dsh-auto-model-routing 0.4.1 → 0.5.0

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 0.5.0
+
+- **Breaking — one AUTO strategy.** The opt-in legacy four-tier chain is removed: the tier router and its rubric, the per-family `mainEfforts` / `childRoutes` mappings and their settings tabs, the reply-bar tier menu and `label` parameter, `judgements.jsonl` writes, `scripts/label-report.mjs` and the `eval/run.mjs` baseline. Default AUTO behavior (main effort, child capability routing, exact-child binding, Magpie transports, caps, allowlists, fork refusal) is unchanged.
+- **Breaking — no strategy versions.** The `policy` setting and the `policyVersion` / `mappingVersion` / `rubricVersion` markers are gone, as is the `version` field on child records and feedback events and the usage report's `schema`. New feedback snapshots record the strategy family (`strategy`). The rule file is now `rubric.json` (same bytes).
+- **Family strategies.** Everything about the Claude and GPT families (supported main models, transport prefixes, effort starting points, capability slots, accepted providers) lives in `src/strategies/`; a new family is one strategy file plus registration. The registry rejects conflicting strategies at load.
+- **Old data stays readable.** Retired `policy`, `mainEfforts` and `childRoutes` keys are ignored, listed as `deprecated` and removed on the next settings save; submitting them is rejected. Child records written by 0.4.x restore without a version check (only the three known historical keys are tolerated, then dropped). Old feedback rows and events stay readable; the usage report keeps them in their original historical group. `judgements.jsonl` is kept read-only for the report.
+- **Rollback.** Pin the published 0.4.2 package: in `dsh.yaml`, set this entry to `source: remote`, `spec: dsh-auto-model-routing@0.4.2`, `version: 0.4.2`, run `dsh build` and restart the Host. Data boundary: child records rewritten by 0.5.0 and feedback rows written by 0.5.0 are not readable by 0.4.2 (fail closed; recreate those child sessions), and settings saved under 0.5.0 no longer contain the retired mapping keys. Back up `state/auto-model-routing/` and the plugin `config.json` before upgrading if you may roll back.
+- The Jev decision deadline now defaults to 5000 ms (was 3000 ms) and can be set up to 8000 ms (was 4500 ms); an explicitly saved value is kept. The `route_subagent` tool deadline is 10 s so it outlasts the longest decision.
+- The package build now clears `lib/` before compiling, so deleted or renamed modules never ship from a stale output directory.
+
+## 0.4.2
+
+- AUTO now handles Claude and GPT model families only: selecting any other main model switches the session to MANUAL instead of failing the turn in the effort mapper.
+- Support the renamed `dsh-magpie-connector` Magpie route as an exact policy transport (replacing `dsh-magpie`); `dsh-magpie-connect` remains supported.
+- Fix the missing feedback entry on turns whose request configuration did not change: the main decision is marked applied from the effective request header instead of waiting for a new one.
+- Record two implicit feedback facts as separate ledger events keyed by session and decision: reply exposure and a later switch to MANUAL. No message text is stored; routing is unchanged.
+- The usage report adds a mutually exclusive implicit-signal breakdown per comparison group, with a fixed caveat that implicit no-objection is not the same as appropriate.
+- Sync the AUTO-selected effort through the official selection and simplify the picker display.
+
 ## 0.4.1
 
 - Add the on-demand `auto-model-routing-report` skill and read-only `lib/usage-report.js`: joins policy-v2 decisions to actual per-call usage by message ID, grouped by version × model × depth, with coverage gaps, sample thresholds and fixed caveats. Observational only; never writes, spawns or uses the network, and never prints message text, paths or session IDs.

package/README.md

@@ -55,7 +55,8 @@ Restart DSH and refresh the Web page. In **Settings → Auto model routing**, ch
 
 ### Main model stays fixed; children are selected separately
 
-- **Main chat:** `lower / baseline / higher` moves at most one supported effort step below/at/above the model's verified recommended starting point. The cap defaults to `xhigh`; AUTO never selects `max`. It does not change the main provider/model or write global model defaults.
+- **Main chat:** `lower / baseline / higher` moves at most one supported effort step below/at/above the model's verified recommended starting point. The cap defaults to `xhigh`; AUTO never selects `max`. It keeps the main provider/model and synchronizes the selected effort through official `selectModel`, which also saves global defaults.
+- **Claude/GPT families only:** AUTO manages models whose id (after any transport prefix) starts with `claude-` or `gpt-`. Selecting any other main model — DeepSeek, GLM, Grok, Gemini, Kimi, Qwen, … — switches the session to MANUAL and locks the chip: it shows an outlined info icon, and hovering the whole button explains the support scope with an issue/PR link to the repository. Switching back to a Claude/GPT model restores a clickable MANUAL chip; AUTO is never re-enabled automatically.
 - **Fresh children:** capability is `bounded / analytical / frontier`; effort is judged separately. Claude slots are Haiku / Sonnet / Opus 5.5; GPT slots are Luna / Sol / Sol. The current catalog, supported efforts and official child allowlist must all permit the route. Magpie uses its exact provider and full family-prefixed model IDs, not a fallback to local transports.
 - **Explicit choices win:** specifying a model or effort leaves only the other dimension to judge. Specifying both skips Jev and validates the route. Missing task scope stops delegation rather than guessing.
 - **Official creation binds the route:** fresh `subagent` and fresh `spawn_teammate` paths bind an exact child identity before its first request. `route_subagent` is an optional preview—not proof of application and not a user constraint to copy into a subsequent call. Fork and unbound creation paths are unsupported; there is no silent substitution.
@@ -74,16 +75,21 @@ Preset model menus expose documented versions, not live availability guarantees.
 
 **Certainty is not the selected probability.** Choice certainty is `(pmax − 1/n) / (1 − 1/n)`: with three candidates, a 70% top probability gives 55% certainty. The panel shows the service's returned certainty and full candidate distribution separately, including returned zeroes; missing values are marked unavailable. Neither number is task success rate.
 
+### Magpie transports and picker display
+
+AUTO accepts both exact transports, `dsh-magpie-connector` and `dsh-magpie-connect`. They are not aliases: full model ids, live model capabilities, supported effort/caps, the current allowlist and the parent's captured allowlist all retain their exact transport identity. Families without a registered strategy need an explicit model and a verifiable effort. With a MANUAL root session the preview returns `routed: false` without judging or state writes. Already bound children replay their saved route.
+
+AUTO applies the selected effort to the current main request and awaits official `selectModel` on the same provider/model when the effort changes. This also updates global defaults; the official picker shows one effort value. MANUAL requests pass through unchanged and bound children never write the main selection. A selection-sync failure is logged while the current request retains its selected effort. Magpie menu grouping still requires ohmydsh's managed five-package Host extension; stock rc.2 keeps a flat list. See [Magpie setup and display requirements](<../dsh-magpie-connector/README.md#model-menu-groups-and-effort>); local tests do not establish deployment or live GUI acceptance.
+
 ## Good to know
 
