dsh-model-switch 0.4.17 → 0.4.19

package/CHANGELOG.md

@@ -1,3 +1,24 @@
+## v0.4.19
+
+Plan Review gains a **Set as goal and run** action: it arms the reviewed Plan as the session's goal and only then answers it, so `dsh-goal-round-driver` carries the Plan after plan mode exits.
+
+- The goal is set before the answer, matching the card's existing commit-then-answer order; a refusal keeps the review pending and reports the Host's own wire code.
+- An unfinished goal is replaced through `get` + `clear` + `create` rather than edited, so a new Plan starts with a fresh round cap, and the card says it replaced the previous goal.
+- The goal face is resolved per render (`ctx.get('remote.goals', false)`) instead of listed in the static client `inject`, so a deployment that mounts no `@deepseek-ai/dsh-goal` keeps loading this plugin and the action disables itself with an explicit reason while the other three actions keep working. `@deepseek-ai/dsh-goal` is declared as an optional peer.
+- The objective is the Plan's trimmed markdown. The plugin stores no goal state, owns no part of the goal domain, and schedules no rounds.
+- Records the seam in `docs/seam-gap.md` (the released `remote.goals.create` exists while DSH's own goal surface deliberately omits creation) and the action in PRODUCT.md and both READMEs.
+
+## v0.4.18
+
+Declare official DSH `0.2.0-rc.2` compatible in `package.json#dsh.compatibility.dshReleases`.
+
+Evidence, in the order this repository's compatibility policy requires:
+
+- **Public API review:** the 0.2.x Host renamed the pending-question withdrawal verb (`PendingQuestion.cancel()` → `dismiss()`), fires `session.selectModel`'s deployment-default write without awaiting it, and reports a refused `ModelDirectory.select` as a returned `{ ok: false }` value instead of throwing. Each difference broke v0.4.16, and each is fixed in v0.4.17.
+- **Tests and build:** `pnpm run check` green — `tsc` + `tsdown`, the full vitest suite, and the pack gate against a real tarball.
+- **Lab plane:** profile composition `exit 0` with no skipped bundle, Host boot on port 3082 with the plugin's capability RPC answering, and the npm-installed build booting on port 3085 with its client bundle served.
+- **Live desktop verification on 0.2.0-rc.2:** all three Plan Review actions exercised against a real session — Discuss withdraws the takeover and returns the composer; Reject delivers typed feedback verbatim as the answer's `custom` text; Confirm commits a different execution model, approves the plan, and restores the Main default to its pre-switch value.
+
 ## v0.4.17
 
 First release published to the npm registry, so `dsh plugin --profile <name> add dsh-model-switch` installs prebuilt code without a git build authorization. Publishing builds `lib/` through `prepublishOnly`, and `pnpm run check` now runs its pack gate on Windows as well.

package/PRODUCT.md

@@ -10,7 +10,7 @@
 - **Vision:** excluded. Model Switch exposes no Vision setting, does not shadow `read_image`, and does not preprocess chat attachments.
 - **Image Router:** owns a new, uniquely named stable `generate_image` tool. It selects the configured Codex or Grok adapter/model at execution time, rejects backend-incompatible fields, and returns normalized image metadata. Existing provider-specific image tools remain available as rollback paths.
 - **Composer Picker:** replaces the composer model seat with a suffix-grouped Model / Effort / Context / Fast / Thinking picker and submits through the official Model Directory. Variant changes preserve an effort only when the target catalog row supports it, otherwise they use the target default or omit effort. Picker changes are session-local. A submitted prompt reserves the selected runtime immediately (composer submitting, pending first turn, or running). Native Antigravity keeps its models and effort; DSH keeps LLM-provider choices and disables Agent providers. After a successful native binding, other groups stay disabled. Cancel without a binding releases the reservation; existing DSH history still cannot convert onto an External Agent. On a Host version that also persists session selection as the deployment default, the plugin restores the pre-switch Main default through the public Settings RPC with a revision fence; a concurrent Settings-page edit wins.
-- **Plan Review:** intercepts the official `plan-review` composer takeover with a header execution-model picker and right-aligned Discuss in chat / Reject / Confirm actions. Confirm commits the selected model before answering; a refused commit leaves the review pending and retryable, while a deployment default this plugin could not restore is announced after the answer instead of holding the human's decision back. Reject carries optional human feedback as the answer's own `custom` text, which plan mode reports to the model. Discuss in chat withdraws the takeover through the Host's own verb — `dismiss()` where the Host publishes it, `cancel()` on the older generation — and names the Host when neither seam exists, so a settled review is never a dead end. The same runtime reservation applies.
+- **Plan Review:** intercepts the official `plan-review` composer takeover with a header execution-model picker and right-aligned Discuss in chat / Reject / Set as goal and run / Confirm actions. Confirm commits the selected model before answering; a refused commit leaves the review pending and retryable, while a deployment default this plugin could not restore is announced after the answer instead of holding the human's decision back. Reject carries optional human feedback as the answer's own `custom` text, which plan mode reports to the model. **Set as goal and run** arms this Plan as the session's goal through the released `remote.goals.create` — replacing an unfinished goal with `get` + `clear` first so the new Plan receives a fresh round cap — and only then answers, so `dsh-goal-round-driver` carries the Plan after plan mode exits. The goal is set before the answer, a refusal keeps the review pending and retryable, and a deployment that mounts no goal service disables the action with an explicit reason; the plugin stores no goal state, schedules no rounds, and owns no part of the goal domain. Discuss in chat withdraws the takeover through the Host's own verb — `dismiss()` where the Host publishes it, `cancel()` on the older generation — and names the Host when neither seam exists, so a settled review is never a dead end. The same runtime reservation applies.
 
