dsh-llm-fallbacks 0.7.0 → 0.8.0

package/dist/index.js

@@ -227,18 +227,18 @@ function isAllDayConforming(chain) {
 	const tail = chain[chain.length - 1];
 	return isOfficialAllDayId(tail);
 }
-function resolveEffectiveChain(config, now, tz) {
-	const state = resolveSlotState(config, now, tz);
-	return state.winner === "all-day" ? config.rootChain : state.winner.chain;
+function resolveEffectiveChain(chain, now, tz) {
+	const state = resolveSlotState(chain, now, tz);
+	return state.winner === "all-day" ? chain.entries : state.winner.chain;
 }
-function resolveSlotState(config, now, tz) {
-	if (!isAllDayConforming(config.rootChain)) return {
+function resolveSlotState(chain, now, tz) {
+	if (!isAllDayConforming(chain.entries)) return {
 		winner: "all-day",
 		label: "all-day"
 	};
 	const clock = wallClock(now, tz);
 	const seenPresets = new Set();
-	const rows = Array.isArray(config.timeSlots) ? config.timeSlots : [];
+	const rows = Array.isArray(chain.timeSlots) ? chain.timeSlots : [];
 	for (const row of rows) {
 		if (typeof row !== "object" || row === null) {
 			warnMalformed(row, "row is not an object");
@@ -324,31 +324,57 @@ var RecoveryStore = class {
 };
 //#endregion
 //#region .build/host/config.js
+const CHAIN_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9-]{0,31}$/;
 const defaultFallbacksConfig = {
 	triggerCodes: [
 		"AUTH",
 		"QUOTA",
 		"RATE_LIMIT"
 	],
-	rootChain: [],
-	roles: {
-		list: [],
-		rules: []
-	},
+	chains: [],
+	roles: { list: [] },
 	cooldownMs: 3e5,
 	revertPolicy: "cooldown-expiry",
 	maxSwitchesPerStep: 8,
 	presets: "bundled",
-	timeSlots: [],
 	tz: "Asia/Shanghai",
 	recovery: "timer"
 };
+const ROLE_ID_PATTERN = /^[a-z0-9-]{1,32}$/;
 const INHERIT_ROLE_ID = "inherit";
 function isFallbackActive(config) {
-	return config.rootChain.length > 0 || (config.timeSlots?.length ?? 0) > 0 || config.roles.list.length > 0;
+	return config.chains.length > 0;
 }
-const ROLE_ID_PATTERN = /^[a-z0-9-]{1,32}$/;
 function validateFallbacksConfig(config, logger) {
+	const declaredChainIds = new Set();
+	for (const chain of config.chains) {
+		if (!CHAIN_ID_PATTERN.test(chain.id)) logger.warn(`llm-fallbacks: invalid chain id "${chain.id}" — must match /^[A-Za-z0-9][A-Za-z0-9-]{0,31}$/`);
+		if (declaredChainIds.has(chain.id)) logger.warn(`llm-fallbacks: duplicate chain id "${chain.id}" — chain ids must be unique (case-sensitive)`);
+		declaredChainIds.add(chain.id);
+		if (chain.entries.length > 0 && !isAllDayConforming(chain.entries)) logger.warn(`llm-fallbacks: chain "${chain.id}" must end with exactly one official model (deepseek-official/deepseek-flash or deepseek-official/deepseek-v4-pro) — its time-slot rows and the virtual picker delegate stay inert until the tail conforms`);
+		for (const entry of chain.entries) try {
+			parseSelector(entry);
+		} catch (error) {
+			logger.warn(`llm-fallbacks: ignoring invalid chain "${chain.id}" entry "${entry}": ${error.message}`);
+		}
+		if (Array.isArray(chain.timeSlots)) {
+			const seenSlotPresets = new Set();
+			for (const row of chain.timeSlots) {
+				if (row.kind !== "preset") continue;
+				const preset = row.preset;
+				if (typeof preset !== "string" || !Object.hasOwn(PRESETS, preset)) {
+					logger.warn(`llm-fallbacks: chain "${chain.id}" has an unknown time-slot preset ${JSON.stringify(preset)} — row ignored`);
+					continue;
+				}
+				if (seenSlotPresets.has(preset)) {
+					logger.warn(`llm-fallbacks: chain "${chain.id}" has a duplicate time-slot preset "${preset}" — only the first row takes effect`);
+					continue;
+				}
+				seenSlotPresets.add(preset);
+				if (row.start !== void 0 || row.end !== void 0 || row.days !== void 0 && row.days.length > 0) logger.warn(`llm-fallbacks: chain "${chain.id}" preset "${preset}" carries its own window/day fields — preset windows are fixed code constants; the row is ignored`);
+			}
+		}
+	}
 	const declaredIds = new Set();
 	for (const role of config.roles.list) {
 		const id = role.id.trim();
@@ -356,106 +382,150 @@ function validateFallbacksConfig(config, logger) {
 		if (id === "inherit") logger.warn(`llm-fallbacks: role id "${role.id}" is reserved — "inherit" cannot be declared in roles.list`);
 		if (declaredIds.has(id)) logger.warn(`llm-fallbacks: duplicate role id "${role.id}" — role ids must be unique`);
 		declaredIds.add(id);
-		for (const entry of role.chain ?? []) try {
-			parseSelector(entry);
-		} catch (error) {
-			logger.warn(`llm-fallbacks: ignoring invalid chain entry "${entry}" in role "${role.id}": ${error.message}`);
-		}
-		if ((role.chain ?? []).length === 0) logger.warn(`llm-fallbacks: role "${role.id}" has no model config — declare at least one chain entry, or use the built-in "inherit" rule target instead`);
-		if (role.fallback !== void 0 && role.fallback !== "inherit-root" && role.fallback !== "none") logger.warn(`llm-fallbacks: role "${role.id}" has invalid fallback "${String(role.fallback)}" — expected "inherit-root" or "none"`);
-	}
-	if (config.rootChain.length > 0 && !isAllDayConforming(config.rootChain)) logger.warn("llm-fallbacks: rootChain must end with exactly one official model (deepseek-official/deepseek-flash or deepseek-official/deepseek-v4-pro) — time-slot rows and the virtual picker row stay inert until the all-day chain tail conforms");
-	for (const entry of config.rootChain) try {
-		parseSelector(entry);
-	} catch (error) {
-		logger.warn(`llm-fallbacks: ignoring invalid rootChain entry "${entry}": ${error.message}`);
-	}
-	const validTargets = new Set([...declaredIds, INHERIT_ROLE_ID]);
-	for (const rule of config.roles.rules) if (!validTargets.has(rule.role.trim())) logger.warn(`llm-fallbacks: rule references undeclared role "${rule.role}" — expected one of roles.list ids or "inherit"`);
-	if (Array.isArray(config.timeSlots)) {
-		const seenSlotPresets = new Set();
-		for (const row of config.timeSlots) {
-			if (row.kind !== "preset") continue;
-			const preset = row.preset;
-			if (typeof preset !== "string" || !Object.hasOwn(PRESETS, preset)) {
-				logger.warn(`llm-fallbacks: unknown time-slot preset ${JSON.stringify(preset)} — row ignored`);
-				continue;
-			}
-			if (seenSlotPresets.has(preset)) {
-				logger.warn(`llm-fallbacks: duplicate time-slot preset "${preset}" — only the first row takes effect`);
-				continue;
-			}
-			seenSlotPresets.add(preset);
-			if (row.start !== void 0 || row.end !== void 0 || row.days !== void 0 && row.days.length > 0) logger.warn(`llm-fallbacks: preset "${preset}" carries its own window/day fields — preset windows are fixed code constants; the row is ignored`);
-		}
+		if (role.chain !== void 0 && role.chain !== "" && !declaredChainIds.has(role.chain)) logger.warn(`llm-fallbacks: role "${role.id}" specifies unknown chain "${role.chain}" — the child inherits the delegating agent's route`);
 	}
 	if ((config.recovery ?? "timer") === "half-open" && config.cooldownMs >= 36e5) logger.warn(`llm-fallbacks: recovery "half-open" escalation is inert — cooldownMs (${config.cooldownMs} ms) is at or above the 1-hour escalation cap (${ESCALATION_CAP_MS} ms), so every suppression stays flat at cooldownMs`);
 }
 function detectLegacyKeys(source) {
-	const keys = [];
-	if (Object.hasOwn(source, "chains")) keys.push("chains");
-	if (Object.hasOwn(source, "alwaysModeRetryCap")) keys.push("alwaysModeRetryCap");
-	if (Object.hasOwn(source, "roleAutoMatch")) keys.push("roleAutoMatch");
+	const keys = new Set();
+	if (Object.hasOwn(source, "alwaysModeRetryCap")) keys.add("alwaysModeRetryCap");
+	if (Object.hasOwn(source, "roleAutoMatch")) keys.add("roleAutoMatch");
+	if (Object.hasOwn(source, "rootChain")) keys.add("rootChain");
+	if (Object.hasOwn(source, "timeSlots")) keys.add("timeSlots");
 	const roles = source.roles;
 	if (isRecordLike(roles)) {
-		if (Object.hasOwn(roles, "default")) keys.push("roles.default");
-		const declared = new Set();
+		if (Object.hasOwn(roles, "default")) keys.add("roles.default");
+		if (Object.hasOwn(roles, "rules")) keys.add("roles.rules");
 		if (Array.isArray(roles.list)) for (const item of roles.list) {
 			if (!isRecordLike(item)) continue;
-			if (typeof item.id === "string") declared.add(item.id);
-			if (Object.hasOwn(item, "label")) keys.push("roles.list[].label");
-			if (Object.hasOwn(item, "description")) keys.push("roles.list[].description");
-		}
-		if (Array.isArray(roles.rules)) {
-			for (const rule of roles.rules) if (isRecordLike(rule) && typeof rule.role === "string" && rule.role !== "inherit" && !declared.has(rule.role)) keys.push(`roles.rules[].role: ${rule.role}`);
+			if (Object.hasOwn(item, "label")) keys.add("roles.list[].label");
+			if (Object.hasOwn(item, "description")) keys.add("roles.list[].description");
+			if (Object.hasOwn(item, "fallback")) keys.add("roles.list[].fallback");
+			if (Array.isArray(item.chain)) keys.add("roles.list[].chain");
 		}
 	}
-	return keys;
+	return [...keys];
 }
 function isRecordLike(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+const MIGRATED_CHAIN_ID = "Auto";
+const MIGRATED_CHAIN_LABEL = "默认链";
+function migrateLegacyConfig(source) {
+	const raw = isRecordLike(source) ? source : {};
+	const defaults = defaultFallbacksConfig;
+	return {
+		triggerCodes: stringArrayOf(raw["triggerCodes"]) ?? [...defaults.triggerCodes],
+		chains: migrateChains(raw),
+		roles: { list: migrateRoles(raw["roles"]) },
+		cooldownMs: finiteNumberOr(raw["cooldownMs"], defaults.cooldownMs),
+		revertPolicy: raw["revertPolicy"] === "never" ? "never" : defaults.revertPolicy,
+		maxSwitchesPerStep: finiteNumberOr(raw["maxSwitchesPerStep"], defaults.maxSwitchesPerStep),
+		presets: raw["presets"] === "none" ? "none" : defaults.presets,
+		tz: typeof raw["tz"] === "string" && raw["tz"] !== "" ? raw["tz"] : defaults.tz,
+		recovery: raw["recovery"] === "half-open" ? "half-open" : defaults.recovery
+	};
+}
+function migrateChains(raw) {
+	const declared = Array.isArray(raw["chains"]) ? raw["chains"] : void 0;
+	if (declared !== void 0 && declared.length > 0) {
+		const chains = [];
+		for (const entry of declared) {
+			const chain = normalizeChain(entry);
+			if (chain !== void 0) chains.push(chain);
+		}
+		return chains;
+	}
+	const rootChain = stringArrayOf(raw["rootChain"]);
+	const legacyRows = Array.isArray(raw["timeSlots"]) ? raw["timeSlots"].filter(isRecordLike).map((row) => ({ ...row })) : [];
+	if (rootChain === void 0 || rootChain.length === 0) return [];
+	return [{
+		id: MIGRATED_CHAIN_ID,
+		label: MIGRATED_CHAIN_LABEL,
+		entries: [...rootChain],
