dsh-agy-link 0.4.43 → 0.4.44

package/CHANGELOG.md

@@ -1,9 +1,24 @@
 # Changelog
 
+## 0.4.44 (2026-10-09)
+
+### English
+
+- **Fix: a conversation stalled on a tool step no longer dead-ends after a host restart.** Continuation spans resolve their run from an **in-memory** `RunRegistry`; after DSH restarts (or the run is evicted) the recording is gone, and `stream()` used to fail that turn — and every retry of it — with "agy run … is no longer available (server restarted?) — please resend your message", an advice that could never succeed because the stale tool result stays at the end of the message list. The adapter now logs a warning and falls back to fresh-turn prompt assembly instead: the history digest carries the recorded tool result, and the session's `sessions.json` binding still points at the same agy conversation, so the next turn heals the conversation with no user action. Related hardening in the same change: (1) the `agy_tool` mirror now bypasses DSH's auto-review / permission gates via a `tools/pre-execute` hook (it only replays output agy already executed — routing it through the reviewer caused redundant review LLM calls, timeouts, and crashes on reviewer tool-call endings); (2) review-mode calls (`REVIEW_POLICY` system prompt) and calls with explicit `tools: []` are treated as auxiliary and never cut spans on tools; (3) on Windows, `.mjs`/`.js`/`.cjs` bins are spawned via `process.execPath` instead of failing with `EFTYPE` (this also makes the full test suite pass natively on Windows — the 33 pre-existing platform failures are gone). (PR #40)
+- **Add: hide models from the DSH model picker (`hiddenModels`).** The Antigravity settings section (below account-pool scheduling) now renders a "Model visibility" row with one toggle per known model: hidden models disappear from the `/model` picker, everything else stays visible (deny-list semantics, so newly discovered models appear by default). Hiding is picker-only by design — `resolveModel` still accepts hidden ids, so in-flight sessions and direct model references keep working, and no catalog-cache invalidation is needed. The list is served from `/status` (`catalogModels` + `hiddenModels`) through the same sanitizer that feeds `listModels`, so the UI and the picker can never disagree; writes go through the existing `POST /config` allowlist (validated as an array of model ids) and persist to the runtime-overrides file immediately. `DSH_AGY_HIDDEN_MODELS` (comma-separated) also works as an env fallback. The plugin now also emits the payload-free `llm/adapters-updated` event whenever picker output can change (`hiddenModels` writes, boot-probe discovery, re-login, manual quota refresh) — the webview picker caches its catalog snapshot and only re-reads after that event, so without it toggles would not show up until the next app restart. (PR #39)
+- **Fix: the Windows node-shim spawn merged from #40 now really runs the script instead of booting a second app instance.** `process.execPath` is the Electron binary in the packaged desktop host, so the `isNode` branch now sets `ELECTRON_RUN_AS_NODE=1`; plain node ignores the variable, so POSIX and the test suite are unaffected.
+
+### 中文 (Chinese)
+