 - **Failures are visible.** Main judgment failure disables AUTO with a reason; child judgment/route failure stops dispatch. No local classifier, automatic retry, upgrade or cross-service fallback.
 - **MANUAL stops adjustments, not history.** It does not restore an earlier effort. The official current selection remains in control; existing bound children keep their route while the plugin is enabled.
 - **Data leaves the machine.** AUTO sends shape-redacted task text (up to 8000 characters) and short previous-turn excerpts to your chosen service. Redaction is best effort, not a guarantee that all secrets are removed. Test Connection sends only a fixed public sample and can incur a small charge.
 - **Keys use official DSH credentials**, never plugin configuration. Launch-environment keys take precedence and are read-only. Service changes clear key drafts; save the service before managing its separate key. Changing a custom endpoint does not create a new credential namespace—review the key before trusting a new host.
-- **Local state:** configuration is under `$DSH_HOME/plugins/dsh-auto-model-routing/`; mode, child routes and feedback are under `$DSH_HOME/state/auto-model-routing/`. Feedback stores resource metadata, IDs, versions, returned distributions and timestamps—not task/reply text. Request event IDs allow later usage correlation; costs are not fabricated when unavailable. See [feedback and evaluation](docs/feedback-evaluation.md).
+- **Local state:** configuration is under `$DSH_HOME/plugins/dsh-auto-model-routing/`; mode, child routes and feedback are under `$DSH_HOME/state/auto-model-routing/`. Feedback stores resource metadata, IDs, the strategy family, returned distributions and timestamps—not task/reply text. Request event IDs allow later usage correlation; costs are not fabricated when unavailable. See [feedback and evaluation](docs/feedback-evaluation.md).
 - **No automatic learning.** Human allocation feedback is observational. It does not change routing or prove quality/cost benefits. Old messages without decision bindings are not backfilled; old records with missing evaluation fields remain unknown.
-- **Upgrade:** existing AUTO sessions use the new policy without a version switch or rewriting their stored mode. New chats still default to MANUAL unless configured otherwise. Historical four-tier mappings remain only for explicit `policy: "legacy"` rollback in plugin configuration; they are not the current policy or feedback menu.
-
+- **Upgrade to 0.5.0:** there is one AUTO strategy and no version setting. Existing sessions keep their stored mode; new chats still default to MANUAL unless configured otherwise. Retired `policy` / `mainEfforts` / `childRoutes` keys in the plugin configuration are ignored, shown as no longer effective in Settings, and removed on the next save. Child decisions and feedback recorded by 0.4.x stay readable. To go back, pin the published `dsh-auto-model-routing@0.4.2` (see [CHANGELOG](CHANGELOG.md) for the data boundary).
 ## Architecture
 <!-- section: architecture -->
 
@@ -91,17 +97,16 @@ Preset model menus expose documented versions, not live availability guarantees.
 
 Main failures disable AUTO; child failures stop dispatch. Explicit model/effort constraints are preserved. The diagram shows the AUTO paths; MANUAL makes no new judgments and fork is unsupported. Feedback does not automatically alter routing.
 
-Entry: [index.ts](src/index.ts). Enforcement: [policy-host.ts](src/policy-host.ts). Actual rubric: [policy-v2-rubric.json](src/policy-v2-rubric.json). Model slots: [policy-v2.ts](src/policy-v2.ts). UI: [client](src/client/index.ts). Coverage and limitations: [development verification](docs/policy-v2-development.md), [real Magpie acceptance](docs/magpie-live-acceptance.md).
+Entry: [index.ts](src/index.ts). Enforcement: [policy-host.ts](src/policy-host.ts). Actual rubric: [rubric.json](src/rubric.json). Family strategies (supported models, transports, effort starting points, capability slots): [strategies](src/strategies/index.ts); routing: [routing.ts](src/routing.ts). UI: [client](src/client/index.ts). Coverage and limitations (historical records): [development verification](docs/policy-v2-development.md), [real Magpie acceptance](docs/magpie-live-acceptance.md).
 
 <details>
-<summary>Earlier four-tier UI demos (legacy rollback only)</summary>
+<summary>Earlier four-tier UI demos (removed in 0.5.0)</summary>
 
-These isolated-host recordings use mock Jev/model responses and show the previous UI, not the current default policy.
+These isolated-host recordings use mock Jev/model responses and show a UI that no longer exists.
 
-![Legacy four-tier routing settings](docs/settings.gif)
+![Earlier four-tier routing settings](docs/settings.gif)
 
 </details>
-
 ## Development
 
 ```sh
@@ -110,7 +115,7 @@ npm run typecheck
 npm run build
 ```
 
-Tests use the official AgentLoop with fake LLM streams and mock/loopback Jev responses, not paid model calls. `scripts/label-report.mjs` reports **legacy tier labels only**. To observe AUTO decisions and their actual token usage, ask the agent to use the `auto-model-routing-report` skill (on demand only; it runs the read-only `lib/usage-report.js`). It is observational, not a savings measurement. Evaluation schema and deduplication rules are in [feedback-evaluation.md](docs/feedback-evaluation.md).
+Tests use the official AgentLoop with fake LLM streams and mock/loopback Jev responses, not paid model calls. To observe AUTO decisions and their actual token usage, ask the agent to use the `auto-model-routing-report` skill (on demand only; it runs the read-only `lib/usage-report.js`). It is observational, not a savings measurement. Evaluation schema and deduplication rules are in [feedback-evaluation.md](docs/feedback-evaluation.md).
 
 Development stays in the source monorepo; this repository is its release mirror. The package builds and loads independently using its declared dependencies, bundled skill and official DSH services; no monorepo checkout or monorepo instruction file is required. External design references are optional background, not runtime inputs.
 

package/README.zh.md

@@ -55,7 +55,8 @@ dsh plugin --profile web add prgrmrwy/dsh-auto-model-routing
 
 ### 主模型不换，子任务独立选配
 
-- **主会话**：`lower / baseline / higher` 相对于具体模型已验证的推荐起点，在受支持序列降低一档、保持或提高一档。缺省上限 `xhigh`，自动不选 `max`；不修改主 provider/model，也不改写全局模型默认值。
+- **主会话**：`lower / baseline / higher` 相对于具体模型已验证的推荐起点，在受支持序列降低一档、保持或提高一档。缺省上限 `xhigh`，自动不选 `max`；主 provider/model 不变；通过官方 `selectModel` 同步选定 effort，同时保存全局默认值。
+- **仅支持 Claude / GPT 系列**：AUTO 只管理模型名（去掉 transport 前缀后）以 `claude-` 或 `gpt-` 开头的主模型。切换到其他主模型（DeepSeek、GLM、Grok、Gemini、Kimi、Qwen 等）会自动落为 MANUAL 并锁定芯片：芯片显示描边 info 图标，悬停整个按钮说明支持范围并提供仓库的 issue/PR 链接。切回 Claude / GPT 系列后芯片恢复可点击且保持 MANUAL，不会自动重新启用 AUTO。
 - **fresh 子任务**：能力需求为 `bounded / analytical / frontier`，推理投入独立判断。Claude 能力槽为 Haiku / Sonnet / Opus 5.5；GPT 为 Luna / Sol / Sol。实际路由必须同时满足当前目录、支持的 effort 和官方子智能体允许列表。Magpie 保留真实 provider 与家族前缀完整模型 ID，不回退到本地入口。
 - **尊重显式选择**：只指定模型或投入时，仅判断另一维；两者都指定则不请求 Jev，只校验路由。缺少任务目标或范围时停止委派，不猜。
 - **官方创建绑定路由**：fresh `subagent` 和 fresh `spawn_teammate` 在子任务首次请求前绑定精确身份。`route_subagent` 只是可选预览，不代表已应用，也不能把推荐复制成用户约束。fork 和未绑定创建路径暂不支持，不静默替换。
@@ -74,15 +75,21 @@ dsh plugin --profile web add prgrmrwy/dsh-auto-model-routing
 