+		timeSlots: legacyRows
+	}];
+}
+function normalizeChain(value) {
+	if (!isRecordLike(value)) return void 0;
+	const id = typeof value["id"] === "string" ? value["id"] : void 0;
+	if (id === void 0) return void 0;
+	const timeSlots = Array.isArray(value["timeSlots"]) ? value["timeSlots"].filter(isRecordLike).map((row) => ({ ...row })) : [];
+	return {
+		id,
+		label: typeof value["label"] === "string" ? value["label"] : id,
+		entries: stringArrayOf(value["entries"]) ?? [],
+		timeSlots
+	};
+}
+function migrateRoles(value) {
+	if (!isRecordLike(value)) return [];
+	const list = Array.isArray(value["list"]) ? value["list"] : [];
+	const roles = [];
+	for (const row of list) {
+		if (!isRecordLike(row)) continue;
+		const id = typeof row["id"] === "string" ? row["id"] : void 0;
+		if (id === void 0) continue;
+		const role = {
+			...row,
+			id,
+			persona: typeof row["persona"] === "string" ? row["persona"] : ""
+		};
+		for (const stale of [
+			"fallback",
+			"label",
+			"description"
+		]) delete role[stale];
+		if (typeof row["chain"] !== "string" || row["chain"] === "") delete role["chain"];
+		roles.push(role);
+	}
+	return roles;
+}
+function stringArrayOf(value) {
+	if (!Array.isArray(value)) return void 0;
+	const out = [];
+	for (const item of value) {
+		if (typeof item !== "string") return void 0;
+		out.push(item);
+	}
+	return out;
+}
+function finiteNumberOr(value, fallback) {
+	return typeof value === "number" && Number.isFinite(value) ? value : fallback;
+}
 const Config = z.object({
 	triggerCodes: z.array(z.string()).default([
 		"AUTH",
 		"QUOTA",
 		"RATE_LIMIT"
 	]),
-	rootChain: z.array(z.string()).default([]),
-	roles: z.object({
-		list: z.array(z.object({
-			id: z.string().required(),
-			persona: z.string().default(""),
-			prompt: z.string(),
-			permissions: z.object({
-				allow: z.array(z.string()),
-				deny: z.array(z.string())
-			}),
-			chain: z.array(z.string()),
-			fallback: z.union([z.const("inherit-root"), z.const("none")]).default("inherit-root")
-		})).default([]),
-		rules: z.array(z.object({
-			origin: z.union([z.const("root"), z.const("subagent")]),
-			provider: z.string(),
-			model: z.string(),
-			role: z.string().required()
+	chains: z.array(z.object({
+		id: z.string().required(),
+		label: z.string().required(),
+		entries: z.array(z.string()).default([]),
+		timeSlots: z.array(z.object({
+			kind: z.string(),
+			preset: z.string(),
+			start: z.string(),
+			end: z.string(),
+			days: z.array(z.number()),
+			chain: z.array(z.string())
 		})).default([])
-	}).default({
-		list: [],
-		rules: []
-	}),
+	})).default([]),
+	roles: z.object({ list: z.array(z.object({
+		id: z.string().required(),
+		persona: z.string().default(""),
+		prompt: z.string(),
+		permissions: z.object({
+			allow: z.array(z.string()),
+			deny: z.array(z.string())
+		}),
+		chain: z.union([z.string(), z.array(z.string())])
+	})).default([]) }).default({ list: [] }),
 	cooldownMs: z.number().default(3e5),
 	revertPolicy: z.union([z.const("cooldown-expiry"), z.const("never")]).default("cooldown-expiry"),
 	maxSwitchesPerStep: z.number().default(8),
 	presets: z.union([z.const("bundled"), z.const("none")]).default("bundled"),
-	timeSlots: z.array(z.object({
-		kind: z.string(),
-		preset: z.string(),
-		start: z.string(),
-		end: z.string(),
-		days: z.array(z.number()),
-		chain: z.array(z.string())
-	})).default([]),
 	tz: z.string().default("Asia/Shanghai"),
 	recovery: z.union([z.const("timer"), z.const("half-open")]).default("timer")
 }).extra("volatile", true);
@@ -475,19 +545,11 @@ function resolveCandidate(entry, failing, modelExists) {
 	}
 	return selector;
 }
-function roleChainEntries(roles, rootChain, role) {
-	if (role.trim() === "inherit") return rootChain;
-	const roleDef = roles.find((declared) => declared.id.trim() === role.trim());
-	if (roleDef === void 0) return rootChain;
-	return [...roleDef.chain ?? [], ...roleDef.fallback === "none" ? [] : rootChain];
-}
-function resolveChainViews(roles, rootChain, role, provider, model, warn = console.warn) {
+function resolveChainViews(entries, provider, model, warn = console.warn) {
 	const failing = {
 		provider,
 		model
 	};
-	const entries = roleChainEntries(roles, rootChain, role);
-	if (role.trim() !== "inherit" && !roles.some((declared) => declared.id.trim() === role.trim())) warn(`llm-fallbacks: unknown role "${role}" — falling back to rootChain`);
 	const all = [];
 	const wildcard = [];
 	for (const entry of entries) {
@@ -517,12 +579,11 @@ function selectCandidates(all, wildcard, filter, modelExists) {
 	}
 	return surviving;
 }
-function resolveChain(roles, rootChain, role, provider, model, filter, modelExists, warn = console.warn) {
-	const { all, wildcard } = resolveChainViews(roles, rootChain, role, provider, model, warn);
+function resolveChain(entries, provider, model, filter, modelExists, warn = console.warn) {
+	const { all, wildcard } = resolveChainViews(entries, provider, model, warn);
 	return selectCandidates(all, wildcard, filter, modelExists);
 }
-function hasWildcardEntry(roles, rootChain, role) {
-	const entries = roleChainEntries(roles, rootChain, role);
+function hasWildcardEntry(entries) {
 	for (const entry of entries) try {
 		if (parseSelector(entry).model === void 0) return true;
 	} catch {}
@@ -574,66 +635,9 @@ function annotateCandidates(candidates, surviving, options) {
 	});
 }
 //#endregion
-//#region .build/host/route-allowlist.js
-function resolvedRoutes(candidates) {
-	const routes = [];
-	for (const candidate of candidates) {
-		if (candidate.model === void 0) continue;
-		routes.push({
-			provider: candidate.provider,
-			model: candidate.model
-		});
-	}
-	return routes;
-}
-function routeOnAllowlist(route, allowedModels) {
-	return allowedModels.some((allowed) => allowed.provider === route.provider && allowed.model === route.model);
-}
-function firstAllowedCandidate(resolved, allowedModels) {
-	return resolved.find((route) => routeOnAllowlist(route, allowedModels));
-}
-//#endregion
-//#region .build/host/roles.js
-function resolveRole(agent, rules, roleIds, warn = console.warn, servedRoute) {
-	if ((agent.session?.header?.origin ?? "root") !== "subagent") return INHERIT_ROLE_ID;
-	const recordedRoute = {
-		provider: agent.options?.provider,
-		model: agent.options?.model
-	};
-	for (const rule of rules) {
-		const matchesPair = (pair) => (!rule.provider || rule.provider === pair.provider) && (!rule.model || rule.model === pair.model);
-		if (!matchesPair(recordedRoute) && !(servedRoute !== void 0 && matchesPair(servedRoute))) continue;
-		const target = rule.role.trim();
-		if (target === "inherit") return INHERIT_ROLE_ID;
-		const declared = roleIds.get(target);
-		if (declared === void 0) {
-			warn(`llm-fallbacks: rule references undeclared role "${rule.role}" — falling back to "inherit"`);
-			return INHERIT_ROLE_ID;
-		}
-		return declared;
-	}
-	return INHERIT_ROLE_ID;
-}
-//#endregion
-//#region .build/host/role-resolution.js
-function resolveDeclaredRole(agent, rules, roleIds, opts) {
-	const preset = agent.session?.header?.agentPreset?.trim();
-	if (preset !== void 0 && preset !== "" && preset !== "inherit") {
-		const declared = roleIds.get(preset);
-		if (declared !== void 0) return declared;
-	}
-	const dispatch = opts.dispatchRole?.trim();
-	if (dispatch !== void 0 && dispatch !== "" && dispatch !== "inherit") {
-		const declared = roleIds.get(dispatch);
-		if (declared !== void 0) return declared;
-	}
-	return resolveRole(agent, rules, roleIds, opts.warn, opts.servedRoute);
-}
-//#endregion
 //#region .build/host/virtual-adapter.js
 const FALLBACKS_PROVIDER$1 = "FallbacksChain";
-const FALLBACKS_CHAIN_MODEL = "Auto";
-function firstDispatchableExactHead(chain, allowedModels) {
+function firstDispatchableExactHead(chain) {
 	for (const entry of chain) {
 		let selector;
 		try {
@@ -643,24 +647,22 @@ function firstDispatchableExactHead(chain, allowedModels) {
 		}
 		if (selector.model === void 0) continue;
 		if (selector.provider === "FallbacksChain") continue;
-		const head = {
+		return {
 			provider: selector.provider,
 			model: selector.model
 		};
-		if (allowedModels !== void 0 && !routeOnAllowlist(head, allowedModels)) continue;
-		return head;
 	}
 }
-function effectiveHeadOf(config, now) {
-	if (!isAllDayConforming(config.rootChain)) return void 0;
-	return firstDispatchableExactHead(resolveEffectiveChain(config, now, config.tz ?? "Asia/Shanghai"));
+function effectiveHeadOf(chain, now, tz = "Asia/Shanghai") {
+	if (!isAllDayConforming(chain.entries)) return void 0;
+	return firstDispatchableExactHead(resolveEffectiveChain(chain, now, tz));
 }
-function pickerDisplayName(config, now = new Date(), modelDisplayName) {
-	const head = effectiveHeadOf(config, now);
-	if (head === void 0) return FALLBACKS_CHAIN_MODEL;
-	const slot = resolveSlotState(config, now, config.tz ?? "Asia/Shanghai");
+function pickerDisplayName(chain, now = new Date(), modelDisplayName, tz = "Asia/Shanghai") {
+	const head = effectiveHeadOf(chain, now, tz);
+	if (head === void 0) return chain.label;
+	const slot = resolveSlotState(chain, now, tz);
 	const model = modelDisplayName !== void 0 && modelDisplayName !== "" ? modelDisplayName : head.model;
-	return `${FALLBACKS_CHAIN_MODEL}: ${model}[${slot.label}]`;
+	return `${chain.label}: ${model}[${slot.label}]`;
 }
 async function resolveHeadDisplayName(llm, head) {
 	if (llm === void 0) return head.model;
@@ -693,16 +695,20 @@ var FallbacksChainAdapter = class extends LlmAdapter {
 	async listModels(provider) {
 		const config = this.readConfig();
 		const now = new Date();
-		const head = effectiveHeadOf(config, now);
-		const display = head === void 0 ? void 0 : await resolveHeadDisplayName(this.getLlm(), head);
-		return [{
-			provider,
-			id: FALLBACKS_CHAIN_MODEL,
-			name: pickerDisplayName(config, now, display)
-		}];
+		const tz = config.tz ?? "Asia/Shanghai";
+		return Promise.all(config.chains.map(async (chain) => {
+			const head = effectiveHeadOf(chain, now, tz);
+			const display = head === void 0 ? void 0 : await resolveHeadDisplayName(this.getLlm(), head);
+			return {
+				provider,
+				id: chain.id,
+				name: pickerDisplayName(chain, now, display, tz)
+			};
+		}));
 	}
 	async resolveModel(provider, model, signal) {
-		const head = effectiveHeadOf(this.readConfig(), new Date());
+		const chain = this.readConfig().chains.find((entry) => entry.id === model);
+		const head = chain === void 0 ? void 0 : effectiveHeadOf(chain, new Date(), this.readConfig().tz ?? "Asia/Shanghai");