+- **修复：停在工具步骤上的会话在宿主重启后不再进入死胡同。** 续接 span 依赖的 run 录像存放在**纯内存**的 `RunRegistry` 里;DSH 重启(或录像被淘汰)后录像即消失，`stream()` 会让该轮失败——而且每次重试都失败，报 "agy run … is no longer available (server restarted?) — please resend your message"。这个"请重发消息"的建议永远不可能成功：失效的工具结果始终钉在消息列表末尾，续接检测每轮都命中同一个 runId。现在适配器会记录一条警告并**回退到全新轮次的 prompt 组装**：历史 digest 携带已记录的工具结果，会话在 `sessions.json` 里的 conversation 绑定仍指向同一个 agy 会话，下一轮即自动自愈，无需用户做任何事。同一批提交中的相关加固:(1) `agy_tool` 镜像现在通过 `tools/pre-execute` 钩子绕过 DSH 的 auto-review / 权限门(它只是重放 agy 已经执行过的输出——送审会导致重复审查 LLM 调用、审查超时，以及审查员以 tool-calls 结尾时的崩溃);(2) 审查模式调用(`REVIEW_POLICY` 系统提示)与显式 `tools: []` 的调用按辅助调用对待，不再在工具步骤上切分 span;(3) Windows 下 `.mjs`/`.js`/`.cjs` 形式的 bin 改为经 `process.execPath` 启动，不再触发 `EFTYPE`(这也让整个测试套件在 Windows 上原生全绿——33 个既有平台失败清零)。（PR #40）
+- **新增：在 DSH 模型选择器中隐藏指定模型（`hiddenModels`）。** Antigravity 设置区（号池调度下方）新增"模型显示"一行，每个已知模型一个开关：关闭的模型从 `/model` 选择器中消失，其余照常显示（黑名单语义——新发现的模型默认可见）。隐藏只作用于选择器：`resolveModel` 仍接受被隐藏的模型 id，进行中的会话与直接引用不受影响，也无需清空模型目录缓存。模型列表由 `/status`（`catalogModels` + `hiddenModels`）提供，与 `listModels` 共用同一清洗逻辑，UI 与选择器永远不会不一致；写入走现有 `POST /config` 白名单（校验必须是模型 id 数组），立即持久化到 runtime-overrides 文件。环境变量 `DSH_AGY_HIDDEN_MODELS`（逗号分隔）亦可作为回退。插件现在会在所有会影响选择器输出的时机发出无负载的 `llm/adapters-updated` 事件（`hiddenModels` 写入、启动探测发现模型、重新登录、手动刷新额度）——webview 的模型选择器缓存目录快照、只在该事件后重读，缺少它时开关要到下次重启应用才会生效。（PR #39）
+- **修复：合入自 #40 的 Windows node 脚本启动现在真正执行脚本，而不是再启动一个 App 实例。** 打包桌面端里 `process.execPath` 是 Electron 二进制，因此 `isNode` 分支现在会设置 `ELECTRON_RUN_AS_NODE=1`；纯 node 会忽略该变量，POSIX 与测试不受影响。
+
 ## 0.4.43 (2026-10-06)
 
 ### English
 
+
 - **Fix (Windows): Chinese tool output is no longer mangled (issue #37).** Windows pipes carry bytes in the child's console code page: on a zh-CN system agy captures pwsh output as CP936 (GBK), and the plugin decoded every stream as UTF-8 — so the Chinese refusal text arrived as mojibake, and because that text is what agy stores in its conversation database the damage was permanent. stdout/stderr are now read as raw bytes and decoded **per line** through the console code page (`chcp` probe → GBK/Big5/Shift_JIS/EUC-KR/Windows-125x), falling back to UTF-8 whenever a line is valid UTF-8; POSIX behaviour is bit-for-bit unchanged (the probe returns `utf-8`). Lines — not chunks — are the decoding unit because a multi-byte character can straddle a chunk boundary but never a newline.
 - **Fix: `dsh plugin add git+https://…` installs now build the plugin (issue #38).** `dist/` is not committed and only `prepack` existed, which never runs for git dependencies — so a hub/git install produced a package without `dist/` and failed to load. A `prepare` script now builds on git installs (npm/pnpm install devDependencies for git deps first); npm consumers are unaffected because `prepare` does not run for published tarballs. The install also aborted **earlier** than that: `@deepseek-ai/dsh-client-locale` was declared as a **non-optional** peer, so npm's automatic peer installation tried to fetch the unpublished `@deepseek-ai/dsh-paths@^0.0.1-rc.1` chain from the public registry and failed with a 404 — every `@deepseek-ai/*` peer is now optional (the host provides them at runtime and the bundle keeps them external), matching how third-party DSH plugins declare theirs.
 - **Fix: the live "User location is not supported for the API use" refusal is now recognized, explained and routed around.** agy exits 3 with a `FAILED_PRECONDITION (code 400)` result envelope for this refusal, but the classifier only knew the older issue-#32 wording — so it surfaced as a bare `PROCESS_EXIT`, the sticky account never moved, and every retry hit the same unsupported location (hence the recurring failure). The signature is now matched, the failure carries a dedicated, retryable `ELIGIBILITY` code plus the actionable hint, and the refused account is rotated off the sticky pointer before the error surfaces (no cooldown penalty) — the automatic retry is then served by an account whose own proxy/egress region is supported.
