@klarkxy/dsh-git-commit 0.1.4 → 0.1.6

package/lib/contracts.d.ts

@@ -1,2 +1,77 @@
-import { _ as RPC_CHANNEL, a as DEFAULT_MAX_OUTPUT_TOKENS, c as GIT_TIMEOUT_MS, d as MAX_MESSAGE_CHARS, f as MAX_UNTRACKED_PREVIEW_CHARS, g as RECENT_LOG_COUNT, h as PURPOSE_ID, i as CommitRunResult, l as GitCommitStatus, m as PROMPT_VERSION, n as CommitGroupResult, o as FEATURE_ID, p as PLUGIN_NAME, r as CommitModelInfo, s as GIT_COMMIT_CLIENT_SERVICE, t as CONTRACT_VERSION, u as MAX_MANIFEST_CHARS, v as RpcResult, y as SCHEMA_VERSION } from "./contracts2.js";
-export { CONTRACT_VERSION, CommitGroupResult, CommitModelInfo, CommitRunResult, DEFAULT_MAX_OUTPUT_TOKENS, FEATURE_ID, GIT_COMMIT_CLIENT_SERVICE, GIT_TIMEOUT_MS, GitCommitStatus, MAX_MANIFEST_CHARS, MAX_MESSAGE_CHARS, MAX_UNTRACKED_PREVIEW_CHARS, PLUGIN_NAME, PROMPT_VERSION, PURPOSE_ID, RECENT_LOG_COUNT, RPC_CHANNEL, type RpcResult, SCHEMA_VERSION };
+import { RpcResult } from "@klarkxy/dsh-plugin-kit/contracts";
+//#region src/contracts.d.ts
+declare const PLUGIN_NAME = "@klarkxy/dsh-git-commit";
+declare const FEATURE_ID = "git-commit";
+declare const PURPOSE_ID = "git-commit.plan";
+declare const RPC_CHANNEL = "/dsh-git-commit";
+declare const GIT_COMMIT_CLIENT_SERVICE = "dshGitCommitClient";
+declare const PROMPT_VERSION = "git-commit.v1";
+declare const SCHEMA_VERSION = "commit-plan-json.v1";
+declare const CONTRACT_VERSION = 1;
+declare const DEFAULT_MAX_OUTPUT_TOKENS = 2048;
+/** Total character budget for the change manifest sent to the model. */
+declare const MAX_MANIFEST_CHARS = 48000;
+/** Per-file preview cap for untracked files. */
+declare const MAX_UNTRACKED_PREVIEW_CHARS = 2000;
+/** Recent commit subjects supplied as style reference. */
+declare const RECENT_LOG_COUNT = 10;
+/** Hard cap for one generated commit message line. */
+declare const MAX_MESSAGE_CHARS = 120;
+/** git subprocess timeout. */
+declare const GIT_TIMEOUT_MS = 30000;
+declare const SETTINGS_KEY = "current";
+/** Plugin-page model selection. Empty provider/model means "follow the default". */
+interface CommitModelRoute {
+  readonly provider: string;
+  readonly model: string;
+  readonly reasoningEffort?: string;
+}
+interface GitCommitSettings {
+  readonly revision: number;
+  readonly model: CommitModelRoute;
+  /**
+   * Opt-in single commit when the model produced no usable plan. Off by
+   * default: an unplanned commit is one the user never reviewed, so a failed
+   * or unusable model call rejects the run instead of writing to the index.
