@mars-sea/dsh-commandcode-provider 0.10.2 → 0.10.4

package/lib/index.d.ts

@@ -7,7 +7,7 @@ import { Context } from "@deepseek-ai/cordis";
 import { AttachmentStore } from "@deepseek-ai/dsh-attachment";
 import { CommandDefinition } from "@deepseek-ai/dsh-commands";
 //#region src/adapter.d.ts
-declare const COMMAND_CODE_CLI_VERSION = "1.50.0";
+declare const COMMAND_CODE_CLI_VERSION = "1.53.0";
 declare const DEFAULT_API_BASE = "https://api.commandcode.ai";
 declare const DEFAULT_GENERATE_MAX_TOKENS = 64000;
 declare const DEFAULT_MAX_OUTPUT_TOKENS = 65536;
@@ -441,7 +441,20 @@ declare class CommandCodeAccountPool {
    * key until the stored credential changes.
    */
   markRejected(apiKey: string, rejection: AccountRejection): void;
-  /** One account's key: literal → credential seam → auth file (default slot). */
+  /**
+   * One account's key: literal → credential seam → auth file (default slot).
+   *
+   * Every source is normalized here, at the single point where a slot's key
+   * enters the pool. The adapter sends the key through the harness's
+   * `assertUsableApiKey()`, which trims it — a stored key from the credentials
+   * seam, a `.env` line, or a shell export all pick up surrounding whitespace
+   * — and reports that trimmed form back to `markRejected()`. Returning the
+   * raw value would file every 429/401 mark under a key no later lookup can
+   * find: rotation would re-offer the same account, the account card would show
+   * no mark, and the usage endpoints would 401 while chat kept working.
+   * Normalizing once makes resolution, probing, marking, and the request path
+   * agree on one string.
+   */
   private resolveSlotKey;
   /** Hand out the chosen account's key. */
   private pick;
@@ -487,7 +500,7 @@ declare const KNOWN_EFFORTS: Readonly<Record<string, readonly string[]>>;
  */
 declare const KNOWN_IMAGE_MODELS: ReadonlySet<string>;
 /**
- * Models the official CLI's model table (command-code@1.50.0) marks
+ * Models the official CLI's model table (command-code@1.53.0) marks
  * `reasoning:!0` but defines no selectable `reasoning_effort` levels — they
  * think automatically, with Command Code driving the depth. This is the
  * authoritative "thinks, effort not adjustable" set: `KNOWN_EFFORTS` (which
@@ -495,7 +508,7 @@ declare const KNOWN_IMAGE_MODELS: ReadonlySet<string>;
  * effort levels, and this snapshot is not surfaced in the picker's compact
  * description — it exists for programmatic consumers.
  *
- * Source: the command-code@1.50.0 bundled model table (dist/cli.mjs),
+ * Source: the command-code@1.53.0 bundled model table (dist/cli.mjs),
  * cross-checked with https://commandcode.ai/docs/reference/cli/models.
  * (`stealth/ox-alpha` left this set in command-code@1.32.1, which gave it
  * selectable `['low', 'high', 'max']` efforts; the preview then ended in
@@ -508,7 +521,13 @@ declare const KNOWN_IMAGE_MODELS: ReadonlySet<string>;
  * to `KNOWN_EFFORTS`. command-code@1.42.0 added `meituan/LongCat-2.0:free`
  * (reasoning:!0, no efforts). command-code@1.45.0 gave the Muse Spark family
  * (1.1, 1.2, 1.2-contributor, 1.3, 1.3-contributor) selectable
- * `['low', 'medium', 'high', 'xhigh']` efforts — they moved to `KNOWN_EFFORTS`.)
+ * `['low', 'medium', 'high', 'xhigh']` efforts — they moved to `KNOWN_EFFORTS`.
+ * command-code@1.51.3 gave `MiniMaxAI/MiniMax-M3` selectable
+ * `['low', 'medium', 'high']` efforts — it moved to `KNOWN_EFFORTS` too.
+ * command-code@1.52.0 added `inclusionai/ling-3.0-flash-sante:free`
+ * (reasoning:!0, no efforts).)
