@ran-sh/dsh-crew 0.5.6 → 1.0.0

package/src/client/index.tsx

@@ -52,7 +52,7 @@ const COPY = {
     expandAll: '全部展开', collapseAll: '全部折叠',
     modelCount: (count: number) => `${count} 个模型`, providerCount: (count: number) => `${count} 个 Provider`,
     jobCount: (count: number) => `${count} 个任务`, runningCount: (count: number) => `${count} 个运行中`,
-    sectionNames: { integrations: 'Codex / Claude / ZCode 集成状态', workflow: 'Crew 工作流设置', flash: 'Worker / Flash', pro: 'Reviewer / Pro', dispatch: '模型优先级与派发', adaptive: '自适应路由', runtime: '运行 / 生效边界', multimodal: '视觉与生图', providers: '自定义 Provider', jobs: '任务状态' },
+    sectionNames: { integrations: 'Codex / Claude / ZCode 集成状态', workflow: 'Crew 工作流设置', flash: 'Worker / Flash', pro: 'Reviewer / Pro', dispatch: '模型优先级与派发', adaptive: '自适应路由', runtime: '运行 / 生效边界', multimodal: '视觉与生图', harnessProviders: 'Harness Providers', providers: '多模态适配器', jobs: '任务状态' },
     openHarness: '打开 3210 Crew Harness →',
     harnessHint: '底层 Provider、Harness Models 与运行时配置',
     hostReadiness: '宿主集成就绪度', hostReadinessHint: '只使用结构化安装与运行时证据；缺少证据不会显示 READY。',
@@ -75,11 +75,12 @@ const COPY = {
     statePresetHint: '切到 Custom 可单独配置各档状态。',
     workerProvider: 'Worker Provider',
     workerProviderDesc: { 'follow-dsh': '跟随 Harness · 使用各档独立的模型优先级', 'deepseek-official': 'DeepSeek Official · 使用旧版固定模型路由' },
-    workerProviderHint: '仅作用于 Hub 模式；Standalone 始终用 deepseek-official + DEEPSEEK_API_KEY。',
+    workerProviderHint: '仅作用于 Hub 模式；Standalone 仅保留为旧版迁移元数据，不是生产执行路径。',
     workerModels: 'Worker 模型', refreshHarnessModels: '刷新 Harness 模型', refreshingModels: '刷新中…',
     modelPriority: '模型优先级', addPriorityModel: '＋ 添加优先模型', modelSearch: '搜索 Provider 或 Model…',
     harnessDefault: 'Harness 默认模型', providerUnavailable: 'Provider 不可用', notAdvertised: '当前未列出',
-    noPriority: '未配置优先项', modelPoolSummary: (p: number, m: number) => `Providers: ${p} · Models: ${m}`,
+    noPriority: '未配置优先项', modelPoolSummary: (p: number, m: number) => `Providers: ${p} · Models: ${m}`,
+    healthUnprobed: 'UNPROBED', checkedAgo: (s: number) => `${s} 秒前检查`,
     partialCatalog: '部分 Provider 读取失败', catalogFailed: '无法读取 Harness 模型目录', removePriority: '移除', moveUp: '上移', moveDown: '下移',
     needsModelSelection: '多个 Provider 提供默认偏好模型，且 Harness Default 无法消歧；当前将回退到 Harness Default，请手动选择。',
     responsibilities: '职责',
@@ -100,9 +101,17 @@ const COPY = {
     tierPolicyDesc: { auto: 'auto · orchestrator 自选', 'flash-only': '只用 flash', 'pro-only': '只用 pro' },
     escalateHint: 'flash 失败自动用 pro 重试一次',
     presetFlash: 'flash 模式', presetPro: 'pro 模式',
-    multimodal: '多模态',
-    visionProvider: '视觉 provider', visionModel: '视觉模型', imagegenProvider: '生图 provider',
-    customProviders: '自定义 Provider', addProvider: '＋ 添加 Provider',
+    multimodal: '多模态',
+    visionProvider: '视觉 provider', visionModel: '视觉模型', imagegenProvider: '生图 provider',
+    harnessProviders: 'Harness Providers', harnessProviderHint: '3210 Crew Harness 的真实 Provider 注册与生命周期；不是视觉 / 生图适配器。',
+    providerState: (state: string) => `状态：${state}`, providerModels: (count: number) => `${count} 个模型`, providerJobs: (count: number) => `${count} 个运行任务`,
+    providerDeletePlan: '生成删除计划', providerDelete: '确认删除', providerPlanReady: '计划已生成；再次确认后才会修改 3210 配置。', providerRollback: '回滚', providerRollbackConfirm: '按已保存事务恢复这个 Harness Provider 及原有路由？', providerRollbackUnavailable: '没有可验证的回滚事务',
+    providerReplacement: '替换 Harness 默认 Provider（输入 Provider id）', providerDeleteConfirm: '确认按计划删除这个 Harness Provider？会清理路由引用并重启 3210。',
+    providerDeleteBlocked: '当前 Provider 不能删除（内置、在用、已删除或缺少可用替换）。', providerLifecycleError: 'Provider 生命周期操作失败',
+    providerNoInventory: '暂时无法读取 3210 Provider inventory。',
+    credentialReferences: 'Credential 引用', credentialReferenceHint: '仅显示引用名、归属和孤儿状态；不会读取或删除密钥。',
+    credentialOrphan: '孤儿 · 可单独申请清理', credentialInUse: (count: number) => `使用中 · ${count} 个 Provider`, credentialPurgePlan: '申请清理', credentialPurgeConfirm: '这是不可恢复的 Crew-owned 凭据清理，确认继续？', credentialPurging: '清理中…', credentialPurgeUnavailable: '凭据清理不可用', credentialPurgeUnverified: '已执行清理，但验证失败；引用仍保留用于恢复检查',
+    customProviders: '自定义 Provider', addProvider: '＋ 添加 Provider',
     noCustomProviders: '暂无。添加后会出现在上方的视觉 / 生图 provider 选择里。',
     providerName: '名称', modelsField: '模型列表（逗号分隔）',
     providerType: '接入方式', typeApi: 'API · 兼容 OpenAI 接口', typeCli: 'CLI · 本地命令',
@@ -131,7 +140,11 @@ const COPY = {
     roleWorker: 'Worker 角色（执行）', roleReviewer: 'Reviewer 角色（独立审查）',
     workerStateLabel: 'Worker 状态', reviewStateLabel: 'Reviewer 状态',
     roleStateHint: 'auto：orchestrator 可自动派发；manual：仅显式点名；disabled：禁用。未显式设置时由协作模式推导。',
-    autoReview: '自动复审', autoReviewHint: 'worker 成功后自动运行一次 reviewer（独立模型策略，只读）',
+    autoReview: '自动复审', autoReviewHint: 'worker 成功后自动运行一次 reviewer（独立模型策略，只读）',
+    modelOrdering: '候选排序', orderingDesc: { manual: '手动顺序', 'health-aware': '健康感知' },
+    orderingHint: '手动 priority 始终保持顺序；健康感知仅重排未显式锁定的自动候选。',
+    healthGate: '健康门', healthGateDesc: { 'hard-failures': '跳过明确不可调用', off: '关闭健康门' },
+    reviewGate: 'Reviewer 验收门', reviewGateDesc: { required: 'required · 未批准则失败', optional: 'optional · 记录但不阻断', off: 'off · 不自动复审' },
     isolation: '工作区隔离', isolationHint: 'worktree 为默认；非 Git 仓库时需显式 shared，否则任务以 NOT_GIT_REPOSITORY 失败。',
     isolationDesc: { worktree: 'worktree · 每个 coding worker 独立临时 git worktree（主工作区不动）', shared: 'shared · 旧版就地执行' },
     maxParallel: '最大并行', maxParallelHint: '同时运行的工作流上限（1–16）；超出进入队列。',
@@ -140,7 +153,7 @@ const COPY = {
     cardRuntime: { t: '执行与连接', d: 'worker 会话跑在本实例内还是独立进程，单个任务的超时上限，以及 CC / Codex 探测本实例的地址。' },
