dsh-subagent-profile 0.3.4 → 0.5.0

package/lib/core/evolution-routes.mjs

@@ -0,0 +1,234 @@
+// lib/core/evolution-routes.mjs — 进化资产与候选管理路由处理：/evolution/assets 只读
+// 列表（含金丝雀回滚建议数据源）、/evolution/apply 应用写路径、/evolution/rollback
+// 决议写路径（回滚/显式保留）、/evolution/regenerate 重新生成候选、/advice/save-profile 保存为方案、
+// /settings/candidate 候选设置。loopback 与 CSRF 守卫由 createHttpRoutes 入口统一
+// 完成，本模块只做 body 解析与响应组装。apply/rollback 拒绝（400）回传原因；成功
+// 回传新方案 id、资产状态与 persisted 信号。业务本体（三道闸/审计/锁/金丝雀判定）
+// 在 evolution-engine 与 evolution-canary 内，本模块不触碰任何闸判定。
+
+import { sanitizeProfile } from './pure.mjs';
+import { computeAdvice } from './evolution-advice.mjs';
+import { lowerHyphen, sourceConfigFromKey } from './evolution-draft.mjs';
+import { rollbackSuggestionOf } from './evolution-canary.mjs';
+import { json, readBody, persistOk } from './http-helpers.mjs';
+
+// ── 资产只读视图（黑盒闭合：观察期/轨迹/徽标统一由 /evolution/assets 下发）──────
+
+// 观察期状态视图：state/label 由后端给出（用户可见面零内部词）；baseline/post 供
+// 撤销建议区证据对照；kept = 用户已显式保留。pendingApply = 候选未应用。
+const CANARY_VIEW_LABELS = {
+  pendingApply: '未应用',
+  observing: '观察中',
+  stalled: '观察数据不足（未判定），等待更多派发',
+  insufficient: '观察数据不足（未判定），等待更多派发',
+  inconclusive: '观察数据不足（未判定），等待更多派发',
+  applied: '观察期结束：表现未下降，已保留',
+  regress: '观察期结束：上次的调整表现变差了',
+  aborted: '你手动修改了方案，观察已中止（不会再判定）',
+};
+
+export function canaryViewOf(asset) {
+  const baseline = asset !== null && typeof asset === 'object' && asset.baseline_metrics !== null && typeof asset.baseline_metrics === 'object' ? asset.baseline_metrics : {};
+  const canary = asset !== null && typeof asset === 'object' && asset.canary !== null && typeof asset.canary === 'object' ? asset.canary : null;
+  if (canary === null) {
+    return { state: 'pendingApply', k: 0, kTotal: 0, verdict: null, label: CANARY_VIEW_LABELS.pendingApply, baseline: { sampleN: baseline.sampleN ?? null, weighted_success: baseline.weighted_success ?? null }, post: null, kept: false };
+  }
+  const k = Number.isFinite(canary.k) ? canary.k : 0;
+  const kTotal = Number.isFinite(canary.kTotal) ? canary.kTotal : 0;
+  const samples = Array.isArray(canary.samples) ? canary.samples : [];
+  const last = samples.length > 0 && samples[samples.length - 1] !== null && typeof samples[samples.length - 1] === 'object' ? samples[samples.length - 1] : null;
+  const kept = asset.keep_at !== undefined || canary.kept_at !== undefined;
+  const resolvedRollback = asset.state === 'rolled_back' || Number.isFinite(canary.rollback_at);
+  let state = 'observing';
+  let label = null;
+  if (resolvedRollback) { state = 'applied'; label = '已撤销调整，观察期终止'; }
+  else if (kept) { state = 'applied'; label = '观察期结束：已选择继续使用当前配置'; }
+  else if (canary.verdict === 'stalled') state = 'stalled';
+  else if (canary.insufficient === true || canary.verdict === 'inconclusive') state = 'inconclusive';
+  else if (canary.verdict === 'regress') state = 'regress';
+  else if (canary.verdict === 'aborted-human-edit') state = 'aborted';
+  else if (asset.state === 'applied') state = 'applied';
+  if (label === null) label = state === 'observing' ? CANARY_VIEW_LABELS.observing + '（' + k + '/' + kTotal + '）' : CANARY_VIEW_LABELS[state];
+  return {
+    state,
+    k,
+    kTotal,
+    verdict: canary.verdict ?? null,
+    label,
+    baseline: { sampleN: baseline.sampleN ?? null, weighted_success: baseline.weighted_success ?? null },
+    post: last === null ? null : { sampleN: last.sampleN, weighted_success: last.weighted_success },
+    kept,
+  };
+}
+
+// 判定短标签（进化轨迹「判定：…」用；未判定空串）。
+function verdictShortLabel(verdict) {
+  if (verdict === 'regress') return '建议撤销';
+  if (verdict === 'applied') return '表现未下降，已保留';
+  if (verdict === 'aborted-human-edit') return '观察中止';
+  if (verdict === 'stalled' || verdict === 'inconclusive') return '数据不足，未判定';
+  return '';
+}
+
+// 进化轨迹（≤8 条，按 ts 升序）：生成 → 应用（人工确认）→ 观察（k/kTotal）→
+// 判定（短标签）→ 处理（你选择撤销/保留）。无 canary 的资产只有生成事件。
+export function lifecycleOf(asset) {
+  const events = [];
+  const canary = asset !== null && typeof asset === 'object' && asset.canary !== null && typeof asset.canary === 'object' ? asset.canary : null;
+  if (asset !== null && typeof asset === 'object' && Number.isFinite(asset.createdAt)) events.push({ ts: asset.createdAt, event: 'generated' });
