dsh-codex-connect 0.1.0-alpha.4.21 → 0.1.0-alpha.4.23

package/lib/client.js

@@ -36,10 +36,35 @@ window.__ModuleLoader__.load({
 		function isValidOpenAICodexProxyUrl(value) {
 			return normalizeOpenAICodexProxyUrl(value) !== void 0;
 		}
+		/**
+		* Whether a value is a bounded per-model context-window override map. Keys
+		* are nonempty, unpadded model ids; values are positive safe integers or null
+		* to restore that model's catalog default. The Host also checks catalog
+		* membership and the model-specific configuration ceiling.
+		*/
+		function isValidOpenAICodexContextWindowOverrides(value) {
+			if (!isRecord$2(value)) return false;
+			const entries = Object.entries(value);
+			if (entries.length > 256) return false;
+			return entries.every(([modelId, window]) => modelId.length > 0 && modelId.trim() === modelId && (window === null || typeof window === "number" && Number.isSafeInteger(window) && window > 0));
+		}
+		/** Preserve per-model null masks until the Host has merged its settings layers. */
+		function parseOpenAICodexContextWindowOverrides(value) {
+			if (value === void 0 || value === null) return void 0;
+			if (!isValidOpenAICodexContextWindowOverrides(value)) throw new TypeError("OpenAI Codex contextWindowOverrides must contain at most 256 nonempty model ids with positive safe-integer token budgets or null resets");
+			return { ...value };
+		}
+		/** Resolve merged settings; whole-map or per-model null masks use catalog defaults. */
+		function resolveOpenAICodexContextWindowOverrides(value) {
+			const overrides = parseOpenAICodexContextWindowOverrides(value);
+			if (overrides === void 0) return void 0;
+			return Object.fromEntries(Object.entries(overrides).filter((entry) => entry[1] !== null));
+		}
 		Object.freeze({
 			models: void 0,
 			enableProxy: false,
 			proxyUrl: DEFAULT_OPENAI_CODEX_PROXY_URL,
+			contextWindowOverrides: void 0,
 			enableSearch: false,
 			enableImageTool: false,
 			enableImageGeneration: false,
@@ -57,6 +82,7 @@ window.__ModuleLoader__.load({
 			const models = value["models"];
 			const enableProxy = value["enableProxy"];
 			const proxyUrl = value["proxyUrl"];
+			const contextWindowOverrides = value["contextWindowOverrides"];
 			const enableSearch = value["enableSearch"];
 			const enableImageTool = value["enableImageTool"];
 			const enableImageGeneration = value["enableImageGeneration"];
@@ -67,16 +93,19 @@ window.__ModuleLoader__.load({
 			if (models !== void 0 && (!Array.isArray(models) || models.some((model) => typeof model !== "string"))) return void 0;
 			if (enableProxy !== void 0 && typeof enableProxy !== "boolean") return void 0;
 			if (proxyUrl !== void 0 && (typeof proxyUrl !== "string" || !isValidOpenAICodexProxyUrl(proxyUrl))) return void 0;
+			if (contextWindowOverrides !== void 0 && contextWindowOverrides !== null && !isValidOpenAICodexContextWindowOverrides(contextWindowOverrides)) return void 0;
 			if (typeof enableSearch !== "boolean" || typeof enableImageTool !== "boolean") return void 0;
 			if (enableImageGeneration !== void 0 && typeof enableImageGeneration !== "boolean") return void 0;
 			if (typeof searchModel !== "string" || searchModel.trim().length === 0) return void 0;
 			if (searchMode !== "cached" && searchMode !== "indexed" && searchMode !== "live") return void 0;
 			if (searchContextSize !== "low" && searchContextSize !== "medium" && searchContextSize !== "high") return void 0;
 			if (typeof searchMaxOutputTokens !== "number" || !Number.isInteger(searchMaxOutputTokens) || searchMaxOutputTokens < 1) return void 0;
+			const overrides = resolveOpenAICodexContextWindowOverrides(contextWindowOverrides);
 			return {
 				models: models === void 0 ? void 0 : [...new Set(models)],
 				enableProxy: enableProxy ?? false,
 				proxyUrl: proxyUrl === void 0 ? DEFAULT_OPENAI_CODEX_PROXY_URL : normalizeOpenAICodexProxyUrl(proxyUrl),
+				contextWindowOverrides: overrides === void 0 ? void 0 : Object.freeze(overrides),
 				enableSearch,
 				enableImageTool,
 				enableImageGeneration: enableImageGeneration ?? false,
@@ -95,11 +124,202 @@ window.__ModuleLoader__.load({
 		const OPENAI_CODEX_AUTH_LOGIN_PATH = "/plugins/dsh-openai-codex/auth/login";
 		/** Plugin-owned logout endpoint consumed by its browser half. */
 		const OPENAI_CODEX_AUTH_LOGOUT_PATH = "/plugins/dsh-openai-codex/auth/logout";
+		/** Cancel only the pending authorization; never delete a stored credential. */
+		const OPENAI_CODEX_AUTH_CANCEL_PATH = "/plugins/dsh-openai-codex/auth/cancel";
+		//#endregion
+		//#region src/client/account-store.ts
+		var AccountRequestError = class extends Error {};
+		async function request(path, method = "GET", signal) {
+			const response = await fetch(path, {
+				method,
+				headers: { accept: "application/json" },
+				credentials: "same-origin",
+				...signal === void 0 ? {} : { signal }
+			});
+			const value = await response.json().catch(() => void 0);
+			if (!response.ok) throw new AccountRequestError(typeof value === "object" && value !== null && "error" in value && typeof value.error === "string" ? value.error : `HTTP ${response.status}`);
+			return value;
+		}
+		/** One account state per browser-plugin instance; subscribers share requests and timers. */
+		var OpenAICodexAccountStore = class {
+			snapshot = {
+				status: { status: "loading" },
+				busy: false
+			};
+			listeners = /* @__PURE__ */ new Set();
+			controller;
+			timer;
+			disposed = false;
+			popup = null;
+			getSnapshot = () => this.snapshot;
+			subscribe = (listener) => {
+				if (this.disposed) return () => {};
+				this.listeners.add(listener);
+				if (this.listeners.size === 1) this.refresh();
+				return () => {
+					this.listeners.delete(listener);
+					if (this.listeners.size === 0) this.stopPolling();
+				};
+			};
+			publish(snapshot) {
+				if (this.disposed) return;
+				this.snapshot = snapshot;
+				for (const listener of this.listeners) listener();
+			}
+			failure(error) {
+				return error instanceof AccountRequestError && error.message === "remote-web-origin-not-trusted" ? { status: "remote-web-origin-not-trusted" } : {
+					status: "error",
+					message: error instanceof Error ? error.message : "Account request failed"
+				};
+			}
+			stopPolling() {
+				clearTimeout(this.timer);
+				this.timer = void 0;
+				this.controller?.abort();
+				this.controller = void 0;
+			}
+			schedule() {
+				clearTimeout(this.timer);
+				const interval = this.snapshot.status.status === "signing-in" ? 1e3 : this.snapshot.status.status === "signed-in" ? 6e4 : void 0;
+				if (!this.disposed && this.listeners.size > 0 && interval !== void 0) this.timer = setTimeout(() => {
+					this.refresh();
+				}, interval);
+			}
+			/** Refresh only while observed, without overlapping status reads or OAuth mutations. */
+			async refresh() {
+				if (this.disposed || this.snapshot.busy || this.controller !== void 0 || this.listeners.size === 0) return;
+				const controller = new AbortController();
+				this.controller = controller;
+				try {
+					const status = await request(OPENAI_CODEX_AUTH_STATUS_PATH, "GET", controller.signal);
+					if (!controller.signal.aborted) this.publish({
+						status,
+						busy: false,
+						...status.status === "signing-in" && this.snapshot.loginUrl !== void 0 ? { loginUrl: this.snapshot.loginUrl } : {}
+					});
+				} catch (error) {
+					if (!controller.signal.aborted) this.publish({
+						status: this.failure(error),
+						busy: false
+					});
+				} finally {
+					if (this.controller === controller) {
+						this.controller = void 0;
+						this.schedule();
+					}
+				}
+			}
+			/** Start or reopen the server-owned authorization from a user click, retaining popup permission. */
+			async signIn() {
+				if (this.disposed || this.snapshot.busy) return;
+				this.stopPolling();
+				const popup = window.open("about:blank", "_blank");
+				this.popup = popup;
+				if (popup !== null) popup.opener = null;
+				this.publish({
+					status: { status: "signing-in" },
