dsh-subagent-profile 0.3.4 → 0.5.0

package/README.md

@@ -6,6 +6,7 @@
   <img alt="License: MIT" src="https://img.shields.io/badge/License-MIT-yellow.svg" />
   <img alt="npm" src="https://img.shields.io/npm/v/dsh-subagent-profile.svg" />
   <img alt="DSH" src="https://img.shields.io/badge/DSH-0.1.0--rc.6%20~%200.2.0-blue.svg" />
+  <img alt="awesome · DSH plugin" src="https://awesome-dsh-plugin.com/badge.svg" />
 </div>
 
 <div align="center">English · <a href="README.zh.md">中文</a></div>
@@ -18,13 +19,15 @@ For [DeepSeek Harness](https://github.com/deepseek-ai/dsh) (DSH).
 
 | | Built-in `subagent` | `dsh-subagent-profile` |
 |---|---|---|
-| Per-subtask model / preset | ❌ same brain for every subtask | ✅ pick per subtask |
+| Per-subtask model / preset | ✅ optional `provider` / `model` / `reasoning_effort` (after enabling model selection) | ✅ one profile bundles preset + model + effort + tool scope + budget; overridable per call |
 | Reusable named setups | ❌ | ✅ profiles |
 | Tool-scope narrowing | ❌ | ✅ whitelist ∩ parent, `run_code` always removed |
 | Safety checks | ❌ | ✅ whitelist / cost / intersection / approval / budget, all recorded |
 | Cost visibility | ❌ | ✅ per-dispatch estimate + savings comparison |
-| Decision ledger | ❌ | ✅ full trace: request vs. effective, gates, execution, settlement |
+| Decision ledger | ❌ | ✅ full trace: request vs. effective, checks, execution, settlement |
 | GUI management | ❌ | ✅ settings page + per-session ledger tab |
+| Performance-based suggestions | ❌ | ✅ confirm to apply, undo anytime |
+| Official model-selection interplay | ✅ enforced natively once enabled | ✅ dispatch follows the same whitelist (out-of-range routes are rejected) |
 
