@nomix-ai/nomix-harness 0.2.4 → 0.2.6

package/dist/kernel/client-ui-settings-models/lib/types/client/DeepSeekOnboardingDialog.d.ts

@@ -10,6 +10,7 @@ import type { IApiClient } from '../../../../api-remotes/lib/client.js';
 import type { SnapshotStore } from '../../../../client-runtime/lib/client.js';
 import type { InjectFace, PropsRuntime } from '../../../../client-ui-slots/lib/index.js';
 import type { ModelsSettingsState, ModelsSettingsStore } from './store.ts';
+import type { SettingsSchemaOperations } from './schema-operations.ts';
 import type { en } from './locales.ts';
 /** Registration-side dependencies of {@link DeepSeekOnboardingDialog}. */
 export interface DeepSeekOnboardingInjected {
@@ -21,6 +22,8 @@ export interface DeepSeekOnboardingInjected {
     controller: ModelsSettingsStore;
     /** Existing wire face reused by the Models credential editor. */
     api: Pick<IApiClient, 'settings' | 'credentials' | 'llm'>;
+    /** Settings schema and immutable path callbacks. */
+    schema: SettingsSchemaOperations;
     /** Feature copy. */
     t: (key: keyof typeof en) => string;
 }

package/dist/kernel/client-ui-settings-models/lib/types/client/DeepSeekOnboardingDialog.js

@@ -22,7 +22,7 @@ function assertNever(_value) {
  * @returns the onboarding modal or null when onboarding needs no intervention.
  */
 export function DeepSeekOnboardingDialog(props) {
-    const { complete, controller, useModels, api, t } = props;
+    const { complete, controller, useModels, api, schema, t } = props;
     const state = useModels(snapshot => snapshot);
     const readiness = onboardingReadiness(state);
     useEffect(() => {
@@ -61,6 +61,6 @@ export function DeepSeekOnboardingDialog(props) {
         }
         void controller.load();
     };
-    return (_jsxs(OnboardingModal, { title: t('onboardingTitle'), children: [_jsx("p", { className: styles.description, children: t('onboardingDescription') }), _jsx("div", { className: styles.editor, children: _jsx(ProviderEditor, { provider: row.entry.provider, displayName: row.entry.displayName, namespace: namespace, settingsPath: row.entry.settingsPath, api: api, t: t, readOnly: false, hideTitle: true, credentialOnly: true, credentialRequired: true, autoFocusCredential: true, cancelLabel: "onboardingLater", submitLabel: "onboardingSave", submitBusyLabel: "onboardingSaving", onClose: finishCredential }) })] }));
+    return (_jsxs(OnboardingModal, { title: t('onboardingTitle'), children: [_jsx("p", { className: styles.description, children: t('onboardingDescription') }), _jsx("div", { className: styles.editor, children: _jsx(ProviderEditor, { provider: row.entry.provider, displayName: row.entry.displayName, namespace: namespace, schema: schema, settingsPath: row.entry.settingsPath, api: api, t: t, readOnly: false, hideTitle: true, credentialOnly: true, credentialRequired: true, autoFocusCredential: true, cancelLabel: "onboardingLater", submitLabel: "onboardingSave", submitBusyLabel: "onboardingSaving", onClose: finishCredential }) })] }));
 }
 //# sourceMappingURL=DeepSeekOnboardingDialog.js.map

package/dist/kernel/client-ui-settings-models/lib/types/client/ModelListEditor.js

