@klarkxy/dsh-safe-auto 0.5.2 → 0.5.3

package/lib/client.js

@@ -1423,6 +1423,51 @@ ${scope} {
 `.replace(/^& (\.dsh-ui-[a-z0-9-]+)(?=\s*\{)/gm, (_match, className) => `&${className}, & ${className}`);
 }
 //#endregion
+//#region ../dsh-plugin-kit/lib/contracts.js
+/** `@klarkxy/dsh-git-commit` becomes `KlarkxyDshGitCommitModelSettingsChanges`. */
+function modelSettingsChangesIdentity(packageName) {
+	const scoped = /^@([^/]+)\/(.+)$/.exec(packageName);
+	const parts = (scoped ? `${scoped[1]}/${scoped[2]}` : packageName).split(/[^A-Za-z0-9]+/).filter(Boolean);
+	if (!parts.length) throw new Error("Model settings package name has no RPC segment");
+	const segment = `${parts.map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join("")}ModelSettingsChanges`;
+	if (!/^[A-Z][A-Za-z0-9]*$/.test(segment)) throw new Error(`Model settings sync name is not an RPC segment: ${segment}`);
+	return {
+		service: segment,
+		namespace: segment
+	};
+}
+/**
+* Shared "Session Management" settings section id. The section is provided by
+* shared infrastructure (see `registerSessionSettingsItem` in `client-utils`),
+* not by any one business plugin: every participant registers only a row into
+* {@link SESSION_SETTINGS_ITEM_SLOT}, so any enabled subset yields the same page.
+*/
+const SESSION_SETTINGS_SECTION_ID = "session-manager";
+/**
+* Child list slot declared by the shared Session Management page. Neutral
+* naming on purpose: participants never import each other, they only
+* contribute `{id, order}` rows into this slot while the page is alive.
+*/
+const SESSION_SETTINGS_ITEM_SLOT = "dsh.session-settings.item";
+/**
+* Host-owned nav icon seat: a root-scoped list where each entry's `id` must
+* equal the `settings.section` id it decorates. Owner props are
+* `{size, active}`; icons stay `aria-hidden` so the section label remains the
+* accessible name. Contributors into a shared section may register the same
+* icon `id` with different priorities — the ledger keeps every entry while the
+* host renders one icon per section.
+*/
+const SETTINGS_SECTION_ICON_SLOT = "settings.section.icon";
+/** Authenticated host-RPC channel for get/set of the shared default. */
+const AUXILIARY_MODEL_CHANNEL = "/dsh-auxiliary-model";
+/** Model-settings namespace under which the shared default is published. */
+const AUXILIARY_MODEL_NS = "@klarkxy/dsh-plugin-kit/auxiliary-model";
+/**
+* Typert identity of the shared change stream. Mounted on the root context
+* with ownerNs filtering, so frames only carry {@link AUXILIARY_MODEL_NS}.
+*/
+const AUXILIARY_MODEL_CHANGES_IDENTITY = modelSettingsChangesIdentity("@klarkxy/dsh-plugin-kit");
+//#endregion
 //#region ../dsh-plugin-kit/lib/client-utils.js
 /** Fixed pause for failing background reads; manual work is never replayed. */
 function createPluginReadGate(now = Date.now) {
@@ -1448,18 +1493,118 @@ function createPluginReadGate(now = Date.now) {
 		}
 	};
 }
-//#endregion
-//#region ../dsh-plugin-kit/lib/contracts.js
-/** `@klarkxy/dsh-git-commit` becomes `KlarkxyDshGitCommitModelSettingsChanges`. */
-function modelSettingsChangesIdentity(packageName) {
-	const scoped = /^@([^/]+)\/(.+)$/.exec(packageName);
-	const parts = (scoped ? `${scoped[1]}/${scoped[2]}` : packageName).split(/[^A-Za-z0-9]+/).filter(Boolean);
-	if (!parts.length) throw new Error("Model settings package name has no RPC segment");
