.get(name),
     logger: ctx.logger,
     subagents: ctx.subagents,
     catalog,
+    ledger,
+    guard,
+    evoLedger,
+    backgroundLedger,
+    adoptionTracker,
+    getEscapeSet,
+    getEvolutionAdvice,
   });
-  // subagent-profiles service over the store's per-apply profiles Map.
+}
+
+// auto-profile 落库：三道安全检查评估（draft-gates）→ 任一 fail 即 throw → 落库 + 审计。
+async function applyDraftProfile({ ctx, store, catalog, getEscapeSet, evoLedger, draft }) {
+  const { ok, checks, clean } = await assessDraftProfile({ ctx, store, catalog, getEscapeSet, draft });
+  if (!ok) {
+    const failed = checks.find((c) => c.verdict === 'fail');
+    throw new Error(failed !== undefined && typeof failed.reason === 'string' ? failed.reason : 'draft 未通过安全检查');
+  }
+  store.profiles.set(clean.id, { ...clean, persisted: true });
+  const persisted = store.persistProfiles();
+  evoLedger.recordGovernanceAudit({ kind: 'draft-apply', profileId: clean.id, source: typeof draft.source === 'string' ? draft.source : 'human' });
+  return { id: clean.id, persisted: persisted.persisted };
+}
+
+export async function apply(ctx) {
+  const home = dshHome();
+  cleanRemovedBackups(home); // 上个生命周期留下的 .removed-* 备份残留。
+  // reminderStore 变量提前声明：evoLedger.onAlert 与 escape mint 钩子延迟读取。
+  let reminderStore;
+  // 派发台账 + 审计分级须在 store 之前构造：store 的治理审计钩子指向其 markGovernanceFailure。
+  const evoLedger = createEvolutionLedger({ dshHome: home, pluginVersion: readPluginVersion(), warn: (message) => ctx.logger.warn(`[dsh-subagent-profile] ${message}`), onAlert: (lost) => mintReminder(reminderStore, { severity: 'P0', kind: 'audit-degraded', title: '审计降级', detail: '治理审计丢失 ' + lost + ' 条，健康状态已降级——请检查磁盘', sessionId: null }) });
+  const store = createProfileStore({ dshHome: home, logger: ctx.logger, onGovernanceFailure: () => evoLedger.markGovernanceFailure() });
+  const escapeCtl = setupEscape(ctx, store, evoLedger, home, () => reminderStore);
+  let enabled = store.loadEnabled();
+  let evolutionAdvice = store.loadEvolutionAdvice();
+  store.loadProfiles();
+  // 自装 bundled 的 orchestrator 预设（幂等、fail-soft）。
+  syncBundledPresetsToHome(ctx);
+  const catalog = createSharedCatalog(ctx);
+  const ledger = createFailureLedger({ warn: (message) => ctx.logger.warn(`[dsh-subagent-profile] ${message}`), stateFile: join(home, 'subagent-profiles.failed-traces.json') });
+  const guard = createDispatchGuard({ warn: (message) => ctx.logger.warn(`[dsh-subagent-profile] ${message}`) });
+  const backgroundLedger = createBackgroundLedger({ warn: (message) => ctx.logger.warn(`[dsh-subagent-profile] ${message}`) });
+  const draftsStore = createDraftsStore({ dshHome: home, onGovernanceFailure: () => evoLedger.markGovernanceFailure() });
+  reminderStore = createReminderStore({ dshHome: home, audit: (entry) => evoLedger.recordGovernanceAudit(entry), warn: (message) => ctx.logger.warn(`[dsh-subagent-profile] ${message}`) });
+  let refreshAdvice = () => {};
+  const adoptionTracker = setupAdoptionTracker(ctx, home, () => refreshAdvice, (rec) => mintUnadoptedReminder(reminderStore, evoLedger, rec));
+  const dispatch = createDispatch(ctx, store, catalog, ledger, guard, evoLedger, backgroundLedger, adoptionTracker, escapeCtl.getEscapeSet, () => enabled, () => evolutionAdvice);
   provideProfileService(ctx, store);
-  // Gated system-prompt sections (profile directory + orchestrator mode).
