dsh-model-switch 0.4.37 → 0.4.39

package/lib/client.js

@@ -8,6 +8,317 @@ window.__ModuleLoader__.load({
 		let react_jsx_runtime = require("react/jsx-runtime");
 		let react_dom = require("react-dom");
 		let _deepseek_ai_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
+		/** Catalog lookup by id. */
+		const SOURCE_BY_ID = new Map([
+			{
+				id: "core",
+				kind: "core",
+				label: "DSH 核心",
+				repo: "https://github.com/deepseek-ai/deepseek-harness"
+			},
+			{
+				id: "dsh-ops",
+				kind: "plugin",
+				label: "插件 · dsh-ops",
+				repo: "https://github.com/T-Auto/dsh-ops"
+			},
+			{
+				id: "dsh-browser-cdp",
+				kind: "plugin",
+				label: "插件 · dsh-browser-cdp",
+				repo: "https://github.com/drscrewdriver/dsh-browser-cdp"
+			},
+			{
+				id: "dsh-auto-memory",
+				kind: "plugin",
+				label: "插件 · dsh-auto-memory",
+				repo: "https://github.com/AskTheWay/dsh-auto-memory"
+			},
+			{
+				id: "dsh-model-switch",
+				kind: "plugin",
+				label: "插件 · dsh-model-switch",
+				repo: "https://github.com/vandoor7-droid/dsh-model-switch"
+			},
+			{
+				id: "mcp:wincu",
+				kind: "mcp",
+				label: "MCP · wincu（dsh-computer-use-win）",
+				repo: "https://github.com/Yu-tao-Li/dsh-computer-use-win"
+			},
+			{
+				id: "qqbot-extension",
+				kind: "extension",
+				label: "QQ 机器人扩展（框架 @zaofan/dsh-qqbot）",
+				repo: "https://github.com/zaofan-make/dsh-qqbot"
+			}
+		].map((entry) => [entry.id, entry]));
+		/**
+		* Tool names the released Host owns, calibrated against dsh 0.2.1-rc.2.
+		*
+		* A name outside the catalog would otherwise be reported as core, which is the
+		* one guess a reader could act on wrongly; it resolves to `unknown` instead.
+		*/
+		const CORE_TOOLS = /* @__PURE__ */ new Set([
+			"ask_user_question",
+			"create_goal",
+			"create_skill",
+			"create_worktree",
+			"edit",
+			"exit_plan_mode",
+			"get_goal",
+			"glob",
+			"grep",
+			"interrupt_agent",
+			"job_kill",
+			"job_list",
+			"job_output",
+			"list_agents",
+			"list_mcp_resource_templates",
+			"list_mcp_resources",
+			"load_workspace_dependencies",
+			"present",
+			"pwsh",
+			"ralph",
+			"read",
+			"read_image",
+			"read_mcp_resource",
+			"schedule_create",
+			"schedule_delete",
+			"schedule_list",
+			"schedule_update",
+			"send_message",
+			"session_event_read",
+			"session_event_search",
+			"session_event_trace",
+			"session_search",
+			"session_trace",
+			"sidebar_open",
+			"skill",
+			"spawn_teammate",
+			"subagent",
+			"subagent_fork",
+			"team_task_create",
+			"team_task_get",
+			"team_task_list",
+			"team_task_update",
+			"terminal_close",
+			"terminal_list",
+			"terminal_open",
+			"terminal_read",
+			"terminal_send",
+			"terminal_signal",
+			"todo_write",
+			"update_goal",
+			"wait_agent",
+			"web_fetch",
+			"web_search",
+			"web_search_pro",
+			"workflow",
+			"working_directory",
+			"write"
+		]);
+		/** MCP server name → catalog id, for the servers this allowlist knows. */
+		const MCP_SERVERS = /* @__PURE__ */ new Map([["wincu", "mcp:wincu"]]);
+		/** Plugin identity by tool-name prefix (checked before the core catalog). */
+		const PLUGIN_PREFIXES = [
+			["bcdp_", "dsh-browser-cdp"],
+			["browser_window_", "dsh-browser-cdp"],
+			["ops_", "dsh-ops"],
+			["memory_", "dsh-auto-memory"]
+		];
+		/** Single plugin tools that carry no prefix. */
+		const PLUGIN_TOOLS = /* @__PURE__ */ new Map([["generate_image", "dsh-model-switch"]]);
+		/** `<base>__<owner>` — the extension-tool naming the QQ bot framework uses. */
+		const EXTENSION_TOOL = /^([A-Za-z0-9_-]+)__(.+)$/;
+		/**
+		* Default allowlist: every pure-read tool this deployment exposes, calibrated on
+		* a live desktop profile (105 tools) at dsh 0.2.1-rc.2.
+		*
+		* Grouped by origin so a reader can trace each entry through {@link SOURCE_CATALOG}.
+		* Entries ending in `*` are patterns: the QQ bot extension suffixes its tools with
+		* the bot's own name, so `sessions_list__*` keeps working when the persona is
+		* renamed.
+		*/
+		const DEFAULT_READ_ONLY_TOOLS = [
+			"read",
+			"grep",
+			"glob",
+			"read_image",
+			"skill",
+			"web_search",
+			"web_search_pro",
+			"web_fetch",
+			"job_list",
+			"job_output",
+			"terminal_list",
+			"terminal_read",
+			"list_agents",
+			"team_task_list",
+			"team_task_get",
+			"get_goal",
+			"schedule_list",
+			"list_mcp_resources",
+			"list_mcp_resource_templates",
+			"read_mcp_resource",
+			"session_search",
+			"session_event_search",
+			"session_event_read",
+			"session_event_trace",
+			"session_trace",
+			"ops_read_files",
+			"ops_discover_tools",
+			"bcdp_status",
+			"bcdp_help",
+			"bcdp_doctor",
+			"bcdp_snapshot",
+			"browser_window_status",
+			"memory_list",
+			"memory_read",
+			"mcp__wincu__windows_computer_use_accessibility_tree",
+			"mcp__wincu__windows_computer_use_element_info",
+			"mcp__wincu__windows_computer_use_find",
+			"mcp__wincu__windows_computer_use_health",
+			"mcp__wincu__windows_computer_use_list_windows",
+			"mcp__wincu__windows_computer_use_ocr",
+			"mcp__wincu__windows_computer_use_screenshot",
+			"mcp__wincu__windows_computer_use_snapshot",
+			"mcp__wincu__windows_computer_use_tools",
+			"mcp__wincu__windows_computer_use_wait",
+			"mcp__wincu__windows_computer_use_wait_for",
+			"sessions_list__*",
+			"bing_search__*"
+		];
+		/**
+		* Validate one allowlist entry.
