@mars-sea/dsh-commandcode-provider 0.11.10 → 0.11.11

package/CHANGELOG.md

@@ -4,6 +4,14 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.11.11] - 2026-09-23
+
+### Fixed
+
+- **Saving account-rotation edits is visible on a long settings page** ([#60](https://github.com/Mars-Sea/dsh-commandcode-provider/issues/60)). The page's single global Save/Discard bar stays inside the settings panel, attached to the bottom of its scrolling area. A new account can be saved with only a label, then signed in through the same browser authorization flow as the default account; the Host writes the resulting key to that saved account's credential reference. Login attempts for different accounts cannot silently rejoin one another.
+
+- **Command Code responses remain readable when a DSH HTTP dispatcher passes through compressed bytes** ([#59](https://github.com/Mars-Sea/dsh-commandcode-provider/issues/59)). Host-side chat, account usage, catalog, web search, decision, and login requests now ask for `Accept-Encoding: identity`. This also lets a Go account's `403 upgrade_required` body reach the existing CLI-transport fallback. If every usage endpoint answers but its body still cannot be parsed, the account view reports an unreadable response instead of claiming that no request reached the server.
+
 ## [0.11.10] - 2026-09-23
 
 ### Added

package/README.md

@@ -54,7 +54,7 @@ Pick the release line that matches your DeepSeek Harness version:
 **pnpm 11 holds back new releases.** Its `minimumReleaseAge` defaults to 1440 minutes, so a version published less than a day ago is skipped and `@latest` resolves to the *previous* release — silently, with a success exit code. To install a release from the last 24 hours, name it exactly:
 
 ```sh
-dsh plugin --profile web add @mars-sea/dsh-commandcode-provider@0.11.9
+dsh plugin --profile web add @mars-sea/dsh-commandcode-provider@0.11.11
 ```
 
 The same applies to every profile you install into, including the terminal UI below.
@@ -73,7 +73,7 @@ dsh plugin --profile web update @mars-sea/dsh-commandcode-provider@0.9.1      #
 Each profile updates separately — the terminal UI owns its own plugin list (see below):
 
 ```sh
-dsh plugin --profile dsh-tui update @mars-sea/dsh-commandcode-provider@0.11.9
+dsh plugin --profile dsh-tui update @mars-sea/dsh-commandcode-provider@0.11.11
 ```
 
 To move to a version published less than 24 hours ago, name it exactly as in Install above; pnpm 11's age gate resolves `@latest` to the previous release instead.
@@ -102,7 +102,7 @@ After restart, enter your API key in **Settings → Command Code** and save; **S
 The plugin also works under a terminal front door. **Each dsh profile owns its own plugin list**, so the web install above does not reach the terminal — add the plugin to the `dsh-tui` profile as well:
 
 ```sh
-dsh plugin --profile dsh-tui add @mars-sea/dsh-commandcode-provider@0.11.9
+dsh plugin --profile dsh-tui add @mars-sea/dsh-commandcode-provider@0.11.11
 ```
 
 Pin the exact version here. For the first 24 hours after a release, a bare package name (or `@latest`) is silently resolved to the previous one: the install succeeds, but the profile gets the older build — which is how a fresh terminal install ends up with no **`/settings` → Command Code** page and no `commandcode` models at all.
@@ -156,7 +156,7 @@ The command's user-facing copy follows the shell's locale: explicit `lang: 'en'
 
 With several Command Code subscriptions, the plugin **switches to the next account automatically** when one hits its usage limit:
 
-- **Setup** — use the **Account rotation** card at Settings → **Command Code** to add accounts with a label and API key; the top-level key always serves first as the `default` account.
+- **Setup** — use the **Account rotation** card at Settings → **Command Code** to add an account and label it. Paste its API key, or use the page's global **Save** button, then **Sign in to Command Code** and open the authorization link shown on that account's row in a new browser tab. The global Save/Discard bar stays inside the settings panel, attached to the bottom of its scrolling area. The top-level key always serves first as the `default` account.
 - **Manual switching** — the **Active account** dropdown pins a preferred account; if it is exhausted, requests fall back to other accounts and return once its window resets.
 - **Route models to accounts** — the **Route models to accounts** card picks catalog models (multi-select, fetched from the live catalog) and routes them to an account. A request whose model is in a rule serves from that account while it is usable; an exhausted or invalid routed account falls back to the normal rotation. Rules match in list order — the first hit wins.
 - **Show only favorite models** — the **Model allowlist** card keeps only the checked models in the model picker; unchecked shows all (the default).