 ## Installation
 
@@ -33,7 +36,7 @@ dsh plugin --profile web add dsh-subagent-profile        # published package
 dsh plugin --profile web add ./dsh-subagent-profile      # from a local checkout
 ```
 
-Restart `dsh web`. This is a standard **bundle plugin**: it provides the `dispatch` tool, the profile provider, the `subagent-profiles` service, the `/subagent-profiles/*` loopback management routes, the settings page (「子 Agent 方案」), the per-session ledger tab, and the `dispatch` tool-call card in the web GUI. On startup it also **self-installs an agent preset** — **`orchestrator`** (「编排者模式」) — pick it in the new-session preset picker. The sync is idempotent and re-runs on every startup, so upgrading the plugin updates the preset.
+Restart `dsh web`. This is a standard **bundle plugin**: it provides the `dispatch` tool, the profile provider, the `subagent-profiles` service, the `/subagent-profiles/*` loopback management routes, the settings page (「子 Agent 方案」), the per-session ledger tab, and the `dispatch` tool-call card in the web GUI. On startup it also **self-installs an agent preset** — **`orchestrator-v2`** (「编排者模式 V2」) — pick it in the new-session preset picker. The sync is idempotent and re-runs on every startup, so upgrading the plugin updates the preset.
 
 ## Usage
 
@@ -94,14 +97,16 @@ Delegation never lets a subagent gain more power than you already have — this
   - `summaries.json` — aggregated per-profile statistics (versioned, rebuilt on corruption).
   - `adopted-state.json` — adoption verdict state for child results (cross-restart).
   - `reminders.json` — reminder store (one reminder = one audit record).
-- `~/.dsh/.agent-presets/orchestrator/` — the self-installed `orchestrator` agent preset (synced from the bundled `presets/orchestrator/` on every startup).
+- `~/.dsh/.agent-presets/orchestrator-v2/` — the self-installed `orchestrator-v2` agent preset (synced from the bundled `presets/orchestrator-v2/` on every startup).
 
-`DSH_HOME` is respected and defaults to `~/.dsh`. Uninstalling the plugin removes the data files above and the self-installed `orchestrator` preset directory (other plugins' presets are left untouched); re-installing or re-launching re-syncs the preset and regenerates the data files.
+`DSH_HOME` is respected and defaults to `~/.dsh`. Uninstalling the plugin removes the data files above and the self-installed `orchestrator-v2` preset directory (other plugins' presets are left untouched); re-installing or re-launching re-syncs the preset and regenerates the data files.
 
 ## Known limitations
 
 - **Background dispatch** requires `@deepseek-ai/dsh-jobs` and `@deepseek-ai/dsh-tool-jobs` to be loaded; otherwise it fails with "dispatch: 后台派发不可用：缺少 jobs 服务".
 - **Continuable mode** goes through the DSH standard composition path, so the `preset` swap and `reasoningEffort` are ignored (the child inherits the parent preset at the default reasoning effort).
+- **Continuable follow-ups** are delivered through the official `send_message` channel (the plugin drives the child via the official child handle).
+- **Official model selection is a web-line feature**: the session policy for the built-in subagent tools ships with the web app and is not available in headless deployments. In production it is off by default and must be enabled before it takes effect.
 - **Who decides the child's final tool set depends on the mode**:
   - Continuable: narrowed by this plugin up front — the child's `allow` = (parent tool set − `run_code` − `deny`) ∩ `allow`. Assumption: continuable inherits the parent preset, so the child's tool set ≈ the parent's; if dsh's behavior changes so the two differ (e.g. a future preset swap composing a different tool set), tool narrowing fails with a hard error (conservatively safe — never silently granting more), to be replaced with a true parent ∩ child intersection once dsh provides an official seam.
   - One-shot: decided by dsh; the plugin cannot read the final restricted result and the card reports "tools are finally granted by the system".
@@ -145,7 +150,7 @@ dsh-subagent-profile/
 │       ├── profile-directory.mjs # read-only profile directory (for the model)
 │       ├── profiles-store.mjs    # profile registry store + switch persistence
 │       └── whitelist.mjs         # system-trust preset whitelist
-├── presets/orchestrator/         # bundled "orchestrator" agent preset (self-installed, synced on every startup)
+├── presets/orchestrator-v2/      # bundled "orchestrator-v2" agent preset (self-installed, synced on every startup)
 ├── cordis.patch.yml              # bundle patch: inserts the plugin row into the host composition
 ├── .gitea/workflows/ci.yml       # bare-CI (Gitea Actions; needs an Act runner on the server)
 ├── package.json                  # metadata, files whitelist, exports (test / test:bare / preflight scripts)
@@ -154,7 +159,7 @@ dsh-subagent-profile/
 │   └── leak-scan.mjs             # public-release gate: scans all history + worktree for sensitive patterns
 ├── docs/
 │   └── screenshots/              # README screenshots
-├── test/                         # host-side tests (node:test, zero extra deps; 438 cases)
+├── test/                         # host-side tests (node:test, zero extra deps)
 │   ├── README.md / README.zh.md  # test directory guide (EN/ZH) — two-tier split explained
 │   ├── harness/ctx.mjs           # fake Cordis ctx + ~/.dsh isolation
 │   ├── pure / input-schema / catalog-integrity.test.mjs   # bare tier (import-free, runs in bare CI)
@@ -173,7 +178,7 @@ If this plugin has been useful to you, please give it a ⭐ on GitHub — it hel
 
 ## Credits
 
-The bundled `orchestrator` agent preset was inspired by [dsh-liangshen](https://github.com/zhu1090093659/dsh-web-ui/tree/main/packages/dsh-liangshen) (梁神模式) from [dsh-web-ui](https://github.com/zhu1090093659/dsh-web-ui), licensed under Apache-2.0. Thanks to its author for the great work.
+The bundled `orchestrator-v2` agent preset was inspired by [dsh-liangshen](https://github.com/zhu1090093659/dsh-web-ui/tree/main/packages/dsh-liangshen) (梁神模式) from [dsh-web-ui](https://github.com/zhu1090093659/dsh-web-ui), licensed under Apache-2.0. Thanks to its author for the great work.
 
 ## License
 

package/README.zh.md

@@ -6,6 +6,7 @@
   <img alt="License: MIT" src="https://img.shields.io/badge/License-MIT-yellow.svg" />
   <img alt="npm" src="https://img.shields.io/npm/v/dsh-subagent-profile.svg" />
   <img alt="DSH" src="https://img.shields.io/badge/DSH-0.1.0--rc.6%20~%200.2.0-blue.svg" />
+  <img alt="awesome · DSH plugin" src="https://awesome-dsh-plugin.com/badge.svg" />
 </div>
 
 <div align="center"><a href="README.md">English</a> · 中文</div>
@@ -18,13 +19,15 @@
 
 | | 内置 `subagent` | `dsh-subagent-profile` |
 |---|---|---|
-| 按子任务选模型/预设 | ❌ 每个子任务同一个「大脑」 | ✅ 按任务逐个指定 |
+| 按子任务选模型/预设 | ✅ 可选 `provider` / `model` / `reasoning_effort`（需先启用模型选择） | ✅ 方案级 profile：预设+模型+推理强度+工具范围+预算一捆，per-call 可覆盖 |
 | 可复用的命名方案 | ❌ | ✅ 方案（profile） |
 | 工具范围收敛 | ❌ | ✅ 白名单 ∩ 父会话，`run_code` 恒移除 |
 | 派发前安全检查 | ❌ | ✅ 白名单/成本/交集/审批/预算，全程记录 |
 | 成本可见 | ❌ | ✅ 每次派发的成本估算 + 节省对照 |
-| 派发决策台账 | ❌ | ✅ 请求vs生效、检查结果、执行、结算全留痕 |
+| 派发决策台账 | ❌ | ✅ 请求 vs 生效、检查结果、执行、结算全留痕 |
 | 界面管理 | ❌ | ✅ 设置页 + 会话内台账标签页 |
+| 基于表现的改进建议 | ❌ | ✅ 确认后应用 · 随时撤销 |
+| 官方模型选择联动 | ✅ 启用后由官方工具自身校验 | ✅ 官方启用后派发遵循同一白名单（越界路由直接拒绝） |
 
 ## 安装
 
@@ -33,7 +36,7 @@ dsh plugin --profile web add dsh-subagent-profile        # 发布包
 dsh plugin --profile web add ./dsh-subagent-profile      # 本地源码
 ```
 
-重启 `dsh web`。这是一个标准的 **bundle 插件**：提供 `dispatch` 工具、方案提供者、`subagent-profiles` 服务、`/subagent-profiles/*` 回环管理路由、设置页（「子 Agent 方案」）、会话内派发决策台账标签页，以及 web 界面中的 `dispatch` 工具卡片。启动时还会**自动安装一个 agent 预设**——**`orchestrator`**（「编排者模式」）——在新会话的预设选择器里选用。同步是幂等的且每次启动重跑，升级插件即更新预设。
+重启 `dsh web`。这是一个标准的 **bundle 插件**：提供 `dispatch` 工具、方案提供者、`subagent-profiles` 服务、`/subagent-profiles/*` 回环管理路由、设置页（「子 Agent 方案」）、会话内派发决策台账标签页，以及 web 界面中的 `dispatch` 工具卡片。启动时还会**自动安装一个 agent 预设**——**`orchestrator-v2`**（「编排者模式 V2」）——在新会话的预设选择器里选用。同步是幂等的且每次启动重跑，升级插件即更新预设。
 