-  registerSystemPromptSections(ctx, store, () => enabled);
-  // `profile` subagent provider — lib/core/profile-provider.mjs:
-  // createProfileProvider registers the provider and returns the disposer.
-  const disposeProvider = createProfileProvider({
-    subagents: ctx.subagents,
+  const adviceWhitelist = await resolveAdviceWhitelist(ctx);
+  const adviceEnv = { summariesFile: join(home, 'subagent-evolution', 'summaries.json'), dispatchFile: join(home, 'subagent-evolution', 'dispatch.jsonl'), whitelist: adviceWhitelist, logger: ctx.logger };
+  // 生产聚合触发点（T1 修复）：/options/refresh 与 /list 触发的惰性重算；parent_adopted
+  // 的「已确认未采纳」计数经 opts 惰性 join 进 weighted_success（-0.3 惩罚）。
+  refreshAdvice = () => refreshSummaries({ dispatchFile: adviceEnv.dispatchFile, summariesFile: adviceEnv.summariesFile, logger: ctx.logger, opts: { parentAdoptedConfirmedFalse: adoptionTracker.confirmedFalseCounts() } });
+  registerSystemPromptSections(ctx, store, () => enabled, () => evolutionAdvice, adviceEnv, guard);
+  const disposeProvider = createProfileProvider({ subagents: ctx.subagents, store, getEnabled: () => enabled, logger: ctx.logger, catalog, getEscapeSet: escapeCtl.getEscapeSet, recordEscapeAllowProvider: escapeCtl.recordEscapeAllowProvider });
+  if (typeof disposeProvider === 'function') ctx.effect(() => disposeProvider);
+  const applyDraft = (draft) => applyDraftProfile({ ctx, store, catalog, getEscapeSet: escapeCtl.getEscapeSet, evoLedger, draft });
+  // /draft/preview：只读安全检查预览（不落库）。body 为 {config, name, description, source}。
+  const previewDraft = (body) => assessDraftProfile({
+    ctx,
     store,
-    getEnabled: () => enabled,
-    logger: ctx.logger,
     catalog,
+    getEscapeSet: escapeCtl.getEscapeSet,
+    draft: {
+      config: body !== null && typeof body === 'object' && typeof body.config === 'object' && body.config !== null ? body.config : {},
+      name: body !== null && typeof body === 'object' && typeof body.name === 'string' ? body.name : '',
+      description: body !== null && typeof body === 'object' && typeof body.description === 'string' ? body.description : '',
+      source: body !== null && typeof body === 'object' && typeof body.source === 'string' ? body.source : 'human',
+    },
   });
-  if (typeof disposeProvider === 'function') ctx.effect(() => disposeProvider);
-  // HTTP loopback routes for the Client settings UI — lib/core/http-routes.mjs.
-  registerSettingsRoutes(ctx, store, () => enabled, (next) => { enabled = next; }, dispatch.syncTool, catalog);
-  // Teardown: unregister the dispatch tool (if still registered).
-  ctx.effect(() => dispatch.dispose);
+  // Client 设置 UI 的 HTTP loopback 路由 —— lib/core/http-routes.mjs。
+  registerSettingsRoutes(ctx, store, () => enabled, (next) => { enabled = next; }, dispatch.syncTool, catalog, ledger, backgroundLedger, draftsStore, applyDraft, () => evoLedger.auditState(), () => evolutionAdvice, (next) => { evolutionAdvice = next; }, escapeCtl.getEscapeEnabled, escapeCtl.setEscapeEnabled, escapeCtl.escape, refreshAdvice, join(home, 'subagent-evolution', 'summaries.json'), adviceEnv.dispatchFile, adviceEnv.whitelist, previewDraft, reminderStore);
+  registerTeardown(ctx, dispatch, ledger, guard, home, backgroundLedger, adoptionTracker);
 }