@mars-sea/dsh-commandcode-provider 0.11.2 → 0.11.3

package/CHANGELOG.md

@@ -6,6 +6,18 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ## [Unreleased]
 
+## [0.11.3] - 2026-09-16
+
+### Added
+- **Thinking text is also read from `reasoning_details`.** The gateway does not normalize the reasoning field across model families, and the difference is per family rather than global: DeepSeek answers with the scalar `reasoning` **plus** an OpenRouter-shaped `reasoning_details` array (`[{ type: 'reasoning.text', text, format, index }]`), while GLM, Qwen and Kimi answer with the DeepSeek-native `reasoning_content` (all measured against the live API on 2026-09-16, alongside the catalog sweep below). The adapter already read the first two spellings, so nothing was broken; the array is now a third fallback, so a family whose thinking arrives only that way is not silently dropped. Entries are read by their `text` member rather than filtered on `type === 'reasoning.text'`: the sibling shapes in that protocol carry `summary` or an encrypted blob instead of `text`, so a plain read already ignores them, while a type filter would drop a text-bearing variant added later — and losing thinking is the failure this exists to prevent.
+- **`transportMaxRetries`: how many transport failures one request absorbs before the failure surfaces** (default 5, 0–50; Settings → Command Code → Advanced). It exists because the route's retry policy cannot express this: `providerRetryPolicy()` is captured once per route, so `TRANSPORT` had to share the near-unbounded window that `RATE_LIMIT`/`SERVER` need, and a connection that cannot be established is not a failure that asks to be waited out. The retries still run on the policy's own cadence (500 ms doubling), so the default spends ~15.5 s (0.5+1+2+4+8) on a blip before reporting it.
+
+### Fixed
+- **Claude models work again on Provider API accounts** ([#46](https://github.com/Mars-Sea/dsh-commandcode-provider/issues/46)). The Provider API serves the whole Claude family only through `/provider/v1/messages`: posted to `/provider/v1/chat/completions`, every catalog Claude id — all eight, verified by posting all 69 models to that endpoint on 2026-09-16 — answers `400 Model "<id>" must be called via /provider/v1/messages (Anthropic Messages shape)`. The adapter's only pre-stream fallback was the Go-plan `upgrade_required` 403, so the rejection surfaced to the user as `PROVIDER_HTTP_ERROR`; and because the non-Go tiers are exactly the ones `resolveProtocol()` sends to the Provider API, the accounts ENTITLED to Claude were the ones that could never use it. Those models now take the CLI transport, which routes every one of them (a lower-plan key gets the ordinary `MODEL_NOT_IN_PLAN` 403 there, never a routing error), so no Messages transport is needed in the adapter. The decision is deliberately NOT written to `protocolCache`, which is keyed by API key alone: remembering it would pin the whole ACCOUNT to the CLI transport and drag DeepSeek, GLM and Qwen — all correctly served by the Provider API — along with it, which is why `rememberProtocol()` is not called on that path. `MESSAGES_ONLY_MODELS` in `src/capabilities.ts` records the measured set, and `requiresMessagesEndpoint()` also treats any `claude-*` id as Messages-only, so a Claude model shipping after this release is routed correctly by an un-updated plugin instead of hard-failing with the 400 above. The same sweep also confirmed the neighbouring report is a non-issue for this plugin: the reasoning-replay and thinking-display paths read every field spelling the gateway emits (see Added).
+- **A transport failure no longer retries toward the 1000-attempt budget** ([#39](https://github.com/Mars-Sea/dsh-commandcode-provider/issues/39), second report). The report after 0.11.1 showed no context-window rejection at all: at ~710k tokens the adapter failed with undici's own `Connect Timeout Error ... timeout: 10000ms` (its default connect timeout — this plugin's `requestTimeoutMs` is 60 s and the connection phase never runs against the body upload) and, on another attempt, `read ECONNRESET` against `/alpha/generate`. Both are `TRANSPORT`, which the retry policy whitelists, so each entered the same 1000-attempt loop the 0.11.2 context-window fix left untouched: with waits doubling from 500 ms, the wait before attempt 11 alone is 512 s and the cumulative wait before it is ~500 s — the `模型请求重试已取消（11/1000）· 482s` row in the report is that 512 s countdown, 30 s in. `TRANSPORT` failures now consume a bounded budget on the `agent/request-error` hook: the first five are retried (~15.5 s of grace — 0.5+1+2+4+8 s waits, and the reporter's own first screenshot, a single `read ECONNRESET` that recovered on the next attempt, stays invisible), and the sixth surfaces the turn with a diagnosis that says what it is (connectivity, *not* a context-window or request-size rejection) and what usually fixes it. The check runs before the budget, so a cancelled turn is never retried and never spends a slot; the budget resets at each new step (one step *is* one model request, so the cap is per request and every step of a turn gets its own grace); and the accounting is keyed per agent, so one session's outage cannot disable another's retries. Everything else — the rate-limit window, a gateway 520, account rotation, the 413 image step-down — is unchanged. The report's "long context" correlation is a red herring, and this change does not depend on ruling it in or out: verified against the live endpoint, request bodies of 1/8/30 MB all returned the provider's own `401` in 1.9/2.7/5.7 s. `tests/transport-retry.test.ts` pins the budget, the per-agent isolation, the cancellation ordering and the message.
