@sqdr2/dsh-fusion 0.3.0 → 0.3.3

package/lib/types/client/FusionPermission.d.ts

@@ -0,0 +1,15 @@
+import type { ObservableSnapshot } from '@deepseek-ai/dsh-client-store';
+import type { ModelDirectoryState } from '@deepseek-ai/dsh-client-ui-model-selection/client';
+export interface FusionPermissionProps {
+    sessionId: string;
+    directory: ObservableSnapshot<ModelDirectoryState>;
+    load(): void;
+}
+/**
+ * The permission of the model working now. The composer's native permission control
+ * belongs to the conversation (Lead) session, which Fusion confines to read-only, and
+ * that confinement matches no configured preset — so the control reads Custom while a
+ * task runs. This additive chip names the role and its mode, so the tool row never
+ * shows an unexplained Custom alone.
+ */
+export declare function FusionPermission({ sessionId, directory, load }: FusionPermissionProps): import("react").JSX.Element | null;

package/lib/types/client/FusionSettings.d.ts

@@ -1,5 +1,13 @@
 import type { PhysicalRoute } from '../contracts.js';
-import type { SettingsCatalog } from '../host/settings.js';
+import type { PairChoice, SettingsCatalog } from '../host/settings.js';
+/** One saved combo as the page shows it: its id, its label and its pair. */
+export interface SavedPairView {
+    id: string;
+    name: string;
+    pair: PairChoice;
+    authorized: boolean;
+    reason?: string;
+}
 export declare function ModelChoice({ role, route, catalog, onChange }: {
     role: 'Lead' | 'Sidekick' | 'compactor';
     route?: PhysicalRoute;

package/lib/types/client/status-polling.d.ts

@@ -4,6 +4,10 @@ interface Snapshot {
     status?: FusionStatus;
     failed: boolean;
 }
-/** One in-flight read per mounted session; collapsed hints still discover new attention states. */
-export declare function useFusionStatus(sessionId: string, expandedTask: string | undefined, attentionOnly?: boolean): Snapshot | undefined;
+/**
+ * One in-flight read per mounted session; collapsed hints still discover new attention states.
+ * `live` asks for the fast cadence whenever the task is running, for a view whose whole
+ * purpose is the current stage (the role and permission of the model working now).
+ */
+export declare function useFusionStatus(sessionId: string, expandedTask: string | undefined, attentionOnly?: boolean, live?: boolean): Snapshot | undefined;
 export {};

package/lib/types/contracts.d.ts

@@ -37,6 +37,8 @@ export type RunSelection = {
     requestedVersion?: string;
 };
 export type Role = 'lead' | 'worker';
+/** A Host sandbox mode, spelled as the `sandbox/mode` session event writes it. */
+export type SandboxMode = 'read-only' | 'workspace-write' | 'danger-full-access';
 export type Phase = 'READY' | 'PLANNING' | 'DIRECT' | 'WORKER_RUNNING' | 'REVIEWING' | 'REWORK' | 'WAITING_APPROVAL' | 'WAITING_USER' | 'WAITING_BUDGET' | 'RECOVERING' | 'PAUSED' | 'STOPPING' | 'NEEDS_DECISION' | 'FAILED' | 'COMPLETED' | 'CANCELLED';
 export type VerificationLevel = 'unverified' | 'partial' | 'verified';
 export type ExecutionIntent = 'DIRECT' | 'DELEGATE';

package/lib/types/host/cache-policy.d.ts

@@ -93,11 +93,21 @@ type Route = {
     provider: string;
     model: string;
 };
-/** One row of the settings page: what applies, why, what the defaults say, and what was observed. */
-export declare function cacheView(policy: CachePolicy, pair?: {
-    lead: Route;
-    worker: Route;
-}, pairChoice?: {
+/** A saved combo's routes, plus its optional per-role keepalive choice. */
+export interface CachePairRoutes {
+    readonly lead: Route;
+    readonly worker: Route;
+    readonly cacheKeepalive?: {
+        lead?: boolean | 'auto';
+        worker?: boolean | 'auto';
+    };
+}
+/**
+ * One row of the settings page: what applies, why, what the defaults say, and
+ * what was observed. Every saved combo contributes its routes, so a second
+ * combo's models are listed and labelled even before a session uses them.
+ */
+export declare function cacheView(policy: CachePolicy, pair?: CachePairRoutes | readonly CachePairRoutes[], pairChoice?: {
     lead?: boolean | 'auto';
     worker?: boolean | 'auto';
 }): {
@@ -106,7 +116,7 @@ export declare function cacheView(policy: CachePolicy, pair?: {
     role: Role | undefined;
     mode: CacheMode;
     intervalSeconds: number;
-    modeSource: "user" | "role" | "route" | "family" | "generic" | "pair";
+    modeSource: "user" | "role" | "route" | "pair" | "family" | "generic";
     intervalSource: "user" | "route" | "family" | "generic" | "learned";
     setting: ModelCacheSetting;
     defaults: {