+   */
+  readonly allowFallback: boolean;
+}
+declare const defaultModelRoute: () => CommitModelRoute;
+declare const defaultSettings: () => GitCommitSettings;
+/** Untrusted stored flags stay opt-in: anything but a literal true is false. */
+declare function normalizeFallback(value: unknown): boolean;
+/** Untrusted stored routes collapse to the default so a bad row never breaks the run. */
+declare function normalizeModelRoute(value: unknown): CommitModelRoute;
+interface CommitModelInfo {
+  readonly provider: string;
+  readonly model: string;
+  /** 'page' is the plugin-page selection; 'default' is the host chat model. */
+  readonly source: 'page' | 'default';
+}
+interface GitCommitStatus {
+  readonly available: boolean;
+  /** Machine-readable reason when unavailable: 'no-session' | 'no-cwd' | 'not-a-repo' | 'no-git'. */
+  readonly reason?: string;
+  readonly detail?: string;
+  readonly root?: string;
+  readonly branch?: string;
+  readonly workspace: {
+    readonly files: number;
+  };
+  readonly model?: CommitModelInfo;
+}
+interface CommitGroupResult {
+  readonly hash: string;
+  readonly message: string;
+  readonly files: readonly string[];
+}
+interface CommitRunResult {
+  readonly branch: string;
+  readonly commits: readonly CommitGroupResult[];
+  /** True when the model plan was unavailable and a single fallback commit was used. */
+  readonly fallback: boolean;
+  readonly model?: CommitModelInfo;
+}
+//#endregion
+export { CONTRACT_VERSION, CommitGroupResult, CommitModelInfo, CommitModelRoute, CommitRunResult, DEFAULT_MAX_OUTPUT_TOKENS, FEATURE_ID, GIT_COMMIT_CLIENT_SERVICE, GIT_TIMEOUT_MS, GitCommitSettings, GitCommitStatus, MAX_MANIFEST_CHARS, MAX_MESSAGE_CHARS, MAX_UNTRACKED_PREVIEW_CHARS, PLUGIN_NAME, PROMPT_VERSION, PURPOSE_ID, RECENT_LOG_COUNT, RPC_CHANNEL, type RpcResult, SCHEMA_VERSION, SETTINGS_KEY, defaultModelRoute, defaultSettings, normalizeFallback, normalizeModelRoute };
+//# sourceMappingURL=contracts.d.ts.map

package/lib/contracts.js

@@ -18,7 +18,44 @@ const RECENT_LOG_COUNT = 10;
 const MAX_MESSAGE_CHARS = 120;
 /** git subprocess timeout. */
 const GIT_TIMEOUT_MS = 3e4;
+const SETTINGS_KEY = "current";
+const defaultModelRoute = () => ({
+	provider: "",
+	model: ""
+});
+const defaultSettings = () => ({
+	revision: 0,
+	model: defaultModelRoute(),
+	allowFallback: false
+});
+/** Untrusted stored flags stay opt-in: anything but a literal true is false. */
+function normalizeFallback(value) {
+	return value === true;
+}
+function asRecord(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+function asText(value) {
+	return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+/** Untrusted stored routes collapse to the default so a bad row never breaks the run. */
+function normalizeModelRoute(value) {
+	const row = asRecord(value);
+	if (!row) return defaultModelRoute();
+	const provider = asText(row.provider) ?? "";
+	const model = asText(row.model) ?? "";
+	const effort = asText(row.reasoningEffort);
+	if (!provider || !model || provider.length > 250 || model.length > 250) return defaultModelRoute();
+	return effort && effort.length <= 80 ? {
+		provider,
+		model,
+		reasoningEffort: effort
+	} : {
+		provider,
+		model
+	};
+}
 //#endregion
-export { CONTRACT_VERSION, DEFAULT_MAX_OUTPUT_TOKENS, FEATURE_ID, GIT_COMMIT_CLIENT_SERVICE, GIT_TIMEOUT_MS, MAX_MANIFEST_CHARS, MAX_MESSAGE_CHARS, MAX_UNTRACKED_PREVIEW_CHARS, PLUGIN_NAME, PROMPT_VERSION, PURPOSE_ID, RECENT_LOG_COUNT, RPC_CHANNEL, SCHEMA_VERSION };
