@klarkxy/dsh-safe-auto 0.1.0-rc.6 → 0.2.0

package/lib/client.js

@@ -1,168 +1,7 @@
-function __createDshNodeShims() {
-  class EventEmitter {
-    constructor() {
-      this._e = Object.create(null)
-    }
-    on(type, fn) {
-      (this._e[type] ||= []).push(fn)
-      return this
-    }
-    addListener(type, fn) {
-      return this.on(type, fn)
-    }
-    once(type, fn) {
-      const wrap = (...args) => {
-        this.off(type, wrap)
-        fn(...args)
-      }
-      return this.on(type, wrap)
-    }
-    off(type, fn) {
-      const list = this._e[type]
-      if (list) this._e[type] = list.filter((item) => item !== fn)
-      return this
-    }
-    removeListener(type, fn) {
-      return this.off(type, fn)
-    }
-    emit(type, ...args) {
-      const list = this._e[type]
-      if (!list) return false
-      for (const fn of list.slice()) fn(...args)
-      return true
-    }
-    removeAllListeners(type) {
-      if (type) delete this._e[type]
-      else this._e = Object.create(null)
-      return this
-    }
-    listeners(type) {
-      return (this._e[type] || []).slice()
-    }
-    setMaxListeners() {
-      return this
-    }
-  }
-
-  class Buffer extends Uint8Array {
-    static from(value, encodingOrOffset, length) {
-      if (typeof value === 'string') return new Buffer(new TextEncoder().encode(value))
-      if (value instanceof ArrayBuffer) return new Buffer(new Uint8Array(value, encodingOrOffset, length))
-      if (ArrayBuffer.isView(value)) return new Buffer(new Uint8Array(value.buffer, value.byteOffset, value.byteLength))
-      if (Array.isArray(value) || value && typeof value.length === 'number') return new Buffer(Uint8Array.from(value))
-      return new Buffer(0)
-    }
-    static alloc(size, fill) {
-      const buf = new Buffer(size)
-      if (fill !== undefined && fill !== 0) {
-        if (typeof fill === 'string') {
-          const bytes = new TextEncoder().encode(fill)
-          for (let i = 0; i < size; i += 1) buf[i] = bytes[i % bytes.length]
-        } else buf.fill(fill)
-      }
-      return buf
-    }
-    static allocUnsafe(size) {
-      return new Buffer(size)
-    }
-    static allocUnsafeSlow(size) {
-      return new Buffer(size)
-    }
-    static concat(list, totalLength) {
-      const length = totalLength ?? list.reduce((sum, item) => sum + item.length, 0)
-      const out = new Buffer(length)
-      let offset = 0
-      for (const item of list) {
-        out.set(item, offset)
-        offset += item.length
-      }
-      return out
-    }
-    static isBuffer(value) {
-      return value instanceof Buffer
-    }
-    static byteLength(value) {
-      if (typeof value === 'string') return new TextEncoder().encode(value).length
-      return value?.byteLength ?? value?.length ?? 0
-    }
-    static isEncoding(encoding) {
-      return /^(utf8|utf-8|ascii|latin1|binary|hex|base64|base64url)$/i.test(String(encoding || ''))
-    }
-    toString(encoding) {
-      if (encoding === 'hex') return [...this].map((byte) => byte.toString(16).padStart(2, '0')).join('')
-      if (encoding === 'base64') {
-        let binary = ''
-        this.forEach((byte) => {
-          binary += String.fromCharCode(byte)
-        })
-        return btoa(binary)
-      }
-      return new TextDecoder().decode(this)
-    }
-    slice(start, end) {
-      return Buffer.from(super.subarray(start, end))
-    }
-    copy(target, targetStart = 0, start = 0, end = this.length) {
-      const sliced = this.subarray(start, end)
-      target.set(sliced, targetStart)
-      return sliced.length
-    }
-    write(string, offset = 0) {
-      const bytes = new TextEncoder().encode(string)
-      const written = Math.min(bytes.length, this.length - offset)
-      this.set(bytes.subarray(0, written), offset)
-      return written
-    }
-  }
-
-  function inherits(ctor, superCtor) {
-    ctor.super_ = superCtor
-    ctor.prototype = Object.create(superCtor.prototype, {
-      constructor: { value: ctor, writable: true, configurable: true },
-    })
-  }
-
-  if (!globalThis.Buffer) globalThis.Buffer = Buffer
-
-  return {
-    buffer: { Buffer, SlowBuffer: Buffer, INSPECT_MAX_BYTES: 50, kMaxLength: 0x7fffffff },
-    stream: {
-      Stream: EventEmitter,
-      Readable: EventEmitter,
-      Writable: EventEmitter,
-      Duplex: EventEmitter,
-      Transform: EventEmitter,
-      PassThrough: EventEmitter,
-    },
-    events: { EventEmitter },
-    util: {
-      deprecate(fn) {
-        return fn
-      },
-      inherits,
-      inspect() {
-        return ''
-      },
-      format(value) {
-        return String(value)
-      },
-      types: { isBuffer: Buffer.isBuffer },
-    },
-  }
-}
-
 window.__ModuleLoader__.load({
   id: "@klarkxy/dsh-safe-auto",
   factory: (dshRequire) => {
-    var __nodeShims;
-    var process = globalThis.process || { env: {}, nextTick: function (fn) { var args = [].slice.call(arguments, 1); queueMicrotask(function () { fn.apply(null, args); }); } };
-    var require = function (id) {
-      if (id === 'buffer' || id === 'stream' || id === 'util' || id === 'events') {
-        if (!__nodeShims) __nodeShims = __createDshNodeShims();
-        return __nodeShims[id];
-      }
-      return dshRequire(id);
-    };
+    var require = dshRequire;
     var module = { exports: {} };
     var exports = module.exports;
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
@@ -191,6 +30,763 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 let react = require("react");
 react = __toESM(react, 1);
 let _deepseek_ai_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
+let react_dom = require("react-dom");
+let react_jsx_runtime = require("react/jsx-runtime");
+//#region ../dsh-model-route/lib/menu.js
+/** Localize standard effort ids only when the provider has not supplied a display name. */
+function modelMenuEffortLabel(effort, locale) {
+	if (effort.name !== effort.id) return effort.name;
+	return {
+		off: ["关闭", "Off"],
+		none: ["无", "None"],
+		minimal: ["最低", "Minimal"],
+		low: ["低", "Low"],
+		medium: ["中", "Medium"],
+		high: ["高", "High"],
+		xhigh: ["极高", "Extra high"],
+		max: ["最高", "Maximum"],
+		ultra: ["超高", "Ultra"]
+	}[effort.id]?.[locale?.toLowerCase().startsWith("zh") ? 0 : 1] ?? effort.name;
+}
+/** The short model label shown inside a provider group. */
+function modelMenuShortName(choice) {
+	const sep = choice.label.indexOf(" / ");
+	return sep > 0 ? choice.label.slice(sep + 3) : choice.model;
+}
+/** Group catalog choices by provider and filter them by a case-insensitive query. */
+function groupModelMenuChoices(choices, query) {
+	const needle = query.trim().toLowerCase();
+	const matched = needle ? choices.filter((choice) => choice.label.toLowerCase().includes(needle) || choice.model.toLowerCase().includes(needle) || choice.provider.toLowerCase().includes(needle)) : choices;
+	const groups = [];
+	for (const choice of matched) {
+		const sep = choice.label.indexOf(" / ");
+		const name = sep > 0 ? choice.label.slice(0, sep) : choice.provider;
+		const last = groups.at(-1);
+		if (last && last.provider === choice.provider) last.items.push(choice);
+		else groups.push({
+			provider: choice.provider,
+			name,
+			items: [choice]
+		});
+	}
+	return groups;
+}
+//#endregion
+//#region ../dsh-model-route/lib/index.js
+/**
+* Host model-catalog parsing shared by plugin settings UIs and model hubs.
+* Pure and browser-safe: no React, no host imports. The catalog envelope is
+* structural so hosts may add fields without breaking consumers.
+*/
+function asRecord(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+function asText(value) {
+	return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function parseEffort(value) {
+	const row = asRecord(value);
+	const id = row ? asText(row.id) : void 0;
+	if (!id) return void 0;
+	return {
+		id,
+		name: row ? asText(row.name) ?? id : id
+	};
+}
+/** Parse the host session catalog into flat choices, keeping a saved route selectable. */
+function parseModelMenuChoices(value, bound) {
+	const envelope = asRecord(value);
+	const root = (envelope && envelope.ok === true ? asRecord(envelope.value) : void 0) ?? envelope ?? {};
+	const groups = Array.isArray(root.groups) ? root.groups : [];
+	const choices = [];
+	for (const group of groups) {
+		const groupRow = asRecord(group);
+		const provider = groupRow ? asText(groupRow.id) : void 0;
+		if (!provider || !groupRow || !Array.isArray(groupRow.models)) continue;
+		const providerName = asText(groupRow.name) ?? provider;
+		for (const entry of groupRow.models) {
+			const modelRow = asRecord(entry);
+			const model = modelRow ? asText(modelRow.id) : void 0;
+			if (!model || !modelRow) continue;
+			const name = asText(modelRow.name) ?? model;
+			const reasoning = asRecord(modelRow.reasoning);
+			const efforts = reasoning && Array.isArray(reasoning.efforts) ? reasoning.efforts.flatMap((effort) => {
+				const parsed = parseEffort(effort);
+				return parsed ? [parsed] : [];
+			}) : [];
+			choices.push({
+				provider,
+				model,
+				label: `${providerName} / ${name}`,
+				efforts
+			});
+		}
+	}
+	if (bound?.provider && bound.model && !choices.some((item) => item.provider === bound.provider && item.model === bound.model)) choices.push({
+		provider: bound.provider,
+		model: bound.model,
+		label: `${bound.provider} / ${bound.model}`,
+		efforts: []
+	});
+	return choices;
+}
+/** Reasoning-effort options for one choice; the saved value stays selectable. */
+function modelMenuEffortOptions(choice, current) {
+	const listed = (choice?.efforts ?? []).map((item) => ({ ...item }));
+	if (current && !listed.some((item) => item.id === current)) listed.push({
+		id: current,
+		name: current
+	});
+	return listed;
+}
+//#endregion
+//#region ../dsh-model-route/lib/ui.js
+/**
+* ModelMenu: the standard editor of one model-route field — the visible half
+* of the x-model-route contract. A feature plugin's settings page renders it
+* for its own marked field; the model hub renders one per detected field.
+*
+* It is a plugin-side copy of the host's composer model picker
+* (dsh-client-ui-model-selection's ModelSelect), rebuilt from the official
+* primitives and the published bundle's behavior: one card that opens on the
+* root pane (Model / Effort cells), drills into the provider-grouped,
+* searchable model list or the effort list, and Escapes back before closing.
+* Sticky group headings, subsequence ranking, highlight walking and focus
+* hand-back all match the host. SYNC POINT: when the host's ModelSelect or
+* ModelSelect.module.css changes, this copy must be re-transcribed; styles
+* below may only reference --dsw-* theme tokens, never literal colors.
+*
+* It statically imports the primitives, so only browser clients should load
+* this entry; host code and node tests use the core entry (`./index.ts`).
