dsh-model-switch 0.4.31 → 0.4.33

package/lib/auto-review.js

@@ -1,591 +1,2 @@
-import { i as sessionProviderOf, r as resolveCapabilityRoute } from "./session-route-BjNPlliu.js";
-import { AsyncLocalStorage } from "node:async_hooks";
-/**
-* The official package identity — the only handle on the row this plugin
-* trusts. Matching by id alone could reach a group or another plugin's row, and
-* a matched row is disabled (its fiber disposed).
-*/
-const OFFICIAL_AUTO_REVIEW_PACKAGE = "@deepseek-ai/dsh-experimental-auto-review";
-/** Whether one loader entry is the official Auto-review row (strict package identity). */
-function isOfficialAutoReviewRow(entry) {
-	if (entry === void 0) return false;
-	const pkg = entry.options?.name;
-	return typeof pkg === "string" && pkg === "@deepseek-ai/dsh-experimental-auto-review";
-}
-/** The first composed official Auto-review row, if the profile declares one. */
-function officialAutoReviewEntry(loader) {
-	if (loader === void 0 || typeof loader.entries !== "function") return void 0;
-	for (const entry of loader.entries()) if (isOfficialAutoReviewRow(entry)) return entry;
-}
-/** The id one entry is known by (the loader's leaf id, not a nested path). */
-function leafId(entry) {
-	const raw = entry.options?.id;
-	return typeof raw === "string" ? raw : void 0;
-}
-/** A loader entry the loader has not created a fiber for yet. */
-function alreadyDisabled(entry) {
-	return entry.disabled === true;
-}
-/**
-* Displace the official Auto-review row and take the registration back.
-*
-* The official row is disabled through the public `Entry.update` (which starts
-* its fiber's disposal — the loader does not await it, so the claim retries
-* until the displaced registration actually released). The Auto selection of
-* live sessions is preserved around the displacement: the official gate's
-* disposal moves `auto` sessions to `danger-full-access` by design, and this
-* row's registration puts them back.
-*
-* @param ctx - this row's context, used only for logging.
-* @param entry - the official row to displace.
-* @param seam - the Auto-registration seam to yield and reclaim.
-* @returns a promise settling once the takeover attempt loop finished.
-*/
-async function reclaimOfficialAutoReviewRow(ctx, entry, seam) {
-	await seam.preserveAuto(async () => {
-		for (let attempt = 0; attempt < 20; attempt += 1) {
-			await new Promise((resolve) => setTimeout(resolve, attempt === 0 ? 0 : 10));
-			try {
-				await entry.update({ disabled: true });
-				ctx.logger.info(`model-switch: disabled the official auto-review row ${String(leafId(entry) ?? "auto-review")} (${OFFICIAL_AUTO_REVIEW_PACKAGE}); Model Switch's auto-review row owns the reviewer seam (configurable reviewer route)`);
-			} catch (cause) {
-				ctx.logger.info("model-switch: the displaced auto-review row could not be persisted as disabled; the takeover repeats next startup");
-				ctx.logger.info(String(cause));
-			}
-			if (await seam.claim()) {
-				ctx.logger.info(`model-switch: displaced the official auto-review row ${String(leafId(entry) ?? "auto-review")}; Auto review runs under the configurable reviewer route`);
-				return;
-			}
-		}
-		ctx.logger.error(`model-switch: the official auto-review row ${String(leafId(entry) ?? "auto-review")} kept the Auto registration; the reviewer route override is unavailable this session`);
-	});
-}
-/**
-* Install the takeover choreography for an official row that activates later.
-*
-* The plugin manager can re-enable the official row at any time (it writes
-* `disabled: false` into the profile patch layer, which applies after every
-* bundle layer). The `loader/patch-context` listener yields this row's
-* registration **synchronously** before the entry's plugin `apply` runs, so the
-* official row applies cleanly instead of colliding; the reclaim then disables
-* it and takes the registration back.
-*
-* @param ctx - this row's context.
-* @param seam - the Auto-registration seam to yield and reclaim.
-* @returns the guarded reclaim function, so the caller's startup takeover and
-* the listeners share one in-flight guard per entry.