 Model choices are capability-driven. Invalid, unavailable, or unsupported selections remain visible to configuration surfaces and fail loudly at use; routing never silently falls back.
 

package/README.md

@@ -79,6 +79,8 @@ Plan Review owns an execution-model draft separate from Main. **Confirm** first
 
 **Reject** sends the option the asker offered, and any text typed in the card's feedback field as the answer's own `custom` text — plan mode reports that text back to the model as the reason to keep planning, so a rejection can carry what to change. **Discuss in chat** withdraws the takeover so the composer returns and the human speaks in their own words; it uses the Host's `dismiss()` where published and the older generation's `cancel()` otherwise, and names the Host when neither exists. Answering a settled review closes Confirm and Reject, while Discuss and the reload affordance stay reachable so the card always has a way back. Failures keep their wire code (`session/writer-held: …`) visible instead of a bare localized sentence.
 
+**Set as goal and run** arms this Plan as the session's goal and only then answers it, so `dsh-goal-round-driver` keeps the Plan moving after plan mode exits. It calls the released `remote.goals.create`; when a non-complete goal already exists it clears that one first so the new Plan starts with a fresh round cap, and says so in the card. A refusal keeps the review pending with its wire code (`GOAL_AGENT_NOT_LIVE: …`), and a deployment that mounts no goal service disables the button with an explicit reason while the other three actions keep working. The objective is the Plan's full markdown, trimmed — the goal domain imposes no length limit, and the objective rides along as model-visible context every round, so a long Plan costs tokens on each continuation.
+
 ![Plan Review with an execution-model picker](docs/screenshots/plan-review.png)
 
 ## Send-time context protection
@@ -109,7 +111,7 @@ A packed tarball installs the same build without a registry:
 dsh plugin --profile web add --force ./dsh-model-switch-0.4.17.tgz
 ```
 
-Then install only the provider adapters you use. This release was checked against official DeepSeek Harness `0.1.7-rc.2`:
+Then install only the provider adapters you use. This release was checked against official DeepSeek Harness `0.1.7-rc.2` and verified on `0.2.0-rc.2`:
 
 ```sh
 dsh plugin --profile web add --force \
@@ -140,6 +142,8 @@ Production profiles must use a released registry version or GitHub tag rather th
 
 DSH Host peers and development dependencies accept `>=0.1.7-alpha.2`, including rc.1 and later releases. The development lockfile resolves to rc.2. Cordis accepts `>=4.0.4 <5.0.0`.
 
+Verified releases: `0.1.7-alpha.2`, `0.1.7-rc.1`, `0.1.7-rc.2`, `0.2.0-rc.2`. The 0.2.0 claim covers the Host's renamed question verbs, its unawaited `session.selectModel` default write, and its returned `ModelDirectory.select` refusal, each verified in the lab and on a live desktop session.
+
 The verified releases in `package.json#dsh.compatibility.dshReleases` are evidence, not an allowlist. Review public API changes and test new Host releases before adding a verification claim.
 
 ## Development
@@ -155,7 +159,7 @@ pnpm run check
 
 ## Release installation (Latest)
 
-Explicit model routing for Main, Subagent, Composer, Plan Review, and capability tools, checked on official DeepSeek Harness `0.1.7-rc.2`. The release artifact contains built Host/Client files, not sibling source or local paths.
+Explicit model routing for Main, Subagent, Composer, Plan Review, and capability tools, checked on official DeepSeek Harness `0.1.7-rc.2` and `0.2.0-rc.2`. The release artifact contains built Host/Client files, not sibling source or local paths.
 
 Latest installation (the asset filename must match the current latest release):
 

package/README.zh.md

@@ -77,6 +77,8 @@ Plan Review 拥有独立于 Main 的执行模型草稿。**确认执行**会先
 
 **拒绝**会发送提问方给出的选项，并把卡片反馈框里的文字作为答复自身的 `custom` 文本一并提交 —— plan 模式会把它作为"继续规划"的理由回报给模型，所以打回时可以带上要改什么。**去聊天里说**会撤下这张卡、把输入框还给你，用你自己的话说明；它在 Host 提供 `dismiss()` 时用它，在旧代际用 `cancel()`，两者都没有时明确指出这一点。审核一旦落定，**确认执行**与**拒绝**关闭，而**去聊天里说**与"重新加载"始终可达，卡片不会变成死路。失败会保留线上错误码（如 `session/writer-held: …`），而不是只给一句本地化文案。
 