+  if (asset !== null && typeof asset === 'object' && Number.isFinite(asset.applied_at)) events.push({ ts: asset.applied_at, event: 'applied', meta: '人工确认' });
+  if (canary !== null) {
+    const samples = Array.isArray(canary.samples) ? canary.samples : [];
+    const last = samples.length > 0 && Number.isFinite(samples[samples.length - 1]?.ts) ? samples[samples.length - 1].ts : asset.applied_at;
+    if (Number.isFinite(last)) events.push({ ts: last, event: 'observed', meta: (Number.isFinite(canary.k) ? canary.k : 0) + '/' + (Number.isFinite(canary.kTotal) ? canary.kTotal : 0) });
+    if (Number.isFinite(canary.judged_at)) {
+      const verdict = verdictShortLabel(canary.verdict);
+      events.push({ ts: canary.judged_at, event: 'judged', meta: verdict !== '' ? verdict : '数据不足，未判定' });
+    }
+    if (Number.isFinite(canary.rollback_at)) events.push({ ts: canary.rollback_at, event: 'resolved', meta: '你选择撤销调整' });
+    else if (canary.kept_at !== undefined) events.push({ ts: canary.kept_at, event: 'resolved', meta: '你选择保留' });
+  }
+  events.sort((a, b) => a.ts - b.ts);
+  return events.slice(-8);
+}
+
+// 候选行生命周期徽标（后端给中文；未知状态不渲染）。
+export function assetStateLabelOf(asset) {
+  if (asset === null || typeof asset !== 'object') return null;
+  const canary = asset.canary !== null && typeof asset.canary === 'object' ? asset.canary : null;
+  if (asset.invalid === true) return '观察中止';
+  if (asset.state === 'draft') return '草稿';
+  if (asset.state === 'expired') return '已过期';
+  if (asset.state === 'rolled_back') return '已撤销';
+  if (asset.state === 'applied') return canary !== null && canary.kept_at !== undefined ? '已保留' : '已应用';
+  if (asset.state === 'proposed') return canary !== null && canary.verdict === 'regress' ? '待撤销' : '观察中';
+  return null;
+}
+
+async function handleEvolutionAssets(deps, res) {
+  // 金丝雀判定随只读列表触发（幂等；失败只 warn 不阻断列表）。
+  if (typeof deps.evolution?.evaluateCanaries === 'function') {
+    try { deps.evolution.evaluateCanaries(); } catch { /* fail-soft，判定失败不阻断只读列表 */ }
+  }
+  const raw = deps.evolution !== undefined && typeof deps.evolution.list === 'function' ? deps.evolution.list() : [];
+  const rollbackSuggestions = raw.map((asset) => rollbackSuggestionOf(asset)).filter((s) => s !== null);
+  const assets = raw.map((asset) => ({ ...asset, canary: canaryViewOf(asset), lifecycle: lifecycleOf(asset), stateLabel: assetStateLabelOf(asset) }));
+  return json(res, 200, { ok: true, assets, rollbackSuggestions });
+}
+
+async function handleEvolutionApply(deps, req, res) {
+  const body = await readBody(req);
+  const assetId = typeof body.assetId === 'string' ? body.assetId : '';
+  if (assetId === '') return json(res, 400, { ok: false, error: 'assetId 不能为空' });
+  if (deps.evolution === undefined || typeof deps.evolution.apply !== 'function') {
+    return json(res, 404, { ok: false, error: '进化 apply 引擎未装配' });
+  }
+  const result = await deps.evolution.apply({ assetId, humanConfirmed: body.human_confirmed === true });
+  if (!result.ok) {
+    const payload = { ok: false, error: result.reason };
+    if (result.checks !== undefined) payload.checks = result.checks;
+    return json(res, 400, payload);
+  }
+  return json(res, 200, {
+    ok: true,
+    id: result.id,
+    state: result.state,
+    persisted: result.persisted,
+    ...(result.persisted ? {} : { persistWarning: '已应用但未持久化' }),
+  });
+}
+
+// 候选设置写路径：更新模式（自动换新/手动维护）+ 有效期小时数（0 或 1~8760 整数）。
+// 校验失败 400；成功持久化并回传 persisted 信号与归一后的值。
+async function handleSettingsCandidate(deps, req, res) {
+  const body = await readBody(req);
+  const mode = body && typeof body.candidateMode === 'string' ? body.candidateMode : '';
+  const ttlH = body && typeof body.candidateTtlH === 'number' ? body.candidateTtlH : NaN;
+  if (mode !== 'auto' && mode !== 'manual') {
+    return json(res, 400, { ok: false, error: '候选更新模式无效（auto/manual）' });
+  }
+  if (!Number.isInteger(ttlH) || !(ttlH === 0 || (ttlH >= 1 && ttlH <= 8760))) {
+    return json(res, 400, { ok: false, error: '候选有效期无效（0 或 1~8760 小时整数）' });
+  }
+  const modePersist = deps.store.persistCandidateMode(mode);
+  const ttlPersist = deps.store.persistCandidateTtlH(ttlH);
+  const persisted = modePersist.persisted !== false && ttlPersist.persisted !== false;
+  return persistOk(res, {
+    candidateMode: deps.store.loadCandidateMode(),
+    candidateTtlH: deps.store.loadCandidateTtlH(),
+  }, { persisted });
