@prettier-ai/dsh-client-ui-settings-models 0.1.2-alpha.1 → 0.1.2-alpha.3

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/client/ui-settings-models/README.md
-README.md: 75efb18daf3e4a96fea637f36633f216046ebccd
-README.zh.md: f3c7099e242e379be5143352d4045208a8209dc6
+README.md: 920780b2193d6165a10967cc49afcb5b7e193105
+README.zh.md: 4ec9ae43eef9a13ffde22e2a3de0e44d3b6cb51d

package/README.md

@@ -63,7 +63,7 @@ A typed API key is judged on its own field: after trimming, it must be non-empty
 
 ### Concurrency and credentials
 
-Each settings write carries the card's current `revision`, so a concurrent write from another tab or an external `settings.yaml` edit is refused as `settings-conflict`. After settings commit, the card adopts the returned redacted user subtree and revision before storing the credential, so a failed credential stage retries only that stage. Deletion removes a configured, writable credential only when the profile names the page's derived `<ROUTE>_API_KEY` target, then unsets the profile; both operations are idempotent. Once loaded, the page subscribes to forwarded `settings/document-updated`, `credentials/reference-updated`, and `llm/adapters-updated` owner events, plus local `connection/reset`, so external edits converge without polling.
+Each settings write carries the card's current `revision`, so a concurrent write from another tab or an external `settings.yaml` edit is refused as `settings/conflict`. After settings commit, the card adopts the returned redacted user subtree and revision before storing the credential, so a failed credential stage retries only that stage. Deletion removes a configured, writable credential only when the profile names the page's derived `<ROUTE>_API_KEY` target, then unsets the profile; both operations are idempotent. Once loaded, the page subscribes to forwarded `settings/document-updated`, `credentials/reference-updated`, and `llm/adapters-updated` owner events, plus local `connection/reset`, so external edits converge without polling.
 
 ### Onboarding coordinator
 

package/README.zh.md

@@ -63,7 +63,7 @@ kind: "package-reference"
 
 ### 并发与凭据
 
-每次 settings 写入都携带卡片当前的 `revision`，因此来自另一个标签页或外部 `settings.yaml` 编辑的并发写入会以 `settings-conflict` 被拒绝。settings 提交后，卡片会在存储凭据前采纳返回的脱敏用户子树与 revision，因此失败的凭据阶段只重试该阶段。删除只会在 profile 指名本页派生的 `<ROUTE>_API_KEY` 目标时移除已配置且可写的凭据，然后 unset 该 profile；两个操作都幂等。加载完成后，页面订阅转发的 `settings/document-updated`、`credentials/reference-updated` 与 `llm/adapters-updated` 属主事件，以及本地 `connection/reset`，因此外部编辑无需轮询即可收敛。
+每次 settings 写入都携带卡片当前的 `revision`，因此来自另一个标签页或外部 `settings.yaml` 编辑的并发写入会以 `settings/conflict` 被拒绝。settings 提交后，卡片会在存储凭据前采纳返回的脱敏用户子树与 revision，因此失败的凭据阶段只重试该阶段。删除只会在 profile 指名本页派生的 `<ROUTE>_API_KEY` 目标时移除已配置且可写的凭据，然后 unset 该 profile；两个操作都幂等。加载完成后，页面订阅转发的 `settings/document-updated`、`credentials/reference-updated` 与 `llm/adapters-updated` 属主事件，以及本地 `connection/reset`，因此外部编辑无需轮询即可收敛。
 