package/lib/types/host/native-role-sandbox.d.ts

@@ -1,10 +1,10 @@
 import type { Context } from '@deepseek-ai/cordis';
 import type { Agent } from '@deepseek-ai/dsh-agent';
 import type { ToolExecution } from '@deepseek-ai/dsh-tools';
-import type { Role } from '../contracts.js';
+import type { Role, SandboxMode } from '../contracts.js';
 import type { SqliteFusionStore } from '../task/sqlite-store.js';
 import type { SessionBinding } from './bindings.js';
-type Mode = 'read-only' | 'workspace-write' | 'danger-full-access';
+type Mode = SandboxMode;
 declare module '@deepseek-ai/dsh-session/types' {
     interface SessionEventMap {
         'sandbox/mode': {
@@ -14,6 +14,14 @@ declare module '@deepseek-ai/dsh-session/types' {
     }
 }
 export declare const roleSeparated: (binding: SessionBinding) => boolean;
+/**
+ * The mode the user chose for a confined Fusion conversation, which is the mode
+ * the Sidekick runs under. Undefined until Fusion has confined the Lead, or after
+ * the conversation left Fusion and its own mode was restored.
+ */
+export declare function readSandboxIntent(store: SqliteFusionStore, sessionId: string): {
+    mode: Mode;
+} | undefined;
 /**
  * Role separation enforced below the prompt: the Lead's session runs under the
  * Host's own read-only sandbox (bash and filesystem are refused by the OS

package/lib/types/host/native-selection.d.ts

@@ -7,12 +7,19 @@ import { FUSION_MODEL, FUSION_PROVIDER, isFusionSelection } from '../identity.js
 import type { ResolvedProfile } from '../profile/resolve.js';
 import type { FusionCoordinator } from './coordinator.js';
 export { FUSION_MODEL, FUSION_PROVIDER, isFusionSelection };
-/** Resolves the configured Lead's declared input modalities; undefined means unconfigured or unverifiable. */
-export type LeadInputModalities = () => Promise<readonly ModelModality[] | undefined>;
+/** One combo as the native menu needs it: its id, its label and its Lead's modalities. */
+export interface FusionModelEntry {
+    readonly id: string;
+    readonly name: string;
+    readonly description?: string;
+    readonly inputModalities: readonly ModelModality[];
+}
+/** Read every combo this Host currently advertises; empty means unconfigured. */
+export type FusionModels = () => Promise<readonly FusionModelEntry[]>;
 /** Catalog-only local adapter; the native request is physically routed before dispatch. */
 export declare class FusionCatalogAdapter extends LlmAdapter {
-    private readonly leadInputModalities?;
-    constructor(leadInputModalities?: LeadInputModalities | undefined);
+    private readonly models?;
+    constructor(models?: FusionModels | undefined);
     providerInfo(provider: string): {
         id: string;
         name: string;
@@ -24,6 +31,9 @@ export declare class FusionCatalogAdapter extends LlmAdapter {
 /** Public native lifecycle integration. No model-menu replacement or Host patch. */
 export declare function installNativeFusionSelection(ctx: Context, input: {
     coordinator(): FusionCoordinator | undefined;
-    profile(): ResolvedProfile | undefined;
+    /** The frozen profile of one combo, or undefined when it cannot be used yet. */
+    profile(model: string): ResolvedProfile | undefined;
+    /** Why one combo cannot run, for the message a blocked session shows. */
+    reason?(model: string): string | undefined;
     selection(agent: Agent): PhysicalRoute | undefined;
 }): () => void;