+}
+
+// 决议执行（人工确认）：action='keep' 显式保留当前配置（不写 profile，资产
+// proposed→applied + suggestion-keep 审计）；缺省 action='rollback' 走恢复快照。
+// 非法 action 400；拒绝分支回传原因。审计与恢复本体在 evolution-canary 内。
+async function handleEvolutionRollback(deps, req, res) {
+  const body = await readBody(req);
+  const assetId = typeof body.assetId === 'string' ? body.assetId : '';
+  if (assetId === '') return json(res, 400, { ok: false, error: 'assetId 不能为空' });
+  const rawAction = typeof body.action === 'string' ? body.action : '';
+  const action = rawAction === '' ? 'rollback' : (rawAction === 'rollback' || rawAction === 'keep' ? rawAction : '');
+  if (action === '') return json(res, 400, { ok: false, error: 'action 无效（rollback/keep）' });
+  if (deps.evolution === undefined || typeof deps.evolution.rollback !== 'function') {
+    return json(res, 404, { ok: false, error: '进化决议引擎未装配' });
+  }
+  const result = await deps.evolution.rollback({ assetId, humanConfirmed: body.human_confirmed === true, action });
+  if (!result.ok) return json(res, 400, { ok: false, error: result.reason });
+  const payload = { ok: true, id: assetId, state: result.state };
+  if (result.restored !== undefined) payload.restored = result.restored;
+  if (result.persisted !== undefined) {
+    payload.persisted = result.persisted;
+    if (!result.persisted) payload.persistWarning = '已回滚但未持久化';
+  }
+  return json(res, 200, payload);
+}
+
+// 重新生成候选（人工触发）：该身份键所有未处置候选先转 expired，再按当前建议
+// 产新一代；审计由引擎写 suggestion-refresh。无当前建议时只清理不产新候选。
+async function handleEvolutionRegenerate(deps, req, res) {
+  const body = await readBody(req);
+  const profileKey = body && typeof body.profileKey === 'string' ? body.profileKey : '';
+  if (profileKey === '') return json(res, 400, { ok: false, error: 'profileKey 不能为空' });
+  if (deps.evolution === undefined || typeof deps.evolution.regenerate !== 'function') {
+    return json(res, 404, { ok: false, error: '候选重新生成入口未装配' });
+  }
+  const computed = computeAdvice({ summariesFile: deps.summariesFile, dispatchFile: deps.dispatchFile, whitelist: deps.adviceWhitelist, logger: deps.logger });
+  const item = (Array.isArray(computed.advice) ? computed.advice : []).find((a) => a !== null && typeof a === 'object' && a.profileKey === profileKey);
+  const result = await deps.evolution.regenerate({ profileKey, advice: item !== undefined ? [item] : [], summaries: computed.summaries });
+  return json(res, 200, { ok: true, ...result });
+}
+
+// 保存为方案：把建议来源的当前派发配置（身份键可还原的预设/提供方/模型段）存成
+// 新方案，便于复用与对比。自定义人格与工具过滤原文未留存（台账只存存在性），
+// 不在新方案内。身份键无可还原字段时 400。
+async function handleAdviceSaveProfile(deps, req, res) {
+  const body = await readBody(req);
+  const profileKey = body && typeof body.profileKey === 'string' ? body.profileKey : '';
+  if (profileKey === '') return json(res, 400, { ok: false, error: 'profileKey 不能为空' });
+  const from = sourceConfigFromKey(profileKey, {});
+  const config = {};
+  for (const field of ['preset', 'provider', 'model']) {
+    if (typeof from[field] === 'string' && from[field] !== '') config[field] = from[field];
+  }
+  if (Object.keys(config).length === 0) {
+    return json(res, 400, { ok: false, error: '该配置无可保存字段（未指定预设/提供方/模型）' });
+  }
+  const slug = lowerHyphen(profileKey).slice(0, 24) || 'config';
+  const base = `advice-${slug}`.slice(0, 32);
+  const taken = new Set(deps.store.profiles.keys());
+  let id = base;
+  for (let attempt = 2; taken.has(id) && attempt <= 6; attempt += 1) {
+    id = `${base}-${attempt}`.slice(0, 32);
+  }
+  if (taken.has(id)) return json(res, 400, { ok: false, error: '方案编号冲突，无法保存' });
+  const name = slug.length > 0 ? `建议配置-${slug.slice(0, 16)}` : '建议配置';
+  const { clean, warnings } = sanitizeProfile({ ...config, id, name, description: '来自建议面板的配置快照（仅预设/模型/提供方；人格与工具过滤不落盘，按隐私设计）。便于复用与对比分析。' }, { strict: true });
+  if (warnings.length > 0) {
+    const detail = warnings.map((w) => `${w.field}：${w.reason}`).join('；');
+    return json(res, 400, { ok: false, error: `保存被拒绝：${detail}` });
+  }
+  deps.store.profiles.set(clean.id, { ...clean, persisted: true });
+  return persistOk(res, { id: clean.id, name: clean.name }, deps.store.persistProfiles());
+}
+
+export { handleEvolutionAssets, handleEvolutionApply, handleEvolutionRollback, handleEvolutionRegenerate, handleAdviceSaveProfile, handleSettingsCandidate };

