dsh-ntr 0.1.5 → 0.2.0

package/lib/client.js

@@ -14,6 +14,36 @@ window.__ModuleLoader__.load({
 		};
 		//#endregion
 		//#region src/client/store.ts
+		/** Returned by {@link deadlineRemainingLabel} once the deadline has passed. */
+		const PERMISSION_DEADLINE_EXPIRED = "expired";
+		/**
+		* The asks that belong to one DSH chat conversation. An ask without a
+		* `dshSessionId` belongs to no conversation (an `/acp` RPC-only session), so it
+		* is deliberately absent from every conversation's dock and stays in the
+		* settings-panel ledger.
+		*/
+		function permissionsForSession(permissions, dshSessionId) {
+			return permissions.filter((permission) => permission.dshSessionId === dshSessionId);
+		}
+		/**
+		* Compact countdown for one ask, or `undefined` when there is nothing to count
+		* down (`wait` mode, or a frame without a deadline). Pure so the formatting is
+		* testable without a clock: the dock passes `Date.now()` on its tick.
+		*
+		* Past the deadline the answer is {@link PERMISSION_DEADLINE_EXPIRED} rather
+		* than a negative number — the host has already armed the expiry, and a card
+		* counting backwards would claim a deadline that no longer exists.
+		*/
+		function deadlineRemainingLabel(deadlineAt, now, mode) {
+			if (mode === "wait" || deadlineAt === void 0) return void 0;
+			const remainingMs = deadlineAt - now;
+			if (remainingMs <= 0) return PERMISSION_DEADLINE_EXPIRED;
+			const seconds = Math.ceil(remainingMs / 1e3);
+			if (seconds < 60) return `${String(seconds)}s`;
+			const minutes = Math.floor(seconds / 60);
+			const rest = seconds % 60;
+			return rest === 0 ? `${String(minutes)}m` : `${String(minutes)}m ${String(rest)}s`;
+		}
 		const MAX_BLOCKS = 400;
 		/** How many observed ACP transcripts stay live at once (insertion-ordered eviction). */
 		const MAX_WATCHED = 6;
@@ -284,7 +314,6 @@ window.__ModuleLoader__.load({
 				seatCatalogs: {},
 				probingModels: {},
 				probeErrors: {},
-				approvalRouted: false,
 				chatSessions: [],
 				tagHalo: { ...DEFAULT_TAG_HALO },
 				approvalDeadlines: void 0,
@@ -470,7 +499,7 @@ window.__ModuleLoader__.load({
 			/** Snapshot refresh used on panel open and after a stream outage. */
 			async resync() {
 				try {
-					const [{ agents, approvalRouted }, { sessions }, defaultAgentInfo, detectResult, presetResult, tagHaloResult, deadlinesResult] = await Promise.all([
+					const [{ agents }, { sessions }, defaultAgentInfo, detectResult, presetResult, tagHaloResult, deadlinesResult] = await Promise.all([
 						this.call("agents/list"),
 						this.call("sessions/list"),
 						this.call("default/agent").catch(() => ({})),
@@ -486,7 +515,6 @@ window.__ModuleLoader__.load({
 						sessions,
 						defaultAgent: defaultAgentInfo?.agentId,
 						detectedAgents,
-						approvalRouted: approvalRouted === true,
 						preset: presetResult?.preset ?? void 0,
 						tagHalo: tagHaloResult?.halo ?? { ...DEFAULT_TAG_HALO },
 						approvalDeadlines: deadlinesResult.deadlines
@@ -726,9 +754,10 @@ window.__ModuleLoader__.load({
 			async loadTranscript(sessionId) {
 				try {
 					const { session, entries } = await this.call("transcript/get", { sessionId });
+					const seen = this.lastSeq.get(sessionId) ?? 0;
+					if ((entries.at(-1)?.seq ?? 0) < seen) return;
 					const blocks = [];
 					for (const entry of entries) {
-						blocks.length;
 						foldUpdate(blocks, entry.update);
 						this.lastSeq.set(sessionId, Math.max(this.lastSeq.get(sessionId) ?? 0, entry.seq));
 					}
@@ -1112,6 +1141,14 @@ window.__ModuleLoader__.load({
 					this.flashError(error);
 				}
 			}
+			/**
+			* Answer one ask (`optionId` absent = cancel it). A failure is reported
+			* through the store's notice — the settings panel renders that — AND
+			* rethrown, so the conversation dock can pin the message next to the card
+			* that failed instead of leaving it on a settings page the user may not
+			* have open. Callers that cannot show it (the settings panel) swallow it
+			* after the notice.
+			*/
 			async respondPermission(requestId, optionId) {
 				try {
 					await this.call("permission/respond", {
@@ -1120,6 +1157,7 @@ window.__ModuleLoader__.load({
 					});
 				} catch (error) {
 					this.flashError(error);
+					throw error;
 				}
 			}
 			async stopAgent(agentId) {
@@ -1160,7 +1198,7 @@ window.__ModuleLoader__.load({
 				}
 			}
 			/**
-			* Write one approval deadline (settings card), or drop the persisted override
+			* Write the approval deadline (settings card), or drop the persisted override
 			* with `reset` so the `cordis.patch.yml` baseline applies again.
 			*
 			* The host answer — the same route returns the deadlines now in force — is the
@@ -1168,8 +1206,17 @@ window.__ModuleLoader__.load({
 			* merged with a value this browser did not know about) self-corrects instead
 			* of drifting from what runs.
 			*/
-			async setApprovalDeadline(key, ms) {
-				await this.writeApprovalDeadlines({ [key]: ms });
+			async setApprovalDeadline(ms) {
+				await this.writeApprovalDeadlines({ permissionTimeoutMs: ms });
+			}
+			/**
+			* Write the mode: what an expired deadline DOES (`abort` refuses, `auto`
+			* answers with the option the agent's own kinds imply, `wait` never
+			* expires). Same write path as the window, so the host answer stays
+			* the authority.
+			*/
+			async setApprovalTimeoutMode(mode) {
+				await this.writeApprovalDeadlines({ mode });
 			}
 			/** Drop the persisted override: the config file (or the built-in default) decides again. */
 			async resetApprovalDeadlines() {
@@ -1179,8 +1226,8 @@ window.__ModuleLoader__.load({
 				const previous = this.state.approvalDeadlines;
 				if (previous !== void 0) this.mutate({ approvalDeadlines: {
 					...previous,
-					...payload.nativeApprovalTimeoutMs === void 0 ? {} : { nativeApprovalTimeoutMs: payload.nativeApprovalTimeoutMs },
-					...payload.permissionFallbackTimeoutMs === void 0 ? {} : { permissionFallbackTimeoutMs: payload.permissionFallbackTimeoutMs }
+					...payload.permissionTimeoutMs === void 0 ? {} : { permissionTimeoutMs: payload.permissionTimeoutMs },
+					...payload.mode === void 0 ? {} : { mode: payload.mode }
 				} });
 				try {
 					const result = await this.call("ui/approval-deadlines-set", payload);
@@ -1427,13 +1474,17 @@ window.__ModuleLoader__.load({
 						return this.loadAgentCatalog(event.agentId);
 					}
 					case "permission/request": {
-						const title = typeof event.toolCall?.title === "string" ? String(event.toolCall.title) : this.locale("工具调用", "tool call");
-						this.mutate({ permissions: [...this.state.permissions.filter((p) => p.requestId !== event.requestId), {
+						const permission = {
 							requestId: event.requestId,
 							sessionId: event.sessionId,
-							title,
-							options: event.options
-						}] });
+							...event.dshSessionId === void 0 ? {} : { dshSessionId: event.dshSessionId },
+							toolName: event.toolName,
+							...event.reason === void 0 ? {} : { reason: event.reason },
+							options: event.options,
+							timeoutMode: event.timeoutMode,
+							...event.deadlineAt === void 0 ? {} : { deadlineAt: event.deadlineAt }
+						};
+						this.mutate({ permissions: [...this.state.permissions.filter((p) => p.requestId !== event.requestId), permission] });
 						return Promise.resolve();
 					}
 					case "permission/resolved":
@@ -2370,9 +2421,9 @@ window.__ModuleLoader__.load({
 .ntr-acp-seat:hover:not(:disabled) { background: var(--dsw-alias-interactive-bg-active, #0000000d); }
 .ntr-acp-seat:disabled { opacity: 0.5; cursor: default; }
 .ntr-acp-seat.is-open { border-color: var(--dsw-alias-state-business-primary, #2563eb); color: var(--dsw-alias-state-business-primary, #2563eb); }
-.ntr-acp-seat.is-detached { border-color: var(--ntr-warn, #d97706); color: var(--ntr-warn, #d97706); }
+.ntr-acp-seat.is-detached { border-color: var(--dsw-alias-state-warn-label, #d97706); color: var(--dsw-alias-state-warn-label, #d97706); }
 .ntr-acp-seat-main { font-weight: 600; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
-.ntr-acp-seat-sub { color: var(--dsw-alias-text-secondary, #6b7280); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.ntr-acp-seat-sub { color: var(--dsw-alias-label-secondary, #6b7280); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
 .ntr-acp-dot { width: 7px; height: 7px; border-radius: 50%; flex: none; }