package/README.zh-CN.md

@@ -52,7 +52,7 @@
 **pnpm 11 会拦下刚发布的新版本。** 它的 `minimumReleaseAge` 默认为 1440 分钟，发布不足一天的版本会被跳过，`@latest` 解析到**上一个**版本 —— 而且是静默的，命令照样以成功退出。想装 24 小时内发布的版本，必须写精确版本号：
 
 ```sh
-dsh plugin --profile web add @mars-sea/dsh-commandcode-provider@0.11.9
+dsh plugin --profile web add @mars-sea/dsh-commandcode-provider@0.11.11
 ```
 
 这一点对每个 profile 都成立，包括下面的终端界面。
@@ -71,7 +71,7 @@ dsh plugin --profile web update @mars-sea/dsh-commandcode-provider@0.9.1      #
 每个 profile 各自更新 —— 终端界面有独立的插件列表（见下文）：
 
 ```sh
-dsh plugin --profile dsh-tui update @mars-sea/dsh-commandcode-provider@0.11.9
+dsh plugin --profile dsh-tui update @mars-sea/dsh-commandcode-provider@0.11.11
 ```
 
 要更新到发布不足 24 小时的版本，和上面的安装一样写精确版本号；pnpm 11 的年龄门禁会把 `@latest` 解析成上一个版本。
@@ -100,7 +100,7 @@ cmd login        # macOS/Linux；Windows 原生版：cmdc login
 插件同样支持终端前端。**每个 dsh profile 有独立的插件列表**，所以上面那条 Web 安装命令不会装到终端里 —— 还要把插件装进 `dsh-tui` profile：
 
 ```sh
-dsh plugin --profile dsh-tui add @mars-sea/dsh-commandcode-provider@0.11.9
+dsh plugin --profile dsh-tui add @mars-sea/dsh-commandcode-provider@0.11.11
 ```
 
 这里请写精确版本号。新版本发布后的 24 小时内，只写包名（或 `@latest`）会被静默解析到上一个版本 —— 安装命令照样成功，但 profile 里拿到的是旧版本，结果就是全新的终端安装里既没有 **`/settings` → Command Code** 页面，也看不到任何 `commandcode` 模型。
@@ -154,7 +154,7 @@ cmd login                               # 写入 ~/.commandcode/auth.json
 
 有多个 Command Code 订阅时，插件可以在一个账户达到用量限额后**自动切换到下一个账户**：
 
-- **配置**：在 **设置 → Command Code** 的「多账户轮换」卡片添加账户并填写备注名与 API key；顶层 key 始终是第一顺位的 `default` 账户。
+- **配置**：在 **设置 → Command Code** 的「多账户轮换」卡片添加账户并填写备注名。可直接填写 API key，或先点击页面底部的全局「保存」，再在该账户行点击「登录 Command Code」并打开出现的授权链接，在新网页授权获取 key；全局「放弃 / 保存」操作栏在设置面板内部随滚动吸附于底部。顶层 key 始终是第一顺位的 `default` 账户。
 - **手动切换**：卡片上的「当前使用账户」下拉框可指定优先账户；所选账户耗尽时自动回落到其他账户，窗口重置后自动恢复。
 - **按模型切换账户**：在「按模型切换账户」卡片从实时模型目录**多选**模型并固定到某个账户。请求的模型在规则列表中且该账户可用时使用该账户；账户耗尽或密钥失效时自动回落到常规轮换。规则按列表顺序匹配，第一条命中生效。
 - **只显示常用模型**：在「模型白名单」卡片勾选要保留的模型，模型选择器只列出这些；不勾选则显示全部（默认行为不变）。

