dsh-llm-fallbacks 0.5.2 → 0.6.1

package/README.md

@@ -7,7 +7,7 @@
 ![node](https://img.shields.io/badge/node-%3E%3D22-339933.svg)
 ![pnpm](https://img.shields.io/badge/pnpm-%3E%3D10-f69220.svg)
 ![dsh tui](https://img.shields.io/badge/dsh%20tui-compatible-4B32C3.svg)
-![dsh](https://img.shields.io/badge/DSH-0.1.5--rc.1-4B32C3.svg)
+![dsh](https://img.shields.io/badge/DSH-0.1.7--rc.2-4B32C3.svg)
 [![dshfind](https://dshfind.com/api/badge/omdsh-dev/dsh-llm-fallbacks?lang=en)](https://dshfind.com/zh/plugins/omdsh-dev/dsh-llm-fallbacks?ref=badge)
 
 Automatic provider/model fallback chains for dsh (DeepSeek Harness): when an agent's LLM requests keep failing — retries exhausted, auth errors, quota exceeded, rate limiting (429) — the plugin switches provider/model along the fallback chain for the current role, and the current step/turn continues on the target model: tasks are not interrupted by model problems.
@@ -31,7 +31,7 @@ Four frozen UTC+8 presets (windows are code constants; preset rows lock `tz` to
 
 GLM Peak and GLM Valley are offered in the card picker only when `zai-coding-cn` is configured.
 
-The first extra row whose window contains the current moment (in `fallbacks.tz`, default Asia/Shanghai) wins; no match → the all-day `rootChain`, whose tail (Default model) must be exactly one official model — `deepseek-official/deepseek-flash` or `deepseek-official/deepseek-pro` (XOR). Slot rotation is a routing seed, not a failure decision: it applies on the next root request, consumes no cooldown, and is logged as a time-slot switch — failure walks keep fallback switch. Full semantics → [Time-slot presets](#time-slot-presets) and [docs/configuration.md](docs/configuration.md).
+The first extra row whose window contains the current moment (in `fallbacks.tz`, default Asia/Shanghai) wins; no match → the all-day `rootChain`, whose tail (Default model) must be exactly one official model — `deepseek-official/deepseek-flash` or `deepseek-official/deepseek-v4-pro` (XOR). Slot rotation is a routing seed, not a failure decision: it applies on the next root request, consumes no cooldown, and is logged as a time-slot switch — failure walks keep fallback switch. Full semantics → [Time-slot presets](#time-slot-presets) and [docs/configuration.md](docs/configuration.md).
 
 ## Quick start
 
@@ -95,7 +95,7 @@ Build the section up in four steps:
 
 **2. Set the all-day `rootChain`.** Leading entries are the fallback chain, walked first when a request fails; the **last** entry is the Default model.
 
-> **Conformance**: the last entry must be exactly one official model — `deepseek-official/deepseek-flash` or `deepseek-official/deepseek-pro` (XOR). The settings card and gateway reject any other tail on save; a legacy non-official tail warns at startup and keeps working as a fallback-only walk, but cannot be saved as-is. The retired `deepseek-v4-flash` / `deepseek-v4-pro` ids are no longer legal tails — a saved V4 tail now warns, goes inert (slot rows + virtual picker), and blocks save until a legal tail is picked. `deepseek-pro` is a legal selector whose model is not yet served by the catalog: the card shows it disabled ("not yet available"), and requests to it fail at the provider until the gateway enables the id. The plugin does not probe catalog availability — a chain containing `deepseek-pro` dispatches to it like any other exact entry, and on the virtual route the `stream()` delegate serves the first dispatchable exact head of the effective chain, so a chain with a working entry before Pro still routes to that earlier entry.
+> **Conformance**: the last entry must be exactly one official model — `deepseek-official/deepseek-flash` or `deepseek-official/deepseek-v4-pro` (XOR). The settings card and gateway reject any other tail on save; a legacy non-official tail warns at startup and keeps working as a fallback-only walk, but cannot be saved as-is. The retired `deepseek-v4-flash` id is no longer a legal tail — a saved tail with it now warns, goes inert (slot rows + virtual picker), and blocks save until a legal tail is picked. The official Pro tail is catalog-served as `deepseek-official/deepseek-v4-pro` (dsh 0.1.7-rc.2; the claim re-verified against the rc.2 default catalog) and selectable in the card; a hand-written legacy `deepseek-official/deepseek-pro` tail — never catalog-served — reads back as non-conforming (no migration; re-pick the tail). The plugin does not probe catalog availability — a chain containing `deepseek-official/deepseek-v4-pro` dispatches to it like any other exact entry, and on the virtual route the `stream()` delegate serves the first dispatchable exact head of the effective chain, so a chain with a working entry before Pro still routes to that earlier entry.
 
 **3. Add `timeSlots` (optional).** Rows rotate the effective root chain by wall-clock windows. Preset rows use frozen UTC+8 windows (only their chain is editable; while a preset row exists, `tz` locks to `Asia/Shanghai`); custom rows take `start`/`end` (may wrap midnight) and an optional `days` list. The first row whose window contains the current moment wins; no match → the all-day `rootChain`. Rotation is a routing seed — it applies on the next root request and consumes no cooldown (see [Time slots](#time-slots)).
 
