@mars-sea/dsh-commandcode-provider 0.5.0 → 0.6.1

package/CHANGELOG.md

@@ -4,6 +4,27 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.1] - 2026-08-22
+
+### Added
+
+- **New model: Ox Alpha (`stealth/ox-alpha`, command-code@1.31.0).** A free 1M-context reasoning model with vision input, included on every plan: it appears in the picker under the Go tier with `FREE` · `Image` · `1M` markers, is whitelisted as vision-capable and auto-thinking (it reasons automatically with no selectable effort levels), and carries a `FREE` deal while the stealth preview lasts.
+- **The settings page now shows the plugin version** as a muted footer line ("Command Code Provider v0.6.1"), read from package.json at build time so it always matches the published release.
+- **Settings-page input polish:** a brief "Saved ✓" confirmation flashes after each accepted save (failures already showed an error); the two millisecond timeout fields now validate their range while typing with specific messages ("must be at least 1" / "above the allowed maximum") instead of a generic save-time failure; and the API-key fields (default + every account) gained a Show/Hide toggle so a pasted key can be spot-checked.
+
+### Changed
+
+- **Retries are now persistent (opencode-style) instead of two attempts.** Transient failures — rate limits, server errors, timeouts, transport drops, empty responses — retry up to 1000 times at the agent-step boundary, with waits doubling from 500 ms and capping at 15 minutes (±10% jitter). Permanent failures (an invalid key, unsupported content, plan rejections) still fail fast on the first attempt. Waits are smart: a 429's `Retry-After` header and the rotation pool's earliest known window-reset time are honored verbatim up to the 15-minute cap, so when every account's usage window is exhausted the session sleeps through the window and recovers in place instead of dying after two quick tries.
+- **Synced with the official command-code@1.31.0 CLI** (upstream moved 1.28.4 → 1.29.0 → 1.30.0 → 1.30.1 → 1.31.0; the intermediate releases shipped BYOK provider support, model-traffic routing, and CLI UI fixes — none touch the Provider API). `COMMAND_CODE_CLI_VERSION` is now `1.31.0`. The only snapshot change across those releases is the new Ox Alpha model above; wire protocol, endpoints, effort map, plan maps, deals, and peak pricing are all unchanged.
+- **Verified compatibility with DeepSeek Harness 0.1.0-rc.7 / 0.1.0-rc.8 / 0.1.1-rc.1**, including rc.8's reworked client boot protocol: the client bundle now declares its module-graph dependency (`dsh.client.external`), so client-module load order no longer relies on the platform seed table. The supported peer range widened to `^0.1.0-rc.6 || ^0.1.1-rc.1`, so 0.1.1 hosts install without unmet-peer-dependency warnings.
+
+## [0.6.0] - 2026-08-19
+
+### Changed
+
+- **Synced with the official command-code@1.28.4 CLI** (upstream moved 1.28.1 → 1.28.4: 1.28.2 raised the Qwen 3.8 27B usage allowance on GOAT and Pro, 1.28.3 fixed a CLI UI overlay issue; 1.28.4 is not on the changelog page yet). `COMMAND_CODE_CLI_VERSION` is now `1.28.4`. No snapshot or wire changes: the 1.28.4 bundle's effort map, plan maps, ZA model table, endpoints, request fields, and stream event types are all identical to 1.28.1, and the live catalog still lists the same 56 models.
+- **The settings page's account-usage card is now a carousel.** With several accounts configured, a tab strip (account label + status dot) switches between per-account reports instead of stacking them, so the page no longer grows with each account; the selector defaults to the currently serving account. Each account's report carries its own **remove** button (staged like every other edit, persisted on save) — offered only for accounts the settings document actually owns (the default account and composition-only literal-key accounts are not removable from the page), and the per-row remove buttons in the account-management card below were removed (unsaved additions keep theirs, since they never appear in the Host-side usage report). Accounts staged for removal disappear from the carousel immediately and stay hidden across the post-save refresh.
+
 ## [0.5.0] - 2026-08-19
 
