@mars-sea/dsh-commandcode-provider 0.13.3 → 0.14.0

package/lib/index.js

@@ -103,7 +103,7 @@ const PLAN_ORDER = Object.fromEntries(PLAN_TIER_ORDER.map((tier, index) => [tier
 * subscription-plan labels, deals, and hourly (peak/off-peak) pricing.
 *
 * Everything here is synced from official sources — the command-code CLI
-* bundle's model table (`dist/cli.mjs`, re-verified at command-code@1.82.1) and
+* bundle's model table (`dist/cli.mjs`, re-verified at command-code@1.82.5) and
 * the official plan/pricing/model docs; see the dsh-commandcode-upstream skill
 * for the extraction procedures. Keeping the snapshot in its own module
 * confines those frequent sync diffs here: src/adapter.ts holds only the stable
@@ -138,6 +138,11 @@ const KNOWN_EFFORTS = {
 		"medium",
 		"xhigh"
 	],
+	"Qwen/Qwen3.8-Max-Prime": [
+		"low",
+		"medium",
+		"xhigh"
+	],
 	"claude-fable-5-1": [
 		"low",
 		"medium",
@@ -391,6 +396,16 @@ const KNOWN_EFFORTS = {
 		"high",
 		"xhigh"
 	],
+	"meta/muse-spark-open": [
+		"low",
+		"medium",
+		"high"
+	],
+	"nvidia/nemotron-3.5-super-vl": [
+		"low",
+		"medium",
+		"high"
+	],
 	"gpt-6-astra": [
 		"low",
 		"medium",
@@ -453,6 +468,13 @@ const KNOWN_EFFORTS = {
 		"medium",
 		"high",
 		"xhigh"
+	],
+	"stealth/cat-jam:free": [
+		"low",
+		"medium",
+		"high",
+		"xhigh",
+		"max"
 	]
 };
 /**
@@ -480,6 +502,7 @@ const KNOWN_IMAGE_MODELS = /* @__PURE__ */ new Set([
 	"Qwen/Qwen3.8-Max",
 	"Qwen/Qwen3.8-Max-0902",
 	"Qwen/Qwen3.8-Omni-Flash",
+	"Qwen/Qwen3.8-Max-Prime",
 	"claude-fable-5-1",
 	"claude-fable-5",
 	"claude-haiku-4-5-20251001",
@@ -518,6 +541,8 @@ const KNOWN_IMAGE_MODELS = /* @__PURE__ */ new Set([
 	"meta/muse-spark-1.3",
 	"meta/muse-spark-1.3-contributor",
 	"meta/muse-wonder-1.0",
+	"meta/muse-spark-open",
+	"nvidia/nemotron-3.5-super-vl",
 	"mistral/mistral-large-4",
 	"moonshotai/Kimi-K2.5",
 	"moonshotai/Kimi-K2.6",
@@ -540,14 +565,16 @@ const KNOWN_IMAGE_MODELS = /* @__PURE__ */ new Set([
 	"z-ai/glm-5.3-flashx"
 ]);
 /**
-* Models WITHOUT a zero-data-retention upstream, per the official CLI's own
-* registry (`command-code@1.82.1` `dist/cli.mjs`): `modelSupportsZdr(id)` is
-* exactly `!nonZdrSet.has(canonicalize(id))`, and `knownModelSupportsZdr`
-* carries the same membership in the sibling route table — the UNION of both
-* is this set. Reading only the sibling route table dropped
-* `meituan/LongCat-2.0`, which sat in `modelSupportsZdr` alone through
-* 1.73.0; the 1.74.3 table lists it in NEITHER set, so as of this snapshot it
-* is no longer excluded. The official docs (commandcode.ai/docs/resources/
+* Models WITHOUT a zero-data-retention upstream. Through command-code@1.82.2
+* the CLI's own registry answered this: `modelSupportsZdr(id)` was exactly
+* `!nonZdrSet.has(canonicalize(id))`, and `knownModelSupportsZdr` carried the
+* membership in the sibling route table — the UNION of both was this set, and
+* the two anchors disagreed by one id (`meituan/LongCat-2.0:free`, which 1.74.1
+* dropped from the first anchor while the canonical helper kept it).
+* command-code@1.82.4 removes that disagreement by making the verdict a catalog
+* lookup — `resolveKnownCatalogModel({model,catalog})?.zdr ?? false` — so this
+* set is now the live catalog's `zdr:false` membership and nothing more. The
+* official docs (commandcode.ai/docs/resources/
 * zdr) put coverage in prose — "99% of our models have ZDR-capable upstreams … only
 * a small handful of models are affected" — so the CLI's exclusion list is
 * the only per-model evidence there is; a ZDR request naming one of these
@@ -560,10 +587,19 @@ const KNOWN_IMAGE_MODELS = /* @__PURE__ */ new Set([
 * switch is on — the provider remains the routing authority and refuses an
 * unsupported model rather than silently dropping the privacy guarantee.
 *
-* `minimax/minimax-m3-free` is the one entry the public catalog
-* (`/provider/v1/models`) does not serve (it is CLI/pricing-visible and hidden
-* from the picker); it stays listed because the CLI carries it and a Go-plan
-* request can still name it.
+* `minimax/minimax-m3-free` is the one entry the public catalog's default view
+* (`/provider/v1/models`) does not serve through the picker (it is CLI/pricing-visible
+* and hidden from the picker); it stays listed because the CLI carries it and a Go-plan
+* request can still name it. Both this row and `stealth/cat-jam:free` ARE served
+* by the `?view=client` catalog, which is where the 1.82.4 verdict comes from.
+*
+* command-code@1.82.4 moved the authority for this verdict: `knownModelSupportsZdr`
+* no longer negates a bundled Set, it returns `resolveKnownCatalogModel({model,
+* catalog})?.zdr ?? false`, so an id the catalog does not carry (or carries with
+* `zdr:false`) is NOT covered. That inverts the default this helper was built on
+* ("not listed" answered TRUE); the snapshot keeps its negative-set shape because
+* 99% of the catalog is still covered, but membership is now read from the
+* `?view=client` catalog and confirmed against the canonical helper set.
 *
 * Keep in sync via the dsh-commandcode-upstream skill: the CLI's registry data
 * (its `zdr:{only:[…]}` provider routes and the per-provider `zdr`/`noTraining`
@@ -584,6 +620,11 @@ const KNOWN_IMAGE_MODELS = /* @__PURE__ */ new Set([
 * `listSelectableModelIds()`, so they are pruned along with the rest of the
 * tables and `supportsZeroDataRetention` now answers TRUE for them, matching
 * what the current CLI says.
+*
+* 1.82.4 then reversed 1.74.1's removal of `meituan/LongCat-2.0:free` and added
+* the `stealth/cat-jam:free` preview, taking this set to 24 members — the size
+* of the live catalog's `zdr:false` list. The canonical helper set still carries
+* 23 because `cat-jam:free` postdates the artifact's embedded snapshot.
 */
 const KNOWN_NON_ZDR_MODELS = /* @__PURE__ */ new Set([
 	"MiniMaxAI/MiniMax-M3",
@@ -595,10 +636,12 @@ const KNOWN_NON_ZDR_MODELS = /* @__PURE__ */ new Set([
 	"meta/muse-spark-1.3",
 	"meta/muse-spark-1.3-contributor",
 	"meta/muse-wonder-1.0",
+	"meituan/LongCat-2.0:free",
 	"minimax/minimax-m3-free",
 	"poolside/laguna-s-2.1-free",
 	"sakana/fugu-ultra",
 	"stealth/glyph-cluster:free",
+	"stealth/cat-jam:free",
 	"stepfun/Step-3.7-Flash",
 	"stepfun/Step-5-Preview",
 	"xai/grok-4.5",
@@ -646,8 +689,7 @@ const KNOWN_THINKING_MODELS = /* @__PURE__ */ new Set([
 	"thinkingmachines/inkling",
 	"thinkingmachines/inkling-small",
 	"poolside/laguna-s-2.1-free",
-	"meituan/LongCat-2.0",
-	"inclusionai/ling-3.0-flash-sante:free"
+	"meituan/LongCat-2.0"
 ]);
 /**
 * Catalog models the Provider API serves ONLY through `/provider/v1/messages`
@@ -715,11 +757,12 @@ function requiresMessagesEndpoint(modelId) {
 * catalog ids as of 2026-10-15. Each row carries a comment naming the entry it
 * came from.
 *
-* One of those 76 rests on more than a vendor lookup, hand-recorded in the
-* script's `MANUAL_CEILINGS`: `inclusionai/ling-3.0-flash-sante:free` (32768)
-* lost both its vendor row and its unanimous third-party vote (vercel files
-* 32000), and is pinned so a regeneration cannot drop a live model's ceiling
-* back to the default. (`gpt-6.1-sol` (128000) needs no pin — OpenAI's own row
+* No row needs a hand-recorded pin as of 2026-10-16: the one that did
+* (`inclusionai/ling-3.0-flash-sante:free`, pinned at 32768 because it had lost
+* both its vendor row and its unanimous third-party vote) left the live catalog
+* with the 1.82.4 catalog migration, so the script's `MANUAL_CEILINGS` map is
+* now empty and every remaining row resolves from a vendor row or a unanimous
+* third-party vote. (`gpt-6.1-sol` (128000) never needed a pin — OpenAI's own row
 * carries it and every other provider carrying the id agrees.) All are still
 * correctable — a stricter gateway costs one refused request, and
 * `streamRequest()` remembers what the endpoint said.