+		*
+		* `*` is a suffix wildcard: the entry must keep at least one literal leading
+		* character, so a stray `*` can never turn the list into "allow everything".
+		*
+		* @param entry - the raw entry as typed in settings.
+		* @returns `ok`, or the specific problem.
+		*/
+		function validateAllowEntry(entry) {
+			const trimmed = entry.trim();
+			if (trimmed === "") return "empty";
+			if (/^\*+$/.test(trimmed)) return "bare-wildcard";
+			if (trimmed.startsWith("*")) return "leading-wildcard";
+			return "ok";
+		}
+		/**
+		* Whether a tool name matches one allowlist entry.
+		*
+		* Exact names match exactly; an entry may end in `*`, which matches any
+		* remaining characters (including none). Invalid entries never match.
+		*
+		* @param name - the tool name from `exec.name`.
+		* @param entry - one allowlist entry.
+		* @returns true when the call may skip review.
+		*/
+		function matchesAllowPattern(name, entry) {
+			if (name === "" || validateAllowEntry(entry) !== "ok") return false;
+			const trimmed = entry.trim();
+			const star = trimmed.indexOf("*");
+			if (star === -1) return name === trimmed;
+			const prefix = trimmed.slice(0, star);
+			const suffix = trimmed.slice(star + 1);
+			if (!name.startsWith(prefix) || !name.endsWith(suffix)) return false;
+			return name.length >= prefix.length + suffix.length;
+		}
+		/**
+		* Whether a tool name is covered by an allowlist.
+		* @param name - the tool name under review.
+		* @param allowlist - configured entries, patterns included.
+		* @returns true when at least one entry matches.
+		*/
+		function isAllowedByList(name, allowlist) {
+			return allowlist.some((entry) => matchesAllowPattern(name, entry));
+		}
+		/**
+		* Resolve the origin of one tool name for display.
+		*
+		* Resolution order: MCP bridge → `<tool>__<owner>` extension → plugin prefix →
+		* plugin table → core catalog → unknown. Only the first two are structural; the
+		* rest are calibrated names, so an unlisted tool is reported as unknown rather
+		* than guessed into a package.
+		*
+		* @param name - the tool name.
+		* @returns The origin, with its repository when known.
+		*/
+		function resolveToolSource(name) {
+			const trimmed = name.trim().replace(/\*+$/, "");
+			const mcp = /^mcp__([A-Za-z0-9_-]+)__/.exec(trimmed);
+			if (mcp !== null) {
+				const server = mcp[1];
+				const entry = SOURCE_BY_ID.get(MCP_SERVERS.get(server) ?? "");
+				if (entry !== void 0) return {
+					kind: "mcp",
+					label: entry.label,
+					repo: entry.repo,
+					owner: server
+				};
+				return {
+					kind: "mcp",
+					label: `MCP · ${server}`,
+					owner: server
+				};
+			}
+			const extension = EXTENSION_TOOL.exec(trimmed);
+			if (extension !== null && !trimmed.startsWith("mcp__")) {
+				const entry = SOURCE_BY_ID.get("qqbot-extension");
+				const base = extension[1];
+				const owner = extension[2];
+				return {
+					kind: "extension",
+					label: `扩展 · ${base}__${owner}`,
+					...entry === void 0 ? {} : { repo: entry.repo },
+					owner
+				};
+			}
+			if (trimmed.endsWith("__")) {
+				const entry = SOURCE_BY_ID.get("qqbot-extension");
+				return {
+					kind: "extension",
+					label: `扩展 · ${trimmed.slice(0, -2)}__*`,
+					...entry === void 0 ? {} : { repo: entry.repo },
+					owner: "*"
+				};
+			}
+			for (const [prefix, id] of PLUGIN_PREFIXES) {
+				if (!trimmed.startsWith(prefix)) continue;
+				const entry = SOURCE_BY_ID.get(id);
+				if (entry !== void 0) return {
+					kind: "plugin",
+					label: entry.label,
+					repo: entry.repo,
+					owner: id
+				};
+			}
+			const plugin = PLUGIN_TOOLS.get(trimmed);
+			if (plugin !== void 0) {
+				const entry = SOURCE_BY_ID.get(plugin);
+				if (entry !== void 0) return {
+					kind: "plugin",
+					label: entry.label,
+					repo: entry.repo,
+					owner: plugin
+				};
+			}
+			if (CORE_TOOLS.has(trimmed)) {
+				const entry = SOURCE_BY_ID.get("core");
+				return {
+					kind: "core",
+					label: entry?.label ?? "DSH 核心",
+					...entry === void 0 ? {} : { repo: entry.repo },
+					owner: "core"
+				};
+			}
+			return {
+				kind: "unknown",
+				label: "未知来源"
+			};
+		}
+		//#endregion
 		//#region src/client-contract.ts
 		const MODEL_SWITCH_CONFIG_ID = "model-switch";
 		const PROVIDERS_CONFIG_ID = "llm-providers-ui";
@@ -34,6 +345,22 @@ window.__ModuleLoader__.load({
 			provider: "autoReviewProvider",
 			model: "autoReviewModel"
 		});
+		Object.freeze({
+			enabled: "autoReviewSkipReadOnly",
+			tools: "autoReviewAllowlist"
+		});
+		/**
+		* Derive the allowlist editor's value.
+		*
+		* An absent list means "never configured" and shows the shipped defaults; an
+		* explicitly emptied list stays empty, so clearing it is not undone by a reload.
+		*/
+		function deriveAutoReviewAllowlist(settings) {
+			return {
+				enabled: settings.autoReviewSkipReadOnly === true,
+				tools: Array.isArray(settings.autoReviewAllowlist) ? [...settings.autoReviewAllowlist] : [...DEFAULT_READ_ONLY_TOOLS]
+			};
+		}
 		/** Compaction summarization route for `/compact` and automatic compaction; both unset means the official default (the conversation target). */
 		const COMPACTION_SETTINGS_FIELDS = Object.freeze({
 			provider: "compactProvider",
@@ -86,6 +413,52 @@ window.__ModuleLoader__.load({
 		function routePairConfigured(route) {
 			return route !== void 0 && (route.provider ?? "").trim() !== "" && (route.model ?? "").trim() !== "";
 		}
+		/**
+		* Decode the reviewer counters from a `tools` RPC payload.
+		* @param value - the RPC result value.
+		* @returns The counters, or undefined when the Host does not report them.
+		*/
+		function decodeReviewStatus(value) {
+			if (value === null || typeof value !== "object" || Array.isArray(value)) return void 0;
+			const raw = value.status;
+			if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return void 0;
+			const status = raw;
+			const count = (input) => typeof input === "number" && Number.isFinite(input) && input >= 0 ? input : 0;
+			return {
+				held: status.held === true,
+				allowedCalls: count(status.allowedCalls),
+				skippedReadOnly: count(status.skippedReadOnly)
+			};
+		}
+		/**
+		* Decode the `tools` RPC payload.