 		const llm = this.getLlm();
 		if (head !== void 0 && llm !== void 0) try {
 			const info = await llm.resolveModelInfo(head.provider, head.model, signal);
@@ -723,18 +729,11 @@ var FallbacksChainAdapter = class extends LlmAdapter {
 			name: model
 		};
 	}
-	providerRetryPolicy(_provider) {
+	providerRetryPolicy(_provider) {}
+	imageRequestPricing(_provider, model) {
 		try {
-			const head = effectiveHeadOf(this.readConfig(), new Date());
-			if (head === void 0 || head.provider === "FallbacksChain") return void 0;
-			return this.getLlm()?.providerRetryPolicy(head.provider);
-		} catch {
-			return;
-		}
-	}
-	imageRequestPricing(_provider, _model) {
-		try {
-			const head = effectiveHeadOf(this.readConfig(), new Date());
+			const chain = this.readConfig().chains.find((entry) => entry.id === model);
+			const head = chain === void 0 ? void 0 : effectiveHeadOf(chain, new Date(), this.readConfig().tz ?? "Asia/Shanghai");
 			if (head === void 0 || head.provider === "FallbacksChain") return void 0;
 			return this.getLlm()?.imageRequestPricing(head.provider, head.model);
 		} catch {
@@ -758,7 +757,7 @@ function installFallbacksAdapter(ctx, readConfig, walk) {
 			try {
 				disposeAdapter = llm.registerAdapter([FALLBACKS_PROVIDER$1], adapter);
 				registered = true;
-				logger.info("llm-fallbacks: virtual adapter registered — FallbacksChain/Auto is selectable in the model picker");
+				logger.info("llm-fallbacks: virtual adapter registered — FallbacksChain/<chain id> rows are selectable in the model picker");
 			} catch (error) {
 				if (!(error instanceof Error) || !("code" in error) || error.code !== "DUPLICATE_ADAPTER") throw error;
 				logger.debug("llm-fallbacks: virtual adapter already registered — no route on this fiber (multi-fiber dedupe)");
@@ -767,7 +766,7 @@ function installFallbacksAdapter(ctx, readConfig, walk) {
 			disposeAdapter?.();
 			disposeAdapter = void 0;
 			registered = false;
-			logger.info("llm-fallbacks: virtual adapter unregistered — FallbacksChain/Auto hidden from the model picker");
+			logger.info("llm-fallbacks: virtual adapter unregistered — FallbacksChain rows hidden from the model picker");
 		}
 	};
 	ctx.inject(["llm"], (llmCtx) => {
@@ -786,6 +785,7 @@ function installFallbacksAdapter(ctx, readConfig, walk) {
 //#region .build/host/chain-walk.js
 const EMPTY_EFFECTIVE_CHAIN_CODE = "EMPTY_EFFECTIVE_CHAIN";
 const UNDISPATCHABLE_HEAD_CODE = "UNDISPATCHABLE_EFFECTIVE_HEAD";
+const UNKNOWN_CHAIN_CODE = "UNKNOWN_CHAIN";
 const LLM_UNAVAILABLE_CODE = "LLM_UNAVAILABLE";
 const REQUEST_SCOPED_CODES = new Set(["CONTEXT_WINDOW_EXCEEDED"]);
 async function makeModelExists(catalog, providers) {
@@ -820,6 +820,64 @@ async function makeContextWindowOf(catalog, routes) {
 	}));
 	return (provider, model) => windows.get(selectorKey(provider, model));
 }
+function makeModelInfoOf(catalog) {
+	const resolveModelInfo = catalog?.resolveModelInfo?.bind(catalog);
+	if (resolveModelInfo === void 0) return () => Promise.resolve(void 0);
+	const cache = new Map();
+	return (provider, model) => {
+		const key = selectorKey(provider, model);
+		let info = cache.get(key);
+		if (info === void 0) {
+			info = (async () => {
+				try {
+					return await resolveModelInfo(provider, model);
+				} catch {
+					return;
+				}
+			})();
+			cache.set(key, info);
+		}
+		return info;
+	};
+}
+async function adaptForTarget(options, target, modelInfoOf, debug) {
+	if (options.reasoningEffort === void 0 && options.maxTokens === void 0) return options;
+	const info = await modelInfoOf(target.provider, target.model);
+	if (info === void 0 || info === null) return options;
+	let adapted;
+	const dropped = [];
+	try {
+		adapted = { ...options };
+		const effort = options.reasoningEffort;
+		if (effort !== void 0 && info.reasoning !== void 0 && !(info.reasoning.efforts ?? []).some((supported) => supported.id === effort)) {
+			delete adapted.reasoningEffort;
+			dropped.push("reasoningEffort");
+		}
+		const maxTokens = options.maxTokens;
+		if (maxTokens !== void 0 && info.defaultMaxTokens !== void 0 && maxTokens > info.defaultMaxTokens) {
+			delete adapted.maxTokens;
+			dropped.push("maxTokens");
+		}
+	} catch {
+		return options;
+	}
+	if (dropped.length > 0) try {
+		debug?.("llm-fallbacks: parameter adaptation candidate=%s/%s dropped=%s", target.provider, target.model, dropped.join(","));
+	} catch {}
+	return adapted;
+}
+const MAX_TOKENS_REJECTION = /max_tokens[\s\S]{0,40}?(非法|invalid|range|范围|exceed|too\s+large)/i;
+function repairableControl(failure, options) {
+	if (failure.code === "UNSUPPORTED_REASONING_EFFORT") return options.reasoningEffort === void 0 ? void 0 : "reasoningEffort";
+	if (failure.code === "INVALID_REQUEST" && options.maxTokens !== void 0 && MAX_TOKENS_REJECTION.test(failure.message)) return "maxTokens";
+}
+const SLOT_MARKER_SEPARATOR = "\0";
+function slotMarkerKey(agentId, chainId) {
+	return agentId + SLOT_MARKER_SEPARATOR + chainId;
+}
+function slotMarkerPrefix(agentId) {
+	return agentId + SLOT_MARKER_SEPARATOR;
+}
 function envelopeProvenance(replayState) {
 	if (typeof replayState !== "object" || replayState === null) return void 0;
 	const response = replayState.response;
@@ -837,7 +895,7 @@ function restoreEnvelopeProvenance(messages) {
 	const restored = messages.map((message) => {
 		const source = message.source;
 		if (message.role !== "assistant" || source?.kind !== "model") return message;
-		if (source.provider !== "FallbacksChain" || source.model !== "Auto") return message;
+		if (source.provider !== "FallbacksChain") return message;
 		const provenance = envelopeProvenance(source.replayState);
 		if (provenance === void 0) return message;
 		changed = true;
@@ -851,37 +909,21 @@ function restoreEnvelopeProvenance(messages) {
 	});
 	return changed ? restored : messages;
 }
-function agentLikeOf(view) {
-	return {
-		options: view?.optionsRoute,
-		session: { header: {
-			origin: view?.origin ?? "root",
-			agentPreset: view?.agentPreset
-		} }
-	};
-}
-function servedRouteOf(config, route, now) {
-	if (route?.provider !== "FallbacksChain" || route.model !== "Auto") return void 0;
-	const head = effectiveHeadOf(config, now);
-	return head === void 0 ? void 0 : {
-		provider: head.provider,
-		model: head.model
-	};
-}
 function slotWinnerKey(winner) {
 	if (winner === "all-day") return "all-day";
 	return winner.kind === "preset" ? `preset:${winner.preset}` : `custom:${winner.start}-${winner.end}`;
 }
 function logSlotRotation(deps, start) {
-	const { config, now, origin, owner } = start;
+	const { config, now, chain, owner } = start;
 	const markers = deps.slotWinners;
-	if (markers === void 0 || owner === void 0 || origin !== "root") return;
-	if (!isAllDayConforming(config.rootChain) || (config.timeSlots?.length ?? 0) === 0) return;
-	const slot = resolveSlotState(config, now, config.tz ?? "Asia/Shanghai");
+	if (markers === void 0 || owner === void 0) return;
+	if (!isAllDayConforming(chain.entries) || (chain.timeSlots?.length ?? 0) === 0) return;
+	const slot = resolveSlotState(chain, now, config.tz ?? "Asia/Shanghai");
+	const markerKey = slotMarkerKey(owner, chain.id);
 	const key = slotWinnerKey(slot.winner);
-	const previous = markers.get(owner);
-	if (previous !== void 0 && previous.key !== key) deps.log.info("llm-fallbacks: agent \"%s\" time-slot switch (分时切换): %s -> %s", owner, previous.label, slot.label);
-	markers.set(owner, {
+	const previous = markers.get(markerKey);
+	if (previous !== void 0 && previous.key !== key) deps.log.info("llm-fallbacks: agent \"%s\" time-slot switch (分时切换) on chain \"%s\": %s -> %s", owner, chain.id, previous.label, slot.label);
+	markers.set(markerKey, {
 		key,
 		label: slot.label
 	});
@@ -889,45 +931,33 @@ function logSlotRotation(deps, start) {
 function resolveWalk(deps, options) {
 	const config = deps.readConfig();
 	const now = new Date();
-	const view = deps.resolveAgentView(options.sessionId);
 	const owner = options.sessionId;
-	const seam = owner === void 0 ? void 0 : deps.seamRecord(owner);
-	const role = resolveDeclaredRole(agentLikeOf(view), config.roles.rules, deps.roleIds(), {
-		dispatchRole: seam?.role,
-		servedRoute: servedRouteOf(config, view?.optionsRoute, now),
-		warn: deps.log.warn
-	});
-	const origin = view?.origin ?? "root";
-	const rootTail = origin === "subagent" ? config.rootChain : resolveEffectiveChain(config, now, config.tz ?? "Asia/Shanghai");
-	const entries = roleChainEntries(config.roles.list, rootTail, role);
+	const chain = config.chains.find((entry) => entry.id === options.model);
+	if (chain === void 0) throw new LlmError(`llm-fallbacks: unknown virtual chain "${String(options.model)}" — re-select a chain in the model picker`, UNKNOWN_CHAIN_CODE);
+	const entries = resolveEffectiveChain(chain, now, config.tz ?? "Asia/Shanghai");
 	if (entries.length === 0) throw new LlmError("llm-fallbacks: the effective chain is empty — the virtual FallbacksChain route has no head to delegate to", EMPTY_EFFECTIVE_CHAIN_CODE);
-	if (origin === "root" && !isAllDayConforming(config.rootChain)) throw new LlmError("llm-fallbacks: the all-day chain is not conforming (exactly one official model required) — refusing to delegate", UNDISPATCHABLE_HEAD_CODE);
-	const policy = owner !== void 0 && seam?.virtualRouteInjected === true ? deps.policyFor(owner) : void 0;
-	if (policy?.state === "unprovable") throw new LlmError("llm-fallbacks: the subagent model-selection policy is unprovable — refusing to delegate the FallbacksChain call", UNDISPATCHABLE_HEAD_CODE);
-	const dispatchable = firstDispatchableExactHead(entries);
-	const allowedModels = policy?.state === "enabled" ? policy.allowedModels : void 0;
-	const head = allowedModels === void 0 ? dispatchable : firstDispatchableExactHead(entries, allowedModels);
-	if (head === void 0) throw new LlmError(dispatchable === void 0 ? "llm-fallbacks: the effective chain head cannot be dispatched (wildcard, malformed, or self-route) — refusing to delegate" : "llm-fallbacks: every dispatchable route of the effective chain is outside the subagent allowlist — refusing to delegate", UNDISPATCHABLE_HEAD_CODE);
+	if (!isAllDayConforming(chain.entries)) throw new LlmError("llm-fallbacks: the chain is not conforming (exactly one official model required) — refusing to delegate", UNDISPATCHABLE_HEAD_CODE);
+	const head = firstDispatchableExactHead(entries);