 ## 使用
 
@@ -94,14 +97,16 @@ dispatch(
   - `summaries.json` —— 按方案聚合的统计（带版本号，损坏自动重建）。
   - `adopted-state.json` —— 子结果采纳判定状态（跨重启）。
   - `reminders.json` —— 提醒存储（一条提醒 = 一条审计记录）。
-- `~/.dsh/.agent-presets/orchestrator/` —— 自动安装的 `orchestrator` 预设（每次启动从内置 `presets/orchestrator/` 同步）。
+- `~/.dsh/.agent-presets/orchestrator-v2/` —— 自动安装的 `orchestrator-v2` 预设（每次启动从内置 `presets/orchestrator-v2/` 同步）。
 
-尊重 `DSH_HOME` 环境变量（默认 `~/.dsh`）。卸载插件会移除上述数据文件与自动安装的 `orchestrator` 预设目录（其他插件的预设不动）；重装或重启会重新同步预设并重建数据文件。
+尊重 `DSH_HOME` 环境变量（默认 `~/.dsh`）。卸载插件会移除上述数据文件与自动安装的 `orchestrator-v2` 预设目录（其他插件的预设不动）；重装或重启会重新同步预设并重建数据文件。
 
 ## 已知限制
 
 - **后台派发**需要 `@deepseek-ai/dsh-jobs` 与 `@deepseek-ai/dsh-tool-jobs` 已加载；否则报「dispatch: 后台派发不可用：缺少 jobs 服务」。
 - **持久（continuable）模式**走 DSH 标准组合路径，`preset` 换用与 `reasoningEffort` 会被忽略（子代理继承父预设与默认推理强度）。
+- **持久模式的后续轮次走官方 `send_message`**（插件通过官方子代理句柄驱动后续对话）。
+- **官方模型选择是 web 线功能**：内置 subagent 工具的会话策略随 web 应用提供，headless 部署没有；生产默认未启用，需手动开启后才会生效。
 - **子代理的最终工具集由谁决定，取决于模式**：
   - 持久（continuable）模式：由本插件预先收敛——子代理 `allow` =（父工具集 − `run_code` − `deny`）∩ `allow`。前提假设：持久模式沿用父会话预设，故子工具集与父会话基本一致；一旦 dsh 的行为变化导致两者不同（如未来支持预设换用后组合出不同工具集），工具收敛会**直接报错拒绝**（保守安全，绝不静默放行），待 dsh 官方提供相应接口后替换为真正的父 ∩ 子交集。
   - 一次性模式：由 dsh 决定，插件读不到最终受限结果；卡片显示「工具由系统最终授予」。
@@ -145,7 +150,7 @@ dsh-subagent-profile/
 │       ├── profile-directory.mjs # 只读方案目录（供模型参考）
 │       ├── profiles-store.mjs    # 方案注册表存储 + 开关持久化
 │       └── whitelist.mjs         # system-trust 预设白名单
-├── presets/orchestrator/         # 内置「orchestrator」预设（自动安装，每次启动同步）
+├── presets/orchestrator-v2/      # 内置「orchestrator-v2」预设（自动安装，每次启动同步）
 ├── cordis.patch.yml              # bundle patch：把插件行插入宿主组合
 ├── .gitea/workflows/ci.yml       # bare-CI（Gitea Actions；需服务器上的 Act runner）
 ├── package.json                  # 元数据、files 白名单、exports（test / test:bare / preflight 脚本）
@@ -154,7 +159,7 @@ dsh-subagent-profile/
 │   └── leak-scan.mjs             # 公开发布门：扫描全历史与工作区的敏感模式
 ├── docs/
 │   └── screenshots/              # README 截图
-├── test/                         # 宿主侧测试（node:test，零额外依赖；438 用例）
+├── test/                         # 宿主侧测试（node:test，零额外依赖）
 │   ├── README.md / README.zh.md  # 测试目录指南（中英）——两层拆分说明
 │   ├── harness/ctx.mjs           # 假 Cordis ctx + ~/.dsh 隔离
 │   ├── pure / input-schema / catalog-integrity.test.mjs   # bare 层（免导入，bare CI 可跑）
@@ -173,7 +178,7 @@ dsh-subagent-profile/
 
 ## 致谢
 
-内置的 `orchestrator` 预设灵感来自 [dsh-web-ui](https://github.com/zhu1090093659/dsh-web-ui) 的 [dsh-liangshen](https://github.com/zhu1090093659/dsh-web-ui/tree/main/packages/dsh-liangshen)（梁神模式），Apache-2.0 许可。感谢作者。
+内置的 `orchestrator-v2` 预设灵感来自 [dsh-web-ui](https://github.com/zhu1090093659/dsh-web-ui) 的 [dsh-liangshen](https://github.com/zhu1090093659/dsh-web-ui/tree/main/packages/dsh-liangshen)（梁神模式），Apache-2.0 许可。感谢作者。
 
 ## 许可
 

package/index.mjs

@@ -1,7 +1,5 @@
 // index.mjs — dsh-subagent-profile 宿主侧插件 bundle（只做装配）。宿主导入面收敛在
-// lib/core/shims.mjs，装配块按模块拆分驻留 lib/core/；apply 的装配辅助函数保持
-// section 文本与门控逐字不变，`enabled` 始终经 getter 注入（门控读取当前值）。
-
+// lib/core/shims.mjs，装配块按模块拆分驻留 lib/core/；`enabled` 经 getter 实时读取。
 import { readdirSync, renameSync, rmSync } from 'node:fs';
 import { createRequire } from 'node:module';
 import { join } from 'node:path';
@@ -22,13 +20,17 @@ import { createDraftsStore } from './lib/core/drafts-store.mjs';
 import { assessDraftProfile } from './lib/core/draft-gates.mjs';
 import { createEscapeStore, recordEscapeAllowProvider } from './lib/core/escape.mjs';
 import { resolveWhitelist, FALLBACK_WHITELIST } from './lib/core/whitelist.mjs';
-import { profileDirectoryRows, profileStatsFromSummaries, applyProfileStats } from './lib/core/profile-directory.mjs';
-import { buildAdviceText, refreshSummaries, readSummaries } from './lib/core/evolution-advice.mjs';
+import { readModelSelectionPolicy } from './lib/core/model-policy.mjs';
+import { profileSectionText } from './lib/core/profile-directory.mjs';
+import { createProfilesQueryTool } from './lib/core/profiles-query.mjs';
+import { budgetSectionText } from './lib/core/dispatch-gates.mjs';
+import { refreshSummaries } from './lib/core/evolution-advice.mjs';
+import { createEvolutionAssembly } from './lib/core/evolution-engine.mjs';
 
 export const name = 'dsh-subagent-profile';
 export const inject = ['subagents', 'tools', 'agents'];
 