+					busy: true
+				});
+				try {
+					const challenge = await request(OPENAI_CODEX_AUTH_LOGIN_PATH, "POST");
+					if (this.disposed) {
+						popup?.close();
+						return;
+					}
+					if (popup !== null) popup.location.replace(challenge.url);
+					this.publish({
+						status: { status: "signing-in" },
+						busy: false,
+						loginUrl: challenge.url
+					});
+				} catch (error) {
+					popup?.close();
+					this.publish({
+						status: this.failure(error),
+						busy: false
+					});
+					if (error instanceof AccountRequestError && error.message === "OpenAI Codex sign-in cancelled") await this.refresh();
+				} finally {
+					if (this.popup === popup) this.popup = null;
+					this.schedule();
+				}
+			}
+			/** Cancel only the pending authorization, preserving an already signed-in account. */
+			async cancel() {
+				if (this.disposed || this.snapshot.busy) return;
+				this.stopPolling();
+				this.publish({
+					status: this.snapshot.status,
+					busy: true
+				});
+				try {
+					const status = await request(OPENAI_CODEX_AUTH_CANCEL_PATH, "POST");
+					this.publish({
+						status,
+						busy: false
+					});
+				} catch (error) {
+					this.publish({
+						status: this.failure(error),
+						busy: false
+					});
+				} finally {
+					this.schedule();
+				}
+			}
+			/** Sign out once for all mounted account views and invalidate older status reads. */
+			async signOut() {
+				if (this.disposed || this.snapshot.busy) return;
+				this.stopPolling();
+				this.publish({
+					status: this.snapshot.status,
+					busy: true
+				});
+				try {
+					await request(OPENAI_CODEX_AUTH_LOGOUT_PATH, "POST");
+					this.publish({
+						status: { status: "signed-out" },
+						busy: false
+					});
+				} catch (error) {
+					this.publish({
+						status: this.failure(error),
+						busy: false
+					});
+				}
+			}
+			/** Stop local observation on plugin unload; do not log out the server account. */
+			dispose() {
+				this.disposed = true;
+				this.stopPolling();
+				this.popup?.close();
+				this.popup = null;
+				this.listeners.clear();
+				this.snapshot = {
+					status: { status: "loading" },
+					busy: false
+				};
+			}
+		};
 		//#endregion
 		//#region src/model-contract.ts
 		/** Node-free model catalog contract shared by the Host route and browser card. */
 		/** Same-origin endpoint exposing the complete Codex model catalog. */
 		const OPENAI_CODEX_MODEL_CATALOG_PATH = "/plugins/dsh-codex-connect/models";
+		/** Versioned official-client override policy, not a measured endpoint capacity. */
+		const OPENAI_CODEX_CONTEXT_LIMIT_SOURCE = "https://github.com/openai/codex/blob/7625343977154efed8c0dadba956374992a1580b/codex-rs/models-manager/models.json";
+		Object.freeze({
+			"gpt-5.6-sol": 872e3,
+			"gpt-5.6-terra": 872e3,
+			"gpt-5.6-luna": 872e3,
+			"gpt-5.4": 1e6,
+			"gpt-5.5": 272e3,
+			"gpt-5.4-mini": 272e3
+		});
+		/** Whether a proposed local token budget fits the model's configuration range. */
+		function isValidOpenAICodexContextBudget(value, maximum) {
+			return Number.isSafeInteger(value) && value > 0 && value <= maximum;
+		}
 		/** Validate the model catalog before it enters React state. */
 		function decodeOpenAICodexModelCatalog(value) {
 			if (!Array.isArray(value)) return void 0;
@@ -110,11 +330,18 @@ window.__ModuleLoader__.load({
 				const record = entry;
 				const id = record["id"];
 				const name = record["name"];
+				const contextWindow = record["contextWindow"];
+				const maxContextWindow = record["maxContextWindow"];
+				const contextLimitSource = record["contextLimitSource"];
 				if (typeof id !== "string" || id.length === 0 || typeof name !== "string" || name.length === 0 || ids.has(id)) return void 0;
+				if (typeof contextWindow !== "number" || typeof maxContextWindow !== "number" || !isValidOpenAICodexContextBudget(maxContextWindow, Number.MAX_SAFE_INTEGER) || !isValidOpenAICodexContextBudget(contextWindow, maxContextWindow) || contextLimitSource !== "codex-catalog" && contextLimitSource !== "catalog-default") return void 0;
 				ids.add(id);
 				catalog.push({
 					id,
-					name
+					name,
+					contextWindow,
+					maxContextWindow,
+					contextLimitSource
 				});
 			}
 			return catalog;
@@ -158,8 +385,8 @@ window.__ModuleLoader__.load({
 			border: 0
 		};
 		const modelListStyle = {
-			display: "grid",
-			gridTemplateColumns: "repeat(auto-fit, minmax(210px, 1fr))",
+			display: "flex",
+			flexDirection: "column",
 			gap: 10
 		};
 		const modelRowStyle = {
@@ -226,7 +453,7 @@ window.__ModuleLoader__.load({
 			display: "flex",
 			gap: 8
 		};
-		const buttonStyle$2 = {
+		const buttonStyle$3 = {
 			boxSizing: "border-box",
 			minHeight: 34,
 			padding: "6px 14px",
@@ -239,10 +466,10 @@ window.__ModuleLoader__.load({
 			cursor: "pointer"
 		};
 		const primaryButtonStyle$2 = {
-			...buttonStyle$2,
-			borderColor: "var(--dsw-alias-brand-primary)",
-			background: "var(--dsw-alias-brand-primary)",
-			color: "white"
+			...buttonStyle$3,
+			borderColor: "var(--dsw-alias-button-primary-fill)",
+			background: "var(--dsw-alias-button-primary-fill)",
+			color: "var(--dsw-alias-label-primary-foreground)"
 		};
 		const errorStyle$2 = {
 			...bodyStyle$2,
@@ -263,6 +490,7 @@ window.__ModuleLoader__.load({
 		};
 		const CONFIG_FIELDS = [
 			"models",
+			"contextWindowOverrides",
 			"enableProxy",
 			"proxyUrl",
 			"enableSearch",
@@ -274,6 +502,11 @@ window.__ModuleLoader__.load({
 			"searchMaxOutputTokens"
 		];
 		function sameField(field, left, right) {
+			if (field === "contextWindowOverrides") {
+				const leftMap = left;
+				const rightMap = right;
+				return Object.keys(leftMap ?? {}).length === Object.keys(rightMap ?? {}).length && Object.entries(leftMap ?? {}).every(([id, value]) => rightMap?.[id] === value);
+			}
 			if (field !== "models") return left === right;
 			if (left === void 0 || right === void 0) return left === right;
 			return Array.isArray(left) && Array.isArray(right) && left.length === right.length && left.every((model, index) => model === right[index]);
@@ -292,6 +525,7 @@ window.__ModuleLoader__.load({
 			const [feedback, setFeedback] = (0, react.useState)("idle");
 			const [modelCatalog, setModelCatalog] = (0, react.useState)();
 			const [modelCatalogError, setModelCatalogError] = (0, react.useState)(false);
+			const [expandedModels, setExpandedModels] = (0, react.useState)({});
 			const [proxyDetection, setProxyDetection] = (0, react.useState)({ status: "idle" });
 			const [manualProxy, setManualProxy] = (0, react.useState)(false);
 			const [manualProbe, setManualProbe] = (0, react.useState)();
@@ -403,7 +637,11 @@ window.__ModuleLoader__.load({
 			const validModel = draft !== void 0 && draft.searchModel.trim().length > 0;
 			const validTokens = draft !== void 0 && Number.isInteger(draft.searchMaxOutputTokens) && draft.searchMaxOutputTokens > 0;
 			const validProxy = draft !== void 0 && isValidOpenAICodexProxyUrl(draft.proxyUrl);
-			const valid = validModel && validTokens && validProxy;
+			const validContexts = draft !== void 0 && isValidOpenAICodexContextWindowOverrides(draft.contextWindowOverrides ?? {}) && Object.entries(draft.contextWindowOverrides ?? {}).every(([id, budget]) => {
+				const model = modelCatalog?.find((entry) => entry.id === id);
+				return model !== void 0 && isValidOpenAICodexContextBudget(budget, model.maxContextWindow);
+			});
+			const valid = validModel && validTokens && validProxy && validContexts;
 			const save = async () => {
 				if (scope === void 0 || draft === void 0 || !snapshot.writable || !valid) return;
 				const desired = {
@@ -416,7 +654,11 @@ window.__ModuleLoader__.load({
 					for (const field of CONFIG_FIELDS) {
 						const accepted = scope.getSnapshot().value;
 						if (accepted !== void 0 && sameField(field, accepted[field], desired[field])) continue;
-						await scope.set(field, desired[field]);
+						const value = field === "contextWindowOverrides" ? {