     cardMM: { t: '视觉与生图', d: '给纯文本的 DSH 模型借来眼睛和画笔：describe_image、会话贴图转写与 generate_image 都用这里的设置。' },
     cardCustomProv: { t: '自定义 Provider', d: '接入自己的 API 或本地命令；保存后会出现在上面的视觉 / 生图 provider 选择里。' },
-    modeDesc: { auto: 'auto · 优先 hub', hub: 'hub · 必须 hub', standalone: 'standalone · 独立进程' },
+    modeDesc: { auto: 'auto · 优先 3210', hub: 'hub · 必须 3210' },
     save: '保存', saved: '已保存', jobs: 'Worker 任务', empty: '当前没有 Worker / Reviewer 任务。',
     adaptiveTitle: '自适应模型路由（实验）', adaptiveHint: '默认关闭；只重排系统自动候选，手动模型优先级始终保持原序。健康信号仅来自本进程已观察到的成功、失败、超时与粗粒度延迟，重启后清空。',
     adaptiveEnabled: '启用自适应路由', adaptiveWindow: '健康窗口', adaptiveSamples: '最少样本', adaptiveBoundary: '下一个工作流生效',
@@ -178,7 +191,7 @@ const COPY = {
     expandAll: 'Expand all', collapseAll: 'Collapse all',
     modelCount: (count: number) => `${count} models`, providerCount: (count: number) => `${count} providers`,
     jobCount: (count: number) => `${count} jobs`, runningCount: (count: number) => `${count} running`,
-    sectionNames: { integrations: 'Codex / Claude / ZCode integration status', workflow: 'Crew workflow settings', flash: 'Worker / Flash', pro: 'Reviewer / Pro', dispatch: 'Model priority & dispatch', adaptive: 'Adaptive routing', runtime: 'Runtime / activation boundaries', multimodal: 'Vision & image generation', providers: 'Custom providers', jobs: 'Task status' },
+    sectionNames: { integrations: 'Codex / Claude / ZCode integration status', workflow: 'Crew workflow settings', flash: 'Worker / Flash', pro: 'Reviewer / Pro', dispatch: 'Model priority & dispatch', adaptive: 'Adaptive routing', runtime: 'Runtime / activation boundaries', multimodal: 'Vision & image generation', harnessProviders: 'Harness Providers', providers: 'Multimodal adapters', jobs: 'Task status' },
     openHarness: 'Open 3210 Crew Harness →',
     harnessHint: 'Low-level providers, Harness Models, and runtime configuration',
     hostReadiness: 'Host integration readiness', hostReadinessHint: 'Uses structured installer and runtime evidence only; missing evidence is never READY.',
@@ -201,11 +214,12 @@ const COPY = {
     statePresetHint: 'Switch to Custom to configure each tier state separately.',
     workerProvider: 'Worker Provider',
     workerProviderDesc: { 'follow-dsh': 'Follow Harness · use each tier\'s ordered model priority', 'deepseek-official': 'DeepSeek Official · use legacy fixed model routing' },
-    workerProviderHint: 'Applies to Hub workers only; Standalone always uses deepseek-official + DEEPSEEK_API_KEY.',
+    workerProviderHint: 'Applies to Hub workers only; Standalone is legacy migration metadata only and is not a production execution path.',
     workerModels: 'Worker Models', refreshHarnessModels: 'Refresh Harness Models', refreshingModels: 'Refreshing…',
     modelPriority: 'Model Priority', addPriorityModel: '＋ Add Priority Model', modelSearch: 'Search Provider or Model…',
     harnessDefault: 'Harness Default', providerUnavailable: 'Provider unavailable', notAdvertised: 'Currently not advertised',
-    noPriority: 'No priority models configured', modelPoolSummary: (p: number, m: number) => `Providers: ${p} · Models: ${m}`,
+    noPriority: 'No priority models configured', modelPoolSummary: (p: number, m: number) => `Providers: ${p} · Models: ${m}`,
+    healthUnprobed: 'UNPROBED', checkedAgo: (s: number) => `checked ${s}s ago`,
     partialCatalog: 'Some providers failed to load', catalogFailed: 'Unable to read Harness model catalog', removePriority: 'Remove', moveUp: 'Move up', moveDown: 'Move down',
     needsModelSelection: 'Multiple providers advertise the preferred model and Harness Default cannot disambiguate them. Falling back to Harness Default; choose a priority model explicitly.',
     responsibilities: 'Responsibilities',
@@ -226,9 +240,17 @@ const COPY = {
     tierPolicyDesc: { auto: 'auto · orchestrator picks', 'flash-only': 'flash only', 'pro-only': 'pro only' },
     escalateHint: 'retry a failed flash run once on pro',
     presetFlash: 'flash preset', presetPro: 'pro preset',
-    multimodal: 'Multimodal',
-    visionProvider: 'Vision provider', visionModel: 'Vision model', imagegenProvider: 'Image-gen provider',
-    customProviders: 'Custom providers', addProvider: '＋ Add provider',
+    multimodal: 'Multimodal',
+    visionProvider: 'Vision provider', visionModel: 'Vision model', imagegenProvider: 'Image-gen provider',
+    harnessProviders: 'Harness Providers', harnessProviderHint: 'Live Provider registration and lifecycle in the 3210 Crew Harness; separate from vision / image-gen adapters.',
+    providerState: (state: string) => `State: ${state}`, providerModels: (count: number) => `${count} models`, providerJobs: (count: number) => `${count} running jobs`,
+    providerDeletePlan: 'Plan deletion', providerDelete: 'Confirm delete', providerPlanReady: 'Plan ready; a second confirmation is required before changing 3210 config.', providerRollback: 'Rollback', providerRollbackConfirm: 'Restore this Harness Provider and its previous routing from the saved transaction?', providerRollbackUnavailable: 'No verified rollback transaction is available',
+    providerReplacement: 'Replacement Harness Default provider id', providerDeleteConfirm: 'Delete this Harness Provider per the plan? Routing refs will be scrubbed and 3210 restarted.',
+    providerDeleteBlocked: 'This Provider cannot be deleted (built-in, in use, already absent, or missing a valid replacement).', providerLifecycleError: 'Provider lifecycle operation failed',