+export { CONTRACT_VERSION, DEFAULT_MAX_OUTPUT_TOKENS, FEATURE_ID, GIT_COMMIT_CLIENT_SERVICE, GIT_TIMEOUT_MS, MAX_MANIFEST_CHARS, MAX_MESSAGE_CHARS, MAX_UNTRACKED_PREVIEW_CHARS, PLUGIN_NAME, PROMPT_VERSION, PURPOSE_ID, RECENT_LOG_COUNT, RPC_CHANNEL, SCHEMA_VERSION, SETTINGS_KEY, defaultModelRoute, defaultSettings, normalizeFallback, normalizeModelRoute };
 
 //# sourceMappingURL=contracts.js.map

package/lib/contracts.js.map

@@ -1 +1 @@
-{"version":3,"file":"contracts.js","names":[],"sources":["../src/contracts.ts"],"sourcesContent":["/** Browser-safe contracts. Shared RPC/result types stay on @klarkxy/dsh-ai-services. */\nexport type { RpcResult } from '@klarkxy/dsh-ai-services/contracts'\n\nexport const PLUGIN_NAME = '@klarkxy/dsh-git-commit'\nexport const FEATURE_ID = 'git-commit'\nexport const PURPOSE_ID = 'git-commit.plan'\nexport const RPC_CHANNEL = '/dsh-git-commit'\nexport const GIT_COMMIT_CLIENT_SERVICE = 'dshGitCommitClient'\nexport const PROMPT_VERSION = 'git-commit.v1'\nexport const SCHEMA_VERSION = 'commit-plan-json.v1'\nexport const CONTRACT_VERSION = 1\n\nexport const DEFAULT_MAX_OUTPUT_TOKENS = 2048\n/** Total character budget for the change manifest sent to the model. */\nexport const MAX_MANIFEST_CHARS = 48_000\n/** Per-file preview cap for untracked files. */\nexport const MAX_UNTRACKED_PREVIEW_CHARS = 2_000\n/** Recent commit subjects supplied as style reference. */\nexport const RECENT_LOG_COUNT = 10\n/** Hard cap for one generated commit message line. */\nexport const MAX_MESSAGE_CHARS = 120\n/** git subprocess timeout. */\nexport const GIT_TIMEOUT_MS = 30_000\n\nexport interface CommitModelInfo {\n  readonly provider: string\n  readonly model: string\n  /** 'purpose' means the user configured an AI-services route; 'default' means the fallback default model. */\n  readonly source: 'override' | 'purpose' | 'default'\n}\n\nexport interface GitCommitStatus {\n  readonly available: boolean\n  /** Machine-readable reason when unavailable: 'no-session' | 'no-cwd' | 'not-a-repo' | 'no-git'. */\n  readonly reason?: string\n  readonly detail?: string\n  readonly root?: string\n  readonly branch?: string\n  readonly workspace: { readonly files: number }\n  readonly model?: CommitModelInfo\n}\n\nexport interface CommitGroupResult {\n  readonly hash: string\n  readonly message: string\n  readonly files: readonly string[]\n}\n\nexport interface CommitRunResult {\n  readonly branch: string\n  readonly commits: readonly CommitGroupResult[]\n  /** True when the model plan was unavailable and a single fallback commit was used. */\n  readonly fallback: boolean\n  readonly model?: CommitModelInfo\n}\n"],"mappings":";AAGA,MAAa,cAAc;AAC3B,MAAa,aAAa;AAC1B,MAAa,aAAa;AAC1B,MAAa,cAAc;AAC3B,MAAa,4BAA4B;AACzC,MAAa,iBAAiB;AAC9B,MAAa,iBAAiB;AAC9B,MAAa,mBAAmB;AAEhC,MAAa,4BAA4B;;AAEzC,MAAa,qBAAqB;;AAElC,MAAa,8BAA8B;;AAE3C,MAAa,mBAAmB;;AAEhC,MAAa,oBAAoB;;AAEjC,MAAa,iBAAiB"}
+{"version":3,"file":"contracts.js","names":[],"sources":["../src/contracts.ts"],"sourcesContent":["/** Browser-safe contracts. Shared RPC/result types stay on @klarkxy/dsh-plugin-kit. */\nexport type { RpcResult } from '@klarkxy/dsh-plugin-kit/contracts'\n\nexport const PLUGIN_NAME = '@klarkxy/dsh-git-commit'\nexport const FEATURE_ID = 'git-commit'\nexport const PURPOSE_ID = 'git-commit.plan'\nexport const RPC_CHANNEL = '/dsh-git-commit'\nexport const GIT_COMMIT_CLIENT_SERVICE = 'dshGitCommitClient'\nexport const PROMPT_VERSION = 'git-commit.v1'\nexport const SCHEMA_VERSION = 'commit-plan-json.v1'\nexport const CONTRACT_VERSION = 1\n\nexport const DEFAULT_MAX_OUTPUT_TOKENS = 2048\n/** Total character budget for the change manifest sent