+							...Object.fromEntries((modelCatalog ?? []).map((model) => [model.id, null])),
+							...desired.contextWindowOverrides
+						} : desired[field];
+						await scope.set(field, value);
 						const committed = scope.getSnapshot().value;
 						if (committed === void 0 || !sameField(field, committed[field], desired[field])) throw new Error(`Host refused ${field}`);
 					}
@@ -485,28 +727,230 @@ window.__ModuleLoader__.load({
 								"aria-label": t("modelCatalog"),
 								children: modelCatalog.map((model) => {
 									const selected = draft.models === void 0 || draft.models.includes(model.id);
-									return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
-										style: modelRowStyle,
-										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-											type: "checkbox",
-											checked: selected,
-											onChange: (event) => {
-												const visible = new Set(draft.models ?? modelCatalog.map((entry) => entry.id));
-												if (event.currentTarget.checked) visible.add(model.id);
-												else visible.delete(model.id);
-												update("models", modelCatalog.filter((entry) => visible.has(entry.id)).map((entry) => entry.id));
-											}
-										}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: model.name }), model.name === model.id ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-											style: modelIdStyle,
+									const budget = draft.contextWindowOverrides?.[model.id];
+									const invalidBudget = budget !== void 0 && !isValidOpenAICodexContextBudget(budget, model.maxContextWindow);
+									const effectiveBudget = budget ?? model.contextWindow;
+									const changeBudget = (value) => {
+										update("contextWindowOverrides", {
+											...draft.contextWindowOverrides,
+											[model.id]: value
+										});
+									};
+									return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+										role: "group",
+										"aria-label": model.name,
+										style: {
+											minWidth: 0,
+											padding: "10px 0",
+											borderBottom: "1px solid var(--dsw-alias-border-l2)"
+										},
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+											style: {
+												display: "flex",
+												alignItems: "center",
+												justifyContent: "space-between",
+												flexWrap: "wrap",
+												gap: 8
+											},
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+												style: {
+													...modelRowStyle,
+													minWidth: 0,
+													overflowWrap: "anywhere"
+												},
+												children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+													type: "checkbox",
+													checked: selected,
+													onChange: (event) => {
+														const visible = new Set(draft.models ?? modelCatalog.map((entry) => entry.id));
+														if (event.currentTarget.checked) visible.add(model.id);
+														else visible.delete(model.id);
+														update("models", modelCatalog.filter((entry) => visible.has(entry.id)).map((entry) => entry.id));
+													}
+												}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: model.name }), model.name === model.id ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+													style: modelIdStyle,
+													children: [
+														" (",
+														model.id,
+														")"
+													]
+												})] })]
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+												style: {
+													...buttonsStyle,
+													alignItems: "center",
+													flexWrap: "wrap"
+												},
+												children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+													style: bodyStyle$2,
+													children: [
+														t("modelContext"),
+														": ",
+														invalidBudget ? t("contextCustom") : `${effectiveBudget.toLocaleString()} tokens${budget === void 0 ? ` · ${t("contextDefault")}` : ""}`
+													]
+												}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+													type: "button",
+													style: buttonStyle$3,
+													"aria-expanded": expandedModels[model.id] === true,
+													onClick: () => {
+														setExpandedModels((current) => ({
+															...current,
+															[model.id]: !current[model.id]
+														}));
+													},
+													children: expandedModels[model.id] === true ? t("contextHide") : t("contextAdjust")
+												})]
+											})]
+										}), expandedModels[model.id] === true ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+											role: "group",
+											"aria-label": t("contextTokens"),
+											style: {
+												display: "flex",
+												flexDirection: "column",
+												gap: 8,
+												marginTop: 12
+											},
 											children: [
-												" (",
-												model.id,
-												")"
+												/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+													style: {
+														display: "flex",
+														alignItems: "center",
+														justifyContent: "space-between",
+														gap: 12
+													},
+													children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+														style: labelStyle,
+														children: t("contextTokens")
+													}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+														type: "number",
+														min: 1,
+														step: 1,
+														max: model.maxContextWindow,
+														style: {
+															...controlStyle,
+															width: 112,
+															flexShrink: 0,
+															textAlign: "right",
+															fontVariantNumeric: "tabular-nums"
+														},
+														value: Number.isNaN(effectiveBudget) ? "" : effectiveBudget,
+														"aria-invalid": invalidBudget,
+														onChange: (event) => {
+															changeBudget(event.currentTarget.valueAsNumber);
+														}
+													})]
+												}),
+												/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+													style: {
+														...bodyStyle$2,
+														display: "flex",
+														alignItems: "center",
+														justifyContent: "space-between",
+														flexWrap: "wrap",
+														gap: 8
+													},
+													children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+														style: {
+															display: "inline-flex",
+															alignItems: "center",
+															gap: 6
+														},
+														children: [
+															model.contextLimitSource === "codex-catalog" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+																href: OPENAI_CODEX_CONTEXT_LIMIT_SOURCE,
+																target: "_blank",
+																rel: "noopener noreferrer",
+																title: t("contextLimitSource"),
+																style: {
+																	color: "inherit",
+																	textDecorationStyle: "dotted",
+																	textUnderlineOffset: 3
+																},
+																children: t("contextMaximum")
+															}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+																title: t("contextLimitFallback"),
+																children: t("contextMaximum")
+															}),
+															/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+																style: {
+																	padding: "1px 6px",
+																	borderRadius: 4,
+																	background: "var(--dsw-alias-bg-layer-2, var(--dsw-alias-bg-layer-1))",
+																	fontVariantNumeric: "tabular-nums"
+																},
+																children: model.maxContextWindow
+															}),
+															/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: "tokens" })
+														]
+													}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+														type: "button",
+														title: `${t("contextDefault")}: ${model.contextWindow.toLocaleString()} tokens`,
+														style: {
+															...bodyStyle$2,
+															padding: "2px 0",
