dsh-llm-fallbacks 0.6.13 → 0.7.0

package/dist/index.js

@@ -338,9 +338,7 @@ const defaultFallbacksConfig = {
 	cooldownMs: 3e5,
 	revertPolicy: "cooldown-expiry",
 	maxSwitchesPerStep: 8,
-	alwaysModeRetryCap: 5,
 	presets: "bundled",
-	roleAutoMatch: true,
 	timeSlots: [],
 	tz: "Asia/Shanghai",
 	recovery: "timer"
@@ -396,6 +394,8 @@ function validateFallbacksConfig(config, logger) {
 function detectLegacyKeys(source) {
 	const keys = [];
 	if (Object.hasOwn(source, "chains")) keys.push("chains");
+	if (Object.hasOwn(source, "alwaysModeRetryCap")) keys.push("alwaysModeRetryCap");
+	if (Object.hasOwn(source, "roleAutoMatch")) keys.push("roleAutoMatch");
 	const roles = source.roles;
 	if (isRecordLike(roles)) {
 		if (Object.hasOwn(roles, "default")) keys.push("roles.default");
@@ -447,9 +447,7 @@ const Config = z.object({
 	cooldownMs: z.number().default(3e5),
 	revertPolicy: z.union([z.const("cooldown-expiry"), z.const("never")]).default("cooldown-expiry"),
 	maxSwitchesPerStep: z.number().default(8),
-	alwaysModeRetryCap: z.number().default(5),
 	presets: z.union([z.const("bundled"), z.const("none")]).default("bundled"),
-	roleAutoMatch: z.boolean().default(true),
 	timeSlots: z.array(z.object({
 		kind: z.string(),
 		preset: z.string(),
@@ -461,98 +459,6 @@ const Config = z.object({
 	tz: z.string().default("Asia/Shanghai"),
 	recovery: z.union([z.const("timer"), z.const("half-open")]).default("timer")
 }).extra("volatile", true);
-function buildAutomatchPrompt(roles, agent) {
-	const lines = [
-		"You are assigning a subagent to its best-fit role from a declared taxonomy.",
-		"",
-		"Declared roles:",
-		...roles.map((role) => `- ${role.id.trim()}: ${role.persona}`),
-		"",
-		`Agent context — origin: ${agent.session?.header?.origin ?? "root"}`
-	];
-	const preset = agent.session?.header?.agentPreset?.trim();
-	if (preset !== void 0 && preset !== "") lines.push(`agentPreset: ${preset}`);
-	lines.push("", "Reply with EXACTLY ONE of the declared role ids above, or the literal \"none\" when no role fits.", "Do not add any explanation, punctuation, or other text.");
-	return lines.join("\n");
-}
-function parseAutomatchAnswer(answer, roleIds) {
-	const cleaned = answer.replace(/^[^a-zA-Z0-9-]+/, "").replace(/[^a-zA-Z0-9-]+$/, "");
-	if (cleaned === "") return null;
-	const key = cleaned.toLowerCase();
-	if (key === "none") return null;
-	return roleIds.get(key) ?? null;
-}
-async function pickRoleByLlm(ctx, roles, agent, opts) {
-	try {
-		const list = Array.isArray(roles.list) ? roles.list : [];
-		if (list.length === 0) return null;
-		const llm = ctx.get("llm");
-		if (llm === void 0) return null;
-		const route = pickJudgmentRoute(list, agent);
-		if (route === null) return null;
-		const roleIds = new Map(list.map((role) => [role.id.trim(), role.id]));
-		const answer = await streamRoleAnswer(llm, route, buildAutomatchPrompt(list, agent), opts);
-		if (answer === null) return null;
-		return parseAutomatchAnswer(answer, roleIds);
-	} catch (error) {
-		opts.warn(`llm-fallbacks: auto-match failed — falling back to "inherit": ${describeError(error)}`);
-		return null;
-	}
-}
-function pickJudgmentRoute(roles, agent) {
-	for (const role of roles) for (const entry of role.chain ?? []) try {
-		const selector = parseSelector(entry);
-		if (selector.model !== void 0) return {
-			provider: selector.provider,
-			model: selector.model
-		};
-	} catch {}
-	const provider = agent.options?.provider;
-	const model = agent.options?.model;
-	if (provider !== void 0 && model !== void 0) return {
-		provider,
-		model
-	};
-	return null;
-}
-async function streamRoleAnswer(llm, route, prompt, opts) {
-	const controller = new AbortController();
-	const timer = setTimeout(() => controller.abort(), opts.timeoutMs ?? 5e3);
-	let text = "";
-	let finishKind;
-	try {
-		for await (const chunk of llm.stream({
-			provider: route.provider,
-			model: route.model,
-			system: prompt,
-			messages: [createUserMessage({
-				content: [{
-					type: "text",
-					text: "Pick the best-fit role for this agent."
-				}],
-				source: { kind: "user" }
-			})],
-			maxTokens: 32,
-			signal: controller.signal
-		})) if (chunk.type === "text-delta") text += chunk.text;
-		else if (chunk.type === "finish") {
-			finishKind = chunk.reason.kind;
-			break;
-		}
-		if (controller.signal.aborted) return null;
-		if (finishKind === "error" || finishKind === "aborted") return null;
-		return text;
-	} catch (error) {
-		if (controller.signal.aborted) opts.warn("llm-fallbacks: auto-match timed out — falling back to \"inherit\"");
-		else opts.warn(`llm-fallbacks: auto-match call failed — falling back to "inherit": ${describeError(error)}`);
-		return null;
-	} finally {
-		clearTimeout(timer);
-	}
-}
-function describeError(error) {
-	return error instanceof Error ? error.message : String(error);
-}
 //#endregion
 //#region .build/host/chains.js
 function resolveCandidate(entry, failing, modelExists) {
@@ -569,7 +475,7 @@ function resolveCandidate(entry, failing, modelExists) {
 	}
 	return selector;
 }
-function buildRoleEntries(roles, rootChain, role) {
+function roleChainEntries(roles, rootChain, role) {
 	if (role.trim() === "inherit") return rootChain;
 	const roleDef = roles.find((declared) => declared.id.trim() === role.trim());
 	if (roleDef === void 0) return rootChain;
@@ -580,7 +486,7 @@ function resolveChainViews(roles, rootChain, role, provider, model, warn = conso
 		provider,
 		model
 	};
-	const entries = buildRoleEntries(roles, rootChain, role);
+	const entries = roleChainEntries(roles, rootChain, role);
 	if (role.trim() !== "inherit" && !roles.some((declared) => declared.id.trim() === role.trim())) warn(`llm-fallbacks: unknown role "${role}" — falling back to rootChain`);
 	const all = [];
 	const wildcard = [];
@@ -616,7 +522,7 @@ function resolveChain(roles, rootChain, role, provider, model, filter, modelExis
 	return selectCandidates(all, wildcard, filter, modelExists);
 }
 function hasWildcardEntry(roles, rootChain, role) {
-	const entries = buildRoleEntries(roles, rootChain, role);
+	const entries = roleChainEntries(roles, rootChain, role);
 	for (const entry of entries) try {
 		if (parseSelector(entry).model === void 0) return true;
 	} catch {}
@@ -668,6 +574,25 @@ function annotateCandidates(candidates, surviving, options) {
 	});
 }
 //#endregion
+//#region .build/host/route-allowlist.js
+function resolvedRoutes(candidates) {
+	const routes = [];
+	for (const candidate of candidates) {
+		if (candidate.model === void 0) continue;
+		routes.push({
+			provider: candidate.provider,
+			model: candidate.model
+		});
+	}
+	return routes;
+}
+function routeOnAllowlist(route, allowedModels) {
+	return allowedModels.some((allowed) => allowed.provider === route.provider && allowed.model === route.model);
+}
+function firstAllowedCandidate(resolved, allowedModels) {
+	return resolved.find((route) => routeOnAllowlist(route, allowedModels));
+}
+//#endregion
 //#region .build/host/roles.js
 function resolveRole(agent, rules, roleIds, warn = console.warn, servedRoute) {
 	if ((agent.session?.header?.origin ?? "root") !== "subagent") return INHERIT_ROLE_ID;
@@ -691,7 +616,7 @@ function resolveRole(agent, rules, roleIds, warn = console.warn, servedRoute) {
 }
 //#endregion
 //#region .build/host/role-resolution.js
-async function resolveRoleAtDispatch(agent, rules, roleIds, opts) {
+function resolveDeclaredRole(agent, rules, roleIds, opts) {
 	const preset = agent.session?.header?.agentPreset?.trim();
 	if (preset !== void 0 && preset !== "" && preset !== "inherit") {
 		const declared = roleIds.get(preset);
@@ -702,67 +627,453 @@ async function resolveRoleAtDispatch(agent, rules, roleIds, opts) {
 		const declared = roleIds.get(dispatch);
 		if (declared !== void 0) return declared;
 	}
-	const role = resolveRole(agent, rules, roleIds, opts.warn, opts.servedRoute);
-	if (role !== "inherit") return role;
-	if (opts.automatchEnabled && opts.automatch !== void 0) {
-		const picked = await opts.automatch(agent);
-		if (picked !== null && picked !== void 0) {
-			const declared = roleIds.get(picked.trim());
-			if (declared !== void 0) return declared;
-			opts.warn(`llm-fallbacks: auto-match returned undeclared role "${picked}" — falling back to "inherit"`);
+	return resolveRole(agent, rules, roleIds, opts.warn, opts.servedRoute);
+}
+//#endregion
+//#region .build/host/virtual-adapter.js
+const FALLBACKS_PROVIDER$1 = "FallbacksChain";
+const FALLBACKS_CHAIN_MODEL = "Auto";
+function firstDispatchableExactHead(chain, allowedModels) {
+	for (const entry of chain) {
+		let selector;
+		try {
+			selector = parseSelector(entry);
+		} catch {
+			continue;
 		}
+		if (selector.model === void 0) continue;
+		if (selector.provider === "FallbacksChain") continue;
+		const head = {
+			provider: selector.provider,
+			model: selector.model
+		};
+		if (allowedModels !== void 0 && !routeOnAllowlist(head, allowedModels)) continue;
+		return head;
 	}
-	return INHERIT_ROLE_ID;
 }
-function firstExactCandidate(all, wildcard) {
-	for (let index = 0; index < all.length; index += 1) if (!wildcard[index]) return all[index];
+function effectiveHeadOf(config, now) {
+	if (!isAllDayConforming(config.rootChain)) return void 0;
+	return firstDispatchableExactHead(resolveEffectiveChain(config, now, config.tz ?? "Asia/Shanghai"));
+}
+function pickerDisplayName(config, now = new Date(), modelDisplayName) {
+	const head = effectiveHeadOf(config, now);
+	if (head === void 0) return FALLBACKS_CHAIN_MODEL;
+	const slot = resolveSlotState(config, now, config.tz ?? "Asia/Shanghai");