to the model. */\nexport const MAX_MANIFEST_CHARS = 48_000\n/** Per-file preview cap for untracked files. */\nexport const MAX_UNTRACKED_PREVIEW_CHARS = 2_000\n/** Recent commit subjects supplied as style reference. */\nexport const RECENT_LOG_COUNT = 10\n/** Hard cap for one generated commit message line. */\nexport const MAX_MESSAGE_CHARS = 120\n/** git subprocess timeout. */\nexport const GIT_TIMEOUT_MS = 30_000\nexport const SETTINGS_KEY = 'current'\n\n/** Plugin-page model selection. Empty provider/model means \"follow the default\". */\nexport interface CommitModelRoute {\n  readonly provider: string\n  readonly model: string\n  readonly reasoningEffort?: string\n}\n\nexport interface GitCommitSettings {\n  readonly revision: number\n  readonly model: CommitModelRoute\n  /**\n   * Opt-in single commit when the model produced no usable plan. Off by\n   * default: an unplanned commit is one the user never reviewed, so a failed\n   * or unusable model call rejects the run instead of writing to the index.\n   */\n  readonly allowFallback: boolean\n}\n\nexport const defaultModelRoute = (): CommitModelRoute => ({ provider: '', model: '' })\n\nexport const defaultSettings = (): GitCommitSettings => ({\n  revision: 0, model: defaultModelRoute(), allowFallback: false,\n})\n\n/** Untrusted stored flags stay opt-in: anything but a literal true is false. */\nexport function normalizeFallback(value: unknown): boolean {\n  return value === true\n}\n\nfunction asRecord(value: unknown): Record<string, unknown> | undefined {\n  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : undefined\n}\n\nfunction asText(value: unknown): string | undefined {\n  return typeof value === 'string' && value.trim() ? value.trim() : undefined\n}\n\n/** Untrusted stored routes collapse to the default so a bad row never breaks the run. */\nexport function normalizeModelRoute(value: unknown): CommitModelRoute {\n  const row = asRecord(value)\n  if (!row) return defaultModelRoute()\n  const provider = asText(row.provider) ?? ''\n  const model = asText(row.model) ?? ''\n  const effort = asText(row.reasoningEffort)\n  if (!provider || !model || provider.length > 250 || model.length > 250) return defaultModelRoute()\n  return effort && effort.length <= 80 ? { provider, model, reasoningEffort: effort } : { provider, model }\n}\n\nexport interface CommitModelInfo {\n  readonly provider: string\n  readonly model: string\n  /** 'page' is the plugin-page selection; 'default' is the host chat model. */\n  readonly source: 'page' | 'default'\n}\n\nexport interface GitCommitStatus {\n  readonly available: boolean\n  /** Machine-readable reason when unavailable: 'no-session' | 'no-cwd' | 'not-a-repo' | 'no-git'. */\n  readonly reason?: string\n  readonly detail?: string\n  readonly root?: string\n  readonly branch?: string\n  readonly workspace: { readonly files: number }\n  readonly model?: CommitModelInfo\n}\n\nexport interface CommitGroupResult {\n  readonly hash: string\n  readonly message: string\n  readonly files: readonly string[]\n}\n\nexport interface CommitRunResult {\n  readonly branch: string\n  readonly commits: readonly CommitGroupResult[]\n  /** True when the model plan was unavailable and a single fallback commit was used. */\n  readonly fallback: boolean\n  readonly model?: