@sqdr2/dsh-fusion 0.3.2 → 0.3.3

package/lib/dsh-fusion.js

@@ -519,143 +519,49 @@ const FUSION_API_PATH = "/api/fusion";
 const LEGACY_FUSION_API_PATH = "/api/model-fusion";
 /** The plugin id and package name this project used before the rename. */
 const LEGACY_PLUGIN_NAME = "dsh-model-fusion";
-/** Registered provider route for the Fusion model entry. */
+/** Registered provider route for the Fusion model entries. */
 const FUSION_PROVIDER = "dsh-fusion";
-/** The single model id the Fusion entry advertises. */
+/**
+* The model id of the combo every installation starts with.
+*
+* It is a pair id like any other; keeping this exact spelling for the first
+* combo means a durable `model/selection` written before combos existed still
+* names a combo that exists.
+*/
 const FUSION_MODEL = "auto";
 /**
-* The provider route this plugin registered before it was renamed from
-* `dsh-model-fusion`. Sessions created then still name it in their durable
-* `model/selection` event, so reading it as Fusion is what keeps those
-* sessions working; writing it is never correct.
+* The model ids this provider advertises: `auto` plus one generated
+* `pair-xxxxxxxx` per additional combo. The browser bundle inlines this module,
+* so the namespace shape is fixed here rather than read from a settings
+* document at import time.
 */
-const LEGACY_FUSION_PROVIDER = "dsh-model-fusion";
+const FUSION_MODEL_PATTERN = /^(?:auto|pair-[a-z0-9]{6,12})$/;
+/** Whether a model id names a Fusion combo on this provider. */
+const isFusionModel = (model) => typeof model === "string" && FUSION_MODEL_PATTERN.test(model);
 /** Whether a provider route belongs to this plugin, under either name. */
 const isFusionProvider = (provider) => provider === "dsh-fusion" || provider === "dsh-model-fusion";
-/** Whether a route names the Fusion entry, under either name. */
-const isFusionSelection = (route) => isFusionProvider(route?.provider) && route?.model === "auto";
+/** Whether a route names a Fusion combo, under either provider spelling. */
+const isFusionSelection = (route) => isFusionProvider(route?.provider) && isFusionModel(route?.model);
 /**
-* How a native model-switch notice names this entry (`provider/model`).
+* How a native model-switch notice names a combo: `provider/model`, or the bare
+* model when both sides share this provider (switching from one combo to
+* another).
 *
-* Both spellings are listed: a session that switched to Fusion before the
-* rename carries the old one in its durable log, and the notice is the same
-* non-change on every Fusion step either way.
+* The notice is a pseudo-change: it compares the virtual menu route with the
+* physical Lead route that actually dispatches, so it would otherwise repeat on
+* every Fusion step. Both provider spellings are accepted because a session
+* that switched to Fusion before the rename carries the old one in its durable
+* log; any combo id matches, since combos are not physical models.
 */
-const FUSION_SELECTION_LABELS = [`${FUSION_PROVIDER}/${FUSION_MODEL}`, `${LEGACY_FUSION_PROVIDER}/${FUSION_MODEL}`];
+const FUSION_SELECTION_LABEL_PATTERN = /(?:(?:dsh-fusion|dsh-model-fusion)\/|→ )(?:auto|pair-[a-z0-9]{6,12})$/;
+/** Whether a switch-notice summary describes a Fusion combo as either side. */
+const isFusionSelectionLabel = (summary) => typeof summary === "string" && FUSION_SELECTION_LABEL_PATTERN.test(summary);
 /**
-* Whether a route already names the entry under its current name. A durable
-* intent that fails this is rewritten before the next request is assembled;
-* the legacy spelling is a read-side alias, not a route that still dispatches.
+* Whether a route already names a combo under its current provider spelling. A
+* durable intent that fails this is rewritten before the next request is
+* assembled; the legacy spelling is a read-side alias, not a dispatching route.
 */
-const isCurrentFusionSelection = (route) => route?.provider === "dsh-fusion" && route.model === "auto";
-//#endregion
-//#region src/host/native-selection.ts
-/** Catalog-only local adapter; the native request is physically routed before dispatch. */
-var FusionCatalogAdapter = class extends LlmAdapter {
-	leadInputModalities;
-	constructor(leadInputModalities) {
-		super();
-		this.leadInputModalities = leadInputModalities;
-	}
-	providerInfo(provider) {
-		return {
-			id: provider,
-			name: "Fusion"
-		};
-	}
-	async listModels(provider) {
-		const lead = await this.leadInputModalities?.() ?? [];
-		return [{
-			provider,
-			id: FUSION_MODEL,
-			name: "Fusion · 自动",
-			description: "Lead 与 Worker 协作。在设置 → Fusion 中配置模型。",
-			inputModalities: [.../* @__PURE__ */ new Set(["text", ...lead])]
-		}];
-	}
-	async resolveModel(provider, model) {
-		if (provider !== "dsh-fusion" || model !== "auto") throw new Error("Unknown local Fusion selection");
-		return (await this.listModels(provider))[0];
-	}
-	async *stream(_options) {
-		throw new Error("Fusion 尚未就绪。请前往设置 → Fusion 配置 Lead 和 Worker。");
-	}
-};
-/** Public native lifecycle integration. No model-menu replacement or Host patch. */
-function installNativeFusionSelection(ctx, input) {
-	const pending = /* @__PURE__ */ new Map();
-	const failures = /* @__PURE__ */ new Map();
-	const desired = /* @__PURE__ */ new Map();
-	const selection = (agent) => desired.get(agent.id) ?? input.selection(agent);
-	const selected = (agent) => input.coordinator()?.bindings.read(agent.id)?.binding.selected === true;
-	const change = (agent) => {
-		if (agent.session.header.parentSession || pending.has(agent.id)) return;
-		const coordinator = input.coordinator(), profile = input.profile(), route = selection(agent);
-		if (!coordinator) return;
-		if (isFusionSelection(route)) {
-			if (!selected(agent) && profile) coordinator.selectBeforeAssembly(agent, profile);
-			if (selected(agent)) {
-				if (!isCurrentFusionSelection(agent.session.snapshotEvents().findLast((event) => event.type === "model/selection")?.data)) agent.session.append("model/selection", {
-					provider: FUSION_PROVIDER,
-					model: FUSION_MODEL