+	const model = modelDisplayName !== void 0 && modelDisplayName !== "" ? modelDisplayName : head.model;
+	return `${FALLBACKS_CHAIN_MODEL}: ${model}[${slot.label}]`;
+}
+async function resolveHeadDisplayName(llm, head) {
+	if (llm === void 0) return head.model;
+	try {
+		const row = (await llm.listModels(head.provider)).find((model) => model.id === head.model);
+		if (row !== void 0 && row.name !== "") return row.name;
+	} catch {}
+	try {
+		const info = await llm.resolveModelInfo(head.provider, head.model);
+		if (info.name !== "") return info.name;
+	} catch {}
+	return head.model;
+}
+var FallbacksChainAdapter = class extends LlmAdapter {
+	readConfig;
+	getLlm;
+	walk;
+	constructor(readConfig, getLlm, walk) {
+		super();
+		this.readConfig = readConfig;
+		this.getLlm = getLlm;
+		this.walk = walk;
+	}
+	providerInfo(provider) {
+		return {
+			id: provider,
+			name: FALLBACKS_PROVIDER$1
+		};
+	}
+	async listModels(provider) {
+		const config = this.readConfig();
+		const now = new Date();
+		const head = effectiveHeadOf(config, now);
+		const display = head === void 0 ? void 0 : await resolveHeadDisplayName(this.getLlm(), head);
+		return [{
+			provider,
+			id: FALLBACKS_CHAIN_MODEL,
+			name: pickerDisplayName(config, now, display)
+		}];
+	}
+	async resolveModel(provider, model, signal) {
+		const head = effectiveHeadOf(this.readConfig(), new Date());
+		const llm = this.getLlm();
+		if (head !== void 0 && llm !== void 0) try {
+			const info = await llm.resolveModelInfo(head.provider, head.model, signal);
+			return {
+				provider,
+				id: model,
+				name: info.name,
+				...info.description === void 0 ? {} : { description: info.description },
+				...info.inputModalities === void 0 ? {} : { inputModalities: info.inputModalities },
+				...info.context === void 0 ? {} : { context: info.context },
+				...info.defaultMaxTokens === void 0 ? {} : { defaultMaxTokens: info.defaultMaxTokens },
+				...info.reasoning === void 0 ? {} : { reasoning: info.reasoning }
+			};
+		} catch {}
+		return {
+			provider,
+			id: model,
+			name: model
+		};
+	}
+	providerRetryPolicy(_provider) {
+		try {
+			const head = effectiveHeadOf(this.readConfig(), new Date());
+			if (head === void 0 || head.provider === "FallbacksChain") return void 0;
+			return this.getLlm()?.providerRetryPolicy(head.provider);
+		} catch {
+			return;
+		}
+	}
+	imageRequestPricing(_provider, _model) {
+		try {
+			const head = effectiveHeadOf(this.readConfig(), new Date());
+			if (head === void 0 || head.provider === "FallbacksChain") return void 0;
+			return this.getLlm()?.imageRequestPricing(head.provider, head.model);
+		} catch {
+			return;
+		}
+	}
+	stream(options) {
+		return this.walk(options);
+	}
+};
+function installFallbacksAdapter(ctx, readConfig, walk) {
+	let llm;
+	let disposeAdapter;
+	let registered = false;
+	const logger = ctx.logger("llm-fallbacks");
+	const adapter = new FallbacksChainAdapter(readConfig, () => llm, walk);
+	const reconcile = () => {
+		const shouldRegister = isFallbackActive(readConfig());
+		if (shouldRegister && !registered) {
+			if (llm === void 0) return;
+			try {
+				disposeAdapter = llm.registerAdapter([FALLBACKS_PROVIDER$1], adapter);
+				registered = true;
+				logger.info("llm-fallbacks: virtual adapter registered — FallbacksChain/Auto is selectable in the model picker");
+			} catch (error) {
+				if (!(error instanceof Error) || !("code" in error) || error.code !== "DUPLICATE_ADAPTER") throw error;
+				logger.debug("llm-fallbacks: virtual adapter already registered — no route on this fiber (multi-fiber dedupe)");
+			}
+		} else if (!shouldRegister && registered) {
+			disposeAdapter?.();
+			disposeAdapter = void 0;
+			registered = false;
+			logger.info("llm-fallbacks: virtual adapter unregistered — FallbacksChain/Auto hidden from the model picker");
+		}
+	};
+	ctx.inject(["llm"], (llmCtx) => {
+		llm = llmCtx.llm;
+		reconcile();
+		return () => {
+			disposeAdapter?.();
+			disposeAdapter = void 0;
+			registered = false;
+			llm = void 0;
+		};
+	});
+	return reconcile;
 }
 //#endregion
-//#region .build/host/authorized-route.js
-function completeRoute(source) {
-	if (typeof source !== "object" || source === null || typeof source.provider !== "string" || source.provider.length === 0 || typeof source.model !== "string" || source.model.length === 0) return;
+//#region .build/host/chain-walk.js
+const EMPTY_EFFECTIVE_CHAIN_CODE = "EMPTY_EFFECTIVE_CHAIN";
+const UNDISPATCHABLE_HEAD_CODE = "UNDISPATCHABLE_EFFECTIVE_HEAD";
+const LLM_UNAVAILABLE_CODE = "LLM_UNAVAILABLE";
+const REQUEST_SCOPED_CODES = new Set(["CONTEXT_WINDOW_EXCEEDED"]);
+async function makeModelExists(catalog, providers) {
+	if (catalog === void 0 || typeof catalog.listModels !== "function") return () => true;
+	const models = new Map();
+	await Promise.all(providers.map(async (provider) => {
+		try {
+			const rows = await catalog.listModels(provider);
+			models.set(provider, new Set(rows.map((row) => row.id)));
+		} catch {
+			models.set(provider, new Set());
+		}
+	}));
+	return (provider, model) => models.get(provider)?.has(model) ?? false;
+}
+async function makeContextWindowOf(catalog, routes) {
+	if (catalog === void 0) return () => void 0;
+	const windows = new Map();
+	if (typeof catalog.listModels === "function") await Promise.all([...new Set(routes.map((route) => route.provider))].map(async (provider) => {
+		try {
+			for (const row of await catalog.listModels(provider)) if (typeof row.contextWindow === "number") windows.set(selectorKey(provider, row.id), row.contextWindow);
+		} catch {}
+	}));
+	const resolveModelInfo = catalog.resolveModelInfo?.bind(catalog);
+	if (resolveModelInfo !== void 0) await Promise.all(routes.map(async (route) => {
+		const key = selectorKey(route.provider, route.model);
+		if (windows.has(key)) return;
+		try {
+			const window = (await resolveModelInfo(route.provider, route.model))?.context?.contextWindow;
+			if (typeof window === "number") windows.set(key, window);
+		} catch {}
+	}));
+	return (provider, model) => windows.get(selectorKey(provider, model));
+}
+function envelopeProvenance(replayState) {
+	if (typeof replayState !== "object" || replayState === null) return void 0;
+	const response = replayState.response;
+	if (typeof response !== "object" || response === null) return void 0;
+	const { provider, model } = response;
+	if (typeof provider !== "string" || provider === "" || provider === "FallbacksChain") return void 0;
+	if (typeof model !== "string" || model === "") return void 0;
 	return {
-		provider: source.provider,
-		model: source.model
+		provider,
+		model
 	};
 }
-function lastModelSelection(entries) {
-	if (entries === void 0) return void 0;
-	for (let index = entries.length - 1; index >= 0; index -= 1) {
-		const candidate = entries[index];
-		if (candidate?.type !== "model/selection") continue;
-		const route = completeRoute(candidate.data);
-		if (route !== void 0) return route;
-	}
+function restoreEnvelopeProvenance(messages) {
+	let changed = false;
+	const restored = messages.map((message) => {
+		const source = message.source;
+		if (message.role !== "assistant" || source?.kind !== "model") return message;
+		if (source.provider !== "FallbacksChain" || source.model !== "Auto") return message;
+		const provenance = envelopeProvenance(source.replayState);
+		if (provenance === void 0) return message;
+		changed = true;
+		return {
+			...message,
+			source: {
+				...source,
+				...provenance
+			}
+		};
+	});
+	return changed ? restored : messages;
 }
-function detectAuthorizedRoute(session) {
-	const { events, requestHeader, options, inherited } = session;
-	const selected = lastModelSelection(events);
-	if (selected !== void 0) return selected;
-	const route = completeRoute(requestHeader) ?? completeRoute(options);
-	if (route === void 0) return void 0;
-	const baseline = completeRoute(inherited);
-	if (baseline !== void 0 && route.provider === baseline.provider && route.model === baseline.model) return;
-	return route;
+function agentLikeOf(view) {
+	return {
+		options: view?.optionsRoute,
+		session: { header: {
+			origin: view?.origin ?? "root",
+			agentPreset: view?.agentPreset
+		} }
+	};
 }
-//#endregion
-//#region .build/host/route-allowlist.js
-function resolvedRoutes(candidates) {
-	const routes = [];
-	for (const candidate of candidates) {
-		if (candidate.model === void 0) continue;
-		routes.push({
+function servedRouteOf(config, route, now) {
+	if (route?.provider !== "FallbacksChain" || route.model !== "Auto") return void 0;
+	const head = effectiveHeadOf(config, now);
+	return head === void 0 ? void 0 : {
+		provider: head.provider,
+		model: head.model
+	};
+}
+function slotWinnerKey(winner) {
+	if (winner === "all-day") return "all-day";
+	return winner.kind === "preset" ? `preset:${winner.preset}` : `custom:${winner.start}-${winner.end}`;
+}
+function logSlotRotation(deps, start) {
+	const { config, now, origin, owner } = start;
+	const markers = deps.slotWinners;
+	if (markers === void 0 || owner === void 0 || origin !== "root") return;
+	if (!isAllDayConforming(config.rootChain) || (config.timeSlots?.length ?? 0) === 0) return;
+	const slot = resolveSlotState(config, now, config.tz ?? "Asia/Shanghai");
+	const key = slotWinnerKey(slot.winner);
+	const previous = markers.get(owner);
+	if (previous !== void 0 && previous.key !== key) deps.log.info("llm-fallbacks: agent \"%s\" time-slot switch (分时切换): %s -> %s", owner, previous.label, slot.label);
+	markers.set(owner, {
+		key,
+		label: slot.label
+	});
+}
+function resolveWalk(deps, options) {
+	const config = deps.readConfig();
+	const now = new Date();