+															border: 0,
+															background: "transparent",
+															font: "inherit",
+															fontSize: 12,
+															cursor: "pointer",
+															textDecoration: "underline",
+															textUnderlineOffset: 3
+														},
+														onClick: () => {
+															const overrides = { ...draft.contextWindowOverrides };
+															delete overrides[model.id];
+															update("contextWindowOverrides", overrides);
+														},
+														children: t("contextReset")
+													})]
+												}),
+												/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+													type: "range",
+													min: 1,
+													max: model.maxContextWindow,
+													step: 1,
+													"aria-label": t("contextSlider"),
+													"aria-valuetext": invalidBudget ? t("contextInvalid") : `${effectiveBudget.toLocaleString()} tokens`,
+													style: {
+														width: "100%",
+														height: 20,
+														margin: 0,
+														accentColor: "var(--dsw-alias-label-secondary)"
+													},
+													value: invalidBudget ? model.contextWindow : effectiveBudget,
+													onChange: (event) => {
+														changeBudget(event.currentTarget.valueAsNumber);
+													}
+												}),
+												budget !== void 0 && budget > model.contextWindow && !invalidBudget ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+													style: bodyStyle$2,
+													role: "status",
+													children: t("contextAboveDefault")
+												}) : null,
+												invalidBudget ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+													style: errorStyle$2,
+													role: "alert",
+													children: [
+														t("contextInvalid"),
+														" (1–",
+														model.maxContextWindow.toLocaleString(),
+														")"
+													]
+												}) : null
 											]
-										})] })]
+										}) : null]
 									}, model.id);
 								})
 							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								style: bodyStyle$2,
+								children: t("contextWarning")
+							}),
+							!validContexts ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								style: errorStyle$2,
+								role: "alert",
+								children: t("contextInvalid")
+							}) : null,
 							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								style: { paddingTop: 4 },
 								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
@@ -530,7 +974,7 @@ window.__ModuleLoader__.load({
 								children: [
 									!draft.enableProxy ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 										type: "button",
-										style: buttonStyle$2,
+										style: buttonStyle$3,
 										onClick: () => {
 											detectProxy();
 										},
@@ -539,7 +983,7 @@ window.__ModuleLoader__.load({
 									}) : null,
 									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 										type: "button",
-										style: buttonStyle$2,
+										style: buttonStyle$3,
 										onClick: () => {
 											setManualProxy(true);
 										},
@@ -547,7 +991,7 @@ window.__ModuleLoader__.load({
 									}),
 									draft.enableProxy ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 										type: "button",
-										style: buttonStyle$2,
+										style: buttonStyle$3,
 										onClick: () => {
 											update("enableProxy", false);
 										},
@@ -579,7 +1023,7 @@ window.__ModuleLoader__.load({
 									}, candidate.proxyUrl)),
 									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 										type: "button",
-										style: buttonStyle$2,
+										style: buttonStyle$3,
 										onClick: () => {
 											setProxyDetection({ status: "idle" });
 										},
@@ -613,7 +1057,7 @@ window.__ModuleLoader__.load({
 										style: buttonsStyle,
 										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 											type: "button",
-											style: buttonStyle$2,
+											style: buttonStyle$3,
 											disabled: !isValidOpenAICodexProxyUrl(draft.proxyUrl) || manualProbeBusy,
 											onClick: () => {
 												testManualProxy();
@@ -837,7 +1281,7 @@ window.__ModuleLoader__.load({
 							style: buttonsStyle,
 							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
-								style: buttonStyle$2,
+								style: buttonStyle$3,
 								disabled: !dirty || busy,
 								onClick: discard,
 								children: t("discard")
@@ -865,7 +1309,10 @@ window.__ModuleLoader__.load({
 			"image-generation",
 			"oauth-history",
 			"model-visibility",
-			"proxy-connection"
+			"proxy-connection",
+			"models-account",
+			"context-budget",
+			"auto-review-probe"
 		];
 		function isHighlightKind(value) {
 			return typeof value === "string" && HIGHLIGHT_KINDS.includes(value);
@@ -1255,7 +1702,7 @@ window.__ModuleLoader__.load({
 			gap: 16,
 			flexWrap: "wrap"
 		};
-		const buttonStyle$1 = {
+		const buttonStyle$2 = {
 			display: "inline-flex",
 			alignItems: "center",
 			justifyContent: "center",
@@ -1273,10 +1720,10 @@ window.__ModuleLoader__.load({
 			cursor: "pointer"
 		};
 		const primaryButtonStyle$1 = {
-			...buttonStyle$1,
-			borderColor: "var(--dsw-alias-brand-primary)",
-			background: "var(--dsw-alias-brand-primary)",
-			color: "white"
+			...buttonStyle$2,
+			borderColor: "var(--dsw-alias-button-primary-fill)",
+			background: "var(--dsw-alias-button-primary-fill)",
+			color: "var(--dsw-alias-label-primary-foreground)"
 		};
 		const textButtonStyle = {
 			border: 0,
@@ -1370,7 +1817,10 @@ window.__ModuleLoader__.load({
 			"image-generation": "updateHighlightImageGeneration",
 			"oauth-history": "updateHighlightOauthHistory",
 			"model-visibility": "updateHighlightModelVisibility",
-			"proxy-connection": "updateHighlightProxyConnection"
+			"proxy-connection": "updateHighlightProxyConnection",
+			"models-account": "updateHighlightModelsAccount",
+			"context-budget": "updateHighlightContextBudget",
+			"auto-review-probe": "updateHighlightAutoReviewProbe"
 		};
 		const compatibilityTitleKeys = {
 			compatible: "compatibilityCompatibleTitle",
@@ -1574,7 +2024,7 @@ window.__ModuleLoader__.load({
 							children: compatibilityWarning ? t("updateHeading") : available ? t("newVersionAvailable", { version: snapshot.latestVersion }) : t("updateHeading")
 						}), overlay ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 							type: "button",
-							style: buttonStyle$1,
+							style: buttonStyle$2,
 							"aria-label": t("dismissUpdate"),
 							onClick: () => {
 								if (noticeKey !== void 0) updater.dismiss(noticeKey);
@@ -1663,7 +2113,7 @@ window.__ModuleLoader__.load({
 										children: agentPrompt
 									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 										type: "button",
-										style: buttonStyle$1,
+										style: buttonStyle$2,
 										onClick: () => {
 											copy();
 										},
@@ -1726,7 +2176,7 @@ window.__ModuleLoader__.load({
 						},
 						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 							type: "button",
-							style: buttonStyle$1,
+							style: buttonStyle$2,
 							disabled: snapshot.status === "checking",
 							onClick: () => {
 								updater.refresh(true);
@@ -1754,8 +2204,6 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/client/OpenAICodexSettings.tsx
 		/** Plugin-owned OpenAI Codex account controls used inside Plugin configuration. */
-		const POLL_INTERVAL_MS = 1e3;
-		const USAGE_POLL_INTERVAL_MS$1 = 6e4;
 		const pageStyle = {
 			display: "flex",
 			flexDirection: "column",
@@ -1811,7 +2259,7 @@ window.__ModuleLoader__.load({
 			fontWeight: 500,
 			color: "var(--dsw-alias-label-primary)"
 		};
-		const buttonStyle = {
+		const buttonStyle$1 = {
 			boxSizing: "border-box",
 			minHeight: 34,
 			padding: "6px 14px",
@@ -1824,10 +2272,10 @@ window.__ModuleLoader__.load({
 			cursor: "pointer"
 		};
 		const primaryButtonStyle = {
-			...buttonStyle,
-			borderColor: "var(--dsw-alias-brand-primary)",