-				});
-				failures.delete(agent.id);
-			}
-			return;
-		}
-		if (!selected(agent)) return;
-		const transition = (async () => {
-			if (agent.status !== "idle") await coordinator.pause(agent);
-			await coordinator.clear(agent);
-			failures.delete(agent.id);
-		})().catch((error) => {
-			failures.set(agent.id, String(error));
-		}).finally(() => {
-			pending.delete(agent.id);
-		});
-		pending.set(agent.id, transition);
-	};
-	const disposers = [
-		ctx.on("session/event", (session, event) => {
-			if (event.type !== "model/selection") return;
-			desired.set(session.id, event.data);
-			const agent = ctx.agents.get(SessionId$1(session.id));
-			if (agent && (agent.status === "idle" || !isFusionSelection(event.data))) change(agent);
-			else if (agent && !selected(agent)) agent.cancel({
-				kind: "hook",
-				reason: "Fusion selection takes effect after this turn settles"
-			}, { keepInbox: true });
-		}),
-		ctx.on("agent/status", ({ agent, status }) => {
-			if (status !== "running" || agent.session.header.parentSession) return;
-			if (pending.has(agent.id) && selected(agent)) {
-				agent.cancel({
-					kind: "hook",
-					reason: "Model switch is draining the previous Fusion task"
-				}, { keepInbox: true });
-				return;
-			}
-			try {
-				change(agent);
-			} catch (error) {
-				failures.set(agent.id, String(error));
-			}
-		}),
-		ctx.on("agent/request", async (payload, next) => {
-			const config = await next(), agent = payload.agent;
-			if (agent.session.header.parentSession) return config;
-			const route = selection(agent);
-			if (pending.has(agent.id) && selected(agent) || failures.has(agent.id)) throw new Error(failures.get(agent.id) ?? "Fusion 正在完成模型切换，请稍后继续");
-			if (isFusionSelection(route)) {
-				if (!selected(agent)) throw new Error("请先在设置 → Fusion 配置 Lead 和 Worker，再继续此会话。");
-			} else if (selected(agent)) throw new Error("先停止当前 Fusion 任务，再切换模型。");
-			return config;
-		}, { prepend: true })
-	];
-	return () => {
-		for (const dispose of disposers.reverse()) dispose();
-	};
-}
+const isCurrentFusionSelection = (route) => route?.provider === "dsh-fusion" && isFusionModel(route.model);
 //#endregion
 //#region src/profile/keepalive.ts
 /** No provider-name heuristic can establish cache support for a DSH route. */
@@ -701,18 +607,6 @@ function profileRoutes(profile) {
 }
 //#endregion
 //#region src/host/settings.ts
-/** Saved Lead route from a raw settings or profile document, or undefined when unconfigured or pointed at Fusion itself. */
-function savedLeadRoute(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-	const route = value.lead;
-	if (!route || typeof route !== "object" || Array.isArray(route)) return void 0;
-	const provider = route.provider, model = route.model;
-	if (typeof provider !== "string" || typeof model !== "string" || isFusionProvider(provider)) return void 0;
-	return {
-		provider,
-		model
-	};
-}
 /** Configuration chooses registered physical models; it cannot create adapters. */
 function validatePairChoice(value, catalog) {
 	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(bi("请选择 Lead 和 Worker", "Choose a Lead and a Sidekick"));
@@ -749,11 +643,11 @@ function validatePairChoice(value, catalog) {
 		} }
 	};
 }
-function profileFromChoice(pair) {
+function profileFromChoice(pair, id = "fusion-auto") {
 	const { outputTokens, ...routes } = pair;
 	return {
 		schemaVersion: 1,
-		id: "fusion-auto",
+		id,
 		version: outputTokens?.worker === 128e3 ? "0.1.0-worker-128k" : "0.1.0-faithful",
 		enabled: true,
 		quality: "experimental",
@@ -764,11 +658,15 @@ function profileFromChoice(pair) {
 		...outputTokens === void 0 ? {} : { context: Object.fromEntries(Object.entries(outputTokens).map(([role, reserveOutputTokens]) => [role, { reserveOutputTokens }])) }
 	};
 }
-/** Product defaults; explicit legacy/benchmark profiles retain their old contract. */
-function modelProfileFromChoice(pair) {
+/**
+* Product defaults; explicit legacy/benchmark profiles retain their old contract.
+* `id` names the combo; the first one keeps the historical `fusion-auto` so a
+* profile frozen before combos existed keeps its identity.
+*/
+function modelProfileFromChoice(pair, id = "fusion-auto") {
 	const { outputTokens: _output, ...native } = pair;
 	return {
-		...profileFromChoice(native),
+		...profileFromChoice(native, id),
 		version: "0.2.0-enforced-v3",
 		interactionMode: "model-like",
 		workflowPolicy: "enforced-v3"
@@ -786,6 +684,328 @@ function choiceFromProfile(profile) {
 	};
 }
 //#endregion
+//#region src/host/pairs.ts
+/** Where the combo list lives; `settings:profile` stays readable for migration. */
+const PAIRS_DOCUMENT = "settings:pairs";
+const LEGACY_PROFILE_DOCUMENT = "settings:profile";
+/** The migrated first combo keeps the label the historical entry had. */
+const DEFAULT_PAIR_NAME = "自动";
+const profileIdOf = (model) => `fusion-${model}`;
+/** The combo a frozen profile belongs to, or undefined for a non-combo profile. */
+function modelOfProfileId(id) {
+	const model = id.startsWith("fusion-") ? id.slice(7) : void 0;
+	return isFusionModel(model) ? model : void 0;
+}
+const newModel = (taken) => {
+	for (let attempt = 0; attempt < 100; attempt += 1) {
+		const model = `pair-${randomUUID().replace(/-/g, "").slice(0, 8)}`;
+		if (!taken.includes(model)) return model;
+	}
+	throw new Error(bi("无法生成新的组合标识", "Could not allocate a new combo id"));
+};
+function object$1(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+function route(value) {
+	const item = object$1(value);
+	if (!item || typeof item.provider !== "string" || !item.provider.trim() || typeof item.model !== "string" || !item.model.trim()) return void 0;
+	return {
+		provider: item.provider,
+		model: item.model,
+		...typeof item.reasoningEffort === "string" && item.reasoningEffort.trim() ? { reasoningEffort: item.reasoningEffort } : {}
+	};
+}
+/**
+* Read one stored pair without the Host catalog: a combo whose model has since
+* been retired must stay visible (and editable) instead of hiding the list.
