@ran-sh/dsh-crew 1.0.0 → 1.0.2

package/src/client/index.tsx

@@ -4,60 +4,60 @@
 
 import { useCallback, useEffect, useState, useSyncExternalStore } from 'react';
 import { createPortal } from 'react-dom';
-import {
+import {
   openSections,
   readSectionState,
   setEverySection,
   writeSectionState,
-} from './collapsible-sections.mjs';
-import { ActivationSummary } from './activation-summary';
-import { projectHostReadiness, READINESS_STATES } from './host-readiness.mjs';
-import { CREW_UI_SURFACES, classifyCrewSurface, surfaceResponsibilities } from './surface-detection.mjs';
-import { aggregateModelInvocations } from './task-telemetry.mjs';
+} from './collapsible-sections.mjs';
+import { ActivationSummary } from './activation-summary';
+import { projectHostReadiness, READINESS_STATES } from './host-readiness.mjs';
+import { CREW_UI_SURFACES, classifyCrewSurface, surfaceResponsibilities } from './surface-detection.mjs';
+import { aggregateModelInvocations } from './task-telemetry.mjs';
 
 export const inject = ['slots', 'locale'];
 
-const API = '/_dsh/dsh-crew';
-const CREW_HARNESS_URL = 'http://127.0.0.1:3210/';
-const CREW_CONTROL_PLANE_URL = 'http://127.0.0.1:3080/';
-
-type AdaptiveConfig = { enabled: boolean; window_size: number; min_samples: number };
-const DEFAULT_ADAPTIVE: AdaptiveConfig = { enabled: false, window_size: 8, min_samples: 2 };
-
-function clampInt(value: unknown, fallback: number, min: number, max: number) {
-  const parsed = Number(value);
-  if (!Number.isInteger(parsed)) return fallback;
-  return Math.max(min, Math.min(max, parsed));
-}
-
-function normalizeAdaptive(value: any): AdaptiveConfig {
-  const windowSize = clampInt(value?.window_size, DEFAULT_ADAPTIVE.window_size, 1, 32);
-  return {
-    enabled: value?.enabled === true,
-    window_size: windowSize,
-    min_samples: clampInt(value?.min_samples, DEFAULT_ADAPTIVE.min_samples, 1, windowSize),
-  };
-}
+const API = '/_dsh/dsh-crew';
+const CREW_HARNESS_URL = 'http://127.0.0.1:3210/';
+const CREW_CONTROL_PLANE_URL = 'http://127.0.0.1:3080/';
+
+type AdaptiveConfig = { enabled: boolean; window_size: number; min_samples: number };
+const DEFAULT_ADAPTIVE: AdaptiveConfig = { enabled: false, window_size: 8, min_samples: 2 };
+
+function clampInt(value: unknown, fallback: number, min: number, max: number) {
+  const parsed = Number(value);
+  if (!Number.isInteger(parsed)) return fallback;
+  return Math.max(min, Math.min(max, parsed));
+}
+
+function normalizeAdaptive(value: any): AdaptiveConfig {
+  const windowSize = clampInt(value?.window_size, DEFAULT_ADAPTIVE.window_size, 1, 32);
+  return {
+    enabled: value?.enabled === true,
+    window_size: windowSize,
+    min_samples: clampInt(value?.min_samples, DEFAULT_ADAPTIVE.min_samples, 1, windowSize),
+  };
+}
 