@@ -769,7 +812,6 @@ const MODEL_OUTPUT_TOKEN_LIMITS = /* @__PURE__ */ new Map([
 	["gpt-6-luna", 128e3],
 	["gpt-6-sol", 128e3],
 	["gpt-6.1-sol", 128e3],
-	["inclusionai/ling-3.0-flash-sante:free", 32768],
 	["meituan/LongCat-2.0", 131072],
 	["meta/muse-spark-1.1", 131072],
 	["meta/muse-spark-1.2", 131072],
@@ -820,15 +862,20 @@ const MODEL_OUTPUT_TOKEN_LIMITS = /* @__PURE__ */ new Map([
 * `/docs/plans/max` and `/docs/resources/pricing-limits`). Each plan's model
 * list is a superset of the one below it: Go ⊂ GOAT ⊂ Pro ⊂ Provider/Max.
 * Models absent from every plan list (Claude Opus/Fable, Fugu Ultra) are
-* Provider-tier. Re-verified at command-code@1.82.1 (2026-10-14): 89 catalog
-* ids at 54/64/79/87/89 cumulative, a strict superset chain. Mistral Large 4
+* Provider-tier. Re-verified at command-code@1.82.4 (2026-10-16) against the
+* live `?view=client` catalog: 93 ids, still a strict superset chain. Mistral
+* Large 4
 * (1.75.0) was the only addition at the 1.77.0 check; the 1.78.0/1.79.0 pair
 * added Claude Haiku 5.5 at Pro and the free Glyph Cluster preview at Go.
 * 1.79.2 lowers Haiku 5.5's minimum plan to GOAT; 1.80.0 adds Muse Wonder at
-* Max; 1.82.0 adds Gemini 4 Argon at Pro and nothing else moves. Every other
+* Max; 1.82.0 adds Gemini 4 Argon at Pro and nothing else moves. The 1.82.4
+* train adds Qwen 3.8 Max Prime at GOAT plus Muse Spark Open, Nemotron 3.5
+* Super VL and the free Cat Jam preview at Go, and drops Ling 3.0 Flash Sante,
+* which left the live catalog. Every other
 * tier is unchanged.
 * The only removals since 1.49.0 are the two retired stealth previews (Pixel
-* Canary at 1.73.1, Space Bunny Alpha at 1.74.3). Per-entry tags below name the
+* Canary at 1.73.1, Space Bunny Alpha at 1.74.3) and Ling 3.0 Flash Sante
+* (2026-10-16). Per-entry tags below name the
 * releases that added or moved each row.
 *
 * The Provider API exposes no plan metadata, so this snapshot is the source of
@@ -852,6 +899,7 @@ const KNOWN_PLANS = {
 	"Qwen/Qwen3.8-Flash": "go",
 	"Qwen/Qwen3.8-Max": "go",
 	"Qwen/Qwen3.8-Max-0902": "go",
+	"Qwen/Qwen3.8-Max-Prime": "goat",
 	"Qwen/Qwen3.8-Omni-Flash": "go",
 	"deepseek/deepseek-v4-flash-fast": "go",
 	"deepseek/deepseek-v4.1-flash": "go",
@@ -862,10 +910,10 @@ const KNOWN_PLANS = {
 	"gpt-5.6-luna": "go",
 	"gpt-6-luna": "go",
 	"meituan/LongCat-2.0": "go",
-	"inclusionai/ling-3.0-flash-sante:free": "go",
 	"inclusionai/ling-3.1-flash": "go",
 	"meta/muse-spark-1.2-contributor": "go",
 	"meta/muse-spark-1.3-contributor": "go",
+	"meta/muse-spark-open": "go",
 	"mistral/mistral-large-4": "go",
 	"moonshotai/Kimi-K2.5": "go",
 	"moonshotai/Kimi-K2.6": "go",
@@ -873,10 +921,12 @@ const KNOWN_PLANS = {
 	"moonshotai/Kimi-K2.7-Code-Highspeed": "go",
 	"moonshotai/Kimi-K3": "go",
 	"nvidia/nemotron-3-ultra-550b-a55b": "go",
+	"nvidia/nemotron-3.5-super-vl": "go",
 	"poolside/laguna-s-2.1-free": "go",
 	"stepfun/Step-3.5-Flash": "go",
 	"stepfun/Step-3.7-Flash": "go",
 	"stepfun/Step-5-Preview": "go",
+	"stealth/cat-jam:free": "go",
 	"stealth/glyph-cluster:free": "go",
 	"tencent/hy3-paid": "go",
 	"tencent/hy4-preview": "go",
@@ -1069,7 +1119,7 @@ const KNOWN_DEALS = {
 		label: "FREE",
 		free: true
 	},
-	"inclusionai/ling-3.0-flash-sante:free": {
+	"stealth/cat-jam:free": {
 		label: "FREE",
 		free: true
 	},
@@ -1825,8 +1875,8 @@ const MODEL_PRICE_ROWS = [
 		],
 		allowance: {
 			go: 6,
-			goat: 70,
-			pro: 80
+			goat: 20,
+			pro: 30
 		},
 		contextTiers: [{
 			"maxContext": 272e3,
@@ -2146,8 +2196,8 @@ const MODEL_PRICE_ROWS = [
 		],
 		allowance: {
 			go: 6,
-			goat: 20,
-			pro: 30
+			goat: 100,
+			pro: 110
 		}
 	},
 	{
@@ -2360,6 +2410,19 @@ const MODEL_PRICE_ROWS = [
 			pro: 30
 		}
 	},
+	{
+		id: "muse-spark-open",
+		rates: [
+			1.25,
+			4.25,
+			.15
+		],
+		allowance: {
+			go: 6,
+			goat: 20,
+			pro: 30
+		}
+	},
 	{
 		id: "muse-wonder-1.0",
 		rates: [
@@ -2386,6 +2449,19 @@ const MODEL_PRICE_ROWS = [
 			pro: 30
 		}
 	},
+	{
+		id: "nemotron-3.5-super-vl",
+		rates: [
+			.2,
+			.5,
+			.04
+		],
+		allowance: {
+			go: 6,
+			goat: 20,
+			pro: 30
+		}
+	},
 	{
 		id: "qwen-3.6-max",
 		rates: [
@@ -2664,6 +2740,19 @@ const MODEL_PRICE_ROWS = [
 			goat: 20,
 			pro: 30
 		}
+	},
+	{
+		id: "typesafe/jev-1.14.0",
+		rates: [
+			.042,
+			0,
+			0
+		],
+		allowance: {
+			go: 6,
+			goat: 20,
+			pro: 30
+		}
 	}
 ];
 /**
@@ -3552,6 +3641,175 @@ function modelIsVisible(id, allowlist, overrides) {
 	const flag = overrides !== null && typeof overrides === "object" && !Array.isArray(overrides) ? overrides[id] : void 0;
 	return typeof flag === "boolean" ? flag : allowlist.length === 0 || allowlist.includes(id);
 }
+/** 自定义上下文长度接受的上界（token）；覆盖任何已知模型窗口仍留有余量。 */
+const CONTEXT_WINDOW_MAX = 1e7;
+/**
+* 判定一个值能否作为自定义上下文长度：边界内的安全整数，符合宿主模型元数据约束。
+*
+* 程序化构造的连接可能绕过 schemastery 归一化，所以 `resolveAdapterOptions`
+* 也要重新判定——越界或非数值直接丢弃，回落到目录公布值，而不是让请求带着
+* 一个网关会拒绝的窗口上线。
+*/
+function isValidContextWindow(value) {
+	return typeof value === "number" && Number.isSafeInteger(value) && value >= 1 && value <= 1e7;
+}
+/**
+* 只接收合法条目的按模型覆盖表；空表、非对象与非法数值一律视为未设置。
+* 配置校验会拒绝非整数或越界值；本函数额外保护绕过配置校验的程序化调用，
+* 丢弃坏条目，不把非法窗口交给宿主。返回新对象；未设置时为 `undefined`。
+*/
+function readContextWindowOverrides(raw) {
+	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return void 0;
+	const entries = Object.entries(raw).filter((entry) => entry[0] !== "" && isValidContextWindow(entry[1]));
+	return entries.length === 0 ? void 0 : Object.fromEntries(entries);
+}
+/**
+* 一次模型解析的有效上下文长度：按模型覆盖 → 全局值 → 目录公布值。
+*
+* 适配器只在有目录条目时调用（未知模型保持既有的「无上下文宣告」形状），
+* 所以 `catalog` 是已知的正数；按模型覆盖与全局值在 `resolveAdapterOptions`
+* 已清洗，这里对程序化构造的连接再判一次，坏值静默回落到目录值。
+*/
+function effectiveContextWindow(catalog, model, options) {
+	const perModel = options.contextWindowOverrides?.[model];
+	if (isValidContextWindow(perModel)) return perModel;
+	if (isValidContextWindow(options.contextWindow)) return options.contextWindow;
+	return catalog;
+}
+//#endregion
+//#region src/output-budget.ts
+/**
+* Output-budget bounds shared by the Host, the browser settings page and the
+* adapter (issue #74).
+*
+* The module stays pure (no node imports) so the client bundle can inline it,
+* exactly like `context-window.ts`. The report behind issue #74 asked for a
+* knob that stops the adapter from writing `max_tokens` at all; that is the
+* `0` sentinel here rather than a separate `null` spelling, because the value
+* travels through one numeric settings field on both surfaces.
+*/
+/**
+* The output budget this bundle asks for, and the ceiling it will never exceed.
+*
+* 131 072, chosen against a measured provider limit rather than a round guess.
+* Probing `/alpha/generate` directly on 2026-09-28: 64 000 → 200, 131 072 → 200,
+* 196 608 → 200, **200 000 → 200, 200 704 → 400**, 1 000 000 → 400. The server
+* therefore caps `max_tokens` at 200 000, and it does so identically for a
+* 262 144-window model (`stealth/pixel-canary`, retired by Command Code on
+* 2026-10-01 and named here only as the probe's subject) and a 1 000 000-window
+* one (`stealth/space-bunny-alpha`) — the cap is global, not per model. 131 072
+* keeps a 35 % margin under it while covering the real output ceiling of the
+* models that have one (Claude 64 K, Gemini 64 K, several at 128 K).