+*/
+function structuralPair(value) {
+	const raw = object$1(value);
+	const lead = route(raw?.lead), worker = route(raw?.worker);
+	if (!raw || !lead || !worker) return void 0;
+	const compactorRoute = route(object$1(raw.compactor)?.route);
+	const maxOutputTokens = object$1(raw.compactor)?.maxOutputTokens;
+	let cacheKeepalive;
+	try {
+		cacheKeepalive = keepaliveChoice(raw.cacheKeepalive);
+	} catch {
+		cacheKeepalive = void 0;
+	}
+	let compactor;
+	try {
+		compactor = compactorRoute ? compactorChoice({
+			route: compactorRoute,
+			maxOutputTokens
+		}) : void 0;
+	} catch {
+		compactor = void 0;
+	}
+	return {
+		lead,
+		worker,
+		...compactor === void 0 ? {} : { compactor },
+		...cacheKeepalive === void 0 ? {} : { cacheKeepalive }
+	};
+}
+/** A pre-combo profile document as the choice it was saved from. */
+function choiceFromStoredProfile(value) {
+	const raw = object$1(value);
+	const pair = structuralPair(raw);
+	if (!raw || !pair) return void 0;
+	if (raw.interactionMode === "model-like") return pair;
+	const context = object$1(raw.context);
+	const outputTokens = Object.fromEntries(["lead", "worker"].map((role) => [role, object$1(context?.[role])?.reserveOutputTokens]).filter(([, tokens]) => Number.isSafeInteger(tokens) && Number(tokens) > 0 && Number(tokens) !== 8e3).map(([role, tokens]) => [role, Number(tokens)]));
+	return Object.keys(outputTokens).length ? {
+		...pair,
+		outputTokens
+	} : pair;
+}
+function parsePairs(value) {
+	const raw = object$1(value);
+	if (!raw || raw.schemaVersion !== 1 || !Array.isArray(raw.pairs)) return void 0;
+	const seen = /* @__PURE__ */ new Set();
+	return raw.pairs.flatMap((item) => {
+		const entry = object$1(item);
+		const pair = structuralPair(entry?.pair);
+		if (!entry || !pair || typeof entry.id !== "string" || !isFusionModel(entry.id) || seen.has(entry.id)) return [];
+		if (typeof entry.name !== "string" || !entry.name.trim() || entry.name.length > 40) return [];
+		seen.add(entry.id);
+		return [{
+			id: entry.id,
+			name: entry.name,
+			pair
+		}];
+	});
+}
+/** The saved combos; a pre-combo installation migrates to one `auto` combo on read. */
+function readPairs(store) {
+	const document = store.readDocument(PAIRS_DOCUMENT);
+	if (document) {
+		const pairs = parsePairs(document.value);
+		if (!pairs?.length) throw new Error(bi("组合配置已损坏，请在 Fusion 页面重新保存", "The combo list is unreadable; save it again from the Fusion page"));
+		return {
+			revision: document.revision,
+			pairs,
+			migrated: false
+		};
+	}
+	const legacy = choiceFromStoredProfile(store.readDocument(LEGACY_PROFILE_DOCUMENT)?.value);
+	return legacy ? {
+		revision: 0,
+		pairs: [{
+			id: FUSION_MODEL,
+			name: DEFAULT_PAIR_NAME,
+			pair: legacy
+		}],
+		migrated: true
+	} : {
+		revision: 0,
+		pairs: [],
+		migrated: false
+	};
+}
+function pairName(value, fallback) {
+	if (typeof value !== "string") return fallback;
+	const name = value.trim();
+	if (!name) return fallback;
+	if (name.length > 40) throw new Error(bi(`组合名称最多 40 个字符`, `A combo name is at most 40 characters`));
+	return name;
+}
+/**
+* Validate the list a settings action proposes. Ids are assigned here, never by
+* the client, so a stale tab cannot name a combo that is already frozen
+* elsewhere; reordering only moves the menu rows.
+*/
+function validatePairs(value, catalog, existing) {
+	if (!Array.isArray(value) || !value.length) throw new Error(bi("请至少保留一个组合", "Keep at least one combo"));
+	if (value.length > 6) throw new Error(bi(`最多保存 6 个组合`, `At most 6 combos can be saved`));
+	const known = new Set(existing.map((pair) => pair.id));
+	const taken = /* @__PURE__ */ new Set();
+	const names = /* @__PURE__ */ new Set();
+	return value.map((item, index) => {
+		const raw = object$1(item);
+		if (!raw) throw new Error(bi("组合配置无效", "Invalid combo entry"));
+		const requested = typeof raw.id === "string" ? raw.id : "";
+		const id = (known.has(requested) || requested === "auto") && !taken.has(requested) ? requested : newModel([...taken]);
+		taken.add(id);
+		const name = pairName(raw.name, index === 0 ? DEFAULT_PAIR_NAME : `组合 ${index + 1}`);
+		if (names.has(name)) throw new Error(bi(`组合名称 "${name}" 重复`, `The combo name "${name}" is used twice`));
+		names.add(name);
+		return {
+			id,
+			name,
+			pair: validatePairChoice(raw.pair, catalog)
+		};
+	});
+}
+function pairsDocument(pairs) {
+	return {
+		schemaVersion: 1,
+		pairs: pairs.map(({ id, name, pair }) => ({
+			id,
+			name,
+			pair
+		}))
+	};
+}
+/**
+* Persist the list under one compare-and-swap revision. The first combo is
+* mirrored into the pre-combo `settings:profile` document so an older tab (or a
+* downgrade) still finds the pair it knows about.