package/lib/types/host/pairs.d.ts

@@ -0,0 +1,47 @@
+import type { SqliteFusionStore } from '../task/sqlite-store.js';
+import type { PairChoice, SettingsCatalog } from './settings.js';
+/**
+ * One saved combo: the model id the native menu advertises, the label beside
+ * it, and the pair that id freezes. The id is the durable identity — a session
+ * that selected it keeps its own frozen copy — so renaming never moves a combo.
+ */
+export interface PairEntry {
+    readonly id: string;
+    readonly name: string;
+    readonly pair: PairChoice;
+}
+/** The saved combos, in menu order. `auto` is the historical first combo. */
+export interface PairsSnapshot {
+    readonly revision: number;
+    readonly pairs: readonly PairEntry[];
+    /** True when these came from a pre-combo `settings:profile` document. */
+    readonly migrated: boolean;
+}
+/** Where the combo list lives; `settings:profile` stays readable for migration. */
+export declare const PAIRS_DOCUMENT = "settings:pairs";
+/** Every menu entry costs one row in the native picker, so the list stays short. */
+export declare const MAX_PAIRS = 6;
+export declare const MAX_PAIR_NAME = 40;
+/** The migrated first combo keeps the label the historical entry had. */
+export declare const DEFAULT_PAIR_NAME = "\u81EA\u52A8";
+export declare const profileIdOf: (model: string) => string;
+/** The combo a frozen profile belongs to, or undefined for a non-combo profile. */
+export declare function modelOfProfileId(id: string): string | undefined;
+/** A pre-combo profile document as the choice it was saved from. */
+export declare function choiceFromStoredProfile(value: unknown): PairChoice | undefined;
+/** The saved combos; a pre-combo installation migrates to one `auto` combo on read. */
+export declare function readPairs(store: SqliteFusionStore): PairsSnapshot;
+export declare function pairName(value: unknown, fallback: string): string;
+/**
+ * Validate the list a settings action proposes. Ids are assigned here, never by
+ * the client, so a stale tab cannot name a combo that is already frozen
+ * elsewhere; reordering only moves the menu rows.
+ */
+export declare function validatePairs(value: unknown, catalog: SettingsCatalog, existing: readonly PairEntry[]): PairEntry[];
+export declare function pairsDocument(pairs: readonly PairEntry[]): Record<string, unknown>;
+/**
+ * Persist the list under one compare-and-swap revision. The first combo is
+ * mirrored into the pre-combo `settings:profile` document so an older tab (or a
+ * downgrade) still finds the pair it knows about.
+ */
+export declare function writePairs(store: SqliteFusionStore, expectedRevision: number, pairs: readonly PairEntry[]): number;

package/lib/types/host/settings.d.ts

@@ -32,8 +32,12 @@ export declare function savedLeadRoute(value: unknown): {
 export declare function validatePairChoice(value: unknown, catalog: SettingsCatalog): PairChoice;
 /** New sessions can opt into this Worker cap. Frozen sessions keep their saved profile. */
 export declare const WORKER_IMPLEMENTATION_OUTPUT_TOKENS = 128000;
-export declare function profileFromChoice(pair: PairChoice): Record<string, unknown>;
-/** Product defaults; explicit legacy/benchmark profiles retain their old contract. */
-export declare function modelProfileFromChoice(pair: PairChoice): Record<string, unknown>;
+export declare function profileFromChoice(pair: PairChoice, id?: string): Record<string, unknown>;
+/**
+ * Product defaults; explicit legacy/benchmark profiles retain their old contract.
+ * `id` names the combo; the first one keeps the historical `fusion-auto` so a
+ * profile frozen before combos existed keeps its identity.
+ */
+export declare function modelProfileFromChoice(pair: PairChoice, id?: string): Record<string, unknown>;
 /** Keep existing default settings stable; expose explicit larger/smaller limits on reload. */
 export declare function choiceFromProfile(profile: PairProfile): PairChoice;