+*
+* The old 64 000 was never a provider requirement: it cost nothing in latency
+* (a 64 000 request answered headers in 1.28 s against 1.57 s for 131 072) but
+* it did cap what a model could ever say in one turn.
+*
+* No client-side clamp is applied on top of this: an earlier version pre-shrank
+* `max_tokens` from an estimate of the prompt already sent (`requestContextBudget()`,
+* issue #67), but that estimate over-corrected on ordinary long conversations —
+* exactly the "output gets cut short as the conversation grows" symptom issue #74
+* reported — while a live A/B probe (2026-09-30, `stealth/space-bunny-alpha`,
+* ~19.6% over its 1,000,000-token window with no client-side shrink) showed the
+* endpoint answers a genuine overflow with an unambiguous `400 … exceeds the
+* model's context window`, which `isContextOverflowDetail()` classifies as
+* `CONTEXT_WINDOW_EXCEEDED` independently of this constant.
+*
+* A user-set positive budget can only TIGHTEN this, never raise it — a figure
+* above the cap would be refused by the gateway anyway, so the settings field
+* refuses it at the input instead of spending a round trip to learn that.
+*
+* Lives here rather than in `adapter.ts` so the browser settings page can bound
+* its input by the same figure the Host enforces; `adapter.ts` re-exports it
+* under its historical name.
+*/
+const MAX_OUTPUT_TOKEN_LIMIT = 131072;
+/**
+* Whether a value can serve as a user output budget: the omit sentinel, or a
+* whole token count inside the gateway's own ceiling.
+*
+* Programmatically built connections can bypass schemastery normalization, so
+* the resolve step re-judges every value here and drops an out-of-range one
+* back to "unset" instead of letting the request carry a budget the gateway
+* refuses.
+*/
+function isValidMaxOutputTokens(value) {
+	return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && value <= 131072;
+}
+/**
+* Apply a user output budget to a derived one.
+*
+* `undefined` means the user set nothing, so the derived ceiling stands
+* unchanged — the default path, and the one every existing profile takes.
+* {@link OMIT_OUTPUT_TOKENS} is a wire instruction rather than a number, so it
+* also leaves the derived budget alone; {@link omitOutputTokens} is what turns
+* it into an absent field.
+*/
+function applyMaxOutputTokens(derived, configured) {
+	if (configured === void 0 || configured === 0) return derived;
+	return Math.min(derived, configured);
+}
+/**
+* Whether this attempt must send no `max_tokens` field at all.
+*
+* Two guards narrow this beyond the user's own setting, and both are
+* correctness requirements rather than conveniences:
+*
+* - The Messages route is excluded deliberately: the endpoint rejects a body
+*   without the field (`Invalid input: expected number, received undefined at
+*   max_tokens`), so omitting it there would not lengthen an answer, it would
+*   make the whole Claude family unusable. The CLI and OpenAI transports accept
+*   an absent field, which is where the setting does what it promises.
+* - An explicit per-call budget from the host is an instruction, not a default,
+*   so it wins over the plugin-wide setting. `session-title` is the concrete
+*   case: it asks for 64 tokens precisely because its output must stay bounded,
+*   and dropping the field there would let a title generation run long instead
+*   of making a long answer fit (issue #88's fix depends on that bound).
+*/
+function omitOutputTokens(configured, protocol, hostRequestedTokens) {
+	if (configured !== 0) return false;
+	if (protocol === "messages") return false;
+	return hostRequestedTokens === void 0;
+}
+//#endregion
+//#region src/readable-error.ts
+/**
+* Readable error text for the settings page AND the Host-side failure paths.
+*
+* @module dsh-commandcode-provider/readable-error
+*/
+/**
+* Turn a caught value into readable text.
+*
+* `error instanceof Error ? error.message : String(error)` degrades to the
+* literal string `[object Object]` for a plain object with no `Error`
+* prototype — which is exactly what a Remote call across the webview/host
+* boundary can hand back: `dsh-typert-protocol` serializes a rejection for
+* the wire, and a structurally-cloned value loses its prototype chain even
+* when the host threw a real `Error` (issue #74). Reading a `message` string
+* off the plain object first recovers the original text in that case; only a
+* value with neither an `Error` prototype nor a usable `message` field falls
+* through to a JSON dump.
+*
+* Shared by both halves on purpose. The browser client needs it for rejections
+* that crossed the RPC boundary, and the Host needs it for values that reached
+* it from a transport, a JSON body, or a user-thrown non-Error — the same
+* degradation, one owner.
+*/
+function readableErrorText(error) {
+	if (error instanceof Error) return error.message;
+	if (typeof error === "string") return error;
+	if (error !== null && typeof error === "object") {
+		const message = error.message;
+		if (typeof message === "string" && message !== "") return message;
+		try {
+			return JSON.stringify(error);
+		} catch {
+			return Object.prototype.toString.call(error);
+		}
+	}
+	return String(error);
+}
 const THROTTLED_CODE = "THROTTLED";
 const boundedCodes = /* @__PURE__ */ new Set([
 	"EMPTY_RESPONSE",
@@ -5858,6 +6116,13 @@ function learnedOutputLimit(apiBase, model) {
 function modelOutputTokenLimit(apiBase, model) {
 	return Math.min(published.get(apiBase)?.get(model) ?? fallbackLimit(model), learnedOutputLimit(apiBase, model));
 }
+/**
+* 从本次目录记录的独立输出上限重新推导预算，不能复用已经被旧窗口压低的 maxTokens。
+* 公布值固定在该记录，不读取并发刷新后的共享目录；只继续采纳同网关更低的学习上限。
+*/
+function catalogModelMaxTokens(apiBase, model, contextWindow = model.contextWindow) {
+	return Math.min(contextWindow, model.publishedMaxTokens ?? fallbackLimit(model.id), learnedOutputLimit(apiBase, model.id));
+}
 /** 是否更新共享事实与是否值得重试是两个问题；以本次实发预算判断拒绝。 */
 function outputCeilingRefusal(apiBase, model, sent, error) {
 	if (!(error instanceof LlmError) || !OUTPUT_LIMIT_REJECTION.test(error.message)) return void 0;
@@ -6013,37 +6278,15 @@ var GatewayFacts = class {
 * per-request options thunk and an API-key resolver from the plugin entry
 * (src/index.ts), so a settings change reaches the very next request.
 */
-const COMMAND_CODE_CLI_VERSION = "1.82.2";
+const COMMAND_CODE_CLI_VERSION = "1.82.5";
 const DEFAULT_API_BASE = "https://api.commandcode.ai";
 /**
 * The output budget this bundle asks for, and the ceiling it will never exceed.
-*
-* 131 072, chosen against a measured provider limit rather than a round guess.
-* Probing `/alpha/generate` directly on 2026-09-28: 64 000 → 200, 131 072 → 200,
-* 196 608 → 200, **200 000 → 200, 200 704 → 400**, 1 000 000 → 400. The server
-* therefore caps `max_tokens` at 200 000, and it does so identically for a
-* 262 144-window model (`stealth/pixel-canary`, retired by Command Code on
-* 2026-10-01 and named here only as the probe's subject) and a 1 000 000-window
-* one (`stealth/space-bunny-alpha`) — the cap is global, not per model. 131 072
-* keeps a 35 % margin under it while covering the real output ceiling of the
-* models that have one (Claude 64 K, Gemini 64 K, several at 128 K).
-*
-* The old 64 000 was never a provider requirement: it cost nothing in latency
-* (a 64 000 request answered headers in 1.28 s against 1.57 s for 131 072) but
-* it did cap what a model could ever say in one turn.
-*
-* No client-side clamp is applied on top of this: an earlier version pre-shrank
-* `max_tokens` from an estimate of the prompt already sent (`requestContextBudget()`,
-* issue #67), but that estimate over-corrected on ordinary long conversations —
-* exactly the "output gets cut short as the conversation grows" symptom issue #74
-* reported — while a live A/B probe (2026-09-30, `stealth/space-bunny-alpha`,
-* ~19.6% over its 1,000,000-token window with no client-side shrink) showed the
-* endpoint answers a genuine overflow with an unambiguous `400 … exceeds the
-* model's context window`, which `isContextOverflowDetail()` below already
-* classifies as `CONTEXT_WINDOW_EXCEEDED` independently of this constant. See
-* [决策记录](../docs/决策记录.md).
+* The figure and its probe evidence live in `./output-budget.ts` — the module
+* the browser settings page also bounds its input by — and are re-exported here
+* under the historical name so existing importers are unaffected.
 */
-const DEFAULT_GENERATE_MAX_TOKENS = 131072;
+const DEFAULT_GENERATE_MAX_TOKENS = MAX_OUTPUT_TOKEN_LIMIT;
 const MODELS_TIMEOUT_MS = 1e4;
 /** How long the picker's plan-filter billing facts stay cached before refetching. */
 const BILLING_ACCESS_TTL_MS = 3e5;
@@ -7274,7 +7517,7 @@ async function buildCliBody(options, connection, facts) {
 				input_schema: toolParametersSchema(tool.parameters)
 			})),
 			system: cliSystem(facts.systemText),
-			max_tokens: facts.maxTokens,
+			...facts.omitMaxTokens ? {} : { max_tokens: facts.maxTokens },
 			temperature: options.temperature ?? .3,
 			stream: true,
 			...facts.reasoningEffort ? { reasoning_effort: facts.reasoningEffort } : {}
@@ -7300,7 +7543,7 @@ async function buildOpenAIBody(options, facts) {
 		model: options.model,
 		messages: openAiMessages,
 		...openAiTools.length > 0 ? { tools: openAiTools } : {},
-		max_tokens: facts.maxTokens,
+		...facts.omitMaxTokens ? {} : { max_tokens: facts.maxTokens },
 		temperature: options.temperature ?? .3,
 		stream: true,
 		...facts.reasoningEffort ? { reasoning_effort: facts.reasoningEffort } : {}
@@ -7363,6 +7606,16 @@ async function buildMessagesBody(options, facts) {
 	return body;
 }
 /**
+* Write the output budget into an already-built body, each transport in its own
+* shape (the CLI route nests it under `params`). Used to keep a REBUILT body's
+* figure in step with the budget without duplicating the nesting knowledge, and
+* only called when the field is not being omitted (issue #74).