-*/
-function installAutoReviewTakeover(ctx, seam) {
-	/** Entries already handled, so a repeated patch-context does not loop. */
-	const handled = /* @__PURE__ */ new Set();
-	/** Reclaims in flight, shared so two triggers for one entry join one cycle. */
-	const reclaiming = /* @__PURE__ */ new Map();
-	/** Disable the official row and take the registration back, once per entry. */
-	const reclaim = (entry) => {
-		const running = reclaiming.get(entry);
-		if (running !== void 0) return running;
-		const run = reclaimOfficialAutoReviewRow(ctx, entry, seam).finally(() => {
-			reclaiming.delete(entry);
-		});
-		reclaiming.set(entry, run);
-		return run;
-	};
-	/**
-	* The row an event names.
-	*
-	* The loader hands the emitting entry as the event's `this`, but cordis does
-	* not rebind `this` for listeners added through `ctx.on`, so a listener can
-	* also receive the payload as its first argument. Both shapes are accepted;
-	* the real Host always provides one of them.
-	*/
-	const entryOfEvent = (self, first) => {
-		const candidate = self ?? first;
-		return candidate !== null && typeof candidate === "object" && "options" in candidate ? candidate : void 0;
-	};
-	const listeners = [];
-	const listen = (event, listener) => {
-		const dispose = ctx.on?.(event, listener);
-		if (dispose !== void 0) listeners.push(dispose);
-	};
-	listen("loader/patch-context", function(first, second) {
-		const nextFn = typeof first === "function" ? first : second;
-		const entry = entryOfEvent(this, typeof first === "function" ? void 0 : first);
-		if (entry === void 0 || typeof nextFn !== "function" || !isOfficialAutoReviewRow(entry) || handled.has(entry)) return nextFn === void 0 ? void 0 : nextFn();
-		handled.add(entry);
-		seam.yieldRegistration();
-		reclaim(entry);
-		return nextFn();
-	});
-	listen("loader/partial-dispose", function(first) {
-		const entry = entryOfEvent(this, first);
-		if (entry === void 0 || !isOfficialAutoReviewRow(entry)) return;
-		handled.delete(entry);
-		seam.claim();
-	});
-	const loader = ctx.get("loader", false);
-	if (loader !== void 0 && typeof loader.entries === "function") for (const candidate of loader.entries()) {
-		if (!isOfficialAutoReviewRow(candidate)) continue;
-		if (alreadyDisabled(candidate)) continue;
-		reclaim(candidate);
-	}
-	const disposable = () => {
-		for (const dispose of listeners.splice(0)) dispose();
-	};
-	const effect = ctx.effect;
-	if (effect !== void 0) {
-		const registration = effect(function* () {
-			yield disposable;
-		}, "model-switch: auto-review takeover");
-		if (typeof registration === "function") listeners.push(registration);
-	}
-	return reclaim;
-}
-//#endregion
-//#region lib/types/auto-review.js
-/**
-* Model Switch-owned Auto reviewer row.
-*
-* The official `@deepseek-ai/dsh-experimental-auto-review` gate hardwires its
-* reviewer to the session's own request route (`header.config`). This row runs
-* the official `apply` under a scoped child context whose `llm` service is
-* shadowed by a wrapper that rewrites only `stream()`'s provider/model — and
-* only when the reviewing session's derived route (its provider group's
-* reviewer pair, else the deployment-wide reviewer card) pins one. With no
-* route pinned the wrapper passes options through by identity, so the reviewer
-* follows the session model exactly.
-*
-* Although the official gate omits `sessionId` and `purpose` from its frozen
-* `GenerateOptions`, its `tools/pre-execute` waterfall listener receives
-* `exec.agent` (`exec.agent.session`). After running `official.apply(scope)`,
-* this module registers a `{ prepend: true }` `tools/pre-execute` listener on
-* the same scope — which Cordis places ahead of the official gate's listener in
-* the waterfall — and binds `exec.agent?.session` in an `AsyncLocalStorage`
-* scope around `next()`. Every `scope.llm.stream()` call from `classifyRisk`
-* therefore resolves the exact session being reviewed, with zero cross-session
-* interference when multiple sessions review tool calls concurrently.
-*
-* The official gate stays an opt-in capability: the row mounts it only when
-* the profile actually started with the experimental-auto-review bundle. Two
-* rows cannot share the seam — `permissionPresets.registerAuto` is a single
-* registration and the official probe is unshielded — so this row also
-* **takes the seam over** (see `./auto-review-takeover.ts`): a composed or
-* re-enabled official row is displaced through the released loader seams, the
-* registration is handed over and reclaimed around that displacement, and the
-* gate this row mounts keeps the defensive `permissionPresets` shadow so a
-* degraded preset service can never fail a tool call again.