+**设置为目标并执行** 会先把这份 Plan 设为当前会话的 goal、再答复，于是 `dsh-goal-round-driver` 能在退出计划模式后继续推进。它调用已发布的 `remote.goals.create`；若已存在一个未完成的 goal，会先 `clear` 再 `create`，让新 Plan 拿到完整轮次预算，并在替换后提示。目标设置被拒时审核保持待处理、错误带真实错误码（如 `GOAL_AGENT_NOT_LIVE: …`）；部署未挂 goal 服务时该按钮禁用并给出原因，其余三个动作照常可用。objective 取计划全文（trim 后）：goal 域不设长度上限，但它会作为模型可见上下文出现在每一轮续跑里，所以计划很长时每轮都花 token。
+
 ![带执行模型 Picker 的 Plan Review](docs/screenshots/plan-review.png)
 
 ## 发送时的上下文保护
@@ -107,7 +109,7 @@ dsh plugin --profile web add --force dsh-model-switch
 dsh plugin --profile web add --force ./dsh-model-switch-0.4.17.tgz
 ```
 
-然后只安装实际使用的 Provider Adapter。此版本已在官方 DeepSeek Harness `0.1.7-rc.2` 上检查：
+然后只安装实际使用的 Provider Adapter。此版本已在官方 DeepSeek Harness `0.1.7-rc.2` 上检查，并在 `0.2.0-rc.2` 上验证：
 
 ```sh
 dsh plugin --profile web add --force \
@@ -138,6 +140,8 @@ DeepSeek 薄适配器调用官方公开 `DeepSeekSearchProvider`，复用用户
 
 DSH Host peer 和开发依赖接受 `>=0.1.7-alpha.2`，包括 rc.1 和后续版本。开发锁文件解析到 rc.2。Cordis 接受 `>=4.0.4 <5.0.0`。
 
+已验证版本：`0.1.7-alpha.2`、`0.1.7-rc.1`、`0.1.7-rc.2`、`0.2.0-rc.2`。0.2.0 的声明覆盖三处差异：Host 改名的提问撤下动词（`cancel()` → `dismiss()`）、`session.selectModel` 不 await 的部署默认值写入、以返回值报出的 `ModelDirectory.select` 拒绝；三者均已在 lab（3082/3085）与真实桌面会话中逐一验证。
+
 `package.json#dsh.compatibility.dshReleases` 中的已验证版本是证据，不是允许列表。新增验证声明前要审查公开 API 变化并测试新 Host 版本。
 
 ## 开发
@@ -153,7 +157,7 @@ pnpm run check
 
 ## 正式版安装（Latest）
 
-本版在官方 DeepSeek Harness `0.1.7-rc.2` 上验证了 Main、子代理、Composer 与能力路由；发布包只包含构建后的 Host/Client 产物，不包含兄弟仓库源码或本机路径。
+本版在官方 DeepSeek Harness `0.1.7-rc.2` 与 `0.2.0-rc.2` 上验证了 Main、子代理、Composer、Plan Review 与能力路由；发布包只包含构建后的 Host/Client 产物，不包含兄弟仓库源码或本机路径。
 