-			background: "var(--dsw-alias-brand-primary)",
-			color: "white"
+			...buttonStyle$1,
+			borderColor: "var(--dsw-alias-button-primary-fill)",
+			background: "var(--dsw-alias-button-primary-fill)",
+			color: "var(--dsw-alias-label-primary-foreground)"
 		};
 		const errorStyle$1 = {
 			...bodyStyle,
@@ -1931,15 +2379,16 @@ window.__ModuleLoader__.load({
 				]
 			});
 		}
-		function UsageLimits({ usage, quotaError, t }) {
+		/** Quota rows shared by Models and Plugin settings. */
+		function UsageLimits({ usage, quotaError, t, heading = true }) {
 			const hasData = usage.rateLimits.length > 0 || usage.credits !== void 0 || usage.individualLimit !== void 0;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				style: quotaListStyle,
 				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+					heading ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
 						style: quotaTitleStyle,
 						children: t("usageLimits")
-					}),
+					}) : null,
 					usage.rateLimits.map((limit) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 						style: quotaGroupStyle,
 						children: limit.windows.map((window) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(QuotaBar, {
@@ -1973,6 +2422,7 @@ window.__ModuleLoader__.load({
 				]
 			});
 		}
+		/** Account indicator colors shared by the compact row and expanded controls. */
 		function dotStyle(status) {
 			return {
 				width: 9,
@@ -1982,133 +2432,157 @@ window.__ModuleLoader__.load({
 				background: status === "signed-in" ? "var(--dsw-alias-state-success-primary, #22a06b)" : status === "error" || status === "reauth-required" || status === "remote-web-origin-not-trusted" ? "var(--dsw-alias-state-error-primary, #d92d20)" : status === "signing-in" || status === "loading" ? "var(--dsw-alias-brand-primary, #1677ff)" : "var(--dsw-alias-label-dimmed, #9aa0a6)"
 			};
 		}
-		var AccountRequestError = class extends Error {
-			code;
-			constructor(code, message) {
-				super(message);
-				this.code = code;
-				this.name = "AccountRequestError";
-			}
-		};
-		async function jsonRequest(path, method = "GET", signal) {
-			const response = await fetch(path, {
-				method,
-				headers: { accept: "application/json" },
-				credentials: "same-origin",
-				...signal === void 0 ? {} : { signal }
+		/** Non-sensitive account state label for either settings presentation. */
+		function accountStatusLabel(status, t) {
+			return t({
+				"signed-in": "signedIn",
+				loading: "loadingAccount",
+				"signing-in": "signingIn",
+				"reauth-required": "reauthRequired",
+				"remote-web-origin-not-trusted": "remoteOriginTitle",
+				error: "requestFailed",
+				"signed-out": "signedOut"
+			}[status]);
+		}
+		/** Shared OAuth actions; Models uses shorter, task-oriented labels. */
+		function AccountActions({ t, store, snapshot, compact = false }) {
+			const { status, busy } = snapshot;
+			if (status.status === "loading" || status.status === "remote-web-origin-not-trusted") return null;
+			if (status.status === "signed-in") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+				type: "button",
+				style: buttonStyle$1,
+				disabled: busy,
+				onClick: () => {
+					store.signOut();
+				},
+				children: busy ? t("working") : t("logout")
+			});
+			if (status.status === "signing-in") return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				style: rowStyle,
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+					type: "button",
+					style: buttonStyle$1,
+					disabled: busy,
+					onClick: () => {
+						store.signIn();
+					},
+					children: busy ? t("working") : t(compact ? "continueAuthorization" : "reopenAuthorization")
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+					type: "button",
+					style: buttonStyle$1,
+					disabled: busy,
+					onClick: () => {
+						store.cancel();
+					},
+					children: t("cancelSignIn")
+				})]
+			});
+			const action = status.status === "error" || status.status === "reauth-required" ? t(compact ? "reauthorize" : "loginAgain") : t(compact ? "authorize" : "login");
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+				type: "button",
+				style: primaryButtonStyle,
+				disabled: busy,
+				onClick: () => {
+					store.signIn();
+				},
+				children: busy ? t("working") : action
 			});
-			const value = await response.json().catch(() => void 0);
-			if (!response.ok) {
-				const code = typeof value === "object" && value !== null && "error" in value && typeof value.error === "string" ? value.error : `HTTP ${response.status}`;
-				throw new AccountRequestError(code, code);
-			}
-			return value;
 		}
-		/** OpenAI Codex account status and OAuth actions. */
-		function OpenAICodexSettings({ t, configScope, updater, embedded = false }) {
-			if (t === void 0) throw new Error("OpenAI Codex settings requires its translation function");
-			const [status, setStatus] = (0, react.useState)({ status: "loading" });
-			const [busy, setBusy] = (0, react.useState)(false);
+		/** Recovery links, errors and trusted-origin guidance in either account entry. */
+		function AccountFeedback({ t, snapshot }) {
+			const { status, loginUrl } = snapshot;
 			const [copied, setCopied] = (0, react.useState)(false);
 			const [copyFailed, setCopyFailed] = (0, react.useState)(false);
-			const [loginUrl, setLoginUrl] = (0, react.useState)();
-			const mounted = (0, react.useRef)(true);
 			const trustedOriginCommand = `dsh plugin --profile web exec dsh-codex-connect trust-origin ${window.location.origin}`;
-			(0, react.useEffect)(() => {
-				mounted.current = true;
-				return () => {
-					mounted.current = false;
-				};
-			}, []);
-			const refresh = (0, react.useCallback)(async (signal) => {
-				try {
-					const nextStatus = await jsonRequest(OPENAI_CODEX_AUTH_STATUS_PATH, "GET", signal);
-					if (mounted.current && signal?.aborted !== true) setStatus(nextStatus);
-				} catch (error) {
-					if (mounted.current && signal?.aborted !== true) setStatus(error instanceof AccountRequestError && error.code === "remote-web-origin-not-trusted" ? { status: "remote-web-origin-not-trusted" } : {
-						status: "error",
-						message: error instanceof Error ? error.message : t("requestFailed")
-					});
-				}
-			}, [t]);
-			(0, react.useEffect)(() => {
-				const controller = new AbortController();
-				refresh(controller.signal);
-				return () => {
-					controller.abort();
-				};
-			}, [refresh]);
-			(0, react.useEffect)(() => {
-				const interval = status.status === "signing-in" ? POLL_INTERVAL_MS : status.status === "signed-in" ? USAGE_POLL_INTERVAL_MS$1 : void 0;
-				if (interval === void 0) return;
-				const controller = new AbortController();
-				const timer = window.setInterval(() => {
-					refresh(controller.signal);
-				}, interval);
-				return () => {
-					window.clearInterval(timer);
-					controller.abort();
-				};
-			}, [refresh, status.status]);
-			(0, react.useEffect)(() => {
-				if (status.status !== "signing-in") setLoginUrl(void 0);
-			}, [status.status]);
-			const signIn = async () => {
-				const popup = window.open("about:blank", "_blank");
-				if (popup !== null) popup.opener = null;
-				setBusy(true);
-				setStatus({ status: "signing-in" });
-				try {
-					const challenge = await jsonRequest(OPENAI_CODEX_AUTH_LOGIN_PATH, "POST");
-					if (!mounted.current) {
-						popup?.close();
-						return;
-					}
-					if (popup !== null) {
-						setLoginUrl(void 0);
-						popup.location.replace(challenge.url);
-					} else setLoginUrl(challenge.url);
-				} catch (error) {
-					popup?.close();
-					setLoginUrl(void 0);
-					if (mounted.current) setStatus(error instanceof AccountRequestError && error.code === "remote-web-origin-not-trusted" ? { status: "remote-web-origin-not-trusted" } : {
-						status: "error",
-						message: error instanceof Error ? error.message : t("requestFailed")
-					});
-				} finally {
-					if (mounted.current) setBusy(false);
-				}
-			};
 			const copyTrustedOriginCommand = async () => {
 				setCopyFailed(false);