+- **A message with no `source` tag no longer kills the whole stream** ([#47](https://github.com/Mars-Sea/dsh-commandcode-provider/issues/47)). `messagesToCC` read `message.source.kind` at four sites to tell a tool result from a plain user message. `source` is producer-supplied and nothing validates it — dsh-llm's type declares it required, but the runtime never checks it and every adapter shipped before this one ignored the field entirely (`dsh-llm-deepseek` never reads it) — so a third-party plugin that assembles its own history can omit it and keep working everywhere else. This adapter, the first to actually read the field, was therefore the first to crash on such a message: `TypeError: Cannot read properties of undefined (reading 'kind')` in the serialization phase, 0–8 ms in, before a request was sent, with an error naming neither the message nor the producer. Both transports now classify a message through one predicate (`isToolResultMessage()`): a PRESENT tag stays authoritative, while an ABSENT one falls back to the content shape — a `user` message whose first block is a `tool-result` is still a tool result, because `pairedToolCalls()` counts such a block from ANY message and dropping it at emission would leave the assistant's tool call unanswered, which the gateway rejects. An untagged plain user message (the reported case, from dsh-mneme's memory pipeline) is now simply converted as the user message it is. Pinned by three tests in `tests/adapter.test.ts`, each run through both transports: the untagged user message, the untagged tool result, and the authoritative tag.
+- **The plugin's stylesheet no longer reaches into other components' markup** ([#48](https://github.com/Mars-Sea/dsh-commandcode-provider/issues/48)). Installing the plugin stacked the `ask_user_question` dialog's side-by-side buttons vertically. The cause was one rule in the panel stylesheet, `[class*="_footerActions"]{flex-direction:column}`, written for the sidebar's footer-action container so this card's full-width line and ui-cordis's chip stack instead of overflowing the shell's flex ROW. `footerActions` is not a stem the sidebar owns alone: `@deepseek-ai/dsh-client-ui-user-questions` renders that dialog's button row as `Mbwy4a_footerActions`, so the unanchored attribute-substring selector matched it too and overrode the row's `display:flex`. The rule is now anchored to the sidebar's own foot area (`[class*="_footArea"] [class*="_footerActions"]`), a stem declared by dsh-client-ui-sidebar alone — audited across every client bundle of the 0.1.6-alpha.1 engine, together with our own `cc-`/`ccp-` class names, which collide with no engine class — so the sidebar layout fix is unchanged and no other component can be reached. The settings-page stylesheet moved to `src/client/page-styles.ts` so both sheets can be audited without importing the React tree, and `tests/styles.test.ts` now enforces the containment in two layers: a structural audit of every selector compound in both sheets, and a simulation against the real foreign class stems proving the dialog's row is no longer matched while the sidebar's still is.
+
 ## [0.11.2] - 2026-09-15
 
 ### Added

package/lib/client.js

@@ -157,6 +157,10 @@ window.__ModuleLoader__.load({
 				min: 1,
 				max: MAX_TIMEOUT_MS
 			}),
+			numberField$1("transportMaxRetries", {
+				min: 0,
+				max: 50
+			}),
 			booleanField$1("filterModelsByPlan"),
 			booleanField$1("webSearch"),
 			booleanField$1("showSidebarQuota"),
@@ -310,6 +314,7 @@ window.__ModuleLoader__.load({
 					defaultWorkingDir: this.defaultWorkingDir,
 					requestTimeoutMs: this.field("requestTimeoutMs"),
 					streamIdleTimeoutMs: this.field("streamIdleTimeoutMs"),
+					transportMaxRetries: this.field("transportMaxRetries"),
 					filterModelsByPlan: this.field("filterModelsByPlan"),
 					webSearch: this.field("webSearch"),
 					showSidebarQuota: this.field("showSidebarQuota"),
@@ -2150,7 +2155,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region package.json
-		var version = "0.11.2";
+		var version = "0.11.3";
 		var repository = {
 			"type": "git",
 			"url": "git+https://github.com/Mars-Sea/dsh-commandcode-provider.git"
@@ -2349,6 +2354,7 @@ window.__ModuleLoader__.load({
 			"workingDir",
 			"requestTimeoutMs",
 			"streamIdleTimeoutMs",
+			"transportMaxRetries",
 			"filterModelsByPlan",
 			"webSearch",
 			"showSidebarQuota"
@@ -2494,6 +2500,17 @@ window.__ModuleLoader__.load({
 								onReset: () => onReset("streamIdleTimeoutMs"),
 								t
 							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Field, {
+								id: "cc-transport-max-retries",
+								label: t("transportMaxRetries"),
+								hint: t("transportMaxRetriesHint"),
+								state: state.transportMaxRetries,
+								disabled,
+								numeric: true,
+								onEdit: (text) => onEdit("transportMaxRetries", text),
+								onReset: () => onReset("transportMaxRetries"),
+								t
+							}),
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ToggleField, {
 								id: "cc-filter-models-by-plan",
 								label: t("filterModelsByPlan"),
@@ -5582,6 +5599,165 @@ window.__ModuleLoader__.load({
 				"data-ccp-session-cost-anchor": ""
 			});
 		}
+		//#endregion
+		//#region src/client/page-styles.ts
+		/**
+		* Stylesheet for the Command Code settings page — and the Models-page provider
+		* card, which shares its `cc-` classes.
+		*
+		* Returned as a string rather than injected here so the modules stay free of
+		* DOM side effects at import time: `./index.ts` installs it once, keyed by
+		* `PAGE_CSS_ID`. It is a module of its own rather than a literal inside the
+		* client entry so `tests/styles.test.ts` can audit every rule without importing
+		* the React tree (which pulls `*.module.css` through the primitives package and
+		* needs a loader registered first).
+		*
+		* Every colour comes from a harness theme alias with a neutral fallback, so the
+		* page follows the active theme (light/dark and any brand pack) without
+		* hardcoded values. Classes are `cc-` prefixed to stay clear of the panel's
+		* `ccp-` set.