-	const segment = `${parts.map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join("")}ModelSettingsChanges`;
-	if (!/^[A-Z][A-Za-z0-9]*$/.test(segment)) throw new Error(`Model settings sync name is not an RPC segment: ${segment}`);
-	return {
-		service: segment,
-		namespace: segment
+/** One `<svg>` with the shared icon chrome; children are plain elements. */
+function lineIcon(children) {
+	return function SettingsSectionIcon(props) {
+		return (0, react.createElement)("svg", {
+			"aria-hidden": "true",
+			width: props.size ?? 16,
+			height: props.size ?? 16,
+			viewBox: "0 0 16 16",
+			fill: "none",
+			stroke: "currentColor",
+			strokeWidth: 1,
+			strokeLinecap: "round",
+			strokeLinejoin: "round"
+		}, ...children.map(([tag, attrs], index) => (0, react.createElement)(tag, {
+			key: index,
+			...attrs
+		})));
+	};
+}
+/** Chat bubble for the shared Session Management section. */
+const IconSessionSettings = lineIcon([["path", { d: "M8.5 13a5.5 5.5 0 0 0 5.5-5.5A5.5 5.5 0 0 0 8.5 2 5.5 5.5 0 0 0 3 7.5a5.48 5.48 0 0 0 .9 3L2.8 12.6a.5.5 0 0 0 .62.62l2.9-.98a5.48 5.48 0 0 0 2.18.76Z" }]]);
+/** Private Cordis rendezvous; every bundled copy of this helper resolves the same root service. */
+const SESSION_SETTINGS_PAGE_SERVICE = "dshSessionSettingsPage";
+/** The page component renders only its declared child list: items paint their own titles and styles. */
+function SessionSettingsPageView(props) {
+	return props.renderSlot(SESSION_SETTINGS_ITEM_SLOT, {});
+}
+/**
+* Acquire the root-owned page service, creating and providing it on first use.
+* One counter covers participants, the section wait and the provider: the last
+* release removes the wait and then the provider synchronously (Cordis deletes
+* the impl before its async disposer awaits), so a later acquire sees a clean
+* get() miss and can re-establish the page.
+*/
+function acquireSessionSettingsPage(root) {
+	const existing = root.get(SESSION_SETTINGS_PAGE_SERVICE, false);
+	if (existing) return existing;
+	const slots = root.slots;
+	let users = 0;
+	let stopPage;
+	let unprovide;
+	const page = {
+		retain() {
+			users += 1;
+			if (!stopPage) stopPage = slots.inject("settings.section", () => slots.register({
+				name: "settings.section",
+				id: SESSION_SETTINGS_SECTION_ID,
+				order: 30,
+				label: () => {
+					const locale = root.get("locale", false);
+					return String(locale?.getSnapshot?.().active ?? "").startsWith("zh") ? "会话管理" : "Session Management";
+				},
+				children: { [SESSION_SETTINGS_ITEM_SLOT]: {
+					kind: "list",
+					scope: "root"
+				} }
+			}, SessionSettingsPageView));
+		},
+		release() {
+			if (users <= 0) return;
+			users -= 1;
+			if (users > 0) return;
+			stopPage?.();
+			stopPage = void 0;
+			unprovide?.();
+		}
+	};
+	unprovide = root.provide(SESSION_SETTINGS_PAGE_SERVICE, page);
+	return page;
+}
+/**
+* Contribute one row to the shared Session Management settings page.
+*
+* `ctx` is the plugin's own context: the row's slot wait unloads with the
+* plugin, while the page itself is retained on the shared root context for as
+* long as any contributor lives. There is no fallback seat — when every
+* contributor is gone the section disappears with the page. Returns a disposer.
+* Shared root-owned infrastructure (the auxiliary-model card) calls this on
+* `ctx.root` so its row, icon and page share are owned by the root lifetime
+* and released by the returned disposer, not by any plugin fiber.
