dsh-subagent-profile 0.3.4 → 0.4.0

package/lib/core/evolution-renewal.mjs

@@ -0,0 +1,64 @@
+// lib/core/evolution-renewal.mjs — 候选换代判定与换代审计（从 evolution-engine 拆出
+// 守行门）：到期判定、有效期初值、数据指纹、显著变化判定（阈值初值，待实测后校准）、
+// suggestion-expire / suggestion-refresh 审计条目。纯函数、零 IO、零依赖，可裸 import 单测。
+
+// 候选到期判定：expiry 为 null（不自动过期）恒不到期，否则 now >= expiry。
+export function candidateExpired(entry, now) {
+  return typeof entry.expiry === 'number' && now >= entry.expiry;
+}
+
+// 候选有效期初值：手动维护恒不自动过期；自动换新按设置小时数计算，0 = 不自动过期。
+export function candidateExpiryOf(mode, ttlH, now) {
+  if (mode === 'manual') return null;
+  return ttlH === 0 ? null : now + ttlH * 3600 * 1000;
+}
+
+// 数据指纹：该身份键当前聚合的样本数/加权成功分/置信度（换代判定输入）。
+export function dataFingerprintOf(item, summaries) {
+  const l1 = summaries !== null && typeof summaries === 'object' && summaries.l1 !== null && typeof summaries.l1 === 'object'
+    ? summaries.l1
+    : {};
+  const group = typeof item.profileKey === 'string' ? l1[item.profileKey] : undefined;
+  const entry = group !== null && typeof group === 'object' ? group : {};
+  return {
+    n: Number.isFinite(entry.confidence?.n) ? entry.confidence.n : (Number.isFinite(entry.deployments_total) ? entry.deployments_total : 0),
+    score: Number.isFinite(entry.score?.weighted_success) ? entry.score.weighted_success : 0,
+    confidence: typeof entry.confidence?.level === 'string' ? entry.confidence.level : '',
+  };
+}
+
+// 显著变化判定（初值，待实测后校准）：样本数增加 ≥2，或加权成功分变化 ≥0.1，
+// 或置信度升级。
+const FINGERPRINT_CONFIDENCE_RANK = { low: 0, medium: 1, high: 2 };
+export function dataSignificantlyChanged(prev, next) {
+  if (next.n - prev.n >= 2) return true;
+  if (Math.abs(next.score - prev.score) >= 0.1) return true;
+  return (FINGERPRINT_CONFIDENCE_RANK[next.confidence] ?? -1) > (FINGERPRINT_CONFIDENCE_RANK[prev.confidence] ?? -1);
+}
+
+// suggestion-expire 事件：候选到期且数据显著变化、换代时转 expired 的留痕（仅记录）。
+export function expireAuditEntry(asset, reason) {
+  return {
+    event: 'suggestion-expire',
+    profile_id: typeof asset.id === 'string' ? asset.id : '',
+    from: asset.from,
+    to: asset.to,
+    axis: asset.axis,
+    direction: asset.direction,
+    human_confirmed: false,
+    reason,
+  };
+}
+
+// suggestion-refresh 事件：人工触发「重新生成候选」的留痕（人工触发即确认）。
+export function refreshAuditEntry({ profileKey, from, to, axis, direction }) {
+  return {
+    event: 'suggestion-refresh',
+    profile_id: profileKey,
+    from,
+    to,
+    axis,
+    direction,
+    human_confirmed: true,
+  };
+}