 Latest 安装命令（资产文件名必须与当前 latest Release 一致）：
 

package/lib/client.js

@@ -3063,6 +3063,63 @@ window.__ModuleLoader__.load({
 			throw new PlanDismissalUnsupportedError("this DSH Host exposes neither PendingQuestion.dismiss() (0.2.x) nor PendingQuestion.cancel() (0.1.x)");
 		}
 		//#endregion
+		//#region src/picker/plan-goal.ts
+		function failure(result, fallback) {
+			if (result.ok) return { message: fallback };
+			const { code, message } = result.error;
+			return {
+				code,
+				message: message.trim() === "" ? fallback : message
+			};
+		}
+		/**
+		* Make the plan text this session's armed goal, replacing any unfinished goal.
+		*
+		* Ordering mirrors the card's own commit-then-answer rule: a refusal here keeps
+		* the Plan pending instead of approving work that no goal tracks. The replace
+		* path clears rather than edits so a new plan receives a fresh round budget —
+		* `edit` would inherit the rounds the previous goal already spent.
+		*
+		* @param remote - the released goal remote, absent when no goal package is mounted.
+		* @param sessionId - the session that owns both the review and the goal.
+		* @param plan - the plan markdown under review.
+		* @returns Whether the goal now tracks this plan, or why it does not.
+		*/
+		async function setPlanAsGoal(remote, sessionId, plan) {
+			if (remote === void 0) return { kind: "unsupported" };
+			const objective = plan.trim();
+			if (objective === "") return {
+				kind: "failed",
+				code: "GOAL_INVALID_OBJECTIVE",
+				message: "goal objective must be a non-empty string"
+			};
+			const created = await remote.create(sessionId, { objective });
+			if (created.ok) return { kind: "created" };
+			if (created.error.code !== "GOAL_ALREADY_EXISTS") return {
+				kind: "failed",
+				...failure(created, "the goal could not be created")
+			};
+			const current = await remote.get(sessionId);
+			if (!current.ok || current.value === void 0 || current.value === null) return {
+				kind: "failed",
+				...failure(current, "the current goal could not be read for replacement")
+			};
+			const cleared = await remote.clear(sessionId, {
+				id: current.value.id,
+				revision: current.value.revision
+			});
+			if (!cleared.ok) return {
+				kind: "failed",
+				...failure(cleared, "the current goal could not be cleared")
+			};
+			const retry = await remote.create(sessionId, { objective });
+			if (retry.ok) return { kind: "replaced" };
+			return {
+				kind: "failed",
+				...failure(retry, "the goal could not be created")
+			};
+		}
+		//#endregion
 		//#region src/client/picker/RetryBoundary.tsx
 		/** Own retryable React error-boundary state while callers own presentation and copy. */
 		var RetryBoundary = class extends react.Component {
@@ -3082,7 +3139,7 @@ window.__ModuleLoader__.load({
 		};
 		//#endregion
 		//#region \0dsh-css:src/client/picker/PlanReviewCard.module.css.mjs
-		const css = ".BylfoW_frame{padding:6px calc(var(--dsh-composer-side-clearance) + 16px) 10px;justify-content:center;display:flex}.BylfoW_card{width:100%;max-width:var(--dsh-chat-content-width);border:1px solid var(--dsw-alias-state-warn-secondary);background:var(--dsw-specific-input-major);max-height:min(60vh,520px);box-shadow:var(--dsw-shadow-lv2);color:var(--dsw-alias-label-primary);--dsh-scrollbar-thumb:var(--dsw-alias-scrollbar-bg-l2);--dsh-scrollbar-thumb-hover:var(--dsw-alias-scrollbar-hover-l2);border-radius:20px;flex-direction:column;display:flex;overflow:visible}.BylfoW_card,.BylfoW_card *{box-sizing:border-box}.BylfoW_strip{background:var(--dsw-alias-state-warn-tertiary);color:var(--dsw-alias-state-warn-primary);border-radius:20px 20px 0 0;flex-shrink:0;align-items:center;gap:8px;padding:10px 16px;font-size:13px;line-height:18px;display:flex}.BylfoW_dot{background:var(--dsw-alias-state-warn-primary);border-radius:50%;width:8px;height:8px}.BylfoW_stripTitle{flex:none;font-weight:600}.BylfoW_headerPicker{flex:0 auto;align-items:center;min-width:0;max-width:55%;margin-left:auto;display:flex}.BylfoW_headerPicker>*{min-width:0;max-width:100%}.BylfoW_body{overscroll-behavior:contain;flex:auto;min-height:0;padding:12px 16px 4px;font-size:14px;line-height:22px;overflow-y:auto}.BylfoW_footer{z-index:2;flex-direction:column;flex-shrink:0;gap:6px;padding:8px 16px 12px;display:flex;position:relative;overflow:visible}.BylfoW_feedback{min-height:0;color:var(--dsw-alias-state-error-primary);font-size:11px;line-height:16px}.BylfoW_feedback:empty{display:none}.BylfoW_feedbackRow{align-items:center;gap:8px;min-width:0;display:flex}.BylfoW_feedbackInput{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-specific-input-minor);min-width:0;height:32px;color:var(--dsw-alias-label-primary);font:var(--dsw-font-xs-13);border-radius:8px;flex:auto;padding:0 10px}.BylfoW_feedbackInput::placeholder{color:var(--dsw-alias-label-tertiary)}.BylfoW_feedbackInput:disabled{opacity:.6}.BylfoW_bar{flex-wrap:nowrap;justify-content:space-between;align-items:center;gap:12px;min-width:0;min-height:32px;display:flex}.BylfoW_picker{flex:16rem;min-width:0;max-width:16rem}.BylfoW_pickerError{color:var(--dsw-alias-state-error-primary);overflow-wrap:anywhere;flex-wrap:wrap;align-items:center;gap:6px;font-size:12px;display:flex}.BylfoW_actions{flex-wrap:nowrap;flex:none;justify-content:flex-end;align-items:center;gap:8px;margin-left:auto;display:flex}.BylfoW_discuss,.BylfoW_keep,.BylfoW_approve,.BylfoW_recover{white-space:nowrap;height:32px;min-height:32px;padding:0 10px}.BylfoW_discuss,.BylfoW_recover{color:var(--dsw-alias-label-secondary)}.BylfoW_discuss:hover:not(:disabled),.BylfoW_recover:hover:not(:disabled){color:var(--dsw-alias-label-primary)}.BylfoW_approve{padding:0 12px}@media (width<=720px){.BylfoW_frame{padding-right:max(10px, env(safe-area-inset-right));padding-bottom:max(10px, env(safe-area-inset-bottom));padding-left:max(10px, env(safe-area-inset-left))}.BylfoW_card{border-radius:16px}.BylfoW_strip,.BylfoW_body,.BylfoW_footer{padding-left:12px;padding-right:12px}.BylfoW_strip{flex-wrap:wrap;gap:6px}.BylfoW_headerPicker{flex:100%;max-width:100%;margin-left:0}.BylfoW_bar{justify-content:flex-end;gap:6px}.BylfoW_actions{flex:100%;justify-content:flex-end;gap:6px;min-width:0}.BylfoW_discuss,.BylfoW_keep,.BylfoW_approve,.BylfoW_recover{overflow-wrap:anywhere;white-space:normal;flex:1 1 0;min-width:0;height:auto;padding:4px;line-height:14px}.BylfoW_feedbackInput{height:auto;min-height:32px}}";