+    providerNoInventory: '3210 Provider inventory is temporarily unavailable.',
+    credentialReferences: 'Credential references', credentialReferenceHint: 'Names, ownership, and orphan status only; values are never read or deleted.',
+    credentialOrphan: 'orphan · separate purge approval required', credentialInUse: (count: number) => `in use · ${count} provider(s)`, credentialPurgePlan: 'Purge…', credentialPurgeConfirm: 'This irreversibly removes a Crew-owned credential. Continue?', credentialPurging: 'Purging…', credentialPurgeUnavailable: 'Credential purge unavailable', credentialPurgeUnverified: 'Purge ran but verification failed; the reference remains visible for recovery',
+    customProviders: 'Custom providers', addProvider: '＋ Add provider',
     noCustomProviders: 'None yet. Added providers appear in the vision / image-gen selects above.',
     providerName: 'Name', modelsField: 'Models (comma-separated)',
     providerType: 'Connection', typeApi: 'API · OpenAI-compatible', typeCli: 'CLI · local command',
@@ -257,7 +279,11 @@ const COPY = {
     roleWorker: 'Worker role (execution)', roleReviewer: 'Reviewer role (independent review)',
     workerStateLabel: 'Worker state', reviewStateLabel: 'Reviewer state',
     roleStateHint: 'auto = the orchestrator may dispatch automatically; manual = only when explicitly named; disabled = off. When unset, derived from the collaboration mode.',
-    autoReview: 'Automatic review', autoReviewHint: 'Run one reviewer pass (independent model policy, read-only) after a successful worker run',
+    autoReview: 'Automatic review', autoReviewHint: 'Run one reviewer pass (independent model policy, read-only) after a successful worker run',
+    modelOrdering: 'Candidate ordering', orderingDesc: { manual: 'Manual order', 'health-aware': 'Health-aware' },
+    orderingHint: 'Explicit priority always keeps its order; health-aware mode only reorders automatic, unlocked candidates.',
+    healthGate: 'Health gate', healthGateDesc: { 'hard-failures': 'Skip known hard failures', off: 'Health gate off' },
+    reviewGate: 'Reviewer acceptance gate', reviewGateDesc: { required: 'required · fail unless approved', optional: 'optional · record without blocking', off: 'off · no automatic review' },
     isolation: 'Workspace isolation', isolationHint: 'worktree is the default; non-git workspaces require explicit shared, otherwise jobs fail with NOT_GIT_REPOSITORY.',
     isolationDesc: { worktree: 'worktree · each coding worker runs in its own temporary git worktree (primary untouched)', shared: 'shared · legacy in-place execution' },
     maxParallel: 'Max parallel', maxParallelHint: 'Upper bound of concurrently running workflows (1–16); extra ones queue.',
@@ -266,7 +292,7 @@ const COPY = {
     cardRuntime: { t: 'Execution & connection', d: 'Whether worker sessions run inside this instance or a separate process, the per-job timeout, and the address CC / Codex probes.' },
     cardMM: { t: 'Vision & image generation', d: "Lends the harness's text-only models eyes and a brush: describe_image, pasted-image transcription and generate_image all use these settings." },
     cardCustomProv: { t: 'Custom providers', d: 'Bring your own API or local command; saved providers appear in the vision / image-gen selects above.' },
-    modeDesc: { auto: 'auto · prefer hub', hub: 'hub · require hub', standalone: 'standalone' },
+    modeDesc: { auto: 'auto · prefer 3210', hub: 'hub · require 3210' },
     save: 'Save', saved: 'Saved', jobs: 'Worker jobs', empty: 'No Worker / Reviewer jobs yet.',
     adaptiveTitle: 'Adaptive model routing (experimental)', adaptiveHint: 'Off by default. Only system-derived candidates may be reordered; explicit model priorities always keep their order. Health uses only process-local success, failure, timeout, and coarse latency observations and resets on restart.',
     adaptiveEnabled: 'Enable adaptive routing', adaptiveWindow: 'Health window', adaptiveSamples: 'Minimum samples', adaptiveBoundary: 'Effective for the next workflow',
@@ -499,15 +525,23 @@ function WorkersPanel({ ctx }: { ctx: any }) {
     vision_command: string; imagegen_command: string;
   } | null>(null);
   const [modelAdd, setModelAdd] = useState<string | null>(null);
-  const [modelCatalog, setModelCatalog] = useState<any>(null);
-  const [modelCatalogError, setModelCatalogError] = useState('');
-  const [modelCatalogBusy, setModelCatalogBusy] = useState(false);
+  const [modelCatalog, setModelCatalog] = useState<any>(null);
+  const [modelCatalogError, setModelCatalogError] = useState('');
+  const [modelCatalogBusy, setModelCatalogBusy] = useState(false);
+  const [providerInventory, setProviderInventory] = useState<any>(null);
+  const [providerHealth, setProviderHealth] = useState<any[]>([]);
+  const [credentialRefs, setCredentialRefs] = useState<any[]>([]);
+  const [credentialUnverified, setCredentialUnverified] = useState<any[]>([]);
+  const [credentialLifecycleBusy, setCredentialLifecycleBusy] = useState<string | null>(null);
+  const [providerInventoryError, setProviderInventoryError] = useState('');
+  const [providerLifecycleBusy, setProviderLifecycleBusy] = useState<string | null>(null);
   const [modelPickerTier, setModelPickerTier] = useState<'flash' | 'pro' | null>(null);
   const [modelQuery, setModelQuery] = useState('');
   const [testResult, setTestResult] = useState<{ key: string; ok?: boolean; steps?: any[]; error?: string; busy: boolean } | null>(null);