+		*
+		* @module dsh-commandcode-provider/client/page-styles
+		*/
+		/**
+		* Stylesheet id (the `data-plugin-css` value that makes injection idempotent).
+		*
+		* The package prefix must match the one the panel stylesheet uses
+		* (`PANEL_CSS_ID` in `./panel-styles.ts`) and this package's real name: an id is
+		* the injection's identity, so a stale fork prefix would let a second copy of
+		* the plugin inject the same rules twice and would misreport the owner in the
+		* DOM. The two ids must also stay distinct from each other — they key two
+		* separate style tags, and a shared id would make the second injection a no-op
+		* that silently drops one stylesheet.
+		*/
+		const PAGE_CSS_ID = "@mars-sea/dsh-commandcode-provider/CommandCodeSettingsPage.module.css";
+		/** The settings-page stylesheet. */
+		const PAGE_CSS = `
+.cc-section{max-width:720px;color:var(--dsw-alias-label-primary);flex-direction:column;gap:12px;display:flex}
+.cc-title{margin:0;font-size:18px;font-weight:600}
+.cc-intro{color:var(--dsw-alias-label-tertiary);margin:0;font-size:13px;line-height:1.5}
+.cc-readOnly{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}
+.cc-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;padding:4px 16px}
+.cc-field{flex-direction:column;gap:6px;padding:12px 0;display:flex}
+.cc-field+.cc-field{border-top:1px solid var(--dsw-alias-border-l2)}
+.cc-fieldHead{align-items:center;gap:8px;display:flex}
+.cc-label{min-width:0;color:var(--dsw-alias-label-primary);flex:1;font-size:13px;font-weight:500;line-height:1.5}
+.cc-badges{align-items:center;gap:8px;display:inline-flex}
+.cc-badge{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}
+.cc-badgeMuted{white-space:nowrap;color:var(--dsw-alias-label-tertiary);border-radius:999px;padding:1px 8px;font-size:11px;line-height:17px}
+.cc-reset{font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;padding:0;font-size:12px;line-height:1.5}
+.cc-reset:hover:not(:disabled){color:var(--dsw-alias-label-primary)}
+.cc-reset:disabled{cursor:default;opacity:.5}
+.cc-input{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);height:34px;font:inherit;color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 12px;font-size:13px;line-height:1.5}
+.cc-input:focus-visible{border-color:var(--dsw-alias-brand-primary);outline:none}
+.cc-input:disabled{color:var(--dsw-alias-label-tertiary);cursor:default}
+/* The routing-rule model multi-select: a button trigger that opens an
+ * anchored Menu of checkbox rows. The trigger mirrors .cc-input sizing so it
+ * sits flush with the sibling account select. */
+.cc-ruleTrigger{align-items:center;gap:8px;display:flex;width:100%;text-align:left;cursor:pointer}
+.cc-ruleTrigger:disabled{cursor:default}
+.cc-ruleTriggerText{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.cc-ruleCaret{flex-shrink:0;border-right:1.5px solid var(--dsw-alias-label-tertiary);border-bottom:1.5px solid var(--dsw-alias-label-tertiary);width:6px;height:6px;margin-right:4px;margin-bottom:2px;transform:rotate(45deg)}
+.cc-checkRow{align-items:center;gap:8px;display:inline-flex;min-width:0}
+.cc-checkRow:hover{cursor:pointer}
+.cc-check{appearance:none;flex-shrink:0;width:15px;height:15px;margin:0;border:1px solid var(--dsw-alias-border-l2);border-radius:4px;background:var(--dsw-alias-bg-layer-1);position:relative}
+.cc-check:checked{background:var(--dsw-alias-brand-primary);border-color:var(--dsw-alias-brand-primary)}
+.cc-check:checked::after{content:'';position:absolute;top:2px;left:5px;width:3px;height:7px;border:solid #fff;border-width:0 1.5px 1.5px 0;transform:rotate(45deg)}
+.cc-checkName{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+/* The model multi-select search box: stacked under the trigger while the
+ * dropdown is open, same input sizing so the pair reads as one control. The
+ * box lives inside the Menu anchor (which renders inside the Menu's root
+ * span), so focusing/typing it never trips the Menu's outside-click close. */
+.cc-modelSelectAnchor{flex-direction:column;gap:6px;display:flex;width:100%}
+.cc-modelSearch{width:100%}
+.cc-modelSearch::-webkit-search-cancel-button{cursor:pointer}
+/* Selects need their own treatment to sit flush with the text inputs:
+ * the UA stylesheet renders <select> border-box (34px total vs the inputs'
+ * 36px) and forces its own menulist text metrics, so drop the native
+ * chrome entirely (appearance:none), restore content-box so the outer box
+ * matches the inputs again, and draw the chevron ourselves. Longhand
+ * background-* only — the shorthand would reset .cc-input's background. */
+select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box-sizing:content-box;padding-right:32px;background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='7' viewBox='0 0 12 7'%3E%3Cpath d='M1 1l5 5 5-5' fill='none' stroke='%23888f98' stroke-width='1.6' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E");background-repeat:no-repeat;background-position:right 11px center}
+.cc-inputInvalid{border-color:var(--dsw-alias-label-error)}
+.cc-invalid{color:var(--dsw-alias-label-error);margin:0;font-size:12px;line-height:1.5}
+/* The Advanced card: its header row is one full-width toggle button; the
+ * chevron is two borders on a rotated square (no icon dependency). */