@@ -120,7 +120,7 @@ A session log reaches the GUI only through the **frozen released migration chain
 
 A third class — the legacy `fallbacks/switch` event type — is **not** repairable by a rewrite: see [Lossy recovery for `fallbacks/switch`](#lossy-recovery-for-fallbacksswitch-opt-in).
 
-**If you author a plugin: never add a custom `source.kind`.** The persisted vocabulary is frozen per format edge, so a custom kind makes every session that carries it unreadable by later dsh releases. Use the sanctioned `plugin` arm instead — `{ kind: 'plugin', plugin: '<stable-id>', form: … }` — exactly as dsh's own `model-selection` notice does; the stable id records what the original kind was.
+**If you author a plugin:** through dsh 0.1.6 the persisted source vocabulary was frozen per format edge, and the sanctioned arm was `{ kind: 'plugin', plugin: '<stable-id>', form: … }`. Since dsh 0.1.7-rc.1 that vocabulary is producer-declared instead ("each producer declares its own `kind` in its own module" — dsh's own `model-selection` notice writes `{ kind: 'model-selection', form: 'notice', … }`), and the one rule a released edge enforces on a direct kind is that it is **non-empty**. Old logs written against the frozen vocabulary are exactly what this tool's `source-kind` class repairs.
 
 ### Usage
 
@@ -223,7 +223,7 @@ Notes:
 
 - **Picker label**: the row's catalog `name` (what the composer trigger shows) is live — `Auto: DeepSeek Flash[Liang Peak]` / `Auto: DeepSeek Flash[all-day]` (catalog display name, not the model id); the id stays `Auto`. Bare `Auto` if the all-day tail is not conforming. Refresh by reopening the picker.
 - **Thin delegate on every origin**: the row is served by the same `stream()` delegate for the root agent and for a subagent session that inherits the selection — subagent role resolution and injection keep their semantics apart from one deliberate widening: dispatch-time rule matching accepts **either** the recorded pair or the served head (a superset of the previous matching, so a rule keyed on the real head keeps matching), and the virtual row is never a second routing engine. A subagent that inherits the selection still routes through the chain head.
-- **Conformance gate on the tail**: a successful delegation requires the all-day chain to be **tail-conforming** — its last entry must be exactly one official model (`deepseek-official/deepseek-flash` or `deepseek-official/deepseek-pro`, the card's Default model panel); leading entries (Default fallback chain) are walked first. Disabling the plugin hides the row again (slot-row/chain edits never churn registration).
+- **Conformance gate on the tail**: a successful delegation requires the all-day chain to be **tail-conforming** — its last entry must be exactly one official model (`deepseek-official/deepseek-flash` or `deepseek-official/deepseek-v4-pro`, the card's Default model panel); leading entries (Default fallback chain) are walked first. Disabling the plugin hides the row again (slot-row/chain edits never churn registration).
 - **Stale selection**: if the row disappears (plugin disabled) while `FallbacksChain / Auto` is selected, the session keeps showing it as the current model with `routable: false` — pick a real model from the catalog to continue (host-native catalog semantics).
 - **Capabilities and retry policy follow the head**: the row's model metadata (context window, modalities, reasoning) mirrors the current effective head, and `providerRetryPolicy` returns **that head's** policy — so a user's `llm-deepseek.retryPolicy` applies on this route too, not the permissive default. The host captures the policy once at registration, so a later policy edit or a slot-driven head-provider rotation shows up only after the plugin re-registers. Retry events are keyed by the virtual provider — the route the runtime actually sees. Full semantics → [docs/configuration.md](docs/configuration.md).
 

package/README.zh-CN.md

@@ -7,7 +7,7 @@
 ![node](https://img.shields.io/badge/node-%3E%3D22-339933.svg)
 ![pnpm](https://img.shields.io/badge/pnpm-%3E%3D10-f69220.svg)
 ![dsh tui](https://img.shields.io/badge/dsh%20tui-compatible-4B32C3.svg)
-![dsh](https://img.shields.io/badge/DSH-0.1.5--rc.1-4B32C3.svg)
+![dsh](https://img.shields.io/badge/DSH-0.1.7--rc.1-4B32C3.svg)
 [![dshfind](https://dshfind.com/api/badge/omdsh-dev/dsh-llm-fallbacks?lang=zh)](https://dshfind.com/zh/plugins/omdsh-dev/dsh-llm-fallbacks?ref=badge)
 
 dsh（DeepSeek Harness）的自动模型降级插件：当 root agent 或 subagent 的模型请求持续失败（重试耗尽、权限、配额超限、限流 429）时，按角色/模型 fallback 链自动切换 provider/model，当前 step/turn 在目标模型上继续完成——任务不因模型问题中断。
@@ -31,7 +31,7 @@ dsh（DeepSeek Harness）的自动模型降级插件：当 root agent 或 subage
 