+	if (head === void 0) throw new LlmError("llm-fallbacks: the effective chain head cannot be dispatched (wildcard, malformed, or self-route) — refusing to delegate", UNDISPATCHABLE_HEAD_CODE);
 	const llm = deps.getLlm();
 	if (llm === void 0) throw new LlmError("llm-fallbacks: the llm runtime is unavailable — cannot delegate the FallbacksChain call", LLM_UNAVAILABLE_CODE);
 	return {
 		config,
 		now,
-		origin,
-		role,
-		rootTail,
+		chain,
+		entries,
 		head,
 		llm,
-		owner,
-		seam
+		owner
 	};
 }
 function walkChain(deps, options) {
 	return walk(deps, resolveWalk(deps, options), options);
 }
 async function* walk(deps, start, options) {
-	const { config, role, rootTail, head, llm, owner } = start;
+	const { config, chain, head, llm, owner } = start;
 	logSlotRotation(deps, start);
+	const modelInfoOf = makeModelInfoOf(llm);
 	const messages = restoreEnvelopeProvenance(options.messages);
 	const stateOf = () => owner === void 0 ? void 0 : deps.states.peek(owner);
 	const failedKeys = new Set();
@@ -946,12 +976,12 @@ async function* walk(deps, start, options) {
 		failedKeys.add(selectorKey(failed.provider, failed.model));
 		if (!REQUEST_SCOPED_CODES.has(code)) coolRoute(failed);
 	};
-	const advanceFrom = async (from, failureCode, blockedReason) => {
-		const { all, wildcard } = resolveChainViews(config.roles.list, rootTail, role, from.provider, from.model, deps.log.warn);
+	const advanceFrom = async (from, failureCode) => {
+		const { all, wildcard } = resolveChainViews(start.entries, from.provider, from.model, deps.log.warn);
 		const own = all.map((candidate) => candidate.provider !== FALLBACKS_PROVIDER$1);
 		const candidates = all.filter((_, index) => own[index]);
 		const wildcards = wildcard.filter((_, index) => own[index]);
-		const exists = hasWildcardEntry(config.roles.list, rootTail, role) ? await makeModelExists(llm, [...new Set(candidates.map((candidate) => candidate.provider))]) : void 0;
+		const exists = hasWildcardEntry(start.entries) ? await makeModelExists(llm, [...new Set(candidates.map((candidate) => candidate.provider))]) : void 0;
 		const contextWindowOf = failureCode === "CONTEXT_WINDOW_EXCEEDED" ? await makeContextWindowOf(llm, [from, ...candidates.flatMap((candidate) => candidate.model === void 0 ? [] : [{
 			provider: candidate.provider,
 			model: candidate.model
@@ -974,47 +1004,6 @@ async function* walk(deps, start, options) {
 			contextWindowOf
 		});
 		const describeCandidates = (list) => list.map(({ candidate, skip }) => skip === void 0 ? `${candidate.provider}/${candidate.model}` : `${candidate.provider}/${candidate.model} (skipped: ${skip})`);
-		if (start.seam?.virtualRouteInjected === true && owner !== void 0) {
-			const policy = deps.policyFor(owner);
-			if (policy.state === "unprovable") {
-				deps.log.warn("llm-fallbacks: agent \"%s\" subagent model-selection policy is on but unreadable — no fallback switch (a cooled-head re-entry is refused)", owner);
-				return {
-					candidates: describeCandidates(annotated),
-					currentAdmitted: false
-				};
-			}
-			if (policy.state === "enabled") {
-				const currentAdmitted = routeOnAllowlist(from, policy.allowedModels);
-				const permitted = new Set(surviving.filter((candidate) => candidate.model !== void 0 && routeOnAllowlist({
-					provider: candidate.provider,
-					model: candidate.model
-				}, policy.allowedModels)).map((candidate) => selectorKey(candidate.provider, candidate.model)));
-				const labelled = annotated.map((entry) => entry.skip === void 0 && !permitted.has(selectorKey(entry.candidate.provider, entry.candidate.model)) ? {
-					candidate: entry.candidate,
-					skip: "allowlist"
-				} : entry);
-				const allowed = firstAllowedCandidate(resolvedRoutes(surviving), policy.allowedModels);
-				if (allowed === void 0) {
-					const wouldBe = surviving[0];
-					if (wouldBe?.model !== void 0) {
-						deps.log.warn("llm-fallbacks: agent \"%s\" fallback switch %s/%s blocked: resolved candidates are all outside the subagent allowlist — no switch", owner, wouldBe.provider, wouldBe.model);
-						if (blockedReason !== void 0) deps.recordBlocked?.(owner, {
-							provider: wouldBe.provider,
-							model: wouldBe.model
-						}, blockedReason);
-					}
-					return {
-						candidates: describeCandidates(labelled),
-						currentAdmitted
-					};
-				}
-				return {
-					target: allowed,
-					candidates: describeCandidates(labelled),
-					currentAdmitted
-				};
-			}
-		}
 		const first = surviving[0];
 		if (first?.model === void 0) return { candidates: describeCandidates(annotated) };
 		return {
@@ -1026,111 +1015,83 @@ async function* walk(deps, start, options) {
 		};
 	};
 	let target;
-	if (isCooled(selectorKey(head.provider, head.model))) {
-		const advance = await advanceFrom(head);
-		if (advance?.target !== void 0) target = advance.target;
-		else if (advance?.currentAdmitted === false) throw new LlmError("llm-fallbacks: the subagent model-selection policy no longer admits the chain head — refusing to delegate the FallbacksChain call", UNDISPATCHABLE_HEAD_CODE);
-		else target = head;
-	} else target = head;
+	if (isCooled(selectorKey(head.provider, head.model))) target = (await advanceFrom(head))?.target ?? head;
+	else target = head;
 	let switches = 0;
 	for (;;) {
 		const key = selectorKey(target.provider, target.model);
 		const state = stateOf();
-		if ((config.recovery ?? "timer") === "half-open" && state !== void 0 && state.recovery.tryMarkProbeLogged(key)) deps.log.info("llm-fallbacks: agent \"%s\" half-open probe %s/%s (role=%s, reason=%s)", owner ?? "", target.provider, target.model, role, "trigger-code");
+		if ((config.recovery ?? "timer") === "half-open" && state !== void 0 && state.recovery.tryMarkProbeLogged(key)) deps.log.info("llm-fallbacks: agent \"%s\" half-open probe %s/%s (chain=%s, reason=%s)", owner ?? "", target.provider, target.model, chain.id, "trigger-code");
 		let committed = false;
 		let swallowed;
-		for await (const chunk of llm.stream({
-			...options,
-			provider: target.provider,
-			model: target.model,
-			messages
-		})) {
-			const failure = chunk.type === "finish" && chunk.reason.kind === "error" ? chunk.reason.failure : void 0;
-			if (failure !== void 0 && !committed && config.triggerCodes.includes(failure.code)) {
-				swallowed = {
-					chunk,
-					code: failure.code
-				};
-				break;
-			}
-			if (chunk.type === "finish") {
-				if (failure === void 0) {
-					if (chunk.reason.kind !== "aborted" && state !== void 0) deps.states.observeSuccess(state, key);
-				} else if (config.triggerCodes.includes(failure.code)) bookFailure(target, failure.code);
+		let attemptOptions = await adaptForTarget(options, target, modelInfoOf, deps.log.debug);
+		const repaired = new Set();
+		for (;;) {
+			committed = false;
+			swallowed = void 0;
+			let repair;
+			const pendingUsage = [];
+			for await (const chunk of llm.stream({
+				...attemptOptions,
+				provider: target.provider,
+				model: target.model,
+				messages
+			})) {
+				const failure = chunk.type === "finish" && chunk.reason.kind === "error" ? chunk.reason.failure : void 0;
+				if (failure !== void 0 && !committed) {
+					const repairable = repairableControl(failure, attemptOptions);
+					if (repairable !== void 0 && !repaired.has(repairable)) {
+						repair = repairable;
+						break;
+					}
+					if (config.triggerCodes.includes(failure.code)) {
+						swallowed = {
+							chunk,
+							code: failure.code
+						};
+						break;
+					}
+				}
+				if (chunk.type === "finish") {
+					if (failure === void 0) {
+						if (chunk.reason.kind !== "aborted" && state !== void 0) deps.states.observeSuccess(state, key);
+					} else if (config.triggerCodes.includes(failure.code)) bookFailure(target, failure.code);
+					for (const pending of pendingUsage) yield pending;
+					pendingUsage.length = 0;
+					yield chunk;
+					return;
+				}
+				if (chunk.type === "usage" && !committed) {
+					pendingUsage.push(chunk);
+					continue;
+				}
+				for (const pending of pendingUsage) yield pending;
+				pendingUsage.length = 0;
 				yield chunk;
-				return;
+				if (chunk.type !== "usage") committed = true;
+			}
+			if (repair === void 0) {
+				for (const pending of pendingUsage) yield pending;
+				break;
 			}
-			yield chunk;
-			committed = true;
+			repaired.add(repair);
+			attemptOptions = { ...attemptOptions };
+			delete attemptOptions[repair];
+			deps.log.info("llm-fallbacks: agent \"%s\" parameter repair (参数修复) candidate=%s/%s dropped=%s", owner ?? "", target.provider, target.model, repair);
 		}
 		if (swallowed === void 0) return;
 		bookFailure(target, swallowed.code);
-		const next = switches < config.maxSwitchesPerStep ? await advanceFrom(target, swallowed.code, "trigger-code") : void 0;
+		const next = switches < config.maxSwitchesPerStep ? await advanceFrom(target, swallowed.code) : void 0;
 		if (next === void 0 || next.target === void 0) {
 			yield swallowed.chunk;
 			return;
 		}
 		switches += 1;
-		deps.log.info("llm-fallbacks: agent \"%s\" fallback switch (降级切换) %s/%s -> %s/%s (role=%s, reason=%s, candidates=%o)", owner ?? "", target.provider, target.model, next.target.provider, next.target.model, role, "trigger-code", next.candidates);
+		deps.log.info("llm-fallbacks: agent \"%s\" fallback switch (降级切换) %s/%s -> %s/%s (chain=%s, reason=%s, candidates=%o)", owner ?? "", target.provider, target.model, next.target.provider, next.target.model, chain.id, "trigger-code", next.candidates);
 		target = next.target;
 	}
 }
 //#endregion
-//#region .build/host/subagent-policy.js
-function parseRoutes(value) {
-	if (!Array.isArray(value)) return void 0;
-	const routes = [];
-	for (const candidate of value) {
-		if (typeof candidate !== "object" || candidate === null || Array.isArray(candidate) || !("provider" in candidate) || typeof candidate.provider !== "string" || candidate.provider.length === 0 || !("model" in candidate) || typeof candidate.model !== "string" || candidate.model.length === 0) return;
-		routes.push({
-			provider: candidate.provider,
-			model: candidate.model
-		});
-	}
-	return routes;
-}
-function policySettingsFrom(value) {
-	if (typeof value !== "object" || value === null) return void 0;
-	if (!("enabled" in value) || typeof value.enabled !== "boolean") return void 0;
-	const routes = "allowedModels" in value ? parseRoutes(value.allowedModels) : void 0;
-	if (routes === void 0) return void 0;
-	return {
-		enabled: value.enabled,
-		allowedModels: routes
-	};
-}
-function readSessionPolicyEvent(events) {