 ### Added

package/README.md

@@ -10,7 +10,7 @@
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 [![npm](https://img.shields.io/badge/npm-@mars--sea%2Fdsh--commandcode--provider-blue.svg)](https://www.npmjs.com/package/@mars-sea/dsh-commandcode-provider)
 
-Unofficial [DeepSeek Harness](https://deepseek-harness.github.io/deepseek-harness/) LLM provider plugin for **Command Code**, ported from [pi-commandcode-provider](https://github.com/patlux/pi-commandcode-provider) (MIT). It registers a `commandcode` provider whose requests are translated to Command Code's Provider API (`POST /alpha/generate`, reverse-engineered by the pi plugin, `command-code@1.28.1`).
+Unofficial [DeepSeek Harness](https://deepseek-harness.github.io/deepseek-harness/) LLM provider plugin for **Command Code**, ported from [pi-commandcode-provider](https://github.com/patlux/pi-commandcode-provider) (MIT). It registers a `commandcode` provider whose requests are translated to Command Code's Provider API (`POST /alpha/generate`, reverse-engineered by the pi plugin, `command-code@1.28.4`).
 
 > This is a community integration. You need your own Command Code account and API key or subscription, and Command Code's terms apply. This project is not affiliated with Command Code, Inc.
 
@@ -22,7 +22,7 @@ Unofficial [DeepSeek Harness](https://deepseek-harness.github.io/deepseek-harnes
 - **API key resolution order**: `config.apiKey` → credential ref `apiKeyEnv` (default `COMMANDCODE_API_KEY`) → launch environment → the official CLI auth file (`~/.commandcode/auth.json`, from `command-code login`).
 - **Model-picker annotations**: every model shows the **minimum plan** that includes it (`KNOWN_PLANS`), an **active deal** or `FREE` badge (`KNOWN_DEALS`, expiry-aware so lapsed discounts hide themselves), the **current peak/off-peak state** (`Peak`/`Half`) for time-of-day-priced models, an **`Image`** marker for Vision models, and the **context window** (`1M` / `256K` / `262K`) — e.g. *"Go · 50% off · Image · 1M"*, *"Go · Half · 1M"*. The list is **sorted by plan tier** (Go → GOAT → Pro → Provider/Max), so the models your plan can use lead the picker.
 - **Plan-aware picker filtering**: the picker **hides models above your subscription tier** outright (resolved live from your account's billing state). It fails open — an unreachable billing endpoint, an unknown plan, or a positive on-demand credit balance (which the official CLI treats as unlocking every model) all keep the full catalog visible — and the server stays the final gate. Set **Hide out-of-plan models** off on the settings page (or `filterModelsByPlan: false` in the `llm-commandcode` settings section) to always list every model.
-- **Reasoning-effort support** for models the official catalog marks as such (`KNOWN_EFFORTS`, matching `command-code@1.28.1`); reasoning models without effort levels still think automatically, exactly like the official CLI.
+- **Reasoning-effort support** for models the official catalog marks as such (`KNOWN_EFFORTS`, matching `command-code@1.28.4`); reasoning models without effort levels still think automatically, exactly like the official CLI.
 - **Image input for Vision-capable models** (sent in the official wire format via the dsh attachment service); text-only models refuse images loudly (`UNSUPPORTED_CONTENT`) rather than dropping them.
 
 <img src="assets/screenshots/model-picker.png" alt="Model picker with plan, deal, image and context annotations" width="250">

package/README.zh-CN.md

@@ -10,7 +10,7 @@
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 [![npm](https://img.shields.io/badge/npm-@mars--sea%2Fdsh--commandcode--provider-blue.svg)](https://www.npmjs.com/package/@mars-sea/dsh-commandcode-provider)
 
