dsh-model-switch 0.4.41 → 0.4.42

package/lib/client.js

@@ -444,10 +444,22 @@ window.__ModuleLoader__.load({
 			if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return void 0;
 			const status = raw;
 			const count = (input) => typeof input === "number" && Number.isFinite(input) && input >= 0 ? input : 0;
+			const route = (input) => typeof input === "string" && input.trim() !== "" ? input.trim() : void 0;
+			const automode = status.automode !== null && typeof status.automode === "object" && !Array.isArray(status.automode) ? (() => {
+				const row = status.automode;
+				if (row.installed !== true) return void 0;
+				return {
+					route: route(row.route),
+					routeSkipped: route(row.routeSkipped),
+					added: count(row.added),
+					skipped: count(row.skipped)
+				};
+			})() : void 0;
 			return {
 				held: status.held === true,
 				allowedCalls: count(status.allowedCalls),
-				skippedReadOnly: count(status.skippedReadOnly)
+				skippedReadOnly: count(status.skippedReadOnly),
+				automode
 			};
 		}
 		/**
@@ -2603,6 +2615,10 @@ window.__ModuleLoader__.load({
 									className: ModelSwitchSettings_module_css_default.hint,
 									children: props.t("reviewAllowlistSkipped").replace("{count}", String(reviewStatus.skippedReadOnly))
 								}),
+								reviewStatus?.automode === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: ModelSwitchSettings_module_css_default.hint,
+									children: props.t("reviewAutomodeLinked").replace("{route}", reviewStatus.automode.route ?? (reviewStatus.automode.routeSkipped === "user-set" ? props.t("reviewAutomodeRouteOwn") : props.t("reviewAutomodeRouteUnset"))).replace("{added}", String(reviewStatus.automode.added)).replace("{skipped}", String(reviewStatus.automode.skipped))
+								}),
 								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
 									className: ModelSwitchSettings_module_css_default.allowList,
 									children: allowlistIncluded.map((row) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
@@ -3049,6 +3065,9 @@ window.__ModuleLoader__.load({
 			reviewAllowlistAvailable: "本机存在但未放行的工具：",
 			reviewAllowlistRepo: "仓库",
 			reviewAllowlistSkipped: "本 Host 进程已为纯读调用跳过 {count} 次审查。",
+			reviewAutomodeLinked: "Auto mode 已接入：审查路由 {route}，直通 +{added} 个纯读工具（{skipped} 条通配未同步）。",
+			reviewAutomodeRouteOwn: "沿用其自身配置",
+			reviewAutomodeRouteUnset: "未配置（沿用会话模型）",
 			"reason.central-subagent-routing": "Alpha.4 没有全局子代理启动路由接口。",
 			"reason.packaged-preset-roots": "Alpha.4 不支持插件提供额外 preset root。",
 			"reason.tool-owner-suppression": "Alpha.4 没有工具所有者或来源抑制接口。",
@@ -3129,6 +3148,9 @@ window.__ModuleLoader__.load({
 			reviewAllowlistAvailable: "Present on this machine but not allowed:",
 			reviewAllowlistRepo: "repo",
 			reviewAllowlistSkipped: "This Host process has skipped the reviewer {count} times.",
+			reviewAutomodeLinked: "Auto mode linked: reviewer route {route}, passes +{added} read-only tools ({skipped} pattern entries not synced).",
+			reviewAutomodeRouteOwn: "its own settings",
+			reviewAutomodeRouteUnset: "unset (follows the session model)",
 			"reason.central-subagent-routing": "Alpha.4 exposes no global Subagent start-routing seam.",
 			"reason.packaged-preset-roots": "Alpha.4 exposes no plugin-owned preset root.",
 			"reason.tool-owner-suppression": "Alpha.4 exposes no tool owner or provenance suppression seam.",