 .ntr-acp-tick { margin-left: auto; color: var(--dsw-alias-state-business-primary, #2563eb); }
 .ntr-acp-check { display: inline-flex; align-items: center; justify-content: center; flex: none; width: 13px; height: 13px; border: 1px solid var(--dsw-alias-border-l2, #d1d5db); border-radius: 3px; font-size: 10px; line-height: 1; color: var(--dsw-alias-state-business-primary, #2563eb); }
@@ -2381,80 +2432,108 @@ window.__ModuleLoader__.load({
 .ntr-acp-menu-head { padding: 8px 10px 6px; font-weight: 600; display: flex; align-items: center; gap: 6px; }
 .ntr-acp-menu-title { flex: 1; }
 .ntr-acp-menu-spin { opacity: 0.5; }
-.ntr-acp-menu-note { padding: 0 10px 6px; font-size: 11px; color: var(--dsw-alias-text-secondary, #6b7280); line-height: 1.5; }
-.ntr-acp-menu-error { margin: 0 10px 6px; padding: 6px 8px; border-radius: 6px; background: #fee2e2; color: #b91c1c; font-size: 11px; }
+.ntr-acp-menu-note { padding: 0 10px 6px; font-size: 11px; color: var(--dsw-alias-label-secondary, #6b7280); line-height: 1.5; }
+.ntr-acp-menu-error { margin: 0 10px 6px; padding: 6px 8px; border-radius: 6px; background: color-mix(in srgb, var(--dsw-alias-state-error-primary, #b91c1c) 12%, transparent); color: var(--dsw-alias-state-error-primary, #b91c1c); font-size: 11px; }
 .ntr-acp-menu-body { overflow: auto; padding: 0 4px 6px; }
 .ntr-acp-menu-section { display: flex; flex-direction: column; padding-top: 4px; }
-.ntr-acp-menu-section-title { padding: 6px 8px 4px; font-size: 10px; letter-spacing: 0.04em; text-transform: uppercase; color: var(--dsw-alias-text-secondary, #6b7280); }
+.ntr-acp-menu-section-title { padding: 6px 8px 4px; font-size: 10px; letter-spacing: 0.04em; text-transform: uppercase; color: var(--dsw-alias-label-secondary, #6b7280); }
 .ntr-acp-menu-item { display: flex; align-items: center; gap: 6px; font: inherit; font-size: 12px; text-align: left; padding: 6px 8px; border: none; border-radius: 6px; background: none; color: inherit; cursor: pointer; width: 100%; }
 .ntr-acp-menu-item:hover:not(:disabled) { background: var(--dsw-alias-interactive-bg-active, #0000000d); }
 .ntr-acp-menu-item:disabled { opacity: 0.45; cursor: default; }
 .ntr-acp-menu-item.is-active { font-weight: 600; }
 .ntr-acp-menu-item-label { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
-.ntr-acp-menu-item-detail { color: var(--dsw-alias-text-secondary, #6b7280); font-size: 11px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; flex: 1; text-align: right; }
-.ntr-acp-menu-empty { padding: 10px; text-align: center; color: var(--dsw-alias-text-secondary, #6b7280); }
+.ntr-acp-menu-item-detail { color: var(--dsw-alias-label-secondary, #6b7280); font-size: 11px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; flex: 1; text-align: right; }
+.ntr-acp-menu-empty { padding: 10px; text-align: center; color: var(--dsw-alias-label-secondary, #6b7280); }
 /* ---- ACP view tab ---- */
 .ntr-acp-view { display: flex; flex-direction: column; height: 100%; min-height: 0; font-size: 13px; line-height: 1.6; }
-.ntr-acp-view-head { display: flex; align-items: center; gap: 8px; padding: 8px 12px; border-bottom: 1px solid var(--dsw-alias-border-l2, #e5e7eb); font-size: 12px; color: var(--dsw-alias-text-secondary, #6b7280); }
+.ntr-acp-view-head { display: flex; align-items: center; gap: 8px; padding: 8px 12px; border-bottom: 1px solid var(--dsw-alias-border-l2, #e5e7eb); font-size: 12px; color: var(--dsw-alias-label-secondary, #6b7280); }
 .ntr-acp-view-agent { font-weight: 600; color: inherit; }
 .ntr-acp-view-meta { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; max-width: 40%; direction: rtl; text-align: left; }
 .ntr-acp-view-head .ntr-acp-more { margin-left: auto; }
 .ntr-acp-stream { flex: 1; min-height: 0; overflow: auto; padding: 12px 14px 24px; display: flex; flex-direction: column; gap: 10px; }
 .ntr-acp-badge { font-size: 11px; padding: 1px 8px; border-radius: 999px; border: 1px solid transparent; }
-.ntr-acp-badge.is-done { color: #15803d; background: #dcfce7; }
-.ntr-acp-badge.is-busy { color: #1d4ed8; background: #dbeafe; }
-.ntr-acp-badge.is-warn { color: #b45309; background: #fef3c7; }
-.ntr-acp-badge.is-fail { color: #b91c1c; background: #fee2e2; }
-.ntr-acp-badge.is-idle { color: var(--dsw-alias-text-secondary, #6b7280); background: var(--dsw-alias-bg-layer-2, #f3f4f6); }
+.ntr-acp-badge.is-done { color: color-mix(in srgb, var(--dsw-alias-state-success-primary, #22c55e) 72%, var(--dsw-alias-label-primary, #111827)); background: var(--dsw-alias-state-success-tertiary, #dcfce7); }
+.ntr-acp-badge.is-busy { color: var(--dsw-alias-state-business-primary, #1d4ed8); background: var(--dsw-alias-state-business-tertiary, #dbeafe); }
+.ntr-acp-badge.is-warn { color: var(--dsw-alias-state-warn-label, #b45309); background: var(--dsw-alias-state-warn-tertiary, #fef3c7); }
+.ntr-acp-badge.is-fail { color: var(--dsw-alias-state-error-primary, #b91c1c); background: color-mix(in srgb, var(--dsw-alias-state-error-primary, #b91c1c) 12%, transparent); }
+.ntr-acp-badge.is-idle { color: var(--dsw-alias-label-secondary, #6b7280); background: var(--dsw-alias-bg-layer-2, #f3f4f6); }
 .ntr-acp-bubble { max-width: 88%; padding: 8px 12px; border-radius: 12px; white-space: pre-wrap; word-break: break-word; }
 .ntr-acp-bubble.is-user { align-self: flex-end; background: color-mix(in srgb, var(--dsw-alias-state-business-primary, #2563eb) 12%, transparent); }
 .ntr-acp-bubble.is-agent { align-self: flex-start; background: var(--dsw-alias-bg-layer-2, #f3f4f6); }
 .ntr-acp-inline-code { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: 12px; padding: 1px 4px; border-radius: 4px; background: color-mix(in srgb, currentColor 10%, transparent); }
 .ntr-acp-code { margin: 6px 0; padding: 8px 10px; border-radius: 8px; background: #0f172a; color: #e2e8f0; overflow: auto; font-size: 12px; line-height: 1.5; }
-.ntr-acp-thought { border-left: 3px solid var(--dsw-alias-border-l2, #d1d5db); padding-left: 8px; color: var(--dsw-alias-text-secondary, #6b7280); font-size: 12px; }
+.ntr-acp-thought { border-left: 3px solid var(--dsw-alias-border-l2, #d1d5db); padding-left: 8px; color: var(--dsw-alias-label-secondary, #6b7280); font-size: 12px; }
 .ntr-acp-thought > summary { cursor: pointer; font-size: 11px; letter-spacing: 0.04em; text-transform: uppercase; }
 .ntr-acp-thought-body { white-space: pre-wrap; padding: 4px 0 2px; }
 .ntr-acp-tool { border: 1px solid var(--dsw-alias-border-l2, #e5e7eb); border-radius: 10px; background: var(--dsw-alias-bg-layer-1, #fff); overflow: hidden; }
-.ntr-acp-tool.is-fail { border-color: #fca5a5; }
+.ntr-acp-tool.is-fail { border-color: var(--dsw-alias-state-error-secondary, #fca5a5); }
 .ntr-acp-tool-head { display: flex; align-items: center; gap: 8px; padding: 7px 10px; font-size: 12px; }
 .ntr-acp-tool-title { flex: 1; font-weight: 600; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
 .ntr-acp-tool-body { margin: 0; padding: 8px 10px; border-top: 1px solid var(--dsw-alias-border-l2, #e5e7eb); background: var(--dsw-alias-bg-layer-2, #f9fafb); font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: 11.5px; line-height: 1.55; white-space: pre-wrap; word-break: break-word; max-height: 340px; overflow: auto; }
-.ntr-acp-tool-input { background: var(--dsw-alias-bg-layer-1, #fff); color: var(--dsw-alias-text-primary, #111827); max-height: 240px; }
-.ntr-acp-tool-meta { font-size: 11px; color: var(--dsw-alias-text-secondary, #6b7280); }
+.ntr-acp-tool-input { background: var(--dsw-alias-bg-layer-1, #fff); color: var(--dsw-alias-label-primary, #111827); max-height: 240px; }
+.ntr-acp-tool-meta { font-size: 11px; color: var(--dsw-alias-label-secondary, #6b7280); }
 .ntr-acp-diff { border-top: 1px solid var(--dsw-alias-border-l2, #e5e7eb); }
 .ntr-acp-diff-head { display: flex; align-items: center; gap: 8px; padding: 5px 10px; font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: 11.5px; background: var(--dsw-alias-bg-layer-2, #f9fafb); }
 .ntr-acp-diff-path { flex: 1; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
-.ntr-acp-diff-stats .is-add { color: #15803d; }
-.ntr-acp-diff-stats .is-del { color: #b91c1c; }
+.ntr-acp-diff-stats .is-add { color: var(--dsw-alias-state-success-primary, #15803d); }
+.ntr-acp-diff-stats .is-del { color: var(--dsw-alias-state-error-primary, #b91c1c); }
 .ntr-acp-diff-body { max-height: 360px; overflow: auto; font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: 11.5px; line-height: 1.55; }