-// 自装 bundled 的 "orchestrator" 预设到 agent-presets 根（与官方自安装相同）。
+// 自装 bundled 的 "orchestrator-v2" 预设到 agent-presets 根（与官方自安装相同）。
 // 幂等：字节一致跳过、bundle 变更重写；fail-soft：写入被拒时工具与设置页照常工作。
 function syncBundledPresetsToHome(ctx) {
   try {
@@ -36,21 +38,21 @@ function syncBundledPresetsToHome(ctx) {
     const sync = syncBundledPresets(presetRoot);
     for (const { id, error } of sync.failed) ctx.logger.warn(`[dsh-subagent-profile] preset ${id} sync failed: ${error}`);
     if (sync.synced.length > 0) ctx.logger.info(`[dsh-subagent-profile] presets synced into ${presetRoot}: ${sync.synced.join(', ')}`);
+    if (sync.archived.length > 0) ctx.logger.info(`[dsh-subagent-profile] legacy preset archived into ${presetRoot}: ${sync.archived.join(', ')}`);
     if (sync.userModified.length > 0) ctx.logger.warn(`[dsh-subagent-profile] presets left untouched (user-modified): ${sync.userModified.join(', ')}`);
   } catch (error) {
     ctx.logger.warn('[dsh-subagent-profile] preset sync failed:', error instanceof Error ? error.message : String(error));
   }
 }
 
-// 卸载清理：本插件 3 个数据文件 + orchestrator 预设目录改名备份（effect 清理器
-// 在禁用/热重载/退出时都可能触发，硬删除会静默丢用户数据）。备份保留可恢复副本；
-// 规范路径清空后重启按需重建。fail-soft：改名失败不抛。
+// 卸载清理：本插件 3 个数据文件 + orchestrator-v2 预设目录改名备份（effect 清理器
+// 在禁用/热重载/退出时都可能触发；硬删除会静默丢用户数据）。fail-soft：改名失败不抛。
 function removeOwnedData(home) {
   const stamp = Date.now();
   for (const file of ['subagent-profiles.json', 'subagent-profiles.state.json', 'subagent-profiles.failed-traces.json']) {
     try { renameSync(join(home, file), join(home, `${file}.removed-${stamp}`)); } catch { /* 源不存在（正常首启）等：best effort */ }
   }
-  try { renameSync(join(home, '.agent-presets', 'orchestrator'), join(home, '.agent-presets', `orchestrator.removed-${stamp}`)); } catch { /* best effort */ }
+  try { renameSync(join(home, '.agent-presets', 'orchestrator-v2'), join(home, '.agent-presets', `orchestrator-v2.removed-${stamp}`)); } catch { /* best effort */ }
 }
 
 // 启动清理 .removed-* 备份残留（只清本插件前缀，防热重载反复产生新备份积累）；
@@ -63,7 +65,7 @@ function cleanRemovedBackups(home) {
       try {
         if (name.startsWith('subagent-profiles.') && name.includes('.removed-')) {
           rmSync(join(dir, name), { force: true });
-        } else if (name.startsWith('orchestrator.removed-')) {
+        } else if (name.startsWith('orchestrator-v2.removed-')) {
           rmSync(join(dir, name), { recursive: true, force: true });
         }
       } catch { /* best effort */ }
@@ -81,16 +83,16 @@ function setupAdoptionTracker(ctx, home, getRefreshAdvice, onUnadopted) {
     onDecision: () => { try { getRefreshAdvice()(); } catch { /* 聚合重算失败不影响判定（fail-soft） */ } },
     onDecided: onUnadopted,
   });
-  const onSessionEvent = (session, event) => adoptionTracker.handleEvent(session, event);
-  ctx.on('session/event', onSessionEvent);
+  const onSessionEvent = (session, event) => adoptionTracker.handleEvent(session, event); ctx.on('session/event', onSessionEvent);
   ctx.effect(() => () => { ctx.off('session/event', onSessionEvent); adoptionTracker.dispose(); });
   return adoptionTracker;
 }
 
 // 卸载接线：注销工具 + 清空台账 + 级联取消 + 删数据文件与预设目录。agent/disposed
 // 挂钩按父释放并发/token 记账，并把该父会话未决采纳判定判「明确未采纳」。
-function registerTeardown(ctx, dispatch, ledger, guard, home, backgroundLedger, adoptionTracker) {
+function registerTeardown(ctx, dispatch, profilesQuery, ledger, guard, home, backgroundLedger, adoptionTracker) {
   ctx.effect(() => dispatch.dispose);
+  ctx.effect(() => profilesQuery.dispose);
   ctx.effect(() => ledger.clear);
   ctx.effect(() => backgroundLedger.clear);
   ctx.effect(() => () => {
@@ -100,10 +102,7 @@ function registerTeardown(ctx, dispatch, ledger, guard, home, backgroundLedger,
   });
   const onAgentDisposed = ({ agent }) => {
     const parentSessionId = agent?.session?.header?.id;
-    if (parentSessionId !== undefined && parentSessionId !== null && parentSessionId !== '') {
-      guard.resetParent(parentSessionId);
-      adoptionTracker.parentDisposed(parentSessionId);
-    }
+    if (parentSessionId !== undefined && parentSessionId !== null && parentSessionId !== '') { guard.resetParent(parentSessionId); adoptionTracker.parentDisposed(parentSessionId); }
   };
   ctx.on('agent/disposed', onAgentDisposed);
   ctx.effect(() => () => ctx.off('agent/disposed', onAgentDisposed));
@@ -138,56 +137,45 @@ function provideProfileService(ctx, store) {
   });
 }
 