 const COPY = {
   zh: {
     label: 'DSH Crew',
     title: 'DSH Crew',
-    intro: '日常 Crew 控制台：在一个入口里配置编排、角色、模型路由与宿主集成，并跟踪真实 Worker / Reviewer 任务。',
+    intro: '日常 Crew 控制台：在一个入口里配置编排、角色、模型路由与宿主集成，并跟踪真实 Worker / Reviewer 任务。',
     integrations: '集成',
-    installed: '已安装', notInstalled: '未安装', ready: '可调用', notReady: '未就绪', hud: 'HUD 段',
+    installed: '已安装', notInstalled: '未安装', ready: '可调用', notReady: '未就绪', hud: 'HUD 段',
     install: '安装', update: '更新', restore: '还原',
     confirmRestore: (name: string) => `确定从 ${name} 移除 dsh-crew 集成？（settings 会先备份）`,
     globalConfig: '全局配置',
     expandAll: '全部展开', collapseAll: '全部折叠',
     modelCount: (count: number) => `${count} 个模型`, providerCount: (count: number) => `${count} 个 Provider`,
     jobCount: (count: number) => `${count} 个任务`, runningCount: (count: number) => `${count} 个运行中`,
-    sectionNames: { integrations: 'Codex / Claude / ZCode 集成状态', workflow: 'Crew 工作流设置', flash: 'Worker / Flash', pro: 'Reviewer / Pro', dispatch: '模型优先级与派发', adaptive: '自适应路由', runtime: '运行 / 生效边界', multimodal: '视觉与生图', harnessProviders: 'Harness Providers', providers: '多模态适配器', jobs: '任务状态' },
-    openHarness: '打开 3210 Crew Harness →',
-    harnessHint: '底层 Provider、Harness Models 与运行时配置',
-    hostReadiness: '宿主集成就绪度', hostReadinessHint: '只使用结构化安装与运行时证据；缺少证据不会显示 READY。',
-    readinessLabels: { codex_mcp: 'Codex MCP', ds_worker: 'ds-worker', ds_reviewer: 'ds-reviewer', claude_plugin: 'Claude plugin', zcode_mcp: 'ZCode MCP', crew_harness: 'Crew Harness', official_bridge: 'Official bridge' },
-    readinessStates: { READY: 'READY', DEGRADED: 'DEGRADED', UNAVAILABLE: 'UNAVAILABLE', UNKNOWN: 'UNKNOWN' },
+    sectionNames: { integrations: 'Codex / Claude / ZCode 集成状态', workflow: 'Crew 工作流设置', flash: 'Worker / Flash', pro: 'Reviewer / Pro', dispatch: '模型优先级与派发', adaptive: '自适应路由', runtime: '运行 / 生效边界', multimodal: '视觉与生图', harnessProviders: 'Harness Providers', providers: '多模态适配器', jobs: '任务状态' },
+    openHarness: '打开 3210 Crew Harness →',
+    harnessHint: '底层 Provider、Harness Models 与运行时配置',
+    hostReadiness: '宿主集成就绪度', hostReadinessHint: '只使用结构化安装与运行时证据；缺少证据不会显示 READY。',
+    readinessLabels: { codex_mcp: 'Codex MCP', ds_worker: 'ds-worker', ds_reviewer: 'ds-reviewer', claude_plugin: 'Claude plugin', zcode_mcp: 'ZCode MCP', crew_harness: 'Crew Harness', official_bridge: 'Official bridge' },
+    readinessStates: { READY: 'READY', DEGRADED: 'DEGRADED', UNAVAILABLE: 'UNAVAILABLE', UNKNOWN: 'UNKNOWN' },
     globalHint: '修改即时保存到 ~/.config/dsh-crew/config.json；CC / Codex 的新会话自动读取为默认值（会话内可用 /dsh-crew:config 临时覆盖）。',
     orchestration: 'Agent 编排',
     enableSubagents: '启用子 Agent',
@@ -75,12 +75,12 @@ const COPY = {
     statePresetHint: '切到 Custom 可单独配置各档状态。',
     workerProvider: 'Worker Provider',
     workerProviderDesc: { 'follow-dsh': '跟随 Harness · 使用各档独立的模型优先级', 'deepseek-official': 'DeepSeek Official · 使用旧版固定模型路由' },
-    workerProviderHint: '仅作用于 Hub 模式；Standalone 仅保留为旧版迁移元数据，不是生产执行路径。',
+    workerProviderHint: '仅作用于 Hub 模式；Standalone 仅保留为旧版迁移元数据，不是生产执行路径。',
     workerModels: 'Worker 模型', refreshHarnessModels: '刷新 Harness 模型', refreshingModels: '刷新中…',
     modelPriority: '模型优先级', addPriorityModel: '＋ 添加优先模型', modelSearch: '搜索 Provider 或 Model…',
     harnessDefault: 'Harness 默认模型', providerUnavailable: 'Provider 不可用', notAdvertised: '当前未列出',
-    noPriority: '未配置优先项', modelPoolSummary: (p: number, m: number) => `Providers: ${p} · Models: ${m}`,
-    healthUnprobed: 'UNPROBED', checkedAgo: (s: number) => `${s} 秒前检查`,
+    noPriority: '未配置优先项', modelPoolSummary: (p: number, m: number) => `Providers: ${p} · Models: ${m}`,
+    healthUnprobed: 'UNPROBED', checkedAgo: (s: number) => `${s} 秒前检查`,
     partialCatalog: '部分 Provider 读取失败', catalogFailed: '无法读取 Harness 模型目录', removePriority: '移除', moveUp: '上移', moveDown: '下移',
     needsModelSelection: '多个 Provider 提供默认偏好模型，且 Harness Default 无法消歧；当前将回退到 Harness Default，请手动选择。',
     responsibilities: '职责',
@@ -101,17 +101,18 @@ const COPY = {
     tierPolicyDesc: { auto: 'auto · orchestrator 自选', 'flash-only': '只用 flash', 'pro-only': '只用 pro' },
     escalateHint: 'flash 失败自动用 pro 重试一次',
     presetFlash: 'flash 模式', presetPro: 'pro 模式',
-    multimodal: '多模态',
-    visionProvider: '视觉 provider', visionModel: '视觉模型', imagegenProvider: '生图 provider',
-    harnessProviders: 'Harness Providers', harnessProviderHint: '3210 Crew Harness 的真实 Provider 注册与生命周期；不是视觉 / 生图适配器。',
-    providerState: (state: string) => `状态：${state}`, providerModels: (count: number) => `${count} 个模型`, providerJobs: (count: number) => `${count} 个运行任务`,
-    providerDeletePlan: '生成删除计划', providerDelete: '确认删除', providerPlanReady: '计划已生成；再次确认后才会修改 3210 配置。', providerRollback: '回滚', providerRollbackConfirm: '按已保存事务恢复这个 Harness Provider 及原有路由？', providerRollbackUnavailable: '没有可验证的回滚事务',
-    providerReplacement: '替换 Harness 默认 Provider（输入 Provider id）', providerDeleteConfirm: '确认按计划删除这个 Harness Provider？会清理路由引用并重启 3210。',
-    providerDeleteBlocked: '当前 Provider 不能删除（内置、在用、已删除或缺少可用替换）。', providerLifecycleError: 'Provider 生命周期操作失败',
-    providerNoInventory: '暂时无法读取 3210 Provider inventory。',
-    credentialReferences: 'Credential 引用', credentialReferenceHint: '仅显示引用名、归属和孤儿状态；不会读取或删除密钥。',
-    credentialOrphan: '孤儿 · 可单独申请清理', credentialInUse: (count: number) => `使用中 · ${count} 个 Provider`, credentialPurgePlan: '申请清理', credentialPurgeConfirm: '这是不可恢复的 Crew-owned 凭据清理，确认继续？', credentialPurging: '清理中…', credentialPurgeUnavailable: '凭据清理不可用', credentialPurgeUnverified: '已执行清理，但验证失败；引用仍保留用于恢复检查',
-    customProviders: '自定义 Provider', addProvider: '＋ 添加 Provider',
+    multimodal: '多模态',
+    visionProvider: '视觉 provider', visionModel: '视觉模型', imagegenProvider: '生图 provider',
+    harnessProviders: 'Harness Providers', harnessProviderHint: '3210 Crew Harness 的真实 Provider 注册与生命周期；不是视觉 / 生图适配器。',
+    providerState: (state: string) => `状态：${state}`, providerModels: (count: number) => `${count} 个模型`, providerJobs: (count: number) => `${count} 个运行任务`,
+    providerOfficialBuiltin: '· 官方内置（不可删除）', providerSourceUnresolved: '· 来源未解析（安全锁定）',
+    providerDeletePlan: '生成删除计划', providerDelete: '确认删除', providerPlanReady: '计划已生成；再次确认后才会修改 3210 配置。', providerRollback: '回滚', providerRollbackConfirm: '按已保存事务恢复这个 Harness Provider 及原有路由？', providerRollbackUnavailable: '没有可验证的回滚事务',
+    providerReplacement: '替换 Harness 默认 Provider（输入 Provider id）', providerDeleteConfirm: '确认按计划删除这个 Harness Provider？会清理路由引用并重启 3210。',
+    providerDeleteBlocked: '当前 Provider 不能删除（内置、在用、已删除或缺少可用替换）。', providerLifecycleError: 'Provider 生命周期操作失败', providerDeletePending: '配置可能已变更，事务仍待重启/验证；请刷新状态后选择回滚。', providerRollbackContinue: '继续回滚验证', recoveryUnresolved: '发现不可自动恢复的事务', recoveryStorage: '存储项', recoveryQuarantine: '隔离', recoveryQuarantineConfirm: '该事务清单无法安全恢复。将其移入隔离区并阻止自动使用，继续？',
+    providerNoInventory: '暂时无法读取 3210 Provider inventory。',
+    credentialReferences: 'Credential 引用', credentialReferenceHint: '仅显示引用名、归属和孤儿状态；不会读取或删除密钥。',
+    credentialOrphan: '孤儿 · 可单独申请清理', credentialInUse: (count: number) => `使用中 · ${count} 个 Provider`, credentialPurgePlan: '申请清理', credentialPurgeConfirm: '这是不可恢复的 Crew-owned 凭据清理，确认继续？', credentialPurging: '清理中…', credentialPurgeUnavailable: '凭据清理不可用', credentialPurgeUnverified: '已执行清理，但验证失败；引用仍保留用于恢复检查',
+    customProviders: '自定义 Provider', addProvider: '＋ 添加 Provider',
     noCustomProviders: '暂无。添加后会出现在上方的视觉 / 生图 provider 选择里。',
     providerName: '名称', modelsField: '模型列表（逗号分隔）',
     providerType: '接入方式', typeApi: 'API · 兼容 OpenAI 接口', typeCli: 'CLI · 本地命令',
@@ -140,11 +141,11 @@ const COPY = {
     roleWorker: 'Worker 角色（执行）', roleReviewer: 'Reviewer 角色（独立审查）',
     workerStateLabel: 'Worker 状态', reviewStateLabel: 'Reviewer 状态',
     roleStateHint: 'auto：orchestrator 可自动派发；manual：仅显式点名；disabled：禁用。未显式设置时由协作模式推导。',
-    autoReview: '自动复审', autoReviewHint: 'worker 成功后自动运行一次 reviewer（独立模型策略，只读）',
-    modelOrdering: '候选排序', orderingDesc: { manual: '手动顺序', 'health-aware': '健康感知' },
-    orderingHint: '手动 priority 始终保持顺序；健康感知仅重排未显式锁定的自动候选。',
-    healthGate: '健康门', healthGateDesc: { 'hard-failures': '跳过明确不可调用', off: '关闭健康门' },
-    reviewGate: 'Reviewer 验收门', reviewGateDesc: { required: 'required · 未批准则失败', optional: 'optional · 记录但不阻断', off: 'off · 不自动复审' },
+    autoReview: '自动复审', autoReviewHint: 'worker 成功后自动运行一次 reviewer（独立模型策略，只读）',
+    modelOrdering: '候选排序', orderingDesc: { manual: '手动顺序', 'health-aware': '健康感知' },
+    orderingHint: '手动 priority 始终保持顺序；健康感知仅重排未显式锁定的自动候选。',
+    healthGate: '健康门', healthGateDesc: { 'hard-failures': '跳过明确不可调用', off: '关闭健康门' },
+    reviewGate: 'Reviewer 验收门', reviewGateDesc: { required: 'required · 未批准则失败', optional: 'optional · 记录但不阻断', off: 'off · 不自动复审' },
     isolation: '工作区隔离', isolationHint: 'worktree 为默认；非 Git 仓库时需显式 shared，否则任务以 NOT_GIT_REPOSITORY 失败。',
     isolationDesc: { worktree: 'worktree · 每个 coding worker 独立临时 git worktree（主工作区不动）', shared: 'shared · 旧版就地执行' },
     maxParallel: '最大并行', maxParallelHint: '同时运行的工作流上限（1–16）；超出进入队列。',
@@ -153,13 +154,13 @@ const COPY = {
     cardRuntime: { t: '执行与连接', d: 'worker 会话跑在本实例内还是独立进程，单个任务的超时上限，以及 CC / Codex 探测本实例的地址。' },
     cardMM: { t: '视觉与生图', d: '给纯文本的 DSH 模型借来眼睛和画笔：describe_image、会话贴图转写与 generate_image 都用这里的设置。' },
     cardCustomProv: { t: '自定义 Provider', d: '接入自己的 API 或本地命令；保存后会出现在上面的视觉 / 生图 provider 选择里。' },
-    modeDesc: { auto: 'auto · 优先 3210', hub: 'hub · 必须 3210' },
-    save: '保存', saved: '已保存', jobs: 'Worker 任务', empty: '当前没有 Worker / Reviewer 任务。',
-    adaptiveTitle: '自适应模型路由（实验）', adaptiveHint: '默认关闭；只重排系统自动候选，手动模型优先级始终保持原序。健康信号仅来自本进程已观察到的成功、失败、超时与粗粒度延迟，重启后清空。',
-    adaptiveEnabled: '启用自适应路由', adaptiveWindow: '健康窗口', adaptiveSamples: '最少样本', adaptiveBoundary: '下一个工作流生效',
-    modelActivity: '模型调用概览', modelActivityHint: '聚合本 Hub 内存中最近 500 个任务的真实调用证据，最多显示 50 个模型；不保存提示词、结果或凭据。', noModelActivity: '还没有真实模型调用。',
-    calls: '调用次数', invocationSource: '任务来源', routingSource: '路由来源', lastCalled: '最近调用', role: '角色', model: '模型', never: '—',
-    col: { id: '任务', role: '角色', source: '来源', model: '模型', tier: '档位', status: '状态', progress: '进度', tokens: 'tokens ⇅', task: '内容' },
+    modeDesc: { auto: 'auto · 优先 3210', hub: 'hub · 必须 3210' },
+    save: '保存', saved: '已保存', jobs: 'Worker 任务', empty: '当前没有 Worker / Reviewer 任务。',
+    adaptiveTitle: '自适应模型路由（实验）', adaptiveHint: '默认关闭；只重排系统自动候选，手动模型优先级始终保持原序。健康信号仅来自本进程已观察到的成功、失败、超时与粗粒度延迟，重启后清空。',
+    adaptiveEnabled: '启用自适应路由', adaptiveWindow: '健康窗口', adaptiveSamples: '最少样本', adaptiveBoundary: '下一个工作流生效',
+    modelActivity: '模型调用概览', modelActivityHint: '聚合本 Hub 内存中最近 500 个任务的真实调用证据，最多显示 50 个模型；不保存提示词、结果或凭据。', noModelActivity: '还没有真实模型调用。',
+    calls: '调用次数', invocationSource: '任务来源', routingSource: '路由来源', lastCalled: '最近调用', role: '角色', model: '模型', never: '—',
+    col: { id: '任务', role: '角色', source: '来源', model: '模型', tier: '档位', status: '状态', progress: '进度', tokens: 'tokens ⇅', task: '内容' },
     working: '处理中…',
     tips: {
       claude: {
@@ -167,36 +168,36 @@ const COPY = {
         update: '重跑安装流程：刷新注册与权限、迁移旧格式配置、更新 HUD 接线；幂等，可放心点',
         restore: '从 Claude Code 移除集成：清除 marketplace 注册、插件启用项与权限规则（settings 先备份）；不删除插件源码与已跑任务',
       },
-      codex: {
-        install: '把 ds-flash / ds-pro 角色和 /dsh-config、/dsh-status 命令复制到 ~/.codex/（MCP 路径按本机自动渲染，含 approve 审批与超时配置）',
-        update: '重新渲染并覆盖角色文件与命令（插件路径或配置变更后用）；原文件先备份',
-        restore: '删除 ~/.codex/ 下的 ds-flash / ds-pro 角色与 dsh 命令文件（角色文件先备份）',
-      },
-      zcode: {
-        install: '安装 ZCode 全局规则、ds-worker / ds-reviewer 角色、命令和按来源选择的 MCP 配置到 ~/.zcode/',
-        update: '重新渲染 ZCode 角色、命令和 MCP 条目；保留个人文件与其他 MCP 服务',
-        restore: '仅移除 dsh-crew 管理的 ZCode 文件和 MCP 条目（保留备份）',
-      },
+      codex: {
+        install: '把 ds-flash / ds-pro 角色和 /dsh-config、/dsh-status 命令复制到 ~/.codex/（MCP 路径按本机自动渲染，含 approve 审批与超时配置）',
+        update: '重新渲染并覆盖角色文件与命令（插件路径或配置变更后用）；原文件先备份',
+        restore: '删除 ~/.codex/ 下的 ds-flash / ds-pro 角色与 dsh 命令文件（角色文件先备份）',
+      },
+      zcode: {
+        install: '安装 ZCode 全局规则、ds-worker / ds-reviewer 角色、命令和按来源选择的 MCP 配置到 ~/.zcode/',
+        update: '重新渲染 ZCode 角色、命令和 MCP 条目；保留个人文件与其他 MCP 服务',
+        restore: '仅移除 dsh-crew 管理的 ZCode 文件和 MCP 条目（保留备份）',
+      },
     },
   },
   en: {
     label: 'DSH Crew',
     title: 'DSH Crew',
-    intro: 'The daily Crew console: configure orchestration, roles, model routing, and host integrations in one place while tracking real Worker / Reviewer jobs.',
+    intro: 'The daily Crew console: configure orchestration, roles, model routing, and host integrations in one place while tracking real Worker / Reviewer jobs.',
     integrations: 'Integrations',
-    installed: 'installed', notInstalled: 'not installed', ready: 'ready', notReady: 'not ready', hud: 'HUD segment',
+    installed: 'installed', notInstalled: 'not installed', ready: 'ready', notReady: 'not ready', hud: 'HUD segment',
     install: 'Install', update: 'Update', restore: 'Restore',
     confirmRestore: (name: string) => `Remove the dsh-crew integration from ${name}? (settings are backed up first)`,
     globalConfig: 'Global configuration',
     expandAll: 'Expand all', collapseAll: 'Collapse all',
     modelCount: (count: number) => `${count} models`, providerCount: (count: number) => `${count} providers`,