package/lib/client.js

@@ -1803,6 +1803,21 @@ window.__ModuleLoader__.load({
 		};
 		//#endregion
 		//#region src/client/login.ts
+		/** Keep one account's login status out of every other account's row. */
+		function loginStateForTarget(state, targetRef) {
+			if (state.targetRef === targetRef) return {
+				visible: state,
+				busyElsewhere: false
+			};
+			return {
+				visible: {
+					...state,
+					phase: "idle",
+					authUrl: void 0
+				},
+				busyElsewhere: state.phase === "starting" || state.phase === "waiting"
+			};
+		}
 		/** How often a live attempt is polled. */
 		const POLL_INTERVAL_MS = 1e3;
 		/**
@@ -1817,6 +1832,7 @@ window.__ModuleLoader__.load({
 			generation = 0;
 			disposed = false;
 			phase = "idle";
+			targetRef;
 			authUrl;
 			userName;
 			keyName;
@@ -1835,6 +1851,7 @@ window.__ModuleLoader__.load({
 			state() {
 				return {
 					phase: this.phase,
+					...this.targetRef === void 0 ? {} : { targetRef: this.targetRef },
 					authUrl: this.authUrl,
 					userName: this.userName,
 					keyName: this.keyName,
@@ -1843,9 +1860,10 @@ window.__ModuleLoader__.load({
 				};
 			}
 			/** Start (or rejoin) a login attempt and begin polling its status. */
-			async begin() {
+			async begin(targetRef) {
 				if (this.disposed || this.phase === "starting" || this.phase === "waiting") return;
 				const generation = ++this.generation;
+				this.targetRef = targetRef;
 				this.set({
 					phase: "starting",
 					authUrl: void 0,
@@ -1868,7 +1886,7 @@ window.__ModuleLoader__.load({
 				}
 				let result;
 				try {
-					result = await remote.loginBegin();
+					result = await remote.loginBegin(targetRef);
 				} catch (error) {
 					result = {
 						ok: false,
@@ -2106,6 +2124,15 @@ window.__ModuleLoader__.load({
 				booleanField
 			};
 		}
+		/** Use the same strict-codec shape for invocation parameters and results. */
+		function makeStrictCodec(typeSymbol, schema) {
+			return {
+				mode: "strict",
+				typeSymbol,
+				schema,
+				create: () => schema
+			};
+		}
 		/**
 		* Build one strict invocation descriptor. Every Command Code Remote shares the
 		* `commandcode` namespace, the `commandcodeUsage` service, and a strict
@@ -2114,12 +2141,7 @@ window.__ModuleLoader__.load({
 		* only its own facts.
 		*/
 		function makeRemoteDescriptor(endpoint, method, typeSymbol, schema) {
-			const result = {
-				mode: "strict",
-				typeSymbol,
-				schema,
-				create: () => schema
-			};
+			const result = makeStrictCodec(typeSymbol, schema);
 			return {
 				id: `${REMOTE_PACKAGE}#${endpoint}`,
 				service: REMOTE_SERVICE,
@@ -2172,7 +2194,7 @@ window.__ModuleLoader__.load({
 			const report = { failures };
 			if (source.blocked !== void 0) {
 				const blocked = source.blocked;
-				if (blocked === "invalid-key" || blocked === "service-unavailable" || blocked === "network") report.blocked = blocked;
+				if (blocked === "invalid-key" || blocked === "service-unavailable" || blocked === "invalid-response" || blocked === "network") report.blocked = blocked;
 				else reject$1("blocked");
 			}
 			if (source.account !== void 0) {
@@ -2388,9 +2410,24 @@ window.__ModuleLoader__.load({
 		}
 		/** The strict result codec shared by all three login endpoints. */
 		const loginStatusSchema = { parse: parseLoginStatus };
-		/** Build one login invocation descriptor (uniform result, no parameters). */
+		/** Optional account target; the Host still checks it against saved slots. */
+		const loginTargetSchema = { parse(value) {
+			if (value === void 0 || typeof value === "string") return value;
+			return reject("targetRef");
+		} };
+		/** Build one login invocation descriptor. Only begin accepts an account ref. */
 		function loginDescriptor(endpoint, method) {
-			return makeRemoteDescriptor(endpoint, method, `${REMOTE_PACKAGE}#CommandCodeLoginStatus`, loginStatusSchema);
+			const descriptor = makeRemoteDescriptor(endpoint, method, `${REMOTE_PACKAGE}#CommandCodeLoginStatus`, loginStatusSchema);
+			return method === "loginBegin" ? {
+				...descriptor,
+				parameters: [{
+					name: "targetRef",
+					wire: "targetRef",
+					source: "json",
+					codec: makeStrictCodec(`${REMOTE_PACKAGE}#CommandCodeLoginTargetRef`, loginTargetSchema),
+					acceptsUndefined: true
+				}]
+			} : descriptor;
 		}