-非官方 [DeepSeek Harness](https://deepseek-harness.github.io/deepseek-harness/) 的 LLM provider 插件，用于 **Command Code**，移植自 [pi-commandcode-provider](https://github.com/patlux/pi-commandcode-provider)（MIT 协议）。它注册了一个 `commandcode` provider，将请求转换为 Command Code 的 Provider API（`POST /alpha/generate`，由 pi 插件逆向工程，对应 `command-code@1.28.1`）。
+非官方 [DeepSeek Harness](https://deepseek-harness.github.io/deepseek-harness/) 的 LLM provider 插件，用于 **Command Code**，移植自 [pi-commandcode-provider](https://github.com/patlux/pi-commandcode-provider)（MIT 协议）。它注册了一个 `commandcode` provider，将请求转换为 Command Code 的 Provider API（`POST /alpha/generate`，由 pi 插件逆向工程，对应 `command-code@1.28.4`）。
 
 > 这是一个社区集成。你需要自己的 Command Code 账号、API key 或订阅，并遵守 Command Code 的服务条款。本项目与 Command Code, Inc. 无关。
 
@@ -22,7 +22,7 @@
 - **API key 解析顺序**：`config.apiKey` → 凭据引用 `apiKeyEnv`（默认 `COMMANDCODE_API_KEY`）→ 启动环境变量 → 官方 CLI 认证文件（`~/.commandcode/auth.json`，由 `command-code login` 写入）。
 - **模型选择器标注**：每个模型显示包含它的**最低套餐**（`KNOWN_PLANS`）、**活动折扣**或 `FREE` 徽章（`KNOWN_DEALS`，到期自动隐藏已失效折扣）、峰谷定价模型的**当前时段状态**（`Peak`/`Half`，按当前 UTC 小时动态判断）、Vision 模型的 **`Image`** 标记，以及**上下文长度**（`1M` / `256K` / `262K`）——例如 *"Go · 50% off · Image · 1M"*、*"Go · Half · 1M"*。列表**按套餐排序**（Go → GOAT → Pro → Provider/Max），你当前套餐能用的模型总是排在最前。
 - **按套餐过滤选择器**：选择器会**直接隐藏超出你订阅套餐的模型**（根据账户账单状态实时判断）。全程失败开放——账单接口不可用、套餐未知，或账户持有按需余额（官方 CLI 视为解锁全部模型）时都显示完整目录——服务端仍是最终闸门。在设置页关闭「隐藏套餐外模型」开关（或在 `llm-commandcode` 设置段中设 `filterModelsByPlan: false`）可始终列出全部模型。
-- **推理强度（reasoning-effort）支持**：针对官方目录标为推理模型的模型（`KNOWN_EFFORTS`，与 `command-code@1.28.1` 一致）；没有可选档位但仍支持思考的模型会自动思考，与官方 CLI 行为完全一致。
+- **推理强度（reasoning-effort）支持**：针对官方目录标为推理模型的模型（`KNOWN_EFFORTS`，与 `command-code@1.28.4` 一致）；没有可选档位但仍支持思考的模型会自动思考，与官方 CLI 行为完全一致。
 - **支持视觉模型的图片输入**（通过 dsh 附件服务、以官方 wire 格式发送）；纯文本模型会明确拒绝图片（`UNSUPPORTED_CONTENT`）而非静默丢弃。
 
 <img src="assets/screenshots/model-picker.png" alt="带套餐、折扣、图片与上下文标注的模型选择器" width="250">