     jobCount: (count: number) => `${count} jobs`, runningCount: (count: number) => `${count} running`,
-    sectionNames: { integrations: 'Codex / Claude / ZCode integration status', workflow: 'Crew workflow settings', flash: 'Worker / Flash', pro: 'Reviewer / Pro', dispatch: 'Model priority & dispatch', adaptive: 'Adaptive routing', runtime: 'Runtime / activation boundaries', multimodal: 'Vision & image generation', harnessProviders: 'Harness Providers', providers: 'Multimodal adapters', jobs: 'Task status' },
-    openHarness: 'Open 3210 Crew Harness →',
-    harnessHint: 'Low-level providers, Harness Models, and runtime configuration',
-    hostReadiness: 'Host integration readiness', hostReadinessHint: 'Uses structured installer and runtime evidence only; missing evidence is never READY.',
-    readinessLabels: { codex_mcp: 'Codex MCP', ds_worker: 'ds-worker', ds_reviewer: 'ds-reviewer', claude_plugin: 'Claude plugin', zcode_mcp: 'ZCode MCP', crew_harness: 'Crew Harness', official_bridge: 'Official bridge' },
-    readinessStates: { READY: 'READY', DEGRADED: 'DEGRADED', UNAVAILABLE: 'UNAVAILABLE', UNKNOWN: 'UNKNOWN' },
+    sectionNames: { integrations: 'Codex / Claude / ZCode integration status', workflow: 'Crew workflow settings', flash: 'Worker / Flash', pro: 'Reviewer / Pro', dispatch: 'Model priority & dispatch', adaptive: 'Adaptive routing', runtime: 'Runtime / activation boundaries', multimodal: 'Vision & image generation', harnessProviders: 'Harness Providers', providers: 'Multimodal adapters', jobs: 'Task status' },
+    openHarness: 'Open 3210 Crew Harness →',
+    harnessHint: 'Low-level providers, Harness Models, and runtime configuration',
+    hostReadiness: 'Host integration readiness', hostReadinessHint: 'Uses structured installer and runtime evidence only; missing evidence is never READY.',
+    readinessLabels: { codex_mcp: 'Codex MCP', ds_worker: 'ds-worker', ds_reviewer: 'ds-reviewer', claude_plugin: 'Claude plugin', zcode_mcp: 'ZCode MCP', crew_harness: 'Crew Harness', official_bridge: 'Official bridge' },
+    readinessStates: { READY: 'READY', DEGRADED: 'DEGRADED', UNAVAILABLE: 'UNAVAILABLE', UNKNOWN: 'UNKNOWN' },
     globalHint: 'Changes save instantly to ~/.config/dsh-crew/config.json; new CC / Codex sessions pick them up as defaults (override per session with /dsh-crew:config).',
     orchestration: 'Agent orchestration',
     enableSubagents: 'Enable Subagents',
@@ -214,12 +215,12 @@ const COPY = {
     statePresetHint: 'Switch to Custom to configure each tier state separately.',
     workerProvider: 'Worker Provider',
     workerProviderDesc: { 'follow-dsh': 'Follow Harness · use each tier\'s ordered model priority', 'deepseek-official': 'DeepSeek Official · use legacy fixed model routing' },
-    workerProviderHint: 'Applies to Hub workers only; Standalone is legacy migration metadata only and is not a production execution path.',
+    workerProviderHint: 'Applies to Hub workers only; Standalone is legacy migration metadata only and is not a production execution path.',
     workerModels: 'Worker Models', refreshHarnessModels: 'Refresh Harness Models', refreshingModels: 'Refreshing…',
     modelPriority: 'Model Priority', addPriorityModel: '＋ Add Priority Model', modelSearch: 'Search Provider or Model…',
     harnessDefault: 'Harness Default', providerUnavailable: 'Provider unavailable', notAdvertised: 'Currently not advertised',
-    noPriority: 'No priority models configured', modelPoolSummary: (p: number, m: number) => `Providers: ${p} · Models: ${m}`,
-    healthUnprobed: 'UNPROBED', checkedAgo: (s: number) => `checked ${s}s ago`,
+    noPriority: 'No priority models configured', modelPoolSummary: (p: number, m: number) => `Providers: ${p} · Models: ${m}`,
+    healthUnprobed: 'UNPROBED', checkedAgo: (s: number) => `checked ${s}s ago`,
     partialCatalog: 'Some providers failed to load', catalogFailed: 'Unable to read Harness model catalog', removePriority: 'Remove', moveUp: 'Move up', moveDown: 'Move down',
     needsModelSelection: 'Multiple providers advertise the preferred model and Harness Default cannot disambiguate them. Falling back to Harness Default; choose a priority model explicitly.',
     responsibilities: 'Responsibilities',
@@ -240,17 +241,18 @@ const COPY = {
     tierPolicyDesc: { auto: 'auto · orchestrator picks', 'flash-only': 'flash only', 'pro-only': 'pro only' },
     escalateHint: 'retry a failed flash run once on pro',
     presetFlash: 'flash preset', presetPro: 'pro preset',
-    multimodal: 'Multimodal',
-    visionProvider: 'Vision provider', visionModel: 'Vision model', imagegenProvider: 'Image-gen provider',
-    harnessProviders: 'Harness Providers', harnessProviderHint: 'Live Provider registration and lifecycle in the 3210 Crew Harness; separate from vision / image-gen adapters.',
-    providerState: (state: string) => `State: ${state}`, providerModels: (count: number) => `${count} models`, providerJobs: (count: number) => `${count} running jobs`,
-    providerDeletePlan: 'Plan deletion', providerDelete: 'Confirm delete', providerPlanReady: 'Plan ready; a second confirmation is required before changing 3210 config.', providerRollback: 'Rollback', providerRollbackConfirm: 'Restore this Harness Provider and its previous routing from the saved transaction?', providerRollbackUnavailable: 'No verified rollback transaction is available',
-    providerReplacement: 'Replacement Harness Default provider id', providerDeleteConfirm: 'Delete this Harness Provider per the plan? Routing refs will be scrubbed and 3210 restarted.',
-    providerDeleteBlocked: 'This Provider cannot be deleted (built-in, in use, already absent, or missing a valid replacement).', providerLifecycleError: 'Provider lifecycle operation failed',
-    providerNoInventory: '3210 Provider inventory is temporarily unavailable.',
-    credentialReferences: 'Credential references', credentialReferenceHint: 'Names, ownership, and orphan status only; values are never read or deleted.',
-    credentialOrphan: 'orphan · separate purge approval required', credentialInUse: (count: number) => `in use · ${count} provider(s)`, credentialPurgePlan: 'Purge…', credentialPurgeConfirm: 'This irreversibly removes a Crew-owned credential. Continue?', credentialPurging: 'Purging…', credentialPurgeUnavailable: 'Credential purge unavailable', credentialPurgeUnverified: 'Purge ran but verification failed; the reference remains visible for recovery',
-    customProviders: 'Custom providers', addProvider: '＋ Add provider',
+    multimodal: 'Multimodal',
+    visionProvider: 'Vision provider', visionModel: 'Vision model', imagegenProvider: 'Image-gen provider',
+    harnessProviders: 'Harness Providers', harnessProviderHint: 'Live Provider registration and lifecycle in the 3210 Crew Harness; separate from vision / image-gen adapters.',
+    providerState: (state: string) => `State: ${state}`, providerModels: (count: number) => `${count} models`, providerJobs: (count: number) => `${count} running jobs`,
+    providerOfficialBuiltin: '· official built-in (immutable)', providerSourceUnresolved: '· source unresolved (locked)',
+    providerDeletePlan: 'Plan deletion', providerDelete: 'Confirm delete', providerPlanReady: 'Plan ready; a second confirmation is required before changing 3210 config.', providerRollback: 'Rollback', providerRollbackConfirm: 'Restore this Harness Provider and its previous routing from the saved transaction?', providerRollbackUnavailable: 'No verified rollback transaction is available',
+    providerReplacement: 'Replacement Harness Default provider id', providerDeleteConfirm: 'Delete this Harness Provider per the plan? Routing refs will be scrubbed and 3210 restarted.',
+    providerDeleteBlocked: 'This Provider cannot be deleted (built-in, in use, already absent, or missing a valid replacement).', providerLifecycleError: 'Provider lifecycle operation failed', providerDeletePending: 'Configuration may already be changed; the transaction still needs restart/verification. Refresh status and use rollback if needed.', providerRollbackContinue: 'Continue rollback verification', recoveryUnresolved: 'An unrecoverable recovery transaction is blocking deletion', recoveryStorage: 'storage entry', recoveryQuarantine: 'Quarantine', recoveryQuarantineConfirm: 'This recovery manifest cannot be safely reopened. Move it into the quarantine area and keep it out of automatic recovery?',
+    providerNoInventory: '3210 Provider inventory is temporarily unavailable.',
+    credentialReferences: 'Credential references', credentialReferenceHint: 'Names, ownership, and orphan status only; values are never read or deleted.',
+    credentialOrphan: 'orphan · separate purge approval required', credentialInUse: (count: number) => `in use · ${count} provider(s)`, credentialPurgePlan: 'Purge…', credentialPurgeConfirm: 'This irreversibly removes a Crew-owned credential. Continue?', credentialPurging: 'Purging…', credentialPurgeUnavailable: 'Credential purge unavailable', credentialPurgeUnverified: 'Purge ran but verification failed; the reference remains visible for recovery',
+    customProviders: 'Custom providers', addProvider: '＋ Add provider',
     noCustomProviders: 'None yet. Added providers appear in the vision / image-gen selects above.',
     providerName: 'Name', modelsField: 'Models (comma-separated)',
     providerType: 'Connection', typeApi: 'API · OpenAI-compatible', typeCli: 'CLI · local command',
@@ -279,11 +281,11 @@ const COPY = {
     roleWorker: 'Worker role (execution)', roleReviewer: 'Reviewer role (independent review)',
     workerStateLabel: 'Worker state', reviewStateLabel: 'Reviewer state',
     roleStateHint: 'auto = the orchestrator may dispatch automatically; manual = only when explicitly named; disabled = off. When unset, derived from the collaboration mode.',
-    autoReview: 'Automatic review', autoReviewHint: 'Run one reviewer pass (independent model policy, read-only) after a successful worker run',
-    modelOrdering: 'Candidate ordering', orderingDesc: { manual: 'Manual order', 'health-aware': 'Health-aware' },
-    orderingHint: 'Explicit priority always keeps its order; health-aware mode only reorders automatic, unlocked candidates.',
-    healthGate: 'Health gate', healthGateDesc: { 'hard-failures': 'Skip known hard failures', off: 'Health gate off' },
-    reviewGate: 'Reviewer acceptance gate', reviewGateDesc: { required: 'required · fail unless approved', optional: 'optional · record without blocking', off: 'off · no automatic review' },
+    autoReview: 'Automatic review', autoReviewHint: 'Run one reviewer pass (independent model policy, read-only) after a successful worker run',
+    modelOrdering: 'Candidate ordering', orderingDesc: { manual: 'Manual order', 'health-aware': 'Health-aware' },
+    orderingHint: 'Explicit priority always keeps its order; health-aware mode only reorders automatic, unlocked candidates.',
+    healthGate: 'Health gate', healthGateDesc: { 'hard-failures': 'Skip known hard failures', off: 'Health gate off' },
+    reviewGate: 'Reviewer acceptance gate', reviewGateDesc: { required: 'required · fail unless approved', optional: 'optional · record without blocking', off: 'off · no automatic review' },
     isolation: 'Workspace isolation', isolationHint: 'worktree is the default; non-git workspaces require explicit shared, otherwise jobs fail with NOT_GIT_REPOSITORY.',
     isolationDesc: { worktree: 'worktree · each coding worker runs in its own temporary git worktree (primary untouched)', shared: 'shared · legacy in-place execution' },
     maxParallel: 'Max parallel', maxParallelHint: 'Upper bound of concurrently running workflows (1–16); extra ones queue.',
@@ -292,13 +294,13 @@ const COPY = {
     cardRuntime: { t: 'Execution & connection', d: 'Whether worker sessions run inside this instance or a separate process, the per-job timeout, and the address CC / Codex probes.' },
     cardMM: { t: 'Vision & image generation', d: "Lends the harness's text-only models eyes and a brush: describe_image, pasted-image transcription and generate_image all use these settings." },
     cardCustomProv: { t: 'Custom providers', d: 'Bring your own API or local command; saved providers appear in the vision / image-gen selects above.' },
-    modeDesc: { auto: 'auto · prefer 3210', hub: 'hub · require 3210' },
-    save: 'Save', saved: 'Saved', jobs: 'Worker jobs', empty: 'No Worker / Reviewer jobs yet.',
-    adaptiveTitle: 'Adaptive model routing (experimental)', adaptiveHint: 'Off by default. Only system-derived candidates may be reordered; explicit model priorities always keep their order. Health uses only process-local success, failure, timeout, and coarse latency observations and resets on restart.',
-    adaptiveEnabled: 'Enable adaptive routing', adaptiveWindow: 'Health window', adaptiveSamples: 'Minimum samples', adaptiveBoundary: 'Effective for the next workflow',
-    modelActivity: 'Model invocation overview', modelActivityHint: 'Aggregates real invocation evidence from the latest 500 in-memory Hub jobs and shows at most 50 models; prompts, results, and credentials are never stored here.', noModelActivity: 'No real model invocations yet.',
-    calls: 'Calls', invocationSource: 'Task source', routingSource: 'Routing source', lastCalled: 'Last called', role: 'Role', model: 'Model', never: '—',
