dsh-switchman 1.3.1 → 1.5.0

package/client.js

@@ -4,19 +4,26 @@
  * bundle per package; sibling files cannot be synchronously required).
  *
  * Surfaces, all reading the shared "dsh-switchman" locale namespace (zh/en):
- * - Phase 0: the team-autonomy badge in `conversation.session.header.actions`.
- * - Phase 0: the team-autonomy badge in `conversation.session.header.actions`.
+ * - Phase 0: the team-autonomy badge in `conversation.session.header.actions`,
+ *   extended with the current session's actual model (provider/model@effort)
+ *   for subagent sessions (live projection face, shared-snapshot fallback).
  * - Phase 1: a `settings.section` page with a "Language" card:
  *   conversation / code-comment / document language preferences.
  * - Phase 2: a "Dispatch pools & ranking" card on the same page: six lane
  *   pools and a capability ranking edited against the live model catalog
  *   (served by the Host route family), plus the enforcement mode. Every
- *   field shares one staged draft and one atomic fenced save.
+ *   field shares one staged draft and one atomic fenced save. Selected
+ *   routes outside the session's DSH-authorized child models (Host
+ *   /authorized route) carry a ⚠ badge plus a one-line hint.
  * - Phase 3: a "Context watermark" card on the same page: tiered token
  *   thresholds (soft/hard/force), the per-read budget, hard-tier behavior,
  *   automatic handover, and the subagent context cap — number inputs with
  *   per-field minimum plus soft<hard<force order validation, folded into
  *   the same staged draft and one atomic save.
+ * - Phase 4: an "Agent teams" card on the same page: the teams-mode master
+ *   switch, the whitelist-sync sub-switch (teams mode only), and the
+ *   whitelist sync status line. The ⚠ unauthorized badges and hint render
+ *   only in teams mode (plain subagent dispatch names no routes).
  */
 
 window.__ModuleLoader__.load({
@@ -148,6 +155,8 @@ window.__ModuleLoader__.load({
 			'wmDenyMode',
 			'wmAutoHandover',
 			'wmSubagentCap',
+			'teamsMode',
+			'syncWhitelist',
 		];
 
 		/** Stable identity of one provider/model route. */
@@ -230,6 +239,10 @@ window.__ModuleLoader__.load({
 			const bool = (field, def) =>
 				typeof value?.[field] === 'boolean' ? value[field] : def;
 			return {
+				// 作用域枚举（host 快照缺失/非法值一律按 global 呈现）；
+				// 放在首位，与 save() 组装的 desired 键序一致，保持
+				// sameValues 的无改动早退路径可用。
+				langScope: value?.langScope === 'project' ? 'project' : 'global',
 				langConversation: string('langConversation'),
 				langComments: string('langComments'),
 				langDocs: string('langDocs'),
@@ -260,6 +273,8 @@ window.__ModuleLoader__.load({
 				wmDenyMode: value?.wmDenyMode === 'deny' ? 'deny' : 'cap',
 				wmAutoHandover: bool('wmAutoHandover', true),
 				wmSubagentCap: bool('wmSubagentCap', true),
+				teamsMode: bool('teamsMode', false),
+				syncWhitelist: bool('syncWhitelist', false),
 			};
 		}
 
@@ -270,6 +285,7 @@ window.__ModuleLoader__.load({
 		 * numbers — never their input-string forms). */
 		function canonical(values) {
 			return JSON.stringify({
+				langScope: values.langScope,
 				langConversation: values.langConversation,
 				langComments: values.langComments,
 				langDocs: values.langDocs,
@@ -306,6 +322,8 @@ window.__ModuleLoader__.load({
 				wmDenyMode: values.wmDenyMode,
 				wmAutoHandover: values.wmAutoHandover,
 				wmSubagentCap: values.wmSubagentCap,
+				teamsMode: values.teamsMode,
+				syncWhitelist: values.syncWhitelist,
 			});
 		}
 