package/lib/client.js

@@ -59,8 +59,15 @@ window.__ModuleLoader__.load({
 				}
 			};
 		}
-		/** A whole-number field; an empty draft clears it, anything non-numeric blocks save. */
-		function numberField$1(field) {
+		/**
+		* A numeric field; an empty draft clears it, anything non-numeric blocks
+		* save, and an optional inclusive `bounds` range rejects out-of-range values
+		* with a specific reason (the Host schema would reject them at save time with
+		* only a generic failure — catching it here names the problem while typing).
+		* Decimals pass: the Host schema is `z.number()` too, and a fractional
+		* millisecond value is harmless even if pointless.
+		*/
+		function numberField$1(field, bounds) {
 			return {
 				field,
 				format: (value) => typeof value === "number" ? String(value) : "",
@@ -68,10 +75,22 @@ window.__ModuleLoader__.load({
 					const trimmed = text.trim();
 					if (trimmed === "") return { kind: "clear" };
 					const parsed = Number(trimmed);
-					return Number.isFinite(parsed) ? {
+					if (!Number.isFinite(parsed)) return {
+						kind: "invalid",
+						reason: "format"
+					};
+					if (bounds?.min !== void 0 && parsed < bounds.min) return {
+						kind: "invalid",
+						reason: "tooSmall"
+					};
+					if (bounds?.max !== void 0 && parsed > bounds.max) return {
+						kind: "invalid",
+						reason: "tooLarge"
+					};
+					return {
 						kind: "set",
 						value: parsed
-					} : { kind: "invalid" };
+					};
 				}
 			};
 		}
@@ -95,16 +114,26 @@ window.__ModuleLoader__.load({
 						kind: "set",
 						value: false
 					};
-					return { kind: "invalid" };
+					return {
+						kind: "invalid",
+						reason: "format"
+					};
 				}
 			};
 		}
+		const MAX_TIMEOUT_MS = 2147483647;
 		/** The fields this page edits inside the `llm-commandcode` namespace. */
 		const SECTION_FIELDS = [
 			textField("apiBase"),
 			textField("workingDir"),
-			numberField$1("requestTimeoutMs"),
-			numberField$1("streamIdleTimeoutMs"),
+			numberField$1("requestTimeoutMs", {
+				min: 1,
+				max: MAX_TIMEOUT_MS
+			}),
+			numberField$1("streamIdleTimeoutMs", {
+				min: 1,
+				max: MAX_TIMEOUT_MS
+			}),
 			booleanField$1("filterModelsByPlan"),
 			textField("activeAccount")
 		];
@@ -136,6 +165,7 @@ window.__ModuleLoader__.load({
 			keyDrafts = /* @__PURE__ */ new Map();
 			saving = false;
 			failed = false;
+			savedCount = 0;
 			/**
 			* @param scope - bound scope for the `llm-commandcode` namespace.
 			* @param api - credentials wire face.
@@ -206,7 +236,8 @@ window.__ModuleLoader__.load({
 						text: this.staged.get("apiKey")?.text ?? "",
 						clear: false,
 						overridden: false,
-						invalid: false
+						invalid: false,
+						invalidReason: void 0
 					},
 					apiBase: this.field("apiBase"),
 					workingDir: this.field("workingDir"),
@@ -216,10 +247,12 @@ window.__ModuleLoader__.load({
 					filterModelsByPlan: this.field("filterModelsByPlan"),
 					activeAccount: this.field("activeAccount"),
 					accounts,
+					accountsRemoving: [...this.removedRefs],
 					dirty: plan.length > 0 || this.accountsDirty(),
 					invalid: plan.some((item) => item.run === void 0),
 					saving: this.saving,
-					failed: this.failed
+					failed: this.failed,
+					savedCount: this.savedCount
 				};
 			}
 			/** Stage a new extra account (saved on the next `save()`). */
@@ -321,6 +354,7 @@ window.__ModuleLoader__.load({
 				this.saving = false;
 				this.failed = !landed;
 				if (landed) {
+					this.savedCount += 1;
 					this.staged.clear();
 					this.clearAccountStaging();
 				} else this.reconcileAccountStaging();
@@ -355,14 +389,16 @@ window.__ModuleLoader__.load({
 					text: spec.format(this.sectionValue(field)),
 					clear: false,
 					overridden: this.stored(field),
-					invalid: false
+					invalid: false,
+					invalidReason: void 0
 				};
 				const parsed = staged.clear ? { kind: "clear" } : spec.parse(staged.text);
 				return {
 					text: staged.text,
 					clear: staged.clear,
 					overridden: parsed.kind === "set",
-					invalid: parsed.kind === "invalid"