@@ -197,6 +197,16 @@ export function ModelListEditor(props) {
             return next;
         });
     };
+    const activeCandidates = candidates ?? [];
+    const allCandidatesPicked = activeCandidates.length > 0
+        && activeCandidates.every(candidate => picked.has(candidate.id));
+    const toggleAllCandidates = () => {
+        setPicked((current) => {
+            return activeCandidates.every(candidate => current.has(candidate.id))
+                ? new Set()
+                : new Set(activeCandidates.map(candidate => candidate.id));
+        });
+    };
     // A route the adapter already describes answers without an endpoint; only a
     // draft with neither has nothing to ask about.
     const askable = probe.provider !== undefined || (probe.baseURL !== undefined && probe.baseURL.length > 0);
@@ -225,6 +235,6 @@ export function ModelListEditor(props) {
                                     setEditing(current => reindexOnRemove(current, index));
                                 }, children: _jsx(IconTrash, {}) })] }), expanded.has(index)
                         ? (_jsxs("div", { className: styles['modelAdvanced'], children: [_jsxs("label", { className: styles['modelField'], children: [_jsx("span", { className: styles['modelFieldLabel'], children: t('modelContextWindow') }), _jsx("input", { className: styles['input'], type: "text", inputMode: "numeric", value: capacityText(model, index, 'contextWindow'), placeholder: CAPACITY_HINT.contextWindow, "aria-label": `${t('modelContextWindow')} ${index + 1}`, disabled: disabled, onChange: (event) => { editCapacity(index, 'contextWindow', event.target.value); } })] }), _jsxs("label", { className: styles['modelField'], children: [_jsx("span", { className: styles['modelFieldLabel'], children: t('modelMaxTokens') }), _jsx("input", { className: styles['input'], type: "text", inputMode: "numeric", value: capacityText(model, index, 'maxTokens'), placeholder: CAPACITY_HINT.maxTokens, "aria-label": `${t('modelMaxTokens')} ${index + 1}`, disabled: disabled, onChange: (event) => { editCapacity(index, 'maxTokens', event.target.value); } })] })] }))
-                        : null] }, index))), _jsx("button", { type: "button", className: styles['addModelButton'], disabled: disabled, onClick: () => { onChange([...models, { id: '' }]); }, children: t('addModel') }), failure !== undefined ? _jsx("p", { className: styles['error'], children: failure }) : null, _jsx(Modal, { open: candidates !== undefined, onClose: closePicker, title: t('fetchTitle'), closeLabel: t('close'), description: t('fetchDescription'), className: styles['fetchDialog'], footer: (_jsxs(_Fragment, { children: [_jsx(Button, { variant: "outline", onClick: closePicker, children: t('cancel') }), _jsx(Button, { variant: "outline", onClick: adoptPicked, children: t('fetchAdopt') })] })), children: _jsx("ul", { className: styles['candidateList'], children: (candidates ?? []).map(candidate => (_jsx("li", { className: styles['candidate'], children: _jsxs("label", { className: styles['candidateLabel'], children: [_jsx("input", { type: "checkbox", checked: picked.has(candidate.id), onChange: () => { toggle(candidate.id); } }), _jsx("span", { className: styles['candidateId'], children: candidate.id })] }) }, candidate.id))) }) })] }));
+                        : null] }, index))), _jsx("button", { type: "button", className: styles['addModelButton'], disabled: disabled, onClick: () => { onChange([...models, { id: '' }]); }, children: t('addModel') }), failure !== undefined ? _jsx("p", { className: styles['error'], children: failure }) : null, _jsxs(Modal, { open: candidates !== undefined, onClose: closePicker, title: t('fetchTitle'), closeLabel: t('close'), description: t('fetchDescription'), className: styles['fetchDialog'], footer: (_jsxs(_Fragment, { children: [_jsx(Button, { variant: "outline", onClick: closePicker, children: t('cancel') }), _jsx(Button, { variant: "outline", onClick: adoptPicked, children: t('fetchAdopt') })] })), children: [_jsx("div", { className: styles['candidateActions'], children: _jsx(Button, { variant: "ghost", size: "sm", onClick: toggleAllCandidates, children: t(allCandidatesPicked ? 'fetchDeselectAll' : 'fetchSelectAll') }) }), _jsx("ul", { className: styles['candidateList'], children: (candidates ?? []).map(candidate => (_jsx("li", { className: styles['candidate'], children: _jsxs("label", { className: styles['candidateLabel'], children: [_jsx("input", { type: "checkbox", checked: picked.has(candidate.id), onChange: () => { toggle(candidate.id); } }), _jsx("span", { className: styles['candidateId'], children: candidate.id })] }) }, candidate.id))) })] })] }));
 }
 //# sourceMappingURL=ModelListEditor.js.map

package/dist/kernel/client-ui-settings-models/lib/types/client/ModelsSection.d.ts

@@ -13,17 +13,22 @@
  */
 import type { ReactNode } from 'react';
 import type { IApiClient } from '../../../../api-remotes/lib/client.js';
-import type { SnapshotSelectorHook } from '../../../../client-web-react/lib/index.js';
-import type { ModelsSettingsState, ModelsSettingsStore, ProviderRow } from './store.ts';
+import type { InjectFace } from '../../../../client-ui-slots/lib/index.js';
+import type { ModelsSettingsStore, ProviderRow } from './store.ts';
+import type { SettingsSchemaOperations } from './schema-operations.ts';
 import type { en } from './locales.ts';
 /** Injected dependencies of {@link ModelsSection} (slot `inject`). */
 export interface ModelsSectionInjected {
     /** The page store (loaded on mount, refreshed on pushed invalidations). */
     controller: ModelsSettingsStore;
-    /** uSES subscription hook bound to the store. */
-    useSnapshot: SnapshotSelectorHook<ModelsSettingsState>;
+    hooks: {
+        /** Page snapshot bound by the UI renderer as useSnapshot. */
+        snapshot: ModelsSettingsStore['store'];
+    };
     /** Wire faces the editor writes through. */
     api: Pick<IApiClient, 'settings' | 'credentials' | 'llm'>;
+    /** Settings schema and immutable path callbacks. */
+    schema: SettingsSchemaOperations;
     /** Section copy. */
     t: (key: keyof typeof en) => string;
 }
@@ -31,7 +36,7 @@ export interface ModelsSectionInjected {
  * Props delivered by the slot outlet: the inject face spread flat (the
  * renderer erases the share boundary at the render call).
  */
-export type ModelsSectionProps = Partial<ModelsSectionInjected>;
+export type ModelsSectionProps = Partial<InjectFace<ModelsSectionInjected>>;
 /** Provider identity shared by row actions and confirmation copy. */
 export interface ProviderIdentity {
     /** Stable provider route id. */