+		*
+		* Malformed entries are skipped rather than failing the page: the catalog is a
+		* convenience view over the Host's tools, and a partial list is still useful.
+		*
+		* @param value - the RPC result value.
+		* @returns The rows, or undefined when the payload is not a catalog at all.
+		*/
+		function decodeToolCatalog(value) {
+			if (value === null || typeof value !== "object" || Array.isArray(value)) return void 0;
+			const listed = value.tools;
+			if (!Array.isArray(listed)) return void 0;
+			const rows = [];
+			for (const entry of listed) {
+				if (entry === null || typeof entry !== "object" || Array.isArray(entry)) continue;
+				const raw = entry;
+				if (typeof raw.name !== "string" || raw.name === "") continue;
+				const source = raw.source !== null && typeof raw.source === "object" && !Array.isArray(raw.source) ? raw.source : {};
+				rows.push({
+					name: raw.name,
+					description: typeof raw.description === "string" ? raw.description : "",
+					sourceLabel: typeof source.label === "string" ? source.label : "未知来源",
+					...typeof source.repo === "string" ? { repo: source.repo } : {},
+					recommended: isAllowedByList(raw.name, DEFAULT_READ_ONLY_TOOLS)
+				});
+			}
+			return rows;
+		}
 		//#endregion
 		//#region src/client/derived-config-form.ts
 		function deriveConfigForm(source, project, fields) {
@@ -666,7 +1039,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region \0dsh-css:src/client/ModelSwitchSettings.module.css.mjs
-		const css$2 = ".djvrPG_section{max-width:720px;color:var(--dsw-alias-label-primary);flex-direction:column;gap:12px;display:flex;container-type:inline-size}.djvrPG_title{margin:0;font-size:16px;font-weight:500;line-height:24px}.djvrPG_intro{color:var(--dsw-alias-label-tertiary);margin:0;font-size:14px;line-height:22px}.djvrPG_saved{color:var(--dsw-alias-state-success-primary);align-items:center;gap:6px;margin:0;font-size:12px;line-height:18px;display:flex}.djvrPG_savedDot{background:currentColor;border-radius:50%;width:7px;height:7px}.djvrPG_group{flex-direction:column;gap:8px;margin-top:8px;display:flex}.djvrPG_groupLabel{color:var(--dsw-alias-label-tertiary);margin:0 2px;font-size:12px;font-weight:500;line-height:18px}.djvrPG_routeCard{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-module-platform);border-radius:10px;list-style:none;overflow:hidden}.djvrPG_routeCardUnavailable{opacity:.72}.djvrPG_routeHeader{width:100%;min-height:68px;color:inherit;font:inherit;text-align:left;cursor:pointer;background:0 0;border:0;justify-content:space-between;align-items:center;gap:16px;padding:12px 14px;display:flex}.djvrPG_routeHeader:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:-2px}.djvrPG_routeHeader:disabled{cursor:default}.djvrPG_routeIcon{width:18px;height:18px;color:var(--dsw-alias-label-primary);flex:none;display:block}.djvrPG_routeCopy{flex-direction:column;flex:1;gap:4px;min-width:0;display:flex}.djvrPG_routeName{color:var(--dsw-alias-label-primary);align-items:center;gap:8px;font-size:14px;font-weight:600;line-height:20px;display:flex}.djvrPG_routeSummary{color:var(--dsw-alias-label-tertiary);text-overflow:ellipsis;white-space:nowrap;font-size:13px;line-height:18px;overflow:hidden}.djvrPG_badge{background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;flex:none;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}.djvrPG_badgeWarn{color:var(--dsw-alias-state-warn-label)}.djvrPG_chevron{width:18px;height:18px;color:var(--dsw-alias-label-primary);flex:none;transition:transform .16s}.djvrPG_routeCardOpen .djvrPG_chevron{transform:rotate(180deg)}.djvrPG_cardBody{border-top:1px solid var(--dsw-alias-border-l2);padding:16px 14px 18px}.djvrPG_formGrid{grid-template-columns:repeat(auto-fit,minmax(160px,1fr));gap:12px;display:grid}.djvrPG_field{flex-direction:column;gap:6px;min-width:0;display:flex}.djvrPG_fieldFull{grid-column:1/-1}.djvrPG_fieldLabel{color:var(--dsw-alias-label-secondary);font-size:12px;font-weight:500;line-height:18px}.djvrPG_input{box-sizing:border-box;border:1px solid var(--dsw-alias-border-l2);appearance:none;background-color:var(--dsw-alias-bg-layer-1);width:100%;height:32px;color:var(--dsw-alias-label-primary);font:inherit;background-image:url(\"data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' viewBox='0 0 12 12' fill='none'%3E%3Cpath d='M3 4.5L6 7.5L9 4.5' stroke='%2381858C' stroke-width='1.5' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E\");background-position:right 10px center;background-repeat:no-repeat;border-radius:8px;padding:0 32px 0 10px;font-size:14px;line-height:22px}.djvrPG_textInput{background-image:none;padding-right:10px}.djvrPG_input:focus{border-color:var(--dsw-alias-brand-primary);outline:none}.djvrPG_input:disabled{opacity:.6;cursor:default}.djvrPG_hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:18px}.djvrPG_warning{color:var(--dsw-alias-state-warn-label)}.djvrPG_message{flex:1;min-width:0}.djvrPG_cardFooter{border-top:1px solid var(--dsw-alias-border-l2);justify-content:flex-end;align-items:center;gap:8px;margin-top:14px;padding:12px 0 0;display:flex}.djvrPG_button{box-sizing:border-box;height:36px;font:inherit;cursor:pointer;border-radius:18px;justify-content:center;align-items:center;padding:0 14px;font-size:14px;line-height:22px;display:inline-flex}.djvrPG_secondaryButton{border:1px solid var(--dsw-alias-border-l2);color:var(--dsw-alias-label-primary);background:0 0}.djvrPG_secondaryButton:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover-solid)}.djvrPG_primaryButton{background:var(--dsw-alias-button-primary-fill);color:var(--dsw-alias-label-primary-foreground);border:0}.djvrPG_primaryButton:hover:not(:disabled){background:var(--dsw-alias-button-primary-hover)}.djvrPG_button:disabled{opacity:.4;cursor:default}.djvrPG_button:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}@container (width<=420px){.djvrPG_formGrid{grid-template-columns:1fr}.djvrPG_cardFooter .djvrPG_button{flex:1}}.djvrPG_routeHeaderRow{align-items:center;gap:8px;padding-right:14px;display:flex}.djvrPG_routeHeaderRow .djvrPG_routeHeader{flex:1;min-width:0}.djvrPG_rowCard{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-module-platform);border-radius:10px;align-items:flex-start;gap:16px;padding:14px 16px;display:flex}.djvrPG_rowCopy{flex:1;gap:4px;min-width:0;display:grid}.djvrPG_rowTitle{color:var(--dsw-alias-label-primary);font-size:14px;font-weight:600;line-height:20px}.djvrPG_switch{background:var(--dsw-alias-bg-layer-1);width:40px;height:24px;box-shadow:inset 0 0 0 1px var(--dsw-alias-border-l2);cursor:pointer;border:0;border-radius:999px;flex:none;padding:0;position:relative}.djvrPG_switchOn{background:var(--dsw-alias-button-primary-fill);box-shadow:none}.djvrPG_switch i{background:var(--dsw-alias-label-primary-foreground);pointer-events:none;border-radius:50%;width:18px;height:18px;transition:left .16s;position:absolute;top:3px;left:3px}.djvrPG_switchOn i{left:19px}.djvrPG_switch:disabled{opacity:.4;cursor:default}.djvrPG_switch:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}@media (prefers-reduced-motion:reduce){.djvrPG_chevron,.djvrPG_switch i{transition:none}}";