+*/
+function registerSessionSettingsItem(ctx, item, component) {
+	const slots = ctx.slots;
+	const root = ctx.root;
+	const page = acquireSessionSettingsPage(root);
+	let stopItem;
+	let stopIcon;
+	try {
+		page.retain();
+		stopItem = slots.inject(SESSION_SETTINGS_ITEM_SLOT, () => slots.register({
+			name: SESSION_SETTINGS_ITEM_SLOT,
+			...item
+		}, component));
+		stopIcon = slots.inject(SETTINGS_SECTION_ICON_SLOT, () => slots.register({
+			name: SETTINGS_SECTION_ICON_SLOT,
+			id: SESSION_SETTINGS_SECTION_ID,
+			order: item.order,
+			priority: item.order
+		}, IconSessionSettings));
+	} catch (error) {
+		stopIcon?.();
+		stopItem?.();
+		page.release();
+		throw error;
+	}
+	let disposed = false;
+	return () => {
+		if (disposed) return;
+		disposed = true;
+		stopIcon?.();
+		stopItem?.();
+		page.release();
 	};
 }
 //#endregion
@@ -1631,6 +1776,488 @@ function createModelSettingsSubscriber(ctx, packageName, identity = modelSetting
 	} });
 }
 //#endregion
+//#region ../dsh-plugin-kit/lib/auxiliary-model-client.js
+const AUXILIARY_MODEL_PACKAGE = "@klarkxy/dsh-plugin-kit";
+const AUXILIARY_MODEL_SEAT_ID = "auxiliary-model";
+/** Private Cordis rendezvous; every bundled copy resolves the same root service. */
+const AUXILIARY_MODEL_CARD_SERVICE = "dshAuxiliaryModelSettingsCard";
+/** Theme-token-only stylesheet: officialUiCss scope plus the shared ModelMenu recipe. */
+const auxiliaryModelCss = `${officialUiCss("ams-root")}${modelMenuCss}
+.ams-root .ams-row { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; min-width: 0; }
+`;
+const auxiliaryCopy = {
+	zh: {
+		title: "默认辅助模型",
+		help: "各辅助功能（如标题生成、摘要）没有单独指定模型时使用的模型；仅影响声明使用它的功能。",
+		model: "辅助模型",
+		modelDefault: "跟随会话或宿主默认",
+		modelHint: "不选择模型时，各功能按自己的规则决定对话模型。",
+		effortDefault: "跟随模型默认",
+		loading: "正在读取设置…",
+		failed: "无法读取模型设置。",
+		stale: "设置已被其他窗口更新，请刷新后重试。",
+		saveFailed: "保存失败，原设置未更改。请重试。",
+		saved: "已保存。",
+		retry: "重试",
+		refresh: "刷新设置",
+		syncUnavailable: "自动刷新不可用，请手动刷新设置。"
+	},
+	en: {
+		title: "Default Auxiliary Model",
+		help: "The model used by auxiliary features (such as title generation or summarizing) that do not name their own model; only features that opted in are affected.",
+		model: "Auxiliary model",
+		modelDefault: "Follow session or host default",
+		modelHint: "With no model selected, each feature follows its own rules for the conversation model.",
+		effortDefault: "Follow model default",
+		loading: "Loading settings…",
+		failed: "Could not load model settings.",
+		stale: "Settings were changed elsewhere; refresh and retry.",
+		saveFailed: "Save failed; the previous setting was not changed. Try again.",
+		saved: "Saved.",
+		retry: "Retry",
+		refresh: "Refresh settings",
+		syncUnavailable: "Automatic refresh unavailable; refresh settings manually."
+	}
+};
+/** A failed RPC keeps its code so the card can translate known rejections. */
+var AuxiliaryRpcError = class extends Error {
+	code;
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+		this.name = "AuxiliaryRpcError";
+	}
+};
+/** Host UI language, following live switches with the host's English fallback. */
+function useAuxiliaryLocale(client) {
+	const subscribe = (0, react.useCallback)((listener) => client.locale?.subscribe(listener) ?? (() => {}), [client]);
+	const snapshot = (0, react.useCallback)(() => client.locale?.getSnapshot().active ?? "en", [client]);
+	return String((0, react.useSyncExternalStore)(subscribe, snapshot, snapshot)).startsWith("zh") ? "zh" : "en";
+}
+function isAbort(error) {
+	return error instanceof Error && (error.name === "AbortError" || /abort|cancel/i.test(error.message));
+}
+function isStaleRejection(error) {
+	if (!(error instanceof AuxiliaryRpcError)) return false;
+	return error.code === "stale" || error.code === "auxiliary-model/conflict" || /changed|revision|reload|stale|conflict/i.test(error.message);
+}
+async function callAuxiliaryRpc(client, endpoint, payload = {}) {
+	const result = await client.connection.rpc.call(AUXILIARY_MODEL_CHANNEL, endpoint, payload);
+	if (!result || result.ok !== true) {
+		const error = result && "error" in result ? result.error : void 0;
+		throw new AuxiliaryRpcError(error?.code ?? "unknown", error?.message ?? `RPC ${endpoint} failed`);
+	}
+	return result.value;
+}
+/**
+* The shared card. All state comes from the shared host service over the
+* plugin-kit RPC channel; the card only renders the stored row.