 **判定确定度不等于选中概率**：Choice 公式为 `(pmax − 1/n) / (1 − 1/n)`，三个候选中最高概率 70% 对应确定度 55%。面板分别显示服务返回的确定度和完整分布，保留返回的 0%，缺值标未提供。两者都不是任务成功率。
 
+### Magpie transport 与选择器展示
+
+AUTO 接受 `dsh-magpie-connector`、`dsh-magpie-connect` 两个精确 transport，不互为 alias：完整 model id、实时模型能力、支持 effort/cap、当前允许列表与父 captured allowlist 都按原 transport 校验。没有注册策略的家族需显式 model 及可验证的 effort。根会话为 MANUAL 时预览直接返回 `routed: false`，不判断、不写状态。已绑定子实例恢复原路线。
+
+AUTO 将选定 effort 应用于本次主请求；effort 改变时，等待官方 `selectModel` 同步同一 provider/model，并允许保存全局默认值。官方选择器只显示一个 effort。MANUAL 请求原样通过，已绑定子会话不写主选择；同步失败会记录告警，本次请求仍保留选定 effort。Magpie 菜单分组仍需 ohmydsh 受管五包 Host 扩展，stock rc.2 保持 flat 列表。见 [Magpie 配置与展示前提](<../dsh-magpie-connector/README.zh.md#模型菜单分组与-effort>)；本地测试不等于已部署或 live GUI 验收。
+
 ## 须知
 
 - **失败可见**：主判断失败会停用 AUTO 并显示原因，子判断或路由失败则停止派发。没有本地分类器、自动重试、自动升级或跨服务降级。
 - **MANUAL 停止调整，不复原历史值**：使用官方当前选择；只要插件启用，已绑定子任务仍保留原路线。
 - **任务会外发**：AUTO 将按形态脱敏的任务文本（最多 8000 字符）及上一轮少量片段发送给所选服务。脱敏尽力而为，不保证去除全部秘密。测试连接只发送固定公开样例，可能产生少量费用。
 - **key 经官方 DSH 凭据服务保存**，不写入插件配置。启动环境 key 优先且只读；切换服务清空 key 草稿，先保存服务再管理新 key。修改自定义端点不会产生新凭据空间，换地址前请确认专用 key 的信任边界。
-- **本地状态**：配置在 `$DSH_HOME/plugins/dsh-auto-model-routing/`，模式、子路由及反馈在 `$DSH_HOME/state/auto-model-routing/`。反馈只保存资源元数据、身份、版本、返回分布及时间，不保存任务或回复正文。请求事件序号供后续关联用量，缺失成本不会编造。见[反馈评估说明](docs/feedback-evaluation.md)。
+- **本地状态**：配置在 `$DSH_HOME/plugins/dsh-auto-model-routing/`，模式、子路由及反馈在 `$DSH_HOME/state/auto-model-routing/`。反馈只保存资源元数据、身份、策略家族、返回分布及时间，不保存任务或回复正文。请求事件序号供后续关联用量，缺失成本不会编造。见[反馈评估说明](docs/feedback-evaluation.md)。
 - **不自动学习**：人工反馈仅作观察，不改变路由，也不能直接证明质量提升或节省。无决策绑定的旧消息不回填，旧记录缺少的评估字段保持未知。
-- **升级兼容**：已有 AUTO 会话直接使用新策略，无需版本开关，也不重写会话模式。新会话缺省仍为 MANUAL，除非你改过设置。旧四档映射仅供配置中显式 `policy: "legacy"` 回滚，不是当前策略或反馈菜单。
+- **升级到 0.5.0**：只有一套 AUTO 策略，没有版本设置。已有会话保留原模式；新会话缺省仍为 MANUAL，除非你改过设置。插件配置中残留的 `policy`、`mainEfforts`、`childRoutes` 会被忽略，设置页提示不再生效，下次保存时移除。0.4.x 记录的子任务决策与反馈仍可读取。如需退回，固定已发布的 `dsh-auto-model-routing@0.4.2`（数据边界见 [CHANGELOG](CHANGELOG.md)）。
 
 ## 架构
 <!-- section: architecture -->
@@ -91,17 +98,16 @@ dsh plugin --profile web add prgrmrwy/dsh-auto-model-routing
 
 主判断失败停用 AUTO，子失败停止派发；保留显式 model/effort。图示为 AUTO 路径，MANUAL 不做新判断，fork 暂不支持。反馈不会自动改变路由。
 
-入口：[index.ts](src/index.ts)。执行接入：[policy-host.ts](src/policy-host.ts)。实际判据：[policy-v2-rubric.json](src/policy-v2-rubric.json)。模型槽：[policy-v2.ts](src/policy-v2.ts)。界面：[client](src/client/index.ts)。覆盖边界：[开发验证](docs/policy-v2-development.md)、[真实 Magpie 验收](docs/magpie-live-acceptance.md)。
+入口：[index.ts](src/index.ts)。执行接入：[policy-host.ts](src/policy-host.ts)。实际判据：[rubric.json](src/rubric.json)。家族策略（支持的模型、transport、effort 起点、能力槽）：[strategies](src/strategies/index.ts)；路由计算：[routing.ts](src/routing.ts)。界面：[client](src/client/index.ts)。覆盖边界（历史记录）：[开发验证](docs/policy-v2-development.md)、[真实 Magpie 验收](docs/magpie-live-acceptance.md)。
 
 <details>
-<summary>旧四档界面演示（仅供 legacy 回滚参考）</summary>
+<summary>早期四档界面演示（已于 0.5.0 删除）</summary>
 
-下列隔离宿主录屏使用模拟 Jev/模型响应，展示旧界面，不代表当前默认策略。
+下列隔离宿主录屏使用模拟 Jev/模型响应，展示的界面已不存在。
 
-![旧版四档路由设置](docs/settings.gif)
+![早期四档路由设置](docs/settings.gif)
 
 </details>
-
 ## 开发验证
 
 ```sh
@@ -110,7 +116,7 @@ npm run typecheck
 npm run build
 ```
 
-测试使用官方 AgentLoop、假 LLM 流和 mock/回环 Jev，不产生真实模型费用。`scripts/label-report.mjs` **仅汇总旧四档标注**。如需观察 AUTO 决策及实际 token 用量，请明确让 agent 使用 `auto-model-routing-report` skill（仅按需调用，运行只读的 `lib/usage-report.js`）；它是观察统计，不衡量节省；新数据结构与去重口径见[feedback-evaluation.md](docs/feedback-evaluation.md)。
+测试使用官方 AgentLoop、假 LLM 流和 mock/回环 Jev，不产生真实模型费用。如需观察 AUTO 决策及实际 token 用量，请明确让 agent 使用 `auto-model-routing-report` skill（仅按需调用，运行只读的 `lib/usage-report.js`）；它是观察统计，不衡量节省；新数据结构与去重口径见[feedback-evaluation.md](docs/feedback-evaluation.md)。
 