+*/
+/** Unplaced portal card: hidden but laid out at a fixed origin so measurements are real. */
+const MEASURE_STYLE = {
+	visibility: "hidden",
+	left: 0,
+	top: 0
+};
+function ModelMenu(props) {
+	const language = props.locale?.toLowerCase().startsWith("zh") ? "zh" : "en";
+	const copy = language === "zh" ? {
+		model: "模型",
+		effort: "思考强度",
+		default: "默认",
+		search: "搜索模型…",
+		empty: "没有匹配的模型",
+		clear: "清除搜索"
+	} : {
+		model: "Model",
+		effort: "Reasoning",
+		default: "Default",
+		search: "Search models…",
+		empty: "No matching models",
+		clear: "Clear search"
+	};
+	const { open, onOpenChange, anchor, choices, selected, onPick, leading = [], onPickLeading, efforts = [], selectedEffort, onPickEffort, modelLabel = copy.model, modelValue = "—", effortLabel = copy.effort, effortValue, defaultEffortLabel = copy.default, searchPlaceholder = copy.search, emptyLabel = copy.empty, clearSearchLabel = copy.clear, className, listClassName } = props;
+	const rootRef = (0, react.useRef)(null);
+	const openRef = (0, react.useRef)(open);
+	openRef.current = open;
+	const pendingOpenRef = (0, react.useRef)(false);
+	const pendingRestoreFocus = (0, react.useRef)(false);
+	const [requestedOpen, setRequestedOpen] = (0, react.useState)(false);
+	const menuRef = (0, react.useRef)(null);
+	const groupsRef = (0, react.useRef)(null);
+	const searchRef = (0, react.useRef)(null);
+	const itemRefs = (0, react.useRef)([]);
+	const paneFocus = (0, react.useRef)(null);
+	const [pane, setPane] = (0, react.useState)("root");
+	const [query, setQuery] = (0, react.useState)("");
+	const [highlightedIndex, setHighlightedIndex] = (0, react.useState)(null);
+	const [menuPos, setMenuPos] = (0, react.useState)(null);
+	const id = (0, react.useId)();
+	const showSearch = choices.length > 4;
+	const effortRows = (0, react.useMemo)(() => [{
+		id: "",
+		name: defaultEffortLabel
+	}, ...efforts.map((effort) => ({
+		...effort,
+		name: modelMenuEffortLabel(effort, language)
+	}))], [
+		defaultEffortLabel,
+		efforts,
+		language
+	]);
+	const filteredGroups = (0, react.useMemo)(() => groupModelMenuChoices(choices, "").map((group) => ({
+		...group,
+		items: (0, _deepseek_ai_dsh_client_ui_primitives.rankByName)(group.items.map((choice) => ({
+			choice,
+			name: modelMenuShortName(choice),
+			label: choice.model
+		})), showSearch ? query.trim() : "")
+	})).filter((group) => group.items.length > 0), [
+		choices,
+		query,
+		showSearch
+	]);
+	const visibleModels = (0, react.useMemo)(() => filteredGroups.flatMap((group) => group.items.map((item) => item.choice)), [filteredGroups]);
+	const currentVisibleIndex = visibleModels.findIndex((choice) => choice.provider === selected?.provider && choice.model === selected.model);
+	const activeModelIndex = Math.min(highlightedIndex ?? Math.max(0, currentVisibleIndex), visibleModels.length - 1);
+	const changeOpen = (next) => {
+		if (openRef.current === next) return;
+		openRef.current = next;
+		onOpenChange(next);
+	};
+	const requestOpen = () => {
+		if (open || pendingOpenRef.current) return;
+		pendingOpenRef.current = true;
+		pendingRestoreFocus.current = false;
+		setRequestedOpen(true);
+	};
+	const close = (restoreFocus = false) => {
+		const active = document.activeElement;
+		pendingRestoreFocus.current = restoreFocus && (active === document.body || rootRef.current?.contains(active) === true || menuRef.current?.contains(active) === true);
+		changeOpen(false);
+	};
+	const drill = (next) => {
+		setQuery("");
+		setHighlightedIndex(null);
+		paneFocus.current = "drill";
+		setPane(next);
+	};
+	/** Leave a drilled pane for the root one, handing the keyboard back to its cell. */
+	const back = (from) => {
+		paneFocus.current = from;
+		setPane("root");
+	};
+	const moveFocus = (offset) => {
+		const items = itemRefs.current.filter((item) => item !== null && !item.disabled);
+		if (!items.length) return;
+		const active = items.findIndex((item) => item === document.activeElement);
+		items[active === -1 ? offset > 0 ? 0 : items.length - 1 : (active + offset + items.length) % items.length]?.focus();
+	};
+	(0, react.useLayoutEffect)(() => {
+		if (open || !pendingRestoreFocus.current) return;
+		const active = document.activeElement;
+		if (active !== document.body && !rootRef.current?.contains(active)) {
+			pendingRestoreFocus.current = false;
+			return;
+		}
+		const trigger = rootRef.current?.querySelector("button");
+		if (!trigger || trigger.disabled) return;
+		trigger.focus();
+		if (document.activeElement === trigger) pendingRestoreFocus.current = false;
+	});
+	(0, react.useEffect)(() => {
+		if (open || !pendingRestoreFocus.current) return;
+		const cancelOutside = (event) => {
+			if (event.target instanceof Node && !rootRef.current?.contains(event.target)) pendingRestoreFocus.current = false;
+		};
+		document.addEventListener("focusin", cancelOutside);
+		document.addEventListener("pointerdown", cancelOutside);
+		return () => {
+			document.removeEventListener("focusin", cancelOutside);
+			document.removeEventListener("pointerdown", cancelOutside);
+		};
+	});
+	(0, react.useEffect)(() => {
+		if (!requestedOpen) return;
+		pendingOpenRef.current = false;
+		setRequestedOpen(false);
+		if (!open) changeOpen(true);
+	}, [requestedOpen, open]);
+	(0, react.useEffect)(() => {
+		if (!open) return;
+		setPane("root");
+		setQuery("");
+		setHighlightedIndex(null);
+	}, [open]);
+	(0, react.useEffect)(() => {
+		if (!open) return;
+		const closeOutside = (event) => {
+			const target = event.target;
+			if (rootRef.current?.contains(target) || menuRef.current?.contains(target)) return;
+			changeOpen(false);
+		};
+		document.addEventListener("mousedown", closeOutside);
+		return () => document.removeEventListener("mousedown", closeOutside);
+	}, [open, onOpenChange]);
+	(0, react.useEffect)(() => {
+		const intent = paneFocus.current;
+		if (!open || menuPos === null || intent === null) return;
+		if (intent !== "drill" && pane !== "root") return;
+		paneFocus.current = null;
+		if (intent === "drill") {
+			if (pane === "model" && showSearch) {
+				searchRef.current?.focus();
+				return;
+			}
+			(menuRef.current?.querySelector("[role=\"menuitemradio\"][aria-checked=\"true\"]:not([disabled])") ?? itemRefs.current.find((item) => item !== null && !item.disabled))?.focus();
+			return;
+		}
+		itemRefs.current[intent === "effort" ? 1 : 0]?.focus();
+	}, [
+		open,
+		pane,
+		showSearch,
+		menuPos
+	]);
+	(0, react.useEffect)(() => {
+		const viewport = groupsRef.current;
+		if (viewport === null) return;
+		return (0, _deepseek_ai_dsh_client_ui_primitives.observeStickyMenuGroups)(viewport);
+	}, [
+		open,
+		pane,
+		filteredGroups
+	]);
+	(0, react.useLayoutEffect)(() => {
+		if (open && pane === "model" && activeModelIndex >= 0) itemRefs.current[leading.length + activeModelIndex]?.scrollIntoView({ block: "nearest" });
+	}, [
+		open,
+		pane,
+		activeModelIndex,
+		visibleModels,
+		leading.length
+	]);
+	(0, react.useLayoutEffect)(() => {
+		if (!open) {
+			setMenuPos(null);
+			return;
+		}
+		const place = () => {
+			const rect = rootRef.current?.getBoundingClientRect();
+			if (!rect) return;
+			const margin = 12, lw = menuRef.current?.offsetWidth ?? 0, lh = menuRef.current?.offsetHeight ?? 0;
+			let x = rect.right - lw, y = rect.top - 8 - lh;
+			if (lw > 0) x = Math.min(Math.max(x, margin), window.innerWidth - lw - margin);
+			if (lh > 0) y = Math.min(Math.max(y, margin), window.innerHeight - lh - margin);
+			setMenuPos({
+				left: x,
+				top: y
+			});
+		};
+		place();
+		window.addEventListener("scroll", place, true);
+		window.addEventListener("resize", place);
+		return () => {
+			window.removeEventListener("scroll", place, true);
+			window.removeEventListener("resize", place);
+		};
+	}, [
+		open,
+		pane,
+		choices,
+		query
+	]);
+	function onKeyDown(event) {
+		if (event.defaultPrevented || event.nativeEvent.isComposing) return;
+		if (!open && [
+			"Enter",
+			" ",
+			"ArrowDown",
+			"ArrowUp"
+		].includes(event.key)) {
+			const button = event.target instanceof Element ? event.target.closest("button") : null;
+			if (!(button instanceof HTMLButtonElement) || button.disabled || !rootRef.current?.contains(button)) return;
+			event.preventDefault();
+			paneFocus.current = "model";
+			requestOpen();
+			return;
+		}
+		if (event.key === "Escape" && open) {
+			event.preventDefault();
+			if (pane !== "root") back(pane);
+			else close(true);
+			return;
+		}
+		if (!open) return;
+		if (pane === "model" && showSearch && (event.key === "ArrowDown" || event.key === "ArrowUp")) {
+			event.preventDefault();
+			if (visibleModels.length > 0) {
+				setHighlightedIndex((activeModelIndex + (event.key === "ArrowDown" ? 1 : -1) + visibleModels.length) % visibleModels.length);
+				searchRef.current?.focus();
+			}
+			return;
+		}
+		if (pane === "model" && showSearch && event.target instanceof HTMLInputElement && (event.key === "Enter" || event.key === "Tab" && !event.shiftKey)) {
+			if (event.key === "Tab" && visibleModels.length === 0) return;
+			event.preventDefault();
+			const highlighted = visibleModels[activeModelIndex];
+			if (highlighted) {
+				onPick({
+					provider: highlighted.provider,
+					model: highlighted.model
+				});
+				close(true);
+			}
+			return;
+		}
+		if (event.key === "Tab") {
+			if (event.shiftKey) {
+				event.preventDefault();
+				if (pane !== "root") back(pane);
+				else close(true);
+				return;
+			}
+			const focused = document.activeElement;
+			const rows = itemRefs.current.filter((item) => item !== null);
+			if (focused instanceof HTMLButtonElement && rows.includes(focused)) {
+				event.preventDefault();
+				focused.click();
+				return;
+			}
+			if (pane === "model" && showSearch) {
+				event.preventDefault();
+				setHighlightedIndex(null);
+				searchRef.current?.focus();
+			}
+			return;
+		}
+		if (event.key === "ArrowDown" || event.key === "ArrowUp") {
+			event.preventDefault();
+			moveFocus(event.key === "ArrowDown" ? 1 : -1);
+		}
+	}
+	function onBlur(event) {
+		if (event.relatedTarget instanceof Node && (rootRef.current?.contains(event.relatedTarget) || menuRef.current?.contains(event.relatedTarget))) return;
+		if (open) changeOpen(false);
+	}
+	itemRefs.current = [];
+	let itemIndex = 0;
+	let modelIndex = 0;
+	const itemRef = () => {
+		const at = itemIndex++;
+		return (node) => {
+			itemRefs.current[at] = node;
+		};
+	};
+	const menu = open && typeof document !== "undefined" ? (0, react_dom.createPortal)(/* @__PURE__ */ (0, react_jsx_runtime.jsxs)(_deepseek_ai_dsh_client_ui_primitives.MenuSurface, {
+		ref: menuRef,
+		id: `${id}-menu`,
+		className: `dsh-model-menu-menu${listClassName ? ` ${listClassName}` : ""}`,
+		style: menuPos ?? MEASURE_STYLE,
+		role: pane === "model" ? "group" : "menu",
+		"aria-label": modelLabel,
+		lang: language,
+		children: [
+			pane === "root" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+				ref: itemRef(),
+				type: "button",
+				role: "menuitem",
+				className: "dsh-model-menu-cell",
+				onClick: () => drill("model"),
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-model-menu-cellLabel",
+						children: modelLabel
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-model-menu-cellValue",
+						children: modelValue
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronRightOutlineRegular, { className: "dsh-model-menu-cellChevron" })
+				]
+			}), efforts.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+				ref: itemRef(),
+				type: "button",
+				role: "menuitem",
+				className: "dsh-model-menu-cell",
+				onClick: () => drill("effort"),
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-model-menu-cellLabel",
+						children: effortLabel
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-model-menu-cellValue",
+						children: effortValue ?? effortRows.find((row) => row.id === (selectedEffort ?? ""))?.name ?? defaultEffortLabel
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronRightOutlineRegular, { className: "dsh-model-menu-cellChevron" })
+				]
+			}) : null] }) : null,
+			pane === "model" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+				showSearch ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dsh-model-menu-searchRow",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Input, {
+						ref: searchRef,
+						className: `dsh-model-menu-search${query !== "" ? " dsh-model-menu-searchWithQuery" : ""}`,
+						type: "text",
+						role: "searchbox",
+						"aria-label": searchPlaceholder,
+						"aria-controls": `${id}-models`,
+						"aria-activedescendant": activeModelIndex < 0 ? void 0 : `${id}-model-${activeModelIndex}`,
+						placeholder: searchPlaceholder,
+						value: query,
+						onChange: (event) => {
+							setQuery(event.target.value);
+							setHighlightedIndex(0);
+						}
+					}), query !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						className: "dsh-model-menu-searchClear",
+						"aria-label": clearSearchLabel,
+						onClick: () => {
+							setQuery("");
+							setHighlightedIndex(null);
+							searchRef.current?.focus();
+						},
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconCloseFillRegular, {})
+					}) : null]
+				}) : null,
+				/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					ref: groupsRef,
+					id: `${id}-models`,
+					className: "dsh-model-menu-groups scrollable",
+					role: "menu",
+					"aria-label": modelLabel,
+					hidden: filteredGroups.length === 0,
+					children: [leading.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dsh-model-menu-leading",
+						children: leading.map((item) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+							ref: itemRef(),
+							type: "button",
+							role: "menuitemradio",
+							"aria-checked": item.selected === true,
+							className: `dsh-model-menu-option${item.selected === true ? " dsh-model-menu-selected" : ""}`,
+							onClick: () => {
+								onPickLeading?.(item.id);
+								close(true);
+							},
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-model-menu-optionCopy",
+								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: "dsh-model-menu-modelName",
+									children: item.label
+								})
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-model-menu-check",
+								children: item.selected === true ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconCheckOutlineRegular, {}) : null
+							})]
+						}, item.id))
+					}) : null, filteredGroups.map((group) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.MenuGroup, {
+						label: group.name,
+						children: group.items.map((item) => {
+							const index = modelIndex++;
+							const choice = item.choice;
+							const checked = selected?.provider === choice.provider && selected.model === choice.model;
+							return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+								ref: itemRef(),
+								type: "button",
+								role: "menuitemradio",
+								"aria-checked": checked,
+								id: `${id}-model-${index}`,
+								tabIndex: showSearch ? -1 : 0,
+								onFocus: () => setHighlightedIndex(index),
+								"data-highlighted": index === activeModelIndex ? "" : void 0,
+								className: `dsh-model-menu-option dsh-model-menu-modelOption${checked ? " dsh-model-menu-selected" : ""}${index === activeModelIndex ? " dsh-model-menu-optionActive" : ""}`,
+								onMouseMove: index === activeModelIndex ? void 0 : () => {
+									if (showSearch) setHighlightedIndex(index);
+									else itemRefs.current[leading.length + index]?.focus();
+								},
+								title: choice.label,
+								onClick: () => {
+									onPick({
+										provider: choice.provider,
+										model: choice.model
+									});
+									close(true);
+								},
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: "dsh-model-menu-optionCopy",
+									children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "dsh-model-menu-modelName",
+										children: modelMenuShortName(choice)
+									})
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: "dsh-model-menu-check",
+									children: checked ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconCheckOutlineRegular, {}) : null
+								})]
+							}, `${choice.provider}/${choice.model}`);
+						})
+					}, group.provider))]
+				}),
+				filteredGroups.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+					className: "dsh-model-menu-empty",
+					role: "status",
+					children: emptyLabel
+				}) : null
+			] }) : null,
+			pane === "effort" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(react_jsx_runtime.Fragment, { children: effortRows.map((row) => {
+				const checked = (selectedEffort ?? "") === row.id;
+				return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+					ref: itemRef(),
+					type: "button",
+					role: "menuitemradio",
+					"aria-checked": checked,
+					className: `dsh-model-menu-option${checked ? " dsh-model-menu-selected" : ""}`,
+					onClick: () => {
+						onPickEffort?.(row.id || void 0);
+						close(true);
+					},
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-model-menu-optionCopy",
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsh-model-menu-modelName",
+							children: row.name
+						})
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-model-menu-check",
+						children: checked ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconCheckOutlineRegular, {}) : null
+					})]
+				}, row.id || "__default");
+			}) }) : null
+		]
+	}), document.body) : null;
+	const trigger = (0, react.isValidElement)(anchor) ? (0, react.cloneElement)(anchor, {
+		"aria-haspopup": "menu",
+		"aria-expanded": open,
+		"aria-controls": open ? `${id}-menu` : void 0
+	}) : anchor;
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+		ref: rootRef,
+		className: `dsh-model-menu-root${className ? ` ${className}` : ""}`,
+		onKeyDown,
+		onBlur,
+		onClick: (event) => {
+			if (event.defaultPrevented) return;
+			const button = event.target instanceof Element ? event.target.closest("button") : null;
+			if (!(button instanceof HTMLButtonElement) || button.disabled || !rootRef.current?.contains(button)) return;
+			requestOpen();
+		},
+		onMouseDown: (event) => {
+			if (event.target instanceof Element && menuRef.current?.contains(event.target) && event.target.closest("button") !== null) event.preventDefault();
+		},
+		children: [trigger, menu]
+	});
+}
+/**
+* ModelMenu styles, transcribed from the official ModelSelect.module.css (the
+* published dsh-client-ui-model-selection bundle): card capped at
+* min(360px, 100vh - 96px), 34px option cells at 13/18 with 5px 7px padding,
+* 34px root cells at 13/20, a borderless 12px search row with a clear button,
+* sticky group headings (MenuGroup's own CSS), and the l1-stroke prominent
+* elevation at portal z-index 1100. The trigger mirrors the composer's 28px
+* model pill, chevron rotating open. MenuSurface paints fill and backdrop.