package/lib/core/evolution-routes.mjs

@@ -0,0 +1,109 @@
+// lib/core/evolution-routes.mjs — 进化资产与候选管理路由处理：/evolution/assets 只读
+// 列表、/evolution/apply 应用写路径、/evolution/regenerate 重新生成候选、
+// /advice/save-profile 保存为方案、/settings/candidate 候选设置。loopback 与 CSRF
+// 守卫由 createHttpRoutes 入口统一完成，本模块只做 body 解析与响应组装。apply 拒绝
+// （400）回传原因与可选逐项 checks；成功回传新方案 id、资产状态与 persisted 信号。
+// apply 业务本体（三道闸/审计/锁）在 evolution-engine 内，本模块不触碰任何闸判定。
+
+import { sanitizeProfile } from './pure.mjs';
+import { computeAdvice } from './evolution-advice.mjs';
+import { lowerHyphen, sourceConfigFromKey } from './evolution-draft.mjs';
+import { json, readBody, persistOk } from './http-helpers.mjs';
+
+async function handleEvolutionAssets(deps, res) {
+  const assets = deps.evolution !== undefined && typeof deps.evolution.list === 'function' ? deps.evolution.list() : [];
+  return json(res, 200, { ok: true, assets });
+}
+
+async function handleEvolutionApply(deps, req, res) {
+  const body = await readBody(req);
+  const assetId = typeof body.assetId === 'string' ? body.assetId : '';
+  if (assetId === '') return json(res, 400, { ok: false, error: 'assetId 不能为空' });
+  if (deps.evolution === undefined || typeof deps.evolution.apply !== 'function') {
+    return json(res, 404, { ok: false, error: '进化 apply 引擎未装配' });
+  }
+  const result = await deps.evolution.apply({ assetId, humanConfirmed: body.human_confirmed === true });
+  if (!result.ok) {
+    const payload = { ok: false, error: result.reason };
+    if (result.checks !== undefined) payload.checks = result.checks;
+    return json(res, 400, payload);
+  }
+  return json(res, 200, {
+    ok: true,
+    id: result.id,
+    state: result.state,
+    persisted: result.persisted,
+    ...(result.persisted ? {} : { persistWarning: '已应用但未持久化' }),
+  });
+}
+
+// 候选设置写路径：更新模式（自动换新/手动维护）+ 有效期小时数（0 或 1~8760 整数）。
+// 校验失败 400；成功持久化并回传 persisted 信号与归一后的值。
+async function handleSettingsCandidate(deps, req, res) {
+  const body = await readBody(req);
+  const mode = body && typeof body.candidateMode === 'string' ? body.candidateMode : '';
+  const ttlH = body && typeof body.candidateTtlH === 'number' ? body.candidateTtlH : NaN;
+  if (mode !== 'auto' && mode !== 'manual') {
+    return json(res, 400, { ok: false, error: '候选更新模式无效（auto/manual）' });
+  }
+  if (!Number.isInteger(ttlH) || !(ttlH === 0 || (ttlH >= 1 && ttlH <= 8760))) {
+    return json(res, 400, { ok: false, error: '候选有效期无效（0 或 1~8760 小时整数）' });
+  }
+  const modePersist = deps.store.persistCandidateMode(mode);
+  const ttlPersist = deps.store.persistCandidateTtlH(ttlH);
+  const persisted = modePersist.persisted !== false && ttlPersist.persisted !== false;
+  return persistOk(res, {
+    candidateMode: deps.store.loadCandidateMode(),
+    candidateTtlH: deps.store.loadCandidateTtlH(),
+  }, { persisted });
+}
+
+// 重新生成候选（人工触发）：该身份键所有未处置候选先转 expired，再按当前建议
+// 产新一代；审计由引擎写 suggestion-refresh。无当前建议时只清理不产新候选。
+async function handleEvolutionRegenerate(deps, req, res) {
+  const body = await readBody(req);
+  const profileKey = body && typeof body.profileKey === 'string' ? body.profileKey : '';
+  if (profileKey === '') return json(res, 400, { ok: false, error: 'profileKey 不能为空' });
+  if (deps.evolution === undefined || typeof deps.evolution.regenerate !== 'function') {
+    return json(res, 404, { ok: false, error: '候选重新生成入口未装配' });
+  }
+  const computed = computeAdvice({ summariesFile: deps.summariesFile, dispatchFile: deps.dispatchFile, whitelist: deps.adviceWhitelist, logger: deps.logger });
+  const item = (Array.isArray(computed.advice) ? computed.advice : []).find((a) => a !== null && typeof a === 'object' && a.profileKey === profileKey);
+  const result = await deps.evolution.regenerate({ profileKey, advice: item !== undefined ? [item] : [], summaries: computed.summaries });
+  return json(res, 200, { ok: true, ...result });
+}
+
+// 保存为方案：把建议来源的当前派发配置（身份键可还原的预设/提供方/模型段）存成
+// 新方案，便于复用与对比。自定义人格与工具过滤原文未留存（台账只存存在性），
+// 不在新方案内。身份键无可还原字段时 400。
+async function handleAdviceSaveProfile(deps, req, res) {
+  const body = await readBody(req);
+  const profileKey = body && typeof body.profileKey === 'string' ? body.profileKey : '';
+  if (profileKey === '') return json(res, 400, { ok: false, error: 'profileKey 不能为空' });
+  const from = sourceConfigFromKey(profileKey, {});
+  const config = {};
+  for (const field of ['preset', 'provider', 'model']) {
+    if (typeof from[field] === 'string' && from[field] !== '') config[field] = from[field];
+  }
+  if (Object.keys(config).length === 0) {
+    return json(res, 400, { ok: false, error: '该配置无可保存字段（未指定预设/提供方/模型）' });
+  }
+  const slug = lowerHyphen(profileKey).slice(0, 24) || 'config';
+  const base = `advice-${slug}`.slice(0, 32);
+  const taken = new Set(deps.store.profiles.keys());
+  let id = base;
+  for (let attempt = 2; taken.has(id) && attempt <= 6; attempt += 1) {
+    id = `${base}-${attempt}`.slice(0, 32);
+  }
+  if (taken.has(id)) return json(res, 400, { ok: false, error: '方案编号冲突，无法保存' });
+  const name = slug.length > 0 ? `建议配置-${slug.slice(0, 16)}` : '建议配置';
+  const { clean, warnings } = sanitizeProfile({ ...config, id, name, description: '来自建议面板的配置快照（仅预设/模型/提供方；人格与工具过滤不落盘，按隐私设计）。便于复用与对比。' }, { strict: true });
+  if (warnings.length > 0) {
+    const detail = warnings.map((w) => `${w.field}：${w.reason}`).join('；');
+    return json(res, 400, { ok: false, error: `保存被拒绝：${detail}` });
+  }
+  deps.store.profiles.set(clean.id, { ...clean, persisted: true });
+  return persistOk(res, { id: clean.id, name: clean.name }, deps.store.persistProfiles());
+}
+
+export { handleEvolutionAssets, handleEvolutionApply, handleEvolutionRegenerate, handleAdviceSaveProfile, handleSettingsCandidate };

