@mars-sea/dsh-commandcode-provider 0.11.9 → 0.11.11

package/lib/client.js

@@ -586,6 +586,16 @@ window.__ModuleLoader__.load({
 			booleanField$1("filterModelsByPlan"),
 			booleanField$1("webSearch"),
 			booleanField$1("showSidebarQuota"),
+			booleanField$1("commandGuard"),
+			numberField$1("commandGuardThreshold", {
+				min: .5,
+				max: 1
+			}),
+			numberField$1("commandGuardTimeoutMs", {
+				min: 200,
+				max: 1e4
+			}),
+			booleanField$1("zdr"),
 			textField("activeAccount")
 		];
 		/** Whether two model-id lists are equal as sets (order-insensitive). */
@@ -740,6 +750,10 @@ window.__ModuleLoader__.load({
 					filterModelsByPlan: this.field("filterModelsByPlan"),
 					webSearch: this.field("webSearch"),
 					showSidebarQuota: this.field("showSidebarQuota"),
+					commandGuard: this.field("commandGuard"),
+					commandGuardThreshold: this.field("commandGuardThreshold"),
+					commandGuardTimeoutMs: this.field("commandGuardTimeoutMs"),
+					zdr: this.field("zdr"),
 					sidebarQuota: this.sectionValue("showSidebarQuota") === true,
 					activeAccount: this.field("activeAccount"),
 					accounts,
@@ -1789,6 +1803,21 @@ window.__ModuleLoader__.load({
 		};
 		//#endregion
 		//#region src/client/login.ts
+		/** Keep one account's login status out of every other account's row. */
+		function loginStateForTarget(state, targetRef) {
+			if (state.targetRef === targetRef) return {
+				visible: state,
+				busyElsewhere: false
+			};
+			return {
+				visible: {
+					...state,
+					phase: "idle",
+					authUrl: void 0
+				},
+				busyElsewhere: state.phase === "starting" || state.phase === "waiting"
+			};
+		}
 		/** How often a live attempt is polled. */
 		const POLL_INTERVAL_MS = 1e3;
 		/**
@@ -1803,6 +1832,7 @@ window.__ModuleLoader__.load({
 			generation = 0;
 			disposed = false;
 			phase = "idle";
+			targetRef;
 			authUrl;
 			userName;
 			keyName;
@@ -1821,6 +1851,7 @@ window.__ModuleLoader__.load({
 			state() {
 				return {
 					phase: this.phase,
+					...this.targetRef === void 0 ? {} : { targetRef: this.targetRef },
 					authUrl: this.authUrl,
 					userName: this.userName,
 					keyName: this.keyName,
@@ -1829,9 +1860,10 @@ window.__ModuleLoader__.load({
 				};
 			}
 			/** Start (or rejoin) a login attempt and begin polling its status. */
-			async begin() {
+			async begin(targetRef) {
 				if (this.disposed || this.phase === "starting" || this.phase === "waiting") return;
 				const generation = ++this.generation;
+				this.targetRef = targetRef;
 				this.set({
 					phase: "starting",
 					authUrl: void 0,
@@ -1854,7 +1886,7 @@ window.__ModuleLoader__.load({
 				}
 				let result;
 				try {
-					result = await remote.loginBegin();
+					result = await remote.loginBegin(targetRef);
 				} catch (error) {
 					result = {
 						ok: false,
@@ -2092,6 +2124,15 @@ window.__ModuleLoader__.load({
 				booleanField
 			};
 		}
+		/** Use the same strict-codec shape for invocation parameters and results. */
+		function makeStrictCodec(typeSymbol, schema) {
+			return {
+				mode: "strict",
+				typeSymbol,
+				schema,
+				create: () => schema
+			};
+		}
 		/**
 		* Build one strict invocation descriptor. Every Command Code Remote shares the
 		* `commandcode` namespace, the `commandcodeUsage` service, and a strict
@@ -2100,12 +2141,7 @@ window.__ModuleLoader__.load({
 		* only its own facts.