-    col: { id: 'job', role: 'role', source: 'source', model: 'model', tier: 'tier', status: 'status', progress: 'progress', tokens: 'tokens ⇅', task: 'task' },
+    modeDesc: { auto: 'auto · prefer 3210', hub: 'hub · require 3210' },
+    save: 'Save', saved: 'Saved', jobs: 'Worker jobs', empty: 'No Worker / Reviewer jobs yet.',
+    adaptiveTitle: 'Adaptive model routing (experimental)', adaptiveHint: 'Off by default. Only system-derived candidates may be reordered; explicit model priorities always keep their order. Health uses only process-local success, failure, timeout, and coarse latency observations and resets on restart.',
+    adaptiveEnabled: 'Enable adaptive routing', adaptiveWindow: 'Health window', adaptiveSamples: 'Minimum samples', adaptiveBoundary: 'Effective for the next workflow',
+    modelActivity: 'Model invocation overview', modelActivityHint: 'Aggregates real invocation evidence from the latest 500 in-memory Hub jobs and shows at most 50 models; prompts, results, and credentials are never stored here.', noModelActivity: 'No real model invocations yet.',
+    calls: 'Calls', invocationSource: 'Task source', routingSource: 'Routing source', lastCalled: 'Last called', role: 'Role', model: 'Model', never: '—',
+    col: { id: 'job', role: 'role', source: 'source', model: 'model', tier: 'tier', status: 'status', progress: 'progress', tokens: 'tokens ⇅', task: 'task' },
     working: 'Working…',
     tips: {
       claude: {
@@ -306,16 +308,16 @@ const COPY = {
         update: 'Re-run the installer: refresh registration & permissions, migrate legacy config, update HUD wiring; idempotent',
         restore: 'Remove the integration from Claude Code: marketplace registration, plugin enablement and permission rules (settings backed up); plugin source and past jobs untouched',
       },
-      codex: {
-        install: 'Copy ds-flash / ds-pro roles and /dsh-config, /dsh-status prompts into ~/.codex/ (MCP paths rendered for this machine, approve mode + timeout included)',
-        update: 'Re-render and overwrite role files and prompts (after path/config changes); originals backed up',
-        restore: 'Delete ds-flash / ds-pro roles and dsh prompts from ~/.codex/ (roles backed up first)',
-      },
-      zcode: {
-        install: 'Install the ZCode global policy, ds-worker / ds-reviewer agents, commands and source-aware MCP config under ~/.zcode/',
-        update: 'Re-render ZCode agents, commands and MCP entry; user files and unrelated MCP servers are preserved',
-        restore: 'Remove only dsh-crew-owned ZCode files and MCP entry (backups kept)',
-      },
+      codex: {
+        install: 'Copy ds-flash / ds-pro roles and /dsh-config, /dsh-status prompts into ~/.codex/ (MCP paths rendered for this machine, approve mode + timeout included)',
+        update: 'Re-render and overwrite role files and prompts (after path/config changes); originals backed up',
+        restore: 'Delete ds-flash / ds-pro roles and dsh prompts from ~/.codex/ (roles backed up first)',
+      },
+      zcode: {
+        install: 'Install the ZCode global policy, ds-worker / ds-reviewer agents, commands and source-aware MCP config under ~/.zcode/',
+        update: 'Re-render ZCode agents, commands and MCP entry; user files and unrelated MCP servers are preserved',
+        restore: 'Remove only dsh-crew-owned ZCode files and MCP entry (backups kept)',
+      },
     },
   },
 };
@@ -447,63 +449,63 @@ function elapsed(startedAt: string, endedAt?: string | null) {
   const s = Math.max(0, Math.round(((endedAt ? +new Date(endedAt) : Date.now()) - +new Date(startedAt)) / 1000));
   return s >= 60 ? `${Math.floor(s / 60)}m${s % 60}s` : `${s}s`;
 }
-function ktok(n: number) { return n >= 1000 ? `${Math.round(n / 100) / 10}k` : `${n}`; }
-
-function formatTimestamp(value: string | null, locale: string) {
-  if (!value || !Number.isFinite(Date.parse(value))) return '—';
-  return new Intl.DateTimeFormat(locale === 'zh' ? 'zh-CN' : 'en', {
-    month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit', second: '2-digit',
-  }).format(new Date(value));
-}
-
-function readinessChip(state: string) {
-  const color = state === READINESS_STATES.READY ? '#3fb950'
-    : state === READINESS_STATES.DEGRADED ? '#c98735'
-      : state === READINESS_STATES.UNAVAILABLE ? '#f85149' : 'inherit';
-  return {
-    fontSize: 10.5, fontWeight: 650, padding: '1px 7px', borderRadius: 99,
-    border: `1px solid ${state === READINESS_STATES.UNKNOWN ? 'rgba(128,128,128,0.35)' : color}`,
-    color, opacity: state === READINESS_STATES.UNKNOWN ? 0.58 : 1,
-  };
-}
-
-function MinimalCrewPanel({ locale, surface, runtime }: { locale: string; surface: string; runtime: any }) {
-  const zh = locale === 'zh';
-  const native = surface === CREW_UI_SURFACES.NATIVE;
-  const title = native ? (zh ? 'DSH Crew Runtime' : 'DSH Crew Runtime') : (zh ? 'DSH Crew Surface 未确认' : 'DSH Crew surface not verified');
-  const hint = native
-    ? (zh
-      ? '这里是隔离的 3210 Crew Harness。请使用 Harness 原生菜单管理 Provider、Harness Models、Agent 预设与底层配置；Crew 编排和宿主集成统一在 3080 管理。'
-      : 'This is the isolated 3210 Crew Harness. Use the native Harness menus for Providers, Harness Models, Agent presets, and low-level settings; manage Crew orchestration and host integrations on 3080.')
-    : (zh
-      ? '无法用结构化后端证据确认当前界面，因此已保守隐藏 Crew 编排、任务与宿主集成功能。'
-      : 'Structured backend evidence could not identify this surface, so Crew orchestration, jobs, and host integrations are conservatively hidden.');
-  const runtimeReady = runtime?.ok === true && runtime?.service === 'dsh-crew-hub';
-  return (
-    <div style={{ display: 'flex', flexDirection: 'column', gap: 10, fontSize: 13, lineHeight: 1.55 }}>
-      <div style={{ ...S.block, background: 'linear-gradient(135deg, rgba(74,158,255,0.08), rgba(128,128,128,0.02))' }}>
-        <div>
-          <div style={{ fontSize: 19, fontWeight: 680 }}>{title}</div>
-          <div style={{ fontSize: 12, opacity: 0.68, marginTop: 3 }}>{hint}</div>
-        </div>
-        <div style={{ display: 'flex', gap: 7, flexWrap: 'wrap' }}>
-          <span style={readinessChip(runtimeReady ? READINESS_STATES.READY : READINESS_STATES.UNKNOWN)}>
-            {runtimeReady ? `Runtime ${runtime.runtime_version ?? 'READY'}` : 'Runtime UNKNOWN'}
-          </span>
-          <span style={readinessChip(native ? READINESS_STATES.READY : READINESS_STATES.UNKNOWN)}>
-            {native ? '3210 · isolated' : 'surface · unknown'}
-          </span>
-        </div>
-        <a href={CREW_CONTROL_PLANE_URL} target="_blank" rel="noopener noreferrer" style={{
-          ...S.btn, alignSelf: 'flex-start', textDecoration: 'none', fontWeight: 650, padding: '7px 12px',
-          borderColor: 'rgba(74,158,255,0.55)', background: 'rgba(74,158,255,0.08)',
-        }}>{zh ? '打开 3080 DSH Crew 控制台 →' : 'Open the 3080 DSH Crew console →'}</a>
-      </div>
-    </div>
-  );
-}
-
-function WorkersPanel({ ctx }: { ctx: any }) {
+function ktok(n: number) { return n >= 1000 ? `${Math.round(n / 100) / 10}k` : `${n}`; }
+
+function formatTimestamp(value: string | null, locale: string) {
+  if (!value || !Number.isFinite(Date.parse(value))) return '—';
+  return new Intl.DateTimeFormat(locale === 'zh' ? 'zh-CN' : 'en', {
+    month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit', second: '2-digit',
+  }).format(new Date(value));
+}
+
+function readinessChip(state: string) {
+  const color = state === READINESS_STATES.READY ? '#3fb950'
+    : state === READINESS_STATES.DEGRADED ? '#c98735'
+      : state === READINESS_STATES.UNAVAILABLE ? '#f85149' : 'inherit';
+  return {
+    fontSize: 10.5, fontWeight: 650, padding: '1px 7px', borderRadius: 99,
+    border: `1px solid ${state === READINESS_STATES.UNKNOWN ? 'rgba(128,128,128,0.35)' : color}`,
+    color, opacity: state === READINESS_STATES.UNKNOWN ? 0.58 : 1,
+  };
+}
+
+function MinimalCrewPanel({ locale, surface, runtime }: { locale: string; surface: string; runtime: any }) {
+  const zh = locale === 'zh';
+  const native = surface === CREW_UI_SURFACES.NATIVE;
+  const title = native ? (zh ? 'DSH Crew Runtime' : 'DSH Crew Runtime') : (zh ? 'DSH Crew Surface 未确认' : 'DSH Crew surface not verified');
+  const hint = native
+    ? (zh
+      ? '这里是隔离的 3210 Crew Harness。请使用 Harness 原生菜单管理 Provider、Harness Models、Agent 预设与底层配置；Crew 编排和宿主集成统一在 3080 管理。'
+      : 'This is the isolated 3210 Crew Harness. Use the native Harness menus for Providers, Harness Models, Agent presets, and low-level settings; manage Crew orchestration and host integrations on 3080.')
+    : (zh
+      ? '无法用结构化后端证据确认当前界面，因此已保守隐藏 Crew 编排、任务与宿主集成功能。'
+      : 'Structured backend evidence could not identify this surface, so Crew orchestration, jobs, and host integrations are conservatively hidden.');
+  const runtimeReady = runtime?.ok === true && runtime?.service === 'dsh-crew-hub';
+  return (
+    <div style={{ display: 'flex', flexDirection: 'column', gap: 10, fontSize: 13, lineHeight: 1.55 }}>
+      <div style={{ ...S.block, background: 'linear-gradient(135deg, rgba(74,158,255,0.08), rgba(128,128,128,0.02))' }}>
+        <div>
+          <div style={{ fontSize: 19, fontWeight: 680 }}>{title}</div>
+          <div style={{ fontSize: 12, opacity: 0.68, marginTop: 3 }}>{hint}</div>
+        </div>
+        <div style={{ display: 'flex', gap: 7, flexWrap: 'wrap' }}>
+          <span style={readinessChip(runtimeReady ? READINESS_STATES.READY : READINESS_STATES.UNKNOWN)}>
+            {runtimeReady ? `Runtime ${runtime.runtime_version ?? 'READY'}` : 'Runtime UNKNOWN'}
+          </span>
+          <span style={readinessChip(native ? READINESS_STATES.READY : READINESS_STATES.UNKNOWN)}>
+            {native ? '3210 · isolated' : 'surface · unknown'}
+          </span>
+        </div>
+        <a href={CREW_CONTROL_PLANE_URL} target="_blank" rel="noopener noreferrer" style={{
+          ...S.btn, alignSelf: 'flex-start', textDecoration: 'none', fontWeight: 650, padding: '7px 12px',
+          borderColor: 'rgba(74,158,255,0.55)', background: 'rgba(74,158,255,0.08)',
+        }}>{zh ? '打开 3080 DSH Crew 控制台 →' : 'Open the 3080 DSH Crew console →'}</a>
+      </div>
+    </div>
+  );
+}
+
+function WorkersPanel({ ctx }: { ctx: any }) {
   const locale = useSyncExternalStore(
     (notify: () => void) => ctx.on('locale/change', notify),
     () => ctx.locale.getLocale().active,
@@ -525,23 +527,23 @@ function WorkersPanel({ ctx }: { ctx: any }) {
     vision_command: string; imagegen_command: string;
   } | null>(null);
   const [modelAdd, setModelAdd] = useState<string | null>(null);
-  const [modelCatalog, setModelCatalog] = useState<any>(null);
-  const [modelCatalogError, setModelCatalogError] = useState('');
-  const [modelCatalogBusy, setModelCatalogBusy] = useState(false);
-  const [providerInventory, setProviderInventory] = useState<any>(null);
-  const [providerHealth, setProviderHealth] = useState<any[]>([]);
-  const [credentialRefs, setCredentialRefs] = useState<any[]>([]);
-  const [credentialUnverified, setCredentialUnverified] = useState<any[]>([]);
-  const [credentialLifecycleBusy, setCredentialLifecycleBusy] = useState<string | null>(null);
-  const [providerInventoryError, setProviderInventoryError] = useState('');
-  const [providerLifecycleBusy, setProviderLifecycleBusy] = useState<string | null>(null);
+  const [modelCatalog, setModelCatalog] = useState<any>(null);
+  const [modelCatalogError, setModelCatalogError] = useState('');
+  const [modelCatalogBusy, setModelCatalogBusy] = useState(false);
+  const [providerInventory, setProviderInventory] = useState<any>(null);
+  const [providerHealth, setProviderHealth] = useState<any[]>([]);
+  const [credentialRefs, setCredentialRefs] = useState<any[]>([]);
+  const [credentialUnverified, setCredentialUnverified] = useState<any[]>([]);
+  const [credentialLifecycleBusy, setCredentialLifecycleBusy] = useState<string | null>(null);
+  const [providerInventoryError, setProviderInventoryError] = useState('');
+  const [providerLifecycleBusy, setProviderLifecycleBusy] = useState<string | null>(null);
   const [modelPickerTier, setModelPickerTier] = useState<'flash' | 'pro' | null>(null);
   const [modelQuery, setModelQuery] = useState('');
-  const [testResult, setTestResult] = useState<{ key: string; ok?: boolean; steps?: any[]; error?: string; busy: boolean } | null>(null);
-  const [expandedSections, setExpandedSections] = useState<Record<string, boolean>>(() => readSectionState(sectionStorage()));
-  const [surface, setSurface] = useState<string>('detecting');
-  const [runtimeInfo, setRuntimeInfo] = useState<any>(undefined);
-  const [readinessSnapshot, setReadinessSnapshot] = useState<any>(undefined);
+  const [testResult, setTestResult] = useState<{ key: string; ok?: boolean; steps?: any[]; error?: string; busy: boolean } | null>(null);
+  const [expandedSections, setExpandedSections] = useState<Record<string, boolean>>(() => readSectionState(sectionStorage()));
+  const [surface, setSurface] = useState<string>('detecting');
+  const [runtimeInfo, setRuntimeInfo] = useState<any>(undefined);
+  const [readinessSnapshot, setReadinessSnapshot] = useState<any>(undefined);
 