-// 系统提示门控：两段 profile-mode section 只在当前会话 Agent 是编排者预设
-// （orchestrator）时注入，从而消除从 standard/code/minimal 等不派发会话上的
-// 每请求固定泄漏。判据（以源码为准确认，见 test/README.md）：主判据
-// composedPreset(agentCtx)==='orchestrator'；否决 schemas(agent) 明确不含
-// dispatch → 必空；回退 无 agentPresets → 保守不注入。
-function sectionGatePasses(ctx, getEnabled, context) {
+// 系统提示门控（门控拆分）：dispatch:profiles 按「能力」判据（schemas 含 dispatch 即注入）；
+// orchestrator:mode / dispatch:budget 保持「模式」判据（composedPreset==='orchestrator-v2'）。禁止成对放宽共享 gate。
+// evolution:advice 自本轮起模型侧恒空（下架），不挂任何注入门控——见注册处注释。
+function profileSectionGate(ctx, getEnabled, context) {
   if (!getEnabled()) return false;
-  // 否决（防御性）：schemas(agent) 明确不含 dispatch → 必空。
+  // schemas(agent) 明确不含 dispatch → 必空（否决）；缺失 → 注入机会 + debug。
   if (context !== undefined && context.agent !== undefined) {
     const schemas = ctx.tools.schemas(context.agent);
-    if (Array.isArray(schemas) && !schemas.some((s) => s && s.name === 'dispatch')) {
-      return false;
-    }
+    if (Array.isArray(schemas)) return schemas.some((s) => s && s.name === 'dispatch');
+  }
+  if (ctx.logger !== undefined && typeof ctx.logger.debug === 'function') {
+    ctx.logger.debug('[dsh-subagent-profile] dispatch:profiles 门控：schemas 不可用，按注入机会处理');
+  }
+  return true;
+}
+// 编排者专属 gate：与 0.4.0 原判据一致（enabled + 否决 + composedPreset，预设名随 V2 收编更新为 orchestrator-v2）。
+function orchestrationGate(ctx, getEnabled, context) {
+  if (!getEnabled()) return false;
+  if (context !== undefined && context.agent !== undefined) {
+    const schemas = ctx.tools.schemas(context.agent);
+    if (Array.isArray(schemas) && !schemas.some((s) => s && s.name === 'dispatch')) return false;
   }
-  // 主判据：preset 特征 —— composedPreset(agentCtx) === 'orchestrator'。
+  // 主判据：preset 特征 —— composedPreset(agentCtx) === 'orchestrator-v2'（精确匹配新名；旧名 orchestrator 已由 V2 收编取代，不构成注入判据）。
   const agentPresets = ctx.get('agentPresets');
   if (agentPresets !== undefined && typeof agentPresets.composedPreset === 'function') {
     const agentCtx = context !== undefined && context.agent !== undefined && context.agent.ctx !== undefined
       ? context.agent.ctx
       : ctx;
-    try { return agentPresets.composedPreset(agentCtx) === 'orchestrator'; }
+    try { return agentPresets.composedPreset(agentCtx) === 'orchestrator-v2'; }
     catch { return false; }
   }
   // 无 agentPresets → 无法判别 → 保守不注入。
   return false;
 }
 
-// dispatch:profiles section 文本。引号引用：description 套引号；为空时显示
-// 占位符（不套引号）。压平在存储层完成（sanitizeProfile），此处仅负责显示层包裹。
-// 门控 profiles section 内附一行行为规则提示（非开放的 persona 注入）。
-function profileSectionText(store, gate, context, summaries) {
-  if (!gate(context)) return '';
-  const rows = applyProfileStats(profileDirectoryRows(store), profileStatsFromSummaries(store, summaries));
-  if (rows.length === 0) return '';
-  const lines = rows.map((p) => {
-    const desc = p.description.length > 0 ? `"${p.description}"` : '(无描述)';
-    const meta = [];
-    if (p.preset !== undefined) meta.push(`preset: ${p.preset}`);
-    else if (p.model !== undefined) meta.push(`model: ${p.model}`);
-    if (p.tokenTier !== undefined) meta.push(`tier: ${p.tokenTier}`);
-    if (p.avgCost !== undefined) meta.push(`平均 ${p.avgCost} 元/次`);
-    if (p.successRate !== undefined) meta.push(`成功率 ${p.successRate}${p.n !== undefined ? ` (N=${p.n})` : ''}`);
-    return `- ${p.id}: ${desc}${meta.length > 0 ? ` (${meta.join(' · ')})` : ''}`;
-  });
-  const note = '- 选择方案时先匹配任务复杂度与方案描述的能力边界，成本只在能力都胜任的方案之间比较——复杂任务不得为省 token 改用能力不足的便宜方案。\n- 别把 1-2 步即可自查/可搜完的小事委派出去 —— 几分钟内能自查完的直接做。\n- 优先使用已保存的 profile；只有少数字段需要临时覆盖时才传 per-call 参数。查资料/汇总/读文件等轻任务优先 cheap 或 flash。';
-  return `Available dispatch profiles (dispatch.profile):\n${lines.join('\n')}\n${note}`;
-}
-
-// orchestrator:mode section 文本（逐字保留；与 profiles 同门控）。
-const ORCHESTRATOR_MODE_TEXT = '本机已安装 dsh-subagent-profile 插件的「编排者模式」agent preset：新建会话的预设选择器中可选「编排者模式」。该模式把 Agent 定位为主协调者——拆解任务后按场景用 dispatch（内置 swap-standard=标准编码、researcher=调研检索，可在「子 Agent 方案」设置页自定义）与 subagent/subagent_fork/workflow 委派给子 Agent，再整合结果。preset 文件由插件维护于 ~/.dsh/.agent-presets，安装/升级时自动同步；用户提到「编排者模式 / orchestrator / 主协调模式」时即指本预设，请据此协作。';
+// orchestrator:mode section 文本（编排者模式 V2 定稿文案；与 profiles 同门控。
+// 追加官方错误对照句：官方全英文报错补中文行动引导，与 dispatch 的 stopReason
+// 映射共同构成错误闭环）。
+const ORCHESTRATOR_MODE_TEXT = '本机已安装「编排者模式 V2」agent 预设（字段 orchestrator-v2）：新建会话可选。把自己定位为主协调者——拆解任务后用 dispatch（方案）或官方 subagent/workflow 委派子 Agent，再整合结果；第一期采用 Minimal 双工具锚定轨迹，稳定后升满编排能力。需要 1-2 步自查的小事直接自己干，别派；方案在「子 Agent 方案」设置页管理。官方子代理工具若报 “not allowed for this Session”，意为该模型不在本会话白名单——改用 list_subagent_models 查允许路由，或转用 dispatch（profile）。';
 