@@ -343,9 +361,26 @@ window.__ModuleLoader__.load({
 			return index;
 		}
 
+		/** Parse the /authorized answer (the session's DSH-authorized child
+		 *  models) into { enabled, keys } — null when unknown: a failed
+		 *  fetch, an unreadable service (both fields null), or a malformed
+		 *  shape all degrade to "no badges, no hint". A readable-but-empty
+		 *  whitelist yields keys = empty Set (every selected route drifts). */
+		function parseAuthorized(value) {
+			if (value === null || typeof value !== 'object') return null;
+			if (value.enabled !== true && value.enabled !== false) return null;
+			if (!Array.isArray(value.routes)) return null;
+			const keys = new Set();
+			for (const route of value.routes) {
+				const clean = sanitizeRoute(route);
+				if (clean !== null) keys.add(routeKey(clean));
+			}
+			return { enabled: value.enabled, keys };
+		}
+
 		/** Checkbox rows for one pool: every live catalog model, checked or
-		 * not, plus this pool's saved routes that left the catalog (still
-		 * removable — mirrors the shipped model-selection page). */
+		 *  not, plus this pool's saved routes that left the catalog (still
+		 *  removable — mirrors the shipped model-selection page). */
 		function poolRows(pool, catalogIndex) {
 			const selected = new Set(pool.map(routeKey));
 			const rows = [];
@@ -412,11 +447,30 @@ window.__ModuleLoader__.load({
 				badge: '自主团队',
 				badgeTip:
 					'dsh-switchman：四个内置预设（standard / ptc / minimal / cordis）已注入自主智能体团队调度规程',
+				handoverActive: '交接进行中',
+				handoverPhaseBackup: '备份会话',
+				handoverPhaseCompacting: '压缩上下文',
+				handoverPhaseContinuation: '唤醒续接',
+				handoverActiveTip:
+					'Switchman 正在后台交接：fork 备份会话并压缩上下文，完成后自动继续任务；期间会话静止属正常现象。',
+				visionHintNeedsPool:
+					'当前模型不支持读图：请在 dsh-switchman 设置中配置「视觉池」模型，之后用 /vision 发送图片。',
+				visionHintUseVision:
+					'当前模型不支持读图：图片请用 /vision 发送（将自动派发视觉池读取）。',
+				visionAutoConverted:
+					'图片直发被拒：已自动改用 /vision 重发（由视觉池读取）。',
 				settingsTitle: 'dsh-switchman',
+				panelLabel: 'Switchman 调度中心',
 				settingsDescription: '配置 dsh-switchman 的各项偏好。',
 				langSectionTitle: '语言偏好',
 				langSectionDescription:
 					'控制智能体的对话、代码注释与文档撰写语言。',
+				langScopeLabel: '语言作用域',
+				langScopeHelp: '选择这三项语言偏好的存放位置。',
+				langScopeGlobal: '全局（本 profile）',
+				langScopeProject: '按项目（.switchman/lang.json）',
+				langProjectNote:
+					'按项目模式：各项目读取自身的 .switchman/lang.json；首次询问的答案会写入该文件，文件不存在时每个会话都会询问。以下三项仅在全局模式生效。',
 				langConversationLabel: '对话语言',
 				langConversationHelp:
 					'智能体回复与讨论使用的语言；未设置时会在首次使用时询问一次并记住。',
@@ -478,6 +532,9 @@ window.__ModuleLoader__.load({
 				catalogEmpty: '当前没有模型提供方公布模型。',
 				catalogUnavailableGroup: '已保存但当前不可用',
 				catalogUnavailable: '当前不可用',
+				unauthorizedBadge: '未在 DSH 设置的子智能体模型选择授权列表中',
+				unauthorizedHint:
+					'标有 ⚠ 的模型未在 DSH 设置 → 子智能体 → 模型选择 中授权，Agent 显式指定它们会被拒绝；去 DSH 设置授权，或让 Agent 走隐式派发。',
 				rankTitle: '能力排序',
 				rankDescription:
 					'序号即能力序（最强在前），可为每项锚定 S/A/B/C 档。列表为六池选中 ∪ 已有排序；任意编辑都会固化当前显示顺序。',
@@ -524,16 +581,48 @@ window.__ModuleLoader__.load({
 				wmSubagentFollowForce: '跟随 force 档（0）',
 				wmCommands:
 					'命令：/ctx-pause 暂停水位干预 · /ctx-resume 恢复干预 · /ctx-handover 立即备份并交接压缩。',
+				teamsSectionTitle: '智能体团队',
+				teamsSectionDescription:
+					'切换派发形态：关闭为纯 subagent 派发（DSH 出厂保守团队策略接管）；开启后注入自主团队规程并启用 Agent Teams。',
+				teamsModeLabel: '智能体团队模式',
+				teamsModeHelp:
+					'开启后注入团队规程（默认委派 + 分级验证 + 任务板纪律），并自动启用 DSH 的 Agent Teams bundle；派发池的 ⚠ 授权徽标仅在开启时显示。',
+				syncWhitelistLabel: '同步子智能体模型白名单',
+				syncWhitelistHelp:
+					'独立开关（不依赖智能体团队模式）：把六池选中模型的并集整体写入 DSH「设置 → 子智能体 → 模型选择」的授权列表；dsh-switchman 成为唯一事实源。',
+				whitelistSyncOk: '已同步 {count} 条（{time}）。',
+				whitelistSyncError: '同步失败：{error}',
+				whitelistSyncPending: '等待同步…',
+				whitelistSyncNote: '白名单变更仅对之后新建的会话生效。',
 			},
 			en: {
 				badge: 'Team autonomy',
 				badgeTip:
 					'dsh-switchman: the four built-in presets (standard / ptc / minimal / cordis) carry the autonomous Agent Teams doctrine',
+				handoverActive: 'Handover in progress',
+				handoverPhaseBackup: 'forking backup',
+				handoverPhaseCompacting: 'compacting context',
+				handoverPhaseContinuation: 'waking continuation',
+				handoverActiveTip:
+					'Switchman is handing over in the background: forking a backup session and compacting context; the task continues automatically when done. A still session during this window is expected.',
+				visionHintNeedsPool:
+					'This model cannot read images: add vision-pool models in the dsh-switchman settings, then send images with /vision.',
+				visionHintUseVision:
+					'This model cannot read images: send them with /vision (routed to the vision pool automatically).',
+				visionAutoConverted:
+					'Image send was refused: automatically resubmitting via /vision (read by the vision pool).',
 				settingsTitle: 'dsh-switchman',
+				panelLabel: 'Switchman',
 				settingsDescription: 'Configure dsh-switchman preferences.',
 				langSectionTitle: 'Language',
 				langSectionDescription:
 					'Controls the language of agent replies, code comments, and authored documents.',
+				langScopeLabel: 'Language scope',
+				langScopeHelp: 'Where these language preferences are stored.',
+				langScopeGlobal: 'Global (this profile)',
+				langScopeProject: 'Per project (.switchman/lang.json)',
+				langProjectNote:
+					'Per-project mode: every project reads its own .switchman/lang.json; first-use answers are saved there, and sessions ask until it exists. The three fields below apply only in global mode.',
 				langConversationLabel: 'Conversation language',
 				langConversationHelp:
 					'The language agents reply and discuss in; when unset, you are asked once on first use and the choice is remembered.',
@@ -596,6 +685,9 @@ window.__ModuleLoader__.load({
 				catalogEmpty: 'No model provider currently advertises a model.',
 				catalogUnavailableGroup: 'Saved but currently unavailable',
 				catalogUnavailable: 'currently unavailable',
+				unauthorizedBadge: 'not authorized for explicit child dispatch in DSH Settings (subagents: model selection)',
+				unauthorizedHint:
+					'Models marked ⚠ are not authorized in DSH Settings → Subagents → model selection; agents naming them explicitly will be denied — authorize them in DSH Settings, or let agents dispatch implicitly.',
 				rankTitle: 'Capability ranking',
 				rankDescription:
 					'Numbered strongest first; each entry may anchor an S/A/B/C tier. The list is pool selections ∪ the saved ranking; any edit persists the displayed order.',
@@ -642,6 +734,19 @@ window.__ModuleLoader__.load({
 				wmSubagentFollowForce: 'Follow the force tier (0)',
 				wmCommands:
 					'Commands: /ctx-pause suspends watermark actions · /ctx-resume resumes them · /ctx-handover backs up and hands over now.',
+				teamsSectionTitle: 'Agent teams',
+				teamsSectionDescription:
+					"Switch the dispatch shape: off is plain subagent dispatch (DSH's factory conservative team policy takes over); on injects the autonomous team doctrine and enables Agent Teams.",
+				teamsModeLabel: 'Agent teams mode',
+				teamsModeHelp:
+					'When on, the team doctrine (delegate by default + tiered verification + task-board discipline) is injected and the DSH Agent Teams bundle is enabled; the dispatch pools ⚠ authorization badges show only in this mode.',
+				syncWhitelistLabel: 'Sync the subagent model whitelist',
+				syncWhitelistHelp:
+					'Independent switch (does not require agent teams mode): writes the union of the six pools over the DSH "Settings → Subagents → model selection" authorization list; dsh-switchman becomes the single source of truth.',
+				whitelistSyncOk: 'Synced {count} entries ({time}).',
+				whitelistSyncError: 'Sync failed: {error}',
+				whitelistSyncPending: 'Waiting to sync…',
+				whitelistSyncNote: 'Whitelist changes only affect sessions created afterwards.',
 			},
 		};
 