 		*/
 		function makeRemoteDescriptor(endpoint, method, typeSymbol, schema) {
-			const result = {
-				mode: "strict",
-				typeSymbol,
-				schema,
-				create: () => schema
-			};
+			const result = makeStrictCodec(typeSymbol, schema);
 			return {
 				id: `${REMOTE_PACKAGE}#${endpoint}`,
 				service: REMOTE_SERVICE,
@@ -2158,7 +2194,7 @@ window.__ModuleLoader__.load({
 			const report = { failures };
 			if (source.blocked !== void 0) {
 				const blocked = source.blocked;
-				if (blocked === "invalid-key" || blocked === "service-unavailable" || blocked === "network") report.blocked = blocked;
+				if (blocked === "invalid-key" || blocked === "service-unavailable" || blocked === "invalid-response" || blocked === "network") report.blocked = blocked;
 				else reject$1("blocked");
 			}
 			if (source.account !== void 0) {
@@ -2374,9 +2410,24 @@ window.__ModuleLoader__.load({
 		}
 		/** The strict result codec shared by all three login endpoints. */
 		const loginStatusSchema = { parse: parseLoginStatus };
-		/** Build one login invocation descriptor (uniform result, no parameters). */
+		/** Optional account target; the Host still checks it against saved slots. */
+		const loginTargetSchema = { parse(value) {
+			if (value === void 0 || typeof value === "string") return value;
+			return reject("targetRef");
+		} };
+		/** Build one login invocation descriptor. Only begin accepts an account ref. */
 		function loginDescriptor(endpoint, method) {
-			return makeRemoteDescriptor(endpoint, method, `${REMOTE_PACKAGE}#CommandCodeLoginStatus`, loginStatusSchema);
+			const descriptor = makeRemoteDescriptor(endpoint, method, `${REMOTE_PACKAGE}#CommandCodeLoginStatus`, loginStatusSchema);
+			return method === "loginBegin" ? {
+				...descriptor,
+				parameters: [{
+					name: "targetRef",
+					wire: "targetRef",
+					source: "json",
+					codec: makeStrictCodec(`${REMOTE_PACKAGE}#CommandCodeLoginTargetRef`, loginTargetSchema),
+					acceptsUndefined: true
+				}]
+			} : descriptor;
 		}
 		/** The Client-face contribution fragment mounted on `ctx.remote`. */
 		const LOGIN_REMOTE_CONTRIBUTION = {
@@ -2390,9 +2441,10 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/client/login-row.tsx
 		/** The sign-in alternative to pasting a key (settings page + Models card). */
-		function LoginRow({ state, disabled, t, onBegin, onCancel }) {
-			const busy = state.phase === "starting" || state.phase === "waiting";
-			const hint = loginHint(state, t);
+		function LoginRow({ state, targetRef, disabled, disabledHint, t, onBegin, onCancel }) {
+			const { visible: visibleState, busyElsewhere } = loginStateForTarget(state, targetRef);
+			const busy = visibleState.phase === "starting" || visibleState.phase === "waiting";
+			const hint = loginHint(visibleState, t);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "cc-field",
 				children: [
@@ -2411,17 +2463,17 @@ window.__ModuleLoader__.load({
 							}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
 								className: "cc-reset",
-								disabled,
+								disabled: disabled || busyElsewhere,
 								onClick: onBegin,
 								children: t("loginButton")
 							})
 						})]
 					}),
-					state.authUrl !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+					visibleState.authUrl !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						className: "cc-hint",
 						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
 							className: "cc-loginLink",
-							href: state.authUrl,
+							href: visibleState.authUrl,
 							target: "_blank",
 							rel: "noreferrer",
 							children: t("loginOpenLink")
@@ -2430,7 +2482,7 @@ window.__ModuleLoader__.load({
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						className: hint.className,
 						title: hint.title,
-						children: hint.text
+						children: disabled && !busy && disabledHint !== void 0 ? disabledHint : hint.text
 					})
 				]
 			});
@@ -2579,7 +2631,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region package.json
-		var version = "0.11.9";
+		var version = "0.11.11";