-*
-* @module dsh-model-switch/auto-review
-*/
-/** Cordis plugin name used by loader diagnostics. */
-const name = "model-switch-auto-review";
-/**
-* Only the services this row's own code touches.
-*
-* The official gate used to run inside this row's fiber, so this list had to
-* mirror every service the official `apply` reads. DSH 0.2.1 added
-* `workingDirectory` to the official gate and the mirror went stale, which made
-* every tool call fail with `cannot get property "workingDirectory" without
-* inject`. The gate is now mounted as its own plugin (see {@link autoReviewGate}),
-* so cordis resolves the official dependency list — including future additions —
-* and this row declares only what it reads itself (`loader` drives the
-* takeover).
-*/
-const inject = [
-	"llm",
-	"modelSwitch",
-	"loader"
-];
-/** Optional bundle whose composition opts a profile into Auto review. */
-const AUTO_REVIEW_BUNDLE = "@deepseek-ai/dsh-experimental-auto-review";
-/** The Auto preset name; `registerAuto` is what publishes it. */
-const AUTO_PRESET = "auto";
-/**
-* Resolve the pinned reviewer route from live settings.
-* @param settings - Model Switch settings carrying the optional reviewer pair.
-* @returns Both identifiers trimmed and non-empty, or undefined (follow session).
-*/
-function autoReviewRouteOf(settings) {
-	const provider = settings?.autoReviewProvider?.trim();
-	const model = settings?.autoReviewModel?.trim();
-	if (provider === void 0 || provider === "" || model === void 0 || model === "") return void 0;
-	return {
-		provider,
-		model
-	};
-}
-/**
-* Wrap the real llm service so only `stream()` route fields are rewritten.
-*
-* Non-`stream` members pass through bound to the real service (Proxy reads
-* would otherwise hand methods the proxy as `this`). The route is re-read per
-* call so a settings change applies to the very next review without a reload.
-*
-* @param real - the host's `ctx.llm`.
-* @param route - live route resolver; undefined means "do not rewrite".
-* @returns A structurally compatible llm face for the scoped context.
-*/
-function reviewLlm(real, route) {
-	return new Proxy(real, { get(target, property, _receiver) {
-		if (property === "stream") return (options) => {
-			const pinned = route();
-			return pinned === void 0 ? target.stream(options) : target.stream({
-				...options,
-				provider: pinned.provider,
-				model: pinned.model
-			});
-		};
-		const value = Reflect.get(target, property, target);
-		return typeof value === "function" ? value.bind(target) : value;
-	} });
-}
-/**
-* Resolve the reviewer route for one session (or deployment-wide when no session is bound).
-*
-* @param ctx - host context whose modelSwitch settings and sessionProjections derive the route.
-* @param session - the session whose tool call is being reviewed, when known.
-* @returns The derived reviewer route, or undefined to follow the session model.
-*/
-function resolveSessionAutoReviewRoute(ctx, session) {
-	let settings;
-	try {
-		settings = ctx.modelSwitch.currentSettings();
-	} catch {
-		settings = void 0;
-	}
-	const provider = sessionProviderOf(ctx, session);
-	return resolveCapabilityRoute(settings, provider, "autoReview");
-}
-/**
-* Install the outer `tools/pre-execute` correlation listener ahead of the official gate.
-*
-* Because Cordis `on(..., { prepend: true })` unshifts onto the event hook list,
-* registering this listener AFTER `official.apply(scope)` places it at index 0
-* — directly ahead of the official gate's own prepended listener — so
-* `activeSession.run(exec.agent?.session, next)` wraps the entire official
-* review execution.
-*
-* @param scope - the review scope context where the gate is mounted.
-* @param activeSession - AsyncLocalStorage holding the session under review.
-*/
-function bindAutoReviewSessionCorrelation(scope, activeSession) {
-	scope.effect(function* () {
-		yield scope.on("tools/pre-execute", (exec, next) => activeSession.run(exec.agent?.session, next), { prepend: true });
-	}, "model-switch: auto-review session correlation");
-}
-/** The preset name the service reports when no configured preset matches. */
-const CUSTOM_PRESET = "custom";
-/** Read the live permission-preset service without requiring an injection. */
-function permissionPresetsOf(ctx) {
-	try {
-		const face = ctx.get("permissionPresets", false);
-		return face !== null && typeof face === "object" ? face : void 0;
-	} catch {
-		return;
-	}
-}
-/**
-* A compact dump of the fiber chain a service resolution walks.