+		const css$2 = ".djvrPG_section{max-width:720px;color:var(--dsw-alias-label-primary);flex-direction:column;gap:12px;display:flex;container-type:inline-size}.djvrPG_title{margin:0;font-size:16px;font-weight:500;line-height:24px}.djvrPG_intro{color:var(--dsw-alias-label-tertiary);margin:0;font-size:14px;line-height:22px}.djvrPG_saved{color:var(--dsw-alias-state-success-primary);align-items:center;gap:6px;margin:0;font-size:12px;line-height:18px;display:flex}.djvrPG_savedDot{background:currentColor;border-radius:50%;width:7px;height:7px}.djvrPG_group{flex-direction:column;gap:8px;margin-top:8px;display:flex}.djvrPG_groupLabel{color:var(--dsw-alias-label-tertiary);margin:0 2px;font-size:12px;font-weight:500;line-height:18px}.djvrPG_routeCard{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-module-platform);border-radius:10px;list-style:none;overflow:hidden}.djvrPG_routeCardUnavailable{opacity:.72}.djvrPG_routeHeader{width:100%;min-height:68px;color:inherit;font:inherit;text-align:left;cursor:pointer;background:0 0;border:0;justify-content:space-between;align-items:center;gap:16px;padding:12px 14px;display:flex}.djvrPG_routeHeader:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:-2px}.djvrPG_routeHeader:disabled{cursor:default}.djvrPG_routeIcon{width:18px;height:18px;color:var(--dsw-alias-label-primary);flex:none;display:block}.djvrPG_routeCopy{flex-direction:column;flex:1;gap:4px;min-width:0;display:flex}.djvrPG_routeName{color:var(--dsw-alias-label-primary);align-items:center;gap:8px;font-size:14px;font-weight:600;line-height:20px;display:flex}.djvrPG_routeSummary{color:var(--dsw-alias-label-tertiary);text-overflow:ellipsis;white-space:nowrap;font-size:13px;line-height:18px;overflow:hidden}.djvrPG_badge{background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;flex:none;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}.djvrPG_badgeWarn{color:var(--dsw-alias-state-warn-label)}.djvrPG_chevron{width:18px;height:18px;color:var(--dsw-alias-label-primary);flex:none;transition:transform .16s}.djvrPG_routeCardOpen .djvrPG_chevron{transform:rotate(180deg)}.djvrPG_cardBody{border-top:1px solid var(--dsw-alias-border-l2);padding:16px 14px 18px}.djvrPG_formGrid{grid-template-columns:repeat(auto-fit,minmax(160px,1fr));gap:12px;display:grid}.djvrPG_field{flex-direction:column;gap:6px;min-width:0;display:flex}.djvrPG_fieldFull{grid-column:1/-1}.djvrPG_fieldLabel{color:var(--dsw-alias-label-secondary);font-size:12px;font-weight:500;line-height:18px}.djvrPG_input{box-sizing:border-box;border:1px solid var(--dsw-alias-border-l2);appearance:none;background-color:var(--dsw-alias-bg-layer-1);width:100%;height:32px;color:var(--dsw-alias-label-primary);font:inherit;background-image:url(\"data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' viewBox='0 0 12 12' fill='none'%3E%3Cpath d='M3 4.5L6 7.5L9 4.5' stroke='%2381858C' stroke-width='1.5' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E\");background-position:right 10px center;background-repeat:no-repeat;border-radius:8px;padding:0 32px 0 10px;font-size:14px;line-height:22px}.djvrPG_textInput{background-image:none;padding-right:10px}.djvrPG_input:focus{border-color:var(--dsw-alias-brand-primary);outline:none}.djvrPG_input:disabled{opacity:.6;cursor:default}.djvrPG_hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:18px}.djvrPG_warning{color:var(--dsw-alias-state-warn-label)}.djvrPG_message{flex:1;min-width:0}.djvrPG_cardFooter{border-top:1px solid var(--dsw-alias-border-l2);justify-content:flex-end;align-items:center;gap:8px;margin-top:14px;padding:12px 0 0;display:flex}.djvrPG_button{box-sizing:border-box;height:36px;font:inherit;cursor:pointer;border-radius:18px;justify-content:center;align-items:center;padding:0 14px;font-size:14px;line-height:22px;display:inline-flex}.djvrPG_secondaryButton{border:1px solid var(--dsw-alias-border-l2);color:var(--dsw-alias-label-primary);background:0 0}.djvrPG_secondaryButton:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover-solid)}.djvrPG_primaryButton{background:var(--dsw-alias-button-primary-fill);color:var(--dsw-alias-label-primary-foreground);border:0}.djvrPG_primaryButton:hover:not(:disabled){background:var(--dsw-alias-button-primary-hover)}.djvrPG_button:disabled{opacity:.4;cursor:default}.djvrPG_button:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}@container (width<=420px){.djvrPG_formGrid{grid-template-columns:1fr}.djvrPG_cardFooter .djvrPG_button{flex:1}}.djvrPG_routeHeaderRow{align-items:center;gap:8px;padding-right:14px;display:flex}.djvrPG_routeHeaderRow .djvrPG_routeHeader{flex:1;min-width:0}.djvrPG_rowCard{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-module-platform);border-radius:10px;align-items:flex-start;gap:16px;padding:14px 16px;display:flex}.djvrPG_rowCopy{flex:1;gap:4px;min-width:0;display:grid}.djvrPG_rowTitle{color:var(--dsw-alias-label-primary);font-size:14px;font-weight:600;line-height:20px}.djvrPG_switch{background:var(--dsw-alias-bg-layer-1);width:40px;height:24px;box-shadow:inset 0 0 0 1px var(--dsw-alias-border-l2);cursor:pointer;border:0;border-radius:999px;flex:none;padding:0;position:relative}.djvrPG_switchOn{background:var(--dsw-alias-button-primary-fill);box-shadow:none}.djvrPG_switch i{background:var(--dsw-alias-label-primary-foreground);pointer-events:none;border-radius:50%;width:18px;height:18px;transition:left .16s;position:absolute;top:3px;left:3px}.djvrPG_switchOn i{left:19px}.djvrPG_switch:disabled{opacity:.4;cursor:default}.djvrPG_switch:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}@media (prefers-reduced-motion:reduce){.djvrPG_chevron,.djvrPG_switch i{transition:none}}.djvrPG_allowToolbar{flex-wrap:wrap;align-items:center;gap:8px;margin-bottom:10px;display:flex}.djvrPG_allowToolbar .djvrPG_input{flex:220px;width:auto;padding-right:10px}.djvrPG_allowList{flex-direction:column;gap:6px;margin:0 0 12px;padding:0;list-style:none;display:flex}.djvrPG_allowRow{border:1px solid var(--dsw-alias-border-l2);background-color:var(--dsw-alias-bg-layer-1);border-radius:8px;align-items:center;gap:10px;padding:6px 10px;display:flex}.djvrPG_allowLabel{cursor:default;flex:auto;align-items:center;gap:8px;min-width:0;display:flex}.djvrPG_allowLabel input{width:14px;height:14px;accent-color:var(--dsw-alias-brand-primary);flex:none}.djvrPG_allowName{color:var(--dsw-alias-label-primary);text-overflow:ellipsis;white-space:nowrap;font-size:12px;line-height:18px;overflow:hidden}.djvrPG_allowSource{color:var(--dsw-alias-label-secondary);flex:none;align-items:center;gap:4px;font-size:12px;line-height:18px;display:flex}.djvrPG_allowDot{opacity:.6}.djvrPG_allowRepo{color:var(--dsw-alias-brand-primary);text-decoration:none}.djvrPG_allowRepo:hover{text-decoration:underline}";
 		const tagId$2 = "dsh-model-switch/ModelSwitchSettings.module.css";
 		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId$2) + "]") === null) {
 			const tag = document.createElement("style");
@@ -676,6 +1049,14 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var ModelSwitchSettings_module_css_default = {
+			"allowDot": "djvrPG_allowDot",
+			"allowLabel": "djvrPG_allowLabel",
+			"allowList": "djvrPG_allowList",
+			"allowName": "djvrPG_allowName",
+			"allowRepo": "djvrPG_allowRepo",
+			"allowRow": "djvrPG_allowRow",
+			"allowSource": "djvrPG_allowSource",
+			"allowToolbar": "djvrPG_allowToolbar",
 			"badge": "djvrPG_badge",
 			"badgeWarn": "djvrPG_badgeWarn",
 			"button": "djvrPG_button",
@@ -1114,6 +1495,10 @@ window.__ModuleLoader__.load({
 			const [message, setMessage] = (0, react.useState)();
 			const [groupProvider, setGroupProvider] = (0, react.useState)("");
 			const [groupDraft, setGroupDraft] = (0, react.useState)(void 0);
+			const [allowlistQuery, setAllowlistQuery] = (0, react.useState)("");
+			const [catalogRows, setCatalogRows] = (0, react.useState)(void 0);
+			const [catalogState, setCatalogState] = (0, react.useState)("idle");
+			const [reviewStatus, setReviewStatus] = (0, react.useState)(void 0);
 			const loadSearchCapabilities = props.loadCapabilities;
 			const [searchSnapshot, setSearchSnapshot] = (0, react.useState)(void 0);
 			const [searchError, setSearchError] = (0, react.useState)(void 0);
@@ -1336,6 +1721,58 @@ window.__ModuleLoader__.load({
 					setBusy(void 0);
 				}
 			};
+			/**
+			* The Auto reviewer's read-only allowlist.
+			*
+			* An absent stored list means "never configured" and renders the shipped
+			* defaults; an explicitly emptied list stays empty. Every write carries both
+			* the switch and the entries, so the two can never drift apart on disk.
+			*/
+			const allowlistView = switchSettings.value === void 0 ? void 0 : deriveAutoReviewAllowlist(switchSettings.value);
+			const allowlistTools = allowlistView?.tools ?? DEFAULT_READ_ONLY_TOOLS;
+			const allowlistEnabled = allowlistView?.enabled === true;
+			const allowlistWritable = switchSettings.status === "ready" && switchSettings.writable;
+			const persistAllowlist = (next) => {
+				if (busy !== void 0 || !allowlistWritable) return;
+				const tools = next.tools.filter((entry) => validateAllowEntry(entry) === "ok");
+				run("allowlist", () => props.saveReviewAllowlist({
+					enabled: next.enabled,
+					tools
+				}));
+			};
+			const setAllowTool = (name, allowed) => {
+				if (allowed) {
+					if (isAllowedByList(name, allowlistTools)) return;
+					persistAllowlist({
+						enabled: true,
+						tools: [...allowlistTools, name]
+					});
+					return;
+				}
+				persistAllowlist({
+					enabled: allowlistEnabled,
+					tools: allowlistTools.filter((entry) => entry !== name)
+				});
+			};
+			const scanAllowlistTools = () => {
+				const scan = props.scanTools;
+				if (scan === void 0 || busy !== void 0) return;
+				setCatalogState("loading");
+				run("allowlist", async () => {
+					const scanned = await scan();
+					setCatalogRows(scanned.rows);
+					setReviewStatus(scanned.status);
+				}).then((accepted) => {
+					setCatalogState(accepted ? "ready" : "failed");
+				});
+			};
+			const allowlistQueryText = allowlistQuery.trim().toLowerCase();
+			const allowlistIncluded = allowlistTools.map((entry) => ({
+				entry,
+				source: resolveToolSource(entry)
+			})).filter((row) => allowlistQueryText === "" || row.entry.toLowerCase().includes(allowlistQueryText));
+			const allowlistAvailable = (catalogRows ?? []).filter((row) => !isAllowedByList(row.name, allowlistTools)).filter((row) => allowlistQueryText === "" || row.name.toLowerCase().includes(allowlistQueryText) || row.sourceLabel.toLowerCase().includes(allowlistQueryText));
+			const allowlistSummaryText = allowlistView === void 0 ? props.t("loading") : allowlistEnabled ? props.t("reviewAllowlistOnSummary").replace("{count}", String(allowlistTools.length)) : props.t("reviewAllowlistOffSummary");
 			const saveSubagent = () => {
 				if (subagentDraft === void 0 || subagentDraft.mode !== "fixed") return;
 				const matched = subagentCatalogModel;
@@ -2074,6 +2511,174 @@ window.__ModuleLoader__.load({
 							})
 						]
 					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+						className: ModelSwitchSettings_module_css_default.group,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h2", {
+							className: ModelSwitchSettings_module_css_default.groupLabel,
+							children: props.t("reviewAllowlistGroup")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(RouteCard, {
+							title: props.t("reviewAllowlist"),
+							summary: allowlistSummaryText,
+							hint: props.t("reviewAllowlistHelp"),
+							icon: "autoReview",
+							open: open === "allowlist",
+							onToggle: () => {
+								toggle("allowlist");
+							},
+							...allowlistEnabled ? { badge: props.t("reviewAllowlistBadge") } : {},
+							trailing: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(InstantSwitch, {
+								checked: allowlistEnabled,
+								disabled: busy !== void 0 || !allowlistWritable,
+								label: props.t("reviewAllowlist"),
+								onChange: (value) => {
+									persistAllowlist({
+										enabled: value,
+										tools: allowlistTools
+									});
+								}
+							}),
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: ModelSwitchSettings_module_css_default.hint,