+.cc-advancedHead{align-items:center;gap:8px;display:flex;width:100%;padding:12px 0;background:0 0;border:none;cursor:pointer;font:inherit;text-align:left}
+.cc-advancedHead:hover .cc-advancedTitle{color:var(--dsw-alias-label-primary)}
+.cc-advancedTitle{color:var(--dsw-alias-label-primary);font-size:13px;font-weight:500;line-height:1.5}
+.cc-advancedSpacer{flex:1}
+.cc-chevron{flex-shrink:0;border-right:1.5px solid var(--dsw-alias-label-tertiary);border-bottom:1.5px solid var(--dsw-alias-label-tertiary);width:8px;height:8px;margin-right:4px;margin-bottom:2px;transform:rotate(45deg);transition:transform .15s ease}
+.cc-chevronUp{transform:rotate(-135deg);margin-bottom:-3px}
+.cc-advancedBody{flex-direction:column;display:flex}
+.cc-advancedBody>.cc-field:first-of-type{border-top:1px solid var(--dsw-alias-border-l2)}
+.cc-hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}
+.cc-footer{justify-content:flex-end;align-items:center;gap:8px;display:flex}
+.cc-toggleRow{align-items:center;gap:8px;cursor:pointer;display:flex}
+.cc-toggleRow:has(.cc-toggle:disabled){cursor:default}
+.cc-toggle{appearance:none;flex-shrink:0;background:var(--dsw-alias-border-l2);border-radius:999px;width:30px;height:18px;margin:0;cursor:pointer;position:relative;transition:background .15s ease}
+.cc-toggle:checked{background:var(--dsw-alias-brand-primary)}
+.cc-toggle::after{content:'';background:#fff;border-radius:50%;width:14px;height:14px;position:absolute;top:2px;left:2px;transition:left .15s ease}
+.cc-toggle:checked::after{left:14px}
+.cc-toggle:disabled{cursor:default;opacity:.5}
+.cc-failed{min-width:0;color:var(--dsw-alias-label-error);flex:1;margin:0;font-size:12px;line-height:1.5}
+.cc-usageCard{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;padding:14px 16px;flex-direction:column;gap:12px;display:flex}
+.cc-usageHead{align-items:center;gap:8px;display:flex}
+.cc-usageTitle{color:var(--dsw-alias-label-primary);flex:1;margin:0;font-size:13px;font-weight:600;line-height:1.5}
+.cc-usageAccount{max-width:40%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}
+.cc-usagePlan{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-brand-primary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:600;line-height:17px}
+.cc-usagePlanStatus{white-space:nowrap;color:var(--dsw-alias-label-error);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}
+.cc-usageRefresh{font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;padding:0;font-size:12px;line-height:1.5}
+.cc-usageRefresh:hover:not(:disabled){color:var(--dsw-alias-label-primary)}
+.cc-usageRefresh:disabled{cursor:default;opacity:.5}
+.cc-usageHint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}
+.cc-usageError{align-items:center;gap:8px;color:var(--dsw-alias-label-error);margin:0;font-size:12px;line-height:1.5;display:flex}
+.cc-usageStats{grid-template-columns:repeat(auto-fit,minmax(120px,1fr));gap:8px;display:grid}
+.cc-usageStat{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:8px;padding:8px 10px;flex-direction:column;gap:2px;display:flex}
+.cc-usageStatLabel{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5}
+.cc-usageStatValue{color:var(--dsw-alias-label-primary);font-size:15px;font-weight:600;line-height:1.4}
+.cc-usageStatSub{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5}
+.cc-usageWindows{flex-direction:column;gap:16px;display:flex}
+.cc-usageWindow{flex-direction:column;gap:6px;display:flex}
+.cc-usageWindowHead{align-items:baseline;gap:8px;display:flex}
+.cc-usageWindowLabel{color:var(--dsw-alias-label-secondary);flex:1;font-size:12px;font-weight:500;line-height:1.5}
+.cc-usageWindowValue{color:var(--dsw-alias-label-primary);font-size:12px;font-weight:500;line-height:1.5}
+.cc-usageExceeded{color:var(--dsw-alias-label-error);font-size:11px;font-weight:500;line-height:1.5}
+.cc-usageBar{overflow:hidden;background:var(--dsw-alias-bg-layer-1);border-radius:999px;height:6px}
+.cc-usageBarFill{background:var(--dsw-alias-brand-primary);border-radius:999px;height:100%;transition:width .3s ease}
+.cc-usageBarFillWarn{background:var(--dsw-alias-label-error)}
+@media (prefers-reduced-motion:reduce){.cc-chevron,.cc-toggle,.cc-toggle::after,.cc-usageBarFill{transition:none}}.cc-usageWindowReset{color:var(--dsw-alias-label-tertiary);margin:0;font-size:11px;line-height:1.5}
+.cc-usageMeta{align-items:center;gap:8px;display:flex}
+.cc-accountReport{flex-direction:column;gap:12px;display:flex}
+.cc-tabs{flex-wrap:wrap;gap:6px;display:flex}
+.cc-tab{align-items:center;font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:var(--dsw-alias-bg-layer-1);border:1px solid var(--dsw-alias-border-l2);border-radius:999px;padding:2px 10px;font-size:12px;line-height:18px;display:inline-flex;gap:6px}
+.cc-tab:hover:not(.cc-tabActive){color:var(--dsw-alias-label-primary)}
+.cc-tabActive{color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-brand-primary)}
+.cc-tabDotOk{background:var(--dsw-alias-brand-primary);border-radius:50%;width:6px;height:6px}
+.cc-tabDotWarn{background:#d97706;border-radius:50%;width:6px;height:6px}
+.cc-tabDotError{background:var(--dsw-alias-label-error);border-radius:50%;width:6px;height:6px}
+.cc-usageMetaSpacer{flex:1}