 ### 引导协调器
 

package/lib/client.js

@@ -443,252 +443,6 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
-		//#region lib/types/client/store.js
-		/**
-		* Models settings page store: one snapshot joining the configurable-provider
-		* directory (`llm/listProviders` joined with `llm/listConfigurableProviders`),
-		* the settings namespaces (shared settings mirror),
-		* and the referenced credentials (`credentials/describe`). The host stays the
-		* single fact source — every mutation writes through the wire and the page
-		* re-renders from the next describe, pushed or refetched.
-		*/
-		/**
-		* Any route key walks a dict schema to the same profile node, so the lookup
-		* names one that cannot collide with a configured route.
-		*/
-		const PROBE_ROUTE = "\0probe";
-		/**
-		* Join declared configurable providers with the currently registered routes.
-		* @param registered - live provider routes in registration order.
-		* @param directory - declared configurable providers in declaration order.
-		* @returns declared rows followed by live routes with no declaration.
-		*/
-		function joinProviderDirectory(registered, directory) {
-			const active = new Set(registered.map((provider) => provider.id));
-			const declared = new Set(directory.map((entry) => entry.provider));
-			const rows = directory.map((entry) => ({
-				provider: entry.provider,
-				displayName: entry.displayName,
-				settingsNs: entry.settingsNs,
-				settingsPath: [...entry.settingsPath],
-				active: active.has(entry.provider),
-				...entry.declared === void 0 ? {} : { declared: entry.declared }
-			}));
-			for (const provider of registered) {
-				if (declared.has(provider.id)) continue;
-				rows.push({
-					provider: provider.id,
-					displayName: provider.name,
-					settingsNs: "",
-					settingsPath: [],
-					active: true
-				});
-			}
-			return rows;
-		}
-		/**
-		* Human text for a rejected wire call. A transport failure rejects with an
-		* Error; a host or a runtime can reject with anything, and the page still has
-		* to say something.
-		* @param error - the rejection value.
-		* @returns the message to show.
-		*/
-		function messageOf(error) {
-			return error instanceof Error ? error.message : String(error);
-		}
-		/**
-		* Derive the conventional credential reference for a provider route: the v1
-		* page never asks for an environment-variable name, so a typed key stores
-		* under this derived reference and the profile records it as `apiKeyEnv`.
-		* @param provider - provider route id (e.g. `anthropic`, `minimax-cn`).
-		* @returns the derived reference name (e.g. `MINIMAX_CN_API_KEY`).
-		*/
-		function deriveKeyRef(provider) {
-			return `${provider.toUpperCase().replace(/[^A-Z0-9]+/g, "_")}_API_KEY`;
-		}
-		/**
-		* The wire protocols a hand-declared route may name, read out of the owning
-		* namespace's own schema. This stays a schema read rather than a wire field so
-		* the choices the page offers cannot drift from the ones the adapter accepts:
-		* both come from the same `Config`.
-		* @param namespace - the namespace view whose schema declares the profile shape.
-		* @param schema - settings schema operations.
-		* @returns the protocol identifiers, or an empty list when the schema has none.
-		*/
-		function protocolChoices(namespace, schema) {
-			if (namespace === void 0) return [];
-			const list = schema.nodeAtPath(schema.rehydrate(namespace.schema), [
-				"providers",
-				PROBE_ROUTE,
-				"api"
-			]);
-			if (list?.type !== "union" || list.list === void 0) return [];
-			return list.list.map((entry) => entry.value).filter((value) => typeof value === "string");
-		}
-		/** The credential reference a resolved profile names (its `apiKeyEnv` field). */
-		function apiKeyEnvOf(namespace, path, schema) {
-			if (namespace === void 0) return void 0;
-			const profile = schema.getPath(namespace.value, path);
-			if (typeof profile !== "object" || profile === null) return void 0;
-			const ref = profile.apiKeyEnv;
-			return typeof ref === "string" && ref.length > 0 ? ref : void 0;
-		}
-		/** The models settings page controller (one per settings surface). */
-		var ModelsSettingsStore = class {
-			api;
-			schema;
-			describeFace;
-			/** The snapshot the section renders from (uSES-safe store). */
-			store = (0, _prettier_ai_dsh_client_store.createSnapshotStore)({
-				status: "idle",
-				error: null,
-				credentialError: null,
-				writable: false,
-				rows: [],
-				namespaces: /* @__PURE__ */ new Map()
-			});
-			/** Latest load wins; an older response never overwrites a newer one. */
-			generation = 0;
-			/**
-			* @param api - the page's credentials Remote and LLM wire faces.
-			* @param describeFace - the shared mirror's describe face (namespace views and writability).
-			*/
-			constructor(api, schema, describeFace) {
-				this.api = api;
-				this.schema = schema;
-				this.describeFace = describeFace;
-			}
-			/**
-			* Refresh the whole page snapshot: the provider directory and the mirror's
-			* settings answer in parallel, then one batched credential describe over
-			* every referenced ref. Provider failure or absence of an initial settings
-			* answer keeps the last good rows and surfaces an error; a failed settings
-			* refresh reuses the mirror's held view.
-			* @returns nothing; the snapshot carries the outcome.
-			*/
-			async load() {
-				const generation = ++this.generation;
-				this.store.update((s) => {
-					s.status = "loading";
-					s.error = null;
-				});
-				let providers;
-				let writable;
-				let views;
-				try {
-					const [registered, declared] = await Promise.all([
-						this.api.llm.listProviders(),
-						this.api.llm.listConfigurableProviders(),
-						this.describeFace.ensure()
-					]);
-					if (!registered.ok) throw new Error(registered.error.message);
-					if (!declared.ok) throw new Error(declared.error.message);
-					const mirrored = this.describeFace.getSnapshot();
-					if (mirrored.view === void 0) throw new Error(mirrored.error ?? "settings are unavailable in this browser");
-					providers = joinProviderDirectory(registered.value, declared.value);
-					writable = mirrored.view.writable;
-					views = mirrored.view.namespaces;
-				} catch (error) {
-					if (generation !== this.generation) return;
-					this.store.update((s) => {
-						s.status = "error";
-						s.error = error instanceof Error ? error.message : String(error);
-					});
-					return;
-				}
-				const namespaces = new Map(views.map((view) => [view.ns, view]));
-				const rows = providers.map((entry) => {
-					const namespace = namespaces.get(entry.settingsNs);
-					return {
-						entry,
-						configured: namespace !== void 0 && (entry.settingsPath.length === 0 || this.schema.getPath(namespace.value, entry.settingsPath) !== void 0),
-						removable: namespace !== void 0 && entry.settingsPath.length > 0 && this.schema.hasPath(namespace.user, entry.settingsPath) && !this.schema.hasPath(namespace.base, entry.settingsPath),
-						apiKeyEnv: apiKeyEnvOf(namespace, entry.settingsPath, this.schema),
-						credential: void 0
-					};
-				});
-				const refs = [...new Set(rows.map((row) => row.apiKeyEnv ?? deriveKeyRef(row.entry.provider)))];
-				let credentials = {};
-				let credentialError = null;
-				if (refs.length > 0) try {
-					const response = await this.api.credentials.describe(refs);
-					if (response.ok) credentials = response.value;
-					else credentialError = response.error.message;
-				} catch (error) {
-					credentialError = messageOf(error);
-				}
-				if (generation !== this.generation) return;
-				this.store.update((s) => {
-					s.status = "ready";
-					s.error = null;
-					s.credentialError = credentialError;
-					s.writable = writable;
-					s.rows = rows.map((row) => {
-						const named = row.apiKeyEnv === void 0 ? void 0 : credentials[row.apiKeyEnv];
-						const derived = row.apiKeyEnv !== void 0 ? void 0 : credentials[deriveKeyRef(row.entry.provider)];
-						return {
-							...row,
-							...named === void 0 ? {} : { credential: named },
-							...derived === void 0 ? {} : { derivedCredential: derived }
-						};
-					});
-					s.namespaces = namespaces;
-				});
-			}
-		};
-		/**
-		* Whether a joined row can serve model requests as it stands: the route is
-		* registered with the adapter registry, and whatever credential its resolved
-		* profile names is stored. A profile naming no reference authenticates through
-		* the provider's own path (the Bedrock chain, Vertex ADC, a gateway that needs
-		* nothing), as does a live route with no settings address at all, so neither
-		* owes this page a key.
-		* @param row - one joined provider row.
-		* @returns whether the user already has this provider to talk to.
-		*/
-		function providerUsable(row) {
-			if (!row.entry.active) return false;
-			if (row.apiKeyEnv === void 0) return true;
-			return row.credential?.configured === true;