   const [expandedSections, setExpandedSections] = useState<Record<string, boolean>>(() => readSectionState(sectionStorage()));
   const [surface, setSurface] = useState<string>('detecting');
   const [runtimeInfo, setRuntimeInfo] = useState<any>(undefined);
+  const [readinessSnapshot, setReadinessSnapshot] = useState<any>(undefined);
 
   const toggleSection = (sectionId: string) => {
     setExpandedSections((current) => ({ ...current, [sectionId]: !current[sectionId] }));
@@ -518,9 +552,13 @@ function WorkersPanel({ ctx }: { ctx: any }) {
     writeSectionState(sectionStorage(), expandedSections);
   }, [expandedSections]);
 
-  useEffect(() => {
-    if (modelCatalogError) setExpandedSections((current) => openSections(current, ['workflow', 'flash', 'pro']));
-  }, [modelCatalogError]);
+  useEffect(() => {
+    if (modelCatalogError) setExpandedSections((current) => openSections(current, ['workflow', 'flash', 'pro']));
+  }, [modelCatalogError]);
+
+  useEffect(() => {
+    if (providerInventoryError) setExpandedSections((current) => openSections(current, ['harnessProviders']));
+  }, [providerInventoryError]);
 
   useEffect(() => {
     if (testResult && !testResult.busy && testResult.ok === false) {
@@ -579,25 +617,37 @@ function WorkersPanel({ ctx }: { ctx: any }) {
 
   const refreshAll = useCallback(async () => {
     try {
-      const [j, s, c, pr] = await Promise.all([get('/jobs'), get('/install/status'), get('/config'), get('/presets')]);
+      const [j, s, c, pr, pi, ph, cr, ext] = await Promise.all([
+        get('/jobs'), get('/install/status'), get('/config'), get('/presets'),
+        get('/providers').catch(() => null), get('/provider-health').catch(() => null), get('/credential-references').catch(() => null), get('/extension').catch(() => null),
+      ]);
       if (j.ok) setJobs(j.jobs ?? []);
       if (s.ok) setStatus(s.status);
       if (c.ok) setConfig((prev: any) => prev ?? c.config);
-      if (pr.ok) setPresetOptions([
+      if (pr.ok) setPresetOptions([
         { value: 'default', label: copy.presetDefault(pr.defaultId) },
         ...(pr.presets ?? []).map((x: any) => ({ value: x.id, label: x.name ?? x.id })),
-      ]);
+      ]);
+      if (pi?.ok) setProviderInventory(pi);
+      if (ph?.ok) setProviderHealth(ph.health ?? []);
+      if (cr?.ok) { setCredentialRefs(cr.records ?? []); setCredentialUnverified(cr.unverified_purges ?? []); }
+      if (ext?.ok) setReadinessSnapshot(ext.extension?.readiness_snapshot ?? undefined);
     } catch { /* instance restarting */ }
   }, [get]);
 
   useEffect(() => {
     if (surface !== CREW_UI_SURFACES.OFFICIAL) return undefined;
     void refreshAll();
-    const timer = setInterval(() => { void get('/jobs').then((j) => { if (j.ok) setJobs(j.jobs ?? []); }).catch(() => {}); }, 3000);
+    const timer = setInterval(() => {
+      void Promise.all([get('/jobs'), get('/provider-health').catch(() => null)]).then(([j, health]) => {
+        if (j.ok) setJobs(j.jobs ?? []);
+        if (health?.ok) setProviderHealth(health.health ?? []);
+      }).catch(() => {});
+    }, 3000);
     return () => clearInterval(timer);
   }, [surface, refreshAll, get]);
 
-  const refreshHarnessModels = useCallback(async () => {
+  const refreshHarnessModels = useCallback(async () => {
     setModelCatalogBusy(true);
     setModelCatalogError('');
     try {
@@ -609,11 +659,53 @@ function WorkersPanel({ ctx }: { ctx: any }) {
     } finally {
       setModelCatalogBusy(false);
     }
-  }, [get, copy]);
+  }, [get, copy]);
+
+  const refreshProviderInventory = useCallback(async () => {
+    setProviderInventoryError('');
+    try {
+      const [result, health, refs] = await Promise.all([get('/providers'), get('/provider-health').catch(() => null), get('/credential-references').catch(() => null)]);
+      if (!result.ok) throw new Error(result.error ?? copy.providerNoInventory);
+      setProviderInventory(result);
+      if (health?.ok) setProviderHealth(health.health ?? []);
+      if (refs?.ok) { setCredentialRefs(refs.records ?? []); setCredentialUnverified(refs.unverified_purges ?? []); }
+    } catch (error: any) {
+      setProviderInventoryError(error?.message ?? copy.providerNoInventory);
+    }
+  }, [get, copy]);
+
+  const purgeCredentialRef = useCallback(async (ref: any) => {
+    if (ref?.ownership !== 'crew-owned' || ref?.orphan !== true || ref?.purge_capability !== 'eligible') return;
+    const referenceId = String(ref.reference_id ?? '');
+    if (!referenceId || !window.confirm(copy.credentialPurgeConfirm)) return;
+    setCredentialLifecycleBusy(referenceId);
+    setNotice(copy.working);
+    try {
+      const encoded = encodeURIComponent(referenceId);
+      const planned = await post(`/credential-references/${encoded}/purge-plan`, {});
+      if (!planned.ok || !planned.plan) throw new Error(planned.code ?? copy.credentialPurgeUnavailable);
+      if (!window.confirm(`${copy.credentialPurgeConfirm}\n\n${referenceId}`)) return;
+      const result = await readJson(await fetch(withLang(`/credential-references/${encoded}`), {
+        method: 'DELETE', headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ plan_id: planned.plan.plan_id, expected_revision: planned.plan.expected_revision, confirm: true, lang: locale === 'zh' ? 'zh' : 'en' }),
+      }), `/credential-references/${encoded}`);
+      if (!result.ok || result.state !== 'VERIFIED') throw new Error(result.code ?? copy.credentialPurgeUnavailable);
+      setNotice(copy.saved);
+      await refreshProviderInventory();
+    } catch (error: any) {