+*/
+function AuxiliaryModelCard({ client, subscribe }) {
+	const language = useAuxiliaryLocale(client);
+	const text = auxiliaryCopy[language];
+	const [settings, setSettings] = (0, react.useState)();
+	const catalogState = useModelCatalog((0, react.useCallback)(() => readModelCatalog(client), [client]), { subscribe: (0, react.useCallback)((change) => client.connection.generation?.subscribe(change), [client]) });
+	const { refresh: refreshCatalog } = catalogState;
+	const choices = parseModelMenuChoices(catalogState.catalog, settings?.model ?? void 0);
+	const [menuOpen, setMenuOpen] = (0, react.useState)(false);
+	const [error, setError] = (0, react.useState)("");
+	const [note, setNote] = (0, react.useState)(false);
+	const [busy, setBusy] = (0, react.useState)(false);
+	const [syncError, setSyncError] = (0, react.useState)("");
+	const operation = (0, react.useRef)({
+		epoch: 0,
+		active: false,
+		reading: false,
+		writing: false,
+		pending: false
+	});
+	const refreshRef = (0, react.useRef)(() => {});
+	const refresh = () => {
+		const state = operation.current;
+		if (!state.active) return;
+		if (state.reading || state.writing) {
+			state.pending = true;
+			return;
+		}
+		state.pending = false;
+		state.reading = true;
+		setBusy(true);
+		const epoch = state.epoch;
+		callAuxiliaryRpc(client, "defaults.get").then((next) => {
+			if (state.active && state.epoch === epoch && !state.pending) {
+				setSettings(next);
+				setError("");
+			}
+		}).catch((reason) => {
+			if (state.active && state.epoch === epoch && !state.pending && !isAbort(reason)) setError("failed");
+		}).finally(() => {
+			if (!state.active || state.epoch !== epoch) return;
+			state.reading = false;
+			setBusy(false);
+			if (state.pending) refreshRef.current();
+		});
+	};
+	refreshRef.current = refresh;
+	(0, react.useEffect)(() => {
+		const state = operation.current;
+		state.epoch++;
+		state.active = true;
+		state.reading = false;
+		state.writing = false;
+		state.pending = false;
+		setBusy(false);
+		setSettings(void 0);
+		setError("");
+		setNote(false);
+		refreshRef.current();
+		return () => {
+			state.active = false;
+			state.epoch++;
+		};
+	}, [client]);
+	(0, react.useEffect)(() => {
+		setSyncError("");
+		let live = true;
+		let stop;
+		try {
+			stop = subscribe?.(() => {
+				if (live) {
+					setSyncError("");
+					refreshCatalog();
+					refreshRef.current();
+				}
+			}, (message) => {
+				if (live) setSyncError(message);
+			});
+		} catch {
+			if (live) setSyncError("Model settings sync service unavailable");
+		}
+		return () => {
+			live = false;
+			try {
+				stop?.();
+			} catch {}
+		};
+	}, [subscribe, refreshCatalog]);
+	const save = (0, react.useCallback)((model) => {
+		const state = operation.current;
+		if (!settings || !state.active || state.writing || state.reading) return;
+		state.writing = true;
+		const epoch = state.epoch;
+		setBusy(true);
+		setNote(false);
+		setError("");
+		callAuxiliaryRpc(client, "defaults.set", {
+			model: model ?? {
+				provider: "",
+				model: ""
+			},
+			expectedRevision: settings.revision
+		}).then((next) => {
+			if (state.active && state.epoch === epoch) {
+				setSettings(next);
+				setNote(true);
+				refreshCatalog();
+			}
+		}).catch((reason) => {
+			if (state.active && state.epoch === epoch) setError(isStaleRejection(reason) ? "stale" : "saveFailed");
+		}).finally(() => {
+			if (!state.active || state.epoch !== epoch) return;
+			state.writing = false;
+			setBusy(false);
+			if (state.pending) refreshRef.current();
+		});
+	}, [
+		client,
+		settings,
+		refreshCatalog
+	]);
+	const locked = busy;
+	if (!settings) return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+		className: "ams-root dsh-ui-card",
+		"data-testid": "auxiliary-model-settings",
+		children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+				className: "dsh-ui-heading",
+				children: text.title
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+				className: "dsh-ui-help",
+				children: text.help
+			}),
+			error ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+				role: "alert",
+				className: "dsh-ui-error",
+				children: text[error]
+			}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+				role: "status",
+				className: "dsh-ui-hint",
+				children: text.loading
+			}),
+			syncError && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+				role: "status",
+				className: "dsh-ui-hint",
+				children: text.syncUnavailable
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: "dsh-ui-actions",
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+					variant: "ghost",
+					size: "sm",
+					disabled: locked,
+					onClick: () => refreshRef.current(),
+					children: text.retry
+				})
+			})
+		]
+	});
+	const current = settings.model ?? {
+		provider: "",
+		model: ""
+	};
+	const follow = !current.provider || !current.model;
+	const selected = follow ? void 0 : choices.find((item) => item.provider === current.provider && item.model === current.model);
+	const efforts = follow ? [] : modelMenuEffortOptions(selected, current.reasoningEffort);
+	const currentLabel = follow ? text.modelDefault : selected?.label ?? `${current.provider} / ${current.model}`;
+	const selectedEffort = efforts.find((item) => item.id === (current.reasoningEffort || ""));