 .ntr-acp-diff-row { display: flex; gap: 8px; padding: 0 10px; white-space: pre; }
-.ntr-acp-diff-row.is-add { background: #dcfce7; }
-.ntr-acp-diff-row.is-del { background: #fee2e2; }
-.ntr-acp-diff-row.is-ctx { color: var(--dsw-alias-text-secondary, #6b7280); }
+.ntr-acp-diff-row.is-add { background: var(--dsw-alias-file-diff-added-bg, #dcfce7); }
+.ntr-acp-diff-row.is-del { background: var(--dsw-alias-file-diff-deleted-bg, #fee2e2); }
+.ntr-acp-diff-row.is-ctx { color: var(--dsw-alias-label-secondary, #6b7280); }
 .ntr-acp-diff-sign { width: 1ch; flex: none; opacity: 0.7; }
 .ntr-acp-diff-text { overflow-x: auto; }
-.ntr-acp-diff-note { padding: 4px 10px 6px; font-size: 11px; color: var(--dsw-alias-text-secondary, #6b7280); }
+.ntr-acp-diff-note { padding: 4px 10px 6px; font-size: 11px; color: var(--dsw-alias-label-secondary, #6b7280); }
 .ntr-acp-more { font: inherit; font-size: 11.5px; padding: 3px 10px; border-radius: 6px; border: 1px solid var(--dsw-alias-border-l2, #d1d5db); background: var(--dsw-alias-bg-layer-2, #f3f4f6); color: inherit; cursor: pointer; }
 .ntr-acp-more:hover:not(:disabled) { background: var(--dsw-alias-interactive-bg-active, #0000000d); }
 .ntr-acp-more:disabled { opacity: 0.5; cursor: default; }
-.ntr-acp-more.is-primary { border-color: transparent; background: var(--dsw-alias-button-primary-fill, #2563eb); color: var(--dsw-alias-button-primary-invert, #fff); }
+.ntr-acp-more.is-primary { border-color: transparent; background: var(--dsw-alias-button-primary-fill, #2563eb); color: var(--dsw-alias-label-primary-foreground, #fff); }
 .ntr-acp-tool > .ntr-acp-more, .ntr-acp-empty-actions .ntr-acp-more { margin: 6px 10px; }
 .ntr-acp-plan { border: 1px solid var(--dsw-alias-border-l2, #e5e7eb); border-radius: 10px; padding: 8px 10px; background: var(--dsw-alias-bg-layer-1, #fff); }
-.ntr-acp-plan-head { font-size: 11px; letter-spacing: 0.04em; text-transform: uppercase; color: var(--dsw-alias-text-secondary, #6b7280); margin-bottom: 4px; }
+.ntr-acp-plan-head { font-size: 11px; letter-spacing: 0.04em; text-transform: uppercase; color: var(--dsw-alias-label-secondary, #6b7280); margin-bottom: 4px; }
 .ntr-acp-plan-row { display: flex; align-items: baseline; gap: 8px; font-size: 12.5px; padding: 1px 0; }
-.ntr-acp-plan-row.is-completed { color: var(--dsw-alias-text-secondary, #6b7280); text-decoration: line-through; }
+.ntr-acp-plan-row.is-completed { color: var(--dsw-alias-label-secondary, #6b7280); text-decoration: line-through; }
 .ntr-acp-plan-row.is-in_progress { font-weight: 600; }
 .ntr-acp-plan-glyph { width: 1ch; flex: none; }
-.ntr-acp-plan-prio { margin-left: auto; font-size: 10px; text-transform: uppercase; color: var(--dsw-alias-text-secondary, #6b7280); }
+.ntr-acp-plan-prio { margin-left: auto; font-size: 10px; text-transform: uppercase; color: var(--dsw-alias-label-secondary, #6b7280); }
 .ntr-acp-notice { padding: 6px 10px; border-radius: 8px; font-size: 12px; }
-.ntr-acp-notice.is-error { background: #fee2e2; color: #b91c1c; }
-.ntr-acp-notice.is-info { background: var(--dsw-alias-bg-layer-2, #f3f4f6); color: var(--dsw-alias-text-secondary, #6b7280); }
+.ntr-acp-notice.is-error { background: color-mix(in srgb, var(--dsw-alias-state-error-primary, #b91c1c) 12%, transparent); color: var(--dsw-alias-state-error-primary, #b91c1c); }
+.ntr-acp-notice.is-info { background: var(--dsw-alias-bg-layer-2, #f3f4f6); color: var(--dsw-alias-label-secondary, #6b7280); }
 .ntr-acp-empty { margin: auto; max-width: 460px; text-align: center; display: flex; flex-direction: column; gap: 10px; padding: 24px; }
 .ntr-acp-empty-title { font-size: 14px; font-weight: 600; }
-.ntr-acp-empty-body { margin: 0; color: var(--dsw-alias-text-secondary, #6b7280); font-size: 12.5px; line-height: 1.7; }
-.ntr-acp-empty-hint { color: var(--dsw-alias-text-secondary, #6b7280); font-size: 12px; }
-.ntr-acp-seat-diag { font-family: var(--dsw-alias-font-mono, ui-monospace, SFMono-Regular, Menlo, monospace); opacity: 0.72; word-break: break-word; }
+.ntr-acp-empty-body { margin: 0; color: var(--dsw-alias-label-secondary, #6b7280); font-size: 12.5px; line-height: 1.7; }
+.ntr-acp-empty-hint { color: var(--dsw-alias-label-secondary, #6b7280); font-size: 12px; }
+.ntr-acp-seat-diag { font-family: var(--ds-font-family-code, ui-monospace, SFMono-Regular, Menlo, monospace); opacity: 0.72; word-break: break-word; }
 .ntr-acp-empty-actions { display: flex; flex-wrap: wrap; gap: 8px; justify-content: center; }
+/* ---- Pending permission asks (conversation.input.dock) ---- */
+/* The dock slot is the full conversation column, but the composer card inside
+   it is narrower (InputBar: side clearance + card max width). Mirror that
+   formula so each ask lines up with the input box instead of spanning the
+   column. The list owns a bounded height and scrolls so a burst of asks cannot
+   push the composer off screen. */
+.ntr-permission-dock {
+  box-sizing: border-box;
+  width: calc(100% - var(--dsh-composer-side-clearance, 16px) - var(--dsh-composer-side-clearance, 16px));
+  max-width: var(--dsh-composer-card-max-width, 920px);
+  margin: 0 auto;
+  display: flex; flex-direction: column; gap: 6px;
+  max-height: min(38vh, 320px); overflow-y: auto;
+  font-size: 12px; line-height: 1.5;
+}
+.ntr-permission-card { display: flex; flex-direction: column; gap: 6px; padding: 8px 10px; border: 1px solid var(--dsw-alias-border-l2, #d1d5db); border-left: 3px solid var(--dsw-alias-state-warn-primary, #d97706); border-radius: 10px; background: var(--dsw-alias-bg-layer-1, #fff); }
+.ntr-permission-head { display: flex; align-items: baseline; gap: 8px; min-width: 0; }
+.ntr-permission-tool { flex: none; font-weight: 600; }
+.ntr-permission-reason { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; color: var(--dsw-alias-label-secondary, #6b7280); }
+.ntr-permission-deadline { flex: none; font-size: 11px; color: var(--dsw-alias-label-secondary, #6b7280); font-variant-numeric: tabular-nums; }
+.ntr-permission-deadline.is-expired { color: var(--dsw-alias-state-warn-label, #b45309); font-weight: 600; }
+.ntr-permission-actions { display: flex; flex-wrap: wrap; align-items: center; gap: 6px; }
+.ntr-permission-option, .ntr-permission-cancel { font: inherit; font-size: 12px; line-height: 1.4; padding: 4px 10px; border-radius: 7px; border: 1px solid var(--dsw-alias-border-l2, #d1d5db); background: var(--dsw-alias-bg-layer-2, #f3f4f6); color: inherit; cursor: pointer; white-space: normal; text-align: left; }
+.ntr-permission-option:hover:not(:disabled), .ntr-permission-cancel:hover:not(:disabled) { background: var(--dsw-alias-interactive-bg-active, #0000000d); }
+.ntr-permission-option:disabled, .ntr-permission-cancel:disabled { opacity: 0.5; cursor: default; }
+.ntr-permission-option:focus-visible, .ntr-permission-cancel:focus-visible { outline: 2px solid var(--dsw-alias-state-business-primary, #2563eb); outline-offset: 2px; }
+.ntr-permission-cancel { margin-left: auto; color: var(--dsw-alias-label-secondary, #6b7280); }
+.ntr-permission-error { padding: 4px 8px; border-radius: 6px; background: color-mix(in srgb, var(--dsw-alias-state-error-primary, #b91c1c) 12%, transparent); color: var(--dsw-alias-state-error-primary, #b91c1c); font-size: 11px; word-break: break-word; }
 /* ---- NTR settings dialog (shell.overlay) ---- */
 /* Frame-wide surface opened from the agent base's empty-roster menu. The
    overlay layer itself is click-through, so the layer opts back in and blocks
@@ -2491,11 +2570,11 @@ window.__ModuleLoader__.load({
 		* React surface for ACP: the settings configuration section.
 		*
 		* Scope is deliberately narrow — this is a CONFIGURATION surface. Runtime
-		* interaction lives in the conversation: permission asks are answered in the
-		* chat composer through the host approval chain. The ledger card answers
-		* whatever did NOT reach the conversation — a host without the chain, a
-		* session with no chat identity behind it, or an ask whose native route
-		* degraded to unavailable (see `permissionLedgerCard`).
+		* interaction lives in the conversation: every permission ask with a chat
+		* identity is answered on a card above that conversation's composer
+		* (`permission-dock.tsx`). The ledger card here is the cross-session mirror —
+		* asks whose conversation is not open, or which have no chat identity at all —
+		* and is where those are answered (see `permissionLedgerCard`).