@@ -649,15 +754,215 @@ window.__ModuleLoader__.load({
 		// Session-header badge (Phase 0, unchanged)
 		// ------------------------------------------------------------------
 
-		function SwitchmanBadge({ locale, t }) {
+		/** Rotating-arc spinner (SVG SMIL animateTransform): the restricted
+		 * dynamic-module runtime exposes no CSS insertion here, and SMIL
+		 * animates without lifecycle code or a React state loop. */
+		function HandoverSpinner() {
+			return h(
+				'svg',
+				{
+					viewBox: '0 0 16 16',
+					width: 12,
+					height: 12,
+					'aria-hidden': true,
+					style: { flex: 'none' },
+				},
+				h(
+					'circle',
+					{
+						cx: 8,
+						cy: 8,
+						r: 6,
+						fill: 'none',
+						stroke: 'currentColor',
+						strokeWidth: 2,
+						strokeDasharray: '9 19',
+						strokeLinecap: 'round',
+					},
+					h('animateTransform', {
+						attributeName: 'transform',
+						type: 'rotate',
+						from: '0 8 8',
+						to: '360 8 8',
+						dur: '1s',
+						repeatCount: 'indefinite',
+					}),
+				),
+			);
+		}
+
+		function SwitchmanBadge({
+		locale,
+		t,
+		sessionId,
+		useProjection,
+		useSessions,
+	}) {
+
 			// Subscription only: stable snapshot via getLocale() re-renders on switch.
 			React.useSyncExternalStore(
 				(fn) => locale.subscribe(fn),
 				() => locale.getLocale(),
 			);
+			// Live handover cue: during the fork+compact window the session
+			// GUI has no motion of its own, so the badge polls the Host's
+			// handover-state route (phases recorded from runHandover's first
+			// synchronous line) and flips to an animated status chip. Fast
+			// cadence while in flight, slow otherwise; a failed fetch or an
+			// older Host reads as "no handover" and never blocks the badge.
+			const [handover, setHandover] = React.useState(null);
+			React.useEffect(() => {
+				let stopped = false;
+				let timer = null;
+				const tick = async () => {
+					let live = null;
+					// NOTE: the handover-state route is not session-scoped, so
+					// this reflects ANY in-flight handover (cross-session bleed
+					// with several open sessions) — accepted: cosmetic, and
+					// the desktop GUI renders one session header at a time.
+					try {
+						const reply = await api.get('handover-state');
+						if (reply?.ok && reply.value?.count > 0)
+							live = reply.value.handovers[0] ?? null;
+					} catch {
+						live = null;
+					}
+					if (stopped) return;
+					setHandover(live);
+					timer = setTimeout(tick, live === null ? 10_000 : 3_000);
+				};
+				void tick();
+				return () => {
+					stopped = true;
+					if (timer !== null) clearTimeout(timer);
+				};
+			}, []);
+			// ---- Session model line ----
+			// The slot is session-scoped, so `sessionId` names the open session
+			// and `useProjection` reads its live projection faces (standard kit
+			// members; both degrade to no-ops outside the kit, same guard shape
+			// as the vision dock entry). Switching sessions re-materializes the
+			// standard props, so the face re-binds and the old subscription is
+			// dropped by the hook machinery — no manual lifecycle here.
+			const projectionHook =
+				typeof useProjection === 'function' ? useProjection : () => undefined;
+			const liveSelection = projectionHook('modelSelection');
+			// NEVER touch services this plugin did not declare in inject:
+			// the dynamic-module guard THROWS on `ctx.<undeclared>` access
+			// (ctx.sessions did exactly that and the slot occurrence error
+			// boundary swallowed it — the badge silently vanished this way).
+			// Session facts arrive only through framework-bound kit hooks, and
+			// every selector must return a value-stable primitive.
+			const sessionsHook =
+				typeof useSessions === 'function' ? useSessions : () => undefined;
+			// Durable metadata separates subagent sessions from root ones
+			// (summary `origin`/`parentId`). A root session's model already has
+			// the composer's model selector, so the line stays subagent-only.
+			const subagentKey = sessionsHook((list) => {
+				if (list == null) return 'absent';
+				const summary =
+					sessionId != null ? list.byId?.[sessionId] : undefined;
+				if (summary === undefined) return 'absent';
+				return summary.origin === 'subagent' ||
+					summary.parentId !== undefined
+					? 'subagent'
+					: 'root';
+			});
+			const isSubagent = subagentKey === 'subagent';
+			// Fallback for sessions whose retained face has not carried the
+			// key yet: the manager's shared list snapshot often already holds
+			// explicitly loaded projections (sidebar-visible subagents).
+			const fallbackText = sessionsHook((list) => {
+				if (list == null) return '';
+				const selection =
+					sessionId != null
+						? list.projectionsBySession?.[sessionId]?.values
+								?.modelSelection
+						: undefined;
+				const model = selection?.next ?? selection?.lastUsed;
+				if (model == null) return '';
+				return `${model.provider}/${model.model}${
+					model.reasoningEffort ? `@${model.reasoningEffort}` : ''
+				}`;
+			});
+			const liveModel =
+				liveSelection?.next ?? liveSelection?.lastUsed ?? null;
+			const modelText =
+				liveModel == null
+					? (fallbackText ?? '')
+					: `${liveModel.provider}/${liveModel.model}${
+							liveModel.reasoningEffort
+								? `@${liveModel.reasoningEffort}`
+								: ''
+						}`;
+			const modelChip =
+				isSubagent && modelText !== ''
+					? h(
+							'span',
+							{
+								title: modelText,
+								'data-dsh-switchman': 'session-model',
+								style: {
+									borderRadius: 'var(--dsw-radius-xs)',
+									height: '22px',
+									color: 'var(--dsw-alias-label-tertiary)',
+									whiteSpace: 'nowrap',
+									display: 'inline-flex',
+									alignItems: 'center',
+									gap: '4px',
+									padding: '0 8px',
+									fontSize: '12px',
+									lineHeight: '22px',
+									flex: 'none',
+								},
+							},
+							h('span', { 'aria-hidden': true, style: { flex: 'none' } }, '◇'),
+							h('span', null, modelText),
+						)
+					: null;
+			/** Append the model chip without disturbing the status chip shapes. */
+			const withModelChip = (chip) =>
+				modelChip === null ? chip : h(React.Fragment, null, chip, modelChip);
+			if (handover !== null) {
+				const phaseKey =
+					handover.phase === 'backup'
+						? 'handoverPhaseBackup'
+						: handover.phase === 'continuation'
+							? 'handoverPhaseContinuation'
+							: 'handoverPhaseCompacting';
+				const seconds = Math.max(
+					0,
+					Math.round((Date.now() - (handover.at ?? Date.now())) / 1000),
+				);
+				const status = h(
+					'span',
+					{
+						title: `${t('handoverActiveTip')}（${seconds}s）`,
+						role: 'status',
+						'data-dsh-switchman': 'handover-active',
+						style: {
+							borderRadius: 'var(--dsw-radius-xs)',
+							background: 'var(--dsw-alias-interactive-bg-hover, transparent)',
+							color: 'var(--dsw-alias-state-business-primary, inherit)',
+							height: '22px',
+							whiteSpace: 'nowrap',
+							display: 'inline-flex',
+							alignItems: 'center',
+							gap: '4px',
+							padding: '0 8px',
+							fontSize: '12px',
+							lineHeight: '22px',
+							flex: 'none',
+						},
+					},
+					h(HandoverSpinner, null),
+					h('span', null, `${t('handoverActive')} · ${t(phaseKey)}`),
+				);
+				return withModelChip(status);
+			}
 			const text = t('badge');
 			const tip = t('badgeTip');
-			return h(
+			const status = h(
 				'span',
 				{
 					title: tip,
@@ -684,6 +989,243 @@ window.__ModuleLoader__.load({
 				h('span', { 'aria-hidden': true, style: { flex: 'none' } }, '⚡'),
 				h('span', null, text),
 			);
+			return withModelChip(status);
+		}
+
+		/** Composer-dock vision entry. Two jobs:
+		 *
+		 * 1. Guidance chip — DSH refuses to send pasted images while the
+		 *    session model has no image input; switchman's unlock is the
+		 *    /vision command backed by the vision pool. The chip renders
+		 *    whenever image support is not positively confirmed (probe
+		 *    false, or null = unresolved — the common live case: the
+		 *    Host-side model-info resolution often cannot resolve custom
+		 *    routes), polling the Host route at a slow fixed cadence;
+		 *    any failure renders nothing.
+		 * 2. Reactive auto-conversion (v1) — when a plain send is refused
+		 *    host-side (session/attachment-invalid), rewrite the draft as
+		 *    "/vision <original text>" and resubmit once; the claimed