package/lib/core/http-helpers.mjs

@@ -0,0 +1,35 @@
+// lib/core/http-helpers.mjs — 设置 HTTP 路由的共享小助手（从 http-routes 逐字移出）：
+// JSON 响应、POST body 解析（1MB 上限）、persistOk 包装（persisted:false 时回传
+// 「已保存但未持久化」警示）。零依赖，多个路由模块共用。
+
+function json(res, code, data) {
+  res.writeHead(code, { 'Content-Type': 'application/json; charset=utf-8' });
+  res.end(JSON.stringify(data));
+}
+
+function readBody(req) {
+  return new Promise((resolve, reject) => {
+    let data = '';
+    let size = 0;
+    req.on('data', (chunk) => {
+      size += chunk.length;
+      if (size > 1 << 20) { reject(new Error('请求体过大')); req.destroy(); return; }
+      data += chunk;
+    });
+    req.on('end', () => {
+      try { resolve(data === '' ? {} : JSON.parse(data)); } catch { reject(new Error('请求体不是合法 JSON')); }
+    });
+    req.on('error', reject);
+  });
+}
+
+function persistOk(res, payload, persist) {
+  return json(res, 200, {
+    ok: true,
+    ...payload,
+    persisted: persist.persisted,
+    ...(persist.persisted ? {} : { persistWarning: '已保存但未持久化' }),
+  });
+}
+
+export { json, readBody, persistOk };