-	const event = events.find((candidate) => candidate.type === "subagent/model-selection-policy");
-	if (event === void 0) return {
-		ok: false,
-		present: false
-	};
-	const data = event.data;
-	const routes = parseRoutes(typeof data === "object" && data !== null && "allowedModels" in data ? data.allowedModels : void 0);
-	if (routes === void 0 || routes.length === 0) return {
-		ok: false,
-		present: true
-	};
-	return {
-		ok: true,
-		allowedModels: routes
-	};
-}
-function effectivePolicy(event, settings) {
-	if (event.ok) return {
-		state: "enabled",
-		allowedModels: event.allowedModels
-	};
-	if (event.present) return { state: "unprovable" };
-	if (settings === void 0 || settings.enabled !== true) return { state: "disabled" };
-	const routes = parseRoutes(settings.allowedModels);
-	if (routes === void 0 || routes.length === 0) return { state: "unprovable" };
-	return {
-		state: "enabled",
-		allowedModels: routes
-	};
-}
-//#endregion
 //#region .build/host/role-notice.js
 const ROLE_NOTICE_PLUGIN = "dsh-llm-fallbacks";
 const ROLE_NOTICE_SOURCE_KIND = "llm-fallbacks-role-notice";
@@ -1346,7 +1307,7 @@ function declaredExecuteAsValues(prompt) {
 function canonicalizeRoleReference(raw) {
 	const trimmed = raw.trim();
 	const id = (trimmed.startsWith("@") ? trimmed.slice(1) : trimmed).trim();
-	if (id === "" || id === "inherit") return void 0;
+	if (id === "") return void 0;
 	return id;
 }
 function lookupDeclaredRole(id, roleIds) {
@@ -1444,48 +1405,32 @@ function installSubagentSeam(ctx, options) {
 			role,
 			at,
 			firstNoticePending: existing?.firstNoticePending ?? true,
-			...existing?.personaNotApplied === true || verdict.personaMissed === true ? { personaNotApplied: true } : {},
-			...existing?.virtualRouteInjected === true || verdict.virtualRouteInjected === true ? { virtualRouteInjected: true } : {}
+			...existing?.personaNotApplied === true || verdict.personaMissed === true ? { personaNotApplied: true } : {}
 		});
 	};
-	const explicitRoute = (request) => {
-		const provider = request?.agentOptions?.provider;
-		const model = request?.agentOptions?.model;
-		return typeof provider === "string" && provider !== "" && typeof model === "string" && model !== "" ? {
-			provider,
-			model
-		} : void 0;
+	const hasExplicitAgentOptions = (request) => {
+		const agentOptions = request?.agentOptions;
+		return typeof agentOptions?.provider === "string" || typeof agentOptions?.model === "string";
 	};
-	const injectRoute = (spec, role, agentId) => {
+	const injectRoleChain = (spec, role) => {
 		try {
 			if (options.source === void 0) return void 0;
-			const agentOptions = spec.request?.agentOptions;
-			if (typeof agentOptions?.provider === "string" || typeof agentOptions?.model === "string") return void 0;
+			if (hasExplicitAgentOptions(spec.request)) return void 0;
 			const config = options.source();
 			if (!isFallbackActive(config)) return void 0;
-			const policy = options.policyFor?.(agentId);
-			if (policy?.state === "unprovable") {
-				debug(`llm-fallbacks: subagent seam — model-selection policy is unprovable for "${agentId}"; not mounting the virtual chain route`);
-				return;
-			}
-			const chain = roleChainEntries(config.roles.list, config.rootChain, role);
-			const allowedModels = policy?.state === "enabled" ? policy.allowedModels : void 0;
-			const dispatchable = firstDispatchableExactHead(chain);
-			const head = allowedModels === void 0 ? dispatchable : firstDispatchableExactHead(chain, allowedModels);
-			if (head === void 0) {
-				if (allowedModels !== void 0 && dispatchable !== void 0) debug(`llm-fallbacks: subagent seam — no route of role "${role}" is on the subagent allowlist; not mounting the virtual chain route`);
+			const chainId = config.roles.list.find((entry) => entry.id === role)?.chain;
+			if (chainId === void 0 || chainId === "") return void 0;
+			if (!config.chains.some((chain) => chain.id === chainId)) {
+				debug(`llm-fallbacks: subagent seam — role "${role}" names undeclared chain "${chainId}"; the child inherits the delegating agent's route`);
 				return;
 			}
 			return {
-				request: {
-					...spec.request,
-					agentOptions: {
-						...agentOptions,
-						provider: FALLBACKS_PROVIDER$1,
-						model: FALLBACKS_CHAIN_MODEL
-					}
-				},
-				head
+				...spec.request,
+				agentOptions: {
+					...spec.request?.agentOptions,
+					provider: FALLBACKS_PROVIDER$1,
+					model: chainId
+				}
 			};
 		} catch (error) {
 			reportDegrade(error);
@@ -1511,7 +1456,7 @@ function installSubagentSeam(ctx, options) {
 	const endCorrelation = (key) => {
 		if (key !== void 0) pending.delete(key);
 	};
-	const resolveRoleAtSeam = (request) => {
+	const resolveSeamRole = (request) => {
 		try {
 			const prompt = promptTextOf(request?.prompt);
 			if (prompt.trim() === "") return void 0;
@@ -1577,7 +1522,7 @@ function installSubagentSeam(ctx, options) {
 		if (cached !== void 0) return cached;
 		const wrapper = Object.create(value);
 		wrapper.startActivation = (spec) => {
-			const role = resolveRoleAtSeam(spec?.request) ?? (typeof spec?.childId === "string" ? records.get(spec.childId)?.role : void 0);
+			const role = resolveSeamRole(spec?.request) ?? (typeof spec?.childId === "string" ? records.get(spec.childId)?.role : void 0);
 			if (role === void 0) return service.startActivation(spec);
 			const at = Date.now();
 			let effectiveSpec = spec;
@@ -1586,26 +1531,16 @@ function installSubagentSeam(ctx, options) {
 			try {
 				if (isLocalBackend(service, spec.provider)) {
 					reservedId = spec.childId ?? randomUUID();
-					const authorized = explicitRoute(spec.request);
-					const injected = injectRoute(spec, role, reservedId);
-					effectiveSpec = injected === void 0 ? reservedId === spec.childId ? spec : {
+					const stamped = spec.childId !== void 0 && records.has(spec.childId) ? void 0 : injectRoleChain(spec, role);
+					effectiveSpec = stamped === void 0 ? reservedId === spec.childId ? spec : {
 						...spec,
 						childId: reservedId
 					} : {
 						...spec,
 						childId: reservedId,
-						request: injected.request
+						request: stamped
 					};
-					recordChild(reservedId, role, at, { virtualRouteInjected: injected !== void 0 });
-					const head = injected?.head ?? authorized;
-					if (head !== void 0) options.chainHeads?.set(reservedId, {
-						at,
-						route: {
-							provider: head.provider,
-							model: head.model
-						},
-						source: injected === void 0 ? "authorized" : "injected"
-					});
+					recordChild(reservedId, role, at);
 				}
 			} catch (error) {
 				if (reservedId !== void 0) records.delete(reservedId);
@@ -1906,28 +1841,29 @@ var FallbackStateStore = class {
 //#endregion
 //#region .build/host/gateway.js
 const FALLBACKS_PROFILE_ENTRY = "llm-fallbacks";
-const SUBAGENT_POLICY_SETTINGS_NS = "subagent-model-selection-settings";
-const VIRTUAL_ALL_ROUTE = {
-	provider: "FallbacksChain",
-	model: "Auto"
-};
 const CONFIG_KEYS = {
 	triggerCodes: true,
-	rootChain: true,
+	chains: true,
 	roles: true,
 	cooldownMs: true,
 	revertPolicy: true,
 	maxSwitchesPerStep: true,
 	presets: true,
-	timeSlots: true,
 	tz: true,
 	recovery: true
 };
-const ROLES_KEYS = {
-	list: true,
-	rules: true
+const ROLES_KEYS = { list: true };
+const LEGACY_KEYS = new Set([
+	"enabled",
+	"rootChain",
+	"timeSlots"
+]);
+const CHAIN_KEYS = {
+	id: true,
+	label: true,
+	entries: true,
+	timeSlots: true
 };
-const LEGACY_KEYS = new Set(["enabled"]);
 const SLOT_ROW_KEYS = {
 	kind: true,
 	preset: true,
@@ -1942,12 +1878,10 @@ var FallbacksConfigGateway = class extends TypertRemoteService {
 	bridge;
 	seeds;
 	settings;
-	subagentPolicy;
-	constructor(ctx, bridge, seeds, subagentPolicy) {
+	constructor(ctx, bridge, seeds) {
 		super(ctx, "fallbacks");
 		this.bridge = bridge;
 		this.seeds = seeds;
-		this.subagentPolicy = subagentPolicy;
 		ctx.inject(["settings"], (sctx) => {
 			this.settings = sctx.settings;
 			return () => {
@@ -1961,11 +1895,10 @@ var FallbacksConfigGateway = class extends TypertRemoteService {
 	async set(patch) {
 		validateConfigPatch(patch);
 		if (Object.keys(patch).length === 0) return this.readResult();
-		const settings = this.settings;
-		if (settings === void 0) throw new Error("fallbacks: settings service is unavailable — configuration cannot be written");
-		const normalized = Object.fromEntries(Object.entries(patch).filter(([key, value]) => !LEGACY_KEYS.has(key) && value !== null));
-		if (Object.keys(normalized).length === 0) return this.readResult();
-		await settings.update(FALLBACKS_PROFILE_ENTRY, normalized);
+		if (this.settings === void 0) throw new Error("fallbacks: settings service is unavailable — configuration cannot be written");
+		const normalized = stripLegacyForWrite(Object.fromEntries(Object.entries(patch).filter(([, value]) => value !== null)));
+		if (Object.keys(normalized).length === 0 && Object.keys(patch).length === 0) return this.readResult();
+		await this.writeSection(normalized);
 		return this.readResult();
 	}
 	async reset() {
@@ -1982,40 +1915,23 @@ var FallbacksConfigGateway = class extends TypertRemoteService {
 			outcome
 		};
 	}
-	async syncAllowlist() {
-		const snapshot = this.subagentPolicy;
-		if (snapshot === void 0) throw new Error("fallbacks: subagent policy is unavailable — allowlist cannot be synced");
-		const { policy } = snapshot();
-		if (policy.state !== "enabled") throw new Error(`fallbacks: subagent policy is ${policy.state} — allowlist cannot be synced`);
-		const settings = this.settings;
-		if (settings === void 0) throw new Error("fallbacks: settings service is unavailable — configuration cannot be written");
-		const merged = mergedAllowlist(policy.allowedModels, this.bridge.source());
-		await settings.mutate(SUBAGENT_POLICY_SETTINGS_NS, [{
-			op: "set",
-			path: ["allowedModels"],
-			value: merged
-		}]);
-		return this.readResult();
-	}
 	readConfig(source = this.bridge.source()) {
+		const migrated = migrateLegacyConfig(source);
 		const wire = {};
 		for (const key of Object.keys(CONFIG_KEYS)) {
-			const value = source[key];
+			const value = migrated[key];
 			if (value === void 0) continue;
 			wire[key] = key === "roles" ? normalizeRoles(value) : value;
 		}
 		return wire;
 	}
 	readResult() {
-		const source = this.bridge.source();
-		const result = {
-			config: this.readConfig(source),
-			legacyKeys: detectLegacyKeys(source),
+		const raw = this.bridge.rawSource?.() ?? this.bridge.source();
+		return {
+			config: this.readConfig(this.bridge.source()),