package/dist/kernel/client-ui-settings-models/lib/types/client/ModelsSection.js

@@ -106,13 +106,14 @@ export function providerCopy(template, target) {
  * @returns the section, or null while the shell has not injected yet.
  */
 export function ModelsSection(props) {
-    const { controller, useSnapshot, api, t } = props;
-    if (controller === undefined || useSnapshot === undefined || api === undefined || t === undefined)
+    const { controller, useSnapshot, api, schema, t } = props;
+    if (controller === undefined || useSnapshot === undefined || api === undefined
+        || schema === undefined || t === undefined)
         return null;
-    return _jsx(Loaded, { injected: { controller, useSnapshot, api, t } });
+    return _jsx(Loaded, { injected: { controller, useSnapshot, api, schema, t } });
 }
 function Loaded({ injected }) {
-    const { controller, api, t } = injected;
+    const { controller, api, schema, t } = injected;
     const state = injected.useSnapshot(snapshot => snapshot);
     const [editing, setEditing] = useState(undefined);
     const [adding, setAdding] = useState(false);
@@ -196,7 +197,7 @@ function Loaded({ injected }) {
     // Hand-declared routes live in the pi-ai namespace, which is also the only
     // one whose schema names the protocols one may speak; without it mounted
     // there is nothing to declare and the entry point stays disabled.
-    const protocols = protocolChoices(state.namespaces.get('llm-pi-ai'));
+    const protocols = protocolChoices(state.namespaces.get('llm-pi-ai'), schema);
     return (_jsxs("div", { className: styles['section'], children: [_jsx("h2", { className: styles['title'], children: t('title') }), _jsx("p", { className: styles['intro'], children: t('intro') }), !state.writable && state.status === 'ready' ? _jsx("p", { className: styles['notice'], children: t('readOnly') }) : null, savedIdentity === undefined
                 ? null
                 : (_jsx("p", { className: styles['savedNotice'], role: "status", "aria-live": "polite", children: providerCopy(t('savedProvider'), savedIdentity) })), _jsx("ul", { className: styles['rows'], children: configured.map((row) => {
@@ -211,6 +212,7 @@ function Loaded({ injected }) {
                         return (_jsx("li", { className: styles['setupCard'], children: renderProviderEditor({
                                 target,
                                 namespace,
+                                schema,
                                 api,
                                 t,
                                 readOnly: !state.writable,
@@ -246,6 +248,7 @@ function Loaded({ injected }) {
                                 ? renderProviderEditor({
                                     target,
                                     namespace,
+                                    schema,
                                     api,
                                     t,
                                     readOnly: !state.writable,
@@ -259,7 +262,7 @@ function Loaded({ injected }) {
                                             if (row === undefined)
                                                 return;
                                             setEditing(targetOf(row));
-                                        }, children: addable.map(row => (_jsx("option", { value: row.entry.provider, children: row.entry.displayName }, row.entry.provider))) })] }), _jsx(ProviderEditor, { provider: addTarget.provider, displayName: addTarget.displayName, hideTitle: true, namespace: addNamespace, settingsPath: addTarget.settingsPath, api: api, t: t, readOnly: !state.writable, onClose: (changed) => { closeEditor(changed, addTarget); } }, addTarget.provider)] }))
+                                        }, children: addable.map(row => (_jsx("option", { value: row.entry.provider, children: row.entry.displayName }, row.entry.provider))) })] }), _jsx(ProviderEditor, { provider: addTarget.provider, displayName: addTarget.displayName, hideTitle: true, namespace: addNamespace, schema: schema, settingsPath: addTarget.settingsPath, api: api, t: t, readOnly: !state.writable, onClose: (changed) => { closeEditor(changed, addTarget); } }, addTarget.provider)] }))
                     : declaring
                         ? (_jsx("div", { className: styles['addCard'], children: _jsx(CustomProviderCard, { taken: state.rows.map(row => row.entry.provider), protocols: protocols, 
                                 /* v8 ignore next -- the card only opens from a button disabled without this namespace */

package/dist/kernel/client-ui-settings-models/lib/types/client/ProviderEditor.d.ts