+	const view = deps.resolveAgentView(options.sessionId);
+	const owner = options.sessionId;
+	const seam = owner === void 0 ? void 0 : deps.seamRecord(owner);
+	const role = resolveDeclaredRole(agentLikeOf(view), config.roles.rules, deps.roleIds(), {
+		dispatchRole: seam?.role,
+		servedRoute: servedRouteOf(config, view?.optionsRoute, now),
+		warn: deps.log.warn
+	});
+	const origin = view?.origin ?? "root";
+	const rootTail = origin === "subagent" ? config.rootChain : resolveEffectiveChain(config, now, config.tz ?? "Asia/Shanghai");
+	const entries = roleChainEntries(config.roles.list, rootTail, role);
+	if (entries.length === 0) throw new LlmError("llm-fallbacks: the effective chain is empty — the virtual FallbacksChain route has no head to delegate to", EMPTY_EFFECTIVE_CHAIN_CODE);
+	if (origin === "root" && !isAllDayConforming(config.rootChain)) throw new LlmError("llm-fallbacks: the all-day chain is not conforming (exactly one official model required) — refusing to delegate", UNDISPATCHABLE_HEAD_CODE);
+	const policy = owner !== void 0 && seam?.virtualRouteInjected === true ? deps.policyFor(owner) : void 0;
+	if (policy?.state === "unprovable") throw new LlmError("llm-fallbacks: the subagent model-selection policy is unprovable — refusing to delegate the FallbacksChain call", UNDISPATCHABLE_HEAD_CODE);
+	const dispatchable = firstDispatchableExactHead(entries);
+	const allowedModels = policy?.state === "enabled" ? policy.allowedModels : void 0;
+	const head = allowedModels === void 0 ? dispatchable : firstDispatchableExactHead(entries, allowedModels);
+	if (head === void 0) throw new LlmError(dispatchable === void 0 ? "llm-fallbacks: the effective chain head cannot be dispatched (wildcard, malformed, or self-route) — refusing to delegate" : "llm-fallbacks: every dispatchable route of the effective chain is outside the subagent allowlist — refusing to delegate", UNDISPATCHABLE_HEAD_CODE);
+	const llm = deps.getLlm();
+	if (llm === void 0) throw new LlmError("llm-fallbacks: the llm runtime is unavailable — cannot delegate the FallbacksChain call", LLM_UNAVAILABLE_CODE);
+	return {
+		config,
+		now,
+		origin,
+		role,
+		rootTail,
+		head,
+		llm,
+		owner,
+		seam
+	};
+}
+function walkChain(deps, options) {
+	return walk(deps, resolveWalk(deps, options), options);
+}
+async function* walk(deps, start, options) {
+	const { config, role, rootTail, head, llm, owner } = start;
+	logSlotRotation(deps, start);
+	const messages = restoreEnvelopeProvenance(options.messages);
+	const stateOf = () => owner === void 0 ? void 0 : deps.states.peek(owner);
+	const failedKeys = new Set();
+	const isCooled = (key) => {
+		const state = stateOf();
+		return state !== void 0 && deps.states.isSuppressed(state, key, Date.now(), config.recovery ?? "timer");
+	};
+	const coolRoute = (failed) => {
+		if (owner === void 0) return;
+		const state = deps.states.get(owner);
+		const key = selectorKey(failed.provider, failed.model);
+		const until = config.revertPolicy === "never" ? Number.POSITIVE_INFINITY : (config.recovery ?? "timer") === "half-open" ? Date.now() + escalatedCooldownMs(config.cooldownMs, state.recovery.recordFailure(key)) : Date.now() + config.cooldownMs;
+		deps.states.suppress(state, key, until);
+	};
+	const bookFailure = (failed, code) => {
+		failedKeys.add(selectorKey(failed.provider, failed.model));
+		if (!REQUEST_SCOPED_CODES.has(code)) coolRoute(failed);
+	};
+	const advanceFrom = async (from, failureCode, blockedReason) => {
+		const { all, wildcard } = resolveChainViews(config.roles.list, rootTail, role, from.provider, from.model, deps.log.warn);
+		const own = all.map((candidate) => candidate.provider !== FALLBACKS_PROVIDER$1);
+		const candidates = all.filter((_, index) => own[index]);
+		const wildcards = wildcard.filter((_, index) => own[index]);
+		const exists = hasWildcardEntry(config.roles.list, rootTail, role) ? await makeModelExists(llm, [...new Set(candidates.map((candidate) => candidate.provider))]) : void 0;
+		const contextWindowOf = failureCode === "CONTEXT_WINDOW_EXCEEDED" ? await makeContextWindowOf(llm, [from, ...candidates.flatMap((candidate) => candidate.model === void 0 ? [] : [{
 			provider: candidate.provider,
 			model: candidate.model
+		}])]) : void 0;
+		const minContextWindow = contextWindowOf?.(from.provider, from.model);
+		const cooldown = { isSuppressed: (key) => isCooled(key) };
+		const failed = { has: (key) => failedKeys.has(key) };
+		const surviving = selectCandidates(candidates, wildcards, createCandidateFilter({
+			current: from,
+			cooldown,
+			failed,
+			minContextWindow,
+			contextWindowOf
+		}), exists);
+		const annotated = annotateCandidates(candidates, surviving, {
+			current: from,
+			cooldown,
+			failed,
+			minContextWindow,
+			contextWindowOf
 		});
+		const describeCandidates = (list) => list.map(({ candidate, skip }) => skip === void 0 ? `${candidate.provider}/${candidate.model}` : `${candidate.provider}/${candidate.model} (skipped: ${skip})`);
+		if (start.seam?.virtualRouteInjected === true && owner !== void 0) {
+			const policy = deps.policyFor(owner);
+			if (policy.state === "unprovable") {
+				deps.log.warn("llm-fallbacks: agent \"%s\" subagent model-selection policy is on but unreadable — no fallback switch (a cooled-head re-entry is refused)", owner);
+				return {
+					candidates: describeCandidates(annotated),
+					currentAdmitted: false
+				};
+			}
+			if (policy.state === "enabled") {
+				const currentAdmitted = routeOnAllowlist(from, policy.allowedModels);
+				const permitted = new Set(surviving.filter((candidate) => candidate.model !== void 0 && routeOnAllowlist({
+					provider: candidate.provider,
+					model: candidate.model
+				}, policy.allowedModels)).map((candidate) => selectorKey(candidate.provider, candidate.model)));
+				const labelled = annotated.map((entry) => entry.skip === void 0 && !permitted.has(selectorKey(entry.candidate.provider, entry.candidate.model)) ? {
+					candidate: entry.candidate,
+					skip: "allowlist"
+				} : entry);
+				const allowed = firstAllowedCandidate(resolvedRoutes(surviving), policy.allowedModels);
+				if (allowed === void 0) {
+					const wouldBe = surviving[0];
+					if (wouldBe?.model !== void 0) {
+						deps.log.warn("llm-fallbacks: agent \"%s\" fallback switch %s/%s blocked: resolved candidates are all outside the subagent allowlist — no switch", owner, wouldBe.provider, wouldBe.model);
+						if (blockedReason !== void 0) deps.recordBlocked?.(owner, {
+							provider: wouldBe.provider,
+							model: wouldBe.model
+						}, blockedReason);
+					}
+					return {
+						candidates: describeCandidates(labelled),
+						currentAdmitted
+					};
+				}
+				return {
+					target: allowed,
+					candidates: describeCandidates(labelled),
+					currentAdmitted
+				};
+			}
+		}
+		const first = surviving[0];
+		if (first?.model === void 0) return { candidates: describeCandidates(annotated) };
+		return {
+			target: {
+				provider: first.provider,
+				model: first.model
+			},
+			candidates: describeCandidates(annotated)
+		};
+	};
+	let target;
+	if (isCooled(selectorKey(head.provider, head.model))) {
+		const advance = await advanceFrom(head);
+		if (advance?.target !== void 0) target = advance.target;
+		else if (advance?.currentAdmitted === false) throw new LlmError("llm-fallbacks: the subagent model-selection policy no longer admits the chain head — refusing to delegate the FallbacksChain call", UNDISPATCHABLE_HEAD_CODE);
+		else target = head;
+	} else target = head;
+	let switches = 0;
+	for (;;) {
+		const key = selectorKey(target.provider, target.model);
+		const state = stateOf();
+		if ((config.recovery ?? "timer") === "half-open" && state !== void 0 && state.recovery.tryMarkProbeLogged(key)) deps.log.info("llm-fallbacks: agent \"%s\" half-open probe %s/%s (role=%s, reason=%s)", owner ?? "", target.provider, target.model, role, "trigger-code");
+		let committed = false;
+		let swallowed;
+		for await (const chunk of llm.stream({
+			...options,
+			provider: target.provider,
+			model: target.model,
+			messages
+		})) {
+			const failure = chunk.type === "finish" && chunk.reason.kind === "error" ? chunk.reason.failure : void 0;
+			if (failure !== void 0 && !committed && config.triggerCodes.includes(failure.code)) {
+				swallowed = {
+					chunk,
+					code: failure.code
+				};
+				break;
+			}
+			if (chunk.type === "finish") {
+				if (failure === void 0) {
+					if (chunk.reason.kind !== "aborted" && state !== void 0) deps.states.observeSuccess(state, key);
+				} else if (config.triggerCodes.includes(failure.code)) bookFailure(target, failure.code);
+				yield chunk;
+				return;
+			}
+			yield chunk;
+			committed = true;
+		}
+		if (swallowed === void 0) return;
+		bookFailure(target, swallowed.code);
+		const next = switches < config.maxSwitchesPerStep ? await advanceFrom(target, swallowed.code, "trigger-code") : void 0;
+		if (next === void 0 || next.target === void 0) {
+			yield swallowed.chunk;
+			return;
+		}
+		switches += 1;
+		deps.log.info("llm-fallbacks: agent \"%s\" fallback switch (降级切换) %s/%s -> %s/%s (role=%s, reason=%s, candidates=%o)", owner ?? "", target.provider, target.model, next.target.provider, next.target.model, role, "trigger-code", next.candidates);
+		target = next.target;
 	}
-	return routes;
-}
-function routeOnAllowlist(route, allowedModels) {
-	return allowedModels.some((allowed) => allowed.provider === route.provider && allowed.model === route.model);
-}
-function firstAllowedCandidate(resolved, allowedModels) {
-	return resolved.find((route) => routeOnAllowlist(route, allowedModels));
 }
 //#endregion