+		 *    command submit carries the restored draft attachments past
+		 *    the model gate to the /vision handler. The refusal code is
+		 *    the authoritative image-gate signal; the probe's
+		 *    imageCapable only brakes the conversion when it positively
+		 *    says true. Session-scoped dock entries receive the standard
+		 *    kit (inputActions, useInput, useSession) automatically;
+		 *    loop safety = one conversion per promptError object
+		 *    identity + never converting a draft that already starts
+		 *    with "/". */
+		function VisionDockEntry({ t, sessionId, inputActions, useInput, useSession }) {
+			const [vision, setVision] = React.useState(null);
+			const [notice, setNotice] = React.useState(false);
+			const handled = React.useRef(null);
+			const latest = React.useRef({ vision: null, draft: '', attachmentIds: [] });
+			React.useEffect(() => {
+				let stopped = false;
+				let timer = null;
+				// The probe must judge the CURRENT conversation's model: pass
+				// the session scope's identity so the Host resolves
+				// imageCapable from that session's model selection (subagent
+				// sessions included); without it the Host falls back to the
+				// root session and mislabels text-only children. Restarting
+				// the loop on `sessionId` re-probes immediately on a switch.
+				const query =
+					typeof sessionId === 'string' && sessionId !== ''
+						? `?session=${encodeURIComponent(sessionId)}`
+						: '';
+				const tick = async () => {
+					let next = null;
+					try {
+						const reply = await api.get(`vision-state${query}`);
+						if (reply?.ok && reply.value && typeof reply.value === 'object')
+							next = {
+								poolConfigured: reply.value.poolConfigured === true,
+								imageCapable: reply.value.imageCapable,
+							};
+					} catch {
+						next = null;
+					}
+					if (stopped) return;
+					setVision(next);
+					timer = setTimeout(tick, 15_000);
+				};
+				void tick();
+				return () => {
+					stopped = true;
+					if (timer !== null) clearTimeout(timer);
+				};
+			}, [sessionId]);
+			// Standard kit props are guaranteed by the session scope, but the
+			// hooks must be called unconditionally — degrade to no-op sources
+			// if a future shell ever mounts this entry outside that scope.
+			const inputHook =
+				typeof useInput === 'function' ? useInput : () => () => ({ draft: '', attachmentIds: [] });
+			const sessionHook =
+				typeof useSession === 'function' ? useSession : () => () => null;
+			const input = inputHook((s) => s) ?? {};
+			const promptError = sessionHook((s) => s.promptError);
+			latest.current = {
+				vision,
+				draft: typeof input.draft === 'string' ? input.draft : '',
+				attachmentIds: Array.isArray(input.attachmentIds) ? input.attachmentIds : [],
+			};
+			React.useEffect(() => {
+				if (promptError == null || promptError === handled.current) return;
+				handled.current = promptError;
+				if (promptError.op !== 'send') return; // stop failures are not ours
+				const code = promptError.error?.code;
+				if (code !== 'session/attachment-invalid' && code !== 'subagent/attachment-invalid') return;
+				// Let InputBar's failure restore of the draft and attachments
+				// land before reading them.
+				const timer = setTimeout(() => {
+					const snap = latest.current;
+					// The refusal code below is the authoritative image-gate
+					// signal; vision.imageCapable is only a secondary brake.
+					// The Host probe legitimately yields null (unknown) when
+					// its model-info resolution fails, so skip ONLY when the
+					// probe positively says the model reads images.
+					if (snap.vision?.imageCapable === true) return;
+					const text = snap.draft.trim();
+					if (text.startsWith('/')) return; // already a command path — never loop
+					if (snap.attachmentIds.length === 0) return;
+					if (typeof inputActions?.setDraft !== 'function' || typeof inputActions?.submit !== 'function')
+						return;
+					inputActions.setDraft(text === '' ? '/vision' : `/vision ${text}`);
+					inputActions.submit();
+					setNotice(true);
+					setTimeout(() => setNotice(false), 6_000);
+				}, 300);
+				return () => clearTimeout(timer);
+			}, [promptError, inputActions]);
+			if (vision === null && !notice) return null;
+			// The dock zone spans the full conversation width while the
+			// composer card is a centered column (max-width contract). The
+			// hero state narrows the whole stack, the active state does
+			// not — so a bare <p> lands hard against the far left once a
+			// conversation starts. Mirror the shell's own QueueDock column
+			// formula (same CSS custom properties) to keep every line's
+			// left edge tracking the input card in both states; fallback
+			// values degrade to the shell defaults if a variable is unset.
+			const dockColumnStyle = {
+				boxSizing: 'border-box',
+				width: 'calc(100% - var(--dsh-composer-side-clearance, 16px) - var(--dsh-composer-side-clearance, 16px))',
+				maxWidth: 'var(--dsh-composer-card-max-width, 780px)',
+				margin: '0 auto',
+				flex: 'none',
+				// Keep the rhythm between the notice and hint lines equal to
+				// the composer stack gap they no longer participate in.
+				display: 'flex',
+				flexDirection: 'column',
+				gap: 'var(--dsh-composer-stack-gap, 6px)',
+			};
+			return h(
+				'div',
+				{
+					'data-dsh-switchman': 'vision-dock-column',
+					style: dockColumnStyle,
+				},
+				notice
+					? h(
+							'p',
+							{
+								'data-dsh-switchman': 'vision-auto-converted',
+								style: {
+									margin: '0',
+									padding: '2px 0',
+									color: 'var(--dsw-alias-label-secondary)',
+									fontSize: '12px',
+									lineHeight: '1.6',
+								},
+							},
+							'↻ ',
+							t('visionAutoConverted'),
+						)
+					: null,
+				// Hint whenever the probe cannot positively confirm image
+				// input — false (confirmed text-only) or null (unresolved,
+				// the common live case): /vision is harmless either way and
+				// this chip is the only composer-surface affordance for it.
+				vision !== null && vision.imageCapable !== true
+					? h(
+							'p',
+							{
+								'data-dsh-switchman': 'vision-hint',
+								style: {
+									margin: '0',
+									padding: '2px 0',
+									color: 'var(--dsw-alias-label-tertiary)',
+									fontSize: '12px',
+									lineHeight: '1.6',
+								},
+							},
+							'⚠ ',
+							t(vision.poolConfigured ? 'visionHintUseVision' : 'visionHintNeedsPool'),
+						)
+					: null,
+			);
+		}
+
+		/** Home-sidebar panel icon (sidebar.panellist contract): the shell
+		 * row renderer passes { size, active } and colors the glyph via the
+		 * row's currentColor, so only size matters here. 16×16 stroke
+		 * glyph — one dispatch stem splitting into two routed lanes.
+		 * data-dsh-panel-entry is the documented L2 skins hook (the shell
+		 * row itself carries no per-entry marker). */
+		function SwitchmanPanelIcon({ size }) {
+			return h(
+				'svg',
+				{
+					'data-dsh-panel-entry': 'dsh-switchman',
+					viewBox: '0 0 16 16',
+					width: size,
+					height: size,
+					fill: 'none',
+					stroke: 'currentColor',
+					strokeWidth: 1.3,
+					strokeLinecap: 'round',
+					strokeLinejoin: 'round',
+					'aria-hidden': true,
+				},
+				h('path', { d: 'M2 8h4.5' }),
+				h('path', { d: 'M6.5 8 10.5 4H12' }),
+				h('path', { d: 'M6.5 8l4 4H12' }),
+				h('path', { d: 'M12.2 2.2 14 4l-1.8 1.8' }),
+				h('path', { d: 'M12.2 10.2 14 12l-1.8 1.8' }),
+			);
+		}
+
+		/** Central-panel host for the sidebar entry: reuses the settings
+		 * page component unchanged (its {t, locale} props arrive as the
+		 * register inject() face). The main area hands the page a
+		 * definite-height, overflow-clipped frame with no gutter — the
+		 * page must own its scrolling (skill-explorer's .view/.tabBody
+		 * pattern): height:100% scroll owner outside, reading-width
+		 * centered column inside. */
+		function SwitchmanPanelPage(props) {
+			return h(
+				'div',
+				{
+					'data-dsh-switchman': 'panel',
+					style: {
+						minWidth: 0,
+						minHeight: 0,
+						height: '100%',
+						overflowY: 'auto',
+					},
+				},
+				h(
+					'div',
+					{
+						style: {
+							minWidth: 0,
+							maxWidth: '860px',
+							margin: '0 auto',
+							padding: '16px 24px',
+							boxSizing: 'border-box',
+						},
+					},
+					h(SwitchmanSettingsPage, props),
+				),
+			);
 		}
 