@@ -22,6 +22,7 @@
  */
 import type { ReactNode } from 'react';
 import type { IApiClient, SettingsNamespaceView, SettingsPathOpView } from '../../../../api-remotes/lib/client.js';
+import type { SettingsSchemaOperations } from './schema-operations.ts';
 import type { en } from './locales.ts';
 /** Props of {@link ProviderEditor}. */
 export interface ProviderEditorProps {
@@ -41,6 +42,8 @@ export interface ProviderEditorProps {
     declared?: boolean;
     /** The owning namespace view (schema, layers, secrets). */
     namespace: SettingsNamespaceView;
+    /** Settings-owned synchronous schema and immutable path operations. */
+    schema: SettingsSchemaOperations;
     /** Path from the section root to this provider's profile. */
     settingsPath: readonly string[];
     /** Wire faces for writes and for interrogating a provider endpoint. */

package/dist/kernel/client-ui-settings-models/lib/types/client/ProviderEditor.js

@@ -22,7 +22,6 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
  * see instead of rebuilding the whole subtree from a partial descriptor.
  */
 import { useEffect, useMemo, useState } from 'react';
-import { deletePath, getPath, hasPath, nodeAtPath, rehydrateSchema, setPath, validateDraft, } from '../../../../client-schema-form/lib/index.js';
 import { DeepSeekModelsEditor, modelDrafts, validateDeepSeekModels, } from "./DeepSeekModelsEditor.js";
 import { apiKeyFailure } from "./apiKey.js";
 import { EditorFooter } from "./EditorFooter.js";
@@ -32,8 +31,8 @@ import styles from './ModelsSection.module.css';
 /** The public DeepSeek endpoint shown as the deepseek base-URL placeholder. */
 const DEEPSEEK_PUBLIC_BASE_URL = 'https://api.deepseek.com';
 /** A user-section subtree as a plain draft object (absent → empty). */
-function draftAt(namespace, path) {
-    const subtree = getPath(namespace.user, path);
+function draftAt(schema, namespace, path) {
+    const subtree = schema.getPath(namespace.user, path);
     if (typeof subtree !== 'object' || subtree === null || Array.isArray(subtree))
         return {};
     return structuredClone(subtree);
@@ -73,8 +72,8 @@ function layoutOf(ns) {
     return 'unknown';
 }
 /** The credential reference this profile resolves keys through. */
-function refFor(namespace, path, provider) {
-    const profile = getPath(namespace.value, path);
+function refFor(schema, namespace, path, provider) {
+    const profile = schema.getPath(namespace.value, path);
     const named = typeof profile === 'object' && profile !== null
         ? profile.apiKeyEnv
         : undefined;
@@ -86,8 +85,8 @@ function refFor(namespace, path, provider) {
  * @returns the editor card.
  */
 export function ProviderEditor(props) {
-    const { namespace, settingsPath, api, t } = props;
-    const [draft, setDraft] = useState(() => draftAt(namespace, settingsPath));
+    const { namespace, schema, settingsPath, api, t } = props;
+    const [draft, setDraft] = useState(() => draftAt(schema, namespace, settingsPath));
     const [keyDraft, setKeyDraft] = useState('');
     const [keyState, setKeyState] = useState(undefined);
     const [busy, setBusy] = useState(false);
@@ -95,19 +94,19 @@ export function ProviderEditor(props) {
     // A settings success advances both retry baselines immediately. Keeping the
     // derived fields in the draft prevents a pushed namespace refresh from
     // turning them into deletions when the following credential write is retried.
-    const [committedOriginal, setCommittedOriginal] = useState(() => getPath(namespace.user, settingsPath));
+    const [committedOriginal, setCommittedOriginal] = useState(() => schema.getPath(namespace.user, settingsPath));
     const [expectedRevision, setExpectedRevision] = useState(() => namespace.revision);
-    const root = useMemo(() => rehydrateSchema(namespace.schema), [namespace.schema]);
-    const node = useMemo(() => nodeAtPath(root, settingsPath), [root, settingsPath]);
-    const fallback = getPath(namespace.value, settingsPath);
+    const root = useMemo(() => schema.rehydrate(namespace.schema), [namespace.schema, schema]);
+    const node = useMemo(() => schema.nodeAtPath(root, settingsPath), [root, schema, settingsPath]);
+    const fallback = schema.getPath(namespace.value, settingsPath);
     const disabled = props.readOnly || busy;
     const layout = layoutOf(namespace.ns);
-    const keyRef = refFor(namespace, settingsPath, props.provider);
+    const keyRef = refFor(schema, namespace, settingsPath, props.provider);
