@mars-sea/dsh-commandcode-provider 0.11.10 → 0.11.12

package/lib/index.js

@@ -2,8 +2,7 @@ import { homedir, tmpdir } from "node:os";
 import { dirname, join } from "node:path";
 import z from "@deepseek-ai/schemastery";
 import { MAX_TIMER_DELAY_MS } from "@deepseek-ai/dsh-timeout";
-import * as dshLlm from "@deepseek-ai/dsh-llm";
-import { CONTEXT_WINDOW_EXCEEDED_CODE, LlmAdapter, LlmError, ReasoningEffortId, ToolCallId, assertUsableApiKey, attributionHeaders, errorChain, isContextWindowExceededError, offloadedImageText, resolveRetryPolicy, textOnlyImageText } from "@deepseek-ai/dsh-llm";
+import { CONTEXT_WINDOW_EXCEEDED_CODE, IMAGE_OFFLOAD_REQUIRED_CODE, LlmAdapter, LlmError, ReasoningEffortId, ToolCallId, assertUsableApiKey, attributionHeaders, errorChain, isContextWindowExceededError, offloadedImageText, projectOffloadedImages, requiredImageOffload, resolveRetryPolicy, textOnlyImageText } from "@deepseek-ai/dsh-llm";
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
 import { launchEnvironmentOf } from "@deepseek-ai/dsh-launch-environment";
 import { appendFileSync, existsSync, mkdirSync, readFileSync } from "node:fs";
@@ -309,6 +308,11 @@ const KNOWN_EFFORTS = {
 		"low",
 		"medium",
 		"high"
+	],
+	"stealth/space-bunny-alpha": [
+		"low",
+		"medium",
+		"high"
 	]
 };
 /**
@@ -374,6 +378,7 @@ const KNOWN_IMAGE_MODELS = /* @__PURE__ */ new Set([
 	"moonshotai/Kimi-K2.7-Code-Highspeed",
 	"moonshotai/Kimi-K3",
 	"sakana/fugu-ultra",
+	"stealth/space-bunny-alpha",
 	"stepfun/Step-3.7-Flash",
 	"stepfun/Step-5-Preview",
 	"thinkingmachines/inkling",
@@ -390,7 +395,7 @@ const KNOWN_IMAGE_MODELS = /* @__PURE__ */ new Set([
 ]);
 /**
 * Models WITHOUT a zero-data-retention upstream, per the official CLI's own
-* registry (`command-code@1.64.0` `dist/cli.mjs`: `modelSupportsZdr(id)` is
+* registry (`command-code@1.65.0` `dist/cli.mjs`: `modelSupportsZdr(id)` is
 * exactly `!nonZdrSet.has(canonicalize(id))`, and `knownModelSupportsZdr`
 * carries the same membership in the sibling route table — the union is this
 * set). The official docs (commandcode.ai/docs/resources/zdr) put it in prose
@@ -416,9 +421,12 @@ const KNOWN_IMAGE_MODELS = /* @__PURE__ */ new Set([
 * is the snapshot of the exclusion set and nothing more. The 1.62.0 → 1.64.0
 * diff of that union is EMPTY: both anchors were extracted from both bundles
 * during the 2026-09-23 check and each carries the same 20 members — which is
-* how rare a change here is expected to be. `meituan/LongCat-2.0` is the one
-* member the two anchors disagree about (it is in `modelSupportsZdr`'s set in
-* both releases and in neither `knownModelSupportsZdr` set), so the union is
+* how rare a change here is expected to be. The 1.64.0 → 1.65.0 diff (2026-09-24)
+* is the counterexample that proves the check still runs: exactly one member
+* joins (`stealth/space-bunny-alpha`), and it is in both anchors. `meituan/
+* LongCat-2.0` is the one member the two anchors disagree about (it is in
+* `modelSupportsZdr`'s set in both releases and in neither `knownModelSupportsZdr`
+* set), so the union is
 * what this table follows; reading only the sibling route table would drop it.
 */
 const KNOWN_NON_ZDR_MODELS = /* @__PURE__ */ new Set([
@@ -433,6 +441,7 @@ const KNOWN_NON_ZDR_MODELS = /* @__PURE__ */ new Set([
 	"minimax/minimax-m3-free",
 	"poolside/laguna-s-2.1-free",
 	"sakana/fugu-ultra",
+	"stealth/space-bunny-alpha",
 	"stepfun/Step-3.7-Flash",
 	"stepfun/Step-5-Preview",
 	"xai/grok-4.5",
@@ -565,7 +574,11 @@ function requiresMessagesEndpoint(modelId) {
 * and 1.60.0 added `stepfun/Step-5-Preview` (Go); command-code@1.62.0 added the
 * MiMo V2.6 family — `xiaomi/mimo-v2.6-flash` + `xiaomi/mimo-v2.6-pro` (Go) and
 * `xiaomi/mimo-v2.6-pro-ultraspeed` (GOAT) — so the 1.58.0 -> 1.62.0 window's
-* only tier changes are additions and the superset chain still holds.
+* only tier changes are additions and the superset chain still holds. The
+* 1.62.0 -> 1.65.0 window continues the pattern: 1.64.0 added
+* `claude-opus-5-5` (Provider/Max), `gpt-6-sol` (Pro) and `gpt-6-luna` (Go),
+* and 1.65.0 added `stealth/space-bunny-alpha` (Go, every tier) — additions
+* only, no tier moves.
 *
 * The Provider API exposes no plan metadata, so this snapshot is the source of
 * truth for the picker's plan annotation — it answers "which plan do I need to
@@ -610,6 +623,7 @@ const KNOWN_PLANS = {
 	"stepfun/Step-3.5-Flash": "go",
 	"stepfun/Step-3.7-Flash": "go",
 	"stepfun/Step-5-Preview": "go",
+	"stealth/space-bunny-alpha": "go",
 	"tencent/hy3-paid": "go",
 	"tencent/hy4-preview": "go",
 	"thinkingmachines/inkling": "go",
@@ -817,6 +831,10 @@ const KNOWN_DEALS = {
 	"inclusionai/ling-3.0-flash-sante:free": {
 		label: "FREE",
 		free: true
+	},
+	"stealth/space-bunny-alpha": {
+		label: "FREE",
+		free: true
 	}
 };
 /**
@@ -2135,6 +2153,14 @@ function installCostProjection(ctx) {
 	});
 }
 //#endregion
+//#region src/response-encoding.ts
+/**
+* Ask Command Code for plain response bodies. A DSH host using an incompatible
+* undici global dispatcher can lose response headers and leave compressed
+* JSON, SSE, and pre-stream error bodies undecoded.
+*/
+const IDENTITY_ENCODING_HEADER = { "accept-encoding": "identity" };
+//#endregion
 //#region src/accounts.ts
 /**
 * Multi-account pool for the Command Code provider (host side).
@@ -2592,9 +2618,11 @@ const REQUEST_IMAGE_MAX_ENCODED_BYTES = 1048576;
 * never returns a zero dimension (a 1-px degenerate side is what the round of
 * an extreme aspect ratio can produce, and a 0 would make the encoder refuse).
 *
-* A local restatement of the helper 0.1.6 exports from `dsh-attachment`, which
-* 0.1.2–0.1.5 do not have; the math is the whole contract, so keeping the copy
-* here costs less than a version probe would.
+* `dsh-attachment` exports an equivalent `longEdgeDimensions`, but it does not
+* guard its inputs: a reference whose declared size is 0 or NaN — a malformed
+* or fabricated attachment record — would project to a zero-sized target and
+* make the encoder refuse the whole request. The guard is the reason this stays
+* local; `tests/image-tokens.test.ts` pins the degenerate cases.
 */
 function longEdgeDimensions(width, height, longEdge) {
 	if (!Number.isFinite(width) || !Number.isFinite(height) || width <= 0 || height <= 0) return {
@@ -2615,16 +2643,11 @@ function longEdgeDimensions(width, height, longEdge) {
 }
 /**
 * The request target for one normalized attachment: its aspect ratio under the
-* long-edge budget, plus the byte budget every generation honours.
