From bf1235541c755f8890ad58d2d027e1dc9c315e94 Mon Sep 17 00:00:00 2001
From: Shigma <shigma10826@gmail.com>
Date: Wed, 14 Oct 2026 18:19:16 +0800
Subject: [PATCH 01/32] chore(cordis): complete Loader rc.8 and share upstream
 Include patches

---
 .../host/directory-picker-auto/src/index.ts   |   2 +-
 .../preset/agent-preset-registry/src/mount.ts |   4 +-
 .../agent-preset-registry/tests/mount.spec.ts |   2 +-
 scripts/cordis-entry-commit.spec.ts           | 117 ++++++++
 vendor/README.md                              |   8 +-
 vendor/include/README.md                      |   6 +
 vendor/include/src/index.ts                   | 113 +-------
 vendor/include/src/journal.ts                 | 242 ++++++++++++++++
 vendor/include/src/patch.ts                   | 261 ++++++++++++++++++
 vendor/loader/README.md                       |   4 +
 vendor/loader/src/config/entry.ts             |   4 +-
 vendor/loader/src/config/group.ts             |   5 +-
 vendor/loader/src/config/tree.ts              |  45 ++-
 vendor/loader/src/index.ts                    |  37 ++-
 14 files changed, 716 insertions(+), 134 deletions(-)
 create mode 100644 scripts/cordis-entry-commit.spec.ts
 create mode 100644 vendor/include/src/journal.ts
 create mode 100644 vendor/include/src/patch.ts

diff --git a/packages/host/directory-picker-auto/src/index.ts b/packages/host/directory-picker-auto/src/index.ts
index 4d2a6a3e2c..5f324158b4 100644
--- a/packages/host/directory-picker-auto/src/index.ts
+++ b/packages/host/directory-picker-auto/src/index.ts
@@ -76,7 +76,7 @@ export async function apply(ctx: Context): Promise<void> {
     linuxChooser: hasLinuxChooserBinary(process.env.PATH, canExecute),
   })
   await ctx.effect(async () => {
-    // Root-tree create: the Loader root is in-memory (write() is a no-op), so
+    // Root-tree create: the Loader root is in-memory (commit() is a no-op), so
     // the mounted rows can never be persisted back into a config file. The
     // backend lands first: the surface's browser half drives the capability
     // the backend registers.
diff --git a/packages/preset/agent-preset-registry/src/mount.ts b/packages/preset/agent-preset-registry/src/mount.ts
index 23eec09cdf..32c36a5e39 100644
--- a/packages/preset/agent-preset-registry/src/mount.ts
+++ b/packages/preset/agent-preset-registry/src/mount.ts
@@ -1,6 +1,6 @@
 /** Runtime plugin trees shared by Agents selecting one preset revision. */
 import { Context, type Fiber } from '@deepseek-ai/cordis'
-import { EntryTree, type EntryOptions } from '@deepseek-ai/cordis-plugin-loader'
+import { EntryTree, type EntryChange, type EntryOptions } from '@deepseek-ai/cordis-plugin-loader'
 import { prepareProfileEntries } from '@deepseek-ai/dsh-app-boot'
 import type { PresetDefinition } from './definition.ts'
 import { scopeOf, type ScopeKey } from '@deepseek-ai/dsh-scope'
@@ -20,7 +20,7 @@ class PresetTree extends EntryTree {
     }
   }
 
-  override write(): void {}
+  override commit(_change: EntryChange): void {}
 }
 
 /** One live revision shared by Agents and scoped readers. */
diff --git a/packages/preset/agent-preset-registry/tests/mount.spec.ts b/packages/preset/agent-preset-registry/tests/mount.spec.ts
index 51960106a4..3706af4962 100644
--- a/packages/preset/agent-preset-registry/tests/mount.spec.ts
+++ b/packages/preset/agent-preset-registry/tests/mount.spec.ts
@@ -73,7 +73,7 @@ it('does not replace the declaring Loader entry subtree or persist runtime tree
     expect(mountedCompositionRows(mount.tree)[0]!.entryId).toBe('child')
     expect(entry.subtree).toBe(previousTree)
     expect(entry.subgroup).toBe(previousGroup)
-    mount.tree.write()
+    mount.tree.commit({ id: 'missing', group: mount.tree.root })
     entry.subtree = mount.tree
     entry.subgroup = mount.tree.root
     const other = createScope(owner, {})
diff --git a/scripts/cordis-entry-commit.spec.ts b/scripts/cordis-entry-commit.spec.ts
new file mode 100644
index 0000000000..912335fcec
--- /dev/null
+++ b/scripts/cordis-entry-commit.spec.ts
@@ -0,0 +1,117 @@
+/** Tree mutation reports and detached patch inputs across the Loader/Include upgrade. */
+import { Context, FiberState } from '@deepseek-ai/cordis'
+import Loader, { Group, type EntryChange, type EntryOptions } from '@deepseek-ai/cordis-plugin-loader'
+import { applyEntryPatches } from '@deepseek-ai/cordis-plugin-include'
+import { describe, expect, it, onTestFinished, vi } from 'vitest'
+
+async function fixture() {
+  const ctx = new Context()
+  onTestFinished(() => ctx.fiber.dispose())
+  await ctx.plugin(Loader)
+  ctx.loader.builtins.group = Group
+  ctx.loader.builtins.example = () => {}
+  const changes: EntryChange[] = []
+  vi.spyOn(ctx.loader, 'commit').mockImplementation((change) => { changes.push(change) })
+  return { ctx, loader: ctx.loader, changes }
+}
+
+describe('Loader tree mutation reports', () => {
+  it('reports assigned ids and applied options for create, update, move and remove', async () => {
+    const { loader, changes } = await fixture()
+    const id = await loader.create({ name: 'cordis:example', config: { value: 1 } })
+    await loader.await()
+    expect(changes).toHaveLength(1)
+    expect(changes[0]).toEqual({ id, group: loader.root, options: loader.resolve(id).options })
+    expect(id).not.toBe('')
+    const groupId = await loader.create({ name: 'cordis:group', group: true, config: [] })
+    await loader.await()
+    changes.length = 0
+    await loader.update(id, { config: { value: 2 } }, groupId)
+    expect(changes).toHaveLength(1)
+    expect(changes[0]).toMatchObject({ id, from: loader.root, group: loader.resolveGroup(groupId),
+      legacy: { config: { value: 1 } }, options: { config: { value: 2 } } })
+    expect(changes[0]!.options).toBe(loader.resolve(id).options)
+    changes.length = 0
+    await loader.update(id, { config: { value: 3 } })
+    expect(changes).toHaveLength(1)
+    expect(changes[0]!.from).toBeUndefined()
+    changes.length = 0
+    const legacy = loader.resolve(id).options
+    loader.remove(id)
+    await loader.await()
+    expect(changes).toEqual([{ id, group: loader.resolveGroup(groupId), legacy }])
+    expect(legacy.disabled).toBeUndefined()
+  })
+
+  it('reports explicit Fiber saves and self-disposal but ignores child disposal', async () => {
+    const { loader, changes } = await fixture()
+    const id = await loader.create({ name: 'cordis:example', config: { value: 1 } })
+    await loader.await()
+    const fiber = loader.resolve(id).fiber!
+    changes.length = 0
+    await fiber.update({ value: 2 })
+    expect(changes).toHaveLength(1)
+    expect(changes[0]).toMatchObject({ legacy: { config: { value: 1 } }, options: { config: { value: 2 } } })
+    changes.length = 0
+    const child = fiber.ctx.plugin(() => {})
+    await child
+    await child.dispose()
+    expect(changes).toEqual([])
+    await fiber.dispose()
+    expect(changes).toHaveLength(1)
+    expect(changes[0]!.options!.disabled).toBe(true)
+    expect(changes[0]!.legacy!.disabled).toBeUndefined()
+  })
+
+  it('keeps adopted entries and does not report file-driven removal or owner teardown', async () => {
+    const { ctx, loader, changes } = await fixture()
+    await loader.root.update([
+      { id: 'g', name: 'cordis:group', group: true, config: [] },
+      { id: 'x', name: 'cordis:example' },
+    ])
+    await loader.await()
+    const target = loader.resolveGroup('g')
+    const options = loader.resolve('x').options
+    target.data.push(options)
+    await target.create(options)
+    loader.root.remove('x')
+    expect(loader.resolve('x').parent).toBe(target)
+    expect(loader.resolve('x').fiber!.state).toBe(FiberState.ACTIVE)
+    await target.update([])
+    await loader.await()
+    expect(loader.store.x).toBeUndefined()
+    expect(changes).toEqual([])
+    await ctx.fiber.dispose()
+    expect(changes).toEqual([])
+  })
+
+  it('rejects separator-containing ids before changing a tree', async () => {
+    const { loader, changes } = await fixture()
+    const options: EntryOptions = { id: 'a:b', name: 'cordis:example' }
+    await expect(loader.create(options)).rejects.toThrow('entry id must not contain')
+    expect(loader.root.data).toEqual([])
+    expect(changes).toEqual([])
+  })
+})
+
+describe('Include patch data ownership', () => {
+  it('detaches file entries even with no patches', () => {
+    const data: EntryOptions[] = [{ id: 'x', name: 'example', config: { value: 1 } }]
+    const result = applyEntryPatches(data, undefined, vi.fn())
+    result[0]!.disabled = true
+    ;(result[0]!.config as { value: number }).value = 2
+    expect(data).toEqual([{ id: 'x', name: 'example', config: { value: 1 } }])
+  })
+
+  it('clones inserted groups and lets later patches address their descendants', () => {
+    const insert: EntryOptions[] = [{ id: 'g', name: 'group', group: true,
+      config: [{ id: 'x', name: 'example', config: { value: 1 } }] }]
+    const warn = vi.fn()
+    const result = applyEntryPatches([], [{ insert }, { id: 'x', disabled: true }], warn)
+    const children = result[0]!.config as Array<{ disabled?: boolean; config: { value: number } }>
+    expect(children[0]!.disabled).toBe(true)
+    children[0]!.config.value = 2
+    expect(insert[0]!.config).toEqual([{ id: 'x', name: 'example', config: { value: 1 } }])
+    expect(warn).not.toHaveBeenCalled()
+  })
+})
diff --git a/vendor/README.md b/vendor/README.md
index 9e38bee93f..064860f3cf 100644
--- a/vendor/README.md
+++ b/vendor/README.md
@@ -17,7 +17,7 @@ Upstream workspace: `cordis-workspace` (local checkout: `~/repos/cordis-workspac
 | `cosmokit/` | `@deepseek-ai/cosmokit` | `cosmokit` | 1.8.1 | https://github.com/deepseek-harness/cosmokit | `16f6fc058ade66e8ac5da0033d35a8d0f279f544` |
 | `schemastery/` | `@deepseek-ai/schemastery` | `schemastery` | 3.18.0 | https://github.com/deepseek-harness/schemastery (`packages/core`) | `e67cee00ad725bd1534aee930a979ea3eec6f698` |
 | `cordis/` | `@deepseek-ai/cordis` | `cordis` | 4.0.0-rc.11 | https://github.com/cordiverse/cordis (`packages/core`) | `0b96d9fd517b998e44e2209560c9e5f0671ce933` |
-| `loader/` | `@deepseek-ai/cordis-plugin-loader` | `@cordisjs/plugin-loader` | 1.0.0-rc.5 | https://github.com/cordiverse/cordis (`packages/loader`) | `56b3d4f725681cf4556c1a8695a709cc3b6eed74` |
+| `loader/` | `@deepseek-ai/cordis-plugin-loader` | `@cordisjs/plugin-loader` | 1.0.0-rc.8 | https://github.com/cordiverse/cordis (`packages/loader`) | `0b96d9fd517b998e44e2209560c9e5f0671ce933` |
 | `include/` | `@deepseek-ai/cordis-plugin-include` | `@cordisjs/plugin-include` | 1.0.4 | https://github.com/deepseek-harness/cordis (`packages/include`) | `abb0a307cb1d3b0947f455d590cf5ba922d4caa4` |
 | `group/` | `@deepseek-ai/cordis-plugin-group` | `@cordisjs/plugin-group` | 1.0.0 | https://github.com/deepseek-harness/cordis (`packages/group`) | `abb0a307cb1d3b0947f455d590cf5ba922d4caa4` |
 | `timer/` | `@deepseek-ai/cordis-plugin-timer` | `@cordisjs/plugin-timer` | 1.1.2 | https://github.com/deepseek-harness/cordis (`packages/timer`) | `abb0a307cb1d3b0947f455d590cf5ba922d4caa4` |
@@ -42,14 +42,14 @@ Keep this log exhaustive — every divergence from upstream must be listed.
 8. **`include/src/index.ts` resilient file refresh and patch reapplication**: [#514](https://github.com/deepseek-harness/deepseek-harness/pull/514) validates a top-level entry array before caching parsed content, logs refresh failures, reapplies patches after file or Include-config edits, updates the Include config when it vetoes a restart, and uses `initial` only after `ENOENT`. These parse protections retain the running tree after an invalid file; plugin activation failures can leave a partially applied tree. Loader entry/group/tree mutations follow the pinned eager, non-transactional implementation and do not restore previous plugins or options. Covered by `packages/boot/app-boot/tests/{config-reload,user-patches}.spec.ts`.
 9. **`hmr/src/index.ts` module-watcher readiness and native paths**: realpath the existing watch base, classify framework modules and attach listeners before reporting readiness, and compare config paths using both canonical and configured spellings. This preserves Node module-cache identity across Windows short-name paths and filesystem aliases. The main watcher uses `ignoreInitial: true` so startup reads do not trigger another refresh; exact profile patch watching is owned by `packages/boot/hmr/src/watch-config.ts`. Covered by `packages/boot/hmr/tests/watch-config.spec.ts`.
 10. **Vendored Node-compatible TypeScript**: marked erased imports explicitly across `cordis`, `loader`, `include`, `hmr`, and `schemastery` so Node's native TypeScript transform does not request types as runtime exports. Schemastery's source uses an ESM default export and its package declares `type: module`. Conditional exports select `.mjs` for import and `.cjs` for require; without them, concurrent imports under module-hook hosts reach the CJS entry and can race its require of ESM Cosmokit (`ERR_REQUIRE_ESM_RACE_CONDITION`).
-11. **`include/src/index.ts` patch-semantics export**: extracted the private `applyPatches` body into the exported pure function `applyEntryPatches(data, patches, warn)` (the method delegates to it) and exported the `!!js` YAML dialect as `entryListSchema`, so `dsh --dump-config` composes and prints exactly what the include would mount without booting a tree. The entry list is deep-cloned when patches are present; without patches, the returned array retains the entry objects. Public patch and Include fields carry JSDoc for config tooling. Behavior-preserving for mounting; the extraction exists because config tooling must never reimplement (and drift from) the patch algorithm. `applyEntryPatches` also indexes each `insert`ed entry as it is added, so a later patch in the same list can configure or disable a row an earlier patch inserted; upstream built the id index once before the patch loop, leaving inserted rows silently unpatchable. That matters because `dsh` composes an empty profile root with each bundle's patch layer, the profile's and the home-level `cordis.patch.yml`, and any `--patch` overlays as sibling patch lists at one include level — patches never cross an include boundary, so surface-only rows would otherwise be unreachable from user config. Covered by `packages/boot/app-boot/tests/config-reload.spec.ts`.
+11. **Include patch and YAML exports**: `applyEntryPatches` aliases rc.11’s pure `patch.ts` implementation, and `entryListSchema` exposes the `!!js` YAML dialect for config dumps. Upstream now clones file and inserted entries and indexes inserted rows for later patches, retiring the duplicate algorithm and insert-index fix. Include imports `patch.ts` and its `journal.ts` helpers from the rc.11 source while its runtime still uses the old writer; runtime journal adoption belongs to plan step 4f.
 12. **Loader activation observer**: the rc.11 `Entry.init()` observer handles both activation outcomes, retiring the local observer workaround. Fiber errors remain available to explicit consumer audits.
 13. **`include/src/index.ts` `writeTask` type**: widened the optional `writeTask?: NodeJS.Timeout` property to `NodeJS.Timeout | undefined` — the debounced writer assigns `undefined` on flush, which `exactOptionalPropertyTypes` rejects on a plain optional. Type-only; no behavior change.
 14. **`include/src/index.ts` durable debounced writes**: serialized and tracked config-file writes, retried transient `EACCES`/`EBUSY`/`EPERM` rename failures with a bounded backoff, observed asynchronous timer rejections, and drained writes before and after child removal during Include teardown. The first drain preserves an existing terminal write failure even if child removal schedules a later write. Missing-file initialization awaits the write and forces a fresh parse before mounting the initial entries. Windows can briefly retain a destination handle after a Loader child disposes; the upstream fire-and-forget rename escaped as an unhandled rejection and could lose the persisted `disabled` state. A terminal failure is logged by the asynchronous writer and remains on the queue so `Include.stop()` rethrows it instead of silently declaring persistence complete; Cordis's ordinary fiber teardown retains its separate error-containment contract. Covered by `packages/host/directory-picker-auto/tests/loader-composition.spec.ts` with injected transient and terminal rename failures.
 15. **Configuration access across Core, Loader, Include and HMR**: rc.11 Core owns raw `Fiber.config`, `internal/config(fiber, next)`, `internal/commit` and awaited `internal/update(config, next)`. Root-fiber candidate resolution remains available without a plugin schema. Local `rawConfig`, `resolveConfig(candidate)` and `effectiveConfig` accessors retain the DSH consumer API. Fiber caches the object passed to activation or a successful update that keeps the instance; candidate resolution is pure, failed or superseded updates cannot replace the cache, and volatile updates retain references. Loader resolves only entry roots and excludes Group/Include tree carriers, so nested `!!js` expressions wait for their own injections. Include retains its tree-carrier marker, writer and patches, and HMR transfers raw config through the accessors. Covered by `scripts/cordis-config-access.spec.ts`, `scripts/cordis-core-lifecycle.spec.ts` and the boot/HMR suites.
 16. **`cordis/package.json` publishes `src`**: added `src` to the `files` list, joining the other eight vendored packages. Cordis declares `"./src/*": "./src/*"` in its exports, so a tarball without `src` publishes an export map pointing at absent files; the release change judgement also reads `files` to decide whether a diff reaches the payload, and a package whose only published paths are build output has no tracked path to match.
 17. **`@deepseek-ai` rescope**: every vendored manifest `name`, every internal dependency entry among the vendored set, and every module specifier that reaches them use the scoped names in the manifest table's `npm name` column. Directory names, version numbers, and dependency ranges are unchanged, and no upstream runtime identifier is renamed — `Symbol.for('schemastery')` and Schemastery's `vendor:` metadata field keep their upstream values. Re-apply with `pnpm run rescope-vendor --apply` after a sync; the table's two name columns are the mapping, restated for consumers in [docs/rescope.md](../docs/rescope.md).
-18. **Entry `disabled` interpolation in `loader/src/config/entry.ts`**: a `disabled: !!js` expression evaluates against the loader context at every mount decision; the raw node stays in the options, so write-back keeps the `!!js` form. `disabled` is the only interpolated metadata field. Covered by `packages/boot/app-boot/tests/user-patches.spec.ts` and `apps/cli/tests/windows-shell.spec.ts`.
+18. **Entry `disabled` interpolation**: the rc.11 Loader implementation evaluates `!!js` expressions and preserves their raw nodes, retiring the local interpolation patch. `disabled` remains the only interpolated metadata field.
 19. **Loader resolver slice from Cordis v4.0.0-rc.11**: `loader/src/resolve.ts` and the no-internals branch of `EntryTree.import()` use upstream project-relative ESM resolution, preserving import conditions, package imports and self-references. A helper under the nearest package scope supplies `import.meta.resolve`; absent scopes and helper-write failures retain the native import fallback. `loader/src/internal.ts` matches upstream runtime API detection, retiring the local Node-major workaround. Node builtin imports use default namespaces so the Web shell can bundle Loader with its existing browser externalization; the shell supplies its own module loader. The local resolver normalizes trailing directory separators before caching a scope, so concurrent requests from a root config and a nested config share one helper write. The Loader manifest remains at 1.0.0-rc.5 until the remaining package changes are reconciled. Covered by `scripts/cordis-loader-resolve.spec.ts` and the Node compatibility matrix.
 
 20. **Loader fiber identity**: rc.11 Core canonicalizes `update()` and `restart()` through `ctx.fiber`, retiring the local unwrapping workaround. `Entry.fiber` retains the registry wrapper; volatile commits explicitly use the canonical fiber. HMR retains its existing replacement algorithm.
@@ -62,7 +62,7 @@ Keep this log exhaustive — every divergence from upstream must be listed.
 
 24. **`timer/locale/{en,zh}.json` display metadata**: local English and Chinese titles and descriptions for the Settings plugin inventory. `timer/package.json` exports and publishes these locale resources.
 
-25. **Loader lifecycle slice from Cordis v4.0.0-rc.11**: entry updates await context patches, Fiber updates and disabled-entry disposal; isolation uses `Impl.ctx` and maintains `Impl.isolate` during transfers. Group and Include return their child-update work. The existing writer receives `internal/commit` with schema-bound simplification. A local dependency refresh before a combined context/config update prevents activation against stale isolation bindings. Loader, Include and HMR retain their manifest baselines until the remaining package changes are reconciled. Failed fibers require an explicit update after correcting their input or dependencies. Core retains the effect hardening in item 6; rc.11 owns dependency teardown ordering and superseded-activation handling.
+25. **Loader/Include lifecycle adaptations**: Loader now uses the complete rc.11 baseline with `EntryChange` reports through `commit(change)`. The retained local dependency refresh before a combined context/config update prevents activation against stale isolation bindings; disabled-entry updates await disposal. Include keeps its existing baseline and forwards commits to the old writer until plan step 4f adopts the journal runtime. In-memory trees use no-op commits. Failed fibers require an explicit update after correcting their input or dependencies. Core retains item 6’s effect hardening; rc.11 owns dependency teardown ordering and superseded-activation handling.
 
 ## Sync procedure
 
diff --git a/vendor/include/README.md b/vendor/include/README.md
index de0ecdc51f..d669bf6736 100644
--- a/vendor/include/README.md
+++ b/vendor/include/README.md
@@ -41,3 +41,9 @@ Example `cordis.yml`:
 | `enableLogs` | Enables loader apply, reload, and unload logs. |
 
 Patches can insert entries or override fields on entries with a matching `id`.
+
+## Patch composition and persistence
+
+`applyEntryPatches(data, patches, warn)` uses the same upstream algorithm as mounting. It clones file entries even without patches and clones inserted entry lists before indexing them, so later patches can address inserted rows without mutating those input lists. `entryListSchema` exposes Include’s YAML dialect to configuration tools. Nested entry expressions remain literal until their owning Loader entry evaluates them.
+
+Tree mutations arrive through `commit(change)` and schedule the existing debounced writer. The imported journal helpers support patch ownership; runtime file reconciliation still uses `refresh()` and the existing write queue.
diff --git a/vendor/include/src/index.ts b/vendor/include/src/index.ts
index 075252dfff..dd6a86fa21 100644
--- a/vendor/include/src/index.ts
+++ b/vendor/include/src/index.ts
@@ -1,10 +1,11 @@
-import { EntryGroup, EntryTree, isJsExpr, type EntryOptions } from '@deepseek-ai/cordis-plugin-loader'
+import { EntryGroup, EntryTree, isJsExpr, type EntryChange, type EntryOptions } from '@deepseek-ai/cordis-plugin-loader'
 import { Context, Service } from '@deepseek-ai/cordis'
 import { extname } from 'node:path'
 import { access, constants, readFile, rename, writeFile } from 'node:fs/promises'
 import { setTimeout as delay } from 'node:timers/promises'
 import { fileURLToPath, pathToFileURL } from 'node:url'
 import * as yaml from 'js-yaml'
+import { applyPatches, type PatchOptions } from './patch.ts'
 
 const JsExpr = new yaml.Type('tag:yaml.org,2002:js', {
   kind: 'scalar',
@@ -40,105 +41,10 @@ function retryableWriteError(error: unknown): boolean {
   return code === 'EACCES' || code === 'EBUSY' || code === 'EPERM'
 }
 
-/**
- * Apply patch lists to an entry list — THE patch semantics of this include,
- * shared by mounting (`applyPatches`) and offline config tooling
- * (`dsh --dump-config`) so a dump can never drift from what boots. The input
- * is never mutated: patching shared entry objects would bake earlier patch
- * values into the cached parse, so repeated application (config hot-reloads)
- * could never revert a removed or changed patch. Inserted entries are indexed
- * as they are added, so a later patch in the same list can target a row an
- * earlier patch inserted. A patch that matches nothing warns and is skipped.
- * @param data - the parsed entry list (JSON-safe plain data).
- * @param patches - the patch list to apply, in order.
- * @param warn - sink for skipped-patch diagnostics (printf-style, `%C` = code).
- * @returns a detached entry list with every applicable patch applied.
- */
-export function applyEntryPatches(
-  data: EntryOptions[],
-  patches: PatchOptions[] | undefined,
-  warn: (message: string, ...args: any[]) => void,
-): EntryOptions[] {
-  if (!patches?.length) return [...data]
-  data = structuredClone(data)
-
-  const entryMap = new Map<string, EntryOptions>()
-  const buildMap = (entries: EntryOptions[]) => {
-    for (const entry of entries) {
-      if (entry.id) entryMap.set(entry.id, entry)
-      if (entry.group && Array.isArray(entry.config)) {
-        buildMap(entry.config)
-      }
-    }
-  }
-  buildMap(data)
-
-  for (const patch of patches) {
-    const { id, insert, name, ...overrides } = patch
-
-    if (insert) {
-      if (id) {
-        const target = entryMap.get(id)
-        if (!target) {
-          warn('patch insert: entry %C not found', id)
-          continue
-        }
-        if (!target.group) {
-          warn('patch insert: entry %C is not a group', id)
-          continue
-        }
-        if (!Array.isArray(target.config)) target.config = []
-        target.config.push(...insert)
-      } else {
-        data.push(...insert)
-      }
-      // Index what this patch added so a LATER patch in the same list can
-      // target it. Patch lists compose one layer per source (each bundle
-      // layer, then the user's, then `--patch` overlays), and a layer must be
-      // able to configure or disable a row an earlier layer inserted; without
-      // this, inserted rows were silently unpatchable.
-      buildMap(insert)
-      continue
-    }
-
-    if (!id) {
-      warn('patch: id is required for non-insert patches')
-      continue
-    }
-
-    const target = entryMap.get(id)
-    if (!target) {
-      warn('patch: entry %C not found', id)
-      continue
-    }
-
-    if (name && name !== target.name) {
-      warn('patch: name mismatch for %C (expected %C, got %C), skipping', id, target.name, name)
-      continue
-    }
-
-    for (const [key, value] of Object.entries(overrides)) {
-      if (key === 'id') continue
-      target[key] = value
-    }
-  }
-
-  return data
-}
-
-/** Runtime patch applied to entries loaded from an included config file. */
-export interface PatchOptions {
-  id?: string
-  insert?: EntryOptions[]
-  name?: string
-  config?: any
-  group?: boolean | null
-  disabled?: boolean | null
-  inject?: any
-  intercept?: any
-  isolate?: any
-  [key: string]: any
-}
+/** Apply the upstream patch algorithm to detached entry data for mounting or config dumps. */
+export { applyPatches as applyEntryPatches } from './patch.ts'
+/** Serialized entry patch options. */
+export type { PatchOptions } from './patch.ts'
 
 /** Config namespace for the file-backed include loader. */
 export namespace Include {
@@ -233,7 +139,7 @@ export class Include extends EntryTree {
   }
 
   private applyPatches(data: EntryOptions[], patches = this.config.patches): EntryOptions[] {
-    return applyEntryPatches(data, patches, (message, ...args) => {
+    return applyPatches(data, patches, (message, ...args) => {
       this.ctx.root.logger?.('loader').warn(message, ...args)
     })
   }
@@ -329,6 +235,11 @@ export class Include extends EntryTree {
     return run
   }
 
+  /** Forward tree mutations to the debounced writer until journal adoption. */
+  commit(_change: EntryChange) {
+    this.write()
+  }
+
   /** Schedule a write of the current root entry data. */
   write() {
     this.context.emit('loader/config-update')
diff --git a/vendor/include/src/journal.ts b/vendor/include/src/journal.ts
new file mode 100644
index 0000000000..7b52685ce9
--- /dev/null
+++ b/vendor/include/src/journal.ts
@@ -0,0 +1,242 @@
+import type { EntryChange, EntryOptions } from '@deepseek-ai/cordis-plugin-loader'
+import { deepEqual, type Dict, omit } from '@deepseek-ai/cosmokit'
+
+/** One tree-side mutation that has not reached the file yet, keyed by entry id. */
+export type JournalRecord = JournalRecord.Remove | JournalRecord.Upsert
+
+export namespace JournalRecord {
+  export interface Remove {
+    kind: 'remove'
+  }
+
+  export interface Upsert {
+    kind: 'upsert'
+    /** The entry did not exist when the tree first reported it. */
+    created: boolean
+    /**
+     * The group the tree placed the entry in (`null` for the root), or
+     * `undefined` when the tree did not relocate it.
+     */
+    parent: string | null | undefined
+    /** Index within `parent`; only meaningful alongside a `parent`. */
+    position: number
+    /**
+     * Per-key delta relative to the options the entry had when the change
+     * was reported; `undefined` deletes a key. Collected at report time: the
+     * live tree is reconciled asynchronously and may lag behind the file.
+     */
+    changes: Dict
+  }
+}
+
+export type Journal = Map<string, JournalRecord>
+
+export function diffOptions(legacy: EntryOptions, options: EntryOptions) {
+  const changes: Dict = {}
+  for (const key of new Set([...Object.keys(legacy), ...Object.keys(options)])) {
+    if (key === 'id') continue
+    if (deepEqual(legacy[key], options[key])) continue
+    changes[key] = options[key]
+  }
+  return changes
+}
+
+/** Fold a later record into an earlier one for the same entry. */
+export function mergeRecords(older: JournalRecord | undefined, newer: JournalRecord): JournalRecord | undefined {
+  if (!older) return newer
+  if (newer.kind === 'remove') {
+    // an entry created and removed before ever being written leaves no trace
+    return older.kind === 'upsert' && older.created ? undefined : newer
+  }
+  if (older.kind === 'remove') {
+    return { ...newer, created: false }
+  }
+  const relocated = newer.parent !== undefined
+  return {
+    kind: 'upsert',
+    created: older.created,
+    parent: relocated ? newer.parent : older.parent,
+    position: relocated ? newer.position : older.position,
+    changes: { ...older.changes, ...newer.changes },
+  }
+}
+
+export function merge(journal: Journal, id: string, record: JournalRecord) {
+  const merged = mergeRecords(journal.get(id), record)
+  if (merged) {
+    journal.set(id, merged)
+  } else {
+    journal.delete(id)
+  }
+}
+
+export function record(journal: Journal, change: EntryChange, parent: string | null) {
+  const { id, options, legacy } = change
+  if (!options) {
+    return merge(journal, id, { kind: 'remove' })
+  }
+  const position = change.group.data.indexOf(options)
+  if (!legacy) {
+    return merge(journal, id, { kind: 'upsert', created: true, parent, position, changes: omit(options, ['id']) })
+  }
+  merge(journal, id, {
+    kind: 'upsert',
+    created: false,
+    parent: change.from ? parent : undefined,
+    position,
+    changes: diffOptions(legacy, options),
+  })
+}
+
+export interface FlatEntry {
+  parent: string | null
+  position: number
+  options: EntryOptions
+  list: EntryOptions[]
+}
+
+/** Index every entry (including nested group members) by id. */
+export function flatten(data: EntryOptions[], parent: string | null = null, result = new Map<string, FlatEntry>()) {
+  data.forEach((options, position) => {
+    if (options.id) result.set(options.id, { parent, position, options, list: data })
+    if (options.group && Array.isArray(options.config)) {
+      flatten(options.config, options.id ?? null, result)
+    }
+  })
+  return result
+}
+
+export function applyChanges(options: EntryOptions, changes: Dict, filter?: (key: string) => boolean) {
+  for (const [key, value] of Object.entries(changes)) {
+    if (filter && !filter(key)) continue
+    if (value === undefined) {
+      delete options[key]
+    } else {
+      options[key] = value
+    }
+  }
+}
+
+export function detach(data: EntryOptions[], id: string) {
+  const flat = flatten(data).get(id)
+  if (!flat) return
+  flat.list.splice(flat.list.indexOf(flat.options), 1)
+  return flat.options
+}
+
+/**
+ * Insert `options` under `parent` (a group id, or `null` for the root) at
+ * `position`, clamped to the group's length. Returns false when the parent
+ * group does not exist.
+ */
+export function place(data: EntryOptions[], options: EntryOptions, parent: string | null, position: number) {
+  let list = data
+  if (parent !== null) {
+    const group = flatten(data).get(parent)
+    if (!group?.options.group) return false
+    list = group.options.config ??= []
+  }
+  list.splice(Math.min(position, list.length), 0, options)
+  return true
+}
+
+/**
+ * Overlay a journal onto `data` in place. `filter(id, key)` restricts which
+ * changes apply; `key` is `null` when asking about the entry as a whole
+ * (creation, removal, relocation).
+ */
+export function applyJournal(
+  data: EntryOptions[],
+  journal: Journal,
+  filter: (id: string, key: string | null) => boolean = () => true,
+  warn: (format: string, ...args: any[]) => void = () => {},
+) {
+  for (const [id, record] of journal) {
+    if (!filter(id, null)) continue
+    if (record.kind === 'remove') {
+      detach(data, id)
+      continue
+    }
+    const flat = flatten(data).get(id)
+    if (!flat) {
+      const options = { id } as EntryOptions
+      applyChanges(options, record.changes, key => filter(id, key))
+      const parent = record.parent ?? null
+      if (!place(data, options, parent, record.position)) {
+        warn('cannot place entry %C: group %C not found', id, parent)
+      }
+      continue
+    }
+    applyChanges(flat.options, record.changes, key => filter(id, key))
+    if (record.parent !== undefined && flat.parent !== record.parent) {
+      detach(data, id)
+      if (!place(data, flat.options, record.parent, record.position)) {
+        warn('cannot move entry %C: group %C not found', id, record.parent)
+        place(data, flat.options, flat.parent, flat.position)
+      }
+    }
+  }
+  return data
+}
+
+export interface Conflict {
+  id: string
+  reason: string
+}
+
+/**
+ * Three-way reconciliation of a journal against a new file state. The file
+ * wins every conflict: conflicting keys are dropped from the journal so that
+ * the tree follows the file, and each drop is reported.
+ *
+ * `fileOwned(id, key)` scopes the check to what the file can actually express
+ * (patch-owned keys and patch-inserted entries live elsewhere).
+ */
+export function reconcile(
+  journal: Journal,
+  base: Map<string, FlatEntry>,
+  theirs: Map<string, FlatEntry>,
+  fileOwned: (id: string, key: string | null) => boolean,
+) {
+  const conflicts: Conflict[] = []
+  for (const [id, record] of journal) {
+    if (!fileOwned(id, null)) continue
+    const b = base.get(id)
+    const t = theirs.get(id)
+    if (record.kind === 'remove') {
+      if (!t) {
+        journal.delete(id)
+      } else if (!b || !deepEqual(t.options, b.options)) {
+        conflicts.push({ id, reason: b ? 'modified in file, removed at runtime' : 'added in file, removed at runtime' })
+        journal.delete(id)
+      }
+      continue
+    }
+    if (!t) {
+      if (b) {
+        conflicts.push({ id, reason: 'removed in file, modified at runtime' })
+        journal.delete(id)
+      }
+      // else: created at runtime, nothing in the file to conflict with
+      continue
+    }
+    if (record.created) record.created = false
+    for (const key of Object.keys(record.changes)) {
+      if (!fileOwned(id, key)) continue
+      const bv = b?.options[key]
+      const tv = t.options[key]
+      if (deepEqual(bv, tv) || deepEqual(tv, record.changes[key])) continue
+      conflicts.push({ id, reason: `key "${key}" modified both in file and at runtime` })
+      delete record.changes[key]
+    }
+    if (record.parent !== undefined && b && t.parent !== b.parent && t.parent !== record.parent) {
+      conflicts.push({ id, reason: 'moved both in file and at runtime' })
+      record.parent = undefined
+    }
+    const moved = record.parent !== undefined && record.parent !== t.parent
+    if (!Object.keys(record.changes).length && !moved) {
+      journal.delete(id)
+    }
+  }
+  return conflicts
+}
diff --git a/vendor/include/src/patch.ts b/vendor/include/src/patch.ts
new file mode 100644
index 0000000000..45a4700bfe
--- /dev/null
+++ b/vendor/include/src/patch.ts
@@ -0,0 +1,261 @@
+import type { EntryOptions } from '@deepseek-ai/cordis-plugin-loader'
+import { type Dict, omit } from '@deepseek-ai/cosmokit'
+import { applyChanges, detach, flatten, type Journal, place } from './journal.ts'
+
+export interface PatchOptions {
+  id?: string
+  insert?: EntryOptions[]
+  name?: string
+  config?: any
+  group?: boolean | null
+  disabled?: boolean | null
+  inject?: any
+  intercept?: any
+  isolate?: any
+  [key: string]: any
+}
+
+export type Warn = (format: string, ...args: any[]) => void
+
+function randomId(used: (id: string) => boolean) {
+  let id: string
+  do {
+    id = Math.random().toString(16).slice(2, 10)
+  } while (used(id))
+  return id
+}
+
+/** Give every entry (nested groups included) an id, in place. */
+export function ensureIds(entries: EntryOptions[], used: (id: string) => boolean) {
+  for (const entry of entries) {
+    if (!entry.id) entry.id = randomId(used)
+    if (entry.group && Array.isArray(entry.config)) ensureIds(entry.config, used)
+  }
+}
+
+/** Runtime changes are routed back to an inserted entry by its id, so every insert needs one. */
+export function ensureInsertIds(patches: PatchOptions[] | undefined, used: (id: string) => boolean) {
+  for (const patch of patches ?? []) {
+    if (patch.insert) ensureIds(patch.insert, used)
+  }
+}
+
+/**
+ * Overlay `patches` onto a fresh clone of `data`. Inserted entries are cloned
+ * too, so the tree owns every object it mounts.
+ */
+export function applyPatches(data: EntryOptions[], patches: PatchOptions[] | undefined, warn: Warn): EntryOptions[] {
+  data = structuredClone(data)
+  if (!patches?.length) return data
+
+  const entryMap = new Map<string, EntryOptions>()
+  const buildMap = (entries: EntryOptions[]) => {
+    for (const entry of entries) {
+      if (entry.id) entryMap.set(entry.id, entry)
+      if (entry.group && Array.isArray(entry.config)) {
+        buildMap(entry.config)
+      }
+    }
+  }
+  buildMap(data)
+
+  for (const patch of patches) {
+    const { id, insert, name, ...overrides } = patch
+
+    if (insert) {
+      const clone = structuredClone(insert)
+      if (id) {
+        const target = entryMap.get(id)
+        if (!target) {
+          warn('patch insert: entry %C not found', id)
+          continue
+        }
+        if (!target.group) {
+          warn('patch insert: entry %C is not a group', id)
+          continue
+        }
+        if (!Array.isArray(target.config)) target.config = []
+        target.config.push(...clone)
+      } else {
+        data.push(...clone)
+      }
+      buildMap(clone)
+      continue
+    }
+
+    if (!id) {
+      warn('patch: id is required for non-insert patches')
+      continue
+    }
+
+    const target = entryMap.get(id)
+    if (!target) {
+      warn('patch: entry %C not found', id)
+      continue
+    }
+
+    if (name && name !== target.name) {
+      warn('patch: name mismatch for %C (expected %C, got %C), skipping', id, target.name, name)
+      continue
+    }
+
+    for (const [key, value] of Object.entries(overrides)) {
+      if (key === 'id') continue
+      target[key] = value
+    }
+  }
+
+  return data
+}
+
+/**
+ * Who owns an entry, or one key of it, in the patched tree: the file, a patch
+ * that overrides that key (the last one wins), or the patch that inserted the
+ * whole entry.
+ */
+export type EntryOwner = EntryOwner.File | EntryOwner.Patch | EntryOwner.Insert
+
+export namespace EntryOwner {
+  export interface File {
+    type: 'file'
+  }
+
+  export interface Patch {
+    type: 'patch'
+    /** Index into the patch list. */
+    index: number
+  }
+
+  export interface Insert {
+    type: 'insert'
+    /** Index into the patch list. */
+    index: number
+    /** The insert list (or nested group config) holding the entry. */
+    list: EntryOptions[]
+    options: EntryOptions
+    /** The group the entry is inserted into (`null` for the root). */
+    parent: string | null
+  }
+}
+
+export class PatchIndex {
+  private keys = new Map<string, Map<string, number>>()
+  private inserts = new Map<string, EntryOwner.Insert>()
+
+  constructor(public patches: PatchOptions[]) {
+    patches.forEach((patch, index) => {
+      const { id, insert } = patch
+      if (insert) {
+        const walk = (list: EntryOptions[], parent: string | null) => {
+          for (const options of list) {
+            this.inserts.set(options.id, { type: 'insert', index, list, options, parent })
+            if (options.group && Array.isArray(options.config)) walk(options.config, options.id)
+          }
+        }
+        walk(insert, id ?? null)
+        return
+      }
+      if (!id) return
+      const keys = this.keys.get(id) ?? new Map<string, number>()
+      for (const key of Object.keys(omit(patch, ['id', 'insert', 'name']))) {
+        keys.set(key, index)
+      }
+      this.keys.set(id, keys)
+    })
+  }
+
+  /** Owner of the entry as a whole. */
+  entry(id: string | null): EntryOwner {
+    if (id === null) return { type: 'file' }
+    return this.inserts.get(id) ?? { type: 'file' }
+  }
+
+  /** Owner of one key of an entry. */
+  key(id: string, key: string): EntryOwner {
+    const insert = this.inserts.get(id)
+    if (insert) return insert
+    const index = this.keys.get(id)?.get(key)
+    return index === undefined ? { type: 'file' } : { type: 'patch', index }
+  }
+
+  fileOwned(id: string, key: string | null) {
+    return (key === null ? this.entry(id) : this.key(id, key)).type === 'file'
+  }
+}
+
+/**
+ * Route a journal to its owners: file-owned changes are applied to `data`,
+ * patch-owned ones to `patches`. Both are mutated in place, so pass clones.
+ * Returns whether any patch changed.
+ */
+export function routeJournal(journal: Journal, data: EntryOptions[], patches: PatchOptions[], warn: Warn) {
+  const index = new PatchIndex(patches)
+  let patched = false
+
+  const insertList = (owner: EntryOwner.Insert) => owner.options.config ??= []
+
+  const placeAt = (options: EntryOptions, parent: string | null, position: number) => {
+    const owner = index.entry(parent)
+    if (owner.type === 'insert') {
+      const list = insertList(owner)
+      list.splice(Math.min(position, list.length), 0, options)
+      patched = true
+    } else if (!place(data, options, parent, position)) {
+      warn('cannot place entry %C: group %C not found', options.id, parent)
+    }
+  }
+
+  for (const [id, record] of journal) {
+    const owner = index.entry(id)
+    if (record.kind === 'remove') {
+      if (owner.type === 'insert') {
+        owner.list.splice(owner.list.indexOf(owner.options), 1)
+        patched = true
+      } else {
+        detach(data, id)
+      }
+      continue
+    }
+
+    const current = owner.type === 'insert' ? owner : flatten(data).get(id)
+    if (!current) {
+      const options = { id } as EntryOptions
+      applyChanges(options, record.changes)
+      placeAt(options, record.parent ?? null, record.position)
+      continue
+    }
+
+    if (record.parent !== undefined && current.parent !== record.parent) {
+      // moving across owners: carry the full options over
+      if (owner.type === 'insert') {
+        owner.list.splice(owner.list.indexOf(owner.options), 1)
+        patched = true
+      } else {
+        detach(data, id)
+      }
+      applyChanges(current.options, record.changes)
+      placeAt(current.options, record.parent, record.position)
+      continue
+    }
+
+    if (owner.type === 'insert') {
+      applyChanges(current.options, record.changes)
+      patched = true
+      continue
+    }
+
+    const patchChanges: Dict<Dict> = {}
+    applyChanges(current.options, record.changes, (key) => {
+      const keyOwner = index.key(id, key)
+      if (keyOwner.type !== 'patch') return true
+      ;(patchChanges[keyOwner.index] ??= {})[key] = record.changes[key]
+      return false
+    })
+    for (const [i, changes] of Object.entries(patchChanges)) {
+      applyChanges(patches[i] as any, changes)
+      patched = true
+    }
+  }
+
+  return patched
+}
diff --git a/vendor/loader/README.md b/vendor/loader/README.md
index a5e795e372..d67385bb81 100644
--- a/vendor/loader/README.md
+++ b/vendor/loader/README.md
@@ -59,3 +59,7 @@ Without Node module internals, Loader resolves bare specifiers, package imports
 ## Update completion
 
 Entry updates await `loader/patch-context`, the Fiber update waterfall and disabled-entry disposal. Combined context/config changes refresh required bindings before restarting. Group and Include updates expose completion of their child updates; file persistence still follows Include’s debounced writer.
+
+## Tree mutation reports
+
+`EntryTree.commit(change)` receives each programmatic mutation synchronously after options and group membership change. A missing `legacy` means creation; missing `options` means removal. Updates carry both, with `from` naming the previous group after a move. Explicit Fiber saves report their simplified configuration. File-driven reconciliation, parent teardown and Loader removal do not produce spurious self-disable reports. In-memory trees implement a no-op; the existing Include writer persists the current tree. Entry ids cannot contain `:`, which separates nested tree paths.
diff --git a/vendor/loader/src/config/entry.ts b/vendor/loader/src/config/entry.ts
index b014ed6497..b73c116d3f 100644
--- a/vendor/loader/src/config/entry.ts
+++ b/vendor/loader/src/config/entry.ts
@@ -78,7 +78,7 @@ export class Entry {
     if (this.options.group) return false
     let entry: Entry | undefined = this
     do {
-      if (this.disabledOf(entry.options)) return true
+      if (this._resolveDisabled(entry.options)) return true
       entry = entry.parent.ctx.fiber.entry
     } while (entry)
     return false
@@ -88,7 +88,7 @@ export class Entry {
    * Effective disabled state: a `!!js` expression evaluates against the loader
    * context. The raw node stays in the options, so write-back keeps the form.
    */
-  private disabledOf(options: EntryOptions): boolean {
+  private _resolveDisabled(options: EntryOptions): boolean {
     return isJsExpr(options.disabled)
       ? Boolean(this.evaluate(options.disabled.__jsExpr))
       : Boolean(options.disabled)
diff --git a/vendor/loader/src/config/group.ts b/vendor/loader/src/config/group.ts
index ba797a44ee..448f3a3588 100644
--- a/vendor/loader/src/config/group.ts
+++ b/vendor/loader/src/config/group.ts
@@ -36,12 +36,13 @@ export class EntryGroup {
 
   remove(id: string, isDispose = false) {
     const entry = this.tree.store[id]
-    if (!entry) return
+    if (!entry || entry.parent !== this) return
+    // Unregister before disposal so Loader can distinguish removal from self-disposal.
+    delete this.tree.store[id]
     entry.fiber?.dispose()
     if (!isDispose) {
       this.unlink(entry.options)
     }
-    delete this.tree.store[id]
     this.context.emit('loader/partial-dispose', entry, entry.options, false)
   }
 
diff --git a/vendor/loader/src/config/tree.ts b/vendor/loader/src/config/tree.ts
index 0ac369af96..34a2b1c731 100644
--- a/vendor/loader/src/config/tree.ts
+++ b/vendor/loader/src/config/tree.ts
@@ -4,6 +4,23 @@ import { Entry, type EntryOptions } from './entry.ts'
 import { EntryGroup } from './group.ts'
 import { createResolve } from '../resolve.ts'
 
+/**
+ * One tree-side mutation, reported to `EntryTree.commit()` synchronously after
+ * it has been applied to `entry.options` / `group.data`.
+ *
+ * - `options` absent: the entry was removed from `group`.
+ * - `legacy` absent: the entry was created in `group`.
+ * - both present: the entry was updated and now lives in `group`; `from` is
+ *   the group it left if the update moved it.
+ */
+export interface EntryChange {
+  id: string
+  group: EntryGroup
+  from?: EntryGroup
+  options?: EntryOptions
+  legacy?: EntryOptions
+}
+
 /** Mutable tree of loader entries. Persistence is supplied by subclasses. */
 export abstract class EntryTree {
   static readonly sep = ':'
@@ -54,6 +71,8 @@ export abstract class EntryTree {
       do {
         options.id = Math.random().toString(16).slice(2, 10)
       } while (this.store[options.id])
+    } else if (options.id.includes(EntryTree.sep)) {
+      throw new Error(`entry id must not contain "${EntryTree.sep}": ${options.id}`)
     }
     return options.id!
   }
@@ -82,31 +101,41 @@ export abstract class EntryTree {
   /** Create an entry in the root group or a nested group. */
   async create(options: Omit<EntryOptions, 'id'>, parent: string | null = null, position = Infinity) {
     const group = this.resolveGroup(parent)
+    const id = group.tree.ensureId(options)
     group.data.splice(position, 0, options as EntryOptions)
-    group.tree.write()
+    group.tree.commit({ id, group, options: options as EntryOptions })
     return group.create(options)
   }
 
   /** Stop and remove an entry from its parent group. */
   remove(id: string) {
     const entry = this.resolve(id)
-    entry.parent.remove(id)
-    entry.parent.tree.write()
+    const group = entry.parent
+    const legacy = entry.options
+    group.remove(legacy.id)
+    group.tree.commit({ id: legacy.id, group, legacy })
   }
 
   /** Update an entry and optionally move it to another group. */
   async update(id: string, options: Omit<EntryOptions, 'id' | 'name'>, parent?: string | null, position?: number) {
     const entry = this.resolve(id)
     const source = entry.parent
+    const legacy = { ...entry.options }
     if (parent !== undefined) {
       const target = this.resolveGroup(parent)
       source.unlink(entry.options)
       target.data.splice(position ?? Infinity, 0, entry.options)
-      target.tree.write()
       entry.parent = target
     }
-    source.tree.write()
-    return entry.update(options, false, true)
+    // `Entry.update` assigns the new options before its first `await`, so the
+    // change is fully visible to `commit()` once the call returns.
+    const task = entry.update(options, false, true)
+    if (entry.parent.tree !== source.tree) {
+      source.tree.commit({ id: legacy.id, group: source, legacy })
+    }
+    const from = entry.parent === source ? undefined : source
+    entry.parent.tree.commit({ id: legacy.id, group: entry.parent, from, options: entry.options, legacy })
+    return task
   }
 
   /** Import a plugin module from a specifier or `cordis:` builtin. */
@@ -131,6 +160,6 @@ export abstract class EntryTree {
     }, getOuterStack)
   }
 
-  /** Persist current tree state. In-memory trees may implement this as a no-op. */
-  abstract write(): void
+  /** Report an applied mutation synchronously. In-memory trees may use a no-op. */
+  abstract commit(change: EntryChange): void
 }
diff --git a/vendor/loader/src/index.ts b/vendor/loader/src/index.ts
index f9d9baff0a..ac57527455 100644
--- a/vendor/loader/src/index.ts
+++ b/vendor/loader/src/index.ts
@@ -4,7 +4,7 @@ import { ModuleLoader } from './internal.ts'
 import { Entry, type EntryOptions } from './config/entry.ts'
 import { EntryGroup } from './config/group.ts'
 import isolate from './config/isolate.ts'
-import { EntryTree } from './config/tree.ts'
+import { EntryTree, type EntryChange } from './config/tree.ts'
 import { interpolate } from './config/utils.ts'
 
 /** Re-export entry node APIs. */
@@ -72,7 +72,7 @@ export namespace Loader {
 /**
  * Service that owns a loader entry tree and imports configured plugins.
  *
- * Subclasses provide persistence by implementing `write()` on `EntryTree`.
+ * Subclasses provide persistence by implementing `commit(change)` on `EntryTree`.
  */
 export class Loader extends EntryTree {
   declare [Service.config]: Loader.Intercept
@@ -113,8 +113,10 @@ export class Loader extends EntryTree {
       if (!fiber.entry || fiber.parent.fiber?.entry === fiber.entry) return
       const schema = fiber.runtime?.Config
       const unparse = schema?.['simplify']
-      fiber.entry.options.config = unparse ? unparse.call(schema, config) : config
-      fiber.entry.parent.tree.write()
+      const { entry } = fiber
+      const legacy = { ...entry.options }
+      entry.options.config = unparse ? unparse.call(schema, config) : config
+      entry.parent.tree.commit({ id: entry.options.id, group: entry.parent, options: entry.options, legacy })
     })
 
     ctx.on('internal/update', function (config, next) {
@@ -149,24 +151,33 @@ export class Loader extends EntryTree {
       if (!ctx.registry.has(fiber.runtime!.callback)) return
 
       // case 5: the entry's tree is being disposed
-      const treeOwner = fiber.entry.parent.tree.ctx.fiber
-      if (!treeOwner.uid || treeOwner.state === FiberState.UNLOADING) return
+      if (!fiber.entry.parent.tree.ctx.fiber.uid) return
 
-      this.showLog(fiber.entry, 'unload')
+      const { entry } = fiber
+      this.showLog(entry, 'unload')
 
-      // case 6: fiber is disposed by loader behavior
+      // case 6: the entry's parent is being unloaded, which takes the entry with it
+      // (the parent may still be registered, e.g. when it has lost a dependency)
+      if (fiber.parent.fiber.state === FiberState.UNLOADING) return
+
+      // case 7: the entry is being removed by the loader (`EntryGroup.remove`
+      // unregisters it before disposing the fiber)
+      if (entry.parent.tree.store[entry.options.id] !== entry) return
+
+      // case 8: fiber is disposed by loader behavior
       // such as inject checker, config file update, ancestor group disable
-      if (fiber.entry.disabled) return
+      if (entry.disabled) return
 
-      fiber.entry.options.disabled = true
-      fiber.entry.parent.tree.write()
+      const legacy = { ...entry.options }
+      entry.options.disabled = true
+      entry.parent.tree.commit({ id: entry.options.id, group: entry.parent, options: entry.options, legacy })
     })
 
     ctx.plugin(isolate)
   }
 
-  write() {
-    // Loader's root tree is in-memory; writes are no-ops.
+  commit(_change: EntryChange) {
+    // Loader's root tree is in-memory; commits are no-ops.
   }
 
   [Service.check]() {

From 4fbd33baefa23c10f59d2bf1643c2c09b6a9dd13 Mon Sep 17 00:00:00 2001
From: Shigma <shigma10826@gmail.com>
Date: Wed, 14 Oct 2026 18:33:24 +0800
Subject: [PATCH 02/32] docs(cordis): align resolver note with completed Loader
 baseline

---
 vendor/README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/vendor/README.md b/vendor/README.md
index 064860f3cf..e9435b4675 100644
--- a/vendor/README.md
+++ b/vendor/README.md
@@ -50,7 +50,7 @@ Keep this log exhaustive — every divergence from upstream must be listed.
 16. **`cordis/package.json` publishes `src`**: added `src` to the `files` list, joining the other eight vendored packages. Cordis declares `"./src/*": "./src/*"` in its exports, so a tarball without `src` publishes an export map pointing at absent files; the release change judgement also reads `files` to decide whether a diff reaches the payload, and a package whose only published paths are build output has no tracked path to match.
 17. **`@deepseek-ai` rescope**: every vendored manifest `name`, every internal dependency entry among the vendored set, and every module specifier that reaches them use the scoped names in the manifest table's `npm name` column. Directory names, version numbers, and dependency ranges are unchanged, and no upstream runtime identifier is renamed — `Symbol.for('schemastery')` and Schemastery's `vendor:` metadata field keep their upstream values. Re-apply with `pnpm run rescope-vendor --apply` after a sync; the table's two name columns are the mapping, restated for consumers in [docs/rescope.md](../docs/rescope.md).
 18. **Entry `disabled` interpolation**: the rc.11 Loader implementation evaluates `!!js` expressions and preserves their raw nodes, retiring the local interpolation patch. `disabled` remains the only interpolated metadata field.
-19. **Loader resolver slice from Cordis v4.0.0-rc.11**: `loader/src/resolve.ts` and the no-internals branch of `EntryTree.import()` use upstream project-relative ESM resolution, preserving import conditions, package imports and self-references. A helper under the nearest package scope supplies `import.meta.resolve`; absent scopes and helper-write failures retain the native import fallback. `loader/src/internal.ts` matches upstream runtime API detection, retiring the local Node-major workaround. Node builtin imports use default namespaces so the Web shell can bundle Loader with its existing browser externalization; the shell supplies its own module loader. The local resolver normalizes trailing directory separators before caching a scope, so concurrent requests from a root config and a nested config share one helper write. The Loader manifest remains at 1.0.0-rc.5 until the remaining package changes are reconciled. Covered by `scripts/cordis-loader-resolve.spec.ts` and the Node compatibility matrix.
+19. **Loader resolver slice from Cordis v4.0.0-rc.11**: `loader/src/resolve.ts` and the no-internals branch of `EntryTree.import()` use upstream project-relative ESM resolution, preserving import conditions, package imports and self-references. A helper under the nearest package scope supplies `import.meta.resolve`; absent scopes and helper-write failures retain the native import fallback. `loader/src/internal.ts` matches upstream runtime API detection, retiring the local Node-major workaround. Node builtin imports use default namespaces so the Web shell can bundle Loader with its existing browser externalization; the shell supplies its own module loader. The local resolver normalizes trailing directory separators before caching a scope, so concurrent requests from a root config and a nested config share one helper write. Covered by `scripts/cordis-loader-resolve.spec.ts` and the Node compatibility matrix.
 
 20. **Loader fiber identity**: rc.11 Core canonicalizes `update()` and `restart()` through `ctx.fiber`, retiring the local unwrapping workaround. `Entry.fiber` retains the registry wrapper; volatile commits explicitly use the canonical fiber. HMR retains its existing replacement algorithm.
 

From d6fc02b1739b4b8ba563b6b2dbcc5638fcce2996 Mon Sep 17 00:00:00 2001
From: Shigma <shigma10826@gmail.com>
Date: Wed, 28 Oct 2026 17:56:32 +0800
Subject: [PATCH 03/32] docs(cordis): name EntryTree.commit in tree consumers

---
 packages/host/directory-picker-auto/README.i18n.yaml          | 4 ++--
 packages/host/directory-picker-auto/README.md                 | 2 +-
 packages/host/directory-picker-auto/README.zh.md              | 2 +-
 .../tests/fixtures/plugins/self-dispose.js                    | 2 +-
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/packages/host/directory-picker-auto/README.i18n.yaml b/packages/host/directory-picker-auto/README.i18n.yaml
index 8d47ba212a..5a69888f50 100644
--- a/packages/host/directory-picker-auto/README.i18n.yaml
+++ b/packages/host/directory-picker-auto/README.i18n.yaml
@@ -33,8 +33,8 @@
   en: 42b15ac6321706aa
   zh: 4ed0861911abaf5d
 /deepseek-ai-dsh-host-directory-picker-auto/understand-the-implementation/design-concept:
-  en: abc8d3962e4580c3
-  zh: 4442dde69faf680f
+  en: 232e9be2165fae9e
+  zh: 6305799128399971
 /deepseek-ai-dsh-host-directory-picker-auto/understand-the-implementation/the-resolution-table:
   en: 0edb097d5df327e8
   zh: e9b59fc2070dfc42
diff --git a/packages/host/directory-picker-auto/README.md b/packages/host/directory-picker-auto/README.md
index 53058f761e..518916028a 100644
--- a/packages/host/directory-picker-auto/README.md
+++ b/packages/host/directory-picker-auto/README.md
@@ -53,7 +53,7 @@ A wrong `native` choice degrades to the backend's existing retryable failure dia
 
 ### Design concept
 
-The chooser is a pure decision plus a mount: `resolveDirectoryPickerBackend` samples host facts once at boot and returns a backend kind, and `apply` mounts the matching backend and surface packages as real Loader entries in the in-memory root tree — never persisted to a config file, because the root tree's `write()` is a no-op. The effect's disposer removes both entries and joins their fibers' teardown, so unloading returns only after both faces of the mounted interaction quiesced.
+The chooser is a pure decision plus a mount: `resolveDirectoryPickerBackend` samples host facts once at boot and returns a backend kind, and `apply` mounts the matching backend and surface packages as real Loader entries in the in-memory root tree — never persisted to a config file, because the root tree's `commit(change)` is a no-op. The effect's disposer removes both entries and joins their fibers' teardown, so unloading returns only after both faces of the mounted interaction quiesced.
 
 ### The resolution table
 
diff --git a/packages/host/directory-picker-auto/README.zh.md b/packages/host/directory-picker-auto/README.zh.md
index b4dc0b4dce..7fba47e345 100644
--- a/packages/host/directory-picker-auto/README.zh.md
+++ b/packages/host/directory-picker-auto/README.zh.md
@@ -53,7 +53,7 @@ kind: "package-reference"
 
 ### 设计理念
 
-选择器是一次纯决策加一次挂载：`resolveDirectoryPickerBackend` 在启动时采样宿主事实并返回一个后端类型，`apply` 把匹配的后端与界面包作为真实 Loader 条目挂进内存根树——绝不持久化到配置文件，因为根树的 `write()` 是 no-op。该 effect 的 disposer 会移除两个条目并汇合其 fiber 的拆除，因此卸载只在所挂载交互的两面完全停稳后返回。
+选择器是一次纯决策加一次挂载：`resolveDirectoryPickerBackend` 在启动时采样宿主事实并返回一个后端类型，`apply` 把匹配的后端与界面包作为真实 Loader 条目挂进内存根树——绝不持久化到配置文件，因为根树的 `commit(change)` 是 no-op。该 effect 的 disposer 会移除两个条目并汇合其 fiber 的拆除，因此卸载只在所挂载交互的两面完全停稳后返回。
 
 ### 判定表
 
diff --git a/packages/preset/agent-preset-registry/tests/fixtures/plugins/self-dispose.js b/packages/preset/agent-preset-registry/tests/fixtures/plugins/self-dispose.js
index 97c01f95a4..d9c209deea 100644
--- a/packages/preset/agent-preset-registry/tests/fixtures/plugins/self-dispose.js
+++ b/packages/preset/agent-preset-registry/tests/fixtures/plugins/self-dispose.js
@@ -1,5 +1,5 @@
 // Disposes itself once active. The Loader treats a self-disposing entry as a
-// config change and writes the tree back through `EntryTree.write()`, which is
+// config change and reports it through `EntryTree.commit(change)`, which is
 // the exact path that once truncated a preset file to `[]`.
 export const name = 'self-dispose'
 export function apply(ctx) {

From c6f8fb1d37e44934286b04b66200c923b32ca676 Mon Sep 17 00:00:00 2001
From: Shigma <shigma10826@gmail.com>
Date: Wed, 28 Oct 2026 18:30:55 +0800
Subject: [PATCH 04/32] docs(vendor): sync rescope Loader version with rc.8 pin

---
 docs/rescope.i18n.yaml | 4 ++--
 docs/rescope.md        | 2 +-
 docs/rescope.zh.md     | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/docs/rescope.i18n.yaml b/docs/rescope.i18n.yaml
index f418069ce3..1d8ab0d003 100644
--- a/docs/rescope.i18n.yaml
+++ b/docs/rescope.i18n.yaml
@@ -6,8 +6,8 @@
   en: c8aa4d3384ea1306
   zh: 5aa030587d5b634d
 /vendored-package-rescope/name-mapping:
-  en: 239fa7993825ac62
-  zh: df35fa9f5ef42a05
+  en: c74ffbc1036a93bf
+  zh: 9538352d8d72ebca
 /vendored-package-rescope/what-the-rename-does-not-touch:
   en: 9bb7d09f8cccf695
   zh: 2a8f3f60ae5116f3
diff --git a/docs/rescope.md b/docs/rescope.md
index 85917bbfce..62b4dbfbac 100644
--- a/docs/rescope.md
+++ b/docs/rescope.md
@@ -11,7 +11,7 @@ The Cordis framework and its foundation libraries are vendored under [`vendor/`]
 | `vendor/cordis/` | `cordis` | `@deepseek-ai/cordis` | 4.0.0-rc.11 | Framework core: `Context`, `Service`, `Fiber`, events |
 | `vendor/cosmokit/` | `cosmokit` | `@deepseek-ai/cosmokit` | 1.8.1 | Shared utilities the framework and Schemastery build on |
 | `vendor/schemastery/` | `schemastery` | `@deepseek-ai/schemastery` | 3.18.0 | Config schemas (`Schema`) behind every plugin's `Config` |
-| `vendor/loader/` | `@cordisjs/plugin-loader` | `@deepseek-ai/cordis-plugin-loader` | 1.0.0-rc.5 | `cordis.yml` loading, plugin resolution, repository cache |
+| `vendor/loader/` | `@cordisjs/plugin-loader` | `@deepseek-ai/cordis-plugin-loader` | 1.0.0-rc.8 | `cordis.yml` loading, plugin resolution, repository cache |
 | `vendor/include/` | `@cordisjs/plugin-include` | `@deepseek-ai/cordis-plugin-include` | 1.0.4 | Config includes and patch overlays |
 | `vendor/group/` | `@cordisjs/plugin-group` | `@deepseek-ai/cordis-plugin-group` | 1.0.0 | Nested plugin groups |
 | `vendor/timer/` | `@cordisjs/plugin-timer` | `@deepseek-ai/cordis-plugin-timer` | 1.1.4 | Disposal-aware timers on `ctx` |
diff --git a/docs/rescope.zh.md b/docs/rescope.zh.md
index 8d13ed539b..5e6a75de68 100644
--- a/docs/rescope.zh.md
+++ b/docs/rescope.zh.md
@@ -11,7 +11,7 @@ Cordis 框架及其基础库以源码形式 vendored 在 [`vendor/`](../vendor/R
 | `vendor/cordis/` | `cordis` | `@deepseek-ai/cordis` | 4.0.0-rc.11 | 框架核心：`Context`、`Service`、`Fiber`、事件 |
 | `vendor/cosmokit/` | `cosmokit` | `@deepseek-ai/cosmokit` | 1.8.1 | 框架与 Schemastery 共用的基础工具 |
 | `vendor/schemastery/` | `schemastery` | `@deepseek-ai/schemastery` | 3.18.0 | 配置 schema（`Schema`），每个插件的 `Config` 都基于它 |
-| `vendor/loader/` | `@cordisjs/plugin-loader` | `@deepseek-ai/cordis-plugin-loader` | 1.0.0-rc.5 | `cordis.yml` 装载、插件解析、repository 缓存 |
+| `vendor/loader/` | `@cordisjs/plugin-loader` | `@deepseek-ai/cordis-plugin-loader` | 1.0.0-rc.8 | `cordis.yml` 装载、插件解析、repository 缓存 |
 | `vendor/include/` | `@cordisjs/plugin-include` | `@deepseek-ai/cordis-plugin-include` | 1.0.4 | 配置包含与 patch 叠加 |
 | `vendor/group/` | `@cordisjs/plugin-group` | `@deepseek-ai/cordis-plugin-group` | 1.0.0 | 嵌套插件分组 |
 | `vendor/timer/` | `@cordisjs/plugin-timer` | `@deepseek-ai/cordis-plugin-timer` | 1.1.4 | `ctx` 上随 disposal 回收的定时器 |

From db1a3b3754b104e6498965024c00ec8a2a771d4c Mon Sep 17 00:00:00 2001
From: Shigma <shigma10826@gmail.com>
Date: Wed, 28 Oct 2026 19:40:54 +0800
Subject: [PATCH 05/32] chore(cordis): adopt Include 1.1.1 journal alongside
 Loader rc.8

---
 packages/boot/app-boot/src/index.ts           |  11 +-
 .../tests/loader-composition.spec.ts          |  18 +-
 .../agent-preset-registry/tests/mount.spec.ts |   3 +-
 .../tests/teardown-loader.e2e.ts              |   5 +-
 scripts/cordis-include-journal.spec.ts        | 160 ++++++
 scripts/loader-volatile-update.spec.ts        |   1 +
 vendor/README.md                              |  17 +-
 vendor/cordis-rc11-upgrade-plan.md            |  14 +-
 vendor/include/README.md                      |   4 +-
 vendor/include/src/index.ts                   | 527 ++++++++++++------
 vendor/loader/README.md                       |   4 +-
 vendor/loader/src/config/tree.ts              |  17 +-
 12 files changed, 589 insertions(+), 192 deletions(-)
 create mode 100644 scripts/cordis-include-journal.spec.ts

diff --git a/packages/boot/app-boot/src/index.ts b/packages/boot/app-boot/src/index.ts
index b89eb3632a..32636ea8e8 100644
--- a/packages/boot/app-boot/src/index.ts
+++ b/packages/boot/app-boot/src/index.ts
@@ -656,10 +656,9 @@ export function renderConfigDump(
   const base = parsed as Parameters<typeof applyEntryPatches>[0]
   // snapshot_k = ONE application of layers 1..k flattened, using the exact
   // arguments boot passes for that prefix. snapshot_N is the mounted composition.
-  // The patches are cloned per call: applyEntryPatches detaches the entry
-  // list but pushes `insert` rows by reference from the patch list, so
-  // sharing patch objects across snapshot calls would leak a later
-  // snapshot's mutations into an earlier one's result.
+  // The patches are cloned per call: applyEntryPatches clones entries and
+  // inserted rows but assigns override values such as `config` by reference,
+  // so each snapshot keeps its own copies of those values.
   const snapshot = (count: number, warnings: string[]): ReturnType<typeof applyEntryPatches> => {
     const flattened = structuredClone(layers.slice(0, count).flatMap(layer => layer.patches))
     return applyEntryPatches(base, flattened, (message: string, ...args: unknown[]) => {
@@ -804,8 +803,8 @@ export interface FailLoudProcess {
   exit(code: number): void
 }
 
-// Loader rc.5 derives and drops a rejected promise after a fiber fails. Keep
-// exact reasons already folded into the boot diagnostic visible through the
+// An activation rejection already folded into the boot diagnostic can also
+// reach the process rejection handler. Keep exact reasons visible through the
 // next process rejection checkpoint so the process guard can coalesce them.
 const assembledActivationRejections = new Map<unknown, number>()
 
diff --git a/packages/host/directory-picker-auto/tests/loader-composition.spec.ts b/packages/host/directory-picker-auto/tests/loader-composition.spec.ts
index 2989150118..fabd34d2c7 100644
--- a/packages/host/directory-picker-auto/tests/loader-composition.spec.ts
+++ b/packages/host/directory-picker-auto/tests/loader-composition.spec.ts
@@ -239,11 +239,10 @@ describe('real Loader composition', () => {
     expect(entryNames(ctx)).not.toContain(NATIVE_SURFACE)
     expect(ctx.get('directoryPicker')).toBeUndefined()
     // Self-disposing an include-tree entry persists `disabled: true` (loader
-    // behavior, not the chooser's); await that debounced write so it cannot
-    // race the temp-dir removal, and pin that the persisted row is the
-    // chooser itself — the resolved backend still never reaches the file.
-    // stop() drains the Include write queue, so this assertion does not depend
-    // on the debounce timer racing Windows coverage load.
+    // behavior, not the chooser's); await that write so it cannot race the
+    // temp-dir removal, and pin that the persisted row is the chooser itself —
+    // the resolved backend still never reaches the file. stop() drains the
+    // Include journal, so this assertion does not depend on write timing.
     await includeTree(ctx).stop()
     expect(await readFile(configPath, 'utf8')).toContain('disabled: true')
     expect(await readFile(configPath, 'utf8')).not.toContain(NATIVE)
@@ -299,7 +298,7 @@ describe('real Loader composition', () => {
     await expect(autoEntry.fiber!.dispose()).resolves.not.toThrow()
     expect(entryNames(ctx)).not.toContain(NATIVE)
     expect(entryNames(ctx)).not.toContain(NATIVE_SURFACE)
-    // Same self-dispose persistence as above: drain the Include write queue
+    // Same self-dispose persistence as above: drain the Include journal
     // deterministically before asserting the persisted row.
     await includeTree(ctx).stop()
     expect(await readFile(configPath, 'utf8')).toContain('disabled: true')
@@ -308,17 +307,20 @@ describe('real Loader composition', () => {
     expect(renameControl.attempts).toBeGreaterThanOrEqual(2)
   })
 
-  it('reports a terminal debounced-write failure again to the teardown owner', { timeout: 60_000 }, async () => {
+  it('reports unsaved changes at shutdown and clears the error after a successful retry', { timeout: 60_000 }, async () => {
     stubAttendedHost()
     const { ctx } = await loadComposition('127.0.0.1')
     const autoEntry = [...ctx.loader.entries()].find(entry => entry.options.name === AUTO)!
     const include = includeTree(ctx)
     renameControl.failureCode = 'EIO'
-    renameControl.remainingFailures = 1
+    renameControl.remainingFailures = Infinity
 
     await autoEntry.fiber!.dispose()
     await expect.poll(() => renameControl.injectedFailures).toBe(1)
     await expect(include.stop()).rejects.toMatchObject({ code: 'EIO' })
+    renameControl.remainingFailures = 0
+    await expect(include.flush()).resolves.toBeUndefined()
+    await expect(include.flush()).resolves.toBeUndefined()
     await expect(ctx.fiber.dispose()).resolves.not.toThrow()
     context = undefined
   })
diff --git a/packages/preset/agent-preset-registry/tests/mount.spec.ts b/packages/preset/agent-preset-registry/tests/mount.spec.ts
index 3706af4962..f669058d92 100644
--- a/packages/preset/agent-preset-registry/tests/mount.spec.ts
+++ b/packages/preset/agent-preset-registry/tests/mount.spec.ts
@@ -73,7 +73,8 @@ it('does not replace the declaring Loader entry subtree or persist runtime tree
     expect(mountedCompositionRows(mount.tree)[0]!.entryId).toBe('child')
     expect(entry.subtree).toBe(previousTree)
     expect(entry.subgroup).toBe(previousGroup)
-    mount.tree.commit({ id: 'missing', group: mount.tree.root })
+    const row = mount.tree.root.data[0]!
+    mount.tree.commit({ id: 'child', group: mount.tree.root, legacy: { ...row }, options: row })
     entry.subtree = mount.tree
     entry.subgroup = mount.tree.root
     const other = createScope(owner, {})
diff --git a/packages/session/session-persistence-jsonl/tests/teardown-loader.e2e.ts b/packages/session/session-persistence-jsonl/tests/teardown-loader.e2e.ts
index e8f301a851..b06980f014 100644
--- a/packages/session/session-persistence-jsonl/tests/teardown-loader.e2e.ts
+++ b/packages/session/session-persistence-jsonl/tests/teardown-loader.e2e.ts
@@ -114,8 +114,11 @@ it('waits for injected consumer teardown, persists its final event, and releases
     expect(persisted.at(-1)).toMatchObject({ type: 'turn/end', seq: 1, data: { turn: 1, reason: { kind: 'completed' } } })
 
     await consumingEntry.fiber!.dispose()
-    await provider.init()
+    // Self-disposal records disabled: true; re-enable through Loader so the journal agrees with the runtime.
+    await ctx.loader.update(provider.id, { disabled: false })
+    await (provider.parent.tree as Include).flush()
     await provider.fiber!.await()
+    expect(provider.disabled).toBe(false)
     const reopened = await ctx.sessionPersistence.open(live.id, 'write')
     try {
       expect((await reopened.read()).events).toEqual(live.snapshotEvents())
diff --git a/scripts/cordis-include-journal.spec.ts b/scripts/cordis-include-journal.spec.ts
new file mode 100644
index 0000000000..e5d0100d89
--- /dev/null
+++ b/scripts/cordis-include-journal.spec.ts
@@ -0,0 +1,160 @@
+/** File reconciliation and persistence results through real Loader entries. */
+import { chmod, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { pathToFileURL } from 'node:url'
+import { Context, FiberState } from '@deepseek-ai/cordis'
+import Loader, { Group, type EntryOptions } from '@deepseek-ai/cordis-plugin-loader'
+import Include from '@deepseek-ai/cordis-plugin-include'
+import { expect, it, onTestFinished, vi } from 'vitest'
+
+const row = (id: string, value: number): EntryOptions => ({ id, name: 'cordis:example', config: { value } })
+
+// File rows may omit ids; Include assigns them.
+async function fixture(data: Array<Omit<EntryOptions, 'id'> & { id?: string }>) {
+  const dir = await mkdtemp(join(tmpdir(), 'dsh-include-journal-'))
+  const ctx = new Context()
+  onTestFinished(async () => {
+    await ctx.fiber.dispose()
+    await rm(dir, { recursive: true, force: true, maxRetries: 3 })
+  })
+  ctx.baseUrl = pathToFileURL(dir).href + '/'
+  await ctx.plugin(Loader)
+  ctx.loader.builtins.include = Include
+  ctx.loader.builtins.group = Group
+  ctx.loader.builtins.example = () => {}
+  const filename = join(dir, 'root.json')
+  await writeFile(filename, JSON.stringify(data))
+  const id = await ctx.loader.create({ name: 'cordis:include', config: { path: './root.json' } })
+  await ctx.loader.await()
+  const include = ctx.loader.resolve(id).subtree as Include
+  const read = async () => JSON.parse(await readFile(filename, 'utf8')) as EntryOptions[]
+  const edit = (entries: EntryOptions[]) => writeFile(filename, JSON.stringify(entries))
+  const update = (id: string, value: number) => include.update(id, { config: { value } })
+  const value = (id: string) => (include.store[id]!.fiber!.effectiveConfig as { value: number }).value
+  return { ctx, dir, filename, id, include, read, edit, update, value }
+}
+
+it.each(['refresh-first', 'update-first'] as const)('merges independent file and runtime edits with %s ordering', async (order) => {
+  const app = await fixture([row('a', 1), row('b', 1)])
+  await app.edit([row('a', 1), row('b', 3)])
+  if (order === 'refresh-first') await Promise.all([app.include.refresh(), app.update('a', 2)])
+  else await Promise.all([app.update('a', 2), app.include.refresh()])
+  await app.include.flush()
+  expect(app.value('a')).toBe(2)
+  expect(app.value('b')).toBe(3)
+  expect(await app.read()).toEqual([row('a', 2), row('b', 3)])
+})
+
+it('lets the file win a conflicting config edit and reports the conflict', async () => {
+  const app = await fixture([row('a', 1)])
+  const error = vi.spyOn(app.include.ctx.logger, 'error')
+  await app.edit([row('a', 3)])
+  await app.update('a', 2)
+  await app.include.flush()
+  expect(app.value('a')).toBe(3)
+  expect(await app.read()).toEqual([row('a', 3)])
+  expect(error.mock.calls.some(([message]) => String(message).includes('config conflict'))).toBe(true)
+})
+
+it('retains unsaved edits across a missing or invalid file and clears failure after recovery', async () => {
+  const app = await fixture([row('a', 1)])
+  await rm(app.filename)
+  await app.update('a', 2)
+  await expect(app.include.flush()).rejects.toThrow('unsaved change')
+  await expect(readFile(app.filename)).rejects.toMatchObject({ code: 'ENOENT' })
+  expect(app.value('a')).toBe(2)
+  await writeFile(app.filename, '{')
+  await expect(app.include.refresh()).rejects.toThrow('failed to parse')
+  expect(await readFile(app.filename, 'utf8')).toBe('{')
+  await app.edit([row('a', 1), row('b', 1)])
+  await app.include.refresh()
+  await expect(app.include.flush()).resolves.toBeUndefined()
+  expect(await app.read()).toEqual([row('a', 2), row('b', 1)])
+})
+
+it('routes patch-owned fields and inserted rows into the parent file', async () => {
+  const app = await fixture([])
+  const inner = join(app.dir, 'inner.json')
+  const original = JSON.stringify([row('a', 1)])
+  await writeFile(inner, original)
+  const id = await app.include.create({ name: 'cordis:include', config: {
+    path: './inner.json', patches: [{ id: 'a', disabled: true }, { insert: [row('b', 1)] }],
+  } })
+  await app.ctx.loader.await()
+  const child = app.ctx.loader.resolve(id).subtree as Include
+  await child.update('a', { disabled: false })
+  await child.update('b', { config: { value: 2 } })
+  await child.flush()
+  await app.include.flush()
+  expect(await readFile(inner, 'utf8')).toBe(original)
+  expect((await app.read())[0]!.config).toEqual({ path: './inner.json', patches: [
+    { id: 'a', disabled: false }, { insert: [row('b', 2)] },
+  ] })
+  expect(child.store.a!.fiber!.effectiveConfig).toEqual({ value: 1 })
+  expect(child.store.b!.fiber!.effectiveConfig).toEqual({ value: 2 })
+})
+
+// Windows does not implement POSIX write permission bits.
+it.skipIf(process.platform === 'win32')('retains read-only file changes until a writable retry succeeds', async () => {
+  const app = await fixture([row('a', 1)])
+  try {
+    await chmod(app.filename, 0o444)
+    await app.update('a', 2)
+    await expect(app.include.flush()).rejects.toThrow('unsaved change')
+    expect(await app.read()).toEqual([row('a', 1)])
+    expect(app.value('a')).toBe(2)
+  } finally {
+    await chmod(app.filename, 0o644)
+  }
+  await app.include.flush()
+  expect(await app.read()).toEqual([row('a', 2)])
+})
+
+it('preserves file text on file-driven removal and drains runtime edits before shutdown', async () => {
+  const app = await fixture([row('a', 1), row('b', 1)])
+  const edited = JSON.stringify([row('a', 1)], null, 4) + '\n'
+  await writeFile(app.filename, edited)
+  await app.include.refresh()
+  expect(app.include.store.b).toBeUndefined()
+  expect(await readFile(app.filename, 'utf8')).toBe(edited)
+  await app.update('a', 2)
+  await app.include.stop()
+  expect(await app.read()).toEqual([row('a', 2)])
+})
+
+it('keeps persisted runtime edits when the Include config changes', async () => {
+  const app = await fixture([row('a', 1)])
+  await app.include.update('a', { disabled: true })
+  await app.include.flush()
+  await app.ctx.loader.update(app.id, { config: { path: './root.json', enableLogs: true } })
+  await app.include.flush()
+  expect(app.include.store.a!.fiber?.state).not.toBe(FiberState.ACTIVE)
+  expect(await app.read()).toEqual([{ ...row('a', 1), disabled: true }])
+})
+
+it('keeps generated ids and fibers for anonymous file and inserted rows across updates', async () => {
+  const app = await fixture([{ name: 'cordis:example', config: { value: 1 } }])
+  const config = { path: './root.json', patches: [{ insert: [{ name: 'cordis:example', config: { value: 2 } }] }] }
+  await app.ctx.loader.update(app.id, { config })
+  await app.include.flush()
+  const fibers = () => Object.values(app.include.store).map(entry => entry.fiber)
+  const before = fibers()
+  expect(before).toHaveLength(2)
+  await app.ctx.loader.update(app.id, { config: { ...config, enableLogs: true } })
+  await app.include.flush()
+  await app.include.refresh()
+  expect(fibers()).toEqual(before)
+  expect(fibers().every((fiber, index) => fiber === before[index])).toBe(true)
+})
+
+it('persists a row moved into the Include from another tree as a complete creation', async () => {
+  const app = await fixture([{ id: 'g', name: 'cordis:group', group: true, config: [] }])
+  const id = await app.ctx.loader.create({ name: 'cordis:example', config: { value: 1 } })
+  await app.ctx.loader.await()
+  await app.ctx.loader.update(id, { config: { value: 2 } }, `${app.id}:g`)
+  await app.include.flush()
+  expect(await app.read()).toEqual([{ id: 'g', name: 'cordis:group', group: true, config: [
+    { id, name: 'cordis:example', config: { value: 2 } },
+  ] }])
+})
diff --git a/scripts/loader-volatile-update.spec.ts b/scripts/loader-volatile-update.spec.ts
index bdcb8917d3..71192ba28e 100644
--- a/scripts/loader-volatile-update.spec.ts
+++ b/scripts/loader-volatile-update.spec.ts
@@ -304,6 +304,7 @@ it('updates volatile children through Group and Include custom updates and saves
   expect(initial.title.get()).toBe('group-update')
   expect(group.options.config).toEqual([child('group-update')])
   await includeEntry.fiber!.update({ path: includePath, patches: [{ id: 'consumer', config: { title: 'include-update' } }] })
+  await include.flush()
   await ctx.loader.await()
   expect(initial.title.get()).toBe('include-update')
   expect(includeEntry.fiber).toBe(originalInclude)
diff --git a/vendor/README.md b/vendor/README.md
index 667631cd3f..d39dfae8d8 100644
--- a/vendor/README.md
+++ b/vendor/README.md
@@ -18,7 +18,7 @@ Upstream workspace: `cordis-workspace` (local checkout: `~/repos/cordis-workspac
 | `schemastery/` | `@deepseek-ai/schemastery` | `schemastery` | 3.18.0 | https://github.com/deepseek-harness/schemastery (`packages/core`) | `e67cee00ad725bd1534aee930a979ea3eec6f698` |
 | `cordis/` | `@deepseek-ai/cordis` | `cordis` | 4.0.0-rc.11 | https://github.com/cordiverse/cordis (`packages/core`) | `0b96d9fd517b998e44e2209560c9e5f0671ce933` |
 | `loader/` | `@deepseek-ai/cordis-plugin-loader` | `@cordisjs/plugin-loader` | 1.0.0-rc.8 | https://github.com/cordiverse/cordis (`packages/loader`) | `0b96d9fd517b998e44e2209560c9e5f0671ce933` |
-| `include/` | `@deepseek-ai/cordis-plugin-include` | `@cordisjs/plugin-include` | 1.0.4 | https://github.com/deepseek-harness/cordis (`packages/include`) | `abb0a307cb1d3b0947f455d590cf5ba922d4caa4` |
+| `include/` | `@deepseek-ai/cordis-plugin-include` | `@cordisjs/plugin-include` | 1.1.1 | https://github.com/cordiverse/cordis (`packages/include`) | `0b96d9fd517b998e44e2209560c9e5f0671ce933` |
 | `group/` | `@deepseek-ai/cordis-plugin-group` | `@cordisjs/plugin-group` | 1.0.0 | https://github.com/deepseek-harness/cordis (`packages/group`) | `abb0a307cb1d3b0947f455d590cf5ba922d4caa4` |
 | `timer/` | `@deepseek-ai/cordis-plugin-timer` | `@cordisjs/plugin-timer` | 1.1.4 | https://github.com/cordiverse/cordis (`packages/timer`) | `0b96d9fd517b998e44e2209560c9e5f0671ce933` |
 | `hmr/` | `@deepseek-ai/cordis-plugin-hmr` | `@cordisjs/plugin-hmr` | 1.0.15 | https://github.com/deepseek-harness/cordis (`packages/hmr`) | `abb0a307cb1d3b0947f455d590cf5ba922d4caa4` |
@@ -30,27 +30,26 @@ Intentionally **not** vendored (verified unused by this set): `reggol`, `@cordis
 
 ## Local modifications
 
-Keep this log exhaustive — every divergence from upstream must be listed. Each entry has a stable ID: remove an entry when its divergence no longer exists, and never renumber or reuse IDs. The next new entry is V26.
+Keep this log exhaustive — every divergence from upstream must be listed. Each entry has a stable ID: remove an entry when its divergence no longer exists, and never renumber or reuse IDs. The next new entry is V27.
 - **V1 · `hmr/src/index.ts`**: removed the `./locales/en-US.yml` / `./locales/zh-CN.yml` imports, the `.i18n({...})` call on the `Config` schema, and the `src/locales/` directory. Rationale: those imports require a runtime YAML loader hook (`@cordisjs/unyaml`) that we do not vendor; the i18n texts only localize config descriptions.
 - **V2 · All `package.json` files**: regenerated for Harness releases with scoped names, release versions, publication metadata, precise bundled-runtime and `lib/types/**/*.d.ts` / `.d.ts.map` file entries, source exports where applicable, and declaration metadata pointing at `lib/types`. References within the vendored set use `workspace:~`. HMR declares `esbuild` as a direct dev dependency for its imported `BuildFailure` type, and Loader requires `node-addon-require-builtin@^0.1.4` to match published app runtimes.
 - **V3 · All `tsconfig.json` files**: regenerated to extend the repo-root `tsconfig.base.json`, emit TypeScript intermediates to `lib/types`, and declare project references.
 - **V4 · Vendored TypeScript source internal specifiers**: changed local relative imports/exports from upstream's specifier shape to explicit `.ts` specifiers so TypeScript rewrites emitted JS to `.js` while declarations keep explicit, NodeNext-safe `.ts` specifiers. This includes `loader/src/config/isolate.ts` using `declare module './entry.ts'`. Type-only dependencies use `import type` or inline `type` modifiers so ESM output does not retain erased interfaces.
 - **V5 · `schemastery/tsdown.config.ts` and `logger-console/tsdown.config.ts`**: ours, not upstream files — per-package build-shape overrides (dual ESM+CJS output; separate node/browser entries) for the repo-root tsdown build. They read the JS emitted under `lib/types` and then write the publish runtime entries under `lib/`. Like the regenerated tsconfigs, they are not part of the upstream sync surface.
 - **V6 · `cordis/src/fiber.ts` lifecycle hardening**: locally closes three reentrant disposal gaps. An effect's owner-list wrapper is registered before its setup body runs, so an unload begun from inside setup awaits setup and every collected cleanup; synchronous setup failure removes the wrapper and rolls back collected cleanup. Async cleanup stays owner-visible until quiescence, and Cordis's internal effect composition joins an already-running cleanup while repeated public disposer calls retain their upstream single-shot result. Effect creation is rejected while the owner is `UNLOADING` (while `PENDING` and `LOADING` remain legal), preventing cleanup-time registrations from escaping the unload snapshot. Child fibers register and receive their parent-owned disposer before `internal/plugin` publication, resolve dependency declarations added by that notification before activation, drain effects attached while pending, and contain teardown-notification failures per observer so one callback cannot starve peers or interrupt ownership cleanup.
-- **V7 · Cordis, Loader and Timer JSDoc enrichment**: added `@param`/`@returns` tags and contract documentation (disposal semantics, waterfall veto, bail conditions, error cases) across the public plugin-author surface — `Context` (class, statics, and the `Context` interface properties incl. `root`), module re-exports, shared utility helpers, `EventsService`, `Fiber`, `RegistryService`, `ReflectService`, `Service`, `LoggerService` and their `declare module './context.ts'` overloads. Loader documentation covers `loader/src/{index,internal,config/entry,config/group,config/isolate,config/tree,config/utils}.ts`, including entry ownership, tree mutation methods, and the `!!js` discriminator. The upstream `EventsService.dispatch()` deprecation annotation is omitted: DSH enumerates callbacks to contain each observer failure independently, which the typed dispatch methods do not provide. Comment-only; no code changes. Timer retains its local class and helper summaries; its README is local documentation because the upstream package has none. Comment-only; no code changes. Motivation: the website API-reference generator renders these docs and hard-errors on undocumented members. Retire this entry when the enrichment is upstreamed to the fork.
-- **V8 · `include/src/index.ts` resilient file refresh and patch reapplication**: [#514](https://github.com/deepseek-harness/deepseek-harness/pull/514) validates a top-level entry array before caching parsed content, logs refresh failures, reapplies patches after file or Include-config edits, updates the Include config when it vetoes a restart, and uses `initial` only after `ENOENT`. These parse protections retain the running tree after an invalid file; plugin activation failures can leave a partially applied tree. Loader entry/group/tree mutations follow the pinned eager, non-transactional implementation and do not restore previous plugins or options. Covered by `packages/boot/app-boot/tests/{config-reload,user-patches}.spec.ts`.
+- **V7 · Cordis, Loader and Timer JSDoc enrichment**: added `@param`/`@returns` tags and contract documentation (disposal semantics, waterfall veto, bail conditions, error cases) across the public plugin-author surface — `Context` (class, statics, and the `Context` interface properties incl. `root`), module re-exports, shared utility helpers, `EventsService`, `Fiber`, `RegistryService`, `ReflectService`, `Service`, `LoggerService` and their `declare module './context.ts'` overloads. Loader documentation covers `loader/src/{index,internal,config/entry,config/group,config/isolate,config/tree,config/utils}.ts`, including entry ownership, tree mutation methods, and the `!!js` discriminator. The upstream `EventsService.dispatch()` deprecation annotation is omitted: DSH enumerates callbacks to contain each observer failure independently, which the typed dispatch methods do not provide. Timer retains its local class and helper summaries; its README is local documentation because the upstream package has none. Comment-only; no code changes. Motivation: the website API-reference generator renders these docs and hard-errors on undocumented members. Retire this entry when the enrichment is upstreamed to the fork.
 - **V9 · `hmr/src/index.ts` module-watcher readiness and native paths**: realpath the existing watch base, classify framework modules and attach listeners before reporting readiness, and compare config paths using both canonical and configured spellings. This preserves Node module-cache identity across Windows short-name paths and filesystem aliases. The main watcher uses `ignoreInitial: true` so startup reads do not trigger another refresh; exact profile patch watching is owned by `packages/boot/hmr/src/watch-config.ts`. Covered by `packages/boot/hmr/tests/watch-config.spec.ts`.
 - **V10 · Vendored Node-compatible TypeScript**: marked erased imports explicitly across `cordis`, `loader`, `include`, `hmr`, and `schemastery` so Node's native TypeScript transform does not request types as runtime exports. Schemastery's source uses an ESM default export and its package declares `type: module`. Conditional exports select `.mjs` for import and `.cjs` for require; without them, concurrent imports under module-hook hosts reach the CJS entry and can race its require of ESM Cosmokit (`ERR_REQUIRE_ESM_RACE_CONDITION`).
-- **V11 · Include patch and YAML exports**: `applyEntryPatches` aliases the pure `patch.ts` implementation from Cordis `v4.0.0-rc.11`, and `entryListSchema` exposes the `!!js` YAML dialect for config dumps. Include imports `patch.ts` and its `journal.ts` helpers from the rc.11 source on top of its 1.0.4 baseline; its runtime keeps the existing writer (V14).
-- **V13 · `include/src/index.ts` `writeTask` type**: widened the optional `writeTask?: NodeJS.Timeout` property to `NodeJS.Timeout | undefined` — the debounced writer assigns `undefined` on flush, which `exactOptionalPropertyTypes` rejects on a plain optional. Type-only; no behavior change.
-- **V14 · `include/src/index.ts` durable debounced writes**: serialized and tracked config-file writes, retried transient `EACCES`/`EBUSY`/`EPERM` rename failures with a bounded backoff, observed asynchronous timer rejections, and drained writes before and after child removal during Include teardown. The first drain preserves an existing terminal write failure even if child removal schedules a later write. Missing-file initialization awaits the write and forces a fresh parse before mounting the initial entries. Windows can briefly retain a destination handle after a Loader child disposes; the upstream fire-and-forget rename escaped as an unhandled rejection and could lose the persisted `disabled` state. A terminal failure is logged by the asynchronous writer and remains on the queue so `Include.stop()` rethrows it instead of silently declaring persistence complete; Cordis's ordinary fiber teardown retains its separate error-containment contract. Covered by `packages/host/directory-picker-auto/tests/loader-composition.spec.ts` with injected transient and terminal rename failures.
-- **V15 · Configuration access across Core, Loader, Include and HMR**: rc.11 Core owns raw `Fiber.config`, `internal/config(fiber, next)`, `internal/commit` and awaited `internal/update(config, next)`. Root-fiber candidate resolution remains available without a plugin schema. Local `rawConfig`, `resolveConfig(candidate)` and `effectiveConfig` accessors retain the DSH consumer API. Fiber caches the object passed to activation or a successful update that keeps the instance; candidate resolution is pure, failed or superseded updates cannot replace the cache, and volatile updates retain references. Loader resolves only entry roots and excludes Group/Include tree carriers, so nested `!!js` expressions wait for their own injections. Include retains its tree-carrier marker, writer and patches, and HMR transfers raw config through the accessors. Covered by `scripts/cordis-config-access.spec.ts`, `scripts/cordis-core-lifecycle.spec.ts` and the boot/HMR suites.
+- **V11 · Include patch and YAML exports**: `include/src/index.ts` exports upstream `applyPatches` as `applyEntryPatches` and the `!!js` YAML dialect as `entryListSchema`, so `dsh --dump-config` composes entries with the same algorithm that mounting uses. Covered by `packages/boot/app-boot/tests/config-reload.spec.ts`.
+- **V14 · Include persistence results**: `include/src/index.ts` keeps an error for unsaved journal changes. `flush()` retries pending writes and rejects while changes remain unsaved; `stop()` returns the same result and always stops the child tree; a later successful flush clears previous errors. A failed `refresh()` can also reject while runtime changes remain unsaved. Patch-owned changes route to the parent Include, so callers that need them persisted must flush that parent too. Ordinary Fiber teardown keeps its error containment. Covered by `scripts/cordis-include-journal.spec.ts` and `packages/host/directory-picker-auto/tests/loader-composition.spec.ts`.
+- **V15 · Configuration access across Core, Loader, Include and HMR**: rc.11 Core owns raw `Fiber.config`, `internal/config(fiber, next)`, `internal/commit` and awaited `internal/update(config, next)`. Root-fiber candidate resolution remains available without a plugin schema. Local `rawConfig`, `resolveConfig(candidate)` and `effectiveConfig` accessors retain the DSH consumer API. Fiber caches the object passed to activation or a successful update that keeps the instance; candidate resolution is pure, failed or superseded updates cannot replace the cache, and volatile updates retain references. Loader resolves only entry roots and excludes Group/Include tree carriers, so nested `!!js` expressions wait for their own injections. Include retains its tree-carrier marker and public patch exports, and HMR transfers raw config through the accessors. Covered by `scripts/cordis-config-access.spec.ts`, `scripts/cordis-core-lifecycle.spec.ts` and the boot/HMR suites.
 - **V16 · `cordis/package.json` publishes `src`**: added `src` to the `files` list, joining the other eight vendored packages. Cordis declares `"./src/*": "./src/*"` in its exports, so a tarball without `src` publishes an export map pointing at absent files; the release change judgement also reads `files` to decide whether a diff reaches the payload, and a package whose only published paths are build output has no tracked path to match.
 - **V17 · `@deepseek-ai` rescope**: every vendored manifest `name`, every internal dependency entry among the vendored set, and every module specifier that reaches them use the scoped names in the manifest table's `npm name` column. Directory names, version numbers, and dependency ranges are unchanged, and no upstream runtime identifier is renamed — `Symbol.for('schemastery')` and Schemastery's `vendor:` metadata field keep their upstream values. Re-apply with `pnpm run rescope-vendor --apply` after a sync; the table's two name columns are the mapping, restated for consumers in [docs/rescope.md](../docs/rescope.md).
 - **V22 · Volatile config across `cosmokit`, `schemastery`, `cordis`, and `loader`**: Cosmokit supplies immutable references and framework-owned commits; `deepEqual` treats two references as equal, propagates strict comparison into arrays, compares every array slot with holes treated as undefined, handles cycles conservatively, compares URLs by normalized href, and compares other opaque objects by identity in strict mode. Schemastery adds `.volatile()`, optional/default inference, placement validation without eager lazy-schema expansion (a lazy inner is validated once when built), metadata-free serialized node compatibility, serialized metadata, reference-aware simplification, unsupported volatile values reported as `ValidationError` with their path, and `.default()` accepting the raw input type `Partial<S>` because a volatile field makes the output type carry references. Loader's save path calls `simplify` with its schema receiver (`unparse.call`), an independent fix for the unbound-`this` call. Cordis exports consumer types without changing Fiber lifecycle. Loader compares raw options strictly in `Entry.update`; for a config-only change on an active fiber it calls the pure `equalExceptVolatile` function in `config/diff.ts`, which narrows the Standard Schema to Schemastery's `Schema` type (a new type-only `@deepseek-ai/schemastery` dependency of `loader`) and recursively skips fixed volatile paths using schema metadata without executing config hooks or validation. Missing or null object nodes compare using their declared defaults, including nodes without volatile descendants; schema backedges retain raw comparison. Entry passes its actual schema and preserves ordinary context and custom-update lifecycles. For a volatile-only change, `Entry._commitVolatile` takes the canonical fiber `entry.fiber.ctx.fiber` (`Entry.fiber` holds the registry wrapper), re-parses the raw config through `Fiber.resolveConfig()`, compares ordinary effective values, commits references and emits the instance-local `loader/volatile-update` declared in `loader/src/index.ts`; a changed ordinary effective value falls back to the ordinary remount, and an invalid candidate is logged while the raw config stays retained for the next activation. Cosmokit provides reference enumeration and commits, and `simplify` is called with its schema receiver. The package READMEs document these additions; schema tests live in `scripts/volatile-config.spec.ts`, Loader runtime and real-file tests in `scripts/loader-volatile-update.spec.ts`, and code replacement tests in the HMR module suite.
 - **V23 · `loader/src/config/entry.ts` module identity**: retains each entry's raw import result as `moduleNamespace`, before plugin export normalization. HMR matches that object to Node's cached module namespace and updates it after a successful reload. `EntryTree.import()` keeps its existing arguments and return value; `loader/README.md` documents the additive field.
 - **V24 · `timer/locale/{en,zh}.json` display metadata**: local English and Chinese titles and descriptions for the Settings plugin inventory. `timer/package.json` exports and publishes these locale resources.
-- **V25 · Loader and Include lifecycle adaptations**: before a combined context/config update, Loader refreshes dependencies locally, which prevents activation against stale isolation bindings; disabled-entry updates await disposal. Include forwards `commit(change)` reports to its existing writer, and in-memory trees use no-op commits. Failed fibers require an explicit update after correcting their input or dependencies. Core retains the effect hardening in V6; rc.11 owns dependency teardown ordering and superseded-activation handling.
+- **V25 · Loader lifecycle adaptations**: before a combined context/config update, Loader refreshes dependencies locally, which prevents activation against stale isolation bindings; disabled-entry updates await disposal. Failed fibers require an explicit update after correcting their input or dependencies. Core retains the effect hardening in V6; rc.11 owns dependency teardown ordering and superseded-activation handling.
+- **V26 · `loader/src/config/tree.ts` cross-tree move reports**: `EntryTree.update()` reports a move into another tree as a removal to the source tree and a creation, without `legacy` or `from`, to the destination tree. Upstream reports the destination as an update with `legacy`, which the Include journal records as a partial row for an id that its file does not contain. Covered by `scripts/cordis-entry-commit.spec.ts`.
 
 ### Resolver adaptations
 
diff --git a/vendor/cordis-rc11-upgrade-plan.md b/vendor/cordis-rc11-upgrade-plan.md
index eb1b601b91..7833cf3514 100644
--- a/vendor/cordis-rc11-upgrade-plan.md
+++ b/vendor/cordis-rc11-upgrade-plan.md
@@ -41,13 +41,13 @@ The identifiers below are plan labels, not GitHub issue numbers. Preconditions a
 | 3 | Upgrade Timer to 1.1.4, retaining DSH locale resources and build metadata. | 0 | Retain V24 (display metadata); no logged runtime patch retired. | Concurrent interval reads, throttle cancellation and void return types; check callers using the old Core. |
 | 4a | Upgrade Core to rc.11 with the minimum Loader, Include and HMR compatibility slice described below. | 1 | Retire V12 (activation observer), V21 (logger disposer) and, after canonical-fiber audits, V20 (Entry identity workaround). Partial V6 (lifecycle) and V15 (config model). Retain/adapt V22 and V23 (module namespace). | Config resolution, volatile identity, service isolation, dependent-before-provider teardown, retained effect regressions and application startup. |
 | 4b | Import Loader's project-relative bare-specifier resolver, runtime API detection and fallback when Node internals are absent. | 0 | Retire V19: upstream now detects the internal loader by its available APIs. | Resolve in the config project's package scope, retain subpaths, handle read-only helper creation and test Node 24's older v1 API. |
-| 4c | Complete Loader's `EntryChange` / `commit(change)` reporting and remaining changes together with upstream Include's pure patch implementation and journal helper module. Adapt the old writer and in-memory trees; keep `applyEntryPatches` and `entryListSchema` exports. | 4a, 4b | Retire V18 (`disabled` expressions). Partial V11: retire the duplicate patch algorithm and insert-index fix; retain public exports. Retain/adapt V22, including the schema receiver fix, and V23. | Create, move, remove and self-update reports; no false self-disposal writes; later patches address inserted rows; cloning and config dumps agree with mounting. The old Include writer remains active. |
+| 4c | Complete Loader's `EntryChange` / `commit(change)` reporting and remaining changes, and upgrade Include to its 1.1.1 journal implementation in the same PR. Both HMR providers keep finding Include through their existing scans; keep `applyEntryPatches` and `entryListSchema` exports and in-memory no-op commits. | 4a, 4b | Retire V18 (`disabled` expressions), V8 (old refresh implementation) and V13 (`writeTask` type). Partial V11: retire the duplicate patch algorithm and insert-index fix; retain public exports. Partial V14: replace the write queue; retain rejection while the journal contains unsaved changes. Retain/adapt V22, including the schema receiver fix, V23 and the V15 child-expression marker. | Create, move, remove and self-update reports; no false self-disposal writes; later patches address inserted rows; stable ids for anonymous entries; file/runtime conflict handling, patch-owned writes, shutdown results and nested expressions; cloning and config dumps agree with mounting. |
 | 4e | Complete vendor HMR's upgrade to 1.1.1, preserving required local path, readiness and explicit-watch behavior. | 2, 3, 4a | Partial V9: adopt upstream ordering and path handling where equivalent; retain explicit readiness and realpath gaps. Retain V1 (no YAML locale imports). | Three-stage module replacement, nested entries, disabled/removed entries, explicit watches and the existing local path cases. |
-| 4f | Upgrade Include to its journal implementation, retaining the explicit watch registration already adopted in PR 2. | 2, 4c | Retire V8 (old refresh implementation) and V13 (`writeTask` type). Partial V14: replace the write queue; decide unsaved-error reporting. Retain the remaining V11 exports and V15 child-expression marker. | File/runtime conflict handling, patch-owned writes, shutdown results, nested expressions and one coordinated refresh under either HMR provider. |
+| 4f | Register the journal Include through the explicit watch adopted in PR 2 and remove the remaining Include scans. | 2, 4c | Adapt V9's config-path matching to the journal Include. | One coordinated refresh per change under either HMR provider; profile watching unchanged. |
 
 Shared integration differences remain in every affected sync: V2 (manifests), V3 (TypeScript projects), V4/V10 (imports and Node-compatible modules), V5 (build overrides), V7 (API documentation), V16 (published Core source) and V17 (scope). Untouched packages retain them without edits. V6 only loses the stale-epoch guard already supplied upstream; its remaining ownership and cleanup guarantees stay. V15 replaces the old raw/effective-config and event implementation, but the Include child-expression behavior remains local. V22 is not upstreamed by this release, including its schema-bound `simplify` call.
 
-After PR 0, PRs 1, 2, 3 and 4b have no implementation dependency on one another. Core depends on configuration preparation; it does not depend on Timer. Loader completion and vendor HMR can proceed independently after Core. Include journal adoption depends on Loader and the complete watch migration, not on the new vendor HMR replacement algorithm; PRs 4e and 4f can merge in either order. No single GitHub stack should impose a dependency between unrelated branches. Shared files such as the vendor manifest may still require merge-conflict resolution.
+After PR 0, PRs 1, 2, 3 and 4b have no implementation dependency on one another. Core depends on configuration preparation; it does not depend on Timer. Loader completion and vendor HMR can proceed independently after Core. Include journal adoption is part of Loader completion; PR 4f only connects that Include to PR 2's explicit watches and does not depend on the new vendor HMR replacement algorithm, so PRs 4e and 4f can merge in either order. No single GitHub stack should impose a dependency between unrelated branches. Shared files such as the vendor manifest may still require merge-conflict resolution.
 
 ### Minimum Core compatibility slice
 
@@ -62,9 +62,9 @@ Module resolution, structured tree-change reporting, journal reconciliation and
 
 ### Temporary compatibility code
 
-PR 4c changes tree mutation producers to `commit(change)` while the old Include remains installed. That Include can implement `commit(change)` by invoking its existing `write()` operation; it deliberately ignores the detailed change report until the journal replaces the writer. In-memory trees, including `PresetTree`, implement a no-op commit. This avoids maintaining two mutation-reporting protocols in Loader. PR 4f deletes the Include writer adapter and old queue.
+PR 4c changes tree mutation producers to `commit(change)` and adopts the journal Include in the same PR: upstream `patch.ts` clones file and inserted entries, while the old Include relied on sharing entry objects with the running tree for its cached data and generated ids. In-memory trees, including `PresetTree`, implement a no-op commit. Until PR 4f, both HMR providers find the journal Include through their existing scans and call its `refresh()`.
 
-PR 4c imports `patch.ts` together with its `journal.ts` helpers and their Loader `EntryChange` dependency, even though Include does not start runtime journaling yet. The public patch export may remain an alias; it must not retain a second algorithm. Every temporary divergence has an owning introduction PR and a named removal PR. No runtime version detection or second Core event protocol is planned.
+The public patch export may remain an alias; it must not retain a second algorithm. Every temporary divergence has an owning introduction PR and a named removal PR. No runtime version detection or second Core event protocol is planned.
 
 PR 2 moves Include refresh ownership in one step: both HMR providers expose `watch()`, the existing Include registers its callback, and both providers stop their equivalent Include scans. The upstream HMR source no longer performs that scan, so importing it before migrating the Include consumer would lose config refresh. Moving the complete watch concern first avoids a temporary scan adapter and makes the later module-replacement and persistence decisions independent.
 
@@ -73,8 +73,8 @@ PR 2 moves Include refresh ownership in one step: both HMR providers expose `wat
 | Decision | Owning PR | Proposal and unresolved choice |
 |---|---|---|
 | Active effective config | 1, 4a | Store or expose the object actually supplied to the current instance. Resolving a candidate through `internal/config` must not overwrite it. Decide the publication point and invalidation rules before switching Core; a WeakMap alone does not establish those rules. |
-| Persistence outcome | 4f | Prefer the journal's retry and reconciliation mechanism. Decide how explicit callers observe modifications still unsaved at shutdown. Do not require a historical failure to remain fatal after a successful retry merely because the old test expects it. |
-| Nested config interpolation | 4a, 4f | Preserve child-owned expression evaluation. Keep the existing Include marker initially; any refinement that permits interpolation of Include's own fields while excluding child lists is a separate behavior change. |
+| Persistence outcome | 4c | Use the journal's retry and reconciliation mechanism. Explicit `flush()` and `stop()` reject while changes remain unsaved; later successful retries clear previous errors. Keep this local adaptation minimal. |
+| Nested config interpolation | 4a, 4c | Preserve child-owned expression evaluation. Keep the existing Include marker initially; any refinement that permits interpolation of Include's own fields while excluding child lists is a separate behavior change. |
 | HMR replacement failure | 4e | Adopt upstream behavior for vendor HMR. Preserve DSH HMR's current source-reload rollback policy in this series; replacing that policy requires its own proposal and tests. |
 | Effect cleanup guarantees | 4a | Retain guarantees not supplied by rc.11. Further upstreaming or retirement is separate work, not a prerequisite for reaching the release baseline. |
 
diff --git a/vendor/include/README.md b/vendor/include/README.md
index d669bf6736..2d9db4965f 100644
--- a/vendor/include/README.md
+++ b/vendor/include/README.md
@@ -46,4 +46,6 @@ Patches can insert entries or override fields on entries with a matching `id`.
 
 `applyEntryPatches(data, patches, warn)` uses the same upstream algorithm as mounting. It clones file entries even without patches and clones inserted entry lists before indexing them, so later patches can address inserted rows without mutating those input lists. `entryListSchema` exposes Include’s YAML dialect to configuration tools. Nested entry expressions remain literal until their owning Loader entry evaluates them.
 
-Tree mutations arrive through `commit(change)` and schedule the existing debounced writer. The imported journal helpers support patch ownership; runtime file reconciliation still uses `refresh()` and the existing write queue.
+Tree mutations arrive through `commit(change)` and enter a journal. Include merges them with the latest file before writing; file edits win conflicts on the same fields and produce a diagnostic. Patch-owned fields and inserted entries update the parent Include’s patches instead of the included file. Invalid, missing or read-only files leave unsaved changes in memory.
+
+`flush()` waits for this Include’s pending file operations and tree reconciliation, retries outstanding writes, and rejects if changes remain unsaved. Successful persistence clears previous errors. `refresh()` rereads the file and exposes the same completion result. To persist patch-owned changes, flush the child and then its parent. `stop()` makes a final attempt and always stops child entries, even when it rejects; ordinary Fiber disposal still contains cleanup errors. File writes use an atomic rename with bounded retries for transient destination locks.
diff --git a/vendor/include/src/index.ts b/vendor/include/src/index.ts
index dd6a86fa21..5dd86d50ec 100644
--- a/vendor/include/src/index.ts
+++ b/vendor/include/src/index.ts
@@ -1,11 +1,17 @@
-import { EntryGroup, EntryTree, isJsExpr, type EntryChange, type EntryOptions } from '@deepseek-ai/cordis-plugin-loader'
+import { type EntryChange, type EntryOptions, EntryTree, EntryGroup, isJsExpr } from '@deepseek-ai/cordis-plugin-loader'
 import { Context, Service } from '@deepseek-ai/cordis'
-import { extname } from 'node:path'
-import { access, constants, readFile, rename, writeFile } from 'node:fs/promises'
-import { setTimeout as delay } from 'node:timers/promises'
+import { deepEqual } from '@deepseek-ai/cosmokit'
+import { basename, dirname, extname, join } from 'node:path'
+import { access, constants, readFile, rename, rm, writeFile } from 'node:fs/promises'
+import { setTimeout as sleep } from 'node:timers/promises'
 import { fileURLToPath, pathToFileURL } from 'node:url'
 import * as yaml from 'js-yaml'
-import { applyPatches, type PatchOptions } from './patch.ts'
+import { applyJournal, flatten, type Journal, merge, reconcile, record } from './journal.ts'
+import { applyPatches, ensureIds, ensureInsertIds, PatchIndex, type PatchOptions, routeJournal } from './patch.ts'
+/** Shared patch semantics used by config dumps and mounting. */
+export { applyPatches as applyEntryPatches } from './patch.ts'
+/** Serialized entry patch options. */
+export type { PatchOptions } from './patch.ts'
 
 const JsExpr = new yaml.Type('tag:yaml.org,2002:js', {
   kind: 'scalar',
@@ -15,235 +21,444 @@ const JsExpr = new yaml.Type('tag:yaml.org,2002:js', {
   represent: (data) => data['__jsExpr'],
 })
 
-/**
- * The entry-list YAML dialect: `!!js` scalars round-trip as expression nodes
- * the Loader evaluates at entry activation. Exported so config tooling
- * (`dsh --dump-config`) parses and prints exactly the dialect this include
- * mounts.
- */
+/** YAML dialect preserving child-owned JavaScript expression nodes. */
 export const entryListSchema = yaml.JSON_SCHEMA.extend(JsExpr)
-
 const schema = entryListSchema
 
-const writable: Record<string, string> = {
+const types: Record<string, string> = {
   '.json': 'application/json',
   '.yaml': 'application/yaml',
   '.yml': 'application/yaml',
 }
 
-const supported = new Set(Object.keys(writable))
+type ConfigStage = 'read' | 'parse' | 'validate'
 
-const WRITE_RETRY_LIMIT = 10
-const WRITE_RETRY_DELAY_MS = 50
-
-function retryableWriteError(error: unknown): boolean {
-  const code = (error as NodeJS.ErrnoException | null)?.code
-  return code === 'EACCES' || code === 'EBUSY' || code === 'EPERM'
+interface Snapshot {
+  content: string
+  data: EntryOptions[]
 }
 
-/** Apply the upstream patch algorithm to detached entry data for mounting or config dumps. */
-export { applyPatches as applyEntryPatches } from './patch.ts'
-/** Serialized entry patch options. */
-export type { PatchOptions } from './patch.ts'
+export class ConfigFileError extends Error {
+  name = 'ConfigFileError'
+
+  constructor(public stage: ConfigStage, path: string, cause: unknown) {
+    super(`failed to ${stage} config file ${path}`, { cause })
+  }
+}
+
+/** The file changed under us between the pre-check and the rename. */
+class StaleWriteError extends Error {
+  name = 'StaleWriteError'
+}
+
+interface Anonymous {
+  parent: string | null
+  options: EntryOptions
+}
+
+function isENOENT(error: unknown) {
+  return (error as NodeJS.ErrnoException | undefined)?.code === 'ENOENT'
+}
+
+const RENAME_RETRIES = 10
+const RENAME_BACKOFF = 20
+
+/**
+ * On Windows a rename over a file that another process holds open (typically
+ * an antivirus scanning what we just wrote) fails with one of these; the lock
+ * is normally gone within milliseconds. A bounded retry is cheap enough to
+ * apply on every platform.
+ */
+function isTransientRenameError(error: unknown) {
+  const code = (error as NodeJS.ErrnoException | undefined)?.code
+  return code === 'EACCES' || code === 'EPERM' || code === 'EBUSY'
+}
 
-/** Config namespace for the file-backed include loader. */
 export namespace Include {
-  /** Config for a file-backed loader subtree. */
   export interface Config {
-    /** YAML or JSON path resolved from `ctx.baseUrl`. */
     path: string
-    /** Entry list written when the file does not already exist. */
     initial?: any[]
-    /** Runtime patches applied after reading the file. */
     patches?: PatchOptions[]
-    /** Enables loader apply/reload/unload logs for this subtree. */
     enableLogs?: boolean
   }
 }
 
-/** Loader entry tree backed by a YAML or JSON file. */
 export class Include extends EntryTree {
   static inject = ['loader']
 
-  // Tree-carrier marker (the Group plugin declares the same): this config is
-  // entry and patch lists, so the Loader's `internal/config` interpolation
-  // keeps it literal — a `!!js` expression inside a nested row's config
-  // belongs to that row's fiber, resolving lazily in the row's own context.
-  // Include's own fields (`path`, `enableLogs`) therefore stay literal too.
+  // Child entries evaluate their expressions against their own injections.
   static readonly [EntryGroup.key] = true
 
   public filename: string
-  private type?: string
-  private readonly: boolean
-  private content?: string
-  private data?: EntryOptions[]
-  private writeTask?: NodeJS.Timeout | undefined
-  private pendingWrite?: EntryOptions[]
-  private writeQueue: Promise<void> = Promise.resolve()
+  private type: string
+
+  /** The last file state we read or wrote. */
+  private cache?: Snapshot
+  /** Tree-side changes that have not reached the file yet. */
+  private journal: Journal = new Map()
+  /** Ids we assigned to entries the file leaves anonymous. */
+  private anonymous = new Map<string, Anonymous>()
+
+  private dirtyRead = false
+  private dirtyWrite = false
+  private _draining?: Promise<void>
+
+  /** Only the latest intended tree is ever applied; older ones are skipped. */
+  private _pendingTree?: EntryOptions[]
+  private _applyTask?: Promise<void>
+
+  private _disposed = false
+  private _seq = 0
+  private persistenceError: unknown
 
   constructor(ctx: Context, public config: Include.Config) {
     super(ctx)
     this.enableLogs = config.enableLogs ?? ctx.fiber.entry?.parent.tree.enableLogs ?? false
     this.filename = fileURLToPath(new URL(this.config.path, this.ctx.baseUrl))
     const ext = extname(this.filename)
-    if (!supported.has(ext)) {
+    if (!types[ext]) {
       throw new Error(`extension "${ext}" not supported`)
     }
-    this.type = writable[ext]
-    this.readonly = !this.type
+    this.type = types[ext]
     this.ctx.baseUrl = new URL('.', pathToFileURL(this.filename)).href
+    ensureInsertIds(config.patches, id => !!this.store[id])
 
     ctx.on('internal/update', (config, next) => {
       if (config.path !== this.config.path) return next()
       this.config = config
-      return this.root.update(this.applyPatches(this.data!, config.patches)).catch((error) => {
-        this.ctx.logger.warn('config update at %C failed', this.filename)
-        this.ctx.logger.warn(error)
-      })
+      ensureInsertIds(config.patches, id => !!this.store[id])
+      this._scheduleApply()
+      return this._applyTask
     })
   }
 
-  private async checkAccess() {
-    if (!this.type) return
-    try {
-      await access(this.filename, constants.W_OK)
-    } catch {
-      this.readonly = true
-    }
-  }
-
-  private async read(forced = false) {
-    const content = await readFile(this.filename, 'utf8')
-    if (!forced && this.content === content) return false
-    let data: any
-    if (this.type === 'application/yaml') {
-      data = yaml.load(content, { schema: entryListSchema })
-    } else if (this.type === 'application/json') {
-      data = JSON.parse(content)
-    } else {
-      const module = await import(/* @vite-ignore */ this.filename)
-      data = module.default || module
-    }
-    // An empty or truncated file (common mid-edit: editors and `sed -i` write
-    // through temp states) parses to `undefined`, not an error; reject every
-    // non-array shape here so callers see one "invalid file" signal. Content
-    // and data commit only on success, so an edit that is later reverted to
-    // the exact last good content correctly reads as "unchanged".
-    if (!Array.isArray(data)) {
-      throw new TypeError(`config file must be a top-level array of entries: ${this.filename}`)
-    }
-    this.content = content
-    this.data = data
-    await this.checkAccess()
-    return true
-  }
-
-  private applyPatches(data: EntryOptions[], patches = this.config.patches): EntryOptions[] {
-    return applyPatches(data, patches, (message, ...args) => {
-      this.ctx.root.logger?.('loader').warn(message, ...args)
-    })
+  private warn = (format: string, ...args: any[]) => {
+    this.ctx.root.logger?.('loader').warn(format, ...args)
   }
 
   async* [Service.init]() {
     try {
-      await this.read()
+      await this._read()
     } catch (error) {
-      // Only a missing file falls back to `initial` (or the not-found error):
-      // an existing-but-invalid file must fail loud with its real parse error,
-      // never be mislabelled as absent or silently overwritten.
-      if ((error as NodeJS.ErrnoException | null)?.code !== 'ENOENT') throw error
-      if (this.config.initial) {
-        await this._writeFile(this.config.initial as any)
-        await this.read(true)
-      } else {
+      // only a missing file falls back to `initial`
+      const cause = error instanceof ConfigFileError && error.stage === 'read' ? error.cause : undefined
+      if (!isENOENT(cause)) throw error
+      if (!this.config.initial) {
         throw new Error(`config file not found: ${this.filename}`)
       }
+      const initial = structuredClone(this.config.initial) as EntryOptions[]
+      ensureIds(initial, id => !!this.store[id])
+      await this._writeText(this.dump(initial))
+      await this._read()
     }
 
     yield () => this.stop()
-    await this.root.update(this.applyPatches(this.data!))
+    await this._applyTask
   }
 
   async stop() {
+    this._disposed = true
+    this._pendingTree = undefined
+    // Flush what the user last did before the tree goes away; this is also the
+    // last attempt for changes a failed write left in the journal.
+    if (this.journal.size) {
+      this.dirtyWrite = true
+      this._drain()
+    }
     try {
-      await this.flushWrite()
+      await this.flush()
     } finally {
       this.root.stop()
-      await this.flushWrite()
     }
   }
 
   /**
-   * Re-read the file and refresh child entries when content changed. An
-   * unreadable or unparsable file logs a warning and keeps the last good
-   * tree: a hot-reload of a live app must never take the process down.
+   * Resolves once every pending read and write has been processed and the
+   * tree reflects the outcome. Retries pending writes and rejects while changes remain unsaved.
    */
-  async refresh() {
-    try {
-      if (!await this.read()) return
-      await this.root.update(this.applyPatches(this.data!))
-    } catch (error) {
-      this.ctx.logger.warn('config reload at %C failed; keeping the running tree', this.filename)
-      this.ctx.logger.warn(error)
+  async flush() {
+    if (this.journal.size && !this._draining) {
+      this.dirtyWrite = true
+      this._drain()
     }
+    while (this._draining || this._applyTask) {
+      await this._draining
+      await this._applyTask
+    }
+    if (this.journal.size) {
+      throw this.persistenceError ?? new Error(`config file ${this.filename} has ${this.journal.size} unsaved change(s)`)
+    }
+    this.persistenceError = undefined
   }
 
-  private async _writeFile(config: EntryOptions[]) {
-    if (this.readonly) {
-      throw new Error(`cannot overwrite readonly config`)
-    }
-    if (this.type === 'application/yaml') {
-      this.content = yaml.dump(config, { schema })
-    } else if (this.type === 'application/json') {
-      this.content = JSON.stringify(config, null, 2)
-    }
-    await writeFile(this.filename + '.tmp', this.content!)
-    for (let retry = 0; ; retry++) {
-      try {
-        await rename(this.filename + '.tmp', this.filename)
-        return
-      } catch (error) {
-        if (!retryableWriteError(error) || retry >= WRITE_RETRY_LIMIT) throw error
-        await delay((retry + 1) * WRITE_RETRY_DELAY_MS)
+  /** Re-read the file and reconcile the tree with it. */
+  refresh() {
+    this.dirtyRead = true
+    this._drain()
+    return this.flush()
+  }
+
+  /** Called synchronously by the loader once a tree-side change is in place. */
+  commit(change: EntryChange) {
+    this.context.emit('loader/config-update')
+    const parent = change.group === this.root ? null : change.group.ctx.fiber.entry!.options.id
+    record(this.journal, change, parent)
+    this.dirtyWrite = true
+    this._drain()
+  }
+
+  private _drain() {
+    if (this._draining) return
+    this._draining = this._loop().finally(() => {
+      this._draining = undefined
+    })
+  }
+
+  private async _loop() {
+    while (this.dirtyRead || this.dirtyWrite) {
+      if (this.dirtyRead) {
+        this.dirtyRead = false
+        try {
+          await this._read()
+        } catch (error) {
+          // Half-written files are routine while the user is editing, hence
+          // only a warning. With the file in an unknown state there is nothing
+          // safe to write: unless another read is due, stop here and leave
+          // `dirtyWrite` set for the next trigger.
+          this.persistenceError = error
+          this.ctx.logger.warn(error)
+          if (this.dirtyRead) continue
+          return
+        }
+      }
+      if (this.dirtyWrite) {
+        this.dirtyWrite = false
+        try {
+          await this._write()
+        } catch (error) {
+          this.persistenceError = error
+          this.ctx.logger.error(error)
+        }
       }
     }
   }
 
-  private writeFile(config: EntryOptions[]) {
-    clearTimeout(this.writeTask)
-    this.pendingWrite = config
-    this.writeTask = setTimeout(() => {
-      void this.flushWrite()
-    }, 0)
+  private async _read() {
+    let content: string
+    try {
+      content = await readFile(this.filename, 'utf8')
+    } catch (error) {
+      throw new ConfigFileError('read', this.filename, error)
+    }
+    if (content === this.cache?.content) return
+
+    let data: any
+    try {
+      data = this.type === 'application/yaml'
+        ? yaml.load(content, { schema })
+        : JSON.parse(content)
+    } catch (error) {
+      throw new ConfigFileError('parse', this.filename, error)
+    }
+    // An empty or truncated file (routine mid-edit) parses to `undefined`, so
+    // every non-array shape is rejected here as one "invalid file" signal.
+    if (!Array.isArray(data)) {
+      throw new ConfigFileError('validate', this.filename, new TypeError('config file must be a top-level array'))
+    }
+
+    this._assignIds(data)
+
+    if (this.cache) {
+      const index = new PatchIndex(this.config.patches ?? [])
+      const conflicts = reconcile(this.journal, flatten(this.cache.data), flatten(data), (id, key) => index.fileOwned(id, key))
+      for (const { id, reason } of conflicts) {
+        this.ctx.logger.error('config conflict in %C: entry %C %s; file wins', this.filename, id, reason)
+      }
+    }
+
+    this.cache = { content, data }
+    this._scheduleApply()
+    // the file changed while tree-side changes were pending: write the merge
+    if (this.journal.size) this.dirtyWrite = true
   }
 
-  private flushWrite(): Promise<void> {
-    clearTimeout(this.writeTask)
-    this.writeTask = undefined
-    const config = this.pendingWrite
-    this.pendingWrite = undefined
-    if (config === undefined) return this.writeQueue
-    const run = this.writeQueue.then(
-      () => this._writeFile(config),
-      () => this._writeFile(config),
-    )
-    this.writeQueue = run
-    void run.catch((error) => {
-      this.ctx.root.logger?.('loader').warn('failed to write config file %C', this.filename)
-      this.ctx.root.logger?.('loader').warn(error)
+  private async _write() {
+    if (!this.cache || !this.journal.size) return
+    const current = await readFile(this.filename, 'utf8').catch((error) => {
+      if (isENOENT(error)) return undefined
+      throw error
     })
-    return run
+    if (current === undefined) {
+      this.ctx.logger.warn('config file %C is missing, %d pending change(s) kept in memory', this.filename, this.journal.size)
+      return
+    }
+    if (current !== this.cache.content) {
+      // someone else wrote the file: merge first, then come back
+      this.dirtyRead = true
+      this.dirtyWrite = true
+      return
+    }
+
+    // Snapshot and swap: changes reported while we are writing belong to the
+    // next round.
+    const batch = this.journal
+    this.journal = new Map()
+    const restore = () => {
+      for (const [id, record] of this.journal) merge(batch, id, record)
+      this.journal = batch
+    }
+
+    const data = structuredClone(this.cache.data)
+    const patches = structuredClone(this.config.patches ?? [])
+    if (routeJournal(batch, data, patches, this.warn)) {
+      // Take the new patches now so that the tree scheduled below already
+      // reflects them; the round trip through the parent only persists them.
+      this.config = { ...this.config, patches }
+      if (this.ctx.fiber.entry) {
+        // Not awaited: the returned promise is the tree reconciliation, and
+        // the drain loop must not block on fibers.
+        try {
+          Promise.resolve(this.ctx.fiber.update(this.config)).catch((error) => {
+            this.ctx.logger.error(error)
+          })
+        } catch (error) {
+          this.ctx.logger.error(error)
+        }
+      } else {
+        this.ctx.logger.warn('patches of %C changed at runtime but cannot be persisted', this.filename)
+      }
+    }
+
+    // nothing for the file itself (patch-only changes, or ids we assigned to
+    // anonymous entries that are already part of the cache)
+    if (deepEqual(data, this.cache.data)) {
+      this._scheduleApply()
+      return
+    }
+    const text = this.dump(data)
+
+    try {
+      await access(this.filename, constants.W_OK)
+    } catch {
+      restore()
+      this.ctx.logger.warn('config file %C is read-only, %d pending change(s) kept in memory', this.filename, this.journal.size)
+      return
+    }
+
+    try {
+      await this._writeText(text, this.cache.content)
+    } catch (error) {
+      restore()
+      if (error instanceof StaleWriteError) {
+        this.dirtyRead = true
+        this.dirtyWrite = true
+        return
+      }
+      this.ctx.logger.warn('failed to write config file %C, %d pending change(s) kept in memory', this.filename, this.journal.size)
+      throw error
+    }
+    this.cache = { content: text, data }
+    this._scheduleApply()
   }
 
-  /** Forward tree mutations to the debounced writer until journal adoption. */
-  commit(_change: EntryChange) {
-    this.write()
+  /**
+   * Write through a temp file and a rename, so that no reader ever sees a
+   * truncated file. When `expected` is given, the rename (and every retry of
+   * it) only goes ahead while the file still holds that content.
+   */
+  private async _writeText(text: string, expected?: string) {
+    const tmp = join(dirname(this.filename), `.${basename(this.filename)}.${process.pid}.${this._seq++}.tmp`)
+    try {
+      await writeFile(tmp, text)
+      for (let attempt = 0; ; attempt++) {
+        if (expected !== undefined) {
+          const current = await readFile(this.filename, 'utf8').catch((error) => {
+            if (isENOENT(error)) return undefined
+            throw error
+          })
+          if (current !== expected) throw new StaleWriteError()
+        }
+        try {
+          await rename(tmp, this.filename)
+          return
+        } catch (error) {
+          if (attempt >= RENAME_RETRIES || !isTransientRenameError(error)) throw error
+        }
+        await sleep(RENAME_BACKOFF * (attempt + 1))
+      }
+    } catch (error) {
+      await rm(tmp, { force: true }).catch(() => {})
+      throw error
+    }
   }
 
-  /** Schedule a write of the current root entry data. */
-  write() {
-    this.context.emit('loader/config-update')
-    return this.writeFile(this.root.data)
+  private dump(data: EntryOptions[]) {
+    return this.type === 'application/yaml'
+      ? yaml.dump(data, { schema })
+      : JSON.stringify(data, null, 2)
+  }
+
+  /**
+   * Entries the file leaves anonymous get an id here, before the loader sees
+   * them. One that looks exactly like an entry we named on the previous read
+   * keeps that id, so editing a neighbor does not restart it; anything else
+   * gets a fresh id. Assigned ids stay in memory until the next write.
+   */
+  private _assignIds(data: EntryOptions[]) {
+    const used = new Set<string>()
+    const pending: { options: EntryOptions; parent: string | null }[] = []
+    const walk = (entries: EntryOptions[], parent: string | null) => {
+      for (const options of entries) {
+        if (options.id) {
+          used.add(options.id)
+        } else {
+          pending.push({ options, parent })
+        }
+        if (options.group && Array.isArray(options.config)) {
+          walk(options.config, options.id ?? null)
+        }
+      }
+    }
+    walk(data, null)
+
+    const previous = this.anonymous
+    this.anonymous = new Map()
+    for (const { options, parent } of pending) {
+      let id: string | undefined
+      for (const [candidate, info] of previous) {
+        if (info.parent !== parent || !deepEqual(info.options, options)) continue
+        id = candidate
+        previous.delete(candidate)
+        break
+      }
+      if (!id) {
+        do {
+          id = Math.random().toString(16).slice(2, 10)
+        } while (used.has(id) || this.store[id])
+      }
+      used.add(id)
+      this.anonymous.set(id, { parent, options: structuredClone(options) })
+      const rest = { ...options }
+      for (const key of Object.keys(options)) delete options[key]
+      Object.assign(options, { id }, rest)
+    }
+  }
+
+  private _scheduleApply() {
+    if (this._disposed || !this.cache) return
+    const tree = applyPatches(this.cache.data, this.config.patches, this.warn)
+    this._pendingTree = applyJournal(tree, this.journal, undefined, this.warn)
+    this._applyTask ??= (async () => {
+      try {
+        while (this._pendingTree) {
+          const tree = this._pendingTree
+          this._pendingTree = undefined
+          await this.root.update(tree)
+        }
+      } finally {
+        this._applyTask = undefined
+      }
+    })()
   }
 }
 
diff --git a/vendor/loader/README.md b/vendor/loader/README.md
index 038eaa844b..ae7e82a6f2 100644
--- a/vendor/loader/README.md
+++ b/vendor/loader/README.md
@@ -64,8 +64,8 @@ Node module internals are classified by their available APIs, including the v1 A
 
 ## Update completion
 
-Entry updates await `loader/patch-context`, the Fiber update waterfall and disabled-entry disposal. Combined context/config changes refresh required bindings before restarting. Group and Include updates expose completion of their child updates; file persistence still follows Include’s debounced writer.
+Entry updates await `loader/patch-context`, the Fiber update waterfall and disabled-entry disposal. Combined context/config changes refresh required bindings before restarting. Group and Include updates expose completion of their child updates; file persistence completes through Include’s `flush()`.
 
 ## Tree mutation reports
 
-`EntryTree.commit(change)` receives each programmatic mutation synchronously after options and group membership change. A missing `legacy` means creation; missing `options` means removal. Updates carry both, with `from` naming the previous group after a move. Explicit Fiber saves report their simplified configuration. File-driven reconciliation, parent teardown and Loader removal do not produce spurious self-disable reports. In-memory trees implement a no-op; the existing Include writer persists the current tree. Entry ids cannot contain `:`, which separates nested tree paths.
+`EntryTree.commit(change)` receives each mutation made through `EntryTree` methods synchronously after options and group membership change; file-driven `EntryGroup` reconciliation does not report. A missing `legacy` means creation; missing `options` means removal. Updates carry both, with `from` naming the previous group after a move within the tree; a move into another tree reports a removal to the source tree and a creation to the destination tree. Explicit Fiber saves report their simplified configuration. File-driven reconciliation, parent teardown and Loader removal do not produce spurious self-disable reports. In-memory trees implement a no-op; Include journals the reports and reconciles them with file edits. Entry ids cannot contain `:`, which separates nested tree paths.
diff --git a/vendor/loader/src/config/tree.ts b/vendor/loader/src/config/tree.ts
index 34a2b1c731..2d99fb68d8 100644
--- a/vendor/loader/src/config/tree.ts
+++ b/vendor/loader/src/config/tree.ts
@@ -11,7 +11,13 @@ import { createResolve } from '../resolve.ts'
  * - `options` absent: the entry was removed from `group`.
  * - `legacy` absent: the entry was created in `group`.
  * - both present: the entry was updated and now lives in `group`; `from` is
- *   the group it left if the update moved it.
+ *   the group it left if the update moved it within the same tree. A move to
+ *   another tree reports a removal to the source tree and a creation to the
+ *   destination tree.
+ *
+ * `id` is local to the receiving tree; `Entry.id` prefixes it with the parent
+ * tree's path. Only `EntryTree` mutation methods and explicit Fiber saves
+ * report changes; file-driven `EntryGroup` reconciliation does not.
  */
 export interface EntryChange {
   id: string
@@ -66,6 +72,12 @@ export abstract class EntryTree {
     }
   }
 
+  /**
+   * Assign a random tree-local id when `options.id` is absent.
+   * @param options - Entry options; a generated id is written to `options.id`.
+   * @returns The existing or generated id.
+   * @throws When an explicit id contains `EntryTree.sep`, which separates nested tree paths.
+   */
   ensureId(options: Partial<EntryOptions>) {
     if (!options.id) {
       do {
@@ -132,6 +144,9 @@ export abstract class EntryTree {
     const task = entry.update(options, false, true)
     if (entry.parent.tree !== source.tree) {
       source.tree.commit({ id: legacy.id, group: source, legacy })
+      // The destination tree has no previous row, so it receives a creation.
+      entry.parent.tree.commit({ id: legacy.id, group: entry.parent, options: entry.options })
+      return task
     }
     const from = entry.parent === source ? undefined : source
     entry.parent.tree.commit({ id: legacy.id, group: entry.parent, from, options: entry.options, legacy })

From eef0b3e688c8edfd9da2ce60c7280637f0cbe5c7 Mon Sep 17 00:00:00 2001
From: Shigma <shigma10826@gmail.com>
Date: Wed, 28 Oct 2026 19:40:56 +0800
Subject: [PATCH 06/32] docs(upgrade-guide): cover Loader entry tree reports
 and Include journal

---
 .../cordis-loader-entry-trees/guide.i18n.yaml | 16 ++++++++++++
 .../cordis-loader-entry-trees/guide.md        | 25 +++++++++++++++++++
 .../cordis-loader-entry-trees/guide.zh.md     | 25 +++++++++++++++++++
 3 files changed, 66 insertions(+)
 create mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.i18n.yaml
 create mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.md
 create mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.zh.md

diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.i18n.yaml b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.i18n.yaml
new file mode 100644
index 0000000000..763bc61176
--- /dev/null
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.i18n.yaml
@@ -0,0 +1,16 @@
+# Bilingual-pair consistency record for guide.md (docs/i18n/README.md): per heading
+# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
+# After editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.md
+/:
+  en: 4b668dd74d0315b9
+  zh: a1885d2bbb4ef33e
+/loader-entry-tree-reports-and-include-persistence:
+  en: dc27815908c90cd9
+  zh: e9cc077d4d3fdbec
+/loader-entry-tree-reports-and-include-persistence/change:
+  en: 2436912b9554b6dd
+  zh: ff4582ebc4672662
+/loader-entry-tree-reports-and-include-persistence/migration:
+  en: cd7db13e17bfd339
+  zh: be43c51c78e55439
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.md b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.md
new file mode 100644
index 0000000000..764cc06772
--- /dev/null
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.md
@@ -0,0 +1,25 @@
+---
+kind: upgrade-guide
+description: "Loader entry trees report mutations through commit(change), reject ids containing a colon, and Include persists them through a journal."
+---
+
+# Loader entry tree reports and Include persistence
+
+English | [中文](guide.zh.md)
+
+## Change
+
+`@deepseek-ai/cordis-plugin-loader` follows Loader 1.0.0-rc.8, and `@deepseek-ai/cordis-plugin-include` follows Include 1.1.1. This affects `cordis.yml` and patch files, code that subclasses `EntryTree`, and code that calls `applyEntryPatches` or relies on Include writes.
+
+- `EntryTree.write()` is removed. Subclasses implement `commit(change: EntryChange)`, which receives each create, update, move, removal and explicit Fiber save synchronously. In-memory trees implement a no-op.
+- An entry `id` containing `:` is rejected, because `:` separates nested tree paths. A configured row such as `id: foo:bar` previously mounted; it is now logged as an error and skipped, and a programmatic `create()` throws.
+- `applyEntryPatches(data, patches, warn)` always returns cloned entries, including without patches, and clones inserted rows. Callers can no longer mutate the input through the result.
+- Include persists runtime changes through a journal reconciled with the latest file. File edits win conflicting fields and are logged as conflicts. Changes to patch-owned fields and inserted rows update the parent Include's patches. `flush()` waits for pending writes and rejects while changes remain unsaved; `refresh()` and `stop()` return the same result.
+
+## Migration
+
+1. Rename entry ids that contain `:` in `cordis.yml`, profile patches and `--patch` overlays, for example `foo:bar` to `foo-bar`, and update patches that address them.
+2. In `EntryTree` subclasses, replace `write()` with `commit(change)`. Persist from `change.options` and `change.legacy`: a missing `legacy` is a creation and a missing `options` is a removal.
+3. Treat the `applyEntryPatches` result as the only copy to modify.
+4. Where code needs a runtime change on disk, await `include.flush()`; for patch-owned changes, flush the child Include and then its parent.
+5. Start the application and confirm that no `entry id must not contain ":"` errors are logged and that runtime edits appear in the configuration file after `flush()`.
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.zh.md b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.zh.md
new file mode 100644
index 0000000000..74cd3f6ec4
--- /dev/null
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.zh.md
@@ -0,0 +1,25 @@
+---
+kind: upgrade-guide
+description: "Loader 条目树通过 commit(change) 报告变更并拒绝含冒号的 id，Include 通过 journal 持久化这些变更。"
+---
+
+# Loader 条目树变更报告与 Include 持久化
+
+[English](guide.md) | 中文
+
+## 变更
+
+`@deepseek-ai/cordis-plugin-loader` 跟随 Loader 1.0.0-rc.8，`@deepseek-ai/cordis-plugin-include` 跟随 Include 1.1.1。受影响的是 `cordis.yml` 与 patch 文件、继承 `EntryTree` 的代码，以及调用 `applyEntryPatches` 或依赖 Include 写盘的代码。
+
+- 移除了 `EntryTree.write()`。子类改为实现 `commit(change: EntryChange)`，它会同步收到每一次创建、更新、移动、删除和显式 Fiber 保存。内存树实现为空操作。
+- 含 `:` 的条目 `id` 会被拒绝，因为 `:` 用于分隔嵌套树路径。此前 `id: foo:bar` 这样的配置行可以挂载；现在会记录一条错误并跳过该行，程序化调用 `create()` 会抛出异常。
+- `applyEntryPatches(data, patches, warn)` 总是返回克隆后的条目，没有 patch 时也一样，插入行同样会被克隆。调用方不能再通过结果修改输入。
+- Include 通过与最新文件协调的 journal 持久化运行时变更。文件编辑在字段冲突时优先，并记录为冲突。对 patch 所拥有字段和插入行的修改会写入父 Include 的 patch。`flush()` 等待待处理的写入，并在仍有未保存变更时拒绝；`refresh()` 和 `stop()` 返回相同的结果。
+
+## 迁移
+
+1. 在 `cordis.yml`、profile patch 和 `--patch` 覆盖层中重命名含 `:` 的条目 id，例如把 `foo:bar` 改为 `foo-bar`，并同步更新引用它们的 patch。
+2. 在 `EntryTree` 子类中把 `write()` 换成 `commit(change)`。根据 `change.options` 和 `change.legacy` 持久化：缺少 `legacy` 表示创建，缺少 `options` 表示删除。
+3. 只修改 `applyEntryPatches` 返回的结果。
+4. 需要运行时变更落盘时，await `include.flush()`；对于 patch 所拥有的变更，先 flush 子 Include，再 flush 其父 Include。
+5. 启动应用，确认没有记录 `entry id must not contain ":"` 错误，并且 `flush()` 之后运行时编辑已出现在配置文件中。

From 9a26b453c383762c2901ca778ff1853bfb74da36 Mon Sep 17 00:00:00 2001
From: Shigma <shigma10826@gmail.com>
Date: Thu, 29 Oct 2026 01:50:09 +0800
Subject: [PATCH 07/32] fix(cordis): accept colon-containing entry ids used by
 generated bundles

---
 .../cordis-loader-entry-trees/guide.i18n.yaml        | 12 ++++++------
 .../cordis-loader-entry-trees/guide.md               | 12 +++++-------
 .../cordis-loader-entry-trees/guide.zh.md            | 12 +++++-------
 scripts/cordis-entry-commit.spec.ts                  | 10 ++++++----
 vendor/README.md                                     |  3 ++-
 vendor/loader/README.md                              |  2 +-
 vendor/loader/src/config/tree.ts                     |  7 +++----
 7 files changed, 28 insertions(+), 30 deletions(-)

diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.i18n.yaml b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.i18n.yaml
index 763bc61176..81fc6c8fac 100644
--- a/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.i18n.yaml
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.i18n.yaml
@@ -3,14 +3,14 @@
 # After editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.md
 /:
-  en: 4b668dd74d0315b9
-  zh: a1885d2bbb4ef33e
+  en: 02dfa517303f3206
+  zh: abf9a22603299cc7
 /loader-entry-tree-reports-and-include-persistence:
   en: dc27815908c90cd9
   zh: e9cc077d4d3fdbec
 /loader-entry-tree-reports-and-include-persistence/change:
-  en: 2436912b9554b6dd
-  zh: ff4582ebc4672662
+  en: 6ada19e725d5c04e
+  zh: efbc6183cfd094e1
 /loader-entry-tree-reports-and-include-persistence/migration:
-  en: cd7db13e17bfd339
-  zh: be43c51c78e55439
+  en: 574f30ad53da1e66
+  zh: 1b9914c4ead412f7
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.md b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.md
index 764cc06772..566d87df9b 100644
--- a/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.md
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.md
@@ -1,6 +1,6 @@
 ---
 kind: upgrade-guide
-description: "Loader entry trees report mutations through commit(change), reject ids containing a colon, and Include persists them through a journal."
+description: "Loader entry trees report mutations through commit(change), and Include persists them through a journal."
 ---
 
 # Loader entry tree reports and Include persistence
@@ -12,14 +12,12 @@ English | [中文](guide.zh.md)
 `@deepseek-ai/cordis-plugin-loader` follows Loader 1.0.0-rc.8, and `@deepseek-ai/cordis-plugin-include` follows Include 1.1.1. This affects `cordis.yml` and patch files, code that subclasses `EntryTree`, and code that calls `applyEntryPatches` or relies on Include writes.
 
 - `EntryTree.write()` is removed. Subclasses implement `commit(change: EntryChange)`, which receives each create, update, move, removal and explicit Fiber save synchronously. In-memory trees implement a no-op.
-- An entry `id` containing `:` is rejected, because `:` separates nested tree paths. A configured row such as `id: foo:bar` previously mounted; it is now logged as an error and skipped, and a programmatic `create()` throws.
 - `applyEntryPatches(data, patches, warn)` always returns cloned entries, including without patches, and clones inserted rows. Callers can no longer mutate the input through the result.
 - Include persists runtime changes through a journal reconciled with the latest file. File edits win conflicting fields and are logged as conflicts. Changes to patch-owned fields and inserted rows update the parent Include's patches. `flush()` waits for pending writes and rejects while changes remain unsaved; `refresh()` and `stop()` return the same result.
 
 ## Migration
 
-1. Rename entry ids that contain `:` in `cordis.yml`, profile patches and `--patch` overlays, for example `foo:bar` to `foo-bar`, and update patches that address them.
-2. In `EntryTree` subclasses, replace `write()` with `commit(change)`. Persist from `change.options` and `change.legacy`: a missing `legacy` is a creation and a missing `options` is a removal.
-3. Treat the `applyEntryPatches` result as the only copy to modify.
-4. Where code needs a runtime change on disk, await `include.flush()`; for patch-owned changes, flush the child Include and then its parent.
-5. Start the application and confirm that no `entry id must not contain ":"` errors are logged and that runtime edits appear in the configuration file after `flush()`.
+1. In `EntryTree` subclasses, replace `write()` with `commit(change)`. Persist from `change.options` and `change.legacy`: a missing `legacy` is a creation and a missing `options` is a removal.
+2. Treat the `applyEntryPatches` result as the only copy to modify.
+3. Where code needs a runtime change on disk, await `include.flush()`; for patch-owned changes, flush the child Include and then its parent.
+4. Start the application and confirm that runtime edits appear in the configuration file after `flush()`.
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.zh.md b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.zh.md
index 74cd3f6ec4..fc38566b63 100644
--- a/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.zh.md
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.zh.md
@@ -1,6 +1,6 @@
 ---
 kind: upgrade-guide
-description: "Loader 条目树通过 commit(change) 报告变更并拒绝含冒号的 id，Include 通过 journal 持久化这些变更。"
+description: "Loader 条目树通过 commit(change) 报告变更，Include 通过 journal 持久化这些变更。"
 ---
 
 # Loader 条目树变更报告与 Include 持久化
@@ -12,14 +12,12 @@ description: "Loader 条目树通过 commit(change) 报告变更并拒绝含冒
 `@deepseek-ai/cordis-plugin-loader` 跟随 Loader 1.0.0-rc.8，`@deepseek-ai/cordis-plugin-include` 跟随 Include 1.1.1。受影响的是 `cordis.yml` 与 patch 文件、继承 `EntryTree` 的代码，以及调用 `applyEntryPatches` 或依赖 Include 写盘的代码。
 
 - 移除了 `EntryTree.write()`。子类改为实现 `commit(change: EntryChange)`，它会同步收到每一次创建、更新、移动、删除和显式 Fiber 保存。内存树实现为空操作。
-- 含 `:` 的条目 `id` 会被拒绝，因为 `:` 用于分隔嵌套树路径。此前 `id: foo:bar` 这样的配置行可以挂载；现在会记录一条错误并跳过该行，程序化调用 `create()` 会抛出异常。
 - `applyEntryPatches(data, patches, warn)` 总是返回克隆后的条目，没有 patch 时也一样，插入行同样会被克隆。调用方不能再通过结果修改输入。
 - Include 通过与最新文件协调的 journal 持久化运行时变更。文件编辑在字段冲突时优先，并记录为冲突。对 patch 所拥有字段和插入行的修改会写入父 Include 的 patch。`flush()` 等待待处理的写入，并在仍有未保存变更时拒绝；`refresh()` 和 `stop()` 返回相同的结果。
 
 ## 迁移
 
-1. 在 `cordis.yml`、profile patch 和 `--patch` 覆盖层中重命名含 `:` 的条目 id，例如把 `foo:bar` 改为 `foo-bar`，并同步更新引用它们的 patch。
-2. 在 `EntryTree` 子类中把 `write()` 换成 `commit(change)`。根据 `change.options` 和 `change.legacy` 持久化：缺少 `legacy` 表示创建，缺少 `options` 表示删除。
-3. 只修改 `applyEntryPatches` 返回的结果。
-4. 需要运行时变更落盘时，await `include.flush()`；对于 patch 所拥有的变更，先 flush 子 Include，再 flush 其父 Include。
-5. 启动应用，确认没有记录 `entry id must not contain ":"` 错误，并且 `flush()` 之后运行时编辑已出现在配置文件中。
+1. 在 `EntryTree` 子类中把 `write()` 换成 `commit(change)`。根据 `change.options` 和 `change.legacy` 持久化：缺少 `legacy` 表示创建，缺少 `options` 表示删除。
+2. 只修改 `applyEntryPatches` 返回的结果。
+3. 需要运行时变更落盘时，await `include.flush()`；对于 patch 所拥有的变更，先 flush 子 Include，再 flush 其父 Include。
+4. 启动应用，确认 `flush()` 之后运行时编辑已出现在配置文件中。
diff --git a/scripts/cordis-entry-commit.spec.ts b/scripts/cordis-entry-commit.spec.ts
index 912335fcec..e915af7b29 100644
--- a/scripts/cordis-entry-commit.spec.ts
+++ b/scripts/cordis-entry-commit.spec.ts
@@ -85,12 +85,14 @@ describe('Loader tree mutation reports', () => {
     expect(changes).toEqual([])
   })
 
-  it('rejects separator-containing ids before changing a tree', async () => {
+  it('mounts explicit ids containing the separator without nested-path resolution', async () => {
     const { loader, changes } = await fixture()
     const options: EntryOptions = { id: 'a:b', name: 'cordis:example' }
-    await expect(loader.create(options)).rejects.toThrow('entry id must not contain')
-    expect(loader.root.data).toEqual([])
-    expect(changes).toEqual([])
+    await expect(loader.create(options)).resolves.toBe('a:b')
+    await loader.await()
+    expect(loader.store['a:b']!.fiber!.state).toBe(FiberState.ACTIVE)
+    expect(changes).toEqual([{ id: 'a:b', group: loader.root, options }])
+    expect(() => loader.resolve('a:b')).toThrow('cannot resolve entry a:b')
   })
 })
 
diff --git a/vendor/README.md b/vendor/README.md
index d39dfae8d8..2c6e377a2a 100644
--- a/vendor/README.md
+++ b/vendor/README.md
@@ -30,7 +30,7 @@ Intentionally **not** vendored (verified unused by this set): `reggol`, `@cordis
 
 ## Local modifications
 
-Keep this log exhaustive — every divergence from upstream must be listed. Each entry has a stable ID: remove an entry when its divergence no longer exists, and never renumber or reuse IDs. The next new entry is V27.
+Keep this log exhaustive — every divergence from upstream must be listed. Each entry has a stable ID: remove an entry when its divergence no longer exists, and never renumber or reuse IDs. The next new entry is V28.
 - **V1 · `hmr/src/index.ts`**: removed the `./locales/en-US.yml` / `./locales/zh-CN.yml` imports, the `.i18n({...})` call on the `Config` schema, and the `src/locales/` directory. Rationale: those imports require a runtime YAML loader hook (`@cordisjs/unyaml`) that we do not vendor; the i18n texts only localize config descriptions.
 - **V2 · All `package.json` files**: regenerated for Harness releases with scoped names, release versions, publication metadata, precise bundled-runtime and `lib/types/**/*.d.ts` / `.d.ts.map` file entries, source exports where applicable, and declaration metadata pointing at `lib/types`. References within the vendored set use `workspace:~`. HMR declares `esbuild` as a direct dev dependency for its imported `BuildFailure` type, and Loader requires `node-addon-require-builtin@^0.1.4` to match published app runtimes.
 - **V3 · All `tsconfig.json` files**: regenerated to extend the repo-root `tsconfig.base.json`, emit TypeScript intermediates to `lib/types`, and declare project references.
@@ -50,6 +50,7 @@ Keep this log exhaustive — every divergence from upstream must be listed. Each
 - **V24 · `timer/locale/{en,zh}.json` display metadata**: local English and Chinese titles and descriptions for the Settings plugin inventory. `timer/package.json` exports and publishes these locale resources.
 - **V25 · Loader lifecycle adaptations**: before a combined context/config update, Loader refreshes dependencies locally, which prevents activation against stale isolation bindings; disabled-entry updates await disposal. Failed fibers require an explicit update after correcting their input or dependencies. Core retains the effect hardening in V6; rc.11 owns dependency teardown ordering and superseded-activation handling.
 - **V26 · `loader/src/config/tree.ts` cross-tree move reports**: `EntryTree.update()` reports a move into another tree as a removal to the source tree and a creation, without `legacy` or `from`, to the destination tree. Upstream reports the destination as an update with `legacy`, which the Include journal records as a partial row for an id that its file does not contain. Covered by `scripts/cordis-entry-commit.spec.ts`.
+- **V27 · `loader/src/config/tree.ts` explicit ids with `:`**: `ensureId()` accepts explicit ids containing `EntryTree.sep`; upstream rejects them. Generated bundles from `@deepseek-ai/dsh-creation-recommendations` prefix their row ids with `<package name>:`, and installed profiles already contain such rows. `resolve()` still splits ids on `:`, so these entries cannot be addressed by nested path. Covered by `scripts/cordis-entry-commit.spec.ts` and `packages/experimental/creation-recommendations/tests/loader-composition.spec.ts`.
 
 ### Resolver adaptations
 
diff --git a/vendor/loader/README.md b/vendor/loader/README.md
index ae7e82a6f2..0b17513be8 100644
--- a/vendor/loader/README.md
+++ b/vendor/loader/README.md
@@ -68,4 +68,4 @@ Entry updates await `loader/patch-context`, the Fiber update waterfall and disab
 
 ## Tree mutation reports
 
-`EntryTree.commit(change)` receives each mutation made through `EntryTree` methods synchronously after options and group membership change; file-driven `EntryGroup` reconciliation does not report. A missing `legacy` means creation; missing `options` means removal. Updates carry both, with `from` naming the previous group after a move within the tree; a move into another tree reports a removal to the source tree and a creation to the destination tree. Explicit Fiber saves report their simplified configuration. File-driven reconciliation, parent teardown and Loader removal do not produce spurious self-disable reports. In-memory trees implement a no-op; Include journals the reports and reconciles them with file edits. Entry ids cannot contain `:`, which separates nested tree paths.
+`EntryTree.commit(change)` receives each mutation made through `EntryTree` methods synchronously after options and group membership change; file-driven `EntryGroup` reconciliation does not report. A missing `legacy` means creation; missing `options` means removal. Updates carry both, with `from` naming the previous group after a move within the tree; a move into another tree reports a removal to the source tree and a creation to the destination tree. Explicit Fiber saves report their simplified configuration. File-driven reconciliation, parent teardown and Loader removal do not produce spurious self-disable reports. In-memory trees implement a no-op; Include journals the reports and reconciles them with file edits. Explicit entry ids may contain `:`; `resolve()` cannot address such entries by nested path, because `:` separates nested tree paths.
diff --git a/vendor/loader/src/config/tree.ts b/vendor/loader/src/config/tree.ts
index 2d99fb68d8..f8c05dfefe 100644
--- a/vendor/loader/src/config/tree.ts
+++ b/vendor/loader/src/config/tree.ts
@@ -73,18 +73,17 @@ export abstract class EntryTree {
   }
 
   /**
-   * Assign a random tree-local id when `options.id` is absent.
+   * Assign a random tree-local id when `options.id` is absent. Explicit ids
+   * may contain `EntryTree.sep`; `resolve()` and `resolveGroup()` cannot
+   * address such entries by nested path.
    * @param options - Entry options; a generated id is written to `options.id`.
    * @returns The existing or generated id.
-   * @throws When an explicit id contains `EntryTree.sep`, which separates nested tree paths.
    */
   ensureId(options: Partial<EntryOptions>) {
     if (!options.id) {
       do {
         options.id = Math.random().toString(16).slice(2, 10)
       } while (this.store[options.id])
-    } else if (options.id.includes(EntryTree.sep)) {
-      throw new Error(`entry id must not contain "${EntryTree.sep}": ${options.id}`)
     }
     return options.id!
   }

From f45c48dce426c419cf5409e59ee8dd1749010fe9 Mon Sep 17 00:00:00 2001
From: Shigma <shigma10826@gmail.com>
Date: Thu, 29 Oct 2026 18:54:29 +0800
Subject: [PATCH 08/32] fix(cordis): transfer cross-tree moves and contain
 Include refresh rejections

---
 ...8-native-windows-pull-request-ci.i18n.yaml |  4 +-
 ...26-08-08-native-windows-pull-request-ci.md |  2 +-
 ...08-08-native-windows-pull-request-ci.zh.md |  2 +-
 ...26-09-09-nontransactional-loader.i18n.yaml |  8 ++--
 .../2026-09-09-nontransactional-loader.md     |  8 ++--
 .../2026-09-09-nontransactional-loader.zh.md  |  8 ++--
 docs/rescope.i18n.yaml                        |  4 +-
 docs/rescope.md                               |  2 +-
 docs/rescope.zh.md                            |  2 +-
 .../cordis-loader-entry-trees/guide.i18n.yaml |  4 +-
 .../cordis-loader-entry-trees/guide.md        |  1 +
 .../cordis-loader-entry-trees/guide.zh.md     |  1 +
 packages/boot/app-boot/src/index.ts           |  2 +-
 packages/boot/hmr/src/index.ts                |  5 ++-
 packages/boot/hmr/tests/coordination.spec.ts  | 25 ++++++++++++
 scripts/cordis-include-journal.spec.ts        | 23 ++++++++++-
 scripts/cordis-vendor-hmr-include.spec.ts     | 40 +++++++++++++++++++
 vendor/README.md                              |  6 +--
 vendor/hmr/src/index.ts                       |  3 +-
 vendor/include/README.md                      |  2 +
 vendor/loader/README.md                       |  2 +-
 vendor/loader/src/config/tree.ts              |  8 ++++
 22 files changed, 131 insertions(+), 31 deletions(-)
 create mode 100644 scripts/cordis-vendor-hmr-include.spec.ts

diff --git a/.agents/notes/implemented/process/2026-08-08-native-windows-pull-request-ci.i18n.yaml b/.agents/notes/implemented/process/2026-08-08-native-windows-pull-request-ci.i18n.yaml
index 8c2c549e30..73329cbb21 100644
--- a/.agents/notes/implemented/process/2026-08-08-native-windows-pull-request-ci.i18n.yaml
+++ b/.agents/notes/implemented/process/2026-08-08-native-windows-pull-request-ci.i18n.yaml
@@ -9,8 +9,8 @@
   en: 3e229ecf646af866
   zh: d358507b1e1d381f
 /agent-note-wine-and-native-windows-ci/decision:
-  en: 1125b44a170f70fb
-  zh: 37838b9da2003651
+  en: 9038773113cf3553
+  zh: 67875d393093c105
 /agent-note-wine-and-native-windows-ci/alternatives-considered:
   en: 0e9a322cfc38d313
   zh: f7bdeb86ba4fea1a
diff --git a/.agents/notes/implemented/process/2026-08-08-native-windows-pull-request-ci.md b/.agents/notes/implemented/process/2026-08-08-native-windows-pull-request-ci.md
index cb14645f13..c7c8be3f26 100644
--- a/.agents/notes/implemented/process/2026-08-08-native-windows-pull-request-ci.md
+++ b/.agents/notes/implemented/process/2026-08-08-native-windows-pull-request-ci.md
@@ -30,7 +30,7 @@ Native watchers use `canonicalizeWatchPath()` to realpath the deepest existing a
 
 Windows durable JSONL paths keep drive roots in native spelling and apply the extended-length namespace only to descendants and staging paths. The ACP teardown ladder uses real Node children, proves graceful and forced tiers with host-appropriate outcomes, and avoids claiming POSIX signal delivery on Windows. Executable fixtures provide `.cmd` shims and `PATHEXT` where the product accepts a bare command. Repository-cache helpers live inside the selected Git subpath so their declared `file:` dependencies expose command shims identically on Windows. The bundled installer exports pnpm's own workspace-ignore configuration, retains `PNPM_HOME` for pnpm data while removing that directory from lifecycle `PATH`, and prioritizes `.CMD` in `PATHEXT`; nested Git-package installation therefore cannot rejoin the enclosing workspace or let an inherited Windows pnpm executable outrank the transaction-owned wrapper.
 
-Post-boot profile watcher setup proceeds only while the root fiber and Loader are both live. A concurrent setup error is contained only when the same invocation's recorded signal already owns shutdown; unrelated HMR failures remain loud. The [process-shutdown controller](../../../../apps/cli/src/process-shutdown.ts) lets a successful one-shot completion drain Node's remaining handles after root disposal, while teardown failure, deadline, and signal escalation retain forced exit. The vendored Include serializes debounced writes, retries only transient access or busy failures with bounded backoff, and observes every timer rejection. A terminal persistence failure remains on the queue and is rethrown to the teardown owner, while successful teardown drains the latest write.
+Post-boot profile watcher setup proceeds only while the root fiber and Loader are both live. A concurrent setup error is contained only when the same invocation's recorded signal already owns shutdown; unrelated HMR failures remain loud. The [process-shutdown controller](../../../../apps/cli/src/process-shutdown.ts) lets a successful one-shot completion drain Node's remaining handles after root disposal, while teardown failure, deadline, and signal escalation retain forced exit. The vendored Include journals runtime changes and writes them through an atomic rename, retrying only transient access or busy failures with bounded backoff. `flush()` and `stop()` reject while changes remain unsaved, and a later successful flush clears the previous error.
 
 Shiki disables lazy TextMate-regex compilation and warms each boot grammar before user content enters the unchanged per-line tokenization budget, so scheduler contention cannot publish a partial highlighted stream. The Codex real-product fixture is pinned to stable 0.153.4 schemas and selects an actually advertised command tool and argument shape, preserving the provider-owned protocol while proving unattended rejection and whole-tree exit on each host.
 
diff --git a/.agents/notes/implemented/process/2026-08-08-native-windows-pull-request-ci.zh.md b/.agents/notes/implemented/process/2026-08-08-native-windows-pull-request-ci.zh.md
index b999ac8ef8..12ffd61a2c 100644
--- a/.agents/notes/implemented/process/2026-08-08-native-windows-pull-request-ci.zh.md
+++ b/.agents/notes/implemented/process/2026-08-08-native-windows-pull-request-ci.zh.md
@@ -30,7 +30,7 @@ Wine 在 Linux 内核与区分大小写的 ext4 之上采用 hoisted 依赖布
 
 Windows 的持久 JSONL 路径会保留驱动器根目录的原生写法，并仅对后代路径与暂存路径应用扩展长度命名空间。ACP（Agent Client Protocol）拆卸阶梯使用真实 Node 子进程，以符合宿主语义的结果证明优雅终止与强制终止两个层级，并避免声称 Windows 会交付 POSIX 信号。产品接受裸命令时，可执行 fixture 会提供 `.cmd` 包装脚本与 `PATHEXT`。repository-cache 辅助包位于所选 Git 子路径内，因此它们声明的 `file:` 依赖会在 Windows 上以相同方式暴露命令包装脚本。随附的安装器会导出 pnpm 自有的 workspace-ignore 配置，保留 `PNPM_HOME` 作为 pnpm 数据配置，同时从生命周期 `PATH` 中移除该目录，并在 `PATHEXT` 中优先选择 `.CMD`；因此，嵌套 Git 包安装既不会重新加入外层 workspace，也不会让继承的 Windows pnpm 可执行文件抢在事务持有的 wrapper 之前。
 
-启动后，只有根 fiber 与 Loader 均处于活跃状态时，系统才会继续设置 profile watcher。只有当同一次调用所记录的信号已取得关闭流程所有权时，系统才会隔离并发设置错误；无关 HMR 故障仍会响亮失败。[进程关闭控制器](../../../../apps/cli/src/process-shutdown.ts)会在根级 dispose 成功后让单次任务的正常完成流程排空 Node 剩余句柄，同时让拆卸失败、截止时间到期和信号升级继续强制退出。vendored Include 会串行化防抖写入，只对瞬时访问或忙碌故障执行有界退避重试，并确保每个由计时器触发的拒绝都得到观察。持久化最终失败后，该故障会保留在队列中，并重新抛给拆卸责任方；成功拆卸则会排空最新写入。
+启动后，只有根 fiber 与 Loader 均处于活跃状态时，系统才会继续设置 profile watcher。只有当同一次调用所记录的信号已取得关闭流程所有权时，系统才会隔离并发设置错误；无关 HMR 故障仍会响亮失败。[进程关闭控制器](../../../../apps/cli/src/process-shutdown.ts)会在根级 dispose 成功后让单次任务的正常完成流程排空 Node 剩余句柄，同时让拆卸失败、截止时间到期和信号升级继续强制退出。vendored Include 通过 journal 记录运行时变更，并以原子 rename 写入，只对瞬时访问或忙碌故障执行有界退避重试。仍有未保存变更时，`flush()` 和 `stop()` 会拒绝；之后一次成功的 flush 会清除先前的错误。
 
 Shiki 会禁用 TextMate 正则的延迟编译，并在用户内容进入保持不变的逐行 tokenization（词元化）预算前预热每种启动语法，从而避免调度器争用发布不完整的高亮流。Codex 真实产品 fixture 固定使用稳定版 0.153.4 schema，并选择实际提供的命令工具与对应参数形态；这样既保留由提供方负责的协议，也能在每种宿主上证明无人值守拒绝和整棵进程树退出。
 
diff --git a/.agents/notes/implemented/simplification/2026-09-09-nontransactional-loader.i18n.yaml b/.agents/notes/implemented/simplification/2026-09-09-nontransactional-loader.i18n.yaml
index f00222dc57..fc8bf04b3d 100644
--- a/.agents/notes/implemented/simplification/2026-09-09-nontransactional-loader.i18n.yaml
+++ b/.agents/notes/implemented/simplification/2026-09-09-nontransactional-loader.i18n.yaml
@@ -9,11 +9,11 @@
   en: d4ab65a39cf4fd7c
   zh: 62144be9b4fd7956
 /agent-note-keep-loader-mutations-non-transactional/decision:
-  en: 9b661159de63d421
-  zh: 15697f468a90edb9
+  en: 83268169e9436127
+  zh: ce740df03e9fe24a
 /agent-note-keep-loader-mutations-non-transactional/alternatives-considered:
-  en: 72b871064c7ae315
-  zh: a09e5168f8124c4c
+  en: 645db43a48b9cfc1
+  zh: d03fabd1e82dadbd
 /agent-note-keep-loader-mutations-non-transactional/consequences:
   en: 100f687b9d498308
   zh: 1c4bc2d989e43ec7
diff --git a/.agents/notes/implemented/simplification/2026-09-09-nontransactional-loader.md b/.agents/notes/implemented/simplification/2026-09-09-nontransactional-loader.md
index d37539cb3e..58ba37bd3c 100644
--- a/.agents/notes/implemented/simplification/2026-09-09-nontransactional-loader.md
+++ b/.agents/notes/implemented/simplification/2026-09-09-nontransactional-loader.md
@@ -12,19 +12,19 @@ Transactional config reload preserves an old plugin generation after a failed ed
 
 Revert the five commits in #932, resolving package moves and retaining independent later behavior. The reported merge commit belongs to the larger #936 dependency chain; reverting its first-parent diff would remove unrelated repository-plugin support. The [vendor ledger](../../../../vendor/README.md#local-modifications) records every retained source change against the unchanged pins.
 
-Loader changes entry options eagerly. EntryGroup starts siblings concurrently and logs application failures; EntryTree waits for outstanding work without rejecting failed fibers. Neither restores a previous plugin or configuration. Include retains parse validation and patch reapplication, but plugin failures can leave a partially applied tree.
+Loader changes entry options eagerly. EntryGroup starts siblings concurrently and logs application failures; EntryTree waits for outstanding work without rejecting failed fibers. Neither restores a previous plugin or configuration. Include keeps the running tree after an invalid file, but plugin failures can leave a partially applied tree.
 
 Application consumers own their completion checks. The CLI waits for its fallback HMR service before installing live patch watchers. The directory chooser checks the entries it mounts. The chooser and browser package runner capture the first fiber-disposal result before removing the entry, then await it before reporting teardown complete. Preset mounting waits for its subtree and reports import, activation, and missing-service failures. [App boot](../../../../packages/boot/app-boot/README.md) owns exact patch-file watching, activation audits, and partial-context cleanup. Web startup audits activation before printing a URL or opening the browser. These adaptations preserve existing consumer behavior after the reverse patch.
 
-Fiber, Entry, and isolate keep their upstream update return behavior. App boot observes discarded restart promises through the existing `internal/update` waterfall and waits for fibers before auditing a patch reload. The detached import-completion observer handles both fiber outcomes; the fiber still retains its failure for an explicit audit. Durable Include writes drain before and after child removal so a later teardown write cannot erase an earlier terminal write failure.
+Fiber, Entry, and isolate keep their upstream update return behavior. App boot observes discarded restart promises through the existing `internal/update` waterfall and waits for fibers before auditing a patch reload. The detached import-completion observer handles both fiber outcomes; the fiber still retains its failure for an explicit audit. Include persistence follows the journal adaptation in the vendor ledger: `flush()` and `stop()` reject while changes remain unsaved.
 
-Two #932-specific vendor changes remain: awaited initial-file creation and forced rereading in Include, and Schemastery conditional exports. Restoring the pre-#932 debounced write/read sequence reproduces `ENOENT` in the missing-file initialization test. Keeping these two lines preserves the existing `initial` option without an application-side file writer or a second YAML serializer. Removing Schemastery exports reproduces `ERR_REQUIRE_ESM_RACE_CONDITION` while the Web preset suite boots: Node falls back to the CJS entry during concurrent ESM imports. The HMR injection decorators, conditional patch cloning, and update return values use the pre-#932 behavior. Explicit `workspace:` dependencies make the #932 workspace-link switch and dedicated lockfile check unnecessary.
+One #932-specific vendor change remains: Schemastery conditional exports. Include 1.1.1 writes the `initial` file before reading it, so missing-file initialization no longer needs a local change. Removing Schemastery exports reproduces `ERR_REQUIRE_ESM_RACE_CONDITION` while the Web preset suite boots: Node falls back to the CJS entry during concurrent ESM imports. The HMR injection decorators and update return values use the pre-#932 behavior; patch cloning follows upstream Include. Explicit `workspace:` dependencies make the #932 workspace-link switch and dedicated lockfile check unnecessary.
 
 ## Alternatives considered
 
 **Keep transactional Loader updates.** They provide automatic recovery from a rejected plugin candidate, but retain the vendored lifecycle machinery being removed. Parse failures can be contained without plugin rollback.
 
-**Restore every vendored file verbatim.** This would also remove lazy injected config evaluation, conditional disabled entries, lifecycle disposal fixes, durable writes, and module-loader compatibility. Those changes have independent consumers and remain recorded in the vendor ledger.
+**Restore every vendored file verbatim.** This would also remove lazy injected config evaluation, conditional disabled entries, lifecycle disposal fixes, and module-loader compatibility. Those changes have independent consumers and remain recorded in the vendor ledger.
 
 **Move generic rollback into app boot.** This would retain the same candidate-generation and restoration obligations under another owner. Applications instead report failures and allow a later valid edit to recover.
 
diff --git a/.agents/notes/implemented/simplification/2026-09-09-nontransactional-loader.zh.md b/.agents/notes/implemented/simplification/2026-09-09-nontransactional-loader.zh.md
index 57ad3bb687..9ecadde422 100644
--- a/.agents/notes/implemented/simplification/2026-09-09-nontransactional-loader.zh.md
+++ b/.agents/notes/implemented/simplification/2026-09-09-nontransactional-loader.zh.md
@@ -12,19 +12,19 @@ Status: implemented
 
 撤销 #932 中的五个提交，解决包移动冲突并保留后续独立行为。记录的合并提交属于更大的 #936 依赖链；撤销其第一父提交差异还会删除无关的仓库插件支持。[Vendor 修改记录](../../../../vendor/README.md#local-modifications) 按不变的固定来源记录每项保留的源码更改。
 
-Loader 立即更改条目选项。EntryGroup 并发启动同级条目并记录应用失败；EntryTree 等待未完成的工作，但不因失败的 fiber 而拒绝。两者均不恢复旧插件或配置。Include 保留解析校验和 patch 重应用，但插件失败可能留下部分应用的配置树。
+Loader 立即更改条目选项。EntryGroup 并发启动同级条目并记录应用失败；EntryTree 等待未完成的工作，但不因失败的 fiber 而拒绝。两者均不恢复旧插件或配置。Include 在文件无效时保留正在运行的配置树，但插件失败可能留下部分应用的配置树。
 
 应用消费者负责完成检查。CLI 在安装实时 patch 监视器前等待其回退 HMR 服务。目录选择器检查其挂载的条目。选择器和浏览器包运行器在移除条目前取得首次 fiber 释放的结果，并等待该结果后才报告拆卸完成。预设挂载等待其子树，并报告导入、激活和缺少服务的失败。[应用启动](../../../../packages/boot/app-boot/README.zh.md) 负责精确 patch 文件监视、激活检查和部分上下文清理。Web 启动在打印 URL 或打开浏览器前检查激活状态。这些适配维持应用反向补丁后已有的消费者行为。
 
-Fiber、Entry 和 isolate 保持上游的更新返回行为。App boot 通过现有的 `internal/update` waterfall 观察被丢弃的重启 promise，并在检查 patch 重载前等待 fiber。游离的导入完成观察器处理 fiber 的两种结果；fiber 仍保留失败信息供显式检查。Include 的持久写入在删除子条目前后均排空，防止后续拆卸写入掩盖更早的终止性写入失败。
+Fiber、Entry 和 isolate 保持上游的更新返回行为。App boot 通过现有的 `internal/update` waterfall 观察被丢弃的重启 promise，并在检查 patch 重载前等待 fiber。游离的导入完成观察器处理 fiber 的两种结果；fiber 仍保留失败信息供显式检查。Include 的持久化遵循 vendor 修改记录中的 journal 适配：仍有未保存变更时，`flush()` 和 `stop()` 会拒绝。
 
-保留两项 #932 专属 vendor 改动：Include 中等待初始文件创建并强制重新读取，以及 Schemastery 条件导出。恢复 #932 前的防抖写入和读取顺序，会在缺失文件初始化测试中复现 `ENOENT`。保留这两行可以维持已有 `initial` 选项，而无需在应用侧增加文件写入器或另一份 YAML 序列化逻辑。移除 Schemastery exports 后，Web preset 测试在启动时复现 `ERR_REQUIRE_ESM_RACE_CONDITION`：并发 ESM 导入使 Node 回退到 CJS 入口。HMR 注入装饰器、条件 patch 克隆及更新返回值采用 #932 前的行为。显式 `workspace:` 依赖使 #932 的 workspace 链接开关与专用锁文件检查不再必要。
+保留一项 #932 专属 vendor 改动：Schemastery 条件导出。Include 1.1.1 会先写入 `initial` 文件再读取，因此缺失文件的初始化不再需要本地改动。移除 Schemastery exports 后，Web preset 测试在启动时复现 `ERR_REQUIRE_ESM_RACE_CONDITION`：并发 ESM 导入使 Node 回退到 CJS 入口。HMR 注入装饰器及更新返回值采用 #932 前的行为；patch 克隆遵循上游 Include。显式 `workspace:` 依赖使 #932 的 workspace 链接开关与专用锁文件检查不再必要。
 
 ## 考虑过的替代方案
 
 **保留事务化 Loader 更新。** 它们能从被拒绝的插件候选自动恢复，但会保留本次删除的 vendor 生命周期机制。解析失败可以独立于插件回滚进行处理。
 
-**逐字恢复所有 vendor 文件。** 这还会删除延迟注入配置求值、条件禁用条目、生命周期释放修复、持久写入和模块加载器兼容性。这些更改具有独立消费者，并继续记录在 vendor 修改记录中。
+**逐字恢复所有 vendor 文件。** 这还会删除延迟注入配置求值、条件禁用条目、生命周期释放修复和模块加载器兼容性。这些更改具有独立消费者，并继续记录在 vendor 修改记录中。
 
 **将通用回滚移入应用启动。** 这会在另一归属下保留相同的候选代次与恢复义务。应用改为报告失败，并允许后续有效编辑恢复。
 
diff --git a/docs/rescope.i18n.yaml b/docs/rescope.i18n.yaml
index 1d8ab0d003..3eb63034c4 100644
--- a/docs/rescope.i18n.yaml
+++ b/docs/rescope.i18n.yaml
@@ -6,8 +6,8 @@
   en: c8aa4d3384ea1306
   zh: 5aa030587d5b634d
 /vendored-package-rescope/name-mapping:
-  en: c74ffbc1036a93bf
-  zh: 9538352d8d72ebca
+  en: 50a68b9b3724eff8
+  zh: 9facad930deeb014
 /vendored-package-rescope/what-the-rename-does-not-touch:
   en: 9bb7d09f8cccf695
   zh: 2a8f3f60ae5116f3
diff --git a/docs/rescope.md b/docs/rescope.md
index 62b4dbfbac..c3ec1d0682 100644
--- a/docs/rescope.md
+++ b/docs/rescope.md
@@ -12,7 +12,7 @@ The Cordis framework and its foundation libraries are vendored under [`vendor/`]
 | `vendor/cosmokit/` | `cosmokit` | `@deepseek-ai/cosmokit` | 1.8.1 | Shared utilities the framework and Schemastery build on |
 | `vendor/schemastery/` | `schemastery` | `@deepseek-ai/schemastery` | 3.18.0 | Config schemas (`Schema`) behind every plugin's `Config` |
 | `vendor/loader/` | `@cordisjs/plugin-loader` | `@deepseek-ai/cordis-plugin-loader` | 1.0.0-rc.8 | `cordis.yml` loading, plugin resolution, repository cache |
-| `vendor/include/` | `@cordisjs/plugin-include` | `@deepseek-ai/cordis-plugin-include` | 1.0.4 | Config includes and patch overlays |
+| `vendor/include/` | `@cordisjs/plugin-include` | `@deepseek-ai/cordis-plugin-include` | 1.1.1 | Config includes and patch overlays |
 | `vendor/group/` | `@cordisjs/plugin-group` | `@deepseek-ai/cordis-plugin-group` | 1.0.0 | Nested plugin groups |
 | `vendor/timer/` | `@cordisjs/plugin-timer` | `@deepseek-ai/cordis-plugin-timer` | 1.1.4 | Disposal-aware timers on `ctx` |
 | `vendor/hmr/` | `@cordisjs/plugin-hmr` | `@deepseek-ai/cordis-plugin-hmr` | 1.0.15 | Hot module replacement for plugins and config |
diff --git a/docs/rescope.zh.md b/docs/rescope.zh.md
index 5e6a75de68..a02d152204 100644
--- a/docs/rescope.zh.md
+++ b/docs/rescope.zh.md
@@ -12,7 +12,7 @@ Cordis 框架及其基础库以源码形式 vendored 在 [`vendor/`](../vendor/R
 | `vendor/cosmokit/` | `cosmokit` | `@deepseek-ai/cosmokit` | 1.8.1 | 框架与 Schemastery 共用的基础工具 |
 | `vendor/schemastery/` | `schemastery` | `@deepseek-ai/schemastery` | 3.18.0 | 配置 schema（`Schema`），每个插件的 `Config` 都基于它 |
 | `vendor/loader/` | `@cordisjs/plugin-loader` | `@deepseek-ai/cordis-plugin-loader` | 1.0.0-rc.8 | `cordis.yml` 装载、插件解析、repository 缓存 |
-| `vendor/include/` | `@cordisjs/plugin-include` | `@deepseek-ai/cordis-plugin-include` | 1.0.4 | 配置包含与 patch 叠加 |
+| `vendor/include/` | `@cordisjs/plugin-include` | `@deepseek-ai/cordis-plugin-include` | 1.1.1 | 配置包含与 patch 叠加 |
 | `vendor/group/` | `@cordisjs/plugin-group` | `@deepseek-ai/cordis-plugin-group` | 1.0.0 | 嵌套插件分组 |
 | `vendor/timer/` | `@cordisjs/plugin-timer` | `@deepseek-ai/cordis-plugin-timer` | 1.1.4 | `ctx` 上随 disposal 回收的定时器 |
 | `vendor/hmr/` | `@cordisjs/plugin-hmr` | `@deepseek-ai/cordis-plugin-hmr` | 1.0.15 | 插件与配置的热替换 |
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.i18n.yaml b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.i18n.yaml
index 81fc6c8fac..9aa7a50527 100644
--- a/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.i18n.yaml
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.i18n.yaml
@@ -9,8 +9,8 @@
   en: dc27815908c90cd9
   zh: e9cc077d4d3fdbec
 /loader-entry-tree-reports-and-include-persistence/change:
-  en: 6ada19e725d5c04e
-  zh: efbc6183cfd094e1
+  en: 6bbe6a3a14e182d1
+  zh: 4256bd997293f8f2
 /loader-entry-tree-reports-and-include-persistence/migration:
   en: 574f30ad53da1e66
   zh: 1b9914c4ead412f7
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.md b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.md
index 566d87df9b..0f25effb5d 100644
--- a/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.md
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.md
@@ -14,6 +14,7 @@ English | [中文](guide.zh.md)
 - `EntryTree.write()` is removed. Subclasses implement `commit(change: EntryChange)`, which receives each create, update, move, removal and explicit Fiber save synchronously. In-memory trees implement a no-op.
 - `applyEntryPatches(data, patches, warn)` always returns cloned entries, including without patches, and clones inserted rows. Callers can no longer mutate the input through the result.
 - Include persists runtime changes through a journal reconciled with the latest file. File edits win conflicting fields and are logged as conflicts. Changes to patch-owned fields and inserted rows update the parent Include's patches. `flush()` waits for pending writes and rejects while changes remain unsaved; `refresh()` and `stop()` return the same result.
+- Include writes generated ids back into file rows that had none. Runtime changes to rows inserted by patches, including bundle rows, update the parent's patches instead of the included file. The parent of the `dsh` profile's root Include is the in-memory Loader, so such changes, for example a bundle row's self-disposal `disabled: true`, no longer survive a restart; previously the whole patched tree was written into `cordis.yml`.
 
 ## Migration
 
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.zh.md b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.zh.md
index fc38566b63..f91c2042a6 100644
--- a/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.zh.md
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/cordis-loader-entry-trees/guide.zh.md
@@ -14,6 +14,7 @@ description: "Loader 条目树通过 commit(change) 报告变更，Include 通
 - 移除了 `EntryTree.write()`。子类改为实现 `commit(change: EntryChange)`，它会同步收到每一次创建、更新、移动、删除和显式 Fiber 保存。内存树实现为空操作。
 - `applyEntryPatches(data, patches, warn)` 总是返回克隆后的条目，没有 patch 时也一样，插入行同样会被克隆。调用方不能再通过结果修改输入。
 - Include 通过与最新文件协调的 journal 持久化运行时变更。文件编辑在字段冲突时优先，并记录为冲突。对 patch 所拥有字段和插入行的修改会写入父 Include 的 patch。`flush()` 等待待处理的写入，并在仍有未保存变更时拒绝；`refresh()` 和 `stop()` 返回相同的结果。
+- Include 会把生成的 id 写回原本没有 id 的文件行。对 patch 插入行（包括 bundle 行）的运行时修改会写入父级的 patch，而不是被 include 的文件。`dsh` profile 根 Include 的父级是内存中的 Loader，因此这类修改（例如 bundle 行自行释放时写入的 `disabled: true`）重启后不再保留；此前整棵已应用 patch 的树会被写入 `cordis.yml`。
 
 ## 迁移
 
diff --git a/packages/boot/app-boot/src/index.ts b/packages/boot/app-boot/src/index.ts
index 32636ea8e8..daf1406a43 100644
--- a/packages/boot/app-boot/src/index.ts
+++ b/packages/boot/app-boot/src/index.ts
@@ -413,7 +413,7 @@ async function recompose(
         // Ascending original positions put each row back where it was.
         for (const { group, options, index } of stopped.toSorted((left, right) => left.index - right.index)) {
           // `create` starts the entry but leaves the group's option list as it is; that list is what the next update
-          // compares against to remove the row and what the Include writes back.
+          // compares against to remove the row.
           group.data.splice(index, 0, options)
           await group.create(options)
         }
diff --git a/packages/boot/hmr/src/index.ts b/packages/boot/hmr/src/index.ts
index 36c16ba6ac..8c5c97070a 100644
--- a/packages/boot/hmr/src/index.ts
+++ b/packages/boot/hmr/src/index.ts
@@ -469,7 +469,10 @@ class Hmr extends Service {
           loader.exit()
           return
         }
-        for (const include of includes) await include.refresh()
+        for (const include of includes) {
+          // A rejected refresh reports unsaved runtime changes; Include keeps its running tree.
+          try { await include.refresh() } catch (error) { this.ctx.logger.warn(error) }
+        }
         if (this.stashed.size > 0) {
           try { await this.partialReload() } finally { this.stashed.clear() }
         }
diff --git a/packages/boot/hmr/tests/coordination.spec.ts b/packages/boot/hmr/tests/coordination.spec.ts
index e0dceccb99..d19e92729e 100644
--- a/packages/boot/hmr/tests/coordination.spec.ts
+++ b/packages/boot/hmr/tests/coordination.spec.ts
@@ -135,6 +135,31 @@ it('refreshes an Include through the queue and skips registered exact paths', as
   expect(refresh).toHaveBeenCalledOnce()
 })
 
+it('continues the batch when an Include refresh reports unsaved changes', async () => {
+  const { ctx, dir } = await fixture()
+  const moduleWatcher = watchers.at(-1)!
+  const imported = vi.spyOn(ctx.loader, 'import').mockResolvedValue(Include)
+  onTestFinished(() => { imported.mockRestore() })
+  const includes = []
+  for (const name of ['first.yml', 'second.yml']) {
+    const file = join(dir, name)
+    writeFileSync(file, '[]\n')
+    const id = await ctx.loader.create({ name: 'include', config: { path: pathToFileURL(file).href } })
+    includes.push({ file, id })
+  }
+  await ctx.loader.await()
+  const [first, second] = includes.map(({ id }) => ctx.loader.resolve(id).subtree as Include)
+  const failure = new Error('config file has 1 unsaved change(s)')
+  const rejected = vi.spyOn(first!, 'refresh').mockRejectedValue(failure)
+  const refreshed = vi.spyOn(second!, 'refresh')
+  const warn = vi.spyOn(ctx.logger, 'warn')
+  moduleWatcher.emit('change', includes[0]!.file)
+  moduleWatcher.emit('change', includes[1]!.file)
+  await vi.waitFor(() => { expect(refreshed).toHaveBeenCalledOnce() })
+  expect(rejected).toHaveBeenCalledOnce()
+  expect(warn).toHaveBeenCalledWith(failure)
+})
+
 it('queues cached module replacements behind configuration mutations and recovers after failure', async () => {
   const { ctx, dir, hmr } = await fixture()
   const file = join(dir, 'source.mjs')
diff --git a/scripts/cordis-include-journal.spec.ts b/scripts/cordis-include-journal.spec.ts
index e5d0100d89..f39ae5c1b4 100644
--- a/scripts/cordis-include-journal.spec.ts
+++ b/scripts/cordis-include-journal.spec.ts
@@ -150,11 +150,30 @@ it('keeps generated ids and fibers for anonymous file and inserted rows across u
 
 it('persists a row moved into the Include from another tree as a complete creation', async () => {
   const app = await fixture([{ id: 'g', name: 'cordis:group', group: true, config: [] }])
-  const id = await app.ctx.loader.create({ name: 'cordis:example', config: { value: 1 } })
+  const apply = vi.fn()
+  app.ctx.loader.builtins.counted = apply
+  const id = await app.ctx.loader.create({ name: 'cordis:counted', config: { value: 1 } })
   await app.ctx.loader.await()
+  const entry = app.ctx.loader.store[id]!
   await app.ctx.loader.update(id, { config: { value: 2 } }, `${app.id}:g`)
   await app.include.flush()
+  await app.ctx.loader.await()
+  expect(app.include.store[id] === entry).toBe(true)
+  expect(id in app.ctx.loader.store).toBe(false)
+  expect(apply).toHaveBeenCalledTimes(2)
+  expect(entry.fiber!.state).toBe(FiberState.ACTIVE)
   expect(await app.read()).toEqual([{ id: 'g', name: 'cordis:group', group: true, config: [
-    { id, name: 'cordis:example', config: { value: 2 } },
+    { id, name: 'cordis:counted', config: { value: 2 } },
   ] }])
 })
+
+it('rejects a cross-tree move onto an id the destination already holds', async () => {
+  const app = await fixture([{ id: 'g', name: 'cordis:group', group: true, config: [row('x', 1)] }])
+  await app.ctx.loader.create({ id: 'x', name: 'cordis:example', config: { value: 2 } } as EntryOptions)
+  await app.ctx.loader.await()
+  await expect(app.ctx.loader.update('x', {}, `${app.id}:g`)).rejects.toThrow('already exists in the target tree')
+  expect(app.ctx.loader.root.data.map(options => options.id)).toContain('x')
+  expect(app.value('x')).toBe(1)
+  await app.include.flush()
+  expect(await app.read()).toEqual([{ id: 'g', name: 'cordis:group', group: true, config: [row('x', 1)] }])
+})
diff --git a/scripts/cordis-vendor-hmr-include.spec.ts b/scripts/cordis-vendor-hmr-include.spec.ts
new file mode 100644
index 0000000000..8f960bc0a1
--- /dev/null
+++ b/scripts/cordis-vendor-hmr-include.spec.ts
@@ -0,0 +1,40 @@
+/** Vendor HMR containment of Include refresh rejections. */
+import { mkdtempSync, realpathSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { pathToFileURL } from 'node:url'
+import { Context } from '@deepseek-ai/cordis'
+import Loader from '@deepseek-ai/cordis-plugin-loader'
+import Include from '@deepseek-ai/cordis-plugin-include'
+import Timer from '@deepseek-ai/cordis-plugin-timer'
+import Hmr from '@deepseek-ai/cordis-plugin-hmr'
+import { expect, it, onTestFinished, vi } from 'vitest'
+
+it('logs a rejected Include refresh instead of leaving it unhandled', async () => {
+  const dir = realpathSync(mkdtempSync(join(tmpdir(), 'dsh-vendor-hmr-include-')))
+  const ctx = new Context()
+  ctx.baseUrl = pathToFileURL(dir).href + '/'
+  onTestFinished(async () => { await ctx.fiber.dispose(); rmSync(dir, { recursive: true, force: true }) })
+  await ctx.plugin(Loader)
+  await ctx.plugin(Timer)
+  ctx.loader.builtins.include = Include
+  const file = join(dir, 'nested.yml')
+  writeFileSync(file, '[]\n')
+  const id = await ctx.loader.create({ name: 'cordis:include', config: { path: './nested.yml' } })
+  await ctx.loader.await()
+  await ctx.plugin(Hmr, { root: [], ignored: [], debounce: 0 })
+  // The service keeps its chokidar watcher private; the test drives its change listener directly.
+  const watcher = Reflect.get(ctx.get('hmr')!, 'watcher') as { emit(event: 'change', path: string): boolean }
+  const include = ctx.loader.resolve(id).subtree as Include
+  const failure = new Error('config file has 1 unsaved change(s)')
+  const refresh = vi.spyOn(include, 'refresh').mockRejectedValue(failure)
+  const warn = vi.spyOn(ctx.logger, 'warn')
+  const unhandled = vi.fn()
+  process.on('unhandledRejection', unhandled)
+  onTestFinished(() => { process.off('unhandledRejection', unhandled) })
+  watcher.emit('change', file)
+  await vi.waitFor(() => { expect(warn).toHaveBeenCalledWith(failure) })
+  await new Promise(resolve => setImmediate(resolve))
+  expect(refresh).toHaveBeenCalledOnce()
+  expect(unhandled).not.toHaveBeenCalled()
+})
diff --git a/vendor/README.md b/vendor/README.md
index 2c6e377a2a..bb1888ba49 100644
--- a/vendor/README.md
+++ b/vendor/README.md
@@ -38,9 +38,9 @@ Keep this log exhaustive — every divergence from upstream must be listed. Each
 - **V5 · `schemastery/tsdown.config.ts` and `logger-console/tsdown.config.ts`**: ours, not upstream files — per-package build-shape overrides (dual ESM+CJS output; separate node/browser entries) for the repo-root tsdown build. They read the JS emitted under `lib/types` and then write the publish runtime entries under `lib/`. Like the regenerated tsconfigs, they are not part of the upstream sync surface.
 - **V6 · `cordis/src/fiber.ts` lifecycle hardening**: locally closes three reentrant disposal gaps. An effect's owner-list wrapper is registered before its setup body runs, so an unload begun from inside setup awaits setup and every collected cleanup; synchronous setup failure removes the wrapper and rolls back collected cleanup. Async cleanup stays owner-visible until quiescence, and Cordis's internal effect composition joins an already-running cleanup while repeated public disposer calls retain their upstream single-shot result. Effect creation is rejected while the owner is `UNLOADING` (while `PENDING` and `LOADING` remain legal), preventing cleanup-time registrations from escaping the unload snapshot. Child fibers register and receive their parent-owned disposer before `internal/plugin` publication, resolve dependency declarations added by that notification before activation, drain effects attached while pending, and contain teardown-notification failures per observer so one callback cannot starve peers or interrupt ownership cleanup.
 - **V7 · Cordis, Loader and Timer JSDoc enrichment**: added `@param`/`@returns` tags and contract documentation (disposal semantics, waterfall veto, bail conditions, error cases) across the public plugin-author surface — `Context` (class, statics, and the `Context` interface properties incl. `root`), module re-exports, shared utility helpers, `EventsService`, `Fiber`, `RegistryService`, `ReflectService`, `Service`, `LoggerService` and their `declare module './context.ts'` overloads. Loader documentation covers `loader/src/{index,internal,config/entry,config/group,config/isolate,config/tree,config/utils}.ts`, including entry ownership, tree mutation methods, and the `!!js` discriminator. The upstream `EventsService.dispatch()` deprecation annotation is omitted: DSH enumerates callbacks to contain each observer failure independently, which the typed dispatch methods do not provide. Timer retains its local class and helper summaries; its README is local documentation because the upstream package has none. Comment-only; no code changes. Motivation: the website API-reference generator renders these docs and hard-errors on undocumented members. Retire this entry when the enrichment is upstreamed to the fork.
-- **V9 · `hmr/src/index.ts` module-watcher readiness and native paths**: realpath the existing watch base, classify framework modules and attach listeners before reporting readiness, and compare config paths using both canonical and configured spellings. This preserves Node module-cache identity across Windows short-name paths and filesystem aliases. The main watcher uses `ignoreInitial: true` so startup reads do not trigger another refresh; exact profile patch watching is owned by `packages/boot/hmr/src/watch-config.ts`. Covered by `packages/boot/hmr/tests/watch-config.spec.ts`.
+- **V9 · `hmr/src/index.ts` module-watcher readiness and native paths**: realpath the existing watch base, classify framework modules and attach listeners before reporting readiness, and compare config paths using both canonical and configured spellings. This preserves Node module-cache identity across Windows short-name paths and filesystem aliases. The main watcher uses `ignoreInitial: true` so startup reads do not trigger another refresh; exact profile patch watching is owned by `packages/boot/hmr/src/watch-config.ts`. The Include change listener logs a rejected `Include.refresh()` instead of leaving the rejection unhandled; the rejection reports unsaved runtime changes while Include keeps its running tree. Covered by `packages/boot/hmr/tests/watch-config.spec.ts` and `scripts/cordis-vendor-hmr-include.spec.ts`.
 - **V10 · Vendored Node-compatible TypeScript**: marked erased imports explicitly across `cordis`, `loader`, `include`, `hmr`, and `schemastery` so Node's native TypeScript transform does not request types as runtime exports. Schemastery's source uses an ESM default export and its package declares `type: module`. Conditional exports select `.mjs` for import and `.cjs` for require; without them, concurrent imports under module-hook hosts reach the CJS entry and can race its require of ESM Cosmokit (`ERR_REQUIRE_ESM_RACE_CONDITION`).
-- **V11 · Include patch and YAML exports**: `include/src/index.ts` exports upstream `applyPatches` as `applyEntryPatches` and the `!!js` YAML dialect as `entryListSchema`, so `dsh --dump-config` composes entries with the same algorithm that mounting uses. Covered by `packages/boot/app-boot/tests/config-reload.spec.ts`.
+- **V11 · Include patch and YAML exports**: `include/src/index.ts` exports upstream `applyPatches` as `applyEntryPatches` and the `!!js` YAML dialect as `entryListSchema`, so `dsh --dump-config` composes entries with the same algorithm that mounting uses. Covered by `packages/boot/app-boot/tests/config-reload.spec.ts` and `scripts/cordis-entry-commit.spec.ts`.
 - **V14 · Include persistence results**: `include/src/index.ts` keeps an error for unsaved journal changes. `flush()` retries pending writes and rejects while changes remain unsaved; `stop()` returns the same result and always stops the child tree; a later successful flush clears previous errors. A failed `refresh()` can also reject while runtime changes remain unsaved. Patch-owned changes route to the parent Include, so callers that need them persisted must flush that parent too. Ordinary Fiber teardown keeps its error containment. Covered by `scripts/cordis-include-journal.spec.ts` and `packages/host/directory-picker-auto/tests/loader-composition.spec.ts`.
 - **V15 · Configuration access across Core, Loader, Include and HMR**: rc.11 Core owns raw `Fiber.config`, `internal/config(fiber, next)`, `internal/commit` and awaited `internal/update(config, next)`. Root-fiber candidate resolution remains available without a plugin schema. Local `rawConfig`, `resolveConfig(candidate)` and `effectiveConfig` accessors retain the DSH consumer API. Fiber caches the object passed to activation or a successful update that keeps the instance; candidate resolution is pure, failed or superseded updates cannot replace the cache, and volatile updates retain references. Loader resolves only entry roots and excludes Group/Include tree carriers, so nested `!!js` expressions wait for their own injections. Include retains its tree-carrier marker and public patch exports, and HMR transfers raw config through the accessors. Covered by `scripts/cordis-config-access.spec.ts`, `scripts/cordis-core-lifecycle.spec.ts` and the boot/HMR suites.
 - **V16 · `cordis/package.json` publishes `src`**: added `src` to the `files` list, joining the other eight vendored packages. Cordis declares `"./src/*": "./src/*"` in its exports, so a tarball without `src` publishes an export map pointing at absent files; the release change judgement also reads `files` to decide whether a diff reaches the payload, and a package whose only published paths are build output has no tracked path to match.
@@ -49,7 +49,7 @@ Keep this log exhaustive — every divergence from upstream must be listed. Each
 - **V23 · `loader/src/config/entry.ts` module identity**: retains each entry's raw import result as `moduleNamespace`, before plugin export normalization. HMR matches that object to Node's cached module namespace and updates it after a successful reload. `EntryTree.import()` keeps its existing arguments and return value; `loader/README.md` documents the additive field.
 - **V24 · `timer/locale/{en,zh}.json` display metadata**: local English and Chinese titles and descriptions for the Settings plugin inventory. `timer/package.json` exports and publishes these locale resources.
 - **V25 · Loader lifecycle adaptations**: before a combined context/config update, Loader refreshes dependencies locally, which prevents activation against stale isolation bindings; disabled-entry updates await disposal. Failed fibers require an explicit update after correcting their input or dependencies. Core retains the effect hardening in V6; rc.11 owns dependency teardown ordering and superseded-activation handling.
-- **V26 · `loader/src/config/tree.ts` cross-tree move reports**: `EntryTree.update()` reports a move into another tree as a removal to the source tree and a creation, without `legacy` or `from`, to the destination tree. Upstream reports the destination as an update with `legacy`, which the Include journal records as a partial row for an id that its file does not contain. Covered by `scripts/cordis-entry-commit.spec.ts`.
+- **V26 · `loader/src/config/tree.ts` cross-tree moves**: `EntryTree.update()` moves an entry's store registration with it when the destination group belongs to another tree, and rejects the move before changing either tree when the destination tree already holds the id. It reports a removal to the source tree and a creation, without `legacy` or `from`, to the destination tree. Upstream keeps the entry registered in the source tree and reports the destination as an update with `legacy`; the Include journal then writes a partial row, and re-applying the destination file creates a second Entry for the same id. Covered by `scripts/cordis-include-journal.spec.ts`.
 - **V27 · `loader/src/config/tree.ts` explicit ids with `:`**: `ensureId()` accepts explicit ids containing `EntryTree.sep`; upstream rejects them. Generated bundles from `@deepseek-ai/dsh-creation-recommendations` prefix their row ids with `<package name>:`, and installed profiles already contain such rows. `resolve()` still splits ids on `:`, so these entries cannot be addressed by nested path. Covered by `scripts/cordis-entry-commit.spec.ts` and `packages/experimental/creation-recommendations/tests/loader-composition.spec.ts`.
 