+			legacyKeys: detectLegacyKeys(raw),
 			seeds: this.seeds.wireStatus(this.seedsIo())
 		};
-		const projected = projectSubagentPolicy(this.subagentPolicy);
-		if (projected !== void 0) result.subagentPolicy = projected;
-		return result;
 	}
 	seedsIo() {
 		const settings = this.settings;
@@ -2023,83 +1939,100 @@ var FallbacksConfigGateway = class extends TypertRemoteService {
 			read: () => this.bridge.source(),
 			writeRoles: (roles) => {
 				if (settings === void 0) throw new Error("fallbacks: settings service is unavailable — configuration cannot be written");
-				return settings.update(FALLBACKS_PROFILE_ENTRY, { roles });
+				return this.writeSection(stripLegacyForWrite({ roles }));
 			}
 		};
 	}
+	async writeSection(patch) {
+		const settings = this.settings;
+		if (settings === void 0) throw new Error("fallbacks: settings service is unavailable — configuration cannot be written");
+		await writeFallbacksSection(settings, patch);
+	}
 };
-function mergedAllowlist(allowedModels, source) {
-	const merged = [];
-	const seen = new Set();
-	const push = (route) => {
-		const key = `${route.provider}\0${route.model}`;
-		if (seen.has(key)) return;
-		seen.add(key);
-		merged.push({
-			provider: route.provider,
-			model: route.model
+async function writeFallbacksSection(settings, patch, ns = FALLBACKS_PROFILE_ENTRY) {
+	const stored = storedSection(settings, ns);
+	const cleaned = stripLegacyForWrite(patch);
+	const patchHasRoles = cleaned["roles"] !== void 0;
+	const removals = legacySectionRemovals(stored).filter((op) => !(patchHasRoles && op.path[0] === "roles"));
+	const ops = [];
+	const storedChains = stored?.["chains"];
+	const storedHasUsableChains = Array.isArray(storedChains) && storedChains.length > 0;
+	if (cleaned["chains"] === void 0 && !storedHasUsableChains && stored !== void 0 && (Object.hasOwn(stored, "rootChain") || Object.hasOwn(stored, "timeSlots"))) {
+		const migrated = migrateLegacyConfig({
+			...stored,
+			...cleaned
 		});
-	};
-	for (const route of allowedModels) push(route);
-	const entries = [...source.roles.list.flatMap((role) => role.chain ?? []), ...source.rootChain];
-	for (const entry of entries) {
-		let parsed;
-		try {
-			parsed = parseSelector(entry);
-		} catch {
-			continue;
-		}
-		if (parsed.model === void 0) continue;
-		push({
-			provider: parsed.provider,
-			model: parsed.model
+		if (migrated.chains.length > 0) ops.push({
+			op: "set",
+			path: ["chains"],
+			value: migrated.chains
 		});
 	}
-	push(VIRTUAL_ALL_ROUTE);
-	return merged;
+	for (const [key, value] of Object.entries(cleaned)) ops.push({
+		op: "set",
+		path: [key],
+		value
+	});
+	ops.push(...removals);
+	if (ops.length > 0) await settings.mutate(ns, ops);
+}
+function storedSection(settings, ns) {
+	const user = settings.describe().find((candidate) => candidate.ns === ns)?.user;
+	if (typeof user !== "object" || user === null || Array.isArray(user)) return void 0;
+	return user;
+}
+function legacySectionRemovals(section) {
+	if (section === void 0) return [];
+	const removals = [];
+	for (const key of LEGACY_KEYS) if (Object.hasOwn(section, key)) removals.push({
+		op: "unset",
+		path: [key]
+	});
+	const roles = section["roles"];
+	if (typeof roles !== "object" || roles === null || Array.isArray(roles)) return removals;
+	const declared = roles;
+	for (const key of ["rules", "default"]) if (Object.hasOwn(declared, key)) removals.push({
+		op: "unset",
+		path: ["roles", key]
+	});
+	if (!Array.isArray(declared["list"])) return removals;
+	if (declared["list"].some((row) => typeof row === "object" && row !== null && !Array.isArray(row) && (Object.hasOwn(row, "fallback") || Array.isArray(row["chain"])))) {
+		const cleanedRoles = normalizeRoles({ list: declared["list"] });
+		removals.push({
+			op: "set",
+			path: ["roles", "list"],
+			value: cleanedRoles["list"] ?? []
+		});
+	}
+	return removals;
 }
-function projectSubagentPolicy(snapshot) {
-	if (snapshot === void 0) return void 0;
-	let captured;
-	try {
-		captured = snapshot();
-	} catch {
-		return { state: "unprovable" };
-	}
-	const { policy, head, blockedAttempt } = captured;
-	if (policy.state === "disabled") return { state: "disabled" };
-	if (policy.state === "unprovable") return { state: "unprovable" };
-	const wire = {
-		state: "enabled",
-		allowedModels: policy.allowedModels.map((route) => ({
-			provider: route.provider,
-			model: route.model
-		}))
-	};
-	if (head !== void 0) wire.head = {
-		route: {
-			provider: head.route.provider,
-			model: head.route.model
-		},
-		source: head.source
-	};
-	if (blockedAttempt !== void 0) wire.blockedAttempt = {
-		at: blockedAttempt.at,
-		route: {
-			provider: blockedAttempt.route.provider,
-			model: blockedAttempt.route.model
-		},
-		reason: blockedAttempt.reason
-	};
-	return wire;
+function stripLegacyForWrite(value) {
+	const cleaned = {};
+	for (const [key, member] of Object.entries(value)) {
+		if (LEGACY_KEYS.has(key)) continue;
+		if (key === "roles") {
+			const roles = normalizeRoles(member);
+			if (roles !== void 0) cleaned[key] = roles;
+			continue;
+		}
+		cleaned[key] = member;
+	}
+	return cleaned;
 }
 function normalizeRoles(value) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) return value;
 	const roles = {};
-	for (const field of ["list", "rules"]) {
-		const member = value[field];
-		if (member !== void 0) roles[field] = member;
-	}
+	const list = value["list"];
+	if (Array.isArray(list)) roles["list"] = list.map((item) => {
+		if (typeof item !== "object" || item === null || Array.isArray(item)) return item;
+		const row = {};
+		for (const [key, member] of Object.entries(item)) {
+			if (key === "fallback") continue;
+			if (key === "chain" && Array.isArray(member)) continue;
+			row[key] = member;
+		}
+		return row;
+	});
 	return roles;
 }
 function validateConfigPatch(patch) {
@@ -2112,17 +2045,28 @@ function validateConfigPatch(patch) {
 				for (const nestedKey of Object.keys(roles)) if (!Object.hasOwn(ROLES_KEYS, nestedKey)) throw new Error(`dsh-llm-fallbacks: unknown config key "roles.${nestedKey}"`);
 			}
 		}
-		if (key === "timeSlots") {
-			const rows = patch[key];
-			if (rows !== null && rows !== void 0) validateTimeSlotsPatch(rows);
-		}
-		if (key === "rootChain") {
-			const chain = patch[key];
-			if (chain !== null && chain !== void 0 && (!Array.isArray(chain) || !isAllDayConforming(chain))) throw new Error("dsh-llm-fallbacks: rootChain must end with exactly one official model (deepseek-official/deepseek-flash or deepseek-official/deepseek-v4-pro)");
-		}
+		if (key === "chains") validateChainsPatch(patch[key]);
 	}
 	Config(patch);
 }
+function validateChainsPatch(chains) {
+	if (!Array.isArray(chains)) throw new Error("dsh-llm-fallbacks: chains must be an array of named chains");
+	const seenIds = new Set();
+	chains.forEach((chain, index) => {
+		const at = `chains[${index}]`;
+		if (chain === null || typeof chain !== "object" || Array.isArray(chain)) throw new Error(`dsh-llm-fallbacks: ${at} must be a plain object`);
+		const record = chain;
+		for (const nestedKey of Object.keys(record)) if (!Object.hasOwn(CHAIN_KEYS, nestedKey)) throw new Error(`dsh-llm-fallbacks: unknown config key "${at}.${nestedKey}"`);
+		if (typeof record.id !== "string" || !CHAIN_ID_PATTERN.test(record.id)) throw new Error(`dsh-llm-fallbacks: ${at}.id must match /^[A-Za-z0-9][A-Za-z0-9-]{0,31}$/ (got ${JSON.stringify(record.id)})`);
+		if (seenIds.has(record.id)) throw new Error(`dsh-llm-fallbacks: ${at} duplicates chain id "${record.id}" — chain ids must be unique (case-sensitive)`);
+		seenIds.add(record.id);
+		if (typeof record.label !== "string") throw new Error(`dsh-llm-fallbacks: ${at}.label must be a string`);
+		const entries = record.entries;
+		if (entries !== void 0 && entries !== null && (!Array.isArray(entries) || entries.some((entry) => typeof entry !== "string"))) throw new Error(`dsh-llm-fallbacks: ${at}.entries must be a string array`);
+		if (Array.isArray(entries) && entries.length > 0 && !isAllDayConforming(entries)) throw new Error(`dsh-llm-fallbacks: ${at}.entries must end with exactly one official model (deepseek-official/deepseek-flash or deepseek-official/deepseek-v4-pro)`);
+		if (record.timeSlots !== void 0 && record.timeSlots !== null) validateTimeSlotsPatch(record.timeSlots);
+	});
+}
 function validateTimeSlotsPatch(rows) {
 	if (!Array.isArray(rows)) throw new Error("dsh-llm-fallbacks: timeSlots must be an array of slot rows");
 	const seenPresets = new Set();
@@ -2207,16 +2151,6 @@ function fallbacksTypertContribution() {
 					codec: { mode: "src-json" }
 				}],
 				result: { mode: "src-json" }
-			},
-			{
-				id: "dsh-llm-fallbacks#fallbacks/sync-allowlist",
-				service: "fallbacks",
-				namespace: "fallbacks",
-				method: "sync-allowlist",
-				implementation: "syncAllowlist",
-				invocation: { kind: "direct" },
-				parameters: [],
-				result: { mode: "src-json" }
 			}
 		]
 	};
@@ -2241,7 +2175,6 @@ const FALLBACKS_COMMAND_LOCALES = {
 		origin: "会话来源",
 		role: "角色",
 		chain: "链",
-		inheritRoot: "（inherit-root）",
 		chainNone: "未配置",
 		slot: "分时",
 		switches: "最近降级切换",
@@ -2260,16 +2193,16 @@ const FALLBACKS_COMMAND_LOCALES = {
 		configEnabled: "已启用",
 		configDisabled: "未启用",
 		configTriggerCodes: "触发码",
-		configRootChain: "根链",
+		configChains: "虚拟链",
 		configEmpty: "（空）",
-		configTimeSlots: "分时槽",
+		configChainItem: "{id}（{label}）: {entries}｜分时槽: {slots}",
 		configSlotPresetItem: "{preset}（chain: {n}, window {window}）",
 		configSlotPresetBare: "{preset}（chain: {n}）",
 		configSlotCustomItem: "custom {start}-{end}（chain: {n}）",
 		configTz: "时区",
 		configRoles: "角色",
-		configRoleItem: "{id}（chain: {n}）",
-		configRules: "角色规则",
+		configRoleItem: "{id}（指定降级链: {chain}）",
+		configRoleUnspecified: "未指定（沿用 dsh 默认）",
 		configCooldown: "冷却",
 		configRevert: "回主策略",
 		configMaxSwitches: "单次请求行走最大切换",
@@ -2294,7 +2227,6 @@ const FALLBACKS_COMMAND_LOCALES = {
 		origin: "Session origin",
 		role: "Role",
 		chain: "Chain",
-		inheritRoot: " (inherit-root)",
 		chainNone: "not configured",
 		slot: "Time slot",
 		switches: "Recent fallback switches",
@@ -2313,16 +2245,16 @@ const FALLBACKS_COMMAND_LOCALES = {
 		configEnabled: "enabled",
 		configDisabled: "disabled",
 		configTriggerCodes: "Trigger codes",
-		configRootChain: "Root chain",
+		configChains: "Chains",
 		configEmpty: "(empty)",
-		configTimeSlots: "Time slots",
+		configChainItem: "{id} ({label}): {entries} | slots: {slots}",