+      setNotice(String(error?.message ?? error));
+    } finally {
+      setCredentialLifecycleBusy(null);
+    }
+  }, [copy, locale, post, readJson, refreshProviderInventory, withLang]);
 
   useEffect(() => {
     if (surface === CREW_UI_SURFACES.OFFICIAL) void refreshHarnessModels();
   }, [surface, refreshHarnessModels]);
+
+  useEffect(() => {
+    if (surface === CREW_UI_SURFACES.OFFICIAL) void refreshProviderInventory();
+  }, [surface, refreshProviderInventory]);
 
   const act = useCallback(async (target: string, confirmName?: string) => {
     if (confirmName && !window.confirm(copy.confirmRestore(confirmName))) return;
@@ -648,8 +740,25 @@ function WorkersPanel({ ctx }: { ctx: any }) {
     setConfig((c: any) => ({ ...c, [key]: value }));
     void applyPatch({ [key]: value });
   };
-  /** Text/number inputs: track locally, apply on blur. */
-  const fieldLocal = (key: string, value: any) => setConfig((c: any) => ({ ...c, [key]: value }));
+  /** Text/number inputs: track locally, apply on blur. */
+  const fieldLocal = (key: string, value: any) => setConfig((c: any) => ({ ...c, [key]: value }));
+  const rolePolicyField = (role: 'worker' | 'review', patch: Record<string, any>) => {
+    const effectivePatch = role === 'worker' && (patch.ordering === 'manual' || patch.ordering === 'health-aware')
+      ? { ...patch, adaptive: { ...normalizeAdaptive(config?.worker?.model_policy?.adaptive), enabled: patch.ordering === 'health-aware' } }
+      : patch;
+    setConfig((current: any) => ({
+      ...current,
+      [role]: {
+        ...current?.[role],
+        model_policy: { ...current?.[role]?.model_policy, ...effectivePatch },
+      },
+    }));
+    void applyPatch({ [role]: { model_policy: effectivePatch } });
+  };
+  const reviewField = (patch: Record<string, any>) => {
+    setConfig((current: any) => ({ ...current, review: { ...current?.review, ...patch } }));
+    void applyPatch({ review: patch });
+  };
 
   // --- custom providers & user-added models -------------------------------
   const customProviders: any[] = config?.custom_providers ?? [];
@@ -757,16 +866,93 @@ function WorkersPanel({ ctx }: { ctx: any }) {
       </div>
     );
   };
-  const deleteProvider = (id: string) => {
+  const deleteProvider = (id: string) => {
     if (!config) return;
     const patch: any = { custom_providers: customProviders.filter((p) => p.id !== id) };
     if (config.vision_provider === id) { patch.vision_provider = 'claude-code'; patch.vision_model = 'haiku'; }
     if (config.imagegen_provider === id) patch.imagegen_provider = 'codex';
     setConfig((c: any) => ({ ...c, ...patch }));
     void applyPatch(patch);
-  };
-
-  /** Card: title + one-line description header, then its fields. */
+  };
+
+  const deleteHarnessProvider = async (record: any) => {
+    if (!record || record.ownership === 'harness' || record.desired_state === 'absent' || Number(record.references?.active_jobs ?? 0) > 0) {
+      setNotice(copy.providerDeleteBlocked);
+      return;
+    }
+    let replacementDefault: string | undefined;
+    if (record.references?.harness_default === true) {
+      const candidate = (providerInventory?.records ?? []).find((item: any) => item.id !== record.id
+        && item.desired_state !== 'absent' && item.ownership !== 'harness' && (item.models?.length ?? 0) > 0)?.id ?? '';
+      const entered = window.prompt(copy.providerReplacement, candidate);
+      if (!entered?.trim()) return;
+      replacementDefault = entered.trim();
+    }
+    setProviderLifecycleBusy(record.id);
+    setNotice(copy.working);
+    try {
+      const encoded = encodeURIComponent(record.id);
+      const planned = await post(`/providers/${encoded}/delete-plan`, replacementDefault ? { replacement_default: replacementDefault } : {});
+      if (!planned.ok || !planned.plan) throw new Error(planned.code ?? copy.providerLifecycleError);
+      if (!window.confirm(`${copy.providerPlanReady}\n\n${copy.providerDeleteConfirm}\n${(planned.plan.will_remove ?? []).join('\n')}`)) return;
+      const path = `/providers/${encoded}`;
+      const result = await readJson(await fetch(withLang(path), {
+        method: 'DELETE', headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ plan_id: planned.plan.plan_id, expected_revision: planned.plan.expected_revision, confirm: true, lang: locale === 'zh' ? 'zh' : 'en' }),
+      }), path);
+      if (!result.ok) throw new Error(result.code ?? result.error ?? copy.providerLifecycleError);
+      if (result.restart_required === true && result.result?.state === 'RESTART_PENDING') {
+        const restartPath = 'http://127.0.0.1:3080/_dsh/dsh-crew/supervisor/restart';
+        const restarted = await readJson(await fetch(restartPath, {
+          method: 'POST', headers: { 'content-type': 'application/json' },
+          body: JSON.stringify({ confirm: true }),
+        }), restartPath);
+        if (!restarted.ok) throw new Error(restarted.code ?? restarted.error ?? copy.providerLifecycleError);
+        const verified = await post(`/providers/${encoded}/verify-delete`, { transaction_id: planned.plan.plan_id, confirm: true });
+        if (!verified.ok || verified.state !== 'VERIFIED') throw new Error(verified.code ?? verified.error ?? copy.providerLifecycleError);
+      }
+      setNotice(copy.saved);
+      await refreshProviderInventory();
+    } catch (error: any) {
+      setNotice(String(error?.message ?? error));
+    } finally {
+      setProviderLifecycleBusy(null);
+    }
+  };
+