 ### Resolver adaptations
diff --git a/vendor/hmr/src/index.ts b/vendor/hmr/src/index.ts
index 39b3461d9b..f7a49cbffe 100644
--- a/vendor/hmr/src/index.ts
+++ b/vendor/hmr/src/index.ts
@@ -146,7 +146,8 @@ class Hmr extends Service {
       for (const entry of loader.entries()) {
         const include = entry.subtree as Include | undefined
         if (include?.filename !== filename && include?.filename !== configuredFilename) continue
-        await include.refresh()
+        // A rejected refresh reports unsaved runtime changes; Include keeps its running tree.
+        try { await include.refresh() } catch (error) { this.ctx.logger.warn(error) }
         return
       }
 
diff --git a/vendor/include/README.md b/vendor/include/README.md
index 2d9db4965f..ae01993dc8 100644
--- a/vendor/include/README.md
+++ b/vendor/include/README.md
@@ -49,3 +49,5 @@ Patches can insert entries or override fields on entries with a matching `id`.
 Tree mutations arrive through `commit(change)` and enter a journal. Include merges them with the latest file before writing; file edits win conflicts on the same fields and produce a diagnostic. Patch-owned fields and inserted entries update the parent Include’s patches instead of the included file. Invalid, missing or read-only files leave unsaved changes in memory.
 
 `flush()` waits for this Include’s pending file operations and tree reconciliation, retries outstanding writes, and rejects if changes remain unsaved. Successful persistence clears previous errors. `refresh()` rereads the file and exposes the same completion result. To persist patch-owned changes, flush the child and then its parent. `stop()` makes a final attempt and always stops child entries, even when it rejects; ordinary Fiber disposal still contains cleanup errors. File writes use an atomic rename with bounded retries for transient destination locks.
+
+Ids that Include generates for anonymous inserted rows are written into the patch objects of its own configuration. When the parent tree re-creates that configuration from a file, for example after the parent Include writes, those ids are generated again and the inserted rows restart; give inserted rows explicit ids where their instance state matters.
diff --git a/vendor/loader/README.md b/vendor/loader/README.md
index 0b17513be8..ddfe7f091e 100644
--- a/vendor/loader/README.md
+++ b/vendor/loader/README.md
@@ -68,4 +68,4 @@ Entry updates await `loader/patch-context`, the Fiber update waterfall and disab
 
 ## Tree mutation reports
 
-`EntryTree.commit(change)` receives each mutation made through `EntryTree` methods synchronously after options and group membership change; file-driven `EntryGroup` reconciliation does not report. A missing `legacy` means creation; missing `options` means removal. Updates carry both, with `from` naming the previous group after a move within the tree; a move into another tree reports a removal to the source tree and a creation to the destination tree. Explicit Fiber saves report their simplified configuration. File-driven reconciliation, parent teardown and Loader removal do not produce spurious self-disable reports. In-memory trees implement a no-op; Include journals the reports and reconciles them with file edits. Explicit entry ids may contain `:`; `resolve()` cannot address such entries by nested path, because `:` separates nested tree paths.
+`EntryTree.commit(change)` receives each mutation made through `EntryTree` methods synchronously after options and group membership change; file-driven `EntryGroup` reconciliation does not report. A missing `legacy` means creation; missing `options` means removal. Updates carry both, with `from` naming the previous group after a move within the tree; a move into another tree transfers the entry's registration, reports a removal to the source tree and a creation to the destination tree, and is rejected when the destination tree already holds the id. Explicit Fiber saves report their simplified configuration. File-driven reconciliation, parent teardown and Loader removal do not produce spurious self-disable reports. In-memory trees implement a no-op; Include journals the reports and reconciles them with file edits. Explicit entry ids may contain `:`; `resolve()` cannot address such entries by nested path, because `:` separates nested tree paths.
diff --git a/vendor/loader/src/config/tree.ts b/vendor/loader/src/config/tree.ts
index f8c05dfefe..33482b6c6a 100644
--- a/vendor/loader/src/config/tree.ts
+++ b/vendor/loader/src/config/tree.ts
@@ -134,9 +134,17 @@ export abstract class EntryTree {
     const legacy = { ...entry.options }
     if (parent !== undefined) {
       const target = this.resolveGroup(parent)
+      if (target.tree !== source.tree && target.tree.store[legacy.id]) {
+        throw new Error(`entry ${legacy.id} already exists in the target tree`)
+      }
       source.unlink(entry.options)
       target.data.splice(position ?? Infinity, 0, entry.options)
       entry.parent = target
+      // Each tree indexes its own entries, so a cross-tree move transfers the registration.
+      if (target.tree !== source.tree) {
+        delete source.tree.store[legacy.id]
+        target.tree.store[legacy.id] = entry
+      }
     }
     // `Entry.update` assigns the new options before its first `await`, so the
     // change is fully visible to `commit()` once the call returns.

From 7a5df74f31e5d3b8eb0e3245bd5def1a9a439fe1 Mon Sep 17 00:00:00 2001
From: Shigma <shigma10826@gmail.com>
Date: Thu, 29 Oct 2026 20:42:07 +0800
Subject: [PATCH 09/32] fix(cordis): backport cross-tree group member transfer
 from cordis#271

---
 scripts/cordis-include-journal.spec.ts | 25 +++++++++++++++++
 vendor/README.md                       |  2 +-
 vendor/loader/README.md                |  2 +-
 vendor/loader/src/config/tree.ts       | 38 +++++++++++++++++++-------
 4 files changed, 55 insertions(+), 12 deletions(-)

diff --git a/scripts/cordis-include-journal.spec.ts b/scripts/cordis-include-journal.spec.ts
index f39ae5c1b4..a98050dc84 100644
--- a/scripts/cordis-include-journal.spec.ts
+++ b/scripts/cordis-include-journal.spec.ts
@@ -177,3 +177,28 @@ it('rejects a cross-tree move onto an id the destination already holds', async (
   await app.include.flush()
   expect(await app.read()).toEqual([{ id: 'g', name: 'cordis:group', group: true, config: [row('x', 1)] }])
 })
+
+it('transfers the members of a group moved into the Include', async () => {
+  const app = await fixture([{ id: 'g', name: 'cordis:group', group: true, config: [] }])
+  const apply = vi.fn()
+  app.ctx.loader.builtins.counted = apply
+  const outer = await app.ctx.loader.create({ name: 'cordis:group', group: true, config: [] })
+  await app.ctx.loader.await()
+  const inner = await app.ctx.loader.create({ name: 'cordis:counted', config: { value: 1 } }, outer)
+  await app.ctx.loader.await()
+  const [group, member] = [app.ctx.loader.store[outer]!, app.ctx.loader.store[inner]!]
+  await app.ctx.loader.update(outer, {}, `${app.id}:g`)
+  await app.include.flush()
+  await app.ctx.loader.await()
+  expect(app.include.store[outer] === group && app.include.store[inner] === member).toBe(true)
+  expect(outer in app.ctx.loader.store || inner in app.ctx.loader.store).toBe(false)
+  expect(group.subgroup!.tree === app.include).toBe(true)
+  expect(apply).toHaveBeenCalledOnce()
+  expect(await app.read()).toEqual([{ id: 'g', name: 'cordis:group', group: true, config: [
+    { id: outer, name: 'cordis:group', group: true, config: [{ id: inner, name: 'cordis:counted', config: { value: 1 } }] },
+  ] }])
+  app.ctx.loader.remove(`${app.id}:${outer}`)
+  await app.include.flush()
+  await app.ctx.loader.await()
+  expect(member.fiber?.state).not.toBe(FiberState.ACTIVE)
+})
diff --git a/vendor/README.md b/vendor/README.md
index bb1888ba49..084761deea 100644
--- a/vendor/README.md
+++ b/vendor/README.md
@@ -49,7 +49,7 @@ Keep this log exhaustive — every divergence from upstream must be listed. Each
 - **V23 · `loader/src/config/entry.ts` module identity**: retains each entry's raw import result as `moduleNamespace`, before plugin export normalization. HMR matches that object to Node's cached module namespace and updates it after a successful reload. `EntryTree.import()` keeps its existing arguments and return value; `loader/README.md` documents the additive field.
 - **V24 · `timer/locale/{en,zh}.json` display metadata**: local English and Chinese titles and descriptions for the Settings plugin inventory. `timer/package.json` exports and publishes these locale resources.
 - **V25 · Loader lifecycle adaptations**: before a combined context/config update, Loader refreshes dependencies locally, which prevents activation against stale isolation bindings; disabled-entry updates await disposal. Failed fibers require an explicit update after correcting their input or dependencies. Core retains the effect hardening in V6; rc.11 owns dependency teardown ordering and superseded-activation handling.
-- **V26 · `loader/src/config/tree.ts` cross-tree moves**: `EntryTree.update()` moves an entry's store registration with it when the destination group belongs to another tree, and rejects the move before changing either tree when the destination tree already holds the id. It reports a removal to the source tree and a creation, without `legacy` or `from`, to the destination tree. Upstream keeps the entry registered in the source tree and reports the destination as an update with `legacy`; the Include journal then writes a partial row, and re-applying the destination file creates a second Entry for the same id. Covered by `scripts/cordis-include-journal.spec.ts`.
+- **V26 · `loader/src/config/tree.ts` cross-tree moves**: backports [cordiverse/cordis#271](https://github.com/cordiverse/cordis/pull/271), merged after `v4.0.0-rc.11`. When `EntryTree.update()` moves an entry into a group of another tree, the entry and the same-tree members of its group move their store registrations to the target tree, and the move is rejected before either tree changes when the target tree already holds one of their ids. The source tree receives a removal and the target tree a creation, without `legacy` or `from`. In rc.11 the entry stays registered in the source tree and the target receives an update with `legacy`, so the Include journal writes a partial row and reconciling the target file creates a second Entry. Retire this entry when the vendored Loader includes the upstream fix. Covered by `scripts/cordis-include-journal.spec.ts`.
 - **V27 · `loader/src/config/tree.ts` explicit ids with `:`**: `ensureId()` accepts explicit ids containing `EntryTree.sep`; upstream rejects them. Generated bundles from `@deepseek-ai/dsh-creation-recommendations` prefix their row ids with `<package name>:`, and installed profiles already contain such rows. `resolve()` still splits ids on `:`, so these entries cannot be addressed by nested path. Covered by `scripts/cordis-entry-commit.spec.ts` and `packages/experimental/creation-recommendations/tests/loader-composition.spec.ts`.
 
 ### Resolver adaptations
diff --git a/vendor/loader/README.md b/vendor/loader/README.md
index ddfe7f091e..2b71deba01 100644
--- a/vendor/loader/README.md
+++ b/vendor/loader/README.md
@@ -68,4 +68,4 @@ Entry updates await `loader/patch-context`, the Fiber update waterfall and disab
 
 ## Tree mutation reports
 
-`EntryTree.commit(change)` receives each mutation made through `EntryTree` methods synchronously after options and group membership change; file-driven `EntryGroup` reconciliation does not report. A missing `legacy` means creation; missing `options` means removal. Updates carry both, with `from` naming the previous group after a move within the tree; a move into another tree transfers the entry's registration, reports a removal to the source tree and a creation to the destination tree, and is rejected when the destination tree already holds the id. Explicit Fiber saves report their simplified configuration. File-driven reconciliation, parent teardown and Loader removal do not produce spurious self-disable reports. In-memory trees implement a no-op; Include journals the reports and reconciles them with file edits. Explicit entry ids may contain `:`; `resolve()` cannot address such entries by nested path, because `:` separates nested tree paths.
+`EntryTree.commit(change)` receives each mutation made through `EntryTree` methods synchronously after options and group membership change; file-driven `EntryGroup` reconciliation does not report. A missing `legacy` means creation; missing `options` means removal. Updates carry both, with `from` naming the previous group after a move within the tree; a move into another tree transfers the registrations of the entry and its group members, reports a removal to the source tree and a creation to the destination tree, and is rejected when the destination tree already holds the id. Explicit Fiber saves report their simplified configuration. File-driven reconciliation, parent teardown and Loader removal do not produce spurious self-disable reports. In-memory trees implement a no-op; Include journals the reports and reconciles them with file edits. Explicit entry ids may contain `:`; `resolve()` cannot address such entries by nested path, because `:` separates nested tree paths.
diff --git a/vendor/loader/src/config/tree.ts b/vendor/loader/src/config/tree.ts
index 33482b6c6a..5b5648f576 100644
--- a/vendor/loader/src/config/tree.ts
+++ b/vendor/loader/src/config/tree.ts
@@ -27,6 +27,19 @@ export interface EntryChange {
   legacy?: EntryOptions
 }
 
+/** The entry and the same-tree members of its group, recursively. */
+function members(entry: Entry): Entry[] {
+  const { tree } = entry.parent
+  const result = [entry]
+  const group = entry.subgroup
+  if (group?.tree !== tree) return result
+  for (const options of group.data) {
+    const member = tree.store[options.id]
+    if (member?.parent === group) result.push(...members(member))
+  }
+  return result
+}
+
 /** Mutable tree of loader entries. Persistence is supplied by subclasses. */
 export abstract class EntryTree {
   static readonly sep = ':'
@@ -134,29 +147,34 @@ export abstract class EntryTree {
     const legacy = { ...entry.options }
     if (parent !== undefined) {
       const target = this.resolveGroup(parent)
-      if (target.tree !== source.tree && target.tree.store[legacy.id]) {
-        throw new Error(`entry ${legacy.id} already exists in the target tree`)
+      const moved = target.tree === source.tree ? [] : members(entry)
+      for (const member of moved) {
+        const { id } = member.options
+        if (target.tree.store[id]) throw new Error(`entry ${id} already exists in the target tree`)
       }
       source.unlink(entry.options)
       target.data.splice(position ?? Infinity, 0, entry.options)
       entry.parent = target
-      // Each tree indexes its own entries, so a cross-tree move transfers the registration.
-      if (target.tree !== source.tree) {
-        delete source.tree.store[legacy.id]
-        target.tree.store[legacy.id] = entry
+      // The target tree owns the moved entries from now on, so that it adopts
+      // them instead of creating new ones when it reconciles its source.
+      for (const member of moved) {
+        delete source.tree.store[member.options.id]
+        target.tree.store[member.options.id] = member
+        if (member.subgroup?.tree === source.tree) member.subgroup.tree = target.tree
       }
     }
     // `Entry.update` assigns the new options before its first `await`, so the
     // change is fully visible to `commit()` once the call returns.
     const task = entry.update(options, false, true)
     if (entry.parent.tree !== source.tree) {
+      // a move across trees removes the entry from the source tree and
+      // creates it in the target tree
       source.tree.commit({ id: legacy.id, group: source, legacy })
-      // The destination tree has no previous row, so it receives a creation.
       entry.parent.tree.commit({ id: legacy.id, group: entry.parent, options: entry.options })
-      return task
+    } else {
+      const from = entry.parent === source ? undefined : source
+      entry.parent.tree.commit({ id: legacy.id, group: entry.parent, from, options: entry.options, legacy })
     }
-    const from = entry.parent === source ? undefined : source
-    entry.parent.tree.commit({ id: legacy.id, group: entry.parent, from, options: entry.options, legacy })
     return task
   }
 

From 86b59d4a177ca942e60ad21b4208732c42084c1f Mon Sep 17 00:00:00 2001
From: Shigma <shigma10826@gmail.com>
Date: Fri, 30 Oct 2026 14:00:01 +0800
Subject: [PATCH 10/32] test(cordis): load vendor HMR without its type
 declarations

---
 scripts/cordis-vendor-hmr-include.spec.ts | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/scripts/cordis-vendor-hmr-include.spec.ts b/scripts/cordis-vendor-hmr-include.spec.ts
index 8f960bc0a1..64f7447f69 100644
--- a/scripts/cordis-vendor-hmr-include.spec.ts
+++ b/scripts/cordis-vendor-hmr-include.spec.ts
@@ -3,13 +3,16 @@ import { mkdtempSync, realpathSync, rmSync, writeFileSync } from 'node:fs'
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
 import { pathToFileURL } from 'node:url'
-import { Context } from '@deepseek-ai/cordis'
+import { Context, type Plugin } from '@deepseek-ai/cordis'
 import Loader from '@deepseek-ai/cordis-plugin-loader'
 import Include from '@deepseek-ai/cordis-plugin-include'
 import Timer from '@deepseek-ai/cordis-plugin-timer'
-import Hmr from '@deepseek-ai/cordis-plugin-hmr'
 import { expect, it, onTestFinished, vi } from 'vitest'
 
+// A literal import would add vendor HMR's `Context.hmr` declaration to the
+// repository type program, where DSH HMR declares the same property.
+const vendorHmr: string = '@deepseek-ai/cordis-plugin-hmr'
+
 it('logs a rejected Include refresh instead of leaving it unhandled', async () => {
   const dir = realpathSync(mkdtempSync(join(tmpdir(), 'dsh-vendor-hmr-include-')))
   const ctx = new Context()
@@ -22,9 +25,10 @@ it('logs a rejected Include refresh instead of leaving it unhandled', async () =
   writeFileSync(file, '[]\n')
   const id = await ctx.loader.create({ name: 'cordis:include', config: { path: './nested.yml' } })
   await ctx.loader.await()
+  const { default: Hmr } = await import(vendorHmr) as { default: Plugin }
   await ctx.plugin(Hmr, { root: [], ignored: [], debounce: 0 })
   // The service keeps its chokidar watcher private; the test drives its change listener directly.
-  const watcher = Reflect.get(ctx.get('hmr')!, 'watcher') as { emit(event: 'change', path: string): boolean }
+  const watcher = Reflect.get(ctx.get('hmr') as object, 'watcher') as { emit(event: 'change', path: string): boolean }
   const include = ctx.loader.resolve(id).subtree as Include
   const failure = new Error('config file has 1 unsaved change(s)')
   const refresh = vi.spyOn(include, 'refresh').mockRejectedValue(failure)

From aae41629d18d6b946b39cf6eb7f44be63e185f19 Mon Sep 17 00:00:00 2001
From: Shigma <shigma10826@gmail.com>
Date: Fri, 30 Oct 2026 18:31:13 +0800
Subject: [PATCH 11/32] docs(vendor): record omitted Include HMR watch
 registration

---
 vendor/README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/vendor/README.md b/vendor/README.md
index 084761deea..9020f5dcb6 100644
--- a/vendor/README.md
+++ b/vendor/README.md
@@ -41,7 +41,7 @@ Keep this log exhaustive — every divergence from upstream must be listed. Each
 - **V9 · `hmr/src/index.ts` module-watcher readiness and native paths**: realpath the existing watch base, classify framework modules and attach listeners before reporting readiness, and compare config paths using both canonical and configured spellings. This preserves Node module-cache identity across Windows short-name paths and filesystem aliases. The main watcher uses `ignoreInitial: true` so startup reads do not trigger another refresh; exact profile patch watching is owned by `packages/boot/hmr/src/watch-config.ts`. The Include change listener logs a rejected `Include.refresh()` instead of leaving the rejection unhandled; the rejection reports unsaved runtime changes while Include keeps its running tree. Covered by `packages/boot/hmr/tests/watch-config.spec.ts` and `scripts/cordis-vendor-hmr-include.spec.ts`.
 - **V10 · Vendored Node-compatible TypeScript**: marked erased imports explicitly across `cordis`, `loader`, `include`, `hmr`, and `schemastery` so Node's native TypeScript transform does not request types as runtime exports. Schemastery's source uses an ESM default export and its package declares `type: module`. Conditional exports select `.mjs` for import and `.cjs` for require; without them, concurrent imports under module-hook hosts reach the CJS entry and can race its require of ESM Cosmokit (`ERR_REQUIRE_ESM_RACE_CONDITION`).
 - **V11 · Include patch and YAML exports**: `include/src/index.ts` exports upstream `applyPatches` as `applyEntryPatches` and the `!!js` YAML dialect as `entryListSchema`, so `dsh --dump-config` composes entries with the same algorithm that mounting uses. Covered by `packages/boot/app-boot/tests/config-reload.spec.ts` and `scripts/cordis-entry-commit.spec.ts`.
-- **V14 · Include persistence results**: `include/src/index.ts` keeps an error for unsaved journal changes. `flush()` retries pending writes and rejects while changes remain unsaved; `stop()` returns the same result and always stops the child tree; a later successful flush clears previous errors. A failed `refresh()` can also reject while runtime changes remain unsaved. Patch-owned changes route to the parent Include, so callers that need them persisted must flush that parent too. Ordinary Fiber teardown keeps its error containment. Covered by `scripts/cordis-include-journal.spec.ts` and `packages/host/directory-picker-auto/tests/loader-composition.spec.ts`.
+- **V14 · Include persistence results**: `include/src/index.ts` keeps an error for unsaved journal changes. `flush()` retries pending writes and rejects while changes remain unsaved; `stop()` returns the same result and always stops the child tree; a later successful flush clears previous errors. A failed `refresh()` can also reject while runtime changes remain unsaved. Patch-owned changes route to the parent Include, so callers that need them persisted must flush that parent too. The constructor omits upstream's `ctx.hmr.watch(this.filename, () => this.refresh())` registration because neither HMR provider exposes `watch()`; both find each Include by scanning loader entries for its `filename` and call `refresh()`. Ordinary Fiber teardown keeps its error containment. Covered by `scripts/cordis-include-journal.spec.ts` and `packages/host/directory-picker-auto/tests/loader-composition.spec.ts`.
 - **V15 · Configuration access across Core, Loader, Include and HMR**: rc.11 Core owns raw `Fiber.config`, `internal/config(fiber, next)`, `internal/commit` and awaited `internal/update(config, next)`. Root-fiber candidate resolution remains available without a plugin schema. Local `rawConfig`, `resolveConfig(candidate)` and `effectiveConfig` accessors retain the DSH consumer API. Fiber caches the object passed to activation or a successful update that keeps the instance; candidate resolution is pure, failed or superseded updates cannot replace the cache, and volatile updates retain references. Loader resolves only entry roots and excludes Group/Include tree carriers, so nested `!!js` expressions wait for their own injections. Include retains its tree-carrier marker and public patch exports, and HMR transfers raw config through the accessors. Covered by `scripts/cordis-config-access.spec.ts`, `scripts/cordis-core-lifecycle.spec.ts` and the boot/HMR suites.
 - **V16 · `cordis/package.json` publishes `src`**: added `src` to the `files` list, joining the other eight vendored packages. Cordis declares `"./src/*": "./src/*"` in its exports, so a tarball without `src` publishes an export map pointing at absent files; the release change judgement also reads `files` to decide whether a diff reaches the payload, and a package whose only published paths are build output has no tracked path to match.
 - **V17 · `@deepseek-ai` rescope**: every vendored manifest `name`, every internal dependency entry among the vendored set, and every module specifier that reaches them use the scoped names in the manifest table's `npm name` column. Directory names, version numbers, and dependency ranges are unchanged, and no upstream runtime identifier is renamed — `Symbol.for('schemastery')` and Schemastery's `vendor:` metadata field keep their upstream values. Re-apply with `pnpm run rescope-vendor --apply` after a sync; the table's two name columns are the mapping, restated for consumers in [docs/rescope.md](../docs/rescope.md).

From 125fabd8d0987ca5dfe4aa0fe9574ed456f39e93 Mon Sep 17 00:00:00 2001
From: fz <fz@dsh.dev>
Date: Sun, 1 Nov 2026 20:31:59 +0800
Subject: [PATCH 12/32] fix(python): deploy the runtime from the workspace
 lockfile

(cherry picked from commit c2e5f4828ecf698ba17c6b2eab67ff7b3a914d49)
---
 ...cutable-sdk-runtime-distribution.i18n.yaml |  4 +--
 ...ile-executable-sdk-runtime-distribution.md |  2 +-
 ...-executable-sdk-runtime-distribution.zh.md |  2 +-
 python/sdk-runtime/README.i18n.yaml           |  4 +--
 python/sdk-runtime/README.md                  |  2 +-
 python/sdk-runtime/README.zh.md               |  2 +-
 .../build-exe-for-python-sdk-staging.spec.ts  |  7 ++--
 scripts/build-exe-for-python-sdk.ts           | 32 +++--------------
 scripts/python-runtime-deploy.pnpmfile.d.mts  | 15 ++++++++
 scripts/python-runtime-deploy.pnpmfile.mjs    | 22 ++++++++++++
 scripts/python-runtime-deploy.spec.ts         | 35 +++++++++++++++++++
 11 files changed, 89 insertions(+), 38 deletions(-)
 create mode 100644 scripts/python-runtime-deploy.pnpmfile.d.mts
 create mode 100644 scripts/python-runtime-deploy.pnpmfile.mjs
 create mode 100644 scripts/python-runtime-deploy.spec.ts

diff --git a/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.i18n.yaml b/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.i18n.yaml
index 061ddeed50..ffb1190f7e 100644
--- a/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.i18n.yaml
+++ b/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.i18n.yaml
@@ -21,8 +21,8 @@
   en: 985e0eb63f3d1fd6
   zh: 337cc44fadc6227e
 /agent-note-single-file-executable-sdk-runtime-distribution-single-exe/decision/build-pipeline-and-artifacts:
-  en: 9a4ba22142a7be24
-  zh: 8553b02a923641a3
+  en: 13d4c28466577e97
+  zh: 4fa5cf739d5727fe
 /agent-note-single-file-executable-sdk-runtime-distribution-single-exe/decision/python-sdk-distribution-two-carriers-exe-for-production-node-for-development:
   en: b2a740a1ab7a5002
   zh: a48be6ca6fc65912
diff --git a/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.md b/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.md
index 34d346c96a..2f9c52b317 100644
--- a/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.md
+++ b/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.md
@@ -48,7 +48,7 @@ The [Office kit](2026-09-14-independent-libreoffice-kit.md) and its installed de
 
 ### Build pipeline and artifacts
 
-[`scripts/build-exe-for-python-sdk.ts`](../../../../scripts/build-exe-for-python-sdk.ts): runtime closure verification → `pnpm run build` → (after clearing) `pnpm --filter dsh-python-runtime-closure deploy --legacy --prod --config.allow-unused-patches=true --config.node-linker=hoisted --config.auto-install-peers=false --config.link-workspace-packages=true --config.hoist-workspace-packages=false` **directly into** `python/sdk-runtime/src/deepseek_harness_runtime/runtime/node/`, including [`python/sdk-runtime/runtime-bootstrap.mjs`](../../../../python/sdk-runtime/runtime-bootstrap.mjs) as the carrier-root `runtime-bootstrap.mjs` → restore direct workspace packages omitted by legacy deploy and reject any remaining manifest gap → replace staged dependency symlinks with their target bytes, remove package-manager `.bin` links, and fail if any symlink remains → verify the deployed bootstrap and inject pkg configuration with that bin plus assets covering dynamic profile, bundle, frontend, preset, native-library, and configuration reads → stage the target `node-pty` addon → invoke `pkg --sea --compress Brotli` once per target, where the vendored pkg patch pins Brotli's quality to 6: pkg passes no options, so its default quality 11 measured 132.8 s against 3.2 s at quality 6 for an archive 12% larger → write `deepseek-harness-sdk-runtime-<platform>-<arch>` under `dist-exe/` and copy it with its lightweight resource manifest and Office skill assets into the runtime directory. The Python runtime owns that bootstrap. It calls the public CLI export for ordinary launches and dispatches a provider-private selection to the same `@deepseek-ai/dsh-subprocess-local/runner` core without changing CLI grammar or adding another executable; the [native-containment reference](../../../../packages/subprocess/subprocess-local/README.md) owns that private path. Linux CI rebuilds `pty.node` inside the matching manylinux 2.28 container because legacy deploy omits that install side effect. Every target copies its native `@vscode/ripgrep` binary beside the executable as the required `-rg` sidecar; pkg runtimes select that sidecar through `process.pkg`, while ordinary Node execution uses `@vscode/ripgrep` directly. macOS uses its target prebuild and also emits the required `-spawn-helper`. The deploy flags preserve the measured runtime layout: `--legacy` is the mandatory path with inject-workspace-packages off; hoisted supplies package directories that staging makes symlink-free; staging removes nested workspace copies only when pnpm records the same dependency identity at the payload root, preserving singleton services; disabling workspace hoisting excludes unrelated workspace source packages; disabling automatic peer installation prevents undeclared peers from expanding the closure; link-workspace-packages selects direct workspace dependencies. [`pnpm-workspace.yaml`](../../../../pnpm-workspace.yaml) overrides the transitive `@deepseek-ai/cosmokit` and `@deepseek-ai/schemastery` semver requests to the pinned vendor sources so legacy deploy never resolves those unpublished names from a registry. Production deployment permits unused workspace patches because development-only tools can be absent from its closure; included-package patch failures still fail deployment. Workspace installs retain strict unused-patch validation.
+[`scripts/build-exe-for-python-sdk.ts`](../../../../scripts/build-exe-for-python-sdk.ts): runtime closure verification → `pnpm run build` → (after clearing) `pnpm --filter dsh-python-runtime-closure deploy --prod --config.allow-unused-patches=true --config.node-linker=hoisted --config.pnpmfile=scripts/python-runtime-deploy.pnpmfile.mjs --config.link-workspace-packages=true --config.hoist-workspace-packages=false` **directly into** `python/sdk-runtime/src/deepseek_harness_runtime/runtime/node/`, including [`python/sdk-runtime/runtime-bootstrap.mjs`](../../../../python/sdk-runtime/runtime-bootstrap.mjs) as the carrier-root `runtime-bootstrap.mjs` → replace staged dependency symlinks with their target bytes, remove package-manager `.bin` links, and fail if any symlink remains → verify the deployed bootstrap and inject pkg configuration with that bin plus assets covering dynamic profile, bundle, frontend, preset, native-library, and configuration reads → stage the target `node-pty` addon → invoke `pkg --sea --compress Brotli` once per target, where the vendored pkg patch pins Brotli's quality to 6: pkg passes no options, so its default quality 11 measured 132.8 s against 3.2 s at quality 6 for an archive 12% larger → write `deepseek-harness-sdk-runtime-<platform>-<arch>` under `dist-exe/` and copy it with its lightweight resource manifest and Office skill assets into the runtime directory. The Python runtime owns that bootstrap. It calls the public CLI export for ordinary launches and dispatches a provider-private selection to the same `@deepseek-ai/dsh-subprocess-local/runner` core without changing CLI grammar or adding another executable; the [native-containment reference](../../../../packages/subprocess/subprocess-local/README.md) owns that private path. Linux CI rebuilds `pty.node` inside the matching manylinux 2.28 container and copies the resulting addon into the deployed tree. Every target copies its native `@vscode/ripgrep` binary beside the executable as the required `-rg` sidecar; pkg runtimes select that sidecar through `process.pkg`, while ordinary Node execution uses `@vscode/ripgrep` directly. macOS uses its target prebuild and also emits the required `-spawn-helper`. The deploy flags preserve the measured runtime layout: the dedicated deploy lockfile retains the source lockfile’s versions and peer settings; the deploy-only pnpm hook translates reviewed local build approvals to exact file URLs without changing approval decisions; hoisted supplies package directories that staging makes symlink-free; staging removes nested workspace copies only when pnpm records the same dependency identity at the payload root, preserving singleton services; disabling workspace hoisting excludes unrelated workspace source packages; link-workspace-packages selects direct workspace dependencies. [`pnpm-workspace.yaml`](../../../../pnpm-workspace.yaml) overrides the transitive `@deepseek-ai/cosmokit` and `@deepseek-ai/schemastery` semver requests to the pinned vendor sources so deploy never resolves those unpublished names from a registry. Production deployment permits unused workspace patches because development-only tools can be absent from its closure; included-package patch failures still fail deployment. Workspace installs retain strict unused-patch validation.
 
 CI: [`.github/workflows/build-exe-for-python-sdk.yml`](../../../../.github/workflows/build-exe-for-python-sdk.yml) runs [installed-wheel validation](../testing/2026-08-23-installed-python-wheel-black-box-ci.md) on Linux/Windows x64 for pull requests and Linux ARM64 plus both macOS architectures for master pushes. The [public publication workflow](../../archived/process/2026-08-11-python-publication-workflow.md) calls it for all five targets; `workflow_dispatch` can still select a subset. Native builds run on linux-x64 / linux-arm64 (`ubuntu-24.04-arm`) / macos-arm64 / macos-x64 (`macos-15-intel`) / win-x64 (`windows-2025`), with `~/.pkg-cache` cached where applicable, and pkg handles macOS ad-hoc signing. Each leg installs the release-shaped SDK and runtime wheels into a clean venv outside the checkout, verifies their package and executable origin, then drives the complete keyless scenario set through the public SDK and direct NDJSON JSON-RPC. Trusted pull requests and master pushes additionally run a real DeepSeek two-turn tool smoke on their selected targets; fork and Dependabot heads receive no key. Linux inspects the executable and native addon's GLIBC requirements and runs an additional manylinux 2.28 smoke, while macOS checks the runtime, ripgrep, and PTY helper architectures and verifies that all three deployment targets fit the wheel tag. A full five-target run retains six artifacts, each containing one release file: the platform-independent SDK wheel and five native runtime wheels; a subset dispatch retains the SDK wheel and selected runtime wheels. Bare executables and source bundles remain intermediate test inputs. [`.gitlab-ci.yml`](../../../../.gitlab-ci.yml) accepts `python-v<repository-version>` tag pipelines whose version matches the root `package.json`, builds one SDK wheel and five native runtime wheels, then a single serialized job checks and publishes all six to the project PyPI registry. The [`python/sdk-runtime` README](../../../../python/sdk-runtime/README.md) owns the Windows target and the explicit exclusion of Windows arm64.
 
diff --git a/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.zh.md b/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.zh.md
index 6e1e2c51b6..ca1976c9bd 100644
--- a/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.zh.md
+++ b/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.zh.md
@@ -48,7 +48,7 @@ exe 的 VFS 内是**构建产物形态的真实包树**（各包的 `lib/` + 真
 
 ### 构建流水线与产物
 
-[`scripts/build-exe-for-python-sdk.ts`](../../../../scripts/build-exe-for-python-sdk.ts)：运行时闭包校验 → `pnpm run build` →（清空后）`pnpm --filter dsh-python-runtime-closure deploy --legacy --prod --config.allow-unused-patches=true --config.node-linker=hoisted --config.auto-install-peers=false --config.link-workspace-packages=true --config.hoist-workspace-packages=false` **直接写入** `python/sdk-runtime/src/deepseek_harness_runtime/runtime/node/`，其中包含作为载体根目录 `runtime-bootstrap.mjs` 的 [`python/sdk-runtime/runtime-bootstrap.mjs`](../../../../python/sdk-runtime/runtime-bootstrap.mjs) → 恢复 legacy deploy 遗漏的直接工作区包，并拒绝剩余的 manifest 缺口 → 将暂存依赖中的符号链接替换为目标文件内容，删除包管理器的 `.bin` 链接，并在仍有任何符号链接时失败 → 验证已部署的 bootstrap，并注入以该文件为 bin 的 pkg 配置及覆盖动态读取 profile、bundle、前端、preset、原生库与配置文件的 assets → 暂存目标平台的 `node-pty` addon → 每个构建目标调用一次 `pkg --sea --compress Brotli`，其中 vendor 的 pkg 补丁把 Brotli 质量固定为 6：pkg 不传参数时默认质量 11，同一载荷实测 132.8 s，质量 6 为 3.2 s，产物大 12% → 将 `deepseek-harness-sdk-runtime-<platform>-<arch>` 写入 `dist-exe/`，并将它与轻量资源清单及 Office skill 资源一同拷回运行时目录。该 bootstrap 由 Python runtime 拥有；普通启动时它调用公开 CLI export，而提供方私有选择会分派到同一个 `@deepseek-ai/dsh-subprocess-local/runner` 核心，不改变 CLI 语法，也不增加另一个可执行文件；[原生 containment 参考](../../../../packages/subprocess/subprocess-local/README.zh.md)负责这条私有路径。Linux CI 会在匹配的 manylinux 2.28 容器中重新构建 `pty.node`，因为 legacy deploy 会遗漏这一安装副作用。每个目标都会把对应的原生 `@vscode/ripgrep` 二进制复制到可执行文件旁，作为必需的 `-rg` 伴随文件；pkg 运行时通过 `process.pkg` 选择该伴随文件，普通 Node 执行则直接使用 `@vscode/ripgrep`。macOS 使用对应目标的预构建产物，并额外生成所需的 `-spawn-helper`。部署标志都有实测依据：未启用 `inject-workspace-packages` 时必须使用 `--legacy`；`hoisted` 提供包目录，再由暂存步骤消除符号链接；只有 pnpm 在载荷根目录记录了相同依赖标识时，暂存步骤才删除对应的嵌套工作区副本，以保留服务单例；关闭工作区提升可排除无关的工作区源码包；关闭对等依赖自动安装可防止未声明的对等依赖扩大闭包；`link-workspace-packages` 选择直接工作区依赖。[`pnpm-workspace.yaml`](../../../../pnpm-workspace.yaml) 将传递的 `@deepseek-ai/cosmokit` 与 `@deepseek-ai/schemastery` semver 请求覆盖到固定的 vendor 源码，使 legacy deploy 不会从注册表解析这些未发布名称。 生产部署允许未使用的工作区补丁，因为开发工具可能不属于运行时闭包；闭包内包的补丁应用失败仍会中止部署。工作区安装继续严格校验未使用的补丁。
+[`scripts/build-exe-for-python-sdk.ts`](../../../../scripts/build-exe-for-python-sdk.ts)：运行时闭包校验 → `pnpm run build` →（清空后）`pnpm --filter dsh-python-runtime-closure deploy --prod --config.allow-unused-patches=true --config.node-linker=hoisted --config.pnpmfile=scripts/python-runtime-deploy.pnpmfile.mjs --config.link-workspace-packages=true --config.hoist-workspace-packages=false` **直接写入** `python/sdk-runtime/src/deepseek_harness_runtime/runtime/node/`，其中包含作为载体根目录 `runtime-bootstrap.mjs` 的 [`python/sdk-runtime/runtime-bootstrap.mjs`](../../../../python/sdk-runtime/runtime-bootstrap.mjs) → 将暂存依赖中的符号链接替换为目标文件内容，删除包管理器的 `.bin` 链接，并在仍有任何符号链接时失败 → 验证已部署的 bootstrap，并注入以该文件为 bin 的 pkg 配置及覆盖动态读取 profile、bundle、前端、preset、原生库与配置文件的 assets → 暂存目标平台的 `node-pty` addon → 每个构建目标调用一次 `pkg --sea --compress Brotli`，其中 vendor 的 pkg 补丁把 Brotli 质量固定为 6：pkg 不传参数时默认质量 11，同一载荷实测 132.8 s，质量 6 为 3.2 s，产物大 12% → 将 `deepseek-harness-sdk-runtime-<platform>-<arch>` 写入 `dist-exe/`，并将它与轻量资源清单及 Office skill 资源一同拷回运行时目录。该 bootstrap 由 Python runtime 拥有；普通启动时它调用公开 CLI export，而提供方私有选择会分派到同一个 `@deepseek-ai/dsh-subprocess-local/runner` 核心，不改变 CLI 语法，也不增加另一个可执行文件；[原生 containment 参考](../../../../packages/subprocess/subprocess-local/README.zh.md)负责这条私有路径。Linux CI 会在匹配的 manylinux 2.28 容器中重新构建 `pty.node`，并将生成的 addon 复制到部署树中。每个目标都会把对应的原生 `@vscode/ripgrep` 二进制复制到可执行文件旁，作为必需的 `-rg` 伴随文件；pkg 运行时通过 `process.pkg` 选择该伴随文件，普通 Node 执行则直接使用 `@vscode/ripgrep`。macOS 使用对应目标的预构建产物，并额外生成所需的 `-spawn-helper`。部署标志都有实测依据：独立部署锁文件保留源锁文件的版本及对等依赖设置；仅用于部署的 pnpm hook 将已审阅的本地构建审批转换为精确文件 URL，不改变审批决定；`hoisted` 提供包目录，再由暂存步骤消除符号链接；只有 pnpm 在载荷根目录记录了相同依赖标识时，暂存步骤才删除对应的嵌套工作区副本，以保留服务单例；关闭工作区提升可排除无关的工作区源码包；`link-workspace-packages` 选择直接工作区依赖。[`pnpm-workspace.yaml`](../../../../pnpm-workspace.yaml) 将传递的 `@deepseek-ai/cosmokit` 与 `@deepseek-ai/schemastery` semver 请求覆盖到固定的 vendor 源码，使 deploy 不会从注册表解析这些未发布名称。 生产部署允许未使用的工作区补丁，因为开发工具可能不属于运行时闭包；闭包内包的补丁应用失败仍会中止部署。工作区安装继续严格校验未使用的补丁。
 
 CI 使用 [`.github/workflows/build-exe-for-python-sdk.yml`](../../../../.github/workflows/build-exe-for-python-sdk.yml)：[安装后 wheel 包验证](../testing/2026-08-23-installed-python-wheel-black-box-ci.zh.md)在拉取请求上运行 Linux/Windows x64，在 master 推送上运行 Linux ARM64 与两种 macOS 架构。[公开发布工作流](../../archived/process/2026-08-11-python-publication-workflow.md)调用它构建全部五个目标；`workflow_dispatch` 仍可选择部分目标。linux-x64、linux-arm64（`ubuntu-24.04-arm`）、macos-arm64、macos-x64（`macos-15-intel`）与 win-x64（`windows-2025`）分别进行原生构建，并在适用平台缓存 `~/.pkg-cache`；macOS 的 ad-hoc 签名由 pkg 处理。每个平台都把发布形态的 SDK wheel 包与运行时 wheel 包安装到 checkout 外的干净 venv，证明包与可执行文件来源，再通过公开 SDK 与直接 NDJSON JSON-RPC 运行完整 keyless 场景。可信拉取请求与 master 推送还会在各自选定的目标上运行真实 DeepSeek 双轮工具冒烟测试；fork 与 Dependabot head 不会获得密钥。Linux 会检查可执行文件和原生 addon 各自的 GLIBC 依赖，并额外运行 manylinux 2.28 冒烟测试；macOS 则检查 runtime、ripgrep 与 PTY helper 的架构，并验证三个载荷的部署目标都符合 wheel 包标签。完整构建五个目标时保留 6 个产物，每个产物只含一个发布文件：平台无关的 SDK wheel 包与 5 个原生运行时 wheel 包；手动选择部分目标时保留 SDK wheel 与所选运行时 wheel。裸 exe 与源码包只作为测试中间输入。[`.gitlab-ci.yml`](../../../../.gitlab-ci.yml) 只接受版本与根目录 `package.json` 匹配的 `python-v<repository-version>` 标签流水线，构建一个 SDK wheel 包和 5 个原生运行时 wheel 包，再由单个串行任务校验并将这 6 个文件发布到项目的 PyPI 注册表。[`python/sdk-runtime` README](../../../../python/sdk-runtime/README.zh.md)负责 Windows 目标及对 Windows arm64 的明确排除。
 
diff --git a/python/sdk-runtime/README.i18n.yaml b/python/sdk-runtime/README.i18n.yaml
index b7f6458756..9cc5d6efa9 100644
--- a/python/sdk-runtime/README.i18n.yaml
+++ b/python/sdk-runtime/README.i18n.yaml
@@ -15,5 +15,5 @@
   en: 0f476fb87a1a3349
   zh: 359dbd9b24b18b46
 /deepseek-harness-runtime-bin/build-and-distribution:
-  en: a41e8eb7e99b9532
-  zh: 2789d8f43b1b54be
+  en: 2512cd7c3624ef6e
+  zh: 455f6a528e5f9d61
diff --git a/python/sdk-runtime/README.md b/python/sdk-runtime/README.md
index 346813cb1c..21a5ec546d 100644
--- a/python/sdk-runtime/README.md
+++ b/python/sdk-runtime/README.md
@@ -62,7 +62,7 @@ External profile management uses `dsh plugin --profile <name> ...`. After explic
 
 ## Build and distribution
 
-Production deployment permits unused workspace patches for packages outside the runtime closure; patches for included packages must still apply successfully. This exception is confined to the deploy command; repository installation still rejects unused patches.
+Production deployment installs the workspace lockfile’s pinned dependency graph without re-resolving versions. It permits unused workspace patches for packages outside the runtime closure; patches for included packages must still apply successfully. This exception is confined to the deploy command; repository installation still rejects unused patches.
 
 From the repository root, `pnpm exec tsx scripts/build-exe-for-python-sdk.ts` verifies the closure, builds packages, deploys a symlink-free tree, packages the selected target, and syncs the executable and sidecars into this module. The executable stores embedded files with Brotli compression. Only the target platform’s PTY prebuilds are packaged. Package README, CHANGELOG, HISTORY Markdown, source maps, and TypeScript declarations outside runtime assets are omitted. Deployment disables workspace hoisting, and packaging excludes checkout dependencies and workspace source trees outside the deployment so dependency scans cannot add development packages to the payload. Staging shares root workspace packages with nested consumers of the same pnpm dependency identity, preserving singleton services while retaining different peer resolutions. `scripts/build-python-release.py` stages release-shaped wheels at the root repository version and pins `deepseek-harness-sdk` to the exact runtime version.
 
diff --git a/python/sdk-runtime/README.zh.md b/python/sdk-runtime/README.zh.md
index 0339c1020b..e187ceb37d 100644
--- a/python/sdk-runtime/README.zh.md
+++ b/python/sdk-runtime/README.zh.md
@@ -62,7 +62,7 @@ Python 与打包的 bootstrap 共享资源布局：`<cache>/<identity>/office/`
 
 ## 构建与分发
 
-生产部署允许工作区中不属于运行时闭包的补丁保持未使用；闭包内包的补丁仍必须成功应用。此例外仅用于部署命令，仓库安装仍拒绝未使用的补丁。
+生产部署按工作区锁文件安装固定的依赖图，不重新解析版本。部署允许工作区中不属于运行时闭包的补丁保持未使用；闭包内包的补丁仍必须成功应用。此例外仅用于部署命令，仓库安装仍拒绝未使用的补丁。
 
 在仓库根目录运行 `pnpm exec tsx scripts/build-exe-for-python-sdk.ts`，会校验闭包、构建包、部署无符号链接的文件树、打包所选目标，并把可执行程序及伴随文件同步到本模块。可执行文件使用 Brotli 压缩存储内嵌文件。打包时只保留目标平台的 PTY 预构建文件，并排除运行时资源目录之外的包内 README、CHANGELOG、HISTORY Markdown 文档、source map 和 TypeScript 声明。部署会关闭工作区提升，打包时还会排除部署目录之外的检出依赖和工作区源码树，防止依赖扫描把开发包加入载荷。暂存步骤让使用相同 pnpm 依赖标识的嵌套消费者共享根目录的工作区包，保留服务单例，同时保留不同的对等依赖解析。`scripts/build-python-release.py` 按仓库根版本暂存发布形态的 wheel 包，并将 `deepseek-harness-sdk` 固定到完全相同的运行时版本。
 
diff --git a/scripts/build-exe-for-python-sdk-staging.spec.ts b/scripts/build-exe-for-python-sdk-staging.spec.ts
index cc5d526463..2429086b8c 100644
--- a/scripts/build-exe-for-python-sdk-staging.spec.ts
+++ b/scripts/build-exe-for-python-sdk-staging.spec.ts
@@ -66,7 +66,7 @@ it('copies workspace package links as files and removes command shims', async ()
   expect(await listSymlinks(staging)).toEqual([])
 })
 
-it('shares an identical workspace package while retaining different peers and third-party copies', async () => {
+it.each(['source', 'deployment'])('shares identical workspace packages with %s-relative metadata', async (base) => {
   const workspace = await fixture('dsh-python-staging-dedupe-')
   const staging = join(workspace, 'payload')
   const modules = join(staging, 'node_modules')
@@ -79,14 +79,15 @@ it('shares an identical workspace package while retaining different peers and th
     await mkdir(directory, { recursive: true })
     await writeFile(join(directory, 'index.js'), 'exports.scheduler = Symbol("scheduler")\n')
   }
-  const locations = (paths: string[]) => paths.map(path => relative(workspace, path))
+  const metadataRoot = base === 'source' ? workspace : staging
+  const locations = (paths: string[]) => paths.map(path => relative(metadataRoot, path))
   await writeFile(join(modules, '.modules.yaml'), JSON.stringify({ hoistedLocations: {
     '@fixture/tools@file:packages/tools(peer@1)': locations([root, duplicate]),
     '@fixture/tools@file:packages/tools(peer@2)': locations([differentPeers]),
     'external@1.0.0(@fixture/tools@file:packages/tools)': locations([external, externalCopy]),
   } }))
 
-  await deduplicateStagedWorkspacePackages(staging, workspace)
+  await deduplicateStagedWorkspacePackages(staging, metadataRoot)
 
   expect(existsSync(duplicate)).toBe(false)
   for (const directory of [root, differentPeers, external, externalCopy]) {
diff --git a/scripts/build-exe-for-python-sdk.ts b/scripts/build-exe-for-python-sdk.ts
index 447c98ff14..627c13f0e2 100644
--- a/scripts/build-exe-for-python-sdk.ts
+++ b/scripts/build-exe-for-python-sdk.ts
@@ -9,7 +9,7 @@
 import { createHash } from 'node:crypto'
 import { build as bundle } from 'tsdown'
 import { spawn } from 'node:child_process'
-import { pnpmInvocation, restoreLegacyHoists } from './executable-packaging.ts'
+import { pnpmInvocation } from './executable-packaging.ts'
 import { existsSync, statSync } from 'node:fs'
 import { chmod, copyFile, cp, glob, mkdir, readFile, readdir, rm, writeFile } from 'node:fs/promises'
 import { basename, dirname, join, resolve, sep } from 'node:path'
@@ -37,8 +37,6 @@ const OUT_DIR = 'dist-exe'
 const PYTHON_RUNTIME_DIR = 'python/sdk-runtime/src/deepseek_harness_runtime/runtime'
 /** The deployed closure doubles as the node-mode carrier. */
 const PYTHON_NODE_SUBDIR = 'node'
-/** Legacy deploy may hoist peer-specialized workspace packages back here. */
-const DEPLOY_SOURCE_NODE_MODULES = 'python/sdk-runtime/node_modules'
 /** Documentation excluded from the generated runtime directory. */
 const DEPLOY_ONLY_DOCS = ['README.md', 'README.zh.md', 'README.i18n.yaml']
 
@@ -304,24 +302,19 @@ class SingleExeBuild {
     }
     if (this.cli.dryRun) console.log(`build-exe-for-python-sdk: [dry-run] rm -rf ${this.staging}`)
     else await rm(this.staging, { recursive: true, force: true })
-    try { await this.runPnpm('deploy', [
+    await this.runPnpm('deploy', [
       '--filter',
       DEPLOY_ROOT_PACKAGE,
       'deploy',
-      '--legacy',
       '--prod',
       // Production deployment omits workspace tooling such as Electron's patched signer.
       '--config.allow-unused-patches=true',
       '--config.node-linker=hoisted',
-      '--config.auto-install-peers=false',
+      `--config.pnpmfile=${join(root, 'scripts/python-runtime-deploy.pnpmfile.mjs')}`,
       '--config.link-workspace-packages=true',
       '--config.hoist-workspace-packages=false',
       this.staging,
-    ]) } finally {
-      // Legacy deploy records production-only workspace state; restore the development installation before exec.
-      await this.runPnpm('restore development dependencies', ['install', '--offline', '--frozen-lockfile', '--prod=false', '--ignore-scripts'])
-    }
-    await this.restoreLegacyHoists()
+    ])
     await this.materializeStagedLinks()
     if (this.cli.dryRun) {
       for (const name of DEPLOY_ONLY_DOCS) console.log(`build-exe-for-python-sdk: [dry-run] rm -f ${join(this.staging, name)}`)
@@ -333,21 +326,6 @@ class SingleExeBuild {
     }
   }
 
-  /**
-   * Restore direct packages that pnpm's legacy hoister places beside the deploy
-   * source instead of in the target. The runtime manifest supplies every peer,
-   * so package-local node_modules trees are omitted to preserve one flat Cordis
-   * instance and a symlink-free packaged payload.
-   */
-  private async restoreLegacyHoists(): Promise<void> {
-    if (this.cli.dryRun) {
-      console.log('build-exe-for-python-sdk: [dry-run] restore direct dependencies omitted by legacy deploy')
-      return
-    }
-    const restored = await restoreLegacyHoists(this.staging, resolve(root, DEPLOY_SOURCE_NODE_MODULES))
-    if (restored.length > 0) console.log(`build-exe-for-python-sdk: restored legacy deploy hoists: ${restored.join(', ')}`)
-  }
-
   /** Replace deploy-time package links with files and reject any remaining link. */
   private async materializeStagedLinks(): Promise<void> {
     if (this.cli.dryRun) {
@@ -355,7 +333,7 @@ class SingleExeBuild {
       return
     }
     await materializeStagedLinks(this.staging)
-    await deduplicateStagedWorkspacePackages(this.staging, root)
+    await deduplicateStagedWorkspacePackages(this.staging, this.staging)
   }
 
   /** Add the executable entry and pkg assets to the staged manifest. */
diff --git a/scripts/python-runtime-deploy.pnpmfile.d.mts b/scripts/python-runtime-deploy.pnpmfile.d.mts
new file mode 100644
index 0000000000..d9808daf64
--- /dev/null
+++ b/scripts/python-runtime-deploy.pnpmfile.d.mts
@@ -0,0 +1,15 @@
+/** Workspace settings relevant to exact local build approvals. */
+export interface RuntimeDeployConfig {
+  readonly allowBuilds?: Readonly<Record<string, boolean | string>>
+  readonly [setting: string]: unknown
+}
+
+/** Pnpm configuration hooks scoped to Python runtime deployment. */
+export const hooks: {
+  /**
+   * Translate local build identities without changing their approval status.
+   * @param config - Source workspace configuration.
+   * @returns Deployment configuration with exact file URL approvals.
+   */
+  updateConfig(config: RuntimeDeployConfig): RuntimeDeployConfig
+}
diff --git a/scripts/python-runtime-deploy.pnpmfile.mjs b/scripts/python-runtime-deploy.pnpmfile.mjs
new file mode 100644
index 0000000000..d3cd00ff71
--- /dev/null
+++ b/scripts/python-runtime-deploy.pnpmfile.mjs
@@ -0,0 +1,22 @@
+/** Preserve workspace build approvals when pnpm deploy converts local dependencies to file URLs. */
+import { resolve } from 'node:path'
+import { pathToFileURL } from 'node:url'
+
+/**
+ * Translate local build identities without changing their approved or denied status.
+ * @param {Record<string, unknown> & { allowBuilds?: Record<string, boolean | string> }} config - Source workspace configuration.
+ * @returns {Record<string, unknown>} Deployment configuration with exact file URL approvals.
+ */
+function updateConfig(config) {
+  if (config.allowBuilds === undefined) return config
+  const allowBuilds = Object.fromEntries(Object.entries(config.allowBuilds).map(([key, value]) => {
+    const marker = key.indexOf('@file:')
+    if (marker < 0 || key.slice(marker + 6).startsWith('//')) return [key, value]
+    const source = resolve(import.meta.dirname, '..', key.slice(marker + 6))
+    return [`${key.slice(0, marker + 1)}${pathToFileURL(source).href}`, value]
+  }))
+  return { ...config, allowBuilds }
+}
+
+/** Pnpm configuration hooks scoped to Python runtime deployment. */
+export const hooks = { updateConfig }
diff --git a/scripts/python-runtime-deploy.spec.ts b/scripts/python-runtime-deploy.spec.ts
new file mode 100644
index 0000000000..a06b7c1b5b
--- /dev/null
+++ b/scripts/python-runtime-deploy.spec.ts
@@ -0,0 +1,35 @@
+import { resolve } from 'node:path'
+import { pathToFileURL } from 'node:url'
+import { expect, it } from 'vitest'
+import { hooks } from './python-runtime-deploy.pnpmfile.mjs'
+
+it('preserves exact local build approvals, denials, and unrelated configuration', () => {
+  const config = {
+    strictDepBuilds: true,
+    allowBuilds: {
+      'allowed@file:packages/allowed': true,
+      'denied@file:packages/denied': false,
+      'pending@file:packages/pending': 'set this to true or false',
+      'absolute@file:///already/reviewed': true,
+      'registry-package': false,
+    },
+  }
+  const identity = (name: string) => `${name}@${pathToFileURL(resolve(import.meta.dirname, '..', 'packages', name)).href}`
+
+  expect(hooks.updateConfig(config)).toEqual({
+    strictDepBuilds: true,
+    allowBuilds: {
+      [identity('allowed')]: true,
+      [identity('denied')]: false,
+      [identity('pending')]: 'set this to true or false',
+      'absolute@file:///already/reviewed': true,
+      'registry-package': false,
+    },
+  })
+  expect(config.allowBuilds['allowed@file:packages/allowed']).toBe(true)
+})
+
+it('leaves configuration without local build rules unchanged', () => {
+  const config = { strictDepBuilds: true }
+  expect(hooks.updateConfig(config)).toBe(config)
+})

From 67e2d1e50624ca3dc3271ec5e69394dc80efb8d3 Mon Sep 17 00:00:00 2001
From: fz <fz@dsh.dev>
Date: Sun, 1 Nov 2026 21:24:41 +0800
Subject: [PATCH 13/32] fix(python): preserve deployed dependency validation

(cherry picked from commit e18abca88589347975a5866925c590a16f1b2aed)
---
 ...cutable-sdk-runtime-distribution.i18n.yaml |  4 +--
 ...ile-executable-sdk-runtime-distribution.md |  2 +-
 ...-executable-sdk-runtime-distribution.zh.md |  2 +-
 ...-01-locked-python-runtime-deploy.i18n.yaml | 22 +++++++++++++
 ...2026-11-01-locked-python-runtime-deploy.md | 33 +++++++++++++++++++
 ...6-11-01-locked-python-runtime-deploy.zh.md | 33 +++++++++++++++++++
 scripts/build-exe-for-python-sdk-staging.ts   |  8 ++---
 scripts/build-exe-for-python-sdk.spec.ts      |  3 ++
 scripts/build-exe-for-python-sdk.ts           |  3 +-
 scripts/executable-packaging.spec.ts          | 19 ++++++++++-
 scripts/executable-packaging.ts               | 24 ++++++++++----
 scripts/python-runtime-deploy.pnpmfile.mjs    |  9 +++--
 scripts/verify-runtime-closure.ts             |  4 +--
 13 files changed, 145 insertions(+), 21 deletions(-)
 create mode 100644 .agents/notes/implemented/bug-fix/2026-11-01-locked-python-runtime-deploy.i18n.yaml
 create mode 100644 .agents/notes/implemented/bug-fix/2026-11-01-locked-python-runtime-deploy.md
 create mode 100644 .agents/notes/implemented/bug-fix/2026-11-01-locked-python-runtime-deploy.zh.md

diff --git a/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.i18n.yaml b/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.i18n.yaml
index ffb1190f7e..95484d284b 100644
--- a/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.i18n.yaml
+++ b/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.i18n.yaml
@@ -21,8 +21,8 @@
   en: 985e0eb63f3d1fd6
   zh: 337cc44fadc6227e
 /agent-note-single-file-executable-sdk-runtime-distribution-single-exe/decision/build-pipeline-and-artifacts:
-  en: 13d4c28466577e97
-  zh: 4fa5cf739d5727fe
+  en: 4a55602284b462e8
+  zh: 762c4f8b719f179c
 /agent-note-single-file-executable-sdk-runtime-distribution-single-exe/decision/python-sdk-distribution-two-carriers-exe-for-production-node-for-development:
   en: b2a740a1ab7a5002
   zh: a48be6ca6fc65912
diff --git a/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.md b/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.md
index 2f9c52b317..a70ab115be 100644
--- a/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.md
+++ b/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.md
@@ -48,7 +48,7 @@ The [Office kit](2026-09-14-independent-libreoffice-kit.md) and its installed de
 
 ### Build pipeline and artifacts
 
-[`scripts/build-exe-for-python-sdk.ts`](../../../../scripts/build-exe-for-python-sdk.ts): runtime closure verification → `pnpm run build` → (after clearing) `pnpm --filter dsh-python-runtime-closure deploy --prod --config.allow-unused-patches=true --config.node-linker=hoisted --config.pnpmfile=scripts/python-runtime-deploy.pnpmfile.mjs --config.link-workspace-packages=true --config.hoist-workspace-packages=false` **directly into** `python/sdk-runtime/src/deepseek_harness_runtime/runtime/node/`, including [`python/sdk-runtime/runtime-bootstrap.mjs`](../../../../python/sdk-runtime/runtime-bootstrap.mjs) as the carrier-root `runtime-bootstrap.mjs` → replace staged dependency symlinks with their target bytes, remove package-manager `.bin` links, and fail if any symlink remains → verify the deployed bootstrap and inject pkg configuration with that bin plus assets covering dynamic profile, bundle, frontend, preset, native-library, and configuration reads → stage the target `node-pty` addon → invoke `pkg --sea --compress Brotli` once per target, where the vendored pkg patch pins Brotli's quality to 6: pkg passes no options, so its default quality 11 measured 132.8 s against 3.2 s at quality 6 for an archive 12% larger → write `deepseek-harness-sdk-runtime-<platform>-<arch>` under `dist-exe/` and copy it with its lightweight resource manifest and Office skill assets into the runtime directory. The Python runtime owns that bootstrap. It calls the public CLI export for ordinary launches and dispatches a provider-private selection to the same `@deepseek-ai/dsh-subprocess-local/runner` core without changing CLI grammar or adding another executable; the [native-containment reference](../../../../packages/subprocess/subprocess-local/README.md) owns that private path. Linux CI rebuilds `pty.node` inside the matching manylinux 2.28 container and copies the resulting addon into the deployed tree. Every target copies its native `@vscode/ripgrep` binary beside the executable as the required `-rg` sidecar; pkg runtimes select that sidecar through `process.pkg`, while ordinary Node execution uses `@vscode/ripgrep` directly. macOS uses its target prebuild and also emits the required `-spawn-helper`. The deploy flags preserve the measured runtime layout: the dedicated deploy lockfile retains the source lockfile’s versions and peer settings; the deploy-only pnpm hook translates reviewed local build approvals to exact file URLs without changing approval decisions; hoisted supplies package directories that staging makes symlink-free; staging removes nested workspace copies only when pnpm records the same dependency identity at the payload root, preserving singleton services; disabling workspace hoisting excludes unrelated workspace source packages; link-workspace-packages selects direct workspace dependencies. [`pnpm-workspace.yaml`](../../../../pnpm-workspace.yaml) overrides the transitive `@deepseek-ai/cosmokit` and `@deepseek-ai/schemastery` semver requests to the pinned vendor sources so deploy never resolves those unpublished names from a registry. Production deployment permits unused workspace patches because development-only tools can be absent from its closure; included-package patch failures still fail deployment. Workspace installs retain strict unused-patch validation.
+[`scripts/build-exe-for-python-sdk.ts`](../../../../scripts/build-exe-for-python-sdk.ts): runtime closure verification → `pnpm run build` → (after clearing) `pnpm --filter dsh-python-runtime-closure deploy --prod --config.allow-unused-patches=true --config.node-linker=hoisted --config.pnpmfile=scripts/python-runtime-deploy.pnpmfile.mjs --config.link-workspace-packages=true --config.hoist-workspace-packages=false` **directly into** `python/sdk-runtime/src/deepseek_harness_runtime/runtime/node/`, including [`python/sdk-runtime/runtime-bootstrap.mjs`](../../../../python/sdk-runtime/runtime-bootstrap.mjs) as the carrier-root `runtime-bootstrap.mjs` → replace staged dependency symlinks with their target bytes, remove package-manager `.bin` links, and fail if any symlink remains → reject missing direct dependency directories, verify the deployed bootstrap, and inject pkg configuration with that bin plus assets covering dynamic profile, bundle, frontend, preset, native-library, and configuration reads → stage the target `node-pty` addon → invoke `pkg --sea --compress Brotli` once per target, where the vendored pkg patch pins Brotli's quality to 6: pkg passes no options, so its default quality 11 measured 132.8 s against 3.2 s at quality 6 for an archive 12% larger → write `deepseek-harness-sdk-runtime-<platform>-<arch>` under `dist-exe/` and copy it with its lightweight resource manifest and Office skill assets into the runtime directory. The Python runtime owns that bootstrap. It calls the public CLI export for ordinary launches and dispatches a provider-private selection to the same `@deepseek-ai/dsh-subprocess-local/runner` core without changing CLI grammar or adding another executable; the [native-containment reference](../../../../packages/subprocess/subprocess-local/README.md) owns that private path. Linux CI rebuilds `pty.node` inside the matching manylinux 2.28 container and copies the resulting addon into the deployed tree. Every target copies its native `@vscode/ripgrep` binary beside the executable as the required `-rg` sidecar; pkg runtimes select that sidecar through `process.pkg`, while ordinary Node execution uses `@vscode/ripgrep` directly. macOS uses its target prebuild and also emits the required `-spawn-helper`. The deploy flags preserve the measured runtime layout: the dedicated deploy lockfile retains the source lockfile’s versions and peer settings; [`scripts/python-runtime-deploy.pnpmfile.mjs`](../../../../scripts/python-runtime-deploy.pnpmfile.mjs) preserves exact local build approvals; the [locked deployment decision](../bug-fix/2026-11-01-locked-python-runtime-deploy.md) supersedes the legacy deployment requirement and disabled-peer rationale; hoisted supplies package directories that staging makes symlink-free; staging removes nested workspace copies only when pnpm records the same dependency identity at the payload root, preserving singleton services; disabling workspace hoisting excludes unrelated workspace source packages; link-workspace-packages selects direct workspace dependencies. [`pnpm-workspace.yaml`](../../../../pnpm-workspace.yaml) overrides the transitive `@deepseek-ai/cosmokit` and `@deepseek-ai/schemastery` semver requests to the pinned vendor sources so deploy never resolves those unpublished names from a registry. Production deployment permits unused workspace patches because development-only tools can be absent from its closure; included-package patch failures still fail deployment. Workspace installs retain strict unused-patch validation.
 
 CI: [`.github/workflows/build-exe-for-python-sdk.yml`](../../../../.github/workflows/build-exe-for-python-sdk.yml) runs [installed-wheel validation](../testing/2026-08-23-installed-python-wheel-black-box-ci.md) on Linux/Windows x64 for pull requests and Linux ARM64 plus both macOS architectures for master pushes. The [public publication workflow](../../archived/process/2026-08-11-python-publication-workflow.md) calls it for all five targets; `workflow_dispatch` can still select a subset. Native builds run on linux-x64 / linux-arm64 (`ubuntu-24.04-arm`) / macos-arm64 / macos-x64 (`macos-15-intel`) / win-x64 (`windows-2025`), with `~/.pkg-cache` cached where applicable, and pkg handles macOS ad-hoc signing. Each leg installs the release-shaped SDK and runtime wheels into a clean venv outside the checkout, verifies their package and executable origin, then drives the complete keyless scenario set through the public SDK and direct NDJSON JSON-RPC. Trusted pull requests and master pushes additionally run a real DeepSeek two-turn tool smoke on their selected targets; fork and Dependabot heads receive no key. Linux inspects the executable and native addon's GLIBC requirements and runs an additional manylinux 2.28 smoke, while macOS checks the runtime, ripgrep, and PTY helper architectures and verifies that all three deployment targets fit the wheel tag. A full five-target run retains six artifacts, each containing one release file: the platform-independent SDK wheel and five native runtime wheels; a subset dispatch retains the SDK wheel and selected runtime wheels. Bare executables and source bundles remain intermediate test inputs. [`.gitlab-ci.yml`](../../../../.gitlab-ci.yml) accepts `python-v<repository-version>` tag pipelines whose version matches the root `package.json`, builds one SDK wheel and five native runtime wheels, then a single serialized job checks and publishes all six to the project PyPI registry. The [`python/sdk-runtime` README](../../../../python/sdk-runtime/README.md) owns the Windows target and the explicit exclusion of Windows arm64.
 
diff --git a/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.zh.md b/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.zh.md
index ca1976c9bd..e1ff276504 100644
--- a/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.zh.md
+++ b/.agents/notes/implemented/architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.zh.md
@@ -48,7 +48,7 @@ exe 的 VFS 内是**构建产物形态的真实包树**（各包的 `lib/` + 真
 
 ### 构建流水线与产物
 
-[`scripts/build-exe-for-python-sdk.ts`](../../../../scripts/build-exe-for-python-sdk.ts)：运行时闭包校验 → `pnpm run build` →（清空后）`pnpm --filter dsh-python-runtime-closure deploy --prod --config.allow-unused-patches=true --config.node-linker=hoisted --config.pnpmfile=scripts/python-runtime-deploy.pnpmfile.mjs --config.link-workspace-packages=true --config.hoist-workspace-packages=false` **直接写入** `python/sdk-runtime/src/deepseek_harness_runtime/runtime/node/`，其中包含作为载体根目录 `runtime-bootstrap.mjs` 的 [`python/sdk-runtime/runtime-bootstrap.mjs`](../../../../python/sdk-runtime/runtime-bootstrap.mjs) → 将暂存依赖中的符号链接替换为目标文件内容，删除包管理器的 `.bin` 链接，并在仍有任何符号链接时失败 → 验证已部署的 bootstrap，并注入以该文件为 bin 的 pkg 配置及覆盖动态读取 profile、bundle、前端、preset、原生库与配置文件的 assets → 暂存目标平台的 `node-pty` addon → 每个构建目标调用一次 `pkg --sea --compress Brotli`，其中 vendor 的 pkg 补丁把 Brotli 质量固定为 6：pkg 不传参数时默认质量 11，同一载荷实测 132.8 s，质量 6 为 3.2 s，产物大 12% → 将 `deepseek-harness-sdk-runtime-<platform>-<arch>` 写入 `dist-exe/`，并将它与轻量资源清单及 Office skill 资源一同拷回运行时目录。该 bootstrap 由 Python runtime 拥有；普通启动时它调用公开 CLI export，而提供方私有选择会分派到同一个 `@deepseek-ai/dsh-subprocess-local/runner` 核心，不改变 CLI 语法，也不增加另一个可执行文件；[原生 containment 参考](../../../../packages/subprocess/subprocess-local/README.zh.md)负责这条私有路径。Linux CI 会在匹配的 manylinux 2.28 容器中重新构建 `pty.node`，并将生成的 addon 复制到部署树中。每个目标都会把对应的原生 `@vscode/ripgrep` 二进制复制到可执行文件旁，作为必需的 `-rg` 伴随文件；pkg 运行时通过 `process.pkg` 选择该伴随文件，普通 Node 执行则直接使用 `@vscode/ripgrep`。macOS 使用对应目标的预构建产物，并额外生成所需的 `-spawn-helper`。部署标志都有实测依据：独立部署锁文件保留源锁文件的版本及对等依赖设置；仅用于部署的 pnpm hook 将已审阅的本地构建审批转换为精确文件 URL，不改变审批决定；`hoisted` 提供包目录，再由暂存步骤消除符号链接；只有 pnpm 在载荷根目录记录了相同依赖标识时，暂存步骤才删除对应的嵌套工作区副本，以保留服务单例；关闭工作区提升可排除无关的工作区源码包；`link-workspace-packages` 选择直接工作区依赖。[`pnpm-workspace.yaml`](../../../../pnpm-workspace.yaml) 将传递的 `@deepseek-ai/cosmokit` 与 `@deepseek-ai/schemastery` semver 请求覆盖到固定的 vendor 源码，使 deploy 不会从注册表解析这些未发布名称。 生产部署允许未使用的工作区补丁，因为开发工具可能不属于运行时闭包；闭包内包的补丁应用失败仍会中止部署。工作区安装继续严格校验未使用的补丁。
+[`scripts/build-exe-for-python-sdk.ts`](../../../../scripts/build-exe-for-python-sdk.ts)：运行时闭包校验 → `pnpm run build` →（清空后）`pnpm --filter dsh-python-runtime-closure deploy --prod --config.allow-unused-patches=true --config.node-linker=hoisted --config.pnpmfile=scripts/python-runtime-deploy.pnpmfile.mjs --config.link-workspace-packages=true --config.hoist-workspace-packages=false` **直接写入** `python/sdk-runtime/src/deepseek_harness_runtime/runtime/node/`，其中包含作为载体根目录 `runtime-bootstrap.mjs` 的 [`python/sdk-runtime/runtime-bootstrap.mjs`](../../../../python/sdk-runtime/runtime-bootstrap.mjs) → 将暂存依赖中的符号链接替换为目标文件内容，删除包管理器的 `.bin` 链接，并在仍有任何符号链接时失败 → 拒绝缺失的直接依赖目录，验证已部署的 bootstrap，并注入以该文件为 bin 的 pkg 配置及覆盖动态读取 profile、bundle、前端、preset、原生库与配置文件的 assets → 暂存目标平台的 `node-pty` addon → 每个构建目标调用一次 `pkg --sea --compress Brotli`，其中 vendor 的 pkg 补丁把 Brotli 质量固定为 6：pkg 不传参数时默认质量 11，同一载荷实测 132.8 s，质量 6 为 3.2 s，产物大 12% → 将 `deepseek-harness-sdk-runtime-<platform>-<arch>` 写入 `dist-exe/`，并将它与轻量资源清单及 Office skill 资源一同拷回运行时目录。该 bootstrap 由 Python runtime 拥有；普通启动时它调用公开 CLI export，而提供方私有选择会分派到同一个 `@deepseek-ai/dsh-subprocess-local/runner` 核心，不改变 CLI 语法，也不增加另一个可执行文件；[原生 containment 参考](../../../../packages/subprocess/subprocess-local/README.zh.md)负责这条私有路径。Linux CI 会在匹配的 manylinux 2.28 容器中重新构建 `pty.node`，并将生成的 addon 复制到部署树中。每个目标都会把对应的原生 `@vscode/ripgrep` 二进制复制到可执行文件旁，作为必需的 `-rg` 伴随文件；pkg 运行时通过 `process.pkg` 选择该伴随文件，普通 Node 执行则直接使用 `@vscode/ripgrep`。macOS 使用对应目标的预构建产物，并额外生成所需的 `-spawn-helper`。部署标志都有实测依据：独立部署锁文件保留源锁文件的版本及对等依赖设置；[`scripts/python-runtime-deploy.pnpmfile.mjs`](../../../../scripts/python-runtime-deploy.pnpmfile.mjs) 保留精确的本地构建审批；[按锁文件部署的决策](../bug-fix/2026-11-01-locked-python-runtime-deploy.zh.md)替代 legacy 部署要求及关闭对等依赖的理由；`hoisted` 提供包目录，再由暂存步骤消除符号链接；只有 pnpm 在载荷根目录记录了相同依赖标识时，暂存步骤才删除对应的嵌套工作区副本，以保留服务单例；关闭工作区提升可排除无关的工作区源码包；`link-workspace-packages` 选择直接工作区依赖。[`pnpm-workspace.yaml`](../../../../pnpm-workspace.yaml) 将传递的 `@deepseek-ai/cosmokit` 与 `@deepseek-ai/schemastery` semver 请求覆盖到固定的 vendor 源码，使 deploy 不会从注册表解析这些未发布名称。 生产部署允许未使用的工作区补丁，因为开发工具可能不属于运行时闭包；闭包内包的补丁应用失败仍会中止部署。工作区安装继续严格校验未使用的补丁。
 
 CI 使用 [`.github/workflows/build-exe-for-python-sdk.yml`](../../../../.github/workflows/build-exe-for-python-sdk.yml)：[安装后 wheel 包验证](../testing/2026-08-23-installed-python-wheel-black-box-ci.zh.md)在拉取请求上运行 Linux/Windows x64，在 master 推送上运行 Linux ARM64 与两种 macOS 架构。[公开发布工作流](../../archived/process/2026-08-11-python-publication-workflow.md)调用它构建全部五个目标；`workflow_dispatch` 仍可选择部分目标。linux-x64、linux-arm64（`ubuntu-24.04-arm`）、macos-arm64、macos-x64（`macos-15-intel`）与 win-x64（`windows-2025`）分别进行原生构建，并在适用平台缓存 `~/.pkg-cache`；macOS 的 ad-hoc 签名由 pkg 处理。每个平台都把发布形态的 SDK wheel 包与运行时 wheel 包安装到 checkout 外的干净 venv，证明包与可执行文件来源，再通过公开 SDK 与直接 NDJSON JSON-RPC 运行完整 keyless 场景。可信拉取请求与 master 推送还会在各自选定的目标上运行真实 DeepSeek 双轮工具冒烟测试；fork 与 Dependabot head 不会获得密钥。Linux 会检查可执行文件和原生 addon 各自的 GLIBC 依赖，并额外运行 manylinux 2.28 冒烟测试；macOS 则检查 runtime、ripgrep 与 PTY helper 的架构，并验证三个载荷的部署目标都符合 wheel 包标签。完整构建五个目标时保留 6 个产物，每个产物只含一个发布文件：平台无关的 SDK wheel 包与 5 个原生运行时 wheel 包；手动选择部分目标时保留 SDK wheel 与所选运行时 wheel。裸 exe 与源码包只作为测试中间输入。[`.gitlab-ci.yml`](../../../../.gitlab-ci.yml) 只接受版本与根目录 `package.json` 匹配的 `python-v<repository-version>` 标签流水线，构建一个 SDK wheel 包和 5 个原生运行时 wheel 包，再由单个串行任务校验并将这 6 个文件发布到项目的 PyPI 注册表。[`python/sdk-runtime` README](../../../../python/sdk-runtime/README.zh.md)负责 Windows 目标及对 Windows arm64 的明确排除。
 
diff --git a/.agents/notes/implemented/bug-fix/2026-11-01-locked-python-runtime-deploy.i18n.yaml b/.agents/notes/implemented/bug-fix/2026-11-01-locked-python-runtime-deploy.i18n.yaml
new file mode 100644
index 0000000000..618dcc06e2
--- /dev/null
+++ b/.agents/notes/implemented/bug-fix/2026-11-01-locked-python-runtime-deploy.i18n.yaml
@@ -0,0 +1,22 @@
+# Bilingual-pair consistency record for 2026-11-01-locked-python-runtime-deploy.md (docs/i18n/README.md): per heading
+# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
+# After editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write .agents/notes/implemented/bug-fix/2026-11-01-locked-python-runtime-deploy.md
+/agent-note-locked-python-runtime-deployment:
+  en: 6a06f1078957df51
+  zh: d7c2146381443ced
+/agent-note-locked-python-runtime-deployment/problem:
+  en: 2293006c8bae6a1a
+  zh: 10670f2d703777dd
+/agent-note-locked-python-runtime-deployment/decision:
+  en: 223079c8e1e3a44e
+  zh: c906266cb0b231bc
+/agent-note-locked-python-runtime-deployment/alternatives-considered:
+  en: 978c94c7013056a5
+  zh: afae764120582b6a
+/agent-note-locked-python-runtime-deployment/testing:
+  en: d862dd609725c686
+  zh: 8889c5d9002bbc68
+/agent-note-locked-python-runtime-deployment/consequences:
+  en: 41827db476b30a43
+  zh: 5a7652f310a69909
diff --git a/.agents/notes/implemented/bug-fix/2026-11-01-locked-python-runtime-deploy.md b/.agents/notes/implemented/bug-fix/2026-11-01-locked-python-runtime-deploy.md
new file mode 100644
index 0000000000..a1763148c8
--- /dev/null
+++ b/.agents/notes/implemented/bug-fix/2026-11-01-locked-python-runtime-deploy.md
@@ -0,0 +1,33 @@
+# Agent Note: Locked Python runtime deployment
+
+Status: implemented
+
+English | [中文](2026-11-01-locked-python-runtime-deploy.zh.md)
+
+## Problem
+
+Python executable packaging needs the same dependency versions and integrity records as the workspace lockfile. Legacy hoisted deployment ignores that lockfile and resolves compatible registry versions again: a manifest permitting `tslib@^2.8.1` can install `2.9.1` while the lockfile records `2.8.1`. Office archive preparation then rejects the missing locked integrity. A successful frozen workspace install does not constrain that later legacy deployment.
+
+## Decision
+
+The Python builder uses pnpm's default deployment, which derives a dedicated production lockfile from the workspace lockfile and installs it frozen. This replaces only the deployment strategy in the [single-executable distribution decision](../architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.md); its runtime architecture and carrier layout remain active.
+
+Deployment retains the source lockfile's peer settings, including `autoInstallPeers: true`. Frozen installation preserves already resolved versions and peer relationships instead of resolving new registry peers. Forcing `autoInstallPeers: false` conflicts with the derived lockfile settings and fails frozen installation. The resulting tree need not equal the legacy tree resolved with peers disabled; selected dependencies must come from the locked graph. `verify-runtime-closure.ts` independently requires explicit workspace peers and preset plugins before deployment, and `verifyStagedDependencies` rejects missing direct dependency directories after materialization and deduplication.
+
+[`scripts/python-runtime-deploy.pnpmfile.mjs`](../../../../scripts/python-runtime-deploy.pnpmfile.mjs) translates reviewed local `file:` approvals to the exact absolute file URLs used in the derived lockfile. Approval, denial, pending decisions, and strict build validation remain unchanged. Default deployment executes approved installation scripts; their generated files can enter the staged payload. Workspace policy and the source lockfile remain unchanged.
+
+## Alternatives considered
+
+**Keep legacy deployment and add missing integrity records.** This would accept versions the source lockfile did not select and repeat the failure after another compatible release.
+
+**Disable automatic peer installation during default deployment.** This conflicts with the source lockfile settings. Re-resolving a separate graph would give up the source lockfile's authority.
+
+**Disable deployment scripts or approve local packages by name.** Skipping scripts omits required postinstall preparation. Name-only approvals do not authorize non-semver local file dependencies; exact identity translation preserves the existing review decisions.
+
+## Testing
+
+A real pnpm comparison with the same manifest and lockfile installs `tslib@2.9.1` through legacy deployment and retains `2.8.1` through default deployment. The Linux executable and locally built installed-wheel SDK smokes pass. Focused tests reject missing dependency directories and deployment flag regressions, preserve approval states, and exercise both metadata path bases. Cross-platform packaging and installed-wheel validation remain owned by CI.
+
+## Consequences
+
+Runtime versions remain traceable to the workspace lockfile, and incomplete direct dependency trees fail before executable packaging. Installation script outputs and locked peer selections can differ from legacy deployment, so byte-identical payloads are not promised. SSH helper deployment has a separate closure manifest and native payload validation; its legacy deployment is outside this Python runtime repair.
diff --git a/.agents/notes/implemented/bug-fix/2026-11-01-locked-python-runtime-deploy.zh.md b/.agents/notes/implemented/bug-fix/2026-11-01-locked-python-runtime-deploy.zh.md
new file mode 100644
index 0000000000..8b24c383e7
--- /dev/null
+++ b/.agents/notes/implemented/bug-fix/2026-11-01-locked-python-runtime-deploy.zh.md
@@ -0,0 +1,33 @@
+# Agent Note: Python 运行时按锁文件部署
+
+Status: implemented
+
+[English](2026-11-01-locked-python-runtime-deploy.md) | 中文
+
+## 问题
+
+Python 可执行文件打包需要使用与工作区锁文件相同的依赖版本和完整性记录。legacy hoisted 部署忽略该锁文件，重新解析兼容的注册表版本：允许 `tslib@^2.8.1` 的 manifest 可能安装 `2.9.1`，而锁文件记录的是 `2.8.1`。Office 归档准备随后因缺少锁定的完整性记录而拒绝构建。工作区的冻结安装成功，并不能约束后续的 legacy 部署。
+
+## 决策
+
+Python 构建器使用 pnpm 的默认部署，从工作区锁文件派生独立的生产锁文件，再冻结安装。本记录只替代[单文件可执行程序分发决策](../architecture/2026-07-10-single-file-executable-sdk-runtime-distribution.zh.md)中的部署策略；其中的运行时架构和载体布局继续有效。
+
+部署保留源锁文件的对等依赖设置，包括 `autoInstallPeers: true`。冻结安装保留已解析的版本和对等依赖关系，不会重新解析新的注册表对等依赖。强制指定 `autoInstallPeers: false` 与派生锁文件的设置冲突，会使冻结安装失败。生成的依赖树不必与关闭对等依赖解析的 legacy 依赖树相同，但所选依赖必须来自锁定的依赖图。`verify-runtime-closure.ts` 独立要求在部署前显式声明工作区对等依赖及 preset 插件；`verifyStagedDependencies` 在链接实体化与去重后拒绝缺失的直接依赖目录。
+
+[`scripts/python-runtime-deploy.pnpmfile.mjs`](../../../../scripts/python-runtime-deploy.pnpmfile.mjs) 将已审阅的本地 `file:` 审批转换为派生锁文件使用的精确绝对文件 URL。批准、拒绝、未决定状态和严格构建校验均保持不变。默认部署执行已批准的安装脚本，其生成的文件可能进入暂存载荷。工作区策略和源锁文件保持不变。
+
+## 考虑过的替代方案
+
+**保留 legacy 部署并补全缺失的完整性记录。** 这会接受源锁文件没有选择的版本，并在另一个兼容版本发布后重复出现故障。
+
+**在默认部署中关闭对等依赖自动安装。** 这与源锁文件的设置冲突；重新解析另一套依赖图会放弃源锁文件的决定权。
+
+**禁用部署脚本，或按名称批准本地包。** 跳过脚本会遗漏必需的 postinstall 准备。仅按名称批准不能授权非 semver 的本地文件依赖；转换精确标识可以保留原有审批决定。
+
+## 测试
+
+真实 pnpm 对照使用相同 manifest 和锁文件，legacy 部署安装 `tslib@2.9.1`，默认部署保留 `2.8.1`。Linux 可执行文件及本地构建并安装的 wheel SDK 冒烟测试通过。定向测试拒绝缺失的依赖目录和部署参数回退，保留审批状态，并覆盖两种 metadata 路径基准。跨平台打包及安装后 wheel 校验仍由 CI 负责。
+
+## 影响
+
+运行时版本可以追溯到工作区锁文件，不完整的直接依赖树会在可执行文件打包前失败。安装脚本产物和锁定的对等依赖选择可能与 legacy 部署不同，因此不承诺载荷逐字节相同。SSH helper 部署使用独立的闭包 manifest 和原生载荷校验，其 legacy 部署不属于本次 Python 运行时修复范围。
diff --git a/scripts/build-exe-for-python-sdk-staging.ts b/scripts/build-exe-for-python-sdk-staging.ts
index 123ba52c33..4f766307f9 100644
--- a/scripts/build-exe-for-python-sdk-staging.ts
+++ b/scripts/build-exe-for-python-sdk-staging.ts
@@ -14,9 +14,9 @@ function isHoistedLocations(value: unknown): value is Record<string, string[]> {
  * Different peer resolutions and third-party packages keep their installed locations.
  * All metadata paths are checked before deletion; the caller first materializes links.
  * @param staging - Symlink-free deployed payload root.
- * @param workspace - Workspace root relative to which pnpm records hoisted locations.
+ * @param metadataRoot - Base for pnpm hoistedLocations: the workspace for legacy deploy, the deployment for default deploy.
  */
-export async function deduplicateStagedWorkspacePackages(staging: string, workspace: string): Promise<void> {
+export async function deduplicateStagedWorkspacePackages(staging: string, metadataRoot: string): Promise<void> {
   const modules = resolve(staging, 'node_modules')
   const file = join(modules, '.modules.yaml')
   const manifest: unknown = load(await readFile(file, 'utf8'))
@@ -27,7 +27,7 @@ export async function deduplicateStagedWorkspacePackages(staging: string, worksp
   const duplicates: string[] = []
   for (const [identity, locations] of Object.entries(manifest.hoistedLocations)) {
     const paths = locations.map((location) => {
-      const path = resolve(workspace, location)
+      const path = resolve(metadataRoot, location)
       const local = relative(modules, path)
       if (local === '' || local === '..' || local.startsWith(`..${sep}`) || isAbsolute(local)) {
         throw new Error(`${file}: hoistedLocations path is outside deployed node_modules: ${location}`)
@@ -62,7 +62,7 @@ async function findSymlink(directory: string): Promise<string | undefined> {
 /**
  * Replace every deploy-time package link below the staged payload with real files.
  *
- * Legacy deploy links workspace packages into the target's `node_modules`, and
+ * pnpm deploy can link workspace packages into the target's `node_modules`, and
  * those links must survive packaging as files. One link is not a package: when
  * the deploy target sits inside the deployed project, pnpm links that project
  * into its own `node_modules`. Dereferencing it would copy the payload into
diff --git a/scripts/build-exe-for-python-sdk.spec.ts b/scripts/build-exe-for-python-sdk.spec.ts
index fdaf7202a7..0d26340944 100644
--- a/scripts/build-exe-for-python-sdk.spec.ts
+++ b/scripts/build-exe-for-python-sdk.spec.ts
@@ -136,6 +136,9 @@ describe('Python runtime executable builder CLI', () => {
     const deploy = result.stdout.split('\n').find(line => line.includes(' --filter dsh-python-runtime-closure deploy'))
     expect(deploy).toContain('--prod --config.allow-unused-patches=true')
     expect(deploy).toContain('--config.hoist-workspace-packages=false')
+    expect(deploy).toContain(`--config.pnpmfile=${join(root, 'scripts/python-runtime-deploy.pnpmfile.mjs')}`)
+    expect(deploy).not.toContain('--legacy')
+    expect(deploy).not.toContain('--config.auto-install-peers=false')
     expect(result.stdout.split('--config.allow-unused-patches=true')).toHaveLength(2)
     expect(result.stdout).not.toContain(resolve(root, 'python/sdk-runtime/runtime-bootstrap.mjs'))
     expect(result.stdout).toContain('"bin":"runtime-bootstrap.mjs"')
diff --git a/scripts/build-exe-for-python-sdk.ts b/scripts/build-exe-for-python-sdk.ts
index 627c13f0e2..0d7b5d5624 100644
--- a/scripts/build-exe-for-python-sdk.ts
+++ b/scripts/build-exe-for-python-sdk.ts
@@ -9,7 +9,7 @@
 import { createHash } from 'node:crypto'
 import { build as bundle } from 'tsdown'
 import { spawn } from 'node:child_process'
-import { pnpmInvocation } from './executable-packaging.ts'
+import { pnpmInvocation, verifyStagedDependencies } from './executable-packaging.ts'
 import { existsSync, statSync } from 'node:fs'
 import { chmod, copyFile, cp, glob, mkdir, readFile, readdir, rm, writeFile } from 'node:fs/promises'
 import { basename, dirname, join, resolve, sep } from 'node:path'
@@ -334,6 +334,7 @@ class SingleExeBuild {
     }
     await materializeStagedLinks(this.staging)
     await deduplicateStagedWorkspacePackages(this.staging, this.staging)
+    await verifyStagedDependencies(this.staging)
   }
 
   /** Add the executable entry and pkg assets to the staged manifest. */
diff --git a/scripts/executable-packaging.spec.ts b/scripts/executable-packaging.spec.ts
index 2adcbaaa89..35495f7907 100644
--- a/scripts/executable-packaging.spec.ts
+++ b/scripts/executable-packaging.spec.ts
@@ -2,7 +2,7 @@ import { lstat, mkdir, mkdtemp, readFile, rm, symlink, writeFile } from 'node:fs
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
 import { expect, it, onTestFinished } from 'vitest'
-import { restoreLegacyHoists } from './executable-packaging.ts'
+import { restoreLegacyHoists, verifyStagedDependencies } from './executable-packaging.ts'
 import { materializeStagedLinks } from './build-exe-for-python-sdk-staging.ts'
 
 async function fixture() {
@@ -45,3 +45,20 @@ it('materializes a package junction without deleting its source and drops linked
   expect(await readFile(join(test.source, 'peer/index.js'), 'utf8')).toBe('intact')
   await expect(lstat(join(test.modules, '.bin'))).rejects.toThrow('ENOENT')
 })
+
+it('accepts complete direct dependency directories without requiring optional dependencies', async () => {
+  const test = await fixture()
+  await writeFile(join(test.staging, 'package.json'), JSON.stringify({
+    dependencies: { '@scope/present': '1.0.0' }, optionalDependencies: { optional: '1.0.0' },
+  }))
+  await mkdir(join(test.modules, '@scope/present'), { recursive: true })
+  await expect(verifyStagedDependencies(test.staging)).resolves.toBeUndefined()
+})
+
+it.each(['absent', 'file'])('rejects a direct dependency that is %s instead of a directory', async (kind) => {
+  const test = await fixture()
+  await writeFile(join(test.staging, 'package.json'), JSON.stringify({ dependencies: { missing: '1.0.0' } }))
+  if (kind === 'file') await writeFile(join(test.modules, 'missing'), '')
+  await expect(verifyStagedDependencies(test.staging))
+    .rejects.toThrow('staged dependencies remain missing: missing.')
+})
diff --git a/scripts/executable-packaging.ts b/scripts/executable-packaging.ts
index 10248962bd..0643be28d6 100644
--- a/scripts/executable-packaging.ts
+++ b/scripts/executable-packaging.ts
@@ -1,5 +1,5 @@
 /** Shared production-deploy preparation for the SDK and SSH executable carriers. */
-import { existsSync } from 'node:fs'
+import { existsSync, statSync } from 'node:fs'
 import { cp, mkdir, readFile } from 'node:fs/promises'
 import { dirname, extname, join, resolve, sep } from 'node:path'
 
@@ -61,10 +61,22 @@ export async function restoreLegacyHoists(staging: string, sourceNodeModules: st
     })
     restored.push(dependency)
   }
-  const stillMissing = Object.keys(manifest.dependencies ?? {})
-    .filter(dependency => !existsSync(join(staging, 'node_modules', dependency)))
-  if (stillMissing.length > 0) {
-    throw new Error(`executable-packaging: staged dependencies remain missing: ${stillMissing.join(', ')}.`)
-  }
+  await verifyStagedDependencies(staging)
   return restored
 }
+
+/**
+ * Reject a deployed payload whose manifest names missing direct dependency directories.
+ * @param staging - Deployed payload root containing package.json and node_modules.
+ * @returns Resolves when every declared direct dependency has a directory.
+ */
+export async function verifyStagedDependencies(staging: string): Promise<void> {
+  const manifest = JSON.parse(await readFile(join(staging, 'package.json'), 'utf8')) as {
+    dependencies?: Record<string, string>
+  }
+  const missing = Object.keys(manifest.dependencies ?? {}).sort()
+    .filter(dependency => !statSync(join(staging, 'node_modules', dependency), { throwIfNoEntry: false })?.isDirectory())
+  if (missing.length > 0) {
+    throw new Error(`executable-packaging: staged dependencies remain missing: ${missing.join(', ')}.`)
+  }
+}
diff --git a/scripts/python-runtime-deploy.pnpmfile.mjs b/scripts/python-runtime-deploy.pnpmfile.mjs
index d3cd00ff71..bf2c4fa1ee 100644
--- a/scripts/python-runtime-deploy.pnpmfile.mjs
+++ b/scripts/python-runtime-deploy.pnpmfile.mjs
@@ -1,11 +1,14 @@
-/** Preserve workspace build approvals when pnpm deploy converts local dependencies to file URLs. */
+/**
+ * Preserve workspace build approvals when pnpm deploy records local dependencies as file:// URLs.
+ * This hook lives in the workspace root's scripts/ directory; relative file: approvals use that root.
+ */
 import { resolve } from 'node:path'
 import { pathToFileURL } from 'node:url'
 
 /**
  * Translate local build identities without changing their approved or denied status.
- * @param {Record<string, unknown> & { allowBuilds?: Record<string, boolean | string> }} config - Source workspace configuration.
- * @returns {Record<string, unknown>} Deployment configuration with exact file URL approvals.
+ * @param {import('./python-runtime-deploy.pnpmfile.mjs').RuntimeDeployConfig} config - Source workspace configuration.
+ * @returns {import('./python-runtime-deploy.pnpmfile.mjs').RuntimeDeployConfig} Deployment configuration with exact file URL approvals.
  */
 function updateConfig(config) {
   if (config.allowBuilds === undefined) return config
diff --git a/scripts/verify-runtime-closure.ts b/scripts/verify-runtime-closure.ts
index 8694dcaa7d..84a4edbe72 100644
--- a/scripts/verify-runtime-closure.ts
+++ b/scripts/verify-runtime-closure.ts
@@ -1,8 +1,8 @@
 /**
  * Verify that the executable deploy manifest supplies every plugin referenced
  * by a shipped agent preset and every required workspace peer in its dependency
- * graph. With auto peer installation disabled, either omission can otherwise
- * fail only when Cordis loads the packaged plugin.
+ * graph. Frozen deployment preserves the locked peer graph; this check also
+ * requires explicit workspace peers so omissions fail before plugin loading.
  */
 import { globSync } from 'node:fs'
 import { readFile } from 'node:fs/promises'

From e1609fe16495aff3967388f1e67e9f46df341b6a Mon Sep 17 00:00:00 2001
From: creatixchu <creatixchu@deepseek.com>
Date: Mon, 2 Nov 2026 14:59:19 +0800
Subject: [PATCH 14/32] fix(fs): temporarily disable apply_patch in shipped
 defaults

---
 packages/bundle/base/cordis.patch.yml              | 2 +-
 packages/bundle/web-app/presets/standard.patch.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/bundle/base/cordis.patch.yml b/packages/bundle/base/cordis.patch.yml
index ef931753d9..fc83f8160c 100644
--- a/packages/bundle/base/cordis.patch.yml
+++ b/packages/bundle/base/cordis.patch.yml
@@ -297,7 +297,7 @@
       name: '@deepseek-ai/dsh-tool-fs'
       config:
         # Set false to drop the apply_patch tool beside edit.
-        applyPatch: true
+        applyPatch: false
 
     - id: tool-fs-search
       name: '@deepseek-ai/dsh-tool-fs-search'
diff --git a/packages/bundle/web-app/presets/standard.patch.yml b/packages/bundle/web-app/presets/standard.patch.yml
index a1aff022b0..e2e619fddd 100644
--- a/packages/bundle/web-app/presets/standard.patch.yml
+++ b/packages/bundle/web-app/presets/standard.patch.yml
@@ -28,7 +28,7 @@
             name: '@deepseek-ai/dsh-tool-fs'
             config:
               # Set false to drop the apply_patch tool beside edit.
-              applyPatch: true
+              applyPatch: false
           - id: tool-fs-search
             name: '@deepseek-ai/dsh-tool-fs-search'
             config:

From 3def5c9e2437e74ab0354fad5e526e8129d9f5b1 Mon Sep 17 00:00:00 2001
From: creatixchu <creatixchu@deepseek.com>
Date: Mon, 2 Nov 2026 15:14:56 +0800
Subject: [PATCH 15/32] test(fs): pin recorded patch tool and cover
 configurable defaults

---
 .../subagent-inheritance-snapshot.patch.yml       |  5 +++++
 apps/cli/tests/profiles/sdk/keyless-smoke.e2e.ts  | 11 ++++++++---
 apps/cli/tests/web-agent-presets.e2e.ts           |  2 +-
 apps/web/tests/scaffold.ts                        | 15 +++++++++++++++
 apps/web/tests/shipped-composition.e2e.ts         |  1 -
 scripts/smoke-python-runtime.py                   |  1 +
 snapshots/sdk/background-wait-steer/cordis.yml    |  5 +++++
 snapshots/sdk/desktop-context/cordis.yml          |  5 +++++
 snapshots/sdk/desktop-ptc-context/cordis.yml      |  5 +++++
 snapshots/sdk/legacy-context.patch.yml            |  5 +++++
 snapshots/session/text-turn/cordis.yml            |  5 +++++
 11 files changed, 55 insertions(+), 5 deletions(-)

diff --git a/apps/cli/tests/profiles/headless/subagent-inheritance-snapshot.patch.yml b/apps/cli/tests/profiles/headless/subagent-inheritance-snapshot.patch.yml
index 7511e92167..83547c6412 100644
--- a/apps/cli/tests/profiles/headless/subagent-inheritance-snapshot.patch.yml
+++ b/apps/cli/tests/profiles/headless/subagent-inheritance-snapshot.patch.yml
@@ -40,3 +40,8 @@
 - id: session-log-deepseek
   config:
     enabled: false
+
+# The recorded tool catalog includes the optional patch tool.
+- id: tool-fs
+  config:
+    applyPatch: true
diff --git a/apps/cli/tests/profiles/sdk/keyless-smoke.e2e.ts b/apps/cli/tests/profiles/sdk/keyless-smoke.e2e.ts
index a232e82874..81c9eb56ea 100644
--- a/apps/cli/tests/profiles/sdk/keyless-smoke.e2e.ts
+++ b/apps/cli/tests/profiles/sdk/keyless-smoke.e2e.ts
@@ -57,6 +57,7 @@ describe('Python SDK dsh profile keyless smoke', () => {
     { label: 'reports max-token turns with mapping enabled through env', envValue: 'true', editorEnabled: false },
     { label: 'reports max-token turns with mapping disabled through env', envValue: 'false', editorEnabled: false },
     { label: 'allows an explicit patch to enable str_replace_editor', envValue: undefined, editorEnabled: true },
+    { label: 'allows an explicit patch to enable apply_patch', envValue: undefined, editorEnabled: false, patchEnabled: true },
     { label: 'uses the PTC executor overlay despite the retired environment selector', envValue: undefined, editorEnabled: false, ptc: true },
     // The shipped sdk profile mounts no observation policy: an edit of a file the model never read lands on disk.
     { label: 'edits a file the model never read through the shipped profile', envValue: undefined, editorEnabled: false, unreadEdit: true },
@@ -64,11 +65,14 @@ describe('Python SDK dsh profile keyless smoke', () => {
     const { envValue, editorEnabled } = scenario
     const ptc = 'ptc' in scenario && scenario.ptc
     const unreadEdit = 'unreadEdit' in scenario && scenario.unreadEdit
+    const patchEnabled = 'patchEnabled' in scenario && scenario.patchEnabled
 
     const root = await mkdtemp(join(tmpdir(), 'dsh-python-sdk-runtime-smoke-'))
     const unreadFile = join(root, 'notes.txt')
     if (unreadEdit) await writeFile(unreadFile, 'alpha\n')
     const editorPatch = join(root, 'editor.patch.yml')
+    const fsPatch = join(root, 'fs.patch.yml')
+    if (patchEnabled) await writeFile(fsPatch, '- {id: tool-fs, config: {applyPatch: true}}\n')
     if (editorEnabled) await writeFile(editorPatch, [
       '- insert:',
       '    - id: tool-str-replace-editor',
@@ -103,6 +107,7 @@ describe('Python SDK dsh profile keyless smoke', () => {
       '--profile',
       'sdk',
       ...(editorEnabled ? ['--patch', editorPatch] : []),
+      ...(patchEnabled ? ['--patch', fsPatch] : []),
       ...(ptc ? ['--patch', join(repoRoot, 'apps/cli/config/examples/ptc.yml')] : []),
     ], {
       cwd: repoRoot,
@@ -189,16 +194,16 @@ describe('Python SDK dsh profile keyless smoke', () => {
       const toolNames = tools.map(tool => tool.name)
       expect(modelRequests[0]?.output_config).toEqual({ effort: 'max' })
       expect(modelRequests[0]?.max_tokens).toBe(1234)
-      const expectedTools = ['read', 'write', 'edit', 'apply_patch', 'web_fetch', 'web_search', 'subagent', 'subagent_fork',
+      const expectedTools = ['read', 'write', 'edit', 'web_fetch', 'web_search', 'subagent', 'subagent_fork',
         'present', 'ask_user_question', 'schedule_create', 'schedule_edit', 'schedule_list', 'schedule_view', 'plugin_manager']
       const requestText = JSON.stringify(modelRequests[0])
       if (ptc) {
         expect(toolNames).toEqual(['run_code'])
-        // The PTC overlay keeps the pre-apply_patch tool set, as the Web ptc preset does.
-        for (const tool of expectedTools.filter(tool => tool !== 'apply_patch')) expect(requestText.includes(`${tool}:`), tool).toBe(true)
+        for (const tool of expectedTools) expect(requestText.includes(`${tool}:`), tool).toBe(true)
         expect(requestText.includes('apply_patch:')).toBe(false)
       } else {
         expect(toolNames).toEqual(expect.arrayContaining(expectedTools))
+        expect(toolNames.includes('apply_patch')).toBe(patchEnabled)
         expect(toolNames.includes('str_replace_editor')).toBe(editorEnabled)
         expect(toolNames).not.toContain('list_subagent_models')
       }
diff --git a/apps/cli/tests/web-agent-presets.e2e.ts b/apps/cli/tests/web-agent-presets.e2e.ts
index 3907997d6a..e7aa033223 100644
--- a/apps/cli/tests/web-agent-presets.e2e.ts
+++ b/apps/cli/tests/web-agent-presets.e2e.ts
@@ -300,7 +300,7 @@ describe('the shipped Web composition', () => {
       // excluded for the reason the TUI composition e2e excludes them — they
       // depend on ripgrep being present on the machine.
       expect(toolNames(ctx, handle.agent).filter(name => name !== 'glob' && name !== 'grep')).toEqual([
-        'apply_patch', 'ask_user_question', 'bash', 'create_goal', 'edit', 'exit_plan_mode',
+        'ask_user_question', 'bash', 'create_goal', 'edit', 'exit_plan_mode',
         'get_goal', 'interrupt_agent', 'job_kill', 'job_list', 'job_output', 'list_agents', 'list_subagent_models', 'plugin_manager', 'present', 'read', 'read_image',
         'schedule_create', 'schedule_edit', 'schedule_list', 'schedule_view',
         'send_message', 'skill',
diff --git a/apps/web/tests/scaffold.ts b/apps/web/tests/scaffold.ts
index 92f307c095..4e45acf037 100644
--- a/apps/web/tests/scaffold.ts
+++ b/apps/web/tests/scaffold.ts
@@ -59,6 +59,7 @@ import {
   type NormalizeContext,
 } from '@deepseek-ai/dsh-session-snapshot'
 import type { Profile, ProfileContext } from '@deepseek-ai/dsh-app-boot'
+import type { PresetDefinition } from '@deepseek-ai/dsh-agent-preset-registry'
 import { dshHomePath } from '@deepseek-ai/dsh-home-paths'
 import { LlmAdapter } from '@deepseek-ai/dsh-llm'
 import type {
@@ -713,6 +714,20 @@ export async function launchWebScaffold(options: LaunchOptions = {}): Promise<We
     { id: 'llm-deepseek', disabled: mode !== 'record' && !maskDeepSeekCredential },
   ]
 
+  // Recorded standard sessions pin the optional patch tool in their request headers.
+  if (options.replayFixture !== undefined) {
+    const config = composedRows.find(row => row.id === 'preset-standard')!.config as PresetDefinition
+    overlayPatches.push({
+      id: 'preset-standard',
+      config: {
+        ...config,
+        plugins: config.plugins.map(plugin => plugin.id === 'tool-fs'
+          ? { ...plugin, config: { ...plugin.config, applyPatch: true } }
+          : plugin),
+      },
+    })
+  }
+
   // Live fields use a shared deployment layer; process-specific ports and roots stay in CLI overlays.
   const formEntries = new Set(['agent-default-model', 'agent-preset-registry', 'llm-deepseek', 'llm-pi-ai',
     'web', 'web-search-deepseek', 'web-deepseek-api', 'agent-loop', 'subagent', 'bash-sandbox', 'pwsh-sandbox',
diff --git a/apps/web/tests/shipped-composition.e2e.ts b/apps/web/tests/shipped-composition.e2e.ts
index 39d995e8c9..3ea259d0e3 100644
--- a/apps/web/tests/shipped-composition.e2e.ts
+++ b/apps/web/tests/shipped-composition.e2e.ts
@@ -473,7 +473,6 @@ function assertLeanChildRecord(agent: Agent): void {
  * Agent Note owns the rationale and its sources.
  */
 const EXPECTED_TOOLS = [
-  'apply_patch',
   'ask_user_question',
   'bash',
   'create_goal',
diff --git a/scripts/smoke-python-runtime.py b/scripts/smoke-python-runtime.py
index d886ed2db9..73ef059fe9 100644
--- a/scripts/smoke-python-runtime.py
+++ b/scripts/smoke-python-runtime.py
@@ -1522,6 +1522,7 @@ def smoke_sdk_dynamic_tools(base_url: str, executable: Path, update_snapshots: b
         task = root / "dynamic-tool-task.txt"
         task.write_text("Call snapshot_ping once.\n", encoding="utf-8")
         patch = write_profile_patch(root, "dynamic-tools.patch.yml", sessions, [
+            {"id": "tool-fs", "config": {"applyPatch": True}},
             {"id": "llm-deepseek", "config": {"models": [
                 {"id": "smoke-model", "toolUpdate": "addition-only"},
             ]}},
diff --git a/snapshots/sdk/background-wait-steer/cordis.yml b/snapshots/sdk/background-wait-steer/cordis.yml
index 04e4e08f00..c1c26f5d97 100644
--- a/snapshots/sdk/background-wait-steer/cordis.yml
+++ b/snapshots/sdk/background-wait-steer/cordis.yml
@@ -37,3 +37,8 @@
 - insert:
     - id: background-wait-steer-fixture
       name: './wait-fixture.mjs'
+
+# The recorded tool catalog includes the optional patch tool.
+- id: tool-fs
+  config:
+    applyPatch: true
diff --git a/snapshots/sdk/desktop-context/cordis.yml b/snapshots/sdk/desktop-context/cordis.yml
index 165911c611..93031877b9 100644
--- a/snapshots/sdk/desktop-context/cordis.yml
+++ b/snapshots/sdk/desktop-context/cordis.yml
@@ -34,3 +34,8 @@
 - id: time-context
   config:
     timeZone: UTC
+
+# The recorded tool catalog includes the optional patch tool.
+- id: tool-fs
+  config:
+    applyPatch: true
diff --git a/snapshots/sdk/desktop-ptc-context/cordis.yml b/snapshots/sdk/desktop-ptc-context/cordis.yml
index b614334b57..f4c5b5c582 100644
--- a/snapshots/sdk/desktop-ptc-context/cordis.yml
+++ b/snapshots/sdk/desktop-ptc-context/cordis.yml
@@ -40,3 +40,8 @@
 
 - id: tool-executor-ptc
   disabled: false
+
+# The recorded tool catalog includes the optional patch tool.
+- id: tool-fs
+  config:
+    applyPatch: true
diff --git a/snapshots/sdk/legacy-context.patch.yml b/snapshots/sdk/legacy-context.patch.yml
index a02fe180c2..5166783bd1 100644
--- a/snapshots/sdk/legacy-context.patch.yml
+++ b/snapshots/sdk/legacy-context.patch.yml
@@ -21,3 +21,8 @@
 
 - id: tool-plugin-manager
   disabled: true
+
+# The recorded tool catalog includes the optional patch tool.
+- id: tool-fs
+  config:
+    applyPatch: true
diff --git a/snapshots/session/text-turn/cordis.yml b/snapshots/session/text-turn/cordis.yml
index dd4fe733e6..59ced934d8 100644
--- a/snapshots/session/text-turn/cordis.yml
+++ b/snapshots/session/text-turn/cordis.yml
@@ -79,3 +79,8 @@
 - id: session-log-deepseek
   config:
     enabled: false
+
+# The recorded tool catalog includes the optional patch tool.
+- id: tool-fs
+  config:
+    applyPatch: true

From c87fd429e089865a3b5b8cfca5636ac31797d44e Mon Sep 17 00:00:00 2001
From: creatixchu <creatixchu@deepseek.com>
Date: Mon, 2 Nov 2026 15:17:01 +0800
Subject: [PATCH 16/32] test(web): align optional tools for recording and
 replay

---
 apps/web/tests/scaffold.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/web/tests/scaffold.ts b/apps/web/tests/scaffold.ts
index 4e45acf037..407f29883e 100644
--- a/apps/web/tests/scaffold.ts
+++ b/apps/web/tests/scaffold.ts
@@ -715,7 +715,7 @@ export async function launchWebScaffold(options: LaunchOptions = {}): Promise<We
   ]
 
   // Recorded standard sessions pin the optional patch tool in their request headers.
-  if (options.replayFixture !== undefined) {
+  if (options.replayFixture !== undefined || options.compareReplaySession === true) {
     const config = composedRows.find(row => row.id === 'preset-standard')!.config as PresetDefinition
     overlayPatches.push({
       id: 'preset-standard',

From 3841ba6aad6fcfc2bedb1fed020628887c02c427 Mon Sep 17 00:00:00 2001
From: creatixchu <creatixchu@deepseek.com>
Date: Mon, 2 Nov 2026 15:20:07 +0800
Subject: [PATCH 17/32] test(acp): pin the recorded optional patch tool

---
 snapshots/acp/escalation-approved/cordis.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/snapshots/acp/escalation-approved/cordis.yml b/snapshots/acp/escalation-approved/cordis.yml
index 08e9986ee3..2c75610603 100644
--- a/snapshots/acp/escalation-approved/cordis.yml
+++ b/snapshots/acp/escalation-approved/cordis.yml
@@ -83,3 +83,8 @@
 - id: session-log-deepseek
   config:
     enabled: false
+
+# The recorded tool catalog includes the optional patch tool.
+- id: tool-fs
+  config:
+    applyPatch: true

From d3f7b8abe77cbdd44ea179d88a4a26ed9dfc0ebb Mon Sep 17 00:00:00 2001
From: imccyu <276526105+imccyu@users.noreply.github.com>
Date: Mon, 2 Nov 2026 17:05:09 +0800
Subject: [PATCH 18/32] Merge pull request #7701 from
 deepseek-harness/fix/empty-session-sidebar-0.2.2

[0.2.2] fix(session-projection): compute exactly the requested projections for hot session summaries
---
 ...session-list-summary-projections.i18n.yaml |   4 +-
 ...-10-18-session-list-summary-projections.md |   4 +-
 ...-18-session-list-summary-projections.zh.md |   4 +-
 docs/event-producer-consumer.md               |  10 +-
 docs/event-producer-consumer.zh.md            |  10 +-
 docs/persistence-catalog.i18n.yaml            |   8 +-
 docs/persistence-catalog.md                   |   4 +-
 docs/persistence-catalog.zh.md                |   4 +-
 docs/persistence-schema.json                  |   4 +-
 docs/subsystems/session-projection.i18n.yaml  |   4 +-
 docs/subsystems/session-projection.md         |  20 +--
 docs/subsystems/session-projection.zh.md      |  20 +--
 .../projection-snapshot-scope/guide.i18n.yaml |  16 +++
 .../projection-snapshot-scope/guide.md        |  19 +++
 .../projection-snapshot-scope/guide.zh.md     |  19 +++
 .../api/session-controller/README.i18n.yaml   |   4 +-
 packages/api/session-controller/README.md     |   4 +-
 packages/api/session-controller/README.zh.md  |   4 +-
 packages/api/session-controller/src/list.ts   |  24 ++--
 packages/api/session-controller/src/types.ts  |   7 +-
 .../tests/session-cold.host.spec.ts           |   3 +-
 .../tests/session-list-blank.host.spec.ts     | 132 +++++++++++++++++-
 .../tests/session-projections.host.spec.ts    |  33 +++--
 .../tests/summary-list.host.spec.ts           |   9 +-
 .../forge-session/src/projection.ts           |  10 +-
 .../forge-session/src/references.ts           |   4 +
 .../extensions/tool-cordis/src/api-catalog.ts |  12 +-
 .../token-meter/src/breakdown-projection.ts   |   1 +
 packages/llm/token-meter/src/projection.ts    |   6 +-
 .../llm/token-meter/src/usage-projection.ts   |   1 +
 .../session-projection/README.i18n.yaml       |   8 +-
 packages/session/session-projection/README.md |   8 +-
 .../session/session-projection/README.zh.md   |   8 +-
 .../session/session-projection/src/index.ts   |  12 +-
 .../tests/compatibility.spec.ts               |   2 +
 .../session-projection/tests/registry.spec.ts | 124 ++++++++++++++++
 .../session-projection/tests/summary.spec.ts  |   5 +
 vitest.config.ts                              |   6 +-
 38 files changed, 457 insertions(+), 120 deletions(-)
 create mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/projection-snapshot-scope/guide.i18n.yaml
 create mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/projection-snapshot-scope/guide.md
 create mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/projection-snapshot-scope/guide.zh.md

diff --git a/.agents/notes/implemented/architecture/2026-10-18-session-list-summary-projections.i18n.yaml b/.agents/notes/implemented/architecture/2026-10-18-session-list-summary-projections.i18n.yaml
index 954a507a27..998bf5a661 100644
--- a/.agents/notes/implemented/architecture/2026-10-18-session-list-summary-projections.i18n.yaml
+++ b/.agents/notes/implemented/architecture/2026-10-18-session-list-summary-projections.i18n.yaml
@@ -9,8 +9,8 @@
   en: 9f84c9bd85b6aace
   zh: 8ebb10962c219624
 /agent-note-serve-session-list-rows-from-a-summary-key-set/decision:
-  en: 6e8f43d7a53c35fd
-  zh: a6e2bccc20474515
+  en: aada3ca481120bff
+  zh: 1fa45a276a47e921
 /agent-note-serve-session-list-rows-from-a-summary-key-set/alternatives-considered:
   en: ce8320f1032018ed
   zh: 4c5fad5e605bf524
diff --git a/.agents/notes/implemented/architecture/2026-10-18-session-list-summary-projections.md b/.agents/notes/implemented/architecture/2026-10-18-session-list-summary-projections.md
index 89e7b2c37d..6f66a06299 100644
--- a/.agents/notes/implemented/architecture/2026-10-18-session-list-summary-projections.md
+++ b/.agents/notes/implemented/architecture/2026-10-18-session-list-summary-projections.md
@@ -13,10 +13,10 @@ A Session-list row carries every registered client view. Four of those views are
 The Session summary is every registered client view except the keys whose `SessionProjectionMap` entry carries the summary-exclusion mark.
 
 - [`packages/session/session-projection/src/types.ts`](../../../../packages/session/session-projection/src/types.ts) declares the type-only mark `SessionProjectionSummaryExcluded<T>` over a unique symbol that is never exported and never present at runtime. `SessionProjectionViewValue<T>` strips it distributively, so a nullable entry keeps its `null`; `SessionProjectionSummaryExcludedKey` tests the non-nullish part; `SessionProjectionSummaryValues` is every view value minus those keys.
-- Each owning package wraps only its own map entry: `turnOutline` (session-turn-outline), `sessionStats` (session-stats), `todos` (tool-todo), and `imageLimits` (session-controller's boot-constant attachment limits, which every Session shares). The todo entry is `SessionProjectionSummaryExcluded<TodoItem[]> | null`, because an intersection with `null` would absorb the null member.
+- Each owning package wraps only its own map entry: `turnOutline` (session-turn-outline), `sessionStats` (session-stats), `todos` (tool-todo), `imageLimits` (session-controller's boot-constant attachment limits, which every Session shares), and `contextPressure` and `contextBreakdown` (token-meter). The todo entry is `SessionProjectionSummaryExcluded<TodoItem[]> | null`, because an intersection with `null` would absorb the null member.
 - Registration carries the same decision as a plain boolean: `wire.summary` says whether a Session summary includes the unit, and omitting it means `true`. A key whose map entry carries the mark declares `false` so the runtime key set and the client view type agree. The mark itself has no runtime representation — `wire.view` and `viewSchema` are typed with `SessionProjectionViewValue`, which strips it, so the erase in `register` only widens the state type.
 - [`packages/session/session-projection/src/index.ts`](../../../../packages/session/session-projection/src/index.ts) exposes `summaryKeys(): ReadonlySet<key>`, derived from the live registrations and rebuilt only when a new key registers or a key's last registrant disposes. `cachedSnapshot`, `viewCheckpoint`, and `snapshot` accept `ProjectionKeySelection` (`readonly Key[] | ReadonlySet<Key>`) and use a passed set as-is.
-- [`packages/session/session-projection-cache/src/index.ts`](../../../../packages/session/session-projection-cache/src/index.ts) forwards that selection unchanged, and [`packages/api/session-controller/src/list.ts`](../../../../packages/api/session-controller/src/list.ts) passes `summaryKeys()` to the live and cold cached faces. `cachedPredecessorTitle` keeps its title-only read.
+- [`packages/session/session-projection-cache/src/index.ts`](../../../../packages/session/session-projection-cache/src/index.ts) forwards that selection unchanged, and [`packages/api/session-controller/src/list.ts`](../../../../packages/api/session-controller/src/list.ts) passes `summaryKeys()` to the live registry's `snapshot` and to the cold cache read. `cachedPredecessorTitle` keeps its title-only read.
 - Client types only: `SessionSummary.projectionValues` narrows to `Partial<SessionProjectionSummaryValues>`, while `SessionProjectionSnapshot.values` keeps every view value. No wire field, function, or UI name changes, and an opened Session still receives every key through `session/follow`, the control baseline, and `session.projections`.
 
 Estimated effect: with logs whose outlines dominate the projection payload, the four keys are estimated at roughly two thirds of a Session-list response for a few hundred Sessions — the outline alone near 57%, the figures and todo list near 5% together, and the shared image limits near 5% — and at roughly 85% of the same response after transport compression, where the outline's unique text barely compresses while the remaining keys do.
diff --git a/.agents/notes/implemented/architecture/2026-10-18-session-list-summary-projections.zh.md b/.agents/notes/implemented/architecture/2026-10-18-session-list-summary-projections.zh.md
index 75c753c345..d3212fe6ce 100644
--- a/.agents/notes/implemented/architecture/2026-10-18-session-list-summary-projections.zh.md
+++ b/.agents/notes/implemented/architecture/2026-10-18-session-list-summary-projections.zh.md
@@ -13,10 +13,10 @@ Session 列表行携带每个已注册的客户端视图。其中四个视图从
 Session 摘要就是每个已注册客户端视图，减去 `SessionProjectionMap` 条目带摘要排除标记的键。
 
 - [`packages/session/session-projection/src/types.ts`](../../../../packages/session/session-projection/src/types.ts) 声明类型层标记 `SessionProjectionSummaryExcluded<T>`，它基于一个从不导出、运行时从不存在的 unique symbol。`SessionProjectionViewValue<T>` 以分发方式去掉标记，可空条目因此保留 `null`；`SessionProjectionSummaryExcludedKey` 取非空部分判断；`SessionProjectionSummaryValues` 是全部视图值减去这些键。
-- 每个 owning package 只包装自己的 map 条目：`turnOutline`（session-turn-outline）、`sessionStats`（session-stats）、`todos`（tool-todo），以及 `imageLimits`（session-controller 的启动常量附件上限，每个 Session 共享）。todo 条目写作 `SessionProjectionSummaryExcluded<TodoItem[]> | null`，因为与 `null` 求交会吞掉 null 成员。
+- 每个 owning package 只包装自己的 map 条目：`turnOutline`（session-turn-outline）、`sessionStats`（session-stats）、`todos`（tool-todo）、`imageLimits`（session-controller 的启动常量附件上限，每个 Session 共享），以及 `contextPressure` 和 `contextBreakdown`（token-meter）。todo 条目写作 `SessionProjectionSummaryExcluded<TodoItem[]> | null`，因为与 `null` 求交会吞掉 null 成员。
 - 注册用普通布尔值承载同一决定：`wire.summary` 表示 Session 摘要是否包含该单元，省略即 `true`。map 条目带标记的 key 声明 `false`，让运行时键集合与客户端视图类型一致。标记本身没有运行时表示 —— `wire.view` 与 `viewSchema` 的签名已用 `SessionProjectionViewValue` 去标记，因此 `register` 里的擦除只是放宽状态类型。
 - [`packages/session/session-projection/src/index.ts`](../../../../packages/session/session-projection/src/index.ts) 提供 `summaryKeys(): ReadonlySet<key>`，从实时注册派生，只有新键注册或某键最后一个注册者注销时才重建。`cachedSnapshot`、`viewCheckpoint`、`snapshot` 接受 `ProjectionKeySelection`（`readonly Key[] | ReadonlySet<Key>`），传入 Set 时直接使用。
-- [`packages/session/session-projection-cache/src/index.ts`](../../../../packages/session/session-projection-cache/src/index.ts) 原样转发该选择，[`packages/api/session-controller/src/list.ts`](../../../../packages/api/session-controller/src/list.ts) 把 `summaryKeys()` 传给 live 与 cold 两个缓存读取面。`cachedPredecessorTitle` 保持只读 title。
+- [`packages/session/session-projection-cache/src/index.ts`](../../../../packages/session/session-projection-cache/src/index.ts) 原样转发该选择，[`packages/api/session-controller/src/list.ts`](../../../../packages/api/session-controller/src/list.ts) 把 `summaryKeys()` 传给实时注册表的 `snapshot` 与冷会话的缓存读取。`cachedPredecessorTitle` 保持只读 title。
 - 客户端只有类型变化：`SessionSummary.projectionValues` 收窄为 `Partial<SessionProjectionSummaryValues>`，而 `SessionProjectionSnapshot.values` 保留全部视图值。wire 字段、函数名与 UI 名称均不变；打开的 Session 仍通过 `session/follow`、控制基线与 `session.projections` 收到每个键。
 
 估算效果：当 outline 在投影负载中占主导时，四个键估计占几百个 Session 时列表响应的约三分之二 —— outline 单项约 57%，统计与 todo 合计约 5%，共享的图片上限约 5% —— 占传输压缩后同一响应的约 85%，因为 outline 的唯一文本几乎无法压缩，而其余键可以。
diff --git a/docs/event-producer-consumer.md b/docs/event-producer-consumer.md
index 976971787d..f2f81a5362 100644
--- a/docs/event-producer-consumer.md
+++ b/docs/event-producer-consumer.md
@@ -23,11 +23,11 @@ Application listeners are outside this package matrix. Desktop Host subscribes t
 | `agent/request-error` | `waterfall` | [`packages/core/agent/src/runtime-types.ts:389`](../packages/core/agent/src/runtime-types.ts) | [`agent-loop`](../packages/core/agent-loop) (`waterfall`) | [`compaction-basic`](../packages/compaction/compaction-basic), [`compaction-image-offload`](../packages/compaction/compaction-image-offload), [`llm-retry`](../packages/llm/llm-retry) |
 | `agent/status` | `emit` | [`packages/core/agent/src/runtime-types.ts:309`](../packages/core/agent/src/runtime-types.ts) | [`agent-loop`](../packages/core/agent-loop) (`emit`) | [`acp`](../packages/acp/acp), `agent-team`, [`compaction-basic`](../packages/compaction/compaction-basic), [`goal-round-driver`](../packages/goal/goal-round-driver), `server`, `session-controller` |
 | `agent/turn-stopping` | `serial` | [`packages/core/agent/src/runtime-types.ts:417`](../packages/core/agent/src/runtime-types.ts) | [`agent-loop`](../packages/core/agent-loop) (`serial`) | [`hooks-claude-code`](../packages/experimental/hooks-claude-code), [`hooks-codex`](../packages/experimental/hooks-codex), [`workspace-changes`](../packages/deliverables/workspace-changes) |
-| `api-session/activity` | `emit` | [`packages/api/session-controller/src/types.ts:700`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
-| `api-session/added` | `emit` | [`packages/api/session-controller/src/types.ts:680`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
-| `api-session/error` | `emit` | [`packages/api/session-controller/src/types.ts:707`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
-| `api-session/removed` | `emit` | [`packages/api/session-controller/src/types.ts:686`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
-| `api-session/status` | `emit` | [`packages/api/session-controller/src/types.ts:693`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
+| `api-session/activity` | `emit` | [`packages/api/session-controller/src/types.ts:701`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
+| `api-session/added` | `emit` | [`packages/api/session-controller/src/types.ts:681`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
+| `api-session/error` | `emit` | [`packages/api/session-controller/src/types.ts:708`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
+| `api-session/removed` | `emit` | [`packages/api/session-controller/src/types.ts:687`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
+| `api-session/status` | `emit` | [`packages/api/session-controller/src/types.ts:694`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
 | `app-boot/config-reload` | `emit` | [`packages/boot/app-boot/src/index.ts:55`](../packages/boot/app-boot/src/index.ts) | [`app-boot`](../packages/boot/app-boot) (`emit`) | [`settings`](../packages/settings/settings) |
 | `approval/request` | `waterfall` | [`packages/interaction/user-approval/src/types.ts:87`](../packages/interaction/user-approval/src/types.ts) | [`user-approval`](../packages/interaction/user-approval) (`waterfall`) | [`acp`](../packages/acp/acp), `remotes`, `server` |
 | `authorization/settled` | `emit` | [`packages/credentials/authorization/src/index.ts:57`](../packages/credentials/authorization/src/index.ts) | [`authorization`](../packages/credentials/authorization) (`events.dispatch`) | - |
diff --git a/docs/event-producer-consumer.zh.md b/docs/event-producer-consumer.zh.md
index 8f2a0d34a9..8cfc85b875 100644
--- a/docs/event-producer-consumer.zh.md
+++ b/docs/event-producer-consumer.zh.md
@@ -25,11 +25,11 @@
 | `agent/request-error` | `waterfall` | [`packages/core/agent/src/runtime-types.ts:389`](../packages/core/agent/src/runtime-types.ts) | [`agent-loop`](../packages/core/agent-loop) (`waterfall`) | [`compaction-basic`](../packages/compaction/compaction-basic), [`compaction-image-offload`](../packages/compaction/compaction-image-offload), [`llm-retry`](../packages/llm/llm-retry) |
 | `agent/status` | `emit` | [`packages/core/agent/src/runtime-types.ts:309`](../packages/core/agent/src/runtime-types.ts) | [`agent-loop`](../packages/core/agent-loop) (`emit`) | [`acp`](../packages/acp/acp), `agent-team`, [`compaction-basic`](../packages/compaction/compaction-basic), [`goal-round-driver`](../packages/goal/goal-round-driver), `server`, `session-controller` |
 | `agent/turn-stopping` | `serial` | [`packages/core/agent/src/runtime-types.ts:417`](../packages/core/agent/src/runtime-types.ts) | [`agent-loop`](../packages/core/agent-loop) (`serial`) | [`hooks-claude-code`](../packages/experimental/hooks-claude-code), [`hooks-codex`](../packages/experimental/hooks-codex), [`workspace-changes`](../packages/deliverables/workspace-changes) |
-| `api-session/activity` | `emit` | [`packages/api/session-controller/src/types.ts:700`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
-| `api-session/added` | `emit` | [`packages/api/session-controller/src/types.ts:680`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
-| `api-session/error` | `emit` | [`packages/api/session-controller/src/types.ts:707`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
-| `api-session/removed` | `emit` | [`packages/api/session-controller/src/types.ts:686`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
-| `api-session/status` | `emit` | [`packages/api/session-controller/src/types.ts:693`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
+| `api-session/activity` | `emit` | [`packages/api/session-controller/src/types.ts:701`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
+| `api-session/added` | `emit` | [`packages/api/session-controller/src/types.ts:681`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
+| `api-session/error` | `emit` | [`packages/api/session-controller/src/types.ts:708`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
+| `api-session/removed` | `emit` | [`packages/api/session-controller/src/types.ts:687`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
+| `api-session/status` | `emit` | [`packages/api/session-controller/src/types.ts:694`](../packages/api/session-controller/src/types.ts) | `session-controller` (`emit`) | `remotes` |
 | `app-boot/config-reload` | `emit` | [`packages/boot/app-boot/src/index.ts:55`](../packages/boot/app-boot/src/index.ts) | [`app-boot`](../packages/boot/app-boot) (`emit`) | [`settings`](../packages/settings/settings) |
 | `approval/request` | `waterfall` | [`packages/interaction/user-approval/src/types.ts:87`](../packages/interaction/user-approval/src/types.ts) | [`user-approval`](../packages/interaction/user-approval) (`waterfall`) | [`acp`](../packages/acp/acp), `remotes`, `server` |
 | `authorization/settled` | `emit` | [`packages/credentials/authorization/src/index.ts:57`](../packages/credentials/authorization/src/index.ts) | [`authorization`](../packages/credentials/authorization) (`events.dispatch`) | - |
diff --git a/docs/persistence-catalog.i18n.yaml b/docs/persistence-catalog.i18n.yaml
index 3b4f1d1275..53c7d45680 100644
--- a/docs/persistence-catalog.i18n.yaml
+++ b/docs/persistence-catalog.i18n.yaml
@@ -1353,8 +1353,8 @@
   en: 2786fef560851bb4
   zh: 5d787475356b2606
 /session-persistence-event-catalog/resolved-persistence-types/string:
-  en: 1e484bd12747db9f
-  zh: 1e6fc6aa9066a702
+  en: 0179cc082ac8637c
+  zh: e740ade45db5c263
 /session-persistence-event-catalog/resolved-persistence-types/string~2:
   en: 0089620bf4638263
   zh: 1922bef1713094bb
@@ -1869,8 +1869,8 @@
   en: 4e102391d685eff5
   zh: 9762243a13014f3d
 /session-persistence-event-catalog/resolved-persistence-types/kind-user:
-  en: 984cac7296874653
-  zh: 13b4ee707a8ce305
+  en: eaecebdbcd5cc4e4
+  zh: f519d7ade666f48a
 /session-persistence-event-catalog/resolved-persistence-types/kind-user-approval:
   en: a52d2dfbaf844127
   zh: 4c5306ca40f20873
diff --git a/docs/persistence-catalog.md b/docs/persistence-catalog.md
index 73baf8afad..94f5b932b6 100644
--- a/docs/persistence-catalog.md
+++ b/docs/persistence-catalog.md
@@ -5611,7 +5611,7 @@ Array of `number`.
 
 SHA-256: `4cd48f3e5108bd6ebedf7301c3638839b8b2b9db8dbd493974177fbdeb91a01b`
 
-Sources: [`packages/api/session-controller/src/types.ts:388`](../packages/api/session-controller/src/types.ts) · [`packages/attachment/attachment/src/brand.ts:6`](../packages/attachment/attachment/src/brand.ts) · [`packages/compaction/compaction/src/brand.ts:4`](../packages/compaction/compaction/src/brand.ts) · [`packages/core/session/src/types.ts:21`](../packages/core/session/src/types.ts) · [`packages/experimental/agent-team/src/types.ts:21`](../packages/experimental/agent-team/src/types.ts) · [`packages/experimental/agent-team/src/types.ts:33`](../packages/experimental/agent-team/src/types.ts) · [`packages/experimental/agent-team/src/types.ts:9`](../packages/experimental/agent-team/src/types.ts) · [`packages/experimental/webhook/src/brand.ts:12`](../packages/experimental/webhook/src/brand.ts) · [`packages/experimental/webhook/src/brand.ts:6`](../packages/experimental/webhook/src/brand.ts) · [`packages/experimental/webhook/src/brand.ts:9`](../packages/experimental/webhook/src/brand.ts) · [`packages/feedback/message-feedback/src/types.ts:14`](../packages/feedback/message-feedback/src/types.ts) · [`packages/goal/goal/src/types.ts:17`](../packages/goal/goal/src/types.ts) · [`packages/interaction/commands/src/brand.ts:31`](../packages/interaction/commands/src/brand.ts) · [`packages/interaction/user-approval/src/types.ts:17`](../packages/interaction/user-approval/src/types.ts) · [`packages/jobs/jobs/src/brand.ts:19`](../packages/jobs/jobs/src/brand.ts) · [`packages/llm/llm-retry/src/brand.ts:4`](../packages/llm/llm-retry/src/brand.ts) · [`packages/llm/llm/src/brand.ts:16`](../packages/llm/llm/src/brand.ts) · [`packages/llm/llm/src/brand.ts:31`](../packages/llm/llm/src/brand.ts) · [`packages/llm/llm/src/brand.ts:43`](../packages/llm/llm/src/brand.ts) · [`packages/llm/llm/src/brand.ts:67`](../packages/llm/llm/src/brand.ts) · [`packages/schedule/schedule/src/types.ts:14`](../packages/schedule/schedule/src/types.ts) · [`packages/session/session-title/src/index.ts:42`](../packages/session/session-title/src/index.ts) · [`packages/session/session-title/src/types.ts:17`](../packages/session/session-title/src/types.ts) · [`packages/workflow/workflow/src/types.ts:13`](../packages/workflow/workflow/src/types.ts)
+Sources: [`packages/api/session-controller/src/types.ts:389`](../packages/api/session-controller/src/types.ts) · [`packages/attachment/attachment/src/brand.ts:6`](../packages/attachment/attachment/src/brand.ts) · [`packages/compaction/compaction/src/brand.ts:4`](../packages/compaction/compaction/src/brand.ts) · [`packages/core/session/src/types.ts:21`](../packages/core/session/src/types.ts) · [`packages/experimental/agent-team/src/types.ts:21`](../packages/experimental/agent-team/src/types.ts) · [`packages/experimental/agent-team/src/types.ts:33`](../packages/experimental/agent-team/src/types.ts) · [`packages/experimental/agent-team/src/types.ts:9`](../packages/experimental/agent-team/src/types.ts) · [`packages/experimental/webhook/src/brand.ts:12`](../packages/experimental/webhook/src/brand.ts) · [`packages/experimental/webhook/src/brand.ts:6`](../packages/experimental/webhook/src/brand.ts) · [`packages/experimental/webhook/src/brand.ts:9`](../packages/experimental/webhook/src/brand.ts) · [`packages/feedback/message-feedback/src/types.ts:14`](../packages/feedback/message-feedback/src/types.ts) · [`packages/goal/goal/src/types.ts:17`](../packages/goal/goal/src/types.ts) · [`packages/interaction/commands/src/brand.ts:31`](../packages/interaction/commands/src/brand.ts) · [`packages/interaction/user-approval/src/types.ts:17`](../packages/interaction/user-approval/src/types.ts) · [`packages/jobs/jobs/src/brand.ts:19`](../packages/jobs/jobs/src/brand.ts) · [`packages/llm/llm-retry/src/brand.ts:4`](../packages/llm/llm-retry/src/brand.ts) · [`packages/llm/llm/src/brand.ts:16`](../packages/llm/llm/src/brand.ts) · [`packages/llm/llm/src/brand.ts:31`](../packages/llm/llm/src/brand.ts) · [`packages/llm/llm/src/brand.ts:43`](../packages/llm/llm/src/brand.ts) · [`packages/llm/llm/src/brand.ts:67`](../packages/llm/llm/src/brand.ts) · [`packages/schedule/schedule/src/types.ts:14`](../packages/schedule/schedule/src/types.ts) · [`packages/session/session-title/src/index.ts:42`](../packages/session/session-title/src/index.ts) · [`packages/session/session-title/src/types.ts:17`](../packages/session/session-title/src/types.ts) · [`packages/workflow/workflow/src/types.ts:13`](../packages/workflow/workflow/src/types.ts)
 
 `string`
 
@@ -7705,7 +7705,7 @@ Sources: [`packages/core/tools/src/index.ts:28`](../packages/core/tools/src/inde
 
 SHA-256: `a4afec59b75aad5d13ef82d6931f35cc2d98918503916cf069355b77c5e42302`
 
-Sources: [`packages/api/session-controller/src/types.ts:397`](../packages/api/session-controller/src/types.ts)
+Sources: [`packages/api/session-controller/src/types.ts:398`](../packages/api/session-controller/src/types.ts)
 
 | Property | Presence | Type |
 |---|---|---|
diff --git a/docs/persistence-catalog.zh.md b/docs/persistence-catalog.zh.md
index 46eded7418..4a9ff92ca4 100644
--- a/docs/persistence-catalog.zh.md
+++ b/docs/persistence-catalog.zh.md
@@ -5613,7 +5613,7 @@ SHA-256: `5d03ba38734809bcbd2a55221bd938b3b3fc34b49bb686c6113e9e4931e3aa78`
 
 SHA-256: `4cd48f3e5108bd6ebedf7301c3638839b8b2b9db8dbd493974177fbdeb91a01b`
 
-来源：[`packages/api/session-controller/src/types.ts:388`](../packages/api/session-controller/src/types.ts) · [`packages/attachment/attachment/src/brand.ts:6`](../packages/attachment/attachment/src/brand.ts) · [`packages/compaction/compaction/src/brand.ts:4`](../packages/compaction/compaction/src/brand.ts) · [`packages/core/session/src/types.ts:21`](../packages/core/session/src/types.ts) · [`packages/experimental/agent-team/src/types.ts:21`](../packages/experimental/agent-team/src/types.ts) · [`packages/experimental/agent-team/src/types.ts:33`](../packages/experimental/agent-team/src/types.ts) · [`packages/experimental/agent-team/src/types.ts:9`](../packages/experimental/agent-team/src/types.ts) · [`packages/experimental/webhook/src/brand.ts:12`](../packages/experimental/webhook/src/brand.ts) · [`packages/experimental/webhook/src/brand.ts:6`](../packages/experimental/webhook/src/brand.ts) · [`packages/experimental/webhook/src/brand.ts:9`](../packages/experimental/webhook/src/brand.ts) · [`packages/feedback/message-feedback/src/types.ts:14`](../packages/feedback/message-feedback/src/types.ts) · [`packages/goal/goal/src/types.ts:17`](../packages/goal/goal/src/types.ts) · [`packages/interaction/commands/src/brand.ts:31`](../packages/interaction/commands/src/brand.ts) · [`packages/interaction/user-approval/src/types.ts:17`](../packages/interaction/user-approval/src/types.ts) · [`packages/jobs/jobs/src/brand.ts:19`](../packages/jobs/jobs/src/brand.ts) · [`packages/llm/llm-retry/src/brand.ts:4`](../packages/llm/llm-retry/src/brand.ts) · [`packages/llm/llm/src/brand.ts:16`](../packages/llm/llm/src/brand.ts) · [`packages/llm/llm/src/brand.ts:31`](../packages/llm/llm/src/brand.ts) · [`packages/llm/llm/src/brand.ts:43`](../packages/llm/llm/src/brand.ts) · [`packages/llm/llm/src/brand.ts:67`](../packages/llm/llm/src/brand.ts) · [`packages/schedule/schedule/src/types.ts:14`](../packages/schedule/schedule/src/types.ts) · [`packages/session/session-title/src/index.ts:42`](../packages/session/session-title/src/index.ts) · [`packages/session/session-title/src/types.ts:17`](../packages/session/session-title/src/types.ts) · [`packages/workflow/workflow/src/types.ts:13`](../packages/workflow/workflow/src/types.ts)
+来源：[`packages/api/session-controller/src/types.ts:389`](../packages/api/session-controller/src/types.ts) · [`packages/attachment/attachment/src/brand.ts:6`](../packages/attachment/attachment/src/brand.ts) · [`packages/compaction/compaction/src/brand.ts:4`](../packages/compaction/compaction/src/brand.ts) · [`packages/core/session/src/types.ts:21`](../packages/core/session/src/types.ts) · [`packages/experimental/agent-team/src/types.ts:21`](../packages/experimental/agent-team/src/types.ts) · [`packages/experimental/agent-team/src/types.ts:33`](../packages/experimental/agent-team/src/types.ts) · [`packages/experimental/agent-team/src/types.ts:9`](../packages/experimental/agent-team/src/types.ts) · [`packages/experimental/webhook/src/brand.ts:12`](../packages/experimental/webhook/src/brand.ts) · [`packages/experimental/webhook/src/brand.ts:6`](../packages/experimental/webhook/src/brand.ts) · [`packages/experimental/webhook/src/brand.ts:9`](../packages/experimental/webhook/src/brand.ts) · [`packages/feedback/message-feedback/src/types.ts:14`](../packages/feedback/message-feedback/src/types.ts) · [`packages/goal/goal/src/types.ts:17`](../packages/goal/goal/src/types.ts) · [`packages/interaction/commands/src/brand.ts:31`](../packages/interaction/commands/src/brand.ts) · [`packages/interaction/user-approval/src/types.ts:17`](../packages/interaction/user-approval/src/types.ts) · [`packages/jobs/jobs/src/brand.ts:19`](../packages/jobs/jobs/src/brand.ts) · [`packages/llm/llm-retry/src/brand.ts:4`](../packages/llm/llm-retry/src/brand.ts) · [`packages/llm/llm/src/brand.ts:16`](../packages/llm/llm/src/brand.ts) · [`packages/llm/llm/src/brand.ts:31`](../packages/llm/llm/src/brand.ts) · [`packages/llm/llm/src/brand.ts:43`](../packages/llm/llm/src/brand.ts) · [`packages/llm/llm/src/brand.ts:67`](../packages/llm/llm/src/brand.ts) · [`packages/schedule/schedule/src/types.ts:14`](../packages/schedule/schedule/src/types.ts) · [`packages/session/session-title/src/index.ts:42`](../packages/session/session-title/src/index.ts) · [`packages/session/session-title/src/types.ts:17`](../packages/session/session-title/src/types.ts) · [`packages/workflow/workflow/src/types.ts:13`](../packages/workflow/workflow/src/types.ts)
 
 `string`
 
@@ -7707,7 +7707,7 @@ SHA-256: `8fcb0b44a575e998665c053643d1ab04c82f39253ebd190ac0c975b78e40b543`
 
 SHA-256: `a4afec59b75aad5d13ef82d6931f35cc2d98918503916cf069355b77c5e42302`
 
-来源：[`packages/api/session-controller/src/types.ts:397`](../packages/api/session-controller/src/types.ts)
+来源：[`packages/api/session-controller/src/types.ts:398`](../packages/api/session-controller/src/types.ts)
 
 | 属性 | 存在性 | 类型 |
 |---|---|---|
diff --git a/docs/persistence-schema.json b/docs/persistence-schema.json
index 75aa6950eb..3563fb4cf5 100644
--- a/docs/persistence-schema.json
+++ b/docs/persistence-schema.json
@@ -252,7 +252,7 @@
     {"digest":"4b259f7f8f0a44ad5e90b70a73553ced1df27012d126921d397ff403b6c86731","names":["packages/llm/llm/src/message.ts#ToolResultMessage"],"sources":["packages/llm/llm/src/message.ts:173"]},
     {"digest":"4b7ddaf3710b88ff9b8df66304f5f97bf03688fd19730eedc2e9535203c820ea","names":[],"sources":[]},
     {"digest":"4bb451330ff699f36b45539ceb0eb2606ead72084e2c5bb637c36cc80e2252db","names":[],"sources":["packages/core/session/src/types.ts:198"]},
-    {"digest":"4cd48f3e5108bd6ebedf7301c3638839b8b2b9db8dbd493974177fbdeb91a01b","names":["packages/api/session-controller/src/types.ts#SessionRequestId","packages/attachment/attachment/src/brand.ts#AttachmentId","packages/compaction/compaction/src/brand.ts#CompactionId","packages/core/session/src/types.ts#SessionId","packages/experimental/agent-team/src/types.ts#TeamId","packages/experimental/agent-team/src/types.ts#TeamMessageId","packages/experimental/agent-team/src/types.ts#TeamTaskId","packages/experimental/webhook/src/brand.ts#WebhookDeliveryId","packages/experimental/webhook/src/brand.ts#WebhookRuleId","packages/experimental/webhook/src/brand.ts#WebhookSourceId","packages/feedback/message-feedback/src/types.ts#MessageFeedbackVersion","packages/goal/goal/src/types.ts#GoalId","packages/interaction/commands/src/brand.ts#CommandId","packages/interaction/user-approval/src/types.ts#ApprovalRequestId","packages/jobs/jobs/src/brand.ts#JobId","packages/llm/llm-retry/src/brand.ts#RetryId","packages/llm/llm/src/brand.ts#MessageId","packages/llm/llm/src/brand.ts#ProviderRequestId","packages/llm/llm/src/brand.ts#ReasoningEffortId","packages/llm/llm/src/brand.ts#ToolCallId","packages/schedule/schedule/src/types.ts#ScheduleId","packages/session/session-title/src/index.ts#SessionTitleProviderId","packages/session/session-title/src/types.ts#SessionTitleProviderId","packages/workflow/workflow/src/types.ts#WorkflowRunId"],"sources":["packages/api/session-controller/src/types.ts:388","packages/attachment/attachment/src/brand.ts:6","packages/compaction/compaction/src/brand.ts:4","packages/core/session/src/types.ts:21","packages/experimental/agent-team/src/types.ts:21","packages/experimental/agent-team/src/types.ts:33","packages/experimental/agent-team/src/types.ts:9","packages/experimental/webhook/src/brand.ts:12","packages/experimental/webhook/src/brand.ts:6","packages/experimental/webhook/src/brand.ts:9","packages/feedback/message-feedback/src/types.ts:14","packages/goal/goal/src/types.ts:17","packages/interaction/commands/src/brand.ts:31","packages/interaction/user-approval/src/types.ts:17","packages/jobs/jobs/src/brand.ts:19","packages/llm/llm-retry/src/brand.ts:4","packages/llm/llm/src/brand.ts:16","packages/llm/llm/src/brand.ts:31","packages/llm/llm/src/brand.ts:43","packages/llm/llm/src/brand.ts:67","packages/schedule/schedule/src/types.ts:14","packages/session/session-title/src/index.ts:42","packages/session/session-title/src/types.ts:17","packages/workflow/workflow/src/types.ts:13"]},
+    {"digest":"4cd48f3e5108bd6ebedf7301c3638839b8b2b9db8dbd493974177fbdeb91a01b","names":["packages/api/session-controller/src/types.ts#SessionRequestId","packages/attachment/attachment/src/brand.ts#AttachmentId","packages/compaction/compaction/src/brand.ts#CompactionId","packages/core/session/src/types.ts#SessionId","packages/experimental/agent-team/src/types.ts#TeamId","packages/experimental/agent-team/src/types.ts#TeamMessageId","packages/experimental/agent-team/src/types.ts#TeamTaskId","packages/experimental/webhook/src/brand.ts#WebhookDeliveryId","packages/experimental/webhook/src/brand.ts#WebhookRuleId","packages/experimental/webhook/src/brand.ts#WebhookSourceId","packages/feedback/message-feedback/src/types.ts#MessageFeedbackVersion","packages/goal/goal/src/types.ts#GoalId","packages/interaction/commands/src/brand.ts#CommandId","packages/interaction/user-approval/src/types.ts#ApprovalRequestId","packages/jobs/jobs/src/brand.ts#JobId","packages/llm/llm-retry/src/brand.ts#RetryId","packages/llm/llm/src/brand.ts#MessageId","packages/llm/llm/src/brand.ts#ProviderRequestId","packages/llm/llm/src/brand.ts#ReasoningEffortId","packages/llm/llm/src/brand.ts#ToolCallId","packages/schedule/schedule/src/types.ts#ScheduleId","packages/session/session-title/src/index.ts#SessionTitleProviderId","packages/session/session-title/src/types.ts#SessionTitleProviderId","packages/workflow/workflow/src/types.ts#WorkflowRunId"],"sources":["packages/api/session-controller/src/types.ts:389","packages/attachment/attachment/src/brand.ts:6","packages/compaction/compaction/src/brand.ts:4","packages/core/session/src/types.ts:21","packages/experimental/agent-team/src/types.ts:21","packages/experimental/agent-team/src/types.ts:33","packages/experimental/agent-team/src/types.ts:9","packages/experimental/webhook/src/brand.ts:12","packages/experimental/webhook/src/brand.ts:6","packages/experimental/webhook/src/brand.ts:9","packages/feedback/message-feedback/src/types.ts:14","packages/goal/goal/src/types.ts:17","packages/interaction/commands/src/brand.ts:31","packages/interaction/user-approval/src/types.ts:17","packages/jobs/jobs/src/brand.ts:19","packages/llm/llm-retry/src/brand.ts:4","packages/llm/llm/src/brand.ts:16","packages/llm/llm/src/brand.ts:31","packages/llm/llm/src/brand.ts:43","packages/llm/llm/src/brand.ts:67","packages/schedule/schedule/src/types.ts:14","packages/session/session-title/src/index.ts:42","packages/session/session-title/src/types.ts:17","packages/workflow/workflow/src/types.ts:13"]},
     {"digest":"4d60dddaa65d3da8d4cd014d85ce3d2c2875664dd0433e331d8e9d395289686b","names":["packages/experimental/liveshare/src/host/viewer-principal.ts#ShareViewerPrincipal"],"sources":["packages/experimental/liveshare/src/host/viewer-principal.ts:24"]},
     {"digest":"4e011753f8263f436efaabfbb3b4db53a98fc55342c5ded2daf7208b217be159","names":[],"sources":[]},
     {"digest":"4e44c9118152f6829634bfd508e47669ab0497caffa380c94b4be91f9390d35d","names":[],"sources":[]},
@@ -472,7 +472,7 @@
     {"digest":"a3c6f1ea38e9a61d7a9706057ba65aabe02dfe6d9dd90d4736aa62325d874531","names":[],"sources":[]},
     {"digest":"a3edd1efd1fef21b72c55e213c8a8b24196b091abde2b89db52be0b2aaae3cfa","names":[],"sources":[]},
     {"digest":"a40d12070f6f4a124f32fb3cc86e7857554702e32f0eda3080a25c4b9ac9b18c","names":[],"sources":["packages/experimental/agent-team/src/types.ts:232"]},
-    {"digest":"a4afec59b75aad5d13ef82d6931f35cc2d98918503916cf069355b77c5e42302","names":[],"sources":["packages/api/session-controller/src/types.ts:397"]},
+    {"digest":"a4afec59b75aad5d13ef82d6931f35cc2d98918503916cf069355b77c5e42302","names":[],"sources":["packages/api/session-controller/src/types.ts:398"]},
     {"digest":"a6567ccb2e530606b775371eb4fa31468d72084339968e8b0440a516a23b39dc","names":[],"sources":[]},
     {"digest":"a6b41f5bede8094d7bf635be5d69b1bd7a25e006ca9cf9415bceb9322f1a7feb","names":["packages/experimental/hook-protocol/src/types.ts#HookDialect"],"sources":["packages/experimental/hook-protocol/src/types.ts:48"]},
     {"digest":"a6da9ad5d42ae83a6833a8288b076688e8e0801633ea36cbdd8a30a6d9f3160c","names":["packages/workflow/tool-workflow/src/types.ts#ToolWorkflowRunStartData"],"sources":["packages/workflow/tool-workflow/src/types.ts:14"]},
diff --git a/docs/subsystems/session-projection.i18n.yaml b/docs/subsystems/session-projection.i18n.yaml
index 917f2152fb..a1fe995e3b 100644
--- a/docs/subsystems/session-projection.i18n.yaml
+++ b/docs/subsystems/session-projection.i18n.yaml
@@ -12,8 +12,8 @@
   en: bc9d438b90fc2baa
   zh: df7cbea2dad3786b
 /session-projections/summary-reads:
-  en: d2bc9bcc775acfb7
-  zh: b1d2ba74496305b8
+  en: fcc9d07e5c41abb7
+  zh: 798004ad1c66787b
 /session-projections/summary-reads/summary-vocabulary:
   en: 6a93a4e1682fd6e6
   zh: 28729129c3d8a3b1
diff --git a/docs/subsystems/session-projection.md b/docs/subsystems/session-projection.md
index 7ea7c06716..6284a8fb95 100644
--- a/docs/subsystems/session-projection.md
+++ b/docs/subsystems/session-projection.md
@@ -156,9 +156,9 @@ type ProjectionEventChangeListener = (
 
 A Session summary carries every registered client view except the keys whose `SessionProjectionMap` entry carries the `SessionProjectionSummaryExcluded<T>` mark. The mark has no runtime representation: it decides the client view type, while `wire.summary` decides the runtime key set, with omission meaning `true`. A key whose entry carries the mark declares `wire.summary: false` so the two agree; the field is a plain boolean, so the type does not enforce it.
 
-`summaryKeys()` derives the key set from the live registrations and keeps returning the same instance until a registration or its disposal changes the key table. A summary consumer passes it to the existing key-taking faces — `cachedSnapshot(session, keys)` for cached cells and `viewCheckpoint(rows, keys)` for checkpoint rows, both keeping their watermark rules and both using a set without copying — so there is no summary-specific read face and no second definition of the set.
+`summaryKeys()` derives the key set from the live registrations and keeps returning the same instance until a registration or its disposal changes the key table. A summary consumer passes it to the existing key-taking faces — `snapshot(session, keys)` for live Sessions and `viewCheckpoint(rows, keys)` for checkpoint rows, both using a set without copying — so there is no summary-specific read face and no second definition of the set.
 
-A list row carries that summary projection, never the full projection: it promises the summary key set and nothing more. `snapshot`, `cachedSnapshot`, and `viewCheckpoint` remain complete when called without a key subset, which is how an opened Session, its follow baseline, and the control baseline keep every projected value; the `@` reference reads only its label keys through the same key-taking faces.
+A list row carries that summary projection, never the full projection: it promises the summary key set and nothing more. `snapshot(session, keys)` computes only the units it returns. Without a key subset, `snapshot` computes every client-visible unit and no Host-only unit, and `viewCheckpoint` serves every wire key, so an opened Session, its follow baseline, and the control baseline carry every projected value; the `@` reference reads only its label keys through the same key-taking faces. The registry's `cachedSnapshot(session, keys)` is deprecated: it returns only values another read already computed and may omit keys.
 
 ### Summary vocabulary
 
@@ -376,30 +376,22 @@ onEventChanged(listener: ProjectionEventChangeListener): () => void
 /**
  * One consistent cut over every registered client-visible unit for one session, read from
  * the watermark cache (missing cells fold lazily over the in-memory log).
+ * Only the returned units are computed: other units, including Host-only
+ * units without `wire`, are neither folded nor advanced by this read.
  * Fully synchronous — every value and `asOfSeq` reflect the same log
  * position. Each value passes its unit's `viewSchema` before leaving.
  * @param session - the session whose projection values are read.
- * @param keys - optional client-visible outputs; state materialization remains complete.
+ * @param keys - optional client-visible outputs; only these units are computed.
  * @returns the snapshot; `values` is empty when no selected client-visible unit is registered.
  */
 snapshot( session: Session, keys?: ProjectionKeySelection, ): ProjectionSnapshot
 
-/**
- * Read only already-materialized client-visible cells without folding history.
- * Values may trail the live Session and are therefore hints, not a complete
- * baseline. Missing cells are omitted.
- * @param session - attached Session whose cached cells are inspected.
- * @param keys - optional wire keys to view.
- * @returns the lowest common cached cut, or `undefined` when no wire cell exists.
- */
-cachedSnapshot( session: Session, keys?: ProjectionKeySelection, ): ProjectionSnapshot | undefined
-
 /**
  * The keys a Session summary carries: every registered client-visible key
  * whose unit does not declare `summary: false`. The returned set is stable —
  * the same instance on every call — until a registration or its disposal
  * changes the key table, so a consumer may hold it across rows. Callers pass
- * it to a key-taking read face such as `cachedSnapshot(session, summaryKeys())`
+ * it to a key-taking read face such as `snapshot(session, summaryKeys())`
  * or `viewCheckpoint(rows, summaryKeys())`; those faces use the set as-is.
  * @returns the current summary key set; do not mutate it.
  */
diff --git a/docs/subsystems/session-projection.zh.md b/docs/subsystems/session-projection.zh.md
index b84720e804..b924cc78a0 100644
--- a/docs/subsystems/session-projection.zh.md
+++ b/docs/subsystems/session-projection.zh.md
@@ -156,9 +156,9 @@ type ProjectionEventChangeListener = (
 
 Session 摘要包含每个已注册客户端视图，但排除 `SessionProjectionMap` 条目带 `SessionProjectionSummaryExcluded<T>` 标记的 key。标记没有运行时表示：它决定客户端视图类型，`wire.summary` 决定运行时键集合，省略即 `true`。map 条目带标记的 key 应声明 `wire.summary: false` 以保持一致；该字段是普通布尔值，类型层不做强制。
 
-`summaryKeys()` 从实时注册派生该集合，并在注册或注销改变 key 表之前持续返回同一实例。摘要消费方把它传给既有的带 key 读取面 —— 缓存 cell 用 `cachedSnapshot(session, keys)`，checkpoint 行用 `viewCheckpoint(rows, keys)`，两者保持各自的水位规则且直接使用 Set、不做复制 —— 因此不存在摘要专用读取面，集合也只有一处定义。
+`summaryKeys()` 从实时注册派生该集合，并在注册或注销改变 key 表之前持续返回同一实例。摘要消费方把它传给既有的带 key 读取面 —— 实时 Session 用 `snapshot(session, keys)`，checkpoint 行用 `viewCheckpoint(rows, keys)`，两者都直接使用 Set、不做复制 —— 因此不存在摘要专用读取面，集合也只有一处定义。
 
-列表行携带的是这个摘要投影，绝不是全量投影：它只承诺摘要键集合，不承诺更多。`snapshot`、`cachedSnapshot` 与 `viewCheckpoint` 在不传 key 子集时仍是完整的，打开的 Session、其 follow 基线与控制基线因此保留每个投影值；`@` 引用只通过同一组带 key 的读取面读取其标签 key。
+列表行携带的是这个摘要投影，绝不是全量投影：它只承诺摘要键集合，不承诺更多。`snapshot(session, keys)` 只计算它返回的单元。不传 key 子集时，`snapshot` 计算每个客户端可见单元、不计算 Host 专用单元，`viewCheckpoint` 返回每个 wire key，因此打开的 Session、其 follow 基线与控制基线携带每个投影值；`@` 引用只通过同一组带 key 的读取面读取其标签 key。注册表的 `cachedSnapshot(session, keys)` 已废弃：它只返回其他读取已经算好的值，可能缺少 key。
 
 ### 摘要词汇
 
@@ -376,30 +376,22 @@ onEventChanged(listener: ProjectionEventChangeListener): () => void
 /**
  * One consistent cut over every registered client-visible unit for one session, read from
  * the watermark cache (missing cells fold lazily over the in-memory log).
+ * Only the returned units are computed: other units, including Host-only
+ * units without `wire`, are neither folded nor advanced by this read.
  * Fully synchronous — every value and `asOfSeq` reflect the same log
  * position. Each value passes its unit's `viewSchema` before leaving.
  * @param session - the session whose projection values are read.
- * @param keys - optional client-visible outputs; state materialization remains complete.
+ * @param keys - optional client-visible outputs; only these units are computed.
  * @returns the snapshot; `values` is empty when no selected client-visible unit is registered.
  */
 snapshot( session: Session, keys?: ProjectionKeySelection, ): ProjectionSnapshot
 
-/**
- * Read only already-materialized client-visible cells without folding history.
- * Values may trail the live Session and are therefore hints, not a complete
- * baseline. Missing cells are omitted.
- * @param session - attached Session whose cached cells are inspected.
- * @param keys - optional wire keys to view.
- * @returns the lowest common cached cut, or `undefined` when no wire cell exists.
- */
-cachedSnapshot( session: Session, keys?: ProjectionKeySelection, ): ProjectionSnapshot | undefined
-
 /**
  * The keys a Session summary carries: every registered client-visible key
  * whose unit does not declare `summary: false`. The returned set is stable —
  * the same instance on every call — until a registration or its disposal
  * changes the key table, so a consumer may hold it across rows. Callers pass
- * it to a key-taking read face such as `cachedSnapshot(session, summaryKeys())`
+ * it to a key-taking read face such as `snapshot(session, summaryKeys())`
  * or `viewCheckpoint(rows, summaryKeys())`; those faces use the set as-is.
  * @returns the current summary key set; do not mutate it.
  */
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/projection-snapshot-scope/guide.i18n.yaml b/docs/upgrade-guide/v0.2.2-alpha.2/projection-snapshot-scope/guide.i18n.yaml
new file mode 100644
index 0000000000..b1cc4b5f88
--- /dev/null
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/projection-snapshot-scope/guide.i18n.yaml
@@ -0,0 +1,16 @@
+# Bilingual-pair consistency record for guide.md (docs/i18n/README.md): per heading
+# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
+# After editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write docs/upgrade-guide/v0.2.2-alpha.2/projection-snapshot-scope/guide.md
+/:
+  en: 82a6e0261297097c
+  zh: c86e496c258e72b2
+/projection-snapshot-scope:
+  en: c8b08322a943d6b2
+  zh: 31862a259b7738bb
+/projection-snapshot-scope/change:
+  en: d95cd644b01419a1
+  zh: 89038a6de9b74e8a
+/projection-snapshot-scope/migration:
+  en: 408d88a4ea6fe3a9
+  zh: 397de0dc2d8318df
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/projection-snapshot-scope/guide.md b/docs/upgrade-guide/v0.2.2-alpha.2/projection-snapshot-scope/guide.md
new file mode 100644
index 0000000000..66138aa3f2
--- /dev/null
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/projection-snapshot-scope/guide.md
@@ -0,0 +1,19 @@
+---
+kind: upgrade-guide
+description: "Projection snapshot reads compute only the returned units, the registry cached snapshot read is deprecated, and Session list summaries omit context pressure and breakdown."
+---
+
+# Projection snapshot scope
+
+English | [中文](guide.zh.md)
+
+## Change
+
+`ctx.sessionProjections.snapshot(session, keys)` from `@deepseek-ai/dsh-session-projection` computes only the units it returns: with `keys` it computes only the selected units, and without `keys` it computes every unit that defines `wire` and no Host-only unit. A plugin can no longer rely on other units being computed after it calls `snapshot`. The registry's `cachedSnapshot(session, keys)` is deprecated; it returns only values another read already computed and may omit keys. The persisted cache read `ctx.sessionProjectionCache.cachedSnapshot(header, keys)` is unchanged. `session.list` summary `projections` no longer carry `contextBreakdown` or `contextPressure`; the `@deepseek-ai/dsh-token-meter` entries are now `SessionProjectionSummaryExcluded`. Plugins and SDK or wire clients that read these values are affected.
+
+## Migration
+
+1. Read Host state of your own unit through the handle that `await ctx.sessionProjections.register(definition)` returns, with `handle.stateOf(session)`, instead of calling `snapshot` first and reading cells afterwards.
+2. Replace calls to the registry's `cachedSnapshot(session, keys)` with `snapshot(session, keys)`.
+3. Read `contextBreakdown` and `contextPressure` from an opened Session, for example the Session projection snapshot or follow baseline, instead of from `session.list` rows.
+4. Rebuild your plugins and clients, confirm that type checks pass without `no-deprecated` findings for `cachedSnapshot`, and confirm that an opened Session still shows its context meter.
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/projection-snapshot-scope/guide.zh.md b/docs/upgrade-guide/v0.2.2-alpha.2/projection-snapshot-scope/guide.zh.md
new file mode 100644
index 0000000000..f11e97173b
--- /dev/null
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/projection-snapshot-scope/guide.zh.md
@@ -0,0 +1,19 @@
+---
+kind: upgrade-guide
+description: "投影 snapshot 读取只计算返回的单元，注册表的 cached snapshot 读取已废弃，Session 列表摘要不再包含 context pressure 和 breakdown。"
+---
+
+# 投影 snapshot 的计算范围
+
+[English](guide.md) | 中文
+
+## 变更
+
+`@deepseek-ai/dsh-session-projection` 的 `ctx.sessionProjections.snapshot(session, keys)` 只计算它返回的单元：传 `keys` 时只计算选中的单元，不传时计算每个定义了 `wire` 的单元、不计算 Host 专用单元。插件不能再依赖调用 `snapshot` 之后其他单元已经算好。注册表的 `cachedSnapshot(session, keys)` 已废弃，它只返回其他读取已经算好的值，可能缺少 key。持久化缓存的读取 `ctx.sessionProjectionCache.cachedSnapshot(header, keys)` 不变。`session.list` 摘要的 `projections` 不再携带 `contextBreakdown` 和 `contextPressure`，`@deepseek-ai/dsh-token-meter` 的这两项改为 `SessionProjectionSummaryExcluded`。读取这些值的插件以及 SDK 或 wire 客户端受影响。
+
+## 迁移
+
+1. 通过 `await ctx.sessionProjections.register(definition)` 返回的句柄，用 `handle.stateOf(session)` 读取自己单元的 Host 状态，不要先调用 `snapshot` 再读取 cell。
+2. 把对注册表 `cachedSnapshot(session, keys)` 的调用替换为 `snapshot(session, keys)`。
+3. 从打开的 Session 读取 `contextBreakdown` 和 `contextPressure`，例如 Session 投影 snapshot 或 follow 基线，不要从 `session.list` 行读取。
+4. 重新构建插件和客户端，确认类型检查通过、`cachedSnapshot` 没有 `no-deprecated` 告警，并确认打开的 Session 仍显示上下文用量。
diff --git a/packages/api/session-controller/README.i18n.yaml b/packages/api/session-controller/README.i18n.yaml
index 010c41bf94..8bea04d9db 100644
--- a/packages/api/session-controller/README.i18n.yaml
+++ b/packages/api/session-controller/README.i18n.yaml
@@ -15,8 +15,8 @@
   en: 1fdf707322fb6996
   zh: 0204f7e9d4aa3cce
 /session-controller/use-this-package:
-  en: d3d53e899960d96e
-  zh: 16b2bc7fe74215d8
+  en: 22136176884a239b
+  zh: b8eeea5908b9a6fd
 /session-controller/client-references:
   en: 41bdda1ac32df558
   zh: aa5d0e325924066b
diff --git a/packages/api/session-controller/README.md b/packages/api/session-controller/README.md
index 6fd7b24561..3a9dc2cd6b 100644
--- a/packages/api/session-controller/README.md
+++ b/packages/api/session-controller/README.md
@@ -33,7 +33,7 @@ History pages and follow opening snapshots carry one `{ type: 'event', event: Se
 
 The Client journal validates current Session event envelopes before publishing follow snapshots, live entries, or history pages. It reuses the browser-safe Session validators for required surface markers, exact replacement endpoints, earlier unique source seqs, embedded Assistant provider metadata, request-header omissions, and tool-error consistency. Invalid records fail without field stripping or normalization; range membership and source existence remain durable-log checks on the Host.
 
-Each endpoint states its activation policy. List reads only stored headers and projection-cache rows: it never calls per-session stat or opens a cold Session body. A current-format cache identity may supply every list hint; a lifecycle-matching predecessor cache may supply only its version-compatible title as a stale display fact, never as an authoritative fold seed. Search, history pages, log following, skill discovery, and workspace-path opening can inspect persistence without activating an Agent; `canOpenWorkspacePath()` reports native-opening availability without addressing a Session. Cancellation requires live state; queue mutation, model, rename, prompt, and file-reference operations may resolve or resume an ordinary Session. Prompt rejects content with neither non-whitespace text nor an attachment before resolving the Agent or appending Session events; queue edits accept only non-empty text content. Prompt admission consumes opaque receipts from the injected [`fileUploads`](../../client/file-upload/README.md) Host service and resolves every same-Agent receipt before sending the complete ordered content list through `ctx.attachments`. A receipt names a staged file or a staged image, and an image receipt subjects the prompt to the same image-input check as an encoded image. Prompt retries whose `requestId` is already queued or logged return the original acceptance without inserting another message. Create and fork are the only operations that create a new Agent directly. The service applies one preset-aware resume policy and subagent ownership fence to its own methods and to the Typert Agent and Session lookups used by other Remote namespaces. Queue mutation has one narrow exception: a live child whose current projected identity is continuable and comes from its own non-seed suffix accepts the ordinary Edit, Remove, and QueueDock Steer actions across both inbox destinations. One-shot, missing, unknown, corrupt, seed-only, or cold children remain rejected without resume. The skill catalog uses a live Agent's effective working directory and scoped registry when present. Cold listing uses the projected current directory, falling back to the recorded origin and then the configured directory default. It retains the preset standing scope without activating an Agent. The authenticated delivery routes use `workspaceDesktop()` for the serving Host name and file-manager behavior. `openWorkspacePath({ path, action: "reveal" })` delegates file-manager navigation to the native adapter; omitting `action` opens the file-type association, including HTML and SVG. Both operations require the composed filesystem to map the requested Host path to the same canonical process path; unmapped remote paths are refused before a native command runs. `session.projections` normally reads an exact baseline, including current-format cold logs, and returns `kind: sequenced`. Only a read requiring migration returns `kind: migration-required` hints without `asOfSeq`; missing keys remain absent. It returns null for a missing Session. Fork callers may set `allowMigration: false` to receive `session/migration-required` instead of starting source migration; omission retains automatic migration. The Client exposes shared values and explicit-read state through `projectionsBySession`; domains select their own keys. Session-list summaries carry `agentAvailable`, updated through existing summary and status events independently of durable projections. Sequenced reads and live projection frames use the same sequence ordering; cached reads fill hints without replacing sequenced values.
+Each endpoint states its activation policy. For a cold Session, list reads only stored headers and projection-cache rows: it never calls per-session stat or opens a cold Session body. An attached Session is summarized from its in-memory log. A current-format cache identity may supply every list hint; a lifecycle-matching predecessor cache may supply only its version-compatible title as a stale display fact, never as an authoritative fold seed. Search, history pages, log following, skill discovery, and workspace-path opening can inspect persistence without activating an Agent; `canOpenWorkspacePath()` reports native-opening availability without addressing a Session. Cancellation requires live state; queue mutation, model, rename, prompt, and file-reference operations may resolve or resume an ordinary Session. Prompt rejects content with neither non-whitespace text nor an attachment before resolving the Agent or appending Session events; queue edits accept only non-empty text content. Prompt admission consumes opaque receipts from the injected [`fileUploads`](../../client/file-upload/README.md) Host service and resolves every same-Agent receipt before sending the complete ordered content list through `ctx.attachments`. A receipt names a staged file or a staged image, and an image receipt subjects the prompt to the same image-input check as an encoded image. Prompt retries whose `requestId` is already queued or logged return the original acceptance without inserting another message. Create and fork are the only operations that create a new Agent directly. The service applies one preset-aware resume policy and subagent ownership fence to its own methods and to the Typert Agent and Session lookups used by other Remote namespaces. Queue mutation has one narrow exception: a live child whose current projected identity is continuable and comes from its own non-seed suffix accepts the ordinary Edit, Remove, and QueueDock Steer actions across both inbox destinations. One-shot, missing, unknown, corrupt, seed-only, or cold children remain rejected without resume. The skill catalog uses a live Agent's effective working directory and scoped registry when present. Cold listing uses the projected current directory, falling back to the recorded origin and then the configured directory default. It retains the preset standing scope without activating an Agent. The authenticated delivery routes use `workspaceDesktop()` for the serving Host name and file-manager behavior. `openWorkspacePath({ path, action: "reveal" })` delegates file-manager navigation to the native adapter; omitting `action` opens the file-type association, including HTML and SVG. Both operations require the composed filesystem to map the requested Host path to the same canonical process path; unmapped remote paths are refused before a native command runs. `session.projections` normally reads an exact baseline, including current-format cold logs, and returns `kind: sequenced`. Only a read requiring migration returns `kind: migration-required` hints without `asOfSeq`; missing keys remain absent. It returns null for a missing Session. Fork callers may set `allowMigration: false` to receive `session/migration-required` instead of starting source migration; omission retains automatic migration. The Client exposes shared values and explicit-read state through `projectionsBySession`; domains select their own keys. Session-list summaries carry `agentAvailable`, updated through existing summary and status events independently of durable projections. Sequenced reads and live projection frames use the same sequence ordering; cached reads fill hints without replacing sequenced values.
 
 Every Remote endpoint is access-controlled: a Peer whose principal is not the owner reaches an endpoint only when, on every resource the call touches, a binding of that principal kind's policy in [`dsh-api-remote-access`](../remote-access/README.md) grants a role listing the action ([Peer principals Agent Note](../../../.agents/notes/implemented/architecture/2026-10-12-peer-principal-and-remote-access.md)). The controller injects `remoteAccess` and registers a default resolver for the `session` resource kind through `typert.resources`. It reads a named `sessionId` parameter, otherwise the first object argument's `sessionId` or `address`; unrelated string parameters name no Session. An object containing both `sessionId` and `address` is invalid, even when they name the same Session. `session/events`, the deprecated `session/page`, `session/observeEvent`, and `session/follow` use this resolver to read `address.sessionId` for an ordinary Session address and `address.childSessionId` for a subagent address; whether access to the parent Session covers its children is the policy's rule. `session/projections`, `session/observeProjections`, `session/state`, `session/observeState`, and `session/wait` read the Session resource from `request.sessionId`, so each call and subscription names only the Sessions it may read. `session/list`, `session/search`, and `session/control` read no resource, so their calls touch the `global` resource and need a `global` role; for a non-owner caller, `session/list` returns only the rows, `session/search` only the hits, and `session/control` only the baseline projections and projection frames, whose Session `ctx.remoteAccess.allows()` admits for the same action, so that action also belongs to a `session` role; owner results are unfiltered. `session/prompt` builds the durable `user-rpc` message source in its Remote method and records `principal` only for a non-owner caller, read through `principalOf(this.ctx.invocation)`; a source without `principal` belongs to the owner.
 
@@ -41,7 +41,7 @@ Every Remote endpoint is access-controlled: a Peer whose principal is not the ow
 
 List rows carry `formatStatus` when available, so Clients can identify migration-required Sessions without requesting their projections.
 
-Host list generation yields between complete rows only when its configured work slice is exhausted; cheap remaining work returns without a forced yield. Request cancellation is checked per row and after each yield and rejects without partial results. Each row is synchronous; the list does not promise one cross-Session snapshot. A Session already queued as cold remains a cached row if it attaches during a yield: Client in-flight mutation replay corrects its availability, and sequenced projections supersede cached hints.
+Host list generation yields between complete rows only when its configured work slice is exhausted; cheap remaining work returns without a forced yield. Request cancellation is checked per row and after each yield and rejects without partial results. Each row is synchronous; the list does not promise one cross-Session snapshot. A Session already queued as cold remains a cached row if it attaches during a yield: Client in-flight mutation replay corrects its availability, and sequenced projections supersede cached hints. An attached Session's summary reads its blankness and last-prompt recency through the `sessionListMetadata` projection handle, and its projection hints carry every summary key computed through `snapshot`. The first summary of an attached Session computes these projections over its whole in-memory log, and later summaries advance them incrementally; this computation runs inside one synchronous row, so `listWorkSliceMs` cannot split it.
 