+.cc-usageUpdated{color:var(--dsw-alias-label-tertiary);margin:0;font-size:11px;line-height:1.5}
+.cc-usagePartial{color:var(--dsw-alias-label-error);margin:0;font-size:11px;line-height:1.5}
+.cc-usageBlocked{border:1px solid var(--dsw-alias-label-error);border-radius:10px;padding:10px 12px;display:flex;flex-direction:column;gap:4px}
+.cc-usageBlockedTitle{color:var(--dsw-alias-label-error);margin:0;font-size:13px;font-weight:600;line-height:1.5}
+.cc-usageBlockedHint{color:var(--dsw-alias-label-secondary);margin:0;font-size:12px;line-height:1.5}
+.cc-version{margin:4px 0 0;text-align:center;color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:1.5}
+/* The Models-page provider panel root: unstyled by design — the row card the
+ * Models page owns supplies the surface, the panel only stacks its controls. */
+.cc-providerCard{flex-direction:column;display:flex}
+/* The update hint rides the footer version line: warning-tinted (with a
+ * muted fallback for themes without the alias), quiet until hovered. */
+.cc-versionLink{color:var(--dsw-alias-state-warning-primary,var(--dsw-alias-label-secondary));text-decoration:none}
+.cc-versionLink:hover{color:var(--dsw-alias-label-primary);text-decoration:underline;text-underline-position:under}
+/* The login panel rides the connection card as one more field row; the
+ * authorization link is the only branded element on it. */
+.cc-loginLink{color:var(--dsw-alias-brand-primary);text-decoration:none;font-size:12px;line-height:1.5}
+.cc-loginLink:hover{text-decoration:underline;text-underline-position:under}
+.cc-loginDone{color:var(--dsw-alias-state-success-primary,var(--dsw-alias-label-secondary))}
+.cc-loginError{color:var(--dsw-alias-label-error)}
+.cc-saved{color:var(--dsw-alias-state-success-primary,var(--dsw-alias-label-secondary));margin:0;font-size:12px;font-weight:500;line-height:1.5}
+.cc-badgeWarn{background:var(--dsw-alias-state-warning-secondary,var(--dsw-alias-bg-module-platform));color:var(--dsw-alias-state-warning-primary,var(--dsw-alias-label-secondary))}
+`;
 		//#endregion
 		//#region src/client/panel-styles.ts
 		/**
@@ -5590,8 +5766,16 @@ window.__ModuleLoader__.load({
 		*
 		* Returned as a string rather than injected here so the modules stay free of
 		* DOM side effects at import time — the client entry installs it once, keyed
-		* by the same `data-plugin-css` attribute the settings-page stylesheet uses,
-		* and removes it again when the plugin's fiber unwinds.
+		* by the same `data-plugin-css` attribute the settings-page stylesheet
+		* (`./page-styles.ts`) uses, and removes it again when the plugin's fiber
+		* unwinds.
+		*
+		* These rules are GLOBAL CSS: every selector in here can match markup this
+		* plugin did not render. So each one is either qualified by a `ccp-` class of
+		* our own, or anchored to the sidebar region it has to lay out — and the one
+		* foreign anchor carries its justification in place (see the footer card
+		* block; issue #48). `tests/styles.test.ts` audits that containment for both
+		* stylesheets and simulates it against the real foreign class stems.
 		*
 		* Every colour comes from a harness theme alias with a neutral fallback, so
 		* the panel follows the active theme (light/dark and any brand pack) without
@@ -5604,9 +5788,12 @@ window.__ModuleLoader__.load({
 		* Stylesheet id (the `data-plugin-css` value that makes injection idempotent).
 		*
 		* The package prefix must match the one the settings-page stylesheet uses
-		* (`injectPageCss` in `./index.ts`) and this package's real name: an id is the
-		* injection's identity, so a stale fork prefix would let a second copy of the
-		* plugin inject the same rules twice and would misreport the owner in the DOM.
+		* (`PAGE_CSS_ID` in `./page-styles.ts`) and this package's real name: an id is
+		* the injection's identity, so a stale fork prefix would let a second copy of
+		* the plugin inject the same rules twice and would misreport the owner in the
+		* DOM. The two ids must also stay distinct from each other — they key two
+		* separate style tags, and a shared id would make the second injection a no-op
+		* that silently drops one stylesheet.
 		*/
 		const PANEL_CSS_ID = "@mars-sea/dsh-commandcode-provider/CommandCodePanel.module.css";
 		/** The panel stylesheet. */
@@ -5620,11 +5807,28 @@ window.__ModuleLoader__.load({
 
    The shell's container is a flex ROW whose occupants (this card and ui-cordis's
    footer chip) each declare a full-width line and shrink-proof flex, so as a row
-   it would overflow the column. Both were written for a full-width line, which
-   is exactly what a column gives them. Matched by the CSS-module class STEM —
-   never a hashed name — so a dsh that renames it degrades to the shell's own
-   row rather than breaking. */
-[class*="_footerActions"]{flex-direction:column}
+   it would overflow the column: this card's flex:0 0 auto cannot shrink, and the
+   chip's width:100% basis would absorb the whole overflow and collapse to
+   nothing. Both were written for a full-width line, which is exactly what a
+   column gives them. Matched by the CSS-module class STEM — never a hashed name
+   — so a dsh that renames it degrades to the shell's own row rather than
+   breaking.