 		var repository = {
 			"type": "git",
 			"url": "git+https://github.com/Mars-Sea/dsh-commandcode-provider.git"
@@ -2781,7 +2833,11 @@ window.__ModuleLoader__.load({
 			"transportMaxRetries",
 			"filterModelsByPlan",
 			"webSearch",
-			"showSidebarQuota"
+			"showSidebarQuota",
+			"commandGuard",
+			"commandGuardThreshold",
+			"commandGuardTimeoutMs",
+			"zdr"
 		];
 		/** One labelled field row in the page body. */
 		function Field({ id, label, hint, state, disabled, numeric, placeholder, onEdit, onReset, t }) {
@@ -2967,6 +3023,49 @@ window.__ModuleLoader__.load({
 								onEdit: (text) => onEdit("showSidebarQuota", text),
 								onReset: () => onReset("showSidebarQuota"),
 								t
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ToggleField, {
+								id: "cc-command-guard",
+								label: t("commandGuard"),
+								hint: t("commandGuardHint"),
+								state: state.commandGuard,
+								disabled,
+								defaultChecked: false,
+								onEdit: (text) => onEdit("commandGuard", text),
+								onReset: () => onReset("commandGuard"),
+								t
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Field, {
+								id: "cc-command-guard-threshold",
+								label: t("commandGuardThreshold"),
+								hint: t("commandGuardThresholdHint"),
+								state: state.commandGuardThreshold,
+								disabled,
+								onEdit: (text) => onEdit("commandGuardThreshold", text),
+								onReset: () => onReset("commandGuardThreshold"),
+								t
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Field, {
+								id: "cc-command-guard-timeout",
+								label: t("commandGuardTimeoutMs"),
+								hint: t("commandGuardTimeoutMsHint"),
+								state: state.commandGuardTimeoutMs,
+								disabled,
+								numeric: true,
+								onEdit: (text) => onEdit("commandGuardTimeoutMs", text),
+								onReset: () => onReset("commandGuardTimeoutMs"),
+								t
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ToggleField, {
+								id: "cc-zdr",
+								label: t("zdr"),
+								hint: t("zdrHint"),
+								state: state.zdr,
+								disabled,
+								defaultChecked: false,
+								onEdit: (text) => onEdit("zdr", text),
+								onReset: () => onReset("zdr"),
+								t
 							})
 						]
 					}) : null,
@@ -3337,12 +3436,14 @@ window.__ModuleLoader__.load({
 		function blockedTitle(reason, t) {
 			if (reason === "invalid-key") return t("usageKeyInvalid");
 			if (reason === "service-unavailable") return t("usageServiceUnavailable");
+			if (reason === "invalid-response") return t("usageInvalidResponse");
 			return t("usageNetworkError");
 		}
 		/** The actionable hint under a blocked report's headline. */
 		function blockedHint(reason, t) {
 			if (reason === "invalid-key") return t("usageKeyInvalidHint");
 			if (reason === "service-unavailable") return t("usageServiceUnavailableHint");
+			if (reason === "invalid-response") return t("usageInvalidResponseHint");
 			return t("usageNetworkHint");
 		}
 		/** The status dot on an account tab: cooling/invalid warn, everything else ok. */
@@ -3533,7 +3634,7 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/** The multi-account card: the active-account selector + extra accounts in rotation order + add button. */
-		function AccountsCard({ t, state, disabled, onAdd, onRemove, onLabel, onKey, onToggleClear, onActive, onActiveReset }) {
+		function AccountsCard({ t, state, login, disabled, onAdd, onRemove, onLabel, onKey, onToggleClear, onActive, onActiveReset, onBeginLogin, onCancelLogin }) {
 			const active = state.activeAccount;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "cc-card",
@@ -3611,14 +3712,31 @@ window.__ModuleLoader__.load({
 							})
 						]
 					}),
-					state.accounts.map((account) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountRow, {
-						account,
-						disabled,
-						t,
-						onLabel: (text) => onLabel(account.id, text),
-						onKey: (text) => onKey(account.id, text),
-						onToggleClear: () => onToggleClear(account.id),
-						onRemove: () => onRemove(account.id)