 		*
 		* Each configured agent is one compact row (status + current model + badges)
 		* that expands into the full connection form and model catalog. The row stays
@@ -2527,8 +2606,10 @@ window.__ModuleLoader__.load({
   --ntr-radius: 10px; --ntr-radius-sm: 7px;
   --ntr-font: 13px; --ntr-font-sm: 12px; --ntr-font-xs: 11px;
   --ntr-line: 1px solid var(--dsw-alias-border-l2, #e5e7eb);
-  --ntr-muted: var(--dsw-alias-text-secondary, #6b7280);
-  --ntr-danger: #dc2626; --ntr-warn: #b45309;
+  --ntr-muted: var(--dsw-alias-label-secondary, #6b7280);
+  --ntr-danger: var(--dsw-alias-state-error-primary, #dc2626);
+  --ntr-warn: var(--dsw-alias-state-warn-label, #b45309);
+  --ntr-success: color-mix(in srgb, var(--dsw-alias-state-success-primary, #16a34a) 72%, var(--dsw-alias-label-primary, #111827));
   --ntr-accent: var(--dsw-alias-button-primary-fill, #2563eb);
   width: 100%; max-width: 960px; box-sizing: border-box; margin: 0 auto;
   padding: 20px; overflow: auto; font-size: var(--ntr-font); line-height: 1.55;
@@ -2552,25 +2633,25 @@ window.__ModuleLoader__.load({
 }
 .dwa-btn:hover { background: var(--dsw-alias-interactive-bg-active, #f3f4f6); border-color: var(--dsw-alias-border-l1, #9ca3af); }
 .dwa-btn:disabled { opacity: 0.5; cursor: not-allowed; }
-.dwa-btn-primary { background: var(--ntr-accent); color: var(--dsw-alias-button-primary-invert, #fff); border-color: transparent; font-weight: 550; }
+.dwa-btn-primary { background: var(--ntr-accent); color: var(--dsw-alias-label-primary-foreground, #fff); border-color: transparent; font-weight: 550; }
 .dwa-btn-primary:hover { background: var(--ntr-accent); border-color: transparent; opacity: 0.88; }
 .dwa-btn-secondary { background: var(--dsw-alias-bg-layer-2, #f3f4f6); }
-.dwa-btn-danger { color: var(--ntr-danger); border-color: #fca5a5; }
-.dwa-btn-danger:hover { background: #fee2e2; }
+.dwa-btn-danger { color: var(--ntr-danger); border-color: var(--dsw-alias-state-error-secondary, #fca5a5); }
+.dwa-btn-danger:hover { background: var(--dsw-alias-interactive-bg-hover-danger, #fee2e2); }
 .dwa-section { margin-bottom: 24px; }
 .dwa-section-heading { display: flex; align-items: flex-start; justify-content: space-between; gap: 12px; margin-bottom: 10px; }
 .dwa-section-title { font-size: 14px; font-weight: 650; margin: 0; display: flex; align-items: center; gap: 8px; }
 .dwa-section-copy { margin: 3px 0 0; font-size: var(--ntr-font-xs); color: var(--ntr-muted); }
 .dwa-card { border: var(--ntr-line); border-radius: var(--ntr-radius); padding: 16px; background: var(--dsw-alias-bg-layer-1, #fff); font-size: var(--ntr-font); line-height: 1.55; }
-.dwa-card-warn { border-left: 3px solid var(--dsw-alias-state-warn-primary, #d97706); background: var(--dsw-alias-state-warn-secondary, #fffbeb); }
+.dwa-card-warn { border-left: 3px solid var(--dsw-alias-state-warn-primary, #d97706); background: var(--dsw-alias-state-warn-tertiary, #fffbeb); }
 .dwa-mode-banner { display: grid; grid-template-columns: minmax(0, 1fr) auto; gap: 5px 16px; align-items: start; margin-bottom: 24px; padding: 14px 16px; }
 .dwa-mode-title { display: flex; align-items: center; gap: 8px; font-weight: 650; }
 .dwa-mode-copy { grid-column: 1 / -1; color: var(--ntr-muted); font-size: var(--ntr-font-xs); }
 .dwa-mode-source { display: block; margin-top: 5px; overflow-wrap: anywhere; opacity: 0.85; }
 .dwa-badge { font-size: var(--ntr-font-xs); line-height: 1.4; border-radius: 999px; padding: 2px 8px; background: var(--dsw-alias-bg-layer-2, #f3f4f6); color: var(--ntr-muted); font-weight: 550; display: inline-flex; align-items: center; gap: 4px; white-space: nowrap; }
-.dwa-badge-success { background: #22c55e1c; color: #15803d; }
-.dwa-badge-warn { background: #f59e0b1f; color: #b45309; }
-.dwa-badge-info { background: #3b82f61a; color: #2563eb; }
+.dwa-badge-success { background: var(--dsw-alias-state-success-tertiary, #dcfce7); color: var(--ntr-success); }
+.dwa-badge-warn { background: var(--dsw-alias-state-warn-tertiary, #fef3c7); color: var(--ntr-warn); }
+.dwa-badge-info { background: var(--dsw-alias-state-business-tertiary, #dbeafe); color: var(--dsw-alias-state-business-primary, #2563eb); }
 .dwa-dot { width: 7px; height: 7px; border-radius: 50%; display: inline-block; flex-shrink: 0; }
 .dwa-agent-list { display: flex; flex-direction: column; gap: 8px; }
 .dwa-agent-card { border: var(--ntr-line); border-radius: var(--ntr-radius); background: var(--dsw-alias-bg-layer-1, #fff); overflow: visible; transition: border-color 0.15s ease; }
@@ -2592,7 +2673,7 @@ window.__ModuleLoader__.load({
 .dwa-subsection-copy { margin: 3px 0 0; color: var(--ntr-muted); font-size: var(--ntr-font-xs); }
 .dwa-form-row { display: flex; gap: var(--ntr-gap-3); margin-bottom: 14px; align-items: flex-start; }
 .dwa-form-col { flex: 1; display: flex; flex-direction: column; gap: 6px; min-width: 0; }
-.dwa-form-label { font-size: var(--ntr-font-sm); font-weight: 600; color: var(--dsw-alias-text-primary, #374151); }
+.dwa-form-label { font-size: var(--ntr-font-sm); font-weight: 600; color: var(--dsw-alias-label-primary, #374151); }
 .dwa-hint { font-size: var(--ntr-font-xs); line-height: 1.55; color: var(--ntr-muted); }
 .dwa-error { font-size: var(--ntr-font-xs); color: var(--ntr-danger); }
 .dwa-input { min-height: 36px; font: inherit; font-size: var(--ntr-font-sm); padding: 7px 10px; border: 1px solid var(--dsw-alias-border-l2, #d1d5db); border-radius: var(--ntr-radius-sm); background: var(--dsw-alias-bg-layer-1, #fff); color: inherit; width: 100%; box-sizing: border-box; }
@@ -2617,7 +2698,7 @@ window.__ModuleLoader__.load({
 .dwa-add-content { border-top: var(--ntr-line); padding: 14px 16px 16px; }
 .dwa-chip { min-height: 30px; font: inherit; font-size: var(--ntr-font-sm); border: var(--ntr-line); border-radius: 999px; padding: 4px 12px; background: var(--dsw-alias-bg-layer-1, #fff); cursor: pointer; color: inherit; }
 .dwa-chip:hover { background: var(--dsw-alias-interactive-bg-active, #f3f4f6); }
-.dwa-chip-active { border-color: var(--ntr-accent); background: #3b82f614; color: #2563eb; font-weight: 550; }
+.dwa-chip-active { border-color: var(--ntr-accent); background: color-mix(in srgb, var(--dsw-alias-state-business-primary, #2563eb) 8%, transparent); color: var(--dsw-alias-state-business-primary, #2563eb); font-weight: 550; }
 .dwa-chip-list { display: flex; gap: 6px; flex-wrap: wrap; align-items: center; margin: 0 0 12px; }
 .dwa-switch { display: inline-flex; align-items: center; gap: 7px; font-size: var(--ntr-font-sm); cursor: pointer; user-select: none; }
 .dwa-inline-setting { display: flex; align-items: flex-start; gap: 10px; padding: 10px 12px; border-radius: var(--ntr-radius-sm); background: var(--dsw-alias-bg-layer-2, #f9fafb); }
@@ -2630,7 +2711,7 @@ window.__ModuleLoader__.load({
 /* Tall enough for a comfortable selection (about ten rows) before scrolling;
    the cap keeps the two stacked panes from pushing the rest of the card away. */
 .dwa-model-pane { min-width: 0; max-height: 360px; display: flex; flex-direction: column; border: var(--ntr-line); border-radius: var(--ntr-radius-sm); background: var(--dsw-alias-bg-layer-1, #fff); overflow: hidden; }
-.dwa-model-pane-head { display: flex; align-items: center; gap: 6px; padding: 7px 9px; border-bottom: var(--ntr-line); font-size: var(--ntr-font-xs); font-weight: 600; color: var(--dsw-alias-text-secondary, #4b5563); }
+.dwa-model-pane-head { display: flex; align-items: center; gap: 6px; padding: 7px 9px; border-bottom: var(--ntr-line); font-size: var(--ntr-font-xs); font-weight: 600; color: var(--dsw-alias-label-secondary, #4b5563); }
 .dwa-model-pane-head .dwa-btn { margin-left: auto; min-height: 26px; padding: 2px 8px; font-size: var(--ntr-font-xs); }
 .dwa-model-pane-head .dwa-caret-btn { flex: none; width: 22px; height: 22px; background: transparent; }
 .dwa-model-pane-head .dwa-caret-btn:hover { background: var(--dsw-alias-interactive-bg-active, #e5e7eb); }
@@ -2648,7 +2729,7 @@ window.__ModuleLoader__.load({
 .dwa-model-empty { padding: 6px; }
 .dwa-model-row { display: flex; align-items: center; gap: 6px; width: 100%; border: none; background: none; padding: 5px 6px; border-radius: 5px; cursor: pointer; color: inherit; font: inherit; font-size: var(--ntr-font-sm); text-align: left; }
 .dwa-model-row:hover { background: var(--dsw-alias-interactive-bg-active, #f3f4f6); }