package/lib/core/http-helpers.mjs

@@ -0,0 +1,35 @@
+// lib/core/http-helpers.mjs — 设置 HTTP 路由的共享小助手（从 http-routes 逐字移出）：
+// JSON 响应、POST body 解析（1MB 上限）、persistOk 包装（persisted:false 时回传
+// 「已保存但未持久化」警示）。零依赖，多个路由模块共用。
+
+function json(res, code, data) {
+  res.writeHead(code, { 'Content-Type': 'application/json; charset=utf-8' });
+  res.end(JSON.stringify(data));
+}
+
+function readBody(req) {
+  return new Promise((resolve, reject) => {
+    let data = '';
+    let size = 0;
+    req.on('data', (chunk) => {
+      size += chunk.length;
+      if (size > 1 << 20) { reject(new Error('请求体过大')); req.destroy(); return; }
+      data += chunk;
+    });
+    req.on('end', () => {
+      try { resolve(data === '' ? {} : JSON.parse(data)); } catch { reject(new Error('请求体不是合法 JSON')); }
+    });
+    req.on('error', reject);
+  });
+}
+
+function persistOk(res, payload, persist) {
+  return json(res, 200, {
+    ok: true,
+    ...payload,
+    persisted: persist.persisted,
+    ...(persist.persisted ? {} : { persistWarning: '已保存但未持久化' }),
+  });
+}
+
+export { json, readBody, persistOk };

package/lib/core/http-routes.mjs

@@ -3,11 +3,13 @@
 // syncTool、catalog、logger；写路由各抽为模块级处理函数，工厂返回 scope.effect 设置函数。
 
 import { sanitizeProfile } from './pure.mjs';
-import { BUILTIN_SEEDS } from './profiles-store.mjs';
+import { BUILTIN_SEEDS, assertProfileDescription } from './profiles-store.mjs';
 import { detectVersions } from './shims.mjs';
-import { readSummaries, computeAdvice } from './evolution-advice.mjs';
+import { readSummaries } from './evolution-advice.mjs';
 import { profileStatsFromSummaries } from './profile-directory.mjs';
 import { costSummaryFromSummaries } from './cost-evidence.mjs';
+import { json, readBody, persistOk } from './http-helpers.mjs';
+import { handleEvolutionAssets, handleEvolutionApply, handleEvolutionRollback, handleEvolutionRegenerate, handleAdviceSaveProfile, handleSettingsCandidate } from './evolution-routes.mjs';
 
 // 只有 loopback 接口可以驱动设置 HTTP 路由。
 const LOOPBACKS = new Set(['127.0.0.1', '::1', '::ffff:127.0.0.1']);
@@ -19,36 +21,6 @@ const CSRF_HEADER = 'X-DSH-Plugin';
 const CSRF_HEADER_KEY = CSRF_HEADER.toLowerCase();
 const CSRF_HEADER_VALUE = 'dsh-subagent-profile';
 