-*
-* The area is computed from the PROJECTED dimensions rather than the source's,
-* so ≤0.1.5's own pixel projection lands on the same geometry instead of
-* re-deriving a slightly different one from the original.
+* long-edge budget, plus the encoded-byte budget.
 */
 function requestImageTarget(ref) {
 	const projected = longEdgeDimensions(ref.width, ref.height, REQUEST_IMAGE_MAX_LONG_EDGE);
 	return {
-		maxPixels: projected.width * projected.height,
 		width: projected.width,
 		height: projected.height,
 		maxBytes: REQUEST_IMAGE_MAX_ENCODED_BYTES
@@ -2994,7 +3017,7 @@ function openStreamTrace(scope, options = {}) {
 * per-request options thunk and an API-key resolver from the plugin entry
 * (src/index.ts), so a settings change reaches the very next request.
 */
-const COMMAND_CODE_CLI_VERSION = "1.64.0";
+const COMMAND_CODE_CLI_VERSION = "1.65.0";
 const DEFAULT_API_BASE = "https://api.commandcode.ai";
 const DEFAULT_GENERATE_MAX_TOKENS = 64e3;
 const DEFAULT_MAX_OUTPUT_TOKENS = 65536;
@@ -3375,32 +3398,24 @@ async function writeModelsCache(cachePath, models) {
 	}
 }
 /**
-* >=0.1.7 puts toolCallId/isError on a role:'tool' message and carries raw
-* content blocks. Older engines wrap those fields in the first tool-result
-* block of a role:'user' message. Read structurally so the bundle still builds
-* and loads against older peers. Pairing and emission MUST use this same view:
-* otherwise a dropped result either drops its call too (making the model
-* forget completed work), or leaves an unanswered call on the wire.
+* The tool result one message answers, or undefined when it answers none.
 *
-* For the legacy envelope a present source tag remains authoritative; an
-* absent tag falls back to the first block (issue #47). The modern role is
-* itself the discriminator, as it is for the Harness's own serializers.
+* The harness models a tool result as its own `role: 'tool'` message carrying
+* `toolCallId`/`isError` beside raw content blocks (a closed role map:
+* `MessageRoleMap.tool` is the only role a tool result can arrive on). Pairing
+* and emission MUST agree on this same view: otherwise a dropped result either
+* drops its call too (making the model forget completed work), or leaves an
+* unanswered call on the wire.
 */
 function toolResultOf(message) {
-	const current = message;
-	if (current.role === "tool") {
-		if (typeof current.toolCallId !== "string" || current.toolCallId === "") return void 0;
-		return {
-			toolCallId: current.toolCallId,
-			isError: current.isError ?? false,
-			content: current.content
-		};
-	}
-	if (message.role !== "user") return void 0;
-	const kind = message.source?.kind;
-	if (kind !== void 0 && kind !== "tool") return void 0;
-	const block = message.content[0];
-	return block?.type === "tool-result" ? block : void 0;
+	if (message.role !== "tool") return void 0;
+	const { toolCallId, content } = message;
+	if (typeof toolCallId !== "string" || toolCallId === "") return void 0;
+	return {
+		toolCallId,
+		isError: message.isError ?? false,
+		content
+	};
 }
 /**
 * Collect the tool calls that have a paired tool result, plus each call's
@@ -3473,23 +3488,16 @@ function toolResultMedia(block) {
 	const chunks = [];
 	const images = [];
 	const seen = /* @__PURE__ */ new Set();
-	const walk = (blocks) => {
-		for (const nested of blocks) {
-			if (nested.type === "text" || nested.type === "reasoning") {
-				if (nested.text) chunks.push(nested.text);
-				continue;
-			}
-			if (nested.type === "image") {
-				if (!seen.has(nested.attachment.attachmentId)) {
-					seen.add(nested.attachment.attachmentId);
-					images.push(nested.attachment);
-				}
-				continue;
-			}
-			if (nested.type === "tool-result") walk(nested.content);
+	for (const nested of block.content) {
+		if (nested.type === "text" || nested.type === "reasoning") {
+			if (nested.text) chunks.push(nested.text);
+			continue;
 		}
-	};
-	walk(block.content);
+		if (nested.type === "image" && !seen.has(nested.attachment.attachmentId)) {
+			seen.add(nested.attachment.attachmentId);
+			images.push(nested.attachment);
+		}
+	}
 	return {
 		text: chunks.join("\n"),
 		images
@@ -3534,8 +3542,7 @@ function toolResultImageNote(media, toolCallId) {
 	return `${lead} ${media.images.length > 1 ? `${media.images.length} images, ` : ""}${dimensions}`;
 }
 function hasImageContent(message) {
-	const check = (blocks) => blocks.some((b) => b.type === "image" || b.type === "tool-result" && check(b.content));
-	return check(message.content);
+	return message.content.some((block) => block.type === "image");
 }
 /** The budget ladder: the primary rung first, the 413 eviction rung second. */
 const REQUEST_IMAGE_BUDGETS = [{
@@ -3549,68 +3556,13 @@ const REQUEST_IMAGE_BUDGETS = [{
 	byteQuantum: 8388608,
 	countQuantum: 12
 }];
+/** The engine's own helpers: what a process that injects nothing speaks. */
+const ENGINE_IMAGE_POLICY = {
+	projectOffloadedImages,
+	requiredImageOffload
+};
 /**
-* Project request history under one image budget (≤0.1.5 engines only): the
-* oldest images past it become placeholder text in place, the newest keep their
-* bytes, and a history already inside the budget is returned as the SAME array
-* — the caller uses that identity to tell "nothing evicted" from "evicted".
-*
-* Nested tool-result images ride the same core walk, which is exactly right
-* for this adapter: an evicted `read_image` result surfaces its placeholder as
-* the tool message's own text, so no carrier user message is emitted for it.
-*/
-function projectRequestImages(messages, budget, policy) {
-	const offload = policy.offloadRequestImagesWithPolicy;
-	if (typeof offload !== "function") return messages;
-	return offload(messages, {
-		representation: "base64",
-		maxBytes: budget.maxBytes,
-		maxImages: budget.maxImages,
-		byteQuantum: budget.byteQuantum,
-		countQuantum: budget.countQuantum,
-		placeholder: (ref) => offloadedImageText(ref)
-	});
-}
-/**
-* The request options one budget produced: the caller's own object when the
-* history was already inside the budget, else a copy carrying the projection.
-* The next rung of the ladder is applied to the CURRENT projection, never to
-* the raw history — otherwise a retry could reintroduce images the first rung
-* had already evicted.
-*/
-function withImageBudget(options, budget, policy) {
-	const projected = projectRequestImages(options.messages, budget, policy);
-	return projected === options.messages ? options : {
-		...options,
-		messages: [...projected]
-	};
-}
-/**
-* Stable provider-neutral code for "a request still carries more images than
-* this route will send; offload N of them and retry". Declared locally rather
-* than imported: the constant does not exist on the 0.1.2–0.1.5 peers this
-* plugin still supports, and importing it statically is the link-time failure
-* described above the budget constants.
-*/
-const IMAGE_OFFLOAD_REQUIRED_CODE = "IMAGE_OFFLOAD_REQUIRED";
-/** The installed engine's image policy; see {@link CoreImagePolicy}. */
-const CORE_IMAGE_POLICY = dshLlm;
-/**
-* The durable-offload contract this engine speaks, or undefined on ≤0.1.5.
-*
-* Both members are required together: a half-populated engine would either
-* lose the surface's marks (re-sending evicted images as pixels) or lose the
-* count (silently sending an over-budget body), and neither is worth a partial
-* opt-in. Absent, the adapter keeps its own transient projection instead.