-		}
-		/**
-		* Project first-run readiness from the provider/settings/credential join used
-		* by the Models page. The step exists to leave the user with a model to talk
-		* to, so ANY usable provider ends it; only when none exists does the official
-		* DeepSeek route — the one route the prompt can offer a key field for — decide
-		* whether prompting can help. A missing official configurable-provider
-		* declaration means the adapter is not repairable by navigating to Models.
-		* @param state - current shared Models join snapshot.
-		* @returns the onboarding state without reading a parallel fact source.
-		*/
-		function onboardingReadiness(state) {
-			if ((state.status === "idle" || state.status === "loading") && state.rows.length === 0) return { kind: "loading" };
-			if (state.status === "error") return {
-				kind: "unavailable",
-				reason: "load-failed"
-			};
-			if (state.rows.some(providerUsable)) return { kind: "provider-ready" };
-			const row = state.rows.find((candidate) => candidate.entry.provider === "deepseek-official" && candidate.entry.settingsNs === "llm-deepseek" && candidate.entry.settingsPath.length === 0);
-			if (row === void 0) return { kind: "adapter-absent" };
-			if (!row.entry.active) return {
-				kind: "unavailable",
-				reason: "provider-inactive"
-			};
-			if (state.credentialError !== null || row.credential === void 0) return {
-				kind: "unavailable",
-				reason: "credentials-unavailable"
-			};
-			if (!state.writable) return {
-				kind: "unavailable",
-				reason: "settings-read-only"
-			};
-			if (!row.credential.writable) return {
-				kind: "unavailable",
-				reason: "credential-read-only"
-			};
-			return { kind: "credential-missing" };
-		}
-		//#endregion
 		//#region lib/types/client/ModelListEditor.js
 		/**
 		* The model list of one pi-ai provider profile, plus the action that asks the
@@ -793,7 +547,7 @@ window.__ModuleLoader__.load({
 		* @returns the model-list editor.
 		*/
 		function ModelListEditor(props) {
-			const { models, onChange, probe, api, t, disabled } = props;
+			const { models, onChange, probe, operations, t, disabled } = props;
 			const [busy, setBusy] = (0, react.useState)(false);
 			const [failure, setFailure] = (0, react.useState)(void 0);
 			const [candidates, setCandidates] = (0, react.useState)(void 0);
@@ -839,17 +593,17 @@ window.__ModuleLoader__.load({
 				setBusy(true);
 				setFailure(void 0);
 				try {
-					const response = await api.llm.discoverModels(probe.settingsNs, {
+					const answer = await operations.discoverModels(probe.settingsNs, {
 						...probe.provider === void 0 ? {} : { provider: probe.provider },
 						...probe.baseURL === void 0 || probe.baseURL.length === 0 ? {} : { baseURL: probe.baseURL },
 						...probe.api === void 0 ? {} : { api: probe.api },
 						...probe.apiKey === void 0 ? {} : { apiKey: probe.apiKey }
 					});
-					if (!response.ok) {
-						setFailure(response.error.message);
+					if (answer.kind === "refused") {
+						setFailure(answer.message);
 						return;
 					}
-					const found = response.value;
+					const found = answer.models;
 					if (found.length === 0) {
 						setFailure(t("fetchEmpty"));
 						return;
@@ -857,8 +611,6 @@ window.__ModuleLoader__.load({
 					const known = new Set(models.map((model) => textOf(model, "id")));
 					setCandidates(found);
 					setPicked(new Set(found.filter((model) => !known.has(model.id)).map((model) => model.id)));
-				} catch (error) {
-					setFailure(messageOf(error));
 				} finally {
 					setBusy(false);
 				}
@@ -1090,6 +842,247 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region lib/types/client/store.js
+		/**
+		* Models settings page store: one snapshot joining the configurable-provider
+		* directory (`llm/listProviders` joined with `llm/listConfigurableProviders`),
+		* the settings namespaces (shared settings mirror),
+		* and the referenced credentials (`credentials/describe`). The host stays the
+		* single fact source — every mutation writes through the wire and the page
+		* re-renders from the next describe, pushed or refetched.
+		*/
+		/**
+		* Any route key walks a dict schema to the same profile node, so the lookup
+		* names one that cannot collide with a configured route.
+		*/
+		const PROBE_ROUTE = "\0probe";
+		/**
+		* Join declared configurable providers with the currently registered routes.
+		* @param registered - live provider routes in registration order.
+		* @param directory - declared configurable providers in declaration order.
+		* @returns declared rows followed by live routes with no declaration.
+		*/
+		function joinProviderDirectory(registered, directory) {
+			const active = new Set(registered.map((provider) => provider.id));
+			const declared = new Set(directory.map((entry) => entry.provider));
+			const rows = directory.map((entry) => ({
+				provider: entry.provider,
+				displayName: entry.displayName,
+				settingsNs: entry.settingsNs,
+				settingsPath: [...entry.settingsPath],
+				active: active.has(entry.provider),
+				...entry.declared === void 0 ? {} : { declared: entry.declared }
+			}));
+			for (const provider of registered) {
+				if (declared.has(provider.id)) continue;
+				rows.push({
+					provider: provider.id,
+					displayName: provider.name,
+					settingsNs: "",
+					settingsPath: [],
+					active: true
+				});
+			}
+			return rows;
+		}
+		/**
+		* Derive the conventional credential reference for a provider route: the v1
+		* page never asks for an environment-variable name, so a typed key stores
+		* under this derived reference and the profile records it as `apiKeyEnv`.
+		* @param provider - provider route id (e.g. `anthropic`, `minimax-cn`).
+		* @returns the derived reference name (e.g. `MINIMAX_CN_API_KEY`).
+		*/
+		function deriveKeyRef(provider) {
+			return `${provider.toUpperCase().replace(/[^A-Z0-9]+/g, "_")}_API_KEY`;
+		}
+		/**
+		* The wire protocols a hand-declared route may name, read out of the owning
+		* namespace's own schema. This stays a schema read rather than a wire field so
+		* the choices the page offers cannot drift from the ones the adapter accepts:
+		* both come from the same `Config`.
+		* @param namespace - the namespace view whose schema declares the profile shape.
+		* @param schema - settings schema operations.
+		* @returns the protocol identifiers, or an empty list when the schema has none.
+		*/
+		function protocolChoices(namespace, schema) {
+			if (namespace === void 0) return [];
+			const list = schema.nodeAtPath(schema.rehydrate(namespace.schema), [
+				"providers",
+				PROBE_ROUTE,
+				"api"
+			]);
+			if (list?.type !== "union" || list.list === void 0) return [];
+			return list.list.map((entry) => entry.value).filter((value) => typeof value === "string");
+		}
+		/** The credential reference a resolved profile names (its `apiKeyEnv` field). */
+		function apiKeyEnvOf(namespace, path, schema) {
+			if (namespace === void 0) return void 0;
+			const profile = schema.getPath(namespace.value, path);
+			if (typeof profile !== "object" || profile === null) return void 0;
+			const ref = profile.apiKeyEnv;
+			return typeof ref === "string" && ref.length > 0 ? ref : void 0;
+		}
+		/** The models settings page controller (one per settings surface). */
+		var ModelsSettingsStore = class {
+			ctx;
+			schema;
+			describeFace;
+			/** The snapshot the section renders from (uSES-safe store). */
+			store = (0, _prettier_ai_dsh_client_store.createSnapshotStore)({
+				status: "idle",
+				error: null,
+				credentialError: null,
+				writable: false,
+				rows: [],
+				namespaces: /* @__PURE__ */ new Map()
+			});
+			/** Latest load wins; an older response never overwrites a newer one. */
+			generation = 0;
+			/**
+			* @param ctx - the page plugin's context, whose `remote.llm` and
+			* `remote.credentials` namespaces carry the directory and credential reads.
+			* @param schema - settings-owned schema and immutable path operations.
+			* @param describeFace - the shared mirror's describe face (namespace views and writability).
+			*/
+			constructor(ctx, schema, describeFace) {
+				this.ctx = ctx;
+				this.schema = schema;
+				this.describeFace = describeFace;
+			}
+			/**
+			* Refresh the whole page snapshot: the provider directory and the mirror's
+			* settings answer in parallel, then one batched credential describe over
+			* every referenced ref. Provider failure or absence of an initial settings
+			* answer keeps the last good rows and surfaces an error; a failed settings
+			* refresh reuses the mirror's held view.
+			* @returns nothing; the snapshot carries the outcome.
+			*/
+			async load() {
+				const generation = ++this.generation;
+				this.store.update((s) => {
+					s.status = "loading";
+					s.error = null;
+				});
+				const [registered, declared] = await Promise.all([
+					this.ctx.remote.llm.listProviders(),