+									children: props.t("reviewAllowlistNote")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									className: ModelSwitchSettings_module_css_default.allowToolbar,
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+											className: ModelSwitchSettings_module_css_default.input,
+											type: "search",
+											value: allowlistQuery,
+											placeholder: props.t("reviewAllowlistSearch"),
+											onChange: (event) => {
+												setAllowlistQuery(event.target.value);
+											}
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											className: cx(ModelSwitchSettings_module_css_default.button, ModelSwitchSettings_module_css_default.secondaryButton),
+											disabled: busy !== void 0 || props.scanTools === void 0 || catalogState === "loading",
+											onClick: scanAllowlistTools,
+											children: catalogState === "loading" ? props.t("reviewAllowlistScanning") : props.t("reviewAllowlistScan")
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											className: cx(ModelSwitchSettings_module_css_default.button, ModelSwitchSettings_module_css_default.secondaryButton),
+											disabled: busy !== void 0 || !allowlistWritable,
+											onClick: () => {
+												persistAllowlist({
+													enabled: allowlistEnabled,
+													tools: [...DEFAULT_READ_ONLY_TOOLS]
+												});
+											},
+											children: props.t("reviewAllowlistReset")
+										})
+									]
+								}),
+								message?.route === "allowlist" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: cx(ModelSwitchSettings_module_css_default.hint, ModelSwitchSettings_module_css_default.message),
+									children: message.text
+								}) : null,
+								reviewStatus === void 0 || reviewStatus.skippedReadOnly === 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: ModelSwitchSettings_module_css_default.hint,
+									children: props.t("reviewAllowlistSkipped").replace("{count}", String(reviewStatus.skippedReadOnly))
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+									className: ModelSwitchSettings_module_css_default.allowList,
+									children: allowlistIncluded.map((row) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
+										className: ModelSwitchSettings_module_css_default.allowRow,
+										children: [
+											/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+												className: ModelSwitchSettings_module_css_default.allowLabel,
+												children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+													type: "checkbox",
+													checked: true,
+													readOnly: true
+												}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+													className: ModelSwitchSettings_module_css_default.allowName,
+													children: row.entry
+												})]
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+												className: ModelSwitchSettings_module_css_default.allowSource,
+												children: [row.source.label, row.source.repo === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+													className: ModelSwitchSettings_module_css_default.allowDot,
+													children: "·"
+												}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+													className: ModelSwitchSettings_module_css_default.allowRepo,
+													href: row.source.repo,
+													target: "_blank",
+													rel: "noreferrer",
+													children: props.t("reviewAllowlistRepo")
+												})] })]
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+												type: "button",
+												className: cx(ModelSwitchSettings_module_css_default.button, ModelSwitchSettings_module_css_default.secondaryButton),
+												disabled: busy !== void 0 || !allowlistWritable,
+												onClick: () => {
+													setAllowTool(row.entry, false);
+												},
+												children: props.t("reviewAllowlistRemove")
+											})
+										]
+									}, row.entry))
+								}),
+								allowlistIncluded.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: ModelSwitchSettings_module_css_default.hint,
+									children: props.t("reviewAllowlistNone")
+								}) : null,
+								allowlistAvailable.length === 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: ModelSwitchSettings_module_css_default.hint,
+									children: props.t("reviewAllowlistAvailable")
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+									className: ModelSwitchSettings_module_css_default.allowList,
+									children: allowlistAvailable.map((row) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
+										className: ModelSwitchSettings_module_css_default.allowRow,
+										children: [
+											/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+												className: ModelSwitchSettings_module_css_default.allowLabel,
+												children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+													type: "checkbox",
+													checked: false,
+													readOnly: true
+												}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+													className: ModelSwitchSettings_module_css_default.allowName,
+													children: row.name
+												})]
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+												className: ModelSwitchSettings_module_css_default.allowSource,
+												children: [row.sourceLabel, row.repo === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+													className: ModelSwitchSettings_module_css_default.allowDot,
+													children: "·"
+												}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+													className: ModelSwitchSettings_module_css_default.allowRepo,
+													href: row.repo,
+													target: "_blank",
+													rel: "noreferrer",
+													children: props.t("reviewAllowlistRepo")
+												})] })]
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+												type: "button",
+												className: cx(ModelSwitchSettings_module_css_default.button, ModelSwitchSettings_module_css_default.secondaryButton),
+												disabled: busy !== void 0 || !allowlistWritable,
+												onClick: () => {
+													setAllowTool(row.name, true);
+												},
+												children: props.t("reviewAllowlistAdd")
+											})
+										]
+									}, row.name))
+								})] }),