 //#region .build/host/subagent-policy.js
@@ -778,6 +1089,16 @@ function parseRoutes(value) {
 	}
 	return routes;
 }
+function policySettingsFrom(value) {
+	if (typeof value !== "object" || value === null) return void 0;
+	if (!("enabled" in value) || typeof value.enabled !== "boolean") return void 0;
+	const routes = "allowedModels" in value ? parseRoutes(value.allowedModels) : void 0;
+	if (routes === void 0) return void 0;
+	return {
+		enabled: value.enabled,
+		allowedModels: routes
+	};
+}
 function readSessionPolicyEvent(events) {
 	const event = events.find((candidate) => candidate.type === "subagent/model-selection-policy");
 	if (event === void 0) return {
@@ -1086,7 +1407,8 @@ function seamStateFor(root) {
 	if (existing !== void 0) return existing;
 	const created = {
 		records: new Map(),
-		noticeEmitted: new Set()
+		noticeEmitted: new Set(),
+		fibers: 0
 	};
 	subagentSeamStates.set(root, created);
 	return created;
@@ -1105,6 +1427,7 @@ function installSubagentSeam(ctx, options) {
 	const pending = new Map();
 	const wrappers = new WeakMap();
 	const disposers = [];
+	let disposed = false;
 	let unreadableServiceLogged = false;
 	let noRoleLogged = false;
 	const debug = (message) => {
@@ -1115,15 +1438,60 @@ function installSubagentSeam(ctx, options) {
 	const reportDegrade = (error) => {
 		debug(`llm-fallbacks: subagent role seam degraded to the native path (start unaffected): ${errorMessage$1(error)}`);
 	};
-	const recordChild = (childId, role, at, personaMissed) => {
+	const recordChild = (childId, role, at, verdict = {}) => {
 		const existing = records.get(childId);
 		records.set(childId, {
 			role,
 			at,
 			firstNoticePending: existing?.firstNoticePending ?? true,
-			...existing?.personaNotApplied === true || personaMissed === true ? { personaNotApplied: true } : {}
+			...existing?.personaNotApplied === true || verdict.personaMissed === true ? { personaNotApplied: true } : {},
+			...existing?.virtualRouteInjected === true || verdict.virtualRouteInjected === true ? { virtualRouteInjected: true } : {}
 		});
 	};
+	const explicitRoute = (request) => {
+		const provider = request?.agentOptions?.provider;
+		const model = request?.agentOptions?.model;
+		return typeof provider === "string" && provider !== "" && typeof model === "string" && model !== "" ? {
+			provider,
+			model
+		} : void 0;
+	};
+	const injectRoute = (spec, role, agentId) => {
+		try {
+			if (options.source === void 0) return void 0;
+			const agentOptions = spec.request?.agentOptions;
+			if (typeof agentOptions?.provider === "string" || typeof agentOptions?.model === "string") return void 0;
+			const config = options.source();
+			if (!isFallbackActive(config)) return void 0;
+			const policy = options.policyFor?.(agentId);
+			if (policy?.state === "unprovable") {
+				debug(`llm-fallbacks: subagent seam — model-selection policy is unprovable for "${agentId}"; not mounting the virtual chain route`);
+				return;
+			}
+			const chain = roleChainEntries(config.roles.list, config.rootChain, role);
+			const allowedModels = policy?.state === "enabled" ? policy.allowedModels : void 0;
+			const dispatchable = firstDispatchableExactHead(chain);
+			const head = allowedModels === void 0 ? dispatchable : firstDispatchableExactHead(chain, allowedModels);
+			if (head === void 0) {
+				if (allowedModels !== void 0 && dispatchable !== void 0) debug(`llm-fallbacks: subagent seam — no route of role "${role}" is on the subagent allowlist; not mounting the virtual chain route`);
+				return;
+			}
+			return {
+				request: {
+					...spec.request,
+					agentOptions: {
+						...agentOptions,
+						provider: FALLBACKS_PROVIDER$1,
+						model: FALLBACKS_CHAIN_MODEL
+					}
+				},
+				head
+			};
+		} catch (error) {
+			reportDegrade(error);
+			return;
+		}
+	};
 	const beginCorrelation = (spec, role, at) => {
 		const parentSessionId = parentSessionIdOf(spec?.request);
 		const label = typeof spec?.label === "string" ? spec.label : void 0;
@@ -1218,11 +1586,26 @@ function installSubagentSeam(ctx, options) {
 			try {
 				if (isLocalBackend(service, spec.provider)) {
 					reservedId = spec.childId ?? randomUUID();
-					if (reservedId !== spec.childId) effectiveSpec = {
+					const authorized = explicitRoute(spec.request);
+					const injected = injectRoute(spec, role, reservedId);
+					effectiveSpec = injected === void 0 ? reservedId === spec.childId ? spec : {
 						...spec,
 						childId: reservedId
+					} : {
+						...spec,
+						childId: reservedId,
+						request: injected.request
 					};
-					recordChild(reservedId, role, at);
+					recordChild(reservedId, role, at, { virtualRouteInjected: injected !== void 0 });
+					const head = injected?.head ?? authorized;
+					if (head !== void 0) options.chainHeads?.set(reservedId, {
+						at,
+						route: {
+							provider: head.provider,
+							model: head.model
+						},
+						source: injected === void 0 ? "authorized" : "injected"
+					});
 				}
 			} catch (error) {
 				if (reservedId !== void 0) records.delete(reservedId);
@@ -1252,7 +1635,7 @@ function installSubagentSeam(ctx, options) {
 			try {
 				observeStartResult(result, (childId) => {
 					endCorrelation(pendingKey);
-					recordChild(childId, role, at, reservationPersonaMissed);
+					recordChild(childId, role, at, { personaMissed: reservationPersonaMissed });
 				}, () => {}, () => {
 					endCorrelation(pendingKey);
 					if (reservedId !== void 0) records.delete(reservedId);
@@ -1266,8 +1649,19 @@ function installSubagentSeam(ctx, options) {
 		wrappers.set(value, wrapper);
 		return wrapper;
 	};
+	const installSurface = (register) => {
+		try {
+			disposers.push(register());
+		} catch (error) {
+			for (const withdraw of disposers.splice(0)) try {
+				withdraw();
+			} catch {}
+			if (ownsWrapper) subagentSeamRoots.delete(root);
+			throw error;
+		}
+	};
 	if (ownsWrapper) {
-		disposers.push(ctx.on(SUBAGENT_SEAM_EVENT, (_readCtx, name, _error, next) => {
+		installSurface(() => ctx.on(SUBAGENT_SEAM_EVENT, (_readCtx, name, _error, next) => {
 			const value = next();
 			if (name !== "subagents") return value;
 			try {
@@ -1277,7 +1671,7 @@ function installSubagentSeam(ctx, options) {
 				return value;
 			}
 		}));
-		disposers.push(ctx.on("session/event", (session, event) => {
+		installSurface(() => ctx.on("session/event", (session, event) => {
 			try {
 				if (event.type !== SUBAGENT_CATALOG_EVENT) return;
 				const data = event.data;
@@ -1295,21 +1689,39 @@ function installSubagentSeam(ctx, options) {
 			}
 		}));
 	}
-	disposers.push(installRoleNotice(ctx, {
+	installSurface(() => installRoleNotice(ctx, {
 		records,
 		emitted: noticeEmitted,
 		debug
 	}));
-	disposers.push(installRoleProjection(ctx, { debug }));
+	installSurface(() => installRoleProjection(ctx, { debug }));
+	state.fibers += 1;
+	const dispose = () => {
+		if (disposed) return;
+		disposed = true;
+		if (ownsWrapper) subagentSeamRoots.delete(root);
+		try {
+			for (const withdraw of disposers.splice(0)) withdraw();
+		} finally {
+			state.fibers -= 1;
+			if (state.fibers === 0) {
+				state.records.clear();
+				state.noticeEmitted.clear();
+			}
+		}
+	};
 	const seam = {
 		records,
 		noticeEmitted,
 		ownsWrapper,
-		dispose: () => {
-			if (ownsWrapper) subagentSeamRoots.delete(root);
-			for (const dispose of disposers.splice(0)) dispose();
-		}
+		dispose
 	};
+	try {
+		ctx.effect(() => () => dispose(), "llm-fallbacks: subagent seam teardown");
+	} catch (error) {
+		dispose();
+		throw error;
+	}
 	subagentSeamStores.set(ctx, seam);
 	return seam;
 }
@@ -1440,21 +1852,6 @@ var CooldownStore = class {
 		return active;
 	}
 };
-var StepFailureSet = class {
-	keys = new Set();
-	get size() {
-		return this.keys.size;
-	}
-	add(key) {
-		this.keys.add(key);
-	}
-	has(key) {
-		return this.keys.has(key);
-	}
-	reset() {
-		this.keys.clear();
-	}
-};
 //#endregion
 //#region .build/host/state.js
 var FallbackStateStore = class {
@@ -1472,12 +1869,6 @@ var FallbackStateStore = class {
 		let state = this.states.get(agentId);
 		if (state === void 0) {
 			state = {
-				stepFailures: {
-					turn: 0,
-					step: 0,
-					failed: new StepFailureSet(),
-					switchCount: 0
-				},
 				cooldown: new CooldownStore(),
 				recovery: new RecoveryStore()
 			};
@@ -1491,42 +1882,6 @@ var FallbackStateStore = class {
 	clear() {
 		this.states.clear();
 	}
-	syncStep(state, turn, step) {
-		const { stepFailures } = state;
-		if (stepFailures.turn === turn && stepFailures.step === step) return;
-		stepFailures.turn = turn;
-		stepFailures.step = step;
-		stepFailures.failed.reset();
-		stepFailures.switchCount = 0;
-	}
-	recordFailure(state, key) {
-		state.stepFailures.failed.add(key);
-	}
-	recordSwitch(state) {
-		state.stepFailures.switchCount += 1;
-	}
-	writePending(state, pending) {
-		state.pendingSwitch = pending;
-		state.appliedTurnStep = void 0;
-	}
-	applyPending(state, turn, step) {
-		const pending = state.pendingSwitch;
-		if (pending === void 0) return void 0;
-		const applied = state.appliedTurnStep;
-		if (applied !== void 0 && applied.turn === turn && applied.step === step) return void 0;
-		state.appliedTurnStep = {
-			turn,
-			step
-		};
-		state.pendingSwitch = void 0;
-		return pending;
-	}
-	clearStepState(state) {
-		state.pendingSwitch = void 0;
-		state.appliedTurnStep = void 0;
-		state.stepFailures.failed.reset();
-		state.stepFailures.switchCount = 0;
-	}
 	suppress(state, key, untilEpochMs) {
 		state.cooldown.suppress(key, untilEpochMs);
 	}
@@ -1549,27 +1904,6 @@ var FallbackStateStore = class {
 	}
 };
 //#endregion