-.dwa-model-row.is-on { background: #3b82f614; color: #2563eb; }
+.dwa-model-row.is-on { background: color-mix(in srgb, var(--dsw-alias-state-business-primary, #2563eb) 8%, transparent); color: var(--dsw-alias-state-business-primary, #2563eb); }
 .dwa-model-row-mark { width: 12px; flex: none; text-align: center; opacity: 0.75; }
 .dwa-model-row-name { flex: 1 1 auto; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
 /* Name and credit keep their room; the id is the only cell that collapses. */
@@ -2670,15 +2751,31 @@ window.__ModuleLoader__.load({
 .dwa-seg > button { min-height: 30px; font: inherit; font-size: var(--ntr-font-sm); color: inherit; border: none; background: var(--dsw-alias-bg-layer-1, #fff); padding: 4px 14px; cursor: pointer; }
 .dwa-seg > button + button { border-left: 1px solid var(--dsw-alias-border-l2, #d1d5db); }
 .dwa-seg > button:hover { background: var(--dsw-alias-interactive-bg-active, #f3f4f6); }
-.dwa-seg > button.is-on { background: var(--ntr-accent); color: var(--dsw-alias-button-primary-invert, #fff); font-weight: 550; }
+.dwa-seg > button.is-on { background: var(--ntr-accent); color: var(--dsw-alias-label-primary-foreground, #fff); font-weight: 550; }
 .dwa-preference-row { display: flex; align-items: center; justify-content: space-between; gap: 16px; padding: 10px 0; }
 .dwa-preference-row + .dwa-preference-row { border-top: var(--ntr-line); }
+/* A control that needs the whole card: the label sits above it, not beside
+   it. A right-aligned segmented control squeezed its labels into two lines
+   each (中/止, 自动推/进), which read as broken rather than as choices. */
+.dwa-preference-block { padding: 12px 0; }
+.dwa-preference-block + .dwa-preference-block { border-top: var(--ntr-line); }
 .dwa-preference-label { font-size: var(--ntr-font-sm); font-weight: 600; }
 .dwa-preference-copy { margin-top: 2px; color: var(--ntr-muted); font-size: var(--ntr-font-xs); }
-.dwa-deadline-controls { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; }
-.dwa-deadline-input { width: 76px; min-height: 30px; padding: 4px 8px; text-align: right; }
-.dwa-deadline-input[aria-invalid="true"] { border-color: var(--ntr-danger); }
-.dwa-deadline-unit { white-space: nowrap; }
+.dwa-seg-wide { display: flex; width: 100%; margin-top: 10px; }
+.dwa-seg-wide > button { flex: 1; }
+/* The wait window, as a slider: the number is the headline, the rungs are the
+   scale under the track. */
+.dwa-deadline-value { margin-top: 8px; font-size: 20px; font-weight: 600; }
+.dwa-deadline-range { width: 100%; margin-top: 6px; accent-color: var(--ntr-accent); }
+.dwa-deadline-range:disabled { opacity: 0.4; }
+.dwa-deadline-ticks { display: flex; justify-content: space-between; margin-top: 2px; color: var(--ntr-muted); font-size: 10px; }
+.dwa-deadline-ticks > span { white-space: nowrap; }
+/* The facts that make a number here meaningless, in warning ink rather than
+   the muted gray every other hint uses: the value the config file is
+   outranking, on the row it belongs to. */
+.dwa-deadline-flag { margin-top: 4px; font-size: var(--ntr-font-xs); font-weight: 550; color: var(--ntr-warn); }
+.dwa-deadline-warn { margin-top: 10px; padding: 9px 12px; border-left: 3px solid var(--dsw-alias-state-warn-primary, #d97706); background: var(--dsw-alias-state-warn-secondary, #fffbeb); border-radius: var(--ntr-radius-sm); font-size: var(--ntr-font-xs); line-height: 1.55; }
+.dwa-deadline-reset { display: flex; justify-content: flex-end; margin-top: 8px; }
 @media (max-width: 640px) {
   .dwa-root { padding: 14px; }
   .dwa-page-header { flex-direction: column; }
@@ -2688,6 +2785,11 @@ window.__ModuleLoader__.load({
   .dwa-model-search { flex: 1 1 auto; width: auto; }
   .dwa-subsection-head, .dwa-preference-row { align-items: flex-start; flex-direction: column; }
   .dwa-default-hint { align-items: flex-start; flex-direction: column; }
+  /* The slider's scale: up to eight rungs with full unit words ("15 分钟")
+     need a smaller face before they can collide on a narrow panel. The rung
+     count follows the mode (自动推进 adds 不等待), and the row is a flex
+     space-between, so a shorter scale just spreads wider. */
+  .dwa-deadline-ticks { font-size: 9px; }
 }
 @media (prefers-reduced-motion: reduce) {
   .dwa-root *, .dwa-root *::before, .dwa-root *::after { transition: none !important; }
@@ -2708,19 +2810,19 @@ window.__ModuleLoader__.load({
 		function stateVisual(state, acp) {
 			switch (state) {
 				case "ready": return {
-					color: "#22c55e",
+					color: "var(--dsw-alias-state-success-primary, #22c55e)",
 					text: acp.label("已连接", "Connected")
 				};
 				case "starting": return {
-					color: "#eab308",
+					color: "var(--dsw-alias-state-warn-primary, #eab308)",
 					text: acp.label("启动中", "Starting")
 				};
 				case "error": return {
-					color: "#ef4444",
+					color: "var(--dsw-alias-state-error-primary, #ef4444)",
 					text: acp.label("错误", "Error")
 				};
 				default: return {
-					color: "#9ca3af",
+					color: "var(--dsw-alias-state-idle-primary, #9ca3af)",
 					text: acp.label("已配置", "Configured"),
 					title: acp.label("已配置，进程不常驻。在 DSH 聊天中首次使用时自动连接；展开区可用「测试连接」验证命令能否正常起来。", "Configured; the process is not kept resident. It connects automatically the first time a DSH chat turn uses it — use “Test connection” in the expanded panel to verify the command starts.")
 				};
@@ -2893,139 +2995,270 @@ window.__ModuleLoader__.load({
 		/**
 		* The settings panel's permission-ledger rule.
 		*
-		* A pending ask ALWAYS gets an answerable card here, whatever `approvalRouted`
-		* says. That flag reports that the host HAS an approval service — it does not
-		* promise THIS ask reached the conversation. An ask lands in `ui.permissions`
-		* only on the ledger path (`AgentBridge.handlePermissionRequest` broadcasts
-		* `permission/request` there and nowhere else), so a pending entry is by
-		* definition a question the conversation is not showing. The previous rule
-		* (`approvalRouted` → a read-only count, no buttons) hid the only answer
-		* entry exactly when the native route had degraded to unavailable, and the
-		* ask then hung until its timeout.
-		*
-		* `fellBackFromConversation` is the case the card has to explain: the host
-		* can route asks, and this one still did not make it.
+		* Pending asks are shown in the conversation card while that conversation is
+		* open; this card is the cross-session mirror for the ones it cannot show —
+		* asks belonging to another conversation, and `/acp` RPC-only asks with no
+		* chat identity at all. It therefore appears whenever ANY ask is pending: a
+		* pending entry with no conversation card would otherwise have no answer
+		* surface anywhere.
 		*/
 		function permissionLedgerCard(ui) {
-			const visible = ui.permissions.length > 0;
-			return {
-				visible,
-				fellBackFromConversation: visible && ui.approvalRouted
-			};
+			return { visible: ui.permissions.length > 0 };
 		}
 		/**
-		* One-click windows for an approval deadline, in ms. `0` is spelled out rather
-		* than hidden behind a big number because "never" is the value a cautious user
-		* picks first, and a preset row that cannot express it would make them type.
+		* The ONE wait window, as the rungs the slider snaps to.
+		*
+		* Shortest wait first, and `0` (不等待) FIRST: the slider reads left to right
+		* as "wait longer", and "do not wait at all" is the shortest wait there is.
+		* Never expiring is NOT on this scale — that is the `wait` MODE's business,
+		* and having 「一直等待」 in both places made the card say the same thing twice
+		* in two ways.
+		*
+		* A window the config file names that is not on this ladder (45 seconds, say)
+		* still runs as configured: the card prints the exact number and parks the
+		* thumb on the nearest rung, so the slider never pretends a number the host
+		* is not using.
 		*/
-		const DEADLINE_PRESETS = [
+		const DEADLINE_LADDER = [
 			0,
 			3e4,
 			6e4,
 			3e5,
-			9e5
+			9e5,
+			18e5,
+			36e5,
+			216e5
+		];
+		/**
+		* The shortest REAL wait — the first rung above 不等待.
+		*
+		* Hand-copied from the host half (`APPROVAL_DEADLINE_MIN_WAIT_MS` in
+		* `src/impl.ts`): the browser half may not import the host module, so the
+		* equivalence is pinned by a test instead (see `tests/acp-view.spec.ts`).
+		*/
+		const DEADLINE_MIN_WAIT_MS = 3e4;
+		/**
+		* The window the card shows under a mode.