+								catalogState === "failed" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: cx(ModelSwitchSettings_module_css_default.hint, ModelSwitchSettings_module_css_default.message),
+									children: props.t("reviewAllowlistScanFailed")
+								}) : null
+							]
+						})]
+					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 						className: ModelSwitchSettings_module_css_default.group,
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h2", {
@@ -2406,6 +3011,24 @@ window.__ModuleLoader__.load({
 			groupOverridesMore: "组覆盖：{listed} 等 {count} 个组；无组时用上方默认值",
 			saveTimeout: "保存超时，请重试",
 			saveRejected: "保存被拒绝，请重试",
+			reviewAllowlistGroup: "审查豁免",
+			reviewAllowlist: "纯读工具免审查",
+			reviewAllowlistBadge: "已开启",
+			reviewAllowlistOnSummary: "名单内 {count} 条免审查",
+			reviewAllowlistOffSummary: "未开启：每次调用都经审查",
+			reviewAllowlistHelp: "开启后，名单内的纯读工具直接执行，不再调用审查模型；名单外的写操作、命令执行与删除仍照常审查。",
+			reviewAllowlistNote: "来源按工具名解析（MCP 前缀 / 插件前缀 / 扩展后缀）；同名工具可以冒充来源，徽章只是提示，不是安全边界。",
+			reviewAllowlistSearch: "搜索工具名或来源",
+			reviewAllowlistScan: "扫描本机工具",
+			reviewAllowlistScanning: "扫描中…",
+			reviewAllowlistScanFailed: "扫描失败：Host 没有提供工具目录接口。",
+			reviewAllowlistReset: "恢复默认名单",
+			reviewAllowlistRemove: "移除",
+			reviewAllowlistAdd: "加入",
+			reviewAllowlistNone: "名单为空：没有任何工具免审查。",
+			reviewAllowlistAvailable: "本机存在但未放行的工具：",
+			reviewAllowlistRepo: "仓库",
+			reviewAllowlistSkipped: "本 Host 进程已为纯读调用跳过 {count} 次审查。",
 			"reason.central-subagent-routing": "Alpha.4 没有全局子代理启动路由接口。",
 			"reason.packaged-preset-roots": "Alpha.4 不支持插件提供额外 preset root。",
 			"reason.tool-owner-suppression": "Alpha.4 没有工具所有者或来源抑制接口。",
@@ -2468,6 +3091,24 @@ window.__ModuleLoader__.load({
 			groupOverridesMore: "Group overrides: {listed} and {count} groups; without a group the default above applies",
 			saveTimeout: "The save timed out; try again",
 			saveRejected: "The save was rejected; try again",
+			reviewAllowlistGroup: "Review bypass",
+			reviewAllowlist: "Skip review for pure reads",
+			reviewAllowlistBadge: "On",
+			reviewAllowlistOnSummary: "{count} entries skip review",
+			reviewAllowlistOffSummary: "Off: every call is reviewed",
+			reviewAllowlistHelp: "When on, allowlisted pure-read tools run immediately instead of calling the reviewer. Writes, command execution and deletions stay reviewed.",
+			reviewAllowlistNote: "Sources are resolved from the tool name (MCP prefix, plugin prefix, extension suffix); a lookalike tool can claim any origin, so the badge is a hint, not a security boundary.",
+			reviewAllowlistSearch: "Search tool name or source",
+			reviewAllowlistScan: "Scan local tools",
+			reviewAllowlistScanning: "Scanning…",
+			reviewAllowlistScanFailed: "Scan failed: the Host exposes no tool catalog endpoint.",
+			reviewAllowlistReset: "Restore defaults",
+			reviewAllowlistRemove: "Remove",
+			reviewAllowlistAdd: "Add",
+			reviewAllowlistNone: "Empty list: no tool skips review.",
+			reviewAllowlistAvailable: "Present on this machine but not allowed:",
+			reviewAllowlistRepo: "repo",
+			reviewAllowlistSkipped: "This Host process has skipped the reviewer {count} times.",
 			"reason.central-subagent-routing": "Alpha.4 exposes no global Subagent start-routing seam.",
 			"reason.packaged-preset-roots": "Alpha.4 exposes no plugin-owned preset root.",
 			"reason.tool-owner-suppression": "Alpha.4 exposes no tool owner or provenance suppression seam.",
@@ -3982,16 +4623,92 @@ window.__ModuleLoader__.load({
 			throw new PlanDismissalUnsupportedError("this DSH Host exposes neither PendingQuestion.dismiss() (0.2.x) nor PendingQuestion.cancel() (0.1.x)");
 		}
 		//#endregion
+		//#region src/picker/discuss-plan.ts
+		/**
+		* Withdraw the review by interrupting the turn, falling back to dismissal.
+		*
+		* Order matters: cancellation is what keeps the work details expanded, so it is
+		* tried first and only genuinely unavailable/refused cancellation falls through
+		* to the released withdrawal (which still gives the human the composer back, just
+		* without the expansion guarantee).
+		*
+		* @param cancelTurn - the session cancel seam; absent on a Host without one.
+		* @param sessionId - the session whose turn is being withdrawn.
+		* @param dismiss - the released `PendingQuestion` withdrawal.
+		* @returns Which route withdrew the review.
+		*/
+		async function discussPlan(cancelTurn, sessionId, dismiss) {
+			if (cancelTurn !== void 0 && sessionId !== "") try {
+				await cancelTurn(sessionId);
+				return "interrupted";
+			} catch {}
+			await dismiss();
+			return "dismissed";
+		}
+		//#endregion
 		//#region src/picker/plan-goal.ts
+		/**
+		* Strip the gateway's transport prefix from a Host message.
+		*
+		* The goal service throws `GoalError`, and the RPC gateway relays a thrown
+		* error as `code: "gateway/internal"` with the original text still in
+		* `message`. Showing `gateway/internal: goal "…" already exists…` to a human
+		* buries the only sentence that matters, so the prefix is removed here.
+		*/
+		function normalizeHostMessage(message) {
+			return message.replace(/^\s*gateway\/[a-z0-9-]+\s*:\s*/i, "").trim();
+		}
+		/**
+		* Whether a refused goal call means "this session already has a goal".
+		*
+		* Two shapes reach here. A Host that returns the domain code says
+		* `GOAL_ALREADY_EXISTS`; the gateway instead relays the thrown `GoalError` as
+		* `gateway/internal` and keeps only the text, so the message itself has to be
+		* recognised. The domain code is checked first and the text only decides the
+		* message shape the Host is known to produce — a refusal for any other reason
+		* must never clear the user's current goal.
+		*/
+		function isAlreadyExistsError(error) {
+			if (error.code === "GOAL_ALREADY_EXISTS") return true;
+			return /already exists with phase/i.test(error.message);
+		}
+		/** Codes that describe the transport, not the goal domain. */
+		function isTransportCode(code) {
+			return code === "GOAL_TRANSPORT" || code.startsWith("gateway/");
+		}
 		function failure(result, fallback) {
 			if (result.ok) return { message: fallback };
 			const { code, message } = result.error;
-			return {
+			const text = normalizeHostMessage(message);
+			const wording = text === "" ? fallback : text;
+			return isTransportCode(code) ? { message: wording } : {
 				code,
-				message: message.trim() === "" ? fallback : message
+				message: wording
 			};
 		}
 		/**
+		* Run one remote call, turning a rejected promise into a refused envelope.