 // 建议注入候选池：受信任预设白名单（解析失败回退内置名单）。不叠加逃生舱放行集。
 async function resolveAdviceWhitelist(ctx) {
@@ -198,54 +186,58 @@ async function resolveAdviceWhitelist(ctx) {
   }
 }
 
-// 系统提示各 section：门控经 sectionGatePasses；`enabled` 经 getter 实时读取。
+// 回滚建议提醒 mint：仅 regress 判定时触发一次（提醒写失败吞掉）；标题人话化，
+// 内容引导到自进化与建议页签查看建议（只读跳转）。
+async function setupEvolution(ctx, home, store, catalog, evoLedger, getEvolutionAdvice, getReminderStore) {
+  const adviceWhitelist = await resolveAdviceWhitelist(ctx);
+  const adviceEnv = { summariesFile: join(home, 'subagent-evolution', 'summaries.json'), dispatchFile: join(home, 'subagent-evolution', 'dispatch.jsonl'), whitelist: adviceWhitelist, logger: ctx.logger, onLoss: () => evoLedger.markMigrationLoss() };
+  const mintRollbackReminder = (asset) => mintReminder(getReminderStore(), {
+    severity: 'P2', kind: 'suggestion-rollback',
+    title: '自进化撤销建议：' + ((asset && asset.applied_config && typeof asset.applied_config.name === 'string' && asset.applied_config.name !== '') ? asset.applied_config.name : ((asset && typeof asset.name === 'string' && asset.name !== '') ? asset.name : '未知方案')),
+    detail: '该方案调整后观察期表现下降，建议撤销。可在「自进化与建议」页签查看并处理。', sessionId: null,
+  });
+  const { adviceSource, evolution } = createEvolutionAssembly({ ctx, home, store, catalog, evoLedger, adviceWhitelist, getEvolutionAdvice, getReminderStore: mintRollbackReminder, pluginVersion: readPluginVersion() });
+  return { adviceEnv, adviceSource, evolution };
+}
+
+// 系统提示各 section：profiles 段挂 profileSectionGate（能力判据），orchestrator:mode
+// 与 dispatch:budget 挂 orchestrationGate（模式判据，编排者专属）；evolution:advice
+// 自本轮起模型侧恒空（下架，见注册处注释）。`enabled` 经 getter 实时读取。
 function registerSystemPromptSections(ctx, store, getEnabled, getEvolutionAdvice, adviceEnv, guard) {
   const pluginSystemPrompt = ctx.get('systemPrompt');
   if (pluginSystemPrompt === undefined) return;
-  const gate = (context) => sectionGatePasses(ctx, getEnabled, context);
+  const profileGate = (context) => profileSectionGate(ctx, getEnabled, context);
+  const orchestratorGate = (context) => orchestrationGate(ctx, getEnabled, context);
   pluginSystemPrompt.section({
     name: 'dispatch:profiles',
     order: 116.5,
-    text: (context) => {
-      let summaries = null;
-      try { summaries = readSummaries(adviceEnv.summariesFile, adviceEnv.logger); } catch { /* 统计只增强，不影响目录注入 */ }
-      return profileSectionText(store, gate, context, summaries);
-    },
+    text: (context) => profileSectionText(store, profileGate, context),
   });
-  // 宣告自装的 orchestrator 预设，让当前 agent 知道该模式存在、可引导用户使用。
-  // 门控与 profiles 段相同——只有可派发的 agent 才看得到。
+  // 宣告自装的 orchestrator-v2 预设（门控与 0.4.0 相同：仅编排者 agent 可见）。
   pluginSystemPrompt.section({
     name: 'orchestrator:mode',
     order: 117,
-    text: (context) => (gate(context) ? ORCHESTRATOR_MODE_TEXT : ''),
+    text: (context) => (orchestratorGate(context) ? ORCHESTRATOR_MODE_TEXT : ''),
   });
-  // 派发优化建议段：门控 = orchestrator + evolutionAdvice 开关；异常兜底不阻断装配。
+  // 派发优化建议段（模型侧下架）：建议文本曾注入模型可见面却自称「仅供人类
+  // 参考」——噪声 + 诱导降档，故恒不注入（text 恒 ''，不再过任何门控/开关）。
+  // 注册结构保留（section 名与 order 不变，客户端依赖其存在性）；人类面板
+  // （建议卡/提醒中心/审计行）经 http-routes 读取同一数据源，不受影响。勿在此恢复注入。
   pluginSystemPrompt.section({
     name: 'evolution:advice',
     order: 116.8,
-    text: (context) => {
-      if (!getEvolutionAdvice() || !gate(context)) return '';
-      try {
-        return buildAdviceText(adviceEnv);
-      } catch (error) {
-        // 候选校验失败（如逃生舱放行的非 system 预设）不再静默空转——logger.warn
-        // 留痕 + 注入段标注「建议暂不可用及原因」，父 Agent 可见、派发行为不受影响。
-        const reason = error instanceof Error ? error.message : String(error);
-        adviceEnv.logger.warn(`[dsh-subagent-profile] evolution:advice 生成失败：${reason}`);
-        return `（派发优化建议暂不可用：${reason}。派发行为不受影响。）`;
-      }
-    },
+    text: () => '',
   });
-  // 派发预算余量段：与 profiles 同门控；无父 sessionId 不注入（无法关联具体会话）。
+  // 派发预算余量段（三态文案，见 dispatch-gates.mjs）：门控 = orchestrator-v2 预设；
+  // 无父 sessionId 不注入（无法关联具体会话）。
   pluginSystemPrompt.section({
     name: 'dispatch:budget',
     order: 116.7,
     text: (context) => {
-      if (!gate(context)) return '';
+      if (!orchestratorGate(context)) return '';
       const parentSessionId = context?.agent?.session?.header?.id;
       if (typeof parentSessionId !== 'string' || parentSessionId === '') return '';
-      const b = guard.snapshot(parentSessionId);
-      return `派发预算余量：本会话在途 ${b.concurrency}/${b.maxConcurrent}，累计 token ${b.tokens}/${b.maxParentTokens}，剩余 ${Math.max(0, b.maxParentTokens - b.tokens)} token。`;
+      return budgetSectionText(guard.snapshot(parentSessionId));
     },
   });
 }
@@ -255,7 +247,7 @@ function registerSystemPromptSections(ctx, store, getEnabled, getEvolutionAdvice
 // webServer 可选——无头部署保留 dispatch 工具、只丢设置页。webServer 的激活
 // （listen）是异步的，可能晚于本插件 inject 依赖解析完成，故在等它的 inject
 // 子 scope 内注册（apply 时 ctx.get 会读到 undefined）。
-function registerSettingsRoutes(ctx, store, getEnabled, setEnabled, syncTool, catalog, ledger, backgroundLedger, draftsStore, applyDraft, getAudit, getEvolutionAdvice, setEvolutionAdvice, getEscapeEnabled, setEscapeEnabled, escape, refreshAdvice, summariesFile, dispatchFile, adviceWhitelist, previewDraft, reminderStore) {
+function registerSettingsRoutes(ctx, store, getEnabled, setEnabled, syncTool, catalog, ledger, backgroundLedger, draftsStore, applyDraft, getAudit, getEvolutionAdvice, setEvolutionAdvice, getEscapeEnabled, setEscapeEnabled, escape, refreshAdvice, summariesFile, dispatchFile, adviceWhitelist, previewDraft, reminderStore, adviceSource, evolution) {
   ctx.inject(['webServer'], (scope) => {
     scope.effect(createHttpRoutes({
       webServer: scope.webServer,
@@ -280,6 +272,8 @@ function registerSettingsRoutes(ctx, store, getEnabled, setEnabled, syncTool, ca
       adviceWhitelist,
       previewDraft,
       reminderStore,
+      adviceSource,
+      evolution,
       logger: ctx.logger,
     }), 'dsh-subagent-profile: settings routes');
   });
@@ -347,6 +341,20 @@ function createDispatch(ctx, store, catalog, ledger, guard, evoLedger, backgroun
   });
 }
 