+*/
+function writePairs(store, expectedRevision, pairs) {
+	const mirror = pairs.find((pair) => pair.id === "auto") ?? pairs[0];
+	const legacy = store.readDocument(LEGACY_PROFILE_DOCUMENT);
+	return store.writeDocuments([{
+		id: PAIRS_DOCUMENT,
+		expectedRevision,
+		value: pairsDocument(pairs)
+	}, {
+		id: LEGACY_PROFILE_DOCUMENT,
+		expectedRevision: legacy?.revision ?? 0,
+		value: modelProfileFromChoice(mirror.pair, profileIdOf(mirror.id))
+	}])[0];
+}
+//#endregion
+//#region src/host/native-selection.ts
+const textOnly = [.../* @__PURE__ */ new Set(["text"])];
+/** Catalog-only local adapter; the native request is physically routed before dispatch. */
+var FusionCatalogAdapter = class extends LlmAdapter {
+	models;
+	constructor(models) {
+		super();
+		this.models = models;
+	}
+	providerInfo(provider) {
+		return {
+			id: provider,
+			name: "Fusion"
+		};
+	}
+	async listModels(provider) {
+		const declared = await this.models?.().catch(() => []) ?? [];
+		return (declared.length ? declared : [{
+			id: FUSION_MODEL,
+			name: "Fusion · 自动",
+			inputModalities: textOnly
+		}]).map((entry) => ({
+			provider,
+			id: entry.id,
+			name: entry.name,
+			description: entry.description ?? "Lead 与 Worker 协作。在设置 → Fusion 中配置模型。",
+			inputModalities: [.../* @__PURE__ */ new Set(["text", ...entry.inputModalities])]
+		}));
+	}
+	async resolveModel(provider, model) {
+		if (provider !== "dsh-fusion" || !isFusionModel(model)) throw new Error("Unknown local Fusion selection");
+		const declared = (await this.listModels(provider)).find((entry) => entry.id === model);
+		if (!declared) throw new Error("Unknown local Fusion selection");
+		return declared;
+	}
+	async *stream(_options) {
+		throw new Error("Fusion 尚未就绪。请前往设置 → Fusion 配置 Lead 和 Worker。");
+	}
+};
+/** Public native lifecycle integration. No model-menu replacement or Host patch. */
+function installNativeFusionSelection(ctx, input) {
+	const pending = /* @__PURE__ */ new Map();
+	const failures = /* @__PURE__ */ new Map();
+	const desired = /* @__PURE__ */ new Map();
+	const selection = (agent) => desired.get(agent.id) ?? input.selection(agent);
+	const binding = (agent) => input.coordinator()?.bindings.read(agent.id)?.binding;
+	const selected = (agent) => binding(agent)?.selected === true;
+	/** The combo a selected session is frozen to, or undefined when it runs no Fusion task. */
+	const runningCombo = (agent) => {
+		const current = binding(agent);
+		return current?.selected ? modelOfProfileId(current.profile.id) ?? "auto" : void 0;
+	};
+	const blocked = (model) => input.reason?.(model) ?? "请先在设置 → Fusion 配置 Lead 和 Worker，再继续此会话。";
+	const change = (agent) => {
+		if (agent.session.header.parentSession || pending.has(agent.id)) return;
+		const coordinator = input.coordinator(), route = selection(agent);
+		if (!coordinator) return;
+		if (isFusionSelection(route)) {
+			const model = route?.model ?? "auto";
+			const profile = input.profile(model), running = runningCombo(agent);
+			if (running !== void 0 && running !== model) {
+				const transition = (async () => {
+					if (agent.status !== "idle") await coordinator.pause(agent);
+					await coordinator.clear(agent);
+					if (profile) coordinator.selectBeforeAssembly(agent, profile);
+					else failures.set(agent.id, blocked(model));
+				})().catch((error) => {
+					failures.set(agent.id, String(error));
+				}).finally(() => {
+					pending.delete(agent.id);
+				});
+				pending.set(agent.id, transition);
+				return;
+			}
+			if (running === void 0) if (profile) coordinator.selectBeforeAssembly(agent, profile);
+			else failures.set(agent.id, blocked(model));
+			if (selected(agent)) {
+				if (!isCurrentFusionSelection(agent.session.snapshotEvents().findLast((event) => event.type === "model/selection")?.data)) agent.session.append("model/selection", {
+					provider: FUSION_PROVIDER,
+					model
+				});
+				failures.delete(agent.id);
+			}
+			return;
+		}
+		if (!selected(agent)) return;
+		const transition = (async () => {
+			if (agent.status !== "idle") await coordinator.pause(agent);
+			await coordinator.clear(agent);
+			failures.delete(agent.id);
+		})().catch((error) => {
+			failures.set(agent.id, String(error));
+		}).finally(() => {
+			pending.delete(agent.id);
+		});
+		pending.set(agent.id, transition);
+	};
+	const disposers = [
+		ctx.on("session/event", (session, event) => {
+			if (event.type !== "model/selection") return;
+			desired.set(session.id, event.data);
+			const agent = ctx.agents.get(SessionId$1(session.id));
+			if (agent && (agent.status === "idle" || !isFusionSelection(event.data))) change(agent);
+			else if (agent && !selected(agent)) agent.cancel({
+				kind: "hook",
+				reason: "Fusion selection takes effect after this turn settles"
+			}, { keepInbox: true });
+		}),
+		ctx.on("agent/status", ({ agent, status }) => {
+			if (status !== "running" || agent.session.header.parentSession) return;
+			if (pending.has(agent.id) && selected(agent)) {
+				agent.cancel({
+					kind: "hook",
+					reason: "Model switch is draining the previous Fusion task"
+				}, { keepInbox: true });
+				return;
+			}
+			try {
+				change(agent);
+			} catch (error) {
+				failures.set(agent.id, String(error));
+			}
+		}),
+		ctx.on("agent/request", async (payload, next) => {
+			const config = await next(), agent = payload.agent;
+			if (agent.session.header.parentSession) return config;
+			const route = selection(agent);
+			if (pending.has(agent.id) && selected(agent) || failures.has(agent.id)) throw new Error(failures.get(agent.id) ?? "Fusion 正在完成模型切换，请稍后继续");
+			if (isFusionSelection(route)) {
+				if (!selected(agent)) throw new Error(blocked(route?.model ?? "auto"));
+			} else if (selected(agent)) throw new Error("先停止当前 Fusion 任务，再切换模型。");
+			return config;
+		}, { prepend: true })
+	];
+	return () => {
+		for (const dispose of disposers.reverse()) dispose();
+	};
+}
+//#endregion
 //#region src/host/cache-defaults.ts
 /**
 * Default prompt-cache behaviour for the models most people pair in Fusion, from each provider's official
@@ -1171,12 +1391,18 @@ var CachePolicy = class {
 		}));
 	}
 };
-/** One row of the settings page: what applies, why, what the defaults say, and what was observed. */
+/**
+* One row of the settings page: what applies, why, what the defaults say, and
+* what was observed. Every saved combo contributes its routes, so a second
+* combo's models are listed and labelled even before a session uses them.