+* Only --dsw-* theme tokens may appear here — a literal color is a bug.
+*/
+const modelMenuCss = `
+.dsh-model-menu-root { min-width: 0; position: relative; display: inline-flex; }
+.dsh-model-menu-trigger {
+  border-radius: var(--dsw-radius-sm);
+  min-width: 0;
+  max-width: min(360px, 45cqw);
+  height: 28px;
+  color: var(--dsw-alias-label-secondary);
+  cursor: pointer;
+  background: none;
+  border: none;
+  outline: none;
+  align-items: center;
+  gap: 4px;
+  padding: 0 4px 0 8px;
+  font-size: 13px;
+  font-weight: 400;
+  line-height: 20px;
+  display: flex;
+}
+.dsh-model-menu-trigger:hover:not(:disabled) { background: var(--dsw-alias-interactive-bg-hover); }
+.dsh-model-menu-trigger:focus-visible:not([data-selection-focus]) { box-shadow: 0 0 0 2px var(--dsw-focus-ring-color, var(--dsw-alias-state-business-primary)); }
+.dsh-model-menu-trigger:disabled { color: var(--dsw-alias-label-dimmed); cursor: default; }
+.dsh-model-menu-triggerLabel { text-overflow: ellipsis; white-space: nowrap; min-width: 0; overflow: hidden; }
+.dsh-model-menu-triggerEffort { text-overflow: ellipsis; white-space: nowrap; min-width: 0; color: var(--dsw-alias-label-caption); flex-shrink: 1000; overflow: hidden; }
+.dsh-model-menu-chevron { color: var(--dsw-alias-label-caption); flex: none; transition: transform 0.12s; }
+.dsh-model-menu-chevronOpen { transform: rotate(180deg); }
+.dsh-model-menu-menu {
+  z-index: 1100;
+  --dsw-elevation-stroke-color: var(--dsw-alias-border-l1);
+  width: max-content;
+  min-width: min(240px, 100vw - 32px);
+  max-width: min(420px, 100vw - 32px);
+  max-height: min(360px, 100vh - 96px);
+  box-shadow: var(--dsw-elevation-prominent);
+  color: var(--dsw-alias-label-primary);
+  --dsh-scrollbar-thumb: var(--dsw-alias-scrollbar-bg-l2);
+  --dsh-scrollbar-thumb-hover: var(--dsw-alias-scrollbar-hover-l2);
+  border: 0;
+  flex-direction: column;
+  padding: 4px;
+  display: flex;
+  position: fixed;
+  overflow: hidden;
+}
+.dsh-model-menu-status, .dsh-model-menu-empty { color: var(--dsw-alias-label-tertiary); padding: 8px; font-size: 12px; line-height: 18px; }
+.dsh-model-menu-searchRow { flex-shrink: 0; margin: 2px 0 3px; position: relative; }
+.dsh-model-menu-searchRow .dsh-model-menu-search { border-radius: var(--dsw-radius-md); background: none; border: 0 solid transparent; height: auto; padding: 5px 7px; display: flex; }
+.dsh-model-menu-searchRow .dsh-model-menu-search:focus-within { border-color: transparent; }
+.dsh-model-menu-searchWithQuery { padding-right: 34px; }
+.dsh-model-menu-searchRow .dsh-model-menu-search input { padding: 0; font-size: 12px; line-height: normal; }
+.dsh-model-menu-searchRow .dsh-model-menu-search input::placeholder { color: var(--dsw-alias-label-caption); }
+.dsh-model-menu-searchClear {
+  width: 24px;
+  height: 24px;
+  color: var(--dsw-alias-label-secondary);
+  cursor: pointer;
+  background: none;
+  border: none;
+  border-radius: 50%;
+  justify-content: center;
+  align-items: center;
+  padding: 0;
+  display: inline-flex;
+  position: absolute;
+  top: 50%;
+  right: 4px;
+  transform: translateY(-50%);
+}
+.dsh-model-menu-searchClear:hover, .dsh-model-menu-searchClear:focus-visible { background: var(--dsw-alias-interactive-bg-hover); outline: none; }
+.dsh-model-menu-groups { min-height: 0; overflow-y: auto; }
+.dsh-model-menu-leading { border-bottom: 0.5px solid var(--dsw-alias-border-l2); margin-bottom: 3px; padding-bottom: 3px; }
+.dsh-model-menu-option {
+  box-sizing: border-box;
+  border-radius: var(--dsw-radius-md);
+  width: auto;
+  min-width: 100%;
+  min-height: 34px;
+  color: inherit;
+  text-align: left;
+  cursor: pointer;
+  background: none;
+  border: none;
+  outline: none;
+  align-items: center;
+  gap: 6px;
+  padding: 5px 7px;
+  display: flex;
+}
+.dsh-model-menu-option:not(.dsh-model-menu-modelOption):hover:not(:disabled),
+.dsh-model-menu-option:focus-visible,
+.dsh-model-menu-optionActive:not(:disabled) { background: var(--dsw-alias-interactive-bg-hover); }
+.dsh-model-menu-modelOption:hover:not(:disabled) { background: var(--dsw-alias-interactive-bg-hover); }
+.dsh-model-menu-selected { background: none; }
+.dsh-model-menu-option:disabled { color: var(--dsw-alias-label-dimmed); cursor: default; }
+.dsh-model-menu-optionCopy { flex-direction: column; flex: 1; min-width: 0; display: flex; }
+.dsh-model-menu-modelName { color: inherit; text-overflow: ellipsis; white-space: nowrap; font-size: 13px; font-weight: 400; line-height: 18px; overflow: hidden; }
+.dsh-model-menu-check { color: var(--dsw-alias-label-primary); flex: 0 0 14px; place-items: center; display: grid; }
+.dsh-model-menu-check svg { width: 14px; height: 14px; }
+.dsh-model-menu-cell {
+  box-sizing: border-box;
+  border-radius: var(--dsw-radius-md);
+  width: auto;
+  min-width: 100%;
+  height: 34px;
+  color: var(--dsw-alias-label-primary);
+  cursor: pointer;
+  text-align: left;
+  background: none;
+  border: none;
+  outline: none;
+  align-items: center;
+  gap: 6px;
+  padding: 0 8px;
+  font-size: 13px;
+  line-height: 20px;
+  display: flex;
+}
+.dsh-model-menu-cell:hover, .dsh-model-menu-cell:focus-visible { background: var(--dsw-alias-interactive-bg-hover); }
+.dsh-model-menu-cellLabel { white-space: nowrap; flex: none; }
+.dsh-model-menu-cellValue { text-overflow: ellipsis; white-space: nowrap; text-align: right; min-width: 0; color: var(--dsw-alias-label-tertiary); flex: auto; overflow: hidden; }
+.dsh-model-menu-cellChevron { width: 12px; height: 12px; color: var(--dsw-alias-menu-icon); flex: none; }
+`;
 Object.values({
 	/** Surfaces, from the page up to the topmost nested card. */
 	surface: [
@@ -488,7 +1084,7 @@ ${scope} {
   border: 0.5px solid var(--dsw-alias-border-l3);
   border-radius: var(--dsw-radius-md);
   background: var(--dsw-alias-bg-layer-1);
-  font-family: var(--ds-font-family-code, ui-monospace, 'Cascadia Mono', Consolas, monospace);
+  font-family: var(--ds-font-family-code);
   font-size: 12px;
   line-height: 20px;
   color: var(--dsw-alias-label-secondary);
@@ -564,6 +1160,188 @@ ${scope} {
 `.replace(/^& (\.dsh-ui-[a-z0-9-]+)(?![+>~])/gm, (_match, className) => `&${className}, & ${className}`);
 }
 //#endregion
+//#region ../dsh-plugin-kit/lib/client-utils.js
+/** Fixed pause for failing background reads; manual work is never replayed. */
+function createPluginReadGate(now = Date.now) {
+	let pausedUntil = 0;
+	let epoch = 0;
+	return {
+		canRead: () => now() >= pausedUntil,
+		reset: () => {
+			epoch++;
+			pausedUntil = 0;
+		},
+		async run(read) {
+			const current = epoch;
+			try {
+				const value = await read();
+				if (current === epoch) pausedUntil = 0;
+				return value;
+			} catch (error) {
+				const message = error instanceof Error ? error.message : "";
+				if (current === epoch && (/(?:^|\s)transport failure for .+: HTTP (?:404|405|503)\b/.test(message) || error instanceof TypeError && /^(?:Failed to fetch|fetch failed|NetworkError when attempting to fetch resource\.?)$/i.test(message))) pausedUntil = now() + 3e4;
+				throw error;
+			}
+		}
+	};
+}
+//#endregion
+//#region ../dsh-plugin-kit/lib/contracts.js
+/**
+* Remote contribution for model-settings change notifications.
+* Provided by `@klarkxy/dsh-model-hub` (`ModelSettingsChangesController`);
+* subscribers degrade silently when that package is not installed.
+* The stream carries invalidations only — `ready` is never a settings snapshot.
+*/
+const MODEL_SETTINGS_CHANGES_REMOTE = {
+	package: "@klarkxy/dsh-model-hub",
+	descriptors: [{
+		id: "modelSettingsChanges/watch",
+		service: "modelSettingsChangesController",
+		namespace: "modelSettingsChanges",
+		method: "watch",
+		mode: "stream",
+		invocation: { kind: "direct" },
+		parameters: [],
+		cancellation: { parameter: "signal" }
+	}]
+};
+//#endregion
+//#region ../dsh-plugin-kit/lib/model-settings-client.js
+/** This stream carries invalidations only; ready is never a settings snapshot. */
+function parseModelSettingsChangeFrame(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("Invalid model settings change frame");
+	const frame = value;
+	if (frame.kind === "ready" && Object.keys(frame).length === 1) return { kind: "ready" };
+	if (frame.kind === "changed" && Object.keys(frame).length === 3 && typeof frame.ns === "string" && frame.ns.length > 0 && typeof frame.revision === "number" && Number.isSafeInteger(frame.revision) && frame.revision >= 0) return {
+		kind: "changed",
+		ns: frame.ns,
+		revision: frame.revision
+	};
+	throw new Error("Invalid model settings change frame");
+}
+MODEL_SETTINGS_CHANGES_REMOTE.package, MODEL_SETTINGS_CHANGES_REMOTE.descriptors.map((descriptor) => ({
+	...descriptor,
+	result: {
+		mode: "strict",
+		typeSymbol: "ModelSettings.ChangeFrame",
+		create: () => ({ parse: parseModelSettingsChangeFrame })
+	}
+}));
+/** Native RemoteStream owns carrier reconnects; no timers or browser transport.