+  const rollbackHarnessProvider = async (record: any, transactionId: string) => {
+    if (!record || !transactionId || record.desired_state !== 'absent') {
+      setNotice(copy.providerRollbackUnavailable);
+      return;
+    }
+    if (!window.confirm(copy.providerRollbackConfirm)) return;
+    setProviderLifecycleBusy(`rollback:${record.id}`);
+    setNotice(copy.working);
+    try {
+      const encoded = encodeURIComponent(record.id);
+      const result = await post(`/providers/${encoded}/rollback`, { transaction_id: transactionId, confirm: true });
+      if (!result.ok) throw new Error(result.code ?? result.error ?? copy.providerLifecycleError);
+      if (result.restart_required === true && result.state === 'ROLLBACK_PENDING') {
+        const restartPath = 'http://127.0.0.1:3080/_dsh/dsh-crew/supervisor/restart';
+        const restarted = await readJson(await fetch(restartPath, {
+          method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ confirm: true }),
+        }), restartPath);
+        if (!restarted.ok) throw new Error(restarted.code ?? restarted.error ?? copy.providerLifecycleError);
+        const verified = await post(`/providers/${encoded}/verify-rollback`, { transaction_id: transactionId, confirm: true });
+        if (!verified.ok || verified.state !== 'ROLLED_BACK') throw new Error(verified.code ?? verified.error ?? copy.providerLifecycleError);
+      } else if (result.state !== 'ROLLED_BACK') {
+        throw new Error(result.code ?? copy.providerLifecycleError);
+      }
+      setNotice(copy.saved);
+      await refreshProviderInventory();
+    } catch (error: any) {
+      setNotice(String(error?.message ?? error));
+    } finally {
+      setProviderLifecycleBusy(null);
+    }
+  };
+
+  /** Card: title + one-line description header, then its fields. */
   const block = (text: { t: string; d: string }, fields: any, gridded = true) => (
     <div style={S.block}>
       <div>
@@ -793,22 +979,23 @@ function WorkersPanel({ ctx }: { ctx: any }) {
   const adaptive = normalizeAdaptive(config?.worker?.model_policy?.adaptive);
   const setAdaptiveLocal = (candidate: AdaptiveConfig) => {
     const next = normalizeAdaptive(candidate);
+    const ordering = next.enabled ? 'health-aware' : 'manual';
     setConfig((current: any) => ({
       ...current,
       worker: {
         ...current.worker,
-        model_policy: { ...current.worker?.model_policy, adaptive: next },
+        model_policy: { ...current.worker?.model_policy, adaptive: next, ordering },
       },
     }));
-    return next;
+    return { next, ordering };
   };
   const saveAdaptive = (candidate: AdaptiveConfig) => {
-    const next = setAdaptiveLocal(candidate);
-    void applyPatch({ worker: { model_policy: { adaptive: next } } });
+    const { next, ordering } = setAdaptiveLocal(candidate);
+    void applyPatch({ worker: { model_policy: { adaptive: next, ordering } } });
   };
   const modelActivity = aggregateModelInvocations(jobs);
   const currentSurfaceResponsibilities = surfaceResponsibilities(surface);
-  const hostReadiness = projectHostReadiness({ installStatus: status, runtime: runtimeInfo, surface });
+  const hostReadiness = projectHostReadiness({ installStatus: status, runtime: runtimeInfo, surface, readinessSnapshot });
 
   if (!currentSurfaceResponsibilities.fullControlPlane) {
     return <MinimalCrewPanel locale={locale} surface={surface} runtime={runtimeInfo} />;
@@ -903,11 +1090,16 @@ function WorkersPanel({ ctx }: { ctx: any }) {
             setConfig((current: any) => ({ ...current, [key]: list, [`${tier}_model_priority_configured`]: true }));
               void applyPatch({ [key]: list });
           };
-          const modelMeta = (ref: any) => {
+          const modelMeta = (ref: any) => {
             const provider = catalogProviders.find((item) => item.id === ref.provider);
             const model = provider?.models?.find((item: any) => item.id === ref.model);
-            return { provider, model };
-          };
+            return { provider, model };
+          };
+          const modelHealth = (ref: any) => providerHealth.find((entry: any) => entry.provider === ref.provider && entry.model === ref.model && entry.fresh === true) ?? null;
+          const healthLabel = (health: any) => health?.state ? String(health.state).toUpperCase().replace(/-/g, ' ') : copy.healthUnprobed;
+          const healthAge = (health: any) => Number.isFinite(health?.observed_at)
+            ? copy.checkedAgo(Math.max(0, Math.round((Date.now() - health.observed_at) / 1000)))
+            : '';
           const filteredProviders = catalogProviders.map((provider) => ({
             ...provider,
             models: (provider.models ?? []).filter((model: any) => {
@@ -929,15 +1121,19 @@ function WorkersPanel({ ctx }: { ctx: any }) {
                 {priority.length === 0 && <div style={{ fontSize: 12, opacity: 0.55, marginBottom: 6 }}>{copy.noPriority}</div>}
                 {ambiguousPreferred && <div style={{ fontSize: 11.5, color: '#c98735', marginBottom: 6 }}>{copy.needsModelSelection}</div>}
                 <div style={{ display: 'flex', flexDirection: 'column', gap: 5 }}>
-                  {priority.map((ref, index) => {
-                    const meta = modelMeta(ref);
-                    const warning = !meta.provider ? copy.providerUnavailable : !meta.model ? copy.notAdvertised : '';
+                  {priority.map((ref, index) => {
+                    const meta = modelMeta(ref);
+                    const health = modelHealth(ref);