+
+   THE ANCHOR IS LOAD-BEARING, and it is the whole reason this selector is not
+   just [class*="_footerActions"] (issue #48). "footerActions" is NOT a stem this
+   shell owns alone: @deepseek-ai/dsh-client-ui-user-questions renders the
+   ask-user-question dialog's button row as Mbwy4a_footerActions, so the
+   unanchored rule forced THAT row into a column too and stacked the dialog's
+   side-by-side buttons on every page. "footArea" is declared by
+   dsh-client-ui-sidebar alone — verified against every client bundle of the
+   0.1.6-alpha.1 engine, and against our own cc-/ccp- class names, which collide
+   with no engine class — so anchoring under it keeps the sidebar layout fix and
+   cannot reach another component's markup. The descendant combinator (rather
+   than a child one) deliberately survives a wrapper element appearing between
+   the two: a renamed or restructured shell should degrade to its own row, not
+   lose the fix. tests/styles.test.ts pins both halves of this — the dialog row
+   is no longer matched, the sidebar row still is. */
+[class*="_footArea"] [class*="_footerActions"]{flex-direction:column}
 .ccp-foot{box-sizing:border-box;flex:0 0 auto;width:100%;min-width:0;font:inherit;color:var(--dsw-alias-label-secondary);text-align:left;cursor:pointer;background:0 0;border:1px solid transparent;border-radius:10px;flex-direction:column;gap:6px;margin:0 0 4px;padding:8px;display:flex}
 .ccp-foot:hover{color:var(--dsw-alias-label-primary);background:var(--dsw-alias-interactive-bg-hover);border-color:var(--dsw-alias-border-l2)}
 .ccp-foot:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}
@@ -5750,6 +5954,8 @@ window.__ModuleLoader__.load({
 			requestTimeoutMsHint: "等待响应首个字节的超时；默认 60000。",
 			streamIdleTimeoutMs: "流空闲超时（毫秒）",
 			streamIdleTimeoutMsHint: "生成流停滞多久视为断连；默认 300000（长思考模型可静默数分钟，默认值刻意放宽）。",
+			transportMaxRetries: "网络失败重试次数",
+			transportMaxRetriesHint: "连接失败时自动重试几次，默认 5（各次等待 0.5+1+2+4+8 秒，合计约 15 秒）。超过后直接报错，不再按指数退避长时间等待；填 0 表示不重试。限流、5xx 等由服务端要求重试的失败不受此项影响。",
 			advancedSettings: "高级设置",
 			advancedSettingsHint: "API 地址、工作目录、超时、模型过滤、联网搜索与侧边栏额度卡片等不常修改的选项。",
 			advancedOverriddenOne: "已自定义 1 项",
@@ -5884,6 +6090,8 @@ window.__ModuleLoader__.load({
 			requestTimeoutMsHint: "Time to wait for the first response byte; default 60000.",
 			streamIdleTimeoutMs: "Stream idle timeout (ms)",
 			streamIdleTimeoutMsHint: "How long a stalled stream is treated as dead; default 300000 (deliberately generous — long-thinking models can stay silent for minutes).",
+			transportMaxRetries: "Transport retries",
+			transportMaxRetriesHint: "How many times a failed connection is retried automatically; default 5 (waits of 0.5+1+2+4+8s, ~15s in total). After that the failure is reported instead of waiting on the exponential backoff. 0 disables the retries. Rate limits and 5xx answers keep their own, longer retry window.",
 			advancedSettings: "Advanced",
 			advancedSettingsHint: "Rarely touched options: API base URL, working directory, timeouts, model filtering, web search, and the sidebar quota card.",
 			advancedOverriddenOne: "1 customized",
@@ -6003,141 +6211,13 @@ window.__ModuleLoader__.load({
 		};
 		//#endregion
 		//#region src/client/index.ts
-		/** CSS for the settings page, injected once (harness bundle convention). */
-		const PAGE_CSS = `
-.cc-section{max-width:720px;color:var(--dsw-alias-label-primary);flex-direction:column;gap:12px;display:flex}
-.cc-title{margin:0;font-size:18px;font-weight:600}
-.cc-intro{color:var(--dsw-alias-label-tertiary);margin:0;font-size:13px;line-height:1.5}
-.cc-readOnly{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}
-.cc-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;padding:4px 16px}
-.cc-field{flex-direction:column;gap:6px;padding:12px 0;display:flex}
-.cc-field+.cc-field{border-top:1px solid var(--dsw-alias-border-l2)}
-.cc-fieldHead{align-items:center;gap:8px;display:flex}
-.cc-label{min-width:0;color:var(--dsw-alias-label-primary);flex:1;font-size:13px;font-weight:500;line-height:1.5}
-.cc-badges{align-items:center;gap:8px;display:inline-flex}
-.cc-badge{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}
-.cc-badgeMuted{white-space:nowrap;color:var(--dsw-alias-label-tertiary);border-radius:999px;padding:1px 8px;font-size:11px;line-height:17px}
-.cc-reset{font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;padding:0;font-size:12px;line-height:1.5}
-.cc-reset:hover:not(:disabled){color:var(--dsw-alias-label-primary)}
-.cc-reset:disabled{cursor:default;opacity:.5}
-.cc-input{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);height:34px;font:inherit;color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 12px;font-size:13px;line-height:1.5}
-.cc-input:focus-visible{border-color:var(--dsw-alias-brand-primary);outline:none}
-.cc-input:disabled{color:var(--dsw-alias-label-tertiary);cursor:default}
-/* The routing-rule model multi-select: a button trigger that opens an
- * anchored Menu of checkbox rows. The trigger mirrors .cc-input sizing so it
- * sits flush with the sibling account select. */
-.cc-ruleTrigger{align-items:center;gap:8px;display:flex;width:100%;text-align:left;cursor:pointer}
-.cc-ruleTrigger:disabled{cursor:default}