-*/
-function surfaceImagePolicy(api = CORE_IMAGE_POLICY) {
-	return typeof api.projectOffloadedImages === "function" && typeof api.requiredImageOffload === "function" ? {
-		projectOffloadedImages: api.projectOffloadedImages,
-		requiredImageOffload: api.requiredImageOffload
-	} : void 0;
-}
-/**
-* The failure a route raises instead of evicting on its own (≥0.1.6). The
+* The failure a route raises instead of evicting on its own. The
 * count is the ONE thing the harness needs: `dsh-compaction-image-offload`
 * records it as an `image/offload` event, marks that many oldest retained
 * occurrences, and retries the step.
@@ -3639,10 +3591,14 @@ function coreBudget(budget) {
 */
 const imageVersionBytes = (block) => block.attachment.bytes;
 /**
-* ≥0.1.6 request options: the surface's durable marks become placeholder text,
-* and an over-budget history FAILS with the count to offload instead of being
-* evicted here. Throws rather than returning, so no caller can accidentally
-* send a body this route already knows is too large.
+* Request options under one budget rung: the surface's durable marks become
+* placeholder text, and an over-budget history FAILS with the count to offload
+* instead of being evicted here. Throws rather than returning, so no caller can
+* accidentally send a body this route already knows is too large.
+*
+* The next rung is applied to the CURRENT projection, never to the raw history —
+* otherwise the 413 retry could reintroduce images the first rung had already
+* evicted.
 */
 function withSurfaceOffload(options, policy, budget) {
 	const marked = policy.projectOffloadedImages(options.messages, (ref) => offloadedImageText(ref));
@@ -3655,21 +3611,17 @@ function withSurfaceOffload(options, policy, budget) {
 	};
 }
 /**
-* One image's bytes for the wire: the attachment service's REQUEST VERSION when
-* it can produce one, else the normalized original.
+* One image's bytes for the wire: the attachment service's REQUEST VERSION.
 *
 * `readImage()` answers the stored original, which is what admission accepted —
 * not what a provider request should carry. `readImageRequest()` re-encodes to
 * the route target in `./image-request.ts` and caches the result under it, so
 * the same attachment costs one encode per target instead of one per occurrence,
 * and the base64 the wire expands is bounded (both the pixel budget and, more to
-* the point here, the encoded bytes). The fallback is for a backend that does
-* not implement the abstract method; every engine this plugin declares support
-* for does.
+* the point here, the encoded bytes).
 */
 async function readRequestImage(attachments, ref) {
-	if (typeof attachments.readImageRequest === "function") return (await attachments.readImageRequest(ref, requestImageTarget(ref))).data;
-	return (await attachments.readImage(ref)).data;
+	return (await attachments.readImageRequest(ref, requestImageTarget(ref))).data;
 }
 /**
 * Price one request occurrence.
@@ -3678,13 +3630,12 @@ async function readRequestImage(attachments, ref) {
 * model-visible TEXT so the caller's estimator can charge that instead: a model
 * that accepts text only (the harness projects those images to placeholder text
 * before the request), and an occurrence the session surface has already
-* offloaded (≥0.1.6 renders the same placeholder text in every later request).
-* A retained occurrence on this route contributes no text at all — the pixels
-* are inlined — so its price is the family's visual-token count and nothing else.
+* offloaded (the same placeholder text rides in every later request). A retained
+* occurrence on this route contributes no text at all — the pixels are inlined —
+* so its price is the family's visual-token count and nothing else.
 */
-function priceRequestImage(occurrence, model, imageCapable) {
-	const block = occurrence;
-	const ref = block.attachment ?? occurrence;
+function priceRequestImage(block, model, imageCapable) {
+	const ref = block.attachment;
 	if (!imageCapable) return {
 		visualTokens: 0,
 		text: textOnlyImageText(ref)
@@ -3993,17 +3944,12 @@ function parseAccountIdentity(whoami) {
 		orgId: orgData === void 0 ? void 0 : stringValue(orgData.id)
 	};
 }
-/**
-* Classify a TOTAL failure: when every endpoint failed with one class of
-* error, the degraded per-endpoint view would hide the root cause behind
-* a generic "partial data" note — name it instead.
-*/
-function classifyTotalFailure(failures, failedStatuses) {
+function classifyTotalFailure(failures, failed) {
 	if (failures.length !== USAGE_ENDPOINT_COUNT) return void 0;
-	const codes = failedStatuses.filter((status) => status !== void 0);
-	if (codes.length === USAGE_ENDPOINT_COUNT && codes.every((code) => code === 401)) return "invalid-key";
-	if (codes.length === USAGE_ENDPOINT_COUNT && codes.every((code) => code >= 500)) return "service-unavailable";
-	if (codes.length === 0) return "network";
+	if (failed.every((item) => item.kind === "http" && item.status === 401)) return "invalid-key";
+	if (failed.every((item) => item.kind === "http" && item.status >= 500)) return "service-unavailable";
+	if (failed.every((item) => item.kind === "invalid-response")) return "invalid-response";
+	if (failed.every((item) => item.kind === "transport")) return "network";
 }
 /** Build the legacy CLI (`/alpha/generate`) request body for one call. */
 async function buildCliBody(options, connection, facts) {
@@ -4097,6 +4043,7 @@ async function connectGenerate(deps, key, protocol, body) {
 	const zdr = connection.zdr === true;
 	const headers = protocol === "cli" ? {
 		"Content-Type": "application/json",
+		...IDENTITY_ENCODING_HEADER,
 		Authorization: `Bearer ${key}`,
 		"x-command-code-version": COMMAND_CODE_CLI_VERSION,
 		"x-cli-environment": "production",
@@ -4107,6 +4054,7 @@ async function connectGenerate(deps, key, protocol, body) {
 		...attributionHeaders()
 	} : {
 		"Content-Type": "application/json",
+		...IDENTITY_ENCODING_HEADER,
 		Authorization: `Bearer ${key}`,
 		Accept: "text/event-stream",
 		...zdr ? { "x-cmd-zdr": "1" } : {},
@@ -4220,13 +4168,9 @@ var CommandCodeAdapter = class extends LlmAdapter {
 	catalog = [];
 	fetchImpl;
 	resolveAttachments;
-	/** The engine's request-image policy, resolved once (tests may inject one). */
-	imagePolicy;
 	/**
-	* The ≥0.1.6 durable contract, or `undefined` on a ≤0.1.5 engine — where the
-	* adapter must evict its own history. Resolved once: the contract a process
-	* speaks cannot change while it runs, and resolving here keeps every request
-	* on the same branch (see {@link surfaceImagePolicy}).
+	* The durable-offload contract, resolved once (tests may inject a stub). The
+	* contract cannot change while the process runs.
 	*/
 	surfaceOffload;
 	billingAccess = /* @__PURE__ */ new Map();
@@ -4237,8 +4181,7 @@ var CommandCodeAdapter = class extends LlmAdapter {
 		this.deps = deps;
 		this.fetchImpl = deps.fetchImpl ?? fetch;
 		this.resolveAttachments = deps.resolveAttachments;
-		this.imagePolicy = deps.imageOffload ?? CORE_IMAGE_POLICY;
-		this.surfaceOffload = surfaceImagePolicy(this.imagePolicy);
+		this.surfaceOffload = deps.imageOffload ?? ENGINE_IMAGE_POLICY;
 	}
 	/**
 	* Display metadata for the picker's provider group header. The base class
@@ -4314,6 +4257,7 @@ var CommandCodeAdapter = class extends LlmAdapter {
 			const response = await this.fetchImpl(`${apiBase}/provider/v1/models`, {
 				headers: {
 					accept: "application/json",
+					...IDENTITY_ENCODING_HEADER,
 					...attributionHeaders()
 				},
 				signal: signal ?? AbortSignal.timeout(1e4)
@@ -4377,6 +4321,7 @@ var CommandCodeAdapter = class extends LlmAdapter {
 		const named = connection.apiKeyEnv;
 		return {
 			Authorization: `Bearer ${assertUsableApiKey(raw, "llm-commandcode", typeof named === "string" && named !== "" ? named : "the stored credential")}`,
+			...IDENTITY_ENCODING_HEADER,
 			"x-command-code-version": COMMAND_CODE_CLI_VERSION,
 			"x-cli-environment": "production",
 			...attributionHeaders()
@@ -4386,8 +4331,8 @@ var CommandCodeAdapter = class extends LlmAdapter {
 	* Fetch one account endpoint and parse its JSON body. Returns the HTTP
 	* status alongside the parsed record so each caller applies its own
 	* failure accounting: the billing probe fails open silently, the usage
-	* report books failures per endpoint. Non-2xx and non-record bodies come
-	* back without a record; only a transport throw propagates to the caller.