 Client list rows and resident Sessions use the current `sessionListMetadata` projection to reject stale blank-session hints; recency is the later of the summary timestamp and the projected last user prompt. When SessionManager creates an instance before its list row arrives, it reconciles blankness with metadata already retained for that Session. An opened conversation is therefore not reused by New Session even when an older list response still marks it blank.
 
diff --git a/packages/api/session-controller/README.zh.md b/packages/api/session-controller/README.zh.md
index 8729f555ba..9259bdad17 100644
--- a/packages/api/session-controller/README.zh.md
+++ b/packages/api/session-controller/README.zh.md
@@ -33,7 +33,7 @@ kind: "package-reference"
 
 Client journal 在发布 follow 快照、live entry 或历史页之前验证当前 Session 事件 envelope。它复用浏览器安全的 Session validator，检查必需的 surface marker、精确的 replacement endpoint、更早且唯一的 source seq、内嵌 Assistant 提供方元数据、request header 可选字段的省略规则以及工具错误一致性。无效 record 直接失败，不删除字段或归一化；范围成员与来源存在性仍由 Host 的持久日志检查。
 
-每个 endpoint 都声明自己的激活策略。列表只读取持久化 header 与 projection cache row，绝不调用逐 Session stat 或打开冷 Session body。当前格式 cache identity 可以提供全部列表 hint；生命周期匹配的 predecessor cache 只能提供版本兼容的 title，作为可能过时的展示事实，绝不能作为权威 fold seed。搜索、历史页、日志跟随、skill 发现和工作区路径打开可以在不激活 Agent 的情况下检查 persistence；`canOpenWorkspacePath()` 无需指定 Session 即可报告原生打开能力。取消要求 live 状态；queue 变更、模型、重命名、prompt 和文件引用操作可以解析或恢复普通 Session。提示词会在解析 Agent 或追加 Session 事件前，拒绝既没有非空白文本也没有附件的 content；queue edit 只接受非空文本 content。prompt 准入从注入的 [`fileUploads`](../../client/file-upload/README.zh.md) Host 服务取得不透明凭证，在把完整有序内容列表交给 `ctx.attachments` 前解析每个属于同一 Agent 的凭证。凭证指向一个暂存文件或一张暂存图片；图片凭证与编码图片一样要经过图片输入检查。`requestId` 已进入 queue 或日志时，prompt 重试直接返回原来的接受结果，不会重复插入消息。只有 create 与 fork 会直接创建新 Agent。该服务把同一套感知 preset 的恢复策略和 subagent ownership fence 同时用于自身方法，以及其他 Remote namespace 使用的 Typert Agent 与 Session lookup。Queue 变更只有一个狭窄例外：当前 projection identity 为 continuable 且来自自身非 seed suffix 的在线 child，可以在两个 inbox 目标上使用普通 Edit、Remove 与 QueueDock Steer action。One-shot、缺失、未知、损坏、仅含 seed identity 或冷 child 继续被拒绝，且不会恢复。skill 目录优先使用已有 live Agent 的有效工作目录与限定范围内的注册表。冷态列表使用投影中的当前目录，依次回退到记录的起始目录与配置的默认目录。它保留 preset 常驻 scope，不会激活 Agent。经过鉴权的文件交付路由通过 `workspaceDesktop()` 获取提供服务的 Host 名称和文件管理器行为。`openWorkspacePath({ path, action: "reveal" })` 将文件管理器导航委托给原生适配器；省略 `action` 时按文件类型关联打开，包括 HTML 和 SVG。两种操作都要求当前文件系统将请求的 Host 路径映射到同一个规范进程路径；无法映射的远端路径会在执行原生命令之前被拒绝。 `session.projections` 正常读取准确基线，包括当前格式的冷日志，返回 `kind: sequenced`。只有需要迁移时才返回不带 `asOfSeq` 的 `kind: migration-required` 提示，缺少的键保持缺席。Session 不存在时返回 null。Fork 调用者可设置 `allowMigration: false`，在源历史需要迁移时收到 `session/migration-required`；省略则保持自动迁移。Client 通过 `projectionsBySession` 暴露共享值和显式读取状态，由领域选择自身的 key。Session 列表摘要携带 `agentAvailable`，通过已有摘要与状态事件更新，与持久化 projection 相互独立。有序读取与实时 projection 帧使用相同的序号排序规则；缓存读取只补充提示，不替换有序值。
+每个 endpoint 都声明自己的激活策略。对冷 Session，列表只读取持久化 header 与 projection cache row，绝不调用逐 Session stat 或打开冷 Session body。已接入 Session 从其内存日志生成摘要。当前格式 cache identity 可以提供全部列表 hint；生命周期匹配的 predecessor cache 只能提供版本兼容的 title，作为可能过时的展示事实，绝不能作为权威 fold seed。搜索、历史页、日志跟随、skill 发现和工作区路径打开可以在不激活 Agent 的情况下检查 persistence；`canOpenWorkspacePath()` 无需指定 Session 即可报告原生打开能力。取消要求 live 状态；queue 变更、模型、重命名、prompt 和文件引用操作可以解析或恢复普通 Session。提示词会在解析 Agent 或追加 Session 事件前，拒绝既没有非空白文本也没有附件的 content；queue edit 只接受非空文本 content。prompt 准入从注入的 [`fileUploads`](../../client/file-upload/README.zh.md) Host 服务取得不透明凭证，在把完整有序内容列表交给 `ctx.attachments` 前解析每个属于同一 Agent 的凭证。凭证指向一个暂存文件或一张暂存图片；图片凭证与编码图片一样要经过图片输入检查。`requestId` 已进入 queue 或日志时，prompt 重试直接返回原来的接受结果，不会重复插入消息。只有 create 与 fork 会直接创建新 Agent。该服务把同一套感知 preset 的恢复策略和 subagent ownership fence 同时用于自身方法，以及其他 Remote namespace 使用的 Typert Agent 与 Session lookup。Queue 变更只有一个狭窄例外：当前 projection identity 为 continuable 且来自自身非 seed suffix 的在线 child，可以在两个 inbox 目标上使用普通 Edit、Remove 与 QueueDock Steer action。One-shot、缺失、未知、损坏、仅含 seed identity 或冷 child 继续被拒绝，且不会恢复。skill 目录优先使用已有 live Agent 的有效工作目录与限定范围内的注册表。冷态列表使用投影中的当前目录，依次回退到记录的起始目录与配置的默认目录。它保留 preset 常驻 scope，不会激活 Agent。经过鉴权的文件交付路由通过 `workspaceDesktop()` 获取提供服务的 Host 名称和文件管理器行为。`openWorkspacePath({ path, action: "reveal" })` 将文件管理器导航委托给原生适配器；省略 `action` 时按文件类型关联打开，包括 HTML 和 SVG。两种操作都要求当前文件系统将请求的 Host 路径映射到同一个规范进程路径；无法映射的远端路径会在执行原生命令之前被拒绝。 `session.projections` 正常读取准确基线，包括当前格式的冷日志，返回 `kind: sequenced`。只有需要迁移时才返回不带 `asOfSeq` 的 `kind: migration-required` 提示，缺少的键保持缺席。Session 不存在时返回 null。Fork 调用者可设置 `allowMigration: false`，在源历史需要迁移时收到 `session/migration-required`；省略则保持自动迁移。Client 通过 `projectionsBySession` 暴露共享值和显式读取状态，由领域选择自身的 key。Session 列表摘要携带 `agentAvailable`，通过已有摘要与状态事件更新，与持久化 projection 相互独立。有序读取与实时 projection 帧使用相同的序号排序规则；缓存读取只补充提示，不替换有序值。
 
 每个 Remote 端点都受访问控制：principal 不是 owner 的 Peer 只有在本次调用访问的每个资源上，该 principal kind 在 [`dsh-api-remote-access`](../remote-access/README.zh.md) 中的 policy 都有某个 binding 授予列出该 action 的 role 时，才能调用该端点（[Peer 身份属性 Agent Note](../../../.agents/notes/implemented/architecture/2026-10-12-peer-principal-and-remote-access.zh.md)）。控制器注入 `remoteAccess`，并经 `typert.resources` 为 `session` 资源种类登记默认 resolver。它读取具名 `sessionId` 参数，否则读取第一个对象参数的 `sessionId` 或 `address`；无关字符串参数不指明 Session。对象同时包含 `sessionId` 和 `address` 时无效，即使两者指向同一 Session。`session/events`、已弃用的 `session/page`、`session/observeEvent` 与 `session/follow` 使用该 resolver：对普通 Session 地址读 `address.sessionId`，对 subagent 地址读 `address.childSessionId`；父会话的访问权是否覆盖其子会话由 policy 决定。`session/projections`、`session/observeProjections`、`session/state`、`session/observeState` 与 `session/wait` 从 `request.sessionId` 读取会话资源，因此每次调用与订阅都只点名它可读的会话。`session/list`、`session/search` 与 `session/control` 不读取资源，其调用访问 `global` 资源，需要 `global` role；对非 owner 调用方，`session/list` 只返回其 Session 被 `ctx.remoteAccess.allows()` 按同一 action 允许的行，`session/search` 只返回这类 Session 的命中，`session/control` 也只返回这类 Session 的 baseline projection 与 projection 帧，因此该 action 也要列在 `session` role 中；owner 的结果不过滤。`session/prompt` 在其 Remote 方法内构造持久的 `user-rpc` 消息 source，且只为非 owner 调用方记录经 `principalOf(this.ctx.invocation)` 读取的 `principal`；不带 `principal` 的 source 属于 owner。
 
@@ -41,7 +41,7 @@ Client journal 在发布 follow 快照、live entry 或历史页之前验证当
 
 列表行在状态可用时携带 `formatStatus`，Client 无需请求其投影即可识别需要迁移的 Session。
 
-Host 仅在配置的工作时间片耗尽时，于完整条目之间让出事件循环；剩余工作较少时直接返回，不强制让出。每行及每次让出之后检查请求取消，取消时拒绝返回部分结果。每行同步计算；列表不承诺跨 Session 的统一快照。已经进入冷态队列的 Session 若在让出期间接入，仍返回缓存行：Client 对进行中请求的变更重放会纠正其可用性，带序号的投影会覆盖缓存提示。
+Host 仅在配置的工作时间片耗尽时，于完整条目之间让出事件循环；剩余工作较少时直接返回，不强制让出。每行及每次让出之后检查请求取消，取消时拒绝返回部分结果。每行同步计算；列表不承诺跨 Session 的统一快照。已经进入冷态队列的 Session 若在让出期间接入，仍返回缓存行：Client 对进行中请求的变更重放会纠正其可用性，带序号的投影会覆盖缓存提示。已接入 Session 的摘要通过 `sessionListMetadata` 投影句柄读取是否为空和最后一次提示词的最近活动时间，其投影提示携带通过 `snapshot` 计算的每个摘要 key。已接入 Session 的首次摘要在其完整内存日志上计算这些投影，之后的摘要增量推进；这次计算在单行的同步工作内进行，`listWorkSliceMs` 无法切分它。
 
 Client 列表行和驻留 Session 使用当前 `sessionListMetadata` 投影纠正过期的空白会话提示；最近活动时间取摘要时间戳与投影中最后一次用户提示词时间的较晚值。当 SessionManager 在列表行到达前创建实例时，会使用已保留的该 Session 元数据对账空白状态。因此，即使旧列表响应仍将已有对话标为空白，新会话操作也不会复用已经打开过的对话。
 
diff --git a/packages/api/session-controller/src/list.ts b/packages/api/session-controller/src/list.ts
index d258ace5c8..830ebe21a9 100644
--- a/packages/api/session-controller/src/list.ts
+++ b/packages/api/session-controller/src/list.ts
@@ -6,7 +6,7 @@ import type { Context } from '@deepseek-ai/cordis'
 import type {} from '@deepseek-ai/dsh-agent-preset-registry'
 import type { ImageAttachmentLimits } from '@deepseek-ai/dsh-attachment'
 import type { Session, SessionEvent, SessionHeader, SessionId } from '@deepseek-ai/dsh-session'
-import type { ProjectionSnapshot } from '@deepseek-ai/dsh-session-projection'
+import type { ProjectionHandle, ProjectionSnapshot } from '@deepseek-ai/dsh-session-projection'
 import type {} from '@deepseek-ai/dsh-session-projection-cache'
 import { SessionQueryError, type SessionRecord, type SessionSearchCursor } from '@deepseek-ai/dsh-session-query'
 import { RemoteError } from '@deepseek-ai/dsh-typert-protocol'
@@ -76,6 +76,8 @@ export function truncateUnicodeCodePoints(value: string, maximum: number): strin
 
 /** Owns list projection registration, bounded cold summaries, and authorized search. */
 export class ApiSessionList {
+  private listMetadata!: ProjectionHandle<SessionListMetadata>
+
   /**
    * @param ctx - Host context carrying Session, query, persistence, and projection services.
    * @param workSliceMs - Resolved positive integral list-work budget in milliseconds.
@@ -87,7 +89,7 @@ export class ApiSessionList {
    * @returns when all required registrations are ready.
    */
   async initialize(): Promise<void> {
-    await this.ctx.sessionProjections.register<'sessionListMetadata', SessionListMetadata>({
+    this.listMetadata = await this.ctx.sessionProjections.register<'sessionListMetadata', SessionListMetadata>({
       key: 'sessionListMetadata',
       stateSchema: sessionListMetadataSchema,
       init: () => ({ blank: true, lastPromptAt: null }),
@@ -111,19 +113,25 @@ export class ApiSessionList {
 
   /**
    * Build one current attached-Session summary.
+   * Blankness and recency come from the `sessionListMetadata` handle; projection
+   * hints carry every summary key computed through `snapshot`. The first call
+   * for a Session computes these projections over its whole in-memory log, and
+   * later calls advance them incrementally. The handle read and the hint with
+   * the same key come from one cell; the handle read does not depend on any
+   * other unit's view.
    * @param session - attached Session to summarize.
    * @returns current list metadata and available projections.
    */
   summaryFor(session: Session): SessionSummary {
+    const metadata = this.listMetadata.stateOf(session)
     const projections = this.projectionsFor(session.header, session)
-    const metadata = projections?.values.sessionListMetadata
     return {
       sessionId: session.id,
       updatedAt: updatedAt(session.header, metadata),
       agentAvailable: this.ctx.agents.get(session.id)?.session === session,
       formatStatus: 'current',
       running: this.ctx.agents.get(session.id)?.status === 'running',
-      blank: metadata?.blank ?? session.seq === 0,
+      blank: metadata.blank,
       ...listFields(session.header),
       ...(projections === undefined ? {} : { projections }),
     }
@@ -304,9 +312,9 @@ export class ApiSessionList {
       // itself summary-excluded.
       const keys = this.ctx.sessionProjections.summaryKeys()
       if (session !== undefined) {
-        // The live registry computed the block for this Session: its watermark
+        // The live registry computes the block for this Session: its watermark
         // shares the sequence space of the Session's baselines and frames.
-        return hintsOf('sequenced', this.ctx.sessionProjections.cachedSnapshot(session, keys))
+        return hintsOf('sequenced', this.ctx.sessionProjections.snapshot(session, keys))
       }
       // A cold row reads the persisted cache by header alone; the cache serves
       // seeded and unseeded lifecycles alike because a listing never seeds a
@@ -334,8 +342,8 @@ function hintsOf(
   block: ProjectionSnapshot | undefined,
 ): SessionProjectionHints | undefined {
   if (block === undefined || Object.keys(block.values).length === 0) return undefined
-  // Listing hints contain every summary wire value the source currently holds
-  // but remain partial: missing cells and cache rows are never materialized here.
+  // Listing hints contain every summary wire value the source holds; cached
+  // hints remain partial because missing cache rows are never folded here.
   return { kind, asOfSeq: block.asOfSeq, values: block.values }
 }
 
diff --git a/packages/api/session-controller/src/types.ts b/packages/api/session-controller/src/types.ts
index 6c3c737cb6..1d846d4c9a 100644
--- a/packages/api/session-controller/src/types.ts
+++ b/packages/api/session-controller/src/types.ts
@@ -36,9 +36,10 @@ export interface SessionListMetadata {
 }
 
 /**
- * Every available summary wire value a Session-list row carries as partial,
- * possibly stale hints. The block omits the keys whose unit declares
- * `summary: false`. `kind` and `asOfSeq` are independent facts: `kind` says
+ * Summary wire values a Session-list row carries. A `sequenced` block carries
+ * every summary key computed at its `asOfSeq`; a `cached` block carries the
+ * values the persisted cache holds and may omit keys or trail the Session.
+ * The block omits the keys whose unit declares `summary: false`. `kind` and `asOfSeq` are independent facts: `kind` says
  * which sequence space `asOfSeq` belongs to, and therefore how a client may
  * merge the block; `asOfSeq` is the producer's watermark in that space.
  */
diff --git a/packages/api/session-controller/tests/session-cold.host.spec.ts b/packages/api/session-controller/tests/session-cold.host.spec.ts
index 560c05514f..7cfc874c14 100644
--- a/packages/api/session-controller/tests/session-cold.host.spec.ts
+++ b/packages/api/session-controller/tests/session-cold.host.spec.ts
@@ -275,7 +275,8 @@ describe('attached updatedAt tracks human prompts', () => {
     const listed = await remote.list(request({}))
     if (!listed.ok) throw new Error('list failed')
     const summary = listed.value.items.find(item => item.sessionId === 'resumed-untouched')
-    expect(summary?.updatedAt).toBe(500)
+    // The resumed log's last human prompt, not its creation time or the later pickup.
+    expect(summary?.updatedAt).toBe(worked)
 
     // A lifecycle boundary is not a human update.
     resumed.append('turn/start', { turn: 2 })
diff --git a/packages/api/session-controller/tests/session-list-blank.host.spec.ts b/packages/api/session-controller/tests/session-list-blank.host.spec.ts
index f433d20c1b..e91fd6689e 100644
--- a/packages/api/session-controller/tests/session-list-blank.host.spec.ts
+++ b/packages/api/session-controller/tests/session-list-blank.host.spec.ts
@@ -5,21 +5,40 @@
  * fresh session keeps it list-hidden and reusable, while the first accepted
  * prompt's turn/start clears it. The host/session-added frame shares the
  * same predicate function (covered by the workspace spec's frame assertion).
+ * A resumed Session computes its own list metadata (blankness and last-prompt
+ * recency) when it is published, independent of which other projections were
+ * read before publication.
  */
 
-import { describe, expect, it } from 'vitest'
+import { afterEach, describe, expect, it } from 'vitest'
+import { mkdtemp, rm } from 'node:fs/promises'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
 import { Context } from '@deepseek-ai/cordis'
 import AgentRegistry from '@deepseek-ai/dsh-agent'
 import SessionProjectionRegistry from '@deepseek-ai/dsh-session-projection'
 import type { Agent } from '@deepseek-ai/dsh-agent'
-import SessionStore from '@deepseek-ai/dsh-session'
-import type { Session } from '@deepseek-ai/dsh-session'
+import { mountAgentLoopTestDependencies, mountAgentLoopTestHarness } from '@deepseek-ai/dsh-agent-loop-testkit'
+import { createUserMessage } from '@deepseek-ai/dsh-llm'
+import SessionStore, { SessionSeq } from '@deepseek-ai/dsh-session'
+import type { Session, SessionEvent, SessionId } from '@deepseek-ai/dsh-session'
+import * as JsonlSessionPersistence from '@deepseek-ai/dsh-session-persistence-jsonl'
 import { CommandId } from '@deepseek-ai/dsh-commands/brand'
 // Side-effect type imports: the configuration-event SessionEventMap merges.
 import type {} from '@deepseek-ai/dsh-permission-presets'
 import type {} from '@deepseek-ai/dsh-sandbox-policy'
+import type { SessionSummary } from '../src/types.ts'
 import { createSessionTestRemote, type TestSessionRemote } from './test-remote.ts'
 
+const ownedContexts = new Set<Context>()
+const ownedRoots = new Set<string>()
+afterEach(async () => {
+  await Promise.all([...ownedContexts].map(ctx => ctx.fiber.dispose()))
+  ownedContexts.clear()
+  await Promise.all([...ownedRoots].map(root => rm(root, { recursive: true, force: true })))
+  ownedRoots.clear()
+})
+
 async function harness(): Promise<{ ctx: Context; remote: TestSessionRemote; attach: (session: Session) => Promise<void> }> {
   const ctx = new Context()
   await ctx.plugin(SessionStore)
@@ -74,3 +93,110 @@ describe('summary blank = conversation not started', () => {
     expect(await listBlank(remote, session.id)).toBe(false)
   })
 })
+
+/**
+ * Mount the real AgentLoop over JSONL persistence without the projection
+ * cache, whose creation checkpoint would otherwise compute every unit before
+ * the Session Controller observes the published Session.
+ */
+async function resumeHarness(): Promise<{ ctx: Context; remote: TestSessionRemote; cwd: string }> {
+  const root = await mkdtemp(join(tmpdir(), 'dsh-list-blank-'))
+  ownedRoots.add(root)
+  const ctx = new Context()
+  ownedContexts.add(ctx)
+  await mountAgentLoopTestDependencies(ctx)
+  await ctx.plugin(JsonlSessionPersistence, { root })
+  const remote = await createSessionTestRemote(ctx, { defaultModelSelection: () => ({ provider: 'p', model: 'm' }), cwd: root })
+  await mountAgentLoopTestHarness(ctx)
+  return { ctx, remote, cwd: root }
+}
+
+/** Store one Session through persistence so a later resume seeds it from disk. */
+async function storeSession(ctx: Context, id: SessionId, cwd: string, events: readonly SessionEvent[]): Promise<void> {
+  const prepared = ctx.sessions.prepare(id, { meta: { cwd } })
+  const handle = await ctx.sessionPersistence.create(prepared.header)
+  await handle.append(events)
+  await handle.close()
+}
+
+/** Configuration events a Session records at creation, before any prompt. */
+const configurationEvents = [
+  { type: 'permission/preset', seq: SessionSeq(0), time: 1, data: { preset: 'danger-full-access' } },
+  { type: 'sandbox/mode', seq: SessionSeq(1), time: 2, data: { mode: 'danger-full-access' } },
+  { type: 'approval/policy', seq: SessionSeq(2), time: 3, data: { policy: 'never' } },
+] as SessionEvent[]
+
+/** Resume one stored Session and collect the summaries published for it. */
+async function resumeAndObserve(ctx: Context, remote: TestSessionRemote, id: SessionId): Promise<{
+  added: SessionSummary[]
+  listed: SessionSummary | undefined
+}> {
+  const added: SessionSummary[] = []
+  ctx.on('api-session/added', (summary) => {
+    if (summary.sessionId === id) added.push(summary)
+  })
+  await ctx.agents.resume({ resumeSessionId: id })
+  const listed = await remote.list({})
+  if (!listed.ok) throw new Error('list failed')
+  return { added, listed: listed.value.items.find(item => item.sessionId === id) }
+}
+
+describe('resumed Session summaries', () => {
+  it('publish a turnless resumed Session as blank', async () => {
+    const { ctx, remote, cwd } = await resumeHarness()
+    const id = 'session-resumed-blank' as SessionId
+    await storeSession(ctx, id, cwd, configurationEvents)
+
+    const { added, listed } = await resumeAndObserve(ctx, remote, id)
+
+    expect(added.length).toBeGreaterThan(0)
+    expect(added.map(summary => summary.blank)).toEqual(added.map(() => true))
+    expect(listed?.blank).toBe(true)
+  })
+
+  it('publish a resumed conversation as non-blank', async () => {
+    const { ctx, remote, cwd } = await resumeHarness()
+    const id = 'session-resumed-conversation' as SessionId
+    await storeSession(ctx, id, cwd, [
+      ...configurationEvents,
+      { type: 'turn/start', seq: SessionSeq(3), time: 4, data: { turn: 1 } },
+      {
+        type: 'user/message', seq: SessionSeq(4), time: 4,
+        data: createUserMessage({ content: [{ type: 'text', text: 'hello' }], source: { kind: 'user' } }),
+        surfaceOp: 'append',
+      },
+      { type: 'turn/end', seq: SessionSeq(5), time: 5, data: { turn: 1, reason: { kind: 'completed' } } },
+    ] as SessionEvent[])
+
+    const { added, listed } = await resumeAndObserve(ctx, remote, id)
+
+    expect(added.length).toBeGreaterThan(0)
+    expect(added.map(summary => summary.blank)).toEqual(added.map(() => false))
+    expect(listed?.blank).toBe(false)
+  })
+
+  it('publish a resumed conversation with its last prompt time from the first frame', async () => {
+    const { ctx, remote, cwd } = await resumeHarness()
+    const id = 'session-resumed-recency' as SessionId
+    const promptAt = Date.now() + 60_000
+    await storeSession(ctx, id, cwd, [
+      ...configurationEvents,
+      { type: 'turn/start', seq: SessionSeq(3), time: promptAt, data: { turn: 1 } },
+      {
+        type: 'user/message', seq: SessionSeq(4), time: promptAt,
+        data: createUserMessage({ content: [{ type: 'text', text: 'hello' }], source: { kind: 'user' } }),
+        surfaceOp: 'append',
+      },
+      { type: 'turn/end', seq: SessionSeq(5), time: promptAt + 1, data: { turn: 1, reason: { kind: 'completed' } } },
+    ] as SessionEvent[])
+
+    const { added, listed } = await resumeAndObserve(ctx, remote, id)
+
+    expect(added.length).toBeGreaterThan(0)
+    expect(added.map(summary => [summary.updatedAt, summary.blank])).toEqual(added.map(() => [promptAt, false]))
+    expect(Object.keys(added[0]?.projections?.values ?? {})).toContain('sessionListMetadata')
+    expect(Object.keys(added[0]?.projections?.values ?? {})).toEqual(expect.arrayContaining([...ctx.sessionProjections.summaryKeys()]))
+    expect(listed?.updatedAt).toBe(promptAt)
+    expect(listed?.blank).toBe(false)
+  })
+})
diff --git a/packages/api/session-controller/tests/session-projections.host.spec.ts b/packages/api/session-controller/tests/session-projections.host.spec.ts
index 89dc6d6963..fe8fc245c2 100644
--- a/packages/api/session-controller/tests/session-projections.host.spec.ts
+++ b/packages/api/session-controller/tests/session-projections.host.spec.ts
@@ -21,6 +21,7 @@ import SessionStore, { SESSION_FORMAT_VERSION, SessionId, SessionLogOffset, Sess
 import type { Session, SessionEvent, SessionHeader, UserMessage } from '@deepseek-ai/dsh-session'
 import SessionProjectionRegistry from '@deepseek-ai/dsh-session-projection'
 import type { ProjectionDefinition } from '@deepseek-ai/dsh-session-projection'
+import type { SessionProjectionSummaryExcluded } from '@deepseek-ai/dsh-session-projection/types'
 import SessionProjectionCache, { projectionCacheDomainSpec } from '@deepseek-ai/dsh-session-projection-cache'
 import { titleProjectionDefinition } from '@deepseek-ai/dsh-session-title'
 import Storage from '@deepseek-ai/dsh-storage'
@@ -43,6 +44,7 @@ let nextHarnessSession = 1
 declare module '@deepseek-ai/dsh-session-projection/types' {
   interface SessionProjectionMap {
     'test/last-user': { text: string } | null
+    'test/summary-excluded': SessionProjectionSummaryExcluded<number>
   }
 }
 
@@ -468,7 +470,7 @@ describe('session.history projections block', () => {
 })
 
 describe('session.list projections column', () => {
-  it('serves every already-materialized wire value from the live registry without folding', async () => {
+  it('serves every summary wire value from the live registry', async () => {
     const { ctx, session } = await harness(true)
     await ctx.sessionProjections.register(lastUserUnit())
     const gateway = await remote(ctx)
@@ -502,29 +504,38 @@ describe('session.list projections column', () => {
     expect(row?.projections?.values.agentPreset).toBe('minimal')
   })
 
-  it('omits an unmaterialized live projection instead of folding history for listing', async () => {
+  it('computes every summary key for a live row without computing summary-excluded units', async () => {
     const { ctx, session } = await harness(true)
     seedMessages(session, 1)
-    const unit = lastUserUnit()
-    const apply = vi.fn(unit.apply)
-    await ctx.sessionProjections.register({ ...unit, apply })
+    await ctx.sessionProjections.register(lastUserUnit())
+    const excludedApply = vi.fn((state: number) => state + 1)
+    await ctx.sessionProjections.register({
+      key: 'test/summary-excluded',
+      stateSchema: z.number().int().nonnegative(),
+      init: () => 0,
+      apply: excludedApply,
+      wire: { viewSchema: z.number().int().nonnegative(), view: state => state, summary: false },
+      stateVersion: 1,
+    })
 
     const response = await (await remote(ctx)).list(request({}))
     if (!response.ok) throw new Error('unreachable')
     const row = response.value.items.find(item => item.sessionId === session.id)
-    expect(row).toBeDefined()
-    expect('test/last-user' in (row?.projections?.values ?? {})).toBe(false)
-    expect(apply).not.toHaveBeenCalled()
+    expect(row?.projections?.values['test/last-user']).toEqual({ text: 'm0' })
+    expect(row?.projections?.asOfSeq).toBe(session.seq - 1)
+    expect('test/summary-excluded' in (row?.projections?.values ?? {})).toBe(false)
+    expect(excludedApply).not.toHaveBeenCalled()
   })
 
-  it('omits the column entirely when no registry is mounted', async () => {
+  it('carries every registered summary key, which is only its own list metadata when no other unit is registered', async () => {
     const { ctx, session } = await harness(false)
     seedMessages(session, 1)
     const response = await (await remote(ctx)).list(request({}))
     if (!response.ok) throw new Error('unreachable')
     const row = response.value.items.find(item => item.sessionId === session.id)
-    expect(row).toBeDefined()
-    expect(row !== undefined && 'projections' in row).toBe(false)
+    expect(row?.projections?.kind).toBe('sequenced')
+    expect(Object.keys(row?.projections?.values ?? {})).toEqual([...ctx.sessionProjections.summaryKeys()])
+    expect(Object.keys(row?.projections?.values ?? {})).toEqual(['sessionListMetadata'])
   })
 
   it('serves the summary projection hints from the cache with zero log loads', async () => {
diff --git a/packages/api/session-controller/tests/summary-list.host.spec.ts b/packages/api/session-controller/tests/summary-list.host.spec.ts
index d54c2a5821..19237931d4 100644
--- a/packages/api/session-controller/tests/summary-list.host.spec.ts
+++ b/packages/api/session-controller/tests/summary-list.host.spec.ts
@@ -1,7 +1,8 @@
 /**
  * Session-list summary payloads: a `session.list` row carries every registered
  * wire projection except the units that declare `summary: false`
- * (`turnOutline`, `sessionStats`, `todos`, `imageLimits`), while an opened Session's
+ * (`turnOutline`, `sessionStats`, `todos`, `imageLimits`, `contextPressure`,
+ * `contextBreakdown`), while an opened Session's
  * `session/follow` opening snapshot keeps serving them.
  */
 
@@ -21,9 +22,10 @@ import {
 import {
   apply as toolTodoApply, Config as toolTodoConfig, inject as toolTodoInject, name as toolTodoName,
 } from '@deepseek-ai/dsh-tool-todo'
+import TokenMeter from '@deepseek-ai/dsh-token-meter'
 import { createSessionTestRemote } from './test-remote.ts'
 
-const SUMMARY_EXCLUDED_KEYS = ['turnOutline', 'sessionStats', 'todos', 'imageLimits'] as const
+const SUMMARY_EXCLUDED_KEYS = ['turnOutline', 'sessionStats', 'todos', 'imageLimits', 'contextPressure', 'contextBreakdown'] as const
 
 const ownedContexts = new Set<Context>()
 afterEach(async () => {
@@ -51,7 +53,7 @@ async function opening(
 }
 
 /**
- * Mount the registry plus the four summary-excluded units and one ordinary
+ * Mount the registry plus the summary-excluded units and one ordinary
  * wire unit. The tool plugin needs a tool registry; the list path never
  * executes a tool, so a registration sink is enough.
  */
@@ -71,6 +73,7 @@ async function harness(): Promise<{ ctx: Context; sessionContext: Context }> {
     Config: toolTodoConfig,
     apply: toolTodoApply,
   }, { allowParallelInProgress: false })
+  await ctx.plugin(TokenMeter)
   // Build the remote (and with it the list owner that registers
   // `sessionListMetadata`) before any Session exists, so every registered unit
   // seeds a cell at `session/created`.
diff --git a/packages/experimental/forge-session/src/projection.ts b/packages/experimental/forge-session/src/projection.ts
index f9d514b457..1f1ab54a43 100644
--- a/packages/experimental/forge-session/src/projection.ts
+++ b/packages/experimental/forge-session/src/projection.ts
@@ -15,6 +15,14 @@ export const BINDING_RECORD = 'plugin:forge-session/binding'
 /** Tools whose calls run shell commands with a string `command` argument. */
 const SHELL_TOOLS: ReadonlySet<string> = new Set(['bash', 'pwsh'])
 
+/**
+ * Literal text checked on the raw JSON arguments before parsing: recognized
+ * `gh pr` forms name `gh`, and `git push` names `push`. Arguments whose JSON
+ * text contains neither are not parsed, so a command spelled only through JSON
+ * escapes is not recognized.
+ */
+const EVIDENCE_HINT = /gh|push/
+
 const EMPTY: ForgeChangeRequestsState = Object.freeze({
   pending: Object.freeze([]),
   bindings: Object.freeze([]),
@@ -84,7 +92,7 @@ function apply(state: ForgeChangeRequestsState, event: SessionEvent): ForgeChang
 }
 
 function applyCall(state: ForgeChangeRequestsState, call: SessionEventMap['tool/call']): ForgeChangeRequestsState {
-  if (!SHELL_TOOLS.has(call.name)) return state
+  if (!SHELL_TOOLS.has(call.name) || !EVIDENCE_HINT.test(call.arguments)) return state
   const command = commandOf(call.arguments)
   const evidence = command === undefined ? undefined : commandEvidence(command)
   if (evidence === undefined) return state
diff --git a/packages/experimental/forge-session/src/references.ts b/packages/experimental/forge-session/src/references.ts
index c499aa4850..1b8d502550 100644
--- a/packages/experimental/forge-session/src/references.ts
+++ b/packages/experimental/forge-session/src/references.ts
@@ -19,6 +19,8 @@ const VALUE_OPTIONS = new Set([
 const BOOLEAN_OPTIONS = new Set(['--comments', '-c', '--web', '-w', '--detach', '-d', '--force', '-f', '--recurse-submodules', '--remove-milestone'])
 const SEPARATORS = new Set(['&&', '||', ';', '|', '|&', '&'])
 const REPOSITORY = /^(?:([a-z\d.-]+(?::\d+)?)\/)?([a-z\d_-]+)\/([a-z\d_.-]+)$/i
+/** A literal `gh` word; a command that names `gh` only after shell quoting is not recognized. */
+const GH_WORD = /\bgh\b/
 
 /**
  * Read explicit URL selectors or numeric selectors with `--repo`/`-R`.
@@ -30,6 +32,8 @@ const REPOSITORY = /^(?:([a-z\d.-]+(?::\d+)?)\/)?([a-z\d_-]+)\/([a-z\d_.-]+)$/i
  * @returns references in command order; no process or environment is read.
  */
 export function ghReferences(command: string): GhReference[] {
+  // A reference needs a `gh` word; skip tokenizing commands that never name it.
+  if (!GH_WORD.test(command)) return []
   if (/[\r\n`]|\$\(/.test(command) || !/^(?:[^'"\\]|\\.|'(?:[^']*)'|"(?:[^"\\]|\\.)*")*$/.test(command)) return []
   let tokens: parse.ParseEntry[]
   try {
diff --git a/packages/extensions/tool-cordis/src/api-catalog.ts b/packages/extensions/tool-cordis/src/api-catalog.ts
index 19527474cd..8267448232 100644
--- a/packages/extensions/tool-cordis/src/api-catalog.ts
+++ b/packages/extensions/tool-cordis/src/api-catalog.ts
@@ -2980,19 +2980,13 @@ export const SERVICE_API: readonly ServiceApiEntry[] = [
       },
       {
         signature: 'snapshot( session: Session, keys?: ProjectionKeySelection, ): ProjectionSnapshot',
-        description: 'One consistent cut over every registered client-visible unit for one session, read from the watermark cache (missing cells fold lazily over the in-memory log). Fully synchronous — every value and `asOfSeq` reflect the same log position. Each value passes its unit\'s `viewSchema` before leaving.',
-        parameters: [{ name: 'session', description: 'the session whose projection values are read.' }, { name: 'keys', description: 'optional client-visible outputs; state materialization remains complete.' }],
+        description: 'One consistent cut over every registered client-visible unit for one session, read from the watermark cache (missing cells fold lazily over the in-memory log). Only the returned units are computed: other units, including Host-only units without `wire`, are neither folded nor advanced by this read. Fully synchronous — every value and `asOfSeq` reflect the same log position. Each value passes its unit\'s `viewSchema` before leaving.',
+        parameters: [{ name: 'session', description: 'the session whose projection values are read.' }, { name: 'keys', description: 'optional client-visible outputs; only these units are computed.' }],
         returns: 'the snapshot; `values` is empty when no selected client-visible unit is registered.',
       },
-      {
-        signature: 'cachedSnapshot( session: Session, keys?: ProjectionKeySelection, ): ProjectionSnapshot | undefined',
-        description: 'Read only already-materialized client-visible cells without folding history. Values may trail the live Session and are therefore hints, not a complete baseline. Missing cells are omitted.',
-        parameters: [{ name: 'session', description: 'attached Session whose cached cells are inspected.' }, { name: 'keys', description: 'optional wire keys to view.' }],
-        returns: 'the lowest common cached cut, or `undefined` when no wire cell exists.',
-      },
       {
         signature: 'summaryKeys(): ReadonlySet<Extract<keyof SessionProjectionMap, string>>',
-        description: 'The keys a Session summary carries: every registered client-visible key whose unit does not declare `summary: false`. The returned set is stable — the same instance on every call — until a registration or its disposal changes the key table, so a consumer may hold it across rows. Callers pass it to a key-taking read face such as `cachedSnapshot(session, summaryKeys())` or `viewCheckpoint(rows, summaryKeys())`; those faces use the set as-is.',
+        description: 'The keys a Session summary carries: every registered client-visible key whose unit does not declare `summary: false`. The returned set is stable — the same instance on every call — until a registration or its disposal changes the key table, so a consumer may hold it across rows. Callers pass it to a key-taking read face such as `snapshot(session, summaryKeys())` or `viewCheckpoint(rows, summaryKeys())`; those faces use the set as-is.',
         parameters: [],
         returns: 'the current summary key set; do not mutate it.',
       },
diff --git a/packages/llm/token-meter/src/breakdown-projection.ts b/packages/llm/token-meter/src/breakdown-projection.ts
index 43ce1b04f7..3dd540e184 100644
--- a/packages/llm/token-meter/src/breakdown-projection.ts
+++ b/packages/llm/token-meter/src/breakdown-projection.ts
@@ -179,5 +179,6 @@ export const contextBreakdownProjectionDefinition = {
   wire: {
     viewSchema: breakdownSchema,
     view: state => state.breakdown,
+    summary: false,
   },
 } satisfies ProjectionDefinition<'contextBreakdown', ContextBreakdownState>
diff --git a/packages/llm/token-meter/src/projection.ts b/packages/llm/token-meter/src/projection.ts
index 5f23d266d3..d26fc72506 100644
--- a/packages/llm/token-meter/src/projection.ts
+++ b/packages/llm/token-meter/src/projection.ts
@@ -4,6 +4,8 @@
  * @module @deepseek-ai/dsh-token-meter/projection
  */
 
+import type { SessionProjectionSummaryExcluded } from '@deepseek-ai/dsh-session-projection/types'
+
 /**
  * Durable cumulative provider usage for a complete session log.
  *
@@ -70,8 +72,8 @@ declare module '@deepseek-ai/dsh-session-projection/types' {
     /** Provider-reported usage accumulated across the complete durable log. */
     tokenUsage: TokenUsageProjection
     /** Newest request pressure paired with the newest known route capacity. */
-    contextPressure: ContextPressureProjection
+    contextPressure: SessionProjectionSummaryExcluded<ContextPressureProjection>
     /** Heuristic system/tools/message composition of the next request. */
-    contextBreakdown: ContextBreakdownProjection
+    contextBreakdown: SessionProjectionSummaryExcluded<ContextBreakdownProjection>
   }
 }
diff --git a/packages/llm/token-meter/src/usage-projection.ts b/packages/llm/token-meter/src/usage-projection.ts
index f07fa676a9..52268889ec 100644
--- a/packages/llm/token-meter/src/usage-projection.ts
+++ b/packages/llm/token-meter/src/usage-projection.ts
@@ -208,5 +208,6 @@ export const contextPressureProjectionDefinition = {
         ? {}
         : { projectedTokens: Math.max(0, pressureTokens + surfaceTokens - sampledSurfaceTokens) },
     }),
+    summary: false,
   },
 } satisfies ProjectionDefinition<'contextPressure', ContextPressureState>
diff --git a/packages/session/session-projection/README.i18n.yaml b/packages/session/session-projection/README.i18n.yaml
index 93f6b54a6f..53d259092a 100644
--- a/packages/session/session-projection/README.i18n.yaml
+++ b/packages/session/session-projection/README.i18n.yaml
@@ -30,14 +30,14 @@
   en: dac4ea4d67ce057d
   zh: 1cf3e5c7af5a5203
 /deepseek-ai-dsh-session-projection/use-this-package/deprecated-plugin-compatibility:
-  en: eed1ad9d62755251
-  zh: 88a07c787528009a
+  en: bfbeab7e33fc7f8f
+  zh: 74e0b871f1639f14
 /deepseek-ai-dsh-session-projection/use-this-package/persisted-checkpoints:
   en: 3bbc61a438aeabd0
   zh: bd1824f4da278764
 /deepseek-ai-dsh-session-projection/use-this-package/session-summaries:
-  en: bbdefde61fb3b02f
-  zh: c6871e05e63ff4ed
+  en: ee868b44413a126f
+  zh: f98c66d8e4da9a72
 /deepseek-ai-dsh-session-projection/understand-the-implementation:
   en: 3397f58d6f49bfda
   zh: efb85d382e25574d
diff --git a/packages/session/session-projection/README.md b/packages/session/session-projection/README.md
index a8dcdaebff..e17c14ad77 100644
--- a/packages/session/session-projection/README.md
+++ b/packages/session/session-projection/README.md
@@ -91,6 +91,8 @@ Legacy `stateOf(session, key)` is deprecated and returns `unknown`. Reading a re
 
 The first legacy `stateOf(session, key)` read of each key logs one `ctx.logger.warn` deprecation warning per registry instance. Registration, calls to its result, handle methods, and owner cleanup do not warn.
 
+The registry's `cachedSnapshot(session, keys)` is deprecated. It views only cells another read already computed, may omit selected keys, and returns `undefined` when no selected client-visible cell exists; existing callers keep working. Use `snapshot(session, keys)` for complete values at the Session cursor, or the registration's `handle.stateOf(session)` for Host state. The persisted cache read `ctx.sessionProjectionCache.cachedSnapshot(header, keys)` is a separate method and is unchanged.
+
 Definitions install synchronously, and handle delivery remains asynchronous. Registration errors reject the returned value. When no caller observes a rejection before the current macrotask and its microtasks finish, the registry logs it as an error instead of leaving an unhandled rejection, and the plugin stays active; after a key conflict, its keyed reads return the other registrant's state; a rejection whose owner is no longer loading or active is dropped. New plugins await registration before exposing readers. Synchronous `try/catch` cannot catch asynchronous registration errors.
 
 ### Persisted checkpoints
@@ -99,11 +101,11 @@ Every unit's state is checkpointed — client-visible and host-only alike — th
 
 ### Session summaries
 
-A Session summary is every registered client view except the keys whose non-nullish `SessionProjectionMap` entry carries the `SessionProjectionSummaryExcluded<T>` mark. `summaryKeys()` returns that set, derived from the live registrations and stable — the same instance — until a registration or its disposal changes the key table. A summary consumer passes it to the existing key-taking reads — `cachedSnapshot(session, keys)` for live cells, `viewCheckpoint(rows, keys)` for checkpoint rows, and `cachedSnapshot(header, keys)` through the persisted cache — which treat a set as already selected, so there is no summary-specific read face, no copy per read, and no second definition of the set. Because the registry derives it, a summary consumer cannot request an excluded key through the derived set; a complete face still serves an explicitly named key, which is how an opened Session keeps every value. A list row carries the summary projection and never the full projection.
+A Session summary is every registered client view except the keys whose non-nullish `SessionProjectionMap` entry carries the `SessionProjectionSummaryExcluded<T>` mark. `summaryKeys()` returns that set, derived from the live registrations and stable — the same instance — until a registration or its disposal changes the key table. A summary consumer passes it to the existing key-taking reads — `snapshot(session, keys)` for live Sessions, `viewCheckpoint(rows, keys)` for checkpoint rows, and `cachedSnapshot(header, keys)` through the persisted cache — which treat a set as already selected, so there is no summary-specific read face, no copy per read, and no second definition of the set. Because the registry derives it, a summary consumer cannot request an excluded key through the derived set; a complete face still serves an explicitly named key, which is how an opened Session keeps every value. A list row carries the summary projection and never the full projection.
 
-The mark decides the client view type; `wire.summary` decides the runtime key set, and omitting it means `true`. Declare `wire.summary: false` on a key whose map entry carries the mark so the two agree; the field is a plain boolean, not a type-level interlock. A nullable entry keeps `null` outside the wrapper (`SessionProjectionSummaryExcluded<TodoItem[]> | null`) so the pre-first-write value stays expressible. The keys currently marked are `turnOutline`, `sessionStats`, `todos`, and `imageLimits`: an outline grows with the whole log, no list row renders the stats or todo list, and the image limits are one host-wide boot constant every Session shares.
+The mark decides the client view type; `wire.summary` decides the runtime key set, and omitting it means `true`. Declare `wire.summary: false` on a key whose map entry carries the mark so the two agree; the field is a plain boolean, not a type-level interlock. A nullable entry keeps `null` outside the wrapper (`SessionProjectionSummaryExcluded<TodoItem[]> | null`) so the pre-first-write value stays expressible. The keys currently marked are `turnOutline`, `sessionStats`, `todos`, `imageLimits`, `contextPressure`, and `contextBreakdown`: an outline grows with the whole log, no list row renders the stats, todo list, or context meter, and the image limits are one host-wide boot constant every Session shares.
 
-Summaries serve the Session list rows, which list Sessions without opening them. The `@` reference lists Sessions the same way but reads only its `title` and `subagent` label keys through the key-taking `snapshot(session, keys)` and `cachedSnapshot(header, keys)` faces. `snapshot`, `cachedSnapshot`, and `viewCheckpoint` still serve every wire key when called without a key subset, so an opened Session receives every projected value.
+Summaries serve the Session list rows, which list Sessions without opening them. The `@` reference lists Sessions the same way but reads only its `title` and `subagent` label keys through the key-taking `snapshot(session, keys)` and `cachedSnapshot(header, keys)` faces. `snapshot(session, keys)` computes only the units it returns; without a key subset it computes every client-visible unit and no Host-only unit, so an opened Session receives every projected value, and `viewCheckpoint` likewise serves every wire key without a key subset.
 
 -----
 
diff --git a/packages/session/session-projection/README.zh.md b/packages/session/session-projection/README.zh.md
index 744af01bed..addea20856 100644
--- a/packages/session/session-projection/README.zh.md
+++ b/packages/session/session-projection/README.zh.md
@@ -91,6 +91,8 @@ const todo = projections.todo()
 
 每个 registry 实例对每个键的首次旧式 `stateOf(session, key)` 读取输出一次 `ctx.logger.warn` 弃用警告。注册、调用其返回值、句柄方法和 owner 清理不产生警告。
 
+注册表的 `cachedSnapshot(session, keys)` 已弃用。它只读取其他读取已经算好的 cell，可能缺少选中的 key，没有选中的客户端可见 cell 时返回 `undefined`；已有调用方仍可继续使用。需要 Session 当前游标处的完整值时使用 `snapshot(session, keys)`，读取 Host 状态时使用注册返回的 `handle.stateOf(session)`。持久化缓存的读取 `ctx.sessionProjectionCache.cachedSnapshot(header, keys)` 是另一个方法，本次未变。
+
 定义同步安装，句柄交付保持异步。注册错误使返回值拒绝。当前宏任务及其微任务结束前没有调用方观察该拒绝时，registry 将其记录为错误，而不留下未处理的拒绝，插件保持激活；发生键冲突后，其按键读取返回另一注册方的状态；owner 已不在加载或激活状态的拒绝会被丢弃。新插件在提供读取操作前等待注册完成。同步 `try/catch` 无法捕获异步注册错误。
 
 ### 持久检查点
@@ -99,11 +101,11 @@ const todo = projections.todo()
 
 ### Session 摘要
 
-Session 摘要包含每个已注册客户端视图，但排除 `SessionProjectionMap` 条目（非空值）带 `SessionProjectionSummaryExcluded<T>` 标记的 key。`summaryKeys()` 返回该集合，从实时注册派生；在注册或注销改变 key 表之前，它保持同一实例。摘要消费方把它传给既有的带 key 读取面 —— 实时 cell 用 `cachedSnapshot(session, keys)`，checkpoint 行用 `viewCheckpoint(rows, keys)`，持久化缓存用 `cachedSnapshot(header, keys)` —— 这些读取面把 Set 视为已选好的集合，因此不存在摘要专用读取面、每次读取无需复制，集合也只有一处定义。由于集合由注册表派生，摘要消费方无法通过该集合请求被排除的 key；完整读取面仍会按显式命名的 key 提供值，打开的 Session 因此保留全部取值。列表行携带的是摘要投影，绝不是全量投影。
+Session 摘要包含每个已注册客户端视图，但排除 `SessionProjectionMap` 条目（非空值）带 `SessionProjectionSummaryExcluded<T>` 标记的 key。`summaryKeys()` 返回该集合，从实时注册派生；在注册或注销改变 key 表之前，它保持同一实例。摘要消费方把它传给既有的带 key 读取面 —— 实时 Session 用 `snapshot(session, keys)`，checkpoint 行用 `viewCheckpoint(rows, keys)`，持久化缓存用 `cachedSnapshot(header, keys)` —— 这些读取面把 Set 视为已选好的集合，因此不存在摘要专用读取面、每次读取无需复制，集合也只有一处定义。由于集合由注册表派生，摘要消费方无法通过该集合请求被排除的 key；完整读取面仍会按显式命名的 key 提供值，打开的 Session 因此保留全部取值。列表行携带的是摘要投影，绝不是全量投影。
 
-标记决定客户端视图类型，`wire.summary` 决定运行时键集合，省略即 `true`。map 条目带标记的 key 应声明 `wire.summary: false` 以保持一致；该字段就是普通布尔值，而不是类型层的互锁。可空条目把 `null` 放在包装之外（`SessionProjectionSummaryExcluded<TodoItem[]> | null`），以便首次写入前的值仍可表达。当前被标记的 key 是 `turnOutline`、`sessionStats`、`todos` 和 `imageLimits`：outline 随整份日志增长，列表行不渲染统计或 todo 清单，而图片上限是每个 Session 共享的同一个宿主级启动常量。
+标记决定客户端视图类型，`wire.summary` 决定运行时键集合，省略即 `true`。map 条目带标记的 key 应声明 `wire.summary: false` 以保持一致；该字段就是普通布尔值，而不是类型层的互锁。可空条目把 `null` 放在包装之外（`SessionProjectionSummaryExcluded<TodoItem[]> | null`），以便首次写入前的值仍可表达。当前被标记的 key 是 `turnOutline`、`sessionStats`、`todos`、`imageLimits`、`contextPressure` 和 `contextBreakdown`：outline 随整份日志增长，列表行不渲染统计、todo 清单或上下文用量，而图片上限是每个 Session 共享的同一个宿主级启动常量。
 
-摘要服务于 Session 列表行，列表无需打开 Session。`@` 引用同样以列表方式枚举 Session，但只通过带 key 的 `snapshot(session, keys)` 与 `cachedSnapshot(header, keys)` 读取其 `title` 和 `subagent` 标签 key。`snapshot`、`cachedSnapshot` 和 `viewCheckpoint` 在不传 key 子集时仍返回每个 wire key，因此打开的 Session 仍会收到全部投影值。
+摘要服务于 Session 列表行，列表无需打开 Session。`@` 引用同样以列表方式枚举 Session，但只通过带 key 的 `snapshot(session, keys)` 与 `cachedSnapshot(header, keys)` 读取其 `title` 和 `subagent` 标签 key。`snapshot(session, keys)` 只计算它返回的单元；不传 key 子集时计算每个客户端可见单元、不计算 Host 专用单元，因此打开的 Session 仍会收到全部投影值，`viewCheckpoint` 不传 key 子集时同样返回每个 wire key。
 
 -----
 
diff --git a/packages/session/session-projection/src/index.ts b/packages/session/session-projection/src/index.ts
index 4ce8408a90..500cae4233 100644
--- a/packages/session/session-projection/src/index.ts
+++ b/packages/session/session-projection/src/index.ts
@@ -493,10 +493,12 @@ export class SessionProjectionRegistry extends Service {
   /**
    * One consistent cut over every registered client-visible unit for one session, read from
    * the watermark cache (missing cells fold lazily over the in-memory log).
+   * Only the returned units are computed: other units, including Host-only
+   * units without `wire`, are neither folded nor advanced by this read.
    * Fully synchronous — every value and `asOfSeq` reflect the same log
    * position. Each value passes its unit's `viewSchema` before leaving.
    * @param session - the session whose projection values are read.
-   * @param keys - optional client-visible outputs; state materialization remains complete.
+   * @param keys - optional client-visible outputs; only these units are computed.
    * @returns the snapshot; `values` is empty when no selected client-visible unit is registered.
    */
   snapshot(
@@ -505,7 +507,6 @@ export class SessionProjectionRegistry extends Service {
   ): ProjectionSnapshot {
     const values: Record<string, unknown> = {}
     const selected = selectedKeys(keys)
-    this.materializeCells(session)
     for (const registration of this.registrations.values()) {
       if (registration.def.wire === undefined) continue
       if (selected !== undefined && !selected.has(registration.def.key)) continue
@@ -522,6 +523,8 @@ export class SessionProjectionRegistry extends Service {
    * @param session - attached Session whose cached cells are inspected.
    * @param keys - optional wire keys to view.
    * @returns the lowest common cached cut, or `undefined` when no wire cell exists.
+   * @deprecated Returns only values another read already computed and may omit keys; never use it to decide behavior.
+   *   Use snapshot(session, keys) for complete values, or a retained handle for host state.
    */
   cachedSnapshot(
     session: Session,
@@ -548,7 +551,7 @@ export class SessionProjectionRegistry extends Service {
    * whose unit does not declare `summary: false`. The returned set is stable —
    * the same instance on every call — until a registration or its disposal
    * changes the key table, so a consumer may hold it across rows. Callers pass
-   * it to a key-taking read face such as `cachedSnapshot(session, summaryKeys())`
+   * it to a key-taking read face such as `snapshot(session, summaryKeys())`
    * or `viewCheckpoint(rows, summaryKeys())`; those faces use the set as-is.
    * @returns the current summary key set; do not mutate it.
    */
@@ -770,6 +773,7 @@ export class SessionProjectionRegistry extends Service {
     )
     for (const registration of this.registrations.values()) {
       const row = restored.checkpoint[registration.def.key]
+      /* v8 ignore next -- restore() writes a row for every registration in the same synchronous pass. */
       if (row === undefined) continue
       const current = registration.cells.get(session)
       if (current !== undefined && current.observedSeq > row.seq) continue
@@ -828,6 +832,7 @@ export class SessionProjectionRegistry extends Service {
     for (let seq = cell.observedSeq + 1; seq <= throughSeq; seq++) {
       // oxlint-disable-next-line typescript/no-deprecated -- Existing Session history read; migration deferred.
       const event = session.eventAt(SessionSeq(seq))
+      /* v8 ignore next 3 -- throughSeq never exceeds the committed log, whose seqs are contiguous by the Session invariant. */
       if (event === undefined || event.seq !== seq) {
         throw new Error(`session projection ${JSON.stringify(def.key)} cannot advance across missing seq ${String(seq)}`)
       }
@@ -911,6 +916,7 @@ export class SessionProjectionRegistry extends Service {
   /** Return one schema-validated wire value. */
   private viewCell(registration: Registration, cell: UnitCell): unknown {
     const wire = registration.def.wire
+    /* v8 ignore next -- every caller filters to units with wire before calling viewCell. */
     if (wire === undefined) throw new Error(`session projection ${JSON.stringify(registration.def.key)} has no wire view`)
     return wire.viewSchema.parse(wire.view(cell.state))
   }
diff --git a/packages/session/session-projection/tests/compatibility.spec.ts b/packages/session/session-projection/tests/compatibility.spec.ts
index 99beaeb74c..e5d1e1dbc6 100644
--- a/packages/session/session-projection/tests/compatibility.spec.ts
+++ b/packages/session/session-projection/tests/compatibility.spec.ts
@@ -129,11 +129,13 @@ describe('projection registration compatibility', () => {
       apply: definition.apply,
     })
     expect(ctx.sessionProjections.stateOf(session, 'test/missing-legacy')).toBeUndefined()
+    // oxlint-disable-next-line typescript/no-deprecated -- Only the deprecated cached face observes cells without computing them.
     expect(ctx.sessionProjections.cachedSnapshot(session)).toBeUndefined()
     expect(hostInit).not.toHaveBeenCalled()
 
     expect(ctx.sessionProjections.stateOf(session, 'test/legacy')).toBe(2)
     expect(unrelatedView).not.toHaveBeenCalled()
+    // oxlint-disable-next-line typescript/no-deprecated -- Only the deprecated cached face observes cells without computing them.
     expect(ctx.sessionProjections.cachedSnapshot(session)).toEqual({
       asOfSeq: 1,
       values: { 'test/legacy': 2, 'test/legacy-unread-wire': 2 },
diff --git a/packages/session/session-projection/tests/registry.spec.ts b/packages/session/session-projection/tests/registry.spec.ts
index a761519e08..cd0f9d65c1 100644
--- a/packages/session/session-projection/tests/registry.spec.ts
+++ b/packages/session/session-projection/tests/registry.spec.ts
@@ -628,6 +628,38 @@ describe('SessionProjectionRegistry drive', () => {
     expect('test/unregistered' in values).toBe(false)
   })
 
+  it('snapshot with keys computes only the selected units', async () => {
+    const { ctx, session } = await harness()
+    mark(session, ['a'])
+    await ctx.sessionProjections.register(marksUnit())
+    const unselectedApply = vi.fn((state: StableViewState) => state)
+    await ctx.sessionProjections.register({ ...stableViewUnit(state => state.value), apply: unselectedApply })
+    expect(ctx.sessionProjections.snapshot(session, ['test/marks']).values).toEqual({ 'test/marks': { marks: ['a'] } })
+    expect(unselectedApply).not.toHaveBeenCalled()
+  })
+
+  it('snapshot without keys does not compute host-only units', async () => {
+    const { ctx, session } = await harness()
+    mark(session, ['a'])
+    await ctx.sessionProjections.register(marksUnit())
+    const hostApply = vi.fn((state: number) => state + 1)
+    await ctx.sessionProjections.register({ ...countUnit(), apply: hostApply })
+    expect(ctx.sessionProjections.snapshot(session).values).toEqual({ 'test/marks': { marks: ['a'] } })
+    expect(hostApply).not.toHaveBeenCalled()
+  })
+
+  it('snapshot with keys succeeds while an unselected unit fails to apply', async () => {
+    const { ctx, session } = await harness()
+    mark(session, ['a'])
+    await ctx.sessionProjections.register(marksUnit())
+    await ctx.sessionProjections.register({
+      ...stableViewUnit(state => state.value),
+      apply: (): StableViewState => { throw new Error('unselected unit failed') },
+    })
+    expect(ctx.sessionProjections.snapshot(session, ['test/marks']).values).toEqual({ 'test/marks': { marks: ['a'] } })
+    expect(() => ctx.sessionProjections.snapshot(session)).toThrow('unselected unit failed')
+  })
+
   it('checkpoints every persisted unit with its stateVersion and per-cell watermark', async () => {
     const { ctx, session } = await harness()
     await ctx.sessionProjections.register(marksUnit())
@@ -865,4 +897,96 @@ describe('SessionProjectionRegistry drive', () => {
     })
     expect(() => ctx.sessionProjections.snapshot(session)).toThrow()
   })
+
+  it('keeps a cell built before a fresh Session is announced', async () => {
+    const ctx = new Context()
+    await ctx.plugin(SessionStore)
+    await ctx.plugin(SessionProjectionRegistry)
+    const stable = await ctx.sessionProjections.register(stableViewUnit(state => state.value))
+    const session = ctx.sessions.prepare(SessionId('projection-early-cell'))
+    const before = stable.stateOf(session)
+    const detach = ctx.sessions.enter(session)
+    onTestFinished(detach)
+    ctx.sessions.announce(session)
+    expect(stable.stateOf(session)).toBe(before)
+  })
+
+  it('restore rejects events that are not contiguous from baseSeq', async () => {
+    const { ctx } = await harness()
+    await ctx.sessionProjections.register(countUnit())
+    const gapped: SessionEvent[] = [
+      { type: 'turn/start', seq: SessionSeq(0), time: 0, data: { turn: 1 } },
+      { type: 'turn/start', seq: SessionSeq(2), time: 2, data: { turn: 2 } },
+    ]
+    expect(() => ctx.sessionProjections.restore(
+      {},
+      gapped,
+      SessionLogOffset(0),
+      RESTORE_HEADER,
+      SessionLogOffset(0),
+    )).toThrow('cannot restore across missing seq 1')
+  })
+
+  it('hydrate with an empty event list serves the cut before baseSeq', async () => {
+    const { ctx } = await harness()
+    const marks = await ctx.sessionProjections.register(marksUnit())
+    const prepared = ctx.sessions.prepare(SessionId('projection-hydrate-empty'))
+    const hydrated = ctx.sessionProjections.hydrate(prepared, {}, [], SessionLogOffset(0))
+    expect(hydrated).toEqual({ asOfSeq: -1, values: { 'test/marks': { marks: [] } } })
+    expect(marks.stateOf(prepared)).toBeNull()
+  })
+
+  it('hydrate at an already hydrated cut serves the installed cells', async () => {
+    const { ctx } = await harness()
+    await ctx.sessionProjections.register(marksUnit())
+    await ctx.sessionProjections.register(countUnit())
+    const events: SessionEvent[] = [
+      { type: 'test/mark', seq: SessionSeq(0), time: 0, data: { marks: ['seed'] } },
+      { type: 'turn/start', seq: SessionSeq(1), time: 1, data: { turn: 1 } },
+    ]
+    const prepared = ctx.sessions.prepare(SessionId('projection-hydrate-twice'), { seed: events })
+    const first = ctx.sessionProjections.hydrate(prepared, {}, events, SessionLogOffset(0))
+    const restore = vi.spyOn(ctx.sessionProjections, 'restore')
+    const second = ctx.sessionProjections.hydrate(prepared, {}, events, SessionLogOffset(0))
+    expect(restore).not.toHaveBeenCalled()
+    expect(second).toEqual(first)
+    expect(second).toEqual({ asOfSeq: 1, values: { 'test/marks': { marks: ['seed'] } } })
+  })
+
+  it('hydrate keeps a cell that is already past the hydrated cut', async () => {
+    const { ctx } = await harness()
+    const marks = await ctx.sessionProjections.register(marksUnit())
+    const events: SessionEvent[] = [
+      { type: 'test/mark', seq: SessionSeq(0), time: 0, data: { marks: ['first'] } },
+      { type: 'test/mark', seq: SessionSeq(1), time: 1, data: { marks: ['second'] } },
+    ]
+    const prepared = ctx.sessions.prepare(SessionId('projection-hydrate-behind'), { seed: events })
+    expect(marks.stateOf(prepared)).toEqual({ marks: ['second'] })
+    const hydrated = ctx.sessionProjections.hydrate(prepared, {}, events.slice(0, 1), SessionLogOffset(0))
+    expect(hydrated).toEqual({ asOfSeq: 0, values: { 'test/marks': { marks: ['first'] } } })
+    expect(marks.stateOf(prepared)).toEqual({ marks: ['second'] })
+    expect(ctx.sessionProjections.checkpoint(prepared)['test/marks']?.seq).toBe(prepared.seq - 1)
+  })
+
+  it('drive skips a cell that an earlier session/event listener already advanced', async () => {
+    const { ctx, session } = await harness()
+    const apply = vi.fn((state: number, _event: SessionEvent) => state + 1)
+    const count = await ctx.sessionProjections.register({ ...countUnit(), apply })
+    await ctx.sessionProjections.register(marksUnit())
+    const seen: number[] = []
+    ctx.on('session/event', (target: Session) => {
+      seen.push(count.stateOf(target))
+    }, { prepend: true })
+    const changed = vi.fn()
+    ctx.sessionProjections.onChanged(changed)
+    const first = mark(session, ['a'])
+    const second = mark(session, ['b'])
+    expect(seen).toEqual([1, 2])
+    expect(apply.mock.calls.map(([, event]) => event)).toEqual([first, second])
+    expect(count.stateOf(session)).toBe(2)
+    expect(changed.mock.calls).toEqual([
+      [session, 'test/marks', { marks: ['a'] }, first.seq],
+      [session, 'test/marks', { marks: ['b'] }, second.seq],
+    ])
+  })
 })
diff --git a/packages/session/session-projection/tests/summary.spec.ts b/packages/session/session-projection/tests/summary.spec.ts
index 2fd66ce944..1244a85495 100644
--- a/packages/session/session-projection/tests/summary.spec.ts
+++ b/packages/session/session-projection/tests/summary.spec.ts
@@ -152,9 +152,11 @@ describe('session projection summary keys', () => {
       session.append('turn/start', { turn: 1 })
 
       // The derived set is passed as a set: no key-list copy inside the read.
+      // oxlint-disable-next-line typescript/no-deprecated -- This case pins the deprecated cached face itself.
       expect(registry.cachedSnapshot(session, registry.summaryKeys())?.values).toEqual({
         'test/summary-kept': { text: 'turn-1' },
       })
+      // oxlint-disable-next-line typescript/no-deprecated -- This case pins the deprecated cached face itself.
       expect(registry.cachedSnapshot(session)?.values).toEqual({
         'test/summary-kept': { text: 'turn-1' },
         'test/summary-excluded': 1,
@@ -173,7 +175,9 @@ describe('session projection summary keys', () => {
       session.append('turn/start', { turn: 1 })
 
       expect([...registry.summaryKeys()]).toEqual([])
+      // oxlint-disable-next-line typescript/no-deprecated -- This case pins the deprecated cached face itself.
       expect(registry.cachedSnapshot(session, [])).toBeUndefined()
+      // oxlint-disable-next-line typescript/no-deprecated -- This case pins the deprecated cached face itself.
       expect(registry.cachedSnapshot(session)?.values).toEqual({
         'test/summary-excluded': 1,
         'test/summary-excluded-nullable': ['turn-1'],
@@ -199,6 +203,7 @@ describe('session projection summary keys', () => {
     try {
       await registry.register(keptUnit())
       const session = ctx.sessions.create(SessionId('summary-unmaterialized'), { meta: { cwd: '/workspace' } })
+      // oxlint-disable-next-line typescript/no-deprecated -- This case pins the deprecated cached face itself.
       expect(registry.cachedSnapshot(session, registry.summaryKeys())?.values).toEqual({
         'test/summary-kept': null,
       })
diff --git a/vitest.config.ts b/vitest.config.ts
index 34086431c7..d31f4fe82c 100644
--- a/vitest.config.ts
+++ b/vitest.config.ts
@@ -406,11 +406,9 @@ export default defineConfig({
         // by decision: its correctness signal is its uninstrumented suite and
         // the packer's end-to-end image spec.
         'packages/experimental/webworker-runtime/src/**/*.ts',
-        // Projection/command round: executor lifecycle branches and the
-        // registry's drive tails need the same maturing lanes. TODO(gui):
-        // cover and remove with the client test lane above.
+        // Command executor lifecycle branches need the same maturing lanes.
+        // TODO(gui): cover and remove with the client test lane above.
         'packages/interaction/commands/src/index.ts',
-        'packages/session/session-projection/src/index.ts',
         ...windowsUnsupportedCoveragePackages.map(path => `${path}/src/**/*.ts`),
         ...windowsOnlyCoverageExclusions,
         ...windowsRunnerCoverageExclusions,

From 86e2cc8277701eba36f80f924b4d7ecad27da915 Mon Sep 17 00:00:00 2001
From: Magolor <magolorcz@gmail.com>
Date: Mon, 2 Nov 2026 17:59:03 +0800
Subject: [PATCH 19/32] feat(schedule): prefill task creation on release 0.2.2
 (#7702)

* feat(schedule): prefill task creation on release 0.2.2

* fix(schedule): remove blank line from creation prompt

* docs(schedule): clarify creation flow and review checks

* fix(schedule): append task creation prompt to drafts
---
 apps/web/tests/schedule-manual.e2e.ts         | 46 ++++++++++++++++++-
 packages/client/ui-schedule/README.i18n.yaml  |  8 ++--
 packages/client/ui-schedule/README.md         |  4 +-
 packages/client/ui-schedule/README.zh.md      |  4 +-
 .../client/ui-schedule/src/client/index.ts    |  2 +-
 .../src/client/task-manager-locales.ts        |  8 ++++
 .../tests/browser-plugin.client.spec.ts       | 13 +++++-
 7 files changed, 73 insertions(+), 12 deletions(-)

diff --git a/apps/web/tests/schedule-manual.e2e.ts b/apps/web/tests/schedule-manual.e2e.ts
index 60ca701a4d..eb21e8be63 100644
--- a/apps/web/tests/schedule-manual.e2e.ts
+++ b/apps/web/tests/schedule-manual.e2e.ts
@@ -1,7 +1,51 @@
-/** Manual task creation and editing through the shipped Web composition. */
+/** Schedule creation, prompt prefill, and editing through the shipped Web composition. */
 import { chromium } from 'playwright'
 import { expect, it } from 'vitest'
 import { launchWebScaffold, watchConsole } from './scaffold.ts'
+import { writeComposerDraft } from './support.ts'
+
+it.each([
+  { locale: 'en', panel: 'Automation tasks', create: 'New', menu: 'Choose a creation method', chat: 'Create in a session',
+    prompt: 'Please create an automation task based on the requirements.' },
+  { locale: 'zh', panel: '自动化任务', create: '新建', menu: '选择创建方式', chat: '在会话中创建',
+    prompt: '请根据需求创建一个自动化任务。' },
+])('prefills an unsent Schedule creation draft in $locale through both conversation entries', async (copy) => {
+  const scaffold = await launchWebScaffold({ firstUse: true })
+  let browser: Awaited<ReturnType<typeof chromium.launch>> | undefined
+  try {
+    browser = await chromium.launch()
+    const page = await browser.newPage({ viewport: { width: 1440, height: 960 }, locale: copy.locale })
+    await page.addInitScript((locale) => { localStorage.setItem('dsh.locale', locale) }, copy.locale)
+    const tripwire = watchConsole(page)
+    await page.goto(scaffold.authenticatedUrl, { waitUntil: 'load' })
+    const input = page.locator('[data-composer-input][contenteditable="true"]').first()
+    for (const { entry, draft } of [
+      { entry: 'primary', draft: '' },
+      { entry: 'primary', draft: 'Existing unsent draft' },
+      { entry: 'menu', draft: '' },
+      { entry: 'menu', draft: 'Existing unsent draft' },
+    ]) {
+      await writeComposerDraft(page, input, draft)
+      await page.getByRole('button', { name: copy.panel, exact: true }).click()
+      const manager = page.getByTestId('task-manager-page')
+      if (entry === 'primary') await manager.getByRole('button', { name: copy.create, exact: true }).click()
+      else {
+        await manager.getByRole('button', { name: copy.menu, exact: true }).click()
+        await page.getByRole('menuitem', { name: copy.chat, exact: true }).click()
+      }
+      await manager.waitFor({ state: 'detached' })
+      await input.getByText(copy.prompt, { exact: true }).waitFor()
+      expect(await input.evaluate(element => [...element.children].map(paragraph => paragraph.textContent).join('\n')))
+        .toBe(draft === '' ? copy.prompt : `${draft}\n${copy.prompt}`)
+      const events = scaffold.ctx.agents.list().flatMap(agent => agent.session.snapshotEvents())
+      expect(events.filter(event => event.type === 'user/message' || event.type === 'turn/start')).toEqual([])
+      expect(await scaffold.ctx.schedule.catalog()).toEqual([])
+    }
+    expect(tripwire.pageErrors).toEqual([])
+  } finally {
+    try { await browser?.close() } finally { await scaffold.close() }
+  }
+})
 
 it('creates from a paused empty state, selects the task, and saves an inline edit without starting an Agent', async () => {
   // First use registers the default Workspace, which a new task's directory starts with.
diff --git a/packages/client/ui-schedule/README.i18n.yaml b/packages/client/ui-schedule/README.i18n.yaml
index bd2c8e8209..2dffe468b7 100644
--- a/packages/client/ui-schedule/README.i18n.yaml
+++ b/packages/client/ui-schedule/README.i18n.yaml
@@ -15,8 +15,8 @@
   en: d152484eb41ac6b4
   zh: 405b30feaf48c087
 /deepseek-ai-dsh-client-ui-schedule/use-this-package:
-  en: 928ae699661089c5
-  zh: 9895b75c5a30771b
+  en: 5cd34ed47dea2d59
+  zh: c77b078e9e2c2197
 /deepseek-ai-dsh-client-ui-schedule/use-this-package/time-zone-data-source:
   en: 4005b800e930f581
   zh: ccb9318dad7f7e8f
@@ -27,8 +27,8 @@
   en: 2fd968202916b197
   zh: f1ab66194846562b
 /deepseek-ai-dsh-client-ui-schedule/model-experience:
-  en: 064b67705e5da4ca
-  zh: 2163217c14878c59
+  en: 6f528a72fe45af1b
+  zh: 8272529f6e324315
 /deepseek-ai-dsh-client-ui-schedule/model-experience/kv-cache-effect:
   en: 52239e5688dfebe1
   zh: 37343f5dbde010e8
diff --git a/packages/client/ui-schedule/README.md b/packages/client/ui-schedule/README.md
index 2bb348ba16..74f426f76c 100644
--- a/packages/client/ui-schedule/README.md
+++ b/packages/client/ui-schedule/README.md
@@ -27,7 +27,7 @@ The Automation tasks page and right Sidebar task tab use the same editor for tas
 
 Below 768px, the task list uses 20px horizontal insets, matching the Plugins page.
 
-The shipped Web composition mounts `ui-schedule` with Host Schedule. The Automation tasks sidebar entry opens the task list without selecting or activating a Session. New retains its existing behavior: open a new conversation and let the user enter an instruction. Its adjacent menu offers Create in conversation and Create manually. Manual creation opens the same editor as an existing task, validates required fields, and saves a task without starting an Agent or sending the instruction. A failed request leaves the form and its values visible. The empty state shows a decorative document-and-clock illustration whose colors follow the theme.
+The shipped Web composition mounts `ui-schedule` with Host Schedule. The Automation tasks sidebar entry opens the task list without selecting or activating a Session. New and the adjacent menu's Create in a session action both open a new conversation with a short task-creation prompt in the current UI language, ready for the user to complete and send. When a blank conversation is reused, the prompt is appended on a new line, preserving its text, inline references, and attachments. The same menu offers Create manually. Manual creation opens the same editor as an existing task, validates required fields, and saves a task without starting an Agent or sending the instruction. A failed request leaves the form and its values visible. The empty state shows a decorative document-and-clock illustration whose colors follow the theme.
 
 Enabled, Paused, Ended, and All filters combine with text search over the title, prompt, and linked Session id; the page starts on Enabled. The search-row menu clears all ended tasks after confirmation, preserving active and paused tasks. Selecting a task opens its editable Rules / Records page. Save is enabled only for valid, meaningful changes and sends only changed fields with `expectedUpdatedAt`, or `null` when no stored revision exists. The fields stay editable after saving. Unsaved drafts survive navigation between tasks and away from the page. A conflict retains the whole draft and disables Save. Review with my edits reapplies the changed field groups to the latest values for review before saving; Discard replaces the draft with the latest stored values. For a new task, Discard closes the editor. Late responses cannot change another task's detail. Coarse-pointer search, instruction, and timing fields use 16px text to prevent focus zoom on iOS Safari.
 
@@ -72,7 +72,7 @@ Sidebar layout records omit opener parameters. `TaskTabBindings` therefore persi
 <a id="model-experience"></a>
 ## Model Experience
 
-None, as this browser package registers no model tools or messages.
+None, as this browser package registers no model tools or automatic messages; the creation prompt stays an unsent draft.
 
 #### KV Cache effect
 
diff --git a/packages/client/ui-schedule/README.zh.md b/packages/client/ui-schedule/README.zh.md
index f7f4ff4d9e..3696ed4a3c 100644
--- a/packages/client/ui-schedule/README.zh.md
+++ b/packages/client/ui-schedule/README.zh.md
@@ -27,7 +27,7 @@ kind: "package-reference"
 
 宽度小于 768px 时，任务列表使用 20px 的左右内边距，与插件页一致。
 
-发布的 Web 组合将 `ui-schedule` 与宿主 Schedule 一起挂载。自动化任务侧栏入口打开任务列表，不选择或激活会话。“新建”保留现有行为：进入新会话，由用户输入指令。相邻下拉提供“在对话中创建”和“手动创建”。手动创建与已有任务打开同一编辑页，校验必填项并保存任务，不启动 Agent 或发送指令。请求失败时保留表单和已填内容。空态显示装饰性的文档与时钟插图，其颜色随主题变化。
+发布的 Web 组合将 `ui-schedule` 与宿主 Schedule 一起挂载。自动化任务侧栏入口打开任务列表，不选择或激活会话。“新建”和相邻菜单的“在会话中创建”都会进入新会话，按当前界面语言预填简短的任务创建提示，供用户补充并发送。若复用空白会话，提示会另起一行追加，保留原有文本、行内引用和附件。该菜单还提供“手动创建”。手动创建与已有任务打开同一编辑页，校验必填项并保存任务，不启动 Agent 或发送指令。请求失败时保留表单和已填内容。空态显示装饰性的文档与时钟插图，其颜色随主题变化。
 
 “已开启”“已暂停”“已结束”“全部”筛选结合标题、指令和关联会话 id 搜索，默认显示已开启任务。搜索行菜单在确认后清除全部已结束任务，保留已开启和已暂停任务。选择任务直接打开可编辑的“规则 / 任务运行记录”页面。只有字段有效且有实际修改时才能保存；保存只发送变更字段及 `expectedUpdatedAt`，存储版本缺失时发送 `null`。保存后字段保持可编辑。切换任务或离开页面时保留未保存的草稿。冲突保留整份草稿并禁用保存。“保留修改并复核”将改过的字段组应用到最新值，供保存前复核；“放弃”用最新存储值替换草稿。对于新任务，“放弃”关闭编辑页。迟到响应不会改变其他任务详情。粗指针设备的搜索、指令和时间字段使用 16px 字号，避免 iOS Safari 聚焦时缩放。
 
@@ -72,7 +72,7 @@ Peer 可读取 `schedule/catalog` 时，插件注册现有 `schedules` 主面板
 <a id="model-experience"></a>
 ## 模型体验
 
-无：此浏览器包不注册模型工具或消息，Schedule 拥有提醒投递。
+无：本浏览器包不注册模型工具或自动消息；创建提示保留为未发送的草稿。
 
 #### KV Cache 影响
 
diff --git a/packages/client/ui-schedule/src/client/index.ts b/packages/client/ui-schedule/src/client/index.ts
index 4b93b8577c..5df353095f 100644
--- a/packages/client/ui-schedule/src/client/index.ts
+++ b/packages/client/ui-schedule/src/client/index.ts
@@ -222,7 +222,7 @@ export function apply(ctx: ClientContext): void {
       store: createEditorStore(),
       inject: (): TaskManagerInjected => ({
         ...detail,
-        onNewTask: () => { ctx.uiWorkspace.startSession() },
+        onNewTask: () => { ctx.uiWorkspace.startSession(undefined, { prompt: t('host.createPrompt'), whenDraftExists: 'append' }) },
         onClearEnded: async () => {
           const outcome = await clearEnded()
           deleteToast.reportClear(outcome)
diff --git a/packages/client/ui-schedule/src/client/task-manager-locales.ts b/packages/client/ui-schedule/src/client/task-manager-locales.ts
index 1cecda0550..fb036ea0fa 100644
--- a/packages/client/ui-schedule/src/client/task-manager-locales.ts
+++ b/packages/client/ui-schedule/src/client/task-manager-locales.ts
@@ -6,6 +6,7 @@ export const en = {
   'host.create': 'Create',
   'host.createMethod': 'Choose a creation method',
   'host.chatCreate': 'Create in a session',
+  'host.createPrompt': 'Please create an automation task based on the requirements.',
   'host.manualCreate': 'Create manually',
   'host.closeCreate': 'Close creation form',
   'host.creating': 'Creating…',
@@ -164,6 +165,7 @@ export const zh: Record<TaskManagerKey, string> = {
   'host.create': '创建',
   'host.createMethod': '选择创建方式',
   'host.chatCreate': '在会话中创建',
+  'host.createPrompt': '请根据需求创建一个自动化任务。',
   'host.manualCreate': '手动创建',
   'host.closeCreate': '关闭创建页',
   'host.creating': '创建中…',
@@ -318,6 +320,7 @@ export const ja = {
   'host.create': '作成',
   'host.createMethod': '作成方法を選択',
   'host.chatCreate': '会話で作成',
+  'host.createPrompt': '要件に基づいて自動化タスクを作成してください。',
   'host.manualCreate': '手動で作成',
   'host.closeCreate': '作成フォームを閉じる',
   'host.creating': '作成中…',
@@ -573,6 +576,7 @@ export const es = {
   'card.openLabel': 'Abrir detalles de la tarea: {title}',
   'card.deleted': 'Eliminado',
   'host.chatCreate': 'Crear en una conversación',
+  'host.createPrompt': 'Crea una tarea automatizada según los requisitos.',
   'host.conflict': 'Esta tarea cambió en otro lugar. Revisa los valores actuales con tus cambios o descártalos.',
   'host.reapply': 'Revisar con mis cambios',
   'host.create': 'Crear',
@@ -726,6 +730,7 @@ export const fr = {
   'card.openLabel': 'Détails de la tâche ouverte : {title}',
   'card.deleted': 'Supprimé',
   'host.chatCreate': 'Créer dans une conversation',
+  'host.createPrompt': 'Crée une tâche automatisée selon les exigences.',
   'host.conflict': 'Cette tâche a été modifiée ailleurs. Vérifiez les valeurs actuelles avec vos modifications, ou abandonnez-les.',
   'host.reapply': 'Vérifier avec mes modifications',
   'host.create': 'Créer',
@@ -879,6 +884,7 @@ export const de = {
   'card.openLabel': 'Aufgabendetails öffnen: {title}',
   'card.deleted': 'Gelöscht',
   'host.chatCreate': 'In einer Unterhaltung erstellen',
+  'host.createPrompt': 'Erstelle eine automatisierte Aufgabe anhand der Anforderungen.',
   'host.conflict': 'Diese Aufgabe wurde andernorts geändert. Prüfe die aktuellen Werte mit deinen Änderungen oder verwirf sie.',
   'host.reapply': 'Mit meinen Änderungen prüfen',
   'host.create': 'Erstellen',
@@ -1032,6 +1038,7 @@ export const ru = {
   'card.openLabel': 'Открыть сведения о задаче: {title}.',
   'card.deleted': 'Удалено',
   'host.chatCreate': 'Создать в беседе',
+  'host.createPrompt': 'Создай автоматизированную задачу на основе требований.',
   'host.conflict': 'Задача изменена в другом месте. Проверьте актуальные значения со своими правками или отмените изменения.',
   'host.reapply': 'Проверить со своими правками',
   'host.create': 'Создать',
@@ -1185,6 +1192,7 @@ export const pt = {
   'card.openLabel': 'Detalhes da tarefa aberta: {title}',
   'card.deleted': 'Excluído',
   'host.chatCreate': 'Criar em uma conversa',
+  'host.createPrompt': 'Crie uma tarefa automatizada com base nos requisitos.',
   'host.conflict': 'Esta tarefa foi alterada em outro lugar. Revise os valores atuais com suas alterações ou descarte-as.',
   'host.reapply': 'Revisar com minhas alterações',
   'host.create': 'Criar',
diff --git a/packages/client/ui-schedule/tests/browser-plugin.client.spec.ts b/packages/client/ui-schedule/tests/browser-plugin.client.spec.ts
index 81ab2f4166..517a0ed0df 100644
--- a/packages/client/ui-schedule/tests/browser-plugin.client.spec.ts
+++ b/packages/client/ui-schedule/tests/browser-plugin.client.spec.ts
@@ -28,6 +28,7 @@ import { SessionScheduleHover } from '../src/client/SessionScheduleHover.tsx'
 import { SessionScheduleMark } from '../src/client/SessionScheduleMark.tsx'
 import { ScheduleTurnCard, type ScheduleTurnCardInjected } from '../src/client/ScheduleTurnCard.tsx'
 import { en, NS, zh } from '../src/client/locales.ts'
+import * as managerLocales from '../src/client/task-manager-locales.ts'
 
 const Empty = () => null
 
@@ -425,8 +426,16 @@ describe('ui-schedule browser half', () => {
       expect(chip.taskBindings).toBe(body.taskBindings)
       expect(chip.hooks.catalog).toBe(body.hooks.catalog)
       const panel = injectedFace(ctx.slots.entries('main')[0]!, undefined as never) as TaskManagerInjected
-      panel.onNewTask()
-      expect(startSession).toHaveBeenCalledOnce()
+      expect(Object.keys(managerLocales).sort()).toEqual(['de', 'en', 'es', 'fr', 'ja', 'pt', 'ru', 'zh'])
+      for (const [language, dictionary] of Object.entries(managerLocales)) {
+        expect(dictionary['host.createPrompt']).not.toContain('\n')
+        ctx.locale.setLocale(language)
+        panel.onNewTask()
+        expect(startSession).toHaveBeenLastCalledWith(undefined, {
+          prompt: dictionary['host.createPrompt'], whenDraftExists: 'append',
+        })
+      }
+      expect(startSession).toHaveBeenCalledTimes(8)
     } finally {
       await fiber.dispose()
       owner()

From 156dad153d3d95475273d2eb61b8a558cb1a63c1 Mon Sep 17 00:00:00 2001
From: Yixiang Tu <tuyixiang@deepseek.com>
Date: Thu, 22 Oct 2026 15:28:54 +0800
Subject: [PATCH 20/32] fix(llm-deepseek): anchor all-deferred tools with a
 placeholder

Preserve deferred activation when every initial tool has been removed. Add serializer, provider, live-API, and recorded-session regression coverage.

Fixes #6953
---
 packages/llm/llm-deepseek/README.i18n.yaml    |  4 +-
 packages/llm/llm-deepseek/README.md           |  2 +-
 packages/llm/llm-deepseek/README.zh.md        |  2 +-
 packages/llm/llm-deepseek/src/serialize.ts    | 28 ++++++---
 .../llm/llm-deepseek/tests/adapter.e2e.ts     | 18 +++++-
 .../llm/llm-deepseek/tests/adapter.spec.ts    | 26 +++++++-
 .../tests/fixtures/deferred-tools.ts          | 59 +++++++++++++++++++
 .../llm/llm-deepseek/tests/serialize.spec.ts  | 24 ++++++++
 .../cordis.snapshot.yml                       | 18 ++++++
 .../deepseek-deferred-tools/cordis.yml        |  3 +
 .../deepseek-deferred-tools/session.v4.jsonl  | 29 +++++++++
 .../deepseek-deferred-tools/snapshot.yml      |  9 +++
 .../system-prompt.expected.md                 | 14 +++++
 .../tool-schemas.expected.json                | 24 ++++++++
 14 files changed, 246 insertions(+), 14 deletions(-)
 create mode 100644 packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts
 create mode 100644 snapshots/session/deepseek-deferred-tools/cordis.snapshot.yml
 create mode 100644 snapshots/session/deepseek-deferred-tools/cordis.yml
 create mode 100644 snapshots/session/deepseek-deferred-tools/session.v4.jsonl
 create mode 100644 snapshots/session/deepseek-deferred-tools/snapshot.yml
 create mode 100644 snapshots/session/deepseek-deferred-tools/system-prompt.expected.md
 create mode 100644 snapshots/session/deepseek-deferred-tools/tool-schemas.expected.json

diff --git a/packages/llm/llm-deepseek/README.i18n.yaml b/packages/llm/llm-deepseek/README.i18n.yaml
index 432eadbd4e..c0abd8378f 100644
--- a/packages/llm/llm-deepseek/README.i18n.yaml
+++ b/packages/llm/llm-deepseek/README.i18n.yaml
@@ -63,8 +63,8 @@
   en: 1dc50052999253c6
   zh: 7abf968fc18bffcd
 /deepseek-ai-dsh-llm-deepseek/model-experience/deepseek-request/what-the-model-sees:
-  en: 14110610860656e8
-  zh: 995e28d6931ebe4e
+  en: f475b3adb2d61982
+  zh: 6d8913a294f11de3
 /deepseek-ai-dsh-llm-deepseek/model-experience/deepseek-request/token-effect:
   en: 67f4bfa42cbee911
   zh: 5e9dc9bc07253686
diff --git a/packages/llm/llm-deepseek/README.md b/packages/llm/llm-deepseek/README.md
index 0c374c60ce..6433ff8caf 100644
--- a/packages/llm/llm-deepseek/README.md
+++ b/packages/llm/llm-deepseek/README.md
@@ -170,7 +170,7 @@ Read these pages when the package-level contract is not enough. They move from t
 
 #### What the model sees
 
-The selected DeepSeek model receives the harness system prompt, message history, tool schemas, stop sequences, and call config (`maxTokens`, `reasoningEffort`, `temperature`) without adapter-authored prompt prose. Provider-specific request-extension fields remain outside model input. The vision model normally receives retained user and tool-result images as Files API references beside attachment handles and request-preview dimensions. It also receives a normalized-object path when the current execution filesystem maps the attachment provider's host object; the descriptor marks this copy read-only and warns that normalization may have resized or re-encoded the upload. A Files resolution failure sends all retained images as inline base64 instead, and an over-budget older image keeps the access resolved for that request in its placeholder. Reasoning content from a prior assistant turn is passed back verbatim, whether or not that turn called a tool. Messages sends `{}` for historical tool arguments that are malformed JSON or are not objects. This argument fallback preserves call ids, tool names, and tool results; the original arguments stay in the Session log. Newly generated Messages tool arguments still require valid JSON objects. Messages omits `reasoning` and `tool-call` blocks inside user messages and tool results. This also permits replay of saved subagent notices containing assistant output; the original Session content remains intact. Empty user messages are skipped after conversion, while empty tool results retain their call ids and error flags. Other unsupported input blocks still fail with `UNSUPPORTED_CONTENT`.
+The selected DeepSeek model receives the harness system prompt, message history, tool schemas, stop sequences, and call config (`maxTokens`, `reasoningEffort`, `temperature`) without adapter-authored prompt prose. Provider-specific request-extension fields remain outside model input. The vision model normally receives retained user and tool-result images as Files API references beside attachment handles and request-preview dimensions. It also receives a normalized-object path when the current execution filesystem maps the attachment provider's host object; the descriptor marks this copy read-only and warns that normalization may have resized or re-encoded the upload. A Files resolution failure sends all retained images as inline base64 instead, and an over-budget older image keeps the access resolved for that request in its placeholder. Reasoning content from a prior assistant turn is passed back verbatim, whether or not that turn called a tool. Messages sends `{}` for historical tool arguments that are malformed JSON or are not objects. This argument fallback preserves call ids, tool names, and tool results; the original arguments stay in the Session log. Newly generated Messages tool arguments still require valid JSON objects. Messages omits `reasoning` and `tool-call` blocks inside user messages and tool results. This also permits replay of saved subagent notices containing assistant output; the original Session content remains intact. Empty user messages are skipped after conversion, while empty tool results retain their call ids and error flags. Other unsupported input blocks still fail with `UNSUPPORTED_CONTENT`. When every declared tool is deferred, the adapter prepends a non-deferred `DeferredToolPlaceholder` with the description `Reserved placeholder that keeps deferred tool loading active; never call this tool.` A numeric suffix avoids collisions with declared tools. The placeholder has no executor; calls receive the ordinary unavailable-tool result. Real tools remain deferred until their recorded additions, and removed tools stay absent on addition-only routes. Empty tool lists receive no placeholder.
 
 #### Token effect
 
diff --git a/packages/llm/llm-deepseek/README.zh.md b/packages/llm/llm-deepseek/README.zh.md
index 690a964840..eeabe9d876 100644
--- a/packages/llm/llm-deepseek/README.zh.md
+++ b/packages/llm/llm-deepseek/README.zh.md
@@ -170,7 +170,7 @@ Files 模式通过 `maxRequestFilesBytes` 与 `maxImagesPerRequest` 限制保留
 
 #### 模型看到什么
 
-所选 DeepSeek 模型会收到 harness 系统提示词、消息历史、工具 schema、停止序列与调用配置（`maxTokens`、`reasoningEffort`、`temperature`），不包含适配器撰写的提示词散文。提供方专用请求扩展字段留在模型输入之外。视觉模型通常接收 Files API 引用形式的用户与工具结果图片，其旁带附件句柄和请求预览尺寸。当前执行文件系统可以映射附件提供方的宿主对象时，它还会收到规范化对象路径；描述符会把该副本标记为只读，并警告规范化可能缩放或重新编码上传内容。Files 解析失败时，全部保留图片改用内联 base64；超出预算的较旧图片则在占位文本中保留当前请求已解析的访问方式。此前 assistant 轮次的推理内容会原样传回，无论该轮次是否调用了工具。 对于非法 JSON 或非对象的历史工具参数，Messages 发送 `{}`。此参数兜底保留调用 ID、工具名和工具结果；原始参数仍保留在 Session 日志中。新生成的 Messages 工具参数仍须是有效 JSON 对象。 Messages 会省略用户消息和工具结果中的 `reasoning` 与 `tool-call` 块。这也允许回放包含助手输出的已保存子 Agent 通知；原始 Session 内容保持完整。转换后的空用户消息会被跳过，空工具结果则保留调用 id 和错误标记。其他不支持的输入块仍会以 `UNSUPPORTED_CONTENT` 失败。
+所选 DeepSeek 模型会收到 harness 系统提示词、消息历史、工具 schema、停止序列与调用配置（`maxTokens`、`reasoningEffort`、`temperature`），不包含适配器撰写的提示词散文。提供方专用请求扩展字段留在模型输入之外。视觉模型通常接收 Files API 引用形式的用户与工具结果图片，其旁带附件句柄和请求预览尺寸。当前执行文件系统可以映射附件提供方的宿主对象时，它还会收到规范化对象路径；描述符会把该副本标记为只读，并警告规范化可能缩放或重新编码上传内容。Files 解析失败时，全部保留图片改用内联 base64；超出预算的较旧图片则在占位文本中保留当前请求已解析的访问方式。此前 assistant 轮次的推理内容会原样传回，无论该轮次是否调用了工具。 对于非法 JSON 或非对象的历史工具参数，Messages 发送 `{}`。此参数兜底保留调用 ID、工具名和工具结果；原始参数仍保留在 Session 日志中。新生成的 Messages 工具参数仍须是有效 JSON 对象。 Messages 会省略用户消息和工具结果中的 `reasoning` 与 `tool-call` 块。这也允许回放包含助手输出的已保存子 Agent 通知；原始 Session 内容保持完整。转换后的空用户消息会被跳过，空工具结果则保留调用 id 和错误标记。其他不支持的输入块仍会以 `UNSUPPORTED_CONTENT` 失败。 当所有已声明工具都为延迟加载时，适配器会在列表开头添加非延迟的 `DeferredToolPlaceholder`，描述为 `Reserved placeholder that keeps deferred tool loading active; never call this tool.`。如与已声明工具重名，则添加数字后缀。占位工具没有执行器；调用会收到常规的工具不可用结果。真实工具仍在记录的添加位置才激活，addition-only 路由不会恢复已移除工具。空工具列表不会添加占位工具。
 
 #### Token 影响
 
diff --git a/packages/llm/llm-deepseek/src/serialize.ts b/packages/llm/llm-deepseek/src/serialize.ts
index f08412c0e9..6f173a6f01 100644
--- a/packages/llm/llm-deepseek/src/serialize.ts
+++ b/packages/llm/llm-deepseek/src/serialize.ts
@@ -45,6 +45,8 @@ function assistant(message: Message, model: string, onReplayDegrade?: (reason: s
  * Developer messages, already projected for this route by `LlmRuntime`, become
  * system-role updates after the preceding user turn, with tool changes as
  * `tool_addition` and `tool_removal` references to the declared tool.
+ * Nonempty all-deferred tool lists receive an immediate, non-executable
+ * placeholder without changing real tools or their activation positions.
  * @param options - provider-neutral request.
  * @param connection - validated defaults and thinking policy.
  * @param history - image-projected history with complete system snapshots; durable messages remain unchanged.
@@ -149,6 +151,23 @@ export function serialize(
     throw new LlmError(`DeepSeek Messages does not support reasoning effort ${effort}`, 'UNSUPPORTED_REASONING_EFFORT')
   }
   const system = [options.system, historySystem].filter(Boolean).join('\n\n')
+  const tools = options.tools?.map(tool => ({
+    name: tool.name,
+    description: tool.description,
+    input_schema: tool.parameters,
+    ...tool.deferLoading === true ? { defer_loading: true as const } : {},
+  }))
+  if (tools !== undefined && tools.length > 0 && tools.every(tool => tool.defer_loading === true)) {
+    // Messages requires an immediate declaration even when every real tool loads later.
+    const names = new Set(tools.map(tool => tool.name))
+    let name = 'DeferredToolPlaceholder'
+    for (let suffix = 1; names.has(name); suffix++) name = `DeferredToolPlaceholder_${suffix}`
+    tools.unshift({
+      name,
+      description: 'Reserved placeholder that keeps deferred tool loading active; never call this tool.',
+      input_schema: { type: 'object', properties: {} },
+    })
+  }
   return {
     model: options.model, stream: true, messages,
     max_tokens: options.maxTokens ?? model?.maxTokens ?? connection.maxTokens,
@@ -157,13 +176,6 @@ export function serialize(
     ...system.length === 0 ? {} : { system },
     ...options.temperature === undefined ? {} : { temperature: options.temperature },
     ...options.stop === undefined ? {} : { stop_sequences: options.stop },
-    ...options.tools === undefined ? {} : {
-      tools: options.tools.map(tool => ({
-        name: tool.name,
-        description: tool.description,
-        input_schema: tool.parameters,
-        ...tool.deferLoading === true ? { defer_loading: true as const } : {},
-      })),
-    },
+    ...tools === undefined ? {} : { tools },
   }
 }
diff --git a/packages/llm/llm-deepseek/tests/adapter.e2e.ts b/packages/llm/llm-deepseek/tests/adapter.e2e.ts
index 6952c493e2..d5a359f986 100644
--- a/packages/llm/llm-deepseek/tests/adapter.e2e.ts
+++ b/packages/llm/llm-deepseek/tests/adapter.e2e.ts
@@ -16,7 +16,7 @@ import AgentRegistry from '@deepseek-ai/dsh-agent'
 import SessionProjectionRegistry from '@deepseek-ai/dsh-session-projection'
 import LocalAttachments from '@deepseek-ai/dsh-attachment-local'
 import DeepSeekLlmApiExtensionRegistry from '@deepseek-ai/dsh-deepseek-llm-api-extensions'
-import LlmRuntime, { BlockAssembler, createAssistantMessage, createSystemMessage, createToolResultMessage, ReasoningEffortId, ToolCallId } from '@deepseek-ai/dsh-llm'
+import LlmRuntime, { BlockAssembler, createAssistantMessage, createDeveloperMessage, createSystemMessage, createToolResultMessage, ReasoningEffortId, ToolCallId } from '@deepseek-ai/dsh-llm'
 import type { Message } from '@deepseek-ai/dsh-llm'
 import * as PluginPackageInventoryDeepSeek from '@deepseek-ai/dsh-plugin-package-inventory-deepseek'
 import SessionStore, { SessionId } from '@deepseek-ai/dsh-session'
@@ -50,6 +50,22 @@ async function boot(models?: Messages.Options['models']) {
 const tool = { name: 'lookup_value', description: 'Read the requested value. Always call this tool to obtain a value.', parameters: { type: 'object', properties: { key: { type: 'string' } }, required: ['key'] } }
 
 describe.skipIf(!process.env.DEEPSEEK_API_KEY)('DeepSeek Messages real API', () => {
+  it('calls a deferred tool after every baseline tool has been removed', async () => {
+    const model = 'deepseek-flash'
+    const ctx = await boot([{ id: model, toolUpdate: 'addition-only' }])
+    const update = createDeveloperMessage({ source: { kind: 'tool-registry' }, content: [
+      { type: 'tool-removal', toolName: 'old_lookup' }, { type: 'tool-addition', toolName: tool.name },
+    ] })
+    const response = await assemble(ctx.llm.stream(options({
+      model, reasoningEffort: ReasoningEffortId('high'),
+      messages: [user('Call lookup_value with key "answer" to obtain the value. Do not guess.'), update],
+      tools: [tool],
+      toolHistory: { tools: [{ ...tool, name: 'old_lookup' }], updates: [{ messageId: update.id, additions: [tool] }] },
+    })), model)
+    expect(response.assembler.finish).toEqual({ kind: 'tool-calls' })
+    expect(response.message.content.filter(block => block.type === 'tool-call').map(call => call.name)).toEqual([tool.name])
+  })
+
   it.skipIf(!IN_HISTORY_MODEL).each([false, true])('updates system instructions during a conversation, in-history=%s', async (inHistory) => {
     const model = IN_HISTORY_MODEL as string
     // Each case owns the capability, even for a model with an in-history catalog default.
diff --git a/packages/llm/llm-deepseek/tests/adapter.spec.ts b/packages/llm/llm-deepseek/tests/adapter.spec.ts
index d130844014..a113e2a1ed 100644
--- a/packages/llm/llm-deepseek/tests/adapter.spec.ts
+++ b/packages/llm/llm-deepseek/tests/adapter.spec.ts
@@ -118,7 +118,7 @@ describe('direct Messages HTTP', () => {
     await assemble(llm.stream(options({ messages: [user(), changes], tools })))
     expect(http.requests[0]).toMatchObject({
       headers: { 'anthropic-beta': 'mid-conversation-tool-changes-2026-07-01' },
-      body: { tools: [{ name: 'search', defer_loading: true }], messages: [
+      body: { tools: [{ name: 'DeferredToolPlaceholder' }, { name: 'search', defer_loading: true }], messages: [
         { role: 'user' }, { role: 'system', content: [{ type: 'tool_addition', tool: { type: 'tool_reference', name: 'search' } }] },
       ] },
     })
@@ -276,6 +276,30 @@ describe('direct Messages HTTP', () => {
 })
 
 describe('Cordis provider composition', () => {
+  it('keeps a replacement tool deferred after the last baseline tool is removed', async () => {
+    const { ctx, http } = await boot()
+    const baseline = { name: 'old_tool', description: 'Old tool', parameters: {} }
+    const added = { name: 'new_tool', description: 'New tool', parameters: {} }
+    const update = createDeveloperMessage({ source: { kind: 'tool-registry' }, content: [
+      { type: 'tool-removal', toolName: baseline.name }, { type: 'tool-addition', toolName: added.name },
+    ] })
+    const request = options({ model: 'deepseek-flash', messages: [user(), update], tools: [added],
+      toolHistory: { tools: [baseline], updates: [{ messageId: update.id, additions: [added] }] },
+    })
+    const saved = JSON.stringify(request)
+    const response = await assemble(ctx.llm.stream(request), 'deepseek-flash')
+    expect(response.assembler.finish.kind).toBe('stop')
+    expect(http.requests[0]?.body.tools).toEqual([
+      { name: 'DeferredToolPlaceholder', description: 'Reserved placeholder that keeps deferred tool loading active; never call this tool.', input_schema: { type: 'object', properties: {} } },
+      { name: added.name, description: added.description, input_schema: {}, defer_loading: true },
+    ])
+    expect(http.requests[0]?.body.messages).toEqual([
+      { role: 'user', content: [{ type: 'text', text: 'hello' }] },
+      { role: 'system', content: [{ type: 'tool_addition', tool: { type: 'tool_reference', name: added.name } }] },
+    ])
+    expect(JSON.stringify(request)).toBe(saved)
+  })
+
   it('resolves an attachment service loaded after the adapter and maps its read-only path', async () => {
     const http = await endpoint()
     const { ctx, home } = await context()
diff --git a/packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts b/packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts
new file mode 100644
index 0000000000..eb58b2c54e
--- /dev/null
+++ b/packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts
@@ -0,0 +1,59 @@
+/** Replay a complete replacement of the initially available tools through Messages serialization. */
+import assert from 'node:assert/strict'
+import type { Context } from '@deepseek-ai/cordis'
+import type {} from '@deepseek-ai/dsh-agent'
+import { projectToolUpdates } from '@deepseek-ai/dsh-llm'
+import { defineContentToolFixture } from '@deepseek-ai/dsh-tool-testkit'
+import { resolveAdapterOptions } from '../../src/config.ts'
+import { serialize } from '../../src/serialize.ts'
+
+export const name = 'messages-deferred-tools-snapshot'
+export const inject = ['tools', 'llm']
+
+/**
+ * Replace the baseline after its first call and check the serialized replay requests.
+ * @param ctx - Snapshot composition context.
+ */
+export function apply(ctx: Context): void {
+  ctx.on('agent/created', ({ agent }) => {
+    agent.ctx.tools.restrict({ allow: [] })
+    const removeInitial = agent.ctx.tools.register(defineContentToolFixture({
+      name: 'snapshot_initial', description: 'Make snapshot_ping available.', parameters: {},
+      async execute() {
+        removeInitial()
+        agent.ctx.tools.register(defineContentToolFixture({
+          name: 'snapshot_ping', description: 'Return pong once.', parameters: {},
+          async execute() {
+            return [{ type: 'text', text: 'pong' }]
+          },
+        }))
+        return [{ type: 'text', text: 'snapshot_ping is available.' }]
+      },
+    }))
+  })
+  const connection = resolveAdapterOptions({})
+  let requests = 0
+  ctx.on('llm/stream', (options, next) => {
+    const projected = projectToolUpdates(options.messages, options.tools, 'addition-only', options.toolHistory)
+    assert.ok(projected.tools)
+    const request = serialize({ ...options, tools: [...projected.tools] }, connection, projected.messages, new Map(), () => undefined)
+    switch (++requests) {
+      case 1:
+        assert.deepEqual(request.tools?.map(tool => tool.name), ['snapshot_initial'])
+        break
+      case 2:
+      case 3:
+        assert.deepEqual(request.tools, [
+          { name: 'DeferredToolPlaceholder', description: 'Reserved placeholder that keeps deferred tool loading active; never call this tool.', input_schema: { type: 'object', properties: {} } },
+          { name: 'snapshot_ping', description: 'Return pong once.', input_schema: { type: 'object', properties: {} }, defer_loading: true },
+        ])
+        assert.deepEqual(request.messages.filter(message => message.role === 'system'), [
+          { role: 'system', content: [{ type: 'tool_addition', tool: { type: 'tool_reference', name: 'snapshot_ping' } }] },
+        ])
+        break
+      default:
+        assert.fail('Unexpected request after the replacement tool call completed')
+    }
+    return next()
+  })
+}
diff --git a/packages/llm/llm-deepseek/tests/serialize.spec.ts b/packages/llm/llm-deepseek/tests/serialize.spec.ts
index f30bbb2bac..9194650f10 100644
--- a/packages/llm/llm-deepseek/tests/serialize.spec.ts
+++ b/packages/llm/llm-deepseek/tests/serialize.spec.ts
@@ -80,6 +80,30 @@ describe('Messages request conversion', () => {
     ])
   })
 
+  it('keeps an all-deferred list inactive and adds one immediate placeholder', () => {
+    const tools = [{ name: 'search', description: 'Search', parameters: {}, deferLoading: true as const }]
+    const saved = JSON.stringify(tools)
+    expect(body([user()], { tools }).tools).toEqual([
+      { name: 'DeferredToolPlaceholder', description: 'Reserved placeholder that keeps deferred tool loading active; never call this tool.', input_schema: { type: 'object', properties: {} } },
+      { name: 'search', description: 'Search', input_schema: {}, defer_loading: true },
+    ])
+    expect(JSON.stringify(tools)).toBe(saved)
+  })
+
+  it('avoids colliding with real deferred tool names', () => {
+    const tools = ['DeferredToolPlaceholder', 'DeferredToolPlaceholder_1'].map(name => ({
+      name, description: 'Real tool', parameters: {}, deferLoading: true as const,
+    }))
+    expect(body([user()], { tools }).tools?.map(tool => [tool.name, tool.defer_loading])).toEqual([
+      ['DeferredToolPlaceholder_2', undefined], ['DeferredToolPlaceholder', true], ['DeferredToolPlaceholder_1', true],
+    ])
+  })
+
+  it('preserves absent and empty tool lists', () => {
+    expect(body().tools).toBeUndefined()
+    expect(body([user()], { tools: [] }).tools).toEqual([])
+  })
+
   it('preserves the exact request with request-only text after durable tool results', () => {
     const prefix = [user(), assistant([call()]), result()]
     const input: RequestUserInput = { role: 'user', content: [{ type: 'text', text: 'review or summarize this input' }] }
diff --git a/snapshots/session/deepseek-deferred-tools/cordis.snapshot.yml b/snapshots/session/deepseek-deferred-tools/cordis.snapshot.yml
new file mode 100644
index 0000000000..db9166801d
--- /dev/null
+++ b/snapshots/session/deepseek-deferred-tools/cordis.snapshot.yml
@@ -0,0 +1,18 @@
+- id: llm-deepseek
+  disabled: true
+
+- insert:
+    - id: llm-replay
+      name: '@deepseek-ai/dsh-llm-replay'
+      config:
+        providers:
+          - id: deepseek-official
+            name: DeepSeek
+            models:
+              - id: deepseek-v4-flash
+                toolUpdate: addition-only
+                defaultMaxTokens: 256000
+                reasoningEfforts: [off, low, high, max]
+                defaultReasoningEffort: high
+    - id: messages-deferred-tools-snapshot
+      name: '../../../packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts'
diff --git a/snapshots/session/deepseek-deferred-tools/cordis.yml b/snapshots/session/deepseek-deferred-tools/cordis.yml
new file mode 100644
index 0000000000..9f0404c265
--- /dev/null
+++ b/snapshots/session/deepseek-deferred-tools/cordis.yml
@@ -0,0 +1,3 @@
+- insert:
+    - id: messages-deferred-tools-snapshot
+      name: '../../../packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts'
diff --git a/snapshots/session/deepseek-deferred-tools/session.v4.jsonl b/snapshots/session/deepseek-deferred-tools/session.v4.jsonl
new file mode 100644
index 0000000000..b0a9610be2
--- /dev/null
+++ b/snapshots/session/deepseek-deferred-tools/session.v4.jsonl
@@ -0,0 +1,29 @@
+{"type":"session","version":4,"id":"{{session:1}}","createdAt":0,"cwd":"{{cwd}}","isSeeded":false,"delegationDepth":0}
+{"type":"permission/preset","data":{"preset":"danger-full-access"}}
+{"type":"sandbox/mode","data":{"mode":"danger-full-access"}}
+{"type":"approval/policy","data":{"policy":"never"}}
+{"type":"agent/inbox/spliced","data":{"target":"next-turn","start":0,"inserted":[{"content":[{"type":"text","text":"Call snapshot_initial, then snapshot_ping, then reply DONE."}],"source":{"kind":"user"},"role":"user","id":"{{message:1}}"}]}}
+{"type":"turn/start","data":{"turn":1}}
+{"type":"agent/inbox/spliced","data":{"target":"next-turn","start":0,"removedCount":1,"inserted":[]}}
+{"type":"step/start","data":{"turn":1,"step":1}}
+{"type":"system/message","data":{"turn":1,"step":1,"message":{"role":"system","content":[{"type":"text","text":"{{system}}"}],"source":{"kind":"system-prompt"},"id":"{{message:2}}"}},"surfaceOp":"append"}
+{"type":"user/message","data":{"content":[{"type":"text","text":"Call snapshot_initial, then snapshot_ping, then reply DONE."}],"source":{"kind":"user"},"role":"user","id":"{{message:1}}"},"surfaceOp":"append"}
+{"type":"user/message","data":{"content":[{"type":"text","text":"Current runtime context. This snapshot supersedes earlier runtime-context snapshots.\n\nCurrent working directory: \"{{cwd}}\".\n\nCurrent DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations.\n\nApproval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`)."}],"source":{"kind":"runtime-context","form":"snapshot","sections":[{"name":"working-directory:current","text":"Current working directory: \"{{cwd}}\"."},{"name":"sandbox:policy","text":"Current DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations."},{"name":"approval:policy","text":"Approval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`)."}]},"role":"user","id":"{{message:3}}"},"surfaceOp":"append"}
+{"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_initial"]},"reason":"initial"}}
+{"type":"request/context","data":{"provider":"deepseek-official","model":"deepseek-v4-flash"}}
+{"type":"session/title","data":{"title":"Call snapshot_initial, then snapshot_pin","messageSeqs":[8],"source":{"kind":"fallback"}}}
+{"type":"assistant/message","data":{"turn":1,"step":1,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_initial","name":"snapshot_initial","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:4}}"},"usage":{"inputTokens":10,"outputTokens":5},"stream":[{"type":"chunk","time":1790049391235,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1790049391235,"index":0,"dt":[],"id":"call_initial","name":"snapshot_initial","args":["{}"]},{"type":"chunk","time":1790049391235,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_initial","name":"snapshot_initial","arguments":"{}"}}},{"type":"chunk","time":1790049391235,"chunk":{"type":"usage","usage":{"inputTokens":10,"outputTokens":5}}},{"type":"chunk","time":1790049391235,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
+{"type":"tool/call","data":{"turn":1,"step":1,"callId":"call_initial","name":"snapshot_initial","arguments":"{}"}}
+{"type":"tool/result","data":{"turn":1,"step":1,"message":{"role":"tool","source":{"kind":"tool","callId":"call_initial"},"toolCallId":"call_initial","content":[{"type":"text","text":"snapshot_ping is available."}],"isError":false,"id":"{{message:5}}"}},"sourceEventSeqs":[14],"surfaceOp":"append"}
+{"type":"step/end","data":{"turn":1,"step":1}}
+{"type":"step/start","data":{"turn":1,"step":2}}
+{"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_ping"]},"reason":"change"}}
+{"type":"developer/message","data":{"turn":1,"step":2,"message":{"source":{"kind":"tool-registry"},"content":[{"type":"tool-addition","toolName":"snapshot_ping"},{"type":"tool-removal","toolName":"snapshot_initial"}],"role":"developer","id":"{{message:6}}"},"headerSeq":18},"surfaceOp":"append"}
+{"type":"assistant/message","data":{"turn":1,"step":2,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:7}}"},"stream":[{"type":"chunk","time":1790049391255,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1790049391255,"index":0,"dt":[],"id":"call_dynamic_ping","name":"snapshot_ping","args":["{}"]},{"type":"chunk","time":1790049391255,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}}},{"type":"chunk","time":1790049391255,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
+{"type":"tool/call","data":{"turn":1,"step":2,"callId":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}}
+{"type":"tool/result","data":{"turn":1,"step":2,"message":{"role":"tool","source":{"kind":"tool","callId":"call_dynamic_ping"},"toolCallId":"call_dynamic_ping","content":[{"type":"text","text":"pong"}],"isError":false,"id":"{{message:8}}"}},"sourceEventSeqs":[21],"surfaceOp":"append"}
+{"type":"step/end","data":{"turn":1,"step":2}}
+{"type":"step/start","data":{"turn":1,"step":3}}
+{"type":"assistant/message","data":{"turn":1,"step":3,"message":{"role":"assistant","content":[{"type":"text","text":"DONE"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:9}}"},"usage":{"inputTokens":12,"outputTokens":2,"cacheReadTokens":10},"stream":[{"type":"chunk","time":1790049391270,"chunk":{"type":"block-start","index":0,"blockType":"text"}},{"type":"text-chunks","time0":1790049391270,"index":0,"dt":[],"texts":["DONE"]},{"type":"chunk","time":1790049391270,"chunk":{"type":"block-end","index":0,"block":{"type":"text","text":"DONE"}}},{"type":"chunk","time":1790049391270,"chunk":{"type":"usage","usage":{"inputTokens":12,"outputTokens":2,"cacheReadTokens":10}}},{"type":"chunk","time":1790049391270,"chunk":{"type":"finish","reason":{"kind":"stop"}}}]},"surfaceOp":"append"}
+{"type":"step/end","data":{"turn":1,"step":3}}
+{"type":"turn/end","data":{"turn":1,"reason":{"kind":"completed"}}}
diff --git a/snapshots/session/deepseek-deferred-tools/snapshot.yml b/snapshots/session/deepseek-deferred-tools/snapshot.yml
new file mode 100644
index 0000000000..a99cb0dcc1
--- /dev/null
+++ b/snapshots/session/deepseek-deferred-tools/snapshot.yml
@@ -0,0 +1,9 @@
+version: 1
+scenario: deepseek-deferred-tools
+profile: headless
+composition: deepseek-deferred-tools
+recording: authored
+header:
+  class: deepseek-deferred-tools
+  pin: true
+  changes: 1
diff --git a/snapshots/session/deepseek-deferred-tools/system-prompt.expected.md b/snapshots/session/deepseek-deferred-tools/system-prompt.expected.md
new file mode 100644
index 0000000000..7c0cf23533
--- /dev/null
+++ b/snapshots/session/deepseek-deferred-tools/system-prompt.expected.md
@@ -0,0 +1,14 @@
+You are an AI agent powered by DeepSeek Harness.
+
+You are a coding assistant powered by the deepseek-v4-flash model. Your bash tool runs under a file sandbox — a `[sandbox: file access denied …]` result is policy, not a command bug.
+
+Verify your work by running the code or tests. Keep answers brief and factual.
+
+
+Check the [exit code: N] marker on every bash result; investigate failures before moving on.
+
+Track every background job id you start. You are notified in-session when a job finishes — do not busy-poll or sleep on one; keep working on independent steps and do not duplicate a running job's work. Before giving a final answer, collect every still-relevant job with job_output (set wait: true only when you are genuinely blocked on it), and job_kill jobs that stopped mattering.
+
+create_goal may infer goal intent from a direct human request in any language. After session resume or fork, an active goal is disarmed: when a human asks to continue or resume in any wording or language, use update_goal action resume to rearm it. Mark complete only when the objective is actually achieved. Mark blocked only after the same blocking condition persists for at least 3 consecutive goal rounds, and report that concrete condition in blocked_reason; difficulty, uncertainty, or useful remaining work is not blocked.
+
+Use the workflow tool ONLY when the user explicitly asks for a workflow or for large multi-agent orchestration: you write a JavaScript script (the tool description documents the exact format) that fans work out across many subagents with phases and structured results. For one or two delegations, prefer plain subagent calls.
diff --git a/snapshots/session/deepseek-deferred-tools/tool-schemas.expected.json b/snapshots/session/deepseek-deferred-tools/tool-schemas.expected.json
new file mode 100644
index 0000000000..ee53a9dda8
--- /dev/null
+++ b/snapshots/session/deepseek-deferred-tools/tool-schemas.expected.json
@@ -0,0 +1,24 @@
+{
+  "initial": [
+    {
+      "name": "snapshot_initial",
+      "description": "Make snapshot_ping available.",
+      "parameters": {
+        "type": "object",
+        "properties": {}
+      }
+    }
+  ],
+  "changes": [
+    [
+      {
+        "name": "snapshot_ping",
+        "description": "Return pong once.",
+        "parameters": {
+          "type": "object",
+          "properties": {}
+        }
+      }
+    ]
+  ]
+}

From f8217a4fe10a0de2c5bfdf0d7a659b070e45e9d3 Mon Sep 17 00:00:00 2001
From: Yixiang Tu <tuyixiang@deepseek.com>
Date: Thu, 22 Oct 2026 16:57:04 +0800
Subject: [PATCH 21/32] fix(llm): rebuild addition-only baselines after tool
 removals

---
 .../2026-09-20-dynamic-tool-updates.i18n.yaml | 12 +--
 .../2026-09-20-dynamic-tool-updates.md        |  6 +-
 .../2026-09-20-dynamic-tool-updates.zh.md     |  6 +-
 packages/llm/llm-deepseek/README.i18n.yaml    |  4 +-
 packages/llm/llm-deepseek/README.md           |  2 +-
 packages/llm/llm-deepseek/README.zh.md        |  2 +-
 .../llm/llm-deepseek/tests/adapter.e2e.ts     |  2 +-
 .../llm/llm-deepseek/tests/adapter.spec.ts    |  6 +-
 .../tests/fixtures/deferred-tools.ts          | 15 +++-
 .../tests/conversation-updates.spec.ts        | 10 ++-
 packages/llm/llm/README.i18n.yaml             |  4 +-
 packages/llm/llm/README.md                    |  2 +-
 packages/llm/llm/README.zh.md                 |  2 +-
 packages/llm/llm/src/content.ts               | 45 ++++++++++-
 packages/llm/llm/tests/content.spec.ts        | 77 +++++++++++++++++--
 .../deepseek-deferred-tools/session.v4.jsonl  |  8 +-
 .../deepseek-deferred-tools/snapshot.yml      |  2 +-
 .../tool-schemas.expected.json                | 18 +++++
 18 files changed, 182 insertions(+), 41 deletions(-)

diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
index c0587791fd..357c16c769 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
@@ -9,11 +9,11 @@
   en: 97fe58a13135b4a1
   zh: 7490373a8d941da5
 /agent-note-active-tool-headers-and-stateful-request-projection/decision:
-  en: 0c40a9283650c643
-  zh: 91a18d752d09a9ce
+  en: b6770e6bd8ff17ee
+  zh: cc409f4e9f9be495
 /agent-note-active-tool-headers-and-stateful-request-projection/alternatives-considered:
-  en: b78785f2a603eba8
-  zh: b8c268228da7e2e7
+  en: 69370c9cb0014985
+  zh: ccba65967ab1c34d
 /agent-note-active-tool-headers-and-stateful-request-projection/consequences:
-  en: 60d7bf28fa5a8fd1
-  zh: a17b222e7aca01e2
+  en: cabc2b9d378d186e
+  zh: 7aa21854f43bf8e8
diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
index a40b85601c..6421cb7e43 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
@@ -14,7 +14,7 @@ Plugin and MCP tools change during conversations. Providers differ in whether th
 
 `Session.toolHistory()` caches a capability-independent fold of committed headers and developer messages. First access restores inherited events; later reads consume only unseen events. Immutable snapshots carry initial declarations and ordered update identities with additions resolved through their historical headers. Explicit series starts and changed retained definitions rebuild declarations. Restoring a retained name with an unchanged definition continues the series: the projection keeps the declaration unchanged and lets the recorded addition re-offer the tool after its earlier removal, so a removal never disables a declared tool and a loading mode never rewrites an earlier declaration.
 
-Loop and compaction requests carry this snapshot as `GenerateOptions.toolHistory`. At adapter dispatch, `projectToolUpdates` uses the prepared route's `toolUpdate`. Unsupported routes receive active definitions without `deferLoading` or developer messages. Supported routes defer historical additions; `in-history` retains removed definitions and removal blocks, while `addition-only` omits both. Only current-series update identities survive. Missing history or a request prefix omitting recorded updates uses current declarations without developer updates. Explicit deferred loading remains available on capable routes.
+Loop and compaction requests carry this snapshot as `GenerateOptions.toolHistory`. At adapter dispatch, `projectToolUpdates` uses the prepared route's `toolUpdate`. Unsupported routes receive active definitions without `deferLoading` or developer messages. Supported routes defer historical additions; `in-history` retains removed definitions and removal blocks, while `addition-only` omits both. On addition-only routes, removing an immediate baseline tool rebuilds the route's baseline after that update: the initial declarations already change, so retaining superseded activation blocks cannot preserve the full conversation prefix. Previously activated tools become immediate; explicitly deferred declarations with no activation remain deferred. Subsequent additions remain deferred until their recorded activation. Superseded tool blocks are omitted without discarding other content in those messages. The Session fold and durable events remain capability-independent. Missing history or a request prefix omitting recorded updates uses current declarations without developer updates.
 
 DeepSeek translates projected updates into system-role `tool_addition` and `tool_removal` blocks and `defer_loading` declarations, sending the tool-changes beta header when update blocks occur. The default `deepseek-flash` entry declares `addition-only`; pi-ai declares no mode. Chat and Trajectory display developer messages as context nodes, using localized tool-change notices: single changes show the tool name; multiple changes show counts and expandable name lists.
 
@@ -26,6 +26,8 @@ DeepSeek translates projected updates into system-role `tool_addition` and `tool
 
 **Scan the complete log on every request.** The cached fold consumes new events and supplies stable snapshots to ordinary and auxiliary calls without adding arbitrary synchronous history readers.
 
+**Rebuild whenever additions and removals occur together.** Replacing a later-added tool can preserve the prefix before its activation while the immediate baseline stays unchanged. Conversely, a removal-only update can remove the last immediate baseline tool. The reset therefore follows baseline removals, not the presence of both update kinds. A past reset cannot force every future addition to become immediate: each reset establishes a new baseline from which deferred additions resume.
+
 **Reject same-name schema changes during tool registration.** This restriction is not enforced. Immediate failure for a plugin registering an incompatible tool requires comparing the new registration with historical definitions of tools called on each affected current surface, while excluding calls removed by compaction. That registration-time historical and scope-aware check is deferred because of its implementation complexity. Same-name schema changes remain allowed; they rebuild declarations and invalidate prefix reuse even on `in-history` routes.
 
 ## Consequences
@@ -34,4 +36,6 @@ Tool lists and logical update events are capability-independent; only outgoing d
 
 The authored [headless prompt/tool scenario](../../../../snapshots/session/dynamic-tool-prompt-updates/snapshot.yml) pins an appended prompt beside a deferred tool addition and verifies that the first request's messages stay unchanged. It shares the stable-prompt scenario's tool lifecycle and schema expectations.
 
+The [DeepSeek replacement scenario](../../../../snapshots/session/deepseek-deferred-tools/snapshot.yml) checks the rebuilt baseline and a subsequent deferred addition through Messages serialization. An adapter-local placeholder covers nonempty all-deferred requests that remain, including explicit deferred declarations and direct calls. It does not activate real tools. These checks establish request construction, not measured cache savings from rebuilding.
+
 The [real DeepSeek SDK test](../../../../apps/cli/tests/profiles/sdk/dynamic-tool-cache.e2e.ts) measures the first request after a native tool addition with both unchanged and simultaneously updated instructions. Unique user history prevents a shared system-prompt cache hit from satisfying the preceding-input assertion. Removal checks tool availability without requiring cache retention; each case disables retries.
diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
index 372dcb27af..86350a0318 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
@@ -14,7 +14,7 @@ Status: implemented
 
 `Session.toolHistory()` 缓存对已提交请求头和 developer 消息的归约，不依赖模型能力。首次访问恢复继承事件；后续读取仅处理新增事件。不可变快照携带初始声明和有序更新标识，添加定义通过历史请求头解析。显式新序列和保留定义变化会重建声明。以未变化的定义恢复保留名称时序列继续：投影保持声明不变，由记录的添加在先前移除之后重新提供该工具，因此移除不会禁用已声明的工具，加载模式也不会改写先前声明。
 
-循环和压缩请求通过 `GenerateOptions.toolHistory` 携带此快照。适配器分发时，`projectToolUpdates` 使用已准备路由的 `toolUpdate`。不支持的路由接收有效定义，不携带 `deferLoading` 或 developer 消息。支持的路由延迟历史添加；`in-history` 保留已移除定义和移除块，`addition-only` 则省略两者。仅保留当前序列的更新标识。缺少历史或请求前缀遗漏已记录更新时，使用当前声明且不发送 developer 更新。显式延迟加载在支持的路由上仍然可用。
+循环和压缩请求通过 `GenerateOptions.toolHistory` 携带此快照。适配器分发时，`projectToolUpdates` 使用已准备路由的 `toolUpdate`。不支持的路由接收有效定义，不携带 `deferLoading` 或 developer 消息。支持的路由延迟历史添加；`in-history` 保留已移除定义和移除块，`addition-only` 则省略两者。在 addition-only 路由移除基线中的立即加载工具时，使用该次更新后的状态重建路由基线：初始声明已发生变化，保留已被取代的激活块无法保留完整对话前缀。此前已激活工具变为立即加载；没有激活记录的显式延迟声明仍保持延迟。后续添加在记录的激活位置前保持延迟加载。已被取代的工具块会被省略，但不会丢弃这些消息中的其他内容。Session 归约和持久事件仍不依赖模型能力。缺少历史或请求前缀遗漏已记录更新时，使用当前声明且不发送 developer 更新。
 
 DeepSeek 把投影后的更新转换为 system 角色的 `tool_addition` 和 `tool_removal` 块以及 `defer_loading` 声明，在存在更新块时发送工具变更 beta 请求头。默认 `deepseek-flash` 条目声明 `addition-only`；pi-ai 不声明模式。Chat 和 Trajectory 将 developer 消息显示为上下文节点，工具变更使用本地化通知：单项变更显示工具名，多项变更显示数量及可展开的名称列表。
 
@@ -26,6 +26,8 @@ DeepSeek 把投影后的更新转换为 system 角色的 `tool_addition` 和 `to
 
 **每次请求扫描完整日志。** 缓存归约处理新事件，为普通和辅助调用提供稳定快照，不增加任意同步历史读取接口。
 
+**同时出现添加和移除就重建。** 替换后来添加的工具时，只要立即加载的基线未变，就仍可保留该工具激活之前的前缀。反之，仅包含移除的更新也可能移除最后一个立即加载的基线工具。因此，重置取决于基线工具移除，而不是两类更新是否同时出现。一次历史重置不能让所有后续添加都变为立即加载：每次重置确立新基线，后续添加继续采用延迟加载。
+
 **在工具注册时拒绝同名 schema 变化。** 当前不执行此限制。要让注册不兼容工具的插件立即收到异常，需要将新注册与各受影响当前 surface 中已调用工具的历史定义比较，同时排除已被压缩移除的调用。由于实现复杂，注册时结合历史和作用域的检查留待后续实现。同名 schema 变化仍被允许；它们会重建声明，即使在 `in-history` 路由上也会使前缀复用失效。
 
 ## Consequences
@@ -34,4 +36,6 @@ DeepSeek 把投影后的更新转换为 system 角色的 `tool_addition` 和 `to
 
 手写的[无界面提示词／工具场景](../../../../snapshots/session/dynamic-tool-prompt-updates/snapshot.yml)钉住追加提示词与延迟工具添加同时发生的行为，并验证首次请求的消息保持不变。它复用稳定提示词场景的工具生命周期和 schema 期望值。
 
+[DeepSeek 替换场景](../../../../snapshots/session/deepseek-deferred-tools/snapshot.yml)通过 Messages 序列化验证重建后的基线和后续延迟添加。适配器内的占位工具覆盖仍然存在的非空全延迟请求，包括显式延迟声明和直接调用，不会激活真实工具。这些检查验证请求构造，不代表已经测量重建带来的缓存收益。
+
 [真实 DeepSeek SDK 测试](../../../../apps/cli/tests/profiles/sdk/dynamic-tool-cache.e2e.ts) 分别在指令不变和指令同时更新时测量原生工具新增后的首次请求。独有的用户历史确保仅命中共享系统提示词缓存无法满足前序输入断言。移除场景检查工具可用性，不要求保留缓存；每个用例均禁用重试。
diff --git a/packages/llm/llm-deepseek/README.i18n.yaml b/packages/llm/llm-deepseek/README.i18n.yaml
index c0abd8378f..eb6b7092a7 100644
--- a/packages/llm/llm-deepseek/README.i18n.yaml
+++ b/packages/llm/llm-deepseek/README.i18n.yaml
@@ -63,8 +63,8 @@
   en: 1dc50052999253c6
   zh: 7abf968fc18bffcd
 /deepseek-ai-dsh-llm-deepseek/model-experience/deepseek-request/what-the-model-sees:
-  en: f475b3adb2d61982
-  zh: 6d8913a294f11de3
+  en: fda9111504c5af32
+  zh: 6306a70fdafbdb1b
 /deepseek-ai-dsh-llm-deepseek/model-experience/deepseek-request/token-effect:
   en: 67f4bfa42cbee911
   zh: 5e9dc9bc07253686
diff --git a/packages/llm/llm-deepseek/README.md b/packages/llm/llm-deepseek/README.md
index 6433ff8caf..6c3717c4d7 100644
--- a/packages/llm/llm-deepseek/README.md
+++ b/packages/llm/llm-deepseek/README.md
@@ -170,7 +170,7 @@ Read these pages when the package-level contract is not enough. They move from t
 
 #### What the model sees
 
-The selected DeepSeek model receives the harness system prompt, message history, tool schemas, stop sequences, and call config (`maxTokens`, `reasoningEffort`, `temperature`) without adapter-authored prompt prose. Provider-specific request-extension fields remain outside model input. The vision model normally receives retained user and tool-result images as Files API references beside attachment handles and request-preview dimensions. It also receives a normalized-object path when the current execution filesystem maps the attachment provider's host object; the descriptor marks this copy read-only and warns that normalization may have resized or re-encoded the upload. A Files resolution failure sends all retained images as inline base64 instead, and an over-budget older image keeps the access resolved for that request in its placeholder. Reasoning content from a prior assistant turn is passed back verbatim, whether or not that turn called a tool. Messages sends `{}` for historical tool arguments that are malformed JSON or are not objects. This argument fallback preserves call ids, tool names, and tool results; the original arguments stay in the Session log. Newly generated Messages tool arguments still require valid JSON objects. Messages omits `reasoning` and `tool-call` blocks inside user messages and tool results. This also permits replay of saved subagent notices containing assistant output; the original Session content remains intact. Empty user messages are skipped after conversion, while empty tool results retain their call ids and error flags. Other unsupported input blocks still fail with `UNSUPPORTED_CONTENT`. When every declared tool is deferred, the adapter prepends a non-deferred `DeferredToolPlaceholder` with the description `Reserved placeholder that keeps deferred tool loading active; never call this tool.` A numeric suffix avoids collisions with declared tools. The placeholder has no executor; calls receive the ordinary unavailable-tool result. Real tools remain deferred until their recorded additions, and removed tools stay absent on addition-only routes. Empty tool lists receive no placeholder.
+The selected DeepSeek model receives the harness system prompt, message history, tool schemas, stop sequences, and call config (`maxTokens`, `reasoningEffort`, `temperature`) without adapter-authored prompt prose. Provider-specific request-extension fields remain outside model input. The vision model normally receives retained user and tool-result images as Files API references beside attachment handles and request-preview dimensions. It also receives a normalized-object path when the current execution filesystem maps the attachment provider's host object; the descriptor marks this copy read-only and warns that normalization may have resized or re-encoded the upload. A Files resolution failure sends all retained images as inline base64 instead, and an over-budget older image keeps the access resolved for that request in its placeholder. Reasoning content from a prior assistant turn is passed back verbatim, whether or not that turn called a tool. Messages sends `{}` for historical tool arguments that are malformed JSON or are not objects. This argument fallback preserves call ids, tool names, and tool results; the original arguments stay in the Session log. Newly generated Messages tool arguments still require valid JSON objects. Messages omits `reasoning` and `tool-call` blocks inside user messages and tool results. This also permits replay of saved subagent notices containing assistant output; the original Session content remains intact. Empty user messages are skipped after conversion, while empty tool results retain their call ids and error flags. Other unsupported input blocks still fail with `UNSUPPORTED_CONTENT`. When every declared tool is deferred, the adapter prepends a non-deferred `DeferredToolPlaceholder` with the description `Reserved placeholder that keeps deferred tool loading active; never call this tool.` A numeric suffix avoids collisions with declared tools. The placeholder has no executor; calls receive the ordinary unavailable-tool result. The placeholder leaves real declarations unchanged. The shared [tool-update projection](../llm/README.md#known-limitations-and-deferred-work) rebuilds an addition-only baseline when an immediate tool is removed, while keeping later additions deferred. Empty tool lists receive no placeholder.
 
 #### Token effect
 
diff --git a/packages/llm/llm-deepseek/README.zh.md b/packages/llm/llm-deepseek/README.zh.md
index eeabe9d876..4350fe39e9 100644
--- a/packages/llm/llm-deepseek/README.zh.md
+++ b/packages/llm/llm-deepseek/README.zh.md
@@ -170,7 +170,7 @@ Files 模式通过 `maxRequestFilesBytes` 与 `maxImagesPerRequest` 限制保留
 
 #### 模型看到什么
 
-所选 DeepSeek 模型会收到 harness 系统提示词、消息历史、工具 schema、停止序列与调用配置（`maxTokens`、`reasoningEffort`、`temperature`），不包含适配器撰写的提示词散文。提供方专用请求扩展字段留在模型输入之外。视觉模型通常接收 Files API 引用形式的用户与工具结果图片，其旁带附件句柄和请求预览尺寸。当前执行文件系统可以映射附件提供方的宿主对象时，它还会收到规范化对象路径；描述符会把该副本标记为只读，并警告规范化可能缩放或重新编码上传内容。Files 解析失败时，全部保留图片改用内联 base64；超出预算的较旧图片则在占位文本中保留当前请求已解析的访问方式。此前 assistant 轮次的推理内容会原样传回，无论该轮次是否调用了工具。 对于非法 JSON 或非对象的历史工具参数，Messages 发送 `{}`。此参数兜底保留调用 ID、工具名和工具结果；原始参数仍保留在 Session 日志中。新生成的 Messages 工具参数仍须是有效 JSON 对象。 Messages 会省略用户消息和工具结果中的 `reasoning` 与 `tool-call` 块。这也允许回放包含助手输出的已保存子 Agent 通知；原始 Session 内容保持完整。转换后的空用户消息会被跳过，空工具结果则保留调用 id 和错误标记。其他不支持的输入块仍会以 `UNSUPPORTED_CONTENT` 失败。 当所有已声明工具都为延迟加载时，适配器会在列表开头添加非延迟的 `DeferredToolPlaceholder`，描述为 `Reserved placeholder that keeps deferred tool loading active; never call this tool.`。如与已声明工具重名，则添加数字后缀。占位工具没有执行器；调用会收到常规的工具不可用结果。真实工具仍在记录的添加位置才激活，addition-only 路由不会恢复已移除工具。空工具列表不会添加占位工具。
+所选 DeepSeek 模型会收到 harness 系统提示词、消息历史、工具 schema、停止序列与调用配置（`maxTokens`、`reasoningEffort`、`temperature`），不包含适配器撰写的提示词散文。提供方专用请求扩展字段留在模型输入之外。视觉模型通常接收 Files API 引用形式的用户与工具结果图片，其旁带附件句柄和请求预览尺寸。当前执行文件系统可以映射附件提供方的宿主对象时，它还会收到规范化对象路径；描述符会把该副本标记为只读，并警告规范化可能缩放或重新编码上传内容。Files 解析失败时，全部保留图片改用内联 base64；超出预算的较旧图片则在占位文本中保留当前请求已解析的访问方式。此前 assistant 轮次的推理内容会原样传回，无论该轮次是否调用了工具。 对于非法 JSON 或非对象的历史工具参数，Messages 发送 `{}`。此参数兜底保留调用 ID、工具名和工具结果；原始参数仍保留在 Session 日志中。新生成的 Messages 工具参数仍须是有效 JSON 对象。 Messages 会省略用户消息和工具结果中的 `reasoning` 与 `tool-call` 块。这也允许回放包含助手输出的已保存子 Agent 通知；原始 Session 内容保持完整。转换后的空用户消息会被跳过，空工具结果则保留调用 id 和错误标记。其他不支持的输入块仍会以 `UNSUPPORTED_CONTENT` 失败。 当所有已声明工具都为延迟加载时，适配器会在列表开头添加非延迟的 `DeferredToolPlaceholder`，描述为 `Reserved placeholder that keeps deferred tool loading active; never call this tool.`。如与已声明工具重名，则添加数字后缀。占位工具没有执行器；调用会收到常规的工具不可用结果。占位工具不会改变真实工具声明。共享的[工具更新投影](../llm/README.zh.md#known-limitations-and-deferred-work)在移除立即加载工具时重建 addition-only 基线，后续添加仍保持延迟加载。空工具列表不会添加占位工具。
 
 #### Token 影响
 
diff --git a/packages/llm/llm-deepseek/tests/adapter.e2e.ts b/packages/llm/llm-deepseek/tests/adapter.e2e.ts
index d5a359f986..6c5264c2a8 100644
--- a/packages/llm/llm-deepseek/tests/adapter.e2e.ts
+++ b/packages/llm/llm-deepseek/tests/adapter.e2e.ts
@@ -50,7 +50,7 @@ async function boot(models?: Messages.Options['models']) {
 const tool = { name: 'lookup_value', description: 'Read the requested value. Always call this tool to obtain a value.', parameters: { type: 'object', properties: { key: { type: 'string' } }, required: ['key'] } }
 
 describe.skipIf(!process.env.DEEPSEEK_API_KEY)('DeepSeek Messages real API', () => {
-  it('calls a deferred tool after every baseline tool has been removed', async () => {
+  it('calls a replacement tool after every baseline tool has been removed', async () => {
     const model = 'deepseek-flash'
     const ctx = await boot([{ id: model, toolUpdate: 'addition-only' }])
     const update = createDeveloperMessage({ source: { kind: 'tool-registry' }, content: [
diff --git a/packages/llm/llm-deepseek/tests/adapter.spec.ts b/packages/llm/llm-deepseek/tests/adapter.spec.ts
index a113e2a1ed..f36cb3cdeb 100644
--- a/packages/llm/llm-deepseek/tests/adapter.spec.ts
+++ b/packages/llm/llm-deepseek/tests/adapter.spec.ts
@@ -276,7 +276,7 @@ describe('direct Messages HTTP', () => {
 })
 
 describe('Cordis provider composition', () => {
-  it('keeps a replacement tool deferred after the last baseline tool is removed', async () => {
+  it('declares the replacement immediately after the last baseline tool is removed', async () => {
     const { ctx, http } = await boot()
     const baseline = { name: 'old_tool', description: 'Old tool', parameters: {} }
     const added = { name: 'new_tool', description: 'New tool', parameters: {} }
@@ -290,12 +290,10 @@ describe('Cordis provider composition', () => {
     const response = await assemble(ctx.llm.stream(request), 'deepseek-flash')
     expect(response.assembler.finish.kind).toBe('stop')
     expect(http.requests[0]?.body.tools).toEqual([
-      { name: 'DeferredToolPlaceholder', description: 'Reserved placeholder that keeps deferred tool loading active; never call this tool.', input_schema: { type: 'object', properties: {} } },
-      { name: added.name, description: added.description, input_schema: {}, defer_loading: true },
+      { name: added.name, description: added.description, input_schema: {} },
     ])
     expect(http.requests[0]?.body.messages).toEqual([
       { role: 'user', content: [{ type: 'text', text: 'hello' }] },
-      { role: 'system', content: [{ type: 'tool_addition', tool: { type: 'tool_reference', name: added.name } }] },
     ])
     expect(JSON.stringify(request)).toBe(saved)
   })
diff --git a/packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts b/packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts
index eb58b2c54e..b1eb397763 100644
--- a/packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts
+++ b/packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts
@@ -24,6 +24,10 @@ export function apply(ctx: Context): void {
         agent.ctx.tools.register(defineContentToolFixture({
           name: 'snapshot_ping', description: 'Return pong once.', parameters: {},
           async execute() {
+            agent.ctx.tools.register(defineContentToolFixture({
+              name: 'snapshot_later', description: 'Return later.', parameters: {},
+              async execute() { return [{ type: 'text', text: 'later' }] },
+            }))
             return [{ type: 'text', text: 'pong' }]
           },
         }))
@@ -42,13 +46,18 @@ export function apply(ctx: Context): void {
         assert.deepEqual(request.tools?.map(tool => tool.name), ['snapshot_initial'])
         break
       case 2:
+        assert.deepEqual(request.tools, [
+          { name: 'snapshot_ping', description: 'Return pong once.', input_schema: { type: 'object', properties: {} } },
+        ])
+        assert.deepEqual(request.messages.filter(message => message.role === 'system'), [])
+        break
       case 3:
         assert.deepEqual(request.tools, [
-          { name: 'DeferredToolPlaceholder', description: 'Reserved placeholder that keeps deferred tool loading active; never call this tool.', input_schema: { type: 'object', properties: {} } },
-          { name: 'snapshot_ping', description: 'Return pong once.', input_schema: { type: 'object', properties: {} }, defer_loading: true },
+          { name: 'snapshot_ping', description: 'Return pong once.', input_schema: { type: 'object', properties: {} } },
+          { name: 'snapshot_later', description: 'Return later.', input_schema: { type: 'object', properties: {} }, defer_loading: true },
         ])
         assert.deepEqual(request.messages.filter(message => message.role === 'system'), [
-          { role: 'system', content: [{ type: 'tool_addition', tool: { type: 'tool_reference', name: 'snapshot_ping' } }] },
+          { role: 'system', content: [{ type: 'tool_addition', tool: { type: 'tool_reference', name: 'snapshot_later' } }] },
         ])
         break
       default:
diff --git a/packages/llm/llm-pi-ai/tests/conversation-updates.spec.ts b/packages/llm/llm-pi-ai/tests/conversation-updates.spec.ts
index 467d691603..508eb39d82 100644
--- a/packages/llm/llm-pi-ai/tests/conversation-updates.spec.ts
+++ b/packages/llm/llm-pi-ai/tests/conversation-updates.spec.ts
@@ -289,7 +289,7 @@ describe('historical tool availability on the wire', () => {
     ] })
   })
 
-  it('anchors additions in Responses without emitting removal updates', async () => {
+  it('rebuilds the Responses baseline after its immediate tool is removed', async () => {
     const update = addition()
     const remove = createDeveloperMessage({ source: { kind: 'tool-registry' }, content: [{ type: 'tool-removal', toolName: 'read' }] })
     const { requests } = await send('openai', 'gpt-5.4', {
@@ -299,9 +299,11 @@ describe('historical tool availability on the wire', () => {
       ] },
     })
     expect(requests).toHaveLength(1)
-    expect(requests[0]).toHaveProperty('input', expect.arrayContaining([
-      expect.objectContaining({ type: 'additional_tools', tools: [expect.objectContaining({ name: 'search' })] }),
-    ]))
+    expect(requests[0]).toHaveProperty('tools', [expect.objectContaining({ name: 'search' })])
+    expect(requests[0]).toHaveProperty('input', [
+      { role: 'user', content: [{ type: 'input_text', text: 'first' }] },
+      { role: 'developer', content: 'Instruction one.\nInstruction two.' },
+    ])
     expect(JSON.stringify(requests[0])).not.toContain('tool_removal')
     expect(JSON.stringify(requests[0])).not.toContain('Read a file')
   })
diff --git a/packages/llm/llm/README.i18n.yaml b/packages/llm/llm/README.i18n.yaml
index dc90c35071..53db29f075 100644
--- a/packages/llm/llm/README.i18n.yaml
+++ b/packages/llm/llm/README.i18n.yaml
@@ -54,8 +54,8 @@
   en: a81634136baef72f
   zh: b92dda883986b0e1
 /deepseek-ai-dsh-llm/known-limitations-and-deferred-work:
-  en: d60b9121545c99ec
-  zh: 3d4434a0e427470b
+  en: 94e36b92eb0dcc78
+  zh: c8b99bf993411f11
 /deepseek-ai-dsh-llm/known-limitations-and-deferred-work/dev-note:
   en: ecbc333b88e14d88
   zh: 77c725d92efd8646
diff --git a/packages/llm/llm/README.md b/packages/llm/llm/README.md
index e2c319f53d..203dde885d 100644
--- a/packages/llm/llm/README.md
+++ b/packages/llm/llm/README.md
@@ -180,7 +180,7 @@ These limits define where this service stops and other packages or future work b
 - **Variants normally require a producer** — `prefill`, per-tool `strict`, block `cache` hints, and the `agent` message-source variant have no producer ([Agent Note](../../../.agents/notes/archived/simplification/2026-07-04-prune-producerless-vocabulary-variants.md)).
 - **`BlockAssembler` handles core block kinds only** — a plugin-added block type whose stream is never closed by `block-end` makes `blocks()` throw.
 - **`GenerateOptions.sessionId` is a locally-declared brand** — importing dsh-session's `SessionId` would create a dependency cycle.
-- **Tool updates require session history** — `GenerateOptions.tools` contains active definitions. `toolHistory` supplies the initial declarations and historically resolved additions from `Session.toolHistory()`. At adapter dispatch, `projectToolUpdates` constructs deferred declarations and retains removed definitions for `in-history`; `addition-only` omits removed definitions and removal messages. Unsupported routes receive active tools without developer messages or `deferLoading`. Missing history or a request prefix omitting recorded updates falls back to current declarations without developer messages. Explicitly deferred baseline tools remain deferred until their first retained addition block; declaring a deferred tool does not activate it.
+- **Tool updates require session history** — `GenerateOptions.tools` contains active definitions. `toolHistory` supplies the initial declarations and historically resolved additions from `Session.toolHistory()`. At adapter dispatch, `projectToolUpdates` constructs deferred declarations and retains removed definitions for `in-history`; `addition-only` omits removed definitions and removal messages. Removing an immediate baseline tool on an addition-only route rebuilds that route's baseline from the declarations available after that update. Superseded tool blocks are omitted while unrelated content survives; subsequent additions remain deferred. Removing only later-added tools preserves the earlier baseline. Unsupported routes receive active tools without developer messages or `deferLoading`. Missing history or a request prefix omitting recorded updates falls back to current declarations without developer messages. Explicitly deferred tools become immediate during a rebuild only if an addition has already activated them; unactivated declarations remain deferred.
 
 <a id="dev-note"></a>
 ### Dev Note
diff --git a/packages/llm/llm/README.zh.md b/packages/llm/llm/README.zh.md
index 2fd7de3175..38a7f235be 100644
--- a/packages/llm/llm/README.zh.md
+++ b/packages/llm/llm/README.zh.md
@@ -180,7 +180,7 @@ const configure = (maxTokens: number): ConfigureCall =>
 - **变体通常要求实际产生方**——`prefill`、逐工具 `strict`、内容块 `cache` 提示和 `agent` 消息来源变体都没有产生方（见 [Agent Note](../../../.agents/notes/archived/simplification/2026-07-04-prune-producerless-vocabulary-variants.md)）。
 - **`BlockAssembler` 只处理核心块类型**——插件添加块类型的流若从未由 `block-end` 关闭，`blocks()` 会抛出异常。
 - **`GenerateOptions.sessionId` 是本地声明的品牌类型**——导入 dsh-session 的 `SessionId` 会产生依赖循环。
-- **工具更新需要会话历史** — `GenerateOptions.tools` 包含当前有效定义。`toolHistory` 提供 `Session.toolHistory()` 派生的初始声明及已解析历史定义的添加记录。适配器分发时，`projectToolUpdates` 构造延迟声明，并在 `in-history` 模式保留已移除定义；`addition-only` 省略已移除定义和移除消息。不支持更新的路由接收有效工具，不携带 developer 消息或 `deferLoading`。缺少历史或请求前缀遗漏已记录更新时，回退为当前声明且不发送 developer 消息。 显式延迟加载的初始工具在首个保留的添加块出现前保持延迟状态；声明延迟加载工具不会使其激活。
+- **工具更新需要会话历史** — `GenerateOptions.tools` 包含当前有效定义。`toolHistory` 提供 `Session.toolHistory()` 派生的初始声明及已解析历史定义的添加记录。适配器分发时，`projectToolUpdates` 构造延迟声明，并在 `in-history` 模式保留已移除定义；`addition-only` 省略已移除定义和移除消息。在 addition-only 路由移除基线中的立即加载工具时，使用该次更新后的可用声明重建此路由的基线。已被取代的工具块会被省略，其他内容保留；后续添加仍保持延迟加载。仅移除后来添加的工具时保留早期基线。不支持更新的路由接收有效工具，不携带 developer 消息或 `deferLoading`。缺少历史或请求前缀遗漏已记录更新时，回退为当前声明且不发送 developer 消息。显式延迟工具仅在已有添加记录将其激活时，才会在重建时变为立即加载；尚未激活的声明仍保持延迟加载。
 
 <a id="dev-note"></a>
 ### 开发备注
diff --git a/packages/llm/llm/src/content.ts b/packages/llm/llm/src/content.ts
index cecbfba938..bec3190d1a 100644
--- a/packages/llm/llm/src/content.ts
+++ b/packages/llm/llm/src/content.ts
@@ -3,6 +3,7 @@
 import type { ContentBlock, ImageBlock, LlmImageRequestBudget, ToolSchema, ToolUpdate, ToolHistory } from './types.ts'
 import type { RequestMessage } from './types.ts'
 import type { Message } from './message.ts'
+import type { MessageId } from './brand.ts'
 import type {
   AttachmentStore, FileAttachmentRef, ImageAttachmentRef, ImageMediaType, RequestImageAttachment,
 } from '@deepseek-ai/dsh-attachment'
@@ -411,10 +412,43 @@ function toolDeclarations(
   }
 }
 
+/** Reset only when a removal changes the initially loaded definitions; later removals retain the earlier prefix. */
+function rebaseAdditionOnlyHistory(
+  history: ToolHistory,
+  messages: ReadonlyMap<MessageId, readonly ContentBlock[]>,
+): ToolHistory {
+  const available = new Map(history.tools.map(tool => [tool.name, tool]))
+  let baseline = history.tools
+  let immediate = new Set(baseline.filter(tool => !tool.deferLoading).map(tool => tool.name))
+  let retainedFrom = 0
+  for (const [index, update] of history.updates.entries()) {
+    const additions = new Map(update.additions.map(tool => [tool.name, tool]))
+    let reset = false
+    // Completeness was checked before projection; Session resolves every addition's definition.
+    for (const block of messages.get(update.messageId) as readonly ContentBlock[]) {
+      if (block.type === 'tool-addition') {
+        const { deferLoading: _loading, ...tool } = additions.get(block.toolName) as ToolSchema
+        available.set(tool.name, tool)
+      } else if (block.type === 'tool-removal') {
+        reset ||= immediate.has(block.toolName)
+        available.delete(block.toolName)
+      }
+    }
+    if (reset) {
+      baseline = [...available.values()]
+      immediate = new Set(baseline.filter(tool => !tool.deferLoading).map(tool => tool.name))
+      retainedFrom = index + 1
+    }
+  }
+  return retainedFrom === 0 ? history : { tools: baseline, updates: history.updates.slice(retainedFrom) }
+}
+
 /**
  * Construct provider declarations from session-folded history without changing logged active tools.
  * Unsupported routes and incomplete history use current declarations without developer updates.
  * Explicitly deferred baseline tools become available only after their first retained addition.
+ * Addition-only routes rebuild their baseline when an initially loaded tool is removed;
+ * later additions remain deferred and superseded tool blocks are omitted without dropping other content.
  * @param messages - complete request inputs, or the prefix selected for an auxiliary call.
  * @param tools - currently active tool schemas.
  * @param toolUpdate - the resolved route's update mode.
@@ -440,16 +474,18 @@ export function projectToolUpdates(
     // Current schemas alone cannot resolve definitions referenced by past updates.
     return { messages: withoutDeveloperMessages(messages), tools }
   }
-  const messageIds = new Set(messages.flatMap(message => message.role === 'developer' ? [message.id] : []))
-  if (history.updates.some(update => !messageIds.has(update.messageId))) {
+  const updates = new Map(messages.flatMap(message => message.role === 'developer' ? [[message.id, message.content] as const] : []))
+  if (history.updates.some(update => !updates.has(update.messageId))) {
     // An auxiliary prefix may omit updates needed to activate historical declarations.
     return { messages: withoutDeveloperMessages(messages), tools }
   }
 
-  const declarations = toolDeclarations(tools, toolUpdate, history)
+  const projectedHistory = toolUpdate === 'addition-only' ? rebaseAdditionOnlyHistory(history, updates) : history
+  const declarations = toolDeclarations(tools, toolUpdate, projectedHistory)
   const updateIds = new Set(history.updates.map(update => update.messageId))
+  const retainedUpdateIds = new Set(projectedHistory.updates.map(update => update.messageId))
   // Deferred baseline tools still need their first addition to become available.
-  const offered = new Set(history.tools.filter(tool => !tool.deferLoading).map(tool => tool.name))
+  const offered = new Set(projectedHistory.tools.filter(tool => !tool.deferLoading).map(tool => tool.name))
   const projectedMessages: RequestMessage[] = []
   for (const message of messages) {
     if (message.role !== 'developer') {
@@ -462,6 +498,7 @@ export function projectToolUpdates(
     const content = message.content.filter((block) => {
       switch (block.type) {
         case 'tool-addition':
+          if (!retainedUpdateIds.has(message.id)) return false
           // Only declared tools that are not already available need activation.
           if (!declarations.has(block.toolName) || offered.has(block.toolName)) return false
           offered.add(block.toolName)
diff --git a/packages/llm/llm/tests/content.spec.ts b/packages/llm/llm/tests/content.spec.ts
index 19bb84e460..cf9d13594f 100644
--- a/packages/llm/llm/tests/content.spec.ts
+++ b/packages/llm/llm/tests/content.spec.ts
@@ -501,9 +501,8 @@ describe('projectToolUpdates', () => {
     expect(projected.tools).toEqual([])
     expect(projected.messages).toEqual([prompt, prompt, prompt])
     const partial = projectToolUpdates([prompt, swapped, prompt], [fetch], 'addition-only', { tools: [search], updates: [history.updates[0]!] })
-    expect(partial.tools).toEqual([{ ...fetch, deferLoading: true }])
-    expect(partial.messages[1]).not.toBe(swapped)
-    expect(roles(partial.messages)).toEqual([[{ type: 'tool-addition', toolName: 'fetch' }]])
+    expect(partial.tools).toEqual([fetch])
+    expect(partial.messages).toEqual([prompt, prompt])
   })
 
   it('re-offers an unchanged restored tool through its recorded blocks', () => {
@@ -521,8 +520,8 @@ describe('projectToolUpdates', () => {
       [{ type: 'tool-addition', toolName: 'search' }],
     ])
     const additionOnly = projectToolUpdates(messages, [search, fetch], 'addition-only', history)
-    expect(additionOnly.tools).toEqual([search, fetch])
-    expect(roles(additionOnly.messages)).toEqual([])
+    expect(additionOnly.tools).toEqual([fetch, { ...search, deferLoading: true }])
+    expect(roles(additionOnly.messages)).toEqual([[{ type: 'tool-addition', toolName: 'search' }]])
   })
 
   it('declares a deferred tool once across removal and re-addition', () => {
@@ -541,4 +540,72 @@ describe('projectToolUpdates', () => {
     const additionOnly = projectToolUpdates(messages, [search, fetch], 'addition-only', history)
     expect(roles(additionOnly.messages)).toEqual([[{ type: 'tool-addition', toolName: 'fetch' }]])
   })
+
+  it('rebases on a baseline removal and defers additions after the reset', () => {
+    const later = { name: 'later', description: 'Later', parameters: {} }
+    const added = developer([{ type: 'tool-addition', toolName: 'fetch' }, { type: 'text', text: 'Keep this guidance.' }])
+    const removed = developer([{ type: 'tool-removal', toolName: 'search' }, { type: 'text', text: 'Keep this too.' }])
+    const next = developer([{ type: 'tool-addition', toolName: 'later' }])
+    const history: ToolHistory = { tools: [search], updates: [
+      { messageId: added.id, additions: [fetch] }, { messageId: removed.id, additions: [] },
+      { messageId: next.id, additions: [later] },
+    ] }
+    const messages = [prompt, added, prompt, removed, prompt, next]
+    const saved = JSON.stringify({ messages, history })
+    const projected = projectToolUpdates(messages, [fetch, later], 'addition-only', history)
+    expect(projected.tools).toEqual([fetch, { ...later, deferLoading: true }])
+    expect(roles(projected.messages)).toEqual([
+      [{ type: 'text', text: 'Keep this guidance.' }], [{ type: 'text', text: 'Keep this too.' }],
+      [{ type: 'tool-addition', toolName: 'later' }],
+    ])
+    expect(projected.messages.at(-1)).toBe(next)
+    expect(JSON.stringify({ messages, history })).toBe(saved)
+  })
+
+  it('keeps the original baseline when only later-added tools are replaced', () => {
+    const replacement = { name: 'replacement', description: 'Replacement', parameters: {} }
+    const added = developer([{ type: 'tool-addition', toolName: 'fetch' }])
+    const swapped = developer([{ type: 'tool-addition', toolName: 'replacement' }, { type: 'tool-removal', toolName: 'fetch' }])
+    const history: ToolHistory = { tools: [search], updates: [
+      { messageId: added.id, additions: [fetch] }, { messageId: swapped.id, additions: [replacement] },
+    ] }
+    const projected = projectToolUpdates([prompt, added, prompt, swapped], [search, replacement], 'addition-only', history)
+    expect(projected.tools).toEqual([search, { ...replacement, deferLoading: true }])
+    expect(projected.messages[0]).toBe(prompt)
+    expect(roles(projected.messages)).toEqual([[{ type: 'tool-addition', toolName: 'replacement' }]])
+  })
+
+  it.each([false, true])('preserves explicitly deferred baseline activation across a reset (activated=%s)', (activated) => {
+    const deferred = { name: 'pending', description: 'Pending', parameters: {}, deferLoading: true as const }
+    const activate = developer([{ type: 'tool-addition', toolName: 'pending' }])
+    const swapped = developer([{ type: 'tool-removal', toolName: 'search' }, { type: 'tool-addition', toolName: 'fetch' }])
+    const history: ToolHistory = { tools: [search, deferred], updates: [
+      ...activated ? [{ messageId: activate.id, additions: [deferred] }] : [],
+      { messageId: swapped.id, additions: [fetch] },
+    ] }
+    const messages = [prompt, ...activated ? [activate] : [], swapped]
+    const projected = projectToolUpdates(messages, [fetch, deferred], 'addition-only', history)
+    expect(projected.tools).toEqual([
+      { name: 'pending', description: 'Pending', parameters: {}, ...activated ? {} : { deferLoading: true } }, fetch,
+    ])
+    expect(roles(projected.messages)).toEqual([])
+    const reoffered = developer([{ type: 'tool-addition', toolName: 'pending' }])
+    const later = projectToolUpdates([...messages, reoffered], [fetch, deferred], 'addition-only', {
+      tools: history.tools, updates: [...history.updates, { messageId: reoffered.id, additions: [deferred] }],
+    })
+    expect(later.tools).toEqual(projected.tools)
+    expect(roles(later.messages)).toEqual(activated ? [] : [[{ type: 'tool-addition', toolName: 'pending' }]])
+  })
+
+  it('uses each rebuilt baseline to detect subsequent replacements', () => {
+    const replacement = { name: 'replacement', description: 'Replacement', parameters: {} }
+    const first = developer([{ type: 'tool-removal', toolName: 'search' }, { type: 'tool-addition', toolName: 'fetch' }])
+    const second = developer([{ type: 'tool-removal', toolName: 'fetch' }, { type: 'tool-addition', toolName: 'replacement' }])
+    const history: ToolHistory = { tools: [search], updates: [
+      { messageId: first.id, additions: [fetch] }, { messageId: second.id, additions: [replacement] },
+    ] }
+    const projected = projectToolUpdates([prompt, first, prompt, second], [replacement], 'addition-only', history)
+    expect(projected.tools).toEqual([replacement])
+    expect(roles(projected.messages)).toEqual([])
+  })
 })
diff --git a/snapshots/session/deepseek-deferred-tools/session.v4.jsonl b/snapshots/session/deepseek-deferred-tools/session.v4.jsonl
index b0a9610be2..85d8585724 100644
--- a/snapshots/session/deepseek-deferred-tools/session.v4.jsonl
+++ b/snapshots/session/deepseek-deferred-tools/session.v4.jsonl
@@ -12,18 +12,20 @@
 {"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_initial"]},"reason":"initial"}}
 {"type":"request/context","data":{"provider":"deepseek-official","model":"deepseek-v4-flash"}}
 {"type":"session/title","data":{"title":"Call snapshot_initial, then snapshot_pin","messageSeqs":[8],"source":{"kind":"fallback"}}}
-{"type":"assistant/message","data":{"turn":1,"step":1,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_initial","name":"snapshot_initial","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:4}}"},"usage":{"inputTokens":10,"outputTokens":5},"stream":[{"type":"chunk","time":1790049391235,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1790049391235,"index":0,"dt":[],"id":"call_initial","name":"snapshot_initial","args":["{}"]},{"type":"chunk","time":1790049391235,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_initial","name":"snapshot_initial","arguments":"{}"}}},{"type":"chunk","time":1790049391235,"chunk":{"type":"usage","usage":{"inputTokens":10,"outputTokens":5}}},{"type":"chunk","time":1790049391235,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
+{"type":"assistant/message","data":{"turn":1,"step":1,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_initial","name":"snapshot_initial","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:4}}"},"usage":{"inputTokens":10,"outputTokens":5},"stream":[{"type":"chunk","time":1792658934151,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1792658934151,"index":0,"dt":[],"id":"call_initial","name":"snapshot_initial","args":["{}"]},{"type":"chunk","time":1792658934151,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_initial","name":"snapshot_initial","arguments":"{}"}}},{"type":"chunk","time":1792658934151,"chunk":{"type":"usage","usage":{"inputTokens":10,"outputTokens":5}}},{"type":"chunk","time":1792658934151,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
 {"type":"tool/call","data":{"turn":1,"step":1,"callId":"call_initial","name":"snapshot_initial","arguments":"{}"}}
 {"type":"tool/result","data":{"turn":1,"step":1,"message":{"role":"tool","source":{"kind":"tool","callId":"call_initial"},"toolCallId":"call_initial","content":[{"type":"text","text":"snapshot_ping is available."}],"isError":false,"id":"{{message:5}}"}},"sourceEventSeqs":[14],"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":1}}
 {"type":"step/start","data":{"turn":1,"step":2}}
 {"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_ping"]},"reason":"change"}}
 {"type":"developer/message","data":{"turn":1,"step":2,"message":{"source":{"kind":"tool-registry"},"content":[{"type":"tool-addition","toolName":"snapshot_ping"},{"type":"tool-removal","toolName":"snapshot_initial"}],"role":"developer","id":"{{message:6}}"},"headerSeq":18},"surfaceOp":"append"}
-{"type":"assistant/message","data":{"turn":1,"step":2,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:7}}"},"stream":[{"type":"chunk","time":1790049391255,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1790049391255,"index":0,"dt":[],"id":"call_dynamic_ping","name":"snapshot_ping","args":["{}"]},{"type":"chunk","time":1790049391255,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}}},{"type":"chunk","time":1790049391255,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
+{"type":"assistant/message","data":{"turn":1,"step":2,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:7}}"},"stream":[{"type":"chunk","time":1792658934170,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1792658934170,"index":0,"dt":[],"id":"call_dynamic_ping","name":"snapshot_ping","args":["{}"]},{"type":"chunk","time":1792658934170,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}}},{"type":"chunk","time":1792658934170,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
 {"type":"tool/call","data":{"turn":1,"step":2,"callId":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}}
 {"type":"tool/result","data":{"turn":1,"step":2,"message":{"role":"tool","source":{"kind":"tool","callId":"call_dynamic_ping"},"toolCallId":"call_dynamic_ping","content":[{"type":"text","text":"pong"}],"isError":false,"id":"{{message:8}}"}},"sourceEventSeqs":[21],"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":2}}
 {"type":"step/start","data":{"turn":1,"step":3}}
-{"type":"assistant/message","data":{"turn":1,"step":3,"message":{"role":"assistant","content":[{"type":"text","text":"DONE"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:9}}"},"usage":{"inputTokens":12,"outputTokens":2,"cacheReadTokens":10},"stream":[{"type":"chunk","time":1790049391270,"chunk":{"type":"block-start","index":0,"blockType":"text"}},{"type":"text-chunks","time0":1790049391270,"index":0,"dt":[],"texts":["DONE"]},{"type":"chunk","time":1790049391270,"chunk":{"type":"block-end","index":0,"block":{"type":"text","text":"DONE"}}},{"type":"chunk","time":1790049391270,"chunk":{"type":"usage","usage":{"inputTokens":12,"outputTokens":2,"cacheReadTokens":10}}},{"type":"chunk","time":1790049391270,"chunk":{"type":"finish","reason":{"kind":"stop"}}}]},"surfaceOp":"append"}
+{"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_later","snapshot_ping"]},"reason":"change"}}
+{"type":"developer/message","data":{"turn":1,"step":3,"message":{"source":{"kind":"tool-registry"},"content":[{"type":"tool-addition","toolName":"snapshot_later"}],"role":"developer","id":"{{message:9}}"},"headerSeq":25},"surfaceOp":"append"}
+{"type":"assistant/message","data":{"turn":1,"step":3,"message":{"role":"assistant","content":[{"type":"text","text":"DONE"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:10}}"},"usage":{"inputTokens":12,"outputTokens":2,"cacheReadTokens":10},"stream":[{"type":"chunk","time":1792658934186,"chunk":{"type":"block-start","index":0,"blockType":"text"}},{"type":"text-chunks","time0":1792658934186,"index":0,"dt":[],"texts":["DONE"]},{"type":"chunk","time":1792658934186,"chunk":{"type":"block-end","index":0,"block":{"type":"text","text":"DONE"}}},{"type":"chunk","time":1792658934186,"chunk":{"type":"usage","usage":{"inputTokens":12,"outputTokens":2,"cacheReadTokens":10}}},{"type":"chunk","time":1792658934186,"chunk":{"type":"finish","reason":{"kind":"stop"}}}]},"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":3}}
 {"type":"turn/end","data":{"turn":1,"reason":{"kind":"completed"}}}
diff --git a/snapshots/session/deepseek-deferred-tools/snapshot.yml b/snapshots/session/deepseek-deferred-tools/snapshot.yml
index a99cb0dcc1..6a4e4e6626 100644
--- a/snapshots/session/deepseek-deferred-tools/snapshot.yml
+++ b/snapshots/session/deepseek-deferred-tools/snapshot.yml
@@ -6,4 +6,4 @@ recording: authored
 header:
   class: deepseek-deferred-tools
   pin: true
-  changes: 1
+  changes: 2
diff --git a/snapshots/session/deepseek-deferred-tools/tool-schemas.expected.json b/snapshots/session/deepseek-deferred-tools/tool-schemas.expected.json
index ee53a9dda8..6103ea1762 100644
--- a/snapshots/session/deepseek-deferred-tools/tool-schemas.expected.json
+++ b/snapshots/session/deepseek-deferred-tools/tool-schemas.expected.json
@@ -19,6 +19,24 @@
           "properties": {}
         }
       }
+    ],
+    [
+      {
+        "name": "snapshot_later",
+        "description": "Return later.",
+        "parameters": {
+          "type": "object",
+          "properties": {}
+        }
+      },
+      {
+        "name": "snapshot_ping",
+        "description": "Return pong once.",
+        "parameters": {
+          "type": "object",
+          "properties": {}
+        }
+      }
     ]
   ]
 }

From be6ed7f0aa8428dcf06ea591cbbd6bfe46f30670 Mon Sep 17 00:00:00 2001
From: Yixiang Tu <tuyixiang@deepseek.com>
Date: Thu, 22 Oct 2026 17:37:52 +0800
Subject: [PATCH 22/32] fix(llm): rebuild addition-only history on every
 removal

---
 .../2026-09-20-dynamic-tool-updates.i18n.yaml | 12 +++----
 .../2026-09-20-dynamic-tool-updates.md        |  6 ++--
 .../2026-09-20-dynamic-tool-updates.zh.md     |  6 ++--
 packages/llm/llm-deepseek/README.i18n.yaml    |  4 +--
 packages/llm/llm-deepseek/README.md           |  2 +-
 packages/llm/llm-deepseek/README.zh.md        |  2 +-
 .../tests/fixtures/deferred-tools.ts          | 18 ++++++++--
 packages/llm/llm/README.i18n.yaml             |  4 +--
 packages/llm/llm/README.md                    |  2 +-
 packages/llm/llm/README.zh.md                 |  2 +-
 packages/llm/llm/src/content.ts               | 33 ++++---------------
 packages/llm/llm/tests/content.spec.ts        | 25 +++++++++-----
 .../deepseek-deferred-tools/session.v4.jsonl  | 17 +++++++---
 .../deepseek-deferred-tools/snapshot.yml      |  2 +-
 .../tool-schemas.expected.json                | 18 ++++++++++
 15 files changed, 90 insertions(+), 63 deletions(-)

diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
index 357c16c769..4215b56930 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
@@ -9,11 +9,11 @@
   en: 97fe58a13135b4a1
   zh: 7490373a8d941da5
 /agent-note-active-tool-headers-and-stateful-request-projection/decision:
-  en: b6770e6bd8ff17ee
-  zh: cc409f4e9f9be495
+  en: 2bbb6ab17f2cbb1a
+  zh: bb925627b6798548
 /agent-note-active-tool-headers-and-stateful-request-projection/alternatives-considered:
-  en: 69370c9cb0014985
-  zh: ccba65967ab1c34d
+  en: f1271717cbe0d4a0
+  zh: 367ad512ad08b221
 /agent-note-active-tool-headers-and-stateful-request-projection/consequences:
-  en: cabc2b9d378d186e
-  zh: 7aa21854f43bf8e8
+  en: aa3e68c78ac3f666
+  zh: 5ec40c83183fc7e0
diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
index 6421cb7e43..2f75132d51 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
@@ -14,7 +14,7 @@ Plugin and MCP tools change during conversations. Providers differ in whether th
 
 `Session.toolHistory()` caches a capability-independent fold of committed headers and developer messages. First access restores inherited events; later reads consume only unseen events. Immutable snapshots carry initial declarations and ordered update identities with additions resolved through their historical headers. Explicit series starts and changed retained definitions rebuild declarations. Restoring a retained name with an unchanged definition continues the series: the projection keeps the declaration unchanged and lets the recorded addition re-offer the tool after its earlier removal, so a removal never disables a declared tool and a loading mode never rewrites an earlier declaration.
 
-Loop and compaction requests carry this snapshot as `GenerateOptions.toolHistory`. At adapter dispatch, `projectToolUpdates` uses the prepared route's `toolUpdate`. Unsupported routes receive active definitions without `deferLoading` or developer messages. Supported routes defer historical additions; `in-history` retains removed definitions and removal blocks, while `addition-only` omits both. On addition-only routes, removing an immediate baseline tool rebuilds the route's baseline after that update: the initial declarations already change, so retaining superseded activation blocks cannot preserve the full conversation prefix. Previously activated tools become immediate; explicitly deferred declarations with no activation remain deferred. Subsequent additions remain deferred until their recorded activation. Superseded tool blocks are omitted without discarding other content in those messages. The Session fold and durable events remain capability-independent. Missing history or a request prefix omitting recorded updates uses current declarations without developer updates.
+Loop and compaction requests carry this snapshot as `GenerateOptions.toolHistory`. At adapter dispatch, `projectToolUpdates` uses the prepared route's `toolUpdate`. Unsupported routes receive active definitions without `deferLoading` or developer messages. Supported routes defer historical additions; `in-history` retains removed definitions and removal blocks, while `addition-only` omits both. On addition-only routes, removing any tool rebuilds the route's baseline after that update: the request declarations change even when the removed tool was activated later, so retaining superseded activation blocks cannot preserve the full conversation prefix. Previously activated tools become immediate; explicitly deferred declarations with no activation remain deferred. Subsequent additions remain deferred until their recorded activation. Superseded tool blocks are omitted without discarding other content in those messages. The Session fold and durable events remain capability-independent. Missing history or a request prefix omitting recorded updates uses current declarations without developer updates.
 
 DeepSeek translates projected updates into system-role `tool_addition` and `tool_removal` blocks and `defer_loading` declarations, sending the tool-changes beta header when update blocks occur. The default `deepseek-flash` entry declares `addition-only`; pi-ai declares no mode. Chat and Trajectory display developer messages as context nodes, using localized tool-change notices: single changes show the tool name; multiple changes show counts and expandable name lists.
 
@@ -26,7 +26,7 @@ DeepSeek translates projected updates into system-role `tool_addition` and `tool
 
 **Scan the complete log on every request.** The cached fold consumes new events and supplies stable snapshots to ordinary and auxiliary calls without adding arbitrary synchronous history readers.
 
-**Rebuild whenever additions and removals occur together.** Replacing a later-added tool can preserve the prefix before its activation while the immediate baseline stays unchanged. Conversely, a removal-only update can remove the last immediate baseline tool. The reset therefore follows baseline removals, not the presence of both update kinds. A past reset cannot force every future addition to become immediate: each reset establishes a new baseline from which deferred additions resume.
+**Rebuild only for immediate baseline removals or mixed additions and removals.** Deferred tools also have request declarations; deleting a tool changes those declarations regardless of its activation position. Addition-only routes cannot express that deletion in history. Every removal therefore rebuilds the baseline, including removal-only updates and removals of later-activated tools. A past reset cannot force every future addition to become immediate: each reset establishes a new baseline from which deferred additions resume.
 
 **Reject same-name schema changes during tool registration.** This restriction is not enforced. Immediate failure for a plugin registering an incompatible tool requires comparing the new registration with historical definitions of tools called on each affected current surface, while excluding calls removed by compaction. That registration-time historical and scope-aware check is deferred because of its implementation complexity. Same-name schema changes remain allowed; they rebuild declarations and invalidate prefix reuse even on `in-history` routes.
 
@@ -36,6 +36,6 @@ Tool lists and logical update events are capability-independent; only outgoing d
 
 The authored [headless prompt/tool scenario](../../../../snapshots/session/dynamic-tool-prompt-updates/snapshot.yml) pins an appended prompt beside a deferred tool addition and verifies that the first request's messages stay unchanged. It shares the stable-prompt scenario's tool lifecycle and schema expectations.
 
-The [DeepSeek replacement scenario](../../../../snapshots/session/deepseek-deferred-tools/snapshot.yml) checks the rebuilt baseline and a subsequent deferred addition through Messages serialization. An adapter-local placeholder covers nonempty all-deferred requests that remain, including explicit deferred declarations and direct calls. It does not activate real tools. These checks establish request construction, not measured cache savings from rebuilding.
+The [DeepSeek replacement scenario](../../../../snapshots/session/deepseek-deferred-tools/snapshot.yml) checks a rebuilt baseline, a subsequent deferred addition, and removal of that later-activated tool through Messages serialization. An adapter-local placeholder covers nonempty all-deferred requests that remain, including explicit deferred declarations and direct calls. It does not activate real tools. These checks establish request construction, not measured cache savings from rebuilding.
 
 The [real DeepSeek SDK test](../../../../apps/cli/tests/profiles/sdk/dynamic-tool-cache.e2e.ts) measures the first request after a native tool addition with both unchanged and simultaneously updated instructions. Unique user history prevents a shared system-prompt cache hit from satisfying the preceding-input assertion. Removal checks tool availability without requiring cache retention; each case disables retries.
diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
index 86350a0318..36df584a80 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
@@ -14,7 +14,7 @@ Status: implemented
 
 `Session.toolHistory()` 缓存对已提交请求头和 developer 消息的归约，不依赖模型能力。首次访问恢复继承事件；后续读取仅处理新增事件。不可变快照携带初始声明和有序更新标识，添加定义通过历史请求头解析。显式新序列和保留定义变化会重建声明。以未变化的定义恢复保留名称时序列继续：投影保持声明不变，由记录的添加在先前移除之后重新提供该工具，因此移除不会禁用已声明的工具，加载模式也不会改写先前声明。
 
-循环和压缩请求通过 `GenerateOptions.toolHistory` 携带此快照。适配器分发时，`projectToolUpdates` 使用已准备路由的 `toolUpdate`。不支持的路由接收有效定义，不携带 `deferLoading` 或 developer 消息。支持的路由延迟历史添加；`in-history` 保留已移除定义和移除块，`addition-only` 则省略两者。在 addition-only 路由移除基线中的立即加载工具时，使用该次更新后的状态重建路由基线：初始声明已发生变化，保留已被取代的激活块无法保留完整对话前缀。此前已激活工具变为立即加载；没有激活记录的显式延迟声明仍保持延迟。后续添加在记录的激活位置前保持延迟加载。已被取代的工具块会被省略，但不会丢弃这些消息中的其他内容。Session 归约和持久事件仍不依赖模型能力。缺少历史或请求前缀遗漏已记录更新时，使用当前声明且不发送 developer 更新。
+循环和压缩请求通过 `GenerateOptions.toolHistory` 携带此快照。适配器分发时，`projectToolUpdates` 使用已准备路由的 `toolUpdate`。不支持的路由接收有效定义，不携带 `deferLoading` 或 developer 消息。支持的路由延迟历史添加；`in-history` 保留已移除定义和移除块，`addition-only` 则省略两者。在 addition-only 路由移除任何工具时，使用该次更新后的状态重建路由基线：即使被移除工具是后来激活的，请求声明也已发生变化，保留已被取代的激活块无法保留完整对话前缀。此前已激活工具变为立即加载；没有激活记录的显式延迟声明仍保持延迟。后续添加在记录的激活位置前保持延迟加载。已被取代的工具块会被省略，但不会丢弃这些消息中的其他内容。Session 归约和持久事件仍不依赖模型能力。缺少历史或请求前缀遗漏已记录更新时，使用当前声明且不发送 developer 更新。
 
 DeepSeek 把投影后的更新转换为 system 角色的 `tool_addition` 和 `tool_removal` 块以及 `defer_loading` 声明，在存在更新块时发送工具变更 beta 请求头。默认 `deepseek-flash` 条目声明 `addition-only`；pi-ai 不声明模式。Chat 和 Trajectory 将 developer 消息显示为上下文节点，工具变更使用本地化通知：单项变更显示工具名，多项变更显示数量及可展开的名称列表。
 
@@ -26,7 +26,7 @@ DeepSeek 把投影后的更新转换为 system 角色的 `tool_addition` 和 `to
 
 **每次请求扫描完整日志。** 缓存归约处理新事件，为普通和辅助调用提供稳定快照，不增加任意同步历史读取接口。
 
-**同时出现添加和移除就重建。** 替换后来添加的工具时，只要立即加载的基线未变，就仍可保留该工具激活之前的前缀。反之，仅包含移除的更新也可能移除最后一个立即加载的基线工具。因此，重置取决于基线工具移除，而不是两类更新是否同时出现。一次历史重置不能让所有后续添加都变为立即加载：每次重置确立新基线，后续添加继续采用延迟加载。
+**仅在移除立即加载的基线工具或同时添加和移除时重建。** 延迟工具也具有请求声明；删除工具会改变这些声明，与其激活位置无关。addition-only 路由无法通过历史表达删除。因此，每次移除都重建基线，包括仅移除的更新和移除后来激活的工具。一次历史重置不能让所有后续添加都变为立即加载：每次重置确立新基线，后续添加继续采用延迟加载。
 
 **在工具注册时拒绝同名 schema 变化。** 当前不执行此限制。要让注册不兼容工具的插件立即收到异常，需要将新注册与各受影响当前 surface 中已调用工具的历史定义比较，同时排除已被压缩移除的调用。由于实现复杂，注册时结合历史和作用域的检查留待后续实现。同名 schema 变化仍被允许；它们会重建声明，即使在 `in-history` 路由上也会使前缀复用失效。
 
@@ -36,6 +36,6 @@ DeepSeek 把投影后的更新转换为 system 角色的 `tool_addition` 和 `to
 
 手写的[无界面提示词／工具场景](../../../../snapshots/session/dynamic-tool-prompt-updates/snapshot.yml)钉住追加提示词与延迟工具添加同时发生的行为，并验证首次请求的消息保持不变。它复用稳定提示词场景的工具生命周期和 schema 期望值。
 
-[DeepSeek 替换场景](../../../../snapshots/session/deepseek-deferred-tools/snapshot.yml)通过 Messages 序列化验证重建后的基线和后续延迟添加。适配器内的占位工具覆盖仍然存在的非空全延迟请求，包括显式延迟声明和直接调用，不会激活真实工具。这些检查验证请求构造，不代表已经测量重建带来的缓存收益。
+[DeepSeek 替换场景](../../../../snapshots/session/deepseek-deferred-tools/snapshot.yml)通过 Messages 序列化验证重建后的基线、后续延迟添加，以及移除该后来激活的工具。适配器内的占位工具覆盖仍然存在的非空全延迟请求，包括显式延迟声明和直接调用，不会激活真实工具。这些检查验证请求构造，不代表已经测量重建带来的缓存收益。
 
 [真实 DeepSeek SDK 测试](../../../../apps/cli/tests/profiles/sdk/dynamic-tool-cache.e2e.ts) 分别在指令不变和指令同时更新时测量原生工具新增后的首次请求。独有的用户历史确保仅命中共享系统提示词缓存无法满足前序输入断言。移除场景检查工具可用性，不要求保留缓存；每个用例均禁用重试。
diff --git a/packages/llm/llm-deepseek/README.i18n.yaml b/packages/llm/llm-deepseek/README.i18n.yaml
index eb6b7092a7..dae2900fa7 100644
--- a/packages/llm/llm-deepseek/README.i18n.yaml
+++ b/packages/llm/llm-deepseek/README.i18n.yaml
@@ -63,8 +63,8 @@
   en: 1dc50052999253c6
   zh: 7abf968fc18bffcd
 /deepseek-ai-dsh-llm-deepseek/model-experience/deepseek-request/what-the-model-sees:
-  en: fda9111504c5af32
-  zh: 6306a70fdafbdb1b
+  en: 1b8d726045c386f9
+  zh: 8254d9f748decef3
 /deepseek-ai-dsh-llm-deepseek/model-experience/deepseek-request/token-effect:
   en: 67f4bfa42cbee911
   zh: 5e9dc9bc07253686
diff --git a/packages/llm/llm-deepseek/README.md b/packages/llm/llm-deepseek/README.md
index 6c3717c4d7..ecce4d514b 100644
--- a/packages/llm/llm-deepseek/README.md
+++ b/packages/llm/llm-deepseek/README.md
@@ -170,7 +170,7 @@ Read these pages when the package-level contract is not enough. They move from t
 
 #### What the model sees
 
-The selected DeepSeek model receives the harness system prompt, message history, tool schemas, stop sequences, and call config (`maxTokens`, `reasoningEffort`, `temperature`) without adapter-authored prompt prose. Provider-specific request-extension fields remain outside model input. The vision model normally receives retained user and tool-result images as Files API references beside attachment handles and request-preview dimensions. It also receives a normalized-object path when the current execution filesystem maps the attachment provider's host object; the descriptor marks this copy read-only and warns that normalization may have resized or re-encoded the upload. A Files resolution failure sends all retained images as inline base64 instead, and an over-budget older image keeps the access resolved for that request in its placeholder. Reasoning content from a prior assistant turn is passed back verbatim, whether or not that turn called a tool. Messages sends `{}` for historical tool arguments that are malformed JSON or are not objects. This argument fallback preserves call ids, tool names, and tool results; the original arguments stay in the Session log. Newly generated Messages tool arguments still require valid JSON objects. Messages omits `reasoning` and `tool-call` blocks inside user messages and tool results. This also permits replay of saved subagent notices containing assistant output; the original Session content remains intact. Empty user messages are skipped after conversion, while empty tool results retain their call ids and error flags. Other unsupported input blocks still fail with `UNSUPPORTED_CONTENT`. When every declared tool is deferred, the adapter prepends a non-deferred `DeferredToolPlaceholder` with the description `Reserved placeholder that keeps deferred tool loading active; never call this tool.` A numeric suffix avoids collisions with declared tools. The placeholder has no executor; calls receive the ordinary unavailable-tool result. The placeholder leaves real declarations unchanged. The shared [tool-update projection](../llm/README.md#known-limitations-and-deferred-work) rebuilds an addition-only baseline when an immediate tool is removed, while keeping later additions deferred. Empty tool lists receive no placeholder.
+The selected DeepSeek model receives the harness system prompt, message history, tool schemas, stop sequences, and call config (`maxTokens`, `reasoningEffort`, `temperature`) without adapter-authored prompt prose. Provider-specific request-extension fields remain outside model input. The vision model normally receives retained user and tool-result images as Files API references beside attachment handles and request-preview dimensions. It also receives a normalized-object path when the current execution filesystem maps the attachment provider's host object; the descriptor marks this copy read-only and warns that normalization may have resized or re-encoded the upload. A Files resolution failure sends all retained images as inline base64 instead, and an over-budget older image keeps the access resolved for that request in its placeholder. Reasoning content from a prior assistant turn is passed back verbatim, whether or not that turn called a tool. Messages sends `{}` for historical tool arguments that are malformed JSON or are not objects. This argument fallback preserves call ids, tool names, and tool results; the original arguments stay in the Session log. Newly generated Messages tool arguments still require valid JSON objects. Messages omits `reasoning` and `tool-call` blocks inside user messages and tool results. This also permits replay of saved subagent notices containing assistant output; the original Session content remains intact. Empty user messages are skipped after conversion, while empty tool results retain their call ids and error flags. Other unsupported input blocks still fail with `UNSUPPORTED_CONTENT`. When every declared tool is deferred, the adapter prepends a non-deferred `DeferredToolPlaceholder` with the description `Reserved placeholder that keeps deferred tool loading active; never call this tool.` A numeric suffix avoids collisions with declared tools. The placeholder has no executor; calls receive the ordinary unavailable-tool result. The placeholder leaves real declarations unchanged. The shared [tool-update projection](../llm/README.md#known-limitations-and-deferred-work) rebuilds an addition-only baseline whenever a tool is removed, while keeping later additions deferred. Empty tool lists receive no placeholder.
 
 #### Token effect
 
diff --git a/packages/llm/llm-deepseek/README.zh.md b/packages/llm/llm-deepseek/README.zh.md
index 4350fe39e9..2f70619773 100644
--- a/packages/llm/llm-deepseek/README.zh.md
+++ b/packages/llm/llm-deepseek/README.zh.md
@@ -170,7 +170,7 @@ Files 模式通过 `maxRequestFilesBytes` 与 `maxImagesPerRequest` 限制保留
 
 #### 模型看到什么
 
-所选 DeepSeek 模型会收到 harness 系统提示词、消息历史、工具 schema、停止序列与调用配置（`maxTokens`、`reasoningEffort`、`temperature`），不包含适配器撰写的提示词散文。提供方专用请求扩展字段留在模型输入之外。视觉模型通常接收 Files API 引用形式的用户与工具结果图片，其旁带附件句柄和请求预览尺寸。当前执行文件系统可以映射附件提供方的宿主对象时，它还会收到规范化对象路径；描述符会把该副本标记为只读，并警告规范化可能缩放或重新编码上传内容。Files 解析失败时，全部保留图片改用内联 base64；超出预算的较旧图片则在占位文本中保留当前请求已解析的访问方式。此前 assistant 轮次的推理内容会原样传回，无论该轮次是否调用了工具。 对于非法 JSON 或非对象的历史工具参数，Messages 发送 `{}`。此参数兜底保留调用 ID、工具名和工具结果；原始参数仍保留在 Session 日志中。新生成的 Messages 工具参数仍须是有效 JSON 对象。 Messages 会省略用户消息和工具结果中的 `reasoning` 与 `tool-call` 块。这也允许回放包含助手输出的已保存子 Agent 通知；原始 Session 内容保持完整。转换后的空用户消息会被跳过，空工具结果则保留调用 id 和错误标记。其他不支持的输入块仍会以 `UNSUPPORTED_CONTENT` 失败。 当所有已声明工具都为延迟加载时，适配器会在列表开头添加非延迟的 `DeferredToolPlaceholder`，描述为 `Reserved placeholder that keeps deferred tool loading active; never call this tool.`。如与已声明工具重名，则添加数字后缀。占位工具没有执行器；调用会收到常规的工具不可用结果。占位工具不会改变真实工具声明。共享的[工具更新投影](../llm/README.zh.md#known-limitations-and-deferred-work)在移除立即加载工具时重建 addition-only 基线，后续添加仍保持延迟加载。空工具列表不会添加占位工具。
+所选 DeepSeek 模型会收到 harness 系统提示词、消息历史、工具 schema、停止序列与调用配置（`maxTokens`、`reasoningEffort`、`temperature`），不包含适配器撰写的提示词散文。提供方专用请求扩展字段留在模型输入之外。视觉模型通常接收 Files API 引用形式的用户与工具结果图片，其旁带附件句柄和请求预览尺寸。当前执行文件系统可以映射附件提供方的宿主对象时，它还会收到规范化对象路径；描述符会把该副本标记为只读，并警告规范化可能缩放或重新编码上传内容。Files 解析失败时，全部保留图片改用内联 base64；超出预算的较旧图片则在占位文本中保留当前请求已解析的访问方式。此前 assistant 轮次的推理内容会原样传回，无论该轮次是否调用了工具。 对于非法 JSON 或非对象的历史工具参数，Messages 发送 `{}`。此参数兜底保留调用 ID、工具名和工具结果；原始参数仍保留在 Session 日志中。新生成的 Messages 工具参数仍须是有效 JSON 对象。 Messages 会省略用户消息和工具结果中的 `reasoning` 与 `tool-call` 块。这也允许回放包含助手输出的已保存子 Agent 通知；原始 Session 内容保持完整。转换后的空用户消息会被跳过，空工具结果则保留调用 id 和错误标记。其他不支持的输入块仍会以 `UNSUPPORTED_CONTENT` 失败。 当所有已声明工具都为延迟加载时，适配器会在列表开头添加非延迟的 `DeferredToolPlaceholder`，描述为 `Reserved placeholder that keeps deferred tool loading active; never call this tool.`。如与已声明工具重名，则添加数字后缀。占位工具没有执行器；调用会收到常规的工具不可用结果。占位工具不会改变真实工具声明。共享的[工具更新投影](../llm/README.zh.md#known-limitations-and-deferred-work)在移除任何工具时重建 addition-only 基线，后续添加仍保持延迟加载。空工具列表不会添加占位工具。
 
 #### Token 影响
 
diff --git a/packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts b/packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts
index b1eb397763..ea3e240223 100644
--- a/packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts
+++ b/packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts
@@ -24,9 +24,16 @@ export function apply(ctx: Context): void {
         agent.ctx.tools.register(defineContentToolFixture({
           name: 'snapshot_ping', description: 'Return pong once.', parameters: {},
           async execute() {
-            agent.ctx.tools.register(defineContentToolFixture({
+            const removeLater = agent.ctx.tools.register(defineContentToolFixture({
               name: 'snapshot_later', description: 'Return later.', parameters: {},
-              async execute() { return [{ type: 'text', text: 'later' }] },
+              async execute() {
+                removeLater()
+                agent.ctx.tools.register(defineContentToolFixture({
+                  name: 'snapshot_final', description: 'Return final.', parameters: {},
+                  async execute() { return [{ type: 'text', text: 'final' }] },
+                }))
+                return [{ type: 'text', text: 'later' }]
+              },
             }))
             return [{ type: 'text', text: 'pong' }]
           },
@@ -60,6 +67,13 @@ export function apply(ctx: Context): void {
           { role: 'system', content: [{ type: 'tool_addition', tool: { type: 'tool_reference', name: 'snapshot_later' } }] },
         ])
         break
+      case 4:
+        assert.deepEqual(request.tools, [
+          { name: 'snapshot_ping', description: 'Return pong once.', input_schema: { type: 'object', properties: {} } },
+          { name: 'snapshot_final', description: 'Return final.', input_schema: { type: 'object', properties: {} } },
+        ])
+        assert.deepEqual(request.messages.filter(message => message.role === 'system'), [])
+        break
       default:
         assert.fail('Unexpected request after the replacement tool call completed')
     }
diff --git a/packages/llm/llm/README.i18n.yaml b/packages/llm/llm/README.i18n.yaml
index 53db29f075..78c5071896 100644
--- a/packages/llm/llm/README.i18n.yaml
+++ b/packages/llm/llm/README.i18n.yaml
@@ -54,8 +54,8 @@
   en: a81634136baef72f
   zh: b92dda883986b0e1
 /deepseek-ai-dsh-llm/known-limitations-and-deferred-work:
-  en: 94e36b92eb0dcc78
-  zh: c8b99bf993411f11
+  en: 9b2c811157cb5148
+  zh: 94577c68b22f0abb
 /deepseek-ai-dsh-llm/known-limitations-and-deferred-work/dev-note:
   en: ecbc333b88e14d88
   zh: 77c725d92efd8646
diff --git a/packages/llm/llm/README.md b/packages/llm/llm/README.md
index 203dde885d..a9caca0951 100644
--- a/packages/llm/llm/README.md
+++ b/packages/llm/llm/README.md
@@ -180,7 +180,7 @@ These limits define where this service stops and other packages or future work b
 - **Variants normally require a producer** — `prefill`, per-tool `strict`, block `cache` hints, and the `agent` message-source variant have no producer ([Agent Note](../../../.agents/notes/archived/simplification/2026-07-04-prune-producerless-vocabulary-variants.md)).
 - **`BlockAssembler` handles core block kinds only** — a plugin-added block type whose stream is never closed by `block-end` makes `blocks()` throw.
 - **`GenerateOptions.sessionId` is a locally-declared brand** — importing dsh-session's `SessionId` would create a dependency cycle.
-- **Tool updates require session history** — `GenerateOptions.tools` contains active definitions. `toolHistory` supplies the initial declarations and historically resolved additions from `Session.toolHistory()`. At adapter dispatch, `projectToolUpdates` constructs deferred declarations and retains removed definitions for `in-history`; `addition-only` omits removed definitions and removal messages. Removing an immediate baseline tool on an addition-only route rebuilds that route's baseline from the declarations available after that update. Superseded tool blocks are omitted while unrelated content survives; subsequent additions remain deferred. Removing only later-added tools preserves the earlier baseline. Unsupported routes receive active tools without developer messages or `deferLoading`. Missing history or a request prefix omitting recorded updates falls back to current declarations without developer messages. Explicitly deferred tools become immediate during a rebuild only if an addition has already activated them; unactivated declarations remain deferred.
+- **Tool updates require session history** — `GenerateOptions.tools` contains active definitions. `toolHistory` supplies the initial declarations and historically resolved additions from `Session.toolHistory()`. At adapter dispatch, `projectToolUpdates` constructs deferred declarations and retains removed definitions for `in-history`; `addition-only` omits removed definitions and removal messages. Removing any tool on an addition-only route rebuilds that route's baseline from the declarations available after that update. Superseded tool blocks are omitted while unrelated content survives; subsequent additions remain deferred. Unsupported routes receive active tools without developer messages or `deferLoading`. Missing history or a request prefix omitting recorded updates falls back to current declarations without developer messages. Explicitly deferred tools become immediate during a rebuild only if an addition has already activated them; unactivated declarations remain deferred.
 
 <a id="dev-note"></a>
 ### Dev Note
diff --git a/packages/llm/llm/README.zh.md b/packages/llm/llm/README.zh.md
index 38a7f235be..6b917948c1 100644
--- a/packages/llm/llm/README.zh.md
+++ b/packages/llm/llm/README.zh.md
@@ -180,7 +180,7 @@ const configure = (maxTokens: number): ConfigureCall =>
 - **变体通常要求实际产生方**——`prefill`、逐工具 `strict`、内容块 `cache` 提示和 `agent` 消息来源变体都没有产生方（见 [Agent Note](../../../.agents/notes/archived/simplification/2026-07-04-prune-producerless-vocabulary-variants.md)）。
 - **`BlockAssembler` 只处理核心块类型**——插件添加块类型的流若从未由 `block-end` 关闭，`blocks()` 会抛出异常。
 - **`GenerateOptions.sessionId` 是本地声明的品牌类型**——导入 dsh-session 的 `SessionId` 会产生依赖循环。
-- **工具更新需要会话历史** — `GenerateOptions.tools` 包含当前有效定义。`toolHistory` 提供 `Session.toolHistory()` 派生的初始声明及已解析历史定义的添加记录。适配器分发时，`projectToolUpdates` 构造延迟声明，并在 `in-history` 模式保留已移除定义；`addition-only` 省略已移除定义和移除消息。在 addition-only 路由移除基线中的立即加载工具时，使用该次更新后的可用声明重建此路由的基线。已被取代的工具块会被省略，其他内容保留；后续添加仍保持延迟加载。仅移除后来添加的工具时保留早期基线。不支持更新的路由接收有效工具，不携带 developer 消息或 `deferLoading`。缺少历史或请求前缀遗漏已记录更新时，回退为当前声明且不发送 developer 消息。显式延迟工具仅在已有添加记录将其激活时，才会在重建时变为立即加载；尚未激活的声明仍保持延迟加载。
+- **工具更新需要会话历史** — `GenerateOptions.tools` 包含当前有效定义。`toolHistory` 提供 `Session.toolHistory()` 派生的初始声明及已解析历史定义的添加记录。适配器分发时，`projectToolUpdates` 构造延迟声明，并在 `in-history` 模式保留已移除定义；`addition-only` 省略已移除定义和移除消息。在 addition-only 路由移除任何工具时，使用该次更新后的可用声明重建此路由的基线。已被取代的工具块会被省略，其他内容保留；后续添加仍保持延迟加载。不支持更新的路由接收有效工具，不携带 developer 消息或 `deferLoading`。缺少历史或请求前缀遗漏已记录更新时，回退为当前声明且不发送 developer 消息。显式延迟工具仅在已有添加记录将其激活时，才会在重建时变为立即加载；尚未激活的声明仍保持延迟加载。
 
 <a id="dev-note"></a>
 ### 开发备注
diff --git a/packages/llm/llm/src/content.ts b/packages/llm/llm/src/content.ts
index bec3190d1a..8dd5430169 100644
--- a/packages/llm/llm/src/content.ts
+++ b/packages/llm/llm/src/content.ts
@@ -379,11 +379,7 @@ function withoutDeveloperMessages(messages: readonly RequestMessage[]): readonly
   return retained.length === messages.length ? messages : retained
 }
 
-function toolDeclarations(
-  tools: readonly ToolSchema[] | undefined,
-  mode: ToolUpdate,
-  history: ToolHistory,
-): Map<string, ToolSchema> {
+function toolDeclarations(history: ToolHistory): Map<string, ToolSchema> {
   const declarations = new Map(history.tools.map(tool => [tool.name, tool]))
   for (const update of history.updates) {
     for (const tool of update.additions) {
@@ -394,32 +390,16 @@ function toolDeclarations(
     }
   }
 
-  switch (mode) {
-    case 'in-history':
-      // Removal blocks disable tools without discarding their historical definitions.
-      return declarations
-    case 'addition-only': {
-      // Without removal support, the declaration list must omit inactive tools.
-      const activeNames = new Set(tools?.map(tool => tool.name))
-      for (const name of declarations.keys()) {
-        if (!activeNames.has(name)) declarations.delete(name)
-      }
-      return declarations
-    }
-    /* v8 ignore next 2 -- closed-union exhaustiveness guard */
-    default:
-      return assertNever(mode)
-  }
+  return declarations
 }
 
-/** Reset only when a removal changes the initially loaded definitions; later removals retain the earlier prefix. */
+/** Rebuild declarations after removals that addition-only routes cannot represent in history. */
 function rebaseAdditionOnlyHistory(
   history: ToolHistory,
   messages: ReadonlyMap<MessageId, readonly ContentBlock[]>,
 ): ToolHistory {
   const available = new Map(history.tools.map(tool => [tool.name, tool]))
   let baseline = history.tools
-  let immediate = new Set(baseline.filter(tool => !tool.deferLoading).map(tool => tool.name))
   let retainedFrom = 0
   for (const [index, update] of history.updates.entries()) {
     const additions = new Map(update.additions.map(tool => [tool.name, tool]))
@@ -430,13 +410,12 @@ function rebaseAdditionOnlyHistory(
         const { deferLoading: _loading, ...tool } = additions.get(block.toolName) as ToolSchema
         available.set(tool.name, tool)
       } else if (block.type === 'tool-removal') {
-        reset ||= immediate.has(block.toolName)
+        reset = true
         available.delete(block.toolName)
       }
     }
     if (reset) {
       baseline = [...available.values()]
-      immediate = new Set(baseline.filter(tool => !tool.deferLoading).map(tool => tool.name))
       retainedFrom = index + 1
     }
   }
@@ -447,7 +426,7 @@ function rebaseAdditionOnlyHistory(
  * Construct provider declarations from session-folded history without changing logged active tools.
  * Unsupported routes and incomplete history use current declarations without developer updates.
  * Explicitly deferred baseline tools become available only after their first retained addition.
- * Addition-only routes rebuild their baseline when an initially loaded tool is removed;
+ * Addition-only routes rebuild their baseline whenever a tool is removed;
  * later additions remain deferred and superseded tool blocks are omitted without dropping other content.
  * @param messages - complete request inputs, or the prefix selected for an auxiliary call.
  * @param tools - currently active tool schemas.
@@ -481,7 +460,7 @@ export function projectToolUpdates(
   }
 
   const projectedHistory = toolUpdate === 'addition-only' ? rebaseAdditionOnlyHistory(history, updates) : history
-  const declarations = toolDeclarations(tools, toolUpdate, projectedHistory)
+  const declarations = toolDeclarations(projectedHistory)
   const updateIds = new Set(history.updates.map(update => update.messageId))
   const retainedUpdateIds = new Set(projectedHistory.updates.map(update => update.messageId))
   // Deferred baseline tools still need their first addition to become available.
diff --git a/packages/llm/llm/tests/content.spec.ts b/packages/llm/llm/tests/content.spec.ts
index cf9d13594f..c3376c1f70 100644
--- a/packages/llm/llm/tests/content.spec.ts
+++ b/packages/llm/llm/tests/content.spec.ts
@@ -448,7 +448,7 @@ describe('projectToolUpdates', () => {
     expect(projected.tools).toEqual([deferred])
     expect(projected.messages).toEqual(mode === 'in-history'
       ? [prompt, added, removed, restored]
-      : [prompt, added])
+      : [prompt, restored])
   })
 
   it('uses current declarations without updates when history is missing or the prefix omits an update', () => {
@@ -562,17 +562,26 @@ describe('projectToolUpdates', () => {
     expect(JSON.stringify({ messages, history })).toBe(saved)
   })
 
-  it('keeps the original baseline when only later-added tools are replaced', () => {
+  it.each([false, true])('rebuilds after removing a later-activated tool (replacement=%s)', (replace) => {
     const replacement = { name: 'replacement', description: 'Replacement', parameters: {} }
-    const added = developer([{ type: 'tool-addition', toolName: 'fetch' }])
-    const swapped = developer([{ type: 'tool-addition', toolName: 'replacement' }, { type: 'tool-removal', toolName: 'fetch' }])
+    const retained = { name: 'retained', description: 'Retained', parameters: {} }
+    const later = { name: 'later', description: 'Later', parameters: {} }
+    const added = developer([{ type: 'tool-addition', toolName: 'fetch' }, { type: 'tool-addition', toolName: 'retained' }])
+    const swapped = developer([
+      ...replace ? [{ type: 'tool-addition' as const, toolName: 'replacement' }] : [],
+      { type: 'tool-removal', toolName: 'fetch' },
+    ])
+    const next = developer([{ type: 'tool-addition', toolName: 'later' }])
     const history: ToolHistory = { tools: [search], updates: [
-      { messageId: added.id, additions: [fetch] }, { messageId: swapped.id, additions: [replacement] },
+      { messageId: added.id, additions: [fetch, retained] },
+      { messageId: swapped.id, additions: replace ? [replacement] : [] },
+      { messageId: next.id, additions: [later] },
     ] }
-    const projected = projectToolUpdates([prompt, added, prompt, swapped], [search, replacement], 'addition-only', history)
-    expect(projected.tools).toEqual([search, { ...replacement, deferLoading: true }])
+    const active = [search, retained, ...replace ? [replacement] : [], later]
+    const projected = projectToolUpdates([prompt, added, prompt, swapped, next], active, 'addition-only', history)
+    expect(projected.tools).toEqual([search, retained, ...replace ? [replacement] : [], { ...later, deferLoading: true }])
     expect(projected.messages[0]).toBe(prompt)
-    expect(roles(projected.messages)).toEqual([[{ type: 'tool-addition', toolName: 'replacement' }]])
+    expect(roles(projected.messages)).toEqual([[{ type: 'tool-addition', toolName: 'later' }]])
   })
 
   it.each([false, true])('preserves explicitly deferred baseline activation across a reset (activated=%s)', (activated) => {
diff --git a/snapshots/session/deepseek-deferred-tools/session.v4.jsonl b/snapshots/session/deepseek-deferred-tools/session.v4.jsonl
index 85d8585724..ceb1cb5325 100644
--- a/snapshots/session/deepseek-deferred-tools/session.v4.jsonl
+++ b/snapshots/session/deepseek-deferred-tools/session.v4.jsonl
@@ -2,30 +2,37 @@
 {"type":"permission/preset","data":{"preset":"danger-full-access"}}
 {"type":"sandbox/mode","data":{"mode":"danger-full-access"}}
 {"type":"approval/policy","data":{"policy":"never"}}
-{"type":"agent/inbox/spliced","data":{"target":"next-turn","start":0,"inserted":[{"content":[{"type":"text","text":"Call snapshot_initial, then snapshot_ping, then reply DONE."}],"source":{"kind":"user"},"role":"user","id":"{{message:1}}"}]}}
+{"type":"agent/inbox/spliced","data":{"target":"next-turn","start":0,"inserted":[{"content":[{"type":"text","text":"Call snapshot_initial, then snapshot_ping, then snapshot_later, then reply DONE."}],"source":{"kind":"user"},"role":"user","id":"{{message:1}}"}]}}
 {"type":"turn/start","data":{"turn":1}}
 {"type":"agent/inbox/spliced","data":{"target":"next-turn","start":0,"removedCount":1,"inserted":[]}}
 {"type":"step/start","data":{"turn":1,"step":1}}
 {"type":"system/message","data":{"turn":1,"step":1,"message":{"role":"system","content":[{"type":"text","text":"{{system}}"}],"source":{"kind":"system-prompt"},"id":"{{message:2}}"}},"surfaceOp":"append"}
-{"type":"user/message","data":{"content":[{"type":"text","text":"Call snapshot_initial, then snapshot_ping, then reply DONE."}],"source":{"kind":"user"},"role":"user","id":"{{message:1}}"},"surfaceOp":"append"}
+{"type":"user/message","data":{"content":[{"type":"text","text":"Call snapshot_initial, then snapshot_ping, then snapshot_later, then reply DONE."}],"source":{"kind":"user"},"role":"user","id":"{{message:1}}"},"surfaceOp":"append"}
 {"type":"user/message","data":{"content":[{"type":"text","text":"Current runtime context. This snapshot supersedes earlier runtime-context snapshots.\n\nCurrent working directory: \"{{cwd}}\".\n\nCurrent DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations.\n\nApproval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`)."}],"source":{"kind":"runtime-context","form":"snapshot","sections":[{"name":"working-directory:current","text":"Current working directory: \"{{cwd}}\"."},{"name":"sandbox:policy","text":"Current DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations."},{"name":"approval:policy","text":"Approval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`)."}]},"role":"user","id":"{{message:3}}"},"surfaceOp":"append"}
 {"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_initial"]},"reason":"initial"}}
 {"type":"request/context","data":{"provider":"deepseek-official","model":"deepseek-v4-flash"}}
 {"type":"session/title","data":{"title":"Call snapshot_initial, then snapshot_pin","messageSeqs":[8],"source":{"kind":"fallback"}}}
-{"type":"assistant/message","data":{"turn":1,"step":1,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_initial","name":"snapshot_initial","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:4}}"},"usage":{"inputTokens":10,"outputTokens":5},"stream":[{"type":"chunk","time":1792658934151,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1792658934151,"index":0,"dt":[],"id":"call_initial","name":"snapshot_initial","args":["{}"]},{"type":"chunk","time":1792658934151,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_initial","name":"snapshot_initial","arguments":"{}"}}},{"type":"chunk","time":1792658934151,"chunk":{"type":"usage","usage":{"inputTokens":10,"outputTokens":5}}},{"type":"chunk","time":1792658934151,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
+{"type":"assistant/message","data":{"turn":1,"step":1,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_initial","name":"snapshot_initial","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:4}}"},"usage":{"inputTokens":10,"outputTokens":5},"stream":[{"type":"chunk","time":1792661643282,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1792661643282,"index":0,"dt":[],"id":"call_initial","name":"snapshot_initial","args":["{}"]},{"type":"chunk","time":1792661643282,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_initial","name":"snapshot_initial","arguments":"{}"}}},{"type":"chunk","time":1792661643282,"chunk":{"type":"usage","usage":{"inputTokens":10,"outputTokens":5}}},{"type":"chunk","time":1792661643282,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
 {"type":"tool/call","data":{"turn":1,"step":1,"callId":"call_initial","name":"snapshot_initial","arguments":"{}"}}
 {"type":"tool/result","data":{"turn":1,"step":1,"message":{"role":"tool","source":{"kind":"tool","callId":"call_initial"},"toolCallId":"call_initial","content":[{"type":"text","text":"snapshot_ping is available."}],"isError":false,"id":"{{message:5}}"}},"sourceEventSeqs":[14],"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":1}}
 {"type":"step/start","data":{"turn":1,"step":2}}
 {"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_ping"]},"reason":"change"}}
 {"type":"developer/message","data":{"turn":1,"step":2,"message":{"source":{"kind":"tool-registry"},"content":[{"type":"tool-addition","toolName":"snapshot_ping"},{"type":"tool-removal","toolName":"snapshot_initial"}],"role":"developer","id":"{{message:6}}"},"headerSeq":18},"surfaceOp":"append"}
-{"type":"assistant/message","data":{"turn":1,"step":2,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:7}}"},"stream":[{"type":"chunk","time":1792658934170,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1792658934170,"index":0,"dt":[],"id":"call_dynamic_ping","name":"snapshot_ping","args":["{}"]},{"type":"chunk","time":1792658934170,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}}},{"type":"chunk","time":1792658934170,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
+{"type":"assistant/message","data":{"turn":1,"step":2,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:7}}"},"stream":[{"type":"chunk","time":1792661643298,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1792661643298,"index":0,"dt":[],"id":"call_dynamic_ping","name":"snapshot_ping","args":["{}"]},{"type":"chunk","time":1792661643298,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}}},{"type":"chunk","time":1792661643298,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
 {"type":"tool/call","data":{"turn":1,"step":2,"callId":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}}
 {"type":"tool/result","data":{"turn":1,"step":2,"message":{"role":"tool","source":{"kind":"tool","callId":"call_dynamic_ping"},"toolCallId":"call_dynamic_ping","content":[{"type":"text","text":"pong"}],"isError":false,"id":"{{message:8}}"}},"sourceEventSeqs":[21],"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":2}}
 {"type":"step/start","data":{"turn":1,"step":3}}
 {"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_later","snapshot_ping"]},"reason":"change"}}
 {"type":"developer/message","data":{"turn":1,"step":3,"message":{"source":{"kind":"tool-registry"},"content":[{"type":"tool-addition","toolName":"snapshot_later"}],"role":"developer","id":"{{message:9}}"},"headerSeq":25},"surfaceOp":"append"}
-{"type":"assistant/message","data":{"turn":1,"step":3,"message":{"role":"assistant","content":[{"type":"text","text":"DONE"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:10}}"},"usage":{"inputTokens":12,"outputTokens":2,"cacheReadTokens":10},"stream":[{"type":"chunk","time":1792658934186,"chunk":{"type":"block-start","index":0,"blockType":"text"}},{"type":"text-chunks","time0":1792658934186,"index":0,"dt":[],"texts":["DONE"]},{"type":"chunk","time":1792658934186,"chunk":{"type":"block-end","index":0,"block":{"type":"text","text":"DONE"}}},{"type":"chunk","time":1792658934186,"chunk":{"type":"usage","usage":{"inputTokens":12,"outputTokens":2,"cacheReadTokens":10}}},{"type":"chunk","time":1792658934186,"chunk":{"type":"finish","reason":{"kind":"stop"}}}]},"surfaceOp":"append"}
+{"type":"assistant/message","data":{"turn":1,"step":3,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_later","name":"snapshot_later","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:10}}"},"stream":[{"type":"chunk","time":1792661643311,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1792661643311,"index":0,"dt":[],"id":"call_later","name":"snapshot_later","args":["{}"]},{"type":"chunk","time":1792661643311,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_later","name":"snapshot_later","arguments":"{}"}}},{"type":"chunk","time":1792661643311,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
+{"type":"tool/call","data":{"turn":1,"step":3,"callId":"call_later","name":"snapshot_later","arguments":"{}"}}
+{"type":"tool/result","data":{"turn":1,"step":3,"message":{"role":"tool","source":{"kind":"tool","callId":"call_later"},"toolCallId":"call_later","content":[{"type":"text","text":"later"}],"isError":false,"id":"{{message:11}}"}},"sourceEventSeqs":[28],"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":3}}
+{"type":"step/start","data":{"turn":1,"step":4}}
+{"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_final","snapshot_ping"]},"reason":"change"}}
+{"type":"developer/message","data":{"turn":1,"step":4,"message":{"source":{"kind":"tool-registry"},"content":[{"type":"tool-addition","toolName":"snapshot_final"},{"type":"tool-removal","toolName":"snapshot_later"}],"role":"developer","id":"{{message:12}}"},"headerSeq":32},"surfaceOp":"append"}
+{"type":"assistant/message","data":{"turn":1,"step":4,"message":{"role":"assistant","content":[{"type":"text","text":"DONE"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:13}}"},"usage":{"inputTokens":12,"outputTokens":2,"cacheReadTokens":10},"stream":[{"type":"chunk","time":1792661643324,"chunk":{"type":"block-start","index":0,"blockType":"text"}},{"type":"text-chunks","time0":1792661643324,"index":0,"dt":[],"texts":["DONE"]},{"type":"chunk","time":1792661643324,"chunk":{"type":"block-end","index":0,"block":{"type":"text","text":"DONE"}}},{"type":"chunk","time":1792661643324,"chunk":{"type":"usage","usage":{"inputTokens":12,"outputTokens":2,"cacheReadTokens":10}}},{"type":"chunk","time":1792661643324,"chunk":{"type":"finish","reason":{"kind":"stop"}}}]},"surfaceOp":"append"}
+{"type":"step/end","data":{"turn":1,"step":4}}
 {"type":"turn/end","data":{"turn":1,"reason":{"kind":"completed"}}}
diff --git a/snapshots/session/deepseek-deferred-tools/snapshot.yml b/snapshots/session/deepseek-deferred-tools/snapshot.yml
index 6a4e4e6626..ceedc9db93 100644
--- a/snapshots/session/deepseek-deferred-tools/snapshot.yml
+++ b/snapshots/session/deepseek-deferred-tools/snapshot.yml
@@ -6,4 +6,4 @@ recording: authored
 header:
   class: deepseek-deferred-tools
   pin: true
-  changes: 2
+  changes: 3
diff --git a/snapshots/session/deepseek-deferred-tools/tool-schemas.expected.json b/snapshots/session/deepseek-deferred-tools/tool-schemas.expected.json
index 6103ea1762..255e5a96d0 100644
--- a/snapshots/session/deepseek-deferred-tools/tool-schemas.expected.json
+++ b/snapshots/session/deepseek-deferred-tools/tool-schemas.expected.json
@@ -37,6 +37,24 @@
           "properties": {}
         }
       }
+    ],
+    [
+      {
+        "name": "snapshot_final",
+        "description": "Return final.",
+        "parameters": {
+          "type": "object",
+          "properties": {}
+        }
+      },
+      {
+        "name": "snapshot_ping",
+        "description": "Return pong once.",
+        "parameters": {
+          "type": "object",
+          "properties": {}
+        }
+      }
     ]
   ]
 }

From be93b94e6ec472fc2fcf9302884e58428b6aaa2c Mon Sep 17 00:00:00 2001
From: Yixiang Tu <tuyixiang@deepseek.com>
Date: Thu, 22 Oct 2026 17:49:41 +0800
Subject: [PATCH 23/32] docs(notes): state that every tool removal rebuilds the
 baseline

---
 .../architecture/2026-09-20-dynamic-tool-updates.i18n.yaml    | 4 ++--
 .../architecture/2026-09-20-dynamic-tool-updates.md           | 2 +-
 .../architecture/2026-09-20-dynamic-tool-updates.zh.md        | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
index 4215b56930..c26081b911 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
@@ -12,8 +12,8 @@
   en: 2bbb6ab17f2cbb1a
   zh: bb925627b6798548
 /agent-note-active-tool-headers-and-stateful-request-projection/alternatives-considered:
-  en: f1271717cbe0d4a0
-  zh: 367ad512ad08b221
+  en: 311db1f781e386e7
+  zh: 7e3312544154a158
 /agent-note-active-tool-headers-and-stateful-request-projection/consequences:
   en: aa3e68c78ac3f666
   zh: 5ec40c83183fc7e0
diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
index 2f75132d51..5ef47d246b 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
@@ -26,7 +26,7 @@ DeepSeek translates projected updates into system-role `tool_addition` and `tool
 
 **Scan the complete log on every request.** The cached fold consumes new events and supplies stable snapshots to ordinary and auxiliary calls without adding arbitrary synchronous history readers.
 