   const toggleSection = (sectionId: string) => {
     setExpandedSections((current) => ({ ...current, [sectionId]: !current[sectionId] }));
@@ -552,13 +554,13 @@ function WorkersPanel({ ctx }: { ctx: any }) {
     writeSectionState(sectionStorage(), expandedSections);
   }, [expandedSections]);
 
-  useEffect(() => {
-    if (modelCatalogError) setExpandedSections((current) => openSections(current, ['workflow', 'flash', 'pro']));
-  }, [modelCatalogError]);
-
-  useEffect(() => {
-    if (providerInventoryError) setExpandedSections((current) => openSections(current, ['harnessProviders']));
-  }, [providerInventoryError]);
+  useEffect(() => {
+    if (modelCatalogError) setExpandedSections((current) => openSections(current, ['workflow', 'flash', 'pro']));
+  }, [modelCatalogError]);
+
+  useEffect(() => {
+    if (providerInventoryError) setExpandedSections((current) => openSections(current, ['harnessProviders']));
+  }, [providerInventoryError]);
 
   useEffect(() => {
     if (testResult && !testResult.busy && testResult.ok === false) {
@@ -591,63 +593,63 @@ function WorkersPanel({ ctx }: { ctx: any }) {
    * (DSH's setting may be unset), and the hub localizes its own strings from it. */
   const withLang = useCallback((path: string) => `${API}${path}${path.includes('?') ? '&' : '?'}lang=${locale === 'zh' ? 'zh' : 'en'}`, [locale]);
   const get = useCallback(async (path: string) => readJson(await fetch(withLang(path), { cache: 'no-store' }), path), [readJson, withLang]);
-  const post = useCallback(async (path: string, body: any) => readJson(await fetch(withLang(path), {
+  const post = useCallback(async (path: string, body: any) => readJson(await fetch(withLang(path), {
     method: 'POST', headers: { 'content-type': 'application/json' },
     body: JSON.stringify({ ...body, lang: locale === 'zh' ? 'zh' : 'en' }),
-  }), path), [readJson, withLang, locale]);
-
-  const detectSurface = useCallback(async () => {
-    const readOptional = async (path: string) => {
-      try {
-        const response = await fetch(`${API}${path}`, { cache: 'no-store' });
-        if (!response.ok) return null;
-        const body = await response.json();
-        return body && typeof body === 'object' ? body : null;
-      } catch { return null; }
-    };
-    const [bridgeStatus, runtime] = await Promise.all([
-      readOptional('/bridge-status'),
-      readOptional('/runtime'),
-    ]);
-    setRuntimeInfo(runtime);
-    setSurface(classifyCrewSurface({ bridgeStatus, runtime }));
-  }, []);
-
-  useEffect(() => { void detectSurface(); }, [detectSurface]);
+  }), path), [readJson, withLang, locale]);
+
+  const detectSurface = useCallback(async () => {
+    const readOptional = async (path: string) => {
+      try {
+        const response = await fetch(`${API}${path}`, { cache: 'no-store' });
+        if (!response.ok) return null;
+        const body = await response.json();
+        return body && typeof body === 'object' ? body : null;
+      } catch { return null; }
+    };
+    const [bridgeStatus, runtime] = await Promise.all([
+      readOptional('/bridge-status'),
+      readOptional('/runtime'),
+    ]);
+    setRuntimeInfo(runtime);
+    setSurface(classifyCrewSurface({ bridgeStatus, runtime }));
+  }, []);
+
+  useEffect(() => { void detectSurface(); }, [detectSurface]);
 
   const refreshAll = useCallback(async () => {
     try {
-      const [j, s, c, pr, pi, ph, cr, ext] = await Promise.all([
-        get('/jobs'), get('/install/status'), get('/config'), get('/presets'),
-        get('/providers').catch(() => null), get('/provider-health').catch(() => null), get('/credential-references').catch(() => null), get('/extension').catch(() => null),
-      ]);
+      const [j, s, c, pr, pi, ph, cr, ext] = await Promise.all([
+        get('/jobs'), get('/install/status'), get('/config'), get('/presets'),
+        get('/providers').catch(() => null), get('/provider-health').catch(() => null), get('/credential-references').catch(() => null), get('/extension').catch(() => null),
+      ]);
       if (j.ok) setJobs(j.jobs ?? []);
       if (s.ok) setStatus(s.status);
       if (c.ok) setConfig((prev: any) => prev ?? c.config);
-      if (pr.ok) setPresetOptions([
+      if (pr.ok) setPresetOptions([
         { value: 'default', label: copy.presetDefault(pr.defaultId) },
         ...(pr.presets ?? []).map((x: any) => ({ value: x.id, label: x.name ?? x.id })),
-      ]);
-      if (pi?.ok) setProviderInventory(pi);
-      if (ph?.ok) setProviderHealth(ph.health ?? []);
-      if (cr?.ok) { setCredentialRefs(cr.records ?? []); setCredentialUnverified(cr.unverified_purges ?? []); }
-      if (ext?.ok) setReadinessSnapshot(ext.extension?.readiness_snapshot ?? undefined);
+      ]);
+      if (pi?.ok) setProviderInventory(pi);
+      if (ph?.ok) setProviderHealth(ph.health ?? []);
+      if (cr?.ok) { setCredentialRefs(cr.records ?? []); setCredentialUnverified(cr.unverified_purges ?? []); }
+      if (ext?.ok) setReadinessSnapshot(ext.extension?.readiness_snapshot ?? undefined);
     } catch { /* instance restarting */ }
   }, [get]);
 
-  useEffect(() => {
-    if (surface !== CREW_UI_SURFACES.OFFICIAL) return undefined;
-    void refreshAll();
-    const timer = setInterval(() => {
-      void Promise.all([get('/jobs'), get('/provider-health').catch(() => null)]).then(([j, health]) => {
-        if (j.ok) setJobs(j.jobs ?? []);
-        if (health?.ok) setProviderHealth(health.health ?? []);
-      }).catch(() => {});
-    }, 3000);
-    return () => clearInterval(timer);
-  }, [surface, refreshAll, get]);
+  useEffect(() => {
+    if (surface !== CREW_UI_SURFACES.OFFICIAL) return undefined;
+    void refreshAll();
+    const timer = setInterval(() => {
+      void Promise.all([get('/jobs'), get('/provider-health').catch(() => null)]).then(([j, health]) => {
+        if (j.ok) setJobs(j.jobs ?? []);
+        if (health?.ok) setProviderHealth(health.health ?? []);
+      }).catch(() => {});
+    }, 3000);
+    return () => clearInterval(timer);
+  }, [surface, refreshAll, get]);
 
-  const refreshHarnessModels = useCallback(async () => {
+  const refreshHarnessModels = useCallback(async () => {
     setModelCatalogBusy(true);
     setModelCatalogError('');
     try {
@@ -659,53 +661,53 @@ function WorkersPanel({ ctx }: { ctx: any }) {
     } finally {
       setModelCatalogBusy(false);
     }
-  }, [get, copy]);
-
-  const refreshProviderInventory = useCallback(async () => {
-    setProviderInventoryError('');
-    try {
-      const [result, health, refs] = await Promise.all([get('/providers'), get('/provider-health').catch(() => null), get('/credential-references').catch(() => null)]);
-      if (!result.ok) throw new Error(result.error ?? copy.providerNoInventory);
-      setProviderInventory(result);
-      if (health?.ok) setProviderHealth(health.health ?? []);
-      if (refs?.ok) { setCredentialRefs(refs.records ?? []); setCredentialUnverified(refs.unverified_purges ?? []); }
-    } catch (error: any) {
-      setProviderInventoryError(error?.message ?? copy.providerNoInventory);
-    }
-  }, [get, copy]);
-
-  const purgeCredentialRef = useCallback(async (ref: any) => {
-    if (ref?.ownership !== 'crew-owned' || ref?.orphan !== true || ref?.purge_capability !== 'eligible') return;
-    const referenceId = String(ref.reference_id ?? '');
-    if (!referenceId || !window.confirm(copy.credentialPurgeConfirm)) return;
-    setCredentialLifecycleBusy(referenceId);
-    setNotice(copy.working);
-    try {
-      const encoded = encodeURIComponent(referenceId);
-      const planned = await post(`/credential-references/${encoded}/purge-plan`, {});
-      if (!planned.ok || !planned.plan) throw new Error(planned.code ?? copy.credentialPurgeUnavailable);
-      if (!window.confirm(`${copy.credentialPurgeConfirm}\n\n${referenceId}`)) return;
-      const result = await readJson(await fetch(withLang(`/credential-references/${encoded}`), {
-        method: 'DELETE', headers: { 'content-type': 'application/json' },
-        body: JSON.stringify({ plan_id: planned.plan.plan_id, expected_revision: planned.plan.expected_revision, confirm: true, lang: locale === 'zh' ? 'zh' : 'en' }),
-      }), `/credential-references/${encoded}`);
-      if (!result.ok || result.state !== 'VERIFIED') throw new Error(result.code ?? copy.credentialPurgeUnavailable);
-      setNotice(copy.saved);
-      await refreshProviderInventory();
-    } catch (error: any) {
-      setNotice(String(error?.message ?? error));
-    } finally {
-      setCredentialLifecycleBusy(null);
-    }
-  }, [copy, locale, post, readJson, refreshProviderInventory, withLang]);
+  }, [get, copy]);
+
+  const refreshProviderInventory = useCallback(async () => {
+    setProviderInventoryError('');
+    try {
+      const [result, health, refs] = await Promise.all([get('/providers'), get('/provider-health').catch(() => null), get('/credential-references').catch(() => null)]);
+      if (!result.ok) throw new Error(result.error ?? copy.providerNoInventory);
+      setProviderInventory(result);
+      if (health?.ok) setProviderHealth(health.health ?? []);
+      if (refs?.ok) { setCredentialRefs(refs.records ?? []); setCredentialUnverified(refs.unverified_purges ?? []); }
+    } catch (error: any) {
+      setProviderInventoryError(error?.message ?? copy.providerNoInventory);
+    }
+  }, [get, copy]);
+
+  const purgeCredentialRef = useCallback(async (ref: any) => {
+    if (ref?.ownership !== 'crew-owned' || ref?.orphan !== true || ref?.purge_capability !== 'eligible') return;
+    const referenceId = String(ref.reference_id ?? '');
+    if (!referenceId || !window.confirm(copy.credentialPurgeConfirm)) return;
+    setCredentialLifecycleBusy(referenceId);
+    setNotice(copy.working);
+    try {
+      const encoded = encodeURIComponent(referenceId);
+      const planned = await post(`/credential-references/${encoded}/purge-plan`, {});
+      if (!planned.ok || !planned.plan) throw new Error(planned.code ?? copy.credentialPurgeUnavailable);
+      if (!window.confirm(`${copy.credentialPurgeConfirm}\n\n${referenceId}`)) return;
+      const result = await readJson(await fetch(withLang(`/credential-references/${encoded}`), {
+        method: 'DELETE', headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ plan_id: planned.plan.plan_id, expected_revision: planned.plan.expected_revision, confirm: true, lang: locale === 'zh' ? 'zh' : 'en' }),
+      }), `/credential-references/${encoded}`);
+      if (!result.ok || result.state !== 'VERIFIED') throw new Error(result.code ?? copy.credentialPurgeUnavailable);
+      setNotice(copy.saved);
+      await refreshProviderInventory();
+    } catch (error: any) {
+      setNotice(String(error?.message ?? error));
+    } finally {
+      setCredentialLifecycleBusy(null);
+    }
+  }, [copy, locale, post, readJson, refreshProviderInventory, withLang]);
 
-  useEffect(() => {
-    if (surface === CREW_UI_SURFACES.OFFICIAL) void refreshHarnessModels();
-  }, [surface, refreshHarnessModels]);
-
-  useEffect(() => {
-    if (surface === CREW_UI_SURFACES.OFFICIAL) void refreshProviderInventory();
-  }, [surface, refreshProviderInventory]);
+  useEffect(() => {
+    if (surface === CREW_UI_SURFACES.OFFICIAL) void refreshHarnessModels();
+  }, [surface, refreshHarnessModels]);
+
+  useEffect(() => {
+    if (surface === CREW_UI_SURFACES.OFFICIAL) void refreshProviderInventory();
+  }, [surface, refreshProviderInventory]);
 
   const act = useCallback(async (target: string, confirmName?: string) => {
     if (confirmName && !window.confirm(copy.confirmRestore(confirmName))) return;
@@ -718,47 +720,47 @@ function WorkersPanel({ ctx }: { ctx: any }) {
     } catch (e: any) { setNotice(String(e?.message ?? e)); } finally { setBusy(false); }
   }, [post, get, copy]);
 
-  const applyPatch = useCallback(async (patch: Record<string, any>) => {
-    try {
-      const result = await post('/config', patch);
-      if (!result.ok) throw new Error(result.error ?? 'Configuration save failed');
-      setConfig(result.config);
-      setNotice(copy.saved);
-      setTimeout(() => setNotice(''), 1500);
-      return true;
-    } catch (error: any) {
-      setNotice(String(error?.message ?? error));
-      try {
-        const authoritative = await get('/config');
-        if (authoritative.ok) setConfig(authoritative.config);
-      } catch { /* keep the error visible while the Hub is unavailable */ }
-      return false;
-    }
-  }, [post, get, copy]);
+  const applyPatch = useCallback(async (patch: Record<string, any>) => {
+    try {
+      const result = await post('/config', patch);
+      if (!result.ok) throw new Error(result.error ?? 'Configuration save failed');
+      setConfig(result.config);
+      setNotice(copy.saved);
+      setTimeout(() => setNotice(''), 1500);
+      return true;
+    } catch (error: any) {
+      setNotice(String(error?.message ?? error));
+      try {
+        const authoritative = await get('/config');
+        if (authoritative.ok) setConfig(authoritative.config);
+      } catch { /* keep the error visible while the Hub is unavailable */ }
+      return false;
+    }
+  }, [post, get, copy]);
   /** Selects & checkboxes: apply immediately. */
   const field = (key: string, value: any) => {
     setConfig((c: any) => ({ ...c, [key]: value }));
-    void applyPatch({ [key]: value });
+    void applyPatch({ [key]: value });
+  };
+  /** Text/number inputs: track locally, apply on blur. */
+  const fieldLocal = (key: string, value: any) => setConfig((c: any) => ({ ...c, [key]: value }));
+  const rolePolicyField = (role: 'worker' | 'review', patch: Record<string, any>) => {
+    const effectivePatch = role === 'worker' && (patch.ordering === 'manual' || patch.ordering === 'health-aware')
+      ? { ...patch, adaptive: { ...normalizeAdaptive(config?.worker?.model_policy?.adaptive), enabled: patch.ordering === 'health-aware' } }
+      : patch;
+    setConfig((current: any) => ({
+      ...current,
+      [role]: {
+        ...current?.[role],
+        model_policy: { ...current?.[role]?.model_policy, ...effectivePatch },
+      },
+    }));
+    void applyPatch({ [role]: { model_policy: effectivePatch } });
+  };
+  const reviewField = (patch: Record<string, any>) => {
+    setConfig((current: any) => ({ ...current, review: { ...current?.review, ...patch } }));
+    void applyPatch({ review: patch });
   };
-  /** Text/number inputs: track locally, apply on blur. */
-  const fieldLocal = (key: string, value: any) => setConfig((c: any) => ({ ...c, [key]: value }));
-  const rolePolicyField = (role: 'worker' | 'review', patch: Record<string, any>) => {
-    const effectivePatch = role === 'worker' && (patch.ordering === 'manual' || patch.ordering === 'health-aware')
-      ? { ...patch, adaptive: { ...normalizeAdaptive(config?.worker?.model_policy?.adaptive), enabled: patch.ordering === 'health-aware' } }
-      : patch;
-    setConfig((current: any) => ({
-      ...current,
-      [role]: {
-        ...current?.[role],
-        model_policy: { ...current?.[role]?.model_policy, ...effectivePatch },
-      },
-    }));
-    void applyPatch({ [role]: { model_policy: effectivePatch } });
-  };
-  const reviewField = (patch: Record<string, any>) => {
-    setConfig((current: any) => ({ ...current, review: { ...current?.review, ...patch } }));
-    void applyPatch({ review: patch });
-  };
 