+	* report books failures per endpoint. Non-2xx and invalid JSON bodies come
+	* back without a record; only a fetch failure propagates to the caller.
 	*
 	* `timeoutMs` is the caller's budget for this one request. The default is the
 	* CATALOG probe's short cap, which fits the picker's fail-open reads; the
@@ -4400,10 +4345,21 @@ var CommandCodeAdapter = class extends LlmAdapter {
 			signal: AbortSignal.timeout(timeoutMs)
 		});
 		if (!response.ok) return { status: response.status };
-		const parsed = await response.json();
-		return {
+		let parsed;
+		try {
+			parsed = await response.json();
+		} catch {
+			return {
+				status: response.status,
+				invalidResponse: true
+			};
+		}
+		return isRecord(parsed) ? {
+			status: response.status,
+			record: parsed
+		} : {
 			status: response.status,
-			...isRecord(parsed) ? { record: parsed } : {}
+			invalidResponse: true
 		};
 	}
 	/**
@@ -4584,19 +4540,25 @@ var CommandCodeAdapter = class extends LlmAdapter {
 			throw error;
 		}
 		const failures = [];
-		const failedStatuses = [];
+		const failed = [];
 		const getJson = async (path) => {
 			try {
-				const { status, record } = await this.fetchEndpointJson(`${base}${path}`, headers, connection.requestTimeoutMs);
+				const { status, record, invalidResponse } = await this.fetchEndpointJson(`${base}${path}`, headers, connection.requestTimeoutMs);
 				if (record === void 0) {
-					failures.push(`${path}: HTTP ${status}`);
-					failedStatuses.push(status);
+					failures.push(`${path}: HTTP ${status}${invalidResponse ? " returned an unreadable or invalid JSON body" : ""}`);
+					failed.push(invalidResponse ? {
+						kind: "invalid-response",
+						status
+					} : {
+						kind: "http",
+						status
+					});
 					return;
 				}
 				return record;
 			} catch (error) {
 				failures.push(`${path}: ${error instanceof Error ? error.message : String(error)}`);
-				failedStatuses.push(void 0);
+				failed.push({ kind: "transport" });
 				return;
 			}
 		};
@@ -4625,7 +4587,7 @@ var CommandCodeAdapter = class extends LlmAdapter {
 				currentPeriodEnd: periodEndValue(subData?.currentPeriodEnd)
 			};
 		}
-		const blocked = classifyTotalFailure(failures, failedStatuses);
+		const blocked = classifyTotalFailure(failures, failed);
 		if (blocked !== void 0) report.blocked = blocked;
 		return report;
 	}
@@ -4703,8 +4665,7 @@ var CommandCodeAdapter = class extends LlmAdapter {
 		const reasoningEffort = effort && effort !== "off" && supported?.includes(effort) ? effort : void 0;
 		const systemText = [options.system ?? "", ...options.messages.filter((m) => m.role === "system").map((m) => m.content.map(blockText).filter(Boolean).join("\n"))].filter(Boolean).join("\n\n");
 		let protocol = this.resolveProtocol(apiKey, options.model);
-		let requestOptions = this.surfaceOffload === void 0 ? withImageBudget(options, REQUEST_IMAGE_BUDGETS[0], this.imagePolicy) : withSurfaceOffload(options, this.surfaceOffload, REQUEST_IMAGE_BUDGETS[0]);
-		let imageBudgetIndex = 0;
+		let requestOptions = withSurfaceOffload(options, this.surfaceOffload, REQUEST_IMAGE_BUDGETS[0]);
 		const buildBody = async (target) => target === "cli" ? buildCliBody(requestOptions, connection, {
 			maxTokens,
 			reasoningEffort,
@@ -4737,19 +4698,9 @@ var CommandCodeAdapter = class extends LlmAdapter {
 				body = await buildBody("cli");
 				continue;
 			}
-			if (attempt.status === 413 && imageBudgetIndex + 1 < REQUEST_IMAGE_BUDGETS.length) {
-				if (this.surfaceOffload !== void 0) {
-					const missing = this.surfaceOffload.requiredImageOffload(requestOptions.messages, coreBudget(REQUEST_IMAGE_BUDGETS[imageBudgetIndex + 1]), imageVersionBytes);
-					if (missing > 0) throw imageOffloadRequired(missing);
-				} else {
-					const tightened = withImageBudget(requestOptions, REQUEST_IMAGE_BUDGETS[imageBudgetIndex + 1], this.imagePolicy);
-					if (tightened !== requestOptions) {
-						imageBudgetIndex += 1;
-						requestOptions = tightened;
-						body = await buildBody(protocol);
-						continue;
-					}
-				}
+			if (attempt.status === 413 && REQUEST_IMAGE_BUDGETS.length > 1) {
+				const missing = this.surfaceOffload.requiredImageOffload(requestOptions.messages, coreBudget(REQUEST_IMAGE_BUDGETS[1]), imageVersionBytes);
+				if (missing > 0) throw imageOffloadRequired(missing);
 			}
 			const rotate = this.deps.rotateApiKey;
 			const rejection = classifyAccountRejection(attempt.status, attempt.errText);
@@ -5438,6 +5389,7 @@ const commandcodeCommand = {
 		unconfigured: "  (未配置 API 密钥)",
 		blockedInvalidKey: "⛔ API 密钥无效或已过期 — 服务端拒绝了全部请求（401），请检查该账户的密钥配置",
 		blockedServiceUnavailable: "⚠️ Command Code 服务暂时不可用（5xx），稍后重试",
+		blockedInvalidResponse: "⚠️ Command Code 返回了无法读取的响应 — 请检查宿主的 HTTP 代理或响应解压配置",
 		blockedNetwork: "⚠️ 无法连接 Command Code 服务 — 请检查网络或 API 地址",
 		planLine: "  📦 套餐    {name}{status}{period}",
 		planPeriodSuffix: " · 账期截止 {date}",
@@ -5469,6 +5421,7 @@ const commandcodeCommand = {
 		unconfigured: "  (no API key configured)",
 		blockedInvalidKey: "⛔ API key invalid or expired — the server rejected every request (401); check the key configured for this account",
 		blockedServiceUnavailable: "⚠️ Command Code service temporarily unavailable (5xx); try again later",
+		blockedInvalidResponse: "⚠️ Command Code returned an unreadable response — check the host HTTP proxy or response decoding",
 		blockedNetwork: "⚠️ could not reach the Command Code service — check your network or the API base setting",
 		planLine: "  📦 Plan     {name}{status}{period}",
 		planPeriodSuffix: " · period ends {date}",
@@ -5567,6 +5520,7 @@ function renderReport(report, locale, title) {
 	lines.push(title ?? commandCopy(locale, "title").replace("{account}", account), "");
 	if (report.blocked === "invalid-key") lines.push(commandCopy(locale, "blockedInvalidKey"), "");
 	else if (report.blocked === "service-unavailable") lines.push(commandCopy(locale, "blockedServiceUnavailable"), "");
+	else if (report.blocked === "invalid-response") lines.push(commandCopy(locale, "blockedInvalidResponse"), "");
 	else if (report.blocked === "network") lines.push(commandCopy(locale, "blockedNetwork"), "");
 	if (report.plan && report.plan.name !== "") {
 		const p = report.plan;
@@ -5668,6 +5622,14 @@ function makeBoundaryValidator(prefix) {
 		booleanField
 	};
 }
+/** Use the same strict-codec shape for invocation parameters and results. */
+function makeStrictCodec(typeSymbol, schema) {
+	return {
+		mode: "strict",
+		typeSymbol,
+		create: () => schema
+	};
+}
 /**
 * Build one strict invocation descriptor. Every Command Code Remote shares the
 * `commandcode` namespace, the `commandcodeUsage` service, and a strict
@@ -5676,12 +5638,6 @@ function makeBoundaryValidator(prefix) {
 * only its own facts.