-*
-* `cannot get required service "sessionProjections" in inactive context` is
-* thrown by the first fiber in the caller's chain that declares the service
-* without a resolved snapshot; the chain names that fiber directly.
-* @param ctx - the context whose chain is walked.
-* @returns One `uid/state/name/inject` segment per fiber, outermost last.
-*/
-function fiberChainOf(ctx) {
-	const parts = [];
-	let node = ctx;
-	for (let step = 0; step < 8; step += 1) {
-		const fiber = node?.fiber;
-		if (fiber === void 0) break;
-		const injects = Object.keys(fiber.inject ?? {}).join("|");
-		parts.push(`uid=${String(fiber.uid)} state=${String(fiber.state)} name=${String(fiber.name)} inject=[${injects}]`);
-		node = fiber.parent;
-	}
-	return parts.length === 0 ? "no fiber chain" : parts.join(" -> ");
-}
-/**
-* Wrap the permission-preset service so the official gate's per-call probe can
-* never fail a tool call, and broker its single Auto registration.
-*
-* DSH's Auto gate starts every `tools/pre-execute` with
-* `permissionPresets.current(session)`, and that method resolves the presets
-* service's own `sessionProjections` injection. When the presets fiber has
-* turned inactive the probe throws `cannot get required service
-* "sessionProjections" in inactive context` outside the gate's reviewer error
-* wrapper, so every tool call dies. This wrapper resolves the service lazily
-* (so the shadow is in place even while the service is still activating),
-* degrades the probe to `custom` (the gate then skips review and calls
-* `next()`), and reports the lost capability once — with the fiber chain that
-* failed resolution, so the next occurrence names the inactive fiber.
-*
-* `registerAuto` is **brokered**: the gate yields the disposer into its own
-* effect, but the takeover must be able to hand the single registration to a
-* displacing row and take it back without unmounting the gate (the gate's
-* disposal would move live `auto` sessions to `danger-full-access`).
-*
-* @param resolve - resolves the host's permission-preset service per call.
-* @param log - the row logger used for the single degradation report.
-* @param chain - diagnostic dump of the resolution chain; defaults to empty.
-* @returns A managed preset face.
-*/
-function defensivePermissionPresets(resolve, log, chain = () => "") {
-	let reported = false;
-	let admit;
-	let release;
-	const degrade = (operation, error) => {
-		if (reported) return;
-		reported = true;
-		log.warn(`model-switch: the permission-preset service refused ${operation} (${String(error)}); the Auto reviewer passes tool calls through instead of blocking them [chain: ${chain()}]`);
-	};
-	const requireService = () => {
-		const face = resolve();
-		if (face === void 0) throw new Error("permission: the permission-preset service is unavailable");
-		return face;
-	};
-	return {
-		current(session) {
-			try {
-				return requireService().current(session);
-			} catch (error) {
-				degrade("current()", error);
-				return CUSTOM_PRESET;
-			}
-		},
-		set(session, preset) {
-			try {
-				return requireService().set(session, preset);
-			} catch (error) {
-				degrade("set()", error);
-				return;
-			}
-		},
-		registerAuto(next) {
-			admit = next;
-			release = requireService().registerAuto(next);
-			return () => {
-				admit = void 0;
-				const dispose = release;
-				release = void 0;
-				return dispose?.();
-			};
-		},
-		releaseForTakeover() {
-			const dispose = release;
-			release = void 0;
-			dispose?.();
-		},
-		reclaimRegistration() {
-			if (release !== void 0) return true;
-			if (admit === void 0) return false;
-			try {
-				release = requireService().registerAuto(admit);
-				return true;
-			} catch {
-				return false;
-			}
-		},
-		get registered() {
-			return release !== void 0;
-		}
-	};
-}
-/**
-* Build the scoped context the official gate runs under.
-* @param ctx - host context whose modelSwitch settings pin the reviewer route.
-* @param activeSession - optional AsyncLocalStorage correlating each `tools/pre-execute` call to its session.
-* @param presets - optional managed preset face shared with the row's takeover.