 GLM 峰与 GLM 谷仅在已配置 `zai-coding-cn` 时出现在设置卡选择器中。
 
-每个 root 请求时刻，第一条窗口包含当前时刻（按 `fallbacks.tz`，默认 Asia/Shanghai）的额外行生效；无行命中 → 全时段 `rootChain`——其链尾（默认模型）必须是恰好一个官方模型：`deepseek-official/deepseek-flash` 或 `deepseek-official/deepseek-pro`（二选一）。分时切换是路由种子而非失败决策：在下一个 root 请求生效、不消耗冷却、不计入 `maxSwitchesPerStep`，日志记为**分时切换**；失败降级保持**降级切换**。完整语义 → [分时槽预设（分时切换）](#分时槽预设分时切换) 与 [docs/configuration.md](docs/configuration.md)。
+每个 root 请求时刻，第一条窗口包含当前时刻（按 `fallbacks.tz`，默认 Asia/Shanghai）的额外行生效；无行命中 → 全时段 `rootChain`——其链尾（默认模型）必须是恰好一个官方模型：`deepseek-official/deepseek-flash` 或 `deepseek-official/deepseek-v4-pro`（二选一）。分时切换是路由种子而非失败决策：在下一个 root 请求生效、不消耗冷却、不计入 `maxSwitchesPerStep`，日志记为**分时切换**；失败降级保持**降级切换**。完整语义 → [分时槽预设（分时切换）](#分时槽预设分时切换) 与 [docs/configuration.md](docs/configuration.md)。
 
 ## 快速开始
 
@@ -95,7 +95,7 @@ fallbacks:
 
 **2. 配置全时段 `rootChain`。** 前面的条目是降级链，请求失败时先走；**最后**一项是默认模型。
 
-> **链尾合规**：最后一项必须是恰好一个官方模型——`deepseek-official/deepseek-flash` 或 `deepseek-official/deepseek-pro`（二选一）。设置卡与 gateway 在保存时拒绝其它尾巴；遗留的非合规尾巴启动时告警并继续按 fallback-only 走原链，但无法原样保存。已退役的 `deepseek-v4-flash` / `deepseek-v4-pro` 不再是合法链尾——已保存的 V4 尾巴现在会告警、进入惰性（分时行 + 虚拟选择器）、并在选到合法链尾前阻止保存。`deepseek-pro` 是合法选择器但其模型尚未进入目录：设置卡中显示为禁用（「暂不可用」），请求在 gateway 启用该 id 前会在 provider 处失败。插件不探测目录可用性——含 `deepseek-pro` 的链会像其它精确条目一样派发到它；在虚拟路由上由 `stream()` 委派服务生效链的第一个可派发精确链头，因此 Pro 之前有可用条目的链仍路由到更早的条目。
+> **链尾合规**：最后一项必须是恰好一个官方模型——`deepseek-official/deepseek-flash` 或 `deepseek-official/deepseek-v4-pro`（二选一）。设置卡与 gateway 在保存时拒绝其它尾巴；遗留的非合规尾巴启动时告警并继续按 fallback-only 走原链，但无法原样保存。已退役的 `deepseek-v4-flash` 不再是合法链尾——已保存的该尾巴现在会告警、进入惰性（分时行 + 虚拟选择器）、并在选到合法链尾前阻止保存。官方 Pro 链尾由目录以 `deepseek-official/deepseek-v4-pro` 提供（dsh 0.1.7-rc.1），并可在设置卡中直接选择；手写的遗留 `deepseek-official/deepseek-pro` 尾巴——从未进入目录——读回为不合规（无迁移；请重选链尾）。插件不探测目录可用性——含 `deepseek-official/deepseek-v4-pro` 的链会像其它精确条目一样派发到它；在虚拟路由上由 `stream()` 委派服务生效链的第一个可派发精确链头，因此 Pro 之前有可用条目的链仍路由到更早的条目。
 
 **3. 添加 `timeSlots`（可选）。** 各行按墙钟窗口轮换生效 root 链。预设行使用冻结的 UTC+8 窗口（仅链可编辑；存在预设行时 `tz` 锁定 `Asia/Shanghai`）；自定义行使用 `start`/`end`（可跨午夜）与可选的 `days` 列表。第一个窗口包含当前时刻的行生效；无行命中 → 全时段 `rootChain`。分时切换是路由种子——在下一个 root 请求生效、不消耗冷却（见 [峰谷无忧](#峰谷无忧)）。
 
@@ -120,7 +120,7 @@ fallbacks:
 
 第三类——遗留 `fallbacks/switch` 事件类型——**无法**通过改写修复：见 [fallbacks/switch 的有损恢复（opt-in）](#fallbacksswitch-的有损恢复opt-in)。
 
-**如果你在编写插件：绝不要新增自定义 `source.kind`。** 持久化词汇表按格式边界冻结，自定义 kind 会让携带它的每个会话在后续 dsh 发行版中都无法读取。请改用受支持的 `plugin` 分支——`{ kind: 'plugin', plugin: '<stable-id>', form: … }`——正如 dsh 自身的 `model-selection` notice 那样；稳定 id 记录了原 kind 是什么。
+**如果你在编写插件：** dsh 0.1.6 及之前，持久化 source 词汇表按格式边界冻结，受支持的写法是 `{ kind: 'plugin', plugin: '<stable-id>', form: … }`。自 dsh 0.1.7-rc.1 起词汇表改为由生产者自行声明（“每个生产者在自己的模块里声明自己的 `kind`”——dsh 自身的 `model-selection` notice 写的是 `{ kind: 'model-selection', form: 'notice', … }`），发行边界对直接 kind 唯一强制的规则是**非空**。按冻结词汇表写入的历史日志正是本工具 `source-kind` 类别要修复的对象。
 
 ### 用法
 
@@ -223,7 +223,7 @@ pnpm repair:session-logs -- --drop-legacy-events --apply --backup  # 此处必
 