 */
 function makeRemoteDescriptor(endpoint, method, typeSymbol, schema) {
-	const result = {
-		mode: "strict",
-		typeSymbol,
-		schema,
-		create: () => schema
-	};
 	return {
 		id: `${REMOTE_PACKAGE}#${endpoint}`,
 		service: REMOTE_SERVICE,
@@ -5689,7 +5645,7 @@ function makeRemoteDescriptor(endpoint, method, typeSymbol, schema) {
 		method,
 		invocation: { kind: "direct" },
 		parameters: [],
-		result
+		result: makeStrictCodec(typeSymbol, schema)
 	};
 }
 //#endregion
@@ -5734,7 +5690,7 @@ function parseUsageReport(value) {
 	const report = { failures };
 	if (source.blocked !== void 0) {
 		const blocked = source.blocked;
-		if (blocked === "invalid-key" || blocked === "service-unavailable" || blocked === "network") report.blocked = blocked;
+		if (blocked === "invalid-key" || blocked === "service-unavailable" || blocked === "invalid-response" || blocked === "network") report.blocked = blocked;
 		else reject$1("blocked");
 	}
 	if (source.account !== void 0) {
@@ -5963,9 +5919,24 @@ function parseLoginStatus(value) {
 }
 /** The strict result codec shared by all three login endpoints. */
 const loginStatusSchema = { parse: parseLoginStatus };
-/** Build one login invocation descriptor (uniform result, no parameters). */
+/** Optional account target; the Host still checks it against saved slots. */
+const loginTargetSchema = { parse(value) {
+	if (value === void 0 || typeof value === "string") return value;
+	return reject("targetRef");
+} };
+/** Build one login invocation descriptor. Only begin accepts an account ref. */
 function loginDescriptor(endpoint, method) {
-	return makeRemoteDescriptor(endpoint, method, `${REMOTE_PACKAGE}#CommandCodeLoginStatus`, loginStatusSchema);
+	const descriptor = makeRemoteDescriptor(endpoint, method, `${REMOTE_PACKAGE}#CommandCodeLoginStatus`, loginStatusSchema);
+	return method === "loginBegin" ? {
+		...descriptor,
+		parameters: [{
+			name: "targetRef",
+			wire: "targetRef",
+			source: "json",
+			codec: makeStrictCodec(`${REMOTE_PACKAGE}#CommandCodeLoginTargetRef`, loginTargetSchema),
+			acceptsUndefined: true
+		}]
+	} : descriptor;
 }
 /** The three login descriptors, shared verbatim by Host registration and Client mount. */
 const LOGIN_DESCRIPTORS = [
@@ -6033,8 +6004,8 @@ var CommandCodeUsageService = class extends TypertRemoteService {
 	* (no free loopback port, disposed plugin); the Gateway folds the throw
 	* into the failure branch the page renders.
 	*/
-	async loginBegin() {
-		return this.requireLogin().begin();
+	async loginBegin(targetRef) {
+		return this.requireLogin().begin(targetRef);
 	}
 	/** Poll a login attempt's status. */
 	async loginStatus() {
@@ -6121,6 +6092,12 @@ const LOGIN_ALLOWED_ORIGINS = [
 ];
 /** The Studio route that performs the browser-side login. */
 const STUDIO_AUTH_PATH = "/studio/auth/cli";
+/** Resolve a browser-login destination without allowing arbitrary credential writes. */
+function loginCredentialRef(targetRef, defaultRef, accounts) {
+	if (targetRef === void 0) return defaultRef;
+	if (targetRef === defaultRef || !accounts.some((account) => account.apiKeyEnv === targetRef)) throw new Error("the target account must be saved before browser sign-in");
+	return targetRef;
+}
 /** Compose the Studio authorization URL (pure, exported for tests). */
 function buildCommandAuthUrl(options) {
 	const callback = `http://localhost:${options.port}/callback`;
@@ -6143,6 +6120,7 @@ async function validateCommandApiKey(fetchImpl, apiBase, apiKey) {
 			method: "GET",
 			headers: {
 				"Content-Type": "application/json",
+				...IDENTITY_ENCODING_HEADER,
 				Authorization: `Bearer ${apiKey}`
 			}
 		});
@@ -6210,6 +6188,8 @@ var CommandCodeLoginFlow = class {
 	* the port window so browser login dies until the Host restarts.
 	*/
 	starting;
+	/** A live attempt's destination; different rows may not rejoin it. */
+	targetRef;
 	/** A `cancel()` that arrived while a start was still binding (see {@link CommandCodeLoginFlow.cancel}). */
 	cancelPending = false;
 	disposed = false;
@@ -6230,12 +6210,20 @@ var CommandCodeLoginFlow = class {
 	* `waiting` carrying the Studio URL once the loopback server is up.
 	* Rejects only when the flow cannot start at all (no free port, disposed).
 	*/
-	async begin() {
+	async begin(targetRef) {
 		if (this.disposed) throw new Error("login flow has been disposed");
-		if (this.statusValue.state === "waiting" && this.server !== void 0) return this.statusValue;
-		if (this.starting !== void 0) return this.starting;
+		this.deps.validateTargetRef?.(targetRef);
+		if (this.statusValue.state === "waiting" && this.server !== void 0) {
+			if (this.targetRef !== targetRef) throw new Error("another account login is already in progress");
+			return this.statusValue;
+		}
+		if (this.starting !== void 0) {
+			if (this.targetRef !== targetRef) throw new Error("another account login is already in progress");
+			return this.starting;
+		}
 		this.cancelPending = false;
-		const starting = this.startAttempt();
+		this.targetRef = targetRef;
+		const starting = this.startAttempt(targetRef);
 		this.starting = starting;
 		try {
 			return await starting;
@@ -6248,7 +6236,7 @@ var CommandCodeLoginFlow = class {
 	* server, one published `waiting` status. Callers reach it only through
 	* `begin()`'s single-flight fence.
 	*/
-	async startAttempt() {
+	async startAttempt(targetRef) {
 		this.teardown();
 		const attempt = ++this.attemptSeq;
 		const port = await this.findPort();
@@ -6288,7 +6276,7 @@ var CommandCodeLoginFlow = class {
 			});
 		}, this.deps.timeoutMs ?? 12e4);
 		this.timer.unref?.();
-		settled.then((credentials) => this.complete(attempt, credentials), (failure) => this.failFrom(attempt, failure));
+		settled.then((credentials) => this.complete(attempt, credentials, targetRef), (failure) => this.failFrom(attempt, failure));
 		return this.statusValue;
 	}
 	/**
@@ -6467,7 +6455,7 @@ var CommandCodeLoginFlow = class {
 	* would report "cancelled" while the credential landed anyway, and the page
 	* would silently flip to success.