 继续在主仓开发，本仓库仅作发布镜像。插件使用自身声明的依赖、包内 skill 和官方 DSH 服务即可独立构建与加载，不要求检出主仓，也不要求安装主仓环境指令。外部设计链接仅供背景阅读，不是运行输入。
 

package/docs/feedback-evaluation.md

@@ -3,16 +3,33 @@
 ## 记录
 `$DSH_HOME/state/auto-model-routing/allocation-feedback.jsonl` 是本地append-only记录，无会话正文和key。
 
-绑定行使用sessionId/messageId/decisionId、depth、实际model/effort，新增boundAt与不可变snapshot：decidedAt/appliedAt、policyVersion/mappingVersion、decisionProvider/decisionModel、判断ms、返回的confidence/probabilities、实际provider、requestSeq及可得时requestTurn。requestSeq是同session请求头事件，可与该会话历史关联actual request及usage；绑定并非完成任务或用量已知的证明。
+绑定行使用sessionId/messageId/decisionId、depth、实际model/effort，新增boundAt与不可变snapshot：decidedAt/appliedAt、strategy（实际主模型所属策略家族id，无匹配家族时省略）、decisionProvider/decisionModel、判断ms、返回的confidence/probabilities、实际provider、requestSeq及可得时requestTurn。0.5.0之前写入的快照带policyVersion/mappingVersion而无strategy，仍原样可读，缺失的strategy保持未知，不补造；`label`端点返回时去掉这两个历史键。requestSeq是同session请求头事件，可与该会话历史关联actual request及usage；绑定并非完成任务或用量已知的证明。
 
-反馈事件为`type:feedback, version:2`，带sessionId/messageId/decisionId、at、feedback。每次修改或撤销独立追加；null表示撤销。读取时按追加顺序应用到既有精确绑定。历史完整记录仍兼容，原快照不可被后续同身份行替换；旧记录没有时间或快照则未知，禁止用迁移时刻或最新配置补造。
+反馈事件为`type:feedback`，带sessionId/messageId/decisionId、at、feedback；新事件不带version，带`version:2`的旧事件照常读取，其它未知键按损坏行跳过。每次修改或撤销独立追加；null表示撤销。读取时按追加顺序应用到既有精确绑定。历史完整记录仍兼容，原快照不可被后续同身份行替换；旧记录没有时间或快照则未知，禁止用迁移时刻或最新配置补造。
 
 ## 评估
 - 评估单位为(sessionId, decisionId)，不是每个assistant/message，避免同轮多条工具消息导致重复计数。先按消息取最后事件，再按决策取最后反馈；历史无时间以追加顺序作本文件内顺序，跨文件不可猜。
 - appropriate/too-high/too-low分别统计；unknown不是满意，null撤销不计有效评价；未评价不能计为合适。多条消息评价冲突也应单独报告。
-- 按策略版本/映射版本/服务模型及depth/实际路由分组；旧缺字段独立unknown组，不混进新策略精确对照。
+- 按策略家族（strategy）及depth/实际路由分组；0.5.0之前的快照按原policyVersion/mappingVersion组成历史组（标记historical），无快照的记录独立unknown组；历史组与家族组不合并比较。
 - 以requestSeq和消息ID关联实际usage/延迟/返工证据；拿不到价格或token就未知。用户主观反馈不等于正确性oracle，适合率也不能单独证明质量或节省。
 - 按需观察报表见包内 skill `auto-model-routing-report`（`lib/usage-report.js`，只读）；仍不做自动阈值调整、自动训练或换模重试。
 
+## 隐式事实与分布（2026-10-26）
+
+运行时只追加 `{type:'fact', sessionId, decisionId, fact, at}`（0.5.0之前的事实行带 `version:1`，照常读取）。`fact` 仅为 `exposed` 或 `manual-switch`；按决策/类型保留首次事实，时间由 Host 生成，不收正文。曝光要求回复操作栏在前台、聚焦页面连续完整可见 3 秒；切 MANUAL 在清除运行态之前取当前主决策，只在切换成功后记录。写入失败只记录日志，不阻断主线。
+
+回合结束与继续不重复写账本，按需报告从已有日志推导。决策所在回合取最后一次关联调用的实际回合号，不是归属的用户回合。第一个后续用户回合的开始时间为继续时间；曝光时间必须早于继续时间，否则视为事后翻看，不算有效曝光。没有继续时曝光仍有效，但不能得到隐式无异议。
+
+每个比较子组的 `implicit.counts` 五类互斥，合计等于决策数：
+1. `explicit`：有显式评价；`implicit.explicit` 分类别，冲突单列。
+2. `negative`：无显式评价，且用户中止了决策最后一次关联调用所在回合，或切换 MANUAL；`implicit.negative` 分原因，两原因可重叠。
+3. `implicit-ok`：有效曝光、正常完成且用户继续，无负向事实。只表示这些行为同时出现，不证明资源分配合适。
+4. `inconclusive`：有效曝光但其它条件不足，包括未继续、结束未知或父会话取消。
+5. `unobserved`：没有有效曝光。
+
+`implicit.exposedExplicit` 是有效曝光且有显式评价的参照计数。曝光不证明读过；用户中止或切 MANUAL 也可能因为换任务，不证明策略有错。旧数据不回填曝光，未知不能当正例。隐式信号、显式评价和将来的机器评审均应分开，不自动调策略。
+
+D012 修复后，实际配置不变、不产生新 `request/header` 的回合也会绑定决策。`snapshot.requestSeq` 指向当时生效的请求头（可能来自更早回合），`requestTurn` 是应用时的当前回合。上线后记录覆盖率会提高；这是补缺口，不是策略改善，不能直接比较修复前后的适合率。
+
 ## 确定度
 UI称“判定确定度”，Choice公式为`(pmax - 1/n)/(1 - 1/n)`；n为该维候选数。三选一最高概率70%得到55%，不等于选中概率或任务成功率。插件直接展示服务返回值，分布独立保留，不从四舍五入后的百分比反推。官方定义：https://docs.typesafe.ai/confidence.md 。

package/docs/host-capability-report.md

@@ -1,5 +1,7 @@
 # AUTO 宿主能力核验（官方 0.2.0-rc.2）
 
+> 历史记录：命名、路径与行为以记录时的 0.4.x 版本为准；0.5.0 起只有一套 AUTO 策略，规则文件为 `src/rubric.json`，家族策略见 `src/strategies/`。
+
 ## 结论
 
 **官方入口足以让插件在普通子会话、fork、teammate 的首次模型请求前读取精确子身份和本轮任务，并改写实际 provider/model/effort；不需要改宿主或 compat。** 这证明的是宿主接入能力，不是现有 AUTO 已支持这些路径。

package/docs/jev-policy-v2-validation.md

@@ -1,5 +1,7 @@
 # Jev policy-v2 验证（2026-10-24）
 
+> 历史记录：命名、路径与行为以记录时的 0.4.x 版本为准；0.5.0 起只有一套 AUTO 策略，规则文件为 `src/rubric.json`，家族策略见 `src/strategies/`。
+
 ## 结论
 