package/lib/index.js

@@ -1,6 +1,8 @@
 import { o as normalizeProviderGroups } from "./session-route-D1zoZgf3.js";
-import { h as resolveToolSource, i as autoReviewStatus, m as DEFAULT_READ_ONLY_TOOLS } from "./auto-review-BDx3LjVL.js";
+import { r as resolveToolSource, t as DEFAULT_READ_ONLY_TOOLS } from "./tool-allowlist-DlzB5GlQ.js";
+import { i as autoReviewStatus } from "./auto-review-QDEFUjT2.js";
 import { ModelSwitchAdapterRegistry } from "./adapter-registry.js";
+import { automodeCompatView } from "./automode-compat.js";
 import { createRequire } from "node:module";
 import z from "@deepseek-ai/schemastery";
 import { Service } from "@deepseek-ai/cordis";
@@ -526,7 +528,8 @@ function installCapabilitiesRpc(ctx, registry, snapshot) {
 		}), () => ({
 			held: autoReviewStatus.held,
 			allowedCalls: autoReviewStatus.allowedCalls,
-			skippedReadOnly: autoReviewStatus.skippedReadOnly
+			skippedReadOnly: autoReviewStatus.skippedReadOnly,
+			automode: automodeCompatView()
 		}));
 		const dispose = scope.connection.fetch.register({
 			path: "/api/plugin-rpc/model-switch",