-.cc-ruleTriggerText{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
-.cc-ruleCaret{flex-shrink:0;border-right:1.5px solid var(--dsw-alias-label-tertiary);border-bottom:1.5px solid var(--dsw-alias-label-tertiary);width:6px;height:6px;margin-right:4px;margin-bottom:2px;transform:rotate(45deg)}
-.cc-checkRow{align-items:center;gap:8px;display:inline-flex;min-width:0}
-.cc-checkRow:hover{cursor:pointer}
-.cc-check{appearance:none;flex-shrink:0;width:15px;height:15px;margin:0;border:1px solid var(--dsw-alias-border-l2);border-radius:4px;background:var(--dsw-alias-bg-layer-1);position:relative}
-.cc-check:checked{background:var(--dsw-alias-brand-primary);border-color:var(--dsw-alias-brand-primary)}
-.cc-check:checked::after{content:'';position:absolute;top:2px;left:5px;width:3px;height:7px;border:solid #fff;border-width:0 1.5px 1.5px 0;transform:rotate(45deg)}
-.cc-checkName{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
-/* The model multi-select search box: stacked under the trigger while the
- * dropdown is open, same input sizing so the pair reads as one control. The
- * box lives inside the Menu anchor (which renders inside the Menu's root
- * span), so focusing/typing it never trips the Menu's outside-click close. */
-.cc-modelSelectAnchor{flex-direction:column;gap:6px;display:flex;width:100%}
-.cc-modelSearch{width:100%}
-.cc-modelSearch::-webkit-search-cancel-button{cursor:pointer}
-/* Selects need their own treatment to sit flush with the text inputs:
- * the UA stylesheet renders <select> border-box (34px total vs the inputs'
- * 36px) and forces its own menulist text metrics, so drop the native
- * chrome entirely (appearance:none), restore content-box so the outer box
- * matches the inputs again, and draw the chevron ourselves. Longhand
- * background-* only — the shorthand would reset .cc-input's background. */
-select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box-sizing:content-box;padding-right:32px;background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='7' viewBox='0 0 12 7'%3E%3Cpath d='M1 1l5 5 5-5' fill='none' stroke='%23888f98' stroke-width='1.6' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E");background-repeat:no-repeat;background-position:right 11px center}
-.cc-inputInvalid{border-color:var(--dsw-alias-label-error)}
-.cc-invalid{color:var(--dsw-alias-label-error);margin:0;font-size:12px;line-height:1.5}
-/* The Advanced card: its header row is one full-width toggle button; the
- * chevron is two borders on a rotated square (no icon dependency). */
-.cc-advancedHead{align-items:center;gap:8px;display:flex;width:100%;padding:12px 0;background:0 0;border:none;cursor:pointer;font:inherit;text-align:left}
-.cc-advancedHead:hover .cc-advancedTitle{color:var(--dsw-alias-label-primary)}
-.cc-advancedTitle{color:var(--dsw-alias-label-primary);font-size:13px;font-weight:500;line-height:1.5}
-.cc-advancedSpacer{flex:1}
-.cc-chevron{flex-shrink:0;border-right:1.5px solid var(--dsw-alias-label-tertiary);border-bottom:1.5px solid var(--dsw-alias-label-tertiary);width:8px;height:8px;margin-right:4px;margin-bottom:2px;transform:rotate(45deg);transition:transform .15s ease}
-.cc-chevronUp{transform:rotate(-135deg);margin-bottom:-3px}
-.cc-advancedBody{flex-direction:column;display:flex}
-.cc-advancedBody>.cc-field:first-of-type{border-top:1px solid var(--dsw-alias-border-l2)}
-.cc-hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}
-.cc-footer{justify-content:flex-end;align-items:center;gap:8px;display:flex}
-.cc-toggleRow{align-items:center;gap:8px;cursor:pointer;display:flex}
-.cc-toggleRow:has(.cc-toggle:disabled){cursor:default}
-.cc-toggle{appearance:none;flex-shrink:0;background:var(--dsw-alias-border-l2);border-radius:999px;width:30px;height:18px;margin:0;cursor:pointer;position:relative;transition:background .15s ease}
-.cc-toggle:checked{background:var(--dsw-alias-brand-primary)}
-.cc-toggle::after{content:'';background:#fff;border-radius:50%;width:14px;height:14px;position:absolute;top:2px;left:2px;transition:left .15s ease}
-.cc-toggle:checked::after{left:14px}
-.cc-toggle:disabled{cursor:default;opacity:.5}
-.cc-failed{min-width:0;color:var(--dsw-alias-label-error);flex:1;margin:0;font-size:12px;line-height:1.5}
-.cc-usageCard{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;padding:14px 16px;flex-direction:column;gap:12px;display:flex}
-.cc-usageHead{align-items:center;gap:8px;display:flex}
-.cc-usageTitle{color:var(--dsw-alias-label-primary);flex:1;margin:0;font-size:13px;font-weight:600;line-height:1.5}
-.cc-usageAccount{max-width:40%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}
-.cc-usagePlan{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-brand-primary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:600;line-height:17px}
-.cc-usagePlanStatus{white-space:nowrap;color:var(--dsw-alias-label-error);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}
-.cc-usageRefresh{font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;padding:0;font-size:12px;line-height:1.5}
-.cc-usageRefresh:hover:not(:disabled){color:var(--dsw-alias-label-primary)}
-.cc-usageRefresh:disabled{cursor:default;opacity:.5}
-.cc-usageHint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}