-//#region .build/host/override.js
-function overrideConfigWithRouteRule(seed, to, explicitEffort) {
-	if (explicitEffort !== void 0) return {
-		...seed,
-		reasoningEffort: explicitEffort,
-		provider: to.provider,
-		model: to.model
-	};
-	if (!(to.provider !== seed.provider || to.model !== seed.model)) return {
-		...seed,
-		provider: to.provider,
-		model: to.model
-	};
-	const { reasoningEffort: _routeOwned, ...withoutRouteOwnedEffort } = seed;
-	return {
-		...withoutRouteOwnedEffort,
-		provider: to.provider,
-		model: to.model
-	};
-}
-//#endregion
 //#region .build/host/gateway.js
 const FALLBACKS_PROFILE_ENTRY = "llm-fallbacks";
 const SUBAGENT_POLICY_SETTINGS_NS = "subagent-model-selection-settings";
@@ -1584,9 +1918,7 @@ const CONFIG_KEYS = {
 	cooldownMs: true,
 	revertPolicy: true,
 	maxSwitchesPerStep: true,
-	alwaysModeRetryCap: true,
 	presets: true,
-	roleAutoMatch: true,
 	timeSlots: true,
 	tz: true,
 	recovery: true
@@ -1940,10 +2272,8 @@ const FALLBACKS_COMMAND_LOCALES = {
 		configRules: "角色规则",
 		configCooldown: "冷却",
 		configRevert: "回主策略",
-		configMaxSwitches: "单步最大切换",
-		configAlwaysCap: "always 上限",
+		configMaxSwitches: "单次请求行走最大切换",
 		configPresets: "预置",
-		configRoleAutoMatch: "角色自动匹配",
 		configEdit: "编辑：/settings（TUI 设置界面）或 ~/.dsh/profiles/<profile>/cordis.patch.yml（插件行）/ $DSH_HOME/settings.yaml（fallbacks: 分节）",
 		configEditHint: "TUI 通过 /settings 修改配置；文件编辑仍然可用",
 		revertSeedOk: "角色 {id} 已还原为 Seed 默认",
@@ -1995,10 +2325,8 @@ const FALLBACKS_COMMAND_LOCALES = {
 		configRules: "Rules",
 		configCooldown: "Cooldown",
 		configRevert: "Revert",
-		configMaxSwitches: "Max switches/step",
-		configAlwaysCap: "Always-mode cap",
+		configMaxSwitches: "Max switches per request walk",
 		configPresets: "Presets",
-		configRoleAutoMatch: "Auto-match",
 		configEdit: "Edit: /settings (TUI settings screen) or ~/.dsh/profiles/<profile>/cordis.patch.yml (plugin row) / $DSH_HOME/settings.yaml (fallbacks: section)",
 		configEditHint: "TUI edits config via /settings; file editing still works",
 		revertSeedOk: "role {id} reverted to its seed default",
@@ -2149,9 +2477,7 @@ function fallbacksConfigText(summary, locale = "zh") {
 		`${t.configCooldown}: ${summary.cooldownMs} ms`,
 		`${t.configRevert}: ${summary.revertPolicy}`,
 		`${t.configMaxSwitches}: ${summary.maxSwitchesPerStep}`,
-		`${t.configAlwaysCap}: ${summary.alwaysModeRetryCap}`,
 		`${t.configPresets}: ${summary.presets}`,
-		`${t.configRoleAutoMatch}: ${summary.roleAutoMatch ? t.configEnabled : t.configDisabled}`,
 		"",
 		t.configEdit,
 		t.configEditHint
@@ -2508,7 +2834,7 @@ function fallbacksChildren(canonicalPath) {
 	if (canonicalPath.length === 2 && canonicalPath[1] === "config") return [REVERT_SEED_NODE];
 	return [];
 }
-const FALLBACKS_PROVIDER$1 = {
+const FALLBACKS_PROVIDER = {
 	root: FALLBACKS_TUI_ROOT,
 	descriptions: {
 		zh: FALLBACKS_COMMAND_LOCALES.zh.description,
@@ -2522,7 +2848,7 @@ function installTuiClient(ctx, opts) {
 		const trees = tctx.tuiCommandTrees;
 		if (trees === void 0) return;
 		try {
-			return trees.register(FALLBACKS_PROVIDER$1);
+			return trees.register(FALLBACKS_PROVIDER);
 		} catch (error) {
 			if (!(error instanceof Error) || !error.message.includes("already registered")) throw error;
 			tctx.logger("llm-fallbacks").debug("llm-fallbacks: tui command tree already registered — no provider on this fiber");
@@ -2593,8 +2919,8 @@ function buildFallbacksTuiSection() {
 		ns: FALLBACKS_TUI_SECTION_NS,
 		title: "fallbacks",
 		descriptions: {
-			zh: "回退设置：降级链、分时切换、角色与高级选项（与 Web 设置卡片完全一致）。",
-			en: "Fallback settings: degradation chains, time slots, roles, and advanced options (full parity with the web settings card)."
+			zh: "回退设置：降级链、分时切换、角色与高级选项（与 Web 设置卡片完全一致）。仅选中 FallbacksChain/Auto 的会话会执行降级链；选择真实模型的会话没有插件降级。",
+			en: "Fallback settings: degradation chains, time slots, roles, and advanced options (full parity with the web settings card). Only sessions on FallbacksChain/Auto walk a chain — a real-model selection gets no plugin fallback."
 		},
 		groups: [
 			{
@@ -2631,16 +2957,6 @@ function buildFallbacksTuiSection() {
 			}
 		],
 		fields: [
-			{
-				path: ["roleAutoMatch"],
-				label: "LLM role auto-match",
-				descriptions: {
-					zh: "LLM 角色自动匹配",
-					en: "LLM role auto-match"
-				},
-				group: "general",
-				kind: "boolean"
-			},
 			{
 				path: ["presets"],
 				label: "Preset roles",
@@ -2760,277 +3076,70 @@ function buildFallbacksTuiSection() {
 			{
 				path: ["cooldownMs"],
 				label: "Cooldown (ms)",
-				descriptions: {
-					zh: "冷却时间（毫秒）",
-					en: "Cooldown (ms)"
-				},
-				group: "advanced",
-				kind: "number"
-			},
-			{
-				path: ["maxSwitchesPerStep"],
-				label: "Max switches per step",
-				descriptions: {
-					zh: "单步最大切换次数",
-					en: "Max switches per step"
-				},
-				group: "advanced",
-				kind: "number"
-			},
-			{
-				path: ["alwaysModeRetryCap"],
-				label: "Always-mode retry cap",
-				descriptions: {
-					zh: "Always 模式重试上限",
-					en: "Always-mode retry cap"
-				},
-				group: "advanced",
-				kind: "number"
-			},
-			{
-				path: ["revertPolicy"],
-				label: "Revert policy",
-				descriptions: {
-					zh: "恢复策略",
-					en: "Revert policy"
-				},
-				group: "advanced",
-				kind: "select",
-				options: [{
-					value: "cooldown-expiry",
-					label: "Cooldown expiry",
-					descriptions: {
-						zh: "冷却到期",
-						en: "Cooldown expiry"
-					}
-				}, {
-					value: "never",
-					label: "Never",
-					descriptions: {
-						zh: "从不",
-						en: "Never"
-					}
-				}]
-			}
-		]
-	};
-}
-function installTuiSettingsSection(ctx, opts) {
-	if (!opts.serviceOwned) return;
-	ctx.inject(["tuiSettingsSections"], (tctx) => {
-		const registry = tctx.tuiSettingsSections;
-		if (registry === void 0) return;
-		try {
-			return registry.register(buildFallbacksTuiSection());
-		} catch (error) {
-			if (!(error instanceof Error) || !error.message.includes("already registered")) throw error;
-			tctx.logger("llm-fallbacks").debug("llm-fallbacks: tui settings section already registered — no section on this fiber");
-			return () => {};
-		}
-	});
-}
-//#endregion
-//#region .build/host/virtual-adapter.js
-const FALLBACKS_PROVIDER = "FallbacksChain";
-const FALLBACKS_CHAIN_MODEL = "Auto";
-const EMPTY_EFFECTIVE_CHAIN_CODE = "EMPTY_EFFECTIVE_CHAIN";
-const UNDISPATCHABLE_HEAD_CODE = "UNDISPATCHABLE_EFFECTIVE_HEAD";
-const LLM_UNAVAILABLE_CODE = "LLM_UNAVAILABLE";
-function firstDispatchableExactHead(chain) {
-	for (const entry of chain) {
-		let selector;
-		try {
-			selector = parseSelector(entry);
-		} catch {
-			continue;
-		}
-		if (selector.model === void 0) continue;
-		if (selector.provider === "FallbacksChain") continue;
-		return {
-			provider: selector.provider,
-			model: selector.model
-		};
-	}
-}
-function effectiveHeadOf(config, now) {
-	if (!isAllDayConforming(config.rootChain)) return void 0;
-	return firstDispatchableExactHead(resolveEffectiveChain(config, now, config.tz ?? "Asia/Shanghai"));
-}
-function pickerDisplayName(config, now = new Date(), modelDisplayName) {
-	const head = effectiveHeadOf(config, now);
-	if (head === void 0) return FALLBACKS_CHAIN_MODEL;
-	const slot = resolveSlotState(config, now, config.tz ?? "Asia/Shanghai");
-	const model = modelDisplayName !== void 0 && modelDisplayName !== "" ? modelDisplayName : head.model;
-	return `${FALLBACKS_CHAIN_MODEL}: ${model}[${slot.label}]`;
-}
-async function resolveHeadDisplayName(llm, head) {
-	if (llm === void 0) return head.model;
-	try {
-		const row = (await llm.listModels(head.provider)).find((model) => model.id === head.model);
-		if (row !== void 0 && row.name !== "") return row.name;
-	} catch {}
-	try {
-		const info = await llm.resolveModelInfo(head.provider, head.model);
-		if (info.name !== "") return info.name;
-	} catch {}
-	return head.model;
-}
-function envelopeProvenance(replayState) {
-	if (typeof replayState !== "object" || replayState === null) return void 0;
-	const response = replayState.response;
-	if (typeof response !== "object" || response === null) return void 0;
-	const { provider, model } = response;
-	if (typeof provider !== "string" || provider === "" || provider === "FallbacksChain") return void 0;
-	if (typeof model !== "string" || model === "") return void 0;
-	return {
-		provider,
-		model
-	};
-}
-function restoreEnvelopeProvenance(messages) {
-	let changed = false;
-	const restored = messages.map((message) => {
-		const source = message.source;
-		if (message.role !== "assistant" || source?.kind !== "model") return message;
-		if (source.provider !== "FallbacksChain" || source.model !== "Auto") return message;
-		const provenance = envelopeProvenance(source.replayState);
-		if (provenance === void 0) return message;
-		changed = true;
-		return {
-			...message,
-			source: {
-				...source,
-				...provenance
+				descriptions: {
+					zh: "冷却时间（毫秒）",
+					en: "Cooldown (ms)"
+				},
+				group: "advanced",
+				kind: "number"
+			},
+			{
+				path: ["maxSwitchesPerStep"],
+				label: "Max switches per request walk",
+				descriptions: {
+					zh: "单次请求行走最大切换",
+					en: "Max switches per request walk"
+				},
+				group: "advanced",
+				kind: "number"
+			},
+			{
+				path: ["revertPolicy"],
+				label: "Revert policy",
+				descriptions: {
+					zh: "恢复策略",
+					en: "Revert policy"
+				},
+				group: "advanced",
+				kind: "select",
+				options: [{
+					value: "cooldown-expiry",
+					label: "Cooldown expiry",
+					descriptions: {
+						zh: "冷却到期",
+						en: "Cooldown expiry"
+					}
+				}, {
+					value: "never",
+					label: "Never",
+					descriptions: {