+ * command-code@1.53.0 added `deepseek/deepseek-v4.1-flash` with selectable
+ * ['low', 'high', 'max'] efforts, so it lives in `KNOWN_EFFORTS`, not here.)
  * Keep in sync via the dsh-commandcode-upstream skill.
  */
 declare const KNOWN_THINKING_MODELS: ReadonlySet<string>;
@@ -525,7 +544,9 @@ declare const KNOWN_THINKING_MODELS: ReadonlySet<string>;
  * command-code@1.41.0 added `Qwen/Qwen3.8-Max-0902` (Go) and 1.42.0 added
  * `meituan/LongCat-2.0:free` (Go, free promo); command-code@1.43.0 added
  * `google/gemini-3.8-flash` (GOAT) and 1.44.0 added `meta/muse-spark-1.3`
- * (GOAT) plus its Contributor sibling (Go).
+ * (GOAT) plus its Contributor sibling (Go); command-code@1.52.0 added the
+ * free `inclusionai/ling-3.0-flash-sante:free` (Go); command-code@1.53.0
+ * added `deepseek/deepseek-v4.1-flash` (Go).
  *
  * The Provider API exposes no plan metadata, so this snapshot is the source of
  * truth for the picker's plan annotation — it answers "which plan do I need to
@@ -557,8 +578,8 @@ declare function compareByPlan(a: {
 }): number;
 /**
  * Subscription plan table, synced from the official CLI bundle's plan maps
- * (located by the `"individual-go"` key in command-code@1.50.0 `dist/cli.mjs`,
- * re-verified unchanged through 1.50.0): subscription `planId`
+ * (located by the `"individual-go"` key in command-code@1.53.0 `dist/cli.mjs`,
+ * re-verified unchanged through 1.53.0): subscription `planId`
  * prefix → display name and the plan's monthly credit total. This is the
  * account's own subscription (from `/alpha/billing/subscriptions`) — distinct
  * from {@link KNOWN_PLANS}, which maps catalog models to their minimum tier.
@@ -635,29 +656,43 @@ declare const KNOWN_DEALS: Readonly<Record<string, KnownDeal>>;
 /**
  * Models with time-of-day (peak/off-peak) pricing, per the official pricing
  * page (`/docs/resources/pricing-limits`). Since 2026-08-16 16:00 UTC, DeepSeek
- * charges by the hour: peak hours are 01:00–04:00 and 06:00–10:00 UTC (7h/day,
- * full price); the other 17 hours are off-peak at half price. The V4 Flash
- * Vision (exp) variant (command-code@1.32.0) shares the V4 Flash windows and
- * peak prices ($0.44/$1.32) — each row's hover annotation states exactly 2×
- * that row's displayed off-peak prices. The picker shows the
+ * charges by the hour: peak hours are 01:00–04:00 and 06:00–10:00 UTC (7h per
+ * weekday, full price) **Monday to Friday only**; the other 17 hours of a
+ * weekday and every hour of Saturday/Sunday (UTC) are off-peak at half price.
+ * The V4 Flash Vision (exp) variant (command-code@1.32.0) shares the V4 Flash
+ * windows and peak prices ($0.44/$1.32) — each row's hover annotation states
+ * exactly 2× that row's displayed off-peak prices. The picker shows the
  * *current* state as a compact
  * label (`Peak`/`Half`) matching the English noun style of the other markers
  * (`Image`, `FREE`), so a developer can tell at a glance whether calling the
  * model right now is cheap or expensive.
  *
- * Extraction caution: in the page's HTML each annotation div sits inside its
- * OWN row's container, immediately before the NEXT row starts — flattening
- * the page to text makes every annotation look like it belongs to the model
- * printed after it. Verify membership against the enclosing row and the 2×
- * price relation, not the flat-text neighbor.