package/lib/tool-allowlist-DlzB5GlQ.js

@@ -0,0 +1,332 @@
+/** Catalog lookup by id. */
+const SOURCE_BY_ID = new Map([
+	{
+		id: "core",
+		kind: "core",
+		label: "DSH 核心",
+		repo: "https://github.com/deepseek-ai/deepseek-harness"
+	},
+	{
+		id: "dsh-ops",
+		kind: "plugin",
+		label: "插件 · dsh-ops",
+		repo: "https://github.com/T-Auto/dsh-ops"
+	},
+	{
+		id: "dsh-browser-cdp",
+		kind: "plugin",
+		label: "插件 · dsh-browser-cdp",
+		repo: "https://github.com/drscrewdriver/dsh-browser-cdp"
+	},
+	{
+		id: "dsh-auto-memory",
+		kind: "plugin",
+		label: "插件 · dsh-auto-memory",
+		repo: "https://github.com/AskTheWay/dsh-auto-memory"
+	},
+	{
+		id: "dsh-model-switch",
+		kind: "plugin",
+		label: "插件 · dsh-model-switch",
+		repo: "https://github.com/vandoor7-droid/dsh-model-switch"
+	},
+	{
+		id: "mcp:wincu",
+		kind: "mcp",
+		label: "MCP · wincu（dsh-computer-use-win）",
+		repo: "https://github.com/Yu-tao-Li/dsh-computer-use-win"
+	},
+	{
+		id: "qqbot-extension",
+		kind: "extension",
+		label: "QQ 机器人扩展（框架 @zaofan/dsh-qqbot）",
+		repo: "https://github.com/zaofan-make/dsh-qqbot"
+	}
+].map((entry) => [entry.id, entry]));
+/**
+* Tool names the released Host owns, calibrated against dsh 0.2.1-rc.2.
+*
+* A name outside the catalog would otherwise be reported as core, which is the
+* one guess a reader could act on wrongly; it resolves to `unknown` instead.
+*/
+const CORE_TOOLS = /* @__PURE__ */ new Set([
+	"ask_user_question",
+	"create_goal",
+	"create_skill",
+	"create_worktree",
+	"edit",
+	"exit_plan_mode",
+	"get_goal",
+	"glob",
+	"grep",
+	"interrupt_agent",
+	"job_kill",
+	"job_list",
+	"job_output",
+	"list_agents",
+	"list_mcp_resource_templates",
+	"list_mcp_resources",
+	"load_workspace_dependencies",
+	"present",
+	"pwsh",
+	"ralph",
+	"read",
+	"read_image",
+	"read_mcp_resource",
+	"schedule_create",
+	"schedule_delete",
+	"schedule_list",
+	"schedule_update",
+	"send_message",
+	"session_event_read",
+	"session_event_search",
+	"session_event_trace",
+	"session_search",
+	"session_trace",
+	"sidebar_open",
+	"skill",
+	"spawn_teammate",
+	"subagent",
+	"subagent_fork",
+	"team_task_create",
+	"team_task_get",
+	"team_task_list",
+	"team_task_update",
+	"terminal_close",
+	"terminal_list",
+	"terminal_open",
+	"terminal_read",
+	"terminal_send",
+	"terminal_signal",
+	"todo_write",
+	"update_goal",
+	"wait_agent",
+	"web_fetch",
+	"web_search",
+	"web_search_pro",
+	"workflow",
+	"working_directory",
+	"write"
+]);
+/** MCP server name → catalog id, for the servers this allowlist knows. */
+const MCP_SERVERS = /* @__PURE__ */ new Map([["wincu", "mcp:wincu"]]);
+/** Plugin identity by tool-name prefix (checked before the core catalog). */
+const PLUGIN_PREFIXES = [
+	["bcdp_", "dsh-browser-cdp"],
+	["browser_window_", "dsh-browser-cdp"],
+	["ops_", "dsh-ops"],
+	["memory_", "dsh-auto-memory"]
+];
+/** Single plugin tools that carry no prefix. */
+const PLUGIN_TOOLS = /* @__PURE__ */ new Map([["generate_image", "dsh-model-switch"]]);
+/** `<base>__<owner>` — the extension-tool naming the QQ bot framework uses. */
+const EXTENSION_TOOL = /^([A-Za-z0-9_-]+)__(.+)$/;
+/**
+* Default allowlist: every pure-read tool this deployment exposes plus the