 				try {
 					if (navigator.clipboard?.writeText === void 0) throw new Error("clipboard unavailable");
 					await navigator.clipboard.writeText(trustedOriginCommand);
-					if (mounted.current) setCopied(true);
+					setCopied(true);
 				} catch {
-					if (mounted.current) setCopyFailed(true);
-				}
-			};
-			const signOut = async () => {
-				setBusy(true);
-				try {
-					await jsonRequest(OPENAI_CODEX_AUTH_LOGOUT_PATH, "POST");
-					if (mounted.current) setStatus({ status: "signed-out" });
-				} catch (error) {
-					if (mounted.current) setStatus({
-						status: "error",
-						message: error instanceof Error ? error.message : t("requestFailed")
-					});
-				} finally {
-					if (mounted.current) setBusy(false);
+					setCopyFailed(true);
 				}
 			};
-			const label = status.status === "signed-in" ? t("signedIn") : status.status === "loading" ? t("loadingAccount") : status.status === "signing-in" ? t("signingIn") : status.status === "reauth-required" ? t("reauthRequired") : status.status === "remote-web-origin-not-trusted" ? t("remoteOriginTitle") : status.status === "error" ? t("requestFailed") : t("signedOut");
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+				loginUrl === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					style: {
+						display: "flex",
+						flexDirection: "column",
+						alignItems: "flex-start",
+						gap: 10
+					},
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: bodyStyle,
+						children: t("authorizationHelp")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+						href: loginUrl,
+						target: "_blank",
+						rel: "noopener noreferrer",
+						style: {
+							...primaryButtonStyle,
+							display: "inline-flex",
+							alignItems: "center",
+							textDecoration: "none"
+						},
+						children: t("openLoginInBrowser")
+					})]
+				}),
+				status.status === "error" || status.status === "reauth-required" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+					style: errorStyle$1,
+					children: status.message
+				}) : null,
+				status.status === "remote-web-origin-not-trusted" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					style: {
+						display: "flex",
+						flexDirection: "column",
+						gap: 10
+					},
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: errorStyle$1,
+							children: t("remoteOriginDescription")
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: bodyStyle,
+							children: t("remoteOriginCommandHelp")
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+							style: commandStyle,
+							children: trustedOriginCommand
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: rowStyle,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								style: buttonStyle$1,
+								onClick: () => {
+									copyTrustedOriginCommand();
+								},
+								children: copied ? t("remoteOriginCopied") : t("remoteOriginCopy")
+							}), copyFailed ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								style: errorStyle$1,
+								children: t("remoteOriginCopyFailed")
+							}) : null]
+						})
+					]
+				}) : null
+			] });
+		}
+		/** OpenAI Codex account status and OAuth actions. */
+		function OpenAICodexSettings({ t, configScope, updater, account, embedded = false, accountOnly = false }) {
+			if (t === void 0) throw new Error("OpenAI Codex settings requires its translation function");
+			const [localAccount] = (0, react.useState)(() => new OpenAICodexAccountStore());
+			const store = account ?? localAccount;
+			const snapshot = (0, react.useSyncExternalStore)(store.subscribe, store.getSnapshot);
+			const { status } = snapshot;
+			const titleId = (0, react.useId)();
+			const label = accountStatusLabel(status.status, t);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 				style: embedded ? embeddedPageStyle : pageStyle,
-				...embedded ? { "aria-label": t("title") } : { "aria-labelledby": "openai-codex-settings-title" },
+				...embedded ? { "aria-label": t("title") } : { "aria-labelledby": titleId },
 				children: [embedded ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h2", {
-					id: "openai-codex-settings-title",
+					id: titleId,
 					style: titleStyle,
 					children: t("title")
 				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
@@ -2120,7 +2594,7 @@ window.__ModuleLoader__.load({
 				})] }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 					style: embedded ? embeddedCardStyle : cardStyle$1,
 					children: [
-						updater === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(OpenAICodexUpdateSettings, {
+						accountOnly || updater === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(OpenAICodexUpdateSettings, {
 							t,
 							updater
 						}),
@@ -2137,92 +2611,25 @@ window.__ModuleLoader__.load({
 									"aria-hidden": "true",
 									style: dotStyle(status.status)
 								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: label })]
-							}), status.status === "loading" || status.status === "remote-web-origin-not-trusted" ? null : status.status === "signed-in" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-								type: "button",
-								style: buttonStyle,
-								disabled: busy,
-								onClick: () => {
-									signOut();
-								},
-								children: busy ? t("working") : t("logout")
-							}) : status.status === "signing-in" && loginUrl !== void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-								type: "button",
-								style: primaryButtonStyle,
-								disabled: busy,
-								onClick: () => {
-									signIn();
-								},
-								children: busy ? t("working") : status.status === "error" || status.status === "reauth-required" ? t("loginAgain") : t("login")
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountActions, {
+								t,
+								store,
+								snapshot
 							})]
 						}),
-						loginUrl === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							style: {
-								display: "flex",
-								flexDirection: "column",
-								alignItems: "flex-start",
-								gap: 10
-							},
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-								style: bodyStyle,
-								children: t("popupBlockedFallback")
-							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
-								href: loginUrl,
-								target: "_blank",
-								rel: "noopener noreferrer",
-								style: {
-									...primaryButtonStyle,
-									display: "inline-flex",
-									alignItems: "center",
-									textDecoration: "none"
-								},
-								children: t("openLoginInBrowser")
-							})]
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountFeedback, {
+							t,
+							snapshot
 						}),
-						status.status === "error" || status.status === "reauth-required" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-							style: errorStyle$1,
-							children: status.message
-						}) : null,
-						status.status === "remote-web-origin-not-trusted" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							style: {
-								display: "flex",
-								flexDirection: "column",
-								gap: 10
-							},
-							children: [
-								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-									style: errorStyle$1,
-									children: t("remoteOriginDescription")
-								}),
-								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-									style: bodyStyle,
-									children: t("remoteOriginCommandHelp")
-								}),
-								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
-									style: commandStyle,
-									children: trustedOriginCommand
-								}),
-								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-									style: rowStyle,
-									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-										type: "button",
-										style: buttonStyle,
-										onClick: () => {
-											copyTrustedOriginCommand();
-										},
-										children: copied ? t("remoteOriginCopied") : t("remoteOriginCopy")
-									}), copyFailed ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										style: errorStyle$1,