 		/** The Client-face contribution fragment mounted on `ctx.remote`. */
 		const LOGIN_REMOTE_CONTRIBUTION = {
@@ -2404,9 +2441,10 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/client/login-row.tsx
 		/** The sign-in alternative to pasting a key (settings page + Models card). */
-		function LoginRow({ state, disabled, t, onBegin, onCancel }) {
-			const busy = state.phase === "starting" || state.phase === "waiting";
-			const hint = loginHint(state, t);
+		function LoginRow({ state, targetRef, disabled, disabledHint, t, onBegin, onCancel }) {
+			const { visible: visibleState, busyElsewhere } = loginStateForTarget(state, targetRef);
+			const busy = visibleState.phase === "starting" || visibleState.phase === "waiting";
+			const hint = loginHint(visibleState, t);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "cc-field",
 				children: [
@@ -2425,17 +2463,17 @@ window.__ModuleLoader__.load({
 							}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
 								className: "cc-reset",
-								disabled,
+								disabled: disabled || busyElsewhere,
 								onClick: onBegin,
 								children: t("loginButton")
 							})
 						})]
 					}),
-					state.authUrl !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+					visibleState.authUrl !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						className: "cc-hint",
 						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
 							className: "cc-loginLink",
-							href: state.authUrl,
+							href: visibleState.authUrl,
 							target: "_blank",
 							rel: "noreferrer",
 							children: t("loginOpenLink")
@@ -2444,7 +2482,7 @@ window.__ModuleLoader__.load({
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						className: hint.className,
 						title: hint.title,
-						children: hint.text
+						children: disabled && !busy && disabledHint !== void 0 ? disabledHint : hint.text
 					})
 				]
 			});
@@ -2593,7 +2631,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region package.json
-		var version = "0.11.10";
+		var version = "0.11.11";
 		var repository = {
 			"type": "git",
 			"url": "git+https://github.com/Mars-Sea/dsh-commandcode-provider.git"
@@ -3398,12 +3436,14 @@ window.__ModuleLoader__.load({
 		function blockedTitle(reason, t) {
 			if (reason === "invalid-key") return t("usageKeyInvalid");
 			if (reason === "service-unavailable") return t("usageServiceUnavailable");
+			if (reason === "invalid-response") return t("usageInvalidResponse");
 			return t("usageNetworkError");
 		}
 		/** The actionable hint under a blocked report's headline. */
 		function blockedHint(reason, t) {
 			if (reason === "invalid-key") return t("usageKeyInvalidHint");
 			if (reason === "service-unavailable") return t("usageServiceUnavailableHint");
+			if (reason === "invalid-response") return t("usageInvalidResponseHint");
 			return t("usageNetworkHint");
 		}
 		/** The status dot on an account tab: cooling/invalid warn, everything else ok. */
@@ -3594,7 +3634,7 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/** The multi-account card: the active-account selector + extra accounts in rotation order + add button. */
-		function AccountsCard({ t, state, disabled, onAdd, onRemove, onLabel, onKey, onToggleClear, onActive, onActiveReset }) {
+		function AccountsCard({ t, state, login, disabled, onAdd, onRemove, onLabel, onKey, onToggleClear, onActive, onActiveReset, onBeginLogin, onCancelLogin }) {
 			const active = state.activeAccount;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "cc-card",
@@ -3672,14 +3712,31 @@ window.__ModuleLoader__.load({
 							})
 						]
 					}),
-					state.accounts.map((account) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountRow, {
-						account,
-						disabled,
-						t,
-						onLabel: (text) => onLabel(account.id, text),
-						onKey: (text) => onKey(account.id, text),
-						onToggleClear: () => onToggleClear(account.id),
-						onRemove: () => onRemove(account.id)
+					state.accounts.map((account) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "cc-accountEditor",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountRow, {
+							account,
+							disabled: disabled || login.targetRef === account.ref && (login.phase === "starting" || login.phase === "waiting"),
+							t,
+							onLabel: (text) => onLabel(account.id, text),