CommitModelInfo\n}\n"],"mappings":";AAGA,MAAa,cAAc;AAC3B,MAAa,aAAa;AAC1B,MAAa,aAAa;AAC1B,MAAa,cAAc;AAC3B,MAAa,4BAA4B;AACzC,MAAa,iBAAiB;AAC9B,MAAa,iBAAiB;AAC9B,MAAa,mBAAmB;AAEhC,MAAa,4BAA4B;;AAEzC,MAAa,qBAAqB;;AAElC,MAAa,8BAA8B;;AAE3C,MAAa,mBAAmB;;AAEhC,MAAa,oBAAoB;;AAEjC,MAAa,iBAAiB;AAC9B,MAAa,eAAe;AAoB5B,MAAa,2BAA6C;CAAE,UAAU;CAAI,OAAO;AAAG;AAEpF,MAAa,yBAA4C;CACvD,UAAU;CAAG,OAAO,kBAAkB;CAAG,eAAe;AAC1D;;AAGA,SAAgB,kBAAkB,OAAyB;CACzD,OAAO,UAAU;AACnB;AAEA,SAAS,SAAS,OAAqD;CACrE,OAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,KAAA;AAC1G;AAEA,SAAS,OAAO,OAAoC;CAClD,OAAO,OAAO,UAAU,YAAY,MAAM,KAAK,IAAI,MAAM,KAAK,IAAI,KAAA;AACpE;;AAGA,SAAgB,oBAAoB,OAAkC;CACpE,MAAM,MAAM,SAAS,KAAK;CAC1B,IAAI,CAAC,KAAK,OAAO,kBAAkB;CACnC,MAAM,WAAW,OAAO,IAAI,QAAQ,KAAK;CACzC,MAAM,QAAQ,OAAO,IAAI,KAAK,KAAK;CACnC,MAAM,SAAS,OAAO,IAAI,eAAe;CACzC,IAAI,CAAC,YAAY,CAAC,SAAS,SAAS,SAAS,OAAO,MAAM,SAAS,KAAK,OAAO,kBAAkB;CACjG,OAAO,UAAU,OAAO,UAAU,KAAK;EAAE;EAAU;EAAO,iBAAiB;CAAO,IAAI;EAAE;EAAU;CAAM;AAC1G"}

package/lib/index.d.ts

@@ -1,5 +1,6 @@
-import { i as CommitRunResult, l as GitCommitStatus } from "./contracts2.js";
-import { AiServices, RpcResult } from "@klarkxy/dsh-ai-services/contracts";
+import { CommitRunResult, GitCommitSettings, GitCommitStatus, defaultSettings, normalizeFallback, normalizeModelRoute } from "./contracts.js";
+import { LlmTextCaller } from "@klarkxy/dsh-plugin-kit";
+import { RpcResult } from "@klarkxy/dsh-plugin-kit/contracts";
 import { Context } from "@deepseek-ai/cordis";
 //#region src/git.d.ts
 interface GitRunOptions {
@@ -45,20 +46,33 @@ interface AgentStoreLike {
 }
 interface GitCommitServiceDeps {
   readonly plugin: string;
-  readonly ai: AiServices;
+  readonly llm: LlmTextCaller;
+  readonly host?: unknown;
   readonly sessions: SessionStoreLike;
   readonly agents?: AgentStoreLike;
   readonly run?: GitRunner;
   readonly preview?: (root: string, path: string) => Promise<UntrackedPreview>;
+  /** Plugin-page settings row; absent keeps the shared purpose route. */
+  readonly settings?: {
+    load(): Promise<GitCommitSettings>;
+    save(settings: GitCommitSettings): Promise<void>;
+  };
 }
 declare class GitCommitService {
   private readonly deps;
   private readonly run;
   private readonly preview;
-  private scope;
-  private disposePurpose;
   private running;
+  private settings;
+  private settingsPending;
+  private readonly settingsReady;
+  private disposed;
   constructor(deps: GitCommitServiceDeps);
+  /** Apply a freshly loaded settings row; the default stays until a row is read. */
+  adoptSettings(next: GitCommitSettings): void;
+  getSettings(): GitCommitSettings;
+  private selectedModel;
+  updateSettings(patch: Omit<GitCommitSettings, 'revision'>, expectedRevision: number): Promise<GitCommitSettings>;
   start(): void;
   dispose(): Promise<void>;
   private resolveRepo;
@@ -88,7 +102,7 @@ declare function parsePlan(text: string, files: readonly ChangedFile[]): PlanGro
 //#endregion
 //#region src/index.d.ts
 declare const name = "@klarkxy/dsh-git-commit";
-declare const inject: readonly ["aiServices", "sessions", "agents", "connection", "webServer"];
+declare const inject: readonly ["llm", "sessions", "agents", "storageDomain", "connection", "webServer"];
 declare module '@deepseek-ai/cordis' {
   interface Context {
     gitCommit: GitCommitService;
@@ -97,5 +111,5 @@ declare module '@deepseek-ai/cordis' {
 declare function handleRpc(service: GitCommitService, endpoint: string, payload: unknown, signal: AbortSignal): Promise<RpcResult>;
 declare function apply(ctx: Context): void;
 //#endregion
-export { GitCommitService, apply, buildPlanInput, handleRpc, inject, name, parsePlan, parsePorcelain };
+export { GitCommitService, apply, buildPlanInput, defaultSettings, handleRpc, inject, name, normalizeFallback, normalizeModelRoute, parsePlan, parsePorcelain };
 //# sourceMappingURL=index.d.ts.map