@@ -17,6 +32,7 @@
 
 ### 中文 (Chinese)
 
+
 - **修复（Windows）：中文工具输出不再乱码（issue #37）。** Windows 管道里的字节使用**子进程的控制台代码页**：中文系统上 agy 捕获到的 pwsh 输出是 CP936（GBK），而插件把整条流按 UTF-8 解码——中文报错于是变成乱码；又因为这段文本正是 agy 写入会话库的内容，损坏不可追回。现在 stdout/stderr 以**原始字节**读取并按**行**用控制台代码页解码（`chcp` 探测 → GBK/Big5/Shift_JIS/EUC-KR/Windows-125x），凡是合法的 UTF-8 行仍按 UTF-8 处理；POSIX 行为逐字节不变（探测直接返回 `utf-8`）。以「行」而非「块」为解码单位，是因为多字节字符可能跨块但绝不会跨换行。
 - **修复：`dsh plugin add git+https://…` 安装现在会构建插件（issue #38）。** 仓库里没有提交 `dist/`，而只有 `prepack`——它**不会**在 git 依赖安装时执行，所以市场/git 安装得到的包没有 `dist/`，加载失败。现在新增 `prepare` 脚本，git 安装时会构建（npm/pnpm 会先为 git 依赖安装 devDependencies）；从 npm 安装的用户不受影响，因为 `prepare` 不会对已发布的 tarball 执行。安装其实在更早一步就已经失败：`@deepseek-ai/dsh-client-locale` 曾被声明为**非可选** peer，npm 的自动 peer 安装因此去公共 registry 拉取未发布的 `@deepseek-ai/dsh-paths@^0.0.1-rc.1` 依赖链并报 404 —— 现在所有 `@deepseek-ai/*` peer 都标为 optional（运行时由宿主提供，打包时保持 external），与第三方 DSH 插件的声明方式一致。
 - **修复：线上「User location is not supported for the API use」区域拒绝现在被正确识别、解释并绕开。** 该拒绝报文是 agy 以退出码 3 + `FAILED_PRECONDITION (code 400)` 结果信封抛出的，而分类器只认得 issue #32 时期的旧措辞——于是它被当成裸 `PROCESS_EXIT`，粘性账号也不会移动，每次重试都撞同一个不支持的地区，所以你会觉得"总是出现这个问题"。现在该签名已被匹配，失败会带专用且**可重试**的 `ELIGIBILITY` 错误码与可操作提示，同时在错误抛出前把被拒账号从粘性指针上换掉（**不扣冷却**），自动重试就会落到代理/出口地区受支持的账号上。

package/README.md

@@ -133,6 +133,7 @@ dsh plugin --profile web add dsh-agy-link
 | `permissionMode` | `DSH_AGY_MODE` | `skip` | 权限模式：`skip`（无人值守执行）/ `plan` / `accept-edits` |
 | `defaultModel` | `DSH_AGY_DEFAULT_MODEL` | `(agy 默认)` | 默认模型 slug |
 | `defaultEffort` | `DSH_AGY_DEFAULT_EFFORT` | `(模型默认)` | 思考预算：`low` / `medium` / `high` |
+| `hiddenModels` | `DSH_AGY_HIDDEN_MODELS` | `[]` | 在 `/model` 选择器中隐藏的模型 slug 列表（黑名单语义，新模型默认可见；建议直接在设置面板"模型显示"中点选管理） |
 | `timeoutMs` | `DSH_AGY_TIMEOUT_MS` | `600000` | 单轮活跃看门狗超时（毫秒） |
 | `workspaceRoot` | `DSH_AGY_WORKSPACE_ROOT` | 会话 cwd | agy 工作区根目录（默认跟随当前会话工作区） |
 
@@ -269,6 +270,7 @@ dsh plugin --profile web add dsh-agy-link
 | `permissionMode` | `DSH_AGY_MODE` | `skip` | `skip` (unattended execution) / `plan` / `accept-edits` |
 | `defaultModel` | `DSH_AGY_DEFAULT_MODEL` | `(agy default)` | Default model slug |
 | `defaultEffort` | `DSH_AGY_DEFAULT_EFFORT` | `(model default)` | Thinking budget: `low` / `medium` / `high` |
+| `hiddenModels` | `DSH_AGY_HIDDEN_MODELS` | `[]` | Model slugs hidden from the `/model` picker (deny-list, newly discovered models stay visible; manage them via the "Model visibility" row in the settings panel) |
 | `timeoutMs` | `DSH_AGY_TIMEOUT_MS` | `600000` | Activity watchdog timeout in milliseconds |
 | `workspaceRoot` | `DSH_AGY_WORKSPACE_ROOT` | session cwd | Working directory root |
 

package/dist/client.js

@@ -121,6 +121,9 @@ window.__ModuleLoader__.load({
 			"pool.label": "号池调度：",
 			"pool.sequential": "顺次耗尽",
 			"pool.roundRobin": "轮询均衡",
+			"models.label": "模型显示：",
+			"models.empty": "模型目录还没有可用模型，发一次对话或点“刷新额度”后再来管理",
+			"models.hint": "点击切换显示/隐藏；关闭的模型不在模型选择器中列出，进行中的会话不受影响。",
 			"header.refreshQuota": "刷新额度",
 			"header.refreshing": "刷新中",
 			"console.close": "关闭（Esc）",
@@ -212,6 +215,9 @@ window.__ModuleLoader__.load({
 			"pool.label": "Account-pool scheduling:",
 			"pool.sequential": "Use sequentially",
 			"pool.roundRobin": "Round-robin",