 - **选择器文案**：目录行的 `name`（composer 触发器显示）是动态的——`Auto: DeepSeek Flash[Liang Peak]` / `Auto: DeepSeek Flash[all-day]`（用 catalog 显示名，不是 model id）；id 仍是 `Auto`。all-day 尾巴不合规则只显示 `Auto`。重新打开选择器即可刷新。
 - **全来源同一个薄委托**：root 代理与继承了该选择的 subagent 会话由同一个 `stream()` 薄委托服务——subagent 的角色解析与注入语义不变，只有一处刻意的放宽：派发时规则匹配接受**记录 pair 或实际服务的链头**（此前匹配的超集，因此以真实链头为键的规则仍能命中），虚拟行绝不是第二个路由引擎。继承了该选择的 subagent 仍经链头路由。
-- **链尾合规门槛**：委托成功要求 all-day 链**尾巴合规**——最后一项必须是恰好一个官方模型（`deepseek-official/deepseek-flash` 或 `deepseek-official/deepseek-pro`，即设置卡的「默认模型」面板）；前面的默认降级链先走。禁用插件后该行隐藏（slot/链编辑不会触发注册抖动）。
+- **链尾合规门槛**：委托成功要求 all-day 链**尾巴合规**——最后一项必须是恰好一个官方模型（`deepseek-official/deepseek-flash` 或 `deepseek-official/deepseek-v4-pro`，即设置卡的「默认模型」面板）；前面的默认降级链先走。禁用插件后该行隐藏（slot/链编辑不会触发注册抖动）。
 - **过期选择**：行消失（插件禁用）而会话仍选中 `FallbacksChain / Auto` 时，会话继续把它显示为当前模型，但 `routable: false`——从目录选一个真实模型即可继续（宿主原生目录语义）。
 - **能力与重试策略跟随链头**：该行的模型元数据（上下文窗口、模态、推理）镜像当前生效链头，`providerRetryPolicy` 返回**该链头的**策略——因此用户配置的 `llm-deepseek.retryPolicy` 在这条路由上同样生效，不再退回宽松默认。宿主在注册时一次性捕获该策略，因此之后修改策略、或分时槽导致链头 provider 轮换，都只有在插件重新注册后才会反映。重试事件按虚拟 provider 记账——即运行时实际看到的路由。完整语义 → [docs/configuration.md](docs/configuration.md)。
 

package/dist/client/FallbacksCard.d.ts

@@ -1,7 +1,7 @@
 /**
- * Fallbacks settings card — the `fallbacks` plugin card on the web settings
- * "插件配置" page (spec §4). Registered into the `settings.plugin.item` keyed
- * slot (key `fallbacks`, the settings namespace the card edits, alongside
+ * Fallbacks settings card — the `fallbacks` plugin card on the web
+ * Plugins page (spec §4). Registered into the `plugins.bundle.config` keyed
+ * slot (key `dsh-llm-fallbacks`, the bundle package name, alongside
  * the upstream bash/agent-loop/web-search cards and the advisor card, in
  * registration order); owner props are empty and all data flows
  * through {@link FallbacksSettingsController}.
@@ -10,7 +10,7 @@
  * the upstream client value face exports no reusable card): a collapsible
  * `<li>` whose header is a button stacking the plugin name over its
  * description, with a dirty "unsaved" pill and a rotating chevron
- * (`IconChevronDownOutline14` from ui-primitives — a CLIENT_EXTERNALS value
+ * (`IconChevronDownOutlineMedium` from ui-primitives — a CLIENT_EXTERNALS value
  * import), `aria-expanded`/`aria-label` like the upstream header; a divider
  * under the header; then the form content. PR #62 UX round 2: the card
  * footer is gone — each big section (主代理 / 子代理 / 高级选项) carries its
@@ -79,18 +79,19 @@
  * so the healthy card starts (and stays) collapsed through its first load.
  */
 import type { ReactNode } from 'react';
-import type { PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
-import type { SnapshotSelectorHook } from '@deepseek-ai/dsh-client-ui-slots';
+import type { InjectFace, PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
 import { FallbacksSettingsController, type FallbacksSettingsState } from './fallbacks-store.ts';
 /** Injected dependencies of {@link FallbacksCard} (slot `inject`). */
 export interface FallbacksCardInjected {
     /** The card store (loaded on mount, refreshed on pushed invalidations). */
     controller: FallbacksSettingsController;
-    /** uSES subscription hook bound to the store (inject face — advisor pattern). */
-    useSnapshot: SnapshotSelectorHook<FallbacksSettingsState>;
+    /** Bare snapshot source the renderer binds as `useSnapshot`. */
+    hooks: {
+        snapshot: import('@deepseek-ai/dsh-client-store').SnapshotStore<FallbacksSettingsState>;
+    };
 }
 /** Props delivered by the slot outlet: runtime share + locale seat + inject face. */
-export type FallbacksCardProps = PropsRuntime<'settings.plugin.item'> & PropsLocale<'fallbacks'> & FallbacksCardInjected;
+export type FallbacksCardProps = PropsRuntime<'plugins.bundle.config'> & PropsLocale<'fallbacks'> & InjectFace<FallbacksCardInjected>;
 /**
  * Render the Fallbacks settings card inside the plugin-config section,
  * replicating the upstream PluginCard chrome (KD-U1). The body carries the