   // --- custom providers & user-added models -------------------------------
   const customProviders: any[] = config?.custom_providers ?? [];
@@ -795,7 +797,7 @@ function WorkersPanel({ ctx }: { ctx: any }) {
     const cur = extraModels[p] ?? [];
     const nextExtra = { ...extraModels, [p]: cur.includes(m) ? cur : [...cur, m] };
     setConfig((c: any) => ({ ...c, extra_models: nextExtra, vision_model: m }));
-    void applyPatch({ extra_models: nextExtra, vision_model: m });
+    void applyPatch({ extra_models: nextExtra, vision_model: m });
   };
   const removeCurrentModel = () => {
     if (!config) return;
@@ -804,7 +806,7 @@ function WorkersPanel({ ctx }: { ctx: any }) {
     const nextExtra = { ...extraModels, [p]: (extraModels[p] ?? []).filter((x) => x !== m) };
     const fallback = visionModelOptions.find((o) => o.value !== m)?.value ?? 'default';
     setConfig((c: any) => ({ ...c, extra_models: nextExtra, vision_model: fallback }));
-    void applyPatch({ extra_models: nextExtra, vision_model: fallback });
+    void applyPatch({ extra_models: nextExtra, vision_model: fallback });
   };
   const saveProviderForm = () => {
     if (!provForm || !config) return;
@@ -866,93 +868,120 @@ function WorkersPanel({ ctx }: { ctx: any }) {
       </div>
     );
   };
-  const deleteProvider = (id: string) => {
+  const deleteProvider = (id: string) => {
     if (!config) return;
     const patch: any = { custom_providers: customProviders.filter((p) => p.id !== id) };
     if (config.vision_provider === id) { patch.vision_provider = 'claude-code'; patch.vision_model = 'haiku'; }
     if (config.imagegen_provider === id) patch.imagegen_provider = 'codex';
     setConfig((c: any) => ({ ...c, ...patch }));
-    void applyPatch(patch);
-  };
-
-  const deleteHarnessProvider = async (record: any) => {
-    if (!record || record.ownership === 'harness' || record.desired_state === 'absent' || Number(record.references?.active_jobs ?? 0) > 0) {
-      setNotice(copy.providerDeleteBlocked);
-      return;
-    }
-    let replacementDefault: string | undefined;
-    if (record.references?.harness_default === true) {
-      const candidate = (providerInventory?.records ?? []).find((item: any) => item.id !== record.id
-        && item.desired_state !== 'absent' && item.ownership !== 'harness' && (item.models?.length ?? 0) > 0)?.id ?? '';
-      const entered = window.prompt(copy.providerReplacement, candidate);
-      if (!entered?.trim()) return;
-      replacementDefault = entered.trim();
-    }
-    setProviderLifecycleBusy(record.id);
-    setNotice(copy.working);
-    try {
-      const encoded = encodeURIComponent(record.id);
-      const planned = await post(`/providers/${encoded}/delete-plan`, replacementDefault ? { replacement_default: replacementDefault } : {});
-      if (!planned.ok || !planned.plan) throw new Error(planned.code ?? copy.providerLifecycleError);
-      if (!window.confirm(`${copy.providerPlanReady}\n\n${copy.providerDeleteConfirm}\n${(planned.plan.will_remove ?? []).join('\n')}`)) return;
-      const path = `/providers/${encoded}`;
-      const result = await readJson(await fetch(withLang(path), {
-        method: 'DELETE', headers: { 'content-type': 'application/json' },
-        body: JSON.stringify({ plan_id: planned.plan.plan_id, expected_revision: planned.plan.expected_revision, confirm: true, lang: locale === 'zh' ? 'zh' : 'en' }),
-      }), path);
-      if (!result.ok) throw new Error(result.code ?? result.error ?? copy.providerLifecycleError);
-      if (result.restart_required === true && result.result?.state === 'RESTART_PENDING') {
-        const restartPath = 'http://127.0.0.1:3080/_dsh/dsh-crew/supervisor/restart';
-        const restarted = await readJson(await fetch(restartPath, {
-          method: 'POST', headers: { 'content-type': 'application/json' },
-          body: JSON.stringify({ confirm: true }),
-        }), restartPath);
-        if (!restarted.ok) throw new Error(restarted.code ?? restarted.error ?? copy.providerLifecycleError);
-        const verified = await post(`/providers/${encoded}/verify-delete`, { transaction_id: planned.plan.plan_id, confirm: true });
-        if (!verified.ok || verified.state !== 'VERIFIED') throw new Error(verified.code ?? verified.error ?? copy.providerLifecycleError);
-      }
-      setNotice(copy.saved);
-      await refreshProviderInventory();
-    } catch (error: any) {
-      setNotice(String(error?.message ?? error));
-    } finally {
-      setProviderLifecycleBusy(null);
-    }
-  };
-
-  const rollbackHarnessProvider = async (record: any, transactionId: string) => {
-    if (!record || !transactionId || record.desired_state !== 'absent') {
-      setNotice(copy.providerRollbackUnavailable);
-      return;
-    }
-    if (!window.confirm(copy.providerRollbackConfirm)) return;
-    setProviderLifecycleBusy(`rollback:${record.id}`);
-    setNotice(copy.working);
-    try {
-      const encoded = encodeURIComponent(record.id);
-      const result = await post(`/providers/${encoded}/rollback`, { transaction_id: transactionId, confirm: true });
-      if (!result.ok) throw new Error(result.code ?? result.error ?? copy.providerLifecycleError);
-      if (result.restart_required === true && result.state === 'ROLLBACK_PENDING') {
-        const restartPath = 'http://127.0.0.1:3080/_dsh/dsh-crew/supervisor/restart';
-        const restarted = await readJson(await fetch(restartPath, {
-          method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ confirm: true }),
-        }), restartPath);
-        if (!restarted.ok) throw new Error(restarted.code ?? restarted.error ?? copy.providerLifecycleError);
-        const verified = await post(`/providers/${encoded}/verify-rollback`, { transaction_id: transactionId, confirm: true });
-        if (!verified.ok || verified.state !== 'ROLLED_BACK') throw new Error(verified.code ?? verified.error ?? copy.providerLifecycleError);
-      } else if (result.state !== 'ROLLED_BACK') {
-        throw new Error(result.code ?? copy.providerLifecycleError);
-      }
-      setNotice(copy.saved);
-      await refreshProviderInventory();
-    } catch (error: any) {
-      setNotice(String(error?.message ?? error));
-    } finally {
-      setProviderLifecycleBusy(null);
-    }
-  };
-
-  /** Card: title + one-line description header, then its fields. */
+    void applyPatch(patch);
+  };
+
+  const deleteHarnessProvider = async (record: any) => {
+    if (!record || record.delete_capability !== 'supported' || record.desired_state === 'absent' || Number(record.references?.active_jobs ?? 0) > 0) {
+      setNotice(copy.providerDeleteBlocked);
+      return;
+    }
+    let replacementDefault: string | undefined;
+    if (record.references?.harness_default === true) {
+      const candidate = (providerInventory?.records ?? []).find((item: any) => item.id === 'deepseek-official'
+        && item.id !== record.id && item.desired_state !== 'absent' && (item.models?.length ?? 0) > 0)?.id
+        ?? (providerInventory?.records ?? []).find((item: any) => item.id !== record.id
+          && item.desired_state !== 'absent' && item.delete_capability !== 'source-unresolved' && (item.models?.length ?? 0) > 0)?.id ?? '';
+      const entered = window.prompt(copy.providerReplacement, candidate);
+      if (!entered?.trim()) return;
+      replacementDefault = entered.trim();
+    }
+    setProviderLifecycleBusy(record.id);
+    setNotice(copy.working);
+    try {
+      const encoded = encodeURIComponent(record.id);
+      const planned = await post(`/providers/${encoded}/delete-plan`, replacementDefault ? { replacement_default: replacementDefault } : {});
+      if (!planned.ok || !planned.plan) throw new Error(planned.code ?? copy.providerLifecycleError);
+      if (!window.confirm(`${copy.providerPlanReady}\n\n${copy.providerDeleteConfirm}\n${(planned.plan.will_remove ?? []).join('\n')}`)) return;
+      const path = `/providers/${encoded}`;
+      const result = await readJson(await fetch(withLang(path), {
+        method: 'DELETE', headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ plan_id: planned.plan.plan_id, expected_revision: planned.plan.expected_revision, confirm: true, lang: locale === 'zh' ? 'zh' : 'en' }),
+      }), path);
+      if (!result.ok) throw new Error(result.code ?? result.error ?? copy.providerLifecycleError);
+      if (result.restart_required === true && result.result?.state === 'RESTART_PENDING') {
+        const restartPath = 'http://127.0.0.1:3080/_dsh/dsh-crew/supervisor/restart';
+        const restarted = await readJson(await fetch(restartPath, {
+          method: 'POST', headers: { 'content-type': 'application/json' },
+          body: JSON.stringify({ confirm: true }),
+        }), restartPath);
+        if (!restarted.ok) throw new Error(restarted.code ?? restarted.error ?? copy.providerLifecycleError);
+        const verified = await post(`/providers/${encoded}/verify-delete`, { transaction_id: planned.plan.plan_id, confirm: true });
+        if (!verified.ok || verified.state !== 'VERIFIED') throw new Error(verified.code ?? verified.error ?? copy.providerLifecycleError);
+      }
+      setNotice(copy.saved);
+      await refreshProviderInventory();
+    } catch (error: any) {
+      try { await refreshProviderInventory(); } catch { /* preserve the original lifecycle error */ }
+      setNotice(`${String(error?.message ?? error)} · ${copy.providerDeletePending}`);
+    } finally {
+      setProviderLifecycleBusy(null);
+    }
+  };
+
+  const rollbackHarnessProvider = async (record: any, transactionId: string, transactionState: string = 'VERIFIED') => {
+    const continuing = ['ROLLBACK_PENDING', 'ROLLBACK_RESTART_PENDING'].includes(transactionState);
+    const recoverable = ['PLANNED', 'TOMBSTONE_APPLYING', 'TOMBSTONE_APPLIED', 'REFERENCES_APPLYING', 'REFERENCES_APPLIED', 'DECLARATIONS_APPLYING', 'DECLARATIONS_APPLIED', 'DELETE_RESTART_PENDING', 'ROLLBACK_APPLYING', 'ROLLBACK_RESTORED'].includes(transactionState);
+    if (!record || !transactionId || (!continuing && !recoverable && record.desired_state !== 'absent')) {
+      setNotice(copy.providerRollbackUnavailable);
+      return;
+    }
+    if (!window.confirm(copy.providerRollbackConfirm)) return;
+    setProviderLifecycleBusy(`rollback:${record.id}`);
+    setNotice(copy.working);
+    try {
+      const encoded = encodeURIComponent(record.id);
+      const result = continuing
+        ? { ok: true, restart_required: true, state: 'ROLLBACK_PENDING' }
+        : await post(`/providers/${encoded}/rollback`, { transaction_id: transactionId, confirm: true });
+      if (!result.ok) throw new Error(result.code ?? result.error ?? copy.providerLifecycleError);
+      if (result.restart_required === true && result.state === 'ROLLBACK_PENDING') {
+        const restartPath = 'http://127.0.0.1:3080/_dsh/dsh-crew/supervisor/restart';
+        const restarted = await readJson(await fetch(restartPath, {
+          method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ confirm: true }),
+        }), restartPath);
+        if (!restarted.ok) throw new Error(restarted.code ?? restarted.error ?? copy.providerLifecycleError);
+        const verified = await post(`/providers/${encoded}/verify-rollback`, { transaction_id: transactionId, confirm: true });
+        if (!verified.ok || verified.state !== 'ROLLED_BACK') throw new Error(verified.code ?? verified.error ?? copy.providerLifecycleError);
+      } else if (result.state !== 'ROLLED_BACK') {
+        throw new Error(result.code ?? copy.providerLifecycleError);
+      }
+      setNotice(copy.saved);
+      await refreshProviderInventory();
+    } catch (error: any) {
+      try { await refreshProviderInventory(); } catch { /* preserve the original lifecycle error */ }
+      setNotice(`${String(error?.message ?? error)} · ${copy.providerDeletePending}`);
+    } finally {
+      setProviderLifecycleBusy(null);
+    }
+  };
+
+  const quarantineRecoveryTransaction = async (entry: any) => {
+    const actionId = typeof entry?.action_id === 'string' ? entry.action_id : '';
+    if (!actionId || entry?.recoverable === true) return;
+    if (!window.confirm(copy.recoveryQuarantineConfirm)) return;
+    setProviderLifecycleBusy(`quarantine:${actionId}`);
+    setNotice(copy.working);
+    try {
+      const result = await post('/providers/_recovery/quarantine', { action_id: actionId, confirm: true });
+      if (!result.ok) throw new Error(result.code ?? result.error ?? copy.providerLifecycleError);
+      setNotice(copy.saved);
+      await refreshProviderInventory();
+    } catch (error: any) {
+      try { await refreshProviderInventory(); } catch { /* preserve the original recovery error */ }
+      setNotice(String(error?.message ?? error));
+    } finally {
+      setProviderLifecycleBusy(null);
+    }
+  };
+
+  /** Card: title + one-line description header, then its fields. */
   const block = (text: { t: string; d: string }, fields: any, gridded = true) => (
     <div style={S.block}>
       <div>
@@ -963,69 +992,69 @@ function WorkersPanel({ ctx }: { ctx: any }) {
     </div>
   );
 
-  const integrationRow = (name: string, installed: boolean, ready: boolean, extra: any, installTarget: string, uninstallTarget: string, tips: any) => (
-    <div style={S.card}>
-      <span style={{ fontWeight: 600, fontSize: 13, minWidth: 92 }}>{name}</span>
-      <span style={S.chip(installed)}>{installed ? `● ${copy.installed}` : `○ ${copy.notInstalled}`}</span>
-      <span style={S.chip(ready)}>{ready ? `● ${copy.ready}` : `○ ${copy.notReady}`}</span>
-      {extra}
+  const integrationRow = (name: string, installed: boolean, ready: boolean, extra: any, installTarget: string, uninstallTarget: string, tips: any) => (
+    <div style={S.card}>
+      <span style={{ fontWeight: 600, fontSize: 13, minWidth: 92 }}>{name}</span>
+      <span style={S.chip(installed)}>{installed ? `● ${copy.installed}` : `○ ${copy.notInstalled}`}</span>
+      <span style={S.chip(ready)}>{ready ? `● ${copy.ready}` : `○ ${copy.notReady}`}</span>
+      {extra}
       <span style={{ flex: 1 }} />
       {!installed && <button style={S.btn} title={tips.install} disabled={busy} onClick={() => { void act(installTarget); }}>{copy.install}</button>}
       {installed && <button style={S.btn} title={tips.update} disabled={busy} onClick={() => { void act(installTarget); }}>{copy.update}</button>}
       {installed && <button style={{ ...S.btn, opacity: 0.75 }} title={tips.restore} disabled={busy} onClick={() => { void act(uninstallTarget, name); }}>{copy.restore}</button>}
     </div>
-  );
-
-  const adaptive = normalizeAdaptive(config?.worker?.model_policy?.adaptive);
-  const setAdaptiveLocal = (candidate: AdaptiveConfig) => {
-    const next = normalizeAdaptive(candidate);
-    const ordering = next.enabled ? 'health-aware' : 'manual';
-    setConfig((current: any) => ({
-      ...current,
-      worker: {
-        ...current.worker,
-        model_policy: { ...current.worker?.model_policy, adaptive: next, ordering },
-      },
-    }));
-    return { next, ordering };
-  };
-  const saveAdaptive = (candidate: AdaptiveConfig) => {
-    const { next, ordering } = setAdaptiveLocal(candidate);
-    void applyPatch({ worker: { model_policy: { adaptive: next, ordering } } });
-  };
-  const modelActivity = aggregateModelInvocations(jobs);
-  const currentSurfaceResponsibilities = surfaceResponsibilities(surface);
-  const hostReadiness = projectHostReadiness({ installStatus: status, runtime: runtimeInfo, surface, readinessSnapshot });
-
-  if (!currentSurfaceResponsibilities.fullControlPlane) {
-    return <MinimalCrewPanel locale={locale} surface={surface} runtime={runtimeInfo} />;
-  }
-
-  return (
-    <div style={{ display: 'flex', flexDirection: 'column', gap: 8, fontSize: 13, lineHeight: 1.55 }}>
-      <div style={{
-        border: '1px solid rgba(128,128,128,0.24)', borderRadius: 12, padding: '14px 15px',
-        display: 'flex', gap: 14, alignItems: 'center', flexWrap: 'wrap',
-        background: 'linear-gradient(135deg, rgba(74,158,255,0.10), rgba(128,128,128,0.025) 56%)',
-      }}>
-        <div style={{ minWidth: 240, flex: 1 }}>
-          <div style={{ fontSize: 20, fontWeight: 680, letterSpacing: '-0.01em' }}>{copy.title}</div>
-          <div style={{ opacity: 0.7, fontSize: 12.5, marginTop: 2 }}>{copy.intro}</div>
-          <div style={{ display: 'flex', gap: 6, marginTop: 8, flexWrap: 'wrap' }}>
-            <span style={S.chip(!!status?.codex?.ready)}>Codex {status?.codex?.ready ? 'READY' : 'CHECK'}</span>
-            <span style={S.chip(!!status?.claude?.ready)}>Claude {status?.claude?.ready ? 'READY' : 'CHECK'}</span>
-            <span style={S.chip(!!status?.zcode?.ready)}>ZCode {status?.zcode?.ready ? 'READY' : 'CHECK'}</span>
-            <span style={S.chip(jobs.some((job) => job.status === 'running'))}>{jobs.filter((job) => job.status === 'running').length} running</span>
-          </div>
-        </div>
-        <div style={{ display: 'flex', flexDirection: 'column', alignItems: 'flex-end', gap: 3 }}>
-          <a href={CREW_HARNESS_URL} target="_blank" rel="noopener noreferrer" style={{
-            ...S.btn, textDecoration: 'none', fontWeight: 650, padding: '7px 12px',
-            borderColor: 'rgba(74,158,255,0.55)', background: 'rgba(74,158,255,0.10)',
-          }}>{copy.openHarness}</a>
-          <span style={{ fontSize: 10.5, opacity: 0.52 }}>{copy.harnessHint}</span>
-        </div>
-      </div>
+  );
+
+  const adaptive = normalizeAdaptive(config?.worker?.model_policy?.adaptive);
+  const setAdaptiveLocal = (candidate: AdaptiveConfig) => {
+    const next = normalizeAdaptive(candidate);
+    const ordering = next.enabled ? 'health-aware' : 'manual';
+    setConfig((current: any) => ({
+      ...current,
+      worker: {
+        ...current.worker,
+        model_policy: { ...current.worker?.model_policy, adaptive: next, ordering },
+      },
+    }));
+    return { next, ordering };
+  };
+  const saveAdaptive = (candidate: AdaptiveConfig) => {
+    const { next, ordering } = setAdaptiveLocal(candidate);
+    void applyPatch({ worker: { model_policy: { adaptive: next, ordering } } });
+  };
+  const modelActivity = aggregateModelInvocations(jobs);
+  const currentSurfaceResponsibilities = surfaceResponsibilities(surface);
+  const hostReadiness = projectHostReadiness({ installStatus: status, runtime: runtimeInfo, surface, readinessSnapshot });
+
+  if (!currentSurfaceResponsibilities.fullControlPlane) {
+    return <MinimalCrewPanel locale={locale} surface={surface} runtime={runtimeInfo} />;
+  }
+
+  return (
+    <div style={{ display: 'flex', flexDirection: 'column', gap: 8, fontSize: 13, lineHeight: 1.55 }}>
+      <div style={{
+        border: '1px solid rgba(128,128,128,0.24)', borderRadius: 12, padding: '14px 15px',
+        display: 'flex', gap: 14, alignItems: 'center', flexWrap: 'wrap',
+        background: 'linear-gradient(135deg, rgba(74,158,255,0.10), rgba(128,128,128,0.025) 56%)',
+      }}>
+        <div style={{ minWidth: 240, flex: 1 }}>
+          <div style={{ fontSize: 20, fontWeight: 680, letterSpacing: '-0.01em' }}>{copy.title}</div>
+          <div style={{ opacity: 0.7, fontSize: 12.5, marginTop: 2 }}>{copy.intro}</div>
+          <div style={{ display: 'flex', gap: 6, marginTop: 8, flexWrap: 'wrap' }}>
+            <span style={S.chip(!!status?.codex?.ready)}>Codex {status?.codex?.ready ? 'READY' : 'CHECK'}</span>
+            <span style={S.chip(!!status?.claude?.ready)}>Claude {status?.claude?.ready ? 'READY' : 'CHECK'}</span>
+            <span style={S.chip(!!status?.zcode?.ready)}>ZCode {status?.zcode?.ready ? 'READY' : 'CHECK'}</span>
+            <span style={S.chip(jobs.some((job) => job.status === 'running'))}>{jobs.filter((job) => job.status === 'running').length} running</span>
+          </div>
+        </div>
+        <div style={{ display: 'flex', flexDirection: 'column', alignItems: 'flex-end', gap: 3 }}>
+          <a href={CREW_HARNESS_URL} target="_blank" rel="noopener noreferrer" style={{
+            ...S.btn, textDecoration: 'none', fontWeight: 650, padding: '7px 12px',
+            borderColor: 'rgba(74,158,255,0.55)', background: 'rgba(74,158,255,0.10)',
+          }}>{copy.openHarness}</a>
+          <span style={{ fontSize: 10.5, opacity: 0.52 }}>{copy.harnessHint}</span>
+        </div>
+      </div>
 