package/lib/types/identity.d.ts

@@ -27,10 +27,18 @@ export declare const PACKAGE_NAME = "@sqdr2/dsh-fusion";
 export declare const PLUGIN_NAME = "dsh-fusion";
 /** The plugin id and package name this project used before the rename. */
 export declare const LEGACY_PLUGIN_NAME = "dsh-model-fusion";
-/** Registered provider route for the Fusion model entry. */
+/** Registered provider route for the Fusion model entries. */
 export declare const FUSION_PROVIDER = "dsh-fusion";
-/** The single model id the Fusion entry advertises. */
+/**
+ * The model id of the combo every installation starts with.
+ *
+ * It is a pair id like any other; keeping this exact spelling for the first
+ * combo means a durable `model/selection` written before combos existed still
+ * names a combo that exists.
+ */
 export declare const FUSION_MODEL = "auto";
+/** Whether a model id names a Fusion combo on this provider. */
+export declare const isFusionModel: (model: string | undefined) => boolean;
 /**
  * The provider route this plugin registered before it was renamed from
  * `dsh-model-fusion`. Sessions created then still name it in their durable
@@ -40,23 +48,17 @@ export declare const FUSION_MODEL = "auto";
 export declare const LEGACY_FUSION_PROVIDER = "dsh-model-fusion";
 /** Whether a provider route belongs to this plugin, under either name. */
 export declare const isFusionProvider: (provider: string | undefined) => boolean;
-/** Whether a route names the Fusion entry, under either name. */
+/** Whether a route names a Fusion combo, under either provider spelling. */
 export declare const isFusionSelection: (route: {
     provider?: string;
     model?: string;
 } | undefined) => boolean;
+/** Whether a switch-notice summary describes a Fusion combo as either side. */
+export declare const isFusionSelectionLabel: (summary: string | undefined) => boolean;
 /**
- * How a native model-switch notice names this entry (`provider/model`).
- *
- * Both spellings are listed: a session that switched to Fusion before the
- * rename carries the old one in its durable log, and the notice is the same
- * non-change on every Fusion step either way.
- */
-export declare const FUSION_SELECTION_LABELS: readonly ["dsh-fusion/auto", "dsh-model-fusion/auto"];
-/**
- * Whether a route already names the entry under its current name. A durable
- * intent that fails this is rewritten before the next request is assembled;
- * the legacy spelling is a read-side alias, not a route that still dispatches.
+ * Whether a route already names a combo under its current provider spelling. A
+ * durable intent that fails this is rewritten before the next request is
+ * assembled; the legacy spelling is a read-side alias, not a dispatching route.
  */
 export declare const isCurrentFusionSelection: (route: {
     provider?: string;