+		const css = ".BylfoW_frame{padding:6px calc(var(--dsh-composer-side-clearance) + 16px) 10px;justify-content:center;display:flex}.BylfoW_card{width:100%;max-width:var(--dsh-chat-content-width);border:1px solid var(--dsw-alias-state-warn-secondary);background:var(--dsw-specific-input-major);max-height:min(60vh,520px);box-shadow:var(--dsw-shadow-lv2);color:var(--dsw-alias-label-primary);--dsh-scrollbar-thumb:var(--dsw-alias-scrollbar-bg-l2);--dsh-scrollbar-thumb-hover:var(--dsw-alias-scrollbar-hover-l2);border-radius:20px;flex-direction:column;display:flex;overflow:visible}.BylfoW_card,.BylfoW_card *{box-sizing:border-box}.BylfoW_strip{background:var(--dsw-alias-state-warn-tertiary);color:var(--dsw-alias-state-warn-primary);border-radius:20px 20px 0 0;flex-shrink:0;align-items:center;gap:8px;padding:10px 16px;font-size:13px;line-height:18px;display:flex}.BylfoW_dot{background:var(--dsw-alias-state-warn-primary);border-radius:50%;width:8px;height:8px}.BylfoW_stripTitle{flex:none;font-weight:600}.BylfoW_headerPicker{flex:0 auto;align-items:center;min-width:0;max-width:55%;margin-left:auto;display:flex}.BylfoW_headerPicker>*{min-width:0;max-width:100%}.BylfoW_body{overscroll-behavior:contain;flex:auto;min-height:0;padding:12px 16px 4px;font-size:14px;line-height:22px;overflow-y:auto}.BylfoW_footer{z-index:2;flex-direction:column;flex-shrink:0;gap:6px;padding:8px 16px 12px;display:flex;position:relative;overflow:visible}.BylfoW_feedback{min-height:0;color:var(--dsw-alias-state-error-primary);font-size:11px;line-height:16px}.BylfoW_feedback:empty{display:none}.BylfoW_feedbackRow{align-items:center;gap:8px;min-width:0;display:flex}.BylfoW_feedbackInput{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-specific-input-minor);min-width:0;height:32px;color:var(--dsw-alias-label-primary);font:var(--dsw-font-xs-13);border-radius:8px;flex:auto;padding:0 10px}.BylfoW_feedbackInput::placeholder{color:var(--dsw-alias-label-tertiary)}.BylfoW_feedbackInput:disabled{opacity:.6}.BylfoW_bar{flex-wrap:nowrap;justify-content:space-between;align-items:center;gap:12px;min-width:0;min-height:32px;display:flex}.BylfoW_picker{flex:16rem;min-width:0;max-width:16rem}.BylfoW_pickerError{color:var(--dsw-alias-state-error-primary);overflow-wrap:anywhere;flex-wrap:wrap;align-items:center;gap:6px;font-size:12px;display:flex}.BylfoW_actions{flex-wrap:nowrap;flex:none;justify-content:flex-end;align-items:center;gap:8px;margin-left:auto;display:flex}.BylfoW_discuss,.BylfoW_keep,.BylfoW_goalRun,.BylfoW_approve,.BylfoW_recover{white-space:nowrap;height:32px;min-height:32px;padding:0 10px}.BylfoW_discuss,.BylfoW_recover{color:var(--dsw-alias-label-secondary)}.BylfoW_discuss:hover:not(:disabled),.BylfoW_recover:hover:not(:disabled){color:var(--dsw-alias-label-primary)}.BylfoW_approve{padding:0 12px}@media (width<=720px){.BylfoW_frame{padding-right:max(10px, env(safe-area-inset-right));padding-bottom:max(10px, env(safe-area-inset-bottom));padding-left:max(10px, env(safe-area-inset-left))}.BylfoW_card{border-radius:16px}.BylfoW_strip,.BylfoW_body,.BylfoW_footer{padding-left:12px;padding-right:12px}.BylfoW_strip{flex-wrap:wrap;gap:6px}.BylfoW_headerPicker{flex:100%;max-width:100%;margin-left:0}.BylfoW_bar{justify-content:flex-end;gap:6px}.BylfoW_actions{flex:100%;justify-content:flex-end;gap:6px;min-width:0}.BylfoW_discuss,.BylfoW_keep,.BylfoW_goalRun,.BylfoW_approve,.BylfoW_recover{overflow-wrap:anywhere;white-space:normal;flex:1 1 0;min-width:0;height:auto;padding:4px;line-height:14px}.BylfoW_feedbackInput{height:auto;min-height:32px}}";
 		const tagId = "dsh-model-switch/PlanReviewCard.module.css";
 		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {
 			const tag = document.createElement("style");
@@ -3104,6 +3161,7 @@ window.__ModuleLoader__.load({
 			"feedbackRow": "BylfoW_feedbackRow",
 			"footer": "BylfoW_footer",
 			"frame": "BylfoW_frame",
+			"goalRun": "BylfoW_goalRun",
 			"headerPicker": "BylfoW_headerPicker",
 			"keep": "BylfoW_keep",
 			"picker": "BylfoW_picker",
@@ -3226,11 +3284,12 @@ window.__ModuleLoader__.load({
 				...settingsUnavailableReason === void 0 ? {} : { settingsUnavailableReason },
 				directory: pickerDirectoryViewOrdered(snapshot, props, order, props.catalogRoutes?.() ?? {}),
 				t: props.t,
+				goalRemote: props.goalRemote,
 				...props.resolveInteractionOperations === void 0 ? {} : { resolveInteractionOperations: props.resolveInteractionOperations },
 				...props.roleOf === void 0 ? {} : { roleOf: props.roleOf }
 			}, props.matched.key);
 		}
-		function PlanReviewState({ matched, review, available, providerLock, agentLocked, lockFailed, settingsUnavailableReason, directory, t, resolveInteractionOperations, roleOf }) {
+		function PlanReviewState({ matched, review, available, providerLock, agentLocked, lockFailed, settingsUnavailableReason, directory, t, goalRemote, resolveInteractionOperations, roleOf }) {
 			const { snapshot, getDirectorySnapshot, load, select } = directory;
 			const [execution, setExecution] = (0, react.useState)(snapshot.current ?? void 0);
 			const [feedback, setFeedback] = (0, react.useState)("");
@@ -3280,22 +3339,45 @@ window.__ModuleLoader__.load({
 				blocked,
 				error
 			}, available, executionAllowed);
+			/** Approve this review after committing its execution model; a refused commit keeps the Plan pending. */
+			const approveWith = async (model) => {
+				if (!await approvePlanReview({
+					select,
+					selection: model,
+					current: snapshot.current,
+					answer: () => respondAnswer(matched, review.id, review.approve.label, t("plan.responseRejected"), true),
+					onNotRestored: (switched) => {