package/dist/client/fallbacks-store.d.ts

@@ -1,6 +1,6 @@
 /**
  * Fallbacks settings controller — the client half's own store (slot owner
- * props are empty; data rides this store, per the `settings.plugin.item`
+ * props are empty; data rides this store, per the `plugins.bundle.config`
  * card contract).
  *
  * Read path: the fallbacks config rides the plugin's own gateway channel —

package/dist/client/index.d.ts

@@ -1,9 +1,7 @@
 /**
  * dsh-llm-fallbacks client half: registers the Fallbacks card into the
- * plugin-config page's `settings.plugin.item` keyed slot (the official
- * "插件配置" settings page — key `fallbacks`, the settings namespace the card
- * edits, appearing after the upstream bash / agent-loop / web-search cards
- * and the advisor card in registration order).
+ * Plugins page `plugins.bundle.config` keyed slot (key = bundle package name
+ * `dsh-llm-fallbacks`).
  *
  * Wiring (mirrors dsh-advisor):
  * - Registers the `fallbacks` locale dictionaries (zh/en).
@@ -13,13 +11,10 @@
  *   namespace directory), the provider/model catalog, and the switch-history
  *   tail page ride the typed `ctx.remote` namespaces (0.1.2:
  *   `ConnectionHandle` dropped `api`; see `fallbacks-store.ts`).
- * - Registers the `settings.plugin.item` card `key: 'fallbacks'` with a
- *   matching `id: 'fallbacks'` (the rc.7 keyed slot — no `order`; the id
- *   keeps the card mountable on hosts that still declare the slot as a list,
- *   which requires `options.id`) with a business-only inject face
- *   ({@link FallbacksSettingsController} + the snapshot-selector hook); the
- *   old Settings-nav section registration is removed — deleting the section
- *   registration deletes the nav entry.
+ * - Registers the `plugins.bundle.config` card `key: 'dsh-llm-fallbacks'`
+ *   (bundle package name) with a business-only inject face
+ *   ({@link FallbacksSettingsController} + hooks.snapshot); the old
+ *   Settings-nav section registration stays removed.
  * - Refreshes the store on pushed invalidations — the forwarded remote
  *   events `settings/document-updated` (ns-filtered to the fallbacks
  *   namespace; refetches the descriptor + recent-switch summary) and
@@ -63,7 +58,7 @@ export { FallbacksSettingsController, FALLBACKS_SETTINGS_NS } from './fallbacks-
 export declare const inject: string[];
 /**
  * Register the `fallbacks` dictionaries and the plugin-config card once the
- * `settings.plugin.item` declaration is on the ledger.
+ * `plugins.bundle.config` declaration is on the ledger.
  * @param ctx - client root context.
  */
 export declare function apply(ctx: ClientContext): void;