+* no-side-effect and autonomy entries the user explicitly released, calibrated
+* on a live desktop profile (105 tools) at dsh 0.2.1-rc.2.
+*
+* Grouped by origin so a reader can trace each entry through {@link SOURCE_CATALOG}.
+* Entries ending in `*` are patterns: the QQ bot extension suffixes its tools with
+* the bot's own name, so `sessions_list__*` keeps working when the persona is
+* renamed.
+*
+* Everything here follows one rule: releasing it must not let a side effect escape
+* the reviewer. Calls that merely dispatch, ask, present, wait or navigate qualify
+* because the work they trigger still runs under the same auto preset. Delegation
+* tools (`subagent`, `subagent_fork`, `spawn_teammate`) deliberately stay out: a
+* child session seeds its preset from `permissionPresets.current(parent.session)`,
+* and this bypass answers `'custom'` for an allowlisted call in flight — releasing
+* them would hand the child no `auto` preset at all, i.e. no review.
+*/
+const DEFAULT_READ_ONLY_TOOLS = [
+	"read",
+	"grep",
+	"glob",
+	"read_image",
+	"skill",
+	"web_search",
+	"web_search_pro",
+	"web_fetch",
+	"load_workspace_dependencies",
+	"ask_user_question",
+	"present",
+	"sidebar_open",
+	"exit_plan_mode",
+	"job_list",
+	"job_output",
+	"terminal_list",
+	"terminal_read",
+	"list_agents",
+	"team_task_list",
+	"team_task_get",
+	"get_goal",
+	"schedule_list",
+	"wait_agent",
+	"send_message",
+	"team_task_create",
+	"list_mcp_resources",
+	"list_mcp_resource_templates",
+	"read_mcp_resource",
+	"session_search",
+	"session_event_search",
+	"session_event_read",
+	"session_event_trace",
+	"session_trace",
+	"create_goal",
+	"schedule_create",
+	"terminal_open",
+	"ops_read_files",
+	"ops_discover_tools",
+	"bcdp_status",
+	"bcdp_help",
+	"bcdp_doctor",
+	"bcdp_snapshot",
+	"browser_window_status",
+	"memory_list",
+	"memory_read",
+	"mcp__wincu__windows_computer_use_accessibility_tree",
+	"mcp__wincu__windows_computer_use_element_info",
+	"mcp__wincu__windows_computer_use_find",
+	"mcp__wincu__windows_computer_use_health",
+	"mcp__wincu__windows_computer_use_list_windows",
+	"mcp__wincu__windows_computer_use_ocr",
+	"mcp__wincu__windows_computer_use_screenshot",
+	"mcp__wincu__windows_computer_use_snapshot",
+	"mcp__wincu__windows_computer_use_tools",
+	"mcp__wincu__windows_computer_use_wait",
+	"mcp__wincu__windows_computer_use_wait_for",
+	"sessions_list__*",
+	"bing_search__*"
+];
+/**
+* Validate one allowlist entry.
+*
+* `*` is a suffix wildcard: the entry must keep at least one literal leading
+* character, so a stray `*` can never turn the list into "allow everything".
+*
+* @param entry - the raw entry as typed in settings.
+* @returns `ok`, or the specific problem.
+*/
+function validateAllowEntry(entry) {
+	const trimmed = entry.trim();
+	if (trimmed === "") return "empty";
+	if (/^\*+$/.test(trimmed)) return "bare-wildcard";
+	if (trimmed.startsWith("*")) return "leading-wildcard";
+	return "ok";
+}
+/**
+* Whether a tool name matches one allowlist entry.
+*
+* Exact names match exactly; an entry may end in `*`, which matches any
+* remaining characters (including none). Invalid entries never match.
+*
+* @param name - the tool name from `exec.name`.
+* @param entry - one allowlist entry.