-										children: t("remoteOriginCopyFailed")
-									}) : null]
-								})
-							]
-						}) : null,
 						status.status === "signed-in" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(UsageLimits, {
 							usage: status.usage,
 							...status.quotaError === void 0 ? {} : { quotaError: status.quotaError },
 							t
 						}) : null,
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(OpenAICodexConfiguration, {
+						accountOnly ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: bodyStyle,
+							children: t("modelsAccountHelp")
+						}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(OpenAICodexConfiguration, {
 							t,
 							...configScope === void 0 ? {} : { scope: configScope }
 						})
@@ -2300,7 +2707,7 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/** Render account management as one expandable Plugin configuration card. */
-		function OpenAICodexPluginCard({ t, configScope, updater }) {
+		function OpenAICodexPluginCard({ t, configScope, updater, account }) {
 			if (t === void 0) throw new Error("OpenAI Codex plugin card requires its translation function");
 			const [open, setOpen] = (0, react.useState)(false);
 			const title = t("title");
@@ -2331,6 +2738,7 @@ window.__ModuleLoader__.load({
 					style: cardBodyStyle,
 					children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(OpenAICodexSettings, {
 						t,
+						...account === void 0 ? {} : { account },
 						...updater === void 0 ? {} : { updater },
 						embedded: true,
 						...configScope === void 0 ? {} : { configScope }
@@ -2761,8 +3169,24 @@ window.__ModuleLoader__.load({
 		/** English copy for the OpenAI Codex Plugin configuration card. */
 		const en = {
 			title: "Codex Connect",
+			modelsProviderName: "Openai-Codex",
+			modelsProviderSupport: "Powered by the Codex Connect plugin.",
 			intro: "Use your ChatGPT subscription in dsh, with optional GPT Image generation and no API key.",
 			accountHeading: "ChatGPT account",
+			manageAccount: "Manage",
+			authorize: "Authorize",
+			continueAuthorization: "Continue authorization",
+			reauthorize: "Reauthorize",
+			viewQuota: "View quota",
+			hideQuota: "Hide quota",
+			moreSettings: "More settings",
+			moreSettingsTitle: "Codex Connect settings",
+			closeSettings: "Close",
+			settingsSaveHint: "Save applies changes to both settings entries. Closing discards unsaved changes.",
+			reopenAuthorization: "Reopen authorization",
+			cancelSignIn: "Cancel sign-in",
+			authorizationHelp: "You can reopen the authorization page or cancel and start again. Cancelling does not sign out an existing account.",
+			modelsAccountHelp: "Proxy, model visibility, search and image options remain in Settings → Plugins → Codex Connect, or open them here:",
 			expand: "Expand settings",
 			collapse: "Collapse settings",
 			loadingAccount: "Loading account…",
@@ -2810,6 +3234,20 @@ window.__ModuleLoader__.load({
 			modelCatalogIntro: "Choose which Codex models appear in model selectors. Existing conversations can continue using a hidden model.",
 			modelCatalogLoading: "Loading available models…",
 			modelCatalogFailed: "Available models could not be loaded.",
+			modelContext: "Context",
+			contextDefault: "Catalog default",
+			contextCustom: "Custom",
+			contextAdjust: "Adjust",
+			contextHide: "Hide adjustment",
+			contextTokens: "Context length",
+			contextReset: "Restore default",
+			contextSlider: "Adjust context budget",
+			contextMaximum: "Configuration limit",
+			contextLimitSource: "Source: official Codex configuration catalog (2026-08-28)",
+			contextLimitFallback: "No higher configuration limit confirmed; capped at the installed catalog default.",
+			contextAboveDefault: "Above the catalog default: larger requests may consume more quota or be rejected by your account or route. This plugin has not capacity-tested this range.",
+			contextWarning: "Context overrides change client budgeting, not server capacity. An excessive value can cause requests to fail. Hiding a model keeps its budget. Changes apply after Save.",
+			contextInvalid: "Enter a whole-number budget within the model’s configuration range, or choose Restore default.",
 			capabilitiesHeading: "Optional capabilities",
 			capabilitiesIntro: "Choose which extra Codex capabilities this dsh profile may register.",
 			networkHeading: "Network connection",
@@ -2945,6 +3383,9 @@ window.__ModuleLoader__.load({
 			updateHighlightOauthHistory: "Added safer session-history migration and a sign-in fallback when the account needs to reconnect.",
 			updateHighlightModelVisibility: "You can now choose which Codex models appear in model selectors.",
 			updateHighlightProxyConnection: "Added opt-in Codex proxy detection with explicit confirmation and a visible direct-connection fallback.",
+			updateHighlightModelsAccount: "Added an Openai-Codex account card in Models settings for authorization, quota, and shared plugin settings.",
+			updateHighlightContextBudget: "Added bounded per-model context budget controls while preserving each catalog default until you save an override.",
+			updateHighlightAutoReviewProbe: "Added an explicit, synthetic probe for checking whether the hidden Codex approval reviewer is available without enabling it.",
 			viewTechnicalDetails: "View technical details",
 			hideTechnicalDetails: "Hide technical details",
 			technicalDetailsHeading: "Technical changes",
@@ -2970,8 +3411,24 @@ window.__ModuleLoader__.load({
 		/** Chinese copy for the OpenAI Codex Plugin configuration card. */
 		const zh = {
 			title: "Codex Connect",
+			modelsProviderName: "Openai-Codex",
+			modelsProviderSupport: "由 Codex Connect 插件提供支持。",
 			intro: "使用 ChatGPT 订阅在 dsh 中调用模型，并可使用 GPT Image 生成图片，无需 API Key。",
 			accountHeading: "ChatGPT 账户",
+			manageAccount: "管理",
+			authorize: "授权",
+			continueAuthorization: "继续授权",
+			reauthorize: "重新授权",
+			viewQuota: "查看额度",
+			hideQuota: "收起额度",
+			moreSettings: "更多设置",
+			moreSettingsTitle: "Codex Connect 设置",
+			closeSettings: "关闭",
+			settingsSaveHint: "保存后两处设置同步生效；关闭将放弃未保存的修改。",
+			reopenAuthorization: "重新打开授权",
+			cancelSignIn: "取消登录",
+			authorizationHelp: "可以重新打开授权页，或取消后重试。取消登录不会退出已有账户。",
+			modelsAccountHelp: "代理、模型显示、搜索和图片选项仍可在“设置 → 插件 → Codex Connect”中管理，也可直接打开：",
 			expand: "展开设置",
 			collapse: "折叠设置",
 			loadingAccount: "正在加载账户信息…",
@@ -3019,6 +3476,20 @@ window.__ModuleLoader__.load({
 			modelCatalogIntro: "选择要在模型选择器中显示的 Codex 模型；隐藏模型后，已有会话仍可继续使用。",
 			modelCatalogLoading: "正在加载可用模型…",
 			modelCatalogFailed: "无法加载可用模型。",
+			modelContext: "上下文",
+			contextDefault: "目录默认",
+			contextCustom: "自定义",
+			contextAdjust: "调整",
+			contextHide: "收起调整",
+			contextTokens: "上下文长度",
+			contextReset: "恢复默认",
+			contextSlider: "调整上下文预算",
+			contextMaximum: "配置上限",
+			contextLimitSource: "依据：Codex 官方配置目录（2026-08-28）",
+			contextLimitFallback: "尚未确认更高配置上限，暂以已安装目录的默认值为上限。",
+			contextAboveDefault: "已超过目录默认值：请求可能消耗更多额度，或被当前账号、通道拒绝。本插件未对该范围进行容量实测。",
+			contextWarning: "调整的是本地上下文预算，不会扩大服务端容量；设置过高可能导致请求失败。隐藏模型会保留其预算，修改在保存后生效。",
+			contextInvalid: "请输入模型配置范围内的整数预算，或点击“恢复默认”。",
 			capabilitiesHeading: "可选能力",
 			capabilitiesIntro: "选择允许此 dsh profile 注册哪些额外的 Codex 能力。",
 			networkHeading: "网络连接",
@@ -3154,6 +3625,9 @@ window.__ModuleLoader__.load({
 			updateHighlightOauthHistory: "增加更安全的会话历史迁移，并在账号需要重新登录时提供备用登录路径。",
 			updateHighlightModelVisibility: "现在可以选择哪些 Codex 模型显示在模型选择菜单中。",
 			updateHighlightProxyConnection: "增加可选的 Codex 代理检测，启用前需要明确确认，并始终保留直连回退入口。",
+			updateHighlightModelsAccount: "在模型设置中增加 Openai-Codex 账户卡，用于授权、查看额度和打开共享插件设置。",
+			updateHighlightContextBudget: "增加有范围限制的逐模型上下文预算设置；保存覆盖值前继续使用各模型的目录默认值。",
+			updateHighlightAutoReviewProbe: "增加显式的合成探针，用于检查隐藏的 Codex 审批 reviewer 是否可用，但不会启用该能力。",
 			viewTechnicalDetails: "查看完整技术说明",
 			hideTechnicalDetails: "收起技术说明",
 			technicalDetailsHeading: "技术变更",
@@ -3270,7 +3744,7 @@ window.__ModuleLoader__.load({
 		//#region src/client/CodexImageGallery.tsx
 		/** Self-contained result-image gallery for the tool-call view.