+						zh: "从不",
+						en: "Never"
+					}
+				}]
 			}
-		};
-	});
-	return changed ? restored : messages;
+		]
+	};
 }
-var FallbacksChainAdapter = class extends LlmAdapter {
-	readConfig;
-	getLlm;
-	constructor(readConfig, getLlm) {
-		super();
-		this.readConfig = readConfig;
-		this.getLlm = getLlm;
-	}
-	providerInfo(provider) {
-		return {
-			id: provider,
-			name: FALLBACKS_PROVIDER
-		};
-	}
-	async listModels(provider) {
-		const config = this.readConfig();
-		const now = new Date();
-		const head = effectiveHeadOf(config, now);
-		const display = head === void 0 ? void 0 : await resolveHeadDisplayName(this.getLlm(), head);
-		return [{
-			provider,
-			id: FALLBACKS_CHAIN_MODEL,
-			name: pickerDisplayName(config, now, display)
-		}];
-	}
-	async resolveModel(provider, model, signal) {
-		const head = effectiveHeadOf(this.readConfig(), new Date());
-		const llm = this.getLlm();
-		if (head !== void 0 && llm !== void 0) try {
-			const info = await llm.resolveModelInfo(head.provider, head.model, signal);
-			return {
-				provider,
-				id: model,
-				name: info.name,
-				...info.description === void 0 ? {} : { description: info.description },
-				...info.inputModalities === void 0 ? {} : { inputModalities: info.inputModalities },
-				...info.context === void 0 ? {} : { context: info.context },
-				...info.defaultMaxTokens === void 0 ? {} : { defaultMaxTokens: info.defaultMaxTokens },
-				...info.reasoning === void 0 ? {} : { reasoning: info.reasoning }
-			};
-		} catch {}
-		return {
-			provider,
-			id: model,
-			name: model
-		};
-	}
-	providerRetryPolicy(_provider) {
-		try {
-			const head = effectiveHeadOf(this.readConfig(), new Date());
-			if (head === void 0 || head.provider === "FallbacksChain") return void 0;
-			return this.getLlm()?.providerRetryPolicy(head.provider);
-		} catch {
-			return;
-		}
-	}
-	imageRequestPricing(_provider, _model) {
+function installTuiSettingsSection(ctx, opts) {
+	if (!opts.serviceOwned) return;
+	ctx.inject(["tuiSettingsSections"], (tctx) => {
+		const registry = tctx.tuiSettingsSections;
+		if (registry === void 0) return;
 		try {
-			const head = effectiveHeadOf(this.readConfig(), new Date());
-			if (head === void 0 || head.provider === "FallbacksChain") return void 0;
-			return this.getLlm()?.imageRequestPricing(head.provider, head.model);
-		} catch {
-			return;
-		}
-	}
-	stream(options) {
-		const config = this.readConfig();
-		const now = new Date();
-		if (resolveEffectiveChain(config, now, config.tz ?? "Asia/Shanghai").length === 0) throw new LlmError("llm-fallbacks: the effective chain is empty — the virtual FallbacksChain route has no head to delegate to", EMPTY_EFFECTIVE_CHAIN_CODE);
-		const head = effectiveHeadOf(config, now);
-		if (head === void 0) throw new LlmError("llm-fallbacks: the effective chain head cannot be dispatched (non-conforming all-day, wildcard, malformed, or self-route) — refusing to delegate", UNDISPATCHABLE_HEAD_CODE);
-		const llm = this.getLlm();
-		if (llm === void 0) throw new LlmError("llm-fallbacks: the llm runtime is unavailable — cannot delegate the FallbacksChain call", LLM_UNAVAILABLE_CODE);
-		return llm.stream({
-			...options,
-			provider: head.provider,
-			model: head.model,
-			messages: restoreEnvelopeProvenance(options.messages)
-		});
-	}
-};
-function installFallbacksAdapter(ctx, readConfig) {
-	let llm;
-	let disposeAdapter;
-	let registered = false;
-	const logger = ctx.logger("llm-fallbacks");
-	const adapter = new FallbacksChainAdapter(readConfig, () => llm);
-	const reconcile = () => {
-		const shouldRegister = isFallbackActive(readConfig());
-		if (shouldRegister && !registered) {
-			if (llm === void 0) return;
-			try {
-				disposeAdapter = llm.registerAdapter([FALLBACKS_PROVIDER], adapter);
-				registered = true;
-				logger.info("llm-fallbacks: virtual adapter registered — FallbacksChain/Auto is selectable in the model picker");
-			} catch (error) {
-				if (!(error instanceof Error) || !("code" in error) || error.code !== "DUPLICATE_ADAPTER") throw error;
-				logger.debug("llm-fallbacks: virtual adapter already registered — no route on this fiber (multi-fiber dedupe)");
-			}
-		} else if (!shouldRegister && registered) {
-			disposeAdapter?.();
-			disposeAdapter = void 0;
-			registered = false;
-			logger.info("llm-fallbacks: virtual adapter unregistered — FallbacksChain/Auto hidden from the model picker");
+			return registry.register(buildFallbacksTuiSection());
+		} catch (error) {
+			if (!(error instanceof Error) || !error.message.includes("already registered")) throw error;
+			tctx.logger("llm-fallbacks").debug("llm-fallbacks: tui settings section already registered — no section on this fiber");
+			return () => {};
 		}
-	};
-	ctx.inject(["llm"], (llmCtx) => {
-		llm = llmCtx.llm;
-		reconcile();
-		return () => {
-			disposeAdapter?.();
-			disposeAdapter = void 0;
-			registered = false;
-			llm = void 0;
-		};
 	});
-	return reconcile;
 }
 //#endregion
 //#region .build/host/index.js
 const name = "llm-fallbacks";
 const provide = ["llm-fallbacks"];
 const { version } = createRequire(import.meta.url)("../package.json");
-const CONTEXT_WINDOW_EXCEEDED_CODE = "CONTEXT_WINDOW_EXCEEDED";
-const REQUEST_SCOPED_CODES = new Set([CONTEXT_WINDOW_EXCEEDED_CODE]);
 const stateStores = new WeakMap();
 function stateStore(ctx) {
 	return stateStores.get(ctx);
@@ -3048,95 +3157,38 @@ function latestByAt(map) {
 	for (const value of map.values()) if (latest === void 0 || value.at >= latest.at) latest = value;
 	return latest;
 }
-async function makeModelExists(ctx, providers) {
-	const llm = ctx.get("llm");
-	if (llm === void 0 || typeof llm.listModels !== "function") return () => true;
-	const catalog = new Map();
-	await Promise.all(providers.map(async (provider) => {
-		try {
-			const models = await llm.listModels(provider);
-			catalog.set(provider, new Set(models.map((model) => model.id)));
-		} catch {
-			catalog.set(provider, new Set());
-		}
-	}));
-	return (provider, model) => catalog.get(provider)?.has(model) ?? false;
-}
-async function makeContextWindowOf(ctx, routes) {
-	const llm = ctx.get("llm");
-	if (llm === void 0) return () => void 0;
-	const windows = new Map();
-	if (typeof llm.listModels === "function") await Promise.all([...new Set(routes.map((route) => route.provider))].map(async (provider) => {
-		try {
-			for (const model of await llm.listModels(provider)) if (typeof model.contextWindow === "number") windows.set(selectorKey(provider, model.id), model.contextWindow);
-		} catch {}
-	}));
-	const resolveModelInfo = llm.resolveModelInfo?.bind(llm);
-	if (resolveModelInfo !== void 0) await Promise.all(routes.map(async (route) => {
-		const key = selectorKey(route.provider, route.model);
-		if (windows.has(key)) return;
-		try {
-			const window = (await resolveModelInfo(route.provider, route.model))?.context?.contextWindow;
-			if (typeof window === "number") windows.set(key, window);
-		} catch {}
-	}));
-	return (provider, model) => windows.get(selectorKey(provider, model));
-}
-function countRetryEvents(session, turn, step, provider) {
-	let count = 0;
-	const events = session.snapshotEvents();
-	for (let index = events.length - 1; index >= 0; index -= 1) {
-		const event = events[index];
-		const data = event.data;
-		if (typeof data.turn === "number" && typeof data.step === "number" && (data.turn < turn || data.turn === turn && data.step < step)) break;
-		if (event.type !== "llm/retry") continue;
-		if (data.turn === turn && data.step === step && event.data.provider === provider && event.data.mode === "always") count += 1;
-	}
-	return count;
-}
-function anchorServedRoute(config, route, now) {
-	if (route.provider !== "FallbacksChain" || route.model !== "Auto") return route;
-	const head = effectiveHeadOf(config, now);
-	return head === void 0 ? route : {
-		provider: head.provider,
-		model: head.model
+function agentChainView(ctx, sessionId) {
+	if (sessionId === void 0) return void 0;
+	const agent = ctx.get("agents")?.get(sessionId);
+	if (agent === void 0) return void 0;
+	const header = agent.session?.header;
+	const route = agent.options;
+	return {
+		origin: header?.origin ?? "root",
+		...header?.agentPreset === void 0 ? {} : { agentPreset: header.agentPreset },
+		...typeof route?.provider === "string" && typeof route?.model === "string" ? { optionsRoute: {
+			provider: route.provider,
+			model: route.model
+		} } : {},
+		sessionId
 	};
 }
-function servedRouteFor(agent, config) {
-	const provider = agent.options?.provider;
-	const model = agent.options?.model;
-	if (provider === void 0 || model === void 0) return void 0;
-	const anchored = anchorServedRoute(config, {
-		provider,
-		model
-	}, new Date());
-	return anchored.provider === provider && anchored.model === model ? void 0 : anchored;
-}
-function currentModel(agent, provider, config, now) {
-	return anchorServedRoute(config, {
-		provider,
-		model: agent.session.requestHeader()?.config.model ?? agent.options.model ?? ""
-	}, now);
-}
-function slotWinnerKey(winner) {
-	if (winner === "all-day") return "all-day";
-	return winner.kind === "preset" ? `preset:${winner.preset}` : `custom:${winner.start}-${winner.end}`;
-}
-function overrideConfig(seed, to, explicitEffort) {
-	return overrideConfigWithRouteRule(seed, to, explicitEffort);
-}
 function readSubagentSettings(ctx) {
-	const service = ctx.get("subagentModelSelection");
-	return service === void 0 ? void 0 : service.current();
+	const settings = ctx.get("settings");
+	if (settings === void 0) return void 0;
+	const descriptor = settings.describe().find((d) => d.ns === SUBAGENT_POLICY_SETTINGS_NS);