+			"models.label": "Model visibility:",
+			"models.empty": "No models in the catalog yet — send a message or click \"Refresh quota\", then come back to manage them",
+			"models.hint": "Click to show/hide. Hidden models are not listed in the model picker; ongoing sessions are unaffected.",
 			"header.refreshQuota": "Refresh quota",
 			"header.refreshing": "Refreshing...",
 			"console.close": "Close (Esc)",
@@ -303,6 +309,9 @@ window.__ModuleLoader__.load({
 			"pool.label": "Agendamento do pool de contas:",
 			"pool.sequential": "Usar em sequência",
 			"pool.roundRobin": "Rodízio",
+			"models.label": "Visibilidade dos modelos:",
+			"models.empty": "Ainda não há modelos no catálogo — envie uma mensagem ou clique em \"Atualizar cota\" e volte para gerenciá-los",
+			"models.hint": "Clique para mostrar/ocultar. Modelos ocultos não aparecem no seletor de modelos; as sessões em andamento não são afetadas.",
 			"header.refreshQuota": "Atualizar cota",
 			"header.refreshing": "Atualizando...",
 			"console.close": "Fechar (Esc)",
@@ -394,6 +403,9 @@ window.__ModuleLoader__.load({
 			"pool.label": "Programación del pool de cuentas:",
 			"pool.sequential": "Usar en secuencia",
 			"pool.roundRobin": "Turno rotativo",
+			"models.label": "Visibilidad de modelos:",
+			"models.empty": "Aún no hay modelos en el catálogo: envía un mensaje o haz clic en \"Actualizar cuota\" y vuelve para gestionarlos",
+			"models.hint": "Haz clic para mostrar/ocultar. Los modelos ocultos no aparecen en el selector de modelos; las sesiones en curso no se ven afectadas.",
 			"header.refreshQuota": "Actualizar cuota",
 			"header.refreshing": "Actualizando...",
 			"console.close": "Cerrar (Esc)",
@@ -2750,6 +2762,12 @@ body.dark,
 					await refresh();
 					setLoadingAction(null);
 				};
+				const toggleModelHidden = async (id, hide) => {
+					const next = new Set(status?.hiddenModels ?? []);
+					if (hide) next.add(id);
+					else next.delete(id);
+					await setCfg("hiddenModels", Array.from(next));
+				};
 				const setPrimary = async (id) => {
 					setLoadingAction(`primary:${id}`);
 					await postJson("/plugins/agy-link/pool/primary", { id });
@@ -2804,6 +2822,8 @@ body.dark,
 				};
 				const authPhase = status?.auth?.phase ?? "unknown";
 				const pool = status?.pool;
+				const catalogModels = status?.catalogModels ?? [];
+				const hiddenModelSet = new Set(status?.hiddenModels ?? []);
 				const accounts = pool?.accounts ?? [];
 				const isAuthed = authPhase === "ok" || accounts.length > 0;
 				const isBusy = loadingAction !== null;
@@ -3386,7 +3406,33 @@ body.dark,
 					type: "button",
 					style: pool?.mode === "round-robin" ? S.segBtnActive : S.segBtn,
 					onClick: () => void setMode("round-robin")
-				}, t("pool.roundRobin")))))));
+				}, t("pool.roundRobin")))), h("div", { style: {
+					display: "flex",
+					flexDirection: "column",
+					gap: "6px"
+				} }, h("span", { style: {
+					color: "var(--agy-text-primary)",
+					fontWeight: 600,
+					fontSize: "12.5px"
+				} }, t("models.label")), catalogModels.length === 0 ? h("span", { style: S.muted }, t("models.empty")) : h("div", { style: {
+					display: "flex",
+					flexWrap: "wrap",
+					gap: "6px"