 		configSlotPresetItem: "{preset} (chain: {n}, window {window})",
 		configSlotPresetBare: "{preset} (chain: {n})",
 		configSlotCustomItem: "custom {start}-{end} (chain: {n})",
 		configTz: "TZ",
 		configRoles: "Roles",
-		configRoleItem: "{id} (chain: {n})",
-		configRules: "Rules",
+		configRoleItem: "{id} (specified chain: {chain})",
+		configRoleUnspecified: "not specified (dsh default)",
 		configCooldown: "Cooldown",
 		configRevert: "Revert",
 		configMaxSwitches: "Max switches per request walk",
@@ -2372,23 +2304,6 @@ function recentFallbacksSwitches(events, limit) {
 	}
 	return found;
 }
-function resolveChainForDiagnostic(roles, rootChain, role, warn = console.warn) {
-	if (role.trim() === "inherit") return {
-		chainRole: false,
-		chain: rootChain,
-		inherit: rootChain.length > 0
-	};
-	const roleDef = roles.find((declared) => declared.id.trim() === role.trim());
-	if (roleDef === void 0) warn(`llm-fallbacks: unknown role "${role}" — falling back to rootChain`);
-	const roleChain = roleDef?.chain ?? [];
-	const chain = roleChain.length > 0 ? roleChain : roleDef?.fallback === "none" ? [] : rootChain;
-	const inherit = rootChain.length > 0 && (roleDef === void 0 || roleDef.fallback !== "none");
-	return {
-		chainRole: roleChain.length > 0,
-		chain,
-		inherit
-	};
-}
 function formatSwitch(entry, t) {
 	const from = `${entry.from.provider}/${entry.from.model}`;
 	const to = `${entry.to.provider}/${entry.to.model}`;
@@ -2404,7 +2319,7 @@ function formatConfigList(items) {
 	return [...items.slice(0, 5), "…"].join(", ");
 }
 function formatConfigRoles(roles, t) {
-	const items = roles.slice(0, 5).map((role) => t.configRoleItem.replace("{id}", role.id).replace("{n}", String(role.chainCount)));
+	const items = roles.slice(0, 5).map((role) => t.configRoleItem.replace("{id}", role.id).replace("{chain}", role.chain === void 0 || role.chain === "" ? t.configRoleUnspecified : role.chain));
 	const list = items.length === 0 ? "" : `${items.join(", ")}${roles.length > 5 ? ", …" : ""}`;
 	return `${roles.length}${list.length === 0 ? "" : ` — ${list}`}`;
 }
@@ -2459,21 +2374,14 @@ function formatConfigTimeSlots(slots, t) {
 	const list = items.length === 0 ? "" : `${items.join(", ")}${slots.length > 5 ? ", …" : ""}`;
 	return `${slots.length}${list.length === 0 ? "" : ` — ${list}`}`;
 }
-function formatConfigRules(rules, t) {
-	const items = rules.slice(0, 5).map((rule) => `${rule.provider === "" ? "*" : rule.provider}/${rule.model === "" ? "*" : rule.model} → ${rule.role}`);
-	const list = items.length === 0 ? "" : `${items.join(", ")}${rules.length > 5 ? ", …" : ""}`;
-	return `${rules.length}${list.length === 0 ? "" : ` — ${list}`}`;
-}
 function fallbacksConfigText(summary, locale = "zh") {
 	const t = FALLBACKS_COMMAND_LOCALES[locale];
 	return [
 		`${t.configTitle}: ${summary.active ? t.configEnabled : t.configDisabled}`,
 		`${t.configTriggerCodes}: ${summary.triggerCodes.length === 0 ? t.configEmpty : formatConfigList(summary.triggerCodes)}`,
-		`${t.configRootChain}: ${summary.rootChain.length === 0 ? t.configEmpty : formatConfigList(summary.rootChain)}`,
-		`${t.configTimeSlots}: ${summary.timeSlots.length === 0 ? t.configEmpty : formatConfigTimeSlots(summary.timeSlots, t)}`,
+		...summary.chains.map((chain) => t.configChainItem.replace("{id}", chain.id).replace("{label}", chain.label).replace("{entries}", chain.entries.length === 0 ? t.configEmpty : chain.entries.join(" → ")).replace("{slots}", chain.timeSlots.length === 0 ? t.configEmpty : formatConfigTimeSlots(chain.timeSlots, t))),
 		`${t.configTz}: ${summary.tz}`,
 		`${t.configRoles}: ${formatConfigRoles(summary.roles, t)}`,
-		`${t.configRules}: ${summary.rules.length === 0 ? t.configEmpty : formatConfigRules(summary.rules, t)}`,
 		`${t.configCooldown}: ${summary.cooldownMs} ms`,
 		`${t.configRevert}: ${summary.revertPolicy}`,
 		`${t.configMaxSwitches}: ${summary.maxSwitchesPerStep}`,
@@ -2487,13 +2395,13 @@ function fallbacksCommandText(snapshot, locale = "zh") {
 	const t = FALLBACKS_COMMAND_LOCALES[locale];
 	const lines = [t.title];
 	lines.push(`${t.origin}: ${snapshot.origin}`);
-	lines.push(`${t.role}: ${snapshot.role}`);
-	if (snapshot.chain.length === 0) lines.push(`${t.chain}: ${t.chainNone}`);
-	else {
-		const suffix = snapshot.inherit ? t.inheritRoot : "";
-		lines.push(`${t.chain}: ${snapshot.chain.join(" → ")}${suffix}`);
+	const roleChain = snapshot.roleChain === void 0 || snapshot.roleChain === "" ? t.configRoleUnspecified : snapshot.roleChain;
+	lines.push(`${t.role}: ${snapshot.role === "" ? t.configRoleUnspecified : snapshot.role}（${roleChain}）`);
+	if (snapshot.chains.length === 0) lines.push(`${t.chain}: ${t.chainNone}`);
+	else for (const chain of snapshot.chains) {
+		const marker = chain.selected ? " ●" : "";
+		lines.push(`${t.chain}${marker}: ${chain.id}（${chain.label}）: ${chain.entries.length === 0 ? t.chainNone : chain.entries.join(" → ")}｜${t.slot}: ${chain.slotLabel}`);
 	}
-	lines.push(`${t.slot}: ${snapshot.slot.label}`);
 	if (snapshot.switches.length === 0) lines.push(`${t.switches}: ${t.switchesNone}`);
 	else {
 		lines.push(`${t.switches} (${snapshot.switches.length}):`);
@@ -2588,9 +2496,7 @@ var FallbacksSeedManager = class {
 			});
 			outcome.applied.push(seed.id);
 		}
-		const config = io.read();
-		const currentList = roleRows(config);
-		const currentRules = roleRules(config);
+		const currentList = roleRows(io.read());
 		const candidate = new Map(this.registry);
 		if (entries.size === 0) candidate.delete(source);
 		else candidate.set(source, {
@@ -2607,10 +2513,7 @@ var FallbacksSeedManager = class {
 		}
 		const newList = materialize(currentList, incoming, prior, outcome.conflicts);
 		for (const conflict of outcome.conflicts) this.logger.warn(`llm-fallbacks: seeds: persona-source conflict for seed id ${JSON.stringify(conflict.id)} — operator row persona kept (never overwritten)`);
-		const computed = {
-			list: newList,
-			rules: currentRules
-		};
+		const computed = { list: newList };
 		if (!deepEqual(newList, currentList)) await io.writeRoles(computed);
 		if (entries.size === 0) this.registry.delete(source);
 		else this.registry.set(source, {
@@ -2654,8 +2557,7 @@ var FallbacksSeedManager = class {
 				source: seeded ? declared.source : "user"
 			};
 			if (seeded) effective.seedPersona = declared.persona;
-			if (row.chain !== void 0) effective.chain = row.chain;
-			if (row.fallback !== void 0) effective.fallback = row.fallback;
+			if (row.chain !== void 0 && row.chain !== "") effective.chain = row.chain;
 			return effective;
 		}) };
 	}
@@ -2679,9 +2581,7 @@ var FallbacksSeedManager = class {
 			reverted: false,
 			reason: "not-seeded"
 		};
-		const config = io.read();
-		const rows = roleRows(config);
-		const rules = roleRules(config);
+		const rows = roleRows(io.read());
 		const index = rows.findIndex((row) => row.id.trim() === seedId);
 		if (index === -1) return {
 			reverted: false,
@@ -2695,10 +2595,7 @@ var FallbacksSeedManager = class {
 			...row,
 			persona: declared.persona
 		} : row);
-		await io.writeRoles({
-			list: nextList,
-			rules
-		});
+		await io.writeRoles({ list: nextList });
 		return {
 			reverted: true,
 			persona: declared.persona
@@ -2767,10 +2664,6 @@ function roleRows(config) {
 	const list = config.roles?.list;
 	return Array.isArray(list) ? list : [];
 }
-function roleRules(config) {
-	const rules = config.roles?.rules;
-	return Array.isArray(rules) ? rules : [];
-}
 function deepEqual(a, b) {
 	if (a === b) return true;
 	if (typeof a !== "object" || typeof b !== "object" || a === null || b === null) return false;
@@ -2919,8 +2812,8 @@ function buildFallbacksTuiSection() {
 		ns: FALLBACKS_TUI_SECTION_NS,
 		title: "fallbacks",
 		descriptions: {
-			zh: "回退设置：降级链、分时切换、角色与高级选项（与 Web 设置卡片完全一致）。仅选中 FallbacksChain/Auto 的会话会执行降级链；选择真实模型的会话没有插件降级。",
-			en: "Fallback settings: degradation chains, time slots, roles, and advanced options (full parity with the web settings card). Only sessions on FallbacksChain/Auto walk a chain — a real-model selection gets no plugin fallback."
+			zh: "回退设置：虚拟链（默认降级链 + 链尾 + 分时槽）、角色与高级选项（与 Web 设置卡片完全一致）。主代理需选中 FallbacksChain/<链 id> 才会执行降级链；子代理沿用派发代理的链。",
+			en: "Fallback settings: named chains (default degradation chain + tail + time slots), roles, and advanced options (full parity with the web settings card). The main agent must select FallbacksChain/<chain id> to walk a chain; subagents inherit the delegating agent's chain."
 		},
 		groups: [
 			{
@@ -3016,63 +2909,34 @@ function buildFallbacksTuiSection() {
 				parse: tzParse
 			},
 			{
-				path: ["rootChain"],
-				label: "Root chain (JSON)",
-				descriptions: {
-					zh: "根降级链（JSON）",
-					en: "Root chain (JSON)"
-				},
-				hint: "JSON array of model selectors; the last entry must be an official model (deepseek-official/deepseek-flash or deepseek-official/deepseek-v4-pro). Pro is available in the catalog — the settings card no longer disables it.",
-				hintDescriptions: {
-					zh: "模型选择器 JSON 数组；末项必须是官方模型（deepseek-official/deepseek-flash 或 deepseek-official/deepseek-v4-pro）。Pro 已在目录中提供——设置卡中不再禁用。",
-					en: "JSON array of model selectors; the last entry must be an official model (deepseek-official/deepseek-flash or deepseek-official/deepseek-v4-pro). Pro is available in the catalog — the settings card no longer disables it."
-				},
-				group: "chain",
-				kind: "text",
-				format: jsonFieldFormat,
-				parse: jsonFieldParse((parsed) => ({ rootChain: parsed }))
-			},
-			{
-				path: ["timeSlots"],
-				label: "Time slots (JSON)",
+				path: ["chains"],
+				label: "Chains (JSON)",
 				descriptions: {
-					zh: "分时切换（JSON）",
-					en: "Time slots (JSON)"
+					zh: "虚拟链（JSON）",
+					en: "Chains (JSON)"
 				},
-				hint: "JSON array of slot rows (kind: preset|custom).",
+				hint: "JSON array of named chains ({ id, label, entries, timeSlots }); each entries array must end with an official model (deepseek-official/deepseek-flash or deepseek-official/deepseek-v4-pro).",
 				hintDescriptions: {
-					zh: "分时行 JSON 数组（kind: preset|custom）。",
-					en: "JSON array of slot rows (kind: preset|custom)."
+					zh: "命名虚拟链 JSON 数组（{ id, label, entries, timeSlots }）；每条 entries 末项必须是官方模型（deepseek-official/deepseek-flash 或 deepseek-official/deepseek-v4-pro）。",
+					en: "JSON array of named chains ({ id, label, entries, timeSlots }); each entries array must end with an official model (deepseek-official/deepseek-flash or deepseek-official/deepseek-v4-pro)."