 官方接口和真实 `typesafe/jev-1.13` 均支持一次请求中独立返回 capability 与 depth。10 次合成任务请求全部返回合法的双 Choice；预先定义的 development / holdout 各 5 例均符合预期，不调整 rubric、不重试。**这只证明接口与小样本分类，不证明实际子模型质量、成本收益或默认推广条件。**
@@ -26,7 +28,7 @@
 | hold-constraints | holdout | frontier | higher |
 | hold-unknown | holdout | insufficient_context | baseline |
 
-[测试输入及独立预期](../eval/policy-v2-cases.json)、[问题定义](../src/policy-v2-rubric.json)、[有预算保护的实测脚本](../eval/policy-v2-live.mjs)。depth 从同一任务证据独立判断相对适配模型的推荐投入，不引用另一个尚未返回的 capability 答案。两者都指定时不判；只指定一个维度时仅询问另一个。
+[测试输入及独立预期](../eval/cases.json)、[问题定义](../src/rubric.json)、[有预算保护的实测脚本](../eval/live.mjs)（当时文件名分别带 `policy-v2-` 前缀）。depth 从同一任务证据独立判断相对适配模型的推荐投入，不引用另一个尚未返回的 capability 答案。两者都指定时不判；只指定一个维度时仅询问另一个。
 
 实测脚本先保留每次费用预算再请求，失败也计一次；预留每次 65536 input tokens 远高于合成输入。未知 usage.cost 停止，不记零。尚有 10 次授权余量，不默认消耗，也不因生成一个新结果文件就获得新预算。跨多次运行的全局预算需由执行者核对，脚本不是账户级额度控制。
 

package/docs/magpie-live-acceptance.md

@@ -1,5 +1,7 @@
 # Magpie 真实最小验收与本地部署
 
+> 历史记录：命名、路径与行为以记录时的 0.4.x 版本为准；0.5.0 起只有一套 AUTO 策略，规则文件为 `src/rubric.json`，家族策略见 `src/strategies/`。
+
 2026-10-25。用户授权按订阅最小必要调用完成验收与本地部署重启，不授权全局默认切换或发布。
 
 ## 实际结果

package/docs/policy-v2-development.md

@@ -1,5 +1,7 @@
 # policy-v2 开发与验收记录
 
+> 历史记录：命名、路径与行为以记录时的 0.4.x 版本为准；0.5.0 起只有一套 AUTO 策略，规则文件为 `src/rubric.json`，家族策略见 `src/strategies/`。
+
 ## 状态
 
 2026-10-25 用户在最小真实 Magpie 验收后追加授权：AUTO 默认升级，不再要求版本开关。默认配置为内部 policy-v2；显式 legacy 仅供回滚。旧四档配置保留但不参与新策略，MANUAL 不变。已构建部署、通过分离控制进程重启现有3080服务，并在实际GUI验证无版本选择、显示 AUTO 已使用新策略。真实质量/返工/成本对照仍未完成，不宣称性能收益。
@@ -7,7 +9,7 @@
 ## 实现入口
 
 - [Jev 契约](../src/jev.ts)：复用认证、deadline、body 上限、错误分类；原 tier 问题不变。新主请求只问 depth；子请求一次问 capability/depth，显式约束只问未指定维度。
-- [独立映射](../src/policy-v2.ts)：版本化能力槽，effort 推荐起点按受支持序列最多移动一档，受 cap 限制，不自动使用 max。映射是初始基线，Codex analytical/frontier 都是 Sol，未虚构第三模型。
+- [独立映射](../src/routing.ts)（当时为 `src/policy-v2.ts`）：版本化能力槽，effort 推荐起点按受支持序列最多移动一档，受 cap 限制，不自动使用 max。映射是初始基线，Codex analytical/frontier 都是 Sol，未虚构第三模型。
 - [宿主接入](../src/policy-host.ts)：官方 `tools/execute` → AsyncLocalStorage → `agent/created` 绑定精确 child ID 和 parent/root；不依赖 prompt 相似度。`agent/pre-step` 获取首次任务并决策，`agent/request` 应用；`request/header` 记录匹配证据。
 - [持久化](../src/policy-store.ts)：每 child 哈希路径、严格 schema、owner-only 原子替换，只有身份/版本/约束/路由/状态，不含任务原文。缺失、损坏、未完成恢复不默默继承；未完成决策不能用后续消息重新分类。
 - [工具](../src/subagent-tool.ts)：policy-v2 下 optional preview，仅 recommended；普通创建工具负责精确应用，不把预览冒充 applied。
@@ -18,7 +20,7 @@
 
 | 路径/行为 | 证据 | 结果/边界 |
 |---|---|---|
-| 官方 ordinary fresh continuable 工具与 provider | [整链脚本](../scripts/policy-v2-host-probe.mjs)加载官方 0.2.0-rc.2、真实生产插件，fake Jev/adapter | 实际请求 model/effort 匹配；全宿主关闭重建后恢复，不重判 |
+| 官方 ordinary fresh continuable 工具与 provider | [整链脚本](../scripts/host-probe-children.mjs)（当时为 `policy-v2-host-probe.mjs`）加载官方 0.2.0-rc.2、真实生产插件，fake Jev/adapter | 实际请求 model/effort 匹配；全宿主关闭重建后恢复，不重判 |
 | 官方 fresh teammate 工具与服务 | 同上 | 创建、后续消息和全宿主恢复通过，不重选 |
 | 并发创建与显式模型/effort | [宿主测试](../test/policy-host.integration.test.ts)官方 Tools/Agents，测试创建工具 | 并发精确身份隔离；两者指定零判断；普通/teammate 官方 provider 的并发压力未测 |
 | fork / teammate fork | tools wrapper 可提前拒绝 | unsupported，真实历史兼容未验证，不擅自转 fresh |
@@ -41,7 +43,7 @@
 重跑整链：先 package build；在原临时官方 prefix 的基础上，精确安装 `@deepseek-ai/dsh-tool-subagent@0.2.0-rc.2`、`@deepseek-ai/dsh-experimental-tool-agent-team@0.2.0-rc.2`、`@deepseek-ai/dsh-launch-environment@0.2.0-rc.2`（`--save-exact --ignore-scripts`），然后：
 
 ```sh
-node packages/auto-model-routing/scripts/policy-v2-host-probe.mjs "$PROBE_HOME"
+node packages/auto-model-routing/scripts/host-probe-children.mjs "$PROBE_HOME"
 ```
 
 官方 standing tool 的 `modelSelectionSettings:true` 要求 preset-scoped context；隔离脚本没有伪造该 composition，使用 standing fixed-schema 工具 + 合成 allowlist。因此显式选择与父快照另用 host tests 验证，真实 preset/GUI 组合不记为通过。

package/docs/policy-v2-real-evaluation-plan.md

@@ -1,5 +1,7 @@
 # policy-v2 真实任务对照（计划；完整对照未执行）
 
+> 历史记录：命名、路径与行为以记录时的 0.4.x 版本为准；0.5.0 起只有一套 AUTO 策略，规则文件为 `src/rubric.json`，家族策略见 `src/strategies/`。
+
 ## 目的与门槛
 