+* @returns true when the call may skip review.
+*/
+function matchesAllowPattern(name, entry) {
+	if (name === "" || validateAllowEntry(entry) !== "ok") return false;
+	const trimmed = entry.trim();
+	const star = trimmed.indexOf("*");
+	if (star === -1) return name === trimmed;
+	const prefix = trimmed.slice(0, star);
+	const suffix = trimmed.slice(star + 1);
+	if (!name.startsWith(prefix) || !name.endsWith(suffix)) return false;
+	return name.length >= prefix.length + suffix.length;
+}
+/**
+* Whether a tool name is covered by an allowlist.
+* @param name - the tool name under review.
+* @param allowlist - configured entries, patterns included.
+* @returns true when at least one entry matches.
+*/
+function isAllowedByList(name, allowlist) {
+	return allowlist.some((entry) => matchesAllowPattern(name, entry));
+}
+/**
+* Resolve the origin of one tool name for display.
+*
+* Resolution order: MCP bridge → `<tool>__<owner>` extension → plugin prefix →
+* plugin table → core catalog → unknown. Only the first two are structural; the
+* rest are calibrated names, so an unlisted tool is reported as unknown rather
+* than guessed into a package.
+*
+* @param name - the tool name.
+* @returns The origin, with its repository when known.
+*/
+function resolveToolSource(name) {
+	const trimmed = name.trim().replace(/\*+$/, "");
+	const mcp = /^mcp__([A-Za-z0-9_-]+)__/.exec(trimmed);
+	if (mcp !== null) {
+		const server = mcp[1];
+		const entry = SOURCE_BY_ID.get(MCP_SERVERS.get(server) ?? "");
+		if (entry !== void 0) return {
+			kind: "mcp",
+			label: entry.label,
+			repo: entry.repo,
+			owner: server
+		};
+		return {
+			kind: "mcp",
+			label: `MCP · ${server}`,
+			owner: server
+		};
+	}
+	const extension = EXTENSION_TOOL.exec(trimmed);
+	if (extension !== null && !trimmed.startsWith("mcp__")) {
+		const entry = SOURCE_BY_ID.get("qqbot-extension");
+		const base = extension[1];
+		const owner = extension[2];
+		return {
+			kind: "extension",
+			label: `扩展 · ${base}__${owner}`,
+			...entry === void 0 ? {} : { repo: entry.repo },
+			owner
+		};
+	}
+	if (trimmed.endsWith("__")) {
+		const entry = SOURCE_BY_ID.get("qqbot-extension");
+		return {
+			kind: "extension",
+			label: `扩展 · ${trimmed.slice(0, -2)}__*`,
+			...entry === void 0 ? {} : { repo: entry.repo },
+			owner: "*"
+		};
+	}
+	for (const [prefix, id] of PLUGIN_PREFIXES) {
+		if (!trimmed.startsWith(prefix)) continue;
+		const entry = SOURCE_BY_ID.get(id);
+		if (entry !== void 0) return {
+			kind: "plugin",
+			label: entry.label,
+			repo: entry.repo,
+			owner: id
+		};
+	}
+	const plugin = PLUGIN_TOOLS.get(trimmed);
+	if (plugin !== void 0) {
+		const entry = SOURCE_BY_ID.get(plugin);
+		if (entry !== void 0) return {
+			kind: "plugin",
+			label: entry.label,
+			repo: entry.repo,
+			owner: plugin
+		};
+	}
+	if (CORE_TOOLS.has(trimmed)) {
+		const entry = SOURCE_BY_ID.get("core");
+		return {
+			kind: "core",
+			label: entry?.label ?? "DSH 核心",
+			...entry === void 0 ? {} : { repo: entry.repo },
+			owner: "core"
+		};
+	}
+	return {
+		kind: "unknown",
+		label: "未知来源"
+	};
+}
+//#endregion
+export { isAllowedByList as n, resolveToolSource as r, DEFAULT_READ_ONLY_TOOLS as t };