+					this.ctx.remote.llm.listConfigurableProviders(),
+					this.describeFace.ensure()
+				]);
+				if (!registered.ok) {
+					this.failLoad(generation, registered.error.message);
+					return;
+				}
+				if (!declared.ok) {
+					this.failLoad(generation, declared.error.message);
+					return;
+				}
+				const mirrored = this.describeFace.getSnapshot();
+				if (mirrored.view === void 0) {
+					this.failLoad(generation, mirrored.error ?? "settings are unavailable in this browser");
+					return;
+				}
+				const providers = joinProviderDirectory(registered.value, declared.value);
+				const writable = mirrored.view.writable;
+				const views = mirrored.view.namespaces;
+				const namespaces = new Map(views.map((view) => [view.ns, view]));
+				const rows = providers.map((entry) => {
+					const namespace = namespaces.get(entry.settingsNs);
+					return {
+						entry,
+						configured: namespace !== void 0 && (entry.settingsPath.length === 0 || this.schema.getPath(namespace.value, entry.settingsPath) !== void 0),
+						removable: namespace !== void 0 && entry.settingsPath.length > 0 && this.schema.hasPath(namespace.user, entry.settingsPath) && !this.schema.hasPath(namespace.base, entry.settingsPath),
+						apiKeyEnv: apiKeyEnvOf(namespace, entry.settingsPath, this.schema),
+						credential: void 0
+					};
+				});
+				const refs = [...new Set(rows.map((row) => row.apiKeyEnv ?? deriveKeyRef(row.entry.provider)))];
+				let credentials = {};
+				let credentialError = null;
+				if (refs.length > 0) {
+					const response = await this.ctx.remote.credentials.describe(refs);
+					if (response.ok) credentials = response.value;
+					else credentialError = response.error.message;
+				}
+				if (generation !== this.generation) return;
+				this.store.update((s) => {
+					s.status = "ready";
+					s.error = null;
+					s.credentialError = credentialError;
+					s.writable = writable;
+					s.rows = rows.map((row) => {
+						const named = row.apiKeyEnv === void 0 ? void 0 : credentials[row.apiKeyEnv];
+						const derived = row.apiKeyEnv !== void 0 ? void 0 : credentials[deriveKeyRef(row.entry.provider)];
+						return {
+							...row,
+							...named === void 0 ? {} : { credential: named },
+							...derived === void 0 ? {} : { derivedCredential: derived }
+						};
+					});
+					s.namespaces = namespaces;
+				});
+			}
+			/** Publish one load's failure text, unless a newer load already took over. */
+			failLoad(generation, message) {
+				if (generation !== this.generation) return;
+				this.store.update((s) => {
+					s.status = "error";
+					s.error = message;
+				});
+			}
+		};
+		/**
+		* Whether a joined row can serve model requests as it stands: the route is
+		* registered with the adapter registry, and whatever credential its resolved
+		* profile names is stored. A profile naming no reference authenticates through
+		* the provider's own path (the Bedrock chain, Vertex ADC, a gateway that needs
+		* nothing), as does a live route with no settings address at all, so neither
+		* owes this page a key.
+		* @param row - one joined provider row.
+		* @returns whether the user already has this provider to talk to.
+		*/
+		function providerUsable(row) {
+			if (!row.entry.active) return false;
+			if (row.apiKeyEnv === void 0) return true;
+			return row.credential?.configured === true;
+		}
+		/**
+		* Project first-run readiness from the provider/settings/credential join used
+		* by the Models page. The step exists to leave the user with a model to talk
+		* to, so ANY usable provider ends it; only when none exists does the official
+		* DeepSeek route — the one route the prompt can offer a key field for — decide
+		* whether prompting can help. A missing official configurable-provider
+		* declaration means the adapter is not repairable by navigating to Models.
+		* @param state - current shared Models join snapshot.
+		* @returns the onboarding state without reading a parallel fact source.
+		*/
+		function onboardingReadiness(state) {
+			if ((state.status === "idle" || state.status === "loading") && state.rows.length === 0) return { kind: "loading" };
+			if (state.status === "error") return {
+				kind: "unavailable",
+				reason: "load-failed"
+			};
+			if (state.rows.some(providerUsable)) return { kind: "provider-ready" };
+			const row = state.rows.find((candidate) => candidate.entry.provider === "deepseek-official" && candidate.entry.settingsNs === "llm-deepseek" && candidate.entry.settingsPath.length === 0);
+			if (row === void 0) return { kind: "adapter-absent" };
+			if (!row.entry.active) return {
+				kind: "unavailable",
+				reason: "provider-inactive"
+			};
+			if (state.credentialError !== null || row.credential === void 0) return {
+				kind: "unavailable",
+				reason: "credentials-unavailable"
+			};
+			if (!state.writable) return {
+				kind: "unavailable",
+				reason: "settings-read-only"
+			};
+			if (!row.credential.writable) return {
+				kind: "unavailable",
+				reason: "credential-read-only"
+			};
+			return { kind: "credential-missing" };
+		}
+		//#endregion
 		//#region lib/types/client/CustomProviderCard.js
 		/**
 		* The card that declares a provider pi-ai does not ship — an OpenAI-compatible
@@ -1130,7 +1123,7 @@ window.__ModuleLoader__.load({
 		* @returns the creation card.
 		*/
 		function CustomProviderCard(props) {
-			const { taken, protocols, api, t } = props;
+			const { taken, protocols, operations, t } = props;
 			const [openedAt] = (0, react.useState)(() => props.revision);
 			const [route, setRoute] = (0, react.useState)("");
 			const [displayName, setDisplayName] = (0, react.useState)("");
@@ -1168,17 +1161,17 @@ window.__ModuleLoader__.load({
 						baseURL,
 						models: models.map((model) => ({ ...model }))
 					};
-					const response = await api.settings.mutate(NS$1, [{
+					const written = await operations.writeSettings(NS$1, [{
 						op: "set",
 						path: ["providers", route],
 						value: profile
 					}], openedAt);
-					if (!response.ok) return response.error.message;
+					if (written.kind !== "written") return written.kind === "conflict" ? t("conflict") : written.message;
 					setCommitted(true);
 				}
 				if (storesKey) {
-					const stored = await api.credentials.set(keyRef, keyValue);
-					if (!stored.ok) return stored.error.message;
+					const stored = await operations.storeCredential(keyRef, keyValue);
+					if (stored !== void 0) return stored;
 				}
 			};
 			const create = async () => {
@@ -1191,8 +1184,6 @@ window.__ModuleLoader__.load({
 						return;
 					}
 					props.onClose(true);
-				} catch (error) {
-					setFailure(messageOf(error));
 				} finally {
 					setBusy(false);
 				}
@@ -1319,7 +1310,7 @@ window.__ModuleLoader__.load({
 							...keyValue.length === 0 ? {} : { apiKey: keyValue }
 						},
 						probeBlocked: keyFailure === "keyBlank" ? "keyBlankNew" : keyFailure,
-						api,
+						operations,
 						t,
 						disabled: profileDisabled
 					}),
@@ -1424,7 +1415,7 @@ window.__ModuleLoader__.load({
 		* @returns the editor card.
 		*/
 		function ProviderEditor(props) {
-			const { namespace, schema, settingsPath, api, t } = props;
+			const { namespace, schema, settingsPath, operations, t } = props;
 			const [draft, setDraft] = (0, react.useState)(() => draftAt(schema, namespace, settingsPath));
 			const [keyDraft, setKeyDraft] = (0, react.useState)("");
 			const [keyState, setKeyState] = (0, react.useState)(void 0);
@@ -1450,14 +1441,14 @@ window.__ModuleLoader__.load({
 			(0, react.useEffect)(() => {
 				let stale = false;
 				setKeyState(void 0);
-				api.credentials.describe([keyRef]).then((response) => {
-					if (stale || !response.ok) return;
-					setKeyState(response.value[keyRef]);
-				}, () => void 0);
+				operations.describeCredential(keyRef).then((described) => {
+					if (stale) return;
+					setKeyState(described);
+				});
 				return () => {
 					stale = true;
 				};
-			}, [api.credentials, keyRef]);
+			}, [operations, keyRef]);
 			const stringAt = (source, key) => {
 				const value = schema.getPath(source, [key]);
 				return typeof value === "string" && value.trim().length > 0 ? value : void 0;
@@ -1505,15 +1496,15 @@ window.__ModuleLoader__.load({
 					value: {}
 				}] : pathOps(settingsPath, committedOriginal, next);
 				if (ops.length > 0) {
-					const response = await api.settings.mutate(ns, ops, expectedRevision);
-					if (!response.ok) return response.error.code === "settings-conflict" ? t("conflict") : response.error.message;
-					setCommittedOriginal(schema.getPath(response.value.user, settingsPath));
-					setExpectedRevision(response.value.revision);
+					const written = await operations.writeSettings(ns, ops, expectedRevision);
+					if (written.kind !== "written") return written.kind === "conflict" ? t("conflict") : written.message;