package/lib/core/http-routes.mjs

@@ -5,9 +5,11 @@
 import { sanitizeProfile } from './pure.mjs';
 import { BUILTIN_SEEDS } from './profiles-store.mjs';
 import { detectVersions } from './shims.mjs';
-import { readSummaries, computeAdvice } from './evolution-advice.mjs';
+import { readSummaries } from './evolution-advice.mjs';
 import { profileStatsFromSummaries } from './profile-directory.mjs';
 import { costSummaryFromSummaries } from './cost-evidence.mjs';
+import { json, readBody, persistOk } from './http-helpers.mjs';
+import { handleEvolutionAssets, handleEvolutionApply, handleEvolutionRegenerate, handleAdviceSaveProfile, handleSettingsCandidate } from './evolution-routes.mjs';
 
 // 只有 loopback 接口可以驱动设置 HTTP 路由。
 const LOOPBACKS = new Set(['127.0.0.1', '::1', '::ffff:127.0.0.1']);
@@ -19,36 +21,6 @@ const CSRF_HEADER = 'X-DSH-Plugin';
 const CSRF_HEADER_KEY = CSRF_HEADER.toLowerCase();
 const CSRF_HEADER_VALUE = 'dsh-subagent-profile';
 
-function json(res, code, data) {
-  res.writeHead(code, { 'Content-Type': 'application/json; charset=utf-8' });
-  res.end(JSON.stringify(data));
-}
-
-function readBody(req) {
-  return new Promise((resolve, reject) => {
-    let data = '';
-    let size = 0;
-    req.on('data', (chunk) => {
-      size += chunk.length;
-      if (size > 1 << 20) { reject(new Error('请求体过大')); req.destroy(); return; }
-      data += chunk;
-    });
-    req.on('end', () => {
-      try { resolve(data === '' ? {} : JSON.parse(data)); } catch { reject(new Error('请求体不是合法 JSON')); }
-    });
-    req.on('error', reject);
-  });
-}
-
-function persistOk(res, payload, persist) {
-  return json(res, 200, {
-    ok: true,
-    ...payload,
-    persisted: persist.persisted,
-    ...(persist.persisted ? {} : { persistWarning: '已保存但未持久化' }),
-  });
-}
-
 function listClean(store, stats) {
   const map = stats instanceof Map ? stats : new Map();
   return [...store.profiles.values()].map((profile) => {
@@ -72,18 +44,24 @@ async function handleList(deps, res) {
   let costSummary = { global: null, byModel: [] };
   let advice = [];
   let adviceGlobal = null;
+  let evolutionCandidates = [];
+  let adviceDetails = {};
   try {
     if (typeof deps.refreshAdvice === 'function') deps.refreshAdvice();
     const summaries = typeof deps.summariesFile === 'string' ? readSummaries(deps.summariesFile, deps.logger) : null;
     stats = profileStatsFromSummaries(deps.store, summaries);
     costSummary = costSummaryFromSummaries(summaries);
-    if (deps.adviceWhitelist !== undefined && typeof deps.dispatchFile === 'string') {
-      const result = computeAdvice({ summariesFile: deps.summariesFile, dispatchFile: deps.dispatchFile, whitelist: deps.adviceWhitelist, logger: deps.logger });
+    if (deps.adviceWhitelist !== undefined && typeof deps.dispatchFile === 'string' && typeof deps.adviceSource === 'function') {
+      // 建议 + 候选生成统一走装配层 helper（computeAdvice 之后推导候选资产），
+      // 避免 /list 与其它消费点重复生成；候选随建议链开关同生共死。
+      const result = await deps.adviceSource();
       advice = result.advice ?? [];
       adviceGlobal = result.global ?? null;
+      evolutionCandidates = Array.isArray(result.candidates) ? result.candidates : [];
+      adviceDetails = result.adviceDetails !== null && typeof result.adviceDetails === 'object' ? result.adviceDetails : {};
     }
   } catch { /* 统计/建议是增量展示；失败不影响 /list 主响应 */ }
-  return json(res, 200, { ok: true, profiles: listClean(deps.store, stats), costSummary, advice, adviceGlobal });
+  return json(res, 200, { ok: true, profiles: listClean(deps.store, stats), costSummary, advice, adviceGlobal, evolutionCandidates, adviceDetails });
 }
 