 		// ------------------------------------------------------------------
@@ -834,7 +1376,7 @@ window.__ModuleLoader__.load({
 				cursor: 'pointer',
 			},
 			poolList: {
-				maxHeight: '190px',
+				maxHeight: '320px',
 				overflowY: 'auto',
 				display: 'grid',
 				gap: '2px',
@@ -867,6 +1409,10 @@ window.__ModuleLoader__.load({
 				color: 'var(--dsw-alias-label-tertiary)',
 				flex: 'none',
 			},
+			unauthorizedMark: {
+				color: 'var(--dsw-alias-state-error-primary)',
+				flex: 'none',
+			},
 			rankList: { display: 'grid', gap: '2px', marginTop: '8px' },
 			rankRow: {
 				display: 'grid',
@@ -885,9 +1431,12 @@ window.__ModuleLoader__.load({
 				color: 'var(--dsw-alias-label-primary)',
 				fontSize: '12.5px',
 				lineHeight: 1.6,
-				overflow: 'hidden',
-				textOverflow: 'ellipsis',
-				whiteSpace: 'nowrap',
+				// Wrap instead of ellipsize: provider/model pairs must stay
+				// fully readable in the narrow panel (the hover title remains
+				// a convenience, not the only way to read the full route).
+				whiteSpace: 'normal',
+				wordBreak: 'break-word',
+				minWidth: 0,
 			},
 			rankActions: { display: 'flex', gap: '4px', flex: 'none' },
 			effortSelect: {
@@ -1002,6 +1551,8 @@ window.__ModuleLoader__.load({
 			efforts,
 			manual,
 			editable,
+			authorized,
+			teamsMode,
 			onToggle,
 			onToggleManual,
 			onSetEffort,
@@ -1011,6 +1562,26 @@ window.__ModuleLoader__.load({
 			onClear,
 		}) {
 			const hasCandidates = rows.length > 0 || extras.length > 0;
+			/** 授权漂移判定：该路由不在本会话 DSH 授权的子智能体模型内
+			 *  （authorized === null = 未知，不标）。enabled === false 时
+			 *  一切显式指定都会被拒，所有已选路由都算漂移。仅团队模式
+			 *  显示：纯 subagent 模式不做显式路由注入，徽标无意义。 */
+			const drift = (route) =>
+				teamsMode === true &&
+				authorized !== null &&
+				(authorized.enabled === false ||
+					!authorized.keys.has(routeKey(route)));
+			/** 漂移行的 ⚠ 徽标（悬停/读屏文案见 unauthorizedBadge）。 */
+			const unauthorizedBadge = () =>
+				h(
+					'span',
+					{
+						style: STYLE.unauthorizedMark,
+						title: t('unauthorizedBadge'),
+						'aria-label': t('unauthorizedBadge'),
+					},
+					'⚠',
+				);
 			/** 显示名查找：覆盖目录行与已存离架行。 */
 			const nameByKey = new Map(
 				[...rows, ...extras]
@@ -1134,6 +1705,7 @@ window.__ModuleLoader__.load({
 												},
 												nameByKey.get(routeKey(route)) ??
 													`${route.provider} · ${route.model}`,
+												drift(route) ? unauthorizedBadge() : null,
 											),
 											effortSelect(route),
 											h(
@@ -1299,6 +1871,9 @@ window.__ModuleLoader__.load({
 												`${row.providerName} · ${row.modelName}`,
 											),
 											...(row.selected ? [effortSelect(row)] : []),
+											...(row.selected && drift(row)
+												? [unauthorizedBadge()]
+												: []),
 										),
 							),
 							extras.length > 0
@@ -1335,6 +1910,7 @@ window.__ModuleLoader__.load({
 										{ style: STYLE.unavailableMark },
 										` · ${t('catalogUnavailable')}`,
 									),
+									drift(row) ? unauthorizedBadge() : null,
 								),
 							),
 						)
@@ -1368,6 +1944,10 @@ window.__ModuleLoader__.load({
 		const [saving, setSaving] = React.useState(false);
 		const [failed, setFailed] = React.useState(false);
 		const [conflicted, setConflicted] = React.useState(false);
+		/** Last whitelist sync status from the Host config answer: null when
+		 *  both teams switches are off (the Host omits the field), otherwise
+		 *  { ok, count, at, error? }. */
+		const [whitelistSync, setWhitelistSync] = React.useState(null);
 