+		*
+		* 不等待 (`0`) is the **auto** mode's rung: it answers with the option the
+		* agent's own kinds imply, so the agent CONTINUES. `abort` has no such rung —
+		* refusing every ask the instant it arrives stops the agent at every gate it
+		* meets, which is not a timeout but a wall. So under `abort` the window floors
+		* to the shortest real wait, and the card never shows a zero it cannot run.
+		*
+		* `undefined` (the `wait` mode) stays undefined: there is no window at all.
+		*/
+		function deadlineValueFor(mode, ms) {
+			if (ms === void 0) return void 0;
+			return mode === "abort" ? Math.max(ms, DEADLINE_MIN_WAIT_MS) : ms;
+		}
+		/**
+		* The rungs a mode offers.
+		*
+		* 不等待 (`0`) is the **auto** mode's rung: it answers with the option the
+		* agent's own kinds imply, so the agent CONTINUES. `abort` has no such rung —
+		* refusing every ask the instant it arrives stops the agent at every gate it
+		* meets, which is not a timeout but a wall. So `abort` starts at the shortest
+		* real wait.
+		*/
+		function deadlineLadder(mode) {
+			return mode === "auto" ? DEADLINE_LADDER : DEADLINE_LADDER.filter((ms) => ms > 0);
+		}
+		/**
+		* The rung the slider shows for a window. Exact hits keep their rung; anything
+		* else takes the nearest one. A tie goes to the SHORTER wait: the thumb must
+		* never promise more patience than the window has.
+		*/
+		function deadlineSliderIndex(ms, mode = "auto") {
+			const ladder = deadlineLadder(mode);
+			const exact = ladder.indexOf(ms);
+			if (exact >= 0) return exact;
+			let best = 0;
+			let bestDistance = Number.POSITIVE_INFINITY;
+			for (let i = 0; i < ladder.length; i++) {
+				const distance = Math.abs(ms - ladder[i]);
+				if (distance < bestDistance) {
+					bestDistance = distance;
+					best = i;
+				}
+			}
+			return best;
+		}
+		/** The three modes, in the order a user reads them: refuse, answer, wait. */
+		const DEADLINE_MODES = [
+			"abort",
+			"auto",
+			"wait"
 		];
-		/** Both editable windows, for the loops that treat them alike. */
-		const DEADLINE_FIELDS = ["nativeApprovalTimeoutMs", "permissionFallbackTimeoutMs"];
-		/** `5 分钟` / `30 秒` / `关` — the readout and the preset label, one formatter. */
+		/** `5 分钟` / `30 秒` / `不等待` — the readout and the tick label, one formatter. */
 		function deadlineText(ms, acp) {
-			if (ms <= 0) return acp.label("关", "Off");
+			if (ms <= 0) return acp.label("不等待", "No wait");
 			const seconds = Math.round(ms / 1e3);
 			if (seconds < 60) return acp.label(`${String(seconds)} 秒`, `${String(seconds)}s`);
 			const minutes = Math.round(seconds / 60);
-			return acp.label(`${String(minutes)} 分`, `${String(minutes)}m`);
+			if (minutes < 60) return acp.label(`${String(minutes)} 分钟`, `${String(minutes)}m`);
+			const hours = Math.round(minutes / 60);
+			return acp.label(`${String(hours)} 小时`, `${String(hours)}h`);
+		}
+		/** The mode's label — one formatter, so the picker and the override note agree. */
+		function modeText(mode, acp) {
+			if (mode === "abort") return acp.label("超时中止", "Abort");
+			if (mode === "auto") return acp.label("自动推进", "Auto");
+			return acp.label("一直等待", "Wait");
 		}
 		/**
-		* One editable deadline: presets for the windows people actually pick, plus a
-		* free-form seconds field for everything else.
+		* The mode block: what happens when nobody answers.
+		*
+		* Three values and no more — refuse, answer, wait — so the picker is a
+		* segmented control, not a dropdown. The buttons stretch across the whole
+		* card: a right-aligned segmented control squeezed the labels into two lines
+		* each (中/止, 自动推/进), which read as broken rather than as choices.
 		*
-		* The field is a DRAFT, not the value: it only commits a parseable whole number
-		* of seconds (0 allowed), and an unparseable draft reverts on blur instead of
-		* writing garbage the host would refuse. The host answer is what the row then
-		* shows, so a value the host trims never lingers in the UI.
+		* The copy under the buttons says what the SELECTED mode does, in one
+		* sentence — the labels alone ("超时中止") cannot. `auto` carries a warning of
+		* its own: it approves things nobody looked at.
 		*/
-		function DeadlineRow(props) {
-			const { acp, field, label, copy, value } = props;
-			const [draft, setDraft] = (0, react.useState)(void 0);
-			const text = draft ?? String(Math.round(value / 1e3));
-			const parsed = /^\d+$/.test(text.trim()) ? Number(text.trim()) * 1e3 : void 0;
-			const commit = () => {
-				const next = parsed;
-				setDraft(void 0);
-				if (next !== void 0 && next !== value) acp.setApprovalDeadline(field, next);
-			};
+		function DeadlineModeBlock(props) {
+			const { acp, mode, override } = props;
+			const copy = mode === "wait" ? acp.label("一直等待应答，不设超时时间。", "Wait until you answer — no deadline.") : mode === "auto" ? acp.label("超过设定时间未应答，自动代替你选择一个选项让 agent 继续执行。", "Past the deadline, an option is chosen for you and the agent continues.") : acp.label("超过设定时间未应答，自动拒绝该操作，agent 继续执行。", "Past the deadline, the operation is refused and the agent continues.");
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: "dwa-preference-row",
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-					className: "dwa-preference-label",
-					children: label
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-					className: "dwa-preference-copy",
-					children: copy
-				})] }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-					className: "dwa-deadline-controls",
-					children: [
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-							className: "dwa-seg",
-							children: DEADLINE_PRESETS.map((preset) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-								type: "button",
-								className: value === preset ? "is-on" : "",
-								title: deadlineText(preset, acp),
-								onClick: () => void acp.setApprovalDeadline(field, preset),
-								children: deadlineText(preset, acp)
-							}, preset))
-						}),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-							className: "dwa-input dwa-deadline-input",
-							type: "text",
-							inputMode: "numeric",
-							"aria-label": label,
-							"aria-invalid": parsed === void 0,
-							value: text,
-							onChange: (event) => setDraft(event.target.value),
-							onBlur: commit,
-							onKeyDown: (event) => {
-								if (event.key === "Enter") commit();
-							}
-						}),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dwa-hint dwa-deadline-unit",
-							children: acp.label("秒", "sec")
-						})
-					]
-				})]
+				className: "dwa-preference-block",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dwa-preference-label",
+						children: acp.label("超时处理方式", "When nobody answers")
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dwa-seg dwa-seg-wide",
+						children: DEADLINE_MODES.map((option) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: mode === option ? "is-on" : "",
+							onClick: () => void acp.setApprovalTimeoutMode(option),
+							children: modeText(option, acp)
+						}, option))
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dwa-preference-copy",
+						children: copy
+					}),
+					mode === "auto" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dwa-deadline-warn",
+						children: acp.label("请确保你的 agent 值得信任，请谨慎选择。", "Only pick this if you trust your agent — choose it carefully.")
+					}),
+					override !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dwa-deadline-flag",
+						children: ["⚠ ", override]
+					})
+				]
 			});
 		}
 		/**
+		* The duration block: how long to wait before the deadline fires.
+		*
+		* ONE slider, because there is ONE window: an ask in the conversation and an
+		* ask in the settings ledger are the same question, so they get the same
+		* answer. The slider's rungs are the windows people actually pick; a window
+		* the config file names outside them still runs as configured (the readout
+		* prints the exact number and the thumb parks on the nearest rung).
+		*
+		* `value === undefined` is the `wait` mode: there is no deadline at all, so
+		* the scale has nothing to say — the slider is not drawn, and the readout
+		* names the state that is actually in force. The stored window is NOT touched
+		* by that (the mode write carries only the mode), so switching back restores
+		* it.
+		*/
+		function DeadlineSliderBlock(props) {
+			const { acp, value, mode, override } = props;
+			const effective = deadlineValueFor(mode, value);
+			const ladder = deadlineLadder(mode);
+			const index = effective === void 0 ? 0 : deadlineSliderIndex(effective, mode);
+			const copy = effective === void 0 ? acp.label("选择「一直等待」时不设超时时长。", "“Wait” sets no deadline.") : effective <= 0 ? acp.label("不设等待时间，请求到达即按上方所选的方式处理。", "No wait: the ask is settled on arrival, by whatever you picked above.") : acp.label("超过该时长仍未应答，将按上方所选的方式处理。", "Past this, whatever you picked above is what happens.");
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dwa-preference-block",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dwa-preference-label",
+						children: acp.label("等待时长", "How long to wait")
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dwa-deadline-value",
+						children: effective === void 0 ? acp.label("一直等待", "Always") : deadlineText(effective, acp)
+					}),
+					effective !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+						className: "dwa-deadline-range",
+						type: "range",
+						min: 0,
+						max: ladder.length - 1,
+						step: 1,
+						value: index,
+						"aria-label": acp.label("等待时长", "How long to wait"),
+						onChange: (event) => {
+							const next = ladder[Number(event.target.value)];
+							if (next !== void 0 && next !== effective) acp.setApprovalDeadline(next);
+						}
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dwa-deadline-ticks",
+						children: ladder.map((rung) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: deadlineText(rung, acp) }, rung))
+					})] }),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dwa-preference-copy",
+						children: copy
+					}),
+					override !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dwa-deadline-flag",
+						children: ["⚠ ", override]
+					})
+				]
+			});
+		}
+		/**
+		* The facts the card has to show, decided from what the host reported.
+		*
+		* The card carries TWO controls, and they are orthogonal: one window (how
+		* long) and one mode (what happens). An override can sit on either of them,
+		* so each is decided on its own.