+*/
 function cacheView(policy, pair, pairChoice) {
-	const same = (a, provider, model) => a?.provider === provider && a.model === model;
-	return policy.routes(pair ? [pair.lead, pair.worker] : []).map(({ provider, model }) => {
-		const role = same(pair?.lead, provider, model) ? "lead" : same(pair?.worker, provider, model) ? "worker" : void 0;
-		const effective = policy.resolve(provider, model, role ?? "lead", role ? pairChoice?.[role] : void 0);
+	const pairs = Array.isArray(pair) ? pair : pair ? [pair] : [];
+	const same = (role, provider, model) => pairs.some((item) => item[role].provider === provider && item[role].model === model);
+	const choiceOf = (role) => pairs.find((item) => item.cacheKeepalive)?.["cacheKeepalive"]?.[role] ?? pairChoice?.[role];
+	return policy.routes(pairs.flatMap((item) => [item.lead, item.worker])).map(({ provider, model }) => {
+		const role = same("lead", provider, model) ? "lead" : same("worker", provider, model) ? "worker" : void 0;
+		const effective = policy.resolve(provider, model, role ?? "lead", role ? choiceOf(role) : void 0);
 		const stats = policy.stats(provider, model), { family, route } = effective.defaults;
 		return {
 			provider,
@@ -4924,7 +5150,7 @@ var NativeFusionScopes = class {
 				...decision,
 				messages: [...decision.messages.filter((message) => {
 					const source = message.source;
-					return !(source?.kind === "model-selection" && source.form === "notice" && FUSION_SELECTION_LABELS.some((label) => source.summary.endsWith(label)));
+					return !(source?.kind === "model-selection" && source.form === "notice" && isFusionSelectionLabel(source.summary));
 				}).map((message) => this.callbacks.projectMessage?.(agent, entry.binding, role, message) ?? message), ...taskContext ? [taskContext] : []]
 			};
 		}, { prepend: true }));
@@ -5174,9 +5400,16 @@ function captureWorkerBrief(store, taskId, agent, turn, step, revision) {
 function workerToolBriefProblem(store, taskId, exec, revision, transport) {
 	const events = exec.agent?.session.snapshotEvents();
 	const message = events?.findLast((event) => event.type === "assistant/message" && event.data.message.content.some((block) => block.type === "tool-call" && block.id === exec.rootCallId)) ?? (transport === void 0 ? void 0 : events?.findLast((event) => event.type === "assistant/message" && event.data.message.content.some((block) => block.type === "tool-call" && block.name === transport)));
-	if (!message || message.type !== "assistant/message" || message.data.interrupted) return "Worker tool requires a complete native model request";
-	const row = store.readDocument(`worker-request:${exec.agent.id}:${message.data.turn}:${message.data.step}`)?.value;
-	if (row?.schemaVersion !== 1 || row.taskId !== taskId || row.sessionId !== exec.agent.id || row.turn !== message.data.turn || row.step !== message.data.step) return "Worker tool has no captured brief identity";
+	let row;
+	if (message && message.type === "assistant/message" && !message.data.interrupted) {
+		row = store.readDocument(`worker-request:${exec.agent.id}:${message.data.turn}:${message.data.step}`)?.value;
+		if (row?.schemaVersion !== 1 || row.taskId !== taskId || row.sessionId !== exec.agent.id || row.turn !== message.data.turn || row.step !== message.data.step) return "Worker tool has no captured brief identity";
+	} else if (transport !== void 0) {
+		const rows = store.listDocumentIds(`worker-request:${exec.agent.id}:`).map((id) => store.readDocument(id)?.value).filter((r) => Boolean(r && r.schemaVersion === 1 && r.taskId === taskId && r.sessionId === exec.agent.id));
+		rows.sort((a, b) => (a.turn ?? 0) - (b.turn ?? 0) || (a.step ?? 0) - (b.step ?? 0));
+		row = rows.at(-1);
+		if (!row) return "Worker tool has no captured brief identity";
+	} else return "Worker tool requires a complete native model request";
 	if (row.briefRevision !== revision) return "A newer Lead brief superseded this request; process it before further tools or a report";
 	const order = store.load(taskId)?.currentWorkOrder;
 	if (row.workOrderId !== order?.id && (row.workOrderId || order?.mode)) return "A newer work order superseded this request; process its plan before further tools";
@@ -6311,6 +6544,17 @@ function installCompactionRouting(ctx, input) {
 //#endregion
 //#region src/host/native-role-sandbox.ts
 const roleSeparated = (binding) => binding.profile.workflowPolicy === "enforced-v3";
+const intentId = (sessionId) => `sandbox-intent:${sessionId}`;
+/**
+* The mode the user chose for a confined Fusion conversation, which is the mode
+* the Sidekick runs under. Undefined until Fusion has confined the Lead, or after
+* the conversation left Fusion and its own mode was restored.