+*/
+function assignMaxTokens(body, target, maxTokens) {
+	if (target === "cli") recordOrEmpty(body.params).max_tokens = maxTokens;
+	else body.max_tokens = maxTokens;
+}
+/**
 * One connect attempt's inputs: everything `connectGenerate` needs beyond
 * the per-attempt key and protocol. Passed explicitly (not closed over) so
 * the rotation loop's mutation of `protocol`/`body` stays visible at the
@@ -7676,7 +7929,7 @@ var CommandCodeAdapter = class CommandCodeAdapter extends LlmAdapter {
 				provider,
 				id: model.id,
 				name: `${model.name} (CC)`,
-				description: capabilityDescription(model.id, model.contextWindow),
+				description: capabilityDescription(model.id, effectiveContextWindow(model.contextWindow, model.id, connection)),
 				inputModalities: vision ? ["text", "image"] : ["text"]
 			};
 		};
@@ -7716,16 +7969,17 @@ var CommandCodeAdapter = class CommandCodeAdapter extends LlmAdapter {
 		const entry = this.gatewayFacts.knownModel(connection, model) ?? (await this.gatewayFacts.refresh(connection, signal)).find((m) => m.id === model);
 		const efforts = KNOWN_EFFORTS[model];
 		const vision = KNOWN_IMAGE_MODELS.has(model);
+		const contextWindow = entry === void 0 ? void 0 : effectiveContextWindow(entry.contextWindow, model, connection);
 		return {
 			provider,
 			id: model,
 			name: entry ? `${entry.name} (CC)` : model,
-			description: capabilityDescription(model, entry?.contextWindow),
+			description: capabilityDescription(model, contextWindow),
 			inputModalities: vision ? ["text", "image"] : ["text"],
 			toolUpdate: "addition-only",
-			...entry ? {
-				context: { contextWindow: entry.contextWindow },
-				defaultMaxTokens: Math.min(entry.maxTokens, DEFAULT_GENERATE_MAX_TOKENS)
+			...entry !== void 0 && contextWindow !== void 0 ? {
+				context: { contextWindow },
+				defaultMaxTokens: applyMaxOutputTokens(Math.min(catalogModelMaxTokens(connection.apiBase, entry, contextWindow), DEFAULT_GENERATE_MAX_TOKENS), connection.maxOutputTokens)
 			} : {},
 			...efforts ? { reasoning: { efforts: efforts.map((effort) => ({
 				id: ReasoningEffortId(effort),
@@ -8005,7 +8259,7 @@ var CommandCodeAdapter = class CommandCodeAdapter extends LlmAdapter {
 				}
 				return record;
 			} catch (error) {
-				failures.push(`${path}: ${error instanceof Error ? error.message : String(error)}`);
+				failures.push(`${path}: ${readableErrorText(error)}`);
 				failed.push({ kind: "transport" });
 				return;
 			}
@@ -8148,7 +8402,8 @@ var CommandCodeAdapter = class CommandCodeAdapter extends LlmAdapter {
 		const catalog = await facts.catalog;
 		options.signal?.throwIfAborted();
 		const modelEntry = catalog.find((row) => row.id === options.model);
-		const initialMax = Math.min(options.maxTokens ?? Infinity, modelEntry?.maxTokens ?? facts.fallbackLimit, DEFAULT_GENERATE_MAX_TOKENS);
+		const modelMax = modelEntry === void 0 ? facts.fallbackLimit : catalogModelMaxTokens(connection.apiBase, modelEntry, effectiveContextWindow(modelEntry.contextWindow, options.model, connection));
+		const initialMax = applyMaxOutputTokens(Math.min(options.maxTokens ?? Infinity, modelMax, DEFAULT_GENERATE_MAX_TOKENS), connection.maxOutputTokens);
 		const budget = {
 			max: initialMax,
 			sent: initialMax
@@ -8188,8 +8443,8 @@ var CommandCodeAdapter = class CommandCodeAdapter extends LlmAdapter {
 		}
 		options.signal?.throwIfAborted();
 		let maxTokens = Math.min(budget.max, learnedOutputLimit(connection.apiBase, options.model));
-		const effort = options.reasoningEffort;
 		const supported = KNOWN_EFFORTS[options.model];
+		const effort = options.purpose === "session-title" && supported?.includes("off") ? "off" : options.reasoningEffort;
 		const declared = effort !== void 0 && supported?.includes(effort) ? effort : void 0;
 		const reasoningEffort = effort === "off" && declared === void 0 ? void 0 : declared;
 		const systemText = [options.system ?? "", ...options.messages.filter((m) => m.role === "system").map((m) => m.content.map(blockText).filter(Boolean).join("\n"))].filter(Boolean).join("\n\n");
@@ -8199,17 +8454,16 @@ var CommandCodeAdapter = class CommandCodeAdapter extends LlmAdapter {
 		const buildBody = async (target) => {
 			const finishBody = timing.phase("body");
 			try {
+				const omitMaxTokens = omitOutputTokens(connection.maxOutputTokens, target, options.maxTokens);
 				const facts = {
 					maxTokens,
+					omitMaxTokens,
 					reasoningEffort,
 					selectableEffort: supported !== void 0 && supported.length > 0,
 					systemText,
 					readImage
 				};
-				const built = target === "cli" ? await buildCliBody(requestOptions, connection, facts) : target === "messages" ? await buildMessagesBody(requestOptions, facts) : await buildOpenAIBody(requestOptions, facts);
-				if (target === "cli") recordOrEmpty(built.params).max_tokens = maxTokens;
-				else built.max_tokens = maxTokens;
-				return built;
+				return target === "cli" ? await buildCliBody(requestOptions, connection, facts) : target === "messages" ? await buildMessagesBody(requestOptions, facts) : await buildOpenAIBody(requestOptions, facts);
 			} finally {
 				finishBody();
 			}
@@ -8259,8 +8513,7 @@ var CommandCodeAdapter = class CommandCodeAdapter extends LlmAdapter {
 				if (lower < maxTokens) {
 					maxTokens = lower;
 					budget.max = Math.min(budget.max, lower);
-					if (protocol === "cli") recordOrEmpty(body.params).max_tokens = lower;
-					else body.max_tokens = lower;
+					if (!omitOutputTokens(connection.maxOutputTokens, protocol, options.maxTokens)) assignMaxTokens(body, protocol, lower);
 					serializedBodies.delete(body);
 				}
 				budget.sent = maxTokens;
@@ -8447,12 +8700,33 @@ function formatMoney(value) {
 function formatMoneyExact(value) {
 	return `$${value.toFixed(4)}`;
 }
-function formatTokensCompact(value) {
-	if (value >= 1e9) return `${(value / 1e9).toFixed(1)}B`;
-	if (value >= 1e6) return `${(value / 1e6).toFixed(1)}M`;
-	if (value >= 1e3) return `${(value / 1e3).toFixed(1)}K`;
+/**
+* 紧凑数字：K/M/B 三级，一切档位决策的唯一实现。
+*
+* 档位必须**回头判断**：先除以档位再四舍五入会算出 `999_999 → "1000.0K"`、
+* `999_999_999 → "1000.0M"` 这类既超长、又落在并不存在的档位上的结果，
+* 因此每个档位算完后若已经够到下一档，就改用下一档重算一次。
+*
+* @param value - 非负计数或词元数。
+* @param keepZeroDecimal - 整数值是否保留一位小数。词元显示沿用 `3.0B` 的旧样式；
+*   计数显示去掉多余的 `.0`，见 {@link formatCompactCount}。
+* @returns 紧凑文本；不足 1000 时原样返回该整数。
+*/
+function compact(value, keepZeroDecimal) {
+	const rounded = (scaled) => Math.round(scaled * 10) / 10;
+	const text = (scaled) => {
+		const fixed = rounded(scaled);
+		return keepZeroDecimal ? fixed.toFixed(1) : String(fixed);
+	};
+	if (value >= 1e9) return `${text(value / 1e9)}B`;
+	if (value >= 1e6) return rounded(value / 1e6) >= 1e3 ? `${text(value / 1e9)}B` : `${text(value / 1e6)}M`;
+	if (value >= 1e3) return rounded(value / 1e3) >= 1e3 ? `${text(value / 1e6)}M` : `${text(value / 1e3)}K`;
 	return String(value);
 }
+/** 紧凑词元数：与 {@link formatCompactCount} 共用档位，但整数值保留一位小数（`3.0B`）。 */
+function formatTokensCompact(value) {
+	return compact(value, true);
+}
 /** The input is already in percent units; callers add the percent sign. */
 function formatSuccessRate(value) {
 	return String(Number(value.toFixed(2)));
@@ -8553,7 +8827,7 @@ function commandDefinition(deps) {
 					text: renderReport(await adapter.getUsage(), locale)
 				};
 			} catch (error) {
-				const message = error instanceof Error ? error.message : String(error);
+				const message = readableErrorText(error);
 				return {
 					kind: "error",
 					text: commandCopy(locale, "errorText").replace("{message}", message)
@@ -8871,6 +9145,30 @@ const LOGIN_HOST_CONTRIBUTION = {
 };
 //#endregion
 //#region src/enrollment-wire.ts
+const ENROLLMENT_MESSAGE_KEYS = [
+	"enrollmentCreating",
+	"enrollmentWaiting",
+	"enrollmentWriting",
+	"enrollmentNaming",
+	"enrollmentNameFailed",
+	"enrollmentFinished",
+	"enrollmentCancelling",
+	"enrollmentCancelled",
+	"enrollmentCancelledCleaned",
+	"enrollmentFailed",
+	"enrollmentFailedCleaned",
+	"enrollmentCleanupPending",
+	"enrollmentCleanupFailed",
+	"enrollmentRecordNaming",
+	"enrollmentRecordCleanup",
+	"enrollmentBeginFailed",