-**Rebuild only for immediate baseline removals or mixed additions and removals.** Deferred tools also have request declarations; deleting a tool changes those declarations regardless of its activation position. Addition-only routes cannot express that deletion in history. Every removal therefore rebuilds the baseline, including removal-only updates and removals of later-activated tools. A past reset cannot force every future addition to become immediate: each reset establishes a new baseline from which deferred additions resume.
+**Rebuild the baseline on every removal.** Deferred tools also have request declarations; deleting a tool changes those declarations regardless of its activation position. Addition-only routes cannot express that deletion in history. The rebuild therefore also covers removal-only updates and removals of later-activated tools. A past reset cannot force every future addition to become immediate: each reset establishes a new baseline from which deferred additions resume.
 
 **Reject same-name schema changes during tool registration.** This restriction is not enforced. Immediate failure for a plugin registering an incompatible tool requires comparing the new registration with historical definitions of tools called on each affected current surface, while excluding calls removed by compaction. That registration-time historical and scope-aware check is deferred because of its implementation complexity. Same-name schema changes remain allowed; they rebuild declarations and invalidate prefix reuse even on `in-history` routes.
 
diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
index 36df584a80..422791a0c4 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
@@ -26,7 +26,7 @@ DeepSeek 把投影后的更新转换为 system 角色的 `tool_addition` 和 `to
 
 **每次请求扫描完整日志。** 缓存归约处理新事件，为普通和辅助调用提供稳定快照，不增加任意同步历史读取接口。
 
-**仅在移除立即加载的基线工具或同时添加和移除时重建。** 延迟工具也具有请求声明；删除工具会改变这些声明，与其激活位置无关。addition-only 路由无法通过历史表达删除。因此，每次移除都重建基线，包括仅移除的更新和移除后来激活的工具。一次历史重置不能让所有后续添加都变为立即加载：每次重置确立新基线，后续添加继续采用延迟加载。
+**每次移除都重建基线。** 延迟工具也具有请求声明；删除工具会改变这些声明，与其激活位置无关。addition-only 路由无法通过历史表达删除。因此，仅移除的更新和移除后来激活的工具也会重建基线。一次历史重置不能让所有后续添加都变为立即加载：每次重置确立新基线，后续添加继续采用延迟加载。
 
 **在工具注册时拒绝同名 schema 变化。** 当前不执行此限制。要让注册不兼容工具的插件立即收到异常，需要将新注册与各受影响当前 surface 中已调用工具的历史定义比较，同时排除已被压缩移除的调用。由于实现复杂，注册时结合历史和作用域的检查留待后续实现。同名 schema 变化仍被允许；它们会重建声明，即使在 `in-history` 路由上也会使前缀复用失效。
 

From 9d53909bcfcdaf6c9635a899e731b80ccb49b7e4 Mon Sep 17 00:00:00 2001
From: Yixiang Tu <tuyixiang@deepseek.com>
Date: Fri, 23 Oct 2026 10:53:55 +0800
Subject: [PATCH 24/32] docs(llm): clarify deferred tool activation and
 placeholder effects

---
 .../2026-09-20-dynamic-tool-updates.i18n.yaml        |  4 ++--
 .../architecture/2026-09-20-dynamic-tool-updates.md  |  2 +-
 .../2026-09-20-dynamic-tool-updates.zh.md            |  2 +-
 packages/llm/llm-deepseek/README.i18n.yaml           | 12 ++++++------
 packages/llm/llm-deepseek/README.md                  |  6 +++---
 packages/llm/llm-deepseek/README.zh.md               |  6 +++---
 packages/llm/llm/src/content.ts                      |  3 ++-
 7 files changed, 18 insertions(+), 17 deletions(-)

diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
index c26081b911..c899f1ca29 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
@@ -9,8 +9,8 @@
   en: 97fe58a13135b4a1
   zh: 7490373a8d941da5
 /agent-note-active-tool-headers-and-stateful-request-projection/decision:
-  en: 2bbb6ab17f2cbb1a
-  zh: bb925627b6798548
+  en: c1ca2f0657dc02c0
+  zh: db63130f49594d44
 /agent-note-active-tool-headers-and-stateful-request-projection/alternatives-considered:
   en: 311db1f781e386e7
   zh: 7e3312544154a158
diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
index 5ef47d246b..b255ef500c 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
@@ -16,7 +16,7 @@ Plugin and MCP tools change during conversations. Providers differ in whether th
 
 Loop and compaction requests carry this snapshot as `GenerateOptions.toolHistory`. At adapter dispatch, `projectToolUpdates` uses the prepared route's `toolUpdate`. Unsupported routes receive active definitions without `deferLoading` or developer messages. Supported routes defer historical additions; `in-history` retains removed definitions and removal blocks, while `addition-only` omits both. On addition-only routes, removing any tool rebuilds the route's baseline after that update: the request declarations change even when the removed tool was activated later, so retaining superseded activation blocks cannot preserve the full conversation prefix. Previously activated tools become immediate; explicitly deferred declarations with no activation remain deferred. Subsequent additions remain deferred until their recorded activation. Superseded tool blocks are omitted without discarding other content in those messages. The Session fold and durable events remain capability-independent. Missing history or a request prefix omitting recorded updates uses current declarations without developer updates.
 
-DeepSeek translates projected updates into system-role `tool_addition` and `tool_removal` blocks and `defer_loading` declarations, sending the tool-changes beta header when update blocks occur. The default `deepseek-flash` entry declares `addition-only`; pi-ai declares no mode. Chat and Trajectory display developer messages as context nodes, using localized tool-change notices: single changes show the tool name; multiple changes show counts and expandable name lists.
+DeepSeek translates projected updates into system-role `tool_addition` and `tool_removal` blocks and `defer_loading` declarations, sending the tool-changes beta header when update blocks occur. The default `deepseek-flash` entry declares `addition-only`; pi-ai selects `in-history` for compatible Anthropic routes and `addition-only` for compatible Chat Completions and Responses routes. Chat and Trajectory display developer messages as context nodes, using localized tool-change notices: single changes show the tool name; multiple changes show counts and expandable name lists.
 
 ## Alternatives considered
 
diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
index 422791a0c4..4edcc7a061 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
@@ -16,7 +16,7 @@ Status: implemented
 
 循环和压缩请求通过 `GenerateOptions.toolHistory` 携带此快照。适配器分发时，`projectToolUpdates` 使用已准备路由的 `toolUpdate`。不支持的路由接收有效定义，不携带 `deferLoading` 或 developer 消息。支持的路由延迟历史添加；`in-history` 保留已移除定义和移除块，`addition-only` 则省略两者。在 addition-only 路由移除任何工具时，使用该次更新后的状态重建路由基线：即使被移除工具是后来激活的，请求声明也已发生变化，保留已被取代的激活块无法保留完整对话前缀。此前已激活工具变为立即加载；没有激活记录的显式延迟声明仍保持延迟。后续添加在记录的激活位置前保持延迟加载。已被取代的工具块会被省略，但不会丢弃这些消息中的其他内容。Session 归约和持久事件仍不依赖模型能力。缺少历史或请求前缀遗漏已记录更新时，使用当前声明且不发送 developer 更新。
 
-DeepSeek 把投影后的更新转换为 system 角色的 `tool_addition` 和 `tool_removal` 块以及 `defer_loading` 声明，在存在更新块时发送工具变更 beta 请求头。默认 `deepseek-flash` 条目声明 `addition-only`；pi-ai 不声明模式。Chat 和 Trajectory 将 developer 消息显示为上下文节点，工具变更使用本地化通知：单项变更显示工具名，多项变更显示数量及可展开的名称列表。
+DeepSeek 把投影后的更新转换为 system 角色的 `tool_addition` 和 `tool_removal` 块以及 `defer_loading` 声明，在存在更新块时发送工具变更 beta 请求头。默认 `deepseek-flash` 条目声明 `addition-only`；pi-ai 为兼容的 Anthropic 路由选择 `in-history`，为兼容的 Chat Completions 和 Responses 路由选择 `addition-only`。Chat 和 Trajectory 将 developer 消息显示为上下文节点，工具变更使用本地化通知：单项变更显示工具名，多项变更显示数量及可展开的名称列表。
 
 ## Alternatives considered
 
diff --git a/packages/llm/llm-deepseek/README.i18n.yaml b/packages/llm/llm-deepseek/README.i18n.yaml
index dae2900fa7..d17e33ac4d 100644
--- a/packages/llm/llm-deepseek/README.i18n.yaml
+++ b/packages/llm/llm-deepseek/README.i18n.yaml
@@ -63,14 +63,14 @@
   en: 1dc50052999253c6
   zh: 7abf968fc18bffcd
 /deepseek-ai-dsh-llm-deepseek/model-experience/deepseek-request/what-the-model-sees:
-  en: 1b8d726045c386f9
-  zh: 8254d9f748decef3
+  en: a5534fa423d207d8
+  zh: 52c524bc054076fb
 /deepseek-ai-dsh-llm-deepseek/model-experience/deepseek-request/token-effect:
-  en: 67f4bfa42cbee911
-  zh: 5e9dc9bc07253686
+  en: f8891795b5bfd744
+  zh: b1235786b04a7558
 /deepseek-ai-dsh-llm-deepseek/model-experience/deepseek-request/kv-cache-effect:
-  en: 87ac92776176ee15
-  zh: bb49edf3a68dda07
+  en: de048b284b463dfb
+  zh: b5545081b3df6c53
 /deepseek-ai-dsh-llm-deepseek/model-experience/deepseek-response:
   en: 957d6665495e5ca5
   zh: 0aa72b2c2dc07167
diff --git a/packages/llm/llm-deepseek/README.md b/packages/llm/llm-deepseek/README.md
index ecce4d514b..99be446545 100644
--- a/packages/llm/llm-deepseek/README.md
+++ b/packages/llm/llm-deepseek/README.md
@@ -170,15 +170,15 @@ Read these pages when the package-level contract is not enough. They move from t
 
 #### What the model sees
 
-The selected DeepSeek model receives the harness system prompt, message history, tool schemas, stop sequences, and call config (`maxTokens`, `reasoningEffort`, `temperature`) without adapter-authored prompt prose. Provider-specific request-extension fields remain outside model input. The vision model normally receives retained user and tool-result images as Files API references beside attachment handles and request-preview dimensions. It also receives a normalized-object path when the current execution filesystem maps the attachment provider's host object; the descriptor marks this copy read-only and warns that normalization may have resized or re-encoded the upload. A Files resolution failure sends all retained images as inline base64 instead, and an over-budget older image keeps the access resolved for that request in its placeholder. Reasoning content from a prior assistant turn is passed back verbatim, whether or not that turn called a tool. Messages sends `{}` for historical tool arguments that are malformed JSON or are not objects. This argument fallback preserves call ids, tool names, and tool results; the original arguments stay in the Session log. Newly generated Messages tool arguments still require valid JSON objects. Messages omits `reasoning` and `tool-call` blocks inside user messages and tool results. This also permits replay of saved subagent notices containing assistant output; the original Session content remains intact. Empty user messages are skipped after conversion, while empty tool results retain their call ids and error flags. Other unsupported input blocks still fail with `UNSUPPORTED_CONTENT`. When every declared tool is deferred, the adapter prepends a non-deferred `DeferredToolPlaceholder` with the description `Reserved placeholder that keeps deferred tool loading active; never call this tool.` A numeric suffix avoids collisions with declared tools. The placeholder has no executor; calls receive the ordinary unavailable-tool result. The placeholder leaves real declarations unchanged. The shared [tool-update projection](../llm/README.md#known-limitations-and-deferred-work) rebuilds an addition-only baseline whenever a tool is removed, while keeping later additions deferred. Empty tool lists receive no placeholder.
+The selected DeepSeek model receives the harness system prompt, message history, tool schemas, stop sequences, and call config (`maxTokens`, `reasoningEffort`, `temperature`). Provider-specific request-extension fields remain outside model input. The vision model normally receives retained user and tool-result images as Files API references beside attachment handles and request-preview dimensions. It also receives a normalized-object path when the current execution filesystem maps the attachment provider's host object; the descriptor marks this copy read-only and warns that normalization may have resized or re-encoded the upload. A Files resolution failure sends all retained images as inline base64 instead, and an over-budget older image keeps the access resolved for that request in its placeholder. Reasoning content from a prior assistant turn is passed back verbatim, whether or not that turn called a tool. Messages sends `{}` for historical tool arguments that are malformed JSON or are not objects. This argument fallback preserves call ids, tool names, and tool results; the original arguments stay in the Session log. Newly generated Messages tool arguments still require valid JSON objects. Messages omits `reasoning` and `tool-call` blocks inside user messages and tool results. This also permits replay of saved subagent notices containing assistant output; the original Session content remains intact. Empty user messages are skipped after conversion, while empty tool results retain their call ids and error flags. Other unsupported input blocks still fail with `UNSUPPORTED_CONTENT`. When every declared tool is deferred, the adapter prepends a non-deferred `DeferredToolPlaceholder` with the description `Reserved placeholder that keeps deferred tool loading active; never call this tool.` A numeric suffix avoids collisions with declared tools. The placeholder has no executor; calls receive the ordinary unavailable-tool result. The placeholder leaves real declarations unchanged. The shared [tool-update projection](../llm/README.md#known-limitations-and-deferred-work) rebuilds an addition-only baseline whenever a tool is removed, while keeping later additions deferred. Empty tool lists receive no placeholder.
 
 #### Token effect
 
-Provider tokenization governs exact text and image-token input. The adapter declares per-route `imageRequestPricing`: it prices each occurrence selected by a logged image-offload decision as its placeholder text and each retained image at its projected dimensions with the published vision accounting (14px patch grid, 3:1 downsampling, 544×544 scale-up floor, 1024-token cap). This lets the token meter price image pressure before a request; reported usage remains authoritative. Reasoning passback carries every reasoned turn's chain of thought into later requests, while offloaded images stop costing visual tokens. A request whose retained occurrences exceed the file-mode or inline-fallback budget (`maxRequestFilesBytes`, `maxImagesPerRequest`, both quanta) at their exact request-version bytes fails with `IMAGE_OFFLOAD_REQUIRED` naming the additional oldest occurrences to offload, and `dsh-compaction-image-offload` records the selected occurrences in an `image/offload` event and retries. Cache-read usage is reported when available. Messages totals include uncached input, output, cache-read, and cache-write tokens. `imageRequestTarget(provider, model, image)` exposes the same request-image dimensions and byte target to screenshot consumers; adapters without image resizing preserve the normalized source.
+Provider tokenization governs exact text and image-token input. When present, the placeholder adds input tokens for one tool declaration, including its name, description, and empty object schema. The adapter declares per-route `imageRequestPricing`: it prices each occurrence selected by a logged image-offload decision as its placeholder text and each retained image at its projected dimensions with the published vision accounting (14px patch grid, 3:1 downsampling, 544×544 scale-up floor, 1024-token cap). This lets the token meter price image pressure before a request; reported usage remains authoritative. Reasoning passback carries every reasoned turn's chain of thought into later requests, while offloaded images stop costing visual tokens. A request whose retained occurrences exceed the file-mode or inline-fallback budget (`maxRequestFilesBytes`, `maxImagesPerRequest`, both quanta) at their exact request-version bytes fails with `IMAGE_OFFLOAD_REQUIRED` naming the additional oldest occurrences to offload, and `dsh-compaction-image-offload` records the selected occurrences in an `image/offload` event and retries. Cache-read usage is reported when available. Messages totals include uncached input, output, cache-read, and cache-write tokens. `imageRequestTarget(provider, model, image)` exposes the same request-image dimensions and byte target to screenshot consumers; adapters without image resizing preserve the normalized source.
 
 #### KV Cache effect
 
-An unchanged assembled prefix is eligible for DeepSeek cache reuse, which this adapter reports in usage. Deterministic request-image bytes do not make the full prefix immutable: a changed execution-world path rewrites historical descriptor text, a refreshed upload can replace a `file_id`, and Files-to-base64 fallback changes the image representation. Any of these, or a model-route, prompt, schema, history, or image-budget change, may prevent reuse from the first affected token; reasoning passback appends on every reasoned turn. On a catalog entry declaring `systemPromptUpdate: in-history`, a system prompt change inside a continuing request series is appended after the cached history, so the prefix through that history stays reusable; a tool-schema change still prevents reuse from the first altered token.
+An unchanged assembled prefix is eligible for DeepSeek cache reuse, which this adapter reports in usage. For a nonempty all-deferred tool list, the placeholder is part of the declaration prefix; adding, removing, or renaming it changes that prefix and may affect cache reuse. Deterministic request-image bytes do not make the full prefix immutable: a changed execution-world path rewrites historical descriptor text, a refreshed upload can replace a `file_id`, and Files-to-base64 fallback changes the image representation. Any of these, or a model-route, prompt, schema, history, or image-budget change, may prevent reuse from the first affected token; reasoning passback appends on every reasoned turn. On a catalog entry declaring `systemPromptUpdate: in-history`, a system prompt change inside a continuing request series is appended after the cached history, so the prefix through that history stays reusable; a tool-schema change still prevents reuse from the first altered token.
 
 ### DeepSeek response
 
diff --git a/packages/llm/llm-deepseek/README.zh.md b/packages/llm/llm-deepseek/README.zh.md
index 2f70619773..c6e74f18e2 100644
--- a/packages/llm/llm-deepseek/README.zh.md
+++ b/packages/llm/llm-deepseek/README.zh.md
@@ -170,15 +170,15 @@ Files 模式通过 `maxRequestFilesBytes` 与 `maxImagesPerRequest` 限制保留
 
 #### 模型看到什么
 
-所选 DeepSeek 模型会收到 harness 系统提示词、消息历史、工具 schema、停止序列与调用配置（`maxTokens`、`reasoningEffort`、`temperature`），不包含适配器撰写的提示词散文。提供方专用请求扩展字段留在模型输入之外。视觉模型通常接收 Files API 引用形式的用户与工具结果图片，其旁带附件句柄和请求预览尺寸。当前执行文件系统可以映射附件提供方的宿主对象时，它还会收到规范化对象路径；描述符会把该副本标记为只读，并警告规范化可能缩放或重新编码上传内容。Files 解析失败时，全部保留图片改用内联 base64；超出预算的较旧图片则在占位文本中保留当前请求已解析的访问方式。此前 assistant 轮次的推理内容会原样传回，无论该轮次是否调用了工具。 对于非法 JSON 或非对象的历史工具参数，Messages 发送 `{}`。此参数兜底保留调用 ID、工具名和工具结果；原始参数仍保留在 Session 日志中。新生成的 Messages 工具参数仍须是有效 JSON 对象。 Messages 会省略用户消息和工具结果中的 `reasoning` 与 `tool-call` 块。这也允许回放包含助手输出的已保存子 Agent 通知；原始 Session 内容保持完整。转换后的空用户消息会被跳过，空工具结果则保留调用 id 和错误标记。其他不支持的输入块仍会以 `UNSUPPORTED_CONTENT` 失败。 当所有已声明工具都为延迟加载时，适配器会在列表开头添加非延迟的 `DeferredToolPlaceholder`，描述为 `Reserved placeholder that keeps deferred tool loading active; never call this tool.`。如与已声明工具重名，则添加数字后缀。占位工具没有执行器；调用会收到常规的工具不可用结果。占位工具不会改变真实工具声明。共享的[工具更新投影](../llm/README.zh.md#known-limitations-and-deferred-work)在移除任何工具时重建 addition-only 基线，后续添加仍保持延迟加载。空工具列表不会添加占位工具。
+所选 DeepSeek 模型会收到 harness 系统提示词、消息历史、工具 schema、停止序列与调用配置（`maxTokens`、`reasoningEffort`、`temperature`）。提供方专用请求扩展字段留在模型输入之外。视觉模型通常接收 Files API 引用形式的用户与工具结果图片，其旁带附件句柄和请求预览尺寸。当前执行文件系统可以映射附件提供方的宿主对象时，它还会收到规范化对象路径；描述符会把该副本标记为只读，并警告规范化可能缩放或重新编码上传内容。Files 解析失败时，全部保留图片改用内联 base64；超出预算的较旧图片则在占位文本中保留当前请求已解析的访问方式。此前 assistant 轮次的推理内容会原样传回，无论该轮次是否调用了工具。 对于非法 JSON 或非对象的历史工具参数，Messages 发送 `{}`。此参数兜底保留调用 ID、工具名和工具结果；原始参数仍保留在 Session 日志中。新生成的 Messages 工具参数仍须是有效 JSON 对象。 Messages 会省略用户消息和工具结果中的 `reasoning` 与 `tool-call` 块。这也允许回放包含助手输出的已保存子 Agent 通知；原始 Session 内容保持完整。转换后的空用户消息会被跳过，空工具结果则保留调用 id 和错误标记。其他不支持的输入块仍会以 `UNSUPPORTED_CONTENT` 失败。 当所有已声明工具都为延迟加载时，适配器会在列表开头添加非延迟的 `DeferredToolPlaceholder`，描述为 `Reserved placeholder that keeps deferred tool loading active; never call this tool.`。如与已声明工具重名，则添加数字后缀。占位工具没有执行器；调用会收到常规的工具不可用结果。占位工具不会改变真实工具声明。共享的[工具更新投影](../llm/README.zh.md#known-limitations-and-deferred-work)在移除任何工具时重建 addition-only 基线，后续添加仍保持延迟加载。空工具列表不会添加占位工具。
 
 #### Token 影响
 
-提供方分词决定精确的文本与图片 token 输入。适配器声明按路由的 `imageRequestPricing`：把日志中的图片省略决策选中的每个出现位置按其占位文本计价，并按投影后的尺寸使用公开的视觉计量规则（14 px patch 网格、3:1 降采样、544×544 放大下限、单图 1024 token 上限）为每张保留图片计价。这使 token 计量服务可以在请求发出前为图片压力定价；上报的 usage 仍是权威值。推理回传会把每个推理轮次的思维链带进后续请求，而已省略的图片不再消耗视觉 token。保留的出现位置按精确请求版本字节超过 file 模式或内联回退预算（`maxRequestFilesBytes`、`maxImagesPerRequest` 与两个量子）的请求，以 `IMAGE_OFFLOAD_REQUIRED` 失败并说明还需省略多少最老的出现位置，由 `dsh-compaction-image-offload` 用 `image/offload` 事件记录所选位置并重试。可用时报告缓存读取用量。Messages 的 token 总数包含未缓存输入、输出、缓存读取与缓存写入 token。 `imageRequestTarget(provider, model, image)` 向截图调用方提供与模型请求一致的图片尺寸和字节目标；不缩放图片的适配器保留归一化后的原图。
+提供方分词决定精确的文本与图片 token 输入。存在占位工具时，其名称、描述和空对象 schema 构成一个额外工具声明，增加输入 token。适配器声明按路由的 `imageRequestPricing`：把日志中的图片省略决策选中的每个出现位置按其占位文本计价，并按投影后的尺寸使用公开的视觉计量规则（14 px patch 网格、3:1 降采样、544×544 放大下限、单图 1024 token 上限）为每张保留图片计价。这使 token 计量服务可以在请求发出前为图片压力定价；上报的 usage 仍是权威值。推理回传会把每个推理轮次的思维链带进后续请求，而已省略的图片不再消耗视觉 token。保留的出现位置按精确请求版本字节超过 file 模式或内联回退预算（`maxRequestFilesBytes`、`maxImagesPerRequest` 与两个量子）的请求，以 `IMAGE_OFFLOAD_REQUIRED` 失败并说明还需省略多少最老的出现位置，由 `dsh-compaction-image-offload` 用 `image/offload` 事件记录所选位置并重试。可用时报告缓存读取用量。Messages 的 token 总数包含未缓存输入、输出、缓存读取与缓存写入 token。 `imageRequestTarget(provider, model, image)` 向截图调用方提供与模型请求一致的图片尺寸和字节目标；不缩放图片的适配器保留归一化后的原图。
 
 #### KV Cache 影响
 
-未改变的已组装前缀有资格获得 DeepSeek 缓存复用，本适配器会在用量中报告。确定性的请求图片字节并不意味着完整前缀固定不变：执行世界路径变化会改写历史描述符文本，刷新上传会替换 `file_id`，Files 到 base64 的回退也会改变图片表示。这些变化以及模型路由、提示词、schema、历史或图片预算变化，都可能从首个受影响 token 起阻止复用；推理回传在每个推理轮次上追加内容。在声明了 `systemPromptUpdate: in-history` 的目录条目上，同一请求序列延续期间的系统提示词变化会追加到已缓存历史之后，因此直到该历史末尾的前缀仍可复用；工具 schema 变化仍会从第一个改变的 token 起阻止复用。
+未改变的已组装前缀有资格获得 DeepSeek 缓存复用，本适配器会在用量中报告。对于非空的全延迟工具列表，占位工具属于声明前缀；添加、移除或重命名占位工具会改变该前缀，并可能影响缓存复用。确定性的请求图片字节并不意味着完整前缀固定不变：执行世界路径变化会改写历史描述符文本，刷新上传会替换 `file_id`，Files 到 base64 的回退也会改变图片表示。这些变化以及模型路由、提示词、schema、历史或图片预算变化，都可能从首个受影响 token 起阻止复用；推理回传在每个推理轮次上追加内容。在声明了 `systemPromptUpdate: in-history` 的目录条目上，同一请求序列延续期间的系统提示词变化会追加到已缓存历史之后，因此直到该历史末尾的前缀仍可复用；工具 schema 变化仍会从第一个改变的 token 起阻止复用。
 
 ### DeepSeek 响应
 
diff --git a/packages/llm/llm/src/content.ts b/packages/llm/llm/src/content.ts
index 8dd5430169..c2e2d33961 100644
--- a/packages/llm/llm/src/content.ts
+++ b/packages/llm/llm/src/content.ts
@@ -425,7 +425,8 @@ function rebaseAdditionOnlyHistory(
 /**
  * Construct provider declarations from session-folded history without changing logged active tools.
  * Unsupported routes and incomplete history use current declarations without developer updates.
- * Explicitly deferred baseline tools become available only after their first retained addition.
+ * Explicitly deferred declarations require an addition to activate them.
+ * A rebuild makes previously activated declarations immediate; unactivated declarations stay deferred.
  * Addition-only routes rebuild their baseline whenever a tool is removed;
  * later additions remain deferred and superseded tool blocks are omitted without dropping other content.
  * @param messages - complete request inputs, or the prefix selected for an auxiliary call.

From 523e741a31cfc365218c3b48d20bdf2e9c19de76 Mon Sep 17 00:00:00 2001
From: Yixiang Tu <tuyixiang@deepseek.com>
Date: Fri, 23 Oct 2026 11:05:32 +0800
Subject: [PATCH 25/32] test(llm-deepseek): cover all-deferred requests and
 separate tool updates

---
 .../llm/llm-deepseek/tests/adapter.e2e.ts     | 26 ++++++++-----
 .../tests/fixtures/all-deferred-tools.ts      | 38 +++++++++++++++++++
 .../cordis.snapshot.yml                       | 18 +++++++++
 .../deepseek-all-deferred-tools/cordis.yml    |  3 ++
 .../session.v4.jsonl                          | 17 +++++++++
 .../deepseek-all-deferred-tools/snapshot.yml  |  8 ++++
 .../system-prompt.expected.md                 | 14 +++++++
 .../tool-schemas.expected.json                | 14 +++++++
 8 files changed, 128 insertions(+), 10 deletions(-)
 create mode 100644 packages/llm/llm-deepseek/tests/fixtures/all-deferred-tools.ts
 create mode 100644 snapshots/session/deepseek-all-deferred-tools/cordis.snapshot.yml
 create mode 100644 snapshots/session/deepseek-all-deferred-tools/cordis.yml
 create mode 100644 snapshots/session/deepseek-all-deferred-tools/session.v4.jsonl
 create mode 100644 snapshots/session/deepseek-all-deferred-tools/snapshot.yml
 create mode 100644 snapshots/session/deepseek-all-deferred-tools/system-prompt.expected.md
 create mode 100644 snapshots/session/deepseek-all-deferred-tools/tool-schemas.expected.json

diff --git a/packages/llm/llm-deepseek/tests/adapter.e2e.ts b/packages/llm/llm-deepseek/tests/adapter.e2e.ts
index 6c5264c2a8..c437d810fd 100644
--- a/packages/llm/llm-deepseek/tests/adapter.e2e.ts
+++ b/packages/llm/llm-deepseek/tests/adapter.e2e.ts
@@ -1,6 +1,6 @@
 import * as Protocol from '@deepseek-ai/dsh-llm-deepseek'
 /**
- * Real Messages round trips use the official root and require credentials.
+ * Real Messages round trips require credentials; tool replacement also accepts DEEPSEEK_BASE_URL.
  * System-update checks additionally require DEEPSEEK_IN_HISTORY_MODEL.
  */
 import { randomUUID } from 'node:crypto'
@@ -33,7 +33,7 @@ afterEach(async () => {
   vi.unstubAllEnvs()
   vi.unstubAllGlobals()
 })
-async function boot(models?: Messages.Options['models']) {
+async function boot(models?: Messages.Options['models'], baseURL = Protocol.PUBLIC_BASE_URL) {
   const home = await mkdtemp(join(tmpdir(), 'dsh-messages-e2e-'))
   cleanups.push(() => rm(home, { recursive: true, force: true }))
   vi.stubEnv('DSH_HOME', home)
@@ -41,7 +41,7 @@ async function boot(models?: Messages.Options['models']) {
   cleanups.push(() => ctx.fiber.dispose())
   await ctx.plugin(LlmRuntime)
   await ctx.plugin(Messages, {
-    baseURL: Protocol.PUBLIC_BASE_URL,
+    baseURL,
     maxTokens: 4096,
     ...models === undefined ? {} : { models },
   })
@@ -50,17 +50,23 @@ async function boot(models?: Messages.Options['models']) {
 const tool = { name: 'lookup_value', description: 'Read the requested value. Always call this tool to obtain a value.', parameters: { type: 'object', properties: { key: { type: 'string' } }, required: ['key'] } }
 
 describe.skipIf(!process.env.DEEPSEEK_API_KEY)('DeepSeek Messages real API', () => {
-  it('calls a replacement tool after every baseline tool has been removed', async () => {
+  it.each([false, true])('calls a replacement tool after every baseline tool has been removed, separate updates=%s', async (separate) => {
     const model = 'deepseek-flash'
-    const ctx = await boot([{ id: model, toolUpdate: 'addition-only' }])
-    const update = createDeveloperMessage({ source: { kind: 'tool-registry' }, content: [
-      { type: 'tool-removal', toolName: 'old_lookup' }, { type: 'tool-addition', toolName: tool.name },
-    ] })
+    const ctx = await boot([{ id: model, toolUpdate: 'addition-only' }], process.env.DEEPSEEK_BASE_URL ?? Protocol.PUBLIC_BASE_URL)
+    const updates = [createDeveloperMessage({ source: { kind: 'tool-registry' }, content: [
+      { type: 'tool-removal', toolName: 'old_lookup' },
+      ...separate ? [] : [{ type: 'tool-addition' as const, toolName: tool.name }],
+    ] })]
+    if (separate) updates.push(createDeveloperMessage({ source: { kind: 'tool-registry' }, content: [
+      { type: 'tool-addition', toolName: tool.name },
+    ] }))
     const response = await assemble(ctx.llm.stream(options({
       model, reasoningEffort: ReasoningEffortId('high'),
-      messages: [user('Call lookup_value with key "answer" to obtain the value. Do not guess.'), update],
+      messages: [user('Call lookup_value with key "answer" to obtain the value. Do not guess.'), ...updates],
       tools: [tool],
-      toolHistory: { tools: [{ ...tool, name: 'old_lookup' }], updates: [{ messageId: update.id, additions: [tool] }] },
+      toolHistory: { tools: [{ ...tool, name: 'old_lookup' }], updates: updates.map(update => ({
+        messageId: update.id, additions: update.content.some(block => block.type === 'tool-addition') ? [tool] : [],
+      })) },
     })), model)
     expect(response.assembler.finish).toEqual({ kind: 'tool-calls' })
     expect(response.message.content.filter(block => block.type === 'tool-call').map(call => call.name)).toEqual([tool.name])
diff --git a/packages/llm/llm-deepseek/tests/fixtures/all-deferred-tools.ts b/packages/llm/llm-deepseek/tests/fixtures/all-deferred-tools.ts
new file mode 100644
index 0000000000..969347e651
--- /dev/null
+++ b/packages/llm/llm-deepseek/tests/fixtures/all-deferred-tools.ts
@@ -0,0 +1,38 @@
+/** Replay explicitly deferred declarations without activating them. */
+import assert from 'node:assert/strict'
+import type { Context } from '@deepseek-ai/cordis'
+import type {} from '@deepseek-ai/dsh-agent'
+import { projectToolUpdates } from '@deepseek-ai/dsh-llm'
+import { defineContentToolFixture } from '@deepseek-ai/dsh-tool-testkit'
+import { resolveAdapterOptions } from '../../src/config.ts'
+import { serialize } from '../../src/serialize.ts'
+
+export const name = 'messages-all-deferred-tools-snapshot'
+export const inject = ['tools', 'llm']
+
+/**
+ * Keep one real tool deferred and inspect the derived Messages request.
+ * @param ctx - Snapshot composition context.
+ */
+export function apply(ctx: Context): void {
+  ctx.on('agent/created', ({ agent }) => {
+    agent.ctx.tools.restrict({ allow: [] })
+    agent.ctx.tools.register(defineContentToolFixture({
+      name: 'snapshot_pending', description: 'Wait for activation.', parameters: {}, deferLoading: true,
+      async execute() { assert.fail('An unactivated tool must not be called') },
+    }))
+  })
+  const connection = resolveAdapterOptions({})
+  ctx.on('llm/stream', (options, next) => {
+    const projected = projectToolUpdates(options.messages, options.tools, 'addition-only', options.toolHistory)
+    assert.ok(projected.tools)
+    assert.deepEqual(projected.tools, options.tools)
+    const request = serialize({ ...options, tools: [...projected.tools] }, connection, projected.messages, new Map(), () => undefined)
+    assert.deepEqual(request.tools, [
+      { name: 'DeferredToolPlaceholder', description: 'Reserved placeholder that keeps deferred tool loading active; never call this tool.', input_schema: { type: 'object', properties: {} } },
+      { name: 'snapshot_pending', description: 'Wait for activation.', input_schema: { type: 'object', properties: {} }, defer_loading: true },
+    ])
+    assert.deepEqual(request.messages.filter(message => message.role === 'system'), [])
+    return next()
+  })
+}
diff --git a/snapshots/session/deepseek-all-deferred-tools/cordis.snapshot.yml b/snapshots/session/deepseek-all-deferred-tools/cordis.snapshot.yml
new file mode 100644
index 0000000000..2f1d87deef
--- /dev/null
+++ b/snapshots/session/deepseek-all-deferred-tools/cordis.snapshot.yml
@@ -0,0 +1,18 @@
+- id: llm-deepseek
+  disabled: true
+
+- insert:
+    - id: llm-replay
+      name: '@deepseek-ai/dsh-llm-replay'
+      config:
+        providers:
+          - id: deepseek-official
+            name: DeepSeek
+            models:
+              - id: deepseek-v4-flash
+                toolUpdate: addition-only
+                defaultMaxTokens: 256000
+                reasoningEfforts: [off, low, high, max]
+                defaultReasoningEffort: high
+    - id: messages-all-deferred-tools-snapshot
+      name: '../../../packages/llm/llm-deepseek/tests/fixtures/all-deferred-tools.ts'
diff --git a/snapshots/session/deepseek-all-deferred-tools/cordis.yml b/snapshots/session/deepseek-all-deferred-tools/cordis.yml
new file mode 100644
index 0000000000..9bbd9f0e59
--- /dev/null
+++ b/snapshots/session/deepseek-all-deferred-tools/cordis.yml
@@ -0,0 +1,3 @@
+- insert:
+    - id: messages-all-deferred-tools-snapshot
+      name: '../../../packages/llm/llm-deepseek/tests/fixtures/all-deferred-tools.ts'
diff --git a/snapshots/session/deepseek-all-deferred-tools/session.v4.jsonl b/snapshots/session/deepseek-all-deferred-tools/session.v4.jsonl
new file mode 100644
index 0000000000..c7f585e660
--- /dev/null
+++ b/snapshots/session/deepseek-all-deferred-tools/session.v4.jsonl
@@ -0,0 +1,17 @@
+{"type":"session","version":4,"id":"{{session:1}}","createdAt":0,"cwd":"{{cwd}}","isSeeded":false,"delegationDepth":0}
+{"type":"permission/preset","data":{"preset":"danger-full-access"}}
+{"type":"sandbox/mode","data":{"mode":"danger-full-access"}}
+{"type":"approval/policy","data":{"policy":"never"}}
+{"type":"agent/inbox/spliced","data":{"target":"next-turn","start":0,"inserted":[{"content":[{"type":"text","text":"Reply DONE without calling any tools."}],"source":{"kind":"user"},"role":"user","id":"{{message:1}}"}]}}
+{"type":"turn/start","data":{"turn":1}}
+{"type":"agent/inbox/spliced","data":{"target":"next-turn","start":0,"removedCount":1,"inserted":[]}}
+{"type":"step/start","data":{"turn":1,"step":1}}
+{"type":"system/message","data":{"turn":1,"step":1,"message":{"role":"system","content":[{"type":"text","text":"{{system}}"}],"source":{"kind":"system-prompt"},"id":"{{message:2}}"}},"surfaceOp":"append"}
+{"type":"user/message","data":{"content":[{"type":"text","text":"Reply DONE without calling any tools."}],"source":{"kind":"user"},"role":"user","id":"{{message:1}}"},"surfaceOp":"append"}
+{"type":"user/message","data":{"content":[{"type":"text","text":"Current runtime context. This snapshot supersedes earlier runtime-context snapshots.\n\nCurrent working directory: \"{{cwd}}\".\n\nCurrent DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations.\n\nApproval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`)."}],"source":{"kind":"runtime-context","form":"snapshot","sections":[{"name":"working-directory:current","text":"Current working directory: \"{{cwd}}\"."},{"name":"sandbox:policy","text":"Current DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations."},{"name":"approval:policy","text":"Approval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`)."}]},"role":"user","id":"{{message:3}}"},"surfaceOp":"append"}
+{"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":"{{tools}}"},"reason":"initial"}}
+{"type":"request/context","data":{"provider":"deepseek-official","model":"deepseek-v4-flash"}}
+{"type":"session/title","data":{"title":"Reply DONE without calling any","messageSeqs":[8],"source":{"kind":"fallback"}}}
+{"type":"assistant/message","data":{"turn":1,"step":1,"message":{"role":"assistant","content":[{"type":"text","text":"DONE"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:4}}"},"stream":[{"type":"chunk","time":1792661643324,"chunk":{"type":"block-start","index":0,"blockType":"text"}},{"type":"text-chunks","time0":1792661643324,"index":0,"dt":[],"texts":["DONE"]},{"type":"chunk","time":1792661643324,"chunk":{"type":"block-end","index":0,"block":{"type":"text","text":"DONE"}}},{"type":"chunk","time":1792661643324,"chunk":{"type":"finish","reason":{"kind":"stop"}}}]},"surfaceOp":"append"}
+{"type":"step/end","data":{"turn":1,"step":1}}
+{"type":"turn/end","data":{"turn":1,"reason":{"kind":"completed"}}}
diff --git a/snapshots/session/deepseek-all-deferred-tools/snapshot.yml b/snapshots/session/deepseek-all-deferred-tools/snapshot.yml
new file mode 100644
index 0000000000..9473be6a93
--- /dev/null
+++ b/snapshots/session/deepseek-all-deferred-tools/snapshot.yml
@@ -0,0 +1,8 @@
+version: 1
+scenario: deepseek-all-deferred-tools
+profile: headless
+composition: deepseek-all-deferred-tools
+recording: authored
+header:
+  class: deepseek-all-deferred-tools
+  pin: true
diff --git a/snapshots/session/deepseek-all-deferred-tools/system-prompt.expected.md b/snapshots/session/deepseek-all-deferred-tools/system-prompt.expected.md
new file mode 100644
index 0000000000..7c0cf23533
--- /dev/null
+++ b/snapshots/session/deepseek-all-deferred-tools/system-prompt.expected.md
@@ -0,0 +1,14 @@
+You are an AI agent powered by DeepSeek Harness.
+
+You are a coding assistant powered by the deepseek-v4-flash model. Your bash tool runs under a file sandbox — a `[sandbox: file access denied …]` result is policy, not a command bug.
+
+Verify your work by running the code or tests. Keep answers brief and factual.
+
+
+Check the [exit code: N] marker on every bash result; investigate failures before moving on.
+
+Track every background job id you start. You are notified in-session when a job finishes — do not busy-poll or sleep on one; keep working on independent steps and do not duplicate a running job's work. Before giving a final answer, collect every still-relevant job with job_output (set wait: true only when you are genuinely blocked on it), and job_kill jobs that stopped mattering.
+
+create_goal may infer goal intent from a direct human request in any language. After session resume or fork, an active goal is disarmed: when a human asks to continue or resume in any wording or language, use update_goal action resume to rearm it. Mark complete only when the objective is actually achieved. Mark blocked only after the same blocking condition persists for at least 3 consecutive goal rounds, and report that concrete condition in blocked_reason; difficulty, uncertainty, or useful remaining work is not blocked.
+
+Use the workflow tool ONLY when the user explicitly asks for a workflow or for large multi-agent orchestration: you write a JavaScript script (the tool description documents the exact format) that fans work out across many subagents with phases and structured results. For one or two delegations, prefer plain subagent calls.
diff --git a/snapshots/session/deepseek-all-deferred-tools/tool-schemas.expected.json b/snapshots/session/deepseek-all-deferred-tools/tool-schemas.expected.json
new file mode 100644
index 0000000000..1c2c684312
--- /dev/null
+++ b/snapshots/session/deepseek-all-deferred-tools/tool-schemas.expected.json
@@ -0,0 +1,14 @@
+{
+  "initial": [
+    {
+      "name": "snapshot_pending",
+      "description": "Wait for activation.",
+      "parameters": {
+        "type": "object",
+        "properties": {}
+      },
+      "deferLoading": true
+    }
+  ],
+  "changes": []
+}

From 1f3bc8b22bfcd2c439ae342efa57712515581ac3 Mon Sep 17 00:00:00 2001
From: Yixiang Tu <tuyixiang@deepseek.com>
Date: Fri, 23 Oct 2026 13:55:06 +0800
Subject: [PATCH 26/32] fix(llm): rebuild tool history for additions to an
 empty set

---
 .../2026-09-20-dynamic-tool-updates.i18n.yaml |  8 ++--
 .../2026-09-20-dynamic-tool-updates.md        |  4 +-
 .../2026-09-20-dynamic-tool-updates.zh.md     |  4 +-
 packages/llm/llm-deepseek/README.i18n.yaml    |  4 +-
 packages/llm/llm-deepseek/README.md           |  2 +-
 packages/llm/llm-deepseek/README.zh.md        |  2 +-
 .../llm/llm-deepseek/tests/adapter.e2e.ts     | 10 ++--
 .../tests/fixtures/deferred-tools.ts          | 22 +++++++--
 packages/llm/llm/README.i18n.yaml             |  4 +-
 packages/llm/llm/README.md                    |  2 +-
 packages/llm/llm/README.zh.md                 |  2 +-
 packages/llm/llm/src/content.ts               |  9 ++--
 packages/llm/llm/tests/content.spec.ts        | 40 +++++++++++++++-
 packages/llm/llm/tests/service.spec.ts        |  9 +++-
 .../session-snapshot/README.i18n.yaml         |  4 +-
 .../test-support/session-snapshot/README.md   |  2 +-
 .../session-snapshot/README.zh.md             |  2 +-
 .../session-snapshot/src/suite.ts             | 10 ++--
 .../session-snapshot/tests/suite.spec.ts      |  9 +++-
 .../deepseek-deferred-tools/session.v4.jsonl  | 48 +++++++++++--------
 .../deepseek-deferred-tools/snapshot.yml      |  2 +-
 .../tool-schemas.expected.json                | 21 ++++----
 22 files changed, 146 insertions(+), 74 deletions(-)

diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
index c899f1ca29..9e822eb717 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
@@ -9,11 +9,11 @@
   en: 97fe58a13135b4a1
   zh: 7490373a8d941da5
 /agent-note-active-tool-headers-and-stateful-request-projection/decision:
-  en: c1ca2f0657dc02c0
-  zh: db63130f49594d44
+  en: 51773686866c95d1
+  zh: 489ea0e1144720e1
 /agent-note-active-tool-headers-and-stateful-request-projection/alternatives-considered:
   en: 311db1f781e386e7
   zh: 7e3312544154a158
 /agent-note-active-tool-headers-and-stateful-request-projection/consequences:
-  en: aa3e68c78ac3f666
-  zh: 5ec40c83183fc7e0
+  en: 94b1037f25176c7d
+  zh: 141c25306a57e5ea
diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
index b255ef500c..23a21d7636 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
@@ -14,7 +14,7 @@ Plugin and MCP tools change during conversations. Providers differ in whether th
 
 `Session.toolHistory()` caches a capability-independent fold of committed headers and developer messages. First access restores inherited events; later reads consume only unseen events. Immutable snapshots carry initial declarations and ordered update identities with additions resolved through their historical headers. Explicit series starts and changed retained definitions rebuild declarations. Restoring a retained name with an unchanged definition continues the series: the projection keeps the declaration unchanged and lets the recorded addition re-offer the tool after its earlier removal, so a removal never disables a declared tool and a loading mode never rewrites an earlier declaration.
 
-Loop and compaction requests carry this snapshot as `GenerateOptions.toolHistory`. At adapter dispatch, `projectToolUpdates` uses the prepared route's `toolUpdate`. Unsupported routes receive active definitions without `deferLoading` or developer messages. Supported routes defer historical additions; `in-history` retains removed definitions and removal blocks, while `addition-only` omits both. On addition-only routes, removing any tool rebuilds the route's baseline after that update: the request declarations change even when the removed tool was activated later, so retaining superseded activation blocks cannot preserve the full conversation prefix. Previously activated tools become immediate; explicitly deferred declarations with no activation remain deferred. Subsequent additions remain deferred until their recorded activation. Superseded tool blocks are omitted without discarding other content in those messages. The Session fold and durable events remain capability-independent. Missing history or a request prefix omitting recorded updates uses current declarations without developer updates.
+Loop and compaction requests carry this snapshot as `GenerateOptions.toolHistory`. At adapter dispatch, `projectToolUpdates` uses the prepared route's `toolUpdate`. Unsupported routes receive active definitions without `deferLoading` or developer messages. Supported routes defer historical additions; `in-history` retains removed definitions and removal blocks, while `addition-only` omits both. On addition-only routes, removing any tool rebuilds the route's baseline after that update: the request declarations change even when the removed tool was activated later, so retaining superseded activation blocks cannot preserve the full conversation prefix. Adding tools when no declarations exist also rebuilds the baseline. Deferred declarations count as existing tools. The first tools would otherwise require a non-deferred placeholder in DeepSeek, which changes the prefix anyway; declaring them immediately avoids an unnecessary activation message and placeholder. Previously activated tools become immediate; explicitly deferred declarations with no activation remain deferred. Subsequent additions remain deferred until their recorded activation. Superseded tool blocks are omitted without discarding other content in those messages. The Session fold and durable events remain capability-independent. Missing history or a request prefix omitting recorded updates uses current declarations without developer updates.
 
 DeepSeek translates projected updates into system-role `tool_addition` and `tool_removal` blocks and `defer_loading` declarations, sending the tool-changes beta header when update blocks occur. The default `deepseek-flash` entry declares `addition-only`; pi-ai selects `in-history` for compatible Anthropic routes and `addition-only` for compatible Chat Completions and Responses routes. Chat and Trajectory display developer messages as context nodes, using localized tool-change notices: single changes show the tool name; multiple changes show counts and expandable name lists.
 
@@ -36,6 +36,6 @@ Tool lists and logical update events are capability-independent; only outgoing d
 
 The authored [headless prompt/tool scenario](../../../../snapshots/session/dynamic-tool-prompt-updates/snapshot.yml) pins an appended prompt beside a deferred tool addition and verifies that the first request's messages stay unchanged. It shares the stable-prompt scenario's tool lifecycle and schema expectations.
 
-The [DeepSeek replacement scenario](../../../../snapshots/session/deepseek-deferred-tools/snapshot.yml) checks a rebuilt baseline, a subsequent deferred addition, and removal of that later-activated tool through Messages serialization. An adapter-local placeholder covers nonempty all-deferred requests that remain, including explicit deferred declarations and direct calls. It does not activate real tools. These checks establish request construction, not measured cache savings from rebuilding.
+The [DeepSeek replacement scenario](../../../../snapshots/session/deepseek-deferred-tools/snapshot.yml) checks the first additions to an empty set, a rebuilt baseline, a subsequent deferred addition, and removal of that later-activated tool through Messages serialization. An adapter-local placeholder covers nonempty all-deferred requests that remain, including explicit deferred declarations and direct calls. It does not activate real tools. These checks establish request construction, not measured cache savings from rebuilding.
 
 The [real DeepSeek SDK test](../../../../apps/cli/tests/profiles/sdk/dynamic-tool-cache.e2e.ts) measures the first request after a native tool addition with both unchanged and simultaneously updated instructions. Unique user history prevents a shared system-prompt cache hit from satisfying the preceding-input assertion. Removal checks tool availability without requiring cache retention; each case disables retries.
diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
index 4edcc7a061..9f4ee01afd 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
@@ -14,7 +14,7 @@ Status: implemented
 
 `Session.toolHistory()` 缓存对已提交请求头和 developer 消息的归约，不依赖模型能力。首次访问恢复继承事件；后续读取仅处理新增事件。不可变快照携带初始声明和有序更新标识，添加定义通过历史请求头解析。显式新序列和保留定义变化会重建声明。以未变化的定义恢复保留名称时序列继续：投影保持声明不变，由记录的添加在先前移除之后重新提供该工具，因此移除不会禁用已声明的工具，加载模式也不会改写先前声明。
 
-循环和压缩请求通过 `GenerateOptions.toolHistory` 携带此快照。适配器分发时，`projectToolUpdates` 使用已准备路由的 `toolUpdate`。不支持的路由接收有效定义，不携带 `deferLoading` 或 developer 消息。支持的路由延迟历史添加；`in-history` 保留已移除定义和移除块，`addition-only` 则省略两者。在 addition-only 路由移除任何工具时，使用该次更新后的状态重建路由基线：即使被移除工具是后来激活的，请求声明也已发生变化，保留已被取代的激活块无法保留完整对话前缀。此前已激活工具变为立即加载；没有激活记录的显式延迟声明仍保持延迟。后续添加在记录的激活位置前保持延迟加载。已被取代的工具块会被省略，但不会丢弃这些消息中的其他内容。Session 归约和持久事件仍不依赖模型能力。缺少历史或请求前缀遗漏已记录更新时，使用当前声明且不发送 developer 更新。
+循环和压缩请求通过 `GenerateOptions.toolHistory` 携带此快照。适配器分发时，`projectToolUpdates` 使用已准备路由的 `toolUpdate`。不支持的路由接收有效定义，不携带 `deferLoading` 或 developer 消息。支持的路由延迟历史添加；`in-history` 保留已移除定义和移除块，`addition-only` 则省略两者。在 addition-only 路由移除任何工具时，使用该次更新后的状态重建路由基线：即使被移除工具是后来激活的，请求声明也已发生变化，保留已被取代的激活块无法保留完整对话前缀。不存在任何声明时添加工具，也会重建基线。延迟声明也计入已有工具。否则首批工具会使 DeepSeek 需要非延迟占位工具，同样改变前缀；直接声明这些工具可避免不必要的激活消息和占位工具。此前已激活工具变为立即加载；没有激活记录的显式延迟声明仍保持延迟。后续添加在记录的激活位置前保持延迟加载。已被取代的工具块会被省略，但不会丢弃这些消息中的其他内容。Session 归约和持久事件仍不依赖模型能力。缺少历史或请求前缀遗漏已记录更新时，使用当前声明且不发送 developer 更新。
 
 DeepSeek 把投影后的更新转换为 system 角色的 `tool_addition` 和 `tool_removal` 块以及 `defer_loading` 声明，在存在更新块时发送工具变更 beta 请求头。默认 `deepseek-flash` 条目声明 `addition-only`；pi-ai 为兼容的 Anthropic 路由选择 `in-history`，为兼容的 Chat Completions 和 Responses 路由选择 `addition-only`。Chat 和 Trajectory 将 developer 消息显示为上下文节点，工具变更使用本地化通知：单项变更显示工具名，多项变更显示数量及可展开的名称列表。
 
@@ -36,6 +36,6 @@ DeepSeek 把投影后的更新转换为 system 角色的 `tool_addition` 和 `to
 
 手写的[无界面提示词／工具场景](../../../../snapshots/session/dynamic-tool-prompt-updates/snapshot.yml)钉住追加提示词与延迟工具添加同时发生的行为，并验证首次请求的消息保持不变。它复用稳定提示词场景的工具生命周期和 schema 期望值。
 
-[DeepSeek 替换场景](../../../../snapshots/session/deepseek-deferred-tools/snapshot.yml)通过 Messages 序列化验证重建后的基线、后续延迟添加，以及移除该后来激活的工具。适配器内的占位工具覆盖仍然存在的非空全延迟请求，包括显式延迟声明和直接调用，不会激活真实工具。这些检查验证请求构造，不代表已经测量重建带来的缓存收益。
+[DeepSeek 替换场景](../../../../snapshots/session/deepseek-deferred-tools/snapshot.yml)通过 Messages 序列化验证向空工具集首次添加工具、重建后的基线、后续延迟添加，以及移除该后来激活的工具。适配器内的占位工具覆盖仍然存在的非空全延迟请求，包括显式延迟声明和直接调用，不会激活真实工具。这些检查验证请求构造，不代表已经测量重建带来的缓存收益。
 
 [真实 DeepSeek SDK 测试](../../../../apps/cli/tests/profiles/sdk/dynamic-tool-cache.e2e.ts) 分别在指令不变和指令同时更新时测量原生工具新增后的首次请求。独有的用户历史确保仅命中共享系统提示词缓存无法满足前序输入断言。移除场景检查工具可用性，不要求保留缓存；每个用例均禁用重试。
diff --git a/packages/llm/llm-deepseek/README.i18n.yaml b/packages/llm/llm-deepseek/README.i18n.yaml
index d17e33ac4d..c3d2e1948c 100644
--- a/packages/llm/llm-deepseek/README.i18n.yaml
+++ b/packages/llm/llm-deepseek/README.i18n.yaml
@@ -63,8 +63,8 @@
   en: 1dc50052999253c6
   zh: 7abf968fc18bffcd
 /deepseek-ai-dsh-llm-deepseek/model-experience/deepseek-request/what-the-model-sees:
-  en: a5534fa423d207d8
-  zh: 52c524bc054076fb
+  en: 06f3cafb41d8d6bd
+  zh: 1b031d123a939685
 /deepseek-ai-dsh-llm-deepseek/model-experience/deepseek-request/token-effect:
   en: f8891795b5bfd744
   zh: b1235786b04a7558
diff --git a/packages/llm/llm-deepseek/README.md b/packages/llm/llm-deepseek/README.md
index 99be446545..5bdea7637b 100644
--- a/packages/llm/llm-deepseek/README.md
+++ b/packages/llm/llm-deepseek/README.md
@@ -170,7 +170,7 @@ Read these pages when the package-level contract is not enough. They move from t
 
 #### What the model sees
 
-The selected DeepSeek model receives the harness system prompt, message history, tool schemas, stop sequences, and call config (`maxTokens`, `reasoningEffort`, `temperature`). Provider-specific request-extension fields remain outside model input. The vision model normally receives retained user and tool-result images as Files API references beside attachment handles and request-preview dimensions. It also receives a normalized-object path when the current execution filesystem maps the attachment provider's host object; the descriptor marks this copy read-only and warns that normalization may have resized or re-encoded the upload. A Files resolution failure sends all retained images as inline base64 instead, and an over-budget older image keeps the access resolved for that request in its placeholder. Reasoning content from a prior assistant turn is passed back verbatim, whether or not that turn called a tool. Messages sends `{}` for historical tool arguments that are malformed JSON or are not objects. This argument fallback preserves call ids, tool names, and tool results; the original arguments stay in the Session log. Newly generated Messages tool arguments still require valid JSON objects. Messages omits `reasoning` and `tool-call` blocks inside user messages and tool results. This also permits replay of saved subagent notices containing assistant output; the original Session content remains intact. Empty user messages are skipped after conversion, while empty tool results retain their call ids and error flags. Other unsupported input blocks still fail with `UNSUPPORTED_CONTENT`. When every declared tool is deferred, the adapter prepends a non-deferred `DeferredToolPlaceholder` with the description `Reserved placeholder that keeps deferred tool loading active; never call this tool.` A numeric suffix avoids collisions with declared tools. The placeholder has no executor; calls receive the ordinary unavailable-tool result. The placeholder leaves real declarations unchanged. The shared [tool-update projection](../llm/README.md#known-limitations-and-deferred-work) rebuilds an addition-only baseline whenever a tool is removed, while keeping later additions deferred. Empty tool lists receive no placeholder.
+The selected DeepSeek model receives the harness system prompt, message history, tool schemas, stop sequences, and call config (`maxTokens`, `reasoningEffort`, `temperature`). Provider-specific request-extension fields remain outside model input. The vision model normally receives retained user and tool-result images as Files API references beside attachment handles and request-preview dimensions. It also receives a normalized-object path when the current execution filesystem maps the attachment provider's host object; the descriptor marks this copy read-only and warns that normalization may have resized or re-encoded the upload. A Files resolution failure sends all retained images as inline base64 instead, and an over-budget older image keeps the access resolved for that request in its placeholder. Reasoning content from a prior assistant turn is passed back verbatim, whether or not that turn called a tool. Messages sends `{}` for historical tool arguments that are malformed JSON or are not objects. This argument fallback preserves call ids, tool names, and tool results; the original arguments stay in the Session log. Newly generated Messages tool arguments still require valid JSON objects. Messages omits `reasoning` and `tool-call` blocks inside user messages and tool results. This also permits replay of saved subagent notices containing assistant output; the original Session content remains intact. Empty user messages are skipped after conversion, while empty tool results retain their call ids and error flags. Other unsupported input blocks still fail with `UNSUPPORTED_CONTENT`. When every declared tool is deferred, the adapter prepends a non-deferred `DeferredToolPlaceholder` with the description `Reserved placeholder that keeps deferred tool loading active; never call this tool.` A numeric suffix avoids collisions with declared tools. The placeholder has no executor; calls receive the ordinary unavailable-tool result. The placeholder leaves real declarations unchanged. The shared [tool-update projection](../llm/README.md#known-limitations-and-deferred-work) rebuilds an addition-only baseline when a tool is removed or tools are added to an empty set, while keeping later additions deferred. Empty tool lists receive no placeholder.
 
 #### Token effect
 
diff --git a/packages/llm/llm-deepseek/README.zh.md b/packages/llm/llm-deepseek/README.zh.md
index c6e74f18e2..009306fb5e 100644
--- a/packages/llm/llm-deepseek/README.zh.md
+++ b/packages/llm/llm-deepseek/README.zh.md
@@ -170,7 +170,7 @@ Files 模式通过 `maxRequestFilesBytes` 与 `maxImagesPerRequest` 限制保留
 
 #### 模型看到什么
 
-所选 DeepSeek 模型会收到 harness 系统提示词、消息历史、工具 schema、停止序列与调用配置（`maxTokens`、`reasoningEffort`、`temperature`）。提供方专用请求扩展字段留在模型输入之外。视觉模型通常接收 Files API 引用形式的用户与工具结果图片，其旁带附件句柄和请求预览尺寸。当前执行文件系统可以映射附件提供方的宿主对象时，它还会收到规范化对象路径；描述符会把该副本标记为只读，并警告规范化可能缩放或重新编码上传内容。Files 解析失败时，全部保留图片改用内联 base64；超出预算的较旧图片则在占位文本中保留当前请求已解析的访问方式。此前 assistant 轮次的推理内容会原样传回，无论该轮次是否调用了工具。 对于非法 JSON 或非对象的历史工具参数，Messages 发送 `{}`。此参数兜底保留调用 ID、工具名和工具结果；原始参数仍保留在 Session 日志中。新生成的 Messages 工具参数仍须是有效 JSON 对象。 Messages 会省略用户消息和工具结果中的 `reasoning` 与 `tool-call` 块。这也允许回放包含助手输出的已保存子 Agent 通知；原始 Session 内容保持完整。转换后的空用户消息会被跳过，空工具结果则保留调用 id 和错误标记。其他不支持的输入块仍会以 `UNSUPPORTED_CONTENT` 失败。 当所有已声明工具都为延迟加载时，适配器会在列表开头添加非延迟的 `DeferredToolPlaceholder`，描述为 `Reserved placeholder that keeps deferred tool loading active; never call this tool.`。如与已声明工具重名，则添加数字后缀。占位工具没有执行器；调用会收到常规的工具不可用结果。占位工具不会改变真实工具声明。共享的[工具更新投影](../llm/README.zh.md#known-limitations-and-deferred-work)在移除任何工具时重建 addition-only 基线，后续添加仍保持延迟加载。空工具列表不会添加占位工具。
+所选 DeepSeek 模型会收到 harness 系统提示词、消息历史、工具 schema、停止序列与调用配置（`maxTokens`、`reasoningEffort`、`temperature`）。提供方专用请求扩展字段留在模型输入之外。视觉模型通常接收 Files API 引用形式的用户与工具结果图片，其旁带附件句柄和请求预览尺寸。当前执行文件系统可以映射附件提供方的宿主对象时，它还会收到规范化对象路径；描述符会把该副本标记为只读，并警告规范化可能缩放或重新编码上传内容。Files 解析失败时，全部保留图片改用内联 base64；超出预算的较旧图片则在占位文本中保留当前请求已解析的访问方式。此前 assistant 轮次的推理内容会原样传回，无论该轮次是否调用了工具。 对于非法 JSON 或非对象的历史工具参数，Messages 发送 `{}`。此参数兜底保留调用 ID、工具名和工具结果；原始参数仍保留在 Session 日志中。新生成的 Messages 工具参数仍须是有效 JSON 对象。 Messages 会省略用户消息和工具结果中的 `reasoning` 与 `tool-call` 块。这也允许回放包含助手输出的已保存子 Agent 通知；原始 Session 内容保持完整。转换后的空用户消息会被跳过，空工具结果则保留调用 id 和错误标记。其他不支持的输入块仍会以 `UNSUPPORTED_CONTENT` 失败。 当所有已声明工具都为延迟加载时，适配器会在列表开头添加非延迟的 `DeferredToolPlaceholder`，描述为 `Reserved placeholder that keeps deferred tool loading active; never call this tool.`。如与已声明工具重名，则添加数字后缀。占位工具没有执行器；调用会收到常规的工具不可用结果。占位工具不会改变真实工具声明。共享的[工具更新投影](../llm/README.zh.md#known-limitations-and-deferred-work)在移除任何工具或向空工具集添加工具时重建 addition-only 基线，后续添加仍保持延迟加载。空工具列表不会添加占位工具。
 
 #### Token 影响
 
diff --git a/packages/llm/llm-deepseek/tests/adapter.e2e.ts b/packages/llm/llm-deepseek/tests/adapter.e2e.ts
index c437d810fd..03f2f5fec4 100644
--- a/packages/llm/llm-deepseek/tests/adapter.e2e.ts
+++ b/packages/llm/llm-deepseek/tests/adapter.e2e.ts
@@ -50,21 +50,21 @@ async function boot(models?: Messages.Options['models'], baseURL = Protocol.PUBL
 const tool = { name: 'lookup_value', description: 'Read the requested value. Always call this tool to obtain a value.', parameters: { type: 'object', properties: { key: { type: 'string' } }, required: ['key'] } }
 
 describe.skipIf(!process.env.DEEPSEEK_API_KEY)('DeepSeek Messages real API', () => {
-  it.each([false, true])('calls a replacement tool after every baseline tool has been removed, separate updates=%s', async (separate) => {
+  it.each(['together', 'separate', 'initially empty'])('calls a tool added to an empty set, updates=%s', async (mode) => {
     const model = 'deepseek-flash'
     const ctx = await boot([{ id: model, toolUpdate: 'addition-only' }], process.env.DEEPSEEK_BASE_URL ?? Protocol.PUBLIC_BASE_URL)
-    const updates = [createDeveloperMessage({ source: { kind: 'tool-registry' }, content: [
+    const updates = mode === 'initially empty' ? [] : [createDeveloperMessage({ source: { kind: 'tool-registry' }, content: [
       { type: 'tool-removal', toolName: 'old_lookup' },
-      ...separate ? [] : [{ type: 'tool-addition' as const, toolName: tool.name }],
+      ...mode !== 'together' ? [] : [{ type: 'tool-addition' as const, toolName: tool.name }],
     ] })]
-    if (separate) updates.push(createDeveloperMessage({ source: { kind: 'tool-registry' }, content: [
+    if (mode !== 'together') updates.push(createDeveloperMessage({ source: { kind: 'tool-registry' }, content: [
       { type: 'tool-addition', toolName: tool.name },
     ] }))
     const response = await assemble(ctx.llm.stream(options({
       model, reasoningEffort: ReasoningEffortId('high'),
       messages: [user('Call lookup_value with key "answer" to obtain the value. Do not guess.'), ...updates],
       tools: [tool],
-      toolHistory: { tools: [{ ...tool, name: 'old_lookup' }], updates: updates.map(update => ({
+      toolHistory: { tools: mode === 'initially empty' ? [] : [{ ...tool, name: 'old_lookup' }], updates: updates.map(update => ({
         messageId: update.id, additions: update.content.some(block => block.type === 'tool-addition') ? [tool] : [],
       })) },
     })), model)
diff --git a/packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts b/packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts
index ea3e240223..ec74a510e7 100644
--- a/packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts
+++ b/packages/llm/llm-deepseek/tests/fixtures/deferred-tools.ts
@@ -1,8 +1,8 @@
-/** Replay a complete replacement of the initially available tools through Messages serialization. */
+/** Replay first additions to an empty tool set and subsequent replacements through Messages serialization. */
 import assert from 'node:assert/strict'
 import type { Context } from '@deepseek-ai/cordis'
 import type {} from '@deepseek-ai/dsh-agent'
-import { projectToolUpdates } from '@deepseek-ai/dsh-llm'
+import { createUserMessage, projectToolUpdates } from '@deepseek-ai/dsh-llm'
 import { defineContentToolFixture } from '@deepseek-ai/dsh-tool-testkit'
 import { resolveAdapterOptions } from '../../src/config.ts'
 import { serialize } from '../../src/serialize.ts'
@@ -11,12 +11,18 @@ export const name = 'messages-deferred-tools-snapshot'
 export const inject = ['tools', 'llm']
 
 /**
- * Replace the baseline after its first call and check the serialized replay requests.
+ * Add and replace tools after an empty request, checking each serialized replay request.
  * @param ctx - Snapshot composition context.
  */
 export function apply(ctx: Context): void {
   ctx.on('agent/created', ({ agent }) => {
     agent.ctx.tools.restrict({ allow: [] })
+  })
+  let initialized = false
+  ctx.on('agent/turn-stopping', ({ agent }) => {
+    if (initialized) return
+    initialized = true
+    agent.send(createUserMessage({ source: { kind: 'user' }, content: [{ type: 'text', text: 'Call snapshot_initial, snapshot_ping, and snapshot_later, then reply DONE.' }] }), 'next-step', false)
     const removeInitial = agent.ctx.tools.register(defineContentToolFixture({
       name: 'snapshot_initial', description: 'Make snapshot_ping available.', parameters: {},
       async execute() {
@@ -43,14 +49,20 @@ export function apply(ctx: Context): void {
     }))
   })
   const connection = resolveAdapterOptions({})
-  let requests = 0
+  let requests = -1
   ctx.on('llm/stream', (options, next) => {
     const projected = projectToolUpdates(options.messages, options.tools, 'addition-only', options.toolHistory)
     assert.ok(projected.tools)
     const request = serialize({ ...options, tools: [...projected.tools] }, connection, projected.messages, new Map(), () => undefined)
     switch (++requests) {
+      case 0:
+        assert.deepEqual(request.tools, [])
+        break
       case 1:
-        assert.deepEqual(request.tools?.map(tool => tool.name), ['snapshot_initial'])
+        assert.deepEqual(request.tools, [
+          { name: 'snapshot_initial', description: 'Make snapshot_ping available.', input_schema: { type: 'object', properties: {} } },
+        ])
+        assert.deepEqual(request.messages.filter(message => message.role === 'system'), [])
         break
       case 2:
         assert.deepEqual(request.tools, [
diff --git a/packages/llm/llm/README.i18n.yaml b/packages/llm/llm/README.i18n.yaml
index 78c5071896..16f199923c 100644
--- a/packages/llm/llm/README.i18n.yaml
+++ b/packages/llm/llm/README.i18n.yaml
@@ -54,8 +54,8 @@
   en: a81634136baef72f
   zh: b92dda883986b0e1
 /deepseek-ai-dsh-llm/known-limitations-and-deferred-work:
-  en: 9b2c811157cb5148
-  zh: 94577c68b22f0abb
+  en: ed57783be0df3110
+  zh: c0c433dd6a807b89
 /deepseek-ai-dsh-llm/known-limitations-and-deferred-work/dev-note:
   en: ecbc333b88e14d88
   zh: 77c725d92efd8646
diff --git a/packages/llm/llm/README.md b/packages/llm/llm/README.md
index a9caca0951..e635e4f53c 100644
--- a/packages/llm/llm/README.md
+++ b/packages/llm/llm/README.md
@@ -180,7 +180,7 @@ These limits define where this service stops and other packages or future work b
 - **Variants normally require a producer** — `prefill`, per-tool `strict`, block `cache` hints, and the `agent` message-source variant have no producer ([Agent Note](../../../.agents/notes/archived/simplification/2026-07-04-prune-producerless-vocabulary-variants.md)).
 - **`BlockAssembler` handles core block kinds only** — a plugin-added block type whose stream is never closed by `block-end` makes `blocks()` throw.
 - **`GenerateOptions.sessionId` is a locally-declared brand** — importing dsh-session's `SessionId` would create a dependency cycle.
-- **Tool updates require session history** — `GenerateOptions.tools` contains active definitions. `toolHistory` supplies the initial declarations and historically resolved additions from `Session.toolHistory()`. At adapter dispatch, `projectToolUpdates` constructs deferred declarations and retains removed definitions for `in-history`; `addition-only` omits removed definitions and removal messages. Removing any tool on an addition-only route rebuilds that route's baseline from the declarations available after that update. Superseded tool blocks are omitted while unrelated content survives; subsequent additions remain deferred. Unsupported routes receive active tools without developer messages or `deferLoading`. Missing history or a request prefix omitting recorded updates falls back to current declarations without developer messages. Explicitly deferred tools become immediate during a rebuild only if an addition has already activated them; unactivated declarations remain deferred.
+- **Tool updates require session history** — `GenerateOptions.tools` contains active definitions. `toolHistory` supplies the initial declarations and historically resolved additions from `Session.toolHistory()`. At adapter dispatch, `projectToolUpdates` constructs deferred declarations and retains removed definitions for `in-history`; `addition-only` omits removed definitions and removal messages. Removing any tool or adding tools to an empty set on an addition-only route rebuilds the baseline from the declarations available after that update. Deferred declarations count as existing tools. Superseded tool blocks are omitted while unrelated content survives; subsequent additions remain deferred. Unsupported routes receive active tools without developer messages or `deferLoading`. Missing history or a request prefix omitting recorded updates falls back to current declarations without developer messages. Explicitly deferred tools become immediate during a rebuild only if an addition has already activated them; unactivated declarations remain deferred.
 
 <a id="dev-note"></a>
 ### Dev Note
diff --git a/packages/llm/llm/README.zh.md b/packages/llm/llm/README.zh.md
index 6b917948c1..4e07a748f0 100644
--- a/packages/llm/llm/README.zh.md
+++ b/packages/llm/llm/README.zh.md
@@ -180,7 +180,7 @@ const configure = (maxTokens: number): ConfigureCall =>
 - **变体通常要求实际产生方**——`prefill`、逐工具 `strict`、内容块 `cache` 提示和 `agent` 消息来源变体都没有产生方（见 [Agent Note](../../../.agents/notes/archived/simplification/2026-07-04-prune-producerless-vocabulary-variants.md)）。
 - **`BlockAssembler` 只处理核心块类型**——插件添加块类型的流若从未由 `block-end` 关闭，`blocks()` 会抛出异常。
 - **`GenerateOptions.sessionId` 是本地声明的品牌类型**——导入 dsh-session 的 `SessionId` 会产生依赖循环。
-- **工具更新需要会话历史** — `GenerateOptions.tools` 包含当前有效定义。`toolHistory` 提供 `Session.toolHistory()` 派生的初始声明及已解析历史定义的添加记录。适配器分发时，`projectToolUpdates` 构造延迟声明，并在 `in-history` 模式保留已移除定义；`addition-only` 省略已移除定义和移除消息。在 addition-only 路由移除任何工具时，使用该次更新后的可用声明重建此路由的基线。已被取代的工具块会被省略，其他内容保留；后续添加仍保持延迟加载。不支持更新的路由接收有效工具，不携带 developer 消息或 `deferLoading`。缺少历史或请求前缀遗漏已记录更新时，回退为当前声明且不发送 developer 消息。显式延迟工具仅在已有添加记录将其激活时，才会在重建时变为立即加载；尚未激活的声明仍保持延迟加载。
+- **工具更新需要会话历史** — `GenerateOptions.tools` 包含当前有效定义。`toolHistory` 提供 `Session.toolHistory()` 派生的初始声明及已解析历史定义的添加记录。适配器分发时，`projectToolUpdates` 构造延迟声明，并在 `in-history` 模式保留已移除定义；`addition-only` 省略已移除定义和移除消息。在 addition-only 路由移除任何工具或向空工具集添加工具时，使用该次更新后的可用声明重建基线。延迟声明也计入已有工具。已被取代的工具块会被省略，其他内容保留；后续添加仍保持延迟加载。不支持更新的路由接收有效工具，不携带 developer 消息或 `deferLoading`。缺少历史或请求前缀遗漏已记录更新时，回退为当前声明且不发送 developer 消息。显式延迟工具仅在已有添加记录将其激活时，才会在重建时变为立即加载；尚未激活的声明仍保持延迟加载。
 
 <a id="dev-note"></a>
 ### 开发备注
diff --git a/packages/llm/llm/src/content.ts b/packages/llm/llm/src/content.ts
index c2e2d33961..b862381118 100644
--- a/packages/llm/llm/src/content.ts
+++ b/packages/llm/llm/src/content.ts
@@ -393,7 +393,7 @@ function toolDeclarations(history: ToolHistory): Map<string, ToolSchema> {
   return declarations
 }
 
-/** Rebuild declarations after removals that addition-only routes cannot represent in history. */
+/** Rebuild declarations on removals or additions to an empty set, where the request prefix changes. */
 function rebaseAdditionOnlyHistory(
   history: ToolHistory,
   messages: ReadonlyMap<MessageId, readonly ContentBlock[]>,
@@ -403,7 +403,7 @@ function rebaseAdditionOnlyHistory(
   let retainedFrom = 0
   for (const [index, update] of history.updates.entries()) {
     const additions = new Map(update.additions.map(tool => [tool.name, tool]))
-    let reset = false
+    let reset = available.size === 0 && additions.size > 0
     // Completeness was checked before projection; Session resolves every addition's definition.
     for (const block of messages.get(update.messageId) as readonly ContentBlock[]) {
       if (block.type === 'tool-addition') {
@@ -427,8 +427,9 @@ function rebaseAdditionOnlyHistory(
  * Unsupported routes and incomplete history use current declarations without developer updates.
  * Explicitly deferred declarations require an addition to activate them.
  * A rebuild makes previously activated declarations immediate; unactivated declarations stay deferred.
- * Addition-only routes rebuild their baseline whenever a tool is removed;
- * later additions remain deferred and superseded tool blocks are omitted without dropping other content.
+ * Addition-only routes rebuild when a tool is removed or tools are added to an empty set;
+ * deferred declarations count as existing tools.
+ * Later additions remain deferred and superseded tool blocks are omitted without dropping other content.
  * @param messages - complete request inputs, or the prefix selected for an auxiliary call.
  * @param tools - currently active tool schemas.
  * @param toolUpdate - the resolved route's update mode.
diff --git a/packages/llm/llm/tests/content.spec.ts b/packages/llm/llm/tests/content.spec.ts
index c3376c1f70..14f6684f3b 100644
--- a/packages/llm/llm/tests/content.spec.ts
+++ b/packages/llm/llm/tests/content.spec.ts
@@ -445,10 +445,46 @@ describe('projectToolUpdates', () => {
 
     const projected = projectToolUpdates([prompt, added, duplicate, removed, restored], [deferred], mode, history)
 
-    expect(projected.tools).toEqual([deferred])
+    expect(projected.tools).toEqual(mode === 'in-history' ? [deferred] : [search])
     expect(projected.messages).toEqual(mode === 'in-history'
       ? [prompt, added, removed, restored]
-      : [prompt, restored])
+      : [prompt])
+  })
+
+  it.each([false, true])('rebuilds when adding the first tools to an empty set (removed=%s)', (removed) => {
+    const removal = developer([{ type: 'tool-removal', toolName: 'search' }])
+    const added = developer([{ type: 'tool-addition', toolName: 'fetch' }, { type: 'text', text: 'Keep this guidance.' }])
+    const later = developer([{ type: 'tool-addition', toolName: 'search' }])
+    const history: ToolHistory = {
+      tools: removed ? [search] : [],
+      updates: [
+        ...removed ? [{ messageId: removal.id, additions: [] }] : [],
+        { messageId: added.id, additions: [fetch] },
+        { messageId: later.id, additions: [search] },
+      ],
+    }
+    const messages = [prompt, ...removed ? [removal] : [], added, prompt, later]
+    const saved = JSON.stringify({ messages, history })
+    const projected = projectToolUpdates(messages, [fetch, search], 'addition-only', history)
+    expect(projected.tools).toEqual([fetch, { ...search, deferLoading: true }])
+    expect(roles(projected.messages)).toEqual([
+      [{ type: 'text', text: 'Keep this guidance.' }],
+      [{ type: 'tool-addition', toolName: 'search' }],
+    ])
+    expect(JSON.stringify({ messages, history })).toBe(saved)
+    const inHistory = projectToolUpdates(messages, [fetch, search], 'in-history', history)
+    expect(roles(inHistory.messages)).toContainEqual(added.content)
+  })
+
+  it('keeps additions deferred when an unactivated deferred declaration already exists', () => {
+    const deferred = { ...search, deferLoading: true as const }
+    const added = developer([{ type: 'tool-addition', toolName: 'fetch' }])
+    const messages = [prompt, added]
+    const projected = projectToolUpdates(messages, [deferred, fetch], 'addition-only', {
+      tools: [deferred], updates: [{ messageId: added.id, additions: [fetch] }],
+    })
+    expect(projected.tools).toEqual([deferred, { ...fetch, deferLoading: true }])
+    expect(projected.messages).toBe(messages)
   })
 
   it('uses current declarations without updates when history is missing or the prefix omits an update', () => {
diff --git a/packages/llm/llm/tests/service.spec.ts b/packages/llm/llm/tests/service.spec.ts
index a5d8be4413..f320f6fc3c 100644
--- a/packages/llm/llm/tests/service.spec.ts
+++ b/packages/llm/llm/tests/service.spec.ts
@@ -239,8 +239,13 @@ describe('LlmRuntime', () => {
         tools: [search],
         toolHistory: { tools: [], updates: [{ messageId: added.id, additions: [search] }] },
       }))
-      expect(adapter.lastOptions?.tools).toEqual([{ ...search, deferLoading: true }])
-      expect(adapter.lastOptions?.messages).toEqual([added])
+      if (mode === 'in-history') {
+        expect(adapter.lastOptions?.tools).toEqual([{ ...search, deferLoading: true }])
+        expect(adapter.lastOptions?.messages).toEqual([added])
+      } else {
+        expect(adapter.lastOptions?.tools).toEqual([search])
+        expect(adapter.lastOptions?.messages).toEqual([])
+      }
 
       const afterRemoval = await ctx.llm.prepareCall({ provider: 'test-provider', model: 'test-model' })
       await collect(afterRemoval.stream({
diff --git a/packages/test-support/session-snapshot/README.i18n.yaml b/packages/test-support/session-snapshot/README.i18n.yaml
index 10a22d3a98..1425edc812 100644
--- a/packages/test-support/session-snapshot/README.i18n.yaml
+++ b/packages/test-support/session-snapshot/README.i18n.yaml
@@ -24,8 +24,8 @@
   en: bd9dcb62ea4e77db
   zh: be9615f0ae662c9e
 /deepseek-ai-dsh-session-snapshot/use-this-package/pinning-request-headers-and-system-prompts:
-  en: 6b11d5111e1a3222
-  zh: de4d3889b1a5ebb4
+  en: fe59b0197fa5e34c
+  zh: dfa1844c2c965358
 /deepseek-ai-dsh-session-snapshot/use-this-package/platform-and-composition-variants:
   en: 64666ea2894acc4a
   zh: 0e78df32bcfd3633
diff --git a/packages/test-support/session-snapshot/README.md b/packages/test-support/session-snapshot/README.md
index e96bcf3b03..09aed7ac61 100644
--- a/packages/test-support/session-snapshot/README.md
+++ b/packages/test-support/session-snapshot/README.md
@@ -90,7 +90,7 @@ A nested `workspace.expected/<directory>/.empty` marker represents an empty dire
 
 ### Pinning request headers and system prompts
 
-A pin owns its generated `system-prompt.expected.md` or `tool-schemas.expected.json` sidecar by default; `systemPromptSource` and `toolSchemasSource` name another pin when the complete corresponding sequence is identical, so each distinct version is committed once. The system prompt is surface node 0, logged as a `system/message` event before the step's first `request/header`; every fixture stores its text block as `"text":"{{system}}"` and the prompt sidecar keeps the full text. The pin's `request/header` events store `"tools":"{{tools}}"` while retaining config and reason, and the structured schema sidecar keeps the full catalogs. Logs containing developer messages retain ordered tool names in each header instead of the token so historical addition references remain verifiable. A child Session whose own scope composes a different request declares it per fixture index with `pinsChildToolSchemas` and `pinsChildSystemPrompts`. A scenario that changes the request header mid-run declares `expectedHeaderChanges`; a scenario whose prompt changes mid-run — replacing node 0, or appending after the cached history on an `in-history` route — declares `expectedPromptChanges`, and each change adds a `<!-- system/message change N -->` section to the prompt sidecar. The manifest spells these `header.changes` and `header.promptChanges`.
+A pin owns its generated `system-prompt.expected.md` or `tool-schemas.expected.json` sidecar by default; `systemPromptSource` and `toolSchemasSource` name another pin when the complete corresponding sequence is identical, so each distinct version is committed once. The system prompt is surface node 0, logged as a `system/message` event before the step's first `request/header`; every fixture stores its text block as `"text":"{{system}}"` and the prompt sidecar keeps the full text. The pin's `request/header` events store `"tools":"{{tools}}"` while retaining config and reason, and the structured schema sidecar keeps the full catalogs. Logs containing developer messages retain ordered tool names in each header instead of the token so historical addition references remain verifiable. A child Session whose own scope composes a different request declares it per fixture index with `pinsChildToolSchemas` and `pinsChildSystemPrompts`. A scenario that changes the request header mid-run declares `expectedHeaderChanges`; a scenario whose prompt changes mid-run — replacing node 0, or appending after the cached history on an `in-history` route — declares `expectedPromptChanges`, and each change adds a `<!-- system/message change N -->` section to the prompt sidecar. The manifest spells these `header.changes` and `header.promptChanges`. Headers without tools retain an empty schema set in the sidecar, so the first later addition stays aligned with its header.
 
 ### Platform and composition variants
 
diff --git a/packages/test-support/session-snapshot/README.zh.md b/packages/test-support/session-snapshot/README.zh.md
index f4400c602d..01089dfd4f 100644
--- a/packages/test-support/session-snapshot/README.zh.md
+++ b/packages/test-support/session-snapshot/README.zh.md
@@ -90,7 +90,7 @@ Headless/ACP 与 SDK 适配器在规范化之前，将原始目录中的子创
 
 ### 固定请求 header 与系统提示
 
-每个 pin 默认拥有其生成的 `system-prompt.expected.md` 或 `tool-schemas.expected.json` 伴随文件；当完整的对应序列相同时，`systemPromptSource` 与 `toolSchemasSource` 指定另一个 pin 作为来源，因此每个不同版本只提交一次。系统提示是 surface 节点 0，作为 `system/message` 事件记录在该步骤第一个 `request/header` 之前；每个 fixture 把其文本块存储为 `"text":"{{system}}"`，提示词伴随文件保留完整文本。该 pin 的 `request/header` 事件存储 `"tools":"{{tools}}"`，同时保留配置与原因，结构化 schema 伴随文件保留完整目录。包含 developer 消息的日志会在各 header 中保留有序工具名，而不使用 token，以便继续校验历史工具添加引用。自身作用域组合出不同请求的 child Session 按 fixture 索引以 `pinsChildToolSchemas` 与 `pinsChildSystemPrompts` 单独声明。运行中改变请求 header 的场景声明 `expectedHeaderChanges`；运行中提示词发生变化的场景——替换节点 0，或在 `in-history` 路由上追加到已缓存历史之后——声明 `expectedPromptChanges`，每次变化在提示词伴随文件中增加一个 `<!-- system/message change N -->` 小节。manifest 中对应字段为 `header.changes` 与 `header.promptChanges`。
+每个 pin 默认拥有其生成的 `system-prompt.expected.md` 或 `tool-schemas.expected.json` 伴随文件；当完整的对应序列相同时，`systemPromptSource` 与 `toolSchemasSource` 指定另一个 pin 作为来源，因此每个不同版本只提交一次。系统提示是 surface 节点 0，作为 `system/message` 事件记录在该步骤第一个 `request/header` 之前；每个 fixture 把其文本块存储为 `"text":"{{system}}"`，提示词伴随文件保留完整文本。该 pin 的 `request/header` 事件存储 `"tools":"{{tools}}"`，同时保留配置与原因，结构化 schema 伴随文件保留完整目录。包含 developer 消息的日志会在各 header 中保留有序工具名，而不使用 token，以便继续校验历史工具添加引用。自身作用域组合出不同请求的 child Session 按 fixture 索引以 `pinsChildToolSchemas` 与 `pinsChildSystemPrompts` 单独声明。运行中改变请求 header 的场景声明 `expectedHeaderChanges`；运行中提示词发生变化的场景——替换节点 0，或在 `in-history` 路由上追加到已缓存历史之后——声明 `expectedPromptChanges`，每次变化在提示词伴随文件中增加一个 `<!-- system/message change N -->` 小节。manifest 中对应字段为 `header.changes` 与 `header.promptChanges`。没有工具的请求头在 sidecar 中保留空 schema 集，使后续首次添加仍与其请求头对齐。
 
 ### 平台与组合变体
 
diff --git a/packages/test-support/session-snapshot/src/suite.ts b/packages/test-support/session-snapshot/src/suite.ts
index d2a25af19c..ccaf94d7a8 100644
--- a/packages/test-support/session-snapshot/src/suite.ts
+++ b/packages/test-support/session-snapshot/src/suite.ts
@@ -419,6 +419,7 @@ function toolSchemasFrom(headers: readonly unknown[]): unknown[][] {
   return headers.flatMap((header) => {
     if (header === null || typeof header !== 'object') return []
     const tools = (header as { tools?: unknown }).tools
+    if (tools === undefined) return [[]]
     return Array.isArray(tools) ? [tools] : []
   })
 }
@@ -473,8 +474,8 @@ export function systemPromptPrecedesRequests(rawLog: string): boolean {
 
 /**
  * The normalized tool-schema arrays carried by request headers in a session
- * JSONL, in log order. Headers without an array-valued tools field are omitted
- * so callers can assert one schema set per header explicitly.
+ * JSONL, in log order. An absent tools field yields an empty schema set;
+ * invalid non-array fields are omitted.
  *
  * @param rawLog The session `.jsonl` content to inspect.
  * @param ctx The volatile values of the run that produced it.
@@ -524,15 +525,16 @@ export function parseToolSchemasSnapshot(snapshot: string): ToolSchemasSnapshot
 /**
  * Restore one sidecar schema set into a tokenized pinned header.
  *
- * @param header The parsed request header carrying a tools token or ordered tool names matching the sidecar.
+ * @param header The parsed header with a tools token, matching ordered names, or no tools for an empty sidecar.
  * @param schemas The complete schemas for this full header snapshot.
- * @returns A copy of the header with its complete schemas restored.
+ * @returns A copy with complete schemas restored, or the original header when tools are absent.
  */
 export function restorePinnedToolSchemas(header: unknown, schemas: readonly unknown[]): unknown {
   if (header === null || typeof header !== 'object' || Array.isArray(header)) {
     throw new Error('acp-snapshot: pinned request header must be an object')
   }
   const tools = (header as { tools?: unknown }).tools
+  if (tools === undefined && schemas.length === 0) return header
   const namesMatch = Array.isArray(tools) && tools.length === schemas.length
     && tools.every((name, index) => {
       const schema = schemas[index]
diff --git a/packages/test-support/session-snapshot/tests/suite.spec.ts b/packages/test-support/session-snapshot/tests/suite.spec.ts
index 6f07d10604..e7ae84442f 100644
--- a/packages/test-support/session-snapshot/tests/suite.spec.ts
+++ b/packages/test-support/session-snapshot/tests/suite.spec.ts
@@ -782,7 +782,7 @@ describe('systemPromptPrecedesRequests', () => {
 })
 
 describe('normalizedToolSchemas', () => {
-  it('extracts normalized schema arrays and omits absent or non-array fields', () => {
+  it('extracts normalized schema arrays, preserves empty headers, and omits invalid fields', () => {
     const log = [
       '{"type":"session","id":"a","createdAt":5,"cwd":"/w"}',
       '{"type":"request/header","seq":0,"time":9,"data":{"header":{"tools":[{"name":"read","description":"work in /w"}]}}}',
@@ -794,6 +794,7 @@ describe('normalizedToolSchemas', () => {
     ].join('\n')
     expect(normalizedToolSchemas(log, { sessionIds: [], cwd: '/w' })).toEqual([
       [{ name: 'read', description: 'work in {{cwd}}' }],
+      [],
     ])
   })
 })
@@ -893,6 +894,12 @@ describe('tool-schema snapshots', () => {
       .toEqual({ system: '{{system}}', tools: snapshot.initial })
   })
 
+  it('preserves absent tools only for an empty sidecar', () => {
+    const header = { config: { model: 'test' } }
+    expect(restorePinnedToolSchemas(header, [])).toBe(header)
+    expect(() => restorePinnedToolSchemas(header, snapshot.initial)).toThrow(/must equal/)
+  })
+
   it('restores ordered tool names only when they match the sidecar', () => {
     const schemas = [{ name: 'read' }, { name: 'write' }]
     expect(restorePinnedToolSchemas({ tools: ['read', 'write'] }, schemas)).toEqual({ tools: schemas })
diff --git a/snapshots/session/deepseek-deferred-tools/session.v4.jsonl b/snapshots/session/deepseek-deferred-tools/session.v4.jsonl
index ceb1cb5325..734954689b 100644
--- a/snapshots/session/deepseek-deferred-tools/session.v4.jsonl
+++ b/snapshots/session/deepseek-deferred-tools/session.v4.jsonl
@@ -2,37 +2,45 @@
 {"type":"permission/preset","data":{"preset":"danger-full-access"}}
 {"type":"sandbox/mode","data":{"mode":"danger-full-access"}}
 {"type":"approval/policy","data":{"policy":"never"}}
-{"type":"agent/inbox/spliced","data":{"target":"next-turn","start":0,"inserted":[{"content":[{"type":"text","text":"Call snapshot_initial, then snapshot_ping, then snapshot_later, then reply DONE."}],"source":{"kind":"user"},"role":"user","id":"{{message:1}}"}]}}
+{"type":"agent/inbox/spliced","data":{"target":"next-turn","start":0,"inserted":[{"content":[{"type":"text","text":"Reply READY."}],"source":{"kind":"user"},"role":"user","id":"{{message:1}}"}]}}
 {"type":"turn/start","data":{"turn":1}}
 {"type":"agent/inbox/spliced","data":{"target":"next-turn","start":0,"removedCount":1,"inserted":[]}}
 {"type":"step/start","data":{"turn":1,"step":1}}
 {"type":"system/message","data":{"turn":1,"step":1,"message":{"role":"system","content":[{"type":"text","text":"{{system}}"}],"source":{"kind":"system-prompt"},"id":"{{message:2}}"}},"surfaceOp":"append"}
-{"type":"user/message","data":{"content":[{"type":"text","text":"Call snapshot_initial, then snapshot_ping, then snapshot_later, then reply DONE."}],"source":{"kind":"user"},"role":"user","id":"{{message:1}}"},"surfaceOp":"append"}
+{"type":"user/message","data":{"content":[{"type":"text","text":"Reply READY."}],"source":{"kind":"user"},"role":"user","id":"{{message:1}}"},"surfaceOp":"append"}
 {"type":"user/message","data":{"content":[{"type":"text","text":"Current runtime context. This snapshot supersedes earlier runtime-context snapshots.\n\nCurrent working directory: \"{{cwd}}\".\n\nCurrent DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations.\n\nApproval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`)."}],"source":{"kind":"runtime-context","form":"snapshot","sections":[{"name":"working-directory:current","text":"Current working directory: \"{{cwd}}\"."},{"name":"sandbox:policy","text":"Current DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations."},{"name":"approval:policy","text":"Approval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`)."}]},"role":"user","id":"{{message:3}}"},"surfaceOp":"append"}
-{"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_initial"]},"reason":"initial"}}
+{"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true}},"reason":"initial"}}
 {"type":"request/context","data":{"provider":"deepseek-official","model":"deepseek-v4-flash"}}
-{"type":"session/title","data":{"title":"Call snapshot_initial, then snapshot_pin","messageSeqs":[8],"source":{"kind":"fallback"}}}
-{"type":"assistant/message","data":{"turn":1,"step":1,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_initial","name":"snapshot_initial","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:4}}"},"usage":{"inputTokens":10,"outputTokens":5},"stream":[{"type":"chunk","time":1792661643282,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1792661643282,"index":0,"dt":[],"id":"call_initial","name":"snapshot_initial","args":["{}"]},{"type":"chunk","time":1792661643282,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_initial","name":"snapshot_initial","arguments":"{}"}}},{"type":"chunk","time":1792661643282,"chunk":{"type":"usage","usage":{"inputTokens":10,"outputTokens":5}}},{"type":"chunk","time":1792661643282,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
-{"type":"tool/call","data":{"turn":1,"step":1,"callId":"call_initial","name":"snapshot_initial","arguments":"{}"}}
-{"type":"tool/result","data":{"turn":1,"step":1,"message":{"role":"tool","source":{"kind":"tool","callId":"call_initial"},"toolCallId":"call_initial","content":[{"type":"text","text":"snapshot_ping is available."}],"isError":false,"id":"{{message:5}}"}},"sourceEventSeqs":[14],"surfaceOp":"append"}
+{"type":"session/title","data":{"title":"Reply READY.","messageSeqs":[8],"source":{"kind":"fallback"}}}
+{"type":"assistant/message","data":{"turn":1,"step":1,"message":{"role":"assistant","content":[{"type":"text","text":"READY"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:4}}"},"stream":[{"type":"chunk","time":1792734528886,"chunk":{"type":"block-start","index":0,"blockType":"text"}},{"type":"text-chunks","time0":1792734528887,"index":0,"dt":[],"texts":["READY"]},{"type":"chunk","time":1792734528887,"chunk":{"type":"block-end","index":0,"block":{"type":"text","text":"READY"}}},{"type":"chunk","time":1792734528887,"chunk":{"type":"finish","reason":{"kind":"stop"}}}]},"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":1}}
+{"type":"agent/inbox/spliced","data":{"target":"next-step","start":0,"inserted":[{"source":{"kind":"user"},"content":[{"type":"text","text":"Call snapshot_initial, snapshot_ping, and snapshot_later, then reply DONE."}],"role":"user","id":"{{message:5}}"}]}}
+{"type":"agent/inbox/spliced","data":{"target":"next-step","start":0,"removedCount":1,"inserted":[]}}
 {"type":"step/start","data":{"turn":1,"step":2}}
-{"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_ping"]},"reason":"change"}}
-{"type":"developer/message","data":{"turn":1,"step":2,"message":{"source":{"kind":"tool-registry"},"content":[{"type":"tool-addition","toolName":"snapshot_ping"},{"type":"tool-removal","toolName":"snapshot_initial"}],"role":"developer","id":"{{message:6}}"},"headerSeq":18},"surfaceOp":"append"}
-{"type":"assistant/message","data":{"turn":1,"step":2,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:7}}"},"stream":[{"type":"chunk","time":1792661643298,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1792661643298,"index":0,"dt":[],"id":"call_dynamic_ping","name":"snapshot_ping","args":["{}"]},{"type":"chunk","time":1792661643298,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}}},{"type":"chunk","time":1792661643298,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
-{"type":"tool/call","data":{"turn":1,"step":2,"callId":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}}
-{"type":"tool/result","data":{"turn":1,"step":2,"message":{"role":"tool","source":{"kind":"tool","callId":"call_dynamic_ping"},"toolCallId":"call_dynamic_ping","content":[{"type":"text","text":"pong"}],"isError":false,"id":"{{message:8}}"}},"sourceEventSeqs":[21],"surfaceOp":"append"}
+{"type":"user/message","data":{"source":{"kind":"user"},"content":[{"type":"text","text":"Call snapshot_initial, snapshot_ping, and snapshot_later, then reply DONE."}],"role":"user","id":"{{message:5}}"},"surfaceOp":"append"}
+{"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_initial"]},"reason":"change"}}
+{"type":"developer/message","data":{"turn":1,"step":2,"message":{"source":{"kind":"tool-registry"},"content":[{"type":"tool-addition","toolName":"snapshot_initial"}],"role":"developer","id":"{{message:6}}"},"headerSeq":19},"surfaceOp":"append"}
+{"type":"assistant/message","data":{"turn":1,"step":2,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_initial","name":"snapshot_initial","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:7}}"},"usage":{"inputTokens":10,"outputTokens":5},"stream":[{"type":"chunk","time":1792734528899,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1792734528899,"index":0,"dt":[],"id":"call_initial","name":"snapshot_initial","args":["{}"]},{"type":"chunk","time":1792734528899,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_initial","name":"snapshot_initial","arguments":"{}"}}},{"type":"chunk","time":1792734528899,"chunk":{"type":"usage","usage":{"inputTokens":10,"outputTokens":5}}},{"type":"chunk","time":1792734528899,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
+{"type":"tool/call","data":{"turn":1,"step":2,"callId":"call_initial","name":"snapshot_initial","arguments":"{}"}}
+{"type":"tool/result","data":{"turn":1,"step":2,"message":{"role":"tool","source":{"kind":"tool","callId":"call_initial"},"toolCallId":"call_initial","content":[{"type":"text","text":"snapshot_ping is available."}],"isError":false,"id":"{{message:8}}"}},"sourceEventSeqs":[22],"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":2}}
 {"type":"step/start","data":{"turn":1,"step":3}}
-{"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_later","snapshot_ping"]},"reason":"change"}}
-{"type":"developer/message","data":{"turn":1,"step":3,"message":{"source":{"kind":"tool-registry"},"content":[{"type":"tool-addition","toolName":"snapshot_later"}],"role":"developer","id":"{{message:9}}"},"headerSeq":25},"surfaceOp":"append"}
-{"type":"assistant/message","data":{"turn":1,"step":3,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_later","name":"snapshot_later","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:10}}"},"stream":[{"type":"chunk","time":1792661643311,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1792661643311,"index":0,"dt":[],"id":"call_later","name":"snapshot_later","args":["{}"]},{"type":"chunk","time":1792661643311,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_later","name":"snapshot_later","arguments":"{}"}}},{"type":"chunk","time":1792661643311,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
-{"type":"tool/call","data":{"turn":1,"step":3,"callId":"call_later","name":"snapshot_later","arguments":"{}"}}
-{"type":"tool/result","data":{"turn":1,"step":3,"message":{"role":"tool","source":{"kind":"tool","callId":"call_later"},"toolCallId":"call_later","content":[{"type":"text","text":"later"}],"isError":false,"id":"{{message:11}}"}},"sourceEventSeqs":[28],"surfaceOp":"append"}
+{"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_ping"]},"reason":"change"}}
+{"type":"developer/message","data":{"turn":1,"step":3,"message":{"source":{"kind":"tool-registry"},"content":[{"type":"tool-addition","toolName":"snapshot_ping"},{"type":"tool-removal","toolName":"snapshot_initial"}],"role":"developer","id":"{{message:9}}"},"headerSeq":26},"surfaceOp":"append"}
+{"type":"assistant/message","data":{"turn":1,"step":3,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:10}}"},"stream":[{"type":"chunk","time":1792734528913,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1792734528913,"index":0,"dt":[],"id":"call_dynamic_ping","name":"snapshot_ping","args":["{}"]},{"type":"chunk","time":1792734528913,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}}},{"type":"chunk","time":1792734528913,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
+{"type":"tool/call","data":{"turn":1,"step":3,"callId":"call_dynamic_ping","name":"snapshot_ping","arguments":"{}"}}
+{"type":"tool/result","data":{"turn":1,"step":3,"message":{"role":"tool","source":{"kind":"tool","callId":"call_dynamic_ping"},"toolCallId":"call_dynamic_ping","content":[{"type":"text","text":"pong"}],"isError":false,"id":"{{message:11}}"}},"sourceEventSeqs":[29],"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":3}}
 {"type":"step/start","data":{"turn":1,"step":4}}
-{"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_final","snapshot_ping"]},"reason":"change"}}
-{"type":"developer/message","data":{"turn":1,"step":4,"message":{"source":{"kind":"tool-registry"},"content":[{"type":"tool-addition","toolName":"snapshot_final"},{"type":"tool-removal","toolName":"snapshot_later"}],"role":"developer","id":"{{message:12}}"},"headerSeq":32},"surfaceOp":"append"}
-{"type":"assistant/message","data":{"turn":1,"step":4,"message":{"role":"assistant","content":[{"type":"text","text":"DONE"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:13}}"},"usage":{"inputTokens":12,"outputTokens":2,"cacheReadTokens":10},"stream":[{"type":"chunk","time":1792661643324,"chunk":{"type":"block-start","index":0,"blockType":"text"}},{"type":"text-chunks","time0":1792661643324,"index":0,"dt":[],"texts":["DONE"]},{"type":"chunk","time":1792661643324,"chunk":{"type":"block-end","index":0,"block":{"type":"text","text":"DONE"}}},{"type":"chunk","time":1792661643324,"chunk":{"type":"usage","usage":{"inputTokens":12,"outputTokens":2,"cacheReadTokens":10}}},{"type":"chunk","time":1792661643324,"chunk":{"type":"finish","reason":{"kind":"stop"}}}]},"surfaceOp":"append"}
+{"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_later","snapshot_ping"]},"reason":"change"}}
+{"type":"developer/message","data":{"turn":1,"step":4,"message":{"source":{"kind":"tool-registry"},"content":[{"type":"tool-addition","toolName":"snapshot_later"}],"role":"developer","id":"{{message:12}}"},"headerSeq":33},"surfaceOp":"append"}
+{"type":"assistant/message","data":{"turn":1,"step":4,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_later","name":"snapshot_later","arguments":"{}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:13}}"},"stream":[{"type":"chunk","time":1792734528931,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1792734528931,"index":0,"dt":[],"id":"call_later","name":"snapshot_later","args":["{}"]},{"type":"chunk","time":1792734528931,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_later","name":"snapshot_later","arguments":"{}"}}},{"type":"chunk","time":1792734528931,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
+{"type":"tool/call","data":{"turn":1,"step":4,"callId":"call_later","name":"snapshot_later","arguments":"{}"}}
+{"type":"tool/result","data":{"turn":1,"step":4,"message":{"role":"tool","source":{"kind":"tool","callId":"call_later"},"toolCallId":"call_later","content":[{"type":"text","text":"later"}],"isError":false,"id":"{{message:14}}"}},"sourceEventSeqs":[36],"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":4}}
+{"type":"step/start","data":{"turn":1,"step":5}}
+{"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":["snapshot_final","snapshot_ping"]},"reason":"change"}}
+{"type":"developer/message","data":{"turn":1,"step":5,"message":{"source":{"kind":"tool-registry"},"content":[{"type":"tool-addition","toolName":"snapshot_final"},{"type":"tool-removal","toolName":"snapshot_later"}],"role":"developer","id":"{{message:15}}"},"headerSeq":40},"surfaceOp":"append"}
+{"type":"assistant/message","data":{"turn":1,"step":5,"message":{"role":"assistant","content":[{"type":"text","text":"DONE"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:16}}"},"usage":{"inputTokens":12,"outputTokens":2,"cacheReadTokens":10},"stream":[{"type":"chunk","time":1792734528950,"chunk":{"type":"block-start","index":0,"blockType":"text"}},{"type":"text-chunks","time0":1792734528950,"index":0,"dt":[],"texts":["DONE"]},{"type":"chunk","time":1792734528950,"chunk":{"type":"block-end","index":0,"block":{"type":"text","text":"DONE"}}},{"type":"chunk","time":1792734528950,"chunk":{"type":"usage","usage":{"inputTokens":12,"outputTokens":2,"cacheReadTokens":10}}},{"type":"chunk","time":1792734528950,"chunk":{"type":"finish","reason":{"kind":"stop"}}}]},"surfaceOp":"append"}
+{"type":"step/end","data":{"turn":1,"step":5}}
 {"type":"turn/end","data":{"turn":1,"reason":{"kind":"completed"}}}
diff --git a/snapshots/session/deepseek-deferred-tools/snapshot.yml b/snapshots/session/deepseek-deferred-tools/snapshot.yml
index ceedc9db93..711ea1ae83 100644
--- a/snapshots/session/deepseek-deferred-tools/snapshot.yml
+++ b/snapshots/session/deepseek-deferred-tools/snapshot.yml
@@ -6,4 +6,4 @@ recording: authored
 header:
   class: deepseek-deferred-tools
   pin: true
-  changes: 3
+  changes: 4
diff --git a/snapshots/session/deepseek-deferred-tools/tool-schemas.expected.json b/snapshots/session/deepseek-deferred-tools/tool-schemas.expected.json
index 255e5a96d0..1f8ef7a8ec 100644
--- a/snapshots/session/deepseek-deferred-tools/tool-schemas.expected.json
+++ b/snapshots/session/deepseek-deferred-tools/tool-schemas.expected.json
@@ -1,15 +1,16 @@
 {
-  "initial": [
-    {
-      "name": "snapshot_initial",
-      "description": "Make snapshot_ping available.",
-      "parameters": {
-        "type": "object",
-        "properties": {}
-      }
-    }
-  ],
+  "initial": [],
   "changes": [
+    [
+      {
+        "name": "snapshot_initial",
+        "description": "Make snapshot_ping available.",
+        "parameters": {
+          "type": "object",
+          "properties": {}
+        }
+      }
+    ],
     [
       {
         "name": "snapshot_ping",

From a5c44b9384505fad2281b83e6e048c92f6fd0ca8 Mon Sep 17 00:00:00 2001
From: Yixiang Tu <tuyixiang@deepseek.com>
Date: Mon, 2 Nov 2026 20:34:08 +0800
Subject: [PATCH 27/32] test(llm-deepseek): refresh snapshots for root agent
 identity

---
 snapshots/session/deepseek-all-deferred-tools/session.v4.jsonl | 2 +-
 snapshots/session/deepseek-deferred-tools/session.v4.jsonl     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/snapshots/session/deepseek-all-deferred-tools/session.v4.jsonl b/snapshots/session/deepseek-all-deferred-tools/session.v4.jsonl
index c7f585e660..761d883f55 100644
--- a/snapshots/session/deepseek-all-deferred-tools/session.v4.jsonl
+++ b/snapshots/session/deepseek-all-deferred-tools/session.v4.jsonl
@@ -8,7 +8,7 @@
 {"type":"step/start","data":{"turn":1,"step":1}}
 {"type":"system/message","data":{"turn":1,"step":1,"message":{"role":"system","content":[{"type":"text","text":"{{system}}"}],"source":{"kind":"system-prompt"},"id":"{{message:2}}"}},"surfaceOp":"append"}
 {"type":"user/message","data":{"content":[{"type":"text","text":"Reply DONE without calling any tools."}],"source":{"kind":"user"},"role":"user","id":"{{message:1}}"},"surfaceOp":"append"}
-{"type":"user/message","data":{"content":[{"type":"text","text":"Current runtime context. This snapshot supersedes earlier runtime-context snapshots.\n\nCurrent working directory: \"{{cwd}}\".\n\nCurrent DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations.\n\nApproval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`)."}],"source":{"kind":"runtime-context","form":"snapshot","sections":[{"name":"working-directory:current","text":"Current working directory: \"{{cwd}}\"."},{"name":"sandbox:policy","text":"Current DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations."},{"name":"approval:policy","text":"Approval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`)."}]},"role":"user","id":"{{message:3}}"},"surfaceOp":"append"}
+{"type":"user/message","data":{"content":[{"type":"text","text":"Current runtime context. This snapshot supersedes earlier runtime-context snapshots.\n\nCurrent working directory: \"{{cwd}}\".\n\nCurrent DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations.\n\nApproval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`).\n\nYou are the root agent. Your agent id is \"{{session:1}}\"."}],"source":{"kind":"runtime-context","form":"snapshot","sections":[{"name":"working-directory:current","text":"Current working directory: \"{{cwd}}\"."},{"name":"sandbox:policy","text":"Current DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations."},{"name":"approval:policy","text":"Approval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`)."},{"name":"subagent:identity","text":"You are the root agent. Your agent id is \"{{session:1}}\"."}]},"role":"user","id":"{{message:3}}"},"surfaceOp":"append"}
 {"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true},"tools":"{{tools}}"},"reason":"initial"}}
 {"type":"request/context","data":{"provider":"deepseek-official","model":"deepseek-v4-flash"}}
 {"type":"session/title","data":{"title":"Reply DONE without calling any","messageSeqs":[8],"source":{"kind":"fallback"}}}
diff --git a/snapshots/session/deepseek-deferred-tools/session.v4.jsonl b/snapshots/session/deepseek-deferred-tools/session.v4.jsonl
index 734954689b..c0822bb1d2 100644
--- a/snapshots/session/deepseek-deferred-tools/session.v4.jsonl
+++ b/snapshots/session/deepseek-deferred-tools/session.v4.jsonl
@@ -8,7 +8,7 @@
 {"type":"step/start","data":{"turn":1,"step":1}}
 {"type":"system/message","data":{"turn":1,"step":1,"message":{"role":"system","content":[{"type":"text","text":"{{system}}"}],"source":{"kind":"system-prompt"},"id":"{{message:2}}"}},"surfaceOp":"append"}
 {"type":"user/message","data":{"content":[{"type":"text","text":"Reply READY."}],"source":{"kind":"user"},"role":"user","id":"{{message:1}}"},"surfaceOp":"append"}
-{"type":"user/message","data":{"content":[{"type":"text","text":"Current runtime context. This snapshot supersedes earlier runtime-context snapshots.\n\nCurrent working directory: \"{{cwd}}\".\n\nCurrent DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations.\n\nApproval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`)."}],"source":{"kind":"runtime-context","form":"snapshot","sections":[{"name":"working-directory:current","text":"Current working directory: \"{{cwd}}\"."},{"name":"sandbox:policy","text":"Current DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations."},{"name":"approval:policy","text":"Approval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`)."}]},"role":"user","id":"{{message:3}}"},"surfaceOp":"append"}
+{"type":"user/message","data":{"content":[{"type":"text","text":"Current runtime context. This snapshot supersedes earlier runtime-context snapshots.\n\nCurrent working directory: \"{{cwd}}\".\n\nCurrent DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations.\n\nApproval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`).\n\nYou are the root agent. Your agent id is \"{{session:1}}\"."}],"source":{"kind":"runtime-context","form":"snapshot","sections":[{"name":"working-directory:current","text":"Current working directory: \"{{cwd}}\"."},{"name":"sandbox:policy","text":"Current DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations."},{"name":"approval:policy","text":"Approval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`)."},{"name":"subagent:identity","text":"You are the root agent. Your agent id is \"{{session:1}}\"."}]},"role":"user","id":"{{message:3}}"},"surfaceOp":"append"}
 {"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash","maxTokens":256000,"reasoningEffort":"high"},"adapterDefaults":{"reasoningEffort":true,"maxTokens":true}},"reason":"initial"}}
 {"type":"request/context","data":{"provider":"deepseek-official","model":"deepseek-v4-flash"}}
 {"type":"session/title","data":{"title":"Reply READY.","messageSeqs":[8],"source":{"kind":"fallback"}}}

From 624c3e91a99694feb18210fba9b1303a6348ed96 Mon Sep 17 00:00:00 2001
From: Yixiang Tu <tuyixiang@deepseek.com>
Date: Mon, 2 Nov 2026 22:04:53 +0800
Subject: [PATCH 28/32] fix(llm-deepseek): expose all-deferred request failures

---
 .../2026-09-20-dynamic-tool-updates.i18n.yaml |  8 +++---
 .../2026-09-20-dynamic-tool-updates.md        |  4 +--
 .../2026-09-20-dynamic-tool-updates.zh.md     |  4 +--
 ...-deepseek-deferred-tool-failures.i18n.yaml | 19 +++++++++++++
 ...6-11-02-deepseek-deferred-tool-failures.md | 25 +++++++++++++++++
 ...1-02-deepseek-deferred-tool-failures.zh.md | 25 +++++++++++++++++
 packages/llm/llm-deepseek/README.i18n.yaml    | 12 ++++----
 packages/llm/llm-deepseek/README.md           |  6 ++--
 packages/llm/llm-deepseek/README.zh.md        |  6 ++--
 packages/llm/llm-deepseek/src/serialize.ts    | 28 ++++++-------------
 .../llm/llm-deepseek/tests/adapter.spec.ts    | 17 ++++++++++-
 .../tests/fixtures/all-deferred-tools.ts      |  3 +-
 .../llm/llm-deepseek/tests/serialize.spec.ts  | 12 +-------
 13 files changed, 115 insertions(+), 54 deletions(-)
 create mode 100644 .agents/notes/implemented/simplification/2026-11-02-deepseek-deferred-tool-failures.i18n.yaml
 create mode 100644 .agents/notes/implemented/simplification/2026-11-02-deepseek-deferred-tool-failures.md
 create mode 100644 .agents/notes/implemented/simplification/2026-11-02-deepseek-deferred-tool-failures.zh.md

diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
index 9e822eb717..e4acbc9423 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.i18n.yaml
@@ -9,11 +9,11 @@
   en: 97fe58a13135b4a1
   zh: 7490373a8d941da5
 /agent-note-active-tool-headers-and-stateful-request-projection/decision:
-  en: 51773686866c95d1
-  zh: 489ea0e1144720e1
+  en: 24138152d511bf12
+  zh: 95516d7566b6db7c
 /agent-note-active-tool-headers-and-stateful-request-projection/alternatives-considered:
   en: 311db1f781e386e7
   zh: 7e3312544154a158
 /agent-note-active-tool-headers-and-stateful-request-projection/consequences:
-  en: 94b1037f25176c7d
-  zh: 141c25306a57e5ea
+  en: 8a64dba42c01f647
+  zh: 9e7ba7a5bd855031
diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
index 23a21d7636..8a8976aacb 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.md
@@ -14,7 +14,7 @@ Plugin and MCP tools change during conversations. Providers differ in whether th
 
 `Session.toolHistory()` caches a capability-independent fold of committed headers and developer messages. First access restores inherited events; later reads consume only unseen events. Immutable snapshots carry initial declarations and ordered update identities with additions resolved through their historical headers. Explicit series starts and changed retained definitions rebuild declarations. Restoring a retained name with an unchanged definition continues the series: the projection keeps the declaration unchanged and lets the recorded addition re-offer the tool after its earlier removal, so a removal never disables a declared tool and a loading mode never rewrites an earlier declaration.
 
-Loop and compaction requests carry this snapshot as `GenerateOptions.toolHistory`. At adapter dispatch, `projectToolUpdates` uses the prepared route's `toolUpdate`. Unsupported routes receive active definitions without `deferLoading` or developer messages. Supported routes defer historical additions; `in-history` retains removed definitions and removal blocks, while `addition-only` omits both. On addition-only routes, removing any tool rebuilds the route's baseline after that update: the request declarations change even when the removed tool was activated later, so retaining superseded activation blocks cannot preserve the full conversation prefix. Adding tools when no declarations exist also rebuilds the baseline. Deferred declarations count as existing tools. The first tools would otherwise require a non-deferred placeholder in DeepSeek, which changes the prefix anyway; declaring them immediately avoids an unnecessary activation message and placeholder. Previously activated tools become immediate; explicitly deferred declarations with no activation remain deferred. Subsequent additions remain deferred until their recorded activation. Superseded tool blocks are omitted without discarding other content in those messages. The Session fold and durable events remain capability-independent. Missing history or a request prefix omitting recorded updates uses current declarations without developer updates.
+Loop and compaction requests carry this snapshot as `GenerateOptions.toolHistory`. At adapter dispatch, `projectToolUpdates` uses the prepared route's `toolUpdate`. Unsupported routes receive active definitions without `deferLoading` or developer messages. Supported routes defer historical additions; `in-history` retains removed definitions and removal blocks, while `addition-only` omits both. On addition-only routes, removing any tool rebuilds the route's baseline after that update: the request declarations change even when the removed tool was activated later, so retaining superseded activation blocks cannot preserve the full conversation prefix. Adding tools when no declarations exist also rebuilds the baseline. Deferred declarations count as existing tools. The first native tool changes the empty declaration prefix; deferring it provides no cache advantage over declaring it immediately. Previously activated tools become immediate; explicitly deferred declarations with no activation remain deferred. Subsequent additions remain deferred until their recorded activation. Superseded tool blocks are omitted without discarding other content in those messages. The Session fold and durable events remain capability-independent. Missing history or a request prefix omitting recorded updates uses current declarations without developer updates.
 
 DeepSeek translates projected updates into system-role `tool_addition` and `tool_removal` blocks and `defer_loading` declarations, sending the tool-changes beta header when update blocks occur. The default `deepseek-flash` entry declares `addition-only`; pi-ai selects `in-history` for compatible Anthropic routes and `addition-only` for compatible Chat Completions and Responses routes. Chat and Trajectory display developer messages as context nodes, using localized tool-change notices: single changes show the tool name; multiple changes show counts and expandable name lists.
 
@@ -36,6 +36,6 @@ Tool lists and logical update events are capability-independent; only outgoing d
 
 The authored [headless prompt/tool scenario](../../../../snapshots/session/dynamic-tool-prompt-updates/snapshot.yml) pins an appended prompt beside a deferred tool addition and verifies that the first request's messages stay unchanged. It shares the stable-prompt scenario's tool lifecycle and schema expectations.
 
-The [DeepSeek replacement scenario](../../../../snapshots/session/deepseek-deferred-tools/snapshot.yml) checks the first additions to an empty set, a rebuilt baseline, a subsequent deferred addition, and removal of that later-activated tool through Messages serialization. An adapter-local placeholder covers nonempty all-deferred requests that remain, including explicit deferred declarations and direct calls. It does not activate real tools. These checks establish request construction, not measured cache savings from rebuilding.
+The [DeepSeek replacement scenario](../../../../snapshots/session/deepseek-deferred-tools/snapshot.yml) checks the first additions to an empty set, a rebuilt baseline, a subsequent deferred addition, and removal of that later-activated tool through Messages serialization. Explicit deferred-only requests remain unchanged under the [DeepSeek failure policy](../simplification/2026-11-02-deepseek-deferred-tool-failures.md). These checks establish request construction, not measured cache savings from rebuilding.
 
 The [real DeepSeek SDK test](../../../../apps/cli/tests/profiles/sdk/dynamic-tool-cache.e2e.ts) measures the first request after a native tool addition with both unchanged and simultaneously updated instructions. Unique user history prevents a shared system-prompt cache hit from satisfying the preceding-input assertion. Removal checks tool availability without requiring cache retention; each case disables retries.
diff --git a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
index 9f4ee01afd..e9f48c8a02 100644
--- a/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
+++ b/.agents/notes/implemented/architecture/2026-09-20-dynamic-tool-updates.zh.md
@@ -14,7 +14,7 @@ Status: implemented
 
 `Session.toolHistory()` 缓存对已提交请求头和 developer 消息的归约，不依赖模型能力。首次访问恢复继承事件；后续读取仅处理新增事件。不可变快照携带初始声明和有序更新标识，添加定义通过历史请求头解析。显式新序列和保留定义变化会重建声明。以未变化的定义恢复保留名称时序列继续：投影保持声明不变，由记录的添加在先前移除之后重新提供该工具，因此移除不会禁用已声明的工具，加载模式也不会改写先前声明。
 
-循环和压缩请求通过 `GenerateOptions.toolHistory` 携带此快照。适配器分发时，`projectToolUpdates` 使用已准备路由的 `toolUpdate`。不支持的路由接收有效定义，不携带 `deferLoading` 或 developer 消息。支持的路由延迟历史添加；`in-history` 保留已移除定义和移除块，`addition-only` 则省略两者。在 addition-only 路由移除任何工具时，使用该次更新后的状态重建路由基线：即使被移除工具是后来激活的，请求声明也已发生变化，保留已被取代的激活块无法保留完整对话前缀。不存在任何声明时添加工具，也会重建基线。延迟声明也计入已有工具。否则首批工具会使 DeepSeek 需要非延迟占位工具，同样改变前缀；直接声明这些工具可避免不必要的激活消息和占位工具。此前已激活工具变为立即加载；没有激活记录的显式延迟声明仍保持延迟。后续添加在记录的激活位置前保持延迟加载。已被取代的工具块会被省略，但不会丢弃这些消息中的其他内容。Session 归约和持久事件仍不依赖模型能力。缺少历史或请求前缀遗漏已记录更新时，使用当前声明且不发送 developer 更新。
+循环和压缩请求通过 `GenerateOptions.toolHistory` 携带此快照。适配器分发时，`projectToolUpdates` 使用已准备路由的 `toolUpdate`。不支持的路由接收有效定义，不携带 `deferLoading` 或 developer 消息。支持的路由延迟历史添加；`in-history` 保留已移除定义和移除块，`addition-only` 则省略两者。在 addition-only 路由移除任何工具时，使用该次更新后的状态重建路由基线：即使被移除工具是后来激活的，请求声明也已发生变化，保留已被取代的激活块无法保留完整对话前缀。不存在任何声明时添加工具，也会重建基线。延迟声明也计入已有工具。首个原生工具会改变空声明前缀；将其延迟加载并不比直接声明具有缓存优势。此前已激活工具变为立即加载；没有激活记录的显式延迟声明仍保持延迟。后续添加在记录的激活位置前保持延迟加载。已被取代的工具块会被省略，但不会丢弃这些消息中的其他内容。Session 归约和持久事件仍不依赖模型能力。缺少历史或请求前缀遗漏已记录更新时，使用当前声明且不发送 developer 更新。
 
 DeepSeek 把投影后的更新转换为 system 角色的 `tool_addition` 和 `tool_removal` 块以及 `defer_loading` 声明，在存在更新块时发送工具变更 beta 请求头。默认 `deepseek-flash` 条目声明 `addition-only`；pi-ai 为兼容的 Anthropic 路由选择 `in-history`，为兼容的 Chat Completions 和 Responses 路由选择 `addition-only`。Chat 和 Trajectory 将 developer 消息显示为上下文节点，工具变更使用本地化通知：单项变更显示工具名，多项变更显示数量及可展开的名称列表。
 
@@ -36,6 +36,6 @@ DeepSeek 把投影后的更新转换为 system 角色的 `tool_addition` 和 `to
 
 手写的[无界面提示词／工具场景](../../../../snapshots/session/dynamic-tool-prompt-updates/snapshot.yml)钉住追加提示词与延迟工具添加同时发生的行为，并验证首次请求的消息保持不变。它复用稳定提示词场景的工具生命周期和 schema 期望值。
 
-[DeepSeek 替换场景](../../../../snapshots/session/deepseek-deferred-tools/snapshot.yml)通过 Messages 序列化验证向空工具集首次添加工具、重建后的基线、后续延迟添加，以及移除该后来激活的工具。适配器内的占位工具覆盖仍然存在的非空全延迟请求，包括显式延迟声明和直接调用，不会激活真实工具。这些检查验证请求构造，不代表已经测量重建带来的缓存收益。
+[DeepSeek 替换场景](../../../../snapshots/session/deepseek-deferred-tools/snapshot.yml)通过 Messages 序列化验证向空工具集首次添加工具、重建后的基线、后续延迟添加，以及移除该后来激活的工具。根据 [DeepSeek 失败策略](../simplification/2026-11-02-deepseek-deferred-tool-failures.zh.md)，显式全延迟请求保持原样。这些检查验证请求构造，不代表已经测量重建带来的缓存收益。
 
 [真实 DeepSeek SDK 测试](../../../../apps/cli/tests/profiles/sdk/dynamic-tool-cache.e2e.ts) 分别在指令不变和指令同时更新时测量原生工具新增后的首次请求。独有的用户历史确保仅命中共享系统提示词缓存无法满足前序输入断言。移除场景检查工具可用性，不要求保留缓存；每个用例均禁用重试。
diff --git a/.agents/notes/implemented/simplification/2026-11-02-deepseek-deferred-tool-failures.i18n.yaml b/.agents/notes/implemented/simplification/2026-11-02-deepseek-deferred-tool-failures.i18n.yaml
new file mode 100644
index 0000000000..e4e2d36818
--- /dev/null
+++ b/.agents/notes/implemented/simplification/2026-11-02-deepseek-deferred-tool-failures.i18n.yaml
@@ -0,0 +1,19 @@
+# Bilingual-pair consistency record for 2026-11-02-deepseek-deferred-tool-failures.md (docs/i18n/README.md): per heading
+# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
+# After editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write .agents/notes/implemented/simplification/2026-11-02-deepseek-deferred-tool-failures.md
+/agent-note-expose-deepseek-deferred-only-request-failures:
+  en: 1c4af8b4e2ec0e46
+  zh: fcb806d33973025e
+/agent-note-expose-deepseek-deferred-only-request-failures/problem:
+  en: c974406f21854541
+  zh: 701cd64cabdfee79
+/agent-note-expose-deepseek-deferred-only-request-failures/decision:
+  en: 6878caaaebd91a41
+  zh: 2ebd5da04dfb1ac6
+/agent-note-expose-deepseek-deferred-only-request-failures/alternatives-considered:
+  en: d10efff97379cfbb
+  zh: 572b124ddbb2d86d
+/agent-note-expose-deepseek-deferred-only-request-failures/consequences:
+  en: d60323c595b076f4
+  zh: 1bf1068424777b7e
diff --git a/.agents/notes/implemented/simplification/2026-11-02-deepseek-deferred-tool-failures.md b/.agents/notes/implemented/simplification/2026-11-02-deepseek-deferred-tool-failures.md
new file mode 100644
index 0000000000..78bc8d4a5c
--- /dev/null
+++ b/.agents/notes/implemented/simplification/2026-11-02-deepseek-deferred-tool-failures.md
@@ -0,0 +1,25 @@
+# Agent Note: Expose DeepSeek deferred-only request failures
+
+Status: implemented
+
+English | [中文](2026-11-02-deepseek-deferred-tool-failures.zh.md)
+
+## Problem
+
+A synthetic immediate tool can make an all-deferred DeepSeek request acceptable while hiding an invalid tool-update projection. It also changes the request prefix and advertises a tool with no executor.
+
+## Decision
+
+The DeepSeek adapter sends deferred declarations unchanged and propagates provider rejection. This replaces the placeholder accommodation described by the [tool-update decision](../architecture/2026-09-20-dynamic-tool-updates.md), whose shared history projection remains authoritative.
+
+Ordinary addition-only histories start with native tools or an empty set. Removals and first additions to an empty set rebuild native declarations; later deferred additions retain a native baseline. Explicit deferred-only registrations, direct adapter calls, and custom in-history routes can still produce all-deferred requests. Those configurations receive no adapter workaround.
+
+## Alternatives considered
+
+**Keep a synthetic immediate tool.** It conceals unexpected deferred-only requests and cannot preserve a prefix that lacked that tool. Automatically activating a real tool instead changes its declared availability.
+
+**Reject locally.** Provider validation owns acceptance; another local restriction would duplicate it. Reconsider accommodation only for a supported workflow that requires deferred-only requests and cannot retain a native declaration.
+
+## Consequences
+
+Deferred-only compatibility is deliberately given up so request errors remain visible. Serializer and HTTP tests verify exact declarations and propagation of a provider rejection. The all-deferred keyless snapshot verifies request construction only; replay success does not establish provider acceptance. Replacement and empty-set scenarios verify the supported addition-only path.
diff --git a/.agents/notes/implemented/simplification/2026-11-02-deepseek-deferred-tool-failures.zh.md b/.agents/notes/implemented/simplification/2026-11-02-deepseek-deferred-tool-failures.zh.md
new file mode 100644
index 0000000000..f075aff3ad
--- /dev/null
+++ b/.agents/notes/implemented/simplification/2026-11-02-deepseek-deferred-tool-failures.zh.md
@@ -0,0 +1,25 @@
+# Agent Note: 显露 DeepSeek 全延迟请求失败
+
+Status: implemented
+
+[English](2026-11-02-deepseek-deferred-tool-failures.md) | 中文
+
+## Problem
+
+合成的立即加载工具可使 DeepSeek 接受全延迟请求，却掩盖无效的工具更新投影。它还会改变请求前缀，并声明一个没有执行器的工具。
+
+## Decision
+
+DeepSeek 适配器原样发送延迟声明，并传递提供方的拒绝错误。这取代了[工具更新决策](../architecture/2026-09-20-dynamic-tool-updates.zh.md)中描述的占位工具兼容机制；其中的共享历史投影仍是权威依据。
+
+普通 addition-only 历史以原生工具或空集开始。移除工具或首次向空集添加工具会重建原生声明；后续延迟添加保留原生基线。显式全延迟注册、直接调用适配器和自定义 in-history 路由仍可产生全延迟请求。适配器不为这些配置提供变通处理。
+
+## Alternatives considered
+
+**保留合成的立即加载工具。** 它会掩盖意外的全延迟请求，也无法保留原本没有该工具的前缀。改为自动激活真实工具则会改变其声明的可用性。
+
+**在本地拒绝。** 是否接受请求由提供方验证决定；额外的本地限制会重复该验证。只有受支持工作流确实需要全延迟请求，且无法保留原生声明时，才重新考虑兼容处理。
+
+## Consequences
+
+有意放弃全延迟兼容性，使请求错误保持可见。序列化和 HTTP 测试验证精确声明以及提供方拒绝错误的传递。全延迟无密钥快照仅验证请求构造；回放成功不代表提供方接受。替换和空集场景验证受支持的 addition-only 路径。
diff --git a/packages/llm/llm-deepseek/README.i18n.yaml b/packages/llm/llm-deepseek/README.i18n.yaml
index c3d2e1948c..2143878501 100644
--- a/packages/llm/llm-deepseek/README.i18n.yaml
+++ b/packages/llm/llm-deepseek/README.i18n.yaml
@@ -63,14 +63,14 @@
   en: 1dc50052999253c6
   zh: 7abf968fc18bffcd
 /deepseek-ai-dsh-llm-deepseek/model-experience/deepseek-request/what-the-model-sees:
-  en: 06f3cafb41d8d6bd
-  zh: 1b031d123a939685
+  en: fd508ab91893e9dc
+  zh: c653e55a47353d08
 /deepseek-ai-dsh-llm-deepseek/model-experience/deepseek-request/token-effect:
-  en: f8891795b5bfd744
-  zh: b1235786b04a7558
+  en: 67f4bfa42cbee911
+  zh: 5e9dc9bc07253686
 /deepseek-ai-dsh-llm-deepseek/model-experience/deepseek-request/kv-cache-effect:
-  en: de048b284b463dfb
-  zh: b5545081b3df6c53
+  en: 87ac92776176ee15
+  zh: bb49edf3a68dda07
 /deepseek-ai-dsh-llm-deepseek/model-experience/deepseek-response:
   en: 957d6665495e5ca5
   zh: 0aa72b2c2dc07167
diff --git a/packages/llm/llm-deepseek/README.md b/packages/llm/llm-deepseek/README.md
index 5bdea7637b..396248805e 100644
--- a/packages/llm/llm-deepseek/README.md
+++ b/packages/llm/llm-deepseek/README.md
@@ -170,15 +170,15 @@ Read these pages when the package-level contract is not enough. They move from t
 
 #### What the model sees
 
-The selected DeepSeek model receives the harness system prompt, message history, tool schemas, stop sequences, and call config (`maxTokens`, `reasoningEffort`, `temperature`). Provider-specific request-extension fields remain outside model input. The vision model normally receives retained user and tool-result images as Files API references beside attachment handles and request-preview dimensions. It also receives a normalized-object path when the current execution filesystem maps the attachment provider's host object; the descriptor marks this copy read-only and warns that normalization may have resized or re-encoded the upload. A Files resolution failure sends all retained images as inline base64 instead, and an over-budget older image keeps the access resolved for that request in its placeholder. Reasoning content from a prior assistant turn is passed back verbatim, whether or not that turn called a tool. Messages sends `{}` for historical tool arguments that are malformed JSON or are not objects. This argument fallback preserves call ids, tool names, and tool results; the original arguments stay in the Session log. Newly generated Messages tool arguments still require valid JSON objects. Messages omits `reasoning` and `tool-call` blocks inside user messages and tool results. This also permits replay of saved subagent notices containing assistant output; the original Session content remains intact. Empty user messages are skipped after conversion, while empty tool results retain their call ids and error flags. Other unsupported input blocks still fail with `UNSUPPORTED_CONTENT`. When every declared tool is deferred, the adapter prepends a non-deferred `DeferredToolPlaceholder` with the description `Reserved placeholder that keeps deferred tool loading active; never call this tool.` A numeric suffix avoids collisions with declared tools. The placeholder has no executor; calls receive the ordinary unavailable-tool result. The placeholder leaves real declarations unchanged. The shared [tool-update projection](../llm/README.md#known-limitations-and-deferred-work) rebuilds an addition-only baseline when a tool is removed or tools are added to an empty set, while keeping later additions deferred. Empty tool lists receive no placeholder.
+The selected DeepSeek model receives the harness system prompt, message history, tool schemas, stop sequences, and call config (`maxTokens`, `reasoningEffort`, `temperature`) without adapter-authored prompt prose. Provider-specific request-extension fields remain outside model input. The vision model normally receives retained user and tool-result images as Files API references beside attachment handles and request-preview dimensions. It also receives a normalized-object path when the current execution filesystem maps the attachment provider's host object; the descriptor marks this copy read-only and warns that normalization may have resized or re-encoded the upload. A Files resolution failure sends all retained images as inline base64 instead, and an over-budget older image keeps the access resolved for that request in its placeholder. Reasoning content from a prior assistant turn is passed back verbatim, whether or not that turn called a tool. Messages sends `{}` for historical tool arguments that are malformed JSON or are not objects. This argument fallback preserves call ids, tool names, and tool results; the original arguments stay in the Session log. Newly generated Messages tool arguments still require valid JSON objects. Messages omits `reasoning` and `tool-call` blocks inside user messages and tool results. This also permits replay of saved subagent notices containing assistant output; the original Session content remains intact. Empty user messages are skipped after conversion, while empty tool results retain their call ids and error flags. Other unsupported input blocks still fail with `UNSUPPORTED_CONTENT`. The adapter sends all-deferred tool lists unchanged and propagates provider rejection without adding a placeholder or activating real tools. The shared [tool-update projection](../llm/README.md#known-limitations-and-deferred-work) rebuilds an addition-only baseline when a tool is removed or tools are added to an empty set, while keeping later additions deferred.
 
 #### Token effect
 
-Provider tokenization governs exact text and image-token input. When present, the placeholder adds input tokens for one tool declaration, including its name, description, and empty object schema. The adapter declares per-route `imageRequestPricing`: it prices each occurrence selected by a logged image-offload decision as its placeholder text and each retained image at its projected dimensions with the published vision accounting (14px patch grid, 3:1 downsampling, 544×544 scale-up floor, 1024-token cap). This lets the token meter price image pressure before a request; reported usage remains authoritative. Reasoning passback carries every reasoned turn's chain of thought into later requests, while offloaded images stop costing visual tokens. A request whose retained occurrences exceed the file-mode or inline-fallback budget (`maxRequestFilesBytes`, `maxImagesPerRequest`, both quanta) at their exact request-version bytes fails with `IMAGE_OFFLOAD_REQUIRED` naming the additional oldest occurrences to offload, and `dsh-compaction-image-offload` records the selected occurrences in an `image/offload` event and retries. Cache-read usage is reported when available. Messages totals include uncached input, output, cache-read, and cache-write tokens. `imageRequestTarget(provider, model, image)` exposes the same request-image dimensions and byte target to screenshot consumers; adapters without image resizing preserve the normalized source.
+Provider tokenization governs exact text and image-token input. The adapter declares per-route `imageRequestPricing`: it prices each occurrence selected by a logged image-offload decision as its placeholder text and each retained image at its projected dimensions with the published vision accounting (14px patch grid, 3:1 downsampling, 544×544 scale-up floor, 1024-token cap). This lets the token meter price image pressure before a request; reported usage remains authoritative. Reasoning passback carries every reasoned turn's chain of thought into later requests, while offloaded images stop costing visual tokens. A request whose retained occurrences exceed the file-mode or inline-fallback budget (`maxRequestFilesBytes`, `maxImagesPerRequest`, both quanta) at their exact request-version bytes fails with `IMAGE_OFFLOAD_REQUIRED` naming the additional oldest occurrences to offload, and `dsh-compaction-image-offload` records the selected occurrences in an `image/offload` event and retries. Cache-read usage is reported when available. Messages totals include uncached input, output, cache-read, and cache-write tokens. `imageRequestTarget(provider, model, image)` exposes the same request-image dimensions and byte target to screenshot consumers; adapters without image resizing preserve the normalized source.
 
 #### KV Cache effect
 
-An unchanged assembled prefix is eligible for DeepSeek cache reuse, which this adapter reports in usage. For a nonempty all-deferred tool list, the placeholder is part of the declaration prefix; adding, removing, or renaming it changes that prefix and may affect cache reuse. Deterministic request-image bytes do not make the full prefix immutable: a changed execution-world path rewrites historical descriptor text, a refreshed upload can replace a `file_id`, and Files-to-base64 fallback changes the image representation. Any of these, or a model-route, prompt, schema, history, or image-budget change, may prevent reuse from the first affected token; reasoning passback appends on every reasoned turn. On a catalog entry declaring `systemPromptUpdate: in-history`, a system prompt change inside a continuing request series is appended after the cached history, so the prefix through that history stays reusable; a tool-schema change still prevents reuse from the first altered token.
+An unchanged assembled prefix is eligible for DeepSeek cache reuse, which this adapter reports in usage. Deterministic request-image bytes do not make the full prefix immutable: a changed execution-world path rewrites historical descriptor text, a refreshed upload can replace a `file_id`, and Files-to-base64 fallback changes the image representation. Any of these, or a model-route, prompt, schema, history, or image-budget change, may prevent reuse from the first affected token; reasoning passback appends on every reasoned turn. On a catalog entry declaring `systemPromptUpdate: in-history`, a system prompt change inside a continuing request series is appended after the cached history, so the prefix through that history stays reusable; a tool-schema change still prevents reuse from the first altered token.
 
 ### DeepSeek response
 
diff --git a/packages/llm/llm-deepseek/README.zh.md b/packages/llm/llm-deepseek/README.zh.md
index 009306fb5e..f11c8c3e13 100644
--- a/packages/llm/llm-deepseek/README.zh.md
+++ b/packages/llm/llm-deepseek/README.zh.md
@@ -170,15 +170,15 @@ Files 模式通过 `maxRequestFilesBytes` 与 `maxImagesPerRequest` 限制保留
 
 #### 模型看到什么
 
-所选 DeepSeek 模型会收到 harness 系统提示词、消息历史、工具 schema、停止序列与调用配置（`maxTokens`、`reasoningEffort`、`temperature`）。提供方专用请求扩展字段留在模型输入之外。视觉模型通常接收 Files API 引用形式的用户与工具结果图片，其旁带附件句柄和请求预览尺寸。当前执行文件系统可以映射附件提供方的宿主对象时，它还会收到规范化对象路径；描述符会把该副本标记为只读，并警告规范化可能缩放或重新编码上传内容。Files 解析失败时，全部保留图片改用内联 base64；超出预算的较旧图片则在占位文本中保留当前请求已解析的访问方式。此前 assistant 轮次的推理内容会原样传回，无论该轮次是否调用了工具。 对于非法 JSON 或非对象的历史工具参数，Messages 发送 `{}`。此参数兜底保留调用 ID、工具名和工具结果；原始参数仍保留在 Session 日志中。新生成的 Messages 工具参数仍须是有效 JSON 对象。 Messages 会省略用户消息和工具结果中的 `reasoning` 与 `tool-call` 块。这也允许回放包含助手输出的已保存子 Agent 通知；原始 Session 内容保持完整。转换后的空用户消息会被跳过，空工具结果则保留调用 id 和错误标记。其他不支持的输入块仍会以 `UNSUPPORTED_CONTENT` 失败。 当所有已声明工具都为延迟加载时，适配器会在列表开头添加非延迟的 `DeferredToolPlaceholder`，描述为 `Reserved placeholder that keeps deferred tool loading active; never call this tool.`。如与已声明工具重名，则添加数字后缀。占位工具没有执行器；调用会收到常规的工具不可用结果。占位工具不会改变真实工具声明。共享的[工具更新投影](../llm/README.zh.md#known-limitations-and-deferred-work)在移除任何工具或向空工具集添加工具时重建 addition-only 基线，后续添加仍保持延迟加载。空工具列表不会添加占位工具。
+所选 DeepSeek 模型会收到 harness 系统提示词、消息历史、工具 schema、停止序列与调用配置（`maxTokens`、`reasoningEffort`、`temperature`），不包含适配器撰写的提示词散文。提供方专用请求扩展字段留在模型输入之外。视觉模型通常接收 Files API 引用形式的用户与工具结果图片，其旁带附件句柄和请求预览尺寸。当前执行文件系统可以映射附件提供方的宿主对象时，它还会收到规范化对象路径；描述符会把该副本标记为只读，并警告规范化可能缩放或重新编码上传内容。Files 解析失败时，全部保留图片改用内联 base64；超出预算的较旧图片则在占位文本中保留当前请求已解析的访问方式。此前 assistant 轮次的推理内容会原样传回，无论该轮次是否调用了工具。 对于非法 JSON 或非对象的历史工具参数，Messages 发送 `{}`。此参数兜底保留调用 ID、工具名和工具结果；原始参数仍保留在 Session 日志中。新生成的 Messages 工具参数仍须是有效 JSON 对象。 Messages 会省略用户消息和工具结果中的 `reasoning` 与 `tool-call` 块。这也允许回放包含助手输出的已保存子 Agent 通知；原始 Session 内容保持完整。转换后的空用户消息会被跳过，空工具结果则保留调用 id 和错误标记。其他不支持的输入块仍会以 `UNSUPPORTED_CONTENT` 失败。 适配器原样发送全延迟工具列表，并传递提供方的拒绝错误，不添加占位工具或激活真实工具。共享的[工具更新投影](../llm/README.zh.md#known-limitations-and-deferred-work)在移除任何工具或向空工具集添加工具时重建 addition-only 基线，后续添加仍保持延迟加载。
 
 #### Token 影响
 
-提供方分词决定精确的文本与图片 token 输入。存在占位工具时，其名称、描述和空对象 schema 构成一个额外工具声明，增加输入 token。适配器声明按路由的 `imageRequestPricing`：把日志中的图片省略决策选中的每个出现位置按其占位文本计价，并按投影后的尺寸使用公开的视觉计量规则（14 px patch 网格、3:1 降采样、544×544 放大下限、单图 1024 token 上限）为每张保留图片计价。这使 token 计量服务可以在请求发出前为图片压力定价；上报的 usage 仍是权威值。推理回传会把每个推理轮次的思维链带进后续请求，而已省略的图片不再消耗视觉 token。保留的出现位置按精确请求版本字节超过 file 模式或内联回退预算（`maxRequestFilesBytes`、`maxImagesPerRequest` 与两个量子）的请求，以 `IMAGE_OFFLOAD_REQUIRED` 失败并说明还需省略多少最老的出现位置，由 `dsh-compaction-image-offload` 用 `image/offload` 事件记录所选位置并重试。可用时报告缓存读取用量。Messages 的 token 总数包含未缓存输入、输出、缓存读取与缓存写入 token。 `imageRequestTarget(provider, model, image)` 向截图调用方提供与模型请求一致的图片尺寸和字节目标；不缩放图片的适配器保留归一化后的原图。
+提供方分词决定精确的文本与图片 token 输入。适配器声明按路由的 `imageRequestPricing`：把日志中的图片省略决策选中的每个出现位置按其占位文本计价，并按投影后的尺寸使用公开的视觉计量规则（14 px patch 网格、3:1 降采样、544×544 放大下限、单图 1024 token 上限）为每张保留图片计价。这使 token 计量服务可以在请求发出前为图片压力定价；上报的 usage 仍是权威值。推理回传会把每个推理轮次的思维链带进后续请求，而已省略的图片不再消耗视觉 token。保留的出现位置按精确请求版本字节超过 file 模式或内联回退预算（`maxRequestFilesBytes`、`maxImagesPerRequest` 与两个量子）的请求，以 `IMAGE_OFFLOAD_REQUIRED` 失败并说明还需省略多少最老的出现位置，由 `dsh-compaction-image-offload` 用 `image/offload` 事件记录所选位置并重试。可用时报告缓存读取用量。Messages 的 token 总数包含未缓存输入、输出、缓存读取与缓存写入 token。 `imageRequestTarget(provider, model, image)` 向截图调用方提供与模型请求一致的图片尺寸和字节目标；不缩放图片的适配器保留归一化后的原图。
 
 #### KV Cache 影响
 
-未改变的已组装前缀有资格获得 DeepSeek 缓存复用，本适配器会在用量中报告。对于非空的全延迟工具列表，占位工具属于声明前缀；添加、移除或重命名占位工具会改变该前缀，并可能影响缓存复用。确定性的请求图片字节并不意味着完整前缀固定不变：执行世界路径变化会改写历史描述符文本，刷新上传会替换 `file_id`，Files 到 base64 的回退也会改变图片表示。这些变化以及模型路由、提示词、schema、历史或图片预算变化，都可能从首个受影响 token 起阻止复用；推理回传在每个推理轮次上追加内容。在声明了 `systemPromptUpdate: in-history` 的目录条目上，同一请求序列延续期间的系统提示词变化会追加到已缓存历史之后，因此直到该历史末尾的前缀仍可复用；工具 schema 变化仍会从第一个改变的 token 起阻止复用。
+未改变的已组装前缀有资格获得 DeepSeek 缓存复用，本适配器会在用量中报告。确定性的请求图片字节并不意味着完整前缀固定不变：执行世界路径变化会改写历史描述符文本，刷新上传会替换 `file_id`，Files 到 base64 的回退也会改变图片表示。这些变化以及模型路由、提示词、schema、历史或图片预算变化，都可能从首个受影响 token 起阻止复用；推理回传在每个推理轮次上追加内容。在声明了 `systemPromptUpdate: in-history` 的目录条目上，同一请求序列延续期间的系统提示词变化会追加到已缓存历史之后，因此直到该历史末尾的前缀仍可复用；工具 schema 变化仍会从第一个改变的 token 起阻止复用。
 
 ### DeepSeek 响应
 
diff --git a/packages/llm/llm-deepseek/src/serialize.ts b/packages/llm/llm-deepseek/src/serialize.ts
index 6f173a6f01..f08412c0e9 100644
--- a/packages/llm/llm-deepseek/src/serialize.ts
+++ b/packages/llm/llm-deepseek/src/serialize.ts
@@ -45,8 +45,6 @@ function assistant(message: Message, model: string, onReplayDegrade?: (reason: s
  * Developer messages, already projected for this route by `LlmRuntime`, become
  * system-role updates after the preceding user turn, with tool changes as
  * `tool_addition` and `tool_removal` references to the declared tool.
- * Nonempty all-deferred tool lists receive an immediate, non-executable
- * placeholder without changing real tools or their activation positions.
  * @param options - provider-neutral request.
  * @param connection - validated defaults and thinking policy.
  * @param history - image-projected history with complete system snapshots; durable messages remain unchanged.
@@ -151,23 +149,6 @@ export function serialize(
     throw new LlmError(`DeepSeek Messages does not support reasoning effort ${effort}`, 'UNSUPPORTED_REASONING_EFFORT')
   }
   const system = [options.system, historySystem].filter(Boolean).join('\n\n')
-  const tools = options.tools?.map(tool => ({
-    name: tool.name,
-    description: tool.description,
-    input_schema: tool.parameters,
-    ...tool.deferLoading === true ? { defer_loading: true as const } : {},
-  }))
-  if (tools !== undefined && tools.length > 0 && tools.every(tool => tool.defer_loading === true)) {
-    // Messages requires an immediate declaration even when every real tool loads later.
-    const names = new Set(tools.map(tool => tool.name))
-    let name = 'DeferredToolPlaceholder'
-    for (let suffix = 1; names.has(name); suffix++) name = `DeferredToolPlaceholder_${suffix}`
-    tools.unshift({
-      name,
-      description: 'Reserved placeholder that keeps deferred tool loading active; never call this tool.',
-      input_schema: { type: 'object', properties: {} },
-    })
-  }
   return {
     model: options.model, stream: true, messages,
     max_tokens: options.maxTokens ?? model?.maxTokens ?? connection.maxTokens,
@@ -176,6 +157,13 @@ export function serialize(
     ...system.length === 0 ? {} : { system },
     ...options.temperature === undefined ? {} : { temperature: options.temperature },
     ...options.stop === undefined ? {} : { stop_sequences: options.stop },
-    ...tools === undefined ? {} : { tools },
+    ...options.tools === undefined ? {} : {
+      tools: options.tools.map(tool => ({
+        name: tool.name,
+        description: tool.description,
+        input_schema: tool.parameters,
+        ...tool.deferLoading === true ? { defer_loading: true as const } : {},
+      })),
+    },
   }
 }
diff --git a/packages/llm/llm-deepseek/tests/adapter.spec.ts b/packages/llm/llm-deepseek/tests/adapter.spec.ts
index f36cb3cdeb..ea30717e92 100644
--- a/packages/llm/llm-deepseek/tests/adapter.spec.ts
+++ b/packages/llm/llm-deepseek/tests/adapter.spec.ts
@@ -118,7 +118,7 @@ describe('direct Messages HTTP', () => {
     await assemble(llm.stream(options({ messages: [user(), changes], tools })))
     expect(http.requests[0]).toMatchObject({
       headers: { 'anthropic-beta': 'mid-conversation-tool-changes-2026-07-01' },
-      body: { tools: [{ name: 'DeferredToolPlaceholder' }, { name: 'search', defer_loading: true }], messages: [
+      body: { tools: [{ name: 'search', defer_loading: true }], messages: [
         { role: 'user' }, { role: 'system', content: [{ type: 'tool_addition', tool: { type: 'tool_reference', name: 'search' } }] },
       ] },
     })
@@ -126,6 +126,21 @@ describe('direct Messages HTTP', () => {
     expect(http.requests[1]?.headers).not.toHaveProperty('anthropic-beta')
   })
 
+  it('surfaces provider rejection of an all-deferred request without adding tools', async () => {
+    const message = 'At least one tool must not be deferred'
+    const http = await endpoint((response) => {
+      response.statusCode = 400
+      response.end(JSON.stringify({ error: { type: 'invalid_request_error', message } }))
+    })
+    const tools = [{ name: 'search', description: 'Search', parameters: {}, deferLoading: true as const }]
+    await expect(chunks(adapter({ baseURL: http.url }).stream(options({ tools }))))
+      .rejects.toMatchObject({ code: 'INVALID_REQUEST', message, failure: { status: 400 } })
+    expect(http.requests).toHaveLength(1)
+    expect(http.requests[0]?.body.tools).toEqual([
+      { name: 'search', description: 'Search', input_schema: {}, defer_loading: true },
+    ])
+  })
+
   it('uses the Messages endpoint, authentication, attribution and final usage', async () => {
     const http = await endpoint()
     const llm = adapter({ baseURL: http.url })
diff --git a/packages/llm/llm-deepseek/tests/fixtures/all-deferred-tools.ts b/packages/llm/llm-deepseek/tests/fixtures/all-deferred-tools.ts
index 969347e651..a485c57022 100644
--- a/packages/llm/llm-deepseek/tests/fixtures/all-deferred-tools.ts
+++ b/packages/llm/llm-deepseek/tests/fixtures/all-deferred-tools.ts
@@ -1,4 +1,4 @@
-/** Replay explicitly deferred declarations without activating them. */
+/** Verify serialized deferred-only declarations; keyless replay does not validate provider acceptance. */
 import assert from 'node:assert/strict'
 import type { Context } from '@deepseek-ai/cordis'
 import type {} from '@deepseek-ai/dsh-agent'
@@ -29,7 +29,6 @@ export function apply(ctx: Context): void {
     assert.deepEqual(projected.tools, options.tools)
     const request = serialize({ ...options, tools: [...projected.tools] }, connection, projected.messages, new Map(), () => undefined)
     assert.deepEqual(request.tools, [
-      { name: 'DeferredToolPlaceholder', description: 'Reserved placeholder that keeps deferred tool loading active; never call this tool.', input_schema: { type: 'object', properties: {} } },
       { name: 'snapshot_pending', description: 'Wait for activation.', input_schema: { type: 'object', properties: {} }, defer_loading: true },
     ])
     assert.deepEqual(request.messages.filter(message => message.role === 'system'), [])
diff --git a/packages/llm/llm-deepseek/tests/serialize.spec.ts b/packages/llm/llm-deepseek/tests/serialize.spec.ts
index 9194650f10..6751ed5b44 100644
--- a/packages/llm/llm-deepseek/tests/serialize.spec.ts
+++ b/packages/llm/llm-deepseek/tests/serialize.spec.ts
@@ -80,25 +80,15 @@ describe('Messages request conversion', () => {
     ])
   })
 
-  it('keeps an all-deferred list inactive and adds one immediate placeholder', () => {
+  it('preserves an all-deferred list without synthesizing tools', () => {
     const tools = [{ name: 'search', description: 'Search', parameters: {}, deferLoading: true as const }]
     const saved = JSON.stringify(tools)
     expect(body([user()], { tools }).tools).toEqual([
-      { name: 'DeferredToolPlaceholder', description: 'Reserved placeholder that keeps deferred tool loading active; never call this tool.', input_schema: { type: 'object', properties: {} } },
       { name: 'search', description: 'Search', input_schema: {}, defer_loading: true },
     ])
     expect(JSON.stringify(tools)).toBe(saved)
   })
 
-  it('avoids colliding with real deferred tool names', () => {
-    const tools = ['DeferredToolPlaceholder', 'DeferredToolPlaceholder_1'].map(name => ({
-      name, description: 'Real tool', parameters: {}, deferLoading: true as const,
-    }))
-    expect(body([user()], { tools }).tools?.map(tool => [tool.name, tool.defer_loading])).toEqual([
-      ['DeferredToolPlaceholder_2', undefined], ['DeferredToolPlaceholder', true], ['DeferredToolPlaceholder_1', true],
-    ])
-  })
-
   it('preserves absent and empty tool lists', () => {
     expect(body().tools).toBeUndefined()
     expect(body([user()], { tools: [] }).tools).toEqual([])

From d721353f86ff36bb48ee5e2a29eeea127cfa8823 Mon Sep 17 00:00:00 2001
From: Yichen Jiang <jyc132780208@sina.com>
Date: Mon, 2 Nov 2026 22:34:01 +0800
Subject: [PATCH 29/32] feat(forge): unify plugin entry for reviews and
 worktrees (#7721)

* feat(forge): unify the worktree plugin entry and add user previews

* docs(forge): show session-linked GitHub pull requests in preview

* refactor(forge): keep plugin unification out of profile loading

* docs(forge): document manual upgrade to the unified plugin entry

* fix(forge): localize preview descriptions and address review feedback

* test(web): refresh creation recommendation catalog for the forge description

---------

Co-authored-by: imccyu <276526105+imccyu@users.noreply.github.com>
---
 .../feature/2026-10-09-forge-panel.i18n.yaml  |  8 +--
 .../feature/2026-10-09-forge-panel.md         |  6 ++-
 .../feature/2026-10-09-forge-panel.zh.md      |  6 ++-
 apps/web/tests/additional-locales.e2e.ts      | 34 ++++++++++++
 .../plugin-config/official.expected.md        |  2 +-
 .../plugin-manager/forge-preview.expected.md  | 54 +++++++++++++++++++
 .../plugin-manager/live-enabled.expected.md   |  2 +-
 .../plugin-manager/manager.expected.md        |  2 +-
 apps/web/tests/forge-panel.e2e.ts             |  2 +
 apps/web/tests/plugin-config.e2e.ts           | 10 ++--
 apps/web/tests/plugin-manager.e2e.ts          | 51 ++++++++++++++++--
 apps/web/tests/worktree-opt-in.e2e.ts         | 29 +++++++---
 docs/subsystems/forge.i18n.yaml               |  4 +-
 docs/subsystems/forge.md                      |  2 +-
 docs/subsystems/forge.zh.md                   |  2 +-
 docs/subsystems/worktrees.i18n.yaml           |  4 +-
 docs/subsystems/worktrees.md                  |  2 +-
 docs/subsystems/worktrees.zh.md               |  2 +-
 docs/tool-catalog.i18n.yaml                   |  8 +--
 docs/tool-catalog.md                          |  4 +-
 docs/tool-catalog.zh.md                       |  4 +-
 .../forge-worktree-entry/guide.i18n.yaml      | 16 ++++++
 .../forge-worktree-entry/guide.md             | 29 ++++++++++
 .../forge-worktree-entry/guide.zh.md          | 29 ++++++++++
 .../tests/components.client.spec.tsx          | 28 +++++++---
 .../forge-bundle/README.i18n.yaml             | 20 +++----
 packages/experimental/forge-bundle/README.md  | 10 ++--
 .../experimental/forge-bundle/README.zh.md    | 10 ++--
 .../forge-bundle/cordis.patch.yml             |  4 ++
 .../forge-bundle/docs/DETAIL.de.md            |  1 +
 .../forge-bundle/docs/DETAIL.es.md            |  1 +
 .../forge-bundle/docs/DETAIL.fr.md            |  1 +
 .../forge-bundle/docs/DETAIL.ja.md            |  1 +
 .../experimental/forge-bundle/docs/DETAIL.md  |  1 +
 .../forge-bundle/docs/DETAIL.pt.md            |  1 +
 .../forge-bundle/docs/DETAIL.ru.md            |  1 +
 .../forge-bundle/docs/DETAIL.zh.md            |  1 +
 .../forge-bundle/docs/preview.svg             | 28 ++++++++++
 .../forge-bundle/docs/preview.zh.svg          | 28 ++++++++++
 .../experimental/forge-bundle/locale/de.json  |  3 +-
 .../experimental/forge-bundle/locale/en.json  |  3 +-
 .../experimental/forge-bundle/locale/es.json  |  3 +-
 .../experimental/forge-bundle/locale/fr.json  |  3 +-
 .../experimental/forge-bundle/locale/ja.json  |  3 +-
 .../experimental/forge-bundle/locale/pt.json  |  3 +-
 .../experimental/forge-bundle/locale/ru.json  |  3 +-
 .../experimental/forge-bundle/locale/zh.json  |  3 +-
 .../experimental/forge-bundle/package.json    |  2 +
 .../tool-worktree/README.i18n.yaml            |  8 +--
 packages/experimental/tool-worktree/README.md |  4 +-
 .../experimental/tool-worktree/README.zh.md   |  4 +-
 .../official-bundles/src/plugin-manager.ts    |  4 +-
 pnpm-lock.yaml                                |  3 ++
 scripts/gen-tool-catalog.ts                   |  2 +-
 scripts/optional-bundles.spec.ts              | 28 +++++-----
 .../verify-package-readme-model-experience.ts |  2 +-
 .../creation-recommendations/session.v4.jsonl |  2 +-
 57 files changed, 429 insertions(+), 102 deletions(-)
 create mode 100644 apps/web/tests/expected/plugin-manager/forge-preview.expected.md
 create mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/forge-worktree-entry/guide.i18n.yaml
 create mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/forge-worktree-entry/guide.md
 create mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/forge-worktree-entry/guide.zh.md
 create mode 100644 packages/experimental/forge-bundle/docs/DETAIL.de.md
 create mode 100644 packages/experimental/forge-bundle/docs/DETAIL.es.md
 create mode 100644 packages/experimental/forge-bundle/docs/DETAIL.fr.md
 create mode 100644 packages/experimental/forge-bundle/docs/DETAIL.ja.md
 create mode 100644 packages/experimental/forge-bundle/docs/DETAIL.md
 create mode 100644 packages/experimental/forge-bundle/docs/DETAIL.pt.md
 create mode 100644 packages/experimental/forge-bundle/docs/DETAIL.ru.md
 create mode 100644 packages/experimental/forge-bundle/docs/DETAIL.zh.md
 create mode 100644 packages/experimental/forge-bundle/docs/preview.svg
 create mode 100644 packages/experimental/forge-bundle/docs/preview.zh.svg

diff --git a/.agents/notes/implemented/feature/2026-10-09-forge-panel.i18n.yaml b/.agents/notes/implemented/feature/2026-10-09-forge-panel.i18n.yaml
index 53d2b74f3a..f779b7be73 100644
--- a/.agents/notes/implemented/feature/2026-10-09-forge-panel.i18n.yaml
+++ b/.agents/notes/implemented/feature/2026-10-09-forge-panel.i18n.yaml
@@ -9,8 +9,8 @@
   en: 344bcc7e9825bbc8
   zh: c1d0f4b54f5b3786
 /agent-note-change-request-panel-and-worktree-sessions/decision:
-  en: 6a0dc836205863ba
-  zh: 3d4feb0385953dda
+  en: 66bde24e7c601eb6
+  zh: 5091591f3dc1ac85
 /agent-note-change-request-panel-and-worktree-sessions/deferred:
   en: 32ef8af85f4d2f66
   zh: b82b67f94346399e
@@ -18,5 +18,5 @@
   en: e471e16b6b6450ca
   zh: 5fbc9242edc8d112
 /agent-note-change-request-panel-and-worktree-sessions/consequences:
-  en: 81790c448f0a7d3b
-  zh: ec63ccb2ad315ff8
+  en: 0b785a2204963c4f
+  zh: be4bd8db40b801a1
diff --git a/.agents/notes/implemented/feature/2026-10-09-forge-panel.md b/.agents/notes/implemented/feature/2026-10-09-forge-panel.md
index 1285ba6cdf..2b852ad824 100644
--- a/.agents/notes/implemented/feature/2026-10-09-forge-panel.md
+++ b/.agents/notes/implemented/feature/2026-10-09-forge-panel.md
@@ -10,7 +10,9 @@ English | [中文](2026-10-09-forge-panel.zh.md)
 
 ## Decision
 
-[`dsh-experimental-client-ui-forge`](../../../../packages/experimental/client-ui-forge/README.md) is a two-face package. Its Host half, the `forgePanel` Remote, assembles everything the panel shows for one Session into one streamed state; the forge registry and the binding service keep only their domain operations. Its Client half is a right-sidebar tab, a Session header button that shows or hides it, a New Session option, a creation card above the composer, a toast, and the [Session list icons and hover card section](2026-10-20-forge-session-list.md). Every surface calls a bound item a change request, the forge registry's term, whatever its code host calls it. The [forge bundle](../../../../packages/experimental/forge-bundle/README.md) ships the panel, the forge registry, the GitHub provider, the bindings, and an isolated worktree service as one default-disabled Plugins page entry.
+[`dsh-experimental-client-ui-forge`](../../../../packages/experimental/client-ui-forge/README.md) is a two-face package. Its Host half, the `forgePanel` Remote, assembles everything the panel shows for one Session into one streamed state; the forge registry and the binding service keep only their domain operations. Its Client half is a right-sidebar tab, a Session header button that shows or hides it, a New Session option, a creation card above the composer, a toast, and the [Session list icons and hover card section](2026-10-20-forge-session-list.md). Every surface calls a bound item a change request, the forge registry's term, whatever its code host calls it. The [forge bundle](../../../../packages/experimental/forge-bundle/README.md) ships the panel, the forge registry, the GitHub provider, the bindings, the worktree model tool, and an isolated worktree service for the panel as one default-disabled Plugins page entry.
+
+Review and worktree controls serve one code-change workflow. One Plugins entry lets users enable that workflow without having to distinguish the underlying package split. Packages and the two worktree services remain independent so each owns its before-Session or in-conversation creation flow.
 
 The Remote inspects the checkout through the Session's subprocess provider under its [resolved permissions and query restrictions](../bug-fix/2026-10-28-forge-git-session-permissions.md), so it reads what the Session's commands see. Inspection reads the top-level, Git, and common Git directories, the branch or the abbreviated HEAD commit, the upstream, the remotes, and the size of the branch's changes against its fork point. It runs when a Session is followed, after each `working-directory/change`, `tool/result`, and `sandbox/mode` event, and on refresh, one at a time with one trailing rerun.
 
@@ -89,4 +91,4 @@ The changes view offers no scope for one commit or for the last turn yet; both w
 
 ## Consequences
 
-The panel shows current status only while it is open; checks that finish while nothing is mounted produce no notification. Changes made outside the Session appear after Refresh or the next tool result. Every inspection spawns up to twelve short Git processes in the Session's execution world with one remote, and two more for each further remote it tries for a fork point. A worktree exists only for a Session that requested it before its first step, and a failed or cancelled attempt can leave its branch or checkout behind. A message that enters while the Agent runs a turn or other maintenance gets no hold, so its worktree is created within the first turn and a removed worktree is not checked. While a message waits, the Agent stays idle in maintenance: the composer offers no stop, and callers waiting for the Agent to become idle wait as well. Restoring loses changes that were never committed. A base branch that requires a merge queue cannot merge from the panel. With Git Worktrees also enabled, two independent worktree services exist; the model's tool never sees the panel's service. A local or change request diff over `maxDiffBytes`, or one the host refuses, shows no files. Expanding unchanged lines of a change request reads each file from the code host once.
+The panel shows current status only while it is open; checks that finish while nothing is mounted produce no notification. Changes made outside the Session appear after Refresh or the next tool result. Every inspection spawns up to twelve short Git processes in the Session's execution world with one remote, and two more for each further remote it tries for a fork point. A worktree exists only for a Session that requested it before its first step, and a failed or cancelled attempt can leave its branch or checkout behind. A message that enters while the Agent runs a turn or other maintenance gets no hold, so its worktree is created within the first turn and a removed worktree is not checked. While a message waits, the Agent stays idle in maintenance: the composer offers no stop, and callers waiting for the Agent to become idle wait as well. Restoring loses changes that were never committed. A base branch that requires a merge queue cannot merge from the panel. The bundle mounts two independent worktree services; the model's tool never sees the panel's service. A local or change request diff over `maxDiffBytes`, or one the host refuses, shows no files. Expanding unchanged lines of a change request reads each file from the code host once.
diff --git a/.agents/notes/implemented/feature/2026-10-09-forge-panel.zh.md b/.agents/notes/implemented/feature/2026-10-09-forge-panel.zh.md
index 432f2b10a8..660bd81d38 100644
--- a/.agents/notes/implemented/feature/2026-10-09-forge-panel.zh.md
+++ b/.agents/notes/implemented/feature/2026-10-09-forge-panel.zh.md
@@ -10,7 +10,9 @@ Status: implemented
 
 ## Decision
 
-[`dsh-experimental-client-ui-forge`](../../../../packages/experimental/client-ui-forge/README.zh.md) 是一个双端包。宿主端的 `forgePanel` Remote 把面板为一个 Session 展示的全部内容组装成一条流式状态；forge 注册表与绑定服务只保留各自的领域操作。客户端包括一个右侧边栏标签页、一个显示或隐藏它的 Session 标题栏按钮、一个新会话选项、一张位于输入框上方的创建卡片、一个 toast，以及[会话列表中的图标与悬浮卡片部分](2026-10-20-forge-session-list.zh.md)。所有界面都把已绑定的条目称为变更请求（forge 注册表的术语），不随代码托管平台的叫法变化。[forge 套件](../../../../packages/experimental/forge-bundle/README.zh.md)把面板、forge 注册表、GitHub 提供方、绑定服务与一个隔离的 worktree 服务作为插件页中默认禁用的一个条目发布。
+[`dsh-experimental-client-ui-forge`](../../../../packages/experimental/client-ui-forge/README.zh.md) 是一个双端包。宿主端的 `forgePanel` Remote 把面板为一个 Session 展示的全部内容组装成一条流式状态；forge 注册表与绑定服务只保留各自的领域操作。客户端包括一个右侧边栏标签页、一个显示或隐藏它的 Session 标题栏按钮、一个新会话选项、一张位于输入框上方的创建卡片、一个 toast，以及[会话列表中的图标与悬浮卡片部分](2026-10-20-forge-session-list.zh.md)。所有界面都把已绑定的条目称为变更请求（forge 注册表的术语），不随代码托管平台的叫法变化。[forge 套件](../../../../packages/experimental/forge-bundle/README.zh.md)把面板、forge 注册表、GitHub 提供方、绑定服务、工作树模型工具与面板使用的一个隔离 worktree 服务作为插件页中默认禁用的一个条目发布。
+
+评审与工作树控件服务于同一个代码修改流程。统一插件入口让用户可以一次启用这些能力，无需根据底层包的拆分判断应该开启哪张卡片。包与两套工作树服务仍保持独立，分别负责会话开始前和对话中创建工作树的流程。
 
 Remote 通过 Session 的子进程提供方，按其[解析出的权限与查询限制](../bug-fix/2026-10-28-forge-git-session-permissions.zh.md)检查检出，因此它读到的与 Session 命令看到的相同。检查读取顶层目录、Git 目录与公共 Git 目录、分支或缩写的 HEAD 提交、上游与远端，以及分支相对于其分叉点的变更规模。它在 Session 被关注时、每个 `working-directory/change`、`tool/result` 与 `sandbox/mode` 事件之后以及刷新时运行，一次只运行一个，最多再追加一次。
 
@@ -89,4 +91,4 @@ Session 所在的 worktree 可能在 Session 之外被删除。每次检查都
 
 ## Consequences
 
-面板只在打开时显示当前状态；没有任何界面挂载时检查结束不会有通知。Session 之外的改动要等到刷新或下一个工具结果才会出现。只有一个远端时，每次检查最多在 Session 的执行环境中启动十二个短暂的 Git 进程；为寻找分叉点每多尝试一个远端，就多启动两个。只有在第一步之前提出请求的 Session 才会有 worktree，失败或被取消的尝试可能留下它的分支或检出。Agent 正在运行一轮或其他维护任务时进入的消息不会被暂留，因此它的 worktree 在第一轮之内创建，已删除的 worktree 也不会被检查。消息等待期间，Agent 以空闲状态处于维护任务中：输入框不提供停止，等待 Agent 空闲的调用方也会一并等待。恢复会丢失从未提交的修改。要求合并队列的基准分支无法从面板合并。同时启用 Git Worktrees 时会存在两个互不影响的 worktree 服务；模型的工具看不到面板的服务。本地或变更请求的 diff 超过 `maxDiffBytes`，或被托管平台拒绝时，不显示任何文件。展开变更请求中未变更的行时，每个文件只从托管平台读取一次。
+面板只在打开时显示当前状态；没有任何界面挂载时检查结束不会有通知。Session 之外的改动要等到刷新或下一个工具结果才会出现。只有一个远端时，每次检查最多在 Session 的执行环境中启动十二个短暂的 Git 进程；为寻找分叉点每多尝试一个远端，就多启动两个。只有在第一步之前提出请求的 Session 才会有 worktree，失败或被取消的尝试可能留下它的分支或检出。Agent 正在运行一轮或其他维护任务时进入的消息不会被暂留，因此它的 worktree 在第一轮之内创建，已删除的 worktree 也不会被检查。消息等待期间，Agent 以空闲状态处于维护任务中：输入框不提供停止，等待 Agent 空闲的调用方也会一并等待。恢复会丢失从未提交的修改。要求合并队列的基准分支无法从面板合并。组合包挂载两个互不影响的 worktree 服务；模型的工具看不到面板的服务。本地或变更请求的 diff 超过 `maxDiffBytes`，或被托管平台拒绝时，不显示任何文件。展开变更请求中未变更的行时，每个文件只从托管平台读取一次。
diff --git a/apps/web/tests/additional-locales.e2e.ts b/apps/web/tests/additional-locales.e2e.ts
index 007aab3e14..2cd04ce30a 100644
--- a/apps/web/tests/additional-locales.e2e.ts
+++ b/apps/web/tests/additional-locales.e2e.ts
@@ -59,3 +59,37 @@ it.each(languages)('selects %s from the browser, localizes metadata and persists
   expect(tripwire.warnings).toEqual([])
   expect(tripwire.pageErrors).toEqual([])
 })
+
+const forgePreviews = [
+  ['de', 'de-DE', 'Plugins', 'Eine Unterhaltung mit verknüpftem GitHub-Pull-Request, Prüfungen, Reviews, Codeunterschieden und einem separaten Arbeitsbaum'],
+  ['es', 'es-MX', 'Complementos', 'Una conversación vinculada a un pull request de GitHub, con comprobaciones, revisiones, diferencias de código y un árbol de trabajo aislado'],
+  ['fr', 'fr-CA', 'Plugins', 'Une conversation liée à une pull request GitHub, avec vérifications, revues, différences de code et un arbre de travail isolé'],
+  ['ja', 'ja-JP', 'プラグイン', 'GitHub のプルリクエストに関連付けられた会話、チェックとレビューの状況、コードの差分、独立したワークツリー'],
+  ['pt', 'pt-BR', 'Plug-ins', 'Uma conversa vinculada a um pull request do GitHub, com verificações, revisões, diferenças de código e uma árvore de trabalho isolada'],
+  ['ru', 'ru-RU', 'Плагины', 'Беседа, связанная с pull request GitHub: проверки, рецензии, различия в коде и отдельное рабочее дерево'],
+] as const
+
+it.each(forgePreviews)('reads the Forge preview in %s before activation', async (id, tag, plugins, alt) => {
+  const resources: { scaffold?: WebScaffold; browser?: Browser } = {}
+  onTestFinished(async () => {
+    try { await resources.browser?.close() } finally { await resources.scaffold?.close() }
+  })
+  const scaffold = await launchWebScaffold()
+  resources.scaffold = scaffold
+  const browser = await chromium.launch()
+  resources.browser = browser
+  const page = await browser.newPage({ locale: tag, viewport: { width: 1440, height: 960 } })
+  const tripwire = watchConsole(page)
+  onTestFailed(() => saveFailureShot(page, `forge-preview-${id}`))
+  await page.goto(scaffold.authenticatedUrl)
+  await expect.poll(() => page.locator('html').getAttribute('lang')).toBe(id)
+  await page.getByRole('button', { name: plugins, exact: true }).click()
+  const card = page.locator('[data-plugin-package="@deepseek-ai/dsh-experimental-forge-bundle"]')
+  expect(await card.getByRole('switch').getAttribute('aria-checked')).toBe('false')
+  await card.getByRole('button').click()
+  const image = page.locator('[data-detail-document]').getByRole('img', { name: alt, exact: true })
+  await image.waitFor()
+  await image.evaluate(async (node: HTMLImageElement) => { await node.decode() })
+  expect(await image.evaluate((node: HTMLImageElement) => [node.naturalWidth, node.naturalHeight])).toEqual([640, 300])
+  expect(tripwire.pageErrors).toEqual([])
+})
diff --git a/apps/web/tests/expected/plugin-config/official.expected.md b/apps/web/tests/expected/plugin-config/official.expected.md
index 1060826d8a..70fbddd1f1 100644
--- a/apps/web/tests/expected/plugin-config/official.expected.md
+++ b/apps/web/tests/expected/plugin-config/official.expected.md
@@ -44,7 +44,7 @@
     - switch "启用 自动授权审查"
   - listitem:
     - button "查看 变更请求与工作树": 变更请求与工作树
-    - text: 实验性 跟踪每个会话的变更请求及其检查与评审，新会话也可以在 Git 工作树中开始；GitHub 通过 gh 命令行访问。
+    - text: 实验性 在会话侧栏集中跟踪关联的 GitHub PR：查看检查状态、评审意见与代码差异，并把修改建议交给智能体继续处理。也可查看本地改动，用独立工作树隔离任务。GitHub 功能需要本机安装 gh 并登录。
     - status
     - switch "启用 变更请求与工作树"
 - heading "已安装插件" [level=3]
diff --git a/apps/web/tests/expected/plugin-manager/forge-preview.expected.md b/apps/web/tests/expected/plugin-manager/forge-preview.expected.md
new file mode 100644
index 0000000000..afcab828fc
--- /dev/null
+++ b/apps/web/tests/expected/plugin-manager/forge-preview.expected.md
@@ -0,0 +1,54 @@
+- button "返回插件": 插件
+- status
+- switch "启用 变更请求与工作树"
+- heading "变更请求与工作树" [level=3]
+- text: v{{version}} 实验性
+- paragraph:
+  - code: "@deepseek-ai/dsh-experimental-forge-bundle"
+- paragraph: 在会话侧栏集中跟踪关联的 GitHub PR：查看检查状态、评审意见与代码差异，并把修改建议交给智能体继续处理。也可查看本地改动，用独立工作树隔离任务。GitHub 功能需要本机安装 gh 并登录。
+- region "详细介绍":
+  - paragraph:
+    - img "会话关联 GitHub PR，跟踪检查、评审与代码差异，并用工作树隔离任务改动"
+- heading "包含的组件" [level=4]
+- text: 共 7 个 · 7 已停用
+- list:
+  - listitem:
+    - text: 工作树服务 创建命名的 Git 工作树，并切换当前会话的工作目录。
+    - code: worktree
+    - code: "@deepseek-ai/dsh-experimental-worktree"
+    - text: 已关闭
+  - listitem:
+    - text: Git 工作树 要求在新分支上工作时，智能体会创建单独的 Git 工作树并在其中继续，你当前的工作树保持原样。
+    - code: tool-worktree
+    - code: "@deepseek-ai/dsh-experimental-tool-worktree"
+    - text: 已关闭
+  - listitem:
+    - text: 变更请求 通过一个与提供方无关的服务注册代码托管提供方，并轮询变更请求状态。
+    - code: forge
+    - code: "@deepseek-ai/dsh-experimental-forge"
+    - text: 已关闭
+  - listitem:
+    - text: GitHub 变更请求 通过宿主上的 GitHub CLI 为 forge 注册表读取 GitHub 变更请求。
+    - code: forge-github
+    - code: "@deepseek-ai/dsh-experimental-forge-github"
+    - text: 已关闭
+  - listitem:
+    - text: 会话变更请求 把变更请求绑定到创建、推送或跟踪它们的会话，并监听其状态。
+    - code: forge-session
+    - code: "@deepseek-ai/dsh-experimental-forge-session"
+    - text: 已关闭
+  - listitem:
+    - text: 工作树服务 创建命名的 Git 工作树，并切换当前会话的工作目录。
+    - code: forge-worktree
+    - code: "@deepseek-ai/dsh-experimental-worktree"
+    - text: 已关闭
+  - listitem:
+    - text: 变更请求面板 在侧栏标签页中显示会话的变更请求，并让新会话可以在工作树中开始。
+    - code: forge-panel
+    - code: "@deepseek-ai/dsh-experimental-client-ui-forge"
+    - text: 已关闭
+- heading "来源信息" [level=4]
+- term: 代码来源
+- definition: 内置
+- term: 当前版本
+- definition: {{version}}
diff --git a/apps/web/tests/expected/plugin-manager/live-enabled.expected.md b/apps/web/tests/expected/plugin-manager/live-enabled.expected.md
index 561ee7ae23..5f30f09e75 100644
--- a/apps/web/tests/expected/plugin-manager/live-enabled.expected.md
+++ b/apps/web/tests/expected/plugin-manager/live-enabled.expected.md
@@ -44,7 +44,7 @@
     - switch "启用 自动授权审查"
   - listitem:
     - button "查看 变更请求与工作树": 变更请求与工作树
-    - text: 实验性 跟踪每个会话的变更请求及其检查与评审，新会话也可以在 Git 工作树中开始；GitHub 通过 gh 命令行访问。
+    - text: 实验性 在会话侧栏集中跟踪关联的 GitHub PR：查看检查状态、评审意见与代码差异，并把修改建议交给智能体继续处理。也可查看本地改动，用独立工作树隔离任务。GitHub 功能需要本机安装 gh 并登录。
     - status
     - switch "启用 变更请求与工作树"
 - heading "已安装插件" [level=3]
diff --git a/apps/web/tests/expected/plugin-manager/manager.expected.md b/apps/web/tests/expected/plugin-manager/manager.expected.md
index 88dd772e51..69c0998762 100644
--- a/apps/web/tests/expected/plugin-manager/manager.expected.md
+++ b/apps/web/tests/expected/plugin-manager/manager.expected.md
@@ -44,7 +44,7 @@
     - switch "启用 自动授权审查"
   - listitem:
     - button "查看 变更请求与工作树": 变更请求与工作树
-    - text: 实验性 跟踪每个会话的变更请求及其检查与评审，新会话也可以在 Git 工作树中开始；GitHub 通过 gh 命令行访问。
+    - text: 实验性 在会话侧栏集中跟踪关联的 GitHub PR：查看检查状态、评审意见与代码差异，并把修改建议交给智能体继续处理。也可查看本地改动，用独立工作树隔离任务。GitHub 功能需要本机安装 gh 并登录。
     - status
     - switch "启用 变更请求与工作树"
 - heading "已安装插件" [level=3]
diff --git a/apps/web/tests/forge-panel.e2e.ts b/apps/web/tests/forge-panel.e2e.ts
index 76da6c115e..2c5487b1d1 100644
--- a/apps/web/tests/forge-panel.e2e.ts
+++ b/apps/web/tests/forge-panel.e2e.ts
@@ -447,6 +447,8 @@ it.skipIf(MODE === 'record')('automatically shows a numbered PR when gh JSON omi
   const { settled } = await sendPrompt(page, scaffold)
   const sessionId = await settled
   const events = await readPersistedEvents(scaffold, sessionId)
+  const request = events.find(event => event.type === 'request/header')
+  expect(request?.data.header.tools?.filter(tool => tool.name === 'create_worktree')).toHaveLength(1)
   const toolOutput = events.flatMap(event => event.type === 'tool/result'
     ? event.data.message.content.flatMap(block => block.type === 'text' ? [block.text] : []) : []).join('\n')
   expect(toolOutput).toContain('Add the pull request panel')
diff --git a/apps/web/tests/plugin-config.e2e.ts b/apps/web/tests/plugin-config.e2e.ts
index 8bba474e11..7152ad1ef8 100644
--- a/apps/web/tests/plugin-config.e2e.ts
+++ b/apps/web/tests/plugin-config.e2e.ts
@@ -9,6 +9,7 @@ import { readFile } from 'node:fs/promises'
 import { fileURLToPath } from 'node:url'
 import type { Browser, Locator, Page } from 'playwright'
 import { chromium } from 'playwright'
+import { HIDDEN_BUNDLES } from '@deepseek-ai/dsh-official-bundles'
 import { afterAll, beforeAll, describe, expect, it, onTestFailed } from 'vitest'
 import { join } from 'node:path'
 import {
@@ -115,17 +116,14 @@ describe('web e2e: plugin configuration pages', () => {
     // The More list omits the shipped bundles whose own rows do not run (the visibility rule lives in
     // ui-plugin-manager), so it holds fewer cards than the installed optional-bundle list.
     const bundles = await scaffold.ctx.pluginManager.listBundles()
-    const hiddenBundles = new Set([
-      '@deepseek-ai/dsh-experimental-terminal-bundle',
-      '@deepseek-ai/dsh-experimental-liveshare',
-    ])
     expect(await panel.locator('[data-plugin-group="more"] [data-plugin-package]').count())
-      .toBe(bundles.filter(bundle => !hiddenBundles.has(bundle.name)
+      .toBe(bundles.filter(bundle => !HIDDEN_BUNDLES.has(bundle.name)
+        && bundle.name !== '@deepseek-ai/dsh-experimental-liveshare'
         && bundle.official && (bundle.listedByDefault !== false || bundle.enabled || bundle.installed)).length)
     expect(await basic.count()).toBe(0)
     expect(await extensions.count()).toBe(0)
     expect(await panel.locator('[data-plugin-group="bundles"]').count()).toBe(0)
-    await panel.getByRole('button', { name: '查看 Git 工作树', exact: true }).click()
+    await panel.getByRole('button', { name: '查看 开发者工具', exact: true }).click()
     await panel.locator('[data-plugin-detail]').waitFor()
     await panel.getByRole('button', { name: '返回 实验性插件', exact: true }).click()
     await panel.getByRole('heading', { name: '实验性插件', exact: true, level: 1 }).waitFor()
diff --git a/apps/web/tests/plugin-manager.e2e.ts b/apps/web/tests/plugin-manager.e2e.ts
index 93db3c1179..527a1bcc73 100644
--- a/apps/web/tests/plugin-manager.e2e.ts
+++ b/apps/web/tests/plugin-manager.e2e.ts
@@ -10,6 +10,7 @@ import { chromium } from 'playwright'
 import { FiberState } from '@deepseek-ai/cordis'
 import { readProfileManifest } from '@deepseek-ai/dsh-app-boot'
 import { createUserMessage } from '@deepseek-ai/dsh-llm'
+import { HIDDEN_BUNDLES } from '@deepseek-ai/dsh-official-bundles'
 import { afterAll, beforeAll, describe, expect, it, onTestFailed, onTestFinished, vi } from 'vitest'
 import { join } from 'node:path'
 import {
@@ -853,7 +854,7 @@ describe('web e2e: plugin manager', () => {
     // the eligible installed optional-bundle list.
     expect(await panel.locator('[data-plugin-group="more"] [data-plugin-package="@deepseek-ai/dsh-experimental-liveshare"]').count()).toBe(0)
     expect(await panel.locator('[data-plugin-group="more"] [data-plugin-package]').count())
-      .toBe(bundles.filter(bundle => bundle.name !== '@deepseek-ai/dsh-experimental-terminal-bundle'
+      .toBe(bundles.filter(bundle => !HIDDEN_BUNDLES.has(bundle.name)
         && bundle.name !== '@deepseek-ai/dsh-experimental-liveshare'
         && bundle.official && (bundle.listedByDefault !== false || bundle.enabled || bundle.installed)).length)
     expect(bundles.find(bundle => bundle.name === '@deepseek-ai/dsh-cua-bundle'))
@@ -876,7 +877,6 @@ describe('web e2e: plugin manager', () => {
       ['@deepseek-ai/dsh-experimental-forge-bundle', 1],
       ['@deepseek-ai/dsh-personalized-recommendations', 1],
       ['@deepseek-ai/dsh-experimental-inspector-profile', 1],
-      ['@deepseek-ai/dsh-experimental-tool-worktree', 1],
       ['@deepseek-ai/dsh-experimental-cot-translation-bundle', 1],
       ['@deepseek-ai/dsh-experimental-session-titles-bundle', 1],
       ['@deepseek-ai/dsh-experimental-badge-skill-bundle', 1],
@@ -1063,6 +1063,51 @@ describe('web e2e: plugin manager', () => {
     expect(tripwire.pageErrors).toEqual([])
   })
 
+  it('introduces code review and worktrees with localized artwork before activation', async () => {
+    onTestFailed(() => saveFailureShot(page, 'web-e2e-forge-preview'))
+    const panel = await openPluginsPanel()
+    await panel.getByRole('button', { name: '查看 变更请求与工作树', exact: true }).click()
+    const detail = panel.locator('[data-plugin-detail]')
+    expect(await detail.getByRole('switch').getAttribute('aria-checked')).toBe('false')
+    const sources: (string | null)[] = []
+    let english = false
+    try {
+      for (const [language, alt] of [
+        ['zh', '会话关联 GitHub PR，跟踪检查、评审与代码差异，并用工作树隔离任务改动'],
+        ['en', 'A conversation linked to a GitHub pull request, with checks, reviews, code diffs, and an isolated worktree'],
+      ] as const) {
+        if (language === 'en') {
+          await setLanguage(language)
+          english = true
+        }
+        const document = detail.locator('[data-detail-document]')
+        const image = document.getByRole('img', { name: alt, exact: true })
+        await image.waitFor()
+        await image.evaluate(async (node: HTMLImageElement) => { await node.decode() })
+        expect(await image.evaluate((node: HTMLImageElement) => [node.naturalWidth, node.naturalHeight])).toEqual([640, 300])
+        sources.push(await image.getAttribute('src'))
+        for (const width of [1680, 390]) {
+          await page.setViewportSize({ width, height: 1000 })
+          expect(await image.evaluate((node: HTMLImageElement) => {
+            const bounds = node.getBoundingClientRect()
+            return bounds.width > 0 && bounds.left >= 0 && bounds.right <= window.innerWidth
+              && window.document.documentElement.scrollWidth <= window.innerWidth
+          })).toBe(true)
+        }
+        await page.setViewportSize({ width: 1680, height: 1000 })
+      }
+      expect(sources[0]).not.toBe(sources[1])
+    } finally {
+      await page.setViewportSize({ width: 1680, height: 1000 })
+      if (english) await setLanguage('zh')
+    }
+    await compareOrRefreshGolden(join(SNAPSHOT_DIR, 'forge-preview.expected.md'),
+      await captureStableAria(page, '[data-plugin-panel]', scaffold.workspaceCwd, {
+        replacements: [[badgeVersion, '{{version}}']],
+      }), MODE)
+    expect(tripwire.pageErrors).toEqual([])
+  })
+
   it('localizes independent exports and falls back per field without activating the plugins', async () => {
     onTestFinished(closeSettings)
     onTestFailed(() => saveFailureShot(page, 'web-e2e-plugin-manager-exports'))
@@ -1531,7 +1576,7 @@ describe('web e2e: plugin manager', () => {
     await assertFixtureInventory(SNAPSHOT_DIR, [
       'manager.expected.md', 'live-enabled.expected.md', 'missing-bundle.expected.md', 'exports.expected.md', 'exports-en.expected.md', 'icons.expected.md', 'loading.expected.md', 'refresh.expected.md',
       'ime-enter.expected.md', 'header-responsive.expected.md', 'header-natural-motion.expected.md', 'preview.expected.md',
-      'touch-tooltips.expected.md',
+      'touch-tooltips.expected.md', 'forge-preview.expected.md',
     ])
   })
 })
diff --git a/apps/web/tests/worktree-opt-in.e2e.ts b/apps/web/tests/worktree-opt-in.e2e.ts
index 37b94a16ec..341d72c68f 100644
--- a/apps/web/tests/worktree-opt-in.e2e.ts
+++ b/apps/web/tests/worktree-opt-in.e2e.ts
@@ -1,4 +1,4 @@
-/** Git Worktrees opt-in through the shipped plugin manager, profile, and Loader. */
+/** Unified review and worktree opt-in through the shipped plugin manager, profile, and Loader. */
 
 import { execFile } from 'node:child_process'
 import { readFile, writeFile } from 'node:fs/promises'
@@ -6,16 +6,19 @@ import { join } from 'node:path'
 import { fileURLToPath } from 'node:url'
 import { promisify } from 'node:util'
 import { FiberState } from '@deepseek-ai/cordis'
+import { ToolCallId } from '@deepseek-ai/dsh-llm'
 import type {} from '@deepseek-ai/dsh-experimental-worktree'
+import type {} from '@deepseek-ai/dsh-experimental-client-ui-forge'
 import { chromium } from 'playwright'
 import { expect, it, onTestFailed, onTestFinished } from 'vitest'
 import { launchWebScaffold, watchConsole } from './scaffold.ts'
 import { connectFreshWorkspace, newEnglishPage, PLUGIN_TOGGLE_SETTLE_MS, saveFailureShot } from './support.ts'
 
-const BUNDLE = '@deepseek-ai/dsh-experimental-tool-worktree'
+const BUNDLE = '@deepseek-ai/dsh-experimental-forge-bundle'
+const STANDALONE = '@deepseek-ai/dsh-experimental-tool-worktree'
 const exec = promisify(execFile)
 
-it('persists the Git Worktrees switch and removes its capability while retaining checkouts', async () => {
+it('persists the unified review and worktree switch and retains checkouts after disabling', async () => {
   const scaffold = await launchWebScaffold({
     extraOverlayPath: fileURLToPath(new URL('./pin-browse-picker.overlay.yml', import.meta.url)),
   })
@@ -70,13 +73,15 @@ it('persists the Git Worktrees switch and removes its capability while retaining
   }
   let panel = await openPlugins()
   let card = panel.locator(`[data-plugin-group="more"] [data-plugin-package="${BUNDLE}"]`)
-  await card.getByRole('button', { name: 'View Git worktrees', exact: true }).waitFor()
+  await card.getByRole('button', { name: 'View Change requests & worktrees', exact: true }).waitFor()
+  expect(await panel.locator(`[data-plugin-package="${STANDALONE}"]`).count()).toBe(0)
   expect(await card.getByText('Experimental', { exact: true }).count()).toBe(1)
-  let toggle = card.getByRole('switch', { name: 'Enable Git worktrees', exact: true })
+  let toggle = card.getByRole('switch', { name: 'Enable Change requests & worktrees', exact: true })
   expect(await toggle.getAttribute('aria-checked')).toBe('false')
   expect(await selectedBundles()).not.toContain(BUNDLE)
   expect(rows()).toEqual([])
   expect(scaffold.ctx.get('worktrees')).toBeUndefined()
+  expect(scaffold.ctx.get('forgePanel')).toBeUndefined()
   expect(tools()).toContain('working_directory')
   expect(tools()).not.toContain('create_worktree')
 
@@ -85,14 +90,21 @@ it('persists the Git Worktrees switch and removes its capability while retaining
   await expect.poll(() => toggle.getAttribute('aria-checked'), { timeout: PLUGIN_TOGGLE_SETTLE_MS }).toBe('true')
   expect(await selectedBundles()).toContain(BUNDLE)
   expect(tools()).toContain('create_worktree')
-  const created = await scaffold.ctx.worktrees.create(agent, { name: 'gui-opt-in' })
+  expect(scaffold.ctx.get('forgePanel')).toBeDefined()
+  const created = { path: join(repository, '.agents/worktrees/gui-opt-in'), baseCommit: (await git('rev-parse', 'HEAD')).stdout.trim() }
+  const result = await scaffold.ctx.tools.execute({
+    agent, signal: new AbortController().signal,
+    calls: [{ type: 'tool-call', id: ToolCallId('gui-opt-in'), name: 'create_worktree', arguments: JSON.stringify({ name: 'gui-opt-in' }) }],
+  })
+  expect(result.results[0]?.result.isError).not.toBe(true)
+  expect(result.results[0]?.result.value).toEqual({ ...created, branch: 'gui-opt-in', repositoryRoot: repository })
   expect(await readFile(join(created.path, 'retained.txt'), 'utf8')).toBe('retained checkout\n')
   expect(scaffold.ctx.workingDirectory.get(agent.session)).toBe(created.path)
 
   await page.reload({ waitUntil: 'load' })
   panel = await openPlugins()
   card = panel.locator(`[data-plugin-group="more"] [data-plugin-package="${BUNDLE}"]`)
-  toggle = card.getByRole('switch', { name: 'Enable Git worktrees', exact: true })
+  toggle = card.getByRole('switch', { name: 'Enable Change requests & worktrees', exact: true })
   await expect.poll(() => toggle.getAttribute('aria-checked')).toBe('true')
   expect(tools()).toContain('create_worktree')
   await toggle.click()
@@ -100,6 +112,7 @@ it('persists the Git Worktrees switch and removes its capability while retaining
   await expect.poll(() => toggle.getAttribute('aria-checked'), { timeout: PLUGIN_TOGGLE_SETTLE_MS }).toBe('false')
   expect(await selectedBundles()).not.toContain(BUNDLE)
   expect(scaffold.ctx.get('worktrees')).toBeUndefined()
+  expect(scaffold.ctx.get('forgePanel')).toBeUndefined()
   expect(tools()).not.toContain('create_worktree')
   expect(tools()).toContain('working_directory')
   expect(await readFile(join(created.path, 'retained.txt'), 'utf8')).toBe('retained checkout\n')
@@ -108,7 +121,7 @@ it('persists the Git Worktrees switch and removes its capability while retaining
 
   await page.reload({ waitUntil: 'load' })
   panel = await openPlugins()
-  await expect.poll(() => panel.getByRole('switch', { name: 'Enable Git worktrees', exact: true })
+  await expect.poll(() => panel.getByRole('switch', { name: 'Enable Change requests & worktrees', exact: true })
     .getAttribute('aria-checked')).toBe('false')
   expect(tools()).not.toContain('create_worktree')
   expect(await selectedBundles()).not.toContain(BUNDLE)
diff --git a/docs/subsystems/forge.i18n.yaml b/docs/subsystems/forge.i18n.yaml
index 92bc2298cd..379e181766 100644
--- a/docs/subsystems/forge.i18n.yaml
+++ b/docs/subsystems/forge.i18n.yaml
@@ -3,8 +3,8 @@
 # After editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write docs/subsystems/forge.md
 /forges:
-  en: 1b51f9d385dafe76
-  zh: 4bb73627aa69d652
+  en: 3ee521b77b4601e2
+  zh: 4170c33e49248f8f
 /forges/providers-and-change-requests:
   en: 4ec7d1892b4067db
   zh: 6bb70d21ae3d7a89
diff --git a/docs/subsystems/forge.md b/docs/subsystems/forge.md
index 2a3cdf2087..f56d88b848 100644
--- a/docs/subsystems/forge.md
+++ b/docs/subsystems/forge.md
@@ -2,7 +2,7 @@
 
 English | [中文](forge.zh.md)
 
-The experimental forge capability seam reads change requests, meaning pull requests and merge requests, from code hosts. [`dsh-experimental-forge`](../../packages/experimental/forge/README.md) is the Service Definition and provides `ctx.forge`; [`dsh-experimental-forge-github`](../../packages/experimental/forge-github/README.md) is the Service Provider for GitHub hosts; [`dsh-experimental-forge-session`](../../packages/experimental/forge-session/README.md) is the Consumer that binds change requests to Sessions and provides `ctx.forgeSession`; [`dsh-experimental-client-ui-forge`](../../packages/experimental/client-ui-forge/README.md) is the GUI Consumer that provides `ctx.forgePanel`. The default-disabled [forge bundle](../../packages/experimental/forge-bundle/README.md) composes all four, with an isolated [worktree service](../../packages/experimental/worktree/README.md) for the panel, from the Plugins page; otherwise they load only through explicit composition.
+The experimental forge capability seam reads change requests, meaning pull requests and merge requests, from code hosts. [`dsh-experimental-forge`](../../packages/experimental/forge/README.md) is the Service Definition and provides `ctx.forge`; [`dsh-experimental-forge-github`](../../packages/experimental/forge-github/README.md) is the Service Provider for GitHub hosts; [`dsh-experimental-forge-session`](../../packages/experimental/forge-session/README.md) is the Consumer that binds change requests to Sessions and provides `ctx.forgeSession`; [`dsh-experimental-client-ui-forge`](../../packages/experimental/client-ui-forge/README.md) is the GUI Consumer that provides `ctx.forgePanel`. The default-disabled [forge bundle](../../packages/experimental/forge-bundle/README.md) composes all four, with the [worktree model tool](../../packages/experimental/tool-worktree/README.md) and an isolated [worktree service](../../packages/experimental/worktree/README.md) for the panel, from the Plugins page; otherwise they load only through explicit composition.
 