 下一步不是直接部署，而是在独立评审修复后验证真实子模型质量、耗时与总开销。现有 10 个 Jev 分类样例不是执行任务基准，不能把其标签命中率当任务成功率。不得消耗剩余 Jev 授权来调用其它模型；2026-10-25 用户已授权以最小必要订阅调用验收并本地部署，不再按美元预算审批；仅经 Magpie。当前真实最小验收已完成，完整对照仍未完成，见 [实测记录](magpie-live-acceptance.md)。

package/lib/client/control.d.ts

@@ -16,13 +16,13 @@ export declare const panelOpenAfter: (event: PanelEvent) => boolean;
 export interface Decision {
     id: number;
     source: 'main' | 'subagent';
-    tier: string;
+    tier?: string;
     effort: string;
     model?: string;
     confidence?: number;
     probabilities?: Record<string, number>;
     ms: number;
-    depth?: string;
+    depth: string;
     capability?: string;
     capabilityConfidence?: number;
     capabilityProbabilities?: Record<string, number>;

package/lib/client/control.js

@@ -6,7 +6,6 @@ export async function callRouting(rpc, sessionId, mode) {
 }
 export const chipOrder = -10;
 export const panelOpenAfter = (event) => event === 'enter' || event === 'focus';
-const TIER_ORDER = ['simple', 'standard', 'complex', 'escalated'];
 const pct = (v) => `${Math.round(v * 100)}%`;
 export const TOAST_MS = 3000;
 const spreadText = (order, values) => {
@@ -15,25 +14,16 @@ const spreadText = (order, values) => {
 };
 /** Shared by the persistent hover panel and transient decision hint. */
 export function toastText(d) {
-    if (d.depth)
-        return [
-            `${d.source === 'main' ? '主会话' : '子任务'} · ${d.status === 'applied' ? '已应用' : d.status === 'failed' ? '未应用' : d.status === 'unsupported' ? '不支持调整' : '已判断/待应用'}`,
-            ...(d.capability ? [`能力 ${d.capability} · 判定确定度 ${d.capabilityConfidence === undefined ? '未提供' : pct(d.capabilityConfidence)}`] : []),
-            ...(d.capability ? [`能力分布：${spreadText(['bounded', 'analytical', 'frontier', 'insufficient_context'], d.capabilityProbabilities)}`] : []),
-            `投入 ${d.depth} · 判定确定度 ${d.confidence === undefined ? '未提供' : pct(d.confidence)}`,
-            `投入分布：${spreadText(['lower', 'baseline', 'higher'], d.probabilities)}`,
-            `${d.provider ?? ''} / ${d.model ?? '待确定'} · ${d.effort}`,
-            `${d.decisionProvider ?? '未知服务'} / ${d.decisionModel ?? '未知模型'} · ${(d.ms / 1000).toFixed(2)}s`,
-            '确定度 = (最高概率 − 1/n) ÷ (1 − 1/n)，n 为候选数；不是任务成功率',
-        ];
-    const head = [
-        d.source === 'main' ? '主会话判断' : '子会话判断',
-        `${d.tier} → ${d.model ? `${d.model} · ` : ''}${d.effort}`,
-        `${(d.ms / 1000).toFixed(2)}s`,
-    ].join(' · ');
-    const spread = TIER_ORDER.filter(t => d.probabilities?.[t] !== undefined && Math.round(d.probabilities[t] * 100) > 0)
-        .map(t => `${t} ${pct(d.probabilities[t])}`).join(' / ');
-    return spread ? [head, spread] : [head];
+    return [
+        `${d.source === 'main' ? '主会话' : '子任务'} · ${d.status === 'applied' ? '已应用' : d.status === 'failed' ? '未应用' : d.status === 'unsupported' ? '不支持调整' : '已判断/待应用'}`,
+        ...(d.capability ? [`能力 ${d.capability} · 判定确定度 ${d.capabilityConfidence === undefined ? '未提供' : pct(d.capabilityConfidence)}`] : []),
+        ...(d.capability ? [`能力分布：${spreadText(['bounded', 'analytical', 'frontier', 'insufficient_context'], d.capabilityProbabilities)}`] : []),
+        `投入 ${d.depth} · 判定确定度 ${d.confidence === undefined ? '未提供' : pct(d.confidence)}`,
+        `投入分布：${spreadText(['lower', 'baseline', 'higher'], d.probabilities)}`,
+        `${d.provider ?? ''} / ${d.model ?? '待确定'} · ${d.effort}`,
+        `${d.decisionProvider ?? '未知服务'} / ${d.decisionModel ?? '未知模型'} · ${(d.ms / 1000).toFixed(2)}s`,
+        '确定度 = (最高概率 − 1/n) ÷ (1 − 1/n)，n 为候选数；不是任务成功率',
+    ];
 }
 /** A hint is shown only for a decision id not seen before (it is hidden TOAST_MS later by the chip). */
 export function nextToast(seen, d) {

package/lib/client/index.d.ts

@@ -1,9 +1,13 @@
 import type { Context } from '@deepseek-ai/cordis';
 import { type Decision, type Rpc, type Toast } from './control.js';
 import { type JevCategory } from '../hints.js';
+interface AutoSupport {
+    supported: boolean;
+    provider?: string;
+    model?: string;
+}
 interface View {
     mode: 'AUTO' | 'MANUAL';
-    policy?: string;
     depth?: string;
     effort?: string;
     reason?: string;
@@ -13,14 +17,17 @@ interface View {
     };
     decision?: Decision;
     decisionToast?: boolean;
+    autoSupport?: AutoSupport;
 }
+type SubscribeSelection = (sessionId: string, onChange: () => void) => () => void;
 interface Props {
     sessionId: string;
     rpc: Rpc;
+    subscribeSelection?: SubscribeSelection;
 }
 export declare const name = "dsh-auto-model-routing/client";
 export declare const inject: string[];
-export declare function RoutingChip({ sessionId, rpc, initialView, initiallyOpen, initialToast }: Props & {
+export declare function RoutingChip({ sessionId, rpc, initialView, initiallyOpen, initialToast, subscribeSelection }: Props & {
     initialView?: View;
     initiallyOpen?: boolean;
     initialToast?: Toast;