+						setNotice(t("plan.notRestored", { model: switched }));
+						console.warn("dsh-model-switch: the Session model changed but the Main default was not restored", switched);
+					}
+				})) {
+					const message = getDirectorySnapshot().error;
+					throw new Error(message === null ? t("plan.modelFailed") : t("error.action", { message }));
+				}
+			};
 			const onApprove = () => {
 				if (execution === void 0 || !executionAllowed || !available || busy || blocked) return;
+				settle(() => approveWith(execution));
+			};
+			const goal = goalRemote();
+			const goalReason = goal === void 0 ? t("plan.goalUnsupported") : void 0;
+			/**
+			* Arm this plan as the session's goal first, then approve. The goal must be
+			* set before the answer because a refusal must leave the Plan pending, and
+			* because only an armed goal lets the round driver carry the plan after plan
+			* mode exits.
+			*/
+			const onRunAsGoal = () => {
+				if (execution === void 0 || !executionAllowed || !available || busy || blocked || goal === void 0) return;
 				settle(async () => {
-					if (!await approvePlanReview({
-						select,
-						selection: execution,
-						current: snapshot.current,
-						answer: () => respondAnswer(matched, review.id, review.approve.label, t("plan.responseRejected"), true),
-						onNotRestored: (model) => {
-							setNotice(t("plan.notRestored", { model }));
-							console.warn("dsh-model-switch: the Session model changed but the Main default was not restored", model);
-						}
-					})) {
-						const message = getDirectorySnapshot().error;
-						throw new Error(message === null ? t("plan.modelFailed") : t("error.action", { message }));
+					const handoff = await setPlanAsGoal(goal, matched.sessionId, review.plan);
+					if (handoff.kind === "unsupported") throw new Error(t("plan.goalUnsupported"));
+					if (handoff.kind === "failed") {
+						const message = handoff.code === void 0 ? handoff.message : `${handoff.code}: ${handoff.message}`;
+						throw new Error(t("plan.goalFailed", { message }));
 					}
+					if (handoff.kind === "replaced") setNotice(t("plan.goalReplaced"));
+					await approveWith(execution);
 				});
 			};
 			const decline = review.decline;
@@ -3413,6 +3495,14 @@ window.__ModuleLoader__.load({
 												},
 												children: t("plan.keep")
 											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+												variant: "outline",
+												className: PlanReviewCard_module_css_default.goalRun,
+												disabled: action.approveDisabled || goalReason !== void 0,
+												...goalReason === void 0 ? {} : { title: goalReason },
+												onClick: onRunAsGoal,
+												children: t("plan.goalRun")
+											}),
 											/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
 												variant: "primary",
 												className: PlanReviewCard_module_css_default.approve,
@@ -3501,6 +3591,10 @@ window.__ModuleLoader__.load({
 			"plan.feedbackPlaceholder": "说明要改什么（可留空）",
 			"plan.notRestored": "执行模型已切换，但主模型默认值未能还原（{model}）；请在「设置 → 模型」中确认默认模型。",
 			"plan.dismissUnsupported": "当前 DSH 版本既未提供 PendingQuestion.dismiss() 也未提供 cancel()，无法回到聊天；请直接在输入框里发送你的意见。",
+			"plan.goalRun": "设置为目标并执行",
+			"plan.goalFailed": "设置目标失败：{message}",
+			"plan.goalReplaced": "已替换本会话原有的目标",
+			"plan.goalUnsupported": "当前部署未挂载 goal 服务，无法把计划设为目标",
 			"plan.responseRejected": "计划答复已被另一客户端处理；已提交的模型切换无法由插件回滚。",
 			"plan.cancelRejected": "计划审查已被另一客户端处理，无法返回讨论。",
 			"markdown.copy": "复制代码",
@@ -3552,6 +3646,10 @@ window.__ModuleLoader__.load({
 			"plan.feedbackPlaceholder": "Say what to change (optional)",
 			"plan.notRestored": "The execution model switched, but the Main default could not be restored ({model}); confirm the default in Settings → Models.",
 			"plan.dismissUnsupported": "This DSH Host exposes neither PendingQuestion.dismiss() nor cancel(), so the review cannot return to chat; send your feedback as a message instead.",
+			"plan.goalRun": "Set as goal and run",
+			"plan.goalFailed": "Could not set the goal: {message}",
+			"plan.goalReplaced": "Replaced this session's previous goal",
+			"plan.goalUnsupported": "This deployment mounts no goal service, so the Plan cannot be set as a goal",
 			"plan.responseRejected": "Another client already handled this Plan response. A committed model change cannot be rolled back by this plugin.",
 			"plan.cancelRejected": "Another client already handled this Plan review, so it cannot return to discussion.",
 			"markdown.copy": "Copy code",
@@ -3576,6 +3674,29 @@ window.__ModuleLoader__.load({
 		}
 		const EMPTY_ORDER = [];
 		/**
+		* Resolve the released goal remote without hard-depending on it.
+		*
+		* `remote.goals` exists only when the deployment mounts `@deepseek-ai/dsh-goal`,
+		* so the capability must be looked up per render rather than injected: an
+		* `inject` on a dotted service name would otherwise block this whole client
+		* plugin on a deployment that does not mount the goal package. The dotted name
+		* is read first, with the namespace object as the fallback shape.
+		* @param ctx - client root context holding the remote namespace.
+		* @returns The goal remote, or undefined when no goal service is mounted.
+		*/
+		function goalRemoteFrom(ctx) {
+			const read = (name) => {
+				try {
+					return ctx.get(name, false);
+				} catch {
+					return;
+				}
+			};
+			const nested = read("remote.goals");
+			if (nested !== void 0 && nested !== null) return nested;
+			return read("remote")?.goals;
+		}
+		/**
 		* Bind the optional Providers entry order as a React external store.
 		* @returns A subscribable order snapshot with an invalidation hook for directory changes.
 		*/
@@ -3709,6 +3830,7 @@ window.__ModuleLoader__.load({
 						},
 						subscribeMainDefaults: (listener) => mainDefaults.subscribe(listener),
 						getMainDefaultsSnapshot: () => mainDefaults.getSnapshot(),
+						goalRemote: () => goalRemoteFrom(scope),
 						hooks: {
 							directory: directory.store,
 							providerOrder: orderStore