+*/
+function readSandboxIntent(store, sessionId) {
+	const intent = store.readDocument(intentId(sessionId))?.value;
+	if (!intent || intent.schemaVersion !== 1 || !intent.active) return void 0;
+	return { mode: intent.mode };
+}
 /**
 * Role separation enforced below the prompt: the Lead's session runs under the
 * Host's own read-only sandbox (bash and filesystem are refused by the OS
@@ -6331,15 +6575,12 @@ var NativeRoleSandbox = class {
 	get #policy() {
 		return this.ctx.get("sandboxPolicy");
 	}
-	#id(sessionId) {
-		return `sandbox-intent:${sessionId}`;
-	}
 	#intent(sessionId) {
-		return this.store.readDocument(this.#id(sessionId))?.value;
+		return this.store.readDocument(intentId(sessionId))?.value;
 	}
 	#save(intent) {
-		const prior = this.store.readDocument(this.#id(intent.sessionId));
-		this.store.writeDocument(this.#id(intent.sessionId), prior?.revision ?? 0, {
+		const prior = this.store.readDocument(intentId(intent.sessionId));
+		this.store.writeDocument(intentId(intent.sessionId), prior?.revision ?? 0, {
 			...intent,
 			ownSeqs: intent.ownSeqs.slice(-32)
 		});
@@ -11143,6 +11384,17 @@ const EN = {
 	"继续消息的投递结果尚未确认。检查会话后使用 /fusion recover 提交检查记录。": "Delivery of the continuation is unconfirmed. Check the conversation, then use /fusion recover."
 };
 const english = (text) => text == null ? text : EN[text] ?? text;
+/**
+* The role working right now: an in-flight request names it exactly (requests read
+* newest first), and between requests the phase does ('DIRECT' is the Lead writing).
+*/
+function activeRole(requests, phase) {
+	const running = requests.find((request) => request.purpose === "conversation" && request.outcome === "entered");
+	if (running) return running.role;
+	if (phase === "WORKER_RUNNING" || phase === "REWORK") return "worker";
+	if (phase === "PLANNING" || phase === "REVIEWING" || phase === "DIRECT") return "lead";
+	return null;
+}
 function taskStage(state, checking, workerStepLimitReached = false, workerQuotaExhausted = false) {
 	const control = state.control;
 	const value = (stage, detail = null, attention = false) => ({
@@ -11227,6 +11479,13 @@ function readStatus(store, sessionId, index) {
 		...modelStage,
 		...pendingDelivery
 	};
+	const intent = roleSeparated(binding) ? readSandboxIntent(store, sessionId) : void 0;
+	const takeover = runtime?.schemaVersion === 1 && runtime.taskId === taskId && runtime.takeover === true;
+	const permissions = intent && {
+		lead: takeover ? intent.mode : "read-only",
+		worker: intent.mode,
+		active: activeRole(facts.requests, state.phase)
+	};
 	return {
 		...base,
 		task: {
@@ -11243,6 +11502,7 @@ function readStatus(store, sessionId, index) {
 				worker: modelControl?.routes.worker ?? binding.profile.worker,
 				compactor: binding.profile.compactor?.route ?? null
 			},
+			...permissions ? { permissions } : {},
 			...facts,
 			automatedChecks: Array.isArray(runtime?.checks) && runtime?.taskId === taskId ? runtime.checks.length : null,
 			pendingApprovals: state.control.pendingApprovalIds.length,
@@ -12253,7 +12513,6 @@ async function apply(ctx, config = {}) {
 	const cachePolicy = new CachePolicy(store);
 	backfillHistory(store);
 	const budget = new NativeRequestBudget(store, config.authorizationPath);
-	let defaultProfile;
 	const physicalCatalog = async () => {
 		const catalog = await ctx.sessionController.modelCatalog();
 		return {
@@ -12261,19 +12520,82 @@ async function apply(ctx, config = {}) {
 			groups: catalog.groups.filter((group) => !isFusionProvider(group.id))
 		};
 	};
-	const configuredProfile = async () => {
-		defaultProfile = void 0;
-		const saved = store.readDocument("settings:profile");
-		if (!saved && (!config.profilePath || !isAbsolute(config.profilePath))) throw new Error(bi("请先在设置的 Fusion 页面选择 Lead 和 Worker", "Open Settings → Fusion and choose a Lead and a Sidekick first"));
-		const raw = saved?.value ?? loadJsonObject(config.profilePath);
+	/**
+	* The combos to resolve: the saved list, or the one profile file a benchmark
+	* deployment names. A profile file keeps its legacy contract, so only saved
+	* combos are rebuilt from a choice.