+				} }, catalogModels.map((m) => {
+					const isHidden = hiddenModelSet.has(m.id);
+					return h("button", {
+						type: "button",
+						key: m.id,
+						title: m.id,
+						disabled: loadingAction === "config:hiddenModels",
+						style: isHidden ? {
+							...S.segBtn,
+							opacity: .45,
+							textDecoration: "line-through"
+						} : S.segBtnActive,
+						onClick: () => void toggleModelHidden(m.id, !isHidden)
+					}, m.name);
+				})), h("span", { style: S.muted }, t("models.hint"))))));
 			};
 			/** Modal dialog container rendered into document.body */
 			const AgyModalDialog = () => {

package/dist/index.js

@@ -92,6 +92,7 @@ function defaultConfig() {
 		compactionMaxChars: 8e5,
 		workspaceRoot: "",
 		fallbackModels: DEFAULT_FALLBACK_MODELS,
+		hiddenModels: [],
 		askTool: false,
 		mediaDir: "",
 		mediaTtlMs: 864e5,
@@ -259,6 +260,20 @@ function asNum(v) {
 	if (typeof v === "number" && Number.isFinite(v)) return v;
 	if (typeof v === "string" && v.trim() !== "" && Number.isFinite(Number(v))) return Number(v);
 }
+/** Trimmed, de-duplicated string list; non-string / blank entries are dropped. */
+function asStringArray(v) {
+	if (!Array.isArray(v)) return void 0;
+	const out = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const x of v) {
+		if (typeof x !== "string") continue;
+		const s = x.trim();
+		if (s === "" || seen.has(s)) continue;
+		seen.add(s);
+		out.push(s);
+	}
+	return out;
+}
 const MODES = [
 	"skip",
 	"plan",
@@ -294,6 +309,7 @@ function resolveConfig(entry, env = process.env, overrides = readOverrides()) {
 		compactionMaxChars: asNum(get("compactionMaxChars")) ?? base.compactionMaxChars,
 		workspaceRoot: asString(get("workspaceRoot")) ?? base.workspaceRoot,
 		fallbackModels: Array.isArray(get("fallbackModels")) ? get("fallbackModels").filter((x) => !!x && typeof x === "object" && typeof x.id === "string") : base.fallbackModels,
+		hiddenModels: asStringArray(get("hiddenModels")) ?? base.hiddenModels,
 		askTool: asBool(get("askTool")) ?? base.askTool,
 		mediaDir: asString(get("mediaDir")) ?? base.mediaDir,
 		mediaTtlMs: asNum(get("mediaTtlMs")) ?? base.mediaTtlMs,
@@ -325,6 +341,10 @@ function resolveConfig(entry, env = process.env, overrides = readOverrides()) {
 		if (t && t > 0) cfg.timeoutMs = t;
 	}
 	if (env.DSH_AGY_EXTRA_ARGS) cfg.extraArgs = env.DSH_AGY_EXTRA_ARGS.split(/\s+/).filter(Boolean);
+	if (env.DSH_AGY_HIDDEN_MODELS) {
+		const list = asStringArray(env.DSH_AGY_HIDDEN_MODELS.split(","));
+		if (list) cfg.hiddenModels = list;
+	}
 	if (env.DSH_AGY_WORKSPACE_ROOT) cfg.workspaceRoot = env.DSH_AGY_WORKSPACE_ROOT;
 	if (env.DSH_AGY_MEDIA_DIR) cfg.mediaDir = env.DSH_AGY_MEDIA_DIR;
 	if (env.DSH_AGY_MEDIA_TTL_MS) {
@@ -1475,6 +1495,36 @@ function buildFallbackCatalog(defs) {
 		efforts: Array.isArray(d.efforts) && d.efforts.length > 0 ? d.efforts.filter((e) => typeof e === "string" && e.trim() !== "") : null
 	}));
 }
+/**
+* Sanitized (id, name) projection of a catalog: trimmed non-empty ids with
+* first occurrence winning — exactly what listModels serves to DSH. Shared
+* with the settings UI's model-visibility list so the picker and the UI can
+* never disagree about which models exist.