package/lib/types/automode-compat.d.ts

@@ -0,0 +1,152 @@
+/**
+ * Adapt the third-party `@log.li/dsh-automode` row to this plugin's routes.
+ *
+ * ## Why this exists
+ *
+ * `dsh-automode` owns a completely different decision pipeline: its own
+ * `auto-mode` permission preset, a `tools/pre-execute` gate, and a two-stage
+ * classifier that calls `ctx.llm.stream()` with
+ * `classifier.provider` / `classifier.model` (`resolveRoute`, falling back to
+ * the session header when both are empty). It reads the pure-read allowance from
+ * `config.readOnlyTools` with an exact `includes()` match
+ * (`src/pre-execute.ts`), so a call that hits it is allowed before the
+ * classifier runs — still after the plugin's own hard-deny regex band.
+ *
+ * Both knobs live in that row's own config. There is no public seam to inject a
+ * route or a tool list from outside, and the user asked for the adaptation to
+ * happen inside the plugin layer: no profile editing, no second plugin. This
+ * module is that adapter. It rewrites the automode row's **runtime** option
+ * object right before the loader mounts it and on every remount:
+ *
+ * - `classifier.provider` / `classifier.model` are filled from this plugin's
+ *   Auto-review route **only when the row leaves them empty**; an explicit route
+ *   in the profile always wins.
+ * - `readOnlyTools` is the union of the row's own list and this plugin's
+ *   allowlist — but only while the "skip pure-read tools" switch is on. Entries
+ *   that carry a `*` cannot transfer (the third-party check is exact-match) and
+ *   are reported instead of silently dropped.
+ *
+ * Nothing is persisted: `entry.options` is the loader's live options object, and
+ * `Entry.update()` (which writes the profile layer) is deliberately never called
+ * here. Restarting the Host re-applies the same in-memory view.
+ *
+ * Every failure is contained. If the row shape or the loader internals change,
+ * this adapter logs one warning and the rest of the plugin keeps working.
+ *
+ * @module
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { Loader } from '@deepseek-ai/cordis-plugin-loader';
+import type { ModelSwitchSettings } from './host-settings.js';
+/** Cordis plugin identity; matches the `cordis.patch.yml` insert row id. */
+export declare const name = "model-switch-automode-compat";
+/** The loader is the only seam this row needs besides this plugin's settings. */
+export declare const inject: string[];
+/** Third-party package this row adapts (strict package identity, never a prefix). */
+export declare const AUTOMODE_PACKAGE = "@log.li/dsh-automode";
+/**
+ * Why the route was not injected.
+ *
+ * - `user-set`: the row already names a provider and a model.
+ * - `no-route`: this plugin has no Auto-review route configured right now.
+ */
+export type AutomodeRouteSkip = 'user-set' | 'no-route';
+/** Result of adapting one row's config object. */
+export interface AutomodeCompatApplied {
+    /** `provider/model` written into the row, when it was empty before. */
+    readonly route?: string | undefined;
+    /** Set when the route was left alone. */
+    readonly routeSkipped?: AutomodeRouteSkip | undefined;
+    /** Allowlist entries merged into `readOnlyTools`. */
+    readonly added: readonly string[];
+    /** Allowlist entries that cannot transfer because they are pattern-shaped. */
+    readonly skipped: readonly string[];
+}
+/** One adaptation result: the config to install plus what changed. */
+export interface AutomodeCompatPlan {
+    /** The config object to assign to the row. */
+    readonly config: Record<string, unknown>;
+    /** Whether `config` differs from the input (false means "leave it alone"). */
+    readonly changed: boolean;
+    /** What was applied, for the status line and the log. */
+    readonly applied: AutomodeCompatApplied;
+}
+/** Live adapter state, surfaced next to the allowlist editor. */
+export declare const automodeCompatStatus: {
+    /** A `@log.li/dsh-automode` row exists in this Host. */
+    installed: boolean;
+    /** `provider/model` this adapter wrote, when it wrote one. */
+    route: string | undefined;
+    /** Why the route was skipped, when it was. */
+    routeSkipped: AutomodeRouteSkip | undefined;
+    /** Tools merged into the row's `readOnlyTools`. */
+    added: string[];
+    /** Pattern-shaped entries that cannot transfer. */
+    skipped: string[];
+    /** How many rows were rewritten (remounts included). */
+    applied: number;
+};
+/**
+ * Whether one loader entry is the third-party auto-mode row.
+ * @param entry - anything the loader hands over (an entry, or an event payload).
+ * @returns true only for the exact package name.
+ */
+export declare function isAutomodeEntry(entry: unknown): boolean;
+/**
+ * Decide the config one automode row should run with.
+ *
+ * Pure and side-effect free so the policy is unit-testable.
+ *
+ * @param config - the row's current config (any JSON-ish value).
+ * @param route - this plugin's Auto-review route; empty strings mean "unset".
+ * @param allowlist - tool names to merge into `readOnlyTools`; pass an empty
+ *   list while the skip switch is off.
+ * @param adoptedRoute - a `provider/model` this adapter wrote on an earlier
+ *   pass; seeing it again means the row is still ours to rewrite.
+ * @returns the config to install, whether it changed, and what was applied.
+ */
+export declare function planAutomodeCompat(config: unknown, route: {
+    readonly provider?: string;
+    readonly model?: string;
+}, allowlist: readonly string[], adoptedRoute?: string): AutomodeCompatPlan;
+/** One-line human summary of a plan, for the startup log. */
+export declare function describeAutomodePlan(plan: AutomodeCompatPlan): string;
+/** Shape the settings card renders for the third-party row, or undefined when absent. */
+export interface AutomodeCompatView {
+    readonly installed: boolean;
+    /** `provider/model` written into the row, when one was. */
+    readonly route?: string | undefined;
+    /** Why no route was written, when none was. */
+    readonly routeSkipped?: AutomodeRouteSkip | undefined;
+    /** How many tools were merged in. */
+    readonly added: number;
+    /** How many pattern-shaped entries could not transfer. */
+    readonly skipped: number;
+}
+/**
+ * Snapshot for the RPC/UI layer.
+ * @returns the view, or undefined when this Host has no automode row.
+ */
+export declare function automodeCompatView(): AutomodeCompatView | undefined;
+/**
+ * Install the adapter: adapt live rows now, and every row the loader mounts later.
+ *
+ * The loader applies the profile patch layer and mounts the entry's plugin right
+ * after the `loader/patch-context` waterfall returns, so rewriting the entry's
+ * `options.config` from that waterfall is what makes the adapted values the ones
+ * the plugin activates with. No profile write happens here.
+ *
+ * @param ctx - this row's context.
+ * @param loader - the loader service, when the Host provides it.
+ * @param settings - reads the current plugin settings.
+ * @returns a disposer that detaches the listeners, plus a replay for live rows.
+ */
+export declare function installAutomodeCompat(ctx: Context, loader: Loader | undefined, settings: () => ModelSwitchSettings): {
+    dispose: () => void;
+    replay: () => boolean;
+};
+/**
+ * Row entry point: adapt the third-party row on activation and on remount.
+ * @param ctx - this row's context.
+ */
+export declare function apply(ctx: Context): void;