+	const effortName = selectedEffort ? modelMenuEffortLabel(selectedEffort, language) : void 0;
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+		className: "ams-root dsh-ui-card",
+		"data-testid": "auxiliary-model-settings",
+		children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+				className: "dsh-ui-heading",
+				children: text.title
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+				className: "dsh-ui-help",
+				children: text.help
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dsh-ui-field",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-ui-label",
+						children: text.model
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ModelCatalogStatus, {
+						state: catalogState,
+						locale: language
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ModelMenu, {
+						locale: language,
+						open: menuOpen && !locked,
+						onOpenChange: (next) => setMenuOpen(next && !locked),
+						listClassName: "ams-root ams-menu-portal",
+						anchor: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+							type: "button",
+							className: "dsh-model-menu-trigger",
+							disabled: locked,
+							"aria-label": `${text.model}: ${currentLabel}`,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: "dsh-model-menu-triggerLabel",
+									children: currentLabel
+								}),
+								!follow && efforts.length ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: "dsh-model-menu-triggerEffort",
+									children: effortName ?? text.effortDefault
+								}) : null,
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutlineRegular, { className: `dsh-model-menu-chevron${menuOpen && !locked ? " dsh-model-menu-chevronOpen" : ""}` })
+							]
+						}),
+						choices,
+						selected: follow ? void 0 : {
+							provider: current.provider,
+							model: current.model
+						},
+						onPick: (picked) => save({
+							provider: picked.provider,
+							model: picked.model
+						}),
+						leading: [{
+							id: "default",
+							label: text.modelDefault,
+							selected: follow
+						}],
+						onPickLeading: () => save(null),
+						efforts,
+						selectedEffort: current.reasoningEffort || "",
+						onPickEffort: (effort) => save(follow ? null : {
+							provider: current.provider,
+							model: current.model,
+							...effort ? { reasoningEffort: effort } : {}
+						}),
+						modelLabel: text.model,
+						modelValue: currentLabel,
+						defaultEffortLabel: text.effortDefault
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-ui-hint",
+						children: text.modelHint
+					})
+				]
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "ams-row",
+				children: [
+					syncError && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						role: "status",
+						className: "dsh-ui-hint",
+						children: text.syncUnavailable
+					}),
+					error && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						role: "alert",
+						className: "dsh-ui-error",
+						children: text[error]
+					}),
+					note && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						role: "status",
+						className: "dsh-ui-notice",
+						children: text.saved
+					}),
+					error || syncError ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+						variant: "ghost",
+						size: "sm",
+						disabled: locked,
+						onClick: () => refreshRef.current(),
+						children: text.refresh
+					}) : null
+				]
+			})
+		]
+	});
+}
+const AUXILIARY_MODEL_WATCH_COORDINATOR = "dshAuxiliaryModelWatchCoordinator";
+function acquireWatchCoordinator(root) {
+	const existing = root.get(AUXILIARY_MODEL_WATCH_COORDINATOR, false);
+	if (existing) return existing;
+	let unprovide;
+	const coordinator = {
+		tail: Promise.resolve(),
+		active: 0,
+		mount() {
+			coordinator.active += 1;
+			const previousTail = coordinator.tail;
+			const lease = {
+				closed: false,
+				done() {
+					if (lease.closed) return;
+					lease.closed = true;
+					coordinator.active -= 1;
+					const owned = lease.fiber;
+					lease.fiber = void 0;
+					coordinator.tail = coordinator.tail.then(() => Promise.resolve(owned?.dispose()).catch(() => {}));
+					coordinator.tail.then(() => {
+						if (coordinator.active > 0) return;
+						try {
+							if (root.get(AUXILIARY_MODEL_WATCH_COORDINATOR, false) === coordinator) Promise.resolve(unprovide?.()).catch(() => {});
+						} catch {}
+					});
+				},
+				fiber: void 0
+			};
+			previousTail.then(() => {
+				if (lease.closed) return;
+				try {
+					lease.fiber = root.inject(["remote"], (injected) => {
+						const scope = injected;
+						const mounting = scope.remote.$mount(modelSettingsChangesRemote(AUXILIARY_MODEL_PACKAGE, AUXILIARY_MODEL_CHANGES_IDENTITY));
+						mounting.catch(() => {});
+						scope.effect(() => async () => {
+							await (await mounting.catch(() => void 0))?.();
+						});
+					});
+				} catch {}
+			});
+			return lease;
+		}
+	};
+	unprovide = root.provide(AUXILIARY_MODEL_WATCH_COORDINATOR, coordinator);
+	return coordinator;
+}
+/**
+* Acquire the root-owned card service, creating it on first use. One counter
+* covers participants, the seat wait and the change-stream mount: the last
+* release removes the wait, then the watch contribution, then the provider
+* itself synchronously (Cordis deletes the impl before its async disposer
+* awaits), so a later acquire sees a clean get() miss and can re-establish.