+	if (descriptor === void 0) return void 0;
+	const policy = policySettingsFrom(descriptor.value);
+	if (policy === void 0) throw new Error("subagent model-selection settings are malformed");
+	return policy;
 }
 function readGuardedPolicySettings(ctx, agentId, lastKnown, warn) {
 	try {
-		const service = ctx.get("subagentModelSelection");
-		if (service === void 0) return {
+		const settings = readSubagentSettings(ctx);
+		if (settings === void 0) return {
 			ok: true,
 			settings: lastKnown.get(agentId)
 		};
-		const settings = service.current();
 		lastKnown.set(agentId, settings);
 		return {
 			ok: true,
@@ -3151,22 +3203,6 @@ function readGuardedPolicySettings(ctx, agentId, lastKnown, warn) {
 		};
 	}
 }
-function authorizedRouteView(ctx, agent) {
-	const header = agent.session?.header;
-	const parentId = header?.origin === "subagent" ? header.parentSession : void 0;
-	const parent = parentId === void 0 ? void 0 : ctx.get("agents")?.get(parentId);
-	const parentHeader = parent?.session.requestHeader()?.config;
-	const parentOptions = parent?.options;
-	return {
-		requestHeader: agent.session?.requestHeader()?.config,
-		events: agent.session?.snapshotEvents(),
-		options: agent.options,
-		inherited: parentHeader ?? (typeof parentOptions?.provider === "string" && typeof parentOptions?.model === "string" ? {
-			provider: parentOptions.provider,
-			model: parentOptions.model
-		} : void 0)
-	};
-}
 function isLiveConfigRef(value) {
 	return typeof value === "object" && value !== null && typeof value.get === "function";
 }
@@ -3231,12 +3267,10 @@ function apply(ctx, config = defaultFallbacksConfig) {
 		if (settingsComposed !== void 0) return settingsComposed;
 		return entry;
 	};
-	const reconcileFallbacksAdapter = installFallbacksAdapter(ctx, () => source());
 	validateFallbacksConfig(entry, logger);
 	const legacyKeys = detectLegacyKeys(source());
 	if (legacyKeys.length > 0) logger.warn("llm-fallbacks: legacy config keys detected (chains/roles.default/undeclared role refs); see docs/configuration.md migration table — %o", legacyKeys);
 	let roleIds = new Map(entry.roles.list.map((role) => [role.id.trim(), role.id]));
-	let hasChains = entry.rootChain.length > 0 || entry.roles.list.some((role) => (role.chain?.length ?? 0) > 0);
 	ctx.inject(["settings"], (sctx) => {
 		const settings = sctx.settings;
 		const refreshComposed = () => {
@@ -3249,7 +3283,6 @@ function apply(ctx, config = defaultFallbacksConfig) {
 			if (!isLiveConfigRef(config)) refreshComposed();
 			const current = source();
 			roleIds = new Map(current.roles.list.map((role) => [role.id.trim(), role.id]));
-			hasChains = current.rootChain.length > 0 || current.roles.list.some((role) => (role.chain?.length ?? 0) > 0);
 			reconcileFallbacksAdapter();
 			slotWinners.clear();
 		});
@@ -3263,9 +3296,18 @@ function apply(ctx, config = defaultFallbacksConfig) {
 	chainHeadStores.set(ctx, chainHeadMap);
 	const blockedAttemptMap = new Map();
 	blockedAttemptStores.set(ctx, blockedAttemptMap);
+	const lastKnownPolicySettings = new Map();
+	const policyFor = (sessionId) => {
+		const settingsRead = readGuardedPolicySettings(ctx, sessionId, lastKnownPolicySettings, logger.warn);
+		if (!settingsRead.ok) return { state: "unprovable" };
+		return effectivePolicy(readSessionPolicyEvent(ctx.get("agents")?.get(sessionId)?.session.snapshotEvents() ?? []), settingsRead.settings);
+	};
 	const subagentSeam = installSubagentSeam(ctx, {
 		roleIds: () => roleIds,
 		roles: () => source().roles.list,
+		source: () => source(),
+		policyFor,
+		chainHeads: chainHeadMap,
 		debug: (message) => logger.debug(message)
 	});
 	if (!subagentSeam.ownsWrapper) ctx.logger("llm-fallbacks").debug("subagent role seam wrapper already installed on this context root — this fiber registers the notice emitter and the projection unit only (multi-fiber dedupe)");
@@ -3304,275 +3346,45 @@ function apply(ctx, config = defaultFallbacksConfig) {
 	});
 	const states = new FallbackStateStore();
 	stateStores.set(ctx, states);
-	const dispatchInjected = new Set();
-	const dispatchRoles = new Map();
-	const rememberedRole = (agentId) => {
-		const role = dispatchRoles.get(agentId);
-		return role !== void 0 && roleIds.has(role.trim()) ? role : void 0;
-	};
 	const slotWinners = new Map();
-	const lastKnownPolicySettings = new Map();
-	async function decide(agent, turn, step, current, reason, state, failureCode) {
-		const config = source();
-		if (state !== void 0) {
-			states.syncStep(state, turn, step);
-			if (state.stepFailures.switchCount >= config.maxSwitchesPerStep) return null;
-		}
-		const role = rememberedRole(agent.id) ?? resolveRole(agent, config.roles.rules, roleIds, logger.warn, servedRouteFor(agent, config));
-		const rootTail = agent.session?.header?.origin === "subagent" ? config.rootChain : resolveEffectiveChain(config, new Date(), config.tz ?? "Asia/Shanghai");
-		const { all, wildcard } = resolveChainViews(config.roles.list, rootTail, role, current.provider, current.model, logger.warn);
-		if (all.length === 0) return null;
-		const modelExists = hasWildcardEntry(config.roles.list, rootTail, role) ? await makeModelExists(ctx, [...new Set(all.map((candidate) => candidate.provider))]) : void 0;
-		const cooldown = { isSuppressed: (key) => state !== void 0 && states.isSuppressed(state, key, Date.now(), source().recovery ?? "timer") };
-		const failed = { has: (key) => state !== void 0 && state.stepFailures.failed.has(key) };
-		const contextWindowOf = failureCode === CONTEXT_WINDOW_EXCEEDED_CODE ? await makeContextWindowOf(ctx, [current, ...all.flatMap((candidate) => candidate.model === void 0 ? [] : [{
-			provider: candidate.provider,
-			model: candidate.model
-		}])]) : void 0;
-		const minContextWindow = contextWindowOf?.(current.provider, current.model);
-		const surviving = selectCandidates(all, wildcard, createCandidateFilter({
-			current,
-			cooldown,
-			failed,
-			minContextWindow,
-			contextWindowOf
-		}), modelExists);
-		const first = surviving[0];
-		let target;
-		if (first !== void 0 && first.model !== void 0) target = {
-			provider: first.provider,
-			model: first.model
-		};
-		if (agent.session?.header?.origin === "subagent" && target !== void 0) {
-			const settingsRead = readGuardedPolicySettings(ctx, agent.id, lastKnownPolicySettings, logger.warn);
-			const policy = settingsRead.ok ? effectivePolicy(readSessionPolicyEvent(agent.session.snapshotEvents()), settingsRead.settings) : { state: "unprovable" };
-			if (policy.state === "unprovable") {
-				logger.warn("llm-fallbacks: agent \"%s\" subagent model-selection policy is on but unreadable — skipping fallback switch", agent.id);
-				return null;
-			}
-			if (policy.state === "enabled") {
-				const allowed = firstAllowedCandidate(resolvedRoutes(surviving), policy.allowedModels);
-				if (allowed === void 0) {
-					logger.warn("llm-fallbacks: agent \"%s\" fallback switch %s/%s blocked: resolved candidates are all outside the subagent allowlist — no switch", agent.id, target.provider, target.model);
-					blockedAttemptMap.set(agent.id, {
-						at: Date.now(),
-						route: {
-							provider: target.provider,
-							model: target.model
-						},
-						reason
-					});
-					return null;
-				}
-				target = {
-					provider: allowed.provider,
-					model: allowed.model
-				};
-			}
-		}
-		if (target === void 0) return null;
-		if ((source().recovery ?? "timer") === "half-open" && state !== void 0 && state.recovery.tryMarkProbeLogged(selectorKey(target.provider, target.model))) logger.info("llm-fallbacks: agent \"%s\" half-open probe %s/%s (role=%s, reason=%s)", agent.id, target.provider, target.model, role, reason);
-		logger.info("llm-fallbacks: agent \"%s\" fallback switch (降级切换) %s/%s -> %s/%s (role=%s, reason=%s, candidates=%o)", agent.id, current.provider, current.model, target.provider, target.model, role, reason, annotateCandidates(all, surviving, {
-			current,
-			cooldown,
-			failed,
-			minContextWindow,
-			contextWindowOf
-		}).map(({ candidate, skip }) => skip === void 0 ? `${candidate.provider}/${candidate.model}` : `${candidate.provider}/${candidate.model} (skipped: ${skip})`));
-		return {
-			from: {
-				provider: current.provider,
-				model: current.model
-			},
-			to: {
-				provider: target.provider,
-				model: target.model
-			},
-			role,
-			reason
-		};
-	}
-	function commit(state, pending, turn, step) {
-		const config = source();
-		const fromKey = selectorKey(pending.from.provider, pending.from.model);
-		states.syncStep(state, turn, step);
-		states.writePending(state, pending);
-		if ((pending.scope ?? "route") === "route") {
-			const until = config.revertPolicy === "never" ? Number.POSITIVE_INFINITY : config.recovery === "half-open" ? Date.now() + escalatedCooldownMs(config.cooldownMs, state.recovery.recordFailure(fromKey)) : Date.now() + config.cooldownMs;
-			states.suppress(state, fromKey, until);
-		}
-		states.recordFailure(state, fromKey);
-		states.recordSwitch(state);
-	}
-	function failHalfOpenProbe(agentId, current) {
-		const key = selectorKey(current.provider, current.model);
-		if ((source().recovery ?? "timer") !== "half-open") return;
-		if (source().revertPolicy === "never") return;
-		if (states.peek(agentId)?.recovery.isHalfOpen(key) !== true) return;
-		const state = states.get(agentId);
-		const n = state.recovery.recordFailure(key);
-		states.suppress(state, key, Date.now() + escalatedCooldownMs(source().cooldownMs, n));
-	}
-	ctx.on("agent/request-error", async ({ agent, turn, step, provider, failure }, next) => {
-		const config = source();