 	*/
-	async complete(attempt, credentials) {
+	async complete(attempt, credentials, targetRef) {
 		if (!this.ownsAttempt(attempt)) return;
 		const validation = await validateCommandApiKey(this.deps.fetchImpl ?? fetch, this.readApiBase(), credentials.apiKey);
 		if (!this.ownsAttempt(attempt)) return;
@@ -6482,7 +6470,8 @@ var CommandCodeLoginFlow = class {
 		}
 		if (!this.ownsAttempt(attempt)) return;
 		try {
-			await this.deps.storeKey(credentials);
+			this.deps.validateTargetRef?.(targetRef);
+			await this.deps.storeKey(credentials, targetRef);
 		} catch (error) {
 			if (!this.ownsAttempt(attempt)) return;
 			this.setStatus({
@@ -6579,30 +6568,6 @@ const COMMANDCODE_SEARCH_PROVIDER_ID = "commandcode";
 * modsearch even with Command Code search turned off (issue #26).
 */
 const DEFAULT_WEB_SEARCH_PROVIDER_ID = "deepseek-official";
-/**
-* Point the web seam's search selection at this plugin's provider (`commandcode`).
-* Sets the runtime field; the next search call honours it because `search()`
-* re-reads `searchProviderId` each time. Returns the prior id (or undefined).
-* Never throws: a hardened/frozen runtime shape must not break the
-* settings-save path that calls this — the provider simply stays
-* registered-but-unselected (the boot-time `searchProvider: commandcode`
-* cordis patch is the durable alternative).
-*
-* @deprecated Prefer {@link applyCommandCodeSearchSelection}: this overload
-* always overwrites the displaced backend with the factory default on
-* disable, so turning Command Code search off silences whichever provider
-* was selected before (e.g. modsearch) instead of restoring it (issue #26).
-*/
-function selectCommandCodeSearchProvider(web, enable) {
-	try {
-		const field = web;
-		const prior = field.searchProviderId;
-		field.searchProviderId = enable ? COMMANDCODE_SEARCH_PROVIDER_ID : DEFAULT_WEB_SEARCH_PROVIDER_ID;
-		return prior;
-	} catch {
-		return;
-	}
-}
 /** Fresh selection state: the plugin starts out not owning the selection. */
 function commandCodeSearchSelection() {
 	return {
@@ -6732,6 +6697,7 @@ var CommandCodeSearchProvider = class {
 				method: "POST",
 				headers: {
 					"Content-Type": "application/json",
+					...IDENTITY_ENCODING_HEADER,
 					Authorization: `Bearer ${key}`,
 					"x-command-code-version": COMMAND_CODE_CLI_VERSION,
 					"x-cli-environment": "production",
@@ -7313,8 +7279,8 @@ function transportBudgetMessage(failureMessage, maxRetries) {
 * as an internal advisor instead: the command guard in `./command-guard.ts`
 * asks it whether a shell command is safe to auto-approve.
 *
-* The three question types are the whole vocabulary (command-code@1.64.0
-* `systemOneRequestSchema`):
+* The three question types are the whole vocabulary (command-code@1.65.0
+* `systemOneRequestSchema`, unchanged since 1.64.0):
 *
 * - `noul` — "is this true?", optional `criteria: { true, false }` describing
 *   each verdict. Answers with `noul`, the probability of *yes*.
@@ -7572,6 +7538,7 @@ async function runSystemOne(deps, request, options = {}) {
 				method: "POST",
 				headers: {
 					"Content-Type": "application/json",
+					...IDENTITY_ENCODING_HEADER,
 					Authorization: `Bearer ${key}`,
 					"x-command-code-version": COMMAND_CODE_CLI_VERSION,
 					...attributionHeaders()
@@ -7648,7 +7615,7 @@ const COMMAND_GUARD_DENY_LIST = [
 	},
 	{
 		id: "device-redirect",
-		pattern: /(?:^|[^0-9\w])>{1,2}\s*\/dev\/(?:sd|disk|nvme|hd)/
+		pattern: />{1,2}\s*\/dev\/(?:sd|disk|nvme|hd)/
 	},
 	{
 		id: "fork-bomb",
@@ -8033,25 +8000,58 @@ function applyCommandGuard(ctx, deps) {
 //#endregion
 //#region src/config-volatile.ts
 /**
-* Mark one schema field volatile when the installed schemastery supports it.
-* @param schema - The field schema (any generation).
-* @returns The schema carrying `meta.volatile`, or the schema itself on an
-* engine whose schemastery predates `.volatile()`.
+* Volatile-config helpers for dsh 0.1.7's schema-derived profile Config.
+*
+* 0.1.7 rewrote settings around profile Config: `settings.describe()` projects
+* each active entry's schema through `volatileForm()`, so a form contains ONLY
+* fields whose schema nodes carry `meta.volatile`, and a form edit is refused
+* unless its path lies beneath a marked node. On that generation the loader
+* resolves each marked top-level field into a readonly `Volatile<T>` reference
+* (`{ get() }`, frozen, written in place by the owning runtime) instead of a
+* plain value, commits later changes WITHOUT remounting the fiber, and
+* dispatches `loader/volatile-update` to the owning fiber.
+*
+* Two helpers keep the rest of the plugin reading a PLAIN `Config`:
+*
+* - `markVolatile(schema)` applies `.volatile()`, so 0.1.7's forms see every
+*   field we mark. The declared type is preserved through the mark on purpose:
+*   it changes what the schema PARSES to (a live reference), not the
+*   plugin-facing `Config` shape every consumer reads.
+* - `unwrapVolatileConfig(config)` reads every top-level field through its
+*   reference when one is present — returning a FRESH object per call, since
+*   a reference's identity is stable while its value changes — and returns the
+*   config untouched when none is.
+*
+* Only TOP-LEVEL fields are marked (form writes name top-level paths such as
+* `accounts` or `modelVisibility.<id>`, whose first segment is the marked
+* node), so one unwrap level is complete. The literal `apiKey` secret stays
+* unmarked on purpose: no settings surface writes it — the settings page and
+* the dsh-TUI section both write keys through the credentials seam — so it
+* keeps composition-only semantics, and a config-file edit to it reloading the
+* fiber is the correct behavior for a secret literal.
+*
+* @module dsh-commandcode-provider/config-volatile
+*/
+/**
+* Mark one schema field volatile.
+*
+* `.volatile()` is unconditional: the mark is a schemastery 3.18.3 feature and
+* the only engine this bundle supports (`dsh 0.1.7-rc.1`) pins `~3.18.4`, so
+* the method is always present. It is reached through a structural member
+* rather than schemastery's own typing so the function can keep the caller's
+* declared field type, which is what lets `Config` stay the plain shape every
+* consumer reads while the schema parses to live references.
+*
+* @param schema - The field schema.
+* @returns The schema carrying `meta.volatile`.
 */
 function markVolatile(schema) {
-	const candidate = schema;
-	if (typeof candidate.volatile !== "function") return schema;
-	return candidate.volatile();
+	return schema.volatile();
 }
 /**
 * Mark every field of a Config field dict volatile, except the named
 * composition-only secrets (`apiKey` here, which no settings surface writes).
 *
-* The result is a NEW dict of schema instances: callers that also need an
-* UNMARKED schema for the legacy settings generation must build the fields
-* twice (`configFields()`), never share one dict — `.volatile()` clones per
-* call, and a shared instance would carry the mark into the legacy schema.
-*
 * @param fields - Freshly built field schemas.
 * @param skip - Field names that must stay unmarked.
 * @returns The field dict with every non-skipped field marked.
@@ -8072,24 +8072,21 @@ function isVolatileRef(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) && Object.isFrozen(value) && typeof value.get === "function";
 }
 /**
-* Read one config object as PLAIN values across generations.
+* Read one config object as PLAIN values.
 *
-* Each top-level field found to be a volatile reference is read through
+* Every top-level field found to be a volatile reference is read through
 * `.get()` — freshly on every call, so a live update lands on the very next
-* read. When no field is a reference the input object is returned as-is,
-* keeping reference identity stable for identity-keyed memos on engines that
-* hand `apply()` plain config.
+* read. The loader resolves EVERY marked node into a reference, unset fields
+* included, so a loader-parsed config always yields a fresh object here; the
+* pass-through for a field that is not a reference is what keeps the unmarked
+* `apiKey` literal readable.