+                    const warning = !meta.provider ? copy.providerUnavailable : !meta.model ? copy.notAdvertised : '';
                     return (
                       <div key={refKey(ref)} style={{ display: 'flex', gap: 7, alignItems: 'center', padding: '6px 8px', border: '1px solid rgba(128,128,128,0.2)', borderRadius: 6 }}>
                         <span style={{ opacity: 0.55, width: 18 }}>{index + 1}.</span>
                         <span style={{ flex: 1, minWidth: 0 }}>
                           <span style={{ display: 'block', fontSize: 12.5 }}>{meta.model?.name ?? ref.model}</span>
-                          <span style={{ display: 'block', fontSize: 10.5, opacity: 0.58, fontFamily: 'monospace' }}>{ref.provider} / {ref.model}</span>
+                          <span style={{ display: 'block', fontSize: 10.5, opacity: 0.58, fontFamily: 'monospace' }}>{ref.provider} / {ref.model}</span>
+                          <span style={{ display: 'block', fontSize: 10.5, color: health?.state === 'callable' ? '#3fb950' : health ? '#c98735' : 'inherit', opacity: health ? 0.9 : 0.5 }}>
+                            {healthLabel(health)}{healthAge(health) ? ` · ${healthAge(health)}` : ''}
+                          </span>
                           {warning && <span style={{ display: 'block', fontSize: 10.5, color: '#c98735' }}>{warning}</span>}
                         </span>
                         <button type="button" style={{ ...S.btn, padding: '2px 7px' }} title={copy.moveUp} disabled={index === 0}
@@ -1029,12 +1225,31 @@ function WorkersPanel({ ctx }: { ctx: any }) {
                   <CustomSelect value={config.review_state ?? 'auto'} onChange={(v) => field('review_state', v)}
                     options={(['auto', 'manual', 'disabled'] as const).map((s) => ({ value: s, label: copy.tierStateDesc[s] }))} /></label>
               </>))}
-              {block({ t: copy.autoReview, d: copy.autoReviewHint }, (
-                <label style={{ ...S.field, flexDirection: 'row' as const, alignItems: 'center', gap: 6 }}>
-                  <input type="checkbox" checked={config.auto_review ?? !!config.pro_reviews_flash} onChange={(e) => field('auto_review', e.target.checked)} />
-                  <span style={{ fontSize: 12.5 }}>{copy.autoReview}</span>
-                </label>
-              ), false)}
+              {block({ t: copy.autoReview, d: copy.autoReviewHint }, (
+                <>
+                  <label style={{ ...S.field, flexDirection: 'row' as const, alignItems: 'center', gap: 6 }}>
+                    <input type="checkbox" checked={config.auto_review ?? !!config.pro_reviews_flash} onChange={(e) => field('auto_review', e.target.checked)} />
+                    <span style={{ fontSize: 12.5 }}>{copy.autoReview}</span>
+                  </label>
+                  <label style={S.field}><span style={S.fieldLabel}>{copy.reviewGate}</span>
+                    <CustomSelect value={config.review?.gate ?? 'required'} onChange={(v) => reviewField({ gate: v })}
+                      options={(['required', 'optional', 'off'] as const).map((value) => ({ value, label: copy.reviewGateDesc[value] }))} /></label>
+                </>
+              ))}
+              {block({ t: copy.modelOrdering, d: copy.orderingHint }, (<>
+                {(['worker', 'review'] as const).map((role) => (
+                  <div key={role} style={{ display: 'contents' }}>
+                    <label style={S.field}><span style={S.fieldLabel}>{role === 'worker' ? copy.roleWorker : copy.roleReviewer} · {copy.modelOrdering}</span>
+                      <CustomSelect value={config?.[role]?.model_policy?.ordering ?? 'manual'}
+                        onChange={(v) => rolePolicyField(role, { ordering: v })}
+                        options={(['manual', 'health-aware'] as const).map((value) => ({ value, label: copy.orderingDesc[value] }))} /></label>
+                    <label style={S.field}><span style={S.fieldLabel}>{role === 'worker' ? copy.roleWorker : copy.roleReviewer} · {copy.healthGate}</span>
+                      <CustomSelect value={config?.[role]?.model_policy?.health_gate ?? 'hard-failures'}
+                        onChange={(v) => rolePolicyField(role, { health_gate: v })}
+                        options={(['hard-failures', 'off'] as const).map((value) => ({ value, label: copy.healthGateDesc[value] }))} /></label>
+                  </div>
+                ))}
+              </>))}
               {block({ t: copy.isolation, d: copy.isolationHint }, (<>
                 <label style={S.field}><span style={S.fieldLabel}>{copy.isolation}</span>
                   <CustomSelect value={config.isolation ?? 'worktree'} onChange={(v) => field('isolation', v)}
@@ -1142,7 +1357,7 @@ function WorkersPanel({ ctx }: { ctx: any }) {
           {block(copy.cardRuntime, (<>
           <label style={S.field}><span style={S.fieldLabel}>{copy.mode}</span>
             <CustomSelect value={config.mode} onChange={(v) => field('mode', v)}
-              options={(['auto', 'hub', 'standalone'] as const).map((m) => ({ value: m, label: copy.modeDesc[m] }))} /></label>
+              options={(['auto', 'hub'] as const).map((m) => ({ value: m, label: copy.modeDesc[m] }))} /></label>
           <label style={S.field}><span style={S.fieldLabel}>{copy.timeout}</span>
             <input style={{ ...S.input, width: '100%', boxSizing: 'border-box' as const }} type="number" min={60} max={7200} value={config.default_timeout_seconds}