package/dist/client/index.js

@@ -199,10 +199,10 @@ window.__ModuleLoader__.load({
 			};
 		}
 		/** The two official all-day tail ids (XOR — exactly one legal tail). */
-		const OFFICIAL_ALL_DAY_IDS = ["deepseek-official/deepseek-flash", "deepseek-official/deepseek-pro"];
+		const OFFICIAL_ALL_DAY_IDS = ["deepseek-official/deepseek-flash", "deepseek-official/deepseek-v4-pro"];
 		/** Whether `id` is one of the two official all-day tail ids. */
 		function isOfficialAllDayId(id) {
-			return id === "deepseek-official/deepseek-flash" || id === "deepseek-official/deepseek-pro";
+			return id === "deepseek-official/deepseek-flash" || id === "deepseek-official/deepseek-v4-pro";
 		}
 		/**
 		* Frozen preset windows (UTC+8). `liang-peak` and `glm-peak` are
@@ -411,8 +411,10 @@ window.__ModuleLoader__.load({
 		* entry (the tail — the card's 默认模型 panel) is exactly one official
 		* model — Flash or Pro (XOR). Leading entries (the card's 默认降级链 block)
 		* are the ordered walk before that last-resort fallback. An empty chain or
-		* a chain whose tail is not an official model (including the retired V4
-		* ids) keeps slot rows inert and refuses the virtual-row
+		* a chain whose tail is not an official model (the retired
+		* `deepseek-v4-flash` and the never-served legacy
+		* `deepseek-official/deepseek-pro` included) keeps slot rows inert and
+		* refuses the virtual-row
 		* delegate; the v0.2.2 failure walk over the raw chain stays
 		* verbatim.
 		*/
@@ -1421,8 +1423,7 @@ window.__ModuleLoader__.load({
 			"timeSlots.selector.add": "添加选择器",
 			"allDay.hint": "全天链的最后一档兜底：官方 Flash 或 Pro 二选一",
 			"allDay.flash": "官方 Flash（deepseek-official/deepseek-flash）",
-			"allDay.pro": "官方 Pro（deepseek-official/deepseek-pro）",
-			"allDay.proCaveat": "（暂不可用）",
+			"allDay.pro": "官方 Pro（deepseek-official/deepseek-v4-pro）",
 			"allDay.nonconforming": "当前默认模型不合法：请选择官方 Flash 或 Pro 后保存",
 			"roles.list.label": "角色实体",
 			"roles.list.hint": "先声明角色，规则才能引用",
@@ -1618,8 +1619,7 @@ window.__ModuleLoader__.load({
 			"timeSlots.selector.add": "Add selector",
 			"allDay.hint": "Last-resort fallback of the all-day chain: official Flash or Pro (pick exactly one)",
 			"allDay.flash": "Official Flash (deepseek-official/deepseek-flash)",
-			"allDay.pro": "Official Pro (deepseek-official/deepseek-pro)",
-			"allDay.proCaveat": " (not yet available)",
+			"allDay.pro": "Official Pro (deepseek-official/deepseek-v4-pro)",
 			"allDay.nonconforming": "The current default model is not valid: pick official Flash or Pro before saving",
 			"roles.list.label": "Declared roles",
 			"roles.list.hint": "Declare roles before rules can reference them",
@@ -1849,9 +1849,9 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/client/FallbacksCard.tsx
 		/**
-		* Fallbacks settings card — the `fallbacks` plugin card on the web settings
-		* "插件配置" page (spec §4). Registered into the `settings.plugin.item` keyed
-		* slot (key `fallbacks`, the settings namespace the card edits, alongside
+		* Fallbacks settings card — the `fallbacks` plugin card on the web
+		* Plugins page (spec §4). Registered into the `plugins.bundle.config` keyed
+		* slot (key `dsh-llm-fallbacks`, the bundle package name, alongside
 		* the upstream bash/agent-loop/web-search cards and the advisor card, in
 		* registration order); owner props are empty and all data flows
 		* through {@link FallbacksSettingsController}.
@@ -1860,7 +1860,7 @@ window.__ModuleLoader__.load({
 		* the upstream client value face exports no reusable card): a collapsible
 		* `<li>` whose header is a button stacking the plugin name over its
 		* description, with a dirty "unsaved" pill and a rotating chevron
-		* (`IconChevronDownOutline14` from ui-primitives — a CLIENT_EXTERNALS value
+		* (`IconChevronDownOutlineMedium` from ui-primitives — a CLIENT_EXTERNALS value
 		* import), `aria-expanded`/`aria-label` like the upstream header; a divider
 		* under the header; then the form content. PR #62 UX round 2: the card
 		* footer is gone — each big section (主代理 / 子代理 / 高级选项) carries its
@@ -1929,9 +1929,6 @@ window.__ModuleLoader__.load({
 		* so the healthy card starts (and stays) collapsed through its first load.
 		*/
 		const ALL_DAY_LABEL_KEYS = ["allDay.flash", "allDay.pro"];
-		/** Optional caveat suffix per option (parallel to OFFICIAL_ALL_DAY_IDS):
-		* Pro's radio is always disabled — its model is not yet in the catalog. */
-		const ALL_DAY_CAVEAT_KEYS = [void 0, "allDay.proCaveat"];
 		const SLOT_PRESET_IDS = [
 			"liang-peak",
 			"liang-valley",
@@ -2364,7 +2361,7 @@ window.__ModuleLoader__.load({
 							"data-tip": t("chains.selector.remove"),
 							"aria-label": t("chains.selector.remove"),
 							onClick: onRemove,
-							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconTrashOutline16, {})
+							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconTrashOutlineMedium, {})
 						})
 					})
 				]
@@ -2851,7 +2848,7 @@ window.__ModuleLoader__.load({
 						className: FallbacksCard_module_css_default.pending,
 						children: t("unsaved")
 					}) : null,
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutline14, { className: open ? `${FallbacksCard_module_css_default.chevron} ${FallbacksCard_module_css_default.chevronOpen}` : FallbacksCard_module_css_default.chevron })
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutlineMedium, { className: open ? `${FallbacksCard_module_css_default.chevron} ${FallbacksCard_module_css_default.chevronOpen}` : FallbacksCard_module_css_default.chevron })
 				]
 			});
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
@@ -3047,7 +3044,7 @@ window.__ModuleLoader__.load({
 																		updateTimeSlotRow(index, { collapsed: !row.collapsed });
 																	},
 																	children: [
-																		/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutline14, { className: slotExpanded ? `${FallbacksCard_module_css_default.chevron} ${FallbacksCard_module_css_default.chevronOpen}` : FallbacksCard_module_css_default.chevron }),
+																		/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutlineMedium, { className: slotExpanded ? `${FallbacksCard_module_css_default.chevron} ${FallbacksCard_module_css_default.chevronOpen}` : FallbacksCard_module_css_default.chevron }),
 																		/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 																			className: FallbacksCard_module_css_default.collapseTitle,
 																			children: row.kind === "preset" ? t(`timeSlots.preset.${row.preset}.label`) : row.name !== "" ? row.name : `custom ${row.start}-${row.end}`
@@ -3084,7 +3081,7 @@ window.__ModuleLoader__.load({
 																		setDraggedSlotIndex(null);
 																		setOverSlotIndex(null);
 																	},
-																	children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconEllipsisOutline16, { className: FallbacksCard_module_css_default.dragHandleIcon })