       <div style={{ display: 'flex', alignItems: 'center', gap: 7, marginTop: 5 }}>
         <div style={{ ...S.section, margin: 0, flex: 1 }}>{copy.globalConfig}</div>
@@ -1033,36 +1062,36 @@ function WorkersPanel({ ctx }: { ctx: any }) {
         <button type="button" style={{ ...S.btn, padding: '3px 9px' }} onClick={() => toggleAllSections(false)}>{copy.collapseAll}</button>
       </div>
 
-      <CollapsibleSection sectionId="integrations" title={copy.sectionNames.integrations}
-        summary={sectionSummary(status?.claude?.ready ? 'Claude READY' : 'Claude CHECK', `${status?.codex?.ready ? 'Codex READY' : 'Codex CHECK'} · ${status?.zcode?.ready ? 'ZCode READY' : 'ZCode CHECK'}`)}
-        expanded={!!expandedSections.integrations} onToggle={() => toggleSection('integrations')}>
-        <div style={{ display: 'flex', flexDirection: 'column', gap: 8 }}>
-          <div style={S.block}>
-            <div>
-              <div style={S.settingTitle}>{copy.hostReadiness}</div>
-              <div style={S.settingDesc}>{copy.hostReadinessHint}</div>
-            </div>
-            <div style={{ display: 'grid', gridTemplateColumns: 'repeat(2, minmax(0, 1fr))', gap: '6px 10px' }}>
-              {hostReadiness.map((row) => (
-                <div key={row.id} style={{ display: 'flex', gap: 8, alignItems: 'center', minWidth: 0, padding: '4px 7px', border: '1px solid rgba(128,128,128,0.16)', borderRadius: 7 }}>
-                  <span style={{ flex: 1, minWidth: 0, fontSize: 11.5 }}>{(copy as any).readinessLabels[row.id]}</span>
-                  {row.detail && <span style={{ ...S.mono, opacity: 0.55 }}>{row.detail}</span>}
-                  <span style={readinessChip(row.state)}>{(copy as any).readinessStates[row.state]}</span>
-                </div>
-              ))}
-            </div>
-          </div>
-          {integrationRow('Claude Code', !!status?.claude?.installed, !!status?.claude?.ready,
-            status?.claude?.installed ? <span style={S.chip(!!status?.claude?.hud)}>{copy.hud}</span> : null,
-            'claude', 'claude-uninstall', (copy as any).tips.claude)}
-          {integrationRow('Codex', !!status?.codex?.installed, !!status?.codex?.ready,
-            status?.codex?.ready ? null : <span title={(status?.codex?.missing ?? []).join(', ')} style={{ fontSize: 11, opacity: 0.6 }}>{(status?.codex?.missing ?? []).join(' · ')}</span>,
-            'codex', 'codex-uninstall', (copy as any).tips.codex)}
-          {integrationRow('ZCode', !!status?.zcode?.installed, !!status?.zcode?.ready,
-            status?.zcode?.ready ? null : <span title={(status?.zcode?.missing ?? []).join(', ')} style={{ fontSize: 11, opacity: 0.6 }}>{(status?.zcode?.missing ?? []).join(' · ')}</span>,
-            'zcode', 'zcode-uninstall', (copy as any).tips.zcode)}
-        </div>
-      </CollapsibleSection>
+      <CollapsibleSection sectionId="integrations" title={copy.sectionNames.integrations}
+        summary={sectionSummary(status?.claude?.ready ? 'Claude READY' : 'Claude CHECK', `${status?.codex?.ready ? 'Codex READY' : 'Codex CHECK'} · ${status?.zcode?.ready ? 'ZCode READY' : 'ZCode CHECK'}`)}
+        expanded={!!expandedSections.integrations} onToggle={() => toggleSection('integrations')}>
+        <div style={{ display: 'flex', flexDirection: 'column', gap: 8 }}>
+          <div style={S.block}>
+            <div>
+              <div style={S.settingTitle}>{copy.hostReadiness}</div>
+              <div style={S.settingDesc}>{copy.hostReadinessHint}</div>
+            </div>
+            <div style={{ display: 'grid', gridTemplateColumns: 'repeat(2, minmax(0, 1fr))', gap: '6px 10px' }}>
+              {hostReadiness.map((row) => (
+                <div key={row.id} style={{ display: 'flex', gap: 8, alignItems: 'center', minWidth: 0, padding: '4px 7px', border: '1px solid rgba(128,128,128,0.16)', borderRadius: 7 }}>
+                  <span style={{ flex: 1, minWidth: 0, fontSize: 11.5 }}>{(copy as any).readinessLabels[row.id]}</span>
+                  {row.detail && <span style={{ ...S.mono, opacity: 0.55 }}>{row.detail}</span>}
+                  <span style={readinessChip(row.state)}>{(copy as any).readinessStates[row.state]}</span>
+                </div>
+              ))}
+            </div>
+          </div>
+          {integrationRow('Claude Code', !!status?.claude?.installed, !!status?.claude?.ready,
+            status?.claude?.installed ? <span style={S.chip(!!status?.claude?.hud)}>{copy.hud}</span> : null,
+            'claude', 'claude-uninstall', (copy as any).tips.claude)}
+          {integrationRow('Codex', !!status?.codex?.installed, !!status?.codex?.ready,
+            status?.codex?.ready ? null : <span title={(status?.codex?.missing ?? []).join(', ')} style={{ fontSize: 11, opacity: 0.6 }}>{(status?.codex?.missing ?? []).join(' · ')}</span>,
+            'codex', 'codex-uninstall', (copy as any).tips.codex)}
+          {integrationRow('ZCode', !!status?.zcode?.installed, !!status?.zcode?.ready,
+            status?.zcode?.ready ? null : <span title={(status?.zcode?.missing ?? []).join(', ')} style={{ fontSize: 11, opacity: 0.6 }}>{(status?.zcode?.missing ?? []).join(' · ')}</span>,
+            'zcode', 'zcode-uninstall', (copy as any).tips.zcode)}
+        </div>
+      </CollapsibleSection>
 
       {config && (<>
         {(() => {
@@ -1088,18 +1117,18 @@ function WorkersPanel({ ctx }: { ctx: any }) {
           const savePriority = (tier: string, list: any[]) => {
             const key = `${tier}_model_priority`;
             setConfig((current: any) => ({ ...current, [key]: list, [`${tier}_model_priority_configured`]: true }));
-              void applyPatch({ [key]: list });
+              void applyPatch({ [key]: list });
           };
-          const modelMeta = (ref: any) => {
+          const modelMeta = (ref: any) => {
             const provider = catalogProviders.find((item) => item.id === ref.provider);
             const model = provider?.models?.find((item: any) => item.id === ref.model);
-            return { provider, model };
-          };
-          const modelHealth = (ref: any) => providerHealth.find((entry: any) => entry.provider === ref.provider && entry.model === ref.model && entry.fresh === true) ?? null;
-          const healthLabel = (health: any) => health?.state ? String(health.state).toUpperCase().replace(/-/g, ' ') : copy.healthUnprobed;
-          const healthAge = (health: any) => Number.isFinite(health?.observed_at)
-            ? copy.checkedAgo(Math.max(0, Math.round((Date.now() - health.observed_at) / 1000)))
-            : '';
+            return { provider, model };
+          };
+          const modelHealth = (ref: any) => providerHealth.find((entry: any) => entry.provider === ref.provider && entry.model === ref.model && entry.fresh === true) ?? null;
+          const healthLabel = (health: any) => health?.state ? String(health.state).toUpperCase().replace(/-/g, ' ') : copy.healthUnprobed;
+          const healthAge = (health: any) => Number.isFinite(health?.observed_at)
+            ? copy.checkedAgo(Math.max(0, Math.round((Date.now() - health.observed_at) / 1000)))
+            : '';
           const filteredProviders = catalogProviders.map((provider) => ({
             ...provider,
             models: (provider.models ?? []).filter((model: any) => {
@@ -1121,19 +1150,19 @@ function WorkersPanel({ ctx }: { ctx: any }) {
                 {priority.length === 0 && <div style={{ fontSize: 12, opacity: 0.55, marginBottom: 6 }}>{copy.noPriority}</div>}
                 {ambiguousPreferred && <div style={{ fontSize: 11.5, color: '#c98735', marginBottom: 6 }}>{copy.needsModelSelection}</div>}
                 <div style={{ display: 'flex', flexDirection: 'column', gap: 5 }}>
-                  {priority.map((ref, index) => {
-                    const meta = modelMeta(ref);
-                    const health = modelHealth(ref);
-                    const warning = !meta.provider ? copy.providerUnavailable : !meta.model ? copy.notAdvertised : '';
+                  {priority.map((ref, index) => {
+                    const meta = modelMeta(ref);
+                    const health = modelHealth(ref);
+                    const warning = !meta.provider ? copy.providerUnavailable : !meta.model ? copy.notAdvertised : '';
                     return (
                       <div key={refKey(ref)} style={{ display: 'flex', gap: 7, alignItems: 'center', padding: '6px 8px', border: '1px solid rgba(128,128,128,0.2)', borderRadius: 6 }}>
                         <span style={{ opacity: 0.55, width: 18 }}>{index + 1}.</span>
                         <span style={{ flex: 1, minWidth: 0 }}>
                           <span style={{ display: 'block', fontSize: 12.5 }}>{meta.model?.name ?? ref.model}</span>
-                          <span style={{ display: 'block', fontSize: 10.5, opacity: 0.58, fontFamily: 'monospace' }}>{ref.provider} / {ref.model}</span>
-                          <span style={{ display: 'block', fontSize: 10.5, color: health?.state === 'callable' ? '#3fb950' : health ? '#c98735' : 'inherit', opacity: health ? 0.9 : 0.5 }}>
-                            {healthLabel(health)}{healthAge(health) ? ` · ${healthAge(health)}` : ''}
-                          </span>
+                          <span style={{ display: 'block', fontSize: 10.5, opacity: 0.58, fontFamily: 'monospace' }}>{ref.provider} / {ref.model}</span>
+                          <span style={{ display: 'block', fontSize: 10.5, color: health?.state === 'callable' ? '#3fb950' : health ? '#c98735' : 'inherit', opacity: health ? 0.9 : 0.5 }}>
+                            {healthLabel(health)}{healthAge(health) ? ` · ${healthAge(health)}` : ''}
+                          </span>
                           {warning && <span style={{ display: 'block', fontSize: 10.5, color: '#c98735' }}>{warning}</span>}
                         </span>
                         <button type="button" style={{ ...S.btn, padding: '2px 7px' }} title={copy.moveUp} disabled={index === 0}
@@ -1225,31 +1254,31 @@ function WorkersPanel({ ctx }: { ctx: any }) {
                   <CustomSelect value={config.review_state ?? 'auto'} onChange={(v) => field('review_state', v)}
                     options={(['auto', 'manual', 'disabled'] as const).map((s) => ({ value: s, label: copy.tierStateDesc[s] }))} /></label>
               </>))}
-              {block({ t: copy.autoReview, d: copy.autoReviewHint }, (
-                <>
-                  <label style={{ ...S.field, flexDirection: 'row' as const, alignItems: 'center', gap: 6 }}>
-                    <input type="checkbox" checked={config.auto_review ?? !!config.pro_reviews_flash} onChange={(e) => field('auto_review', e.target.checked)} />
-                    <span style={{ fontSize: 12.5 }}>{copy.autoReview}</span>
-                  </label>
-                  <label style={S.field}><span style={S.fieldLabel}>{copy.reviewGate}</span>
-                    <CustomSelect value={config.review?.gate ?? 'required'} onChange={(v) => reviewField({ gate: v })}
-                      options={(['required', 'optional', 'off'] as const).map((value) => ({ value, label: copy.reviewGateDesc[value] }))} /></label>
-                </>
-              ))}
-              {block({ t: copy.modelOrdering, d: copy.orderingHint }, (<>
-                {(['worker', 'review'] as const).map((role) => (
-                  <div key={role} style={{ display: 'contents' }}>
-                    <label style={S.field}><span style={S.fieldLabel}>{role === 'worker' ? copy.roleWorker : copy.roleReviewer} · {copy.modelOrdering}</span>
-                      <CustomSelect value={config?.[role]?.model_policy?.ordering ?? 'manual'}
-                        onChange={(v) => rolePolicyField(role, { ordering: v })}
-                        options={(['manual', 'health-aware'] as const).map((value) => ({ value, label: copy.orderingDesc[value] }))} /></label>
-                    <label style={S.field}><span style={S.fieldLabel}>{role === 'worker' ? copy.roleWorker : copy.roleReviewer} · {copy.healthGate}</span>
-                      <CustomSelect value={config?.[role]?.model_policy?.health_gate ?? 'hard-failures'}
-                        onChange={(v) => rolePolicyField(role, { health_gate: v })}
-                        options={(['hard-failures', 'off'] as const).map((value) => ({ value, label: copy.healthGateDesc[value] }))} /></label>
-                  </div>
-                ))}
-              </>))}
+              {block({ t: copy.autoReview, d: copy.autoReviewHint }, (
+                <>
+                  <label style={{ ...S.field, flexDirection: 'row' as const, alignItems: 'center', gap: 6 }}>
+                    <input type="checkbox" checked={config.auto_review ?? !!config.pro_reviews_flash} onChange={(e) => field('auto_review', e.target.checked)} />
+                    <span style={{ fontSize: 12.5 }}>{copy.autoReview}</span>
+                  </label>
+                  <label style={S.field}><span style={S.fieldLabel}>{copy.reviewGate}</span>
+                    <CustomSelect value={config.review?.gate ?? 'required'} onChange={(v) => reviewField({ gate: v })}
+                      options={(['required', 'optional', 'off'] as const).map((value) => ({ value, label: copy.reviewGateDesc[value] }))} /></label>
+                </>
+              ))}
+              {block({ t: copy.modelOrdering, d: copy.orderingHint }, (<>
+                {(['worker', 'review'] as const).map((role) => (
+                  <div key={role} style={{ display: 'contents' }}>
+                    <label style={S.field}><span style={S.fieldLabel}>{role === 'worker' ? copy.roleWorker : copy.roleReviewer} · {copy.modelOrdering}</span>
+                      <CustomSelect value={config?.[role]?.model_policy?.ordering ?? 'manual'}
+                        onChange={(v) => rolePolicyField(role, { ordering: v })}
+                        options={(['manual', 'health-aware'] as const).map((value) => ({ value, label: copy.orderingDesc[value] }))} /></label>
+                    <label style={S.field}><span style={S.fieldLabel}>{role === 'worker' ? copy.roleWorker : copy.roleReviewer} · {copy.healthGate}</span>
+                      <CustomSelect value={config?.[role]?.model_policy?.health_gate ?? 'hard-failures'}
+                        onChange={(v) => rolePolicyField(role, { health_gate: v })}
+                        options={(['hard-failures', 'off'] as const).map((value) => ({ value, label: copy.healthGateDesc[value] }))} /></label>
+                  </div>
+                ))}
+              </>))}
               {block({ t: copy.isolation, d: copy.isolationHint }, (<>
                 <label style={S.field}><span style={S.fieldLabel}>{copy.isolation}</span>
                   <CustomSelect value={config.isolation ?? 'worktree'} onChange={(v) => field('isolation', v)}
@@ -1274,7 +1303,7 @@ function WorkersPanel({ ctx }: { ctx: any }) {
                   <CustomSelect value={mode} onChange={(v) => field('collaboration_mode', v)}
                     options={(['flash-only', 'pro-only', 'balanced', 'review-pipeline', 'custom'] as const).map((m) => ({ value: m, label: copy.collaborationModeDesc[m] }))} /></label>
                 <label style={S.field} title={copy.workerProviderHint}><span style={S.fieldLabel}>{copy.workerProvider}</span>
-                  <CustomSelect value={config.worker_provider_mode ?? 'follow-dsh'} onChange={(v) => field('worker_provider_mode', v)}
+                  <CustomSelect value={config.worker_provider_mode ?? 'deepseek-official'} onChange={(v) => field('worker_provider_mode', v)}
                     options={(['follow-dsh', 'deepseek-official'] as const).map((m) => ({ value: m, label: copy.workerProviderDesc[m] }))} /></label>
               </>))}
               {block({ t: copy.workerModels, d: modelCatalog ? copy.modelPoolSummary(modelCatalog.provider_count ?? 0, modelCatalog.model_count ?? 0) : copy.catalogFailed }, (<>
@@ -1328,48 +1357,48 @@ function WorkersPanel({ ctx }: { ctx: any }) {
           <label style={S.field}><span style={S.fieldLabel}>{copy.presetPro}</span>
             <CustomSelect value={config.preset_pro ?? 'default'} onChange={(v) => field('preset_pro', v)} options={presetOptions} /></label>
           </>))}
-        </CollapsibleSection>
-
-        <CollapsibleSection sectionId="adaptive" title={copy.sectionNames.adaptive}
-          summary={sectionSummary(adaptive.enabled ? copy.adaptiveEnabled : 'off', `${adaptive.min_samples}/${adaptive.window_size}`, copy.adaptiveBoundary)}
-          expanded={!!expandedSections.adaptive} onToggle={() => toggleSection('adaptive')}>
-          {block({ t: copy.adaptiveTitle, d: copy.adaptiveHint }, (<>
-            <label style={{ ...S.field, flexDirection: 'row' as const, alignItems: 'center', gap: 7, gridColumn: '1 / -1' }}>
-              <input type="checkbox" checked={adaptive.enabled}
-                onChange={(event) => saveAdaptive({ ...adaptive, enabled: event.target.checked })} />
-              <span style={{ fontSize: 12.5 }}>{copy.adaptiveEnabled}</span>
-              <span style={{ fontSize: 11, opacity: 0.55 }}>· {copy.adaptiveBoundary}</span>
-            </label>
-            <label style={S.field}><span style={S.fieldLabel}>{copy.adaptiveWindow}</span>
-              <input type="number" min={1} max={32} value={adaptive.window_size} style={S.input}
-                onChange={(event) => setAdaptiveLocal({ ...adaptive, window_size: clampInt(event.target.value, adaptive.window_size, 1, 32) })}
-                onBlur={() => saveAdaptive(adaptive)} /></label>
-            <label style={S.field}><span style={S.fieldLabel}>{copy.adaptiveSamples}</span>
-              <input type="number" min={1} max={adaptive.window_size} value={adaptive.min_samples} style={S.input}
-                onChange={(event) => setAdaptiveLocal({ ...adaptive, min_samples: clampInt(event.target.value, adaptive.min_samples, 1, adaptive.window_size) })}
-                onBlur={() => saveAdaptive(adaptive)} /></label>
-          </>))}
-        </CollapsibleSection>
-
-        <CollapsibleSection sectionId="runtime" title={copy.sectionNames.runtime}
+        </CollapsibleSection>
+
+        <CollapsibleSection sectionId="adaptive" title={copy.sectionNames.adaptive}
+          summary={sectionSummary(adaptive.enabled ? copy.adaptiveEnabled : 'off', `${adaptive.min_samples}/${adaptive.window_size}`, copy.adaptiveBoundary)}
+          expanded={!!expandedSections.adaptive} onToggle={() => toggleSection('adaptive')}>
+          {block({ t: copy.adaptiveTitle, d: copy.adaptiveHint }, (<>
+            <label style={{ ...S.field, flexDirection: 'row' as const, alignItems: 'center', gap: 7, gridColumn: '1 / -1' }}>
+              <input type="checkbox" checked={adaptive.enabled}
+                onChange={(event) => saveAdaptive({ ...adaptive, enabled: event.target.checked })} />
+              <span style={{ fontSize: 12.5 }}>{copy.adaptiveEnabled}</span>
+              <span style={{ fontSize: 11, opacity: 0.55 }}>· {copy.adaptiveBoundary}</span>
+            </label>
+            <label style={S.field}><span style={S.fieldLabel}>{copy.adaptiveWindow}</span>
+              <input type="number" min={1} max={32} value={adaptive.window_size} style={S.input}
+                onChange={(event) => setAdaptiveLocal({ ...adaptive, window_size: clampInt(event.target.value, adaptive.window_size, 1, 32) })}
+                onBlur={() => saveAdaptive(adaptive)} /></label>
+            <label style={S.field}><span style={S.fieldLabel}>{copy.adaptiveSamples}</span>
+              <input type="number" min={1} max={adaptive.window_size} value={adaptive.min_samples} style={S.input}
+                onChange={(event) => setAdaptiveLocal({ ...adaptive, min_samples: clampInt(event.target.value, adaptive.min_samples, 1, adaptive.window_size) })}
+                onBlur={() => saveAdaptive(adaptive)} /></label>
+          </>))}
+        </CollapsibleSection>
+
+        <CollapsibleSection sectionId="runtime" title={copy.sectionNames.runtime}
           summary={sectionSummary(config.mode, `${config.default_timeout_seconds}s`, config.hub_url)}
           expanded={!!expandedSections.runtime} onToggle={() => toggleSection('runtime')}>
           {block(copy.cardRuntime, (<>
           <label style={S.field}><span style={S.fieldLabel}>{copy.mode}</span>
             <CustomSelect value={config.mode} onChange={(v) => field('mode', v)}
-              options={(['auto', 'hub'] as const).map((m) => ({ value: m, label: copy.modeDesc[m] }))} /></label>
+              options={(['auto', 'hub'] as const).map((m) => ({ value: m, label: copy.modeDesc[m] }))} /></label>
           <label style={S.field}><span style={S.fieldLabel}>{copy.timeout}</span>
             <input style={{ ...S.input, width: '100%', boxSizing: 'border-box' as const }} type="number" min={60} max={7200} value={config.default_timeout_seconds}
               onChange={(e) => fieldLocal('default_timeout_seconds', Number(e.target.value))}
-              onBlur={() => { void applyPatch({ default_timeout_seconds: config.default_timeout_seconds }); }} /></label>
+              onBlur={() => { void applyPatch({ default_timeout_seconds: config.default_timeout_seconds }); }} /></label>
           <label style={S.field}><span style={S.fieldLabel}>{copy.hubUrl}</span>
             <input style={{ ...S.input, width: '100%', boxSizing: 'border-box' as const }} value={config.hub_url}
               onChange={(e) => fieldLocal('hub_url', e.target.value)}
-              onBlur={() => { void applyPatch({ hub_url: config.hub_url }); }}
+              onBlur={() => { void applyPatch({ hub_url: config.hub_url }); }}
               onKeyDown={(e: any) => { if (e.key === 'Enter') e.currentTarget.blur(); }} /></label>
-          </>))}
-          <ActivationSummary activation={config.config_activation} locale={locale} />
-        </CollapsibleSection>
+          </>))}
+          <ActivationSummary activation={config.config_activation} locale={locale} />
+        </CollapsibleSection>
 