+* A factory shares one logical stream while at least one subscriber remains. */
+function createModelSettingsSubscriber(ctx, namespace) {
+	const listeners = /* @__PURE__ */ new Set();
+	let injection;
+	let current;
+	let lifecycle = 0;
+	let failureMessage;
+	const report = (message) => {
+		failureMessage = message;
+		for (const listener of [...listeners]) try {
+			listener.error?.(message);
+		} catch {}
+	};
+	const invalidate = () => {
+		for (const listener of [...listeners]) {
+			if (!listeners.has(listener)) continue;
+			try {
+				listener.change();
+			} catch (error) {
+				try {
+					listener.error?.(error instanceof Error ? error.message : String(error));
+				} catch {}
+			}
+		}
+	};
+	const start = () => {
+		const life = ++lifecycle;
+		injection = ctx.inject(["remote", "remote.modelSettingsChanges"], (injected) => {
+			if (life !== lifecycle || !listeners.size) return;
+			const scope = injected;
+			const stream = scope.remote.$stream({
+				name: "Model settings sync",
+				open: (signal) => scope.remote.modelSettingsChanges.watch(signal),
+				ended: (accepted) => /* @__PURE__ */ new Error(`Model settings sync stream ended ${accepted ? "after" : "before"} ready; refresh or reopen the page`)
+			});
+			const session = {
+				stream,
+				active: true
+			};
+			current = session;
+			scope.effect(() => () => {
+				session.active = false;
+				if (current === session) {
+					current = void 0;
+					if (life === lifecycle && listeners.size) report("Model settings sync service unavailable");
+				}
+				return stream.dispose();
+			});
+			(async () => {
+				let generation;
+				let ready = false;
+				try {
+					for await (const item of stream) {
+						if (!session.active || life !== lifecycle || !listeners.size) break;
+						if (item.signal.aborted) continue;
+						if (generation !== item.generation) {
+							generation = item.generation;
+							ready = false;
+						}
+						const frame = parseModelSettingsChangeFrame(item.value);
+						if (frame.kind === "ready") {
+							ready = true;
+							failureMessage = void 0;
+							item.accept();
+							invalidate();
+						} else {
+							if (!ready) throw new Error("Model settings sync change arrived before ready");
+							if (namespace === "*" || frame.ns === namespace) invalidate();
+						}
+					}
+				} catch (error) {
+					if (session.active && life === lifecycle) report(error instanceof Error ? error.message : String(error));
+				} finally {
+					if (current === session) current = void 0;
+					session.active = false;
+					await stream.dispose().catch(() => {});
+				}
+			})();
+		});
+		queueMicrotask(() => {
+			if (life === lifecycle && listeners.size && !current) report("Model settings sync service unavailable");
+		});
+	};
+	return Object.freeze({ subscribe(onChange, onError) {
+		const listener = {
+			change: onChange,
+			error: onError
+		};
+		listeners.add(listener);
+		if (!injection) start();
+		else if (failureMessage) queueMicrotask(() => {
+			if (listeners.has(listener) && failureMessage) try {
+				listener.error?.(failureMessage);
+			} catch {}
+		});
+		return () => {
+			if (!listeners.delete(listener) || listeners.size) return;
+			lifecycle++;
+			if (current) {
+				current.active = false;
+				current.stream.dispose().catch(() => {});
+			}
+			current = void 0;
+			failureMessage = void 0;
+			const previous = injection;
+			injection = void 0;
+			try {
+				Promise.resolve(previous?.dispose()).catch(() => {});
+			} catch {}
+		};
+	} });
+}
+//#endregion
 //#region src/client.jsx
 const h = react.default.createElement;
 const name = "dsh-safe-auto-client";
@@ -571,6 +1349,7 @@ const inject = [
 	"slots",
 	"connection",
 	"remote",
+	"remote.session",
 	"locale"
 ];
 const CHANNEL = "/dsh-safe-auto";
@@ -578,123 +1357,157 @@ const BUNDLE = "@klarkxy/dsh-safe-auto";
 const TEXT = {
 	zh: {
 		requestFailed: "请求失败",
+		confirmationUnavailable: "确认已不可用",
+		approvalInvalid: "确认请求无效",
+		approvalExpiredError: "确认已超时或不再等待处理",
+		invalidSession: "会话无效",
+		sessionInactive: "会话未激活，请打开后重试",
+		childSession: "子会话不能启用安全自动",
+		invalidRequest: "请求无效",
+		settingsChanged: "配置已更新，请刷新后重试",
+		reviewerOnly: "这里只能修改审核配置",
+		sessionChanged: "会话已更新，请刷新后重试",
+		profileDisabled: "配置文件中已停用安全自动",
+		workspaceUnavailable: "当前无法使用需原生审批的工作区写入权限",
+		unknownPreset: "权限预设无效",
+		controlUnloaded: "安全自动已停用",
+		browserRequired: "请在浏览器中确认这次调用",
+		unknownSetting: "审核模型设置无效",
+		invalidModel: "审核模型或提供方标识无效",
+		modelPair: "提供方和模型必须一起配置",
+		effortRequiresModel: "选择思考强度前需先指定审核模型",
+		invalidConfig: "配置无效",
+		invalidConfigField: (field) => `配置项无效：${field}`,
+		unknownConfigField: (field) => `未知配置项：${field}`,
+		externalChange: "配置已在别处修改。草稿已保留，请刷新并丢弃草稿后重新确认。",
+		syncUnavailable: "自动刷新不可用，请手动刷新配置。",
 		follow: "跟随当前对话",
-		chooseModel: "选择模型",
-		savedUnavailable: (value) => `已保存，目录中不可用：${value}`,
-		fast: "快速审核",
-		deep: "深度审核",
-		deepSwitch: "启用深度审核",
-		deepOff: "深度审核已关闭。",
-		deepNoModel: "选择模型后才会启用深度审核。",
+		searchModels: "搜索模型…",
+		noModels: "没有匹配的模型",
+		clearSearch: "清除搜索",
+		reviewer: "审核模型",
 		model: "模型",
 		effort: "思考强度",
 		effortDefault: "默认",
-		followHelp: "跟随对话：使用默认思考强度。",
+		followHelp: "跟随对话：使用当前会话的模型与默认思考强度。",
 		savedEffortRetained: (effort) => `已保存的强度「${effort}」保留，需在 profile 中检查。`,
 		modelAbsent: "当前模型不在目录中，保留已保存配置。",
 		effortAbsent: "已保存的思考强度不在目录中，不会自动替换。",
-		effortClears: "更换模型会清空该阶段的思考强度。",
-		approveForMe: "替我审批",
-		sessionHelp: "为指定的活跃会话启用。保留 Workspace Write + ask，不授予 Full Access；重启、切换权限或卸载后需重新启用。",
-		targetSession: "目标会话",
-		chooseSession: "选择活跃会话",
-		enabledMark: "已启用",
-		sessionEnabled: "本会话已启用",
-		sessionDisabled: (current) => `未启用 · 当前权限：${current}`,
-		unsaved: "有未保存修改，启用前先保存。",
-		enable: "启用",
-		disable: "停用（不改权限）",
-		refreshSessions: "刷新会话",
-		noSessions: "没有可操作的活跃主会话，请打开一个。",
-		refreshRetry: (message) => `${message}。刷新后重试。`,
+		effortClears: "更换模型会清空思考强度。",
+		permission: "权限",
+		readOnly: "仅可查看",
+		workspaceWrite: "工作区内修改",
+		fullAccess: "完全权限",
+		safeAuto: "安全自动",
+		unavailableShort: "当前不可用",
+		refreshRetry: (message) => `${message}。重新打开菜单后重试。`,
 		panelLabel: "安全自动设置",
-		intro: "保存设置不调用模型；只有显式启用的会话自动审批。",
-		httpBanner: "HTTP 审核模式：面板只读，请在 profile 中编辑，不会覆盖已保存值。",
+		intro: "在输入框的权限菜单里为本会话启用「安全自动」；这里只保存审核配置，不调用模型。",
 		loading: "正在读取配置…",
-		reviewMode: "审核模式",
-		modeRules: "精确规则候选（POSIX）",
-		modeApproval: "独立模型替我审批（含 Windows 原生提权）",
-		modeSummary: "仅放行低/中风险、用户直接授权、范围有界的单次提权，其余拒绝。",
-		details: "安全与预算说明",
-		safetyDetail: "仅处理真实原生 write/edit/bash/pwsh 的单次沙箱提权；高风险、不确定、证据不足、未知或未绑定请求、错误、超时、预算不足及授权失效均拒绝，明确拒绝不回退。不执行取证命令，也不放开整个会话。",
-		outputBudget: "思考模型可能需要更高输出预算（默认快审 64 / 深审 256 tokens）。在 profile 检查 fastOutputTokens / deepOutputTokens；本面板不改预算。",
-		unableLabel: "无法自动判断时",
-		unableValue: "直接拒绝",
-		unableHelp: "未核验 DSH 的仅人工审批通道，此策略固定且不保存；交给下游审批链可能被其他自动插件放行，不算人工回退。",
-		windows: "Windows：精确规则模式不支持文件/PowerShell 自动提权，请选独立审批模式。",
+		tabsLabel: "设置分区",
+		tabReviewer: "审核配置",
+		details: "安全说明",
+		tabLimits: "预算边界",
+		safetyDetail: "只处理原生 write/edit/bash/pwsh 的单次沙箱提权。审核会保留真人任务授权及后续限制，并按需读取工作区内的包配置和脚本；模型通过时自动放行。其余有效请求请你在 60 秒内确认，超时拒绝。确认只适用于这一次调用。",
+		unableLabel: "无法自动判断时：",
+		unableValue: "请你在 60 秒内确认；超时拒绝",
+		approvalTitle: "确认这一次调用",
+		approvalPending: (count) => `${count} 个请求待确认`,
+		approvalCountdown: (seconds) => `剩余 ${seconds} 秒 · 超时拒绝`,
+		approvalExpired: "确认已超时，已拒绝。",
+		approvalAllow: "仅允许这一次",
+		approvalDeny: "拒绝",
+		approvalReview: "模型审核意见",
+		approvalRefresh: (message) => `${message}。正在刷新请求；不会自动重试决定。`,
+		approvalEffect: "完整调用内容",
 		prompt: "额外审核提示词",
 		promptHint: (count) => `${count}/4096 · 只可补充审核约束，不可扩大授权或覆盖安全规则。`,
-		limits: "预算与安全边界（只读）",
-		limitsTimes: (l) => `每阶段超时 ${l.timeoutMs} ms · 输入 ${l.maxInputBytes} bytes · 快审 ${l.fastCallsPerTask} 次 · 深审 ${l.deepCallsPerTask} 次`,
-		limitsFuses: (l) => `会话预算 ${l.sessionBudgetUnits} · 连续拒绝熔断 ${l.consecutiveDenials} · 累计拒绝熔断 ${l.totalDenials}`,
-		limitsHelp: "预算在 profile 中配置，保存设置或重新启用不会补充；完整动作可能发送给所选审核模型。",
+		limitsLine: (l) => `单次审查超时 ${l.timeoutMs} ms · 输入上限 ${l.maxInputBytes} bytes · 输出上限 ${l.outputTokens} tokens`,
+		limitsFuses: (l) => `每个任务最多审查 ${l.maxReviewsPerTask} 次 · 连续拒绝 ${l.consecutiveDenials} 次后熔断`,
+		limitsHelp: "预算在 profile 中配置，保存设置或重新启用不会补充；动作、真人指令和有界的本地脚本证据会发送给审核模型。",
 		save: "保存",
 		refreshDiscard: "刷新（丢弃草稿）",
 		saveFailed: (message) => `${message}。草稿已保留，刷新后重新编辑，不会自动重试。`,
 		catalogFailed: (message) => `模型目录读取失败，已保存值保持不变：${message}`,
 		saved: "已保存",
-		summary: "安全自动：审核模型、思考强度与额外审核提示词。",
-		httpSummary: "HTTP 审核模式，保留 profile 配置。"
+		summary: "安全自动：沙箱提权时由独立审核模型把关，通过才自动放行。"
 	},
 	en: {
 		requestFailed: "Request failed",
+		confirmationUnavailable: "Confirmation is no longer available",
+		approvalInvalid: "Invalid approval request",
+		approvalExpiredError: "Approval expired or is no longer pending",
+		invalidSession: "Invalid session",
+		sessionInactive: "Session is not active; open it and retry",
+		childSession: "Child sessions cannot select Safe Auto",
+		invalidRequest: "Invalid request",
+		settingsChanged: "Settings changed; reload and retry",
+		reviewerOnly: "Only reviewer settings may be edited here",
+		sessionChanged: "Session changed; refresh and retry",
+		profileDisabled: "Safe Auto is disabled in the profile",
+		workspaceUnavailable: "Workspace Write with native approval is unavailable",
+		unknownPreset: "Unknown permission preset",
+		controlUnloaded: "Safe Auto control unloaded",
+		browserRequired: "Browser confirmation required",
+		unknownSetting: "Invalid reviewer model setting",
+		invalidModel: "Invalid reviewer provider/model identifier",
+		modelPair: "Provider and model must be configured together",
+		effortRequiresModel: "Reasoning effort requires a reviewer model",
+		invalidConfig: "Invalid configuration",
+		invalidConfigField: (field) => `Invalid configuration field: ${field}`,
+		unknownConfigField: (field) => `Unknown configuration field: ${field}`,
+		externalChange: "Settings changed elsewhere. Draft preserved; refresh and discard it before reviewing changes.",
+		syncUnavailable: "Automatic refresh unavailable; refresh settings manually.",
 		follow: "Follow conversation",
-		chooseModel: "Choose a model",
-		savedUnavailable: (value) => `Saved, unavailable: ${value}`,
-		fast: "Fast review",
-		deep: "Deep review",
-		deepSwitch: "Enable deep review",
-		deepOff: "Deep review is off.",
-		deepNoModel: "Deep review stays off until you choose a model.",
+		searchModels: "Search models…",
+		noModels: "No matching models",
+		clearSearch: "Clear search",
+		reviewer: "Reviewer model",
 		model: "Model",
 		effort: "Reasoning effort",
 		effortDefault: "Default",
-		followHelp: "Follows the conversation with the default reasoning effort.",
+		followHelp: "Follows the conversation model with the default reasoning effort.",
 		savedEffortRetained: (effort) => `Saved effort "${effort}" retained; check the profile.`,
 		modelAbsent: "This model is not in the catalog; the saved configuration is kept.",
 		effortAbsent: "The saved effort is not advertised; it will not be replaced automatically.",
-		effortClears: "Changing the model clears this stage’s reasoning effort.",
-		approveForMe: "Approve for me",
-		sessionHelp: "Enable for one live session. Keeps Workspace Write + ask; no standing permission grant. Re-enable after restart, a permission change or uninstall.",
-		targetSession: "Target session",
-		chooseSession: "Choose a live session",
-		enabledMark: "enabled",
-		sessionEnabled: "Enabled for this session",
-		sessionDisabled: (current) => `Disabled · Permissions: ${current}`,
-		unsaved: "You have unsaved changes. Save before enabling.",
-		enable: "Enable",
-		disable: "Disable (keeps permissions)",
-		refreshSessions: "Refresh sessions",
-		noSessions: "No live root conversation. Open a conversation first.",
-		refreshRetry: (message) => `${message}. Refresh before retrying.`,
+		effortClears: "Changing the model clears the reasoning effort.",