+							onKey: (text) => onKey(account.id, text),
+							onToggleClear: () => onToggleClear(account.id),
+							onRemove: () => onRemove(account.id)
+						}), account.added ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							className: "cc-accountLoginHint",
+							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "cc-hint",
+								children: t("accountLoginAfterSave")
+							})
+						}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(LoginRow, {
+							state: login,
+							targetRef: account.ref,
+							disabled: disabled || !account.writable || state.dirty,
+							disabledHint: state.dirty ? t("loginSaveBefore") : void 0,
+							t,
+							onBegin: () => onBeginLogin(account.ref),
+							onCancel: onCancelLogin
+						})]
 					}, account.id))
 				]
 			});
@@ -3991,6 +4048,8 @@ window.__ModuleLoader__.load({
 		/** The settings page body: connection facts for the Command Code provider. */
 		function CommandCodeSettingsPage(props) {
 			const { t } = props;
+			const footerMarker = (0, react.useRef)(null);
+			const [footerFloating, setFooterFloating] = (0, react.useState)(false);
 			const state = props.useCommandCodeSettings((snapshot) => snapshot);
 			const usage = props.useCommandCodeUsage((snapshot) => snapshot);
 			const login = props.useCommandCodeLogin((snapshot) => snapshot);
@@ -3998,6 +4057,15 @@ window.__ModuleLoader__.load({
 			const keyLocked = !state.apiKeyWritable;
 			const savedVisible = useSavedFlash(state.savedCount);
 			const updateVersion = usePluginUpdate();
+			(0, react.useEffect)(() => {
+				const marker = footerMarker.current;
+				if (!marker || typeof IntersectionObserver === "undefined") return;
+				const observer = new IntersectionObserver(([entry]) => {
+					if (entry) setFooterFloating(!entry.isIntersecting);
+				});
+				observer.observe(marker);
+				return () => observer.disconnect();
+			}, []);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 				className: "cc-section",
 				"aria-label": t("title"),
@@ -4027,6 +4095,7 @@ window.__ModuleLoader__.load({
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountsCard, {
 						t,
 						state,
+						login,
 						disabled,
 						onAdd: props.addAccount,
 						onRemove: props.removeAccount,
@@ -4034,7 +4103,9 @@ window.__ModuleLoader__.load({
 						onKey: props.editAccountKey,
 						onToggleClear: (id) => props.toggleKeyClear(id),
 						onActive: (text) => props.edit("activeAccount", text),
-						onActiveReset: () => props.resetField("activeAccount")
+						onActiveReset: () => props.resetField("activeAccount"),
+						onBeginLogin: props.beginLogin,
+						onCancelLogin: props.cancelLogin
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(RulesCard, {
 						t,
@@ -4058,7 +4129,7 @@ window.__ModuleLoader__.load({
 							label: t("apiKey"),
 							hint: keyLocked ? t("apiKeyLocked") : t("apiKeyHint"),
 							state: state.apiKey,
-							disabled: disabled || keyLocked,
+							disabled: disabled || keyLocked || login.targetRef === void 0 && (login.phase === "starting" || login.phase === "waiting"),
 							configured: state.apiKeyConfigured,
 							configuredLabel: t("apiKeySet"),
 							unconfiguredLabel: t("apiKeyUnset"),
@@ -4072,7 +4143,8 @@ window.__ModuleLoader__.load({
 							onToggleClear: () => props.toggleKeyClear("default")
 						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(LoginRow, {
 							state: login,
-							disabled: disabled || keyLocked,
+							disabled: disabled || keyLocked || state.dirty,
+							disabledHint: state.dirty ? t("loginSaveBefore") : void 0,
 							t,
 							onBegin: props.beginLogin,
 							onCancel: props.cancelLogin
@@ -4085,34 +4157,42 @@ window.__ModuleLoader__.load({
 						onEdit: props.edit,
 						onReset: props.resetField
 					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "cc-footer",
-						children: [
-							state.failed ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-								className: "cc-failed",
-								role: "status",
-								children: t("saveFailed")
-							}) : null,
-							savedVisible ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-								className: "cc-saved",
-								role: "status",
-								children: t("saved")
-							}) : null,
-							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