 // 轻量摘要：enabled/advice 开关/模型目录/预设名册/审计分级。
@@ -98,6 +76,8 @@ async function handleSummary(deps, res) {
     audit: deps.getAudit(),
     escapeEnabled: deps.getEscapeEnabled(),
     escapePresets: deps.escape.list(),
+    candidateMode: deps.store.loadCandidateMode(),
+    candidateTtlH: deps.store.loadCandidateTtlH(),
   });
 }
 
@@ -386,6 +366,11 @@ async function routeRequest(deps, req, res, url, sub) {
   if (req.method === 'POST' && sub === '/draft/apply') return handleDraftApply(deps, req, res);
   if (req.method === 'POST' && sub === '/draft/remove') return handleDraftRemove(deps, req, res);
   if (req.method === 'POST' && sub === '/draft/preview') { const body = await readBody(req); return json(res, 200, { ok: true, ...(await deps.previewDraft(body)) }); }
+  if (req.method === 'GET' && sub === '/evolution/assets') return handleEvolutionAssets(deps, res);
+  if (req.method === 'POST' && sub === '/evolution/apply') return handleEvolutionApply(deps, req, res);
+  if (req.method === 'POST' && sub === '/evolution/regenerate') return handleEvolutionRegenerate(deps, req, res);
+  if (req.method === 'POST' && sub === '/advice/save-profile') return handleAdviceSaveProfile(deps, req, res);
+  if (req.method === 'POST' && sub === '/settings/candidate') return handleSettingsCandidate(deps, req, res);
   if (req.method === 'POST' && sub === '/options/refresh') return handleRefresh(deps, res);
   if (req.method === 'POST' && sub === '/set-enabled') return handleSetEnabled(deps, req, res);
   if (req.method === 'POST' && sub === '/set-evolution-advice') return handleSetEvolutionAdvice(deps, req, res);
@@ -400,8 +385,8 @@ async function routeRequest(deps, req, res, url, sub) {
   json(res, 404, { ok: false, error: `未知路由 ${sub}` });
 }
 
-export function createHttpRoutes({ webServer, store, getEnabled, setEnabled, syncTool, catalog, ledger, backgroundLedger, draftsStore, applyDraft, getAudit, getEvolutionAdvice, setEvolutionAdvice, getEscapeEnabled, setEscapeEnabled, escape, refreshAdvice, summariesFile, dispatchFile, adviceWhitelist, previewDraft, reminderStore, logger }) {
-  const deps = { store, getEnabled, setEnabled, syncTool, catalog, ledger, backgroundLedger, draftsStore, applyDraft, getAudit, getEvolutionAdvice, setEvolutionAdvice, getEscapeEnabled, setEscapeEnabled, escape, refreshAdvice, summariesFile, dispatchFile, adviceWhitelist, previewDraft, reminderStore, logger };
+export function createHttpRoutes({ webServer, store, getEnabled, setEnabled, syncTool, catalog, ledger, backgroundLedger, draftsStore, applyDraft, getAudit, getEvolutionAdvice, setEvolutionAdvice, getEscapeEnabled, setEscapeEnabled, escape, refreshAdvice, summariesFile, dispatchFile, adviceWhitelist, previewDraft, reminderStore, adviceSource, evolution, logger }) {
+  const deps = { store, getEnabled, setEnabled, syncTool, catalog, ledger, backgroundLedger, draftsStore, applyDraft, getAudit, getEvolutionAdvice, setEvolutionAdvice, getEscapeEnabled, setEscapeEnabled, escape, refreshAdvice, summariesFile, dispatchFile, adviceWhitelist, previewDraft, reminderStore, adviceSource, evolution, logger };
   const handler = async (req, res) => {
     const remote = req.socket?.remoteAddress;
     if (!LOOPBACKS.has(remote)) return json(res, 403, { ok: false, error: '仅限本机访问' });

package/lib/core/profile-provider.mjs

@@ -30,6 +30,7 @@ import { computeEffectiveAllow } from './intersection.mjs';
 import { resolveWhitelist } from './whitelist.mjs';
 import { assertCostGuard } from './cost-guard.mjs';
 import { DELEGATION_CONTEXT, buildDispatchMeta } from './delegation.mjs';
+import { readSessionEvents } from './session-read.mjs';
 