package/lib/types/status.d.ts

@@ -1,5 +1,5 @@
 import type { ControlView } from './host/native-model-control.js';
-import type { PhysicalRoute, Role, TokenMeasurement, VerificationLevel } from './contracts.js';
+import type { PhysicalRoute, Role, SandboxMode, TokenMeasurement, VerificationLevel } from './contracts.js';
 /** Bounded, read-only UI projection. No prompts, tool arguments or credentials. */
 export interface FusionStatus {
     schemaVersion: 1;
@@ -23,6 +23,22 @@ export interface FusionStatus {
             worker: PhysicalRoute;
             compactor: PhysicalRoute | null;
         };
+        /**
+         * Role-separated sandbox modes, present while Fusion confines the Lead. The
+         * composer's own permission control follows the conversation (Lead) session,
+         * so the UI shows these instead of the derived preset name.
+         */
+        permissions?: {
+            /**
+             * What the Lead's own work is confined to. The session is widened only for the
+             * checks Fusion runs itself and for the Lead during a Host-unlocked takeover.
+             */
+            lead: SandboxMode;
+            /** What the Sidekick runs under: the mode the user chose for this conversation. */
+            worker: SandboxMode;
+            /** The role working right now; null while the task waits. */
+            active: Role | null;
+        };
         usage: {
             calls: number;
             finalCalls: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sqdr2/dsh-fusion",
-  "version": "0.3.0",
+  "version": "0.3.3",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"
@@ -26,10 +26,13 @@
     "profiles",
     "dshx.yml",
     "cordis.patch.yml",
+    "CHANGELOG.md",
     "README.md",
     "README.en.md",
     "INSTALL.md",
     "INSTALL.zh.md",
+    "RELEASING.md",
+    "RELEASING.zh.md",
     "LICENSE",
     "docs/COMPATIBILITY.md",
     "docs/EVIDENCE.md"
@@ -63,75 +66,76 @@
     }
   },
   "devDependencies": {
-    "@types/node": "^22.20.0",
-    "typescript": "^5.9.2",
-    "vitest": "^4.1.8",
-    "@types/react": "~18.3.1",
-    "@types/react-test-renderer": "18.3.1",
-    "react": "^18.3.1",
-    "react-test-renderer": "18.3.1",
-    "semver": "^7.7.2",
-    "yaml": "^2.8.0",
     "@deepseek-ai/cordis": "^4.0.4",
-    "@deepseek-ai/schemastery": "^3.18.4",
-    "@deepseek-ai/dsh-agent": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-session": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-session-query": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-subagent": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-tools": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-api-session-controller": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-commands": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-locale": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-session": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-model-selection": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-tool": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-chat": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-store": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-agent-default-model": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-token-meter": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-compaction": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-user-approval": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-jobs": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-agent-preset-registry": "0.2.0-rc.2",
     "@deepseek-ai/cordis-plugin-group": ">=1.0.4 <1.1.0-0",
     "@deepseek-ai/cordis-plugin-include": ">=1.0.9 <1.1.0-0",
     "@deepseek-ai/cordis-plugin-loader": ">=1.0.5 <1.1.0-0",
+    "@deepseek-ai/dsh-agent": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-default-model": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-preset-registry": "0.2.0-rc.2",
     "@deepseek-ai/dsh-api-gateway": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-api-session-controller": "0.2.0-rc.2",
     "@deepseek-ai/dsh-attachment": "0.2.0-rc.2",
     "@deepseek-ai/dsh-client-connection": "0.2.0-rc.2",
     "@deepseek-ai/dsh-client-file-upload": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-store": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-chat": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-model-selection": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-session": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-tool": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-commands": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-compaction": "0.2.0-rc.2",
     "@deepseek-ai/dsh-credentials": "0.2.0-rc.2",
     "@deepseek-ai/dsh-file-reference": "0.2.0-rc.2",
     "@deepseek-ai/dsh-fs": "0.2.0-rc.2",
     "@deepseek-ai/dsh-home-paths": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "0.2.0-rc.2",
     "@deepseek-ai/dsh-invariants": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-jobs": "0.2.0-rc.2",
     "@deepseek-ai/dsh-launch-environment": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
     "@deepseek-ai/dsh-llm-retry": "0.2.0-rc.2",
     "@deepseek-ai/dsh-native-command": "0.2.0-rc.2",
     "@deepseek-ai/dsh-ptc-runtime": "0.2.0-rc.2",
     "@deepseek-ai/dsh-sandbox": "0.2.0-rc.2",
     "@deepseek-ai/dsh-sandbox-policy": "0.2.0-rc.2",
     "@deepseek-ai/dsh-scope": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-persistence": "0.2.0-rc.2",
     "@deepseek-ai/dsh-session-projection": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-query": "0.2.0-rc.2",
     "@deepseek-ai/dsh-session-title": "0.2.0-rc.2",
     "@deepseek-ai/dsh-settings": "0.2.0-rc.2",
     "@deepseek-ai/dsh-skill": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-storage": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-storage-domain": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-subagent": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-token-meter": "0.2.0-rc.2",
     "@deepseek-ai/dsh-tool-todo": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-tools": "0.2.0-rc.2",
     "@deepseek-ai/dsh-typert-registry": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-user-approval": "0.2.0-rc.2",
     "@deepseek-ai/dsh-util-time": "0.2.0-rc.2",
     "@deepseek-ai/dsh-util-workspace-path": "0.2.0-rc.2",
     "@deepseek-ai/dsh-workspace": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-session-persistence": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-storage": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-storage-domain": "0.2.0-rc.2"
+    "@deepseek-ai/schemastery": "^3.18.4",
+    "@types/node": "^22.20.0",
+    "@types/react": "~18.3.1",
+    "@types/react-test-renderer": "18.3.1",
+    "esbuild": "^0.28.2",
+    "react": "^18.3.1",
+    "react-test-renderer": "18.3.1",
+    "semver": "^7.7.2",
+    "typescript": "^5.9.2",
+    "vitest": "^4.1.8",
+    "yaml": "^2.8.0"
   },
   "engines": {
     "node": ">=22.14.0",
@@ -140,33 +144,33 @@
   "packageManager": "pnpm@9.15.9",
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.4",
-    "@deepseek-ai/schemastery": "^3.18.4",
     "@deepseek-ai/dsh-agent": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "@deepseek-ai/dsh-llm": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "@deepseek-ai/dsh-session": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "@deepseek-ai/dsh-session-query": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "@deepseek-ai/dsh-subagent": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "@deepseek-ai/dsh-tools": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "@deepseek-ai/dsh-system-prompt": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-agent-default-model": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-agent-preset-registry": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
     "@deepseek-ai/dsh-api-session-controller": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "@deepseek-ai/dsh-commands": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "@deepseek-ai/dsh-host-webserver": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
     "@deepseek-ai/dsh-client-locale": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-client-store": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-client-ui-conversation": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-client-ui-model-selection": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-client-ui-primitives": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-client-ui-renderer": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
     "@deepseek-ai/dsh-client-ui-settings": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
     "@deepseek-ai/dsh-client-ui-slots": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "react": "^18.2.0",
-    "@deepseek-ai/dsh-client-ui-renderer": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "@deepseek-ai/dsh-client-ui-model-selection": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "@deepseek-ai/dsh-client-ui-conversation": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
     "@deepseek-ai/dsh-client-ui-tool": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "@deepseek-ai/dsh-client-ui-primitives": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "@deepseek-ai/dsh-client-store": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "@deepseek-ai/dsh-agent-default-model": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "@deepseek-ai/dsh-token-meter": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-commands": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
     "@deepseek-ai/dsh-compaction": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "@deepseek-ai/dsh-user-approval": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-host-webserver": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
     "@deepseek-ai/dsh-jobs": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
-    "@deepseek-ai/dsh-agent-preset-registry": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0"
+    "@deepseek-ai/dsh-llm": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-session": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-session-query": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-subagent": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-system-prompt": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-token-meter": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-tools": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-user-approval": ">=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-rc.2 <0.3.0-0",
+    "@deepseek-ai/schemastery": "^3.18.4",
+    "react": "^18.2.0"
   },
   "scripts": {
     "build": "node scripts/build.mjs",