+		*
+		* `overridden` is what gates the reset button. A baseline that AGREES with the
+		* running value is not an override, and offering a reset for it would be a
+		* button that does nothing (observed live).
+		*/
+		function approvalDeadlineFacts(deadlines) {
+			const configured = deadlines.configured?.permissionTimeoutMs;
+			const baseline = configured === void 0 || configured === deadlines.permissionTimeoutMs ? void 0 : configured;
+			const modeBaseline = deadlines.configuredMode !== void 0 && deadlines.configuredMode !== deadlines.mode ? deadlines.configuredMode : void 0;
+			return {
+				baseline,
+				modeBaseline,
+				overridden: baseline !== void 0 || modeBaseline !== void 0
+			};
+		}
+		/**
 		* The approval-deadline card.
 		*
-		* Both windows are about the SAME failure — an ask nobody answered — reached
-		* from two different routes, which is exactly why they need an explanation
-		* rather than two bare sliders: the first bounds a host that took the question
-		* into the composer and never rendered it, the second bounds an ask that never
-		* reached the conversation at all. Neither is an answer on the user's behalf
-		* being hidden from them: withdrawing re-asks on the ledger, and the fallback
-		* says what it did in a notice.
+		* TWO controls, and they are orthogonal: one window (how long) and one mode
+		* (what happens). One window covers both places an ask can wait — the
+		* conversation's approval card and the settings panel's ledger — because they
+		* ask the same question and the answer should not differ by where the card
+		* happens to be drawn.
+		*
+		* The two controls are ONE system, and the card says so in a sentence: the
+		* window says how long to wait, the mode says what happens when nobody
+		* answered. That sentence is the thing the previous three-row layout kept
+		* missing.
 		*
-		* `configured` and `permissionTimeoutMs` are reported by the host only when
-		* they are actually in play, and both are shown here rather than swallowed:
-		* a user tuning a number that something else is overriding deserves to be told.
+		* The facts that make a number here meaningless are shown, not swallowed: the
+		* deployment baseline this card outranks. Each rides on the control it belongs
+		* to, and the reset button appears only when something is actually being
+		* outranked.
 		*/
 		function ApprovalDeadlinesCard(props) {
 			const { acp, ui } = props;
 			const deadlines = ui.approvalDeadlines;
 			if (deadlines === void 0) return null;
-			const configured = deadlines.configured ?? {};
-			const inForce = {
-				nativeApprovalTimeoutMs: deadlines.nativeApprovalTimeoutMs,
-				permissionFallbackTimeoutMs: deadlines.permissionFallbackTimeoutMs
-			};
-			const overrideNote = (field) => {
-				const baseline = configured[field];
-				if (baseline === void 0 || baseline === inForce[field]) return void 0;
-				return acp.label(`cordis.patch.yml 里是 ${deadlineText(baseline, acp)}，设置页的值优先。`, `cordis.patch.yml asks for ${deadlineText(baseline, acp)}; the value set here wins.`);
-			};
-			const overridden = DEADLINE_FIELDS.some((field) => overrideNote(field) !== void 0);
+			const facts = approvalDeadlineFacts(deadlines);
+			const baselineNote = facts.baseline === void 0 ? void 0 : acp.label(`配置文件（cordis.patch.yml）设为 ${deadlineText(facts.baseline, acp)}，此处设置优先。`, `The config file (cordis.patch.yml) asks for ${deadlineText(facts.baseline, acp)}; the value set here wins.`);
+			const modeNote = facts.modeBaseline === void 0 ? void 0 : acp.label(`配置文件（cordis.patch.yml）设为「${modeText(facts.modeBaseline, acp)}」，此处设置优先。`, `The config file (cordis.patch.yml) asks for "${modeText(facts.modeBaseline, acp)}"; the value set here wins.`);
+			const waitMode = deadlines.mode === "wait";
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 				className: "dwa-section",
 				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
@@ -3035,7 +3268,7 @@ window.__ModuleLoader__.load({
 						children: acp.label("审批时限", "Approval deadlines")
 					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						className: "dwa-section-copy",
-						children: acp.label("没人答复的权限询问多久后由插件接手。两者都不是替你批准：撤回后会改到设置页再问一次，代答前会先发一条说明。", "How long an unanswered permission ask waits before the plugin takes over. Neither approves on your behalf: a withdrawal re-asks in Settings, and an auto-answer announces itself first.")
+						children: acp.label("权限请求的等待时长与超时处理方式。", "How long to wait for a permission request, and what happens when nobody answers.")
 					})] })
 				}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 					className: "dwa-card",
@@ -3044,46 +3277,25 @@ window.__ModuleLoader__.load({
 						paddingBottom: 4
 					},
 					children: [
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(DeadlineRow, {
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(DeadlineModeBlock, {
 							acp,
-							field: "nativeApprovalTimeoutMs",
-							label: acp.label("对话审批撤回窗口", "Composer approval withdrawal"),
-							copy: acp.label("宿主把询问接进对话后，多久没出现就撤回并改到设置页问。会渲染的接管是立即出现的，所以这个期限只为「收了却不渲染」而响。", "How long an ask the host took into the composer may stay invisible before it is withdrawn and re-asked in Settings. A takeover that renders does so immediately, so this only fires for one that never showed up."),
-							value: deadlines.nativeApprovalTimeoutMs
+							mode: deadlines.mode,
+							override: modeNote
 						}),
-						overrideNote("nativeApprovalTimeoutMs") !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-							className: "dwa-hint",
-							style: { paddingBottom: 8 },
-							children: overrideNote("nativeApprovalTimeoutMs")
-						}),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(DeadlineRow, {
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(DeadlineSliderBlock, {
 							acp,
-							field: "permissionFallbackTimeoutMs",
-							label: acp.label("降级询问代答窗口", "Degraded-ask auto-answer"),
-							copy: acp.label("询问没能进入对话时（审批服务不可用，或已被撤回），多久后答复 cancelled。", "How long an ask that never reached the conversation (approval service unavailable, or withdrawn above) waits before it is answered cancelled."),
-							value: deadlines.permissionFallbackTimeoutMs
-						}),
-						overrideNote("permissionFallbackTimeoutMs") !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-							className: "dwa-hint",
-							style: { paddingBottom: 8 },
-							children: overrideNote("permissionFallbackTimeoutMs")
+							value: waitMode ? void 0 : deadlines.permissionTimeoutMs,
+							mode: deadlines.mode,
+							override: baselineNote
 						}),
-						deadlines.permissionTimeoutMs !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-							className: "dwa-hint",
-							style: { paddingBottom: 8 },
-							children: acp.label(`注意：cordis.patch.yml 里 permissionTimeoutMs = ${deadlineText(deadlines.permissionTimeoutMs, acp)}，它一视同仁，覆盖上面两个窗口。`, `Note: cordis.patch.yml sets permissionTimeoutMs = ${deadlineText(deadlines.permissionTimeoutMs, acp)}, which governs every path alike and overrides both windows above.`)
-						}),
-						overridden && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: "dwa-preference-row",
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-								className: "dwa-preference-copy",
-								children: acp.label("设置页的值写在插件自己的状态文件里，重启后仍然有效；重置后回到 cordis.patch.yml 的配置。", "A value set here lives in the plugin's own state file and survives a restart; resetting returns to whatever cordis.patch.yml asks for.")
-							}) }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						facts.overridden && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							className: "dwa-deadline-reset",
+							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
-								className: "dwa-btn",
+								className: "dwa-btn dwa-btn-secondary",
 								onClick: () => void acp.resetApprovalDeadlines(),
 								children: acp.label("恢复配置文件的值", "Use config file value")
-							})]
+							})
 						})
 					]
 				})]
@@ -3121,7 +3333,7 @@ window.__ModuleLoader__.load({
 									children: [
 										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 											className: "dwa-dot",
-											style: { background: ui.stream === "live" ? "#22c55e" : ui.stream === "down" ? "#ef4444" : "#9ca3af" },
+											style: { background: ui.stream === "live" ? "var(--dsw-alias-state-success-primary, #22c55e)" : ui.stream === "down" ? "var(--dsw-alias-state-error-primary, #ef4444)" : "var(--dsw-alias-state-idle-primary, #9ca3af)" },
 											title: ui.stream
 										}),
 										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: streamText(ui.stream, acp) }),
@@ -3149,14 +3361,14 @@ window.__ModuleLoader__.load({
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 								style: {
 									fontWeight: 600,
-									marginBottom: 8
+									marginBottom: 4
 								},
 								children: acp.label("待处理权限请求", "Pending Permission Requests")
 							}),
-							ledger.fellBackFromConversation && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 								className: "dwa-hint",
 								style: { marginBottom: 8 },
-								children: acp.label("这些询问没有进入对话（审批服务本次不可用、问题从未到达对话，或会话没有对话身份），请在此回答。", "These asks did not reach the conversation (the approval service was unavailable, the question never reached the conversation, or the session has no chat identity) — answer them here.")
+								children: acp.label("对话打开时在那边的卡片上回答；这里兜底显示其他会话的询问。", "Answer in the conversation card while that conversation is open; this list covers the asks whose conversation is not.")