+*/
+function acquireAuxiliaryModelCard(root, ctx) {
+	const existing = root.get(AUXILIARY_MODEL_CARD_SERVICE, false);
+	if (existing) return existing;
+	let users = 0;
+	let styleElement;
+	let stopItem;
+	let unprovide;
+	const watchLease = acquireWatchCoordinator(root).mount();
+	const subscriber = createModelSettingsSubscriber(ctx.root, AUXILIARY_MODEL_PACKAGE, AUXILIARY_MODEL_CHANGES_IDENTITY, (ns) => ns === AUXILIARY_MODEL_NS);
+	const render = () => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AuxiliaryModelCard, {
+		client: root,
+		subscribe: subscriber.subscribe
+	});
+	const service = {
+		retain() {
+			users += 1;
+			if (styleElement === void 0 && typeof document !== "undefined") {
+				styleElement = document.createElement("style");
+				styleElement.setAttribute("data-plugin", "dsh-auxiliary-model-shared");
+				styleElement.textContent = auxiliaryModelCss;
+				document.head.appendChild(styleElement);
+			}
+			if (!stopItem) stopItem = registerSessionSettingsItem(ctx.root, {
+				id: AUXILIARY_MODEL_SEAT_ID,
+				order: 55
+			}, render);
+		},
+		release() {
+			if (users <= 0) return;
+			users -= 1;
+			if (users > 0) return;
+			stopItem?.();
+			stopItem = void 0;
+			styleElement?.remove();
+			styleElement = void 0;
+			watchLease.done();
+			try {
+				Promise.resolve(unprovide?.()).catch(() => {});
+			} catch {}
+			unprovide = void 0;
+		}
+	};
+	unprovide = root.provide(AUXILIARY_MODEL_CARD_SERVICE, service);
+	return service;
+}
+/**
+* Show the shared "default auxiliary model" card while the calling plugin is
+* enabled.
+*
+* `ctx` is the plugin's own client context: the card itself is retained on the
+* shared root context for as long as any participant lives, so an arbitrary
+* subset of enabled plugins yields the same single card. The mount's slot wait
+* and the change-stream contribution are owned by the root service — the first
+* participant's unload cannot take the card down. Returns a disposer; it may
+* be invoked by both ctx.effect and an explicit caller and releases at most
+* once, so a double call cannot unbalance the shared refcount.