-* @returns A child context shadowing the llm service and the permission-preset
-* service (always: a gate that sees the raw service can fail a tool call).
-*/
-function reviewScope(ctx, activeSession = new AsyncLocalStorage(), presets = defensivePermissionPresets(() => permissionPresetsOf(ctx), ctx.logger, () => fiberChainOf(ctx))) {
-	return ctx.extend({
-		llm: reviewLlm(ctx.llm, () => resolveSessionAutoReviewRoute(ctx, activeSession.getStore())),
-		permissionPresets: presets
-	});
-}
-/** Structural read of launcher-provided profile facts (the app-boot seam). */
-function autoReviewBundleActive(ctx) {
-	let profile;
-	try {
-		profile = ctx.get("profileContext", false);
-	} catch {
-		return false;
-	}
-	if (profile === null || typeof profile !== "object") return false;
-	const bundles = profile.startedBundles;
-	return Array.isArray(bundles) && bundles.includes(AUTO_REVIEW_BUNDLE);
-}
-/** Structural read of the loader service the takeover drives. */
-function loaderOf(ctx) {
-	try {
-		const loader = ctx.get("loader", false);
-		return loader !== null && typeof loader === "object" ? loader : void 0;
-	} catch {
-		return;
-	}
-}
-/**
-* Wrap the official gate as a plugin that declares its own dependencies.
-*
-* Directly calling `official.apply(scope)` ran the gate's code on this row's
-* fiber, so every service the gate reads had to be mirrored in this row's
-* `inject`. Mounting it instead lets cordis resolve the official list, which is
-* what keeps a released Host's new dependency (0.2.1's `workingDirectory`) from
-* breaking every tool call. The hooks let the caller observe whether the gate
-* actually ran before it binds the session-correlation listener.
-*
-* @param gate - the official module (or an equivalent structural gate).
-* @param hooks - applied/failure observers; the failure is rethrown.
-* @returns A cordis plugin mounting the official gate unchanged.
-*/
-function autoReviewGate(gate, hooks = {}) {
-	return {
-		name: gate.name ?? "experimental-auto-review",
-		...gate.inject === void 0 ? {} : { inject: [...gate.inject] },
-		apply(gateCtx) {
-			try {
-				gate.apply(gateCtx);
-			} catch (error) {
-				hooks.onFailure?.(error);
-				throw error;
-			}
-			hooks.onApplied?.();
-		}
-	};
-}
-/**
-* The gate fiber mounted by the current row instance.
-*
-* `registerAuto` is a single live registration owned by the gate's effect
-* lifetime, and its disposer is what clears the Auto preset. A re-applied row
-* must await the previous gate's unloading before the next registration runs,
-* otherwise the new `registerAuto` throws `already registered` and its effect
-* cleanup leaves the catalog without Auto.
-*/
-let lastGateFiber;
-/**
-* Mount the official gate under the reviewer-route scope and own the seam.
-*
-* A profile that never enabled the optional bundle keeps no Auto preset and no
-* reviewer; a deployment missing the official package reports the lost
-* capability explicitly instead of guessing another path. A composed (or
-* plugin-manager re-enabled) official row is displaced first — see
-* `./auto-review-takeover.ts` for the choreography and why the yield is
-* synchronous.
-*/
-async function apply(ctx) {
-	if (!autoReviewBundleActive(ctx)) {
-		ctx.logger.info("model-switch: auto-review bundle is not active in this profile; the reviewer route override stays unmounted");
-		return;
-	}
-	let official;
-	try {
-		official = await import("@deepseek-ai/dsh-experimental-auto-review");
-	} catch (cause) {
-		ctx.logger.error("model-switch: @deepseek-ai/dsh-experimental-auto-review is unavailable; the Auto reviewer cannot run at all");
-		ctx.logger.error(cause);
-		return;
-	}
-	const presets = defensivePermissionPresets(() => permissionPresetsOf(ctx), ctx.logger, () => fiberChainOf(ctx));
-	const activeSession = new AsyncLocalStorage();
-	const scope = reviewScope(ctx, activeSession, presets);
-	let gateReady = false;
-	let mountInFlight;
-	/** Sessions currently on the Auto preset (best-effort). */
-	const rememberAuto = () => {
-		const remembered = [];
-		try {
-			const sessions = ctx.get("sessions", false);
-			for (const session of sessions?.list?.() ?? []) if (presets.current(session) === AUTO_PRESET) remembered.push(session);
-		} catch {}
-		return remembered;
-	};
-	const restoreAuto = (remembered) => {
-		for (const session of remembered) try {
-			presets.set(session, AUTO_PRESET);
-		} catch {}
-	};
-	/**
-	* Run one displacement step without losing the sessions' Auto selection.