     // The same schema read the create card makes, so the choices offered here
     // and there cannot drift apart: both come from the adapter's own `Config`.
     // Only the pi-ai layout has a per-route protocol for the read to find, and
     // it rehydrates the whole section schema, so the other layouts skip it.
-    const protocols = useMemo(() => layout === 'pi-ai' ? protocolChoices(namespace) : [], [layout, namespace]);
+    const protocols = useMemo(() => layout === 'pi-ai' ? protocolChoices(namespace, schema) : [], [layout, namespace, schema]);
     useEffect(() => {
         let stale = false;
         setKeyState(undefined);
@@ -123,7 +122,7 @@ export function ProviderEditor(props) {
         return () => { stale = true; };
     }, [api.credentials, keyRef]);
     const stringAt = (source, key) => {
-        const value = getPath(source, [key]);
+        const value = schema.getPath(source, [key]);
         return typeof value === 'string' && value.trim().length > 0 ? value : undefined;
     };
     const setField = (key, next) => {
@@ -132,11 +131,13 @@ export function ProviderEditor(props) {
         // while the draft still carried the spaces into `settings.yaml`, where
         // both adapters would accept that non-empty string as a real value.
         const value = next === undefined || next.trim().length === 0 ? undefined : next;
-        setDraft(current => value === undefined ? deletePath(current, [key]) : setPath(current, [key], value));
+        setDraft(current => value === undefined
+            ? schema.deletePath(current, [key])
+            : schema.setPath(current, [key], value));
     };
     // The model list is validated by the same per-row checker for both families,
     // so a bad row is named by its position rather than by a blanket message.
-    const modelFailure = validateDeepSeekModels(getPath(draft, ['models']));
+    const modelFailure = validateDeepSeekModels(schema.getPath(draft, ['models']));
     const keyFailure = apiKeyFailure(keyDraft);
     // What a probe or a write must carry: the typed key with paste whitespace
     // removed. A blank field yields an empty string, which both call sites read
@@ -173,14 +174,14 @@ export function ProviderEditor(props) {
         // about to store a key. Otherwise the provider keeps its native auth path.
         const next = layout === 'pi-ai' && stringAt(draft, 'apiKeyEnv') === undefined
             && stringAt(fallback, 'apiKeyEnv') === undefined && keyValue.length > 0
-            ? setPath(draft, ['apiKeyEnv'], keyRef)
+            ? schema.setPath(draft, ['apiKeyEnv'], keyRef)
             : draft;
         if (props.credentialOnly !== true) {
             // The same checker gates the submit button, so a card cannot reach this
             // with a bad row; it stays because the schema check below would refuse
             // the write with a message naming a path instead of the row, and because
             // nothing but this function decides what is written.
-            const failure = validateDeepSeekModels(getPath(next, ['models']));
+            const failure = validateDeepSeekModels(schema.getPath(next, ['models']));
             /* v8 ignore next 3 -- unreachable from the card: the same failure disables submit */
             if (failure !== undefined) {
                 return `${t('model')} ${String(failure.index + 1)}: ${t(failure.key)}`;
@@ -188,7 +189,7 @@ export function ProviderEditor(props) {
         }
         /* v8 ignore next -- apply is only reachable from the rendered card, which required a resolved node */
         if (props.credentialOnly !== true && node !== undefined && settingsPath.length === 0) {
-            const sectionError = validateDraft(node, next);
+            const sectionError = schema.validate(node, next);
             if (sectionError !== undefined)
                 return sectionError;
         }
@@ -208,7 +209,7 @@ export function ProviderEditor(props) {
                     ? t('conflict')
                     : response.result.error.message;
             }
-            setCommittedOriginal(getPath(response.result.value.user, settingsPath));
+            setCommittedOriginal(schema.getPath(response.result.value.user, settingsPath));
             setExpectedRevision(response.result.value.revision);
             setDraft(next);
         }
@@ -255,8 +256,8 @@ export function ProviderEditor(props) {
      * moment reset drops it, leaving the rows unchanged until a reload.
      */