 ## Providers and change requests
 
diff --git a/docs/subsystems/forge.zh.md b/docs/subsystems/forge.zh.md
index 5c78d7bb02..bbcf8ace8f 100644
--- a/docs/subsystems/forge.zh.md
+++ b/docs/subsystems/forge.zh.md
@@ -2,7 +2,7 @@
 
 [English](forge.md) | 中文
 
-实验性的 forge 能力 seam 从代码托管平台读取变更请求（change request，即 pull request 与 merge request）。[`dsh-experimental-forge`](../../packages/experimental/forge/README.zh.md) 是 Service Definition，提供 `ctx.forge`；[`dsh-experimental-forge-github`](../../packages/experimental/forge-github/README.zh.md) 是服务 GitHub 主机的 Service Provider；[`dsh-experimental-forge-session`](../../packages/experimental/forge-session/README.zh.md) 是把变更请求绑定到 Session 的 Consumer，提供 `ctx.forgeSession`；[`dsh-experimental-client-ui-forge`](../../packages/experimental/client-ui-forge/README.zh.md) 是提供 `ctx.forgePanel` 的 GUI Consumer。默认禁用的 [forge Bundle](../../packages/experimental/forge-bundle/README.zh.md) 可从插件页面组合这四个包，并为面板附带一个隔离的 [worktree 服务](../../packages/experimental/worktree/README.zh.md)；除此之外，它们只能通过显式组合加载。
+实验性的 forge 能力 seam 从代码托管平台读取变更请求（change request，即 pull request 与 merge request）。[`dsh-experimental-forge`](../../packages/experimental/forge/README.zh.md) 是 Service Definition，提供 `ctx.forge`；[`dsh-experimental-forge-github`](../../packages/experimental/forge-github/README.zh.md) 是服务 GitHub 主机的 Service Provider；[`dsh-experimental-forge-session`](../../packages/experimental/forge-session/README.zh.md) 是把变更请求绑定到 Session 的 Consumer，提供 `ctx.forgeSession`；[`dsh-experimental-client-ui-forge`](../../packages/experimental/client-ui-forge/README.zh.md) 是提供 `ctx.forgePanel` 的 GUI Consumer。默认禁用的 [forge Bundle](../../packages/experimental/forge-bundle/README.zh.md) 可从插件页面组合这四个包，同时加载[工作树模型工具](../../packages/experimental/tool-worktree/README.zh.md)，并为面板附带一个隔离的 [worktree 服务](../../packages/experimental/worktree/README.zh.md)；除此之外，它们只能通过显式组合加载。
 
 ## 提供方与变更请求
 
diff --git a/docs/subsystems/worktrees.i18n.yaml b/docs/subsystems/worktrees.i18n.yaml
index f771dd3cf2..23dde9244e 100644
--- a/docs/subsystems/worktrees.i18n.yaml
+++ b/docs/subsystems/worktrees.i18n.yaml
@@ -3,8 +3,8 @@
 # After editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write docs/subsystems/worktrees.md
 /git-worktrees:
-  en: 21ec4a3b825d7e81
-  zh: c841c5ca4b4e8959
+  en: 3a3d69d2b12a78f9
+  zh: a7a7d12487968bbc
 /git-worktrees/creation-and-retention:
   en: 53f643c5d30e00b2
   zh: ba9e52efc62c7656
diff --git a/docs/subsystems/worktrees.md b/docs/subsystems/worktrees.md
index 8d4fec853a..aefa3e4a3c 100644
--- a/docs/subsystems/worktrees.md
+++ b/docs/subsystems/worktrees.md
@@ -2,7 +2,7 @@
 
 English | [中文](worktrees.zh.md)
 
-The experimental [`dsh-experimental-worktree`](../../packages/experimental/worktree/README.md) service provides `ctx.worktrees`. Its [`create_worktree`](../../packages/experimental/tool-worktree/README.md) consumer creates a new Git branch and checkout, then selects it through the [working-directory service](working-directory.md). The [Git Worktrees optional bundle](../../packages/experimental/tool-worktree/README.md#use-this-package) loads both packages through the GUI plugin manager. It ships switched off; explicit compositions can also mount the two packages.
+The experimental [`dsh-experimental-worktree`](../../packages/experimental/worktree/README.md) service provides `ctx.worktrees`. Its [`create_worktree`](../../packages/experimental/tool-worktree/README.md) consumer creates a new Git branch and checkout, then selects it through the [working-directory service](working-directory.md). The [Change requests & worktrees bundle](../../packages/experimental/forge-bundle/README.md#use-this-package) loads both packages through the GUI plugin manager and ships switched off. Other profiles can select the [standalone worktree bundle](../../packages/experimental/tool-worktree/README.md#use-this-package) or mount the two packages explicitly.
 
 ## Creation and retention
 
diff --git a/docs/subsystems/worktrees.zh.md b/docs/subsystems/worktrees.zh.md
index e6a7c71ecc..0f7c7b1b02 100644
--- a/docs/subsystems/worktrees.zh.md
+++ b/docs/subsystems/worktrees.zh.md
@@ -2,7 +2,7 @@
 
 [English](worktrees.md) | 中文
 
-实验性的 [`dsh-experimental-worktree`](../../packages/experimental/worktree/README.zh.md) 服务提供 `ctx.worktrees`。其消费方 [`create_worktree`](../../packages/experimental/tool-worktree/README.zh.md) 创建新的 Git 分支与检出目录，再通过[工作目录服务](working-directory.zh.md)选中它。[Git 工作树可选 bundle](../../packages/experimental/tool-worktree/README.zh.md#use-this-package)通过 GUI 插件管理器一起加载这两个包。它随安装提供，但默认关闭；显式组合也可以挂载这两个包。
+实验性的 [`dsh-experimental-worktree`](../../packages/experimental/worktree/README.zh.md) 服务提供 `ctx.worktrees`。其消费方 [`create_worktree`](../../packages/experimental/tool-worktree/README.zh.md) 创建新的 Git 分支与检出目录，再通过[工作目录服务](working-directory.zh.md)选中它。[变更请求与工作树组合包](../../packages/experimental/forge-bundle/README.zh.md#use-this-package)通过 GUI 插件管理器一起加载这两个包，随安装提供但默认关闭。其他 profile 可以选择[独立工作树组合包](../../packages/experimental/tool-worktree/README.zh.md#use-this-package)，或显式挂载这两个包。
 
 ## 创建与保留
 
diff --git a/docs/tool-catalog.i18n.yaml b/docs/tool-catalog.i18n.yaml
index 68f3651eaf..22deacea2a 100644
--- a/docs/tool-catalog.i18n.yaml
+++ b/docs/tool-catalog.i18n.yaml
@@ -9,8 +9,8 @@
   en: 6cc2cd9ced70bb09
   zh: 1c0e6cb4ba2ed637
 /tool-schema-catalog/tool-package-map:
-  en: 4aa572ac1710a97a
-  zh: e11431504a2a7398
+  en: f790063d536da1bf
+  zh: 6933b54fc70cd470
 /tool-schema-catalog/deepseek-ai-dsh-plugin-manager:
   en: e0143916bb634762
   zh: e0143916bb634762
@@ -321,8 +321,8 @@
   en: d5f5679abe86e316
   zh: d5f5679abe86e316
 /tool-schema-catalog/deepseek-ai-dsh-experimental-tool-worktree/create-worktree:
-  en: d8fe3c566ba2147c
-  zh: baf372cb9242670c
+  en: 41950f76db71e7f7
+  zh: 654d2e5505ff3d3c
 /tool-schema-catalog/deepseek-ai-dsh-tool-workflow:
   en: bb38a9d29f46563c
   zh: bb38a9d29f46563c
diff --git a/docs/tool-catalog.md b/docs/tool-catalog.md
index 1d7900cf6b..9da0029e4f 100644
--- a/docs/tool-catalog.md
+++ b/docs/tool-catalog.md
@@ -46,7 +46,7 @@ This table connects model-visible tool names to the plugin package and service s
 | `@deepseek-ai/dsh-experimental-tool-agent-team` | `interrupt_agent`, `list_agents`, `send_message`, `spawn_teammate`, `team_task_create`, `team_task_get`, `team_task_list`, `team_task_update`, `wait_agent` | `ctx.tools`, `ctx.systemPrompt`, `ctx.agentTeams`, `an exact live Team member Agent` | `tool/call`, `team/member`, `team/task`, `agent/inbox/spliced`, `user/message on inbox claim`, `tool/result` | - | All nine tools are scoped to implicit Team Leads and durable teammates. The shipped dsh-base bundle keeps the package disabled; the documented Agent Teams profile patch enables it while disabling the legacy continuable-child control names. |
 | `@deepseek-ai/dsh-tool-todo` | `todo_write` | `ctx.tools`, `owning Agent session` | `tool/call`, `todo/write`, `tool/result` | - | todo_write is session-owned state; UIs render the latest todo/write event as a checklist. `allowParallelInProgress` is required with no default, so the catalog states its choice: `true`, whose description invites several `in_progress` items. A deployment choosing `false` receives the same tool with a description asking for exactly one active task. |
 | `@deepseek-ai/dsh-tool-working-directory` | `working_directory` | `ctx.tools`, `ctx.workingDirectory` | `tool/call`, `working-directory/change`, `user context for directory changes`, `tool/result` | - | Reads or changes the calling Session directory. Existing shells and processes retain their own directories; origin metadata and permission roots stay fixed. |
-| `@deepseek-ai/dsh-experimental-tool-worktree` | `create_worktree` | `ctx.tools`, `ctx.worktrees`, `a calling Agent` | `tool/call`, `Git branch and checkout`, `working-directory/change`, `tool/result` | - | Explicit experimental composition only. Creates a new branch and checkout from a pinned local commit under existing write permissions, then changes the Session directory. Leaving retains the branch and checkout. |
+| `@deepseek-ai/dsh-experimental-tool-worktree` | `create_worktree` | `ctx.tools`, `ctx.worktrees`, `a calling Agent` | `tool/call`, `Git branch and checkout`, `working-directory/change`, `tool/result` | - | Enabled through the Change requests & worktrees bundle on Web and Desktop; other profiles can select the standalone bundle. Creates a new branch and checkout from a pinned local commit under existing write permissions, then changes the Session directory. Leaving retains the branch and checkout. |
 | `@deepseek-ai/dsh-tool-workflow` | `workflow` | `ctx.tools`, `ctx.workflowEngine`, `ctx.systemPrompt`, `a calling Agent (exec.agent parents the script children)` | `tool/call`, `tool/result` | - | - |
 | `@deepseek-ai/dsh-tool-workspace-dependencies` | `load_workspace_dependencies` | `ctx.tools` | `tool/call`, `tool/result` | - | - |
 | `@deepseek-ai/dsh-tool-web` | `web_fetch`, `web_search` | `ctx.tools`, `ctx.web`, `ctx.systemPrompt` | `tool/call`, `tool/result` | - | web_search and web_fetch keep provider selection behind ctx.web so model-visible schemas stay stable across backend swaps. |
@@ -2629,7 +2629,7 @@ Create a new Git branch and worktree from a local commit, branch, or tag, then c
 
 Source: [`packages/experimental/tool-worktree/src/index.ts`](../packages/experimental/tool-worktree/src/index.ts)
 
-Explicit experimental composition only. Creates a new branch and checkout from a pinned local commit under existing write permissions, then changes the Session directory. Leaving retains the branch and checkout.
+Enabled through the Change requests & worktrees bundle on Web and Desktop; other profiles can select the standalone bundle. Creates a new branch and checkout from a pinned local commit under existing write permissions, then changes the Session directory. Leaving retains the branch and checkout.
 
 <a id="deepseek-aidsh-tool-workflow"></a>
 
diff --git a/docs/tool-catalog.zh.md b/docs/tool-catalog.zh.md
index cc5c16d779..19e6f8beb5 100644
--- a/docs/tool-catalog.zh.md
+++ b/docs/tool-catalog.zh.md
@@ -50,7 +50,7 @@
 | `@deepseek-ai/dsh-experimental-tool-agent-team` | `interrupt_agent`、`list_agents`、`send_message`、`spawn_teammate`、`team_task_create`、`team_task_get`、`team_task_list`、`team_task_update`、`wait_agent` | `ctx.tools`、`ctx.systemPrompt`、`ctx.agentTeams`、`an exact live Team member Agent` | `tool/call`、`team/member`、`team/task`、`agent/inbox/spliced`、`user/message on inbox claim`、`tool/result` | - | 这 9 个工具限定于隐式 Team Lead 与持久 teammate 作用域。随产品发布的 dsh-base bundle 默认禁用该包；文档中的 Agent Teams profile patch 会启用它，并禁用旧 continuable child 的同名控制工具。 |
 | `@deepseek-ai/dsh-tool-todo` | `todo_write` | `ctx.tools`、`owning Agent session` | `tool/call`、`todo/write`、`tool/result` | - | todo_write 是会话所有的状态；UI 将最新的 todo/write 事件渲染为检查清单。`allowParallelInProgress` 是没有默认值的必填项，因此本目录明确选择 `true`，对应描述允许同时存在多个 `in_progress` 项。选择 `false` 的部署会获得同一工具，但描述会要求只能有 1 个活动任务。 |
 | `@deepseek-ai/dsh-tool-working-directory` | `working_directory` | `ctx.tools`, `ctx.workingDirectory` | `tool/call`, `working-directory/change`, `user context for directory changes`, `tool/result` | - | 读取或改变调用方 Session 的目录。已有 shell 和进程保留自己的目录；原始元数据和权限根目录保持不变。 |
-| `@deepseek-ai/dsh-experimental-tool-worktree` | `create_worktree` | `ctx.tools`, `ctx.worktrees`, `a calling Agent` | `tool/call`, `Git branch and checkout`, `working-directory/change`, `tool/result` | - | 仅通过显式实验组合加载。在现有写权限下从固定的本地提交创建新分支与检出目录，再改变 Session 工作目录。离开时保留分支与检出目录。 |
+| `@deepseek-ai/dsh-experimental-tool-worktree` | `create_worktree` | `ctx.tools`, `ctx.worktrees`, `a calling Agent` | `tool/call`, `Git branch and checkout`, `working-directory/change`, `tool/result` | - | 在 Web 和 Desktop 上通过变更请求与工作树组合包启用；其他 profile 可以选择独立组合包。在现有写权限下从固定的本地提交创建新分支与检出目录，再改变 Session 工作目录。离开时保留分支与检出目录。 |
 | `@deepseek-ai/dsh-tool-workflow` | `workflow` | `ctx.tools`、`ctx.workflowEngine`、`ctx.systemPrompt`、`a calling Agent (exec.agent parents the script children)` | `tool/call`、`tool/result` | - | - |
 | `@deepseek-ai/dsh-tool-workspace-dependencies` | `load_workspace_dependencies` | `ctx.tools` | `tool/call`, `tool/result` | - | - |
 | `@deepseek-ai/dsh-tool-web` | `web_fetch`、`web_search` | `ctx.tools`、`ctx.web`、`ctx.systemPrompt` | `tool/call`、`tool/result` | - | web_search 和 web_fetch 将提供方选择置于 ctx.web 之后，使模型可见 schema 在更换后端时保持稳定。 |
@@ -2636,7 +2636,7 @@ todo_write 是会话所有的状态；UI 将最新的 todo/write 事件渲染为
 
 来源：[`packages/experimental/tool-worktree/src/index.ts`](../packages/experimental/tool-worktree/src/index.ts)
 
-仅通过显式实验组合加载。在现有写权限下从固定的本地提交创建新分支与检出目录，再改变 Session 工作目录。离开时保留分支与检出目录。
+在 Web 和 Desktop 上通过变更请求与工作树组合包启用；其他 profile 可以选择独立组合包。在现有写权限下从固定的本地提交创建新分支与检出目录，再改变 Session 工作目录。离开时保留分支与检出目录。
 
 <a id="deepseek-aidsh-tool-workflow"></a>
 
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/forge-worktree-entry/guide.i18n.yaml b/docs/upgrade-guide/v0.2.2-alpha.2/forge-worktree-entry/guide.i18n.yaml
new file mode 100644
index 0000000000..a5bd96e947
--- /dev/null
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/forge-worktree-entry/guide.i18n.yaml
@@ -0,0 +1,16 @@
+# Bilingual-pair consistency record for guide.md (docs/i18n/README.md): per heading
+# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
+# After editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write docs/upgrade-guide/v0.2.2-alpha.2/forge-worktree-entry/guide.md
+/:
+  en: e25e3adac59e3584
+  zh: 1a16ac4c16ab3a0d
+/one-plugin-entry-for-change-requests-and-worktrees:
+  en: 2eb2f0805d09f0c4
+  zh: a7b02646515b39df
+/one-plugin-entry-for-change-requests-and-worktrees/change:
+  en: b814d167dea20941
+  zh: a8e3c416acd4fb65
+/one-plugin-entry-for-change-requests-and-worktrees/migration:
+  en: 08b0e3bae9e9697e
+  zh: 62f66d48328f1037
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/forge-worktree-entry/guide.md b/docs/upgrade-guide/v0.2.2-alpha.2/forge-worktree-entry/guide.md
new file mode 100644
index 0000000000..3b8bf683bd
--- /dev/null
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/forge-worktree-entry/guide.md
@@ -0,0 +1,29 @@
+---
+kind: upgrade-guide
+description: "The Plugins page replaces the standalone Git worktrees card with Change requests & worktrees."
+---
+
+# One plugin entry for change requests and worktrees
+
+English | [中文](guide.zh.md)
+
+## Change
+
+Web and Desktop use **Change requests & worktrees** to enable the review panel, the new-Session worktree option, and the model's `create_worktree` tool together. The separate **Git worktrees** card is hidden. Profiles that already enabled the Forge bundle also gain the model tool.
+
+Existing profiles are not migrated automatically. A selected `@deepseek-ai/dsh-experimental-tool-worktree` bundle stays active even though its card is hidden, so turning off Forge does not disable that standalone tool. Selecting both it and `@deepseek-ai/dsh-experimental-forge-bundle` inserts duplicate `worktree` and `tool-worktree` ids, making those component controls read-only. Remove the standalone selection before using the unified switch.
+
+## Migration
+
+1. Stop Web or quit Desktop. Back up `$DSH_HOME/profiles/<name>/package.json` and its sibling `cordis.patch.yml`. Use `~/.dsh` when `DSH_HOME` is unset; the standard profile names are `web` and `desktop`. For a custom profile, use its name.
+2. Edit `dsh.profile.bundles` in that `package.json`. Remove every `@deepseek-ai/dsh-experimental-tool-worktree` entry. To keep worktree support through the unified switch, add `@deepseek-ai/dsh-experimental-forge-bundle` once; if it is already selected, keep that entry. To disable both features, remove both bundle names. Preserve all other entries and fields.
+3. Keep existing `cordis.patch.yml` overrides: the `worktree`, `tool-worktree`, and `optional-forge-panel` ids are unchanged. To use the Forge panel without exposing the model tool, add or update this entry in the existing patch list:
+
+   ```yaml
+   - id: tool-worktree
+     disabled: true
+   ```
+
+4. Restart the application. In Plugins, confirm that **Change requests & worktrees** reflects your selection. With no disabling row override, enabling it provides the panel and `create_worktree`; turning it off removes both. Confirm that the profile lists no standalone worktree bundle. Existing worktrees, branches, and Session records are retained.
+
+Headless profiles and custom compositions that need only the standalone tool can keep it; do not also select the Forge bundle. In Web or Desktop, that standalone selection remains hidden and must be managed through the profile file.
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/forge-worktree-entry/guide.zh.md b/docs/upgrade-guide/v0.2.2-alpha.2/forge-worktree-entry/guide.zh.md
new file mode 100644
index 0000000000..118f00bd22
--- /dev/null
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/forge-worktree-entry/guide.zh.md
@@ -0,0 +1,29 @@
+---
+kind: upgrade-guide
+description: "插件页将独立的 Git 工作树卡片合入变更请求与工作树。"
+---
+
+# 变更请求与工作树使用同一个插件入口
+
+[English](guide.md) | 中文
+
+## 变更
+
+Web 和 Desktop 通过**变更请求与工作树**同时启用评审面板、新会话的工作树选项和模型的 `create_worktree` 工具。独立的 **Git 工作树**卡片被隐藏。已经启用 Forge 组合包的 profile 也会新增模型工具。
+
+已有 profile 不会自动迁移。选中的 `@deepseek-ai/dsh-experimental-tool-worktree` 组合包仍会运行，即使其卡片已隐藏，因此关闭 Forge 不会停用这个独立工具。同时选择它和 `@deepseek-ai/dsh-experimental-forge-bundle` 会插入重复的 `worktree` 与 `tool-worktree` id，使对应组件控件变为只读。使用统一开关前，请移除独立组合包的选择。
+
+## 迁移
+
+1. 停止 Web 或退出 Desktop。备份 `$DSH_HOME/profiles/<name>/package.json` 及同目录下的 `cordis.patch.yml`。未设置 `DSH_HOME` 时使用 `~/.dsh`；标准 profile 名称为 `web` 和 `desktop`。自定义 profile 使用其自身名称。
+2. 编辑该 `package.json` 的 `dsh.profile.bundles`。移除所有 `@deepseek-ai/dsh-experimental-tool-worktree` 条目。若要通过统一开关保留工作树功能，添加一次 `@deepseek-ai/dsh-experimental-forge-bundle`；若已选中它，则保留该条目。若要关闭两项功能，则移除这两个组合包名称。保留其他所有条目和字段。
+3. 保留现有的 `cordis.patch.yml` 覆盖配置：`worktree`、`tool-worktree` 和 `optional-forge-panel` 的 id 均未改变。若只使用 Forge 面板，不向模型提供工作树工具，在现有 patch 列表中添加或更新以下条目：
+
+   ```yaml
+   - id: tool-worktree
+     disabled: true
+   ```
+
+4. 重启应用。在插件页确认**变更请求与工作树**的状态符合你的选择。没有禁用插件行的覆盖配置时，启用它会提供面板与 `create_worktree`，关闭后两者均移除。确认 profile 不再列出独立的工作树组合包。已有工作树、分支和 Session 记录均保留。
+
+仅需要独立工具的 Headless profile 和自定义组合可以继续保留它，但不要同时选择 Forge 组合包。在 Web 或 Desktop 中，该独立选择仍然隐藏，需要通过 profile 文件管理。
diff --git a/packages/client/ui-plugin-manager/tests/components.client.spec.tsx b/packages/client/ui-plugin-manager/tests/components.client.spec.tsx
index adacb15d71..29dd9ffd63 100644
--- a/packages/client/ui-plugin-manager/tests/components.client.spec.tsx
+++ b/packages/client/ui-plugin-manager/tests/components.client.spec.tsx
@@ -300,30 +300,30 @@ describe('PluginManagerPage', () => {
   })
 
   it('keeps the Installed tab panel through loading and the More list out of the tabs, and returns a More plugin opened from Discover to Discover', () => {
-    const worktree = '@deepseek-ai/dsh-experimental-tool-worktree'
+    const inspector = '@deepseek-ai/dsh-experimental-inspector-profile'
     const { navigation, set } = renderTab({ status: 'loading', packages: [] }, {}, {
       'plugins.tab:discover': (_view, owner) => (
-        <button type="button" onClick={() => { (owner as PluginTabProps).openPackage(worktree) }}>Discover open</button>
+        <button type="button" onClick={() => { (owner as PluginTabProps).openPackage(inspector) }}>Discover open</button>
       ),
     }, {}, [{ id: 'discover', label: 'Discover' }])
     const installed = screen.getByRole('tab', { name: en.installedTab })
     expect(document.getElementById(installed.getAttribute('aria-controls') as string)?.getAttribute('role')).toBe('tabpanel')
     set({ status: 'ready', packages: [] })
     expect(screen.getByRole('tabpanel', { name: en.installedTab }).textContent).toBe(en.empty)
-    set({ packages: [pkg({ name: worktree, official: true, optional: true, installed: false, enabled: false })] })
+    set({ packages: [pkg({ name: inspector, official: true, optional: true, installed: false, enabled: false })] })
     act(() => { navigation.actions.setView({ kind: 'more' }) })
     expect(screen.queryByRole('tablist')).toBeNull()
     expect(screen.queryByRole('tabpanel')).toBeNull()
     act(() => { navigation.actions.setView({ kind: 'list' }) })
     fireEvent.click(screen.getByRole('tab', { name: 'Discover' }))
     fireEvent.click(screen.getByRole('button', { name: 'Discover open' }))
-    expect(document.querySelector(`[data-plugin-detail="${worktree}"]`)).not.toBeNull()
+    expect(document.querySelector(`[data-plugin-detail="${inspector}"]`)).not.toBeNull()
     // An official plugin of the More list opened from Discover returns to Discover, not to the More list.
     fireEvent.click(screen.getByRole('button', { name: en.backToList }))
     expect(navigation.getSnapshot()).toEqual({ tab: 'discover', view: { kind: 'list' } })
     fireEvent.click(screen.getByRole('tab', { name: en.installedTab }))
     act(() => { navigation.actions.setView({ kind: 'more' }) })
-    fireEvent.click(screen.getByRole('button', { name: en.openDetail.replace('{name}', worktree) }))
+    fireEvent.click(screen.getByRole('button', { name: en.openDetail.replace('{name}', inspector) }))
     fireEvent.click(screen.getByRole('button', { name: en.backToPackage.replace('{name}', en.moreTitle) }))
     expect(screen.getByRole('heading', { name: en.moreTitle, level: 1 })).toBeTruthy()
   })
@@ -1237,7 +1237,7 @@ describe('PluginManagerPage', () => {
         .toEqual(['more'])
       const more = document.querySelector('[data-plugin-group="more"]') as HTMLElement
       expect(within(more).getAllByRole('listitem').map(card => card.getAttribute('data-plugin-package')))
-        .toEqual([team, '@acme/new-official', '@deepseek-ai/dsh-experimental-tool-worktree', '@deepseek-ai/dsh-experimental-badge-skill-bundle', '@deepseek-ai/dsh-subagent-codex', '@deepseek-ai/dsh-subagent-claude-code'])
+        .toEqual([team, '@acme/new-official', '@deepseek-ai/dsh-experimental-badge-skill-bundle', '@deepseek-ai/dsh-subagent-codex', '@deepseek-ai/dsh-subagent-claude-code'])
       expect(document.querySelector('[data-plugin-package="dsh-better-sidebar"]')).toBeNull()
       fireEvent.click(screen.getByRole('button', { name: en.openDetail.replace('{name}', team) }))
       fireEvent.click(screen.getByRole('button', { name: en.backToPackage.replace('{name}', en.moreTitle) }))
@@ -1255,6 +1255,20 @@ describe('PluginManagerPage', () => {
       expect(screen.getByRole('heading', { name: en.basicTitle })).toBeTruthy()
     })
 
+    it.each([false, true])('shows one forge card and hides the standalone worktree card when enabled is %s', (enabled) => {
+      const forge = '@deepseek-ai/dsh-experimental-forge-bundle'
+      const worktree = '@deepseek-ai/dsh-experimental-tool-worktree'
+      renderTab({ packages: [
+        pkg({ name: forge, official: true, enabled }),
+        pkg({ name: worktree, official: true, enabled }),
+      ] })
+      expect(document.querySelectorAll(`[data-plugin-package="${forge}"]`)).toHaveLength(1)
+      expect(document.querySelector(`[data-plugin-package="${worktree}"]`)).toBeNull()
+      fireEvent.click(screen.getByRole('button', { name: en.moreAction }))
+      expect(document.querySelectorAll(`[data-plugin-package="${forge}"]`)).toHaveLength(1)
+      expect(document.querySelector(`[data-plugin-package="${worktree}"]`)).toBeNull()
+    })
+
     it.each([
       '@deepseek-ai/dsh-cua-bundle',
       '@deepseek-ai/dsh-experimental-session-search',
@@ -1361,7 +1375,7 @@ describe('PluginManagerPage', () => {
     })
 
     it.each([
-      '@deepseek-ai/dsh-experimental-tool-worktree',
+      '@deepseek-ai/dsh-experimental-inspector-profile',
       '@deepseek-ai/dsh-personalized-recommendations',
     ])('pins enabled %s onto the main list and removes it when disabled', (first) => {
       const team = '@deepseek-ai/dsh-experimental-agent-team-profile'
diff --git a/packages/experimental/forge-bundle/README.i18n.yaml b/packages/experimental/forge-bundle/README.i18n.yaml
index 159422daed..9894b7f03c 100644
--- a/packages/experimental/forge-bundle/README.i18n.yaml
+++ b/packages/experimental/forge-bundle/README.i18n.yaml
@@ -9,26 +9,26 @@
   en: 567570af44a77fa2
   zh: 3d7722fe3ade65d6
 /deepseek-ai-dsh-experimental-forge-bundle/summary:
-  en: f6ce7db50e10af0b
-  zh: 415f509876e88d8a
+  en: 8d8189bb9a91f049
+  zh: 27f02215d6919b3d
 /deepseek-ai-dsh-experimental-forge-bundle/table-of-contents:
   en: d152484eb41ac6b4
   zh: 2f8a621b991260a1
 /deepseek-ai-dsh-experimental-forge-bundle/use-this-package:
-  en: 227f8ec88513be9e
-  zh: be16cbbb4f3912e2
+  en: 33679bed06be4e74
+  zh: 77dcfac9570d1fbc
 /deepseek-ai-dsh-experimental-forge-bundle/understand-the-implementation:
-  en: 6effcbf40264388b
-  zh: b4f093955671c650
+  en: 5cb4136ef2058890
+  zh: 5142828996eef6c7
 /deepseek-ai-dsh-experimental-forge-bundle/further-exploration:
   en: ab1f524b8ad79c55
   zh: 137cfcb6d192c269
 /deepseek-ai-dsh-experimental-forge-bundle/model-experience:
-  en: 0e8d555c9ba51844
-  zh: 1aeda456da13a9bd
+  en: 48e871ea5f1238c8
+  zh: 6d40dddf8de9d610
 /deepseek-ai-dsh-experimental-forge-bundle/model-experience/kv-cache-effect:
-  en: 06c8b68589e27fc7
-  zh: 092fd7649b34bc04
+  en: 0192ab064b8000a7
+  zh: 1a1de04f87631b9a
 /deepseek-ai-dsh-experimental-forge-bundle/known-limitations-and-deferred-work:
   en: ab489084b24ecb16
   zh: 6be1686e9741dffa
diff --git a/packages/experimental/forge-bundle/README.md b/packages/experimental/forge-bundle/README.md
index 57341e2660..236c5a3a6e 100644
--- a/packages/experimental/forge-bundle/README.md
+++ b/packages/experimental/forge-bundle/README.md
@@ -9,7 +9,7 @@ English | [中文](README.zh.md)
 
 ## Summary
 
-Show the change requests of each Session with their checks and reviews, and let a new Session start in its own Git worktree. Enable Change requests & worktrees on the Web or Desktop Plugins page; shipped profiles leave it disabled. GitHub status comes from the `gh` CLI signed in on the Host; without it, the panel still shows the branch and the worktree option still works.
+Review each Session's change requests, checks, and diffs, start a new Session in a Git worktree, or ask the model to create one during a conversation. Enable Change requests & worktrees on the Web or Desktop Plugins page; shipped profiles leave it disabled. GitHub status comes from the Host's signed-in `gh` CLI; local worktree creation does not require GitHub authentication.
 
 ## Table of Contents
 
@@ -27,6 +27,8 @@ Show the change requests of each Session with their checks and reviews, and let
 
 Open Plugins and enable Change requests & worktrees in the Official group. In a Git workspace, check Worktree in the composer before the first message to start the Session in a new worktree. In a Session whose directory is inside a Git checkout, the header button opens the panel. GitHub pull requests that the Session creates with `gh pr create`, opens with `gh pr view`, `gh pr edit`, or `gh pr checkout`, or works on as its branch or updates with a later `git push`, appear as change requests without further steps. Run `gh auth login --hostname <host>` in a terminal to sign in; the panel shows the command when sign-in is missing. The [panel package](../client-ui-forge/README.md#use-this-package) describes each control.
 
+The same switch enables the model's [`create_worktree`](../tool-worktree/README.md) tool. Turning it off removes both the panel and the tool while retaining existing checkouts and branches. For profiles that already selected the standalone worktree bundle, follow the [upgrade guide](../../../docs/upgrade-guide/v0.2.2-alpha.2/forge-worktree-entry/guide.md) before enabling this bundle.
+
 -----
 
 <a id="understand-the-implementation"></a>
@@ -35,7 +37,7 @@ Open Plugins and enable Change requests & worktrees in the Official group. In a
 <details>
 <summary>Maintainer details — click to expand</summary>
 
-The bundle patch inserts the forge registry, the GitHub provider, and the Session bindings as Host rows, and a group that isolates the `worktrees` service, holding a worktree service row and the panel's two-face package, whose Client half the Web and Desktop clients load while the row is enabled. The isolation lets the bundle coexist with the Git Worktrees bundle, whose model tool keeps its own service. The rows need the Session projection registry, working-directory, filesystem, subprocess, and sandbox services that every base-backed profile composes.
+The bundle mounts the forge registry, GitHub provider, Session bindings, and the worktree model tool. The tool uses the top-level `worktree` service; the panel keeps its isolated `forge-worktree` service inside `optional-forge-panel`. Their configuration ids and creation flows stay independent. The panel records worktrees requested before a Session starts; model-created worktrees do not acquire the panel's recovery records. The rows use the Session projection, working-directory, filesystem, subprocess, and sandbox services from base-backed profiles.
 
 </details>
 
@@ -51,11 +53,11 @@ The bundle patch inserts the forge registry, the GitHub provider, and the Sessio
 <a id="model-experience"></a>
 ## Model Experience
 
-None, as the composed packages add no model tool or prompt; the directory notice of a Session that starts in a worktree reaches the model through the working-directory service, as described by the [panel](../client-ui-forge/README.md#model-experience).
+Indirectly, through the [`create_worktree`](../tool-worktree/README.md#model-experience) tool and the [panel’s directory notice](../client-ui-forge/README.md#model-experience) for Sessions that start in a worktree.
 
 #### KV Cache effect
 
-None from the bundle; see the [panel](../client-ui-forge/README.md#model-experience) for the worktree notice.
+Enabling or disabling the bundle changes the model's tool schema list. Calls append tool results and directory context; see the [tool's cache behavior](../tool-worktree/README.md#model-experience).
 
 ## Known Limitations and Deferred Work
 
diff --git a/packages/experimental/forge-bundle/README.zh.md b/packages/experimental/forge-bundle/README.zh.md
index d65111cc34..955dc43598 100644
--- a/packages/experimental/forge-bundle/README.zh.md
+++ b/packages/experimental/forge-bundle/README.zh.md
@@ -9,7 +9,7 @@ kind: "package-bundle"
 
 ## 概述
 
-展示每个 Session 的变更请求及其检查与评审状态，并让新 Session 在自己的 Git worktree 中开始。在 Web 或 Desktop 的插件页面启用“变更请求与工作树”；发布的 profile 默认禁用该功能。GitHub 状态来自宿主上已登录的 `gh` 命令行；没有它时，面板仍会显示分支，工作树选项也照常可用。
+查看每个 Session 的变更请求、检查与代码差异，在 Git 工作树中开始新 Session，或在对话中让模型创建工作树。在 Web 或 Desktop 的插件页面启用“变更请求与工作树”；发布的 profile 默认禁用该功能。GitHub 状态来自宿主上已登录的 `gh` 命令行；创建本地工作树无需 GitHub 认证。
 
 ## 目录
 
@@ -27,6 +27,8 @@ kind: "package-bundle"
 
 打开插件页面，在官方分组中启用“变更请求与工作树”。在 Git 工作区中，发出第一条消息之前在输入框中勾选“工作树”，Session 就会在新的 worktree 中开始。Session 的目录位于 Git 检出中时，标题栏按钮会打开面板。Session 用 `gh pr create` 创建、用 `gh pr view`、`gh pr edit` 或 `gh pr checkout` 打开的 GitHub pull request，以及 Session 所在分支上或之后 `git push` 更新的 pull request，无需额外操作即会作为变更请求出现。在终端运行 `gh auth login --hostname <host>` 登录；缺少登录时，面板会显示这条命令。[面板包](../client-ui-forge/README.zh.md#use-this-package)说明了每个控件。
 
+同一个开关也启用模型的 [`create_worktree`](../tool-worktree/README.zh.md) 工具。关闭后面板和工具一起移除，已有检出目录与分支仍然保留。已选中独立工作树组合包的 profile，请在启用本组合包前按[升级指南](../../../docs/upgrade-guide/v0.2.2-alpha.2/forge-worktree-entry/guide.zh.md)调整配置。
+
 -----
 
 <a id="understand-the-implementation"></a>
@@ -35,7 +37,7 @@ kind: "package-bundle"
 <details>
 <summary>维护者细节——点击展开</summary>
 
-Bundle patch 以宿主行插入 forge 注册表、GitHub 提供方与 Session 绑定，并插入一个隔离 `worktrees` 服务的分组，其中包含一个 worktree 服务行与面板的双端包；该行启用期间，Web 与 Desktop 客户端会加载其客户端部分。隔离让本套件可以与 Git Worktrees 套件共存，后者的模型工具保有自己的服务。这些行依赖每个基于 base 的 profile 都会组合的 Session 投影注册表、工作目录、文件系统、子进程与沙箱服务。
+组合包挂载 Forge 注册表、GitHub 提供方、Session 绑定和工作树模型工具。工具使用顶层 `worktree` 服务；面板在 `optional-forge-panel` 内保留隔离的 `forge-worktree` 服务。两者的配置 id 和创建流程各自独立。面板记录 Session 开始前请求的工作树；模型创建的工作树不会获得面板的恢复记录。这些行使用基于 base 的 profile 提供的 Session 投影、工作目录、文件系统、子进程和沙箱服务。
 
 </details>
 
@@ -51,11 +53,11 @@ Bundle patch 以宿主行插入 forge 注册表、GitHub 提供方与 Session 
 <a id="model-experience"></a>
 ## 模型体验
 
-无：组合的包不增加模型工具或提示词；以 worktree 开始的 Session 的目录通知通过工作目录服务告知模型，详见[面板](../client-ui-forge/README.zh.md#model-experience)。
+间接影响：通过 [`create_worktree`](../tool-worktree/README.zh.md#model-experience) 工具，以及以工作树开始的 Session 的[面板目录通知](../client-ui-forge/README.zh.md#model-experience)。
 
 #### KV Cache 影响
 
-Bundle 本身没有影响；worktree 通知见[面板](../client-ui-forge/README.zh.md#model-experience)。
+启用或关闭组合包会改变模型的工具 schema 列表。调用追加工具结果和目录上下文；参见[工具的缓存行为](../tool-worktree/README.zh.md#model-experience)。
 