-	*
-	* Disposing a gate moves live `auto` sessions to `danger-full-access` by
-	* design (the official teardown runs on both the displaced row and this
-	* row's own re-mounts); the remembered selection is restored afterwards.
-	*/
-	const preserveAuto = async (action) => {
-		const remembered = rememberAuto();
-		await action();
-		restoreAuto(remembered);
-	};
-	/** Mount this row's shielded gate exactly once; failures dispose and report. */
-	const mountGate = () => {
-		mountInFlight ??= (async () => {
-			let outcome = "failed";
-			await preserveAuto(async () => {
-				const previous = lastGateFiber;
-				lastGateFiber = void 0;
-				gateReady = false;
-				if (previous !== void 0) try {
-					await previous.dispose();
-				} catch (cause) {
-					ctx.logger.info("model-switch: the previous auto-review gate had already unloaded; continuing with the new one");
-					ctx.logger.info(String(cause));
-				}
-				let failure;
-				let applied = false;
-				const fiber = scope.plugin(autoReviewGate(official, {
-					onApplied: () => {
-						applied = true;
-						bindAutoReviewSessionCorrelation(scope, activeSession);
-					},
-					onFailure: (error) => {
-						failure = error;
-					}
-				}));
-				try {
-					await fiber;
-				} catch (cause) {
-					failure ??= cause;
-				}
-				if (failure !== void 0) {
-					try {
-						await fiber.dispose();
-					} catch {}
-					ctx.logger.warn(`model-switch: the Auto reviewer gate did not mount (${String(failure)}); the displaced registration may still be releasing`);
-					outcome = "failed";
-					return;
-				}
-				if (!applied) {
-					ctx.logger.info("model-switch: the official auto-review gate is waiting for its host services; the reviewer route override is not bound yet");
-					outcome = "waiting";
-					return;
-				}
-				lastGateFiber = fiber;
-				gateReady = true;
-				outcome = "applied";
-			});
-			return outcome;
-		})().finally(() => {
-			mountInFlight = void 0;
-		});
-		return mountInFlight;
-	};
-	/** Make this row's Auto registration live; true once it is held. */
-	const claim = async () => {
-		if (presets.registered) return true;
-		if (gateReady) return presets.reclaimRegistration();
-		return await mountGate() !== "failed";
-	};
-	const reclaim = installAutoReviewTakeover(ctx, {
-		yieldRegistration: () => presets.releaseForTakeover(),
-		claim,
-		preserveAuto
-	});
-	const entry = officialAutoReviewEntry(loaderOf(ctx));
-	if (entry !== void 0 && entry.disabled !== true) await reclaim(entry);
-	else await claim();
-	if (!presets.registered) ctx.logger.error("model-switch: the Auto registration is not held by this row; Auto review runs without the configurable reviewer route");
-}
-//#endregion
-export { apply, autoReviewGate, autoReviewRouteOf, bindAutoReviewSessionCorrelation, defensivePermissionPresets, inject, name, resolveSessionAutoReviewRoute, reviewLlm, reviewScope };
+import { a as bindAutoReviewSessionCorrelation, c as installToolCallSafetyNet, d as resolveSessionAutoReviewRoute, f as reviewLlm, i as autoReviewStatus, l as isReviewerInfrastructureFailure, n as autoReviewGate, o as defensivePermissionPresets, p as reviewScope, r as autoReviewRouteOf, s as inject, t as apply, u as name } from "./auto-review-BLtwr83V.js";
+export { apply, autoReviewGate, autoReviewRouteOf, autoReviewStatus, bindAutoReviewSessionCorrelation, defensivePermissionPresets, inject, installToolCallSafetyNet, isReviewerInfrastructureFailure, name, resolveSessionAutoReviewRoute, reviewLlm, reviewScope };

package/lib/client.js

@@ -156,7 +156,8 @@ window.__ModuleLoader__.load({
 			imageProviderAdapters: Object.freeze({
 				available: true,
 				providers: Object.freeze(["codex", "grok"])
-			})
+			}),
+			autoReview: Object.freeze({ available: true })