+// profiles_query 工具装配（apply 前抽出）：syncTool 机制自动可见、不依赖静态段；
+// 与 dispatch 共用 enabled 开关（/set-enabled 一并注册/注销）。
+function createProfilesQuery(ctx, store, catalog, adviceEnv, getEnabled) {
+  return createProfilesQueryTool({
+    register: (tool) => ctx.tools.register(tool),
+    store,
+    catalog,
+    summariesFile: adviceEnv.summariesFile,
+    onLoss: adviceEnv.onLoss,
+    logger: ctx.logger,
+    getEnabled,
+  });
+}
+
 // auto-profile 落库：三道安全检查评估（draft-gates）→ 任一 fail 即 throw → 落库 + 审计。
 async function applyDraftProfile({ ctx, store, catalog, getEscapeSet, evoLedger, draft }) {
   const { ok, checks, clean } = await assessDraftProfile({ ctx, store, catalog, getEscapeSet, draft });
@@ -354,15 +362,14 @@ async function applyDraftProfile({ ctx, store, catalog, getEscapeSet, evoLedger,
     const failed = checks.find((c) => c.verdict === 'fail');
     throw new Error(failed !== undefined && typeof failed.reason === 'string' ? failed.reason : 'draft 未通过安全检查');
   }
-  store.profiles.set(clean.id, { ...clean, persisted: true });
+  store.saveProfile({ ...clean, persisted: true });
   const persisted = store.persistProfiles();
   evoLedger.recordGovernanceAudit({ kind: 'draft-apply', profileId: clean.id, source: typeof draft.source === 'string' ? draft.source : 'human' });
   return { id: clean.id, persisted: persisted.persisted };
 }
 