-		if (!isFallbackActive(config) || !config.triggerCodes.includes(failure.code)) return next();
-		const current = currentModel(agent, provider, config, new Date());
-		if (!current.model) return next();
-		try {
-			const pending = await decide(agent, turn, step, current, "trigger-code", states.peek(agent.id), failure.code);
-			if (pending === null) {
-				failHalfOpenProbe(agent.id, current);
-				return next();
-			}
-			const scope = REQUEST_SCOPED_CODES.has(failure.code) ? "request" : void 0;
-			commit(states.get(agent.id), scope === void 0 ? pending : {
-				...pending,
-				scope
-			}, turn, step);
-			return { kind: "retry" };
-		} catch (error) {
-			logger.warn("llm-fallbacks: decision path failed, passing the original failure through: %s", error?.message ?? String(error));
-			return next();
-		}
-	});
-	ctx.on("agent/request", async ({ agent, turn, step }, next) => {
-		const seed = await next();
-		const state = states.peek(agent.id);
-		const applied = state === void 0 ? void 0 : states.applyPending(state, turn, step);
-		if (applied !== void 0) return overrideConfig(seed, applied.to);
-		const config = source();
-		if (isFallbackActive(config) && isAllDayConforming(config.rootChain) && (config.timeSlots?.length ?? 0) > 0 && agent.session?.header?.origin !== "subagent") {
-			const slot = resolveSlotState(config, new Date(), config.tz ?? "Asia/Shanghai");
-			const key = slotWinnerKey(slot.winner);
-			const previous = slotWinners.get(agent.id);
-			if (previous !== void 0 && previous.key !== key) logger.info("llm-fallbacks: agent \"%s\" time-slot switch (分时切换): %s -> %s", agent.id, previous.label, slot.label);
-			slotWinners.set(agent.id, {
-				key,
-				label: slot.label
+	const walkDeps = {
+		readConfig: () => source(),
+		getLlm: () => ctx.get("llm"),
+		resolveAgentView: (sessionId) => agentChainView(ctx, sessionId),
+		states,
+		roleIds: () => roleIds,
+		seamRecord: (sessionId) => subagentSeam.records.get(sessionId),
+		policyFor,
+		recordBlocked: (sessionId, route, reason) => {
+			blockedAttemptMap.set(sessionId, {
+				at: Date.now(),
+				route,
+				reason
 			});
-		}
-		if (isFallbackActive(config) && hasChains && agent.session?.header?.origin === "subagent" && !dispatchInjected.has(agent.id)) {
-			dispatchInjected.add(agent.id);
-			try {
-				const settingsRead = readGuardedPolicySettings(ctx, agent.id, lastKnownPolicySettings, logger.warn);
-				const policy = settingsRead.ok ? effectivePolicy(readSessionPolicyEvent(agent.session.snapshotEvents()), settingsRead.settings) : { state: "unprovable" };
-				if (policy.state === "unprovable") logger.warn("llm-fallbacks: agent \"%s\" subagent model-selection policy is on but unreadable — skipping role-inject", agent.id);
-				else {
-					const authorized = policy.state === "enabled" ? detectAuthorizedRoute(authorizedRouteView(ctx, agent)) : void 0;
-					if (authorized !== void 0) {
-						chainHeadMap.set(agent.id, {
-							at: Date.now(),
-							route: {
-								provider: authorized.provider,
-								model: authorized.model
-							},
-							source: "authorized"
-						});
-						logger.info("llm-fallbacks: agent \"%s\" authorized child route %s/%s is the chain head — skipping role-inject", agent.id, authorized.provider, authorized.model);
-					} else {
-						const role = await resolveRoleAtDispatch(agent, config.roles.rules, roleIds, {
-							automatchEnabled: config.roleAutoMatch ?? true,
-							automatch: (agent) => pickRoleByLlm(ctx, config.roles, agent, { warn: logger.warn }),
-							dispatchRole: subagentSeam.records.get(agent.id)?.role,
-							warn: logger.warn,
-							servedRoute: servedRouteFor(agent, config)
-						});
-						if (role !== "inherit") {
-							dispatchRoles.set(agent.id, role);
-							const { all, wildcard } = resolveChainViews(config.roles.list, config.rootChain, role, seed.provider, seed.model, logger.warn);
-							let to;
-							if (policy.state === "enabled") {
-								const routes = resolvedRoutes(all);
-								to = firstAllowedCandidate(routes, policy.allowedModels);
-								if (to === void 0 && routes.length > 0) logger.warn("llm-fallbacks: agent \"%s\" role-inject candidates are all outside the subagent allowlist — skipping inject (host seed stands)", agent.id);
-							} else {
-								const head = firstExactCandidate(all, wildcard);
-								if (head !== void 0 && head.model !== void 0) to = {
-									provider: head.provider,
-									model: head.model
-								};
-							}
-							if (to !== void 0 && !(to.provider === seed.provider && to.model === seed.model)) {
-								if (policy.state === "enabled") chainHeadMap.set(agent.id, {
-									at: Date.now(),
-									route: {
-										provider: to.provider,
-										model: to.model
-									},
-									source: "injected"
-								});
-								logger.info("llm-fallbacks: agent \"%s\" role-inject role=%s model=%s/%s", agent.id, role, to.provider, to.model);
-								return overrideConfig(seed, to);
-							}
-						}
-					}
-				}
-			} catch (error) {
-				logger.warn("llm-fallbacks: dispatch role-injection failed, proceeding with the request unchanged: %s", error?.message ?? String(error));
-			}
-		}
-		if (hasChains && isFallbackActive(config) && config.alwaysModeRetryCap > 0 && countRetryEvents(agent.session, turn, step, seed.provider) >= config.alwaysModeRetryCap) {
-			const decisionState = states.peek(agent.id);
-			const capRoute = anchorServedRoute(config, {
-				provider: seed.provider,
-				model: seed.model
-			}, new Date());
-			const pending = await decide(agent, turn, step, capRoute, "always-cap", decisionState);
-			if (pending !== null) {
-				const commitState = states.get(agent.id);
-				commit(commitState, pending, turn, step);
-				const appliedCap = states.applyPending(commitState, turn, step);
-				if (appliedCap !== void 0) return overrideConfig(seed, appliedCap.to);
-			} else failHalfOpenProbe(agent.id, capRoute);
-		}
-		return seed;
-	});
-	ctx.on("agent/status", ({ agent, status }) => {
-		if (status !== "idle") return;
-		const state = states.peek(agent.id);
-		if (state !== void 0) states.clearStepState(state);
-	});
+		},
+		slotWinners,
+		log: logger
+	};
+	const reconcileFallbacksAdapter = installFallbacksAdapter(ctx, () => source(), (options) => walkChain(walkDeps, options));
 	ctx.on("agent/disposed", ({ agent }) => {
 		states.delete(agent.id);
-		dispatchInjected.delete(agent.id);
-		dispatchRoles.delete(agent.id);
 		slotWinners.delete(agent.id);
 		blockedAttemptMap.delete(agent.id);
 		chainHeadMap.delete(agent.id);
 		subagentSeam.records.delete(agent.id);
 		lastKnownPolicySettings.delete(agent.id);
 	});
-	ctx.on("session/event", (session, event) => {
-		if (event.type !== "assistant/message") return;
-		const config = source();
-		if ((config.recovery ?? "timer") !== "half-open") return;
-		if (event.data.interrupted === true) return;
-		const message = event.data.message;
-		if (message.source.kind !== "model") return;
-		const state = states.peek(session.id);
-		if (state === void 0) return;
-		const observed = anchorServedRoute(config, {
-			provider: message.source.provider,
-			model: message.source.model
-		}, new Date());
-		states.observeSuccess(state, selectorKey(observed.provider, observed.model));
-	});
 	ctx.effect(() => () => {
 		states.clear();
-		dispatchInjected.clear();
-		dispatchRoles.clear();
 		slotWinners.clear();
 		blockedAttemptMap.clear();
 		chainHeadMap.clear();
-		subagentSeam.records.clear();
-		subagentSeam.noticeEmitted.clear();
-		subagentSeam.dispose();
 		lastKnownPolicySettings.clear();
 	}, "llm-fallbacks: clear per-agent state");
 	const fallbacksCommandController = {
 		getSnapshot(agent) {
 			const config = source();
-			const role = rememberedRole(agent.id) ?? resolveRole(agent, config.roles.rules, roleIds, logger.warn, servedRouteFor(agent, config));
+			const role = subagentSeam.records.get(agent.id)?.role ?? resolveRole(agent, config.roles.rules, roleIds, logger.warn, servedRouteOf(config, agent.options, new Date()));
 			const state = states.peek(agent.id);
 			const recovery = config.recovery ?? "timer";
 			if (state !== void 0 && recovery === "half-open") states.syncRecovery(state, Date.now(), recovery);
@@ -3617,9 +3429,7 @@ function apply(ctx, config = defaultFallbacksConfig) {
 				cooldownMs: config.cooldownMs,
 				revertPolicy: config.revertPolicy,
 				maxSwitchesPerStep: config.maxSwitchesPerStep,
-				alwaysModeRetryCap: config.alwaysModeRetryCap,
-				presets: config.presets ?? "bundled",
-				roleAutoMatch: config.roleAutoMatch ?? true
+				presets: config.presets ?? "bundled"
 			};
 		},
 		revertSeed: async (roleId) => {
@@ -3645,4 +3455,4 @@ function apply(ctx, config = defaultFallbacksConfig) {
 	});
 }
 //#endregion
-export { Config, FallbacksSeedManager, INHERIT_ROLE_ID, ROLE_ID_PATTERN, ROLE_PROJECTION_KEY, SelectorError, annotateCandidates, apply, blockedAttempts, chainHeads, countRetryEvents, createCandidateFilter, defaultFallbacksConfig, detectLegacyKeys, hasWildcardEntry, name, parseSelector, presetRoles, provide, readRoleProjectionValue, resolveCandidate, resolveChain, resolveChainViews, resolveRole, selectCandidates, stateStore, validateFallbacksConfig };
+export { Config, FallbacksSeedManager, INHERIT_ROLE_ID, ROLE_ID_PATTERN, ROLE_PROJECTION_KEY, SelectorError, annotateCandidates, apply, blockedAttempts, chainHeads, createCandidateFilter, defaultFallbacksConfig, detectLegacyKeys, hasWildcardEntry, name, parseSelector, presetRoles, provide, readRoleProjectionValue, resolveCandidate, resolveChain, resolveChainViews, resolveRole, selectCandidates, stateStore, validateFallbacksConfig };