     const inheritedModels = () => {
-        const pinned = getPath(namespace.base, [...settingsPath, 'models']);
-        return pinned ?? nodeAtPath(root, [...settingsPath, 'models'])?.meta.default;
+        const pinned = schema.getPath(namespace.base, [...settingsPath, 'models']);
+        return pinned ?? schema.nodeAtPath(root, [...settingsPath, 'models'])?.meta.default;
     };
     /**
      * The curated fields of one known adapter family. The family arrives
@@ -268,11 +269,11 @@ export function ProviderEditor(props) {
         // A whole-section `llm-deepseek` profile is a composition fact with no
         // per-route identity for its schema to carry, hence the family test.
         const ownsIdentity = family === 'pi-ai' && props.declared === true;
-        const customModels = getPath(draft, ['models']);
-        const modelsOverridden = hasPath(draft, ['models']);
+        const customModels = schema.getPath(draft, ['models']);
+        const modelsOverridden = schema.hasPath(draft, ['models']);
         const models = modelDrafts(modelsOverridden ? customModels : inheritedModels());
-        const defaultContextWindow = getPath(fallback, ['defaultContextWindow']);
-        const defaultMaxTokens = getPath(fallback, ['maxTokens']);
+        const defaultContextWindow = schema.getPath(fallback, ['defaultContextWindow']);
+        const defaultMaxTokens = schema.getPath(fallback, ['maxTokens']);
         const keyPlaceholder = keyLocked
             ? t('keyEnvLocked')
             : keyState?.configured === true && props.credentialRequired !== true
@@ -285,9 +286,9 @@ export function ProviderEditor(props) {
             t,
             disabled,
             onChange: (next) => {
-                setDraft(current => setPath(current, ['models'], next));
+                setDraft(current => schema.setPath(current, ['models'], next));
             },
-            onReset: () => { setDraft(current => deletePath(current, ['models'])); },
+            onReset: () => { setDraft(current => schema.deletePath(current, ['models'])); },
         };
         return (_jsxs(_Fragment, { children: [_jsxs("div", { className: styles['field'], children: [_jsx("span", { className: styles['fieldLabel'], children: t('keyInput') }), _jsx("input", { className: styles['input'], type: "password", autoComplete: "off", value: keyDraft, placeholder: keyPlaceholder, "aria-label": t('keyInput'), "aria-invalid": shownKeyFailure !== undefined, required: props.credentialRequired === true, autoFocus: props.autoFocusCredential === true, disabled: disabled || keyLocked, onChange: (event) => { setKeyDraft(event.target.value); } }), shownKeyFailure === undefined ? null : _jsx("p", { className: styles['error'], children: t(shownKeyFailure) })] }), props.credentialOnly === true ? null : _jsxs("details", { className: styles['customized'], children: [_jsx("summary", { className: styles['customizedSummary'], children: t('customized') }), _jsxs("div", { className: styles['customizedBody'], children: [ownsIdentity
                                     ? (_jsxs("div", { className: styles['field'], children: [_jsx("span", { className: styles['fieldLabel'], children: t('customDisplayName') }), _jsx("input", { className: styles['input'], type: "text", value: stringAt(draft, 'displayName') ?? '', 
@@ -298,7 +299,7 @@ export function ProviderEditor(props) {
                                                 // the answer the route id. Reading the effective value
                                                 // instead would echo the stored override back as the
                                                 // thing clearing restores.
-                                                placeholder: stringAt(getPath(namespace.base, settingsPath), 'displayName')
+                                                placeholder: stringAt(schema.getPath(namespace.base, settingsPath), 'displayName')
                                                     ?? props.provider, "aria-label": t('customDisplayName'), disabled: disabled, onChange: (event) => { setField('displayName', event.target.value); } })] }))
                                     : null, _jsxs("div", { className: styles['field'], children: [_jsx("span", { className: styles['fieldLabel'], children: t('baseUrl') }), _jsx("input", { className: styles['input'], type: "text", value: stringAt(draft, 'baseURL') ?? '', placeholder: family === 'deepseek'
                                                 ? DEEPSEEK_PUBLIC_BASE_URL