+	*/
+	const comboPlan = () => {
+		const snapshot = readPairs(store);
+		if (snapshot.pairs.length) return {
+			revision: snapshot.revision,
+			items: snapshot.pairs
+		};
+		if (config.profilePath && isAbsolute(config.profilePath)) {
+			const raw = loadJsonObject(config.profilePath);
+			const pair = choiceFromStoredProfile(raw);
+			if (pair) return {
+				revision: snapshot.revision,
+				items: [{
+					id: FUSION_MODEL,
+					name: "自动",
+					pair,
+					raw
+				}]
+			};
+		}
+		return {
+			revision: snapshot.revision,
+			items: []
+		};
+	};
+	let combos;
+	const resolveCombos = async () => {
+		const plan = comboPlan();
 		const catalog = await physicalCatalog();
-		const pair = validatePairChoice(raw, catalog);
-		const next = saved ? modelProfileFromChoice(pair) : raw;
-		defaultProfile = resolveProfile(next, next.interactionMode === "model-like" ? loadModelPromptBundle() : loadPromptBundle(), { authorizedRoutes: catalog.groups.flatMap((group) => group.models.map((model) => ({
+		const authorizedRoutes = catalog.groups.flatMap((group) => group.models.map((model) => ({
 			provider: group.id,
 			model: model.id
-		}))) });
-		return defaultProfile;
+		})));
+		const profiles = /* @__PURE__ */ new Map(), failures = /* @__PURE__ */ new Map();
+		for (const item of plan.items) try {
+			const pair = validatePairChoice(item.pair, catalog);
+			const next = item.raw ?? modelProfileFromChoice(pair, profileIdOf(item.id));
+			profiles.set(item.id, resolveProfile(next, next.interactionMode === "model-like" ? loadModelPromptBundle() : loadPromptBundle(), { authorizedRoutes }));
+		} catch (error) {
+			failures.set(item.id, error instanceof Error ? error.message : String(error));
+		}
+		combos = {
+			revision: plan.revision,
+			items: plan.items.map(({ id, name, pair }) => ({
+				id,
+				name,
+				pair
+			})),
+			profiles,
+			failures
+		};
+		return combos;
+	};
+	const knownCombos = async () => combos ?? await resolveCombos();
+	let reloading = false;
+	const profileOf = (model) => {
+		const found = combos?.profiles.get(model);
+		if (!found && !reloading) {
+			reloading = true;
+			resolveCombos().catch(() => void 0).finally(() => {
+				reloading = false;
+			});
+		}
+		return found;
+	};
+	/** The profile a plain (unselected) request falls back to: the first usable combo. */
+	const primaryProfile = async () => {
+		const state = await knownCombos();
+		const profile = state.profiles.values().next().value;
+		if (profile) return profile;
+		const [first] = state.failures.values();
+		throw new Error(first ?? bi("请先在设置的 Fusion 页面选择 Lead 和 Worker", "Open Settings → Fusion and choose a Lead and a Sidekick first"));
 	};
 	const needsBudget = (profile) => Boolean(config.authorizationPath) || profile.interactionMode !== "model-like";
 	let runtime;
@@ -12287,7 +12609,7 @@ async function apply(ctx, config = {}) {
 		if (runtime) return Promise.resolve(runtime);
 		if (creating) return creating;
 		creating = (async () => {
-			const profile = frozen ?? await configuredProfile();
+			const profile = frozen ?? await primaryProfile();
 			runtime = new FusionCoordinator(ctx, store, {
 				profile,
 				workerTools: config.workerTools ?? defaultWorkerTools,
@@ -12322,26 +12644,47 @@ async function apply(ctx, config = {}) {
 		});
 		return creating;
 	};
-	const leadInputModalities = async () => {
+	const fusionModels = async () => {
+		let items;
 		try {
-			const saved = store.readDocument("settings:profile")?.value;
-			const lead = savedLeadRoute(saved) ?? (config.profilePath && isAbsolute(config.profilePath) ? savedLeadRoute(loadJsonObject(config.profilePath)) : void 0);
-			if (!lead) return void 0;
-			return (await ctx.llm.resolveModelInfo(lead.provider, lead.model)).inputModalities;
+			items = readPairs(store).pairs;
 		} catch {
-			return;
+			return [];
 		}
+		if (!items.length && config.profilePath && isAbsolute(config.profilePath)) {
+			const pair = choiceFromStoredProfile(loadJsonObject(config.profilePath));
+			items = pair ? [{
+				id: FUSION_MODEL,
+				name: "自动",
+				pair
+			}] : [];
+		}
+		return Promise.all(items.map(async (item) => {
+			let modalities = [];
+			try {
+				modalities = (await ctx.llm.resolveModelInfo(item.pair.lead.provider, item.pair.lead.model)).inputModalities ?? [];
+			} catch {
+				modalities = [];
+			}
+			return {
+				id: item.id,
+				name: `Fusion · ${item.name}`,
+				inputModalities: modalities
+			};
+		}));
 	};
-	ctx.effect(() => ctx.llm.registerAdapter([FUSION_PROVIDER], new FusionCatalogAdapter(leadInputModalities)));
+	ctx.effect(() => ctx.llm.registerAdapter([FUSION_PROVIDER], new FusionCatalogAdapter(fusionModels)));
 	ctx.effect(() => installNativeFusionSelection(ctx, {
 		coordinator: () => runtime,
-		profile: () => defaultProfile,
+		profile: profileOf,
+		reason: (model) => combos?.failures.get(model) ?? (combos?.items.length ? bi("该组合已被删除或无法使用，请在模型菜单中选择其他组合。", "That combo was removed or cannot run; pick another one in the model menu.") : void 0),
 		selection: (agent) => {
 			const selection = agent.session.snapshotEvents().findLast((event) => event.type === "model/selection");
 			if (selection?.type === "model/selection") return selection.data;
-			if (bindings.read(agent.id)?.binding.selected) return {
+			const bound = bindings.read(agent.id)?.binding;
+			if (bound?.selected) return {
 				provider: FUSION_PROVIDER,
-				model: FUSION_MODEL
+				model: modelOfProfileId(bound.profile.id) ?? "auto"
 			};
 			const header = agent.session.requestHeader();
 			return header ? {
@@ -12389,38 +12732,58 @@ async function apply(ctx, config = {}) {
 				}
 				if (url.searchParams.get("view") === "catalog") return json(res, 200, await ctx.sessionController.modelCatalog());
 				if (url.searchParams.get("view") === "cache") {
-					let profile;
+					let pairs = [];
 					try {
-						profile = await configuredProfile();
+						pairs = [...(await knownCombos()).profiles.values()].map((profile) => ({
+							lead: profile.profile.lead,
+							worker: profile.profile.worker,
+							cacheKeepalive: profile.profile.cacheKeepalive
+						}));
 					} catch {
-						profile = void 0;
+						pairs = [];