package/lib/index.js

@@ -1,11 +1,15 @@
-import { DEFAULT_MAX_OUTPUT_TOKENS, MAX_MANIFEST_CHARS, MAX_UNTRACKED_PREVIEW_CHARS, PLUGIN_NAME, PROMPT_VERSION, PURPOSE_ID, RPC_CHANNEL, SCHEMA_VERSION } from "./contracts.js";
-import { registerHostRpc } from "@klarkxy/dsh-ai-services/host-rpc";
+import { DEFAULT_MAX_OUTPUT_TOKENS, MAX_MANIFEST_CHARS, MAX_UNTRACKED_PREVIEW_CHARS, PLUGIN_NAME, RPC_CHANNEL, SETTINGS_KEY, defaultSettings, normalizeFallback, normalizeModelRoute } from "./contracts.js";
+import { registerHostRpc } from "@klarkxy/dsh-plugin-kit/host-rpc";
+import { callLlmText, resolveFeatureModel } from "@klarkxy/dsh-plugin-kit";
+import { modelMenuOverride } from "@klarkxy/dsh-plugin-kit/model-menu";
 import { execFile } from "node:child_process";
 import { createHash } from "node:crypto";
 import { constants } from "node:fs";
 import { copyFile, lstat, mkdtemp, open, readFile, readlink, realpath, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { isAbsolute, join, relative, resolve } from "node:path";
+import { defineDomain, domainTable } from "@deepseek-ai/dsh-storage-domain";
+import { z } from "zod";
 //#region src/git.ts
 var GitError = class extends Error {
 	stderr;
@@ -565,12 +569,12 @@ var CommitRunError = class extends Error {
 		this.code = code;
 	}
 };
-function modelInfo(route) {
+function modelInfo(route, source) {
 	if (!route?.provider || !route.model) return void 0;
 	return {
 		provider: route.provider,
 		model: route.model,
-		source: route.source
+		source
 	};
 }
 function looksChinese(subjects) {
@@ -586,30 +590,58 @@ var GitCommitService = class {
 	deps;
 	run;
 	preview;
-	scope;
-	disposePurpose;
 	running;
+	settings;
+	settingsPending = Promise.resolve();
+	settingsReady;
+	disposed = false;
 	constructor(deps) {
 		this.deps = deps;
 		this.run = deps.run ?? execGit;
 		this.preview = deps.preview ?? untrackedPreview;
+		this.settings = defaultSettings();
+		this.settingsReady = deps.settings?.load().then((loaded) => {
+			if (loaded) this.settings = structuredClone(loaded);
+		}, () => {
+			this.settings = defaultSettings();
+		}) ?? Promise.resolve();
 	}
-	start() {
-		this.scope = this.deps.ai.activate(this.deps.plugin);
-		this.disposePurpose = this.scope.registerPurpose({
-			id: PURPOSE_ID,
-			label: "Git 提交",
-			defaultTarget: {
-				kind: "role",
-				role: "weak"
-			},
-			maxOutputTokens: DEFAULT_MAX_OUTPUT_TOKENS
+	/** Apply a freshly loaded settings row; the default stays until a row is read. */
+	adoptSettings(next) {
+		this.settings = structuredClone(next);
+	}
+	getSettings() {
+		return structuredClone(this.settings);
+	}
+	selectedModel() {
+		const page = modelMenuOverride(this.settings.model);
+		return {
+			route: resolveFeatureModel(this.deps.host, page),
+			source: page ? "page" : "default"
+		};
+	}
+	async updateSettings(patch, expectedRevision) {
+		const detached = structuredClone(patch);
+		const result = this.settingsPending.then(async () => {
+			await this.settingsReady;
+			if (this.disposed) throw new CommitRunError("disposed", "dsh-git-commit: plugin disabled");
+			if (expectedRevision !== this.settings.revision) throw new CommitRunError("stale", "dsh-git-commit: settings changed; reload and retry");
+			const next = {
+				revision: expectedRevision + 1,
+				model: detached.model,
+				allowFallback: normalizeFallback(detached.allowFallback)
+			};
+			await this.deps.settings?.save(next);
+			this.settings = next;
+			return this.getSettings();
 		});
+		this.settingsPending = result.then(() => {}, () => {});
+		return result;