 */
 function unwrapVolatileConfig(config) {
 	const source = config;
 	if (typeof source !== "object" || source === null) return config;
-	let found = false;
 	const plain = {};
-	for (const [field, value] of Object.entries(source)) if (isVolatileRef(value)) {
-		plain[field] = value.get();
-		found = true;
-	} else plain[field] = value;
-	return found ? plain : config;
+	for (const [field, value] of Object.entries(source)) plain[field] = isVolatileRef(value) ? value.get() : value;
+	return plain;
 }
 //#endregion
 //#region src/index.ts
@@ -8101,10 +8098,9 @@ function unwrapVolatileConfig(config) {
 * the configurable-provider directory, so the web Models page shows a
 * "Command Code" card with an API-key field and the model picker lists the
 * live Command Code model catalog. Connection facts resolve per request over
-* the plugin's live config — the `llm-commandcode` settings section through
-* dsh 0.1.6, profile Config (volatile fields, unwrapped per read) from 0.1.7
-* — and the credential seam, so a changed key, endpoint, or cache path
-* reaches the next request without a restart.
+* the plugin's live profile Config (volatile fields, unwrapped per read) and
+* the credential seam, so a changed key, endpoint, or cache path reaches the
+* next request without a restart.
 *
 * ```yaml
 * - id: llm-commandcode
@@ -8130,87 +8126,55 @@ const PROVIDER = "commandcode";
 /** Default models cache path (mirrors the pi plugin's on-disk cache). */
 const DEFAULT_MODELS_CACHE_PATH = join(homedir(), ".commandcode", "models-cache.json");
 /**
-* The Config schema's fields, freshly built on every call.
-*
-* A FACTORY, not a shared dict, and that is load-bearing: the exported
-* {@link Config} marks every field volatile while {@link LegacySettingsSchema}
-* must carry no mark at all, and schemastery's schema instances are
-* single-purpose objects — sharing one dict would leak the marks into the
-* legacy registration (see `config-volatile.ts` for why that is a boot-time
-* `ValidationError` on ≤0.1.6 engines whose schemastery resolved to ≥3.18.3).
-*
-* @returns One fresh schema instance per Config field.
-*/
-function configFields() {
-	return {
-		apiKeyEnv: z.string().role("credential-ref").default(DEFAULT_API_KEY_ENV),
-		apiKey: z.string().role("secret"),
-		apiBase: z.string(),
-		workingDir: z.string(),
-		modelsCachePath: z.string(),
-		requestTimeoutMs: z.number().min(1).max(MAX_TIMER_DELAY_MS),
-		streamIdleTimeoutMs: z.number().min(1).max(MAX_TIMER_DELAY_MS),
-		transportMaxRetries: z.number().min(0).max(50),
-		filterModelsByPlan: z.boolean(),
-		visibleModels: z.array(z.string()),
-		/**
-		* Per-model visibility overrides for the terminal settings page's checkbox
-		* list, keyed by catalog id. dsh-TUI addresses a staged edit by its field
-		* PATH, so two checkboxes sharing one path would overwrite each other's
-		* draft and the section's last model would decide every write; a map gives
-		* each checkbox a path of its own. An id listed here wins over
-		* {@link Config.visibleModels}; ids absent here keep following it.
-		*/
-		modelVisibility: z.dict(z.boolean()),
-		webSearch: z.boolean().default(true),
-		showSidebarQuota: z.boolean().default(false),
-		accounts: z.array(z.object({
-			label: z.string(),
-			apiKeyEnv: z.string().role("credential-ref"),
-			/** Literal key for one extra slot; see the top-level `apiKey` secret note. */
-			apiKey: z.string().role("secret")
-		})),
-		activeAccount: z.string(),
-		modelAccountRules: z.array(z.object({
-			models: z.array(z.string()),
-			account: z.string()
-		})),
-		commandGuard: z.boolean().default(false),
-		commandGuardThreshold: z.number().min(COMMAND_GUARD_MIN_THRESHOLD).max(1),
-		commandGuardTimeoutMs: z.number().min(200).max(COMMAND_GUARD_MAX_TIMEOUT_MS),
-		zdr: z.boolean().default(false),
-		lang: z.string().pattern(/^(zh|en)$/).default("zh")
-	};
-}
-/**
-* The 0.1.7-generation schema: every field volatile except the
-* composition-only `apiKey` secret.
+* The Config schema: every field volatile except the composition-only `apiKey`
+* secret.
 *
 * dsh 0.1.7's settings forms are projected from the schema's `meta.volatile`
 * nodes, so an unmarked field would be invisible to AND unwritable from the
-* settings page and refused by form-edit path validation — and on that
-* generation the loader hands `apply()` a live reference per marked field,
-* committing later writes without remounting this fiber (the
-* `loader/volatile-update` listener at the bottom of `apply` covers the facts
-* that are not re-derived per read). The mark is inert on engines whose
-* schemastery predates `.volatile()`.
-*/
-const Config = z.object(markVolatileFields(configFields(), ["apiKey"]));
-/**
-* The ≤0.1.6-generation registration schema: the same fields, NO volatile
-* marks.
-*
-* The legacy `installSection(owner, ns, schema, entry, hooks)` re-validates the
-* `entry` it is handed (`register()` → `resolve()` → `schema(mergeLayers(base,
-* section))`) and its `describe()` structuredClones that same `entry`. Since
-* schemastery ≥3.18.3 creates references at parse time on EVERY generation —
-* `dsh-settings` through 0.1.6 declares `schemastery: ^3.18.2`, so old engines
-* freshly installed today resolve 3.18.3 — a marked schema plus the raw
-* reference-carrying `config` is a boot-time `ValidationError` there. This
-* schema is therefore unmarked, and `apply` pairs it with
-* `unwrapVolatileConfig(config)`.
-*/
-const LegacySettingsSchema = z.object(configFields());
+* settings page and refused by form-edit path validation — and the loader
+* hands `apply()` a live reference per marked field, committing later writes
+* without remounting this fiber (the `loader/volatile-update` listener at the
+* bottom of `apply` covers the facts that are not re-derived per read).
+*/
+const Config = z.object(markVolatileFields({
+	apiKeyEnv: z.string().role("credential-ref").default(DEFAULT_API_KEY_ENV),
+	apiKey: z.string().role("secret"),
+	apiBase: z.string(),
+	workingDir: z.string(),
+	modelsCachePath: z.string(),
+	requestTimeoutMs: z.number().min(1).max(MAX_TIMER_DELAY_MS),
+	streamIdleTimeoutMs: z.number().min(1).max(MAX_TIMER_DELAY_MS),
+	transportMaxRetries: z.number().min(0).max(50),
+	filterModelsByPlan: z.boolean(),
+	visibleModels: z.array(z.string()),
+	/**
+	* Per-model visibility overrides for the terminal settings page's checkbox
+	* list, keyed by catalog id. dsh-TUI addresses a staged edit by its field
+	* PATH, so two checkboxes sharing one path would overwrite each other's
+	* draft and the section's last model would decide every write; a map gives
+	* each checkbox a path of its own. An id listed here wins over
+	* {@link Config.visibleModels}; ids absent here keep following it.