package/lib/types/client/picker/PlanReviewCard.d.ts

@@ -2,6 +2,7 @@ import type { PendingQuestion } from '@deepseek-ai/dsh-client-ui-user-questions/
 import type { ConfigFormSnapshot } from '@deepseek-ai/dsh-client-ui-settings/client';
 import type { InjectFace, PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
 import type { MainSettingsView } from '../../client-contract.ts';
+import { type GoalRemote } from '../../picker/plan-goal.ts';
 import { type PickerDirectoryFace } from './PickerDirectory.ts';
 import type { PickerInteractionOperations } from './popup-dismissal.ts';
 import { type RuntimeProviderLock } from '../runtime-lock.ts';
@@ -22,6 +23,8 @@ export interface PlanReviewFace extends PickerDirectoryFace {
     refreshProviderLock: () => void;
     subscribeMainDefaults: (listener: () => void) => () => void;
     getMainDefaultsSnapshot: () => ConfigFormSnapshot<MainSettingsView>;
+    /** Released goal remote; absent when this deployment mounts no goal service. */
+    goalRemote: () => GoalRemote | undefined;
     /** Live catalog-group-id → card-key map from ProviderDirectory. */
     catalogRoutes?: () => Readonly<Record<string, string>>;
 }

package/lib/types/client/picker/locales.d.ts

@@ -44,6 +44,10 @@ export declare const zh: {
     'plan.feedbackPlaceholder': string;
     'plan.notRestored': string;
     'plan.dismissUnsupported': string;
+    'plan.goalRun': string;
+    'plan.goalFailed': string;
+    'plan.goalReplaced': string;
+    'plan.goalUnsupported': string;
     'plan.responseRejected': string;
     'plan.cancelRejected': string;
     'markdown.copy': string;
@@ -96,6 +100,10 @@ export declare const en: {
     'plan.feedbackPlaceholder': string;
     'plan.notRestored': string;
     'plan.dismissUnsupported': string;
+    'plan.goalRun': string;
+    'plan.goalFailed': string;
+    'plan.goalReplaced': string;
+    'plan.goalUnsupported': string;
     'plan.responseRejected': string;
     'plan.cancelRejected': string;
     'markdown.copy': string;