-function json(res, code, data) {
-  res.writeHead(code, { 'Content-Type': 'application/json; charset=utf-8' });
-  res.end(JSON.stringify(data));
-}
-
-function readBody(req) {
-  return new Promise((resolve, reject) => {
-    let data = '';
-    let size = 0;
-    req.on('data', (chunk) => {
-      size += chunk.length;
-      if (size > 1 << 20) { reject(new Error('请求体过大')); req.destroy(); return; }
-      data += chunk;
-    });
-    req.on('end', () => {
-      try { resolve(data === '' ? {} : JSON.parse(data)); } catch { reject(new Error('请求体不是合法 JSON')); }
-    });
-    req.on('error', reject);
-  });
-}
-
-function persistOk(res, payload, persist) {
-  return json(res, 200, {
-    ok: true,
-    ...payload,
-    persisted: persist.persisted,
-    ...(persist.persisted ? {} : { persistWarning: '已保存但未持久化' }),
-  });
-}
-
 function listClean(store, stats) {
   const map = stats instanceof Map ? stats : new Map();
   return [...store.profiles.values()].map((profile) => {
@@ -72,18 +44,26 @@ async function handleList(deps, res) {
   let costSummary = { global: null, byModel: [] };
   let advice = [];
   let adviceGlobal = null;
+  let evolutionCandidates = [];
+  let adviceDetails = {};
   try {
     if (typeof deps.refreshAdvice === 'function') deps.refreshAdvice();
     const summaries = typeof deps.summariesFile === 'string' ? readSummaries(deps.summariesFile, deps.logger) : null;
     stats = profileStatsFromSummaries(deps.store, summaries);
     costSummary = costSummaryFromSummaries(summaries);
-    if (deps.adviceWhitelist !== undefined && typeof deps.dispatchFile === 'string') {
-      const result = computeAdvice({ summariesFile: deps.summariesFile, dispatchFile: deps.dispatchFile, whitelist: deps.adviceWhitelist, logger: deps.logger });
+    if (deps.adviceWhitelist !== undefined && typeof deps.dispatchFile === 'string' && typeof deps.adviceSource === 'function') {
+      // 建议 + 候选生成统一走装配层 helper（computeAdvice 之后推导候选资产），
+      // 避免 /list 与其它消费点重复生成；候选随建议链开关同生共死。
+      const result = await deps.adviceSource();
       advice = result.advice ?? [];
       adviceGlobal = result.global ?? null;
+      evolutionCandidates = Array.isArray(result.candidates) ? result.candidates : [];
+      adviceDetails = result.adviceDetails !== null && typeof result.adviceDetails === 'object' ? result.adviceDetails : {};
     }
   } catch { /* 统计/建议是增量展示；失败不影响 /list 主响应 */ }
-  return json(res, 200, { ok: true, profiles: listClean(deps.store, stats), costSummary, advice, adviceGlobal });
+  // 冷启动状态（apply/防退化可用性 + 原因清单）：只读暴露，UI 展示归建议面板。
+  const evolutionStatus = typeof deps.evolution?.evolutionStatus === 'function' ? deps.evolution.evolutionStatus() : null;
+  return json(res, 200, { ok: true, profiles: listClean(deps.store, stats), costSummary, advice, adviceGlobal, evolutionCandidates, adviceDetails, evolutionStatus });
 }
 
 // 轻量摘要：enabled/advice 开关/模型目录/预设名册/审计分级。
@@ -98,6 +78,8 @@ async function handleSummary(deps, res) {
     audit: deps.getAudit(),
     escapeEnabled: deps.getEscapeEnabled(),
     escapePresets: deps.escape.list(),
+    candidateMode: deps.store.loadCandidateMode(),
+    candidateTtlH: deps.store.loadCandidateTtlH(),
   });
 }
 
@@ -267,6 +249,12 @@ async function handleAdd(deps, req, res) {
     const detail = warnings.map((w) => `${w.field}：${w.reason}`).join('；');
     return json(res, 400, { ok: false, error: `写入被拒绝：${detail}` });
   }
+  // description 落库契约（仅当请求显式携带 description 键：新建/编辑严格，未传
+  // 保留存量值不校验——存量宽容）。
+  if (Object.hasOwn(profile, 'description')) {
+    try { assertProfileDescription(profile.description); }
+    catch (error) { return json(res, 400, { ok: false, error: error instanceof Error ? error.message : String(error) }); }
+  }
   const hadToolFilter = profile.toolFilter !== undefined;
   // tokenTier 单独用 raw-body 守卫（sanitize 恒回填 balanced，进 merge 会破坏
   // 「未传→保留 existing」语义）；strict 下非法值已在上面 400 拒绝。
@@ -293,7 +281,7 @@ async function handleAdd(deps, req, res) {
   }
   if (hadTokenTier) merged.tokenTier = clean.tokenTier;
   if (merged.enabled !== undefined) merged.enabled = merged.enabled === false ? false : true;
-  deps.store.profiles.set(merged.id, { ...merged, ...(isBuiltin ? { builtin: true } : {}), persisted: true });
+  deps.store.saveProfile({ ...merged, ...(isBuiltin ? { builtin: true } : {}), persisted: true });
   deps.store.deletedBuiltins.delete(merged.id);
   return persistOk(res, { id: merged.id }, deps.store.persistProfiles());
 }
@@ -386,6 +374,12 @@ async function routeRequest(deps, req, res, url, sub) {
   if (req.method === 'POST' && sub === '/draft/apply') return handleDraftApply(deps, req, res);
   if (req.method === 'POST' && sub === '/draft/remove') return handleDraftRemove(deps, req, res);
   if (req.method === 'POST' && sub === '/draft/preview') { const body = await readBody(req); return json(res, 200, { ok: true, ...(await deps.previewDraft(body)) }); }
+  if (req.method === 'GET' && sub === '/evolution/assets') return handleEvolutionAssets(deps, res);
+  if (req.method === 'POST' && sub === '/evolution/apply') return handleEvolutionApply(deps, req, res);
+  if (req.method === 'POST' && sub === '/evolution/rollback') return handleEvolutionRollback(deps, req, res);
+  if (req.method === 'POST' && sub === '/evolution/regenerate') return handleEvolutionRegenerate(deps, req, res);
+  if (req.method === 'POST' && sub === '/advice/save-profile') return handleAdviceSaveProfile(deps, req, res);
+  if (req.method === 'POST' && sub === '/settings/candidate') return handleSettingsCandidate(deps, req, res);
   if (req.method === 'POST' && sub === '/options/refresh') return handleRefresh(deps, res);
   if (req.method === 'POST' && sub === '/set-enabled') return handleSetEnabled(deps, req, res);
   if (req.method === 'POST' && sub === '/set-evolution-advice') return handleSetEvolutionAdvice(deps, req, res);
@@ -400,8 +394,8 @@ async function routeRequest(deps, req, res, url, sub) {
   json(res, 404, { ok: false, error: `未知路由 ${sub}` });
 }
 