-.cc-usageError{align-items:center;gap:8px;color:var(--dsw-alias-label-error);margin:0;font-size:12px;line-height:1.5;display:flex}
-.cc-usageStats{grid-template-columns:repeat(auto-fit,minmax(120px,1fr));gap:8px;display:grid}
-.cc-usageStat{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:8px;padding:8px 10px;flex-direction:column;gap:2px;display:flex}
-.cc-usageStatLabel{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5}
-.cc-usageStatValue{color:var(--dsw-alias-label-primary);font-size:15px;font-weight:600;line-height:1.4}
-.cc-usageStatSub{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5}
-.cc-usageWindows{flex-direction:column;gap:16px;display:flex}
-.cc-usageWindow{flex-direction:column;gap:6px;display:flex}
-.cc-usageWindowHead{align-items:baseline;gap:8px;display:flex}
-.cc-usageWindowLabel{color:var(--dsw-alias-label-secondary);flex:1;font-size:12px;font-weight:500;line-height:1.5}
-.cc-usageWindowValue{color:var(--dsw-alias-label-primary);font-size:12px;font-weight:500;line-height:1.5}
-.cc-usageExceeded{color:var(--dsw-alias-label-error);font-size:11px;font-weight:500;line-height:1.5}
-.cc-usageBar{overflow:hidden;background:var(--dsw-alias-bg-layer-1);border-radius:999px;height:6px}
-.cc-usageBarFill{background:var(--dsw-alias-brand-primary);border-radius:999px;height:100%;transition:width .3s ease}
-.cc-usageBarFillWarn{background:var(--dsw-alias-label-error)}
-@media (prefers-reduced-motion:reduce){.cc-chevron,.cc-toggle,.cc-toggle::after,.cc-usageBarFill{transition:none}}.cc-usageWindowReset{color:var(--dsw-alias-label-tertiary);margin:0;font-size:11px;line-height:1.5}
-.cc-usageMeta{align-items:center;gap:8px;display:flex}
-.cc-accountReport{flex-direction:column;gap:12px;display:flex}
-.cc-tabs{flex-wrap:wrap;gap:6px;display:flex}
-.cc-tab{align-items:center;font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:var(--dsw-alias-bg-layer-1);border:1px solid var(--dsw-alias-border-l2);border-radius:999px;padding:2px 10px;font-size:12px;line-height:18px;display:inline-flex;gap:6px}
-.cc-tab:hover:not(.cc-tabActive){color:var(--dsw-alias-label-primary)}
-.cc-tabActive{color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-brand-primary)}
-.cc-tabDotOk{background:var(--dsw-alias-brand-primary);border-radius:50%;width:6px;height:6px}
-.cc-tabDotWarn{background:#d97706;border-radius:50%;width:6px;height:6px}
-.cc-tabDotError{background:var(--dsw-alias-label-error);border-radius:50%;width:6px;height:6px}
-.cc-usageMetaSpacer{flex:1}
-.cc-usageUpdated{color:var(--dsw-alias-label-tertiary);margin:0;font-size:11px;line-height:1.5}
-.cc-usagePartial{color:var(--dsw-alias-label-error);margin:0;font-size:11px;line-height:1.5}
-.cc-usageBlocked{border:1px solid var(--dsw-alias-label-error);border-radius:10px;padding:10px 12px;display:flex;flex-direction:column;gap:4px}
-.cc-usageBlockedTitle{color:var(--dsw-alias-label-error);margin:0;font-size:13px;font-weight:600;line-height:1.5}
-.cc-usageBlockedHint{color:var(--dsw-alias-label-secondary);margin:0;font-size:12px;line-height:1.5}
-.cc-version{margin:4px 0 0;text-align:center;color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:1.5}
-/* The Models-page provider panel root: unstyled by design — the row card the
- * Models page owns supplies the surface, the panel only stacks its controls. */
-.cc-providerCard{flex-direction:column;display:flex}
-/* The update hint rides the footer version line: warning-tinted (with a
- * muted fallback for themes without the alias), quiet until hovered. */
-.cc-versionLink{color:var(--dsw-alias-state-warning-primary,var(--dsw-alias-label-secondary));text-decoration:none}
-.cc-versionLink:hover{color:var(--dsw-alias-label-primary);text-decoration:underline;text-underline-position:under}
-/* The login panel rides the connection card as one more field row; the
- * authorization link is the only branded element on it. */
-.cc-loginLink{color:var(--dsw-alias-brand-primary);text-decoration:none;font-size:12px;line-height:1.5}
-.cc-loginLink:hover{text-decoration:underline;text-underline-position:under}
-.cc-loginDone{color:var(--dsw-alias-state-success-primary,var(--dsw-alias-label-secondary))}
-.cc-loginError{color:var(--dsw-alias-label-error)}
-.cc-saved{color:var(--dsw-alias-state-success-primary,var(--dsw-alias-label-secondary));margin:0;font-size:12px;font-weight:500;line-height:1.5}
-.cc-badgeWarn{background:var(--dsw-alias-state-warning-secondary,var(--dsw-alias-bg-module-platform));color:var(--dsw-alias-state-warning-primary,var(--dsw-alias-label-secondary))}
-`;
 		/** Inject the page stylesheet once (idempotent per tag). */
 		function injectPageCss() {
 			if (typeof document === "undefined") return;
-			const id = "@mars-sea/dsh-commandcode-provider/CommandCodeSettingsPage.module.css";
-			if (document.querySelector(`style[data-plugin-css="${id}"]`) !== null) return;
+			if (document.querySelector(`style[data-plugin-css="@mars-sea/dsh-commandcode-provider/CommandCodeSettingsPage.module.css"]`) !== null) return;
 			const tag = document.createElement("style");
 			tag.dataset.plugin = "@mars-sea/dsh-commandcode-provider";
-			tag.dataset.pluginCss = id;
+			tag.dataset.pluginCss = PAGE_CSS_ID;
 			tag.textContent = PAGE_CSS;
 			document.head.appendChild(tag);
 		}