+					state.accounts.map((account) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "cc-accountEditor",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountRow, {
+							account,
+							disabled: disabled || login.targetRef === account.ref && (login.phase === "starting" || login.phase === "waiting"),
+							t,
+							onLabel: (text) => onLabel(account.id, text),
+							onKey: (text) => onKey(account.id, text),
+							onToggleClear: () => onToggleClear(account.id),
+							onRemove: () => onRemove(account.id)
+						}), account.added ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							className: "cc-accountLoginHint",
+							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "cc-hint",
+								children: t("accountLoginAfterSave")
+							})
+						}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(LoginRow, {
+							state: login,
+							targetRef: account.ref,
+							disabled: disabled || !account.writable || state.dirty,
+							disabledHint: state.dirty ? t("loginSaveBefore") : void 0,
+							t,
+							onBegin: () => onBeginLogin(account.ref),
+							onCancel: onCancelLogin
+						})]
 					}, account.id))
 				]
 			});
@@ -3930,6 +4048,8 @@ window.__ModuleLoader__.load({
 		/** The settings page body: connection facts for the Command Code provider. */
 		function CommandCodeSettingsPage(props) {
 			const { t } = props;
+			const footerMarker = (0, react.useRef)(null);
+			const [footerFloating, setFooterFloating] = (0, react.useState)(false);
 			const state = props.useCommandCodeSettings((snapshot) => snapshot);
 			const usage = props.useCommandCodeUsage((snapshot) => snapshot);
 			const login = props.useCommandCodeLogin((snapshot) => snapshot);
@@ -3937,6 +4057,15 @@ window.__ModuleLoader__.load({
 			const keyLocked = !state.apiKeyWritable;
 			const savedVisible = useSavedFlash(state.savedCount);
 			const updateVersion = usePluginUpdate();
+			(0, react.useEffect)(() => {
+				const marker = footerMarker.current;
+				if (!marker || typeof IntersectionObserver === "undefined") return;
+				const observer = new IntersectionObserver(([entry]) => {
+					if (entry) setFooterFloating(!entry.isIntersecting);
+				});
+				observer.observe(marker);
+				return () => observer.disconnect();
+			}, []);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 				className: "cc-section",
 				"aria-label": t("title"),
@@ -3966,6 +4095,7 @@ window.__ModuleLoader__.load({
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountsCard, {
 						t,
 						state,
+						login,
 						disabled,
 						onAdd: props.addAccount,
 						onRemove: props.removeAccount,
@@ -3973,7 +4103,9 @@ window.__ModuleLoader__.load({
 						onKey: props.editAccountKey,
 						onToggleClear: (id) => props.toggleKeyClear(id),
 						onActive: (text) => props.edit("activeAccount", text),
-						onActiveReset: () => props.resetField("activeAccount")
+						onActiveReset: () => props.resetField("activeAccount"),
+						onBeginLogin: props.beginLogin,
+						onCancelLogin: props.cancelLogin
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(RulesCard, {
 						t,
@@ -3997,7 +4129,7 @@ window.__ModuleLoader__.load({
 							label: t("apiKey"),
 							hint: keyLocked ? t("apiKeyLocked") : t("apiKeyHint"),
 							state: state.apiKey,
-							disabled: disabled || keyLocked,
+							disabled: disabled || keyLocked || login.targetRef === void 0 && (login.phase === "starting" || login.phase === "waiting"),
 							configured: state.apiKeyConfigured,
 							configuredLabel: t("apiKeySet"),
 							unconfiguredLabel: t("apiKeyUnset"),
@@ -4011,7 +4143,8 @@ window.__ModuleLoader__.load({
 							onToggleClear: () => props.toggleKeyClear("default")
 						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(LoginRow, {
 							state: login,
-							disabled: disabled || keyLocked,
+							disabled: disabled || keyLocked || state.dirty,
+							disabledHint: state.dirty ? t("loginSaveBefore") : void 0,
 							t,
 							onBegin: props.beginLogin,
 							onCancel: props.cancelLogin
@@ -4024,34 +4157,42 @@ window.__ModuleLoader__.load({
 						onEdit: props.edit,