-export function createHttpRoutes({ webServer, store, getEnabled, setEnabled, syncTool, catalog, ledger, backgroundLedger, draftsStore, applyDraft, getAudit, getEvolutionAdvice, setEvolutionAdvice, getEscapeEnabled, setEscapeEnabled, escape, refreshAdvice, summariesFile, dispatchFile, adviceWhitelist, previewDraft, reminderStore, logger }) {
-  const deps = { store, getEnabled, setEnabled, syncTool, catalog, ledger, backgroundLedger, draftsStore, applyDraft, getAudit, getEvolutionAdvice, setEvolutionAdvice, getEscapeEnabled, setEscapeEnabled, escape, refreshAdvice, summariesFile, dispatchFile, adviceWhitelist, previewDraft, reminderStore, logger };
+export function createHttpRoutes({ webServer, store, getEnabled, setEnabled, syncTool, catalog, ledger, backgroundLedger, draftsStore, applyDraft, getAudit, getEvolutionAdvice, setEvolutionAdvice, getEscapeEnabled, setEscapeEnabled, escape, refreshAdvice, summariesFile, dispatchFile, adviceWhitelist, previewDraft, reminderStore, adviceSource, evolution, logger }) {
+  const deps = { store, getEnabled, setEnabled, syncTool, catalog, ledger, backgroundLedger, draftsStore, applyDraft, getAudit, getEvolutionAdvice, setEvolutionAdvice, getEscapeEnabled, setEscapeEnabled, escape, refreshAdvice, summariesFile, dispatchFile, adviceWhitelist, previewDraft, reminderStore, adviceSource, evolution, logger };
   const handler = async (req, res) => {
     const remote = req.socket?.remoteAddress;
     if (!LOOPBACKS.has(remote)) return json(res, 403, { ok: false, error: '仅限本机访问' });
@@ -419,7 +413,9 @@ export function createHttpRoutes({ webServer, store, getEnabled, setEnabled, syn
           return json(res, 403, { ok: false, error: `CSRF 防护拒绝：${violation.reason}` });
         }
       }
-      return routeRequest(deps, req, res, url, sub);
+      // 显式 await：async 路由的拒绝必须落入下方 catch（未 await 时 reject 会绕过
+      // catch 直接传播给 webServer，fail-loud 变成未捕获拒绝）。
+      return await routeRequest(deps, req, res, url, sub);
     } catch (error) {
       // 通用 500 不回显内部错误信息（防泄漏），详情只进宿主日志。
       deps.logger.error('[dsh-subagent-profile] settings route error:', error instanceof Error ? (error.stack ?? error.message) : String(error));