+*/
+function registerAuxiliaryModelSettings(ctx) {
+	const root = ctx.root;
+	const service = acquireAuxiliaryModelCard(root, ctx);
+	try {
+		service.retain();
+	} catch (error) {
+		service.release();
+		throw error;
+	}
+	let disposed = false;
+	return () => {
+		if (disposed) return;
+		disposed = true;
+		service.release();
+	};
+}
+//#endregion
 //#region src/client.jsx
 const h = react.default.createElement;
 const name = "dsh-safe-auto-client";
@@ -1664,7 +2291,7 @@ const TEXT = {
 		unknownConfigField: (field) => `未知配置项：${field}`,
 		externalChange: "配置已在别处修改。草稿已保留，请刷新并丢弃草稿后重新确认。",
 		syncUnavailable: "自动刷新不可用，请手动刷新配置。",
-		follow: "跟随当前对话",
+		follow: "默认辅助模型",
 		searchModels: "搜索模型…",
 		noModels: "没有匹配的模型",
 		clearSearch: "清除搜索",
@@ -1672,7 +2299,7 @@ const TEXT = {
 		model: "模型",
 		effort: "思考强度",
 		effortDefault: "默认",
-		followHelp: "跟随对话：使用当前会话的模型与默认思考强度。",
+		followHelp: "默认辅助模型：优先使用全局辅助模型，未设置时使用当前会话的模型与默认思考强度。",
 		savedEffortRetained: (effort) => `已保存的强度「${effort}」保留，需在 profile 中检查。`,
 		modelAbsent: "当前模型不在目录中，保留已保存配置。",
 		effortAbsent: "已保存的思考强度不在目录中，不会自动替换。",
@@ -1682,6 +2309,7 @@ const TEXT = {
 		workspaceWrite: "工作区内修改",
 		fullAccess: "完全权限",
 		safeAuto: "安全自动",
+		groupHint: "审核模型、审核说明与审核历史",
 		unavailableShort: "当前不可用",
 		refreshRetry: (message) => `${message}。重新打开菜单后重试。`,
 		panelLabel: "安全自动设置",
@@ -1701,8 +2329,7 @@ const TEXT = {
 		save: "保存",
 		refreshDiscard: "刷新（丢弃草稿）",
 		saveFailed: (message) => `${message}。草稿已保留，刷新后重新编辑，不会自动重试。`,
-		saved: "已保存",
-		summary: "安全自动：需要审批的请求交给审核模型判断，通过才放行这一次。"
+		saved: "已保存"
 	},
 	en: {
 		requestFailed: "Request failed",
@@ -1725,7 +2352,7 @@ const TEXT = {
 		unknownConfigField: (field) => `Unknown configuration field: ${field}`,
 		externalChange: "Settings changed elsewhere. Draft preserved; refresh and discard it before reviewing changes.",
 		syncUnavailable: "Automatic refresh unavailable; refresh settings manually.",
-		follow: "Follow conversation",
+		follow: "Default auxiliary model",
 		searchModels: "Search models…",
 		noModels: "No matching models",
 		clearSearch: "Clear search",
@@ -1733,7 +2360,7 @@ const TEXT = {
 		model: "Model",
 		effort: "Reasoning effort",
 		effortDefault: "Default",
-		followHelp: "Follows the conversation model with the default reasoning effort.",
+		followHelp: "The global auxiliary model when it is set; otherwise the current conversation model with the default reasoning effort.",
 		savedEffortRetained: (effort) => `Saved effort "${effort}" retained; check the profile.`,
 		modelAbsent: "This model is not in the catalog; the saved configuration is kept.",
 		effortAbsent: "The saved effort is not advertised; it will not be replaced automatically.",
@@ -1743,6 +2370,7 @@ const TEXT = {
 		workspaceWrite: "Workspace Write",
 		fullAccess: "Full Access",
 		safeAuto: "Safe Auto",
+		groupHint: "Reviewer model, safety notes and review history",
 		unavailableShort: "unavailable",
 		refreshRetry: (message) => `${message}. Reopen the menu and retry.`,
 		panelLabel: "Safe Auto settings",
@@ -1762,8 +2390,7 @@ const TEXT = {
 		save: "Save",
 		refreshDiscard: "Refresh (discard draft)",
 		saveFailed: (message) => `${message}. Draft retained; refresh before editing again. No automatic retry.`,
-		saved: "Saved",
-		summary: "Safe Auto: a reviewer model answers approval requests and approves only the calls that pass."