+ * Authoritative extraction: the pricing page embeds a model JSON array whose
+ * hourly-priced entries carry a `timeOfDay` block
+ * (`{ windows: "01–04 & 06–10 UTC, Mon–Fri", peakHoursPerDay: 7,
+ * offPeakHoursPerDay: 17, peak: {...}, offPeak: {...} }`). Exactly four models
+ * carry it: V4 Pro, V4 Flash, V4 Flash Vision (exp), and V4.1 Flash (added in
+ * command-code@1.53.0 at $0.15/$0.60 off-peak, $0.30/$1.20 peak — the same
+ * schedule as the other three).
  *
- * Keep in sync with the official pricing page when the model set or the peak
- * windows change (see the dsh-commandcode-upstream skill).
+ * Extraction caution: the rendered HTML rows are a trap. Each annotation div
+ * sits inside its OWN row's container, immediately before the NEXT row starts,
+ * so flattening the page to text makes every annotation look like it belongs
+ * to the model printed after it — that is how `deepseek/deepseek-v4-flash-fast`
+ * was wrongly added here (its row is flat-priced at $0.28/$0.56/$0.07 and has
+ * no `timeOfDay` block). Trust the embedded JSON's `timeOfDay` membership and
+ * the 2× price relation, never the flat-text neighbor.
+ *
+ * Keep in sync with the official pricing page when the model set, the peak
+ * windows, or the weekday rule change (see the dsh-commandcode-upstream skill).
  */
 declare const KNOWN_PEAK_PRICING: ReadonlySet<string>;
 /**
- * Whether `now` (defaults to `Date.now()`) falls in a peak-pricing hour for
- * time-of-day-priced models. `undefined` for models outside the snapshot.
+ * Whether `now` (defaults to `Date.now()`) falls in a peak-pricing window for
+ * time-of-day-priced models. Peak rates apply Monday–Friday (UTC) only: the
+ * official rule charges Saturday and Sunday completely off-peak for all 24
+ * hours, so a weekend timestamp is off-peak even inside `PEAK_HOUR_RANGES`.
+ * `undefined` for models outside the snapshot.
  */
 declare function peakPricingState(modelId: string, now?: number): 'peak' | 'off-peak' | undefined;
 /**
@@ -1000,6 +1035,14 @@ declare class CommandCodeLoginFlow {
   private timer;
   /** Settle hooks of the live attempt's callback promise. */
   private settle;
+  /**
+   * Attempt generation. A delivered callback keeps validating the key
+   * asynchronously (`complete()`), and that window is open to a cancel or a
+   * fresh `begin()`; the generation lets a late completion recognize that it
+   * no longer owns the status face and stop instead of storing a credential
+   * the user cancelled and flipping the page back to success.
+   */
+  private attemptSeq;
   private disposed;
   constructor(deps: CommandCodeLoginFlowDeps);
   /** Subscribe to state transitions. @returns the disposer. */
@@ -1030,8 +1073,19 @@ declare class CommandCodeLoginFlow {
   private handleCallback;
   /** Answer a decisive callback, stop listening, and settle the attempt. */
   private settleAttempt;
-  /** Post-validation completion: whoami check, then hand-off to storage. */
+  /**
+   * Post-validation completion: whoami check, then hand-off to storage.
+   *
+   * Every step re-checks {@link ownsAttempt} first: the whoami round-trip and
+   * the credential write are awaits, and the user may cancel (or start another
+   * attempt) while one is in flight. A completion that no longer owns the
+   * attempt must not write the key or publish a status — otherwise cancel
+   * would report "cancelled" while the credential landed anyway, and the page
+   * would silently flip to success.