 				},
 				group: "chain",
 				kind: "text",
 				format: jsonFieldFormat,
-				parse: jsonFieldParse((parsed) => ({ timeSlots: parsed }))
+				parse: jsonFieldParse((parsed) => ({ chains: parsed }))
 			},
 			{
 				path: ["roles", "list"],
 				label: "Roles (JSON)",
 				descriptions: {
-					zh: "角色列表（JSON）",
-					en: "Roles (JSON)"
+					zh: "角色列表（JSON，chain 为指定降级链指针）",
+					en: "Roles (JSON; chain is the specified-chain pointer)"
 				},
 				group: "roles",
 				kind: "text",
 				format: jsonFieldFormat,
 				parse: jsonFieldParse((parsed) => ({ roles: { list: parsed } }))
 			},
-			{
-				path: ["roles", "rules"],
-				label: "Role rules (JSON)",
-				descriptions: {
-					zh: "角色规则（JSON）",
-					en: "Role rules (JSON)"
-				},
-				group: "roles",
-				kind: "text",
-				format: jsonFieldFormat,
-				parse: jsonFieldParse((parsed) => ({ roles: { rules: parsed } }))
-			},
 			{
 				path: ["cooldownMs"],
 				label: "Cooldown (ms)",
@@ -3144,65 +3008,6 @@ const stateStores = new WeakMap();
 function stateStore(ctx) {
 	return stateStores.get(ctx);
 }
-const blockedAttemptStores = new WeakMap();
-function blockedAttempts(ctx) {
-	return blockedAttemptStores.get(ctx);
-}
-const chainHeadStores = new WeakMap();
-function chainHeads(ctx) {
-	return chainHeadStores.get(ctx);
-}
-function latestByAt(map) {
-	let latest;
-	for (const value of map.values()) if (latest === void 0 || value.at >= latest.at) latest = value;
-	return latest;
-}
-function agentChainView(ctx, sessionId) {
-	if (sessionId === void 0) return void 0;
-	const agent = ctx.get("agents")?.get(sessionId);
-	if (agent === void 0) return void 0;
-	const header = agent.session?.header;
-	const route = agent.options;
-	return {
-		origin: header?.origin ?? "root",
-		...header?.agentPreset === void 0 ? {} : { agentPreset: header.agentPreset },
-		...typeof route?.provider === "string" && typeof route?.model === "string" ? { optionsRoute: {
-			provider: route.provider,
-			model: route.model
-		} } : {},
-		sessionId
-	};
-}
-function readSubagentSettings(ctx) {
-	const settings = ctx.get("settings");
-	if (settings === void 0) return void 0;
-	const descriptor = settings.describe().find((d) => d.ns === SUBAGENT_POLICY_SETTINGS_NS);
-	if (descriptor === void 0) return void 0;
-	const policy = policySettingsFrom(descriptor.value);
-	if (policy === void 0) throw new Error("subagent model-selection settings are malformed");
-	return policy;
-}
-function readGuardedPolicySettings(ctx, agentId, lastKnown, warn) {
-	try {
-		const settings = readSubagentSettings(ctx);
-		if (settings === void 0) return {
-			ok: true,
-			settings: lastKnown.get(agentId)
-		};
-		lastKnown.set(agentId, settings);
-		return {
-			ok: true,
-			settings
-		};
-	} catch (error) {
-		warn("llm-fallbacks: agent \"%s\" subagent model-selection settings read failed — %s", agentId, error?.message ?? String(error));
-		const known = lastKnown.get(agentId);
-		return known === void 0 ? { ok: false } : {
-			ok: true,
-			settings: known
-		};
-	}
-}
 function isLiveConfigRef(value) {
 	return typeof value === "object" && value !== null && typeof value.get === "function";
 }
@@ -3230,12 +3035,11 @@ function apply(ctx, config = defaultFallbacksConfig) {
 		throw new Error(seedsSettingsUnavailable);
 	};
 	ctx.inject(["settings"], (sctx) => {
-		writeRoles = (roles) => sctx.settings.update(FALLBACKS_PROFILE_ENTRY, { roles });
+		writeRoles = (roles) => writeFallbacksSection(sctx.settings, { roles });
 		try {
 			sctx.provide("llm-fallbacks", {
 				name: "llm-fallbacks",
 				version,
-				resolveRole,
 				resolveChain,
 				validateFallbacksConfig,
 				detectLegacyKeys,
@@ -3262,14 +3066,15 @@ function apply(ctx, config = defaultFallbacksConfig) {
 	};
 	let serviceOwned = ctx.get("llm-fallbacks") === void 0;
 	let settingsComposed;
-	let source = () => {
+	const rawSource = () => {
 		if (isLiveConfigRef(config)) return config.get();
 		if (settingsComposed !== void 0) return settingsComposed;
 		return entry;
 	};
-	validateFallbacksConfig(entry, logger);
-	const legacyKeys = detectLegacyKeys(source());
-	if (legacyKeys.length > 0) logger.warn("llm-fallbacks: legacy config keys detected (chains/roles.default/undeclared role refs); see docs/configuration.md migration table — %o", legacyKeys);
+	const source = () => migrateLegacyConfig(rawSource());
+	validateFallbacksConfig(migrateLegacyConfig(entry), logger);
+	const legacyKeys = detectLegacyKeys(rawSource());
+	if (legacyKeys.length > 0) logger.warn("llm-fallbacks: legacy config keys detected (v1 two-block keys); see docs/configuration.md migration table — %o", legacyKeys);
 	let roleIds = new Map(entry.roles.list.map((role) => [role.id.trim(), role.id]));
 	ctx.inject(["settings"], (sctx) => {
 		const settings = sctx.settings;
@@ -3291,23 +3096,14 @@ function apply(ctx, config = defaultFallbacksConfig) {
 			settingsComposed = void 0;
 		};
 	});
-	const bridge = { source: () => source() };
-	const chainHeadMap = new Map();
-	chainHeadStores.set(ctx, chainHeadMap);
-	const blockedAttemptMap = new Map();
-	blockedAttemptStores.set(ctx, blockedAttemptMap);
-	const lastKnownPolicySettings = new Map();
-	const policyFor = (sessionId) => {
-		const settingsRead = readGuardedPolicySettings(ctx, sessionId, lastKnownPolicySettings, logger.warn);
-		if (!settingsRead.ok) return { state: "unprovable" };
-		return effectivePolicy(readSessionPolicyEvent(ctx.get("agents")?.get(sessionId)?.session.snapshotEvents() ?? []), settingsRead.settings);
+	const bridge = {
+		source: () => source(),
+		rawSource: () => rawSource()
 	};
 	const subagentSeam = installSubagentSeam(ctx, {
 		roleIds: () => roleIds,
 		roles: () => source().roles.list,
 		source: () => source(),
-		policyFor,
-		chainHeads: chainHeadMap,
 		debug: (message) => logger.debug(message)
 	});
 	if (!subagentSeam.ownsWrapper) ctx.logger("llm-fallbacks").debug("subagent role seam wrapper already installed on this context root — this fiber registers the notice emitter and the projection unit only (multi-fiber dedupe)");
@@ -3317,20 +3113,7 @@ function apply(ctx, config = defaultFallbacksConfig) {
 		debug: (message) => logger.debug(message)
 	});
 	try {
-		new FallbacksConfigGateway(ctx, bridge, seeds, () => {
-			try {
-				return {
-					policy: effectivePolicy({
-						ok: false,
-						present: false
-					}, readSubagentSettings(ctx)),
-					head: latestByAt(chainHeadMap),
-					blockedAttempt: latestByAt(blockedAttemptMap)
-				};
-			} catch {
-				return { policy: { state: "unprovable" } };
-			}
-		});
+		new FallbacksConfigGateway(ctx, bridge, seeds);
 	} catch (error) {
 		if (!(error instanceof Error) || !error.message.includes("has been registered")) throw error;
 		ctx.logger("llm-fallbacks").debug("fallbacks gateway already registered — no gateway on this fiber (multi-fiber dedupe)");
@@ -3350,49 +3133,44 @@ function apply(ctx, config = defaultFallbacksConfig) {
 	const walkDeps = {
 		readConfig: () => source(),
 		getLlm: () => ctx.get("llm"),
-		resolveAgentView: (sessionId) => agentChainView(ctx, sessionId),
 		states,
-		roleIds: () => roleIds,
-		seamRecord: (sessionId) => subagentSeam.records.get(sessionId),
-		policyFor,
-		recordBlocked: (sessionId, route, reason) => {
-			blockedAttemptMap.set(sessionId, {
-				at: Date.now(),
-				route,
-				reason
-			});
-		},
 		slotWinners,
 		log: logger
 	};
 	const reconcileFallbacksAdapter = installFallbacksAdapter(ctx, () => source(), (options) => walkChain(walkDeps, options));
 	ctx.on("agent/disposed", ({ agent }) => {
 		states.delete(agent.id);
-		slotWinners.delete(agent.id);
-		blockedAttemptMap.delete(agent.id);
-		chainHeadMap.delete(agent.id);
+		const markerPrefix = slotMarkerPrefix(agent.id);
+		for (const key of slotWinners.keys()) if (key.startsWith(markerPrefix)) slotWinners.delete(key);
 		subagentSeam.records.delete(agent.id);
-		lastKnownPolicySettings.delete(agent.id);
 	});
 	ctx.effect(() => () => {
 		states.clear();
 		slotWinners.clear();
-		blockedAttemptMap.clear();
-		chainHeadMap.clear();
-		lastKnownPolicySettings.clear();
 	}, "llm-fallbacks: clear per-agent state");
 	const fallbacksCommandController = {
 		getSnapshot(agent) {
 			const config = source();
-			const role = subagentSeam.records.get(agent.id)?.role ?? resolveRole(agent, config.roles.rules, roleIds, logger.warn, servedRouteOf(config, agent.options, new Date()));
 			const state = states.peek(agent.id);
 			const recovery = config.recovery ?? "timer";
 			if (state !== void 0 && recovery === "half-open") states.syncRecovery(state, Date.now(), recovery);
+			const roleRecord = subagentSeam.records.get(agent.id);
+			const role = roleRecord?.role ?? "";
+			const roleChain = roleRecord === void 0 ? void 0 : source().roles.list.find((entry) => entry.id === role)?.chain;
+			const selectedChainId = agent.options?.provider === "FallbacksChain" ? agent.options?.model : void 0;
+			const now = new Date();
+			const chains = source().chains.map((chain) => ({
+				id: chain.id,
+				label: chain.label,
+				entries: chain.entries,
+				slotLabel: resolveSlotState(chain, now, source().tz ?? "Asia/Shanghai").label,
+				selected: chain.id === selectedChainId
+			}));
 			return {
 				origin: agent.session.header?.origin ?? "root",
 				role,
-				...resolveChainForDiagnostic(config.roles.list, config.rootChain, role, logger.warn),
-				slot: resolveSlotState(config, new Date(), config.tz ?? "Asia/Shanghai"),
+				...roleChain === void 0 ? {} : { roleChain },
+				chains,
 				switches: recentFallbacksSwitches(agent.session.snapshotEvents(), 5),
 				cooldown: state === void 0 ? [] : recovery === "half-open" ? [...state.cooldown.snapshot(), ...state.recovery.halfOpenEntries().map((entry) => ({
 					key: entry.key,
@@ -3406,25 +3184,24 @@ function apply(ctx, config = defaultFallbacksConfig) {
 			return {
 				active: isFallbackActive(config),
 				triggerCodes: config.triggerCodes,
-				rootChain: config.rootChain,
-				timeSlots: (config.timeSlots ?? []).map((row) => row.kind === "preset" ? {
-					preset: row.preset,
-					chainCount: (row.chain ?? []).length
-				} : {
-					start: row.start,
-					end: row.end,
-					days: row.days,
-					chainCount: (row.chain ?? []).length
-				}),
+				chains: config.chains.map((chain) => ({
+					id: chain.id,
+					label: chain.label,
+					entries: Array.isArray(chain.entries) ? chain.entries : [],
+					timeSlots: (chain.timeSlots ?? []).map((row) => row.kind === "preset" ? {
+						preset: row.preset,
+						chainCount: (row.chain ?? []).length
+					} : {
+						start: row.start,
+						end: row.end,
+						days: row.days,
+						chainCount: (row.chain ?? []).length
+					})
+				})),
 				tz: config.tz ?? "Asia/Shanghai",
 				roles: config.roles.list.map((role) => ({
 					id: role.id,
-					chainCount: role.chain?.length ?? 0
-				})),
-				rules: config.roles.rules.map((rule) => ({
-					provider: rule.provider ?? "",
-					model: rule.model ?? "",
-					role: rule.role
+					chain: role.chain
 				})),
 				cooldownMs: config.cooldownMs,
 				revertPolicy: config.revertPolicy,
@@ -3455,4 +3232,4 @@ function apply(ctx, config = defaultFallbacksConfig) {
 	});
 }
 //#endregion
-export { Config, FallbacksSeedManager, INHERIT_ROLE_ID, ROLE_ID_PATTERN, ROLE_PROJECTION_KEY, SelectorError, annotateCandidates, apply, blockedAttempts, chainHeads, createCandidateFilter, defaultFallbacksConfig, detectLegacyKeys, hasWildcardEntry, name, parseSelector, presetRoles, provide, readRoleProjectionValue, resolveCandidate, resolveChain, resolveChainViews, resolveRole, selectCandidates, stateStore, validateFallbacksConfig };
+export { CHAIN_ID_PATTERN, Config, FallbacksSeedManager, INHERIT_ROLE_ID, ROLE_ID_PATTERN, ROLE_PROJECTION_KEY, SelectorError, annotateCandidates, apply, createCandidateFilter, defaultFallbacksConfig, detectLegacyKeys, hasWildcardEntry, name, parseSelector, presetRoles, provide, readRoleProjectionValue, resolveCandidate, resolveChain, resolveChainViews, selectCandidates, stateStore, validateFallbacksConfig };