package/lib/client/index.js

@@ -2,13 +2,17 @@ import { createElement as h, useEffect, useRef, useState } from 'react';
 import { createPortal } from 'react-dom';
 import { callRouting, chipOrder, nextToast, panelOpenAfter, TOAST_MS, toastText } from './control.js';
 import { CATEGORY_HINTS } from '../hints.js';
-import { IconGaugeOutlineRegular, Menu, Tooltip } from '@deepseek-ai/dsh-client-ui-primitives';
+import { IconInfoOutlineRegular, IconGaugeOutlineRegular, Menu, Tooltip } from '@deepseek-ai/dsh-client-ui-primitives';
 import { LabelButton } from './label.js';
 import * as settingsUi from '@deepseek-ai/dsh-client-ui-primitives';
 import { RoutingSettings } from './settings-section.js';
+import { registry } from '../strategies/index.js';
+/** Supported families as the user sees them. */
+const FAMILIES = registry.labels().join(' / ');
 import { installRoutingNavIcon } from './nav-icon.js';
 export const name = 'dsh-auto-model-routing/client';
 export const inject = ['slots', 'connection'];
+const REPO_URL = 'https://github.com/prgrmrwy/dsh-auto-model-routing';
 // Same look as the official model picker trigger (dsh-client-ui-model-selection), values read from its bundle.
 const CSS = `
 .amr-root{position:relative;min-width:0;display:inline-flex}
@@ -17,6 +21,11 @@ const CSS = `
 .amr-trigger:focus-visible{box-shadow:0 0 0 2px var(--dsw-focus-ring-color,var(--dsw-alias-state-business-primary))}
 .amr-trigger:disabled{color:var(--dsw-alias-label-dimmed);cursor:default}
 .amr-icon{flex:none;color:var(--dsw-alias-label-caption)}
+.amr-trigger[data-locked=true]{color:var(--dsw-alias-label-dimmed);cursor:default}
+.amr-trigger[data-locked=true]:hover{background:0 0}
+.amr-info{color:var(--dsw-alias-label-caption)}
+.amr-card a{color:var(--dsw-alias-state-business-primary);text-decoration:none;overflow-wrap:anywhere}
+.amr-card a:hover{text-decoration:underline}
 .amr-trigger[data-disabled=true],.amr-trigger[data-disabled=true] .amr-icon{color:var(--dsw-alias-state-error-primary)}
 .amr-panel{position:absolute;z-index:1100;bottom:100%;left:0;padding-bottom:6px}
 .amr-card{width:280px;padding:10px 12px;border-radius:var(--dsw-radius-md);background:var(--dsw-alias-bg,#fff);color:var(--dsw-alias-label-primary);box-shadow:var(--dsw-elevation-prominent);font-size:12px;line-height:18px}
@@ -28,9 +37,9 @@ const CSS = `
 `;
 // Left-right swap arrows at the picker chevron's size; colour follows currentColor.
 function SwapIcon() {
-    return h('svg', { className: 'amr-icon', width: 14, height: 14, viewBox: '0 0 16 16', fill: 'none', stroke: 'currentColor', strokeWidth: 1.4, strokeLinecap: 'round', strokeLinejoin: 'round', 'aria-hidden': true }, h('path', { d: 'M3 5.5h9.5M10 3l2.5 2.5L10 8' }), h('path', { d: 'M13 10.5H3.5M6 8l-2.5 2.5L6 13' }));
+    return h('svg', { className: 'amr-icon amr-swap', width: 14, height: 14, viewBox: '0 0 16 16', fill: 'none', stroke: 'currentColor', strokeWidth: 1.4, strokeLinecap: 'round', strokeLinejoin: 'round', 'aria-hidden': true }, h('path', { d: 'M3 5.5h9.5M10 3l2.5 2.5L10 8' }), h('path', { d: 'M13 10.5H3.5M6 8l-2.5 2.5L6 13' }));
 }
-export function RoutingChip({ sessionId, rpc, initialView, initiallyOpen = false, initialToast }) {
+export function RoutingChip({ sessionId, rpc, initialView, initiallyOpen = false, initialToast, subscribeSelection }) {
     const [view, setView] = useState(initialView);
     const [open, setOpen] = useState(initiallyOpen);
     const [busy, setBusy] = useState(false);
@@ -77,6 +86,28 @@ export function RoutingChip({ sessionId, rpc, initialView, initiallyOpen = false
         const hide = setTimeout(() => setToast(undefined), TOAST_MS);
         return () => clearTimeout(hide);
     }, [toast]);
+    const refreshRef = useRef(() => { });
+    // Optional acceleration from the official picker store; retried on every state read so a late service still binds.
+    const subscription = useRef(undefined);
+    const subscribeRef = useRef(undefined);
+    subscribeRef.current = subscribeSelection;
+    const ensureSubscription = () => {
+        const subscribe = subscribeRef.current;
+        if (!subscribe || subscription.current?.sessionId === sessionId)
+            return;
+        subscription.current?.stop();
+        subscription.current = undefined;
+        let handle;
+        try {
+            const stop = subscribe(sessionId, () => { if (handle)
+                clearTimeout(handle); handle = setTimeout(() => refreshRef.current(), 80); });
+            subscription.current = { sessionId, stop: () => { stop(); if (handle)
+                    clearTimeout(handle); } };
+        }
+        catch {
+            subscription.current = undefined;
+        }
+    };
     useEffect(() => {
         let active = true;
         primed.current = false;
@@ -87,11 +118,20 @@ export function RoutingChip({ sessionId, rpc, initialView, initiallyOpen = false
             viewSession.current = sessionId;
             setView(value);
             setError('');
+            ensureSubscription();
         } }, reason => { if (active)
             setError(String(reason)); }); };
+        refreshRef.current = refresh;
         refresh();
         const poll = setInterval(refresh, 3000);
-        return () => { active = false; clearInterval(poll); clearTimeout(timer.current); };
+        return () => {
+            active = false;
+            clearInterval(poll);
+            clearTimeout(timer.current);
+            subscription.current?.stop();
+            subscription.current = undefined;
+            refreshRef.current = () => { };
+        };
     }, [rpc, sessionId]);
     const on = (event) => () => {
         clearTimeout(timer.current);
@@ -119,32 +159,77 @@ export function RoutingChip({ sessionId, rpc, initialView, initiallyOpen = false
     };
     const off = view?.disabled;
     const hint = off ? CATEGORY_HINTS[off.category] ?? off.category : undefined;
+    const locked = view?.autoSupport?.supported === false;
+    const support = view?.autoSupport;
+    const lockedModel = `${support?.provider ?? '未知 provider'} / ${support?.model ?? '未知模型'}`;
     // The panel sits inside the root (padding bridges the gap), so moving onto it keeps it open.
     const place = anchor.current ?? { left: (typeof window === 'undefined' ? 0 : window.innerWidth / 2), top: (typeof window === 'undefined' ? 0 : window.innerHeight) - 96 };
+    const panel = locked
+        ? [
+            h('p', { key: 'locked-title' }, h('strong', null, 'AUTO 不支持当前模型')),
+            h('p', { key: 'locked-model' }, `${lockedModel} 不在自动路由支持范围，已切换为 MANUAL。`),
+            h('p', { key: 'locked-note' }, `目前仅支持 ${FAMILIES} 系列模型；其他模型策略欢迎提交 issue 或 PR：`),
+            h('p', { key: 'locked-link' }, h('a', { href: REPO_URL, target: '_blank', rel: 'noopener noreferrer' }, REPO_URL)),
+            h('p', { key: 'locked-hint', className: 'amr-muted' }, `切回 ${FAMILIES} 系列模型后，可重新点击启用 AUTO。`),