 						onReset: props.resetField
 					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "cc-footer",
-						children: [
-							state.failed ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-								className: "cc-failed",
-								role: "status",
-								children: t("saveFailed")
-							}) : null,
-							savedVisible ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-								className: "cc-saved",
-								role: "status",
-								children: t("saved")
-							}) : null,
-							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
-								variant: "ghost",
-								size: "sm",
-								disabled: !state.dirty || state.saving,
-								onClick: props.discard,
-								children: t("discard")
-							}),
-							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
-								variant: "primary",
-								size: "sm",
-								disabled: !state.dirty || state.invalid || state.saving,
-								onClick: props.save,
-								children: t(state.saving ? "saving" : "save")
-							})
-						]
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						ref: footerMarker,
+						className: "cc-footerMarker",
+						"aria-hidden": "true"
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: `cc-footer cc-footerSticky${footerFloating ? " cc-footerFloating" : ""}`,
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "cc-footerActions",
+							children: [
+								state.failed ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: "cc-failed",
+									role: "status",
+									children: t("saveFailed")
+								}) : null,
+								savedVisible ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: "cc-saved",
+									role: "status",
+									children: t("saved")
+								}) : null,
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+									variant: "ghost",
+									size: "sm",
+									disabled: !state.dirty || state.saving,
+									onClick: props.discard,
+									children: t("discard")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+									variant: "primary",
+									size: "sm",
+									disabled: !state.dirty || state.invalid || state.saving,
+									onClick: props.save,
+									children: t(state.saving ? "saving" : "save")
+								})
+							]
+						})
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
 						className: "cc-version",
@@ -4338,6 +4479,8 @@ window.__ModuleLoader__.load({
 			errorServiceUnavailableHint: "服务端返回错误（5xx），请稍后点击刷新重试。",
 			errorNetwork: "无法连接 Command Code 服务",
 			errorNetworkHint: "所有请求都没有到达服务端。请检查网络连接或 API 地址设置。",
+			errorInvalidResponse: "Command Code 响应无法读取",
+			errorInvalidResponseHint: "请求已收到响应，但内容无法解析。请检查宿主的 HTTP 代理或响应解压配置。",
 			errorGeneric: "用量获取失败"
 		};
 		/** The panel's English string table (must mirror {@link PANEL_COPY_ZH}). */
@@ -4390,6 +4533,8 @@ window.__ModuleLoader__.load({
 			errorServiceUnavailableHint: "The server returned errors (5xx). Try Refresh again in a moment.",
 			errorNetwork: "Could not reach the Command Code service",
 			errorNetworkHint: "No request reached the server. Check your network connection or the API base setting.",
+			errorInvalidResponse: "Could not read the Command Code response",
+			errorInvalidResponseHint: "The requests received responses, but their bodies could not be parsed. Check the host HTTP proxy or response decoding.",
 			errorGeneric: "Could not fetch account usage"
 		};
 		/** Every panel key, in the English table's declaration order. */
@@ -4570,6 +4715,11 @@ window.__ModuleLoader__.load({
 				hint: "errorNetworkHint",
 				detail
 			};
+			if (blocked === "invalid-response") return {
+				title: "errorInvalidResponse",
+				hint: "errorInvalidResponseHint",
+				detail
+			};
 			if (state.status === "error" && state.report === void 0) return {
 				title: "errorGeneric",
 				hint: "errorGeneric",
@@ -6174,6 +6324,13 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 .cc-advancedBody>.cc-field:first-of-type{border-top:1px solid var(--dsw-alias-border-l2)}
 .cc-hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}
 .cc-footer{justify-content:flex-end;align-items:center;gap:8px;display:flex}