+		permission: "Permissions",
+		readOnly: "Read Only",
+		workspaceWrite: "Workspace Write",
+		fullAccess: "Full Access",
+		safeAuto: "Safe Auto",
+		unavailableShort: "unavailable",
+		refreshRetry: (message) => `${message}. Reopen the menu and retry.`,
 		panelLabel: "Safe Auto settings",
-		intro: "Saving does not call a model; only explicitly enabled sessions use automatic review.",
-		httpBanner: "HTTP mode: read-only. Edit the profile; saved values will not be overwritten.",
+		intro: "Enable Safe Auto per session from the permission menu in the composer; this page only saves reviewer configuration and never calls a model.",
 		loading: "Loading settings…",
-		reviewMode: "Review mode",
-		modeRules: "Exact rule candidates (POSIX)",
-		modeApproval: "Independent approval reviewer (includes native Windows escalation)",
-		modeSummary: "Approves only a single low- or medium-risk, user-authorized, bounded escalation; everything else is rejected.",
-		details: "Safety and budget details",
-		safetyDetail: "Only single sandbox escalations of real native write/edit/bash/pwsh calls. Rejected: high risk, uncertainty, missing evidence, unknown or unbound requests, errors, timeouts, exhausted budgets and invalidated grants. Explicit denials never fall back. No probing commands; the whole session is never opened.",
-		outputBudget: "Reasoning models may need more output budget (default 64 fast / 256 deep tokens). Check fastOutputTokens / deepOutputTokens in the profile; this panel does not change budgets.",
-		unableLabel: "When it cannot judge automatically",
-		unableValue: "Reject",
-		unableHelp: "No verified human-only DSH channel, so this policy is fixed and not saved. Another automatic answerer is not human fallback.",
-		windows: "Windows: exact rule mode cannot auto-approve file or PowerShell escalation; choose independent approval.",
+		tabsLabel: "Settings sections",
+		tabReviewer: "Reviewer",
+		details: "Safety notes",
+		tabLimits: "Limits",
+		safetyDetail: "Reviews one native write/edit/bash/pwsh sandbox escalation at a time. Earlier human task authorization and later restrictions remain visible; workspace package definitions and scripts may supply evidence. A model pass auto-approves. Other valid requests ask you to confirm within 60 seconds and are denied on timeout. Confirmation grants this call only.",
+		unableLabel: "When it cannot judge automatically: ",
+		unableValue: "Ask you to confirm within 60 seconds; deny on timeout",
+		approvalTitle: "Confirm this call",
+		approvalPending: (count) => `${count} pending confirmation${count === 1 ? "" : "s"}`,
+		approvalCountdown: (seconds) => `${seconds} seconds left · Deny on timeout`,
+		approvalExpired: "Confirmation expired and was denied.",
+		approvalAllow: "Allow this call only",
+		approvalDeny: "Reject",
+		approvalReview: "Model review opinion",
+		approvalRefresh: (message) => `${message}. Refreshing requests; your decision will not be retried automatically.`,
+		approvalEffect: "Complete call content",
 		prompt: "Additional reviewer prompt",
 		promptHint: (count) => `${count}/4096 · May add review constraints, never expand authorization or override safety rules.`,
-		limits: "Budget and safety limits (read-only)",
-		limitsTimes: (l) => `Timeout ${l.timeoutMs} ms per stage · Input ${l.maxInputBytes} bytes · Fast calls ${l.fastCallsPerTask} · Deep calls ${l.deepCallsPerTask}`,
-		limitsFuses: (l) => `Session units ${l.sessionBudgetUnits} · Consecutive denial fuse ${l.consecutiveDenials} · Total denial fuse ${l.totalDenials}`,
-		limitsHelp: "Budgets live in the profile and are not refilled by saving or re-enabling. Complete actions may be sent to the selected reviewer model.",
+		limitsLine: (l) => `Review timeout ${l.timeoutMs} ms · Input cap ${l.maxInputBytes} bytes · Output cap ${l.outputTokens} tokens`,
+		limitsFuses: (l) => `At most ${l.maxReviewsPerTask} reviews per task · Breaker opens after ${l.consecutiveDenials} consecutive denials`,
+		limitsHelp: "Budgets live in the profile and are not refilled by saving or re-enabling. Actions, human instructions and bounded local script evidence are sent to the reviewer model.",
 		save: "Save",
 		refreshDiscard: "Refresh (discard draft)",
 		saveFailed: (message) => `${message}. Draft retained; refresh before editing again. No automatic retry.`,
 		catalogFailed: (message) => `Model catalog failed; saved values retained: ${message}`,
 		saved: "Saved",
-		summary: "Safe Auto: reviewer models, reasoning effort and additional review prompt.",
-		httpSummary: "HTTP reviewer; profile settings retained."
+		summary: "Safe Auto: an independent reviewer vets each sandbox escalation and only a pass auto-approves."
 	}
 };
 /** The host locale may arrive as the injected service or as a plain tag. */
@@ -710,14 +1523,46 @@ function translator(language) {
 	};
 }
 function useText(locale) {
-	const [language, setLanguage] = (0, react.useState)(() => localeLanguage(locale));
-	(0, react.useEffect)(() => {
-		setLanguage(localeLanguage(locale));
-		if (typeof locale?.subscribe !== "function") return void 0;
-		return locale.subscribe(() => setLanguage(localeLanguage(locale)));
-	}, [locale]);
+	const language = (0, react.useSyncExternalStore)((listener) => locale?.subscribe?.(listener) ?? (() => {}), () => localeLanguage(locale), () => localeLanguage(locale));
 	return (0, react.useMemo)(() => translator(language), [language]);
 }
+const LOCAL_ERRORS = {
+	"Request failed": "requestFailed",
+	"Request rejected": "requestFailed",
+	"Confirmation is no longer available": "confirmationUnavailable",
+	"Invalid approval response": "approvalInvalid",
+	"Invalid approval payload": "approvalInvalid",
+	"Approval expired or is no longer pending": "approvalExpiredError",
+	"Approval expired or invalidated": "approvalExpiredError",
+	"Invalid session": "invalidSession",
+	"Session is not active; open it and retry": "sessionInactive",
+	"Child sessions cannot select Safe Auto": "childSession",
+	"Invalid request": "invalidRequest",
+	"Settings changed; reload and retry": "settingsChanged",
+	"Only reviewer settings may be edited here": "reviewerOnly",
+	"Session changed; refresh the list and retry": "sessionChanged",
+	"Unknown endpoint": "invalidRequest",
+	"Safe Auto is disabled in the profile": "profileDisabled",
+	"Workspace Write with native approval is unavailable": "workspaceUnavailable",
+	"Unknown permission preset": "unknownPreset",
+	"Safe Auto control unloaded": "controlUnloaded",
+	"Browser confirmation required": "browserRequired",
+	"Unknown Safe Auto model setting": "unknownSetting",
+	"invalid reviewer provider/model identifier": "invalidModel",
+	"provider and model must be configured together": "modelPair",
+	"reasoningEffort requires a reviewer model": "effortRequiresModel"
+};
+function errorMessage(error) {
+	return (typeof error === "string" ? error : error?.message) || TEXT.en.requestFailed;
+}
+function errorText(t, error) {
+	const message = typeof error === "string" ? error : error?.message;
+	const key = Object.hasOwn(LOCAL_ERRORS, message) ? LOCAL_ERRORS[message] : void 0;
+	const unknownField = /^unknown config field: (.+)$/.exec(message || "");
+	const invalidField = /^(?:(enabled|staticReadonly) must be a boolean|(provider|model|reasoningEffort|reviewerPrompt) must be a string|invalid (timeoutMs|maxInputBytes|outputTokens|maxReviewsPerTask|consecutiveDenials|humanApprovalTimeoutMs))$/.exec(message || "");
+	const text = key ? t(key) : unknownField ? t("unknownConfigField", unknownField[1]) : invalidField ? t("invalidConfigField", invalidField[1] || invalidField[2] || invalidField[3]) : ["config must be an object", "invalid configuration"].includes(message) ? t("invalidConfig") : message || t("requestFailed");
+	return error?.context ? t(error.context, text) : text;
+}
 async function unwrapRpc(call, endpoint, payload, fallback = TEXT.en.requestFailed) {
 	const result = await call(CHANNEL, endpoint, payload);
 	if (!result?.ok) throw new Error(result?.error?.message || fallback);
@@ -725,23 +1570,28 @@ async function unwrapRpc(call, endpoint, payload, fallback = TEXT.en.requestFail
 }
 function createRequestScope() {
 	let generation = 0, active = true, writing = false;
+	const readGate = createPluginReadGate();
 	return {
 		invalidate() {
 			generation++;
+			readGate.reset();
 		},
 		dispose() {
 			active = false;
 			generation++;
+			readGate.reset();
 		},
 		get writing() {
 			return writing;
 		},
-		async run(operation, handlers = {}, write = false) {
+		async run(operation, handlers = {}, write = false, automatic = false) {
 			if (!active || writing) return false;
+			if (!write && automatic && !readGate.canRead()) return false;
+			readGate.reset();
 			if (write) writing = true;
 			const ticket = ++generation;
 			try {
-				const value = await operation();
+				const value = write ? await operation() : await readGate.run(operation);
 				if (active && generation === ticket) handlers.value?.(value);
 			} catch (error) {
 				if (active && generation === ticket) handlers.error?.(error);
@@ -753,49 +1603,165 @@ function createRequestScope() {
 		}
 	};
 }
-function modelKey(provider, model) {
-	return JSON.stringify([provider || "", model || ""]);
+const monotonicNow = () => globalThis.performance?.now?.() ?? Date.now();
+function approvalRemaining(request, now = monotonicNow()) {
+	return Math.max(0, request.deadline - now);
 }
-function modelChoices(catalog, provider = "", model = "", t = translator("en")) {
-	const choices = [{
-		value: modelKey("", ""),
-		name: t("follow"),
-		provider: "",
-		model: "",
-		efforts: []
-	}];
-	for (const group of catalog?.groups || []) for (const entry of group.models || []) choices.push({
-		value: modelKey(group.id, entry.id),
-		name: `${group.name || group.id} / ${entry.name || entry.id}`,
-		provider: group.id,
-		model: entry.id,
-		efforts: entry.reasoning?.efforts || []
+/** Per-session serial reads and one-shot writes. A response's server remainder
+* is anchored before the round trip so network delay cannot extend the prompt. */
+function createApprovalController({ api, sessionId, onState, now = monotonicNow, schedule = setTimeout, cancel = clearTimeout, intervalMs = 1e3, readGate = createPluginReadGate() }) {
+	let active = true, reading = false, writing = false, generation = 0, readSequence = 0, timer;
+	let state = {
+		requests: [],
+		busy: false,
+		error: ""
+	};
+	const publish = (next) => {
+		state = {
+			...state,
+			...next
+		};
+		if (active) onState(state);
+	};
+	const arm = () => {
+		if (active) {
+			cancel(timer);
+			timer = schedule(() => {
+				refresh();
+			}, intervalMs);
+		}
+	};
+	async function refresh(manual = false) {
+		if (!active || reading || writing) return false;
+		if (manual) {
+			generation++;
+			readGate.reset();
+		}
+		if (!readGate.canRead()) {
+			arm();
+			return false;
+		}
+		cancel(timer);
+		reading = true;
+		const ticket = generation, readId = ++readSequence, started = now();
+		try {
+			const value = await readGate.run(() => api.getApprovals(sessionId));
+			if (active && ticket === generation) {
+				const previous = new Map(state.requests.map((request) => [request.id, request.deadline]));
+				const requests = (value?.requests || []).map((request) => ({
+					...request,
+					deadline: Math.min(previous.get(request.id) ?? Infinity, started + Math.max(0, Number(request.remainingMs) || 0))
+				})).filter((request) => approvalRemaining(request, now()) > 0);
+				publish({
+					requests,
+					error: ""
+				});
+			}
+		} catch (error) {
+			if (active && ticket === generation) publish({ error: errorMessage(error) });
+		} finally {
+			if (readId === readSequence) {
+				reading = false;
+				arm();
+			}
+		}
+		return true;
+	}
+	return {
+		refresh,
+		reconnect() {
+			generation++;
+			readSequence++;
+			readGate.reset();
+			reading = false;
+			if (!writing) refresh();
+		},
+		dispose() {