 // --- start 预检段（从 start 拆出）-------------------------------------------------
 
@@ -195,7 +196,7 @@ function restrictChildTools(childCtx, parent, profile) {
 // 已取消时 result 闭包跳过 followup。
 function wireChildLifecycle(handle, request, childId, swapPreset, profile, logger) {
   const child = handle.agent;
-  const boundary = child.session.events.length;
+  const boundary = readSessionEvents(child.session).length;
   const flags = { cancelled: false };
   const onAbort = () => {
     flags.cancelled = true;

package/lib/core/profiles-store.mjs

@@ -167,11 +167,19 @@ function persistProfiles(state, logger) {
 
 // 插件开关态（state.json）：enabled（默认开，禁用即关派发工具）+ evolutionAdvice
 // （派发优化建议注入，默认关，需显式开）+ escapeEnabled（逃生舱放行，默认关——信任
-// 底板，仅设置页显式 opt-in 可放开）。三开关共用同一 state.json，读写整份对象
-// 以互不覆盖；缺失文件回退默认值（全新部署），损坏文件 fail-closed（三开关全关，
-// 绝不静默回退 enabled:true —— 安全禁用会被撤销），内存态仍驱动本进程。
-const STATE_DEFAULTS = { enabled: true, evolutionAdvice: false, escapeEnabled: false };
-const STATE_FAIL_CLOSED = { enabled: false, evolutionAdvice: false, escapeEnabled: false };
+// 底板，仅设置页显式 opt-in 可放开）+ applyEnabled（进化候选生成与应用写路径，默认
+// 关——应用能力只由人显式开启）+ candidateMode/candidateTtlH（候选方案更新策略与
+// 有效期，用户可配置）。开关共用同一 state.json，读写整份对象以互不覆盖；
+// 缺失文件回退默认值（全新部署），损坏文件 fail-closed（全关，绝不静默回退
+// enabled:true —— 安全禁用会被撤销），内存态仍驱动本进程。
+const STATE_DEFAULTS = { enabled: true, evolutionAdvice: false, escapeEnabled: false, applyEnabled: false, candidateMode: 'auto', candidateTtlH: 24 };
+const STATE_FAIL_CLOSED = { enabled: false, evolutionAdvice: false, escapeEnabled: false, applyEnabled: false, candidateMode: 'auto', candidateTtlH: 24 };
+
+// 候选有效期小时数归一：0（不自动过期）或 1~8760（一年内）的整数原样保留，
+// 其余值回退默认 24 小时（读取与写入共用同一口径，防坏值落盘）。
+function validCandidateTtlH(value) {
+  return typeof value === 'number' && Number.isInteger(value) && (value === 0 || (value >= 1 && value <= 8760)) ? value : 24;
+}
 