+*/
+function sanitizeCatalogEntries(models) {
+	const seen = /* @__PURE__ */ new Set();
+	const entries = [];
+	const dropped = [];
+	for (const m of models) {
+		if (!m || typeof m.id !== "string") continue;
+		const id = m.id.trim();
+		if (id === "") continue;
+		if (seen.has(id)) {
+			dropped.push(id);
+			continue;
+		}
+		seen.add(id);
+		const name = typeof m.name === "string" && m.name.trim() !== "" ? m.name.trim() : id;
+		entries.push({
+			id,
+			name
+		});
+	}
+	return {
+		entries,
+		dropped
+	};
+}
 var ModelCatalog = class {
 	discover;
 	ttlMs;
@@ -2379,9 +2429,24 @@ function killTree(child) {
 		escalating.delete(child);
 	});
 }
+/**
+* Environment for spawning a script through `process.execPath`.
+*
+* In the packaged desktop host `process.execPath` is the **Electron binary**,
+* not node: without this flag the child would boot a second GUI instance
+* instead of executing the script. Plain node ignores the variable, so the
+* POSIX/test paths are unaffected.
+*/
+function nodeScriptEnv(env) {
+	return {
+		...env,
+		ELECTRON_RUN_AS_NODE: "1"
+	};
+}
 function startAgyProcess(opts) {
 	const started = Date.now();
 	const viaCmd = IS_WIN && isCmdShim(opts.bin);
+	const isNode = IS_WIN && /\.(mjs|js|cjs)$/i.test(opts.bin);
 	const env = withAgyQuietEnv(opts.env ?? process.env);
 	const child = viaCmd ? spawn(process.env.ComSpec ?? "cmd.exe", [
 		"/d",
@@ -2398,6 +2463,15 @@ function startAgyProcess(opts) {
 		],
 		windowsVerbatimArguments: true,
 		windowsHide: true
+	}) : isNode ? spawn(process.execPath, [opts.bin, ...opts.args], {
+		cwd: opts.cwd,
+		env: nodeScriptEnv(env),
+		stdio: [
+			"pipe",
+			"pipe",
+			"pipe"
+		],
+		windowsHide: true
 	}) : spawn(opts.bin, opts.args, {
 		cwd: opts.cwd,
 		env,
@@ -3269,29 +3343,16 @@ var AgyAdapter = class extends LlmAdapter {
 	}
 	async listModels(_provider) {
 		this.deps.catalog.refreshIfNeeded();
-		const cat = this.deps.catalog.get();
-		const seen = /* @__PURE__ */ new Set();
-		const models = [];
-		const dropped = [];
-		for (const m of cat.models) {
-			if (!m || typeof m.id !== "string") continue;
-			const id = m.id.trim();
-			if (id === "") continue;
-			if (seen.has(id)) {
-				dropped.push(id);
-				continue;
-			}
-			seen.add(id);
-			const name = typeof m.name === "string" && m.name.trim() !== "" ? m.name.trim() : id;
-			models.push({
-				provider: PROVIDER_ID,
-				id,
-				name,
-				inputModalities: ["text", "image"]
-			});
-		}
+		const cfg = this.deps.getConfig();
+		const { entries, dropped } = sanitizeCatalogEntries(this.deps.catalog.get().models);
 		if (dropped.length > 0) this.warnOnce("catalog-dupes", "model catalog contained duplicate ids [" + dropped.join(", ") + "] — kept first occurrence so DSH does not drop the whole provider group (INVALID_CATALOG)");
-		return models;
+		const hidden = new Set(cfg.hiddenModels.map((s) => s.trim()));
+		return entries.filter((m) => !hidden.has(m.id)).map((m) => ({
+			provider: PROVIDER_ID,
+			id: m.id,
+			name: m.name,
+			inputModalities: ["text", "image"]
+		}));
 	}
 	async resolveModel(_provider, model, _signal) {
 		const cfg = this.deps.getConfig();
@@ -3372,10 +3433,12 @@ var AgyAdapter = class extends LlmAdapter {
 		const cfg = this.deps.getConfig();
 		const bin = this.deps.bin();