 ## 已知限制与待办工作
 
diff --git a/packages/experimental/forge-bundle/cordis.patch.yml b/packages/experimental/forge-bundle/cordis.patch.yml
index d6008c8b4c..112caefaa4 100644
--- a/packages/experimental/forge-bundle/cordis.patch.yml
+++ b/packages/experimental/forge-bundle/cordis.patch.yml
@@ -1,4 +1,8 @@
 - insert:
+    - id: worktree
+      name: '@deepseek-ai/dsh-experimental-worktree'
+    - id: tool-worktree
+      name: '@deepseek-ai/dsh-experimental-tool-worktree'
     - id: forge
       name: '@deepseek-ai/dsh-experimental-forge'
     - id: forge-github
diff --git a/packages/experimental/forge-bundle/docs/DETAIL.de.md b/packages/experimental/forge-bundle/docs/DETAIL.de.md
new file mode 100644
index 0000000000..c8ea4413c3
--- /dev/null
+++ b/packages/experimental/forge-bundle/docs/DETAIL.de.md
@@ -0,0 +1 @@
+![Eine Unterhaltung mit verknüpftem GitHub-Pull-Request, Prüfungen, Reviews, Codeunterschieden und einem separaten Arbeitsbaum](preview.svg)
diff --git a/packages/experimental/forge-bundle/docs/DETAIL.es.md b/packages/experimental/forge-bundle/docs/DETAIL.es.md
new file mode 100644
index 0000000000..94ccb3ba95
--- /dev/null
+++ b/packages/experimental/forge-bundle/docs/DETAIL.es.md
@@ -0,0 +1 @@
+![Una conversación vinculada a un pull request de GitHub, con comprobaciones, revisiones, diferencias de código y un árbol de trabajo aislado](preview.svg)
diff --git a/packages/experimental/forge-bundle/docs/DETAIL.fr.md b/packages/experimental/forge-bundle/docs/DETAIL.fr.md
new file mode 100644
index 0000000000..93f4c53d34
--- /dev/null
+++ b/packages/experimental/forge-bundle/docs/DETAIL.fr.md
@@ -0,0 +1 @@
+![Une conversation liée à une pull request GitHub, avec vérifications, revues, différences de code et un arbre de travail isolé](preview.svg)
diff --git a/packages/experimental/forge-bundle/docs/DETAIL.ja.md b/packages/experimental/forge-bundle/docs/DETAIL.ja.md
new file mode 100644
index 0000000000..386c9264f0
--- /dev/null
+++ b/packages/experimental/forge-bundle/docs/DETAIL.ja.md
@@ -0,0 +1 @@
+![GitHub のプルリクエストに関連付けられた会話、チェックとレビューの状況、コードの差分、独立したワークツリー](preview.svg)
diff --git a/packages/experimental/forge-bundle/docs/DETAIL.md b/packages/experimental/forge-bundle/docs/DETAIL.md
new file mode 100644
index 0000000000..1da1b27021
--- /dev/null
+++ b/packages/experimental/forge-bundle/docs/DETAIL.md
@@ -0,0 +1 @@
+![A conversation linked to a GitHub pull request, with checks, reviews, code diffs, and an isolated worktree](preview.svg)
diff --git a/packages/experimental/forge-bundle/docs/DETAIL.pt.md b/packages/experimental/forge-bundle/docs/DETAIL.pt.md
new file mode 100644
index 0000000000..c08124a106
--- /dev/null
+++ b/packages/experimental/forge-bundle/docs/DETAIL.pt.md
@@ -0,0 +1 @@
+![Uma conversa vinculada a um pull request do GitHub, com verificações, revisões, diferenças de código e uma árvore de trabalho isolada](preview.svg)
diff --git a/packages/experimental/forge-bundle/docs/DETAIL.ru.md b/packages/experimental/forge-bundle/docs/DETAIL.ru.md
new file mode 100644
index 0000000000..78dc6bf6ab
--- /dev/null
+++ b/packages/experimental/forge-bundle/docs/DETAIL.ru.md
@@ -0,0 +1 @@
+![Беседа, связанная с pull request GitHub: проверки, рецензии, различия в коде и отдельное рабочее дерево](preview.svg)
diff --git a/packages/experimental/forge-bundle/docs/DETAIL.zh.md b/packages/experimental/forge-bundle/docs/DETAIL.zh.md
new file mode 100644
index 0000000000..6114b4065e
--- /dev/null
+++ b/packages/experimental/forge-bundle/docs/DETAIL.zh.md
@@ -0,0 +1 @@
+![会话关联 GitHub PR，跟踪检查、评审与代码差异，并用工作树隔离任务改动](preview.zh.svg)
diff --git a/packages/experimental/forge-bundle/docs/preview.svg b/packages/experimental/forge-bundle/docs/preview.svg
new file mode 100644
index 0000000000..dd278ed0ce
--- /dev/null
+++ b/packages/experimental/forge-bundle/docs/preview.svg
@@ -0,0 +1,28 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="640" height="300" viewBox="0 0 640 300">
+<rect width="640" height="300" rx="12" fill="#F5F6FC"/>
+<path d="M49.24 44.36Q48.96 44.39 48.48 44.47Q48.01 44.54 47.71 44.68Q47.36 44.86 47.22 45.18Q47.07 45.50 47.07 45.94L47.07 47.23Q47.07 48.63 47.09 49.12Q47.11 49.62 47.13 49.93Q45.57 50.64 44.02 51.01Q42.48 51.39 40.99 51.39Q39.39 51.39 37.92 50.79Q36.44 50.19 35.34 49.09Q34.23 47.98 33.57 46.38Q32.91 44.79 32.91 42.82Q32.91 40.92 33.54 39.30Q34.17 37.68 35.32 36.48Q36.43 35.31 37.97 34.66Q39.51 34.01 41.27 34.01Q42.68 34.01 43.72 34.35Q44.76 34.69 45.56 35.17L46.04 34.37L46.98 34.37L47.08 40.18L46.12 40.18Q45.88 39.22 45.51 38.29Q45.15 37.36 44.57 36.62Q44.00 35.88 43.17 35.44Q42.35 35.00 41.20 35.00Q39.95 35.00 38.96 35.51Q37.98 36.02 37.25 37.03Q36.54 38.00 36.15 39.46Q35.76 40.91 35.76 42.70Q35.76 44.29 36.14 45.69Q36.52 47.09 37.25 48.11Q37.98 49.15 39.07 49.75Q40.16 50.34 41.54 50.34Q42.57 50.34 43.42 50.03Q44.27 49.71 44.62 49.36Q44.71 48.75 44.72 48.13Q44.73 47.51 44.73 47.07L44.73 46.16Q44.73 45.67 44.59 45.29Q44.46 44.91 44.04 44.73Q43.65 44.55 42.99 44.47Q42.32 44.38 41.95 44.36L41.95 43.50L49.24 43.50ZM55.86 51.00L50.27 51.00L50.27 50.23Q50.54 50.20 50.83 50.18Q51.11 50.16 51.32 50.09Q51.65 49.98 51.81 49.72Q51.97 49.45 51.97 49.03L51.97 41.89Q51.97 41.52 51.80 41.21Q51.63 40.90 51.32 40.69Q51.10 40.55 50.68 40.45Q50.26 40.35 49.91 40.32L49.91 39.56L53.98 39.30L54.15 39.47L54.15 48.89Q54.15 49.30 54.31 49.57Q54.46 49.84 54.80 49.97Q55.06 50.07 55.31 50.14Q55.55 50.20 55.86 50.23ZM54.38 34.75Q54.38 35.41 53.94 35.91Q53.50 36.41 52.86 36.41Q52.26 36.41 51.82 35.94Q51.38 35.46 51.38 34.85Q51.38 34.21 51.82 33.73Q52.26 33.25 52.86 33.25Q53.53 33.25 53.96 33.70Q54.38 34.15 54.38 34.75ZM64.41 50.50Q63.65 50.81 62.97 51.03Q62.29 51.25 61.31 51.25Q59.86 51.25 59.26 50.51Q58.67 49.78 58.67 48.45L58.67 40.62L56.59 40.62L56.59 39.49L58.72 39.49L58.72 35.89L60.85 35.89L60.85 39.49L64.17 39.49L64.17 40.62L60.88 40.62L60.88 47.07Q60.88 47.80 60.93 48.29Q60.98 48.77 61.18 49.14Q61.37 49.48 61.74 49.65Q62.12 49.83 62.75 49.83Q63.04 49.83 63.61 49.78Q64.18 49.72 64.41 49.64ZM83.08 51.00L76.18 51.00L76.18 50.17Q76.46 50.14 76.99 50.10Q77.53 50.05 77.73 49.96Q78.08 49.82 78.24 49.53Q78.41 49.24 78.41 48.79L78.41 42.87L70.59 42.87L70.59 48.66Q70.59 49.07 70.72 49.35Q70.86 49.63 71.26 49.84Q71.46 49.95 71.97 50.05Q72.48 50.16 72.77 50.17L72.77 51.00L65.87 51.00L65.87 50.17Q66.15 50.14 66.68 50.10Q67.21 50.05 67.41 49.96Q67.77 49.82 67.93 49.53Q68.09 49.24 68.09 48.79L68.09 36.79Q68.09 36.41 67.94 36.10Q67.79 35.79 67.41 35.61Q67.10 35.46 66.65 35.34Q66.20 35.23 65.87 35.20L65.87 34.37L72.77 34.37L72.77 35.20Q72.44 35.21 71.97 35.31Q71.49 35.40 71.26 35.48Q70.86 35.62 70.72 35.95Q70.59 36.28 70.59 36.67L70.59 41.82L78.41 41.82L78.41 36.79Q78.41 36.41 78.25 36.10Q78.10 35.79 77.73 35.61Q77.41 35.46 76.96 35.34Q76.51 35.23 76.18 35.20L76.18 34.37L83.08 34.37L83.08 35.20Q82.75 35.21 82.28 35.31Q81.80 35.40 81.57 35.48Q81.17 35.62 81.04 35.95Q80.90 36.28 80.90 36.67L80.90 48.66Q80.90 49.07 81.04 49.35Q81.17 49.63 81.57 49.84Q81.77 49.95 82.28 50.05Q82.79 50.16 83.08 50.17ZM97.51 50.79L93.75 51.05L93.57 50.88L93.57 49.42L93.50 49.42Q93.22 49.71 92.87 50.04Q92.52 50.38 92.06 50.65Q91.53 50.96 91.04 51.13Q90.55 51.29 89.64 51.29Q88.11 51.29 87.31 50.29Q86.50 49.29 86.50 47.38L86.50 41.85Q86.50 41.43 86.35 41.14Q86.19 40.85 85.88 40.64Q85.67 40.50 85.36 40.44Q85.04 40.37 84.69 40.35L84.69 39.59L88.54 39.30L88.72 39.47L88.72 47.50Q88.72 48.75 89.28 49.38Q89.84 50.02 90.63 50.02Q91.27 50.02 91.78 49.82Q92.28 49.62 92.62 49.35Q92.94 49.10 93.18 48.83Q93.42 48.55 93.55 48.32L93.55 41.77Q93.55 41.38 93.38 41.08Q93.22 40.78 92.93 40.57Q92.71 40.43 92.30 40.40Q91.88 40.37 91.37 40.35L91.37 39.59L95.56 39.30L95.74 39.47L95.74 48.64Q95.74 49.04 95.90 49.32Q96.07 49.61 96.36 49.80Q96.57 49.93 96.86 49.97Q97.16 50.02 97.51 50.03ZM110.66 45.21Q110.66 47.81 109.02 49.58Q107.38 51.35 105.21 51.35Q104.26 51.35 103.34 51.06Q102.42 50.77 101.61 50.27L100.74 51.62L100.02 51.46Q100.07 50.59 100.10 49.37Q100.12 48.15 100.12 47.02L100.12 35.58Q100.12 35.18 99.94 34.78Q99.76 34.38 99.48 34.21Q99.25 34.05 98.73 33.98Q98.21 33.90 97.89 33.88L97.89 33.13L102.14 32.86L102.30 33.04L102.30 40.65L102.38 40.68Q103.11 39.90 103.97 39.52Q104.83 39.13 105.66 39.13Q107.80 39.13 109.23 40.82Q110.66 42.50 110.66 45.21ZM108.21 45.29Q108.21 44.43 108.02 43.52Q107.83 42.62 107.43 41.95Q107.04 41.27 106.39 40.85Q105.75 40.43 104.84 40.43Q104.02 40.43 103.41 40.75Q102.79 41.07 102.30 41.62L102.30 48.35Q102.37 48.63 102.58 49.01Q102.78 49.38 103.13 49.72Q103.48 50.05 103.93 50.26Q104.38 50.46 105.02 50.46Q106.45 50.46 107.33 49.08Q108.21 47.70 108.21 45.29ZM116.55 50.59Q116.55 51.43 116.17 52.18Q115.79 52.93 115.30 53.47Q114.79 54.04 114.23 54.47Q113.67 54.90 113.20 55.15L112.66 54.36Q113.22 54.01 113.67 53.66Q114.11 53.31 114.39 52.96Q114.75 52.55 114.99 52.07Q115.24 51.59 115.31 50.98L114.71 50.98Q113.93 50.98 113.49 50.57Q113.05 50.16 113.05 49.46Q113.05 48.97 113.45 48.51Q113.84 48.05 114.54 48.05Q115.54 48.05 116.05 48.72Q116.55 49.39 116.55 50.59ZM129.97 51.30Q127.46 51.30 126.04 49.64Q124.62 47.98 124.62 45.18Q124.62 43.96 125.01 42.90Q125.39 41.84 126.11 40.97Q126.80 40.14 127.85 39.63Q128.89 39.12 130.12 39.12Q131.82 39.12 132.89 39.93Q133.95 40.75 133.95 42.15Q133.95 42.74 133.67 43.19Q133.39 43.64 132.75 43.64Q132.05 43.64 131.67 43.29Q131.29 42.94 131.29 42.50Q131.29 41.98 131.43 41.42Q131.57 40.86 131.60 40.61Q131.39 40.24 130.97 40.12Q130.55 40.00 130.07 40.00Q129.51 40.00 129.00 40.24Q128.49 40.48 128.01 41.12Q127.58 41.71 127.31 42.70Q127.04 43.70 127.04 45.08Q127.04 47.26 128.01 48.64Q128.97 50.02 130.54 50.02Q131.68 50.02 132.45 49.46Q133.21 48.91 133.87 47.81L134.62 48.30Q133.85 49.69 132.58 50.50Q131.32 51.30 129.97 51.30ZM146.79 45.11Q146.79 46.32 146.40 47.50Q146.01 48.68 145.30 49.50Q144.49 50.44 143.42 50.89Q142.36 51.35 141.03 51.35Q139.93 51.35 138.93 50.94Q137.94 50.52 137.16 49.72Q136.40 48.94 135.95 47.81Q135.50 46.68 135.50 45.27Q135.50 42.56 137.08 40.84Q138.65 39.12 141.21 39.12Q143.63 39.12 145.21 40.75Q146.79 42.39 146.79 45.11ZM144.36 45.13Q144.36 44.25 144.18 43.27Q144.01 42.29 143.66 41.61Q143.28 40.89 142.67 40.45Q142.06 40.01 141.18 40.01Q140.28 40.01 139.64 40.45Q139.00 40.90 138.61 41.67Q138.23 42.39 138.08 43.30Q137.93 44.21 137.93 45.07Q137.93 46.20 138.11 47.15Q138.29 48.11 138.69 48.86Q139.09 49.61 139.69 50.03Q140.29 50.46 141.18 50.46Q142.65 50.46 143.50 49.04Q144.36 47.62 144.36 45.13ZM161.22 51.00L155.56 51.00L155.56 50.23Q155.83 50.20 156.15 50.18Q156.48 50.16 156.69 50.09Q157.02 49.98 157.17 49.72Q157.33 49.45 157.33 49.03L157.33 43.09Q157.33 41.86 156.75 41.19Q156.17 40.52 155.34 40.52Q154.72 40.52 154.20 40.72Q153.69 40.91 153.29 41.19Q152.90 41.46 152.67 41.77Q152.45 42.08 152.34 42.27L152.34 48.91Q152.34 49.31 152.50 49.57Q152.67 49.83 153.00 49.97Q153.24 50.09 153.53 50.14Q153.82 50.20 154.12 50.23L154.12 51.00L148.46 51.00L148.46 50.23Q148.73 50.20 149.02 50.18Q149.30 50.16 149.52 50.09Q149.84 49.98 150.00 49.72Q150.16 49.45 150.16 49.03L150.16 41.89Q150.16 41.50 149.99 41.16Q149.82 40.83 149.52 40.62Q149.29 40.48 148.99 40.41Q148.68 40.35 148.33 40.32L148.33 39.56L152.18 39.30L152.34 39.47L152.34 41.10L152.40 41.10Q152.68 40.82 153.10 40.42Q153.52 40.03 153.90 39.79Q154.33 39.50 154.93 39.32Q155.53 39.13 156.28 39.13Q157.94 39.13 158.74 40.17Q159.55 41.20 159.55 42.93L159.55 48.94Q159.55 49.35 159.69 49.60Q159.83 49.85 160.17 49.99Q160.45 50.11 160.65 50.16Q160.86 50.20 161.22 50.23ZM175.40 51.00L169.74 51.00L169.74 50.23Q170.01 50.20 170.33 50.18Q170.66 50.16 170.87 50.09Q171.20 49.98 171.35 49.72Q171.51 49.45 171.51 49.03L171.51 43.09Q171.51 41.86 170.93 41.19Q170.35 40.52 169.52 40.52Q168.90 40.52 168.38 40.72Q167.87 40.91 167.47 41.19Q167.08 41.46 166.85 41.77Q166.62 42.08 166.52 42.27L166.52 48.91Q166.52 49.31 166.68 49.57Q166.85 49.83 167.18 49.97Q167.42 50.09 167.71 50.14Q168.00 50.20 168.30 50.23L168.30 51.00L162.64 51.00L162.64 50.23Q162.91 50.20 163.20 50.18Q163.48 50.16 163.70 50.09Q164.02 49.98 164.18 49.72Q164.34 49.45 164.34 49.03L164.34 41.89Q164.34 41.50 164.17 41.16Q164.00 40.83 163.70 40.62Q163.47 40.48 163.17 40.41Q162.86 40.35 162.51 40.32L162.51 39.56L166.36 39.30L166.52 39.47L166.52 41.10L166.58 41.10Q166.86 40.82 167.28 40.42Q167.70 40.03 168.08 39.79Q168.51 39.50 169.11 39.32Q169.71 39.13 170.46 39.13Q172.12 39.13 172.92 40.17Q173.73 41.20 173.73 42.93L173.73 48.94Q173.73 49.35 173.87 49.60Q174.01 49.85 174.35 49.99Q174.63 50.11 174.83 50.16Q175.04 50.20 175.40 50.23ZM187.09 48.28Q186.36 49.66 185.14 50.48Q183.92 51.30 182.34 51.30Q180.95 51.30 179.90 50.81Q178.85 50.32 178.17 49.48Q177.49 48.63 177.15 47.51Q176.82 46.38 176.82 45.13Q176.82 44.00 177.18 42.92Q177.54 41.84 178.23 40.97Q178.89 40.14 179.88 39.63Q180.88 39.12 182.11 39.12Q183.37 39.12 184.27 39.52Q185.18 39.91 185.74 40.61Q186.28 41.26 186.54 42.15Q186.80 43.04 186.80 44.09L186.80 44.86L179.15 44.86Q179.15 46.00 179.37 46.92Q179.59 47.85 180.05 48.55Q180.51 49.23 181.25 49.62Q181.99 50.02 183.01 50.02Q184.05 50.02 184.81 49.53Q185.56 49.04 186.27 47.78ZM184.50 43.88Q184.50 43.22 184.38 42.47Q184.27 41.72 184.03 41.21Q183.76 40.68 183.29 40.34Q182.82 40.00 182.08 40.00Q180.85 40.00 180.04 41.02Q179.22 42.05 179.15 43.88ZM193.77 51.30Q191.26 51.30 189.84 49.64Q188.42 47.98 188.42 45.18Q188.42 43.96 188.80 42.90Q189.18 41.84 189.91 40.97Q190.60 40.14 191.64 39.63Q192.69 39.12 193.92 39.12Q195.62 39.12 196.68 39.93Q197.75 40.75 197.75 42.15Q197.75 42.74 197.47 43.19Q197.19 43.64 196.54 43.64Q195.85 43.64 195.47 43.29Q195.09 42.94 195.09 42.50Q195.09 41.98 195.23 41.42Q195.37 40.86 195.39 40.61Q195.18 40.24 194.77 40.12Q194.35 40.00 193.87 40.00Q193.31 40.00 192.80 40.24Q192.29 40.48 191.81 41.12Q191.38 41.71 191.11 42.70Q190.84 43.70 190.84 45.08Q190.84 47.26 191.80 48.64Q192.77 50.02 194.34 50.02Q195.48 50.02 196.24 49.46Q197.01 48.91 197.67 47.81L198.42 48.30Q197.64 49.69 196.38 50.50Q195.11 51.30 193.77 51.30ZM206.46 50.50Q205.70 50.81 205.02 51.03Q204.34 51.25 203.35 51.25Q201.90 51.25 201.31 50.51Q200.71 49.78 200.71 48.45L200.71 40.62L198.63 40.62L198.63 39.49L200.76 39.49L200.76 35.89L202.89 35.89L202.89 39.49L206.21 39.49L206.21 40.62L202.92 40.62L202.92 47.07Q202.92 47.80 202.97 48.29Q203.02 48.77 203.22 49.14Q203.41 49.48 203.79 49.65Q204.16 49.83 204.79 49.83Q205.09 49.83 205.65 49.78Q206.22 49.72 206.46 49.64ZM217.87 48.28Q217.14 49.66 215.93 50.48Q214.71 51.30 213.12 51.30Q211.73 51.30 210.68 50.81Q209.63 50.32 208.95 49.48Q208.27 48.63 207.94 47.51Q207.61 46.38 207.61 45.13Q207.61 44.00 207.96 42.92Q208.32 41.84 209.01 40.97Q209.68 40.14 210.67 39.63Q211.66 39.12 212.89 39.12Q214.16 39.12 215.06 39.52Q215.96 39.91 216.52 40.61Q217.06 41.26 217.33 42.15Q217.59 43.04 217.59 44.09L217.59 44.86L209.94 44.86Q209.94 46.00 210.15 46.92Q210.37 47.85 210.84 48.55Q211.30 49.23 212.04 49.62Q212.77 50.02 213.79 50.02Q214.84 50.02 215.59 49.53Q216.35 49.04 217.05 47.78ZM215.28 43.88Q215.28 43.22 215.17 42.47Q215.06 41.72 214.81 41.21Q214.54 40.68 214.07 40.34Q213.61 40.00 212.87 40.00Q211.64 40.00 210.82 41.02Q210.01 42.05 209.94 43.88ZM231.86 50.79L227.83 51.05L227.66 50.88L227.66 49.80L227.56 49.78Q226.95 50.46 226.06 50.89Q225.16 51.33 224.21 51.33Q223.23 51.33 222.31 50.89Q221.39 50.45 220.71 49.65Q220.02 48.84 219.61 47.71Q219.21 46.57 219.21 45.20Q219.21 43.95 219.64 42.82Q220.07 41.70 220.84 40.85Q221.55 40.07 222.59 39.60Q223.62 39.13 224.70 39.13Q225.51 39.13 226.29 39.33Q227.07 39.54 227.63 39.86L227.63 35.84Q227.63 35.34 227.47 34.94Q227.30 34.54 227.01 34.32Q226.68 34.10 226.13 34.00Q225.57 33.90 224.93 33.86L224.93 33.13L229.65 32.86L229.82 33.04L229.82 48.62Q229.82 49.03 229.98 49.32Q230.14 49.61 230.45 49.80Q230.67 49.95 231.09 49.98Q231.51 50.02 231.86 50.03ZM227.63 48.76L227.63 42.00Q227.54 41.70 227.33 41.34Q227.12 40.99 226.80 40.70Q226.46 40.41 226.00 40.21Q225.55 40.02 224.94 40.02Q224.23 40.02 223.64 40.38Q223.05 40.75 222.59 41.43Q222.16 42.08 221.91 43.10Q221.66 44.11 221.66 45.34Q221.66 46.32 221.84 47.13Q222.03 47.93 222.48 48.62Q222.89 49.28 223.53 49.68Q224.16 50.07 225.04 50.07Q225.98 50.07 226.60 49.66Q227.21 49.25 227.63 48.76ZM245.91 50.50Q245.15 50.81 244.47 51.03Q243.79 51.25 242.81 51.25Q241.36 51.25 240.76 50.51Q240.17 49.78 240.17 48.45L240.17 40.62L238.09 40.62L238.09 39.49L240.22 39.49L240.22 35.89L242.35 35.89L242.35 39.49L245.67 39.49L245.67 40.62L242.38 40.62L242.38 47.07Q242.38 47.80 242.43 48.29Q242.48 48.77 242.68 49.14Q242.87 49.48 243.24 49.65Q243.62 49.83 244.25 49.83Q244.54 49.83 245.11 49.78Q245.68 49.72 245.91 49.64ZM258.32 45.11Q258.32 46.32 257.94 47.50Q257.55 48.68 256.84 49.50Q256.03 50.44 254.96 50.89Q253.89 51.35 252.57 51.35Q251.47 51.35 250.47 50.94Q249.48 50.52 248.70 49.72Q247.94 48.94 247.49 47.81Q247.04 46.68 247.04 45.27Q247.04 42.56 248.62 40.84Q250.19 39.12 252.75 39.12Q255.17 39.12 256.75 40.75Q258.32 42.39 258.32 45.11ZM255.90 45.13Q255.90 44.25 255.72 43.27Q255.55 42.29 255.20 41.61Q254.82 40.89 254.21 40.45Q253.60 40.01 252.72 40.01Q251.82 40.01 251.18 40.45Q250.54 40.90 250.14 41.67Q249.77 42.39 249.62 43.30Q249.46 44.21 249.46 45.07Q249.46 46.20 249.65 47.15Q249.83 48.11 250.23 48.86Q250.62 49.61 251.23 50.03Q251.83 50.46 252.72 50.46Q254.19 50.46 255.04 49.04Q255.90 47.62 255.90 45.13ZM264.91 54.77Q264.91 54.19 265.23 53.82Q265.55 53.45 266.04 53.45Q266.41 53.45 266.68 53.59Q266.95 53.73 267.16 53.95Q267.34 54.13 267.54 54.43Q267.73 54.74 267.85 54.94Q268.44 54.62 269.25 53.29Q270.07 51.95 270.43 50.94Q269.32 48.16 268.41 45.97Q267.51 43.78 266.53 41.44Q266.30 40.90 265.78 40.60Q265.25 40.30 264.72 40.22L264.72 39.45L270.00 39.45L270.00 40.27Q269.64 40.28 269.15 40.41Q268.66 40.55 268.66 40.72Q268.66 40.79 268.71 40.96Q268.77 41.12 268.84 41.30Q269.28 42.46 270.20 44.64Q271.11 46.83 271.61 48.14Q272.14 46.89 272.71 45.54Q273.28 44.20 273.98 42.38Q274.06 42.15 274.21 41.76Q274.37 41.37 274.37 41.09Q274.37 40.78 273.83 40.52Q273.30 40.25 272.82 40.20L272.82 39.45L277.11 39.45L277.11 40.17Q276.76 40.23 276.18 40.58Q275.61 40.92 275.33 41.55Q273.93 44.79 272.85 47.45Q271.77 50.11 271.20 51.36Q270.46 53.00 269.88 53.92Q269.30 54.84 268.75 55.37Q268.21 55.86 267.78 56.03Q267.34 56.20 266.87 56.20Q265.95 56.20 265.43 55.77Q264.91 55.34 264.91 54.77ZM288.86 45.11Q288.86 46.32 288.48 47.50Q288.09 48.68 287.38 49.50Q286.57 50.44 285.50 50.89Q284.43 51.35 283.11 51.35Q282.01 51.35 281.01 50.94Q280.02 50.52 279.24 49.72Q278.48 48.94 278.03 47.81Q277.58 46.68 277.58 45.27Q277.58 42.56 279.15 40.84Q280.73 39.12 283.29 39.12Q285.71 39.12 287.29 40.75Q288.86 42.39 288.86 45.11ZM286.44 45.13Q286.44 44.25 286.26 43.27Q286.09 42.29 285.73 41.61Q285.36 40.89 284.75 40.45Q284.14 40.01 283.26 40.01Q282.36 40.01 281.72 40.45Q281.08 40.90 280.68 41.67Q280.31 42.39 280.16 43.30Q280.00 44.21 280.00 45.07Q280.00 46.20 280.19 47.15Q280.37 48.11 280.77 48.86Q281.16 49.61 281.77 50.03Q282.37 50.46 283.26 50.46Q284.73 50.46 285.58 49.04Q286.44 47.62 286.44 45.13ZM302.93 50.79L299.16 51.05L298.99 50.88L298.99 49.42L298.92 49.42Q298.64 49.71 298.29 50.04Q297.93 50.38 297.48 50.65Q296.95 50.96 296.46 51.13Q295.96 51.29 295.06 51.29Q293.53 51.29 292.72 50.29Q291.92 49.29 291.92 47.38L291.92 41.85Q291.92 41.43 291.76 41.14Q291.61 40.85 291.30 40.64Q291.09 40.50 290.77 40.44Q290.46 40.37 290.11 40.35L290.11 39.59L293.96 39.30L294.14 39.47L294.14 47.50Q294.14 48.75 294.70 49.38Q295.26 50.02 296.05 50.02Q296.69 50.02 297.20 49.82Q297.70 49.62 298.04 49.35Q298.36 49.10 298.60 48.83Q298.84 48.55 298.96 48.32L298.96 41.77Q298.96 41.38 298.80 41.08Q298.64 40.78 298.34 40.57Q298.13 40.43 297.72 40.40Q297.30 40.37 296.79 40.35L296.79 39.59L300.98 39.30L301.16 39.47L301.16 48.64Q301.16 49.04 301.32 49.32Q301.48 49.61 301.78 49.80Q301.99 49.93 302.28 49.97Q302.57 50.02 302.93 50.03ZM313.19 40.93Q313.19 41.53 312.90 41.99Q312.61 42.46 312.00 42.46Q311.34 42.46 310.99 42.12Q310.65 41.78 310.65 41.37Q310.65 41.11 310.69 40.90Q310.73 40.69 310.77 40.48Q310.21 40.48 309.48 40.92Q308.74 41.37 308.22 42.19L308.22 48.91Q308.22 49.32 308.38 49.58Q308.54 49.84 308.88 49.97Q309.17 50.09 309.63 50.14Q310.10 50.20 310.44 50.23L310.44 51.00L304.34 51.00L304.34 50.23Q304.61 50.20 304.90 50.18Q305.19 50.16 305.40 50.09Q305.73 49.98 305.88 49.72Q306.04 49.45 306.04 49.03L306.04 41.89Q306.04 41.53 305.87 41.18Q305.70 40.83 305.40 40.62Q305.18 40.48 304.87 40.41Q304.57 40.35 304.21 40.32L304.21 39.56L308.06 39.30L308.22 39.47L308.22 41.10L308.28 41.10Q309.01 40.15 309.90 39.66Q310.79 39.16 311.53 39.16Q312.27 39.16 312.73 39.64Q313.19 40.12 313.19 40.93ZM327.59 45.34Q328.07 45.76 328.33 46.31Q328.59 46.86 328.59 47.66Q328.59 49.27 327.39 50.29Q326.19 51.30 324.28 51.30Q323.27 51.30 322.42 50.94Q321.57 50.58 321.21 50.27L320.97 51.04L320.09 51.04L319.98 47.02L320.79 47.02Q320.88 47.47 321.18 48.08Q321.49 48.69 321.92 49.18Q322.38 49.70 323.02 50.05Q323.66 50.40 324.45 50.40Q325.58 50.40 326.19 49.89Q326.80 49.38 326.80 48.43Q326.80 47.94 326.60 47.58Q326.41 47.23 326.04 46.96Q325.65 46.69 325.09 46.47Q324.52 46.25 323.83 46.04Q323.28 45.88 322.61 45.59Q321.93 45.30 321.45 44.92Q320.94 44.51 320.61 43.91Q320.28 43.31 320.28 42.50Q320.28 41.09 321.34 40.10Q322.39 39.12 324.16 39.12Q324.84 39.12 325.55 39.29Q326.26 39.47 326.70 39.71L326.97 39.11L327.82 39.11L327.99 42.82L327.18 42.82Q326.94 41.58 326.12 40.80Q325.31 40.02 324.14 40.02Q323.18 40.02 322.62 40.50Q322.07 40.98 322.07 41.66Q322.07 42.19 322.26 42.54Q322.44 42.89 322.80 43.14Q323.15 43.37 323.69 43.58Q324.22 43.78 325.00 44.04Q325.78 44.29 326.46 44.61Q327.15 44.94 327.59 45.34ZM340.60 48.28Q339.88 49.66 338.66 50.48Q337.44 51.30 335.86 51.30Q334.46 51.30 333.41 50.81Q332.36 50.32 331.68 49.48Q331.00 48.63 330.67 47.51Q330.34 46.38 330.34 45.13Q330.34 44.00 330.69 42.92Q331.05 41.84 331.74 40.97Q332.41 40.14 333.40 39.63Q334.39 39.12 335.62 39.12Q336.89 39.12 337.79 39.52Q338.69 39.91 339.25 40.61Q339.79 41.26 340.06 42.15Q340.32 43.04 340.32 44.09L340.32 44.86L332.67 44.86Q332.67 46.00 332.88 46.92Q333.10 47.85 333.57 48.55Q334.03 49.23 334.77 49.62Q335.50 50.02 336.52 50.02Q337.57 50.02 338.32 49.53Q339.08 49.04 339.78 47.78ZM338.01 43.88Q338.01 43.22 337.90 42.47Q337.79 41.72 337.54 41.21Q337.27 40.68 336.80 40.34Q336.34 40.00 335.60 40.00Q334.37 40.00 333.55 41.02Q332.74 42.05 332.67 43.88ZM349.57 45.34Q350.05 45.76 350.30 46.31Q350.56 46.86 350.56 47.66Q350.56 49.27 349.36 50.29Q348.16 51.30 346.25 51.30Q345.24 51.30 344.39 50.94Q343.54 50.58 343.18 50.27L342.95 51.04L342.07 51.04L341.95 47.02L342.76 47.02Q342.85 47.47 343.16 48.08Q343.46 48.69 343.89 49.18Q344.35 49.70 344.99 50.05Q345.63 50.40 346.43 50.40Q347.55 50.40 348.16 49.89Q348.77 49.38 348.77 48.43Q348.77 47.94 348.58 47.58Q348.38 47.23 348.01 46.96Q347.62 46.69 347.06 46.47Q346.50 46.25 345.80 46.04Q345.25 45.88 344.58 45.59Q343.91 45.30 343.43 44.92Q342.91 44.51 342.58 43.91Q342.25 43.31 342.25 42.50Q342.25 41.09 343.31 40.10Q344.36 39.12 346.13 39.12Q346.81 39.12 347.52 39.29Q348.23 39.47 348.68 39.71L348.95 39.11L349.79 39.11L349.96 42.82L349.16 42.82Q348.91 41.58 348.10 40.80Q347.28 40.02 346.11 40.02Q345.15 40.02 344.60 40.50Q344.05 40.98 344.05 41.66Q344.05 42.19 344.23 42.54Q344.41 42.89 344.77 43.14Q345.12 43.37 345.66 43.58Q346.19 43.78 346.98 44.04Q347.75 44.29 348.44 44.61Q349.12 44.94 349.57 45.34ZM359.94 45.34Q360.42 45.76 360.68 46.31Q360.93 46.86 360.93 47.66Q360.93 49.27 359.73 50.29Q358.53 51.30 356.62 51.30Q355.61 51.30 354.76 50.94Q353.91 50.58 353.55 50.27L353.32 51.04L352.44 51.04L352.32 47.02L353.13 47.02Q353.22 47.47 353.53 48.08Q353.83 48.69 354.27 49.18Q354.72 49.70 355.36 50.05Q356.00 50.40 356.80 50.40Q357.92 50.40 358.53 49.89Q359.14 49.38 359.14 48.43Q359.14 47.94 358.95 47.58Q358.75 47.23 358.38 46.96Q357.99 46.69 357.43 46.47Q356.87 46.25 356.18 46.04Q355.62 45.88 354.95 45.59Q354.28 45.30 353.80 44.92Q353.28 44.51 352.95 43.91Q352.62 43.31 352.62 42.50Q352.62 41.09 353.68 40.10Q354.73 39.12 356.50 39.12Q357.18 39.12 357.89 39.29Q358.60 39.47 359.05 39.71L359.32 39.11L360.16 39.11L360.34 42.82L359.53 42.82Q359.28 41.58 358.47 40.80Q357.65 40.02 356.48 40.02Q355.52 40.02 354.97 40.50Q354.42 40.98 354.42 41.66Q354.42 42.19 354.60 42.54Q354.78 42.89 355.14 43.14Q355.50 43.37 356.03 43.58Q356.56 43.78 357.35 44.04Q358.12 44.29 358.81 44.61Q359.49 44.94 359.94 45.34ZM368.29 51.00L362.70 51.00L362.70 50.23Q362.97 50.20 363.26 50.18Q363.55 50.16 363.76 50.09Q364.09 49.98 364.24 49.72Q364.40 49.45 364.40 49.03L364.40 41.89Q364.40 41.52 364.23 41.21Q364.06 40.90 363.76 40.69Q363.54 40.55 363.11 40.45Q362.69 40.35 362.34 40.32L362.34 39.56L366.42 39.30L366.58 39.47L366.58 48.89Q366.58 49.30 366.74 49.57Q366.90 49.84 367.24 49.97Q367.50 50.07 367.74 50.14Q367.99 50.20 368.29 50.23ZM366.82 34.75Q366.82 35.41 366.38 35.91Q365.94 36.41 365.29 36.41Q364.70 36.41 364.26 35.94Q363.82 35.46 363.82 34.85Q363.82 34.21 364.26 33.73Q364.70 33.25 365.29 33.25Q365.96 33.25 366.39 33.70Q366.82 34.15 366.82 34.75ZM380.97 45.11Q380.97 46.32 380.59 47.50Q380.20 48.68 379.48 49.50Q378.68 50.44 377.61 50.89Q376.54 51.35 375.22 51.35Q374.12 51.35 373.12 50.94Q372.12 50.52 371.35 49.72Q370.59 48.94 370.14 47.81Q369.69 46.68 369.69 45.27Q369.69 42.56 371.26 40.84Q372.84 39.12 375.39 39.12Q377.82 39.12 379.40 40.75Q380.97 42.39 380.97 45.11ZM378.55 45.13Q378.55 44.25 378.37 43.27Q378.20 42.29 377.84 41.61Q377.47 40.89 376.86 40.45Q376.25 40.01 375.37 40.01Q374.47 40.01 373.83 40.45Q373.19 40.90 372.79 41.67Q372.42 42.39 372.27 43.30Q372.11 44.21 372.11 45.07Q372.11 46.20 372.29 47.15Q372.48 48.11 372.88 48.86Q373.27 49.61 373.88 50.03Q374.48 50.46 375.37 50.46Q376.84 50.46 377.69 49.04Q378.55 47.62 378.55 45.13ZM395.41 51.00L389.75 51.00L389.75 50.23Q390.02 50.20 390.34 50.18Q390.66 50.16 390.88 50.09Q391.20 49.98 391.36 49.72Q391.52 49.45 391.52 49.03L391.52 43.09Q391.52 41.86 390.94 41.19Q390.36 40.52 389.53 40.52Q388.91 40.52 388.39 40.72Q387.88 40.91 387.48 41.19Q387.09 41.46 386.86 41.77Q386.63 42.08 386.53 42.27L386.53 48.91Q386.53 49.31 386.69 49.57Q386.86 49.83 387.18 49.97Q387.43 50.09 387.72 50.14Q388.00 50.20 388.31 50.23L388.31 51.00L382.65 51.00L382.65 50.23Q382.92 50.20 383.21 50.18Q383.49 50.16 383.70 50.09Q384.03 49.98 384.19 49.72Q384.35 49.45 384.35 49.03L384.35 41.89Q384.35 41.50 384.18 41.16Q384.01 40.83 383.70 40.62Q383.48 40.48 383.18 40.41Q382.87 40.35 382.52 40.32L382.52 39.56L386.36 39.30L386.53 39.47L386.53 41.10L386.59 41.10Q386.87 40.82 387.29 40.42Q387.71 40.03 388.09 39.79Q388.52 39.50 389.12 39.32Q389.71 39.13 390.46 39.13Q392.13 39.13 392.93 40.17Q393.73 41.20 393.73 42.93L393.73 48.94Q393.73 49.35 393.88 49.60Q394.02 49.85 394.36 49.99Q394.64 50.11 394.84 50.16Q395.05 50.20 395.41 50.23Z" fill="#253047"/>
+<path d="M32.86 68.43L32.86 77.00L38.79 77.00L38.79 76.15L33.84 76.15L33.84 68.43L32.86 68.43ZM40.59 68.46C40.39 68.46 40.22 68.52 40.08 68.66C39.93 68.78 39.87 68.95 39.87 69.16C39.87 69.37 39.93 69.54 40.08 69.68C40.22 69.81 40.39 69.88 40.59 69.88C40.80 69.88 40.96 69.81 41.11 69.68C41.25 69.54 41.32 69.37 41.32 69.16C41.32 68.95 41.25 68.78 41.11 68.66C40.96 68.52 40.80 68.46 40.59 68.46ZM40.11 70.80L40.11 77.00L41.07 77.00L41.07 70.80L40.11 70.80ZM45.78 70.63C45.37 70.63 45.00 70.72 44.66 70.92C44.32 71.10 44.05 71.36 43.83 71.71L43.83 70.80L42.87 70.80L42.87 77.00L43.83 77.00L43.83 73.26C43.87 72.69 44.05 72.25 44.38 71.91C44.70 71.60 45.07 71.44 45.50 71.44C46.58 71.44 47.13 72.04 47.13 73.26L47.13 77.00L48.09 77.00L48.09 73.18C48.09 71.48 47.31 70.63 45.78 70.63ZM49.58 68.26L49.58 77.00L50.54 77.00L50.54 74.80L51.52 73.92L53.95 77.00L55.18 77.00L52.18 73.29L54.92 70.80L53.65 70.80L50.54 73.68L50.54 68.26L49.58 68.26ZM58.48 70.63C57.58 70.63 56.88 70.95 56.35 71.60C55.82 72.21 55.57 72.98 55.57 73.89C55.57 74.90 55.83 75.69 56.38 76.29C56.91 76.87 57.63 77.17 58.52 77.17C59.32 77.17 59.98 76.93 60.50 76.47C60.92 76.09 61.20 75.61 61.34 75.01L60.38 75.01C60.22 75.44 60.02 75.76 59.76 75.98C59.44 76.23 59.02 76.36 58.52 76.36C57.93 76.36 57.46 76.17 57.13 75.79C56.79 75.40 56.61 74.86 56.56 74.17L61.46 74.17C61.44 73.09 61.20 72.24 60.74 71.64C60.24 70.96 59.48 70.63 58.48 70.63ZM58.51 71.43C59.68 71.43 60.34 72.09 60.46 73.42L56.59 73.42C56.65 72.81 56.84 72.33 57.18 71.97C57.51 71.61 57.96 71.43 58.51 71.43ZM67.17 68.26L67.17 71.94C66.69 71.06 66.01 70.63 65.12 70.63C64.23 70.63 63.55 70.95 63.04 71.62C62.58 72.22 62.35 72.97 62.35 73.88C62.35 74.82 62.58 75.58 63.04 76.18C63.55 76.83 64.26 77.17 65.17 77.17C66.10 77.17 66.80 76.77 67.23 75.98L67.23 77.00L68.13 77.00L68.13 68.26L67.17 68.26ZM65.32 71.42C65.88 71.42 66.33 71.64 66.68 72.09C67.02 72.54 67.20 73.12 67.20 73.84L67.20 73.96C67.20 74.66 67.04 75.22 66.74 75.66C66.39 76.14 65.91 76.38 65.29 76.38C64.62 76.38 64.11 76.12 63.78 75.64C63.48 75.21 63.33 74.62 63.33 73.88C63.33 73.14 63.48 72.56 63.79 72.14C64.12 71.66 64.64 71.42 65.32 71.42ZM76.58 70.63C75.64 70.63 74.96 71.02 74.52 71.82L74.52 70.80L73.62 70.80L73.62 79.38L74.58 79.38L74.58 75.87C75.06 76.74 75.74 77.17 76.63 77.17C77.52 77.17 78.20 76.83 78.70 76.18C79.16 75.58 79.40 74.83 79.40 73.92C79.40 72.98 79.16 72.22 78.69 71.62C78.18 70.95 77.47 70.63 76.58 70.63ZM76.46 71.42C77.12 71.42 77.62 71.66 77.97 72.16C78.26 72.60 78.42 73.18 78.42 73.92C78.42 74.66 78.26 75.25 77.95 75.68C77.60 76.14 77.10 76.38 76.42 76.38C75.85 76.38 75.40 76.15 75.07 75.72C74.71 75.27 74.54 74.70 74.54 73.98L74.54 73.86C74.54 73.16 74.70 72.58 75.01 72.15C75.34 71.66 75.84 71.42 76.46 71.42ZM80.65 70.80L80.65 74.64C80.65 76.32 81.39 77.17 82.90 77.17C83.74 77.17 84.42 76.78 84.92 76.04L84.92 77.00L85.88 77.00L85.88 70.80L84.92 70.80L84.92 74.58C84.85 75.10 84.64 75.54 84.31 75.87C83.98 76.18 83.61 76.35 83.20 76.35C82.64 76.35 82.23 76.20 81.98 75.91C81.73 75.62 81.61 75.18 81.61 74.59L81.61 70.80L80.65 70.80ZM87.56 68.26L87.56 77.00L88.51 77.00L88.51 68.26L87.56 68.26ZM90.38 68.26L90.38 77.00L91.33 77.00L91.33 68.26L90.38 68.26ZM99.73 70.63C99.30 70.63 98.92 70.76 98.60 71.02C98.34 71.23 98.12 71.52 97.95 71.88L97.95 70.80L97.00 70.80L97.00 77.00L97.95 77.00L97.95 73.71C97.95 73.14 98.11 72.64 98.44 72.24C98.77 71.80 99.18 71.60 99.66 71.60C99.96 71.60 100.27 71.64 100.58 71.73L100.58 70.77C100.35 70.68 100.06 70.63 99.73 70.63ZM103.94 70.63C103.04 70.63 102.33 70.95 101.80 71.60C101.28 72.21 101.02 72.98 101.02 73.89C101.02 74.90 101.29 75.69 101.84 76.29C102.37 76.87 103.09 77.17 103.98 77.17C104.78 77.17 105.44 76.93 105.96 76.47C106.38 76.09 106.65 75.61 106.80 75.01L105.84 75.01C105.68 75.44 105.48 75.76 105.21 75.98C104.90 76.23 104.48 76.36 103.98 76.36C103.39 76.36 102.92 76.17 102.58 75.79C102.25 75.40 102.07 74.86 102.02 74.17L106.92 74.17C106.89 73.09 106.65 72.24 106.20 71.64C105.69 70.96 104.94 70.63 103.94 70.63ZM103.96 71.43C105.14 71.43 105.80 72.09 105.92 73.42L102.04 73.42C102.10 72.81 102.30 72.33 102.63 71.97C102.97 71.61 103.41 71.43 103.96 71.43ZM110.62 70.63C109.71 70.63 109.00 70.95 108.50 71.62C108.03 72.22 107.80 72.98 107.80 73.92C107.80 74.83 108.03 75.58 108.49 76.18C108.99 76.83 109.69 77.17 110.58 77.17C111.46 77.17 112.15 76.74 112.63 75.87L112.63 79.38L113.59 79.38L113.59 70.80L112.69 70.80L112.69 71.82C112.23 71.02 111.55 70.63 110.62 70.63ZM110.74 71.42C111.37 71.42 111.85 71.66 112.20 72.15C112.50 72.58 112.65 73.16 112.65 73.86L112.65 73.98C112.65 74.70 112.47 75.27 112.14 75.72C111.79 76.15 111.33 76.38 110.78 76.38C110.11 76.38 109.59 76.14 109.26 75.68C108.94 75.25 108.79 74.66 108.79 73.92C108.79 73.18 108.93 72.60 109.23 72.16C109.57 71.66 110.07 71.42 110.74 71.42ZM115.08 70.80L115.08 74.64C115.08 76.32 115.82 77.17 117.33 77.17C118.17 77.17 118.84 76.78 119.35 76.04L119.35 77.00L120.31 77.00L120.31 70.80L119.35 70.80L119.35 74.58C119.28 75.10 119.07 75.54 118.74 75.87C118.41 76.18 118.04 76.35 117.63 76.35C117.07 76.35 116.66 76.20 116.41 75.91C116.16 75.62 116.04 75.18 116.04 74.59L116.04 70.80L115.08 70.80ZM124.35 70.63C123.45 70.63 122.74 70.95 122.22 71.60C121.69 72.21 121.44 72.98 121.44 73.89C121.44 74.90 121.70 75.69 122.25 76.29C122.78 76.87 123.50 77.17 124.39 77.17C125.19 77.17 125.85 76.93 126.37 76.47C126.79 76.09 127.06 75.61 127.21 75.01L126.25 75.01C126.09 75.44 125.89 75.76 125.62 75.98C125.31 76.23 124.89 76.36 124.39 76.36C123.80 76.36 123.33 76.17 123.00 75.79C122.66 75.40 122.48 74.86 122.43 74.17L127.33 74.17C127.30 73.09 127.06 72.24 126.61 71.64C126.10 70.96 125.35 70.63 124.35 70.63ZM124.38 71.43C125.55 71.43 126.21 72.09 126.33 73.42L122.46 73.42C122.52 72.81 122.71 72.33 123.04 71.97C123.38 71.61 123.82 71.43 124.38 71.43ZM130.65 70.63C129.96 70.63 129.38 70.78 128.95 71.10C128.48 71.41 128.25 71.82 128.25 72.34C128.25 72.87 128.48 73.27 128.96 73.56C129.25 73.75 129.76 73.93 130.50 74.11C131.17 74.28 131.61 74.41 131.82 74.50C132.20 74.70 132.40 74.96 132.40 75.31C132.40 76.00 131.84 76.36 130.74 76.36C130.21 76.36 129.81 76.27 129.55 76.08C129.28 75.86 129.10 75.51 129.03 75.02L128.10 75.02C128.24 76.45 129.13 77.17 130.76 77.17C132.51 77.17 133.39 76.52 133.39 75.25C133.39 74.71 133.14 74.29 132.64 73.98C132.32 73.77 131.79 73.58 131.05 73.40C130.42 73.23 129.99 73.10 129.76 72.99C129.40 72.81 129.24 72.58 129.24 72.32C129.24 72.04 129.37 71.83 129.63 71.67C129.87 71.50 130.21 71.43 130.64 71.43C131.13 71.43 131.52 71.53 131.78 71.72C132.02 71.89 132.18 72.18 132.26 72.56L133.20 72.56C133.03 71.26 132.19 70.63 130.65 70.63ZM136.17 68.79L135.22 69.19L135.22 70.80L133.98 70.80L133.98 71.60L135.22 71.60L135.22 75.55C135.22 76.02 135.32 76.36 135.52 76.60C135.74 76.87 136.11 77.00 136.62 77.00L137.55 77.00L137.55 76.20L136.76 76.20C136.54 76.20 136.39 76.14 136.30 76.04C136.21 75.94 136.17 75.78 136.17 75.55L136.17 71.60L137.71 71.60L137.71 70.80L136.17 70.80L136.17 68.79ZM140.97 70.63C140.28 70.63 139.70 70.78 139.27 71.10C138.80 71.41 138.57 71.82 138.57 72.34C138.57 72.87 138.80 73.27 139.28 73.56C139.57 73.75 140.08 73.93 140.82 74.11C141.49 74.28 141.93 74.41 142.14 74.50C142.52 74.70 142.72 74.96 142.72 75.31C142.72 76.00 142.16 76.36 141.06 76.36C140.53 76.36 140.13 76.27 139.87 76.08C139.60 75.86 139.42 75.51 139.35 75.02L138.42 75.02C138.56 76.45 139.45 77.17 141.08 77.17C142.83 77.17 143.71 76.52 143.71 75.25C143.71 74.71 143.46 74.29 142.96 73.98C142.64 73.77 142.11 73.58 141.37 73.40C140.74 73.23 140.31 73.10 140.08 72.99C139.72 72.81 139.56 72.58 139.56 72.32C139.56 72.04 139.69 71.83 139.95 71.67C140.19 71.50 140.53 71.43 140.96 71.43C141.45 71.43 141.84 71.53 142.10 71.72C142.34 71.89 142.50 72.18 142.58 72.56L143.52 72.56C143.35 71.26 142.51 70.63 140.97 70.63ZM145.68 75.57C145.44 75.57 145.26 75.63 145.12 75.78C144.97 75.91 144.90 76.09 144.90 76.32C144.90 76.52 144.97 76.70 145.11 76.84C145.26 76.99 145.42 77.06 145.63 77.06C145.75 77.06 145.83 77.04 145.89 77.01C145.89 77.30 145.80 77.56 145.63 77.82C145.44 78.06 145.17 78.24 144.86 78.34L144.86 78.93C145.38 78.80 145.80 78.54 146.11 78.15C146.42 77.74 146.58 77.28 146.58 76.75C146.58 76.40 146.49 76.12 146.34 75.91C146.17 75.68 145.94 75.57 145.68 75.57ZM154.68 70.63C153.75 70.63 153.02 70.95 152.49 71.61C152.00 72.21 151.76 72.98 151.76 73.93C151.76 74.88 152.00 75.64 152.49 76.23C153.01 76.86 153.73 77.17 154.66 77.17C155.43 77.17 156.04 76.96 156.51 76.57C156.99 76.16 157.29 75.55 157.44 74.76L156.48 74.76C156.33 75.82 155.72 76.36 154.66 76.36C154.04 76.36 153.56 76.14 153.24 75.70C152.90 75.27 152.74 74.67 152.74 73.92C152.74 73.16 152.91 72.56 153.25 72.12C153.60 71.66 154.08 71.43 154.68 71.43C155.17 71.43 155.56 71.54 155.88 71.78C156.18 72.02 156.37 72.38 156.45 72.86L157.40 72.86C157.29 72.10 157.00 71.54 156.52 71.17C156.06 70.81 155.44 70.63 154.68 70.63ZM158.56 68.26L158.56 77.00L159.52 77.00L159.52 73.46C159.52 72.88 159.68 72.39 160.00 72.01C160.32 71.62 160.71 71.43 161.19 71.43C161.71 71.43 162.10 71.59 162.39 71.90C162.66 72.21 162.80 72.66 162.80 73.23L162.80 77.00L163.76 77.00L163.76 73.09C163.76 72.30 163.57 71.68 163.18 71.26C162.80 70.83 162.24 70.63 161.52 70.63C161.10 70.63 160.72 70.72 160.39 70.92C160.03 71.12 159.74 71.42 159.52 71.82L159.52 68.26L158.56 68.26ZM167.79 70.63C166.89 70.63 166.18 70.95 165.66 71.60C165.13 72.21 164.88 72.98 164.88 73.89C164.88 74.90 165.14 75.69 165.69 76.29C166.22 76.87 166.94 77.17 167.83 77.17C168.63 77.17 169.29 76.93 169.81 76.47C170.23 76.09 170.50 75.61 170.65 75.01L169.69 75.01C169.53 75.44 169.33 75.76 169.06 75.98C168.75 76.23 168.33 76.36 167.83 76.36C167.24 76.36 166.77 76.17 166.44 75.79C166.10 75.40 165.92 74.86 165.87 74.17L170.77 74.17C170.74 73.09 170.50 72.24 170.05 71.64C169.54 70.96 168.79 70.63 167.79 70.63ZM167.82 71.43C168.99 71.43 169.65 72.09 169.77 73.42L165.90 73.42C165.96 72.81 166.15 72.33 166.48 71.97C166.82 71.61 167.26 71.43 167.82 71.43ZM174.57 70.63C173.65 70.63 172.92 70.95 172.39 71.61C171.90 72.21 171.66 72.98 171.66 73.93C171.66 74.88 171.90 75.64 172.39 76.23C172.90 76.86 173.62 77.17 174.56 77.17C175.33 77.17 175.94 76.96 176.41 76.57C176.89 76.16 177.19 75.55 177.33 74.76L176.37 74.76C176.23 75.82 175.62 76.36 174.56 76.36C173.94 76.36 173.46 76.14 173.13 75.70C172.80 75.27 172.64 74.67 172.64 73.92C172.64 73.16 172.81 72.56 173.14 72.12C173.49 71.66 173.97 71.43 174.57 71.43C175.06 71.43 175.46 71.54 175.77 71.78C176.07 72.02 176.26 72.38 176.35 72.86L177.30 72.86C177.19 72.10 176.90 71.54 176.42 71.17C175.95 70.81 175.34 70.63 174.57 70.63ZM178.46 68.26L178.46 77.00L179.42 77.00L179.42 74.80L180.40 73.92L182.83 77.00L184.06 77.00L181.06 73.29L183.80 70.80L182.53 70.80L179.42 73.68L179.42 68.26L178.46 68.26ZM187.00 70.63C186.31 70.63 185.73 70.78 185.30 71.10C184.83 71.41 184.60 71.82 184.60 72.34C184.60 72.87 184.83 73.27 185.31 73.56C185.60 73.75 186.12 73.93 186.85 74.11C187.52 74.28 187.96 74.41 188.17 74.50C188.55 74.70 188.76 74.96 188.76 75.31C188.76 76.00 188.19 76.36 187.09 76.36C186.56 76.36 186.16 76.27 185.90 76.08C185.64 75.86 185.46 75.51 185.38 75.02L184.45 75.02C184.59 76.45 185.48 77.17 187.11 77.17C188.86 77.17 189.74 76.52 189.74 75.25C189.74 74.71 189.49 74.29 189.00 73.98C188.67 73.77 188.14 73.58 187.40 73.40C186.78 73.23 186.34 73.10 186.12 72.99C185.76 72.81 185.59 72.58 185.59 72.32C185.59 72.04 185.72 71.83 185.98 71.67C186.22 71.50 186.56 71.43 186.99 71.43C187.48 71.43 187.87 71.53 188.13 71.72C188.37 71.89 188.53 72.18 188.61 72.56L189.55 72.56C189.38 71.26 188.54 70.63 187.00 70.63ZM191.71 75.57C191.47 75.57 191.29 75.63 191.16 75.78C191.00 75.91 190.93 76.09 190.93 76.32C190.93 76.52 191.00 76.70 191.14 76.84C191.29 76.99 191.46 77.06 191.66 77.06C191.78 77.06 191.86 77.04 191.92 77.01C191.92 77.30 191.83 77.56 191.66 77.82C191.47 78.06 191.20 78.24 190.89 78.34L190.89 78.93C191.41 78.80 191.83 78.54 192.14 78.15C192.45 77.74 192.61 77.28 192.61 76.75C192.61 76.40 192.52 76.12 192.37 75.91C192.20 75.68 191.97 75.57 191.71 75.57ZM200.76 70.63C200.32 70.63 199.95 70.76 199.63 71.02C199.36 71.23 199.15 71.52 198.98 71.88L198.98 70.80L198.03 70.80L198.03 77.00L198.98 77.00L198.98 73.71C198.98 73.14 199.14 72.64 199.47 72.24C199.80 71.80 200.20 71.60 200.68 71.60C200.98 71.60 201.30 71.64 201.61 71.73L201.61 70.77C201.38 70.68 201.09 70.63 200.76 70.63ZM204.97 70.63C204.07 70.63 203.36 70.95 202.83 71.60C202.30 72.21 202.05 72.98 202.05 73.89C202.05 74.90 202.32 75.69 202.87 76.29C203.40 76.87 204.12 77.17 205.00 77.17C205.81 77.17 206.47 76.93 206.98 76.47C207.40 76.09 207.68 75.61 207.82 75.01L206.86 75.01C206.71 75.44 206.50 75.76 206.24 75.98C205.93 76.23 205.51 76.36 205.00 76.36C204.42 76.36 203.95 76.17 203.61 75.79C203.28 75.40 203.10 74.86 203.05 74.17L207.94 74.17C207.92 73.09 207.68 72.24 207.22 71.64C206.72 70.96 205.96 70.63 204.97 70.63ZM204.99 71.43C206.17 71.43 206.83 72.09 206.95 73.42L203.07 73.42C203.13 72.81 203.32 72.33 203.66 71.97C204.00 71.61 204.44 71.43 204.99 71.43ZM208.39 70.80L210.73 77.00L211.70 77.00L214.05 70.80L213.00 70.80L211.22 75.80L209.44 70.80L208.39 70.80ZM215.65 68.46C215.44 68.46 215.28 68.52 215.13 68.66C214.99 68.78 214.93 68.95 214.93 69.16C214.93 69.37 214.99 69.54 215.13 69.68C215.28 69.81 215.44 69.88 215.65 69.88C215.85 69.88 216.02 69.81 216.16 69.68C216.31 69.54 216.38 69.37 216.38 69.16C216.38 68.95 216.31 68.78 216.16 68.66C216.02 68.52 215.85 68.46 215.65 68.46ZM215.17 70.80L215.17 77.00L216.13 77.00L216.13 70.80L215.17 70.80ZM220.48 70.63C219.58 70.63 218.88 70.95 218.35 71.60C217.82 72.21 217.57 72.98 217.57 73.89C217.57 74.90 217.83 75.69 218.38 76.29C218.91 76.87 219.63 77.17 220.52 77.17C221.32 77.17 221.98 76.93 222.50 76.47C222.92 76.09 223.20 75.61 223.34 75.01L222.38 75.01C222.22 75.44 222.02 75.76 221.76 75.98C221.44 76.23 221.02 76.36 220.52 76.36C219.93 76.36 219.46 76.17 219.13 75.79C218.79 75.40 218.61 74.86 218.56 74.17L223.46 74.17C223.44 73.09 223.20 72.24 222.74 71.64C222.24 70.96 221.48 70.63 220.48 70.63ZM220.51 71.43C221.68 71.43 222.34 72.09 222.46 73.42L218.59 73.42C218.65 72.81 218.84 72.33 219.18 71.97C219.51 71.61 219.96 71.43 220.51 71.43ZM223.90 70.80L226.02 77.00L226.92 77.00L228.38 72.01L229.82 77.00L230.73 77.00L232.84 70.80L231.79 70.80L230.26 75.82L228.82 70.80L227.92 70.80L226.48 75.82L224.96 70.80L223.90 70.80ZM235.84 70.63C235.15 70.63 234.57 70.78 234.14 71.10C233.67 71.41 233.44 71.82 233.44 72.34C233.44 72.87 233.67 73.27 234.15 73.56C234.44 73.75 234.96 73.93 235.69 74.11C236.36 74.28 236.80 74.41 237.01 74.50C237.39 74.70 237.60 74.96 237.60 75.31C237.60 76.00 237.03 76.36 235.93 76.36C235.40 76.36 235.00 76.27 234.74 76.08C234.48 75.86 234.30 75.51 234.22 75.02L233.29 75.02C233.43 76.45 234.32 77.17 235.95 77.17C237.70 77.17 238.58 76.52 238.58 75.25C238.58 74.71 238.33 74.29 237.84 73.98C237.51 73.77 236.98 73.58 236.24 73.40C235.62 73.23 235.18 73.10 234.96 72.99C234.60 72.81 234.43 72.58 234.43 72.32C234.43 72.04 234.56 71.83 234.82 71.67C235.06 71.50 235.40 71.43 235.83 71.43C236.32 71.43 236.71 71.53 236.97 71.72C237.21 71.89 237.37 72.18 237.45 72.56L238.39 72.56C238.22 71.26 237.38 70.63 235.84 70.63ZM240.55 75.57C240.31 75.57 240.13 75.63 240.00 75.78C239.84 75.91 239.77 76.09 239.77 76.32C239.77 76.52 239.84 76.70 239.98 76.84C240.13 76.99 240.30 77.06 240.50 77.06C240.62 77.06 240.70 77.04 240.76 77.01C240.76 77.30 240.67 77.56 240.50 77.82C240.31 78.06 240.04 78.24 239.73 78.34L239.73 78.93C240.25 78.80 240.67 78.54 240.98 78.15C241.29 77.74 241.45 77.28 241.45 76.75C241.45 76.40 241.36 76.12 241.21 75.91C241.04 75.68 240.81 75.57 240.55 75.57ZM249.57 70.63C248.83 70.63 248.24 70.77 247.78 71.06C247.28 71.37 246.96 71.86 246.82 72.51L247.77 72.58C247.87 72.19 248.07 71.89 248.40 71.70C248.68 71.50 249.06 71.42 249.51 71.42C250.59 71.42 251.13 71.94 251.13 72.98L251.13 73.30L249.64 73.33C248.71 73.34 247.99 73.52 247.48 73.86C246.91 74.22 246.63 74.74 246.63 75.45C246.63 75.96 246.82 76.38 247.21 76.70C247.58 77.01 248.07 77.17 248.70 77.17C249.27 77.17 249.79 77.04 250.24 76.78C250.63 76.57 250.95 76.29 251.19 75.96L251.19 77.00L252.09 77.00L252.09 73.02C252.09 72.30 251.90 71.73 251.54 71.32C251.11 70.86 250.46 70.63 249.57 70.63ZM251.13 74.02L251.13 74.55C251.13 75.03 250.90 75.46 250.46 75.84C250.00 76.22 249.49 76.41 248.90 76.41C248.52 76.41 248.20 76.32 247.96 76.14C247.72 75.94 247.62 75.72 247.62 75.43C247.62 74.53 248.31 74.07 249.70 74.05L251.13 74.02ZM256.48 70.63C256.08 70.63 255.70 70.72 255.37 70.92C255.03 71.10 254.76 71.36 254.54 71.71L254.54 70.80L253.58 70.80L253.58 77.00L254.54 77.00L254.54 73.26C254.58 72.69 254.76 72.25 255.09 71.91C255.40 71.60 255.78 71.44 256.21 71.44C257.29 71.44 257.84 72.04 257.84 73.26L257.84 77.00L258.80 77.00L258.80 73.18C258.80 71.48 258.02 70.63 256.48 70.63ZM264.87 68.26L264.87 71.94C264.39 71.06 263.71 70.63 262.82 70.63C261.93 70.63 261.25 70.95 260.74 71.62C260.28 72.22 260.05 72.97 260.05 73.88C260.05 74.82 260.28 75.58 260.74 76.18C261.25 76.83 261.96 77.17 262.87 77.17C263.80 77.17 264.50 76.77 264.93 75.98L264.93 77.00L265.83 77.00L265.83 68.26L264.87 68.26ZM263.02 71.42C263.58 71.42 264.03 71.64 264.38 72.09C264.72 72.54 264.90 73.12 264.90 73.84L264.90 73.96C264.90 74.66 264.74 75.22 264.44 75.66C264.09 76.14 263.61 76.38 262.99 76.38C262.32 76.38 261.81 76.12 261.48 75.64C261.18 75.21 261.03 74.62 261.03 73.88C261.03 73.14 261.18 72.56 261.49 72.14C261.82 71.66 262.34 71.42 263.02 71.42ZM273.99 70.63C273.07 70.63 272.34 70.95 271.81 71.61C271.32 72.21 271.08 72.98 271.08 73.93C271.08 74.88 271.32 75.64 271.81 76.23C272.32 76.86 273.04 77.17 273.98 77.17C274.75 77.17 275.36 76.96 275.83 76.57C276.31 76.16 276.61 75.55 276.75 74.76L275.79 74.76C275.65 75.82 275.04 76.36 273.98 76.36C273.36 76.36 272.88 76.14 272.55 75.70C272.22 75.27 272.06 74.67 272.06 73.92C272.06 73.16 272.23 72.56 272.56 72.12C272.91 71.66 273.39 71.43 273.99 71.43C274.48 71.43 274.88 71.54 275.19 71.78C275.49 72.02 275.68 72.38 275.77 72.86L276.72 72.86C276.61 72.10 276.32 71.54 275.84 71.17C275.37 70.81 274.76 70.63 273.99 70.63ZM280.65 70.63C279.72 70.63 278.98 70.94 278.43 71.59C277.90 72.20 277.64 72.97 277.64 73.90C277.64 74.83 277.90 75.60 278.43 76.20C278.98 76.84 279.72 77.17 280.65 77.17C281.58 77.17 282.32 76.84 282.88 76.20C283.40 75.60 283.66 74.83 283.66 73.90C283.66 72.97 283.40 72.20 282.87 71.59C282.32 70.94 281.58 70.63 280.65 70.63ZM280.65 71.43C281.30 71.43 281.82 71.68 282.20 72.19C282.52 72.64 282.69 73.21 282.69 73.90C282.69 74.58 282.52 75.15 282.20 75.61C281.82 76.11 281.30 76.36 280.65 76.36C279.99 76.36 279.48 76.11 279.12 75.61C278.78 75.15 278.62 74.59 278.62 73.90C278.62 73.21 278.78 72.64 279.12 72.19C279.48 71.68 279.99 71.43 280.65 71.43ZM289.50 68.26L289.50 71.94C289.02 71.06 288.33 70.63 287.44 70.63C286.56 70.63 285.87 70.95 285.37 71.62C284.90 72.22 284.67 72.97 284.67 73.88C284.67 74.82 284.90 75.58 285.37 76.18C285.87 76.83 286.58 77.17 287.49 77.17C288.43 77.17 289.12 76.77 289.56 75.98L289.56 77.00L290.46 77.00L290.46 68.26L289.50 68.26ZM287.65 71.42C288.20 71.42 288.66 71.64 289.00 72.09C289.34 72.54 289.52 73.12 289.52 73.84L289.52 73.96C289.52 74.66 289.36 75.22 289.06 75.66C288.72 76.14 288.24 76.38 287.61 76.38C286.94 76.38 286.44 76.12 286.10 75.64C285.80 75.21 285.66 74.62 285.66 73.88C285.66 73.14 285.80 72.56 286.11 72.14C286.45 71.66 286.96 71.42 287.65 71.42ZM294.50 70.63C293.60 70.63 292.89 70.95 292.36 71.60C291.84 72.21 291.58 72.98 291.58 73.89C291.58 74.90 291.85 75.69 292.40 76.29C292.93 76.87 293.65 77.17 294.54 77.17C295.34 77.17 296.00 76.93 296.52 76.47C296.94 76.09 297.21 75.61 297.36 75.01L296.40 75.01C296.24 75.44 296.04 75.76 295.77 75.98C295.46 76.23 295.04 76.36 294.54 76.36C293.95 76.36 293.48 76.17 293.14 75.79C292.81 75.40 292.63 74.86 292.58 74.17L297.48 74.17C297.45 73.09 297.21 72.24 296.76 71.64C296.25 70.96 295.50 70.63 294.50 70.63ZM294.52 71.43C295.70 71.43 296.36 72.09 296.48 73.42L292.60 73.42C292.66 72.81 292.86 72.33 293.19 71.97C293.53 71.61 293.97 71.43 294.52 71.43ZM305.28 70.63C304.35 70.63 303.62 70.95 303.09 71.61C302.60 72.21 302.36 72.98 302.36 73.93C302.36 74.88 302.60 75.64 303.09 76.23C303.61 76.86 304.33 77.17 305.26 77.17C306.03 77.17 306.64 76.96 307.11 76.57C307.59 76.16 307.89 75.55 308.04 74.76L307.08 74.76C306.93 75.82 306.32 76.36 305.26 76.36C304.64 76.36 304.16 76.14 303.84 75.70C303.50 75.27 303.34 74.67 303.34 73.92C303.34 73.16 303.51 72.56 303.85 72.12C304.20 71.66 304.68 71.43 305.28 71.43C305.77 71.43 306.16 71.54 306.48 71.78C306.78 72.02 306.97 72.38 307.05 72.86L308.00 72.86C307.89 72.10 307.60 71.54 307.12 71.17C306.66 70.81 306.04 70.63 305.28 70.63ZM309.16 68.26L309.16 77.00L310.12 77.00L310.12 73.46C310.12 72.88 310.28 72.39 310.60 72.01C310.92 71.62 311.31 71.43 311.79 71.43C312.31 71.43 312.70 71.59 312.99 71.90C313.26 72.21 313.40 72.66 313.40 73.23L313.40 77.00L314.36 77.00L314.36 73.09C314.36 72.30 314.17 71.68 313.78 71.26C313.40 70.83 312.84 70.63 312.12 70.63C311.70 70.63 311.32 70.72 310.99 70.92C310.63 71.12 310.34 71.42 310.12 71.82L310.12 68.26L309.16 68.26ZM318.54 70.63C317.79 70.63 317.20 70.77 316.75 71.06C316.24 71.37 315.92 71.86 315.79 72.51L316.74 72.58C316.83 72.19 317.04 71.89 317.36 71.70C317.65 71.50 318.02 71.42 318.48 71.42C319.56 71.42 320.10 71.94 320.10 72.98L320.10 73.30L318.61 73.33C317.67 73.34 316.95 73.52 316.45 73.86C315.87 74.22 315.60 74.74 315.60 75.45C315.60 75.96 315.79 76.38 316.17 76.70C316.54 77.01 317.04 77.17 317.66 77.17C318.24 77.17 318.75 77.04 319.21 76.78C319.59 76.57 319.92 76.29 320.16 75.96L320.16 77.00L321.06 77.00L321.06 73.02C321.06 72.30 320.86 71.73 320.50 71.32C320.07 70.86 319.42 70.63 318.54 70.63ZM320.10 74.02L320.10 74.55C320.10 75.03 319.87 75.46 319.42 75.84C318.97 76.22 318.45 76.41 317.86 76.41C317.48 76.41 317.17 76.32 316.93 76.14C316.69 75.94 316.58 75.72 316.58 75.43C316.58 74.53 317.28 74.07 318.67 74.05L320.10 74.02ZM325.45 70.63C325.04 70.63 324.67 70.72 324.33 70.92C324.00 71.10 323.72 71.36 323.50 71.71L323.50 70.80L322.54 70.80L322.54 77.00L323.50 77.00L323.50 73.26C323.54 72.69 323.72 72.25 324.06 71.91C324.37 71.60 324.74 71.44 325.17 71.44C326.25 71.44 326.80 72.04 326.80 73.26L326.80 77.00L327.76 77.00L327.76 73.18C327.76 71.48 326.98 70.63 325.45 70.63ZM331.81 70.63C330.94 70.63 330.26 70.93 329.76 71.54C329.25 72.12 329.01 72.85 329.01 73.76C329.01 74.66 329.25 75.39 329.76 75.97C330.26 76.56 330.94 76.86 331.81 76.86C332.74 76.86 333.44 76.44 333.90 75.61L333.90 76.70C333.90 78.07 333.27 78.76 332.02 78.76C331.46 78.76 331.04 78.66 330.76 78.45C330.49 78.26 330.31 77.95 330.24 77.53L329.28 77.53C329.38 78.20 329.66 78.70 330.10 79.04C330.54 79.38 331.18 79.54 332.02 79.54C333.91 79.54 334.86 78.55 334.86 76.57L334.86 70.80L333.90 70.80L333.90 71.86C333.44 71.04 332.74 70.63 331.81 70.63ZM331.95 71.42C332.56 71.42 333.04 71.64 333.40 72.09C333.74 72.50 333.91 73.06 333.91 73.76C333.91 74.43 333.74 74.98 333.40 75.40C333.04 75.84 332.56 76.05 331.94 76.05C331.27 76.05 330.78 75.81 330.44 75.36C330.14 74.95 330.00 74.41 330.00 73.76C330.00 73.06 330.16 72.50 330.50 72.09C330.85 71.64 331.33 71.42 331.95 71.42ZM338.90 70.63C338.00 70.63 337.29 70.95 336.76 71.60C336.24 72.21 335.98 72.98 335.98 73.89C335.98 74.90 336.25 75.69 336.80 76.29C337.33 76.87 338.05 77.17 338.94 77.17C339.74 77.17 340.40 76.93 340.92 76.47C341.34 76.09 341.61 75.61 341.76 75.01L340.80 75.01C340.64 75.44 340.44 75.76 340.17 75.98C339.86 76.23 339.44 76.36 338.94 76.36C338.35 76.36 337.88 76.17 337.54 75.79C337.21 75.40 337.03 74.86 336.98 74.17L341.88 74.17C341.85 73.09 341.61 72.24 341.16 71.64C340.65 70.96 339.90 70.63 338.90 70.63ZM338.92 71.43C340.10 71.43 340.76 72.09 340.88 73.42L337.00 73.42C337.06 72.81 337.26 72.33 337.59 71.97C337.93 71.61 338.37 71.43 338.92 71.43ZM345.20 70.63C344.50 70.63 343.93 70.78 343.50 71.10C343.03 71.41 342.80 71.82 342.80 72.34C342.80 72.87 343.03 73.27 343.51 73.56C343.80 73.75 344.31 73.93 345.04 74.11C345.72 74.28 346.16 74.41 346.36 74.50C346.75 74.70 346.95 74.96 346.95 75.31C346.95 76.00 346.39 76.36 345.28 76.36C344.76 76.36 344.36 76.27 344.10 76.08C343.83 75.86 343.65 75.51 343.58 75.02L342.64 75.02C342.79 76.45 343.68 77.17 345.31 77.17C347.06 77.17 347.94 76.52 347.94 75.25C347.94 74.71 347.68 74.29 347.19 73.98C346.87 73.77 346.34 73.58 345.60 73.40C344.97 73.23 344.54 73.10 344.31 72.99C343.95 72.81 343.78 72.58 343.78 72.32C343.78 72.04 343.92 71.83 344.18 71.67C344.42 71.50 344.76 71.43 345.19 71.43C345.68 71.43 346.06 71.53 346.33 71.72C346.57 71.89 346.72 72.18 346.81 72.56L347.74 72.56C347.58 71.26 346.74 70.63 345.20 70.63ZM353.85 68.46C353.65 68.46 353.48 68.52 353.34 68.66C353.19 68.78 353.13 68.95 353.13 69.16C353.13 69.37 353.19 69.54 353.34 69.68C353.48 69.81 353.65 69.88 353.85 69.88C354.06 69.88 354.22 69.81 354.37 69.68C354.51 69.54 354.58 69.37 354.58 69.16C354.58 68.95 354.51 68.78 354.37 68.66C354.22 68.52 354.06 68.46 353.85 68.46ZM353.37 70.80L353.37 77.00L354.33 77.00L354.33 70.80L353.37 70.80ZM359.04 70.63C358.63 70.63 358.26 70.72 357.92 70.92C357.58 71.10 357.31 71.36 357.09 71.71L357.09 70.80L356.13 70.80L356.13 77.00L357.09 77.00L357.09 73.26C357.13 72.69 357.31 72.25 357.64 71.91C357.96 71.60 358.33 71.44 358.76 71.44C359.84 71.44 360.39 72.04 360.39 73.26L360.39 77.00L361.35 77.00L361.35 73.18C361.35 71.48 360.57 70.63 359.04 70.63ZM369.61 70.63C368.67 70.63 367.94 70.94 367.39 71.59C366.86 72.20 366.60 72.97 366.60 73.90C366.60 74.83 366.86 75.60 367.39 76.20C367.94 76.84 368.67 77.17 369.61 77.17C370.53 77.17 371.28 76.84 371.84 76.20C372.36 75.60 372.62 74.83 372.62 73.90C372.62 72.97 372.36 72.20 371.83 71.59C371.28 70.94 370.53 70.63 369.61 70.63ZM369.61 71.43C370.26 71.43 370.77 71.68 371.16 72.19C371.48 72.64 371.65 73.21 371.65 73.90C371.65 74.58 371.48 75.15 371.16 75.61C370.77 76.11 370.26 76.36 369.61 76.36C368.95 76.36 368.43 76.11 368.07 75.61C367.74 75.15 367.58 74.59 367.58 73.90C367.58 73.21 367.74 72.64 368.07 72.19C368.43 71.68 368.95 71.43 369.61 71.43ZM376.77 70.63C376.36 70.63 375.99 70.72 375.66 70.92C375.32 71.10 375.04 71.36 374.83 71.71L374.83 70.80L373.87 70.80L373.87 77.00L374.83 77.00L374.83 73.26C374.86 72.69 375.04 72.25 375.38 71.91C375.69 71.60 376.06 71.44 376.50 71.44C377.58 71.44 378.13 72.04 378.13 73.26L378.13 77.00L379.09 77.00L379.09 73.18C379.09 71.48 378.31 70.63 376.77 70.63ZM383.13 70.63C382.23 70.63 381.52 70.95 381.00 71.60C380.47 72.21 380.22 72.98 380.22 73.89C380.22 74.90 380.48 75.69 381.03 76.29C381.56 76.87 382.28 77.17 383.17 77.17C383.97 77.17 384.63 76.93 385.15 76.47C385.57 76.09 385.84 75.61 385.99 75.01L385.03 75.01C384.87 75.44 384.67 75.76 384.40 75.98C384.09 76.23 383.67 76.36 383.17 76.36C382.58 76.36 382.11 76.17 381.78 75.79C381.44 75.40 381.26 74.86 381.21 74.17L386.11 74.17C386.08 73.09 385.84 72.24 385.39 71.64C384.88 70.96 384.13 70.63 383.13 70.63ZM383.16 71.43C384.33 71.43 384.99 72.09 385.11 73.42L381.24 73.42C381.30 72.81 381.49 72.33 381.82 71.97C382.16 71.61 382.60 71.43 383.16 71.43ZM394.20 70.63C393.26 70.63 392.58 71.02 392.13 71.82L392.13 70.80L391.23 70.80L391.23 79.38L392.19 79.38L392.19 75.87C392.67 76.74 393.36 77.17 394.24 77.17C395.13 77.17 395.82 76.83 396.32 76.18C396.78 75.58 397.02 74.83 397.02 73.92C397.02 72.98 396.78 72.22 396.31 71.62C395.79 70.95 395.08 70.63 394.20 70.63ZM394.08 71.42C394.74 71.42 395.24 71.66 395.59 72.16C395.88 72.60 396.03 73.18 396.03 73.92C396.03 74.66 395.88 75.25 395.56 75.68C395.22 76.14 394.71 76.38 394.04 76.38C393.46 76.38 393.02 76.15 392.68 75.72C392.32 75.27 392.16 74.70 392.16 73.98L392.16 73.86C392.16 73.16 392.31 72.58 392.62 72.15C392.96 71.66 393.45 71.42 394.08 71.42ZM398.46 68.26L398.46 77.00L399.40 77.00L399.40 68.26L398.46 68.26ZM403.78 70.63C403.04 70.63 402.45 70.77 402.00 71.06C401.49 71.37 401.17 71.86 401.04 72.51L401.98 72.58C402.08 72.19 402.28 71.89 402.61 71.70C402.90 71.50 403.27 71.42 403.72 71.42C404.80 71.42 405.34 71.94 405.34 72.98L405.34 73.30L403.86 73.33C402.92 73.34 402.20 73.52 401.70 73.86C401.12 74.22 400.84 74.74 400.84 75.45C400.84 75.96 401.04 76.38 401.42 76.70C401.79 77.01 402.28 77.17 402.91 77.17C403.48 77.17 404.00 77.04 404.46 76.78C404.84 76.57 405.16 76.29 405.40 75.96L405.40 77.00L406.30 77.00L406.30 73.02C406.30 72.30 406.11 71.73 405.75 71.32C405.32 70.86 404.67 70.63 403.78 70.63ZM405.34 74.02L405.34 74.55C405.34 75.03 405.12 75.46 404.67 75.84C404.22 76.22 403.70 76.41 403.11 76.41C402.73 76.41 402.42 76.32 402.18 76.14C401.94 75.94 401.83 75.72 401.83 75.43C401.83 74.53 402.52 74.07 403.92 74.05L405.34 74.02ZM410.47 70.63C409.54 70.63 408.81 70.95 408.28 71.61C407.79 72.21 407.55 72.98 407.55 73.93C407.55 74.88 407.79 75.64 408.28 76.23C408.80 76.86 409.52 77.17 410.46 77.17C411.22 77.17 411.84 76.96 412.30 76.57C412.78 76.16 413.08 75.55 413.23 74.76L412.27 74.76C412.12 75.82 411.51 76.36 410.46 76.36C409.83 76.36 409.35 76.14 409.03 75.70C408.69 75.27 408.54 74.67 408.54 73.92C408.54 73.16 408.70 72.56 409.04 72.12C409.39 71.66 409.87 71.43 410.47 71.43C410.96 71.43 411.36 71.54 411.67 71.78C411.97 72.02 412.16 72.38 412.24 72.86L413.19 72.86C413.08 72.10 412.80 71.54 412.32 71.17C411.85 70.81 411.24 70.63 410.47 70.63ZM416.91 70.63C416.01 70.63 415.30 70.95 414.78 71.60C414.25 72.21 414.00 72.98 414.00 73.89C414.00 74.90 414.26 75.69 414.81 76.29C415.34 76.87 416.06 77.17 416.95 77.17C417.75 77.17 418.41 76.93 418.93 76.47C419.35 76.09 419.62 75.61 419.77 75.01L418.81 75.01C418.65 75.44 418.45 75.76 418.18 75.98C417.87 76.23 417.45 76.36 416.95 76.36C416.36 76.36 415.89 76.17 415.56 75.79C415.22 75.40 415.04 74.86 414.99 74.17L419.89 74.17C419.86 73.09 419.62 72.24 419.17 71.64C418.66 70.96 417.91 70.63 416.91 70.63ZM416.94 71.43C418.11 71.43 418.77 72.09 418.89 73.42L415.02 73.42C415.08 72.81 415.27 72.33 415.60 71.97C415.94 71.61 416.38 71.43 416.94 71.43Z" fill="#66738B"/>
+<rect x="32" y="100" width="206" height="168" rx="12" fill="#FFFFFF" stroke="#DFE4EF"/>
+<path d="M48.19 115.15L48.19 115.93L50.96 115.93L50.96 123.00L51.85 123.00L51.85 115.93L54.62 115.93L54.62 115.15L48.19 115.15ZM55.49 114.99L55.49 123.00L56.37 123.00L56.37 119.75C56.37 119.23 56.51 118.78 56.81 118.42C57.10 118.07 57.46 117.90 57.90 117.90C58.37 117.90 58.74 118.04 59.00 118.33C59.24 118.61 59.37 119.02 59.37 119.55L59.37 123.00L60.25 123.00L60.25 119.41C60.25 118.69 60.08 118.13 59.73 117.74C59.37 117.35 58.86 117.16 58.20 117.16C57.81 117.16 57.47 117.25 57.16 117.42C56.83 117.61 56.57 117.89 56.37 118.25L56.37 114.99L55.49 114.99ZM62.33 115.17C62.15 115.17 61.99 115.22 61.86 115.36C61.73 115.47 61.67 115.62 61.67 115.82C61.67 116.00 61.73 116.16 61.86 116.29C61.99 116.41 62.15 116.48 62.33 116.48C62.52 116.48 62.67 116.41 62.81 116.29C62.94 116.16 63.00 116.00 63.00 115.82C63.00 115.62 62.94 115.47 62.81 115.36C62.67 115.22 62.52 115.17 62.33 115.17ZM61.89 117.31L61.89 123.00L62.77 123.00L62.77 117.31L61.89 117.31ZM66.44 117.16C65.80 117.16 65.27 117.30 64.87 117.59C64.44 117.87 64.24 118.25 64.24 118.73C64.24 119.22 64.44 119.58 64.89 119.84C65.15 120.02 65.62 120.18 66.29 120.35C66.91 120.50 67.32 120.62 67.50 120.71C67.86 120.89 68.04 121.13 68.04 121.45C68.04 122.09 67.53 122.42 66.51 122.42C66.03 122.42 65.67 122.33 65.42 122.15C65.18 121.95 65.02 121.64 64.95 121.19L64.09 121.19C64.22 122.49 65.04 123.15 66.53 123.15C68.14 123.15 68.94 122.56 68.94 121.39C68.94 120.90 68.71 120.51 68.26 120.23C67.97 120.04 67.48 119.86 66.80 119.70C66.23 119.55 65.83 119.42 65.62 119.33C65.29 119.16 65.14 118.95 65.14 118.71C65.14 118.46 65.26 118.26 65.50 118.12C65.72 117.96 66.03 117.90 66.42 117.90C66.88 117.90 67.23 117.98 67.47 118.16C67.69 118.31 67.83 118.58 67.91 118.93L68.77 118.93C68.61 117.74 67.84 117.16 66.44 117.16ZM76.09 117.16C75.25 117.16 74.58 117.46 74.09 118.06C73.64 118.61 73.42 119.31 73.42 120.18C73.42 121.05 73.64 121.76 74.09 122.30C74.56 122.87 75.23 123.15 76.08 123.15C76.79 123.15 77.35 122.97 77.78 122.60C78.22 122.23 78.49 121.67 78.62 120.94L77.74 120.94C77.61 121.92 77.05 122.42 76.08 122.42C75.51 122.42 75.07 122.21 74.77 121.81C74.47 121.42 74.32 120.87 74.32 120.17C74.32 119.48 74.48 118.93 74.78 118.52C75.10 118.11 75.54 117.90 76.09 117.90C76.55 117.90 76.91 118.00 77.19 118.22C77.47 118.44 77.65 118.77 77.72 119.20L78.59 119.20C78.49 118.51 78.23 118.00 77.79 117.65C77.36 117.32 76.80 117.16 76.09 117.16ZM82.20 117.16C81.34 117.16 80.67 117.44 80.16 118.04C79.68 118.60 79.44 119.30 79.44 120.16C79.44 121.01 79.68 121.71 80.16 122.26C80.67 122.86 81.34 123.15 82.20 123.15C83.05 123.15 83.73 122.86 84.25 122.26C84.72 121.71 84.96 121.01 84.96 120.16C84.96 119.30 84.72 118.60 84.23 118.04C83.73 117.44 83.05 117.16 82.20 117.16ZM82.20 117.90C82.79 117.90 83.27 118.13 83.62 118.59C83.91 119.01 84.07 119.52 84.07 120.16C84.07 120.78 83.91 121.31 83.62 121.72C83.27 122.19 82.79 122.42 82.20 122.42C81.59 122.42 81.12 122.19 80.79 121.72C80.48 121.31 80.34 120.79 80.34 120.16C80.34 119.52 80.48 119.01 80.79 118.59C81.12 118.13 81.59 117.90 82.20 117.90ZM88.77 117.16C88.39 117.16 88.05 117.25 87.74 117.42C87.44 117.59 87.18 117.83 86.98 118.15L86.98 117.31L86.10 117.31L86.10 123.00L86.98 123.00L86.98 119.57C87.02 119.05 87.18 118.64 87.49 118.34C87.78 118.05 88.12 117.91 88.51 117.91C89.50 117.91 90.01 118.46 90.01 119.57L90.01 123.00L90.89 123.00L90.89 119.50C90.89 117.94 90.17 117.16 88.77 117.16ZM91.63 117.31L93.77 123.00L94.66 123.00L96.82 117.31L95.85 117.31L94.22 121.90L92.59 117.31L91.63 117.31ZM99.90 117.16C99.07 117.16 98.42 117.46 97.94 118.05C97.46 118.61 97.22 119.31 97.22 120.15C97.22 121.08 97.47 121.80 97.97 122.35C98.46 122.88 99.12 123.15 99.93 123.15C100.67 123.15 101.27 122.93 101.75 122.52C102.13 122.16 102.38 121.72 102.52 121.17L101.64 121.17C101.49 121.57 101.31 121.87 101.06 122.06C100.78 122.30 100.39 122.42 99.93 122.42C99.39 122.42 98.96 122.24 98.65 121.89C98.35 121.54 98.18 121.04 98.14 120.40L102.63 120.40C102.60 119.41 102.38 118.63 101.97 118.08C101.50 117.47 100.81 117.16 99.90 117.16ZM99.92 117.90C101.00 117.90 101.60 118.50 101.71 119.72L98.16 119.72C98.21 119.16 98.39 118.72 98.70 118.39C99.01 118.06 99.41 117.90 99.92 117.90ZM106.16 117.16C105.76 117.16 105.42 117.28 105.12 117.52C104.88 117.71 104.68 117.97 104.53 118.30L104.53 117.31L103.66 117.31L103.66 123.00L104.53 123.00L104.53 119.99C104.53 119.46 104.67 119.01 104.98 118.63C105.28 118.24 105.65 118.05 106.09 118.05C106.37 118.05 106.65 118.08 106.94 118.17L106.94 117.29C106.73 117.20 106.46 117.16 106.16 117.16ZM109.69 117.16C109.05 117.16 108.52 117.30 108.13 117.59C107.70 117.87 107.49 118.25 107.49 118.73C107.49 119.22 107.70 119.58 108.14 119.84C108.40 120.02 108.87 120.18 109.55 120.35C110.16 120.50 110.57 120.62 110.75 120.71C111.11 120.89 111.29 121.13 111.29 121.45C111.29 122.09 110.78 122.42 109.77 122.42C109.28 122.42 108.92 122.33 108.68 122.15C108.43 121.95 108.27 121.64 108.20 121.19L107.34 121.19C107.48 122.49 108.29 123.15 109.79 123.15C111.39 123.15 112.20 122.56 112.20 121.39C112.20 120.90 111.96 120.51 111.51 120.23C111.22 120.04 110.73 119.86 110.05 119.70C109.48 119.55 109.08 119.42 108.87 119.33C108.54 119.16 108.39 118.95 108.39 118.71C108.39 118.46 108.51 118.26 108.75 118.12C108.97 117.96 109.28 117.90 109.68 117.90C110.13 117.90 110.48 117.98 110.72 118.16C110.94 118.31 111.08 118.58 111.16 118.93L112.02 118.93C111.87 117.74 111.10 117.16 109.69 117.16ZM115.70 117.16C115.02 117.16 114.48 117.29 114.07 117.56C113.60 117.84 113.31 118.29 113.19 118.89L114.06 118.95C114.14 118.59 114.33 118.31 114.63 118.14C114.89 117.96 115.23 117.89 115.65 117.89C116.64 117.89 117.14 118.36 117.14 119.31L117.14 119.61L115.77 119.63C114.91 119.64 114.25 119.81 113.79 120.12C113.26 120.45 113.01 120.93 113.01 121.58C113.01 122.04 113.19 122.43 113.54 122.72C113.88 123.01 114.33 123.15 114.90 123.15C115.43 123.15 115.90 123.03 116.32 122.80C116.67 122.60 116.97 122.35 117.19 122.04L117.19 123.00L118.02 123.00L118.02 119.35C118.02 118.69 117.84 118.17 117.51 117.80C117.11 117.37 116.52 117.16 115.70 117.16ZM117.14 120.27L117.14 120.76C117.14 121.20 116.93 121.59 116.52 121.93C116.10 122.28 115.63 122.46 115.09 122.46C114.74 122.46 114.45 122.37 114.23 122.21C114.01 122.03 113.91 121.82 113.91 121.56C113.91 120.73 114.55 120.32 115.83 120.29L117.14 120.27ZM120.90 115.48L120.03 115.84L120.03 117.31L118.88 117.31L118.88 118.05L120.03 118.05L120.03 121.67C120.03 122.10 120.12 122.42 120.30 122.64C120.50 122.88 120.84 123.00 121.30 123.00L122.16 123.00L122.16 122.26L121.44 122.26C121.24 122.26 121.09 122.21 121.02 122.12C120.93 122.03 120.90 121.88 120.90 121.67L120.90 118.05L122.31 118.05L122.31 117.31L120.90 117.31L120.90 115.48ZM124.01 115.17C123.82 115.17 123.67 115.22 123.54 115.36C123.41 115.47 123.35 115.62 123.35 115.82C123.35 116.00 123.41 116.16 123.54 116.29C123.67 116.41 123.82 116.48 124.01 116.48C124.20 116.48 124.35 116.41 124.48 116.29C124.62 116.16 124.68 116.00 124.68 115.82C124.68 115.62 124.62 115.47 124.48 115.36C124.35 115.22 124.20 115.17 124.01 115.17ZM123.57 117.31L123.57 123.00L124.45 123.00L124.45 117.31L123.57 117.31ZM128.64 117.16C127.78 117.16 127.11 117.44 126.61 118.04C126.12 118.60 125.88 119.30 125.88 120.16C125.88 121.01 126.12 121.71 126.61 122.26C127.11 122.86 127.78 123.15 128.64 123.15C129.49 123.15 130.17 122.86 130.69 122.26C131.16 121.71 131.40 121.01 131.40 120.16C131.40 119.30 131.16 118.60 130.68 118.04C130.17 117.44 129.49 117.16 128.64 117.16ZM128.64 117.90C129.24 117.90 129.71 118.13 130.06 118.59C130.36 119.01 130.51 119.52 130.51 120.16C130.51 120.78 130.36 121.31 130.06 121.72C129.71 122.19 129.24 122.42 128.64 122.42C128.04 122.42 127.56 122.19 127.23 121.72C126.93 121.31 126.78 120.79 126.78 120.16C126.78 119.52 126.93 119.01 127.23 118.59C127.56 118.13 128.04 117.90 128.64 117.90ZM135.21 117.16C134.83 117.16 134.49 117.25 134.19 117.42C133.88 117.59 133.62 117.83 133.43 118.15L133.43 117.31L132.55 117.31L132.55 123.00L133.43 123.00L133.43 119.57C133.46 119.05 133.62 118.64 133.93 118.34C134.22 118.05 134.56 117.91 134.96 117.91C135.94 117.91 136.45 118.46 136.45 119.57L136.45 123.00L137.33 123.00L137.33 119.50C137.33 117.94 136.62 117.16 135.21 117.16Z" fill="#7A859E"/>
+<path d="M48.98 138.00L48.98 148.00L50.51 148.00L50.51 143.52L55.48 143.52L55.48 142.22L50.51 142.22L50.51 139.31L55.77 139.31L55.77 138.00L48.98 138.00ZM58.02 137.86C57.73 137.86 57.49 137.95 57.30 138.14C57.10 138.33 57.00 138.56 57.00 138.86C57.00 139.14 57.10 139.39 57.30 139.59C57.49 139.77 57.73 139.87 58.02 139.87C58.30 139.87 58.56 139.77 58.75 139.59C58.95 139.39 59.06 139.15 59.06 138.86C59.06 138.56 58.96 138.33 58.77 138.14C58.57 137.95 58.32 137.86 58.02 137.86ZM57.28 140.76L57.28 148.00L58.77 148.00L58.77 140.76L57.28 140.76ZM60.32 140.76L62.83 144.15L60.00 148.00L61.75 148.00L63.65 145.24L65.54 148.00L67.28 148.00L64.46 144.15L66.97 140.76L65.23 140.76L63.65 143.06L62.06 140.76L60.32 140.76ZM73.02 137.81L73.02 148.00L74.50 148.00L74.50 137.81L73.02 137.81ZM79.68 140.57C78.59 140.57 77.71 140.93 77.05 141.66C76.39 142.37 76.07 143.28 76.07 144.39C76.07 145.48 76.39 146.39 77.04 147.09C77.71 147.82 78.59 148.20 79.68 148.20C80.77 148.20 81.66 147.82 82.33 147.09C82.97 146.39 83.29 145.48 83.29 144.39C83.29 143.28 82.96 142.37 82.31 141.66C81.66 140.93 80.77 140.57 79.68 140.57ZM79.68 141.78C80.37 141.78 80.90 142.05 81.29 142.60C81.63 143.06 81.80 143.66 81.80 144.39C81.80 145.10 81.63 145.69 81.29 146.17C80.90 146.70 80.37 146.98 79.68 146.98C79.00 146.98 78.46 146.70 78.09 146.17C77.75 145.70 77.60 145.12 77.60 144.39C77.60 143.66 77.75 143.06 78.09 142.60C78.46 142.05 79.00 141.78 79.68 141.78ZM87.72 140.57C86.74 140.57 85.94 140.90 85.34 141.59C84.72 142.26 84.43 143.13 84.43 144.22C84.43 145.31 84.72 146.18 85.34 146.84C85.94 147.50 86.74 147.83 87.72 147.83C88.67 147.83 89.40 147.43 89.93 146.63L89.93 147.75C89.93 149.11 89.30 149.79 88.04 149.79C87.45 149.79 87.02 149.69 86.75 149.53C86.47 149.34 86.30 149.04 86.22 148.62L84.74 148.62C84.88 149.41 85.20 150.00 85.73 150.39C86.26 150.77 87.03 150.97 88.04 150.97C90.28 150.97 91.41 149.82 91.41 147.52L91.41 140.76L89.93 140.76L89.93 141.73C89.40 140.94 88.67 140.57 87.72 140.57ZM87.94 141.77C88.57 141.77 89.06 141.98 89.43 142.43C89.76 142.86 89.94 143.46 89.94 144.22C89.94 144.96 89.76 145.55 89.43 145.98C89.06 146.40 88.57 146.61 87.94 146.61C87.21 146.61 86.70 146.36 86.37 145.89C86.09 145.48 85.95 144.92 85.95 144.22C85.95 143.45 86.12 142.85 86.49 142.43C86.82 141.98 87.31 141.77 87.94 141.77ZM94.14 137.86C93.85 137.86 93.61 137.95 93.42 138.14C93.22 138.33 93.12 138.56 93.12 138.86C93.12 139.14 93.22 139.39 93.42 139.59C93.61 139.77 93.85 139.87 94.14 139.87C94.42 139.87 94.68 139.77 94.87 139.59C95.07 139.39 95.18 139.15 95.18 138.86C95.18 138.56 95.08 138.33 94.89 138.14C94.69 137.95 94.44 137.86 94.14 137.86ZM93.40 140.76L93.40 148.00L94.89 148.00L94.89 140.76L93.40 140.76ZM100.56 140.57C100.11 140.57 99.70 140.65 99.34 140.85C98.97 141.03 98.65 141.29 98.37 141.66L98.37 140.76L96.89 140.76L96.89 148.00L98.37 148.00L98.37 143.65C98.43 143.06 98.64 142.60 98.97 142.26C99.28 141.95 99.66 141.81 100.08 141.81C101.20 141.81 101.77 142.43 101.77 143.66L101.77 148.00L103.26 148.00L103.26 143.53C103.26 141.55 102.35 140.57 100.56 140.57ZM112.97 140.57C112.53 140.57 112.13 140.69 111.80 140.97C111.52 141.17 111.28 141.46 111.10 141.85L111.10 140.76L109.61 140.76L109.61 148.00L111.10 148.00L111.10 144.16C111.10 143.53 111.28 143.02 111.66 142.62C112.01 142.26 112.41 142.08 112.86 142.08C113.20 142.08 113.55 142.12 113.91 142.23L113.91 140.75C113.66 140.62 113.34 140.57 112.97 140.57ZM117.89 140.57C116.82 140.57 115.97 140.93 115.35 141.67C114.71 142.40 114.40 143.30 114.40 144.37C114.40 145.56 114.74 146.50 115.41 147.20C116.03 147.86 116.88 148.20 117.94 148.20C118.91 148.20 119.71 147.92 120.34 147.37C120.84 146.92 121.16 146.35 121.33 145.68L119.85 145.68C119.65 146.10 119.44 146.42 119.19 146.61C118.87 146.85 118.45 146.98 117.93 146.98C117.34 146.98 116.88 146.78 116.54 146.42C116.21 146.04 116.03 145.49 115.97 144.79L121.46 144.79C121.44 143.51 121.15 142.50 120.59 141.77C119.97 140.96 119.06 140.57 117.89 140.57ZM117.93 141.78C119.11 141.78 119.76 142.41 119.90 143.67L116.00 143.67C116.08 143.06 116.29 142.60 116.60 142.27C116.94 141.94 117.37 141.78 117.93 141.78ZM124.92 138.42L123.43 139.04L123.43 140.76L122.09 140.76L122.09 141.99L123.43 141.99L123.43 146.19C123.43 146.77 123.56 147.20 123.84 147.51C124.12 147.83 124.58 148.00 125.20 148.00L126.39 148.00L126.39 146.77L125.43 146.77C125.25 146.77 125.13 146.71 125.04 146.63C124.96 146.53 124.92 146.39 124.92 146.19L124.92 141.99L126.57 141.99L126.57 140.76L124.92 140.76L124.92 138.42ZM131.12 140.57C130.67 140.57 130.28 140.69 129.94 140.97C129.66 141.17 129.42 141.46 129.24 141.85L129.24 140.76L127.76 140.76L127.76 148.00L129.24 148.00L129.24 144.16C129.24 143.53 129.42 143.02 129.80 142.62C130.15 142.26 130.56 142.08 131.01 142.08C131.34 142.08 131.69 142.12 132.06 142.23L132.06 140.75C131.80 140.62 131.48 140.57 131.12 140.57ZM134.02 137.86C133.72 137.86 133.48 137.95 133.29 138.14C133.09 138.33 132.99 138.56 132.99 138.86C132.99 139.14 133.09 139.39 133.29 139.59C133.48 139.77 133.72 139.87 134.02 139.87C134.30 139.87 134.55 139.77 134.74 139.59C134.94 139.39 135.05 139.15 135.05 138.86C135.05 138.56 134.95 138.33 134.76 138.14C134.56 137.95 134.31 137.86 134.02 137.86ZM133.27 140.76L133.27 148.00L134.76 148.00L134.76 140.76L133.27 140.76ZM139.83 140.57C138.76 140.57 137.91 140.93 137.29 141.67C136.65 142.40 136.34 143.30 136.34 144.37C136.34 145.56 136.68 146.50 137.35 147.20C137.96 147.86 138.82 148.20 139.88 148.20C140.85 148.20 141.65 147.92 142.28 147.37C142.78 146.92 143.10 146.35 143.27 145.68L141.79 145.68C141.59 146.10 141.38 146.42 141.13 146.61C140.81 146.85 140.39 146.98 139.87 146.98C139.28 146.98 138.82 146.78 138.48 146.42C138.15 146.04 137.96 145.49 137.91 144.79L143.40 144.79C143.38 143.51 143.09 142.50 142.53 141.77C141.91 140.96 141.00 140.57 139.83 140.57ZM139.87 141.78C141.04 141.78 141.70 142.41 141.84 143.67L137.94 143.67C138.02 143.06 138.23 142.60 138.54 142.27C138.87 141.94 139.31 141.78 139.87 141.78ZM147.36 140.57C146.49 140.57 145.78 140.75 145.23 141.13C144.68 141.49 144.42 142.01 144.42 142.67C144.42 143.28 144.70 143.77 145.26 144.12C145.59 144.35 146.20 144.56 147.05 144.75C147.79 144.92 148.28 145.06 148.51 145.17C148.93 145.37 149.15 145.65 149.15 146.00C149.15 146.64 148.56 146.98 147.41 146.98C146.85 146.98 146.46 146.88 146.21 146.70C145.96 146.50 145.78 146.15 145.69 145.66L144.24 145.66C144.40 147.34 145.47 148.20 147.46 148.20C149.60 148.20 150.68 147.43 150.68 145.90C150.68 145.26 150.38 144.75 149.81 144.39C149.42 144.14 148.80 143.90 147.97 143.70C147.25 143.52 146.77 143.38 146.52 143.27C146.13 143.09 145.93 142.88 145.93 142.62C145.93 142.34 146.06 142.12 146.32 141.98C146.55 141.84 146.88 141.78 147.33 141.78C147.83 141.78 148.23 141.87 148.48 142.04C148.72 142.19 148.88 142.46 149.00 142.85L150.44 142.85C150.27 141.32 149.23 140.57 147.36 140.57Z" fill="#253047"/>
+<rect x="48" y="160" width="174" height="34" rx="8" fill="#F3F5FA"/>
+<path d="M63.42 173.63C62.17 173.63 61.21 174.04 60.49 174.87C59.82 175.65 59.48 176.66 59.48 177.91C59.48 179.14 59.82 180.15 60.49 180.93C61.21 181.75 62.17 182.16 63.40 182.16C64.64 182.16 65.61 181.75 66.33 180.93C66.99 180.15 67.34 179.15 67.34 177.91C67.34 176.65 66.99 175.64 66.33 174.86C65.61 174.03 64.64 173.63 63.42 173.63ZM63.42 174.47C64.36 174.47 65.09 174.78 65.62 175.41C66.13 176.03 66.39 176.86 66.39 177.91C66.39 178.94 66.13 179.76 65.62 180.38C65.09 181.00 64.35 181.32 63.40 181.32C62.46 181.32 61.71 181.00 61.19 180.36C60.68 179.73 60.43 178.92 60.43 177.91C60.43 176.88 60.68 176.07 61.19 175.44C61.73 174.79 62.47 174.47 63.42 174.47ZM71.37 175.89C70.48 175.89 69.82 176.27 69.40 177.03L69.40 176.05L68.53 176.05L68.53 184.28L69.45 184.28L69.45 180.92C69.91 181.75 70.57 182.16 71.42 182.16C72.27 182.16 72.93 181.84 73.41 181.22C73.85 180.64 74.08 179.92 74.08 179.04C74.08 178.15 73.85 177.42 73.40 176.85C72.90 176.20 72.22 175.89 71.37 175.89ZM71.26 176.65C71.89 176.65 72.37 176.88 72.71 177.37C72.98 177.78 73.13 178.34 73.13 179.04C73.13 179.76 72.98 180.32 72.69 180.74C72.35 181.17 71.87 181.40 71.22 181.40C70.67 181.40 70.25 181.18 69.92 180.77C69.58 180.34 69.42 179.79 69.42 179.10L69.42 178.99C69.42 178.32 69.57 177.77 69.87 177.35C70.19 176.88 70.66 176.65 71.26 176.65ZM77.72 175.89C76.86 175.89 76.18 176.20 75.67 176.82C75.17 177.41 74.93 178.15 74.93 179.02C74.93 179.99 75.18 180.75 75.71 181.32C76.22 181.87 76.91 182.16 77.76 182.16C78.53 182.16 79.16 181.93 79.65 181.49C80.06 181.13 80.32 180.67 80.46 180.09L79.54 180.09C79.39 180.50 79.19 180.82 78.94 181.02C78.64 181.26 78.24 181.39 77.76 181.39C77.19 181.39 76.74 181.21 76.42 180.84C76.10 180.47 75.93 179.95 75.88 179.29L80.57 179.29C80.55 178.25 80.32 177.43 79.88 176.86C79.40 176.22 78.68 175.89 77.72 175.89ZM77.75 176.66C78.87 176.66 79.50 177.30 79.62 178.57L75.91 178.57C75.96 177.99 76.15 177.53 76.47 177.18C76.79 176.84 77.22 176.66 77.75 176.66ZM84.44 175.89C84.05 175.89 83.69 175.99 83.37 176.17C83.05 176.34 82.78 176.59 82.58 176.93L82.58 176.05L81.66 176.05L81.66 182.00L82.58 182.00L82.58 178.41C82.61 177.87 82.78 177.45 83.10 177.12C83.40 176.82 83.76 176.68 84.17 176.68C85.21 176.68 85.74 177.25 85.74 178.41L85.74 182.00L86.66 182.00L86.66 178.34C86.66 176.71 85.91 175.89 84.44 175.89ZM94.50 175.89C93.79 175.89 93.22 176.03 92.79 176.31C92.30 176.61 91.99 177.08 91.87 177.70L92.78 177.77C92.87 177.39 93.06 177.10 93.37 176.92C93.65 176.73 94.01 176.65 94.44 176.65C95.48 176.65 96.00 177.15 96.00 178.15L96.00 178.46L94.57 178.48C93.67 178.49 92.98 178.66 92.50 178.99C91.95 179.33 91.68 179.84 91.68 180.52C91.68 181.00 91.87 181.40 92.23 181.71C92.59 182.01 93.06 182.16 93.66 182.16C94.21 182.16 94.71 182.03 95.14 181.79C95.51 181.59 95.82 181.32 96.05 181.00L96.05 182.00L96.92 182.00L96.92 178.18C96.92 177.49 96.73 176.95 96.39 176.56C95.97 176.11 95.35 175.89 94.50 175.89ZM96.00 179.15L96.00 179.65C96.00 180.11 95.78 180.53 95.35 180.88C94.91 181.25 94.42 181.44 93.86 181.44C93.49 181.44 93.19 181.34 92.96 181.17C92.73 180.99 92.63 180.77 92.63 180.49C92.63 179.63 93.29 179.19 94.63 179.17L96.00 179.15ZM102.29 173.79L102.29 182.00L103.23 182.00L103.23 178.64L105.63 178.64C107.52 178.64 108.47 177.83 108.47 176.20C108.47 174.59 107.53 173.79 105.64 173.79L102.29 173.79ZM103.23 174.61L105.59 174.61C106.24 174.61 106.72 174.73 107.05 175.01C107.37 175.25 107.53 175.65 107.53 176.20C107.53 176.76 107.37 177.16 107.06 177.42C106.74 177.69 106.25 177.83 105.59 177.83L103.23 177.83L103.23 174.61ZM109.67 173.79L109.67 182.00L110.61 182.00L110.61 178.47L113.10 178.47C113.61 178.47 114.00 178.56 114.28 178.77C114.58 178.98 114.75 179.33 114.80 179.81L114.90 180.91C114.94 181.37 115.05 181.72 115.24 182.00L116.26 182.00C116.02 181.70 115.87 181.30 115.82 180.79L115.70 179.53C115.60 178.70 115.17 178.21 114.38 178.03L114.38 178.01C114.86 177.89 115.22 177.66 115.50 177.30C115.75 176.94 115.88 176.54 115.88 176.08C115.88 175.32 115.63 174.74 115.14 174.35C114.67 173.97 114.03 173.79 113.21 173.79L109.67 173.79ZM110.61 174.61L113.10 174.61C113.73 174.61 114.20 174.73 114.50 174.99C114.78 175.23 114.92 175.61 114.92 176.11C114.92 176.59 114.78 176.96 114.49 177.23C114.17 177.50 113.69 177.65 113.10 177.65L110.61 177.65L110.61 174.61ZM123.54 173.79C123.03 173.79 122.64 173.93 122.38 174.21C122.12 174.49 122.00 174.87 122.00 175.38L122.00 176.05L120.50 176.05L120.50 176.82L122.00 176.82L122.00 182.00L122.92 182.00L122.92 176.82L124.60 176.82L124.60 176.05L122.92 176.05L122.92 175.40C122.92 175.11 122.97 174.90 123.09 174.78C123.20 174.64 123.40 174.58 123.65 174.58L124.68 174.58L124.68 173.79L123.54 173.79ZM128.10 175.89C127.21 175.89 126.51 176.19 125.98 176.81C125.47 177.40 125.22 178.14 125.22 179.03C125.22 179.92 125.47 180.65 125.98 181.23C126.51 181.85 127.21 182.16 128.10 182.16C128.99 182.16 129.70 181.85 130.24 181.23C130.74 180.65 130.99 179.92 130.99 179.03C130.99 178.14 130.74 177.40 130.23 176.81C129.70 176.19 128.99 175.89 128.10 175.89ZM128.10 176.66C128.72 176.66 129.22 176.91 129.59 177.39C129.90 177.83 130.06 178.37 130.06 179.03C130.06 179.68 129.90 180.23 129.59 180.67C129.22 181.15 128.72 181.39 128.10 181.39C127.47 181.39 126.98 181.15 126.63 180.67C126.31 180.23 126.16 179.69 126.16 179.03C126.16 178.37 126.31 177.83 126.63 177.39C126.98 176.91 127.47 176.66 128.10 176.66ZM134.80 175.89C134.38 175.89 134.03 176.02 133.72 176.27C133.46 176.47 133.26 176.74 133.09 177.09L133.09 176.05L132.19 176.05L132.19 182.00L133.09 182.00L133.09 178.85C133.09 178.30 133.24 177.83 133.57 177.43C133.88 177.02 134.27 176.82 134.73 176.82C135.02 176.82 135.31 176.86 135.61 176.95L135.61 176.03C135.39 175.94 135.12 175.89 134.80 175.89ZM141.80 174.13L140.89 174.51L140.89 176.05L139.70 176.05L139.70 176.82L140.89 176.82L140.89 180.61C140.89 181.06 140.98 181.39 141.18 181.62C141.39 181.87 141.74 182.00 142.23 182.00L143.12 182.00L143.12 181.23L142.36 181.23C142.16 181.23 142.01 181.17 141.93 181.08C141.83 180.99 141.80 180.83 141.80 180.61L141.80 176.82L143.27 176.82L143.27 176.05L141.80 176.05L141.80 174.13ZM144.30 173.63L144.30 182.00L145.22 182.00L145.22 178.61C145.22 178.06 145.37 177.58 145.68 177.22C145.97 176.85 146.35 176.66 146.81 176.66C147.31 176.66 147.69 176.81 147.96 177.11C148.22 177.41 148.36 177.84 148.36 178.39L148.36 182.00L149.28 182.00L149.28 178.25C149.28 177.49 149.09 176.91 148.72 176.50C148.36 176.09 147.81 175.89 147.12 175.89C146.72 175.89 146.37 175.99 146.04 176.17C145.70 176.37 145.42 176.65 145.22 177.03L145.22 173.63L144.30 173.63ZM151.45 173.81C151.25 173.81 151.09 173.87 150.95 174.01C150.82 174.12 150.76 174.28 150.76 174.49C150.76 174.69 150.82 174.85 150.95 174.99C151.09 175.11 151.25 175.18 151.45 175.18C151.64 175.18 151.81 175.11 151.94 174.99C152.08 174.85 152.15 174.69 152.15 174.49C152.15 174.28 152.08 174.12 151.94 174.01C151.81 173.87 151.64 173.81 151.45 173.81ZM150.99 176.05L150.99 182.00L151.91 182.00L151.91 176.05L150.99 176.05ZM155.74 175.89C155.07 175.89 154.52 176.04 154.11 176.34C153.66 176.64 153.44 177.03 153.44 177.54C153.44 178.04 153.66 178.42 154.12 178.70C154.39 178.88 154.89 179.06 155.59 179.23C156.23 179.39 156.66 179.52 156.85 179.61C157.22 179.79 157.42 180.04 157.42 180.38C157.42 181.05 156.88 181.39 155.82 181.39C155.31 181.39 154.93 181.30 154.68 181.11C154.43 180.91 154.25 180.57 154.19 180.10L153.29 180.10C153.43 181.47 154.28 182.16 155.84 182.16C157.52 182.16 158.36 181.54 158.36 180.32C158.36 179.80 158.12 179.40 157.65 179.10C157.34 178.91 156.83 178.72 156.12 178.55C155.52 178.39 155.11 178.26 154.89 178.16C154.54 177.99 154.38 177.77 154.38 177.51C154.38 177.25 154.51 177.04 154.76 176.89C154.99 176.73 155.31 176.66 155.73 176.66C156.20 176.66 156.57 176.76 156.82 176.94C157.05 177.10 157.20 177.38 157.28 177.75L158.18 177.75C158.02 176.50 157.21 175.89 155.74 175.89ZM165.65 173.79C165.15 173.79 164.75 173.93 164.49 174.21C164.24 174.49 164.11 174.87 164.11 175.38L164.11 176.05L162.62 176.05L162.62 176.82L164.11 176.82L164.11 182.00L165.03 182.00L165.03 176.82L167.74 176.82L167.74 182.00L168.65 182.00L168.65 176.05L165.03 176.05L165.03 175.40C165.03 175.11 165.09 174.90 165.20 174.78C165.32 174.64 165.51 174.58 165.77 174.58L166.79 174.58L166.79 173.79L165.65 173.79ZM169.86 176.05L171.96 178.85L169.61 182.00L170.70 182.00L172.48 179.53L174.25 182.00L175.35 182.00L172.99 178.85L175.09 176.05L174.01 176.05L172.48 178.17L170.94 176.05L169.86 176.05Z" fill="#515F7B"/>
+<rect x="48" y="207" width="174" height="24" rx="6" fill="#EEF1FF"/>
+<path d="M63.17 214.99C62.01 214.99 61.09 215.39 60.41 216.20C59.76 216.96 59.44 217.93 59.44 219.11C59.44 220.27 59.76 221.23 60.41 221.97C61.10 222.76 62.07 223.15 63.32 223.15C64.00 223.15 64.63 223.07 65.20 222.89C65.74 222.71 66.22 222.47 66.62 222.15L66.62 218.85L63.26 218.85L63.26 219.88L65.42 219.88L65.42 221.58C65.16 221.75 64.87 221.88 64.54 221.97C64.20 222.05 63.84 222.11 63.45 222.11C62.48 222.11 61.75 221.83 61.29 221.28C60.85 220.78 60.64 220.05 60.64 219.11C60.64 218.14 60.87 217.38 61.35 216.83C61.80 216.30 62.41 216.05 63.17 216.05C63.78 216.05 64.29 216.18 64.67 216.46C65.04 216.72 65.28 217.12 65.39 217.64L66.60 217.64C66.46 216.76 66.11 216.11 65.55 215.67C64.96 215.21 64.17 214.99 63.17 214.99ZM68.78 215.04C68.55 215.04 68.36 215.10 68.21 215.26C68.05 215.40 67.98 215.59 67.98 215.82C67.98 216.04 68.05 216.24 68.21 216.39C68.36 216.53 68.55 216.61 68.78 216.61C69.00 216.61 69.20 216.53 69.35 216.39C69.50 216.24 69.59 216.05 69.59 215.82C69.59 215.59 69.52 215.40 69.36 215.26C69.21 215.10 69.01 215.04 68.78 215.04ZM68.20 217.31L68.20 223.00L69.36 223.00L69.36 217.31L68.20 217.31ZM72.66 215.48L71.50 215.96L71.50 217.31L70.44 217.31L70.44 218.28L71.50 218.28L71.50 221.58C71.50 222.03 71.59 222.37 71.82 222.62C72.04 222.87 72.40 223.00 72.88 223.00L73.82 223.00L73.82 222.03L73.07 222.03C72.93 222.03 72.83 221.99 72.76 221.92C72.70 221.84 72.66 221.74 72.66 221.58L72.66 218.28L73.96 218.28L73.96 217.31L72.66 217.31L72.66 215.48ZM75.00 215.15L75.00 223.00L76.20 223.00L76.20 219.48L80.32 219.48L80.32 223.00L81.52 223.00L81.52 215.15L80.32 215.15L80.32 218.46L76.20 218.46L76.20 215.15L75.00 215.15ZM82.95 217.31L82.95 220.85C82.95 222.38 83.63 223.15 85.00 223.15C85.72 223.15 86.31 222.85 86.80 222.23L86.80 223.00L87.96 223.00L87.96 217.31L86.80 217.31L86.80 220.79C86.70 221.21 86.51 221.55 86.25 221.80C85.98 222.04 85.71 222.18 85.40 222.18C84.95 222.18 84.62 222.05 84.42 221.83C84.21 221.61 84.11 221.26 84.11 220.78L84.11 217.31L82.95 217.31ZM89.29 214.99L89.29 223.00L90.38 223.00L90.38 222.32C90.78 222.87 91.36 223.15 92.14 223.15C92.98 223.15 93.63 222.86 94.11 222.26C94.55 221.71 94.77 221.00 94.77 220.13C94.77 219.29 94.55 218.60 94.12 218.05C93.65 217.46 93.01 217.16 92.20 217.16C91.49 217.16 90.92 217.49 90.46 218.16L90.46 214.99L89.29 214.99ZM91.93 218.10C92.51 218.10 92.94 218.29 93.21 218.69C93.45 219.02 93.57 219.50 93.57 220.13C93.57 220.76 93.45 221.24 93.23 221.59C92.96 222.00 92.54 222.21 91.97 222.21C91.46 222.21 91.06 222.00 90.79 221.60C90.55 221.24 90.43 220.78 90.43 220.21L90.43 220.11C90.43 219.49 90.57 219.00 90.88 218.62C91.14 218.27 91.49 218.10 91.93 218.10ZM99.64 215.15L99.64 223.00L100.84 223.00L100.84 219.94L102.88 219.94C104.76 219.94 105.71 219.14 105.71 217.53C105.71 215.94 104.77 215.15 102.90 215.15L99.64 215.15ZM100.84 216.17L102.80 216.17C103.39 216.17 103.81 216.28 104.09 216.50C104.36 216.70 104.51 217.05 104.51 217.53C104.51 218.02 104.36 218.37 104.10 218.59C103.83 218.81 103.40 218.92 102.80 218.92L100.84 218.92L100.84 216.17ZM106.82 215.15L106.82 223.00L108.02 223.00L108.02 219.75L110.14 219.75C110.59 219.75 110.93 219.84 111.17 220.04C111.40 220.24 111.55 220.55 111.59 220.99L111.69 221.97C111.73 222.41 111.84 222.76 112.03 223.00L113.33 223.00C113.06 222.71 112.91 222.33 112.87 221.84L112.73 220.59C112.65 219.82 112.26 219.36 111.56 219.21L111.56 219.18C111.99 219.07 112.33 218.84 112.58 218.49C112.80 218.17 112.91 217.81 112.91 217.39C112.91 216.64 112.67 216.08 112.19 215.69C111.72 215.32 111.08 215.15 110.29 215.15L106.82 215.15ZM108.02 216.17L110.13 216.17C110.68 216.17 111.07 216.27 111.34 216.48C111.58 216.68 111.71 216.99 111.71 217.43C111.71 217.85 111.58 218.17 111.33 218.39C111.06 218.61 110.67 218.73 110.14 218.73L108.02 218.73L108.02 216.17ZM118.16 216.90L118.02 217.74L119.15 217.74L118.72 220.40L117.74 220.40L117.60 221.25L118.59 221.25L118.31 223.00L119.27 223.00L119.54 221.25L121.01 221.25L120.73 223.00L121.69 223.00L121.96 221.25L123.09 221.25L123.23 220.40L122.10 220.40L122.53 217.74L123.50 217.74L123.65 216.90L122.66 216.90L122.93 215.15L121.99 215.15L121.70 216.90L120.24 216.90L120.51 215.15L119.57 215.15L119.28 216.90L118.16 216.90ZM119.68 220.40L120.11 217.74L121.57 217.74L121.14 220.40L119.68 220.40ZM128.01 215.15L124.14 220.16L124.14 221.29L127.97 221.29L127.97 223.00L129.11 223.00L129.11 221.29L130.30 221.29L130.30 220.34L129.11 220.34L129.11 215.15L128.01 215.15ZM127.94 216.66L127.97 216.66L127.97 220.34L125.12 220.34L127.94 216.66ZM133.94 214.99C133.11 214.99 132.42 215.27 131.92 215.84C131.42 216.37 131.17 217.07 131.16 217.95L132.36 217.95C132.38 217.31 132.51 216.84 132.78 216.51C133.03 216.17 133.40 216.00 133.90 216.00C134.36 216.00 134.72 216.11 134.97 216.33C135.21 216.55 135.33 216.88 135.33 217.32C135.33 217.79 135.14 218.22 134.79 218.61C134.57 218.84 134.20 219.14 133.67 219.51C132.78 220.13 132.18 220.60 131.90 220.94C131.37 221.54 131.12 222.22 131.12 223.00L136.53 223.00L136.53 221.94L132.60 221.94C132.77 221.51 133.27 221.02 134.12 220.46C134.90 219.93 135.44 219.51 135.75 219.19C136.25 218.63 136.52 218.02 136.52 217.34C136.52 216.64 136.27 216.08 135.80 215.64C135.32 215.20 134.69 214.99 133.94 214.99Z" fill="#4D6BDE"/>
+<path d="M181.72 215.86L181.72 223.00L186.66 223.00L186.66 222.29L182.53 222.29L182.53 215.86L181.72 215.86ZM188.16 215.88C187.99 215.88 187.85 215.93 187.73 216.05C187.61 216.15 187.56 216.29 187.56 216.47C187.56 216.64 187.61 216.78 187.73 216.90C187.85 217.01 187.99 217.07 188.16 217.07C188.33 217.07 188.47 217.01 188.59 216.90C188.71 216.78 188.77 216.64 188.77 216.47C188.77 216.29 188.71 216.15 188.59 216.05C188.47 215.93 188.33 215.88 188.16 215.88ZM187.76 217.83L187.76 223.00L188.56 223.00L188.56 217.83L187.76 217.83ZM192.48 217.69C192.14 217.69 191.83 217.77 191.55 217.93C191.27 218.08 191.04 218.30 190.86 218.59L190.86 217.83L190.06 217.83L190.06 223.00L190.86 223.00L190.86 219.88C190.89 219.41 191.04 219.04 191.32 218.76C191.58 218.50 191.89 218.37 192.25 218.37C193.15 218.37 193.61 218.87 193.61 219.88L193.61 223.00L194.41 223.00L194.41 219.82C194.41 218.40 193.76 217.69 192.48 217.69ZM195.65 215.72L195.65 223.00L196.45 223.00L196.45 221.17L197.27 220.43L199.29 223.00L200.32 223.00L197.82 219.91L200.10 217.83L199.04 217.83L196.45 220.23L196.45 215.72L195.65 215.72ZM203.07 217.69C202.32 217.69 201.73 217.96 201.29 218.50C200.85 219.01 200.64 219.65 200.64 220.41C200.64 221.25 200.86 221.91 201.32 222.41C201.76 222.89 202.36 223.14 203.10 223.14C203.77 223.14 204.32 222.94 204.75 222.56C205.10 222.24 205.33 221.84 205.45 221.34L204.65 221.34C204.52 221.70 204.35 221.97 204.13 222.15C203.87 222.36 203.52 222.47 203.10 222.47C202.61 222.47 202.22 222.31 201.94 221.99C201.66 221.67 201.51 221.22 201.47 220.64L205.55 220.64C205.53 219.74 205.33 219.03 204.95 218.53C204.53 217.97 203.90 217.69 203.07 217.69ZM203.09 218.36C204.07 218.36 204.62 218.91 204.72 220.02L201.49 220.02C201.54 219.51 201.70 219.11 201.98 218.81C202.26 218.51 202.63 218.36 203.09 218.36ZM210.31 215.72L210.31 218.78C209.91 218.05 209.34 217.69 208.60 217.69C207.86 217.69 207.29 217.96 206.87 218.52C206.48 219.02 206.29 219.64 206.29 220.40C206.29 221.18 206.48 221.82 206.87 222.32C207.29 222.86 207.88 223.14 208.64 223.14C209.42 223.14 210.00 222.81 210.36 222.15L210.36 223.00L211.11 223.00L211.11 215.72L210.31 215.72ZM208.77 218.35C209.23 218.35 209.61 218.53 209.90 218.91C210.18 219.28 210.33 219.77 210.33 220.37L210.33 220.47C210.33 221.05 210.20 221.52 209.95 221.88C209.66 222.28 209.26 222.48 208.74 222.48C208.18 222.48 207.76 222.27 207.48 221.87C207.23 221.51 207.11 221.02 207.11 220.40C207.11 219.78 207.23 219.30 207.49 218.95C207.77 218.55 208.20 218.35 208.77 218.35Z" fill="#6678B6"/>
+<path d="M48.05 245.50L50.20 253.00L51.16 253.00L52.87 246.75L52.90 246.75L54.60 253.00L55.56 253.00L57.71 245.50L56.75 245.50L55.10 251.79L55.06 251.79L53.36 245.50L52.42 245.50L50.71 251.79L50.67 251.79L49.02 245.50L48.05 245.50ZM60.84 247.42C60.02 247.42 59.38 247.70 58.90 248.26C58.44 248.80 58.21 249.47 58.21 250.29C58.21 251.10 58.44 251.77 58.90 252.30C59.38 252.86 60.02 253.15 60.84 253.15C61.65 253.15 62.30 252.86 62.79 252.30C63.25 251.77 63.48 251.10 63.48 250.29C63.48 249.47 63.25 248.80 62.78 248.26C62.30 247.70 61.65 247.42 60.84 247.42ZM60.84 248.13C61.41 248.13 61.86 248.35 62.20 248.79C62.48 249.19 62.63 249.68 62.63 250.29C62.63 250.88 62.48 251.38 62.20 251.78C61.86 252.22 61.41 252.44 60.84 252.44C60.26 252.44 59.81 252.22 59.50 251.78C59.20 251.38 59.07 250.89 59.07 250.29C59.07 249.68 59.20 249.19 59.50 248.79C59.81 248.35 60.26 248.13 60.84 248.13ZM66.95 247.42C66.57 247.42 66.25 247.54 65.97 247.77C65.73 247.95 65.55 248.20 65.40 248.52L65.40 247.57L64.57 247.57L64.57 253.00L65.40 253.00L65.40 250.12C65.40 249.62 65.53 249.19 65.83 248.83C66.11 248.45 66.47 248.28 66.89 248.28C67.15 248.28 67.42 248.31 67.70 248.39L67.70 247.55C67.50 247.47 67.25 247.42 66.95 247.42ZM68.40 245.36L68.40 253.00L69.24 253.00L69.24 251.08L70.10 250.30L72.22 253.00L73.31 253.00L70.68 249.76L73.07 247.57L71.96 247.57L69.24 250.09L69.24 245.36L68.40 245.36ZM75.41 245.82L74.58 246.16L74.58 247.57L73.48 247.57L73.48 248.28L74.58 248.28L74.58 251.73C74.58 252.14 74.66 252.44 74.84 252.65C75.03 252.88 75.35 253.00 75.79 253.00L76.61 253.00L76.61 252.30L75.92 252.30C75.73 252.30 75.59 252.24 75.52 252.16C75.44 252.08 75.41 251.93 75.41 251.73L75.41 248.28L76.75 248.28L76.75 247.57L75.41 247.57L75.41 245.82ZM80.07 247.42C79.69 247.42 79.36 247.54 79.08 247.77C78.85 247.95 78.66 248.20 78.51 248.52L78.51 247.57L77.68 247.57L77.68 253.00L78.51 253.00L78.51 250.12C78.51 249.62 78.65 249.19 78.94 248.83C79.23 248.45 79.58 248.28 80.00 248.28C80.27 248.28 80.54 248.31 80.81 248.39L80.81 247.55C80.61 247.47 80.36 247.42 80.07 247.42ZM83.75 247.42C82.97 247.42 82.35 247.71 81.88 248.28C81.42 248.81 81.20 249.48 81.20 250.28C81.20 251.16 81.43 251.86 81.92 252.38C82.38 252.88 83.01 253.15 83.78 253.15C84.49 253.15 85.07 252.94 85.52 252.54C85.88 252.20 86.13 251.78 86.25 251.26L85.41 251.26C85.28 251.63 85.10 251.92 84.87 252.11C84.59 252.33 84.23 252.44 83.78 252.44C83.27 252.44 82.86 252.28 82.57 251.94C82.27 251.60 82.11 251.13 82.07 250.52L86.36 250.52C86.34 249.58 86.13 248.83 85.73 248.31C85.29 247.72 84.62 247.42 83.75 247.42ZM83.77 248.13C84.80 248.13 85.38 248.71 85.49 249.87L82.09 249.87C82.15 249.34 82.31 248.92 82.61 248.60C82.90 248.29 83.29 248.13 83.77 248.13ZM89.58 247.42C88.79 247.42 88.17 247.71 87.71 248.28C87.25 248.81 87.03 249.48 87.03 250.28C87.03 251.16 87.26 251.86 87.74 252.38C88.20 252.88 88.83 253.15 89.61 253.15C90.31 253.15 90.89 252.94 91.34 252.54C91.71 252.20 91.95 251.78 92.08 251.26L91.24 251.26C91.10 251.63 90.92 251.92 90.69 252.11C90.42 252.33 90.05 252.44 89.61 252.44C89.10 252.44 88.69 252.28 88.39 251.94C88.10 251.60 87.94 251.13 87.90 250.52L92.18 250.52C92.16 249.58 91.95 248.83 91.55 248.31C91.11 247.72 90.45 247.42 89.58 247.42ZM89.60 248.13C90.63 248.13 91.21 248.71 91.31 249.87L87.92 249.87C87.97 249.34 88.14 248.92 88.44 248.60C88.73 248.29 89.12 248.13 89.60 248.13ZM98.64 248.45C98.43 248.45 98.25 248.53 98.11 248.67C97.95 248.82 97.88 249.01 97.88 249.22C97.88 249.43 97.95 249.61 98.11 249.76C98.25 249.90 98.43 249.98 98.64 249.98C98.85 249.98 99.03 249.90 99.18 249.76C99.32 249.61 99.41 249.43 99.41 249.22C99.41 249.01 99.32 248.82 99.18 248.67C99.03 248.53 98.85 248.45 98.64 248.45ZM107.59 245.50C107.13 245.50 106.77 245.63 106.53 245.89C106.30 246.14 106.18 246.49 106.18 246.95L106.18 247.57L104.82 247.57L104.82 248.28L106.18 248.28L106.18 253.00L107.02 253.00L107.02 248.28L109.50 248.28L109.50 253.00L110.33 253.00L110.33 247.57L107.02 247.57L107.02 246.97C107.02 246.71 107.07 246.52 107.18 246.41C107.28 246.28 107.46 246.23 107.69 246.23L108.63 246.23L108.63 245.50L107.59 245.50ZM111.43 247.57L113.35 250.12L111.20 253.00L112.20 253.00L113.82 250.74L115.44 253.00L116.44 253.00L114.29 250.12L116.21 247.57L115.22 247.57L113.82 249.50L112.42 247.57L111.43 247.57ZM117.02 249.92L117.02 250.64L122.32 250.64L122.32 249.92L117.02 249.92ZM123.66 245.36L123.66 253.00L124.49 253.00L124.49 245.36L123.66 245.36ZM128.39 247.42C127.57 247.42 126.93 247.70 126.45 248.26C125.98 248.80 125.75 249.47 125.75 250.29C125.75 251.10 125.98 251.77 126.45 252.30C126.93 252.86 127.57 253.15 128.39 253.15C129.20 253.15 129.85 252.86 130.34 252.30C130.79 251.77 131.02 251.10 131.02 250.29C131.02 249.47 130.79 248.80 130.33 248.26C129.85 247.70 129.20 247.42 128.39 247.42ZM128.39 248.13C128.96 248.13 129.41 248.35 129.74 248.79C130.03 249.19 130.17 249.68 130.17 250.29C130.17 250.88 130.03 251.38 129.74 251.78C129.41 252.22 128.96 252.44 128.39 252.44C127.81 252.44 127.36 252.22 127.04 251.78C126.75 251.38 126.61 250.89 126.61 250.29C126.61 249.68 126.75 249.19 127.04 248.79C127.36 248.35 127.81 248.13 128.39 248.13ZM134.35 247.42C133.60 247.42 133.00 247.69 132.56 248.22C132.12 248.73 131.91 249.37 131.91 250.16C131.91 250.95 132.12 251.59 132.56 252.10C133.00 252.61 133.60 252.87 134.35 252.87C135.17 252.87 135.78 252.51 136.18 251.78L136.18 252.74C136.18 253.93 135.63 254.54 134.54 254.54C134.05 254.54 133.68 254.45 133.44 254.27C133.20 254.10 133.04 253.83 132.98 253.46L132.14 253.46C132.23 254.05 132.47 254.49 132.86 254.78C133.24 255.08 133.81 255.23 134.54 255.23C136.19 255.23 137.02 254.35 137.02 252.62L137.02 247.57L136.18 247.57L136.18 248.51C135.78 247.78 135.17 247.42 134.35 247.42ZM134.48 248.12C135.01 248.12 135.43 248.31 135.75 248.71C136.04 249.06 136.19 249.56 136.19 250.16C136.19 250.75 136.04 251.24 135.75 251.60C135.43 251.98 135.01 252.17 134.47 252.17C133.88 252.17 133.45 251.96 133.16 251.56C132.89 251.20 132.77 250.73 132.77 250.16C132.77 249.56 132.91 249.06 133.21 248.71C133.51 248.31 133.93 248.12 134.48 248.12ZM139.01 245.52C138.84 245.52 138.69 245.58 138.56 245.70C138.44 245.81 138.38 245.95 138.38 246.14C138.38 246.32 138.44 246.47 138.56 246.59C138.69 246.71 138.84 246.77 139.01 246.77C139.19 246.77 139.34 246.71 139.47 246.59C139.59 246.47 139.65 246.32 139.65 246.14C139.65 245.95 139.59 245.81 139.47 245.70C139.34 245.58 139.19 245.52 139.01 245.52ZM138.59 247.57L138.59 253.00L139.43 253.00L139.43 247.57L138.59 247.57ZM143.55 247.42C143.19 247.42 142.87 247.51 142.57 247.68C142.28 247.83 142.04 248.06 141.85 248.37L141.85 247.57L141.01 247.57L141.01 253.00L141.85 253.00L141.85 249.72C141.88 249.23 142.04 248.84 142.33 248.55C142.61 248.28 142.93 248.14 143.31 248.14C144.25 248.14 144.74 248.66 144.74 249.72L144.74 253.00L145.58 253.00L145.58 249.66C145.58 248.17 144.89 247.42 143.55 247.42Z" fill="#66738B"/>
+<path d="M238 219h24m-5-4 5 4-5 4" fill="none" stroke="#9CA9CC" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+<rect x="266" y="100" width="342" height="168" rx="12" fill="#FFFFFF" stroke="#DFE4EF"/>
+<path d="M286.93 114.54C285.56 114.54 284.47 115.00 283.66 115.97C282.90 116.86 282.52 118.01 282.52 119.40C282.52 120.78 282.90 121.91 283.66 122.78C284.48 123.71 285.63 124.18 287.11 124.18C287.92 124.18 288.66 124.08 289.33 123.87C289.97 123.66 290.53 123.38 291.01 123.00L291.01 119.10L287.03 119.10L287.03 120.31L289.59 120.31L289.59 122.32C289.28 122.52 288.94 122.67 288.55 122.78C288.15 122.88 287.72 122.95 287.26 122.95C286.11 122.95 285.25 122.62 284.70 121.97C284.18 121.37 283.94 120.52 283.94 119.40C283.94 118.25 284.21 117.36 284.78 116.71C285.31 116.08 286.03 115.78 286.93 115.78C287.65 115.78 288.25 115.94 288.69 116.27C289.14 116.58 289.42 117.05 289.55 117.67L290.98 117.67C290.81 116.63 290.40 115.86 289.74 115.34C289.05 114.80 288.11 114.54 286.93 114.54ZM293.56 114.59C293.28 114.59 293.06 114.67 292.88 114.85C292.70 115.02 292.61 115.24 292.61 115.51C292.61 115.77 292.70 116.00 292.88 116.19C293.06 116.36 293.28 116.45 293.56 116.45C293.82 116.45 294.05 116.36 294.23 116.19C294.42 116.00 294.52 115.78 294.52 115.51C294.52 115.24 294.43 115.02 294.25 114.85C294.06 114.67 293.83 114.59 293.56 114.59ZM292.87 117.28L292.87 124.00L294.25 124.00L294.25 117.28L292.87 117.28ZM298.15 115.11L296.77 115.68L296.77 117.28L295.52 117.28L295.52 118.42L296.77 118.42L296.77 122.32C296.77 122.86 296.88 123.26 297.14 123.55C297.40 123.84 297.83 124.00 298.41 124.00L299.51 124.00L299.51 122.86L298.63 122.86C298.46 122.86 298.34 122.80 298.26 122.73C298.19 122.64 298.15 122.50 298.15 122.32L298.15 118.42L299.68 118.42L299.68 117.28L298.15 117.28L298.15 115.11ZM300.92 114.72L300.92 124.00L302.33 124.00L302.33 119.84L307.19 119.84L307.19 124.00L308.61 124.00L308.61 114.72L307.19 114.72L307.19 118.63L302.33 118.63L302.33 114.72L300.92 114.72ZM310.30 117.28L310.30 121.47C310.30 123.27 311.11 124.18 312.73 124.18C313.58 124.18 314.28 123.82 314.85 123.09L314.85 124.00L316.23 124.00L316.23 117.28L314.85 117.28L314.85 121.39C314.73 121.88 314.51 122.28 314.20 122.58C313.89 122.87 313.56 123.03 313.20 123.03C312.67 123.03 312.28 122.88 312.04 122.62C311.80 122.36 311.68 121.95 311.68 121.37L311.68 117.28L310.30 117.28ZM317.80 114.54L317.80 124.00L319.09 124.00L319.09 123.19C319.56 123.84 320.25 124.18 321.17 124.18C322.16 124.18 322.92 123.83 323.50 123.13C324.02 122.48 324.28 121.63 324.28 120.61C324.28 119.62 324.02 118.80 323.51 118.15C322.95 117.45 322.20 117.10 321.23 117.10C320.40 117.10 319.73 117.49 319.18 118.28L319.18 114.54L317.80 114.54ZM320.92 118.22C321.60 118.22 322.11 118.44 322.43 118.90C322.72 119.29 322.86 119.87 322.86 120.61C322.86 121.35 322.72 121.92 322.46 122.34C322.13 122.82 321.64 123.06 320.96 123.06C320.36 123.06 319.89 122.82 319.57 122.35C319.28 121.92 319.14 121.37 319.14 120.70L319.14 120.58C319.14 119.85 319.31 119.27 319.67 118.83C319.99 118.41 320.40 118.22 320.92 118.22ZM330.04 114.72L330.04 124.00L331.45 124.00L331.45 120.39L333.86 120.39C336.08 120.39 337.20 119.44 337.20 117.54C337.20 115.65 336.09 114.72 333.88 114.72L330.04 114.72ZM331.45 115.93L333.77 115.93C334.45 115.93 334.96 116.06 335.29 116.32C335.61 116.55 335.78 116.97 335.78 117.54C335.78 118.11 335.61 118.53 335.30 118.79C334.98 119.05 334.47 119.18 333.77 119.18L331.45 119.18L331.45 115.93ZM338.51 114.72L338.51 124.00L339.93 124.00L339.93 120.17L342.44 120.17C342.97 120.17 343.37 120.27 343.66 120.50C343.93 120.74 344.10 121.10 344.15 121.62L344.27 122.78C344.32 123.30 344.45 123.71 344.67 124.00L346.21 124.00C345.89 123.66 345.71 123.21 345.66 122.64L345.50 121.15C345.40 120.24 344.95 119.70 344.11 119.52L344.11 119.49C344.62 119.36 345.02 119.09 345.32 118.67C345.58 118.29 345.71 117.86 345.71 117.37C345.71 116.49 345.43 115.82 344.86 115.36C344.31 114.93 343.56 114.72 342.62 114.72L338.51 114.72ZM339.93 115.93L342.42 115.93C343.07 115.93 343.54 116.04 343.85 116.29C344.14 116.53 344.30 116.90 344.30 117.42C344.30 117.92 344.14 118.29 343.84 118.55C343.53 118.81 343.06 118.96 342.44 118.96L339.93 118.96L339.93 115.93ZM351.91 116.78L351.75 117.79L353.08 117.79L352.58 120.93L351.42 120.93L351.25 121.93L352.42 121.93L352.10 124.00L353.23 124.00L353.55 121.93L355.28 121.93L354.96 124.00L356.09 124.00L356.41 121.93L357.74 121.93L357.91 120.93L356.57 120.93L357.07 117.79L358.23 117.79L358.40 116.78L357.23 116.78L357.56 114.72L356.44 114.72L356.10 116.78L354.37 116.78L354.70 114.72L353.58 114.72L353.24 116.78L351.91 116.78ZM353.71 120.93L354.21 117.79L355.94 117.79L355.44 120.93L353.71 120.93ZM363.56 114.72L358.99 120.65L358.99 121.98L363.51 121.98L363.51 124.00L364.86 124.00L364.86 121.98L366.27 121.98L366.27 120.85L364.86 120.85L364.86 114.72L363.56 114.72ZM363.47 116.51L363.51 116.51L363.51 120.85L360.14 120.85L363.47 116.51ZM370.57 114.54C369.58 114.54 368.77 114.86 368.18 115.54C367.59 116.16 367.29 116.99 367.28 118.03L368.70 118.03C368.72 117.28 368.88 116.72 369.19 116.33C369.49 115.93 369.93 115.73 370.52 115.73C371.06 115.73 371.49 115.86 371.78 116.12C372.06 116.38 372.21 116.77 372.21 117.29C372.21 117.84 371.99 118.34 371.57 118.81C371.31 119.09 370.87 119.44 370.24 119.88C369.19 120.61 368.49 121.17 368.15 121.57C367.53 122.27 367.23 123.08 367.23 124.00L373.62 124.00L373.62 122.75L368.98 122.75C369.18 122.25 369.78 121.66 370.78 121.00C371.70 120.37 372.34 119.88 372.70 119.50C373.30 118.84 373.61 118.11 373.61 117.31C373.61 116.49 373.32 115.82 372.77 115.30C372.19 114.78 371.45 114.54 370.57 114.54Z" fill="#253047"/>
+<path d="M579 124l10-10m-8 0h8v8" fill="none" stroke="#7A859E" stroke-width="1.3" stroke-linecap="round" stroke-linejoin="round"/>
+<path d="M282.86 137.43L282.86 146.00L283.85 146.00L283.85 142.02L288.35 142.02L288.35 141.16L283.85 141.16L283.85 138.28L288.60 138.28L288.60 137.43L282.86 137.43ZM290.46 137.46C290.26 137.46 290.09 137.52 289.94 137.66C289.80 137.78 289.74 137.95 289.74 138.16C289.74 138.37 289.80 138.54 289.94 138.68C290.09 138.81 290.26 138.88 290.46 138.88C290.66 138.88 290.83 138.81 290.98 138.68C291.12 138.54 291.19 138.37 291.19 138.16C291.19 137.95 291.12 137.78 290.98 137.66C290.83 137.52 290.66 137.46 290.46 137.46ZM289.98 139.80L289.98 146.00L290.94 146.00L290.94 139.80L289.98 139.80ZM292.32 139.80L294.52 142.71L292.06 146.00L293.20 146.00L295.06 143.42L296.90 146.00L298.04 146.00L295.58 142.71L297.78 139.80L296.65 139.80L295.06 142.00L293.45 139.80L292.32 139.80ZM303.04 137.26L303.04 146.00L303.98 146.00L303.98 137.26L303.04 137.26ZM308.44 139.63C307.50 139.63 306.77 139.94 306.22 140.59C305.69 141.20 305.42 141.97 305.42 142.90C305.42 143.83 305.69 144.60 306.22 145.20C306.77 145.84 307.50 146.17 308.44 146.17C309.36 146.17 310.10 145.84 310.67 145.20C311.18 144.60 311.45 143.83 311.45 142.90C311.45 141.97 311.18 141.20 310.66 140.59C310.10 139.94 309.36 139.63 308.44 139.63ZM308.44 140.43C309.08 140.43 309.60 140.68 309.98 141.19C310.31 141.64 310.48 142.21 310.48 142.90C310.48 143.58 310.31 144.15 309.98 144.61C309.60 145.11 309.08 145.36 308.44 145.36C307.78 145.36 307.26 145.11 306.90 144.61C306.56 144.15 306.41 143.59 306.41 142.90C306.41 142.21 306.56 141.64 306.90 141.19C307.26 140.68 307.78 140.43 308.44 140.43ZM315.25 139.63C314.39 139.63 313.70 139.93 313.20 140.54C312.70 141.12 312.46 141.85 312.46 142.76C312.46 143.66 312.70 144.39 313.20 144.97C313.70 145.56 314.39 145.86 315.25 145.86C316.19 145.86 316.88 145.44 317.34 144.61L317.34 145.70C317.34 147.07 316.72 147.76 315.47 147.76C314.90 147.76 314.48 147.66 314.21 147.45C313.93 147.26 313.75 146.95 313.68 146.53L312.72 146.53C312.83 147.20 313.10 147.70 313.55 148.04C313.98 148.38 314.63 148.54 315.47 148.54C317.35 148.54 318.30 147.55 318.30 145.57L318.30 139.80L317.34 139.80L317.34 140.86C316.88 140.04 316.19 139.63 315.25 139.63ZM315.40 140.42C316.01 140.42 316.49 140.64 316.85 141.09C317.18 141.50 317.35 142.06 317.35 142.76C317.35 143.43 317.18 143.98 316.85 144.40C316.49 144.84 316.01 145.05 315.38 145.05C314.71 145.05 314.22 144.81 313.88 144.36C313.58 143.95 313.44 143.41 313.44 142.76C313.44 142.06 313.61 141.50 313.94 141.09C314.29 140.64 314.77 140.42 315.40 140.42ZM320.58 137.46C320.38 137.46 320.21 137.52 320.06 137.66C319.92 137.78 319.86 137.95 319.86 138.16C319.86 138.37 319.92 138.54 320.06 138.68C320.21 138.81 320.38 138.88 320.58 138.88C320.78 138.88 320.95 138.81 321.10 138.68C321.24 138.54 321.31 138.37 321.31 138.16C321.31 137.95 321.24 137.78 321.10 137.66C320.95 137.52 320.78 137.46 320.58 137.46ZM320.10 139.80L320.10 146.00L321.06 146.00L321.06 139.80L320.10 139.80ZM325.76 139.63C325.36 139.63 324.98 139.72 324.65 139.92C324.31 140.10 324.04 140.36 323.82 140.71L323.82 139.80L322.86 139.80L322.86 146.00L323.82 146.00L323.82 142.26C323.86 141.69 324.04 141.25 324.37 140.91C324.68 140.60 325.06 140.44 325.49 140.44C326.57 140.44 327.12 141.04 327.12 142.26L327.12 146.00L328.08 146.00L328.08 142.18C328.08 140.48 327.30 139.63 325.76 139.63ZM336.29 139.63C335.86 139.63 335.48 139.76 335.16 140.02C334.90 140.23 334.68 140.52 334.51 140.88L334.51 139.80L333.56 139.80L333.56 146.00L334.51 146.00L334.51 142.71C334.51 142.14 334.67 141.64 335.00 141.24C335.33 140.80 335.74 140.60 336.22 140.60C336.52 140.60 336.83 140.64 337.14 140.73L337.14 139.77C336.91 139.68 336.62 139.63 336.29 139.63ZM340.50 139.63C339.60 139.63 338.89 139.95 338.36 140.60C337.84 141.21 337.58 141.98 337.58 142.89C337.58 143.90 337.85 144.69 338.40 145.29C338.93 145.87 339.65 146.17 340.54 146.17C341.34 146.17 342.00 145.93 342.52 145.47C342.94 145.09 343.21 144.61 343.36 144.01L342.40 144.01C342.24 144.44 342.04 144.76 341.77 144.98C341.46 145.23 341.04 145.36 340.54 145.36C339.95 145.36 339.48 145.17 339.14 144.79C338.81 144.40 338.63 143.86 338.58 143.17L343.48 143.17C343.45 142.09 343.21 141.24 342.76 140.64C342.25 139.96 341.50 139.63 340.50 139.63ZM340.52 140.43C341.70 140.43 342.36 141.09 342.48 142.42L338.60 142.42C338.66 141.81 338.86 141.33 339.19 140.97C339.53 140.61 339.97 140.43 340.52 140.43ZM346.26 137.79L345.31 138.19L345.31 139.80L344.06 139.80L344.06 140.60L345.31 140.60L345.31 144.55C345.31 145.02 345.41 145.36 345.61 145.60C345.83 145.87 346.20 146.00 346.70 146.00L347.64 146.00L347.64 145.20L346.85 145.20C346.63 145.20 346.48 145.14 346.39 145.04C346.30 144.94 346.26 144.78 346.26 144.55L346.26 140.60L347.80 140.60L347.80 139.80L346.26 139.80L346.26 137.79ZM351.59 139.63C351.16 139.63 350.78 139.76 350.46 140.02C350.20 140.23 349.98 140.52 349.81 140.88L349.81 139.80L348.86 139.80L348.86 146.00L349.81 146.00L349.81 142.71C349.81 142.14 349.97 141.64 350.30 141.24C350.63 140.80 351.04 140.60 351.52 140.60C351.82 140.60 352.13 140.64 352.44 140.73L352.44 139.77C352.21 139.68 351.92 139.63 351.59 139.63ZM354.04 137.46C353.83 137.46 353.66 137.52 353.52 137.66C353.38 137.78 353.32 137.95 353.32 138.16C353.32 138.37 353.38 138.54 353.52 138.68C353.66 138.81 353.83 138.88 354.04 138.88C354.24 138.88 354.41 138.81 354.55 138.68C354.70 138.54 354.77 138.37 354.77 138.16C354.77 137.95 354.70 137.78 354.55 137.66C354.41 137.52 354.24 137.46 354.04 137.46ZM353.56 139.80L353.56 146.00L354.52 146.00L354.52 139.80L353.56 139.80ZM358.87 139.63C357.97 139.63 357.26 139.95 356.74 140.60C356.21 141.21 355.96 141.98 355.96 142.89C355.96 143.90 356.22 144.69 356.77 145.29C357.30 145.87 358.02 146.17 358.91 146.17C359.71 146.17 360.37 145.93 360.89 145.47C361.31 145.09 361.58 144.61 361.73 144.01L360.77 144.01C360.61 144.44 360.41 144.76 360.14 144.98C359.83 145.23 359.41 145.36 358.91 145.36C358.32 145.36 357.85 145.17 357.52 144.79C357.18 144.40 357.00 143.86 356.95 143.17L361.85 143.17C361.82 142.09 361.58 141.24 361.13 140.64C360.62 139.96 359.87 139.63 358.87 139.63ZM358.90 140.43C360.07 140.43 360.73 141.09 360.85 142.42L356.98 142.42C357.04 141.81 357.23 141.33 357.56 140.97C357.90 140.61 358.34 140.43 358.90 140.43ZM365.17 139.63C364.48 139.63 363.90 139.78 363.47 140.10C363.00 140.41 362.77 140.82 362.77 141.34C362.77 141.87 363.00 142.27 363.48 142.56C363.77 142.75 364.28 142.93 365.02 143.11C365.69 143.28 366.13 143.41 366.34 143.50C366.72 143.70 366.92 143.96 366.92 144.31C366.92 145.00 366.36 145.36 365.26 145.36C364.73 145.36 364.33 145.27 364.07 145.08C363.80 144.86 363.62 144.51 363.55 144.02L362.62 144.02C362.76 145.45 363.65 146.17 365.28 146.17C367.03 146.17 367.91 145.52 367.91 144.25C367.91 143.71 367.66 143.29 367.16 142.98C366.84 142.77 366.31 142.58 365.57 142.40C364.94 142.23 364.51 142.10 364.28 141.99C363.92 141.81 363.76 141.58 363.76 141.32C363.76 141.04 363.89 140.83 364.15 140.67C364.39 140.50 364.73 140.43 365.16 140.43C365.65 140.43 366.04 140.53 366.30 140.72C366.54 140.89 366.70 141.18 366.78 141.56L367.72 141.56C367.55 140.26 366.71 139.63 365.17 139.63Z" fill="#515F7B"/>
+<circle cx="287" cy="164" r="5" fill="#EAF5EF"/><path d="M284.5 164l1.8 1.8 3.2-3.6" fill="none" stroke="#428466" stroke-width="1.2" stroke-linecap="round" stroke-linejoin="round"/><circle cx="420" cy="164" r="3" fill="#B99752"/>
+<path d="M302.99 160.36C301.83 160.36 300.93 160.74 300.30 161.54C299.72 162.26 299.44 163.17 299.44 164.28C299.44 165.40 299.71 166.30 300.28 166.99C300.90 167.76 301.79 168.15 302.96 168.15C303.76 168.15 304.45 167.92 305.03 167.46C305.65 166.98 306.04 166.30 306.20 165.43L305.37 165.43C305.23 166.08 304.92 166.57 304.48 166.91C304.06 167.22 303.56 167.38 302.96 167.38C302.08 167.38 301.42 167.09 300.95 166.51C300.51 165.96 300.30 165.22 300.30 164.28C300.30 163.35 300.52 162.60 300.96 162.04C301.44 161.43 302.11 161.12 302.98 161.12C303.57 161.12 304.06 161.26 304.47 161.54C304.89 161.84 305.16 162.26 305.27 162.80L306.10 162.80C305.99 162.06 305.66 161.46 305.09 161.02C304.52 160.58 303.82 160.36 302.99 160.36ZM307.30 160.36L307.30 168.00L308.13 168.00L308.13 164.90C308.13 164.40 308.27 163.97 308.56 163.63C308.83 163.30 309.17 163.13 309.59 163.13C310.05 163.13 310.39 163.26 310.64 163.54C310.88 163.81 311.00 164.20 311.00 164.70L311.00 168.00L311.84 168.00L311.84 164.58C311.84 163.88 311.67 163.35 311.34 162.98C311.00 162.60 310.51 162.42 309.88 162.42C309.51 162.42 309.19 162.51 308.89 162.68C308.58 162.85 308.32 163.12 308.13 163.46L308.13 160.36L307.30 160.36ZM315.37 162.42C314.58 162.42 313.96 162.71 313.50 163.28C313.04 163.81 312.82 164.48 312.82 165.28C312.82 166.16 313.05 166.86 313.53 167.38C313.99 167.88 314.62 168.15 315.40 168.15C316.10 168.15 316.68 167.94 317.13 167.54C317.50 167.20 317.74 166.78 317.87 166.26L317.03 166.26C316.89 166.63 316.71 166.92 316.48 167.11C316.21 167.33 315.84 167.44 315.40 167.44C314.89 167.44 314.48 167.28 314.18 166.94C313.89 166.60 313.73 166.13 313.69 165.52L317.97 165.52C317.95 164.58 317.74 163.83 317.34 163.31C316.90 162.72 316.24 162.42 315.37 162.42ZM315.39 163.13C316.42 163.13 317.00 163.71 317.10 164.87L313.71 164.87C313.76 164.34 313.93 163.92 314.22 163.60C314.52 163.29 314.91 163.13 315.39 163.13ZM321.30 162.42C320.49 162.42 319.85 162.71 319.39 163.29C318.96 163.81 318.75 164.48 318.75 165.31C318.75 166.14 318.96 166.81 319.39 167.33C319.84 167.87 320.47 168.15 321.29 168.15C321.96 168.15 322.50 167.97 322.91 167.62C323.33 167.26 323.59 166.73 323.72 166.04L322.88 166.04C322.75 166.97 322.22 167.44 321.29 167.44C320.75 167.44 320.33 167.24 320.04 166.87C319.75 166.49 319.61 165.96 319.61 165.30C319.61 164.64 319.76 164.12 320.05 163.73C320.36 163.33 320.78 163.13 321.30 163.13C321.73 163.13 322.08 163.22 322.35 163.43C322.61 163.64 322.78 163.96 322.86 164.38L323.69 164.38C323.59 163.72 323.34 163.22 322.92 162.90C322.51 162.58 321.97 162.42 321.30 162.42ZM324.70 160.36L324.70 168.00L325.54 168.00L325.54 166.08L326.40 165.30L328.53 168.00L329.61 168.00L326.98 164.76L329.38 162.57L328.26 162.57L325.54 165.09L325.54 160.36L324.70 160.36ZM332.18 162.42C331.57 162.42 331.07 162.56 330.69 162.83C330.28 163.11 330.08 163.46 330.08 163.93C330.08 164.39 330.28 164.73 330.70 164.99C330.95 165.15 331.40 165.31 332.04 165.47C332.63 165.62 333.02 165.73 333.20 165.82C333.53 165.98 333.71 166.22 333.71 166.52C333.71 167.13 333.22 167.44 332.25 167.44C331.79 167.44 331.44 167.36 331.21 167.19C330.98 167.00 330.83 166.70 330.76 166.27L329.94 166.27C330.07 167.52 330.85 168.15 332.27 168.15C333.81 168.15 334.57 167.58 334.57 166.47C334.57 165.99 334.35 165.63 333.92 165.35C333.64 165.18 333.18 165.01 332.53 164.85C331.98 164.70 331.60 164.59 331.40 164.49C331.09 164.34 330.94 164.14 330.94 163.91C330.94 163.66 331.06 163.47 331.29 163.34C331.50 163.19 331.79 163.13 332.17 163.13C332.60 163.13 332.94 163.21 333.17 163.38C333.38 163.53 333.51 163.78 333.59 164.12L334.41 164.12C334.26 162.98 333.52 162.42 332.18 162.42ZM341.65 162.42C340.83 162.42 340.23 162.77 339.84 163.46L339.84 162.57L339.06 162.57L339.06 170.08L339.90 170.08L339.90 167.01C340.32 167.77 340.92 168.15 341.69 168.15C342.47 168.15 343.07 167.85 343.51 167.29C343.91 166.76 344.12 166.10 344.12 165.30C344.12 164.48 343.91 163.82 343.50 163.30C343.05 162.71 342.43 162.42 341.65 162.42ZM341.55 163.12C342.12 163.12 342.56 163.33 342.87 163.77C343.12 164.15 343.26 164.66 343.26 165.30C343.26 165.95 343.12 166.47 342.85 166.84C342.54 167.24 342.10 167.45 341.51 167.45C341.01 167.45 340.62 167.25 340.33 166.88C340.01 166.49 339.87 165.98 339.87 165.35L339.87 165.25C339.87 164.64 340.00 164.14 340.28 163.76C340.57 163.33 341.00 163.12 341.55 163.12ZM347.57 162.42C346.92 162.42 346.41 162.55 346.01 162.80C345.57 163.08 345.28 163.51 345.17 164.07L346.00 164.14C346.08 163.79 346.26 163.53 346.54 163.36C346.80 163.19 347.12 163.12 347.52 163.12C348.47 163.12 348.94 163.57 348.94 164.48L348.94 164.77L347.64 164.79C346.82 164.80 346.19 164.96 345.75 165.25C345.24 165.56 345.00 166.03 345.00 166.65C345.00 167.09 345.17 167.45 345.50 167.74C345.83 168.01 346.26 168.15 346.81 168.15C347.31 168.15 347.76 168.03 348.16 167.81C348.50 167.62 348.78 167.38 348.99 167.09L348.99 168.00L349.78 168.00L349.78 164.51C349.78 163.88 349.61 163.39 349.30 163.03C348.92 162.62 348.35 162.42 347.57 162.42ZM348.94 165.40L348.94 165.86C348.94 166.28 348.74 166.66 348.35 166.98C347.95 167.32 347.50 167.49 346.99 167.49C346.65 167.49 346.38 167.40 346.17 167.24C345.96 167.08 345.86 166.88 345.86 166.62C345.86 165.84 346.47 165.44 347.69 165.42L348.94 165.40ZM353.00 162.42C352.39 162.42 351.89 162.56 351.51 162.83C351.10 163.11 350.90 163.46 350.90 163.93C350.90 164.39 351.10 164.73 351.52 164.99C351.77 165.15 352.22 165.31 352.86 165.47C353.45 165.62 353.84 165.73 354.02 165.82C354.36 165.98 354.53 166.22 354.53 166.52C354.53 167.13 354.04 167.44 353.07 167.44C352.61 167.44 352.27 167.36 352.04 167.19C351.80 167.00 351.65 166.70 351.58 166.27L350.76 166.27C350.89 167.52 351.67 168.15 353.10 168.15C354.63 168.15 355.40 167.58 355.40 166.47C355.40 165.99 355.17 165.63 354.74 165.35C354.46 165.18 354.00 165.01 353.35 164.85C352.80 164.70 352.42 164.59 352.22 164.49C351.91 164.34 351.76 164.14 351.76 163.91C351.76 163.66 351.88 163.47 352.11 163.34C352.32 163.19 352.61 163.13 352.99 163.13C353.42 163.13 353.76 163.21 353.99 163.38C354.20 163.53 354.33 163.78 354.41 164.12L355.23 164.12C355.08 162.98 354.35 162.42 353.00 162.42ZM358.30 162.42C357.69 162.42 357.19 162.56 356.81 162.83C356.40 163.11 356.20 163.46 356.20 163.93C356.20 164.39 356.40 164.73 356.82 164.99C357.08 165.15 357.53 165.31 358.17 165.47C358.76 165.62 359.14 165.73 359.32 165.82C359.66 165.98 359.84 166.22 359.84 166.52C359.84 167.13 359.34 167.44 358.38 167.44C357.92 167.44 357.57 167.36 357.34 167.19C357.11 167.00 356.95 166.70 356.89 166.27L356.07 166.27C356.19 167.52 356.97 168.15 358.40 168.15C359.93 168.15 360.70 167.58 360.70 166.47C360.70 165.99 360.48 165.63 360.05 165.35C359.76 165.18 359.30 165.01 358.65 164.85C358.10 164.70 357.73 164.59 357.53 164.49C357.21 164.34 357.06 164.14 357.06 163.91C357.06 163.66 357.18 163.47 357.41 163.34C357.62 163.19 357.92 163.13 358.29 163.13C358.72 163.13 359.06 163.21 359.29 163.38C359.50 163.53 359.64 163.78 359.71 164.12L360.53 164.12C360.38 162.98 359.65 162.42 358.30 162.42ZM363.92 162.42C363.13 162.42 362.51 162.71 362.05 163.28C361.59 163.81 361.37 164.48 361.37 165.28C361.37 166.16 361.60 166.86 362.08 167.38C362.55 167.88 363.18 168.15 363.95 168.15C364.66 168.15 365.23 167.94 365.69 167.54C366.05 167.20 366.29 166.78 366.42 166.26L365.58 166.26C365.44 166.63 365.27 166.92 365.03 167.11C364.76 167.33 364.39 167.44 363.95 167.44C363.44 167.44 363.03 167.28 362.74 166.94C362.44 166.60 362.28 166.13 362.24 165.52L366.53 165.52C366.50 164.58 366.29 163.83 365.90 163.31C365.45 162.72 364.79 162.42 363.92 162.42ZM363.94 163.13C364.97 163.13 365.55 163.71 365.65 164.87L362.26 164.87C362.31 164.34 362.48 163.92 362.78 163.60C363.07 163.29 363.46 163.13 363.94 163.13ZM371.52 160.36L371.52 163.57C371.10 162.80 370.50 162.42 369.73 162.42C368.95 162.42 368.35 162.71 367.91 163.30C367.50 163.82 367.30 164.47 367.30 165.27C367.30 166.09 367.50 166.76 367.91 167.29C368.35 167.85 368.97 168.15 369.77 168.15C370.59 168.15 371.20 167.80 371.58 167.11L371.58 168.00L372.36 168.00L372.36 160.36L371.52 160.36ZM369.91 163.12C370.39 163.12 370.79 163.31 371.09 163.71C371.39 164.09 371.54 164.61 371.54 165.24L371.54 165.34C371.54 165.95 371.41 166.45 371.15 166.82C370.84 167.24 370.42 167.45 369.88 167.45C369.29 167.45 368.85 167.23 368.55 166.81C368.29 166.44 368.16 165.92 368.16 165.27C368.16 164.62 368.29 164.12 368.56 163.75C368.86 163.33 369.31 163.12 369.91 163.12Z" fill="#397359"/>
+<path d="M434.95 160.50L432.00 168.00L432.92 168.00L433.72 165.90L437.17 165.90L437.96 168.00L438.90 168.00L435.95 160.50L434.95 160.50ZM434.00 165.18L435.43 161.43L435.48 161.43L436.89 165.18L434.00 165.18ZM438.95 162.57L440.80 168.00L441.59 168.00L442.87 163.63L444.13 168.00L444.93 168.00L446.77 162.57L445.85 162.57L444.52 166.97L443.26 162.57L442.47 162.57L441.21 166.97L439.88 162.57L438.95 162.57ZM449.84 162.42C449.19 162.42 448.67 162.55 448.28 162.80C447.83 163.08 447.55 163.51 447.44 164.07L448.26 164.14C448.35 163.79 448.53 163.53 448.81 163.36C449.06 163.19 449.39 163.12 449.79 163.12C450.73 163.12 451.20 163.57 451.20 164.48L451.20 164.77L449.90 164.79C449.08 164.80 448.45 164.96 448.01 165.25C447.51 165.56 447.27 166.03 447.27 166.65C447.27 167.09 447.44 167.45 447.77 167.74C448.10 168.01 448.53 168.15 449.07 168.15C449.58 168.15 450.03 168.03 450.43 167.81C450.76 167.62 451.05 167.38 451.26 167.09L451.26 168.00L452.04 168.00L452.04 164.51C452.04 163.88 451.88 163.39 451.56 163.03C451.18 162.62 450.62 162.42 449.84 162.42ZM451.20 165.40L451.20 165.86C451.20 166.28 451.00 166.66 450.62 166.98C450.22 167.32 449.77 167.49 449.25 167.49C448.92 167.49 448.64 167.40 448.43 167.24C448.22 167.08 448.13 166.88 448.13 166.62C448.13 165.84 448.74 165.44 449.96 165.42L451.20 165.40ZM454.04 160.52C453.86 160.52 453.71 160.58 453.59 160.70C453.46 160.81 453.41 160.95 453.41 161.14C453.41 161.32 453.46 161.47 453.59 161.59C453.71 161.71 453.86 161.77 454.04 161.77C454.22 161.77 454.37 161.71 454.49 161.59C454.62 161.47 454.68 161.32 454.68 161.14C454.68 160.95 454.62 160.81 454.49 160.70C454.37 160.58 454.22 160.52 454.04 160.52ZM453.62 162.57L453.62 168.00L454.46 168.00L454.46 162.57L453.62 162.57ZM457.48 160.82L456.65 161.16L456.65 162.57L455.56 162.57L455.56 163.28L456.65 163.28L456.65 166.73C456.65 167.14 456.74 167.44 456.92 167.65C457.11 167.88 457.43 168.00 457.87 168.00L458.69 168.00L458.69 167.30L458.00 167.30C457.81 167.30 457.67 167.24 457.60 167.16C457.52 167.08 457.48 166.93 457.48 166.73L457.48 163.28L458.83 163.28L458.83 162.57L457.48 162.57L457.48 160.82ZM460.45 160.52C460.28 160.52 460.13 160.58 460.00 160.70C459.88 160.81 459.82 160.95 459.82 161.14C459.82 161.32 459.88 161.47 460.00 161.59C460.13 161.71 460.28 161.77 460.45 161.77C460.63 161.77 460.78 161.71 460.91 161.59C461.03 161.47 461.10 161.32 461.10 161.14C461.10 160.95 461.03 160.81 460.91 160.70C460.78 160.58 460.63 160.52 460.45 160.52ZM460.03 162.57L460.03 168.00L460.88 168.00L460.88 162.57L460.03 162.57ZM464.99 162.42C464.63 162.42 464.31 162.51 464.01 162.68C463.72 162.83 463.48 163.06 463.29 163.37L463.29 162.57L462.45 162.57L462.45 168.00L463.29 168.00L463.29 164.72C463.32 164.23 463.48 163.84 463.77 163.55C464.05 163.28 464.37 163.14 464.75 163.14C465.69 163.14 466.18 163.66 466.18 164.72L466.18 168.00L467.02 168.00L467.02 164.66C467.02 163.17 466.33 162.42 464.99 162.42ZM470.56 162.42C469.80 162.42 469.20 162.69 468.76 163.22C468.32 163.73 468.11 164.37 468.11 165.16C468.11 165.95 468.32 166.59 468.76 167.10C469.20 167.61 469.80 167.87 470.56 167.87C471.38 167.87 471.98 167.51 472.38 166.78L472.38 167.74C472.38 168.93 471.84 169.54 470.75 169.54C470.25 169.54 469.88 169.45 469.64 169.27C469.40 169.10 469.24 168.83 469.18 168.46L468.34 168.46C468.44 169.05 468.68 169.49 469.06 169.78C469.44 170.08 470.01 170.23 470.75 170.23C472.39 170.23 473.22 169.35 473.22 167.62L473.22 162.57L472.38 162.57L472.38 163.51C471.98 162.78 471.38 162.42 470.56 162.42ZM470.68 163.12C471.22 163.12 471.64 163.31 471.95 163.71C472.25 164.06 472.39 164.56 472.39 165.16C472.39 165.75 472.25 166.24 471.95 166.60C471.64 166.98 471.22 167.17 470.67 167.17C470.08 167.17 469.65 166.96 469.36 166.56C469.10 166.20 468.97 165.73 468.97 165.16C468.97 164.56 469.12 164.06 469.41 163.71C469.72 163.31 470.14 163.12 470.68 163.12ZM480.40 162.42C480.03 162.42 479.70 162.54 479.42 162.77C479.19 162.95 479.00 163.20 478.85 163.52L478.85 162.57L478.02 162.57L478.02 168.00L478.85 168.00L478.85 165.12C478.85 164.62 478.99 164.19 479.28 163.83C479.56 163.45 479.92 163.28 480.34 163.28C480.60 163.28 480.88 163.31 481.15 163.39L481.15 162.55C480.95 162.47 480.70 162.42 480.40 162.42ZM484.09 162.42C483.30 162.42 482.68 162.71 482.22 163.28C481.76 163.81 481.54 164.48 481.54 165.28C481.54 166.16 481.77 166.86 482.25 167.38C482.71 167.88 483.34 168.15 484.12 168.15C484.83 168.15 485.40 167.94 485.85 167.54C486.22 167.20 486.46 166.78 486.59 166.26L485.75 166.26C485.61 166.63 485.43 166.92 485.20 167.11C484.93 167.33 484.56 167.44 484.12 167.44C483.61 167.44 483.20 167.28 482.90 166.94C482.61 166.60 482.45 166.13 482.41 165.52L486.69 165.52C486.67 164.58 486.46 163.83 486.06 163.31C485.62 162.72 484.96 162.42 484.09 162.42ZM484.11 163.13C485.14 163.13 485.72 163.71 485.82 164.87L482.43 164.87C482.48 164.34 482.65 163.92 482.95 163.60C483.24 163.29 483.63 163.13 484.11 163.13ZM487.08 162.57L489.13 168.00L489.98 168.00L492.04 162.57L491.12 162.57L489.56 166.95L488.01 162.57L487.08 162.57ZM493.44 160.52C493.26 160.52 493.11 160.58 492.98 160.70C492.86 160.81 492.81 160.95 492.81 161.14C492.81 161.32 492.86 161.47 492.98 161.59C493.11 161.71 493.26 161.77 493.44 161.77C493.61 161.77 493.76 161.71 493.89 161.59C494.01 161.47 494.08 161.32 494.08 161.14C494.08 160.95 494.01 160.81 493.89 160.70C493.76 160.58 493.61 160.52 493.44 160.52ZM493.02 162.57L493.02 168.00L493.86 168.00L493.86 162.57L493.02 162.57ZM497.67 162.42C496.88 162.42 496.26 162.71 495.80 163.28C495.34 163.81 495.12 164.48 495.12 165.28C495.12 166.16 495.35 166.86 495.83 167.38C496.29 167.88 496.92 168.15 497.70 168.15C498.40 168.15 498.98 167.94 499.43 167.54C499.80 167.20 500.04 166.78 500.17 166.26L499.33 166.26C499.19 166.63 499.01 166.92 498.78 167.11C498.51 167.33 498.14 167.44 497.70 167.44C497.18 167.44 496.77 167.28 496.48 166.94C496.19 166.60 496.03 166.13 495.99 165.52L500.27 165.52C500.25 164.58 500.04 163.83 499.64 163.31C499.20 162.72 498.54 162.42 497.67 162.42ZM497.69 163.13C498.72 163.13 499.29 163.71 499.40 164.87L496.01 164.87C496.06 164.34 496.23 163.92 496.52 163.60C496.82 163.29 497.20 163.13 497.69 163.13ZM500.66 162.57L502.51 168.00L503.29 168.00L504.58 163.63L505.84 168.00L506.63 168.00L508.48 162.57L507.56 162.57L506.22 166.97L504.96 162.57L504.18 162.57L502.92 166.97L501.58 162.57L500.66 162.57Z" fill="#8C754B"/>
+<path d="M266 181H608" stroke="#E6EAF2"/>
+<path d="M282.78 189.72L282.78 197.00L283.57 197.00L283.57 189.72L282.78 189.72ZM287.28 191.69C286.50 191.69 285.89 191.95 285.43 192.49C284.99 193.00 284.77 193.64 284.77 194.42C284.77 195.19 284.99 195.83 285.43 196.33C285.89 196.87 286.50 197.14 287.28 197.14C288.05 197.14 288.67 196.87 289.14 196.33C289.57 195.83 289.79 195.19 289.79 194.42C289.79 193.64 289.57 193.00 289.13 192.49C288.67 191.95 288.05 191.69 287.28 191.69ZM287.28 192.36C287.82 192.36 288.25 192.57 288.57 192.99C288.84 193.37 288.98 193.84 288.98 194.42C288.98 194.98 288.84 195.46 288.57 195.84C288.25 196.26 287.82 196.47 287.28 196.47C286.73 196.47 286.30 196.26 286.00 195.84C285.72 195.46 285.59 194.99 285.59 194.42C285.59 193.84 285.72 193.37 286.00 192.99C286.30 192.57 286.73 192.36 287.28 192.36ZM292.96 191.69C292.24 191.69 291.67 191.94 291.25 192.45C290.83 192.93 290.63 193.54 290.63 194.30C290.63 195.05 290.83 195.66 291.25 196.14C291.67 196.63 292.24 196.88 292.96 196.88C293.74 196.88 294.32 196.53 294.70 195.84L294.70 196.75C294.70 197.89 294.18 198.47 293.14 198.47C292.67 198.47 292.32 198.38 292.09 198.21C291.86 198.05 291.71 197.79 291.65 197.44L290.85 197.44C290.94 198.00 291.17 198.42 291.54 198.70C291.90 198.98 292.44 199.12 293.14 199.12C294.71 199.12 295.50 198.29 295.50 196.64L295.50 191.83L294.70 191.83L294.70 192.72C294.32 192.03 293.74 191.69 292.96 191.69ZM293.08 192.35C293.59 192.35 293.99 192.53 294.29 192.91C294.57 193.25 294.71 193.72 294.71 194.30C294.71 194.86 294.57 195.32 294.29 195.67C293.99 196.03 293.59 196.21 293.07 196.21C292.51 196.21 292.10 196.01 291.82 195.63C291.57 195.29 291.45 194.84 291.45 194.30C291.45 193.72 291.59 193.25 291.87 192.91C292.16 192.53 292.56 192.35 293.08 192.35ZM297.40 189.88C297.23 189.88 297.09 189.93 296.97 190.05C296.85 190.15 296.80 190.29 296.80 190.47C296.80 190.64 296.85 190.78 296.97 190.90C297.09 191.01 297.23 191.07 297.40 191.07C297.57 191.07 297.71 191.01 297.83 190.90C297.95 190.78 298.01 190.64 298.01 190.47C298.01 190.29 297.95 190.15 297.83 190.05C297.71 189.93 297.57 189.88 297.40 189.88ZM297.00 191.83L297.00 197.00L297.80 197.00L297.80 191.83L297.00 191.83ZM301.72 191.69C301.38 191.69 301.07 191.77 300.79 191.93C300.51 192.08 300.28 192.30 300.10 192.59L300.10 191.83L299.30 191.83L299.30 197.00L300.10 197.00L300.10 193.88C300.13 193.41 300.28 193.04 300.56 192.76C300.82 192.50 301.13 192.37 301.49 192.37C302.39 192.37 302.85 192.87 302.85 193.88L302.85 197.00L303.65 197.00L303.65 193.82C303.65 192.40 303.00 191.69 301.72 191.69ZM305.59 195.81C305.41 195.81 305.27 195.87 305.16 195.99C305.04 196.11 304.98 196.25 304.98 196.43C304.98 196.60 305.04 196.74 305.16 196.86C305.27 196.98 305.41 197.04 305.59 197.04C305.75 197.04 305.90 196.98 306.02 196.86C306.14 196.74 306.20 196.60 306.20 196.43C306.20 196.25 306.14 196.11 306.02 195.99C305.90 195.87 305.75 195.81 305.59 195.81ZM308.91 190.16L308.12 190.49L308.12 191.83L307.08 191.83L307.08 192.50L308.12 192.50L308.12 195.79C308.12 196.18 308.20 196.47 308.37 196.67C308.55 196.89 308.86 197.00 309.28 197.00L310.06 197.00L310.06 196.33L309.40 196.33C309.22 196.33 309.09 196.28 309.02 196.20C308.94 196.12 308.91 195.98 308.91 195.79L308.91 192.50L310.19 192.50L310.19 191.83L308.91 191.83L308.91 190.16ZM312.91 191.69C312.33 191.69 311.85 191.82 311.49 192.08C311.10 192.34 310.91 192.68 310.91 193.12C310.91 193.56 311.10 193.89 311.50 194.13C311.74 194.29 312.17 194.44 312.78 194.59C313.34 194.73 313.71 194.84 313.88 194.92C314.20 195.08 314.37 195.30 314.37 195.59C314.37 196.17 313.90 196.47 312.98 196.47C312.54 196.47 312.21 196.39 311.99 196.23C311.77 196.05 311.62 195.76 311.56 195.35L310.78 195.35C310.90 196.54 311.64 197.14 313.00 197.14C314.46 197.14 315.19 196.60 315.19 195.54C315.19 195.09 314.98 194.74 314.57 194.48C314.30 194.31 313.86 194.15 313.24 194.00C312.72 193.86 312.36 193.75 312.17 193.66C311.87 193.51 311.73 193.32 311.73 193.10C311.73 192.87 311.84 192.69 312.06 192.56C312.26 192.42 312.54 192.36 312.90 192.36C313.31 192.36 313.63 192.44 313.85 192.60C314.05 192.74 314.18 192.98 314.25 193.30L315.03 193.30C314.89 192.22 314.19 191.69 312.91 191.69Z" fill="#7A859E"/>
+<rect x="278" y="204" width="318" height="20" fill="#FCF0F0"/><rect x="278" y="224" width="318" height="20" fill="#EAF5EF"/>
+<path d="M288.47 214.10L294.15 214.10L294.15 215.01L288.47 215.01ZM307.45 213.23Q307.13 212.98 306.80 212.87Q306.48 212.75 306.08 212.75Q305.16 212.75 304.67 213.33Q304.18 213.91 304.18 215.01L304.18 218.00L303.19 218.00L303.19 211.98L304.18 211.98L304.18 213.16Q304.43 212.52 304.94 212.18Q305.46 211.84 306.16 211.84Q306.52 211.84 306.84 211.93Q307.16 212.02 307.45 212.22ZM313.88 214.50L313.88 214.98L309.60 214.98L309.60 215.01Q309.56 216.24 310.07 216.78Q310.59 217.32 311.52 217.32Q311.99 217.32 312.51 217.17Q313.02 217.02 313.61 216.71L313.61 217.69Q313.05 217.92 312.52 218.04Q312.00 218.16 311.51 218.16Q310.11 218.16 309.32 217.32Q308.53 216.47 308.53 215.00Q308.53 213.56 309.30 212.70Q310.08 211.84 311.36 211.84Q312.51 211.84 313.18 212.62Q313.84 213.40 313.88 214.50ZM312.90 214.21Q312.83 213.58 312.44 213.13Q312.05 212.68 311.32 212.68Q310.61 212.68 310.15 213.15Q309.68 213.62 309.64 214.21ZM317.79 210.28L317.79 211.98L320.03 211.98L320.03 212.75L317.79 212.75L317.79 216.02Q317.79 216.68 318.04 216.95Q318.29 217.21 318.92 217.21L320.03 217.21L320.03 218.00L318.82 218.00Q317.71 218.00 317.26 217.55Q316.80 217.11 316.80 216.02L316.80 212.75L315.19 212.75L315.19 211.98L316.80 211.98L316.80 210.28ZM327.32 213.23Q327.00 212.98 326.67 212.87Q326.34 212.75 325.95 212.75Q325.03 212.75 324.54 213.33Q324.05 213.91 324.05 215.01L324.05 218.00L323.06 218.00L323.06 211.98L324.05 211.98L324.05 213.16Q324.30 212.52 324.81 212.18Q325.32 211.84 326.03 211.84Q326.39 211.84 326.71 211.93Q327.03 212.02 327.32 212.22ZM329.43 212.01L331.96 212.01L331.96 217.23L333.92 217.23L333.92 218.00L329.01 218.00L329.01 217.23L330.97 217.23L330.97 212.77L329.43 212.77ZM330.97 209.67L331.96 209.67L331.96 210.92L330.97 210.92ZM340.37 214.50L340.37 214.98L336.09 214.98L336.09 215.01Q336.05 216.24 336.56 216.78Q337.08 217.32 338.01 217.32Q338.48 217.32 339.00 217.17Q339.51 217.02 340.10 216.71L340.10 217.69Q339.54 217.92 339.01 218.04Q338.49 218.16 338.00 218.16Q336.60 218.16 335.81 217.32Q335.02 216.47 335.02 215.00Q335.02 213.56 335.79 212.70Q336.57 211.84 337.85 211.84Q339.00 211.84 339.67 212.62Q340.33 213.40 340.37 214.50ZM339.39 214.21Q339.32 213.58 338.93 213.13Q338.54 212.68 337.81 212.68Q337.10 212.68 336.64 213.15Q336.17 213.62 336.13 214.21ZM346.21 212.19L346.21 213.16Q345.78 212.91 345.35 212.79Q344.92 212.67 344.48 212.67Q343.81 212.67 343.48 212.88Q343.15 213.10 343.15 213.55Q343.15 213.95 343.39 214.15Q343.64 214.35 344.62 214.54L345.02 214.61Q345.76 214.75 346.13 215.17Q346.51 215.59 346.51 216.26Q346.51 217.15 345.88 217.65Q345.25 218.16 344.12 218.16Q343.67 218.16 343.18 218.06Q342.69 217.97 342.12 217.78L342.12 216.76Q342.68 217.04 343.18 217.19Q343.69 217.33 344.14 217.33Q344.79 217.33 345.15 217.06Q345.51 216.80 345.51 216.32Q345.51 215.63 344.20 215.37L344.15 215.36L343.78 215.28Q342.93 215.12 342.54 214.72Q342.15 214.33 342.15 213.64Q342.15 212.78 342.73 212.31Q343.32 211.84 344.40 211.84Q344.89 211.84 345.33 211.93Q345.78 212.02 346.21 212.19ZM354.70 215.31L360.38 215.31L360.38 216.22L354.70 216.22ZM354.70 212.78L360.38 212.78L360.38 213.69L354.70 213.69ZM370.78 209.86Q372.06 209.86 372.72 210.91Q373.38 211.96 373.38 214.01Q373.38 216.06 372.72 217.11Q372.06 218.16 370.78 218.16Q369.50 218.16 368.84 217.11Q368.19 216.06 368.19 214.01Q368.19 211.96 368.84 210.91Q369.50 209.86 370.78 209.86ZM370.78 217.30Q371.54 217.30 371.92 216.49Q372.29 215.67 372.29 214.01Q372.29 213.12 372.18 212.41L369.62 216.41Q370.03 217.30 370.78 217.30ZM370.78 210.72Q370.02 210.72 369.65 211.53Q369.28 212.34 369.28 214.01Q369.28 214.77 369.38 215.43L371.88 211.44Q371.47 210.72 370.78 210.72ZM376.47 216.06L378.14 216.06L378.14 217.48L377.08 219.54L375.94 219.54L376.47 217.48ZM376.40 211.99L378.07 211.99L378.07 213.93L376.40 213.93Z" fill="#8F5F66"/>
+<path d="M291.87 231.67L291.87 234.05L294.26 234.05L294.26 234.96L291.87 234.96L291.87 237.34L290.96 237.34L290.96 234.96L288.58 234.96L288.58 234.05L290.96 234.05L290.96 231.67ZM307.45 233.23Q307.13 232.98 306.80 232.87Q306.48 232.75 306.08 232.75Q305.16 232.75 304.67 233.33Q304.18 233.91 304.18 235.01L304.18 238.00L303.19 238.00L303.19 231.98L304.18 231.98L304.18 233.16Q304.43 232.52 304.94 232.18Q305.46 231.84 306.16 231.84Q306.52 231.84 306.84 231.93Q307.16 232.02 307.45 232.22ZM313.88 234.50L313.88 234.98L309.60 234.98L309.60 235.01Q309.56 236.24 310.07 236.78Q310.59 237.32 311.52 237.32Q311.99 237.32 312.51 237.17Q313.02 237.02 313.61 236.71L313.61 237.69Q313.05 237.92 312.52 238.04Q312.00 238.16 311.51 238.16Q310.11 238.16 309.32 237.32Q308.53 236.47 308.53 235.00Q308.53 233.56 309.30 232.70Q310.08 231.84 311.36 231.84Q312.51 231.84 313.18 232.62Q313.84 233.40 313.88 234.50ZM312.90 234.21Q312.83 233.58 312.44 233.13Q312.05 232.68 311.32 232.68Q310.61 232.68 310.15 233.15Q309.68 233.62 309.64 234.21ZM317.79 230.28L317.79 231.98L320.03 231.98L320.03 232.75L317.79 232.75L317.79 236.02Q317.79 236.68 318.04 236.95Q318.29 237.21 318.92 237.21L320.03 237.21L320.03 238.00L318.82 238.00Q317.71 238.00 317.26 237.55Q316.80 237.11 316.80 236.02L316.80 232.75L315.19 232.75L315.19 231.98L316.80 231.98L316.80 230.28ZM327.32 233.23Q327.00 232.98 326.67 232.87Q326.34 232.75 325.95 232.75Q325.03 232.75 324.54 233.33Q324.05 233.91 324.05 235.01L324.05 238.00L323.06 238.00L323.06 231.98L324.05 231.98L324.05 233.16Q324.30 232.52 324.81 232.18Q325.32 231.84 326.03 231.84Q326.39 231.84 326.71 231.93Q327.03 232.02 327.32 232.22ZM329.43 232.01L331.96 232.01L331.96 237.23L333.92 237.23L333.92 238.00L329.01 238.00L329.01 237.23L330.97 237.23L330.97 232.77L329.43 232.77ZM330.97 229.67L331.96 229.67L331.96 230.92L330.97 230.92ZM340.37 234.50L340.37 234.98L336.09 234.98L336.09 235.01Q336.05 236.24 336.56 236.78Q337.08 237.32 338.01 237.32Q338.48 237.32 339.00 237.17Q339.51 237.02 340.10 236.71L340.10 237.69Q339.54 237.92 339.01 238.04Q338.49 238.16 338.00 238.16Q336.60 238.16 335.81 237.32Q335.02 236.47 335.02 235.00Q335.02 233.56 335.79 232.70Q336.57 231.84 337.85 231.84Q339.00 231.84 339.67 232.62Q340.33 233.40 340.37 234.50ZM339.39 234.21Q339.32 233.58 338.93 233.13Q338.54 232.68 337.81 232.68Q337.10 232.68 336.64 233.15Q336.17 233.62 336.13 234.21ZM346.21 232.19L346.21 233.16Q345.78 232.91 345.35 232.79Q344.92 232.67 344.48 232.67Q343.81 232.67 343.48 232.88Q343.15 233.10 343.15 233.55Q343.15 233.95 343.39 234.15Q343.64 234.35 344.62 234.54L345.02 234.61Q345.76 234.75 346.13 235.17Q346.51 235.59 346.51 236.26Q346.51 237.15 345.88 237.65Q345.25 238.16 344.12 238.16Q343.67 238.16 343.18 238.06Q342.69 237.97 342.12 237.78L342.12 236.76Q342.68 237.04 343.18 237.19Q343.69 237.33 344.14 237.33Q344.79 237.33 345.15 237.06Q345.51 236.80 345.51 236.32Q345.51 235.63 344.20 235.37L344.15 235.36L343.78 235.28Q342.93 235.12 342.54 234.72Q342.15 234.33 342.15 233.64Q342.15 232.78 342.73 232.31Q343.32 231.84 344.40 231.84Q344.89 231.84 345.33 231.93Q345.78 232.02 346.21 232.19ZM354.70 235.31L360.38 235.31L360.38 236.22L354.70 236.22ZM354.70 232.78L360.38 232.78L360.38 233.69L354.70 233.69ZM371.64 233.71Q372.43 233.92 372.85 234.45Q373.27 234.99 373.27 235.79Q373.27 236.89 372.52 237.52Q371.78 238.16 370.46 238.16Q369.91 238.16 369.33 238.05Q368.76 237.95 368.21 237.76L368.21 236.68Q368.75 236.96 369.29 237.10Q369.82 237.24 370.34 237.24Q371.24 237.24 371.71 236.84Q372.19 236.44 372.19 235.68Q372.19 234.98 371.71 234.57Q371.24 234.16 370.42 234.16L369.59 234.16L369.59 233.27L370.42 233.27Q371.17 233.27 371.58 232.94Q372.00 232.61 372.00 232.03Q372.00 231.41 371.61 231.08Q371.23 230.75 370.51 230.75Q370.03 230.75 369.52 230.86Q369.01 230.96 368.45 231.18L368.45 230.18Q369.10 230.01 369.61 229.92Q370.11 229.84 370.51 229.84Q371.68 229.84 372.38 230.42Q373.08 231.01 373.08 231.98Q373.08 232.65 372.71 233.09Q372.34 233.53 371.64 233.71ZM376.47 236.06L378.14 236.06L378.14 237.48L377.08 239.54L375.94 239.54L376.47 237.48ZM376.40 231.99L378.07 231.99L378.07 233.93L376.40 233.93Z" fill="#397359"/>
+<path d="M282.05 251.86L284.69 259.00L285.70 259.00L288.34 251.86L287.44 251.86L285.21 258.11L285.18 258.11L282.95 251.86L282.05 251.86ZM289.67 251.88C289.50 251.88 289.36 251.93 289.24 252.05C289.12 252.15 289.07 252.29 289.07 252.47C289.07 252.64 289.12 252.78 289.24 252.90C289.36 253.01 289.50 253.07 289.67 253.07C289.84 253.07 289.98 253.01 290.10 252.90C290.22 252.78 290.28 252.64 290.28 252.47C290.28 252.29 290.22 252.15 290.10 252.05C289.98 251.93 289.84 251.88 289.67 251.88ZM289.27 253.83L289.27 259.00L290.07 259.00L290.07 253.83L289.27 253.83ZM293.70 253.69C292.95 253.69 292.36 253.96 291.92 254.50C291.48 255.01 291.27 255.65 291.27 256.41C291.27 257.25 291.49 257.91 291.95 258.41C292.39 258.89 292.99 259.14 293.73 259.14C294.40 259.14 294.95 258.94 295.38 258.56C295.73 258.24 295.96 257.84 296.08 257.34L295.28 257.34C295.15 257.70 294.98 257.97 294.76 258.15C294.50 258.36 294.15 258.47 293.73 258.47C293.24 258.47 292.85 258.31 292.57 257.99C292.29 257.67 292.14 257.22 292.10 256.64L296.18 256.64C296.16 255.74 295.96 255.03 295.58 254.53C295.16 253.97 294.53 253.69 293.70 253.69ZM293.72 254.36C294.70 254.36 295.25 254.91 295.35 256.02L292.12 256.02C292.17 255.51 292.33 255.11 292.61 254.81C292.89 254.51 293.26 254.36 293.72 254.36ZM296.55 253.83L298.31 259.00L299.06 259.00L300.28 254.84L301.48 259.00L302.24 259.00L304.00 253.83L303.12 253.83L301.85 258.02L300.65 253.83L299.90 253.83L298.70 258.02L297.43 253.83L296.55 253.83ZM311.82 251.72L311.82 254.78C311.42 254.05 310.85 253.69 310.11 253.69C309.37 253.69 308.80 253.96 308.38 254.52C307.99 255.02 307.80 255.64 307.80 256.40C307.80 257.18 307.99 257.82 308.38 258.32C308.80 258.86 309.39 259.14 310.15 259.14C310.93 259.14 311.51 258.81 311.87 258.15L311.87 259.00L312.62 259.00L312.62 251.72L311.82 251.72ZM310.28 254.35C310.74 254.35 311.12 254.53 311.41 254.91C311.69 255.28 311.84 255.77 311.84 256.37L311.84 256.47C311.84 257.05 311.71 257.52 311.46 257.88C311.17 258.28 310.77 258.48 310.25 258.48C309.69 258.48 309.27 258.27 308.99 257.87C308.74 257.51 308.62 257.02 308.62 256.40C308.62 255.78 308.74 255.30 309.00 254.95C309.28 254.55 309.71 254.35 310.28 254.35ZM314.52 251.88C314.35 251.88 314.21 251.93 314.09 252.05C313.97 252.15 313.92 252.29 313.92 252.47C313.92 252.64 313.97 252.78 314.09 252.90C314.21 253.01 314.35 253.07 314.52 253.07C314.69 253.07 314.83 253.01 314.95 252.90C315.07 252.78 315.13 252.64 315.13 252.47C315.13 252.29 315.07 252.15 314.95 252.05C314.83 251.93 314.69 251.88 314.52 251.88ZM314.12 253.83L314.12 259.00L314.92 259.00L314.92 253.83L314.12 253.83ZM318.49 251.86C318.05 251.86 317.71 251.98 317.48 252.23C317.26 252.47 317.15 252.80 317.15 253.24L317.15 253.83L315.85 253.83L315.85 254.50L317.15 254.50L317.15 259.00L317.95 259.00L317.95 254.50L320.28 254.50L320.28 259.00L321.07 259.00L321.07 254.50L322.54 254.50L322.54 253.83L321.07 253.83L321.07 253.26C321.07 253.01 321.12 252.83 321.23 252.72C321.33 252.60 321.49 252.55 321.71 252.55L322.61 252.55L322.61 251.86L321.62 251.86C321.17 251.86 320.83 251.98 320.61 252.24C320.39 252.48 320.28 252.81 320.28 253.24L320.28 253.83L317.95 253.83L317.95 253.26C317.95 253.01 318.00 252.83 318.10 252.72C318.20 252.60 318.37 252.55 318.59 252.55L319.48 252.55L319.48 251.86L318.49 251.86ZM328.49 254.67C328.29 254.67 328.12 254.74 327.98 254.88C327.83 255.02 327.76 255.20 327.76 255.40C327.76 255.60 327.83 255.77 327.98 255.91C328.12 256.05 328.29 256.12 328.49 256.12C328.69 256.12 328.86 256.05 329.00 255.91C329.14 255.77 329.22 255.60 329.22 255.40C329.22 255.20 329.14 255.02 329.00 254.88C328.86 254.74 328.69 254.67 328.49 254.67ZM337.13 251.86L334.32 259.00L335.20 259.00L335.96 257.00L339.24 257.00L340.00 259.00L340.89 259.00L338.08 251.86L337.13 251.86ZM336.22 256.31L337.59 252.74L337.63 252.74L338.98 256.31L336.22 256.31ZM345.33 251.72L345.33 254.78C344.93 254.05 344.36 253.69 343.62 253.69C342.88 253.69 342.31 253.96 341.89 254.52C341.50 255.02 341.31 255.64 341.31 256.40C341.31 257.18 341.50 257.82 341.89 258.32C342.31 258.86 342.90 259.14 343.66 259.14C344.44 259.14 345.02 258.81 345.38 258.15L345.38 259.00L346.13 259.00L346.13 251.72L345.33 251.72ZM343.79 254.35C344.25 254.35 344.63 254.53 344.92 254.91C345.20 255.28 345.35 255.77 345.35 256.37L345.35 256.47C345.35 257.05 345.22 257.52 344.97 257.88C344.68 258.28 344.28 258.48 343.76 258.48C343.20 258.48 342.78 258.27 342.50 257.87C342.25 257.51 342.13 257.02 342.13 256.40C342.13 255.78 342.25 255.30 342.51 254.95C342.79 254.55 343.22 254.35 343.79 254.35ZM351.19 251.72L351.19 254.78C350.79 254.05 350.22 253.69 349.48 253.69C348.74 253.69 348.17 253.96 347.75 254.52C347.36 255.02 347.17 255.64 347.17 256.40C347.17 257.18 347.36 257.82 347.75 258.32C348.17 258.86 348.76 259.14 349.52 259.14C350.30 259.14 350.88 258.81 351.24 258.15L351.24 259.00L351.99 259.00L351.99 251.72L351.19 251.72ZM349.65 254.35C350.11 254.35 350.49 254.53 350.78 254.91C351.06 255.28 351.21 255.77 351.21 256.37L351.21 256.47C351.21 257.05 351.08 257.52 350.83 257.88C350.54 258.28 350.14 258.48 349.62 258.48C349.06 258.48 348.64 258.27 348.36 257.87C348.11 257.51 347.99 257.02 347.99 256.40C347.99 255.78 348.11 255.30 348.37 254.95C348.65 254.55 349.08 254.35 349.65 254.35ZM358.83 253.69C358.47 253.69 358.16 253.80 357.89 254.02C357.67 254.19 357.49 254.43 357.35 254.73L357.35 253.83L356.56 253.83L356.56 259.00L357.35 259.00L357.35 256.26C357.35 255.78 357.48 255.37 357.76 255.03C358.03 254.67 358.37 254.50 358.77 254.50C359.02 254.50 359.28 254.53 359.54 254.61L359.54 253.81C359.35 253.73 359.11 253.69 358.83 253.69ZM362.34 253.69C361.59 253.69 361.00 253.96 360.56 254.50C360.12 255.01 359.91 255.65 359.91 256.41C359.91 257.25 360.13 257.91 360.59 258.41C361.03 258.89 361.63 259.14 362.37 259.14C363.04 259.14 363.59 258.94 364.02 258.56C364.37 258.24 364.60 257.84 364.72 257.34L363.92 257.34C363.79 257.70 363.62 257.97 363.40 258.15C363.14 258.36 362.79 258.47 362.37 258.47C361.88 258.47 361.49 258.31 361.21 257.99C360.93 257.67 360.78 257.22 360.74 256.64L364.82 256.64C364.80 255.74 364.60 255.03 364.22 254.53C363.80 253.97 363.17 253.69 362.34 253.69ZM362.36 254.36C363.34 254.36 363.89 254.91 363.99 256.02L360.76 256.02C360.81 255.51 360.97 255.11 361.25 254.81C361.53 254.51 361.90 254.36 362.36 254.36ZM365.19 253.83L367.14 259.00L367.95 259.00L369.91 253.83L369.03 253.83L367.55 258.00L366.07 253.83L365.19 253.83ZM371.24 251.88C371.07 251.88 370.93 251.93 370.81 252.05C370.69 252.15 370.64 252.29 370.64 252.47C370.64 252.64 370.69 252.78 370.81 252.90C370.93 253.01 371.07 253.07 371.24 253.07C371.41 253.07 371.55 253.01 371.67 252.90C371.79 252.78 371.85 252.64 371.85 252.47C371.85 252.29 371.79 252.15 371.67 252.05C371.55 251.93 371.41 251.88 371.24 251.88ZM370.84 253.83L370.84 259.00L371.64 259.00L371.64 253.83L370.84 253.83ZM375.27 253.69C374.52 253.69 373.93 253.96 373.49 254.50C373.05 255.01 372.84 255.65 372.84 256.41C372.84 257.25 373.06 257.91 373.52 258.41C373.96 258.89 374.56 259.14 375.30 259.14C375.97 259.14 376.52 258.94 376.95 258.56C377.30 258.24 377.53 257.84 377.65 257.34L376.85 257.34C376.72 257.70 376.55 257.97 376.33 258.15C376.07 258.36 375.72 258.47 375.30 258.47C374.81 258.47 374.42 258.31 374.14 257.99C373.86 257.67 373.71 257.22 373.67 256.64L377.75 256.64C377.73 255.74 377.53 255.03 377.15 254.53C376.73 253.97 376.10 253.69 375.27 253.69ZM375.29 254.36C376.27 254.36 376.82 254.91 376.92 256.02L373.69 256.02C373.74 255.51 373.90 255.11 374.18 254.81C374.46 254.51 374.83 254.36 375.29 254.36ZM378.12 253.83L379.88 259.00L380.63 259.00L381.85 254.84L383.05 259.00L383.81 259.00L385.57 253.83L384.69 253.83L383.42 258.02L382.22 253.83L381.47 253.83L380.27 258.02L379.00 253.83L378.12 253.83ZM391.80 253.69C391.03 253.69 390.42 253.96 389.98 254.51C389.57 255.01 389.37 255.65 389.37 256.44C389.37 257.23 389.57 257.87 389.98 258.36C390.41 258.88 391.01 259.14 391.79 259.14C392.43 259.14 392.94 258.97 393.33 258.64C393.73 258.30 393.98 257.79 394.10 257.13L393.30 257.13C393.18 258.02 392.67 258.47 391.79 258.47C391.27 258.47 390.87 258.28 390.60 257.92C390.32 257.56 390.19 257.06 390.19 256.43C390.19 255.80 390.33 255.30 390.61 254.93C390.90 254.55 391.30 254.36 391.80 254.36C392.21 254.36 392.54 254.45 392.80 254.65C393.05 254.85 393.21 255.15 393.28 255.55L394.07 255.55C393.98 254.92 393.74 254.45 393.34 254.14C392.95 253.84 392.44 253.69 391.80 253.69ZM397.35 253.69C396.57 253.69 395.96 253.95 395.50 254.49C395.06 255.00 394.84 255.64 394.84 256.42C394.84 257.19 395.06 257.83 395.50 258.33C395.96 258.87 396.57 259.14 397.35 259.14C398.12 259.14 398.74 258.87 399.21 258.33C399.64 257.83 399.86 257.19 399.86 256.42C399.86 255.64 399.64 255.00 399.20 254.49C398.74 253.95 398.12 253.69 397.35 253.69ZM397.35 254.36C397.89 254.36 398.32 254.57 398.64 254.99C398.91 255.37 399.05 255.84 399.05 256.42C399.05 256.98 398.91 257.46 398.64 257.84C398.32 258.26 397.89 258.47 397.35 258.47C396.80 258.47 396.37 258.26 396.07 257.84C395.79 257.46 395.66 256.99 395.66 256.42C395.66 255.84 395.79 255.37 396.07 254.99C396.37 254.57 396.80 254.36 397.35 254.36ZM403.16 253.69C402.58 253.69 402.09 253.96 401.70 254.52L401.70 253.83L400.90 253.83L400.90 259.00L401.70 259.00L401.70 255.85C401.70 255.44 401.82 255.09 402.06 254.81C402.30 254.51 402.60 254.37 402.97 254.37C403.76 254.37 404.16 254.82 404.16 255.74L404.16 259.00L404.96 259.00L404.96 255.76C404.96 255.34 405.07 255.01 405.31 254.75C405.53 254.49 405.82 254.37 406.16 254.37C406.60 254.37 406.92 254.48 407.12 254.72C407.31 254.94 407.41 255.28 407.41 255.74L407.41 259.00L408.21 259.00L408.21 255.61C408.21 255.02 408.04 254.55 407.72 254.20C407.38 253.86 406.95 253.69 406.41 253.69C406.05 253.69 405.75 253.77 405.50 253.93C405.22 254.08 404.98 254.33 404.78 254.67C404.49 254.01 403.95 253.69 403.16 253.69ZM411.71 253.69C411.13 253.69 410.64 253.96 410.25 254.52L410.25 253.83L409.45 253.83L409.45 259.00L410.25 259.00L410.25 255.85C410.25 255.44 410.37 255.09 410.61 254.81C410.85 254.51 411.15 254.37 411.52 254.37C412.31 254.37 412.71 254.82 412.71 255.74L412.71 259.00L413.51 259.00L413.51 255.76C413.51 255.34 413.62 255.01 413.86 254.75C414.08 254.49 414.37 254.37 414.71 254.37C415.15 254.37 415.47 254.48 415.67 254.72C415.86 254.94 415.96 255.28 415.96 255.74L415.96 259.00L416.76 259.00L416.76 255.61C416.76 255.02 416.59 254.55 416.27 254.20C415.93 253.86 415.50 253.69 414.96 253.69C414.60 253.69 414.30 253.77 414.05 253.93C413.77 254.08 413.53 254.33 413.33 254.67C413.04 254.01 412.50 253.69 411.71 253.69ZM420.13 253.69C419.38 253.69 418.79 253.96 418.35 254.50C417.91 255.01 417.70 255.65 417.70 256.41C417.70 257.25 417.92 257.91 418.38 258.41C418.82 258.89 419.42 259.14 420.16 259.14C420.83 259.14 421.38 258.94 421.81 258.56C422.16 258.24 422.39 257.84 422.51 257.34L421.71 257.34C421.58 257.70 421.41 257.97 421.19 258.15C420.93 258.36 420.58 258.47 420.16 258.47C419.67 258.47 419.28 258.31 419.00 257.99C418.72 257.67 418.57 257.22 418.53 256.64L422.61 256.64C422.59 255.74 422.39 255.03 422.01 254.53C421.59 253.97 420.96 253.69 420.13 253.69ZM420.15 254.36C421.13 254.36 421.68 254.91 421.78 256.02L418.55 256.02C418.60 255.51 418.76 255.11 419.04 254.81C419.32 254.51 419.69 254.36 420.15 254.36ZM425.97 253.69C425.63 253.69 425.32 253.77 425.04 253.93C424.76 254.08 424.53 254.30 424.35 254.59L424.35 253.83L423.55 253.83L423.55 259.00L424.35 259.00L424.35 255.88C424.38 255.41 424.53 255.04 424.81 254.76C425.07 254.50 425.38 254.37 425.74 254.37C426.64 254.37 427.10 254.87 427.10 255.88L427.10 259.00L427.90 259.00L427.90 255.82C427.90 254.40 427.25 253.69 425.97 253.69ZM430.52 252.16L429.73 252.49L429.73 253.83L428.69 253.83L428.69 254.50L429.73 254.50L429.73 257.79C429.73 258.18 429.81 258.47 429.98 258.67C430.16 258.89 430.47 259.00 430.89 259.00L431.67 259.00L431.67 258.33L431.01 258.33C430.83 258.33 430.70 258.28 430.63 258.20C430.55 258.12 430.52 257.98 430.52 257.79L430.52 254.50L431.80 254.50L431.80 253.83L430.52 253.83L430.52 252.16ZM434.52 253.69C433.94 253.69 433.46 253.82 433.10 254.08C432.71 254.34 432.52 254.68 432.52 255.12C432.52 255.56 432.71 255.89 433.11 256.13C433.35 256.29 433.78 256.44 434.39 256.59C434.95 256.73 435.32 256.84 435.49 256.92C435.81 257.08 435.98 257.30 435.98 257.59C435.98 258.17 435.51 258.47 434.59 258.47C434.15 258.47 433.82 258.39 433.60 258.23C433.38 258.05 433.23 257.76 433.17 257.35L432.39 257.35C432.51 258.54 433.25 259.14 434.61 259.14C436.07 259.14 436.80 258.60 436.80 257.54C436.80 257.09 436.59 256.74 436.18 256.48C435.91 256.31 435.47 256.15 434.85 256.00C434.33 255.86 433.97 255.75 433.78 255.66C433.48 255.51 433.34 255.32 433.34 255.10C433.34 254.87 433.45 254.69 433.67 254.56C433.87 254.42 434.15 254.36 434.51 254.36C434.92 254.36 435.24 254.44 435.46 254.60C435.66 254.74 435.79 254.98 435.86 255.30L436.64 255.30C436.50 254.22 435.80 253.69 434.52 253.69Z" fill="#66738B"/>
+</svg>
diff --git a/packages/experimental/forge-bundle/docs/preview.zh.svg b/packages/experimental/forge-bundle/docs/preview.zh.svg
new file mode 100644
index 0000000000..fc880256f9
--- /dev/null
+++ b/packages/experimental/forge-bundle/docs/preview.zh.svg
@@ -0,0 +1,28 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="640" height="300" viewBox="0 0 640 300">
+<rect width="640" height="300" rx="12" fill="#F5F6FC"/>
+<path d="M44.24 34.39Q42.68 37.49 39.57 40.37Q36.46 43.25 33.01 44.81L32.84 44.38Q36.56 41.88 39.30 38.63Q42.03 35.38 43.21 32.18L45.15 33.17Q45.44 33.31 45.44 33.53Q45.44 33.82 44.98 33.84Q44.86 33.84 44.72 33.89Q46.40 36.86 48.86 38.65Q51.32 40.44 55.16 41.33L55.14 41.64Q53.60 41.69 52.93 42.91Q52.83 43.13 52.66 43.13Q52.38 43.13 50.37 41.81Q48.37 40.49 46.74 38.60Q45.10 36.72 44.24 34.39ZM39.90 42.00L45.82 42.00L47.14 40.44L48.66 42.26Q48.80 42.46 48.80 42.56Q48.80 42.67 48.46 42.67L40.40 42.67Q39.46 42.67 38.77 42.94L37.90 41.88Q38.79 42.00 39.90 42.00ZM42.03 46.51L36.49 46.51Q35.55 46.51 34.86 46.78L33.97 45.72Q34.88 45.84 35.98 45.84L49.98 45.84L51.37 44.16L53.02 46.10Q53.19 46.27 53.19 46.39Q53.19 46.51 52.86 46.51L43.14 46.51L44.17 47.06Q44.53 47.16 44.53 47.36Q44.53 47.57 44.13 47.62Q43.74 47.66 42.38 48.98Q41.02 50.30 38.43 52.39L48.54 51.91Q47.53 50.30 45.32 48.65L45.54 48.34Q48.37 49.51 49.86 50.92Q51.34 52.32 51.34 53.06Q51.34 53.81 51.02 54.36Q50.70 54.91 50.36 54.91Q49.83 54.91 49.59 54.16Q49.35 53.40 48.92 52.51L41.55 53.47Q38.00 53.93 37.18 54.41Q37.02 54.50 36.86 54.50Q36.70 54.50 36.61 54.24L35.86 52.32Q36.97 52.32 37.68 51.95Q38.38 51.58 40.09 49.36Q41.79 47.14 42.03 46.51ZM70.50 35.88Q67.78 36.24 64.69 36.41L64.66 36.02Q72.44 34.66 75.82 32.88L77.07 34.51Q77.29 34.80 77.29 34.99Q77.29 35.18 76.90 35.18L76.26 35.14Q75.06 35.14 72.15 35.64L72.15 40.51L76.28 40.51L77.62 38.86L79.18 40.63Q79.40 40.87 79.40 41.04Q79.40 41.21 78.97 41.21L72.15 41.21L72.15 45.34L74.62 45.34L75.30 44.18L76.95 45.22Q77.22 45.41 77.22 45.55Q77.22 45.70 77.00 45.86L76.57 46.25L76.57 50.69Q76.57 51.55 76.62 52.22L76.69 53.30Q76.69 53.81 75.99 54.14Q75.30 54.48 75.09 54.48Q74.89 54.48 74.89 54.17L74.89 52.10L67.90 52.10L67.90 53.26Q67.90 53.93 67.26 54.18Q66.61 54.43 66.43 54.43Q66.25 54.43 66.19 54.26Q66.13 54.10 66.24 52.99Q66.34 51.89 66.34 49.87L66.34 47.02Q66.34 45.41 66.27 44.09L68.00 45.34L70.50 45.34L70.50 41.21L66.15 41.21Q65.14 41.21 64.52 41.47L63.66 40.37Q64.57 40.51 65.65 40.51L70.50 40.51ZM74.89 51.46L74.89 45.94L67.90 45.94L67.90 51.46ZM59.12 33.38Q60.80 33.98 61.71 34.64Q62.62 35.30 62.62 36.19Q62.62 37.08 62.34 37.52Q62.05 37.97 61.40 37.97Q61.18 37.97 61.00 37.70Q60.82 37.44 60.75 37.06Q60.37 35.16 58.90 33.67ZM62.17 50.50L65.31 47.26L65.60 47.54Q62.02 52.80 61.71 53.83Q61.57 54.26 61.39 54.26Q61.21 54.26 60.99 54.02L59.70 52.66Q60.30 52.20 60.46 51.85Q60.63 51.50 60.63 50.78L60.63 41.47L59.43 41.47Q58.38 41.47 57.80 41.78L56.94 40.73Q58.06 40.80 58.93 40.80L60.51 40.80L61.30 39.62L62.77 40.68Q63.06 40.90 63.06 41.05Q63.06 41.21 62.79 41.42L62.17 41.88ZM87.01 34.85L96.94 34.85L98.26 33.55L99.80 35.26Q99.97 35.42 99.97 35.53Q99.97 35.64 99.80 35.71L99.27 35.95L99.27 41.52Q99.27 42.38 99.32 43.06L99.42 44.21Q99.42 44.57 98.62 44.93Q97.83 45.29 97.59 45.29Q97.35 45.29 97.35 45.00L97.35 44.14L92.77 44.14L92.77 48.14L97.33 48.14L98.82 46.37L100.42 48.31Q100.59 48.53 100.59 48.66Q100.59 48.79 100.26 48.79L92.77 48.79L92.77 52.68L99.18 52.68L100.95 50.54L102.85 52.82Q103.04 53.04 103.04 53.18Q103.04 53.33 102.70 53.33L83.43 53.33Q82.42 53.33 81.80 53.57L80.96 52.54Q81.85 52.68 82.95 52.68L91.06 52.68L91.06 48.79L85.45 48.79Q84.42 48.79 83.79 49.03L82.95 48.00Q83.86 48.14 84.94 48.14L91.06 48.14L91.06 44.14L86.53 44.14L86.53 45.24Q86.53 45.58 86.38 45.76Q86.24 45.94 85.69 46.18Q85.14 46.42 84.93 46.42Q84.73 46.42 84.67 46.25Q84.61 46.08 84.66 45.60Q84.87 43.63 84.87 41.83L84.87 36.58Q84.87 34.99 84.80 33.65ZM91.06 35.52L86.53 35.52L86.53 39.12L91.06 39.12ZM97.35 39.12L97.35 35.52L92.77 35.52L92.77 39.12ZM86.53 43.46L91.06 43.46L91.06 39.79L86.53 39.79ZM97.35 43.46L97.35 39.79L92.77 39.79L92.77 43.46ZM108.39 37.78L108.94 37.78Q109.54 35.16 109.83 32.40L112.06 33.14Q112.40 33.24 112.40 33.44Q112.40 33.65 112.02 33.82Q111.34 34.18 109.57 37.78L112.50 37.78L113.55 36.46L115.14 37.94Q115.28 38.09 115.28 38.23Q115.28 38.38 115.04 38.52L114.30 38.93L114.30 49.22Q114.30 50.02 114.34 50.71L114.42 51.84Q114.42 52.27 113.83 52.64Q113.24 53.02 113.00 53.02Q112.76 53.02 112.76 52.68L112.76 51.60L108.03 51.60L108.03 52.61Q108.03 52.97 107.90 53.14Q107.77 53.30 107.22 53.54Q106.66 53.78 106.47 53.78Q106.28 53.78 106.23 53.62Q106.18 53.45 106.23 52.97Q106.45 51.00 106.45 49.22L106.45 39.62Q106.45 38.04 106.35 36.70ZM112.76 43.94L112.76 38.52L108.03 38.52L108.03 43.94ZM112.76 50.88L112.76 44.69L108.03 44.69L108.03 50.88ZM118.90 37.42L123.27 37.42L124.38 36.02L126.08 37.32Q126.37 37.56 126.37 37.69Q126.37 37.82 126.08 38.02L125.46 38.42L125.24 44.59Q125.10 47.47 124.95 49.36Q124.81 51.24 124.65 51.91Q124.50 52.58 123.96 53.10Q123.42 53.62 122.52 54.12Q121.62 54.62 121.47 54.62Q121.14 54.62 121.03 54.00Q120.92 53.38 120.44 53.04Q119.96 52.70 118.18 52.15L118.33 51.65Q120.58 51.98 121.39 51.98Q122.19 51.98 122.52 51.80Q122.84 51.62 122.96 51.25Q123.08 50.88 123.25 49.37Q123.42 47.86 123.55 45.19Q123.68 42.53 123.73 38.11L118.62 38.11Q117.42 41.21 115.09 44.11L114.70 43.90Q117.46 38.69 118.33 32.42L120.61 33.38Q121.02 33.53 121.02 33.72Q121.02 33.91 120.57 34.13Q120.13 34.34 119.89 34.94ZM117.56 41.90Q119.43 43.25 120.07 44.06Q120.70 44.88 120.70 45.61Q120.70 46.34 120.24 46.98Q119.77 47.62 119.19 47.62Q118.62 47.62 118.62 46.54Q118.62 45.34 118.34 44.41Q118.06 43.49 117.30 42.22ZM152.14 43.30L150.63 43.46Q150.22 43.51 150.07 43.66Q149.91 43.80 149.91 44.14L149.91 46.80Q149.91 47.45 149.89 47.83Q149.86 48.22 149.73 48.44Q149.60 48.67 149.31 48.82Q149.02 48.96 148.50 49.15Q147.56 49.51 146.30 49.73Q145.04 49.94 143.67 49.94Q141.75 49.94 140.16 49.40Q138.56 48.86 137.43 47.88Q136.30 46.90 135.68 45.50Q135.06 44.11 135.06 42.41Q135.06 40.58 135.75 39.08Q136.45 37.58 137.70 36.53Q138.94 35.47 140.62 34.90Q142.30 34.32 144.30 34.32Q147.49 34.32 149.62 35.47L149.82 38.50L149.46 38.57Q148.71 36.77 147.51 35.83Q146.31 34.90 144.58 34.90Q142.93 34.90 141.63 35.41Q140.34 35.93 139.42 36.88Q138.51 37.82 138.03 39.16Q137.55 40.49 137.55 42.12Q137.55 43.54 138.06 44.84Q138.56 46.15 139.46 47.15Q140.36 48.14 141.60 48.73Q142.83 49.32 144.30 49.32Q146.10 49.32 146.96 48.67Q147.82 48.02 147.82 46.78L147.82 44.14Q147.82 43.78 147.64 43.63Q147.46 43.49 147.08 43.46L144.85 43.30L144.85 42.82Q146.72 42.91 148.50 42.91Q150.27 42.91 152.14 42.82ZM158.41 49.66Q158.02 49.61 157.36 49.58Q156.70 49.56 155.74 49.56Q154.78 49.56 154.12 49.58Q153.46 49.61 153.08 49.66L153.08 49.25L154.38 48.98Q155.12 48.84 155.12 48.12L155.12 43.34Q155.12 42.77 154.83 42.50Q154.54 42.24 153.68 42.05L153.68 41.69Q154.52 41.47 155.20 41.04Q155.89 40.61 156.30 39.96L156.70 39.96L156.70 48.19Q156.70 48.55 156.81 48.72Q156.92 48.89 157.23 48.96L158.41 49.25ZM155.79 34.99Q156.25 34.99 156.58 35.32Q156.92 35.64 156.92 36.10Q156.92 36.50 156.57 36.82Q156.22 37.13 155.74 37.13Q155.31 37.13 155.01 36.83Q154.71 36.53 154.71 36.10Q154.71 35.64 155.04 35.32Q155.36 34.99 155.79 34.99ZM162.73 37.99L163.04 37.99Q163.04 38.64 163.05 39.28Q163.06 39.91 163.06 40.56L166.28 40.49L166.28 41.38L163.06 41.47L163.06 46.30Q163.06 47.71 163.27 48.41Q163.47 49.10 164.41 49.06Q164.77 49.06 165.24 48.90Q165.70 48.74 166.28 48.41L166.50 48.74Q166.02 49.32 165.33 49.63Q164.65 49.94 163.45 49.94Q162.82 49.94 162.44 49.80Q162.06 49.66 161.82 49.32Q161.58 48.98 161.49 48.40Q161.41 47.81 161.41 46.92L161.41 41.52Q161.07 41.52 160.76 41.53Q160.45 41.54 160.11 41.54Q159.78 41.54 159.78 41.35Q159.78 41.16 160.09 41.02Q161.12 40.56 161.60 40.03Q161.84 39.77 162.15 39.25Q162.46 38.74 162.73 37.99ZM180.18 35.95Q180.18 35.47 180.06 35.27Q179.94 35.06 179.65 35.04L178.40 34.90L178.40 34.49Q178.86 34.54 179.61 34.56Q180.37 34.58 181.40 34.58Q182.43 34.58 183.19 34.56Q183.94 34.54 184.38 34.49L184.38 34.90L182.70 35.14Q182.38 35.18 182.29 35.35Q182.19 35.52 182.19 35.98L182.19 47.90Q182.19 48.41 182.30 48.62Q182.41 48.84 182.84 48.91L184.66 49.25L184.66 49.66Q184.06 49.61 183.26 49.58Q182.46 49.56 181.47 49.56Q180.51 49.56 179.68 49.58Q178.86 49.61 178.23 49.66L178.23 49.25L179.70 49.01Q179.98 48.96 180.08 48.72Q180.18 48.48 180.18 47.90L180.18 42.41L171.70 42.41L171.70 47.90Q171.70 48.50 171.80 48.73Q171.90 48.96 172.21 49.01L173.67 49.25L173.67 49.66Q173.05 49.61 172.22 49.58Q171.39 49.56 170.41 49.56Q169.45 49.56 168.64 49.58Q167.84 49.61 167.24 49.66L167.24 49.25L169.06 48.91Q169.45 48.84 169.57 48.62Q169.69 48.41 169.69 47.90L169.69 35.95Q169.69 35.47 169.57 35.27Q169.45 35.06 169.16 35.04L167.91 34.90L167.91 34.49Q168.37 34.54 169.14 34.56Q169.90 34.58 170.98 34.58Q172.06 34.58 172.82 34.56Q173.58 34.54 174.01 34.49L174.01 34.90L172.21 35.14Q171.90 35.18 171.80 35.35Q171.70 35.52 171.70 35.98L171.70 41.66L180.18 41.66ZM185.67 40.44L188.89 40.44L188.89 46.58Q188.89 47.74 189.28 48.22Q189.68 48.70 190.74 48.70Q192.30 48.70 193.62 47.52L193.62 41.76Q193.62 41.52 193.54 41.38Q193.47 41.23 193.24 41.15Q193.02 41.06 192.58 40.99Q192.15 40.92 191.46 40.85L191.46 40.44L195.32 40.44L195.32 47.47Q195.32 47.90 195.37 48.14Q195.42 48.38 195.58 48.50Q195.75 48.62 196.08 48.66Q196.40 48.70 196.98 48.70Q196.98 48.79 196.99 48.89Q197.00 48.98 197.00 49.08L193.62 49.94L193.62 48.12Q192.56 49.03 191.73 49.50Q190.90 49.97 189.99 49.97Q188.74 49.97 187.99 49.08Q187.23 48.19 187.23 46.73L187.23 41.74Q187.23 41.28 186.93 41.11Q186.63 40.94 185.67 40.80ZM198.13 34.85L198.20 34.46L201.42 33.72L201.42 40.82Q203.31 39.98 204.75 39.98Q205.76 39.98 206.58 40.36Q207.39 40.73 207.96 41.38Q208.52 42.02 208.83 42.90Q209.14 43.78 209.14 44.81Q209.14 45.98 208.77 46.93Q208.40 47.88 207.73 48.55Q207.06 49.22 206.16 49.58Q205.26 49.94 204.20 49.94Q203.70 49.94 203.18 49.81Q202.66 49.68 202.23 49.52Q201.80 49.37 201.49 49.24Q201.18 49.10 201.10 49.10Q200.70 49.10 200.17 50.06L199.74 50.06L199.74 37.70Q199.74 37.10 199.76 36.68Q199.78 36.26 199.68 35.95Q199.57 35.64 199.22 35.38Q198.87 35.11 198.13 34.85ZM201.42 46.94Q201.42 48.02 202.04 48.60Q202.66 49.18 203.79 49.18Q205.52 49.18 206.38 48.18Q207.25 47.18 207.25 45.26Q207.25 44.33 207.00 43.51Q206.74 42.70 206.28 42.11Q205.81 41.52 205.16 41.17Q204.51 40.82 203.72 40.82Q202.74 40.82 202.08 41.12Q201.42 41.42 201.42 41.78ZM221.55 40.58L221.55 49.18Q221.55 51.48 221.60 52.50Q221.65 53.52 221.65 53.62Q221.65 53.98 220.92 54.42Q220.18 54.86 219.96 54.86Q219.73 54.86 219.73 54.29L219.85 51.74Q219.92 50.09 219.92 48.65L219.92 40.58L218.82 40.58Q217.83 40.58 217.23 40.85L216.34 39.82Q217.35 39.91 218.34 39.91L219.92 39.91L219.92 36.38Q219.92 34.27 219.82 32.50L222.13 33.62Q222.37 33.74 222.37 33.88Q222.37 34.01 222.13 34.18L221.55 34.51L221.55 39.91L222.46 39.91L223.59 38.57L224.94 40.18Q225.08 40.37 225.08 40.48Q225.08 40.58 224.77 40.58ZM231.13 39.46Q230.65 44.98 229.71 47.57Q228.78 50.16 226.89 51.96Q225.01 53.76 222.08 54.96L221.91 54.58Q224.43 53.21 225.98 51.36Q227.53 49.51 228.36 46.97Q229.18 44.42 229.52 39.46L227.55 39.46Q226.47 39.46 225.94 39.70L225.10 38.64Q225.99 38.78 227.05 38.78L229.54 38.78Q229.64 36.84 229.64 35.16Q229.64 33.48 229.62 32.57L231.80 33.43Q232.21 33.62 232.21 33.77Q232.21 33.91 231.91 34.07Q231.61 34.22 231.54 34.57Q231.46 34.92 231.32 36.60L231.18 38.78L233.67 38.78L234.49 37.58L236.26 39.02Q236.58 39.26 236.58 39.40Q236.58 39.53 236.19 39.67L235.59 39.89Q234.85 49.66 234.54 51.31Q234.22 52.97 233.17 53.72Q232.11 54.48 231.80 54.48Q231.61 54.48 231.54 54.07Q231.42 53.23 230.92 52.84Q230.43 52.44 228.92 51.98L229.02 51.55Q230.91 51.91 231.63 51.91Q232.35 51.91 232.60 51.35Q232.86 50.78 233.26 47.63Q233.67 44.47 233.98 39.46ZM225.87 41.86Q226.11 43.20 226.11 44.30Q226.11 46.10 225.42 46.98Q224.72 47.86 224.02 47.86Q223.71 47.86 223.42 47.68Q223.14 47.50 223.14 47.17Q223.14 46.85 223.54 46.51Q225.27 45.05 225.49 41.88ZM236.02 42.82Q237.90 44.40 238.46 45.17Q239.02 45.94 239.02 46.72Q239.02 47.50 238.57 48.05Q238.11 48.60 237.67 48.60Q237.22 48.60 237.22 47.71Q237.22 45.58 235.74 43.13ZM244.98 40.80Q243.03 43.68 241.16 45.53L240.82 45.26Q245.29 38.76 246.85 32.66L248.94 33.65Q249.32 33.84 249.32 34.02Q249.32 34.20 248.92 34.32Q248.53 34.44 248.10 35.33Q246.94 37.63 245.62 39.79L246.90 40.32Q247.26 40.46 247.26 40.61Q247.26 40.75 247.02 40.92L246.68 41.18L246.68 49.25Q246.68 51.55 246.72 52.58Q246.75 53.62 246.75 53.69Q246.75 54.12 246.00 54.53Q245.24 54.94 245.05 54.94Q244.76 54.94 244.76 54.58Q244.76 54.22 244.78 54.00Q244.86 53.40 244.92 51.58Q244.98 49.75 244.98 48.74ZM255.13 42.98L259.04 42.98L260.31 41.45L261.85 43.25Q261.99 43.42 261.99 43.54Q261.99 43.66 261.66 43.66L255.13 43.66L255.13 48.05L259.69 48.05L261.06 46.49L262.59 48.31Q262.76 48.50 262.76 48.62Q262.76 48.74 262.42 48.74L255.13 48.74Q255.13 51.43 255.18 52.61Q255.22 53.78 255.22 53.86Q255.22 54.41 254.42 54.72Q253.62 55.03 253.39 55.03Q253.16 55.03 253.16 54.58L253.30 52.03Q253.38 50.33 253.38 48.89L253.38 38.40L252.32 38.40Q250.11 42.12 247.45 44.78L247.09 44.54Q250.98 39.24 252.87 32.76L255.10 33.96Q255.44 34.13 255.44 34.27Q255.44 34.42 255.13 34.51Q254.41 34.70 253.98 35.52L252.73 37.73L259.98 37.73L261.44 36.02L263.12 37.97Q263.26 38.16 263.26 38.28Q263.26 38.40 262.93 38.40L255.13 38.40Z" fill="#253047"/>
+<path d="M35.72 67.24L34.93 67.63C35.42 68.23 35.88 68.91 36.31 69.68L37.09 69.28C36.66 68.54 36.20 67.87 35.72 67.24ZM40.23 67.14C39.87 68.14 39.48 69.00 39.02 69.69L33.54 69.69L33.54 70.53L37.56 70.53L37.56 71.10C37.54 71.68 37.48 72.24 37.38 72.76L32.85 72.76L32.85 73.60L37.16 73.60C36.99 74.13 36.76 74.60 36.48 75.03C35.76 75.99 34.47 76.77 32.64 77.36L33.10 78.12C34.95 77.53 36.28 76.70 37.10 75.64C37.48 75.13 37.78 74.53 38.01 73.84C38.66 75.67 40.29 77.12 42.93 78.19L43.44 77.38C40.92 76.48 39.37 75.22 38.78 73.60L43.15 73.60L43.15 72.76L38.28 72.76C38.37 72.26 38.42 71.70 38.44 71.10L38.44 70.53L42.45 70.53L42.45 69.69L39.98 69.69C40.41 69.01 40.77 68.23 41.06 67.36L40.23 67.14ZM49.52 69.81L49.52 70.63L51.87 70.63L51.87 71.18C51.86 71.71 51.82 72.21 51.78 72.69L49.34 72.69L49.34 73.52L51.66 73.52C51.28 75.39 50.42 76.74 49.08 77.55L49.59 78.24C50.96 77.35 51.88 75.98 52.35 74.13C52.70 75.46 53.56 76.82 54.94 78.19L55.54 77.55C54.06 76.18 53.17 74.84 52.88 73.52L55.36 73.52L55.36 72.69L52.60 72.69C52.66 72.15 52.70 71.59 52.70 70.99L52.70 70.63L55.16 70.63L55.16 69.81L53.37 69.81C53.76 69.19 54.12 68.43 54.48 67.52L53.68 67.22C53.36 68.14 52.96 69.01 52.51 69.81L49.52 69.81ZM50.71 67.29L50.05 67.71C50.53 68.41 50.90 69.03 51.18 69.61L51.82 69.16C51.56 68.62 51.19 68.00 50.71 67.29ZM44.55 67.69L44.55 68.49L45.28 68.49L45.28 75.85L44.53 75.97L44.74 76.78C45.78 76.59 46.76 76.36 47.72 76.12L47.72 78.26L48.55 78.26L48.55 75.90C48.81 75.82 49.09 75.74 49.35 75.66L49.35 74.82C49.09 74.90 48.82 74.98 48.55 75.08L48.55 68.49L49.33 68.49L49.33 67.69L44.55 67.69ZM46.11 75.69L46.11 73.54L47.72 73.54L47.72 75.32C47.19 75.45 46.66 75.57 46.11 75.69ZM46.11 72.75L46.11 71.04L47.72 71.04L47.72 72.75L46.11 72.75ZM46.11 70.26L46.11 68.49L47.72 68.49L47.72 70.26L46.11 70.26ZM60.86 68.43L60.86 77.00L61.84 77.00L61.84 73.50L64.35 73.50C66.32 73.50 67.32 72.64 67.32 70.95C67.32 69.27 66.33 68.43 64.36 68.43L60.86 68.43ZM61.84 69.28L64.30 69.28C64.99 69.28 65.49 69.42 65.83 69.70C66.16 69.96 66.33 70.38 66.33 70.95C66.33 71.53 66.16 71.95 65.84 72.22C65.50 72.50 65.00 72.64 64.30 72.64L61.84 72.64L61.84 69.28ZM68.56 68.43L68.56 77.00L69.55 77.00L69.55 73.32L72.14 73.32C72.68 73.32 73.09 73.41 73.38 73.63C73.69 73.84 73.87 74.22 73.92 74.72L74.02 75.86C74.06 76.34 74.18 76.71 74.37 77.00L75.44 77.00C75.19 76.69 75.03 76.27 74.98 75.74L74.85 74.42C74.76 73.56 74.30 73.04 73.48 72.86L73.48 72.84C73.98 72.72 74.36 72.48 74.65 72.09C74.91 71.72 75.04 71.30 75.04 70.82C75.04 70.03 74.78 69.43 74.28 69.02C73.78 68.62 73.11 68.43 72.26 68.43L68.56 68.43ZM69.55 69.28L72.14 69.28C72.80 69.28 73.29 69.42 73.60 69.68C73.89 69.93 74.05 70.33 74.05 70.86C74.05 71.36 73.89 71.74 73.59 72.02C73.26 72.31 72.76 72.46 72.14 72.46L69.55 72.46L69.55 69.28ZM82.81 71.80C82.57 71.80 82.36 71.89 82.20 72.06C82.02 72.22 81.93 72.44 81.93 72.68C81.93 72.92 82.02 73.12 82.20 73.29C82.36 73.46 82.57 73.54 82.81 73.54C83.05 73.54 83.25 73.46 83.42 73.29C83.59 73.12 83.68 72.92 83.68 72.68C83.68 72.44 83.59 72.22 83.42 72.06C83.25 71.89 83.05 71.80 82.81 71.80ZM96.26 70.64L99.55 70.64L99.55 71.98L96.26 71.98L96.26 70.64ZM99.55 69.87L96.26 69.87L96.26 68.48L99.55 68.48L99.55 69.87ZM100.53 73.38C100.04 74.00 99.52 74.47 98.97 74.78C98.64 74.18 98.40 73.51 98.25 72.76L100.39 72.76L100.39 67.70L95.42 67.70L95.42 76.87C95.42 77.01 95.32 77.11 95.13 77.18L95.32 77.91C96.60 77.58 97.66 77.23 98.50 76.87L98.29 76.06C97.62 76.39 96.93 76.65 96.26 76.86L96.26 72.76L97.48 72.76C97.88 75.01 99.02 76.77 100.90 78.04L101.38 77.29C100.54 76.76 99.87 76.14 99.37 75.40C99.99 75.07 100.57 74.56 101.08 73.92L100.53 73.38ZM90.82 67.71L90.82 71.43L92.59 71.43L92.59 76.56C92.28 76.63 91.96 76.71 91.64 76.78L91.64 72.63L90.86 72.63L90.86 76.96L90.31 77.08L90.55 77.91C92.17 77.54 93.58 77.14 94.78 76.72L94.78 75.90C94.34 76.04 93.87 76.18 93.39 76.33L93.39 74.12L94.66 74.12L94.66 73.32L93.39 73.32L93.39 71.43L94.51 71.43L94.51 67.71L90.82 67.71ZM93.69 70.64L91.65 70.64L91.65 68.50L93.69 68.50L93.69 70.64ZM103.34 67.39L102.75 67.95C103.60 68.64 104.28 69.27 104.76 69.86L105.38 69.25C104.83 68.62 104.14 68.01 103.34 67.39ZM110.31 77.98L113.06 77.98L113.26 77.12C112.95 77.14 112.50 77.16 111.92 77.17C111.33 77.18 110.76 77.19 110.19 77.19C109.27 77.19 108.49 77.18 107.86 77.17C107.17 77.14 106.63 77.05 106.27 76.88C105.93 76.72 105.63 76.47 105.34 76.12C105.25 76.02 105.15 75.92 105.06 75.85L105.06 71.36L102.54 71.36L102.54 72.15L104.25 72.15L104.25 75.80C103.76 76.02 103.20 76.63 102.56 77.64L103.21 78.22C103.87 77.12 104.34 76.57 104.62 76.57C104.77 76.57 104.92 76.66 105.08 76.87C105.45 77.30 105.87 77.60 106.34 77.74C106.82 77.88 107.43 77.95 108.20 77.96C108.96 77.97 109.66 77.98 110.31 77.98ZM106.21 69.09L106.21 69.90L107.62 69.90L107.62 70.84C107.62 71.35 107.59 71.83 107.53 72.28L105.79 72.28L105.79 73.10L107.37 73.10C107.11 74.23 106.59 75.07 105.84 75.61L106.35 76.30C107.28 75.61 107.90 74.54 108.21 73.10L110.35 73.10L110.35 76.54L111.19 76.54L111.19 73.10L113.10 73.10L113.10 72.28L111.19 72.28L111.19 69.90L112.71 69.90L112.71 69.09L111.19 69.09L111.19 67.20L110.35 67.20L110.35 69.09L108.45 69.09L108.45 67.18L107.62 67.18L107.62 69.09L106.21 69.09ZM108.45 69.90L110.35 69.90L110.35 72.28L108.36 72.28C108.42 71.78 108.45 71.23 108.45 70.65L108.45 69.90ZM114.52 69.55L114.52 70.38L116.00 70.38C115.64 71.95 115.03 73.34 114.19 74.56L114.56 75.51C115.16 74.53 115.64 73.45 116.02 72.25L116.02 78.14L116.88 78.14L116.88 71.84C117.15 72.27 117.48 72.84 117.86 73.52L118.35 72.79C117.85 72.12 117.36 71.52 116.88 70.99L116.88 70.38L118.11 70.38L118.11 69.55L116.88 69.55L116.88 67.21L116.02 67.21L116.02 69.55L114.52 69.55ZM119.88 70.70L119.88 71.47L123.52 71.47L123.52 70.74C123.93 71.16 124.40 71.55 124.92 71.92L125.38 71.19C123.81 70.05 122.71 68.73 122.06 67.22L121.27 67.22C120.50 68.86 119.40 70.20 117.98 71.22L118.45 71.95C118.95 71.59 119.42 71.18 119.88 70.70ZM123.46 70.68L119.90 70.68C120.55 69.96 121.14 69.09 121.66 68.07C122.11 69.03 122.71 69.90 123.46 70.68ZM118.26 77.00L118.26 77.84L125.13 77.84L125.13 77.00L123.26 77.00C123.76 75.68 124.20 74.18 124.53 72.49L123.70 72.27C123.33 74.14 122.90 75.72 122.41 77.00L118.26 77.00ZM119.60 72.60L118.86 72.85C119.19 73.95 119.48 75.09 119.72 76.29L120.48 76.09C120.22 74.77 119.94 73.60 119.60 72.60ZM121.45 72.16L120.70 72.40C121.02 73.46 121.28 74.56 121.48 75.72L122.28 75.51C122.04 74.25 121.76 73.14 121.45 72.16ZM128.24 71.70L128.24 76.11L135.42 76.11L135.42 71.70L128.24 71.70ZM134.58 75.34L129.08 75.34L129.08 74.29L134.58 74.29L134.58 75.34ZM129.08 73.56L129.08 72.46L134.58 72.46L134.58 73.56L129.08 73.56ZM126.90 68.28L126.90 69.07L130.60 69.07C129.67 69.91 128.24 70.62 126.32 71.17L126.78 71.94C128.88 71.18 130.40 70.22 131.34 69.07L131.41 69.07L131.41 71.31L132.25 71.31L132.25 69.07L132.32 69.07C133.21 70.24 134.73 71.19 136.89 71.92L137.26 71.14C135.37 70.64 133.98 69.94 133.08 69.07L136.76 69.07L136.76 68.28L132.25 68.28L132.25 67.17L131.41 67.17L131.41 68.28L126.90 68.28ZM126.66 77.05L126.66 77.85L136.96 77.85L136.96 77.05L126.66 77.05ZM140.52 67.15L139.95 72.42L146.78 72.42C146.78 74.70 146.64 76.09 146.36 76.58C146.10 77.04 145.28 77.26 143.92 77.26C143.68 77.26 143.28 77.23 142.69 77.18L142.92 77.97C143.32 78.00 143.72 78.02 144.10 78.02C145.57 78.02 146.53 77.77 146.97 77.28C147.43 76.76 147.66 74.88 147.66 71.61L140.91 71.61L141.12 69.66L148.47 69.66L148.47 68.83L141.20 68.83L141.37 67.22L140.52 67.15ZM138.40 74.35L138.40 75.18L145.18 75.18L145.18 74.35L138.40 74.35ZM154.47 67.75L154.47 68.56L157.29 68.56L157.29 73.09L154.14 73.09L154.14 73.92L157.29 73.92L157.29 78.20L158.13 78.20L158.13 73.92L161.34 73.92L161.34 73.09L158.13 73.09L158.13 68.56L160.98 68.56L160.98 67.75L154.47 67.75ZM159.88 69.16C159.62 70.38 159.31 71.38 158.95 72.18L159.68 72.43C160.06 71.55 160.39 70.53 160.64 69.37L159.88 69.16ZM155.40 69.24L154.65 69.48C155.05 70.42 155.37 71.42 155.61 72.45L156.36 72.26C156.07 71.12 155.76 70.11 155.40 69.24ZM151.75 67.32L151.15 67.90C152.01 68.55 152.71 69.18 153.21 69.76L153.80 69.16C153.25 68.54 152.56 67.93 151.75 67.32ZM150.31 70.87L150.31 71.70L152.07 71.70L152.07 76.48C152.07 76.68 151.98 76.84 151.80 77.01L152.13 77.78C152.92 77.24 153.67 76.63 154.38 75.93L154.14 75.02C153.69 75.46 153.28 75.85 152.90 76.18L152.90 70.87L150.31 70.87ZM164.74 73.63L167.41 73.63L167.41 75.01L164.74 75.01L164.74 73.63ZM167.41 75.80L167.41 78.24L168.27 78.24L168.27 75.80L170.97 75.80L170.97 76.47L171.81 76.47L171.81 70.69L168.27 70.69L168.27 69.49L167.41 69.49L167.41 70.69L163.90 70.69L163.90 76.51L164.74 76.51L164.74 75.80L167.41 75.80ZM168.27 75.01L168.27 73.63L170.97 73.63L170.97 75.01L168.27 75.01ZM170.97 72.86L168.27 72.86L168.27 71.48L170.97 71.48L170.97 72.86ZM167.41 71.48L167.41 72.86L164.74 72.86L164.74 71.48L167.41 71.48ZM172.78 68.11L168.24 68.11C168.12 67.72 168.01 67.39 167.89 67.09L166.98 67.24C167.11 67.51 167.23 67.80 167.35 68.11L162.78 68.11L162.78 70.27L163.62 70.27L163.62 68.89L171.94 68.89L171.94 70.21L172.78 70.21L172.78 68.11ZM180.80 71.80C180.56 71.80 180.36 71.89 180.19 72.06C180.01 72.22 179.92 72.44 179.92 72.68C179.92 72.92 180.01 73.12 180.19 73.29C180.36 73.46 180.56 73.54 180.80 73.54C181.04 73.54 181.24 73.46 181.41 73.29C181.58 73.12 181.68 72.92 181.68 72.68C181.68 72.44 181.58 72.22 181.41 72.06C181.24 71.89 181.04 71.80 180.80 71.80ZM190.23 71.70L190.23 76.11L197.41 76.11L197.41 71.70L190.23 71.70ZM196.57 75.34L191.07 75.34L191.07 74.29L196.57 74.29L196.57 75.34ZM191.07 73.56L191.07 72.46L196.57 72.46L196.57 73.56L191.07 73.56ZM188.89 68.28L188.89 69.07L192.60 69.07C191.66 69.91 190.23 70.62 188.31 71.17L188.77 71.94C190.87 71.18 192.39 70.22 193.33 69.07L193.40 69.07L193.40 71.31L194.24 71.31L194.24 69.07L194.31 69.07C195.20 70.24 196.72 71.19 198.88 71.92L199.26 71.14C197.36 70.64 195.97 69.94 195.07 69.07L198.75 69.07L198.75 68.28L194.24 68.28L194.24 67.17L193.40 67.17L193.40 68.28L188.89 68.28ZM188.65 77.05L188.65 77.85L198.96 77.85L198.96 77.05L188.65 77.05ZM201.26 69.40L201.26 70.15L204.67 70.15C204.51 70.41 204.33 70.69 204.14 70.96L200.61 70.96L200.61 71.73L203.54 71.73C202.69 72.74 201.61 73.68 200.30 74.56L200.77 75.31C201.51 74.80 202.18 74.26 202.80 73.71L202.80 78.21L203.62 78.21L203.62 77.70L209.05 77.70L209.05 78.21L209.88 78.21L209.88 72.56L203.92 72.56C204.15 72.30 204.37 72.02 204.58 71.73L211.08 71.73L211.08 70.96L205.11 70.96C205.27 70.70 205.42 70.44 205.57 70.15L210.38 70.15L210.38 69.40L205.92 69.40C206.04 69.10 206.16 68.79 206.26 68.47C207.78 68.35 209.10 68.17 210.24 67.92L209.84 67.23C207.60 67.69 204.78 67.92 201.37 67.92L201.62 68.64C202.99 68.64 204.26 68.60 205.44 68.53C205.32 68.82 205.20 69.12 205.06 69.40L201.26 69.40ZM203.62 74.74L209.05 74.74L209.05 75.50L203.62 75.50L203.62 74.74ZM209.05 74.07L203.62 74.07L203.62 73.27L209.05 73.27L209.05 74.07ZM203.62 76.17L209.05 76.17L209.05 76.99L203.62 76.99L203.62 76.17ZM213.06 68.53L213.06 69.33L217.42 69.33C217.36 69.68 217.29 70.03 217.22 70.38L213.75 70.38L213.75 71.18L216.99 71.18C216.87 71.53 216.74 71.86 216.58 72.20L212.71 72.20L212.71 73.02L216.16 73.02C216.12 73.10 216.06 73.18 216.01 73.28C215.17 74.55 213.91 75.66 212.23 76.57L212.80 77.31C213.96 76.62 214.92 75.85 215.70 75.02L218.05 75.02L218.05 76.95L214.08 76.95L214.08 77.79L222.98 77.79L222.98 76.95L218.92 76.95L218.92 75.02L222.24 75.02L222.24 74.18L216.40 74.18C216.50 74.05 216.60 73.92 216.69 73.77C216.84 73.53 216.97 73.28 217.11 73.02L222.99 73.02L222.99 72.20L217.48 72.20C217.62 71.88 217.74 71.54 217.86 71.18L221.95 71.18L221.95 70.38L218.08 70.38C218.17 70.04 218.24 69.69 218.31 69.33L222.58 69.33L222.58 68.53L220.21 68.53C220.46 68.12 220.65 67.69 220.78 67.22L219.88 67.10C219.76 67.59 219.57 68.07 219.32 68.53L216.54 68.53C216.34 68.01 216.14 67.56 215.92 67.15L215.04 67.29C215.26 67.66 215.48 68.07 215.67 68.53L213.06 68.53ZM233.38 67.66L225.66 67.66L225.66 71.59C225.66 72.31 226.04 72.68 226.81 72.68L233.70 72.68C234.20 72.67 234.55 72.49 234.72 72.13C234.82 71.89 234.91 71.50 234.96 70.95L234.18 70.70C234.13 71.20 234.07 71.53 233.98 71.66C233.89 71.80 233.71 71.89 233.46 71.90L227.12 71.90C226.71 71.90 226.51 71.70 226.51 71.29L226.51 70.48L233.38 70.48L233.38 67.66ZM226.51 69.70L226.51 68.44L232.54 68.44L232.54 69.70L226.51 69.70ZM224.32 74.47L224.32 75.25L227.32 75.25C227.08 76.34 226.33 77.07 225.06 77.43L225.51 78.18C226.98 77.67 227.86 76.69 228.16 75.25L231.43 75.25L231.43 78.13L232.29 78.13L232.29 75.25L235.29 75.25L235.29 74.47L232.29 74.47L232.29 73.15L231.43 73.15L231.43 74.47L228.27 74.47C228.28 74.19 228.30 73.75 228.30 73.14L227.43 73.14C227.43 73.70 227.42 74.14 227.41 74.47L224.32 74.47ZM242.79 71.80C242.55 71.80 242.35 71.89 242.18 72.06C242.00 72.22 241.92 72.44 241.92 72.68C241.92 72.92 242.00 73.12 242.18 73.29C242.35 73.46 242.55 73.54 242.79 73.54C243.03 73.54 243.24 73.46 243.40 73.29C243.57 73.12 243.67 72.92 243.67 72.68C243.67 72.44 243.57 72.22 243.40 72.06C243.24 71.89 243.03 71.80 242.79 71.80ZM254.49 67.69L254.49 68.48L261.10 68.48L261.10 67.69L254.49 67.69ZM255.10 69.24L255.10 71.76L260.40 71.76L260.40 69.24L255.10 69.24ZM259.58 71.10L255.92 71.10L255.92 69.93L259.58 69.93L259.58 71.10ZM255.78 75.25L255.78 75.94L257.29 75.94L257.29 78.10L258.08 78.10L258.08 75.94L259.58 75.94L259.58 75.25L258.63 75.25C258.85 74.80 259.05 74.30 259.23 73.75L258.50 73.48C258.32 74.10 258.12 74.68 257.88 75.25L255.78 75.25ZM256.71 73.58L256.05 73.80C256.29 74.20 256.48 74.64 256.65 75.08L257.30 74.92C257.13 74.42 256.93 73.96 256.71 73.58ZM259.96 78.13C260.56 78.13 260.88 77.80 260.88 77.17L260.88 72.51L254.49 72.51L254.49 78.19L255.28 78.19L255.28 73.26L260.10 73.26L260.10 77.00C260.10 77.25 259.96 77.38 259.71 77.38L258.78 77.35L258.99 78.13L259.96 78.13ZM250.80 67.69L250.80 78.20L251.61 78.20L251.61 68.48L253.22 68.48C252.99 69.50 252.68 70.64 252.27 71.90C252.85 72.92 253.15 73.84 253.15 74.67C253.15 74.91 253.09 75.09 252.99 75.19C252.88 75.28 252.68 75.34 252.37 75.37C252.24 75.37 252.08 75.34 251.91 75.32L252.18 76.18C252.88 76.17 253.38 76.03 253.66 75.75C253.87 75.54 253.98 75.18 253.98 74.67C253.93 73.81 253.65 72.84 253.12 71.77C253.48 70.58 253.81 69.44 254.07 68.35L254.07 67.69L250.80 67.69ZM270.79 72.07L264.80 72.07L264.80 69.46L263.97 69.46L263.97 72.79L266.92 72.79C266.83 73.08 266.74 73.36 266.65 73.63L263.24 73.63L263.24 78.19L264.07 78.19L264.07 74.41L266.35 74.41C266.06 75.08 265.77 75.66 265.46 76.14C265.40 76.21 265.28 76.26 265.09 76.28L265.29 77.06C267.30 76.83 268.76 76.63 269.68 76.46C269.78 76.66 269.89 76.88 270.00 77.12L270.69 76.77C270.27 75.93 269.82 75.14 269.34 74.41L271.53 74.41L271.53 77.02C271.53 77.28 271.38 77.41 271.08 77.41L270.13 77.37L270.34 78.19L271.35 78.19C272.02 78.19 272.36 77.85 272.36 77.20L272.36 73.63L267.48 73.63C267.57 73.36 267.67 73.09 267.76 72.79L271.62 72.79L271.62 69.46L270.79 69.46L270.79 72.07ZM269.07 74.41L268.63 74.62C268.86 74.98 269.08 75.37 269.32 75.79C268.36 75.96 267.36 76.09 266.30 76.20C266.59 75.69 266.89 75.10 267.18 74.41L269.07 74.41ZM265.86 69.22L265.48 69.78C266.10 69.99 266.71 70.26 267.32 70.54C266.72 70.86 266.06 71.11 265.32 71.32L265.70 71.95C266.66 71.61 267.44 71.26 268.06 70.92C268.65 71.22 269.24 71.56 269.83 71.95L270.22 71.35C269.74 71.05 269.25 70.76 268.74 70.50C269.14 70.21 269.56 69.87 269.98 69.49L269.37 69.12C268.96 69.50 268.52 69.84 268.03 70.15C267.33 69.81 266.61 69.50 265.86 69.22ZM267.96 67.11L267.07 67.26C267.21 67.52 267.36 67.80 267.49 68.11L262.64 68.11L262.64 68.91L272.94 68.91L272.94 68.11L268.35 68.11C268.23 67.74 268.10 67.40 267.96 67.11ZM284.32 67.59C282.64 68.07 280.53 68.32 277.99 68.32L278.26 69.14C279.18 69.14 280.04 69.10 280.86 69.04L280.86 72.33L277.36 72.33L277.36 73.17L280.86 73.17L280.86 76.94L277.96 76.94L277.96 77.79L284.64 77.79L284.64 76.94L281.72 76.94L281.72 73.17L285.24 73.17L285.24 72.33L281.72 72.33L281.72 68.96C282.87 68.83 283.88 68.61 284.74 68.32L284.32 67.59ZM277.03 67.22C276.44 69.03 275.50 70.64 274.21 72.03L274.48 72.96C274.95 72.49 275.38 72.00 275.77 71.49L275.77 78.22L276.63 78.22L276.63 70.21C277.11 69.39 277.52 68.52 277.83 67.59L277.03 67.22ZM289.92 67.16C289.41 68.36 288.43 69.37 286.99 70.20L287.52 70.89C288.07 70.56 288.56 70.18 289.02 69.78C289.59 70.28 290.22 70.74 290.89 71.13C289.57 71.66 288.04 72.04 286.30 72.28L286.70 73.10C288.64 72.80 290.36 72.31 291.82 71.64C293.31 72.38 295.00 72.86 296.90 73.08L297.30 72.27C295.63 72.10 294.12 71.73 292.76 71.16C293.86 70.53 294.80 69.78 295.57 68.89L295.57 68.19L290.34 68.19C290.50 67.90 290.66 67.60 290.79 67.28L289.92 67.16ZM291.81 70.71C291.01 70.29 290.26 69.79 289.59 69.20L289.75 69.01L294.33 69.01C293.62 69.66 292.78 70.23 291.81 70.71ZM291.08 72.50C291.08 72.98 291.03 73.44 290.94 73.87L287.12 73.87L287.12 74.65L290.70 74.65C290.60 74.89 290.47 75.12 290.32 75.33C289.70 76.21 288.39 76.94 286.42 77.52L287.00 78.22C289.21 77.53 290.61 76.63 291.22 75.55C291.38 75.26 291.51 74.96 291.61 74.65L295.16 74.65C295.12 75.85 295.02 76.59 294.84 76.88C294.64 77.17 294.20 77.32 293.48 77.34L292.06 77.28L292.28 78.06C292.83 78.08 293.30 78.10 293.68 78.10C294.54 78.10 295.14 77.90 295.48 77.50C295.83 77.11 296.01 75.90 296.04 73.87L291.81 73.87C291.88 73.44 291.93 72.98 291.93 72.50L291.08 72.50ZM304.94 69.80L307.24 69.80C307.22 71.53 306.86 73.02 306.18 74.25C305.55 73.22 305.04 72.00 304.65 70.60C304.75 70.35 304.84 70.09 304.94 69.80ZM308.07 69.80L309.01 69.80L309.01 68.97L305.18 68.97C305.30 68.47 305.42 67.92 305.52 67.33L304.68 67.18C304.36 69.28 303.78 70.95 302.90 72.18L303.43 72.85C303.70 72.49 303.96 72.08 304.20 71.62C304.59 72.91 305.10 74.04 305.70 75.01C304.92 76.06 303.85 76.88 302.49 77.48L303.03 78.19C304.33 77.58 305.38 76.76 306.18 75.74C306.93 76.80 307.84 77.62 308.90 78.22L309.39 77.50C308.34 76.90 307.44 76.08 306.68 75.02C307.56 73.62 308.02 71.88 308.07 69.80ZM299.91 76.38L299.91 72.51L302.60 72.51L302.60 68.05L298.47 68.05L298.47 68.88L301.76 68.88L301.76 71.72L299.07 71.72L299.07 76.20C299.07 76.51 298.95 76.70 298.74 76.80L298.99 77.54C300.52 77.04 301.90 76.47 303.15 75.87L303.02 75.08C301.96 75.61 300.92 76.04 299.91 76.38ZM310.87 68.04L310.87 68.86L315.21 68.86L315.21 68.04L310.87 68.04ZM310.40 71.28L310.40 72.12L312.07 72.12C311.47 74.30 310.99 75.63 310.63 76.12C310.58 76.15 310.52 76.17 310.44 76.20L310.64 77.01C312.13 76.75 313.52 76.39 314.79 75.93C314.91 76.21 315.03 76.50 315.15 76.81L315.90 76.42C315.39 75.21 314.85 74.10 314.28 73.06L313.54 73.42C313.86 73.98 314.16 74.56 314.47 75.21C313.53 75.56 312.58 75.84 311.64 76.03C312.00 75.24 312.42 73.94 312.90 72.12L315.67 72.12L315.67 71.28L310.40 71.28ZM317.47 67.23L317.47 69.66L315.85 69.66L315.85 70.50L317.47 70.50L317.47 70.64C317.44 73.87 316.68 76.21 315.18 77.66L315.82 78.22C317.46 76.63 318.30 74.10 318.33 70.64L318.33 70.50L320.11 70.50C320.08 73.72 320.04 75.66 319.96 76.29C319.87 76.98 319.52 77.32 318.93 77.32C318.61 77.32 318.22 77.30 317.79 77.28L317.98 78.04C318.49 78.07 318.84 78.08 319.04 78.08C320.07 78.08 320.66 77.59 320.78 76.62C320.89 75.73 320.95 73.41 320.95 69.66L318.33 69.66L318.33 67.23L317.47 67.23Z" fill="#66738B"/>
+<rect x="32" y="100" width="206" height="168" rx="12" fill="#FFFFFF" stroke="#DFE4EF"/>
+<path d="M49.35 117.60L49.35 118.37L56.84 118.37L56.84 120.17L49.87 120.17L49.87 120.93L56.84 120.93L56.84 122.82L49.29 122.82L49.29 123.59L56.84 123.59L56.84 124.02L57.65 124.02L57.65 117.60L53.94 117.60L53.94 114.12L53.10 114.12L53.10 117.60L49.35 117.60ZM56.97 114.60C56.61 115.32 56.15 116.05 55.58 116.77L56.29 117.15C56.87 116.43 57.33 115.70 57.68 114.93L56.97 114.60ZM50.13 114.69L49.46 115.11C50.06 115.86 50.52 116.54 50.86 117.16L51.53 116.70C51.20 116.12 50.74 115.45 50.13 114.69ZM66.42 113.94C66.18 114.44 65.90 114.93 65.58 115.39L63.43 115.39C63.19 114.87 62.95 114.41 62.71 114.00L61.87 114.14C62.13 114.52 62.37 114.93 62.59 115.39L59.57 115.39L59.57 116.16L69.42 116.16L69.42 115.39L66.45 115.39C66.71 115.04 66.96 114.64 67.19 114.20L66.42 113.94ZM63.39 124.03C64.02 124.03 64.33 123.66 64.33 122.91L64.33 117.05L60.34 117.05L60.34 124.12L61.11 124.12L61.11 121.71L63.56 121.71L63.56 122.74C63.56 123.10 63.42 123.29 63.14 123.29L62.31 123.25L62.52 124.03L63.39 124.03ZM61.11 121.01L61.11 119.75L63.56 119.75L63.56 121.01L61.11 121.01ZM61.11 119.05L61.11 117.79L63.56 117.79L63.56 119.05L61.11 119.05ZM67.67 124.00C68.32 124.00 68.65 123.66 68.65 122.99L68.65 116.74L67.86 116.74L67.86 122.79C67.86 123.12 67.70 123.30 67.39 123.30C66.95 123.30 66.50 123.28 66.04 123.24L66.20 124.00L67.67 124.00ZM65.57 117.57L65.57 122.31L66.34 122.31L66.34 117.57L65.57 117.57ZM75.21 114.01C73.92 115.50 72.30 116.73 70.36 117.72L70.78 118.48C72.74 117.42 74.31 116.17 75.50 114.72C76.80 116.26 78.35 117.51 80.17 118.47L80.60 117.71C78.79 116.81 77.18 115.58 75.79 114.01L75.21 114.01ZM72.82 117.39L72.82 118.14L78.22 118.14L78.22 117.39L72.82 117.39ZM71.09 119.60L71.09 120.37L73.85 120.37C73.38 121.27 72.78 122.12 72.08 122.93C71.99 123.02 71.86 123.09 71.66 123.14L71.88 123.84C74.51 123.68 76.68 123.46 78.39 123.19C78.61 123.50 78.81 123.79 79.00 124.09L79.66 123.63C79.12 122.80 78.35 121.83 77.35 120.71L76.73 121.11C77.18 121.61 77.59 122.12 77.96 122.60C76.34 122.82 74.63 122.98 72.84 123.09C73.59 122.31 74.22 121.41 74.75 120.37L79.93 120.37L79.93 119.60L71.09 119.60ZM84.96 117.22L84.96 118.00L87.97 118.00L87.97 119.77L85.92 119.77L85.92 124.07L86.70 124.07L86.70 123.52L90.08 123.52L90.08 124.07L90.87 124.07L90.87 119.77L88.78 119.77L88.78 118.00L91.61 118.00L91.61 117.22L88.78 117.22L88.78 115.39C89.70 115.26 90.53 115.06 91.23 114.81L90.84 114.13C89.35 114.64 87.46 114.89 85.18 114.89L85.41 115.61C86.32 115.61 87.18 115.56 87.97 115.49L87.97 117.22L84.96 117.22ZM86.70 122.77L86.70 120.48L90.08 120.48L90.08 122.77L86.70 122.77ZM82.78 114.12L82.23 114.66C83.02 115.26 83.66 115.83 84.12 116.37L84.66 115.82C84.16 115.25 83.53 114.68 82.78 114.12ZM81.46 117.38L81.46 118.14L83.08 118.14L83.08 122.54C83.08 122.70 82.99 122.86 82.84 123.00L83.14 123.70C83.90 123.21 84.62 122.65 85.28 122.01L85.07 121.17C84.63 121.60 84.21 121.98 83.84 122.28L83.84 117.38L81.46 117.38Z" fill="#7A859E"/>
+<path d="M55.95 136.48C55.56 137.61 54.79 138.56 53.67 139.35L54.43 140.33C54.71 140.13 54.96 139.91 55.21 139.68C55.50 140.12 55.88 140.52 56.36 140.90C55.57 141.24 54.68 141.52 53.64 141.74L54.15 142.93C55.46 142.61 56.61 142.20 57.58 141.70C58.47 142.19 59.59 142.60 60.91 142.92L61.43 141.67C60.46 141.46 59.61 141.21 58.86 140.90C59.70 140.27 60.32 139.53 60.73 138.69L60.73 137.56L56.85 137.56C56.99 137.28 57.13 136.97 57.24 136.65L55.95 136.48ZM56.05 138.82C56.05 138.79 56.06 138.77 56.09 138.76L59.27 138.76C58.86 139.32 58.30 139.81 57.60 140.26C56.93 139.84 56.41 139.36 56.05 138.82ZM51.37 136.48C50.76 138.63 49.78 140.52 48.46 142.15L48.85 143.48C49.27 143.00 49.68 142.51 50.07 142.01L50.07 149.46L51.35 149.46L51.35 139.99C51.85 139.07 52.26 138.07 52.58 137.04L51.37 136.48ZM52.28 139.03L52.28 146.95L53.50 146.95L53.50 139.03L52.28 139.03ZM57.91 142.43C57.44 142.76 56.92 143.06 56.37 143.31C55.70 143.59 55.00 143.80 54.26 143.95L54.89 145.00C55.90 144.67 56.68 144.37 57.24 144.11C57.80 143.83 58.33 143.46 58.86 143.03L57.91 142.43ZM59.27 143.48C58.23 144.61 56.68 145.44 54.61 145.94L55.13 147.08C57.34 146.47 59.00 145.49 60.14 144.15L59.27 143.48ZM54.59 149.57C55.95 149.20 57.27 148.66 58.53 147.96C59.79 147.24 60.73 146.40 61.37 145.44L60.43 144.74C59.70 145.63 58.86 146.35 57.88 146.91C56.93 147.45 55.64 147.94 54.03 148.36L54.59 149.57ZM65.99 138.61L74.59 138.61L74.59 137.47L66.58 137.47C66.69 137.19 66.79 136.91 66.89 136.62L65.58 136.38C65.08 137.89 64.13 139.18 62.73 140.23L63.53 141.28C64.02 140.90 64.48 140.50 64.90 140.05L64.90 143.97L66.54 143.97C65.81 144.85 64.72 145.58 63.23 146.17L63.92 147.30C64.58 146.99 65.19 146.64 65.75 146.26C66.42 146.81 67.17 147.29 67.96 147.71C66.59 148.06 64.95 148.27 63.06 148.34L63.60 149.48C65.92 149.34 67.91 148.98 69.56 148.39C71.14 148.97 72.93 149.30 74.94 149.40L75.24 148.18C73.76 148.13 72.40 147.96 71.17 147.66C72.16 147.12 72.98 146.45 73.61 145.66L73.61 144.72L67.46 144.72C67.66 144.49 67.84 144.23 68.02 143.97L73.55 143.97L73.55 139.35L65.49 139.35C65.65 139.11 65.82 138.86 65.99 138.61ZM69.57 147.19C68.57 146.82 67.66 146.35 66.84 145.79L71.94 145.79C71.31 146.35 70.53 146.81 69.57 147.19ZM72.26 142.93L66.20 142.93L66.20 142.13L72.26 142.13L72.26 142.93ZM66.20 141.15L66.20 140.37L72.26 140.37L72.26 141.15L66.20 141.15ZM79.02 142.39L79.02 145.96L87.03 145.96L87.03 142.39L79.02 142.39ZM85.70 144.78L80.35 144.78L80.35 143.55L85.70 143.55L85.70 144.78ZM80.51 146.11L79.25 146.57C79.67 146.95 80.03 147.36 80.34 147.80L76.95 147.80L76.95 149.06L89.02 149.06L89.02 147.80L85.86 147.80C86.16 147.40 86.46 146.96 86.72 146.49L85.48 146.05C85.17 146.66 84.82 147.24 84.43 147.80L81.75 147.80C81.38 147.15 80.96 146.59 80.51 146.11ZM78.30 138.40L77.40 139.25C78.07 139.73 78.65 140.17 79.12 140.61C78.39 141.11 77.54 141.57 76.56 141.97L77.36 143.02C78.69 142.46 79.81 141.78 80.72 140.99L80.72 141.43L85.84 141.43L85.84 140.90C86.68 141.66 87.66 142.36 88.78 142.99L89.66 141.97C88.88 141.57 88.18 141.14 87.55 140.66C88.14 140.22 88.64 139.71 89.09 139.15L88.15 138.33C87.73 138.89 87.21 139.40 86.60 139.88C86.29 139.60 86.01 139.31 85.76 139.01C86.35 138.59 86.88 138.12 87.33 137.57L86.39 136.74C86.00 137.22 85.55 137.67 85.03 138.07C84.69 137.60 84.41 137.08 84.19 136.53L83.10 137.15C83.59 138.27 84.27 139.29 85.17 140.23L81.47 140.23C82.06 139.56 82.52 138.79 82.86 137.95L82.86 136.95L78.07 136.95L78.07 138.17L81.35 138.17C81.01 138.76 80.59 139.31 80.06 139.84C79.56 139.36 78.97 138.87 78.30 138.40ZM92.37 136.97L92.37 138.16L99.28 138.16L99.28 139.26L92.84 139.26L92.84 140.41L99.28 140.41L99.28 141.49L90.97 141.49L90.97 142.71L96.26 142.71L96.26 144.29C94.72 145.65 92.88 146.81 90.77 147.78L91.30 149.01C93.21 148.01 94.86 146.91 96.26 145.68L96.26 147.72C96.26 148.10 96.13 148.29 95.89 148.29C95.43 148.29 94.94 148.25 94.42 148.20L94.72 149.46L96.34 149.46C97.15 149.46 97.57 148.98 97.57 148.03L97.57 145.61C98.81 146.95 100.42 148.10 102.43 149.05L103.10 147.87C101.70 147.27 100.49 146.59 99.42 145.80C100.37 145.28 101.21 144.56 101.96 143.63L100.93 142.78C100.26 143.77 99.45 144.53 98.51 145.06C98.18 144.77 97.87 144.46 97.57 144.14L97.57 142.71L103.05 142.71L103.05 141.49L100.64 141.49L100.64 136.97L92.37 136.97ZM92.65 143.00L91.76 143.86C92.66 144.47 93.36 145.05 93.86 145.58L94.73 144.71C94.17 144.15 93.47 143.58 92.65 143.00ZM106.03 140.59L106.03 145.41L110.31 145.41L110.31 146.15L105.47 146.15L105.47 147.20L110.31 147.20L110.31 148.00L104.77 148.00L104.77 149.13L117.23 149.13L117.23 148.00L111.64 148.00L111.64 147.20L116.53 147.20L116.53 146.15L111.64 146.15L111.64 145.41L115.94 145.41L115.94 140.59L111.64 140.59L111.64 139.91L117.02 139.91L117.02 138.79L111.64 138.79L111.64 137.95C113.17 137.85 114.60 137.74 115.93 137.63L115.52 136.55C112.71 136.83 109.49 137.02 105.85 137.14L106.07 138.20C107.56 138.14 108.97 138.09 110.31 138.02L110.31 138.79L104.97 138.79L104.97 139.91L110.31 139.91L110.31 140.59L106.03 140.59ZM114.65 144.36L111.64 144.36L111.64 143.49L114.65 143.49L114.65 144.36ZM110.31 144.36L107.30 144.36L107.30 143.49L110.31 143.49L110.31 144.36ZM107.30 142.48L107.30 141.64L110.31 141.64L110.31 142.48L107.30 142.48ZM111.64 141.64L114.65 141.64L114.65 142.48L111.64 142.48L111.64 141.64ZM124.43 143.35L124.43 147.03C124.01 147.10 123.59 147.16 123.17 147.22L123.49 148.49C124.87 148.25 126.18 147.96 127.39 147.62L127.39 146.38C126.85 146.53 126.29 146.67 125.73 146.80L125.73 143.35L126.93 143.35L126.93 142.11L123.22 142.11L123.22 143.35L124.43 143.35ZM129.89 149.32C130.56 149.32 131.13 148.29 131.64 146.26L130.59 145.41C130.33 147.01 130.11 147.83 129.89 147.86C129.51 147.79 129.19 146.96 128.91 145.37C128.71 144.08 128.57 142.36 128.51 140.22L131.16 140.22L131.16 138.93L128.49 138.93C128.46 138.16 128.46 137.35 128.46 136.48L127.17 136.48C127.17 137.32 127.17 138.14 127.20 138.93L122.90 138.93L122.90 140.22L127.23 140.22C127.28 142.01 127.39 143.51 127.56 144.74C127.76 146.17 128.08 147.33 128.53 148.21C128.92 148.94 129.38 149.32 129.89 149.32ZM129.63 136.46L128.72 137.04C129.28 137.68 129.75 138.27 130.08 138.80L131.01 138.16C130.67 137.68 130.22 137.11 129.63 136.46ZM120.42 136.63L119.50 137.54C120.42 138.27 121.16 138.97 121.70 139.63L122.61 138.70C122.02 138.00 121.29 137.32 120.42 136.63ZM118.53 140.69L118.53 141.97L120.39 141.97L120.39 147.15C120.39 147.41 120.27 147.64 120.04 147.83L120.55 149.02C121.43 148.38 122.26 147.64 123.04 146.80L122.69 145.40C122.34 145.79 122.00 146.14 121.68 146.46L121.68 140.69L118.53 140.69Z" fill="#253047"/>
+<rect x="48" y="160" width="174" height="34" rx="8" fill="#F3F5FA"/>
+<path d="M66.06 172.60L66.06 173.35L63.28 173.35L63.28 174.03L66.06 174.03L66.06 174.80L63.74 174.80L63.74 175.47L66.06 175.47L66.06 176.25L62.96 176.25L62.96 176.94L69.99 176.94L69.99 176.25L66.85 176.25L66.85 175.47L69.29 175.47L69.29 174.80L66.85 174.80L66.85 174.03L69.71 174.03L69.71 173.35L66.85 173.35L66.85 172.60L66.06 172.60ZM64.62 179.84L68.34 179.84L68.34 180.68L64.62 180.68L64.62 179.84ZM68.34 179.19L64.62 179.19L64.62 178.34L68.34 178.34L68.34 179.19ZM64.62 181.32L68.34 181.32L68.34 181.98C68.34 182.24 68.19 182.38 67.91 182.38L66.99 182.34L67.19 183.08L68.15 183.08C68.80 183.08 69.13 182.77 69.13 182.15L69.13 177.66L63.83 177.66L63.83 183.15L64.62 183.15L64.62 181.32ZM60.87 172.73L60.29 173.29C61.12 173.92 61.77 174.50 62.25 175.05L62.82 174.48C62.29 173.89 61.65 173.31 60.87 172.73ZM59.48 176.12L59.48 176.92L61.13 176.92L61.13 181.48C61.13 181.68 61.04 181.85 60.86 182.01L61.19 182.75C61.90 182.23 62.59 181.63 63.23 180.97L63.01 180.09C62.62 180.49 62.27 180.85 61.92 181.17L61.92 176.12L59.48 176.12ZM72.62 172.89L71.98 173.34C72.60 173.98 73.12 174.59 73.52 175.17L74.17 174.72C73.80 174.19 73.28 173.58 72.62 172.89ZM76.66 177.75L76.00 178.16C76.78 179.06 77.39 179.88 77.85 180.62L78.57 180.11C78.12 179.45 77.49 178.65 76.66 177.75ZM75.23 172.60L75.23 173.97C75.22 174.48 75.19 174.96 75.16 175.44L71.49 175.44L71.49 176.25L75.07 176.25C74.92 177.40 74.66 178.40 74.31 179.25C73.71 180.55 72.63 181.59 71.09 182.37L71.56 183.10C73.12 182.33 74.24 181.26 74.92 179.90C75.39 178.91 75.71 177.70 75.89 176.25L79.87 176.25C79.87 177.72 79.83 179.09 79.73 180.34C79.64 181.59 79.26 182.24 78.62 182.29C78.14 182.29 77.61 182.26 77.02 182.22L77.24 183.02C77.63 183.05 78.10 183.07 78.66 183.07C79.44 183.07 79.98 182.62 80.28 181.72C80.56 180.83 80.71 178.73 80.71 175.44L75.97 175.44C76.01 174.97 76.03 174.48 76.04 173.97L76.04 172.60L75.23 172.60ZM86.11 174.29L86.11 175.09L90.84 175.09C90.57 176.13 90.18 177.06 89.65 177.85C88.87 177.18 88.01 176.51 87.11 175.85L86.54 176.39C87.49 177.10 88.36 177.80 89.16 178.49C88.33 179.48 87.22 180.21 85.86 180.64L86.34 181.39C87.72 180.91 88.87 180.11 89.77 179.03C90.64 179.81 91.40 180.57 92.04 181.33L92.68 180.69C91.96 179.92 91.15 179.15 90.26 178.38C90.86 177.47 91.33 176.38 91.66 175.09L92.68 175.09L92.68 174.29L89.76 174.29C89.60 173.65 89.43 173.09 89.25 172.59L88.41 172.73C88.59 173.19 88.76 173.72 88.92 174.29L86.11 174.29ZM83.45 172.79L82.89 173.33C83.71 173.97 84.36 174.57 84.83 175.13L85.43 174.55C84.89 173.96 84.23 173.38 83.45 172.79ZM90.15 182.94L92.79 182.94L92.98 182.12C92.68 182.14 92.25 182.15 91.69 182.16C91.13 182.17 90.58 182.18 90.04 182.18C89.15 182.18 88.41 182.17 87.81 182.16C87.14 182.14 86.62 182.05 86.28 181.88C85.96 181.74 85.67 181.49 85.39 181.16C85.30 181.06 85.21 180.97 85.12 180.90L85.12 176.59L82.70 176.59L82.70 177.35L84.35 177.35L84.35 180.85C83.87 181.06 83.33 181.64 82.72 182.61L83.35 183.17C83.98 182.12 84.43 181.59 84.70 181.59C84.84 181.59 84.99 181.68 85.14 181.87C85.50 182.29 85.90 182.57 86.35 182.71C86.81 182.84 87.39 182.91 88.13 182.92C88.85 182.93 89.53 182.94 90.15 182.94ZM99.05 175.15L103.23 175.15C103.00 176.04 102.71 176.85 102.36 177.56L103.17 177.79C103.56 176.84 103.87 175.87 104.11 174.89L104.11 174.35L99.28 174.35C99.41 173.85 99.51 173.29 99.61 172.70L98.78 172.57C98.50 174.57 97.89 176.15 96.95 177.27L97.64 177.76C98.23 177.09 98.70 176.22 99.05 175.15ZM100.24 175.93C100.22 177.42 100.02 178.66 99.65 179.64C99.14 180.79 98.10 181.76 96.54 182.52L97.08 183.17C98.85 182.30 99.97 181.17 100.47 179.79C100.56 179.54 100.64 179.27 100.71 178.99C101.45 180.64 102.55 182.02 104.05 183.15L104.59 182.52C102.85 181.32 101.64 179.70 100.95 177.65C101.01 177.12 101.04 176.55 101.04 175.93L100.24 175.93ZM94.74 173.10L94.08 173.51C94.95 174.39 95.65 175.19 96.17 175.91L96.81 175.44C96.33 174.78 95.64 174.00 94.74 173.10ZM96.14 178.03C95.52 179.53 94.80 181.00 93.95 182.44L94.72 182.78C95.51 181.39 96.23 179.90 96.87 178.31L96.14 178.03ZM111.66 172.57C111.31 173.54 110.67 174.35 109.73 175.02L110.20 175.64C110.47 175.43 110.73 175.23 110.97 175.00C111.24 175.43 111.64 175.85 112.12 176.22C111.43 176.54 110.61 176.81 109.68 177.03L109.99 177.78C111.11 177.50 112.06 177.15 112.87 176.71C113.61 177.12 114.55 177.47 115.66 177.75L115.98 176.97C115.10 176.77 114.33 176.51 113.66 176.22C114.43 175.66 115.00 175.01 115.38 174.25L115.38 173.54L112.10 173.54C112.23 173.26 112.36 172.97 112.46 172.67L111.66 172.57ZM111.49 174.44C111.52 174.40 111.56 174.34 111.60 174.29L114.49 174.29C114.10 174.87 113.57 175.36 112.88 175.80C112.27 175.41 111.81 174.96 111.49 174.44ZM107.90 172.59C107.38 174.38 106.55 175.95 105.41 177.33L105.66 178.16C106.08 177.70 106.47 177.20 106.83 176.69L106.83 183.16L107.62 183.16L107.62 175.38C108.02 174.62 108.36 173.80 108.63 172.94L107.90 172.59ZM108.65 174.63L108.65 181.14L109.39 181.14L109.39 174.63L108.65 174.63ZM113.25 177.46C112.85 177.76 112.44 178.02 111.98 178.25C111.45 178.49 110.86 178.69 110.22 178.85L110.62 179.50C111.41 179.25 112.04 179.00 112.52 178.75C112.97 178.50 113.41 178.21 113.84 177.84L113.25 177.46ZM114.34 178.31C113.49 179.32 112.21 180.06 110.51 180.50L110.84 181.21C112.62 180.70 113.97 179.88 114.89 178.73L114.34 178.31ZM110.38 183.23C111.49 182.93 112.56 182.48 113.59 181.91C114.63 181.31 115.40 180.61 115.90 179.81L115.32 179.38C114.74 180.14 114.04 180.76 113.22 181.23C112.41 181.71 111.35 182.13 110.04 182.47L110.38 183.23ZM123.35 175.10L125.56 175.10C125.54 176.76 125.19 178.18 124.54 179.37C123.94 178.38 123.45 177.20 123.08 175.87C123.17 175.63 123.26 175.38 123.35 175.10ZM126.36 175.10L127.25 175.10L127.25 174.31L123.58 174.31C123.70 173.82 123.81 173.29 123.91 172.73L123.10 172.59C122.80 174.61 122.24 176.20 121.40 177.38L121.91 178.02C122.17 177.68 122.41 177.28 122.64 176.85C123.02 178.08 123.50 179.16 124.08 180.09C123.33 181.10 122.31 181.88 121.01 182.46L121.53 183.14C122.77 182.55 123.78 181.77 124.54 180.79C125.26 181.80 126.14 182.60 127.15 183.17L127.62 182.48C126.61 181.91 125.75 181.11 125.02 180.10C125.86 178.76 126.31 177.09 126.36 175.10ZM118.54 181.40L118.54 177.70L121.11 177.70L121.11 173.42L117.16 173.42L117.16 174.21L120.31 174.21L120.31 176.94L117.73 176.94L117.73 181.23C117.73 181.53 117.62 181.71 117.41 181.80L117.65 182.52C119.12 182.03 120.44 181.49 121.64 180.92L121.51 180.16C120.50 180.67 119.50 181.08 118.54 181.40ZM132.93 177.03L132.93 179.10C132.93 179.41 132.77 179.57 132.47 179.57C132.13 179.57 131.74 179.55 131.30 179.50L131.51 180.29C131.91 180.31 132.34 180.32 132.77 180.32C133.41 180.30 133.73 179.98 133.74 179.35L133.74 176.30L129.64 176.30L129.64 182.07C129.64 182.66 129.96 182.95 130.60 182.95L133.34 182.95C133.88 182.95 134.24 182.86 134.43 182.68C134.64 182.45 134.78 181.85 134.87 180.87L134.08 180.62C134.04 181.25 133.96 181.68 133.85 181.90C133.76 182.08 133.51 182.18 133.12 182.18L130.92 182.18C130.62 182.18 130.48 182.05 130.48 181.78L130.48 177.03L132.93 177.03ZM131.47 172.71C130.55 174.09 129.53 175.28 128.40 176.31L128.89 176.97C130.01 175.92 130.99 174.75 131.84 173.49C132.58 174.27 133.44 175.32 134.43 176.63L134.97 176.05C134.05 174.88 133.08 173.77 132.08 172.71L131.47 172.71ZM135.65 173.62L135.65 180.78L136.45 180.78L136.45 173.62L135.65 173.62ZM137.57 183.05C138.21 183.05 138.55 182.69 138.55 182.00L138.55 172.64L137.72 172.64L137.72 181.79C137.72 182.14 137.57 182.31 137.28 182.31C136.75 182.31 136.19 182.29 135.60 182.25L135.79 183.05L137.57 183.05ZM149.55 177.32L149.55 175.71L150.32 175.71L150.32 175.02L149.55 175.02L149.55 173.42L147.09 173.42L147.09 172.58L146.28 172.58L146.28 173.42L144.27 173.42L144.27 174.11L146.28 174.11L146.28 175.02L143.71 175.02L143.71 175.71L146.28 175.71L146.28 176.63L144.27 176.63L144.27 177.32L146.28 177.32L146.28 178.24L144.03 178.24L144.03 178.92L146.28 178.92L146.28 179.87L143.67 179.87L143.67 180.57L146.28 180.57L146.28 181.71L147.09 181.71L147.09 180.57L150.11 180.57L150.11 179.87L147.09 179.87L147.09 178.92L149.78 178.92L149.78 178.24L147.09 178.24L147.09 177.32L149.55 177.32ZM147.09 174.11L148.75 174.11L148.75 175.02L147.09 175.02L147.09 174.11ZM147.09 175.71L148.75 175.71L148.75 176.63L147.09 176.63L147.09 175.71ZM146.55 182.13C144.99 182.10 143.80 181.88 143.02 181.45C142.82 181.33 142.64 181.18 142.46 180.99C143.01 179.93 143.32 178.64 143.36 177.12L143.36 176.63L141.56 176.63C142.11 175.85 142.69 174.94 143.26 173.88L143.26 173.20L140.44 173.20L140.44 173.98L142.33 173.98C141.78 174.97 141.16 175.89 140.49 176.74L140.49 177.39L142.62 177.39C142.55 178.48 142.32 179.44 141.93 180.25C141.63 179.75 141.35 179.08 141.12 178.26L140.43 178.52C140.71 179.50 141.08 180.32 141.52 180.97C141.16 181.49 140.71 181.95 140.17 182.34L140.71 183.05C141.24 182.64 141.70 182.17 142.06 181.63C142.18 181.75 142.31 181.85 142.46 181.97C143.35 182.56 144.84 182.86 146.91 182.86L150.31 182.86L150.45 182.07C149.11 182.10 147.81 182.13 146.55 182.13ZM155.66 173.79L155.66 182.00L156.60 182.00L156.60 178.64L159.00 178.64C160.89 178.64 161.84 177.83 161.84 176.20C161.84 174.59 160.90 173.79 159.02 173.79L155.66 173.79ZM156.60 174.61L158.96 174.61C159.61 174.61 160.10 174.73 160.42 175.01C160.74 175.25 160.90 175.65 160.90 176.20C160.90 176.76 160.74 177.16 160.43 177.42C160.11 177.69 159.62 177.83 158.96 177.83L156.60 177.83L156.60 174.61ZM163.04 173.79L163.04 182.00L163.98 182.00L163.98 178.47L166.47 178.47C166.98 178.47 167.38 178.56 167.65 178.77C167.95 178.98 168.12 179.33 168.17 179.81L168.27 180.91C168.31 181.37 168.42 181.72 168.61 182.00L169.63 182.00C169.39 181.70 169.24 181.30 169.19 180.79L169.07 179.53C168.97 178.70 168.54 178.21 167.76 178.03L167.76 178.01C168.23 177.89 168.59 177.66 168.87 177.30C169.12 176.94 169.25 176.54 169.25 176.08C169.25 175.32 169.00 174.74 168.51 174.35C168.04 173.97 167.40 173.79 166.58 173.79L163.04 173.79ZM163.98 174.61L166.47 174.61C167.10 174.61 167.57 174.73 167.87 174.99C168.15 175.23 168.30 175.61 168.30 176.11C168.30 176.59 168.15 176.96 167.86 177.23C167.54 177.50 167.07 177.65 166.47 177.65L163.98 177.65L163.98 174.61Z" fill="#515F7B"/>
+<rect x="48" y="207" width="174" height="24" rx="6" fill="#EEF1FF"/>
+<path d="M63.17 214.99C62.01 214.99 61.09 215.39 60.41 216.20C59.76 216.96 59.44 217.93 59.44 219.11C59.44 220.27 59.76 221.23 60.41 221.97C61.10 222.76 62.07 223.15 63.32 223.15C64.00 223.15 64.63 223.07 65.20 222.89C65.74 222.71 66.22 222.47 66.62 222.15L66.62 218.85L63.26 218.85L63.26 219.88L65.42 219.88L65.42 221.58C65.16 221.75 64.87 221.88 64.54 221.97C64.20 222.05 63.84 222.11 63.45 222.11C62.48 222.11 61.75 221.83 61.29 221.28C60.85 220.78 60.64 220.05 60.64 219.11C60.64 218.14 60.87 217.38 61.35 216.83C61.80 216.30 62.41 216.05 63.17 216.05C63.78 216.05 64.29 216.18 64.67 216.46C65.04 216.72 65.28 217.12 65.39 217.64L66.60 217.64C66.46 216.76 66.11 216.11 65.55 215.67C64.96 215.21 64.17 214.99 63.17 214.99ZM68.78 215.04C68.55 215.04 68.36 215.10 68.21 215.26C68.05 215.40 67.98 215.59 67.98 215.82C67.98 216.04 68.05 216.24 68.21 216.39C68.36 216.53 68.55 216.61 68.78 216.61C69.00 216.61 69.20 216.53 69.35 216.39C69.50 216.24 69.59 216.05 69.59 215.82C69.59 215.59 69.52 215.40 69.36 215.26C69.21 215.10 69.01 215.04 68.78 215.04ZM68.20 217.31L68.20 223.00L69.36 223.00L69.36 217.31L68.20 217.31ZM72.66 215.48L71.50 215.96L71.50 217.31L70.44 217.31L70.44 218.28L71.50 218.28L71.50 221.58C71.50 222.03 71.59 222.37 71.82 222.62C72.04 222.87 72.40 223.00 72.88 223.00L73.82 223.00L73.82 222.03L73.07 222.03C72.93 222.03 72.83 221.99 72.76 221.92C72.70 221.84 72.66 221.74 72.66 221.58L72.66 218.28L73.96 218.28L73.96 217.31L72.66 217.31L72.66 215.48ZM75.00 215.15L75.00 223.00L76.20 223.00L76.20 219.48L80.32 219.48L80.32 223.00L81.52 223.00L81.52 215.15L80.32 215.15L80.32 218.46L76.20 218.46L76.20 215.15L75.00 215.15ZM82.95 217.31L82.95 220.85C82.95 222.38 83.63 223.15 85.00 223.15C85.72 223.15 86.31 222.85 86.80 222.23L86.80 223.00L87.96 223.00L87.96 217.31L86.80 217.31L86.80 220.79C86.70 221.21 86.51 221.55 86.25 221.80C85.98 222.04 85.71 222.18 85.40 222.18C84.95 222.18 84.62 222.05 84.42 221.83C84.21 221.61 84.11 221.26 84.11 220.78L84.11 217.31L82.95 217.31ZM89.29 214.99L89.29 223.00L90.38 223.00L90.38 222.32C90.78 222.87 91.36 223.15 92.14 223.15C92.98 223.15 93.63 222.86 94.11 222.26C94.55 221.71 94.77 221.00 94.77 220.13C94.77 219.29 94.55 218.60 94.12 218.05C93.65 217.46 93.01 217.16 92.20 217.16C91.49 217.16 90.92 217.49 90.46 218.16L90.46 214.99L89.29 214.99ZM91.93 218.10C92.51 218.10 92.94 218.29 93.21 218.69C93.45 219.02 93.57 219.50 93.57 220.13C93.57 220.76 93.45 221.24 93.23 221.59C92.96 222.00 92.54 222.21 91.97 222.21C91.46 222.21 91.06 222.00 90.79 221.60C90.55 221.24 90.43 220.78 90.43 220.21L90.43 220.11C90.43 219.49 90.57 219.00 90.88 218.62C91.14 218.27 91.49 218.10 91.93 218.10ZM99.64 215.15L99.64 223.00L100.84 223.00L100.84 219.94L102.88 219.94C104.76 219.94 105.71 219.14 105.71 217.53C105.71 215.94 104.77 215.15 102.90 215.15L99.64 215.15ZM100.84 216.17L102.80 216.17C103.39 216.17 103.81 216.28 104.09 216.50C104.36 216.70 104.51 217.05 104.51 217.53C104.51 218.02 104.36 218.37 104.10 218.59C103.83 218.81 103.40 218.92 102.80 218.92L100.84 218.92L100.84 216.17ZM106.82 215.15L106.82 223.00L108.02 223.00L108.02 219.75L110.14 219.75C110.59 219.75 110.93 219.84 111.17 220.04C111.40 220.24 111.55 220.55 111.59 220.99L111.69 221.97C111.73 222.41 111.84 222.76 112.03 223.00L113.33 223.00C113.06 222.71 112.91 222.33 112.87 221.84L112.73 220.59C112.65 219.82 112.26 219.36 111.56 219.21L111.56 219.18C111.99 219.07 112.33 218.84 112.58 218.49C112.80 218.17 112.91 217.81 112.91 217.39C112.91 216.64 112.67 216.08 112.19 215.69C111.72 215.32 111.08 215.15 110.29 215.15L106.82 215.15ZM108.02 216.17L110.13 216.17C110.68 216.17 111.07 216.27 111.34 216.48C111.58 216.68 111.71 216.99 111.71 217.43C111.71 217.85 111.58 218.17 111.33 218.39C111.06 218.61 110.67 218.73 110.14 218.73L108.02 218.73L108.02 216.17ZM118.16 216.90L118.02 217.74L119.15 217.74L118.72 220.40L117.74 220.40L117.60 221.25L118.59 221.25L118.31 223.00L119.27 223.00L119.54 221.25L121.01 221.25L120.73 223.00L121.69 223.00L121.96 221.25L123.09 221.25L123.23 220.40L122.10 220.40L122.53 217.74L123.50 217.74L123.65 216.90L122.66 216.90L122.93 215.15L121.99 215.15L121.70 216.90L120.24 216.90L120.51 215.15L119.57 215.15L119.28 216.90L118.16 216.90ZM119.68 220.40L120.11 217.74L121.57 217.74L121.14 220.40L119.68 220.40ZM128.01 215.15L124.14 220.16L124.14 221.29L127.97 221.29L127.97 223.00L129.11 223.00L129.11 221.29L130.30 221.29L130.30 220.34L129.11 220.34L129.11 215.15L128.01 215.15ZM127.94 216.66L127.97 216.66L127.97 220.34L125.12 220.34L127.94 216.66ZM133.94 214.99C133.11 214.99 132.42 215.27 131.92 215.84C131.42 216.37 131.17 217.07 131.16 217.95L132.36 217.95C132.38 217.31 132.51 216.84 132.78 216.51C133.03 216.17 133.40 216.00 133.90 216.00C134.36 216.00 134.72 216.11 134.97 216.33C135.21 216.55 135.33 216.88 135.33 217.32C135.33 217.79 135.14 218.22 134.79 218.61C134.57 218.84 134.20 219.14 133.67 219.51C132.78 220.13 132.18 220.60 131.90 220.94C131.37 221.54 131.12 222.22 131.12 223.00L136.53 223.00L136.53 221.94L132.60 221.94C132.77 221.51 133.27 221.02 134.12 220.46C134.90 219.93 135.44 219.51 135.75 219.19C136.25 218.63 136.52 218.02 136.52 217.34C136.52 216.64 136.27 216.08 135.80 215.64C135.32 215.20 134.69 214.99 133.94 214.99Z" fill="#4D6BDE"/>
+<path d="M189.35 219.36L189.35 215.36L181.95 215.36L181.95 216.06L188.62 216.06L188.62 218.67L183.07 218.67L183.07 217.19L182.35 217.19L182.35 222.44C182.35 223.26 182.75 223.68 183.56 223.68L188.98 223.68C189.40 223.66 189.73 223.55 189.95 223.34C190.19 223.08 190.36 222.34 190.46 221.10L189.76 220.88C189.70 221.98 189.57 222.62 189.37 222.80C189.22 222.92 189.02 222.98 188.78 222.98L183.76 222.98C183.30 222.98 183.07 222.75 183.07 222.31L183.07 219.36L189.35 219.36ZM194.10 214.87L193.44 215.19C193.85 215.69 194.23 216.26 194.59 216.90L195.24 216.57C194.88 215.95 194.50 215.39 194.10 214.87ZM197.86 214.78C197.56 215.62 197.23 216.33 196.85 216.91L192.28 216.91L192.28 217.61L195.63 217.61L195.63 218.08C195.62 218.57 195.57 219.03 195.48 219.47L191.71 219.47L191.71 220.17L195.30 220.17C195.16 220.61 194.97 221.00 194.73 221.36C194.13 222.16 193.06 222.81 191.53 223.30L191.92 223.93C193.46 223.44 194.57 222.75 195.25 221.87C195.57 221.44 195.82 220.94 196.01 220.37C196.55 221.89 197.91 223.10 200.11 223.99L200.53 223.32C198.43 222.57 197.14 221.52 196.65 220.17L200.29 220.17L200.29 219.47L196.23 219.47C196.31 219.05 196.35 218.58 196.37 218.08L196.37 217.61L199.71 217.61L199.71 216.91L197.65 216.91C198.01 216.34 198.31 215.69 198.55 214.97L197.86 214.78ZM205.60 217.01L205.60 217.69L207.56 217.69L207.56 218.15C207.55 218.59 207.52 219.01 207.48 219.41L205.45 219.41L205.45 220.10L207.38 220.10C207.07 221.66 206.35 222.78 205.23 223.46L205.66 224.03C206.80 223.29 207.57 222.15 207.96 220.61C208.25 221.72 208.97 222.85 210.12 223.99L210.62 223.46C209.38 222.32 208.64 221.20 208.40 220.10L210.47 220.10L210.47 219.41L208.17 219.41C208.22 218.96 208.25 218.49 208.25 217.99L208.25 217.69L210.30 217.69L210.30 217.01L208.81 217.01C209.13 216.49 209.43 215.86 209.73 215.10L209.07 214.85C208.80 215.62 208.47 216.34 208.09 217.01L205.60 217.01ZM206.59 214.91L206.04 215.26C206.44 215.84 206.75 216.36 206.98 216.84L207.52 216.47C207.30 216.02 206.99 215.50 206.59 214.91ZM201.46 215.24L201.46 215.91L202.07 215.91L202.07 222.04L201.44 222.14L201.62 222.82C202.48 222.66 203.30 222.47 204.10 222.27L204.10 224.05L204.79 224.05L204.79 222.08C205.01 222.02 205.24 221.95 205.46 221.88L205.46 221.18C205.24 221.25 205.02 221.32 204.79 221.40L204.79 215.91L205.44 215.91L205.44 215.24L201.46 215.24ZM202.76 221.91L202.76 220.12L204.10 220.12L204.10 221.60C203.66 221.71 203.22 221.81 202.76 221.91ZM202.76 219.46L202.76 218.03L204.10 218.03L204.10 219.46L202.76 219.46ZM202.76 217.38L202.76 215.91L204.10 215.91L204.10 217.38L202.76 217.38Z" fill="#6678B6"/>
+<path d="M52.40 246.18L52.40 250.41L54.54 250.41L54.54 252.91C53.76 252.99 52.91 253.05 51.99 253.10L52.11 253.87C54.20 253.69 55.82 253.47 56.99 253.21C57.06 253.49 57.13 253.79 57.21 254.10L57.90 253.92C57.62 252.77 57.29 251.75 56.94 250.86L56.32 251.07C56.49 251.54 56.66 252.03 56.81 252.54C56.35 252.63 55.84 252.73 55.30 252.81L55.30 250.41L57.45 250.41L57.45 246.18L55.29 246.18L55.29 244.46L54.53 244.46L54.53 246.18L52.40 246.18ZM56.72 249.70L55.29 249.70L55.29 246.88L56.72 246.88L56.72 249.70ZM54.55 249.70L53.15 249.70L53.15 246.88L54.55 246.88L54.55 249.70ZM51.64 244.57C51.31 245.09 50.95 245.56 50.56 245.98C50.27 245.53 49.91 245.09 49.48 244.66L48.89 245.12C49.35 245.52 49.73 245.98 50.04 246.47C49.60 246.85 49.10 247.17 48.57 247.44L48.98 248.09C49.50 247.77 49.96 247.45 50.37 247.13C50.41 247.20 50.45 247.29 50.49 247.38C50.59 247.68 50.68 248.01 50.75 248.40C50.23 249.29 49.49 250.06 48.55 250.69L48.97 251.32C49.70 250.81 50.34 250.16 50.88 249.40C50.90 249.77 50.92 250.18 50.93 250.62C50.93 251.99 50.79 252.81 50.53 253.08C50.40 253.20 50.17 253.26 49.82 253.26C49.56 253.26 49.29 253.24 49.01 253.22L49.23 253.92C49.42 253.92 49.67 253.93 49.98 253.93C50.43 253.93 50.76 253.84 51.01 253.66C51.43 253.33 51.64 252.32 51.64 250.66C51.61 249.10 51.44 247.91 51.14 247.07C51.08 246.92 51.01 246.77 50.94 246.63C51.38 246.20 51.82 245.64 52.26 244.96L51.64 244.57ZM59.37 246.11L59.37 246.85L68.16 246.85L68.16 246.11L64.22 246.11C64.06 245.48 63.91 244.91 63.74 244.42L62.87 244.57C63.06 245.03 63.24 245.54 63.40 246.11L59.37 246.11ZM59.01 252.71L59.01 253.44L68.52 253.44L68.52 252.71L65.08 252.71C65.73 251.24 66.27 249.56 66.70 247.67L65.90 247.46C65.42 249.56 64.86 251.31 64.22 252.71L59.01 252.71ZM61.63 247.50L60.84 247.76C61.32 249.24 61.73 250.78 62.05 252.38L62.86 252.18C62.50 250.42 62.09 248.86 61.63 247.50ZM73.87 245.95L73.87 252.60L69.57 252.60L69.57 253.33L78.94 253.33L78.94 252.60L74.65 252.60L74.65 245.95L78.26 245.95L78.26 245.23L70.27 245.23L70.27 245.95L73.87 245.95ZM84.58 246.65L85.15 246.65L85.15 254.06L85.92 254.06L85.92 251.61L89.04 251.61L89.04 250.89L85.92 250.89L85.92 249.12L88.98 249.12L88.98 248.38L85.92 248.38L85.92 246.65L89.44 246.65L89.44 245.90L84.91 245.90C85.08 245.47 85.24 245.01 85.41 244.53L84.66 244.36C84.07 246.13 83.30 247.57 82.38 248.66L82.91 249.30C83.54 248.55 84.10 247.67 84.58 246.65ZM81.22 248.16L81.22 254.06L82.00 254.06L82.00 247.03C82.42 246.31 82.78 245.54 83.06 244.73L82.35 244.39C81.83 245.99 81.00 247.39 79.87 248.62L80.12 249.42C80.52 249.02 80.89 248.60 81.22 248.16ZM90.63 246.37L90.63 247.08L91.87 247.08C91.56 248.43 91.06 249.64 90.35 250.71L90.67 251.55C91.18 250.69 91.58 249.72 91.89 248.67L91.89 254.03L92.62 254.03L92.62 248.50C92.90 248.98 93.21 249.61 93.59 250.39L94.00 249.78C93.54 249.02 93.08 248.35 92.62 247.76L92.62 247.08L93.63 247.08L93.63 246.37L92.62 246.37L92.62 244.40L91.89 244.40L91.89 246.37L90.63 246.37ZM96.68 246.38L96.68 247.11L98.57 247.11L98.57 252.77C98.57 253.16 98.41 253.36 98.11 253.36C97.79 253.36 97.45 253.34 97.11 253.30L97.26 254.02L98.36 254.02C98.98 254.02 99.29 253.66 99.29 252.96L99.29 247.11L100.07 247.11L100.07 246.38L99.29 246.38L99.29 244.40L98.57 244.40L98.57 246.38L96.68 246.38ZM97.11 248.44L96.51 248.71C96.87 249.30 97.20 249.99 97.50 250.76L98.12 250.45C97.82 249.71 97.49 249.05 97.11 248.44ZM94.07 247.28L93.60 247.74C94.09 248.49 94.55 249.22 94.96 249.93C94.56 251.09 93.97 252.10 93.20 252.96L93.62 253.60C94.36 252.75 94.95 251.78 95.39 250.71C95.78 251.43 96.12 252.12 96.42 252.80L96.97 252.24C96.59 251.45 96.16 250.65 95.69 249.84C96.05 248.68 96.25 247.41 96.29 246.03L96.29 245.48L93.90 245.48L93.90 246.21L95.63 246.21C95.58 247.21 95.44 248.16 95.22 249.04C94.86 248.45 94.47 247.87 94.07 247.28ZM106.62 248.45C106.41 248.45 106.23 248.53 106.09 248.67C105.93 248.82 105.86 249.01 105.86 249.22C105.86 249.43 105.93 249.61 106.09 249.76C106.23 249.90 106.41 249.98 106.62 249.98C106.83 249.98 107.01 249.90 107.16 249.76C107.30 249.61 107.39 249.43 107.39 249.22C107.39 249.01 107.30 248.82 107.16 248.67C107.01 248.53 106.83 248.45 106.62 248.45ZM115.57 245.50C115.11 245.50 114.75 245.63 114.51 245.89C114.28 246.14 114.16 246.49 114.16 246.95L114.16 247.57L112.80 247.57L112.80 248.28L114.16 248.28L114.16 253.00L115.00 253.00L115.00 248.28L117.48 248.28L117.48 253.00L118.31 253.00L118.31 247.57L115.00 247.57L115.00 246.97C115.00 246.71 115.05 246.52 115.16 246.41C115.26 246.28 115.44 246.23 115.67 246.23L116.61 246.23L116.61 245.50L115.57 245.50ZM119.41 247.57L121.33 250.12L119.18 253.00L120.18 253.00L121.80 250.74L123.42 253.00L124.42 253.00L122.27 250.12L124.19 247.57L123.20 247.57L121.80 249.50L120.40 247.57L119.41 247.57ZM125.00 249.92L125.00 250.64L130.30 250.64L130.30 249.92L125.00 249.92ZM131.64 245.36L131.64 253.00L132.47 253.00L132.47 245.36L131.64 245.36ZM136.37 247.42C135.55 247.42 134.91 247.70 134.43 248.26C133.96 248.80 133.73 249.47 133.73 250.29C133.73 251.10 133.96 251.77 134.43 252.30C134.91 252.86 135.55 253.15 136.37 253.15C137.18 253.15 137.83 252.86 138.32 252.30C138.77 251.77 139.00 251.10 139.00 250.29C139.00 249.47 138.77 248.80 138.31 248.26C137.83 247.70 137.18 247.42 136.37 247.42ZM136.37 248.13C136.93 248.13 137.39 248.35 137.72 248.79C138.01 249.19 138.15 249.68 138.15 250.29C138.15 250.88 138.01 251.38 137.72 251.78C137.39 252.22 136.93 252.44 136.37 252.44C135.79 252.44 135.34 252.22 135.02 251.78C134.73 251.38 134.59 250.89 134.59 250.29C134.59 249.68 134.73 249.19 135.02 248.79C135.34 248.35 135.79 248.13 136.37 248.13ZM142.33 247.42C141.58 247.42 140.98 247.69 140.54 248.22C140.10 248.73 139.89 249.37 139.89 250.16C139.89 250.95 140.10 251.59 140.54 252.10C140.98 252.61 141.58 252.87 142.33 252.87C143.15 252.87 143.76 252.51 144.16 251.78L144.16 252.74C144.16 253.93 143.61 254.54 142.52 254.54C142.03 254.54 141.66 254.45 141.42 254.27C141.18 254.10 141.02 253.83 140.96 253.46L140.12 253.46C140.21 254.05 140.45 254.49 140.84 254.78C141.22 255.08 141.79 255.23 142.52 255.23C144.17 255.23 145.00 254.35 145.00 252.62L145.00 247.57L144.16 247.57L144.16 248.51C143.76 247.78 143.15 247.42 142.33 247.42ZM142.46 248.12C142.99 248.12 143.41 248.31 143.73 248.71C144.02 249.06 144.17 249.56 144.17 250.16C144.17 250.75 144.02 251.24 143.73 251.60C143.41 251.98 142.99 252.17 142.45 252.17C141.86 252.17 141.43 251.96 141.13 251.56C140.87 251.20 140.75 250.73 140.75 250.16C140.75 249.56 140.89 249.06 141.19 248.71C141.49 248.31 141.91 248.12 142.46 248.12ZM146.99 245.52C146.82 245.52 146.67 245.58 146.54 245.70C146.42 245.81 146.36 245.95 146.36 246.14C146.36 246.32 146.42 246.47 146.54 246.59C146.67 246.71 146.82 246.77 146.99 246.77C147.17 246.77 147.32 246.71 147.45 246.59C147.57 246.47 147.63 246.32 147.63 246.14C147.63 245.95 147.57 245.81 147.45 245.70C147.32 245.58 147.17 245.52 146.99 245.52ZM146.57 247.57L146.57 253.00L147.41 253.00L147.41 247.57L146.57 247.57ZM151.53 247.42C151.17 247.42 150.85 247.51 150.55 247.68C150.26 247.83 150.02 248.06 149.83 248.37L149.83 247.57L148.99 247.57L148.99 253.00L149.83 253.00L149.83 249.72C149.86 249.23 150.02 248.84 150.31 248.55C150.59 248.28 150.91 248.14 151.29 248.14C152.23 248.14 152.72 248.66 152.72 249.72L152.72 253.00L153.56 253.00L153.56 249.66C153.56 248.17 152.87 247.42 151.53 247.42Z" fill="#66738B"/>
+<path d="M238 219h24m-5-4 5 4-5 4" fill="none" stroke="#9CA9CC" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+<rect x="266" y="100" width="342" height="168" rx="12" fill="#FFFFFF" stroke="#DFE4EF"/>
+<path d="M286.93 114.54C285.56 114.54 284.47 115.00 283.66 115.97C282.90 116.86 282.52 118.01 282.52 119.40C282.52 120.78 282.90 121.91 283.66 122.78C284.48 123.71 285.63 124.18 287.11 124.18C287.92 124.18 288.66 124.08 289.33 123.87C289.97 123.66 290.53 123.38 291.01 123.00L291.01 119.10L287.03 119.10L287.03 120.31L289.59 120.31L289.59 122.32C289.28 122.52 288.94 122.67 288.55 122.78C288.15 122.88 287.72 122.95 287.26 122.95C286.11 122.95 285.25 122.62 284.70 121.97C284.18 121.37 283.94 120.52 283.94 119.40C283.94 118.25 284.21 117.36 284.78 116.71C285.31 116.08 286.03 115.78 286.93 115.78C287.65 115.78 288.25 115.94 288.69 116.27C289.14 116.58 289.42 117.05 289.55 117.67L290.98 117.67C290.81 116.63 290.40 115.86 289.74 115.34C289.05 114.80 288.11 114.54 286.93 114.54ZM293.56 114.59C293.28 114.59 293.06 114.67 292.88 114.85C292.70 115.02 292.61 115.24 292.61 115.51C292.61 115.77 292.70 116.00 292.88 116.19C293.06 116.36 293.28 116.45 293.56 116.45C293.82 116.45 294.05 116.36 294.23 116.19C294.42 116.00 294.52 115.78 294.52 115.51C294.52 115.24 294.43 115.02 294.25 114.85C294.06 114.67 293.83 114.59 293.56 114.59ZM292.87 117.28L292.87 124.00L294.25 124.00L294.25 117.28L292.87 117.28ZM298.15 115.11L296.77 115.68L296.77 117.28L295.52 117.28L295.52 118.42L296.77 118.42L296.77 122.32C296.77 122.86 296.88 123.26 297.14 123.55C297.40 123.84 297.83 124.00 298.41 124.00L299.51 124.00L299.51 122.86L298.63 122.86C298.46 122.86 298.34 122.80 298.26 122.73C298.19 122.64 298.15 122.50 298.15 122.32L298.15 118.42L299.68 118.42L299.68 117.28L298.15 117.28L298.15 115.11ZM300.92 114.72L300.92 124.00L302.33 124.00L302.33 119.84L307.19 119.84L307.19 124.00L308.61 124.00L308.61 114.72L307.19 114.72L307.19 118.63L302.33 118.63L302.33 114.72L300.92 114.72ZM310.30 117.28L310.30 121.47C310.30 123.27 311.11 124.18 312.73 124.18C313.58 124.18 314.28 123.82 314.85 123.09L314.85 124.00L316.23 124.00L316.23 117.28L314.85 117.28L314.85 121.39C314.73 121.88 314.51 122.28 314.20 122.58C313.89 122.87 313.56 123.03 313.20 123.03C312.67 123.03 312.28 122.88 312.04 122.62C311.80 122.36 311.68 121.95 311.68 121.37L311.68 117.28L310.30 117.28ZM317.80 114.54L317.80 124.00L319.09 124.00L319.09 123.19C319.56 123.84 320.25 124.18 321.17 124.18C322.16 124.18 322.92 123.83 323.50 123.13C324.02 122.48 324.28 121.63 324.28 120.61C324.28 119.62 324.02 118.80 323.51 118.15C322.95 117.45 322.20 117.10 321.23 117.10C320.40 117.10 319.73 117.49 319.18 118.28L319.18 114.54L317.80 114.54ZM320.92 118.22C321.60 118.22 322.11 118.44 322.43 118.90C322.72 119.29 322.86 119.87 322.86 120.61C322.86 121.35 322.72 121.92 322.46 122.34C322.13 122.82 321.64 123.06 320.96 123.06C320.36 123.06 319.89 122.82 319.57 122.35C319.28 121.92 319.14 121.37 319.14 120.70L319.14 120.58C319.14 119.85 319.31 119.27 319.67 118.83C319.99 118.41 320.40 118.22 320.92 118.22ZM330.04 114.72L330.04 124.00L331.45 124.00L331.45 120.39L333.86 120.39C336.08 120.39 337.20 119.44 337.20 117.54C337.20 115.65 336.09 114.72 333.88 114.72L330.04 114.72ZM331.45 115.93L333.77 115.93C334.45 115.93 334.96 116.06 335.29 116.32C335.61 116.55 335.78 116.97 335.78 117.54C335.78 118.11 335.61 118.53 335.30 118.79C334.98 119.05 334.47 119.18 333.77 119.18L331.45 119.18L331.45 115.93ZM338.51 114.72L338.51 124.00L339.93 124.00L339.93 120.17L342.44 120.17C342.97 120.17 343.37 120.27 343.66 120.50C343.93 120.74 344.10 121.10 344.15 121.62L344.27 122.78C344.32 123.30 344.45 123.71 344.67 124.00L346.21 124.00C345.89 123.66 345.71 123.21 345.66 122.64L345.50 121.15C345.40 120.24 344.95 119.70 344.11 119.52L344.11 119.49C344.62 119.36 345.02 119.09 345.32 118.67C345.58 118.29 345.71 117.86 345.71 117.37C345.71 116.49 345.43 115.82 344.86 115.36C344.31 114.93 343.56 114.72 342.62 114.72L338.51 114.72ZM339.93 115.93L342.42 115.93C343.07 115.93 343.54 116.04 343.85 116.29C344.14 116.53 344.30 116.90 344.30 117.42C344.30 117.92 344.14 118.29 343.84 118.55C343.53 118.81 343.06 118.96 342.44 118.96L339.93 118.96L339.93 115.93ZM351.91 116.78L351.75 117.79L353.08 117.79L352.58 120.93L351.42 120.93L351.25 121.93L352.42 121.93L352.10 124.00L353.23 124.00L353.55 121.93L355.28 121.93L354.96 124.00L356.09 124.00L356.41 121.93L357.74 121.93L357.91 120.93L356.57 120.93L357.07 117.79L358.23 117.79L358.40 116.78L357.23 116.78L357.56 114.72L356.44 114.72L356.10 116.78L354.37 116.78L354.70 114.72L353.58 114.72L353.24 116.78L351.91 116.78ZM353.71 120.93L354.21 117.79L355.94 117.79L355.44 120.93L353.71 120.93ZM363.56 114.72L358.99 120.65L358.99 121.98L363.51 121.98L363.51 124.00L364.86 124.00L364.86 121.98L366.27 121.98L366.27 120.85L364.86 120.85L364.86 114.72L363.56 114.72ZM363.47 116.51L363.51 116.51L363.51 120.85L360.14 120.85L363.47 116.51ZM370.57 114.54C369.58 114.54 368.77 114.86 368.18 115.54C367.59 116.16 367.29 116.99 367.28 118.03L368.70 118.03C368.72 117.28 368.88 116.72 369.19 116.33C369.49 115.93 369.93 115.73 370.52 115.73C371.06 115.73 371.49 115.86 371.78 116.12C372.06 116.38 372.21 116.77 372.21 117.29C372.21 117.84 371.99 118.34 371.57 118.81C371.31 119.09 370.87 119.44 370.24 119.88C369.19 120.61 368.49 121.17 368.15 121.57C367.53 122.27 367.23 123.08 367.23 124.00L373.62 124.00L373.62 122.75L368.98 122.75C369.18 122.25 369.78 121.66 370.78 121.00C371.70 120.37 372.34 119.88 372.70 119.50C373.30 118.84 373.61 118.11 373.61 117.31C373.61 116.49 373.32 115.82 372.77 115.30C372.19 114.78 371.45 114.54 370.57 114.54Z" fill="#253047"/>
+<path d="M579 124l10-10m-8 0h8v8" fill="none" stroke="#7A859E" stroke-width="1.3" stroke-linecap="round" stroke-linejoin="round"/>
+<path d="M288.95 136.16C288.59 137.17 287.92 138.02 286.93 138.72L287.42 139.36C287.71 139.15 287.98 138.93 288.23 138.69C288.52 139.15 288.92 139.58 289.43 139.96C288.71 140.30 287.86 140.59 286.88 140.82L287.21 141.60C288.37 141.31 289.37 140.94 290.21 140.48C290.99 140.91 291.96 141.27 293.12 141.56L293.46 140.76C292.54 140.54 291.73 140.28 291.04 139.96C291.84 139.39 292.44 138.70 292.84 137.91L292.84 137.17L289.40 137.17C289.55 136.88 289.68 136.58 289.79 136.27L288.95 136.16ZM288.77 138.12C288.80 138.07 288.84 138.01 288.89 137.96L291.90 137.96C291.49 138.56 290.94 139.08 290.22 139.53C289.58 139.12 289.10 138.66 288.77 138.12ZM285.02 136.18C284.48 138.04 283.62 139.69 282.43 141.13L282.68 141.99C283.13 141.51 283.54 141.00 283.91 140.46L283.91 147.21L284.74 147.21L284.74 139.09C285.16 138.30 285.50 137.44 285.79 136.54L285.02 136.18ZM285.80 138.31L285.80 145.10L286.58 145.10L286.58 138.31L285.80 138.31ZM290.60 141.26C290.20 141.57 289.76 141.85 289.28 142.09C288.73 142.34 288.12 142.54 287.45 142.71L287.87 143.40C288.68 143.13 289.34 142.87 289.85 142.60C290.32 142.35 290.77 142.04 291.23 141.66L290.60 141.26ZM291.74 142.15C290.86 143.20 289.52 143.97 287.75 144.44L288.10 145.17C289.96 144.64 291.36 143.79 292.32 142.59L291.74 142.15ZM287.62 147.28C288.77 146.97 289.88 146.50 290.96 145.90C292.04 145.28 292.85 144.55 293.38 143.72L292.76 143.26C292.16 144.06 291.43 144.70 290.58 145.20C289.73 145.70 288.62 146.13 287.26 146.49L287.62 147.28ZM297.34 137.84L304.75 137.84L304.75 137.08L297.73 137.08C297.85 136.81 297.96 136.52 298.06 136.23L297.20 136.09C296.76 137.43 295.92 138.56 294.68 139.50L295.20 140.17C295.73 139.77 296.18 139.34 296.59 138.87L296.59 142.46L298.13 142.46C297.48 143.32 296.47 144.03 295.09 144.58L295.54 145.32C296.16 145.03 296.72 144.70 297.22 144.37C297.86 144.93 298.60 145.41 299.41 145.81C298.18 146.17 296.69 146.38 294.95 146.46L295.30 147.21C297.31 147.09 299.02 146.78 300.43 146.25C301.80 146.78 303.37 147.08 305.12 147.16L305.33 146.37C303.91 146.32 302.62 146.13 301.46 145.80C302.45 145.29 303.24 144.67 303.84 143.90L303.84 143.28L298.46 143.28C298.68 143.01 298.88 142.75 299.06 142.46L303.82 142.46L303.82 138.67L296.76 138.67C296.96 138.40 297.16 138.13 297.34 137.84ZM300.44 145.46C299.47 145.08 298.61 144.58 297.84 143.98L302.77 143.98C302.18 144.57 301.40 145.06 300.44 145.46ZM302.98 141.76L297.44 141.76L297.44 140.88L302.98 140.88L302.98 141.76ZM297.44 140.23L297.44 139.35L302.98 139.35L302.98 140.23L297.44 140.23ZM308.69 141.25L308.69 144.16L315.36 144.16L315.36 141.25L308.69 141.25ZM314.50 143.40L309.55 143.40L309.55 142.00L314.50 142.00L314.50 143.40ZM309.76 144.43L308.94 144.73C309.35 145.14 309.68 145.57 309.97 146.02L306.85 146.02L306.85 146.85L317.12 146.85L317.12 146.02L314.17 146.02C314.48 145.62 314.77 145.16 315.04 144.64L314.22 144.37C313.94 144.94 313.62 145.50 313.25 146.02L310.87 146.02C310.54 145.40 310.16 144.87 309.76 144.43ZM307.84 137.84L307.26 138.39C307.90 138.84 308.44 139.27 308.88 139.69C308.21 140.18 307.43 140.61 306.54 140.97L307.06 141.64C308.23 141.15 309.22 140.55 310.01 139.83L310.01 140.24L314.39 140.24L314.39 139.74C315.14 140.44 316.04 141.08 317.09 141.64L317.65 140.98C316.92 140.62 316.26 140.20 315.66 139.75C316.22 139.34 316.72 138.86 317.12 138.33L316.52 137.79C316.12 138.32 315.62 138.80 315.04 139.23C314.71 138.94 314.41 138.64 314.15 138.32C314.71 137.92 315.20 137.47 315.62 136.95L315.01 136.41C314.64 136.89 314.20 137.32 313.67 137.71C313.34 137.25 313.07 136.77 312.85 136.27L312.14 136.66C312.60 137.67 313.25 138.61 314.09 139.45L310.39 139.45C310.99 138.81 311.46 138.09 311.80 137.30L311.80 136.65L307.81 136.65L307.81 137.44L310.81 137.44C310.48 138.07 310.03 138.66 309.48 139.18C309.02 138.74 308.48 138.30 307.84 137.84ZM320.06 136.65L320.06 137.43L326.11 137.43L326.11 138.63L320.47 138.63L320.47 139.39L326.11 139.39L326.11 140.55L318.86 140.55L318.86 141.33L323.50 141.33L323.50 142.83C322.16 144.06 320.58 145.10 318.73 145.98L319.08 146.78C320.78 145.87 322.26 144.86 323.50 143.73L323.50 145.93C323.50 146.28 323.36 146.46 323.12 146.46C322.72 146.46 322.30 146.43 321.85 146.40L322.03 147.21L323.41 147.21C324.04 147.21 324.36 146.85 324.36 146.13L324.36 143.66C325.44 144.91 326.90 145.96 328.75 146.83L329.18 146.06C327.91 145.51 326.81 144.86 325.87 144.13C326.74 143.67 327.49 143.01 328.16 142.15L327.50 141.60C326.88 142.48 326.14 143.17 325.28 143.65C324.95 143.35 324.65 143.04 324.36 142.70L324.36 141.33L329.15 141.33L329.15 140.55L326.99 140.55L326.99 136.65L320.06 136.65ZM320.16 141.79L319.58 142.34C320.38 142.88 320.99 143.40 321.44 143.88L322.00 143.31C321.50 142.81 320.89 142.29 320.16 141.79ZM331.85 139.72L331.85 143.71L335.56 143.71L335.56 144.54L331.30 144.54L331.30 145.23L335.56 145.23L335.56 146.13L330.70 146.13L330.70 146.89L341.30 146.89L341.30 146.13L336.42 146.13L336.42 145.23L340.72 145.23L340.72 144.54L336.42 144.54L336.42 143.71L340.14 143.71L340.14 139.72L336.42 139.72L336.42 138.96L341.14 138.96L341.14 138.21L336.42 138.21L336.42 137.30C337.75 137.22 339.00 137.12 340.15 137.00L339.89 136.28C337.50 136.54 334.74 136.72 331.62 136.82L331.76 137.53C333.08 137.48 334.34 137.42 335.56 137.35L335.56 138.21L330.86 138.21L330.86 138.96L335.56 138.96L335.56 139.72L331.85 139.72ZM339.30 143.01L336.42 143.01L336.42 142.04L339.30 142.04L339.30 143.01ZM335.56 143.01L332.68 143.01L332.68 142.04L335.56 142.04L335.56 143.01ZM332.68 141.37L332.68 140.42L335.56 140.42L335.56 141.37L332.68 141.37ZM336.42 140.42L339.30 140.42L339.30 141.37L336.42 141.37L336.42 140.42ZM347.64 141.88L347.64 145.30C347.26 145.38 346.86 145.44 346.46 145.48L346.68 146.30C347.88 146.10 349.01 145.84 350.05 145.54L350.05 144.74C349.55 144.88 349.02 145.02 348.49 145.14L348.49 141.88L349.62 141.88L349.62 141.08L346.51 141.08L346.51 141.88L347.64 141.88ZM352.19 147.02C352.74 147.02 353.21 146.16 353.60 144.43L352.92 143.88C352.68 145.30 352.43 146.04 352.19 146.08C351.83 146.04 351.52 145.34 351.25 143.97C351.06 142.84 350.93 141.26 350.87 139.20L353.24 139.20L353.24 138.36L350.86 138.36C350.83 137.67 350.83 136.94 350.83 136.16L349.99 136.16C349.99 136.93 349.99 137.66 350.02 138.36L346.24 138.36L346.24 139.20L350.04 139.20C350.09 140.77 350.17 142.09 350.30 143.14C350.47 144.39 350.74 145.36 351.10 146.08C351.41 146.71 351.78 147.02 352.19 147.02ZM351.86 136.15L351.25 136.52C351.76 137.10 352.16 137.61 352.46 138.08L353.06 137.66C352.78 137.23 352.38 136.72 351.86 136.15ZM343.94 136.32L343.34 136.90C344.16 137.55 344.81 138.18 345.29 138.76L345.88 138.16C345.35 137.54 344.71 136.93 343.94 136.32ZM342.50 139.87L342.50 140.70L344.18 140.70L344.18 145.51C344.18 145.69 344.09 145.86 343.92 146.00L344.26 146.77C345.00 146.22 345.70 145.58 346.36 144.86L346.13 143.95C345.74 144.37 345.38 144.75 345.02 145.10L345.02 139.87L342.50 139.87Z" fill="#515F7B"/>
+<circle cx="287" cy="164" r="5" fill="#EAF5EF"/><path d="M284.5 164l1.8 1.8 3.2-3.6" fill="none" stroke="#428466" stroke-width="1.2" stroke-linecap="round" stroke-linejoin="round"/><circle cx="420" cy="164" r="3" fill="#B99752"/>
+<path d="M299.63 161.48L299.63 162.20L300.92 162.20C300.61 163.58 300.07 164.80 299.34 165.87L299.66 166.70C300.19 165.84 300.61 164.89 300.94 163.84L300.94 169.00L301.69 169.00L301.69 163.49C301.93 163.86 302.21 164.36 302.55 164.96L302.98 164.31C302.54 163.73 302.11 163.20 301.69 162.74L301.69 162.20L302.77 162.20L302.77 161.48L301.69 161.48L301.69 159.43L300.94 159.43L300.94 161.48L299.63 161.48ZM304.31 162.49L304.31 163.16L307.50 163.16L307.50 162.52C307.86 162.89 308.27 163.23 308.72 163.56L309.13 162.92C307.76 161.92 306.79 160.77 306.22 159.44L305.53 159.44C304.86 160.88 303.89 162.05 302.65 162.94L303.06 163.58C303.50 163.26 303.91 162.91 304.31 162.49ZM307.45 162.47L304.33 162.47C304.90 161.84 305.42 161.08 305.88 160.19C306.27 161.03 306.79 161.78 307.45 162.47ZM302.90 168.00L302.90 168.74L308.91 168.74L308.91 168.00L307.27 168.00C307.71 166.84 308.09 165.53 308.39 164.05L307.66 163.86C307.34 165.50 306.96 166.88 306.53 168.00L302.90 168.00ZM304.07 164.15L303.42 164.37C303.71 165.33 303.97 166.33 304.18 167.38L304.84 167.20C304.62 166.05 304.37 165.03 304.07 164.15ZM305.69 163.77L305.04 163.98C305.31 164.90 305.54 165.87 305.72 166.88L306.41 166.70C306.20 165.60 305.96 164.62 305.69 163.77ZM311.63 163.36L311.63 167.22L317.91 167.22L317.91 163.36L311.63 163.36ZM317.18 166.55L312.37 166.55L312.37 165.63L317.18 165.63L317.18 166.55ZM312.37 164.99L312.37 164.03L317.18 164.03L317.18 164.99L312.37 164.99ZM310.46 160.37L310.46 161.06L313.70 161.06C312.88 161.79 311.63 162.41 309.95 162.90L310.35 163.57C312.19 162.91 313.52 162.07 314.34 161.06L314.40 161.06L314.40 163.02L315.14 163.02L315.14 161.06L315.20 161.06C315.98 162.09 317.31 162.92 319.20 163.56L319.53 162.88C317.87 162.44 316.65 161.83 315.86 161.06L319.09 161.06L319.09 160.37L315.14 160.37L315.14 159.40L314.40 159.40L314.40 160.37L310.46 160.37ZM310.25 168.04L310.25 168.75L319.26 168.75L319.26 168.04L310.25 168.04ZM321.32 159.59L320.81 160.08C321.57 160.67 322.17 161.23 322.61 161.75L323.15 161.23C322.66 160.68 322.05 160.14 321.32 159.59ZM327.47 168.86L329.85 168.86L330.03 168.10C329.75 168.13 329.37 168.14 328.86 168.15C328.35 168.16 327.84 168.17 327.36 168.17C326.53 168.17 325.84 168.16 325.28 168.15C324.65 168.13 324.18 168.04 323.84 167.90C323.55 167.76 323.28 167.54 323.02 167.23C322.93 167.13 322.85 167.06 322.76 166.99L322.76 163.06L320.57 163.06L320.57 163.76L322.06 163.76L322.06 166.95C321.63 167.14 321.13 167.67 320.58 168.56L321.14 169.07C321.72 168.10 322.14 167.62 322.39 167.62C322.52 167.62 322.66 167.71 322.80 167.88C323.13 168.26 323.51 168.53 323.93 168.65C324.35 168.77 324.90 168.83 325.59 168.84C326.26 168.85 326.89 168.86 327.47 168.86ZM325.59 160.60L325.12 161.05C325.64 161.32 326.10 161.61 326.50 161.89L323.87 161.89L323.87 167.47L324.59 167.47L324.59 165.64L326.34 165.64L326.34 167.44L327.05 167.44L327.05 165.64L328.81 165.64L328.81 166.43C328.81 166.66 328.68 166.78 328.43 166.78L327.60 166.75L327.77 167.39L328.64 167.39C329.23 167.39 329.52 167.12 329.52 166.58L329.52 161.89L327.44 161.89L327.28 161.75C328.01 161.35 328.69 160.88 329.32 160.34L329.32 159.79L323.64 159.79L323.64 160.43L328.31 160.43C327.84 160.79 327.34 161.10 326.79 161.38C326.44 161.12 326.03 160.86 325.59 160.60ZM324.59 164.09L326.34 164.09L326.34 165.02L324.59 165.02L324.59 164.09ZM327.05 164.09L328.81 164.09L328.81 165.02L327.05 165.02L327.05 164.09ZM328.81 163.46L327.05 163.46L327.05 162.52L328.81 162.52L328.81 163.46ZM326.34 163.46L324.59 163.46L324.59 162.52L326.34 162.52L326.34 163.46ZM331.79 159.57L331.27 160.06C332.02 160.67 332.61 161.25 333.04 161.78L333.59 161.23C333.10 160.68 332.51 160.12 331.79 159.57ZM338.18 168.86L340.39 168.86L340.58 168.09C340.33 168.12 339.96 168.13 339.49 168.14C339.00 168.14 338.54 168.15 338.08 168.15C337.22 168.15 336.50 168.14 335.92 168.13C335.27 168.10 334.76 168.03 334.43 167.90C334.12 167.75 333.84 167.53 333.57 167.23C333.47 167.13 333.38 167.06 333.29 166.99L333.29 163.05L331.06 163.05L331.06 163.77L332.57 163.77L332.57 166.95C332.13 167.14 331.63 167.69 331.07 168.59L331.63 169.09C332.22 168.10 332.65 167.62 332.90 167.62C333.04 167.62 333.19 167.71 333.33 167.88C333.67 168.26 334.06 168.53 334.50 168.65C334.93 168.77 335.51 168.83 336.22 168.84C336.93 168.85 337.58 168.86 338.18 168.86ZM337.86 167.45C338.49 167.45 338.82 167.14 338.82 166.53L338.82 161.89L340.37 161.89L340.37 161.14L338.82 161.14L338.82 159.44L338.05 159.44L338.05 161.14L334.08 161.14L334.08 161.89L338.05 161.89L338.05 166.35C338.05 166.63 337.89 166.78 337.60 166.78C337.16 166.78 336.68 166.76 336.20 166.73L336.37 167.45L337.86 167.45ZM335.23 162.82L334.64 163.20C335.28 163.97 335.78 164.66 336.16 165.29L336.77 164.87C336.41 164.28 335.90 163.60 335.23 162.82Z" fill="#397359"/>
+<path d="M433.74 162.52L433.74 163.18L436.87 163.18L436.87 164.20L432.58 164.20L432.58 164.86L439.13 164.86L439.13 165.87L433.20 165.87L433.20 166.53L439.13 166.53L439.13 168.00C439.13 168.25 438.98 168.39 438.69 168.39C438.25 168.39 437.77 168.37 437.27 168.34L437.43 169.05L438.95 169.05C439.57 169.05 439.89 168.76 439.89 168.18L439.89 166.53L441.46 166.53L441.46 165.87L439.89 165.87L439.89 164.86L441.91 164.86L441.91 164.20L437.63 164.20L437.63 163.18L440.71 163.18L440.71 162.52L437.63 162.52L437.63 161.86L436.87 161.86L436.87 162.52L433.74 162.52ZM434.97 166.82L434.36 167.20C434.91 167.75 435.35 168.24 435.68 168.69L436.26 168.28C435.97 167.86 435.54 167.37 434.97 166.82ZM434.12 160.83L434.54 160.83C434.83 161.24 435.10 161.66 435.31 162.10L435.99 161.85C435.82 161.53 435.60 161.20 435.33 160.83L437.10 160.83L437.10 160.19L434.42 160.19C434.50 159.98 434.57 159.76 434.66 159.53L433.94 159.37C433.66 160.23 433.21 161.03 432.60 161.75L433.25 162.16C433.57 161.76 433.87 161.31 434.12 160.83ZM438.38 160.80L439.00 160.80C439.32 161.21 439.58 161.63 439.80 162.07L440.45 161.83C440.30 161.51 440.07 161.16 439.79 160.80L441.69 160.80L441.69 160.16L438.67 160.16C438.74 159.95 438.81 159.73 438.88 159.51L438.16 159.36C437.95 160.09 437.63 160.75 437.17 161.36L437.80 161.76C438.01 161.47 438.21 161.15 438.38 160.80ZM445.09 159.36C444.63 160.36 443.91 161.24 442.90 162.01L443.12 162.74C444.34 161.85 445.21 160.82 445.75 159.66L445.09 159.36ZM445.48 161.77C444.96 162.95 444.13 164.00 442.99 164.91L443.21 165.64C443.67 165.29 444.09 164.92 444.46 164.52L444.46 169.00L445.19 169.00L445.19 163.68C445.57 163.18 445.88 162.65 446.13 162.08L445.48 161.77ZM449.02 159.40L449.02 160.54L446.68 160.54L446.68 161.23L449.02 161.23L449.02 162.54L446.28 162.54L446.28 163.23L452.54 163.23L452.54 162.54L449.75 162.54L449.75 161.23L452.11 161.23L452.11 160.54L449.75 160.54L449.75 159.40L449.02 159.40ZM446.33 164.51L446.33 165.22L450.41 165.22L450.41 167.73C450.41 168.08 450.23 168.27 449.88 168.27C449.44 168.27 448.97 168.25 448.49 168.22L448.65 168.94L450.14 168.94C450.82 168.94 451.16 168.60 451.16 167.92L451.16 165.22L452.39 165.22L452.39 164.51L451.16 164.51L451.16 163.74L450.41 163.74L450.41 164.51L446.33 164.51ZM447.57 165.63L446.98 165.99C447.55 166.58 448.00 167.13 448.34 167.61L448.93 167.19C448.61 166.75 448.16 166.23 447.57 165.63ZM457.08 159.90L457.08 160.62L459.55 160.62L459.55 164.58L456.79 164.58L456.79 165.30L459.55 165.30L459.55 169.05L460.29 169.05L460.29 165.30L463.09 165.30L463.09 164.58L460.29 164.58L460.29 160.62L462.78 160.62L462.78 159.90L457.08 159.90ZM461.82 161.14C461.59 162.20 461.32 163.09 461.00 163.78L461.64 164.00C461.98 163.23 462.26 162.34 462.48 161.32L461.82 161.14ZM457.89 161.21L457.24 161.42C457.59 162.25 457.87 163.12 458.08 164.02L458.73 163.85C458.48 162.85 458.21 161.97 457.89 161.21ZM454.70 159.53L454.18 160.04C454.93 160.61 455.54 161.15 455.98 161.67L456.50 161.14C456.01 160.60 455.42 160.06 454.70 159.53ZM453.44 162.63L453.44 163.36L454.98 163.36L454.98 167.55C454.98 167.72 454.90 167.86 454.74 168.01L455.04 168.68C455.73 168.21 456.38 167.67 457.00 167.07L456.79 166.27C456.40 166.66 456.05 166.99 455.71 167.29L455.71 162.63L453.44 162.63ZM466.07 165.05L468.40 165.05L468.40 166.26L466.07 166.26L466.07 165.05ZM468.40 166.95L468.40 169.08L469.16 169.08L469.16 166.95L471.52 166.95L471.52 167.54L472.26 167.54L472.26 162.48L469.16 162.48L469.16 161.43L468.40 161.43L468.40 162.48L465.34 162.48L465.34 167.57L466.07 167.57L466.07 166.95L468.40 166.95ZM469.16 166.26L469.16 165.05L471.52 165.05L471.52 166.26L469.16 166.26ZM471.52 164.38L469.16 164.38L469.16 163.17L471.52 163.17L471.52 164.38ZM468.40 163.17L468.40 164.38L466.07 164.38L466.07 163.17L468.40 163.17ZM473.11 160.22L469.13 160.22C469.02 159.88 468.93 159.59 468.82 159.33L468.03 159.46C468.14 159.69 468.25 159.95 468.35 160.22L464.35 160.22L464.35 162.11L465.09 162.11L465.09 160.90L472.37 160.90L472.37 162.06L473.11 162.06L473.11 160.22Z" fill="#8C754B"/>
+<path d="M266 181H608" stroke="#E6EAF2"/>
+<path d="M282.78 189.72L282.78 197.00L283.57 197.00L283.57 189.72L282.78 189.72ZM287.28 191.69C286.50 191.69 285.89 191.95 285.43 192.49C284.99 193.00 284.77 193.64 284.77 194.42C284.77 195.19 284.99 195.83 285.43 196.33C285.89 196.87 286.50 197.14 287.28 197.14C288.05 197.14 288.67 196.87 289.14 196.33C289.57 195.83 289.79 195.19 289.79 194.42C289.79 193.64 289.57 193.00 289.13 192.49C288.67 191.95 288.05 191.69 287.28 191.69ZM287.28 192.36C287.82 192.36 288.25 192.57 288.57 192.99C288.84 193.37 288.98 193.84 288.98 194.42C288.98 194.98 288.84 195.46 288.57 195.84C288.25 196.26 287.82 196.47 287.28 196.47C286.73 196.47 286.30 196.26 286.00 195.84C285.72 195.46 285.59 194.99 285.59 194.42C285.59 193.84 285.72 193.37 286.00 192.99C286.30 192.57 286.73 192.36 287.28 192.36ZM292.96 191.69C292.24 191.69 291.67 191.94 291.25 192.45C290.83 192.93 290.63 193.54 290.63 194.30C290.63 195.05 290.83 195.66 291.25 196.14C291.67 196.63 292.24 196.88 292.96 196.88C293.74 196.88 294.32 196.53 294.70 195.84L294.70 196.75C294.70 197.89 294.18 198.47 293.14 198.47C292.67 198.47 292.32 198.38 292.09 198.21C291.86 198.05 291.71 197.79 291.65 197.44L290.85 197.44C290.94 198.00 291.17 198.42 291.54 198.70C291.90 198.98 292.44 199.12 293.14 199.12C294.71 199.12 295.50 198.29 295.50 196.64L295.50 191.83L294.70 191.83L294.70 192.72C294.32 192.03 293.74 191.69 292.96 191.69ZM293.08 192.35C293.59 192.35 293.99 192.53 294.29 192.91C294.57 193.25 294.71 193.72 294.71 194.30C294.71 194.86 294.57 195.32 294.29 195.67C293.99 196.03 293.59 196.21 293.07 196.21C292.51 196.21 292.10 196.01 291.82 195.63C291.57 195.29 291.45 194.84 291.45 194.30C291.45 193.72 291.59 193.25 291.87 192.91C292.16 192.53 292.56 192.35 293.08 192.35ZM297.40 189.88C297.23 189.88 297.09 189.93 296.97 190.05C296.85 190.15 296.80 190.29 296.80 190.47C296.80 190.64 296.85 190.78 296.97 190.90C297.09 191.01 297.23 191.07 297.40 191.07C297.57 191.07 297.71 191.01 297.83 190.90C297.95 190.78 298.01 190.64 298.01 190.47C298.01 190.29 297.95 190.15 297.83 190.05C297.71 189.93 297.57 189.88 297.40 189.88ZM297.00 191.83L297.00 197.00L297.80 197.00L297.80 191.83L297.00 191.83ZM301.72 191.69C301.38 191.69 301.07 191.77 300.79 191.93C300.51 192.08 300.28 192.30 300.10 192.59L300.10 191.83L299.30 191.83L299.30 197.00L300.10 197.00L300.10 193.88C300.13 193.41 300.28 193.04 300.56 192.76C300.82 192.50 301.13 192.37 301.49 192.37C302.39 192.37 302.85 192.87 302.85 193.88L302.85 197.00L303.65 197.00L303.65 193.82C303.65 192.40 303.00 191.69 301.72 191.69ZM305.59 195.81C305.41 195.81 305.27 195.87 305.16 195.99C305.04 196.11 304.98 196.25 304.98 196.43C304.98 196.60 305.04 196.74 305.16 196.86C305.27 196.98 305.41 197.04 305.59 197.04C305.75 197.04 305.90 196.98 306.02 196.86C306.14 196.74 306.20 196.60 306.20 196.43C306.20 196.25 306.14 196.11 306.02 195.99C305.90 195.87 305.75 195.81 305.59 195.81ZM308.91 190.16L308.12 190.49L308.12 191.83L307.08 191.83L307.08 192.50L308.12 192.50L308.12 195.79C308.12 196.18 308.20 196.47 308.37 196.67C308.55 196.89 308.86 197.00 309.28 197.00L310.06 197.00L310.06 196.33L309.40 196.33C309.22 196.33 309.09 196.28 309.02 196.20C308.94 196.12 308.91 195.98 308.91 195.79L308.91 192.50L310.19 192.50L310.19 191.83L308.91 191.83L308.91 190.16ZM312.91 191.69C312.33 191.69 311.85 191.82 311.49 192.08C311.10 192.34 310.91 192.68 310.91 193.12C310.91 193.56 311.10 193.89 311.50 194.13C311.74 194.29 312.17 194.44 312.78 194.59C313.34 194.73 313.71 194.84 313.88 194.92C314.20 195.08 314.37 195.30 314.37 195.59C314.37 196.17 313.90 196.47 312.98 196.47C312.54 196.47 312.21 196.39 311.99 196.23C311.77 196.05 311.62 195.76 311.56 195.35L310.78 195.35C310.90 196.54 311.64 197.14 313.00 197.14C314.46 197.14 315.19 196.60 315.19 195.54C315.19 195.09 314.98 194.74 314.57 194.48C314.30 194.31 313.86 194.15 313.24 194.00C312.72 193.86 312.36 193.75 312.17 193.66C311.87 193.51 311.73 193.32 311.73 193.10C311.73 192.87 311.84 192.69 312.06 192.56C312.26 192.42 312.54 192.36 312.90 192.36C313.31 192.36 313.63 192.44 313.85 192.60C314.05 192.74 314.18 192.98 314.25 193.30L315.03 193.30C314.89 192.22 314.19 191.69 312.91 191.69Z" fill="#7A859E"/>
+<rect x="278" y="204" width="318" height="20" fill="#FCF0F0"/><rect x="278" y="224" width="318" height="20" fill="#EAF5EF"/>
+<path d="M288.47 214.10L294.15 214.10L294.15 215.01L288.47 215.01ZM307.45 213.23Q307.13 212.98 306.80 212.87Q306.48 212.75 306.08 212.75Q305.16 212.75 304.67 213.33Q304.18 213.91 304.18 215.01L304.18 218.00L303.19 218.00L303.19 211.98L304.18 211.98L304.18 213.16Q304.43 212.52 304.94 212.18Q305.46 211.84 306.16 211.84Q306.52 211.84 306.84 211.93Q307.16 212.02 307.45 212.22ZM313.88 214.50L313.88 214.98L309.60 214.98L309.60 215.01Q309.56 216.24 310.07 216.78Q310.59 217.32 311.52 217.32Q311.99 217.32 312.51 217.17Q313.02 217.02 313.61 216.71L313.61 217.69Q313.05 217.92 312.52 218.04Q312.00 218.16 311.51 218.16Q310.11 218.16 309.32 217.32Q308.53 216.47 308.53 215.00Q308.53 213.56 309.30 212.70Q310.08 211.84 311.36 211.84Q312.51 211.84 313.18 212.62Q313.84 213.40 313.88 214.50ZM312.90 214.21Q312.83 213.58 312.44 213.13Q312.05 212.68 311.32 212.68Q310.61 212.68 310.15 213.15Q309.68 213.62 309.64 214.21ZM317.79 210.28L317.79 211.98L320.03 211.98L320.03 212.75L317.79 212.75L317.79 216.02Q317.79 216.68 318.04 216.95Q318.29 217.21 318.92 217.21L320.03 217.21L320.03 218.00L318.82 218.00Q317.71 218.00 317.26 217.55Q316.80 217.11 316.80 216.02L316.80 212.75L315.19 212.75L315.19 211.98L316.80 211.98L316.80 210.28ZM327.32 213.23Q327.00 212.98 326.67 212.87Q326.34 212.75 325.95 212.75Q325.03 212.75 324.54 213.33Q324.05 213.91 324.05 215.01L324.05 218.00L323.06 218.00L323.06 211.98L324.05 211.98L324.05 213.16Q324.30 212.52 324.81 212.18Q325.32 211.84 326.03 211.84Q326.39 211.84 326.71 211.93Q327.03 212.02 327.32 212.22ZM329.43 212.01L331.96 212.01L331.96 217.23L333.92 217.23L333.92 218.00L329.01 218.00L329.01 217.23L330.97 217.23L330.97 212.77L329.43 212.77ZM330.97 209.67L331.96 209.67L331.96 210.92L330.97 210.92ZM340.37 214.50L340.37 214.98L336.09 214.98L336.09 215.01Q336.05 216.24 336.56 216.78Q337.08 217.32 338.01 217.32Q338.48 217.32 339.00 217.17Q339.51 217.02 340.10 216.71L340.10 217.69Q339.54 217.92 339.01 218.04Q338.49 218.16 338.00 218.16Q336.60 218.16 335.81 217.32Q335.02 216.47 335.02 215.00Q335.02 213.56 335.79 212.70Q336.57 211.84 337.85 211.84Q339.00 211.84 339.67 212.62Q340.33 213.40 340.37 214.50ZM339.39 214.21Q339.32 213.58 338.93 213.13Q338.54 212.68 337.81 212.68Q337.10 212.68 336.64 213.15Q336.17 213.62 336.13 214.21ZM346.21 212.19L346.21 213.16Q345.78 212.91 345.35 212.79Q344.92 212.67 344.48 212.67Q343.81 212.67 343.48 212.88Q343.15 213.10 343.15 213.55Q343.15 213.95 343.39 214.15Q343.64 214.35 344.62 214.54L345.02 214.61Q345.76 214.75 346.13 215.17Q346.51 215.59 346.51 216.26Q346.51 217.15 345.88 217.65Q345.25 218.16 344.12 218.16Q343.67 218.16 343.18 218.06Q342.69 217.97 342.12 217.78L342.12 216.76Q342.68 217.04 343.18 217.19Q343.69 217.33 344.14 217.33Q344.79 217.33 345.15 217.06Q345.51 216.80 345.51 216.32Q345.51 215.63 344.20 215.37L344.15 215.36L343.78 215.28Q342.93 215.12 342.54 214.72Q342.15 214.33 342.15 213.64Q342.15 212.78 342.73 212.31Q343.32 211.84 344.40 211.84Q344.89 211.84 345.33 211.93Q345.78 212.02 346.21 212.19ZM354.70 215.31L360.38 215.31L360.38 216.22L354.70 216.22ZM354.70 212.78L360.38 212.78L360.38 213.69L354.70 213.69ZM370.78 209.86Q372.06 209.86 372.72 210.91Q373.38 211.96 373.38 214.01Q373.38 216.06 372.72 217.11Q372.06 218.16 370.78 218.16Q369.50 218.16 368.84 217.11Q368.19 216.06 368.19 214.01Q368.19 211.96 368.84 210.91Q369.50 209.86 370.78 209.86ZM370.78 217.30Q371.54 217.30 371.92 216.49Q372.29 215.67 372.29 214.01Q372.29 213.12 372.18 212.41L369.62 216.41Q370.03 217.30 370.78 217.30ZM370.78 210.72Q370.02 210.72 369.65 211.53Q369.28 212.34 369.28 214.01Q369.28 214.77 369.38 215.43L371.88 211.44Q371.47 210.72 370.78 210.72ZM376.47 216.06L378.14 216.06L378.14 217.48L377.08 219.54L375.94 219.54L376.47 217.48ZM376.40 211.99L378.07 211.99L378.07 213.93L376.40 213.93Z" fill="#8F5F66"/>
+<path d="M291.87 231.67L291.87 234.05L294.26 234.05L294.26 234.96L291.87 234.96L291.87 237.34L290.96 237.34L290.96 234.96L288.58 234.96L288.58 234.05L290.96 234.05L290.96 231.67ZM307.45 233.23Q307.13 232.98 306.80 232.87Q306.48 232.75 306.08 232.75Q305.16 232.75 304.67 233.33Q304.18 233.91 304.18 235.01L304.18 238.00L303.19 238.00L303.19 231.98L304.18 231.98L304.18 233.16Q304.43 232.52 304.94 232.18Q305.46 231.84 306.16 231.84Q306.52 231.84 306.84 231.93Q307.16 232.02 307.45 232.22ZM313.88 234.50L313.88 234.98L309.60 234.98L309.60 235.01Q309.56 236.24 310.07 236.78Q310.59 237.32 311.52 237.32Q311.99 237.32 312.51 237.17Q313.02 237.02 313.61 236.71L313.61 237.69Q313.05 237.92 312.52 238.04Q312.00 238.16 311.51 238.16Q310.11 238.16 309.32 237.32Q308.53 236.47 308.53 235.00Q308.53 233.56 309.30 232.70Q310.08 231.84 311.36 231.84Q312.51 231.84 313.18 232.62Q313.84 233.40 313.88 234.50ZM312.90 234.21Q312.83 233.58 312.44 233.13Q312.05 232.68 311.32 232.68Q310.61 232.68 310.15 233.15Q309.68 233.62 309.64 234.21ZM317.79 230.28L317.79 231.98L320.03 231.98L320.03 232.75L317.79 232.75L317.79 236.02Q317.79 236.68 318.04 236.95Q318.29 237.21 318.92 237.21L320.03 237.21L320.03 238.00L318.82 238.00Q317.71 238.00 317.26 237.55Q316.80 237.11 316.80 236.02L316.80 232.75L315.19 232.75L315.19 231.98L316.80 231.98L316.80 230.28ZM327.32 233.23Q327.00 232.98 326.67 232.87Q326.34 232.75 325.95 232.75Q325.03 232.75 324.54 233.33Q324.05 233.91 324.05 235.01L324.05 238.00L323.06 238.00L323.06 231.98L324.05 231.98L324.05 233.16Q324.30 232.52 324.81 232.18Q325.32 231.84 326.03 231.84Q326.39 231.84 326.71 231.93Q327.03 232.02 327.32 232.22ZM329.43 232.01L331.96 232.01L331.96 237.23L333.92 237.23L333.92 238.00L329.01 238.00L329.01 237.23L330.97 237.23L330.97 232.77L329.43 232.77ZM330.97 229.67L331.96 229.67L331.96 230.92L330.97 230.92ZM340.37 234.50L340.37 234.98L336.09 234.98L336.09 235.01Q336.05 236.24 336.56 236.78Q337.08 237.32 338.01 237.32Q338.48 237.32 339.00 237.17Q339.51 237.02 340.10 236.71L340.10 237.69Q339.54 237.92 339.01 238.04Q338.49 238.16 338.00 238.16Q336.60 238.16 335.81 237.32Q335.02 236.47 335.02 235.00Q335.02 233.56 335.79 232.70Q336.57 231.84 337.85 231.84Q339.00 231.84 339.67 232.62Q340.33 233.40 340.37 234.50ZM339.39 234.21Q339.32 233.58 338.93 233.13Q338.54 232.68 337.81 232.68Q337.10 232.68 336.64 233.15Q336.17 233.62 336.13 234.21ZM346.21 232.19L346.21 233.16Q345.78 232.91 345.35 232.79Q344.92 232.67 344.48 232.67Q343.81 232.67 343.48 232.88Q343.15 233.10 343.15 233.55Q343.15 233.95 343.39 234.15Q343.64 234.35 344.62 234.54L345.02 234.61Q345.76 234.75 346.13 235.17Q346.51 235.59 346.51 236.26Q346.51 237.15 345.88 237.65Q345.25 238.16 344.12 238.16Q343.67 238.16 343.18 238.06Q342.69 237.97 342.12 237.78L342.12 236.76Q342.68 237.04 343.18 237.19Q343.69 237.33 344.14 237.33Q344.79 237.33 345.15 237.06Q345.51 236.80 345.51 236.32Q345.51 235.63 344.20 235.37L344.15 235.36L343.78 235.28Q342.93 235.12 342.54 234.72Q342.15 234.33 342.15 233.64Q342.15 232.78 342.73 232.31Q343.32 231.84 344.40 231.84Q344.89 231.84 345.33 231.93Q345.78 232.02 346.21 232.19ZM354.70 235.31L360.38 235.31L360.38 236.22L354.70 236.22ZM354.70 232.78L360.38 232.78L360.38 233.69L354.70 233.69ZM371.64 233.71Q372.43 233.92 372.85 234.45Q373.27 234.99 373.27 235.79Q373.27 236.89 372.52 237.52Q371.78 238.16 370.46 238.16Q369.91 238.16 369.33 238.05Q368.76 237.95 368.21 237.76L368.21 236.68Q368.75 236.96 369.29 237.10Q369.82 237.24 370.34 237.24Q371.24 237.24 371.71 236.84Q372.19 236.44 372.19 235.68Q372.19 234.98 371.71 234.57Q371.24 234.16 370.42 234.16L369.59 234.16L369.59 233.27L370.42 233.27Q371.17 233.27 371.58 232.94Q372.00 232.61 372.00 232.03Q372.00 231.41 371.61 231.08Q371.23 230.75 370.51 230.75Q370.03 230.75 369.52 230.86Q369.01 230.96 368.45 231.18L368.45 230.18Q369.10 230.01 369.61 229.92Q370.11 229.84 370.51 229.84Q371.68 229.84 372.38 230.42Q373.08 231.01 373.08 231.98Q373.08 232.65 372.71 233.09Q372.34 233.53 371.64 233.71ZM376.47 236.06L378.14 236.06L378.14 237.48L377.08 239.54L375.94 239.54L376.47 237.48ZM376.40 231.99L378.07 231.99L378.07 233.93L376.40 233.93Z" fill="#397359"/>
+<path d="M284.03 254.58L284.03 258.26L290.01 258.26L290.01 254.58L284.03 254.58ZM289.31 257.62L284.73 257.62L284.73 256.74L289.31 256.74L289.31 257.62ZM284.73 256.13L284.73 255.22L289.31 255.22L289.31 256.13L284.73 256.13ZM282.91 251.73L282.91 252.39L286.00 252.39C285.22 253.09 284.03 253.68 282.43 254.14L282.81 254.78C284.56 254.15 285.83 253.35 286.61 252.39L286.67 252.39L286.67 254.26L287.37 254.26L287.37 252.39L287.43 252.39C288.17 253.37 289.44 254.16 291.24 254.77L291.55 254.12C289.97 253.70 288.81 253.12 288.06 252.39L291.13 252.39L291.13 251.73L287.37 251.73L287.37 250.81L286.67 250.81L286.67 251.73L282.91 251.73ZM282.71 259.04L282.71 259.71L291.30 259.71L291.30 259.04L282.71 259.04ZM293.22 252.67L293.22 253.29L296.06 253.29C295.93 253.51 295.78 253.74 295.62 253.97L292.68 253.97L292.68 254.61L295.12 254.61C294.41 255.45 293.51 256.23 292.42 256.97L292.81 257.59C293.43 257.17 293.99 256.72 294.50 256.26L294.50 260.01L295.19 260.01L295.19 259.58L299.71 259.58L299.71 260.01L300.40 260.01L300.40 255.30L295.44 255.30C295.63 255.08 295.81 254.85 295.99 254.61L301.40 254.61L301.40 253.97L296.43 253.97C296.56 253.75 296.69 253.53 296.81 253.29L300.82 253.29L300.82 252.67L297.10 252.67C297.20 252.42 297.30 252.16 297.39 251.89C298.65 251.79 299.75 251.64 300.70 251.43L300.37 250.86C298.50 251.24 296.15 251.43 293.31 251.43L293.52 252.03C294.66 252.03 295.72 252.00 296.70 251.94C296.60 252.18 296.50 252.43 296.39 252.67L293.22 252.67ZM295.19 257.12L299.71 257.12L299.71 257.75L295.19 257.75L295.19 257.12ZM299.71 256.56L295.19 256.56L295.19 255.89L299.71 255.89L299.71 256.56ZM295.19 258.31L299.71 258.31L299.71 258.99L295.19 258.99L295.19 258.31ZM311.11 253.22L307.86 253.63C307.80 252.82 307.77 251.88 307.77 250.81L307.03 250.81C307.04 251.91 307.08 252.88 307.15 253.72L304.93 254.01L305.04 254.70L307.21 254.42C307.28 255.16 307.38 255.77 307.51 256.27C307.79 257.39 308.21 258.30 308.78 259.00C309.30 259.63 309.81 259.95 310.30 259.95C310.57 259.94 310.80 259.79 310.98 259.50C311.20 259.10 311.37 258.49 311.50 257.67L310.87 257.31C310.73 258.57 310.53 259.21 310.26 259.22C309.92 259.21 309.55 258.94 309.16 258.40C308.73 257.82 308.40 257.02 308.16 255.98C308.06 255.52 307.98 254.97 307.92 254.33L311.22 253.91L311.11 253.22ZM303.68 254.39L303.68 260.02L304.42 260.02L304.42 253.26C304.81 252.59 305.13 251.87 305.39 251.11L304.72 250.79C304.22 252.35 303.43 253.74 302.33 254.95L302.56 255.70C302.96 255.28 303.34 254.85 303.68 254.39ZM308.86 250.88L308.40 251.33C309.04 251.88 309.55 252.40 309.91 252.89L310.41 252.40C309.99 251.90 309.47 251.39 308.86 250.88ZM315.78 254.34L313.94 254.34C314.20 253.64 314.39 252.89 314.53 252.09L316.04 252.09L316.04 251.39L312.63 251.39L312.63 252.09L313.85 252.09C313.61 253.58 313.11 254.91 312.35 256.07L312.71 256.65C312.95 256.31 313.17 255.96 313.37 255.60L313.37 259.67L314.04 259.67L314.04 258.91L315.12 258.91L315.12 259.48L315.78 259.48L315.78 254.34ZM314.04 258.26L314.04 255.00L315.12 255.00L315.12 258.26L314.04 258.26ZM317.13 252.63L316.59 255.87L320.63 255.87C320.63 257.47 320.55 258.44 320.39 258.78C320.24 259.10 319.78 259.27 319.01 259.27C318.83 259.27 318.52 259.25 318.08 259.21L318.28 259.91C318.60 259.93 318.90 259.94 319.18 259.94C320.06 259.94 320.63 259.75 320.91 259.39C321.17 259.01 321.31 257.62 321.31 255.20L320.25 255.20L320.80 251.25L316.50 251.25L316.50 251.93L320.02 251.93L319.52 255.20L317.40 255.20L317.84 252.68L317.13 252.63ZM316.28 257.14L316.28 257.82L319.94 257.82L319.94 257.14L316.28 257.14ZM323.05 251.94L323.05 252.61L326.69 252.61C326.64 252.90 326.58 253.19 326.52 253.48L323.63 253.48L323.63 254.15L326.33 254.15C326.23 254.44 326.12 254.72 325.99 255.00L322.76 255.00L322.76 255.68L325.64 255.68C325.60 255.75 325.55 255.82 325.51 255.90C324.81 256.96 323.76 257.88 322.36 258.64L322.84 259.26C323.80 258.68 324.60 258.04 325.25 257.35L327.21 257.35L327.21 258.96L323.90 258.96L323.90 259.66L331.32 259.66L331.32 258.96L327.94 258.96L327.94 257.35L330.70 257.35L330.70 256.65L325.84 256.65C325.92 256.54 326.00 256.43 326.08 256.31C326.20 256.11 326.31 255.90 326.43 255.68L331.33 255.68L331.33 255.00L326.74 255.00C326.85 254.73 326.95 254.45 327.05 254.15L330.46 254.15L330.46 253.48L327.24 253.48C327.31 253.20 327.37 252.91 327.43 252.61L330.99 252.61L330.99 251.94L329.01 251.94C329.22 251.60 329.38 251.24 329.49 250.85L328.74 250.75C328.64 251.16 328.48 251.56 328.27 251.94L325.95 251.94C325.79 251.51 325.62 251.13 325.44 250.79L324.70 250.91C324.89 251.22 325.07 251.56 325.23 251.94L323.05 251.94ZM339.99 251.22L333.55 251.22L333.55 254.49C333.55 255.09 333.87 255.40 334.51 255.40L340.25 255.40C340.67 255.39 340.96 255.24 341.10 254.94C341.19 254.74 341.26 254.42 341.30 253.96L340.65 253.75C340.61 254.17 340.56 254.44 340.49 254.55C340.41 254.67 340.26 254.74 340.05 254.75L334.77 254.75C334.43 254.75 334.26 254.58 334.26 254.24L334.26 253.57L339.99 253.57L339.99 251.22ZM334.26 252.92L334.26 251.87L339.29 251.87L339.29 252.92L334.26 252.92ZM332.44 256.89L332.44 257.54L334.94 257.54C334.74 258.45 334.11 259.06 333.05 259.36L333.43 259.98C334.65 259.56 335.39 258.74 335.64 257.54L338.36 257.54L338.36 259.94L339.08 259.94L339.08 257.54L341.58 257.54L341.58 256.89L339.08 256.89L339.08 255.79L338.36 255.79L338.36 256.89L335.73 256.89C335.74 256.66 335.75 256.29 335.75 255.78L335.03 255.78C335.03 256.25 335.02 256.62 335.01 256.89L332.44 256.89ZM347.83 254.67C347.63 254.67 347.46 254.74 347.32 254.88C347.17 255.02 347.10 255.20 347.10 255.40C347.10 255.60 347.17 255.77 347.32 255.91C347.46 256.05 347.63 256.12 347.83 256.12C348.03 256.12 348.20 256.05 348.34 255.91C348.48 255.77 348.56 255.60 348.56 255.40C348.56 255.20 348.48 255.02 348.34 254.88C348.20 254.74 348.03 254.67 347.83 254.67ZM356.96 251.23L356.96 251.90L359.11 251.90C359.03 252.34 358.92 252.76 358.76 253.16L356.50 253.16L356.50 253.85L358.44 253.85C358.40 253.91 358.36 253.97 358.32 254.04C357.84 254.76 357.13 255.39 356.18 255.91L356.63 256.48C357.63 255.87 358.39 255.18 358.90 254.41C359.00 254.23 359.10 254.05 359.20 253.85L360.16 253.85C360.71 254.89 361.65 255.74 362.98 256.39L363.29 255.76C362.21 255.30 361.41 254.66 360.89 253.85L362.99 253.85L362.99 253.16L359.48 253.16C359.62 252.77 359.73 252.35 359.83 251.90L362.55 251.90L362.55 251.23L356.96 251.23ZM357.57 256.51C357.21 257.49 356.78 258.33 356.29 259.04L356.88 259.46C357.37 258.71 357.80 257.82 358.17 256.80L357.57 256.51ZM354.83 250.98L354.33 251.46C355.00 251.92 355.53 252.36 355.91 252.77L356.40 252.28C355.98 251.84 355.45 251.41 354.83 250.98ZM354.59 253.37L354.10 253.85C354.78 254.37 355.31 254.87 355.70 255.33L356.19 254.84C355.76 254.35 355.23 253.86 354.59 253.37ZM355.50 256.13C355.11 257.33 354.65 258.51 354.13 259.65L354.80 259.95C355.28 258.83 355.73 257.64 356.13 256.38L355.50 256.13ZM358.88 260.01C359.38 260.01 359.63 259.72 359.63 259.15L359.63 255.32L358.94 255.32L358.94 258.98C358.94 259.24 358.83 259.38 358.63 259.38C358.37 259.38 358.09 259.36 357.80 259.33L357.95 260.01L358.88 260.01ZM361.97 256.27L361.34 256.48C361.78 257.32 362.18 258.30 362.55 259.40L363.19 259.12C362.85 258.11 362.44 257.16 361.97 256.27ZM360.65 256.63L360.04 256.84C360.43 257.68 360.78 258.64 361.10 259.74L361.74 259.45C361.43 258.45 361.07 257.51 360.65 256.63ZM372.77 252.32L369.50 252.32L369.50 259.85L370.19 259.85L370.19 259.18L372.07 259.18L372.07 259.85L372.77 259.85L372.77 252.32ZM370.19 258.49L370.19 253.01L372.07 253.01L372.07 258.49L370.19 258.49ZM365.82 250.86L365.82 252.88L364.22 252.88L364.22 253.58L365.82 253.58C365.79 256.32 365.19 258.32 364.03 259.57L364.56 260.04C365.84 258.68 366.50 256.53 366.54 253.58L367.87 253.58C367.85 256.26 367.81 257.87 367.75 258.39C367.67 258.96 367.37 259.25 366.86 259.25C366.62 259.25 366.34 259.23 366.02 259.21L366.20 259.87C366.56 259.89 366.81 259.91 366.96 259.91C367.84 259.91 368.33 259.49 368.43 258.67C368.53 257.93 368.58 256.00 368.58 252.88L366.54 252.88L366.54 250.86L365.82 250.86ZM377.55 251.29L377.55 251.97L379.90 251.97L379.90 255.74L377.27 255.74L377.27 256.43L379.90 256.43L379.90 260.00L380.60 260.00L380.60 256.43L383.27 256.43L383.27 255.74L380.60 255.74L380.60 251.97L382.97 251.97L382.97 251.29L377.55 251.29ZM382.06 252.47C381.84 253.48 381.58 254.32 381.28 254.98L381.89 255.19C382.21 254.46 382.48 253.61 382.69 252.64L382.06 252.47ZM378.32 252.53L377.70 252.73C378.03 253.52 378.30 254.35 378.50 255.21L379.12 255.05C378.88 254.10 378.62 253.26 378.32 252.53ZM375.28 250.93L374.78 251.42C375.50 251.96 376.08 252.48 376.50 252.97L376.99 252.47C376.53 251.95 375.96 251.44 375.28 250.93ZM374.08 253.89L374.08 254.58L375.55 254.58L375.55 258.57C375.55 258.73 375.47 258.87 375.32 259.01L375.60 259.65C376.26 259.20 376.88 258.69 377.47 258.11L377.27 257.35C376.90 257.72 376.56 258.04 376.24 258.32L376.24 253.89L374.08 253.89ZM386.11 256.19L388.33 256.19L388.33 257.34L386.11 257.34L386.11 256.19ZM388.33 258.00L388.33 260.03L389.05 260.03L389.05 258.00L391.30 258.00L391.30 258.56L392.00 258.56L392.00 253.74L389.05 253.74L389.05 252.74L388.33 252.74L388.33 253.74L385.41 253.74L385.41 258.59L386.11 258.59L386.11 258.00L388.33 258.00ZM389.05 257.34L389.05 256.19L391.30 256.19L391.30 257.34L389.05 257.34ZM391.30 255.55L389.05 255.55L389.05 254.40L391.30 254.40L391.30 255.55ZM388.33 254.40L388.33 255.55L386.11 255.55L386.11 254.40L388.33 254.40ZM392.81 251.59L389.02 251.59C388.92 251.27 388.83 250.99 388.73 250.74L387.97 250.87C388.08 251.09 388.18 251.33 388.28 251.59L384.47 251.59L384.47 253.39L385.17 253.39L385.17 252.24L392.11 252.24L392.11 253.34L392.81 253.34L392.81 251.59ZM396.40 252.06L396.72 252.85L394.32 252.85L394.32 253.48L403.00 253.48L403.00 252.85L400.51 252.85L400.90 252.06L402.53 252.06L402.53 251.44L399.01 251.44C398.91 251.18 398.80 250.95 398.70 250.74L397.93 250.86C398.03 251.03 398.13 251.22 398.22 251.44L394.79 251.44L394.79 252.06L396.40 252.06ZM397.47 252.85L397.15 252.06L400.15 252.06L399.76 252.85L397.47 252.85ZM395.46 254.07L395.46 257.03L401.86 257.03L401.86 254.07L395.46 254.07ZM401.16 256.47L396.16 256.47L396.16 255.81L401.16 255.81L401.16 256.47ZM396.16 255.28L396.16 254.64L401.16 254.64L401.16 255.28L396.16 255.28ZM395.06 257.50C394.87 258.16 394.57 258.77 394.16 259.32L394.78 259.71C395.20 259.13 395.52 258.44 395.76 257.64L395.06 257.50ZM400.03 259.84C400.41 259.84 400.68 259.77 400.86 259.65C401.06 259.49 401.20 259.07 401.27 258.38L400.59 258.16C400.55 258.66 400.47 258.97 400.35 259.07C400.27 259.15 400.12 259.19 399.90 259.19L397.80 259.19C397.48 259.19 397.32 259.04 397.32 258.76L397.32 257.59L396.58 257.59L396.58 258.91C396.58 259.53 396.91 259.84 397.59 259.84L400.03 259.84ZM398.77 257.22L398.16 257.60C398.58 258.02 398.90 258.41 399.14 258.77L399.74 258.35C399.52 258.02 399.19 257.64 398.77 257.22ZM401.91 257.41L401.33 257.77C401.87 258.43 402.29 259.03 402.61 259.58L403.21 259.16C402.91 258.66 402.47 258.08 401.91 257.41ZM411.55 251.25L405.66 251.25L405.66 256.76L406.38 256.76L406.38 251.95L410.82 251.95L410.82 256.75L411.55 256.75L411.55 251.25ZM408.18 252.62L408.18 254.50C408.14 255.76 407.85 256.79 407.31 257.58C406.73 258.34 405.70 258.95 404.22 259.41L404.61 260.02C406.10 259.55 407.17 258.90 407.82 258.07C408.49 257.18 408.85 255.99 408.89 254.50L408.89 252.62L408.18 252.62ZM411.74 259.81C412.08 259.80 412.34 259.72 412.52 259.56C412.71 259.36 412.85 258.78 412.94 257.84L412.25 257.62C412.21 258.40 412.11 258.86 411.97 258.99C411.86 259.08 411.72 259.13 411.55 259.13L409.98 259.13C409.68 259.13 409.54 258.94 409.54 258.58L409.54 256.03L408.83 256.03L408.83 258.71C408.83 259.44 409.14 259.81 409.78 259.81L411.74 259.81Z" fill="#66738B"/>
+</svg>
diff --git a/packages/experimental/forge-bundle/locale/de.json b/packages/experimental/forge-bundle/locale/de.json
index b3a7562daa..3bcf081796 100644
--- a/packages/experimental/forge-bundle/locale/de.json
+++ b/packages/experimental/forge-bundle/locale/de.json
@@ -1,6 +1,7 @@
 {
   "meta": {
     "title": "Änderungsanfragen und Arbeitsbäume",
-    "description": "Verfolgen Sie die Änderungsanfragen jeder Sitzung mit ihren Prüfungen und Reviews und starten Sie neue Sitzungen in einem Git-Arbeitsbaum; nutzt die gh CLI für GitHub."
+    "description": "Verknüpfte GitHub-Pull-Requests neben der Unterhaltung verfolgen: Prüfungen und Reviews ansehen, Code vergleichen und Feedback an den Agenten senden. Lokale Änderungen prüfen und Aufgaben mit separaten Arbeitsbäumen isolieren. GitHub-Funktionen erfordern eine installierte gh-CLI und eine Anmeldung auf dem Host.",
+    "detail": "docs/DETAIL.de.md"
   }
 }
diff --git a/packages/experimental/forge-bundle/locale/en.json b/packages/experimental/forge-bundle/locale/en.json
index f61d885db9..e52e41ba9f 100644
--- a/packages/experimental/forge-bundle/locale/en.json
+++ b/packages/experimental/forge-bundle/locale/en.json
@@ -1,6 +1,7 @@
 {
   "meta": {
     "title": "Change requests & worktrees",
-    "description": "Track each Session's change requests with their checks and reviews, and start new Sessions in a Git worktree; uses the gh CLI for GitHub."
+    "description": "Keep linked GitHub pull requests beside your conversation: follow checks and reviews, inspect diffs, and send feedback to the agent. Review local changes and use a separate worktree to isolate each task. GitHub features require the gh CLI installed and signed in on the host.",
+    "detail": "docs/DETAIL.md"
   }
 }
diff --git a/packages/experimental/forge-bundle/locale/es.json b/packages/experimental/forge-bundle/locale/es.json
index ecd059085e..254ebd65d6 100644
--- a/packages/experimental/forge-bundle/locale/es.json
+++ b/packages/experimental/forge-bundle/locale/es.json
@@ -1,6 +1,7 @@
 {
   "meta": {
     "title": "Solicitudes de cambio y árboles de trabajo",
-    "description": "Siga las solicitudes de cambio de cada sesión con sus comprobaciones y revisiones, e inicie nuevas sesiones en un árbol de trabajo de Git; usa la CLI gh para GitHub."
+    "description": "Sigue los pull requests de GitHub vinculados a la conversación: consulta comprobaciones y revisiones, compara código y envía comentarios al agente. Revisa cambios locales y aísla cada tarea en un árbol de trabajo separado. Las funciones de GitHub requieren instalar la CLI gh e iniciar sesión en el equipo anfitrión.",
+    "detail": "docs/DETAIL.es.md"
   }
 }
diff --git a/packages/experimental/forge-bundle/locale/fr.json b/packages/experimental/forge-bundle/locale/fr.json
index d86288f126..109301d5ff 100644
--- a/packages/experimental/forge-bundle/locale/fr.json
+++ b/packages/experimental/forge-bundle/locale/fr.json
@@ -1,6 +1,7 @@
 {
   "meta": {
     "title": "Demandes de modification et arbres de travail",
-    "description": "Suivez les demandes de modification de chaque session avec leurs vérifications et revues, et démarrez de nouvelles sessions dans un arbre de travail Git ; utilise la CLI gh pour GitHub."
+    "description": "Suivez les pull requests GitHub liées à votre conversation : consultez les vérifications et les revues, comparez le code et transmettez vos remarques à l’agent. Examinez les modifications locales et isolez chaque tâche dans un arbre de travail séparé. Les fonctions GitHub nécessitent la CLI gh installée et une connexion sur l’hôte.",
+    "detail": "docs/DETAIL.fr.md"
   }
 }
diff --git a/packages/experimental/forge-bundle/locale/ja.json b/packages/experimental/forge-bundle/locale/ja.json
index 0885da3f0a..126a8643d2 100644
--- a/packages/experimental/forge-bundle/locale/ja.json
+++ b/packages/experimental/forge-bundle/locale/ja.json
@@ -1,6 +1,7 @@
 {
   "meta": {
     "title": "変更リクエストとワークツリー",
-    "description": "各セッションの変更リクエストとそのチェックやレビューを追跡し、新しいセッションを Git ワークツリーで開始できます。GitHub には gh CLI を使用します。"
+    "description": "会話のサイドバーで関連付けられた GitHub PR をまとめて確認できます。チェックやレビューの状況、コードの差分を確認し、修正案をエージェントに渡せます。ローカルの変更確認や、独立したワークツリーによるタスクの分離にも対応します。GitHub 機能にはホストでの gh CLI のインストールとログインが必要です。",
+    "detail": "docs/DETAIL.ja.md"
   }
 }
diff --git a/packages/experimental/forge-bundle/locale/pt.json b/packages/experimental/forge-bundle/locale/pt.json
index 48821e9b5f..e7208c7c9e 100644
--- a/packages/experimental/forge-bundle/locale/pt.json
+++ b/packages/experimental/forge-bundle/locale/pt.json
@@ -1,6 +1,7 @@
 {
   "meta": {
     "title": "Solicitações de alteração e árvores de trabalho",
-    "description": "Acompanhe as solicitações de alteração de cada sessão com suas verificações e revisões e inicie novas sessões em uma árvore de trabalho Git; usa a CLI gh para o GitHub."
+    "description": "Acompanhe os pull requests do GitHub vinculados à conversa: consulte verificações e revisões, compare código e envie comentários ao agente. Revise alterações locais e isole cada tarefa em uma árvore de trabalho separada. Os recursos do GitHub exigem a CLI gh instalada e uma sessão iniciada no host.",
+    "detail": "docs/DETAIL.pt.md"
   }
 }
diff --git a/packages/experimental/forge-bundle/locale/ru.json b/packages/experimental/forge-bundle/locale/ru.json
index 750ed7ace0..2541e956ca 100644
--- a/packages/experimental/forge-bundle/locale/ru.json
+++ b/packages/experimental/forge-bundle/locale/ru.json
@@ -1,6 +1,7 @@
 {
   "meta": {
     "title": "Запросы на изменение и рабочие деревья",
-    "description": "Отслеживайте запросы на изменение каждого сеанса вместе с их проверками и ревью и начинайте новые сеансы в рабочем дереве Git; для GitHub используется gh CLI."
+    "description": "Следите за связанными с беседой pull request GitHub: проверками, рецензиями и различиями в коде, а затем передавайте замечания агенту. Просматривайте локальные изменения и изолируйте задачи в отдельных рабочих деревьях. Для функций GitHub требуется установить CLI gh и войти в аккаунт на хосте.",
+    "detail": "docs/DETAIL.ru.md"
   }
 }
diff --git a/packages/experimental/forge-bundle/locale/zh.json b/packages/experimental/forge-bundle/locale/zh.json
index 50259f6fe0..7e4786270f 100644
--- a/packages/experimental/forge-bundle/locale/zh.json
+++ b/packages/experimental/forge-bundle/locale/zh.json
@@ -1,6 +1,7 @@
 {
   "meta": {
     "title": "变更请求与工作树",
-    "description": "跟踪每个会话的变更请求及其检查与评审，新会话也可以在 Git 工作树中开始；GitHub 通过 gh 命令行访问。"
+    "description": "在会话侧栏集中跟踪关联的 GitHub PR：查看检查状态、评审意见与代码差异，并把修改建议交给智能体继续处理。也可查看本地改动，用独立工作树隔离任务。GitHub 功能需要本机安装 gh 并登录。",
+    "detail": "docs/DETAIL.zh.md"
   }
 }
diff --git a/packages/experimental/forge-bundle/package.json b/packages/experimental/forge-bundle/package.json
index b66fbe47b0..13e3ab5025 100644
--- a/packages/experimental/forge-bundle/package.json
+++ b/packages/experimental/forge-bundle/package.json
@@ -27,6 +27,7 @@
   "files": [
     "icon.svg",
     "locale/*.json",
+    "docs",
     "lib/index.js",
     "cordis.patch.yml",
     "lib/types/**/*.d.ts"
@@ -37,6 +38,7 @@
     "@deepseek-ai/dsh-experimental-forge": "workspace:*",
     "@deepseek-ai/dsh-experimental-forge-github": "workspace:*",
     "@deepseek-ai/dsh-experimental-forge-session": "workspace:*",
+    "@deepseek-ai/dsh-experimental-tool-worktree": "workspace:*",
     "@deepseek-ai/dsh-experimental-worktree": "workspace:*"
   },
   "peerDependencies": {
diff --git a/packages/experimental/tool-worktree/README.i18n.yaml b/packages/experimental/tool-worktree/README.i18n.yaml
index 33ca340c2f..10910e375f 100644
--- a/packages/experimental/tool-worktree/README.i18n.yaml
+++ b/packages/experimental/tool-worktree/README.i18n.yaml
@@ -9,14 +9,14 @@
   en: db61f6b6ad671f45
   zh: 9f3083d7f5605cbb
 /deepseek-ai-dsh-experimental-tool-worktree/summary:
-  en: addc1cb3414df6be
-  zh: 5f2d371d844b0568
+  en: 106bccb04bd14134
+  zh: 579b316a56bebbb8
 /deepseek-ai-dsh-experimental-tool-worktree/table-of-contents:
   en: d152484eb41ac6b4
   zh: 2f8a621b991260a1
 /deepseek-ai-dsh-experimental-tool-worktree/use-this-package:
-  en: 06074f9f6989911b
-  zh: 05c9a85b7cdcfbad
+  en: f357051b201aa5b9
+  zh: ace93e12e8d4de82
 /deepseek-ai-dsh-experimental-tool-worktree/understand-the-implementation:
   en: c03f875211ab69a8
   zh: 8f49b82f90a60223
diff --git a/packages/experimental/tool-worktree/README.md b/packages/experimental/tool-worktree/README.md
index b614aa6a8e..2f1b293808 100644
--- a/packages/experimental/tool-worktree/README.md
+++ b/packages/experimental/tool-worktree/README.md
@@ -9,7 +9,7 @@ English | [中文](README.zh.md)
 