 							}),
 							ui.permissions.map((permission) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								style: {
@@ -3167,21 +3379,31 @@ window.__ModuleLoader__.load({
 									flexWrap: "wrap"
 								},
 								children: [
-									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
 										style: {
 											flex: 1,
 											minWidth: 160
 										},
-										children: permission.title
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+											style: { fontWeight: 600 },
+											children: permission.toolName
+										}), permission.reason !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+											style: { color: "var(--ntr-muted)" },
+											children: [" · ", permission.reason]
+										})]
 									}),
 									permission.options.map((option) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 										className: "dwa-btn dwa-btn-primary",
-										onClick: () => void acp.respondPermission(permission.requestId, option.optionId),
+										onClick: () => {
+											acp.respondPermission(permission.requestId, option.optionId).catch(() => void 0);
+										},
 										children: option.name
 									}, option.optionId)),
 									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 										className: "dwa-btn",
-										onClick: () => void acp.respondPermission(permission.requestId),
+										onClick: () => {
+											acp.respondPermission(permission.requestId).catch(() => void 0);
+										},
 										children: acp.label("拒绝", "Dismiss")
 									})
 								]
@@ -3871,7 +4093,7 @@ window.__ModuleLoader__.load({
 							}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("code", {
 								className: "dwa-input-mono",
 								style: {
-									background: "#0000000a",
+									background: "var(--dsw-alias-markdown-inline-code, #0000000a)",
 									padding: "2px 6px",
 									borderRadius: 4
 								},
@@ -3927,7 +4149,13 @@ window.__ModuleLoader__.load({
 									}),
 									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 										className: idleInvalid ? "dwa-error" : "dwa-hint",
-										children: idleInvalid ? acp.label("必须是 0（永不释放）或 [1000, 86400000] 之间的整数毫秒。", "Must be 0 (never release) or an integer in [1000, 86400000] ms.") : acp.label("没有进行中的回合或待答审批时，空闲超过此时长就挂起进程（会话保留，下一条消息自动重启并恢复）；0 = 永不释放；有回合在跑、取消尚未结算或审批待答的进程不会被释放。此窗口只对承载过会话的进程生效：保存后拉起的模型探测进程（面板显示「已连接」的那个）固定 5 分钟释放，填 0 也拦不住。", "With no turn in flight or approval awaiting an answer, the process is parked once it has been idle this long (sessions are kept and resume on the next message); 0 = never; a process with a running turn, an unsettled cancel, or a pending approval is never released. This window applies only to a process that has hosted a session: the model-probe process (the one the panel shows as \"connected\" after a save) is always released after 5 minutes, and 0 does not stop it.")
+										children: idleInvalid ? acp.label("必须是 0（永不释放）或 [1000, 86400000] 之间的整数毫秒。", "Must be 0 (never release) or an integer in [1000, 86400000] ms.") : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+											acp.label("空闲超过此时长就挂起进程（会话保留，下一条消息自动恢复）。", "The process is parked once it has been idle this long (the session is kept and resumes on the next message)."),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("br", {}),
+											acp.label("0 = 永不释放；回合在跑、取消未结算或审批待答时不释放。", "0 = never; a process with a running turn, an unsettled cancel, or a pending approval is never released."),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("br", {}),
+											acp.label("只对承载过会话的进程生效；探测进程固定 5 分钟释放，填 0 也拦不住。", "This window applies only to a process that has hosted a session; the model-probe process is always released after 5 minutes, and 0 does not stop it.")
+										] })
 									})
 								]
 							})
@@ -4064,7 +4292,7 @@ window.__ModuleLoader__.load({
 						fontSize: 12,
 						whiteSpace: "pre-wrap",
 						wordBreak: "break-all",
-						color: testResult.ok ? "#16a34a" : "var(--ntr-danger)"
+						color: testResult.ok ? "var(--ntr-success)" : "var(--ntr-danger)"
 					},
 					children: [testResult.ok ? "✓ " : "✕ ", testResult.text]
 				})
@@ -4453,7 +4681,7 @@ window.__ModuleLoader__.load({
 							onChange: (e) => void toggleAutoDiscover(e.target.checked),
 							style: {
 								margin: 0,
-								accentColor: "#2563eb"
+								accentColor: "var(--dsw-alias-state-business-primary, #2563eb)"
 							}
 						}), acp.label("自动发现新模型", "Auto-discover new models")]
 					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
@@ -4931,10 +5159,10 @@ window.__ModuleLoader__.load({
 		* the entry point for conversations no agent has served.
 		*/
 		const STATE_COLORS = {
-			ready: "#22c55e",
-			starting: "#eab308",
-			error: "#ef4444",
-			stopped: "#9ca3af"
+			ready: "var(--dsw-alias-state-success-primary, #22c55e)",
+			starting: "var(--dsw-alias-state-warn-primary, #eab308)",
+			error: "var(--dsw-alias-state-error-primary, #ef4444)",
+			stopped: "var(--dsw-alias-state-idle-primary, #9ca3af)"
 		};
 		function agentStateText(acp, state) {
 			switch (state) {
@@ -6308,6 +6536,130 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region src/client/permission-dock.tsx
+		/**
+		* Pending ACP permission asks for the staged DSH conversation, rendered as
+		* composer-width entries above the composer card (`conversation.input.dock`).
+		* The slot itself spans the conversation column; the dock mirrors the host's
+		* InputBar width formula so the cards line up with the input box.
+		*
+		* The host broadcasts every ask as `permission/request`, carrying the DSH chat
+		* session id when the ask belongs to a conversation. This dock is the primary
+		* answer surface: it renders exactly the asks whose `dshSessionId` is the
+		* conversation it was mounted for, and nothing otherwise. There is no
+		* ACP-mode gate — the frame set itself is the gate, so an ordinary
+		* conversation shows this card if and only if it actually has an ask.
+		*
+		* The ask's description and options are the agent's own: buttons appear in the
+		* agent's order with the agent's names (including "Always Allow"), and
+		* `kind` is not rendered. A separate cancel button answers with no option,
+		* which the host forwards as `cancelled`. No Enter/Escape handlers: the
+		* composer owns its keyboard, and these are ordinary focusable buttons.
+		*
+		* Multiple asks stack in ARRIVAL order, oldest first: the question ignored
+		* longest stays at the top. The list is capped in height by CSS and scrolls.
+		* Asks without a chat identity never appear here — they stay in the
+		* settings-panel ledger, the cross-session mirror.
+		*/
+		/** Tick interval for the countdown (seconds are all the label shows). */
+		const COUNTDOWN_TICK_MS = 1e3;
+		function PermissionDock({ acp, sessionId }) {
+			ensureAcpStyle();
+			const ui = useUi$2(acp);
+			const dshSessionId = String(sessionId);
+			const pending = permissionsForSession(ui.permissions, dshSessionId);
+			const counting = pending.some((ask) => ask.timeoutMode !== "wait" && ask.deadlineAt !== void 0);
+			const [now, setNow] = (0, react.useState)(() => Date.now());
+			(0, react.useEffect)(() => {
+				if (!counting) return;
+				setNow(Date.now());
+				const timer = setInterval(() => {
+					setNow(Date.now());
+				}, COUNTDOWN_TICK_MS);
+				return () => {
+					clearInterval(timer);
+				};
+			}, [counting]);
+			if (pending.length === 0) return null;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: "ntr-permission-dock",
+				role: "region",
+				"aria-label": acp.label("待处理的权限请求", "Pending permission requests"),
+				children: pending.map((permission) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(PermissionAskCard, {
+					acp,
+					permission,
+					now
+				}, permission.requestId))
+			});
+		}
+		function PermissionAskCard(props) {
+			const { acp, permission, now } = props;
+			const [busy, setBusy] = (0, react.useState)(false);
+			const [error, setError] = (0, react.useState)();
+			const remaining = deadlineRemainingLabel(permission.deadlineAt, now, permission.timeoutMode);
+			const expired = remaining === PERMISSION_DEADLINE_EXPIRED;
+			const respond = (optionId) => {
+				if (busy) return;
+				setBusy(true);
+				setError(void 0);
+				acp.respondPermission(permission.requestId, optionId).catch((failure) => {
+					setError(failure instanceof Error ? failure.message : String(failure));
+				}).finally(() => {
+					setBusy(false);
+				});
+			};
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "ntr-permission-card",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "ntr-permission-head",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "ntr-permission-tool",
+								children: permission.toolName
+							}),
+							permission.reason !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "ntr-permission-reason",
+								title: permission.reason,
+								children: permission.reason
+							}),
+							remaining !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: `ntr-permission-deadline${expired ? " is-expired" : ""}`,
+								children: expired ? acp.label("已超时", "expired") : acp.label(`剩余 ${remaining}`, `${remaining} left`)
+							})
+						]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "ntr-permission-actions",
+						children: [permission.options.map((option) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "ntr-permission-option",
+							disabled: busy,
+							title: option.name,
+							onClick: () => {
+								respond(option.optionId);
+							},
+							children: option.name
+						}, option.optionId)), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "ntr-permission-cancel",
+							disabled: busy,
+							title: acp.label("取消这次询问（不选择任何选项）", "Cancel this ask without choosing an option"),
+							onClick: () => {
+								respond();
+							},
+							children: acp.label("取消", "Cancel")
+						})]
+					}),
+					error !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "ntr-permission-error",
+						role: "alert",
+						children: error
+					})
+				]
+			});
+		}
+		//#endregion
 		//#region src/client/model-seat.tsx
 		/** Exact key of the composer's model seat (a `single`, session-scoped slot). */
 		const MODEL_SEAT_KEY = "conversation.input.model";
@@ -6968,6 +7320,12 @@ window.__ModuleLoader__.load({
 				order: 5,
 				inject: (sessionId) => chatFace(sessionId)
 			}, AcpComposerAgentTag)), "dsh-ntr: composer agent tag");
+			ctx.effect(() => ctx.slots.inject("conversation.input.dock", () => ctx.slots.register({
+				name: "conversation.input.dock",
+				id: "acp-permissions",
+				order: 10,
+				inject: (sessionId) => chatFace(sessionId)
+			}, PermissionDock)), "dsh-ntr: conversation permission dock");
 			/**
 			* The client runtime's session list store, read structurally. Used to find
 			* the session the composer is staged on and whether it runs the ACP preset —