 		// Mirror the editable state for async save flows below (setState
 		// alone is too late inside stale closures).
@@ -1377,6 +1957,20 @@ window.__ModuleLoader__.load({
 		/** Values this page loaded — the optimistic-concurrency baseline the
 		 *  Host route fences writes against. */
 		const loadedRef = React.useRef(null);
+		/** Unmount guard for the post-save sync-status re-reads. */
+		const syncAlive = React.useRef(true);
+		React.useEffect(() => () => {
+			syncAlive.current = false;
+		}, []);
+
+		/** Re-read the config answer for the whitelist sync status line: the
+		 *  Host syncs after a successful write, so one immediate and one
+		 *  delayed read bracket the async window. */
+		const refreshWhitelistSync = React.useCallback(async () => {
+			const response = await api.get('config');
+			if (!syncAlive.current || !response.ok) return;
+			setWhitelistSync(response.value?.whitelistSync ?? null);
+		}, []);
 
 		const assignDraft = (next) => {
 			draftRef.current = next;
@@ -1392,6 +1986,9 @@ window.__ModuleLoader__.load({
 				if (response.ok && response.value?.values !== undefined) {
 					loadedRef.current = response.value.values;
 					setForm({ status: 'ready', writable: true, values: response.value.values });
+					// Whitelist sync status travels beside the values (null
+					// unless both teams switches are on).
+					setWhitelistSync(response.value.whitelistSync ?? null);
 				} else setForm({ status: 'error', writable: false });
 			})();
 			return () => {
@@ -1432,6 +2029,25 @@ window.__ModuleLoader__.load({
 		}, [loadCatalog]);
 			const catalogIndex = indexCatalog(catalog.groups);
 
+		// DSH-side child-model authorization (which routes this session may
+		// name explicitly on subagent/workflow calls): loaded once on mount
+		// beside the catalog. null (failed fetch or unreadable service)
+		// means unknown — no ⚠ badges, no hint.
+		const [authorized, setAuthorized] = React.useState(null);
+		React.useEffect(() => {
+			let alive = true;
+			void (async () => {
+				const response = await api.get('authorized');
+				if (!alive) return;
+				setAuthorized(
+					response.ok ? parseAuthorized(response.value) : null,
+				);
+			})();
+			return () => {
+				alive = false;
+			};
+		}, []);
+
 			// Numeric watermark editing: one raw-text overlay per field so
 			// partial input ('', '5', leading zeros) is editable without
 			// corrupting the draft; parseable integers commit immediately,
@@ -1467,7 +2083,9 @@ window.__ModuleLoader__.load({
 				!(values.wmSoftTokens < values.wmHardTokens) ||
 				!(values.wmHardTokens < values.wmForceTokens);
 			const invalid =
-				(customActive && values.langConversation.trim() === '') ||
+				(values.langScope === 'global' &&
+					customActive &&
+					values.langConversation.trim() === '') ||
 				anyNumberInvalid ||
 				orderInvalid;
 			const dirty = !sameValues(current, values);
@@ -1653,6 +2271,7 @@ window.__ModuleLoader__.load({
 			if (form.status !== 'ready' || !form.writable || savingRef.current)
 				return;
 			const desired = {
+				langScope: values.langScope,
 				langConversation: values.langConversation.trim(),
 				langComments: values.langComments,
 				langDocs: values.langDocs,
@@ -1689,6 +2308,8 @@ window.__ModuleLoader__.load({
 				wmDenyMode: values.wmDenyMode,
 				wmAutoHandover: values.wmAutoHandover,
 				wmSubagentCap: values.wmSubagentCap,
+				teamsMode: values.teamsMode,
+				syncWhitelist: values.syncWhitelist,
 			};
 			if (sameValues(current, desired)) {
 				// Whitespace-only differences: nothing to write, close the draft.
@@ -1723,6 +2344,17 @@ window.__ModuleLoader__.load({
 					writable: true,
 					values: response.value.values,
 				});
+				// The write triggers the whitelist sync Host-side; the answer
+				// may already carry fresh status, and the delayed re-read
+				// covers the async tail.
+				if (response.value?.whitelistSync !== undefined)
+					setWhitelistSync(response.value.whitelistSync);
+				if (desired.syncWhitelist === true) {
+					void refreshWhitelistSync();
+					setTimeout(() => {
+						void refreshWhitelistSync();
+					}, 2000);
+				}
 				assignDraft(null);
 				setCustomArmed(false);
 				clearNumText();
@@ -1770,6 +2402,9 @@ window.__ModuleLoader__.load({
 			const conversationId = `${headingId}-conversation`;
 			const commentsId = `${headingId}-comments`;
 			const docsId = `${headingId}-docs`;
+			const scopeId = `${headingId}-scope`;
+			/** Project scope moves the three slots into per-project files. */
+			const langLocked = values.langScope === 'project';
 			const suggestion = suggestFromUiLocale(locale.getLocale().active);
 