package/lib/types/capabilities-rpc.d.ts

@@ -8,6 +8,14 @@ export interface ReviewStatus {
     readonly held: boolean;
     readonly allowedCalls: number;
     readonly skippedReadOnly: number;
+    /** Third-party `@log.li/dsh-automode` row, when this Host mounts one. */
+    readonly automode?: {
+        readonly installed: boolean;
+        readonly route?: string | undefined;
+        readonly routeSkipped?: string | undefined;
+        readonly added: number;
+        readonly skipped: number;
+    } | undefined;
 }
 export declare const CAPABILITIES_RPC_METHOD = "plugin-rpc/model-switch";
 export interface CapabilitiesSnapshot {

package/lib/types/client/locales.d.ts

@@ -71,6 +71,9 @@ export declare const zh: {
     readonly reviewAllowlistAvailable: "本机存在但未放行的工具：";
     readonly reviewAllowlistRepo: "仓库";
     readonly reviewAllowlistSkipped: "本 Host 进程已为纯读调用跳过 {count} 次审查。";
+    readonly reviewAutomodeLinked: "Auto mode 已接入：审查路由 {route}，直通 +{added} 个纯读工具（{skipped} 条通配未同步）。";
+    readonly reviewAutomodeRouteOwn: "沿用其自身配置";
+    readonly reviewAutomodeRouteUnset: "未配置（沿用会话模型）";
     readonly 'reason.central-subagent-routing': "Alpha.4 没有全局子代理启动路由接口。";
     readonly 'reason.packaged-preset-roots': "Alpha.4 不支持插件提供额外 preset root。";
     readonly 'reason.tool-owner-suppression': "Alpha.4 没有工具所有者或来源抑制接口。";

package/lib/types/client-contract.d.ts

@@ -94,6 +94,13 @@ export interface ReviewStatusView {
     readonly held: boolean;
     readonly allowedCalls: number;
     readonly skippedReadOnly: number;
+    /** Third-party `@log.li/dsh-automode` row this Host adapted, when present. */
+    readonly automode?: {
+        readonly route?: string | undefined;
+        readonly routeSkipped?: string | undefined;
+        readonly added: number;
+        readonly skipped: number;
+    } | undefined;
 }
 /**
  * Decode the reviewer counters from a `tools` RPC payload.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-model-switch",
-  "version": "0.4.41",
+  "version": "0.4.42",
   "description": "Explicit model routing plus composer/Plan picker for DeepSeek Harness",
   "repository": {
     "type": "git",
@@ -58,6 +58,10 @@
       "types": "./lib/types/adapter-registry.d.ts",
       "default": "./lib/adapter-registry.js"
     },
+    "./automode-compat": {
+      "types": "./lib/types/automode-compat.d.ts",
+      "default": "./lib/automode-compat.js"
+    },
     "./package.json": "./package.json"
   },
   "files": [