+	"enrollmentCancelUnconfirmed",
+	"enrollmentNameRequestFailed",
+	"enrollmentCleanupRequestFailed",
+	"enrollmentDisconnected",
+	"enrollmentHostUnavailable",
+	"enrollmentStatusUnavailable"
+];
 const guard = makeBoundaryValidator("commandcode/enrollment");
 const phases = [
 	"creating",
@@ -8887,11 +9185,13 @@ function parseEnrollmentState(value) {
 	const source = guard.record(value, "state");
 	const phase = source.phase;
 	if (!phases.includes(phase)) return guard.reject("phase");
+	const messageKey = source.messageKey;
+	if (!ENROLLMENT_MESSAGE_KEYS.includes(messageKey)) return guard.reject("messageKey");
 	const state = {
 		id: guard.stringField(source, "id", "id"),
 		ref: guard.stringField(source, "ref", "ref"),
 		phase,
-		message: guard.stringField(source, "message", "message")
+		messageKey
 	};
 	for (const field of ["authUrl", "suggestedName"]) if (source[field] !== void 0) state[field] = guard.stringField(source, field, field);
 	return state;
@@ -9583,7 +9883,7 @@ var CommandCodeLoginFlow = class {
 			this.setStatus({
 				state: "failed",
 				reason: "unavailable",
-				message: error instanceof Error ? error.message : String(error)
+				message: readableErrorText(error)
 			});
 			return;
 		}
@@ -9692,7 +9992,7 @@ var AccountEnrollmentManager = class {
 				id: input.id,
 				ref: "",
 				phase: "creating",
-				message: "正在创建账号"
+				messageKey: "enrollmentCreating"
 			}
 		};
 		this.tasks.set(input.id, task);
@@ -9700,7 +10000,7 @@ var AccountEnrollmentManager = class {
 			task.state = {
 				...task.state,
 				phase: "cleanup-needed",
-				message: "收尾未完成，请重试"
+				messageKey: "enrollmentCleanupPending"
 			};
 		});
 		return task.state;
@@ -9730,7 +10030,7 @@ var AccountEnrollmentManager = class {
 					id,
 					ref: "",
 					phase: "cancelled",
-					message: "已取消"
+					messageKey: "enrollmentCancelled"
 				}
 			};
 			this.tasks.set(id, task);
@@ -9743,7 +10043,7 @@ var AccountEnrollmentManager = class {
 		task.state = {
 			...task.state,
 			phase: "cancelling",
-			message: "正在等待写入结束并清理"
+			messageKey: "enrollmentCancelling"
 		};
 		await task.flow?.cancelAndDrain();
 		await task.work;
@@ -9780,14 +10080,14 @@ var AccountEnrollmentManager = class {
 				id,
 				ref: record.ref,
 				phase: "finished",
-				message: "账号开通完成"
+				messageKey: "enrollmentFinished"
 			});
 		} catch {
 			return this.publish(task, {
 				id,
 				ref: record.ref,
 				phase: "naming",
-				message: "账号已登录，名称保存失败，请重试或接受已有名称",
+				messageKey: "enrollmentNameFailed",
 				...name ? { suggestedName: name } : {}
 			});
 		}
@@ -9813,7 +10113,7 @@ var AccountEnrollmentManager = class {
 			task.state = {
 				...task.state,
 				phase: "cleanup-needed",
-				message: "清理未完成，请重试"
+				messageKey: "enrollmentCleanupFailed"
 			};
 		});
 		await task.work;
@@ -9881,7 +10181,7 @@ var AccountEnrollmentManager = class {
 						if (!task.cancelled && status.state === "waiting") task.state = {
 							...task.state,
 							phase: "waiting",
-							message: "等待浏览器登录",
+							messageKey: "enrollmentWaiting",
 							...status.authUrl ? { authUrl: status.authUrl } : {}
 						};
 						if (task.cancelled) flow.cancelAndDrain();
@@ -9897,7 +10197,7 @@ var AccountEnrollmentManager = class {
 			task.state = {
 				...task.state,
 				phase: "naming",
-				message: "账号已登录，正在保存名称",
+				messageKey: "enrollmentNaming",
 				...suggested ? { suggestedName: suggested } : {}
 			};
 			try {
@@ -9910,7 +10210,7 @@ var AccountEnrollmentManager = class {
 				if (task.state.phase === "finished") return;
 				task.state = {
 					...task.state,
-					message: "账号已登录，名称保存失败，请重试或接受已有名称"
+					messageKey: "enrollmentNameFailed"
 				};
 				return;
 			}
@@ -9922,7 +10222,7 @@ var AccountEnrollmentManager = class {
 			else task.state = {
 				...task.state,
 				phase: task.cancelled ? "cancelled" : "failed",
-				message: task.cancelled ? "已取消" : "账号开通失败，未创建账号"
+				messageKey: task.cancelled ? "enrollmentCancelled" : "enrollmentFailed"
 			};
 		} finally {
 			task.flow?.dispose();
@@ -9933,7 +10233,7 @@ var AccountEnrollmentManager = class {
 		task.state = {
 			...task.state,
 			phase: "writing",
-			message: "正在保存凭据"
+			messageKey: "enrollmentWriting"
 		};
 		task.writeStarted = true;
 		await this.deps.set(task.state.ref, key);
@@ -9974,7 +10274,7 @@ var AccountEnrollmentManager = class {
 			id,
 			ref,
 			phase: task.cancelled ? "cancelled" : "failed",
-			message: task.cancelled ? "已取消并清理" : "开通失败，已清理临时账号"
+			messageKey: task.cancelled ? "enrollmentCancelledCleaned" : "enrollmentFailedCleaned"
 		};
 	}
 	settings() {
@@ -10023,12 +10323,134 @@ var AccountEnrollmentManager = class {
 			id: record.id,
 			ref: record.ref,
 			phase: record.phase === "naming" ? "naming" : "cleanup-needed",
-			message: record.phase === "naming" ? "已登录账号等待确认名称" : "账号开通收尾未完成，请重试",
+			messageKey: record.phase === "naming" ? "enrollmentRecordNaming" : "enrollmentRecordCleanup",
 			...record.phase === "naming" ? { suggestedName: record.label } : {}
 		};
 	}
 };
 //#endregion
+//#region src/config-volatile.ts
+/**
+* Volatile-config helpers for dsh 0.1.7's schema-derived profile Config.
+*
+* 0.1.7's `settings.describe()` projects each entry's schema through
+* `volatileForm()`, so a form contains ONLY nodes carrying `meta.volatile`
+* and a form edit is refused unless its path lies beneath a marked node. The
+* loader then resolves each marked field into a frozen `{ get() }` reference
+* that is written IN PLACE (no remount) and announced with
+* `loader/volatile-update`. Two helpers keep the rest of the plugin reading a
+* PLAIN `Config`: `markVolatile()` applies the mark, and
+* `unwrapVolatileConfig()` reads every top-level field through its reference
+* when one is present — FRESH per call, because a reference's identity is
+* stable while its value changes.
+*
+* Only TOP-LEVEL fields are marked (a form write names a top-level path such
+* as `accounts` or `modelVisibility.<id>`), so one unwrap level is complete.
+* The literal `apiKey` secret stays unmarked on purpose: no settings surface
+* writes it — page and TUI both write keys through the credentials seam — so a
+* config-file edit to it reloading the fiber is correct for a secret literal.
+*
+* `volatileWrite()` is the third helper and the only WRITE in this module: it
+* commits into a reference that belongs to ANOTHER plugin entry (`ctx.web`'s
+* `searchProvider`), which no host API addresses directly. It is the degraded
+* path behind `ctx.settings.update()`; see its own note for why the disk-backed
+* path is preferred.
+*
+* @module dsh-commandcode-provider/config-volatile
+*/
+/**
+* Mark one schema field volatile.
+*
+* `.volatile()` is unconditional: it is a schemastery 3.18.3 feature and the
+* supported engine ships `~3.18.5`, so the
+* method is always present. It is reached through a structural member so the caller's
+* declared field type survives — the mark changes what the schema PARSES to (a
+* live reference), not the plugin-facing `Config` shape.
+*/
+function markVolatile(schema) {
+	return schema.volatile();
+}
+/**
+* Mark every field of a Config field dict volatile, except the named
+* composition-only secrets (`apiKey` here, which no settings surface writes).
+*/
+function markVolatileFields(fields, skip = []) {
+	return Object.fromEntries(Object.entries(fields).map(([name, schema]) => [name, skip.includes(name) ? schema : markVolatile(schema)]));
+}
+/**
+* Whether a resolved config value is a volatile reference.
+*
+* Duck-typed on the two properties `createVolatile` produces (frozen object
+* with a `get` method) rather than cosmokit's private `write` symbol, because
+* cosmokit is not a peer of this bundle. Config values are plain parsed JSON
+* (or `!!jsExpr` wrappers), which are never frozen, so the test cannot
+* misfire on an ordinary field.
+*/
+function isVolatileRef(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) && Object.isFrozen(value) && typeof value.get === "function";
+}
+/**
+* The commit protocol cosmokit's `createVolatile` installs on every reference.