+					invalid: parsed.kind === "invalid",
+					invalidReason: parsed.kind === "invalid" ? parsed.reason : void 0
 				};
 			}
 			sectionValue(field) {
@@ -808,6 +844,21 @@ window.__ModuleLoader__.load({
 			}]
 		};
 		//#endregion
+		//#region src/client/version.ts
+		/**
+		* The plugin's own version, read from package.json at build time.
+		*
+		* The client bundle inlines the JSON import (rolldown resolves it during the
+		* tsdown build; node tests read it through tsx), so the rendered value always
+		* matches the published package version with no second constant to keep in
+		* sync. Rendered as a muted footer line on the settings page so a user can
+		* report the exact build they run.
+		*
+		* @module dsh-commandcode-provider/client/version
+		*/
+		/** The published package version (e.g. `'0.6.0'`). */
+		const PLUGIN_VERSION = "0.6.1";
+		//#endregion
 		//#region src/client/section.tsx
 		/**
 		* React component for the "Command Code" settings page (browser half).
@@ -860,11 +911,17 @@ window.__ModuleLoader__.load({
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						className: state.invalid ? "cc-invalid" : "cc-hint",
-						children: state.invalid ? t("invalidNumber") : hint
+						children: state.invalid ? invalidCopy(state.invalidReason, t) : hint
 					})
 				]
 			});
 		}
+		/** The per-field error copy for a staged draft's failure reason. */
+		function invalidCopy(reason, t) {
+			if (reason === "tooSmall") return t("numberTooSmall");
+			if (reason === "tooLarge") return t("numberTooLarge");
+			return t("invalidNumber");
+		}
 		/**
 		* One boolean field row rendered as a toggle. The staged text is `'true'` /
 		* `'false'` / `''` (unset → `defaultChecked`); toggling stages the string the
@@ -910,8 +967,13 @@ window.__ModuleLoader__.load({
 				})]
 			});
 		}
-		/** The API-key control: write-only, reports configured state, never echoes the key. */
-		function SecretKeyField({ label, hint, state, disabled, configured, configuredLabel, unconfiguredLabel, onEdit }) {
+		/**
+		* The API-key control: write-only, reports configured state, never echoes the
+		* key. The input is masked by default with a Show/Hide toggle so a pasted key
+		* can be spot-checked without leaving the field.
+		*/
+		function SecretKeyField({ label, hint, state, disabled, configured, configuredLabel, unconfiguredLabel, showLabel, hideLabel, onEdit }) {
+			const [visible, setVisible] = (0, react.useState)(false);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "cc-field",
 				children: [
@@ -921,19 +983,26 @@ window.__ModuleLoader__.load({
 							className: "cc-label",
 							htmlFor: "cc-api-key",
 							children: label
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
 							className: "cc-badges",
-							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 								className: configured ? "cc-badge" : "cc-badgeMuted",
 								children: configured ? configuredLabel : unconfiguredLabel
-							})
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "cc-reset",
+								disabled,
+								onClick: () => setVisible((value) => !value),
+								children: visible ? hideLabel : showLabel
+							})]
 						})]
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 						id: "cc-api-key",
 						className: "cc-input",
-						type: "password",
+						type: visible ? "text" : "password",
 						autoComplete: "off",
+						spellCheck: false,
 						value: state.text,
 						disabled,
 						onChange: (event) => onEdit(event.target.value)
@@ -1039,7 +1108,7 @@ window.__ModuleLoader__.load({
 		* One pool account's facts (identity, totals, credits, window limits)
 		* rendered inside the account-usage card.
 		*/
-		function AccountReport({ entry, t }) {
+		function AccountReport({ entry, t, onRemove }) {
 			const report = entry.report;
 			const account = report.account;
 			const accountName = account === void 0 ? "" : account.userName || account.name;
@@ -1072,6 +1141,13 @@ window.__ModuleLoader__.load({
 							planStatus !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 								className: "cc-usagePlanStatus",