 function loadState(state) {
   if (!existsSync(state.stateFile)) return { ...STATE_DEFAULTS };
@@ -182,6 +190,9 @@ function loadState(state) {
       enabled: parsed.enabled !== false,
       evolutionAdvice: parsed.evolutionAdvice === true,
       escapeEnabled: parsed.escapeEnabled === true,
+      applyEnabled: parsed.applyEnabled === true,
+      candidateMode: parsed.candidateMode === 'manual' ? 'manual' : 'auto',
+      candidateTtlH: validCandidateTtlH(parsed.candidateTtlH),
     };
   } catch (error) {
     // fail-closed（S2）：损坏的 state.json 若回退 enabled:true，会把「安全禁用」静默撤销。
@@ -246,6 +257,13 @@ export function createProfileStore({ dshHome, logger, onGovernanceFailure = () =
     persistEvolutionAdvice: (value) => persistState(state, { evolutionAdvice: value === true }, onGovernanceFailure),
     loadEscapeEnabled: () => loadState(state).escapeEnabled,
     persistEscapeEnabled: (value) => persistState(state, { escapeEnabled: value === true }, onGovernanceFailure),
+    loadApplyEnabled: () => loadState(state).applyEnabled,
+    persistApplyEnabled: (value) => persistState(state, { applyEnabled: value === true }, onGovernanceFailure),
+    // 候选更新策略与有效期（state.json 同源读写，坏值归一默认）。
+    loadCandidateMode: () => loadState(state).candidateMode,
+    persistCandidateMode: (value) => persistState(state, { candidateMode: value === 'manual' ? 'manual' : 'auto' }, onGovernanceFailure),
+    loadCandidateTtlH: () => loadState(state).candidateTtlH,
+    persistCandidateTtlH: (value) => persistState(state, { candidateTtlH: validCandidateTtlH(value) }, onGovernanceFailure),
     // getAllowFailOpen：cost guard 必须在派发时读取迁移标志；
     // loadProfiles/persistProfiles 持有该写入。
     getAllowFailOpen: () => state.allowFailOpen,

package/lib/core/session-read.mjs

@@ -0,0 +1,17 @@
+// lib/core/session-read.mjs — 会话事件统一读取口（双轨兼容）。
+//
+// 读取会话事件的两个不兼容环境：
+//   * 稳定线：session.events 是数组（本插件当前发布环境的形状）；
+//   * 新线：session.events 属性被移除，改为按需读取 session.snapshotEvents()。
+// 直接改成新 API 会让稳定线崩溃；直接保留旧读法会在新线崩溃。因此本 helper
+// 逐次 feature-detect：events 数组优先，snapshotEvents() 其次，两轨都不可用
+// 时返回空数组（fall-soft，绝不抛出）。
+//
+// 返回语义：稳定线分支返回 session.events 原数组引用（不拷贝），保持既有
+// identity 语义与零开销；新线分支返回 snapshotEvents() 的返回值（默认全量快照）。
+export function readSessionEvents(session) {
+  if (session === null || session === undefined) return [];
+  if (Array.isArray(session.events)) return session.events;
+  if (typeof session.snapshotEvents === 'function') return session.snapshotEvents();
+  return [];
+}

package/lib/core/shims.mjs

@@ -23,6 +23,7 @@ import { createRequire } from 'node:module';
 // 导出缺失会在 apply 能运行之前就以明确错误中止模块加载——这正是本类存在的隔离。
 import { assertSubagentMaxDepth, resolveChildDepth } from '@deepseek-ai/dsh-subagent';
 import { toStopReason } from './pure.mjs';
+import { readSessionEvents } from './session-read.mjs';
 
 // warn：模块顶层没有 ctx / logger，降级用 console.warn。
 // 前缀让来源在共享宿主日志中可辨认。
@@ -162,7 +163,7 @@ const [foldConsumedWork, finalAssistantOutput, createUserMessage, appendDelegate
 // finalAssistantOutput（最后一个非空 assistant/message，否则拼接的 text-delta
 // 分片，再否则 undefined -> []）。
 function readResult(child, boundary, cancelled) {
-  const own = child.session.events.slice(boundary);
+  const own = readSessionEvents(child.session).slice(boundary);
   const end = foldConsumedWork(own).end;
   const recorded = toStopReason(end?.data.reason);
   const stopReason = cancelled && recorded !== 'completed' ? 'aborted' : recorded;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-subagent-profile",
-  "version": "0.3.4",
+  "version": "0.4.0",
   "description": "DeepSeek Harness 子 Agent 派发插件：按任务为子代理选模型、推理强度与工具范围，常用组合存成命名方案随时复用；内置安全检查、成本估算与节省分析、完整决策台账。",
   "repository": {
     "type": "git",