 		});
 		//#endregion
 		//#region src/client/search-capabilities.ts
@@ -1802,7 +1803,7 @@ window.__ModuleLoader__.load({
 								}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
 									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 										className: ModelSwitchSettings_module_css_default.hint,
-										children: props.t("autoReviewTakeoverNote")
+										children: props.t(props.capabilities.autoReview?.available ?? true ? "autoReviewTakeoverNote" : "autoReviewTakeoverWarning")
 									}),
 									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 										className: ModelSwitchSettings_module_css_default.hint,
@@ -2289,6 +2290,7 @@ window.__ModuleLoader__.load({
 			autoReviewFollow: "跟随会话模型",
 			autoReviewHelp: "为官方 auto-review（Auto 权限预设的逐调用审查）指定审查模型；需启用官方 auto-review 能力包。关闭时审查跟随当前会话模型。本插件启用时，官方「自动审查」组件由本插件接管。",
 			autoReviewRouteHelp: "审查请求固定使用这里的 Provider/模型，与会话模型无关；保存后对下一次审查立即生效。",
+			autoReviewTakeoverWarning: "审查路由当前未接管（官方「自动审查」行仍占着唯一注册位）：工具调用会照常执行，但这些调用未经审查。重启 DSH 即可收敛；若重启后仍显示此提示，请把日志里的 fiber 链反馈给上游。",
 			autoReviewTakeoverNote: "官方「自动审查」组件已由本插件接管（提供可配置审查路由）；在插件管理里把它重新打开会被再次关闭，并在日志里留下一条记录。",
 			compaction: "压缩模型",
 			compactionFollow: "跟随会话模型",
@@ -2348,6 +2350,7 @@ window.__ModuleLoader__.load({
 			autoReviewFollow: "Follows the session model",
 			autoReviewHelp: "Pin the reviewer model for the official auto-review gate (per-call review under the Auto permission preset). Requires the official auto-review bundle. When off, reviews follow the session model. With this plugin enabled the official auto-review component is taken over.",
 			autoReviewRouteHelp: "Review requests use exactly this provider/model regardless of the session model; saved changes apply to the very next review.",
+			autoReviewTakeoverWarning: "The reviewer route is not held right now (the official Auto-review row still owns the single registration): tool calls keep running, but they are not reviewed. Restart DSH to converge; if this stays after a restart, report the fiber chain from the log upstream.",
 			autoReviewTakeoverNote: "The official auto-review component is taken over by this plugin (configurable reviewer route); toggling it back on in the plugin manager is re-disabled, with one log line.",
 			compaction: "Compaction model",
 			compactionFollow: "Follows the conversation model",

package/lib/compaction.js

@@ -1,4 +1,4 @@
-import { i as sessionProviderOf, r as resolveCapabilityRoute } from "./session-route-BjNPlliu.js";
+import { i as sessionProviderOf, r as resolveCapabilityRoute } from "./session-route-D1zoZgf3.js";
 //#region lib/types/compaction.js
 /** Official compaction row this module supersedes. */
 const OFFICIAL_COMPACTION_ROW = "compaction-basic";

package/lib/index.js

@@ -1,4 +1,5 @@
-import { n as normalizeProviderGroups } from "./provider-group-CwadImhH.js";
+import { o as normalizeProviderGroups } from "./session-route-D1zoZgf3.js";
+import { i as autoReviewStatus } from "./auto-review-BLtwr83V.js";
 import { ModelSwitchAdapterRegistry } from "./adapter-registry.js";
 import { createRequire } from "node:module";
 import z from "@deepseek-ai/schemastery";
@@ -103,7 +104,8 @@ const RUNTIME_CAPABILITIES = Object.freeze({
 	imageProviderAdapters: Object.freeze({
 		available: true,
 		providers: Object.freeze(["codex", "grok"])
-	})
+	}),
+	autoReview: Object.freeze({ available: true })
 });
 //#endregion
 //#region lib/types/search-provider.js
@@ -771,6 +773,10 @@ var ModelSwitchRuntime = class extends Service {
 				available: true,
 				providers: catalog.map((provider) => provider.id),
 				catalog
+			},
+			autoReview: autoReviewStatus.held ? { available: true } : {
+				available: false,
+				reason: "auto-review-takeover"
 			}
 		};
 	}