               onChange={(e) => fieldLocal('default_timeout_seconds', Number(e.target.value))}
@@ -1227,7 +1442,69 @@ function WorkersPanel({ ctx }: { ctx: any }) {
           </>))}
         </CollapsibleSection>
 
-        <CollapsibleSection sectionId="providers" title={copy.sectionNames.providers}
+        <CollapsibleSection sectionId="harnessProviders" title={copy.sectionNames.harnessProviders}
+          summary={sectionSummary(copy.providerCount(providerInventory?.records?.length ?? 0), providerInventoryError ? copy.providerLifecycleError : '')}
+          expanded={!!expandedSections.harnessProviders} onToggle={() => toggleSection('harnessProviders')}>
+          {providerInventoryError && <div style={{ fontSize: 12, color: '#c55' }}>{providerInventoryError}</div>}
+          {!providerInventoryError && (providerInventory?.records?.length ?? 0) === 0 && (
+            <div style={{ fontSize: 12, opacity: 0.55 }}>{copy.providerNoInventory}</div>
+          )}
+          {(providerInventory?.records ?? []).map((record: any) => {
+            const blocked = record.ownership === 'harness' || record.desired_state === 'absent' || Number(record.references?.active_jobs ?? 0) > 0;
+            const lifecycle = record.desired_state === 'absent' ? 'absent' : record.lifecycle?.enabled === false ? 'disabled' : record.lifecycle?.catalogued ? 'catalogued' : 'configured';
+            const rollbackTransaction = (providerInventory?.lifecycle_transactions ?? []).find((entry: any) => entry.provider_id === record.id && ['VERIFIED', 'RESTART_PENDING'].includes(entry.state));
+            return (
+              <div key={record.id} style={{ display: 'flex', alignItems: 'center', gap: 8, fontSize: 12.5, flexWrap: 'wrap' as const }}>
+                <span style={{ fontWeight: 600 }}>{record.display_name || record.id}</span>
+                <span style={{ ...S.chip(record.lifecycle?.enabled === true), ...S.mono }}>{record.id}</span>
+                <span style={{ opacity: 0.65 }}>{copy.providerState(lifecycle)}</span>
+                <span style={{ opacity: 0.65 }}>{copy.providerModels(record.models?.length ?? 0)}</span>
+                {Number(record.references?.active_jobs ?? 0) > 0 && <span style={{ color: '#c98735' }}>{copy.providerJobs(record.references.active_jobs)}</span>}
+                <span style={{ flex: 1 }} />
+                {record.ownership !== 'harness' && record.desired_state !== 'absent' && (
+                  <button type="button" style={{ ...S.btn, padding: '2px 8px' }} disabled={blocked || providerLifecycleBusy !== null}
+                    onClick={() => { void deleteHarnessProvider(record); }}>
+                    {providerLifecycleBusy === record.id ? copy.working : copy.providerDeletePlan}
+                  </button>
+                )}
+                {record.desired_state === 'absent' && rollbackTransaction && (
+                  <button type="button" style={{ ...S.btn, padding: '2px 8px' }} disabled={providerLifecycleBusy !== null}
+                    onClick={() => { void rollbackHarnessProvider(record, rollbackTransaction.transaction_id); }}>
+                    {providerLifecycleBusy === `rollback:${record.id}` ? copy.working : copy.providerRollback}
+                  </button>
+                )}
+              </div>
+            );
+          })}
+          {(credentialRefs.length > 0 || credentialUnverified.length > 0) && (
+            <div style={{ marginTop: 10, borderTop: '1px solid rgba(128,128,128,0.16)', paddingTop: 8 }}>
+              <div style={{ fontWeight: 600, fontSize: 12.5 }}>{copy.credentialReferences}</div>
+              <div style={{ fontSize: 11, opacity: 0.6, margin: '3px 0 7px' }}>{copy.credentialReferenceHint}</div>
+              {credentialUnverified.map((entry: any) => (
+                <div key={`unverified:${entry.reference_id}`} style={{ color: '#c55', fontSize: 11.5 }}>
+                  <span style={S.mono}>{entry.reference_id}</span> · {copy.credentialPurgeUnverified}
+                </div>
+              ))}
+              {credentialRefs.map((ref: any) => (
+                <div key={ref.reference_id} style={{ display: 'flex', alignItems: 'center', gap: 8, fontSize: 11.5, flexWrap: 'wrap' as const }}>
+                  <span style={S.mono}>{ref.reference_id}</span>
+                  <span style={{ opacity: 0.65 }}>{ref.ownership}</span>
+                  <span style={{ color: ref.orphan ? '#c98735' : undefined }}>{ref.orphan ? copy.credentialOrphan : copy.credentialInUse(ref.consumer_count ?? 0)}</span>
+                  <span style={{ flex: 1 }} />
+                  {ref.ownership === 'crew-owned' && ref.orphan === true && ref.purge_capability === 'eligible' && (
+                    <button type="button" style={{ ...S.btn, padding: '2px 8px' }}
+                      disabled={credentialLifecycleBusy !== null}
+                      onClick={() => { void purgeCredentialRef(ref); }}>
+                      {credentialLifecycleBusy === ref.reference_id ? copy.credentialPurging : copy.credentialPurgePlan}
+                    </button>
+                  )}
+                </div>
+              ))}
+            </div>
+          )}
+        </CollapsibleSection>
+
+        <CollapsibleSection sectionId="providers" title={copy.sectionNames.providers}
           summary={sectionSummary(copy.providerCount(customProviders.length), testResult?.ok === false && copy.testFail)}
           expanded={!!expandedSections.providers} onToggle={() => toggleSection('providers')}>
           {block(copy.cardCustomProv, (<>