 		*
-		* DSH 0.1.1-rc.2 keeps the attachment package's React atoms behind its
+		* DSH keeps the attachment package's React atoms behind its
 		* conversation slots. A tool-call view cannot render those slots, so this
 		* gallery owns only the durable-image presentation it needs and receives all
 		* stateful work through props.
@@ -3441,7 +3915,6 @@ window.__ModuleLoader__.load({
 				open: true,
 				onClose,
 				title: labels.dialog,
-				closeLabel: labels.close,
 				headless: true,
 				children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 					ref: lightbox,
@@ -4340,7 +4813,232 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/version.ts
-		const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.21";
+		const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.23";
+		//#endregion
+		//#region src/client/OpenAICodexModelsCard.tsx
+		/** Compact Models account entry with quota disclosure and shared configuration. */
+		const buttonStyle = {
+			padding: "6px 14px",
+			border: "1px solid var(--dsw-alias-border-l2)",
+			borderRadius: 999,
+			background: "transparent",
+			color: "inherit",
+			font: "inherit",
+			fontSize: 14,
+			cursor: "pointer"
+		};
+		const secondaryStyle = {
+			fontSize: 12,
+			lineHeight: "18px",
+			color: "var(--dsw-alias-label-secondary)"
+		};
+		/** Native modality contains keyboard focus and restores it to More settings on close. */
+		function ConfigurationDialog({ t, configScope, onClose }) {
+			const dialog = (0, react.useRef)(null);
+			const titleId = (0, react.useId)();
+			(0, react.useEffect)(() => {
+				const element = dialog.current;
+				element?.showModal();
+				return () => {
+					element?.close();
+				};
+			}, []);
+			const close = () => {
+				dialog.current?.close();
+				onClose();
+			};
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("dialog", {
+				ref: dialog,
+				"aria-labelledby": titleId,
+				onCancel: (event) => {
+					event.preventDefault();
+					close();
+				},
+				onKeyDown: (event) => {
+					if (event.key !== "Escape") return;
+					event.stopPropagation();
+					event.preventDefault();
+					close();
+				},
+				style: {
+					boxSizing: "border-box",
+					width: "min(720px, calc(100vw - 32px))",
+					maxHeight: "calc(100dvh - 32px)",
+					overflowY: "auto",
+					padding: 20,
+					border: "1px solid var(--dsw-alias-border-l2)",
+					borderRadius: 12,
+					background: "var(--dsw-alias-bg-layer-1, white)",
+					color: "var(--dsw-alias-label-primary)",
+					margin: "auto"
+				},
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						style: {
+							display: "flex",
+							alignItems: "center",
+							justifyContent: "space-between",
+							gap: 12
+						},
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h2", {
+							id: titleId,
+							style: {
+								margin: 0,
+								fontSize: 18
+							},
+							children: t("moreSettingsTitle")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							style: buttonStyle,
+							onClick: close,
+							children: t("closeSettings")
+						})]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: secondaryStyle,
+						children: t("settingsSaveHint")
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(OpenAICodexConfiguration, {
+						t,
+						...configScope === void 0 ? {} : { scope: configScope }
+					})
+				]
+			});
+		}
+		function OpenAICodexModelsCard({ t, account, configScope }) {
+			const [expanded, setExpanded] = (0, react.useState)(false);
+			const [settingsOpen, setSettingsOpen] = (0, react.useState)(false);
+			const detailsId = (0, react.useId)();
+			const snapshot = (0, react.useSyncExternalStore)(account.subscribe, account.getSnapshot);
+			const { status } = snapshot;
+			const label = accountStatusLabel(status.status, t);
+			(0, react.useEffect)(() => {
+				if (status.status !== "signed-in") setExpanded(false);
+			}, [status.status]);
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				style: {
+					border: "1px solid var(--dsw-alias-border-l2)",
+					borderRadius: 12,
+					padding: "12px 14px",
+					color: "var(--dsw-alias-label-primary)"
+				},
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						style: {
+							display: "flex",
+							alignItems: "center",
+							flexWrap: "wrap",
+							gap: 10
+						},
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								style: {
+									fontSize: 14,
+									lineHeight: "22px",
+									fontWeight: 500
+								},
+								children: t("modelsProviderName")
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								"aria-hidden": "true",
+								style: {
+									...dotStyle(status.status),
+									width: 8,
+									height: 8
+								}
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								role: "status",
+								style: {
+									...secondaryStyle,
+									flex: 1
+								},
+								children: label
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								style: {
+									display: "flex",
+									flexWrap: "wrap",
+									gap: 8,
+									marginLeft: "auto"
+								},
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountActions, {
+									t,
+									store: account,
+									snapshot,
+									compact: true
+								}), status.status === "signed-in" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									"aria-expanded": expanded,
+									"aria-controls": detailsId,
+									onClick: () => {
+										setExpanded(!expanded);
+									},
+									style: buttonStyle,
+									children: t(expanded ? "hideQuota" : "viewQuota")
+								})]
+							})
+						]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						style: {
+							...secondaryStyle,
+							marginTop: 4
+						},
+						children: t("modelsProviderSupport")
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountFeedback, {
+						t,
+						snapshot
+					}),
+					expanded && status.status === "signed-in" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						id: detailsId,
+						style: {
+							borderTop: "1px solid var(--dsw-alias-border-l2)",
+							marginTop: 12,
+							paddingTop: 12
+						},
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(UsageLimits, {
+							t,
+							usage: status.usage,
+							heading: false,
+							...status.quotaError === void 0 ? {} : { quotaError: status.quotaError }
+						})
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						style: {
+							...secondaryStyle,
+							marginTop: 12
+						},
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("modelsAccountHelp") }),
+							" ",
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								onClick: () => {
+									setSettingsOpen(true);
+								},
+								style: {
+									...buttonStyle,
+									padding: 0,
+									border: 0,
+									fontSize: "inherit",
+									textDecoration: "underline"
+								},
+								children: t("moreSettings")
+							})
+						]
+					}),
+					settingsOpen && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ConfigurationDialog, {
+						t,
+						...configScope === void 0 ? {} : { configScope },
+						onClose: () => {
+							setSettingsOpen(false);
+						}
+					})
+				]
+			});
+		}
 		//#endregion
 		//#region src/client/index.tsx
 		/** Stable browser-plugin name. */
@@ -4351,6 +5049,7 @@ window.__ModuleLoader__.load({
 			"locale",
 			"connection",
 			"remote",
+			"remote.session",
 			"settingsScope",
 			"sessions"
 		];
@@ -4358,6 +5057,10 @@ window.__ModuleLoader__.load({
 		function apply(ctx) {
 			const namespace = "settings.openai-codex";
 			const updater = new OpenAICodexUpdateStore(CODEX_CONNECT_VERSION);
+			const account = new OpenAICodexAccountStore();
+			ctx.effect(() => () => {
+				account.dispose();
+			}, "dsh-codex-connect: account observation");
 			ctx.effect(() => {
 				updater.refresh();
 				return () => {
@@ -4379,9 +5082,20 @@ window.__ModuleLoader__.load({
 				inject: () => ({
 					t,
 					configScope,
-					updater
+					updater,
+					account
 				})
 			}, OpenAICodexPluginCard));
+			ctx.slots.inject("settings.models.footer", () => ctx.slots.register({
+				name: "settings.models.footer",
+				id: "dsh-codex-connect-account",
+				order: 100,
+				inject: () => ({
+					t,
+					account,
+					configScope
+				})
+			}, OpenAICodexModelsCard));
 			ctx.slots.inject("shell.overlay", () => ctx.slots.register({
 				name: "shell.overlay",
 				id: "dsh-codex-connect-update",