         <CollapsibleSection sectionId="multimodal" title={copy.sectionNames.multimodal}
           summary={sectionSummary(config.vision_enabled ? `${copy.capVision}: ${config.vision_provider}` : `${copy.capVision}: off`, config.imagegen_enabled ? `${copy.capImagegen}: ${config.imagegen_provider}` : `${copy.capImagegen}: off`)}
@@ -1387,7 +1416,7 @@ function WorkersPanel({ ctx }: { ctx: any }) {
                 const m = custom ? (custom.models?.[0] ?? 'default') : (VISION_MODELS[p] ?? ['default'])[0];
                 setModelAdd(null);
                 setConfig((c: any) => ({ ...c, vision_provider: p, vision_model: m }));
-                    void applyPatch({ vision_provider: p, vision_model: m });
+                    void applyPatch({ vision_provider: p, vision_model: m });
                 if ((p === 'grok' || p === 'agy') && !dynModels[p]) {
                   void get(`/vision-models?provider=${p}`).then((r) => {
                     if (r.ok) setDynModels((d) => ({ ...d, [p]: r.models }));
@@ -1442,69 +1471,89 @@ function WorkersPanel({ ctx }: { ctx: any }) {
           </>))}
         </CollapsibleSection>
 
-        <CollapsibleSection sectionId="harnessProviders" title={copy.sectionNames.harnessProviders}
-          summary={sectionSummary(copy.providerCount(providerInventory?.records?.length ?? 0), providerInventoryError ? copy.providerLifecycleError : '')}
-          expanded={!!expandedSections.harnessProviders} onToggle={() => toggleSection('harnessProviders')}>
-          {providerInventoryError && <div style={{ fontSize: 12, color: '#c55' }}>{providerInventoryError}</div>}
-          {!providerInventoryError && (providerInventory?.records?.length ?? 0) === 0 && (
-            <div style={{ fontSize: 12, opacity: 0.55 }}>{copy.providerNoInventory}</div>
-          )}
-          {(providerInventory?.records ?? []).map((record: any) => {
-            const blocked = record.ownership === 'harness' || record.desired_state === 'absent' || Number(record.references?.active_jobs ?? 0) > 0;
-            const lifecycle = record.desired_state === 'absent' ? 'absent' : record.lifecycle?.enabled === false ? 'disabled' : record.lifecycle?.catalogued ? 'catalogued' : 'configured';
-            const rollbackTransaction = (providerInventory?.lifecycle_transactions ?? []).find((entry: any) => entry.provider_id === record.id && ['VERIFIED', 'RESTART_PENDING'].includes(entry.state));
-            return (
-              <div key={record.id} style={{ display: 'flex', alignItems: 'center', gap: 8, fontSize: 12.5, flexWrap: 'wrap' as const }}>
-                <span style={{ fontWeight: 600 }}>{record.display_name || record.id}</span>
-                <span style={{ ...S.chip(record.lifecycle?.enabled === true), ...S.mono }}>{record.id}</span>
-                <span style={{ opacity: 0.65 }}>{copy.providerState(lifecycle)}</span>
-                <span style={{ opacity: 0.65 }}>{copy.providerModels(record.models?.length ?? 0)}</span>
-                {Number(record.references?.active_jobs ?? 0) > 0 && <span style={{ color: '#c98735' }}>{copy.providerJobs(record.references.active_jobs)}</span>}
-                <span style={{ flex: 1 }} />
-                {record.ownership !== 'harness' && record.desired_state !== 'absent' && (
-                  <button type="button" style={{ ...S.btn, padding: '2px 8px' }} disabled={blocked || providerLifecycleBusy !== null}
-                    onClick={() => { void deleteHarnessProvider(record); }}>
-                    {providerLifecycleBusy === record.id ? copy.working : copy.providerDeletePlan}
-                  </button>
-                )}
-                {record.desired_state === 'absent' && rollbackTransaction && (
-                  <button type="button" style={{ ...S.btn, padding: '2px 8px' }} disabled={providerLifecycleBusy !== null}
-                    onClick={() => { void rollbackHarnessProvider(record, rollbackTransaction.transaction_id); }}>
-                    {providerLifecycleBusy === `rollback:${record.id}` ? copy.working : copy.providerRollback}
-                  </button>
-                )}
-              </div>
-            );
-          })}
-          {(credentialRefs.length > 0 || credentialUnverified.length > 0) && (
-            <div style={{ marginTop: 10, borderTop: '1px solid rgba(128,128,128,0.16)', paddingTop: 8 }}>
-              <div style={{ fontWeight: 600, fontSize: 12.5 }}>{copy.credentialReferences}</div>
-              <div style={{ fontSize: 11, opacity: 0.6, margin: '3px 0 7px' }}>{copy.credentialReferenceHint}</div>
-              {credentialUnverified.map((entry: any) => (
-                <div key={`unverified:${entry.reference_id}`} style={{ color: '#c55', fontSize: 11.5 }}>
-                  <span style={S.mono}>{entry.reference_id}</span> · {copy.credentialPurgeUnverified}
-                </div>
-              ))}
-              {credentialRefs.map((ref: any) => (
-                <div key={ref.reference_id} style={{ display: 'flex', alignItems: 'center', gap: 8, fontSize: 11.5, flexWrap: 'wrap' as const }}>
-                  <span style={S.mono}>{ref.reference_id}</span>
-                  <span style={{ opacity: 0.65 }}>{ref.ownership}</span>
-                  <span style={{ color: ref.orphan ? '#c98735' : undefined }}>{ref.orphan ? copy.credentialOrphan : copy.credentialInUse(ref.consumer_count ?? 0)}</span>
-                  <span style={{ flex: 1 }} />
-                  {ref.ownership === 'crew-owned' && ref.orphan === true && ref.purge_capability === 'eligible' && (
-                    <button type="button" style={{ ...S.btn, padding: '2px 8px' }}
-                      disabled={credentialLifecycleBusy !== null}
-                      onClick={() => { void purgeCredentialRef(ref); }}>
-                      {credentialLifecycleBusy === ref.reference_id ? copy.credentialPurging : copy.credentialPurgePlan}
-                    </button>
-                  )}
-                </div>
-              ))}
-            </div>
-          )}
-        </CollapsibleSection>
-
-        <CollapsibleSection sectionId="providers" title={copy.sectionNames.providers}
+        <CollapsibleSection sectionId="harnessProviders" title={copy.sectionNames.harnessProviders}
+          summary={sectionSummary(copy.providerCount(providerInventory?.records?.length ?? 0), providerInventoryError ? copy.providerLifecycleError : '')}
+          expanded={!!expandedSections.harnessProviders} onToggle={() => toggleSection('harnessProviders')}>
+          {providerInventoryError && <div style={{ fontSize: 12, color: '#c55' }}>{providerInventoryError}</div>}
+          {!providerInventoryError && (providerInventory?.records?.length ?? 0) === 0 && (
+            <div style={{ fontSize: 12, opacity: 0.55 }}>{copy.providerNoInventory}</div>
+          )}
+          {(providerInventory?.records ?? []).map((record: any) => {
+            const immutable = record.delete_capability === 'immutable-builtin';
+            const unresolved = record.delete_capability === 'source-unresolved';
+            const blocked = immutable || unresolved || record.desired_state === 'absent' || Number(record.references?.active_jobs ?? 0) > 0;
+            const lifecycle = record.desired_state === 'absent' ? 'absent' : record.lifecycle?.enabled === false ? 'disabled' : record.lifecycle?.catalogued ? 'catalogued' : 'configured';
+            const lifecycleTransactions = providerInventory?.lifecycle_transactions ?? [];
+            const recoveryTransactions = (providerInventory?.recovery_transactions ?? []).map((entry: any) => ({ ...entry, state: entry.phase }));
+            const rollbackTransaction = [...lifecycleTransactions, ...recoveryTransactions]
+              .filter((entry: any) => entry.provider_id === record.id && ['VERIFIED', 'RESTART_PENDING', 'ROLLBACK_PENDING', 'PLANNED', 'TOMBSTONE_APPLYING', 'TOMBSTONE_APPLIED', 'REFERENCES_APPLYING', 'REFERENCES_APPLIED', 'DECLARATIONS_APPLYING', 'DECLARATIONS_APPLIED', 'DELETE_RESTART_PENDING', 'ROLLBACK_RESTART_PENDING', 'ROLLBACK_RESTORED', 'ROLLBACK_APPLYING'].includes(entry.state))
+              .sort((a: any, b: any) => String(a.updated_at ?? '').localeCompare(String(b.updated_at ?? ''))).at(-1);
+            return (
+              <div key={record.id} style={{ display: 'flex', alignItems: 'center', gap: 8, fontSize: 12.5, flexWrap: 'wrap' as const }}>
+                <span style={{ fontWeight: 600 }}>{record.display_name || record.id}</span>
+                <span style={{ ...S.chip(record.lifecycle?.enabled === true), ...S.mono }}>{record.id}</span>
+                <span style={{ opacity: 0.65 }}>{copy.providerState(lifecycle)}</span>
+                <span style={{ opacity: 0.65 }}>{copy.providerModels(record.models?.length ?? 0)}</span>
+                {immutable && <span style={{ opacity: 0.65 }}>{copy.providerOfficialBuiltin}</span>}
+                {unresolved && <span style={{ color: '#c98735' }}>{copy.providerSourceUnresolved}</span>}
+                {Number(record.references?.active_jobs ?? 0) > 0 && <span style={{ color: '#c98735' }}>{copy.providerJobs(record.references.active_jobs)}</span>}
+                <span style={{ flex: 1 }} />
+                {record.delete_capability === 'supported' && record.desired_state !== 'absent' && (
+                  <button type="button" style={{ ...S.btn, padding: '2px 8px' }} disabled={blocked || providerLifecycleBusy !== null}
+                    onClick={() => { void deleteHarnessProvider(record); }}>
+                    {providerLifecycleBusy === record.id ? copy.working : copy.providerDeletePlan}
+                  </button>
+                )}
+                {(record.desired_state === 'absent' || ['PLANNED', 'TOMBSTONE_APPLYING', 'TOMBSTONE_APPLIED', 'REFERENCES_APPLYING', 'REFERENCES_APPLIED', 'DECLARATIONS_APPLYING', 'DECLARATIONS_APPLIED', 'DELETE_RESTART_PENDING', 'ROLLBACK_PENDING', 'ROLLBACK_RESTART_PENDING', 'ROLLBACK_RESTORED', 'ROLLBACK_APPLYING'].includes(rollbackTransaction?.state)) && rollbackTransaction && (
+                  <button type="button" style={{ ...S.btn, padding: '2px 8px' }} disabled={providerLifecycleBusy !== null}
+                    onClick={() => { void rollbackHarnessProvider(record, rollbackTransaction.transaction_id, rollbackTransaction.state); }}>
+                    {providerLifecycleBusy === `rollback:${record.id}` ? copy.working : rollbackTransaction.state === 'ROLLBACK_PENDING' ? copy.providerRollbackContinue : copy.providerRollback}
+                  </button>
+                )}
+              </div>
+            );
+          })}
+          {(providerInventory?.recovery_transactions ?? []).filter((entry: any) => entry?.unresolved === true || !entry?.provider_id).map((entry: any) => (
+            <div key={`recovery:${entry.storage_id ?? entry.transaction_id ?? 'unknown'}`} style={{ display: 'flex', alignItems: 'center', gap: 8, fontSize: 12, flexWrap: 'wrap' as const, color: '#c98735', marginTop: 6 }}>
+              <span style={{ fontWeight: 600 }}>{copy.recoveryUnresolved}</span>
+              <span style={S.mono}>{entry.storage_id ?? entry.transaction_id ?? 'unknown'}</span>
+              <span style={{ opacity: 0.7 }}>{entry.phase}</span>
+              <span style={{ flex: 1 }} />
+              {entry.action_id && <button type="button" style={{ ...S.btn, padding: '2px 8px' }} disabled={providerLifecycleBusy !== null}
+                onClick={() => { void quarantineRecoveryTransaction(entry); }}>
+                {providerLifecycleBusy === `quarantine:${entry.action_id}` ? copy.working : copy.recoveryQuarantine}
+              </button>}
+            </div>
+          ))}
+          {(credentialRefs.length > 0 || credentialUnverified.length > 0) && (
+            <div style={{ marginTop: 10, borderTop: '1px solid rgba(128,128,128,0.16)', paddingTop: 8 }}>
+              <div style={{ fontWeight: 600, fontSize: 12.5 }}>{copy.credentialReferences}</div>
+              <div style={{ fontSize: 11, opacity: 0.6, margin: '3px 0 7px' }}>{copy.credentialReferenceHint}</div>
+              {credentialUnverified.map((entry: any) => (
+                <div key={`unverified:${entry.reference_id}`} style={{ color: '#c55', fontSize: 11.5 }}>
+                  <span style={S.mono}>{entry.reference_id}</span> · {copy.credentialPurgeUnverified}
+                </div>
+              ))}
+              {credentialRefs.map((ref: any) => (
+                <div key={ref.reference_id} style={{ display: 'flex', alignItems: 'center', gap: 8, fontSize: 11.5, flexWrap: 'wrap' as const }}>
+                  <span style={S.mono}>{ref.reference_id}</span>
+                  <span style={{ opacity: 0.65 }}>{ref.ownership}</span>
+                  <span style={{ color: ref.orphan ? '#c98735' : undefined }}>{ref.orphan ? copy.credentialOrphan : copy.credentialInUse(ref.consumer_count ?? 0)}</span>
+                  <span style={{ flex: 1 }} />
+                  {ref.ownership === 'crew-owned' && ref.orphan === true && ref.purge_capability === 'eligible' && (
+                    <button type="button" style={{ ...S.btn, padding: '2px 8px' }}
+                      disabled={credentialLifecycleBusy !== null}
+                      onClick={() => { void purgeCredentialRef(ref); }}>
+                      {credentialLifecycleBusy === ref.reference_id ? copy.credentialPurging : copy.credentialPurgePlan}
+                    </button>
+                  )}
+                </div>
+              ))}
+            </div>
+          )}
+        </CollapsibleSection>
+
+        <CollapsibleSection sectionId="providers" title={copy.sectionNames.providers}
           summary={sectionSummary(copy.providerCount(customProviders.length), testResult?.ok === false && copy.testFail)}
           expanded={!!expandedSections.providers} onToggle={() => toggleSection('providers')}>
           {block(copy.cardCustomProv, (<>
@@ -1611,80 +1660,80 @@ function WorkersPanel({ ctx }: { ctx: any }) {
       <CollapsibleSection sectionId="jobs" title={copy.sectionNames.jobs}
         summary={sectionSummary(copy.jobCount(jobs.length), jobs.some((job) => job.status === 'running') && copy.runningCount(jobs.filter((job) => job.status === 'running').length))}
         expanded={!!expandedSections.jobs} onToggle={() => toggleSection('jobs')}>
-        {jobs.length === 0 ? (
-          <div style={{ opacity: 0.55 }}>{copy.empty}</div>
-        ) : (
-          <div style={{ overflowX: 'auto', border: '1px solid rgba(128,128,128,0.20)', borderRadius: 8, padding: '0 9px' }}>
-            <table style={{ borderCollapse: 'collapse', width: '100%', tableLayout: 'fixed', minWidth: 1020 }}>
-              <colgroup>
-                <col style={{ width: 68 }} /><col style={{ width: 72 }} /><col style={{ width: 58 }} />
-                <col style={{ width: 190 }} /><col style={{ width: 70 }} /><col style={{ width: 70 }} />
-                <col style={{ width: 105 }} /><col style={{ width: 84 }} /><col style={{ width: 300 }} />
-              </colgroup>
-              <thead><tr>
-                {[copy.col.id, copy.col.role, copy.col.source, copy.col.model, copy.col.tier, copy.col.status, copy.col.progress, copy.col.tokens, copy.col.task].map((heading) => (
-                  <th key={heading} style={{ ...S.tight, fontSize: 10.5, opacity: 0.55, fontWeight: 500 }}>{heading}</th>
-                ))}
-              </tr></thead>
-              <tbody>
-                {jobs.map((job) => {
-                  const color = job.status === 'running' ? '#4a9eff' : job.status === 'done' ? '#3fb950' : '#f85149';
-                  return (
-                    <tr key={job.id}>
-                      <td style={{ ...S.tight, ...S.mono, fontWeight: 600 }} title={job.id}>{String(job.id).replace(/-[a-z0-9]+$/, '')}</td>
-                      <td style={S.tight}><span style={S.chip(job.role === 'reviewer')}>{job.role === 'reviewer' ? 'Reviewer' : 'Worker'}</span></td>
-                      <td style={S.tight}><span style={S.chip(job.source === 'claude-code' || job.source === 'codex')}>{sourceLabel(job.source)}</span></td>
-                      <td style={{ ...S.tight, ...S.mono }} title={`${job.provider ?? '—'} / ${job.model ?? '—'}`}>{job.provider ?? '—'} / {job.model ?? '—'}</td>
-                      <td style={S.tight}>{job.tier}/{job.effort}</td>
-                      <td style={S.tight} title={`${job.status}${job.currentTool ? ` · ${job.currentTool}` : ''}`}>
-                        <span style={{ color }} aria-hidden="true">●</span> <span style={{ color, fontSize: 10.5 }}>{job.status}</span>
-                      </td>
-                      <td style={{ ...S.tight, ...S.mono }} title={copy.progressTip(elapsed(job.startedAt, job.endedAt), job.turn, job.step, job.toolCalls ?? '-')}>{elapsed(job.startedAt, job.endedAt)} · {job.turn}.{job.step} · {job.toolCalls ?? '-'}t</td>
-                      <td style={{ ...S.tight, ...S.mono }}>{job.tokens ? `${ktok(job.tokens.input)}/${ktok(job.tokens.output)}` : '—'}</td>
-                      <td
-                        style={{ ...S.cell, position: 'relative' }}
-                        onMouseEnter={(event: any) => {
-                          const rect = event.currentTarget.getBoundingClientRect();
-                          setHoverTask({ id: job.id, text: job.task, right: Math.max(8, window.innerWidth - rect.right), top: rect.bottom + 4, bottom: window.innerHeight - rect.top + 4, flip: rect.top < 240 });
-                        }}
-                        onMouseLeave={() => setHoverTask(null)}>
-                        <div style={{ whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis', lineHeight: 1.45, fontSize: 12 }}>
-                          {job.task}
-                        </div>
-                        <div style={{ fontSize: 10, opacity: 0.5 }}>{job.selection_source ?? 'unknown'}</div>
-                      </td>
-                    </tr>
-                  );
-                })}
-              </tbody>
-            </table>
-          </div>
-        )}
-
-        <div style={{ ...S.block, marginTop: 2 }}>
-          <div>
-            <div style={S.settingTitle}>{copy.modelActivity}</div>
-            <div style={S.settingDesc}>{copy.modelActivityHint}</div>
-          </div>
-          {modelActivity.length === 0 ? <div style={{ opacity: 0.55 }}>{copy.noModelActivity}</div> : (
-            <div style={{ overflowX: 'auto' }}>
-              <div role="table" style={{ minWidth: 620 }}>
-                <div role="row" style={{ display: 'grid', gridTemplateColumns: 'minmax(190px, 1.35fr) 72px minmax(170px, 1fr) 125px', gap: 10, padding: '0 6px 5px', fontSize: 10.5, opacity: 0.55 }}>
-                  <span role="columnheader">{copy.model}</span><span role="columnheader">{copy.calls}</span><span role="columnheader">{copy.invocationSource} / {copy.routingSource}</span><span role="columnheader">{copy.lastCalled}</span>
-                </div>
-                {modelActivity.map((entry) => (
-                  <div role="row" key={`${entry.provider}/${entry.model}`} style={{ display: 'grid', gridTemplateColumns: 'minmax(190px, 1.35fr) 72px minmax(170px, 1fr) 125px', gap: 10, alignItems: 'center', padding: '7px 6px', borderTop: '1px solid rgba(128,128,128,0.16)' }}>
-                    <span role="cell" style={{ minWidth: 0 }}><strong style={{ display: 'block', fontSize: 12 }}>{entry.model}</strong><span style={{ ...S.mono, opacity: 0.55 }}>{entry.provider}</span></span>
-                    <span role="cell" style={{ ...S.mono, fontSize: 15, fontWeight: 650 }}>{entry.count}</span>
-                    <span role="cell" style={{ minWidth: 0, fontSize: 11.5 }}><span style={{ display: 'block' }}>{entry.task_sources.map(sourceLabel).join(' · ')}</span><span style={{ display: 'block', opacity: 0.55 }}>{entry.selection_sources.join(' · ')} · {entry.roles.join(' / ')}</span></span>
-                    <span role="cell" style={{ ...S.mono, fontSize: 10.5 }}>{formatTimestamp(entry.last_called_at, locale)}</span>
-                  </div>
-                ))}
-              </div>
-            </div>
-          )}
-        </div>
-      </CollapsibleSection>
+        {jobs.length === 0 ? (
+          <div style={{ opacity: 0.55 }}>{copy.empty}</div>
+        ) : (
+          <div style={{ overflowX: 'auto', border: '1px solid rgba(128,128,128,0.20)', borderRadius: 8, padding: '0 9px' }}>
+            <table style={{ borderCollapse: 'collapse', width: '100%', tableLayout: 'fixed', minWidth: 1020 }}>
+              <colgroup>
+                <col style={{ width: 68 }} /><col style={{ width: 72 }} /><col style={{ width: 58 }} />
+                <col style={{ width: 190 }} /><col style={{ width: 70 }} /><col style={{ width: 70 }} />
+                <col style={{ width: 105 }} /><col style={{ width: 84 }} /><col style={{ width: 300 }} />
+              </colgroup>
+              <thead><tr>
+                {[copy.col.id, copy.col.role, copy.col.source, copy.col.model, copy.col.tier, copy.col.status, copy.col.progress, copy.col.tokens, copy.col.task].map((heading) => (
+                  <th key={heading} style={{ ...S.tight, fontSize: 10.5, opacity: 0.55, fontWeight: 500 }}>{heading}</th>
+                ))}
+              </tr></thead>
+              <tbody>
+                {jobs.map((job) => {
+                  const color = job.status === 'running' ? '#4a9eff' : job.status === 'done' ? '#3fb950' : '#f85149';
+                  return (
+                    <tr key={job.id}>
+                      <td style={{ ...S.tight, ...S.mono, fontWeight: 600 }} title={job.id}>{String(job.id).replace(/-[a-z0-9]+$/, '')}</td>
+                      <td style={S.tight}><span style={S.chip(job.role === 'reviewer')}>{job.role === 'reviewer' ? 'Reviewer' : 'Worker'}</span></td>
+                      <td style={S.tight}><span style={S.chip(job.source === 'claude-code' || job.source === 'codex')}>{sourceLabel(job.source)}</span></td>
+                      <td style={{ ...S.tight, ...S.mono }} title={`${job.provider ?? '—'} / ${job.model ?? '—'}`}>{job.provider ?? '—'} / {job.model ?? '—'}</td>
+                      <td style={S.tight}>{job.tier}/{job.effort}</td>
+                      <td style={S.tight} title={`${job.status}${job.currentTool ? ` · ${job.currentTool}` : ''}`}>
+                        <span style={{ color }} aria-hidden="true">●</span> <span style={{ color, fontSize: 10.5 }}>{job.status}</span>
+                      </td>
+                      <td style={{ ...S.tight, ...S.mono }} title={copy.progressTip(elapsed(job.startedAt, job.endedAt), job.turn, job.step, job.toolCalls ?? '-')}>{elapsed(job.startedAt, job.endedAt)} · {job.turn}.{job.step} · {job.toolCalls ?? '-'}t</td>
+                      <td style={{ ...S.tight, ...S.mono }}>{job.tokens ? `${ktok(job.tokens.input)}/${ktok(job.tokens.output)}` : '—'}</td>
+                      <td
+                        style={{ ...S.cell, position: 'relative' }}
+                        onMouseEnter={(event: any) => {
+                          const rect = event.currentTarget.getBoundingClientRect();
+                          setHoverTask({ id: job.id, text: job.task, right: Math.max(8, window.innerWidth - rect.right), top: rect.bottom + 4, bottom: window.innerHeight - rect.top + 4, flip: rect.top < 240 });
+                        }}
+                        onMouseLeave={() => setHoverTask(null)}>
+                        <div style={{ whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis', lineHeight: 1.45, fontSize: 12 }}>
+                          {job.task}
+                        </div>
+                        <div style={{ fontSize: 10, opacity: 0.5 }}>{job.selection_source ?? 'unknown'}</div>
+                      </td>
+                    </tr>
+                  );
+                })}
+              </tbody>
+            </table>
+          </div>
+        )}
+
+        <div style={{ ...S.block, marginTop: 2 }}>
+          <div>
+            <div style={S.settingTitle}>{copy.modelActivity}</div>
+            <div style={S.settingDesc}>{copy.modelActivityHint}</div>
+          </div>
+          {modelActivity.length === 0 ? <div style={{ opacity: 0.55 }}>{copy.noModelActivity}</div> : (
+            <div style={{ overflowX: 'auto' }}>
+              <div role="table" style={{ minWidth: 620 }}>
+                <div role="row" style={{ display: 'grid', gridTemplateColumns: 'minmax(190px, 1.35fr) 72px minmax(170px, 1fr) 125px', gap: 10, padding: '0 6px 5px', fontSize: 10.5, opacity: 0.55 }}>
+                  <span role="columnheader">{copy.model}</span><span role="columnheader">{copy.calls}</span><span role="columnheader">{copy.invocationSource} / {copy.routingSource}</span><span role="columnheader">{copy.lastCalled}</span>
+                </div>
+                {modelActivity.map((entry) => (
+                  <div role="row" key={`${entry.provider}/${entry.model}`} style={{ display: 'grid', gridTemplateColumns: 'minmax(190px, 1.35fr) 72px minmax(170px, 1fr) 125px', gap: 10, alignItems: 'center', padding: '7px 6px', borderTop: '1px solid rgba(128,128,128,0.16)' }}>
+                    <span role="cell" style={{ minWidth: 0 }}><strong style={{ display: 'block', fontSize: 12 }}>{entry.model}</strong><span style={{ ...S.mono, opacity: 0.55 }}>{entry.provider}</span></span>
+                    <span role="cell" style={{ ...S.mono, fontSize: 15, fontWeight: 650 }}>{entry.count}</span>
+                    <span role="cell" style={{ minWidth: 0, fontSize: 11.5 }}><span style={{ display: 'block' }}>{entry.task_sources.map(sourceLabel).join(' · ')}</span><span style={{ display: 'block', opacity: 0.55 }}>{entry.selection_sources.join(' · ')} · {entry.roles.join(' / ')}</span></span>
+                    <span role="cell" style={{ ...S.mono, fontSize: 10.5 }}>{formatTimestamp(entry.last_called_at, locale)}</span>
+                  </div>
+                ))}
+              </div>
+            </div>
+          )}
+        </div>
+      </CollapsibleSection>
       {hoverTask && createPortal(
         <div style={{
           position: 'fixed', right: hoverTask.right, zIndex: 9999,
@@ -1702,9 +1751,9 @@ function WorkersPanel({ ctx }: { ctx: any }) {
   );
 }
 
-export function apply(ctx: any): void {
-  let runningCount = 0;
-  let officialSurface: boolean | null = null;
+export function apply(ctx: any): void {
+  let runningCount = 0;
+  let officialSurface: boolean | null = null;
   ctx.slots.inject('settings.section', () => {
     let dispose = register();
     function register() {
@@ -1725,16 +1774,16 @@ export function apply(ctx: any): void {
         () => <WorkersPanel ctx={ctx} />,
       );
     }
-    const poll = async () => {
-      if (document.visibilityState !== 'visible') return;
-      try {
-        if (officialSurface === null) {
-          const response = await fetch(`${API}/bridge-status`, { cache: 'no-store' });
-          const bridgeStatus = response.ok ? await response.json() : null;
-          officialSurface = classifyCrewSurface({ bridgeStatus }) === CREW_UI_SURFACES.OFFICIAL;
-        }
-        if (!officialSurface) return;
-        const r = await (await fetch(`${API}/jobs`, { cache: 'no-store' })).json();
+    const poll = async () => {
+      if (document.visibilityState !== 'visible') return;
+      try {
+        if (officialSurface === null) {
+          const response = await fetch(`${API}/bridge-status`, { cache: 'no-store' });
+          const bridgeStatus = response.ok ? await response.json() : null;
+          officialSurface = classifyCrewSurface({ bridgeStatus }) === CREW_UI_SURFACES.OFFICIAL;
+        }
+        if (!officialSurface) return;
+        const r = await (await fetch(`${API}/jobs`, { cache: 'no-store' })).json();
         const n = r.ok ? (r.jobs ?? []).filter((j: any) => j.status === 'running').length : 0;
         if (n !== runningCount) {
           runningCount = n;