 			/** Status lines under one row's control. */
@@ -1805,12 +2440,12 @@ window.__ModuleLoader__.load({
 				return lines;
 			};
 
-			/** Shared select props (disabled while saving / read-only). */
-			const selectProps = (id, value, onChange) => ({
+			/** Shared select props (disabled while saving / read-only / locked). */
+			const selectProps = (id, value, onChange, locked = false) => ({
 				id,
 				value,
 				onChange: (event) => onChange(event.target.value),
-				disabled: !editable,
+				disabled: !editable || locked,
 				style: STYLE.control,
 			});
 
@@ -1825,6 +2460,7 @@ window.__ModuleLoader__.load({
 							? CUSTOM
 							: values.langConversation,
 						selectConversation,
+						langLocked,
 					),
 					...languageOptions(t, { withUnset: 'ask', withCustom: true }),
 				),
@@ -1836,7 +2472,7 @@ window.__ModuleLoader__.load({
 								edit('langConversation', event.target.value),
 							placeholder: t('customLanguagePlaceholder'),
 							maxLength: LANG_MAX,
-							disabled: !editable,
+							disabled: !editable || langLocked,
 							'aria-label': t('customLanguage'),
 							style: STYLE.control,
 						})
@@ -1864,9 +2500,30 @@ window.__ModuleLoader__.load({
 				enforce: 'enforceHelpEnforce',
 			};
 			const display = rankDisplay(values, catalogIndex);
+			// Teams mode (draft value, consistent with the rest of the page):
+			// gates the ⚠ authorization badges/hint — plain subagent dispatch
+			// names no explicit routes, so drift marks would be noise.
+			const teamsMode = values.teamsMode === true;
+			/** Authorization drift exists when at least one selected pool
+			 *  route is outside the DSH-authorized child models (or the
+			 *  whitelist is readable and explicit selection is disabled
+			 *  while any pool is configured) — drives the section hint.
+			 *  Teams mode only (see above). */
+			const anyUnauthorized =
+				teamsMode &&
+				authorized !== null &&
+				(authorized.enabled === false
+					? poolsSet > 0
+					: POOL_FIELDS.some(({ field }) =>
+							values[field].some(
+								(route) => !authorized.keys.has(routeKey(route)),
+							),
+						));
 
 			// ---- watermark section derived state ----
 			const wmId = `${headingId}-wm`;
+			// ---- teams section ids ----
+			const teamsId = `${headingId}-teams`;
 
 			/** One watermark number input: raw-text overlay over the draft
 			 * value (0 renders as the placeholder for the follow-force row),
@@ -1955,6 +2612,20 @@ window.__ModuleLoader__.load({
 									)
 								: null;
 