+            error && h('p', { key: 'error', role: 'alert', className: 'amr-error' }, error),
+        ]
+        : [
+            h('p', { key: 'title' }, h('strong', null, view?.mode === 'AUTO' ? '自动调整推理强度' : '手动：不自动调整')),
+            h('p', { key: 'output' }, `本回合插件输出：${view?.effort ?? '未改写'} · ${view?.reason ?? '尚无决定'}`),
+            view?.decision && h('div', { key: 'latest', className: 'amr-latest' }, h('p', null, h('strong', null, '最近决策')), ...toastText(view.decision).map((line, index) => h('p', { key: index, className: index ? 'amr-muted' : undefined }, line))),
+            h('p', { key: 'depth', className: 'amr-muted' }, `AUTO · ${view?.depth ?? '尚无判断'}；主模型不变，推理投入按请求应用；子任务自动选配。`),
+            off && h('p', { key: 'disabled', role: 'status', className: 'amr-error' }, `Jev 停用（${off.category}）：${hint}。${new Date(off.at).toLocaleString()}。点击 AUTO 重试。`),
+            h('p', { key: 'data', className: 'amr-muted' }, 'AUTO 会把脱敏任务文本发送给设置中所选的决策服务判断。'),
+            error && h('p', { key: 'error', role: 'alert', className: 'amr-error' }, error),
+        ];
     return h('span', { ref: (el) => { rootRef.current = el; remember(); }, className: 'amr-root', onMouseEnter: on('enter'), onMouseLeave: on('leave'), onFocus: on('focus'), onBlur: on('blur') }, h('style', null, CSS), h('button', {
-        type: 'button', className: 'amr-trigger', disabled: busy || !view, onClick: () => { void toggle(); },
-        'data-disabled': off ? 'true' : undefined, style: { border: 'none' },
-        title: off ? `Jev 判档已停用：${hint}。点击 AUTO 重试` : '点击切换自动推理强度',
-        'aria-label': `推理强度模式：${view?.mode ?? '加载中'}，点击切换`,
-    }, h('span', null, off ? `${view?.mode} · Jev 停用` : view?.mode ?? '…'), h(SwapIcon)), toast && !open && (typeof document === 'undefined'
+        type: 'button', className: 'amr-trigger', disabled: busy || !view, onClick: () => { if (locked)
+            return; void toggle(); },
+        'data-disabled': off ? 'true' : undefined, 'data-locked': locked ? 'true' : undefined,
+        'aria-disabled': locked ? 'true' : undefined, style: { border: 'none' },
+        title: locked ? `AUTO 仅支持 ${FAMILIES} 系列模型；悬停查看说明` : off ? `Jev 判断已停用：${hint}。点击 AUTO 重试` : '点击切换自动推理强度',
+        'aria-label': locked ? `推理强度模式：${view?.mode ?? 'MANUAL'}（AUTO 不支持当前模型，不可切换）` : `推理强度模式：${view?.mode ?? '加载中'}，点击切换`,
+    }, h('span', null, locked ? (view?.mode ?? 'MANUAL') : off ? `${view?.mode} · Jev 停用` : view?.mode ?? '…'), locked ? h(IconInfoOutlineRegular, { size: 14, className: 'amr-icon amr-info' }) : h(SwapIcon)), toast && !open && (typeof document === 'undefined'
         ? h('div', { className: 'amr-toast', role: 'status', style: { pointerEvents: 'none' } }, ...toast.lines.map((line, index) => h('div', { key: index, className: index ? 'amr-muted' : undefined }, line)))
-        : createPortal(h('div', { className: 'amr-toast', role: 'status', style: { pointerEvents: 'none', left: place.left, top: place.top } }, h('style', null, CSS), ...toast.lines.map((line, index) => h('div', { key: index, className: index ? 'amr-muted' : undefined }, line))), document.body)), open && h('section', { className: 'amr-panel', 'aria-label': '自动路由状态' }, h('div', { className: 'amr-card' }, h('p', null, h('strong', null, view?.mode === 'AUTO' ? '自动调整推理强度' : '手动：不自动调整')), h('p', null, `本回合插件输出：${view?.effort ?? '未改写'} · ${view?.reason ?? '尚无决定'}`), view?.decision && h('div', { className: 'amr-latest' }, h('p', null, h('strong', null, '最近决策')), ...toastText(view.decision).map((line, index) => h('p', { key: index, className: index ? 'amr-muted' : undefined }, line))), h('p', { className: 'amr-muted' }, view?.policy === 'policy-v2' ? `AUTO · ${view.depth ?? '尚无判断'}；主模型不变，推理投入按请求应用；子任务自动选配。` : 'AUTO 的决定会同步到右侧模型选择；要手动指定 effort，请先切到 MANUAL。'), off && h('p', { role: 'status', className: 'amr-error' }, `Jev 停用（${off.category}）：${hint}。${new Date(off.at).toLocaleString()}。点击 AUTO 重试。`), h('p', { className: 'amr-muted' }, 'AUTO 会把脱敏任务文本发送给设置中所选的决策服务判档。'), error && h('p', { role: 'alert', className: 'amr-error' }, error))));
+        : createPortal(h('div', { className: 'amr-toast', role: 'status', style: { pointerEvents: 'none', left: place.left, top: place.top } }, h('style', null, CSS), ...toast.lines.map((line, index) => h('div', { key: index, className: index ? 'amr-muted' : undefined }, line))), document.body)), open && h('section', { className: 'amr-panel', 'aria-label': '自动路由状态' }, h('div', { className: 'amr-card' }, ...panel)));
 }
 const labelUi = { Tooltip, Menu, Icon: IconGaugeOutlineRegular };
 export function apply(ctx) {
+    // Optional acceleration only: the official picker's per-session store triggers an immediate state read.
+    // When the service is absent (or appears late) the chip's 3s poll remains the source of truth.
+    const pickerSubscriber = { current: undefined };
+    const subscribeSelection = (id, onChange) => pickerSubscriber.current ? pickerSubscriber.current(id, onChange) : () => { };
+    try {
+        const inject = ctx.inject;
+        if (typeof inject === 'function') {
+            inject.call(ctx, ['modelDirectories'], (scope) => {
+                const service = scope.modelDirectories;
+                if (!service)
+                    return;
+                pickerSubscriber.current = (id, onChange) => { try {
+                    return service.directoryFor(id).store.subscribe(onChange);
+                }
+                catch {
+                    return () => { };
+                } };
+                return () => { pickerSubscriber.current = undefined; };
+            });
+        }
+    }
+    catch { /* polling stays the fallback */ }
     ctx.slots.inject('settings.section', () => ctx.slots.register({
         name: 'settings.section', id: 'auto-model-routing', order: 300,
         label: () => '自动模型路由',
         inject: () => ({ rpc: ctx.connection.rpc, ui: settingsUi }),
     }, RoutingSettings));
     ctx.effect(() => typeof document === 'undefined' ? () => { } : installRoutingNavIcon(document), 'auto-model-routing: settings navigation icon');
-    // Reply-bar tier button, after the official feedback (order 10); rendered only on judged turns.
+    // Reply-bar allocation feedback, after the official feedback (order 10); rendered only on bound replies.
     ctx.slots.inject('conversation.chat.assistant-actions', () => ctx.slots.register({
         name: 'conversation.chat.assistant-actions', id: 'auto-model-routing-label', order: 20,
         inject: (sessionId) => ({ sessionId, rpc: ctx.connection.rpc, ui: labelUi }),
     }, LabelButton));
     ctx.slots.inject('conversation.input.right', () => ctx.slots.register({
         name: 'conversation.input.right', id: 'auto-model-routing', order: chipOrder,
-        inject: (sessionId) => ({ sessionId, rpc: ctx.connection.rpc }),
+        inject: (sessionId) => ({ sessionId, rpc: ctx.connection.rpc, subscribeSelection }),
     }, RoutingChip));
 }