package/src/client/FusionHint.tsx

@@ -22,15 +22,22 @@ export function FusionHint({ sessionId, directory, load }: FusionHintProps) {
     const abort = new AbortController()
     const refresh = () => {
       void fetch(`${FUSION_API_PATH}?view=settings`, { credentials: 'same-origin', cache: 'no-store', signal: abort.signal })
-        .then(async response => { if (!response.ok) throw new Error('unavailable'); return response.json() as Promise<{ pair: unknown; authorized: boolean }> })
-        .then(state => { if (active) setMessage(!state.pair ? tr(lang, 'Fusion 尚未配置模型，请前往设置 → Fusion 选择 Lead 和 Sidekick。', 'Fusion has no models yet: open Settings → Fusion and choose a Lead and a Sidekick.')
-          : !state.authorized ? tr(lang, 'Fusion 当前配置未就绪，请前往设置 → Fusion 查看。', 'The Fusion setup is not ready: see Settings → Fusion.') : undefined) })
+        .then(async response => { if (!response.ok) throw new Error('unavailable'); return response.json() as Promise<{ pairs: { id: string; authorized: boolean; reason?: string }[] }> })
+        .then(state => {
+          if (!active) return
+          // The hint speaks for this conversation's combo, not for the first one.
+          const combo = state.pairs.find(pair => pair.id === selected?.model)
+          if (!state.pairs.length) setMessage(tr(lang, 'Fusion 尚未配置模型，请前往设置 → Fusion 选择 Lead 和 Sidekick。', 'Fusion has no models yet: open Settings → Fusion and choose a Lead and a Sidekick.'))
+          else if (!combo) setMessage(tr(lang, '当前组合已被删除，请在模型菜单中选择其他组合。', 'This combo was removed; pick another one in the model menu.'))
+          else if (!combo.authorized) setMessage(tr(lang, 'Fusion 当前配置未就绪，请前往设置 → Fusion 查看。', 'The Fusion setup is not ready: see Settings → Fusion.'))
+          else setMessage(undefined)
+        })
         .catch(() => { if (active) setMessage(tr(lang, '暂时无法确认 Fusion 配置，请前往设置 → Fusion 查看。', 'Cannot confirm the Fusion setup right now: see Settings → Fusion.')) })
     }
     refresh()
     const off = onSettingsChanged(refresh)
     return () => { active = false; abort.abort(); off() }
-  }, [fusion, lang])
+  }, [fusion, lang, selected?.model])
   if (!fusion) return null
   return <>
     {message && <p role="status" style={{ margin: '8px 12px', color: 'var(--dsw-alias-label-secondary)', fontSize: 12, lineHeight: '18px' }}>{message}</p>}