+	*/
+	modelVisibility: z.dict(z.boolean()),
+	webSearch: z.boolean().default(true),
+	showSidebarQuota: z.boolean().default(false),
+	accounts: z.array(z.object({
+		label: z.string(),
+		apiKeyEnv: z.string().role("credential-ref"),
+		/** Literal key for one extra slot; see the top-level `apiKey` secret note. */
+		apiKey: z.string().role("secret")
+	})),
+	activeAccount: z.string(),
+	modelAccountRules: z.array(z.object({
+		models: z.array(z.string()),
+		account: z.string()
+	})),
+	commandGuard: z.boolean().default(false),
+	commandGuardThreshold: z.number().min(COMMAND_GUARD_MIN_THRESHOLD).max(1),
+	commandGuardTimeoutMs: z.number().min(200).max(COMMAND_GUARD_MAX_TIMEOUT_MS),
+	zdr: z.boolean().default(false),
+	lang: z.string().pattern(/^(zh|en)$/).default("zh")
+}, ["apiKey"]));
 /**
 * The one explicit resolve step from raw config to validated connection
 * facts. Programmatic construction may bypass Schemastery normalization, so
@@ -8245,19 +8209,8 @@ function readModelVisibility(raw) {
 }
 function apply(ctx, config) {
 	installCostProjection(ctx);
-	let source = () => config;
-	const current = () => unwrapVolatileConfig(source());
-	let lastRaw;
-	let lastGood;
-	const options = () => {
-		const raw = current();
-		if (raw === lastRaw && lastGood !== void 0) return lastGood;
-		const next = resolveAdapterOptions(raw);
-		lastRaw = raw;
-		lastGood = next;
-		return next;
-	};
-	options();
+	const current = () => unwrapVolatileConfig(config);
+	const options = () => resolveAdapterOptions(current());
 	const slots = () => {
 		const raw = current();
 		const list = [{
@@ -8398,8 +8351,11 @@ function apply(ctx, config) {
 	});
 	const loginFlow = new CommandCodeLoginFlow({
 		apiBase: () => options().apiBase,
-		storeKey: async ({ apiKey }) => {
-			const ref = credentialRef(current().apiKeyEnv ?? DEFAULT_API_KEY_ENV);
+		validateTargetRef: (targetRef) => {
+			loginCredentialRef(targetRef, current().apiKeyEnv ?? DEFAULT_API_KEY_ENV, current().accounts ?? []);
+		},
+		storeKey: async ({ apiKey }, targetRef) => {
+			const ref = credentialRef(loginCredentialRef(targetRef, current().apiKeyEnv ?? DEFAULT_API_KEY_ENV, current().accounts ?? []));
 			const credentials = ctx.get("credentials");
 			if (credentials === void 0) throw new Error("the credentials service is unavailable in this profile; paste the key manually");
 			await credentials.set(ref, apiKey);
@@ -8479,23 +8435,10 @@ function apply(ctx, config) {
 		}, "dsh-commandcode-provider: tui settings handle");
 	});
 	ctx.inject(["settings"], (settingsCtx) => {
-		const service = settingsCtx.settings;
-		if (typeof service.installSection === "function") {
-			service.installSection(ctx, NS, LegacySettingsSchema, unwrapVolatileConfig(config), {
-				setSource: (next) => {
-					source = next;
-				},
-				onChange: () => {
-					applySearchSelection(current().webSearch ?? true);
-					refreshTuiSettings?.();
-				}
-			});
-			return;
-		}
-		if (typeof service.configure === "function") settingsCtx.effect(() => {
-			const dispose = service.configure?.({ auto: false }, ctx.fiber);
+		settingsCtx.effect(() => {
+			const dispose = settingsCtx.settings.configure({ auto: false }, ctx.fiber);
 			return () => {
-				dispose?.();
+				dispose();
 			};
 		}, "dsh-commandcode-provider: settings auto-form policy");
 	});
@@ -8511,6 +8454,6 @@ function apply(ctx, config) {
 	}, "dsh-commandcode-provider: volatile config updates");
 }
 //#endregion
-export { ACTIVE_ACCOUNT_AUTO, BILLING_ACCESS_TTL_MS, COMMANDCODE_SEARCH_PROVIDER_ID, COMMAND_CODE_CLI_VERSION, CommandCodeAccountPool, CommandCodeAdapter, CommandCodeLoginFlow, CommandCodeSearchProvider, CommandCodeUsageService, Config, DEFAULT_API_BASE, DEFAULT_GENERATE_MAX_TOKENS, DEFAULT_MAX_OUTPUT_TOKENS, DEFAULT_MODELS_CACHE_PATH, DEFAULT_REQUEST_TIMEOUT_MS, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_WEB_SEARCH_PROVIDER_ID, KNOWN_DEALS, KNOWN_EFFORTS, KNOWN_IMAGE_MODELS, KNOWN_NON_ZDR_MODELS, KNOWN_PEAK_PRICING, KNOWN_PLANS, KNOWN_SUBSCRIPTION_PLANS, KNOWN_THINKING_MODELS, LANG_AUTO, LOGIN_ALLOWED_ORIGINS, LOGIN_BEGIN_ENDPOINT, LOGIN_BODY_LIMIT_BYTES, LOGIN_CANCEL_ENDPOINT, LOGIN_MAX_PORT_ATTEMPTS, LOGIN_START_PORT, LOGIN_STATUS_ENDPOINT, LOGIN_TIMEOUT_MS, LegacySettingsSchema, PLAN_LABELS, PLAN_ORDER, PROVIDER, USAGE_REPORT_ENDPOINT, accountUsable, apply, applyCommandCodeSearchSelection, applyCommandCodeTuiSettings, applyCommands, applyUsageRemote, buildCommandAuthUrl, buildCommandCodeTuiSection, capabilityDescription, commandCodeSearchSelection, commandDefinition, compareByPlan, dealLabel, formatContext, inject, loginStatusSchema, matchModelRule, modelVisibleInPlan, name, parseLoginStatus, peakPricingLabel, peakPricingState, planLabel, projectSlugFromPath, resolveAdapterOptions, resolveAuthFileApiKey, selectAccountForModel, selectActiveAccount, selectCommandCodeSearchProvider, studioBaseForApiBase, subscriptionPlanInfo, supportsZeroDataRetention, usageReportSchema, validateCommandApiKey };
+export { ACTIVE_ACCOUNT_AUTO, BILLING_ACCESS_TTL_MS, COMMANDCODE_SEARCH_PROVIDER_ID, COMMAND_CODE_CLI_VERSION, CommandCodeAccountPool, CommandCodeAdapter, CommandCodeLoginFlow, CommandCodeSearchProvider, CommandCodeUsageService, Config, DEFAULT_API_BASE, DEFAULT_GENERATE_MAX_TOKENS, DEFAULT_MAX_OUTPUT_TOKENS, DEFAULT_MODELS_CACHE_PATH, DEFAULT_REQUEST_TIMEOUT_MS, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_WEB_SEARCH_PROVIDER_ID, KNOWN_DEALS, KNOWN_EFFORTS, KNOWN_IMAGE_MODELS, KNOWN_NON_ZDR_MODELS, KNOWN_PEAK_PRICING, KNOWN_PLANS, KNOWN_SUBSCRIPTION_PLANS, KNOWN_THINKING_MODELS, LANG_AUTO, LOGIN_ALLOWED_ORIGINS, LOGIN_BEGIN_ENDPOINT, LOGIN_BODY_LIMIT_BYTES, LOGIN_CANCEL_ENDPOINT, LOGIN_MAX_PORT_ATTEMPTS, LOGIN_START_PORT, LOGIN_STATUS_ENDPOINT, LOGIN_TIMEOUT_MS, PLAN_LABELS, PLAN_ORDER, PROVIDER, USAGE_REPORT_ENDPOINT, accountUsable, apply, applyCommandCodeSearchSelection, applyCommandCodeTuiSettings, applyCommands, applyUsageRemote, buildCommandAuthUrl, buildCommandCodeTuiSection, capabilityDescription, commandCodeSearchSelection, commandDefinition, compareByPlan, dealLabel, formatContext, inject, loginStatusSchema, matchModelRule, modelVisibleInPlan, name, parseLoginStatus, peakPricingLabel, peakPricingState, planLabel, projectSlugFromPath, resolveAdapterOptions, resolveAuthFileApiKey, selectAccountForModel, selectActiveAccount, studioBaseForApiBase, subscriptionPlanInfo, supportsZeroDataRetention, usageReportSchema, validateCommandApiKey };
 
 //# sourceMappingURL=index.js.map