 		if (!bin) throw new LlmError("agy binary not found on PATH — install it via https://antigravity.google/docs/cli/install", Err.AGY_NOT_INSTALLED);
-		const isAux = options.purpose === "compaction" || options.purpose === "session-title";
-		if (isAux && !cfg.allowAuxiliary) throw new LlmError("auxiliary calls are disabled for the antigravity route (allowAuxiliary: false)", Err.AUX_DISABLED);
+		const isReview = typeof options.system === "string" && options.system.includes("REVIEW_POLICY");
+		const isAux = options.purpose === "compaction" || options.purpose === "session-title" || isReview;
+		if (isAux && !isReview && !cfg.allowAuxiliary) throw new LlmError("auxiliary calls are disabled for the antigravity route (allowAuxiliary: false)", Err.AUX_DISABLED);
 		const toolNames = new Set((options.tools ?? []).map((t) => t.name));
 		const isCodeMode = toolNames.has("run_code") && !toolNames.has("agy_tool");
+		const hasToolSupport = options.tools === void 0 || toolNames.has("agy_tool") || toolNames.has("run_code");
 		const sessionKey = options.sessionId !== void 0 ? String(options.sessionId) : "";
 		let workspaceRoot = cfg.workspaceRoot;
 		if (workspaceRoot === "") {
@@ -3389,28 +3452,11 @@ var AgyAdapter = class extends LlmAdapter {
 		const continuation = detectContinuation(options.messages);
 		if (continuation !== null) {
 			const rec = this.deps.runs.get(continuation.runId);
-			if (rec === void 0) {
-				yield {
-					type: "usage",
-					usage: {
-						inputTokens: 0,
-						outputTokens: 0
-					}
-				};
-				yield {
-					type: "finish",
-					reason: {
-						kind: "error",
-						failure: {
-							message: "agy run " + continuation.runId + " is no longer available (server restarted?) — please resend your message",
-							code: Err.AGY_ERROR
-						}
-					}
-				};
+			if (rec !== void 0) {
+				yield* this.driveSpan(rec, continuation.eventIndex + 1, hasToolSupport, isCodeMode);
 				return;
 			}
-			yield* this.driveSpan(rec, continuation.eventIndex + 1, true, isCodeMode);
-			return;
+			this.warnOnce("stale-continuation:" + continuation.runId, "agy run " + continuation.runId + " is no longer available in memory (server restarted?) — falling back to fresh turn prompt assembly");
 		}
 		const catalog = this.deps.catalog.get();
 		const rawModel = options.model;
@@ -3797,7 +3843,7 @@ var AgyAdapter = class extends LlmAdapter {
 				message: "internal error: " + brief(String(err))
 			});
 		});
-		yield* this.driveSpan(rec, 0, !isAux, isCodeMode);
+		yield* this.driveSpan(rec, 0, !isAux && hasToolSupport, isCodeMode);
 	}
 	/**
 	* Stream one span of a recording: map events from `from` until the mapper
@@ -29958,6 +30004,11 @@ function apply(ctx, entryConfig = {}) {
 	let lastRun = null;
 	let lastParser = new StreamJsonParser();
 	const getConfig = () => resolveConfig(entryConfig);
+	const notifyPicker = () => {
+		try {
+			ctx.emit("llm/adapters-updated");
+		} catch {}
+	};
 	const bin = () => {
 		if (binCache === void 0 || binCache === null) binCache = resolveAgyBin(getConfig());
 		return binCache;
@@ -30085,6 +30136,7 @@ function apply(ctx, entryConfig = {}) {
 				log("version probe failed — continuing with fallback catalog");
 			}
 			await catalog.refreshIfNeeded().catch(() => void 0);
+			notifyPicker();
 		})();
 	}, 4e3);
 	bootProbeTimer.unref?.();