+/* Keep the original footer in flow and inside the settings scrollport. */
+.cc-footerMarker{height:1px;margin:-6px 0 -7px;pointer-events:none}
+.cc-footerSticky{position:sticky;bottom:0;z-index:2;flex-shrink:0;min-height:48px;pointer-events:none}
+.cc-footerActions{align-items:center;gap:8px;display:flex;pointer-events:auto}
+.cc-footerFloating .cc-footerActions{padding:6px;border:1px solid var(--dsw-alias-border-l2);border-radius:12px;background:var(--dsw-alias-bg-layer-3,var(--dsw-alias-bg-layer-2));box-shadow:0 8px 24px rgba(0,0,0,.12)}
+.cc-accountEditor{border-top:1px solid var(--dsw-alias-border-l2)}
+.cc-accountLoginHint{padding:0 0 12px}
 .cc-toggleRow{align-items:center;gap:8px;cursor:pointer;display:flex}
 .cc-toggleRow:has(.cc-toggle:disabled){cursor:default}
 .cc-toggle{appearance:none;flex-shrink:0;background:var(--dsw-alias-border-l2);border-radius:999px;width:30px;height:18px;margin:0;cursor:pointer;position:relative;transition:background .15s ease}
@@ -6450,6 +6607,14 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			webSearchHint: "开启后，dsh 的 web_search 工具由 Command Code 承担（复用同一个 API key 与地址），并优先于其他搜索后端；关闭则把选择权交还给之前的后端（如 modsearch），而不是强制回退到 DeepSeek 搜索。",
 			showSidebarQuota: "在侧边栏显示额度卡片",
 			showSidebarQuotaHint: "开启后，侧边栏底部（Settings 上方）显示 Command Code 套餐与配额卡片，点击可在中间栏打开完整仪表盘。默认关闭：左侧不显示任何额度信息，也不会为其后台刷新用量。保存后立即生效。",
+			commandGuard: "AI 命令安全预判",
+			commandGuardHint: "命令确认弹窗前，先由 typesafe/jev 判断它是否安全：安全就自动放行，其余照常弹窗。默认关闭。",
+			commandGuardThreshold: "自动放行阈值（0.5–1）",
+			commandGuardThresholdHint: "typesafe/jev 判定\"安全\"的概率达到该值即放行，默认 0.9。",
+			commandGuardTimeoutMs: "判定超时（毫秒，200–10000）",
+			commandGuardTimeoutMsHint: "typesafe/jev 超过该时间未返回就照常弹窗，默认 1500。",
+			zdr: "零数据保留（ZDR）",
+			zdrHint: "开启后，请求只经由不留存提示词与回复、也不用于训练的上游（等价于 CLI 的 CMD_ZDR=1）。没有可用 ZDR 上游的模型会返回错误，请换用其他模型或关闭此开关。ZDR 容量按上游实价透传，通常更贵；费用读数仍按常规目录价估算。默认关闭。",
 			accountsTitle: "多账户轮换",
 			accountsHint: "当前账户达到用量限额（429）或密钥失效（401）时，请求自动切换到下一个账户；全部耗尽时会提示最早的重置时间。",
 			accountAdd: "添加账户",
@@ -6457,6 +6622,7 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			accountLabel: "账户备注名",
 			accountKey: "API 密钥",
 			accountKeyHint: "该账户的 API 密钥。留空保存不会覆盖已存储的密钥。",
+			accountLoginAfterSave: "先点击页面底部的「保存」，再点击该账户的「登录 Command Code」通过网页获取密钥。",
 			accountDefault: "默认账户",
 			activeAccount: "当前使用账户",
 			activeAccountAuto: "自动（第一个可用账户）",
@@ -6527,6 +6693,8 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			usageServiceUnavailableHint: "服务端返回了错误（5xx），稍后点击刷新重试。",
 			usageNetworkError: "无法连接 Command Code 服务",
 			usageNetworkHint: "所有请求都没有到达服务端。请检查网络连接或 API 地址设置。",
+			usageInvalidResponse: "Command Code 响应无法读取",
+			usageInvalidResponseHint: "请求已收到响应，但内容无法解析。请检查宿主的 HTTP 代理或响应解压配置。",
 			usageUpdated: "更新于",
 			usagePeriodEnd: "账期截止",
 			usageActive: "当前使用",
@@ -6537,6 +6705,7 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			updateHint: "已发布新版本，点击查看发布说明；更新插件后刷新本页，提示会自动消失。",
 			loginTitle: "通过官方登录获取密钥",
 			loginHintIdle: "不想手动创建密钥？点击登录后浏览器会打开 commandcode.ai 授权页，完成后密钥自动写入本机凭据服务，下次请求即生效。",
+			loginSaveBefore: "请先保存本页更改，再通过网页登录此账户。",
 			loginButton: "登录 Command Code",
 			loginStarting: "正在启动本地回调服务…",
 			loginWaiting: "等待在浏览器中完成授权…",
@@ -6586,6 +6755,14 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			webSearchHint: "When on, the model-facing web_search tool is backed by Command Code (same API key and base URL as chat), winning over other search backends. Off hands the selection back to the previous backend (e.g. modsearch) instead of forcing the shipped DeepSeek search.",
 			showSidebarQuota: "Show the quota card in the sidebar",
 			showSidebarQuotaHint: "When on, a Command Code plan & quota card sits at the bottom of the sidebar (above Settings) and opens the full dashboard in the centre column. Off by default: nothing is shown on the left, and no background usage poll runs for it. Applies on save.",
+			commandGuard: "AI command guard",
+			commandGuardHint: "Before a shell command asks for approval, typesafe/jev judges whether it is safe: safe commands run without a prompt, everything else asks as usual. Off by default.",