 	}
+	start() {}
 	async dispose() {
-		this.disposePurpose?.();
-		this.scope?.dispose();
-		this.scope = void 0;
+		this.disposed = true;
+		await this.settingsPending;
 		await this.running?.catch(() => {});
 	}
 	async resolveRepo(sessionId) {
@@ -638,8 +670,8 @@ var GitCommitService = class {
 			throw error;
 		}
 		const changes = await workingTreeChanges(this.run, resolved.root);
-		let model;
-		if (this.scope?.active) model = await this.deps.ai.resolve(PURPOSE_ID, sessionId).then(modelInfo, () => void 0);
+		const selected = this.selectedModel();
+		const model = modelInfo(selected.route, selected.source);
 		return {
 			available: true,
 			root: resolved.root,
@@ -664,7 +696,7 @@ var GitCommitService = class {
 		const resolved = await this.resolveRepo(sessionId);
 		const assertReady = () => {
 			signal?.throwIfAborted();
-			if (!this.scope?.active) throw new CommitRunError("cancelled", "dsh-git-commit: plugin is no longer active");
+			if (this.disposed || !this.deps.llm) throw new CommitRunError("cancelled", "dsh-git-commit: plugin is no longer active");
 			const currentSession = this.deps.sessions.get(sessionId);
 			if (currentSession !== session || normalizeCwd(currentSession?.header?.cwd) !== sessionCwd) throw new CommitRunError("session-changed", "dsh-git-commit: session workspace changed during planning");
 			if (this.deps.agents?.get(sessionId)?.status === "running") throw new CommitRunError("session-running", "dsh-git-commit: wait for the session turn to finish");
@@ -687,34 +719,33 @@ var GitCommitService = class {
 		const untracked = [];
 		for (const file of selected) if (file.status === "untracked") untracked.push(await this.preview(resolved.root, file.path));
 		let groups;
+		let planFailure = "no model route was available";
 		let model;
-		const scope = this.scope;
-		if (scope?.active) try {
-			const result = await scope.run({
-				purpose: PURPOSE_ID,
-				sessionId,
-				input: buildPlanInput({
+		const planned = this.selectedModel();
+		if (planned.route) try {
+			const result = await callLlmText(this.deps.llm, {
+				plugin: this.deps.plugin,
+				route: planned.route,
+				system: planSystemPrompt(),
+				text: buildPlanInput({
 					files: selected,
 					recentSubjects: subjects,
 					stat,
 					diff,
 					untracked
 				}),
-				system: planSystemPrompt(),
-				sourceVersion: `${sessionId}:${initial.fingerprint}`,
-				contractVersion: 1,
-				promptVersion: PROMPT_VERSION,
-				schemaVersion: SCHEMA_VERSION,
-				signal,
-				priority: "interactive"
+				maxTokens: DEFAULT_MAX_OUTPUT_TOKENS,
+				signal: signal ?? new AbortController().signal,
+				sessionId
 			});
-			model = modelInfo(result.receipt.route);
-			if (result.receipt.status === "cancelled") throw new CommitRunError("cancelled", "dsh-git-commit: planning was cancelled");
+			model = modelInfo(result, planned.source);
 			groups = parsePlan(result.text, selected);
+			if (!groups) planFailure = "the model returned a plan that does not cover the change set";
 		} catch (error) {
 			if (error instanceof CommitRunError) throw error;
-			groups = void 0;
+			planFailure = error instanceof Error ? error.message : String(error);
 		}
+		if (!groups && !this.settings.allowFallback) throw new CommitRunError("plan-unavailable", `dsh-git-commit: no commit plan (${planFailure})`);
 		assertReady();
 		if ((await workspaceSnapshot(this.run, resolved.root, signal)).fingerprint !== initial.fingerprint) throw new CommitRunError("workspace-changed", "dsh-git-commit: workspace changed during planning; retry the commit");