+*
+* `Symbol.for` — not a local `Symbol()` — because cosmokit registers it
+* globally precisely so copies of the shared library loaded twice (ESM/CJS, two
+* node_modules trees) still recognize each other's references. Reaching it
+* through the global registry is what lets this bundle commit a value without
+* taking `@deepseek-ai/cosmokit` as a dependency.
+*/
+const VOLATILE_WRITE = Symbol.for("cosmokit.volatile.write");
+/**
+* Commit a value into a RUNNING volatile reference and verify it landed.
+*
+* This is the DEGRADED write path, and it is deliberately second choice: the
+* reference is the live config the owner reads per call, but the value never
+* reaches the profile document, so the next loader commit for that entry (any
+* `loader/volatile-update`, including one caused by an unrelated field of the
+* same entry) re-resolves the raw config and overwrites it. The official
+* `ctx.settings.update()` path exists to avoid exactly that; this one keeps the
+* CURRENT process coherent when settings is unavailable or refuses the write.
+*
+* Reading back is not optional: the write method is an internal protocol, so a
+* future cosmokit that renames the symbol, hides it, or changes the value shape
+* must degrade to "not applied" instead of silently pretending success.
+*
+* @param ref - Candidate volatile reference; anything else returns `false`.
+* @param value - Value to commit.
+* @returns Whether the reference now reads back as `value`.
+*/
+function volatileWrite(ref, value) {
+	if (!isVolatileRef(ref)) return false;
+	const write = ref[VOLATILE_WRITE];
+	if (typeof write !== "function") return false;
+	try {
+		write.call(ref, value);
+	} catch {
+		return false;
+	}
+	try {
+		return Object.is(ref.get(), value);
+	} catch {
+		return false;
+	}
+}
+/**
+* Read one config object as PLAIN values.
+*
+* Every top-level field found to be a volatile reference is read through
+* `.get()` — freshly on every call, so a live update lands on the very next
+* read (the loader resolves EVERY marked node into a reference, unset fields
+* included, so a loader-parsed config always yields a fresh object here). The
+* pass-through for a field that is not a reference is what keeps the unmarked
+* `apiKey` literal readable.
+*/
+function unwrapVolatileConfig(config) {
+	const source = config;
+	if (typeof source !== "object" || source === null) return config;
+	const plain = {};
+	for (const [field, value] of Object.entries(source)) plain[field] = isVolatileRef(value) ? value.get() : value;
+	return plain;
+}
+//#endregion
 //#region src/web-search.ts
 /**
 * Command Code web-search provider over `ctx.web`.
@@ -10041,6 +10463,12 @@ var AccountEnrollmentManager = class {
 * therefore reuses the plugin's existing credential chain and `apiBase`, so
 * the model-facing `web_search` tool needs no separate configuration.
 *
+* The second half of this module is the SELECTION seam: which registered search
+* backend `ctx.web` actually runs. dsh 0.2.1-rc.2 turned that choice into a
+* per-call `Volatile` field of the `web` profile entry, so it is changed
+* through the host settings service rather than by assigning a runtime field —
+* see {@link createCommandCodeSearchSelection}.
+*
 * @module dsh-commandcode-provider/web-search
 */
 /** Stable id this provider registers under in `ctx.web`. */
@@ -10052,54 +10480,273 @@ const COMMANDCODE_SEARCH_PROVIDER_ID = "commandcode";
 * PREVIOUSLY selected backend, never this default (issue #26).
 */
 const DEFAULT_WEB_SEARCH_PROVIDER_ID = "deepseek-official";
+/**
+* Profile entry id whose volatile `searchProvider` selects the search backend.
+*
+* The hosting profile declares it in `dsh-base`'s cordis patch as
+* `- id: web` / `name: '@deepseek-ai/dsh-web'`, and the shipped web-search
+* settings page addresses the very same namespace — that page and this plugin
+* are therefore two writers of ONE field (see
+* {@link createCommandCodeSearchSelection} for how they avoid fighting).
+*/
+const WEB_SELECTION_NAMESPACE = "web";
 /** Fresh selection state: the plugin starts out not owning the selection. */
 function commandCodeSearchSelection() {
 	return {
 		owner: false,
-		displaced: void 0,
-		preexisting: false
+		preexisting: false,
+		foreign: void 0,
+		displaced: void 0
 	};
 }
+/** Read one member of a plain object or array without trusting its shape. */
+function member(value, key) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+	return value[key];
+}
+/** A string member, or `undefined` for anything else (including `null`). */
+function text(value) {
+	return typeof value === "string" ? value : void 0;
+}
+/** The settings row describing the `web` entry, when the host serves one. */
+function selectionRow(settings) {
+	let rows;
+	try {
+		rows = settings.describe();
+	} catch {
+		return;
+	}
+	if (!Array.isArray(rows)) return void 0;
+	return rows.find((row) => text(member(row, "ns")) === "web");
+}
 /**
-* Reach one end of the `webSearch` toggle without trampling sibling search
-* providers (issue #26).
-*
-* - Enabling writes `commandcode` and remembers whatever it displaced. When
-*   the plugin already owns the selection, the original `displaced` is kept —
-*   the field currently holds our own id, which must never be mistaken for the
-*   user's backend.
-* - Disabling hands the selection back to the remembered backend only when
-*   this plugin actually took it over. A fresh boot straight into
-*   `webSearch: false`, or a `preexisting` field, leaves it ALONE: writing the
-*   empty memory back would clear the user's own `searchProvider: commandcode`
-*   pin and hand the selection to dsh-web's auto-select, where a second usable
-*   provider makes every later search throw `WEB_PROVIDER_AMBIGUOUS`.
+* The volatile reference backing `web.searchProvider`.
 *
-* Never throws: like the low-level rewrite, a hardened runtime shape degrades
-* to registered-but-unselected.
+* `config` is a TypeScript-private parameter property on `WebRuntime`, so at
+* runtime it is an ordinary own field — the only handle to a reference the host
+* exposes no public accessor for. Reading it structurally means a hardened
+* runtime degrades to "not writable" instead of throwing.
 */
-function applyCommandCodeSearchSelection(web, state, enable) {
+function searchProviderRef(web) {
+	return member(member(web, "config"), "searchProvider");
+}
+/** Observe the live selection; `undefined` when nothing can be observed. */
+function readView(deps) {
+	const settings = deps.settings();
+	if (settings !== void 0) {
+		const row = selectionRow(settings);
+		if (row !== void 0) {
+			const user = member(row, "user");
+			return {
+				configured: text(member(member(row, "value"), "searchProvider")),
+				pinned: text(member(user, "searchProvider")),
+				base: text(member(member(row, "base"), "searchProvider")),
+				user: typeof user === "object" && user !== null && !Array.isArray(user) ? { ...user } : {},
+				persistent: true
+			};
+		}
+	}
+	const ref = searchProviderRef(deps.web);
+	if (!isVolatileRef(ref)) return void 0;
+	let current;
 	try {
-		const field = web;
-		if (enable) {
-			if (state.owner) {
-				field.searchProviderId = COMMANDCODE_SEARCH_PROVIDER_ID;
+		current = ref.get();
+	} catch {
+		return;
+	}
+	if (current !== void 0 && typeof current !== "string") return void 0;
+	return {
+		configured: current,
+		pinned: void 0,
+		base: void 0,
+		user: {},
+		persistent: false
+	};
+}
+/**
+* The selection seam over `ctx.web`.
+*
+* ## Why settings rather than the runtime instance
+*
+* 0.2.1-rc.2's `WebRuntime` reads `this.config.searchProvider.get()` on EVERY
+* search and fetch, and the loader commits a settings write into that same
+* reference in place (`Entry._commitVolatile`) without remounting the entry.
+* Writing the reference directly therefore works, but leaves the value out of
+* the profile: the next commit for that entry — including one caused by an
+* unrelated field such as `fetchProvider` — re-resolves the raw config and
+* overwrites it. `ctx.settings.update()` / `replace()` is the documented path
+* and the one the shipped web-search settings page uses, so this plugin takes
+* it first and falls back to the reference only when settings is unavailable or
+* refuses (see `volatileWrite`).
+*
+* ## Two writers, one field
+*
+* The shipped web-search settings page writes `web.searchProvider` too
+* (`deepseek-search-api` / `deepseek-official`). This seam never displaces a
+* pin it did not write: a non-`commandcode` value in the USER LAYER stops the
+* takeover, the value is recorded on {@link CommandCodeSearchSelection.foreign}
+* and named in one `info` line, and the provider stays registered but
+* unselected. A value the user layer does not carry is the deployment's own
+* default, and taking it over is the toggle's whole purpose. A user-layer
+* `commandcode` is treated as ours: nothing else writes that id, so it can only
+* be a previous run of this plugin or a deliberate manual pin, and turning the
+* toggle off restores the composed default in both cases.
+*
+* @param deps - the running `web` service, a settings resolver, and a log sink.
+* @returns a synchronous handle; failures are logged, never thrown.