+					setCommittedOriginal(schema.getPath(written.view.user, settingsPath));
+					setExpectedRevision(written.view.revision);
 					setDraft(next);
 				}
 				if (keyValue.length > 0) {
-					const stored = await api.credentials.set(keyRef, keyValue);
-					if (!stored.ok) return stored.error.message;
+					const stored = await operations.storeCredential(keyRef, keyValue);
+					if (stored !== void 0) return stored;
 				}
 				setKeyDraft("");
 			};
@@ -1527,8 +1518,6 @@ window.__ModuleLoader__.load({
 						return;
 					}
 					props.onClose(true);
-				} catch (error) {
-					setFailure(messageOf(error));
 				} finally {
 					setBusy(false);
 				}
@@ -1677,7 +1666,7 @@ window.__ModuleLoader__.load({
 								...catalogProps,
 								probe,
 								probeBlocked: keyFailure,
-								api
+								operations
 							})
 						]
 					})]
@@ -1756,25 +1745,21 @@ window.__ModuleLoader__.load({
 		* and the whole operation safely retryable; both unsets are idempotent.
 		* The settings removal names the profile rather than rebuilding its whole
 		* namespace from a partial view.
-		* @param api - settings and credential wire faces.
+		* @param operations - the page's Host operations.
 		* @param controller - the page store to refresh.
 		* @param target - the provider's settings address and optional managed credential.
 		* @returns the failure message, or undefined once the write and reload landed.
 		*/
-		async function removeProviderProfile(api, controller, target) {
-			try {
-				if (target.credentialRef !== void 0) {
-					const credential = await api.credentials.unset(target.credentialRef);
-					if (!credential.ok) return credential.error.message;
-				}
-				const response = await api.settings.mutate(target.settingsNs, [{
-					op: "unset",
-					path: [...target.settingsPath]
-				}], void 0);
-				if (!response.ok) return response.error.message;
-			} catch (error) {
-				return messageOf(error);
+		async function removeProviderProfile(operations, controller, target) {
+			if (target.credentialRef !== void 0) {
+				const credential = await operations.removeCredential(target.credentialRef);
+				if (credential !== void 0) return credential;
 			}
+			const written = await operations.writeSettings(target.settingsNs, [{
+				op: "unset",
+				path: [...target.settingsPath]
+			}], void 0);
+			if (written.kind !== "written") return written.message;
 			await controller.load();
 		}
 		/**
@@ -1827,13 +1812,13 @@ window.__ModuleLoader__.load({
 		* @returns the section, or null while the shell has not injected yet.
 		*/
 		function ModelsSection(props) {
-			const { controller, useSnapshot, api, schema, t, renderSlot } = props;
-			if (controller === void 0 || useSnapshot === void 0 || api === void 0 || schema === void 0 || t === void 0) return null;
+			const { controller, useSnapshot, operations, schema, t, renderSlot } = props;
+			if (controller === void 0 || useSnapshot === void 0 || operations === void 0 || schema === void 0 || t === void 0) return null;
 			return (0, react_jsx_runtime.jsx)(Loaded, {
 				injected: {
 					controller,
 					useSnapshot,
-					api,
+					operations,
 					schema,
 					t
 				},
@@ -1841,7 +1826,7 @@ window.__ModuleLoader__.load({
 			});
 		}
 		function Loaded({ injected, renderSlot }) {
-			const { controller, api, schema, t } = injected;
+			const { controller, operations, schema, t } = injected;
 			const state = injected.useSnapshot((snapshot) => snapshot);
 			const [editing, setEditing] = (0, react.useState)(void 0);
 			const [adding, setAdding] = (0, react.useState)(false);
@@ -1883,7 +1868,7 @@ window.__ModuleLoader__.load({
 				if (deleteTarget === void 0 || deleting) return;
 				setDeleting(true);
 				setDeleteFailure(void 0);
-				removeProviderProfile(api, controller, deleteTarget).then((failure) => {
+				removeProviderProfile(operations, controller, deleteTarget).then((failure) => {
 					if (failure !== void 0) {
 						setDeleteFailure(failure);
 						return;
@@ -1958,7 +1943,7 @@ window.__ModuleLoader__.load({
 									target,
 									namespace,
 									schema,
-									api,
+									operations,
 									t,
 									readOnly: !state.writable,
 									onClose: (changed) => {
@@ -2037,7 +2022,7 @@ window.__ModuleLoader__.load({
 										target,
 										namespace,
 										schema,
-										api,
+										operations,
 										t,
 										readOnly: !state.writable,
 										onClose: (changed) => {
@@ -2081,7 +2066,7 @@ window.__ModuleLoader__.load({
 									namespace: addNamespace,
 									schema,
 									settingsPath: addTarget.settingsPath,
-									api,
+									operations,
 									t,
 									readOnly: !state.writable,
 									onClose: (changed) => {
@@ -2101,7 +2086,7 @@ window.__ModuleLoader__.load({
 								protocols,
 								/* v8 ignore next -- the card only opens from a button disabled without this namespace */
 								revision: state.namespaces.get("llm-pi-ai")?.revision ?? 0,
-								api,
+								operations,
 								t,
 								readOnly: !state.writable,
 								onClose: (changed) => {
@@ -2265,7 +2250,7 @@ window.__ModuleLoader__.load({
 		* @returns the onboarding modal or null when onboarding needs no intervention.
 		*/
 		function DeepSeekOnboardingDialog(props) {
-			const { complete, controller, useModels, api, schema, t } = props;
+			const { complete, controller, useModels, operations, schema, t } = props;
 			const state = useModels((snapshot) => snapshot);
 			const readiness = onboardingReadiness(state);
 			(0, react.useEffect)(() => {
@@ -2307,7 +2292,7 @@ window.__ModuleLoader__.load({
 						namespace,
 						schema,
 						settingsPath: row.entry.settingsPath,
-						api,
+						operations,
 						t,
 						readOnly: false,
 						hideTitle: true,
@@ -2533,6 +2518,61 @@ window.__ModuleLoader__.load({
 			}
 		};
 		//#endregion
+		//#region lib/types/client/operations.js
+		/**
+		* The Host reads and writes the Models cards perform, as callbacks built in the
+		* plugin body. Cards receive these instead of a context: the outcomes name what
+		* a card renders — a stored view, a stale revision, a refusal message — so the
+		* failure codes and Remote namespaces stay in the apply world.
+		*/
+		/**
+		* Bind the page's Host operations to the plugin's own Remote namespaces.
+		* @param ctx - the page plugin's context, which declares `remote.credentials`,
+		* `remote.llm`, and `remote.settings` in its own `inject`.
+		* @returns the callbacks the section and its cards are injected with.
+		*/
+		function createModelsOperations(ctx) {
+			return {
+				describeCredential: async (ref) => {
+					const response = await ctx.remote.credentials.describe([ref]);
+					return response.ok ? response.value[ref] : void 0;
+				},
+				storeCredential: async (ref, value) => {
+					const response = await ctx.remote.credentials.set(ref, value);
+					return response.ok ? void 0 : response.error.message;
+				},
+				removeCredential: async (ref) => {
+					const response = await ctx.remote.credentials.unset(ref);
+					return response.ok ? void 0 : response.error.message;
+				},
+				writeSettings: async (ns, ops, expectedRevision) => {
+					const response = await ctx.remote.settings.mutate(ns, ops, expectedRevision);
+					if (response.ok) return {
+						kind: "written",
+						view: response.value
+					};
+					const { code, message } = response.error;
+					return code === "settings/conflict" ? {
+						kind: "conflict",
+						message
+					} : {
+						kind: "refused",
+						message
+					};
+				},
+				discoverModels: async (settingsNs, request) => {
+					const response = await ctx.remote.llm.discoverModels(settingsNs, request);
+					return response.ok ? {
+						kind: "found",
+						models: response.value
+					} : {
+						kind: "refused",
+						message: response.error.message
+					};
+				}
+			};
+		}
+		//#endregion
 		//#region lib/types/client/schema-operations.js
 		/**
 		* Hide the Cordis service identity behind bound schema callbacks.
@@ -2793,24 +2833,20 @@ window.__ModuleLoader__.load({
 				en
 			}), "ui-settings-models: copy dictionaries");
 			const schema = createSettingsSchemaOperations(ctx.settingsSchema);
-			const wire = {
-				credentials: ctx.remote.credentials,
-				llm: ctx.remote.llm,
-				settings: ctx.remote.settings
-			};
-			const controller = new ModelsSettingsStore(wire, schema, ctx.settingsScope.describe());
+			const operations = createModelsOperations(ctx);
+			const controller = new ModelsSettingsStore(ctx, schema, ctx.settingsScope.describe());
 			const t = ctx.locale.bind(NS);
 			const injected = () => ({
 				controller,
 				hooks: { snapshot: controller.store },
-				api: wire,
+				operations,
 				schema,
 				t
 			});
 			const deepSeekOnboardingInjected = () => ({
 				controller,
 				hooks: { models: controller.store },
-				api: wire,
+				operations,
 				schema,
 				t
 			});