 								children: planStatus
+							}) : null,
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "cc-usageMetaSpacer" }),
+							onRemove !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "cc-usageRefresh",
+								onClick: onRemove,
+								children: t("accountRemove")
 							}) : null
 						]
 					}),
@@ -1161,13 +1237,21 @@ window.__ModuleLoader__.load({
 				]
 			});
 		}
+		/** The status dot on an account tab: cooling/invalid warn, everything else ok. */
+		function AccountTabDot({ entry }) {
+			const cls = entry.mark === "invalid-credential" ? "cc-tabDot cc-tabDotError" : entry.mark !== "" || entry.cooldownUntil > 0 ? "cc-tabDot cc-tabDotWarn" : "cc-tabDot cc-tabDotOk";
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: cls });
+		}
 		/**
 		* The account-usage card: the `/commandcode` dashboard's facts rendered as
-		* a native settings card — one section per pool account. Data arrives
-		* through the `commandcode/report` Remote; the API keys never leave the
-		* Host.
+		* a native settings card. With several accounts the card is a carousel — a
+		* tab strip (label + status dot) switches between accounts so the page stays
+		* short; each account's report carries its own remove affordance (the
+		* default account is not removable). Accounts staged for removal in the
+		* management card are hidden here immediately. Data arrives through the
+		* `commandcode/report` Remote; the API keys never leave the Host.
 		*/
-		function UsageCard({ t, usage, apiKeyConfigured, onRefresh }) {
+		function UsageCard({ t, usage, apiKeyConfigured, removingIds, removableIds, canManage, onRefresh, onRemoveAccount }) {
 			(0, react.useEffect)(() => {
 				if (apiKeyConfigured && usage.status === "idle") onRefresh();
 			}, [
@@ -1177,6 +1261,25 @@ window.__ModuleLoader__.load({
 			]);
 			const loading = usage.status === "loading";
 			const report = usage.report;
+			const [locallyRemoved, setLocallyRemoved] = (0, react.useState)([]);
+			(0, react.useEffect)(() => {
+				setLocallyRemoved([]);
+			}, [usage.fetchedAt]);
+			const hidden = /* @__PURE__ */ new Set([...removingIds, ...locallyRemoved]);
+			const seenIds = /* @__PURE__ */ new Set();
+			const entries = (report?.accounts ?? []).filter((entry) => {
+				if (hidden.has(entry.id)) return false;
+				if (seenIds.has(entry.id)) return false;
+				seenIds.add(entry.id);
+				return true;
+			});
+			const [selectedId, setSelectedId] = (0, react.useState)(void 0);
+			const selected = entries.find((entry) => entry.id === selectedId) ?? entries.find((entry) => entry.active) ?? entries[0];
+			const removeSelected = canManage && selected !== void 0 && removableIds.includes(selected.id) ? () => {
+				const id = selected.id;
+				setLocallyRemoved((prev) => [...prev, id]);
+				onRemoveAccount(id);
+			} : void 0;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "cc-usageCard",
 				"aria-label": t("usageTitle"),
@@ -1211,10 +1314,24 @@ window.__ModuleLoader__.load({
 						role: "status",
 						children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [t("usageError"), usage.error !== void 0 && usage.error !== "" ? ` — ${usage.error}` : ""] })
 					}) : null,
-					report?.accounts.map((entry) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountReport, {
-						entry,
-						t
-					}, entry.id)),
+					entries.length > 1 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "cc-tabs",
+						role: "tablist",
+						"aria-label": t("accountsTitle"),
+						children: entries.map((entry) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+							type: "button",
+							role: "tab",
+							"aria-selected": selected?.id === entry.id,
+							className: selected?.id === entry.id ? "cc-tab cc-tabActive" : "cc-tab",
+							onClick: () => setSelectedId(entry.id),
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountTabDot, { entry }), entry.label]
+						}, entry.id))
+					}) : null,
+					selected !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountReport, {
+						entry: selected,
+						t,
+						onRemove: removeSelected