 ## Summary
 
-Add Git worktrees from the GUI plugin manager to let a model create and enter a new Git worktree with one call. This optional bundle is installed with Harness and stays off until selected. Native tool calls and PTC programs receive the same typed result, and the existing file policy governs creation.
+Let a model create and enter a new Git worktree with one call. Web and Desktop expose this tool through Change requests & worktrees; other profiles can select this standalone bundle. Native tool calls and PTC programs receive the same typed result, and the existing file policy governs creation.
 
 ## Table of Contents
 
@@ -25,7 +25,7 @@ Add Git worktrees from the GUI plugin manager to let a model create and enter a
 <a id="use-this-package"></a>
 ## Use this package
 
-In the GUI, open **Plugins → Official → Git worktrees** and turn on the switch. The bundle loads the [worktree runtime](../worktree/README.md) and this tool together; it is off in every shipped profile. Turning it off removes `create_worktree` without deleting existing checkouts or branches. The built-in `working_directory` tool remains available.
+In the GUI, enable [Change requests & worktrees](../forge-bundle/README.md). The standalone bundle has no Plugins page card. Profiles without the Web application may select it in `dsh.profile.bundles`; it loads the [worktree runtime](../worktree/README.md) and this tool together. Turning it off removes `create_worktree` without deleting existing checkouts or branches. The built-in `working_directory` tool remains available.
 
 For an explicit composition, mount this function plugin after the worktree runtime and tool registry.
 
diff --git a/packages/experimental/tool-worktree/README.zh.md b/packages/experimental/tool-worktree/README.zh.md
index 46afb3e972..8b37299687 100644
--- a/packages/experimental/tool-worktree/README.zh.md
+++ b/packages/experimental/tool-worktree/README.zh.md
@@ -9,7 +9,7 @@ kind: "package-bundle"
 
 ## 概述
 
-从 GUI 插件管理器添加 Git 工作树，让模型通过一次调用创建并进入新的 Git 工作树。此可选 bundle 随 Harness 安装，在选中之前保持关闭。原生工具调用与 PTC 程序获得相同的带类型结果，创建操作沿用现有文件策略。
+让模型通过一次调用创建并进入新的 Git 工作树。Web 与 Desktop 通过“变更请求与工作树”提供本工具；其他 profile 可以选择本独立组合包。原生工具调用与 PTC 程序获得相同的带类型结果，创建操作沿用现有文件策略。
 
 ## 目录
 
@@ -25,7 +25,7 @@ kind: "package-bundle"
 <a id="use-this-package"></a>
 ## 使用本包
 
-在 GUI 中打开**插件 → 官方 → Git 工作树**并启用开关。此 bundle 一起加载[工作树运行时](../worktree/README.zh.md)与本工具；所有随附 profile 默认关闭它。关闭后会移除 `create_worktree`，已有检出目录与分支会保留。内置 `working_directory` 工具仍然可用。
+在 GUI 中启用[变更请求与工作树](../forge-bundle/README.zh.md)。独立组合包在插件页没有卡片。未组合 Web 应用的 profile 可以在 `dsh.profile.bundles` 中选择它；它一起加载[工作树运行时](../worktree/README.zh.md)与本工具。关闭后会移除 `create_worktree`，已有检出目录与分支会保留。内置 `working_directory` 工具仍然可用。
 
 在显式组合中，将此函数插件挂载到工作树运行时和工具注册表之后。
 
diff --git a/packages/util/official-bundles/src/plugin-manager.ts b/packages/util/official-bundles/src/plugin-manager.ts
index 48f866a748..510c85699f 100644
--- a/packages/util/official-bundles/src/plugin-manager.ts
+++ b/packages/util/official-bundles/src/plugin-manager.ts
@@ -18,7 +18,7 @@ export const PROTECTED_PLUGINS: ReadonlySet<string> = new Set([
 ])
 
 /**
- * Built-in profile bundles and persistent terminals, which have no plugin manager page.
+ * Built-in profile bundles, persistent terminals, and the standalone worktree tool, which have no plugin manager page.
  * Their Host availability and activation stay intact.
  */
 export const HIDDEN_BUNDLES: ReadonlySet<string> = new Set([
@@ -29,6 +29,7 @@ export const HIDDEN_BUNDLES: ReadonlySet<string> = new Set([
   '@deepseek-ai/dsh-acp-app',
   '@deepseek-ai/dsh-sdk-minimal',
   '@deepseek-ai/dsh-experimental-terminal-bundle',
+  '@deepseek-ai/dsh-experimental-tool-worktree',
 ])
 
 /**
@@ -50,7 +51,6 @@ export const MORE_BUNDLES: readonly string[] = [
   '@deepseek-ai/dsh-personalized-recommendations',
   '@deepseek-ai/dsh-experimental-inspector-profile',
   '@deepseek-ai/dsh-cua-bundle',
-  '@deepseek-ai/dsh-experimental-tool-worktree',
   '@deepseek-ai/dsh-experimental-cot-translation-bundle',
   '@deepseek-ai/dsh-experimental-session-search',
   '@deepseek-ai/dsh-experimental-session-titles-bundle',
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 451d80179f..78bf276a8d 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -10028,6 +10028,9 @@ importers:
       '@deepseek-ai/dsh-experimental-forge-session':
         specifier: workspace:*
         version: link:../forge-session
+      '@deepseek-ai/dsh-experimental-tool-worktree':
+        specifier: workspace:*
+        version: link:../tool-worktree
       '@deepseek-ai/dsh-experimental-worktree':
         specifier: workspace:*
         version: link:../worktree
diff --git a/scripts/gen-tool-catalog.ts b/scripts/gen-tool-catalog.ts
index a40c08fca0..5713199b1b 100644
--- a/scripts/gen-tool-catalog.ts
+++ b/scripts/gen-tool-catalog.ts
@@ -676,7 +676,7 @@ const TOOL_PACKAGES: ToolPackage[] = [
       })
       await ctx.plugin(ToolWorktree)
     },
-    note: 'Explicit experimental composition only. Creates a new branch and checkout from a pinned local commit under existing write permissions, then changes the Session directory. Leaving retains the branch and checkout.',
+    note: 'Enabled through the Change requests & worktrees bundle on Web and Desktop; other profiles can select the standalone bundle. Creates a new branch and checkout from a pinned local commit under existing write permissions, then changes the Session directory. Leaving retains the branch and checkout.',
   },
   {
     pkg: '@deepseek-ai/dsh-tool-workflow',
diff --git a/scripts/optional-bundles.spec.ts b/scripts/optional-bundles.spec.ts
index 7423aa0c9f..e5c30c6c84 100644
--- a/scripts/optional-bundles.spec.ts
+++ b/scripts/optional-bundles.spec.ts
@@ -133,7 +133,7 @@ describe('optional bundles', () => {
     }
   })
 
-  it('offers Git Worktrees as one disabled bundle with its runtime and tool', () => {
+  it('retains the standalone worktree bundle for explicit profiles', () => {
     const name = '@deepseek-ai/dsh-experimental-tool-worktree'
     expect(OPTIONAL_BUNDLES).toContain(name)
     for (const template of Object.values(PROFILE_TEMPLATES)) expect(template.bundles).not.toContain(name)
@@ -144,7 +144,7 @@ describe('optional bundles', () => {
     }
   })
 
-  it('offers the forge panel as one disabled bundle with its registry, provider, bindings, panel, and isolated worktree service', () => {
+  it('offers the forge panel and model worktree tool together with their separate worktree services', () => {
     const name = '@deepseek-ai/dsh-experimental-forge-bundle'
     expect(OPTIONAL_BUNDLES).toContain(name)
     for (const template of Object.values(PROFILE_TEMPLATES)) expect(template.bundles).not.toContain(name)
@@ -154,24 +154,28 @@ describe('optional bundles', () => {
       '@deepseek-ai/dsh-experimental-forge-github',
       '@deepseek-ai/dsh-experimental-forge-session',
       '@deepseek-ai/dsh-experimental-client-ui-forge',
-      '@deepseek-ai/dsh-experimental-worktree',
+      '@deepseek-ai/dsh-experimental-tool-worktree',
     ]) {
       expect(flattenRows(composeEntries(shipped)).some(row => row.name === moduleName)).toBe(false)
       expect(rows.filter(row => row.name === moduleName && row.disabled !== true)).toHaveLength(1)
     }
     const group = composeEntries([...shipped, bundle(name).patches]).find(row => row.id === 'optional-forge-panel')
     expect(group?.isolate).toEqual({ worktrees: true })
+    expect(rows.filter(row => row.name === '@deepseek-ai/dsh-experimental-worktree')).toHaveLength(2)
   })
 
-  it('composes the forge panel beside Git Worktrees with one worktree service each', () => {
-    const composed = composeEntries([
-      ...shipped,
-      bundle('@deepseek-ai/dsh-experimental-tool-worktree').patches,
-      bundle('@deepseek-ai/dsh-experimental-forge-bundle').patches,
-    ], (message) => { throw new Error(message) })
-    const topLevelIds = composed.flatMap(entry => typeof entry.id === 'string' ? [entry.id] : [])
-    expect(topLevelIds).toHaveLength(new Set(topLevelIds).size)
-    expect(flattenRows(composed).filter(row => row.name === '@deepseek-ai/dsh-experimental-worktree')).toHaveLength(2)
+  it('keeps the existing tool and panel row overrides addressable in the unified bundle', () => {
+    const config = { directory: '.agents/custom-worktrees' }
+    const warnings: string[] = []
+    const composed = composeEntries([...shipped, bundle('@deepseek-ai/dsh-experimental-forge-bundle').patches, [
+      { id: 'worktree', config },
+      { id: 'tool-worktree', disabled: true },
+      { id: 'optional-forge-panel', disabled: true },
+    ]], message => warnings.push(message))
+    expect(warnings).toEqual([])
+    expect(composed.find(row => row.id === 'worktree')?.config).toEqual(config)
+    expect(composed.find(row => row.id === 'tool-worktree')?.disabled).toBe(true)
+    expect(composed.find(row => row.id === 'optional-forge-panel')?.disabled).toBe(true)
   })
 
   it('ships all five lightweight bundles without selecting them in a default template', () => {
diff --git a/scripts/verify-package-readme-model-experience.ts b/scripts/verify-package-readme-model-experience.ts
index f18901f6be..09dbf45585 100644
--- a/scripts/verify-package-readme-model-experience.ts
+++ b/scripts/verify-package-readme-model-experience.ts
@@ -74,7 +74,7 @@ const SENTENCE_MODEL_EXPERIENCE: Readonly<Record<string, SentenceContract>> = {
   'packages/experimental/forge': { kind: 'none', reason: 'Providers and watchers exchange code host status without contributing model context.' },
   'packages/experimental/forge-github': { kind: 'none', reason: 'The provider reads pull request status for host-side watchers without contributing model context.' },
   'packages/experimental/client-ui-forge': { kind: 'indirect', reason: 'Switching a Session directory from the panel reaches the model through the working-directory notice; inspection and status stay on the host.' },
-  'packages/experimental/forge-bundle': { kind: 'none', reason: 'Composes the forge packages and panel without adding a model tool or prompt.' },
+  'packages/experimental/forge-bundle': { kind: 'indirect', reason: 'The worktree tool and panel own the model-visible schemas, results, and directory notices selected by the bundle.' },
   'packages/experimental/forge-session': { kind: 'none', reason: 'Bindings, discovery records, and polled status stay on the host; binding records never enter model requests.' },
   'packages/experimental/worktree': { kind: 'indirect', reason: 'The worktree tool renders creation results; the working-directory service owns model-visible directory context.' },
   'packages/experimental/client-ui-stats': { kind: 'none', reason: 'The panel reads Session events and renders them in the browser; it registers no tool, prompt section, or model input.' },
diff --git a/snapshots/web/creation-recommendations/session.v4.jsonl b/snapshots/web/creation-recommendations/session.v4.jsonl
index b92ddb4ef8..f327415d58 100644
--- a/snapshots/web/creation-recommendations/session.v4.jsonl
+++ b/snapshots/web/creation-recommendations/session.v4.jsonl
@@ -16,7 +16,7 @@
 {"type":"session/title","data":{"title":"I wish I had a","messageSeqs":[8],"source":{"kind":"fallback"}}}
 {"type":"assistant/message","data":{"turn":1,"step":1,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_creation_skill","name":"skill","arguments":"{\"name\":\"personalized-pages\"}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:6}}"},"stream":[{"type":"chunk","time":1792674450282,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"chunk","time":1792674450282,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_creation_skill","name":"skill","arguments":"{\"name\":\"personalized-pages\"}"}}},{"type":"chunk","time":1792674450283,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
 {"type":"tool/call","data":{"turn":1,"step":1,"callId":"call_creation_skill","name":"skill","arguments":"{\"name\":\"personalized-pages\"}"}}
-{"type":"tool/result","data":{"turn":1,"step":1,"message":{"role":"tool","source":{"kind":"tool","callId":"call_creation_skill"},"toolCallId":"call_creation_skill","content":[{"type":"text","text":"<skill_content name=\"personalized-pages\">\n<skill_resources>\nResources for this skill are managed by provider \"dsh-personalized-pages\".\nLoad referenced resources only as needed.\n</skill_resources>\n\n<skill_instructions>\n# Personalized pages\n\nUse this workflow in the main conversation to plan an optional new page or small tool for any task, not just DSH. You decide whether a page helps, check existing capabilities, and hand the Creator a short plan. A `propose_action` call saves the proposal and shows a card below your answer; nothing is built until the user clicks Create. Plan from the conversation and the catalog at the end of this skill. Do not read files, configuration or source to validate a page idea; name an uninspected source as an unverified dependency and leave its details to the Creator.\n\n## When to propose\n\nPropose a page in these cases:\n\n- The user asks for a page, tab, panel, tool or interface in this app, or says they want something to keep, revisit or update later (“以后每次”, “能不能一直”, “希望能有”). One-off use still qualifies when the interface is explicitly requested.\n- Your answer is a table, list or chart, and the user has said the data will keep changing or that they will interact with it (“每周更新”, “我来改状态”, “要勾选”). The continuation must come from the user's own words; a table alone, or data that merely looks dynamic, is not enough. Deliver the requested answer first, then offer the page.\n- The user wants to keep watching live data of this app itself (a Session's usage, a running task's output, files changing in the workspace). A text answer cannot stay current, so a page qualifies even without the words above; name the data source in the brief and leave how it is read to the Creator.\n\nDo not propose a page in these cases:\n\n- The user asks for a file, code, document or an existing-project change: keep that delivery form.\n- The wish appears inside quoted text, pasted content, a web page or a tool result rather than the user's own request.\n- The user only wants to discuss, asks how an existing feature works, or has declined recommendations or asked for text only: stay silent on pages for the rest of this conversation.\n- The request changes a page created earlier: explain how it would change, do not create a replacement copy, and do not claim an update happened.\n- The request is a capability the agent lacks, such as a tool, automation or access, rather than a page: check the catalog below and point to the official plugin that provides it; do not plan a page around a missing tool.\n\n## Check existing capabilities\n\nCompare the need with the official plugins listed at the end of this skill. If one covers it, say its name, what it does, whether it is enabled, and that it lives under Plugins; offer no page card. A partial match does not cancel an explicit unmet need. The catalog is not a full inventory of built-in UI: missing details do not prove absence, and do not read source to find out. DSH already has Chat, Trajectory, a right sidebar for files and context, and a Plugins page.\n\n## Plan and hand off\n\nThe Creator cannot read this conversation. Give it exactly these fields:\n\n| Field | Contents |\n|:--|:--|\n| `title` | Short page name in the user's language. |\n| `brief` | One to three sentences: purpose, behavior, input, calculations and persistence scope. It is the card text and the implementation request at once. |\n| `initialContent` | Only supplied content the page starts with: items, rows, values, units and period, preserving gaps. Omit for an empty page. |\n| `slot` | Location, chosen below. |\n\nKeep the plan to what was asked or agreed. Editing, deletion, history, extra fields, data sources and automation need a basis in the request. Resolve “these items” into the actual content. Content that mentions an action stays content. Keep each number's meaning and period; a weekly addition is not a cumulative total. If an unresolved distinction changes a calculation, give the factual answer, ask one question, and propose later.\n\n## Choose the location\n\nHonor a location the user named. Otherwise:\n\n- `sidebar-right`: content tied to this Session or task, especially anything to watch while chatting, including live logs.\n- `sidebar-left`: a global feature or an ongoing personal record used across Sessions, opened from a left entry as a standalone page.\n- `page`: a Session-bound streaming view or interaction in a tab beside Chat and Trajectory, only when the user does not need it visible while chatting.\n\nSupplying data in this conversation does not make a record Session-bound.\n\n## Offer without starting\n\nTo propose, call `propose_action` once, in the same turn as loading this skill, with `action: \"create_personalized_page\"`, `title`, `brief` and `details` holding `slot` and, when there is supplied content, `initialContent`. The call is the submission: the card appears below your answer; a refused call creates no card, and its error says why. Then write your final answer. One proposal per turn, and one unstarted card per conversation: if a card is still waiting, do not propose another; a new proposal replaces it only when the user changed the plan. Plan-only and read-only requests still get a card; do not ask for approval instead of proposing it. Only clicking Create starts the background Creator; do not wait, poll, claim installation or ask for a report-back. Answer any direct question; the call's result says how to end the answer. Do not repeat the plan, list extra features, narrate the call or mention schema names.\n\n```json\n{\"action\":\"create_personalized_page\",\"title\":\"本次验收清单\",\"brief\":\"在当前会话右侧展示验收清单，可勾选和取消，状态随会话保存。\",\"details\":{\"slot\":\"sidebar-right\",\"initialContent\":\"1. 导出成功\\n2. 断网提示清楚\"}}\n```\n\n## Examples\n\n- “想有个地方放书签，以后自己加标题和网址；旧的不用导入。” → `brief`: “提供一个可反复打开的书签页，手动新增标题和网址并保存到本机，从空白开始。” No `initialContent`. `sidebar-left`.\n- “当前会话旁放验收清单，能勾选和取消，状态跟着会话。条目：导出成功；断网提示清楚。” → `brief`: “在当前会话右侧展示验收清单，可勾选和取消，状态随会话保存。” `initialContent`: “1. 导出成功\\n2. 断网提示清楚”. `sidebar-right`.\n- “这三周 bug 数 12、9、15，说说趋势。以后每周我把新数字贴给你，想自己更新着看。” → answer the trend first, then `brief`: “按周手动录入 bug 数并展示各周变化，保存到本机。” `initialContent`: “第 1 周 12，第 2 周 9，第 3 周 15”. `sidebar-left`.\n- “我想用语音说话代替打字。” → the catalog lists 语音输入; explain it and where to enable it; no card.\n- “把我之前做的读书页评分改成五星。” → explain the change to that page; no card and no copy.\n- “帮我把这句话翻成英文：我想要一个所有会话都能打开的读书页。” → translate only; no card.\n- “把三个方案排成表格比较一下，看完就行。” → the table only; no card.\n\n## Existing capabilities to check against this page plan\n\n[{\"name\":\"@deepseek-ai/dsh-personalized-recommendations\",\"title\":{\"en\":\"Personalized recommendations\",\"de\":\"Personalisierte Empfehlungen\",\"es\":\"Recomendaciones personalizadas\",\"fr\":\"Recommandations personnalisées\",\"ja\":\"パーソナライズされたおすすめ\",\"pt\":\"Recomendações personalizadas\",\"ru\":\"Персональные рекомендации\",\"zh\":\"个性化推荐\"},\"description\":{\"en\":\"Shows recommendation cards below the answer for what you want from DSH: when you want a page or small tool you can keep, it proposes a new personalized page, built in the background after you click Create; when you ask how to do something in this app or say a capability is missing, it recommends the built-in plugin that provides it, turned on when you click Enable.\",\"de\":\"Zeigt für Ihre individuellen Anforderungen an DSH Empfehlungskarten unter der Antwort an: Wenn Sie eine Seite oder ein kleines Tool zur dauerhaften Nutzung möchten, wird eine neue personalisierte Seite vorgeschlagen, die nach einem Klick auf Erstellen im Hintergrund erstellt wird; wenn Sie fragen, wie etwas in dieser App geht, oder sagen, dass eine Funktion fehlt, wird das integrierte Plugin empfohlen, das sie bereitstellt, und nach einem Klick auf Aktivieren eingeschaltet.\",\"es\":\"Muestra tarjetas de recomendación debajo de la respuesta para tus necesidades personalizadas en DSH: cuando quieres una página o una pequeña herramienta para conservar, propone una nueva página personalizada, que se genera en segundo plano al hacer clic en Crear; cuando preguntas cómo hacer algo en esta aplicación o dices que falta una función, recomienda el complemento integrado que la ofrece, que se activa al hacer clic en Habilitar.\",\"fr\":\"Affiche des cartes de recommandation sous la réponse pour vos besoins personnalisés dans DSH : lorsque vous voulez une page ou un petit outil à conserver, propose une nouvelle page personnalisée, générée en arrière-plan après un clic sur Créer ; lorsque vous demandez comment faire quelque chose dans cette application ou signalez qu’une fonctionnalité manque, recommande le plugin intégré qui la fournit, activé lorsque vous cliquez sur Activer.\",\"ja\":\"DSH に対するあなた個人のニーズに合わせて、回答の下におすすめカードを表示します。長く使えるページや小さなツールが欲しいときは新しいパーソナルページを提案し、「作成」をクリックするとバックグラウンドで生成します。このアプリで何かをする方法を尋ねたときや機能が足りないと言ったときは、それを提供する内蔵プラグインを推薦し、「有効にする」をクリックすると有効になります。\",\"pt\":\"Mostra cartões de recomendação abaixo da resposta para suas necessidades personalizadas no DSH: quando você quer uma página ou uma pequena ferramenta para manter, propõe uma nova página personalizada, gerada em segundo plano depois que você clica em Criar; quando você pergunta como fazer algo neste aplicativo ou diz que falta um recurso, recomenda o plug-in integrado que o oferece, ativado quando você clica em Ativar.\",\"ru\":\"Показывает карточки рекомендаций под ответом с учетом ваших индивидуальных потребностей в DSH: когда вам нужна страница или небольшой инструмент для постоянного использования, предлагает новую персональную страницу, которая создается в фоне после нажатия «Создать»; когда вы спрашиваете, как что-то сделать в этом приложении, или говорите, что не хватает какой-то возможности, рекомендует встроенный плагин, который ее предоставляет, и включает его после нажатия «Включить».\",\"zh\":\"针对你对 DSH 的个性化需求，在回答下方展示推荐卡片：想要能长期使用的页面或小工具时，提议新增个性化页面，点击创建后在后台生成；问到本应用怎么做某件事或缺少某项能力时，推荐对应的内置插件，点击启用后开启。\"},\"enabled\":true},{\"name\":\"@deepseek-ai/dsh-experimental-agent-team-profile\",\"title\":{\"en\":\"Agent teams\",\"de\":\"Agententeams\",\"es\":\"Equipos de agentes\",\"fr\":\"Équipes d'agents\",\"ja\":\"エージェントチーム\",\"pt\":\"Equipes de agentes\",\"ru\":\"Команды агентов\",\"zh\":\"智能体团队\"},\"description\":{\"en\":\"Lets the agent you talk to split a job among named teammates, track it on a shared task board, and report back with their results.\",\"de\":\"Ermöglicht dem Agenten, mit dem Sie sprechen, eine Aufgabe auf benannte Teammitglieder aufzuteilen, sie auf einem gemeinsamen Aufgabenboard zu verfolgen und Ihnen mit deren Ergebnissen zu berichten.\",\"es\":\"Permite que el agente con el que habla reparta un trabajo entre compañeros con nombre, lo siga en un tablero de tareas compartido y le informe con sus resultados.\",\"fr\":\"Permet à l'agent avec lequel vous parlez de répartir un travail entre des coéquipiers nommés, de le suivre sur un tableau de tâches partagé et de vous rendre compte de leurs résultats.\",\"ja\":\"対話しているエージェントが、仕事を名前付きのチームメイトに分担させ、共有タスクボードで進捗を追跡し、チームメイトの結果をまとめて報告します。\",\"pt\":\"Permite que o agente com quem você conversa divida um trabalho entre colegas de equipe nomeados, acompanhe-o em um quadro de tarefas compartilhado e informe você com os resultados deles.\",\"ru\":\"Позволяет агенту, с которым вы общаетесь, распределить работу между именованными участниками команды, отслеживать её на общей доске задач и отчитываться перед вами об их результатах.\",\"zh\":\"让与你对话的智能体把工作分给有名字的队友，在共享任务看板上跟踪进度，并汇总队友的结果向你汇报。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-inspector-profile\",\"title\":{\"en\":\"Developer tools\",\"de\":\"Entwicklertools\",\"es\":\"Herramientas de desarrollador\",\"fr\":\"Outils de développement\",\"ja\":\"開発者ツール\",\"pt\":\"Ferramentas de desenvolvedor\",\"ru\":\"Инструменты разработчика\",\"zh\":\"开发者工具\"},\"description\":{\"en\":\"For troubleshooting: view what DSH recorded for a session in Session log, inspect per-turn and per-step statistics in the Statistics tab, and debug the DSH backend in Chrome DevTools.\",\"de\":\"Zur Fehlersuche: Sehen Sie in „Sitzungsprotokoll“, was DSH für eine Sitzung aufgezeichnet hat, prüfen Sie im Tab „Statistik“ Kontext, Dauer, Cache und Werkzeugkosten pro Runde und Schritt und debuggen Sie das DSH-Backend in Chrome DevTools.\",\"es\":\"Para solucionar problemas: vea en «Registro de sesión» lo que DSH registró de una sesión, consulte el contexto, los tiempos, la caché y el coste de herramientas por turno y paso en la pestaña «Estadísticas», y depure el backend de DSH en Chrome DevTools.\",\"fr\":\"Pour le dépannage : consultez dans « Journal de session » ce que DSH a enregistré pour une session, examinez le contexte, les durées, le cache et le coût des outils par tour et étape dans l’onglet « Statistiques », et déboguez le backend de DSH dans Chrome DevTools.\",\"ja\":\"トラブルシューティング用です。「セッションログ」で DSH がセッションについて記録した内容を確認し、「統計」タブでターン/ステップごとのコンテキスト、時間、キャッシュ、ツールコストを確認し、Chrome DevTools で DSH バックエンドをデバッグできます。\",\"pt\":\"Para solução de problemas: veja em «Registro da sessão» o que o DSH registrou de uma sessão, consulte contexto, tempos, cache e custo de ferramentas por turno e etapa na aba «Estatísticas» e depure o backend do DSH no Chrome DevTools.\",\"ru\":\"Для диагностики: просматривайте в «Журнале сеанса», что DSH записал для сеанса, смотрите контекст, время, кэш и стоимость инструментов по ходам и шагам на вкладке «Статистика» и отлаживайте бэкенд DSH в Chrome DevTools.\",\"zh\":\"用于排查问题：在「会话数据诊断」中查看 DSH 为会话记录的内容，在「统计」页签查看每轮/每步的上下文、耗时、缓存和工具成本，并在 Chrome DevTools 中调试 DSH 后端。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-voice-input-bundle\",\"title\":{\"en\":\"Voice input\",\"de\":\"Spracheingabe\",\"es\":\"Entrada de voz\",\"fr\":\"Saisie vocale\",\"ja\":\"音声入力\",\"pt\":\"Entrada de voz\",\"ru\":\"Голосовой ввод\",\"zh\":\"语音输入\"},\"description\":{\"en\":\"Transcribe recordings locally with SenseVoice; first use requires installing dependencies.\",\"de\":\"Transkribieren Sie Aufnahmen lokal mit SenseVoice; Für die erste Verwendung müssen Abhängigkeiten installiert werden.\",\"es\":\"Transcribe grabaciones localmente con SenseVoice; El primer uso requiere instalar dependencias.\",\"fr\":\"Transcrivez les enregistrements localement avec SenseVoice ; la première utilisation nécessite l'installation de dépendances.\",\"ja\":\"ローカルの SenseVoice で録音を文字に起こします。初回利用時には依存関係のインストールが必要です。\",\"pt\":\"Transcreva gravações localmente com SenseVoice; o primeiro uso requer a instalação de dependências.\",\"ru\":\"Транскрибируйте записи локально с помощью SenseVoice; при первом использовании требуется установка зависимостей.\",\"zh\":\"在本机使用 SenseVoice 转写录音，首次使用需安装依赖。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-auto-review\",\"title\":{\"en\":\"Auto authorization review\",\"de\":\"Automatische Autorisierungsüberprüfung\",\"es\":\"Revisión de autorización automática\",\"fr\":\"Examen des autorisations automatiques\",\"ja\":\"自動認可レビュー\",\"pt\":\"Revisão de autorização automática\",\"ru\":\"Проверка автоматической авторизации\",\"zh\":\"自动授权审查\"},\"description\":{\"en\":\"Adds an Auto review access mode: before each tool call, a model checks it against what you asked for, runs allowed calls at once, and holds denied calls for your approval.\",\"de\":\"Fügt den Zugriffsmodus „Auto review“ hinzu: Vor jedem Tool-Aufruf prüft ein Modell den Aufruf anhand Ihrer Anforderung; zugelassene Aufrufe laufen sofort, abgelehnte Aufrufe warten auf Ihre Genehmigung.\",\"es\":\"Añade el modo de acceso “Auto review”: antes de cada llamada a una herramienta, un modelo comprueba la llamada frente a lo que usted pidió; las llamadas permitidas se ejecutan de inmediato y las denegadas esperan su aprobación.\",\"fr\":\"Ajoute le mode d'accès « Auto review » : avant chaque appel d'outil, un modèle vérifie l'appel par rapport à ce que vous avez demandé ; les appels autorisés s'exécutent immédiatement et les appels refusés attendent votre approbation.\",\"ja\":\"「自動認可レビュー」アクセスモードを追加します。各ツール呼び出しの前に、モデルがその呼び出しをあなたの依頼内容と照らし合わせて確認し、許可された呼び出しは即座に実行され、拒否された呼び出しはあなたの承認を待ちます。\",\"pt\":\"Adiciona o modo de acesso “Auto review”: antes de cada chamada de ferramenta, um modelo verifica a chamada em relação ao que você pediu; as chamadas permitidas são executadas imediatamente e as negadas aguardam sua aprovação.\",\"ru\":\"Добавляет режим доступа «Auto review»: перед каждым вызовом инструмента модель сверяет вызов с вашей просьбой; разрешённые вызовы выполняются сразу, а отклонённые ждут вашего одобрения.\",\"zh\":\"提供“自动审查”访问模式：每次工具调用前，由模型对照你的要求检查，获准的调用立即运行，被拒绝的调用等你审批。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-cot-translation-bundle\",\"title\":{\"en\":\"Machine translation of reasoning\",\"de\":\"Maschinelle Übersetzung der Argumentation\",\"es\":\"Traducción automática de razonamiento\",\"fr\":\"Traduction automatique du raisonnement\",\"ja\":\"思考内容の機械翻訳\",\"pt\":\"Tradução automática de raciocínio\",\"ru\":\"Машинный перевод рассуждений\",\"zh\":\"思考过程机器翻译\"},\"description\":{\"en\":\"Translates expanded Think rows into your chosen language as the agent writes them, and View original switches back.\",\"de\":\"Übersetzt aufgeklappte „Denken Sie nach“-Zeilen, während der Agent sie schreibt, in die von Ihnen gewählte Sprache, und „Original ansehen“ wechselt zurück.\",\"es\":\"Traduce las filas “pensar” expandidas al idioma que elija mientras el agente las escribe, y “Ver original” vuelve al texto original.\",\"fr\":\"Traduit les lignes « Pensez » développées dans la langue de votre choix pendant que l'agent les écrit, et « Voir l'original » permet de revenir au texte d'origine.\",\"ja\":\"エージェントが書き出すのと同時に、展開された「思考」行を選択した言語に翻訳します。「原文を表示」で原文に戻せます。\",\"pt\":\"Traduz as linhas “Pense” expandidas para o idioma que você escolher enquanto o agente as escreve, e “Ver original” volta ao texto original.\",\"ru\":\"Переводит развёрнутые строки «Подумайте» на выбранный вами язык по мере того, как агент их пишет, а «Посмотреть оригинал» возвращает исходный текст.\",\"zh\":\"智能体输出时，把展开的“思考”行翻译成你选择的语言，点击“查看原文”可切换回原文。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-badge-skill-bundle\",\"title\":{\"en\":\"DSH badge skill\",\"de\":\"DSH-Abzeichen-Fertigkeit\",\"es\":\"Habilidad de insignia DSH\",\"fr\":\"Compétence du badge DSH\",\"ja\":\"DSH バッジスキル\",\"pt\":\"DSH habilidade de distintivo\",\"ru\":\"DSH значок навыка\",\"zh\":\"DSH 徽章技能\"},\"description\":{\"en\":\"Let agents add a “powered by dsh” badge to documents, pull requests, and other outputs.\",\"de\":\"Lassen Sie Agenten Dokumente, Pull-Requests und andere Ausgaben mit einem „powered by dsh“-Badge versehen.\",\"es\":\"Permita que los agentes agreguen una insignia \\\"con tecnología de dsh\\\" a documentos, solicitudes de extracción y otros resultados.\",\"fr\":\"Laissez les agents ajouter un badge « propulsé par dsh » aux documents, demandes d'extraction et autres sorties.\",\"ja\":\"エージェントが文書や PR などの成果物に「powered by dsh」バッジを追加できます。\",\"pt\":\"Permita que os agentes adicionem um selo “powered by dsh” a documentos, pull requests e outros resultados.\",\"ru\":\"Позвольте агентам добавлять значок «Powered by dsh» к документам, запросам на включение и другим результатам.\",\"zh\":\"让 Agent 为文档、PR 等产出添加「powered by dsh」徽章。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-ralph-bundle\",\"title\":{\"en\":\"Ralph loops\",\"de\":\"Ralph-Loops\",\"es\":\"Bucles de Ralph\",\"fr\":\"Boucles Ralph\",\"ja\":\"Ralph ループ\",\"pt\":\"Loops de Ralph\",\"ru\":\"Ральф петли\",\"zh\":\"Ralph 循环\"},\"description\":{\"en\":\"Ask for a Ralph loop with a goal, and the agent starts a fresh agent on it round after round until the goal is met, a blocker is reported, or the round limit is reached.\",\"de\":\"Bitten Sie um eine Ralph-Schleife mit einem Ziel, und der Agent startet Runde um Runde einen neuen Agenten darauf, bis das Ziel erreicht ist, ein Hindernis gemeldet wird oder das Rundenlimit erreicht ist.\",\"es\":\"Pida un bucle Ralph con un objetivo, y el agente inicia un agente nuevo sobre él ronda tras ronda hasta que se cumpla el objetivo, se informe de un bloqueo o se alcance el límite de rondas.\",\"fr\":\"Demandez une boucle Ralph avec un objectif, et l'agent lance un nouvel agent dessus, tour après tour, jusqu'à ce que l'objectif soit atteint, qu'un blocage soit signalé ou que la limite de tours soit atteinte.\",\"ja\":\"目標を指定して Ralph ループを依頼すると、エージェントは、目標が達成されるか、阻害要因が報告されるか、ラウンド数の上限に達するまで、ラウンドごとに新しいエージェントを起動してその目標に取り組ませます。\",\"pt\":\"Peça um loop Ralph com um objetivo, e o agente inicia um novo agente nele rodada após rodada até que o objetivo seja atingido, um bloqueio seja informado ou o limite de rodadas seja alcançado.\",\"ru\":\"Попросите запустить цикл Ralph с целью, и агент будет раунд за раундом запускать для неё нового агента, пока цель не будет достигнута, не будет сообщено о препятствии или не будет достигнут лимит раундов.\",\"zh\":\"要求用 Ralph 循环完成一个目标后，智能体会一轮接一轮地启动新的智能体处理它，直到目标达成、报告受阻或达到轮次上限。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-session-titles-bundle\",\"title\":{\"en\":\"Conversation-following titles\",\"de\":\"Konversationsfolgende Titel\",\"es\":\"Títulos que siguen la conversación\",\"fr\":\"Titres de suivi de conversation\",\"ja\":\"会話に追従するタイトル\",\"pt\":\"Títulos que acompanham conversas\",\"ru\":\"Заголовки, следующие за разговором\",\"zh\":\"随对话更新的标题\"},\"description\":{\"en\":\"Writes a session's title from all of your messages and updates it when the main task changes, instead of only from the first message.\",\"de\":\"Erstellt den Titel einer Sitzung aus all Ihren Nachrichten und aktualisiert ihn, wenn sich die Hauptaufgabe ändert, statt ihn nur aus der ersten Nachricht zu bilden.\",\"es\":\"Escribe el título de una sesión a partir de todos sus mensajes y lo actualiza cuando cambia la tarea principal, en lugar de basarse solo en el primer mensaje.\",\"fr\":\"Rédige le titre d'une session à partir de tous vos messages et le met à jour lorsque la tâche principale change, au lieu de se baser uniquement sur le premier message.\",\"ja\":\"最初のメッセージだけでなく、あなたのすべてのメッセージからセッションのタイトルを作成し、主なタスクが変わったときに更新します。\",\"pt\":\"Escreve o título de uma sessão a partir de todas as suas mensagens e o atualiza quando a tarefa principal muda, em vez de usar apenas a primeira mensagem.\",\"ru\":\"Составляет заголовок сеанса по всем вашим сообщениям и обновляет его при смене основной задачи, а не только по первому сообщению.\",\"zh\":\"根据你的所有消息生成会话标题，并在主要任务变化时更新，而不是只根据第一条消息生成。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-terminal-bundle\",\"title\":{\"en\":\"Persistent terminals\",\"de\":\"Persistente Terminals\",\"es\":\"Terminales persistentes\",\"fr\":\"Terminaux persistants\",\"ja\":\"永続ターミナル\",\"pt\":\"Terminais persistentes\",\"ru\":\"Постоянные терминалы\",\"zh\":\"持久终端\"},\"description\":{\"en\":\"Gives the agent terminals whose processes keep running in the background between tool calls, so it can start a dev server or REPL and come back later to read output or type input.\",\"de\":\"Stellt dem Agenten Terminals bereit, deren Prozesse zwischen Tool-Aufrufen im Hintergrund weiterlaufen, sodass er einen Entwicklungsserver oder eine REPL starten und später zurückkehren kann, um Ausgaben zu lesen oder Eingaben zu tippen.\",\"es\":\"Proporciona al agente terminales cuyos procesos siguen ejecutándose en segundo plano entre llamadas a herramientas, de modo que puede iniciar un servidor de desarrollo o un REPL y volver más tarde para leer la salida o escribir entradas.\",\"fr\":\"Fournit à l'agent des terminaux dont les processus continuent de s'exécuter en arrière-plan d'un appel d'outil à l'autre, afin qu'il puisse lancer un serveur de développement ou un REPL et revenir plus tard lire la sortie ou saisir des entrées.\",\"ja\":\"エージェントにターミナルを提供します。プロセスはツール呼び出し間もバックグラウンドで実行され続けるため、エージェントは開発サーバーや REPL を起動し、後から出力を読んだり入力したりできます。\",\"pt\":\"Fornece ao agente terminais cujos processos continuam em execução em segundo plano entre chamadas de ferramentas, para que ele possa iniciar um servidor de desenvolvimento ou um REPL e voltar depois para ler a saída ou digitar entradas.\",\"ru\":\"Предоставляет агенту терминалы, процессы которых продолжают работать в фоне между вызовами инструментов, поэтому агент может запустить сервер разработки или REPL и позже вернуться, чтобы прочитать вывод или ввести данные.\",\"zh\":\"为智能体提供终端，进程在多次工具调用之间持续在后台运行，因此它可以启动开发服务器或 REPL，稍后再读取输出或继续输入。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-liveshare\",\"title\":{\"en\":\"LiveShare Session Sharing\",\"de\":\"LiveShare-Sitzungsfreigabe\",\"es\":\"Compartir sesión de LiveShare\",\"fr\":\"Partage de session LiveShare\",\"ja\":\"LiveShare セッション共有\",\"pt\":\"Compartilhamento de sessão do LiveShare\",\"ru\":\"Совместный доступ к сеансу LiveShare\",\"zh\":\"LiveShare 会话分享\"},\"description\":{\"en\":\"Share the current Session with a colleague, who can drive it in a browser, edit files inside the granted workspace when the share allows writes, or branch their own Session from the completed history.\",\"de\":\"Teilt die aktuelle Sitzung mit einer Kollegin oder einem Kollegen, die oder der sie im Browser bedienen, bei erlaubten Schreibzugriffen Dateien im freigegebenen Arbeitsbereich bearbeiten oder aus der abgeschlossenen Historie eine eigene Sitzung abzweigen kann.\",\"es\":\"Comparte la sesión actual con un compañero, que puede dirigirla en un navegador, editar archivos dentro del espacio de trabajo concedido cuando el recurso compartido permite escritura, o crear su propia sesión a partir del historial completado.\",\"fr\":\"Partagez la session en cours avec un collègue, qui peut la piloter dans un navigateur, modifier des fichiers dans l'espace de travail accordé lorsque le partage autorise l'écriture, ou créer sa propre session à partir de l'historique terminé.\",\"ja\":\"現在のセッションを同僚と共有し、ブラウザから操作してもらう、共有が書き込みを許可する場合は付与されたワークスペース内のファイルを編集してもらう、または完了した履歴から自分のセッションを分岐してもらえます。\",\"pt\":\"Compartilhe a sessão atual com um colega, que pode conduzi-la no navegador, editar arquivos dentro do espaço de trabalho concedido quando o compartilhamento permite escrita, ou ramificar a própria sessão a partir do histórico concluído.\",\"ru\":\"Поделитесь текущим сеансом с коллегой: он сможет управлять им в браузере, редактировать файлы в предоставленном рабочем пространстве, если общий доступ разрешает запись, или ответвить собственный сеанс из завершённой истории.\",\"zh\":\"把当前会话分享给同事，对方可在浏览器中驱动该会话、在分享允许写入时修改授权工作区内的文件，或从已完成历史分支出自己的会话。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-session-search\",\"title\":{\"en\":\"Session search\",\"de\":\"Sitzungssuche\",\"es\":\"búsqueda de sesión\",\"fr\":\"Recherche de sessions\",\"ja\":\"セッション検索\",\"pt\":\"Pesquisa de sessão\",\"ru\":\"Поиск сеанса\",\"zh\":\"会话搜索\"},\"description\":{\"en\":\"Ask about earlier work, such as “How did we fix the pool leak last week?”, and the agent searches your earlier sessions in the same workspace to answer.\",\"de\":\"Fragen Sie nach früherer Arbeit, etwa „Wie haben wir letzte Woche das Pool-Leck behoben?“, und der Agent durchsucht Ihre früheren Sitzungen aus demselben Arbeitsverzeichnis, um zu antworten.\",\"es\":\"Pregunte por trabajo anterior, como “¿Cómo arreglamos la fuga del pool la semana pasada?”, y el agente busca en sus sesiones anteriores del mismo directorio de trabajo para responder.\",\"fr\":\"Posez une question sur un travail antérieur, par exemple « Comment avons-nous corrigé la fuite du pool la semaine dernière ? », et l'agent recherche dans vos sessions antérieures du même répertoire de travail pour répondre.\",\"ja\":\"「先週プールのリークをどう直した？」のように以前の作業について尋ねると、エージェントは同じ作業ディレクトリの過去のセッションを検索して回答します。\",\"pt\":\"Pergunte sobre trabalhos anteriores, como “Como corrigimos o vazamento do pool na semana passada?”, e o agente pesquisa suas sessões anteriores do mesmo diretório de trabalho para responder.\",\"ru\":\"Спросите о прошлой работе, например «Как мы исправили утечку в пуле на прошлой неделе?», и агент выполнит поиск по вашим прошлым сеансам из того же рабочего каталога, чтобы ответить.\",\"zh\":\"询问以往的工作，例如“上周我们是怎么修好连接池泄漏的？”，智能体会搜索同一工作区的历史会话来回答。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-tool-worktree\",\"title\":{\"en\":\"Git worktrees\",\"de\":\"Git-Arbeitsbäume\",\"es\":\"árboles de trabajo de git\",\"fr\":\"Arbres de travail Git\",\"ja\":\"Git ワークツリー\",\"pt\":\"Árvores de trabalho Git\",\"ru\":\"Рабочие деревья Git\",\"zh\":\"Git 工作树\"},\"description\":{\"en\":\"Ask for work on a new branch, and the agent creates a separate Git worktree and continues there, leaving your current checkout as it is.\",\"de\":\"Bitten Sie um Arbeit auf einem neuen Branch, und der Agent erstellt einen separaten Git-Worktree und arbeitet dort weiter, während Ihr aktueller Checkout unverändert bleibt.\",\"es\":\"Pida trabajar en una rama nueva, y el agente crea un worktree de Git independiente y continúa allí, dejando su checkout actual tal como está.\",\"fr\":\"Demandez à travailler sur une nouvelle branche, et l'agent crée un worktree Git distinct et y poursuit le travail, en laissant votre copie de travail actuelle telle quelle.\",\"ja\":\"新しいブランチでの作業を依頼すると、エージェントは別の Git ワークツリーを作成してそこで作業を続け、現在のチェックアウトはそのまま残します。\",\"pt\":\"Peça para trabalhar em um novo branch, e o agente cria um worktree do Git separado e continua lá, deixando seu checkout atual como está.\",\"ru\":\"Попросите поработать в новой ветке, и агент создаст отдельное рабочее дерево Git и продолжит работу там, оставив вашу текущую рабочую копию как есть.\",\"zh\":\"要求在新分支上工作时，智能体会创建单独的 Git 工作树并在其中继续，你当前的工作树保持原样。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-plugin-market-bundle\",\"title\":{\"en\":\"Custom plugin indexes\",\"de\":\"Benutzerdefinierte Plugin-Indizes\",\"es\":\"Índices de complementos personalizados\",\"fr\":\"Index de plugins personnalisés\",\"ja\":\"カスタムプラグインインデックス\",\"pt\":\"Índices de plug-ins personalizados\",\"ru\":\"Пользовательские индексы плагинов\",\"zh\":\"自定义插件索引\"},\"description\":{\"en\":\"Adds a Discover tab to Plugins, where you browse and install plugins from plugin indexes you add.\",\"de\":\"Fügt unter „Plugins“ den Tab „Entdecken“ hinzu, in dem Sie Plugins aus von Ihnen hinzugefügten Plugin-Indizes durchsuchen und installieren.\",\"es\":\"Añade la pestaña “Descubrir” a “Complementos”, donde puede explorar e instalar complementos de los índices de complementos que agregue.\",\"fr\":\"Ajoute à « Plugins » un onglet « Découvrez » où vous parcourez et installez des plugins provenant des index de plugins que vous ajoutez.\",\"ja\":\"「プラグイン」に「見つける」タブを追加し、追加したプラグインインデックスからプラグインを閲覧・インストールできるようにします。\",\"pt\":\"Adiciona a guia “Descubra” a “Plug-ins”, onde você navega e instala plug-ins dos índices de plug-ins que adiciona.\",\"ru\":\"Добавляет в «Плагины» вкладку «Откройте для себя», где можно просматривать и устанавливать плагины из добавленных вами индексов плагинов.\",\"zh\":\"在插件页添加“发现”标签页，从你添加的插件索引中浏览和安装插件。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-forge-bundle\",\"title\":{\"en\":\"Change requests & worktrees\",\"de\":\"Änderungsanfragen und Arbeitsbäume\",\"es\":\"Solicitudes de cambio y árboles de trabajo\",\"fr\":\"Demandes de modification et arbres de travail\",\"ja\":\"変更リクエストとワークツリー\",\"pt\":\"Solicitações de alteração e árvores de trabalho\",\"ru\":\"Запросы на изменение и рабочие деревья\",\"zh\":\"变更请求与工作树\"},\"description\":{\"en\":\"Track each Session's change requests with their checks and reviews, and start new Sessions in a Git worktree; uses the gh CLI for GitHub.\",\"de\":\"Verfolgen Sie die Änderungsanfragen jeder Sitzung mit ihren Prüfungen und Reviews und starten Sie neue Sitzungen in einem Git-Arbeitsbaum; nutzt die gh CLI für GitHub.\",\"es\":\"Siga las solicitudes de cambio de cada sesión con sus comprobaciones y revisiones, e inicie nuevas sesiones en un árbol de trabajo de Git; usa la CLI gh para GitHub.\",\"fr\":\"Suivez les demandes de modification de chaque session avec leurs vérifications et revues, et démarrez de nouvelles sessions dans un arbre de travail Git ; utilise la CLI gh pour GitHub.\",\"ja\":\"各セッションの変更リクエストとそのチェックやレビューを追跡し、新しいセッションを Git ワークツリーで開始できます。GitHub には gh CLI を使用します。\",\"pt\":\"Acompanhe as solicitações de alteração de cada sessão com suas verificações e revisões e inicie novas sessões em uma árvore de trabalho Git; usa a CLI gh para o GitHub.\",\"ru\":\"Отслеживайте запросы на изменение каждого сеанса вместе с их проверками и ревью и начинайте новые сеансы в рабочем дереве Git; для GitHub используется gh CLI.\",\"zh\":\"跟踪每个会话的变更请求及其检查与评审，新会话也可以在 Git 工作树中开始；GitHub 通过 gh 命令行访问。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-subagent-claude-code\",\"title\":{\"de\":\"Claude Code-Subagent\",\"en\":\"Claude Code subagent\",\"es\":\"Subagente Claude Code\",\"fr\":\"Sous-agent Claude Code\",\"ja\":\"Claude Code サブエージェント\",\"pt\":\"Claude Code subagente\",\"ru\":\"Субагент Claude Code\",\"zh\":\"Claude Code 子智能体\"},\"description\":{\"de\":\"Delegieren Sie eine Aufgabe an Claude Code, indem Sie dessen native Authentifizierung und Einstellungen verwenden.\",\"en\":\"Delegate one task to Claude Code using its native authentication and settings.\",\"es\":\"Delegue una tarea a Claude Code utilizando su autenticación y configuración nativas.\",\"fr\":\"Déléguez une tâche à Claude Code à l’aide de son authentification et de ses paramètres natifs.\",\"ja\":\"Claude Code のネイティブの認証と設定を使用して、単独のタスクを委派します。\",\"pt\":\"Delegue uma tarefa a Claude Code usando sua autenticação e configurações nativas.\",\"ru\":\"Делегируйте одну задачу Claude Code, используя его встроенную аутентификацию и настройки.\",\"zh\":\"使用 Claude Code 原生认证和设置委派单个任务。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-subagent-codex\",\"title\":{\"de\":\"Codex-Subagent\",\"en\":\"Codex subagent\",\"es\":\"Subagente Codex\",\"fr\":\"Sous-agent Codex\",\"ja\":\"Codex サブエージェント\",\"pt\":\"Codex subagente\",\"ru\":\"Субагент Codex\",\"zh\":\"Codex 子智能体\"},\"description\":{\"de\":\"Delegieren Sie eine Aufgabe an Codex, indem Sie dessen native Authentifizierung und Einstellungen verwenden.\",\"en\":\"Delegate one task to Codex using its native authentication and settings.\",\"es\":\"Delegue una tarea a Codex utilizando su autenticación y configuración nativas.\",\"fr\":\"Déléguez une tâche à Codex à l’aide de son authentification et de ses paramètres natifs.\",\"ja\":\"Codex のネイティブの認証と設定を使用して、単独のタスクを委派します。\",\"pt\":\"Delegue uma tarefa a Codex usando sua autenticação e configurações nativas.\",\"ru\":\"Делегируйте одну задачу Codex, используя его встроенную аутентификацию и настройки.\",\"zh\":\"使用 Codex 原生认证和设置委派单个任务。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-cua-bundle\",\"title\":{\"de\":\"Computernutzung\",\"en\":\"Computer use\",\"es\":\"Uso de la computadora\",\"fr\":\"Utilisation de l'ordinateur\",\"ja\":\"Computer Use\",\"pt\":\"Uso do computador\",\"ru\":\"Использование компьютера\",\"zh\":\"Computer Use\"},\"description\":{\"de\":\"Unterstützt derzeit macOS; Die Windows-Unterstützung befindet sich in der Entwicklung. Lädt die Computernutzung für bestehende und neue PTC-Sitzungen. Wechseln Sie in den PTC-Modus und erteilen Sie die Berechtigungen für Barrierefreiheit und Bildschirmaufzeichnung, um ihn zu verwenden.\",\"en\":\"Currently supports macOS; Windows support is in development. Loads computer use for existing and new PTC sessions. Switch to PTC mode and grant Accessibility and Screen Recording permissions to use it.\",\"es\":\"Actualmente es compatible con macOS; El soporte para Windows está en desarrollo. Carga el uso de la computadora para sesiones PTC nuevas y existentes. Cambie al modo PTC y otorgue permisos de Accesibilidad y Grabación de pantalla para usarlo.\",\"fr\":\"Prend actuellement en charge macOS ; La prise en charge de Windows est en cours de développement. Charge l'utilisation de l'ordinateur pour les sessions PTC existantes et nouvelles. Passez en mode PTC et accordez les autorisations d’accessibilité et d’enregistrement d’écran pour l’utiliser.\",\"ja\":\"現在は macOS のみ対応し、Windows 対応は開発中です。既存および新規の PTC セッションに Computer Use を読み込みます。PTC モードに切り替え、アクセシビリティと画面収録の権限を許可して使用してください。\",\"pt\":\"Atualmente suporta macOS; O suporte Windows está em desenvolvimento. Carrega o uso do computador para sessões PTC novas e existentes. Mude para o modo PTC e conceda permissões de acessibilidade e gravação de tela para usá-lo.\",\"ru\":\"В настоящее время поддерживается macOS; Поддержка Windows находится в разработке. Загружает использование компьютера для существующих и новых сеансов PTC. Переключитесь в режим PTC и предоставьте разрешения на доступность и запись экрана для его использования.\",\"zh\":\"目前仅支持 macOS，Windows 支持正在开发中。为已有及新建 PTC 会话加载 Computer Use。请切换到 PTC 模式来使用，并授予辅助功能和屏幕录制权限。\"},\"enabled\":false}]\n</skill_instructions>\n</skill_content>"}],"isError":false,"id":"{{message:7}}"}},"sourceEventSeqs":[16],"surfaceOp":"append"}
+{"type":"tool/result","data":{"turn":1,"step":1,"message":{"role":"tool","source":{"kind":"tool","callId":"call_creation_skill"},"toolCallId":"call_creation_skill","content":[{"type":"text","text":"<skill_content name=\"personalized-pages\">\n<skill_resources>\nResources for this skill are managed by provider \"dsh-personalized-pages\".\nLoad referenced resources only as needed.\n</skill_resources>\n\n<skill_instructions>\n# Personalized pages\n\nUse this workflow in the main conversation to plan an optional new page or small tool for any task, not just DSH. You decide whether a page helps, check existing capabilities, and hand the Creator a short plan. A `propose_action` call saves the proposal and shows a card below your answer; nothing is built until the user clicks Create. Plan from the conversation and the catalog at the end of this skill. Do not read files, configuration or source to validate a page idea; name an uninspected source as an unverified dependency and leave its details to the Creator.\n\n## When to propose\n\nPropose a page in these cases:\n\n- The user asks for a page, tab, panel, tool or interface in this app, or says they want something to keep, revisit or update later (“以后每次”, “能不能一直”, “希望能有”). One-off use still qualifies when the interface is explicitly requested.\n- Your answer is a table, list or chart, and the user has said the data will keep changing or that they will interact with it (“每周更新”, “我来改状态”, “要勾选”). The continuation must come from the user's own words; a table alone, or data that merely looks dynamic, is not enough. Deliver the requested answer first, then offer the page.\n- The user wants to keep watching live data of this app itself (a Session's usage, a running task's output, files changing in the workspace). A text answer cannot stay current, so a page qualifies even without the words above; name the data source in the brief and leave how it is read to the Creator.\n\nDo not propose a page in these cases:\n\n- The user asks for a file, code, document or an existing-project change: keep that delivery form.\n- The wish appears inside quoted text, pasted content, a web page or a tool result rather than the user's own request.\n- The user only wants to discuss, asks how an existing feature works, or has declined recommendations or asked for text only: stay silent on pages for the rest of this conversation.\n- The request changes a page created earlier: explain how it would change, do not create a replacement copy, and do not claim an update happened.\n- The request is a capability the agent lacks, such as a tool, automation or access, rather than a page: check the catalog below and point to the official plugin that provides it; do not plan a page around a missing tool.\n\n## Check existing capabilities\n\nCompare the need with the official plugins listed at the end of this skill. If one covers it, say its name, what it does, whether it is enabled, and that it lives under Plugins; offer no page card. A partial match does not cancel an explicit unmet need. The catalog is not a full inventory of built-in UI: missing details do not prove absence, and do not read source to find out. DSH already has Chat, Trajectory, a right sidebar for files and context, and a Plugins page.\n\n## Plan and hand off\n\nThe Creator cannot read this conversation. Give it exactly these fields:\n\n| Field | Contents |\n|:--|:--|\n| `title` | Short page name in the user's language. |\n| `brief` | One to three sentences: purpose, behavior, input, calculations and persistence scope. It is the card text and the implementation request at once. |\n| `initialContent` | Only supplied content the page starts with: items, rows, values, units and period, preserving gaps. Omit for an empty page. |\n| `slot` | Location, chosen below. |\n\nKeep the plan to what was asked or agreed. Editing, deletion, history, extra fields, data sources and automation need a basis in the request. Resolve “these items” into the actual content. Content that mentions an action stays content. Keep each number's meaning and period; a weekly addition is not a cumulative total. If an unresolved distinction changes a calculation, give the factual answer, ask one question, and propose later.\n\n## Choose the location\n\nHonor a location the user named. Otherwise:\n\n- `sidebar-right`: content tied to this Session or task, especially anything to watch while chatting, including live logs.\n- `sidebar-left`: a global feature or an ongoing personal record used across Sessions, opened from a left entry as a standalone page.\n- `page`: a Session-bound streaming view or interaction in a tab beside Chat and Trajectory, only when the user does not need it visible while chatting.\n\nSupplying data in this conversation does not make a record Session-bound.\n\n## Offer without starting\n\nTo propose, call `propose_action` once, in the same turn as loading this skill, with `action: \"create_personalized_page\"`, `title`, `brief` and `details` holding `slot` and, when there is supplied content, `initialContent`. The call is the submission: the card appears below your answer; a refused call creates no card, and its error says why. Then write your final answer. One proposal per turn, and one unstarted card per conversation: if a card is still waiting, do not propose another; a new proposal replaces it only when the user changed the plan. Plan-only and read-only requests still get a card; do not ask for approval instead of proposing it. Only clicking Create starts the background Creator; do not wait, poll, claim installation or ask for a report-back. Answer any direct question; the call's result says how to end the answer. Do not repeat the plan, list extra features, narrate the call or mention schema names.\n\n```json\n{\"action\":\"create_personalized_page\",\"title\":\"本次验收清单\",\"brief\":\"在当前会话右侧展示验收清单，可勾选和取消，状态随会话保存。\",\"details\":{\"slot\":\"sidebar-right\",\"initialContent\":\"1. 导出成功\\n2. 断网提示清楚\"}}\n```\n\n## Examples\n\n- “想有个地方放书签，以后自己加标题和网址；旧的不用导入。” → `brief`: “提供一个可反复打开的书签页，手动新增标题和网址并保存到本机，从空白开始。” No `initialContent`. `sidebar-left`.\n- “当前会话旁放验收清单，能勾选和取消，状态跟着会话。条目：导出成功；断网提示清楚。” → `brief`: “在当前会话右侧展示验收清单，可勾选和取消，状态随会话保存。” `initialContent`: “1. 导出成功\\n2. 断网提示清楚”. `sidebar-right`.\n- “这三周 bug 数 12、9、15，说说趋势。以后每周我把新数字贴给你，想自己更新着看。” → answer the trend first, then `brief`: “按周手动录入 bug 数并展示各周变化，保存到本机。” `initialContent`: “第 1 周 12，第 2 周 9，第 3 周 15”. `sidebar-left`.\n- “我想用语音说话代替打字。” → the catalog lists 语音输入; explain it and where to enable it; no card.\n- “把我之前做的读书页评分改成五星。” → explain the change to that page; no card and no copy.\n- “帮我把这句话翻成英文：我想要一个所有会话都能打开的读书页。” → translate only; no card.\n- “把三个方案排成表格比较一下，看完就行。” → the table only; no card.\n\n## Existing capabilities to check against this page plan\n\n[{\"name\":\"@deepseek-ai/dsh-personalized-recommendations\",\"title\":{\"en\":\"Personalized recommendations\",\"de\":\"Personalisierte Empfehlungen\",\"es\":\"Recomendaciones personalizadas\",\"fr\":\"Recommandations personnalisées\",\"ja\":\"パーソナライズされたおすすめ\",\"pt\":\"Recomendações personalizadas\",\"ru\":\"Персональные рекомендации\",\"zh\":\"个性化推荐\"},\"description\":{\"en\":\"Shows recommendation cards below the answer for what you want from DSH: when you want a page or small tool you can keep, it proposes a new personalized page, built in the background after you click Create; when you ask how to do something in this app or say a capability is missing, it recommends the built-in plugin that provides it, turned on when you click Enable.\",\"de\":\"Zeigt für Ihre individuellen Anforderungen an DSH Empfehlungskarten unter der Antwort an: Wenn Sie eine Seite oder ein kleines Tool zur dauerhaften Nutzung möchten, wird eine neue personalisierte Seite vorgeschlagen, die nach einem Klick auf Erstellen im Hintergrund erstellt wird; wenn Sie fragen, wie etwas in dieser App geht, oder sagen, dass eine Funktion fehlt, wird das integrierte Plugin empfohlen, das sie bereitstellt, und nach einem Klick auf Aktivieren eingeschaltet.\",\"es\":\"Muestra tarjetas de recomendación debajo de la respuesta para tus necesidades personalizadas en DSH: cuando quieres una página o una pequeña herramienta para conservar, propone una nueva página personalizada, que se genera en segundo plano al hacer clic en Crear; cuando preguntas cómo hacer algo en esta aplicación o dices que falta una función, recomienda el complemento integrado que la ofrece, que se activa al hacer clic en Habilitar.\",\"fr\":\"Affiche des cartes de recommandation sous la réponse pour vos besoins personnalisés dans DSH : lorsque vous voulez une page ou un petit outil à conserver, propose une nouvelle page personnalisée, générée en arrière-plan après un clic sur Créer ; lorsque vous demandez comment faire quelque chose dans cette application ou signalez qu’une fonctionnalité manque, recommande le plugin intégré qui la fournit, activé lorsque vous cliquez sur Activer.\",\"ja\":\"DSH に対するあなた個人のニーズに合わせて、回答の下におすすめカードを表示します。長く使えるページや小さなツールが欲しいときは新しいパーソナルページを提案し、「作成」をクリックするとバックグラウンドで生成します。このアプリで何かをする方法を尋ねたときや機能が足りないと言ったときは、それを提供する内蔵プラグインを推薦し、「有効にする」をクリックすると有効になります。\",\"pt\":\"Mostra cartões de recomendação abaixo da resposta para suas necessidades personalizadas no DSH: quando você quer uma página ou uma pequena ferramenta para manter, propõe uma nova página personalizada, gerada em segundo plano depois que você clica em Criar; quando você pergunta como fazer algo neste aplicativo ou diz que falta um recurso, recomenda o plug-in integrado que o oferece, ativado quando você clica em Ativar.\",\"ru\":\"Показывает карточки рекомендаций под ответом с учетом ваших индивидуальных потребностей в DSH: когда вам нужна страница или небольшой инструмент для постоянного использования, предлагает новую персональную страницу, которая создается в фоне после нажатия «Создать»; когда вы спрашиваете, как что-то сделать в этом приложении, или говорите, что не хватает какой-то возможности, рекомендует встроенный плагин, который ее предоставляет, и включает его после нажатия «Включить».\",\"zh\":\"针对你对 DSH 的个性化需求，在回答下方展示推荐卡片：想要能长期使用的页面或小工具时，提议新增个性化页面，点击创建后在后台生成；问到本应用怎么做某件事或缺少某项能力时，推荐对应的内置插件，点击启用后开启。\"},\"enabled\":true},{\"name\":\"@deepseek-ai/dsh-experimental-agent-team-profile\",\"title\":{\"en\":\"Agent teams\",\"de\":\"Agententeams\",\"es\":\"Equipos de agentes\",\"fr\":\"Équipes d'agents\",\"ja\":\"エージェントチーム\",\"pt\":\"Equipes de agentes\",\"ru\":\"Команды агентов\",\"zh\":\"智能体团队\"},\"description\":{\"en\":\"Lets the agent you talk to split a job among named teammates, track it on a shared task board, and report back with their results.\",\"de\":\"Ermöglicht dem Agenten, mit dem Sie sprechen, eine Aufgabe auf benannte Teammitglieder aufzuteilen, sie auf einem gemeinsamen Aufgabenboard zu verfolgen und Ihnen mit deren Ergebnissen zu berichten.\",\"es\":\"Permite que el agente con el que habla reparta un trabajo entre compañeros con nombre, lo siga en un tablero de tareas compartido y le informe con sus resultados.\",\"fr\":\"Permet à l'agent avec lequel vous parlez de répartir un travail entre des coéquipiers nommés, de le suivre sur un tableau de tâches partagé et de vous rendre compte de leurs résultats.\",\"ja\":\"対話しているエージェントが、仕事を名前付きのチームメイトに分担させ、共有タスクボードで進捗を追跡し、チームメイトの結果をまとめて報告します。\",\"pt\":\"Permite que o agente com quem você conversa divida um trabalho entre colegas de equipe nomeados, acompanhe-o em um quadro de tarefas compartilhado e informe você com os resultados deles.\",\"ru\":\"Позволяет агенту, с которым вы общаетесь, распределить работу между именованными участниками команды, отслеживать её на общей доске задач и отчитываться перед вами об их результатах.\",\"zh\":\"让与你对话的智能体把工作分给有名字的队友，在共享任务看板上跟踪进度，并汇总队友的结果向你汇报。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-inspector-profile\",\"title\":{\"en\":\"Developer tools\",\"de\":\"Entwicklertools\",\"es\":\"Herramientas de desarrollador\",\"fr\":\"Outils de développement\",\"ja\":\"開発者ツール\",\"pt\":\"Ferramentas de desenvolvedor\",\"ru\":\"Инструменты разработчика\",\"zh\":\"开发者工具\"},\"description\":{\"en\":\"For troubleshooting: view what DSH recorded for a session in Session log, inspect per-turn and per-step statistics in the Statistics tab, and debug the DSH backend in Chrome DevTools.\",\"de\":\"Zur Fehlersuche: Sehen Sie in „Sitzungsprotokoll“, was DSH für eine Sitzung aufgezeichnet hat, prüfen Sie im Tab „Statistik“ Kontext, Dauer, Cache und Werkzeugkosten pro Runde und Schritt und debuggen Sie das DSH-Backend in Chrome DevTools.\",\"es\":\"Para solucionar problemas: vea en «Registro de sesión» lo que DSH registró de una sesión, consulte el contexto, los tiempos, la caché y el coste de herramientas por turno y paso en la pestaña «Estadísticas», y depure el backend de DSH en Chrome DevTools.\",\"fr\":\"Pour le dépannage : consultez dans « Journal de session » ce que DSH a enregistré pour une session, examinez le contexte, les durées, le cache et le coût des outils par tour et étape dans l’onglet « Statistiques », et déboguez le backend de DSH dans Chrome DevTools.\",\"ja\":\"トラブルシューティング用です。「セッションログ」で DSH がセッションについて記録した内容を確認し、「統計」タブでターン/ステップごとのコンテキスト、時間、キャッシュ、ツールコストを確認し、Chrome DevTools で DSH バックエンドをデバッグできます。\",\"pt\":\"Para solução de problemas: veja em «Registro da sessão» o que o DSH registrou de uma sessão, consulte contexto, tempos, cache e custo de ferramentas por turno e etapa na aba «Estatísticas» e depure o backend do DSH no Chrome DevTools.\",\"ru\":\"Для диагностики: просматривайте в «Журнале сеанса», что DSH записал для сеанса, смотрите контекст, время, кэш и стоимость инструментов по ходам и шагам на вкладке «Статистика» и отлаживайте бэкенд DSH в Chrome DevTools.\",\"zh\":\"用于排查问题：在「会话数据诊断」中查看 DSH 为会话记录的内容，在「统计」页签查看每轮/每步的上下文、耗时、缓存和工具成本，并在 Chrome DevTools 中调试 DSH 后端。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-voice-input-bundle\",\"title\":{\"en\":\"Voice input\",\"de\":\"Spracheingabe\",\"es\":\"Entrada de voz\",\"fr\":\"Saisie vocale\",\"ja\":\"音声入力\",\"pt\":\"Entrada de voz\",\"ru\":\"Голосовой ввод\",\"zh\":\"语音输入\"},\"description\":{\"en\":\"Transcribe recordings locally with SenseVoice; first use requires installing dependencies.\",\"de\":\"Transkribieren Sie Aufnahmen lokal mit SenseVoice; Für die erste Verwendung müssen Abhängigkeiten installiert werden.\",\"es\":\"Transcribe grabaciones localmente con SenseVoice; El primer uso requiere instalar dependencias.\",\"fr\":\"Transcrivez les enregistrements localement avec SenseVoice ; la première utilisation nécessite l'installation de dépendances.\",\"ja\":\"ローカルの SenseVoice で録音を文字に起こします。初回利用時には依存関係のインストールが必要です。\",\"pt\":\"Transcreva gravações localmente com SenseVoice; o primeiro uso requer a instalação de dependências.\",\"ru\":\"Транскрибируйте записи локально с помощью SenseVoice; при первом использовании требуется установка зависимостей.\",\"zh\":\"在本机使用 SenseVoice 转写录音，首次使用需安装依赖。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-auto-review\",\"title\":{\"en\":\"Auto authorization review\",\"de\":\"Automatische Autorisierungsüberprüfung\",\"es\":\"Revisión de autorización automática\",\"fr\":\"Examen des autorisations automatiques\",\"ja\":\"自動認可レビュー\",\"pt\":\"Revisão de autorização automática\",\"ru\":\"Проверка автоматической авторизации\",\"zh\":\"自动授权审查\"},\"description\":{\"en\":\"Adds an Auto review access mode: before each tool call, a model checks it against what you asked for, runs allowed calls at once, and holds denied calls for your approval.\",\"de\":\"Fügt den Zugriffsmodus „Auto review“ hinzu: Vor jedem Tool-Aufruf prüft ein Modell den Aufruf anhand Ihrer Anforderung; zugelassene Aufrufe laufen sofort, abgelehnte Aufrufe warten auf Ihre Genehmigung.\",\"es\":\"Añade el modo de acceso “Auto review”: antes de cada llamada a una herramienta, un modelo comprueba la llamada frente a lo que usted pidió; las llamadas permitidas se ejecutan de inmediato y las denegadas esperan su aprobación.\",\"fr\":\"Ajoute le mode d'accès « Auto review » : avant chaque appel d'outil, un modèle vérifie l'appel par rapport à ce que vous avez demandé ; les appels autorisés s'exécutent immédiatement et les appels refusés attendent votre approbation.\",\"ja\":\"「自動認可レビュー」アクセスモードを追加します。各ツール呼び出しの前に、モデルがその呼び出しをあなたの依頼内容と照らし合わせて確認し、許可された呼び出しは即座に実行され、拒否された呼び出しはあなたの承認を待ちます。\",\"pt\":\"Adiciona o modo de acesso “Auto review”: antes de cada chamada de ferramenta, um modelo verifica a chamada em relação ao que você pediu; as chamadas permitidas são executadas imediatamente e as negadas aguardam sua aprovação.\",\"ru\":\"Добавляет режим доступа «Auto review»: перед каждым вызовом инструмента модель сверяет вызов с вашей просьбой; разрешённые вызовы выполняются сразу, а отклонённые ждут вашего одобрения.\",\"zh\":\"提供“自动审查”访问模式：每次工具调用前，由模型对照你的要求检查，获准的调用立即运行，被拒绝的调用等你审批。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-cot-translation-bundle\",\"title\":{\"en\":\"Machine translation of reasoning\",\"de\":\"Maschinelle Übersetzung der Argumentation\",\"es\":\"Traducción automática de razonamiento\",\"fr\":\"Traduction automatique du raisonnement\",\"ja\":\"思考内容の機械翻訳\",\"pt\":\"Tradução automática de raciocínio\",\"ru\":\"Машинный перевод рассуждений\",\"zh\":\"思考过程机器翻译\"},\"description\":{\"en\":\"Translates expanded Think rows into your chosen language as the agent writes them, and View original switches back.\",\"de\":\"Übersetzt aufgeklappte „Denken Sie nach“-Zeilen, während der Agent sie schreibt, in die von Ihnen gewählte Sprache, und „Original ansehen“ wechselt zurück.\",\"es\":\"Traduce las filas “pensar” expandidas al idioma que elija mientras el agente las escribe, y “Ver original” vuelve al texto original.\",\"fr\":\"Traduit les lignes « Pensez » développées dans la langue de votre choix pendant que l'agent les écrit, et « Voir l'original » permet de revenir au texte d'origine.\",\"ja\":\"エージェントが書き出すのと同時に、展開された「思考」行を選択した言語に翻訳します。「原文を表示」で原文に戻せます。\",\"pt\":\"Traduz as linhas “Pense” expandidas para o idioma que você escolher enquanto o agente as escreve, e “Ver original” volta ao texto original.\",\"ru\":\"Переводит развёрнутые строки «Подумайте» на выбранный вами язык по мере того, как агент их пишет, а «Посмотреть оригинал» возвращает исходный текст.\",\"zh\":\"智能体输出时，把展开的“思考”行翻译成你选择的语言，点击“查看原文”可切换回原文。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-badge-skill-bundle\",\"title\":{\"en\":\"DSH badge skill\",\"de\":\"DSH-Abzeichen-Fertigkeit\",\"es\":\"Habilidad de insignia DSH\",\"fr\":\"Compétence du badge DSH\",\"ja\":\"DSH バッジスキル\",\"pt\":\"DSH habilidade de distintivo\",\"ru\":\"DSH значок навыка\",\"zh\":\"DSH 徽章技能\"},\"description\":{\"en\":\"Let agents add a “powered by dsh” badge to documents, pull requests, and other outputs.\",\"de\":\"Lassen Sie Agenten Dokumente, Pull-Requests und andere Ausgaben mit einem „powered by dsh“-Badge versehen.\",\"es\":\"Permita que los agentes agreguen una insignia \\\"con tecnología de dsh\\\" a documentos, solicitudes de extracción y otros resultados.\",\"fr\":\"Laissez les agents ajouter un badge « propulsé par dsh » aux documents, demandes d'extraction et autres sorties.\",\"ja\":\"エージェントが文書や PR などの成果物に「powered by dsh」バッジを追加できます。\",\"pt\":\"Permita que os agentes adicionem um selo “powered by dsh” a documentos, pull requests e outros resultados.\",\"ru\":\"Позвольте агентам добавлять значок «Powered by dsh» к документам, запросам на включение и другим результатам.\",\"zh\":\"让 Agent 为文档、PR 等产出添加「powered by dsh」徽章。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-ralph-bundle\",\"title\":{\"en\":\"Ralph loops\",\"de\":\"Ralph-Loops\",\"es\":\"Bucles de Ralph\",\"fr\":\"Boucles Ralph\",\"ja\":\"Ralph ループ\",\"pt\":\"Loops de Ralph\",\"ru\":\"Ральф петли\",\"zh\":\"Ralph 循环\"},\"description\":{\"en\":\"Ask for a Ralph loop with a goal, and the agent starts a fresh agent on it round after round until the goal is met, a blocker is reported, or the round limit is reached.\",\"de\":\"Bitten Sie um eine Ralph-Schleife mit einem Ziel, und der Agent startet Runde um Runde einen neuen Agenten darauf, bis das Ziel erreicht ist, ein Hindernis gemeldet wird oder das Rundenlimit erreicht ist.\",\"es\":\"Pida un bucle Ralph con un objetivo, y el agente inicia un agente nuevo sobre él ronda tras ronda hasta que se cumpla el objetivo, se informe de un bloqueo o se alcance el límite de rondas.\",\"fr\":\"Demandez une boucle Ralph avec un objectif, et l'agent lance un nouvel agent dessus, tour après tour, jusqu'à ce que l'objectif soit atteint, qu'un blocage soit signalé ou que la limite de tours soit atteinte.\",\"ja\":\"目標を指定して Ralph ループを依頼すると、エージェントは、目標が達成されるか、阻害要因が報告されるか、ラウンド数の上限に達するまで、ラウンドごとに新しいエージェントを起動してその目標に取り組ませます。\",\"pt\":\"Peça um loop Ralph com um objetivo, e o agente inicia um novo agente nele rodada após rodada até que o objetivo seja atingido, um bloqueio seja informado ou o limite de rodadas seja alcançado.\",\"ru\":\"Попросите запустить цикл Ralph с целью, и агент будет раунд за раундом запускать для неё нового агента, пока цель не будет достигнута, не будет сообщено о препятствии или не будет достигнут лимит раундов.\",\"zh\":\"要求用 Ralph 循环完成一个目标后，智能体会一轮接一轮地启动新的智能体处理它，直到目标达成、报告受阻或达到轮次上限。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-session-titles-bundle\",\"title\":{\"en\":\"Conversation-following titles\",\"de\":\"Konversationsfolgende Titel\",\"es\":\"Títulos que siguen la conversación\",\"fr\":\"Titres de suivi de conversation\",\"ja\":\"会話に追従するタイトル\",\"pt\":\"Títulos que acompanham conversas\",\"ru\":\"Заголовки, следующие за разговором\",\"zh\":\"随对话更新的标题\"},\"description\":{\"en\":\"Writes a session's title from all of your messages and updates it when the main task changes, instead of only from the first message.\",\"de\":\"Erstellt den Titel einer Sitzung aus all Ihren Nachrichten und aktualisiert ihn, wenn sich die Hauptaufgabe ändert, statt ihn nur aus der ersten Nachricht zu bilden.\",\"es\":\"Escribe el título de una sesión a partir de todos sus mensajes y lo actualiza cuando cambia la tarea principal, en lugar de basarse solo en el primer mensaje.\",\"fr\":\"Rédige le titre d'une session à partir de tous vos messages et le met à jour lorsque la tâche principale change, au lieu de se baser uniquement sur le premier message.\",\"ja\":\"最初のメッセージだけでなく、あなたのすべてのメッセージからセッションのタイトルを作成し、主なタスクが変わったときに更新します。\",\"pt\":\"Escreve o título de uma sessão a partir de todas as suas mensagens e o atualiza quando a tarefa principal muda, em vez de usar apenas a primeira mensagem.\",\"ru\":\"Составляет заголовок сеанса по всем вашим сообщениям и обновляет его при смене основной задачи, а не только по первому сообщению.\",\"zh\":\"根据你的所有消息生成会话标题，并在主要任务变化时更新，而不是只根据第一条消息生成。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-terminal-bundle\",\"title\":{\"en\":\"Persistent terminals\",\"de\":\"Persistente Terminals\",\"es\":\"Terminales persistentes\",\"fr\":\"Terminaux persistants\",\"ja\":\"永続ターミナル\",\"pt\":\"Terminais persistentes\",\"ru\":\"Постоянные терминалы\",\"zh\":\"持久终端\"},\"description\":{\"en\":\"Gives the agent terminals whose processes keep running in the background between tool calls, so it can start a dev server or REPL and come back later to read output or type input.\",\"de\":\"Stellt dem Agenten Terminals bereit, deren Prozesse zwischen Tool-Aufrufen im Hintergrund weiterlaufen, sodass er einen Entwicklungsserver oder eine REPL starten und später zurückkehren kann, um Ausgaben zu lesen oder Eingaben zu tippen.\",\"es\":\"Proporciona al agente terminales cuyos procesos siguen ejecutándose en segundo plano entre llamadas a herramientas, de modo que puede iniciar un servidor de desarrollo o un REPL y volver más tarde para leer la salida o escribir entradas.\",\"fr\":\"Fournit à l'agent des terminaux dont les processus continuent de s'exécuter en arrière-plan d'un appel d'outil à l'autre, afin qu'il puisse lancer un serveur de développement ou un REPL et revenir plus tard lire la sortie ou saisir des entrées.\",\"ja\":\"エージェントにターミナルを提供します。プロセスはツール呼び出し間もバックグラウンドで実行され続けるため、エージェントは開発サーバーや REPL を起動し、後から出力を読んだり入力したりできます。\",\"pt\":\"Fornece ao agente terminais cujos processos continuam em execução em segundo plano entre chamadas de ferramentas, para que ele possa iniciar um servidor de desenvolvimento ou um REPL e voltar depois para ler a saída ou digitar entradas.\",\"ru\":\"Предоставляет агенту терминалы, процессы которых продолжают работать в фоне между вызовами инструментов, поэтому агент может запустить сервер разработки или REPL и позже вернуться, чтобы прочитать вывод или ввести данные.\",\"zh\":\"为智能体提供终端，进程在多次工具调用之间持续在后台运行，因此它可以启动开发服务器或 REPL，稍后再读取输出或继续输入。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-liveshare\",\"title\":{\"en\":\"LiveShare Session Sharing\",\"de\":\"LiveShare-Sitzungsfreigabe\",\"es\":\"Compartir sesión de LiveShare\",\"fr\":\"Partage de session LiveShare\",\"ja\":\"LiveShare セッション共有\",\"pt\":\"Compartilhamento de sessão do LiveShare\",\"ru\":\"Совместный доступ к сеансу LiveShare\",\"zh\":\"LiveShare 会话分享\"},\"description\":{\"en\":\"Share the current Session with a colleague, who can drive it in a browser, edit files inside the granted workspace when the share allows writes, or branch their own Session from the completed history.\",\"de\":\"Teilt die aktuelle Sitzung mit einer Kollegin oder einem Kollegen, die oder der sie im Browser bedienen, bei erlaubten Schreibzugriffen Dateien im freigegebenen Arbeitsbereich bearbeiten oder aus der abgeschlossenen Historie eine eigene Sitzung abzweigen kann.\",\"es\":\"Comparte la sesión actual con un compañero, que puede dirigirla en un navegador, editar archivos dentro del espacio de trabajo concedido cuando el recurso compartido permite escritura, o crear su propia sesión a partir del historial completado.\",\"fr\":\"Partagez la session en cours avec un collègue, qui peut la piloter dans un navigateur, modifier des fichiers dans l'espace de travail accordé lorsque le partage autorise l'écriture, ou créer sa propre session à partir de l'historique terminé.\",\"ja\":\"現在のセッションを同僚と共有し、ブラウザから操作してもらう、共有が書き込みを許可する場合は付与されたワークスペース内のファイルを編集してもらう、または完了した履歴から自分のセッションを分岐してもらえます。\",\"pt\":\"Compartilhe a sessão atual com um colega, que pode conduzi-la no navegador, editar arquivos dentro do espaço de trabalho concedido quando o compartilhamento permite escrita, ou ramificar a própria sessão a partir do histórico concluído.\",\"ru\":\"Поделитесь текущим сеансом с коллегой: он сможет управлять им в браузере, редактировать файлы в предоставленном рабочем пространстве, если общий доступ разрешает запись, или ответвить собственный сеанс из завершённой истории.\",\"zh\":\"把当前会话分享给同事，对方可在浏览器中驱动该会话、在分享允许写入时修改授权工作区内的文件，或从已完成历史分支出自己的会话。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-session-search\",\"title\":{\"en\":\"Session search\",\"de\":\"Sitzungssuche\",\"es\":\"búsqueda de sesión\",\"fr\":\"Recherche de sessions\",\"ja\":\"セッション検索\",\"pt\":\"Pesquisa de sessão\",\"ru\":\"Поиск сеанса\",\"zh\":\"会话搜索\"},\"description\":{\"en\":\"Ask about earlier work, such as “How did we fix the pool leak last week?”, and the agent searches your earlier sessions in the same workspace to answer.\",\"de\":\"Fragen Sie nach früherer Arbeit, etwa „Wie haben wir letzte Woche das Pool-Leck behoben?“, und der Agent durchsucht Ihre früheren Sitzungen aus demselben Arbeitsverzeichnis, um zu antworten.\",\"es\":\"Pregunte por trabajo anterior, como “¿Cómo arreglamos la fuga del pool la semana pasada?”, y el agente busca en sus sesiones anteriores del mismo directorio de trabajo para responder.\",\"fr\":\"Posez une question sur un travail antérieur, par exemple « Comment avons-nous corrigé la fuite du pool la semaine dernière ? », et l'agent recherche dans vos sessions antérieures du même répertoire de travail pour répondre.\",\"ja\":\"「先週プールのリークをどう直した？」のように以前の作業について尋ねると、エージェントは同じ作業ディレクトリの過去のセッションを検索して回答します。\",\"pt\":\"Pergunte sobre trabalhos anteriores, como “Como corrigimos o vazamento do pool na semana passada?”, e o agente pesquisa suas sessões anteriores do mesmo diretório de trabalho para responder.\",\"ru\":\"Спросите о прошлой работе, например «Как мы исправили утечку в пуле на прошлой неделе?», и агент выполнит поиск по вашим прошлым сеансам из того же рабочего каталога, чтобы ответить.\",\"zh\":\"询问以往的工作，例如“上周我们是怎么修好连接池泄漏的？”，智能体会搜索同一工作区的历史会话来回答。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-tool-worktree\",\"title\":{\"en\":\"Git worktrees\",\"de\":\"Git-Arbeitsbäume\",\"es\":\"árboles de trabajo de git\",\"fr\":\"Arbres de travail Git\",\"ja\":\"Git ワークツリー\",\"pt\":\"Árvores de trabalho Git\",\"ru\":\"Рабочие деревья Git\",\"zh\":\"Git 工作树\"},\"description\":{\"en\":\"Ask for work on a new branch, and the agent creates a separate Git worktree and continues there, leaving your current checkout as it is.\",\"de\":\"Bitten Sie um Arbeit auf einem neuen Branch, und der Agent erstellt einen separaten Git-Worktree und arbeitet dort weiter, während Ihr aktueller Checkout unverändert bleibt.\",\"es\":\"Pida trabajar en una rama nueva, y el agente crea un worktree de Git independiente y continúa allí, dejando su checkout actual tal como está.\",\"fr\":\"Demandez à travailler sur une nouvelle branche, et l'agent crée un worktree Git distinct et y poursuit le travail, en laissant votre copie de travail actuelle telle quelle.\",\"ja\":\"新しいブランチでの作業を依頼すると、エージェントは別の Git ワークツリーを作成してそこで作業を続け、現在のチェックアウトはそのまま残します。\",\"pt\":\"Peça para trabalhar em um novo branch, e o agente cria um worktree do Git separado e continua lá, deixando seu checkout atual como está.\",\"ru\":\"Попросите поработать в новой ветке, и агент создаст отдельное рабочее дерево Git и продолжит работу там, оставив вашу текущую рабочую копию как есть.\",\"zh\":\"要求在新分支上工作时，智能体会创建单独的 Git 工作树并在其中继续，你当前的工作树保持原样。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-plugin-market-bundle\",\"title\":{\"en\":\"Custom plugin indexes\",\"de\":\"Benutzerdefinierte Plugin-Indizes\",\"es\":\"Índices de complementos personalizados\",\"fr\":\"Index de plugins personnalisés\",\"ja\":\"カスタムプラグインインデックス\",\"pt\":\"Índices de plug-ins personalizados\",\"ru\":\"Пользовательские индексы плагинов\",\"zh\":\"自定义插件索引\"},\"description\":{\"en\":\"Adds a Discover tab to Plugins, where you browse and install plugins from plugin indexes you add.\",\"de\":\"Fügt unter „Plugins“ den Tab „Entdecken“ hinzu, in dem Sie Plugins aus von Ihnen hinzugefügten Plugin-Indizes durchsuchen und installieren.\",\"es\":\"Añade la pestaña “Descubrir” a “Complementos”, donde puede explorar e instalar complementos de los índices de complementos que agregue.\",\"fr\":\"Ajoute à « Plugins » un onglet « Découvrez » où vous parcourez et installez des plugins provenant des index de plugins que vous ajoutez.\",\"ja\":\"「プラグイン」に「見つける」タブを追加し、追加したプラグインインデックスからプラグインを閲覧・インストールできるようにします。\",\"pt\":\"Adiciona a guia “Descubra” a “Plug-ins”, onde você navega e instala plug-ins dos índices de plug-ins que adiciona.\",\"ru\":\"Добавляет в «Плагины» вкладку «Откройте для себя», где можно просматривать и устанавливать плагины из добавленных вами индексов плагинов.\",\"zh\":\"在插件页添加“发现”标签页，从你添加的插件索引中浏览和安装插件。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-experimental-forge-bundle\",\"title\":{\"en\":\"Change requests & worktrees\",\"de\":\"Änderungsanfragen und Arbeitsbäume\",\"es\":\"Solicitudes de cambio y árboles de trabajo\",\"fr\":\"Demandes de modification et arbres de travail\",\"ja\":\"変更リクエストとワークツリー\",\"pt\":\"Solicitações de alteração e árvores de trabalho\",\"ru\":\"Запросы на изменение и рабочие деревья\",\"zh\":\"变更请求与工作树\"},\"description\":{\"en\":\"Keep linked GitHub pull requests beside your conversation: follow checks and reviews, inspect diffs, and send feedback to the agent. Review local changes and use a separate worktree to isolate each task. GitHub features require the gh CLI installed and signed in on the host.\",\"de\":\"Verknüpfte GitHub-Pull-Requests neben der Unterhaltung verfolgen: Prüfungen und Reviews ansehen, Code vergleichen und Feedback an den Agenten senden. Lokale Änderungen prüfen und Aufgaben mit separaten Arbeitsbäumen isolieren. GitHub-Funktionen erfordern eine installierte gh-CLI und eine Anmeldung auf dem Host.\",\"es\":\"Sigue los pull requests de GitHub vinculados a la conversación: consulta comprobaciones y revisiones, compara código y envía comentarios al agente. Revisa cambios locales y aísla cada tarea en un árbol de trabajo separado. Las funciones de GitHub requieren instalar la CLI gh e iniciar sesión en el equipo anfitrión.\",\"fr\":\"Suivez les pull requests GitHub liées à votre conversation : consultez les vérifications et les revues, comparez le code et transmettez vos remarques à l’agent. Examinez les modifications locales et isolez chaque tâche dans un arbre de travail séparé. Les fonctions GitHub nécessitent la CLI gh installée et une connexion sur l’hôte.\",\"ja\":\"会話のサイドバーで関連付けられた GitHub PR をまとめて確認できます。チェックやレビューの状況、コードの差分を確認し、修正案をエージェントに渡せます。ローカルの変更確認や、独立したワークツリーによるタスクの分離にも対応します。GitHub 機能にはホストでの gh CLI のインストールとログインが必要です。\",\"pt\":\"Acompanhe os pull requests do GitHub vinculados à conversa: consulte verificações e revisões, compare código e envie comentários ao agente. Revise alterações locais e isole cada tarefa em uma árvore de trabalho separada. Os recursos do GitHub exigem a CLI gh instalada e uma sessão iniciada no host.\",\"ru\":\"Следите за связанными с беседой pull request GitHub: проверками, рецензиями и различиями в коде, а затем передавайте замечания агенту. Просматривайте локальные изменения и изолируйте задачи в отдельных рабочих деревьях. Для функций GitHub требуется установить CLI gh и войти в аккаунт на хосте.\",\"zh\":\"在会话侧栏集中跟踪关联的 GitHub PR：查看检查状态、评审意见与代码差异，并把修改建议交给智能体继续处理。也可查看本地改动，用独立工作树隔离任务。GitHub 功能需要本机安装 gh 并登录。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-subagent-claude-code\",\"title\":{\"de\":\"Claude Code-Subagent\",\"en\":\"Claude Code subagent\",\"es\":\"Subagente Claude Code\",\"fr\":\"Sous-agent Claude Code\",\"ja\":\"Claude Code サブエージェント\",\"pt\":\"Claude Code subagente\",\"ru\":\"Субагент Claude Code\",\"zh\":\"Claude Code 子智能体\"},\"description\":{\"de\":\"Delegieren Sie eine Aufgabe an Claude Code, indem Sie dessen native Authentifizierung und Einstellungen verwenden.\",\"en\":\"Delegate one task to Claude Code using its native authentication and settings.\",\"es\":\"Delegue una tarea a Claude Code utilizando su autenticación y configuración nativas.\",\"fr\":\"Déléguez une tâche à Claude Code à l’aide de son authentification et de ses paramètres natifs.\",\"ja\":\"Claude Code のネイティブの認証と設定を使用して、単独のタスクを委派します。\",\"pt\":\"Delegue uma tarefa a Claude Code usando sua autenticação e configurações nativas.\",\"ru\":\"Делегируйте одну задачу Claude Code, используя его встроенную аутентификацию и настройки.\",\"zh\":\"使用 Claude Code 原生认证和设置委派单个任务。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-subagent-codex\",\"title\":{\"de\":\"Codex-Subagent\",\"en\":\"Codex subagent\",\"es\":\"Subagente Codex\",\"fr\":\"Sous-agent Codex\",\"ja\":\"Codex サブエージェント\",\"pt\":\"Codex subagente\",\"ru\":\"Субагент Codex\",\"zh\":\"Codex 子智能体\"},\"description\":{\"de\":\"Delegieren Sie eine Aufgabe an Codex, indem Sie dessen native Authentifizierung und Einstellungen verwenden.\",\"en\":\"Delegate one task to Codex using its native authentication and settings.\",\"es\":\"Delegue una tarea a Codex utilizando su autenticación y configuración nativas.\",\"fr\":\"Déléguez une tâche à Codex à l’aide de son authentification et de ses paramètres natifs.\",\"ja\":\"Codex のネイティブの認証と設定を使用して、単独のタスクを委派します。\",\"pt\":\"Delegue uma tarefa a Codex usando sua autenticação e configurações nativas.\",\"ru\":\"Делегируйте одну задачу Codex, используя его встроенную аутентификацию и настройки.\",\"zh\":\"使用 Codex 原生认证和设置委派单个任务。\"},\"enabled\":false},{\"name\":\"@deepseek-ai/dsh-cua-bundle\",\"title\":{\"de\":\"Computernutzung\",\"en\":\"Computer use\",\"es\":\"Uso de la computadora\",\"fr\":\"Utilisation de l'ordinateur\",\"ja\":\"Computer Use\",\"pt\":\"Uso do computador\",\"ru\":\"Использование компьютера\",\"zh\":\"Computer Use\"},\"description\":{\"de\":\"Unterstützt derzeit macOS; Die Windows-Unterstützung befindet sich in der Entwicklung. Lädt die Computernutzung für bestehende und neue PTC-Sitzungen. Wechseln Sie in den PTC-Modus und erteilen Sie die Berechtigungen für Barrierefreiheit und Bildschirmaufzeichnung, um ihn zu verwenden.\",\"en\":\"Currently supports macOS; Windows support is in development. Loads computer use for existing and new PTC sessions. Switch to PTC mode and grant Accessibility and Screen Recording permissions to use it.\",\"es\":\"Actualmente es compatible con macOS; El soporte para Windows está en desarrollo. Carga el uso de la computadora para sesiones PTC nuevas y existentes. Cambie al modo PTC y otorgue permisos de Accesibilidad y Grabación de pantalla para usarlo.\",\"fr\":\"Prend actuellement en charge macOS ; La prise en charge de Windows est en cours de développement. Charge l'utilisation de l'ordinateur pour les sessions PTC existantes et nouvelles. Passez en mode PTC et accordez les autorisations d’accessibilité et d’enregistrement d’écran pour l’utiliser.\",\"ja\":\"現在は macOS のみ対応し、Windows 対応は開発中です。既存および新規の PTC セッションに Computer Use を読み込みます。PTC モードに切り替え、アクセシビリティと画面収録の権限を許可して使用してください。\",\"pt\":\"Atualmente suporta macOS; O suporte Windows está em desenvolvimento. Carrega o uso do computador para sessões PTC novas e existentes. Mude para o modo PTC e conceda permissões de acessibilidade e gravação de tela para usá-lo.\",\"ru\":\"В настоящее время поддерживается macOS; Поддержка Windows находится в разработке. Загружает использование компьютера для существующих и новых сеансов PTC. Переключитесь в режим PTC и предоставьте разрешения на доступность и запись экрана для его использования.\",\"zh\":\"目前仅支持 macOS，Windows 支持正在开发中。为已有及新建 PTC 会话加载 Computer Use。请切换到 PTC 模式来使用，并授予辅助功能和屏幕录制权限。\"},\"enabled\":false}]\n</skill_instructions>\n</skill_content>"}],"isError":false,"id":"{{message:7}}"}},"sourceEventSeqs":[16],"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":1}}
 {"type":"step/start","data":{"turn":1,"step":2}}
 {"type":"request/header","data":{"header":{"config":{"provider":"deepseek-official","model":"deepseek-v4-flash"},"tools":["apply_patch","ask_user_question","bash","create_goal","edit","get_goal","glob","grep","interrupt_agent","job_kill","job_list","job_output","list_agents","list_subagent_models","plugin_manager","present","propose_action","read","read_image","schedule_create","schedule_edit","schedule_list","schedule_view","send_message","skill","subagent","subagent_fork","todo_write","update_goal","web_fetch","web_search","workflow","working_directory","write"]},"reason":"change"}}

From eb1713f856d99b3561a7669b82a4aec6f73521a7 Mon Sep 17 00:00:00 2001
From: imccyu <276526105+imccyu@users.noreply.github.com>
Date: Tue, 3 Nov 2026 11:07:09 +0800
Subject: [PATCH 30/32] fix(session-projection): keep released units in
 checkpoints (#7754)

* fix(session-projection): keep released units in checkpoints

Since the Cordis rc.11 teardown order unloads the Web layer before the
base layer, Session Controller and harness-dev-context release their
projection units before their live Sessions detach. The projection
cache is still alive at that point and wrote a checkpoint holding only
the units that were still registered, replacing the complete record.
A blank Session then lost sessionListMetadata and listed as an untitled
conversation after every graceful restart.

A released unit now stays in the registry as a predecessor: it leaves
event drives, snapshots, restores, and change notifications, while
checkpoint() keeps each Session's last cell of it without advancing it.
Registering the same key again replaces the predecessor and refolds
the log. The projection cache keeps replacing whole records.

* test(session-projection): assert frozen released units across unload tests

Update the remaining unload tests that still expected a released unit
to vanish from checkpoint(): user-approval, agent-loop inbox and scope
lifecycle, time-context, and the agent registry now assert that the
same Session keeps its pre-unload row, that a later event does not
advance it, and that a Session created after the unload has no row.
The token-meter and goal unload tests also append an event after the
unload.

Document that a retained handle read still advances a released cell
that checkpoint() serves, and that restore() folds only live units, so
its refreshed rows omit released units.

* docs(session-projection): sync the ProjectionHandle type-equiv block

* docs(session-projection): record frozen released units and their upgrade

Add the upgrade guide for checkpoint() keeping a released unit's last
row, update the registration-handles Agent Note with the frozen-cell
decision and the retained predecessor, list both consequences under the
registry README's known limitations, note in the projection cache README
that a stored row can be frozen at its unit's release, and say that
restoreFloor() ignores released predecessors.

Update the agent-loop resource-lifecycle unload test, which read
checkpoints through an alias, to the frozen-row semantics.

* docs(upgrade-guide): mark the released-checkpoint snippet ignore-check

* docs(session-projection): state the retained-handle path and narrow a rejected alternative

* docs(upgrade-guide): re-record the released-checkpoint guide pairing
---
 ...-projection-registration-handles.i18n.yaml |  12 +-
 ...session-projection-registration-handles.md |   8 +-
 ...sion-projection-registration-handles.zh.md |   8 +-
 apps/web/tests/server-restart.e2e.ts          |  58 ++++++++--
 docs/subsystems/session-projection.i18n.yaml  |   8 +-
 docs/subsystems/session-projection.md         |  19 +++-
 docs/subsystems/session-projection.zh.md      |  19 +++-
 .../guide.i18n.yaml                           |  16 +++
 .../projection-released-checkpoint/guide.md   |  30 +++++
 .../guide.zh.md                               |  30 +++++
 .../time-context/tests/time-context.spec.ts   |   8 +-
 packages/core/agent-loop/tests/inbox.spec.ts  |   4 +-
 .../tests/resource-lifecycle.spec.ts          |   4 +-
 .../agent-loop/tests/scope-lifecycle.spec.ts  |   8 +-
 packages/core/agent/tests/agent.spec.ts       |   8 +-
 .../agent-team/tests/team.spec.ts             |   4 +-
 .../tests/controller.host.spec.ts             |   4 +-
 .../tests/loader-composition.spec.ts          |   4 +-
 .../forge-session/tests/service.spec.ts       |   7 +-
 .../extensions/tool-cordis/src/api-catalog.ts |  10 +-
 packages/goal/goal/tests/goal.spec.ts         |   6 +-
 .../user-approval/tests/projection.spec.ts    |  12 +-
 .../llm/token-meter/tests/token-meter.spec.ts |   8 +-
 .../session-projection-cache/README.i18n.yaml |   4 +-
 .../session-projection-cache/README.md        |   2 +-
 .../session-projection-cache/README.zh.md     |   2 +-
 .../tests/cache.spec.ts                       | 106 ++++++++++++++++++
 .../session-projection/README.i18n.yaml       |  12 +-
 packages/session/session-projection/README.md |   6 +-
 .../session/session-projection/README.zh.md   |   6 +-
 .../session/session-projection/src/index.ts   |  57 ++++++++--
 .../tests/registration-reader.spec.ts         |   3 +-
 .../session-projection/tests/registry.spec.ts |  65 ++++++++++-
 33 files changed, 472 insertions(+), 86 deletions(-)
 create mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/projection-released-checkpoint/guide.i18n.yaml
 create mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/projection-released-checkpoint/guide.md
 create mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/projection-released-checkpoint/guide.zh.md

diff --git a/.agents/notes/implemented/architecture/2026-10-12-session-projection-registration-handles.i18n.yaml b/.agents/notes/implemented/architecture/2026-10-12-session-projection-registration-handles.i18n.yaml
index afcfe07ab3..979033451f 100644
--- a/.agents/notes/implemented/architecture/2026-10-12-session-projection-registration-handles.i18n.yaml
+++ b/.agents/notes/implemented/architecture/2026-10-12-session-projection-registration-handles.i18n.yaml
@@ -9,11 +9,11 @@
   en: 47ba548b869be190
   zh: c2e5038a56fe741c
 /agent-note-asynchronous-projection-registration-and-retained-readers/decision:
-  en: be0d17bfbd1b59d4
-  zh: 7a23bccdf95c21ff
+  en: a6f9ae8a53af5e4b
+  zh: 0aece791574ef060
 /agent-note-asynchronous-projection-registration-and-retained-readers/alternatives-considered:
-  en: e7c66403fab991d2
-  zh: 1580ec29116c7d42
+  en: 12e0f5fc9638acc6
+  zh: 24213550da27b70b
 /agent-note-asynchronous-projection-registration-and-retained-readers/consequences:
-  en: 31ce6f02dd3bf39d
-  zh: bcd29b2146f689b5
+  en: f5c294608d87844f
+  zh: 24488e439a04d81a
diff --git a/.agents/notes/implemented/architecture/2026-10-12-session-projection-registration-handles.md b/.agents/notes/implemented/architecture/2026-10-12-session-projection-registration-handles.md
index 813b1dffd1..9d19c4e94b 100644
--- a/.agents/notes/implemented/architecture/2026-10-12-session-projection-registration-handles.md
+++ b/.agents/notes/implemented/architecture/2026-10-12-session-projection-registration-handles.md
@@ -12,7 +12,7 @@ Host readers coupled to registry key lookup lose access when a plugin unloads, a
 
 `SessionProjectionRegistry.register` returns an awaitable registration for a typed handle. Domain owners await it during activation before exposing dependent operations. Function plugins retain their namespace exports and use asynchronous `apply`; services use their initialization hook. Each domain service keeps its definitions and handles internal and exposes methods returning business data. Consumers depend on that service rather than registering its definitions or receiving projection readers. This supersedes the optional first-access acquisition and disposer-return details in [the mandatory-reader decision](2026-08-19-session-projection-mandatory-seam.md), while retaining its mandatory-state and cropped-client-view rules.
 
-A handle owns one reference to a shared definition and its per-Session cells. Its disposer releases global participation exactly once; the final release removes the unit from live drives, snapshots, and checkpoints. Its reader remains usable after release, folding unseen events with the original definition. A later registration at a different state version does not replace an older handle's definition. Registration checks owner liveness after its asynchronous handoff and rejects if the owner unloaded before receiving the handle.
+A handle owns one reference to a shared definition and its per-Session cells. Its disposer releases global participation exactly once; the final release removes the unit from live drives and snapshots. Checkpoints keep each Session's last cell of the released unit until its key registers again: the registry no longer advances that cell, while a retained handle read still advances it forward, so a writer that runs after the owner unloads still stores the state already folded. Under the Cordis rc.11 teardown order, Web-layer plugins release their units before the Sessions they describe detach, and the final projection-cache write would otherwise drop those rows. Stored rows can therefore lag the log; the cache promises only possibly stale rows. Its reader remains usable after release, folding unseen events with the original definition. A later registration at a different state version does not replace an older handle's definition. Registration checks owner liveness after its asynchronous handoff and rejects if the owner unloaded before receiving the handle.
 
 AgentRegistry owns turn and step state and exposes `turnBoundaryOf(session)`. AgentLoop acquires its inbox handle once before publishing its factory, reads the last turn before creating an Agent scope, and passes an inbox callback plus that turn number into synchronous Agent construction. The callback retains its handle through cleanup after the loop fiber removes global registrations. This preserves the existing creation/setup sequence without per-Agent registration or an extra initialization state.
 
@@ -20,6 +20,10 @@ Plugins compiled against the synchronous API keep running during migration. The
 
 ## Alternatives considered
 
+**Detach owned Sessions before unregistering.** Other Web-layer plugins unload in earlier fibers under the rc.11 teardown order, and plugin reload or disable reaches the same timing, so ordering one owner cannot keep every row.
+
+**Checkpoint a released unit only while its cell is at the Session cursor.** A Session with a running turn at shutdown appends teardown events after its units are released, so its rows would be dropped again.
+
 **Keep registry-level lookup and delay unregistering.** This couples unrelated plugin disposal order to every reader's final access. Retained readers make cleanup independent of that order.
 
 **Return a synchronous handle.** This preserves callers' immediate reads but commits the acquisition API to synchronous initialization. Awaited acquisition leaves that timing explicit while state reads remain synchronous after readiness.
@@ -36,4 +40,4 @@ Plugins compiled against the synchronous API keep running during migration. The
 
 ## Consequences
 
-Projection owners must migrate acquisition and retain handles; other consumers use the owning services. Released handles retain their definitions and weakly keyed cells for as long as the caller keeps them; they do not restore global wire participation. Registration-reader tests cover post-release folding, version replacement, unrelated-unit isolation, repeated disposal, concurrent owner disposal, and owner unload during acquisition. Agent lifecycle tests cover cleanup failures, scope-minting races, and background child shutdown. Compatibility tests and a real Loader subprocess verify the deprecated calls.
+Projection owners must migrate acquisition and retain handles; other consumers use the owning services. Released handles retain their definitions and weakly keyed cells for as long as the caller keeps them; they do not restore global wire participation. The registry also retains a released predecessor, with its definition closures and weakly keyed cells, until the same key registers again, so a key that a reloaded plugin renames or stops registering keeps the old definition referenced for the process lifetime. Registration-reader tests cover post-release folding, version replacement, unrelated-unit isolation, repeated disposal, concurrent owner disposal, and owner unload during acquisition. Agent lifecycle tests cover cleanup failures, scope-minting races, and background child shutdown. Compatibility tests and a real Loader subprocess verify the deprecated calls.
diff --git a/.agents/notes/implemented/architecture/2026-10-12-session-projection-registration-handles.zh.md b/.agents/notes/implemented/architecture/2026-10-12-session-projection-registration-handles.zh.md
index a80721d82d..56879ebc99 100644
--- a/.agents/notes/implemented/architecture/2026-10-12-session-projection-registration-handles.zh.md
+++ b/.agents/notes/implemented/architecture/2026-10-12-session-projection-registration-handles.zh.md
@@ -12,7 +12,7 @@ Status: implemented
 
 `SessionProjectionRegistry.register` 返回可等待的注册结果，用于获取类型化句柄。领域所有者在激活期间等待它，再提供依赖操作。函数插件保留命名空间导出并使用异步 `apply`；服务使用初始化钩子。领域服务在内部持有定义和句柄，通过方法返回业务数据。消费方依赖该服务，无需注册其定义或接收投影读取句柄。这取代了[必需读取方决策](2026-08-19-session-projection-mandatory-seam.zh.md)中的可选首次访问获取方式与返回释放函数的细节，同时保留必需状态和裁剪 Client 视图的规则。
 
-句柄拥有共享定义及其逐 Session 单元的一次引用。其释放函数恰好一次地解除全局参与；最后一次释放会从实时推进、快照和检查点中移除单元。读取句柄在释放后仍可使用原定义折叠未读取事件。后续注册的其他状态版本不会替换旧句柄的定义。注册在异步交接后检查 owner 是否存活；如果 owner 在收到句柄前卸载，注册拒绝。
+句柄拥有共享定义及其逐 Session 单元的一次引用。其释放函数恰好一次地解除全局参与；最后一次释放会从实时推进和快照中移除单元。检查点仍保留每个 Session 中已释放单元的最后一个 cell，直到它的 key 再次注册：注册表不再推进这个 cell，但已保留的 handle 读取时仍会将其向前推进，因此 owner 卸载后才运行的写入方仍会存下已经折叠出的状态。按 Cordis rc.11 的卸载顺序，Web 层插件会在它们所描述的 Session detach 之前释放单元，否则 projection cache 的最终写入会丢掉这些行。因此存储的行可能落后于日志；cache 只承诺行可能过时。读取句柄在释放后仍可使用原定义折叠未读取事件。后续注册的其他状态版本不会替换旧句柄的定义。注册在异步交接后检查 owner 是否存活；如果 owner 在收到句柄前卸载，注册拒绝。
 
 AgentRegistry 持有轮次和步骤状态，并提供 `turnBoundaryOf(session)`。AgentLoop 在发布工厂前只获取一次 inbox 句柄，在创建 Agent 作用域前读取最后轮次，并将 inbox 回调与该轮次编号传入同步 Agent 构造过程。loop fiber 移除全局注册后，回调仍在清理期间保留其句柄。这保留既有创建与 setup 顺序，无需逐 Agent 注册或增加初始化状态。
 
@@ -20,6 +20,10 @@ AgentRegistry 持有轮次和步骤状态，并提供 `turnBoundaryOf(session)`
 
 ## Alternatives considered
 
+**卸载前先 detach 自己拥有的 Session。** 按 rc.11 的卸载顺序，其他 Web 层插件在更早卸载的 fiber 里，插件重载或禁用也会碰上同样的时机，调整单个 owner 的顺序保不住所有行。
+
+**只在已释放单元的 cell 位于 Session 游标时才写入检查点。** 关停时正在运行一轮的会话会在单元释放后追加 teardown 事件，因此它的这些行会再次被丢掉。
+
 **保留注册表级查询并延迟注销。** 这使无关插件的释放顺序依赖每个读取方的最后一次访问。保留读取句柄使清理不再依赖该顺序。
 
 **返回同步句柄。** 这保留消费者的立即读取，却将获取 API 固定为同步初始化。等待获取过程使时序显式，同时就绪后的状态读取仍同步。
@@ -36,4 +40,4 @@ AgentRegistry 持有轮次和步骤状态，并提供 `turnBoundaryOf(session)`
 
 ## Consequences
 
-投影所有者必须迁移获取方式并保留句柄；其他消费方使用所属服务。只要调用方持有已释放句柄，其定义和弱键单元就仍存在；句柄不会恢复全局 wire 参与。注册读取测试覆盖释放后折叠、版本替换、无关单元隔离、重复释放、并发 owner 释放以及获取期间 owner 卸载。Agent 生命周期测试覆盖清理失败、作用域创建竞态与后台子 Agent 停止。兼容测试与真实 Loader 子进程验证这些已弃用调用。
+投影所有者必须迁移获取方式并保留句柄；其他消费方使用所属服务。只要调用方持有已释放句柄，其定义和弱键单元就仍存在；句柄不会恢复全局 wire 参与。注册表自身也会保留已释放的前任及其定义闭包和弱键单元，直到同一 key 再次注册；因此重载后改名或不再注册的 key 会在进程生命周期内一直引用旧定义。注册读取测试覆盖释放后折叠、版本替换、无关单元隔离、重复释放、并发 owner 释放以及获取期间 owner 卸载。Agent 生命周期测试覆盖清理失败、作用域创建竞态与后台子 Agent 停止。兼容测试与真实 Loader 子进程验证这些已弃用调用。
diff --git a/apps/web/tests/server-restart.e2e.ts b/apps/web/tests/server-restart.e2e.ts
index 736165c2dc..d5b3c180cb 100644
--- a/apps/web/tests/server-restart.e2e.ts
+++ b/apps/web/tests/server-restart.e2e.ts
@@ -84,6 +84,24 @@ class RestartableServer {
   logs(): string { return this.output.replace(/([?&]token=)[A-Za-z0-9_-]+/gu, '$1<redacted>') }
 }
 
+type HostRpc = <T>(endpoint: string, args: object) => Promise<T>
+
+/** Authenticate against one server process and return its Host RPC caller. */
+async function hostRpc(url: string): Promise<HostRpc> {
+  const authenticated = await fetch(url, { redirect: 'manual' })
+  const cookie = authenticated.headers.get('set-cookie')?.split(';', 1)[0]
+  if (cookie === undefined) throw new Error('Server did not issue an authentication cookie')
+  return async <T>(endpoint: string, args: object): Promise<T> => {
+    const response = await fetch(new URL('/api/' + endpoint, url), {
+      method: 'POST', headers: { 'content-type': 'application/json', cookie },
+      body: JSON.stringify({ type: 'client-request', rpcId: randomUUID(), method: endpoint, payload: { args } }),
+    })
+    const result = await response.json() as { result: { ok: boolean; value: T; error?: { message: string } } }
+    if (!result.result.ok) throw new Error(`${endpoint}: ${String(result.result.error?.message)}`)
+    return result.result.value
+  }
+}
+
 it.each([false, true])('keeps the same revision, Session and page across a server restart (delayed startup: %s)', async (holdStartup) => {
   const world = await mkdtemp(join(tmpdir(), 'dsh-server-restart-'))
   onTestFinished(() => rm(world, { recursive: true, force: true }))
@@ -118,18 +136,7 @@ it.each([false, true])('keeps the same revision, Session and page across a serve
 
   const url = await server.start(0)
   const port = Number(new URL(url).port)
-  const authenticated = await fetch(url, { redirect: 'manual' })
-  const cookie = authenticated.headers.get('set-cookie')?.split(';', 1)[0]
-  if (cookie === undefined) throw new Error('Server did not issue an authentication cookie')
-  const rpc = async <T>(endpoint: string, args: object): Promise<T> => {
-    const response = await fetch(new URL('/api/' + endpoint, url), {
-      method: 'POST', headers: { 'content-type': 'application/json', cookie },
-      body: JSON.stringify({ type: 'client-request', rpcId: randomUUID(), method: endpoint, payload: { args } }),
-    })
-    const result = await response.json() as { result: { ok: boolean; value: T; error?: { message: string } } }
-    if (!result.result.ok) throw new Error(`${endpoint}: ${String(result.result.error?.message)}`)
-    return result.result.value
-  }
+  const rpc = await hostRpc(url)
   await rpc('workspace/create', { request: { path: workspacePath } })
   const scenarioId = randomUUID()
 
@@ -234,3 +241,30 @@ it.each([false, true])('keeps the same revision, Session and page across a serve
   expect(streamErrors).toEqual([])
   expect(navigations).toBe(0)
 })
+
+it('keeps a live blank Session blank across a graceful server restart', async () => {
+  const world = await mkdtemp(join(tmpdir(), 'dsh-server-restart-'))
+  onTestFinished(() => rm(world, { recursive: true, force: true }))
+  // The scenario runs no model turn, so the model endpoint is never contacted.
+  const server = new RestartableServer(world, 'http://127.0.0.1:9')
+  onTestFinished(() => server.stop())
+  const workspacePath = join(world, 'workspace')
+  await mkdir(workspacePath)
+  onTestFailed(async () => {
+    await writeFile(join(REPO_ROOT, '.artifacts', 'server-restart-blank-' + randomUUID() + '.json'), JSON.stringify({ server: server.logs() }, null, 2))
+  })
+
+  const before = await hostRpc(await server.start(0))
+  const { workspace } = await before<{ workspace: { id: string } }>('workspace/create', { request: { path: workspacePath } })
+  const { sessionId } = await before<{ sessionId: string }>('session/create', { request: { workspaceId: workspace.id } })
+  const listed = async (rpc: HostRpc) => (await rpc<{
+    items: { sessionId: string; blank: boolean; agentAvailable: boolean }[]
+  }>('session/list', { _request: {} })).items.find(item => item.sessionId === sessionId)
+  expect(await listed(before)).toMatchObject({ blank: true, agentAvailable: true })
+
+  // SIGTERM unloads the Web layer, including the list projection, before its live Session detaches;
+  // stopping right after creation also precedes the throttled checkpoint of the Session's setup events.
+  await server.stop()
+  const after = await hostRpc(await server.start(0))
+  expect(await listed(after)).toMatchObject({ blank: true, agentAvailable: false })
+})
diff --git a/docs/subsystems/session-projection.i18n.yaml b/docs/subsystems/session-projection.i18n.yaml
index a1fe995e3b..5c37a0ee71 100644
--- a/docs/subsystems/session-projection.i18n.yaml
+++ b/docs/subsystems/session-projection.i18n.yaml
@@ -3,8 +3,8 @@
 # After editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write docs/subsystems/session-projection.md
 /session-projections:
-  en: b2789f5257a935c5
-  zh: 12d430a9cd454592
+  en: 1804bc8fc5f226e4
+  zh: 2f31d0f014508d29
 /session-projections/the-unit:
   en: d48814d3ab0e997f
   zh: d0337d8eba097a63
@@ -18,5 +18,5 @@
   en: 6a93a4e1682fd6e6
   zh: 28729129c3d8a3b1
 /session-projections/the-registry-ctx-sessionprojections:
-  en: 67fe0f49dee90e25
-  zh: c23de3a2803040f0
+  en: 33e4aa5276d4c0fa
+  zh: 18019b4990734b82
diff --git a/docs/subsystems/session-projection.md b/docs/subsystems/session-projection.md
index 6284a8fb95..512542d505 100644
--- a/docs/subsystems/session-projection.md
+++ b/docs/subsystems/session-projection.md
@@ -6,7 +6,7 @@ The session-projection seam — a [capability seam](../capability-seams.md) thro
 
 Source: [`packages/session/session-projection/src/index.ts`](../../packages/session/session-projection/src/index.ts)
 
-A `ProjectionHandle` retains its synchronous reader after unregistration. `stateOf(session)` folds newly committed events with the original unit; it does not rejoin global snapshots, checkpoints, or notifications. Registration must still finish before the handle can be used. See the [registration lifecycle](../../packages/session/session-projection/README.md).
+A `ProjectionHandle` retains its synchronous reader after unregistration. `stateOf(session)` folds newly committed events with the original unit; it does not rejoin global snapshots or notifications. Registration must still finish before the handle can be used. See the [registration lifecycle](../../packages/session/session-projection/README.md).
 
 ```ts type-equiv
 /** An effect-owned registration with a reader retained independently of registration. */
@@ -14,6 +14,8 @@ interface ProjectionHandle<S> {
   /**
    * Read the current state, including after unregistering, by folding new
    * Session events with this handle's original unit. Do not mutate the live value.
+   * After the final release, a read also advances the released cell that
+   * `checkpoint(session)` serves, until the key registers again.
    * @param session - Session whose committed events are folded.
    * @returns the projection state at the Session's current cursor.
    */
@@ -230,7 +232,7 @@ type ProjectionKeySelection =
 
 ## The registry: `ctx.sessionProjections`
 
-`SessionProjectionRegistry` ([signatures](#ctxsessionprojections--sessionprojectionregistry)) owns the drive: one `session/event` subscription, eager `apply` over every registered unit, and per-session per-unit watermark cells. Cells build lazily — a unit registered after events flowed, or a session older than the registry, folds `init` over the in-memory log on first touch (event or read). Domains await `register(definition)` during activation and retain its handle. Registration belongs to the calling fiber: its last release removes the key from global drives and snapshots, while retained handles remain readable. Same-key, same-version registrants share one unit; incompatible versions reject registration.
+`SessionProjectionRegistry` ([signatures](#ctxsessionprojections--sessionprojectionregistry)) owns the drive: one `session/event` subscription, eager `apply` over every registered unit, and per-session per-unit watermark cells. Cells build lazily — a unit registered after events flowed, or a session older than the registry, folds `init` over the in-memory log on first touch (event or read). Domains await `register(definition)` during activation and retain its handle. Registration belongs to the calling fiber: its last release removes the key from global drives and snapshots, checkpoints keep each Session's last state of it until the key registers again, and retained handles remain readable. Same-key, same-version registrants share one unit; incompatible versions reject registration.
 
 <!-- BEGIN GENERATED cordis-surface (gen-cordis-catalog.ts) — do not edit between markers -->
 
@@ -331,7 +333,7 @@ Source: [`packages/session/session-projection-cache/src/index.ts`](../../package
 
 ### `ctx.sessionProjections` — `SessionProjectionRegistry`
 
-`ctx.sessionProjections`: the projection unit table and its drive. The service subscribes to `session/event` once; every committed event passes every registered unit's `apply` (eager drive). A changed state reference computes the next client view; the change feed is notified only when its raw result changes by `Object.is`. Cells build lazily — a unit registered after events flowed, or a session older than the registry, folds `init` over the in-memory log on first touch (event or read). Consumers declare `sessionProjections` as a required injection, await registration during activation, and retain its ready handle. Registrants sharing a key share one unit and are counted. The last release removes the unit from live drives, checkpoints, and client snapshots; retained handles still fold new events on demand using the original unit.
+`ctx.sessionProjections`: the projection unit table and its drive. The service subscribes to `session/event` once; every committed event passes every registered unit's `apply` (eager drive). A changed state reference computes the next client view; the change feed is notified only when its raw result changes by `Object.is`. Cells build lazily — a unit registered after events flowed, or a session older than the registry, folds `init` over the in-memory log on first touch (event or read). Consumers declare `sessionProjections` as a required injection, await registration during activation, and retain its ready handle. Registrants sharing a key share one unit and are counted. The last release removes the unit from live drives, restores, and client snapshots, while checkpoints keep each Session's last cell of it until the key registers again and the new unit refolds the log; retained handles still fold new events on demand using the original unit.
 
 ```ts cordis-catalog
 /**
@@ -408,8 +410,13 @@ summaryKeys(): ReadonlySet<Extract<keyof SessionProjectionMap, string>>
  * mutable state, and a caller reaching the live reference could corrupt
  * every subsequent snapshot and frame through it (plain JSON by the unit
  * contract, so the clone is total).
+ * A released unit contributes the Session's last cell. The registry no
+ * longer advances that cell, while a retained handle read still advances it
+ * forward, so a writer running after a plugin unloads keeps that unit's
+ * latest state; a Session that has no cell of it gets no row. {@link restore}
+ * folds only live units, so its refreshed rows omit released units.
  * @param session - the session whose unit states are checkpointed.
- * @returns one row per registered key.
+ * @returns one row per registered key, plus one per released key with a cell for this Session.
  */
 checkpoint(session: Session): ProjectionCheckpoint
 
@@ -426,7 +433,7 @@ checkpoint(session: Session): ProjectionCheckpoint
  * re-read.
  * @param checkpoint - persisted rows for one session (possibly stale or empty).
  * @returns the offset for the stored-log suffix read (`SessionHandle.read`),
- *   or `undefined` when no unit is registered (no read needed —
+ *   or `undefined` when no live unit is registered (released predecessors do not count; no read needed —
  *   {@link restore} would serve empty values regardless).
  */
 restoreFloor(checkpoint: ProjectionCheckpoint): SessionLogOffset | undefined
@@ -467,6 +474,8 @@ viewCheckpoint( checkpoint: ProjectionCheckpoint, keys?: ProjectionKeySelection,
  * @returns the snapshot cut at the supplied log end (`asOfSeq` is the last
  *   supplied event's seq, `baseSeq - 1` for an empty tail) plus the
  *   refreshed checkpoint rows at that cut, ready for a durable write-back.
+ *   The rows cover live units only: a released unit has no cell for a log
+ *   folded without a live `Session`, so a write-back of them omits it.
  */
 restore( checkpoint: ProjectionCheckpoint, events: readonly SessionEvent[], baseSeq: SessionLogOffset, header: SessionHeader, inheritedEventCount: SessionLogOffset, ): { snapshot: ProjectionSnapshot; checkpoint: ProjectionCheckpoint }
 
diff --git a/docs/subsystems/session-projection.zh.md b/docs/subsystems/session-projection.zh.md
index b924cc78a0..d6b38f28d3 100644
--- a/docs/subsystems/session-projection.zh.md
+++ b/docs/subsystems/session-projection.zh.md
@@ -6,7 +6,7 @@
 
 源码：[`packages/session/session-projection/src/index.ts`](../../packages/session/session-projection/src/index.ts)
 
-`ProjectionHandle` 在注销后仍保留同步 reader。`stateOf(session)` 用原有单元折叠新提交的事件，不会重新加入全局快照、检查点或通知。必须等待注册完成才能使用 handle。参见[注册生命周期](../../packages/session/session-projection/README.zh.md)。
+`ProjectionHandle` 在注销后仍保留同步 reader。`stateOf(session)` 用原有单元折叠新提交的事件，不会重新加入全局快照或通知。必须等待注册完成才能使用 handle。参见[注册生命周期](../../packages/session/session-projection/README.zh.md)。
 
 ```ts type-equiv
 /** An effect-owned registration with a reader retained independently of registration. */
@@ -14,6 +14,8 @@ interface ProjectionHandle<S> {
   /**
    * Read the current state, including after unregistering, by folding new
    * Session events with this handle's original unit. Do not mutate the live value.
+   * After the final release, a read also advances the released cell that
+   * `checkpoint(session)` serves, until the key registers again.
    * @param session - Session whose committed events are folded.
    * @returns the projection state at the Session's current cursor.
    */
@@ -230,7 +232,7 @@ type ProjectionKeySelection =
 
 ## 注册表：`ctx.sessionProjections`
 
-`SessionProjectionRegistry`（[签名](#ctxsessionprojections--sessionprojectionregistry)）拥有驱动逻辑：一个 `session/event` 订阅、对所有已注册单元立即执行的 `apply`，以及按会话、按单元保存的水位线缓存。缓存单元惰性构建：若单元在事件产生后才注册，或会话早于注册表存在，第一次访问（事件或读取）会从 `init` 开始折叠内存日志。领域在激活期间等待 `register(definition)`，并保留返回的 handle（句柄）。注册归调用 fiber 所有：最后一次释放会从全局驱动和快照中移除该 key，已有句柄仍可读取。同 key、同版本的注册者共享一个单元；版本不兼容时注册失败。
+`SessionProjectionRegistry`（[签名](#ctxsessionprojections--sessionprojectionregistry)）拥有驱动逻辑：一个 `session/event` 订阅、对所有已注册单元立即执行的 `apply`，以及按会话、按单元保存的水位线缓存。缓存单元惰性构建：若单元在事件产生后才注册，或会话早于注册表存在，第一次访问（事件或读取）会从 `init` 开始折叠内存日志。领域在激活期间等待 `register(definition)`，并保留返回的 handle（句柄）。注册归调用 fiber 所有：最后一次释放会从全局驱动和快照中移除该 key，检查点仍保留每个会话中它的最后状态，直到该 key 再次注册，已有句柄仍可读取。同 key、同版本的注册者共享一个单元；版本不兼容时注册失败。
 
 <!-- BEGIN GENERATED cordis-surface (gen-cordis-catalog.ts) — do not edit between markers -->
 
@@ -331,7 +333,7 @@ Source: [`packages/session/session-projection-cache/src/index.ts`](../../package
 
 ### `ctx.sessionProjections` — `SessionProjectionRegistry`
 
-`ctx.sessionProjections`: the projection unit table and its drive. The service subscribes to `session/event` once; every committed event passes every registered unit's `apply` (eager drive). A changed state reference computes the next client view; the change feed is notified only when its raw result changes by `Object.is`. Cells build lazily — a unit registered after events flowed, or a session older than the registry, folds `init` over the in-memory log on first touch (event or read). Consumers declare `sessionProjections` as a required injection, await registration during activation, and retain its ready handle. Registrants sharing a key share one unit and are counted. The last release removes the unit from live drives, checkpoints, and client snapshots; retained handles still fold new events on demand using the original unit.
+`ctx.sessionProjections`: the projection unit table and its drive. The service subscribes to `session/event` once; every committed event passes every registered unit's `apply` (eager drive). A changed state reference computes the next client view; the change feed is notified only when its raw result changes by `Object.is`. Cells build lazily — a unit registered after events flowed, or a session older than the registry, folds `init` over the in-memory log on first touch (event or read). Consumers declare `sessionProjections` as a required injection, await registration during activation, and retain its ready handle. Registrants sharing a key share one unit and are counted. The last release removes the unit from live drives, restores, and client snapshots, while checkpoints keep each Session's last cell of it until the key registers again and the new unit refolds the log; retained handles still fold new events on demand using the original unit.
 
 ```ts cordis-catalog
 /**
@@ -408,8 +410,13 @@ summaryKeys(): ReadonlySet<Extract<keyof SessionProjectionMap, string>>
  * mutable state, and a caller reaching the live reference could corrupt
  * every subsequent snapshot and frame through it (plain JSON by the unit
  * contract, so the clone is total).
+ * A released unit contributes the Session's last cell. The registry no
+ * longer advances that cell, while a retained handle read still advances it
+ * forward, so a writer running after a plugin unloads keeps that unit's
+ * latest state; a Session that has no cell of it gets no row. {@link restore}
+ * folds only live units, so its refreshed rows omit released units.
  * @param session - the session whose unit states are checkpointed.
- * @returns one row per registered key.
+ * @returns one row per registered key, plus one per released key with a cell for this Session.
  */
 checkpoint(session: Session): ProjectionCheckpoint
 
@@ -426,7 +433,7 @@ checkpoint(session: Session): ProjectionCheckpoint
  * re-read.
  * @param checkpoint - persisted rows for one session (possibly stale or empty).
  * @returns the offset for the stored-log suffix read (`SessionHandle.read`),
- *   or `undefined` when no unit is registered (no read needed —
+ *   or `undefined` when no live unit is registered (released predecessors do not count; no read needed —
  *   {@link restore} would serve empty values regardless).
  */
 restoreFloor(checkpoint: ProjectionCheckpoint): SessionLogOffset | undefined
@@ -467,6 +474,8 @@ viewCheckpoint( checkpoint: ProjectionCheckpoint, keys?: ProjectionKeySelection,
  * @returns the snapshot cut at the supplied log end (`asOfSeq` is the last
  *   supplied event's seq, `baseSeq - 1` for an empty tail) plus the
  *   refreshed checkpoint rows at that cut, ready for a durable write-back.
+ *   The rows cover live units only: a released unit has no cell for a log
+ *   folded without a live `Session`, so a write-back of them omits it.
  */
 restore( checkpoint: ProjectionCheckpoint, events: readonly SessionEvent[], baseSeq: SessionLogOffset, header: SessionHeader, inheritedEventCount: SessionLogOffset, ): { snapshot: ProjectionSnapshot; checkpoint: ProjectionCheckpoint }
 
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/projection-released-checkpoint/guide.i18n.yaml b/docs/upgrade-guide/v0.2.2-alpha.2/projection-released-checkpoint/guide.i18n.yaml
new file mode 100644
index 0000000000..b4d7a475e4
--- /dev/null
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/projection-released-checkpoint/guide.i18n.yaml
@@ -0,0 +1,16 @@
+# Bilingual-pair consistency record for guide.md (docs/i18n/README.md): per heading
+# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
+# After editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write docs/upgrade-guide/v0.2.2-alpha.2/projection-released-checkpoint/guide.md
+/:
+  en: 738f2376c5a8ebe5
+  zh: 078f2a08d8b6ad4b
+/released-projection-units-stay-in-checkpoints:
+  en: 9355d9de711acc7d
+  zh: eb89da6b886a7556
+/released-projection-units-stay-in-checkpoints/change:
+  en: 5944b6c7b72e15e4
+  zh: 051d68e2eb5151d7
+/released-projection-units-stay-in-checkpoints/migration:
+  en: 9f24ecf12748eb41
+  zh: c07649e79a0174f9
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/projection-released-checkpoint/guide.md b/docs/upgrade-guide/v0.2.2-alpha.2/projection-released-checkpoint/guide.md
new file mode 100644
index 0000000000..125c513005
--- /dev/null
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/projection-released-checkpoint/guide.md
@@ -0,0 +1,30 @@
+---
+kind: upgrade-guide
+description: "`ctx.sessionProjections.checkpoint(session)` keeps a released unit's last row instead of omitting it."
+---
+
+# Released projection units stay in checkpoints
+
+English | [中文](guide.zh.md)
+
+## Change
+
+Previously, when the last registrant of a projection key released it, through `handle.dispose()` or by unloading the owning fiber, the registry deleted the unit and `ctx.sessionProjections.checkpoint(session)` stopped returning its row.
+
+Now the released unit stays in the registry as a predecessor. It leaves event drives, `snapshot()`, `summaryKeys()`, `restoreFloor()`, `restore()`, `viewCheckpoint()`, and `hydrate()`, and Sessions created afterward get no cell for it. `checkpoint(session)` still returns the last row the unit folded for each existing Session, and the registry no longer advances that row. Registering the same key again replaces the predecessor and refolds the log; see the [registration lifecycle](../../../../packages/session/session-projection/README.md).
+
+This affects plugin code and tests that read `checkpoint()` after a projection's owner unloads, such as HMR tests that assert a released key is absent. `@deepseek-ai/dsh-session-projection-cache` stores these rows, so a graceful shutdown no longer drops the values that Web-layer plugins folded before their Sessions detach.
+
+## Migration
+
+1. Find reads of `sessionProjections.checkpoint(...)` that run after a projection's owner unloads, including calls through an alias of `ctx.sessionProjections`.
+2. Replace an assertion that the released key is absent from an existing Session with one that its row keeps the pre-unload value:
+
+   ```ts ignore-check
+   const row = ctx.sessionProjections.checkpoint(session).myKey
+   await owner.dispose()
+   expect(ctx.sessionProjections.checkpoint(session)).toHaveProperty('myKey', row)
+   ```
+
+3. To show that the unit left live participation, assert that a Session created after the unload has no row, `expect(ctx.sessionProjections.checkpoint(ctx.sessions.create())).not.toHaveProperty('myKey')`, or that an event appended after the unload leaves the row unchanged. A client-visible key is also absent from `snapshot(session).values`.
+4. Run the affected tests; they pass when no assertion expects a released key to disappear from an existing Session's checkpoint.
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/projection-released-checkpoint/guide.zh.md b/docs/upgrade-guide/v0.2.2-alpha.2/projection-released-checkpoint/guide.zh.md
new file mode 100644
index 0000000000..7ec9b32ece
--- /dev/null
+++ b/docs/upgrade-guide/v0.2.2-alpha.2/projection-released-checkpoint/guide.zh.md
@@ -0,0 +1,30 @@
+---
+kind: upgrade-guide
+description: "`ctx.sessionProjections.checkpoint(session)` 保留已释放单元的最后一行，而不再省略它。"
+---
+
+# 已释放的投影单元保留在检查点中
+
+[English](guide.md) | 中文
+
+## 变更
+
+此前，投影 key 的最后一个注册方通过 `handle.dispose()` 或卸载所属 fiber 释放它时，注册表会删除该单元，`ctx.sessionProjections.checkpoint(session)` 也不再返回它的行。
+
+现在，已释放的单元作为前任留在注册表中。它退出事件推进、`snapshot()`、`summaryKeys()`、`restoreFloor()`、`restore()`、`viewCheckpoint()` 和 `hydrate()`，此后新建的 Session 也不会为它建立 cell。`checkpoint(session)` 仍为每个已有 Session 返回该单元最后折叠出的行，注册表不再推进这一行。同一 key 再次注册时会替换前任并重新折叠日志；参见[注册生命周期](../../../../packages/session/session-projection/README.zh.md)。
+
+这会影响在投影所属方卸载后读取 `checkpoint()` 的插件代码和测试，例如断言已释放 key 不存在的 HMR 测试。`@deepseek-ai/dsh-session-projection-cache` 会存储这些行，因此正常关停不再丢掉 Web 层插件在其 Session detach 之前已折叠出的值。
+
+## 迁移
+
+1. 找出在投影所属方卸载后执行的 `sessionProjections.checkpoint(...)` 读取，包括通过 `ctx.sessionProjections` 别名的调用。
+2. 把「已有 Session 中不存在已释放 key」的断言，改为断言它的行保持卸载前的值：
+
+   ```ts ignore-check
+   const row = ctx.sessionProjections.checkpoint(session).myKey
+   await owner.dispose()
+   expect(ctx.sessionProjections.checkpoint(session)).toHaveProperty('myKey', row)
+   ```
+
+3. 如需证明该单元已退出实时参与，可断言卸载后新建的 Session 没有这一行，即 `expect(ctx.sessionProjections.checkpoint(ctx.sessions.create())).not.toHaveProperty('myKey')`，或断言卸载后追加的事件不会改变这一行。客户端可见的 key 也不会出现在 `snapshot(session).values` 中。
+4. 运行受影响的测试；当没有断言要求已释放 key 从已有 Session 的检查点中消失时，测试即通过。
diff --git a/packages/context/time-context/tests/time-context.spec.ts b/packages/context/time-context/tests/time-context.spec.ts
index bd4883a13e..ba07a2f1f6 100644
--- a/packages/context/time-context/tests/time-context.spec.ts
+++ b/packages/context/time-context/tests/time-context.spec.ts
@@ -455,7 +455,7 @@ describe('time-context projection fold edges', () => {
     expect(contextTexts(cold).at(-1)).toContain('mixed ["America/New_York","Asia/Shanghai"]')
   })
 
-  it('rebuilds an old checkpoint from the full journal and removes the unit on unload', async () => {
+  it('rebuilds an old checkpoint from the full journal and freezes the unit on unload', async () => {
     const { ctx, fiber } = await mount()
     onTestFinished(() => ctx.fiber.dispose())
     const session = Session.create(SessionId('browser-old-row'))
@@ -474,8 +474,12 @@ describe('time-context projection fold edges', () => {
     expect(ctx.sessionProjections.checkpoint(cold).timeContext).toEqual({
       ver: 3, seq: cold.seq - 1, val: rows.timeContext!.val,
     })
+    const row = ctx.sessionProjections.checkpoint(cold).timeContext
     await fiber.dispose()
-    expect(ctx.sessionProjections.checkpoint(cold).timeContext).toBeUndefined()
+    openMessageTurn(cold, 2, 'UTC')
+    // The released unit keeps the hydrated row and folds no event after the unload.
+    expect(ctx.sessionProjections.checkpoint(cold)).toHaveProperty('timeContext', row)
+    expect(ctx.sessionProjections.checkpoint(Session.create(SessionId('browser-after-unload')))).not.toHaveProperty('timeContext')
   })
 
   it('retains reported invalid zones without validating rejected or throttled requests', async () => {
diff --git a/packages/core/agent-loop/tests/inbox.spec.ts b/packages/core/agent-loop/tests/inbox.spec.ts
index 5bfe365bd3..d8ae3b3ba5 100644
--- a/packages/core/agent-loop/tests/inbox.spec.ts
+++ b/packages/core/agent-loop/tests/inbox.spec.ts
@@ -107,9 +107,11 @@ describe('ReactLoopInbox', () => {
       'next-turn': [pending],
       'next-step': [],
     })
+    const row = ctx.sessionProjections.checkpoint(session).inbox
 
     await projection.dispose()
-    expect(ctx.sessionProjections.checkpoint(session).inbox?.val).toBeUndefined()
+    expect(ctx.sessionProjections.checkpoint(session)).toHaveProperty('inbox', row)
+    expect(ctx.sessionProjections.checkpoint(ctx.sessions.create())).not.toHaveProperty('inbox')
     expect(first.nextTurn).toEqual([pending])
     first.clear()
     expect(second.nextTurn).toEqual([])
diff --git a/packages/core/agent-loop/tests/resource-lifecycle.spec.ts b/packages/core/agent-loop/tests/resource-lifecycle.spec.ts
index 991746f567..134a594461 100644
--- a/packages/core/agent-loop/tests/resource-lifecycle.spec.ts
+++ b/packages/core/agent-loop/tests/resource-lifecycle.spec.ts
@@ -71,7 +71,9 @@ it.each([0, 1, 2])('retains Agent resources until all work exits with %i failed
   expect(scopeDisposedBeforeWorkExit).toBe(false)
   expect(scopeDisposed).toBe(true)
   expect(abortHandled).toBe(1)
-  expect(projections.checkpoint(agent.session).inbox).toBeUndefined()
+  // The released inbox unit keeps this Session's last row; a Session created after the unload gets none.
+  expect(projections.checkpoint(agent.session)).toHaveProperty('inbox')
+  expect(projections.checkpoint(ctx.sessions.create())).not.toHaveProperty('inbox')
   expect(projections.checkpoint(agent.session).turnBoundary).toBeDefined()
   expect(ctx.agents.get(agent.id)).toBeUndefined()
   expect(ctx.sessions.get(agent.session.id)).toBeUndefined()
diff --git a/packages/core/agent-loop/tests/scope-lifecycle.spec.ts b/packages/core/agent-loop/tests/scope-lifecycle.spec.ts
index bb760489f0..8fabc08787 100644
--- a/packages/core/agent-loop/tests/scope-lifecycle.spec.ts
+++ b/packages/core/agent-loop/tests/scope-lifecycle.spec.ts
@@ -325,8 +325,14 @@ describe('agent scope lifecycle', () => {
     expect(ctx.sessionProjections.checkpoint(second.agent.session).inbox?.val).toBeDefined()
 
     await Promise.all([first.dispose(), second.dispose()])
+    const row = ctx.sessionProjections.checkpoint(second.agent.session).inbox
+    const coldRow = ctx.sessionProjections.checkpoint(cold).inbox
     await loopFiber.dispose()
-    expect(ctx.sessionProjections.checkpoint(second.agent.session).inbox?.val).toBeUndefined()
+    cold.append('turn/start', { turn: 1 })
+    // The released unit keeps each Session's last row and folds no event after the unload.
+    expect(ctx.sessionProjections.checkpoint(second.agent.session)).toHaveProperty('inbox', row)
+    expect(ctx.sessionProjections.checkpoint(cold)).toHaveProperty('inbox', coldRow)
+    expect(ctx.sessionProjections.checkpoint(ctx.sessions.create(SessionId('projection-after-unload')))).not.toHaveProperty('inbox')
   })
 
   it('agent.ctx listeners hear only their own agent (scoped dispatch end to end)', async () => {
diff --git a/packages/core/agent/tests/agent.spec.ts b/packages/core/agent/tests/agent.spec.ts
index 54c5111eef..c5274de109 100644
--- a/packages/core/agent/tests/agent.spec.ts
+++ b/packages/core/agent/tests/agent.spec.ts
@@ -61,9 +61,13 @@ describe('AgentRegistry', () => {
     })
     session.append('turn/end', { turn: 3, reason: { kind: 'completed' } })
     expect(ctx.agents.turnBoundaryOf(session)).toMatchObject({ openTurnStartSeq: null, lastTurn: 3 })
-    expect(ctx.sessionProjections.checkpoint(session).turnBoundary).toBeDefined()
+    const row = ctx.sessionProjections.checkpoint(session).turnBoundary
+    expect(row).toBeDefined()
     await fiber.dispose()
-    expect(ctx.sessionProjections.checkpoint(session).turnBoundary).toBeUndefined()
+    session.append('turn/start', { turn: 4 })
+    // The released unit keeps its last row and folds no event after the unload.
+    expect(ctx.sessionProjections.checkpoint(session)).toHaveProperty('turnBoundary', row)
+    expect(ctx.sessionProjections.checkpoint(Session.create(SessionId('turn-positions-after-unload')))).not.toHaveProperty('turnBoundary')
   })
 
   it('contributes Agent lookup and scoped Context providers while Typert is live', async () => {
diff --git a/packages/experimental/agent-team/tests/team.spec.ts b/packages/experimental/agent-team/tests/team.spec.ts
index b9da455b78..0e22113c66 100644
--- a/packages/experimental/agent-team/tests/team.spec.ts
+++ b/packages/experimental/agent-team/tests/team.spec.ts
@@ -1164,11 +1164,13 @@ describe('Team direct messages and waiting', () => {
       readDuringShutdown = true
       if (fails) throw new Error('admitted operation failed during shutdown')
     }))
+    const row = ctx.sessionProjections.checkpoint(lead.session).agentTeam
     const disposal = teamFiber.dispose()
     try {
       await vi.waitFor(() => {
         expect(internal.lifecycle.disposed).toBe(true)
-        expect(ctx.sessionProjections.checkpoint(lead.session)).not.toHaveProperty('agentTeam')
+        expect(ctx.sessionProjections.checkpoint(lead.session)).toHaveProperty('agentTeam', row)
+        expect(ctx.sessionProjections.checkpoint(ctx.sessions.create())).not.toHaveProperty('agentTeam')
       })
       expect(readDuringShutdown).toBe(false)
     } finally {
diff --git a/packages/experimental/client-ui-forge/tests/controller.host.spec.ts b/packages/experimental/client-ui-forge/tests/controller.host.spec.ts
index 1d9e14a3f4..e379ac3126 100644
--- a/packages/experimental/client-ui-forge/tests/controller.host.spec.ts
+++ b/packages/experimental/client-ui-forge/tests/controller.host.spec.ts
@@ -1671,11 +1671,13 @@ describe('forgePanel lifecycle', () => {
     const opened = await open(repo, {}, { worktrees: true })
     await opened.ctx.forgePanel.requestWorktree(opened.session, null, signal)
     const proposed = prompt('go')
+    const row = opened.ctx.sessionProjections.checkpoint(opened.session).forgeWorktree
 
     await opened.panel.dispose()
 
     expect(opened.ctx.get('forgePanel')).toBeUndefined()
-    expect(opened.ctx.sessionProjections.checkpoint(opened.session)).not.toHaveProperty('forgeWorktree')
+    expect(opened.ctx.sessionProjections.checkpoint(opened.session)).toHaveProperty('forgeWorktree', row)
+    expect(opened.ctx.sessionProjections.checkpoint(opened.ctx.sessions.create())).not.toHaveProperty('forgeWorktree')
     sendPrompt(opened.agent, 'go')
     await expect(proposeStep(opened.ctx, opened.agent, { turn: 1, step: 1, messages: [proposed] })).resolves.toEqual({ kind: 'enter', messages: [proposed] })
     expect(opened.ctx.workingDirectory.get(opened.session)).toBe(repo)
diff --git a/packages/experimental/forge-session/tests/loader-composition.spec.ts b/packages/experimental/forge-session/tests/loader-composition.spec.ts
index e8fa6af4c9..acf51fb418 100644
--- a/packages/experimental/forge-session/tests/loader-composition.spec.ts
+++ b/packages/experimental/forge-session/tests/loader-composition.spec.ts
@@ -370,7 +370,9 @@ suite('forge-session through a real cordis.yml Loader composition', () => {
       : null)).toEqual([['Change 7', 'pending'], ['Change 8', 'success'], ['Change 9', 'success']]) })
 
     const entry = [...ctx.loader.entries()].find(candidate => candidate.options.name === 'cordis:@deepseek-ai/dsh-experimental-forge-session')
+    const row = ctx.sessionProjections.checkpoint(agent.session).forgeChangeRequests
     await entry?.fiber?.dispose()
-    expect(ctx.sessionProjections.checkpoint(agent.session)).not.toHaveProperty('forgeChangeRequests')
+    expect(ctx.sessionProjections.checkpoint(agent.session)).toHaveProperty('forgeChangeRequests', row)
+    expect(ctx.sessionProjections.checkpoint(ctx.sessions.create())).not.toHaveProperty('forgeChangeRequests')
   }, 60_000)
 })
diff --git a/packages/experimental/forge-session/tests/service.spec.ts b/packages/experimental/forge-session/tests/service.spec.ts
index bc15b816ad..ee13cc3341 100644
--- a/packages/experimental/forge-session/tests/service.spec.ts
+++ b/packages/experimental/forge-session/tests/service.spec.ts
@@ -394,13 +394,16 @@ describe('forgeSession lifecycle', () => {
   it('unregisters its projection and stops discovery when the service fiber is disposed', async () => {
     const { ctx, provider, session, service } = await open()
     create(session, 'create', pullUrl(1))
-    expect(ctx.sessionProjections.checkpoint(session).forgeChangeRequests?.val).toMatchObject({ bindings: [{ url: pullUrl(1) }] })
+    const row = ctx.sessionProjections.checkpoint(session).forgeChangeRequests
+    expect(row?.val).toMatchObject({ bindings: [{ url: pullUrl(1) }] })
 
     await service.dispose()
     push(session, 'push', 'feat')
     await settle()
 
-    expect(ctx.sessionProjections.checkpoint(session)).not.toHaveProperty('forgeChangeRequests')
+    // The released unit keeps its last row and folds no event after the unload.
+    expect(ctx.sessionProjections.checkpoint(session)).toHaveProperty('forgeChangeRequests', row)
+    expect(ctx.sessionProjections.checkpoint(ctx.sessions.create())).not.toHaveProperty('forgeChangeRequests')
     expect(provider.lookups).toEqual([])
   })
 
diff --git a/packages/extensions/tool-cordis/src/api-catalog.ts b/packages/extensions/tool-cordis/src/api-catalog.ts
index 8267448232..9ebb1f644f 100644
--- a/packages/extensions/tool-cordis/src/api-catalog.ts
+++ b/packages/extensions/tool-cordis/src/api-catalog.ts
@@ -2952,7 +2952,7 @@ export const SERVICE_API: readonly ServiceApiEntry[] = [
   {
     key: 'sessionProjections',
     summary: '`ctx.sessionProjections`: the projection unit table and its drive.',
-    description: '`ctx.sessionProjections`: the projection unit table and its drive. The service subscribes to `session/event` once; every committed event passes every registered unit\'s `apply` (eager drive). A changed state reference computes the next client view; the change feed is notified only when its raw result changes by `Object.is`. Cells build lazily — a unit registered after events flowed, or a session older than the registry, folds `init` over the in-memory log on first touch (event or read). Consumers declare `sessionProjections` as a required injection, await registration during activation, and retain its ready handle. Registrants sharing a key share one unit and are counted. The last release removes the unit from live drives, checkpoints, and client snapshots; retained handles still fold new events on demand using the original unit.',
+    description: '`ctx.sessionProjections`: the projection unit table and its drive. The service subscribes to `session/event` once; every committed event passes every registered unit\'s `apply` (eager drive). A changed state reference computes the next client view; the change feed is notified only when its raw result changes by `Object.is`. Cells build lazily — a unit registered after events flowed, or a session older than the registry, folds `init` over the in-memory log on first touch (event or read). Consumers declare `sessionProjections` as a required injection, await registration during activation, and retain its ready handle. Registrants sharing a key share one unit and are counted. The last release removes the unit from live drives, restores, and client snapshots, while checkpoints keep each Session\'s last cell of it until the key registers again and the new unit refolds the log; retained handles still fold new events on demand using the original unit.',
     methods: [
       {
         signature: 'register<K extends keyof SessionProjectionMap, S>( definition: Omit<ProjectionDefinition<K, S>, \'wire\'> & { wire: NonNullable<ProjectionDefinition<K, S>[\'wire\']> }, ): Promise<ProjectionHandle<S>>',
@@ -2992,15 +2992,15 @@ export const SERVICE_API: readonly ServiceApiEntry[] = [
       },
       {
         signature: 'checkpoint(session: Session): ProjectionCheckpoint',
-        description: 'State-level checkpoint of every persisted unit for one session, read from the watermark cache (missing cells fold lazily over the in-memory log). This is the write side of the persisted projection cache: the returned rows are the `(key → {ver, seq, val})` part of the durable `(sessionId, key, ver, seq, val)` rows. Every `val` is a DETACHED structured clone — never the live cell reference: the watermark cache is this registry\'s authoritative mutable state, and a caller reaching the live reference could corrupt every subsequent snapshot and frame through it (plain JSON by the unit contract, so the clone is total).',
+        description: 'State-level checkpoint of every persisted unit for one session, read from the watermark cache (missing cells fold lazily over the in-memory log). This is the write side of the persisted projection cache: the returned rows are the `(key → {ver, seq, val})` part of the durable `(sessionId, key, ver, seq, val)` rows. Every `val` is a DETACHED structured clone — never the live cell reference: the watermark cache is this registry\'s authoritative mutable state, and a caller reaching the live reference could corrupt every subsequent snapshot and frame through it (plain JSON by the unit contract, so the clone is total). A released unit contributes the Session\'s last cell. The registry no longer advances that cell, while a retained handle read still advances it forward, so a writer running after a plugin unloads keeps that unit\'s latest state; a Session that has no cell of it gets no row. restore folds only live units, so its refreshed rows omit released units.',
         parameters: [{ name: 'session', description: 'the session whose unit states are checkpointed.' }],
-        returns: 'one row per registered key.',
+        returns: 'one row per registered key, plus one per released key with a cell for this Session.',
       },
       {
         signature: 'restoreFloor(checkpoint: ProjectionCheckpoint): SessionLogOffset | undefined',
         description: 'The stored seq a restore tail read over `checkpoint` must start at: one event BELOW the lowest usable watermark (a row is usable when its `ver` matches the live unit\'s `stateVersion`; an absent or mismatched row pulls the floor to `0` — that key must refold the full log). The one-below anchor is load-bearing: the tail then proves how far the stored log still extends, so restore can detect a log that shrank below a row\'s watermark (crash-repair truncation) instead of serving the stale row as current — an empty tail read from the anchor yields an end below every watermark and the restore rejects for a full re-read.',
         parameters: [{ name: 'checkpoint', description: 'persisted rows for one session (possibly stale or empty).' }],
-        returns: 'the offset for the stored-log suffix read (`SessionHandle.read`), or `undefined` when no unit is registered (no read needed — {@link restore} would serve empty values regardless).',
+        returns: 'the offset for the stored-log suffix read (`SessionHandle.read`), or `undefined` when no live unit is registered (released predecessors do not count; no read needed — {@link restore} would serve empty values regardless).',
       },
       {
         signature: 'viewCheckpoint( checkpoint: ProjectionCheckpoint, keys?: ProjectionKeySelection, ): Partial<SessionProjectionMap>',
@@ -3012,7 +3012,7 @@ export const SERVICE_API: readonly ServiceApiEntry[] = [
         signature: 'restore( checkpoint: ProjectionCheckpoint, events: readonly SessionEvent[], baseSeq: SessionLogOffset, header: SessionHeader, inheritedEventCount: SessionLogOffset, ): { snapshot: ProjectionSnapshot; checkpoint: ProjectionCheckpoint }',
         description: 'Cold read: fold every persisted unit over a stored log suffix, seeding each from its checkpoint row when usable — the one read recipe (cached state + forward tail replay + `view`) applied without a live `Session`. Call with the stored events at or past `restoreFloor(checkpoint)` (a `SessionHandle.read` slice) and that same floor as `baseSeq`; the floor\'s one-below anchor makes the supplied end honest, so a shrunk log is detected here. A row is usable iff its `ver` matches the live unit\'s `stateVersion`, it does not predate `baseSeq` (`seq >= baseSeq - 1`), and it does not claim events past the supplied end (`seq <= endSeq`); an unusable row is discarded and its key refolds from `init` — which is only sound over the full log, so a discarded row with `baseSeq > 0` throws (the caller re-reads from seq 0, e.g. after a crash-repair truncation shrank the log below a row\'s watermark).',
         parameters: [{ name: 'checkpoint', description: 'persisted rows for one session (possibly stale or empty).' }, { name: 'events', description: 'the stored events with `seq >= baseSeq`, in seq order.' }, { name: 'baseSeq', description: 'the seq `events` starts at (its first event\'s seq when non-empty).' }, { name: 'header', description: 'immutable metadata for the Session being restored.' }, { name: 'inheritedEventCount', description: 'exact fork-inherited prefix length supplied to unit initialization.' }],
-        returns: 'the snapshot cut at the supplied log end (`asOfSeq` is the last supplied event\'s seq, `baseSeq - 1` for an empty tail) plus the refreshed checkpoint rows at that cut, ready for a durable write-back.',
+        returns: 'the snapshot cut at the supplied log end (`asOfSeq` is the last supplied event\'s seq, `baseSeq - 1` for an empty tail) plus the refreshed checkpoint rows at that cut, ready for a durable write-back. The rows cover live units only: a released unit has no cell for a log folded without a live `Session`, so a write-back of them omits it.',
       },
       {
         signature: 'hydrate( session: Session, checkpoint: ProjectionCheckpoint, events: readonly SessionEvent[], baseSeq: SessionLogOffset, ): ProjectionSnapshot',
diff --git a/packages/goal/goal/tests/goal.spec.ts b/packages/goal/goal/tests/goal.spec.ts
index 363540ab3c..d4e1c0e680 100644
--- a/packages/goal/goal/tests/goal.spec.ts
+++ b/packages/goal/goal/tests/goal.spec.ts
@@ -287,10 +287,14 @@ describe('GoalService creation and replay', () => {
     const stub = stubAgent('goal-hmr')
     await ctx.agents.register(stub.agent)
     const goal = ctx.goals.create(stub.agent, { objective: 'survive service reload' })
+    const row = ctx.sessionProjections.checkpoint(stub.session).goal
 
     await fiber.dispose()
     expect(ctx.get('goals')).toBeUndefined()
-    expect(ctx.sessionProjections.checkpoint(stub.session).goal?.val).toBeUndefined()
+    stub.session.append('turn/start', { turn: 1 })
+    // The released unit keeps its last row and folds no event after the unload.
+    expect(ctx.sessionProjections.checkpoint(stub.session)).toHaveProperty('goal', row)
+    expect(ctx.sessionProjections.checkpoint(Session.create(SessionId('goal-after-unload')))).not.toHaveProperty('goal')
     expect(() => first.get(stub.agent)).toThrow('cannot get required service "agents" in inactive context')
 
     await ctx.plugin(GoalService)
diff --git a/packages/interaction/user-approval/tests/projection.spec.ts b/packages/interaction/user-approval/tests/projection.spec.ts
index d58110e0e0..7ed69a8b6c 100644
--- a/packages/interaction/user-approval/tests/projection.spec.ts
+++ b/packages/interaction/user-approval/tests/projection.spec.ts
@@ -123,9 +123,14 @@ describe('approval state', () => {
     expect(ctx.approval.overrideOf(session)).toBe('never')
     expect(read).not.toHaveBeenCalled()
     expect(snapshot).not.toHaveBeenCalled()
+    const row = ctx.sessionProjections.checkpoint(session)['approvalState']
 
     await service.dispose()
-    expect(ctx.sessionProjections.checkpoint(session)).not.toHaveProperty('approvalState')
+    session.append('turn/start', { turn: 1 })
+    session.append('turn/end', { turn: 1, reason: { kind: 'completed' } })
+    // The released unit keeps its last row and folds no event after the unload.
+    expect(ctx.sessionProjections.checkpoint(session)).toHaveProperty('approvalState', row)
+    expect(ctx.sessionProjections.checkpoint(ctx.sessions.create())).not.toHaveProperty('approvalState')
     await ctx.plugin(ApprovalService)
     expect(ctx.approval.overrideOf(session)).toBe('never')
     expect(ctx.sessionProjections.checkpoint(session)['approvalState']?.val).toEqual({ policy: 'never', turnOpen: false })
@@ -214,10 +219,13 @@ describe('approval state', () => {
     await registration.entered
     const session = ctx.sessions.create()
     setApprovalPolicy(session, 'never')
+    const row = ctx.sessionProjections.checkpoint(session)['approvalState']
     const unloading = fiber.dispose()
     registration.release()
     await unloading
-    expect(ctx.sessionProjections.checkpoint(session)).not.toHaveProperty('approvalState')
+    session.append('turn/start', { turn: 1 })
+    expect(ctx.sessionProjections.checkpoint(session)).toHaveProperty('approvalState', row)
+    expect(ctx.sessionProjections.checkpoint(ctx.sessions.create())).not.toHaveProperty('approvalState')
     expect(ctx.get('approval')).toBeUndefined()
     const prompt = await ctx.systemPrompt.assemble({ agent: agentFor(session) })
     expect(prompt.contexts).not.toContainEqual(expect.objectContaining({ name: 'approval:policy' }))
diff --git a/packages/llm/token-meter/tests/token-meter.spec.ts b/packages/llm/token-meter/tests/token-meter.spec.ts
index a81ee8828b..ee0dd22e66 100644
--- a/packages/llm/token-meter/tests/token-meter.spec.ts
+++ b/packages/llm/token-meter/tests/token-meter.spec.ts
@@ -137,11 +137,15 @@ describe('TokenMeter configuration and registration', () => {
     const fiber = await ctx.plugin(TokenMeter)
     expect(ctx.get('tokenMeter')).toBeInstanceOf(TokenMeter)
     const session = ctx.sessions.create()
-    expect(Object.keys(ctx.sessionProjections.checkpoint(session)).sort())
+    const rows = ctx.sessionProjections.checkpoint(session)
+    expect(Object.keys(rows).sort())
       .toEqual(['contextBreakdown', 'contextPressure', 'tokenMeasurement', 'tokenUsage'])
     await fiber.dispose()
     expect(ctx.get('tokenMeter')).toBeUndefined()
-    expect(ctx.sessionProjections.checkpoint(session)).toEqual({})
+    session.append('turn/start', { turn: 1 })
+    // The released units keep their last rows and fold no event after the unload.
+    expect(ctx.sessionProjections.checkpoint(session)).toEqual(rows)
+    expect(ctx.sessionProjections.checkpoint(ctx.sessions.create())).toEqual({})
     await ctx.fiber.dispose()
   })
 })
diff --git a/packages/session/session-projection-cache/README.i18n.yaml b/packages/session/session-projection-cache/README.i18n.yaml
index 4d5408b806..49ecc7d893 100644
--- a/packages/session/session-projection-cache/README.i18n.yaml
+++ b/packages/session/session-projection-cache/README.i18n.yaml
@@ -27,8 +27,8 @@
   en: bae62224d0008bc0
   zh: 0daf92dab3314913
 /deepseek-ai-dsh-session-projection-cache/use-this-package/reading-cached-values:
-  en: e8dc676fbfe97c5b
-  zh: 686837459289fd41
+  en: 342e5c8be6ab3a37
+  zh: ff09481eebf0b4cc
 /deepseek-ai-dsh-session-projection-cache/use-this-package/what-the-cache-guarantees:
   en: 6e4878de28ea113e
   zh: 6f940a2220585b5e
diff --git a/packages/session/session-projection-cache/README.md b/packages/session/session-projection-cache/README.md
index 8aa797b35a..242dedeb1b 100644
--- a/packages/session/session-projection-cache/README.md
+++ b/packages/session/session-projection-cache/README.md
@@ -58,7 +58,7 @@ Three mandatory points always write: session creation persists the seed-derived
 
 ### Reading cached values
 
-`cachedSnapshot(meta, keys?)` is the read-only face: it synchronously serves client values from the storage domain's in-memory tables with zero I/O. It accepts a record whose lifecycle identity (`formatVersion`, `createdAt`, `cwd`, `isSeeded`) matches the header and serves its version- and schema-matching keys as one block whose `asOfSeq` is the lowest watermark among the served rows. That watermark is the stored record's own: a header witnesses no inherited cut and cannot vouch that the row sequence is comparable with the log a consumer later opens, so the Session list labels the block `cached` and the client lets every value the connected Session later produces supersede it. Within one format generation the cut is fixed at fork time and distinguishes no lifecycle the other fields do not, and a viewed value never seeds a fold, so seeded (forked) sessions are served exactly like unseeded ones. `cachedPredecessorTitle(meta)` is the narrower listing-only exception across a Session-format edge: a structurally admitted predecessor record whose lifecycle matches may expose only a current-version-compatible `title` row, because title text is invariant across the adjacent edges. All other predecessor rows remain unavailable. `coldSnapshot(meta, inheritedEventCount, events)` is a fold face: it accepts the exact cut with a complete ordered log, skips the checkpointed prefix while folding, and refreshes the record without reading persistence itself.
+`cachedSnapshot(meta, keys?)` is the read-only face: it synchronously serves client values from the storage domain's in-memory tables with zero I/O. It accepts a record whose lifecycle identity (`formatVersion`, `createdAt`, `cwd`, `isSeeded`) matches the header and serves its version- and schema-matching keys as one block whose `asOfSeq` is the lowest watermark among the served rows. That watermark is the stored record's own: a header witnesses no inherited cut and cannot vouch that the row sequence is comparable with the log a consumer later opens, so the Session list labels the block `cached` and the client lets every value the connected Session later produces supersede it. A row can also be frozen where its projection unit was released before the write, so its watermark may trail the log by more than the last checkpoint interval. Within one format generation the cut is fixed at fork time and distinguishes no lifecycle the other fields do not, and a viewed value never seeds a fold, so seeded (forked) sessions are served exactly like unseeded ones. `cachedPredecessorTitle(meta)` is the narrower listing-only exception across a Session-format edge: a structurally admitted predecessor record whose lifecycle matches may expose only a current-version-compatible `title` row, because title text is invariant across the adjacent edges. All other predecessor rows remain unavailable. `coldSnapshot(meta, inheritedEventCount, events)` is a fold face: it accepts the exact cut with a complete ordered log, skips the checkpointed prefix while folding, and refreshes the record without reading persistence itself.
 