+			active = false;
+			generation++;
+			readGate.reset();
+			cancel(timer);
+		},
+		async answer(requestId, outcome) {
+			const request = state.requests.find((item) => item.id === requestId);
+			if (!active || writing || !request || approvalRemaining(request, now()) <= 0) return false;
+			writing = true;
+			generation++;
+			cancel(timer);
+			publish({
+				busy: true,
+				error: ""
+			});
+			readGate.reset();
+			try {
+				if ((await api.answerApproval({
+					sessionId,
+					requestId,
+					outcome
+				}))?.accepted !== true) throw new Error("Confirmation is no longer available");
+				if (active) publish({ requests: state.requests.filter((item) => item.id !== requestId) });
+			} catch (error) {
+				if (active) publish({
+					requests: state.requests.filter((item) => item.id !== requestId),
+					error: errorMessage(error)
+				});
+			} finally {
+				writing = false;
+				if (active) {
+					publish({ busy: false });
+					if (!reading) refresh();
+					else arm();
+				}
+			}
+			return true;
+		}
+	};
+}
+function reviewerMenuState(values, catalog) {
+	const provider = values.provider || "", model = values.model || "";
+	const follow = !provider && !model;
+	const listed = parseModelMenuChoices(catalog);
+	const known = follow || listed.some((choice) => choice.provider === provider && choice.model === model);
+	const choices = follow || known ? listed : parseModelMenuChoices(catalog, {
+		provider,
+		model
 	});
-	const current = modelKey(provider, model);
-	if (!choices.some((choice) => choice.value === current)) choices.push({
-		value: current,
-		name: t("savedUnavailable", `${provider || "—"} / ${model || "—"}`),
+	const selected = choices.find((choice) => choice.provider === provider && choice.model === model);
+	return {
 		provider,
 		model,
-		efforts: [],
-		unknown: true
-	});
-	return choices;
+		follow,
+		known,
+		choices,
+		selected,
+		efforts: follow ? [] : modelMenuEffortOptions(selected, values.reasoningEffort || "")
+	};
 }
-function selectModel(values, stage, choice) {
+/** Picking a model clears the effort; picking "follow" clears the whole route. */
+function pickReviewerModel(values, route) {
 	return {
 		...values,
-		[`${stage}Provider`]: choice.provider,
-		[`${stage}Model`]: choice.model,
-		[`${stage}ReasoningEffort`]: ""
+		provider: route.provider,
+		model: route.model,
+		reasoningEffort: ""
 	};
 }
-/** A short, recognizable session name: its title or folder, plus the id head. */
-function sessionLabel(item, t = translator("en")) {
-	const cwd = item.header?.cwd || "";
-	return `${item.header?.title || cwd.split(/[\\/]/).filter(Boolean).pop() || "—"} · ${String(item.sessionId).slice(0, 8)}${item.safeAuto ? ` · ${t("enabledMark")}` : ""}`;
+const PERMISSION_ICONS = {
+	"read-only": _deepseek_ai_dsh_client_ui_primitives.PermissionIconReadOnlyRegular,
+	"workspace-write": _deepseek_ai_dsh_client_ui_primitives.PermissionIconWorkspaceWriteRegular,
+	"danger-full-access": _deepseek_ai_dsh_client_ui_primitives.PermissionIconFullAccessRegular,
+	"safe-auto": _deepseek_ai_dsh_client_ui_primitives.IconShieldOutlineRegular
+};
+/** Known preset values get localized names matching the host menu; anything else keeps its catalog name. */
+function permissionLabel(value, name, t = translator("en")) {
+	return {
+		"read-only": t("readOnly"),
+		"workspace-write": t("workspaceWrite"),
+		"danger-full-access": t("fullAccess"),
+		"safe-auto": t("safeAuto")
+	}[value] || name || value;
 }
-const css = `${officialUiCss("dsh-safe-auto")}
+const css = `${officialUiCss("dsh-safe-auto")}${modelMenuCss}
 /* A fieldset is the settings group and takes the contract's card surface; its
  * legend keeps the UA inline padding from indenting the group title. */
 .dsh-safe-auto legend { padding: 0; }
@@ -816,142 +1782,319 @@ const css = `${officialUiCss("dsh-safe-auto")}
   resize: vertical;
 }
 .dsh-safe-auto-input:disabled { opacity: 0.4; cursor: not-allowed; }
+.dsh-safe-auto-approval-dialog {
+  display: flex;
+  flex-direction: column;
+  max-height: 100%;
+  max-width: 100%;
+}
+/* The host card sizes every modal to a 380px column; an approval shows whole
+ * commands and file contents, so it claims a wider one. The doubled class
+ * keeps this rule ahead of the card's own width regardless of style order. */
+.dsh-safe-auto.dsh-safe-auto-approval-dialog { width: min(640px, 100%); }
+.dsh-safe-auto-approval-content {
+  flex: 1 1 auto;
+  min-height: 0;
+  min-width: 0;
+  overflow: auto;
+}
+.dsh-safe-auto-approval-pre {
+  max-height: 35vh;
+  overflow: auto;
+  white-space: pre-wrap;
+  overflow-wrap: anywhere;
+  margin: 0;
+  padding: 8px 12px;
+  border: 0.5px solid var(--dsw-alias-border-l4);
+  border-radius: var(--dsw-radius-md);
+  background: var(--dsw-alias-bg-layer-3);
+  color: var(--dsw-alias-label-primary);
+  font-size: 13px;
+}
 `;
 function Style() {
 	return h("style", null, css);
 }
-function ErrorText({ error }) {
+function ErrorText({ error, t }) {
 	return error ? h("p", {
 		role: "alert",
 		className: "dsh-ui-error dsh-ui-wrap"
-	}, error) : null;
+	}, errorText(t, error)) : null;
 }
-function ModelFields({ stage, values, catalog, disabled, onChange, locale }) {
+/** Values are rendered as plain text, with no Markdown or HTML interpretation. */
+function ApprovalDialog({ request, pendingCount = 1, remainingMs, busy = false, error = "", onAnswer, locale }) {
 	const t = useText(locale);
-	const deep = stage === "deep";
-	const provider = values[`${stage}Provider`] || "", model = values[`${stage}Model`] || "";
-	const effort = values[`${stage}ReasoningEffort`] || "";
-	const follow = !provider && !model;
-	const [wantDeep, setWantDeep] = (0, react.useState)(false);
-	const on = !deep || !follow || wantDeep;
-	const choices = modelChoices(catalog, provider, model, t);
-	if (deep) choices[0] = {
-		...choices[0],
-		name: t("chooseModel"),
-		placeholder: true
-	};
-	const selected = choices.find((choice) => choice.value === modelKey(provider, model));
-	const unknownEffort = effort && !selected.efforts.some((item) => item.id === effort);
-	const retained = effort && h("span", null, " ", t("savedEffortRetained", effort));
-	return h("fieldset", {
-		disabled,
-		className: "dsh-ui-card"
-	}, h("legend", { className: "dsh-ui-heading" }, t(deep ? "deep" : "fast")), deep && h("div", { className: "dsh-ui-row" }, h(_deepseek_ai_dsh_client_ui_primitives.Switch, {
-		checked: on,
-		label: t("deepSwitch"),
-		disabled,
-		onChange: (next) => {
-			setWantDeep(next);
-			if (!next && !follow) onChange(selectModel(values, stage, choices[0]));
-		}
-	}), h("span", {
-		className: "dsh-ui-label",
-		"aria-hidden": "true"
-	}, t("deepSwitch"))), !on && h("p", { className: "dsh-ui-help" }, t("deepOff"), retained), on && h("label", { className: "dsh-ui-field" }, h("span", { className: "dsh-ui-label" }, t("model")), h("select", {
-		className: "dsh-ui-select",
-		value: selected.value,
-		onChange: (e) => {
-			const choice = choices.find((item) => item.value === e.target.value);
-			if (choice && !choice.placeholder) onChange(selectModel(values, stage, choice));
-		}
-	}, choices.map((choice) => h("option", {
-		key: choice.value,
-		value: choice.value,
-		disabled: choice.placeholder
-	}, choice.name)))), on && follow && h("p", { className: "dsh-ui-help" }, deep ? t("deepNoModel") : t("followHelp"), retained), on && !follow && h("label", { className: "dsh-ui-field" }, h("span", { className: "dsh-ui-label" }, t("effort")), h("select", {
-		className: "dsh-ui-select",
-		value: effort,
-		onChange: (e) => onChange({
-			...values,
-			[`${stage}ReasoningEffort`]: e.target.value
-		})
-	}, h("option", { value: "" }, t("effortDefault")), selected.efforts.map((item) => h("option", {
-		key: item.id,
-		value: item.id
-	}, item.name || item.id)), unknownEffort && h("option", { value: effort }, t("savedUnavailable", effort)))), on && selected.unknown && h("p", { className: "dsh-ui-help" }, t("modelAbsent")), on && !follow && unknownEffort && h("p", { className: "dsh-ui-help" }, t("effortAbsent")), on && !follow && h("p", { className: "dsh-ui-help" }, t("effortClears")));
+	if (!request) return null;
+	const expired = remainingMs <= 0;
+	const action = request.action || {};
+	const fields = Object.entries({
+		tool: action.tool,
+		cwd: action.cwd,
+		...action.arguments
+	});
+	return h(_deepseek_ai_dsh_client_ui_primitives.Modal, {
+		open: true,
+		title: t("approvalTitle"),
+		closeLabel: t("approvalDeny"),
+		onClose: () => {
+			if (!busy && !expired) onAnswer(request.id, "deny");
+		},
+		className: "dsh-safe-auto dsh-safe-auto-approval-dialog",
+		contentClassName: "dsh-safe-auto-approval-content",
+		footer: h("div", { className: "dsh-safe-auto dsh-ui-actions" }, h(Style), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+			variant: "ghost",
+			disabled: busy || expired,
+			"data-modal-autofocus": true,
+			onClick: () => onAnswer(request.id, "deny")
+		}, t("approvalDeny")), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+			variant: "primary",
+			disabled: busy || expired,
+			onClick: () => onAnswer(request.id, "allow")
+		}, t("approvalAllow")))
+	}, h("div", { className: "dsh-safe-auto dsh-ui-stack" }, h(Style), h("p", {
+		className: "dsh-ui-meta",
+		role: "status"
+	}, t("approvalPending", pendingCount), " · ", expired ? t("approvalExpired") : t("approvalCountdown", Math.ceil(remainingMs / 1e3))), h("div", { className: "dsh-ui-field" }, h("span", { className: "dsh-ui-label" }, t("approvalEffect")), fields.map(([field, value]) => h("div", {
+		key: field,
+		className: "dsh-ui-field"
+	}, h("span", { className: "dsh-ui-meta" }, field), h("pre", { className: "dsh-safe-auto-approval-pre" }, typeof value === "string" ? value : JSON.stringify(value, null, 2))))), h("div", { className: "dsh-ui-field" }, h("span", { className: "dsh-ui-label" }, t("approvalReview")), h("pre", { className: "dsh-safe-auto-approval-pre" }, JSON.stringify(request.review || {}, null, 2))), h(ErrorText, {
+		error,
+		t
+	})));
 }
-function SessionControls({ api, initialSessions = [], dirty = false, locale }) {
+/** Composer permission control via the replacement slot: native presets plus Safe Auto. */
+function PermissionMenu({ sessionId, locked, api, locale, initialSnapshot = null }) {
 	const t = useText(locale);
-	const [rows, setRows] = (0, react.useState)(initialSessions);
-	const [selected, setSelected] = (0, react.useState)("");
-	const [busy, setBusy] = (0, react.useState)(false);
+	const [snapshot, setSnapshot] = (0, react.useState)(initialSnapshot);
+	const [open, setOpen] = (0, react.useState)(false);
 	const [error, setError] = (0, react.useState)("");
-	const scope = (0, react.useRef)(null);
-	const load = () => scope.current?.run(() => api.listSessions(), {
+	const [busy, setBusy] = (0, react.useState)(false);
+	const scopeRef = (0, react.useRef)(null);
+	const refreshRef = (0, react.useRef)(null);
+	const approvalsRef = (0, react.useRef)(null);
+	const [approvals, setApprovals] = (0, react.useState)({
+		sessionId,
+		requests: [],
+		busy: false,
+		error: ""
+	});
+	const [approvalNow, setApprovalNow] = (0, react.useState)(monotonicNow);
+	const refresh = (automatic = false) => scopeRef.current?.run(() => api.getSession(sessionId), {
 		value: (value) => {
-			setRows(value.sessions);
+			setSnapshot(value);
 			setError("");
 		},
-		error: (e) => setError(e.message)
-	});
+		error: (e) => setError(errorMessage(e))
+	}, false, automatic);
+	refreshRef.current = refresh;
 	(0, react.useEffect)(() => {
-		const current = createRequestScope();
-		scope.current = current;
-		load();
-		return () => current.dispose();
-	}, [api]);
-	const row = rows.find((item) => item.sessionId === selected);
-	const change = (enabled) => {
-		if (!row || scope.current?.writing || enabled && dirty) return;
-		setBusy(true);
+		const scope = createRequestScope();
+		scopeRef.current = scope;
+		setSnapshot(null);