package/lib/types/client/CustomProviderCard.d.ts

@@ -21,7 +21,7 @@
  * levels instead.
  */
 import type { ReactNode } from 'react';
-import type { ModelsWire } from './store.ts';
+import type { ModelsOperations } from './operations.ts';
 import type { en } from './locales.ts';
 /** Props of {@link CustomProviderCard}. */
 export interface CustomProviderCardProps {
@@ -35,8 +35,8 @@ export interface CustomProviderCardProps {
      * than a silent overwrite of its whole profile.
      */
     revision: number;
-    /** Wire faces for the write and for interrogating the endpoint. */
-    api: ModelsWire;
+    /** The Host operations this card writes and interrogates through. */
+    operations: ModelsOperations;
     /** Section copy. */
     t: (key: keyof typeof en) => string;
     /** Disable writes (read-only settings provider). */

package/lib/types/client/DeepSeekOnboardingDialog.d.ts

@@ -8,7 +8,8 @@
 import type { ReactNode } from 'react';
 import type { SnapshotStore } from '@prettier-ai/dsh-client-store';
 import type { InjectFace, PropsRuntime } from '@prettier-ai/dsh-client-ui-slots';
-import type { ModelsSettingsState, ModelsSettingsStore, ModelsWire } from './store.ts';
+import type { ModelsSettingsState, ModelsSettingsStore } from './store.ts';
+import type { ModelsOperations } from './operations.ts';
 import type { SettingsSchemaOperations } from './schema-operations.ts';
 import type { en } from './locales.ts';
 /** Registration-side dependencies of {@link DeepSeekOnboardingDialog}. */
@@ -19,8 +20,8 @@ export interface DeepSeekOnboardingInjected {
     };
     /** Shared Models-page join controller. */
     controller: ModelsSettingsStore;
-    /** Existing wire face reused by the Models credential editor. */
-    api: ModelsWire;
+    /** The Host operations the reused Models credential editor writes through. */
+    operations: ModelsOperations;
     /** Settings schema and immutable path callbacks. */
     schema: SettingsSchemaOperations;
     /** Feature copy. */

package/lib/types/client/ModelListEditor.d.ts

@@ -14,8 +14,8 @@
  * rows the user can still fill in by hand.
  */
 import type { ReactNode } from 'react';
+import type { ModelsOperations } from './operations.ts';
 import type { DeepSeekModelDraft } from './DeepSeekModelsEditor.tsx';
-import { type ModelsWire } from './store.ts';
 import type { en } from './locales.ts';
 /**
  * One configured model row. Fields this card does not edit must survive an
@@ -58,8 +58,8 @@ export interface ModelListEditorProps {
      * told what the field already says.
      */
     probeBlocked?: keyof typeof en | undefined;
-    /** Wire face the fetch action calls. */
-    api: Pick<ModelsWire, 'llm'>;
+    /** The Host operations whose interrogation answers the fetch action. */
+    operations: ModelsOperations;
     /** Section copy. */
     t: (key: keyof typeof en) => string;
     /** Disable every control (read-only deployment or a pending write). */