+   */
   private complete;
+  /** Whether one attempt still owns the status face (not cancelled, replaced, or disposed). */
+  private ownsAttempt;
   /** Map a tagged settle rejection onto the status face. */
   private failFrom;
   private clearTimer;
@@ -1132,6 +1186,145 @@ declare class CommandCodeSearchProvider implements WebSearchProvider {
   private resolveKey;
 }
 //#endregion
+//#region src/tui-settings.d.ts
+/** Provider-owned translations for one title, label, or hint. */
+interface TuiLocalizedText {
+  readonly zh?: string;
+  readonly en?: string;
+}
+/** Control kinds the dsh-TUI settings screen knows how to render. */
+type TuiSettingsFieldKind = 'text' | 'number' | 'boolean' | 'select';
+/** One choice of an options-bearing field. */
+interface TuiSettingsFieldOption {
+  /** Stored value. */
+  readonly value: string;
+  /** Display label (English; also the fallback). */
+  readonly label: string;
+  /** Provider-owned translations for the label. */
+  readonly descriptions?: TuiLocalizedText;
+}
+/** The write one field's draft stages when the section is saved. */
+type TuiSettingsFieldWrite = {
+  readonly kind: 'set';
+  readonly value: unknown;
+} | {
+  readonly kind: 'clear';
+};
+/** One editable field inside a section. */
+interface TuiSettingsField {
+  /** Key path from the section root, in the settings service's `mutate` vocabulary. */
+  readonly path: readonly string[];
+  /** Short field label (English; also the fallback). */
+  readonly label: string;
+  /** Provider-owned translations for the label. */
+  readonly descriptions?: TuiLocalizedText;
+  /** Optional one-line help rendered under the field. */
+  readonly hint?: string;
+  /** Provider-owned translations for the hint. */
+  readonly hintDescriptions?: TuiLocalizedText;
+  /** Optional group id; grouped fields render on that group's subpage. */
+  readonly group?: string;
+  readonly kind: TuiSettingsFieldKind;
+  /**
+   * Choices for an options-bearing field. A `text` field that carries options
+   * is the TUI's own "preset plus custom value" shape: `←`/`→` cycle the
+   * presets while Enter opens the text editor.
+   */
+  readonly options?: readonly TuiSettingsFieldOption[];
+  /** Input placeholder for `kind: 'text' | 'number'`. */
+  readonly placeholder?: string;
+  /**
+   * Credential control: the literal never rides the settings document — the
+   * draft starts blank on every open, a blank draft writes nothing, and a
+   * typed draft writes through the credentials seam under `ref`.
+   */
+  readonly secret?: {
+    readonly ref: string;
+  };
+  /** Render a stored value as draft text. */
+  readonly format?: (value: unknown) => string;
+  /** The write a draft text stages; `undefined` marks the draft invalid. */
+  readonly parse?: (text: string) => TuiSettingsFieldWrite | undefined;
+}
+/** Optional navigation group inside one section. */
+interface TuiSettingsGroup {
+  /** Stable identifier, unique inside the section. */
+  readonly id: string;
+  /** Group title (English; also the fallback). */
+  readonly title: string;
+  /** Provider-owned translations for the title. */
+  readonly descriptions?: TuiLocalizedText;
+}
+/** One plugin's section inside the dsh-TUI settings screen. */
+interface TuiSettingsSection {
+  /** Settings namespace this section edits. */
+  readonly ns: string;
+  /** Section title (English; also the fallback). */
+  readonly title: string;
+  /** Provider-owned translations for the title. */
+  readonly descriptions?: TuiLocalizedText;
+  /** Optional navigation groups, in display order. */
+  readonly groups?: readonly TuiSettingsGroup[];
+  /** Editable fields, in display order. */
+  readonly fields: readonly TuiSettingsField[];
+}
+/** The slice of the `tuiSettingsSections` service this module uses. */
+interface TuiSettingsSectionsService {
+  /** Declare a section; the returned disposer withdraws it. */
+  register(section: TuiSettingsSection): () => void;
+}
+/** The selector value meaning "no pinned account — follow rotation order". */
+declare const ACTIVE_ACCOUNT_AUTO = "auto";
+/** The selector value meaning "no language override — follow the shell locale". */
+declare const LANG_AUTO = "auto";
+/** Everything the section needs from the plugin entry. */
+interface CommandCodeTuiSettingsDeps {
+  /** The plugin's settings namespace (`llm-commandcode`). */
+  ns: string;
+  /** Section title; defaults to `Command Code`. */
+  title?: string;
+  /**
+   * The credential reference the API-key field writes through, read per
+   * registration so a `Config.apiKeyEnv` change re-targets the field instead
+   * of silently writing to the old reference.
+   */
+  apiKeyRef: () => string;
+  /**
+   * Account slots for the active-account selector, in rotation order, read
+   * per registration. A changed list re-registers the section (see
+   * {@link applyCommandCodeTuiSettings}).