package/lib/core/model-policy.mjs

@@ -0,0 +1,77 @@
+// lib/core/model-policy.mjs — 官方子代理模型选择投影（subagentModelSelectionPolicy）
+// 的读取与生效路由断言。与官方工具链同源同 key（key 字符串照抄官方投影定义），
+// 无 @deepseek-ai 依赖，可被 bare-import 单测直接 import。
+//
+// 读取语义（与官方一致）：
+//   * sessionProjections 服务缺失 / stateOf 不可用 / 投影值 undefined 或 null
+//     （key 已注册但本会话未固化策略，官方视同未配置）→ { configured:false }，
+//     跳过、不抛错——插件行为与 0.4.0 完全一致。
+//   * 投影值为数组 → 形状校验（照官方 assertAllowedModelRoutes：数组、每项
+//     provider/model 为非空字符串、无重复路由、至少一条）→ 畸形 fail-loud，
+//     官方格式变更不得静默失效。
+//
+// 生效路由判定：判定输入是 per-call > profile > parent 解析链完成后的最终
+// provider/model（含继承带出的模型），与 allowedModels 精确成对匹配。
+
+const PROJECTION_SERVICE = 'sessionProjections';
+const POLICY_KEY = 'subagentModelSelectionPolicy';
+
+// 三层中文错误文案（定稿）：第一层说清越界事实与白名单，第二层说明与官方通道
+// 同策略，第三层给出行动路径。缺省侧（parent 未暴露路由）以 '(parent)' 占位。
+export function officialModelRejectMessage(provider, model, allowedModels) {
+  const shown = (value) => (typeof value === 'string' && value.length > 0 ? value : '(parent)');
+  const allowed = allowedModels.map((route) => `${route.provider}/${route.model}`).join('、');
+  return [
+    `dispatch: 模型 ${shown(provider)}/${shown(model)} 不在本会话允许的子代理模型白名单内（允许：${allowed}）。`,
+    '官方在其工具链执行同一策略，本插件同步执行，以保证两通道一致。',
+    '请改用允许的模型/方案，或在官方设置更新模型选择（本会话策略已固定，新会话生效）。',
+  ].join('\n');
+}
+
+// 形状校验：照官方 assertAllowedModelRoutes 语义（非空 provider/model 字符串、
+// 无重复路由），另按官方 stateSchema 的 min(1) 拒绝空数组。畸形即 fail-loud。
+function validateRoutes(routes) {
+  if (!Array.isArray(routes) || routes.length === 0) {
+    throw new Error('dispatch: 官方子代理模型选择投影形状不符（须为非空路由数组）');
+  }
+  const seen = new Set();
+  for (const candidate of routes) {
+    if (
+      candidate === null || typeof candidate !== 'object' || Array.isArray(candidate)
+      || typeof candidate.provider !== 'string' || candidate.provider.length === 0
+      || typeof candidate.model !== 'string' || candidate.model.length === 0
+    ) {
+      throw new Error('dispatch: 官方子代理模型选择投影形状不符（每项须为 provider/model 非空字符串）');
+    }
+    const key = `${candidate.provider}\0${candidate.model}`;
+    if (seen.has(key)) {
+      throw new Error(`dispatch: 官方子代理模型选择投影形状不符（路由 "${candidate.provider}/${candidate.model}" 重复）`);
+    }
+    seen.add(key);
+  }
+}
+
+// 读取官方模型选择投影。任何读取失败路径（ctx / 服务 / stateOf 缺失）与未固化
+// 状态（undefined / null）统一回退 { configured:false }（跳过语义）；投影存在则
+// 校验形状后返回路由表副本（返回值不得被调用方改写共享）。
+export function readModelSelectionPolicy(ctx, session) {
+  const projections = typeof ctx?.get === 'function' ? ctx.get(PROJECTION_SERVICE) : undefined;
+  const raw = projections !== null && typeof projections?.stateOf === 'function'
+    ? projections.stateOf(session, POLICY_KEY)
+    : undefined;
+  if (raw === undefined || raw === null) return { configured: false, enabled: false, allowedModels: [] };
+  validateRoutes(raw);
+  return {
+    configured: true,
+    enabled: true,
+    allowedModels: raw.map((route) => ({ provider: route.provider, model: route.model })),
+  };
+}
+
+// 生效路由断言：policy 未配置恒通过；否则 provider/model 与 allowedModels 精确
+// 成对匹配，不匹配 throw 三层中文错误（留痕与审计由调用方闸层负责）。
+export function assertOfficialModelRoute(policy, provider, model) {
+  if (policy === undefined || policy.configured !== true) return;
+  const allowed = policy.allowedModels.some((route) => route.provider === provider && route.model === model);
+  if (!allowed) throw new Error(officialModelRejectMessage(provider, model, policy.allowedModels));
+}

package/lib/core/presets-sync.mjs

@@ -2,7 +2,7 @@
 // 仅 node 内置，无 @deepseek-ai 依赖）。
 //
 // 宿主启动时插件把 bundled `presets/` 树同步进 DSH agent-presets 发现根
-// （~/.dsh/.agent-presets），使「编排者模式」无需手动复制就出现在新建会话
+// （~/.dsh/.agent-presets），使「编排者模式 V2」无需手动复制就出现在新建会话
 // 选择器里——与官方 dsh-liangshen bundle 相同的自安装模式。同步按目录、
 // 经哈希门控：per-target sidecar（.dsh-sync.json）记录 bundled 内容哈希与派生树
 // 快照哈希，下次运行跳过未变化的树、跳过（绝不覆盖）用户改过的树；两侧都变时
@@ -230,9 +230,26 @@ export function syncOnePreset(sourceDir, targetDir) {
   return 'synced';
 }
 
+// 旧预设收编归档（V2 取代）：bundled 已不再提供 `orchestrator`（由
+// `orchestrator-v2` 收编取代），发现根里若残留旧目录（旧版本自装、用户手工创建
+// 或恢复的），同步时改名归档为 orchestrator.removed-<stamp>——与卸载清理同一样式：
+// 只改名不删除（用户数据保留），幂等（归档后旧名即不存在，下次同步无操作）、
+// fail-soft（改名失败不抛不阻断，下次启动重试）。归档名含点号，不满足官方
+// PRESET_ID（^[a-z0-9][a-z0-9-]*$），不会出现在预设选择器。
+function archiveLegacyOrchestrator(targetRoot) {
+  const legacy = join(targetRoot, 'orchestrator');
+  if (!existsSync(legacy)) return false;
+  try {
+    renameSync(legacy, join(targetRoot, `orchestrator.removed-${Date.now()}`));
+    return true;
+  } catch {
+    return false;
+  }
+}
+
 // 把 `presets/` 下每个 preset 目录同步进目标发现根。
 export function syncBundledPresets(targetRoot) {
-  const result = { synced: [], current: [], userModified: [], failed: [] };
+  const result = { synced: [], current: [], userModified: [], failed: [], archived: [] };
   const sourceRoot = bundledPresetsRoot();
   mkdirSync(targetRoot, { recursive: true });
   if (existsSync(sourceRoot)) {
@@ -250,5 +267,10 @@ export function syncBundledPresets(targetRoot) {
       }
     }
   }
+  // 旧名收编归档：仅当 bundled 侧确无 orchestrator 目录时处理（防御：未来若仓库
+  // 回补同名 bundled，以 bundled 为准、不误归档其派生树）。
+  if (!existsSync(join(sourceRoot, 'orchestrator')) && archiveLegacyOrchestrator(targetRoot)) {
+    result.archived.push('orchestrator');
+  }
   return result;
 }

package/lib/core/profile-directory.mjs

@@ -125,6 +125,23 @@ export function profileStatsFromSummaries(store, summaries) {
   return out;
 }
 