 					}
 					return json(res, 200, {
 						checked: CACHE_DEFAULTS_CHECKED,
-						models: cacheView(cachePolicy, profile ? {
-							lead: profile.profile.lead,
-							worker: profile.profile.worker
-						} : void 0, profile?.profile.cacheKeepalive)
+						models: cacheView(cachePolicy, pairs)
 					});
 				}
 				if (url.searchParams.get("view") === "settings") {
-					const saved = store.readDocument("settings:profile");
-					let profile, reason, authorized = false;
-					try {
-						profile = await configuredProfile();
-						if (needsBudget(profile.profile)) budget.check(profileRoutes(profile.profile));
-						authorized = true;
-					} catch (error) {
-						reason = error instanceof Error ? error.message : String(error);
-					}
+					const state = await resolveCombos();
+					const pairs = state.items.map((item) => {
+						const profile = state.profiles.get(item.id);
+						if (!profile) return {
+							id: item.id,
+							name: item.name,
+							pair: item.pair,
+							authorized: false,
+							reason: state.failures.get(item.id)
+						};
+						let authorized = false, reason;
+						try {
+							if (needsBudget(profile.profile)) budget.check(profileRoutes(profile.profile));
+							authorized = true;
+						} catch (error) {
+							reason = error instanceof Error ? error.message : String(error);
+						}
+						return {
+							id: item.id,
+							name: item.name,
+							pair: choiceFromProfile(profile.profile),
+							authorized,
+							...reason ? { reason } : {}
+						};
+					});
+					const blocked = pairs.find((pair) => !pair.authorized);
 					return json(res, 200, {
-						revision: saved?.revision ?? 0,
+						revision: state.revision,
 						catalog: await physicalCatalog(),
-						pair: profile ? choiceFromProfile(profile.profile) : null,
-						authorized,
-						reason,
+						pairs,
+						maxPairs: 6,
+						pair: pairs[0]?.pair ?? null,
+						authorized: pairs.length > 0 && !blocked,
+						...blocked?.reason ? { reason: blocked.reason } : {},
 						managedAuthorization: Boolean(config.authorizationPath),
-						policy: profile?.profile.interactionMode ?? "legacy",
+						policy: state.profiles.values().next().value?.profile.interactionMode ?? "model-like",
 						actualBilledUsd: null,
 						apiEquivalentUsd: null
 					});
@@ -12432,7 +12795,7 @@ async function apply(ctx, config = {}) {
 					const profile = binding && binding.selected ? {
 						profile: binding.profile,
 						prompts: binding.prompts
-					} : await configuredProfile();
+					} : await primaryProfile();
 					(await getRuntime(profile)).transport.assertAvailable();
 					if (needsBudget(profile.profile)) budget.check(profileRoutes(profile.profile));
 					available = true;
@@ -12533,10 +12896,17 @@ async function apply(ctx, config = {}) {
 			}
 			if (body.action === "configure") {
 				if (!Number.isSafeInteger(body.revision) || Number(body.revision) < 0) throw new Error(bi("配置版本无效，请刷新后重试", "Invalid settings revision; refresh and retry"));
-				const pair = validatePairChoice(body.pair, await physicalCatalog());
-				const revision = store.writeDocument("settings:profile", Number(body.revision), modelProfileFromChoice(pair));
-				const profile = await configuredProfile();
-				await getRuntime(profile);
+				const catalog = await physicalCatalog(), current = readPairs(store);
+				const pairs = validatePairs(Array.isArray(body.pairs) ? body.pairs : [{
+					...current.pairs[0] ?? {
+						id: "auto",
+						name: "自动"
+					},
+					pair: body.pair
+				}, ...current.pairs.slice(1)], catalog, current.pairs);
+				const revision = writePairs(store, Number(body.revision), pairs);
+				const profile = (await resolveCombos()).profiles.values().next().value;
+				if (profile) await getRuntime(profile);
 				return json(res, 200, {
 					ok: true,
 					revision
@@ -12544,13 +12914,12 @@ async function apply(ctx, config = {}) {
 			}
 			if (body.action === "authorize") {
 				if (config.authorizationPath) throw new Error(bi("运行额度由外部授权文件管理，不能在此覆盖", "Run limits are managed by an external authorization file and cannot be overridden here"));
-				const saved = store.readDocument("settings:profile");
-				if (!saved || saved.revision !== body.revision) throw new Error(bi("模型组合已变化，请刷新后再启用额度", "The pair changed; refresh before enabling limits"));
-				const profile = await configuredProfile();
-				if (store.readDocument("settings:profile")?.revision !== body.revision) throw new Error(bi("模型组合已变化，请刷新后再启用额度", "The pair changed; refresh before enabling limits"));
+				if (readPairs(store).revision !== body.revision) throw new Error(bi("组合列表已变化，请刷新后再启用额度", "The combo list changed; refresh before enabling limits"));
+				const state = await resolveCombos();
+				if (readPairs(store).revision !== body.revision) throw new Error(bi("组合列表已变化，请刷新后再启用额度", "The combo list changed; refresh before enabling limits"));
 				return json(res, 200, {
 					ok: true,
-					expiresAt: authorizeConfiguredPair(store, profileRoutes(profile.profile), body.limits).expiresAt
+					expiresAt: authorizeConfiguredPair(store, [...state.profiles.values()].flatMap((profile) => profileRoutes(profile.profile)), body.limits).expiresAt
 				});
 			}
 			throw new Error(bi("请使用原模型菜单选择 Fusion 或切换普通模型", "Use the model menu to select Fusion or another model"));
@@ -12578,7 +12947,7 @@ async function apply(ctx, config = {}) {
 				const binding = bindings.read(invocation.agent.id)?.binding;
 				if (!binding?.selected) return {
 					kind: "success",
-					text: bi("当前会话未启用 Fusion。请在模型选择器中选择 Fusion · 自动。", "Fusion is not selected in this conversation. Choose Fusion · auto in the model menu.")
+					text: bi("当前会话未启用 Fusion。请在模型选择器中选择一个 Fusion 组合。", "Fusion is not selected in this conversation. Choose a Fusion combo in the model menu.")
 				};
 				if (action === "status" || action === "") {
 					const controller = await getRuntime({
@@ -12650,7 +13019,7 @@ async function apply(ctx, config = {}) {
 		store.close();
 	});
 	try {
-		await getRuntime(await configuredProfile());
+		await getRuntime(await primaryProfile());
 	} catch {
 		const selected = bindings.selected()[0];
 		if (selected) await getRuntime({