package/src/client/FusionPermission.tsx

@@ -0,0 +1,52 @@
+import { useEffect, useSyncExternalStore } from 'react'
+import type { ObservableSnapshot } from '@deepseek-ai/dsh-client-store'
+import type { ModelDirectoryState } from '@deepseek-ai/dsh-client-ui-model-selection/client'
+import { PermissionIconFullAccessRegular, PermissionIconReadOnlyRegular,
+  PermissionIconWorkspaceWriteRegular } from '@deepseek-ai/dsh-client-ui-primitives'
+import type { SandboxMode } from '../contracts.js'
+import { isFusionSelection } from '../identity.js'
+import { tr, useLang, type Lang } from './i18n.js'
+import { useFusionStatus } from './status-polling.js'
+
+const styles = `
+.fusion-permission{display:inline-flex;align-items:center;gap:4px;height:28px;min-width:0;max-width:220px;padding:0 6px;border-radius:var(--dsw-radius-sm);color:var(--dsw-alias-label-secondary);font-size:13px;line-height:20px;font-weight:500}
+.fusion-permission svg{width:14px;height:14px;flex:none}
+.fusion-permission .fusion-permission-role{flex:none;color:var(--dsw-alias-label-caption)}
+.fusion-permission .fusion-permission-mode{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+`
+
+const modeOf = (lang: Lang, mode: SandboxMode) => mode === 'read-only' ? tr(lang, '仅可查看', 'Read Only')
+  : mode === 'workspace-write' ? tr(lang, '工作区内修改', 'Workspace Write') : tr(lang, '完全权限', 'Full access')
+const iconOf = (mode: SandboxMode) => mode === 'read-only' ? <PermissionIconReadOnlyRegular />
+  : mode === 'workspace-write' ? <PermissionIconWorkspaceWriteRegular /> : <PermissionIconFullAccessRegular />
+
+export interface FusionPermissionProps { sessionId: string; directory: ObservableSnapshot<ModelDirectoryState>; load(): void }
+
+/**
+ * The permission of the model working now. The composer's native permission control
+ * belongs to the conversation (Lead) session, which Fusion confines to read-only, and
+ * that confinement matches no configured preset — so the control reads Custom while a
+ * task runs. This additive chip names the role and its mode, so the tool row never
+ * shows an unexplained Custom alone.
+ */
+export function FusionPermission({ sessionId, directory, load }: FusionPermissionProps) {
+  const selected = useSyncExternalStore(directory.subscribe, directory.getSnapshot).current
+  const fusion = isFusionSelection(selected ?? undefined)
+  const lang = useLang()
+  // The acting role is the whole point of this chip, so it always wants fresh polls.
+  const snapshot = useFusionStatus(sessionId, undefined, false, true)
+  useEffect(() => { load() }, [load])
+  const permissions = fusion ? snapshot?.status?.task?.permissions : undefined
+  if (!permissions) return null
+  const role = permissions.active === 'worker' ? 'Sidekick' : 'Lead'
+  const mode = permissions.active === 'worker' ? permissions.worker : permissions.lead
+  const hint = tr(lang,
+    `Fusion 按角色分离权限：Lead ${modeOf(lang, permissions.lead)}，Sidekick ${modeOf(lang, permissions.worker)}。输入框的权限控件属于对话会话（Lead），运行期间可能显示 Custom。`,
+    `Fusion separates permissions by role: Lead ${modeOf(lang, permissions.lead)}, Sidekick ${modeOf(lang, permissions.worker)}. The permission control belongs to the conversation (Lead) session, so it may read Custom while a task runs.`)
+  return <span className="fusion-permission" title={hint} aria-label={`${role} · ${modeOf(lang, mode)}`} data-ud-check="fusion-permission">
+    <style>{styles}</style>
+    {iconOf(mode)}
+    <span className="fusion-permission-role">{role}</span>
+    <span className="fusion-permission-mode">{modeOf(lang, mode)}</span>
+  </span>
+}