+			commandGuardThreshold: "Auto-approve threshold (0.5–1)",
+			commandGuardThresholdHint: "Approve when typesafe/jev rates the command \"safe\" at least this likely; default 0.9.",
+			commandGuardTimeoutMs: "Judgement timeout (ms, 200–10000)",
+			commandGuardTimeoutMsHint: "If typesafe/jev does not answer in time, the normal prompt appears; default 1500.",
+			zdr: "Zero data retention (ZDR)",
+			zdrHint: "Serve requests only through upstreams that keep no prompts or completions and never train on them (the same opt-in as the CLI's CMD_ZDR=1). A few models have no ZDR upstream; requests for those models fail rather than losing ZDR protection. ZDR capacity is billed at the upstream's pass-through rates and usually costs more; the cost readout keeps quoting the ordinary catalog rates. Off by default.",
 			accountsTitle: "Account rotation",
 			accountsHint: "When the active account hits its usage limit (429) or its key fails (401), requests switch to the next account; when every account is exhausted the error names the earliest window reset.",
 			accountAdd: "Add account",
@@ -6593,6 +6770,7 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			accountLabel: "Account label",
 			accountKey: "API key",
 			accountKeyHint: "This account’s API key. Saving with the field blank keeps the stored key.",
+			accountLoginAfterSave: "Use Save at the bottom of the page, then sign in to this account in your browser to obtain a key.",
 			accountDefault: "Default account",
 			activeAccount: "Active account",
 			activeAccountAuto: "Auto (first usable account)",
@@ -6663,6 +6841,8 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			usageServiceUnavailableHint: "The server returned errors (5xx); try Refresh again later.",
 			usageNetworkError: "Could not reach the Command Code service",
 			usageNetworkHint: "No request reached the server. Check your network connection or the API base setting.",
+			usageInvalidResponse: "Could not read the Command Code response",
+			usageInvalidResponseHint: "The requests received responses, but their bodies could not be parsed. Check the host HTTP proxy or response decoding.",
 			usageUpdated: "Updated",
 			usagePeriodEnd: "Period ends",
 			usageActive: "Active",
@@ -6673,6 +6853,7 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			updateHint: "A newer version has been published; click for release notes. The notice disappears once the plugin is updated.",
 			loginTitle: "Sign in to fetch a key",
 			loginHintIdle: "Rather not create a key by hand? Sign in and your browser opens the commandcode.ai authorization page; the approved key is stored in the local credential service and applies to the next request.",
+			loginSaveBefore: "Save page changes before signing in to this account.",
 			loginButton: "Sign in to Command Code",
 			loginStarting: "Starting the local callback server…",
 			loginWaiting: "Waiting for authorization in your browser…",
@@ -6887,12 +7068,12 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			const pricesStore = createSnapshotStore(pricesController.state());
 			pricesController.subscribe(() => pricesStore.set(pricesController.state()));
 			const loginRemote = {
-				loginBegin: async () => {
+				loginBegin: async (targetRef) => {
 					if (usageNamespace === void 0) return {
 						ok: false,
 						error: { message: usageMountError ?? "commandcode remote is not mounted" }
 					};
-					return usageNamespace.loginBegin();
+					return usageNamespace.loginBegin(targetRef);
 				},
 				loginStatus: async () => {
 					if (usageNamespace === void 0) return {
@@ -6936,7 +7117,7 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 				}),
 				discard: () => controller.discard(),
 				refreshUsage: () => void usageController.refresh(),
-				beginLogin: () => void loginController.begin(),
+				beginLogin: (targetRef) => void loginController.begin(targetRef),
 				cancelLogin: () => void loginController.cancel(),
 				addAccount: () => controller.addAccount(),
 				removeAccount: (id) => controller.removeAccount(id),