 		setError("");
-		const payload = {
-			sessionId: row.sessionId,
-			expectedRevision: row.revision
+		refreshRef.current(true);
+		const focus = () => refreshRef.current(true);
+		const stopConnection = api.subscribeGeneration?.(() => {
+			scope.invalidate();
+			refreshRef.current(true);
+		});
+		globalThis.addEventListener?.("focus", focus);
+		return () => {
+			scope.dispose();
+			stopConnection?.();
+			globalThis.removeEventListener?.("focus", focus);
 		};
-		scope.current?.run(() => enabled ? api.enableSession({
-			...payload,
-			value: "safe-auto"
-		}) : api.disableSession(payload), {
-			value: (next) => setRows((old) => old.map((item) => item.sessionId === row.sessionId ? {
-				...item,
-				...next
-			} : item)),
-			error: (e) => setError(t("refreshRetry", e.message)),
+	}, [api, sessionId]);
+	const approvalsEnabled = Boolean(snapshot?.safeAuto);
+	(0, react.useEffect)(() => {
+		setApprovals({
+			sessionId,
+			requests: [],
+			busy: false,
+			error: ""
+		});
+		if (!approvalsEnabled) return void 0;
+		const controller = createApprovalController({
+			api,
+			sessionId,
+			onState: (value) => {
+				setApprovalNow(monotonicNow());
+				setApprovals({
+					...value,
+					sessionId
+				});
+			}
+		});
+		approvalsRef.current = controller;
+		controller.refresh();
+		const stopConnection = api.subscribeGeneration?.(() => controller.reconnect());
+		const focus = () => {
+			controller.refresh();
+		};
+		globalThis.addEventListener?.("focus", focus);
+		return () => {
+			controller.dispose();
+			stopConnection?.();
+			approvalsRef.current = null;
+			globalThis.removeEventListener?.("focus", focus);
+		};
+	}, [
+		api,
+		sessionId,
+		approvalsEnabled
+	]);
+	const pending = approvalsEnabled && approvals.sessionId === sessionId ? approvals.requests.filter((request) => approvalRemaining(request, approvalNow) > 0) : [];
+	(0, react.useEffect)(() => {
+		if (!pending.length) return void 0;
+		const timer = setInterval(() => setApprovalNow(monotonicNow()), 250);
+		return () => clearInterval(timer);
+	}, [pending.length]);
+	const choose = (value) => {
+		const scope = scopeRef.current;
+		if (!snapshot || scope?.writing) return;
+		if (value === snapshot.current) {
+			setOpen(false);
+			return;
+		}
+		if (value === "safe-auto" && !snapshot.available) return;
+		setBusy(true);
+		setError("");
+		scope?.run(() => api.selectSession({
+			sessionId,
+			expectedRevision: snapshot.revision,
+			value
+		}), {
+			value: (next) => {
+				setSnapshot(next);
+				setOpen(false);
+			},
+			error: (e) => {
+				setError({
+					message: errorMessage(e),
+					context: "refreshRetry"
+				});
+				refreshRef.current();
+			},
 			settled: () => setBusy(false)
 		}, true);
 	};
+	const options = snapshot?.options || [];
+	const items = options.map((option) => ({
+		id: option.value,
+		label: permissionLabel(option.value, option.name, t),
+		icon: h(PERMISSION_ICONS[option.value] || _deepseek_ai_dsh_client_ui_primitives.PermissionIconWorkspaceWriteRegular),
+		disabled: Boolean(locked || option.value === "safe-auto" && !snapshot.available)
+	}));
+	if (snapshot && !snapshot.available && !options.some((o) => o.value === "safe-auto")) items.push({
+		id: "safe-auto",
+		label: `${t("safeAuto")} · ${t("unavailableShort")}`,
+		icon: h(_deepseek_ai_dsh_client_ui_primitives.IconShieldOutlineRegular),
+		disabled: true
+	});
+	const current = options.find((option) => option.value === snapshot?.current);
+	const CurrentIcon = current && PERMISSION_ICONS[current.value];
+	return h("span", {
+		className: "dsh-safe-auto dsh-safe-auto-permission",
+		"aria-busy": busy
+	}, h(Style), h(_deepseek_ai_dsh_client_ui_primitives.Menu, {
+		open,
+		side: "top",
+		align: "start",
+		portal: true,
+		listClassName: "dsh-safe-auto",
+		selectedId: snapshot?.current,
+		items,
+		onSelect: choose,
+		onClose: () => setOpen(false),
+		anchor: h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+			variant: "ghost",
+			disabled: Boolean(locked),
+			"aria-haspopup": "menu",
+			"aria-expanded": open,
+			"aria-label": t("permission"),
+			onClick: () => {
+				const next = !open;
+				setOpen(next);
+				if (next) refreshRef.current();
+			}
+		}, CurrentIcon && h(CurrentIcon), current ? permissionLabel(current.value, current.name, t) : snapshot?.current || t("permission"), h(_deepseek_ai_dsh_client_ui_primitives.IconChevronUpOutlineRegular))
+	}), h(ErrorText, {
+		error,
+		t
+	}), h(ErrorText, {
+		error: approvals.error && {
+			message: approvals.error,
+			context: "approvalRefresh"
+		},
+		t
+	}), pending.length ? h(ApprovalDialog, {
+		key: pending[0].id,
+		request: pending[0],
+		pendingCount: pending.length,
+		remainingMs: approvalRemaining(pending[0], approvalNow),
+		busy: approvals.busy,
+		onAnswer: (id, outcome) => {
+			approvalsRef.current?.answer(id, outcome);
+		},
+		locale
+	}) : null);
+}
+function ReviewerFields({ values, catalog, disabled, onChange, locale }) {
+	const t = useText(locale);
+	const [open, setOpen] = (0, react.useState)(false);
+	const state = reviewerMenuState(values, catalog);
+	const effort = values.reasoningEffort || "";
+	const currentLabel = state.follow ? t("follow") : state.selected?.label || `${state.provider} / ${state.model}`;
+	const effortOption = state.efforts.find((item) => item.id === effort);
+	const effortName = effortOption && modelMenuEffortLabel(effortOption, localeLanguage(locale));
+	const unknownEffort = Boolean(effort && !state.follow && state.selected && !state.selected.efforts.some((item) => item.id === effort));
+	const retained = effort && h("span", null, " ", t("savedEffortRetained", effort));
 	return h("fieldset", {
-		disabled: busy,
+		disabled,
 		className: "dsh-ui-card"
-	}, h("legend", { className: "dsh-ui-heading" }, t("approveForMe")), h("p", { className: "dsh-ui-help" }, t("sessionHelp")), h("label", { className: "dsh-ui-field" }, h("span", { className: "dsh-ui-label" }, t("targetSession")), h("select", {
-		className: "dsh-ui-select",
-		value: selected,
-		onChange: (e) => setSelected(e.target.value)
-	}, h("option", { value: "" }, t("chooseSession")), rows.map((item) => h("option", {
-		key: item.sessionId,
-		value: item.sessionId,
-		title: [item.header?.cwd, item.sessionId].filter(Boolean).join(" · ")
-	}, sessionLabel(item, t))))), row && h("p", {
-		role: "status",
-		className: "dsh-ui-compact dsh-ui-wrap"
-	}, row.safeAuto ? t("sessionEnabled") : t("sessionDisabled", row.current)), dirty && h("p", {
-		role: "status",
-		className: "dsh-ui-help"
-	}, t("unsaved")), h("div", { className: "dsh-ui-actions" }, h(_deepseek_ai_dsh_client_ui_primitives.Button, {
-		variant: "primary",
-		disabled: !row || !row.available || row.safeAuto || dirty,
-		onClick: () => change(true)
-	}, t("enable")), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
-		variant: "outline",
-		disabled: !row?.safeAuto,
-		onClick: () => change(false)
-	}, t("disable")), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
-		variant: "ghost",
-		onClick: load
-	}, t("refreshSessions"))), !rows.length && h("p", { className: "dsh-ui-empty" }, t("noSessions")), h(ErrorText, { error }));
+	}, h("legend", { className: "dsh-ui-heading" }, t("reviewer")), h("div", { className: "dsh-ui-field" }, h("span", { className: "dsh-ui-label" }, t("model")), h(ModelMenu, {
+		open,
+		onOpenChange: setOpen,
+		listClassName: "dsh-safe-auto",
+		locale: localeLanguage(locale),
+		anchor: h("button", {
+			type: "button",
+			className: "dsh-model-menu-trigger",
+			disabled: Boolean(disabled),
+			"aria-haspopup": "menu",
+			"aria-expanded": open
+		}, h("span", { className: "dsh-model-menu-triggerLabel" }, currentLabel), !state.follow && state.efforts.length ? h("span", { className: "dsh-model-menu-triggerEffort" }, effortName || t("effortDefault")) : null, h(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutlineRegular, { className: `dsh-model-menu-chevron${open ? " dsh-model-menu-chevronOpen" : ""}` })),
+		choices: state.choices,
+		selected: state.follow ? void 0 : {
+			provider: state.provider,
+			model: state.model
+		},
+		onPick: (route) => onChange(pickReviewerModel(values, route)),
+		leading: [{
+			id: "follow",
+			label: t("follow"),
+			selected: state.follow
+		}],
+		onPickLeading: () => onChange(pickReviewerModel(values, {
+			provider: "",
+			model: ""
+		})),
+		efforts: state.efforts,
+		selectedEffort: effort,
+		onPickEffort: (next) => onChange({
+			...values,
+			reasoningEffort: next || ""
+		}),
+		modelLabel: t("model"),
+		modelValue: currentLabel,
+		effortLabel: t("effort"),
+		defaultEffortLabel: t("effortDefault"),
+		searchPlaceholder: t("searchModels"),
+		emptyLabel: t("noModels"),
+		clearSearchLabel: t("clearSearch")
+	})), state.follow && h("p", { className: "dsh-ui-help" }, t("followHelp"), retained), !state.follow && !state.known && h("p", { className: "dsh-ui-help" }, t("modelAbsent")), !state.follow && unknownEffort && h("p", { className: "dsh-ui-help" }, t("effortAbsent")), !state.follow && h("p", { className: "dsh-ui-help" }, t("effortClears")));
 }
-function SettingsPanel({ view, api, locale, initialSettings = null, initialCatalog = null }) {
+function SettingsPanel({ view, api, locale, initialSettings = null, initialCatalog = null, initialTab = "reviewer" }) {
 	const t = useText(locale);
 	const [settings, setSettings] = (0, react.useState)(initialSettings);
 	const [values, setValues] = (0, react.useState)(initialSettings?.values || null);
@@ -960,40 +2103,100 @@ function SettingsPanel({ view, api, locale, initialSettings = null, initialCatal
 	const [catalogError, setCatalogError] = (0, react.useState)("");
 	const [busy, setBusy] = (0, react.useState)(false);
 	const [saved, setSaved] = (0, react.useState)(false);
-	const [detailsOpen, setDetailsOpen] = (0, react.useState)(false);
-	const [limitsOpen, setLimitsOpen] = (0, react.useState)(false);
+	const [tab, setTab] = (0, react.useState)(initialTab);
+	const tabsId = (0, react.useId)();
 	const dirty = (0, react.useRef)(false);
+	const reading = (0, react.useRef)(false);
+	const pending = (0, react.useRef)(false);
+	const external = (0, react.useRef)(false);
+	const [externalChange, setExternalChange] = (0, react.useState)(false);
+	const [syncError, setSyncError] = (0, react.useState)("");
 	const scopeRef = (0, react.useRef)(null);
 	const refreshRef = (0, react.useRef)(null);
-	const refresh = (discardDraft = false, automatic = false) => scopeRef.current?.run(() => api.getSettings(), {
-		value: (next) => {
-			if (dirty.current && !discardDraft) return;
-			setSettings(next);
-			setValues(next.values);
-			dirty.current = false;
-			setError("");
-			if (!automatic) setSaved(false);
-		},
-		error: (e) => setError(e.message)
-	});
+	const refresh = (discardDraft = false, automatic = false) => {
+		const scope = scopeRef.current;
+		if (!scope) return;
+		if (reading.current || scope.writing) {
+			pending.current = true;
+			return;
+		}
+		pending.current = false;
+		if (dirty.current && !discardDraft) {
+			if (external.current) setExternalChange(true);
+			return;
+		}
+		reading.current = true;
+		setBusy(true);
+		const request = scope.run(() => api.getSettings(), {
+			value: (next) => {
+				if (pending.current || dirty.current && !discardDraft) return;
+				setSettings(next);
+				setValues(next.values);
+				dirty.current = false;
+				setError("");
+				external.current = false;
+				setExternalChange(false);
+				if (!automatic) setSaved(false);
+			},
+			error: (e) => {
+				if (!pending.current) setError(errorMessage(e));
+			},
+			settled: () => {
+				if (scopeRef.current !== scope) return;
+				reading.current = false;
+				setBusy(false);
+				if (pending.current) refreshRef.current(false, true);
+			}
+		}, false, automatic && !external.current);
+		request.then((ran) => {
+			if (!ran && scopeRef.current === scope) {
+				reading.current = false;
+				setBusy(false);