 ### What the cache guarantees
 
diff --git a/packages/session/session-projection-cache/README.zh.md b/packages/session/session-projection-cache/README.zh.md
index 46d2c13bab..f8fc53feee 100644
--- a/packages/session/session-projection-cache/README.zh.md
+++ b/packages/session/session-projection-cache/README.zh.md
@@ -58,7 +58,7 @@ kind: "package-reference"
 
 ### 读取缓存值
 
-`cachedSnapshot(meta, keys?)` 是只读面：以零 I/O 从存储域的内存表同步提供客户端值。它接受生命周期身份（`formatVersion`、`createdAt`、`cwd`、`isSeeded`）与 header 匹配的记录，把其中版本和 schema 均匹配的 key 作为一个 block 提供，其 `asOfSeq` 是所服务各行中最低的水位。这个水位是存储记录自己的：header 作证不了 inherited cut，也作证不了行序号与消费者稍后打开的日志可比，因此 Session list 把该 block 标为 `cached`，客户端让建连后的 Session 产出的任何值覆盖它。在同一格式代内，cut 在 fork 时写死，不能区分其他字段区分不了的生命周期，而只读视图也从不播种 fold，所以 seeded（fork 出来的）会话与 unseeded 会话被同样地提供。`cachedPredecessorTitle(meta)` 是跨 Session 格式 edge 的更窄列表专用例外：生命周期匹配且已通过结构准入的 predecessor record 只能公开与当前版本兼容的 `title` row，因为 title 文本在相邻 edge 之间保持不变。其他 predecessor row 仍不可用。`coldSnapshot(meta, inheritedEventCount, events)` 是 fold 面：接受精确切点与完整有序日志，在折叠时跳过已检查点化的前缀，并在自身不读取持久化层的情况下刷新记录。
+`cachedSnapshot(meta, keys?)` 是只读面：以零 I/O 从存储域的内存表同步提供客户端值。它接受生命周期身份（`formatVersion`、`createdAt`、`cwd`、`isSeeded`）与 header 匹配的记录，把其中版本和 schema 均匹配的 key 作为一个 block 提供，其 `asOfSeq` 是所服务各行中最低的水位。这个水位是存储记录自己的：header 作证不了 inherited cut，也作证不了行序号与消费者稍后打开的日志可比，因此 Session list 把该 block 标为 `cached`，客户端让建连后的 Session 产出的任何值覆盖它。某一行也可能冻结在写入前投影单元被释放的那一刻，因此它的水位落后于日志的程度可能超过最近一次检查点间隔。在同一格式代内，cut 在 fork 时写死，不能区分其他字段区分不了的生命周期，而只读视图也从不播种 fold，所以 seeded（fork 出来的）会话与 unseeded 会话被同样地提供。`cachedPredecessorTitle(meta)` 是跨 Session 格式 edge 的更窄列表专用例外：生命周期匹配且已通过结构准入的 predecessor record 只能公开与当前版本兼容的 `title` row，因为 title 文本在相邻 edge 之间保持不变。其他 predecessor row 仍不可用。`coldSnapshot(meta, inheritedEventCount, events)` 是 fold 面：接受精确切点与完整有序日志，在折叠时跳过已检查点化的前缀，并在自身不读取持久化层的情况下刷新记录。
 
 ### 缓存保证什么
 
diff --git a/packages/session/session-projection-cache/tests/cache.spec.ts b/packages/session/session-projection-cache/tests/cache.spec.ts
index 5f28fd8f82..a6078bf375 100644
--- a/packages/session/session-projection-cache/tests/cache.spec.ts
+++ b/packages/session/session-projection-cache/tests/cache.spec.ts
@@ -175,6 +175,23 @@ function whenWritten(ctx: Context, id: SessionId): Promise<void> {
   })
 }
 
+/** Register the secondary unit on its own fiber, so a test can release it before a Session detaches. */
+function releasableSecondaryUnit(ctx: Context) {
+  return ctx.plugin(Object.assign(async (inner: Context) => {
+    await inner.sessionProjections.register(secondaryMarksUnit)
+  }, { inject: ['sessionProjections'] }))
+}
+
+/** Create a Session owned by its own fiber; disposing `owner` detaches it. */
+async function ownedSession(ctx: Context, id: SessionId) {
+  let session: Session | undefined
+  const owner = await ctx.plugin(Object.assign((inner: Context) => {
+    session = inner.sessions.create(id)
+  }, { inject: ['sessions'] }))
+  if (session === undefined) throw new Error('session was not created')
+  return { session, owner }
+}
+
 /** The stored record for one session id (undefined = absent or unreadable). */
 async function storedRecord(root: string, id: Session['id']): Promise<CheckpointRecord | undefined> {
   try {
@@ -266,6 +283,95 @@ describe('SessionProjectionCache write policy', () => {
     expect((await storedRows(root, id))?.['cache-test/marks']?.val).toEqual({ marks: ['live'] })
   })
 
+  it('writes the last state of a unit released before the detach write', async () => {
+    const { ctx, root } = await harness()
+    const unitOwner = await releasableSecondaryUnit(ctx)
+    const id = SessionId('released-exact')
+    const created = whenWritten(ctx, id)
+    const { session, owner } = await ownedSession(ctx, id)
+    await created
+    mark(session, ['a'])
+    const ended = whenWritten(ctx, id)
+    const end = endTurn(session)
+    await ended
+    // A plugin unloading ahead of the Sessions it describes releases its unit first.
+    await unitOwner.dispose()
+    const detached = whenWritten(ctx, id)
+    await owner.dispose()
+    await detached
+    expect(await storedRows(root, id)).toEqual({
+      'cache-test/marks': { ver: 1, seq: end.seq, val: { marks: ['a'] } },
+      'cache-test/secondary-marks': { ver: 1, seq: end.seq, val: { marks: ['a'] } },
+    })
+  })
+
+  it('keeps a released unit at the event it reached while later events advance the live units', async () => {
+    const { ctx, root } = await harness()
+    const unitOwner = await releasableSecondaryUnit(ctx)
+    const id = SessionId('released-behind')
+    const created = whenWritten(ctx, id)
+    const { session, owner } = await ownedSession(ctx, id)
+    await created
+    mark(session, ['a'])
+    const ended = whenWritten(ctx, id)
+    const end = endTurn(session)
+    await ended
+    await unitOwner.dispose()
+    const later = mark(session, ['b'])
+    const detached = whenWritten(ctx, id)
+    await owner.dispose()
+    await detached
+    expect(await storedRows(root, id)).toEqual({
+      'cache-test/marks': { ver: 1, seq: later.seq, val: { marks: ['b'] } },
+      'cache-test/secondary-marks': { ver: 1, seq: end.seq, val: { marks: ['a'] } },
+    })
+  })
+
+  it('drops a stored row whose unit this process never registered', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'dsh-projcache-'))
+    roots.push(root)
+    const meta = headerOf(SessionId('carried'), 9)
+    await seedRecord(root, meta.id, {
+      'cache-test/marks': { ver: 1, seq: -1, val: null },
+      'cache-test/secret': { ver: 1, seq: -1, val: 'written by another composition' },
+    }, {
+      formatVersion: SESSION_FORMAT_VERSION,
+      createdAt: 9,
+      isSeeded: false,
+      inheritedEventCount: SessionLogOffset(0),
+    })
+    const { ctx } = await harness({ root })
+    const events: SessionEvent[] = [{ type: 'cache-test/mark', seq: SessionSeq(0), time: 0, data: { marks: ['cold'] } }]
+    const written = whenWritten(ctx, meta.id)
+    ctx.sessionProjectionCache.coldSnapshot(meta, SessionLogOffset(0), events)
+    await written
+    expect(await storedRows(root, meta.id)).toEqual({
+      'cache-test/marks': { ver: 1, seq: 0, val: { marks: ['cold'] } },
+    })
+  })
+
+  it('never keeps a stored row of another lifecycle under the same Session id', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'dsh-projcache-'))
+    roots.push(root)
+    const id = SessionId('recreated')
+    // Same id and cut as the Session created below, but another creation time.
+    await seedRecord(root, id, {
+      'cache-test/secondary-marks': { ver: 1, seq: -1, val: { marks: ['foreign'] } },
+    }, {
+      formatVersion: SESSION_FORMAT_VERSION,
+      createdAt: 1,
+      isSeeded: false,
+      inheritedEventCount: SessionLogOffset(0),
+    })
+    const { ctx } = await harness({ root })
+    const created = whenWritten(ctx, id)
+    ctx.sessions.create(id)
+    await created
+    expect(await storedRows(root, id)).toEqual({
+      'cache-test/marks': { ver: 1, seq: -1, val: null },
+    })
+  })
+
   it('flushes when the in-turn event count reaches the configured threshold', async () => {
     const { ctx, root } = await harness({ config: { writeEveryEvents: 3, writeIntervalMs: 60_000 } })
     vi.useFakeTimers({ toFake: ['setTimeout', 'clearTimeout'] })
diff --git a/packages/session/session-projection/README.i18n.yaml b/packages/session/session-projection/README.i18n.yaml
index 53d259092a..92bdd362b1 100644
--- a/packages/session/session-projection/README.i18n.yaml
+++ b/packages/session/session-projection/README.i18n.yaml
@@ -24,8 +24,8 @@
   en: 09758d1475fad86e
   zh: 473637cb34aebe72
 /deepseek-ai-dsh-session-projection/use-this-package/register-and-read:
-  en: 84f39e64f252a4d3
-  zh: e3f6dff8c5df9016
+  en: 4ef214a05a5090b3
+  zh: 2119a4566d9e33eb
 /deepseek-ai-dsh-session-projection/use-this-package/bind-several-states-to-one-session:
   en: dac4ea4d67ce057d
   zh: 1cf3e5c7af5a5203
@@ -33,8 +33,8 @@
   en: bfbeab7e33fc7f8f
   zh: 74e0b871f1639f14
 /deepseek-ai-dsh-session-projection/use-this-package/persisted-checkpoints:
-  en: 3bbc61a438aeabd0
-  zh: bd1824f4da278764
+  en: b8196b8cfcacefac
+  zh: 4dd8e04fca04a580
 /deepseek-ai-dsh-session-projection/use-this-package/session-summaries:
   en: ee868b44413a126f
   zh: f98c66d8e4da9a72
@@ -60,8 +60,8 @@
   en: 8a592dae9bc946ab
   zh: eca939995bb5f8e0
 /deepseek-ai-dsh-session-projection/known-limitations-and-deferred-work:
-  en: dda14db5a0fbe2fa
-  zh: 9675b2a39e7aea8b
+  en: 2c26ef65c8425be6
+  zh: 4a797644f492772a
 /deepseek-ai-dsh-session-projection/known-limitations-and-deferred-work/dev-note:
   en: e67f633dc6fe7773
   zh: 3bb0c20c93f16f98
diff --git a/packages/session/session-projection/README.md b/packages/session/session-projection/README.md
index e17c14ad77..cc39a7ecc7 100644
--- a/packages/session/session-projection/README.md
+++ b/packages/session/session-projection/README.md
@@ -55,7 +55,7 @@ const definition = {
 
 ### Register and read
 
-`await register(definition)` infers the host state type from `stateSchema`, installs the unit, and returns a handle with synchronous `stateOf(session)` reads and `dispose(): Promise<void>`. Await `dispose()` to release the registration; repeated calls are safe. Registrants with the same key and `stateVersion` share cells; incompatible or invalid versions reject registration. Registration belongs to the calling fiber. The last unregister removes the unit from global event drives, snapshots, checkpoints, and change notifications. Existing handles remain readable: each retains its original unit and folds new Session events on demand, even if another version later registers the same key. Reading a handle does not initialize unrelated units or register it again. Carriers use `snapshot(session)` for a consistent client-view cut, `onChanged(listener)` for one call per changed unit, and `onEventChanged(listener)` for one call per committed event that lists every client-visible unit whose view it changed.
+`await register(definition)` infers the host state type from `stateSchema`, installs the unit, and returns a handle with synchronous `stateOf(session)` reads and `dispose(): Promise<void>`. Await `dispose()` to release the registration; repeated calls are safe. Registrants with the same key and `stateVersion` share cells; incompatible or invalid versions reject registration. Registration belongs to the calling fiber. The last unregister removes the unit from global event drives, snapshots, restores, and change notifications; `checkpoint(session)` keeps each Session's last cell of it, until the key registers again and the new unit refolds the log. The registry no longer advances that cell, but a retained handle read still advances it forward, and the checkpoint serves the advanced cell. Existing handles remain readable: each retains its original unit and folds new Session events on demand, even if another version later registers the same key. Reading a handle does not initialize unrelated units or register it again. Carriers use `snapshot(session)` for a consistent client-view cut, `onChanged(listener)` for one call per changed unit, and `onEventChanged(listener)` for one call per committed event that lists every client-visible unit whose view it changed.
 
 ```text
 const todoProjectionHandle = await ctx.sessionProjections.register(definition)
@@ -97,7 +97,7 @@ Definitions install synchronously, and handle delivery remains asynchronous. Reg
 
 ### Persisted checkpoints
 
-Every unit's state is checkpointed — client-visible and host-only alike — through `checkpoint(session)`, and the sibling [session-projection-cache](../session-projection-cache/README.md) persists those checkpoints so cold reads skip full log loads. Checkpoint watermarks use `SessionSeqCursor` (`-1` for an empty log), while replay starts use `SessionLogOffset`; `restoreFloor` and `restore` implement the read recipe without conflating an existing event with a log gap.
+Every unit's state is checkpointed — client-visible and host-only alike — through `checkpoint(session)`, and the sibling [session-projection-cache](../session-projection-cache/README.md) persists those checkpoints so cold reads skip full log loads. Checkpoint watermarks use `SessionSeqCursor` (`-1` for an empty log), while replay starts use `SessionLogOffset`; `restoreFloor` and `restore` implement the read recipe without conflating an existing event with a log gap. `restore` folds only live units, so its refreshed rows omit released units, and a write-back of them drops their stored rows.
 
 ### Session summaries
 
@@ -168,6 +168,8 @@ These limits define where the projection registry needs care at scale. They are
 - **Only a key-subset read omits keys; a tail page still carries every client-visible key and there is no lazy per-value request** — a summary omits exactly the keys whose `SessionProjectionMap` entry carries `SessionProjectionSummaryExcluded<T>` and whose registration declares `wire.summary: false`. The opt-out is per key, not per value: no read defers one large value.
 - **The unit table is process-wide, so key presence is not a per-session capability signal** — a key registered by any agent preset appears in every session's snapshot; a client must read the value rather than treat an absent key as absence of the feature.
 - **Eager drive touches every unit per event** — cheap by construction (whole-value rule and state/view reference gates), but a hot path would justify per-unit event-type prefilters.
+- **A released unit's checkpoint row stops advancing** — after the last registrant releases a key, `checkpoint(session)` keeps each Session's last cell until the key registers again. Outside graceful shutdown, events appended meanwhile leave the stored row behind the log, and cold listings serve that older value.
+- **A released predecessor keeps its definition referenced** — the registry holds the released unit's definition closures until the same key registers again, so a key that a reloaded plugin renames or stops registering keeps the old module referenced for the process lifetime. Cells are keyed weakly by Session and retain no Session.
 - **Registry cells live in memory only** — a restart rebuilds by folding the log on first touch; compositions that mount `dsh-session-projection-cache` seed that fold from persisted rows instead.
 - **Synchronous unit discipline is only partially mechanical** — `wire.viewSchema.parse` rejects a Promise-returning view, but an `apply` that blocks or reads torn non-session state is a review concern.
 
diff --git a/packages/session/session-projection/README.zh.md b/packages/session/session-projection/README.zh.md
index addea20856..82edeb2891 100644
--- a/packages/session/session-projection/README.zh.md
+++ b/packages/session/session-projection/README.zh.md
@@ -55,7 +55,7 @@ const definition = {
 
 ### 注册与读取
 
-`await register(definition)` 从 `stateSchema` 推导宿主状态类型，安装单元，并返回提供同步 `stateOf(session)` 读取和 `dispose(): Promise<void>` 的 handle。等待 `dispose()` 完成即可释放注册；重复调用是安全的。具有相同 key 和 `stateVersion` 的注册方共享 cell；版本不兼容或非法时注册会拒绝。注册归调用方 fiber 所有。最后一个注册方注销后，单元退出全局事件驱动、快照、检查点和变更通知。已有 handle 仍可读取：它保留原有单元，按需折叠新增的 Session 事件，即使同一 key 后来注册了其他版本也不受影响。读取 handle 不会初始化无关单元，也不会重新注册。载体用 `snapshot(session)` 读取一致的客户端视图切面，用 `onChanged(listener)` 按每个变化的单元接收一次调用，用 `onEventChanged(listener)` 按每个已提交事件接收一次调用，列出该事件改变了视图的全部客户端可见单元。
+`await register(definition)` 从 `stateSchema` 推导宿主状态类型，安装单元，并返回提供同步 `stateOf(session)` 读取和 `dispose(): Promise<void>` 的 handle。等待 `dispose()` 完成即可释放注册；重复调用是安全的。具有相同 key 和 `stateVersion` 的注册方共享 cell；版本不兼容或非法时注册会拒绝。注册归调用方 fiber 所有。最后一个注册方注销后，单元退出全局事件驱动、快照、恢复读取和变更通知；`checkpoint(session)` 仍保留每个 Session 中该单元的最后一个 cell，直到同一 key 再次注册、由新单元重新折叠日志。注册表不再推进这个 cell，但已保留的 handle 读取时仍会把它向前推进，检查点输出推进后的 cell。已有 handle 仍可读取：它保留原有单元，按需折叠新增的 Session 事件，即使同一 key 后来注册了其他版本也不受影响。读取 handle 不会初始化无关单元，也不会重新注册。载体用 `snapshot(session)` 读取一致的客户端视图切面，用 `onChanged(listener)` 按每个变化的单元接收一次调用，用 `onEventChanged(listener)` 按每个已提交事件接收一次调用，列出该事件改变了视图的全部客户端可见单元。
 
 ```text
 const todoProjectionHandle = await ctx.sessionProjections.register(definition)
@@ -97,7 +97,7 @@ const todo = projections.todo()
 
 ### 持久检查点
 
-系统通过 `checkpoint(session)` 为每个单元的状态创建检查点，client-visible 与 host-only 一视同仁；同级包 [session-projection-cache](../session-projection-cache/README.zh.md) 持久化这些检查点，使冷读跳过全量日志加载。检查点水位使用 `SessionSeqCursor`（空日志为 `-1`），回放起点使用 `SessionLogOffset`；`restoreFloor` 与 `restore` 实现读取流程，且不会混淆已有事件与日志间隙。
+系统通过 `checkpoint(session)` 为每个单元的状态创建检查点，client-visible 与 host-only 一视同仁；同级包 [session-projection-cache](../session-projection-cache/README.zh.md) 持久化这些检查点，使冷读跳过全量日志加载。检查点水位使用 `SessionSeqCursor`（空日志为 `-1`），回放起点使用 `SessionLogOffset`；`restoreFloor` 与 `restore` 实现读取流程，且不会混淆已有事件与日志间隙。`restore` 只折叠在线单元，因此它刷新后的行不含已释放单元，用这些行回写会丢弃这些单元已存储的行。
 
 ### Session 摘要
 
@@ -168,6 +168,8 @@ Session 摘要包含每个已注册客户端视图，但排除 `SessionProjectio
 - **只有带 key 子集的读取才省略 key；尾页仍携带每个客户端可见 key，也不存在惰性逐值请求**——摘要只省略那些 `SessionProjectionMap` 条目带有 `SessionProjectionSummaryExcluded<T>` 且注册声明了 `wire.summary: false` 的 key。该 opt-out 按 key 生效，不按值生效：没有任何读取会延后加载单个大值。
 - **单元表是进程级的，因此 key 是否存在不能当作逐会话的能力信号**——任何 agent preset 注册的 key 都会出现在每个会话的快照里；客户端必须读值，不能把 key 缺席当作功能缺席。
 - **主动驱动逐事件触达每个单元**——按构造开销很低（全量值规则与 state/view 引用闸门），但若出现热点路径，可加按单元的事件类型预过滤。
+- **已释放单元的检查点行停止推进**——最后一个注册方释放 key 后，`checkpoint(session)` 保留每个 Session 的最后一个 cell，直到该 key 再次注册。在正常关停之外，这期间追加的事件会让存储的行落后于日志，冷列表读到的是这个较旧的值。
+- **已释放的前任会继续引用其定义**——注册表持有已释放单元的定义闭包，直到同一 key 再次注册；因此重载后改名或不再注册的 key 会在进程生命周期内一直引用旧模块。cell 以 Session 为弱键，不会保留 Session。
 - **注册表 cell 只活在内存里**——重启后首次触达时靠折叠日志重建；挂载了 `dsh-session-projection-cache` 的组合改由持久行播种该折叠。
 - **单元同步纪律只有部分可机械把关**——`wire.viewSchema.parse` 能拒绝返回 Promise 的 view，但阻塞的 `apply`、或读取撕裂的非会话状态的 `apply`，只能靠评审把关。
 
diff --git a/packages/session/session-projection/src/index.ts b/packages/session/session-projection/src/index.ts
index 500cae4233..a3e9bc0f3b 100644
--- a/packages/session/session-projection/src/index.ts
+++ b/packages/session/session-projection/src/index.ts
@@ -52,6 +52,8 @@ export interface ProjectionHandle<S> {
   /**
    * Read the current state, including after unregistering, by folding new
    * Session events with this handle's original unit. Do not mutate the live value.
+   * After the final release, a read also advances the released cell that
+   * `checkpoint(session)` serves, until the key registers again.
    * @param session - Session whose committed events are folded.
    * @returns the projection state at the Session's current cursor.
    */
@@ -233,8 +235,10 @@ interface UnitCell {
 }
 
 /**
- * One shared unit and its per-session cells, retained by acquired readers after
- * the final registration leaves the live table.
+ * One shared unit and its per-session cells. After the final release the entry
+ * stays in the table as a released predecessor until its key registers again,
+ * keeping its definition closures referenced; acquired readers retain it beyond
+ * that replacement.
  *
  * `refs` exists because one unit definition already serves every session — the
  * cells are keyed by `Session` — while registrants are per-session:
@@ -246,7 +250,11 @@ interface UnitCell {
 interface Registration {
   readonly def: ErasedDefinition
   readonly cells: WeakMap<Session, UnitCell>
-  /** Live registrants sharing this unit; the last one out removes the key. */
+  /**
+   * Live registrants sharing this unit. `0` marks a released predecessor: only
+   * `checkpoint()` reads its cells through the registry, while a retained handle
+   * read can still advance them.
+   */
   refs: number
 }
 
@@ -266,8 +274,10 @@ function cursorBefore(offset: SessionLogOffset): SessionSeqCursor {
  * touch (event or read). Consumers declare `sessionProjections` as a required
  * injection, await registration during activation, and retain its ready handle.
  * Registrants sharing a key share one unit and are counted. The last release
- * removes the unit from live drives, checkpoints, and client snapshots; retained
- * handles still fold new events on demand using the original unit.
+ * removes the unit from live drives, restores, and client snapshots, while
+ * checkpoints keep each Session's last cell of it until the key registers
+ * again and the new unit refolds the log; retained handles still fold new
+ * events on demand using the original unit.
  */
 export class SessionProjectionRegistry extends Service {
   private readonly registrations = new Map<string, Registration>()
@@ -287,6 +297,7 @@ export class SessionProjectionRegistry extends Service {
     ctx.on('session/created', (session: Session) => {
       if (session.seq !== 0) return
       for (const registration of this.registrations.values()) {
+        if (registration.refs === 0) continue
         if (registration.cells.has(session)) continue
         registration.cells.set(session, {
           state: registration.def.init(session.header, session.inheritedEventCount),
@@ -395,7 +406,7 @@ export class SessionProjectionRegistry extends Service {
     const dispose = this.ctx.effect(() => {
       const key = erased.key
       const existing = this.registrations.get(key)
-      if (existing === undefined) {
+      if (existing === undefined || existing.refs === 0) {
         registration = { def: erased, cells: new WeakMap(), refs: 1 }
         this.registrations.set(key, registration)
         this.summaryKeySet = undefined
@@ -412,7 +423,6 @@ export class SessionProjectionRegistry extends Service {
       return () => {
         registration.refs -= 1
         if (registration.refs === 0) {
-          this.registrations.delete(key)
           this.summaryKeySet = undefined
         }
       }
@@ -449,7 +459,7 @@ export class SessionProjectionRegistry extends Service {
       this.ctx.logger.warn(`sessionProjections.stateOf(session, ${JSON.stringify(key)}) is deprecated; read handle.stateOf(session) from an awaited registration, or use the owning domain service`)
     }
     const registration = this.registrations.get(key)
-    if (registration === undefined) return undefined
+    if (registration === undefined || registration.refs === 0) return undefined
     this.materializeCells(session)
     return this.cellFor(registration, session).state
   }
@@ -508,6 +518,7 @@ export class SessionProjectionRegistry extends Service {
     const values: Record<string, unknown> = {}
     const selected = selectedKeys(keys)
     for (const registration of this.registrations.values()) {
+      if (registration.refs === 0) continue
       if (registration.def.wire === undefined) continue
       if (selected !== undefined && !selected.has(registration.def.key)) continue
       const cell = this.cellFor(registration, session)
@@ -534,6 +545,7 @@ export class SessionProjectionRegistry extends Service {
     let asOfSeq: SessionSeqCursor | undefined
     const selected = selectedKeys(keys)
     for (const registration of this.registrations.values()) {
+      if (registration.refs === 0) continue
       if (registration.def.wire === undefined) continue
       if (selected !== undefined && !selected.has(registration.def.key)) continue
       const cell = registration.cells.get(session)
@@ -564,6 +576,7 @@ export class SessionProjectionRegistry extends Service {
   private deriveSummaryKeys(): ReadonlySet<Extract<keyof SessionProjectionMap, string>> {
     const keys = new Set<Extract<keyof SessionProjectionMap, string>>()
     for (const registration of this.registrations.values()) {
+      if (registration.refs === 0) continue
       if (registration.def.wire === undefined || !registration.def.wire.summary) continue
       keys.add(registration.def.key as Extract<keyof SessionProjectionMap, string>)
     }
@@ -581,13 +594,21 @@ export class SessionProjectionRegistry extends Service {
    * mutable state, and a caller reaching the live reference could corrupt
    * every subsequent snapshot and frame through it (plain JSON by the unit
    * contract, so the clone is total).
+   * A released unit contributes the Session's last cell. The registry no
+   * longer advances that cell, while a retained handle read still advances it
+   * forward, so a writer running after a plugin unloads keeps that unit's
+   * latest state; a Session that has no cell of it gets no row. {@link restore}
+   * folds only live units, so its refreshed rows omit released units.
    * @param session - the session whose unit states are checkpointed.
-   * @returns one row per registered key.
+   * @returns one row per registered key, plus one per released key with a cell for this Session.
    */
   checkpoint(session: Session): ProjectionCheckpoint {
     const rows: ProjectionCheckpoint = {}
     for (const registration of this.registrations.values()) {
-      const cell = this.cellFor(registration, session)
+      const cell = registration.refs === 0
+        ? registration.cells.get(session)
+        : this.cellFor(registration, session)
+      if (cell === undefined) continue
       rows[registration.def.key] = {
         ver: registration.def.stateVersion,
         seq: cell.observedSeq,
@@ -610,12 +631,13 @@ export class SessionProjectionRegistry extends Service {
    * re-read.
    * @param checkpoint - persisted rows for one session (possibly stale or empty).
    * @returns the offset for the stored-log suffix read (`SessionHandle.read`),
-   *   or `undefined` when no unit is registered (no read needed —
+   *   or `undefined` when no live unit is registered (released predecessors do not count; no read needed —
    *   {@link restore} would serve empty values regardless).
    */
   restoreFloor(checkpoint: ProjectionCheckpoint): SessionLogOffset | undefined {
     let floor: number | undefined
     for (const registration of this.registrations.values()) {
+      if (registration.refs === 0) continue
       const row = checkpoint[registration.def.key]
       const need = row !== undefined && row.ver === registration.def.stateVersion
         ? Math.max(row.seq + 1, 0)
@@ -643,6 +665,7 @@ export class SessionProjectionRegistry extends Service {
     const values: Record<string, unknown> = {}
     const selected = selectedKeys(keys)
     for (const registration of this.registrations.values()) {
+      if (registration.refs === 0) continue
       const def = registration.def
       if (def.wire === undefined) continue
       if (selected !== undefined && !selected.has(def.key)) continue
@@ -682,6 +705,8 @@ export class SessionProjectionRegistry extends Service {
    * @returns the snapshot cut at the supplied log end (`asOfSeq` is the last
    *   supplied event's seq, `baseSeq - 1` for an empty tail) plus the
    *   refreshed checkpoint rows at that cut, ready for a durable write-back.
+   *   The rows cover live units only: a released unit has no cell for a log
+   *   folded without a live `Session`, so a write-back of them omits it.
    */
   restore(
     checkpoint: ProjectionCheckpoint,
@@ -696,6 +721,7 @@ export class SessionProjectionRegistry extends Service {
     const values: Record<string, unknown> = {}
     const refreshed: ProjectionCheckpoint = {}
     for (const registration of this.registrations.values()) {
+      if (registration.refs === 0) continue
       const def = registration.def
       const row = checkpoint[def.key]
       const usable = row !== undefined
@@ -749,6 +775,7 @@ export class SessionProjectionRegistry extends Service {
     const endSeq: SessionSeqCursor = events.at(-1)?.seq ?? cursorBefore(baseSeq)
     let complete = true
     for (const registration of this.registrations.values()) {
+      if (registration.refs === 0) continue
       const current = registration.cells.get(session)
       if (current?.observedSeq !== endSeq) {
         complete = false
@@ -758,6 +785,7 @@ export class SessionProjectionRegistry extends Service {
     if (complete) {
       const values: Record<string, unknown> = {}
       for (const registration of this.registrations.values()) {
+        if (registration.refs === 0) continue
         if (registration.def.wire === undefined) continue
         const current = registration.cells.get(session) as UnitCell
         values[registration.def.key] = this.viewCell(registration, current)
@@ -772,6 +800,7 @@ export class SessionProjectionRegistry extends Service {
       session.inheritedEventCount,
     )
     for (const registration of this.registrations.values()) {
+      if (registration.refs === 0) continue
       const row = restored.checkpoint[registration.def.key]
       /* v8 ignore next -- restore() writes a row for every registration in the same synchronous pass. */
       if (row === undefined) continue
@@ -788,7 +817,10 @@ export class SessionProjectionRegistry extends Service {
 
   /** Materialize every registered unit cell at the Session's current cursor. */
   private materializeCells(session: Session): void {
-    for (const registration of this.registrations.values()) this.cellFor(registration, session)
+    for (const registration of this.registrations.values()) {
+      if (registration.refs === 0) continue
+      this.cellFor(registration, session)
+    }
   }
 
   /** Fold one unit from init over `events`, producing a cell watermarked at the last folded event. */
@@ -857,6 +889,7 @@ export class SessionProjectionRegistry extends Service {
     const changes: { key: Extract<keyof SessionProjectionMap, string>; val: unknown }[] = []
     try {
       for (const registration of this.registrations.values()) {
+        if (registration.refs === 0) continue
         let cell = registration.cells.get(session)
         if (cell !== undefined && cell.observedSeq >= event.seq) continue
         if (cell === undefined) {
diff --git a/packages/session/session-projection/tests/registration-reader.spec.ts b/packages/session/session-projection/tests/registration-reader.spec.ts
index 939a6f1a1d..8c10b46a94 100644
--- a/packages/session/session-projection/tests/registration-reader.spec.ts
+++ b/packages/session/session-projection/tests/registration-reader.spec.ts
@@ -154,7 +154,8 @@ describe('retained projection readers', () => {
     expect(apply).toHaveBeenCalledTimes(2)
     expect(changed).toHaveBeenCalledOnce()
     expect(ctx.sessionProjections.snapshot(session).values).toEqual({})
-    expect(ctx.sessionProjections.checkpoint(session)).toEqual({})
+    // The checkpoint carries the released unit's cell as the retained reader last advanced it.
+    expect(ctx.sessionProjections.checkpoint(session)).toEqual({ 'test/reader': { ver: 1, seq: 1, val: 2 } })
     const later = ctx.sessions.create()
     later.append('turn/start', { turn: 1 })
     expect(handle.stateOf(later)).toBe(1)
diff --git a/packages/session/session-projection/tests/registry.spec.ts b/packages/session/session-projection/tests/registry.spec.ts
index cd0f9d65c1..a1f8c7897f 100644
--- a/packages/session/session-projection/tests/registry.spec.ts
+++ b/packages/session/session-projection/tests/registry.spec.ts
@@ -574,7 +574,7 @@ describe('SessionProjectionRegistry drive', () => {
     await expect(Promise.resolve(ctx.sessionProjections.register({ ...marksUnit(), stateVersion: 1.5 }))).rejects.toThrow(/stateVersion/)
   })
 
-  it('register() disposer removes the key (with its cells) and frees it for re-registration', async () => {
+  it('register() disposer releases the key from snapshots and frees it for re-registration', async () => {
     const { ctx, session } = await harness()
     const dispose = await ctx.sessionProjections.register(marksUnit())
     mark(session, ['cached'])
@@ -585,6 +585,69 @@ describe('SessionProjectionRegistry drive', () => {
     expect(ctx.sessionProjections.snapshot(session).values['test/marks']).toEqual({ marks: ['cached'] })
   })
 
+  it('freezes a released unit: checkpoints keep its last cell while every live face skips it', async () => {
+    const { ctx, session } = await harness()
+    vi.spyOn(ctx.logger, 'warn').mockImplementation(() => {})
+    const owner = await ctx.plugin(Object.assign(async (inner: Context) => {
+      await inner.sessionProjections.register(marksUnit())
+    }, { inject: ['sessionProjections'] }))
+    await ctx.sessionProjections.register(countUnit())
+    const released = mark(session, ['released'])
+    expect(ctx.sessionProjections.summaryKeys().has('test/marks')).toBe(true)
+    await owner.dispose()
+
+    const after = mark(session, ['after'])
+    const fresh = ctx.sessions.create()
+    expect(ctx.sessionProjections.summaryKeys().has('test/marks')).toBe(false)
+    expect(ctx.sessionProjections.snapshot(session).values).toEqual({})
+    // oxlint-disable-next-line typescript/no-deprecated -- The deprecated cached face also skips a released unit.
+    expect(ctx.sessionProjections.cachedSnapshot(session)).toBeUndefined()
+    // oxlint-disable-next-line typescript/no-deprecated -- The deprecated key read reports a released key as absent.
+    expect(ctx.sessionProjections.stateOf(session, 'test/marks')).toBeUndefined()
+    // oxlint-disable-next-line typescript/no-deprecated -- Its materializing read skips the released unit.
+    expect(ctx.sessionProjections.stateOf(session, 'test/count')).toBe(2)
+    // No drive, snapshot, or materializing read advanced the released cell.
+    const rows = ctx.sessionProjections.checkpoint(session)
+    expect(rows).toEqual({
+      'test/marks': { ver: 1, seq: released.seq, val: { marks: ['released'] } },
+      'test/count': { ver: 1, seq: after.seq, val: 2 },
+    })
+    // A Session created after the release never gets a cell for the unit.
+    expect(ctx.sessionProjections.checkpoint(fresh)).toEqual({ 'test/count': { ver: 1, seq: -1, val: 0 } })
+
+    // Restore paths consult only live units, so the frozen row neither lowers the floor nor gets viewed.
+    expect(ctx.sessionProjections.restoreFloor(rows)).toBe(SessionLogOffset(after.seq))
+    expect(ctx.sessionProjections.viewCheckpoint(rows)).toEqual({})
+    const events = [released, after]
+    expect(ctx.sessionProjections.restore(rows, events, SessionLogOffset(0), RESTORE_HEADER, SessionLogOffset(0))).toEqual({
+      snapshot: { asOfSeq: after.seq, values: {} },
+      checkpoint: { 'test/count': { ver: 1, seq: after.seq, val: 2 } },
+    })
+    const prepared = ctx.sessions.prepare(SessionId('projection-hydrate-released'), { seed: events })
+    const hydrated = ctx.sessionProjections.hydrate(prepared, rows, events, SessionLogOffset(0))
+    expect(hydrated).toEqual({ asOfSeq: after.seq, values: {} })
+    expect(ctx.sessionProjections.hydrate(prepared, rows, events, SessionLogOffset(0))).toEqual(hydrated)
+    expect(ctx.sessionProjections.checkpoint(prepared)).not.toHaveProperty('test/marks')
+  })
+
+  it('re-registering a released key refolds the Session instead of continuing the frozen cell', async () => {
+    const { ctx, session } = await harness()
+    const owner = await ctx.plugin(Object.assign(async (inner: Context) => {
+      await inner.sessionProjections.register(marksUnit())
+    }, { inject: ['sessionProjections'] }))
+    const released = mark(session, ['released'])
+    await owner.dispose()
+    const after = mark(session, ['after'])
+    expect(ctx.sessionProjections.checkpoint(session)['test/marks'])
+      .toEqual({ ver: 1, seq: released.seq, val: { marks: ['released'] } })
+
+    const replacement = await ctx.sessionProjections.register(marksUnit())
+    expect(replacement.stateOf(session)).toEqual({ marks: ['after'] })
+    expect(ctx.sessionProjections.checkpoint(session)['test/marks'])
+      .toEqual({ ver: 1, seq: after.seq, val: { marks: ['after'] } })
+    expect(ctx.sessionProjections.snapshot(session).values['test/marks']).toEqual({ marks: ['after'] })
+  })
+
   it('removes registrations and change listeners when their owning fiber unloads (HMR safety)', async () => {
     const { ctx, session } = await harness()
     const notifications: string[] = []

From a3f6f94c1e1a68a38086274f7f75b6c9b370adac Mon Sep 17 00:00:00 2001
From: imccyu <276526105+imccyu@users.noreply.github.com>
Date: Tue, 3 Nov 2026 12:13:05 +0800
Subject: [PATCH 31/32] test(snapshot): refresh fixtures for the 10-query
 web_search default

---
 .../sdk/command-attachments/tool-schemas.expected.json |  2 +-
 snapshots/sdk/plan-review/tool-schemas.expected.json   | 10 +++++-----
 .../sdk/session-resume/tool-schemas.expected.json      |  4 ++--
 .../apply-patch-update/tool-schemas.expected.json      |  2 +-
 .../model-switch-notice/tool-schemas.expected.json     |  4 ++--
 .../ptc-script-imports/system-prompt.expected.md       |  2 +-
 6 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/snapshots/sdk/command-attachments/tool-schemas.expected.json b/snapshots/sdk/command-attachments/tool-schemas.expected.json
index f7ff60492a..615ca39829 100644
--- a/snapshots/sdk/command-attachments/tool-schemas.expected.json
+++ b/snapshots/sdk/command-attachments/tool-schemas.expected.json
@@ -811,7 +811,7 @@
         "properties": {
           "queries": {
             "type": "array",
-            "description": "1–4 search queries; their results are merged.",
+            "description": "1–10 search queries; their results are merged.",
             "items": {
               "type": "string"
             }
diff --git a/snapshots/sdk/plan-review/tool-schemas.expected.json b/snapshots/sdk/plan-review/tool-schemas.expected.json
index 6a6f934534..5b28e58aba 100644
--- a/snapshots/sdk/plan-review/tool-schemas.expected.json
+++ b/snapshots/sdk/plan-review/tool-schemas.expected.json
@@ -795,7 +795,7 @@
         "properties": {
           "queries": {
             "type": "array",
-            "description": "1–4 search queries; their results are merged.",
+            "description": "1–10 search queries; their results are merged.",
             "items": {
               "type": "string"
             }
@@ -1744,7 +1744,7 @@
           "properties": {
             "queries": {
               "type": "array",
-              "description": "1–4 search queries; their results are merged.",
+              "description": "1–10 search queries; their results are merged.",
               "items": {
                 "type": "string"
               }
@@ -2692,7 +2692,7 @@
           "properties": {
             "queries": {
               "type": "array",
-              "description": "1–4 search queries; their results are merged.",
+              "description": "1–10 search queries; their results are merged.",
               "items": {
                 "type": "string"
               }
@@ -3640,7 +3640,7 @@
           "properties": {
             "queries": {
               "type": "array",
-              "description": "1–4 search queries; their results are merged.",
+              "description": "1–10 search queries; their results are merged.",
               "items": {
                 "type": "string"
               }
@@ -4588,7 +4588,7 @@
           "properties": {
             "queries": {
               "type": "array",
-              "description": "1–4 search queries; their results are merged.",
+              "description": "1–10 search queries; their results are merged.",
               "items": {
                 "type": "string"
               }
diff --git a/snapshots/sdk/session-resume/tool-schemas.expected.json b/snapshots/sdk/session-resume/tool-schemas.expected.json
index c8a7e0853b..0ed765713c 100644
--- a/snapshots/sdk/session-resume/tool-schemas.expected.json
+++ b/snapshots/sdk/session-resume/tool-schemas.expected.json
@@ -511,7 +511,7 @@
         "properties": {
           "queries": {
             "type": "array",
-            "description": "1–4 search queries; their results are merged.",
+            "description": "1–10 search queries; their results are merged.",
             "items": {
               "type": "string"
             }
@@ -1160,7 +1160,7 @@
           "properties": {
             "queries": {
               "type": "array",
-              "description": "1–4 search queries; their results are merged.",
+              "description": "1–10 search queries; their results are merged.",
               "items": {
                 "type": "string"
               }
diff --git a/snapshots/session/apply-patch-update/tool-schemas.expected.json b/snapshots/session/apply-patch-update/tool-schemas.expected.json
index 507bba5622..cecfbd4616 100644
--- a/snapshots/session/apply-patch-update/tool-schemas.expected.json
+++ b/snapshots/session/apply-patch-update/tool-schemas.expected.json
@@ -370,7 +370,7 @@
         "properties": {
           "queries": {
             "type": "array",
-            "description": "1–4 search queries; their results are merged.",
+            "description": "1–10 search queries; their results are merged.",
             "items": {
               "type": "string"
             }
diff --git a/snapshots/session/model-switch-notice/tool-schemas.expected.json b/snapshots/session/model-switch-notice/tool-schemas.expected.json
index c8a7e0853b..0ed765713c 100644
--- a/snapshots/session/model-switch-notice/tool-schemas.expected.json
+++ b/snapshots/session/model-switch-notice/tool-schemas.expected.json
@@ -511,7 +511,7 @@
         "properties": {
           "queries": {
             "type": "array",
-            "description": "1–4 search queries; their results are merged.",
+            "description": "1–10 search queries; their results are merged.",
             "items": {
               "type": "string"
             }
@@ -1160,7 +1160,7 @@
           "properties": {
             "queries": {
               "type": "array",
-              "description": "1–4 search queries; their results are merged.",
+              "description": "1–10 search queries; their results are merged.",
               "items": {
                 "type": "string"
               }
diff --git a/snapshots/session/ptc-script-imports/system-prompt.expected.md b/snapshots/session/ptc-script-imports/system-prompt.expected.md
index 9674457366..0de40ba3b5 100644
--- a/snapshots/session/ptc-script-imports/system-prompt.expected.md
+++ b/snapshots/session/ptc-script-imports/system-prompt.expected.md
@@ -230,7 +230,7 @@ interface ToolArgsMap {
   } & Record<string, JsonValue>;
   /** Search the web for current information. Returns an optional summary answer and a list of source URLs. */
   web_search: {
-    /** 1–4 search queries; their results are merged. */
+    /** 1–10 search queries; their results are merged. */
     queries: string[];
   } & Record<string, JsonValue>;
   /** Run a JavaScript workflow script that orchestrates subagents at scale. Use this for work that fans out across many independent pieces — an audit over many files, a migration, multi-angle research, adversarial verification of findings — where you write the orchestration as a script instead of delegating turn by turn. Script-body hooks: - `agent(prompt, opts?): Promise<any>` — run one subagent to completion. Without `opts.schema` it resolves to the child's final text; with `opts.schema` (an object-rooted JSON Schema using ONLY type/properties/required/additionalProperties/items/enum/const/oneOf) it resolves to the validated object. Resolves `null` when the child fails (filter with `.filter(Boolean)`). Other opts: `label` (display), `phase` (progress group), and independent `provider`/`model` LLM target overrides. - `pipeline(items, ...stages): Promise<any[]>` — run each item through the stages independently with NO barrier between stages (prefer this for multi-stage work). Each stage receives `(prev, item, index)`. A stage throw drops that ITEM to `null` and skips its remaining stages. - `parallel(thunks): Promise<any[]>` — run zero-argument functions concurrently and await ALL of them (a barrier; use only when a stage genuinely needs every prior result together). A throwing thunk resolves to `null`. - `phase(title)` — start a progress phase; `log(message)` — narrate progress; `args` — the tool call's `args` input, verbatim. Misused hooks (bad arguments, unknown options, unsupported schemas, tripped caps) end the whole script instead of producing `null`. The script has no filesystem, network, timer, or Node.js APIs; the agents do the work. */

From 06bf7ce024054e355eb9475fa0b24626f7511a8a Mon Sep 17 00:00:00 2001
From: imccyu <276526105+imccyu@users.noreply.github.com>
Date: Tue, 3 Nov 2026 12:33:44 +0800
Subject: [PATCH 32/32] =?UTF-8?q?Revert=20"fix(settings):=20show=20saved?=
 =?UTF-8?q?=20API=20keys=20and=20preserve=20environment=20detection?=
 =?UTF-8?q?=E2=80=A6"?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This reverts commit 9bb49604b63bb5d50e879bcf63c9f5cb2afbd737.
---
 apps/web/tests/credential-editor.e2e.ts       | 235 ------------------
 .../detected-environment.expected.md          |  25 --
 .../missing-environment.expected.md           |  23 --
 .../credential-editor/saved-key.expected.md   |  26 --
 .../cards.expected.md                         |   4 +-
 .../default-models.expected.md                |   4 +-
 .../models.expected.md                        |   4 +-
 .../fixtures/credential-editor.patch.yml      |   5 -
 apps/web/tests/models-settings.e2e.ts         |   9 +-
 .../tests/onboarding-deepseek-config.e2e.ts   |  17 +-
 apps/web/tsconfig.json                        |   1 -
 docs/capability-seams.i18n.yaml               |   4 +-
 docs/capability-seams.md                      |   2 +-
 docs/capability-seams.zh.md                   |   2 +-
 docs/subsystems/credentials.i18n.yaml         |   4 +-
 docs/subsystems/credentials.md                |  22 +-
 docs/subsystems/credentials.zh.md             |  22 +-
 .../credential-editor/guide.i18n.yaml         |  16 --
 .../v0.2.2-alpha.2/credential-editor/guide.md |  19 --
 .../credential-editor/guide.zh.md             |  19 --
 docs/user/guide/providers.i18n.yaml           |   8 +-
 docs/user/guide/providers.md                  |   8 +-
 docs/user/guide/providers.zh.md               |   8 +-
 .../api/settings-controller/README.i18n.yaml  |   8 +-
 packages/api/settings-controller/README.md    |   4 +-
 packages/api/settings-controller/README.zh.md |   4 +-
 .../settings-controller/src/credentials.ts    |  24 +-
 packages/api/settings-controller/src/types.ts |   6 +-
 .../tests/credentials-controller.host.spec.ts |  40 ---
 .../ui-settings-models/README.i18n.yaml       |  12 +-
 packages/client/ui-settings-models/README.md  |  10 +-
 .../client/ui-settings-models/README.zh.md    |  10 +-
 .../src/client/ApiKeyInput.tsx                |   4 +-
 .../src/client/ModelListEditor.tsx            |   2 +-
 .../src/client/ModelsSection.tsx              |  49 +---
 .../src/client/ProviderEditor.tsx             |  36 ++-
 .../ui-settings-models/src/client/apiKey.ts   |   9 +-
 .../ui-settings-models/src/client/locales.ts  |   8 +
 .../src/client/operations.ts                  |  15 --
 .../tests/components.client.spec.tsx          | 178 +------------
 .../tests/model-list-catalog.client.spec.tsx  |   2 +-
 .../tests/model-order.client.spec.tsx         |   4 +-
 .../model-reasoning-efforts.client.spec.tsx   |   2 +-
 .../tests/provider-form.client.spec.tsx       |   1 -
 .../credentials/authorization/tests/memory.ts |   4 -
 .../credentials-local/README.i18n.yaml        |   4 +-
 .../credentials/credentials-local/README.md   |   2 +-
 .../credentials-local/README.zh.md            |   2 +-
 .../credentials-local/src/index.ts            |   4 -
 .../credentials-local/tests/local.spec.ts     |  12 -
 .../credentials/credentials/README.i18n.yaml  |  12 +-
 packages/credentials/credentials/README.md    |   6 +-
 packages/credentials/credentials/README.zh.md |   6 +-
 packages/credentials/credentials/src/index.ts |   7 -
 .../credentials/credentials/tests/memory.ts   |   5 -
 .../liveshare/src/endpoint-classification.ts  |   1 -
 .../endpoint-classification.client.spec.ts    |   1 -
 .../extensions/tool-cordis/src/api-catalog.ts |  17 +-
 scripts/gen-doc-graphs.ts                     |   2 +-
 tsconfig.host.json                            |   1 -
 60 files changed, 148 insertions(+), 853 deletions(-)
 delete mode 100644 apps/web/tests/credential-editor.e2e.ts
 delete mode 100644 apps/web/tests/expected/credential-editor/detected-environment.expected.md
 delete mode 100644 apps/web/tests/expected/credential-editor/missing-environment.expected.md
 delete mode 100644 apps/web/tests/expected/credential-editor/saved-key.expected.md
 delete mode 100644 apps/web/tests/fixtures/credential-editor.patch.yml
 delete mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.i18n.yaml
 delete mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.md
 delete mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.zh.md

diff --git a/apps/web/tests/credential-editor.e2e.ts b/apps/web/tests/credential-editor.e2e.ts
deleted file mode 100644
index b9ee283aa4..0000000000
--- a/apps/web/tests/credential-editor.e2e.ts
+++ /dev/null
@@ -1,235 +0,0 @@
-/** Saved credentials and endpoints reach the assembled editor and provider requests. */
-import { once } from 'node:events'
-import { mkdtemp, rm, writeFile } from 'node:fs/promises'
-import { createServer } from 'node:http'
-import { tmpdir } from 'node:os'
-import { join } from 'node:path'
-import { fileURLToPath } from 'node:url'
-import { chromium } from 'playwright'
-import { expect, it, onTestFinished } from 'vitest'
-import { BlockAssembler } from '@deepseek-ai/dsh-llm'
-import { credentialRef } from '@deepseek-ai/dsh-credentials'
-import { createLaunchEnvironmentSnapshot } from '@deepseek-ai/dsh-launch-environment'
-import { captureStableAria, compareOrRefreshGolden, launchWebScaffold, webSnapshotMode } from './scaffold.ts'
-import { openSettings, ZH_BROWSER_LOCALE } from './support.ts'
-
-it.each([false, true])('edits saved DeepSeek keys and restores environment detection (environment present: %s)', async (hasEnvironment) => {
-  const scaffold = await launchWebScaffold({
-    deepSeekMissingCredential: true,
-    extraOverlayPath: fileURLToPath(new URL('./fixtures/credential-editor.patch.yml', import.meta.url)),
-    openInAppEnvironment: createLaunchEnvironmentSnapshot([{
-      source: 'process', values: hasEnvironment ? { DEEPSEEK_API_KEY: 'fixture-environment-key' } : {},
-    }]),
-  })
-  try {
-    const browser = await chromium.launch()
-    try {
-      const page = await browser.newPage({ viewport: { width: 1440, height: 960 }, locale: ZH_BROWSER_LOCALE })
-      const ref = credentialRef('DEEPSEEK_API_KEY')
-      await scaffold.ctx.credentials.set(ref, 'fixture-saved-deepseek-key')
-      await page.goto(scaffold.authenticatedUrl, { waitUntil: 'load' })
-      await openSettings(page, 'zh')
-      const dialog = page.getByRole('dialog', { name: '设置' })
-      await dialog.getByRole('button', { name: '模型', exact: true }).click()
-      const edit = dialog.getByRole('button', { name: '编辑 DeepSeek (deepseek-official)', exact: true })
-      await edit.click()
-      const key = dialog.getByLabel('API 密钥', { exact: true })
-      await expect.poll(() => key.inputValue()).toBe('fixture-saved-deepseek-key')
-      expect(await key.getAttribute('type')).toBe('password')
-      await compareOrRefreshGolden(
-        fileURLToPath(new URL('./expected/credential-editor/saved-key.expected.md', import.meta.url)),
-        await captureStableAria(page, '[role="dialog"]', scaffold.workspaceCwd), webSnapshotMode(),
-      )
-      await dialog.getByRole('button', { name: '显示密钥', exact: true }).click()
-      expect(await key.getAttribute('type')).toBe('text')
-      await key.fill('fixture-cancelled-key')
-      await dialog.getByRole('button', { name: '取消', exact: true }).click()
-      expect(await scaffold.ctx.credentials.readStored(ref)).toBe('fixture-saved-deepseek-key')
-      await edit.click()
-      await expect.poll(() => key.inputValue()).toBe('fixture-saved-deepseek-key')
-      expect(await key.getAttribute('type')).toBe('password')
-      await key.fill('fixture-replacement-key')
-      await dialog.getByRole('button', { name: '保存', exact: true }).click()
-      await dialog.getByText('已保存 DeepSeek (deepseek-official)。', { exact: true }).waitFor()
-      expect(await scaffold.ctx.credentials.readStored(ref)).toBe('fixture-replacement-key')
-      await page.reload({ waitUntil: 'load' })
-      await openSettings(page, 'zh')
-      await dialog.getByRole('button', { name: '模型', exact: true }).click()
-      await edit.click()
-      await expect.poll(() => key.inputValue()).toBe('fixture-replacement-key')
-      await key.fill('')
-      expect(await key.getAttribute('placeholder')).toBe('留空使用环境认证（DEEPSEEK_API_KEY）')
-      await dialog.getByText('环境凭据状态尚未确认', { exact: true }).waitFor()
-      expect(await scaffold.ctx.credentials.readStored(ref)).toBe('fixture-replacement-key')
-      await dialog.getByRole('button', { name: '保存', exact: true }).click()
-      await dialog.getByText('已保存 DeepSeek (deepseek-official)。', { exact: true }).waitFor()
-      expect(await scaffold.ctx.credentials.readStored(ref)).toBeUndefined()
-      // A missing credential opens the first-run settings card automatically;
-      // an environment credential keeps an ordinary row whose editor is closed.
-      if (hasEnvironment) await edit.click()
-      await expect.poll(() => key.inputValue()).toBe('')
-      expect(await key.getAttribute('placeholder')).toBe('留空使用环境认证（DEEPSEEK_API_KEY）')
-      const hint = hasEnvironment
-        ? '已检测到环境变量（DEEPSEEK_API_KEY）'
-        : '未检测到环境变量。请填写 API 密钥，或设置环境变量 DEEPSEEK_API_KEY。'
-      const detection = dialog.getByText(hint, { exact: true })
-      await detection.waitFor()
-      const colors = await detection.evaluate((element, present) => {
-        const label = element as HTMLElement
-        const actual = getComputedStyle(label).color
-        const previous = label.style.color
-        label.style.color = present ? 'var(--dsw-alias-state-success-primary)' : 'var(--dsw-alias-state-warn-label)'
-        const expected = getComputedStyle(label).color
-        label.style.color = previous
-        return { actual, expected }
-      }, hasEnvironment)
-      expect(colors.actual).toBe(colors.expected)
-      expect(await dialog.getByRole('button', { name: '显示密钥', exact: true }).count()).toBe(0)
-      expect((await scaffold.ctx.credentials.resolve(ref))?.source).toBe(hasEnvironment ? 'env' : undefined)
-      await compareOrRefreshGolden(
-        fileURLToPath(new URL(`./expected/credential-editor/${hasEnvironment ? 'detected' : 'missing'}-environment.expected.md`, import.meta.url)),
-        await captureStableAria(page, '[role="dialog"]', scaffold.workspaceCwd), webSnapshotMode(),
-      )
-    } finally { await browser.close() }
-  } finally { await scaffold.close() }
-})
-
-/** Local provider endpoint recording the destination path and authentication actually received. */
-async function connectionProbe(messages: boolean) {
-  const calls: { path: string; key: string | undefined }[] = []
-  const server = createServer((request, response) => {
-    request.on('end', () => {
-      const key = messages ? request.headers['x-api-key'] : request.headers.authorization
-      calls.push({ path: request.url ?? '', key: typeof key === 'string' ? key : undefined })
-      const events = messages ? [
-        { type: 'message_start', message: { id: 'probe', type: 'message', role: 'assistant', model: 'credential-editor-model', content: [], usage: { input_tokens: 1, output_tokens: 0 } } },
-        { type: 'content_block_start', index: 0, content_block: { type: 'text', text: '' } },
-        { type: 'content_block_delta', index: 0, delta: { type: 'text_delta', text: 'connection-ok' } },
-        { type: 'content_block_stop', index: 0 },
-        { type: 'message_delta', delta: { stop_reason: 'end_turn' }, usage: { output_tokens: 1 } },
-        { type: 'message_stop' },
-      ] : [
-        { choices: [{ delta: { role: 'assistant', content: 'connection-ok' }, index: 0, finish_reason: null }] },
-        { choices: [{ delta: {}, index: 0, finish_reason: 'stop' }], usage: { prompt_tokens: 1, completion_tokens: 1 } },
-      ]
-      response.writeHead(200, { 'content-type': 'text/event-stream' })
-      response.end(events.map(event => `${'type' in event ? `event: ${event.type}\n` : ''}data: ${JSON.stringify(event)}\n\n`).join('')
-        + (messages ? '' : 'data: [DONE]\n\n'))
-    })
-    request.resume()
-  })
-  onTestFinished(async () => {
-    await new Promise<void>((resolve) => { server.close(() => { resolve() }); server.closeAllConnections() })
-  })
-  server.listen(0, '127.0.0.1')
-  await once(server, 'listening')
-  const address = server.address()
-  if (address === null || typeof address === 'string') throw new Error('connection probe did not bind TCP')
-  return { url: `http://127.0.0.1:${String(address.port)}`, calls }
-}
-
-it.each([
-  { provider: 'deepseek-official', ref: 'DEEPSEEK_API_KEY', messages: true },
-  { provider: 'openai', ref: 'OPENAI_API_KEY', messages: false },
-  { provider: 'anthropic', ref: 'ANTHROPIC_API_KEY', messages: true },
-  { provider: 'credential-fixture', ref: 'CREDENTIAL_FIXTURE_API_KEY', messages: false },
-])('uses the saved endpoint and key on the wire for $provider, then restores fallbacks', async ({ provider, ref, messages }) => {
-  const ambient = await connectionProbe(messages)
-  const saved = await connectionProbe(messages)
-  const root = await mkdtemp(join(tmpdir(), 'dsh-credential-routing-'))
-  onTestFinished(() => rm(root, { recursive: true, force: true }))
-  const overlay = join(root, 'connection.patch.yml')
-  const models = [{ id: 'credential-editor-model' }]
-  const baseSuffix = provider === 'anthropic' ? '' : '/v1'
-  const operation = provider === 'anthropic' ? '/v1/messages?beta=true' : messages ? '/messages' : '/chat/completions'
-  const ambientURL = `${ambient.url}/ambient${baseSuffix}`
-  await writeFile(overlay, JSON.stringify([
-    { id: 'llm-deepseek', config: { models } },
-    ...provider === 'deepseek-official' ? [] : [{
-      id: 'llm-pi-ai', config: { providers: { [provider]: {
-        api: messages ? 'anthropic-messages' : 'openai-completions',
-        baseURL: ambientURL, models,
-        ...provider === 'credential-fixture' ? {} : { apiKeyEnv: ref },
-      } } },
-    }],
-  ]))
-  const scaffold = await launchWebScaffold({
-    deepSeekMissingCredential: true,
-    extraOverlayPath: overlay,
-    openInAppEnvironment: createLaunchEnvironmentSnapshot([{
-      source: 'process', values: {
-        [ref]: 'fixture-environment-key',
-        DEEPSEEK_BASE_URL: ambientURL,
-        OPENAI_BASE_URL: ambientURL,
-        ANTHROPIC_BASE_URL: ambientURL,
-      },
-    }]),
-  })
-  try {
-    const browser = await chromium.launch()
-    try {
-      const page = await browser.newPage({ locale: ZH_BROWSER_LOCALE })
-      await page.goto(scaffold.authenticatedUrl, { waitUntil: 'load' })
-      await openSettings(page, 'zh')
-      const dialog = page.getByRole('dialog', { name: '设置' })
-      await dialog.getByRole('button', { name: '模型', exact: true }).click()
-      const edit = dialog.getByRole('button', {
-        name: `编辑 ${provider === 'deepseek-official' ? 'DeepSeek (deepseek-official)' : provider}`, exact: true,
-      })
-      const key = dialog.getByLabel('API 密钥', { exact: true })
-      const endpoint = dialog.getByLabel('API 地址', { exact: true })
-      const savedURL = `${saved.url}/configured${baseSuffix}`
-      const generate = async (): Promise<void> => {
-        const assembler = new BlockAssembler()
-        for await (const chunk of scaffold.ctx.llm.stream({ provider, model: 'credential-editor-model', messages: [] })) assembler.push(chunk)
-        expect(assembler.message({ provider, model: 'credential-editor-model' }).content).toContainEqual({ type: 'text', text: 'connection-ok' })
-      }
-      await edit.click()
-      await key.fill('fixture-saved-key')
-      await dialog.getByText('自定义设置', { exact: true }).click()
-      await endpoint.fill(savedURL)
-      await dialog.getByRole('button', { name: '保存', exact: true }).click()
-      await expect.poll(() => key.count()).toBe(0)
-      await generate()
-      expect(saved.calls).toEqual([{ path: `/configured${baseSuffix}${operation}`, key: messages ? 'fixture-saved-key' : 'Bearer fixture-saved-key' }])
-      expect(ambient.calls).toEqual([])
-      await page.reload({ waitUntil: 'load' })
-      await openSettings(page, 'zh')
-      await dialog.getByRole('button', { name: '模型', exact: true }).click()
-      await edit.click()
-      expect(await key.inputValue()).toBe('fixture-saved-key')
-      expect(await key.getAttribute('type')).toBe('password')
-      await dialog.getByText('自定义设置', { exact: true }).click()
-      expect(await endpoint.inputValue()).toBe(savedURL)
-      await generate()
-      expect(saved.calls).toHaveLength(2)
-      expect(saved.calls[1]).toEqual(saved.calls[0])
-      expect(ambient.calls).toEqual([])
-      await key.fill('')
-      await dialog.getByRole('button', { name: '保存', exact: true }).click()
-      await expect.poll(() => key.count()).toBe(0)
-      await generate()
-      expect(saved.calls).toHaveLength(3)
-      expect(saved.calls[2]).toEqual({ path: `/configured${baseSuffix}${operation}`, key: messages ? 'fixture-environment-key' : 'Bearer fixture-environment-key' })
-      expect(ambient.calls).toEqual([])
-      await edit.click()
-      await key.fill('fixture-saved-key')
-      await dialog.getByText('自定义设置', { exact: true }).click()
-      await endpoint.fill('')
-      await dialog.getByRole('button', { name: '保存', exact: true }).click()
-      await expect.poll(() => key.count()).toBe(0)
-      await generate()
-      expect(saved.calls).toHaveLength(3)
-      expect(ambient.calls).toEqual([{ path: `/ambient${baseSuffix}${operation}`, key: messages ? 'fixture-saved-key' : 'Bearer fixture-saved-key' }])
-      await edit.click()
-      await key.fill('')
-      await dialog.getByRole('button', { name: '保存', exact: true }).click()
-      await expect.poll(() => key.count()).toBe(0)
-      await generate()
-      expect(saved.calls).toHaveLength(3)
-      expect(ambient.calls[1]).toEqual({ path: `/ambient${baseSuffix}${operation}`, key: messages ? 'fixture-environment-key' : 'Bearer fixture-environment-key' })
-      expect(ambient.calls).toHaveLength(2)
-      expect(await scaffold.ctx.credentials.readStored(credentialRef(ref))).toBeUndefined()
-    } finally { await browser.close() }
-  } finally { await scaffold.close() }
-})
diff --git a/apps/web/tests/expected/credential-editor/detected-environment.expected.md b/apps/web/tests/expected/credential-editor/detected-environment.expected.md
deleted file mode 100644
index 829eeedd37..0000000000
--- a/apps/web/tests/expected/credential-editor/detected-environment.expected.md
+++ /dev/null
@@ -1,25 +0,0 @@
-- dialog "设置":
-  - text: 设置
-  - navigation:
-    - button "通用设置"
-    - button "模型"
-    - button "内置插件"
-    - button "Agent 预设"
-  - button "打开配置文件"
-  - button "关闭"
-  - heading "模型" [level=2]
-  - paragraph: 填入各提供商的 API 密钥即可使用其模型。
-  - list:
-    - listitem:
-      - text: DeepSeek
-      - img "API 密钥已配置"
-      - button "编辑 DeepSeek (deepseek-official)": 编辑
-      - text: DeepSeek deepseek-official API 密钥
-      - button "认证说明": "?"
-      - textbox "API 密钥":
-        - /placeholder: 留空使用环境认证（DEEPSEEK_API_KEY）
-      - paragraph: 已检测到环境变量（DEEPSEEK_API_KEY）
-      - group: 自定义设置
-      - button "取消"
-      - button "保存"
-  - button "添加模型提供商"
diff --git a/apps/web/tests/expected/credential-editor/missing-environment.expected.md b/apps/web/tests/expected/credential-editor/missing-environment.expected.md
deleted file mode 100644
index 609ac50d0e..0000000000
--- a/apps/web/tests/expected/credential-editor/missing-environment.expected.md
+++ /dev/null
@@ -1,23 +0,0 @@
-- dialog "设置":
-  - text: 设置
-  - navigation:
-    - button "通用设置"
-    - button "模型"
-    - button "内置插件"
-    - button "Agent 预设"
-  - button "打开配置文件"
-  - button "关闭"
-  - heading "模型" [level=2]
-  - paragraph: 填入各提供商的 API 密钥即可使用其模型。
-  - status: 已保存 DeepSeek (deepseek-official)。
-  - list:
-    - listitem:
-      - text: DeepSeek deepseek-official API 密钥
-      - button "认证说明": "?"
-      - textbox "API 密钥":
-        - /placeholder: 留空使用环境认证（DEEPSEEK_API_KEY）
-      - paragraph: 未检测到环境变量。请填写 API 密钥，或设置环境变量 DEEPSEEK_API_KEY。
-      - group: 自定义设置
-      - button "取消"
-      - button "保存"
-  - button "添加模型提供商"
diff --git a/apps/web/tests/expected/credential-editor/saved-key.expected.md b/apps/web/tests/expected/credential-editor/saved-key.expected.md
deleted file mode 100644
index 2d4dde4639..0000000000
--- a/apps/web/tests/expected/credential-editor/saved-key.expected.md
+++ /dev/null
@@ -1,26 +0,0 @@
-- dialog "设置":
-  - text: 设置
-  - navigation:
-    - button "通用设置"
-    - button "模型"
-    - button "内置插件"
-    - button "Agent 预设"
-  - button "打开配置文件"
-  - button "关闭"
-  - heading "模型" [level=2]
-  - paragraph: 填入各提供商的 API 密钥即可使用其模型。
-  - list:
-    - listitem:
-      - text: DeepSeek
-      - img "API 密钥已配置"
-      - button "编辑 DeepSeek (deepseek-official)": 编辑
-      - text: DeepSeek deepseek-official API 密钥
-      - button "认证说明": "?"
-      - textbox "API 密钥":
-        - /placeholder: 留空使用环境认证（DEEPSEEK_API_KEY）
-        - text: fixture-saved-deepseek-key
-      - button "显示密钥"
-      - group: 自定义设置
-      - button "取消"
-      - button "保存"
-  - button "添加模型提供商"
diff --git a/apps/web/tests/expected/deepseek-messages-settings/cards.expected.md b/apps/web/tests/expected/deepseek-messages-settings/cards.expected.md
index d4fa1c31fb..08a0750772 100644
--- a/apps/web/tests/expected/deepseek-messages-settings/cards.expected.md
+++ b/apps/web/tests/expected/deepseek-messages-settings/cards.expected.md
@@ -17,9 +17,7 @@
       - text: DeepSeek deepseek-official API 密钥
       - button "认证说明": "?"
       - textbox "API 密钥":
-        - /placeholder: 留空使用环境认证（DEEPSEEK_API_KEY）
-        - text: sk-messages-onboarding
-      - button "显示密钥"
+        - /placeholder: 留空使用已保存凭据
       - group:
         - text: 自定义设置 API 地址
         - textbox "API 地址":
diff --git a/apps/web/tests/expected/onboarding-deepseek-config/default-models.expected.md b/apps/web/tests/expected/onboarding-deepseek-config/default-models.expected.md
index 018ea8a13c..03900f109b 100644
--- a/apps/web/tests/expected/onboarding-deepseek-config/default-models.expected.md
+++ b/apps/web/tests/expected/onboarding-deepseek-config/default-models.expected.md
@@ -17,9 +17,7 @@
       - text: DeepSeek deepseek-official API 密钥
       - button "认证说明": "?"
       - textbox "API 密钥":
-        - /placeholder: 留空使用环境认证（DEEPSEEK_API_KEY）
-        - text: dsh_onboarding_fixture_key
-      - button "显示密钥"
+        - /placeholder: 留空使用已保存凭据
       - group:
         - text: 自定义设置 API 地址
         - textbox "API 地址":
diff --git a/apps/web/tests/expected/onboarding-deepseek-config/models.expected.md b/apps/web/tests/expected/onboarding-deepseek-config/models.expected.md
index a5811b5d66..27ba737236 100644
--- a/apps/web/tests/expected/onboarding-deepseek-config/models.expected.md
+++ b/apps/web/tests/expected/onboarding-deepseek-config/models.expected.md
@@ -17,9 +17,7 @@
       - text: DeepSeek deepseek-official API 密钥
       - button "认证说明": "?"
       - textbox "API 密钥":
-        - /placeholder: 留空使用环境认证（DEEPSEEK_API_KEY）
-        - text: dsh_onboarding_fixture_key
-      - button "显示密钥"
+        - /placeholder: 留空使用已保存凭据
       - group:
         - text: 自定义设置 API 地址
         - textbox "API 地址":
diff --git a/apps/web/tests/fixtures/credential-editor.patch.yml b/apps/web/tests/fixtures/credential-editor.patch.yml
deleted file mode 100644
index 911f60db22..0000000000
--- a/apps/web/tests/fixtures/credential-editor.patch.yml
+++ /dev/null
@@ -1,5 +0,0 @@
-- id: llm-deepseek
-  config:
-    baseURL: http://127.0.0.1
-    models:
-      - id: credential-editor-model
diff --git a/apps/web/tests/models-settings.e2e.ts b/apps/web/tests/models-settings.e2e.ts
index 1b5a5dcbed..d36008959d 100644
--- a/apps/web/tests/models-settings.e2e.ts
+++ b/apps/web/tests/models-settings.e2e.ts
@@ -2,7 +2,7 @@
 // wire — the one add card offers the dormant pi-ai catalog on its third-party
 // mode and the create form on its custom-API mode, a blank key saves a
 // reference-free profile for provider-native auth, and typing an API key later
-// stores it under the derived reference (`MINIMAX_CN_API_KEY`)
+// stores it write-only under the derived reference (`MINIMAX_CN_API_KEY`)
 // while the settings document records only that reference. Each saved row
 // appears after route topology invalidation without presenting liveness as
 // provider status. The customized-settings fold writes its curated fields —
@@ -154,7 +154,8 @@ describe('web e2e: Models settings page configures a dormant provider', () => {
     await dialog.getByText('该 API 密钥格式错误，请检查。').waitFor({ timeout: 10_000 })
     await expect.poll(async () => save.isEnabled(), { timeout: 10_000 }).toBe(false)
 
-    // An empty field leaves this new profile on native authentication.
+    // Clearing it restores submit: an empty field means "keep what is stored",
+    // never a refusal, or editing any other setting would demand the key.
     await key.fill('')
     await expect.poll(async () => save.isEnabled(), { timeout: 10_000 }).toBe(true)
     expect(await dialog.getByText('该 API 密钥格式错误，请检查。').count()).toBe(0)
@@ -220,9 +221,7 @@ describe('web e2e: Models settings page configures a dormant provider', () => {
     onTestFailed(() => saveFailureShot(page, 'web-e2e-models-customized'))
     const dialog = page.getByRole('dialog', { name: '设置' })
     await dialog.getByRole('button', { name: '编辑 minimax-cn' }).click()
-    const savedKey = dialog.getByLabel('API 密钥', { exact: true })
-    await expect.poll(() => savedKey.inputValue(), { timeout: 10_000 }).toBe('sk-e2e-minimax')
-    expect(await savedKey.getAttribute('type')).toBe('password')
+    await dialog.getByPlaceholder('留空使用已保存凭据', { exact: true }).waitFor({ timeout: 10_000 })
     expect(await dialog.textContent()).not.toContain('API 密钥来源：')
     expect(await dialog.textContent()).not.toMatch(/oauth/i)
     await dialog.getByText('自定义设置').click()
diff --git a/apps/web/tests/onboarding-deepseek-config.e2e.ts b/apps/web/tests/onboarding-deepseek-config.e2e.ts
index 06e451032d..8706a7a4de 100644
--- a/apps/web/tests/onboarding-deepseek-config.e2e.ts
+++ b/apps/web/tests/onboarding-deepseek-config.e2e.ts
@@ -2,6 +2,7 @@
 // credential is absent, both ordered steps share the shipped modal chrome,
 // and the inline key write lands in an isolated harness home without a reload
 // or model call.
+import { randomBytes } from 'node:crypto'
 import { assertModelInputLayout } from './model-input-layout.ts'
 import { readFile } from 'node:fs/promises'
 import { fileURLToPath } from 'node:url'
@@ -32,7 +33,6 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup
   let page: Page
   let tripwire: ReturnType<typeof watchConsole>
   const browserConsole: string[] = []
-  const secret = 'dsh_onboarding_fixture_key'
 
   beforeAll(async () => {
     scaffold = await launchWebScaffold({ deepSeekMissingCredential: true, welcomeNoticePending: true })
@@ -50,7 +50,7 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup
     await scaffold?.close()
   })
 
-  it('stores a key and loads it masked only in an explicitly opened editor', async () => {
+  it('stores a key write-only and observes configured state without restarting', async () => {
     onTestFailed(() => saveFailureShot(page, 'web-e2e-onboarding-deepseek-config'))
     const welcome = page.getByRole('dialog', { name: WELCOME_NOTICE_COPY.zh.title })
     await welcome.waitFor({ timeout: 15_000 })
@@ -86,6 +86,7 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup
     const initial = await captureStableAria(page, '[role="dialog"]', scaffold.workspaceCwd)
     await compareOrRefreshGolden(MISSING_EXPECTED, initial, MODE)
 
+    const secret = `dsh_onboarding_${randomBytes(12).toString('hex')}`
     await keyInput.fill(secret)
     await credentialStep.getByRole('button', { name: '保存并继续' }).click()
     await credentialStep.waitFor({ state: 'detached', timeout: 15_000 })
@@ -100,7 +101,8 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup
     const acknowledgedSettings = await readFile(join(scaffold.harnessHome, 'profiles', 'scaffold', 'cordis.patch.yml'), 'utf8')
     expect(acknowledgedSettings).toContain(`${WELCOME_NOTICE_ACK_FIELD}: ${WELCOME_NOTICE_VERSION}`)
 
-    // Opening the ordinary Models editor loads the saved key masked.
+    // The ordinary Models surface reuses the refreshed join and exposes the
+    // configured write-only placeholder without a reload.
     await openSettings(page, 'zh')
     const settings = page.getByRole('dialog', { name: '设置' })
     await settings.waitFor({ timeout: 10_000 })
@@ -111,10 +113,9 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup
     const configuredInput = settings.getByLabel('API 密钥', { exact: true })
     await configuredInput.waitFor({ timeout: 10_000 })
     await expect.poll(
-      () => configuredInput.inputValue(),
+      () => configuredInput.getAttribute('placeholder'),
       { timeout: 10_000 },
-    ).toBe(secret)
-    expect(await configuredInput.getAttribute('type')).toBe('password')
+    ).toBe('留空使用已保存凭据')
 
     const secondReloadWarnings = tripwire.warnings.length
     await page.reload({ waitUntil: 'load' })
@@ -254,9 +255,9 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup
     await settings.getByRole('group', { name: '输入类型 1' }).getByRole('checkbox', { name: '图片' }).check()
 
     await expect.poll(
-      () => settings.getByLabel('API 密钥', { exact: true }).inputValue(),
+      () => settings.getByLabel('API 密钥', { exact: true }).getAttribute('placeholder'),
       { timeout: 10_000 },
-    ).toBe(secret)
+    ).toBe('留空使用已保存凭据')
     const modelEditor = await captureStableAria(page, '[role="dialog"]', scaffold.workspaceCwd)
     await compareOrRefreshGolden(MODELS_EXPECTED, modelEditor, MODE)
     await settings.getByRole('button', { name: '保存', exact: true }).click()
diff --git a/apps/web/tsconfig.json b/apps/web/tsconfig.json
index 938c0dae3c..9b3977d4ee 100644
--- a/apps/web/tsconfig.json
+++ b/apps/web/tsconfig.json
@@ -23,7 +23,6 @@
   // this client-registered project must not also hold them (one program
   // cannot see both sides of the cordis Context merges).
   "exclude": [
-    "tests/credential-editor.e2e.ts",
     "tests/sidebar-drawer.e2e.ts",
     "tests/creation-recommendations.e2e.ts",
     "tests/plugin-recommendations.e2e.ts",
diff --git a/docs/capability-seams.i18n.yaml b/docs/capability-seams.i18n.yaml
index 4dc23c45e6..1083094774 100644
--- a/docs/capability-seams.i18n.yaml
+++ b/docs/capability-seams.i18n.yaml
@@ -6,5 +6,5 @@
   en: 41d772192075e133
   zh: 5ef3da69b4de1d8a
 /capability-seams-and-core-services:
-  en: 6215d15e0e273fa4
-  zh: dec5c7779e0a42f5
+  en: 3c972fccec17a890
+  zh: 94c82847a3c8b83c
diff --git a/docs/capability-seams.md b/docs/capability-seams.md
index 334e3757bc..e333a79f71 100644
--- a/docs/capability-seams.md
+++ b/docs/capability-seams.md
@@ -698,7 +698,7 @@ flowchart LR
 | `ctx.configEditor` | `core` | [`config-editor`](../packages/boot/config-editor) | - | [`settings`](../packages/settings/settings), [`agent-default-model`](../packages/core/agent-default-model) | - | Persists profile config patches under the application file lock and HMR queue, then reconciles Loader entries. |
 | `ctx.settings` | `core` | [`settings`](../packages/settings/settings) | - | [`api-settings-controller`](../packages/api/settings-controller) | - | Forms project volatile Config fields from active profile entries and delegate validated edits to config-editor. Plugins consume their own Config references. |
 | `ctx.subagentModelSelection` | `core` | [`tool-subagent`](../packages/subagent/tool-subagent) | - | [`tool-subagent`](../packages/subagent/tool-subagent) | - | Owns the default-off settings namespace that Agent-scoped delegation tools sample when composing a new top-level Session. |
-| `ctx.credentials` | `seam` | [`credentials`](../packages/credentials/credentials) | [`credentials-local`](../packages/credentials/credentials-local) | [`api-settings-controller`](../packages/api/settings-controller), [`llm-deepseek`](../packages/llm/llm-deepseek), [`llm-pi-ai`](../packages/llm/llm-pi-ai) | - | Configuration carries references to secrets; providers own the values. Consumers resolve per operation, so a rotated credential reaches the very next request; the settings controller exposes value-free metadata, writes, and owner-only reads of stored keys. |
+| `ctx.credentials` | `seam` | [`credentials`](../packages/credentials/credentials) | [`credentials-local`](../packages/credentials/credentials-local) | [`api-settings-controller`](../packages/api/settings-controller), [`llm-deepseek`](../packages/llm/llm-deepseek), [`llm-pi-ai`](../packages/llm/llm-pi-ai) | - | Configuration carries references to secrets; providers own the values. Consumers resolve per operation, so a rotated credential reaches the very next request; the settings controller exposes value-free views and write-only storage. |
 | `ctx.deepseekAccount` | `seam` | [`deepseek-account`](../packages/credentials/deepseek-account) | [`deepseek-account-platform`](../packages/credentials/deepseek-account-platform) | [`api-account-controller`](../packages/api/account-controller), [`llm-deepseek`](../packages/llm/llm-deepseek) | - | The Host owns browser authorization and local credentials; UI consumers receive state without tokens. |
 | `ctx.authorization` | `seam` | [`authorization`](../packages/credentials/authorization) | - | [`llm-pi-ai`](../packages/llm/llm-pi-ai) | - | Flows are registered by the plugin that knows how to obtain one credential and keyed by the record they write; the seam owns the conversation and the one-attempt-per-key lifecycle, never the protocol. |
 | `ctx.productAnalytics` | `service` | [`client-product-analytics`](../packages/client/product-analytics) | - | - | - | Accepts selected Desktop events, enriches available login identity, and observes live compaction under the live Host collection policy. |
diff --git a/docs/capability-seams.zh.md b/docs/capability-seams.zh.md
index d0f0bdffb0..cf3f2e67fc 100644
--- a/docs/capability-seams.zh.md
+++ b/docs/capability-seams.zh.md
@@ -700,7 +700,7 @@ flowchart LR
 | `ctx.configEditor` | `core` | [`config-editor`](../packages/boot/config-editor) | - | [`settings`](../packages/settings/settings), [`agent-default-model`](../packages/core/agent-default-model) | - | Persists profile config patches under the application file lock and HMR queue, then reconciles Loader entries. |
 | `ctx.settings` | `core` | [`settings`](../packages/settings/settings) | - | [`api-settings-controller`](../packages/api/settings-controller) | - | Forms project volatile Config fields from active profile entries and delegate validated edits to config-editor. Plugins consume their own Config references. |
 | `ctx.subagentModelSelection` | `core` | [`tool-subagent`](../packages/subagent/tool-subagent) | - | [`tool-subagent`](../packages/subagent/tool-subagent) | - | 拥有默认关闭的设置命名空间；Agent 作用域的委派工具会在组合新顶层 Session 时读取它。 |
-| `ctx.credentials` | `seam` | [`credentials`](../packages/credentials/credentials) | [`credentials-local`](../packages/credentials/credentials-local) | [`api-settings-controller`](../packages/api/settings-controller), [`llm-deepseek`](../packages/llm/llm-deepseek), [`llm-pi-ai`](../packages/llm/llm-pi-ai) | - | 配置携带对机密信息的引用；提供方拥有实际值。消费方按操作解析，因此轮换后的凭据会在紧接着的下一次请求中生效；settings controller 提供不含实际值的元数据和写入操作，并仅向所有者读取已保存密钥。 |
+| `ctx.credentials` | `seam` | [`credentials`](../packages/credentials/credentials) | [`credentials-local`](../packages/credentials/credentials-local) | [`api-settings-controller`](../packages/api/settings-controller), [`llm-deepseek`](../packages/llm/llm-deepseek), [`llm-pi-ai`](../packages/llm/llm-pi-ai) | - | 配置携带对机密信息的引用；提供方拥有实际值。消费方按操作解析，因此轮换后的凭据会在紧接着的下一次请求中生效；settings controller 提供不含实际值的视图和只写存储。 |
 | `ctx.deepseekAccount` | `seam` | [`deepseek-account`](../packages/credentials/deepseek-account) | [`deepseek-account-platform`](../packages/credentials/deepseek-account-platform) | [`api-account-controller`](../packages/api/account-controller), [`llm-deepseek`](../packages/llm/llm-deepseek) | - | Host 负责浏览器授权和本地凭证；UI 使用方只接收不含 token 的状态。 |
 | `ctx.authorization` | `seam` | [`authorization`](../packages/credentials/authorization) | - | [`llm-pi-ai`](../packages/llm/llm-pi-ai) | - | flow 由知道如何取得某份凭据的插件注册，并以其写入的记录为键；seam 拥有这段对话与"每个键同时只跑一次尝试"的生命周期，而非协议本身。 |
 | `ctx.productAnalytics` | `service` | [`client-product-analytics`](../packages/client/product-analytics) | - | - | - | 根据 Host 动态采集策略接收指定桌面事件、补充可用登录身份并监听实时压缩。 |
diff --git a/docs/subsystems/credentials.i18n.yaml b/docs/subsystems/credentials.i18n.yaml
index 06c51858d4..bad9827407 100644
--- a/docs/subsystems/credentials.i18n.yaml
+++ b/docs/subsystems/credentials.i18n.yaml
@@ -9,8 +9,8 @@
   en: 0083032b9d19467d
   zh: 15d7a7520bac094e
 /user-credentials/resolution:
-  en: 0583aeab49d80a4b
-  zh: 1ffd60d7e79f67cf
+  en: baaab4bca76bea6b
+  zh: 54ccdc03ffd44f63
 /user-credentials/description:
   en: f7b09588c0f34952
   zh: 1b93d673c5bf6a80
diff --git a/docs/subsystems/credentials.md b/docs/subsystems/credentials.md
index b4ffca123b..2a084fb29f 100644
--- a/docs/subsystems/credentials.md
+++ b/docs/subsystems/credentials.md
@@ -20,8 +20,6 @@ type CredentialRef = Branded<'CredentialRef'>
 
 `resolve(ref)` returns the value with the provider-defined source layer that supplied it, or `undefined` while unconfigured. Consumers re-resolve at each operation and never cache across operations — that per-operation read is the hot-update mechanism.
 
-`readStored(ref)` returns only the provider-managed value for editing, or `undefined` when none is stored. It never reads environment fallbacks. The Remote editor operation restricts this read to the owner.
-
 ```ts type-equiv
 /** One resolved credential value and the source layer that supplied it. */
 interface ResolvedCredential {
@@ -154,13 +152,6 @@ A CredentialKey answers "what credential does this plugin hold for this id". Not
  */
 abstract resolve(ref: CredentialRef): Promise<ResolvedCredential | undefined>
 
-/**
- * Read the provider-managed value without consulting environment fallbacks.
- * @param ref - the reference to read.
- * @returns the stored secret, or undefined when no non-empty value is stored.
- */
-abstract readStored(ref: CredentialRef): Promise<string | undefined>
-
 /**
  * Describe one reference for configuration surfaces without exposing the
  * value.
@@ -237,7 +228,7 @@ Source: [`packages/credentials/credentials/src/index.ts`](../../packages/credent
 
 ### `ctx.credentialsController` — `CredentialsController`
 
-Host service backing the generated `ctx.remote.credentials` namespace. It carries every wire obligation the credential seam itself does not: the batch fan-out bound, the field-by-field view projection, the reference-grammar guard, and the refusal mapping. Metadata reads exclude secrets; readStored returns only a provider-managed value for an explicitly opened editor.
+Host service backing the generated `ctx.remote.credentials` namespace. It carries every wire obligation the credential seam itself does not: the batch fan-out bound, the field-by-field view projection, the reference-grammar guard, and the refusal mapping. Secret values cross in one direction only — no method here returns one.
 
 ```ts cordis-catalog
 /**
@@ -252,15 +243,8 @@ Host service backing the generated `ctx.remote.credentials` namespace. It carrie
 @Remote async describe(refs: string[]): Promise<Record<string, CredentialInfo>>
 
 /**
- * Read one stored value for a credential editor, excluding environment fallbacks.
- * @param ref - reference name to read.
- * @returns the stored secret, or undefined when the provider stores none.
- * @throws RemoteError for a non-owner Remote caller, an invalid reference, or an absent provider.
- */
-@Remote async readStored(ref: string): Promise<string | undefined>
-
-/**
- * Store one value from a configuration surface.
+ * Store one value from a configuration surface. The value crosses the wire in
+ * this direction only: no read path returns it.
  * @param ref - reference name to store under.
  * @param value - the non-empty secret value.
  * @throws RemoteError when the request is invalid, no provider is mounted, or the provider refuses the write.
diff --git a/docs/subsystems/credentials.zh.md b/docs/subsystems/credentials.zh.md
index d4784832ca..1e9221699a 100644
--- a/docs/subsystems/credentials.zh.md
+++ b/docs/subsystems/credentials.zh.md
@@ -20,8 +20,6 @@ type CredentialRef = Branded<'CredentialRef'>
 
 `resolve(ref)` 返回值及提供该值的来源层（由提供方定义）；未配置期间返回 `undefined`。消费方在每个操作中重新解析，绝不跨操作缓存——这种按操作进行的读取正是热更新机制。
 
-`readStored(ref)` 仅返回用于编辑的提供方托管值；未存储时返回 `undefined`。它不读取环境后备值。编辑器的 Remote 操作仅允许所有者执行此读取。
-
 ```ts type-equiv
 /** One resolved credential value and the source layer that supplied it. */
 interface ResolvedCredential {
@@ -154,13 +152,6 @@ A CredentialKey answers "what credential does this plugin hold for this id". Not
  */
 abstract resolve(ref: CredentialRef): Promise<ResolvedCredential | undefined>
 
-/**
- * Read the provider-managed value without consulting environment fallbacks.
- * @param ref - the reference to read.
- * @returns the stored secret, or undefined when no non-empty value is stored.
- */
-abstract readStored(ref: CredentialRef): Promise<string | undefined>
-
 /**
  * Describe one reference for configuration surfaces without exposing the
  * value.
@@ -237,7 +228,7 @@ Source: [`packages/credentials/credentials/src/index.ts`](../../packages/credent
 
 ### `ctx.credentialsController` — `CredentialsController`
 
-Host service backing the generated `ctx.remote.credentials` namespace. It carries every wire obligation the credential seam itself does not: the batch fan-out bound, the field-by-field view projection, the reference-grammar guard, and the refusal mapping. Metadata reads exclude secrets; readStored returns only a provider-managed value for an explicitly opened editor.
+Host service backing the generated `ctx.remote.credentials` namespace. It carries every wire obligation the credential seam itself does not: the batch fan-out bound, the field-by-field view projection, the reference-grammar guard, and the refusal mapping. Secret values cross in one direction only — no method here returns one.
 
 ```ts cordis-catalog
 /**
@@ -252,15 +243,8 @@ Host service backing the generated `ctx.remote.credentials` namespace. It carrie
 @Remote async describe(refs: string[]): Promise<Record<string, CredentialInfo>>
 
 /**
- * Read one stored value for a credential editor, excluding environment fallbacks.
- * @param ref - reference name to read.
- * @returns the stored secret, or undefined when the provider stores none.
- * @throws RemoteError for a non-owner Remote caller, an invalid reference, or an absent provider.
- */
-@Remote async readStored(ref: string): Promise<string | undefined>
-
-/**
- * Store one value from a configuration surface.
+ * Store one value from a configuration surface. The value crosses the wire in
+ * this direction only: no read path returns it.
  * @param ref - reference name to store under.
  * @param value - the non-empty secret value.
  * @throws RemoteError when the request is invalid, no provider is mounted, or the provider refuses the write.
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.i18n.yaml b/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.i18n.yaml
deleted file mode 100644
index 3acec7569f..0000000000
--- a/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.i18n.yaml
+++ /dev/null
@@ -1,16 +0,0 @@
-# Bilingual-pair consistency record for guide.md (docs/i18n/README.md): per heading
-# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
-# After editing either side, bring the other along and re-record with:
-#   pnpm run verify-translation-pairing --write docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.md
-/:
-  en: 2f1907963c732ea8
-  zh: e25494c07150f6b9
-/saved-api-keys-in-provider-editors:
-  en: 63376a595a0e6dae
-  zh: 2709df13410087e2
-/saved-api-keys-in-provider-editors/change:
-  en: 463718dbe83f900d
-  zh: d2e55dfebf8a4b9e
-/saved-api-keys-in-provider-editors/migration:
-  en: 19c94ae9626773b1
-  zh: 1098744f47162c43
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.md b/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.md
deleted file mode 100644
index 8e721ad800..0000000000
--- a/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.md
+++ /dev/null
@@ -1,19 +0,0 @@
----
-kind: upgrade-guide
-description: "Saved API keys appear in masked editor fields, and clearing a saved key removes its override."
----
-# Saved API keys in provider editors
-
-English | [中文](guide.zh.md)
-
-## Change
-
-Provider editors show stored API keys as masked values instead of empty fields. Applying an empty field removes a previously loaded key and restores environment authentication. Cancel preserves the stored key. Environment values are never loaded into the editor.
-
-Credential providers implement `readStored(ref): Promise<string | undefined>` to return only the managed value, without environment fallbacks. The owner-only `credentials.readStored` Remote method supplies this value to an opened editor; general metadata reads remain redacted.
-
-## Migration
-
-1. Keep the loaded value to retain a saved key, replace it to rotate the key, or clear it and apply to use environment authentication.
-2. Implement `readStored` in custom `CredentialProvider` subclasses; return `undefined` when no non-empty value is stored.
-3. Reopen the DeepSeek editor to confirm the saved key appears masked. After clearing and applying, confirm the field is empty and offers environment authentication.
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.zh.md b/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.zh.md
deleted file mode 100644
index 75efbcc4d7..0000000000
--- a/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.zh.md
+++ /dev/null
@@ -1,19 +0,0 @@
----
-kind: upgrade-guide
-description: "已保存的 API 密钥显示为编辑器中的掩码值，清空已保存密钥会删除其覆盖。"
----
-# 提供商编辑器中的已保存 API 密钥
-
-[English](guide.md) | 中文
-
-## 变更
-
-提供商编辑器以掩码值显示已保存的 API 密钥，不再显示空字段。应用空字段会删除之前加载的密钥并恢复环境认证。「取消」保留已保存密钥。环境变量值从不加载到编辑器。
-
-凭据提供方实现 `readStored(ref): Promise<string | undefined>`，仅返回托管值，不使用环境后备。仅允许所有者调用的 `credentials.readStored` Remote 方法向已打开的编辑器提供此值；普通元数据读取仍保持脱敏。
-
-## 迁移
-
-1. 保留加载的值即可保留已保存密钥，替换它可轮换密钥，清空并应用则使用环境认证。
-2. 为自定义 `CredentialProvider` 子类实现 `readStored`；未存储非空值时返回 `undefined`。
-3. 重新打开 DeepSeek 编辑器，确认已保存密钥显示为掩码。清空并应用后，确认字段为空且提示使用环境认证。
diff --git a/docs/user/guide/providers.i18n.yaml b/docs/user/guide/providers.i18n.yaml
index 62801fa60d..b04aada43b 100644
--- a/docs/user/guide/providers.i18n.yaml
+++ b/docs/user/guide/providers.i18n.yaml
@@ -6,11 +6,11 @@
   en: b1631dcf25e805a1
   zh: 8ded02e2ae87f00b
 /configure-models/configure-deepseek:
-  en: 5cf396eb7f22b0f6
-  zh: d70688c6cd826f3a
+  en: 44852da64a6a39ec
+  zh: 4c280e428f0fec08
 /configure-models/add-a-third-party-provider:
-  en: c8fd933006c3830c
-  zh: 386f8f7d302e98c3
+  en: f6fb44a85dc5e4dd
+  zh: 2b86ea4492c32ed7
 /configure-models/add-a-custom-model-api:
   en: 17867305a3e1b52a
   zh: 876fedf1f6f563e4
diff --git a/docs/user/guide/providers.md b/docs/user/guide/providers.md
index 1ab90f440e..fe831bcaf9 100644
--- a/docs/user/guide/providers.md
+++ b/docs/user/guide/providers.md
@@ -10,7 +10,7 @@ Open **Settings → Models**. The DeepSeek card exposes one API-key field; enter
 
 ![The Models page: the DeepSeek card, with Add model provider below it](providers-models-page.png)
 
-Opening a provider editor loads its saved key into a masked input. Environment values are never loaded into this input. The key is stored in `$DSH_HOME/.credentials.yaml`, while settings retain only its credential reference. Credential metadata remains redacted.
+Keys are write-only. The page receives a redacted descriptor after saving, never the literal secret. The key is stored in `$DSH_HOME/.credentials.yaml`, while settings retain only its credential reference.
 
 With a key saved and the default endpoint, DeepSeek's models follow the list the DeepSeek API publishes. The list loads when the models are first needed, refreshes in the background about every ten minutes while they are in use, and falls back to the built-in models when it cannot load. Editing **Models** under **Customized settings** keeps your own list instead and stops following the published one; **Restore defaults** follows it again and reloads it. While the published list is in use, the card shows the built-in models, so a newly published model appears only in the model picker. The [API-key provider reference](../../../packages/llm/llm-deepseek-api-key/README.md) owns the listing, fallback, and gating rules.
 
@@ -18,11 +18,11 @@ With a key saved and the default endpoint, DeepSeek's models follow the list the
 
 Choose **Add model provider**. The card opens on **Third-party model provider**: pick a provider dsh ships with — the list shows provider ids such as `anthropic`, `openai`, `moonshotai` for Kimi, or `zai` for GLM — enter its API key, and save. The installed catalog supplies the endpoint, protocol, and model list.
 
-The authentication **?** explains saved-credential priority and environment fallbacks. With no saved key, leave the input blank to try the listed environment variables. A green hint identifies a detected environment variable. A yellow hint means no credential variable was detected; enter an API key or configure the listed variable. An unconfirmed hint means the status read failed or a saved key still covers the environment lookup. Clearing a saved key shows an unconfirmed hint until you save its removal and the page refreshes the environment check. Detection does not validate the credential or test the connection. Provider-managed credential files, including AWS profiles and Google application-default credentials, are outside this check. Providers without native key authentication, such as `openai-codex`, show no key field unless the profile explicitly names a credential reference.
+The authentication **?** explains saved-credential priority and environment fallbacks. Leave the key blank to use a saved credential or try the listed environment variables. A green hint identifies a detected environment variable. A yellow hint means no credential variable was detected; enter an API key or configure the listed variable. An unconfirmed hint means the status read failed. Detection does not validate the credential or test the connection. Provider-managed credential files, including AWS profiles and Google application-default credentials, are outside this check. Providers without native key authentication, such as `openai-codex`, show no key field unless the profile explicitly names a credential reference.
 
-A saved key appears masked, with no status text below the input. An empty input uses **Leave blank to use env as auth** and one detection hint. A nonempty input shows no authentication status text. Address configuration variables appear under **Base URL** and do not count as credentials.
+A saved credential uses the placeholder **Leave blank to use saved credentials**, with no status text below the input. Environment fallback uses **Leave blank to use env as auth** and one detection hint while the input is empty. A nonempty input shows no authentication status text. Address configuration variables appear under **Base URL** and do not count as credentials.
 
-A nonempty key input has an eye button. Select **Show secret** to check the loaded or newly entered key, and **Hide secret** to mask it again. Changing the input masks it again. Saving an unchanged key preserves its exact stored value. Clearing it and saving removes the saved key. Cancelling preserves the saved key.
+A nonempty key input has an eye button. Select **Show secret** to check what you typed, and **Hide secret** to mask it again. Changing the input masks it again. Stored credentials remain write-only.
 
 ## Add a custom model API
 
diff --git a/docs/user/guide/providers.zh.md b/docs/user/guide/providers.zh.md
index ddb44f1814..bb518c42b9 100644
--- a/docs/user/guide/providers.zh.md
+++ b/docs/user/guide/providers.zh.md
@@ -10,7 +10,7 @@
 
 ![模型页：DeepSeek 卡片，及其下方的添加模型提供商入口](providers-models-page.zh.png)
 
-打开提供商编辑器时，已保存密钥会载入遮罩输入框。环境变量的值不会载入此输入框。密钥存储在 `$DSH_HOME/.credentials.yaml` 中，settings 只保留它的凭据引用。凭据元数据仍保持脱敏。
+密钥是只写的。保存后，页面只会收到脱敏描述符，永远不会收到明文密钥。密钥存储在 `$DSH_HOME/.credentials.yaml` 中，settings 只保留它的凭据引用。
 
 保存了密钥且使用默认端点时，DeepSeek 的模型跟随 DeepSeek API 发布的列表。第一次需要模型时加载列表，使用期间约每十分钟在后台刷新一次，无法加载时退回内置模型。在**自定义设置**里编辑**模型目录**会改用你自己的列表，不再跟随发布的列表；点**恢复默认模型**会重新跟随并重新加载。使用发布的列表时，卡片上显示的是内置模型，因此新发布的模型只出现在模型选择器中。列表、兜底和门控规则见 [API key 提供方参考](../../../packages/llm/llm-deepseek-api-key/README.zh.md)。
 
@@ -18,11 +18,11 @@
 
 选择**添加模型提供商**。卡片默认打开在**第三方模型提供商**：选取 dsh 自带的提供商——列表显示的是提供商 id，例如 `anthropic`、`openai`、Kimi 对应的 `moonshotai`、GLM 对应的 `zai`——输入其 API 密钥并保存。已安装目录会提供端点、协议和模型列表。
 
-认证 **?** 说明已保存凭据的优先级和环境后备。没有已保存密钥时，输入留空会尝试读取列出的环境变量。绿色提示标明已检测到环境变量。黄色提示表示未检测到凭据变量；请输入 API 密钥或配置列出的变量。状态未确认表示读取失败，或已保存密钥仍覆盖环境读取。清空已保存密钥后，提示会保持未确认，直到保存删除操作并刷新环境检测。检测不验证凭据，也不测试连接。AWS profile 和 Google 应用默认凭据等提供商管理的凭据文件不在检查范围内。没有原生密钥认证的提供商（例如 `openai-codex`）不显示密钥字段，除非 profile 显式指定了凭据引用。
+认证 **?** 说明已保存凭据的优先级和环境后备。密钥留空时，使用已保存凭据，或尝试读取列出的环境变量。绿色提示标明已检测到环境变量。黄色提示表示未检测到凭据变量；请输入 API 密钥或配置列出的变量。状态未确认表示读取失败。检测不验证凭据，也不测试连接。AWS profile 和 Google 应用默认凭据等提供商管理的凭据文件不在检查范围内。没有原生密钥认证的提供商（例如 `openai-codex`）不显示密钥字段，除非 profile 显式指定了凭据引用。
 
-已保存密钥以遮罩显示，输入框下方不显示状态文字。输入留空时，显示**留空使用环境认证**占位文字和一条检测提示。输入非空时，不显示认证状态文字。地址配置变量显示在**基础 URL**下方，不计作凭据。
+已保存凭据使用**留空使用已保存凭据**占位文字，输入框下方不显示状态文字。环境后备使用**留空使用环境认证**占位文字，输入留空时显示一条检测提示。输入非空时，不显示认证状态文字。地址配置变量显示在**基础 URL**下方，不计作凭据。
 
-密钥输入非空时，输入框内显示眼睛按钮。选择**显示密钥**检查已载入或新输入的密钥，选择**隐藏密钥**重新遮住输入。修改输入后会重新遮住密钥。保存未修改的密钥会保留原值。清空并保存会删除已保存密钥。取消编辑会保留已保存密钥。
+密钥输入非空时，输入框内显示眼睛按钮。选择**显示密钥**检查当前输入，选择**隐藏密钥**重新遮住输入。修改输入后会重新遮住密钥。已保存凭据仍保持只写。
 
 ## 添加自定义模型 API
 
diff --git a/packages/api/settings-controller/README.i18n.yaml b/packages/api/settings-controller/README.i18n.yaml
index 979d0867fb..4b3f0d24d3 100644
--- a/packages/api/settings-controller/README.i18n.yaml
+++ b/packages/api/settings-controller/README.i18n.yaml
@@ -9,14 +9,14 @@
   en: 7fecb4d8800e8f97
   zh: 3e2c3fdb29b73cd0
 /settings-controller/summary:
-  en: 94a995854f855609
-  zh: 7165eecdd85a5632
+  en: e5068267079e62d0
+  zh: 9e2d663a6ca02c58
 /settings-controller/table-of-contents:
   en: 3a654e12f423946b
   zh: 4e3a19aaee58f8a7
 /settings-controller/use-this-package:
-  en: d6fbd0324044be6b
-  zh: 5e86d8c95e51b421
+  en: cf2f4de5bee8be55
+  zh: b2630dcba4be5ae8
 /settings-controller/configuration:
   en: e0297f144b649af7
   zh: e70ed56edffd97f0
diff --git a/packages/api/settings-controller/README.md b/packages/api/settings-controller/README.md
index 17357971ed..b38072546d 100644
--- a/packages/api/settings-controller/README.md
+++ b/packages/api/settings-controller/README.md
@@ -8,7 +8,7 @@ English | [中文](README.zh.md)
 
 ## Summary
 
-`@deepseek-ai/dsh-api-settings-controller` exposes generated `ctx.remote.settings` and `ctx.remote.credentials` namespaces for browser configuration surfaces. It returns redacted settings and credential metadata and supports settings and credential writes. It reads stored keys for owner-opened editors. It also opens provider-owned settings or Agent preset locations on the Host desktop. When a provider is absent, the namespace remains registered and returns an actionable configuration error.
+`@deepseek-ai/dsh-api-settings-controller` exposes generated `ctx.remote.settings` and `ctx.remote.credentials` namespaces for browser configuration surfaces. It returns redacted settings and credential metadata, supports settings and credential writes without returning secret values, and opens provider-owned settings or Agent preset locations on the Host desktop. When a provider is absent, the namespace remains registered and returns an actionable configuration error.
 
 ## Table of Contents
 
@@ -25,7 +25,7 @@ English | [中文](README.zh.md)
 
 Mount this package as a Loader entry in a profile that serves browser configuration. The entry registers both namespaces independently of their providers so a missing provider produces a named configuration error at invocation. Its generated descriptors enter the strict Typert registry, while the settings and credential Definitions remain plain Cordis Services with no wire obligations of their own.
 
-`describe(refs)` answers one map keyed by the requested names, so a settings page describing every reference its rows carry settles those rows together. It accepts at most 64 names per call, reports an invalid name or empty write value as `bad-request`, and copies each answer field by field — a provider returning more than `CredentialInfo` declares cannot widen what crosses. Valid `set(ref, value)` and `unset(ref)` calls report a provider refusal as `credential-rejected`, carrying the provider's message with only the reference in its details. `readStored(ref)` returns a provider-managed key only for the owner or trusted in-process code; it returns no environment fallback. A non-owner read returns `credential/rejected` before consulting the provider. Metadata reads remain secret-free.
+`describe(refs)` answers one map keyed by the requested names, so a settings page describing every reference its rows carry settles those rows together. It accepts at most 64 names per call, reports an invalid name or empty write value as `bad-request`, and copies each answer field by field — a provider returning more than `CredentialInfo` declares cannot widen what crosses. Valid `set(ref, value)` and `unset(ref)` calls report a provider refusal as `credential-rejected`, carrying the provider's message with only the reference in its details. Secret values cross in this direction only: no method here returns one.
 
 `settings.describe()` returns deployment facts and every namespace under `redactSecrets: true`. `settings.update`, `settings.replace`, and `settings.mutate` expose the settings service's three write operations and return the namespace's new redacted view; stale writes use `settings-conflict` and other provider refusals use `settings-rejected`.
 
diff --git a/packages/api/settings-controller/README.zh.md b/packages/api/settings-controller/README.zh.md
index 2c4f4a2b29..3c9e876740 100644
--- a/packages/api/settings-controller/README.zh.md
+++ b/packages/api/settings-controller/README.zh.md
@@ -8,7 +8,7 @@ kind: "package-reference"
 
 ## 概述
 
-`@deepseek-ai/dsh-api-settings-controller` 为浏览器配置界面提供生成的 `ctx.remote.settings` 与 `ctx.remote.credentials` namespace。它返回脱敏的 settings 与凭据元数据，支持 settings 与凭据写入。它为所有者打开的编辑器读取已保存密钥。它还在 Host 桌面打开由提供方持有的 settings 或 Agent preset 位置。提供方缺失时，namespace 仍会注册，并返回可操作的配置错误。
+`@deepseek-ai/dsh-api-settings-controller` 为浏览器配置界面提供生成的 `ctx.remote.settings` 与 `ctx.remote.credentials` namespace。它返回脱敏的 settings 与凭据元数据，支持 settings 与凭据写入而不返回机密值，并在 Host 桌面打开由提供方持有的 settings 或 Agent preset 位置。提供方缺失时，namespace 仍会注册，并返回可操作的配置错误。
 
 ## 目录
 
@@ -25,7 +25,7 @@ kind: "package-reference"
 
 请把本包作为 Loader entry 挂载到提供浏览器配置的 profile 中。本 entry 不依赖提供方是否存在而注册两个 namespace，因此缺少提供方会在调用时产生具名配置错误。它生成的 descriptor 进入严格 Typert 注册表，而 settings 与凭据 Definition 仍是普通 Cordis 服务，自身不承担任何 wire 义务。
 
-`describe(refs)` 以请求的名字为键返回一份 map，因此设置页描述其各行携带的全部引用时，这些行会一起落定。单次调用最多接受 64 个名字，无效名字或空写入值报告为 `bad-request`，并逐字段复制每个答案——提供方返回超出 `CredentialInfo` 声明的内容也无法扩大跨越 wire 的字段。有效的 `set(ref, value)` 与 `unset(ref)` 调用把提供方拒绝报告为 `credential-rejected`，携带提供方的消息，details 中只有该引用。`readStored(ref)` 仅向所有者或可信进程内代码返回提供方管理的密钥，不返回环境后备值。非所有者读取会在访问提供方之前返回 `credential/rejected`。元数据读取仍不包含机密。
+`describe(refs)` 以请求的名字为键返回一份 map，因此设置页描述其各行携带的全部引用时，这些行会一起落定。单次调用最多接受 64 个名字，无效名字或空写入值报告为 `bad-request`，并逐字段复制每个答案——提供方返回超出 `CredentialInfo` 声明的内容也无法扩大跨越 wire 的字段。有效的 `set(ref, value)` 与 `unset(ref)` 调用把提供方拒绝报告为 `credential-rejected`，携带提供方的消息，details 中只有该引用。机密值只在这个方向跨越 wire：这里没有任何方法会返回它。
 
 `settings.describe()` 返回部署信息，以及在 `redactSecrets: true` 下读取的所有 namespace。`settings.update`、`settings.replace` 与 `settings.mutate` 暴露 settings 服务的三种写入操作，并返回该 namespace 的新脱敏视图；陈旧写入使用 `settings-conflict`，其他提供方拒绝使用 `settings-rejected`。
 
diff --git a/packages/api/settings-controller/src/credentials.ts b/packages/api/settings-controller/src/credentials.ts
index f9172f8f9e..3889669048 100644
--- a/packages/api/settings-controller/src/credentials.ts
+++ b/packages/api/settings-controller/src/credentials.ts
@@ -9,7 +9,7 @@ import { Context } from '@deepseek-ai/cordis'
 import { credentialRef } from '@deepseek-ai/dsh-credentials'
 import type { CredentialProvider } from '@deepseek-ai/dsh-credentials'
 import type { CredentialInfo } from '@deepseek-ai/dsh-credentials/types'
-import { principalOf, Remote, RemoteError, TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol'
+import { Remote, RemoteError, TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol'
 import { z } from 'zod'
 
 /**
@@ -61,8 +61,8 @@ declare module '@deepseek-ai/cordis' {
  * Host service backing the generated `ctx.remote.credentials` namespace. It
  * carries every wire obligation the credential seam itself does not: the batch
  * fan-out bound, the field-by-field view projection, the reference-grammar
- * guard, and the refusal mapping. Metadata reads exclude secrets; readStored
- * returns only a provider-managed value for an explicitly opened editor.
+ * guard, and the refusal mapping. Secret values cross in one direction only —
+ * no method here returns one.
  */
 export class CredentialsController extends TypertRemoteService {
   /** @param ctx - Host context where a credential provider may be mounted. */
@@ -90,22 +90,8 @@ export class CredentialsController extends TypertRemoteService {
   }
 
   /**
-   * Read one stored value for a credential editor, excluding environment fallbacks.
-   * @param ref - reference name to read.
-   * @returns the stored secret, or undefined when the provider stores none.
-   * @throws RemoteError for a non-owner Remote caller, an invalid reference, or an absent provider.
-   */
-  @Remote
-  async readStored(ref: string): Promise<string | undefined> {
-    const request = parseRequest('credentials.readStored', unsetRequestSchema, { ref })
-    if (principalOf(this.ctx.invocation) !== undefined) {
-      throw new RemoteError('credential/rejected', 'Only the owner can read stored credentials.', { ref: request.ref })
-    }
-    return this.provider().readStored(credentialRef(request.ref))
-  }
-
-  /**
-   * Store one value from a configuration surface.
+   * Store one value from a configuration surface. The value crosses the wire in
+   * this direction only: no read path returns it.
    * @param ref - reference name to store under.
    * @param value - the non-empty secret value.
    * @throws RemoteError when the request is invalid, no provider is mounted, or the provider refuses the write.
diff --git a/packages/api/settings-controller/src/types.ts b/packages/api/settings-controller/src/types.ts
index d1dadc1e16..3d11c6ab0c 100644
--- a/packages/api/settings-controller/src/types.ts
+++ b/packages/api/settings-controller/src/types.ts
@@ -20,9 +20,9 @@ declare module '@deepseek-ai/dsh-typert-protocol' {
      */
     'settings/conflict': { readonly ns: string; readonly expected: number; readonly actual: number }
     /**
-     * A non-owner requested a stored secret, or the provider refused a valid
-     * credential write, for example because the stored document no longer
-     * parses. The details name only the reference, never the value.
+     * The provider refused a valid credential write, for example because the
+     * stored document no longer parses. The details name only the reference,
+     * never the value.
      */
     'credential/rejected': { readonly ref: string }
   }
diff --git a/packages/api/settings-controller/tests/credentials-controller.host.spec.ts b/packages/api/settings-controller/tests/credentials-controller.host.spec.ts
index 552baa7b5d..5eeb190385 100644
--- a/packages/api/settings-controller/tests/credentials-controller.host.spec.ts
+++ b/packages/api/settings-controller/tests/credentials-controller.host.spec.ts
@@ -2,17 +2,9 @@ import { describe, expect, it } from 'vitest'
 import { Context } from '@deepseek-ai/cordis'
 import type { CredentialInfo } from '@deepseek-ai/dsh-credentials/types'
 import { remoteErrorOf, remoteMethods } from '@deepseek-ai/dsh-typert-protocol'
-import type { PeerId, RemoteInvocation } from '@deepseek-ai/dsh-typert-protocol'
 import CredentialsController from '../src/credentials.ts'
 import { MemoryCredentials } from '../../../credentials/credentials/tests/memory.ts'
 
-declare module '@deepseek-ai/dsh-typert-protocol' {
-  interface PrincipalMap {
-    /** Non-owner used to verify stored-key read denial. */
-    'credential-viewer': { readonly kind: 'credential-viewer' }
-  }
-}
-
 /** A store whose `describe` carries more than the view declares, as a foreign provider might. */
 class LeakyCredentials extends MemoryCredentials {
   override describe(): Promise<CredentialInfo> {
@@ -54,7 +46,6 @@ describe('the credentials Remote namespace a configuration surface calls', () =>
     expect(binding.namespace).toBe('credentials')
     expect(remoteMethods(controller)).toEqual([
       { method: 'describe', invocation: { kind: 'direct' } },
-      { method: 'readStored', invocation: { kind: 'direct' } },
       { method: 'set', invocation: { kind: 'direct' } },
       { method: 'unset', invocation: { kind: 'direct' } },
     ])
@@ -65,7 +56,6 @@ describe('the credentials Remote namespace a configuration surface calls', () =>
     await ctx.plugin(CredentialsController)
     for (const call of [
       () => ctx.credentialsController.describe(['DEEPSEEK_API_KEY']),
-      () => ctx.credentialsController.readStored('DEEPSEEK_API_KEY'),
       () => ctx.credentialsController.set('DEEPSEEK_API_KEY', 'sk-live'),
       () => ctx.credentialsController.unset('DEEPSEEK_API_KEY'),
     ]) {
@@ -92,7 +82,6 @@ describe('the credentials Remote namespace a configuration surface calls', () =>
     const controller = await boot()
     for (const call of [
       () => controller.describe(['DEEPSEEK_API_KEY', 'not a var']),
-      () => controller.readStored('not a var'),
       () => controller.set('not a var', 'sk-live'),
       () => controller.unset('not a var'),
     ]) {
@@ -126,35 +115,6 @@ describe('the credentials Remote namespace a configuration surface calls', () =>
       .toEqual({ DEEPSEEK_API_KEY: { configured: false, writable: true } })
   })
 
-  it('reads stored secrets only through the explicit editor read', async () => {
-    const controller = await boot({ DEEPSEEK_API_KEY: 'fixture-saved-key' })
-    expect(await controller.readStored('DEEPSEEK_API_KEY')).toBe('fixture-saved-key')
-    expect(await controller.readStored('OPENAI_API_KEY')).toBeUndefined()
-    expect(JSON.stringify(await controller.describe(['DEEPSEEK_API_KEY']))).not.toContain('fixture-saved-key')
-    await controller.unset('DEEPSEEK_API_KEY')
-    expect(await controller.readStored('DEEPSEEK_API_KEY')).toBeUndefined()
-  })
-
-  it('denies non-owner stored-key reads before consulting the provider', async () => {
-    const ctx = new Context()
-    await ctx.plugin(MemoryCredentials, { DEEPSEEK_API_KEY: 'fixture-saved-key' })
-    await ctx.plugin(CredentialsController)
-    const signal = new AbortController().signal
-    const invocation: RemoteInvocation = {
-      request: { namespace: 'credentials', method: 'readStored', args: { ref: 'DEEPSEEK_API_KEY' } },
-      service: 'credentialsController', signal,
-      peer: {
-        id: 'credential-viewer' as PeerId, ctx, signal, principal: { kind: 'credential-viewer' },
-        interactions: 'none', dispose: () => Promise.resolve(),
-      },
-      uplink: async function* <In>(): AsyncGenerator<In> {},
-    }
-    const caller = ctx.extend({ invocation })
-    const failure = await caller.credentialsController.readStored('DEEPSEEK_API_KEY').catch((error: unknown) => error)
-    expect(remoteErrorOf(failure)).toMatchObject({ code: 'credential/rejected', details: { ref: 'DEEPSEEK_API_KEY' } })
-    expect(JSON.stringify(remoteErrorOf(failure))).not.toContain('fixture-saved-key')
-  })
-
   it('reports a refused write as credential/rejected naming only the reference', async () => {
     const controller = await boot({}, RejectingCredentials)
     const failure = await controller.set('DEEPSEEK_API_KEY', 'sk-live').catch((error: unknown) => error)
diff --git a/packages/client/ui-settings-models/README.i18n.yaml b/packages/client/ui-settings-models/README.i18n.yaml
index 3c28ce7528..02b3bd6729 100644
--- a/packages/client/ui-settings-models/README.i18n.yaml
+++ b/packages/client/ui-settings-models/README.i18n.yaml
@@ -9,8 +9,8 @@
   en: 0db6fa836e1ff511
   zh: 0e2968763e1fb7a5
 /deepseek-ai-dsh-client-ui-settings-models/summary:
-  en: 2d39061747367414
-  zh: 35edfca13c457deb
+  en: 51252c1e9fa6da0a
+  zh: 227b54d7898417fa
 /deepseek-ai-dsh-client-ui-settings-models/table-of-contents:
   en: d152484eb41ac6b4
   zh: 09388d293f9be9cb
@@ -18,11 +18,11 @@
   en: db5aaf7f702e1f0c
   zh: 409a78c14fb2b6e3
 /deepseek-ai-dsh-client-ui-settings-models/use-this-package/api-keys:
-  en: d771da09da774692
-  zh: 9566b3c0e95da8a6
+  en: f4817eb2e3537ed9
+  zh: e589c193fa85473f
 /deepseek-ai-dsh-client-ui-settings-models/use-this-package/editing-a-provider:
-  en: 23c8e60086660111
-  zh: f277b69a202f207c
+  en: ce52da7e6065ccc4
+  zh: c63690cb5de5ea85
 /deepseek-ai-dsh-client-ui-settings-models/use-this-package/adding-and-deleting-providers:
   en: c0b04b2b11af60d3
   zh: d195eec281e445cb
diff --git a/packages/client/ui-settings-models/README.md b/packages/client/ui-settings-models/README.md
index 3e579642fe..8db24c5170 100644
--- a/packages/client/ui-settings-models/README.md
+++ b/packages/client/ui-settings-models/README.md
@@ -11,7 +11,7 @@ Desktop product events use the optional [product analytics service](../product-a
 
 ## Summary
 
-`dsh-client-ui-settings-models` is the Models settings page of the dsh web client: users configure API keys (stored under the profile's credential reference), edit each provider's model list, and hand-declare custom pi-ai routes, with provider rows and one editor card at a time. The page joins the provider directory, the settings document, and the credential descriptions into one shared snapshot, so a row's state stays consistent across all three. It also walks first-run users through two ordered dialogs — a versioned preview notice and the conditional official-DeepSeek credential step.
+`dsh-client-ui-settings-models` is the Models settings page of the dsh web client: users configure API keys (stored write-only under the profile's credential reference), edit each provider's model list, and hand-declare custom pi-ai routes, with provider rows and one editor card at a time. The page joins the provider directory, the settings document, and the credential descriptions into one shared snapshot, so a row's state stays consistent across all three. It also walks first-run users through two ordered dialogs — a versioned preview notice and the conditional official-DeepSeek credential step.
 
 ## Table of Contents
 
@@ -41,15 +41,15 @@ Host configuration `credentialOnboarding` defaults to `true`. The Electron prelo
 
 ### API keys
 
-The API key input shows a saved key masked and uses `autocomplete="new-password"` to avoid filling login passwords. Its eye button reveals the current value; editing or clearing the value masks it again. Environment values are never loaded into the input.
+API-key inputs start empty and use `autocomplete="new-password"` to ask browsers not to autofill saved login passwords. A nonempty draft has the same eye control as masked conversation text: **Show secret** reveals the current input and **Hide secret** masks it. Changing or clearing the input masks it again. Stored credentials are never read into the input.
 
-The primary field on an editor card is a single **API key** input — the page never asks for an environment-variable name. A typed key stores through `credentials.set` under the profile's reference, deriving `<ROUTE>_API_KEY` when the profile has none, and the pi-ai profile records that derivation as `apiKeyEnv`, so `cordis.patch.yml` never carries a key value. Leaving a new pi-ai provider's key blank saves a reference-free profile and preserves provider-native authentication (for example the Bedrock credential chain or Vertex ADC). The field's placeholder and help tooltip use the profile's `apiKeyEnv` when it has one; otherwise they use the credential variables of the route's `nativeAuth`, excluding `baseURLEnv` address variables, in lookup order, as the configurable-provider directory reports them. These display hints omit references containing `oauth` (case-insensitively), and describe saved credentials followed by the displayed environment fallbacks. This presentation filter does not change the [credential resolution order](../../../docs/subsystems/credentials.md#resolution), the adapter's complete environment list, or an explicit reference. A filtered explicit reference still has a usable key input with the plain placeholder and no tooltip. A native route that has no key authentication omits the key field and authentication help entirely; an explicit reference still enables the field. A profile without a reference on a route without `nativeAuth`, such as a hand-declared route, shows the plain key placeholder and no tooltip. A row labels API-key state with a green solid dot only when a referenced credential is confirmed configured, and with a red solid dot only when a named reference is confirmed missing. A successful Apply emits a local accessible status message without echoing secret material.
+The primary field on an editor card is a single **API key** input — the page never asks for an environment-variable name. A typed key stores write-only through `credentials.set` under the profile's reference, deriving `<ROUTE>_API_KEY` when the profile has none, and the pi-ai profile records that derivation as `apiKeyEnv`, so `cordis.patch.yml` never carries a key value. Leaving a new pi-ai provider's key blank saves a reference-free profile and preserves provider-native authentication (for example the Bedrock credential chain or Vertex ADC). The field's placeholder and help tooltip use the profile's `apiKeyEnv` when it has one; otherwise they use the credential variables of the route's `nativeAuth`, excluding `baseURLEnv` address variables, in lookup order, as the configurable-provider directory reports them. These display hints omit references containing `oauth` (case-insensitively), and describe saved credentials followed by the displayed environment fallbacks. This presentation filter does not change the [credential resolution order](../../../docs/subsystems/credentials.md#resolution), the adapter's complete environment list, or an explicit reference. A filtered explicit reference still has a usable key input with the plain placeholder and no tooltip. A native route that has no key authentication omits the key field and authentication help entirely; an explicit reference still enables the field. A profile without a reference on a route without `nativeAuth`, such as a hand-declared route, shows the plain key placeholder and no tooltip. A row labels API-key state with a green solid dot only when a referenced credential is confirmed configured, and with a red solid dot only when a named reference is confirmed missing. A successful Apply emits a local accessible status message without echoing secret material.
 
-Opening an existing provider editor reads its stored key through the owner-only `credentials.readStored` operation and shows it as a password input. The reveal button shows the loaded value. The key stays in that editor's local state; provider-directory and settings snapshots contain only redacted metadata. A failed read shows an error instead of an empty editor. Cancel discards edits, and Apply preserves an unchanged key, replaces an edited key, or removes a cleared key so environment authentication can apply.
+The editor uses redacted `CredentialInfo` to choose the saved-credential placeholder or environment detection, without displaying a credential-source label. Refreshing the snapshot updates an open editor without a separate probe. The hint never receives a credential value or changes field writability.
 
 ### Editing a provider
 
-An empty key field offers environment authentication; a saved key appears as a masked value. Redacted `credentials.describe` checks distinguish a detected environment reference, no detected variables, and an unconfirmed read. A missing-variable hint uses the warning color and names the first variable to configure. A detected environment reference uses green. Address configuration variables do not count as credentials. Hidden authentication references still participate in detection; a generic detected hint keeps their names hidden. Detection does not validate credentials, test a connection, or inspect provider-managed files such as AWS profiles and Google application-default credentials. A nonempty input shows no authentication status text. The page describes native variable names and named references in batches of at most 64. Editor reads return only provider-managed values, never environment values.
+A blank key field offers a saved credential when one is detected, with no status text below the input; otherwise it offers environment authentication. Redacted `credentials.describe` checks distinguish a detected environment reference, no detected variables, and an unconfirmed read. A missing-variable hint uses the warning color and names the first variable to configure. A detected environment reference uses green. Address configuration variables do not count as credentials. Hidden authentication references still participate in detection; a generic detected hint keeps their names hidden. Detection does not validate credentials, test a connection, or inspect provider-managed files such as AWS profiles and Google application-default credentials. A nonempty input shows no authentication status text. The page reads native variable names as well as named references, in batches of at most 64, and never reads their values into the Client.
 
 An endpoint without a fixed catalog default shows the provider's `baseURLEnv` configuration names below the input. A profile endpoint remains the first placeholder choice.
 
diff --git a/packages/client/ui-settings-models/README.zh.md b/packages/client/ui-settings-models/README.zh.md
index f96f6d9d2b..23763f168c 100644
--- a/packages/client/ui-settings-models/README.zh.md
+++ b/packages/client/ui-settings-models/README.zh.md
@@ -11,7 +11,7 @@ kind: "package-reference"
 
 ## 概述
 
-`dsh-client-ui-settings-models` 是 dsh Web 客户端的 Models 设置页面：用户可以配置 API 密钥（存入 profile 的凭据引用之下）、编辑每个提供商的模型列表，并手工声明自定义 pi-ai 路由；页面以提供商行展示，一次只展开一张编辑卡片。该页面把提供商目录、设置文档与凭据描述合并为一个共享快照，因此行的状态在三个方面始终一致。它还会带首次运行的用户走两个有序弹窗——版本化预览版说明，以及按条件显示的官方 DeepSeek 凭据步骤。
+`dsh-client-ui-settings-models` 是 dsh Web 客户端的 Models 设置页面：用户可以配置 API 密钥（以只写方式存入 profile 的凭据引用之下）、编辑每个提供商的模型列表，并手工声明自定义 pi-ai 路由；页面以提供商行展示，一次只展开一张编辑卡片。该页面把提供商目录、设置文档与凭据描述合并为一个共享快照，因此行的状态在三个方面始终一致。它还会带首次运行的用户走两个有序弹窗——版本化预览版说明，以及按条件显示的官方 DeepSeek 凭据步骤。
 
 ## 目录
 
@@ -41,15 +41,15 @@ Host 配置 `credentialOnboarding` 默认为 `true`。Electron preload 标记会
 
 ### API 密钥
 
-API 密钥输入框以掩码显示已保存的密钥，并通过 `autocomplete="new-password"` 避免填入登录密码。眼睛按钮显示当前值；修改或清空输入后重新遮住密钥。环境变量值从不加载到输入框。
+API 密钥输入框初始为空，并通过 `autocomplete="new-password"` 请求浏览器不要自动填入已保存的登录密码。输入非空时，显示与会话密钥遮罩一致的眼睛按钮：**显示密钥**展示当前输入，**隐藏密钥**重新遮住输入。修改或清空输入后会重新遮住密钥。已保存凭据从不读入输入框。
 
-编辑卡片上的主字段是单独一个 **API 密钥**输入框——页面从不询问环境变量名。键入的密钥经 `credentials.set` 存入 profile 的引用之下，profile 没有引用时便派生 `<ROUTE>_API_KEY`，pi-ai profile 会把这次派生记录为 `apiKeyEnv`，因此 `cordis.patch.yml` 从不携带密钥值。为新的 pi-ai 提供商留空密钥会保存一个不带引用的 profile，从而保留提供商原生认证（例如 Bedrock 凭据链或 Vertex ADC）。profile 有 `apiKeyEnv` 时，字段的占位文字与帮助提示采用该引用；否则按查找顺序采用可配置提供商目录为该路由报告的 `nativeAuth` 凭据变量，并排除 `baseURLEnv` 地址变量。这些显示提示会忽略包含 `oauth` 的引用（不区分大小写），并说明优先使用已保存凭据，其后为显示的环境后备。这项显示过滤不改变[凭据解析顺序](../../../docs/subsystems/credentials.zh.md#resolution)、适配器的完整环境变量列表或显式引用。被过滤的显式引用仍有可用的密钥输入框，使用普通占位文字且不显示帮助提示。没有密钥认证的原生路由不显示密钥字段及认证帮助；显式引用仍会启用该字段。路由没有 `nativeAuth`（例如手动声明的路由）且 profile 没有引用时，显示普通的密钥占位文字，且不显示帮助提示。只有确认引用的凭据已配置时，行才会以绿色实心点标示 API 密钥状态；只有确认具名引用缺失时，才会以红色实心点标示。「应用」成功后会发出本地无障碍状态消息，且绝不回显任何机密内容。
+编辑卡片上的主字段是单独一个 **API 密钥**输入框——页面从不询问环境变量名。键入的密钥经 `credentials.set` 以**只写**方式存入 profile 的引用之下，profile 没有引用时便派生 `<ROUTE>_API_KEY`，pi-ai profile 会把这次派生记录为 `apiKeyEnv`，因此 `cordis.patch.yml` 从不携带密钥值。为新的 pi-ai 提供商留空密钥会保存一个不带引用的 profile，从而保留提供商原生认证（例如 Bedrock 凭据链或 Vertex ADC）。profile 有 `apiKeyEnv` 时，字段的占位文字与帮助提示采用该引用；否则按查找顺序采用可配置提供商目录为该路由报告的 `nativeAuth` 凭据变量，并排除 `baseURLEnv` 地址变量。这些显示提示会忽略包含 `oauth` 的引用（不区分大小写），并说明优先使用已保存凭据，其后为显示的环境后备。这项显示过滤不改变[凭据解析顺序](../../../docs/subsystems/credentials.zh.md#resolution)、适配器的完整环境变量列表或显式引用。被过滤的显式引用仍有可用的密钥输入框，使用普通占位文字且不显示帮助提示。没有密钥认证的原生路由不显示密钥字段及认证帮助；显式引用仍会启用该字段。路由没有 `nativeAuth`（例如手动声明的路由）且 profile 没有引用时，显示普通的密钥占位文字，且不显示帮助提示。只有确认引用的凭据已配置时，行才会以绿色实心点标示 API 密钥状态；只有确认具名引用缺失时，才会以红色实心点标示。「应用」成功后会发出本地无障碍状态消息，且绝不回显任何机密内容。
 
-打开已有提供商的编辑器时，通过仅允许所有者调用的 `credentials.readStored` 操作读取已保存密钥，并以密码输入框显示。显示按钮可以展示已加载的值。密钥只保存在该编辑器的本地状态中；提供商目录与设置快照只包含脱敏元数据。读取失败时显示错误，不打开空白编辑器。「取消」丢弃编辑；「保存」保留未修改的密钥、替换已编辑的密钥，或删除已清空的密钥，从而允许使用环境认证。
+编辑器使用脱敏 `CredentialInfo` 选择已保存凭据的占位文字或环境检测，不显示凭据来源标签。快照刷新会更新打开的编辑器，无需单独探测。提示从不接收凭据值，也不改变字段的可写性。
 
 ### 编辑提供商
 
-空密钥字段提示使用环境认证；已保存的密钥显示为掩码值。脱敏的 `credentials.describe` 检查区分已检测到环境引用、未检测到变量和读取状态未确认。缺少变量时使用黄色提示，并列出应配置的首个变量名。已检测到环境引用时使用绿色。地址配置变量不计作凭据。隐藏的认证引用仍参与检测；使用不含变量名的通用检测提示。检测不验证凭据、不测试连接，也不检查 AWS profile 或 Google 应用默认凭据等提供商管理的文件。输入非空时，不显示认证状态文字。页面按每批最多 64 项描述原生变量名和具名引用。编辑器读取只返回提供方管理的值，不返回环境变量值。
+密钥字段留空时，已检测到已保存凭据则提示使用该凭据，输入框下方不显示状态文字；否则提示使用环境认证。脱敏的 `credentials.describe` 检查区分已检测到环境引用、未检测到变量和读取状态未确认。缺少变量时使用黄色提示，并列出应配置的首个变量名。已检测到环境引用时使用绿色。地址配置变量不计作凭据。隐藏的认证引用仍参与检测；使用不含变量名的通用检测提示。检测不验证凭据、不测试连接，也不检查 AWS profile 或 Google 应用默认凭据等提供商管理的文件。输入非空时，不显示认证状态文字。页面读取原生变量名和具名引用，每批最多 64 项，不将变量值读入 Client。
 
 目录未提供固定默认端点时，输入框下方显示提供方的 `baseURLEnv` 配置变量名。Profile 中的端点仍是占位符的首选。
 
diff --git a/packages/client/ui-settings-models/src/client/ApiKeyInput.tsx b/packages/client/ui-settings-models/src/client/ApiKeyInput.tsx
index 3727000fc1..e983a40303 100644
--- a/packages/client/ui-settings-models/src/client/ApiKeyInput.tsx
+++ b/packages/client/ui-settings-models/src/client/ApiKeyInput.tsx
@@ -1,4 +1,4 @@
-/** Credential input with the same reveal behavior as masked conversation text. */
+/** Write-only credential input with the same reveal behavior as masked conversation text. */
 import { useState } from 'react'
 import type { InputHTMLAttributes, ReactNode } from 'react'
 import type { en } from './locales.ts'
@@ -10,7 +10,7 @@ const EYE_OFF_PATH = `${EYE_CONTOUR}M2.5 2.5L13.5 13.5`
 
 /** Input attributes and section copy for the current credential draft. */
 interface ApiKeyInputProps extends Omit<InputHTMLAttributes<HTMLInputElement>, 'value' | 'type' | 'className' | 'autoComplete'> {
-  /** Stored credential or the user's current edit; initially masked. */
+  /** Unsaved input; stored credentials are never read into this field. */
   readonly value: string
   /** Section copy, including the same reveal labels as SecretText. */
   readonly t: (key: keyof typeof en) => string
diff --git a/packages/client/ui-settings-models/src/client/ModelListEditor.tsx b/packages/client/ui-settings-models/src/client/ModelListEditor.tsx
index 37a2ae989f..05c2b3e1ab 100644
--- a/packages/client/ui-settings-models/src/client/ModelListEditor.tsx
+++ b/packages/client/ui-settings-models/src/client/ModelListEditor.tsx
@@ -63,7 +63,7 @@ export interface ProbeTarget {
   baseURL?: string
   /** Wire protocol the form names, when it names one. */
   api?: string
-  /** Loaded or newly entered key currently shown in the form, when there is one. */
+  /** Key typed into the form and not yet stored, when there is one. */
   apiKey?: string
 }
 
diff --git a/packages/client/ui-settings-models/src/client/ModelsSection.tsx b/packages/client/ui-settings-models/src/client/ModelsSection.tsx
index adff556795..461ab37aad 100644
--- a/packages/client/ui-settings-models/src/client/ModelsSection.tsx
+++ b/packages/client/ui-settings-models/src/client/ModelsSection.tsx
@@ -86,8 +86,6 @@ export interface ProviderIdentity {
 
 /** One existing row or dormant directory entry addressed by an editor action. */
 interface EditorTarget extends ProviderIdentity {
-  /** Stored secret retained only while this editor is open. */
-  initialCredential?: string
   settingsNs: string
   settingsPath: readonly string[]
   /** Writable credential identified under this page's conventional reference. */
@@ -125,18 +123,16 @@ interface ProviderEditorRenderProps extends Pick<
 
 /** Render an editor for either the setup posture or an expanded provider row. */
 function renderProviderEditor({ target, row, ...props }: ProviderEditorRenderProps): ReactNode {
-  const credential = row.apiKeyEnv === undefined ? row.derivedCredential : row.credential
   return (
     <ProviderEditor
       provider={target.provider}
       displayName={target.displayName}
       settingsPath={target.settingsPath}
-      {...target.initialCredential === undefined ? {} : { initialCredential: target.initialCredential }}
       {...target.declared === true ? { declared: true } : {}}
       {...target.defaultBaseURL === undefined ? {} : { defaultBaseURL: target.defaultBaseURL }}
       {...target.baseURLEnv === undefined ? {} : { baseURLEnv: target.baseURLEnv }}
       {...target.nativeAuth === undefined ? {} : { nativeAuth: target.nativeAuth }}
-      {...credential === undefined ? {} : { credential }}
+      {...row.credential === undefined ? {} : { credential: row.credential }}
       {...row.credentialChecks === undefined ? {} : { credentialChecks: row.credentialChecks }}
       {...props}
     />
@@ -258,10 +254,6 @@ function Loaded({ injected, renderSlot }: { injected: ModelsSectionFace; renderS
   if (state.status === 'ready' && !hasReadySnapshot) setHasReadySnapshot(true)
   if (state.status === 'error' && hasReadySnapshot) setHasReadySnapshot(false)
   const [editing, setEditing] = useState<EditorTarget | undefined>(undefined)
-  const [credentialRead, setCredentialRead] = useState<
-    { provider: string; status: 'loading' } | { provider: string; status: 'failed'; message: string }
-  >()
-  const editorLoading = credentialRead?.status === 'loading'
   const [addOpen, setAddOpen] = useState(false)
   const [addMode, setAddMode] = useState<AddMode>('catalog')
   /** The modes shown since the add card opened; each keeps its panel mounted. */
@@ -277,26 +269,6 @@ function Loaded({ injected, renderSlot }: { injected: ModelsSectionFace; renderS
   const [savedTarget, setSavedTarget] = useState<ProviderIdentity | undefined>(undefined)
   const [dismissedSetup, setDismissedSetup] = useState<ReadonlySet<string>>(() => new Set())
 
-  const openEditor = async (row: ProviderRow, target: EditorTarget): Promise<void> => {
-    setSavedTarget(undefined)
-    setAddOpen(false)
-    setEditing(undefined)
-    setCredentialRead(undefined)
-    const info = row.apiKeyEnv === undefined ? row.derivedCredential : row.credential
-    if (info?.configured === false) {
-      setEditing(target)
-      return
-    }
-    setCredentialRead({ provider: target.provider, status: 'loading' })
-    const loaded = await operations.readCredential(row.apiKeyEnv ?? deriveKeyRef(target.provider))
-    if (loaded.kind === 'refused') {
-      setCredentialRead({ provider: target.provider, status: 'failed', message: loaded.message })
-      return
-    }
-    setCredentialRead(undefined)
-    setEditing({ ...target, ...loaded.value === undefined ? {} : { initialCredential: loaded.value } })
-  }
-
   const announceSaved = (target: ProviderIdentity): void => {
     // Announced only once the refreshed directory is in the snapshot the
     // notice reads its name from: an apply can rename the route, and the
@@ -537,12 +509,15 @@ function Loaded({ injected, renderSlot }: { injected: ModelsSectionFace; renderS
                         type="button"
                         className={styles['secondaryButton']}
                         aria-label={providerCopy(t('editProvider'), target)}
-                        disabled={editorLoading || (!open && state.status !== 'ready')}
-                        aria-busy={credentialRead?.provider === target.provider && editorLoading}
+                        disabled={!open && state.status !== 'ready'}
                         onClick={() => {
                           if (!open && controller.store.getSnapshot().status !== 'ready') return
-                          if (open) setEditing(undefined)
-                          else void openEditor(row, target)
+                          setSavedTarget(undefined)
+                          // One card at a time: the add card closes with whatever
+                          // it held, since closing either card would otherwise
+                          // discard the other's draft.
+                          setAddOpen(false)
+                          setEditing(open ? undefined : target)
                         }}
                       >
                         {t('edit')}
@@ -554,7 +529,7 @@ function Loaded({ injected, renderSlot }: { injected: ModelsSectionFace; renderS
                         type="button"
                         className={styles['dangerButton']}
                         aria-label={providerCopy(t('removeProvider'), target)}
-                        disabled={editorLoading || !state.writable || state.status !== 'ready'}
+                        disabled={!state.writable || state.status !== 'ready'}
                         onClick={() => {
                           if (controller.store.getSnapshot().status !== 'ready') return
                           setSavedTarget(undefined)
@@ -569,8 +544,6 @@ function Loaded({ injected, renderSlot }: { injected: ModelsSectionFace; renderS
                 </span>
               </div>
               {error}
-              {credentialRead?.provider === target.provider && credentialRead.status === 'failed'
-                ? <p className={styles['error']} role="alert">{credentialRead.message}</p> : null}
               {renderSlot(
                 'settings.models.provider-card',
                 { provider: row.entry, configured: row.configured, keyConfigured: keyConfiguredOf(row) },
@@ -578,7 +551,7 @@ function Loaded({ injected, renderSlot }: { injected: ModelsSectionFace; renderS
               )}
               {open
                 ? renderProviderEditor({
-                  target: { ...target, ...editing.initialCredential === undefined ? {} : { initialCredential: editing.initialCredential } },
+                  target,
                   row,
                   namespace,
                   schema,
@@ -725,7 +698,7 @@ function Loaded({ injected, renderSlot }: { injected: ModelsSectionFace; renderS
                 <button
                   type="button"
                   className={styles['addButton']}
-                  disabled={editorLoading || !state.writable || state.status !== 'ready' || (!catalogEnabled && !customEnabled)}
+                  disabled={!state.writable || state.status !== 'ready' || (!catalogEnabled && !customEnabled)}
                   onClick={() => {
                     if (controller.store.getSnapshot().status !== 'ready') return
                     const first = addable[0]
diff --git a/packages/client/ui-settings-models/src/client/ProviderEditor.tsx b/packages/client/ui-settings-models/src/client/ProviderEditor.tsx
index 1daffc0f39..262f8c9d55 100644
--- a/packages/client/ui-settings-models/src/client/ProviderEditor.tsx
+++ b/packages/client/ui-settings-models/src/client/ProviderEditor.tsx
@@ -1,6 +1,6 @@
 /**
  * One provider's editor card, hand-written per adapter family: the primary
- * field is a masked **API key** input (the page never asks for an
+ * field is a single write-only **API key** input (the page never asks for an
  * environment-variable name — a typed key stores through `credentials/set`
  * under the profile's reference, deriving `<ROUTE>_API_KEY` when the profile
  * has none. The pi-ai profile records that derivation as `apiKeyEnv` only when
@@ -72,15 +72,13 @@ export interface ProviderEditorProps {
   settingsPath: readonly string[]
   /** The Host operations this card writes and interrogates through. */
   operations: ModelsOperations
-  /** Stored key loaded when opening this editor; omission starts with environment authentication. */
-  initialCredential?: string
   /** Endpoint the route uses when its profile sets no `baseURL`; absent when the adapter reports none. */
   defaultBaseURL?: string
   /** Environment variables used by the provider to construct its endpoint. */
   baseURLEnv?: readonly string[]
   /** Authentication the route performs when its profile names no credential reference; absent when the adapter reports none. */
   nativeAuth?: LlmNativeAuth
-  /** Redacted state of the editor's named or derived credential reference, from the page snapshot. */
+  /** Redacted state of the profile's named credential reference, from the page snapshot. */
   credential?: CredentialInfo
   /** Redacted checks for the profile's named reference or the provider's native variables. */
   credentialChecks?: Readonly<Record<string, CredentialInfo>>
@@ -181,7 +179,7 @@ function refFor(
 export function ProviderEditor(props: ProviderEditorProps): ReactNode {
   const { namespace, schema, settingsPath, operations, t } = props
   const [draft, setDraft] = useState<Record<string, unknown>>(() => draftAt(schema, namespace, settingsPath))
-  const [keyDraft, setKeyDraft] = useState(props.initialCredential ?? '')
+  const [keyDraft, setKeyDraft] = useState('')
   const [busy, setBusy] = useState(false)
   const [listBusy, setListBusy] = useState(false)
   const { onBusyChange } = props
@@ -237,17 +235,19 @@ export function ProviderEditor(props: ProviderEditorProps): ReactNode {
   const validateModels = (value: unknown): DeepSeekModelsValidationFailure | ReasoningEffortsFailure | undefined =>
     validateDeepSeekModels(value) ?? (editsReasoning ? validateReasoningEfforts(value) : undefined)
   const modelFailure = validateModels(schema.getPath(draft, ['models']))
-  const keyChanged = keyDraft !== (props.initialCredential ?? '')
-  const keyFailure = keyChanged ? apiKeyFailure(keyDraft) : undefined
-  // Normalize edited keys; preserve unchanged stored values exactly.
-  const keyValue = keyChanged ? keyDraft.trim() : keyDraft
+  const keyFailure = apiKeyFailure(keyDraft)
+  // What a probe or a write must carry: the typed key with paste whitespace
+  // removed. A blank field yields an empty string, which both call sites read
+  // as "no key supplied" rather than as a key — that is how a card whose
+  // provider already has a stored key is edited without re-entering it.
+  const keyValue = keyDraft.trim()
   const credentialRequiredFailure = props.credentialRequired === true
     && keyDraft.length > 0 && keyValue.length === 0
     ? 'keyRequired' as const
     : undefined
   const shownKeyFailure = credentialRequiredFailure ?? keyFailure
   // What the form currently shows, which is what an interrogation must ask:
-  // an edited-but-unsaved endpoint, and the loaded or newly entered key.
+  // an edited-but-unsaved endpoint, and a key typed but not yet stored.
   const probeApi = stringAt(draft, 'api') ?? stringAt(fallback, 'api')
   const probeBaseURL = stringAt(draft, 'baseURL') ?? stringAt(fallback, 'baseURL')
   const probe = {
@@ -270,7 +270,7 @@ export function ProviderEditor(props: ProviderEditorProps): ReactNode {
     // A pi-ai profile names the conventional reference only when this page is
     // about to store a key. Otherwise the provider keeps its native auth path.
     const next = layout === 'pi-ai' && stringAt(draft, 'apiKeyEnv') === undefined
-      && stringAt(fallback, 'apiKeyEnv') === undefined && keyChanged && keyValue.length > 0
+      && stringAt(fallback, 'apiKeyEnv') === undefined && keyValue.length > 0
       ? schema.setPath(draft, ['apiKeyEnv'], keyRef)
       : draft
     if (props.credentialOnly !== true) {
@@ -305,14 +305,9 @@ export function ProviderEditor(props: ProviderEditorProps): ReactNode {
       setExpectedRevision(written.view.revision)
       setDraft(next)
     }
-    const storedKeyRemoved = props.initialCredential !== undefined
-      && (props.credential?.configured === false || props.credential?.source === 'env')
-    if (keyValue.length > 0 && (keyChanged || storedKeyRemoved)) {
+    if (keyValue.length > 0) {
       const stored = await operations.storeCredential(keyRef, keyValue)
       if (stored !== undefined) return stored
-    } else if (keyValue.length === 0 && props.initialCredential !== undefined) {
-      const removed = await operations.removeCredential(keyRef)
-      if (removed !== undefined) return removed
     }
     setKeyDraft('')
     return undefined
@@ -384,11 +379,12 @@ export function ProviderEditor(props: ProviderEditorProps): ReactNode {
     const checkedRefs = authRefs.map(ref => [
       ref, props.credentialChecks?.[ref] ?? (ref === namedRef ? props.credential : undefined),
     ] as const)
-    const detected = checkedRefs.find(([, info]) => info?.configured === true && info.source !== 'file')
+    const detected = checkedRefs.find(([, info]) => info?.configured === true)
     const detectedRef = detected?.[0]
     const detectedVisibleRef = detectedRef === undefined || !visibleRefs.includes(detectedRef) ? undefined : detectedRef
     const missingRefs = checkedRefs.length > 0 && checkedRefs.every(([, info]) => info?.configured === false)
-    const credentialHint = keyDraft.length > 0 || keyHint === undefined || props.credentialRequired === true
+    const savedCredential = detected?.[1]?.source === 'file'
+    const credentialHint = keyDraft.length > 0 || savedCredential || keyHint === undefined || props.credentialRequired === true
       ? undefined
       : t(detectedRef === undefined ? missingRefs ? 'keyFallbackMissing' : 'keyFallbackUnchecked'
         : detectedVisibleRef === undefined ? 'keyFallbackDetectedHidden' : 'keyFallbackDetected')
@@ -405,7 +401,7 @@ export function ProviderEditor(props: ProviderEditorProps): ReactNode {
     const keylessNativeAuth = nativeAuth?.env.length === 0 && nativeAuth.oauth
     const keyPlaceholder = keyHint === undefined || props.credentialRequired === true
       ? t('keyPlaceholder')
-      : t('keyPlaceholderFallback').replace('{hint}', () => keyHint)
+      : t(savedCredential ? 'keyPlaceholderSaved' : 'keyPlaceholderFallback').replace('{hint}', () => keyHint)
     /** What both family editors take: the rows, whose layer owns them, and the two writes. */
     const catalogProps = {
       models,
diff --git a/packages/client/ui-settings-models/src/client/apiKey.ts b/packages/client/ui-settings-models/src/client/apiKey.ts
index b14b8efced..353488a0b5 100644
--- a/packages/client/ui-settings-models/src/client/apiKey.ts
+++ b/packages/client/ui-settings-models/src/client/apiKey.ts
@@ -39,11 +39,12 @@ function isQuoted(value: string): boolean {
 }
 
 /**
- * Judge a newly entered or edited key.
+ * Judge the key input's current value.
  *
- * An empty field is valid; the caller decides whether it means no key or
- * removal. Whitespace-only input is invalid, so typed input is never silently
- * discarded. Unchanged stored values do not require this check.
+ * An empty field is not a failure: every card opens with it empty even when a
+ * key is already stored, where it means keep that one. A field holding only
+ * whitespace is a failure rather than an empty field, so typed input is never
+ * silently discarded.
  * @param draft - the key input's current value, untrimmed.
  * @returns the copy key for a field-level failure, or `undefined` to allow submit.
  */
diff --git a/packages/client/ui-settings-models/src/client/locales.ts b/packages/client/ui-settings-models/src/client/locales.ts
index 2adc9842ee..533b7aed02 100644
--- a/packages/client/ui-settings-models/src/client/locales.ts
+++ b/packages/client/ui-settings-models/src/client/locales.ts
@@ -41,6 +41,7 @@ export const en = {
   keyHide: 'Hide secret',
   keyPlaceholder: 'Enter your API key',
   keyPlaceholderFallback: 'Leave blank to use env as auth ({hint})',
+  keyPlaceholderSaved: 'Leave blank to use saved credentials',
   keyFallbackMissing: 'Env var not detected. Enter an API key, or configure {hint} in your env.',
   keyFallbackDetected: 'Env var detected. ({hint})',
   keyFallbackDetectedHidden: 'Env var detected.',
@@ -184,6 +185,7 @@ export const zh: { [Key in keyof typeof en]: string } = {
   keyHide: '隐藏密钥',
   keyPlaceholder: '输入 API 密钥',
   keyPlaceholderFallback: '留空使用环境认证（{hint}）',
+  keyPlaceholderSaved: '留空使用已保存凭据',
   keyFallbackMissing: '未检测到环境变量。请填写 API 密钥，或设置环境变量 {hint}。',
   keyFallbackDetected: '已检测到环境变量（{hint}）',
   keyFallbackDetectedHidden: '已检测到环境变量',
@@ -324,6 +326,7 @@ export const ja = {
   'keyHide': 'シークレットを非表示',
   'keyPlaceholder': 'APIキーを入力',
   'keyPlaceholderFallback': '空欄のままにすると環境変数を認証に使用します ({hint})',
+  'keyPlaceholderSaved': '空欄のままにすると保存済みの認証情報を使用します',
   'keyFallbackMissing': '環境変数が検出されません。APIキーを入力するか、環境変数に{hint}を設定してください。',
   'keyFallbackDetected': '環境変数を検出しました。({hint})',
   'keyFallbackDetectedHidden': '環境変数を検出しました。',
@@ -464,6 +467,7 @@ export const es = {
   keyHide: 'Ocultar secreto',
   keyPlaceholder: 'Ingrese su clave API',
   keyPlaceholderFallback: 'Déjelo en blanco para usar env como autenticación ({hint})',
+  keyPlaceholderSaved: 'Déjelo en blanco para usar las credenciales guardadas',
   keyFallbackMissing: 'No se detectó la variable de entorno. Ingrese una clave API o configure {hint} en su entorno.',
   keyFallbackDetected: 'Se detectó var env. ({hint})',
   keyFallbackDetectedHidden: 'Se detectó var env.',
@@ -604,6 +608,7 @@ export const fr = {
   keyHide: 'Cacher le secret',
   keyPlaceholder: 'Entrez votre clé API',
   keyPlaceholderFallback: 'Laissez vide pour utiliser env comme authentification ({hint})',
+  keyPlaceholderSaved: "Laissez vide pour utiliser les informations d'identification enregistrées",
   keyFallbackMissing: "Var d'environnement non détectée. Entrez une clé API ou configurez {hint} dans votre environnement.",
   keyFallbackDetected: "Var d'environnement détectée. ({hint})",
   keyFallbackDetectedHidden: "Var d'environnement détectée.",
@@ -744,6 +749,7 @@ export const de = {
   keyHide: 'Geheimnis verbergen',
   keyPlaceholder: 'Geben Sie Ihren API-Schlüssel ein',
   keyPlaceholderFallback: 'Lassen Sie das Feld leer, um env als Authentifizierung zu verwenden ({hint})',
+  keyPlaceholderSaved: 'Lassen Sie das Feld leer, um gespeicherte Anmeldeinformationen zu verwenden',
   keyFallbackMissing: 'Umgebungsvariable nicht erkannt. Geben Sie einen API-Schlüssel ein oder konfigurieren Sie {hint} in Ihrer Umgebung.',
   keyFallbackDetected: 'Umgebungsvariable erkannt. ({hint})',
   keyFallbackDetectedHidden: 'Umgebungsvariable erkannt.',
@@ -884,6 +890,7 @@ export const ru = {
   keyHide: 'Скрыть секрет',
   keyPlaceholder: 'Введите свой ключ API',
   keyPlaceholderFallback: 'Оставьте пустым, чтобы использовать env в качестве аутентификации ({hint})',
+  keyPlaceholderSaved: 'Оставьте поле пустым, чтобы использовать сохраненные учетные данные.',
   keyFallbackMissing: 'Переменная Env не обнаружена. Введите ключ API или настройте {hint} в своей среде.',
   keyFallbackDetected: 'Обнаружена переменная Env. ({hint})',
   keyFallbackDetectedHidden: 'Обнаружена переменная Env.',
@@ -1024,6 +1031,7 @@ export const pt = {
   keyHide: 'Ocultar segredo',
   keyPlaceholder: 'Insira sua chave API',
   keyPlaceholderFallback: 'Deixe em branco para usar env como autenticação ({hint})',
+  keyPlaceholderSaved: 'Deixe em branco para usar credenciais salvas',
   keyFallbackMissing: 'Env var não detectado. Insira uma chave API ou configure {hint} em seu ambiente.',
   keyFallbackDetected: 'Variável de ambiente detectada. ({hint})',
   keyFallbackDetectedHidden: 'Variável de ambiente detectada.',
diff --git a/packages/client/ui-settings-models/src/client/operations.ts b/packages/client/ui-settings-models/src/client/operations.ts
index 750982fed3..d8c5d0ac99 100644
--- a/packages/client/ui-settings-models/src/client/operations.ts
+++ b/packages/client/ui-settings-models/src/client/operations.ts
@@ -30,19 +30,8 @@ export type ModelDiscoveryOutcome =
   /** The interrogation was refused, with the Host's own diagnostic. */
   | { readonly kind: 'refused'; readonly message: string }
 
-/** Stored credential loaded for one editor, or a read failure. */
-export type CredentialReadOutcome =
-  | { readonly kind: 'read'; readonly value: string | undefined }
-  | { readonly kind: 'refused'; readonly message: string }
-
 /** The Host operations the Models page and its cards invoke. */
 export interface ModelsOperations {
-  /**
-   * Load a stored credential without reading environment values.
-   * @param ref - credential reference name.
-   * @returns the stored value or the refusal to display.
-   */
-  readCredential(ref: string): Promise<CredentialReadOutcome>
   /**
    * Store one credential literal under its reference.
    * @param ref - credential reference name.
@@ -86,10 +75,6 @@ export interface ModelsOperations {
  */
 export function createModelsOperations(ctx: ClientContext): ModelsOperations {
   return {
-    readCredential: async (ref) => {
-      const response = await ctx.remote.credentials.readStored(ref)
-      return response.ok ? { kind: 'read', value: response.value } : { kind: 'refused', message: response.error.message }
-    },
     storeCredential: async (ref, value) => {
       const response = await ctx.remote.credentials.set(ref, value)
       return response.ok ? undefined : response.error.message
diff --git a/packages/client/ui-settings-models/tests/components.client.spec.tsx b/packages/client/ui-settings-models/tests/components.client.spec.tsx
index ac9aac1fc4..08ce75a428 100644
--- a/packages/client/ui-settings-models/tests/components.client.spec.tsx
+++ b/packages/client/ui-settings-models/tests/components.client.spec.tsx
@@ -162,13 +162,12 @@ function remoteOk<T>(value: T) {
   return { ok: true as const, value }
 }
 /** The codes this page's scripted Host answers refuse with. */
-type RefusalCode = 'credential/rejected' | 'gateway/internal' | 'gateway/cancelled' | 'settings/conflict' | 'settings/rejected'
+type RefusalCode = 'credential/rejected' | 'gateway/internal' | 'settings/conflict' | 'settings/rejected'
 
 /** One refusal per code, each carrying the details its own code declares. */
 const REFUSALS: { [Code in RefusalCode]: (message: string) => RemoteError<Code> } = {
   'credential/rejected': message => new RemoteError('credential/rejected', message, { ref: 'DEEPSEEK_API_KEY' }),
   'gateway/internal': message => new RemoteError('gateway/internal', message, {}),
-  'gateway/cancelled': message => new RemoteError('gateway/cancelled', message, {}),
   'settings/conflict': message =>
     new RemoteError('settings/conflict', message, { ns: 'llm-pi-ai', expected: 4, actual: 5 }),
   'settings/rejected': message => new RemoteError('settings/rejected', message, { ns: 'llm-pi-ai' }),
@@ -217,9 +216,6 @@ function scriptedFace(overrides: {
       mutate,
     },
     credentials: {
-      readStored: vi.fn((ref: string): Promise<RemoteResult<string | undefined>> => Promise.resolve(remoteOk(
-        ref === 'OPENAI_API_KEY' ? 'fixture-openai-key' : undefined,
-      ))),
       // Typed as the Remote answer rather than the success branch alone: a
       // case that scripts a refusal replaces this mock.
       describe: vi.fn((refs: string[]): Promise<RemoteResult<Record<string, CredentialInfo>>> =>
@@ -361,156 +357,16 @@ async function mountFirstRun(overrides: Parameters<typeof scriptedFace>[0] = {})
 async function mountDeepSeekCard(overrides: Parameters<typeof scriptedFace>[0] = {}) {
   const mounted = await mountSection(overrides)
   fireEvent.click(screen.getByRole('button', { name: deepSeekCopy(en.editProvider) }))
-  await screen.findByLabelText(en.keyInput)
   return mounted
 }
 
 describe('ModelsSection', () => {
-  it('loads a saved DeepSeek key only when editing and keeps an unchanged key stored', async () => {
-    const scripted = scriptedFace()
-    scripted.face.credentials.describe.mockImplementation(refs => Promise.resolve(remoteOk(
-      Object.fromEntries(refs.map(ref => [ref, { configured: ref === 'DEEPSEEK_API_KEY', source: 'file', writable: true }])),
-    )))
-    scripted.face.credentials.readStored.mockResolvedValue(remoteOk('fixture-deepseek-key'))
-    const { set, unset } = await mountFace(scripted)
-    expect(scripted.face.credentials.readStored).not.toHaveBeenCalled()
-    fireEvent.click(screen.getByRole('button', { name: deepSeekCopy(en.editProvider) }))
-    const key = await screen.findByLabelText<HTMLInputElement>(en.keyInput)
-    expect(key.value).toBe('fixture-deepseek-key')
-    expect(key.type).toBe('password')
-    expect(scripted.face.credentials.readStored).toHaveBeenCalledWith('DEEPSEEK_API_KEY')
-    fireEvent.click(screen.getByRole('button', { name: en.keyReveal }))
-    expect(key.type).toBe('text')
-    fireEvent.click(screen.getByRole('button', { name: en.apply }))
-    await screen.findByRole('status')
-    expect(set).not.toHaveBeenCalled()
-    expect(unset).not.toHaveBeenCalled()
-  })
-
-  it('removes a cleared saved DeepSeek key and retains the edit when removal fails', async () => {
-    const scripted = scriptedFace()
-    scripted.face.credentials.describe.mockImplementation(refs => Promise.resolve(remoteOk(
-      Object.fromEntries(refs.map(ref => [ref, { configured: ref === 'DEEPSEEK_API_KEY', source: 'file', writable: true }])),
-    )))
-    scripted.face.credentials.readStored.mockResolvedValue(remoteOk('fixture-deepseek-key'))
-    scripted.unset.mockResolvedValueOnce(remoteFail('credential removal failed'))
-    await mountFace(scripted)
-    fireEvent.click(screen.getByRole('button', { name: deepSeekCopy(en.editProvider) }))
-    const key = await screen.findByLabelText<HTMLInputElement>(en.keyInput)
-    fireEvent.change(key, { target: { value: '' } })
-    expect(key.placeholder).toBe(en.keyPlaceholderFallback.replace('{hint}', 'DEEPSEEK_API_KEY'))
-    expect(screen.getByText(en.keyFallbackUnchecked)).toBeTruthy()
-    expect(screen.queryByText(en.keyFallbackDetected.replace('{hint}', 'DEEPSEEK_API_KEY'))).toBeNull()
-    fireEvent.click(screen.getByRole('button', { name: en.apply }))
-    await screen.findByText('credential removal failed')
-    expect(scripted.unset).toHaveBeenCalledWith('DEEPSEEK_API_KEY')
-    expect(screen.queryByRole('status')).toBeNull()
-    expect(key.value).toBe('')
-    fireEvent.click(screen.getByRole('button', { name: en.apply }))
-    await screen.findByRole('status')
-    expect(scripted.set).not.toHaveBeenCalled()
-  })
-
-  it('waits for a saved key under a derived reference before opening its provider editor', async () => {
-    const scripted = scriptedFace()
-    const read = Promise.withResolvers<RemoteResult<string | undefined>>()
-    scripted.face.credentials.describe.mockImplementation(refs => Promise.resolve(remoteOk(
-      Object.fromEntries(refs.map(ref => [ref, {
-        configured: ref === 'OPENAI_API_KEY' || ref === 'ZOMBIE_API_KEY', source: 'file', writable: true,
-      }])),
-    )))
-    scripted.face.credentials.readStored.mockReturnValue(read.promise)
-    const { mutate, set } = await mountFace(scripted)
-    const edit = screen.getByRole<HTMLButtonElement>('button', {
-      name: providerCopy(en.editProvider, { provider: 'zombie', displayName: 'zombie' }),
-    })
-    fireEvent.click(edit)
-    expect(scripted.face.credentials.readStored).toHaveBeenCalledWith('ZOMBIE_API_KEY')
-    expect(edit.disabled).toBe(true)
-    expect(screen.queryByLabelText(en.keyInput)).toBeNull()
-    await act(async () => { read.resolve(remoteOk('fixture-zombie-key')) })
-    const key = await screen.findByLabelText<HTMLInputElement>(en.keyInput)
-    expect(key.value).toBe('fixture-zombie-key')
-    expect(key.type).toBe('password')
-    fireEvent.click(screen.getByRole('button', { name: en.apply }))
-    await screen.findByRole('status')
-    expect(mutate).not.toHaveBeenCalled()
-    expect(set).not.toHaveBeenCalled()
-  })
-
-  it('refreshes provider metadata without replacing the loaded key draft', async () => {
-    const { face, controller } = await mountSection()
-    face.credentials.readStored.mockResolvedValue(remoteOk('fixture-zombie-key'))
-    act(() => {
-      controller.store.update((state) => {
-        state.rows = state.rows.map(row => row.entry.provider === 'zombie' ? {
-          ...row,
-          entry: { ...row.entry, displayName: 'Before', defaultBaseURL: 'https://before.example', nativeAuth: { env: ['ZOMBIE_API_KEY'], oauth: false } },
-          derivedCredential: { configured: true, source: 'file', writable: true },
-        } : row)
-      })
-    })
-    fireEvent.click(screen.getByRole('button', { name: 'Edit Before (zombie)' }))
-    const key = await screen.findByLabelText<HTMLInputElement>(en.keyInput)
-    fireEvent.change(key, { target: { value: 'fixture-draft-key' } })
-    fireEvent.click(screen.getByText(en.customized))
-    expect(screen.getByLabelText<HTMLInputElement>(en.baseUrl).placeholder).toContain('https://before.example')
-    act(() => {
-      controller.store.update((state) => {
-        state.rows = state.rows.map(row => row.entry.provider === 'zombie' ? {
-          ...row, entry: { ...row.entry, displayName: 'After', defaultBaseURL: 'https://after.example', nativeAuth: { env: ['NEW_ZOMBIE_KEY'], oauth: false } },
-        } : row)
-      })
-    })
-    expect(screen.queryByText('Before')).toBeNull()
-    expect(screen.getAllByText('After').length).toBeGreaterThan(0)
-    expect(screen.getByLabelText<HTMLInputElement>(en.baseUrl).placeholder).toContain('https://after.example')
-    expect(key.value).toBe('fixture-draft-key')
-    fireEvent.change(key, { target: { value: '' } })
-    expect(key.placeholder).toContain('NEW_ZOMBIE_KEY')
-  })
-
-  it.each(['"quoted-key"', 'NAME=value', '密钥', '  fixture-key  '])('preserves an unchanged stored value %s while editing other settings', async (stored) => {
-    const scripted = scriptedFace()
-    scripted.face.credentials.readStored.mockResolvedValue(remoteOk(stored))
-    const { mutate, set, unset } = await mountFace(scripted)
-    fireEvent.click(screen.getByRole('button', { name: openaiCopy(en.editProvider) }))
-    const key = await screen.findByLabelText<HTMLInputElement>(en.keyInput)
-    expect(key.value).toBe(stored)
-    fireEvent.click(screen.getByText(en.customized))
-    fireEvent.change(screen.getByLabelText(en.baseUrl), { target: { value: 'https://edited.example' } })
-    const apply = screen.getByRole<HTMLButtonElement>('button', { name: en.apply })
-    expect(apply.disabled).toBe(false)
-    fireEvent.click(apply)
-    await screen.findByRole('status')
-    expect(mutate).toHaveBeenCalledWith('llm-pi-ai', [{ op: 'set', path: ['providers', 'openai', 'baseURL'], value: 'https://edited.example' }], 0)
-    expect(set).not.toHaveBeenCalled()
-    expect(unset).not.toHaveBeenCalled()
-  })
-
-  it.each(['credential/rejected', 'gateway/internal', 'gateway/cancelled'] as const)('reports a %s stored-key read and enables retry without opening an empty editor', async (code) => {
-    const scripted = scriptedFace()
-    scripted.face.credentials.readStored.mockResolvedValueOnce(remoteFail('credential read failed', code))
-    await mountFace(scripted)
-    const edit = screen.getByRole<HTMLButtonElement>('button', { name: openaiCopy(en.editProvider) })
-    fireEvent.click(edit)
-    expect((await screen.findByRole('alert')).textContent).toBe('credential read failed')
-    expect(screen.queryByLabelText(en.keyInput)).toBeNull()
-    expect(edit.disabled).toBe(false)
-    expect(screen.getByRole<HTMLButtonElement>('button', { name: en.add }).disabled).toBe(false)
-    expect(screen.getByRole<HTMLButtonElement>('button', { name: openaiCopy(en.removeProvider) }).disabled).toBe(false)
-    fireEvent.click(edit)
-    expect((await screen.findByLabelText<HTMLInputElement>(en.keyInput)).value).toBe('fixture-openai-key')
-  })
-
   it('keeps the credential state unconfirmed when its redacted read fails', async () => {
     const scripted = scriptedFace()
-    scripted.face.credentials.readStored.mockResolvedValue(remoteOk(undefined))
     scripted.face.credentials.describe.mockResolvedValue(remoteFail('credentials unavailable', 'gateway/internal'))
     await mountFace(scripted)
     const edit = screen.getByRole('button', { name: openaiCopy(en.editProvider) })
     fireEvent.click(edit)
-    await screen.findByLabelText(en.keyInput)
     const row = within(edit.closest('li')!)
     expect(row.getByText(en.keyFallbackUnchecked)).toBeTruthy()
     expect(row.queryByText(en.keyFallbackMissing.replace('{hint}', 'OPENAI_API_KEY'))).toBeNull()
@@ -1593,10 +1449,9 @@ describe('ModelsSection', () => {
   it('edits a pi-ai profile with the curated fields only', async () => {
     const { mutate } = await mountSection()
     fireEvent.click(screen.getByRole('button', { name: openaiCopy(en.editProvider) }))
-    // The stored value starts masked, and an empty edit selects environment authentication.
+    // The field names the profile's reference; a stored value stays hidden.
     const editorKey = await screen.findByLabelText<HTMLInputElement>(en.keyInput)
-    expect(editorKey.value).toBe('fixture-openai-key')
-    expect(editorKey.type).toBe('password')
+    expect(editorKey.placeholder).toBe(en.keyPlaceholderSaved)
     // pi-ai carries Base URL too: the stored override shows as the value and
     // the effective profile endpoint, ahead of the catalog's, as its placeholder.
     fireEvent.click(screen.getByText(en.customized))
@@ -1782,8 +1637,7 @@ describe('ModelsSection', () => {
     face.credentials.describe.mockImplementation(() => Promise.resolve(remoteFail('down', 'gateway/internal')))
     fireEvent.click(screen.getByRole('button', { name: openaiCopy(en.editProvider) }))
     const editorKey = await screen.findByLabelText<HTMLInputElement>(en.keyInput)
-    expect(editorKey.value).toBe('fixture-openai-key')
-    expect(editorKey.type).toBe('password')
+    expect(editorKey.placeholder).toBe(en.keyPlaceholderSaved)
     fireEvent.change(editorKey, { target: { value: 'sk-live' } })
     fireEvent.click(screen.getByText(en.apply))
     await waitFor(() => { expect(set).toHaveBeenCalledTimes(1) })
@@ -2357,7 +2211,7 @@ it.each(['file', 'env', 'project-env', 'user-env'] as const)('shows only the bla
   else expect(screen.getAllByText(hint)).toHaveLength(1)
   expect(input.value).toBe('')
   expect(input.placeholder)
-    .toBe(en.keyPlaceholderFallback.replace('{hint}', 'OPENAI_API_KEY'))
+    .toBe(source === 'file' ? en.keyPlaceholderSaved : en.keyPlaceholderFallback.replace('{hint}', 'OPENAI_API_KEY'))
   fireEvent.change(input, { target: { value: 'new-key' } })
   expect(screen.queryByText(hint)).toBeNull()
   expect(screen.queryByText(/^API key source:/)).toBeNull()
@@ -2377,31 +2231,21 @@ it.each([
   expect(document.body.textContent).not.toMatch(/oauth/i)
 })
 
-it.each([
-  { label: 'removed without environment fallback', info: { configured: false, writable: true }, restore: true },
-  { label: 'removed with environment fallback', info: { configured: true, source: 'env', writable: true }, restore: true },
-  { label: 'still stored or externally rotated', info: { configured: true, source: 'file', writable: true }, restore: false },
-  { label: 'unknown source', info: { configured: true, writable: true }, restore: false },
-] as const)('preserves the loaded draft and restores it only after confirmed removal: $label', async ({ info, restore }) => {
-  const { face, controller, set } = await mountSection()
+it('refreshes a blank editor from saved credentials to environment detection without an editor probe', async () => {
+  const { face, controller } = await mountSection()
   const reads = face.credentials.describe.mock.calls.length
   fireEvent.click(screen.getByRole('button', { name: openaiCopy(en.editProvider) }))
-  expect((await screen.findByLabelText<HTMLInputElement>(en.keyInput)).value).toBe('fixture-openai-key')
+  expect(screen.getByLabelText<HTMLInputElement>(en.keyInput).placeholder).toBe(en.keyPlaceholderSaved)
   expect(screen.queryByText(/^API key source:/)).toBeNull()
   expect(screen.queryByText(/Env var detected/)).toBeNull()
   expect(face.credentials.describe).toHaveBeenCalledTimes(reads)
   face.credentials.describe.mockImplementation(refs => Promise.resolve(remoteOk(
-    Object.fromEntries(refs.map(ref => [ref, ref === 'OPENAI_API_KEY' ? info : { configured: true, source: 'env', writable: true }])),
+    Object.fromEntries(refs.map(ref => [ref, { configured: true, source: 'env', writable: true }])),
   )))
   await act(() => controller.load())
-  expect(screen.getByLabelText<HTMLInputElement>(en.keyInput).value).toBe('fixture-openai-key')
-  expect(screen.queryByText(/Env var detected/)).toBeNull()
-  expect(face.credentials.readStored).toHaveBeenCalledTimes(1)
+  expect(screen.getByText(en.keyFallbackDetected.replace('{hint}', 'OPENAI_API_KEY'))).toBeTruthy()
+  expect(screen.queryByText(/^API key source:/)).toBeNull()
   expect(face.credentials.describe).toHaveBeenCalledTimes(reads + 1)
-  fireEvent.click(screen.getByRole('button', { name: en.apply }))
-  await screen.findByRole('status')
-  if (restore) expect(set).toHaveBeenCalledWith('OPENAI_API_KEY', 'fixture-openai-key')
-  else expect(set).not.toHaveBeenCalled()
 })
 
 it('keeps an OAuth-only provider on its native authentication path', () => {
diff --git a/packages/client/ui-settings-models/tests/model-list-catalog.client.spec.tsx b/packages/client/ui-settings-models/tests/model-list-catalog.client.spec.tsx
index 41062ac46d..1e40a70f1e 100644
--- a/packages/client/ui-settings-models/tests/model-list-catalog.client.spec.tsx
+++ b/packages/client/ui-settings-models/tests/model-list-catalog.client.spec.tsx
@@ -11,7 +11,7 @@ afterEach(cleanup)
 function operations(discoverModels: ModelsOperations['discoverModels']): ModelsOperations {
   return {
     discoverModels,
-    readCredential: vi.fn(), storeCredential: vi.fn(),
+    storeCredential: vi.fn(),
     removeCredential: vi.fn(),
     writeSettings: vi.fn(),
   }
diff --git a/packages/client/ui-settings-models/tests/model-order.client.spec.tsx b/packages/client/ui-settings-models/tests/model-order.client.spec.tsx
index 22ef92b679..46884f5f3e 100644
--- a/packages/client/ui-settings-models/tests/model-order.client.spec.tsx
+++ b/packages/client/ui-settings-models/tests/model-order.client.spec.tsx
@@ -27,9 +27,7 @@ function Editor(props: {
     ? <DeepSeekModelsEditor {...shared} defaultContextWindow={undefined} defaultMaxTokens={undefined} />
     : <ModelListEditor
       {...shared} probe={{ settingsNs: 'llm-pi-ai' }} onBusyChange={() => {}}
-      operations={{
-        discoverModels: vi.fn(), readCredential: vi.fn(), storeCredential: vi.fn(), removeCredential: vi.fn(), writeSettings: vi.fn(),
-      }}
+      operations={{ discoverModels: vi.fn(), storeCredential: vi.fn(), removeCredential: vi.fn(), writeSettings: vi.fn() }}
     />
 }
 
diff --git a/packages/client/ui-settings-models/tests/model-reasoning-efforts.client.spec.tsx b/packages/client/ui-settings-models/tests/model-reasoning-efforts.client.spec.tsx
index c9ddabbeee..6e31ede058 100644
--- a/packages/client/ui-settings-models/tests/model-reasoning-efforts.client.spec.tsx
+++ b/packages/client/ui-settings-models/tests/model-reasoning-efforts.client.spec.tsx
@@ -241,7 +241,7 @@ describe('reasoning-level validation', () => {
 describe('reasoning levels in the model list', () => {
   const operations: ModelsOperations = {
     discoverModels: () => Promise.resolve({ kind: 'found', models: [] }),
-    readCredential: vi.fn(), storeCredential: vi.fn(),
+    storeCredential: vi.fn(),
     removeCredential: vi.fn(),
     writeSettings: vi.fn(),
   }
diff --git a/packages/client/ui-settings-models/tests/provider-form.client.spec.tsx b/packages/client/ui-settings-models/tests/provider-form.client.spec.tsx
index 7145e8df8e..a0e15d75fb 100644
--- a/packages/client/ui-settings-models/tests/provider-form.client.spec.tsx
+++ b/packages/client/ui-settings-models/tests/provider-form.client.spec.tsx
@@ -138,7 +138,6 @@ function scriptedFace(options: {
       mutate,
     },
     credentials: {
-      readStored: vi.fn(() => Promise.resolve(remoteOk(undefined))),
       describe: vi.fn((refs: string[]) => Promise.resolve(remoteOk(
         Object.fromEntries(refs.map(ref => [ref, { configured: false, writable: true }])),
       ))),
diff --git a/packages/credentials/authorization/tests/memory.ts b/packages/credentials/authorization/tests/memory.ts
index b216ec68f8..1d9990af99 100644
--- a/packages/credentials/authorization/tests/memory.ts
+++ b/packages/credentials/authorization/tests/memory.ts
@@ -24,10 +24,6 @@ export class MemoryCredentials extends CredentialProvider {
     return Promise.resolve(undefined)
   }
 
-  override readStored(_ref: CredentialRef): Promise<string | undefined> {
-    return Promise.resolve(undefined)
-  }
-
   override describe(_ref: CredentialRef): Promise<CredentialInfo> {
     return Promise.resolve({ configured: false, writable: true })
   }
diff --git a/packages/credentials/credentials-local/README.i18n.yaml b/packages/credentials/credentials-local/README.i18n.yaml
index 520f191975..b4401964e7 100644
--- a/packages/credentials/credentials-local/README.i18n.yaml
+++ b/packages/credentials/credentials-local/README.i18n.yaml
@@ -24,8 +24,8 @@
   en: fccad7d354c2af71
   zh: 5b95b5890e21f80f
 /deepseek-ai-dsh-credentials-local/use-this-package/storing-and-removing-keys:
-  en: bcff7fccee1870a9
-  zh: 754be1485afc7ad2
+  en: 5e3d45470142b9dd
+  zh: 1f8358f987769d3a
 /deepseek-ai-dsh-credentials-local/use-this-package/where-keys-come-from:
   en: a55fac148b62e007
   zh: fdb3d19ccae676ee
diff --git a/packages/credentials/credentials-local/README.md b/packages/credentials/credentials-local/README.md
index b78d1cc344..c3d15999be 100644
--- a/packages/credentials/credentials-local/README.md
+++ b/packages/credentials/credentials-local/README.md
@@ -50,7 +50,7 @@ The generated [configuration catalog](../../../docs/config-catalog.md#deepseek-a
 
 ### Storing and removing keys
 
-Save a key with `set`, remove it with `unset`, and check whether a key is configured with `describe`. `readStored` reads only the managed value for an editor, excluding environment fallbacks:
+Save a key with `set`, remove it with `unset`, and check whether a key is configured with `describe` — the same operations the credential API provides:
 
 ```ts
 import type { Context } from '@deepseek-ai/cordis'
diff --git a/packages/credentials/credentials-local/README.zh.md b/packages/credentials/credentials-local/README.zh.md
index ad517c82bf..5249827cde 100644
--- a/packages/credentials/credentials-local/README.zh.md
+++ b/packages/credentials/credentials-local/README.zh.md
@@ -50,7 +50,7 @@ kind: "package-reference"
 
 ### 存储与移除密钥
 
-用 `set` 保存密钥、用 `unset` 移除、用 `describe` 检查密钥是否已配置。`readStored` 仅为编辑器读取托管值，不使用环境后备：
+用 `set` 保存密钥、用 `unset` 移除、用 `describe` 检查密钥是否已配置——与凭据 API 提供的操作相同：
 
 ```ts
 import type { Context } from '@deepseek-ai/cordis'
diff --git a/packages/credentials/credentials-local/src/index.ts b/packages/credentials/credentials-local/src/index.ts
index f18f84e067..48ae487c6d 100644
--- a/packages/credentials/credentials-local/src/index.ts
+++ b/packages/credentials/credentials-local/src/index.ts
@@ -642,10 +642,6 @@ export class LocalCredentialProvider extends CredentialProvider {
     return Promise.resolve({ configured: false, writable: true })
   }
 
-  override readStored(ref: CredentialRef): Promise<string | undefined> {
-    return Promise.resolve(this.values.get(ref))
-  }
-
   override async set(ref: CredentialRef, value: string): Promise<void> {
     if (value.length === 0) {
       throw new Error(`credentials-local: an empty value cannot be stored for "${ref}"; use unset`)
diff --git a/packages/credentials/credentials-local/tests/local.spec.ts b/packages/credentials/credentials-local/tests/local.spec.ts
index 761148a6a5..d1436e0731 100644
--- a/packages/credentials/credentials-local/tests/local.spec.ts
+++ b/packages/credentials/credentials-local/tests/local.spec.ts
@@ -59,18 +59,6 @@ describe('resolveSpec', () => {
 })
 
 describe('layering and reads', () => {
-  it('reads only stored values for an editor while resolution retains environment fallback', async () => {
-    const dir = await tempDir()
-    vi.stubEnv('DSH_CRED_TEST', 'fixture-environment-key')
-    const ctx = await boot({ path: join(dir, '.credentials.yaml'), watch: false })
-    expect(await ctx.credentials.readStored(KEY)).toBeUndefined()
-    await ctx.credentials.set(KEY, 'fixture-stored-key')
-    expect(await ctx.credentials.readStored(KEY)).toBe('fixture-stored-key')
-    expect(await ctx.credentials.resolve(KEY)).toEqual({ value: 'fixture-stored-key', source: 'file' })
-    await ctx.credentials.unset(KEY)
-    expect(await ctx.credentials.readStored(KEY)).toBeUndefined()
-    expect(await ctx.credentials.resolve(KEY)).toEqual({ value: 'fixture-environment-key', source: 'env' })
-  })
   it('treats an absent file as an empty writable store', async () => {
     const dir = await tempDir()
     const ctx = await boot({ path: join(dir, '.credentials.yaml'), watch: false })
diff --git a/packages/credentials/credentials/README.i18n.yaml b/packages/credentials/credentials/README.i18n.yaml
index e262675e0a..3f2265caf7 100644
--- a/packages/credentials/credentials/README.i18n.yaml
+++ b/packages/credentials/credentials/README.i18n.yaml
@@ -18,14 +18,14 @@
   en: 32e626bb84b2360a
   zh: 6bad5ffd40687587
 /deepseek-ai-dsh-credentials/use-this-package/when-to-use-it:
-  en: fa4e2165e41700b9
-  zh: 9f2c0f7a7f15a4b5
+  en: 78c50ac5ee5cf5f1
+  zh: d42c0b8df37653bf
 /deepseek-ai-dsh-credentials/use-this-package/adding-it-to-your-composition:
   en: 8f3500119608f91b
   zh: 147fdb5389affbc0
 /deepseek-ai-dsh-credentials/use-this-package/storing-checking-and-removing-keys:
-  en: 28bff3f6efbacca7
-  zh: 856c60c716b82c19
+  en: fa334e2d4438e0b6
+  zh: 009b9252ed046886
 /deepseek-ai-dsh-credentials/use-this-package/storing-updating-and-removing-records:
   en: 300c3f1f13abdca4
   zh: ec7a6486ac88889c
@@ -33,8 +33,8 @@
   en: fd17366bde0425e0
   zh: 408fc625b58db7b4
 /deepseek-ai-dsh-credentials/use-this-package/what-can-go-wrong:
-  en: 8d317fd66477a3a5
-  zh: 40f15af21d4bcd61
+  en: 23794d3510273e7f
+  zh: d89075376de4be29
 /deepseek-ai-dsh-credentials/understand-the-implementation:
   en: 16370ef642feec6a
   zh: a546774827234300
diff --git a/packages/credentials/credentials/README.md b/packages/credentials/credentials/README.md
index e4c733646f..85ed5a68b0 100644
--- a/packages/credentials/credentials/README.md
+++ b/packages/credentials/credentials/README.md
@@ -29,7 +29,7 @@ This package is the part of the product that stores and looks up secret values:
 
 ### When to use it
 
-Use a credential store whenever configuration must stay free of secret values: settings files that are synced, shared, or rendered in a configuration UI, or teams that rotate keys without editing configuration. Use records when a plugin must keep credentials with no single environment variable — an authorization grant from a sign-in flow, or provider environment values — and when a configuration UI should list what a user is authorized for. A configuration UI describes presence and writability without reading values. An owner-opened key editor can use `readStored` to load the managed value without consulting environment fallbacks. If you only need one fixed environment variable, read that variable directly and skip the store.
+Use a credential store whenever configuration must stay free of secret values: settings files that are synced, shared, or rendered in a configuration UI, or teams that rotate keys without editing configuration. Use records when a plugin must keep credentials with no single environment variable — an authorization grant from a sign-in flow, or provider environment values — and when a configuration UI should list what a user is authorized for. A configuration UI can show whether a key or record is set, where it comes from, and whether you can change it — never the value itself. If you only need one fixed environment variable, read that variable directly and skip the store.
 
 ### Adding it to your composition
 
@@ -58,7 +58,7 @@ await ctx.credentials.set(ref, 'sk-…')                 // the stored value out
 await ctx.credentials.unset(ref)                       // no-op when absent; an environment fallback then applies again
 ```
 
-Store a key with `set`, remove it with `unset`, check its status with `describe`, and read the current value with `resolve` when an operation needs it. `readStored` returns only the managed value for editing; it returns `undefined` when none is stored, even when the environment supplies a value. `describe` reports whether the key is set, where it comes from, and whether you can write to it — it never returns the value.
+Store a key with `set`, remove it with `unset`, check its status with `describe`, and read the current value with `resolve` when an operation needs it. `describe` reports whether the key is set, where it comes from, and whether you can write to it — it never returns the value.
 
 ### Storing, updating, and removing records
 
@@ -94,7 +94,7 @@ Requests that need the key use its current stored value, so rotating the key tak
 
 - **A stored key outranks the launching environment** — while a value is stored, `DEEPSEEK_API_KEY=… dsh` (or a CI secret, a container `-e`) does not apply; `unset` the stored key to use the exported one.
 - **An empty value cannot be stored** — storing an empty string is refused; remove the key instead.
-- **Metadata and diagnostics exclude key values** — an owner-opened credential editor loads a managed key separately and masks it until revealed.
+- **Key values never appear in configuration UIs or diagnostics** — the UI shows whether a key is set, where it comes from, and whether you can change it; the value itself stays in the store.
 
 -----
 
diff --git a/packages/credentials/credentials/README.zh.md b/packages/credentials/credentials/README.zh.md
index 9ba6698cfc..c73f0c68bf 100644
--- a/packages/credentials/credentials/README.zh.md
+++ b/packages/credentials/credentials/README.zh.md
@@ -29,7 +29,7 @@ kind: "package-reference"
 
 ### 何时使用
 
-只要配置需要与机密值绝缘，就使用凭据存储：需要同步、共享或渲染进配置界面的设置文件，或希望在不改配置的情况下轮换密钥的团队。当插件必须保存没有单一环境变量的凭据——登录流程产生的授权 grant，或提供方环境值——并希望配置界面能列出用户获得了哪些授权时，请使用记录。配置界面无需读取值就能描述配置状态和可写性。所有者打开的密钥编辑器可以通过 `readStored` 加载提供方管理的值，不读取环境后备值。如果只需要一个固定的环境变量，直接读该变量即可，无需存储。
+只要配置需要与机密值绝缘，就使用凭据存储：需要同步、共享或渲染进配置界面的设置文件，或希望在不改配置的情况下轮换密钥的团队。当插件必须保存没有单一环境变量的凭据——登录流程产生的授权 grant，或提供方环境值——并希望配置界面能列出用户获得了哪些授权时，请使用记录。配置界面能显示某个密钥或记录是否已设置、来自哪里、能否修改——但绝不显示值本身。如果只需要一个固定的环境变量，直接读该变量即可，无需存储。
 
 ### 加入你的组合
 
@@ -58,7 +58,7 @@ await ctx.credentials.set(ref, 'sk-…')                 // the stored value out
 await ctx.credentials.unset(ref)                       // no-op when absent; an environment fallback then applies again
 ```
 
-用 `set` 存储密钥、用 `unset` 移除、用 `describe` 检查状态、在操作需要时用 `resolve` 读取当前值。`readStored` 仅返回用于编辑的托管值；未存储时返回 `undefined`，即使环境提供了值。`describe` 报告密钥是否已设置、来自哪里、能否写入——它绝不返回值。
+用 `set` 存储密钥、用 `unset` 移除、用 `describe` 检查状态、在操作需要时用 `resolve` 读取当前值。`describe` 报告密钥是否已设置、来自哪里、能否写入——它绝不返回值。
 
 ### 存储、更新与移除记录
 
@@ -94,7 +94,7 @@ apiKeyEnv: DEEPSEEK_API_KEY
 
 - **存储的密钥优先于启动环境**——存在存储值时，`DEEPSEEK_API_KEY=… dsh`（或 CI 机密、容器 `-e`）不会生效；要使用导出的密钥，请 `unset` 存储的密钥。
 - **空值无法存储**——存储空字符串会被拒绝；请改为移除密钥。
-- **元数据和诊断信息不包含密钥值**——所有者打开的凭据编辑器单独加载托管密钥，并在用户主动显示之前保持遮罩。
+- **密钥值绝不会出现在配置界面或诊断信息中**——界面只显示密钥是否已设置、来自哪里、能否修改；值本身留在存储中。
 
 -----
 
diff --git a/packages/credentials/credentials/src/index.ts b/packages/credentials/credentials/src/index.ts
index e676556f98..2e0b56931a 100644
--- a/packages/credentials/credentials/src/index.ts
+++ b/packages/credentials/credentials/src/index.ts
@@ -183,13 +183,6 @@ export abstract class CredentialProvider extends Service {
    */
   abstract resolve(ref: CredentialRef): Promise<ResolvedCredential | undefined>
 
-  /**
-   * Read the provider-managed value without consulting environment fallbacks.
-   * @param ref - the reference to read.
-   * @returns the stored secret, or undefined when no non-empty value is stored.
-   */
-  abstract readStored(ref: CredentialRef): Promise<string | undefined>
-
   /**
    * Describe one reference for configuration surfaces without exposing the
    * value.
diff --git a/packages/credentials/credentials/tests/memory.ts b/packages/credentials/credentials/tests/memory.ts
index e809bbcdba..9bdf31554f 100644
--- a/packages/credentials/credentials/tests/memory.ts
+++ b/packages/credentials/credentials/tests/memory.ts
@@ -40,11 +40,6 @@ export class MemoryCredentials extends CredentialProvider {
     })
   }
 
-  override readStored(ref: CredentialRef): Promise<string | undefined> {
-    const value = this.store.get(ref)
-    return Promise.resolve(value === '' ? undefined : value)
-  }
-
   override set(ref: CredentialRef, value: string): Promise<void> {
     if (value.length === 0) {
       return Promise.reject(new Error('memory credentials: an empty value cannot be stored; use unset'))
diff --git a/packages/experimental/liveshare/src/endpoint-classification.ts b/packages/experimental/liveshare/src/endpoint-classification.ts
index e71f116953..3c2fb1bfbd 100644
--- a/packages/experimental/liveshare/src/endpoint-classification.ts
+++ b/packages/experimental/liveshare/src/endpoint-classification.ts
@@ -105,7 +105,6 @@ export const VIEWER_ENDPOINT_CLASSES = {
   'session/updateQueue': 'owner-only', // owner edits queued input
   'session/workspacePathApplications': 'owner-only', // owner applies a Workspace path
   'credentials/describe': 'owner-only', // owner credentials; secrets never reach a reader
-  'credentials/readStored': 'owner-only', // owner credentials; secrets never reach a reader
   'credentials/set': 'owner-only', // owner credentials; secrets never reach a reader
   'credentials/unset': 'owner-only', // owner credentials; secrets never reach a reader
   'settings/describe': 'owner-only', // owner settings
diff --git a/packages/experimental/liveshare/tests/endpoint-classification.client.spec.ts b/packages/experimental/liveshare/tests/endpoint-classification.client.spec.ts
index 2796ec8634..ec47e869a5 100644
--- a/packages/experimental/liveshare/tests/endpoint-classification.client.spec.ts
+++ b/packages/experimental/liveshare/tests/endpoint-classification.client.spec.ts
@@ -15,7 +15,6 @@ const CLASSIFIED = Object.keys(VIEWER_ENDPOINT_CLASSES)
 describe('viewer endpoint classification', () => {
   it('exports the compiled classification without changing its keys', () => {
     expect(Object.keys(COMPLETE_VIEWER_ENDPOINT_CLASSES)).toEqual(CLASSIFIED)
-    expect(COMPLETE_VIEWER_ENDPOINT_CLASSES['credentials/readStored']).toBe('owner-only')
   })
 
   it('reports the endpoint a classification is missing', () => {
diff --git a/packages/extensions/tool-cordis/src/api-catalog.ts b/packages/extensions/tool-cordis/src/api-catalog.ts
index 227c397f7b..48ffeeb70f 100644
--- a/packages/extensions/tool-cordis/src/api-catalog.ts
+++ b/packages/extensions/tool-cordis/src/api-catalog.ts
@@ -842,12 +842,6 @@ export const SERVICE_API: readonly ServiceApiEntry[] = [
         parameters: [{ name: 'ref', description: 'the reference to resolve.' }],
         returns: 'the value and its source, or `undefined` while unconfigured.',
       },
-      {
-        signature: 'abstract readStored(ref: CredentialRef): Promise<string | undefined>',
-        description: 'Read the provider-managed value without consulting environment fallbacks.',
-        parameters: [{ name: 'ref', description: 'the reference to read.' }],
-        returns: 'the stored secret, or undefined when no non-empty value is stored.',
-      },
       {
         signature: 'abstract describe(ref: CredentialRef): Promise<CredentialInfo>',
         description: 'Describe one reference for configuration surfaces without exposing the value.',
@@ -898,7 +892,7 @@ export const SERVICE_API: readonly ServiceApiEntry[] = [
   {
     key: 'credentialsController',
     summary: 'Host service backing the generated `ctx.remote.credentials` namespace.',
-    description: 'Host service backing the generated `ctx.remote.credentials` namespace. It carries every wire obligation the credential seam itself does not: the batch fan-out bound, the field-by-field view projection, the reference-grammar guard, and the refusal mapping. Metadata reads exclude secrets; readStored returns only a provider-managed value for an explicitly opened editor.',
+    description: 'Host service backing the generated `ctx.remote.credentials` namespace. It carries every wire obligation the credential seam itself does not: the batch fan-out bound, the field-by-field view projection, the reference-grammar guard, and the refusal mapping. Secret values cross in one direction only — no method here returns one.',
     methods: [
       {
         signature: '@Remote async describe(refs: string[]): Promise<Record<string, CredentialInfo>>',
@@ -907,16 +901,9 @@ export const SERVICE_API: readonly ServiceApiEntry[] = [
         returns: 'one view per requested name, keyed by that name.',
         throws: ['RemoteError when the request is invalid or no credential provider is mounted.'],
       },
-      {
-        signature: '@Remote async readStored(ref: string): Promise<string | undefined>',
-        description: 'Read one stored value for a credential editor, excluding environment fallbacks.',
-        parameters: [{ name: 'ref', description: 'reference name to read.' }],
-        returns: 'the stored secret, or undefined when the provider stores none.',
-        throws: ['RemoteError for a non-owner Remote caller, an invalid reference, or an absent provider.'],
-      },
       {
         signature: '@Remote async set(ref: string, value: string): Promise<void>',
-        description: 'Store one value from a configuration surface.',
+        description: 'Store one value from a configuration surface. The value crosses the wire in this direction only: no read path returns it.',
         parameters: [{ name: 'ref', description: 'reference name to store under.' }, { name: 'value', description: 'the non-empty secret value.' }],
         throws: ['RemoteError when the request is invalid, no provider is mounted, or the provider refuses the write.'],
       },
diff --git a/scripts/gen-doc-graphs.ts b/scripts/gen-doc-graphs.ts
index 5152091c77..ec22ea680d 100644
--- a/scripts/gen-doc-graphs.ts
+++ b/scripts/gen-doc-graphs.ts
@@ -487,7 +487,7 @@ const SERVICE_ROLES: ServiceRole[] = [
     mode: 'seam',
     implementations: ['credentials-local'],
     consumers: ['api-settings-controller', 'llm-deepseek', 'llm-pi-ai'],
-    note: 'Configuration carries references to secrets; providers own the values. Consumers resolve per operation, so a rotated credential reaches the very next request; the settings controller exposes value-free metadata, writes, and owner-only reads of stored keys.',
+    note: 'Configuration carries references to secrets; providers own the values. Consumers resolve per operation, so a rotated credential reaches the very next request; the settings controller exposes value-free views and write-only storage.',
   },
   {
     key: 'deepseekAccount',
diff --git a/tsconfig.host.json b/tsconfig.host.json
index 33fdb36aa4..761e67e4b7 100644
--- a/tsconfig.host.json
+++ b/tsconfig.host.json
@@ -8,7 +8,6 @@
     "rewriteRelativeImportExtensions": false
   },
   "include": [
-    "apps/web/tests/credential-editor.e2e.ts",
     "apps/web/tests/sidebar-drawer.e2e.ts",
     "apps/web/tests/creation-recommendations.e2e.ts",
     "apps/web/tests/plugin-recommendations.e2e.ts",