+*/
+function createCommandCodeSearchSelection(deps) {
+	const state = commandCodeSearchSelection();
+	let pending;
+	let activeKey;
+	let running = false;
+	let closed = false;
+	let waiters = [];
+	const warn = (message) => {
+		try {
+			deps.logger.warn(message);
+		} catch {}
+	};
+	const info = (message) => {
+		try {
+			deps.logger.info(message);
+		} catch {}
+	};
+	/** Commit `commandcode` in memory; the last resort before giving up. */
+	const memoryWrite = (value) => {
+		const written = volatileWrite(searchProviderRef(deps.web), value);
+		if (!written) warn("llm-commandcode: web search selection could not be applied (settings refused the write and the running web config is not writable); the provider stays registered but unselected");
+		return written;
+	};
+	/** Run one intent against a FRESH observation; never throws. */
+	const perform = async (intent) => {
+		let view;
+		try {
+			view = readView(deps);
+		} catch {
+			view = void 0;
+		}
+		if (view === void 0) return;
+		const settings = view.persistent ? deps.settings() : void 0;
+		if (intent.kind === "take") {
+			if (view.pinned !== void 0 && view.pinned !== "commandcode") return;
+			if (settings !== void 0) try {
+				await settings.update("web", { searchProvider: COMMANDCODE_SEARCH_PROVIDER_ID });
 				return;
+			} catch (error) {
+				warn(`llm-commandcode: writing web.searchProvider through settings failed (${error instanceof Error ? error.message : String(error)}); falling back to the running config`);
 			}
-			const prior = field.searchProviderId;
-			state.preexisting = prior === COMMANDCODE_SEARCH_PROVIDER_ID;
-			state.displaced = state.preexisting ? void 0 : prior;
-			field.searchProviderId = COMMANDCODE_SEARCH_PROVIDER_ID;
-			state.owner = true;
+			memoryWrite(COMMANDCODE_SEARCH_PROVIDER_ID);
 			return;
 		}
-		if (state.owner) {
+		if (view.pinned !== void 0 && view.pinned !== "commandcode") return;
+		if (settings !== void 0) {
+			const section = { ...view.user };
+			delete section.searchProvider;
+			if (view.base !== void 0) section.searchProvider = view.base;
+			try {
+				await settings.replace("web", section);
+				return;
+			} catch (error) {
+				warn(`llm-commandcode: restoring web.searchProvider through settings failed (${error instanceof Error ? error.message : String(error)}); falling back to the running config`);
+			}
+		}
+		memoryWrite(intent.displaced);
+	};
+	const flush = () => {
+		const done = waiters;
+		waiters = [];
+		for (const resolve of done) resolve();
+	};
+	const drain = async () => {
+		running = true;
+		try {
+			while (pending !== void 0 && !closed) {
+				const item = pending;
+				pending = void 0;
+				activeKey = item.key;
+				await perform(item.intent);
+			}
+		} finally {
+			running = false;
+			activeKey = void 0;
+			flush();
+		}
+	};
+	/**
+	* Queue one intent, skipping an identical one already queued or in flight. A
+	* later DIFFERENT intent replaces the queued one: the toggle is a state, not a
+	* log, so only the newest position has to land.
+	*/
+	const submit = (key, intent) => {
+		if (closed) return;
+		if (key === activeKey && pending === void 0) return;
+		if (pending?.key === key) return;
+		pending = {
+			key,
+			intent
+		};
+		if (!running) drain();
+	};
+	const apply = (enable) => {
+		try {
+			const view = readView(deps);
+			if (view === void 0) return;
+			if (!enable) {
+				if (!state.owner) return;
+				state.owner = false;
+				if (state.preexisting) {
+					state.preexisting = false;
+					return;
+				}
+				submit("restore", {
+					kind: "restore",
+					displaced: state.displaced
+				});
+				return;
+			}
+			if (view.pinned !== void 0 && view.pinned !== "commandcode") {
+				if (state.foreign !== view.pinned) {
+					state.foreign = view.pinned;
+					info(`llm-commandcode: web search backend "${view.pinned}" was chosen in the web-search settings page; leaving that explicit choice in place, so the commandcode provider stays registered but unselected`);
+				}
+				state.owner = false;
+				state.preexisting = false;
+				return;
+			}
+			state.foreign = void 0;
+			if (view.configured === "commandcode") {
+				state.owner = view.pinned === COMMANDCODE_SEARCH_PROVIDER_ID;
+				state.preexisting = !state.owner;
+				if (state.owner && state.displaced === void 0) state.displaced = view.base;
+				return;
+			}
+			state.displaced = view.configured;
+			state.preexisting = false;
+			state.owner = true;
+			submit("take", {
+				kind: "take",
+				displaced: view.configured
+			});
+		} catch (error) {
+			warn(`llm-commandcode: aligning the web search selection failed (${error instanceof Error ? error.message : String(error)})`);
+		}
+	};
+	return {
+		state,
+		apply,
+		settled: () => running || pending !== void 0 ? new Promise((resolve) => {
+			waiters.push(resolve);
+		}) : Promise.resolve(),
+		release: () => {
+			closed = true;
+			pending = void 0;
+			if (state.owner && !state.preexisting) memoryWrite(state.displaced);
 			state.owner = false;
-			if (!state.preexisting) field.searchProviderId = state.displaced;
 			state.preexisting = false;
-			return;
+			if (!running) flush();
 		}
-	} catch {}
+	};
 }
 /** Command Code's lower/upper bound on `numResults` (from the CLI's `web_search` schema). */
 const MIN_NUM_RESULTS = 1;
@@ -10183,7 +10830,7 @@ var CommandCodeSearchProvider = class {
 			});
 		} catch (error) {
 			if (signal?.aborted === true || isAbortError(error)) throw searchAborted(signal, error);
-			throw new WebError(`Command Code web search request failed: ${error instanceof Error ? error.message : String(error)}`, "WEB_PROVIDER_ERROR", { cause: error });
+			throw new WebError(`Command Code web search request failed: ${readableErrorText(error)}`, "WEB_PROVIDER_ERROR", { cause: error });
 		}
 		if (!response.ok) {
 			let message = `Command Code web search failed (HTTP ${response.status})`;
@@ -10237,7 +10884,7 @@ var CommandCodeSearchProvider = class {
 				if (code === "MISSING_CREDENTIAL") throw new WebError(error.message, "WEB_PROVIDER_CREDENTIAL_MISSING", { cause: error });
 				if (code === "INVALID_CREDENTIAL" || code === "RATE_LIMIT") throw new WebError(error.message, "WEB_PROVIDER_ERROR", { cause: error });
 			}
-			throw new WebError(`Command Code web search credential resolution failed: ${error instanceof Error ? error.message : String(error)}`, "WEB_PROVIDER_ERROR", { cause: error });
+			throw new WebError(`Command Code web search credential resolution failed: ${readableErrorText(error)}`, "WEB_PROVIDER_ERROR", { cause: error });
 		}
 		if (key === void 0 || key.length === 0) throw new WebError("Command Code web search has no API key; store COMMANDCODE_API_KEY through the credentials service (the web Models page writes it), export it in the launching environment, set config.apiKey, or run `command-code login` to write ~/.commandcode/auth.json", "WEB_PROVIDER_CREDENTIAL_MISSING");
 		return key;
@@ -10568,7 +11215,7 @@ function applyCommandCodeTuiSettings(ctx, deps) {
 				dispose: service.register(section)
 			};
 		} catch (error) {
-			ctx.logger?.warn(`llm-commandcode: could not register the dsh-TUI settings section: ${error instanceof Error ? error.message : String(error)}`);
+			ctx.logger?.warn(`llm-commandcode: could not register the dsh-TUI settings section: ${readableErrorText(error)}`);
 		}
 	};
 	refresh();
@@ -10651,78 +11298,6 @@ function transportBudgetMessage(failureMessage, maxRetries) {
 	return `${failureMessage}；Command Code API 连接在连续重试后仍失败——已停止重试以免整轮卡死。插件已自动重试 ${maxRetries} 次。通常说明当前网络到 api.commandcode.ai 的连接不通，常见原因是代理未生效：DSH 只读取环境变量 HTTPS_PROXY/HTTP_PROXY（系统代理/PAC 不会被读取），请确认启动 DSH 的终端里已导出代理，或先关闭代理直连后重试。网络恢复后直接重发即可 — Command Code API transport still failed after ${maxRetries} automatic retries, which were stopped so the turn could not stall for minutes. This is a connectivity problem between this machine and api.commandcode.ai, not a context-window or request-size rejection. Common cause: the proxy is not reaching the harness — DSH reads HTTPS_PROXY/HTTP_PROXY from the environment only (a Windows system proxy/PAC setting is not consulted), so export it in the launching shell, or turn the proxy off and retry. Resend when the network recovers; the budget is per request and has been reset`;
 }
 //#endregion
-//#region src/config-volatile.ts
-/**
-* Volatile-config helpers for dsh 0.1.7's schema-derived profile Config.
-*
-* 0.1.7's `settings.describe()` projects each entry's schema through
-* `volatileForm()`, so a form contains ONLY nodes carrying `meta.volatile`
-* and a form edit is refused unless its path lies beneath a marked node. The
-* loader then resolves each marked field into a frozen `{ get() }` reference
-* that is written IN PLACE (no remount) and announced with
-* `loader/volatile-update`. Two helpers keep the rest of the plugin reading a
-* PLAIN `Config`: `markVolatile()` applies the mark, and
-* `unwrapVolatileConfig()` reads every top-level field through its reference
-* when one is present — FRESH per call, because a reference's identity is
-* stable while its value changes.
-*
-* Only TOP-LEVEL fields are marked (a form write names a top-level path such
-* as `accounts` or `modelVisibility.<id>`), so one unwrap level is complete.
-* The literal `apiKey` secret stays unmarked on purpose: no settings surface
-* writes it — page and TUI both write keys through the credentials seam — so a
-* config-file edit to it reloading the fiber is correct for a secret literal.
-*
-* @module dsh-commandcode-provider/config-volatile
-*/
-/**
-* Mark one schema field volatile.
-*
-* `.volatile()` is unconditional: it is a schemastery 3.18.3 feature and every
-* supported engine ships `~3.18.4` or `~3.18.5-alpha.1`, so the
-* method is always present. It is reached through a structural member so the caller's
-* declared field type survives — the mark changes what the schema PARSES to (a
-* live reference), not the plugin-facing `Config` shape.
-*/
-function markVolatile(schema) {
-	return schema.volatile();
-}
-/**
-* Mark every field of a Config field dict volatile, except the named
-* composition-only secrets (`apiKey` here, which no settings surface writes).