-								variant: "ghost",
-								size: "sm",
-								disabled: !state.dirty || state.saving,
-								onClick: props.discard,
-								children: t("discard")
-							}),
-							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
-								variant: "primary",
-								size: "sm",
-								disabled: !state.dirty || state.invalid || state.saving,
-								onClick: props.save,
-								children: t(state.saving ? "saving" : "save")
-							})
-						]
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						ref: footerMarker,
+						className: "cc-footerMarker",
+						"aria-hidden": "true"
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: `cc-footer cc-footerSticky${footerFloating ? " cc-footerFloating" : ""}`,
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "cc-footerActions",
+							children: [
+								state.failed ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: "cc-failed",
+									role: "status",
+									children: t("saveFailed")
+								}) : null,
+								savedVisible ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: "cc-saved",
+									role: "status",
+									children: t("saved")
+								}) : null,
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+									variant: "ghost",
+									size: "sm",
+									disabled: !state.dirty || state.saving,
+									onClick: props.discard,
+									children: t("discard")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+									variant: "primary",
+									size: "sm",
+									disabled: !state.dirty || state.invalid || state.saving,
+									onClick: props.save,
+									children: t(state.saving ? "saving" : "save")
+								})
+							]
+						})
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
 						className: "cc-version",
@@ -4399,6 +4479,8 @@ window.__ModuleLoader__.load({
 			errorServiceUnavailableHint: "服务端返回错误（5xx），请稍后点击刷新重试。",
 			errorNetwork: "无法连接 Command Code 服务",
 			errorNetworkHint: "所有请求都没有到达服务端。请检查网络连接或 API 地址设置。",
+			errorInvalidResponse: "Command Code 响应无法读取",
+			errorInvalidResponseHint: "请求已收到响应，但内容无法解析。请检查宿主的 HTTP 代理或响应解压配置。",
 			errorGeneric: "用量获取失败"
 		};
 		/** The panel's English string table (must mirror {@link PANEL_COPY_ZH}). */
@@ -4451,6 +4533,8 @@ window.__ModuleLoader__.load({
 			errorServiceUnavailableHint: "The server returned errors (5xx). Try Refresh again in a moment.",
 			errorNetwork: "Could not reach the Command Code service",
 			errorNetworkHint: "No request reached the server. Check your network connection or the API base setting.",
+			errorInvalidResponse: "Could not read the Command Code response",
+			errorInvalidResponseHint: "The requests received responses, but their bodies could not be parsed. Check the host HTTP proxy or response decoding.",
 			errorGeneric: "Could not fetch account usage"
 		};
 		/** Every panel key, in the English table's declaration order. */
@@ -4631,6 +4715,11 @@ window.__ModuleLoader__.load({
 				hint: "errorNetworkHint",
 				detail
 			};
+			if (blocked === "invalid-response") return {
+				title: "errorInvalidResponse",
+				hint: "errorInvalidResponseHint",
+				detail
+			};
 			if (state.status === "error" && state.report === void 0) return {
 				title: "errorGeneric",
 				hint: "errorGeneric",
@@ -6235,6 +6324,13 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 .cc-advancedBody>.cc-field:first-of-type{border-top:1px solid var(--dsw-alias-border-l2)}
 .cc-hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}
 .cc-footer{justify-content:flex-end;align-items:center;gap:8px;display:flex}
+/* Keep the original footer in flow and inside the settings scrollport. */
+.cc-footerMarker{height:1px;margin:-6px 0 -7px;pointer-events:none}
+.cc-footerSticky{position:sticky;bottom:0;z-index:2;flex-shrink:0;min-height:48px;pointer-events:none}
+.cc-footerActions{align-items:center;gap:8px;display:flex;pointer-events:auto}
+.cc-footerFloating .cc-footerActions{padding:6px;border:1px solid var(--dsw-alias-border-l2);border-radius:12px;background:var(--dsw-alias-bg-layer-3,var(--dsw-alias-bg-layer-2));box-shadow:0 8px 24px rgba(0,0,0,.12)}
+.cc-accountEditor{border-top:1px solid var(--dsw-alias-border-l2)}
+.cc-accountLoginHint{padding:0 0 12px}
 .cc-toggleRow{align-items:center;gap:8px;cursor:pointer;display:flex}
 .cc-toggleRow:has(.cc-toggle:disabled){cursor:default}