+			}
+		});
+		return request;
+	};
 	refreshRef.current = refresh;
 	(0, react.useEffect)(() => {
 		const scope = createRequestScope();
 		scopeRef.current = scope;
+		reading.current = false;
+		pending.current = false;
+		dirty.current = false;
+		external.current = false;
+		setBusy(false);
+		setExternalChange(false);
+		setSyncError("");
 		refreshRef.current(false, true);
 		let alive = true;
 		Promise.resolve().then(() => api.modelCatalog()).then((value) => {
 			if (alive) setCatalog(value);
 		}, (e) => {
-			if (alive) setCatalogError(e.message);
+			if (alive) setCatalogError(errorMessage(e));
 		});
 		const focus = () => {
 			if (!dirty.current) refreshRef.current(false, true);
 		};
+		const stopConnection = api.subscribeGeneration?.(() => {
+			scope.invalidate();
+			external.current = true;
+			refreshRef.current(false, true);
+		});
+		const stopSettings = api.subscribeSettings?.(() => {
+			if (!alive) return;
+			setSyncError("");
+			external.current = true;
+			if (dirty.current && !scope.writing) setExternalChange(true);
+			refreshRef.current(false, true);
+		}, (message) => {
+			if (alive) setSyncError(message);
+		});
 		globalThis.addEventListener?.("focus", focus);
 		return () => {
 			alive = false;
 			scope.dispose();
+			stopConnection?.();
+			stopSettings?.();
 			globalThis.removeEventListener?.("focus", focus);
 		};
 	}, [api]);
@@ -1003,7 +2206,7 @@ function SettingsPanel({ view, api, locale, initialSettings = null, initialCatal
 		setValues(next);
 	};
 	const save = () => {
-		if (!settings || !values || settings.http || scopeRef.current?.writing || (values.reviewerPrompt || "").length > 4096) return;
+		if (!settings || !values || reading.current || external.current || scopeRef.current?.writing || (values.reviewerPrompt || "").length > 4096) return;
 		setBusy(true);
 		setError("");
 		setSaved(false);
@@ -1017,102 +2220,140 @@ function SettingsPanel({ view, api, locale, initialSettings = null, initialCatal
 				dirty.current = false;
 				setSaved(true);
 			},
-			error: (e) => setError(t("saveFailed", e.message)),
-			settled: () => setBusy(false)
+			error: (e) => setError({
+				message: errorMessage(e),
+				context: "saveFailed"
+			}),
+			settled: () => {
+				setBusy(false);
+				if (pending.current) refreshRef.current(false, true);
+			}
 		}, true);
 	};
-	if (view === "summary") return h("div", { className: "dsh-safe-auto" }, h(Style), h("p", { className: "dsh-ui-compact dsh-ui-wrap" }, t("summary")), settings?.http && h("p", { className: "dsh-ui-help" }, t("httpSummary")), h(ErrorText, { error }));
-	const readOnly = busy || settings?.http;
+	const activeTab = tab === "limits" && !settings?.policyLimits ? "reviewer" : tab;
+	const tabItem = (value, label) => ({
+		value,
+		label,
+		id: `${tabsId}-${value}-tab`,
+		panelId: `${tabsId}-${value}-panel`
+	});
+	const tabPanel = (value, className, children) => h("div", {
+		role: "tabpanel",
+		id: `${tabsId}-${value}-panel`,
+		"aria-labelledby": `${tabsId}-${value}-tab`,
+		hidden: activeTab !== value,
+		tabIndex: 0,
+		className
+	}, children);
+	if (view === "summary") return h("div", { className: "dsh-safe-auto" }, h(Style), h("p", { className: "dsh-ui-compact dsh-ui-wrap" }, t("summary")), h(ErrorText, {
+		error,
+		t
+	}));
 	return h("section", {
 		className: "dsh-safe-auto dsh-ui-stack",
 		"aria-label": t("panelLabel"),
 		"aria-busy": busy
-	}, h(Style), h("p", { className: "dsh-ui-compact dsh-ui-wrap" }, t("intro")), settings?.http && h("p", {
-		role: "status",
-		className: "dsh-ui-banner"
-	}, t("httpBanner")), !values && h("p", { className: "dsh-ui-loading" }, t("loading")), values && h(react.default.Fragment, null, h("label", { className: "dsh-ui-field" }, h("span", { className: "dsh-ui-label" }, t("reviewMode")), h("select", {
-		className: "dsh-ui-select",
-		disabled: readOnly,
-		value: values.approvalReview ? "approval" : "rules",
-		onChange: (e) => change({
-			...values,
-			approvalReview: e.target.value === "approval"
-		})
-	}, h("option", { value: "rules" }, t("modeRules")), h("option", { value: "approval" }, t("modeApproval")))), h("p", { className: "dsh-ui-help" }, t("modeSummary")), values.approvalReview && h("div", { className: "dsh-ui-field" }, h("span", { className: "dsh-ui-label" }, t("unableLabel")), h("p", { className: "dsh-ui-compact" }, t("unableValue")), h("p", {
-		id: "sa-human-unavailable",
-		className: "dsh-ui-help"
-	}, t("unableHelp"))), settings.platform === "win32" && h("p", {
-		role: "status",
-		className: "dsh-ui-compact dsh-ui-wrap"
-	}, t("windows")), h(_deepseek_ai_dsh_client_ui_primitives.DisclosureRow, {
-		icon: h(_deepseek_ai_dsh_client_ui_primitives.IconShieldOutlineRegular),
-		title: t("details"),
-		open: detailsOpen,
-		expandable: true,
-		expandOnRowClick: true,
-		onToggle: () => setDetailsOpen((value) => !value)
-	}, h("div", { className: "dsh-ui-help" }, h("p", null, t("safetyDetail")), h("p", null, t("outputBudget")))), h(ModelFields, {
-		stage: "fast",
-		values,
-		catalog,
-		disabled: readOnly,
-		onChange: change,
-		locale
-	}), h(ModelFields, {
-		stage: "deep",
-		values,
-		catalog,
-		disabled: readOnly,
-		onChange: change,
-		locale
-	}), h("label", { className: "dsh-ui-field" }, h("span", { className: "dsh-ui-label" }, t("prompt")), h("textarea", {
-		className: "dsh-safe-auto-input",
-		rows: 6,
-		maxLength: 4096,
-		disabled: readOnly,
-		"aria-describedby": "sa-prompt-hint",
-		value: values.reviewerPrompt || "",
-		onChange: (e) => change({
-			...values,
-			reviewerPrompt: e.target.value
-		})
-	})), h("p", {
-		id: "sa-prompt-hint",
-		className: "dsh-ui-help"
-	}, t("promptHint", (values.reviewerPrompt || "").length)), settings.policyLimits && h(_deepseek_ai_dsh_client_ui_primitives.DisclosureRow, {
-		icon: h(_deepseek_ai_dsh_client_ui_primitives.IconShieldOutlineRegular),
-		title: t("limits"),
-		open: limitsOpen,
-		expandable: true,
-		expandOnRowClick: true,
-		onToggle: () => setLimitsOpen((value) => !value)
-	}, h("div", { className: "dsh-ui-stack" }, h("p", { className: "dsh-ui-meta dsh-ui-wrap" }, t("limitsTimes", settings.policyLimits)), h("p", { className: "dsh-ui-meta dsh-ui-wrap" }, t("limitsFuses", settings.policyLimits)), h("p", { className: "dsh-ui-help" }, t("limitsHelp")))), h("div", { className: "dsh-ui-actions" }, h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+	}, h(Style), h("p", { className: "dsh-ui-compact dsh-ui-wrap" }, t("intro")), !values && h("p", { className: "dsh-ui-loading" }, t("loading")), values && h(react.default.Fragment, null, h(_deepseek_ai_dsh_client_ui_primitives.SegmentedTabs, {
+		value: activeTab,
+		onChange: setTab,
+		label: t("tabsLabel"),
+		items: [
+			tabItem("reviewer", t("tabReviewer")),
+			tabItem("details", t("details")),
+			...settings?.policyLimits ? [tabItem("limits", t("tabLimits"))] : []
+		]
+	}), tabPanel("reviewer", "dsh-ui-stack", [
+		h(ReviewerFields, {
+			key: "fields",
+			values,
+			catalog,
+			disabled: busy,
+			onChange: change,
+			locale
+		}),
+		h("label", {
+			key: "prompt",
+			className: "dsh-ui-field"
+		}, h("span", { className: "dsh-ui-label" }, t("prompt")), h("textarea", {
+			className: "dsh-safe-auto-input",
+			rows: 6,
+			maxLength: 4096,
+			disabled: busy,
+			"aria-describedby": "sa-prompt-hint",
+			value: values.reviewerPrompt || "",
+			onChange: (e) => change({
+				...values,
+				reviewerPrompt: e.target.value
+			})
+		})),
+		h("p", {
+			key: "hint",
+			id: "sa-prompt-hint",
+			className: "dsh-ui-help"
+		}, t("promptHint", (values.reviewerPrompt || "").length))
+	]), tabPanel("details", "dsh-ui-stack", h("div", { className: "dsh-ui-help" }, h("p", null, t("safetyDetail")), h("p", null, h("span", { className: "dsh-ui-label" }, t("unableLabel")), t("unableValue")))), settings?.policyLimits && tabPanel("limits", "dsh-ui-stack", [
+		h("p", {
+			key: "line",
+			className: "dsh-ui-meta dsh-ui-wrap"
+		}, t("limitsLine", settings.policyLimits)),
+		h("p", {
+			key: "fuses",
+			className: "dsh-ui-meta dsh-ui-wrap"
+		}, t("limitsFuses", settings.policyLimits)),
+		h("p", {
+			key: "help",
+			className: "dsh-ui-help"
+		}, t("limitsHelp"))
+	]), h("div", { className: "dsh-ui-actions" }, h(_deepseek_ai_dsh_client_ui_primitives.Button, {
 		variant: "primary",
-		disabled: readOnly || !dirty.current || (values.reviewerPrompt || "").length > 4096,
+		disabled: busy || externalChange || !dirty.current || (values.reviewerPrompt || "").length > 4096,
 		onClick: save
 	}, t("save")), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
 		variant: "ghost",
 		disabled: busy,
 		onClick: () => refresh(true)
-	}, t("refreshDiscard")))), h(ErrorText, { error }), h(ErrorText, { error: catalogError && t("catalogFailed", catalogError) }), saved && h("p", {
+	}, t("refreshDiscard")))), h(ErrorText, {
+		error,
+		t
+	}), h(ErrorText, {
+		error: catalogError && {
+			message: catalogError,
+			context: "catalogFailed"
+		},
+		t
+	}), externalChange && h("p", {
+		role: "alert",
+		className: "dsh-ui-error"
+	}, t("externalChange")), syncError && h("p", {
+		role: "status",
+		className: "dsh-ui-hint"
+	}, t("syncUnavailable")), saved && h("p", {
 		role: "status",
 		className: "dsh-ui-notice"
-	}, t("saved")), h(SessionControls, {
-		api,
-		dirty: dirty.current,
-		locale
-	}));
+	}, t("saved")));
 }
 function apply(ctx) {
-	const call = (endpoint, payload) => unwrapRpc((...args) => ctx.connection.rpc.call(...args), endpoint, payload, translator(localeLanguage(ctx.locale))("requestFailed"));
+	const settingsSubscriber = createModelSettingsSubscriber(ctx, BUNDLE);
+	const call = (endpoint, payload) => unwrapRpc((...args) => ctx.connection.rpc.call(...args), endpoint, payload);
 	const api = Object.freeze({
+		subscribeSettings: (change, error) => settingsSubscriber.subscribe(change, error),
+		subscribeGeneration: (listener) => ctx.connection.generation?.subscribe(listener) ?? (() => {}),
 		getSettings: () => call("settings.get", {}),
 		saveSettings: (payload) => call("settings.save", payload),
 		modelCatalog: () => ctx.remote.session.modelCatalog(),
-		listSessions: () => call("session.list", {}),
-		enableSession: (payload) => call("session.select", payload),
-		disableSession: (payload) => call("session.disable", payload)
+		getSession: (sessionId) => call("session.get", { sessionId }),
+		selectSession: (payload) => call("session.select", payload),
+		getApprovals: (sessionId) => call("approval.list", { sessionId }),
+		answerApproval: (payload) => call("approval.answer", payload)
 	});
+	ctx.slots.inject("conversation.input.permission", () => ctx.slots.register({
+		name: "conversation.input.permission",
+		priority: -10,
+		inject: () => ({
+			api,
+			locale: ctx.locale
+		})
+	}, PermissionMenu));
 	ctx.slots.inject("plugins.bundle.config", () => ctx.slots.register({
 		name: "plugins.bundle.config",
 		key: BUNDLE,
@@ -1123,20 +2364,23 @@ function apply(ctx) {
 	}, SettingsPanel));
 }
 //#endregion
+exports.ApprovalDialog = ApprovalDialog;
 exports.BUNDLE = BUNDLE;
 exports.CHANNEL = CHANNEL;
-exports.ModelFields = ModelFields;
-exports.SessionControls = SessionControls;
+exports.PermissionMenu = PermissionMenu;
+exports.ReviewerFields = ReviewerFields;
 exports.SettingsPanel = SettingsPanel;
 exports.apply = apply;
+exports.approvalRemaining = approvalRemaining;
+exports.createApprovalController = createApprovalController;
 exports.createRequestScope = createRequestScope;
+exports.errorText = errorText;
 exports.inject = inject;
 exports.localeLanguage = localeLanguage;
-exports.modelChoices = modelChoices;
-exports.modelKey = modelKey;
 exports.name = name;
-exports.selectModel = selectModel;
-exports.sessionLabel = sessionLabel;
+exports.permissionLabel = permissionLabel;
+exports.pickReviewerModel = pickReviewerModel;
+exports.reviewerMenuState = reviewerMenuState;
 exports.translator = translator;
 exports.unwrapRpc = unwrapRpc;