+// dispatch:profiles section 文本（模型可见的轻量目录，瘦身）：行格式
+// `- id: "描述" (tier: X)`——成本/成功率等统计只进 profiles_query 与人类面板，不进
+// 静态段。description 为空显示 (无描述)（存量宽容渲染）；note 一行查表式并指向
+// profiles_query 下钻。gate 由调用方（index.mjs 的 profileSectionGate）传入。
+export function profileSectionText(store, gate, context) {
+  if (!gate(context)) return '';
+  const rows = profileDirectoryRows(store);
+  if (rows.length === 0) return '';
+  const lines = rows.map((p) => {
+    const desc = typeof p.description === 'string' && p.description.length > 0 ? `"${p.description}"` : '(无描述)';
+    const tier = typeof p.tokenTier === 'string' && p.tokenTier !== '' ? ` (tier: ${p.tokenTier})` : '';
+    return `- ${p.id}: ${desc}${tier}`;
+  });
+  const note = '按任务复杂度匹配方案能力（查资料/汇总→cheap 或 flash；写/改代码→swap-standard；深度推理→premium；1-2 步可自查的小事直接做别派；可用方案与明细用 profiles_query 查询）';
+  return `Available dispatch profiles (dispatch.profile):\n${lines.join('\n')}\n${note}`;
+}
+
 // 用 stats map 为目录行补 avgCost/successRate（F 数据层 join）。stats 为
 // profileStatsFromSummaries 的返回值；行上已有 avgCost/successRate 时优先保留
 // 显式值（store 侧/测试注入），stats 只补缺失。

package/lib/core/profile-provider.mjs

@@ -30,6 +30,8 @@ import { computeEffectiveAllow } from './intersection.mjs';
 import { resolveWhitelist } from './whitelist.mjs';
 import { assertCostGuard } from './cost-guard.mjs';
 import { DELEGATION_CONTEXT, buildDispatchMeta } from './delegation.mjs';
+import { readSessionEvents } from './session-read.mjs';
+import { applyOfficialModelProviderGate } from './dispatch-gates.mjs';
 
 // --- start 预检段（从 start 拆出）-------------------------------------------------
 
@@ -63,6 +65,9 @@ async function runStartPreflight(request, deps) {
   // 权威 cost guard（运行时推导；硬上限始终生效，llm 能力核验由 allowFailOpen 门控；
   // llm 目录读取走共享 catalog 快照）。
   await assertCostGuard(parent, profile, deps.store.getAllowFailOpen(), deps.logger, deps.catalog);
+  // 官方模型选择投影读取（服务/投影缺失或未固化 → configured:false 跳过）；生效
+  // 路由判定在 agentOptions 解析完成后——provider 渠道与 dispatch 预检同一白名单。
+  const policy = deps.readModelSelectionPolicy?.(parent.ctx, parent.session);
   // 委派深度：官方助手——先断言上限值，再解析子深度（父底 + 1）并执行上限。
   assertSubagentMaxDepth(profile.maxDepth);
   const childDepth = resolveChildDepth(parent, profile.maxDepth);
@@ -72,6 +77,7 @@ async function runStartPreflight(request, deps) {
   const swapPreset = typeof profile.preset === 'string' && profile.preset !== 'inherit' && profile.preset !== parentComposed;
   const meta = buildProviderMeta(parent, profile, swapPreset, childDepth);
   const agentOptions = buildProviderAgentOptions(parent, profile, childDepth);
+  applyOfficialModelProviderGate({ evoLedger: deps.evoLedger, sessionId: parent.session?.header?.id }, policy, agentOptions);
   return { parent, profile, delegated, childId, swapPreset, meta, agentOptions };
 }
 
@@ -195,7 +201,7 @@ function restrictChildTools(childCtx, parent, profile) {
 // 已取消时 result 闭包跳过 followup。
 function wireChildLifecycle(handle, request, childId, swapPreset, profile, logger) {
   const child = handle.agent;
-  const boundary = child.session.events.length;
+  const boundary = readSessionEvents(child.session).length;
   const flags = { cancelled: false };
   const onAbort = () => {
     flags.cancelled = true;
@@ -233,8 +239,8 @@ function wireChildLifecycle(handle, request, childId, swapPreset, profile, logge
   };
 }
 
-export function createProfileProvider({ subagents, store, getEnabled, logger, catalog, getEscapeSet }) {
-  const deps = { store, getEnabled, logger, catalog, getEscapeSet };
+export function createProfileProvider({ subagents, store, getEnabled, logger, catalog, getEscapeSet, readModelSelectionPolicy, evoLedger }) {
+  const deps = { store, getEnabled, logger, catalog, getEscapeSet, readModelSelectionPolicy, evoLedger };
   return subagents.registerProvider({
     name: 'profile',
     capabilities: { outputSchema: false, depthLimit: true, toolFilter: true, persona: true },