+   */
+  accountSlots: () => readonly {
+    id: string;
+    label: string;
+  }[];
+}
+/**
+ * Build the section descriptor. Pure, so tests can pin the exact fields
+ * without a dsh-TUI host.
+ *
+ * Field choices worth keeping: the two option-bearing fields (`activeAccount`,
+ * `lang`) are `text` + `options` rather than `select`, because a `select`
+ * cannot express "unset" — cycling only ever lands on a declared option, so a
+ * `select` would strand the user on a pinned value with no way back to
+ * automatic. The `auto` sentinel plus a `parse` that clears the path keeps the
+ * unset state reachable. The two booleans format their EFFECTIVE default
+ * (`filterModelsByPlan` unset means true at the adapter), so a fresh install
+ * reads true instead of the screen's "(empty)".
+ */
+declare function buildCommandCodeTuiSection(deps: CommandCodeTuiSettingsDeps): TuiSettingsSection;
+/**
+ * Register the Command Code section on a dsh-TUI host.
+ *
+ * @param ctx - the context of an activated `tuiSettingsSections` injection.
+ * @param deps - plugin-owned facts the section reads.
+ * @returns a refresh function that re-registers the section when a fact it
+ *   renders changed (the plugin entry calls it from its settings `onChange`
+ *   hook), or `undefined` when the seam is unusable. The returned function is
+ *   inert after the fiber is torn down.
+ */
+declare function applyCommandCodeTuiSettings(ctx: Context, deps: CommandCodeTuiSettingsDeps): (() => void) | undefined;
+//#endregion
 //#region src/index.d.ts
 declare const name = "llm-commandcode";
 declare const inject: string[];
@@ -1243,5 +1436,5 @@ interface ResolvedCommandCodeOptions extends CommandCodeConnectionOptions {
 declare function resolveAdapterOptions(config: Config): ResolvedCommandCodeOptions;
 declare function apply(ctx: Context, config: Config): void;
 //#endregion
-export { type ApiKeyValidation, BILLING_ACCESS_TTL_MS, COMMANDCODE_SEARCH_PROVIDER_ID, COMMAND_CODE_CLI_VERSION, type CommandCodeAccountConfig, CommandCodeAccountPool, type CommandCodeAccountSlot, type CommandCodeAccountState, type CommandCodeAccountUsage, type CommandCodeAccountsReport, CommandCodeAdapter, type CommandCodeAdapterDeps, type CommandCodeBillingAccess, type CommandCodeCommandDeps, type CommandCodeConnectionOptions, type CommandCodeLoginCredentials, type CommandCodeLoginFailureReason, CommandCodeLoginFlow, type CommandCodeLoginFlowDeps, type CommandCodeLoginStatus, type CommandCodeModelAccountRule, CommandCodeSearchProvider, type CommandCodeSearchProviderDeps, type CommandCodeSearchSelection, type CommandCodeUsageDeps, type CommandCodeUsageReport, CommandCodeUsageService, Config, DEFAULT_API_BASE, DEFAULT_GENERATE_MAX_TOKENS, DEFAULT_MAX_OUTPUT_TOKENS, DEFAULT_MODELS_CACHE_PATH, DEFAULT_REQUEST_TIMEOUT_MS, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_WEB_SEARCH_PROVIDER_ID, KNOWN_DEALS, KNOWN_EFFORTS, KNOWN_IMAGE_MODELS, KNOWN_PEAK_PRICING, KNOWN_PLANS, KNOWN_SUBSCRIPTION_PLANS, KNOWN_THINKING_MODELS, LOGIN_ALLOWED_ORIGINS, LOGIN_BEGIN_ENDPOINT, LOGIN_BODY_LIMIT_BYTES, LOGIN_CANCEL_ENDPOINT, LOGIN_MAX_PORT_ATTEMPTS, LOGIN_START_PORT, LOGIN_STATUS_ENDPOINT, LOGIN_TIMEOUT_MS, type