package/lib/types/picker/plan-goal.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Hand a reviewed plan to the Host's goal domain before its review is answered.
+ *
+ * Goal state is owned by `@deepseek-ai/dsh-goal`: this module only drives the
+ * released client remote (`ctx.remote.goals`), keeps no goal state of its own,
+ * and never schedules continuation — `dsh-goal-round-driver` owns that. The
+ * shape below mirrors the published remote face structurally so the plugin
+ * neither imports generated client modules nor hard-requires the goal package
+ * in a deployment that does not mount it.
+ *
+ * Goal creation is deliberately outside DSH's own goal surface ("Goal creation
+ * remains outside this package"), so the published `remote.goals.create` is the
+ * one seam this feature relies on; if a future Host drops it, the capability
+ * reports `unsupported` instead of guessing another path.
+ */
+/** Compare-and-set identity of the current goal; carried by every live view. */
+export interface GoalRef {
+    readonly id: string;
+    readonly revision: number;
+}
+/** Detached live view a client reads back from the goal remote. */
+export interface GoalView extends GoalRef {
+    readonly phase: 'active' | 'paused' | 'blocked' | 'complete';
+    readonly activation: 'armed' | 'disarmed';
+}
+/** Envelope every generated remote method resolves to on the wire. */
+export type GoalRemoteResult<T> = {
+    readonly ok: true;
+    readonly value: T;
+} | {
+    readonly ok: false;
+    readonly error: {
+        readonly code: string;
+        readonly message: string;
+    };
+};
+/** The released `ctx.remote.goals` surface this feature uses. */
+export interface GoalRemote {
+    /** Create and arm a goal for the session's live Agent. */
+    create(sessionId: string, request: {
+        readonly objective: string;
+    }): Promise<GoalRemoteResult<{
+        readonly ref: GoalRef;
+    }>>;
+    /** Current goal for the session, absent before the first create and after a clear. */
+    get(sessionId: string): Promise<GoalRemoteResult<GoalView | null | undefined>>;
+    /** Remove the current goal; its history stays in the session log. */
+    clear(sessionId: string, ref: GoalRef): Promise<GoalRemoteResult<unknown>>;
+}
+/** Outcome of setting a plan as the session's goal. */
+export type GoalHandoff = {
+    readonly kind: 'created';
+} | {
+    readonly kind: 'replaced';
+}
+/** The deployment mounts no goal service; the caller must not proceed. */
+ | {
+    readonly kind: 'unsupported';
+} | {
+    readonly kind: 'failed';
+    readonly code?: string;
+    readonly message: string;
+};
+/**
+ * Make the plan text this session's armed goal, replacing any unfinished goal.
+ *
+ * Ordering mirrors the card's own commit-then-answer rule: a refusal here keeps
+ * the Plan pending instead of approving work that no goal tracks. The replace
+ * path clears rather than edits so a new plan receives a fresh round budget —
+ * `edit` would inherit the rounds the previous goal already spent.
+ *
+ * @param remote - the released goal remote, absent when no goal package is mounted.
+ * @param sessionId - the session that owns both the review and the goal.
+ * @param plan - the plan markdown under review.
+ * @returns Whether the goal now tracks this plan, or why it does not.
+ */
+export declare function setPlanAsGoal(remote: GoalRemote | undefined, sessionId: string, plan: string): Promise<GoalHandoff>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-model-switch",
-  "version": "0.4.17",
+  "version": "0.4.19",
   "description": "Explicit model routing plus composer/Plan picker for DeepSeek Harness",
   "repository": {
     "type": "git",
@@ -93,7 +93,8 @@
       "dshReleases": {
         "0.1.7-alpha.2": "compatible",
         "0.1.7-rc.1": "compatible",
-        "0.1.7-rc.2": "compatible"
+        "0.1.7-rc.2": "compatible",
+        "0.2.0-rc.2": "compatible"
       }
     }
   },
@@ -118,6 +119,7 @@
     "@deepseek-ai/dsh-compaction": ">=0.1.7-alpha.2",
     "@deepseek-ai/dsh-compaction-basic": ">=0.1.7-alpha.2",
     "@deepseek-ai/dsh-credentials": ">=0.1.7-alpha.2",
+    "@deepseek-ai/dsh-goal": ">=0.1.7-alpha.2",
     "@deepseek-ai/dsh-launch-environment": ">=0.1.7-alpha.2",
     "@deepseek-ai/dsh-llm": ">=0.1.7-alpha.2",
     "@deepseek-ai/dsh-permission-presets": ">=0.1.7-alpha.2",
@@ -335,6 +337,9 @@
     "@deepseek-ai/dsh-credentials": {
       "optional": true
     },
+    "@deepseek-ai/dsh-goal": {
+      "optional": true
+    },
     "@deepseek-ai/dsh-client-connection": {
       "optional": true
     }