 		const effective = groups ?? [fallbackGroup(selected, looksChinese(subjects) ? "zh" : "en")];
@@ -752,12 +783,47 @@ var GitCommitService = class {
 	}
 };
 //#endregion
+//#region src/storage.ts
+const modelRouteSchema = z.object({
+	provider: z.string().max(250),
+	model: z.string().max(250),
+	reasoningEffort: z.string().max(80).optional()
+}).strict();
+/** Version 1 stored no settings row, so a missing record fills defaults. */
+const settingsSchema = z.object({
+	revision: z.number().int().nonnegative(),
+	model: modelRouteSchema,
+	allowFallback: z.boolean().default(false)
+}).strict();
+const updateSettingsSchema = z.object({
+	expectedRevision: z.number().int().nonnegative(),
+	settings: z.object({
+		model: z.unknown(),
+		allowFallback: z.unknown().optional()
+	}).strict()
+}).strict();
+const gitCommitDomain = defineDomain({
+	name: "dsh_editor_git_commit",
+	version: 1,
+	tables: { settings: domainTable(settingsSchema) }
+});
+function parseSettings(value) {
+	const parsed = settingsSchema.safeParse(value);
+	if (!parsed.success) return defaultSettings();
+	return {
+		revision: parsed.data.revision,
+		model: normalizeModelRoute(parsed.data.model),
+		allowFallback: parsed.data.allowFallback
+	};
+}
+//#endregion
 //#region src/index.ts
 const name = PLUGIN_NAME;
 const inject = [
-	"aiServices",
+	"llm",
 	"sessions",
 	"agents",
+	"storageDomain",
 	"connection",
 	"webServer"
 ];
@@ -799,6 +865,27 @@ async function handleRpc(service, endpoint, payload, signal) {
 					value: await service.status(sessionId)
 				};
 			}
+			case "settings": return {
+				ok: true,
+				value: service.getSettings()
+			};
+			case "settings.update": {
+				const parsed = updateSettingsSchema.safeParse(payload);
+				if (!parsed.success) return {
+					ok: false,
+					error: {
+						code: "bad-request",
+						message: "settings patch is invalid"
+					}
+				};
+				return {
+					ok: true,
+					value: await service.updateSettings({
+						model: normalizeModelRoute(parsed.data.settings.model),
+						allowFallback: normalizeFallback(parsed.data.settings.allowFallback)
+					}, parsed.data.expectedRevision)
+				};
+			}
 			case "commit": {
 				const sessionId = stringField(payload, "sessionId");
 				if (!sessionId) return {
@@ -827,20 +914,30 @@ async function handleRpc(service, endpoint, payload, signal) {
 }
 function apply(ctx) {
 	const host = ctx;
+	const domainPromise = host.storageDomain.open(gitCommitDomain);
+	const tablePromise = domainPromise.then((domain) => domain.table("settings"));
 	const service = new GitCommitService({
 		plugin: PLUGIN_NAME,
-		ai: host.aiServices,
+		llm: host.llm,
+		host,
 		sessions: host.sessions,
-		agents: host.agents
+		agents: host.agents,
+		settings: {
+			load: async () => parseSettings((await tablePromise).get(SETTINGS_KEY)),
+			save: async (settings) => {
+				await (await tablePromise).put(SETTINGS_KEY, settings);
+			}
+		}
 	});
 	service.start();
 	ctx.provide("gitCommit", service);
 	ctx.effect(() => async () => {
 		await service.dispose();
+		await (await domainPromise).close();
 	}, "git-commit.lifecycle");
 	ctx.effect(() => registerHostRpc(host, RPC_CHANNEL, (endpoint, payload, signal) => handleRpc(service, endpoint, payload, signal)), "git-commit.rpc");
 }
 //#endregion
-export { GitCommitService, apply, buildPlanInput, handleRpc, inject, name, parsePlan, parsePorcelain };
+export { GitCommitService, apply, buildPlanInput, defaultSettings, handleRpc, inject, name, normalizeFallback, normalizeModelRoute, parsePlan, parsePorcelain };
 
 //# sourceMappingURL=index.js.map