LoginFlowFacade, PLAN_LABELS, PLAN_ORDER, PROVIDER, type ResolveAttachments, ResolvedCommandCodeOptions, USAGE_REPORT_ENDPOINT, accountUsable, apply, applyCommandCodeSearchSelection, applyCommands, applyUsageRemote, buildCommandAuthUrl, capabilityDescription, commandCodeSearchSelection, commandDefinition, compareByPlan, dealLabel, formatContext, inject, loginStatusSchema, matchModelRule, modelVisibleInPlan, name, parseLoginStatus, peakPricingLabel, peakPricingState, planLabel, projectSlugFromPath, resolveAdapterOptions, resolveAuthFileApiKey, selectAccountForModel, selectActiveAccount, selectCommandCodeSearchProvider, studioBaseForApiBase, subscriptionPlanInfo, usageReportSchema, validateCommandApiKey };
+export { ACTIVE_ACCOUNT_AUTO, type ApiKeyValidation, BILLING_ACCESS_TTL_MS, COMMANDCODE_SEARCH_PROVIDER_ID, COMMAND_CODE_CLI_VERSION, type CommandCodeAccountConfig, CommandCodeAccountPool, type CommandCodeAccountSlot, type CommandCodeAccountState, type CommandCodeAccountUsage, type CommandCodeAccountsReport, CommandCodeAdapter, type CommandCodeAdapterDeps, type CommandCodeBillingAccess, type CommandCodeCommandDeps, type CommandCodeConnectionOptions, type CommandCodeLoginCredentials, type CommandCodeLoginFailureReason, CommandCodeLoginFlow, type CommandCodeLoginFlowDeps, type CommandCodeLoginStatus, type CommandCodeModelAccountRule, CommandCodeSearchProvider, type CommandCodeSearchProviderDeps, type CommandCodeSearchSelection, type CommandCodeTuiSettingsDeps, type CommandCodeUsageDeps, type CommandCodeUsageReport, CommandCodeUsageService, Config, DEFAULT_API_BASE, DEFAULT_GENERATE_MAX_TOKENS, DEFAULT_MAX_OUTPUT_TOKENS, DEFAULT_MODELS_CACHE_PATH, DEFAULT_REQUEST_TIMEOUT_MS, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_WEB_SEARCH_PROVIDER_ID, KNOWN_DEALS, KNOWN_EFFORTS, KNOWN_IMAGE_MODELS, KNOWN_PEAK_PRICING, KNOWN_PLANS, KNOWN_SUBSCRIPTION_PLANS, KNOWN_THINKING_MODELS, LANG_AUTO, LOGIN_ALLOWED_ORIGINS, LOGIN_BEGIN_ENDPOINT, LOGIN_BODY_LIMIT_BYTES, LOGIN_CANCEL_ENDPOINT, LOGIN_MAX_PORT_ATTEMPTS, LOGIN_START_PORT, LOGIN_STATUS_ENDPOINT, LOGIN_TIMEOUT_MS, type LoginFlowFacade, PLAN_LABELS, PLAN_ORDER, PROVIDER, type ResolveAttachments, ResolvedCommandCodeOptions, type TuiSettingsField, type TuiSettingsFieldOption, type TuiSettingsFieldWrite, type TuiSettingsGroup, type TuiSettingsSection, type TuiSettingsSectionsService, USAGE_REPORT_ENDPOINT, accountUsable, apply, applyCommandCodeSearchSelection, applyCommandCodeTuiSettings, applyCommands, applyUsageRemote, buildCommandAuthUrl, buildCommandCodeTuiSection, capabilityDescription, commandCodeSearchSelection, commandDefinition, compareByPlan, dealLabel, formatContext, inject, loginStatusSchema, matchModelRule, modelVisibleInPlan, name, parseLoginStatus, peakPricingLabel, peakPricingState, planLabel, projectSlugFromPath, resolveAdapterOptions, resolveAuthFileApiKey, selectAccountForModel, selectActiveAccount, selectCommandCodeSearchProvider, studioBaseForApiBase, subscriptionPlanInfo, usageReportSchema, validateCommandApiKey };
 //# sourceMappingURL=index.d.ts.map