+																	children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconEllipsisOutlineMedium, { className: FallbacksCard_module_css_default.dragHandleIcon })
 																})]
 															}), slotExpanded && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
 																row.kind === "preset" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
@@ -3235,7 +3232,7 @@ window.__ModuleLoader__.load({
 																/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
 																	variant: "outline",
 																	size: "sm",
-																	icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconPlusOutline16, { size: 14 }),
+																	icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconPlusOutlineMedium, { size: 14 }),
 																	className: FallbacksCard_module_css_default.addButton,
 																	onClick: () => {
 																		addTimeSlotSelector(index);
@@ -3256,7 +3253,7 @@ window.__ModuleLoader__.load({
 																				onClick: () => {
 																					moveTimeSlotRow(index, -1);
 																				},
-																				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronUpOutline14, {})
+																				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronUpOutlineMedium, {})
 																			}),
 																			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 																				type: "button",
@@ -3267,7 +3264,7 @@ window.__ModuleLoader__.load({
 																				onClick: () => {
 																					moveTimeSlotRow(index, 1);
 																				},
-																				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutline14, {})
+																				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutlineMedium, {})
 																			}),
 																			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 																				type: "button",
@@ -3277,7 +3274,7 @@ window.__ModuleLoader__.load({
 																				onClick: () => {
 																					removeTimeSlotRow(index);
 																				},
-																				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconTrashOutline16, {})
+																				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconTrashOutlineMedium, {})
 																			})
 																		]
 																	})
@@ -3312,7 +3309,7 @@ window.__ModuleLoader__.load({
 														/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
 															variant: "outline",
 															size: "sm",
-															icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconPlusOutline16, { size: 14 }),
+															icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconPlusOutlineMedium, { size: 14 }),
 															disabled: !writable || presetToAdd === "",
 															onClick: addPresetSlotRow,
 															children: t("timeSlots.addPreset")
@@ -3320,7 +3317,7 @@ window.__ModuleLoader__.load({
 														/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
 															variant: "outline",
 															size: "sm",
-															icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconPlusOutline16, { size: 14 }),
+															icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconPlusOutlineMedium, { size: 14 }),
 															disabled: !writable,
 															onClick: addCustomSlotRow,
 															children: t("timeSlots.addCustom")
@@ -3378,7 +3375,7 @@ window.__ModuleLoader__.load({
 														}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
 															variant: "outline",
 															size: "sm",
-															icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconPlusOutline16, { size: 14 }),
+															icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconPlusOutlineMedium, { size: 14 }),
 															className: FallbacksCard_module_css_default.addButton,
 															onClick: addAllDayChainSelector,
 															children: t("timeSlots.selector.add")
@@ -3409,22 +3406,15 @@ window.__ModuleLoader__.load({
 														className: FallbacksCard_module_css_default.editorCard,
 														children: [OFFICIAL_ALL_DAY_IDS.map((id, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
 															className: FallbacksCard_module_css_default.optionRow,
-															children: [
-																/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-																	type: "radio",
-																	name: "fallbacks-all-day",
-																	checked: allDayModel === id,
-																	disabled: !writable || id === "deepseek-official/deepseek-pro",
-																	onChange: () => {
-																		setAllDayModel(id);
-																	}
-																}),
-																t(ALL_DAY_LABEL_KEYS[index]),
-																ALL_DAY_CAVEAT_KEYS[index] !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-																	className: FallbacksCard_module_css_default.hint,
-																	children: t(ALL_DAY_CAVEAT_KEYS[index])
-																})
-															]
+															children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+																type: "radio",
+																name: "fallbacks-all-day",
+																checked: allDayModel === id,
+																disabled: !writable,
+																onChange: () => {
+																	setAllDayModel(id);
+																}
+															}), t(ALL_DAY_LABEL_KEYS[index])]
 														}, id)), allDayModel === "" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 															className: FallbacksCard_module_css_default.hint,
 															children: t("allDay.nonconforming")
@@ -3544,7 +3534,7 @@ window.__ModuleLoader__.load({
 																		updateRoleRow(index, { collapsed: !row.collapsed });
 																	},
 																	children: [
-																		/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutline14, { className: roleExpanded ? `${FallbacksCard_module_css_default.chevron} ${FallbacksCard_module_css_default.chevronOpen}` : FallbacksCard_module_css_default.chevron }),
+																		/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutlineMedium, { className: roleExpanded ? `${FallbacksCard_module_css_default.chevron} ${FallbacksCard_module_css_default.chevronOpen}` : FallbacksCard_module_css_default.chevron }),
 																		/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 																			className: FallbacksCard_module_css_default.collapseTitle,
 																			children: row.id
@@ -3626,7 +3616,7 @@ window.__ModuleLoader__.load({
 																						updateRoleRow(index, { personaOpen: !row.personaOpen });
 																					}
 																				},
-																				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutline14, { className: row.personaOpen ? `${FallbacksCard_module_css_default.chevron} ${FallbacksCard_module_css_default.chevronOpen}` : FallbacksCard_module_css_default.chevron })