+					}, selected.id) : null,
 					report !== void 0 && usage.fetchedAt !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: "cc-usageMeta",
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "cc-usageMetaSpacer" }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
@@ -1229,9 +1346,16 @@ window.__ModuleLoader__.load({
 				]
 			});
 		}
-		/** One extra account row: label, key, configured badge, remove affordance. */
+		/**
+		* One extra account row: label, key, configured badge. Saved accounts are
+		* removed from the usage card above; a NOT-YET-SAVED addition never appears
+		* there (the usage report is Host-side), so it keeps its own remove button —
+		* otherwise the only way to undo a mistaken Add would be discarding every
+		* other staged edit.
+		*/
 		function AccountRow({ account, disabled, t, onLabel, onKey, onRemove }) {
 			const locked = !account.writable;
+			const [keyVisible, setKeyVisible] = (0, react.useState)(false);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "cc-field",
 				children: [
@@ -1253,12 +1377,19 @@ window.__ModuleLoader__.load({
 									children: account.configured ? t("apiKeySet") : t("apiKeyUnset")
 								}),
 								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									className: "cc-reset",
+									disabled,
+									onClick: () => setKeyVisible((value) => !value),
+									children: keyVisible ? t("hide") : t("show")
+								}),
+								account.added ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 									type: "button",
 									className: "cc-reset",
 									disabled,
 									onClick: onRemove,
 									children: t("accountRemove")
-								})
+								}) : null
 							]
 						})]
 					}),
@@ -1273,8 +1404,9 @@ window.__ModuleLoader__.load({
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 						id: `cc-account-key-${account.id}`,
 						className: "cc-input",
-						type: "password",
+						type: keyVisible ? "text" : "password",
 						autoComplete: "off",
+						spellCheck: false,
 						placeholder: t("accountKey"),
 						value: account.keyText,
 						disabled: disabled || locked,
@@ -1287,7 +1419,7 @@ window.__ModuleLoader__.load({
 				]
 			});
 		}
-		/** The multi-account card: extra accounts in rotation order + add button. */
+		/** The multi-account card: the active-account selector + extra accounts in rotation order + add button. */
 		function AccountsCard({ t, state, disabled, onAdd, onRemove, onLabel, onKey, onActive, onActiveReset }) {
 			const active = state.activeAccount;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
@@ -1377,6 +1509,21 @@ window.__ModuleLoader__.load({
 				]
 			});
 		}
+		/**
+		* Show the "Saved ✓" affordance for a short window after each accepted save.
+		* The controller only counts saves (`savedCount`); the flash timing lives
+		* here so the state machine stays timer-free.
+		*/
+		function useSavedFlash(tick) {
+			const [visible, setVisible] = (0, react.useState)(false);
+			(0, react.useEffect)(() => {
+				if (tick === 0) return;
+				setVisible(true);
+				const timer = setTimeout(() => setVisible(false), 2500);
+				return () => clearTimeout(timer);
+			}, [tick]);
+			return visible;
+		}
 		/** The settings page body: connection facts for the Command Code provider. */
 		function CommandCodeSettingsPage(props) {
 			const { t } = props;
@@ -1384,6 +1531,7 @@ window.__ModuleLoader__.load({
 			const usage = props.useCommandCodeUsage((snapshot) => snapshot);
 			const disabled = !state.writable;
 			const keyLocked = !state.apiKeyWritable;
+			const savedVisible = useSavedFlash(state.savedCount);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 				className: "cc-section",
 				"aria-label": t("title"),
@@ -1405,7 +1553,11 @@ window.__ModuleLoader__.load({
 						t,
 						usage,
 						apiKeyConfigured: state.anyAccountConfigured,
-						onRefresh: props.refreshUsage
+						removingIds: state.accountsRemoving,
+						removableIds: state.accounts.map((account) => account.id),
+						canManage: state.writable,
+						onRefresh: props.refreshUsage,