package/lib/types/client/ModelsSection.d.ts

@@ -13,7 +13,8 @@
  */
 import type { ReactNode } from 'react';
 import type { InjectFace, PropsRenderSlots } from '@prettier-ai/dsh-client-ui-slots';
-import type { ModelsSettingsStore, ModelsWire, ProviderRow } from './store.ts';
+import type { ModelsSettingsStore, ProviderRow } from './store.ts';
+import type { ModelsOperations } from './operations.ts';
 import type { SettingsSchemaOperations } from './schema-operations.ts';
 import type { en } from './locales.ts';
 /** Injected dependencies of {@link ModelsSection} (slot `inject`). */
@@ -24,8 +25,8 @@ export interface ModelsSectionInjected {
         /** Page snapshot bound by the UI renderer as useSnapshot. */
         snapshot: ModelsSettingsStore['store'];
     };
-    /** Wire faces the editor writes through. */
-    api: ModelsWire;
+    /** The Host operations the section and its cards invoke. */
+    operations: ModelsOperations;
     /** Settings schema and immutable path callbacks. */
     schema: SettingsSchemaOperations;
     /** Section copy. */
@@ -54,12 +55,12 @@ export interface ProviderIdentity {
  * and the whole operation safely retryable; both unsets are idempotent.
  * The settings removal names the profile rather than rebuilding its whole
  * namespace from a partial view.
- * @param api - settings and credential wire faces.
+ * @param operations - the page's Host operations.
  * @param controller - the page store to refresh.
  * @param target - the provider's settings address and optional managed credential.
  * @returns the failure message, or undefined once the write and reload landed.
  */
-export declare function removeProviderProfile(api: Pick<ModelsWire, 'settings' | 'credentials'>, controller: ModelsSettingsStore, target: {
+export declare function removeProviderProfile(operations: ModelsOperations, controller: ModelsSettingsStore, target: {
     settingsNs: string;
     settingsPath: readonly string[];
     credentialRef?: string;

package/lib/types/client/ProviderEditor.d.ts

@@ -22,7 +22,7 @@
  */
 import type { ReactNode } from 'react';
 import type { SettingsNamespaceView, SettingsPathOpView } from '@prettier-ai/dsh-api-remotes/client';
-import type { ModelsWire } from './store.ts';
+import type { ModelsOperations } from './operations.ts';
 import type { SettingsSchemaOperations } from './schema-operations.ts';
 import type { en } from './locales.ts';
 /** Props of {@link ProviderEditor}. */
@@ -47,8 +47,8 @@ export interface ProviderEditorProps {
     schema: SettingsSchemaOperations;
     /** Path from the section root to this provider's profile. */
     settingsPath: readonly string[];
-    /** Wire faces for writes and for interrogating a provider endpoint. */
-    api: ModelsWire;
+    /** The Host operations this card writes and interrogates through. */
+    operations: ModelsOperations;
     /** Section copy. */
     t: (key: keyof typeof en) => string;
     /** Disable writes (read-only settings provider). */

package/lib/types/client/index.d.ts

@@ -18,7 +18,8 @@ declare module '@prettier-ai/dsh-client-ui-slots' {
         'settings.models': ModelsKey;
     }
 }
-export type { ModelsCredentials, ModelsLlm, ModelsSettingsState, ModelsWire, ProviderDirectoryEntry, ProviderRow, } from './store.ts';
+export type { ModelsSettingsState, ProviderDirectoryEntry, ProviderRow, } from './store.ts';
+export type { ModelDiscoveryOutcome, ModelsOperations, SettingsWriteOutcome } from './operations.ts';
 /**
  * Refetch the page snapshot only after its first load: an unopened Models
  * page must not fetch on background invalidations.

package/lib/types/client/operations.d.ts

@@ -0,0 +1,86 @@
+/**
+ * The Host reads and writes the Models cards perform, as callbacks built in the
+ * plugin body. Cards receive these instead of a context: the outcomes name what
+ * a card renders — a stored view, a stale revision, a refusal message — so the
+ * failure codes and Remote namespaces stay in the apply world.
+ */
+import type { Context as ClientContext } from '@prettier-ai/cordis';
+import type { CredentialInfo, LlmDiscoveredModel, LlmModelDiscoveryRequest, SettingsNamespaceView, SettingsPathOpView } from '@prettier-ai/dsh-api-remotes/client';
+/** What one namespace write answered. */
+export type SettingsWriteOutcome = 
+/** Committed; the view carries the stored user subtree and the new revision. */
+{
+    readonly kind: 'written';
+    readonly view: SettingsNamespaceView;
+}
+/**
+ * The stored revision moved after the card read it, so the draft is stale.
+ * The message stays for callers that report the Host diagnostic as it is.
+ */
+ | {
+    readonly kind: 'conflict';
+    readonly message: string;
+}
+/** Any other refusal, with the Host's own diagnostic. */
+ | {
+    readonly kind: 'refused';
+    readonly message: string;
+};
+/** What one endpoint interrogation answered. */
+export type ModelDiscoveryOutcome = 
+/** The candidates the provider disclosed, in its own order. */
+{
+    readonly kind: 'found';
+    readonly models: readonly LlmDiscoveredModel[];
+}
+/** The interrogation was refused, with the Host's own diagnostic. */
+ | {
+    readonly kind: 'refused';
+    readonly message: string;
+};
+/** The Host operations the Models page and its cards invoke. */
+export interface ModelsOperations {
+    /**
+     * Read one credential reference's state.
+     * @param ref - credential reference name.
+     * @returns the state, or undefined when the reference is unknown or the read was refused.
+     */
+    describeCredential(ref: string): Promise<CredentialInfo | undefined>;
+    /**
+     * Store one credential literal under its reference.
+     * @param ref - credential reference name.
+     * @param value - the literal to store.
+     * @returns the refusal message, or undefined once stored.
+     */
+    storeCredential(ref: string, value: string): Promise<string | undefined>;
+    /**
+     * Remove one credential reference (idempotent).
+     * @param ref - credential reference name.
+     * @returns the refusal message, or undefined once removed.
+     */
+    removeCredential(ref: string): Promise<string | undefined>;
+    /**
+     * Apply path operations to one settings namespace.
+     * @param ns - settings namespace identity.
+     * @param ops - ordered path operations against the stored section, as the
+     * wire takes them (the Remote signature owns the array).
+     * @param expectedRevision - revision the draft was opened at, or undefined to write unfenced.
+     * @returns the write outcome the card renders from.
+     */
+    writeSettings(ns: string, ops: SettingsPathOpView[], expectedRevision: number | undefined): Promise<SettingsWriteOutcome>;
+    /**
+     * Ask a provider endpoint what models it serves.
+     * @param settingsNs - namespace whose adapter family answers.
+     * @param request - endpoint facts as the form currently shows them.
+     * @returns the candidates, or the refusal.
+     */
+    discoverModels(settingsNs: string, request: LlmModelDiscoveryRequest): Promise<ModelDiscoveryOutcome>;
+}
+/**
+ * Bind the page's Host operations to the plugin's own Remote namespaces.
+ * @param ctx - the page plugin's context, which declares `remote.credentials`,
+ * `remote.llm`, and `remote.settings` in its own `inject`.
+ * @returns the callbacks the section and its cards are injected with.
+ */
+export declare function createModelsOperations(ctx: ClientContext): ModelsOperations;
+//# sourceMappingURL=operations.d.ts.map