+			/** Keys of every route configured across the six pools: the drift
+			 *  badge is pool-scoped, so rank-only modelRank entries (in no
+			 *  pool) never carry it. */
+			const poolRouteKeys = new Set(
+				POOL_FIELDS.flatMap(({ field }) => values[field].map(routeKey)),
+			);
+			/** Pool-scoped drift check for rank rows (same semantics as the
+			 *  PoolCard drift helper, which is not in scope here). Teams mode
+			 *  only, matching the pool cards. */
+			const rankDrift = (route) =>
+				teamsMode === true &&
+				authorized !== null &&
+				(authorized.enabled === false ||
+					!authorized.keys.has(routeKey(route)));
 			/** One ranking row: index, label, tier select, move/remove buttons. */
 			const rankRow = (entry, index) => {
 				const key = routeKey(entry);
@@ -1980,6 +2651,17 @@ window.__ModuleLoader__.load({
 									` · ${t('catalogUnavailable')}`,
 								)
 							: null,
+						poolRouteKeys.has(key) && rankDrift(entry)
+							? h(
+									'span',
+									{
+										style: STYLE.unauthorizedMark,
+										title: t('unauthorizedBadge'),
+										'aria-label': t('unauthorizedBadge'),
+									},
+									'⚠',
+								)
+							: null,
 					),
 					h(
 						'select',
@@ -2069,6 +2751,34 @@ window.__ModuleLoader__.load({
 					h(
 						'div',
 						{ style: STYLE.rows },
+						h(
+							SettingsRow,
+							{
+								key: 'scope',
+								id: scopeId,
+								label: t('langScopeLabel'),
+								help: t('langScopeHelp'),
+								control: h(
+									'select',
+									selectProps(scopeId, values.langScope, (value) =>
+										edit('langScope', value),
+									),
+									h(
+										'option',
+										{ key: 'global', value: 'global' },
+										t('langScopeGlobal'),
+									),
+									h(
+										'option',
+										{ key: 'project', value: 'project' },
+										t('langScopeProject'),
+									),
+								),
+								lines: langLocked
+									? [{ text: t('langProjectNote'), invalid: false }]
+									: [],
+							},
+						),
 						h(
 							SettingsRow,
 							{
@@ -2093,6 +2803,7 @@ window.__ModuleLoader__.load({
 										commentsId,
 										values.langComments,
 										(value) => edit('langComments', value),
+										langLocked,
 									),
 									...languageOptions(t, { withUnset: 'follow' }),
 								),
@@ -2112,6 +2823,7 @@ window.__ModuleLoader__.load({
 										docsId,
 										values.langDocs,
 										(value) => edit('langDocs', value),
+										langLocked,
 									),
 									...languageOptions(t, { withUnset: 'follow' }),
 								),
@@ -2146,6 +2858,13 @@ window.__ModuleLoader__.load({
 						}),
 					),
 					catalogNotice,
+					anyUnauthorized
+						? h(
+								'p',
+								{ key: 'unauthorized', role: 'status', style: STYLE.progress },
+								t('unauthorizedHint'),
+							)
+						: null,
 					h(
 						'div',
 						{ style: STYLE.poolGrid },
@@ -2164,6 +2883,8 @@ window.__ModuleLoader__.load({
 								efforts: values[effortsField],
 								manual: values[manualField],
 								editable,
+								authorized,
+								teamsMode,
 								onToggle: (meta) => {
 									togglePool(field, meta);
 								},
@@ -2333,6 +3054,102 @@ window.__ModuleLoader__.load({
 					),
 					h('p', { style: STYLE.progress }, t('wmCommands')),
 				),
+				h(
+					'section',
+					{
+						'aria-labelledby': teamsId,
+						style: { ...STYLE.section, ...STYLE.sectionDivider },
+					},
+					h(
+						'h3',
+						{ id: teamsId, style: STYLE.heading },
+						t('teamsSectionTitle'),
+					),
+					h(
+						'p',
+						{ style: STYLE.description },
+						t('teamsSectionDescription'),
+					),
+					h(
+						'div',
+						{ style: STYLE.rows },
+						h(SettingsRow, {
+							key: 'teamsMode',
+							id: `${teamsId}-mode`,
+							label: t('teamsModeLabel'),
+							help: t('teamsModeHelp'),
+							control: h('input', {
+								type: 'checkbox',
+								id: `${teamsId}-mode`,
+								checked: values.teamsMode,
+								onChange: () => {
+									edit('teamsMode', !values.teamsMode);
+								},
+								disabled: !editable,
+								style: STYLE.checkbox,
+							}),
+							lines: [],
+						}),
+						h(SettingsRow, {
+							key: 'syncWhitelist',
+							id: `${teamsId}-sync`,
+							label: t('syncWhitelistLabel'),
+							help: t('syncWhitelistHelp'),
+							control: h('input', {
+								type: 'checkbox',
+								id: `${teamsId}-sync`,
+								checked: values.syncWhitelist,
+								onChange: () => {
+									edit('syncWhitelist', !values.syncWhitelist);
+								},
+								disabled: !editable,
+								style: STYLE.checkbox,
+							}),
+							// Status line reads the Host-reported sync state;
+							// visible whenever the (independent) sync switch
+							// is on — the only shape the Host reports for.
+							lines:
+								values.syncWhitelist === true
+									? [
+											whitelistSync == null
+												? {
+														text: t('whitelistSyncPending'),
+														invalid: false,
+													}
+												: whitelistSync.ok === true
+													? {
+															text: t('whitelistSyncOk', {
+																count: whitelistSync.count ?? 0,
+																time:
+																	typeof whitelistSync.at ===
+																		'number' &&
+																	whitelistSync.at > 0
+																		? new Date(
+																				whitelistSync.at,
+																			).toLocaleString()
+																		: '—',
+															}),
+															invalid: false,
+														}
+													: {
+															text: t('whitelistSyncError', {
+																error:
+																	typeof whitelistSync.error ===
+																		'string' &&
+																	whitelistSync.error !== ''
+																		? whitelistSync.error
+																		: 'unknown',
+															}),
+															invalid: true,
+														},
+										]
+									: [],
+						}),
+					),
+					teamsMode
+						? h('p', { style: STYLE.progress }, t('whitelistSyncNote'))
+						: null,
+				),
 				h(
 					'div',
 					{ style: STYLE.footer },
@@ -2398,6 +3215,19 @@ window.__ModuleLoader__.load({
 			apply(ctx) {
 				ctx.effect(() => ctx.locale.register(NS, DICTS));
 				const t = ctx.locale.bind(NS);
+				// 报告当前生效的 UI 语言给 host 半场（决定语言询问指引的
+				// 提问语言；fire-and-forget，失败静默——host 会退回
+				// settings 的 locale.preference，再退回英文）。3 秒后补报
+				// 一次，覆盖 host 路由晚于本页就绪的启动窗口。
+				const reportUiLocale = () =>
+					void api.post('ui-locale', {
+						locale: ctx.locale?.getLocale?.().active ?? '',
+					});
+				reportUiLocale();
+				setTimeout(reportUiLocale, 3000);
+				// The session scope hands the badge the standard kit: the open
+				// session's id and its live projection face (the model line),
+				// plus the sessions service for the un-retained fallback.
 				ctx.slots.inject('conversation.session.header.actions', () =>
 					ctx.slots.register(
 						{
@@ -2405,7 +3235,60 @@ window.__ModuleLoader__.load({
 							id: 'dsh-switchman',
 							order: -9,
 						},
-						() => h(SwitchmanBadge, { locale: ctx.locale, t }),
+						(kit) =>
+							h(SwitchmanBadge, {
+								...kit,
+								locale: ctx.locale,
+								t,
+							}),
+					),
+				);
+				// Home left-sidebar entry + central panel: the same slot pair
+				// the shipped Skills Center row uses. The shell owns the row
+				// button, click-to-switch, active highlight, and collapsed
+				// tooltip. The sidebar id and the main key must match, and
+				// the inject() face becomes the page component's props
+				// ({t, locale} — SwitchmanPanelPage forwards them verbatim).
+				// order 31 sits directly under the Skills Center row
+				// (skill-explorer 30; plugins 0, schedules 10).
+				ctx.slots.inject('sidebar.panellist', () =>
+					ctx.slots.register(
+						{
+							name: 'sidebar.panellist',
+							id: 'dsh-switchman',
+							order: 31,
+							label: () => t('panelLabel'),
+							locale: NS,
+						},
+						SwitchmanPanelIcon,
+					),
+				);
+				ctx.slots.inject('main', () =>
+					ctx.slots.register(
+						{
+							name: 'main',
+							key: 'dsh-switchman',
+							inject: () => ({ t, locale: ctx.locale }),
+						},
+						SwitchmanPanelPage,
+					),
+				);
+				// Composer-adjacent vision entry (conversation.input.dock: the
+				// full-width list ABOVE the composer card): guidance chip while
+				// the current session's model cannot read images, plus reactive
+				// auto-conversion of refused image sends into /vision submits.
+				// The session scope automatically provides
+				// inputActions/useInput/useSession to the registered
+				// component; the wrapper forwards that standard kit through
+				// alongside the closure-bound t.
+				ctx.slots.inject('conversation.input.dock', () =>
+					ctx.slots.register(
+						{
+							name: 'conversation.input.dock',
+							id: 'dsh-switchman-vision-hint',
+							order: 90,
+						},
+						(kit) => h(VisionDockEntry, { ...kit, t }),
 					),
 				);
 				// Settings page: one settings.section entry. The restricted