package/dist/kernel/client-ui-settings-models/lib/types/client/index.js

@@ -1,9 +1,9 @@
-import { bindSnapshotSelector } from '../../../../client-web-react/lib/index.js';
 import { ModelsSection } from "./ModelsSection.js";
 import { DeepSeekOnboardingDialog } from "./DeepSeekOnboardingDialog.js";
 import { WelcomeNotice } from "./WelcomeNotice.js";
-import { refreshWelcomeIfLoaded, WelcomeNoticeStore } from "./welcome-store.js";
+import { decodeWelcomeSection, WelcomeNoticeStore } from "./welcome-store.js";
 import { ModelsSettingsStore } from "./store.js";
+import { createSettingsSchemaOperations } from "./schema-operations.js";
 import { en, zh } from "./locales.js";
 import { WELCOME_NOTICE_SETTINGS_NAMESPACE } from "../onboarding-copy.js";
 /** Dictionary namespace owned by this plugin. */
@@ -23,7 +23,7 @@ export function refreshIfLoaded(controller) {
  * ui-settings' apply, whose activation order relative to this one is NOT
  * constrained; registration depends on each slot through `slots.inject()`.
  */
-export const inject = ['slots', 'locale', 'connection', 'remote'];
+export const inject = ['slots', 'locale', 'connection', 'remote', 'settingsScope', 'settingsSchema'];
 /**
  * Register the Models section once the `settings.section` declaration is on
  * the ledger, wire its store to the connection, and keep it fresh on every
@@ -33,49 +33,54 @@ export const inject = ['slots', 'locale', 'connection', 'remote'];
 export function apply(ctx) {
     ctx.effect(() => ctx.locale.register(NS, { zh, en }), 'ui-settings-models: copy dictionaries');
     const connection = ctx.get('connection');
-    const controller = new ModelsSettingsStore(connection.api);
-    const useSnapshot = bindSnapshotSelector(controller.store);
+    const schema = createSettingsSchemaOperations(ctx.settingsSchema);
+    const controller = new ModelsSettingsStore(connection.api, schema, ctx.settingsScope.describe());
     // Registration-time text (the nav label thunk) and the inject faces share
     // one bound translate; copy freshness rides the locale revision.
     const t = ctx.locale.bind(NS);
     const injected = () => ({
         controller,
-        useSnapshot,
+        hooks: { snapshot: controller.store },
         api: connection.api,
+        schema,
         t,
     });
     const deepSeekOnboardingInjected = () => ({
         controller,
         hooks: { models: controller.store },
         api: connection.api,
+        schema,
         t,
     });
-    const welcomeController = new WelcomeNoticeStore(connection.api, connection.isLoopback ? 'host' : 'memory');
+    // The scope's own memory mode is what keeps a remote browser process-local,
+    // so the store needs no isLoopback branch of its own.
+    const welcomeController = new WelcomeNoticeStore(ctx.settingsScope.bind({
+        namespace: WELCOME_NOTICE_SETTINGS_NAMESPACE,
+        decode: decodeWelcomeSection,
+    }));
     const welcomeInjected = () => ({
         controller: welcomeController,
         hooks: { welcome: welcomeController.store },
         t,
     });
-    // Pushed invalidations converge every open surface without polling: any
-    // settings/credentials/topology change refetches once the page loaded.
+    // Pushed invalidations converge every open surface without polling. The
+    // settingsScope injection makes ui-settings activate first, and remote
+    // dispatch preserves listener order; its listener therefore starts the
+    // mirror refresh before this store joins that refresh. The welcome notice
+    // follows its settings scope, so it needs no subscription here.
     ctx.effect(() => {
         const refreshModels = () => { refreshIfLoaded(controller); };
-        const refreshAll = () => {
-            refreshModels();
-            refreshWelcomeIfLoaded(welcomeController);
-        };
         const disposers = [
-            ctx.remote.$on('settings/document-updated', (ns) => {
-                refreshModels();
-                if (ns === WELCOME_NOTICE_SETTINGS_NAMESPACE)
-                    refreshWelcomeIfLoaded(welcomeController);
-            }),
-            ctx.remote.$on('credentials/updated', refreshModels),
+            ctx.remote.$on('settings/document-updated', () => { refreshModels(); }),
+            ctx.remote.$on('credentials/reference-updated', refreshModels),
             ctx.remote.$on('llm/adapters-updated', refreshModels),
-            ctx.on('connection/reset', refreshAll),
+            ctx.on('connection/reset', refreshModels),
         ];
-        return () => { for (const dispose of disposers)
-            dispose(); };
+        return () => {
+            welcomeController.dispose();
+            for (const dispose of disposers)
+                dispose();
+        };
     }, 'ui-settings-models: pushed invalidations');
     ctx.slots.inject('settings.section', () => ctx.slots.register({
         name: 'settings.section',

package/dist/kernel/client-ui-settings-models/lib/types/client/locales.d.ts

@@ -69,6 +69,8 @@ export declare const en: {
     fetchEmpty: string;
     fetchTitle: string;
     fetchDescription: string;
+    fetchSelectAll: string;
+    fetchDeselectAll: string;
     fetchAdopt: string;
     customAdd: string;
     customTitle: string;

package/dist/kernel/client-ui-settings-models/lib/types/client/locales.js

@@ -70,6 +70,8 @@ export const en = {
     fetchEmpty: 'The provider listed no models. Add them by hand.',
     fetchTitle: 'Choose models to add',
     fetchDescription: 'These are the models this provider has available. Choose the ones to add.',
+    fetchSelectAll: 'Select all',
+    fetchDeselectAll: 'Deselect all',
     fetchAdopt: 'Add selected',
     customAdd: 'Add a custom provider',
     customTitle: 'Custom provider',
@@ -166,6 +168,8 @@ export const zh = {
     fetchEmpty: '该提供方没有列出任何模型，请手动添加。',
     fetchTitle: '选择要添加的模型',
     fetchDescription: '以下是模型提供方的可用模型，勾选要添加的模型。',
+    fetchSelectAll: '全选',
+    fetchDeselectAll: '取消全选',
     fetchAdopt: '添加所选',
     customAdd: '添加自定义提供方',
     customTitle: '自定义提供方',

package/dist/kernel/client-ui-settings-models/lib/types/client/schema-operations.d.ts