 .cc-toggle{appearance:none;flex-shrink:0;background:var(--dsw-alias-border-l2);border-radius:999px;width:30px;height:18px;margin:0;cursor:pointer;position:relative;transition:background .15s ease}
@@ -6526,6 +6622,7 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			accountLabel: "账户备注名",
 			accountKey: "API 密钥",
 			accountKeyHint: "该账户的 API 密钥。留空保存不会覆盖已存储的密钥。",
+			accountLoginAfterSave: "先点击页面底部的「保存」，再点击该账户的「登录 Command Code」通过网页获取密钥。",
 			accountDefault: "默认账户",
 			activeAccount: "当前使用账户",
 			activeAccountAuto: "自动（第一个可用账户）",
@@ -6596,6 +6693,8 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			usageServiceUnavailableHint: "服务端返回了错误（5xx），稍后点击刷新重试。",
 			usageNetworkError: "无法连接 Command Code 服务",
 			usageNetworkHint: "所有请求都没有到达服务端。请检查网络连接或 API 地址设置。",
+			usageInvalidResponse: "Command Code 响应无法读取",
+			usageInvalidResponseHint: "请求已收到响应，但内容无法解析。请检查宿主的 HTTP 代理或响应解压配置。",
 			usageUpdated: "更新于",
 			usagePeriodEnd: "账期截止",
 			usageActive: "当前使用",
@@ -6606,6 +6705,7 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			updateHint: "已发布新版本，点击查看发布说明；更新插件后刷新本页，提示会自动消失。",
 			loginTitle: "通过官方登录获取密钥",
 			loginHintIdle: "不想手动创建密钥？点击登录后浏览器会打开 commandcode.ai 授权页，完成后密钥自动写入本机凭据服务，下次请求即生效。",
+			loginSaveBefore: "请先保存本页更改，再通过网页登录此账户。",
 			loginButton: "登录 Command Code",
 			loginStarting: "正在启动本地回调服务…",
 			loginWaiting: "等待在浏览器中完成授权…",
@@ -6670,6 +6770,7 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			accountLabel: "Account label",
 			accountKey: "API key",
 			accountKeyHint: "This account’s API key. Saving with the field blank keeps the stored key.",
+			accountLoginAfterSave: "Use Save at the bottom of the page, then sign in to this account in your browser to obtain a key.",
 			accountDefault: "Default account",
 			activeAccount: "Active account",
 			activeAccountAuto: "Auto (first usable account)",
@@ -6740,6 +6841,8 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			usageServiceUnavailableHint: "The server returned errors (5xx); try Refresh again later.",
 			usageNetworkError: "Could not reach the Command Code service",
 			usageNetworkHint: "No request reached the server. Check your network connection or the API base setting.",
+			usageInvalidResponse: "Could not read the Command Code response",
+			usageInvalidResponseHint: "The requests received responses, but their bodies could not be parsed. Check the host HTTP proxy or response decoding.",
 			usageUpdated: "Updated",
 			usagePeriodEnd: "Period ends",
 			usageActive: "Active",
@@ -6750,6 +6853,7 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			updateHint: "A newer version has been published; click for release notes. The notice disappears once the plugin is updated.",
 			loginTitle: "Sign in to fetch a key",
 			loginHintIdle: "Rather not create a key by hand? Sign in and your browser opens the commandcode.ai authorization page; the approved key is stored in the local credential service and applies to the next request.",
+			loginSaveBefore: "Save page changes before signing in to this account.",
 			loginButton: "Sign in to Command Code",
 			loginStarting: "Starting the local callback server…",
 			loginWaiting: "Waiting for authorization in your browser…",
@@ -6964,12 +7068,12 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			const pricesStore = createSnapshotStore(pricesController.state());
 			pricesController.subscribe(() => pricesStore.set(pricesController.state()));
 			const loginRemote = {
-				loginBegin: async () => {
+				loginBegin: async (targetRef) => {
 					if (usageNamespace === void 0) return {
 						ok: false,
 						error: { message: usageMountError ?? "commandcode remote is not mounted" }
 					};
-					return usageNamespace.loginBegin();
+					return usageNamespace.loginBegin(targetRef);
 				},
 				loginStatus: async () => {
 					if (usageNamespace === void 0) return {
@@ -7013,7 +7117,7 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 				}),
 				discard: () => controller.discard(),
 				refreshUsage: () => void usageController.refresh(),
-				beginLogin: () => void loginController.begin(),
+				beginLogin: (targetRef) => void loginController.begin(targetRef),
 				cancelLogin: () => void loginController.cancel(),
 				addAccount: () => controller.addAccount(),
 				removeAccount: (id) => controller.removeAccount(id),