 export async function apply(ctx) {
-  const home = dshHome();
-  cleanRemovedBackups(home); // 上个生命周期留下的 .removed-* 备份残留。
+  const home = dshHome(); cleanRemovedBackups(home); // 上个生命周期留下的 .removed-* 备份残留。
   // reminderStore 变量提前声明：evoLedger.onAlert 与 escape mint 钩子延迟读取。
   let reminderStore;
   // 派发台账 + 审计分级须在 store 之前构造：store 的治理审计钩子指向其 markGovernanceFailure。
@@ -372,7 +379,6 @@ export async function apply(ctx) {
   let enabled = store.loadEnabled();
   let evolutionAdvice = store.loadEvolutionAdvice();
   store.loadProfiles();
-  // 自装 bundled 的 orchestrator 预设（幂等、fail-soft）。
   syncBundledPresetsToHome(ctx);
   const catalog = createSharedCatalog(ctx);
   const ledger = createFailureLedger({ warn: (message) => ctx.logger.warn(`[dsh-subagent-profile] ${message}`), stateFile: join(home, 'subagent-profiles.failed-traces.json') });
@@ -380,17 +386,16 @@ export async function apply(ctx) {
   const backgroundLedger = createBackgroundLedger({ warn: (message) => ctx.logger.warn(`[dsh-subagent-profile] ${message}`) });
   const draftsStore = createDraftsStore({ dshHome: home, onGovernanceFailure: () => evoLedger.markGovernanceFailure() });
   reminderStore = createReminderStore({ dshHome: home, audit: (entry) => evoLedger.recordGovernanceAudit(entry), warn: (message) => ctx.logger.warn(`[dsh-subagent-profile] ${message}`) });
-  let refreshAdvice = () => {};
-  const adoptionTracker = setupAdoptionTracker(ctx, home, () => refreshAdvice, (rec) => mintUnadoptedReminder(reminderStore, evoLedger, rec));
+  let refreshAdvice = () => {}; const adoptionTracker = setupAdoptionTracker(ctx, home, () => refreshAdvice, (rec) => mintUnadoptedReminder(reminderStore, evoLedger, rec));
   const dispatch = createDispatch(ctx, store, catalog, ledger, guard, evoLedger, backgroundLedger, adoptionTracker, escapeCtl.getEscapeSet, () => enabled, () => evolutionAdvice);
   provideProfileService(ctx, store);
-  const adviceWhitelist = await resolveAdviceWhitelist(ctx);
-  const adviceEnv = { summariesFile: join(home, 'subagent-evolution', 'summaries.json'), dispatchFile: join(home, 'subagent-evolution', 'dispatch.jsonl'), whitelist: adviceWhitelist, logger: ctx.logger };
-  // 生产聚合触发点（T1 修复）：/options/refresh 与 /list 触发的惰性重算；parent_adopted
-  // 的「已确认未采纳」计数经 opts 惰性 join 进 weighted_success（-0.3 惩罚）。
+  const { adviceEnv, adviceSource, evolution } = await setupEvolution(ctx, home, store, catalog, evoLedger, () => evolutionAdvice, () => reminderStore);
+  const profilesQuery = createProfilesQuery(ctx, store, catalog, adviceEnv, () => enabled);
+  const syncTools = () => { dispatch.syncTool(); profilesQuery.syncTool(); };
+  // 生产聚合触发点（T1 修复）：/options/refresh 与 /list 的惰性重算。
   refreshAdvice = () => refreshSummaries({ dispatchFile: adviceEnv.dispatchFile, summariesFile: adviceEnv.summariesFile, logger: ctx.logger, opts: { parentAdoptedConfirmedFalse: adoptionTracker.confirmedFalseCounts() } });
   registerSystemPromptSections(ctx, store, () => enabled, () => evolutionAdvice, adviceEnv, guard);
-  const disposeProvider = createProfileProvider({ subagents: ctx.subagents, store, getEnabled: () => enabled, logger: ctx.logger, catalog, getEscapeSet: escapeCtl.getEscapeSet, recordEscapeAllowProvider: escapeCtl.recordEscapeAllowProvider });
+  const disposeProvider = createProfileProvider({ subagents: ctx.subagents, store, getEnabled: () => enabled, logger: ctx.logger, catalog, getEscapeSet: escapeCtl.getEscapeSet, recordEscapeAllowProvider: escapeCtl.recordEscapeAllowProvider, readModelSelectionPolicy, evoLedger });
   if (typeof disposeProvider === 'function') ctx.effect(() => disposeProvider);
   const applyDraft = (draft) => applyDraftProfile({ ctx, store, catalog, getEscapeSet: escapeCtl.getEscapeSet, evoLedger, draft });
   // /draft/preview：只读安全检查预览（不落库）。body 为 {config, name, description, source}。
@@ -406,7 +411,6 @@ export async function apply(ctx) {
       source: body !== null && typeof body === 'object' && typeof body.source === 'string' ? body.source : 'human',
     },
   });
-  // Client 设置 UI 的 HTTP loopback 路由 —— lib/core/http-routes.mjs。
-  registerSettingsRoutes(ctx, store, () => enabled, (next) => { enabled = next; }, dispatch.syncTool, catalog, ledger, backgroundLedger, draftsStore, applyDraft, () => evoLedger.auditState(), () => evolutionAdvice, (next) => { evolutionAdvice = next; }, escapeCtl.getEscapeEnabled, escapeCtl.setEscapeEnabled, escapeCtl.escape, refreshAdvice, join(home, 'subagent-evolution', 'summaries.json'), adviceEnv.dispatchFile, adviceEnv.whitelist, previewDraft, reminderStore);
-  registerTeardown(ctx, dispatch, ledger, guard, home, backgroundLedger, adoptionTracker);
+  registerSettingsRoutes(ctx, store, () => enabled, (next) => { enabled = next; }, syncTools, catalog, ledger, backgroundLedger, draftsStore, applyDraft, () => evoLedger.auditState(), () => evolutionAdvice, (next) => { evolutionAdvice = next; }, escapeCtl.getEscapeEnabled, escapeCtl.setEscapeEnabled, escapeCtl.escape, refreshAdvice, join(home, 'subagent-evolution', 'summaries.json'), adviceEnv.dispatchFile, adviceEnv.whitelist, previewDraft, reminderStore, adviceSource, evolution);
+  registerTeardown(ctx, dispatch, profilesQuery, ledger, guard, home, backgroundLedger, adoptionTracker);
 }