+						onRemoveAccount: props.removeAccount
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountsCard, {
 						t,
@@ -1429,6 +1581,8 @@ window.__ModuleLoader__.load({
 								configured: state.apiKeyConfigured,
 								configuredLabel: t("apiKeySet"),
 								unconfiguredLabel: t("apiKeyUnset"),
+								showLabel: t("show"),
+								hideLabel: t("hide"),
 								onEdit: (text) => props.edit("apiKey", text)
 							}),
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Field, {
@@ -1495,6 +1649,11 @@ window.__ModuleLoader__.load({
 								role: "status",
 								children: t("saveFailed")
 							}) : null,
+							savedVisible ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "cc-saved",
+								role: "status",
+								children: t("saved")
+							}) : null,
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
 								variant: "ghost",
 								size: "sm",
@@ -1510,6 +1669,10 @@ window.__ModuleLoader__.load({
 								children: t(state.saving ? "saving" : "save")
 							})
 						]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+						className: "cc-version",
+						children: ["Command Code Provider v", PLUGIN_VERSION]
 					})
 				]
 			});
@@ -1549,13 +1712,18 @@ window.__ModuleLoader__.load({
 			overridden: "已覆盖",
 			reset: "重置",
 			invalidNumber: "无效数字",
+			numberTooSmall: "不能小于 1（毫秒）",
+			numberTooLarge: "超出允许上限（2147483647 毫秒）",
 			readOnly: "当前配置为只读。",
 			unsaved: "未保存",
 			save: "保存",
 			saving: "保存中",
+			saved: "已保存 ✓",
 			saveFailed: "保存失败，请重试。",
 			discard: "放弃",
 			cancel: "取消",
+			show: "显示",
+			hide: "隐藏",
 			usageTitle: "账户用量",
 			usageRefresh: "刷新",
 			usageRefreshing: "刷新中…",
@@ -1617,13 +1785,18 @@ window.__ModuleLoader__.load({
 			overridden: "Overridden",
 			reset: "Reset",
 			invalidNumber: "Invalid number",
+			numberTooSmall: "Must be at least 1 (ms)",
+			numberTooLarge: "Above the allowed maximum (2147483647 ms)",
 			readOnly: "Settings are read-only.",
 			unsaved: "Unsaved",
 			save: "Save",
 			saving: "Saving",
+			saved: "Saved ✓",
 			saveFailed: "Save failed, please retry.",
 			discard: "Discard",
 			cancel: "Cancel",
+			show: "Show",
+			hide: "Hide",
 			usageTitle: "Account usage",
 			usageRefresh: "Refresh",
 			usageRefreshing: "Refreshing…",
@@ -1713,11 +1886,19 @@ window.__ModuleLoader__.load({
 .cc-usageBarFillWarn{background:var(--dsw-alias-label-error)}
 .cc-usageWindowReset{color:var(--dsw-alias-label-tertiary);margin:0;font-size:11px;line-height:1.5}
 .cc-usageMeta{align-items:center;gap:8px;display:flex}
-.cc-accountReport{border-top:1px solid var(--dsw-alias-border-l2);padding-top:12px;flex-direction:column;gap:12px;display:flex}
-.cc-accountReport:first-of-type{border-top:none;padding-top:0}
+.cc-accountReport{flex-direction:column;gap:12px;display:flex}
+.cc-tabs{flex-wrap:wrap;gap:6px;display:flex}
+.cc-tab{align-items:center;font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:var(--dsw-alias-bg-layer-1);border:1px solid var(--dsw-alias-border-l2);border-radius:999px;padding:2px 10px;font-size:12px;line-height:18px;display:inline-flex;gap:6px}
+.cc-tab:hover:not(.cc-tabActive){color:var(--dsw-alias-label-primary)}
+.cc-tabActive{color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-brand-primary)}
+.cc-tabDotOk{background:var(--dsw-alias-brand-primary);border-radius:50%;width:6px;height:6px}
+.cc-tabDotWarn{background:#d97706;border-radius:50%;width:6px;height:6px}
+.cc-tabDotError{background:var(--dsw-alias-label-error);border-radius:50%;width:6px;height:6px}
 .cc-usageMetaSpacer{flex:1}
 .cc-usageUpdated{color:var(--dsw-alias-label-tertiary);margin:0;font-size:11px;line-height:1.5}
 .cc-usagePartial{color:var(--dsw-alias-label-error);margin:0;font-size:11px;line-height:1.5}
+.cc-version{margin:4px 0 0;text-align:center;color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:1.5}
+.cc-saved{color:var(--dsw-alias-state-success-primary,var(--dsw-alias-label-secondary));margin:0;font-size:12px;font-weight:500;line-height:1.5}
 `;
 		/** Inject the page stylesheet once (idempotent per tag). */
 		function injectPageCss() {