+		saved: "Saved"
 	}
 };
 /** The host locale may arrive as the injected service or as a plain tag. */
@@ -1905,6 +2532,17 @@ const css = `${officialUiCss("dsh-safe-auto")}${modelMenuCss}
 /* A fieldset is the settings group and takes the contract's card surface; its
  * legend keeps the UA inline padding from indenting the group title. */
 .dsh-safe-auto legend { padding: 0; }
+/* The shared column row mirrors the other items' geometry: 16px padding, a
+ * 0.5px l2 rule the shell drops on the last item, 24px label-control gutter. */
+.dsh-safe-auto.sa-item { padding: 0; border-bottom: 0.5px solid var(--dsw-alias-border-l2); }
+.dsh-safe-auto .sa-item-summary { display: flex; align-items: center; justify-content: space-between; gap: 24px; padding: 16px 0; list-style: none; cursor: pointer; }
+.dsh-safe-auto .sa-item-summary::-webkit-details-marker { display: none; }
+.dsh-safe-auto .sa-item-summary > span:first-child { min-width: 0; }
+.dsh-safe-auto .sa-item-title { display: block; font-size: 14px; line-height: 20px; color: var(--dsw-alias-label-primary); }
+.dsh-safe-auto .sa-item-desc { display: block; margin-top: 4px; font-size: 12px; line-height: 18px; color: var(--dsw-alias-label-secondary); }
+.dsh-safe-auto .sa-item-chevron { width: 14px; height: 14px; color: var(--dsw-alias-label-secondary); transition: transform 0.15s ease; }
+.dsh-safe-auto.sa-item[open] > .sa-item-summary .sa-item-chevron { transform: rotate(180deg); }
+.dsh-safe-auto .sa-item-body { padding: 0 0 16px; }
 `;
 function ErrorText({ error, t }) {
 	return error ? h("p", {
@@ -2413,7 +3051,7 @@ function HistoryPanel({ api, locale, initialPage = null, download = downloadHist
 		}
 	}, JSON.stringify(detail, null, 2))));
 }
-function SettingsPanel({ view, api, locale, initialSettings = null, initialCatalog = null, initialTab = "reviewer" }) {
+function SettingsPanel({ api, locale, initialSettings = null, initialCatalog = null, initialTab = "reviewer" }) {
 	const t = useText(locale);
 	const [settings, setSettings] = (0, react.useState)(initialSettings);
 	const [values, setValues] = (0, react.useState)(initialSettings?.values || null);
@@ -2563,10 +3201,6 @@ function SettingsPanel({ view, api, locale, initialSettings = null, initialCatal
 		tabIndex: 0,
 		className
 	}, children);
-	if (view === "summary") return h("div", { className: "dsh-safe-auto" }, h("p", { className: "dsh-ui-compact dsh-ui-wrap" }, t("summary")), h(ErrorText, {
-		error,
-		t
-	}));
 	return h("section", {
 		className: "dsh-safe-auto dsh-ui-page",
 		"aria-label": t("panelLabel"),
@@ -2644,6 +3278,29 @@ function SettingsPanel({ view, api, locale, initialSettings = null, initialCatal
 		className: "dsh-ui-notice"
 	}, t("saved")));
 }
+/**
+* The shared-column row: a named native details group. The panel mounts on the
+* first expand only — the shared page must not fire every plugin's settings
+* and model-catalog reads — and stays mounted afterwards so a collapsed group
+* never drops an unsaved reviewer draft or an in-flight save.
+*/
+function SafeAutoSettingsItem({ api, locale }) {
+	const t = useText(locale);
+	const [visited, setVisited] = (0, react.useState)(false);
+	return h("details", {
+		className: "dsh-safe-auto sa-item",
+		"data-testid": "safe-auto-settings-item",
+		onToggle: (event) => {
+			if (event.currentTarget.open) setVisited(true);
+		}
+	}, h("summary", { className: "sa-item-summary" }, h("span", null, h("span", { className: "sa-item-title" }, t("safeAuto")), h("span", { className: "sa-item-desc" }, t("groupHint"))), h(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutlineRegular, {
+		className: "sa-item-chevron",
+		"aria-hidden": "true"
+	})), visited ? h("div", { className: "sa-item-body" }, h(SettingsPanel, {
+		api,
+		locale
+	})) : null);
+}
 function apply(ctx) {
 	ctx.effect(() => {
 		if (typeof document === "undefined") return void 0;
@@ -2675,14 +3332,14 @@ function apply(ctx) {
 			locale: ctx.locale
 		})
 	}, PermissionMenu));
-	ctx.slots.inject("plugins.bundle.config", () => ctx.slots.register({
-		name: "plugins.bundle.config",
-		key: BUNDLE,
-		inject: () => ({
-			api,
-			locale: ctx.locale
-		})
-	}, SettingsPanel));
+	ctx.effect(() => registerSessionSettingsItem(ctx, {
+		id: "safe-auto",
+		order: 80
+	}, () => h(SafeAutoSettingsItem, {
+		api,
+		locale: ctx.locale
+	})));
+	ctx.effect(() => registerAuxiliaryModelSettings(ctx));
 }
 //#endregion
 exports.BUNDLE = BUNDLE;
@@ -2690,6 +3347,7 @@ exports.CHANNEL = CHANNEL;
 exports.HistoryPanel = HistoryPanel;
 exports.PermissionMenu = PermissionMenu;
 exports.ReviewerFields = ReviewerFields;
+exports.SafeAutoSettingsItem = SafeAutoSettingsItem;
 exports.SettingsPanel = SettingsPanel;
 exports.apply = apply;
 exports.createRequestScope = createRequestScope;