package/lib/types/client/store.d.ts

@@ -6,14 +6,11 @@
  * single fact source — every mutation writes through the wire and the page
  * re-renders from the next describe, pushed or refetched.
  */
-import type { ClientRemote, CredentialInfo, LlmConfigurableProvider, LlmProviderInfo, SettingsNamespaceView } from '@prettier-ai/dsh-api-remotes/client';
+import type { Context as ClientContext } from '@prettier-ai/cordis';
+import type { CredentialInfo, LlmConfigurableProvider, LlmProviderInfo, SettingsNamespaceView } from '@prettier-ai/dsh-api-remotes/client';
 import type { SnapshotStore } from '@prettier-ai/dsh-client-store';
-import type { SettingsDescribeFace, SettingsRemote } from '@prettier-ai/dsh-client-ui-settings/client';
+import type { SettingsDescribeFace } from '@prettier-ai/dsh-client-ui-settings/client';
 import type { SettingsSchemaOperations } from './schema-operations.ts';
-/** The credentials Remote methods the Models page reads and writes through. */
-export type ModelsCredentials = Pick<ClientRemote['credentials'], 'describe' | 'set' | 'unset'>;
-/** LLM Remote methods used by the Models page. */
-export type ModelsLlm = Pick<ClientRemote['llm'], 'discoverModels' | 'listConfigurableProviders' | 'listProviders'>;
 /** One provider row after joining the configurable directory with live routes. */
 export interface ProviderDirectoryEntry {
     readonly provider: string;
@@ -30,17 +27,6 @@ export interface ProviderDirectoryEntry {
  * @returns declared rows followed by live routes with no declaration.
  */
 export declare function joinProviderDirectory(registered: readonly LlmProviderInfo[], directory: readonly LlmConfigurableProvider[]): ProviderDirectoryEntry[];
-/**
- * Every Remote wire face the Models page reaches.
- */
-export interface ModelsWire {
-    /** The settings Remote namespace: the redacted read and the profile writes. */
-    settings: SettingsRemote;
-    /** Credential state and writes for the references provider profiles name. */
-    credentials: ModelsCredentials;
-    /** Provider directory reads and draft endpoint discovery. */
-    llm: ModelsLlm;
-}
 /** One provider row the page renders. */
 export interface ProviderRow {
     /** The directory entry (route id, display name, settings address, live state). */
@@ -75,14 +61,6 @@ export interface ModelsSettingsState {
     /** Namespace views by ns, for the editor's schema/layers/secrets. */
     namespaces: ReadonlyMap<string, SettingsNamespaceView>;
 }
-/**
- * Human text for a rejected wire call. A transport failure rejects with an
- * Error; a host or a runtime can reject with anything, and the page still has
- * to say something.
- * @param error - the rejection value.
- * @returns the message to show.
- */
-export declare function messageOf(error: unknown): string;
 /**
  * Derive the conventional credential reference for a provider route: the v1
  * page never asks for an environment-variable name, so a typed key stores
@@ -103,7 +81,7 @@ export declare function deriveKeyRef(provider: string): string;
 export declare function protocolChoices(namespace: SettingsNamespaceView | undefined, schema: SettingsSchemaOperations): string[];
 /** The models settings page controller (one per settings surface). */
 export declare class ModelsSettingsStore {
-    private readonly api;
+    private readonly ctx;
     private readonly schema;
     private readonly describeFace;
     /** The snapshot the section renders from (uSES-safe store). */
@@ -111,10 +89,12 @@ export declare class ModelsSettingsStore {
     /** Latest load wins; an older response never overwrites a newer one. */
     private generation;
     /**
-     * @param api - the page's credentials Remote and LLM wire faces.
+     * @param ctx - the page plugin's context, whose `remote.llm` and
+     * `remote.credentials` namespaces carry the directory and credential reads.
+     * @param schema - settings-owned schema and immutable path operations.
      * @param describeFace - the shared mirror's describe face (namespace views and writability).
      */
-    constructor(api: Pick<ModelsWire, 'credentials' | 'llm'>, schema: SettingsSchemaOperations, describeFace: SettingsDescribeFace);
+    constructor(ctx: ClientContext, schema: SettingsSchemaOperations, describeFace: SettingsDescribeFace);
     /**
      * Refresh the whole page snapshot: the provider directory and the mirror's
      * settings answer in parallel, then one batched credential describe over
@@ -124,6 +104,8 @@ export declare class ModelsSettingsStore {
      * @returns nothing; the snapshot carries the outcome.
      */
     load(): Promise<void>;
+    /** Publish one load's failure text, unless a newer load already took over. */
+    private failLoad;
 }
 /**
  * Whether a joined row can serve model requests as it stands: the route is

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@prettier-ai/dsh-client-ui-settings-models",
   "description": "Models settings and shared product-onboarding dialogs over existing settings and credential joins",
-  "version": "0.1.2-alpha.1",
+  "version": "0.1.2-alpha.3",
   "publishConfig": {
     "access": "public"
   },
@@ -41,26 +41,22 @@
   },
   "license": "MIT",
   "peerDependencies": {
-    "@prettier-ai/dsh-api-remotes": "^0.1.2-alpha.1",
-    "@prettier-ai/cordis": "^4.0.1",
-    "@prettier-ai/dsh-client-locale": "^0.1.2-alpha.1",
-    "@prettier-ai/dsh-client-ui-settings": "^0.1.2-alpha.1",
-    "@prettier-ai/dsh-client-ui-renderer": "^0.1.2-alpha.1",
-    "@prettier-ai/dsh-invariants": "^0.1.2-alpha.1"
+    "@prettier-ai/cordis": "^4.0.2"
   },
   "devDependencies": {
     "@types/react": "~18.3.1",
     "react": "^18.2.0",
-    "@prettier-ai/dsh-api-remotes": "^0.1.2-alpha.1",
-    "@prettier-ai/dsh-client-store": "^0.1.2-alpha.1",
-    "@prettier-ai/dsh-client-locale": "^0.1.2-alpha.1",
-    "@prettier-ai/dsh-client-test-runtime": "^0.1.2-alpha.1",
-    "@prettier-ai/dsh-client-ui-settings": "^0.1.2-alpha.1",
-    "@prettier-ai/dsh-client-ui-primitives": "^0.1.2-alpha.1",
-    "@prettier-ai/dsh-client-ui-slots": "^0.1.2-alpha.1",
-    "@prettier-ai/dsh-invariants": "^0.1.2-alpha.1",
-    "@prettier-ai/cordis": "^4.0.1",
-    "@prettier-ai/dsh-client-ui-renderer": "^0.1.2-alpha.1"
+    "@prettier-ai/dsh-api-remotes": "^0.1.2-alpha.3",
+    "@prettier-ai/dsh-client-locale": "^0.1.2-alpha.3",
+    "@prettier-ai/dsh-client-ui-settings": "^0.1.2-alpha.3",
+    "@prettier-ai/dsh-client-test-runtime": "^0.1.2-alpha.3",
+    "@prettier-ai/dsh-client-ui-slots": "^0.1.2-alpha.3",
+    "@prettier-ai/dsh-client-store": "^0.1.2-alpha.3",
+    "@prettier-ai/dsh-client-ui-primitives": "^0.1.2-alpha.3",
+    "@prettier-ai/dsh-invariants": "^0.1.2-alpha.3",
+    "@prettier-ai/cordis": "^4.0.2",
+    "@prettier-ai/dsh-client-ui-renderer": "^0.1.2-alpha.3",
+    "@prettier-ai/dsh-util-values": "^0.1.2-alpha.3"
   },
   "files": [
     "lib/index.js",