+																				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutlineMedium, { className: row.personaOpen ? `${FallbacksCard_module_css_default.chevron} ${FallbacksCard_module_css_default.chevronOpen}` : FallbacksCard_module_css_default.chevron })
 																			})]
 																		}), row.personaOpen && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 																			className: FallbacksCard_module_css_default.personaFull,
@@ -3681,7 +3671,7 @@ window.__ModuleLoader__.load({
 																/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
 																	variant: "outline",
 																	size: "sm",
-																	icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconPlusOutline16, { size: 14 }),
+																	icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconPlusOutlineMedium, { size: 14 }),
 																	className: FallbacksCard_module_css_default.addButton,
 																	onClick: () => {
 																		addRoleSelector(index);
@@ -3698,7 +3688,7 @@ window.__ModuleLoader__.load({
 																		onClick: () => {
 																			removeRole(index);
 																		},
-																		children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconTrashOutline16, {})
+																		children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconTrashOutlineMedium, {})
 																	})
 																})
 															] })]
@@ -3708,7 +3698,7 @@ window.__ModuleLoader__.load({
 												/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
 													variant: "outline",
 													size: "sm",
-													icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconPlusOutline16, { size: 14 }),
+													icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconPlusOutlineMedium, { size: 14 }),
 													className: FallbacksCard_module_css_default.addButton,
 													onClick: addRole,
 													children: t("roles.add")
@@ -3875,7 +3865,7 @@ window.__ModuleLoader__.load({
 																		onClick: () => {
 																			setRuleRows((rows) => rows.filter((_, rowIndex) => rowIndex !== index));
 																		},
-																		children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconTrashOutline16, {})
+																		children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconTrashOutlineMedium, {})
 																	})
 																})
 															]
@@ -3885,7 +3875,7 @@ window.__ModuleLoader__.load({
 												/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
 													variant: "outline",
 													size: "sm",
-													icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconPlusOutline16, { size: 14 }),
+													icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconPlusOutlineMedium, { size: 14 }),
 													className: FallbacksCard_module_css_default.addButton,
 													onClick: () => {
 														setRuleRows((rows) => [...rows, {
@@ -3916,7 +3906,7 @@ window.__ModuleLoader__.load({
 													id: "fallbacks-advanced",
 													className: FallbacksCard_module_css_default.sectionToggleText,
 													children: t("advanced.label")
-												}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutline14, { className: advancedVisible ? `${FallbacksCard_module_css_default.chevron} ${FallbacksCard_module_css_default.chevronOpen}` : FallbacksCard_module_css_default.chevron })]
+												}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutlineMedium, { className: advancedVisible ? `${FallbacksCard_module_css_default.chevron} ${FallbacksCard_module_css_default.chevronOpen}` : FallbacksCard_module_css_default.chevron })]
 											}), advancedVisible && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 												id: "fallbacks-advanced-body",
 												children: [
@@ -4600,8 +4590,26 @@ window.__ModuleLoader__.load({
 			"remote.session"
 		];
 		/**
+		* The session the client is LOOKING at, derived from the sessions-list
+		* snapshot. 0.1.7-rc.1 moved view ownership out of `SessionListState` (the
+		* `current` field is gone — "navigation belongs to view owners"): the viewed
+		* session is the one the shell retains under the `mainView` reference source,
+		* surfaced as a positive `retainedBy.mainView` count on the row
+		* (`SessionSummary.retainedBy`, the same signal `ui-session`'s main-view
+		* derivation reads). First match in host list order; `undefined` while no
+		* session is open — the switches face degrades to its empty state.
+		*/
+		function viewedSessionId(state) {
+			if (!Array.isArray(state?.ids)) return void 0;
+			for (const id of state.ids) {
+				const row = state.byId[id];
+				const mainView = (row?.retainedBy)?.mainView ?? 0;
+				if (row !== void 0 && mainView > 0) return id;
+			}
+		}
+		/**
 		* Register the `fallbacks` dictionaries and the plugin-config card once the
-		* `settings.plugin.item` declaration is on the ledger.
+		* `plugins.bundle.config` declaration is on the ledger.
 		* @param ctx - client root context.
 		*/
 		function apply(ctx) {
@@ -4615,7 +4623,7 @@ window.__ModuleLoader__.load({
 			const useSnapshot = bindSnapshotSelector(controller.store);
 			ctx.effect(() => {
 				const syncSession = () => {
-					controller.setCurrentSession(sessions?.list.getSnapshot().current);
+					controller.setCurrentSession(sessions === void 0 ? void 0 : viewedSessionId(sessions.list.getSnapshot()));
 				};
 				if (sessions !== void 0) syncSession();
 				const refresh = (ns) => {
@@ -4650,18 +4658,17 @@ window.__ModuleLoader__.load({
 					controller.dispose();
 				};
 			}, "llm-fallbacks: pushed invalidations");
-			ctx.slots.inject("settings.plugin.item", function* () {
-				const cardOptions = {
-					name: "settings.plugin.item",
-					key: "fallbacks",
-					id: "fallbacks",
+			const BUNDLE_NAME = "dsh-llm-fallbacks";
+			ctx.slots.inject("plugins.bundle.config", function* () {
+				yield ctx.slots.register({
+					name: "plugins.bundle.config",
+					key: BUNDLE_NAME,
 					locale: NS,
 					inject: () => ({
 						controller,
-						useSnapshot
+						hooks: { snapshot: controller.store }
 					})
-				};
-				yield ctx.slots.register(cardOptions, FallbacksCard);
+				}, FallbacksCard);
 			});
 			ctx.slots.inject("settings.general.item", function* () {
 				yield ctx.slots.register({

package/dist/client/locales.d.ts

@@ -102,7 +102,6 @@ export declare const zh: {
     'allDay.hint': string;
     'allDay.flash': string;
     'allDay.pro': string;
-    'allDay.proCaveat': string;
     'allDay.nonconforming': string;
     'roles.list.label': string;
     'roles.list.hint': string;
@@ -301,7 +300,6 @@ export declare const en: {
     'allDay.hint': string;
     'allDay.flash': string;
     'allDay.pro': string;
-    'allDay.proCaveat': string;
     'allDay.nonconforming': string;
     'roles.list.label': string;
     'roles.list.hint': string;