-*/
-function markVolatileFields(fields, skip = []) {
-	return Object.fromEntries(Object.entries(fields).map(([name, schema]) => [name, skip.includes(name) ? schema : markVolatile(schema)]));
-}
-/**
-* Whether a resolved config value is a volatile reference.
-*
-* Duck-typed on the two properties `createVolatile` produces (frozen object
-* with a `get` method) rather than cosmokit's private `write` symbol, because
-* cosmokit is not a peer of this bundle. Config values are plain parsed JSON
-* (or `!!jsExpr` wrappers), which are never frozen, so the test cannot
-* misfire on an ordinary field.
-*/
-function isVolatileRef(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value) && Object.isFrozen(value) && typeof value.get === "function";
-}
-/**
-* Read one config object as PLAIN values.
-*
-* Every top-level field found to be a volatile reference is read through
-* `.get()` — freshly on every call, so a live update lands on the very next
-* read (the loader resolves EVERY marked node into a reference, unset fields
-* included, so a loader-parsed config always yields a fresh object here). The
-* pass-through for a field that is not a reference is what keeps the unmarked
-* `apiKey` literal readable.
-*/
-function unwrapVolatileConfig(config) {
-	const source = config;
-	if (typeof source !== "object" || source === null) return config;
-	const plain = {};
-	for (const [field, value] of Object.entries(source)) plain[field] = isVolatileRef(value) ? value.get() : value;
-	return plain;
-}
-//#endregion
 //#region src/index.ts
 /**
 * dsh-commandcode-provider — DeepSeek Harness LLM provider plugin for Command
@@ -10780,6 +11355,9 @@ const Config = z.object(markVolatileFields({
 	filterModelsByPlan: z.boolean(),
 	visibleModels: z.array(z.string()),
 	modelVisibility: z.dict(z.boolean()),
+	contextWindow: z.number().min(1).max(CONTEXT_WINDOW_MAX).step(1),
+	contextWindowOverrides: z.dict(z.number().min(1).max(CONTEXT_WINDOW_MAX).step(1)),
+	maxOutputTokens: z.number().min(0).max(MAX_OUTPUT_TOKEN_LIMIT).step(1),
 	webSearch: z.boolean().default(true),
 	showSidebarQuota: z.boolean().default(false),
 	accounts: z.array(z.object({
@@ -10825,6 +11403,9 @@ function resolveAdapterOptions(config) {
 		filterModelsByPlan: config.filterModelsByPlan ?? true,
 		visibleModels: Array.isArray(config.visibleModels) ? config.visibleModels.filter((id) => typeof id === "string" && id !== "") : void 0,
 		modelVisibility: readModelVisibility(config.modelVisibility),
+		contextWindow: isValidContextWindow(config.contextWindow) ? config.contextWindow : void 0,
+		contextWindowOverrides: readContextWindowOverrides(config.contextWindowOverrides),
+		maxOutputTokens: isValidMaxOutputTokens(config.maxOutputTokens) ? config.maxOutputTokens : void 0,
 		zdr: config.zdr === true
 	};
 }
@@ -10985,7 +11566,7 @@ function apply(ctx, config) {
 			else try {
 				report = await adapter.getUsage(account.key, connection);
 			} catch (error) {
-				report = { failures: [error instanceof Error ? error.message : String(error)] };
+				report = { failures: [readableErrorText(error)] };
 			}
 			const state = account?.state;
 			const usable = accountUsable(state);
@@ -11067,13 +11648,24 @@ function apply(ctx, config) {
 		listModels: catalogForEditors,
 		analytics: createAnalyticsReader(ctx, adapter)
 	});
-	const searchSelection = commandCodeSearchSelection();
+	const selectionLogger = {
+		warn: (message) => {
+			ctx.logger.warn(message);
+		},
+		info: (message) => {
+			ctx.logger.info(message);
+		}
+	};
+	let searchSelection;
 	const applySearchSelection = (enabled) => {
-		if (webRuntime !== void 0) applyCommandCodeSearchSelection(webRuntime, searchSelection, enabled);
+		searchSelection?.apply(enabled);
 	};
-	let webRuntime;
 	ctx.inject(["web"], (webCtx) => {
-		webRuntime = webCtx.web;
+		searchSelection = createCommandCodeSearchSelection({
+			web: webCtx.web,
+			settings: () => ctx.get("settings"),
+			logger: selectionLogger
+		});
 		webCtx.web.registerSearchProvider(new CommandCodeSearchProvider({
 			resolveKey: async (apiBase) => {
 				const connection = options();
@@ -11085,8 +11677,8 @@ function apply(ctx, config) {
 		}));
 		applySearchSelection(current().webSearch ?? true);
 		webCtx.effect(() => () => {
-			webRuntime = void 0;
-			applyCommandCodeSearchSelection(webCtx.web, searchSelection, false);
+			searchSelection?.release();
+			searchSelection = void 0;
 		}, "dsh-commandcode-provider: web search selection");
 	});
 	let refreshTuiSettings;
@@ -11131,6 +11723,7 @@ function apply(ctx, config) {
 				dispose();
 			};
 		}, "dsh-commandcode-provider: settings auto-form policy");
+		applySearchSelection(current().webSearch ?? true);
 	});
 	const loaderEvents = ctx;
 	ctx.effect(() => {
@@ -11144,6 +11737,6 @@ function apply(ctx, config) {
 	}, "dsh-commandcode-provider: volatile config updates");
 }
 //#endregion
-export { ACTIVE_ACCOUNT_AUTO, BILLING_ACCESS_TTL_MS, COMMANDCODE_SEARCH_PROVIDER_ID, COMMAND_CODE_CLI_VERSION, CommandCodeAccountPool, CommandCodeAdapter, CommandCodeLoginFlow, CommandCodeSearchProvider, CommandCodeUsageService, Config, DEFAULT_API_BASE, DEFAULT_GENERATE_MAX_TOKENS, DEFAULT_MAX_OUTPUT_TOKENS, DEFAULT_MODELS_CACHE_PATH, DEFAULT_REQUEST_TIMEOUT_MS, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_WEB_SEARCH_PROVIDER_ID, KNOWN_DEALS, KNOWN_EFFORTS, KNOWN_IMAGE_MODELS, KNOWN_NON_ZDR_MODELS, KNOWN_PEAK_PRICING, KNOWN_PLANS, KNOWN_SUBSCRIPTION_PLANS, KNOWN_THINKING_MODELS, LANG_AUTO, LOGIN_ALLOWED_ORIGINS, LOGIN_BEGIN_ENDPOINT, LOGIN_BODY_LIMIT_BYTES, LOGIN_CANCEL_ENDPOINT, LOGIN_MAX_PORT_ATTEMPTS, LOGIN_START_PORT, LOGIN_STATUS_ENDPOINT, LOGIN_TIMEOUT_MS, PLAN_LABELS, PLAN_ORDER, PROVIDER, USAGE_REPORT_ENDPOINT, accountUsable, apply, applyCommandCodeSearchSelection, applyCommandCodeTuiSettings, applyCommands, applyUsageRemote, buildCommandAuthUrl, buildCommandCodeTuiSection, capabilityDescription, commandCodeSearchSelection, commandDefinition, compareByPlan, dealLabel, formatContext, inject, loginStatusSchema, matchModelRule, modelVisibleInPlan, name, parseLoginStatus, peakPricingLabel, peakPricingState, planLabel, projectSlugFromPath, resolveAdapterOptions, resolveAuthFileApiKey, selectAccountForModel, selectActiveAccount, studioBaseForApiBase, subscriptionPlanInfo, supportsZeroDataRetention, usageReportSchema, validateCommandApiKey };
+export { ACTIVE_ACCOUNT_AUTO, BILLING_ACCESS_TTL_MS, COMMANDCODE_SEARCH_PROVIDER_ID, COMMAND_CODE_CLI_VERSION, CommandCodeAccountPool, CommandCodeAdapter, CommandCodeLoginFlow, CommandCodeSearchProvider, CommandCodeUsageService, Config, DEFAULT_API_BASE, DEFAULT_GENERATE_MAX_TOKENS, DEFAULT_MAX_OUTPUT_TOKENS, DEFAULT_MODELS_CACHE_PATH, DEFAULT_REQUEST_TIMEOUT_MS, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_WEB_SEARCH_PROVIDER_ID, KNOWN_DEALS, KNOWN_EFFORTS, KNOWN_IMAGE_MODELS, KNOWN_NON_ZDR_MODELS, KNOWN_PEAK_PRICING, KNOWN_PLANS, KNOWN_SUBSCRIPTION_PLANS, KNOWN_THINKING_MODELS, LANG_AUTO, LOGIN_ALLOWED_ORIGINS, LOGIN_BEGIN_ENDPOINT, LOGIN_BODY_LIMIT_BYTES, LOGIN_CANCEL_ENDPOINT, LOGIN_MAX_PORT_ATTEMPTS, LOGIN_START_PORT, LOGIN_STATUS_ENDPOINT, LOGIN_TIMEOUT_MS, PLAN_LABELS, PLAN_ORDER, PROVIDER, USAGE_REPORT_ENDPOINT, WEB_SELECTION_NAMESPACE, accountUsable, apply, applyCommandCodeTuiSettings, applyCommands, applyUsageRemote, buildCommandAuthUrl, buildCommandCodeTuiSection, capabilityDescription, commandCodeSearchSelection, commandDefinition, compareByPlan, createCommandCodeSearchSelection, dealLabel, formatContext, inject, loginStatusSchema, matchModelRule, modelVisibleInPlan, name, parseLoginStatus, peakPricingLabel, peakPricingState, planLabel, projectSlugFromPath, resolveAdapterOptions, resolveAuthFileApiKey, selectAccountForModel, selectActiveAccount, studioBaseForApiBase, subscriptionPlanInfo, supportsZeroDataRetention, usageReportSchema, validateCommandApiKey };
 
 //# sourceMappingURL=index.js.map