+		*
+		* Generated remotes normally resolve `{ ok: false }`, but a transport failure
+		* (or an older Host that rejects instead of answering) must not escape as an
+		* unhandled rejection: the card would lose its error state and the plan would
+		* stay pending with no explanation.
+		*/
+		async function guarded(call, fallback) {
+			try {
+				return await call();
+			} catch (error) {
+				const text = normalizeHostMessage(error instanceof Error ? error.message : String(error));
+				return {
+					ok: false,
+					error: {
+						code: "GOAL_TRANSPORT",
+						message: text === "" ? fallback : text
+					}
+				};
+			}
+		}
+		/**
 		* Address the plan document exactly as the official opener does.
 		*
 		* A logged plan (`callId` present) resolves from `dsh-resource://plan/...`
@@ -4034,26 +4751,26 @@ window.__ModuleLoader__.load({
 				message: "goal objective must be a non-empty string"
 			};
 			const objective = `持续推进当前plan直到完成（plan 文档：${planDocumentAddress(sessionId, ref)}）`;
-			const created = await remote.create(sessionId, { objective });
+			const created = await guarded(() => remote.create(sessionId, { objective }), "the goal could not be created");
 			if (created.ok) return { kind: "created" };
-			if (created.error.code !== "GOAL_ALREADY_EXISTS") return {
+			if (!isAlreadyExistsError(created.error)) return {
 				kind: "failed",
 				...failure(created, "the goal could not be created")
 			};
-			const current = await remote.get(sessionId);
+			const current = await guarded(() => remote.get(sessionId), "the current goal could not be read for replacement");
 			if (!current.ok || current.value === void 0 || current.value === null) return {
 				kind: "failed",
 				...failure(current, "the current goal could not be read for replacement")
 			};
-			const cleared = await remote.clear(sessionId, {
+			const cleared = await guarded(() => remote.clear(sessionId, {
 				id: current.value.id,
 				revision: current.value.revision
-			});
+			}), "the current goal could not be cleared");
 			if (!cleared.ok) return {
 				kind: "failed",
 				...failure(cleared, "the current goal could not be cleared")
 			};
-			const retry = await remote.create(sessionId, { objective });
+			const retry = await guarded(() => remote.create(sessionId, { objective }), "the goal could not be created");
 			if (retry.ok) return { kind: "replaced" };
 			return {
 				kind: "failed",
@@ -4224,10 +4941,11 @@ window.__ModuleLoader__.load({
 				goalRemote: props.goalRemote,
 				planPreview: props.planPreview,
 				...props.resolveInteractionOperations === void 0 ? {} : { resolveInteractionOperations: props.resolveInteractionOperations },
-				...props.roleOf === void 0 ? {} : { roleOf: props.roleOf }
+				...props.roleOf === void 0 ? {} : { roleOf: props.roleOf },
+				...props.cancelTurn === void 0 ? {} : { cancelTurn: props.cancelTurn }
 			}, props.matched.key);
 		}
-		function PlanReviewState({ matched, review, available, providerLock, agentLocked, lockFailed, directory, t, goalRemote, planPreview, resolveInteractionOperations, roleOf }) {
+		function PlanReviewState({ matched, review, available, providerLock, agentLocked, lockFailed, directory, t, goalRemote, planPreview, resolveInteractionOperations, roleOf, cancelTurn }) {
 			const { snapshot, getDirectorySnapshot, load, select } = directory;
 			const [execution, setExecution] = (0, react.useState)(snapshot.current ?? void 0);
 			const [feedback, setFeedback] = (0, react.useState)("");
@@ -4448,7 +5166,9 @@ window.__ModuleLoader__.load({
 												icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconEditOutlineRegular, { size: 14 }),
 												disabled: busy,
 												onClick: () => {
-													settle(() => respondDismiss(matched, t("plan.cancelRejected"), t("plan.dismissUnsupported")), true);
+													settle(async () => {
+														await discussPlan(cancelTurn, matched.sessionId, () => respondDismiss(matched, t("plan.cancelRejected"), t("plan.dismissUnsupported")));
+													}, true);
 												},
 												children: t("plan.discuss")
 											}),
@@ -4767,6 +5487,20 @@ window.__ModuleLoader__.load({
 				const rpcOf = () => {
 					return scope.get("connection", false)?.rpc;
 				};
+				/**
+				* Cancel the session's running turn through the official Stop seam.
+				*
+				* The discuss action interrupts instead of merely withdrawing the pending
+				* question: an aborted turn is kept expanded by the transcript, so the work
+				* details the human was reading never fold. The conversation service is
+				* addressed through the session scope exactly like the official composer's
+				* Stop button does.
+				*/
+				const cancelTurn = async (sessionId) => {
+					const conversation = (sessions?.scope?.(sessionId))?.get?.("conversation");
+					if (typeof conversation?.cancel !== "function") throw new Error("model-switch: the conversation service exposes no cancel() through the session scope");
+					await conversation.cancel();
+				};
 				const directoryFace = (sessionId) => {
 					const directory = models.directoryFor(sessionId);
 					const available = sessions?.subagentAddress?.(sessionId) === void 0;
@@ -4789,6 +5523,7 @@ window.__ModuleLoader__.load({
 						},
 						goalRemote: () => goalRemoteFrom(scope),
 						planPreview,
+						cancelTurn,
 						hooks: {
 							directory: directory.store,
 							providerOrder: orderStore
@@ -4997,6 +5732,28 @@ window.__ModuleLoader__.load({
 					saveCapability: (route, ops) => {
 						return (route === "search" ? search : route === "image" ? image : route === "compaction" ? compaction : route === "title" ? sessionTitle : autoReview).mutate(ops);
 					},
+					saveReviewAllowlist: async ({ enabled, tools }) => {
+						if (!await owned.mutate([{
+							op: "set",
+							path: ["autoReviewSkipReadOnly"],
+							value: enabled
+						}, {
+							op: "set",
+							path: ["autoReviewAllowlist"],
+							value: [...tools]
+						}])) throw new Error("settings-rejected");
+					},
+					...connectionRpc === void 0 ? {} : { scanTools: async () => {
+						const response = await callPluginRpc(connectionRpc, "plugin-rpc/model-switch", "tools", {});
+						if (!response.ok || response.value === void 0) throw new Error(t("reviewAllowlistScanFailed"));
+						const rows = decodeToolCatalog(response.value);
+						if (rows === void 0) throw new Error(t("reviewAllowlistScanFailed"));
+						const status = decodeReviewStatus(response.value);
+						return status === void 0 ? { rows } : {
+							rows,
+							status
+						};
+					} },
 					saveProviderGroup: async (provider, group) => {
 						await saveProviderGroupFenced(owned, provider, group);
 					},