@@ -30121,6 +30173,7 @@ function apply(ctx, entryConfig = {}) {
 	const toolsSvcRef = { current: null };
 	const askToolDispose = { current: null };
 	const mirrorToolDispose = { current: null };
+	const preExecuteDispose = { current: null };
 	const syncAskTool = () => {
 		const want = getConfig().askTool && bin() !== null;
 		if (want && askToolDispose.current === null && toolsSvcRef.current) {
@@ -30150,7 +30203,17 @@ function apply(ctx, entryConfig = {}) {
 		toolsSvcRef.current = sub.get("tools");
 		syncAskTool();
 		syncMirrorTool();
+		const unlisten = sub.on("tools/pre-execute", async (exec, next) => {
+			if (exec.name === "agy_tool") return { kind: "allow" };
+			return next();
+		}, {
+			prepend: true,
+			global: true
+		});
+		preExecuteDispose.current = typeof unlisten === "function" ? unlisten : null;
 		return () => {
+			if (preExecuteDispose.current !== null) preExecuteDispose.current();
+			preExecuteDispose.current = null;
 			if (askToolDispose.current !== null) askToolDispose.current();
 			askToolDispose.current = null;
 			if (mirrorToolDispose.current !== null) mirrorToolDispose.current();
@@ -30213,6 +30276,8 @@ function apply(ctx, entryConfig = {}) {
 							count: cat.models.length,
 							lastError: cat.lastError ?? null
 						},
+						catalogModels: sanitizeCatalogEntries(cat.models).entries,
+						hiddenModels: cfg.hiddenModels,
 						bindings: Object.keys(store.all()).length,
 						lastRun
 					});
@@ -30259,7 +30324,7 @@ function apply(ctx, entryConfig = {}) {
 							if (acc) quota.refreshAccountQuota(acc).catch(() => void 0);
 						} else quota.refreshAllQuotas().catch(() => void 0);
 						store.clear();
-						catalog.forceRefresh().catch(() => void 0);
+						catalog.forceRefresh().then(() => notifyPicker()).catch(() => void 0);
 					}
 					sendJson(res, 200, st);
 				})();
@@ -30534,7 +30599,7 @@ function apply(ctx, entryConfig = {}) {
 						const acc = pool.getAccount(id);
 						if (acc) await quota.refreshAccountQuota(acc, true);
 					} else await quota.refreshAllQuotas(true);
-					catalog.forceRefresh().catch(() => void 0);
+					catalog.forceRefresh().then(() => notifyPicker()).catch(() => void 0);
 					sendJson(res, 200, {
 						ok: true,
 						pool: pool.getPoolData()
@@ -30578,14 +30643,20 @@ function apply(ctx, entryConfig = {}) {
 						"defaultModel",
 						"defaultEffort",
 						"askTool",
-						"workspaceRoot"
+						"workspaceRoot",
+						"hiddenModels"
 					].includes(key)) {
 						sendJson(res, 400, { error: "key not settable" });
 						return;
 					}
+					if (key === "hiddenModels" && (!Array.isArray(body.value) || !body.value.every((x) => typeof x === "string"))) {
+						sendJson(res, 400, { error: "hiddenModels must be an array of model ids" });
+						return;
+					}
 					setOverride(key, body.value);
 					syncAskTool();
 					syncMirrorTool();
+					if (key === "hiddenModels") notifyPicker();
 					sendJson(res, 200, {
 						ok: true,
 						key,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-agy-link",
-  "version": "0.4.43",
+  "version": "0.4.44",
   "description": "Google Antigravity (agy CLI) models for DeepSeek Harness — stream Gemini/Claude/GPT-OSS subscriptions into DSH with thinking, tool activity, token usage and in-GUI Google OAuth login.",
   "type": "module",
   "license": "MIT",