@@ -0,0 +1,10 @@
+import type { SettingsSchemaService } from '../../../../client-ui-settings/lib/client.js';
+/** Plain schema callbacks exposed to Models stores and presentation components. */
+export type SettingsSchemaOperations = Pick<SettingsSchemaService, 'rehydrate' | 'validate' | 'nodeAtPath' | 'getPath' | 'hasPath' | 'setPath' | 'deletePath'>;
+/**
+ * Hide the Cordis service identity behind bound schema callbacks.
+ * @param service - settings-owned schema service available in the apply context.
+ * @returns callbacks that cannot expose the service context to React components.
+ */
+export declare function createSettingsSchemaOperations(service: SettingsSchemaService): SettingsSchemaOperations;
+//# sourceMappingURL=schema-operations.d.ts.map

package/dist/kernel/client-ui-settings-models/lib/types/client/schema-operations.js

@@ -0,0 +1,17 @@
+/**
+ * Hide the Cordis service identity behind bound schema callbacks.
+ * @param service - settings-owned schema service available in the apply context.
+ * @returns callbacks that cannot expose the service context to React components.
+ */
+export function createSettingsSchemaOperations(service) {
+    return {
+        rehydrate: serialized => service.rehydrate(serialized),
+        validate: (schema, draft) => service.validate(schema, draft),
+        nodeAtPath: (root, path) => service.nodeAtPath(root, path),
+        getPath: (value, path) => service.getPath(value, path),
+        hasPath: (value, path) => service.hasPath(value, path),
+        setPath: (root, path, value) => service.setPath(root, path, value),
+        deletePath: (root, path) => service.deletePath(root, path),
+    };
+}
+//# sourceMappingURL=schema-operations.js.map

package/dist/kernel/client-ui-settings-models/lib/types/client/store.d.ts

@@ -1,12 +1,14 @@
 /**
  * Models settings page store: one snapshot joining the configurable-provider
- * directory (`llm.providers`), the settings namespaces (`settings.describe`),
+ * directory (`llm.providers`), the settings namespaces (shared settings mirror),
  * and the referenced credentials (`credentials.describe`). The host stays the
  * single fact source — every mutation writes through the wire and the page
  * re-renders from the next describe, pushed or refetched.
  */
 import type { ConfigurableProviderView, CredentialView, IApiClient, SettingsNamespaceView } from '../../../../api-remotes/lib/client.js';
 import type { SnapshotStore } from '../../../../client-runtime/lib/client.js';
+import type { SettingsDescribeFace } from '../../../../client-ui-settings/lib/client.js';
+import type { SettingsSchemaOperations } from './schema-operations.ts';
 /** One provider row the page renders. */
 export interface ProviderRow {
     /** The directory entry (route id, display name, settings address, live state). */
@@ -56,24 +58,30 @@ export declare function deriveKeyRef(provider: string): string;
  * the choices the page offers cannot drift from the ones the adapter accepts:
  * both come from the same `Config`.
  * @param namespace - the namespace view whose schema declares the profile shape.
+ * @param schema - settings schema operations.
  * @returns the protocol identifiers, or an empty list when the schema has none.
  */
-export declare function protocolChoices(namespace: SettingsNamespaceView | undefined): string[];
+export declare function protocolChoices(namespace: SettingsNamespaceView | undefined, schema: SettingsSchemaOperations): string[];
 /** The models settings page controller (one per settings surface). */
 export declare class ModelsSettingsStore {
     private readonly api;
+    private readonly schema;
+    private readonly describeFace;
     /** The snapshot the section renders from (uSES-safe store). */
     readonly store: SnapshotStore<ModelsSettingsState>;
     /** Latest load wins; an older response never overwrites a newer one. */
     private generation;
     /**
-     * @param api - the wire face (settings/credentials/llm domains).
+     * @param api - the wire face (credentials/llm domains, and settings writes).
+     * @param describeFace - the shared mirror's describe face (namespace views and writability).
      */
-    constructor(api: Pick<IApiClient, 'settings' | 'credentials' | 'llm'>);
+    constructor(api: Pick<IApiClient, 'settings' | 'credentials' | 'llm'>, schema: SettingsSchemaOperations, describeFace: SettingsDescribeFace);
     /**
-     * Refresh the whole page snapshot: directory and namespaces in parallel,
-     * then one batched credential describe over every referenced ref. A
-     * failure keeps the last good rows and surfaces the error.
+     * Refresh the whole page snapshot: the provider directory and the mirror's
+     * settings answer in parallel, then one batched credential describe over
+     * every referenced ref. Provider failure or absence of an initial settings
+     * answer keeps the last good rows and surfaces an error; a failed settings
+     * refresh reuses the mirror's held view.
      * @returns nothing; the snapshot carries the outcome.
      */
     load(): Promise<void>;